Skip to content
  1. Jun 15, 2020
  2. Jun 11, 2020
    • Thomas Woerner's avatar
      galaxy.yml: Remove license_file · 3487efcf
      Thomas Woerner authored
      Galaxy refuses to import a collection that has license and license_file set
      in galaxy.yml. Therefore license_file has been removed.
      3487efcf
    • Thomas Woerner's avatar
      Merge pull request #287 from rjeffman/fix_hbac_sudo_rule_hostcategory · 695ad630
      Thomas Woerner authored
      Fixes attempt to create rules with members when category is `all`.
      v0.1.11
      695ad630
    • Rafael Guterres Jeffman's avatar
      Fixes attempt to create rules with members when category is `all`. · cf54d139
      Rafael Guterres Jeffman authored
      Current implementation of hbacrule and sudorule allow for a new rule
      creation script to be partialy successful when a member is provided and
      the respective member category is set to `all` (either users, hosts,
      services, commands, and their group counterparts).
      
      Since the creation of the rule is independent of the adittion of members,
      the rule is succesfully created, but member addition fails, leaving with
      a created rule that has no members on it.
      
      This patch fixes both modules by verifying if user, host, service or
      commands (and groups of members) are being added if the corresponding
      category is set to `all`, when the state is `present` and the action is
      not `member`. If so, it fails before the rule is created.
      cf54d139
    • Rafael Guterres Jeffman's avatar
      Merge pull request #283 from seocam/fix-test-entry-point · ae471de0
      Rafael Guterres Jeffman authored
      Fix all tests entry point
      ae471de0
    • Rafael Guterres Jeffman's avatar
    • Rafael Guterres Jeffman's avatar
      Merge pull request #298 from samuelvl/fix_ipareplicas_ca_less · 26444b42
      Rafael Guterres Jeffman authored
      Install server and replicas without CA
      26444b42
    • Thomas Woerner's avatar
      Merge pull request #296 from rjeffman/fix_dnsconfig_error_message · 1d196bca
      Thomas Woerner authored
      Fixes error handling on dnsconfig module.
      1d196bca
    • Rafael Guterres Jeffman's avatar
      Fixes error handling on dnsconfig module. · d73b6e39
      Rafael Guterres Jeffman authored
      This fixes reporting errors on dnsconfig module and add some tests
      to verify that invalid IP addresses cannot be used as forwarders.
      d73b6e39
    • Thomas Woerner's avatar
      Merge pull request #182 from chr15p/config · b80d6b06
      Thomas Woerner authored
      add an ipaconfig module
      b80d6b06
    • Thomas Woerner's avatar
      Merge pull request #235 from rjeffman/dnsrecord · 5a290565
      Thomas Woerner authored
      New dnsrecord management module.
      5a290565
    • Thomas Woerner's avatar
      Merge pull request #275 from rjeffman/vault_add_state_retrieved · 40048c78
      Thomas Woerner authored
      Vault add state retrieved
      40048c78
    • Rafael Guterres Jeffman's avatar
      Add support for missing attributes, and enhance ipaconfig tests. · f7ca62e5
      Rafael Guterres Jeffman authored
      This patch add support for the attributes `maxtostname` and
      `ca_renewal_master_server` attributes that were missing and
      also provide a more complete set of tests.
      f7ca62e5
    • Rafael Guterres Jeffman's avatar
      Split vault tests in different files. · da87f164
      Rafael Guterres Jeffman authored
      This change split vault tests in several files, organized by vault
      type and operation (vault vs. member) so that it is easier to add
      new tests for issues and verify if tests are missing.
      da87f164
    • Rafael Guterres Jeffman's avatar
      Add state `retrieved` to ipavault to retrieve vault stored data. · 0bcb4eaf
      Rafael Guterres Jeffman authored
      This patch adds support for retrieving data stored in an IPA vault by
      adding a new valid state for ipavault: `retrieved`.
      
      To allow the retrieval of data from assymetric vaults, the attributes
      `private_key`, `private_key_files` and `out` were also added to the
      module.
      
      The private key files, `private.pem`, should be paired with the already
      existing `public.pem` public key files.
      
      Tests were updated to reflect changes and two new playbooks were added:
      
          playbooks/vault/retrive-data-asymmetric-vault.yml
          playbooks/vault/retrive-data-symmetric-vault.yml
      0bcb4eaf
    • Rafael Guterres Jeffman's avatar
      Fixes password behavior on Vault module. · 04564248
      Rafael Guterres Jeffman authored
      This patch fixes handling of password and public_key files, parameter
      validation depending on vault type, usage of `salt` attribute and data
      retrieval.
      
      Tests were updated to reflect the changes.
      
      New example playbooks are added:
      
          playbooks/vault/vault-is-present-with-password-file.yml
          playbooks/vault/vault-is-present-with-public-key-file.yml
      04564248
    • Thomas Woerner's avatar
      ipahostgroup: Add support for group membership management · ff03b315
      Thomas Woerner authored
      A group membership manager is a user or a group that can add members to
      a group or remove members from a hostgroup.
      
      This is related to https://pagure.io/freeipa/issue/8114
      
      New parameters have been added to the module:
      - `membermanager_user`: List of member manager users assigned to this
        group. Only usable with IPA versions 4.8.4 and up.
      - `membermanager_group`: List of member manager groups assigned to this
        group. Only usable with IPA versions 4.8.4 and up.
      
      These parameters behave like member parameters.
      
      A new test has been added:
      - tests/hostgroup/test_hostgroup_membermanager.yml
      ff03b315
    • Rafael Guterres Jeffman's avatar
      New dnsrecord management module. · 0abfe8ab
      Rafael Guterres Jeffman authored
      There is a new dnsrecord managem module placed in the plugins folder:
      
          plugins/modules/ipadnsrecord.py
      
      The dnsrecord module allows management of DNS records and is as compatible
      as possible with the Ansible upstream `ipa_dnsrecord` module, but provide
      some other features like multiple record management in one execution,
      support for more DNS record types, and more.
      
      Here is the documentation for the module:
      
          README-dnsrecord
      
      New example playbooks have been added:
      
          playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml
          playbooks/dnsrecord/ensure-dnsrecord-is-present.yml
          playbooks/dnsrecord/ensure-presence-multiple-records.yml
          playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml
          playbooks/dnsrecord/ensure-multiple-A-records-are-present.yml
          playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml
          playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml
          playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml
          playbooks/dnsrecord/ensure-CNAME-record-is-present.yml
          playbooks/dnsrecord/ensure-MX-record-is-present.yml
          playbooks/dnsrecord/ensure-PTR-record-is-present.yml
          playbooks/dnsrecord/ensure-SRV-record-is-present.yml
          playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml
          playbooks/dnsrecord/ensure-TLSA-record-is-present.yml
          playbooks/dnsrecord/ensure-TXT-record-is-present.yml
          playbooks/dnsrecord/ensure-URI-record-is-present.yml
      
      New tests for the module can be found at:
      
          tests/dnsrecord/test_dnsrecord.yml
          tests/dnsrecord/test_compatibility_with_ansible_module.yml
          tests/dnsrecord/test_dnsrecord_full_records.yml
      0abfe8ab
  3. Jun 10, 2020
  4. Jun 09, 2020
  5. Jun 08, 2020
  6. Jun 06, 2020