Blame SPECS/rhel-system-roles.spec

758e32
# NOTE: Even though ansible-core is in 8.6, it is only available
758e32
# at *runtime*, not at *buildtime* - so we can't have
758e32
# ansible-core as a build_dep on RHEL8
47faef
%if 0%{?fedora} || 0%{?rhel} >= 9
47faef
%bcond_without ansible
91e1a8
%if 0%{?fedora}
91e1a8
BuildRequires: ansible-packaging
47faef
%else
91e1a8
BuildRequires: ansible-core >= 2.11.0
47faef
%endif
91e1a8
%else
91e1a8
%bcond_with ansible
d018ad
%endif
d018ad
5611eb
%bcond_with collection_artifact
5611eb
845d78
%if 0%{?fedora} || 0%{?rhel} >= 8
845d78
%bcond_without html
845d78
%else
845d78
# pandoc is not supported in rhel 7 and older,
845d78
# which is needed for converting .md to .html.
845d78
%bcond_with html
845d78
%endif
845d78
921f83
%if 0%{?rhel}
921f83
Name: rhel-system-roles
921f83
%else
921f83
Name: linux-system-roles
921f83
%endif
845d78
Url: https://github.com/linux-system-roles
921f83
Summary: Set of interfaces for unified system management
91e1a8
Version: 1.21.0
695107
Release: 0.17%{?dist}
921f83
47faef
License: GPLv3+ and MIT and BSD and Python
8d0a7f
%global _pkglicensedir %{_licensedir}/%{name}
91e1a8
%global roleinstprefix %{name}.
8d0a7f
%if 0%{?rhel}
d018ad
%global collection_namespace redhat
d018ad
%global collection_name rhel_system_roles
d018ad
%else
d018ad
%global collection_namespace fedora
d018ad
%global collection_name linux_system_roles
921f83
%endif
921f83
d018ad
%global collection_version %{version}
d018ad
d018ad
# Helper macros originally from macros.ansible by Igor Raits <ignatenkobrain>
91e1a8
# On RHEL, not available, so we must define those macros locally
91e1a8
# On Fedora, provided by ansible-packager
d018ad
# Not used (yet). Could be made to point to AH in RHEL - but what about CentOS Stream?
d018ad
#%%{!?ansible_collection_url:%%define ansible_collection_url() https://galaxy.ansible.com/%%{collection_namespace}/%%{collection_name}}
91e1a8
%if 0%{?rhel}
91e1a8
Provides: ansible-collection(%{collection_namespace}.%{collection_name}) = %{collection_version}
91e1a8
%global ansible_collection_files %{_datadir}/ansible/collections/ansible_collections/%{collection_namespace}/
91e1a8
%define ansible_roles_dir %{_datadir}/ansible/roles
91e1a8
%if %{without ansible}
91e1a8
# Untar and copy everything instead of galaxy-installing the built artifact when ansible is not available
91e1a8
%define ansible_collection_build() tar -cf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz .
91e1a8
%define ansible_collection_install() mkdir -p %{buildroot}%{ansible_collection_files}%{collection_name}; (cd %{buildroot}%{ansible_collection_files}%{collection_name}; tar -xf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz)
845d78
%else
91e1a8
%define ansible_collection_build() ansible-galaxy collection build
91e1a8
%define ansible_collection_install() ansible-galaxy collection install -n -p %{buildroot}%{_datadir}/ansible/collections %{collection_namespace}-%{collection_name}-%{version}.tar.gz
845d78
%endif
845d78
%endif
91e1a8
# be compatible with the usual Fedora Provides:
91e1a8
Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{collection_version}-%{release}
845d78
758e32
# ansible-core is in rhel 8.6 and later - default to ansible-core, but allow
758e32
# the use of ansible if present - we may revisit this if the automatic dependency
758e32
# generator is added to ansible-core in RHEL
758e32
# Fedora - the automatic generator will add this - no need to explicit declare
758e32
# it in the spec file
758e32
# EL7 - no dependency on ansible because there is no ansible in el7 - user is
758e32
# responsible for knowing they have to install ansible
758e32
%if 0%{?rhel} >= 8
758e32
Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)
758e32
%endif
d018ad
921f83
# For each role, call either defcommit() or deftag(). The other macros
921f83
# (%%id and %%shortid) can be then used in the same way in both cases.
921f83
# This way  the rest of the spec file des not need to know whether we are
921f83
# dealing with a tag or a commit.
7bd08a
%global archiveext tar.gz
8d0a7f
# list of role names
8d0a7f
%global rolenames %nil
8d0a7f
# list of assignments that can be used to populate a bash associative array variable
8d0a7f
%global rolestodir %nil
7bd08a
%define getarchivedir() %(p=%{basename:%{S:%{1}}}; echo ${p%%.%{archiveext}})
7bd08a
7bd08a
%define defcommit() %{expand:%%global ref%{1} %{2}
7bd08a
%%global shortcommit%{1} %%(c=%%{ref%{1}}; echo ${c:0:7})
8d0a7f
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
7bd08a
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
845d78
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
8d0a7f
%%global rolenames %%{?rolenames} %%{rolename%{1}}
8d0a7f
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
8d0a7f
%%global rolestodir %%{?rolestodir} %{roletodir%{1}}
921f83
}
921f83
7bd08a
%define deftag() %{expand:%%global ref%{1} %{2}
8d0a7f
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
7bd08a
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
845d78
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
8d0a7f
%%global rolenames %%{?rolenames} %%{rolename%{1}}
8d0a7f
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
8d0a7f
%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}
921f83
}
921f83
a7af0c
%global mainid d6a8e0167e9ed8d089093b7ead1e298241b534e1
a7af0c
Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz
a7af0c
a7af0c
# BEGIN AUTOGENERATED SOURCES
921f83
%global rolename1 postfix
a7af0c
%deftag 1 1.3.3
921f83
921f83
%global rolename2 selinux
695107
%deftag 2 1.5.6
921f83
921f83
%global rolename3 timesync
a7af0c
%deftag 3 1.7.2
921f83
d018ad
%global rolename4 kdump
a7af0c
%deftag 4 1.2.6
d018ad
921f83
%global rolename5 network
a7af0c
%deftag 5 1.11.1
921f83
921f83
%global rolename6 storage
4277d7
%deftag 6 1.9.6
921f83
921f83
%global rolename7 metrics
a7af0c
%deftag 7 1.8.1
921f83
921f83
%global rolename8 tlog
a7af0c
%deftag 8 1.2.11
921f83
921f83
%global rolename9 kernel_settings
a7af0c
%deftag 9 1.1.11
921f83
921f83
%global rolename10 logging
a7af0c
%deftag 10 1.11.5
921f83
921f83
%global rolename11 nbde_server
695107
%deftag 11 1.3.3
921f83
921f83
%global rolename12 nbde_client
4277d7
%deftag 12 1.2.10
921f83
921f83
%global rolename13 certificate
4277d7
%deftag 13 1.1.9
7bd08a
7bd08a
%global rolename14 crypto_policies
a7af0c
%deftag 14 1.2.7
7bd08a
845d78
%global forgeorg15 https://github.com/willshersystems
7bd08a
%global repo15 ansible-sshd
7bd08a
%global rolename15 sshd
a7af0c
%deftag 15 v0.18.1
7bd08a
8d0a7f
%global rolename16 ssh
a7af0c
%deftag 16 1.1.12
8d0a7f
8d0a7f
%global rolename17 ha_cluster
4277d7
%deftag 17 1.8.6
8d0a7f
5611eb
%global rolename18 vpn
a7af0c
%deftag 18 1.5.3
47faef
47faef
%global rolename19 firewall
a7af0c
%deftag 19 1.4.2
47faef
47faef
%global rolename20 cockpit
a7af0c
%deftag 20 1.4.3
541ec9
541ec9
%global rolename21 podman
4277d7
%deftag 21 1.1.2
5611eb
c1fa70
%global rolename22 ad_integration
a7af0c
%deftag 22 1.0.1
a7af0c
a7af0c
#%%global rolename23 rhc
a7af0c
#%%deftag 23 1.0.0
c1fa70
4277d7
%global rolename24 journald
4277d7
%deftag 24 1.0.0
4277d7
7bd08a
Source1: %{archiveurl1}
7bd08a
Source2: %{archiveurl2}
7bd08a
Source3: %{archiveurl3}
d018ad
Source4: %{archiveurl4}
7bd08a
Source5: %{archiveurl5}
7bd08a
Source6: %{archiveurl6}
7bd08a
Source7: %{archiveurl7}
7bd08a
Source8: %{archiveurl8}
7bd08a
Source9: %{archiveurl9}
7bd08a
Source10: %{archiveurl10}
7bd08a
Source11: %{archiveurl11}
7bd08a
Source12: %{archiveurl12}
7bd08a
Source13: %{archiveurl13}
7bd08a
Source14: %{archiveurl14}
7bd08a
Source15: %{archiveurl15}
8d0a7f
Source16: %{archiveurl16}
8d0a7f
Source17: %{archiveurl17}
5611eb
Source18: %{archiveurl18}
47faef
Source19: %{archiveurl19}
47faef
Source20: %{archiveurl20}
541ec9
Source21: %{archiveurl21}
c1fa70
Source22: %{archiveurl22}
a7af0c
#Source23: %{archiveurl23}
4277d7
Source24: %{archiveurl24}
a7af0c
# END AUTOGENERATED SOURCES
47faef
a7af0c
# Includes with definitions/tags that differ between RHEL and Fedora
a7af0c
Source1001: extrasources.inc
cc0edf
a7af0c
%include %{SOURCE1001}
921f83
a7af0c
Source995: CHANGELOG.md
212d59
921f83
BuildArch: noarch
921f83
845d78
%if %{with html}
9b1269
# Requirements for md2html.sh to build the documentation
9b1269
%if 0%{?fedora} || 0%{?rhel} >= 9
9b1269
BuildRequires: rubygem-kramdown-parser-gfm
9b1269
%else
921f83
BuildRequires: pandoc
9b1269
BuildRequires: asciidoc
921f83
BuildRequires: highlight
9b1269
%endif
845d78
%endif
9b1269
9b1269
# Requirements for galaxy_transform.py
d018ad
BuildRequires: python3
91e1a8
BuildRequires: python%{python3_pkgversion}-ruamel-yaml
d018ad
91e1a8
# We must put %%description within the if block to avoid empty lines showing up.
921f83
%if 0%{?rhel}
921f83
%description
921f83
Collection of Ansible roles and modules that provide a stable and
921f83
consistent configuration interface for managing multiple versions
921f83
of Red Hat Enterprise Linux.
921f83
%else
921f83
%description
921f83
Collection of Ansible roles and modules that provide a stable and
921f83
consistent configuration interface for managing multiple versions
921f83
of Fedora, Red Hat Enterprise Linux & CentOS.
921f83
%endif
921f83
5611eb
%if %{with collection_artifact}
5611eb
%package collection-artifact
5611eb
Summary: Collection artifact to import to Automation Hub / Ansible Galaxy
5611eb
5611eb
%description collection-artifact
5611eb
Collection artifact for %{name}. This package contains %{collection_namespace}-%{collection_name}-%{version}.tar.gz
5611eb
%endif
5611eb
91e1a8
# Fix issue with package update introduce with changing symlink to directory
91e1a8
# in 1.21.1-5
91e1a8
%pretrans -p <lua>
91e1a8
roles = {
91e1a8
    "certificate", "cockpit", "crypto_policies", "firewall", "ha_cluster",
91e1a8
    "kdump", "kernel_settings", "logging", "metrics", "nbde_client",
91e1a8
    "nbde_server", "network", "postfix", "selinux", "ssh", "sshd", "storage",
91e1a8
    "timesync", "tlog", "vpn"
91e1a8
}
91e1a8
for i,v in ipairs(roles) do
91e1a8
    path = "/usr/share/ansible/roles/linux-system-roles." .. v
91e1a8
    st = posix.stat(path)
91e1a8
    if st and st.type == "link" then
91e1a8
      os.remove(path)
91e1a8
    end
91e1a8
end
91e1a8
921f83
%prep
a7af0c
# BEGIN AUTOGENERATED SETUP
4277d7
%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a24 -n %{getarchivedir 0}
a7af0c
# END AUTOGENERATED SETUP
47faef
91e1a8
%if 0%{?rhel}
91e1a8
# Untar vendored collection tarballs to corresponding directories
541ec9
for file in %{SOURCE801} %{SOURCE901} %{SOURCE902}; do
91e1a8
    if [[ "$(basename $file)" =~ ([^-]+)-([^-]+)-(.+).tar.gz ]]; then
47faef
        ns=${BASH_REMATCH[1]}
47faef
        name=${BASH_REMATCH[2]}
47faef
        ver=${BASH_REMATCH[3]}
47faef
        mkdir -p .external/$ns/$name
47faef
        pushd .external/$ns/$name > /dev/null
47faef
        tar xfz "$file"
47faef
        popd > /dev/null
47faef
    fi
47faef
done
91e1a8
%endif
8d0a7f
8d0a7f
declare -A ROLESTODIR=(%{rolestodir})
8d0a7f
for rolename in %{rolenames}; do
845d78
    dir_from_archive="${ROLESTODIR[${rolename}]}"
845d78
    if [ ! -d "$dir_from_archive" ]; then
845d78
        # ansible-sshd uses tags like vX.Y.Z
845d78
        # using the github archive/ link with a tag like this strips
845d78
        # the leading v from the tag used to construct the directory
845d78
        # name in the archive
845d78
        if [[ "$dir_from_archive" =~ %{repo15}-v([0-9]+[.][0-9]+.*) ]]; then
845d78
            dir_from_archive="%{repo15}-${BASH_REMATCH[1]}"
845d78
        fi
845d78
    fi
845d78
    mv "$dir_from_archive" ${rolename}
7bd08a
done
7bd08a
a7af0c
%if 0%{?rhel}
fb83d5
cd %{rolename2}/tests
fb83d5
# this test causes avcs we want to ignore
fb83d5
sed -r -i -e '/hosts: all/a\
fb83d5
  tags:\
fb83d5
    - tests::avc' tests_selinux_disabled.yml
fb83d5
cd ../..
a7af0c
%endif
91e1a8
7bd08a
cd %{rolename15}
f23ea5
find -P tests examples -name \*.yml | while read file; do
f23ea5
  sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" \
f23ea5
     -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" "$file"
f23ea5
done
f23ea5
sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" README.md
b280f9
sed -r -i -e "s/min_ansible_version: 2.8/min_ansible_version: 2.9/" meta/main.yml
212d59
cd ..
921f83
47faef
cd %{rolename7}
47faef
# metrics roles dir is a symlink to the vendored dir.
47faef
# rpm upgrade doesn't like the symlink.  Replace the
47faef
# symlink with the real dir
47faef
rolesdir=$(pwd)/roles
47faef
realrolesdir=$(realpath "$rolesdir")
47faef
if [ "$rolesdir" != "$realrolesdir" ]; then
47faef
    rm -rf roles
47faef
    mv "$realrolesdir" .
47faef
    rm -rf vendor
47faef
fi
47faef
cd ..
47faef
47faef
%if 0%{?rhel}
47faef
# Unpack tar.gz to retrieve to be vendored modules and place them in the roles library.
47faef
# ansible.posix:
47faef
#   - library:
47faef
#     - Module selinux and seboolean for the selinux role
47faef
#     - Module mount for the storage role
c1fa70
declare -A module_map=( ["selinux.py"]="selinux" ["seboolean.py"]="selinux" ["mount.py"]="storage" )
47faef
for module in "${!module_map[@]}"; do
47faef
  role="${module_map[${module}]}"
47faef
  if [ ! -d $role/library ]; then
47faef
    mkdir $role/library
47faef
  fi
47faef
  cp -pL .external/ansible/posix/plugins/modules/$module $role/library/$module
47faef
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' -e "s/ansible_collections.ansible.posix.plugins.module_utils/ansible.module_utils.${role}_lsr/" $role/library/$module
47faef
done
47faef
47faef
# ansible.posix:
47faef
#   - module_utils:
47faef
#     - Module_util mount for the storage role
47faef
module_map=( ["mount.py"]="storage" )
47faef
for module in "${!module_map[@]}"; do
47faef
  role="${module_map[${module}]}"
47faef
  if [ ! -d $role/module_utils/${role}_lsr ]; then
47faef
    mkdir -p $role/module_utils/${role}_lsr
47faef
  fi
47faef
  cp -pL .external/ansible/posix/plugins/module_utils/$module $role/module_utils/${role}_lsr/$module
47faef
done
47faef
47faef
# community.general:
47faef
#   - library:
47faef
#     - Module seport, sefcontext and selogin for the selinux role rolename2
f61556
#     - Module ini_file for role tlog
c1fa70
module_map=( ["seport.py"]="selinux" ["sefcontext.py"]="selinux" ["selogin.py"]="selinux" ["ini_file.py"]="tlog" )
47faef
for module in "${!module_map[@]}"; do
47faef
  role="${module_map[${module}]}"
47faef
  if [ ! -d $role/library ]; then
47faef
    mkdir $role/library
47faef
  fi
282c60
  # version 5.x seems to be broken?
f23ea5
  moduledir=.external/community/general/plugins/modules
f23ea5
  if [ ! -f $moduledir/$module ]; then
f23ea5
    moduledir=.external/community/general/plugins/modules/system
f23ea5
  fi
f23ea5
  if [ ! -f $moduledir/$module ]; then
f23ea5
    moduledir=.external/community/general/plugins/modules/files
f23ea5
  fi
f23ea5
  cp -pL $moduledir/$module $role/library/$module
47faef
  ls -alrtF $role/library/$module
47faef
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module
47faef
done
91e1a8
541ec9
# containers.podman:
541ec9
#   - library:
541ec9
#     - Module podman_container_info, podman_image and podman_play for the podman role
541ec9
module_map=( ["podman_container_info.py"]="podman" ["podman_image.py"]="podman" ["podman_play.py"]="podman" )
541ec9
for module in "${!module_map[@]}"; do
541ec9
  role="${module_map[${module}]}"
541ec9
  if [ ! -d $role/library ]; then
541ec9
    mkdir $role/library
541ec9
  fi
541ec9
  moduledir=.external/containers/podman/plugins/modules
541ec9
  cp -pL $moduledir/$module $role/library/$module
541ec9
  ls -alrtF $role/library/$module
541ec9
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' \
541ec9
    -e "s/ansible_collections.containers.podman.plugins.module_utils.podman/ansible.module_utils.${role}_lsr/" \
541ec9
    $role/library/$module
541ec9
done
541ec9
541ec9
# containers.podman:
541ec9
#   - module_utils:
541ec9
#     - Module_util common for the podman role
541ec9
module_map=( ["common.py"]="podman" )
541ec9
for module in "${!module_map[@]}"; do
541ec9
  role="${module_map[${module}]}"
541ec9
  if [ ! -d $role/module_utils/${role}_lsr ]; then
541ec9
    mkdir -p $role/module_utils/${role}_lsr
541ec9
  fi
541ec9
  cp -pL .external/containers/podman/plugins/module_utils/podman/$module $role/module_utils/${role}_lsr/$module
541ec9
done
541ec9
91e1a8
# remove the temporary .external directory after vendoring
91e1a8
rm -rf .external
47faef
d018ad
# Replacing "linux-system-roles.rolename" with "rhel-system-roles.rolename" in each role
91e1a8
# Replacing "fedora.linux_system_roles." with "redhat.rhel_system_roles" in each role
91e1a8
# This is for the "roles calling other roles" case
91e1a8
# for podman, change the FQCN - using a non-FQCN module name doesn't seem to work,
91e1a8
# even for the legacy role format
0ebc76
# replace community.general for rhc
8d0a7f
for rolename in %{rolenames}; do
7bd08a
    find $rolename -type f -exec \
91e1a8
         sed -e "s/linux-system-roles[.]${rolename}\\>/%{roleinstprefix}${rolename}/g" \
91e1a8
             -e "s/fedora[.]linux_system_roles[.]/%{collection_namespace}.%{collection_name}./g" \
91e1a8
             -e "s/containers[.]podman[.]/%{collection_namespace}.%{collection_name}./g" \
0ebc76
             -e "s/community[.]general[.]/%{collection_namespace}.%{collection_name}./g" \
91e1a8
             -i {} \;
8d0a7f
done
921f83
%endif
8d0a7f
8d0a7f
# Removing symlinks in tests/roles
8d0a7f
for rolename in %{rolenames}; do
d018ad
    if [ -d ${rolename}/tests/roles ]; then
d018ad
        find ${rolename}/tests/roles -type l -exec rm {} \;
d018ad
        if [ -d ${rolename}/tests/roles/linux-system-roles.${rolename} ]; then
d018ad
            rm -r ${rolename}/tests/roles/linux-system-roles.${rolename}
d018ad
        fi
d018ad
    fi
d018ad
done
d018ad
rm %{rolename5}/tests/modules
d018ad
rm %{rolename5}/tests/module_utils
d018ad
rm %{rolename5}/tests/playbooks/roles
845d78
# Drop network/{scripts/print_all_options.py,tests/ensure_provider_tests.py}
845d78
# from rpm. These 2 files fail in brp-python-bytecompile due to f-strings
845d78
# when python2 is default python.
845d78
rm %{rolename5}/scripts/print_all_options.py
845d78
rm %{rolename5}/tests/ensure_provider_tests.py
f42522
# Drop storage tests/scripts
f42522
rm -rf %{rolename6}/tests/scripts
d018ad
d018ad
# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining
d018ad
find -type f -executable -name '*.py' -exec \
d018ad
     sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +
d018ad
921f83
%build
845d78
%if %{with html}
5611eb
readmes=""
5611eb
for role in %{rolenames}; do
5611eb
    readmes="${readmes} $role/README.md"
5611eb
done
5611eb
sh md2html.sh $readmes
845d78
%endif
921f83
d018ad
mkdir .collections
d018ad
%if 0%{?rhel}
d018ad
# Convert the upstream collection readme to the downstream one
d018ad
%{SOURCE998} lsr_role2collection/collection_readme.md
47faef
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
47faef
                      "Red Hat Enterprise Linux System Roles Ansible Collection" \
47faef
                      "https://linux-system-roles.github.io" \
47faef
                      "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/administration_and_configuration_tasks_using_system_roles_in_rhel" \
47faef
                      "https://access.redhat.com/articles/3050101" \
47faef
                      "https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208&component=rhel-system-roles" \
47faef
                      > galaxy.yml.tmp
4d31cf
# we vendor-in all of the dependencies on rhel, so remove them
f61556
rm -f lsr_role2collection/collection_requirements.txt
f61556
# but leave bindep.txt
47faef
%else
47faef
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
47faef
                      "Linux System Roles Ansible Collection" \
47faef
                      > galaxy.yml.tmp
8ee312
%endif
9d4a29
mv galaxy.yml.tmp galaxy.yml
8ee312
47faef
includes=""
6379e2
for role in %{rolenames}; do
47faef
    includes="$includes --include $role"
4d31cf
%if 0%{?rhel}
4d31cf
    # we vendor-in all of the dependencies on rhel, so remove them
91e1a8
    rm -f "$role/meta/requirements.yml" "$role/meta/collection-requirements.yml" \
91e1a8
      "$role/tests/collection-requirements.yml"
4d31cf
%endif
d018ad
done
d018ad
91e1a8
# do not process changelogs on RHEL
91e1a8
%if 0%{?rhel}
91e1a8
extra_mapping="--extra-mapping fedora.linux_system_roles:%{collection_namespace}.%{collection_name}"
91e1a8
%else
91e1a8
extra_mapping=""
91e1a8
%endif
91e1a8
LANG=C.utf-8 LC_ALL=C.utf-8 python3 release_collection.py --galaxy-yml galaxy.yml \
47faef
    --src-path $(pwd) --dest-path $(pwd)/.collections $includes --force --no-update \
91e1a8
    --src-owner %{name} --skip-git --skip-check --skip-changelog $extra_mapping --debug
47faef
9b1269
# Remove table of contents from logging README.md
9b1269
# It is not needed for html and AH/Galaxy
9b1269
sed -i -e 's/^\(## Table of Contents\)/## Background\n\1/' \
9b1269
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
9b1269
sed -i -e '/^## Table of Contents/,/^## Background/d' \
9b1269
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
9b1269
9b1269
# Remove internal links from readme files
9b1269
# They are not rendered properly on AH.
5611eb
for role in %{rolenames}; do
9b1269
    sed -r -i -e 's/\[([^[]+)\]\(#[^)]+\)/\1/g' \
9b1269
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/$role/README.md
5611eb
done
d018ad
a7af0c
# Remove test only collection dependencies
a7af0c
# NOTE: These should not be in meta/collection-requirements.yml, they should be
a7af0c
# in tests/collection-requirements.yml, but they can't be moved yet
a7af0c
sed -i -e '/community[.]mysql:/d' -e '/community[.]postgresql:/d' \
a7af0c
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/galaxy.yml
a7af0c
91e1a8
cp %{SOURCE995} \
cc0edf
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/docs/CHANGELOG.md
a7af0c
%if 0%{?rhel}
91e1a8
cp %{SOURCE996} \
91e1a8
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/CHANGELOG.rst
cc0edf
%endif
cc0edf
91e1a8
# Build the collection
91e1a8
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
91e1a8
%ansible_collection_build
91e1a8
popd
91e1a8
921f83
%install
91e1a8
mkdir -p %{buildroot}%{ansible_roles_dir}
921f83
5611eb
for role in %{rolenames}; do
91e1a8
    cp -pR "$role" "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role"
5611eb
done
921f83
91e1a8
%if 0%{?rhel}
91e1a8
# Create symlinks for roles in /usr/share/ansible/roles/linux-system-roles.$rolename
91e1a8
# That's required to make roles work with upstream naming too
5611eb
for role in %{rolenames}; do
91e1a8
    ln -s "%{name}.$role" "%{buildroot}%{ansible_roles_dir}/linux-system-roles.$role"
5611eb
done
921f83
%endif
921f83
91e1a8
mkdir -p %{buildroot}%{_pkglicensedir}
91e1a8
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}network/examples/roles
5611eb
for role in %{rolenames}; do
91e1a8
    mkdir -p "%{buildroot}%{_pkgdocdir}/$role"
91e1a8
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/CHANGELOG.md" \
91e1a8
       "%{buildroot}%{_pkgdocdir}/$role"
91e1a8
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.md" \
91e1a8
       "%{buildroot}%{_pkgdocdir}/$role"
845d78
%if %{with html}
91e1a8
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.html" \
91e1a8
       "%{buildroot}%{_pkgdocdir}/$role"
845d78
%endif
91e1a8
    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" ]; then
91e1a8
        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" \
91e1a8
           "%{buildroot}%{_pkglicensedir}/$role.COPYING"
5611eb
    fi
91e1a8
    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" ]; then
91e1a8
        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" \
91e1a8
           "%{buildroot}%{_pkglicensedir}/$role.LICENSE"
5611eb
    fi
91e1a8
    if [ -d "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples" ]; then
91e1a8
        for file in "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/"*.yml ; do
5611eb
            basename=$(basename "$file" .yml)
5611eb
            newname="$basename"
5611eb
            if [[ "$newname" != example-* ]]; then
5611eb
                newname="example-$newname"
5611eb
            fi
5611eb
            if [[ "$newname" != *-playbook ]]; then
5611eb
                newname="${newname}-playbook"
5611eb
            fi
91e1a8
            cp "$file" "%{buildroot}%{_pkgdocdir}/$role/${newname}.yml"
5611eb
            rm "$file"
5611eb
        done
91e1a8
        if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" ]; then
91e1a8
            cp "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" \
91e1a8
               "%{buildroot}%{_pkgdocdir}/$role/example-inventory"
91e1a8
            rm "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory"
5611eb
        fi
5611eb
        # special case for network
5611eb
        # this will error if the directory is unexpectedly empty
91e1a8
        rmdir "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples"
5611eb
    fi
5611eb
done
921f83
91e1a8
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/semaphore
91e1a8
rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/molecule
921f83
91e1a8
rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/.[A-Za-z]*
91e1a8
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/tests/.git*
d018ad
5611eb
# NOTE: sshd/examples/example-root-login.yml is
8d0a7f
# referenced in the configuring-openssh-servers-using-the-sshd-system-role documentation module
8d0a7f
# must be updated if changing the file path
5611eb
91e1a8
# Install the collection
5611eb
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
91e1a8
%ansible_collection_install
5611eb
popd
d018ad
91e1a8
mkdir -p %{buildroot}%{_pkgdocdir}/collection
91e1a8
mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles
6379e2
91e1a8
ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/README.md \
91e1a8
   %{buildroot}%{_pkgdocdir}/collection
6379e2
6379e2
for rolename in %{rolenames}; do
cc0edf
  for file in CHANGELOG.md README.md; do
cc0edf
    if [ -f %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file ]; then
91e1a8
      if [ ! -d %{buildroot}%{_pkgdocdir}/collection/roles/${rolename} ]; then
91e1a8
        mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}
cc0edf
      fi
91e1a8
      ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file \
91e1a8
        %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}
cc0edf
    fi
cc0edf
  done
6379e2
done
6379e2
845d78
%if %{with html}
91e1a8
# converting README.md to README.html for collection in %%{buildroot}%%{_pkgdocdir}/collection
91e1a8
readmes="%{buildroot}%{_pkgdocdir}/collection/README.md"
9b1269
for role in %{rolenames}; do
91e1a8
    readmes="${readmes} %{buildroot}%{_pkgdocdir}/collection/roles/${role}/README.md"
9b1269
done
9b1269
sh md2html.sh $readmes
845d78
%endif
9b1269
5611eb
%if %{with collection_artifact}
5611eb
# Copy collection artifact to /usr/share/ansible/collections/ for collection-artifact
5611eb
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
5611eb
    mv %{collection_namespace}-%{collection_name}-%{version}.tar.gz \
91e1a8
       %{buildroot}%{_datadir}/ansible/collections/
5611eb
popd
5611eb
%endif
5611eb
91e1a8
# Generate the %%files section in files_section.txt
91e1a8
# Bulk files inclusion is not possible because roles store doc and licence
91e1a8
# files together with other files
5611eb
format_item_for_files() {
5611eb
    # $1 is directory or file name in buildroot
91e1a8
    # $2 - if true, and item is a directory, use %%dir
5611eb
    local item
5611eb
    local files_item
91e1a8
    item="$1" # full path including buildroot
91e1a8
    files_item=${item##"%{buildroot}"} # path with cut buildroot to be added to %%files
5611eb
    if [ -L "$item" ]; then
5611eb
        echo "$files_item"
5611eb
    elif [ -d "$item" ]; then
5611eb
        if [[ "$item" == */doc* ]]; then
5611eb
            echo "%doc $files_item"
5611eb
        elif [ "${2:-false}" = true ]; then
5611eb
            echo "%dir $files_item"
5611eb
        else
5611eb
            echo "$files_item"
5611eb
        fi
cc0edf
    elif [[ "$item" == */README.md ]] || [[ "$item" == */README.html ]] || [[ "$item" == */CHANGELOG.md ]]; then
5611eb
        if [[ "$item" == */private_* ]]; then
91e1a8
            # mark as regular file, not %%doc
5611eb
            echo "$files_item"
5611eb
        else
5611eb
            echo "%doc $files_item"
5611eb
        fi
91e1a8
    elif [[ "$item" == */COPYING* ]] || [[ "$item" == */LICENSE* ]]; then
91e1a8
        echo "%""%""license" "$files_item"
91e1a8
    else
5611eb
        echo "$files_item"
5611eb
    fi
5611eb
}
d018ad
5611eb
files_section=files_section.txt
5611eb
rm -f $files_section
5611eb
touch $files_section
91e1a8
# Dynamically generate files section entries for %%{ansible_collection_files}
845d78
find %{buildroot}%{ansible_collection_files}%{collection_name} -mindepth 1 -maxdepth 1 | \
5611eb
    while read item; do
5611eb
        if [[ "$item" == */roles ]]; then
5611eb
            format_item_for_files "$item" true >> $files_section
5611eb
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_dir; do
5611eb
                format_item_for_files "$roles_dir" true >> $files_section
5611eb
                find "$roles_dir" -mindepth 1 -maxdepth 1 | while read roles_item; do
5611eb
                    format_item_for_files "$roles_item" >> $files_section
5611eb
                done
5611eb
            done
5611eb
        else
5611eb
            format_item_for_files "$item" >> $files_section
5611eb
        fi
5611eb
    done
5611eb
91e1a8
# Dynamically generate files section entries for %%{ansible_roles_dir}
91e1a8
find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
5611eb
    while read item; do
5611eb
        if [ -d "$item" ]; then
5611eb
            format_item_for_files "$item" true >> $files_section
5611eb
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do
5611eb
                format_item_for_files "$roles_item" >> $files_section
5611eb
            done
5611eb
        else
5611eb
            format_item_for_files "$item" >> $files_section
5611eb
        fi
5611eb
    done
5611eb
5611eb
%files -f files_section.txt
91e1a8
%dir %{_datadir}/ansible
91e1a8
%dir %{ansible_roles_dir}
91e1a8
%dir %{ansible_collection_files}
91e1a8
%dir %{ansible_collection_files}%{collection_name}
91e1a8
%doc %{_pkgdocdir}
91e1a8
%license %{_pkglicensedir}
91e1a8
91e1a8
%if 0%{?rhel} && 0%{?rhel} < 8
845d78
# Needs to list excluded files in this hardcoded style since when
845d78
# format_item_for_files is executed, brp-python-bytecompile is not
845d78
# executed yet.
91e1a8
%exclude %{ansible_roles_dir}/*/*.py?
91e1a8
%exclude %{ansible_roles_dir}/*/*/*.py?
91e1a8
%exclude %{ansible_roles_dir}/*/*/*/*.py?
91e1a8
%exclude %{ansible_roles_dir}/*/*/*/*/*.py?
845d78
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*.py?
845d78
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*.py?
845d78
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*/*.py?
845d78
%endif
5611eb
5611eb
%if %{with collection_artifact}
5611eb
%files collection-artifact
5611eb
%{_datadir}/ansible/collections/%{collection_namespace}-%{collection_name}-%{version}.tar.gz
5611eb
%endif
d018ad
921f83
%changelog
695107
* Thu Feb 09 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.17
695107
- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent
695107
- Fix nbde_server test issue
695107
4277d7
* Fri Feb 03 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.16
4277d7
- Resolves:rhbz#2165176 : journald - New role - journald - manage systemd-journald
4277d7
- Resolves:rhbz#2159972 : nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data
4277d7
- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent
4277d7
- fix storage tests_swap and tests_misc - swap size < 128GB on EL7
4277d7
- fix podman general-meta issue
4277d7
- ha_cluster non-x86_64 tests issue
4277d7
- certificate non-x86_64 tests issue
4277d7
a7af0c
* Fri Jan 20 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.15
a7af0c
- Resolves:rhbz#2162788 : network - role should support running tests with ANSIBLE_GATHERING=explicit
a7af0c
- Resolves:rhbz#2149683 : Synchronize automation-related changes from Fedora spec file
a7af0c
- Fix ansible-test issues in several roles
a7af0c
- Fix nbde_server tang test failure
a7af0c
0ebc76
* Fri Jan 13 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.14
0ebc76
- Resolves:rhbz#2143814 : ha_cluster - Allow quorum device configuration
0ebc76
- Resolves:rhbz#2153081 : ha_cluster - Allow enabled SBD on disabled cluster
0ebc76
- Resolves:rhbz#2127497 : ha_cluster - use no_log in tasks looping over pot. secret parameters
0ebc76
- community.general 6.2.0
0ebc76
- replace community.general with namespace.name for rhc role
0ebc76
8f6e6d
* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.13
8f6e6d
- Resolves:rhbz#2151355 : storage - [RHEL8] disks_needed need to be set for the raid test cases
8f6e6d
- Resolves:rhbz#2154143 : storage - [RHEL8] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"
8f6e6d
- Resolves:rhbz#2151342 : storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
8f6e6d
- Resolves:rhbz#2151351 : storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"
8f6e6d
3b588d
* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.12
3b588d
- Resolves:rhbz#2153080 - tlog - Unconditionally enable the files provider
3b588d
cf2337
* Tue Dec 13 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.11
cf2337
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
cf2337
  fix basic-smoke-test failures
cf2337
cf2337
* Mon Dec 12 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.10
cf2337
- Resolves:rhbz#2130019 : ha_cluster - [RFE] convert ha_cluster role to use firewall, selinux and certificate role
cf2337
- Resolves:rhbz#2143458 : network - Support cloned MAC address
cf2337
- Resolves:rhbz#2066864 : podman - [RFE] role for managing podman containers and systemd
cf2337
c1fa70
* Tue Dec 06 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.9
c1fa70
- Resolves:rhbz#2144876 : ad_integration - [RFE] new role to support AD integration, join to AD domain
c1fa70
72e867
* Mon Dec 05 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.8
72e867
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
72e867
  fix tests - tests_relp now uses logging_purge_confs
72e867
72e867
* Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.7
72e867
- Resolves:rhbz#2126960 : nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names
72e867
a8d34d
* Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.6
a8d34d
- Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
a8d34d
  previous fix was not complete - needed additional fixes - ansible-lint 6.x fixes
a8d34d
541ec9
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.5
541ec9
- Resolves:rhbz#2137667 : cockpit - [RFE] convert cockpit role to use firewall, selinux role, and certificate role
541ec9
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
541ec9
- Resolves:rhbz#2133532 : metrics - [RFE] convert metrics role to use firewall and selinux role
541ec9
- Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
541ec9
- Resolves:rhbz#2130332 : postfix - [RFE] convert postfix role to use firewall and selinux role
541ec9
- Resolves:rhbz#2119600 : vpn - Add parameters shared_key_content, ike, esp, type, leftid, rightid
541ec9
- Resolves:rhbz#2130345 : vpn - [RFE] convert vpn role to use firewall and selinux role
541ec9
541ec9
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.4.podman
541ec9
- Resolves:rhbz#2066864 : podman - [RFE] role for managing podman containers and systemd
541ec9
541ec9
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.3.ssh_sshd_selinux_timesync
541ec9
- Resolves:rhbz#2143385 : selinux - add support for the 'local' parameter
541ec9
- Resolves:rhbz#2143401 : sshd,ssh,timesync - Unexpected templating type error - expected str instance, int found
541ec9
- Resolves:rhbz#2130921 : ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-8.7] [rhel-8.8.0]
541ec9
91e1a8
* Tue Nov 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.2.network
91e1a8
- Resolves:rhbz#2134201 : network - [RFE] Support setting the metric of the default route for initscripts provider
91e1a8
- Resolves:rhbz#2133856 : network - [RFE] Support the DNS priority
91e1a8
- Resolves:rhbz#2129620 : network - Support looking up named route table in routing rule
91e1a8
- includes ha_cluster, vpn - README.md had headings that were too long causing problems
91e1a8
  for md to adoc to html conversion on el8
91e1a8
- includes changing network role to support ansible-core 2.14
91e1a8
- includes community.general 6.0.1
91e1a8
- adds back network bondtests patch - bond tests still failing in beaker
154879
cc0edf
* Tue Aug 09 2022 Rich Megginson <rmeggins@redhat.com> - 1.20.0-1
cc0edf
- Resolves:rhbz#2115159 : cockpit - Add customization of port
cc0edf
- Resolves:rhbz#2100939 : firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
cc0edf
- Resolves:rhbz#2115160 : firewall - support for firewall_config - gather firewall facts
cc0edf
- Resolves:rhbz#2112143 : logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
cc0edf
- Resolves:rhbz#2115162 : selinux - Added setting of seuser and selevel for completeness
cc0edf
- Resolves:rhbz#2115161 : nbde_client - Sets proper spacing for parameter rd.neednet=1
cc0edf
- Resolves:rhbz#2115884 : network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
cc0edf
- Resolves:rhbz#2109997 : ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
cc0edf
- Resolves:rhbz#2082391 : storage - [RHEL8] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
cc0edf
282c60
* Fri Jul 01 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.3-1
282c60
- min_ansible_version is string instead of float
282c60
282c60
- fix storage test failures
282c60
282c60
- support for ansible-core 2.13
282c60
282c60
- firewall - forward_port should accept list of string or list of dict
282c60
  Resolves: rhbz#2101607
282c60
282c60
- firewall - support add/modify/delete services
282c60
  Resolves: rhbz#2100297
282c60
282c60
- metrics - document minimum supported redis version required by rhel-system-roles
282c60
  Resolves: rhbz#2100285
282c60
282c60
- metrics - restart pmie, pmlogger if changed, do not wait for handler
282c60
  Resolves: rhbz#2100298
282c60
282c60
- network - Support managing the network through nmstate schema
282c60
  Resolves: rhbz#2100979
282c60
282c60
- storage - support for adding/removing disks to/from storage pools
282c60
  Resolves: rhbz#2066880
282c60
282c60
- storage - support for attaching cache volumes to existing volumes
282c60
  Resolves: rhbz#2066881
282c60
282c60
* Wed Jun 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.2-1
282c60
- sshd - fix ansible 2.9 support in meta/main.yml
282c60
  Resolves: rhbz#2086935 (8.7.0)
282c60
282c60
* Mon Jun 13 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.1-1
282c60
- storage - fix coverity scan issue in blivet.py
282c60
  Resolves: rhbz#2066876 (8.7.0)
282c60
282c60
- logging - fix gather_facts/set_vars issue
282c60
  Resolves: rhbz#2079008 (8.7.0)
282c60
282c60
- ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
282c60
  Resolves: rhbz#2093500 (8.7.0)
282c60
282c60
- sshd - fix tests issue with rhel9 hosts
282c60
282c60
* Mon Jun 06 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.0-1
282c60
- storage - support for creating and managing LVM thin pools/LVs
282c60
  Resolves: rhbz#2066876 (8.7.0)
282c60
282c60
- firewall - Update Ansible syntax in Firewall system role README.md file examples
282c60
  Resolves: rhbz#2081839 (8.7.0)
282c60
282c60
- storage role raid_level "striped" is not supported
282c60
  Resolves: rhbz#2083426 (8.7.0)
282c60
282c60
- network: the controller device is not completely cleaned up in the bond tests.
282c60
  Resolves: rhbz#2089868 (8.7.0)
282c60
282c60
- firewall - state no longer required for masquerade and ICMP block inversion
282c60
  Resolves: rhbz#2093437 (8.7.0)
282c60
282c60
- ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
282c60
  Resolves: rhbz#2093500 (8.7.0)
282c60
f23ea5
* Thu May 26 2022 Rich Megginson <rmeggins@redhat.com> - 1.18.0-1
f23ea5
- firewall - [Improvement] Allow System Role to reset to default Firewalld Settings
f23ea5
  Resolves: rhbz#2043009 (8.7.0)
f23ea5
f23ea5
- metrics - [RFE] add an option to the metrics role to enable postfix metric collection
f23ea5
  Resolves: rhbz#2079114 (8.7.0)
f23ea5
f23ea5
- network - Rework the infiniband support
f23ea5
  Resolves: rhbz#2086869 (8.7.0)
f23ea5
f23ea5
- sshd - recurse into tests and examples sub-directories when replacing string in files
f23ea5
  the sshd role latest version added sub-directories under tests that need
f23ea5
  role name replacement - so just use find
f23ea5
f23ea5
- sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
f23ea5
  Resolves: rhbz#2086934 (8.7.0)
f23ea5
f23ea5
- sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
f23ea5
  Resolves: rhbz#2086935 (8.7.0)
f23ea5
f23ea5
- storage - storage role cannot set mount_options for volumes
f23ea5
  Resolves: rhbz#2083378 (8.7.0)
f23ea5
f23ea5
* Mon Apr 25 2022 Rich Megginson <rmeggins@redhat.com> - 1.17.0-1
f23ea5
- All roles should support running with gather_facts: false
f23ea5
  Resolves: rhbz#2079008 (8.7.0)
f23ea5
f23ea5
- firewall - Firewall system role Ansible deprecation warning related to "include"
f23ea5
  Resolves: rhbz#2078650 (8.7.0)
f23ea5
f23ea5
- ha_cluster - ha_cluster - support advanced corosync configuration
f23ea5
  Resolves: rhbz#2065339 (8.7.0)
f23ea5
f23ea5
- ha_cluster - ha_cluster - support SBD fencing
f23ea5
  Resolves: rhbz#2066868 (8.7.0)
f23ea5
f23ea5
- ha_cluster - ha_cluster - add support for configuring bundle resources
f23ea5
  Resolves: rhbz#2073518 (8.7.0)
f23ea5
f23ea5
- kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts
f23ea5
  Resolves: rhbz#2060378 (8.7.0)
f23ea5
f23ea5
- logging - logging tests fail during cleanup if no cloud-init on system
f23ea5
  Resolves: rhbz#2058807 (8.7.0)
f23ea5
f23ea5
- logging - Logging - RFE - support template, severity and facility options
f23ea5
  Resolves: rhbz#2075116 (8.7.0)
f23ea5
f23ea5
- metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
f23ea5
  Resolves: rhbz#2060377 (8.7.0)
f23ea5
f23ea5
- metrics - metrics - consistently use ansible_managed in configuration files managed by role
f23ea5
  Resolves: rhbz#2065215 (8.7.0)
f23ea5
f23ea5
- metrics - [RFE] add an option to the metrics role to enable postfix metric collection
f23ea5
  Resolves: rhbz#2079114 (8.7.0)
f23ea5
f23ea5
- nbde_client - NBDE client system role does not support servers with static IP addresses
f23ea5
  Resolves: rhbz#2071011 (8.7.0)
f23ea5
f23ea5
- network - [RFE] Extend rhel-system-roles.network feature set to support routing rules
f23ea5
  Resolves: rhbz#1996731 (8.7.0)
f23ea5
f23ea5
- network - bond: fix typo in supporting the infiniband ports in active-backup mode
f23ea5
  Resolves: rhbz#2064067 (8.7.0)
f23ea5
f23ea5
- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
f23ea5
  Resolves: rhbz#2065217 (8.7.0)
f23ea5
f23ea5
- network - network - consistently use ansible_managed in configuration files managed by role
f23ea5
  Resolves: rhbz#2065670 (8.7.0)
f23ea5
f23ea5
- postfix - postfix - consistently use ansible_managed in configuration files managed by role
f23ea5
  Resolves: rhbz#2065216 (8.7.0)
f23ea5
f23ea5
- postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
f23ea5
  Resolves: rhbz#2065218 (8.7.0)
f23ea5
f23ea5
- sshd - FIPS mode detection in SSHD role is wrong
f23ea5
  Resolves: rhbz#2075338 (8.7.0)
f23ea5
f23ea5
- storage - RFE storage Less verbosity by default
f23ea5
  Resolves: rhbz#2056480 (8.7.0)
f23ea5
f23ea5
- timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml
f23ea5
  Resolves: rhbz#2060379 (8.7.0)
f23ea5
f23ea5
- tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
f23ea5
  Resolves: rhbz#2072749 (8.7.0)
f23ea5
f23ea5
* Thu Apr 07 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.3-1
f23ea5
- tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
f23ea5
  Resolves rhbz#2072749 (EL8)
f23ea5
  Resolves rhbz#2071804 (EL9)
f23ea5
f23ea5
* Wed Apr 06 2022 Sergei Petrosian <spetrosi@redhat.com> - 1.16.2-2
f23ea5
- Update community.general
f23ea5
f23ea5
* Thu Mar 31 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.2-1
f23ea5
- nbde_client - NBDE client system role does not support servers with static IP addresses
f23ea5
  previous fix did not handle some other cases
f23ea5
  Resolves rhbz#1985022 (EL8)
f23ea5
  Resolves rhbz#2031555 (EL9)
f23ea5
f23ea5
* Tue Mar 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.1-1
e49fd5
- nbde_client - NBDE client system role does not support servers with static IP addresses
e49fd5
  previous fix did not handle some cases
e49fd5
  Resolves rhbz#1985022 (EL8)
e49fd5
  Resolves rhbz#2031555 (EL9)
e49fd5
f23ea5
* Tue Mar 22 2022 Sergei Petrosian <spetrosi@redhat.com> - 1.16.0-2
f23ea5
- Update community.general
f23ea5
f23ea5
* Tue Mar 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.0-1
64a436
- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
64a436
  Resolves rhbz#2064396 (EL8)
64a436
  Resolves rhbz#2064401 (EL9)
64a436
- network - bond: fix typo in supporting the infiniband ports in active-backup modekernel_settings error configobj not found on RHEL 8.6 managed hosts
64a436
  Resolves rhbz#2064388 (EL8)
64a436
  Resolves rhbz#2064391 (EL9)
64a436
- network - consistently use ansible_managed in configuration files managed by role
64a436
  Resolves rhbz#2057656 (EL8)
64a436
  Resolves rhbz#2057657 (EL9)
64a436
- metrics - consistently use ansible_managed in configuration files managed by role
64a436
  Resolves rhbz#2057645 (EL8)
64a436
  Resolves rhbz#2057647 (EL9)
64a436
- postfix - consistently use ansible_managed in configuration files managed by role
64a436
  Resolves rhbz#2057661 (EL8)
64a436
  Resolves rhbz#2057662 (EL9)
64a436
- postfix - provide the ability to replace config and reset configuration back to default
64a436
  Resolves rhbz#2044657 (EL8)
64a436
  Resolves rhbz#2058780 (EL9)
64a436
- new tags required in galaxy.yml for Automation Hub
64a436
d79ee8
* Thu Mar 3 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.1-1
d79ee8
- kernel_settings error configobj not found on RHEL 8.6 managed hosts
d79ee8
  Resolves rhbz#2058772 (EL8)
d79ee8
  Resolves rhbz#2058756 (EL9)
d79ee8
- timesync: basic-smoke test failure in timesync/tests_ntp.yml
d79ee8
  Resolves rhbz#2059293 (EL8)
d79ee8
  Resolves rhbz#2058645 (EL9)
d79ee8
d79ee8
* Tue Mar  1 2022 Noriko Hosoi <nhosoi@redhat.com> - 1.15.0-2
d79ee8
- metrics - follow symlinks for the mssql and elasticsearch configuration paths
d79ee8
  Resolves rhbz#2058655 (EL8)
d79ee8
  Resolves rhbz#2058777 (EL9)
d79ee8
f23ea5
* Thu Feb 24 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.0-1
86e1ac
- firewall - ensure target changes take effect immediately
86e1ac
  Resolves rhbz#2057172 (EL8)
86e1ac
  Resolves rhbz#2057164 (EL9)
86e1ac
- firewall - Firewall RHEL System Role should be able to set default zone
86e1ac
  Resolves rhbz#2022458 (EL8)
86e1ac
  Resolves rhbz#2022461 (EL9)
86e1ac
- network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
86e1ac
  Resolves rhbz#2053862 (EL8)
86e1ac
  Resolves rhbz#2053861 (EL9)
86e1ac
f61556
* Mon Feb 14 2022 Rich Megginson <rmeggins@redhat.com> - 1.14.0-1
f61556
- ha_cluster - set permissions for haclient group
f61556
  Resolves rhbz#2049747 (EL8)
f61556
  Resolves rhbz#2049754 (EL9)
f61556
- network - Add more bonding options to rhel-system-roles.network
f61556
  Resolves rhbz#2008931 (EL8)
f61556
  Resolves rhbz#2054435 (EL9)
f61556
- certificate - should consistently use ansible_managed in hook scripts
f61556
  Resolves rhbz#2054364 (EL8)
f61556
  Resolves rhbz#2054368 (EL9)
f61556
- tlog - consistently use ansible_managed in configuration files managed by role
f61556
  Resolves rhbz#2054363 (EL8)
f61556
  Resolves rhbz#2054367 (EL9)
f61556
- vpn - consistently use ansible_managed in configuration files managed by role
f61556
  Resolves rhbz#2054365 (EL8)
f61556
  Resolves rhbz#2054369 (EL9)
f61556
4d31cf
* Tue Feb 8 2022 Rich Megginson <rmeggins@redhat.com> - 1.13.1-1
4d31cf
- vpn - template error while templating string: no filter named 'vpn_ipaddr'
4d31cf
  Resolves rhbz#2052103 (EL8)
4d31cf
  Resolves rhbz#2050341 (EL9)
4d31cf
- kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
4d31cf
  Resolves rhbz#2052105 (EL8)
4d31cf
  Resolves rhbz#2050419 (EL9)
4d31cf
- remove collection dependencies on rhel because we vendor them in
4d31cf
e796c6
* Tue Feb 1 2022 Rich Megginson <rmeggins@redhat.com> - 1.13.0-1
e796c6
- storage - RFE: Add support for RAID volumes (lvm-only)
e796c6
  Resolves rhbz#2016514 (EL8)
e796c6
  Resolves rhbz#2016518 (EL9)
e796c6
- storage - RFE: Add support for cached volumes (lvm-only)
e796c6
  Resolves rhbz#2016511 (EL8)
e796c6
  Resolves rhbz#2016517 (EL9)
e796c6
- metrics - metrics role can't be re-run if the Grafana admin password has been changed
e796c6
  Resolves rhbz#1967321 (EL8)
e796c6
  Resolves rhbz#2041632 (EL9)
e796c6
- nbde_client - NBDE client system role does not support servers with static IP addresses
e796c6
  Resolves rhbz#1985022 (EL8)
e796c6
  Resolves rhbz#2031555 (EL9)
e796c6
- ha_cluster - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
e796c6
  Resolves rhbz#2041635 (EL8)
e796c6
  Resolves rhbz#2041634 (EL9)
e796c6
- firewall - ensure zone exists and can be used in subsequent operations
e796c6
  Resolves rhbz#2042541 (EL8)
e796c6
  Resolves rhbz#2024775 (EL9)
e796c6
- network - RFE: Support Routing Tables in static routes in Network Role
e796c6
  Resolves rhbz#2031521 (EL8)
e796c6
  Resolves rhbz#2049798 (EL9)
e796c6
- network - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
e796c6
  Resolves rhbz#2034908 (EL8)
e796c6
  Resolves rhbz#2038957 (EL9)
e796c6
- network - Set DNS search setting only for enabled IP protocols
e796c6
  Resolves rhbz#2041627 (EL8)
e796c6
  Resolves rhbz#2004899 (EL9)
e796c6
758e32
* Thu Jan 27 2022 Rich Megginson <rmeggins@redhat.com> - 1.12.0-1
758e32
- vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
758e32
  this is covered by "make roles work with ansible-core on all platforms" BZ
758e32
- logging - Logging role "logging_purge_confs" option not properly working
758e32
  Resolves rhbz#2040812 (EL8)
758e32
  Resolves rhbz#2039106 (EL9)
758e32
- kernel_settings role should use ansible_managed in its configuration file
758e32
  Resolves rhbz#2047504 (EL8)
758e32
  Resolves rhbz#2047506 (EL9)
758e32
758e32
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.11.0-3
758e32
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
758e32
758e32
* Tue Dec 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-2
758e32
- RHEL8.6, 9 - add "Requires: ansible-core or ansible"
758e32
47faef
* Thu Dec 2 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-1
47faef
- timesync - fix ansible 2.12 issues, service_facts issues
47faef
  Resolves rhbz#2012316 (EL8)
47faef
  Resolves rhbz#2012298 (EL9)
47faef
- timesync - Failure related to missing ntp/ntpd package/service on RHEL-9 host
47faef
  Resolves rhbz#2029463 (EL9)
47faef
- logging - add test case for immark quoting issue
47faef
  Resolves rhbz#2021678 (EL8)
47faef
  Resolves rhbz#2021676 (EL9)
47faef
- cockpit - use existing cert - cockpit_cert, cockpit_private_key
47faef
  Resolves rhbz#2021661 (EL8)
47faef
  Resolves rhbz#2021028 (EL9)
47faef
- storage - fix ansible 2.12 issues, service_facts issues; workaround lvm, udev issues in tests
47faef
  Resolves rhbz#2012316 (EL8)
47faef
  Resolves rhbz#2012298 (EL9)
47faef
- ssh - tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
47faef
  Resolves rhbz#2029614 (EL8)
47faef
  Resolves rhbz#2029427 (EL9)
47faef
- kdump - support reboot required and reboot ok
47faef
  Resolves rhbz#2029605 (EL8)
47faef
  Resolves rhbz#2029602 (EL9)
47faef
- metrics - sync with latest ansible-pcp
47faef
  Resolves rhbz#2012316 (EL8)
47faef
  Resolves rhbz#2012298 (EL9)
47faef
- sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
47faef
  Resolves rhbz#1979714 (EL8)
47faef
  Resolves rhbz#2029634 (EL9)
47faef
47faef
* Mon Nov 8 2021 Rich Megginson <rmeggins@redhat.com> - 1.10.0-1
47faef
- add cockpit role
47faef
  Resolves rhbz#2021661 (EL8)
47faef
  Resolves rhbz#2021028 (EL9)
47faef
- add firewall role
47faef
  Resolves rhbz#1854988 (EL8)
47faef
  Resolves rhbz#2021665 (EL9)
47faef
- firewall - add ability to add-source
47faef
  Resolves rhbz#1932678 (EL8)
47faef
  Resolves rhbz#2021667 (EL9)
47faef
- firewall - allow user defined zones
47faef
  Resolves rhbz#1850768 (EL8)
47faef
  Resolves rhbz#2021669 (EL9)
47faef
- firewall - allow specifying the zone
47faef
  Resolves rhbz#1850753 (EL8)
47faef
  Resolves rhbz#2021670 (EL9)
47faef
- updates for ansible 2.12 support
47faef
  Resolves rhbz#2012316 (EL8)
47faef
  Resolves rhbz#2012298 (EL9)
47faef
- update community.general to 4.0.1
47faef
  Resolves rhbz#2006081 (EL8)
47faef
  Resolves rhbz#2006076 (EL9)
47faef
- network - Allow to specify PCI address to configure profiles
47faef
  Resolves rhbz#1695634 (EL8)
47faef
  Resolves rhbz#1999162 (EL9)
47faef
- network - support wifi Enhanced Open (OWE)
47faef
  Resolves rhbz#1993379 (EL8)
47faef
  Resolves rhbz#1993377 (EL9)
47faef
- network - support WPA3 Simultaneous Authentication of Equals(SAE)
47faef
  Resolves rhbz#1993311 (EL8)
47faef
  Resolves rhbz#1993304 (EL9)
47faef
- network - RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
47faef
  Resolves rhbz#1897565 (EL8)
47faef
  Resolves rhbz#1978773 (EL9)
47faef
- network - Update network system role to reflect that network teaming is deprecated in RHEL 9
47faef
  Resolves rhbz#1897565 (EL8)
47faef
  Resolves rhbz#1999770 (EL9)
47faef
- selinux - fails linit rules role-name and unnamed-task
47faef
  Resolves rhbz#1974000 (EL8)
47faef
  Resolves rhbz#2021675 (EL9)
47faef
- kernel_settings - ansible_managed | comment BZs:
47faef
  Resolves rhbz#2006230 (EL9)
47faef
  Resolves rhbz#2006231 (EL8)
47faef
  Resolves rhbz#2006233 (EL7)
47faef
- logging - logging role missing quotes for immark module interval value
47faef
  Resolves rhbz#2021678 (EL8)
47faef
  Resolves rhbz#2021676 (EL9)
47faef
- logging - Add user and password
47faef
  Resolves rhbz#2010327 (EL8)
47faef
  Resolves rhbz#1990490 (EL9)
47faef
- logging - Performance improvement
47faef
  Resolves rhbz#2005727 (EL8)
47faef
  Resolves rhbz#2004303 (EL9)
47faef
- nbde_client - add regenerate-all to the dracut command
47faef
  Resolves rhbz#2021682 (EL8)
47faef
  Resolves rhbz#2021681 (EL9)
47faef
- certificate - Fix certificate permissions with "group" option
47faef
  Resolves rhbz#2021683 (EL8)
47faef
  Resolves rhbz#2021025 (EL9)
47faef
fb83d5
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.3-2
fb83d5
- selinux - tag tests_selinux_disabled.yml with tests::avc
fb83d5
  Resolves rhbz#1996315 (EL9)
fb83d5
  Resolves rhbz#1996317 (EL8)
fb83d5
3b8136
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
3b8136
- storage - revert the dm-vdo workaround fix for vdo testing
3b8136
  Resolves rhbz#1978488 (EL9)
3b8136
  Resolves rhbz#1991141 (EL8)
3b8136
edc447
* Tue Aug 24 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
edc447
- logging - Update the certificates copy tasks
edc447
  Resolves rhbz#1996777 (EL9)
edc447
  Resolves rhbz#1994580 (EL8)
edc447
b280f9
* Mon Aug 16 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
b280f9
- metrics - the bpftrace role does not properly configure bpftrace agent
b280f9
  Resolves rhbz#1994180 (EL9)
b280f9
  Resolves rhbz#1993240 (EL8)
b280f9
b280f9
* Thu Aug 12 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
b280f9
- drop support for Ansible 2.8 - min_ansible_version is now 2.9
b280f9
  Resolves rhbz#1989197 (EL9)
b280f9
  Resolves rhbz#1989199 (EL8)
b280f9
- sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
b280f9
  Resolves rhbz#1991598 (EL9)
b280f9
  Resolves rhbz#1990947 (EL8)
b280f9
b280f9
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.7-1
b280f9
- storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
b280f9
  Resolves rhbz#1991141 (EL8)
b280f9
  Resolves rhbz#1991062 (EL9)
b280f9
- storage - Get syntax errors in tests_lvm_errors.yml
b280f9
  Resolves rhbz#1990793 (EL8)
b280f9
  Resolves rhbz#1991142 (EL9)
b280f9
f42522
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.6-1
f42522
- logging, certificate - Instead of the archive module, use "tar" command for backup.
f42522
  Resolves rhbz#1984182 (EL9)
f42522
  Resolves rhbz#1987096 (EL8)
f42522
- logging - Add a support for list value to server_host in the elasticsearch output
f42522
  Resolves rhbz#1986460 (EL9)
f42522
  Resolves rhbz#1986463 (EL8)
f42522
- logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
f42522
  Resolves rhbz#1989962 (EL9)
f42522
  Resolves rhbz#1990142 (EL8)
f42522
f42522
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.5-1
f42522
- kernel_settings - Disable bootloader testing on EL9
f42522
  Resolves rhbz#1991017
f42522
f42522
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.4-1
f42522
- sshd - support for rhel9 managed hosts
f42522
  Resolves rhbz#1989221 (EL9)
f42522
  Resolves rhbz#1989638 (EL8)
f42522
f42522
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.3-1
f42522
- storage - tag tests that use NVME and SCSI
f42522
  Resolves rhbz#1989211 (EL9)
f42522
  Resolves rhbz#1989638 (EL8)
f42522
f42522
* Fri Jul 30 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.2-1
f42522
- metrics - Grafana dashboard not working after metrics role run unless services manually restarted
f42522
  Resolves rhbz#1984150 (EL9)
f42522
  Resolves rhbz#1978357 (EL8)
f42522
f42522
* Thu Jul 29 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.1-1
f42522
- network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
f42522
  Resolves rhbz#1935919
f42522
- network - _initscripts tests fail because "No package network-scripts available."
f42522
  Resolves rhbz#1935916
f42522
- network - Test tests_bond_initscripts.yml failed to create interface
f42522
  Resolves rhbz#1980870
f42522
- storage - covscan error - DEADCODE - vdopool if create_vdo else parent
f42522
  Resolves rhbz#1985571 (EL9)
f42522
  Resolves rhbz#1985572 (EL8)
f42522
- network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
f42522
  Resolves rhbz#1915017
f42522
f42522
* Wed Jul 28 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.0-1
f42522
- network - Skip tests on RHEL9 that use hostapd
f42522
  Resolves rhbz#1945348
f42522
- network - Fix the bond test on DHCP
f42522
  Resolves rhbz#1918252
f42522
- storage - Add support for percentage-based volume sizes
f42522
  Resolves rhbz#1984583 (EL9)
f42522
  Resolves rhbz#1894642 (EL8)
f42522
- storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
f42522
  Resolves rhbz#1986284 (EL8)
f42522
5945fa
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-1
5945fa
- Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yl
5945fa
  Resolves rhbz#1985382 (EL9)
5945fa
  Resolves rhbz#1932699 (EL8)
5945fa
- EPEL yum repository configuration for tests
5945fa
  Rebasing to latest picks up this fix - see rhel7 bz1980439
5945fa
- connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
5945fa
  Rebasing to latest picks up this fix
5945fa
5945fa
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.5.0-1
5945fa
- ha_cluster - add pacemaker cluster properties configuration
5945fa
  Resolves rhbz#1982913 (EL8)
5945fa
  Resolves rhbz#1982906 (EL9)
5945fa
5945fa
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.3-1
5945fa
- crypto_policies - rename 'policy modules' to 'subpolicies'
5945fa
  Resolves rhbz#1982896 (EL9)
5945fa
  Resolves rhbz#1982897 (EL8)
5945fa
1c0cc2
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.2-1
1c0cc2
- storage - relabel doesn't support - Fixed volume relabeling
1c0cc2
  Resolves rhbz#1876315 (EL8)
1c0cc2
  Resolves rhbz#1982841 (EL9)
1c0cc2
ca6637
* Fri Jul  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.1-1
ca6637
- network - Re-running the network system role results in "changed: true" when nothing has actually changed
ca6637
  Resolves rhbz#1943384
ca6637
- network - Test tests_bond_initscripts.yml failed to create interface
ca6637
  Resolves rhbz#1918210
ca6637
845d78
* Thu Jul  8 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.0-1
845d78
- storage - LVMVDO support
845d78
  Resolves rhbz#1882475
845d78
  Resolves rhbz#1978488
845d78
845d78
* Wed Jun 23 2021 Rich Megginson <rmeggins@redhat.com> - 1.3.0-1
845d78
- ha_cluster - add pacemaker resources configuration
845d78
  Resolves rhbz#1963283
845d78
- ha_cluster - code cleanup
845d78
  Resolves rhbz#1970666
845d78
- Postfix RHEL system role README.md missing variables under the "Role Variables" section
845d78
  Resolves rhbz#1961858
845d78
- logging README.html examples are rendered incorrectly
845d78
  Resolves rhbz#1962374
845d78
- make postfix role idempotent - round 2
845d78
  Resolves rhbz#1960375
845d78
- selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
845d78
  Resolves rhbz#1966681
845d78
- metrics role task to enable logging for targeted hosts not working
845d78
  Resolves rhbz#1967335
845d78
- network - Add 'auto_gateway' option
845d78
  Resolves rhbz#1897565
845d78
- network - Only show stderr_lines by default
845d78
  Resolves rhbz#1970666
845d78
- storage - LVMVDO support
845d78
  Resolves rhbz#1882475
845d78
- storage - fix several linter issues
845d78
  Resolves rhbz#1970666
845d78
- ssh - Fix variable precedence when invoked through roles
845d78
  Resolves rhbz#1966711
845d78
- ssh - Update configuration options list for OpenSSH 8.6
845d78
  Resolves rhbz#1970666
845d78
- sshd - Fix variable precedence when invoked through roles
845d78
  Resolves rhbz#1966711
845d78
- sshd - Update configuration options list for OpenSSH 8.6
845d78
  Resolves rhbz#1970666
845d78
- sshd - support for appending a snippet to configuration file
845d78
  Resolves rhbz#1970642
845d78
- timesync - add NTS support
845d78
  Resolves rhbz#1970664
845d78
- timesync - rebase to latest
845d78
  Resolves rhbz#1970666
845d78
- nbde_client - rebase to latest
845d78
  Resolves rhbz#1970666
845d78
845d78
* Thu Jun 17 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-3
845d78
- Make the ansible_collection_files macro defined in Fedora automatically and
845d78
  in RHEL manually consistent - having slash at the end to clean double-slashes
845d78
845d78
* Wed Jun 16 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-2
845d78
- Remove slash (/) from the end of URLs to improve code readability
845d78
845d78
* Wed Jun 16 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.3-1
845d78
- Add EL 9 support for timesync and network
845d78
  Resolves rhbz#1952887
845d78
845d78
* Tue Jun 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-3
9b1269
- Fix HTML rendering of internal links when using pandoc/asciidoc
9b1269
- Uses pandoc gfm instead of markdown_github
9b1269
  Resolves rhbz#1962976
9b1269
9b1269
* Fri Jun 11 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.2-2
9b1269
- Make spec file available for older versions of OSes.
9b1269
- Drop python3-six dependency which was used by lsr_role2collection.py.
9b1269
- Drop html files from rpm if the version has no markdown parser.
9b1269
- Drop unnecessary python scripts which include python3 only code, e.g.,
9b1269
  f-strings.
9b1269
- auto_maintenance - ability to convert "- ROLENAME" to "- FQCN" in the doc files such as README
9b1269
- auto_maintenance - lsr_role2collection.py - Adding encoding="utf-8" to open.
9b1269
  Resolves rhbz#1957876
9b1269
9b1269
* Wed Jun  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
9b1269
- fix kdump tests_ssh for basic smoke test
9b1269
  Resolves rhbz#1957876
9b1269
- ha_cluster - cannot read preshared key in binary format
9b1269
  Resolves rhbz#1952620
9b1269
- Add hybrid_e2e option to PTP domain
9b1269
  Resolves rhbz#1957849
9b1269
9b1269
* Fri May 21 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.1-1
9b1269
- fix logging README.html examples' rendering problems
9b1269
  Resolves rhbz#1962374
9b1269
- fix broken internal links in README.md files
9b1269
  Resolves rhbz#1962976
9b1269
9b1269
* Mon May 17 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
9b1269
- Add BuildRequires: rubygem-kramdown for Fedora and RHEL >= 9
9b1269
9b1269
* Fri May 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
9b1269
- rebase roles to latest upstream
9b1269
  Resolves rhbz#1957876
9b1269
- use FQRN in postfix README
9b1269
  Resolves rhbz#1958963
9b1269
- use relayhost in postfix README
9b1269
  Resolves rhbz#1866544
9b1269
- network - Add support for ETHTOOL Ring option
9b1269
  Resolves rhbz#1959649
9b1269
- storage: calltrace observed when set type: partition for storage_pools
9b1269
  Resolves rhbz#1854187
9b1269
9b1269
* Thu May 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.1.0-2
9b1269
- Dependencies in the collection packaging
9b1269
  Resolves rhbz#1954747
9b1269
5611eb
* Wed Apr 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.1.0-1
5611eb
- rebase timesync role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- timesync - add timesync_chrony_custom_settings variable for free-form
5611eb
  local configs
5611eb
  Resolves rhbz#1938023
5611eb
- do not use ignore_errors in timesync role
5611eb
  Resolves rhbz#1938014
5611eb
- support for timesync_max_distance to configure maxdistance/maxdist parameter
5611eb
  Resolves rhbz#1938016
5611eb
- support for ntp xleave, filter, and hw timestamping
5611eb
  Resolves rhbz#1938020
5611eb
- rebase selinux role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- should not reload the SELinux policy if its not changed
5611eb
  Resolves rhbz#1757869
5611eb
- Ability to install custom SELinux module via Ansible
5611eb
  Resolves rhbz#1848683
5611eb
- rebase storage role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- rebase network role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- support for ipv6_disabled to disable ipv6 for address
5611eb
  Resolves rhbz#1939711
5611eb
- rebase postfix role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- rebase metrics role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- rebase sshd role to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- rebase remaining roles to latest upstream
5611eb
  Resolves rhbz#1937938
5611eb
- Generate %%files dynamically
5611eb
- add vpn role
5611eb
  Resolves rhbz#1943679
5611eb
5611eb
* Tue Apr 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-2
5611eb
- Adding the -collection-artifact subpackage, enabled using
5611eb
  "--with collection_artifact". It is used for importing to
5611eb
  ansible galaxy/automation hub.
5611eb
- README.html files (main README for the collection and README
5611eb
  for each role) are not located in /usr/share/ansible/collections,
5611eb
  but just put in /usr/share/doc/linux-system-roles/collection in rpm.
5611eb
- The README.html files are not included in the collection artifact.
5611eb
- Fixing "sshd role README.md examples use incorrect role name".
5611eb
6379e2
* Wed Mar 17 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-1
6379e2
- Fix description field in galaxy.yml
6379e2
- Remove "Technology Preview" from Collection README
6379e2
- Merging individual ignore file and add it to the package
6379e2
- Add a note to each module Doc to indicate it is private
6379e2
- Add patches for network and storage role ansible-test fixes
6379e2
  Resolves rhbz#1935451
6379e2
- Simplify doc tags in %%files, corrects a forgotten doc tag for ha_cluster
6379e2
- Suppress one ansible-lint warning in ha_cluster
6379e2
c82095
* Tue Feb 23 2021 Fernando Fernandez Mancera <ferferna@redhat.com> - 1.0.0-32
c82095
- Add patch for the inclusive language leftover on network-role README.md,
c82095
  Resolves rhbz#1931931
c82095
8ee312
* Mon Feb 22 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-31
8ee312
- Rebase certificate role to pick up a test fix, Resolves rhbz#1931568
8ee312
- Rebase logging role to fix default private key path,
8ee312
  upstream PR #218
8ee312
8ee312
* Mon Feb 22 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-30
8ee312
- Correct merge botch in previous (ssh/README.md is a doc file)
8ee312
- Update galaxy.yml even on Fedora, auto-maintenance may not have
8ee312
  a consistent version number
8ee312
- Update collection doc transformation to match a modified text
8ee312
  and include the Tech Preview note again
8ee312
8d0a7f
* Thu Feb 18 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-29
8d0a7f
- Change internal role prefix to more descriptive private_${role}_subrole_
8d0a7f
- Sync spec improvements from Fedora and introduce helper macros
8d0a7f
  No functional change except for license files location
8d0a7f
- Disable mssql metrics test on non-x86_64 where the packages
8d0a7f
  are not available. Upstream PR #73
8d0a7f
8d0a7f
* Wed Feb 17 2021 Rich Megginson <rmeggins@redhat.com> - 1.0.0-28
8d0a7f
- Add patch for sshd https://github.com/willshersystems/ansible-sshd/pull/155
8d0a7f
  for ansible 2.8/jinja 2.7 support for sshd role
8d0a7f
- Rebase certificate, kernel_settings, nbde_client for jinja27
8d0a7f
- Rebase the logging role, Resolves rhbz#1927943
8d0a7f
- Rebase storage role, Resolves rhbz#1894651 - interpreatation of
8d0a7f
  omitted parameters
8d0a7f
- Apply storage PR #201 to dispense with the need of listing all disks
8d0a7f
  in existing pools, Resolves rhbz1894676
8d0a7f
- Apply storage PR #199 to allow reducing the requested volume sizes
8d0a7f
  if needed to fit, Resolves rhbz1894647
8d0a7f
- Rebase the network role, Resolves rhbz1893959, rhbz1893957
8d0a7f
- Add the ssh client role, Resolves rhbz1893712
8d0a7f
- Minor issue in selinux - no variable named present
8d0a7f
  Resolves rhbz1926947
8d0a7f
- Prefix internal roles with private_, resolves rhbz#1927417
8d0a7f
- Add the ha_cluster role, Resolves rhbz#1893743
8d0a7f
9d4a29
* Thu Feb 11 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-27
9d4a29
- Rebase the logging role, Resolves rhbz#1889484
9d4a29
- Fixes to collection docs and galaxy metadata from nhosoi
9d4a29
- Apply network PR #350 Resolves rhbz#1927392
9d4a29
0fb9c7
* Wed Feb  3 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-26
0fb9c7
- Rebase the metrics role, Resolves rhbz#1895188, rhbz#1893908
0fb9c7
d018ad
* Tue Jan 26 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-25
d018ad
- Apply storage PR #153 to fix a problem with partition name on NVMe devices
d018ad
  Resolves: rhbz1865990
d018ad
- Remove symlinks to roles under tests
d018ad
- Cleanup of role directories - remove files starting with . in roles' root
d018ad
  directories and Git files under tests. Resolves rhbz#1650550
d018ad
- Add collection support, make Version semver compatible: 1.0 -> 1.0.0
d018ad
  Resolves rhbz#1893906
d018ad
- Autogenerate Automation-Hub README.md if building for RHEL
d018ad
- Renumber sources, Source is now auto-maintenance since it is the root
d018ad
  of the source tree, kdump becomes Source4 (4 was originally firewall)
d018ad
- Introduce bcond_with/without ansible, work on Fedora, RHEL and EPEL
d018ad
- Rebase certificate role to include collection-related workarounds,
d018ad
  no change in behavior intended
d018ad
- Rebase network role, includes collection-related workarounds
d018ad
- Revert an invasive network change to enable EPEL (PR #335) and implement
d018ad
  a minimal version
d018ad
663612
* Fri Jan 15 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-24
663612
- Apply PR #63 for kdump to fix a problem in test introduced by rebase
663612
7bd08a
* Fri Jan  8 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-23
7bd08a
- Add {crypto_policies,sshd}/README.md to docfiles, thanks jjelen
7bd08a
- Fix role name in selinux patch
7bd08a
- Add sshd role example and README fix
7bd08a
- Fix role name in sshd role tests and docs
7bd08a
- Backport network role PR #298 to fix problems often triggered by the CI
7bd08a
  "error: down connection failed while waiting", Resolves rhbz#1817242
7bd08a
- Disable bond test in downstream CI, it started to break DNS in RHEL 8.4.
7bd08a
  Related rhbz#1915017
7bd08a
7bd08a
* Thu Jan  7 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-22
7bd08a
- Rebase kdump, certificate, storage, selinux, nbde_client/server,
7bd08a
  kernel_settings in preparation for collections
7bd08a
  Includes upstream PR #168 for storage to prevent toggling encryption
7bd08a
  in safe mode, as it is a destructive operation. Resolves rhbz#1881524
7bd08a
- Introduce & use simpler macros for Sources management,
7bd08a
  similar to %%forgemeta
7bd08a
  https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/
7bd08a
- Use a script to perform prefix transformation for all roles to reduce
7bd08a
  the number of patches
7bd08a
- Rebase tlog to add exclude_{users,groups} support, Resolves rhbz#1895472
7bd08a
- Add crypto_policies role, Resolves rhbz#1893699
7bd08a
- Add sshd role, Resolves rhbz#1893696
d1299e
4eec9e
* Mon Aug 24 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-19
4eec9e
- Rebase network role to latest upstream, resolves rhbz#1800627
4eec9e
  Drop a downstream patch with a test workaround that is not needed anymore.
4eec9e
- Fix script for role prefix transformation
4eec9e
- Rebase metrics role to pick up test changes, PR #19
4eec9e
- Rebase kernel_settings role to latest upstream, resolves rhbz#1851557
4eec9e
4eec9e
* Mon Aug 24 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-18
4eec9e
- Rebase storage role to latest upstream, resolves rhbz#1848254, rhbz#1851654,
4eec9e
  rhbz#1862867
4eec9e
- Rebase nbde_client role to latest upstream, resolves rhbz#1851654
4eec9e
- Rebase logging role to latest upstream, resolves rhbz#1851654, rhbz#1861318
4eec9e
- Rebase metrics role to latest upstream, resolves rhbz#1869390, rhbz#1869389,
4eec9e
  rhbz#1868378
4eec9e
56e229
* Fri Aug 21 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-17
56e229
- Rebase certificate role to latest upstream, resolves rhbz#1859547
56e229
ac6c85
* Mon Aug 10 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-16
ac6c85
- Rebase logging role to latest upstream, resolves rhbz#1854546, rhbz#1861318,
ac6c85
  rhbz#1860896, adds test for rhbz#1850790
ac6c85
- Rebase metrics role to latest upstream, resolves rhbz#1855544, rhbz#1855539,
ac6c85
  rhbz#1848763
ac6c85
- Fix whitespace in postfix role patch
ac6c85
77f1f8
* Fri Jul 31 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-15
77f1f8
- Rebase storage role to latest upstream, resolves rhbz#1854191, rhbz#1848250,
77f1f8
  rhbz#1850790 (including test)
77f1f8
- Rebase nbde_client role to latest upstream, adds test for rhbz#1850790
77f1f8
- Rebase certificate role to latest upstream, adds test for rhbz#1850790
77f1f8
- Rebase nbde_server role to latest upstream, resolves rhbz#1850790
77f1f8
  (including test)
77f1f8
- Rebase tlog role to latest upstream, resolves rhbz#1855424
77f1f8
- Rebase kernel_settings role to rev b8bc86b, resolves rhbz#1850790
77f1f8
- Add EL 8 to supported versions in postfix and kdump role metadata,
77f1f8
  resolves rhbz#1861661
77f1f8
b57f19
* Mon Jul 20 2020 Rich Megginson <rmeggins@redhat.com> - 1.0-14
b57f19
- Rebase certificate role to latest upstream, resolves rhbz#1858840
b57f19
b57f19
* Fri Jul 17 2020 Rich Megginson <rmeggins@redhat.com> - 1.0-13
b57f19
- Rebase certificate role to latest upstream, resolves rhbz#1858316, rhbz#1848745
b57f19
921f83
* Mon Jun 29 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-12
921f83
- Rebase network role to latest upstream, resolves rhbz#1822777, rhbz#1848472
921f83
- Rebase logging role to latest upstream, resolves rhbz#1850790,
921f83
  rhbz#1851804, rhbz#1848762
921f83
- Rebase certificate role to latest upstream, resolves rhbz#1848742,
921f83
  rhbz#1850790
921f83
- Rebase nbde_client role to latest upstream, resolves rhbz#1848766,
921f83
  rhbz#1850790
921f83
921f83
* Mon Jun 15 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-11
921f83
- Rebase network role to latest upstream
921f83
- Remove all the soon-unnecessary tier1 tags in test
921f83
- Add a workaround for rhbz#1800627 in test
921f83
- Modify patches to remove tier1 tags
921f83
- Add metrics, tlog, logging, kernel_settings roles
921f83
- Add nbde_client, nbde_server, certificate roles
921f83
- Rebase storage role to latest upstream: adds support for mdraid, LUKS,
921f83
  swap manangement
921f83
921f83
* Mon Oct 21 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-10
921f83
- Add the storage_safe_mode option, true by default, to prevent accidental
921f83
  data removal: rhbz#1763242, issue #42, PR #43 and #51.
921f83
921f83
* Thu Aug 15 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-9
921f83
- Add the storage role
921f83
921f83
* Thu Jun 13 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-7
921f83
- Update tests for the network role
921f83
- Fix typo in a test for the timesync role
921f83
- Tag tests suitable for Tier1 testing
921f83
- Rebase the network role to add support for device features (PR#115,
921f83
  rhbz#1696703) and atomic changes (PR#119, rhbz#1695161)
921f83
- network: apply upstream PR#121: allow modifying interface attributes
921f83
  without disrupting services (rhbz#1695157)
921f83
921f83
* Wed May 29 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-6
921f83
- Rebase the selinux role, fixes typo in tests, uncovered by Ansible 2.7,
921f83
  (rhbz#1677743) and lists all input variables in defaults
921f83
  to make Satellite aware of them (rhbz#1674004, PR#43)
921f83
- Rebase the kdump role to fix check mode problems: rhbz#1685904
921f83
- Rebase the timesync role: fixes check mode problems (rhbz#1685904)
921f83
  and lists all input variables in defaults (rhbz#1674004)
921f83
- Rebase the network role: keeps the interface up for state: up
921f83
  if persistent_state is absent and solves problems with defining
921f83
  VLAN and MACVLAN interface types (issue #19) (rhbz#1685902)
921f83
921f83
* Sat Jan 12 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-5
921f83
- spec file improvement: Unify the source macros with deftag() and defcommit()
921f83
- Update to upstream released versions and drop unnecessary patches.
921f83
- Unify the spec file with Fedora (no functional changes intended).
921f83
- Misc spec file comments fixes (by Mike DePaulo)
921f83
- Fix rpmlint error by escaping a previous changelog entry with a macro (by Mike DePaulo)
921f83
- Comply with Fedora guidelines by always using "cp -p" in %%install (by Mike DePaulo)
921f83
- Rebase network role - doc improvements, Fedora 29 and Ansible 2.7 support
921f83
- Regenerate network role patch to apply without offset
921f83
- Rebase kdump role to fix a forgotten edit, rhbz#1645633
921f83
- Update timesync examples: add var prefix (rhbz#1642152), correct role prefix
921f83
- Add Obsoletes for the -techpreview subpackage
921f83
- Add warnings to role READMEs and other doc updates, rhbz#1616018
921f83
- network: split the state setting into state and persistent_state, rhbz#1616014
921f83
- depend on python-jmespath as Ansible will not ship it, rhbz#1660559
921f83
921f83
* Tue Aug 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-4
921f83
- Format the READMEs as html, by vdolezal, with changes to use highlight
921f83
  (source-highlight does not understand YAML)
921f83
921f83
* Thu Aug  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-3
921f83
- Rebase the network role to the last revision (d866422).
921f83
  Many improvements to tests, introduces autodetection of the current provider
921f83
  and defaults to using profile name as interface name.
921f83
- Rebase the selinux, timesync and kdump roles to their 1.0rc1 versions.
921f83
  Many changes to the role interfaces to make them more consistent
921f83
  and conforming to Ansible best practices.
921f83
- Update the description.
921f83
921f83
* Fri May 11 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-4
921f83
- Fix complaints about /usr/bin/python during RPM build by making the affected scripts non-exec
921f83
- Fix merge botch
921f83
921f83
* Mon Mar 19 2018 Troy Dawson <tdawson@redhat.com> - 0.6-3.1
8d0a7f
- Use -a (after cd) instead of -b (before cd) in %%setup
921f83
921f83
* Wed Mar 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-3
921f83
- Minor corrections of the previous change by Till Maas.
921f83
921f83
* Fri Mar  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-2
921f83
- Document network role options: static routes, ethernet, dns
921f83
  Upstream PR#36, bz1550128, documents bz1487747 and bz1478576
921f83
921f83
* Tue Jan 30 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-1
921f83
- Drop hard dependency on ansible (#1525655), patch from Yaakov Selkowitz
921f83
- Update the network role to version 0.4, solves bz#1487747, bz#1478576
921f83
921f83
* Tue Dec 19 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-3
921f83
- kdump: fix the wrong conditional for ssh checking and improve test (PR#10)
921f83
921f83
* Tue Nov 07 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-2
921f83
- kdump: add ssh support. upstream PR#9, rhbz1478707
921f83
921f83
* Tue Oct 03 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-1
921f83
- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
921f83
  (bz#1493574)
921f83
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
921f83
  makes the network role idempotent (bz#1476053) and fixes manual
921f83
  network provider selection (bz#1485074).
921f83
921f83
* Mon Aug 28 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.4-1
921f83
- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
921f83
  ensure that state:absent followed by state:up works (bz#1478910), and change
921f83
  the example IP adresses to the IANA-assigned ones.
921f83
- SELinux: fix the case when SELinux is disabled (bz#1479546).
921f83
921f83
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-2
921f83
- We can't change directories to symlinks (rpm bug #447156) so keep the old
921f83
  names and create the new names as symlinks.
921f83
921f83
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-1
921f83
- Change the prefix to linux-system-roles., keeping compatibility
921f83
  symlinks.
921f83
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
921f83
  adds InfiniBand support and other fixes.
921f83
- Drop a patch included upstream.
921f83
921f83
* Mon Jun 26 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-2
921f83
- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
921f83
- Move the network example inventory to the documentation directory together.
921f83
  with the example playbooks and delete the now empty "examples" directory.
921f83
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.
921f83
921f83
* Tue Jun 6 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-1
921f83
- Update the networking role to version 0.2 (#1459203)
921f83
- Version every role and the package separately. They live in separate repos
921f83
  and upstream release tags are not coordinated.
921f83
921f83
* Mon May 22 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-2
921f83
- Prefix the roles in examples and documentation with rhel-system-roles.
921f83
921f83
* Thu May 18 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-1
921f83
- Update to 0.1 (first upstream release).
921f83
- Remove the tuned role, it is not ready yet.
921f83
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
921f83
  directly to get rid of an extra directory.
921f83
- Depend on ansible.
921f83
921f83
* Thu May 4 2017  Pavel Cahyna <pcahyna@redhat.com> - 0-0.1.20170504
921f83
- Initial release.
921f83
- kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
921f83
- postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
921f83
- selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
921f83
- timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
921f83
- tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
921f83
- network r. 03ff040df78a14409a0d89eba1235b8f3e50a750
921f83