Blame SPECS/rhel-system-roles.spec

90a374
# NOTE: Even though ansible-core is in 8.6, it is only available
90a374
# at *runtime*, not at *buildtime* - so we can't have
90a374
# ansible-core as a build_dep on RHEL8
90a374
%if 0%{?fedora} || 0%{?rhel} >= 9
90a374
%bcond_without ansible
eb2b15
%if 0%{?fedora}
eb2b15
BuildRequires: ansible-packaging
90a374
%else
eb2b15
BuildRequires: ansible-core >= 2.11.0
90a374
%endif
eb2b15
%else
eb2b15
%bcond_with ansible
0c1b9b
%endif
0c1b9b
fdc326
%bcond_with collection_artifact
fdc326
fdc326
%if 0%{?fedora} || 0%{?rhel} >= 8
fdc326
%bcond_without html
fdc326
%else
fdc326
# pandoc is not supported in rhel 7 and older,
fdc326
# which is needed for converting .md to .html.
fdc326
%bcond_with html
fdc326
%endif
fdc326
190903
%if 0%{?rhel}
190903
Name: rhel-system-roles
190903
%else
190903
Name: linux-system-roles
190903
%endif
fdc326
Url: https://github.com/linux-system-roles
190903
Summary: Set of interfaces for unified system management
eb2b15
Version: 1.21.1
d3b5a2
Release: 1%{?dist}
190903
90a374
License: GPLv3+ and MIT and BSD and Python
0c1b9b
%global _pkglicensedir %{_licensedir}/%{name}
eb2b15
%global roleinstprefix %{name}.
0c1b9b
%if 0%{?rhel}
0c1b9b
%global collection_namespace redhat
0c1b9b
%global collection_name rhel_system_roles
0c1b9b
%else
0c1b9b
%global collection_namespace fedora
0c1b9b
%global collection_name linux_system_roles
0c1b9b
%endif
0c1b9b
0c1b9b
%global collection_version %{version}
0c1b9b
0c1b9b
# Helper macros originally from macros.ansible by Igor Raits <ignatenkobrain>
eb2b15
# On RHEL, not available, so we must define those macros locally
eb2b15
# On Fedora, provided by ansible-packager
0c1b9b
# Not used (yet). Could be made to point to AH in RHEL - but what about CentOS Stream?
0c1b9b
#%%{!?ansible_collection_url:%%define ansible_collection_url() https://galaxy.ansible.com/%%{collection_namespace}/%%{collection_name}}
eb2b15
%if 0%{?rhel}
eb2b15
Provides: ansible-collection(%{collection_namespace}.%{collection_name}) = %{collection_version}
eb2b15
%global ansible_collection_files %{_datadir}/ansible/collections/ansible_collections/%{collection_namespace}/
eb2b15
%define ansible_roles_dir %{_datadir}/ansible/roles
eb2b15
%if %{without ansible}
eb2b15
# Untar and copy everything instead of galaxy-installing the built artifact when ansible is not available
eb2b15
%define ansible_collection_build() tar -cf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz .
eb2b15
%define ansible_collection_install() mkdir -p %{buildroot}%{ansible_collection_files}%{collection_name}; (cd %{buildroot}%{ansible_collection_files}%{collection_name}; tar -xf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz)
fdc326
%else
eb2b15
%define ansible_collection_build() ansible-galaxy collection build
eb2b15
%define ansible_collection_install() ansible-galaxy collection install -n -p %{buildroot}%{_datadir}/ansible/collections %{collection_namespace}-%{collection_name}-%{version}.tar.gz
fdc326
%endif
fdc326
%endif
eb2b15
# be compatible with the usual Fedora Provides:
eb2b15
Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{collection_version}-%{release}
fdc326
90a374
# ansible-core is in rhel 8.6 and later - default to ansible-core, but allow
90a374
# the use of ansible if present - we may revisit this if the automatic dependency
90a374
# generator is added to ansible-core in RHEL
90a374
# Fedora - the automatic generator will add this - no need to explicit declare
90a374
# it in the spec file
90a374
# EL7 - no dependency on ansible because there is no ansible in el7 - user is
90a374
# responsible for knowing they have to install ansible
90a374
%if 0%{?rhel} >= 8
90a374
Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)
90a374
%endif
0c1b9b
190903
# For each role, call either defcommit() or deftag(). The other macros
190903
# (%%id and %%shortid) can be then used in the same way in both cases.
190903
# This way  the rest of the spec file des not need to know whether we are
190903
# dealing with a tag or a commit.
0c1b9b
%global archiveext tar.gz
0c1b9b
# list of role names
0c1b9b
%global rolenames %nil
0c1b9b
# list of assignments that can be used to populate a bash associative array variable
0c1b9b
%global rolestodir %nil
0c1b9b
%define getarchivedir() %(p=%{basename:%{S:%{1}}}; echo ${p%%.%{archiveext}})
0c1b9b
0c1b9b
%define defcommit() %{expand:%%global ref%{1} %{2}
0c1b9b
%%global shortcommit%{1} %%(c=%%{ref%{1}}; echo ${c:0:7})
0c1b9b
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
0c1b9b
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
fdc326
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
0c1b9b
%%global rolenames %%{?rolenames} %%{rolename%{1}}
0c1b9b
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
0c1b9b
%%global rolestodir %%{?rolestodir} %{roletodir%{1}}
190903
}
190903
0c1b9b
%define deftag() %{expand:%%global ref%{1} %{2}
0c1b9b
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
0c1b9b
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
fdc326
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
0c1b9b
%%global rolenames %%{?rolenames} %%{rolename%{1}}
0c1b9b
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
0c1b9b
%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}
190903
}
190903
eb2b15
%global mainid d6a8e0167e9ed8d089093b7ead1e298241b534e1
eb2b15
Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz
eb2b15
eb2b15
# BEGIN AUTOGENERATED SOURCES
190903
%global rolename1 postfix
eb2b15
%deftag 1 1.3.3
190903
190903
%global rolename2 selinux
eb2b15
%deftag 2 1.5.6
190903
190903
%global rolename3 timesync
eb2b15
%deftag 3 1.7.2
190903
0c1b9b
%global rolename4 kdump
eb2b15
%deftag 4 1.2.6
0c1b9b
190903
%global rolename5 network
eb2b15
%deftag 5 1.11.2
190903
8b3abe
%global rolename6 storage
eb2b15
%deftag 6 1.9.6
8b3abe
9693d8
%global rolename7 metrics
eb2b15
%deftag 7 1.8.1
9693d8
9693d8
%global rolename8 tlog
eb2b15
%deftag 8 1.2.11
9693d8
9693d8
%global rolename9 kernel_settings
eb2b15
%deftag 9 1.1.11
9693d8
9693d8
%global rolename10 logging
eb2b15
%deftag 10 1.11.5
9693d8
9693d8
%global rolename11 nbde_server
eb2b15
%deftag 11 1.3.3
9693d8
9693d8
%global rolename12 nbde_client
eb2b15
%deftag 12 1.2.10
9693d8
9693d8
%global rolename13 certificate
eb2b15
%deftag 13 1.1.9
0c1b9b
0c1b9b
%global rolename14 crypto_policies
eb2b15
%deftag 14 1.2.7
0c1b9b
fdc326
%global forgeorg15 https://github.com/willshersystems
0c1b9b
%global repo15 ansible-sshd
0c1b9b
%global rolename15 sshd
eb2b15
%deftag 15 v0.18.1
0c1b9b
0c1b9b
%global rolename16 ssh
eb2b15
%deftag 16 1.1.12
0c1b9b
0c1b9b
%global rolename17 ha_cluster
eb2b15
%deftag 17 1.8.7
0c1b9b
fdc326
%global rolename18 vpn
eb2b15
%deftag 18 1.5.3
90a374
90a374
%global rolename19 firewall
eb2b15
%deftag 19 1.4.2
fdc326
90a374
%global rolename20 cockpit
eb2b15
%deftag 20 1.4.3
eb2b15
eb2b15
%global rolename21 podman
eb2b15
%deftag 21 1.1.2
eb2b15
eb2b15
%global rolename22 ad_integration
eb2b15
%deftag 22 1.0.2
eb2b15
eb2b15
%global rolename23 rhc
eb2b15
%deftag 23 1.1.1
eb2b15
eb2b15
%global rolename24 journald
eb2b15
%deftag 24 1.0.0
90a374
0c1b9b
Source1: %{archiveurl1}
0c1b9b
Source2: %{archiveurl2}
0c1b9b
Source3: %{archiveurl3}
0c1b9b
Source4: %{archiveurl4}
0c1b9b
Source5: %{archiveurl5}
0c1b9b
Source6: %{archiveurl6}
0c1b9b
Source7: %{archiveurl7}
0c1b9b
Source8: %{archiveurl8}
0c1b9b
Source9: %{archiveurl9}
0c1b9b
Source10: %{archiveurl10}
0c1b9b
Source11: %{archiveurl11}
0c1b9b
Source12: %{archiveurl12}
0c1b9b
Source13: %{archiveurl13}
0c1b9b
Source14: %{archiveurl14}
0c1b9b
Source15: %{archiveurl15}
0c1b9b
Source16: %{archiveurl16}
0c1b9b
Source17: %{archiveurl17}
fdc326
Source18: %{archiveurl18}
90a374
Source19: %{archiveurl19}
90a374
Source20: %{archiveurl20}
eb2b15
Source21: %{archiveurl21}
eb2b15
Source22: %{archiveurl22}
eb2b15
Source23: %{archiveurl23}
eb2b15
Source24: %{archiveurl24}
eb2b15
# END AUTOGENERATED SOURCES
90a374
eb2b15
# Includes with definitions/tags that differ between RHEL and Fedora
eb2b15
Source2301: redhat_subscription.py
eb2b15
Source1001: extrasources.inc
69e14a
eb2b15
%include %{SOURCE1001}
c505a7
eb2b15
Source995: CHANGELOG.md
3c00e5
190903
BuildArch: noarch
190903
fdc326
%if %{with html}
fdc326
# Requirements for md2html.sh to build the documentation
fdc326
%if 0%{?fedora} || 0%{?rhel} >= 9
fdc326
BuildRequires: rubygem-kramdown-parser-gfm
fdc326
%else
190903
BuildRequires: pandoc
fdc326
BuildRequires: asciidoc
190903
BuildRequires: highlight
fdc326
%endif
fdc326
%endif
fdc326
fdc326
# Requirements for galaxy_transform.py
0c1b9b
BuildRequires: python3
eb2b15
BuildRequires: python%{python3_pkgversion}-ruamel-yaml
190903
eb2b15
# We must put %%description within the if block to avoid empty lines showing up.
190903
%if 0%{?rhel}
190903
%description
190903
Collection of Ansible roles and modules that provide a stable and
190903
consistent configuration interface for managing multiple versions
190903
of Red Hat Enterprise Linux.
190903
%else
190903
%description
190903
Collection of Ansible roles and modules that provide a stable and
190903
consistent configuration interface for managing multiple versions
190903
of Fedora, Red Hat Enterprise Linux & CentOS.
190903
%endif
190903
fdc326
%if %{with collection_artifact}
fdc326
%package collection-artifact
fdc326
Summary: Collection artifact to import to Automation Hub / Ansible Galaxy
fdc326
fdc326
%description collection-artifact
fdc326
Collection artifact for %{name}. This package contains %{collection_namespace}-%{collection_name}-%{version}.tar.gz
fdc326
%endif
fdc326
eb2b15
# Fix issue with package update introduce with changing symlink to directory
eb2b15
# in 1.21.1-5
eb2b15
%pretrans -p <lua>
eb2b15
roles = {
eb2b15
    "certificate", "cockpit", "crypto_policies", "firewall", "ha_cluster",
eb2b15
    "kdump", "kernel_settings", "logging", "metrics", "nbde_client",
eb2b15
    "nbde_server", "network", "postfix", "selinux", "ssh", "sshd", "storage",
eb2b15
    "timesync", "tlog", "vpn"
eb2b15
}
eb2b15
for i,v in ipairs(roles) do
eb2b15
    path = "/usr/share/ansible/roles/linux-system-roles." .. v
eb2b15
    st = posix.stat(path)
eb2b15
    if st and st.type == "link" then
eb2b15
      os.remove(path)
eb2b15
    end
eb2b15
end
eb2b15
190903
%prep
eb2b15
# BEGIN AUTOGENERATED SETUP
eb2b15
%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -n %{getarchivedir 0}
eb2b15
# END AUTOGENERATED SETUP
90a374
eb2b15
%if 0%{?rhel}
eb2b15
# Untar vendored collection tarballs to corresponding directories
eb2b15
for file in %{SOURCE801} %{SOURCE901} %{SOURCE902}; do
eb2b15
    if [[ "$(basename $file)" =~ ([^-]+)-([^-]+)-(.+).tar.gz ]]; then
90a374
        ns=${BASH_REMATCH[1]}
90a374
        name=${BASH_REMATCH[2]}
90a374
        ver=${BASH_REMATCH[3]}
90a374
        mkdir -p .external/$ns/$name
90a374
        pushd .external/$ns/$name > /dev/null
90a374
        tar xfz "$file"
90a374
        popd > /dev/null
90a374
    fi
90a374
done
eb2b15
%endif
0c1b9b
0c1b9b
declare -A ROLESTODIR=(%{rolestodir})
0c1b9b
for rolename in %{rolenames}; do
fdc326
    dir_from_archive="${ROLESTODIR[${rolename}]}"
fdc326
    if [ ! -d "$dir_from_archive" ]; then
fdc326
        # ansible-sshd uses tags like vX.Y.Z
fdc326
        # using the github archive/ link with a tag like this strips
fdc326
        # the leading v from the tag used to construct the directory
fdc326
        # name in the archive
fdc326
        if [[ "$dir_from_archive" =~ %{repo15}-v([0-9]+[.][0-9]+.*) ]]; then
fdc326
            dir_from_archive="%{repo15}-${BASH_REMATCH[1]}"
fdc326
        fi
fdc326
    fi
fdc326
    mv "$dir_from_archive" ${rolename}
0c1b9b
done
0c1b9b
eb2b15
%if 0%{?rhel}
fdc326
cd %{rolename2}/tests
fdc326
# this test causes avcs we want to ignore
fdc326
sed -r -i -e '/hosts: all/a\
fdc326
  tags:\
fdc326
    - tests::avc' tests_selinux_disabled.yml
fdc326
cd ../..
eb2b15
%endif
fdc326
0c1b9b
cd %{rolename15}
d3b5a2
find -P tests examples -name \*.yml | while read file; do
d3b5a2
  sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" \
d3b5a2
     -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" "$file"
d3b5a2
done
d3b5a2
sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" README.md
fdc326
sed -r -i -e "s/min_ansible_version: 2.8/min_ansible_version: 2.9/" meta/main.yml
69e14a
cd ..
190903
90a374
cd %{rolename7}
90a374
# metrics roles dir is a symlink to the vendored dir.
90a374
# rpm upgrade doesn't like the symlink.  Replace the
90a374
# symlink with the real dir
90a374
rolesdir=$(pwd)/roles
90a374
realrolesdir=$(realpath "$rolesdir")
90a374
if [ "$rolesdir" != "$realrolesdir" ]; then
90a374
    rm -rf roles
90a374
    mv "$realrolesdir" .
90a374
    rm -rf vendor
90a374
fi
90a374
cd ..
90a374
90a374
%if 0%{?rhel}
90a374
# Unpack tar.gz to retrieve to be vendored modules and place them in the roles library.
90a374
# ansible.posix:
90a374
#   - library:
90a374
#     - Module selinux and seboolean for the selinux role
90a374
#     - Module mount for the storage role
eb2b15
declare -A module_map=( ["selinux.py"]="selinux" ["seboolean.py"]="selinux" ["mount.py"]="storage" )
90a374
for module in "${!module_map[@]}"; do
90a374
  role="${module_map[${module}]}"
90a374
  if [ ! -d $role/library ]; then
90a374
    mkdir $role/library
90a374
  fi
90a374
  cp -pL .external/ansible/posix/plugins/modules/$module $role/library/$module
90a374
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' -e "s/ansible_collections.ansible.posix.plugins.module_utils/ansible.module_utils.${role}_lsr/" $role/library/$module
90a374
done
90a374
90a374
# ansible.posix:
90a374
#   - module_utils:
90a374
#     - Module_util mount for the storage role
90a374
module_map=( ["mount.py"]="storage" )
90a374
for module in "${!module_map[@]}"; do
90a374
  role="${module_map[${module}]}"
90a374
  if [ ! -d $role/module_utils/${role}_lsr ]; then
90a374
    mkdir -p $role/module_utils/${role}_lsr
90a374
  fi
90a374
  cp -pL .external/ansible/posix/plugins/module_utils/$module $role/module_utils/${role}_lsr/$module
90a374
done
90a374
90a374
# community.general:
90a374
#   - library:
90a374
#     - Module seport, sefcontext and selogin for the selinux role rolename2
90a374
#     - Module ini_file for role tlog
eb2b15
#     - rhc modules
eb2b15
module_map=( ["seport.py"]="selinux" ["sefcontext.py"]="selinux" ["selogin.py"]="selinux" ["ini_file.py"]="tlog"
eb2b15
             ["redhat_subscription.py"]="rhc" ["rhsm_release.py"]="rhc" ["rhsm_repository.py"]="rhc" )
90a374
for module in "${!module_map[@]}"; do
90a374
  role="${module_map[${module}]}"
90a374
  if [ ! -d $role/library ]; then
90a374
    mkdir $role/library
90a374
  fi
d3b5a2
  # version 5.x seems to be broken?
d3b5a2
  moduledir=.external/community/general/plugins/modules
d3b5a2
  if [ ! -f $moduledir/$module ]; then
d3b5a2
    moduledir=.external/community/general/plugins/modules/system
d3b5a2
  fi
d3b5a2
  if [ ! -f $moduledir/$module ]; then
d3b5a2
    moduledir=.external/community/general/plugins/modules/files
d3b5a2
  fi
d3b5a2
  cp -pL $moduledir/$module $role/library/$module
90a374
  ls -alrtF $role/library/$module
90a374
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module
90a374
done
eb2b15
eb2b15
# Fix until the updated redhat_subscription.py is in community.general
eb2b15
cp %{SOURCE2301} rhc/library/redhat_subscription.py
eb2b15
sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' rhc/library/redhat_subscription.py
eb2b15
eb2b15
# containers.podman:
eb2b15
#   - library:
eb2b15
#     - Module podman_container_info, podman_image and podman_play for the podman role
eb2b15
module_map=( ["podman_container_info.py"]="podman" ["podman_image.py"]="podman" ["podman_play.py"]="podman" )
eb2b15
for module in "${!module_map[@]}"; do
eb2b15
  role="${module_map[${module}]}"
eb2b15
  if [ ! -d $role/library ]; then
eb2b15
    mkdir $role/library
eb2b15
  fi
eb2b15
  moduledir=.external/containers/podman/plugins/modules
eb2b15
  cp -pL $moduledir/$module $role/library/$module
eb2b15
  ls -alrtF $role/library/$module
eb2b15
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' \
eb2b15
    -e "s/ansible_collections.containers.podman.plugins.module_utils.podman/ansible.module_utils.${role}_lsr/" \
eb2b15
    $role/library/$module
eb2b15
done
eb2b15
eb2b15
# containers.podman:
eb2b15
#   - module_utils:
eb2b15
#     - Module_util common for the podman role
eb2b15
module_map=( ["common.py"]="podman" )
eb2b15
for module in "${!module_map[@]}"; do
eb2b15
  role="${module_map[${module}]}"
eb2b15
  if [ ! -d $role/module_utils/${role}_lsr ]; then
eb2b15
    mkdir -p $role/module_utils/${role}_lsr
eb2b15
  fi
eb2b15
  cp -pL .external/containers/podman/plugins/module_utils/podman/$module $role/module_utils/${role}_lsr/$module
eb2b15
done
eb2b15
eb2b15
# remove the temporary .external directory after vendoring
eb2b15
rm -rf .external
90a374
0c1b9b
# Replacing "linux-system-roles.rolename" with "rhel-system-roles.rolename" in each role
eb2b15
# Replacing "fedora.linux_system_roles." with "redhat.rhel_system_roles" in each role
eb2b15
# This is for the "roles calling other roles" case
eb2b15
# for podman, change the FQCN - using a non-FQCN module name doesn't seem to work,
eb2b15
# even for the legacy role format
eb2b15
# replace community.general for rhc
0c1b9b
for rolename in %{rolenames}; do
0c1b9b
    find $rolename -type f -exec \
eb2b15
         sed -e "s/linux-system-roles[.]${rolename}\\>/%{roleinstprefix}${rolename}/g" \
eb2b15
             -e "s/fedora[.]linux_system_roles[.]/%{collection_namespace}.%{collection_name}./g" \
eb2b15
             -e "s/containers[.]podman[.]/%{collection_namespace}.%{collection_name}./g" \
eb2b15
             -e "s/community[.]general[.]/%{collection_namespace}.%{collection_name}./g" \
eb2b15
             -i {} \;
9693d8
done
9693d8
%endif
9693d8
0c1b9b
# Removing symlinks in tests/roles
0c1b9b
for rolename in %{rolenames}; do
0c1b9b
    if [ -d ${rolename}/tests/roles ]; then
0c1b9b
        find ${rolename}/tests/roles -type l -exec rm {} \;
0c1b9b
        if [ -d ${rolename}/tests/roles/linux-system-roles.${rolename} ]; then
0c1b9b
            rm -r ${rolename}/tests/roles/linux-system-roles.${rolename}
0c1b9b
        fi
0c1b9b
    fi
0c1b9b
done
0c1b9b
rm %{rolename5}/tests/modules
0c1b9b
rm %{rolename5}/tests/module_utils
0c1b9b
rm %{rolename5}/tests/playbooks/roles
fdc326
# Drop network/{scripts/print_all_options.py,tests/ensure_provider_tests.py}
fdc326
# from rpm. These 2 files fail in brp-python-bytecompile due to f-strings
fdc326
# when python2 is default python.
fdc326
rm %{rolename5}/scripts/print_all_options.py
fdc326
rm %{rolename5}/tests/ensure_provider_tests.py
fdc326
# Drop storage tests/scripts
fdc326
rm -rf %{rolename6}/tests/scripts
0c1b9b
0c1b9b
# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining
0c1b9b
find -type f -executable -name '*.py' -exec \
0c1b9b
     sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +
0c1b9b
190903
%build
fdc326
%if %{with html}
fdc326
readmes=""
fdc326
for role in %{rolenames}; do
fdc326
    readmes="${readmes} $role/README.md"
fdc326
done
fdc326
sh md2html.sh $readmes
fdc326
%endif
0c1b9b
0c1b9b
mkdir .collections
0c1b9b
%if 0%{?rhel}
0c1b9b
# Convert the upstream collection readme to the downstream one
0c1b9b
%{SOURCE998} lsr_role2collection/collection_readme.md
90a374
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
90a374
                      "Red Hat Enterprise Linux System Roles Ansible Collection" \
90a374
                      "https://linux-system-roles.github.io" \
90a374
                      "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/administration_and_configuration_tasks_using_system_roles_in_rhel" \
90a374
                      "https://access.redhat.com/articles/3050101" \
90a374
                      "https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208&component=rhel-system-roles" \
90a374
                      > galaxy.yml.tmp
90a374
# we vendor-in all of the dependencies on rhel, so remove them
90a374
rm -f lsr_role2collection/collection_requirements.txt
90a374
# but leave bindep.txt
90a374
%else
90a374
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
90a374
                      "Linux System Roles Ansible Collection" \
90a374
                      > galaxy.yml.tmp
0c1b9b
%endif
0c1b9b
mv galaxy.yml.tmp galaxy.yml
0c1b9b
90a374
includes=""
0c1b9b
for role in %{rolenames}; do
90a374
    includes="$includes --include $role"
90a374
%if 0%{?rhel}
90a374
    # we vendor-in all of the dependencies on rhel, so remove them
eb2b15
    rm -f "$role/meta/requirements.yml" "$role/meta/collection-requirements.yml" \
eb2b15
      "$role/tests/collection-requirements.yml"
90a374
%endif
0c1b9b
done
0c1b9b
eb2b15
# do not process changelogs on RHEL
eb2b15
%if 0%{?rhel}
eb2b15
extra_mapping="--extra-mapping fedora.linux_system_roles:%{collection_namespace}.%{collection_name}"
eb2b15
%else
eb2b15
extra_mapping=""
eb2b15
%endif
eb2b15
LANG=C.utf-8 LC_ALL=C.utf-8 python3 release_collection.py --galaxy-yml galaxy.yml \
90a374
    --src-path $(pwd) --dest-path $(pwd)/.collections $includes --force --no-update \
eb2b15
    --src-owner %{name} --skip-git --skip-check --skip-changelog $extra_mapping --debug
0c1b9b
fdc326
# Remove table of contents from logging README.md
fdc326
# It is not needed for html and AH/Galaxy
fdc326
sed -i -e 's/^\(## Table of Contents\)/## Background\n\1/' \
fdc326
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
fdc326
sed -i -e '/^## Table of Contents/,/^## Background/d' \
fdc326
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
fdc326
fdc326
# Remove internal links from readme files
fdc326
# They are not rendered properly on AH.
fdc326
for role in %{rolenames}; do
fdc326
    sed -r -i -e 's/\[([^[]+)\]\(#[^)]+\)/\1/g' \
fdc326
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/$role/README.md
fdc326
done
190903
eb2b15
# Remove test only collection dependencies
eb2b15
# NOTE: These should not be in meta/collection-requirements.yml, they should be
eb2b15
# in tests/collection-requirements.yml, but they can't be moved yet
eb2b15
sed -i -e '/community[.]mysql:/d' -e '/community[.]postgresql:/d' \
eb2b15
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/galaxy.yml
eb2b15
eb2b15
cp %{SOURCE995} \
eb2b15
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/docs/CHANGELOG.md
d3b5a2
%if 0%{?rhel}
d3b5a2
cp %{SOURCE996} \
eb2b15
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/CHANGELOG.rst
d3b5a2
%endif
d3b5a2
eb2b15
# Build the collection
eb2b15
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
eb2b15
%ansible_collection_build
eb2b15
popd
eb2b15
190903
%install
eb2b15
mkdir -p %{buildroot}%{ansible_roles_dir}
190903
fdc326
for role in %{rolenames}; do
eb2b15
    cp -pR "$role" "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role"
fdc326
done
190903
eb2b15
%if 0%{?rhel}
eb2b15
# Create symlinks for roles in /usr/share/ansible/roles/linux-system-roles.$rolename
eb2b15
# That's required to make roles work with upstream naming too
fdc326
for role in %{rolenames}; do
eb2b15
    ln -s "%{name}.$role" "%{buildroot}%{ansible_roles_dir}/linux-system-roles.$role"
fdc326
done
190903
%endif
190903
eb2b15
mkdir -p %{buildroot}%{_pkglicensedir}
eb2b15
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}network/examples/roles
fdc326
for role in %{rolenames}; do
eb2b15
    mkdir -p "%{buildroot}%{_pkgdocdir}/$role"
eb2b15
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/CHANGELOG.md" \
eb2b15
       "%{buildroot}%{_pkgdocdir}/$role"
eb2b15
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.md" \
eb2b15
       "%{buildroot}%{_pkgdocdir}/$role"
fdc326
%if %{with html}
eb2b15
    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.html" \
eb2b15
       "%{buildroot}%{_pkgdocdir}/$role"
fdc326
%endif
eb2b15
    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" ]; then
eb2b15
        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" \
eb2b15
           "%{buildroot}%{_pkglicensedir}/$role.COPYING"
fdc326
    fi
eb2b15
    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" ]; then
eb2b15
        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" \
eb2b15
           "%{buildroot}%{_pkglicensedir}/$role.LICENSE"
fdc326
    fi
eb2b15
    if [ -d "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples" ]; then
eb2b15
        for file in "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/"*.yml ; do
fdc326
            basename=$(basename "$file" .yml)
fdc326
            newname="$basename"
fdc326
            if [[ "$newname" != example-* ]]; then
fdc326
                newname="example-$newname"
fdc326
            fi
fdc326
            if [[ "$newname" != *-playbook ]]; then
fdc326
                newname="${newname}-playbook"
fdc326
            fi
eb2b15
            cp "$file" "%{buildroot}%{_pkgdocdir}/$role/${newname}.yml"
fdc326
            rm "$file"
fdc326
        done
eb2b15
        if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" ]; then
eb2b15
            cp "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" \
eb2b15
               "%{buildroot}%{_pkgdocdir}/$role/example-inventory"
eb2b15
            rm "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory"
fdc326
        fi
fdc326
        # special case for network
fdc326
        # this will error if the directory is unexpectedly empty
eb2b15
        rmdir "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples"
fdc326
    fi
fdc326
done
0c1b9b
eb2b15
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/semaphore
eb2b15
rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/molecule
8b3abe
eb2b15
rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/.[A-Za-z]*
eb2b15
rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/tests/.git*
0d64f8
fdc326
# NOTE: sshd/examples/example-root-login.yml is
0c1b9b
# referenced in the configuring-openssh-servers-using-the-sshd-system-role documentation module
0c1b9b
# must be updated if changing the file path
fdc326
eb2b15
# Install the collection
fdc326
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
eb2b15
%ansible_collection_install
fdc326
popd
0c1b9b
eb2b15
mkdir -p %{buildroot}%{_pkgdocdir}/collection
eb2b15
mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles
0c1b9b
eb2b15
ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/README.md \
eb2b15
   %{buildroot}%{_pkgdocdir}/collection
0c1b9b
0c1b9b
for rolename in %{rolenames}; do
d3b5a2
  for file in CHANGELOG.md README.md; do
d3b5a2
    if [ -f %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file ]; then
eb2b15
      if [ ! -d %{buildroot}%{_pkgdocdir}/collection/roles/${rolename} ]; then
eb2b15
        mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}
d3b5a2
      fi
eb2b15
      ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file \
eb2b15
        %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}
d3b5a2
    fi
d3b5a2
  done
0c1b9b
done
0c1b9b
fdc326
%if %{with html}
eb2b15
# converting README.md to README.html for collection in %%{buildroot}%%{_pkgdocdir}/collection
eb2b15
readmes="%{buildroot}%{_pkgdocdir}/collection/README.md"
fdc326
for role in %{rolenames}; do
eb2b15
    readmes="${readmes} %{buildroot}%{_pkgdocdir}/collection/roles/${role}/README.md"
fdc326
done
fdc326
sh md2html.sh $readmes
fdc326
%endif
9693d8
fdc326
%if %{with collection_artifact}
fdc326
# Copy collection artifact to /usr/share/ansible/collections/ for collection-artifact
fdc326
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
fdc326
    mv %{collection_namespace}-%{collection_name}-%{version}.tar.gz \
eb2b15
       %{buildroot}%{_datadir}/ansible/collections/
fdc326
popd
fdc326
%endif
fdc326
eb2b15
# Generate the %%files section in files_section.txt
eb2b15
# Bulk files inclusion is not possible because roles store doc and licence
eb2b15
# files together with other files
fdc326
format_item_for_files() {
fdc326
    # $1 is directory or file name in buildroot
eb2b15
    # $2 - if true, and item is a directory, use %%dir
fdc326
    local item
fdc326
    local files_item
eb2b15
    item="$1" # full path including buildroot
eb2b15
    files_item=${item##"%{buildroot}"} # path with cut buildroot to be added to %%files
fdc326
    if [ -L "$item" ]; then
fdc326
        echo "$files_item"
fdc326
    elif [ -d "$item" ]; then
fdc326
        if [[ "$item" == */doc* ]]; then
fdc326
            echo "%doc $files_item"
fdc326
        elif [ "${2:-false}" = true ]; then
fdc326
            echo "%dir $files_item"
fdc326
        else
fdc326
            echo "$files_item"
fdc326
        fi
d3b5a2
    elif [[ "$item" == */README.md ]] || [[ "$item" == */README.html ]] || [[ "$item" == */CHANGELOG.md ]]; then
fdc326
        if [[ "$item" == */private_* ]]; then
eb2b15
            # mark as regular file, not %%doc
fdc326
            echo "$files_item"
fdc326
        else
fdc326
            echo "%doc $files_item"
fdc326
        fi
eb2b15
    elif [[ "$item" == */COPYING* ]] || [[ "$item" == */LICENSE* ]]; then
eb2b15
        echo "%""%""license" "$files_item"
eb2b15
    else
fdc326
        echo "$files_item"
fdc326
    fi
fdc326
}
fdc326
fdc326
files_section=files_section.txt
fdc326
rm -f $files_section
fdc326
touch $files_section
eb2b15
# Dynamically generate files section entries for %%{ansible_collection_files}
fdc326
find %{buildroot}%{ansible_collection_files}%{collection_name} -mindepth 1 -maxdepth 1 | \
fdc326
    while read item; do
fdc326
        if [[ "$item" == */roles ]]; then
fdc326
            format_item_for_files "$item" true >> $files_section
fdc326
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_dir; do
fdc326
                format_item_for_files "$roles_dir" true >> $files_section
fdc326
                find "$roles_dir" -mindepth 1 -maxdepth 1 | while read roles_item; do
fdc326
                    format_item_for_files "$roles_item" >> $files_section
fdc326
                done
fdc326
            done
fdc326
        else
fdc326
            format_item_for_files "$item" >> $files_section
fdc326
        fi
fdc326
    done
fdc326
eb2b15
# Dynamically generate files section entries for %%{ansible_roles_dir}
eb2b15
find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
fdc326
    while read item; do
fdc326
        if [ -d "$item" ]; then
fdc326
            format_item_for_files "$item" true >> $files_section
fdc326
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do
fdc326
                format_item_for_files "$roles_item" >> $files_section
fdc326
            done
fdc326
        else
fdc326
            format_item_for_files "$item" >> $files_section
fdc326
        fi
fdc326
    done
fdc326
fdc326
%files -f files_section.txt
eb2b15
%dir %{_datadir}/ansible
eb2b15
%dir %{ansible_roles_dir}
eb2b15
%dir %{ansible_collection_files}
eb2b15
%dir %{ansible_collection_files}%{collection_name}
eb2b15
%doc %{_pkgdocdir}
eb2b15
%license %{_pkglicensedir}
eb2b15
eb2b15
%if 0%{?rhel} && 0%{?rhel} < 8
fdc326
# Needs to list excluded files in this hardcoded style since when
fdc326
# format_item_for_files is executed, brp-python-bytecompile is not
fdc326
# executed yet.
eb2b15
%exclude %{ansible_roles_dir}/*/*.py?
eb2b15
%exclude %{ansible_roles_dir}/*/*/*.py?
eb2b15
%exclude %{ansible_roles_dir}/*/*/*/*.py?
eb2b15
%exclude %{ansible_roles_dir}/*/*/*/*/*.py?
fdc326
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*.py?
fdc326
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*.py?
fdc326
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*/*.py?
fdc326
%endif
fdc326
fdc326
%if %{with collection_artifact}
fdc326
%files collection-artifact
fdc326
%{_datadir}/ansible/collections/%{collection_namespace}-%{collection_name}-%{version}.tar.gz
fdc326
%endif
190903
190903
%changelog
eb2b15
* Thu Mar 16 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.1-1
eb2b15
- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
eb2b15
- includes the fix for tests_proxy.yml selinux and some test refactoring
eb2b15
eb2b15
* Wed Feb 22 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-2
eb2b15
- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
eb2b15
- remove role until https://bugzilla.redhat.com/show_bug.cgi?id=2171829 is fixed
eb2b15
eb2b15
* Mon Feb 20 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-1
eb2b15
- Resolves:rhbz#2168733 : network - RedHat Role rhel-system-roles.network should route traffic via correct bond
eb2b15
eb2b15
* Thu Feb 16 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.19
eb2b15
- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
eb2b15
- vendor in modules required by rhc role
eb2b15
- Resolves:rhbz#2167941 : ha_cluster - Fix stonith watchdog timeout
eb2b15
eb2b15
* Wed Feb 15 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.18
eb2b15
- Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
eb2b15
- ad_integration - fix issue with using the network role to configure DNS
eb2b15
eb2b15
* Thu Feb 09 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.17
eb2b15
- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent
eb2b15
- Fix nbde_server test issue
eb2b15
eb2b15
* Fri Feb 03 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.16
eb2b15
- Resolves:rhbz#2165176 : journald - New role - journald - manage systemd-journald
eb2b15
- Resolves:rhbz#2159972 : nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data
eb2b15
- Resolves:rhbz#2164879 : selinux - managing modules is not idempotent
eb2b15
- fix storage tests_swap and tests_misc - swap size < 128GB on EL7
eb2b15
- fix podman general-meta issue
eb2b15
- ha_cluster non-x86_64 tests issue
eb2b15
- certificate non-x86_64 tests issue
eb2b15
eb2b15
* Fri Jan 20 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.15
eb2b15
- Resolves:rhbz#2162788 : network - role should support running tests with ANSIBLE_GATHERING=explicit
eb2b15
- Resolves:rhbz#2149683 : Synchronize automation-related changes from Fedora spec file
eb2b15
- Fix ansible-test issues in several roles
eb2b15
- Fix nbde_server tang test failure
eb2b15
eb2b15
* Fri Jan 13 2023 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.14
eb2b15
- Resolves:rhbz#2143814 : ha_cluster - Allow quorum device configuration
eb2b15
- Resolves:rhbz#2153081 : ha_cluster - Allow enabled SBD on disabled cluster
eb2b15
- Resolves:rhbz#2127497 : ha_cluster - use no_log in tasks looping over pot. secret parameters
eb2b15
- community.general 6.2.0
eb2b15
- replace community.general with namespace.name for rhc role
eb2b15
eb2b15
* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.13
eb2b15
- Resolves:rhbz#2151355 : storage - [RHEL8] disks_needed need to be set for the raid test cases
eb2b15
- Resolves:rhbz#2154143 : storage - [RHEL8] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"
eb2b15
- Resolves:rhbz#2151342 : storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
eb2b15
- Resolves:rhbz#2151351 : storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"
eb2b15
eb2b15
* Thu Dec 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.12
eb2b15
- Resolves:rhbz#2153080 - tlog - Unconditionally enable the files provider
eb2b15
eb2b15
* Tue Dec 13 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.11
eb2b15
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
eb2b15
  fix basic-smoke-test failures
eb2b15
eb2b15
* Mon Dec 12 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.10
eb2b15
- Resolves:rhbz#2130019 : ha_cluster - [RFE] convert ha_cluster role to use firewall, selinux and certificate role
eb2b15
- Resolves:rhbz#2143458 : network - Support cloned MAC address
eb2b15
- Resolves:rhbz#2066864 : podman - [RFE] role for managing podman containers and systemd
eb2b15
eb2b15
* Tue Dec 06 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.9
eb2b15
- Resolves:rhbz#2144876 : ad_integration - [RFE] new role to support AD integration, join to AD domain
eb2b15
eb2b15
* Mon Dec 05 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.8
eb2b15
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
eb2b15
  fix tests - tests_relp now uses logging_purge_confs
eb2b15
eb2b15
* Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.7
eb2b15
- Resolves:rhbz#2126960 : nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names
eb2b15
eb2b15
* Tue Nov 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.6
eb2b15
- Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
eb2b15
  previous fix was not complete - needed additional fixes - ansible-lint 6.x fixes
eb2b15
eb2b15
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.5
eb2b15
- Resolves:rhbz#2137667 : cockpit - [RFE] convert cockpit role to use firewall, selinux role, and certificate role
eb2b15
- Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
eb2b15
- Resolves:rhbz#2133532 : metrics - [RFE] convert metrics role to use firewall and selinux role
eb2b15
- Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
eb2b15
- Resolves:rhbz#2130332 : postfix - [RFE] convert postfix role to use firewall and selinux role
eb2b15
- Resolves:rhbz#2119600 : vpn - Add parameters shared_key_content, ike, esp, type, leftid, rightid
eb2b15
- Resolves:rhbz#2130345 : vpn - [RFE] convert vpn role to use firewall and selinux role
eb2b15
eb2b15
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.4.podman
eb2b15
- Resolves:rhbz#2066864 : podman - [RFE] role for managing podman containers and systemd
eb2b15
eb2b15
* Tue Nov 22 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.3.ssh_sshd_selinux_timesync
eb2b15
- Resolves:rhbz#2143385 : selinux - add support for the 'local' parameter
eb2b15
- Resolves:rhbz#2143401 : sshd,ssh,timesync - Unexpected templating type error - expected str instance, int found
eb2b15
- Resolves:rhbz#2130921 : ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-8.7] [rhel-8.8.0]
eb2b15
eb2b15
* Tue Nov 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.2.network
eb2b15
- Resolves:rhbz#2134201 : network - [RFE] Support setting the metric of the default route for initscripts provider
eb2b15
- Resolves:rhbz#2133856 : network - [RFE] Support the DNS priority
eb2b15
- Resolves:rhbz#2129620 : network - Support looking up named route table in routing rule
eb2b15
- includes ha_cluster, vpn - README.md had headings that were too long causing problems
eb2b15
  for md to adoc to html conversion on el8
eb2b15
- includes changing network role to support ansible-core 2.14
eb2b15
- includes community.general 6.0.1
eb2b15
- adds back network bondtests patch - bond tests still failing in beaker
d3b5a2
d3b5a2
* Tue Aug 09 2022 Rich Megginson <rmeggins@redhat.com> - 1.20.0-1
d3b5a2
- Resolves:rhbz#2115159 : cockpit - Add customization of port
d3b5a2
- Resolves:rhbz#2100939 : firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
d3b5a2
- Resolves:rhbz#2115160 : firewall - support for firewall_config - gather firewall facts
d3b5a2
- Resolves:rhbz#2112143 : logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
d3b5a2
- Resolves:rhbz#2115162 : selinux - Added setting of seuser and selevel for completeness
d3b5a2
- Resolves:rhbz#2115161 : nbde_client - Sets proper spacing for parameter rd.neednet=1
d3b5a2
- Resolves:rhbz#2115884 : network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
d3b5a2
- Resolves:rhbz#2109997 : ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
d3b5a2
- Resolves:rhbz#2082391 : storage - [RHEL8] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
d3b5a2
d3b5a2
* Fri Jul 01 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.3-1
d3b5a2
- min_ansible_version is string instead of float
d3b5a2
d3b5a2
- fix storage test failures
d3b5a2
d3b5a2
- support for ansible-core 2.13
d3b5a2
d3b5a2
- firewall - forward_port should accept list of string or list of dict
d3b5a2
  Resolves: rhbz#2101607
d3b5a2
d3b5a2
- firewall - support add/modify/delete services
d3b5a2
  Resolves: rhbz#2100297
d3b5a2
d3b5a2
- metrics - document minimum supported redis version required by rhel-system-roles
d3b5a2
  Resolves: rhbz#2100285
d3b5a2
d3b5a2
- metrics - restart pmie, pmlogger if changed, do not wait for handler
d3b5a2
  Resolves: rhbz#2100298
d3b5a2
d3b5a2
- network - Support managing the network through nmstate schema
d3b5a2
  Resolves: rhbz#2100979
d3b5a2
d3b5a2
- storage - support for adding/removing disks to/from storage pools
d3b5a2
  Resolves: rhbz#2066880
d3b5a2
d3b5a2
- storage - support for attaching cache volumes to existing volumes
d3b5a2
  Resolves: rhbz#2066881
d3b5a2
d3b5a2
* Wed Jun 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.2-1
d3b5a2
- sshd - fix ansible 2.9 support in meta/main.yml
d3b5a2
  Resolves: rhbz#2086935 (8.7.0)
d3b5a2
d3b5a2
* Mon Jun 13 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.1-1
d3b5a2
- storage - fix coverity scan issue in blivet.py
d3b5a2
  Resolves: rhbz#2066876 (8.7.0)
d3b5a2
d3b5a2
- logging - fix gather_facts/set_vars issue
d3b5a2
  Resolves: rhbz#2079008 (8.7.0)
d3b5a2
d3b5a2
- ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
d3b5a2
  Resolves: rhbz#2093500 (8.7.0)
d3b5a2
d3b5a2
- sshd - fix tests issue with rhel9 hosts
d3b5a2
d3b5a2
* Mon Jun 06 2022 Rich Megginson <rmeggins@redhat.com> - 1.19.0-1
d3b5a2
- storage - support for creating and managing LVM thin pools/LVs
d3b5a2
  Resolves: rhbz#2066876 (8.7.0)
d3b5a2
d3b5a2
- firewall - Update Ansible syntax in Firewall system role README.md file examples
d3b5a2
  Resolves: rhbz#2081839 (8.7.0)
d3b5a2
c505a7
- storage role raid_level "striped" is not supported
d3b5a2
  Resolves: rhbz#2083426 (8.7.0)
d3b5a2
d3b5a2
- network: the controller device is not completely cleaned up in the bond tests.
d3b5a2
  Resolves: rhbz#2089868 (8.7.0)
d3b5a2
d3b5a2
- firewall - state no longer required for masquerade and ICMP block inversion
d3b5a2
  Resolves: rhbz#2093437 (8.7.0)
d3b5a2
d3b5a2
- ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
d3b5a2
  Resolves: rhbz#2093500 (8.7.0)
d3b5a2
d3b5a2
* Thu May 26 2022 Rich Megginson <rmeggins@redhat.com> - 1.18.0-1
d3b5a2
- firewall - [Improvement] Allow System Role to reset to default Firewalld Settings
d3b5a2
  Resolves: rhbz#2043009 (8.7.0)
d3b5a2
d3b5a2
- metrics - [RFE] add an option to the metrics role to enable postfix metric collection
d3b5a2
  Resolves: rhbz#2079114 (8.7.0)
d3b5a2
d3b5a2
- network - Rework the infiniband support
d3b5a2
  Resolves: rhbz#2086869 (8.7.0)
d3b5a2
d3b5a2
- sshd - recurse into tests and examples sub-directories when replacing string in files
d3b5a2
  the sshd role latest version added sub-directories under tests that need
d3b5a2
  role name replacement - so just use find
d3b5a2
d3b5a2
- sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
d3b5a2
  Resolves: rhbz#2086934 (8.7.0)
d3b5a2
d3b5a2
- sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
d3b5a2
  Resolves: rhbz#2086935 (8.7.0)
d3b5a2
d3b5a2
- storage - storage role cannot set mount_options for volumes
d3b5a2
  Resolves: rhbz#2083378 (8.7.0)
d3b5a2
d3b5a2
* Mon Apr 25 2022 Rich Megginson <rmeggins@redhat.com> - 1.17.0-1
d3b5a2
- All roles should support running with gather_facts: false
d3b5a2
  Resolves: rhbz#2079008 (8.7.0)
d3b5a2
d3b5a2
- firewall - Firewall system role Ansible deprecation warning related to "include"
d3b5a2
  Resolves: rhbz#2078650 (8.7.0)
d3b5a2
d3b5a2
- ha_cluster - ha_cluster - support advanced corosync configuration
d3b5a2
  Resolves: rhbz#2065339 (8.7.0)
d3b5a2
d3b5a2
- ha_cluster - ha_cluster - support SBD fencing
d3b5a2
  Resolves: rhbz#2066868 (8.7.0)
d3b5a2
d3b5a2
- ha_cluster - ha_cluster - add support for configuring bundle resources
d3b5a2
  Resolves: rhbz#2073518 (8.7.0)
d3b5a2
d3b5a2
- kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts
d3b5a2
  Resolves: rhbz#2060378 (8.7.0)
d3b5a2
d3b5a2
- logging - logging tests fail during cleanup if no cloud-init on system
d3b5a2
  Resolves: rhbz#2058807 (8.7.0)
d3b5a2
d3b5a2
- logging - Logging - RFE - support template, severity and facility options
d3b5a2
  Resolves: rhbz#2075116 (8.7.0)
d3b5a2
d3b5a2
- metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
d3b5a2
  Resolves: rhbz#2060377 (8.7.0)
d3b5a2
d3b5a2
- metrics - metrics - consistently use ansible_managed in configuration files managed by role
d3b5a2
  Resolves: rhbz#2065215 (8.7.0)
d3b5a2
d3b5a2
- metrics - [RFE] add an option to the metrics role to enable postfix metric collection
d3b5a2
  Resolves: rhbz#2079114 (8.7.0)
d3b5a2
d3b5a2
- nbde_client - NBDE client system role does not support servers with static IP addresses
d3b5a2
  Resolves: rhbz#2071011 (8.7.0)
d3b5a2
d3b5a2
- network - [RFE] Extend rhel-system-roles.network feature set to support routing rules
d3b5a2
  Resolves: rhbz#1996731 (8.7.0)
d3b5a2
d3b5a2
- network - bond: fix typo in supporting the infiniband ports in active-backup mode
d3b5a2
  Resolves: rhbz#2064067 (8.7.0)
d3b5a2
d3b5a2
- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
d3b5a2
  Resolves: rhbz#2065217 (8.7.0)
d3b5a2
d3b5a2
- network - network - consistently use ansible_managed in configuration files managed by role
d3b5a2
  Resolves: rhbz#2065670 (8.7.0)
d3b5a2
d3b5a2
- postfix - postfix - consistently use ansible_managed in configuration files managed by role
d3b5a2
  Resolves: rhbz#2065216 (8.7.0)
d3b5a2
d3b5a2
- postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
d3b5a2
  Resolves: rhbz#2065218 (8.7.0)
c505a7
3c00e5
- sshd - FIPS mode detection in SSHD role is wrong
d3b5a2
  Resolves: rhbz#2075338 (8.7.0)
d3b5a2
d3b5a2
- storage - RFE storage Less verbosity by default
d3b5a2
  Resolves: rhbz#2056480 (8.7.0)
d3b5a2
d3b5a2
- timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml
d3b5a2
  Resolves: rhbz#2060379 (8.7.0)
d3b5a2
d3b5a2
- tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
d3b5a2
  Resolves: rhbz#2072749 (8.7.0)
d3b5a2
d3b5a2
* Thu Apr 07 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.3-1
d3b5a2
- tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
d3b5a2
  Resolves rhbz#2072749 (EL8)
d3b5a2
  Resolves rhbz#2071804 (EL9)
3c00e5
d3b5a2
* Wed Apr 06 2022 Sergei Petrosian <spetrosi@redhat.com> - 1.16.2-2
d3b5a2
- Update community.general
3c00e5
d3b5a2
* Thu Mar 31 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.2-1
d3b5a2
- nbde_client - NBDE client system role does not support servers with static IP addresses
d3b5a2
  previous fix did not handle some other cases
d3b5a2
  Resolves rhbz#1985022 (EL8)
d3b5a2
  Resolves rhbz#2031555 (EL9)
d3b5a2
d3b5a2
* Tue Mar 29 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.1-1
90a374
- nbde_client - NBDE client system role does not support servers with static IP addresses
90a374
  previous fix did not handle some cases
90a374
  Resolves rhbz#1985022 (EL8)
90a374
  Resolves rhbz#2031555 (EL9)
90a374
d3b5a2
* Tue Mar 22 2022 Sergei Petrosian <spetrosi@redhat.com> - 1.16.0-2
d3b5a2
- Update community.general
d3b5a2
d3b5a2
* Tue Mar 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.0-1
90a374
- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
90a374
  Resolves rhbz#2064396 (EL8)
90a374
  Resolves rhbz#2064401 (EL9)
90a374
- network - bond: fix typo in supporting the infiniband ports in active-backup modekernel_settings error configobj not found on RHEL 8.6 managed hosts
90a374
  Resolves rhbz#2064388 (EL8)
90a374
  Resolves rhbz#2064391 (EL9)
90a374
- network - consistently use ansible_managed in configuration files managed by role
90a374
  Resolves rhbz#2057656 (EL8)
90a374
  Resolves rhbz#2057657 (EL9)
90a374
- metrics - consistently use ansible_managed in configuration files managed by role
90a374
  Resolves rhbz#2057645 (EL8)
90a374
  Resolves rhbz#2057647 (EL9)
90a374
- postfix - consistently use ansible_managed in configuration files managed by role
90a374
  Resolves rhbz#2057661 (EL8)
90a374
  Resolves rhbz#2057662 (EL9)
90a374
- postfix - provide the ability to replace config and reset configuration back to default
90a374
  Resolves rhbz#2044657 (EL8)
90a374
  Resolves rhbz#2058780 (EL9)
90a374
- new tags required in galaxy.yml for Automation Hub
90a374
90a374
* Thu Mar 3 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.1-1
90a374
- kernel_settings error configobj not found on RHEL 8.6 managed hosts
90a374
  Resolves rhbz#2058772 (EL8)
90a374
  Resolves rhbz#2058756 (EL9)
90a374
- timesync: basic-smoke test failure in timesync/tests_ntp.yml
90a374
  Resolves rhbz#2059293 (EL8)
90a374
  Resolves rhbz#2058645 (EL9)
90a374
90a374
* Tue Mar  1 2022 Noriko Hosoi <nhosoi@redhat.com> - 1.15.0-2
90a374
- metrics - follow symlinks for the mssql and elasticsearch configuration paths
90a374
  Resolves rhbz#2058655 (EL8)
90a374
  Resolves rhbz#2058777 (EL9)
90a374
d3b5a2
* Thu Feb 24 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.0-1
90a374
- firewall - ensure target changes take effect immediately
90a374
  Resolves rhbz#2057172 (EL8)
90a374
  Resolves rhbz#2057164 (EL9)
90a374
- firewall - Firewall RHEL System Role should be able to set default zone
90a374
  Resolves rhbz#2022458 (EL8)
90a374
  Resolves rhbz#2022461 (EL9)
90a374
- network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
90a374
  Resolves rhbz#2053862 (EL8)
90a374
  Resolves rhbz#2053861 (EL9)
90a374
90a374
* Mon Feb 14 2022 Rich Megginson <rmeggins@redhat.com> - 1.14.0-1
90a374
- ha_cluster - set permissions for haclient group
90a374
  Resolves rhbz#2049747 (EL8)
90a374
  Resolves rhbz#2049754 (EL9)
90a374
- network - Add more bonding options to rhel-system-roles.network
90a374
  Resolves rhbz#2008931 (EL8)
90a374
  Resolves rhbz#2054435 (EL9)
90a374
- certificate - should consistently use ansible_managed in hook scripts
90a374
  Resolves rhbz#2054364 (EL8)
90a374
  Resolves rhbz#2054368 (EL9)
90a374
- tlog - consistently use ansible_managed in configuration files managed by role
90a374
  Resolves rhbz#2054363 (EL8)
90a374
  Resolves rhbz#2054367 (EL9)
90a374
- vpn - consistently use ansible_managed in configuration files managed by role
90a374
  Resolves rhbz#2054365 (EL8)
90a374
  Resolves rhbz#2054369 (EL9)
90a374
90a374
* Tue Feb 8 2022 Rich Megginson <rmeggins@redhat.com> - 1.13.1-1
90a374
- vpn - template error while templating string: no filter named 'vpn_ipaddr'
90a374
  Resolves rhbz#2052103 (EL8)
90a374
  Resolves rhbz#2050341 (EL9)
90a374
- kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
90a374
  Resolves rhbz#2052105 (EL8)
90a374
  Resolves rhbz#2050419 (EL9)
90a374
- remove collection dependencies on rhel because we vendor them in
90a374
90a374
* Tue Feb 1 2022 Rich Megginson <rmeggins@redhat.com> - 1.13.0-1
90a374
- storage - RFE: Add support for RAID volumes (lvm-only)
90a374
  Resolves rhbz#2016514 (EL8)
90a374
  Resolves rhbz#2016518 (EL9)
90a374
- storage - RFE: Add support for cached volumes (lvm-only)
90a374
  Resolves rhbz#2016511 (EL8)
90a374
  Resolves rhbz#2016517 (EL9)
90a374
- metrics - metrics role can't be re-run if the Grafana admin password has been changed
90a374
  Resolves rhbz#1967321 (EL8)
90a374
  Resolves rhbz#2041632 (EL9)
90a374
- nbde_client - NBDE client system role does not support servers with static IP addresses
90a374
  Resolves rhbz#1985022 (EL8)
90a374
  Resolves rhbz#2031555 (EL9)
90a374
- ha_cluster - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
90a374
  Resolves rhbz#2041635 (EL8)
90a374
  Resolves rhbz#2041634 (EL9)
90a374
- firewall - ensure zone exists and can be used in subsequent operations
90a374
  Resolves rhbz#2042541 (EL8)
90a374
  Resolves rhbz#2024775 (EL9)
90a374
- network - RFE: Support Routing Tables in static routes in Network Role
90a374
  Resolves rhbz#2031521 (EL8)
90a374
  Resolves rhbz#2049798 (EL9)
90a374
- network - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
90a374
  Resolves rhbz#2034908 (EL8)
90a374
  Resolves rhbz#2038957 (EL9)
90a374
- network - Set DNS search setting only for enabled IP protocols
90a374
  Resolves rhbz#2041627 (EL8)
90a374
  Resolves rhbz#2004899 (EL9)
90a374
90a374
* Thu Jan 27 2022 Rich Megginson <rmeggins@redhat.com> - 1.12.0-1
90a374
- vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
90a374
  this is covered by "make roles work with ansible-core on all platforms" BZ
90a374
- logging - Logging role "logging_purge_confs" option not properly working
90a374
  Resolves rhbz#2040812 (EL8)
90a374
  Resolves rhbz#2039106 (EL9)
90a374
- kernel_settings role should use ansible_managed in its configuration file
90a374
  Resolves rhbz#2047504 (EL8)
90a374
  Resolves rhbz#2047506 (EL9)
90a374
90a374
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.11.0-3
90a374
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
90a374
90a374
* Tue Dec 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-2
90a374
- RHEL8.6, 9 - add "Requires: ansible-core or ansible"
90a374
90a374
* Thu Dec 2 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-1
90a374
- timesync - fix ansible 2.12 issues, service_facts issues
90a374
  Resolves rhbz#2012316 (EL8)
90a374
  Resolves rhbz#2012298 (EL9)
90a374
- timesync - Failure related to missing ntp/ntpd package/service on RHEL-9 host
90a374
  Resolves rhbz#2029463 (EL9)
90a374
- logging - add test case for immark quoting issue
90a374
  Resolves rhbz#2021678 (EL8)
90a374
  Resolves rhbz#2021676 (EL9)
90a374
- cockpit - use existing cert - cockpit_cert, cockpit_private_key
90a374
  Resolves rhbz#2021661 (EL8)
90a374
  Resolves rhbz#2021028 (EL9)
90a374
- storage - fix ansible 2.12 issues, service_facts issues; workaround lvm, udev issues in tests
90a374
  Resolves rhbz#2012316 (EL8)
90a374
  Resolves rhbz#2012298 (EL9)
90a374
- ssh - tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
90a374
  Resolves rhbz#2029614 (EL8)
90a374
  Resolves rhbz#2029427 (EL9)
90a374
- kdump - support reboot required and reboot ok
90a374
  Resolves rhbz#2029605 (EL8)
90a374
  Resolves rhbz#2029602 (EL9)
90a374
- metrics - sync with latest ansible-pcp
90a374
  Resolves rhbz#2012316 (EL8)
90a374
  Resolves rhbz#2012298 (EL9)
90a374
- sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
90a374
  Resolves rhbz#1979714 (EL8)
90a374
  Resolves rhbz#2029634 (EL9)
90a374
90a374
* Mon Nov 8 2021 Rich Megginson <rmeggins@redhat.com> - 1.10.0-1
90a374
- add cockpit role
90a374
  Resolves rhbz#2021661 (EL8)
90a374
  Resolves rhbz#2021028 (EL9)
90a374
- add firewall role
90a374
  Resolves rhbz#1854988 (EL8)
90a374
  Resolves rhbz#2021665 (EL9)
90a374
- firewall - add ability to add-source
90a374
  Resolves rhbz#1932678 (EL8)
90a374
  Resolves rhbz#2021667 (EL9)
90a374
- firewall - allow user defined zones
90a374
  Resolves rhbz#1850768 (EL8)
90a374
  Resolves rhbz#2021669 (EL9)
90a374
- firewall - allow specifying the zone
90a374
  Resolves rhbz#1850753 (EL8)
90a374
  Resolves rhbz#2021670 (EL9)
90a374
- updates for ansible 2.12 support
90a374
  Resolves rhbz#2012316 (EL8)
90a374
  Resolves rhbz#2012298 (EL9)
90a374
- update community.general to 4.0.1
90a374
  Resolves rhbz#2006081 (EL8)
90a374
  Resolves rhbz#2006076 (EL9)
90a374
- network - Allow to specify PCI address to configure profiles
90a374
  Resolves rhbz#1695634 (EL8)
90a374
  Resolves rhbz#1999162 (EL9)
90a374
- network - support wifi Enhanced Open (OWE)
90a374
  Resolves rhbz#1993379 (EL8)
90a374
  Resolves rhbz#1993377 (EL9)
90a374
- network - support WPA3 Simultaneous Authentication of Equals(SAE)
90a374
  Resolves rhbz#1993311 (EL8)
90a374
  Resolves rhbz#1993304 (EL9)
90a374
- network - RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
90a374
  Resolves rhbz#1897565 (EL8)
90a374
  Resolves rhbz#1978773 (EL9)
90a374
- network - Update network system role to reflect that network teaming is deprecated in RHEL 9
90a374
  Resolves rhbz#1897565 (EL8)
90a374
  Resolves rhbz#1999770 (EL9)
90a374
- selinux - fails linit rules role-name and unnamed-task
90a374
  Resolves rhbz#1974000 (EL8)
90a374
  Resolves rhbz#2021675 (EL9)
90a374
- kernel_settings - ansible_managed | comment BZs:
90a374
  Resolves rhbz#2006230 (EL9)
90a374
  Resolves rhbz#2006231 (EL8)
90a374
  Resolves rhbz#2006233 (EL7)
90a374
- logging - logging role missing quotes for immark module interval value
90a374
  Resolves rhbz#2021678 (EL8)
90a374
  Resolves rhbz#2021676 (EL9)
90a374
- logging - Add user and password
90a374
  Resolves rhbz#2010327 (EL8)
90a374
  Resolves rhbz#1990490 (EL9)
90a374
- logging - Performance improvement
90a374
  Resolves rhbz#2005727 (EL8)
90a374
  Resolves rhbz#2004303 (EL9)
90a374
- nbde_client - add regenerate-all to the dracut command
90a374
  Resolves rhbz#2021682 (EL8)
90a374
  Resolves rhbz#2021681 (EL9)
90a374
- certificate - Fix certificate permissions with "group" option
90a374
  Resolves rhbz#2021683 (EL8)
90a374
  Resolves rhbz#2021025 (EL9)
90a374
fdc326
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.3-2
fdc326
- selinux - tag tests_selinux_disabled.yml with tests::avc
fdc326
  Resolves rhbz#1996315 (EL9)
fdc326
  Resolves rhbz#1996317 (EL8)
fdc326
fdc326
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
fdc326
- storage - revert the dm-vdo workaround fix for vdo testing
fdc326
  Resolves rhbz#1978488 (EL9)
fdc326
  Resolves rhbz#1991141 (EL8)
fdc326
fdc326
* Tue Aug 24 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
fdc326
- logging - Update the certificates copy tasks
fdc326
  Resolves rhbz#1996777 (EL9)
fdc326
  Resolves rhbz#1994580 (EL8)
fdc326
fdc326
* Mon Aug 16 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
fdc326
- metrics - the bpftrace role does not properly configure bpftrace agent
fdc326
  Resolves rhbz#1994180 (EL9)
fdc326
  Resolves rhbz#1993240 (EL8)
fdc326
fdc326
* Thu Aug 12 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
fdc326
- drop support for Ansible 2.8 - min_ansible_version is now 2.9
fdc326
  Resolves rhbz#1989197 (EL9)
fdc326
  Resolves rhbz#1989199 (EL8)
fdc326
- sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
fdc326
  Resolves rhbz#1991598 (EL9)
fdc326
  Resolves rhbz#1990947 (EL8)
fdc326
fdc326
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.7-1
fdc326
- storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
fdc326
  Resolves rhbz#1991141 (EL8)
fdc326
  Resolves rhbz#1991062 (EL9)
fdc326
- storage - Get syntax errors in tests_lvm_errors.yml
fdc326
  Resolves rhbz#1990793 (EL8)
fdc326
  Resolves rhbz#1991142 (EL9)
fdc326
fdc326
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.6-1
fdc326
- logging, certificate - Instead of the archive module, use "tar" command for backup.
fdc326
  Resolves rhbz#1984182 (EL9)
fdc326
  Resolves rhbz#1987096 (EL8)
fdc326
- logging - Add a support for list value to server_host in the elasticsearch output
fdc326
  Resolves rhbz#1986460 (EL9)
fdc326
  Resolves rhbz#1986463 (EL8)
fdc326
- logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
fdc326
  Resolves rhbz#1989962 (EL9)
fdc326
  Resolves rhbz#1990142 (EL8)
fdc326
fdc326
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.5-1
fdc326
- kernel_settings - Disable bootloader testing on EL9
fdc326
  Resolves rhbz#1991017
fdc326
fdc326
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.4-1
fdc326
- sshd - support for rhel9 managed hosts
fdc326
  Resolves rhbz#1989221 (EL9)
fdc326
  Resolves rhbz#1989638 (EL8)
fdc326
fdc326
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.3-1
fdc326
- storage - tag tests that use NVME and SCSI
fdc326
  Resolves rhbz#1989211 (EL9)
fdc326
  Resolves rhbz#1989638 (EL8)
fdc326
fdc326
* Fri Jul 30 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.2-1
fdc326
- metrics - Grafana dashboard not working after metrics role run unless services manually restarted
fdc326
  Resolves rhbz#1984150 (EL9)
fdc326
  Resolves rhbz#1978357 (EL8)
fdc326
fdc326
* Thu Jul 29 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.1-1
fdc326
- network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
fdc326
  Resolves rhbz#1935919
fdc326
- network - _initscripts tests fail because "No package network-scripts available."
fdc326
  Resolves rhbz#1935916
fdc326
- network - Test tests_bond_initscripts.yml failed to create interface
fdc326
  Resolves rhbz#1980870
fdc326
- storage - covscan error - DEADCODE - vdopool if create_vdo else parent
fdc326
  Resolves rhbz#1985571 (EL9)
fdc326
  Resolves rhbz#1985572 (EL8)
fdc326
- network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
fdc326
  Resolves rhbz#1915017
fdc326
fdc326
* Wed Jul 28 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.0-1
fdc326
- network - Skip tests on RHEL9 that use hostapd
fdc326
  Resolves rhbz#1945348
fdc326
- network - Fix the bond test on DHCP
fdc326
  Resolves rhbz#1918252
fdc326
- storage - Add support for percentage-based volume sizes
fdc326
  Resolves rhbz#1984583 (EL9)
fdc326
  Resolves rhbz#1894642 (EL8)
fdc326
- storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
fdc326
  Resolves rhbz#1986284 (EL8)
fdc326
fdc326
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-1
fdc326
- Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yl
fdc326
  Resolves rhbz#1985382 (EL9)
fdc326
  Resolves rhbz#1932699 (EL8)
fdc326
- EPEL yum repository configuration for tests
fdc326
  Rebasing to latest picks up this fix - see rhel7 bz1980439
fdc326
- connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
fdc326
  Rebasing to latest picks up this fix
fdc326
fdc326
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.5.0-1
fdc326
- ha_cluster - add pacemaker cluster properties configuration
fdc326
  Resolves rhbz#1982913 (EL8)
fdc326
  Resolves rhbz#1982906 (EL9)
fdc326
fdc326
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.3-1
fdc326
- crypto_policies - rename 'policy modules' to 'subpolicies'
fdc326
  Resolves rhbz#1982896 (EL9)
fdc326
  Resolves rhbz#1982897 (EL8)
fdc326
fdc326
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.2-1
fdc326
- storage - relabel doesn't support - Fixed volume relabeling
fdc326
  Resolves rhbz#1876315 (EL8)
fdc326
  Resolves rhbz#1982841 (EL9)
fdc326
fdc326
* Fri Jul  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.1-1
fdc326
- network - Re-running the network system role results in "changed: true" when nothing has actually changed
fdc326
  Resolves rhbz#1943384
fdc326
- network - Test tests_bond_initscripts.yml failed to create interface
fdc326
  Resolves rhbz#1918210
fdc326
fdc326
* Thu Jul  8 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.0-1
fdc326
- storage - LVMVDO support
fdc326
  Resolves rhbz#1882475
fdc326
  Resolves rhbz#1978488
fdc326
fdc326
* Wed Jun 23 2021 Rich Megginson <rmeggins@redhat.com> - 1.3.0-1
fdc326
- ha_cluster - add pacemaker resources configuration
fdc326
  Resolves rhbz#1963283
fdc326
- ha_cluster - code cleanup
fdc326
  Resolves rhbz#1970666
fdc326
- Postfix RHEL system role README.md missing variables under the "Role Variables" section
fdc326
  Resolves rhbz#1961858
fdc326
- logging README.html examples are rendered incorrectly
fdc326
  Resolves rhbz#1962374
fdc326
- make postfix role idempotent - round 2
fdc326
  Resolves rhbz#1960375
fdc326
- selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
fdc326
  Resolves rhbz#1966681
fdc326
- metrics role task to enable logging for targeted hosts not working
fdc326
  Resolves rhbz#1967335
fdc326
- network - Add 'auto_gateway' option
fdc326
  Resolves rhbz#1897565
fdc326
- network - Only show stderr_lines by default
fdc326
  Resolves rhbz#1970666
fdc326
- storage - LVMVDO support
fdc326
  Resolves rhbz#1882475
fdc326
- storage - fix several linter issues
fdc326
  Resolves rhbz#1970666
fdc326
- ssh - Fix variable precedence when invoked through roles
fdc326
  Resolves rhbz#1966711
fdc326
- ssh - Update configuration options list for OpenSSH 8.6
fdc326
  Resolves rhbz#1970666
fdc326
- sshd - Fix variable precedence when invoked through roles
fdc326
  Resolves rhbz#1966711
fdc326
- sshd - Update configuration options list for OpenSSH 8.6
fdc326
  Resolves rhbz#1970666
fdc326
- sshd - support for appending a snippet to configuration file
fdc326
  Resolves rhbz#1970642
fdc326
- timesync - add NTS support
fdc326
  Resolves rhbz#1970664
fdc326
- timesync - rebase to latest
fdc326
  Resolves rhbz#1970666
fdc326
- nbde_client - rebase to latest
fdc326
  Resolves rhbz#1970666
fdc326
fdc326
* Thu Jun 17 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-3
fdc326
- Make the ansible_collection_files macro defined in Fedora automatically and
fdc326
  in RHEL manually consistent - having slash at the end to clean double-slashes
fdc326
fdc326
* Wed Jun 16 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-2
fdc326
- Remove slash (/) from the end of URLs to improve code readability
fdc326
fdc326
* Wed Jun 16 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.3-1
fdc326
- Add EL 9 support for timesync and network
fdc326
  Resolves rhbz#1952887
fdc326
fdc326
* Tue Jun 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-3
fdc326
- Fix HTML rendering of internal links when using pandoc/asciidoc
fdc326
- Uses pandoc gfm instead of markdown_github
fdc326
  Resolves rhbz#1962976
fdc326
fdc326
* Fri Jun 11 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.2-2
fdc326
- Make spec file available for older versions of OSes.
fdc326
- Drop python3-six dependency which was used by lsr_role2collection.py.
fdc326
- Drop html files from rpm if the version has no markdown parser.
fdc326
- Drop unnecessary python scripts which include python3 only code, e.g.,
fdc326
  f-strings.
fdc326
- auto_maintenance - ability to convert "- ROLENAME" to "- FQCN" in the doc files such as README
fdc326
- auto_maintenance - lsr_role2collection.py - Adding encoding="utf-8" to open.
fdc326
  Resolves rhbz#1957876
fdc326
fdc326
* Wed Jun  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
fdc326
- fix kdump tests_ssh for basic smoke test
fdc326
  Resolves rhbz#1957876
fdc326
- ha_cluster - cannot read preshared key in binary format
fdc326
  Resolves rhbz#1952620
fdc326
- Add hybrid_e2e option to PTP domain
fdc326
  Resolves rhbz#1957849
fdc326
fdc326
* Fri May 21 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.1-1
fdc326
- fix logging README.html examples' rendering problems
fdc326
  Resolves rhbz#1962374
fdc326
- fix broken internal links in README.md files
fdc326
  Resolves rhbz#1962976
fdc326
fdc326
* Mon May 17 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
fdc326
- Add BuildRequires: rubygem-kramdown for Fedora and RHEL >= 9
fdc326
fdc326
* Fri May 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
fdc326
- rebase roles to latest upstream
fdc326
  Resolves rhbz#1957876
fdc326
- use FQRN in postfix README
fdc326
  Resolves rhbz#1958963
fdc326
- use relayhost in postfix README
fdc326
  Resolves rhbz#1866544
fdc326
- network - Add support for ETHTOOL Ring option
fdc326
  Resolves rhbz#1959649
fdc326
- storage: calltrace observed when set type: partition for storage_pools
fdc326
  Resolves rhbz#1854187
fdc326
fdc326
* Thu May 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.1.0-2
fdc326
- Dependencies in the collection packaging
fdc326
  Resolves rhbz#1954747
fdc326
fdc326
* Wed Apr 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.1.0-1
fdc326
- rebase timesync role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- timesync - add timesync_chrony_custom_settings variable for free-form
fdc326
  local configs
fdc326
  Resolves rhbz#1938023
fdc326
- do not use ignore_errors in timesync role
fdc326
  Resolves rhbz#1938014
fdc326
- support for timesync_max_distance to configure maxdistance/maxdist parameter
fdc326
  Resolves rhbz#1938016
fdc326
- support for ntp xleave, filter, and hw timestamping
fdc326
  Resolves rhbz#1938020
fdc326
- rebase selinux role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- should not reload the SELinux policy if its not changed
fdc326
  Resolves rhbz#1757869
fdc326
- Ability to install custom SELinux module via Ansible
fdc326
  Resolves rhbz#1848683
fdc326
- rebase storage role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- rebase network role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- support for ipv6_disabled to disable ipv6 for address
fdc326
  Resolves rhbz#1939711
fdc326
- rebase postfix role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- rebase metrics role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- rebase sshd role to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- rebase remaining roles to latest upstream
fdc326
  Resolves rhbz#1937938
fdc326
- Generate %%files dynamically
fdc326
- add vpn role
fdc326
  Resolves rhbz#1943679
fdc326
fdc326
* Tue Apr 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-2
fdc326
- Adding the -collection-artifact subpackage, enabled using
fdc326
  "--with collection_artifact". It is used for importing to
fdc326
  ansible galaxy/automation hub.
fdc326
- README.html files (main README for the collection and README
fdc326
  for each role) are not located in /usr/share/ansible/collections,
fdc326
  but just put in /usr/share/doc/linux-system-roles/collection in rpm.
fdc326
- The README.html files are not included in the collection artifact.
fdc326
- Fixing "sshd role README.md examples use incorrect role name".
fdc326
0c1b9b
* Wed Mar 17 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-1
0c1b9b
- Fix description field in galaxy.yml
0c1b9b
- Remove "Technology Preview" from Collection README
0c1b9b
- Merging individual ignore file and add it to the package
0c1b9b
- Add a note to each module Doc to indicate it is private
0c1b9b
- Add patches for network and storage role ansible-test fixes
0c1b9b
  Resolves rhbz#1935451
0c1b9b
- Simplify doc tags in %%files, corrects a forgotten doc tag for ha_cluster
0c1b9b
- Suppress one ansible-lint warning in ha_cluster
0c1b9b
0c1b9b
* Tue Feb 23 2021 Fernando Fernandez Mancera <ferferna@redhat.com> - 1.0.0-32
0c1b9b
- Add patch for the inclusive language leftover on network-role README.md,
0c1b9b
  Resolves rhbz#1931931
0c1b9b
0c1b9b
* Mon Feb 22 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-31
0c1b9b
- Rebase certificate role to pick up a test fix, Resolves rhbz#1931568
0c1b9b
- Rebase logging role to fix default private key path,
0c1b9b
  upstream PR #218
0c1b9b
0c1b9b
* Mon Feb 22 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-30
0c1b9b
- Correct merge botch in previous (ssh/README.md is a doc file)
0c1b9b
- Update galaxy.yml even on Fedora, auto-maintenance may not have
0c1b9b
  a consistent version number
0c1b9b
- Update collection doc transformation to match a modified text
0c1b9b
  and include the Tech Preview note again
0c1b9b
0c1b9b
* Thu Feb 18 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-29
0c1b9b
- Change internal role prefix to more descriptive private_${role}_subrole_
0c1b9b
- Sync spec improvements from Fedora and introduce helper macros
0c1b9b
  No functional change except for license files location
0c1b9b
- Disable mssql metrics test on non-x86_64 where the packages
0c1b9b
  are not available. Upstream PR #73
0c1b9b
0c1b9b
* Wed Feb 17 2021 Rich Megginson <rmeggins@redhat.com> - 1.0.0-28
0c1b9b
- Add patch for sshd https://github.com/willshersystems/ansible-sshd/pull/155
0c1b9b
  for ansible 2.8/jinja 2.7 support for sshd role
0c1b9b
- Rebase certificate, kernel_settings, nbde_client for jinja27
0c1b9b
- Rebase the logging role, Resolves rhbz#1927943
0c1b9b
- Rebase storage role, Resolves rhbz#1894651 - interpreatation of
0c1b9b
  omitted parameters
0c1b9b
- Apply storage PR #201 to dispense with the need of listing all disks
0c1b9b
  in existing pools, Resolves rhbz1894676
0c1b9b
- Apply storage PR #199 to allow reducing the requested volume sizes
0c1b9b
  if needed to fit, Resolves rhbz1894647
0c1b9b
- Rebase the network role, Resolves rhbz1893959, rhbz1893957
0c1b9b
- Add the ssh client role, Resolves rhbz1893712
0c1b9b
- Minor issue in selinux - no variable named present
0c1b9b
  Resolves rhbz1926947
0c1b9b
- Prefix internal roles with private_, resolves rhbz#1927417
0c1b9b
- Add the ha_cluster role, Resolves rhbz#1893743
0c1b9b
0c1b9b
* Thu Feb 11 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-27
0c1b9b
- Rebase the logging role, Resolves rhbz#1889484
0c1b9b
- Fixes to collection docs and galaxy metadata from nhosoi
0c1b9b
- Apply network PR #350 Resolves rhbz#1927392
0c1b9b
0c1b9b
* Wed Feb  3 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-26
0c1b9b
- Rebase the metrics role, Resolves rhbz#1895188, rhbz#1893908
0c1b9b
0c1b9b
* Tue Jan 26 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-25
0c1b9b
- Apply storage PR #153 to fix a problem with partition name on NVMe devices
0c1b9b
  Resolves: rhbz1865990
0c1b9b
- Remove symlinks to roles under tests
0c1b9b
- Cleanup of role directories - remove files starting with . in roles' root
0c1b9b
  directories and Git files under tests. Resolves rhbz#1650550
0c1b9b
- Add collection support, make Version semver compatible: 1.0 -> 1.0.0
0c1b9b
  Resolves rhbz#1893906
0c1b9b
- Autogenerate Automation-Hub README.md if building for RHEL
0c1b9b
- Renumber sources, Source is now auto-maintenance since it is the root
0c1b9b
  of the source tree, kdump becomes Source4 (4 was originally firewall)
0c1b9b
- Introduce bcond_with/without ansible, work on Fedora, RHEL and EPEL
0c1b9b
- Rebase certificate role to include collection-related workarounds,
0c1b9b
  no change in behavior intended
0c1b9b
- Rebase network role, includes collection-related workarounds
0c1b9b
- Revert an invasive network change to enable EPEL (PR #335) and implement
0c1b9b
  a minimal version
0c1b9b
0c1b9b
* Fri Jan 15 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-24
0c1b9b
- Apply PR #63 for kdump to fix a problem in test introduced by rebase
0c1b9b
0c1b9b
* Fri Jan  8 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-23
0c1b9b
- Add {crypto_policies,sshd}/README.md to docfiles, thanks jjelen
0c1b9b
- Fix role name in selinux patch
0c1b9b
- Add sshd role example and README fix
0c1b9b
- Fix role name in sshd role tests and docs
0c1b9b
- Backport network role PR #298 to fix problems often triggered by the CI
0c1b9b
  "error: down connection failed while waiting", Resolves rhbz#1817242
0c1b9b
- Disable bond test in downstream CI, it started to break DNS in RHEL 8.4.
0c1b9b
  Related rhbz#1915017
0c1b9b
0c1b9b
* Thu Jan  7 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0-22
0c1b9b
- Rebase kdump, certificate, storage, selinux, nbde_client/server,
0c1b9b
  kernel_settings in preparation for collections
0c1b9b
  Includes upstream PR #168 for storage to prevent toggling encryption
0c1b9b
  in safe mode, as it is a destructive operation. Resolves rhbz#1881524
0c1b9b
- Introduce & use simpler macros for Sources management,
0c1b9b
  similar to %%forgemeta
0c1b9b
  https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/
0c1b9b
- Use a script to perform prefix transformation for all roles to reduce
0c1b9b
  the number of patches
0c1b9b
- Rebase tlog to add exclude_{users,groups} support, Resolves rhbz#1895472
0c1b9b
- Add crypto_policies role, Resolves rhbz#1893699
0c1b9b
- Add sshd role, Resolves rhbz#1893696
9693d8
9693d8
* Mon Aug 24 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-19
9693d8
- Rebase network role to latest upstream, resolves rhbz#1800627
9693d8
  Drop a downstream patch with a test workaround that is not needed anymore.
9693d8
- Fix script for role prefix transformation
9693d8
- Rebase metrics role to pick up test changes, PR #19
9693d8
- Rebase kernel_settings role to latest upstream, resolves rhbz#1851557
9693d8
9693d8
* Mon Aug 24 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-18
9693d8
- Rebase storage role to latest upstream, resolves rhbz#1848254, rhbz#1851654,
9693d8
  rhbz#1862867
9693d8
- Rebase nbde_client role to latest upstream, resolves rhbz#1851654
9693d8
- Rebase logging role to latest upstream, resolves rhbz#1851654, rhbz#1861318
9693d8
- Rebase metrics role to latest upstream, resolves rhbz#1869390, rhbz#1869389,
9693d8
  rhbz#1868378
9693d8
9693d8
* Fri Aug 21 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-17
9693d8
- Rebase certificate role to latest upstream, resolves rhbz#1859547
9693d8
9693d8
* Mon Aug 10 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-16
9693d8
- Rebase logging role to latest upstream, resolves rhbz#1854546, rhbz#1861318,
9693d8
  rhbz#1860896, adds test for rhbz#1850790
9693d8
- Rebase metrics role to latest upstream, resolves rhbz#1855544, rhbz#1855539,
9693d8
  rhbz#1848763
9693d8
- Fix whitespace in postfix role patch
9693d8
9693d8
* Fri Jul 31 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-15
9693d8
- Rebase storage role to latest upstream, resolves rhbz#1854191, rhbz#1848250,
9693d8
  rhbz#1850790 (including test)
9693d8
- Rebase nbde_client role to latest upstream, adds test for rhbz#1850790
9693d8
- Rebase certificate role to latest upstream, adds test for rhbz#1850790
9693d8
- Rebase nbde_server role to latest upstream, resolves rhbz#1850790
9693d8
  (including test)
9693d8
- Rebase tlog role to latest upstream, resolves rhbz#1855424
9693d8
- Rebase kernel_settings role to rev b8bc86b, resolves rhbz#1850790
9693d8
- Add EL 8 to supported versions in postfix and kdump role metadata,
9693d8
  resolves rhbz#1861661
9693d8
9693d8
* Mon Jul 20 2020 Rich Megginson <rmeggins@redhat.com> - 1.0-14
9693d8
- Rebase certificate role to latest upstream, resolves rhbz#1858840
9693d8
9693d8
* Fri Jul 17 2020 Rich Megginson <rmeggins@redhat.com> - 1.0-13
9693d8
- Rebase certificate role to latest upstream, resolves rhbz#1858316, rhbz#1848745
9693d8
9693d8
* Mon Jun 29 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-12
9693d8
- Rebase network role to latest upstream, resolves rhbz#1822777, rhbz#1848472
9693d8
- Rebase logging role to latest upstream, resolves rhbz#1850790,
9693d8
  rhbz#1851804, rhbz#1848762
9693d8
- Rebase certificate role to latest upstream, resolves rhbz#1848742,
9693d8
  rhbz#1850790
9693d8
- Rebase nbde_client role to latest upstream, resolves rhbz#1848766,
9693d8
  rhbz#1850790
9693d8
9693d8
* Mon Jun 15 2020 Pavel Cahyna <pcahyna@redhat.com> - 1.0-11
9693d8
- Rebase network role to latest upstream
9693d8
- Remove all the soon-unnecessary tier1 tags in test
9693d8
- Add a workaround for rhbz#1800627 in test
9693d8
- Modify patches to remove tier1 tags
9693d8
- Add metrics, tlog, logging, kernel_settings roles
9693d8
- Add nbde_client, nbde_server, certificate roles
9693d8
- Rebase storage role to latest upstream: adds support for mdraid, LUKS,
9693d8
  swap manangement
9693d8
47f324
* Mon Oct 21 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-10
47f324
- Add the storage_safe_mode option, true by default, to prevent accidental
47f324
  data removal: rhbz#1763242, issue #42, PR #43 and #51.
47f324
8b3abe
* Thu Aug 15 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-9
8b3abe
- Add the storage role
8b3abe
8b3abe
* Thu Jun 13 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-7
8b3abe
- Update tests for the network role
8b3abe
- Fix typo in a test for the timesync role
8b3abe
- Tag tests suitable for Tier1 testing
8b3abe
- Rebase the network role to add support for device features (PR#115,
8b3abe
  rhbz#1696703) and atomic changes (PR#119, rhbz#1695161)
8b3abe
- network: apply upstream PR#121: allow modifying interface attributes
8b3abe
  without disrupting services (rhbz#1695157)
8b3abe
0d64f8
* Wed May 29 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-6
0d64f8
- Rebase the selinux role, fixes typo in tests, uncovered by Ansible 2.7,
0d64f8
  (rhbz#1677743) and lists all input variables in defaults
0d64f8
  to make Satellite aware of them (rhbz#1674004, PR#43)
0d64f8
- Rebase the kdump role to fix check mode problems: rhbz#1685904
0d64f8
- Rebase the timesync role: fixes check mode problems (rhbz#1685904)
0d64f8
  and lists all input variables in defaults (rhbz#1674004)
0d64f8
- Rebase the network role: keeps the interface up for state: up
0d64f8
  if persistent_state is absent and solves problems with defining
0d64f8
  VLAN and MACVLAN interface types (issue #19) (rhbz#1685902)
0d64f8
190903
* Sat Jan 12 2019 Pavel Cahyna <pcahyna@redhat.com> - 1.0-5
190903
- spec file improvement: Unify the source macros with deftag() and defcommit()
190903
- Update to upstream released versions and drop unnecessary patches.
190903
- Unify the spec file with Fedora (no functional changes intended).
190903
- Misc spec file comments fixes (by Mike DePaulo)
190903
- Fix rpmlint error by escaping a previous changelog entry with a macro (by Mike DePaulo)
190903
- Comply with Fedora guidelines by always using "cp -p" in %%install (by Mike DePaulo)
190903
- Rebase network role - doc improvements, Fedora 29 and Ansible 2.7 support
190903
- Regenerate network role patch to apply without offset
190903
- Rebase kdump role to fix a forgotten edit, rhbz#1645633
190903
- Update timesync examples: add var prefix (rhbz#1642152), correct role prefix
190903
- Add Obsoletes for the -techpreview subpackage
190903
- Add warnings to role READMEs and other doc updates, rhbz#1616018
190903
- network: split the state setting into state and persistent_state, rhbz#1616014
190903
- depend on python-jmespath as Ansible will not ship it, rhbz#1660559
190903
190903
* Tue Aug 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-4
190903
- Format the READMEs as html, by vdolezal, with changes to use highlight
190903
  (source-highlight does not understand YAML)
190903
190903
* Thu Aug  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-3
190903
- Rebase the network role to the last revision (d866422).
190903
  Many improvements to tests, introduces autodetection of the current provider
190903
  and defaults to using profile name as interface name.
190903
- Rebase the selinux, timesync and kdump roles to their 1.0rc1 versions.
190903
  Many changes to the role interfaces to make them more consistent
190903
  and conforming to Ansible best practices.
190903
- Update the description.
190903
190903
* Fri May 11 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-4
190903
- Fix complaints about /usr/bin/python during RPM build by making the affected scripts non-exec
190903
- Fix merge botch
190903
190903
* Mon Mar 19 2018 Troy Dawson <tdawson@redhat.com> - 0.6-3.1
0c1b9b
- Use -a (after cd) instead of -b (before cd) in %%setup
190903
190903
* Wed Mar 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-3
190903
- Minor corrections of the previous change by Till Maas.
190903
190903
* Fri Mar  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-2
190903
- Document network role options: static routes, ethernet, dns
190903
  Upstream PR#36, bz1550128, documents bz1487747 and bz1478576
190903
190903
* Tue Jan 30 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-1
190903
- Drop hard dependency on ansible (#1525655), patch from Yaakov Selkowitz
190903
- Update the network role to version 0.4, solves bz#1487747, bz#1478576
190903
190903
* Tue Dec 19 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-3
190903
- kdump: fix the wrong conditional for ssh checking and improve test (PR#10)
190903
190903
* Tue Nov 07 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-2
190903
- kdump: add ssh support. upstream PR#9, rhbz1478707
190903
190903
* Tue Oct 03 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-1
190903
- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
190903
  (bz#1493574)
190903
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
190903
  makes the network role idempotent (bz#1476053) and fixes manual
190903
  network provider selection (bz#1485074).
190903
190903
* Mon Aug 28 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.4-1
190903
- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
190903
  ensure that state:absent followed by state:up works (bz#1478910), and change
190903
  the example IP adresses to the IANA-assigned ones.
190903
- SELinux: fix the case when SELinux is disabled (bz#1479546).
190903
190903
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-2
190903
- We can't change directories to symlinks (rpm bug #447156) so keep the old
190903
  names and create the new names as symlinks.
190903
190903
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-1
190903
- Change the prefix to linux-system-roles., keeping compatibility
190903
  symlinks.
190903
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
190903
  adds InfiniBand support and other fixes.
190903
- Drop a patch included upstream.
190903
190903
* Mon Jun 26 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-2
190903
- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
190903
- Move the network example inventory to the documentation directory together.
190903
  with the example playbooks and delete the now empty "examples" directory.
190903
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.
190903
190903
* Tue Jun 6 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-1
190903
- Update the networking role to version 0.2 (#1459203)
190903
- Version every role and the package separately. They live in separate repos
190903
  and upstream release tags are not coordinated.
190903
190903
* Mon May 22 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-2
190903
- Prefix the roles in examples and documentation with rhel-system-roles.
190903
190903
* Thu May 18 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-1
190903
- Update to 0.1 (first upstream release).
190903
- Remove the tuned role, it is not ready yet.
190903
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
190903
  directly to get rid of an extra directory.
190903
- Depend on ansible.
190903
190903
* Thu May 4 2017  Pavel Cahyna <pcahyna@redhat.com> - 0-0.1.20170504
190903
- Initial release.
190903
- kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
190903
- postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
190903
- selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
190903
- timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
190903
- tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
190903
- network r. 03ff040df78a14409a0d89eba1235b8f3e50a750
190903