Commit Graph

180 Commits (42eba3ce257002378d630f8d608dd9c69e60cc66)

Author SHA1 Message Date
Brian Coca 5f6db0e164 preliminary privlege escalation unification + pbrun
- become constants inherit existing sudo/su ones
- become command line options, marked sudo/su as deprecated and moved sudo/su passwords to runas group
- changed method signatures as privlege escalation is collapsed to become
- added tests for su and become, diabled su for lack of support in local.py
- updated playbook,play and task objects to become
- added become to runner
- added whoami test for become/sudo/su
- added home override dir for plugins
- removed useless method from ask pass
- forced become pass to always be string also uses to_bytes
- fixed fakerunner for tests
- corrected reference in synchronize action plugin
- added pfexec (needs testing)
- removed unused sudo/su in runner init
- removed deprecated info
- updated pe tests to allow to run under sudo and not need root
- normalized become options into a funciton to avoid duplication and inconsistencies
- pushed suppored list to connection classs property
- updated all connection plugins to latest 'become' pe

- includes fixes from feedback (including typos)
- added draft docs
- stub of become_exe, leaving for future v2 fixes
10 years ago
Brian Coca 17666a1939 changed default for new retry path to be teh same as current
also added commented out entries in ansible.cfg to show other options
10 years ago
Brian Coca 4fd760467b made inventory consistent in config file, deprecated old config hostfile 10 years ago
Brian Coca 78e1a7ed93 Revert "Fix: Add support for SSL protocol version configuration option" 10 years ago
Brian Coca 9ccabbb95e Merge pull request #9808 from swimlappy/sslconfig
Fix: Add support for SSL protocol version configuration option
10 years ago
Brian Coca 83e6c166f6 fixed bad exampel for library that was library_path, which of course did
not work
10 years ago
Toshio Kuratomi a5b3b59bd1 Comment remote_port in the example ansible.cfg so users do not override their .ssh/config settings by default 10 years ago
Jason Holland eedc51f213 Add support for SSL protocol version configuration option. Also fix 2 places where the SSL version was not being set properly. 10 years ago
Veres Lajos bf5d8ee678 typofixes - https://github.com/vlajos/misspell_fixer 10 years ago
Michael DeHaan e5116d2f9b changes for package loading of modules 10 years ago
Michael DeHaan 2064d26085 Add documentation about bin_ansible_callbacks setting. Standardization and cleanup. 10 years ago
Michael DeHaan a419ffdf41 Make command warnings off by default to minimize surprises. 10 years ago
Michael DeHaan fcb610dec4 Slightly trim down the warnings list based on some things being pretty common
for local usage.
10 years ago
Michael DeHaan 2629cd3fce Fix some copyrights, fix a misc test. 10 years ago
James Cammarata 6069ff6e9e Adding a new system_warnings config option to supress warnings 11 years ago
James Cammarata 18d82d1eb6 Documentation/examples updates for new 1.6 accelerate options
Fixes #6692
11 years ago
Michael DeHaan e639b5382b Change default gathering policy, add to docs. 11 years ago
Brian Coca 18adf07fc6 changed setting values and updated docs 11 years ago
Brian Coca 4dfa40f18e added gathering control to ansible, defaults to 'smart' 11 years ago
Michael DeHaan 84f918d320 Merge pull request #6381 from franckcuny/doc-module-lang
Document the module_lang option.
11 years ago
Franck Cuny fb14b53130 Document the module_lang option.
Closes #6169.
11 years ago
James Cammarata 9730157525 Validate SSL certs accessed through urllib*
* Adds another module utility file which generalizes the
  access of urls via the urllib* libraries.
* Adds a new spec generator for common arguments.
* Makes the user-agent string configurable.

Fixes #6211
11 years ago
Dolph Mathews 8808e029f9 spelling correction for "separate"
s/seperate/separate/

http://en.wiktionary.org/wiki/separate
11 years ago
Michael DeHaan 16d3be03af Remove a few extra legacy variable feature references. 11 years ago
Richard C Isaacson 80ddd1ca75 Config resoution order correction and documentation. 11 years ago
Michael DeHaan d07a3b5e9b AnsibleWorks -> Ansible 11 years ago
James Cammarata 02ce5af6df Added ANSIBLE_SSH_PIPELINING option to enable/disable pipelining support
Pipelining will be disabled by default, since it requires users remove
the 'requiretty' option from the servers sudoers configuration.
11 years ago
Michael DeHaan 7490e3d61e Update ansible.cfg
Lookup plugins do not warrant settings in ansible.cfg.
11 years ago
a-sk 29a3bb744e Remove quotes aroung etcd_url value
I get errors like this with etcd_url = 'http://127.0.0.1:4001':
urllib2.URLError: <urlopen error unknown url type: 'http>
11 years ago
Jan-Piet Mens bd5cd8e652 Lookup plugin for etcd
with support for configurable etcd URL in ansible.cfg (and environment)
11 years ago
Michael DeHaan fee360f33e Add example.config and main documentation of the roles_path feature. 11 years ago
Thomas Omans 632232259a Adding config flag role_path for common/global roles
Using ANSIBLE_ROLE_PATH environment variable or role_path in ansible.cfg
can configure paths where roles will be searched for
extra paths will only be used as a backup once regular locations are exhausted
11 years ago
Michael DeHaan 65178290e7 Merge branch 'devel' of git://github.com/nextus/ansible into devel
Conflicts:
	lib/ansible/constants.py
11 years ago
James Cammarata b11e12652e Adding new accelerate settings to default config and docs 11 years ago
James Cammarata c8fa83c93f Minor tweaks to the skipped config wording and adding documentation 11 years ago
James Martin d5f20e6b21 Optionally display Skipping [host] messages. 11 years ago
nextus ca96d74572 #4227 in upstream repo 11 years ago
James Cammarata 848a966736 Adding example section to ansible.cfg for the control_path setting 11 years ago
James Cammarata 959138d00d Added accelerate_port to plays, and made it configurable 11 years ago
James Cammarata e09ce0a3a7 Commenting out default ssh arguments line in ansible.cfg
Also removing the ControlPath option, as it will now be auto-generated
if the ControlPersist option is set in the arguments.
11 years ago
James Cammarata ad595eadea Enable error_on_undefined_vars by default 11 years ago
Abhijit Menon-Sen 0c96d8af6e Add a nocolor setting to ansible.cfg 11 years ago
Michael DeHaan 8a82b5c817 Slight revisement to configuration file comment. 12 years ago
Michael DeHaan cf6e1f8db9 Make it possible to tell paramiko to not record new host keys, which can be slow with a large number of hosts.
-c ssh is preferred in most cases if you have ControlPersist available, otherwise if you are comfortable you
can turn off recording while leaving host key checking on, etc.
12 years ago
Michael DeHaan c55adc9ac9 Default to 'smart' transport, which will use OpenSSH if it can support ControlPersist. 12 years ago
Michael DeHaan d96cedcad1 Example config file should use correct config setting. 12 years ago
Michael DeHaan 9db4f7a9a6 Makes host key checking the default behavior but can be disabled in ansible.cfg or by environment variable. 12 years ago
espro 3eeacaba81 Updated ansible.cfg to be more consistent
Updated the example ansible.cfg to be more consistent in spacing/commented lines
12 years ago
espro a00c7b0c08 Comment remote_user in ansible.cfg
remote_user should not be set in example config. This file is used in rpm .spec for /etc/ansible/ansible.cfg
12 years ago
espro e2cf3b2d29 Update ansible.cfg
Previous commit made config invalid.
12 years ago
Michael DeHaan bac81be3f9 Add undefined variables feature to example config file. 12 years ago
Michael DeHaan 637983cf31 cleanup example config file + Squashed commit of the following:
commit c36b66dc952dfff91043ecbca56cf3f1f8f00703
Merge: 240d7bf f4cf934
Author: Michael DeHaan <michael@ansibleworks.com>
Date:   Tue Jun 18 13:04:51 2013 -0400

    Merge branch 'unevaluated-vars' of git://github.com/lorin/ansible into lorin_undefined

    Conflicts:
    	lib/ansible/runner/__init__.py

commit f4cf934367
Merge: 2531440 07a1365
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Thu Jun 6 11:07:41 2013 -0400

    Merge branch 'devel' into unevaluated-vars

commit 253144045c
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Thu Jun 6 11:06:37 2013 -0400

    Fail template from file on undefined vars

    If config option is set, raise an exception if templating from a
    file and a variable is undefined.

commit aecb71d8b7
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Wed Jun 5 17:12:12 2013 -0400

    Add fail_on_undefined flag

    Add a fail_on_undefined flag to the template and template_from_string methods.

    If this flag is true, then re-raise the ninja2.excpetions.UndefinedError instead of
    swallowing it.

commit cbb1808f05
Merge: d4bbf49 41425fb
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Wed Jun 5 16:14:12 2013 -0400

    Merge branch 'devel' into unevaluated-vars

commit d4bbf492b0
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Mon Jun 3 19:46:13 2013 -0400

    template: Raise UndefinedError exception

    In template_from_string, raise an undefined error if it occurs.

    Have the caller catch it and throw an AnsibleUndefinedVariable

commit c947802805
Merge: 8d919d6 be33bcf
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Mon Jun 3 10:09:43 2013 -0400

    Merge branch 'devel' into unevaluated-vars

commit 8d919d6c97
Merge: 0f68ad8 b8630d2
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Thu May 30 16:27:48 2013 -0400

    Merge branch 'devel' into unevaluated-vars

commit 0f68ad8193
Author: Lorin Hochstein <lorin@nimbisservices.com>
Date:   Thu May 30 14:32:03 2013 -0400

    Optionally fail task on undefined variables

    This patch introduces a new configuration option called
    error_on_undefined_vars, which defaults to false.

    If this option is set to true, then a task which has unevaluated
    variables in its arguments will fail instead of running. Output looks
    like this:

        TASK: [set rabbitmq password] *************************************************
        fatal: [10.20.0.7] => Undefined variables: rabbitmq_user, rabbitmq_password
12 years ago
trbs 653fac2f5c fix loading order of ansible.cfg in documentation 12 years ago
Matt Coddington 542eeeb5d6 add option to ignore $legacy variable style substitution 12 years ago
Michael DeHaan 8ef18c2f98 Don't set PasswordAuthentication=no here because the connection plugin will do that unless a password is actually specified with -k/--ask-pass. 12 years ago
Michael DeHaan b8fdcff524 Merge branch 'nocows' of git://github.com/jpmens/ansible into devel
Conflicts:
	lib/ansible/callbacks.py
	lib/ansible/constants.py
12 years ago
Michael DeHaan aa55268514 Adds a logfile for ansible playbooks that can be set by the environment or configuration file. 12 years ago
Jan-Piet Mens dfd885a012 Make ANSIBLE_NOCOWS configurable
nocows = 1 in ansible.cfg
	or old environment variable ANSIBLE_NOCOWS=1
add to ansible.cfg example
12 years ago
willthames c4442ad804 Documented executable setting for ansible.cfg 12 years ago
Michel Blanc 0cd0a7fda3 Fixes jina typos
Moved *jina* to *jinja2*
12 years ago
Michel Blanc 1c22f2146e Adds configurable jinja2 extension loading
Jinja extensions adds features to the jinja2 templating engine. This
patch allows module loading for the templating engine vian an
ansible.cfg configuration key (jinja_extensions).
The default behaviour doesn't change (no module loading).
Requested modules can be added coma separated in ansible.cfg

Adds whitespace handling in jinja_extension config

Added whitespace handling in jinja_extension configuration directive, so
things stay safe if user adds spaces around comas in the directives
list.

Adds config example for jinja_extensions

Added config example with multiple extentions for jinja_extensions
12 years ago
Daniel Hokka Zakrisson 5268d49bad Add sudo_flags configuration option to alter sudo behaviour
Default to -H to set $HOME appropriately.
12 years ago
Michel Blanc e28e538c6e Adds user-selectable hash merging support in vars
Hash variables are currently overriden if they are redefined. This
doesn't let the user refine hash entries or overriding selected keys,
which can, for some, be a desirable feature.
This patch let the user force hash merging by setting the
hash_behaviour value to "merge" (without the quotes) in ansible.cfg

However, by default, ansible behaves like it always did and if any value
besides "merge" is used ("replace" is suggested in the example ansible.cfg
file), it will also behave as always.
12 years ago
ron1 7d67ecfb2d Update examples/ansible.cfg with sudo_exe 12 years ago
fdavis a278a60c34 add filter_plugins to example ansible.cfg 12 years ago
fdavis b91896ff55 move scp_if_ssh to the ssh connection category 12 years ago
fdavis b1dbeec66c Allows use of scp instead of sftp in
Added a boolean constant scp_if_ssh to the config
Added scp support for the ssh connection plugin
Refers to #1279
12 years ago
Michael DeHaan 6f938c9f4c Merge branch 'playbook_ssh_ask_pass' of git://github.com/clatour/ansible into devel
Conflicts:
	examples/ansible.cfg

+ doc tweak
12 years ago
Chandler Latour f436a8c88b Added config option for default ask for ssh_pass 12 years ago
Brian Coca 8d1ed566da corrected mizpells environment
Signed-off-by: Brian Coca <briancoca+ansible@gmail.com>
12 years ago
Brian Coca 6877a88c7e added comment to example config to show usage of new sudo password asking option
Signed-off-by: Brian Coca <briancoca+ansible@gmail.com>
12 years ago
Michael DeHaan 7f6aa2d3d5 Config parameter rename 12 years ago
Michael DeHaan 6ba30170dd Make group_vars and host_vars available to usr/bin/ansible, and make vars_plugins exist 12 years ago
Jan-Piet Mens 9ed59da294 Allow user-specified $ansible_managed string with named parameters 12 years ago
Lorin Hochstein 869a97e1cb Fix comment in example config file.
The config file incorrectly mentions the --private-key-file flag.
Should be --private-key
12 years ago
Dag Wieers 30f4f83a4c Disable PasswordAuthentication when using -c ssh
If PasswordAuthentication is enabled (which is the default) ansible 
will spawn (multiple) ssh's with a password-prompt which corrupts 
the terminal, and cannot be properly used.

So it is better to not allow for password-based authentication using 
-c ssh. The result is that authentication fails but Ansible 
continues to work
12 years ago
Grzegorz Nosek 76419a9fdf Point to the proper config file
The global config file is loaded from /etc/ansible, not /etc
12 years ago
Michael DeHaan 9851066f4d Adding ability to set ssh args from config file 12 years ago
Michael DeHaan 1cadfcbf61 amend default library location in config file 12 years ago
Michael DeHaan 62fbbf7653 config file support 12 years ago