Commit Graph

48261 Commits (d8a82154d439cfacf12c8e186ddcc74781b667fb)
 

Author SHA1 Message Date
Sloane Hertel d8a82154d4
[2.9] Fix warning for nonexistent inventory cache (#72840) (#73444)
* Fix inventory cache warning by checking if the key exists before loading it

(cherry picked from commit 840bdc1e10)
5 years ago
Rick Elrod 96f8456680
no_log keycloak_client's registration_access_token (#73502)
Change:
- Address missing no_log change from #73489.

Tickets:
- Refs #73489

Signed-off-by: Rick Elrod <rick@elrod.me>
5 years ago
Rick Elrod d74a1b1d13
[security] Add no_log to several module args (CVE-2021-20191) [2.9] (#73489)
Change:
- A number of modules were missing no_log=True where they should have
  had it.

Test Plan:
- Lots of grepping.

Tickets:
- Refs https://github.com/ansible-collections/community.general/pull/1725

Signed-off-by: Rick Elrod <rick@elrod.me>
5 years ago
Sam Doran 474044b10d [stable-2.9] Make yum_repository test more reliable (#73467)
* Improve setup_rpm_repo

- add handlers to remove repos
- add variable to control whethere or not repos are created

* Use local repo for all distros
* Change repo creation script to module.
(cherry picked from commit 997b2d2a19)

Co-authored-by: Sam Doran <sdoran@redhat.com>
5 years ago
Andrew Klychkov 2d89114535
postgresql_user: add clarification about no_password_changes option (#73287)
Co-authored-by: Andrew Klychkov <andrew.klychkov@gmail.com>
5 years ago
Matt Clay d8ab39fbaa
[stable-2.9] Use a versioned pip bootstrapper in ansible-test. (#73360)
(cherry picked from commit fc590aeb21)

Co-authored-by: Matt Clay <matt@mystile.com>
5 years ago
Matt Clay 8d31c4426b
[stable-2.9] Update ansible-test pylint Python support. (#72972) (#73355)
* [stable-2.9] Update ansible-test pylint Python support. (#72972)

* Update ansible-test pylint Python support.
* Python 3.8 is now officially supported.

(cherry picked from commit 37d09f2488)
5 years ago
Matt Clay 7339b9d9cf [stable-2.9] Handle get-pip.py breaking change on Python 2.7.
(cherry picked from commit 484e4af4d0)

Co-authored-by: Matt Clay <matt@mystile.com>
5 years ago
Rick Elrod b235ab4c71 Update Ansible release version to v2.9.17.post0. 5 years ago
Rick Elrod 5a34349348 New release v2.9.17 5 years ago
Alicia Cozine 34043cff09
Revert "[2.9]update the docs requirements versions (#73108) (#73252)" (#73261)
This reverts commit 6ae2146d02.

Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
5 years ago
Sandra McCann 6ae2146d02
[2.9]update the docs requirements versions (#73108) (#73252)
* update the docs requirements versions (#73108)

(cherry picked from commit 0936623901)

* remove antsibull
5 years ago
Rick Elrod 0eddabb3f5 Update Ansible release version to v2.9.17rc1.post0. 5 years ago
Rick Elrod 4f15b61c83 New release v2.9.17rc1 5 years ago
Sloane Hertel 6065dfb291
[2.9] Pass the top level dictionaries to combine_vars (#72979) (#73147)
combine_vars uses dict.update() to replace keys

(cherry picked from commit 5e03e322de)

* Add tests for merging and replacing vars from inventory sources (#73181)

(cherry picked from commit 9de2da8a7e)
5 years ago
Felix Fontein d65fa6878f
Ensure that data within a tuple is marked as unsafe (#65918) (#73044)
* Use is_sequence, and Mapping throughout, add support for tuples. Fixes #65722
* Address tests
* Remove unused import
* Add changelog
* Add docstring for clarity

(cherry picked from commit f8654de851)
Co-authored-by: Matt Martz <matt@sivel.net>
5 years ago
Sam Doran 65367b9721
[stable-2.9] user - properly handle password and password lock when used together (#73016) (#73178)
Do the right thing on Linux when password lock and a password hash are provided by writing
out the password hash prepended by the appropriate lock string rather than using -U and -L.
This is the correct way to set and lock the account in one command.

On BSD, run separate commands as appropriate since locking and setting the password cannot
be done in a single action.

FreeBSD requires running several commands to get the account in the desired state. As a result,
the rc, output, and error from all commands need to be combined and evaluated so an accurate
and complete summary can be given at the end of module execution.

* Improve integration tests to cover this scenario.
* Break up user integration tests into smaller files
* Properly lock account when creating a new account and password is supplied

* Simplify rc collection in FreeBSD class
  Since the _handle_lock() method was added, the rc would be set to None, which could make
  task change reporting incorrect. My first attempt to solve this used a set and was a bit too
  complicated. Simplify it my comparing the rc from _handle_lock() and the current value of rc.

* Improve the Linux password hash and locking behavior
  If password lock and hash are provided, set the hash and lock the account by using a password
  hash since -L cannot be used with -p.

* Ensure -U and -L are not combined with -p since they are mutually exclusive to usermod.

* Clarify password_lock behavior..
(cherry picked from commit 264e08f21a)

Co-authored-by: Sam Doran <sdoran@redhat.com>
5 years ago
Richard Megginson 7eb1703740
backport support for python-kubernetes v12 to ansible 2.9 (#72792)
Support for using python-kubernetes v12 has been added to the
new upstream repo:
https://github.com/ansible-collections/community.kubernetes/blob/main/plugins/module_utils/common.py#L256-L261
This PR backports that support to ansible 2.9
5 years ago
Felix Fontein 5a92beb575
Fix freeform actions with FQCN. (#72958) 5 years ago
Wojciech Wypior 11566eb131
[stable-2.9] Fix bigiq_device_info (#72943)
* fix iteration error with _transform_name_attribute function
* add information on BIG-IQ 7.x support
5 years ago
Felix Fontein c73de6f0b3
[stable-2.9] Fix docker_image tests (#72953)
* Backport of https://github.com/ansible-collections/community.docker/pull/47 to stable-2.9.

* Also fix old-options.
5 years ago
Felix Fontein 77ae0819f9
Backport of 5eef093e99 (#73067) 5 years ago
Sam Doran f7ac5ea8d6
[stable-2.9] systemd - do not overwrite unit name when searching (#72985) (#73014)
* systemd - do not overwrite unit name when searching

PR #72702 introduced a bug that changed the unit name when splitting it up for the purpose
of searching for the unit. This only happens on unit file templates on systems that have a 5.8
or newer kernel and a version of systemd that does not contain a bugfix that causes systmed
to fail to parse dbus.

* Use facts rather than a manual probe to determine if systmed is present

* Remove unnecessary block

* Use vars files instead of set_fact

* Add tests for using a templated unit file

* Update changelog fragment

* Use template to get correct path to sleep binary

(cherry picked from commit 48803604cd)
5 years ago
Sam Doran 98eb810f7d
[stable-2.9] Remove exit code from traps in tests (#72969)
Having the trap exit with a specific code will override
the exit code that caused the trap to run, which could
mask errors
(cherry picked from commit 5157a92139)

Co-authored-by: Sam Doran <sdoran@redhat.com>
5 years ago
Matt Martz ead63f2021
[stable-2.9] Fix reset_connection paramiko, winrm, psrp (#72688) (#72926)
* Ensure we only reset the connection when one has been previously established. Fixes #65812

* Ensure psrp doesn't trace

* winrm too

(cherry picked from commit a3b6485073)

Co-authored-by: Matt Martz <matt@sivel.net>
5 years ago
Matt Martz c32371db56
[stable-2.9] Fix async interpreter parsing (#72636) (#72924)
* Fix async interpreter parsing. Fixes #70690
* Target localhost instead of remote host
* Don't forget inventory
* Address shellcheck issue
(cherry picked from commit 83764ad)

Co-authored-by: Matt Martz <matt@sivel.net>
5 years ago
Matt Clay cdcd2ed49a
Support venv in ansible-test virtualenv scripts (#73164)
* ansible-test - prefer venv over virtualenv on Python 3 (#73000)

Also pin virtualenv to 16.7.10 for older Mac OS X systems. This was the version being installed
anway with the previous constraint (<20).

On systems with Python 3, now prefer venv over virtualenv. Test to see if venv is functional since
some systems have a non-functional venv installation (such as Debian).

(cherry picked from commit 850a77f639)
(cherry picked from commit a48b3d2089)

* Make the new ansible-test venv behavior opt-in

Co-authored-by: Sam Doooran <sdoran@redhat.com>
5 years ago
Felix Fontein 0f65b901f7
docker_image: always push, also when tagging is not necessary
Backport of 117f132213 (#73066)
5 years ago
Sam Doran 95f65b9249
[stable-2.9] Fix string/bytestring comparsion in m_u.basic (#70439) (#73130)
Change:
- module_utils.basic.is_special_selinux_path() used a string ==
  bytestring comparison which returned False and made Ansible think that
  certain filesystems aren't, in fact, special-cased, when they should
  be. Ensure both sides of the == are bytestrings.

Test Plan:
- Added `copy` integration tests for this case.

Tickets:
- Fixes #70244

Signed-off-by: Rick Elrod <rick@elrod.me>.
(cherry picked from commit 688cd8657b)

Co-authored-by: Rick Elrod <rick@elrod.me>
5 years ago
Sam Doran b1f732d9f1 [stable-2.9] Update azure pipelines container
(cherry picked from commit 0eb1e22cd9)

Co-authored-by: Sam Doran <sdoran@redhat.com>
5 years ago
Sam Doooran bb7c0326d8 [stable-2.9] Constrain pexpect and ptyprocess (#73109)
The recent update of ptyprocess to 0.7.0 is incompatible with Python 2.6 and
is causing test failures.

* Add setup_pexpect role to expect test
(cherry picked from commit 003a9e890d)

Co-authored-by: Sam Doooran <sdoran@redhat.com>
5 years ago
Matt Clay 17effffad6
[stable-2.9] Add coverage exporting to ansible-test (#72982)
* Add `--venv-system-site-packages` to ansible-test.

(cherry picked from commit 934d6b235b)

Backport of https://github.com/ansible/ansible/pull/65615

* [stable-2.9] Add coverage exporting to ansible-test

A new `--export` option for `ansible-test coverage combine` allows multi-step aggregation of code coverage for CI pipelines..

(cherry picked from commit fa2be89cd4)

Backport of https://github.com/ansible/ansible/pull/72563
5 years ago
Matt Clay ee181545da [stable-2.9] Update Azure Pipelines scripts and config. (#72986)
* Increase fetch depth to reduce the frequency of full test runs for out-of-date PRs.
* Update scripts to match those which will be used in collections.
(cherry picked from commit 3274e02fd8)

Co-authored-by: Matt Clay <mclay@redhat.com>
5 years ago
Rick Elrod 8815b638ed Update Ansible release version to v2.9.16.post0. 5 years ago
Rick Elrod 10cb8d8788 New release v2.9.16 5 years ago
Rick Elrod 0b13ccacb6 Update Ansible release version to v2.9.16rc1.post0. 5 years ago
Rick Elrod f9b89d9627 New release v2.9.16rc1 5 years ago
Brian Coca c4844e992c
make collection callbacks follow normal flow (#59932) (#72228)
* make collection callbacks follow normal flow (#59932)

make collections whitelist follow normal flow

* fixes missing set_options call and adhoc and stdout processing rules
* avoid dupes
* fixed to handle redirects
* also updated tests with new and more accurate skip message
* fix callback tests for envs with cowsay installed
* lots MOAR comments on why the code is as it is, some todos to refactor in future

Co-authored-by: Matt Davis <nitzmahone@users.noreply.github.com>
(cherry picked from commit 5ec53f9db8)

* fixed bad merge

* hack in redirected names

* ensure we run additional calblacks
5 years ago
Egor Margineanu c2ca8317b7
Fix AIX networks facts when nestat is either missing or has incorrect permissions (#72516) (#72714)
* Added check for none on netstat_path variable

* Added changelog

(cherry picked from commit e879f12fb9)
5 years ago
Brian Coca ce52e6738c
remove redundant remote_user for local setting (#72508)
* remove redundant remote_user for local setting

  local action plugin already does and this also should fix
  fork/thread issue by removing use of pwd library

  fixes #59642

(cherry picked from commit 488b9d6c35)

* ensure local exposes correct user (#72543)

* ensure local exposes correct user

  avoid corner case in which delegation relied on
  playcontext fallback which was removed

  fixes #72541

(cherry picked from commit aa4d53ccdf)
5 years ago
Jordan Borean ff364b6541
Disable win_rds* tests in CI (#72890) 5 years ago
Matt Clay 7c8b05b221
[stable-2.9] Remove shippable.yml. (#72883)
(cherry picked from commit 711064a073)

Co-authored-by: Matt Clay <matt@mystile.com>
5 years ago
Nilashish Chakraborty ceea695163
[stable-2.9] Escalate priv before setting terminal (#72673)
* Try to escalate before on_open_shell to work around ios (#63571)

(cherry picked from commit 0cd2ad5880)

Add changelog

Signed-off-by: NilashishC <nilashishchakraborty8@gmail.com>
Co-authored-by: Nathaniel Case <ncase@redhat.com>
5 years ago
Bill Peck 1706b71141
Fix virt module to support list_vms with a status of paused (#72056)
The docs state to use paused but the check_choice module only
accepts pause which doesn't list paused vm's.
5 years ago
Rick Elrod 8eaa7423d4
[2.9] [cloud_init_data_facts tests] fix for centos8 (#72886)
Change:
- `udev` is provided by `systemd-udev`, which our `state=present` check
  doesn't match. For now, work around this so we don't end up trying to
  upgrade all of systemd.
- In the future, we should discuss if the `yum` module does the right
  thing here.

Test Plan:
- Locally in docker
- CI

Signed-off-by: Rick Elrod <rick@elrod.me>
5 years ago
ShwetaliBerad 48d61848e9
cherry pick for issue ansible-collections/azure#161 from ansible-collections/azure for v2.9 (#71756) 5 years ago
Sam Doran 10cc55c908
[stable-2.9] systemd - fix issue with capbpf and newer kernel (#72337) (#72348)
A bug existed in systemd 245 that did not properly handle unknown kernel
capabilities gracefully. This resulted in incomplete output when querying
for the service status. It is possible to get service status by other means.
This PR works around this issue by getting service status using other commands
in the event of a failure due to this bug.
(cherry picked from commit db84e2c989)

Co-authored-by: Sam Doran <sdoran@redhat.com>

* [stable-2.9] systemd - use list-unit-files rather than list-units (#72363)

list-unit-files will return all files on the system. list-units omits those
that are disabled.

Co-authored-by: Ken Dreyer <ktdreyer@ktdreyer.com>
(cherry picked from commit d6115887fa)

* systemd - account for templated unit files when searching for service (#72702)

Related to issue #71528 and PR #72337

Co-authored-by: Martin Polden <mpolden@mpolden.no>
(cherry picked from commit a788ea0132)
5 years ago
Sam Doran cc47d9cb41
[stable-2.9] wait_for - ignore psutil related errors (#72401) (#72407)
When enumerating connections with psutil, catch and ignore errors to avoid returning a stack trace.

Co-authored-by:  Matt Martz <matt@sivel.net>
(cherry picked from commit fb09fd2a23)
5 years ago
Sam Doran d12e82b94c
[stable-2.9] ansible-test - skip installing PowerShell sanity test reqs if they are already installed (#72423) (#72425)
(cherry picked from commit 809d5fc398)

Co-authored-by: Jordan Borean <jborean93@gmail.com>
5 years ago
Amin Vakil 67108d8679
[stable-2.9] iptables: Reorder comment postition (#71496) (#72551) 5 years ago