ansible

Commit Graph

Author	SHA1	Message	Date
Abhijeet Kasurde	03246dc0ae	galaxy: Skip verification for unwanted files (#82162 ) Fixes: #81628 Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>	9 months ago
Matt Martz	92d5ffda82	Update galaxy_ng container for tests (#80721 )	2 years ago
Sloane Hertel	76273a6b80	Clean up integration tests (#77516 )	3 years ago
Sloane Hertel	f96a661ada	ansible-galaxy - add configuration options for more flexible collection signature verification (#77026 ) * Add a toggle to control the number of signatures required to verify the authenticity of a collection * Make the default number of required valid signatures 1 * Add option to make signature verification strict and fail if there are no valid signatures (e.g. "+1") * Use a regex to validate --required-valid-signature-count * Add a toggle to limit the gpg status codes that are considered a failure * Update documentation and changelog * Add unit and integration tests for the new options * Fixes #77146 Fix using user-provided signatures when running 'ansible-galaxy collection verify ns.coll --offline' Add a test for a user-provided signature when running ansible-galaxy collection verify with --offline Fix displaying overall gpg failure without extra verbosity Add a test for displaying gpg failure without verbosity Improve documentation to be more clear that signature verification only currently applies to collections directly sourced from Galaxy servers	3 years ago
Sloane Hertel	7657caa072	Fix 'ansible-galaxy collection verify' to display new files/dirs (#76690 ) * Fix 'ansible-galaxy collection verify' to report files/directories not listed in the FILES.json * changelog * Fix bug in 2.13+	3 years ago
Matt Martz	494cb4e211	Ensure tests that need to validate higher verbosity messages run with vvvv	3 years ago
Sloane Hertel	43e55db208	ansible-galaxy - add signature verification of the MANIFEST.json (#76681 ) * ansible-galaxy collection install\|verify: - Support verifying the origin of the MANIFEST.json when the Galaxy server has provided signatures. - Allow supplemental signatures to use during verification on the CLI/requirements file. * ansible-galaxy collection install: - Support disabling signature verification. This silences the warning provided by ansible-galaxy if the Galaxy server provided signatures it cannot use because no keyring is configured. - Store Galaxy server metadata alongside installed collections for provenance. This is used by 'ansible-galaxy collection verify --offline'. * Add unit tests for method that gets signatures from a Galaxy server * Add integration tests for user-provided signature sources - Test CLI option combinations - Test installing collections with valid/invalid signature sources - Test disabling GPG verification when installing collections - Test verifying collections with valid/invalid signature sources * Make signature verification advisory-by-default if signatures are provided by the Galaxy server - Make the default keyring None - Warn if the keyring is None but the Galaxy server provided signatures - Error if the keyring is None but the user supplied signatures - Error if the keyring is not None but is invalid * changelog * add ansible-galaxy user documentation for new options Co-authored-by: Matt Martz <matt@sivel.net> Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua> Co-authored-by: Martin Krizek <martin.krizek@gmail.com> Co-authored-by: Sandra McCann <samccann@redhat.com> Co-authored-by: Andy Mott <amott@redhat.com> Co-authored-by: John R Barker <john@johnrbarker.com>	3 years ago
Sloane Hertel	469b559ebe	Try all galaxy servers when locating available versions for a collection (#75468 ) * If an exception occurs when getting a collection's metadata, continue to the next in the server list. * Warn for unknown exceptions when finding versions of a collection * Test that an invalid server is no longer fatal if a subsequent server has the collection * Fix server for verify tests - compare checksums against the server from which it was installed * Add tests for verify and fix that code path to mirror install/download behavior for server errors Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>	3 years ago
Matt Davis	454c7e37ec	nonzero exit code on `ansible galaxy collection verify` failures (#74051 )	4 years ago
Matt Davis	a84c1a5669	add --offline option to galaxy collection verify (#74040 ) * --offline allows in-place verify for installed collections with manifests * manifest hash, collection name, version, and path are now always displayed * test updates	4 years ago
Sloane Hertel	728dafb6eb	Make `ansible-galaxy collection verify` error out on no `MANIFEST.json` PR #73403 Co-Authored-By: Sviatoslav Sydorenko <webknjaz@redhat.com>	4 years ago
Sviatoslav Sydorenko	595413d113	Replace the inhouse collection dependency resolver with `resolvelib` PR #72591 This change: * Adds an artifacts manager that abstracts away extracting the metadata from artifacts, downloading and caching them in a temporary location. * Adds `resolvelib` to direct ansible-core dependencies[0]. * Implements a `resolvelib`-based dependency resolver for `collection` subcommands that replaces the legacy in-house code. This is a dependency resolution library that pip 20.3+ uses by default. It's now integrated for use for the collection dependency resolution in ansible-galaxy CLI. * Refactors of the `ansible-galaxy collection` CLI. In particular, it: - reimplements most of the `download`, `install`, `list` and `verify` subcommands from scratch; - reuses helper bits previously moved out into external modules; - replaces the old in-house resolver with a more clear implementation based on the resolvelib library[0][1][2]. * Adds a multi Galaxy API proxy layer that abstracts accessing the version and dependencies via API or local artifacts manager. * Makes `GalaxyAPI` instances sortable. * Adds string representation methods to `GalaxyAPI`. * Adds dev representation to `GalaxyAPI`. * Removes unnecessary integration and unit tests. * Aligns the tests with the new expectations. * Adds more tests, integration ones in particular. [0]: https://pypi.org/p/resolvelib [1]: https://github.com/sarugaku/resolvelib [2]: https://pradyunsg.me/blog/2020/03/27/pip-resolver-testing Co-Authored-By: Jordan Borean <jborean93@gmail.com> Co-Authored-By: Matt Clay <matt@mystile.com> Co-Authored-By: Sam Doran <sdoran@redhat.com> Co-Authored-By: Sloane Hertel <shertel@redhat.com> Co-Authored-By: Sviatoslav Sydorenko <webknjaz@redhat.com> Signed-Off-By: Sviatoslav Sydorenko <webknjaz@redhat.com>	4 years ago
Sloane Hertel	0c4de6839b	Add integration tests to ansible-galaxy-collection for 'ansible-galaxy collection verify' (#73229 )	4 years ago

13 Commits (e279804227c6d0ee80ae68152e9b9c404eeaed68)