You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/test/integration/targets/ansible-galaxy-collection/tasks
Sloane Hertel 43e55db208
ansible-galaxy - add signature verification of the MANIFEST.json (#76681)
* ansible-galaxy collection install|verify:

  - Support verifying the origin of the MANIFEST.json when the Galaxy server has provided signatures.
  - Allow supplemental signatures to use during verification on the CLI/requirements file.

* ansible-galaxy collection install:

  - Support disabling signature verification. This silences the warning provided by ansible-galaxy if the Galaxy server provided signatures it cannot use because no keyring is configured.
  - Store Galaxy server metadata alongside installed collections for provenance. This is used by 'ansible-galaxy collection verify --offline'.

* Add unit tests for method that gets signatures from a Galaxy server

* Add integration tests for user-provided signature sources

- Test CLI option combinations
- Test installing collections with valid/invalid signature sources
- Test disabling GPG verification when installing collections
- Test verifying collections with valid/invalid signature sources

* Make signature verification advisory-by-default if signatures are provided by the Galaxy server

- Make the default keyring None
- Warn if the keyring is None but the Galaxy server provided signatures
- Error if the keyring is None but the user supplied signatures
- Error if the keyring is not None but is invalid

* changelog

* add ansible-galaxy user documentation for new options

Co-authored-by: Matt Martz <matt@sivel.net>
Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>
Co-authored-by: Martin Krizek <martin.krizek@gmail.com>
Co-authored-by: Sandra McCann <samccann@redhat.com>
Co-authored-by: Andy Mott <amott@redhat.com>
Co-authored-by: John R Barker <john@johnrbarker.com>
2 years ago
..
build.yml Add tests for ignore functionality of collection build (#69345) 4 years ago
download.yml add option to upgrade collections (#73336) 3 years ago
init.yml Add tests for ignore functionality of collection build (#69345) 4 years ago
install.yml ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 2 years ago
list.yml galaxy - add format options for collection list (#73474) 3 years ago
main.yml ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 2 years ago
publish.yml Galaxy server update (#72286) 4 years ago
pulp.yml ansible-galaxy - source deps from all servers and not just parent (#72576) 4 years ago
revoke_gpg_key.yml ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 2 years ago
setup_gpg.yml ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 2 years ago
upgrade.yml collection: match skip message as per role install (#74861) 3 years ago
verify.yml ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 2 years ago