You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/test/units/galaxy
Sloane Hertel 43e55db208
ansible-galaxy - add signature verification of the MANIFEST.json (#76681)
* ansible-galaxy collection install|verify:

  - Support verifying the origin of the MANIFEST.json when the Galaxy server has provided signatures.
  - Allow supplemental signatures to use during verification on the CLI/requirements file.

* ansible-galaxy collection install:

  - Support disabling signature verification. This silences the warning provided by ansible-galaxy if the Galaxy server provided signatures it cannot use because no keyring is configured.
  - Store Galaxy server metadata alongside installed collections for provenance. This is used by 'ansible-galaxy collection verify --offline'.

* Add unit tests for method that gets signatures from a Galaxy server

* Add integration tests for user-provided signature sources

- Test CLI option combinations
- Test installing collections with valid/invalid signature sources
- Test disabling GPG verification when installing collections
- Test verifying collections with valid/invalid signature sources

* Make signature verification advisory-by-default if signatures are provided by the Galaxy server

- Make the default keyring None
- Warn if the keyring is None but the Galaxy server provided signatures
- Error if the keyring is None but the user supplied signatures
- Error if the keyring is not None but is invalid

* changelog

* add ansible-galaxy user documentation for new options

Co-authored-by: Matt Martz <matt@sivel.net>
Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>
Co-authored-by: Martin Krizek <martin.krizek@gmail.com>
Co-authored-by: Sandra McCann <samccann@redhat.com>
Co-authored-by: Andy Mott <amott@redhat.com>
Co-authored-by: John R Barker <john@johnrbarker.com>
3 years ago
..
__init__.py Collection test (#59488) 5 years ago
test_api.py ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 3 years ago
test_collection.py ansible-galaxy - fix the --ignore-certs flag for the implicit galaxy server (#76735) 3 years ago
test_collection_install.py ansible-galaxy - add signature verification of the MANIFEST.json (#76681) 3 years ago
test_role_install.py Fix tests failing on pytest 7 (#76670) 3 years ago
test_role_requirements.py galaxy: handle plus sign in user token appearing in role url (#73057) 4 years ago
test_token.py Enable ansible-galaxy to specify client id override with Keycloak Token (#75601) 3 years ago
test_user_agent.py ansible-galaxy - expand User-Agent string for Galaxy endpoints (#65578) 5 years ago