You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mitogen/tests/ansible/integration/stub_connections
Alex Willmer b822f20007 ansible_mitogen: Handle AnsibleUnsafeText et al in Ansible >= 7
Follwing fixes in Ansible 7-9 for CVE-2023-5764 cating `AnsibleUnsafeBytes` &
`AnsibleUnsafeText` to `bytes()` or `str()` requires special handling. The
handling is Ansible specific, so it shouldn't go in the mitogen package but
rather the ansible_mitogen package.

`ansible_mitogen.utils.unsafe.cast()` is most like `mitogen.utils.cast()`.
During development it began as `ansible_mitogen.utils.unsafe.unwrap_var()`,
closer to an inverse of `ansible.utils.unsafe_procy.wrap_var()`. Future
enhancements may move in this direction.

refs #977, refs #1046

See also
- https://github.com/advisories/GHSA-7j69-qfc3-2fq9
- https://github.com/ansible/ansible/pull/82293
- https://github.com/mitogen-hq/mitogen/wiki/AnsibleUnsafe-notes
7 months ago
..
README.md
_end_play_if_not_sudo_linux.yml ansible_mitogen: Handle AnsibleUnsafeText et al in Ansible >= 7 7 months ago
all.yml
kubectl.yml tests: Enable stricter error handling, fix resulting failures 2 years ago
lxc.yml tests: Enable stricter error handling, fix resulting failures 2 years ago
lxd.yml tests: Enable stricter error handling, fix resulting failures 2 years ago
mitogen_doas.yml tests: Enable stricter error handling, fix resulting failures 2 years ago
mitogen_sudo.yml tests: Enable stricter error handling, fix resulting failures 2 years ago
setns_lxc.yml ansible_mitogen: Handle AnsibleUnsafeText et al in Ansible >= 7 7 months ago
setns_lxd.yml ansible_mitogen: Handle AnsibleUnsafeText et al in Ansible >= 7 7 months ago

README.md

stub_connections/

The playbooks in this directory use stub implementations of various third party tools (kubectl etc.) to verify arguments passed by Ansible to Mitogen and subsequently onward to the tool result in something that looks sane.

These are bare minimum tests just to ensure sporadically tested connection methods haven't broken in embarrasingly obvious ways.