Commit Graph

48364 Commits

Author SHA1 Message Date
Rick Elrod
8016c034da New release v2.9.23 v2.9.23 2021-06-22 00:19:11 -05:00
Rick Elrod
ba66bebcda Update Ansible release version to v2.9.23rc1.post0. 2021-06-14 22:15:31 -05:00
Rick Elrod
e26c8e3134 New release v2.9.23rc1 v2.9.23rc1 2021-06-14 17:45:33 -05:00
Abhijeet Kasurde
4acad228f0 [bp-2.9] firewalld: Ensure idempotency (#74992)
Fixes: https://github.com/ansible-collections/ansible.posix/issues/179

Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
2021-06-14 05:04:19 -05:00
Brian Coca
8b17e5b922 fix unsafe preservation across newlines (#74960) (#74976)
CVE-2021-3583
  ensure we always have unsafe

Co-authored-by: Rick Elrod <rick@elrod.me>
(cherry picked from commit 4c8c40fd3d)
2021-06-11 16:43:30 -05:00
Hideki Saito
c49092fd29 Backport to fix missing initializing changed in net_get (#74805)
* Fixes #74802

Signed-off-by: Hideki Saito <saito@fgrep.org>
2021-06-11 11:33:16 -05:00
Sam Doran
88eb0f1dfb Skip task for CentOS 8 as well (#74913)
Something change in the packages that was failing on RHEL
a few weeks ago. Now it is failing in CentOS 8 as well
2021-06-07 13:02:15 -05:00
Toshio Kuratomi
0691475caf Workaround bug in jinja2-3.0.0 and 3.0.1 (#74795)
Jinja2-3.0.0 and 3.0.1 has a bug where undefined values cannot be
checked to see if they contain a value: https://github.com/pallets/jinja/issues/1448#issuecomment-846029509

We workaround this in two ways, either of which would be sufficient:
* Normalize the data so that choices is an empty iterable when it isn't
  specified in the documentation.  This is what antsibull-docs (and thus
  documentation builds on 2.10+) do.
* Change the logic in the template to check whether choices exists
  before checking containment.  This better expresses the logic at that
  point in the template (if there is a default value but there is not a
  list of choices, then display the default in its own string) so it's
  a good change to make as well.
2021-06-03 15:13:43 -05:00
Rick Elrod
d53fb60af3 Update Ansible release version to v2.9.22.post0. 2021-05-24 17:50:11 -05:00
Rick Elrod
dc9726fe6c New release v2.9.22 v2.9.22 2021-05-24 14:38:26 -05:00
Rick Elrod
4f0e584ea4 [2.9] [tests] add websocket-client constraint, python 2 (#74750)
Change:
- websocket-client >= 1 requires python 3, so add constraint for python
  2.

Test Plan:
- ci_complete

Signed-off-by: Rick Elrod <rick@elrod.me>

* avoid a mysql_variables check on rhel 8

Signed-off-by: Rick Elrod <rick@elrod.me>
2021-05-21 13:13:04 -05:00
Rick Elrod
d1db5366a2 Update Ansible release version to v2.9.22rc1.post0. 2021-05-17 18:47:20 -05:00
Rick Elrod
a9518f8809 New release v2.9.22rc1 v2.9.22rc1 2021-05-17 17:00:51 -05:00
Sam Doran
a2fabbe38b [stable-2.9] Use our own copy of the Codecov uploader (#74460) (#74493)
Due to the recent security incident, use our own copy hosted in S3
to mitigate future risk from running an arbitrary script downloaded from a
remote and untrtusted server.
(cherry picked from commit aa12af1d34)

Co-authored-by: Sam Doran <sdoran@redhat.com>
2021-05-16 21:48:10 -05:00
Sam Doran
6fe7640fa5 [stable-2.9] Disable rabbitmq integration tests 2021-05-14 11:50:19 -07:00
Matt Clay
c310830553 [stable-2.9] CI and compat fixes for Jinja2 >= 3.0 (#74666) (#74672)
* [stable-2.9] CI and compat fixes for Jinja2 >= 3.0 (#74666)

* Add constraint for MarkupSafe

MarkupSafe >= 2.0.0 requires Python >= 3.6.0. Add a constraint for older Python versions
and fix the `groupby_filter` test.

* Fix template_jinja2_latest test.

* patch filter decorators on newer Jinja2

* Jinja2 >= 3.0 renames several filter decorators used by Ansible itself, as well as by filters in collections. This patch ensures that the old names are usable within Ansible and by collections without warnings or errors.

* Ignore docs-build issues.

* Remove unnecessary ignore.

* Disable failing nuage_vspk test.

* Fix inventory_aws_conformance integration test.

(cherry picked from commit f99d024851)

Co-authored-by: Matt Clay <matt@mystile.com>
Co-authored-by: Matt Davis <mrd@redhat.com>.
Co-authored-by: Sam Doran <sdoran@redhat.com>
2021-05-12 12:50:12 -07:00
Matt Clay
d8d20a2ff9 [stable-2.9] Fix ansible-test AZP build lookup.
(cherry picked from commit 877e5b3dfe)

Co-authored-by: Matt Clay <matt@mystile.com>
2021-05-04 10:13:37 -07:00
Matt Clay
6afac6878c [stable-2.9] Remove obsolete Shippable specific scripts.
Also remove some other unncessary code from CI scripts..
(cherry picked from commit be7de9844e)

Co-authored-by: Matt Clay <matt@mystile.com>
2021-05-04 10:13:15 -07:00
Bill Nottingham
93e2a52ce7 Product-related updates. (#74463) 2021-05-03 22:10:20 -05:00
Rick Elrod
44f24bce36 Update Ansible release version to v2.9.21.post0. 2021-05-03 22:03:14 -05:00
Rick Elrod
fb177b3878 shift a few CI groups [2.9] (#74553)
ci_complete

Signed-off-by: Rick Elrod <rick@elrod.me>
v2.9.21
2021-05-03 20:20:03 -05:00
Rick Elrod
89f2208f40 New release v2.9.21 2021-05-03 14:29:20 -05:00
Sam Doran
9380d74c02 [stable-2.9] incidental_setup_rabbitmq test - Use official repo for rabbitmq-erlang (#74453)
Previously it was hosted on bintray, but that service is shutting down on May 1. Using the new
repository also required using a newer version of RabbitMQ..
(cherry picked from commit 62cba4a6ad)

Co-authored-by: Sam Doran <sdoran@redhat.com>
2021-05-03 13:30:45 -05:00
Rick Elrod
1c641dd83d Update Ansible release version to v2.9.21rc1.post0. 2021-04-27 11:46:30 -05:00
Rick Elrod
2ce8dc65f3 New release v2.9.21rc1 v2.9.21rc1 2021-04-27 09:18:33 -05:00
Matt Clay
14036d154d [stable-2.9] Fix pypi-test-container port conflict.
(cherry picked from commit cb7f4f1971)

Co-authored-by: Matt Clay <matt@mystile.com>
2021-04-26 23:00:29 -07:00
Rick Elrod
d4a3d6cd0a [ansible-test] Sync opensuse containers with 2.10 (#74436)
* [ansible-test] Sync opensuse containers with 2.10

Change:
- OpenSuSE 15.1 is now EOL
- Switch containers to use what 2.10 uses, which has 15.2.

Test Plan:
- ci_complete

Signed-off-by: Rick Elrod <rick@elrod.me>

* docker version

Signed-off-by: Rick Elrod <rick@elrod.me>

* needs p7zip-full, otherwise we only get 7zr

Signed-off-by: Rick Elrod <rick@elrod.me>

* Make sure py2 stays py2

Signed-off-by: Rick Elrod <rick@elrod.me>

* no wildcard?

Signed-off-by: Rick Elrod <rick@elrod.me>

* -x instead of --xml

Signed-off-by: Rick Elrod <rick@elrod.me>
2021-04-26 22:16:36 -07:00
Martin Krizek
e8c1c1d636 Actually run blocks/finalized_task test (#74291) (#74310)
(cherry picked from commit 7fecb7ccc3)
2021-04-26 10:08:05 -05:00
Matt Clay
dfe3a4d345 [stable-2.9] Fix ansible-test docker container IP detection. (#74390)
(cherry picked from commit 14ff5e213c)

Co-authored-by: Matt Clay <matt@mystile.com>
2021-04-26 10:07:35 -05:00
Sam Doran
4b23ac77e1 Disable failing hcloud_server test 2021-04-23 14:09:52 -07:00
jamesmarshall24
473608521f Fix "canonical" typo in win_host examples (#74161) 2021-04-20 12:18:12 -05:00
Alicia Cozine
f3087255ee Backports list of available versions to 2.9 for Ansible 3 (#74265) (#74321)
* updates list of available versions for Ansible 3 (#74265)

(cherry picked from commit 126e9244c2)

* oops, also need to update pointer to latest

Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
2021-04-16 16:05:16 -05:00
Alexander Sowitzki
a13f181fd1 [stable-2.9] Bump azure-pipelines-test-container to version 1.9.0
(cherry picked from commit 4819e9301b)

Co-authored-by: Alexander Sowitzki <asowitzk@redhat.com>
2021-04-13 11:21:47 -07:00
Matt Clay
225709ca20 [stable-2.9] Switch to hashlib.sha256() for ansible-test (#72411) (#74170)
When FIPs mode is enable on centos-8, we are not able to load md5
functions.

Signed-off-by: Paul Belanger <pabelanger@redhat.com>
(cherry picked from commit a95213d2f5)

Co-authored-by: Paul Belanger <pabelanger@redhat.com>

Co-authored-by: Paul Belanger <pabelanger@redhat.com>
2021-04-12 20:57:02 -05:00
Gonéri Le Bouder
f4ec55b2d8 [stable-2.9] validate_modules: fails with .id attribute not found (#73322) (#74179)
* validate_modules: fails with .id attribute not found

This patch addresses a problem in the `found_try_except_import` test.

This module tries to identify lines like:

`HAS_FOO = True`

In this case, the target (`HAS_FOO`) is of type `ast.Name` and has a
`id` attribute which provide the name.

In my case, I've a line that set a module attribute`. In this case, the
target (`module.var`) has the type `ast.Attribute` and no `id`
attribute. The code trigger an `AttributeError` exception.

This patch ensures we compare a `ast.Name`.

* Update test/lib/ansible_test/_data/sanity/validate-modules/validate_modules/main.py

(cherry picked from commit 7cf80f50d1)
2021-04-12 20:56:50 -05:00
Sam Doran
cc97479f9d [stable-2.9] ansible-test - ensure trailing separator is added for connection unit test target (#74176) (#74182)
For connection units tests, if the `__init__.py` file is modified, the trailing separator was
not added, making the target invalid.
(cherry picked from commit 7b79b69369)

Co-authored-by: Sam Doran <sdoran@redhat.com>
2021-04-12 20:56:12 -05:00
Matt Clay
3155c8c26c [stable-2.9] Add PyPI proxy container for tests on Python 2.6.. (#74206)
(cherry picked from commit becf941673)

Co-authored-by: Matt Clay <matt@mystile.com>
2021-04-12 20:55:36 -05:00
Rick Elrod
a0cfde08cf Update Ansible release version to v2.9.20.post0. 2021-04-12 20:53:35 -05:00
Rick Elrod
d5f2ef4489 New release v2.9.20 v2.9.20 2021-04-12 17:20:59 -05:00
Rick Elrod
910f4b79cc Update Ansible release version to v2.9.20rc1.post0. 2021-04-05 23:04:19 -05:00
Rick Elrod
470b3f59d2 New release v2.9.20rc1 v2.9.20rc1 2021-04-05 19:58:31 -05:00
Alina Buzachis
fab9bf11b4 New AWS module mod_defaults - rds_option_group (_info) modules (#74098)
* * Add rds_option_group and rds_option_group_info to module_defaults

Signed-off-by: Alina Buzachis <abuzachis@redhat.com>

* changelog

Signed-off-by: Rick Elrod <rick@elrod.me>

Co-authored-by: Rick Elrod <rick@elrod.me>
2021-04-05 19:54:25 -05:00
Jill R
6c471c4ce8 New AWS module mod_defaults - wafv2 modules (#73975)
* New AWS module mod_defaults - wafv2 modules

* changelog

Signed-off-by: Rick Elrod <rick@elrod.me>

Co-authored-by: Rick Elrod <rick@elrod.me>
2021-04-05 19:31:37 -05:00
Carlos Camacho
042d8ef500 [stable-2.9] Fix: nmcli bridge-slave fails with error (#74125)
This commit fixes the error for adding bridge
slaves: nmcli bridge-slave returns "Error: invalid or not allowed setting 'bridge-port'

This fix is related to #42460, #54617, and #68065

* changelog
2021-04-05 18:08:34 -05:00
Mark Chappell
7b048c49a8 [backport/2.9] module_defaults: Add rds_snapshot (#74113)
* module_defaults: Add rds_snapshot

* changelog
2021-04-05 09:42:37 -05:00
Sam Doran
0d668b6046 [stable-2.9] find - set proper default based on use_regex (#73961) (#73966)
When using "use_regex: yes" and setting an excludes: without
specifying a pattern: the existing code passes the file-glob '*' to
the regex matcher.  This results in an internal invalid-regex
exception being thrown.

This maintains the old semantics of a default match-all for pattern:
but switches the default to '.*' when use_regex is specified.

The code made sense as-is before excludes: was added (2.5).  In that
case, it made no sense to set use_regex but *not* set a pattern.
However, with excludes: it now makes sense to only want to exclude a
given regex but not specify a specific matching pattern.

Closes: #50067

* moved change to new location
added changelog

* Update lib/ansible/modules/find.py

Co-authored-by: Ian Wienand <iwienand@redhat.com>.
(cherry picked from commit 089d0a0508)

Co-authored-by: Brian Coca <bcoca@users.noreply.github.com>

* Update fix_find_default.yml

Co-authored-by: Rick Elrod <rick@elrod.me>
2021-04-05 00:09:42 -05:00
Matt Davis
f8caa43dc7 add optional module_utils import support (#73832) (#73916)
Treat  core and collections module_utils imports nested within any Python block statement (eg, `try`, `if`) as optional. This allows Ansible modules to implement runtime fallback behavior for missing module_utils (eg from a newer version of ansible-core), where previously, the module payload builder would always fail when unable to locate a module_util (regardless of any runtime behavior the module may implement).

* sanity test fixes

ci_complete

(cherry-picked from 3e1f6484d7)
2021-04-04 21:16:27 -05:00
Matt Martz
1592c8b0fd [stable-2.9] Ensure task from the worker is finalized/squashed (#73881) (#73929)
* Ensure task from the worker is finalized/squashed. Fixes #57399. Fixes #49942
(cherry picked from commit 832631b)

Co-authored-by: Matt Martz <matt@sivel.net>
2021-04-04 21:13:39 -05:00
Xabier Napal
f2d4f7344f Fix wrong backup directory var name in apt module (#73840) (#74003)
(cherry picked from commit 2bff120db6)
2021-04-04 21:04:24 -05:00
Rick Elrod
9052b0e7f2 [security] Add more missing no_logs (#74115)
Change:
- Add missing no_log on fields and subfields which should have it.
- Update several changelogs with CVE id.

Signed-off-by: Rick Elrod <rick@elrod.me>
2021-04-04 19:01:28 -05:00