James Cassell
bc4ef99533
standardize TLS connection properties ( #54315 )
...
* openstack: standardize tls params
* tower: tower_verify_ssl->validate_certs
* docker: use standard tls config params
- cacert_path -> ca_cert
- cert_path -> client_cert
- key_path -> client_key
- tls_verify -> validate_certs
* k8s: standardize tls connection params
- verify_ssl -> validate_certs
- ssl_ca_cert -> ca_cert
- cert_file -> client_cert
- key_file -> client_key
* ingate: verify_ssl -> validate_certs
* manageiq: standardize tls params
- verify_ssl -> validate_certs
- ca_bundle_path -> ca_cert
* mysql: standardize tls params
- ssl_ca -> ca_cert
- ssl_cert -> client_cert
- ssl_key -> client_key
* nios: ssl_verify -> validate_certs
* postgresql: ssl_rootcert -> ca_cert
* rabbitmq: standardize tls params
- cacert -> ca_cert
- cert -> client_cert
- key -> client_key
* rackspace: verify_ssl -> validate_certs
* vca: verify_certs -> validate_certs
* kubevirt_cdi_upload: upload_host_verify_ssl -> upload_host_validate_certs
* lxd: standardize tls params
- key_file -> client_key
- cert_file -> client_cert
* get_certificate: ca_certs -> ca_cert
* get_certificate.py: clarify one or more certs in a file
Co-Authored-By: jamescassell <code@james.cassell.me>
* zabbix: tls_issuer -> ca_cert
* bigip_device_auth_ldap: standardize tls params
- ssl_check_peer -> validate_certs
- ssl_client_cert -> client_cert
- ssl_client_key -> client_key
- ssl_ca_cert -> ca_cert
* vdirect: vdirect_validate_certs -> validate_certs
* mqtt: standardize tls params
- ca_certs -> ca_cert
- certfile -> client_cert
- keyfile -> client_key
* pulp_repo: standardize tls params
remove `importer_ssl` prefix
* rhn_register: sslcacert -> ca_cert
* yum_repository: standardize tls params
The fix for yum_repository is not straightforward since this module is
only a thin wrapper for the underlying commands and config. In this
case, we add the new values as aliases, keeping the old as primary,
only due to the internal structure of the module.
Aliases added:
- sslcacert -> ca_cert
- sslclientcert -> client_cert
- sslclientkey -> client_key
- sslverify -> validate_certs
* gitlab_hook: enable_ssl_verification -> hook_validate_certs
* Adjust arguments for docker_swarm inventory plugin.
* foreman callback: standardize tls params
- ssl_cert -> client_cert
- ssl_key -> client_key
* grafana_annotations: validate_grafana_certs -> validate_certs
* nrdp callback: validate_nrdp_certs -> validate_certs
* kubectl connection: standardize tls params
- kubectl_cert_file -> client_cert
- kubectl_key_file -> client_key
- kubectl_ssl_ca_cert -> ca_cert
- kubectl_verify_ssl -> validate_certs
* oc connection: standardize tls params
- oc_cert_file -> client_cert
- oc_key_file -> client_key
- oc_ssl_ca_cert -> ca_cert
- oc_verify_ssl -> validate_certs
* psrp connection: cert_trust_path -> ca_cert
TODO: cert_validation -> validate_certs (multi-valued vs bool)
* k8s inventory: standardize tls params
- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs
* openshift inventory: standardize tls params
- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs
* tower inventory: verify_ssl -> validate_certs
* hashi_vault lookup: cacert -> ca_cert
* k8s lookup: standardize tls params
- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs
* laps_passord lookup: cacert_file -> ca_cert
* changelog for TLS parameter standardization
2019-03-28 00:19:28 -05:00
Pilou
51270be883
tower modules: check that 'verify_ssl' defined in ~/.tower_cli.cfg isn't ignored ( #50687 )
...
* Check that verify_ssl defined in tower_cli.cfg isn't ignored
* Avoid to override verify_ssl value defined in tower_cli.cfg
By default, tower-cli library enables SSL certificates check. But
verify_ssl false value defined in config files read by default by
tower-cli library (for example /etc/tower/tower_cli.cfg) was ignored
because overriden by the tower_verify_ssl parameter default value.
* fix a typo in comment
2019-02-13 10:26:43 +00:00
Jordan Borean
a39c4ad464
Final round of moving modules to new import error msg ( #51852 )
...
* Final round of moving modules to new import error msg
* readd URL to jenkins install guide
* fix unit tests
2019-02-08 10:07:01 +10:00
Pilou
12973e0541
Tower modules: move HAS_TOWER_CLI check in module_utils and minor improvements ( #39809 )
...
* tower_* modules: move HAS_TOWER_CLI in TowerModule
Besides this change allows to define other common parameters such as
mutually_exclusive.
* tower_*: config file can not be used with auth params
* tower module_utils: remove useless call to expanduser
'path' type: expanduser & expandvars are automatically called
2018-08-02 11:17:39 -04:00
Pierre Roux
81de7582d9
Fix tower_* modules **params kwargs ( #40137 )
...
* Add cleaning function to handle **params
The cleaning function is only added to tower modules which pass a `**params`
argument as an unpacked dictionnary to the tower-cli method calls.
Fix #39745
* Remove previous code added only for tower_role
In 872a7b4
, the `update_resources` function was modified so that it would clear unwanted
parameters. However, this behaviour is desired for other modules too, modified in
another commit. (see tower_clean_params).
2018-05-25 18:03:12 -05:00
Pilou
44f5b2bd25
ansible_tower: fix broken import, reuse tower_argument_spec and documentation fragment ( #29115 )
...
* module_utils/ansible_tower: fix broken import
* tower_*: use tower_argument_spec & doc fragment
* tower doc fragment: Ansible requires Python 2.6+
* tower_job_wait: fix broken import (Py3 compat)
2017-10-02 16:21:24 -04:00
ethackal
4980ebf064
Fixes verify_ssl option when False in ansible_tower module util ( #30308 )
...
* Fixes verify_ssl option when False in ansible_tower module util
* fixed comparison to None per PEP-8 standards
2017-09-14 12:03:33 +02:00
Dag Wieers
5553b20828
Collated PEP8 fixes ( #25293 )
...
- Make PEP8 compliant
2017-06-02 12:14:11 +01:00
Wayne Witzel III
b2d4eeb293
Ansible Tower job_launch module ( #22148 )
...
* Ansible Tower job_launch module
* Added RETURN documentation and fixed import locations
* remove superfluos required attributes, make tags a list, and fix some typos
* only join tags if they are actually a list
* use isinstance instead of type, cleanup imports
2017-03-01 19:57:35 +00:00
Wayne Witzel III
f98d41c121
Ansible Tower user and credential module ( #21020 )
...
* rename tower config module parameters to avoid conflicts
* add Ansible Tower user module
* add Ansible Tower credential module
* remove errant hash from interpreter line
* friendlier error messages
* Update tower_verify_ssl defaults and module examples
* Update tower_verify_ssl default documentation
* Tower expects satellite6 not foreman
2017-02-15 16:59:03 +00:00
Wayne Witzel III
0e72f3bd71
Ansible Tower organization module ( #20355 )
...
* add Ansible Tower organization module
* skip Python 2.4 check for ansible_tower module
* make spec and doc match, extract tower auth helper method
* added auth params at module level
* support check mode
* extract check mode check to ansible_tower utils, add utils to 2.4 skip
* update interpreter shebang
* remove colon from docs
* no log for password, verify_ssl default to true
2017-01-30 13:42:32 -05:00