Skip to content

Releases: linux-system-roles/logging

Only copy cert/key files if tls is `true`

24 Aug 16:11
Compare
Choose a tag to compare

Fix test scripts for BaseOS CI - removing unnecessary "become: true" from test scripts.

Fix test scripts for BaseOS CI - fixing the invalid expected value of tls.permittedpeer in tests_relp.yml.

Update copy tasks conditions with tls true

Playbook fails when certificates are not used.
This patch adds condition for the copy tasks to perform only when tls is set to true.

remove trailing spaces

remove trailing spaces to fix linter issues

Put multiple tasks under the condition,

item.tls is defined | ternary(item.tls, item.use_cert | d(true))
in one block.

Fixing a bug in "Check certs - key/certs data are provided, but tls is

false" found by @avlitman.

This case must have failed the Check certs task.

tls is false and certs+key defined: task was skipped.

Allowing the case, tls is false and key/certs vars are configured.

  • The case used to fail in the checking task with emitting an error.
    The error is transformed to a warning.
  • For the test case, TEST CASE 2 in tests_files_elasticsearch.yml
    is added.

In addition, some minor bugs in tests_files_elasticsearch.yml are
fixed.

ref: bz1994580

drop support for ansible 2.8

12 Aug 16:21
Compare
Choose a tag to compare

Drop support for Ansible 2.8 by bumping the Ansible version to 2.9

min_ansible_version is now 2.9
Bug 1989197 - drop support for Ansible 2.8
https://bugzilla.redhat.com/show_bug.cgi?id=1989197

Several bug fixes

07 Aug 01:46
Compare
Choose a tag to compare

use correct python-cryptography package

Use python-cryptography on EL7 - use python-cryptography3 everywhere
else
https://bugzilla.redhat.com/show_bug.cgi?id=1989962

[FIX] README false variable name

inside role rsyslog logging_purge_original_conf variable is named logging_purge_confs

python2 renders server_host list incorrectly

On python2 (el7) when server_host is a list, this:

            server={{ item.server_host }}

gets rendered as this:

            server=[u'logging-es0', u'logging-es1']

I think we should not rely on the python/jinja2 list to string conversion
being exactly the same format as the rsyslog string list format.

do not warn about unarchive or leading slashes

https://bugzilla.redhat.com/show_bug.cgi?id=1984182
Use the args.warn: false to omit the warning about using
unarchive instead of the tar command.
Use the tar -P flag to omit the warning about trimming
leading slashes / from the paths.

Support list of elasticsearch hosts; use tar command instead of archive module

28 Jul 21:15
Compare
Choose a tag to compare

Instead of the archive module, use "tar" command for backup.

Note: having the module 'archive' makes the logging role fail with
an error "couldn't resolve module/action 'archive'." if executed
with ansible-navigator.

Stop using set_fact to set rsyslog_backup_dir in roles/rsyslog/tasks/main.yml
to fix a bug that the backup dir could have repeated
rsyslog.d-{{ ansible_date_time.iso8601_basic_short }}
sub-directories if the logging role is executed multiple times.

Move "logging_purge_confs: true" to TEST CASE 3 in tests_basic_files.yml.

Add a support for list value to server_host in the elasticsearch output

RFE from oVirt:
elasticsearch now allows the server to be a list of servers:
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omelasticsearch.html#server
Is this variable adjusted in Logging repo to be an array?

  • server_host: Host name Elasticsearch is running on. The value
    is a single host or list of hosts. Required.

Fix lint issues; fix README rendering

26 May 20:43
Compare
Choose a tag to compare

Fix linter issues

Fix README rendering

support jinja 2.7; several bug fixes

22 Feb 21:47
Compare
Choose a tag to compare

Make rsylog-gnutls package not required - only if using input or output
that requires gnutls

Fixing bugs in permitted_servers and permitted_clients parameter in relp.

Issue: cert and key files should be deployed in the /etc/pki/tls folder

README - Removing a duplicated "port" in the relp output parameter.

use FROMHOST instead of HOSTNAME for remote files log file name

Bug fix in relp_output - there was inconsistencies in the parameters.

Bug fix in relp_input - an unwanted loop index was added as suffix

support jinja 2.7

Support property based filters, imrelp, omrelp

19 Nov 20:07
Compare
Choose a tag to compare

Adds support for property based filters
Adds support for input imrelp
Adds support for output omrelp
Fixes some issues with elasticsearch output

This also adds support for collections conversion as well as some tox test fixes

Support for network inputs/outputs incl. TLS, Elasticsearch output

26 Aug 18:35
Compare
Choose a tag to compare

Support for udp, tcp (plain and TLS) inputs and outputs
Support for Elasticsearch output
Support for multiple combinations of inputs and outputs