Releases: linux-system-roles/logging
Only copy cert/key files if tls is `true`
Fix test scripts for BaseOS CI - removing unnecessary "become: true" from test scripts.
Fix test scripts for BaseOS CI - fixing the invalid expected value of tls.permittedpeer in tests_relp.yml.
Update copy tasks conditions with tls true
Playbook fails when certificates are not used.
This patch adds condition for the copy tasks to perform only when tls is set to true.
remove trailing spaces
remove trailing spaces to fix linter issues
Put multiple tasks under the condition,
item.tls is defined | ternary(item.tls, item.use_cert | d(true))
in one block.
Fixing a bug in "Check certs - key/certs data are provided, but tls is
false" found by @avlitman.
This case must have failed the Check certs task.
tls is false and certs+key defined: task was skipped.
Allowing the case, tls is false and key/certs vars are configured.
- The case used to fail in the checking task with emitting an error.
The error is transformed to a warning. - For the test case, TEST CASE 2 in tests_files_elasticsearch.yml
is added.
In addition, some minor bugs in tests_files_elasticsearch.yml are
fixed.
ref: bz1994580
drop support for ansible 2.8
Drop support for Ansible 2.8 by bumping the Ansible version to 2.9
min_ansible_version is now 2.9
Bug 1989197 - drop support for Ansible 2.8
https://bugzilla.redhat.com/show_bug.cgi?id=1989197
Several bug fixes
use correct python-cryptography package
Use python-cryptography
on EL7 - use python-cryptography3
everywhere
else
https://bugzilla.redhat.com/show_bug.cgi?id=1989962
[FIX] README false variable name
inside role rsyslog logging_purge_original_conf
variable is named logging_purge_confs
python2 renders server_host list incorrectly
On python2 (el7) when server_host is a list, this:
server={{ item.server_host }}
gets rendered as this:
server=[u'logging-es0', u'logging-es1']
I think we should not rely on the python/jinja2 list to string conversion
being exactly the same format as the rsyslog string list format.
do not warn about unarchive or leading slashes
https://bugzilla.redhat.com/show_bug.cgi?id=1984182
Use the args.warn: false
to omit the warning about using
unarchive
instead of the tar
command.
Use the tar
-P
flag to omit the warning about trimming
leading slashes /
from the paths.
Support list of elasticsearch hosts; use tar command instead of archive module
Instead of the archive module, use "tar" command for backup.
Note: having the module 'archive' makes the logging role fail with
an error "couldn't resolve module/action 'archive'." if executed
with ansible-navigator.
Stop using set_fact to set rsyslog_backup_dir in roles/rsyslog/tasks/main.yml
to fix a bug that the backup dir could have repeated
rsyslog.d-{{ ansible_date_time.iso8601_basic_short }}
sub-directories if the logging role is executed multiple times.
Move "logging_purge_confs: true" to TEST CASE 3 in tests_basic_files.yml.
Add a support for list value to server_host in the elasticsearch output
RFE from oVirt:
elasticsearch now allows the server to be a list of servers:
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omelasticsearch.html#server
Is this variable adjusted in Logging repo to be an array?
server_host
: Host name Elasticsearch is running on. The value
is a single host or list of hosts. Required.
Fix lint issues; fix README rendering
Fix linter issues
Fix README rendering
support jinja 2.7; several bug fixes
Make rsylog-gnutls package not required - only if using input or output
that requires gnutls
Fixing bugs in permitted_servers and permitted_clients parameter in relp.
Issue: cert and key files should be deployed in the /etc/pki/tls folder
README - Removing a duplicated "port" in the relp output parameter.
use FROMHOST instead of HOSTNAME for remote files log file name
Bug fix in relp_output - there was inconsistencies in the parameters.
Bug fix in relp_input - an unwanted loop index was added as suffix
support jinja 2.7
Support property based filters, imrelp, omrelp
Adds support for property based filters
Adds support for input imrelp
Adds support for output omrelp
Fixes some issues with elasticsearch output
This also adds support for collections conversion as well as some tox test fixes
Support for network inputs/outputs incl. TLS, Elasticsearch output
Support for udp, tcp (plain and TLS) inputs and outputs
Support for Elasticsearch output
Support for multiple combinations of inputs and outputs