EVOLUTION-MANAGER

Edit File: CHANGELOG-v2.9.rst

========================================== Ansible 2.9 "Immigrant Song" Release Notes ========================================== .. contents:: Topics v2.9.27 ======= Release Summary --------------- | Release Date: 2021-10-11 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - Remove obsolete ``junos`` entries for the ``--remote`` option. Security Fixes -------------- - Do not include params in exception when a call to ``set_options`` fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620) Bugfixes -------- - ansible-test - Update ``isort`` constraint from version 4.3.15 to 4.3.16 to prevent ``pylint`` from failing with warnings reported as errors. v2.9.26 ======= Release Summary --------------- | Release Date: 2021-09-13 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Bugfixes -------- - make previous versions compatible we new attributres w/o implementing them. v2.9.25 ======= Release Summary --------------- | Release Date: 2021-08-16 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Allow unsafe_writes to be set on target via env var, for those targets that need a blanket setting. Bugfixes -------- - Added unsafe_writes test. - Enabled unsafe_writes for get_url which was ignoring the paramter. - Restored unsafe_writes functionality which was being skipped. - Setup virtualization_facts - add RHV type. This change will fully work for VMs in clusters at cluster level 4.4 or newer (https://github.com/ansible/ansible/pull/72876). - ansible-test - allow to ignore ``rstcheck`` errors (https://github.com/ansible/ansible/pull/75272). - callback default, now uses task delegate_to instead of delegate vars to display delegate to host - callbacks, restores missing delegate_vars - dnf module - Use all components of a package name to determine if it's installed (https://github.com/ansible/ansible/issues/75311). v2.9.24 ======= Release Summary --------------- | Release Date: 2021-07-19 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - aws creates and exposes a new tiny_prefix variable to provide a shorter prefix for the AWS tests. Bugfixes -------- - Prevent ``ansible_failed_task`` from further templating (https://github.com/ansible/ansible/issues/74036) - ansible-test - restrict ``packaging`` to ``< 21.0`` for Python ``< 3.6`` (https://github.com/ansible/ansible/pull/75186). v2.9.23 ======= Release Summary --------------- | Release Date: 2021-06-22 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Security Fixes -------------- - templating engine fix for not preserving usnafe status when trying to preserve newlines. CVE-2021-3583 Bugfixes -------- - Backport to fix missing ``changed`` in net_get (https://github.com/ansible/ansible/issues/74802) - firewalld - ensure idempotency with firewalld 0.9.3 (https://github.com/ansible-collections/ansible.posix/issues/179). v2.9.22 ======= Release Summary --------------- | Release Date: 2021-05-24 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - cap websocket-client on python 2 because 1.0.0 stops supporting it. Bugfixes -------- - ansible-test - Use documented API to retrieve build information from Azure Pipelines. - ansible_test - add constraint for ``MarkupSafe`` (https://github.com/ansible/ansible/pull/74666) - filter plugins - patch new versions of Jinja2 to prevent warnings/errors on renamed filter decorators (https://github.com/ansible/ansible/issues/74667) v2.9.21 ======= Release Summary --------------- | Release Date: 2021-05-03 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Major Changes ------------- - ansible-test - Tests run with the ``centos6`` and ``default`` test containers now use a PyPI proxy container to access PyPI when Python 2.6 is used. This allows tests running under Python 2.6 to continue functioning even though PyPI is discontinuing support for non-SNI capable clients. Minor Changes ------------- - Switch to hashlib.sha256() for ansible-test to allow for FIPs mode. - ansible-test - Use version 1.21.0 of opensuse test containers which is 15.2, since 15.1 is now EOL. Bugfixes -------- - ansible-test - Avoid publishing the port used by the ``pypi-test-container`` since it is only accessed by other containers. This avoids issues when trying to run tests in parallel on a single host. - ansible-test - Fix docker container IP address detection. The ``bridge`` network is no longer assumed to be the default. - ansible-test - ensure the correct unit test target is given when the ``__init__.py`` file is modified inside the connection plugins directory - validate-modules - do not raise an ``AttributeError`` if a value is assigned to a module attribute in a try/except block. v2.9.20 ======= Release Summary --------------- | Release Date: 2021-04-12 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - aws module_defaults - add rds_option_group, rds_option_group_info - aws module_defaults - add wafv2_ip_set, wafv2_ip_set_info, wafv2_resources, wafv2_resources_info, wafv2_rule_group, wafv2_rule_group_info, wafv2_web_acl, wafv2_web_acl_info - azure_rm_roledefinition - module specification is now valid. - module payload builder - module_utils imports in any nested block (eg, ``try``, ``if``) are treated as optional during module payload builds; this allows modules to implement runtime fallback behavior for module_utils that do not exist in older versions of Ansible. - module_defaults - add module rds_snapshot to aws module_defaults group (https://github.com/ansible/ansible/pull/74113). - nmcli - fix the slaving of bridge interfaces (https://github.com/ansible/ansible/pull/74125). Breaking Changes / Porting Guide -------------------------------- - docker_swarm - if ``join_token`` is specified, a returned join token with the same value will be replaced by ``VALUE_SPECIFIED_IN_NO_LOG_PARAMETER``. Make sure that you do not blindly use the join tokens from the return value of this module when the module is invoked with ``join_token`` specified! This breaking change appears in a minor release since it is necessary to fix a security issue (https://github.com/ansible-collections/community.docker/pull/103). (CVE-2021-3447) Security Fixes -------------- - avi_cloudconnectoruser - mark the ``azure_userpass``, ``gcp_credentials``, ``oci_credentials``, and ``tencent_credentials`` parameters as ``no_log`` to prevent leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447) - avi_sslkeyandcertificate - mark the ``enckey_base64`` parameter as ``no_log`` to prevent potential leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447) - avi_webhook - mark the ``verification_token`` parameter as ``no_log`` to prevent potential leaking of secret values (https://github.com/ansible-collections/community.network/pull/223). (CVE-2021-3447) - aws_direct_connect_virtual_interface - mark the ``authentication_key`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447) - aws_secret - flag the ``secret`` parameter as containing sensitive data which shouldn't be logged (https://github.com/ansible-collections/community.aws/pull/471) (CVE-2021-3447). - azure_rm_devtestlabartifactsource - ``security_token`` no longer appears in logs (``no_log``) (CVE-2021-3447) - bigip_device_license - ``license_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - bigip_dns_nameserver - ``tsig_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - bigip_dns_zone - ``tsig_server_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - bigip_profile_client_ssl - ``key`` and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447) - docker_swarm - the ``join_token`` option is now marked as ``no_log`` so it is no longer written into logs (https://github.com/ansible-collections/community.docker/pull/103). (CVE-2021-3447) - fortios_dlp_fp_doc_source - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_endpoint_control_forticlient_ems - ``admin_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_endpoint_control_profile - ``preshared_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_endpoint_control_settings - ``forticlient_reg_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_extender_controller_extender - ``aaa_shared_secret``, ``ha_shared_secret``, ``modem_passwd``, and ``ppp_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_firewall_ssh_local_ca - ``password`` and ``private_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_firewall_ssh_local_key - ``password`` and ``private_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_log_disk_setting - ``uploadpass`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_router_bgp - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_router_isis - ``auth_password_l1`` and ``auth_password_l2`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_router_key_chain - ``key_string`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_router_ospf - ``authentication_key`` and `md5_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_router_rip - ``auth_string`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_switch_controller_switch_profile - ``login_passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_admin - ``fortitoken`` and ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_api_user - ``api_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_automation_action - ``aws_api_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_autoupdate_tunneling - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_csf - ``password`` and ``group_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_ddns - ``ddns_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_email_server - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_fsso_polling - ``auth_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_ha - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_interface - ``password`` and ``pptp_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_link_monitor - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_mobile_tunnel - ``n_mhae_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_ntp - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_pppoe_interface - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_probe_response - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_sdn_connector - ``access_key``, ``client_secret``, ``key_passwd``, ``password``, ``private_key``, and ``secret_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_virtual_wan_link - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_system_wccp - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_fortitoken - ``activation_code``, ``license``, ``seed``, and ``serial_number`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_fsso - ``password``, ``password1``, ``password2``, ``password3``, ``password4``, and ``password5`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_fsso_polling - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_group - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_krb_keytab - ``keytab`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_ldap - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_local - ``fortitoken``, ``passwd``, and ``ppk_secret`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_peer - ``ldap_password`` and ``passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_radius - ``secret``, ``rsso_secret``, ``secondary_secret``, and ``tertiary_secret`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_user_tacacsplus - ``key``, ``secondary_key``, and ``tertiary_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_certificate_crl - ``ldap_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_certificate_local - ``password``, ``private_key``, and ``scep_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ipsec_manualkey - ``authkey`` and ``enckey`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ipsec_manualkey_interface - ``auth_key`` and ``enc_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ipsec_phase1 - ``authpasswd``, ``group_authentication_secret``, ``ppk_secret``, ``psksecret``, and ``psksecret_remote`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ipsec_phase1_interface - ``authpasswd``, ``group_authentication_secret``, ``ppk_secret``, ``psksecret``, and ``psksecret_remote`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ssl_web_portal - ``logon_password`` and ``sso_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ssl_web_user_bookmark - ``logon_password`` and ``sso_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_vpn_ssl_web_user_group_bookmark - ``logon_password`` and ``sso_password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_wireless_controller_inter_controller - ``inter_controller_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_wireless_controller_vap - ``captive_portal_macauth_radius_secret``, ``captive_portal_radius_secret``, ``key``, and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_wireless_controller_wtp - ``login_passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447) - fortios_wireless_controller_wtp_profile - ``fortipresence_secret`` and ``login_passwd`` no longer appears in logs (``no_log``) (CVE-2021-3447) - gcp_compute_instance - ``raw_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - gcp_container_cluster - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - gcp_sql_instance - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) - icx_system - ``auth_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - ios_ntp - ``auth_key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - logentries_msg - ``token`` no longer appears in logs (``no_log``) (CVE-2021-3447) - na_cdot_user - mark the ``set_password`` parameter as ``no_log`` to avoid leakage of secrets (https://github.com/ansible-collections/community.general/pull/2018). (CVE-2021-3447) - na_elementsw_cluster_snmp - ``password`` and ``passphrase`` no longer appears in logs (``no_log``) (CVE-2021-3447) - netscaler_lb_monitor - ``password`` and ``secondarypassword`` no longer appears in logs (``no_log``) (CVE-2021-3447) - nxos_aaa_server_host - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - ovirt_auth - ``token`` no longer appears in logs (``no_log``) (CVE-2021-3447) - pingdom - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - rollbar_deployment - ``token` no longer appears in logs (``no_log``) (CVE-2021-3447) - stackdriver - ``key`` no longer appears in logs (``no_log``) (CVE-2021-3447) - sts_assume_role - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447) - sts_session_token - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475). (CVE-2021-3447) - tower_credential - ``security_token`` and ``secret`` no longer appears in logs (``no_log``) (CVE-2021-3447) - zabbix_action - ``password`` no longer appears in logs (``no_log``) (CVE-2021-3447) Bugfixes -------- - Strategy - When building the task in the Strategy from the Worker, ensure it is properly marked as finalized and squashed. Addresses an issue with ``ansible_failed_task``. (https://github.com/ansible/ansible/issues/57399) - ansible-test - The ``--export`` option for ``ansible-test coverage`` is now limited to the ``combine`` command. It was previously available for reporting commands on which it had no effect. - ansible-test - The ``ansible-test coverage combine`` option ``--export`` now exports relative paths. This avoids loss of coverage data when aggregating across systems with different absolute paths. Paths will be converted back to absolute when generating reports. - ansible-test - ensure unit test paths for connection and inventory plugins are correctly identified for collections (https://github.com/ansible/ansible/issues/73876). - apt - fix policy_rc_d parameter throwing an exception when restoring original file (https://github.com/ansible/ansible/issues/66211) - find - fix default pattern when use_regex is true (https://github.com/ansible/ansible/issues/50067). v2.9.19 ======= Release Summary --------------- | Release Date: 2021-03-15 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - now makes a better attempt to support podman when calling ``docker images`` and asking for JSON format. - module_defaults - add module ec2_vpc_endpoint_service_info from community.aws to aws module_defaults group (https://github.com/ansible/ansible/pull/73669). - module_defaults - add module iam_saml_federation from community.aws to aws module_defaults group (https://github.com/ansible/ansible/pull/73669). Bugfixes -------- - ConfigManager - Normalize ConfigParser between Python2 and Python3 for handling comments (https://github.com/ansible/ansible/issues/73709) - add AlmaLinux to fact gathering (https://github.com/ansible/ansible/pull/73458) - default callback - Ensure that the ``host_pinned`` strategy is not treated as lockstep (https://github.com/ansible/ansible/issues/73364) - docker_container - fix healthcheck disabling idempotency issue with strict comparison (https://github.com/ansible-collections/community.docker/issues/85). - docker_image - fix crash on loading images with versions of Docker SDK for Python before 2.5.0 (https://github.com/ansible-collections/community.docker/issues/72, https://github.com/ansible-collections/community.docker/pull/73). - docker_image - prevent module failure when removing image that is removed between inspection and removal (https://github.com/ansible-collections/community.docker/pull/87). - docker_image - prevent module failure when removing non-existant image by ID (https://github.com/ansible-collections/community.docker/pull/87). - docker_image_info - prevent module failure when image vanishes between listing and inspection (https://github.com/ansible-collections/community.docker/pull/87). - docker_image_info - prevent module failure when querying non-existant image by ID (https://github.com/ansible-collections/community.docker/pull/87). - hostname - add Almalinux support (https://github.com/ansible/ansible/pull/73619) - mongodb_replicaset - fixes check_compatibility function (https://github.com/ansible-collections/community.mongodb/issues/230). - openssl_csr - no longer fails when comparing CSR without basic constraint when ``basic_constraints`` is specified (https://github.com/ansible-collections/community.crypto/issues/179, https://github.com/ansible-collections/community.crypto/pull/180). - terraform - reset out and err before plan creation (https://github.com/ansible/ansible/issues/64369) - yamllint - do not raise an ``AttributeError`` if a value is assigned to a module attribute at the top of the module. v2.9.18 ======= Release Summary --------------- | Release Date: 2021-02-18 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - The ``pylint`` sanity test is now supported on Python 3.8. - inventory cache - do not show a warning when the cache file does not (yet) exist. Security Fixes -------------- - **security issue** - Mask default and fallback values for ``no_log`` module options (CVE-2021-20228) - _sf_account_manager - `initiator_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - _sf_account_manager - `target_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_active_directory - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_active_directory - `secret_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_filesystems - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_filesystems - `secret_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_pool - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_pool - `secret_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_snapshots - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - aws_netapp_cvs_snapshots - `secret_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - bitbucket_pipeline_variable - hide user sensitive information which are marked as ``secured`` from logging into the console (https://github.com/ansible-collections/community.general/pull/1635) (CVE-2021-20180). - ce_vrrp - `auth_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - cp_mgmt_vpn_community_meshed - `shared_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - cp_mgmt_vpn_community_star - `shared_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - docker_swarm - `signing_ca_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_backend_service - `oauth2_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_disk - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_disk - `source_image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_disk - `source_snapshot_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_image - `image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_image - `source_disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_instance_template - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_instance_template - `source_image_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_region_disk - `disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_region_disk - `source_snapshot_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_snapshot - `snapshot_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_snapshot - `source_disk_encryption_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_ssl_certificate - `private_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_compute_vpn_tunnel - `shared_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gcp_sql_instance - `client_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - gitlab_runner - `registration_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - iap_start_workflow - `token_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - ibm_sa_host - `iscsi_chap_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - keycloak_client - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - keycloak_client - `registration_access_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - keycloak_clienttemplate - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - keycloak_group - `auth_client_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - librato_annotation - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - na_elementsw_account - `initiator_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - na_elementsw_account - `target_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - netscaler_lb_monitor - `radkey` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - nios_nsgroup - `tsig_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - nxos_aaa_server - `global_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - nxos_pim_interface - `hello_auth_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - oneandone_firewall_policy - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - oneandone_load_balancer - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - oneandone_monitoring_policy - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - oneandone_private_network - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - oneandone_public_ip - `auth_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - ovirt - `instance_rootpw` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - pagerduty_alert - `api_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - pagerduty_alert - `integration_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - pagerduty_alert - `service_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - pulp_repo - `feed_client_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - rax_clb_ssl - `private_key` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - snmp_facts - hide user sensitive information such as ``privkey`` and ``authkey`` from logging into the console (https://github.com/ansible-collections/community.general/pull/1621) (CVE-2021-20178). - spotinst_aws_elastigroup - `multai_token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - spotinst_aws_elastigroup - `token` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). - utm_proxy_auth_profile - `frontend_cookie_secret` is now masked with no_log and no longer emitted in logging/output (CVE-2021-20191). Bugfixes -------- - Fix incorrect variable scoping when using ``import with context`` in Jinja2 templates. (https://github.com/ansible/ansible/issues/72615) - ansible-test - Temporarily limit ``cryptography`` to versions before 3.4 to enable tests to function. - ansible-test - The ``--remote`` option has been updated for Python 2.7 to work around breaking changes in the newly released ``get-pip.py`` bootstrapper. - ansible-test - The ``--remote`` option has been updated to use a versioned ``get-pip.py`` bootstrapper to avoid issues with future releases. - display correct error information when an error exists in the last line of the file (https://github.com/ansible/ansible/issues/16456) - facts - properly report virtualization facts for Linux guests running on bhyve (https://github.com/ansible/ansible/issues/73167) - mysql_user - add ``INVOKE LAMBDA`` privilege support (https://github.com/ansible-collections/community.general/issues/283). - mysql_user - add ``SHOW_ROUTINE`` privilege support (https://github.com/ansible-collections/community.mysql/issues/86). - mysql_user - add missed privileges to support (https://github.com/ansible-collections/community.general/issues/617). - pause - do not warn when running in the background if a timeout is provided (https://github.com/ansible/ansible/issues/73042) - postgresql_info - fix crash caused by wrong PgSQL version parsing (https://github.com/ansible-collections/community.postgresql/issues/40). - postgresql_ping - fix crash caused by wrong PgSQL version parsing (https://github.com/ansible-collections/community.postgresql/issues/40). - postgresql_query - fix datetime.timedelta type handling (https://github.com/ansible-collections/community.postgresql/issues/47). - postgresql_query - fix decimal handling (https://github.com/ansible-collections/community.postgresql/issues/45). - postgresql_set - return a message instead of traceback when a passed parameter has not been found (https://github.com/ansible-collections/community.postgresql/issues/41). - psrp connection plugin - ``to_text(stdout)`` before json.loads in psrp.Connection.put_file in case stdout is bytes. - win_find - Get-FileStat used [int] instead of [int64] for file size calculations v2.9.17 ======= Release Summary --------------- | Release Date: 2021-01-18 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - Added a ``--export`` option to the ``ansible-test coverage combine`` command to facilitate multi-stage aggregation of coverage in CI pipelines. - ansible-test - added a ``--venv-system-site-packages`` option for use with the ``--venv`` option - ansible-test - virtualenv helper scripts now prefer ``venv`` on Python 3 over ``virtualenv`` if the ``ANSIBLE_TEST_PREFER_VENV`` environment variable is set - bigiq_device_info module - add information on BIG-IQ 7.x support Bugfixes -------- - Fix bytestring vs string comparison in module_utils.basic.is_special_selinux_path() so that special-cased filesystems which don't support SELinux context attributes still allow files to be manipulated on them. (https://github.com/ansible/ansible/issues/70244) - Freeform actions did not work with ``ansible.builtin.`` or ``ansible.legacy.`` FQCN (https://github.com/ansible/ansible/pull/72958). - async - Fix Python 3 interpreter parsing from module by comparing with bytes (https://github.com/ansible/ansible/issues/70690) - bigiq_device_info module - fix iteration bug in a _transform_name_attribute method - docker_image - if ``push=true`` is used with ``repository``, and the image does not need to be tagged, still push. This can happen if ``repository`` and ``name`` are equal (https://github.com/ansible-collections/community.docker/issues/52, https://github.com/ansible-collections/community.docker/pull/53). - docker_image - report error when loading a broken archive that contains no image (https://github.com/ansible-collections/community.docker/issues/46, https://github.com/ansible-collections/community.docker/pull/55). - docker_image - report error when the loaded archive does not contain the specified image (https://github.com/ansible-collections/community.docker/issues/41, https://github.com/ansible-collections/community.docker/pull/55). - inventory - pass the vars dictionary to combine_vars instead of an individual key's value (https://github.com/ansible/ansible/issues/72975). - k8s - add support for python-kubernetes v12 and later - backport of support in community.kubernetes - paramiko connection plugin - Ensure we only reset the connection when one has been previously established (https://github.com/ansible/ansible/issues/65812) - systemd - preserve the full unit name when using a templated service and ``systemd`` failed to parse dbus due to a known bug in ``systemd`` (https://github.com/ansible/ansible/pull/72985) - unsafe_proxy - Ensure that data within a tuple is marked as unsafe (https://github.com/ansible/ansible/issues/65722) - user - do the right thing when ``password_lock=True`` and ``password`` are used together (https://github.com/ansible/ansible/issues/72992) v2.9.16 ======= Release Summary --------------- | Release Date: 2020-12-14 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-doc - provide ``has_action`` field in JSON output for modules. That information is currently only available in the text view (https://github.com/ansible/ansible/pull/72359). - ansible-galaxy - find any collection dependencies in the globally configured Galaxy servers and not just the server the parent collection is from. - ansible-test - Added the ``-remote rhel/7.9`` option to run tests on RHEL 7.9 - ansible-test - Fix container hostname/IP discovery for the ``acme`` test plugin. - ansible-test - centos6 end of life - container image updated to point to vault base repository (https://github.com/ansible/distro-test-containers/pull/54) - iptables - reorder comment postition to be at the end (https://github.com/ansible/ansible/issues/71444). - lvol - fix idempotency issue when using lvol with ``%VG`` or ``%PVS`` size options and VG is fully allocated (https://github.com/ansible-collections/community.general/pull/229). Bugfixes -------- - Adjust various hard-coded action names to also include their ``ansible.builtin.`` and ``ansible.legacy.`` prefixed version (https://github.com/ansible/ansible/issues/71817, https://github.com/ansible/ansible/issues/71818, https://github.com/ansible/ansible/pull/71824). - Collection callbacks were ignoring options and rules for stdout and adhoc cases. - Fix virt module to support list_vms with a status of paused (https://github.com/ansible/ansible/issues/72059) - Fixed issue when `netstat` is either missing or doesn't have execution permissions leading to incorrect command being executed. - Try to load action plugin from the same collection as the module (https://github.com/ansible/ansible/pull/66701) - account for bug in Python 2.6 that occurs during interpreter shutdown to avoid stack trace - ansible-test - Correctly detect changes in a GitHub pull request when running on Azure Pipelines. - ansible-test - Skip installing requirements if they are already installed. - ansible-test - add constraint for ``cffi`` to prevent failure on systems with older versions of ``gcc`` (https://foss.heptapod.net/pypy/cffi/-/issues/480) - ansible-test - convert target paths to unicode on Python 2 to avoid ``UnicodeDecodeError`` (https://github.com/ansible/ansible/issues/68398, https://github.com/ansible/ansible/pull/72623). - ansible-test - improve classification of changes to ``.gitignore``, ``COPYING``, ``LICENSE``, ``Makefile``, and all files ending with one of ``.in`, ``.md`, ``.rst``, ``.toml``, ``.txt`` in the collection root directory (https://github.com/ansible/ansible/pull/72353). - ansible-test now uses GNU tar format instead of the Python default when creating payloads for remote systems - azure_rm inventory plugin - update to fetch availability zone information of VM in hostvars. (https://github.com/ansible-collections/azure/issues/161) - dnf - fix filtering to avoid dependncy conflicts (https://github.com/ansible/ansible/issues/72316) - ec2_group - Fixes error handling during tagging failures (https://github.com/ansible-collections/amazon.aws/issues/210). - ensure 'local' connection always has the correct default user for actions to consume. - network_cli - Update paramiko play_context when network_cli's play context is updated so that ssh parameters can be updated as well. - network_cli connection plugin - Perform privilege escalation before setting terminal. - pause - Fix indefinite hang when using a pause task on a background process (https://github.com/ansible/ansible/issues/32142) - remove redundant remote_user setting in play_context for local as plugin already does it, also removes fork/thread issue from use of pwd library. - set_mode_if_different - handle symlink if it is inside a directory with sticky bit set (https://github.com/ansible/ansible/pull/45198) - systemd - account for templated unit files using ``@`` when searching for the unit file (https://github.com/ansible/ansible/pull/72347#issuecomment-730626228) - systemd - follow up fix to https://github.com/ansible/ansible/issues/72338 to use ``list-unit-files`` rather than ``list-units`` in order to show all units files on the system. - systemd - work around bug with ``systemd`` 245 and 5.8 kernel that does not correctly report service state (https://github.com/ansible/ansible/issues/71528) - wait_for - catch and ignore errors when getting active connections with psutil (https://github.com/ansible/ansible/issues/72322) v2.9.15 ======= Release Summary --------------- | Release Date: 2020-11-02 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - Add a ``--docker-network`` option to choose the network for running containers when using the ``--docker`` option. - ansible-test - Collections can now specify pip constraints for unit and integration test requirements using ``tests/unit/constraints.txt`` and ``tests/integration/constraints.txt`` respectively. - dnf - now shows specific package changes (installations/removals) under ``results`` in check_mode. (https://github.com/ansible/ansible/issues/66132) - module_defaults - add new module s3_metrics_configuration from community.aws to aws module_defaults group (https://github.com/ansible/ansible/pull/72145). - vmware_guest_custom_attributes - Fixed issue when trying to set a VM custom attribute when there are custom attributes with the same name for other object types (https://github.com/ansible-collections/community.vmware/issues/412). Breaking Changes / Porting Guide -------------------------------- - ansible-galaxy login command has been removed (see https://github.com/ansible/ansible/issues/71560) Bugfixes -------- - Restore the ability for changed_when/failed_when to function with group_by (#70844). - ansible-test - Always connect additional Docker containers to the network used by the current container (if any). - ansible-test - Always map ``/var/run/docker.sock`` into test containers created by the ``--docker`` option if the docker host is not ``localhost``. - ansible-test - Attempt to detect the Docker hostname instead of assuming ``localhost``. - ansible-test - Correctly detect running in a Docker container on Azure Pipelines. - ansible-test - Prefer container IP at ``.NetworkSettings.Networks.{NetworkName}.IPAddress`` over ``.NetworkSettings.IPAddress``. - ansible-test - The ``cs`` and ``openshift`` test plugins now search for containers on the current network instead of assuming the ``bridge`` network. - ansible-test - Using the ``--remote`` option on Azure Pipelines now works from a job running in a container. - ansible-test - disable ansible-doc sanity test for vars plugins in collections, which are not supported by Ansible 2.9 (https://github.com/ansible/ansible/pull/72336). - async_wrapper - Fix race condition when ``~/.ansible_async`` folder tries to be created by multiple async tasks at the same time - https://github.com/ansible/ansible/issues/59306 - dnf - it is now possible to specify both ``security: true`` and ``bugfix: true`` to install updates of both types. Previously, only security would get installed if both were true. (https://github.com/ansible/ansible/issues/70854) - facts - fix distribution fact for SLES4SAP (https://github.com/ansible/ansible/pull/71559). - kubectl - follow up fix in _build_exec_cmd API (https://github.com/ansible/ansible/issues/72171). - nmcli - typecast parameters to string as required (https://github.com/ansible/ansible/issues/59095). - ovirt_disk - don't move disk when already in storage_domain (https://github.com/oVirt/ovirt-ansible-collection/pull/135). - postgresql_pg_hba - fix a crash when a new rule with an 'options' field replaces a rule without or vice versa (https://github.com/ansible-collections/community.general/issues/1108). - postgresql_privs - fix the module mistakes a procedure for a function (https://github.com/ansible-collections/community.general/issues/994) - powershell - remove getting the PowerShell version from the env var ``POWERSHELL_VERSION``. This feature never worked properly and can cause conflicts with other libraries that use this var - user - AnsibleModule.run_command returns a tuple of return code, stdout and stderr. The module main function of the user module expects user.create_user to return a tuple of return code, stdout and stderr. Fix the locations where stdout and stderr got reversed. - user - Local users with an expiry date cannot be created as the ``luseradd`` / ``lusermod`` commands do not support the ``-e`` option. Set the expiry time in this case via ``lchage`` after the user was created / modified. (https://github.com/ansible/ansible/issues/71942) - zfs - fixed ``invalid character '@' in pool name"`` error when working with snapshots on a root zvol (https://github.com/ansible-collections/community.general/issues/932). v2.9.14 ======= Release Summary --------------- | Release Date: 2020-10-05 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - Added CI provider support for Azure Pipelines. - ansible-test - Added support for Ansible Core CI request signing for Shippable. - ansible-test - Allow custom ``--remote-stage`` options for development and testing. - ansible-test - Fix ``ansible-test coverage`` reporting sub-commands (``report``, ``html``, ``xml``) on Python 2.6. - ansible-test - Refactored CI related logic into a basic provider abstraction. - ansible-test - Remove the discontinued ``us-east-2`` choice from the ``--remote-aws-region`` option. - ansible-test - Request remote resources by provider name for all provider types. - ansible-test - Show a warning when the obsolete ``--remote-aws-region`` option is used. - ansible-test - Support custom remote endpoints with the ``--remote-endpoint`` option. - ansible-test - Update built-in service endpoints for the ``--remote`` option. - ansible-test - Use new endpoint for Parallels based instances with the ``--remote`` option. - vmware_guest - Support HW version 15 / vSphere 6.7U2 (https://github.com/ansible-collections/vmware/pull/99). Security Fixes -------------- - kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (https://github.com/ansible-collections/community.kubernetes/issues/65) (CVE-2020-1753). Bugfixes -------- - Handle write_files option in cgroup_perf_recap callback plugin (https://github.com/ansible/ansible/issues/64936). - Prevent templating unused variables for {% include %} (https://github.com/ansible/ansible/issues/68699) - Provide more information in AnsibleUndefinedVariable (https://github.com/ansible/ansible/issues/55152) - ansible-doc - do not crash if plugin name cannot be found (https://github.com/ansible/ansible/pull/71965). - ansible-doc - properly show plugin name when ``name:`` is used instead of ``<plugin_type>:`` (https://github.com/ansible/ansible/pull/71965). - ansible-test - Change classification using ``--changed`` now consistently handles common configuration files for supported CI providers. - ansible-test - The ``resource_prefix`` variable provided to tests running on Azure Pipelines is now converted to lowercase to match other CI providers. - ansible-test - for local change detection, allow to specify branch to compare to with ``--base-branch`` for all types of tests (https://github.com/ansible/ansible/pull/69508). - docker_login - now correctly reports changed status on logout for Docker versions released after June 2020. - docker_login - now obeys check_mode for logout - interfaces_file - escape regular expression characters in old value (https://github.com/ansible-collections/community.general/issues/777). - ovirt_disk - fix upload when direct upload fails (https://github.com/oVirt/ovirt-ansible-collection/pull/120). - postgres_user - remove false positive ``no_log`` warning for ``no_password_changes`` option (https://github.com/ansible/ansible/issues/68106). - psrp - Fix hang when copying an empty file to the remote target - runas - create a new token when running as ``SYSTEM`` to ensure it has the full privileges assigned to that account v2.9.13 ======= Release Summary --------------- | Release Date: 2020-08-31 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Updated network integration auth timeout to 90 secs. - ansible-test - Remove ``pytest < 6.0.0`` constraint for managed installations on Python 3.x now that pytest 6 is supported. - known_hosts - fix reference to non-existent parameter in example (https://github.com/ansible/ansible/issues/71417) Security Fixes -------------- - The fix for CVE-2020-1736 has been reverted. Users are encouraged to specify a ``mode`` parameter in their file-based tasks when the files being manipulated contain sensitive data. - dnf - Previously, regardless of the ``disable_gpg_check`` option, packages were not GPG validated. They are now. (CVE-2020-14365) Bugfixes -------- - Confirmed commit fails with TypeError in IOS XR netconf plugin (https://github.com/ansible-collections/cisco.iosxr/issues/74) - Fix an exit code for a non-failing playbook (https://github.com/ansible/ansible/issues/71306) - Fix execution of the meta tasks 'clear_facts', 'clear_host_errors', 'end_play', 'end_host', and 'reset_connection' when the CLI flag '--flush-cache' is provided. - Fix statistics reporting when rescue block contains another block (issue https://github.com/ansible/ansible/issues/61253). - Fixed Ansible reporting validate not supported by netconf server when enabled in netconf - (https://github.com/ansible-collections/ansible.netcommon/issues/119). - TOML inventory - Ensure we register dump functions for ``AnsibleUnsafe`` to support dumping unsafe values. Note that the TOML format has no functionality to mark that the data is unsafe for re-consumption. (https://github.com/ansible/ansible/issues/71307) - ansible-test units - fixed collection location code to work under pytest >= 6.0.0 - aws_acm_info - fix `KeyError` failure when retrieving keys with a `Failed` status (https://github.com/ansible-collections/community.aws/issues/198) - cron - cron file should not be empty after adding var (https://github.com/ansible/ansible/pull/71207) - mongodb_replicaset - fixes authentication to determine replicaset name (https://github.com/ansible-collections/community.mongodb/issues/136). - powershell - fix escaping of strings that broken modules like fetch when dealing with special chars - https://github.com/ansible/ansible/issues/62781 - powershell - fix the CLIXML parser when it contains nested CLIXML objects - https://github.com/ansible/ansible/issues/69550 - psrp - Use native PSRP mechanism when copying files to support custom endpoints - setup - Add a null check for ``Win32_Bios.ReleaseData`` to avoid a failure when that value is not set - https://github.com/ansible/ansible/issues/69736 - strftime filter - Input epoch is allowed to be a float (https://github.com/ansible/ansible/issues/71257) - systemd - fixed chroot usage on new versions of systemd, that broke because of upstream changes in systemctl output - systemd - made the systemd module work correctly when the SYSTEMD_OFFLINE environment variable is set - zabbix_host - fixed inventory_mode key error, which occurs with Zabbix 4.4.1 or more (https://github.com/ansible/ansible/issues/65304). - zabbix_proxy - fixed support for Zabbix 5.0 v2.9.12 ======= Release Summary --------------- | Release Date: 2020-08-10 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - ansible-test - the ACME test container was updated, it now supports external account creation and has a basic OCSP responder (https://github.com/ansible/ansible/pull/71097, https://github.com/ansible/acme-test-container/releases/tag/2.0.0). - debconf - add a note about no_log=True since module might expose sensitive information to logs (https://github.com/ansible/ansible/issues/32386). Security Fixes -------------- - **security issue** - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332) - **security issue** atomic_move - change default permissions when creating temporary files so they are not world readable (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736) - Fix warning for default permission change when no mode is specified. Follow up to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736) - Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330). - reset logging level to INFO due to CVE-2019-14846. Bugfixes -------- - Address compat with rpmfluff-0.6 for integration tests - Ensure password passed in by -k is used on delegated hosts that do not have ansible_password set - Template connection variables before using them (https://github.com/ansible/ansible/issues/70598). - Terminal plugins - add "\e[m" to the list of ANSI sequences stripped from device output - add magic/connection vars updates from delegated host info. - ansible-galaxy collection install - fix fallback mechanism if the AH server did not have the collection requested - https://github.com/ansible/ansible/issues/70940 - ansible-test - Add ``pytest < 6.0.0`` constraint for managed installations on Python 3.x to avoid issues with relative imports. - ansible-test - Change detection now properly resolves relative imports instead of treating them as absolute imports. - api - time.clock is removed in Python 3.8, add backward compatible code (https://github.com/ansible/ansible/issues/70649). - avoid clobbering existing facts inside loop when task also returns ansible_facts. - basic - use PollSelector implementation when DefaultSelector fails (https://github.com/ansible/ansible/issues/70238). - cron - encode and decode crontab files in UTF-8 explicitly to allow non-ascii chars in cron filepath and job (https://github.com/ansible/ansible/issues/69492) - ensure delegated vars can resolve hostvars object and access vars from hostvars[inventory_hostname]. - facts - account for Slackware OS with ``+`` in the name (https://github.com/ansible/ansible/issues/38760) - facts - fix incorrect UTC timestamp in ``iso8601_micro`` and ``iso8601`` - fix issue with inventory_hostname and delegated host vars mixing on connection settings. - hashi_vault - Handle equal sign in key=value (https://github.com/ansible/ansible/issues/55658). - ipa_hostgroup - fix an issue with load-balanced ipa and cookie handling with Python 3 - (https://github.com/ansible/ansible/issues/71110). - lineinfile - fix not subscriptable error in exception handling around file creation - linux network facts - get the correct value for broadcast address (https://github.com/ansible/ansible/issues/64384) - mysql_user - fix overriding password to the same (https://github.com/ansible-collections/community.general/issues/543). - net_put - Fixed UnboundLocalError when there is no change This is a backport from U(https://github.com/ansible-collections/ansible.netcommon/pull/6) - nxos_user - do not fail when a custom role is used (https://github.com/ansible-collections/cisco.nxos/pull/130) - ovirt_vm - fix cd_iso search - playbooks - detect and propagate failures in ``always`` blocks after ``rescue`` (https://github.com/ansible/ansible/issues/70000) - profile_tasks - typecast result before slicing it (https://github.com/ansible/ansible/issues/59059). - reboot - Add support for the runit init system, used on Void Linux, that does not support the normal Linux syntax. - redfish_info, redfish_config, redfish_command - Fix Redfish response payload decode on Python 3.5 (https://github.com/ansible/ansible/issues/65889) - shell - fix quoting of mkdir command in creation of remote_tmp in order to allow spaces and other special characters (https://github.com/ansible/ansible/issues/69577). - templating - fix error message for ``x in y`` when y is undefined (https://github.com/ansible/ansible/issues/70984) - unarchive - check ``fut_gid`` against ``run_gid`` in addition to supplemental groups (https://github.com/ansible/ansible/issues/49284) - user - don't create home directory and missing parents when create_home == false (https://github.com/ansible/ansible/pull/70600). - yum - fix yum list crashing if repoquery (used internally) prints errors in stdout (https://github.com/ansible/ansible/issues/56800) v2.9.11 ======= Release Summary --------------- | Release Date: 2020-07-20 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - k8s - update openshift requirements in documentation - pipe lookup - update docs for Popen with shell=True usages (https://github.com/ansible/ansible/issues/70159). Bugfixes -------- - Allow TypeErrors on Undefined variables in filters to be handled or deferred when processing for loops. - Fix ``delegate_facts: true`` when ``ansible_python_interpreter`` is not set. (https://github.com/ansible/ansible/issues/70168) - Support check mode in NXOS BGP modules (https://github.com/ansible/ansible/pull/57360). - TaskExecutor - Handle unexpected errors as failed while post validating loops (https://github.com/ansible/ansible/issues/70050). - The `ansible_become` value was not being treated as a boolean value when set in an INI format inventory file (fixes bug https://github.com/ansible/ansible/issues/70476). - To fix ios_l2_interfaces facts parsing issue (https://github.com/ansible-collections/cisco.ios/pull/59) - To fix ios_user and ios_command test case failure fix (https://github.com/ansible-collections/cisco.ios/pull/82) - Vault - Allow single vault encrypted values to be used directly as module parameters. (https://github.com/ansible/ansible/issues/68275) - add constraints file for ``anisble_runner`` test since an update to ``psutil`` is now causing test failures - ansible-galaxy - Instead of assuming the first defined server is galaxy, filter based on the servers that support the v1 API, and return the first of those (https://github.com/ansible/ansible/issues/65440) - ansible-test no longer tracebacks during change analysis due to processing an empty python file - ansible-test now correctly recognizes imports in collections when using the ``--changed`` option. - ansible-test now ignores empty ``*.py`` files when analyzing module_utils imports for change detection - assemble - fix decrypt argument in the module (https://github.com/ansible/ansible/issues/65450). - docker_container - various error fixes in string handling for Python 2 to avoid crashes when non-ASCII characters are used in strings (https://github.com/ansible-collections/community.general/issues/640). - eos_eapi - enable eapi by default - group_by now should correctly refect changed status. - json callback - Fix host result to task references in the resultant JSON output for non-lockstep strategy plugins such as free (https://github.com/ansible/ansible/issues/65931) - nmcli - Add compatibility for new networkmanager library (https://github.com/ansible/ansible/pull/65726). - puppet - fix command line construction for check mode and ``manifest:`` (https://github.com/ansible/ansible/issues/60576). - selective callback - mark task failed correctly (https://github.com/ansible/ansible/issues/63767). - windows async - use full path when calling PowerShell to reduce reliance on environment vars being correct - https://github.com/ansible/ansible/issues/70655 - winrm - preserve winrm forensic data on put_file failures v2.9.10 ======= Release Summary --------------- | Release Date: 2020-06-18 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Add new magic variable ``ansible_collection`` that contains the collection name - Add new magic variable ``ansible_role_name`` that contains the FQCN of the role - Added missing platform guide for FRR (https://github.com/ansible/ansible/pull/69773). - Fix a typo in remove_signature flag in podman_image module (https://github.com/ansible/ansible/issues/67965). - Remove the deprecation message for the ``TRANSFORM_INVALID_GROUP_CHARS`` setting. (https://github.com/ansible/ansible/issues/61889) - The results queue and counter for results are now split for standard / handler results. This allows the governing strategy to be truly independent from the handler strategy, which basically follows the linear methodology. - Updates ``ansible_role_names``, ``ansible_play_role_names``, and ``ansible_dependent_role_names`` to include the FQCN - ``Display.deprecated()``, ``AnsibleModule.deprecate()`` and ``Ansible.Basic.Deprecate()`` now also accept the deprecation-by-date parameters and collection name parameters from Ansible 2.10, so plugins and modules in collections that conform to Ansible 2.10 will run with newer versions of Ansible 2.9. - ovirt: update operating system options - ovirt_storage_vm_info: fix example - ovirt_vm: fix quotas example Deprecated Features ------------------- - Using the DefaultCallback without the correspodning doc_fragment or copying the documentation. Bugfixes -------- - Allow tasks to notify a fqcn handler name (https://github.com/ansible/ansible/issues/68181) - Avoid bare select() for running commands to avoid too large file descriptor numbers failing tasks - Avoid running subfunctions that are passed to show_vars function when it will be a noop. - Create an ``import_module`` compat util, for use across the codebase, to allow collection loading to work properly on Python26 - Do not keep empty blocks in PlayIterator after skipping tasks with tags. - Ensure that ``--version`` works with non-ascii ansible project paths (https://github.com/ansible/ansible/issues/66617) - Fix content encoding/decoding and do not fail when key based auth is used (https://github.com/ansible-collections/cisco.nxos/pull/59/). - Fix gather_facts not working for network platforms when network_os is in FQCN format (https://github.com/ansible/ansible/pull/69601). - Fix issue with nxos_l2_interfaces where replaced doesn't remove superfluous config (https://github.com/ansible-collections/cisco.nxos/pull/55) - Fix nxos_facts with VDC having no interfaces (https://github.com/ansible-collections/cisco.nxos/pull/68). - Fix nxos_interfaces enabled not working properly because of broken system default dict generation (https://github.com/ansible-collections/cisco.nxos/pull/56). - Fix the issue when OS secgroup rule couldn't be imported from a different tenant https://github.com/ansible/ansible/issues/69673 - Fixed the equality check for IncludedFiles to ensure they are not accidently merged when process_include_results runs. - Prevent a race condition when running handlers using a combination of the free strategy and include_role. - Properly handle unicode in ``safe_eval``. (https://github.com/ansible/ansible/issues/66943) - Remove unused and invalid import from FRR cliconf plugin (https://github.com/ansible/ansible/pull/67790). - RoleRequirement - include stderr in the error message if a scm command fails (https://github.com/ansible/ansible/issues/41336) - To fix ios_l3_interfaces Loopback issue (https://github.com/ansible-collections/cisco.ios/pull/45) - To fix ios_vlans vtp version 2 issue (https://github.com/ansible-collections/cisco.ios/pull/38) - Update NX-OS cliconf to accomodate MDS (https://github.com/ansible-collections/cisco.nxos/pull/78). - Update terminal plugin to check feature privilege only when escalation is needed (https://github.com/ansible-collections/cisco.nxos/pull/61). - Validate include args in handlers. - added 'unimplemented' prefix to file based caching - added new option for default callback to compat variable to avoid old 3rd party plugins from erroring out. - ansible-doc - Allow and give precedence to `removed_at_date` for deprecated modules. - ansible-galaxy - Fix ``multipart/form-data`` body to include extra CRLF (https://github.com/ansible/ansible/pull/67942) - ansible-galaxy - Preserve symlinks when building and installing a collection - ansible-galaxy collection build - Command did not ignore .git files, which had the potential to cause troubles later on (for example, when importing into Automation Hub) (https://github.com/ansible/ansible/issues/68731). - ansible-test - Disabled the ``duplicate-code`` and ``cyclic-import`` checks for the ``pylint`` sanity test due to inconsistent results. - ansible-test - The shebang sanity test now correctly identifies modules in subdirectories in collections. - ansible-test change detection - Run only sanity tests on ``docs/`` and ``changelogs/`` in collections, to avoid triggering full CI runs of integration and unit tests when files in these directories change. - ansible-test is now able to find its ``egg-info`` directory when it contains the Ansible version number - ansible-test no longer optimizes setting ``PATH`` by prepending the directory containing the selected Python interpreter when it is named ``python``. This avoids unintentionally making other programs available on ``PATH``, including an already installed version of Ansible. - ansible-test pylint sanity test - do not crash when ``version`` specified to ``AnsibleModule.deprecate()`` or ``Display.deprecated()`` contains string components, f.ex. tagged version numbers for Ansible 2.10. - archive - fix issue with empty file exclusion from archive - avoid fatal traceback when a bad FQCN for a callback is supplied in the whitelist (#69401). - ce - Modify the way of parsing NETCONF XML message in ce.py (https://github.com/ansible/ansible/pull/69571 https://github.com/ansible-collections/community.network/pull/39). - collection loader - fix file/module/class confusion issues on case-insensitive filesystems - copy - Fixed copy module not working in case that remote_src is enabled and dest ends in a / (https://github.com/ansible/ansible/pull/47238) - discovery will NOT update incorrect host anymore when in delegate_to task. - dnf - enable logging using setup_loggers() API in dnf-4.2.17-6 or later - docker_machine - fallback to ip subcommand output if IPAddress is missing (https://github.com/ansible-collections/community.general/issues/412). - ensure we pass on interpreter discovery values to delegated host. - file - return ``'state': 'absent'`` when a file does not exist (https://github.com/ansible/ansible/issues/66171) - fixed issues when using net_get & net_put before the persistent connection has been started - interpreter discovery will now use correct vars (from delegated host) when in delegate_to task. - k8s - Handle set object retrieved from lookup plugin. - lineinfile - use ``module.tmpdir`` to allow configuration of the remote temp directory (https://github.com/ansible/ansible/issues/68218) - lxd_container - enables to set keys not present in existing config - ovirt_disk fix activate (https://github.com/oVirt/ovirt-ansible-collection/pull/61) - ovirt_disk: fix upload/download of images for ovirt 4.4 - ovirt_disk: force wait when uploading disk - ovirt_vm: fix cd_iso search by name - profile_tasks - typecast results before using it (https://github.com/ansible/ansible/issues/69563). - sesu - make use of the prompt specified in the code - syslog_json callback - fix plugin exception when running (https://github.com/ansible-collections/community.general/issues/407). - yum/dnf - check type of elements in a name - zfs_delegate_admin - add missing choices diff/hold/release to the permissions parameter (https://github.com/ansible-collections/community.general/pull/278) v2.9.9 ====== Release Summary --------------- | Release Date: 2020-05-12 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Bugfixes -------- - Fix an issue with the ``fileglob`` plugin where passing a subdirectory of non-existent directory would cause it to fail - https://github.com/ansible/ansible/issues/69450 v2.9.8 ====== Release Summary --------------- | Release Date: 2020-05-11 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Add test for reboot & wait_for_connection on EOS & IOS (https://github.com/ansible/ansible/pull/63014) - Fixed 'intersect' filter spelling in constructed inventory plugin example. - Move cli prompt check logic from action to cliconf plugin (https://github.com/ansible/ansible/pull/63945) - Point inventory script location to their respective version rather than devel version in documentation. - ansible-test - Now includes testing support for RHEL 8.2 - ansible-test - Remove obsolete support for provisioning remote vCenter instances. The supporting services are no longer available. Bugfixes -------- - Collections - Allow a collection role to call a stand alone role, without needing to explicitly add ``ansible.legacy`` to the collection search order within the collection role. (https://github.com/ansible/ansible/issues/69101) - Fix cli context check for network_cli connection (https://github.com/ansible/ansible/pull/64697) - Revert 5f6427b1fc7449a5c42212013d3f628665701c3d as it breaks netconf connection - Role Installation - Ensure that a role containing files with non-ascii characters can be installed (https://github.com/ansible/ansible/issues/69133) - Update ActionBase._low_level_execute_command to honor executable (https://github.com/ansible/ansible/issues/68054) - collections - Handle errors better for filters and tests in collections, where a non-existent collection is specified, or importing the plugin results in an exception (https://github.com/ansible/ansible/issues/66721) - deal with cases in which just a file is pased and not a path with directories, now fileglob correctly searches in 'files/' subdirs. - dnf - Unified error messages when trying to install a nonexistent package with newer dnf (4.2.18) vs older dnf (4.2.9) - dnf - Unified error messages when trying to remove a wildcard name that is not currently installed, with newer dnf (4.2.18) vs older dnf (4.2.9) - hostname - make module work on Manjaro Linux (https://github.com/ansible/ansible/issues/61382) - mysql_user - fix the error No database selected (https://github.com/ansible/ansible/issues/68070). - ovirt_disk: add warning when uploading wrong format - ovirt_disk: upload image auto detect size - ovirt_network: allow to remove vlan_tag - pip - The virtualenv_command option can now include arguments without requiring the full path to the binary. (https://github.com/ansible/ansible/issues/52275) - pip - check_mode with ``state: present`` now returns the correct state for pre-release versioned packages - postgresql_set - fix converting value to uppercase (https://github.com/ansible/ansible/issues/67377). - redfish_config - fix support for boolean bios attrs (https://github.com/ansible/ansible/pull/68251) - service_facts - Now correctly parses systemd list-unit-files for systemd >=245 - sysvinit - Add missing parameter ``module`` in call to ``daemonize()``. - the default parsing will now show existing JSON errors and not just YAML (last attempted), also we avoid YAML parsing when we know we only want JSON issue - win_psmodule - Fix TLS 1.2 compatibility with PSGallery. - win_psrepository - Fix TLS 1.2 compatibility with PSGallery. - win_psrepository - Fix ``Ignore`` error when trying to retrieve the list of registered repositories - zabbix_template - no longer fails with KeyError when there are no macros present in existing template (see https://github.com/ansible-collections/community.zabbix/issues/19) v2.9.7 ====== Release Summary --------------- | Release Date: 2020-04-16 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - 'Edit on GitHub' link for plugin, cli documentation fixed to navigate to correct plugin, cli source. - Handle get_tags_for_object API correctly in vmware_rest_client. - Remove redundant encoding in json.load call in ipa module_utils (https://github.com/ansible/ansible/issues/66592). - ansible-test - Upgrade OpenSUSE containers to use Leap 15.1. - ansible-test now supports testing against RHEL 7.8 when using the ``--remote`` option. - vmware_cluster - Document alternatives for deprecated parameters Removed Features (previously deprecated) ---------------------------------------- - ldap_attr, ldap_entry - The ``params`` option has been removed in Ansible-2.10 as it circumvents Ansible's option handling. Setting ``bind_pw`` with the ``params`` option was disallowed in Ansible-2.7, 2.8, and 2.9 as it was insecure. For information about this policy, see the discussion at: https://meetbot.fedoraproject.org/ansible-meeting/2017-09-28/ansible_dev_meeting.2017-09-28-15.00.log.html This fixes CVE-2020-1746 Security Fixes -------------- - **security issue** - The ``subversion`` module provided the password via the svn command line option ``--password`` and can be retrieved from the host's /proc/<pid>/cmdline file. Update the module to use the secure ``--password-from-stdin`` option instead, and add a warning in the module and in the documentation if svn version is too old to support it. (CVE-2020-1739) - **security issue** win_unzip - normalize paths in archive to ensure extracted files do not escape from the target directory (CVE-2020-1737) - **security_issue** - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740) - Ensure we get an error when creating a remote tmp if it already exists. CVE-2020-1733 - In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735. - ansible-galaxy - Error when install finds a tar with a file that will be extracted outside the collection install directory - CVE-2020-10691 Bugfixes -------- - Alter task_executor's start_connection to support newer modules from collections which expect to send task UUID. - Ansible.ModuleUtils.WebRequest - actually set no proxy when ``use_proxy: no`` is set on a Windows module - https://github.com/ansible/ansible/issues/68528 - Ensure DataLoader temp files are removed at appropriate times and that we observe the LOCAL_TMP setting. - Ensure we don't allow ansible_facts subkey of ansible_facts to override top level, also fix 'deprefixing' to prevent key transforms. - Fact Delegation - Add ability to indicate which facts must always be delegated. Primarily for ``discovered_interpreter_python`` right now, but extensible later. (https://github.com/ansible/ansible/issues/61002) - Fix nxos_lacp replace operation (https://github.com/ansible/ansible/pull/64074). - Handle equal sign in password while using passwordstore lookup plugin. - In vmware_guest_network module use appropriate network while creating or reconfiguring (https://github.com/ansible/ansible/issues/65968). - Log additional messages from persistent connection modules that may be missed if the module fails or returns early. - `vmware_content_deploy_template`'s `cluster` argument no longer fails with an error message about resource pools. - ansible command now correctly sends v2_playbook_on_start to callbacks - ansible-galaxy collection - Preserve executable bit on build and preserve mode on install from what tar member is set to - https://github.com/ansible/ansible/issues/68415 - dense callback - fix plugin access to its configuration variables and remove a warning message (https://github.com/ansible/ansible/issues/64628). - display - Improve method of removing extra new line after warnings so it does not break Tower/Runner (https://github.com/ansible/ansible/pull/68517) - docker connection plugin - do not prefix remote path if running on Windows containers. - for those running uids for invalid users (containers), fallback to uid=<uid> when logging fixes #68007 - get_url pass incorrect If-Modified-Since header (https://github.com/ansible/ansible/issues/67417) - mysql_user - Fix idempotence when long grant lists are used (https://github.com/ansible/ansible/issues/68044) - os_user_role - Fix os_user_role issue to grant a role in a domain. - ovirt_storage_domain: fix update_check for warning_low_space - purefa_snmp - Fix error when deleting a manager and when creating a v2c manager (https://github.com/ansible/ansible/pull/68180) - rabbitmq_policy - Fix version parsing for RabbitMQ 3.8. - routeros_facts - Prevent crash of module when ``ipv6`` package is not installed - setup.ps1 - Fix ``ansible_fqdn`` using the wrong values to build the actual DNS FQDN. v2.9.6 ====== Release Summary --------------- | Release Date: 2020-03-04 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Fix URL in postgresql_table documentation. - Refator net_base action plugin to support collection with network platform agnostic modules. - docker connection plugin - run Powershell modules on Windows containers. - ovirt_disk: correct description of storage_domain, there is no default value of the attribute - ovirt_vm: remove deprecated warning of Linux boot parameters Bugfixes -------- - Bump the minimum openstacksdk version to 0.18.0 when os_network uses the port_security_enabled or mtu arguments. - Fix Python3 compatibility for vmware_export_ovf module. - Fix a bug when a host was not removed from a play after ``meta: end_host`` and as a result the host was still present in ``ansible_play_hosts`` and ``ansible_play_batch`` variables. - Fix collection install error that happened if a dependency specified dependencies to be null (https://github.com/ansible/ansible/issues/67574). - Fix examples in eos_vlans (https://github.com/ansible/ansible/pull/66131). - Templating - Ansible was caching results of Jinja2 expressions in some cases where these expressions could have dynamic results, like password generation (https://github.com/ansible/ansible/issues/34144). - Update the warning message for ``CONDITIONAL_BARE_VARS`` to list the original conditional not the value of the original conditional (https://github.com/ansible/ansible/issues/67735) - Use hostnamectl command to get current hostname for host while using systemd strategy (https://github.com/ansible/ansible/issues/59438). - also strip spaces around config values in pathlist as we do in list types - ansible-galaxy - Display proper error when invalid token is used for Galaxy servers - ansible-galaxy - Fix issue when compared installed dependencies with a collection having no ``MANIFEST.json`` or an empty version string in the json - ansible-galaxy - Fix up pagination searcher for collection versions on Automation Hub - ansible-galaxy - Remove uneeded verbose messages when accessing local token file - ansible-galaxy - Send SHA256 hashes when publishing a collection - ansible-galaxy - properly list roles when the role name also happens to be in the role path (https://github.com/ansible/ansible/issues/67365) - ansible-test validate-modules - Fix arg spec collector for PowerShell to find utils in both a collection and base. - azure_rm_resourcegroup_facts - adds the ansible_facts as a sub map to fix the KeyError (https://github.com/ansible/ansible/issues/66727). - docker_login - make sure that ``~/.docker/config.json`` is created with permissions ``0600``. - ec2_asg - regression bug, when an existing autoscaling group was updated and but the launch config of existing instances was deleted. - fix the bug where IOS vlans module throws traceback. (ref: https://github.com/ansible/ansible/pull/64633) - fixes the eos_vlans repalced state behavior to configure the 'name' parameter(https://github.com/ansible/ansible/pull/67318) - get_certificate - Fix cryptography backend when pyopenssl is unavailable (https://github.com/ansible/ansible/issues/67900) - make ``no_log=False`` on a module option silence the ``no_log`` warning (https://github.com/ansible/ansible/issues/49465 https://github.com/ansible/ansible/issues/64656) - mysql_db - fix bug in the ``db_import`` function introduced by https://github.com/ansible/ansible/pull/56721 (https://github.com/ansible/ansible/issues/65351). - nxos_vlans - Allow nxos_l2_interfaces to append the allowed vlans list - openssl_* modules - prevent crash on fingerprint determination in FIPS mode (https://github.com/ansible/ansible/issues/67213). - ovirt_vm: correct keyError for iSCSI parameters - ovirt_vm: correct numa nodes and update documentation - plugins - Allow ensure_type to decrypt the value for string types (and implicit string types) when value is an inline vault. - proxysql - fixed mysql dictcursor - route53 - improve handling of octal encoded characters - synchronize - allow data to be passed between two managed nodes when using the docker connection plugin (https://github.com/ansible/ansible/pull/65698) - unixy - fixed duplicate log entries on loops - vmware_host_firewall_manager - Fixed creating IP specific firewall rules with Python 2 (https://github.com/ansible/ansible/issues/67303) - vultr - Fixed the issue retry max delay param was ignored. - win_credential - Fix issue that errors when trying to add a ``name`` with wildcards. - win_unzip - Fix support for paths with square brackets not being detected properly v2.9.5 ====== Release Summary --------------- | Release Date: 2020-02-13 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - add one note to help ansible user to understand the requirements to (https://github.com/ansible/ansible/pull/65969) - ovirt_disk: remove default value because the parameter is required when disk is attached to vm - ovirt_vm add comunentaion about how to import ova - powershell (shell plugin) - Fix `join_path` to support UNC paths (https://github.com/ansible/ansible/issues/66341) Deprecated Features ------------------- - aws_az_info (aws_az_facts) - Fixed deprecation warning so that it triggers when run as aws_az_facts. Bumped removal version to 2.14 Bugfixes -------- - AnsibleModule.run_command() - set ``close_fds`` to ``False`` on Python 2 if ``pass_fds`` are passed to ``run_command()``. Since ``subprocess.Popen()`` on Python 2 does not have the ``pass_fds`` option, there is no way to exclude a specific list of file descriptors from being closed. - Bump the minimum openstacksdk version to 0.29.0 when os_network uses the dns_domain argument - Fix multiple issues with nxos_interfaces states (https://github.com/ansible/ansible/pull/63960/). - Module arguments in suboptions which were marked as deprecated with ``removed_in_version`` did not result in a warning. - Redact GitLab Project variables which might include sensetive information such as password, api_keys and other project related details. - Working implementation for editing Cisco IOS macros(https://github.com/ansible/ansible/pull/55220) - ansible-test - Use ``virtualenv`` versions before 20 on provisioned macOS instances to remain compatible with an older pip install. - ansible-test now limits Jinja2 installs to version 2.10 and earlier on Python 2.6 - ansible-test windows coverage - Ensure coverage reports are UTF-8 encoded without a BOM - display - remove extra new line after warnings (https://github.com/ansible/ansible/pull/65199) - dnf - Fix idempotence of `state: installed` (https://github.com/ansible/ansible/issues/64963) - docker_container - passing ``test: [NONE]`` now actually disables the image's healthcheck, as documented. - docker_swarm_service - passing ``test: [NONE]`` now actually disables the image's healthcheck, as documented. - file - change ``_diff_peek`` in argument spec to be the correct type, which is ``bool`` (https://github.com/ansible/ansible/issues/59433) - galaxy - Fix an AttributeError on ansible-galaxy install with an empty requirements.yml (https://github.com/ansible/ansible/issues/66725). - group - The group module was not correctly detecting whether a local group is existing or not with local set to yes if the same group exists in a non local group repository e.g. LDAP. (https://github.com/ansible/ansible/issues/58619) - include_vars - fix stack trace when passing ``dirs`` in an ad-hoc command (https://github.com/ansible/ansible/issues/62633) - ios_* - Fix bug where IPV6 was duplicated for replace state (https://github.com/ansible/ansible/pull/66654) - ios_banner - Modified the regular expression check to be non greedy when multiple banners are present. - jenkins_job module: xml config encoding bugfix on python3 - mysql_user - fix support privileges with underscore (https://github.com/ansible/ansible/issues/66974). - mysql_variable - fix the module doesn't support variables name with dot (https://github.com/ansible/ansible/issues/54239). - nxos_facts: Don't throw an error if faninfo is not reported. - nxos_telemetry - Fix fact gathering for sensor-groups (https://github.com/ansible/ansible/pull/66439) - openssl_publickey - fix a module crash caused when pyOpenSSL is not installed (https://github.com/ansible/ansible/issues/67035). - ovirt - add suport for search with space - ovirt_job: add job when job is already existing and is in state finished - ovirt_network: add check to control when creating network - pacman - fix module crash with ``IndexError: list index out of range`` (https://github.com/ansible/ansible/issues/63077) - pamd - Bugfix for attribute error when removing the first or last line - pmrun plugin - The success command string was no longer quoted. This caused unusual use-cases like ``become_flags=su - root -c`` to fail. - podman connection plugin - fix to handle the new default copy pause rootless containers from upstream (https://github.com/ansible/ansible/issues/66263) - pure - fix incorrect user_string setting in module_utils file (https://github.com/ansible/ansible/pull/66914) - redhat_subscription - do not set the default quantity to ``1`` when no quantity is provided (https://github.com/ansible/ansible/issues/66478) - synchronize - fix password authentication on Python 2 (https://github.com/ansible/ansible/issues/56629) - systemd - don't require systemd to be running to enable/disable or mask/unmask units - throttle: the linear strategy didn't always stuck with the throttle limit - user - update module to support silencing ``no_log`` warnings in the future (see: https://github.com/ansible/ansible/pull/64733) - wait_for_connection - with pipelining enabled, interpreter discovery would fail if the first connection attempt was not successful v2.9.4 ====== Release Summary --------------- | Release Date: 2020-01-20 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Bugfixes -------- - yum - fix bug that caused ``enablerepo`` to not be honored when used with disablerepo all wildcard/glob (https://github.com/ansible/ansible/issues/66549) v2.9.3 ====== Release Summary --------------- | Release Date: 2020-01-15 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Fixed typos in various modules regarding argument_spec data types. - dnf - Properly handle module AppStreams that don't define stream (https://github.com/ansible/ansible/issues/63683) - docker_container.py - update a containers restart_policy without restarting the container (https://github.com/ansible/ansible/issues/65993) - docker_stack - Added ``stdout``, ``stderr``, and ``rc`` to return values. - zabbix_* - underlying python module now required in version zabbix-api==0.5.4 (https://github.com/ansible/ansible/pull/65145) Bugfixes -------- - **SECURITY** - CVE-2019-14904 - solaris_zone module accepts zone name and performs actions related to that. However, there is no user input validation done while performing actions. A malicious user could provide a crafted zone name which allows executing commands into the server manipulating the module behaviour. Adding user input validation as per Solaris Zone documentation fixes this issue. - ActionBase - Add new ``cleanup`` method that is explicitly run by the ``TaskExecutor`` to ensure that the shell plugins ``tmpdir`` is always removed. This change means that individual action plugins need not be responsible for removing the temporary directory, which ensures that we don't have code paths that accidentally leave behind the temporary directory. - CVE-2019-14905 - nxos_file_copy module accepts remote_file parameter which is used for destination name and performs actions related to that on the device using the value of remote_file which is of string type However, there is no user input validation done while performing actions. A malicious code could crafts the filename parameter to take advantage by performing an OS command injection. This fix validates the option value if it is legitimate file path or not. - Fix bandwidth calculation in nxos_ospf_vrf for Python 3 (https://github.com/ansible/ansible/pull/66095) - Fix for network_cli become method to be compatible with collections - Fix how the neighbour password was being defaulted (https://github.com/ansible/ansible/pull/65909) - Fix idempotence issue in nxos_lag_interfaces with Python 3 (https://github.com/ansible/ansible/pull/66126) - Fix issue where nxos_l3_interfaces was not rendering 'dhcp' in facts (https://github.com/ansible/ansible/pull/66049) - Fix issue where nxos_user unintentionally creates user with two different roles (https://github.com/ansible/ansible/pull/65962) - Fix issue where purge breaks with empty aggregate (https://github.com/ansible/ansible/pull/66004). - Fix issue with callbacks ``set_options`` method that was not called with collections - Fix multiple issues with how nxos_vlans Resource Module behaves (https://github.com/ansible/ansible/pull/63650) - Fix nxos_hsrp throwing a KeyError for `auth_enc` (https://github.com/ansible/ansible/pull/65796) - Fix nxos_vxlan_vtep_vni rendering duplicate peer-ip commands (https://github.com/ansible/ansible/pull/66088) - Fix ordering of the commands sent in nxos_snmp_community (https://github.com/ansible/ansible/pull/66094). - Fix regular expression to allow dots in username (https://github.com/ansible/ansible/pull/66293) - Fixes in network action plugins load from collections using module prefix (https://github.com/ansible/ansible/issues/65071) - Fixes in network action plugins to work in network connection plugin and modules in collection - Make netconf plugin configurable to set ncclient device handler name in netconf plugin (https://github.com/ansible/ansible/pull/65718) - Netconf modules are sending a bad rpc call for IOS-XR (https://github.com/ansible/ansible/issues/64634) - Use correct datastore in multi-datacenter environment while using vmware_deploy_ovf (https://github.com/ansible/ansible/issues/63920). - When cloning vm from the template it assigned Blank template to it and when rerun playbook it failed. - ansible-galaxy - Expand the ``User-Agent`` to include more information and add it to more calls to Galaxy endpoints. - ansible-galaxy - Treat the ``GALAXY_SERVER_LIST`` config entry that is defined but with no values as an empty list - ansible-test no longer tries to install ``coverage`` 5.0+ since those versions are unsupported - ansible-test no longer tries to install ``setuptools`` 45+ on Python 2.x since those versions are unsupported - ansible-test now ignores warnings when comparing pip versions before and after integration tests run - ansible-test now properly recognizes modules and module_utils in collections when using the ``blacklist`` plugin for the ``pylint`` sanity test - collection_loader - sort Windows modules below other plugin types so the correct builtin plugin inside a role is selected (https://github.com/ansible/ansible/issues/65298) - cyberarkpassword - fix invalid attribute access (https://github.com/ansible/ansible/issues/66268) - display logging - Fix issue where 3rd party modules will print tracebacks when attempting to log information when ``ANSIBLE_LOG_PATH`` is set - https://github.com/ansible/ansible/issues/65249 - display logging - Fixed up the logging formatter to use the proper prefixes for ``u=user`` and ``p=process`` - display logging - Re-added the ``name`` attribute to the log formatter so that the source of the log can be seen - dnf module - Ensure the modules exit_json['msg'] response is always string, not sometimes a tuple. - docker_container - wait for removal of container if docker API returns early (https://github.com/ansible/ansible/issues/65811). - docker_image - fix validation of build options. - docker_image - improve file handling when loading images from disk. - docker_login - fix error handling when ``username`` or ``password`` is not specified when ``state`` is ``present``. - docker_network - fix idempotency for multiple IPAM configs of the same IP version (https://github.com/ansible/ansible/issues/65815). - docker_network - validate IPAM config subnet CIDR notation on module setup and not during idempotence checking. - docker_swarm_service - fix task always reporting as changed when using ``healthcheck.start_period``. - ec2_group - Fix regression with revoking security groups in EC2 Classic Load Balancers. - ec2_group_info, ec2_vol_info, ec2_vol_info - Fixed RuntimeErrors on Python3.8 when iterating filter dictionaries. (https://github.com/ansible/ansible/issues/65024) - elb_application_lb, elb_network_lb - fixed errors during listener rule comparison which caused broken JSON, and which caused some values not being compared correctly. (https://github.com/ansible/ansible/issues/65020) - elb_application_lb, elb_network_lb - idempotence check for rules now compares all values order-independently, instead of just comparing the first value if multiple are specified. - fact gathering - Display warnings and deprecation messages that are created during the fact gathering phase - gitlab_runner - fix idempotency for shared runner - mysql - dont mask ``mysql_connect`` function errors from modules (https://github.com/ansible/ansible/issues/64560). - openssl_certificate - ``provider`` option was documented as required, but it was not checked whether it was provided. It is now only required when ``state`` is ``present``. - ovirt_network: correct external_provider logic - first try to import when not found try to create it - pacman - Fix pacman output parsing on localized environment. (https://github.com/ansible/ansible/issues/65237) - paramiko - catch and handle exception to prevent stack trace when running in FIPS mode - postgresql_privs - fix sorting lists with None elements for python3 (https://github.com/ansible/ansible/issues/65761). - postgresql_schema - use query parameters with cursor object (https://github.com/ansible/ansible/pull/65679). - postgresql_sequence - use query parameters with cursor object (https://github.com/ansible/ansible/pull/65787). - postgresql_set - use query parameters with cursor object (https://github.com/ansible/ansible/pull/65791). - postgresql_slot - use query parameters with cursor object (https://github.com/ansible/ansible/pull/65791). - roles - Ensure that ``allow_duplicates: true`` enables to run single role multiple times (https://github.com/ansible/ansible/issues/64902) - terraform - adding support for absolute paths additionally to the relative path within project_path (https://github.com/ansible/ansible/issues/58578) - terraform module - fixes usage for providers not supporting workspaces - user - fix comparison on macOS so module does not improperly report a change (https://github.com/ansible/ansible/issues/62969) - user - on systems using busybox, honor the ``on_changed`` parameter to prevent unnecessary password changing (https://github.com/ansible/ansible/issues/65711) - win_uri win_get_url - Fix the behaviour of ``follow_redirects: safe`` to actual redirect on ``GET`` and ``HEAD`` requests - https://github.com/ansible/ansible/issues/65556 - yum - performance bugfix, the YumBase object was being instantiated multiple times unnecessarily, which lead to considerable overhead when operating against large sets of packages. New Plugins ----------- Netconf ~~~~~~~ - ce - Use ce netconf plugin to run netconf commands on Huawei Cloudengine platform - default - Use default netconf plugin to run standard netconf commands as per RFC - iosxr - Use iosxr netconf plugin to run netconf commands on Cisco IOSXR platform - junos - Use junos netconf plugin to run netconf commands on Juniper JUNOS platform - sros - Use Nokia SROS netconf plugin to run netconf commands on Nokia SROS platform v2.9.2 ====== Release Summary --------------- | Release Date: 2019-12-04 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Provides additional information about collection namespace name restrictions (https://github.com/ansible/ansible/issues/65151). - docker_swarm_service - Sort lists when checking for changes. Bugfixes -------- - Check NoneType for raw_params before proceeding in include_vars (https://github.com/ansible/ansible/issues/64939). - Fix nxos_facts rendering of keys (https://github.com/ansible/ansible/pull/65167) - Fix regression when ``ansible_failed_task`` and ``ansible_failed_result`` are not defined in the rescue block (https://github.com/ansible/ansible/issues/64789) - Fix string parsing of inline vault strings for plugin config variable sources - Fixed typo in vmware_guest_powerstate module (https://github.com/ansible/ansible/issues/65161). - Revert customization of guest custom value behavior (https://github.com/ansible/ansible/issues/64291). - ``AnsibleUnsafe``/``AnsibleContext``/``Templar`` - Do not treat ``AnsibleUndefined`` as being "unsafe" (https://github.com/ansible/ansible/issues/65198) - acme_certificate - fix misbehavior when ACME v1 is used with ``modify_account`` set to ``false``. - ansible-galaxy - Fix ``collection install`` when installing from a URL or a file - https://github.com/ansible/ansible/issues/65109 - ansible-galaxy - Return the HTTP code reason if no error msg was returned by the server - https://github.com/ansible/ansible/issues/64850 - ansible-galaxy - Set ``User-Agent`` to Ansible version when interacting with Galaxy or Automation Hub - ansible-test now properly handles enumeration of git submodules. Enumeration is now done with ``git submodule status --recursive`` without specifying ``.`` for the path, since that could cause the command to fail. Instead, relative paths outside the current directory are filtered out of the results. Errors from ``git`` commands will now once again be reported as errors instead of warnings. - ansible-test windows coverage - Output temp files as UTF-8 with BOM to standardise against non coverage runs - become - Fix various plugins that still used play_context to get the become password instead of through the plugin - https://github.com/ansible/ansible/issues/62367 - ce modules - Update(add) docs notes to tell user modules work connection. - ce modules - Update(add) docs notes to tell user modules work connection. - ce modules - Update(add) docs notes to tell user modules work connection. - ce modules - Update(add) docs notes to tell user modules work connection. - ce modules - Update(add) docs notes to tell user modules work connection. - ce modules - Update(add) docs notes to tell user modules work connection. - decouple k8s_scale from the k8s module utils so that it doesn't complain about missing arguments - docker_container - fix network idempotence comparison error. - docker_network - fix idempotence comparison error. - fix all checkpoint modules to be able to get parameter with value false (https://github.com/ansible/ansible/pull/65040) - fortios httpapi plugin - fix the issue that fortios httpapi plugin does not support python2 - netconf_rpc module does not work with nxos (https://github.com/ansible/ansible/issues/63255). - netscaler_service - fixed issue preventing use of graceful attribute - openssh_keypair - fixes idempotence issue with public key (https://github.com/ansible/ansible/issues/64969). - openssl_csr - the module will now enforce that ``privatekey_path`` is specified when ``state=present``. - plugins-netconf-ce - Fix failed to get version information. - postgres.py - add a new keyword argument ``query_params`` (https://github.com/ansible/ansible/pull/64661). - postgresql_db - Removed exception for 'LibraryError' (https://github.com/ansible/ansible/issues/65223). - postgresql_idx.py - use the ``query_params`` arg of exec_sql function (https://github.com/ansible/ansible/pull/64661). - postgresql_lang - use query params with cursor.execute (https://github.com/ansible/ansible/pull/65093). - postgresql_owner - use query_params with cursor object (https://github.com/ansible/ansible/pull/65310). - postgresql_privs - sort results before comparing so that the values are compared and not the result of ``.sort()`` (https://github.com/ansible/ansible/pull/65125) - postgresql_privs.py - fix reports as changed behavior of module when using ``type=default_privs`` (https://github.com/ansible/ansible/issues/64371). - postgresql_user - fix the module doesn't correctly commit changes if groups is set (https://github.com/ansible/ansible/issues/64806). - proxmox - fix version detection of proxmox 6 and up (Fixes https://github.com/ansible/ansible/issues/59164) - pulp_repo - the ``client_cert`` and ``client_key`` options were used for both requests to the Pulp instance and for the repo to sync with, resulting in errors when they were used. Use the new options ``feed_client_cert`` and ``feed_client_key`` for client certificates that should only be used for repo synchronisation, and not for communication with the Pulp instance. (https://github.com/ansible/ansible/issues/59513) - runas - Fix the ``runas`` ``become_pass`` variable fallback from ``ansible_runas_runas`` to ``ansible_runas_pass`` - win_chocolatey - Improve error checking when finding the path of a newly installed Chocolatey app - win_domain_computer - Fix idempotence checks when ``sAMAccountName`` is different from ``name`` - win_iis_webapppool - Do not try and set attributes in check mode when the pool did not exist - yarn - handle no version when installing module by name (https://github.com/ansible/ansible/issues/55097) - zabbix_action - arguments ``event_source`` and ``esc_period`` no longer required when ``state=absent`` v2.9.1 ====== Release Summary --------------- | Release Date: 2019-11-13 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Fixed typo in inventory_discovery.rst document. - Fixes update_resource and delete_resource API for correct number of arguments in aws_config_aggregator (https://github.com/ansible/ansible/pull/64581). - Fixing typo mistake in testbed with section. Deploy template from content library is supported from 67U3 (https://github.com/ansible/ansible/issues/62957). - ansible-test - module validation now allows ``elements:`` for return value documentation. - ansible-test - switch from testing RHEL 8.0 and RHEL 8.1 Beta to RHEL 8.1 - ansible-test no longer tries to install sanity test dependencies on unsupported Python versions - ovirt_vm: correct cpu_threads documentation - vmware_host_firewall_manager - ``allowed_hosts`` excpects a dict as parameter, list is deprecated Bugfixes -------- - (https://github.com/ansible/ansible/pull/63901) - **security issue** - Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs (CVE-2019-14864) - ACI modules - Fix a whitespace issue in filters for ACI 4.2 strict validation - ACME modules: fix bug in ACME v1 account update code - ACME modules: make sure some connection errors are handled properly - ACME modules: support Buypass' ACME v1 endpoint - Ansible.Basic - Fix issue when setting a ``no_log`` parameter to an empty string - https://github.com/ansible/ansible/issues/62613 - Can't use plugin options vars in playbook when using collections (https://github.com/ansible/ansible/issues/63975) - Cloudengine module_utils - the ``set-id`` (RPC-REPLY XML attribute) may change over the time althougth ``set-id`` is the identity of the next RPC packet. - Cloudengine netconf plugin - add a dispatch RPC function,just return original RPC-REPLY, the function is used by ``Cloudengine module_utils``. - Fix IOS_VLANS override operation for new VLANs(https://github.com/ansible/ansible/pull/63624) - Fix deprecation warning on GitLab modules - Fix for backup option dest key for network modules (https://github.com/ansible/ansible/issues/57131). - Fix for performance regression in handler invocation (https://github.com/ansible/ansible/issues/59017) - Fix ios_l2_interfaces skipping relevant L2 interfaces facts(https://github.com/ansible/ansible/pull/63779) - Fix requirements on non required module parameters - Fix the ``xml`` module to use ``list(elem)`` instead of ``elem.getchildren()`` since it is being removed in Python 3.9 - Handle empty extra vars in ansible cli (https://github.com/ansible/ansible/issues/61497). - HostVarsVars - Template the __repr__ value (https://github.com/ansible/ansible/issues/64128). - Ovirt correct resolving nested atributes which are false. - Remove a temp directory created by wait_for_connection action plugin (https://github.com/ansible/ansible/issues/62407). - Remove the unnecessary warning about aptitude not being installed (https://github.com/ansible/ansible/issues/56832). - Remove unused variable in junos_user to fix flake8 failure. - TaskQueueManager - Explicitly set the mutliprocessing start method to ``fork`` to avoid issues with the default on macOS now being ``spawn``. - To fix ios_interfaces where non-existing virtual/loopback interfaces was not getting configured - account for empty strings in when splitting the host pattern (https://github.com/ansible/ansible/issues/61964) - acl - fixed module failure if there are spaces in a path - acme_certificate - fix crash when module is used with Python 2.x. - action/ce - fix a bug, some new version os will not discard uncommitted configure with a return directly.(https://github.com/ansible/ansible/pull/63513). - ansible-galaxy - Fix pagination issue when retrieving role versions for install - https://github.com/ansible/ansible/issues/64355 - ansible-test - bump version of ACME test container. The new version includes updated dependencies. - ansible-test now limits ``pathspec`` to versions prior to 0.6.0 on Python 2.6 to avoid installation errors - ansible-test now properly reports import errors for collections when running the import sanity test - ansible-test now properly uses a fresh copy of environment variables for each command invocation to avoid mixing vars between commands - ansible-test now shows the correct source path instead of ``%s`` for collection role based test targets when the ``-v`` option is used - ansible-test validate-modules sanity test code ``missing-module-utils-import-c#-requirements`` is now ``missing-module-utils-import-csharp-requirements`` (fixes ignore bug). - ansible-test validate-modules sanity test code ``multiple-c#-utils-per-requires`` is now ``multiple-csharp-utils-per-requires`` (fixes ignore bug). - ansible-test validate-modules sanity test now checks for AnsibleModule initialization instead of module_utils imports, which did not work in many cases. - ansible-test validate-modules sanity test now properly handles collections imports using the Ansible collection loader. - ansible-test validate-modules sanity test now properly handles relative imports. - ansible-test validate-modules sanity test now properly handles sys.exit in modules. - ansible-test validate-modules sanity test now properly invokes Ansible modules as scripts. - ce_acl_interface - update to fix some bugs - Modified the prompt statement when the switch device cannot be configured. (https://github.com/ansible/ansible/pull/64018) - ce_bgp - update to fix some bugs - When the vrf_name parameter is in the module and the configuration is repeatedly sent to the device, the module displays change = True. (https://github.com/ansible/ansible/pull/60573) - ce_bgp_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/62589) - ce_bgp_neighbor - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/60934) - ce_bgp_neighbor_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/60937) - ce_config - fixed issue - Re-building commands(config src) by replacing '#' with 'quit','quit' commands may close connection (https://github.com/ansible/ansible/issues/62872) - ce_evpn_bgp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61136) - ce_evpn_bgp_rr - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61168) - ce_evpn_global - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61013) - ce_facts - update to fix some bugs - Modifying regular expression errors. (https://github.com/ansible/ansible/pull/63331) - ce_info_center_global- update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61283) - ce_interface_ospf- update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61431) - ce_link_status - fix some bugs, result of interface <get> operation involves a large amount of data,interact with the device through the <get-next>.(https://github.com/ansible/ansible/pull/62417). - ce_mtu- update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61442) - ce_netstream_aging - Fix bugs(list index out of range). - ce_netstream_aging- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61653) - ce_netstream_export- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61652) - ce_netstream_global - Fix bugs(list index out of range and key error). - ce_netstream_template - Fix bugs(list index out of range and update commands error). - ce_ntp - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61654) - ce_vrf_af - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/61683) - copy - recursive copy with ``remote_src=yes`` now recurses beyond first level. (Fixes https://github.com/ansible/ansible/issues/58284) - debug - fixed an issue introduced in Ansible 2.4 where a loop of debug tasks would lose the "changed" status on each item. - docker_container - fix idempotency for IP addresses for networks. The old implementation checked the effective IP addresses assigned by the Docker daemon, and not the specified ones. This causes idempotency issues for containers which are not running, since they have no effective IP addresses assigned. - docker_container - make sure that when image is missing, check mode indicates a change (image will be pulled). - docker_image - make sure that deprecated options also emit proper deprecation warnings next to warnings which indicate how to replace them. - docker_login - Use ``with`` statement when accessing files, to prevent that invalid JSON output is produced. - docker_node_info - improve error handling when service inspection fails, for example because node name being ambiguous (https://github.com/ansible/ansible/issues/63353, PR https://github.com/ansible/ansible/pull/63418). - docker_swarm_service - ``source`` must no longer be specified for ``tmpfs`` mounts. - eos_vlans - Fixed behavior of when state=overridden - facts/virtual - gitlab_user - Fix adding ssh key to new/changed user and adding group membership for new/changed user - grafana_datasource module no longer fails if datasource name contains space characters. - iosxr - Make sure that empty configs don't throw a traceback for Resource Modules (https://github.com/ansible/ansible/pull/62515) - jenkins modules - CSRF handling fixed accordingly the latest updates in Jenkins Security model for versions > 2.173.3 - junos_user - fixed issue with adding multiple values for a Junos account with aggregate mode - lineinfile - don't attempt mkdirs when path doesn't contain directory path - lineinfile - fix bug that caused multiple line insertions (https://github.com/ansible/ansible/issues/58923). - lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (https://github.com/ansible/ansible/issues/63756) - lineinfile - use correct index value when inserting a line at the end of a file (https://github.com/ansible/ansible/issues/63684) - loops - Do not indiscriminately mark loop items as unsafe, only apply unsafe to ``with_`` style loops. The items from ``loop`` should not be explicitly wrapped in unsafe. The underlying templating mechanism should dictate this. (https://github.com/ansible/ansible/issues/64379) - module executor - Address issue where changes to Ansiballz module code, change the behavior of module execution as it pertains to ``__file__`` and ``sys.modules`` (https://github.com/ansible/ansible/issues/64664) - openssl_certificate - fix ``assertonly`` provider certificate verification, causing 'private key mismatch' and 'subject mismatch' errors. - openssl_certificate and openssl_csr - fix Ed25519 and Ed448 private key support for ``cryptography`` backend. This probably needs at least cryptography 2.8, since older versions have problems with signing certificates or CSRs with such keys. (https://github.com/ansible/ansible/issues/59039, PR https://github.com/ansible/ansible/pull/63984) - openssl_csr - a warning is issued if an unsupported value for ``version`` is used for the ``cryptography`` backend. - ovirt: Fix fetching of nested attributes - ovirt_disk: add host parameter to specify where should be the lun disk added. - ovirt_host_network: correct dictionary check. - package_facts - fix value of ``vital`` attribute which is returned when ``pkg`` manager is used - package_facts - use module warnings rather than a custom implementation for reporting warnings - paramiko_ssh - improve authentication error message so it is less confusing - plugins-netconf-ce - to get attribute 'set-id' from rpc-reply. - postgresql_publication - fix typo in module.warn method name (https://github.com/ansible/ansible/issues/64582). - syslogger callback plugin - remove check mode support since it did nothing anyway - template lookup - fix regression when templating hostvars (https://github.com/ansible/ansible/issues/63940) - user - fix stack trace on AIX when attempting to parse shadow file that does not exist (https://github.com/ansible/ansible/issues/62510) - vmware_host_firewall_manager - Ensure we can set rule with no ``allowed_hosts`` key (https://github.com/ansible/ansible/issues/61332) - vyos - Make sure that empty configs don't throw a traceback for Resource Modules (https://github.com/ansible/ansible/pull/62520) - win_acl - Fixed error when setting rights on directory for which inheritance from parent directory has been disabled. - win_domain_computer - Honour the explicit domain server and credentials when moving or removing a computer object - https://github.com/ansible/ansible/pull/63093 - win_iis_website - Actually restart the site when ``state=restarted`` - https://github.com/ansible/ansible/issues/63828 - win_packages - fixed issue where Test-Path failed to find files with special characters (https://github.com/ansible/ansible/issues/62521) - win_partition - Fix invalid variable name causing a failure on checks - https://github.com/ansible/ansible/issues/62401 - zabbix_host - module will now properly logout from Zabbix server and won't leave open session behind (see https://github.com/ansible/ansible/issues/63774) v2.9.0 ====== Release Summary --------------- | Release Date: 2019-10-31 | `Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`__ Minor Changes ------------- - Add 'auth_url' field to galaxy server config stanzas in ansible.cfg The url should point to the token_endpoint of a Keycloak server. - Add I(preferred_arrays) param to enable preferred arrays to be set in a host configuration. (https://github.com/ansible/ansible/pull/59735) - Add ability to force a protection group snapshot to immediately replicate to a remote array (if configured) - Add date header to the email based on local time in mail module (https://github.com/ansible/ansible/issues/58808). - Add folder option in vmware_datastore_cluster to place datastore cluster in specific folder (https://github.com/ansible/ansible/issues/48010). - Add folder option in vmware_dvswitch to place distributed switch in a network specific folder (https://github.com/ansible/ansible/issues/54986). - Add installation documentation for vSphere Automation SDK for Python in vmware inventory plugin docs (https://github.com/ansible/ansible/issues/57224). - Add managed object identifier (moId) and vim reference (vimref) of virtual machine in guest facts (https://github.com/ansible/ansible/issues/53372). - Add new option to default standard out callback plugin, ``ANSIBLE_CHECK_MODE_MARKERS``, which adds check mode markers (``DRY RUN``, ``CHECK_MODE``) to the output when running in check mode. It is off by default. - Add support for NIS in an NFS directory service and support for specifying an OU for an SMD directory service (https://github.com/ansible/ansible/pull/59608) - Add support for `check_mode` - Add toggle to show per host task start on default callback - Added C# module util that implements various access token functions - Added a parameter to allow remounting a filesystem - Added new `throttle` keyword, which can be used at the task, block, or play level to limit the number of workers (up to the specified forks or serial setting) allowed. - Added new parameters hostname and subdomain to kubevirt_vm module. - Adjusted PowerShell and C# collection util imports to use a Python package name that reflects the location of the util in the collection. This is a breaking change, for more information see :ref:`porting_2.9_guide` for more information. - All previously deprecated sudo/su and module locale global settings have been removed. - Allow ansible-doc to return JSON as output. - Allow debugger to take a templated value (https://github.com/ansible/ansible/pull/53587) - Allow expanded options for user to control behaviour on duplicate YAML keys. - Allow the users to enable or disable the rescue mode on Hetzner cloud servers - Ansible now supports relative imports of module_utils files in modules and module_utils. - Ansible will now warn if two aliases of the same option are used for Python modules. - Check dvs in the given portgroup before accessing any properties of dvs (https://github.com/ansible/ansible/issues/59952). This can be due to permission issue or no association between distributed virtual portgroup and dvswitch. - Check return value of FindByInventoryPath API used for finding folder value (https://github.com/ansible/ansible/issues/54823). - Command line argument parsing - Switch from deprecated optparse to argparse - Corrected API call for module.fail_json in command module. - Enable ansible-doc to work with 'adjacent' collections via --playbook-dir option. - Fix Key Error in get_vm() api in vmware.py module util (https://github.com/ansible/ansible/issues/60129). - Handle user unauthorization errors in VMware REST API code for tagging (https://github.com/ansible/ansible/issues/58326). - Implement config options for ``display_ok_hosts`` and ``display_skipped_hosts`` in unixy callback plugin - InventoryManager - Speed up host subset calculation by performing direct host uuid comparisons, instead of Host object comparisons - Jinja tests - Remove deprecated functionality of registering tests as filters (https://github.com/ansible/ansible/issues/55319) - Make VM name and VM UUID as mutual exclusive and required one of (https://github.com/ansible/ansible/issues/57580). - Make ``ansible_index_var`` accessible as a magic variable. - Meraki modules now return data in snake_case instead of camelCase. The ANSIBLE_MERAKI_FORMAT environment variable can be set to camelcase to revert back to camelcase until deprecation in Ansible 2.13. - Now callback plugins MUST allow for setting options as deprecation period that allowed older callbacks to ignore this is over. - Refactored ``ansible-galaxy collections`` API code to be more friendly for future bugfixes - Remove duplicate implementation of memory reservation parameter in vmware_guest (https://github.com/ansible/ansible/issues/54335). - Restrict vcenter_folder to vCenter only, since folder creation api is not supported on ESXi hostsystem (https://github.com/ansible/ansible/issues/49938). - Revert apply as the default of kubernetes modules such as k8s. This restores the 2.8 and previous behaviour as the default. apply can still be explicitly enabled https://github.com/ansible/ansible/issues/62661 - Templar - Speed up ``is_template`` by lexing the string, instead of actually templating the string (https://github.com/ansible/ansible/pull/57489) - The ``ali_instance_facts`` module has been renamed to ``ali_instance_info``. - The ``aws_acm_facts`` module has been renamed to ``aws_acm_info``. - The ``aws_az_facts`` module has been renamed to ``aws_az_info``. - The ``aws_caller_facts`` module has been renamed to ``aws_caller_info``. - The ``aws_kms_facts`` module has been renamed to ``aws_kms_info``. - The ``aws_region_facts`` module has been renamed to ``aws_region_info``. - The ``aws_s3_bucket_facts`` module has been renamed to ``aws_s3_bucket_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``aws_sgw_facts`` module has been renamed to ``aws_sgw_info``. - The ``aws_waf_facts`` module has been renamed to ``aws_waf_info``. - The ``azure_rm_aks_facts`` module has been renamed to ``azure_rm_aks_info``. - The ``azure_rm_aksversion_facts`` module has been renamed to ``azure_rm_aksversion_info``. - The ``azure_rm_applicationsecuritygroup_facts`` module has been renamed to ``azure_rm_applicationsecuritygroup_info``. - The ``azure_rm_appserviceplan_facts`` module has been renamed to ``azure_rm_appserviceplan_info``. - The ``azure_rm_automationaccount_facts`` module has been renamed to ``azure_rm_automationaccount_info``. - The ``azure_rm_autoscale_facts`` module has been renamed to ``azure_rm_autoscale_info``. - The ``azure_rm_availabilityset_facts`` module has been renamed to ``azure_rm_availabilityset_info``. - The ``azure_rm_cdnendpoint_facts`` module has been renamed to ``azure_rm_cdnendpoint_info``. - The ``azure_rm_cdnprofile_facts`` module has been renamed to ``azure_rm_cdnprofile_info``. - The ``azure_rm_containerinstance_facts`` module has been renamed to ``azure_rm_containerinstance_info``. - The ``azure_rm_containerregistry_facts`` module has been renamed to ``azure_rm_containerregistry_info``. - The ``azure_rm_cosmosdbaccount_facts`` module has been renamed to ``azure_rm_cosmosdbaccount_info``. - The ``azure_rm_deployment_facts`` module has been renamed to ``azure_rm_deployment_info``. - The ``azure_rm_resourcegroup_facts`` module has been renamed to ``azure_rm_resourcegroup_info``. - The ``bigip_device_facts`` module has been renamed to ``bigip_device_info``. - The ``bigiq_device_facts`` module has been renamed to ``bigiq_device_info``. - The ``cloudformation_facts`` module has been renamed to ``cloudformation_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``cloudfront_facts`` module has been renamed to ``cloudfront_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``cloudwatchlogs_log_group_facts`` module has been renamed to ``cloudwatchlogs_log_group_info``. - The ``cs_instance_facts`` module has been deprecated. Use ``cs_instance_info`` instead. - The ``cs_zone_facts`` module has been deprecated. Use ``cs_zone_info`` instead. - The ``digital_ocean_account_facts`` module has been renamed to ``digital_ocean_account_info``. - The ``digital_ocean_certificate_facts`` module has been renamed to ``digital_ocean_certificate_info``. - The ``digital_ocean_domain_facts`` module has been renamed to ``digital_ocean_domain_info``. - The ``digital_ocean_firewall_facts`` module has been renamed to ``digital_ocean_firewall_info``. - The ``digital_ocean_floating_ip_facts`` module has been renamed to ``digital_ocean_floating_ip_info``. - The ``digital_ocean_image_facts`` module has been renamed to ``digital_ocean_image_info``. - The ``digital_ocean_load_balancer_facts`` module has been renamed to ``digital_ocean_load_balancer_info``. - The ``digital_ocean_region_facts`` module has been renamed to ``digital_ocean_region_info``. - The ``digital_ocean_size_facts`` module has been renamed to ``digital_ocean_size_info``. - The ``digital_ocean_snapshot_facts`` module has been renamed to ``digital_ocean_snapshot_info``. - The ``digital_ocean_sshkey_facts`` module has been deprecated. Use ``digital_ocean_sshkey_info`` instead. - The ``digital_ocean_tag_facts`` module has been renamed to ``digital_ocean_tag_info``. - The ``digital_ocean_volume_facts`` module has been renamed to ``digital_ocean_volume_info``. - The ``ec2_ami_facts`` module has been renamed to ``ec2_ami_info``. - The ``ec2_asg_facts`` module has been renamed to ``ec2_asg_info``. - The ``ec2_customer_gateway_facts`` module has been renamed to ``ec2_customer_gateway_info``. - The ``ec2_eip_facts`` module has been renamed to ``ec2_eip_info``. - The ``ec2_elb_facts`` module has been renamed to ``ec2_elb_info``. - The ``ec2_eni_facts`` module has been renamed to ``ec2_eni_info``. - The ``ec2_group_facts`` module has been renamed to ``ec2_group_info``. - The ``ec2_instance_facts`` module has been renamed to ``ec2_instance_info``. - The ``ec2_lc_facts`` module has been renamed to ``ec2_lc_info``. - The ``ec2_placement_group_facts`` module has been renamed to ``ec2_placement_group_info``. - The ``ec2_snapshot_facts`` module has been renamed to ``ec2_snapshot_info``. - The ``ec2_vol_facts`` module has been renamed to ``ec2_vol_info``. - The ``ec2_vpc_dhcp_option_facts`` module has been renamed to ``ec2_vpc_dhcp_option_info``. - The ``ec2_vpc_endpoint_facts`` module has been renamed to ``ec2_vpc_endpoint_info``. - The ``ec2_vpc_igw_facts`` module has been renamed to ``ec2_vpc_igw_info``. - The ``ec2_vpc_nacl_facts`` module has been renamed to ``ec2_vpc_nacl_info``. - The ``ec2_vpc_nat_gateway_facts`` module has been renamed to ``ec2_vpc_nat_gateway_info``. - The ``ec2_vpc_net_facts`` module has been renamed to ``ec2_vpc_net_info``. - The ``ec2_vpc_peering_facts`` module has been renamed to ``ec2_vpc_peering_info``. - The ``ec2_vpc_route_table_facts`` module has been renamed to ``ec2_vpc_route_table_info``. - The ``ec2_vpc_subnet_facts`` module has been renamed to ``ec2_vpc_subnet_info``. - The ``ec2_vpc_vgw_facts`` module has been renamed to ``ec2_vpc_vgw_info``. - The ``ec2_vpc_vpn_facts`` module has been renamed to ``ec2_vpc_vpn_info``. - The ``ecs_service_facts`` module has been renamed to ``ecs_service_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ecs_taskdefinition_facts`` module has been renamed to ``ecs_taskdefinition_info``. - The ``efs_facts`` module has been renamed to ``efs_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``elasticache_facts`` module has been renamed to ``elasticache_info``. - The ``elb_application_lb_facts`` module has been renamed to ``elb_application_lb_info``. - The ``elb_classic_lb_facts`` module has been renamed to ``elb_classic_lb_info``. - The ``elb_target_facts`` module has been renamed to ``elb_target_info``. - The ``elb_target_group_facts`` module has been renamed to ``elb_target_group_info``. - The ``gcp_bigquery_dataset_facts`` module was renamed to ``gcp_bigquery_dataset_info``. - The ``gcp_bigquery_table_facts`` module was renamed to ``gcp_bigquery_table_info``. - The ``gcp_cloudbuild_trigger_facts`` module was renamed to ``gcp_cloudbuild_trigger_info``. - The ``gcp_compute_address_facts`` module was renamed to ``gcp_compute_address_info``. - The ``gcp_compute_backend_bucket_facts`` module was renamed to ``gcp_compute_backend_bucket_info``. - The ``gcp_compute_backend_service_facts`` module was renamed to ``gcp_compute_backend_service_info``. - The ``gcp_compute_disk_facts`` module was renamed to ``gcp_compute_disk_info``. - The ``gcp_compute_firewall_facts`` module was renamed to ``gcp_compute_firewall_info``. - The ``gcp_compute_forwarding_rule_facts`` module was renamed to ``gcp_compute_forwarding_rule_info``. - The ``gcp_compute_global_address_facts`` module was renamed to ``gcp_compute_global_address_info``. - The ``gcp_compute_global_forwarding_rule_facts`` module was renamed to ``gcp_compute_global_forwarding_rule_info``. - The ``gcp_compute_health_check_facts`` module was renamed to ``gcp_compute_health_check_info``. - The ``gcp_compute_http_health_check_facts`` module was renamed to ``gcp_compute_http_health_check_info``. - The ``gcp_compute_https_health_check_facts`` module was renamed to ``gcp_compute_https_health_check_info``. - The ``gcp_compute_image_facts`` module was renamed to ``gcp_compute_image_info``. - The ``gcp_compute_instance_facts`` module was renamed to ``gcp_compute_instance_info``. - The ``gcp_compute_instance_group_facts`` module was renamed to ``gcp_compute_instance_group_info``. - The ``gcp_compute_instance_group_manager_facts`` module was renamed to ``gcp_compute_instance_group_manager_info``. - The ``gcp_compute_instance_template_facts`` module was renamed to ``gcp_compute_instance_template_info``. - The ``gcp_compute_interconnect_attachment_facts`` module was renamed to ``gcp_compute_interconnect_attachment_info``. - The ``gcp_compute_network_facts`` module was renamed to ``gcp_compute_network_info``. - The ``gcp_compute_region_disk_facts`` module was renamed to ``gcp_compute_region_disk_info``. - The ``gcp_compute_route_facts`` module was renamed to ``gcp_compute_route_info``. - The ``gcp_compute_router_facts`` module was renamed to ``gcp_compute_router_info``. - The ``gcp_compute_ssl_certificate_facts`` module was renamed to ``gcp_compute_ssl_certificate_info``. - The ``gcp_compute_ssl_policy_facts`` module was renamed to ``gcp_compute_ssl_policy_info``. - The ``gcp_compute_subnetwork_facts`` module was renamed to ``gcp_compute_subnetwork_info``. - The ``gcp_compute_target_http_proxy_facts`` module was renamed to ``gcp_compute_target_http_proxy_info``. - The ``gcp_compute_target_https_proxy_facts`` module was renamed to ``gcp_compute_target_https_proxy_info``. - The ``gcp_compute_target_pool_facts`` module was renamed to ``gcp_compute_target_pool_info``. - The ``gcp_compute_target_ssl_proxy_facts`` module was renamed to ``gcp_compute_target_ssl_proxy_info``. - The ``gcp_compute_target_tcp_proxy_facts`` module was renamed to ``gcp_compute_target_tcp_proxy_info``. - The ``gcp_compute_target_vpn_gateway_facts`` module was renamed to ``gcp_compute_target_vpn_gateway_info``. - The ``gcp_compute_url_map_facts`` module was renamed to ``gcp_compute_url_map_info``. - The ``gcp_compute_vpn_tunnel_facts`` module was renamed to ``gcp_compute_vpn_tunnel_info``. - The ``gcp_container_cluster_facts`` module was renamed to ``gcp_container_cluster_info``. - The ``gcp_container_node_pool_facts`` module was renamed to ``gcp_container_node_pool_info``. - The ``gcp_dns_managed_zone_facts`` module was renamed to ``gcp_dns_managed_zone_info``. - The ``gcp_dns_resource_record_set_facts`` module was renamed to ``gcp_dns_resource_record_set_info``. - The ``gcp_iam_role_facts`` module was renamed to ``gcp_iam_role_info``. - The ``gcp_iam_service_account_facts`` module was renamed to ``gcp_iam_service_account_info``. - The ``gcp_pubsub_subscription_facts`` module was renamed to ``gcp_pubsub_subscription_info``. - The ``gcp_pubsub_topic_facts`` module was renamed to ``gcp_pubsub_topic_info``. - The ``gcp_redis_instance_facts`` module was renamed to ``gcp_redis_instance_info``. - The ``gcp_resourcemanager_project_facts`` module was renamed to ``gcp_resourcemanager_project_info``. - The ``gcp_sourcerepo_repository_facts`` module was renamed to ``gcp_sourcerepo_repository_info``. - The ``gcp_spanner_database_facts`` module was renamed to ``gcp_spanner_database_info``. - The ``gcp_spanner_instance_facts`` module was renamed to ``gcp_spanner_instance_info``. - The ``gcp_sql_database_facts`` module was renamed to ``gcp_sql_database_info``. - The ``gcp_sql_instance_facts`` module was renamed to ``gcp_sql_instance_info``. - The ``gcp_sql_user_facts`` module was renamed to ``gcp_sql_user_info``. - The ``gcp_tpu_node_facts`` module was renamed to ``gcp_tpu_node_info``. - The ``gcpubsub_facts`` module has been renamed to ``gcpubsub_info``. - The ``github_webhook_facts`` module has been renamed to ``github_webhook_info``. - The ``gluster_heal_facts`` module has been renamed to ``gluster_heal_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_datacenter_facts`` module has been renamed to ``hcloud_datacenter_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_floating_ip_facts`` module has been renamed to ``hcloud_floating_ip_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_image_facts`` module has been renamed to ``hcloud_image_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_location_facts`` module has been renamed to ``hcloud_location_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_server_facts`` module has been renamed to ``hcloud_server_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_server_type_facts`` module has been renamed to ``hcloud_server_type_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_ssh_key_facts`` module has been renamed to ``hcloud_ssh_key_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hcloud_volume_facts`` module has been renamed to ``hcloud_volume_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``hpilo_facts`` module has been renamed to ``hpilo_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``iam_mfa_device_facts`` module has been renamed to ``iam_mfa_device_info``. - The ``iam_role_facts`` module has been renamed to ``iam_role_info``. - The ``iam_server_certificate_facts`` module has been renamed to ``iam_server_certificate_info``. - The ``idrac_redfish_facts`` module has been renamed to ``idrac_redfish_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``intersight_facts`` module has been renamed to ``intersight_info``. - The ``jenkins_job_facts`` module has been renamed to ``jenkins_job_info``. - The ``k8s_facts`` module has been renamed to ``k8s_info``. - The ``lambda_facts`` module has been deprecated. Use ``lambda_info`` instead. - The ``memset_memstore_facts`` module has been renamed to ``memset_memstore_info``. - The ``memset_server_facts`` module has been renamed to ``memset_server_info``. - The ``na_ontap_gather_facts`` module has been deprecated. Use ``na_ontap_info`` instead. - The ``nginx_status_facts`` module has been deprecated. Use ``nginx_status_info`` instead. - The ``one_image_facts`` module has been renamed to ``one_image_info``. - The ``onepassword_facts`` module has been renamed to ``onepassword_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_datacenter_facts`` module has been renamed to ``oneview_datacenter_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_enclosure_facts`` module has been renamed to ``oneview_enclosure_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_ethernet_network_facts`` module has been renamed to ``oneview_ethernet_network_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_fc_network_facts`` module has been renamed to ``oneview_fc_network_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_fcoe_network_facts`` module has been renamed to ``oneview_fcoe_network_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_logical_interconnect_group_facts`` module has been renamed to ``oneview_logical_interconnect_group_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_network_set_facts`` module has been renamed to ``oneview_network_set_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``oneview_san_manager_facts`` module has been renamed to ``oneview_san_manager_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``online_server_facts`` module has been deprecated. Use ``online_server_info`` instead. - The ``online_user_facts`` module has been deprecated. Use ``online_user_info`` instead. - The ``os_flavor_facts`` module has been renamed to ``os_flavor_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_image_facts`` module has been renamed to ``os_image_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_keystone_domain_facts`` module has been renamed to ``os_keystone_domain_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_networks_facts`` module has been renamed to ``os_networks_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_port_facts`` module has been renamed to ``os_port_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_project_facts`` module has been renamed to ``os_project_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_server_facts`` module has been renamed to ``os_server_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_subnets_facts`` module has been renamed to ``os_subnets_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``os_user_facts`` module has been renamed to ``os_user_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_affinity_label_facts`` module has been renamed to ``ovirt_affinity_label_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_api_facts`` module has been renamed to ``ovirt_api_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_cluster_facts`` module has been renamed to ``ovirt_cluster_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_datacenter_facts`` module has been renamed to ``ovirt_datacenter_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_disk_facts`` module has been renamed to ``ovirt_disk_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_event_facts`` module has been renamed to ``ovirt_event_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_external_provider_facts`` module has been renamed to ``ovirt_external_provider_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_group_facts`` module has been renamed to ``ovirt_group_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_host_facts`` module has been renamed to ``ovirt_host_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_host_storage_facts`` module has been renamed to ``ovirt_host_storage_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_network_facts`` module has been renamed to ``ovirt_network_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_nic_facts`` module has been renamed to ``ovirt_nic_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_permission_facts`` module has been renamed to ``ovirt_permission_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_quota_facts`` module has been renamed to ``ovirt_quota_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_scheduling_policy_facts`` module has been renamed to ``ovirt_scheduling_policy_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_snapshot_facts`` module has been renamed to ``ovirt_snapshot_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_storage_domain_facts`` module has been renamed to ``ovirt_storage_domain_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_storage_template_facts`` module has been renamed to ``ovirt_storage_template_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_storage_vm_facts`` module has been renamed to ``ovirt_storage_vm_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_tag_facts`` module has been renamed to ``ovirt_tag_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_template_facts`` module has been renamed to ``ovirt_template_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_user_facts`` module has been renamed to ``ovirt_user_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_vm_facts`` module has been renamed to ``ovirt_vm_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``ovirt_vmpool_facts`` module has been renamed to ``ovirt_vmpool_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``purefa_facts`` module has been deprecated. Use ``purefa_info`` instead. - The ``purefb_facts`` module has been deprecated. Use ``purefb_info`` instead. - The ``python_requirements_facts`` module has been renamed to ``python_requirements_info``. - The ``rds_instance_facts`` module has been renamed to ``rds_instance_info``. - The ``rds_snapshot_facts`` module has been renamed to ``rds_snapshot_info``. - The ``redfish_facts`` module has been renamed to ``redfish_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``redshift_facts`` module has been renamed to ``redshift_info``. - The ``route53_facts`` module has been renamed to ``route53_info``. - The ``scaleway_image_facts`` module has been deprecated. Use ``scaleway_image_info`` instead. - The ``scaleway_ip_facts`` module has been deprecated. Use ``scaleway_ip_info`` instead. - The ``scaleway_organization_facts`` module has been deprecated. Use ``scaleway_organization_info`` instead. - The ``scaleway_security_group_facts`` module has been deprecated. Use ``scaleway_security_group_info`` instead. - The ``scaleway_server_facts`` module has been deprecated. Use ``scaleway_server_info`` instead. - The ``scaleway_snapshot_facts`` module has been deprecated. Use ``scaleway_snapshot_info`` instead. - The ``scaleway_volume_facts`` module has been deprecated. Use ``scaleway_volume_info`` instead. - The ``smartos_image_facts`` module has been renamed to ``smartos_image_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``vcenter_extension_facts`` module has been deprecated. Use ``vcenter_extension_info`` instead. - The ``vertica_facts`` module has been renamed to ``vertica_info``. When called with the new name, the module no longer returns ``ansible_facts``. - The ``vmware_about_facts`` module has been deprecated. Use ``vmware_about_info`` instead. - The ``vmware_category_facts`` module has been deprecated. Use ``vmware_category_info`` instead. - The ``vmware_cluster_facts`` module has been renamed to ``vmware_cluster_info``. - The ``vmware_datastore_facts`` module has been renamed to ``vmware_datastore_info``. - The ``vmware_drs_group_facts`` module has been deprecated. Use ``vmware_drs_group_info`` instead. - The ``vmware_drs_rule_facts`` module has been deprecated. Use ``vmware_drs_rule_info`` instead. - The ``vmware_dvs_portgroup_facts`` module has been deprecated. Use ``vmware_dvs_portgroup_info`` instead. - The ``vmware_guest_boot_facts`` module has been deprecated. Use ``vmware_guest_boot_info`` instead. - The ``vmware_guest_customization_facts`` module has been deprecated. Use ``vmware_guest_customization_info`` instead. - The ``vmware_guest_disk_facts`` module has been deprecated. Use ``vmware_guest_disk_info`` instead. - The ``vmware_guest_facts`` module has been renamed to ``vmware_guest_info``. - The ``vmware_guest_snapshot_facts`` module has been renamed to ``vmware_guest_snapshot_info``. - The ``vmware_host_capability_facts`` module has been deprecated. Use ``vmware_host_capability_info`` instead. - The ``vmware_host_config_facts`` module has been deprecated. Use ``vmware_host_config_info`` instead. - The ``vmware_host_dns_facts`` module has been deprecated. Use ``vmware_host_dns_info`` instead. - The ``vmware_host_feature_facts`` module has been deprecated. Use ``vmware_host_feature_info`` instead. - The ``vmware_host_firewall_facts`` module has been deprecated. Use ``vmware_host_firewall_info`` instead. - The ``vmware_host_ntp_facts`` module has been deprecated. Use ``vmware_host_ntp_info`` instead. - The ``vmware_host_package_facts`` module has been deprecated. Use ``vmware_host_package_info`` instead. - The ``vmware_host_service_facts`` module has been deprecated. Use ``vmware_host_service_info`` instead. - The ``vmware_host_ssl_facts`` module has been deprecated. Use ``vmware_host_ssl_info`` instead. - The ``vmware_host_vmhba_facts`` module has been deprecated. Use ``vmware_host_vmhba_info`` instead. - The ``vmware_host_vmnic_facts`` module has been deprecated. Use ``vmware_host_vmnic_info`` instead. - The ``vmware_local_role_facts`` module has been deprecated. Use ``vmware_local_role_info`` instead. - The ``vmware_local_user_facts`` module has been deprecated. Use ``vmware_local_user_info`` instead. - The ``vmware_portgroup_facts`` module has been deprecated. Use ``vmware_portgroup_info`` instead. - The ``vmware_resource_pool_facts`` module has been deprecated. Use ``vmware_resource_pool_info`` instead. - The ``vmware_tag_facts`` module has been renamed to ``vmware_tag_info``. - The ``vmware_target_canonical_facts`` module has been deprecated. Use ``vmware_target_canonical_info`` instead. - The ``vmware_vm_facts`` module has been renamed to ``vmware_vm_info``. - The ``vmware_vmkernel_facts`` module has been deprecated. Use ``vmware_vmkernel_info`` instead. - The ``vmware_vswitch_facts`` module has been deprecated. Use ``vmware_vswitch_info`` instead. - The ``vultr_account_facts`` module has been deprecated. Use ``vultr_account_info`` instead. - The ``vultr_block_storage_facts`` module has been deprecated. Use ``vultr_block_storage_info`` instead. - The ``vultr_dns_domain_facts`` module has been deprecated. Use ``vultr_dns_domain_info`` instead. - The ``vultr_firewall_group_facts`` module has been deprecated. Use ``vultr_firewall_group_info`` instead. - The ``vultr_network_facts`` module has been deprecated. Use ``vultr_network_info`` instead. - The ``vultr_os_facts`` module has been deprecated. Use ``vultr_os_info`` instead. - The ``vultr_plan_facts`` module has been deprecated. Use ``vultr_plan_info`` instead. - The ``vultr_region_facts`` module has been deprecated. Use ``vultr_region_info`` instead. - The ``vultr_server_facts`` module has been deprecated. Use ``vultr_server_info`` instead. - The ``vultr_ssh_key_facts`` module has been deprecated. Use ``vultr_ssh_key_info`` instead. - The ``vultr_startup_script_facts`` module has been deprecated. Use ``vultr_startup_script_info`` instead. - The ``vultr_user_facts`` module has been deprecated. Use ``vultr_user_info`` instead. - The ``xenserver_guest_facts`` module has been renamed to ``xenserver_guest_info``. - The ``zabbix_group_facts`` module has been renamed to ``zabbix_group_info``. - The ``zabbix_host_facts`` module has been renamed to ``zabbix_host_info``. - The `podman` connection plugin now supports pipelining. - Typecast vlan id to string in nmcli module (https://github.com/ansible/ansible/issues/58949). - When using `fetch_nested` fetch also list of href, instead only single object hrefs. - acme_certificate - all alternate chains can be retrieved using the new ``retrieve_all_alternates`` option. - add purge_tags parameter to s3_bucket to allow preservation of existing tags when updating tags. - added ``use`` option to ``hostname`` module to allow user to override autodetection. - ansible-galaxy - Added the ``collection build`` command to build a collection tarball ready for uploading. - ansible-galaxy - Added the ``collection init`` command to create a skeleton collection directory. - ansible-galaxy - Added the ``collection install`` command to install collections locally. - ansible-galaxy - Added the ``collection publish`` command to publish a collection tarball to a Galaxy server. - ansible-test - Bump version of ACME test container to 1.8.0. Fixes a typo in the API and adds a newer Pebble version. - ansible-test defaults to redacting sensitive values (disable with the ``--no-redact`` option) - apt - Remove deprecated ``installed`` and ``removed`` aliases (https://github.com/ansible/ansible/issues/55311) - aws_eks_cluster - Ansible may now wait until an EKS cluster is fully removed before moving on. - backports.ssl_match_hostname - Update bundled copy of backports.ssl_match_hostname from 3.4.0.2 to 3.7.0.1 (https://github.com/ansible/ansible/issues/51794) - changed task module/action parsing to report more helpful errors - collection role dependencies will first search for unqualified role names in the containing collection. - cosmetic change, simplify FC WWN facts gathering on Solaris - default collection - a playbook run inside a collection (eg, as part of a runme.sh integration test) will first search the containing collection for unqualified module/action references (https://github.com/ansible/ansible/pull/61415) - distro - Update bundled copy of distro from 1.3.0 to 1.4.0 (https://github.com/ansible/ansible/issues/55302) - dnf - Properly handle idempotent transactions with package name wildcard globs (https://github.com/ansible/ansible/issues/62809) - dnf - Provide a better error message including python version info when installing python-dnf fails - dnf - set lock_timeout to a sane default (30 seconds, as is the cli) - docker_container - add ``mounts`` option. - docker_container - now tests for mount endpoint collisions (for both ``mounts`` and ``volumes``) to abort early when collisions are found - docker_image - Add ``build.target`` option. - docker_image - added ``extra_hosts`` argument (https://github.com/ansible/ansible/issues/59233) - docker_swarm_service - Add ``npipe`` mount support. - docker_swarm_service - Remove requirement of ``secret_id`` on ``secrets`` and ``config_id`` on ``configs``. - docker_swarm_service - Support passing dictionaries in ``networks`` to allow setting ``aliases`` and ``options``. - ec2 - Remove deprecated ``device_type`` option (https://github.com/ansible/ansible/issues/55306) - ec2_eip - Added support for BYOIP to ec2_eip module and filtering reusable addresses based on tags (https://github.com/ansible/ansible/pull/59180). - ec2_instance - Remove deprecated ``network.ebs_optimized`` option (https://github.com/ansible/ansible/issues/55307) - ec2_lc - Remove deprecated ``device_type`` option (https://github.com/ansible/ansible/issues/55308) - eos_use_sessions is now type boolean instead of int. - file - Extend ``-diff`` to return list of files and folders that will be removed in case of ``state=absent`` (https://github.com/ansible/ansible/pull/56353) - gcp_compute - Added additional environment variables to the `gcp_compute` inventory plugin to align with the rest of the `gcp_*` modules. - get_certificate - added ``proxy_*`` options. - get_certificate - now works with both PyOpenSSL and cryptography Python libraries. Autodetection can be overridden with ``select_crypto_backend`` option. - get_certificate - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - getent - add service parameter to getent to lookup specified service - git - add a ``gpg_whitelist`` option to specify a list of trusted GPG fingerprints for when ``verify_commit`` is enabled (https://github.com/ansible/ansible/pull/55396) - k8s - add `wait_sleep` parameter (number of seconds to sleep between checks). - log_plays - Add a new log_folder option to the log_plays callback plugin. - lookup_url - added ability to specify request headers - magic variables - added a new ``ansible_parent_role_names`` magic variable that, when a role is included by another role, contains a list of all parent roles. - magic variables - added a new ``ansible_parent_role_paths`` magic variable that, when a role is included by another role, contains a list of all parent role paths. - meraki_* - Idempotency check has been rewritten. The new version is more thorough. - meraki_* - Meraki modules now return data when no changes are made. - meraki_* - Modules now respect 429 (rate limit) and 500/502 errors with a graceful backoff. - meraki_admin - Add support for check mode. - meraki_config_template - Enable check mode. - meraki_content_filtering - Add support for check mode. - meraki_mr_l3_firewall - Integration test now uses net_id in some tests for improved code coverage. - meraki_network - Add support for disabling remote status page on a network. - meraki_network - Add support for enabling or disabling VLANs on a network. - meraki_organization - Removed the absent option for state due to the possibly catastrophic mistakes. Parameter will be added in 2.10 with safeguards. - meraki_snmp - Add support for check mode. - meraki_ssid - Add examples to documentation. - meraki_vlan - Add support for check mode. - mysql_db - now behaves better w.r.t ``changed`` results in ``check_mode`` - mysql_db now supports creation and deletion of multiple databases (https://github.com/ansible/ansible/issues/58370) - mysql_db now supports multiple databases in dump operation (https://github.com/ansible/ansible/issues/56059) - openssh_keypair - add key ``comment`` to return value - openssl_certificate - Add support for a new provider ``entrust`` (https://github.com/ansible/ansible/pull/59272). - openssl_certificate - add support for subject key identifier and authority key identifier extensions. Subject key identifiers are created by default when not explicitly disabled. - openssl_certificate - the ``assertonly`` provider has been deprecated. See examples in module to see how to replace it. - openssl_certificate - the ``ownca`` provider creates authority key identifiers if not explicitly disabled with ``ownca_create_authority_key_identifier: no``. - openssl_certificate - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_certificate_info - add ``ocsp_uri`` return value. - openssl_certificate_info - add support for subject key identifier and authority key identifier extensions. - openssl_certificate_info - added ``issuer_ordered`` and ``subject_ordered`` return values. - openssl_certificate_info - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_csr - add support for subject key identifier and authority key identifier extensions. - openssl_csr - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_csr_info - add support for subject key identifier and authority key identifier extensions. - openssl_csr_info - added ``subject_ordered`` return value. - openssl_csr_info - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_privatekey - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_privatekey_info - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - openssl_publickey - now works with both PyOpenSSL and cryptography Python libraries. Autodetection can be overridden with ``select_crypto_backend`` option. - openssl_publickey - the ``pyopenssl`` backend has been deprecated, it will be removed in Ansible 2.13. - os_network - added MTU support when creating/updating a network - os_network - added dns_domain support when creating/updating a network - ovirt4 inventory - Updated the dynamic inventory script for Python 3 support - pluribus networks modules to handle empty output string. - postgresql_ext - add version parameter to support creation / update extensions of specific versions (https://github.com/ansible/ansible/pull/58381) - postgresql_query - Add array handling for positional_args and named_args parameters (https://github.com/ansible/ansible/issues/59955). - postgresql_query - add autocommit parameter to support commands that can't be run inside a transaction block (https://github.com/ansible/ansible/pull/58704) - postgresql_user - Add the new parameter ``groups`` (https://github.com/ansible/ansible/pull/60638). - psrp - Added the ``ansible_psrp_reconnection_backoff`` variable to control the reconnection backoff setting - https://github.com/ansible/ansible/issues/58714 - purefa_ra - change resulting fact dict from I(ansible_facts) to I(ra_info) (https://github.com/ansible/ansible/pull/61355) - purefa_user - change module parameter I(api_token) to I(api) and to stop clash with known variable. - purefa_user - change resulting fact dict from I(ansible_facts) to I(user_info) (https://github.com/ansible/ansible/pull/61353) - purefa_user - change resulting facts from I(api_token) to I(user_api) for clarity (https://github.com/ansible/ansible/pull/57588) - purefb_fs - Deprecate I(nfs) param and replace with I(nfsv3). Add params I(user_quota) and I(group_quota) (https://github.com/ansible/ansible/pull/59559) - purefb_s3user - change resulting fact dict from I(ansible_facts) to I(s3user_info) (https://github.com/ansible/ansible/pull/61356) - rabbitmq_binding - added missing SSL options for HTTP GET and DELETE requests - redhat_subscription - allow to set syspurpose attributes (https://github.com/ansible/ansible/pull/59850) - redhat_subscription - do not call ``subscribtion-manager`` command, when it is not necessary (https://github.com/ansible/ansible/pull/58665) - redhat_subscription - made code more testable (https://github.com/ansible/ansible/pull/58665) - refactor iSCSI network facts for AIX and HP-UX, add unit test, remove external grep call - removed previously deprecated ``get_md5`` option from M(stat) module. - roles and plugins in collections may now be stored in subdirectories under the roles or plugin-type dirs (https://github.com/ansible/ansible/pull/60682) - roles that define a collections search list in metadata will attempt to use the defined search list when resolving unqualified role names. - selectors2 - Update bundled copy of selectors2 from 1.1.0 to 1.1.1 (https://github.com/ansible/ansible/issues/55300) - selinux_special_filesystems config can be specified via environment variable ``ANSIBLE_SELINUX_SPECIAL_FS`` - setup - octal escape sequences are now evaluated for mount facts pulled from /etc/mtab - six - Update bundled copy of six from 1.11.0 to 1.12.0 (https://github.com/ansible/ansible/issues/55303) - syslog_json - Allow configuration of the syslog_json plugin via an Ansible configuration file. - update ansible-test default-test-container from version 1.9.1 to 1.9.2 - update ansible-test default-test-container from version 1.9.2 to 1.9.3 - update ansible-test default-test-container from version 1.9.3 to 1.10.1 - uri - Remove deprecated ``HEADER_`` support (https://github.com/ansible/ansible/issues/55310) - vApp setting can be set while VM creation in vmware_guest (https://github.com/ansible/ansible/issues/50617). - validate-modules - change numeric error codes to descriptive strings (https://github.com/ansible/ansible/pull/60711) - vcenter_folder - returns a dict instead of a string, the previous output is now in the 'msg' key - vcenter_folder - returns now the full path of the file in the new 'path' key - vmware - The VMware modules can now access a server behind a HTTP proxy (https://github.com/ansible/ansible/pull/52936) - vmware - reduces the memory usage during the object lookup - vmware_cluster - Refactor into several modules (vmware_cluster, vmware_cluster_drs, vmware_cluster_ha and vmware_cluster_vsan) - vmware_cluster_facts now supports tag facts (https://github.com/ansible/ansible/issues/46458). - vmware_cluster_ha - Remove a wrong parameter from an example in the documentation. - vmware_datastore_facts - When no datastore was found, returns an empty list. - vmware_datastore_maintenancemode - Raise an error if the datastore does not exist. - vmware_guest_disk module supports use_instance_uuid parameter since Ansible 2.8 (https://github.com/ansible/ansible/issues/56021). - vmware_guest_disk_facts module - added bus number of the SCSI controller to the output (https://github.com/ansible/ansible/pull/56442) - vmware_host_datastore - Ability to directly target a ESXi. - vmware_host_facts now supports tag facts (https://github.com/ansible/ansible/issues/46461). - vmware_portgroup accepts list of ESXi hostsystem. Modified get_all_host_objs API to accept list of hostsystems. - vmware_vm_facts supports folder as a filter to gather fact for VM (https://github.com/ansible/ansible/issues/56125). - vsphere_copy - The ``host`` and ``login`` parameters are deprecated, use `hostname` and ``username`` like for the other VMware modules. - vsphere_copy - The module can now also be used with standalone ESXi. - vultr - the retry on failure functionality was changed to use an exponential backoff behaviour. - vultr_server - Implemented support for using the ID instead of a name to match a resource, especially useful for region, plan and OS type. - win_domain_user - Allow to only set password when it actually changed (https://github.com/ansible/ansible/issues/58246) - win_domain_user - Make the query user try catch block more accurate for missing identity (https://github.com/ansible/ansible/issues/57719) - win_domain_user and win_domain_group: add created result boolean (https://github.com/ansible/ansible/issues/57547) - win_xml - Added 'count' module parameter which will return number of nodes matched by xpath if set to yes/true - win_xml - Behaviour change, fragment no longer required when processing element type nodes and state=absent. - win_xml - Behaviour change, module now processes all nodes specified by xpath, not just first encountered. - win_xml - Some output messages worded differently now the module uses a generic method to save changes. - xenserver_guest - wait_for_ip_address is now ignored when state=absent (https://github.com/ansible/ansible/issues/55348). - xml - Introduce ``insertbefore`` and ``insertafter`` to specify the position (https://github.com/ansible/ansible/pull/44811) - yum - set lock_timeout to a sane default (30 seconds, as is the cli) - zabbix_action - ``esc_period`` is now required to reflect actual Zabbix API call - zabbix_action - support for new condition operators (``matches``, ``does not match``, ``Yes``, ``No``) added in Zabbix 4.0 and Zabbix 4.2 (https://www.zabbix.com/documentation/4.2/manual/api/reference/action/object#action_filter_condition) - zabbix_screen - added an option to sort hosts on a zabbix screen alphabetically - zabbix_screen - updated documentation and module arguments - zabbix_template - it is no longer accepted to provide parameters `template_name` and `template_groups` when using `template_json` - zabbix_template - new parameter `dump_format` allows user to specify in which format (JSON or XML) should a template be exported from Zabbix - zabbix_template - new parameter `template_xml` adds support for importing templates from XML documents - zabbix_template - now allows import of multiple templates at once when using `template_json` or `template_xml` parameters - zabbix_template - parameter `template_groups` is now required when passing `template_name` and template is being created for the first time. Not required when template is being updated. - zabbix_template - parameters `template_name`, `template_json` and `template_xml` are now mutually exclusive - zabbix_template - template can now be updated with just a `clear_templates` parameter without requiring any additional parameters to be passed (see examples of the module) - zfs - Remove deprecated key=value 'option' (https://github.com/ansible/ansible/issues/55318) Deprecated Features ------------------- - Deprecated ``net_interface``, ``net_linkagg``, ``net_lldp_interface``, ``net_l2_interface``, ``net_vlan``, ``net_l3_interface``, ``net_vrf``, ``net_lldp``, ``net_banner``, ``net_logging``, ``net_system``, ``net_user``, and ``net_static_route``. Please use either the equivalent network role or the platform-specific resource module. - Deprecated setting the verbosity before the sub command for ``ansible-galaxy`` and ``ansible-vault``. Set the verbosity level after the sub command, e.g. do ``ansible-galaxy init -v`` and not ``ansible-galaxy -v init``. - aws_kms - Deprecate mode, role_name, role_arn, grant_types and policy_clean_invalid_entries in favour of policy - vmware_cluster - Deprecate DRS, HA and VSAN configuration in favour of new modules vmware_cluster_drs, vmware_cluster_ha and vmware_cluster_vsan. Removed Features (previously deprecated) ---------------------------------------- - redis_kv - Remove deprecated lookup plugin (https://github.com/ansible/ansible/issues/59948) Security Fixes -------------- - **security issue** - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856) - **security issue** - Redact cloud plugin secrets in ansible-test when running integration tests using cloud plugins. Only present in 2.9.0b1. - **security issue** - TaskExecutor - Ensure we don't erase unsafe context in TaskExecutor.run on bytes. Only present in 2.9.0beta1 (https://github.com/ansible/ansible/issues/62237) - **security issue** - properly hide parameters marked with ``no_log`` in suboptions when invalid parameters are passed to the module (CVE-2019-14858) Bugfixes -------- - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading - Add no_log to credentials field to avoid disclosures, also switch type to jsonarg to avoid having users responsible for transformations. - Add nxos_telemetry replaced state (https://github.com/ansible/ansible/pull/62368). - Allow config options that are type boolean to default to None rather than only True or False. - AnsiballZ - Use ``importlib`` to load the module instead of ``imp`` on Python3+ - Ansible.Basic - Fix issue when deserilizing a JSON string that is not a dictionary - https://github.com/ansible/ansible/pull/55691 - AnsibleDumper - Add a representer for AnsibleUnsafeBytes (https://github.com/ansible/ansible/issues/62562). - Be sure to use the active state when checking for any_errors_fatal - CLI - the `ANSIBLE_PLAYBOOK_DIR` envvar or `playbook_dir` config can now substitute for the --playbook-dir arg on CLIs that support it (https://github.com/ansible/ansible/issues/59464) - Change enable to enabled for junos_interfaces and junos_lldp_interfaces module (https://github.com/ansible/ansible/issues/62319) - Check action plugin names for network (eos, ios, iosxr, junos, netconf, nxos) modules properly load with collections. - Clarify roles path target behaviour for ansible-galaxy - Correctly handle delegate_to hostnames in loops (https://github.com/ansible/ansible/issues/59650) - Do not re-use remote_user from previous loop iteration (https://github.com/ansible/ansible/issues/58876) - Ensure connection with remote host is created before invoking execute_command() from module side (https://github.com/ansible/ansible/issues/61596) - Fix --diff to produce output when creating a new file (https://github.com/ansible/ansible/issues/57618) - Fix PSLint errors regarding global vars (PSAvoidGlobalVars) - Fix SSL protocol references in the ``mqtt`` module to prevent failures on Python 2.6. - Fix delete to pass the right parameters(https://github.com/ansible/ansible/pull/62525) - Fix doc for proxy_username and proxy_password in yum_repository.py (https://github.com/ansible/ansible/pull/59068). - Fix firewalld source option handling to be exclusive (https://github.com/ansible/ansible/issues/55683) - Fix for junos cli_config replace option (https://github.com/ansible/ansible/pull/62131). - Fix foreman inventory plugin when inventory caching is disabled - Fix https://github.com/ansible/galaxy-dev/issues/96 Add support for automation-hub authentication to ansible-galaxy - Fix ios_lldp_global enable to enabled(https://github.com/ansible/ansible/pull/62420) - Fix issue where the collection loader tracebacks if ``collections_paths = ./`` is set in the config - Fix loading network facts modules for smart gathering (https://github.com/ansible/ansible/pull/59856). - Fix media type of RESTCONF requests. - Fix negated all,min for network_facts and remove choices (https://github.com/ansible/ansible/pull/61362). - Fix nxos_bfd_global cmd order and tests (https://github.com/ansible/ansible/pull/61943). - Fix nxos_l3_interfaces module deleting mgmt IP (https://github.com/ansible/ansible/pull/62545). - Fix privilege escalation support for the docker connection plugin when credentials need to be supplied (e.g. sudo with password). - Fix regression warning on jinja2 delimiters in when statements (https://github.com/ansible/ansible/issues/56830) - Fix regression when including a role with a custom filter (https://github.com/ansible/ansible/issues/57351) - Fix regular expression to support parsing more than 10 network interfaces in RouterOS output (https://github.com/ansible/ansible/pull/62346) - Fix strategy functions that update inventory and back 'add_host' and 'group_by' actions. - Fix support for Specialized images in Azure Shared Image Gallery - Fix the issue that disk is not activated after its creation (https://github.com/ansible/ansible/issues/57412) - Fix the upstream rpm spec file. The ansible-test package requirement on the main ansible package was formatted incorrectly. - Fix traceback error in IOS and IOSXR when ran with empty config (https://github.com/ansible/ansible/pull/62400) - Fix traceback session uid error(https://github.com/ansible/ansible/pull/62523) - Fix traceback with empty config error msg(https://github.com/ansible/ansible/pull/62538) - Fixed a traceback in the ``git`` module when using an absolute path for the ``repo`` parameter. - Fixed ce_bgp,first the pattern to be searched is need to change, otherwise there is no data to be found.then after running a task with this module,it will not show 'changed' correctly. - Fixed ce_bgp_af,'changed' of module run result is not showed, however the module runs correctly,and updates commands if result is not correct. - Fixed ce_bgp_neighbor, find specify bgp as information, as number is necessary and so on. - Fixed ce_bgp_neighbor_af,update commands should be showed correctly, and xml for filter and edit are also re-factor as the software version upgrade and update. - Fixed intermittent "JSON object must be str, bytes or bytearray, not list" error with EOS over httpapi - Fixed loading namespaced documentation fragments from collections. - Fixed role's hash_params behavior to not union (https://github.com/ansible/ansible/issues/20596). - Fixed some PSlint warnings - For package_facts, correct information about apt being missing and fix missing attribute. - Gather facts should use gather_subset config by default. - Handle IndexError while parsing empty limit file (https://github.com/ansible/ansible/issues/59695). - Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156 - Inventory sources now respect setting ``hash_behaviour``. Previously each new inventory source would overwrite existing vars, even when ``hash_behavior`` was set to ``merge``. - Make EOS / FRR / IOS / IOSXR bgp modules collection safe - Make max_connections parameter work again in vmware_guest module (https://github.com/ansible/ansible/pull/58061). - Module tracebacks are now recognized on stdout and stderr, intead of just on stderr. - Only warn for bare variables if they are not type boolean (https://github.com/ansible/ansible/issues/53428) - Pipelining now works with the buildah plugin. - Redfish - Instead of building the Power URI from assumptions about URI structure, assemble from @odata.id information in the Chassis resource (https://github.com/ansible/ansible/issues/56137). - Remove case sensitivity on interface names from eos_interfaces, eos_l2_interfaces, eos_l3_interfaces, eos_lacp_interfaces, eos_lag_interfaces, and eos_lldp_interfaces. - Remove lingering ansible vault cipher (AES) after it was removed in - Remove unused import from iosxr l3_interfaces facts library. - Removed unused FactArgs imports from eos / ios / iosxr / junos / vyos facts modules - Return commands key instead of xml in result for junos resource module (https://github.com/ansible/ansible/issues/61773) - SECURITY Fixed the python interpreter detection, added in 2.8.0alpha1, to properly mark the returned data as untemplatable. This prevents a malicious managed machine from running code on the controller via templating. - Stabilize nxos initiated copy for nxos_file_copy plugin (https://github.com/ansible/ansible/pull/62355). - TaskExecutor - Create new instance of the action plugin on each iteration when using until (https://github.com/ansible/ansible/issues/57886) - TaskQueueManager - Ensure ``has_dead_workers`` can function, by using the correct reference, and only allow an exit code of 0. (https://github.com/ansible/ansible/issues/29124) - The ansible-galaxy publish command was using an incorrect URL for v3 servers. The configuration for v3 servers includes part of the path fragment that was added in the new test. - To fix ios_l3_interfaces resource module round trip failure(https://github.com/ansible/ansible/pull/61642) - To rename CheckPoint to Check_Point due to CP legal reasons. (https://github.com/ansible/ansible/pull/61172). - Unit tests for cp_cp_mgmt_discard - Unit tests for cp_mgmt_access_layer - Unit tests for cp_mgmt_access_layer_facts - Unit tests for cp_mgmt_access_role - Unit tests for cp_mgmt_access_role_facts - Unit tests for cp_mgmt_access_rule - Unit tests for cp_mgmt_access_rule_facts - Unit tests for cp_mgmt_address_range - Unit tests for cp_mgmt_address_range_facts(https://github.com/ansible/ansible/pull/62338) - Unit tests for cp_mgmt_administrator - Unit tests for cp_mgmt_administrator_facts - Unit tests for cp_mgmt_application_group - Unit tests for cp_mgmt_application_group_facts - Unit tests for cp_mgmt_application_site - Unit tests for cp_mgmt_application_site_category - Unit tests for cp_mgmt_application_site_category_facts - Unit tests for cp_mgmt_application_site_facts - Unit tests for cp_mgmt_assign_global_assignment - Unit tests for cp_mgmt_dns_domain - Unit tests for cp_mgmt_dns_domain_facts - Unit tests for cp_mgmt_dynamic_object - Unit tests for cp_mgmt_dynamic_object_facts - Unit tests for cp_mgmt_exception_group - Unit tests for cp_mgmt_exception_group_facts(https://github.com/ansible/ansible/pull/62216) - Unit tests for cp_mgmt_global_assignment - Unit tests for cp_mgmt_global_assignment - Unit tests for cp_mgmt_global_assignment_facts - Unit tests for cp_mgmt_global_assignment_facts - Unit tests for cp_mgmt_group - Unit tests for cp_mgmt_group - Unit tests for cp_mgmt_group_facts - Unit tests for cp_mgmt_group_facts - Unit tests for cp_mgmt_group_with_exclusion - Unit tests for cp_mgmt_group_with_exclusion - Unit tests for cp_mgmt_group_with_exclusion_facts - Unit tests for cp_mgmt_group_with_exclusion_facts - Unit tests for cp_mgmt_host - Unit tests for cp_mgmt_host - Unit tests for cp_mgmt_host_facts - Unit tests for cp_mgmt_host_facts - Unit tests for cp_mgmt_install_policy - Unit tests for cp_mgmt_multicast_address_range - Unit tests for cp_mgmt_multicast_address_range_facts - Unit tests for cp_mgmt_multicast_address_range_facts - Unit tests for cp_mgmt_network - Unit tests for cp_mgmt_package - Unit tests for cp_mgmt_package - Unit tests for cp_mgmt_package_facts - Unit tests for cp_mgmt_package_facts - Unit tests for cp_mgmt_publish - Unit tests for cp_mgmt_put_file - Unit tests for cp_mgmt_run_ips_update - Unit tests for cp_mgmt_run_script(https://github.com/ansible/ansible/pull/62322) - Unit tests for cp_mgmt_security_zone - Unit tests for cp_mgmt_security_zone - Unit tests for cp_mgmt_security_zone_facts - Unit tests for cp_mgmt_security_zone_facts - Unit tests for cp_mgmt_service_dce_rpc - Unit tests for cp_mgmt_service_dce_rpc - Unit tests for cp_mgmt_service_dce_rpc_facts - Unit tests for cp_mgmt_service_dce_rpc_facts - Unit tests for cp_mgmt_service_group - Unit tests for cp_mgmt_service_group - Unit tests for cp_mgmt_service_group_facts(https://github.com/ansible/ansible/pull/62213) - Unit tests for cp_mgmt_service_group_facts(https://github.com/ansible/ansible/pull/62214) - Unit tests for cp_mgmt_service_icmp - Unit tests for cp_mgmt_service_icmp6 - Unit tests for cp_mgmt_service_icmp6_facts - Unit tests for cp_mgmt_service_icmp_facts - Unit tests for cp_mgmt_service_other - Unit tests for cp_mgmt_service_other_facts - Unit tests for cp_mgmt_service_rpc - Unit tests for cp_mgmt_service_rpc_facts - Unit tests for cp_mgmt_service_sctp - Unit tests for cp_mgmt_service_sctp_facts - Unit tests for cp_mgmt_service_tcp - Unit tests for cp_mgmt_service_tcp_facts - Unit tests for cp_mgmt_service_udp - Unit tests for cp_mgmt_service_udp_facts - Unit tests for cp_mgmt_simple_gateway - Unit tests for cp_mgmt_simple_gateway_facts - Unit tests for cp_mgmt_tag - Unit tests for cp_mgmt_tag_facts(https://github.com/ansible/ansible/pull/62215) - Unit tests for cp_mgmt_threat_exception - Unit tests for cp_mgmt_threat_exception_facts - Unit tests for cp_mgmt_threat_protection_override(https://github.com/ansible/ansible/pull/62328) - Unit tests for cp_mgmt_threat_rule - Unit tests for cp_mgmt_threat_rule_facts - Unit tests for cp_mgmt_verfiy_policy - Unit tests for the case with more than 10 network interfaces - Use async poll default setting for play tasks also, previously in only affected adhoc ansible. - Use templated loop_var/index_var when looping include_* (https://github.com/ansible/ansible/issues/58820) - _purefa_facts - Fix missing API version check when calling I(admins) or I(all) as the subset - acme_certificate - Only return challenges in ``challenge_data`` and ``challenge_data_dns`` which are not yet valid. - acme_certificate - improve compatibility when finalizing ACME v2 orders. Fixes problem with Buypass' ACME v2 testing endpoint. - acme_certificate - use ``ipaddress`` module bundled with Ansible for normalizations needed for OpenSSL backend. - add options type info for Redfish modules (https://github.com/ansible/ansible/issues/54688) - adhoc CLI - when playbook-dir is specified and inside a collection, use default collection logic to resolve modules/actions - allow external collections to be created in the 'ansible' collection namespace (https://github.com/ansible/ansible/issues/59988) - allow include_role to work with ansible command - allow loading inventory plugins adjacent to playbooks - allow python_requirements_facts to report on dependencies containing dashes - ansible-connection persists even after playbook run is completed (https://github.com/ansible/ansible/pull/61591) - ansible-doc now properly handles removed modules/plugins - ansible-galaxy - Stop appendding '/api' to configured galaxy urls. Special case migrated configs. - ansible-galaxy - Default collection install path to first path in COLLECTIONS_PATHS (https://github.com/ansible/ansible/pull/62870) - ansible-galaxy - Ensure we preserve the new URL when appending ``/api`` for the case where the GET succeeds on galaxy.ansible.com - ansible-galaxy - Fix url building to not truncate the URL (https://github.com/ansible/ansible/issues/61624) - ansible-galaxy - Handle the different task resource urls in API responses from publishing collection artifacts to galaxy servers using v2 and v3 APIs. - ansible-galaxy cli - fixed ``--version`` argument - ansible-galaxy role - Fix issue where ``--server`` was not being used for certain ``ansible-galaxy role`` actions - https://github.com/ansible/ansible/issues/61609 - ansible-inventory - Properly hide arguments that should not be shown (https://github.com/ansible/ansible/issues/61604) - ansible-inventory - Restore functionality to allow ``--graph`` to be limited by a host pattern - ansible-podman connection plugin - Fix case when mount of podman container fails and files can't be copied to/from container. Also add error handling in case of failed podman commands. (https://github.com/ansible/ansible/issues/57740) - ansible-test coverage - Fix the ``--all`` argument when generating coverage reports - https://github.com/ansible/ansible/issues/62096 - ansible-test import sanity test now consistently reports errors against the file being tested. - ansible-test import sanity test now consistently reports warnings as errors. - ansible-test import sanity test now properly handles relative imports. - ansible-test import sanity test now properly invokes Ansible modules as scripts. - ansible-test now correctly enumerates submodules when a collection resides below the repository root - ansible-test now correctly excludes the test results temporary directory when copying files from the remote test system to the local system - ansible-test now correctly installs the requirements specified by the collection's unit and integration tests instead of the requirements specified for Ansible's own unit and integration tests - ansible-test now creates its integration test temporary directory within the collection so ansible-playbook can properly detect the default collection - ansible-test now creates output directories as needed for powershell coverage output before generating reports - ansible-test now loads the collection loader plugin early enough for ansible_collections imports to work in unit test conftest.py modules - ansible-test now properly activates the vcenter plugin for vcenter tests when docker is available - ansible-test now properly activates virtual environments created using the --venv option - ansible-test now properly creates a virtual environment using ``venv`` when running in a ``virtualenv`` created virtual environment - ansible-test now properly excludes the ``tests/output/`` directory from code coverage - ansible-test now properly handles creation of Python execv wrappers when the selected interpreter is a script - ansible-test now properly handles warnings for removed modules/plugins - ansible-test now properly ignores the ``tests/output//`` directory when not using git - ansible-test now properly installs requirements for multiple Python versions when running sanity tests - ansible-test now properly registers its own code in a virtual environment when running from an install - ansible-test now properly searches for ``pythonX.Y`` instead of ``python`` when looking for the real python that created a ``virtualenv`` - ansible-test now properly sets PYTHONPATH for tests when running from an Ansible installation - ansible-test now properly sets ``ANSIBLE_PLAYBOOK_DIR`` for integration tests so unqualified collection references work for adhoc ``ansible`` usage - ansible-test now shows sanity test doc links when installed (previously the links were only visible when running from source) - ansible-test now updates SSH keys it generates with newer versions of ssh-keygen to function with Paramiko - ansible-vault - fix error when multiple vault password files are specified (https://github.com/ansible/ansible/issues/57172) - ansible.basics - fix core C# recursive call when logging fails (e.g. if insufficient permissions are held) (https://github.com/ansible/ansible/pull/59503) - apt - Fixed the issue the cache being updated while auto-installing its dependencies even when ``update_cache`` is set to false. - apt - fixed issue where allow_unauthenticated did not apply to dependencies when installing a deb directly - apt - strip whitespaces in package names (https://github.com/ansible/ansible/issues/55741) - apt_facts - fix performance regression when getting facts about apt packages (https://github.com/ansible/ansible/issues/60450) - apt_repository - Fix crash caused by ``cache.update()`` raising an ``IOError`` due to a timeout in ``apt update`` (https://github.com/ansible/ansible/issues/51995) - async - Fix async callback plugins to allow async output to be displayed when running command/shell (https://github.com/ansible/ansible/issues/15988) - avoid choosing an unreadable ansible.cfg just because it exists. - aws_ec2 inventory plugin - fixed race condition when trying to fetch IAM instance profile (role) credentials (https://github.com/ansible/ansible/pull/59638) - aws_kms - Update key policy when key already exists - aws_kms - Use ARN rather than ID so that cross-account changes function - aws_kms - fix exception when only Key ID is passed - aws_kms module ensure tag keys have their case preserved by avoiding a second unnecessary format conversion - aws_s3 - Improve usability when the execution host lacks MD5 support (e.g. due to FIPS-140-2). - aws_s3 - Try to wait for the bucket to exist before setting the access control list. - aws_ses_identity module works when region is provided using config or environment variables rather than the region parameter (https://github.com/ansible/ansible/issues/51531) - azure - fix for specialized images in vmss - azure_rm_dnsrecordset_info - no longer returns empty ``azure_dnsrecordset`` facts when called as ``_info`` module. - azure_rm_networkinterface_info - Fix up instances when ``ansible_facts`` is returned for the older ``_facts`` alias. - azure_rm_resourcegroup_info - no longer returns ``azure_resourcegroups`` facts when called as ``_info`` module. - azure_rm_securitygroup_info - Fix up instances when ``ansible_facts`` is returned for the older ``_facts`` alias. - azure_rm_storageaccount_info - no longer returns empty ``azure_storageaccounts`` facts when called as ``_info`` module. - azure_rm_virtualmachineimage_info - no longer returns empty ``azure_vmimages`` facts when called as ``_info`` module. - azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ``ansible_facts`` result, when called as ``_info`` module. - azure_rm_virtualnetwork_info - no longer returns empty ``azure_virtualnetworks`` facts when called as ``_info`` module. - become - Provide nice error when the shell plugin is incompatible with the configured become plugin (https://github.com/ansible/ansible/issues/57770) - ce_acl_interface - Strict regularity can't find anything. - ce_dldp - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove. - ce_dldp_interface - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove. - ce_interface - It is not a good way to find data from a xml tree by regular. lin379 line405. - ce_interface - line 750,779 Some attributes of interfaces are missing, 'ifAdminStatus', 'ifDescr', 'isL2SwitchPort'.So add them when get interface status. - ce_ospf - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61684) - ce_snmp_location - fixed an out of array index error. - ce_snmp_target_host - None has no 'lower()' attribute. - ce_snmp_target_host - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61842) - ce_snmp_traps - update to fix some bugs - Contrast before and after adding configuration. (https://github.com/ansible/ansible/pull/61843) - ce_static_route - update to fix some bugs - Add some update statements. (https://github.com/ansible/ansible/pull/62498) - ce_stp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (https://github.com/ansible/ansible/pull/61774) - ce_vxlan_arp - override 'get_config' to show specific configuration. - ce_vxlan_arp - update to fix some bugs - Modifying regular expressions. (https://github.com/ansible/ansible/pull/61995) - ce_vxlan_gateway - override 'get_config' to show specific configuration. - ce_vxlan_global - Network_cli and netconf should be not mixed together, otherwise something bad will happen. Function get_nc_config uses netconf and load_config uses network_cli. - ce_vxlan_global - line 242 , bd_info is a string array,and it should be 'extend' operation. - ce_vxlan_global - line 423, 'if' and 'else' should set a different value. if 'exist', that value is 'enable'. - ce_vxlan_global - line 477. To get state of result, if it is changed or not. - ce_vxlan_tunnel - Network_cli and netconf should be not mixed together, otherwise something bad will happen. Function get_nc_config uses netconf and load_config uses network_cli. - ce_vxlan_vap - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove. - ce_vxlan_vap - update to fix some bugs - Modify the Operator Difference between Python 2 and Python 3. (https://github.com/ansible/ansible/pull/61996) - cgroup_perf_recap - When not using file_per_task, make sure we don't prematurely close the perf files - clarify error messages for 'auto' and missing libs, add missing lib msg for rpm. - cloudformation_info - Fix a KeyError returning information about the stack(s). - collection loader - ensure Jinja function cache is fully-populated before lookup - collection loader - fixed relative imports on Python 2.7, ensure pluginloader caches use full name to prevent names from being clobbered (https://github.com/ansible/ansible/pull/60317) - combine filter - Validate that undefined variables aren't used (https://github.com/ansible/ansible/issues/55810). - config - encoding failures on config values should be non-fatal (https://github.com/ansible/ansible/issues/63310) - constructed - Add a warning for the change in behavior in the sanitization of the groups option. - consul_session - ``sessions`` returned value is a list even though no sessions were found - consul_session - don't ignore ``validate_certs`` parameter - consul_session: don't ignore ``scheme`` parameter - cowsay - Fix issue with an empty cow_whitelist (https://github.com/ansible/ansible/issues/45631) - cron and cronvar - use get_bin_path utility to locate the default crontab executable instead of the hardcoded /usr/bin/crontab. (https://github.com/ansible/ansible/pull/59765) - cron cronvar - only run ``get_bin_path()`` once - cronvar - use correct binary name (https://github.com/ansible/ansible/issues/63274) - crypto modules - improve error messages when required Python library is missing. - cyberarkpassword - fix result decoding issues with Python 3 (https://github.com/ansible/ansible/issues/52625) - digital_ocean_droplet - Fix creation of DigitalOcean droplets using digital_ocean_droplet module (https://github.com/ansible/ansible/pull/61655) - display - remove leading space when displaying WARNING messages - display underlying error when reporting an invalid ``tasks:`` block. - dnf - fix formatting of module name in error message (https://github.com/ansible/ansible/pull/58647) - dnf - fix wildcard matching for state: absent (https://github.com/ansible/ansible/issues/55938) - dnsmadeeasy - force the date to be rendered with C (POSIX system default) locale as English short date names are required by API - docker connection plugin - accept version ``dev`` as 'newest version' and print warning. - docker_* modules - behave better when requests errors are not caught by docker-py. - docker_* modules - improve error message when docker-py is missing / has wrong version. - docker_* modules - improve robustness when not handled Docker errors occur. - docker_compose - fix issue where docker deprecation warning results in ansible erroneously reporting a failure - docker_container - Add support for image lookups by digest. Fixes the detection of digest changes. - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available since docker-py 1.8.0, not 2.0.0 as assumed by the version check. - docker_container - add support for ``nocopy`` mode for volumes. - docker_container - correct variable used in warning message about default IP - docker_container - fix idempotency of ``log_options`` when non-string values are used. Also warn user that this is the case. - docker_container - fix network creation when ``networks_cli_compatible`` is enabled. - docker_container - fix port bindings with IPv6 addresses. - docker_container - improve error behavior when parsing port ranges fails. - docker_container - switch to ``Config`` data source for images (API>=1.21). - docker_container - use docker API's ``restart`` instead of ``stop``/``start`` to restart a container. - docker_host_info - ``network_filters`` needs docker-py 2.0.2, ``disk_usage`` needs docker-py 2.2.0. - docker_image - Add support for image lookups by digest. Fixes the detection of digest changes. - docker_image - if ``build`` was not specified, the wrong default for ``build.rm`` is used. - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the module failed. - docker_image - module failed when ``source: build`` was set but ``build.path`` options not specified. - docker_image - validate ``tag`` option value. - docker_image_info - Add support for image lookups by digest. Fixes the detection of digest changes. - docker_login - correct broken fix for https://github.com/ansible/ansible/pull/60381 which crashes for Python 3. - docker_login - report change on successful logout (https://github.com/ansible/ansible/issues/59232) - docker_network module - fix idempotency when using ``aux_addresses`` in ``ipam_config``. - docker_swarm_service - Change the type of options ``gid`` and ``uid`` on ``secrets`` and ``configs`` to ``str``. - docker_swarm_service - allow the same port to be published both with TCP and UDP. - docker_swarm_service - fix resource lookup if mounts.source="". - docker_swarm_service_info - work around problems with older docker-py versions such as 2.0.2. - documented ``ignore`` option for ``TRANSFORM_INVALID_GROUP_CHARS`` - dzdo did not work with password authentication - ec2_group - Don't truncate the host bits off of IPv6 CIDRs. CIDRs will be passed thru to EC2 as-is provided they are valid IPv6 representations. (https://github.com/ansible/ansible/issues/53297) - ec2_group - Fix traceback sorting dictionaries using Python 3 and ensure rules shown by diff mode are in a consistent order. - ec2_instance - Ensures ``ebs.volume_size`` and ``ebs.iops`` are ``int`` to avoid issues with Jinja2 templating - ec2_instance - make Name tag idempotent (https://github.com/ansible/ansible/pull/55224) - ec2_launch_template - Only 'volume' and 'instance' are valid resource types for tag specifications. - ecs_certificate - Always specify header ``connection: keep-alive`` for ECS API connections. - ecs_certificate - Fix formatting of contents of ``full_chain_path``. - ensure all cases of a None remote/become user are covered. - ensure module results and facts are marked untrusted as templates for safer use within the same task - ensure run_command passes bytes to Popen, which is what it expects. - fact_cache - Define the first_order_merge method for the legacy FactCache.update(key, value). - facts - change to use boot_time on a solaris OS to report correct uptime (https://github.com/ansible/ansible/issues/53635) - facts - handle situation where ``ansible_architecture`` may not be defined (https://github.com/ansible/ansible/issues/55400) - facts - properly detect is_chroot on XFS for non-root users (https://github.com/ansible/ansible/issues/56437) - file - Fix setting relative paths for hard links (https://github.com/ansible/ansible/issues/55971) - file - fix setting attributes for symlinked file (https://github.com/ansible/ansible/issues/56928) - file - return more useful error message for recursion error (https://github.com/ansible/ansible/issues/56397) - find - clarify description of ``contains`` (https://github.com/ansible/ansible/issues/61983) - firewalld - enable the firewalld module to function offline with firewalld version 0.7.0 and newer (https://github.com/ansible/ansible/issues/63254) - first_found - Un-deprecate ``skip``, as the alternative of ``errors`` does not work with ``with_first_found`` and only use of ``lookup`` (https://github.com/ansible/ansible/issues/58942) - fix if equals error code command is not found(https://github.com/ansible/ansible/pull/62529) - fix incorrect uses of to_native that should be to_text instead. - fixed collection-based plugin loading in ansible-connection (eg networking plugins) - gather_facts - Clean up tmp files upon completion (https://github.com/ansible/ansible/issues/57248) - gather_facts - Prevent gather_facts from being verbose, just like is done in the normal action plugin for setup (https://github.com/ansible/ansible/issues/58310) - gather_facts now correctly passes back the full output of modules on error and skipped, fixes - gcp_compute - Speed up dynamic invetory up to 30x. - get_url - Don't treat no checksum as a checksum match (https://github.com/ansible/ansible/issues/61978) - gitlab modules - Update version deprecations to use strings instead of integers so that ``2.10`` isn't converted to ``2.1``. (https://github.com/ansible/ansible/pull/55395) - gitlab_runner - Fix idempotency when creating runner (https://github.com/ansible/ansible/issues/57759) - group - The group module errored of if the gid exists with the same group name. This prevents reruns of the playbook. This fixes a regression introduced by 4898b0a. - group - properly detect duplicate GIDs when local=yes (https://github.com/ansible/ansible/issues/56481) - handlers - Cache templated handler name on included handlers to avoid later templating errors (https://github.com/ansible/ansible/issues/58769) - handlers - Only notify a handler if the handler is an exact match by ensuring `listen` is a list of strings. (https://github.com/ansible/ansible/issues/55575) - hcloud_volume - Fix idempotency when attaching a server to a volume. - hostname - Readded support for Cumulus Linux which broke in v2.8.0 (https://github.com/ansible/ansible/pull/57493) - hostname - fix regression with Oracle Linux (https://github.com/ansible/ansible/issues/42726) - hostname - make module work on CoreOS, Oracle Linux, Clear Linux, OpenSUSE Leap, ArchARM (https://github.com/ansible/ansible/issues/42726) - iam_password_policy - Fix AWS/boto3 errors when setting no password expiration - iam_password_policy no longer throws errors when you don't set pw_reuse_prevent - iam_password_policy now only returns changed when the policy changes - ibm_storage - Added a check for null fields in ibm_storage utils module. - include_tasks - whitelist ``listen`` as a valid keyword (https://github.com/ansible/ansible/issues/56580) - includes - Ensure to use the correct filename when AnsibleFileNotFound is encountered (https://github.com/ansible/ansible/issues/58436) - iosxr - Fix random idempotence issues with iosxr_lag_interfaces Resource Module (https://github.com/ansible/ansible/pull/62998). - iosxr - support cases where a normal commit operation also throws a prompt (https://github.com/ansible/ansible/pull/62132) - iosxr_l3_interfaces - Fixes IOSXR L3 which was having idempotent issue raised in issue #61844, also adding a RTT for iosxr_l3_interfaces resource module - ipaddr: prevent integer indices from being parsed as ip nets - java_keystore - Use SHA256 to check the fingerprints' certs. The module is compatible with java<=8 (SHA1 by default) and Java>=9 (SHA256 by default) now. - junos_config - Add commands alias to lines option to be in sync with other platforms (https://github.com/ansible/ansible/pull/62221) - junos_config - allow validate config before committing to running configuration (https://github.com/ansible/ansible/pull/61969) - junos_user - Add no_log=True to junos_user `encrypted_password` (https://github.com/ansible/ansible/pull/62184) - k8s - ensure k8s returns result of a resource update as it is at the end of the wait period - k8s - ensure that apply works with check mode. Bumps minimum openshift version for apply to 0.9.2. - k8s - ensure wait_condition works when Status is Unknown - k8s - resource updates applied with force work correctly now - k8s module - fix for case when resource definition yaml ended with 3 dashes - keep results subset also when not no_log. - kubevirt: apply wait_sleep fix from devel to not fail on missing param - lineinfile - fix a race / file descriptor leak when writing the file (https://github.com/ansible/ansible/issues/57327) - lvg - Fixed warning shown when using default value for pesize about conversion from int to str. - machinectl become plugin - correct bugs which induced errors on plugin usage - make command module more resilient unicode errors. Also to fs errors. - meraki_config_template - Don't query all networks unless needed. - meraki_ssid - Improved documentation about parameter dependencies. - meraki_ssid - Provides more accurate change results for some operations. - meraki_static_route - Module would make unnecessary API calls to Meraki when ``net_id`` is specified in task. - meraki_static_route - Module would make unnecessary API calls to Meraki when ``net_id`` is specified in task. - meraki_switchport - improve reliability with native VLAN functionality. - meraki_syslog - Module would ignore net_id parameter if passed. - meraki_vlan - Module would make unnecessary API calls to Meraki when net_id is specified in task. - module_defaults - Added aws_codebuild, aws_codecommit, aws_codepipeline, aws_secret, aws_ses_rule_set, cloudformation_stack_set, dms_endpoint, dms_replication_subnet_group, ec2_transit_gateway, ec2_transit_gateway_info, ecs_taskdefinition_facts, elb_target_info, iam_password_policy, redshift_cross_region_snapshots, s3_bucket_notification to the aws module_defaults group. - module_utils - remove unused objects from dict_transformations, removed, and sys_info modules (https://github.com/ansible/ansible/pull/59570) - mysql - Fix ``mysql_connect`` function's logic related to the ``cursor_class`` keyword argument (https://github.com/ansible/ansible/pull/61832). - mysql_user: fix regression introduced when fixing MariaDB/MySQL multiple versions handling - nagios - Removed redundant type check which caused crashes. Guardrails added elsewhere in earlier change. - nagios module - Fix nagios module to recognize if ``cmdfile`` exists and is fifo pipe. - netbox - Fix missing implementation of `groups` option (https://github.com/ansible/ansible/issues/57688) - netbox_ip_address - Fixed issue where it would create duplicate IP addresses when trying to serialize the IP address object which doesn't have the ``.serialize()`` method. This should also prevent future duplicate objects being created if they don't have the ``.serialize()`` method as well. - network_cli - ensure connection is established before returning the current prompt - new code assumed role_versions always were present event though rest of code does not. - nmcli - fixed regression caused by commit b7724fd, github issue - npm - Validate that all passed options have proper types. - nxos_file_copy call get_capabilities to initiate device connection (https://github.com/ansible/ansible/pull/62103). - nxos_l2_interfaces fix for integration tests failing to setup layer2 (https://github.com/ansible/ansible/pull/61887). - nxos_lacp_interfaces fix integration test dependencies (https://github.com/ansible/ansible/pull/61947). - onepassword - fix onepassword lookup plugin failing on fields without a name or t property (https://github.com/ansible/ansible/pull/58308) - onepassword_facts - fix onepassword_facts module failing on fields without a name or t property (https://github.com/ansible/ansible/pull/58308) - openssh_keypair - The fingerprint return value was incorrectly returning a list of ssh-keygen output; it now returns just the fingerprint value as a string - openssh_keypair - add public key and key comment validation on change - openssh_keypair - make regeneration of valid keypairs with the ``force`` option possible, add better handling for invalid files - openssh_keypair - public key's file attributes (permissions, owner, group, etc.) are now set to the same values as the private key. - openssl_certificate - When provider is ``entrust``, use a ``connection: keep-alive`` header for ECS API connections. - openssl_certificate - ``invalid_at`` check was broken. - openssl_certificate - ``key_usage`` check was broken for ``pyopenssl`` backend. Its error message was wrong for the ``cryptography`` backend. - openssl_certificate - fix Subject Alternate Name comparison, which was broken for IPv6 addresses with PyOpenSSL, or with older cryptography versions (before 2.1). - openssl_certificate - fix private key passphrase handling for ``cryptography`` backend. - openssl_certificate - if both private key and CSR were specified, the idempotency check for ``selfsigned`` and ``ownca`` providers ignored the CSR. - openssl_certificate - improve behavior when required files are missing. - openssl_certificate - relative times did not work for ``pyopenssl`` backend under Python 3, and generally didn't work for ``valid_at`` and ``invalid_at`` for ``pyopenssl`` backend. - openssl_csr - SAN normalization for IP addresses for the pyOpenSSL backend was broken. - openssl_csr - the cryptography backend's idempotency checking for basic constraints was broken. - openssl_csr, openssl_csr_info - use ``ipaddress`` module bundled with Ansible for normalizations needed for pyOpenSSL backend. - openssl_pkcs12 - fixes crash when private key has a passphrase and the module is run a second time. - openssl_privatekey - ``secp256r1`` got accidentally forgotten in the curve list. - os_port - handle binding:vnic_type as optional (https://github.com/ansible/ansible/issues/55524, https://github.com/ansible/ansible/issues/55525) - os_quota - fix failure to set compute or network quota when volume service is not available - os_subnet - it is valid to specify an explicit ``subnetpool_id`` rather than ``use_default_subnetpool`` or ``cidr`` - ovirt_vm - fix for module failure on creation (https://github.com/ansible/ansible/issues/59385) - pass correct loading context to persistent connections - pass correct loading context to persistent connections other than local - pip - Remove the unused and undocumented option ``use_mirrors``. - pip - Validate that all items in the ``name`` option are strings. - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux (https://github.com/ansible/ansible/issues/56583) - plugin loader - Restore adding plugin loader playbook dir to ``Playbook`` in addition to ``PlaybookCLI`` to solve sub directory playbook relative plugins to be located (https://github.com/ansible/ansible/issues/59548) - podman_image - handle new output format for image build - podman_image_facts - do not fail if invalid or non-existant image name is provided (https://github.com/ansible/ansible/issues/57899) - postgresql modules - use ``module_utils.postgres.exec_sql`` function instead of ``__exec_sql`` method (https://github.com/ansible/ansible/pull/57674) - postgresql_idx - remove ``__exec_sql`` method and use ``module_utils.postgres.exec_sql`` instead (https://github.com/ansible/ansible/pull/57684) - postgresql_pg_hba - After splitting fields, merge authentication options back into a single field to prevent losing options beyond the first (https://github.com/ansible/ansible/issues/57505) - postgresql_pg_hba - Fix TypeError after which pg_hba.conf is wiped (https://github.com/ansible/ansible/issues/56430) - postgresql_privs - Fix incorrect views handling (https://github.com/ansible/ansible/issues/27327). - postgresql_slot - fixed sslrootcert mapping to psycopg2 connection string - postgresql_table - fix schema handling (https://github.com/ansible/ansible/pull/57391) - preserve actual ssh error when we cannot connect. - proxmox_kvm - fixed issue when vm has not yet a name item (https://github.com/ansible/ansible/issues/58194) - psexec - Fix issue where the Kerberos package was not detected as being available. - psexec - Fix issue where the ``interactive`` option was not being passed down to the library. - psrp - Fix blank newlines appearing before ``stdout`` when using ``script`` or ``raw`` with the ``psrp`` connection plugin - psrp - Fix issues when fetching large files causing a memory leak - https://github.com/ansible/ansible/issues/55239 - psrp - Fix issues with propagating errors back to Ansible with ``raw`` tasks - purefa_info - Fix missing API version check when calling I(admins) or I(all) as the subset - rabbitmq lookup plugin - Fix for rabbitmq lookups failing when using pika v1.0.0 and newer. - rabbitmq_policy - Add full check for rabbit policy changes (https://github.com/ansible/ansible/issues/29264) - rabbitmq_publish - Fix to ensure the module works correctly for pika v1.0.0 and later. (https://github.com/ansible/ansible/pull/61960) - rabbitmq_user - Handle non-zero rabbitmqctl exit codes (https://github.com/ansible/ansible/issues/56164) - rds_instance - Don't hardcode the license models because there are accepted values undocumented by AWS. Rely on the exception handling instead to provide a helpful error for invalid license models. - rds_instance no longer fails when passing neither storage_type nor iops - re allow empty plays for now, but add deprecation msg. - re-fix CLI help for module path, previous fix which was lost in parser switch - redfish_command - add If-Match etag header to Redfish PATCH requests (https://github.com/ansible/ansible/issues/56050) - redfish_command - make power commands idempotent (https://github.com/ansible/ansible/issues/55869) - redfish_facts - add MACAddress to properties fetched by Redfish GetNicInventory command - redhat_subscription - made code compatible with Python3 (https://github.com/ansible/ansible/pull/58665) - refactored into function and use in some action plugins to match actual module used, made precedence very clear in code. - regex tests - Fail with undefined error if the value is undefined (https://github.com/ansible/ansible/issues/12186) - remove all temporary directories created by ansible-config (https://github.com/ansible/ansible/issues/56488) - remove obsolete become mixin - removed chdir from action plugins when using local connection, moved into plugin itself to avoid future issues with threads. - removed_module - remove extra spaces from msg and docstring (https://github.com/ansible/ansible/pull/57209) - resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters. - route53_facts - the module did not advertise check mode support, causing it not to be run in check mode. - setup (Windows) - prevent setup module failure if Get-MachineSid fails (https://github.com/ansible/ansible/issues/47813) - setup.ps1 - Support non NETBIOS compliant hostnames (https://github.com/ansible/ansible/issues/54550) - several minor fixes to ansible logging, allow deterministic log name, better level matching, leaner setup. - show host_vars in ansible-inventory's --graph option. - ssh connection plugin - Ensure that debug messages are properly encoded as text - sts_assume_role - fix assertion text in integration test - suppress "default will change" warnings for ``TRANSFORM_INVALID_GROUP_CHARS`` setting when non-default option value is chosen - sysctl - check system values, not just sysctl.conf file, when determining state (https://github.com/ansible/ansible/pull/56153#issuecomment-514384922) - sysctl - fix err referenced before assignment (https://github.com/ansible/ansible/issues/58158) - sysctl: the module now also checks the output of STDERR to report if values are correctly set (https://github.com/ansible/ansible/pull/55695) - systemd - wait for a service which is in deactivating state when using ``state=stopped`` (https://github.com/ansible/ansible/pull/59471) - template lookup - restore variables between calls (https://github.com/ansible/ansible/issues/55113) - this fix result in no more traceback on empty config when state is 'merged', 'replaced' or 'overridden'. (https://github.com/ansible/ansible/pull/62518). - tower inventory plugin - fix TypeError when giving inventory_id as integer (https://github.com/ansible/ansible/issues/61333) - tower_job_wait - Fixed wrong variable specification in examples - tower_user - Fix to create user as a system auditor when specifying the `auditor` option (https://github.com/ansible/ansible/issues/54446) - ufw - correctly check status when logging is off (https://github.com/ansible/ansible/issues/56674) - uri - Handle multiple Content-Type headers correctly (https://github.com/ansible/ansible/pull/31238) - uri - always return a value for status even during failure (https://github.com/ansible/ansible/issues/55897) - urls - Handle redirects properly for IPv6 address by not splitting on ``:`` and rely on already parsed hostname and port values (https://github.com/ansible/ansible/issues/56258) - use versioned link generator to link correct version for seealso - user - allow 13 asterisk characters in password field without warning - user - create parent directories when the specified home path has parent directories that do not exist (https://github.com/ansible/ansible/issues/41393) - user - do not warn when using ``local: yes`` if user already exists (https://github.com/ansible/ansible/issues/58063) - user - omit incompatible options when operating in local mode (https://github.com/ansible/ansible/issues/48722) - user - properly parse the shadow file on AIX (https://github.com/ansible/ansible/issues/54461) - user - update docs to reflect proper way to remove account from all groups - vault - Fix traceback using Python2 if a vault contains non-ascii characters (https://github.com/ansible/ansible/issues/58351). - vfat - changed default value of selinux_special_filesystems to include vfat, the filesystem of ``/boot/efi`` on UEFI systems - vmware - Ensure we can use the modules with Python < 2.7.9 or RHEL/CentOS < 7.4, this as soon as ``validate_certs`` is disabled. - vmware - The VMware modules now enable the SSL certificate check unless ``validate_certs`` is ``false``. - vmware_guest accepts 0 MB of memory reservation, fix regression introduced via 193f69064fb40a83e3e7d2112ef24868b45233b3 (https://github.com/ansible/ansible/issues/59190). - vmware_vcenter_statistics - Fix some corner cases like increasing some interval and decreasing another at the same time. - vultr_server - Fix idempotency for options ``ipv6_enabled`` and ``private_network_enabled``. - warn user when attempting to use service with globs in systemd module. - we don't really need to template vars on definition as we do this on demand in templating. - win_acl - Change special id ref recognition to avoid language diff (https://github.com/ansible/ansible/issues/56757) - win_acl - Fix qualifier parser when using UNC paths - https://github.com/ansible/ansible/issues/55875 - win_become - Do not dispose of one of the logon tokens until after the process has run - win_chocolatey - Better support detecting multiple packages installed at different versions on newer Chocolatey releases - win_chocolatey - Install the specific Chocolatey version if the ``version`` option is set. - win_domain - Fix checking for a domain introduced in a recent patch - win_domain_controller - Do not fail the play without the user being able to catch dcpromo failing because of a pending reboot within a playbook using ignore_error or retry logic. - win_domain_group_membership - Fix missing @extra_vars on Get-ADObject to support different domain and credentials for retrieval (https://github.com/ansible/ansible/issues/57404) - win_domain_user - Do not hide error and stacktrace on failures - win_dsc - Be more lenient around the accepted DateTime values for backwards compatibility - https://github.com/ansible/ansible/issues/59667 - win_exec_wrapper - Be more defensive when it comes to getting unhandled exceptions - win_firewall_rule - Fix program var not expanding %SystemRoot% type vars (https://github.com/ansible/ansible/issues/44450) - win_get_url - Fix handling of restricted headers as per (https://github.com/ansible/ansible/issues/57880) - win_get_url - Fix proxy_url not used correctly (https://github.com/ansible/ansible/issues/58691) - win_hostname - Fix non netbios compliant name handling (https://github.com/ansible/ansible/issues/55283) - win_iis_virtualdirectory - Support recursive removal (https://github.com/ansible/ansible/issues/49755) - win_iis_website - site_id not used if no sites exist already and creating a new site (https://github.com/ansible/ansible/issues/47057) - win_pagefile - Fix idempotency when same settings as current (https://github.com/ansible/ansible/issues/57836) - win_pagefile - not using testPath - win_psmodule - Missing SkipPublisherCheck in Prerq installations - win_reboot - pass return value for ``test_command`` result when using the ``psrp`` connection plugin - win_reg_stat - fix issue when trying to check keys in ``HKU:\`` - https://github.com/ansible/ansible/issues/59337 - win_region - Fix the check for ``format`` when running on the ``psrp`` connection plugin - win_scheduled_task - Fix start/end bountry triggers to allow for timezone sync (https://github.com/ansible/ansible/issues/49327) - win_shell - Fix bug when setting ``args.executable`` to an executable with a space - win_user - Get proper error code when failing to validate the user's credentials - winrm - Fix issue when attempting to parse CLIXML on send input failure - xenserver_guest - fixed an issue where VM whould be powered off even though check mode is used if reconfiguration requires VM to be powered off. - xenserver_guest - proper error message is shown when maximum number of network interfaces is reached and multiple network interfaces are added at once. - xenserver_guest - when adding disks to a VM in powered on state, disks are now properly plugged/activated (https://github.com/ansible/ansible/issues/60693). - yum - Fix false error message about autoremove not being supported (https://github.com/ansible/ansible/issues/56458) - yum - gracefully handle failure case of enabling a non existent repo, as the yum cli does (Fixes https://github.com/ansible/ansible/issues/52582) - yum - handle special "_none_" value for proxy in yum.conf and .repo files (https://github.com/ansible/ansible/issues/56538) - yum - handle stale/invalid yum.pid lock file (https://github.com/ansible/ansible/issues/57189) New Plugins ----------- Cliconf ~~~~~~~ - eric_eccli - Use eccli cliconf to run command on Ericsson ECCLI platform - icx - Use icx cliconf to run command on Ruckus ICX platform Httpapi ~~~~~~~ - fortianalyzer - HttpApi Plugin for Fortinet FortiAnalyzer Appliance or VM - fortios - HttpApi Plugin for Fortinet FortiOS Appliance or VM Lookup ~~~~~~ - avi - Look up ``Avi`` objects. New Modules ----------- Cloud ~~~~~ amazon ^^^^^^ - aws_codebuild - Create or delete an AWS CodeBuild project - aws_codepipeline - Create or delete AWS CodePipelines - aws_netapp_cvs_FileSystems - NetApp AWS Cloud Volumes Service Manage FileSystem. - aws_netapp_cvs_active_directory - NetApp AWS CloudVolumes Service Manage Active Directory. - aws_netapp_cvs_pool - NetApp AWS Cloud Volumes Service Manage Pools. - aws_netapp_cvs_snapshots - NetApp AWS Cloud Volumes Service Manage Snapshots. - dms_endpoint - creates or destroys a data migration services endpoint - dms_replication_subnet_group - creates or destroys a data migration services subnet group - lambda_info - Gathers AWS Lambda function details - rds_snapshot - manage Amazon RDS snapshots. - s3_bucket_notification - Creates, updates or deletes S3 Bucket notification for lambda azure ^^^^^ - azure_rm_aks_info - Get Azure Kubernetes Service facts - azure_rm_aksversion_info - Get available kubernetes versions supported by Azure Kubernetes Service - azure_rm_applicationsecuritygroup_info - Get Azure Application Security Group facts - azure_rm_appserviceplan_info - Get azure app service plan facts - azure_rm_automationaccount - Manage Azure Automation account - azure_rm_automationaccount_info - Get Azure automation account facts - azure_rm_autoscale_info - Get Azure Auto Scale Setting facts - azure_rm_availabilityset_info - Get Azure Availability Set facts - azure_rm_azurefirewall - Manage Azure Firewall instance. - azure_rm_azurefirewall_info - Get AzureFirewall info. - azure_rm_batchaccount - Manages a Batch Account on Azure. - azure_rm_cdnendpoint_info - Get Azure CDN endpoint facts - azure_rm_cdnprofile_info - Get Azure CDN profile facts - azure_rm_containerinstance_info - Get Azure Container Instance facts - azure_rm_containerregistry_info - Get Azure Container Registry facts - azure_rm_cosmosdbaccount_info - Get Azure Cosmos DB Account facts - azure_rm_deployment_info - Get Azure Deployment facts - azure_rm_devtestlab_info - Get Azure DevTest Lab facts - azure_rm_devtestlabarmtemplate_info - Get Azure DevTest Lab ARM Template facts - azure_rm_devtestlabartifact_info - Get Azure DevTest Lab Artifact facts - azure_rm_devtestlabartifactsource_info - Get Azure DevTest Lab Artifact Source facts - azure_rm_devtestlabcustomimage_info - Get Azure DevTest Lab Custom Image facts - azure_rm_devtestlabenvironment_info - Get Azure Environment facts - azure_rm_devtestlabpolicy_info - Get Azure DTL Policy facts - azure_rm_devtestlabschedule_info - Get Azure Schedule facts - azure_rm_devtestlabvirtualmachine_info - Get Azure DevTest Lab Virtual Machine facts - azure_rm_devtestlabvirtualnetwork_info - Get Azure DevTest Lab Virtual Network facts - azure_rm_dnsrecordset_info - Get DNS Record Set facts - azure_rm_dnszone_info - Get DNS zone facts - azure_rm_functionapp_info - Get Azure Function App facts - azure_rm_gallery - Manage Azure Shared Image Gallery instance. - azure_rm_gallery_info - Get Azure Shared Image Gallery info. - azure_rm_galleryimage - Manage Azure SIG Image instance. - azure_rm_galleryimage_info - Get Azure SIG Image info. - azure_rm_galleryimageversion - Manage Azure SIG Image Version instance. - azure_rm_galleryimageversion_info - Get Azure SIG Image Version info. - azure_rm_hdinsightcluster_info - Get Azure HDInsight Cluster facts - azure_rm_image_info - Get facts about azure custom images - azure_rm_iotdevice - Manage Azure IoT hub device - azure_rm_iotdevice_info - Facts of Azure IoT hub device - azure_rm_iotdevicemodule - Manage Azure IoT hub device module - azure_rm_iothub - Manage Azure IoT hub - azure_rm_iothub_info - Get IoT Hub facts - azure_rm_iothubconsumergroup - Manage Azure IoT hub - azure_rm_keyvault_info - Get Azure Key Vault facts - azure_rm_keyvaultkey_info - Get Azure Key Vault key facts. - azure_rm_loadbalancer_info - Get load balancer facts - azure_rm_lock - Manage Azure locks - azure_rm_lock_info - Manage Azure locks - azure_rm_loganalyticsworkspace_info - Get facts of Azure Log Analytics workspaces - azure_rm_manageddisk_info - Get managed disk facts - azure_rm_mariadbconfiguration_info - Get Azure MariaDB Configuration facts - azure_rm_mariadbdatabase_info - Get Azure MariaDB Database facts - azure_rm_mariadbfirewallrule_info - Get Azure MariaDB Firewall Rule facts - azure_rm_mariadbserver_info - Get Azure MariaDB Server facts - azure_rm_monitorlogprofile - Manage Azure Monitor log profile - azure_rm_mysqlconfiguration_info - Get Azure MySQL Configuration facts - azure_rm_mysqldatabase_info - Get Azure MySQL Database facts - azure_rm_mysqlfirewallrule_info - Get Azure MySQL Firewall Rule facts - azure_rm_mysqlserver_info - Get Azure MySQL Server facts - azure_rm_networkinterface_info - Get network interface facts - azure_rm_postgresqlconfiguration_info - Get Azure PostgreSQL Configuration facts - azure_rm_postgresqldatabase_info - Get Azure PostgreSQL Database facts - azure_rm_postgresqlfirewallrule_info - Get Azure PostgreSQL Firewall Rule facts - azure_rm_postgresqlserver_info - Get Azure PostgreSQL Server facts - azure_rm_publicipaddress_info - Get public IP facts - azure_rm_rediscache_info - Get Azure Cache for Redis instance facts - azure_rm_resource_info - Generic facts of Azure resources - azure_rm_roleassignment_info - Gets Azure Role Assignment facts - azure_rm_roledefinition_info - Get Azure Role Definition facts - azure_rm_routetable_info - Get route table facts - azure_rm_securitygroup_info - Get security group facts - azure_rm_servicebus_info - Get servicebus facts - azure_rm_snapshot - Manage Azure Snapshot instance. - azure_rm_sqlserver_info - Get SQL Server facts - azure_rm_storageaccount_info - Get storage account facts - azure_rm_trafficmanagerendpoint_info - Get Azure Traffic Manager endpoint facts - azure_rm_trafficmanagerprofile_info - Get Azure Traffic Manager profile facts - azure_rm_virtualmachine_info - Get virtual machine facts - azure_rm_virtualmachineextension_info - Get Azure Virtual Machine Extension facts - azure_rm_virtualmachineimage_info - Get virtual machine image facts - azure_rm_virtualmachinescaleset_info - Get Virtual Machine Scale Set facts - azure_rm_virtualmachinescalesetextension_info - Get Azure Virtual Machine Scale Set Extension facts - azure_rm_virtualmachinescalesetinstance_info - Get Azure Virtual Machine Scale Set Instance facts - azure_rm_virtualnetwork_info - Get virtual network facts - azure_rm_virtualnetworkpeering_info - Get facts of Azure Virtual Network Peering - azure_rm_webapp_info - Get Azure web app facts cloudstack ^^^^^^^^^^ - cs_instance_info - Gathering information from the API of instances from Apache CloudStack based clouds. - cs_zone_info - Gathering information about zones from Apache CloudStack based clouds. digital_ocean ^^^^^^^^^^^^^ - digital_ocean_sshkey_info - Gather information about DigitalOcean SSH keys google ^^^^^^ - gcp_appengine_firewall_rule - Creates a GCP FirewallRule - gcp_appengine_firewall_rule_info - Gather info for GCP FirewallRule - gcp_cloudfunctions_cloud_function - Creates a GCP CloudFunction - gcp_cloudfunctions_cloud_function_info - Gather info for GCP CloudFunction - gcp_cloudscheduler_job - Creates a GCP Job - gcp_cloudscheduler_job_info - Gather info for GCP Job - gcp_cloudtasks_queue - Creates a GCP Queue - gcp_cloudtasks_queue_info - Gather info for GCP Queue - gcp_compute_autoscaler - Creates a GCP Autoscaler - gcp_compute_autoscaler_info - Gather info for GCP Autoscaler - gcp_compute_snapshot - Creates a GCP Snapshot - gcp_compute_snapshot_info - Gather info for GCP Snapshot - gcp_filestore_instance - Creates a GCP Instance - gcp_filestore_instance_info - Gather info for GCP Instance - gcp_kms_crypto_key - Creates a GCP CryptoKey - gcp_kms_crypto_key_info - Gather info for GCP CryptoKey - gcp_kms_key_ring - Creates a GCP KeyRing - gcp_kms_key_ring_info - Gather info for GCP KeyRing - gcp_mlengine_model - Creates a GCP Model - gcp_mlengine_model_info - Gather info for GCP Model - gcp_mlengine_version - Creates a GCP Version - gcp_mlengine_version_info - Gather info for GCP Version - gcp_tpu_node - Creates a GCP Node - gcp_tpu_node_info - Gather info for GCP Node hcloud ^^^^^^ - hcloud_network - Create and manage cloud Networks on the Hetzner Cloud. - hcloud_network_info - Gather info about your Hetzner Cloud networks. - hcloud_rdns - Create and manage reverse DNS entries on the Hetzner Cloud. - hcloud_route - Create and delete cloud routes on the Hetzner Cloud. - hcloud_server_network - Manage the relationship between Hetzner Cloud Networks and servers - hcloud_subnetwork - Manage cloud subnetworks on the Hetzner Cloud. online ^^^^^^ - online_server_info - Gather information about Online servers. - online_user_info - Gather information about Online user. openstack ^^^^^^^^^ - os_group_info - Retrieve info about one or more OpenStack groups ovirt ^^^^^ - ovirt_job - Module to manage jobs in oVirt/RHV scaleway ^^^^^^^^ - scaleway_image_info - Gather information about the Scaleway images available. - scaleway_ip_info - Gather information about the Scaleway ips available. - scaleway_organization_info - Gather information about the Scaleway organizations available. - scaleway_security_group_info - Gather information about the Scaleway security groups available. - scaleway_server_info - Gather information about the Scaleway servers available. - scaleway_snapshot_info - Gather information about the Scaleway snapshots available. - scaleway_volume_info - Gather information about the Scaleway volumes available. vmware ^^^^^^ - vcenter_extension_info - Gather info vCenter extensions - vmware_about_info - Provides information about VMware server to which user is connecting to - vmware_category_info - Gather info about VMware tag categories - vmware_cluster_drs - Manage Distributed Resource Scheduler (DRS) on VMware vSphere clusters - vmware_cluster_ha - Manage High Availability (HA) on VMware vSphere clusters - vmware_cluster_vsan - Manages virtual storage area network (vSAN) configuration on VMware vSphere clusters - vmware_content_deploy_template - Deploy Virtual Machine from template stored in content library. - vmware_content_library_info - Gather information about VMware Content Library - vmware_content_library_manager - Create, update and delete VMware content library - vmware_drs_group_info - Gathers info about DRS VM/Host groups on the given cluster - vmware_drs_rule_info - Gathers info about DRS rule on the given cluster - vmware_dvs_portgroup_find - Find portgroup(s) in a VMware environment - vmware_dvs_portgroup_info - Gathers info DVS portgroup configurations - vmware_dvswitch_nioc - Manage distributed switch Network IO Control - vmware_evc_mode - Enable/Disable EVC mode on vCenter - vmware_folder_info - Provides information about folders in a datacenter - vmware_guest_boot_info - Gather info about boot options for the given virtual machine - vmware_guest_customization_info - Gather info about VM customization specifications - vmware_guest_disk_info - Gather info about disks of given virtual machine - vmware_guest_network - Manage network adapters of specified virtual machine in given vCenter infrastructure - vmware_guest_screenshot - Create a screenshot of the Virtual Machine console. - vmware_guest_sendkey - Send USB HID codes to the Virtual Machine's keyboard. - vmware_host_capability_info - Gathers info about an ESXi host's capability information - vmware_host_config_info - Gathers info about an ESXi host's advance configuration information - vmware_host_dns_info - Gathers info about an ESXi host's DNS configuration information - vmware_host_feature_info - Gathers info about an ESXi host's feature capability information - vmware_host_firewall_info - Gathers info about an ESXi host's firewall configuration information - vmware_host_ntp_info - Gathers info about NTP configuration on an ESXi host - vmware_host_package_info - Gathers info about available packages on an ESXi host - vmware_host_service_info - Gathers info about an ESXi host's services - vmware_host_ssl_info - Gather info of ESXi host system about SSL - vmware_host_vmhba_info - Gathers info about vmhbas available on the given ESXi host - vmware_host_vmnic_info - Gathers info about vmnics available on the given ESXi host - vmware_local_role_info - Gather info about local roles on an ESXi host - vmware_local_user_info - Gather info about users on the given ESXi host - vmware_portgroup_info - Gathers info about an ESXi host's Port Group configuration - vmware_resource_pool_info - Gathers info about resource pool information - vmware_target_canonical_info - Return canonical (NAA) from an ESXi host system - vmware_vm_storage_policy_info - Gather information about vSphere storage profile defined storage policy information. - vmware_vmkernel_info - Gathers VMKernel info about an ESXi host - vmware_vswitch_info - Gathers info about an ESXi host's vswitch configurations vultr ^^^^^ - vultr_account_info - Get information about the Vultr account. - vultr_block_storage_info - Get information about the Vultr block storage volumes available. - vultr_dns_domain_info - Gather information about the Vultr DNS domains available. - vultr_firewall_group_info - Gather information about the Vultr firewall groups available. - vultr_network_info - Gather information about the Vultr networks available. - vultr_os_info - Get information about the Vultr OSes available. - vultr_plan_info - Gather information about the Vultr plans available. - vultr_region_info - Gather information about the Vultr regions available. - vultr_server_info - Gather information about the Vultr servers available. - vultr_ssh_key_info - Get information about the Vultr SSH keys available. - vultr_startup_script_info - Gather information about the Vultr startup scripts available. - vultr_user_info - Get information about the Vultr user available. Crypto ~~~~~~ entrust ^^^^^^^ - ecs_certificate - Request SSL/TLS certificates with the Entrust Certificate Services (ECS) API Database ~~~~~~~~ mysql ^^^^^ - mysql_info - Gather information about MySQL servers postgresql ^^^^^^^^^^ - postgresql_copy - Copy data between a file/program and a PostgreSQL table - postgresql_publication - Add, update, or remove PostgreSQL publication - postgresql_sequence - Create, drop, or alter a PostgreSQL sequence Monitoring ~~~~~~~~~~ zabbix ^^^^^^ - zabbix_mediatype - Create/Update/Delete Zabbix media types Net Tools ~~~~~~~~~ - hetzner_failover_ip - Manage Hetzner's failover IPs - hetzner_failover_ip_info - Retrieve information on Hetzner's failover IPs Network ~~~~~~~ aci ^^^ - aci_interface_policy_cdp - Manage CDP interface policies (cdp:IfPol) - aci_l3out_extepg - Manage External Network Instance Profile (ExtEpg) objects (l3extInstP:instP) - aci_l3out_extsubnet - Manage External Subnet objects (l3extSubnet:extsubnet) - aci_vmm_credential - Manage virtual domain credential profiles (vmm:UsrAccP) - mso_schema_site_anp_epg_domain - Manage site-local EPG domains in schema template avi ^^^ - avi_user - Avi User Module check_point ^^^^^^^^^^^ - cp_mgmt_access_layer - Manages access-layer objects on Check Point over Web Services API - cp_mgmt_access_layer_facts - Get access-layer objects facts on Check Point over Web Services API - cp_mgmt_access_role - Manages access-role objects on Check Point over Web Services API - cp_mgmt_access_role_facts - Get access-role objects facts on Check Point over Web Services API - cp_mgmt_access_rule - Manages access-rule objects on Check Point over Web Services API - cp_mgmt_access_rule_facts - Get access-rule objects facts on Check Point over Web Services API - cp_mgmt_address_range - Manages address-range objects on Check Point over Web Services API - cp_mgmt_address_range_facts - Get address-range objects facts on Check Point over Web Services API - cp_mgmt_administrator - Manages administrator objects on Check Point over Web Services API - cp_mgmt_administrator_facts - Get administrator objects facts on Check Point over Web Services API - cp_mgmt_application_site - Manages application-site objects on Check Point over Web Services API - cp_mgmt_application_site_category - Manages application-site-category objects on Check Point over Web Services API - cp_mgmt_application_site_category_facts - Get application-site-category objects facts on Check Point over Web Services API - cp_mgmt_application_site_facts - Get application-site objects facts on Check Point over Web Services API - cp_mgmt_application_site_group - Manages application-site-group objects on Check Point over Web Services API - cp_mgmt_application_site_group_facts - Get application-site-group objects facts on Check Point over Web Services API - cp_mgmt_assign_global_assignment - assign global assignment on Check Point over Web Services API - cp_mgmt_discard - All changes done by user are discarded and removed from database. - cp_mgmt_dns_domain - Manages dns-domain objects on Check Point over Web Services API - cp_mgmt_dns_domain_facts - Get dns-domain objects facts on Check Point over Web Services API - cp_mgmt_dynamic_object - Manages dynamic-object objects on Check Point over Web Services API - cp_mgmt_dynamic_object_facts - Get dynamic-object objects facts on Check Point over Web Services API - cp_mgmt_exception_group - Manages exception-group objects on Check Point over Web Services API - cp_mgmt_exception_group_facts - Get exception-group objects facts on Check Point over Web Services API - cp_mgmt_global_assignment - Manages global-assignment objects on Check Point over Web Services API - cp_mgmt_global_assignment_facts - Get global-assignment objects facts on Check Point over Web Services API - cp_mgmt_group - Manages group objects on Check Point over Web Services API - cp_mgmt_group_facts - Get group objects facts on Check Point over Web Services API - cp_mgmt_group_with_exclusion - Manages group-with-exclusion objects on Check Point over Web Services API - cp_mgmt_group_with_exclusion_facts - Get group-with-exclusion objects facts on Check Point over Web Services API - cp_mgmt_host - Manages host objects on Check Point over Web Services API - cp_mgmt_host_facts - Get host objects facts on Check Point over Web Services API - cp_mgmt_install_policy - install policy on Check Point over Web Services API - cp_mgmt_mds_facts - Get Multi-Domain Server (mds) objects facts on Check Point over Web Services API - cp_mgmt_multicast_address_range - Manages multicast-address-range objects on Check Point over Web Services API - cp_mgmt_multicast_address_range_facts - Get multicast-address-range objects facts on Check Point over Web Services API - cp_mgmt_network - Manages network objects on Check Point over Web Services API - cp_mgmt_network_facts - Get network objects facts on Check Point over Web Services API - cp_mgmt_package - Manages package objects on Check Point over Web Services API - cp_mgmt_package_facts - Get package objects facts on Check Point over Web Services API - cp_mgmt_publish - All the changes done by this user will be seen by all users only after publish is called. - cp_mgmt_put_file - put file on Check Point over Web Services API - cp_mgmt_run_ips_update - Runs IPS database update. If "package-path" is not provided server will try to get the latest package from the User Center. - cp_mgmt_run_script - Executes the script on a given list of targets. - cp_mgmt_security_zone - Manages security-zone objects on Check Point over Web Services API - cp_mgmt_security_zone_facts - Get security-zone objects facts on Check Point over Web Services API - cp_mgmt_service_dce_rpc - Manages service-dce-rpc objects on Check Point over Web Services API - cp_mgmt_service_dce_rpc_facts - Get service-dce-rpc objects facts on Check Point over Web Services API - cp_mgmt_service_group - Manages service-group objects on Check Point over Web Services API - cp_mgmt_service_group_facts - Get service-group objects facts on Check Point over Web Services API - cp_mgmt_service_icmp - Manages service-icmp objects on Check Point over Web Services API - cp_mgmt_service_icmp6 - Manages service-icmp6 objects on Check Point over Web Services API - cp_mgmt_service_icmp6_facts - Get service-icmp6 objects facts on Check Point over Web Services API - cp_mgmt_service_icmp_facts - Get service-icmp objects facts on Check Point over Web Services API - cp_mgmt_service_other - Manages service-other objects on Check Point over Web Services API - cp_mgmt_service_other_facts - Get service-other objects facts on Check Point over Web Services API - cp_mgmt_service_rpc - Manages service-rpc objects on Check Point over Web Services API - cp_mgmt_service_rpc_facts - Get service-rpc objects facts on Check Point over Web Services API - cp_mgmt_service_sctp - Manages service-sctp objects on Check Point over Web Services API - cp_mgmt_service_sctp_facts - Get service-sctp objects facts on Check Point over Web Services API - cp_mgmt_service_tcp - Manages service-tcp objects on Check Point over Web Services API - cp_mgmt_service_tcp_facts - Get service-tcp objects facts on Check Point over Web Services API - cp_mgmt_service_udp - Manages service-udp objects on Check Point over Web Services API - cp_mgmt_service_udp_facts - Get service-udp objects facts on Check Point over Web Services API - cp_mgmt_session_facts - Get session objects facts on Check Point over Web Services API - cp_mgmt_simple_gateway - Manages simple-gateway objects on Check Point over Web Services API - cp_mgmt_simple_gateway_facts - Get simple-gateway objects facts on Check Point over Web Services API - cp_mgmt_tag - Manages tag objects on Check Point over Web Services API - cp_mgmt_tag_facts - Get tag objects facts on Check Point over Web Services API - cp_mgmt_threat_exception - Manages threat-exception objects on Check Point over Web Services API - cp_mgmt_threat_exception_facts - Get threat-exception objects facts on Check Point over Web Services API - cp_mgmt_threat_indicator - Manages threat-indicator objects on Check Point over Web Services API - cp_mgmt_threat_indicator_facts - Get threat-indicator objects facts on Check Point over Web Services API - cp_mgmt_threat_layer - Manages threat-layer objects on Check Point over Web Services API - cp_mgmt_threat_layer_facts - Get threat-layer objects facts on Check Point over Web Services API - cp_mgmt_threat_profile - Manages threat-profile objects on Check Point over Web Services API - cp_mgmt_threat_profile_facts - Get threat-profile objects facts on Check Point over Web Services API - cp_mgmt_threat_protection_override - Edit existing object using object name or uid. - cp_mgmt_threat_rule - Manages threat-rule objects on Check Point over Web Services API - cp_mgmt_threat_rule_facts - Get threat-rule objects facts on Check Point over Web Services API - cp_mgmt_time - Manages time objects on Check Point over Web Services API - cp_mgmt_time_facts - Get time objects facts on Check Point over Web Services API - cp_mgmt_verify_policy - Verifies the policy of the selected package. - cp_mgmt_vpn_community_meshed - Manages vpn-community-meshed objects on Check Point over Web Services API - cp_mgmt_vpn_community_meshed_facts - Get vpn-community-meshed objects facts on Check Point over Web Services API - cp_mgmt_vpn_community_star - Manages vpn-community-star objects on Check Point over Web Services API - cp_mgmt_vpn_community_star_facts - Get vpn-community-star objects facts on Check Point over Web Services API - cp_mgmt_wildcard - Manages wildcard objects on Check Point over Web Services API - cp_mgmt_wildcard_facts - Get wildcard objects facts on Check Point over Web Services API - cp_publish - All the changes done by this user will be seen by all users only after publish is called. eos ^^^ - eos_interfaces - Manages interface attributes of Arista EOS interfaces - eos_l2_interfaces - Manages Layer-2 interface attributes of Arista EOS devices - eos_l3_interfaces - Manages L3 interface attributes of Arista EOS devices. - eos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Arista EOS devices. - eos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Arista EOS devices. - eos_lag_interfaces - Manages link aggregation groups on Arista EOS devices - eos_lldp_global - Manage Global Link Layer Discovery Protocol (LLDP) settings on Arista EOS devices. - eos_lldp_interfaces - Manage Link Layer Discovery Protocol (LLDP) attributes of interfaces on Arista EOS devices. - eos_vlans - Manage VLANs on Arista EOS devices. eric_eccli ^^^^^^^^^^ - eric_eccli_command - Run commands on remote devices running ERICSSON ECCLI exos ^^^^ - exos_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on EXOS platforms. f5 ^^ - bigip_apm_acl - Manage user-defined APM ACLs - bigip_apm_network_access - Manage APM Network Access resource - bigip_asm_dos_application - Manage application settings for DOS profile - bigip_device_certificate - Manage self-signed device certificates - bigip_firewall_log_profile - Manages AFM logging profiles configured in the system - bigip_firewall_log_profile_network - Configures Network Firewall related settings of the log profile - bigip_firewall_schedule - Manage BIG-IP AFM schedule configurations - bigip_message_routing_peer - Manage peers for routing generic message protocol messages - bigip_message_routing_protocol - Manage generic message parser profile. - bigip_message_routing_route - Manages static routes for routing message protocol messages - bigip_message_routing_router - Manages router profiles for message-routing protocols - bigip_message_routing_transport_config - Manages configuration for an outgoing connection - bigip_remote_user - Manages default settings for remote user accounts on a BIG-IP - bigip_snat_translation - Manage SNAT Translations on a BIG-IP fortianalyzer ^^^^^^^^^^^^^ - faz_device - Add or remove device fortios ^^^^^^^ - fortios_alertemail_setting - Configure alert email settings in Fortinet's FortiOS and FortiGate. - fortios_facts - Get facts about fortios devices. - fortios_router_access_list6 - Configure IPv6 access lists in Fortinet's FortiOS and FortiGate. - fortios_router_aspath_list - Configure Autonomous System (AS) path lists in Fortinet's FortiOS and FortiGate. - fortios_router_community_list - Configure community lists in Fortinet's FortiOS and FortiGate. - fortios_router_isis - Configure IS-IS in Fortinet's FortiOS and FortiGate. - fortios_router_key_chain - Configure key-chain in Fortinet's FortiOS and FortiGate. - fortios_router_prefix_list6 - Configure IPv6 prefix lists in Fortinet's FortiOS and FortiGate. - fortios_router_ripng - Configure RIPng in Fortinet's FortiOS and FortiGate. - fortios_router_route_map - Configure route maps in Fortinet's FortiOS and FortiGate. - fortios_router_static6 - Configure IPv6 static routing tables in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_bwl - Configure anti-spam black/white list in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_bword - Configure AntiSpam banned word list in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_dnsbl - Configure AntiSpam DNSBL/ORBL in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_fortishield - Configure FortiGuard - AntiSpam in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_iptrust - Configure AntiSpam IP trust in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_mheader - Configure AntiSpam MIME header in Fortinet's FortiOS and FortiGate. - fortios_spamfilter_options - Configure AntiSpam options in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_802_1X_settings - Configure global 802.1X settings in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_custom_command - Configure the FortiGate switch controller to send custom commands to managed FortiSwitch devices in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_igmp_snooping - Configure FortiSwitch IGMP snooping global settings in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_qos_dot1p_map - Configure FortiSwitch QoS 802.1p in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_qos_ip_dscp_map - Configure FortiSwitch QoS IP precedence/DSCP in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_qos_qos_policy - Configure FortiSwitch QoS policy in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_qos_queue_policy - Configure FortiSwitch QoS egress queue policy in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_quarantine - Configure FortiSwitch quarantine support in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_security_policy_802_1X - Configure 802.1x MAC Authentication Bypass (MAB) policies in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_security_policy_captive_portal - Names of VLANs that use captive portal authentication in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_sflow - Configure FortiSwitch sFlow in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_storm_control - Configure FortiSwitch storm control in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_stp_settings - Configure FortiSwitch spanning tree protocol (STP) in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_switch_group - Configure FortiSwitch switch groups in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_switch_interface_tag - Configure switch object tags in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_switch_log - Configure FortiSwitch logging (logs are transferred to and inserted into FortiGate event log) in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_switch_profile - Configure FortiSwitch switch profile in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_system - Configure system-wide switch controller settings in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_virtual_port_pool - Configure virtual pool in Fortinet's FortiOS and FortiGate. - fortios_switch_controller_vlan - Configure VLANs for switch controller in Fortinet's FortiOS and FortiGate. - fortios_system_affinity_interrupt - Configure interrupt affinity in Fortinet's FortiOS and FortiGate. - fortios_system_affinity_packet_redistribution - Configure packet redistribution in Fortinet's FortiOS and FortiGate. - fortios_system_alarm - Configure alarm in Fortinet's FortiOS and FortiGate. - fortios_system_alias - Configure alias command in Fortinet's FortiOS and FortiGate. - fortios_system_arp_table - Configure ARP table in Fortinet's FortiOS and FortiGate. - fortios_system_auto_install - Configure USB auto installation in Fortinet's FortiOS and FortiGate. - fortios_system_auto_script - Configure auto script in Fortinet's FortiOS and FortiGate. - fortios_system_automation_action - Action for automation stitches in Fortinet's FortiOS and FortiGate. - fortios_system_automation_destination - Automation destinations in Fortinet's FortiOS and FortiGate. - fortios_system_automation_stitch - Automation stitches in Fortinet's FortiOS and FortiGate. - fortios_system_automation_trigger - Trigger for automation stitches in Fortinet's FortiOS and FortiGate. - fortios_system_autoupdate_push_update - Configure push updates in Fortinet's FortiOS and FortiGate. - fortios_system_autoupdate_schedule - Configure update schedule in Fortinet's FortiOS and FortiGate. - fortios_system_autoupdate_tunneling - Configure web proxy tunnelling for the FDN in Fortinet's FortiOS and FortiGate. - fortios_system_cluster_sync - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization in Fortinet's FortiOS and FortiGate. - fortios_system_console - Configure console in Fortinet's FortiOS and FortiGate. - fortios_system_csf - Add this FortiGate to a Security Fabric or set up a new Security Fabric on this FortiGate in Fortinet's FortiOS and FortiGate. - fortios_system_custom_language - Configure custom languages in Fortinet's FortiOS and FortiGate. - fortios_system_ddns - Configure DDNS in Fortinet's FortiOS and FortiGate. - fortios_system_dedicated_mgmt - Configure dedicated management in Fortinet's FortiOS and FortiGate. - fortios_system_dhcp6_server - Configure DHCPv6 servers in Fortinet's FortiOS and FortiGate. - fortios_system_dns_database - Configure DNS databases in Fortinet's FortiOS and FortiGate. - fortios_system_dns_server - Configure DNS servers in Fortinet's FortiOS and FortiGate. - fortios_system_dscp_based_priority - Configure DSCP based priority table in Fortinet's FortiOS and FortiGate. - fortios_system_email_server - Configure the email server used by the FortiGate various things. For example, for sending email messages to users to support user authentication features in Fortinet's FortiOS and FortiGate. - fortios_system_external_resource - Configure external resource in Fortinet's FortiOS and FortiGate. - fortios_system_fips_cc - Configure FIPS-CC mode in Fortinet's FortiOS and FortiGate. - fortios_system_firmware_upgrade - Perform firmware upgrade on FortiGate or FortiOS (FOS) device. - fortios_system_fm - Configure FM in Fortinet's FortiOS and FortiGate. - fortios_system_fortiguard - Configure FortiGuard services in Fortinet's FortiOS and FortiGate. - fortios_system_fortimanager - Configure FortiManager in Fortinet's FortiOS and FortiGate. - fortios_system_fortisandbox - Configure FortiSandbox in Fortinet's FortiOS and FortiGate. - fortios_system_fsso_polling - Configure Fortinet Single Sign On (FSSO) server in Fortinet's FortiOS and FortiGate. - fortios_system_ftm_push - Configure FortiToken Mobile push services in Fortinet's FortiOS and FortiGate. - fortios_system_geoip_override - Configure geographical location mapping for IP address(es) to override mappings from FortiGuard in Fortinet's FortiOS and FortiGate. - fortios_system_gre_tunnel - Configure GRE tunnel in Fortinet's FortiOS and FortiGate. - fortios_system_ha - Configure HA in Fortinet's FortiOS and FortiGate. - fortios_system_ha_monitor - Configure HA monitor in Fortinet's FortiOS and FortiGate. - fortios_system_ipip_tunnel - Configure IP in IP Tunneling in Fortinet's FortiOS and FortiGate. - fortios_system_ips_urlfilter_dns - Configure IPS URL filter DNS servers in Fortinet's FortiOS and FortiGate. - fortios_system_ips_urlfilter_dns6 - Configure IPS URL filter IPv6 DNS servers in Fortinet's FortiOS and FortiGate. - fortios_system_ipv6_neighbor_cache - Configure IPv6 neighbor cache table in Fortinet's FortiOS and FortiGate. - fortios_system_ipv6_tunnel - Configure IPv6/IPv4 in IPv6 tunnel in Fortinet's FortiOS and FortiGate. - fortios_system_link_monitor - Configure Link Health Monitor in Fortinet's FortiOS and FortiGate. - fortios_system_mac_address_table - Configure MAC address tables in Fortinet's FortiOS and FortiGate. - fortios_system_management_tunnel - Management tunnel configuration in Fortinet's FortiOS and FortiGate. - fortios_system_mobile_tunnel - Configure Mobile tunnels, an implementation of Network Mobility (NEMO) extensions for Mobile IPv4 RFC5177 in Fortinet's FortiOS and FortiGate. - fortios_system_nat64 - Configure NAT64 in Fortinet's FortiOS and FortiGate. - fortios_system_nd_proxy - Configure IPv6 neighbor discovery proxy (RFC4389) in Fortinet's FortiOS and FortiGate. - fortios_system_netflow - Configure NetFlow in Fortinet's FortiOS and FortiGate. - fortios_system_network_visibility - Configure network visibility settings in Fortinet's FortiOS and FortiGate. - fortios_system_ntp - Configure system NTP information in Fortinet's FortiOS and FortiGate. - fortios_system_object_tagging - Configure object tagging in Fortinet's FortiOS and FortiGate. - fortios_system_password_policy - Configure password policy for locally defined administrator passwords and IPsec VPN pre-shared keys in Fortinet's FortiOS and FortiGate. - fortios_system_password_policy_guest_admin - Configure the password policy for guest administrators in Fortinet's FortiOS and FortiGate. - fortios_system_pppoe_interface - Configure the PPPoE interfaces in Fortinet's FortiOS and FortiGate. - fortios_system_probe_response - Configure system probe response in Fortinet's FortiOS and FortiGate. - fortios_system_proxy_arp - Configure proxy-ARP in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_admin - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_alertmail - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_auth - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_device_detection_portal - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_ec - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_fortiguard_wf - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_ftp - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_group - Configure replacement message groups in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_http - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_icap - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_image - Configure replacement message images in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_mail - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_nac_quar - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_nntp - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_spam - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_sslvpn - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_traffic_quota - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_utm - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_replacemsg_webproxy - Replacement messages in Fortinet's FortiOS and FortiGate. - fortios_system_resource_limits - Configure resource limits in Fortinet's FortiOS and FortiGate. - fortios_system_session_helper - Configure session helper in Fortinet's FortiOS and FortiGate. - fortios_system_session_ttl - Configure global session TTL timers for this FortiGate in Fortinet's FortiOS and FortiGate. - fortios_system_sflow - Configure sFlow in Fortinet's FortiOS and FortiGate. - fortios_system_sit_tunnel - Configure IPv6 tunnel over IPv4 in Fortinet's FortiOS and FortiGate. - fortios_system_sms_server - Configure SMS server for sending SMS messages to support user authentication in Fortinet's FortiOS and FortiGate. - fortios_system_snmp_community - SNMP community configuration in Fortinet's FortiOS and FortiGate. - fortios_system_snmp_sysinfo - SNMP system info configuration in Fortinet's FortiOS and FortiGate. - fortios_system_snmp_user - SNMP user configuration in Fortinet's FortiOS and FortiGate. - fortios_system_storage - Configure logical storage in Fortinet's FortiOS and FortiGate. - fortios_system_switch_interface - Configure software switch interfaces by grouping physical and WiFi interfaces in Fortinet's FortiOS and FortiGate. - fortios_system_tos_based_priority - Configure Type of Service (ToS) based priority table to set network traffic priorities in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_dns - Configure DNS servers for a non-management VDOM in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_exception - Global configuration objects that can be configured independently for all VDOMs or for the defined VDOM scope in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_link - Configure VDOM links in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_netflow - Configure NetFlow per VDOM in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_property - Configure VDOM property in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_radius_server - Configure a RADIUS server to use as a RADIUS Single Sign On (RSSO) server for this VDOM in Fortinet's FortiOS and FortiGate. - fortios_system_vdom_sflow - Configure sFlow per VDOM to add or change the IP address and UDP port that FortiGate sFlow agents in this VDOM use to send sFlow datagrams to an sFlow collector in Fortinet's FortiOS and FortiGate. - fortios_system_virtual_wire_pair - Configure virtual wire pairs in Fortinet's FortiOS and FortiGate. - fortios_system_vxlan - Configure VXLAN devices in Fortinet's FortiOS and FortiGate. - fortios_system_wccp - Configure WCCP in Fortinet's FortiOS and FortiGate. - fortios_system_zone - Configure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone in Fortinet's FortiOS and FortiGate. - fortios_user_device - Configure devices in Fortinet's FortiOS and FortiGate. - fortios_user_device_access_list - Configure device access control lists in Fortinet's FortiOS and FortiGate. - fortios_user_device_category - Configure device categories in Fortinet's FortiOS and FortiGate. - fortios_user_device_group - Configure device groups in Fortinet's FortiOS and FortiGate. - fortios_user_domain_controller - Configure domain controller entries in Fortinet's FortiOS and FortiGate. - fortios_user_fortitoken - Configure FortiToken in Fortinet's FortiOS and FortiGate. - fortios_user_fsso - Configure Fortinet Single Sign On (FSSO) agents in Fortinet's FortiOS and FortiGate. - fortios_user_fsso_polling - Configure FSSO active directory servers for polling mode in Fortinet's FortiOS and FortiGate. - fortios_user_group - Configure user groups in Fortinet's FortiOS and FortiGate. - fortios_user_krb_keytab - Configure Kerberos keytab entries in Fortinet's FortiOS and FortiGate. - fortios_user_ldap - Configure LDAP server entries in Fortinet's FortiOS and FortiGate. - fortios_user_local - Configure local users in Fortinet's FortiOS and FortiGate. - fortios_user_password_policy - Configure user password policy in Fortinet's FortiOS and FortiGate. - fortios_user_peer - Configure peer users in Fortinet's FortiOS and FortiGate. - fortios_user_peergrp - Configure peer groups in Fortinet's FortiOS and FortiGate. - fortios_user_pop3 - POP3 server entry configuration in Fortinet's FortiOS and FortiGate. - fortios_user_quarantine - Configure quarantine support in Fortinet's FortiOS and FortiGate. - fortios_user_security_exempt_list - Configure security exemption list in Fortinet's FortiOS and FortiGate. - fortios_user_setting - Configure user authentication setting in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_ca - CA certificate in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_crl - Certificate Revocation List as a PEM file in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_local - Local keys and certificates in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_ocsp_server - OCSP server configuration in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_remote - Remote certificate as a PEM file in Fortinet's FortiOS and FortiGate. - fortios_vpn_certificate_setting - VPN certificate setting in Fortinet's FortiOS and FortiGate. - fortios_vpn_l2tp - Configure L2TP in Fortinet's FortiOS and FortiGate. - fortios_vpn_pptp - Configure PPTP in Fortinet's FortiOS and FortiGate. - fortios_vpn_ssl_web_host_check_software - SSL-VPN host check software in Fortinet's FortiOS and FortiGate. - fortios_vpn_ssl_web_realm - Realm in Fortinet's FortiOS and FortiGate. - fortios_vpn_ssl_web_user_bookmark - Configure SSL VPN user bookmark in Fortinet's FortiOS and FortiGate. - fortios_vpn_ssl_web_user_group_bookmark - Configure SSL VPN user group bookmark in Fortinet's FortiOS and FortiGate. - fortios_waf_main_class - Hidden table for datasource in Fortinet's FortiOS and FortiGate. - fortios_waf_signature - Hidden table for datasource in Fortinet's FortiOS and FortiGate. - fortios_waf_sub_class - Hidden table for datasource in Fortinet's FortiOS and FortiGate. - fortios_wanopt_auth_group - Configure WAN optimization authentication groups in Fortinet's FortiOS and FortiGate. - fortios_wanopt_cache_service - Designate cache-service for wan-optimization and webcache in Fortinet's FortiOS and FortiGate. - fortios_wanopt_content_delivery_network_rule - Configure WAN optimization content delivery network rules in Fortinet's FortiOS and FortiGate. - fortios_wanopt_peer - Configure WAN optimization peers in Fortinet's FortiOS and FortiGate. - fortios_wanopt_remote_storage - Configure a remote cache device as Web cache storage in Fortinet's FortiOS and FortiGate. - fortios_wanopt_webcache - Configure global Web cache settings in Fortinet's FortiOS and FortiGate. - fortios_web_proxy_debug_url - Configure debug URL addresses in Fortinet's FortiOS and FortiGate. - fortios_web_proxy_forward_server - Configure forward-server addresses in Fortinet's FortiOS and FortiGate. - fortios_web_proxy_forward_server_group - Configure a forward server group consisting or multiple forward servers. Supports failover and load balancing in Fortinet's FortiOS and FortiGate. - fortios_web_proxy_url_match - Exempt URLs from web proxy forwarding and caching in Fortinet's FortiOS and FortiGate. - fortios_web_proxy_wisp - Configure Wireless Internet service provider (WISP) servers in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_ap_status - Configure access point status (rogue | accepted | suppressed) in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_ble_profile - Configure Bluetooth Low Energy profile in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_bonjour_profile - Configure Bonjour profiles. Bonjour is Apple's zero configuration networking protocol. Bonjour profiles allow APs and FortiAPs to connect to networks using Bonjour in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_3gpp_cellular - Configure 3GPP public land mobile network (PLMN) in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_ip_address_type - Configure IP address type availability in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_nai_realm - Configure network access identifier (NAI) realm in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_network_auth_type - Configure network authentication type in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_roaming_consortium - Configure roaming consortium in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_anqp_venue_name - Configure venue name duple in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_h2qp_conn_capability - Configure connection capability in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_h2qp_operator_name - Configure operator friendly name in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_h2qp_osu_provider - Configure online sign up (OSU) provider list in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_h2qp_wan_metric - Configure WAN metrics in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_hs_profile - Configure hotspot profile in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_icon - Configure OSU provider icon in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_hotspot20_qos_map - Configure QoS map set in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_inter_controller - Configure inter wireless controller operation in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_qos_profile - Configure WiFi quality of service (QoS) profiles in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_timers - Configure CAPWAP timers in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_vap_group - Configure virtual Access Point (VAP) groups in Fortinet's FortiOS and FortiGate. - fortios_wireless_controller_wtp_group - Configure WTP groups in Fortinet's FortiOS and FortiGate. icx ^^^ - icx_banner - Manage multiline banners on Ruckus ICX 7000 series switches - icx_command - Run arbitrary commands on remote Ruckus ICX 7000 series switches - icx_config - Manage configuration sections of Ruckus ICX 7000 series switches - icx_copy - Transfer files from or to remote Ruckus ICX 7000 series switches - icx_facts - Collect facts from remote Ruckus ICX 7000 series switches - icx_interface - Manage Interface on Ruckus ICX 7000 series switches - icx_l3_interface - Manage Layer-3 interfaces on Ruckus ICX 7000 series switches - icx_linkagg - Manage link aggregation groups on Ruckus ICX 7000 series switches - icx_lldp - Manage LLDP configuration on Ruckus ICX 7000 series switches - icx_logging - Manage logging on Ruckus ICX 7000 series switches - icx_ping - Tests reachability using ping from Ruckus ICX 7000 series switches - icx_static_route - Manage static IP routes on Ruckus ICX 7000 series switches - icx_system - Manage the system attributes on Ruckus ICX 7000 series switches - icx_user - Manage the user accounts on Ruckus ICX 7000 series switches. - icx_vlan - Manage VLANs on Ruckus ICX 7000 series switches ios ^^^ - ios_interfaces - Manages interface attributes of Cisco IOS network devices - ios_l2_interfaces - Manage Layer-2 interface on Cisco IOS devices. - ios_l3_interfaces - Manage Layer-3 interface on Cisco IOS devices. - ios_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Cisco IOS devices. - ios_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) on Cisco IOS devices interface. - ios_lag_interfaces - Manage Link Aggregation on Cisco IOS devices. - ios_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on IOS platforms. - ios_lldp_interfaces - Manage link layer discovery protocol (LLDP) attributes of interfaces on Cisco IOS devices. - ios_vlans - Manage VLANs on Cisco IOS devices. iosxr ^^^^^ - iosxr_interfaces - Manage interface attributes on Cisco IOS-XR network devices - iosxr_l2_interfaces - Manage Layer-2 interface on Cisco IOS-XR devices - iosxr_l3_interfaces - Manage Layer-3 interface on Cisco IOS-XR devices. - iosxr_lacp - Manage Global Link Aggregation Control Protocol (LACP) on IOS-XR devices. - iosxr_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on IOS-XR devices. - iosxr_lag_interfaces - Manages attributes of LAG/Ether-Bundle interfaces on IOS-XR devices. - iosxr_lldp_global - Manage Global Link Layer Discovery Protocol (LLDP) settings on IOS-XR devices. - iosxr_lldp_interfaces - Manage Link Layer Discovery Protocol (LLDP) attributes of interfaces on IOS-XR devices. junos ^^^^^ - junos_interfaces - Manages interface attributes of Juniper Junos OS network devices. - junos_l2_interfaces - Manage Layer-2 interface on Juniper JUNOS devices - junos_l3_interfaces - Manage Layer 3 interface on Juniper JUNOS devices - junos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Juniper Junos devices - junos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Juniper JUNOS devices. - junos_lag_interfaces - Manage Link Aggregation on Juniper JUNOS devices. - junos_lldp_global - Manage link layer discovery protocol (LLDP) attributes on Juniper JUNOS devices. - junos_lldp_interfaces - Manage link layer discovery protocol (LLDP) attributes of interfaces on Juniper JUNOS devices - junos_vlans - Create and manage VLAN configurations on Junos OS meraki ^^^^^^ - meraki_firewalled_services - Edit firewall policies for administrative network services - meraki_malware - Manage Malware Protection in the Meraki cloud - meraki_mx_l7_firewall - Manage MX appliance layer 7 firewalls in the Meraki cloud - meraki_nat - Manage NAT rules in Meraki cloud - meraki_webhook - Manage webhooks configured in the Meraki cloud netvisor ^^^^^^^^ - pn_fabric_local - CLI command to modify fabric-local - pn_ipv6security_raguard - CLI command to create/modify/delete ipv6security-raguard - pn_ipv6security_raguard_port - CLI command to add/remove ipv6security-raguard-port - pn_ipv6security_raguard_vlan - CLI command to add/remove ipv6security-raguard-vlan - pn_log_audit_exception - CLI command to create/delete an audit exception - pn_prefix_list - CLI command to create/delete prefix-list - pn_vrouter_bgp - CLI command to add/modify/remove vrouter-bgp - pn_vrouter_loopback_interface - CLI command to add/remove vrouter-loopback-interface - pn_vrouter_ospf - CLI command to add/remove vrouter-ospf - pn_vrouter_packet_relay - CLI command to add/remove vrouter-packet-relay - pn_vtep - CLI command to create/delete vtep nxos ^^^^ - nxos_bfd_global - Bidirectional Forwarding Detection (BFD) global-level configuration - nxos_bfd_interfaces - Manages BFD attributes of nxos interfaces. - nxos_interfaces - Manages interface attributes of NX-OS Interfaces - nxos_l2_interfaces - Manages Layer-2 Interfaces attributes of NX-OS Interfaces - nxos_l3_interfaces - Manages Layer-3 Interfaces attributes of NX-OS Interfaces - nxos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Cisco NX-OS devices. - nxos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Cisco NX-OS devices. - nxos_lag_interfaces - Manages link aggregation groups of NX-OS Interfaces - nxos_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on NX-OS platforms. - nxos_telemetry - Telemetry Monitoring Service (TMS) configuration - nxos_vlans - Create VLAN and manage VLAN configurations on NX-OS Interfaces onyx ^^^^ - onyx_qos - Configures QoS - onyx_traffic_class - Configures Traffic Class - onyx_wjh - Configure what-just-happend module vyos ^^^^ - vyos_interfaces - Manages interface attributes of VyOS network devices. - vyos_l3_interfaces - Manages L3 interface attributes of VyOS network devices. - vyos_lag_interfaces - Manages attributes of link aggregation groups on VyOS network devices. - vyos_lldp_global - Manage link layer discovery protocol (LLDP) attributes on VyOS devices.. - vyos_lldp_interfaces - Manages attributes of lldp interfaces on VyOS devices. Notification ~~~~~~~~~~~~ - snow_record_find - Search for multiple records from ServiceNow Remote Management ~~~~~~~~~~~~~~~~~ cpm ^^^ - cpm_serial_port_config - Set Serial port parameters in WTI OOB and PDU devices - cpm_serial_port_info - Get Serial port parameters in WTI OOB and PDU devices dellemc ^^^^^^^ - ome_device_info - Retrieves the information about Device. ucs ^^^ - ucs_vlan_find - Find VLANs on Cisco UCS Manager Source Control ~~~~~~~~~~~~~~ - gitlab_project_variable - Creates/updates/deletes GitLab Projects Variables Storage ~~~~~~~ netapp ^^^^^^ - na_ontap_firmware_upgrade - NetApp ONTAP firmware upgrade for SP, shelf, ACP, and disk. - na_ontap_info - NetApp information gatherer - na_ontap_ipspace - NetApp ONTAP Manage an ipspace - na_ontap_kerberos_realm - NetApp ONTAP vserver nfs kerberos realm - na_ontap_ldap - NetApp ONTAP LDAP - na_ontap_ldap_client - NetApp ONTAP LDAP client - na_ontap_ndmp - NetApp ONTAP NDMP services configuration - na_ontap_object_store - NetApp ONTAP manage object store config. - na_ontap_ports - NetApp ONTAP add/remove ports - na_ontap_qos_adaptive_policy_group - NetApp ONTAP Adaptive Quality of Service policy group. - na_ontap_volume_autosize - NetApp ONTAP manage volume autosize - na_ontap_vscan - NetApp ONTAP Vscan enable/disable. - na_ontap_vserver_cifs_security - NetApp ONTAP vserver CIFS security modification - netapp_e_drive_firmware - NetApp E-Series manage drive firmware - netapp_e_firmware - NetApp E-Series manage firmware. purestorage ^^^^^^^^^^^ - purefa_alert - Configure Pure Storage FlashArray alert email settings - purefa_arrayname - Configure Pure Storage FlashArray array name - purefa_banner - Configure Pure Storage FlashArray GUI and SSH MOTD message - purefa_connect - Manage replication connections between two FlashArrays - purefa_info - Collect information from Pure Storage FlashArray - purefa_phonehome - Enable or Disable Pure Storage FlashArray Phonehome - purefa_smtp - Configure FlashArray SMTP settings - purefa_snmp - Configure FlashArray SNMP Managers - purefa_syslog - Configure Pure Storage FlashArray syslog settings - purefa_vg - Manage volume groups on Pure Storage FlashArrays - purefb_info - Collect information from Pure Storage FlashBlade - purefb_ra - Enable or Disable Pure Storage FlashBlade Remote Assist - purefb_smtp - Configure SMTP for Pure Storage FlashBlade vexata ^^^^^^ - vexata_eg - Manage export groups on Vexata VX100 storage arrays System ~~~~~~ - listen_ports_facts - Gather facts on processes listening on TCP and UDP ports. - syspatch - Manage OpenBSD system patches Web Infrastructure ~~~~~~~~~~~~~~~~~~ - nginx_status_info - Retrieve information on nginx status. Windows ~~~~~~~ - win_netbios - Manage NetBIOS over TCP/IP settings on Windows.