Commit graph

963 commits

Author SHA1 Message Date
Chris Lamb
8d7d070201 system/ufw.py: Add security warning re. removing ufw application prof…
It's not particularly obvious that removing an application will remove it
from ufw's own state, potentially leaving ports open on your box if you
upload your configuration.

Whilst this applies to a lot of things in Ansible, firewall rules might
cross some sort of line that justifies such a warning in his instance.

Signed-off-by: Chris Lamb <chris@chris-lamb.co.uk>
2016-04-23 08:01:19 +02:00
codehopper-uk
aa29a4fd9c Basic ability to set masquerade options from ansible, according to current code design/layout (mostly) (#2017)
* Support for masquerade settings

Ability to enable and disable masquerade settings from ansible via:
- firewalld: mapping=masquerade state=disabled permanent=true zone=dmz

Placeholder added (mapping) to support masquerade and port_forward
choices initially - port_forward not implemented yet.

* Permanent and Immediate zone handling differentiated

* Corrected naming abstraction for masquerading functionality

Removed mapping tag with port_forward choices - not applicable!

* Added version info for new masquerade option

Pull Request #2017 failing due to missing version info
2016-04-16 14:15:00 +02:00
Michael Scherer
ff74fc0072 Remove the +x from crypttab and cronvar (#2039)
While this change nothing, it is better to enforce consistency
2016-04-15 10:18:05 -04:00
Jasper Lievisse Adriaanse
2b8debbc2b Sprinkle some LANG/LC_* where command output is parsed (#2019) 2016-04-13 10:03:26 -04:00
Michael Scherer
2dbfdaa88b Remove dead code (#1303)
The review on https://github.com/ansible/ansible-modules-extras/pull/1303
show the problem was already fixed, so we just need to remove the
code.
2016-04-12 08:13:24 +02:00
kubilus1
773d402eac Unchecked index causes IndexError. 2016-04-11 07:55:07 +02:00
Monty Taylor
38c8fec277 Merge pull request #1149 from Jmainguy/puppet_stdout
Enable stdout and stderr on sucessful runs, making show_diff useable
2016-04-10 08:43:39 -07:00
René Moser
fc79c8820e Merge pull request #1971 from insom/devel
Add `to_destination` parameter to iptables
2016-04-10 11:18:49 +02:00
Vlad Gusev
f1175693f6 system/puppet: add --tags parameter (#1916)
* system/puppet: add --tags parameter

--tags [1] is used to apply a part of the node’s catalog.

In puppet:
puppet agent --tags update,monitoring

In ansible:
puppet: tags=update,monitoring

[1] https://docs.puppetlabs.com/puppet/latest/reference/lang_tags.html#restricting-catalog-runs

* Add example of tag usage.

* system/puppet: add list type for a tags dict.
2016-04-10 11:14:48 +02:00
Aaron Brady
e2138c7e14 Add to_destination parameter 2016-04-06 11:30:59 +01:00
Chulki Lee
f3c168594a osx_defaults: fix datetime
Fix #1742
2016-04-01 20:45:33 -04:00
René Moser
daddc7caf4 Merge pull request #1478 from m0/firewalld_interface
Extends firewalld module with ability to add/remove interfaces to/from zones
2016-04-01 13:35:47 +02:00
David Hocky
031f98e86c fix dscp marking documentation in iptables module 2016-03-31 18:37:37 -04:00
René Moser
241dba1ee7 Merge pull request #1555 from LuckyGeck/devel
Added reject_with and uid_owner support to iptables module
2016-03-25 23:01:39 +01:00
Linus Unnebäck
7def4b01f5 make: move down ansible import 2016-03-25 12:42:45 +01:00
Linus Unnebäck
b328feccb1 make: add empty return docs 2016-03-25 12:18:58 +01:00
Linus Unnebäck
a0aef208b6 module: system/make 2016-03-24 20:28:29 +01:00
Pavel Sychev
eda178a988 Added version restriction for uid_owner and reject_with. 2016-03-23 13:46:50 +03:00
Pavel Sychev
c15dcf888b Added docs for reject_with and uid_owner. 2016-03-23 10:48:31 +03:00
Pavel Sychev
12890b14b2 Added reject_with and uid_owner support. 2016-03-23 10:46:53 +03:00
René Moser
0a65ddb3b1 Merge pull request #1641 from EmilienM/puppet/execute
system/puppet: allow to run puppet -e
2016-03-21 18:58:32 +01:00
Brian Coca
10e70b5f48 Merge pull request #1874 from mscherer/better_verif_alternatives
Add proper type to path and link
2016-03-19 17:01:40 -07:00
Michael Scherer
8c53e654f7 Add proper type to path and link
Since both of them are path, it should be checked using the
proper type.
2016-03-20 00:41:14 +01:00
Rene Moser
87599fd2ee osx_defaults: doc fix, add version_added for host agrument
See #1364
2016-03-19 13:17:43 +01:00
René Moser
4543d5838f Merge pull request #1364 from wincent/os-x-defaults-host
osx_defaults: add "host" attribute
2016-03-19 13:14:30 +01:00
Rene Moser
f80865d32a lvol: remove unused import
See #1425
2016-03-19 00:59:47 +01:00
René Moser
d159e6af34 Merge pull request #1425 from jonasvermeulen/devel
Added resizing code based on %-values
2016-03-19 00:55:51 +01:00
Michael Scherer
6b2bc9df04 Fix #1809, use the proper method to fail 2016-03-17 18:07:47 +01:00
Emilien Macchi
c289aa4cb9 system/puppet: allow to run puppet -e
-e or --execute [1] allows to execute a specific piece of Puppet code
such a class.

For example, in puppet you would run:
puppet apply -e 'include ::mymodule'

Will be in ansible:
puppet: execute='include ::mymodule'

[1] http://docs.puppetlabs.com/puppet/latest/reference/man/apply.html#OPTIONS
2016-03-17 13:04:24 -04:00
René Moser
aeb82091a6 Merge pull request #1634 from EmilienM/puppet/certname
system/puppet: add --certname parameter
2016-03-16 22:38:04 +01:00
René Moser
074c179793 Merge pull request #1787 from dougluce/cronvar-root-cron
cronvar.py: support absolute destinations
2016-03-16 19:20:49 +01:00
Rene Moser
cd3daf5763 iptables: add defaults to docs 2016-03-16 19:06:56 +01:00
René Moser
f479db69a4 Merge pull request #1822 from Comcast/feature/iptables_dscp_update
add support for setting dscp marks with iptables module
2016-03-16 18:56:33 +01:00
René Moser
186a68a382 Merge pull request #1597 from yta/fix_check_mode_issue_in_osx_defaults
osx_defaults: Do not make any changes in check mode
2016-03-15 22:27:39 +01:00
Brian Coca
df217fe892 added new puppet path to bin search
fixes #1835
2016-03-11 10:14:15 -05:00
David Hocky
404267b064 add version added to new params 2016-03-09 11:20:34 -05:00
David Hocky
b89f0f44d0 fix doc issue 2016-03-09 11:16:27 -05:00
David Hocky
c9e3c57ee9 add support for setting dscp marks with iptables module 2016-03-09 11:04:58 -05:00
Jonas Vermeulen
b5d75234a3 Added resizing based on %values. Included support for VG|PVS|FREE 2016-03-08 21:54:03 +01:00
Jonathan Mainguy
deb72106d2 fixes bug where puppet fails if logdest is not specified 2016-03-05 14:08:28 -05:00
Doug Luce
0298dac401 Use os module for checking absolute/joining paths 2016-03-03 15:10:19 -08:00
Doug Luce
84def4398f cronvar.py: support absolute destinations
Mainly so /etc/crontab can be written to.
2016-03-03 14:57:12 -08:00
Brian Coca
479f99678b Merge pull request #1719 from bborysenko/lvol-doc-fix
The size option is required for lvol module
2016-02-25 14:45:51 -05:00
Borys Borysenko
a3641cac4e The size option is required for lvol module with state=present 2016-02-25 16:56:05 +02:00
Michael Scherer
f63ef1fee8 Add documentation to explain that pvs will be created if needed
Fix #1720
2016-02-24 12:43:37 +01:00
Emilien Macchi
6193ed4b0d system/puppet: add --certname parameter
certname [1] can be a useful parameter when we need to specify a
certificate name different from the default value [2] in Puppet.

Ex: the hosts have different names, in advanced network isolation
setups.

Also, it can be used when we want to run Puppet with a specific node
definition and not using hostname or fqdn to match the nodes where we want to
run Puppet [3] (not recommended by Puppetlabs though).

[1] https://docs.puppetlabs.com/puppet/latest/reference/configuration.html#certname
[2] Defaults to the node’s fully qualified domain name
[3] http://docs.puppetlabs.com/puppet/latest/reference/lang_node_definitions.html#naming
2016-02-22 20:21:17 -05:00
Travis J Parker
1862a813db fixes documented command for svc sending SIGUSR1 2016-02-22 12:14:03 -08:00
Matt Martz
f881eb10d9 Add actual version to version_added for svc module 2016-02-22 11:14:40 -06:00
Ton Kersten
362760413f Fix facter path 2016-02-19 10:43:55 +01:00
James Cammarata
816d3bff6f Adding version_added field to logdest field for puppet module 2016-02-09 14:37:15 -05:00