Project

General

Profile

Activity

From 09/04/2023 to 10/03/2023

10/03/2023

03:43 PM Revision 4f3fc5cd (puppet-katello): Release 24.1.0
Ewoud Kohl van Wijngaarden
03:38 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
Yes. You can verify this:... Ewoud Kohl van Wijngaarden
03:13 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
And to be clear, you still need root access to do anythng with the password? Eric Helms
02:46 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
This is the installer patch that forces the credentials to also be reset. I started on a proper fix (https://github.c... Ewoud Kohl van Wijngaarden

09/29/2023

01:49 PM Revision 6e49a288 (puppet-tftp): Drop Fedora support
While there is no Fedora specific code, we can't run acceptance tests on
currently supported versions since there's n...
Ewoud Kohl van Wijngaarden
12:17 PM Revision 9c9394c1 (puppet-tftp): Drop Puppet 6 support
Ewoud Kohl van Wijngaarden

09/27/2023

04:00 PM Feature #36784 (Closed): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
Applied in changeset commit:installer|4462c6d4fc34cfdfe73d31c63cbf39eb979f73e6. Ewoud Kohl van Wijngaarden
11:54 AM Feature #36784 (Ready For Testing): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
The Foreman Bot
11:53 AM Feature #36784: Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
Foreman 3.8 was the first version to include puppetlabs-apache 9.0.0. Ewoud Kohl van Wijngaarden
11:52 AM Feature #36784 (Closed): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
Since puppetlabs-apache 9.0.0 (https://github.com/puppetlabs/puppetlabs-apache/commit/cedd45b63be89ea54bd2a596e6cd3a3... Ewoud Kohl van Wijngaarden
03:11 PM Revision 4462c6d4 (installer): Fixes #36784 - Drop MaxRequestsPerChild tuning
Since puppetlabs-apache 9.0.0 this tuning does nothing, since the
parameter was dropped. For older versions it may al...
Ewoud Kohl van Wijngaarden
12:38 AM Revision 027e2cb1 (puppet-certs): puppetlabs/stdlib: Require 9.x
Tim Meusel

09/26/2023

07:29 PM Revision 0520eb4b (puppet-certs): Remove default_ca parameter
Eric Helms
04:00 PM Bug #36772 (Closed): Add support for container gateway sqlite timeout tuning
Applied in changeset commit:puppet-foreman_proxy|b10ba9be674c43f167270269d116a754cd8db513. Anonymous
03:56 PM Revision b10ba9be (puppet-foreman_proxy): Fixes #36772 - container gateway db timeout tuning
Ian Ballou
03:38 PM Revision 672d2833 (puppet-certs): Document certs::apache parameters
Ewoud Kohl van Wijngaarden
03:23 PM Revision 3419d96a (puppet-certs): Set required params and autorequire
Some fields are always required and things break if they are not set.
It's also possible to automatically require the...
Ewoud Kohl van Wijngaarden
01:00 PM Feature #36694 (Closed): Show failed resources in failed installation report
Applied in changeset commit:installer|0d2fb671ea579bf1f44b93dded089c0db159b536. Ewoud Kohl van Wijngaarden
12:44 PM Revision 0d2fb671 (installer): Fixes #36694 - Show failed resources on installation
Kafo 7.1.0 has started to capture Puppet reports and in 7.2.0 it was
extended for better messages. This allows showin...
Ewoud Kohl van Wijngaarden
09:00 AM Feature #36697 (Closed): Expose candlepin logging parameter in the installer
Applied in changeset commit:puppet-katello|aecdaff568f4fb0a41bb5576298f3a469991a273. Ewoud Kohl van Wijngaarden
08:58 AM Revision aecdaff5 (puppet-katello): Fixes #36697 - Expose candlepin loggers parameter
Ewoud Kohl van Wijngaarden
08:55 AM Revision 3ab514e4 (puppet-katello): Mark compatible with puppetlabs/apache 11.x
Eric Helms

09/25/2023

09:28 PM Revision 41d6f1f7 (puppet-pulpcore): Mark compatible with puppetlabs/apache 11.x
Ewoud Kohl van Wijngaarden
07:42 PM Revision 1f9ddf94 (puppet-foreman): Mark compatible with puppetlabs/apache 11.x
Ewoud Kohl van Wijngaarden
05:12 PM Revision 8d68a3dd (puppet-foreman): Fix postgresql service name in test expectations
The puppetlabs/postgresql module has been refactored for multi-instance
support. This means the internal implementati...
Ewoud Kohl van Wijngaarden
02:05 PM Revision 0fdb575a (puppet-pulpcore): Remove EL7 compatiblity in acceptance tests
Ewoud Kohl van Wijngaarden
12:43 PM Revision 3c3e0bda (puppet-foreman_proxy_content): Mark compatible with puppetlabs/apache 11.x
Ewoud Kohl van Wijngaarden

09/22/2023

09:37 PM Bug #36772 (Ready For Testing): Add support for container gateway sqlite timeout tuning
The Foreman Bot
09:33 PM Bug #36772 (Closed): Add support for container gateway sqlite timeout tuning
Adds support for new sqlite_timeout param to reduce busy SQLite DB errors.
Related: https://projects.theforeman.or...
Ian Ballou
08:46 PM Revision 7242612e (puppet-certs): Remove unused full_path method
Ewoud Kohl van Wijngaarden
05:15 PM Revision 4ba477a6 (puppet-certs): Deploy the CA password file to ssl build directory
As the pki_dir is intended for deployment rather than generation,
and the CA password file is needed primarily for ce...
Eric Helms
04:26 PM Revision dd726d79 (puppet-certs): Manage the build_dir
Eric Helms
01:37 PM Feature #36769 (Duplicate): Add ANSIBLE_PERMISSION_CLASSES support for pulp_ansible regression
Ewoud Kohl van Wijngaarden

09/21/2023

10:03 PM Feature #36769 (Duplicate): Add ANSIBLE_PERMISSION_CLASSES support for pulp_ansible regression
A regression on pulp ansible that's in the pulpcore 3.28 repo will stop users from being able to sync ansible content... Ian Ballou

09/20/2023

03:41 PM Revision 9cba747e (puppet-foreman): correct sendmail configuration
the `email_` prefix is wrong, the settings have no such prefix
Fixes: 6c902a4f1f484137ebccafe4d3390881fd0b3d61
Evgeni Golov
09:21 AM Bug #36760 (Closed): CVE-2023-4886: World readable tomcat server.xml contains passwords
The file /etc/tomcat/server.xml contains passwords and is world readable. The actual keystore is limited by file perm... Ewoud Kohl van Wijngaarden

09/18/2023

03:42 PM Revision 2579642d (puppet-foreman_proxy_content): Release 25.0.0
Ewoud Kohl van Wijngaarden
03:00 PM Bug #36709 (Closed): Set ANSIBLE_PERMISSION_CLASSES as empty list to allow syncing collection repos on capsule without RBAC access to Galaxy endpoints
Applied in changeset commit:puppet-foreman_proxy_content|5f61c86bb3db59929c1e37247ee9bf9266caa9e9. Ewoud Kohl van Wijngaarden
02:37 PM Revision 5f61c86b (puppet-foreman_proxy_content): Fixes #36709 - Set ANSIBLE_PERMISSION_CLASSES to empty list
This allows syncing collection repos on capsule without RBAC access to
Galaxy endpoints.
Ewoud Kohl van Wijngaarden
02:14 PM Revision e86d7fbc (puppet-katello): Release 24.0.0
Ewoud Kohl van Wijngaarden
02:11 PM Revision baaa3ced (puppet-dns): Release 10.1.0
Ewoud Kohl van Wijngaarden
01:58 PM Revision 2b3588d5 (puppet-pulpcore): Release 8.5.0
Ewoud Kohl van Wijngaarden

09/15/2023

01:09 PM Revision cf568c84 (puppet-dns): Change sysconfig_file for Debian/Ubuntu to '/etc/default/named'
It is was changed quite a while back[1].
[1] https://salsa.debian.org/dns-team/bind9/-/commit/6fd962a36bb54e0106e001...
Ewoud Kohl van Wijngaarden

09/14/2023

02:00 PM Revision 4bcf33b8 (puppet-tftp): remove ubuntu 18 + debian 9, add redhat 9
Antonin Dvorak

09/12/2023

11:10 AM Revision 889b267b (installer): Remove qpid tunings from tuning profiles
William Clark
11:10 AM Revision 390f51fc (installer): Remove unused key enable_katello_agent from foreman.hiera/common.yaml
katello-agent was deprecated before, now it is removed altogether William Clark
11:10 AM Revision 188a71ff (puppet-katello): Remove katello-agent
William Clark
11:09 AM Revision 491a3fc5 (puppet-foreman_proxy_content): Remove katello-agent
William Clark

09/04/2023

07:47 PM Revision cd9f8901 (puppet-foreman): Allow puppet/systemd 5.x and 6.x
5.x dropped Puppet 6 support, which we don't support anyway
6.x dropped Ubuntu 18.04 support, which we should drop soon
Evgeni Golov
07:29 PM Revision 47568f2f (puppet-puppet): Allow puppet/systemd 5.x and 6.x
5.x dropped Puppet 6 support, which we don't support anyway
6.x dropped Ubuntu 18.04 support, which we don't support ...
Evgeni Golov
 

Also available in: Atom