puppet-certs/HISTORY.md @ master
10.0.0 (2020-10-29)
Breaking changes:
- Remove unused variables in params.pp #301 (ekohl)
- Refs #30316: Cleanup bootstrap RPM generation code #294 (ehelms)
Implemented enhancements:
9.0.0 (2020-08-05)
Breaking changes:
- Refs #30346: Generate a separate truststore for Candlepin #291 (ehelms)
- Refs #30316: Drop bootstrap RPM code #290 (ehelms)
- Fixes #30312: Drop docker, atomic and goferd support from consumer RPM #289 (ehelms)
Implemented enhancements:
- Refs #30346 - allow override of candlepin client keypair group #295 (jturel)
- Refs #29715 - Create mongodb client certificate bundle #288 (ehelms)
- Refs #29715: Add mongodb server and client certs #285 (ehelms)
8.0.0 (2020-05-14)
Breaking changes:
- Use modern facts #286
- Remove unused defines #280 (ekohl)
- Refs #28924: Drop amqp key and truststore + generate Artemis client certs #275 (ehelms)
Implemented enhancements:
- Refs #29215: Add RHEL 8 to metadata and run tests on all OSes #284 (ehelms)
- Allow extlib 5.x #279 (mmoll)
- Fixes #29195 - puppet-certs should run on el8 #278 (wbclark)
Fixed bugs:
7.0.0 (2020-02-11)
Breaking changes:
- Remove unused $regenerate_ca parameter #268 (ekohl)
- /etc/pki/pulp perms and group owner #266 (wbclark)
6.1.1 (2020-01-17)
Implemented enhancements:
Fixed bugs:
- Fixes #25683 - Do not run postun script if upgrading #267 (jlsherrill)
Merged pull requests:
6.1.0 (2019-10-23)
Implemented enhancements:
- Set a variable that defines the Apache CA #261 (ekohl)
- Fixes #27847 - Refactor foreman_proxy_content class #256 (ekohl)
Fixed bugs:
- Refs #27847 - Use legacy facts #260 (ekohl)
- Refs #27847 - Load CNAME default from params #259 (ekohl)
6.0.2 (2019-09-16)
Fixed bugs:
6.0.1 (2019-06-13)
Merged pull requests:
6.0.0 (2019-04-16)
Breaking changes:
- Drop Puppet 4 #251 (ekohl)
- Move qpid client cert to /etc/pki/pulp #229 (ehelms)
- Add CA cert to keystore as a trustedcert #245 (ehelms)
- Add nssdb files for EL8 #244 (ehelms)
5.1.2 (2019-04-03)
Fixed bugs:
5.1.1 (2019-04-02)
Fixed bugs:
- Fixes #26180 Move type common module to PuppetX namespace so doesn't break 'puppet generate types' #249 (treydock)
- Fixes #26088 - ensure RSA word for SSLProxyMachineCertificateFile #243 (iNecas)
5.1.0 (2019-02-14)
Implemented enhancements:
5.0.0 (2019-01-11)
Breaking changes:
Implemented enhancements:
- Use FQDNs data types where appropriate #236 (ekohl)
- Check the file is present in tar_extract #230 (ekohl)
- Add Puppet 6 support #226 (ekohl)
- Move keystore to Candlepin default location #225 (ehelms)
- Refs #24947 - Allow extract tar files at the top level #215 (ekohl)
Fixed bugs:
- Fixes #25739 - don't allow statements to fail in an set -e script #234 (evgeni)
- Fixes #25512 fixes incorrect editing of rhsm.conf #227 (patilsuraj767)
Merged pull requests:
- Use extlib namespaced functions #239 (ekohl)
- Candlepin CA should be owned by tomcat user #232 (jturel)
- Deploy CA cert and key to Candlepin default locations #228 (ehelms)
4.4.2 (2018-11-29)
Fixed bugs:
- Fixes #25512 fixes incorrect editing of rhsm.conf #227 (patilsuraj767)
- Fix wrong redirect notation #224 (masatake)
4.4.1 (2018-10-31)
Fixed bugs:
4.4.0 (2018-10-31)
Implemented enhancements:
- Rewrite validate_file_exists to a modern Ruby function #222 (ekohl)
- Add support for debian derivatives #220 (m-bucher)
4.3.0 (2018-10-05)
Implemented enhancements:
- Switch to puppet-trusted_ca & allow puppet-extlib 3.0 #217 (ekohl)
- set empty-password for nssdb as FIPS fails on password file #211 (amitkarsale)
Merged pull requests:
- Allow stdlib & concat 5.x #216 (ekohl)
- Do not let foreman_proxy_content inherit from params #214 (ekohl)
4.2.0 (2018-07-16)
Implemented enhancements:
Fixed bugs:
4.1.0 (2018-05-29)
Implemented enhancements:
- Remove katello-common dependency #202 (jturel)
- Remove dependency on puppet-common #197 (jturel)
- candlepin: remove nssdb dependency #174 (timogoebel)
Fixed bugs:
- Refs #15963 - Fix documentation typos #203 (itsbill)
- Fixes #22725 - Add newline to CA to prevent EOM error on registration. #198 (chris1984)
- Fixes #22884 - Check RHSM version for hostname-override #195 (johnpmitsch)
4.0.1 (2018-02-28)
Fixed bugs:
4.0.0 (2018-01-29)
Breaking changes:
Implemented enhancements:
- Add "set -e" to consumer script #191 (mdellweg)
- Refs #21873 - Switch warn to fail #189 (chris1984)
- Correct documentation on Candlepin certs #187 (ekohl)
- Fixes #21873 - Add validation for proxy fqdn #186 (chris1984)
- add debian support #184 (mdellweg)
- Update changelog & major version bump #180 (ekohl)
Merged pull requests:
3.1.0
Merged pull requests:
- Allow extlib 2.0 #178 (ekohl)
- Correct stdlib dependency #177 (ekohl)
- Use implicit dependency chaining on puppet #176 (ekohl)
- Remove the $candlepin_qpid_exchange variable #171 (ekohl)
- REAMDE: Remove dummy sections #170 (ekohl)
- Use certs::keypair #169 (ekohl)
- Drop apache username/password #168 (ekohl)
- Add acceptance tests #167 (ekohl)
- Document & parametrize certs::katello #166 (ekohl)
- Add an acceptance test for candlepin #145 (ekohl)
3.0.1 (2017-11-29)
3.0.0 (2017-08-30)
Merged pull requests:
- Simplify variable access #165 (ekohl)
- Allow puppetlabs-concat 4.0 #163 (ekohl)
- msync: Puppet 5, parallel tests, .erb templates, cleanups, facter fix #162 (ekohl)
- #19578 - Switch to custom datatype for path validation #161 (NeilHanlon)
- Refactor to Puppet 4 types #159 (sean797)
2.0.1 (2017-06-01)
Merged pull requests:
- Fixes #19734 - enforce proper exection order for Candlepin #158 (evgeni)
- modulesync: Drop puppet 3, improve testing infra #157 (ekohl)
- Fixes #19271 - reload docker instead of restart #156 (ahumbe)
- fixes #19259 - apache key should be mode 0440 #154 (stbenjam)
2.0.0 (2017-04-07)
Closed issues:
- Proxy install failing #149
Merged pull requests:
- Expand ignore with generated files/directories #153 (ekohl)
- Simplifications & some specs #152 (ekohl)
- Modulesync update #151 (ekohl)
- Contain classes in init to preserve relationships #150 (ehelms)
- Remove a dependency on theforeman-foreman #147 (ekohl)
- Modulesync update #146 (ekohl)
- Fix qpid dependency on apache #144 (ekohl)
- Deploy CA cert for Foreman to talk to proxy #143 (ehelms)
- remove dependencies to external modules #142 (timogoebel)
- move qpidd reload to katello module #141 (timogoebel)
- qpid does not need apache #140 (timogoebel)
- extract nssdb creation into separate class #139 (timogoebel)
- extract ca code from init.pp #138 (timogoebel)
- Introduce certs::keypair #137 (ekohl)
- foreman_proxy does not need foreman user #136 (timogoebel)
- fix keytool idempotency #135 (timogoebel)
- move qpid exchange creation to puppet-candlepin module #134 (timogoebel)
- fixtures.yml uses https #133 (timogoebel)
- fix README #132 (timogoebel)
- classes inherit from init #131 (timogoebel)
- Allow newer versions of dependencies #130 (ekohl)
- Make variable usage and indenting consistent #129 (ekohl)
- fixes #17378 - tomcat has dedicated certificate #128 (timogoebel)
- fixes #17572 - module works with master compile #127 (timogoebel)
- Update modulesync config #125 (ekohl)
- Only reference ::certs::params values in foreman_proxy_content #124 (stbenjam)
- fixes #17714 - use pki dir for puppet client certs #117 (stbenjam)
1.0.1 (2017-01-24)
Merged pull requests:
- refs #17366 - remove capsule.pp #123 (stbenjam)
- Remove EL6 support #122 (ekohl)
- fixes #17863 - use puppet user not uid #121 (stbenjam)
- refs #15931 - allow passing the cname parameter when generating certs #120 (evgeni)
- Change existing Kafo type definitions to Puppet 4 types #114 (stbenjam)
1.0.0 (2016-12-29)
Merged pull requests:
- Changed tar option to determine the file is compressed or not #119 (netman2k)
- Fixes #17721 - check for fqdn before adding custom fact #116 (jlsherrill)
- fixes #17658 - support restarting goferd on OS's with systemd, too #115 (stbenjam)
0.7.5 (2016-12-14)
0.7.4 (2016-12-14)
Merged pull requests:
- Require puppet server installed before setting file user to puppet #113 (ehelms)
- module sync update #112 (jlsherrill)
- refs #17366 - change references from capsule to foreman_proxy_content #111 (stbenjam)
- Modulesync, bump major for 1.8.7/el6 drop #110 (stbenjam)
- Modulesync #109 (stbenjam)
- Modulesync #108 (stbenjam)
- fixes #16945 - use node_fqdn for consumer cert RPM generation #107 (stbenjam)
- Modulesync: rspec-puppet-facts updates #106 (stbenjam)
- refs #10283 - mark parameters advanced #101 (stbenjam)
- Refs #16134 - deploy hostname override fact #100 (jlsherrill)
- refs #11737 - support cnames and add localhost cname to qpid certs #65 (stbenjam)
0.7.1 (2016-09-14)
Merged pull requests:
0.7.0 (2016-09-12)
Merged pull requests:
- Fixes #16388 - rpm -e katello-ca-consumer rpm should revert rhsm.conf #104 (sean797)
- Modulesync update #103 (ehelms)
- Remove unused password_file_dir parameter #102 (ekohl)
- Use /etc/puppet for client SSL certificates #99 (stbenjam)
- Move tomcat name logic to puppet-certs #98 (stbenjam)
- Update rhsm config template for puppet 4 #97 (beav)
- fixes #15882 - support AIO paths for puppet #95 (stbenjam)
- Fixes #15700 - make sure change of certs propagates changes in nssdb #94 (iNecas)
- Modulesync: pin json_pure #93 (stbenjam)
- Refs #15538: Check for nssdb cert as the beginning of a line #92 (ehelms)
- Fixes #15538 - make sure the rpms from ssl-build are used #91 (iNecas)
- Pin extlib since they dropped 1.8.7 support #90 (stbenjam)
- refs #15217 - puppet 4 support #89 (stbenjam)
0.6.0 (2016-05-27)
Merged pull requests:
- fixes #15063 - remove client cert configuration #88 (stbenjam)
- Refs #12266 - fixing case where no certs exist #86 (jlsherrill)
- Refs #14858 - removes gutterball #85 (cfouant)
- Refs #12266 - Fixes no implicit conversion of Hash into String #84 (jlsherrill)
- Fixes #12266: Handle last RPM sort for more than 10 bootstrap RPMs #83 (ehelms)
- Add paths for puppet-lint docs check #82 (stbenjam)
- Fixes #14223 - Handles atomic machine detection properly #81 (parthaa)
0.5.0 (2016-03-16)
Merged pull requests:
- Modulesync #80 (stbenjam)
- Fixes #14188 - change pulp_parent to qpid_client class #78 (johnpmitsch)
0.4.1 (2016-03-01)
Merged pull requests:
- Fixes #13925: Use concat to build reconfigure script #77 (ehelms)
- fix bootstrap rpm in katello_devel install #76 (jlsherrill)
0.4.0 (2016-02-24)
Merged pull requests:
- Fixes #13658 - pulp_client_key and pulp_client_cert not being set cor… #75 (johnpmitsch)
- Fixes #13635 - set pulp client cert settings #73 (johnpmitsch)
- Fixes #13634 - Adding Katello cert to ca-trust #72 (parthaa)
- Fixes #13489 - fixes group on pulp_client cert #71 (cfouant)
- Fixes #13188 - Creates certificates for capsule authentication #70 (cfouant)
- Fixes #10052 - Code to setup rhsm.conf for atomic hosts #67 (parthaa)
0.2.0 (2015-10-15)
Merged pull requests:
- Use cache_data and random_password from extlib #68 (ehelms)
- Pulp consumer_ca_cert is now ca_cert #66 (ehelms)
- Add forge and travis badges to README #64 (stbenjam)
- Fixes #11755: Validate absolute path for custom certificates #58 (ehelms)
0.1.0 (2015-07-20)
Merged pull requests:
- Prepare puppet-certs for release #63 (stbenjam)
- Fixes #10670 - deploy the katello-default-ca as part of the bootstrap RPM #62 (iNecas)
- Fixes #10097 - Fixed references to city #61 (adamruzicka)
- Updates from modulesync. #60 (ehelms)
- fixes #10350 - switch to qdrouterd user for certs + keys #59 (mccun934)
- Fixes #9888 - use random_password over generate_password #57 (dustints)
- Fixes #9875: Better docker service restart #56 (elyezer)
- Pin rspec on ruby 1.8.7 #55 (stbenjam)
- Fixes #9699: Check for nssdb creation before running certutil. #54 (ehelms)
- fixes #8636 - Katello CA cert now trusted system wide #53 (jlsherrill)
- refs #9392 - pass options to foreman-rake config command correctly #52 (stbenjam)
- refs #8175 - certificates for dispatch router #51 (stbenjam)
- Fixes #9392 - Substitute foreman-config (deprecated) for foreman-rake config #50 (dLobatog)
- Fixes #9204: Resolve conflict with similar cert names. #48 (ehelms)
- Refs #8756: Ensure server ca file exists before deploying. #47 (ehelms)
- Refs #7745: Deploy client cert bundle specifically for use by the Capsul... #45 (ehelms)
- Refs #8756: Deploy the server_ca to the Capsule directories for RHSM. #44 (ehelms)
- Refs #8756: Allow configuring the RHSM port. #43 (ehelms)
- Fixes #8850 - import gutterball cert after katello nssdb exists #42 (dustints)
- Refs #8372 - generate client certificates to be used by the smart proxy #41 (iNecas)
- Ref #8548 - creates and installs certs for gutterball #40 (dustints)
- Refs #8270: Let defaults be defined by params. #39 (ehelms)
- fixes #8261 - use Default Organization for certificate org #38 (stbenjam)
- fixes #7633 - depend on katello-common >= 0.0.1 #37 (stbenjam)
- refs #7558 - make CA readable by foreman and deploy CA crt to pub #36 (stbenjam)
- Readme #35 (iNecas)
- Add qpidd group and candlepin event topic as params #34 (dustints)
- Refs #7104 - ensure the qpidd is really running before configuring it #33 (iNecas)
- Fixes #7239 - make sure the qpid client cert is deployed before the pulp migrations #32 (iNecas)
- Fixes #7210 - make sure the Package['pulp-server'] is defined #31 (iNecas)
- Refs #6736: Updates to standard layout and basic test. #30 (ehelms)
- Refs #7147 - lock puppet-lint to <= 1.0.0 #29 (iNecas)
- fixes #7029 - fixing bootstrap of older rhsm clients #27 (jlsherrill)
- fixes #7007 - require pulp-server to be installed before cert work #26 (jlsherrill)
- Refs #6875 - separate the default CA and server CA #25 (iNecas)
- Refs #6126: Fully specify deployment URL for RHSM. #24 (ehelms)
- Refs #6418 - Fix keytool use for Java 6 compatibility. #22 (awood)
- Set up certificates for Candlepin/Qpid integration. #21 (awood)
- Fixes #6359 - consumer rpm err set full_refresh #20 (dustints)
- Fixes #4650 - consumer cert alias for katello #19 (dustints)
- Fixes #5599: Set cert expirations to 20 years by default. #18 (ehelms)
- Fixes #6140 - support RHEL 7 #16 (jmontleon)
- Fixes #5823 - full_refresh_on_yum=1 to rhsm.conf #15 (dustints)
- Refs #5815 - generate certs for node qpid #14 (iNecas)
- fixes #5486 prefix and candlepin url incorrect for rhsm template on dev... #13 (dustints)
- Refs #5423 - fix certs generation for capsule usage #12 (iNecas)
- Fixing #5299: variables not used properly. #11 (omaciel)
- Parameterize node certs and removes reliance on directories not yet crea... #10 (ehelms)
- Addresses changes made to katello-certs-tools regarding location of #9 (ehelms)
- Capsule related certs settings #8 (iNecas)
- fixing perms on apache key cert #7 (jlsherrill)
- Provides clean up and ordering change of parameters to reduce dependency #6 (ehelms)
- adjusting the cert module to work with the new apache module #5 (jlsherrill)
- Certs module cleanup #3 (iNecas)
- Parameterizing the module and removing coupling to the Katello module. #2 (ehelms)