Skip to content

Releases: linux-system-roles/logging

Add the `uid` option for elasticsearch; support ansible-core; improve performance; fix multi-line ansible_managed

05 Oct 12:34
Compare
Choose a tag to compare

test new version of tox-lsr

try py29

try official 2.5.0

use 2.5.1

We want to expose the uid and pwd parameters in our role,

to allow basic auth on the elasticsearch server.

The metrics update can be seen here: https://gerrit.ovirt.org/#/c/ovirt-engine-metrics/+/116098/

Bug-Url: https://bugzilla.redhat.com/1990490

Signed-off-by: Aviv Litman [email protected]

- Replacing the seport module with the semanage command line.

  • Adding policycoreutils-python for rhel-7/centos-7 or
    policycoreutils-python-utils for the others to __rsyslog_ovirt_prereq_packages.

Use the openssl command-line interface instead of the openssl module

in the test helper task tests/tasks/create_tests_certs.yml.

This is to avoid using the non ansible-core module.

Eliminating redundant loop.

When including an input or an output subrole, it is called with
one configuration item (not with the list). Thus, it should not
loop on the logging_inputs or logging_outputs items in the sub-
role task. This commit removes the loops and updated templates
according to the change.

Note: the basic input generates only one basic input conf file.

If multiple items having basics type are accidentally defined:
logging_inputs:
- name: basic_input0
type: basics
- name: basic_input1
type: basics
only the first item is used to generate ##-basic_input0.conf and
the rest (in this example, basic_input1) is ignored.

use apt-get install -y

Signed-off-by: Rich Megginson [email protected]

Use {{ ansible_managed | comment }} to fix multi-line ansible_managed

BZ#2006230, BZ#2006231, BZ#2006233

Generate test files with the new Ansible managed comment format

Performance improvement

  • Eliminating unnecessary set_fact tasks in tasks/main.yml and moving
    them to the individual input and output.
  • Eliminating unnecessary loop for the set_certs tasks.
  • Fixing a typo and applying the set_certs changes to tests_ovirt_elasticsearch.yml
    and tests_files_elasticsearch.yml.
  • Replacing variable names starting with one underscore with two.
  • Initializing rsyslog_inputs and rsyslog_outputs with [].

Only copy cert/key files if tls is `true`

24 Aug 16:11
Compare
Choose a tag to compare

Fix test scripts for BaseOS CI - removing unnecessary "become: true" from test scripts.

Fix test scripts for BaseOS CI - fixing the invalid expected value of tls.permittedpeer in tests_relp.yml.

Update copy tasks conditions with tls true

Playbook fails when certificates are not used.
This patch adds condition for the copy tasks to perform only when tls is set to true.

remove trailing spaces

remove trailing spaces to fix linter issues

Put multiple tasks under the condition,

item.tls is defined | ternary(item.tls, item.use_cert | d(true))
in one block.

Fixing a bug in "Check certs - key/certs data are provided, but tls is

false" found by @avlitman.

This case must have failed the Check certs task.

tls is false and certs+key defined: task was skipped.

Allowing the case, tls is false and key/certs vars are configured.

  • The case used to fail in the checking task with emitting an error.
    The error is transformed to a warning.
  • For the test case, TEST CASE 2 in tests_files_elasticsearch.yml
    is added.

In addition, some minor bugs in tests_files_elasticsearch.yml are
fixed.

ref: bz1994580

drop support for ansible 2.8

12 Aug 16:21
Compare
Choose a tag to compare

Drop support for Ansible 2.8 by bumping the Ansible version to 2.9

min_ansible_version is now 2.9
Bug 1989197 - drop support for Ansible 2.8
https://bugzilla.redhat.com/show_bug.cgi?id=1989197

Several bug fixes

07 Aug 01:46
Compare
Choose a tag to compare

use correct python-cryptography package

Use python-cryptography on EL7 - use python-cryptography3 everywhere
else
https://bugzilla.redhat.com/show_bug.cgi?id=1989962

[FIX] README false variable name

inside role rsyslog logging_purge_original_conf variable is named logging_purge_confs

python2 renders server_host list incorrectly

On python2 (el7) when server_host is a list, this:

            server={{ item.server_host }}

gets rendered as this:

            server=[u'logging-es0', u'logging-es1']

I think we should not rely on the python/jinja2 list to string conversion
being exactly the same format as the rsyslog string list format.

do not warn about unarchive or leading slashes

https://bugzilla.redhat.com/show_bug.cgi?id=1984182
Use the args.warn: false to omit the warning about using
unarchive instead of the tar command.
Use the tar -P flag to omit the warning about trimming
leading slashes / from the paths.

Support list of elasticsearch hosts; use tar command instead of archive module

28 Jul 21:15
Compare
Choose a tag to compare

Instead of the archive module, use "tar" command for backup.

Note: having the module 'archive' makes the logging role fail with
an error "couldn't resolve module/action 'archive'." if executed
with ansible-navigator.

Stop using set_fact to set rsyslog_backup_dir in roles/rsyslog/tasks/main.yml
to fix a bug that the backup dir could have repeated
rsyslog.d-{{ ansible_date_time.iso8601_basic_short }}
sub-directories if the logging role is executed multiple times.

Move "logging_purge_confs: true" to TEST CASE 3 in tests_basic_files.yml.

Add a support for list value to server_host in the elasticsearch output

RFE from oVirt:
elasticsearch now allows the server to be a list of servers:
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omelasticsearch.html#server
Is this variable adjusted in Logging repo to be an array?

  • server_host: Host name Elasticsearch is running on. The value
    is a single host or list of hosts. Required.

Fix lint issues; fix README rendering

26 May 20:43
Compare
Choose a tag to compare

Fix linter issues

Fix README rendering

support jinja 2.7; several bug fixes

22 Feb 21:47
Compare
Choose a tag to compare

Make rsylog-gnutls package not required - only if using input or output
that requires gnutls

Fixing bugs in permitted_servers and permitted_clients parameter in relp.

Issue: cert and key files should be deployed in the /etc/pki/tls folder

README - Removing a duplicated "port" in the relp output parameter.

use FROMHOST instead of HOSTNAME for remote files log file name

Bug fix in relp_output - there was inconsistencies in the parameters.

Bug fix in relp_input - an unwanted loop index was added as suffix

support jinja 2.7

Support property based filters, imrelp, omrelp

19 Nov 20:07
Compare
Choose a tag to compare

Adds support for property based filters
Adds support for input imrelp
Adds support for output omrelp
Fixes some issues with elasticsearch output

This also adds support for collections conversion as well as some tox test fixes

Support for network inputs/outputs incl. TLS, Elasticsearch output

26 Aug 18:35
Compare
Choose a tag to compare

Support for udp, tcp (plain and TLS) inputs and outputs
Support for Elasticsearch output
Support for multiple combinations of inputs and outputs