Skip to content

Releases: ClarifiedSecurity/nova.core

v5.5.12

05 Aug 09:29
0d4df03

Choose a tag to compare

  • Added DHCP and SLAAC configuration support to configure_networking role
  • Set vault version to 1.20.1
  • Added support for IPv4/6 DHCP and SLAAC in connection role for Proxmox
  • Set keycloak version to 26.3.2
  • Moved connection mode check to deploy_vars so it's the same across all subsequent roles
  • Added a feature to only enable the API for caddy to use it for further configuration
  • providentia: Prepare for next release

v5.4.11

24 Jul 11:40
6caf3e6

Choose a tag to compare

  • Added missing Docker proxy variable to monolith
  • Passing ansible_ssh_extra_args in connect role if they are defined
  • Fixed an issue where vcenter_vmtools_policy role tried to upgrade unmanaged VMTools
  • Using nova.core.addresses('connection_mode') for all connection mode lookup use cases
  • Added a feature to get the host's connection_mode with nova.core.addresses filter
  • Replaced deprecated community.vmware.vmware_guest_powerstate module
  • Set outline version to 0.85.1
  • Set nexus version to 3.82.0 and added a variable to define an LDAP user filter
  • Added a feature to define custom Caddy SAN names and web servers in monolith role
  • Set keycloak version to 26.3.1
  • Set default gitlab_runner version to latest

v5.4.1

14 Jul 07:56
fba8f57

Choose a tag to compare

  • Added a feature to define custom certificate for each service in monolith
  • Added missing critical constraint for Root CA in vault role
  • Added a more universal missing variables check for Proxmox in machine_operations role
  • Set keycloak version to 26.3.0
  • Refactored configure_package_mirrors role to match Ubuntu 24.04 apt config format
  • Set outline version to 0.85.0
  • Made sure user with password list is always empty before loops in accounts role to allow multiple runs
  • Fixed incorrect account lockout disable for vault
  • Trying to print out error log content if Sysprep fails in win_sysprep role
  • Fixed a race condition in monolith where certificates were not requested from a newly created CA
  • Removing sysprep blocking Xbox package in win_sysprep role
  • Only updating ansible_deployer_password if it was actually changed in accounts role
  • Added a feature to only update password on account creation with the accounts role
  • Set vault version to 1.20.0
  • Redesigned accounts role so randomized password and SSH key-only auth would work for supported OSs
  • Added support for SSH keys to PanOS in accounts role
  • Using jinja to lookup the correct admin_account_password in configure_networking role
  • Added a feature to use save_password_to_vault variable per account to save account password to Vault
  • Added a feature to enable audit logging for `vault´
  • Checking correct deploy mode for Linode and VMware Workstation in machine_operations role
  • In deploy_vars role not getting Vault token when pre_role is used since it's not needed most of the time
  • Removed unused Proxmox defaults from configure_networking role
  • Quoting netplan GW addresses to deal with :: ending addresses in network_configuration role

v5.1.16

18 Jun 10:03
f630a47

Choose a tag to compare

  • Added a rescue for the often broken localectl command in os_configuration role
  • Removed unmaintained requirements files
  • Migrated community.general modules to new community.proxmox collection
  • Using nova.core.powerstate to restart VM when using nmcli to configure networking on Proxmox with configure_networking role
  • Fixed an issue where non-sysprep Windows machines could not be configured on Proxmox with configure_networking role
  • Set nexus version to 3.81.1
  • Printing out a long template download message for VMware Workstation in machine_operations role
  • Updated sysprep and updates vars in template_os_configuration role to match the correct format
  • Shutting down VM for non-live snapshots on Proxmox in snapshots role
  • Fixed incorrect Gitlab FQDN reference in gitlab_runner role
  • Added DHCP support for Proxmox to connection role
  • Added more informative error message when Sysprep fails to win_sysprep role

v5.0.8

12 Jun 14:50
e87b519

Choose a tag to compare

  • Removed unneeded start command when installing Tuoni in tuoni role
  • Linted the connection role
  • Allowing users to reboot the host over RDP with linux_xrdp_server role
  • Fixed an issue where existing VM info on Proxmox was not used when removing or redeploying a VM
  • Removed unmaintained (experimental) support for configuring VMware ESXis with nova.core
  • Redesigned netplan to use resolv.conf when multiple IP addresses are present for a nic in configure_networking role
  • Removing any existing /etc/netplan/ content also when nmcli customization method in used in configure_networking role
  • Using listen and notify for handlers in firewall role instead of task names
  • Made sure all network customization methods use the same VMware address in configure_networking role
  • Setting API token as fact in tuoni role so it can be used outside of the role
  • Setting vault version to 1.19.5
  • Set keycloak version to 26.2.5
  • Updated configure_networking & template_os_configuration to support latest Proxmox
  • Added ParrotOS sudo config file path to unix_distro_sudoers_map default in accounts role

v4.8.2

06 Jun 09:14
ebf0fcb

Choose a tag to compare

  • Added a feature to install licensed plugins with the tuoni role
  • Fix for the gitlab role to handle the issues around recreation of projects
  • Added an extra container registry check to Gitlab projects recreation tasks
  • Added the possibility to configure cpu and memory limits to docker based gitlab-runners
  • Refactored Windows tasks in updates to avoid update loop error
  • Disabling user lockout for vault
  • Updated Python packages for non-Catapult use cases
  • Locking actions/checkout workflow version

v4.7.20

26 May 09:32
4e952e3

Choose a tag to compare

  • Refactored monolith role so it can be used when another Vault already exists in the project
  • Enabled nested AD group membership search in vault role
  • Fixed the Gitlab role user management tasks to support over 100 users configured
  • Gitlab projects api now needs to remove an active container registtry before deleting a project
  • Added general config options in Gitlab to disable telemetry by default
  • Removed no longer needed Kali docker apt proxy from nexus defaults
  • Redesigned non-default Debian OSs' in docker role so they would use Debian repo
  • Allowing to pass os_configuration_create_snapshot_with_just_clone variable from CLI
  • Further increased gitlab health check limits to allow it being installed on low-resource systems
  • Added logging and dependecies for outline Docker compose file to make the deployment more stable
  • Removed no longer needed keys from vmware.vmware.vm_powerstate modules
  • Set outline version to 0.84.0
  • Added required variables check for vSphere in machine_operations role
  • Redesigned Vault role to support deploying multiple PKI engines with more advanced features
  • Updated requirements for non-Catapult use cases
  • Increased sysprep retries for low resource machines in win_sysprep role
  • Added loop vars for Windows Update tasks in finalize role
  • Not forwarding SSH agent my default in connect role
  • Set vault version to 1.19.3
  • Set nexus version to 3.80.0
  • Replaced deprecated community.windows.win_auto_logon module
  • Replaced deprecated community.windows.win_user_profile module
  • Added a default cleanup policy for nexus
  • Set caddy version to 2.10.0
  • Expanded command parameters for MacOS in updates role

v4.6.2

29 Apr 08:33
31db802

Choose a tag to compare

  • Updated Ansible collections for non-Catapult use cases
  • Added a feature to toggle snapshot creation in os_configuration role when just_clone is used
  • Added the oidc logout uri env var in outline as an optional env var
  • Added a feature to also disable auto-updates for Debian based OS in the finalize role
  • Fixed a typo in aws_region variable in deploy_vars role
  • Fixed incorrect IPv6 GW lookup var for PanOS in configure_networking role
  • Fixed the gitlab config template that configures ldap cert verification
  • Updated Python packages for non-Catapult use cases
  • Added new egress_network_info & connection_network_info vars to deploy_vars role

v4.4.5

15 Apr 07:14
c194944

Choose a tag to compare

  • Fixed incorrect release version file

v4.4.4

15 Apr 07:03
d2baf28

Choose a tag to compare

  • Added retries for RouterOS in gather_facts role for stability
  • Set outline version to 0.83.0
  • Added a feature to force password auth for ssh in connect role
  • Removed unneeded code from the tag and release workflow
  • Locking actions/checkout workflow version
  • Refactored powerstate module to simplify the code
  • Migrated deprecated vmware.vmware_rest.vcenter_vm_hardware_*_info module to new vmware.vmware.vm_resource_info module
  • Migrated deprecated VMware powerstate module to new vmware.vmware.vm_powerstate module
  • Updated Ansible collections for non-Catapult use cases
  • Providentia: fix config mount permissions