Releases: ClarifiedSecurity/nova.core
Releases · ClarifiedSecurity/nova.core
v5.5.12
- Added DHCP and SLAAC configuration support to
configure_networkingrole - Set
vaultversion to 1.20.1 - Added support for IPv4/6 DHCP and SLAAC in
connectionrole for Proxmox - Set
keycloakversion to 26.3.2 - Moved connection mode check to
deploy_varsso it's the same across all subsequent roles - Added a feature to only enable the API for
caddyto use it for further configuration - providentia: Prepare for next release
v5.4.11
- Added missing Docker proxy variable to
monolith - Passing ansible_ssh_extra_args in
connectrole if they are defined - Fixed an issue where
vcenter_vmtools_policyrole tried to upgrade unmanaged VMTools - Using nova.core.addresses('connection_mode') for all connection mode lookup use cases
- Added a feature to get the host's connection_mode with
nova.core.addressesfilter - Replaced deprecated
community.vmware.vmware_guest_powerstatemodule - Set
outlineversion to 0.85.1 - Set
nexusversion to 3.82.0 and added a variable to define an LDAP user filter - Added a feature to define custom Caddy SAN names and web servers in
monolithrole - Set
keycloakversion to 26.3.1 - Set default
gitlab_runnerversion to latest
v5.4.1
- Added a feature to define custom certificate for each service in
monolith - Added missing critical constraint for Root CA in
vaultrole - Added a more universal missing variables check for Proxmox in
machine_operationsrole - Set
keycloakversion to 26.3.0 - Refactored
configure_package_mirrorsrole to match Ubuntu 24.04 apt config format - Set
outlineversion to 0.85.0 - Made sure user with password list is always empty before loops in
accountsrole to allow multiple runs - Fixed incorrect account lockout disable for
vault - Trying to print out error log content if Sysprep fails in
win_syspreprole - Fixed a race condition in
monolithwhere certificates were not requested from a newly created CA - Removing sysprep blocking Xbox package in
win_syspreprole - Only updating
ansible_deployer_passwordif it was actually changed inaccountsrole - Added a feature to only update password on account creation with the
accountsrole - Set
vaultversion to 1.20.0 - Redesigned
accountsrole so randomized password and SSH key-only auth would work for supported OSs - Added support for SSH keys to PanOS in
accountsrole - Using jinja to lookup the correct admin_account_password in
configure_networkingrole - Added a feature to use
save_password_to_vaultvariable per account to save account password to Vault - Added a feature to enable audit logging for `vault´
- Checking correct deploy mode for Linode and VMware Workstation in
machine_operationsrole - In
deploy_varsrole not getting Vault token when pre_role is used since it's not needed most of the time - Removed unused Proxmox defaults from
configure_networkingrole - Quoting netplan GW addresses to deal with :: ending addresses in
network_configurationrole
v5.1.16
- Added a rescue for the often broken localectl command in
os_configurationrole - Removed unmaintained requirements files
- Migrated
community.generalmodules to newcommunity.proxmoxcollection - Using
nova.core.powerstateto restart VM when using nmcli to configure networking on Proxmox withconfigure_networkingrole - Fixed an issue where non-sysprep Windows machines could not be configured on Proxmox with
configure_networkingrole - Set
nexusversion to 3.81.1 - Printing out a long template download message for VMware Workstation in
machine_operationsrole - Updated sysprep and updates vars in
template_os_configurationrole to match the correct format - Shutting down VM for non-live snapshots on Proxmox in
snapshotsrole - Fixed incorrect Gitlab FQDN reference in
gitlab_runnerrole - Added DHCP support for Proxmox to
connectionrole - Added more informative error message when Sysprep fails to
win_syspreprole
v5.0.8
- Removed unneeded start command when installing Tuoni in
tuonirole - Linted the
connectionrole - Allowing users to reboot the host over RDP with
linux_xrdp_serverrole - Fixed an issue where existing VM info on Proxmox was not used when removing or redeploying a VM
- Removed unmaintained (experimental) support for configuring VMware ESXis with nova.core
- Redesigned netplan to use resolv.conf when multiple IP addresses are present for a nic in
configure_networkingrole - Removing any existing /etc/netplan/ content also when nmcli customization method in used in
configure_networkingrole - Using listen and notify for handlers in
firewallrole instead of task names - Made sure all network customization methods use the same VMware address in
configure_networkingrole - Setting API token as fact in
tuonirole so it can be used outside of the role - Setting
vaultversion to 1.19.5 - Set
keycloakversion to 26.2.5 - Updated
configure_networking&template_os_configurationto support latest Proxmox - Added ParrotOS sudo config file path to
unix_distro_sudoers_mapdefault inaccountsrole
v4.8.2
- Added a feature to install licensed plugins with the
tuonirole - Fix for the gitlab role to handle the issues around recreation of projects
- Added an extra container registry check to Gitlab projects recreation tasks
- Added the possibility to configure cpu and memory limits to docker based gitlab-runners
- Refactored Windows tasks in
updatesto avoid update loop error - Disabling user lockout for
vault - Updated Python packages for non-Catapult use cases
- Locking
actions/checkoutworkflow version
v4.7.20
- Refactored
monolithrole so it can be used when another Vault already exists in the project - Enabled nested AD group membership search in
vaultrole - Fixed the Gitlab role user management tasks to support over 100 users configured
- Gitlab projects api now needs to remove an active container registtry before deleting a project
- Added general config options in Gitlab to disable telemetry by default
- Removed no longer needed Kali docker apt proxy from
nexusdefaults - Redesigned non-default Debian OSs' in
dockerrole so they would use Debian repo - Allowing to pass
os_configuration_create_snapshot_with_just_clonevariable from CLI - Further increased
gitlabhealth check limits to allow it being installed on low-resource systems - Added logging and dependecies for
outlineDocker compose file to make the deployment more stable - Removed no longer needed keys from
vmware.vmware.vm_powerstatemodules - Set
outlineversion to 0.84.0 - Added required variables check for vSphere in
machine_operationsrole - Redesigned
Vaultrole to support deploying multiple PKI engines with more advanced features - Updated requirements for non-Catapult use cases
- Increased sysprep retries for low resource machines in
win_syspreprole - Added loop vars for Windows Update tasks in
finalizerole - Not forwarding SSH agent my default in
connectrole - Set
vaultversion to 1.19.3 - Set
nexusversion to 3.80.0 - Replaced deprecated
community.windows.win_auto_logonmodule - Replaced deprecated
community.windows.win_user_profilemodule - Added a default cleanup policy for
nexus - Set
caddyversion to 2.10.0 - Expanded command parameters for MacOS in
updatesrole
v4.6.2
- Updated Ansible collections for non-Catapult use cases
- Added a feature to toggle snapshot creation in
os_configurationrole whenjust_cloneis used - Added the oidc logout uri env var in outline as an optional env var
- Added a feature to also disable auto-updates for Debian based OS in the
finalizerole - Fixed a typo in
aws_regionvariable indeploy_varsrole - Fixed incorrect IPv6 GW lookup var for PanOS in
configure_networkingrole - Fixed the gitlab config template that configures ldap cert verification
- Updated Python packages for non-Catapult use cases
- Added new
egress_network_info&connection_network_infovars todeploy_varsrole
v4.4.5
- Fixed incorrect release version file
v4.4.4
- Added retries for RouterOS in
gather_factsrole for stability - Set
outlineversion to 0.83.0 - Added a feature to force password auth for ssh in
connectrole - Removed unneeded code from the tag and release workflow
- Locking
actions/checkoutworkflow version - Refactored
powerstatemodule to simplify the code - Migrated deprecated vmware.vmware_rest.vcenter_vm_hardware_*_info module to new
vmware.vmware.vm_resource_infomodule - Migrated deprecated VMware powerstate module to new
vmware.vmware.vm_powerstatemodule - Updated Ansible collections for non-Catapult use cases
- Providentia: fix config mount permissions