diff options
30 files changed, 146 insertions, 114 deletions
diff --git a/changelogs/fragments/0-readme.yml b/changelogs/fragments/0-readme.yml index 6ae0307..41a129d 100644 --- a/changelogs/fragments/0-readme.yml +++ b/changelogs/fragments/0-readme.yml @@ -1,3 +1,3 @@ --- -trivial: +minor_changes: - README.md - Add Communication section with Forum information. diff --git a/changelogs/fragments/6.0.0.yml b/changelogs/fragments/6.0.0.yml new file mode 100644 index 0000000..ecd702e --- /dev/null +++ b/changelogs/fragments/6.0.0.yml @@ -0,0 +1,6 @@ +release_summary: | + This is the first significant release from the VyOS community for these modules. + This release is focussed on 1.3+ of VyOS and will be the last major release to + support 1.3 fully. Although efforts have been made to maintain compatibility + with the existing vyos collection modules, there have breaking changes where + necessary to configuration parameters. Please review all changes carefully before updating. diff --git a/changelogs/fragments/T151-prepare-for-release.yaml b/changelogs/fragments/T151-prepare-for-release.yaml new file mode 100644 index 0000000..f1601d0 --- /dev/null +++ b/changelogs/fragments/T151-prepare-for-release.yaml @@ -0,0 +1,3 @@ +trivial: + - update galaxy.yml for release version 6.0.0 + - update fragments to include modules, re-align with requirements diff --git a/changelogs/fragments/T6817_T6825_ovr_rep.yml b/changelogs/fragments/T6817_T6825_ovr_rep.yml index ab4d70c..17af8a4 100644 --- a/changelogs/fragments/T6817_T6825_ovr_rep.yml +++ b/changelogs/fragments/T6817_T6825_ovr_rep.yml @@ -1,6 +1,8 @@ --- minor_changes: - - fixed behavior for override and replaced states - - added support for packet-length-exclude for 1.4+ and the states - - fixed behavior for log, disable attributes - - added a separate test suite test_vyos_firewall_rules14.py + - vyos_firewall_rules - added support for packet-length-exclude for 1.4+ and the states +bugfixes: + - vyos_firewall_rules - fixed behavior for override and replaced states + - vyos_firewall_rules - fixed behavior for log, disable attributes +trivial: + - vyos_firewall_rules - added a separate test suite test_vyos_firewall_rules14.py diff --git a/changelogs/fragments/T6833_fw_rules_limit.yaml b/changelogs/fragments/T6833_fw_rules_limit.yaml index 332001b..3e6f7be 100644 --- a/changelogs/fragments/T6833_fw_rules_limit.yaml +++ b/changelogs/fragments/T6833_fw_rules_limit.yaml @@ -1,3 +1,3 @@ --- -minor_changes: - - firewall_rules - Fix limit parameter processing +bugfixes: + - vyos_firewall_rules - Fix limit parameter processing diff --git a/changelogs/fragments/T6894-ntp-integration-tests.yml b/changelogs/fragments/T6894-ntp-integration-tests.yml index f5ad209..5096866 100644 --- a/changelogs/fragments/T6894-ntp-integration-tests.yml +++ b/changelogs/fragments/T6894-ntp-integration-tests.yml @@ -1,5 +1,6 @@ --- minor_changes: - - Added ntp options for 1.5+ (interleave, ptp) - - Synchronized argspec and docs with core module - - Fix integration tests for 1.3+ + - vyos_ntp_global - Added ntp options for 1.5+ (interleave, ptp) +trivial: + - vyos_ntp_global - Synchronized argspec and docs with core module + - vyos_ntp_global - Fix integration tests for 1.3+ diff --git a/changelogs/fragments/T6987-logging-changes.yml b/changelogs/fragments/T6987-logging-changes.yml index c4b11da..89f5033 100644 --- a/changelogs/fragments/T6987-logging-changes.yml +++ b/changelogs/fragments/T6987-logging-changes.yml @@ -1,15 +1,19 @@ --- -minor_changes: - - deprecating items for 1.4+ that have moved locations - - For 1.4, `protocol` is an attribute of the syslog host, not the facility - - Fixed v1.3 and before when `protocol` and `level` were set for the same host - - Fixed integration test for `vyos_facts` which was brittle due to line dependencies in checks - - Fixed integration test for `vyos_config` due to bad commands. 1.3 frequently won't finish due - to timeouts or system failures during the tests, but 1.4 and 1.5 - breaking_changes: - - none yet + - vyos_logging_global - For 1.4, `protocol` is an attribute of the syslog host, not the facility + +bugfixes: + - vyos_logging_global - Fixed v1.3 and before when `protocol` and `level` were set for the same host + +deprecated_features: + - vyos_logging_global - `protocol` is deprecated for 1.4 and later, use `facility` instead. To be removed + in next major version where supprot for 1.3 is removed known_issues: - existing code for 1.3 facility protocol and facility level are not compatible, only one will be set and level is the priority. + +trivial: + - vyos_logging_global - Fixed integration test for `vyos_facts` which was brittle due to line dependencies in checks + - vyos_logging_global - Fixed integration test for `vyos_config` due to bad commands. 1.3 frequently won't finish due + to timeouts or system failures during the tests, but 1.4 and 1.5 diff --git a/changelogs/fragments/T6988-fix-user.yml b/changelogs/fragments/T6988-fix-user.yml index 26ea007..05966e6 100644 --- a/changelogs/fragments/T6988-fix-user.yml +++ b/changelogs/fragments/T6988-fix-user.yml @@ -1,15 +1,15 @@ --- breaking_changes: - - removal of role/level as it was removed in 1.3 + - vyos_user - removed level (and its alias, role) they were removed in 1.3 + - vyos_user - explicit support for version 1.3+ only major_changes: - - add support for public-key authentication - - add support for encrypted password specification + - vyos_user - add support for public-key authentication + - vyos_user - add support for encrypted password specification -minor_changes: - - fix sending of `full-name` to use quotes - - fix parsing of `full-name` to ignore quotes - - fix integration tests for smoke +bugfixes: + - vyos_user - fix handling of `full-name` in parser and module -known_issues: - - ssh login tests are brittle +trivial: + - vyos_user - fix parsing of `full-name` to ignore quotes + - vyos_user - fix integration tests for smoke diff --git a/changelogs/fragments/T7003-firewall-interface-integration-tests.yml b/changelogs/fragments/T7003-firewall-interface-integration-tests.yml index 1f834b4..0354117 100644 --- a/changelogs/fragments/T7003-firewall-interface-integration-tests.yml +++ b/changelogs/fragments/T7003-firewall-interface-integration-tests.yml @@ -1,6 +1,3 @@ --- -minor_changes: +trivial: - fix integration tests for `firewall_interfaces` for v1.3- - -known_issues: - - integration tests for `firewall_interfaces` are failing for v1.4+ as the module is deprecated in favour of firewall_rules diff --git a/changelogs/fragments/T7006-interface-integration-tests.yml b/changelogs/fragments/T7006-interface-integration-tests.yml index 122dde7..61c4e70 100644 --- a/changelogs/fragments/T7006-interface-integration-tests.yml +++ b/changelogs/fragments/T7006-interface-integration-tests.yml @@ -1,8 +1,5 @@ --- -minor_changes: - - adjust for loopback being removed in `vyos_l3_interfaces` - - fixed `vyos_interfaces` for 1.5+ - - update codecov updloader to version 5 - -known_issues: - - integration tests for `interfaces` are still failing occasionally in 1.4 and below +trivial: + - vyos interfaces tests - adjust for loopback being removed in `vyos_l3_interfaces` + - vyos interfaces tests - fixed `vyos_interfaces` for 1.5+ + - actions - update codecov updloader to version 5 diff --git a/changelogs/fragments/T7008-l3-interface-integration-tests.yml b/changelogs/fragments/T7008-l3-interface-integration-tests.yml index bbdcbde..36b377b 100644 --- a/changelogs/fragments/T7008-l3-interface-integration-tests.yml +++ b/changelogs/fragments/T7008-l3-interface-integration-tests.yml @@ -1,12 +1,10 @@ --- -minor_changes: - - fix integration tests for `l3_interfaces` - - fix integration tests for `interfaces` - - fix replace in interfaces to remove vif completely if not present in new config - - fix override in interfaces to remove vif completely if not present in new config - - fix delete in interfaces to remove vif completely if in affected interface - - added unit test for unknown interface type +bugfixes: + - vyos_l3_interfaces - fix replace in interfaces to remove vif completely if not present in new config + - vyos_l3_interfaces - fix override in interfaces to remove vif completely if not present in new config + - vyos_l3_interfaces - fix delete in interfaces to remove vif completely if in affected interface -known_issues: - - integration tests for `interfaces` fail for 1.3 and below due to - mtu setting issue when a `vif` is defined. +trivial: + - vyos_l3_interfaces - fix integration tests for `l3_interfaces` + - vyos_l3_interfaces - fix integration tests for `interfaces` + - vyos_l3_interfaces - added unit test for unknown interface type diff --git a/changelogs/fragments/T7010-lag-interfaces-integration-tests.yaml b/changelogs/fragments/T7010-lag-interfaces-integration-tests.yaml index 8a236f5..23b918f 100644 --- a/changelogs/fragments/T7010-lag-interfaces-integration-tests.yaml +++ b/changelogs/fragments/T7010-lag-interfaces-integration-tests.yaml @@ -1,4 +1,4 @@ --- -minor_changes: - - fix integration tests for `lag_interfaces` - - add unit tests for `lag_interfaces` +trivial: + - vyos_lag_interfaces - fix integration tests for `lag_interfaces` + - vyos_lag_interfaces - add unit tests for `lag_interfaces` diff --git a/changelogs/fragments/T7011-lldp-integration-tests.yaml b/changelogs/fragments/T7011-lldp-integration-tests.yaml index 8913866..6060168 100644 --- a/changelogs/fragments/T7011-lldp-integration-tests.yaml +++ b/changelogs/fragments/T7011-lldp-integration-tests.yaml @@ -1,9 +1,11 @@ --- breaking_changes: - - if "address" is available, merge will cause it to be added, in contrast to + - lldp_global - if "address" is available, merge will cause it to be added, in contrast to the previous behavior where it was replaced. When used in replace mode, it will remove any existing addresses and replace them with the new one. - - civic_address is no longer a valid key (removed prior to 1.3) + - vyos_lldp_global - civic_address is no longer a valid key (removed prior to 1.3) +deprecated_features: + - vyos_lldp_global - `address` is deprecated, use `addresses` instead. To be removed in 7.0.0. minor_changes: - - lldp_global address is now addresses, with appropriate coercion + - vyos_lldp_global - address is now addresses, with appropriate coercion for existing address keys diff --git a/changelogs/fragments/T7013_route-maps-integration-tests.yml b/changelogs/fragments/T7013_route-maps-integration-tests.yml index 8736a9c..1290bbf 100644 --- a/changelogs/fragments/T7013_route-maps-integration-tests.yml +++ b/changelogs/fragments/T7013_route-maps-integration-tests.yml @@ -1,3 +1,3 @@ --- -minor_changes: - - route_maps - Refactor the integration tests structure and support for 1.4+ versions +trivial: + - vyos_route_maps - Refactor the integration tests structure and support for 1.4+ versions diff --git a/changelogs/fragments/T7015_static_routes_integration_tests.yaml b/changelogs/fragments/T7015_static_routes_integration_tests.yaml index 001c929..2328784 100644 --- a/changelogs/fragments/T7015_static_routes_integration_tests.yaml +++ b/changelogs/fragments/T7015_static_routes_integration_tests.yaml @@ -1,3 +1,3 @@ --- -minor_changes: - - static_routes - Fixed for v1.3- and 1.4+ +trivial: + - vyos_static_routes - Fixed for v1.3- and 1.4+ diff --git a/changelogs/fragments/T7083_firewall_rules.yml b/changelogs/fragments/T7083_firewall_rules.yml index 412b3ab..bc2c5ca 100644 --- a/changelogs/fragments/T7083_firewall_rules.yml +++ b/changelogs/fragments/T7083_firewall_rules.yml @@ -1,3 +1,3 @@ --- breaking_changes: - - firewall_rules - p2p -> the code and the corresponding documentation and configuration should be removed as deprecated since 1.2 + - vyos_firewall_rules - removed p2p options as they have been removed prior to 1.3 of VyOS diff --git a/changelogs/fragments/T7127-fix-interface-integration-13.yaml b/changelogs/fragments/T7127-fix-interface-integration-13.yaml index 4339708..9623fab 100644 --- a/changelogs/fragments/T7127-fix-interface-integration-13.yaml +++ b/changelogs/fragments/T7127-fix-interface-integration-13.yaml @@ -1,3 +1,3 @@ --- -minor_changes: +trivial: - vyos_interfaces - fix bug in RTT tests on 1.3 due to handling of MTUs diff --git a/changelogs/fragments/bgp_address_family.yaml b/changelogs/fragments/bgp_address_family.yaml index 266c3d8..606bc4b 100644 --- a/changelogs/fragments/bgp_address_family.yaml +++ b/changelogs/fragments/bgp_address_family.yaml @@ -1,12 +1,15 @@ --- major_changes: - - Aligned with version 1.3+ configuration - aggregate_address, maximum_paths, network, and redistribute - moved from `bgp_global` module. These are now Address-family specific. - - Many neighbor attributes also moved from `bgp_global` to `bgp_address_family` module. - - Redistribute, network stanza - added support for modifiers (metric, backdoor etc as per T6829) - - Support for 1.3+ VyOS only + - vyos_bgp_address_family - Aligned with version 1.3+ configuration - aggregate_address, maximum_paths, network, and redistribute + moved from `bgp_global` module. These are now Address-family specific. Many neighbor attributes also moved from `vyos_bgp_global` + to `vyos_bgp_address_family` module. + - bgp modules - Added support for 1.4+ "system-as". 1.3 embedded as_number is still supported +breaking_changes: + - vyos_bgp_address_family - Support for 1.3+ VyOS only minor_changes: - - as_number - Added support for 1.4+ "system-as. 1.3 embedded as_number is still supported" - - fix tests for 1.4+ bgp_address_family - - updated documentation + - vyos_bgp_address_family - Redistribute, network stanza - added support for modifiers (metric, backdoor etc as per T6829) + +trivial: + - vyos_bgp_address_family - Fixed tests for 1.4+ bgp_address_family + - vyos_bgp_address_family - updated documentation diff --git a/changelogs/fragments/bgp_global.yaml b/changelogs/fragments/bgp_global.yaml index e528ab3..1a1ab31 100644 --- a/changelogs/fragments/bgp_global.yaml +++ b/changelogs/fragments/bgp_global.yaml @@ -1,10 +1,16 @@ --- -minor_changes: - - Added support for `solo` neighbor attribute - - as_number - Added support for 1.4+ "system-as. 1.3 embedded as_number is still supported" - - Fixed tests for 1.4+ bgp_global - - updated documentation - - Aligned with version 1.3+ configuration - aggregate_address, maximum_paths, network, and redistribute +major_changes: + - vyos bgp modules - Many configuration attributes moved from `bgp_global` to `bgp_address_family` module (see documentation). + - vyos_bgp_global - Aligned with version 1.3+ configuration - aggregate_address, maximum_paths, network, and redistribute Removed to `bgp_address_family` module. - - Many configuration attributes moved from `bgp_global` to `bgp_address_family` module. - - Support for 1.3+ VyOS only +minor_changes: + - vyos_bgp_global - Added support for `solo` neighbor attribute +breaking_changes: + - vyos_bgp_global - Support for 1.3+ VyOS only + +deprecated_features: + - vyos_bgp_global - no_ipv4_unicast - deprecated for use with VyOS 1.4+, use `ipv4_unicast` instead + +trivial: + - vyos_bgp_global - Fixed tests for 1.4+ bgp_global + - vyos_bgp_global - updated documentation diff --git a/changelogs/fragments/cliconf.yml b/changelogs/fragments/cliconf.yml index 1eb0880..69e105b 100644 --- a/changelogs/fragments/cliconf.yml +++ b/changelogs/fragments/cliconf.yml @@ -1,3 +1,3 @@ --- minor_changes: - - added `network_os_major_version` to facts + - vyos_facts - added `network_os_major_version` to facts diff --git a/changelogs/fragments/firewall_global_14.yml b/changelogs/fragments/firewall_global_14.yml index 269c3e5..4b993ab 100644 --- a/changelogs/fragments/firewall_global_14.yml +++ b/changelogs/fragments/firewall_global_14.yml @@ -1,7 +1,8 @@ --- minor_changes: - - with 1.4+, use the the global keyword to define global firewall rules - - Fixed ipv6 route-redirects and tests - - Added support for input, output, and forward chains (1.4+) - - Fixed state-policy deletion (partial and full) - - Added support for log-level in state-policy (1.4+) + - vyos_firewall_global - with 1.4+, use the the global keyword to define global firewall rules + - vyos_firewall_global - Added support for input, output, and forward chains (1.4+) + - vyos_firewall_global - Added support for log-level in state-policy (1.4+) +bugfixes: + - vyos_firewall_global - Fixed ipv6 route-redirects and tests + - vyos_firewall_global - Fixed state-policy deletion (partial and full) diff --git a/changelogs/fragments/firewall_global_parsing.yml b/changelogs/fragments/firewall_global_parsing.yml index cec6cfc..98275ff 100644 --- a/changelogs/fragments/firewall_global_parsing.yml +++ b/changelogs/fragments/firewall_global_parsing.yml @@ -1,3 +1,3 @@ --- -minor_changes: - - Fixed parsing of global-options (1.4+) +bugfixes: + - vyos_firewall_global - Fixed parsing of global-options (1.4+) diff --git a/changelogs/fragments/firewall_interface_types.yml b/changelogs/fragments/firewall_interface_types.yml index 29451e8..8fc8eb4 100644 --- a/changelogs/fragments/firewall_interface_types.yml +++ b/changelogs/fragments/firewall_interface_types.yml @@ -1,4 +1,9 @@ --- minor_changes: - - added support for VIF interfaces - - expanded firewall interface types to match existing types + - vyos_firewall_interfaces - added support for VIF interfaces + - vyos_firewall_interfaces - expanded firewall interface types to match existing types + +deprecated_features: + - vyos_firewall_interfaces - deprecated for use with VyOS 1.4+, firewalls are no longer + connected directly to interfaces. See the Firewall Configuration documentation + for how to establish a connection betwen the firewall rulesets and the flow, interface, or zone. diff --git a/changelogs/fragments/firewall_rules.yml b/changelogs/fragments/firewall_rules.yml index 7cd02a2..495da45 100644 --- a/changelogs/fragments/firewall_rules.yml +++ b/changelogs/fragments/firewall_rules.yml @@ -1,8 +1,10 @@ --- breaking_changes: - - firewall_rules - tcp.flags is now a list with an inversion flag to support 1.4+ firewall rules, but still supports 1.3- + - vyos_firewall_rules - tcp.flags is now a list with an inversion flag to support 1.4+ firewall rules, but still supports 1.3- minor_changes: - - firewall_rules - Added support for 1.4+ firewall rules - - fix tests for 1.4+ firewall rules (ICMP V6 code and type) - - added support for 1.5+ firewall `match-ipsec-in`, `match-ipsec-out`, `match-none-in`, `match-none-out` + - vyos_firewall_rules - Added support for 1.4+ firewall rules + - vyos_firewall_rules - added support for 1.5+ firewall `match-ipsec-in`, `match-ipsec-out`, `match-none-in`, `match-none-out` + +trivial: + - vyos_firewall_rules - fix tests for 1.4+ firewall rules (ICMP V6 code and type) diff --git a/changelogs/fragments/fix-recent-vyos-version-change-detection.yml b/changelogs/fragments/fix-recent-vyos-version-change-detection.yml index f2dfe73..2e50625 100644 --- a/changelogs/fragments/fix-recent-vyos-version-change-detection.yml +++ b/changelogs/fragments/fix-recent-vyos-version-change-detection.yml @@ -1,3 +1,3 @@ --- -trivial: - - Fix change detection for recent Vyos versions +bugfixes: + - vyos_config - Fix change detection for recent Vyos versions diff --git a/changelogs/fragments/interfaces_update.yml b/changelogs/fragments/interfaces_update.yml index e9a6d21..5702b7a 100644 --- a/changelogs/fragments/interfaces_update.yml +++ b/changelogs/fragments/interfaces_update.yml @@ -1,9 +1,12 @@ --- minor_changes: - - fixed bug where 'replace' would delete an active disable and not reinstate it - - make l3_interfaces pick up loopback interfaces - - added tests for verifying both of these - - fixed over-zealous handling of disable, which could catch other interface + - vyos_l3_interfaces - make l3_interfaces pick up loopback interfaces + - vyos_firewall_interfaces - enable support for 1.4 firewall + - vyos_ospf_interaces - support for 1.4 ospf interfaces +bugfixes: + - vyos_interfaces - fixed bug where 'replace' would delete an active disable and not reinstate it + - vyos_interfaces - fixed over-zealous handling of disable, which could catch other interface items that are disabled. - - enable support for 1.4 firewall - - support for 1.4 ospf + +trivial: + - vyos interface plugins - added tests for verifying imterface disable/enable diff --git a/changelogs/fragments/ntp_global.yaml b/changelogs/fragments/ntp_global.yaml index bab9b55..b3177ef 100644 --- a/changelogs/fragments/ntp_global.yaml +++ b/changelogs/fragments/ntp_global.yaml @@ -1,5 +1,6 @@ --- minor_changes: - - Added support for VyOS 1.4+ (chronyd vs ntpd) - - Fixed syntax for allow_client in 1.4+ - - Added test suite for ntp_global and 1.4+ + - vyos_ntp_global - Added support for VyOS 1.4+ (chronyd vs ntpd) + - vyos_ntp_global - Added syntax for allow_client in 1.4+ +trivial: + - vyos_ntp_global - Added test suite for ntp_global and 1.4+ diff --git a/changelogs/fragments/resource_updates.yml b/changelogs/fragments/resource_updates.yml index 6149890..5a0c5e0 100644 --- a/changelogs/fragments/resource_updates.yml +++ b/changelogs/fragments/resource_updates.yml @@ -1,3 +1,3 @@ --- -minor_changes: +trivial: - updated resources and re-ran resource templates for existing older template code diff --git a/changelogs/fragments/snmp_server.yml b/changelogs/fragments/snmp_server.yml index b771a44..5794c35 100644 --- a/changelogs/fragments/snmp_server.yml +++ b/changelogs/fragments/snmp_server.yml @@ -1,10 +1,11 @@ --- -minor_changes: - - 192.0.2.1/24 (TEST-NET-1) is used on eth1 for testing to accomodate services that check - valid configurations (such as SNMP) - - use encrypted passwords for SNMPv3 tests as VyOS now converts those "when next reloaded" - - fixed integration tests for 1.3+ for `vyos_hostname` breaking_changes: - - parameter `engine_id` is no longer a `user` or `trap_target` parameter and is now a `snmp_v3` parameter - - parameters `encrypted-key` and `plaintext-key` are now `encrypted-password` and `puplaintext-password` - which is a breaking change with 1.2 and prior + - vyos_snmp_server - parameter `engine_id` is no longer a `user` or `trap_target` parameter and is now a `snmp_v3` parameter + - vyos_snmp_server - parameters `encrypted-key` and `plaintext-key` are now `encrypted-password` and `plaintext-password` + - vyos_snmp_server - no longer works with versions prior to 1.3 + +trivial: + - vyos_snmp_server - 192.0.2.1/24 (TEST-NET-1) is used on eth1 for testing to accomodate services that check + valid configurations (such as SNMP) + - vyos_snmp_server - use encrypted passwords for SNMPv3 tests as VyOS now converts those "when next reloaded" + - vyos_snmp_server - fixed integration tests for 1.3+ for `vyos_hostname` @@ -8,7 +8,7 @@ name: vyos description: Ansible Network Collection for VYOS devices. namespace: vyos readme: README.md -repository: https://github.com/ansible-collections/vyos.vyos -issues: https://github.com/ansible-collections/vyos.vyos/issues +repository: https://github.com/vyos/vyos.vyos +issues: https://vyos.dev tags: [vyos, networking] -version: 5.0.0 +version: 6.0.0 |