ansible/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
Code Releases Activity

[PR #7576/d9f3e7a2 backport][stable-8] Only disable cert validation in examples for local network access (#7618)

Browse source 
Only disable cert validation in examples for local network access (#7576)

Only disable cert validation in examples for local network access!

(cherry picked from commit d9f3e7a2ec)

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
patchback[bot] 2023-11-26 22:13:50 +01:00 committed by GitHub
parent 59b1329337
commit 7204798479
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
22 changed files with 38 additions and 53 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
plugins/inventory/icinga2.py
View file

@ -72,7 +72,7 @@ url: http://localhost:5665
user: ansible user: ansible
password: secure password: secure
host_filter: \"linux-servers\" in host.groups host_filter: \"linux-servers\" in host.groups
validate_certs: false validate_certs: false # only do this when connecting to localhost!
inventory_attr: name inventory_attr: name
groups: groups:
# simple name matching # simple name matching

5
plugins/inventory/proxmox.py
View file

@ -171,7 +171,6 @@ plugin: community.general.proxmox
url: http://pve.domain.com:8006 url: http://pve.domain.com:8006
user: ansible@pve user: ansible@pve
password: secure password: secure
validate_certs: false
want_facts: true want_facts: true
keyed_groups: keyed_groups:
# proxmox_tags_parsed is an example of a fact only returned when 'want_facts=true' # proxmox_tags_parsed is an example of a fact only returned when 'want_facts=true'
@ -192,10 +191,10 @@ want_proxmox_nodes_ansible_host: true
# Note: my_inv_var demonstrates how to add a string variable to every host used by the inventory. # Note: my_inv_var demonstrates how to add a string variable to every host used by the inventory.
# my.proxmox.yml # my.proxmox.yml
plugin: community.general.proxmox plugin: community.general.proxmox
url: http://pve.domain.com:8006 url: http://192.168.1.2:8006
user: ansible@pve user: ansible@pve
password: secure password: secure
validate_certs: false validate_certs: false # only do this when you trust the network!
want_facts: true want_facts: true
want_proxmox_nodes_ansible_host: false want_proxmox_nodes_ansible_host: false
compose: compose:

1
plugins/modules/gitlab_group.py
View file

@ -107,7 +107,6 @@ EXAMPLES = '''
community.general.gitlab_group: community.general.gitlab_group:
api_url: https://gitlab.example.com/ api_url: https://gitlab.example.com/
api_token: "{{ access_token }}" api_token: "{{ access_token }}"
validate_certs: false
name: my_first_group name: my_first_group
state: absent state: absent

1
plugins/modules/gitlab_hook.py
View file

@ -122,7 +122,6 @@ EXAMPLES = '''
state: present state: present
push_events: true push_events: true
tag_push_events: true tag_push_events: true
hook_validate_certs: false
token: "my-super-secret-token-that-my-ci-server-will-check" token: "my-super-secret-token-that-my-ci-server-will-check"
- name: "Delete the previous hook" - name: "Delete the previous hook"

1
plugins/modules/gitlab_project.py
View file

@ -273,7 +273,6 @@ EXAMPLES = r'''
community.general.gitlab_project: community.general.gitlab_project:
api_url: https://gitlab.example.com/ api_url: https://gitlab.example.com/
api_token: "{{ access_token }}" api_token: "{{ access_token }}"
validate_certs: false
name: my_first_project name: my_first_project
state: absent state: absent
delegate_to: localhost delegate_to: localhost

1
plugins/modules/gitlab_project_members.py
View file

@ -106,7 +106,6 @@ EXAMPLES = r'''
community.general.gitlab_project_members: community.general.gitlab_project_members:
api_url: 'https://gitlab.example.com' api_url: 'https://gitlab.example.com'
api_token: 'Your-Private-Token' api_token: 'Your-Private-Token'
validate_certs: false
project: projectname project: projectname
gitlab_user: username gitlab_user: username
state: absent state: absent

3
plugins/modules/gitlab_user.py
View file

@ -150,7 +150,6 @@ EXAMPLES = '''
community.general.gitlab_user: community.general.gitlab_user:
api_url: https://gitlab.example.com/ api_url: https://gitlab.example.com/
api_token: "{{ access_token }}" api_token: "{{ access_token }}"
validate_certs: false
username: myusername username: myusername
state: absent state: absent
@ -190,7 +189,6 @@ EXAMPLES = '''
community.general.gitlab_user: community.general.gitlab_user:
api_url: https://gitlab.example.com/ api_url: https://gitlab.example.com/
api_token: "{{ access_token }}" api_token: "{{ access_token }}"
validate_certs: false
username: myusername username: myusername
state: blocked state: blocked
@ -198,7 +196,6 @@ EXAMPLES = '''
community.general.gitlab_user: community.general.gitlab_user:
api_url: https://gitlab.example.com/ api_url: https://gitlab.example.com/
api_token: "{{ access_token }}" api_token: "{{ access_token }}"
validate_certs: false
username: myusername username: myusername
state: unblocked state: unblocked
''' '''

12
plugins/modules/imc_rest.py
View file

@ -100,7 +100,7 @@ EXAMPLES = r'''
hostname: '{{ imc_hostname }}' hostname: '{{ imc_hostname }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
content: | content: |
<configConfMo><inConfig> <configConfMo><inConfig>
<computeRackUnit dn="sys/rack-unit-1" adminPower="down"/> <computeRackUnit dn="sys/rack-unit-1" adminPower="down"/>
@ -112,7 +112,7 @@ EXAMPLES = r'''
hostname: '{{ imc_hostname }}' hostname: '{{ imc_hostname }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
timeout: 120 timeout: 120
content: | content: |
<!-- Configure Serial-on-LAN --> <!-- Configure Serial-on-LAN -->
@ -137,7 +137,7 @@ EXAMPLES = r'''
hostname: '{{ imc_hostname }}' hostname: '{{ imc_hostname }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
content: | content: |
<!-- Configure PXE boot --> <!-- Configure PXE boot -->
<configConfMo><inConfig> <configConfMo><inConfig>
@ -155,7 +155,7 @@ EXAMPLES = r'''
hostname: '{{ imc_host }}' hostname: '{{ imc_host }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
content: | content: |
<configConfMo><inConfig> <configConfMo><inConfig>
<lsbootStorage dn="sys/rack-unit-1/boot-policy/storage-read-write" access="read-write" order="1" type="storage"/> <lsbootStorage dn="sys/rack-unit-1/boot-policy/storage-read-write" access="read-write" order="1" type="storage"/>
@ -167,7 +167,7 @@ EXAMPLES = r'''
hostname: '{{ imc_host }}' hostname: '{{ imc_host }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
content: | content: |
<configConfMo><inConfig> <configConfMo><inConfig>
<computeRackUnit dn="sys/rack-unit-1" usrLbl="Customer Lab - POD{{ pod_id }} - {{ inventory_hostname_short }}"/> <computeRackUnit dn="sys/rack-unit-1" usrLbl="Customer Lab - POD{{ pod_id }} - {{ inventory_hostname_short }}"/>
@ -179,7 +179,7 @@ EXAMPLES = r'''
hostname: '{{ imc_host }}' hostname: '{{ imc_host }}'
username: '{{ imc_username }}' username: '{{ imc_username }}'
password: '{{ imc_password }}' password: '{{ imc_password }}'
validate_certs: false validate_certs: false # only do this when you trust the network!
timeout: 120 timeout: 120
content: | content: |
<configConfMo><inConfig> <configConfMo><inConfig>

2
plugins/modules/influxdb_retention_policy.py
View file

@ -114,7 +114,6 @@ EXAMPLES = r'''
duration: INF duration: INF
replication: 1 replication: 1
ssl: false ssl: false
validate_certs: false
shard_group_duration: 1w shard_group_duration: 1w
state: present state: present
@ -126,7 +125,6 @@ EXAMPLES = r'''
duration: 5d1h30m duration: 5d1h30m
replication: 1 replication: 1
ssl: false ssl: false
validate_certs: false
shard_group_duration: 1d10h30m shard_group_duration: 1d10h30m
state: present state: present

1
plugins/modules/ipa_host.py
View file

@ -118,7 +118,6 @@ EXAMPLES = r'''
ipa_host: ipa.example.com ipa_host: ipa.example.com
ipa_user: admin ipa_user: admin
ipa_pass: topsecret ipa_pass: topsecret
validate_certs: false
random_password: true random_password: true
- name: Ensure host is disabled - name: Ensure host is disabled

1
plugins/modules/ipa_vault.py
View file

@ -93,7 +93,6 @@ EXAMPLES = r'''
ipa_host: ipa.example.com ipa_host: ipa.example.com
ipa_user: admin ipa_user: admin
ipa_pass: topsecret ipa_pass: topsecret
validate_certs: false
- name: Ensure vault is present for Admin user - name: Ensure vault is present for Admin user
community.general.ipa_vault: community.general.ipa_vault:

1
plugins/modules/jenkins_job_info.py
View file

@ -121,7 +121,6 @@ EXAMPLES = '''
user: admin user: admin
token: 126df5c60d66c66e3b75b11104a16a8a token: 126df5c60d66c66e3b75b11104a16a8a
url: https://jenkins.example.com url: https://jenkins.example.com
validate_certs: false
register: my_jenkins_job_info register: my_jenkins_job_info
''' '''

2
plugins/modules/jenkins_script.py
View file

@ -99,7 +99,7 @@ EXAMPLES = '''
user: admin user: admin
password: admin password: admin
url: https://localhost url: https://localhost
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

4
plugins/modules/manageiq_alert_profiles.py
View file

@ -72,7 +72,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete an alert profile from ManageIQ - name: Delete an alert profile from ManageIQ
community.general.manageiq_alert_profiles: community.general.manageiq_alert_profiles:
@ -82,7 +82,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

6
plugins/modules/manageiq_alerts.py
View file

@ -91,7 +91,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Add an alert with a "miq expression" to ManageIQ - name: Add an alert with a "miq expression" to ManageIQ
community.general.manageiq_alerts: community.general.manageiq_alerts:
@ -118,7 +118,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete an alert from ManageIQ - name: Delete an alert from ManageIQ
community.general.manageiq_alerts: community.general.manageiq_alerts:
@ -128,7 +128,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

12
plugins/modules/manageiq_group.py
View file

@ -103,10 +103,10 @@ EXAMPLES = '''
role: 'EvmRole-user' role: 'EvmRole-user'
tenant: 'my_tenant' tenant: 'my_tenant'
manageiq_connection: manageiq_connection:
url: 'https://manageiq_server' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Create a group in ManageIQ with the role EvmRole-user and tenant with tenant_id 4 - name: Create a group in ManageIQ with the role EvmRole-user and tenant with tenant_id 4
community.general.manageiq_group: community.general.manageiq_group:
@ -114,10 +114,10 @@ EXAMPLES = '''
role: 'EvmRole-user' role: 'EvmRole-user'
tenant_id: 4 tenant_id: 4
manageiq_connection: manageiq_connection:
url: 'https://manageiq_server' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: - name:
- Create or update a group in ManageIQ with the role EvmRole-user and tenant my_tenant. - Create or update a group in ManageIQ with the role EvmRole-user and tenant my_tenant.
@ -140,10 +140,10 @@ EXAMPLES = '''
- "/belongsto/ExtManagementSystem|ProviderName/EmsFolder|Datacenters/EmsFolder|dc_name/EmsFolder|host/EmsCluster|Cluster name" - "/belongsto/ExtManagementSystem|ProviderName/EmsFolder|Datacenters/EmsFolder|dc_name/EmsFolder|host/EmsCluster|Cluster name"
belongsto_filters_merge_mode: merge belongsto_filters_merge_mode: merge
manageiq_connection: manageiq_connection:
url: 'https://manageiq_server' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete a group in ManageIQ - name: Delete a group in ManageIQ
community.general.manageiq_group: community.general.manageiq_group:

4
plugins/modules/manageiq_policies.py
View file

@ -74,7 +74,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Unassign a policy_profile for a provider in ManageIQ - name: Unassign a policy_profile for a provider in ManageIQ
community.general.manageiq_policies: community.general.manageiq_policies:
@ -87,7 +87,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

2
plugins/modules/manageiq_provider.py
View file

@ -438,7 +438,7 @@ EXAMPLES = '''
url: 'https://cf-6af0.rhpds.opentlc.com' url: 'https://cf-6af0.rhpds.opentlc.com'
username: 'admin' username: 'admin'
password: 'password' password: 'password'
validate_certs: false validate_certs: true
- name: Create a new OpenStack Director provider in ManageIQ with rsa keypair - name: Create a new OpenStack Director provider in ManageIQ with rsa keypair
community.general.manageiq_provider: community.general.manageiq_provider:

6
plugins/modules/manageiq_tags.py
View file

@ -77,7 +77,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when connecting to localhost!
- name: Create new tags for a provider in ManageIQ. - name: Create new tags for a provider in ManageIQ.
community.general.manageiq_tags: community.general.manageiq_tags:
@ -92,7 +92,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when connecting to localhost!
- name: Remove tags for a provider in ManageIQ. - name: Remove tags for a provider in ManageIQ.
community.general.manageiq_tags: community.general.manageiq_tags:
@ -108,7 +108,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when connecting to localhost!
''' '''
RETURN = ''' RETURN = '''

10
plugins/modules/manageiq_tenant.py
View file

@ -83,7 +83,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Create a tenant in ManageIQ - name: Create a tenant in ManageIQ
community.general.manageiq_tenant: community.general.manageiq_tenant:
@ -94,7 +94,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete a tenant in ManageIQ - name: Delete a tenant in ManageIQ
community.general.manageiq_tenant: community.general.manageiq_tenant:
@ -105,7 +105,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Set tenant quota for cpu_allocated, mem_allocated, remove quota for vms_allocated - name: Set tenant quota for cpu_allocated, mem_allocated, remove quota for vms_allocated
community.general.manageiq_tenant: community.general.manageiq_tenant:
@ -119,7 +119,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete a tenant in ManageIQ using a token - name: Delete a tenant in ManageIQ using a token
@ -130,7 +130,7 @@ EXAMPLES = '''
manageiq_connection: manageiq_connection:
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
token: 'sometoken' token: 'sometoken'
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

12
plugins/modules/manageiq_user.py
View file

@ -75,7 +75,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Create a new user in ManageIQ using a token - name: Create a new user in ManageIQ using a token
community.general.manageiq_user: community.general.manageiq_user:
@ -87,7 +87,7 @@ EXAMPLES = '''
manageiq_connection: manageiq_connection:
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
token: 'sometoken' token: 'sometoken'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete a user in ManageIQ - name: Delete a user in ManageIQ
community.general.manageiq_user: community.general.manageiq_user:
@ -97,7 +97,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Delete a user in ManageIQ using a token - name: Delete a user in ManageIQ using a token
community.general.manageiq_user: community.general.manageiq_user:
@ -106,7 +106,7 @@ EXAMPLES = '''
manageiq_connection: manageiq_connection:
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
token: 'sometoken' token: 'sometoken'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Update email of user in ManageIQ - name: Update email of user in ManageIQ
community.general.manageiq_user: community.general.manageiq_user:
@ -116,7 +116,7 @@ EXAMPLES = '''
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
username: 'admin' username: 'admin'
password: 'smartvm' password: 'smartvm'
validate_certs: false validate_certs: false # only do this when you trust the network!
- name: Update email of user in ManageIQ using a token - name: Update email of user in ManageIQ using a token
community.general.manageiq_user: community.general.manageiq_user:
@ -125,7 +125,7 @@ EXAMPLES = '''
manageiq_connection: manageiq_connection:
url: 'http://127.0.0.1:3000' url: 'http://127.0.0.1:3000'
token: 'sometoken' token: 'sometoken'
validate_certs: false validate_certs: false # only do this when you trust the network!
''' '''
RETURN = ''' RETURN = '''

2
plugins/modules/xenserver_guest.py
View file

@ -300,7 +300,6 @@ EXAMPLES = r'''
hostname: "{{ xenserver_hostname }}" hostname: "{{ xenserver_hostname }}"
username: "{{ xenserver_username }}" username: "{{ xenserver_username }}"
password: "{{ xenserver_password }}" password: "{{ xenserver_password }}"
validate_certs: false
folder: /testvms folder: /testvms
name: testvm_2 name: testvm_2
state: poweredon state: poweredon
@ -327,7 +326,6 @@ EXAMPLES = r'''
hostname: "{{ xenserver_hostname }}" hostname: "{{ xenserver_hostname }}"
username: "{{ xenserver_username }}" username: "{{ xenserver_username }}"
password: "{{ xenserver_password }}" password: "{{ xenserver_password }}"
validate_certs: false
folder: /testvms folder: /testvms
name: testvm_6 name: testvm_6
is_template: true is_template: true