Commit graph

Select branches

Hide pull requests

main

0.0.2

0.0.4

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.1.5

0.1.6

0.1.7

0.2.0

0.2.2

0.2.3

0.3.0

0.4.0

0.4.1

0.4.2

0.4.3

0.4.4

0.5.0

0.6.0

Mono Color

• 1d42b2bfb9
  
  Fix typos main Miguel Jacq 2026-06-22 20:51:52 +10:00
• d99ba66951
  
  So long, etc Miguel Jacq 2026-06-22 20:40:51 +10:00
• 958f8e3aa7
  
  Byebye Enroll Miguel Jacq 2026-06-22 20:29:47 +10:00
• d96ad3dc02
  
  Some more hardening to not process raw jinja inside salt/ansible cmd. But, I think this is the end of the road Miguel Jacq 2026-06-22 20:26:06 +10:00
• c3c3608049
  
  Validate state.json is a normal file Miguel Jacq 2026-06-22 17:47:36 +10:00
• 5757bf4275
  
  Update DEVELOPMENT.md Miguel Jacq 2026-06-22 17:23:31 +10:00
• 992b8060a5
  
  validation of artifact dir Miguel Jacq 2026-06-22 17:23:25 +10:00
• efb6d7cc15
  
  Be strict about XDG_CACHE_DIR ownership etc Miguel Jacq 2026-06-22 17:22:27 +10:00
• 4277e029d0
  
  fix changelog Miguel Jacq 2026-06-22 15:39:22 +10:00
• 5930758398
  
  Fix pyproject to make debian build happy Miguel Jacq 2026-06-22 15:39:17 +10:00
• 952687e15d
  
  Ensure that --include-path records (but does not traverse) symlinks Miguel Jacq 2026-06-22 15:34:44 +10:00
• 07b07e60c5
  
  Ensure paths are not followed through parent links Miguel Jacq 2026-06-22 15:32:40 +10:00
• e10a3f62b0
  
  Belts and braces: normalise paths before globbing Miguel Jacq 2026-06-22 15:06:46 +10:00
• c4448226c0
  
  Ensure tests run through the poetry env's pytest Miguel Jacq 2026-06-22 15:05:48 +10:00
• 00f960d01e
  
  Upgrade to Poetry 2 Miguel Jacq 2026-06-22 15:03:32 +10:00
• 70525e52d8
  
  Doc updates Miguel Jacq 2026-06-22 14:49:56 +10:00
• ad019f6b09
  
  normalise control characters in generated manifest scalars Miguel Jacq 2026-06-22 14:45:12 +10:00
• cec6023a40
  
  Ensure that diff also runs through validate() Miguel Jacq 2026-06-22 14:14:51 +10:00
• 1312b7eac2
  
  Add SECURITY.md Miguel Jacq 2026-06-22 13:33:30 +10:00
• a1d7a9e4e6
  
  Add warning about --dangerous mode if sops is not in use Miguel Jacq 2026-06-22 12:56:21 +10:00
• bf1c72c542
  
  CHANGELOG updates Miguel Jacq 2026-06-22 12:47:39 +10:00
• d93de8a8a2
  
  Fix for remote harvest tmp dir Miguel Jacq 2026-06-22 12:46:45 +10:00
• 21a3ef3447
  
  More safety about writing output harvests/manifests to safe locations, including SOPS and diff. Miguel Jacq 2026-06-22 12:21:33 +10:00
• 3feba9a9f2
  
  More information about use of --dangerous mode Miguel Jacq 2026-06-22 12:03:48 +10:00
• d1e99db2df
  
  Update the cli help info about enroll.ini location Miguel Jacq 2026-06-22 12:00:48 +10:00
• def1c2bbc7
  
  Add note about README.md Miguel Jacq 2026-06-22 11:59:38 +10:00
• e78f61c5ed
  
  Avoid TOCTOU issues, stronger perms on manifest dir, don't allow harvesting to existing dir by default, scan whole file for potential secrets Miguel Jacq 2026-06-22 11:41:11 +10:00
• c7a6bfe979
  
  Update tests Miguel Jacq 2026-06-22 11:06:24 +10:00
• a0914e1369
  
  Strict validation of PATH when running as root in case it could contain potentially unsafe binaries Miguel Jacq 2026-06-22 11:06:01 +10:00
• 205c419a7a
  
  Sanity check on FQDN name to avoid accidental path traversal and similar woes Miguel Jacq 2026-06-22 10:59:17 +10:00
• 3e8ad600e2
  
  Use shlex.quote on remote commands Miguel Jacq 2026-06-22 10:58:20 +10:00
• 0a0f067111
  
  Add other common strings that could represent sensitive values to ignore unless in --dangerous mode Miguel Jacq 2026-06-22 10:57:54 +10:00
• e2b61bcdf1
  
  Ensure jinjifying an artifact passes through safe_artifact_file just in case Miguel Jacq 2026-06-22 10:57:08 +10:00
• 03dc467e32
  
  Updates to DEVELOPMENT.md re: manifest and validate Miguel Jacq 2026-06-22 10:09:31 +10:00
• 1e61ae2ff9
  
  Fix tests for deb build Miguel Jacq 2026-06-22 10:05:17 +10:00
• 67b92731f6
  
  Update tests Miguel Jacq 2026-06-22 09:58:54 +10:00
• 0384f8817b
  
  Fail closed on SMTP STARTTLS credential failure before sending creds. Ensure diff's manifest dir works now that we don't remove the target location if it exists (temp dir) Miguel Jacq 2026-06-22 09:57:56 +10:00
• 5ffd4ee755
  
  Perform harvest validation before trying to manifest from it Miguel Jacq 2026-06-22 09:56:55 +10:00
• 706604df74
  
  Stricter validation of harvests to ensure that they meet the schema and don't contain unsafe artifacts (e.g symlinks pointing outside the artifact tree) Miguel Jacq 2026-06-22 09:55:38 +10:00
• a85e8265f4
  
  Don't allow .enroll.ini in CWD, rely on env var or XDG path Miguel Jacq 2026-06-22 09:52:33 +10:00
• 6ee8c60e64
  
  Fix the almalinux tests - skip jinjaturtle and systemd in CI Miguel Jacq 2026-06-21 16:37:19 +10:00
• ce2652a3b3
  
  Handle gracefully debian stuff when testing on rhel-like Miguel Jacq 2026-06-21 16:15:33 +10:00
• b704a6c80b
  
  Add node before checkout Miguel Jacq 2026-06-21 16:07:03 +10:00
• b3a9cd3fb9
  
  Fix curl on almalinux Miguel Jacq 2026-06-21 16:00:35 +10:00
• 429da3f4c1
  
  Attempt to run tests on Alma Linux Miguel Jacq 2026-06-21 15:57:41 +10:00
• f21bac7d1c
  
  Updates to CHANGELOG and release script Miguel Jacq 2026-06-21 13:40:07 +10:00
• fc120f02a5
  
  More test coverage Miguel Jacq 2026-06-21 13:37:37 +10:00
• 528176ad82
  
  Enforce the galaxy requirements in tests Miguel Jacq 2026-06-21 13:15:07 +10:00
• 90e863df40
  
  Add DEVELOPMENT.md Miguel Jacq 2026-06-21 13:03:26 +10:00
• a0ac28f213
  
  Support '--enforce' mode in 'enroll diff' with '--target' to use a specific config manager to run to enforce Miguel Jacq 2026-06-21 12:38:10 +10:00
• 5b0e945c99
  
  Fix jinjaturtle tests Miguel Jacq 2026-06-21 09:42:19 +10:00
• d81c32ab7f
  
  Require version 1.20.0 or higher of podman container collection, for the platform arg Miguel Jacq 2026-06-21 09:41:56 +10:00
• c7c8b93e09
  
  make tests.sh executable again, whoops Miguel Jacq 2026-06-21 09:30:15 +10:00
• 5bb22afefd
  
  Run jinjaturtle unit tests across the three renderers Miguel Jacq 2026-06-21 09:17:29 +10:00
• 582679a523
  
  0.7.0b7 Miguel Jacq 2026-06-21 09:03:52 +10:00
• 97b64522c6
  
  Merge branch 'erb' Miguel Jacq 2026-06-21 09:03:33 +10:00
• eeb37be567
  
  0.7.0b6 Miguel Jacq 2026-06-20 18:39:28 +10:00
• f335077e59
  
  Fix salt rendering of yaml/json Miguel Jacq 2026-06-20 18:38:49 +10:00
• 8cbde1423a
  
  erb support, and fix notify services in puppet/salt in fqdn mode Miguel Jacq 2026-06-20 18:22:08 +10:00
• 4fd0facaf8
  
  0.7.0b5 Miguel Jacq 2026-06-20 15:33:47 +10:00
• 5845ff58e4
  
  Update pyproject comment Miguel Jacq 2026-06-20 15:33:24 +10:00
• 097022f782
  
  Fix notification of individual services when related config changes, even when roles are grouped Miguel Jacq 2026-06-20 15:31:42 +10:00
• 08066595f1
  
  README updates Miguel Jacq 2026-06-20 14:36:59 +10:00
• eb286b1db0
  
  0.7.0b4 Miguel Jacq 2026-06-20 12:30:39 +10:00
• ceb86c513c
  
  Improve test coverage of salt and puppet Miguel Jacq 2026-06-20 12:30:02 +10:00
• 899724097e
  
  Standardise more into CMModule parent class for the 3 child renderers Miguel Jacq 2026-06-20 12:19:04 +10:00
• 7379587a28
  
  Don't enforce /etc/enroll if no firewall rules to set in subdir Miguel Jacq 2026-06-19 20:29:12 +10:00
• d6371ccccd
  
  Fixes for ensuring /etc/enroll exists if /etc/enroll/firewall is to be created Miguel Jacq 2026-06-19 20:18:19 +10:00
• 5644062040
  
  0.7.0b2 Miguel Jacq 2026-06-19 19:12:26 +10:00
• de42e16510
  
  loooots of fixes. Miguel Jacq 2026-06-19 18:55:30 +10:00
• b8926f9a5f
  
  Simplify the over-engineered ansible rendering. Simplify docker image mgmt on Puppet so it doesn't use that awful puppetlabs-docker module Miguel Jacq 2026-06-19 16:32:25 +10:00
• 05b2875c17
  
  Oh, Salt now works with JinjaTurtle :) Miguel Jacq 2026-06-18 20:38:50 +10:00
• adfeb21d4b
  
  reintroduce Salt Miguel Jacq 2026-06-18 20:35:38 +10:00
• 0d111caf62
  
  Revert "Remove salt" Miguel Jacq 2026-06-18 20:12:56 +10:00
• 02feff014f
  
  Version 0.7.0b1 Miguel Jacq 2026-06-18 09:13:03 +10:00
• 37523514b0
  
  Make clear that flatpak/snap config manifesting is Ansible only for now Miguel Jacq 2026-06-18 09:12:24 +10:00
• 79e73584e9
  
  Set version to beta for pypi Miguel Jacq 2026-06-18 09:09:47 +10:00
• bf0228a76a
  
  Dependency updates Miguel Jacq 2026-06-18 09:09:40 +10:00
• 22723678bd
  
  Note in CHANGELOG that 0.7.0 is not yet released Miguel Jacq 2026-06-18 09:09:32 +10:00
• a4b0ef0544
  
  Extra clarity on modulepath with Puppet for docker support Miguel Jacq 2026-06-18 09:09:16 +10:00
• b149b2e5d7
  
  Remove salt Miguel Jacq 2026-06-17 18:13:06 +10:00
• ebc27e1111
  
  Support for detecting Docker images Miguel Jacq 2026-06-17 18:05:02 +10:00
• e2be9a6239
  
  Separate up the ansible renderer. Simplify the package management bits by using ansible.builtin.package Miguel Jacq 2026-06-17 16:40:36 +10:00
• e448994470
  
  No sudo needed in the CI test Miguel Jacq 2026-06-17 14:29:16 +10:00
• 845f8d9ad1
  
  Refactor tests.sh Miguel Jacq 2026-06-17 14:25:41 +10:00
• c7e3b94355
  
  Add separate pytests.sh script for local use Miguel Jacq 2026-06-17 14:22:57 +10:00
• ee08bf43ba
  
  Support manifesting Salt Miguel Jacq 2026-06-17 14:19:25 +10:00
• ceca3df83c
  
  Fix hiera/fqdn support for Puppet Miguel Jacq 2026-06-17 11:47:47 +10:00
• 20cc48e1ce
  
  More refactoring, support hiera and multi site mode for Puppet Miguel Jacq 2026-06-17 10:54:46 +10:00
• ed9ec6893a
  
  Try to resolve circular imports Miguel Jacq 2026-06-17 09:51:47 +10:00
• de7531424d
  
  Huge refactor to support extending a generic Config Manager class for different types (Ansible, Puppet... Salt soon?) Miguel Jacq 2026-06-17 09:37:32 +10:00
• 5e6c8e6455
  
  remove sudo call Miguel Jacq 2026-06-16 16:53:28 +10:00
• 3c84b3c070
  
  Test puppet run Miguel Jacq 2026-06-16 16:47:47 +10:00
• 380a0b8ca2
  
  Update the puppet reserved names Miguel Jacq 2026-06-16 16:44:10 +10:00
• 33b9d44c55
  
  Output the AppImage into the dir it's going into anyway Miguel Jacq 2026-06-16 16:39:28 +10:00
• f9e93cd6fd
  
  Support manifesting Puppet :o Miguel Jacq 2026-06-16 16:39:18 +10:00
• e682aae41e
  
  Filter out more sysctl params that throw Invalid argument when executed on the fly Miguel Jacq 2026-06-16 16:30:33 +10:00
• 9546e1b8ed
  
  Add sysctl detection Miguel Jacq 2026-06-16 14:23:44 +10:00
• 3c19ae54b2
  
  Only capture user-specific .bashrc style files when using mode, in case they contain sensitive env vars. Miguel Jacq 2026-06-16 13:35:33 +10:00
• 8774d019d3
  
  Fix tests Miguel Jacq 2026-06-14 19:21:32 +10:00