4827fef new roles - ad_integration, podman; use certificate, firewall, selinux roles from other roles

Authored and Committed by rmeggins 2 years ago
    new roles - ad_integration, podman; use certificate, firewall, selinux roles from other roles
    
    ad_integration - new role
    cockpit - use the firewall, selinux, certificate roles
    ha_cluster - use the firewall, selinux, certificate roles
    ha_cluster - fix decoding Vault variables
    ha_cluster - support configuring qnetd, qdevice
    ha_cluster - fix sbd config file template
    logging - use the firewall, selinux, certificate roles
    metrics - use the firewall, selinux roles
    metrics - support Grafana v9
    nbde_client - Add default clevis luks askpass unit
    nbde_client - correct clevis askpass unit conditional
    nbde_client - use no_log: true where secrets might be revealed
    nbde_server - add support for custom ports
    nbde_server - use the firewall, selinux roles
    network - Support looking up named route table in routing rule
    network - bond: improve the validation for setting peer_notif_delay
    network - bond: test arp_all_targets only when arp_interval is enabled
    network - bond: attach ports when creating the bonding connection
    network - Support 'route_metric4' for initscripts provider
    network - use rpm -i instead of yum install for epel7
    network - Support the DNS priority
    podman - new role
    postfix - use the firewall, selinux roles
    selinux - add 'local' parameter to seport
    ssh - add RSAMinSize, RequiredRSASize
    ssh - cast Jinja variables to correct type
    sshd - add RSAMinSize, RequiredRSASize
    sshd - Adding support for OpenWrt 21.03
    sshd - Moves internal non-overridable variables out of defaults
    sshd - cast Jinja variables to correct type
    storage - Fixed calculation of relative thinp sizes
    storage - Fixed size and percentage handling for thin pools
    timesync - cast Jinja variables to correct type
    timesync - Update timestamping checks using ethtool
    vpn - Check for /usr/bin/openssl on controller - do not use package_facts
    vpn - Add support for the parameters shared_key_content, leftid, rightid, ike,
          esp, type, ikelifetime, salifetime, retransmit_timeout, dpddelay, dpdtimeout,
          dpdaction, leftupdown
    vpn - use the firewall, selinux roles
    
        
file modified
+20 -0
file removed
-563
file added
+5
file modified
+129 -27
file modified
+19 -16