Ansible 2.9 "Immigrant Song" Release Notes

Topics

v2.9.9

Release Summary

Release Date: 2020-05-12
Porting Guide

Bugfixes

Fix an issue with the fileglob plugin where passing a subdirectory of non-existent directory would cause it to fail - #69450

v2.9.8

Release Summary

Release Date: 2020-05-11
Porting Guide

Minor Changes

Add test for reboot & wait_for_connection on EOS & IOS (#63014)
Fixed 'intersect' filter spelling in constructed inventory plugin example.
Move cli prompt check logic from action to cliconf plugin (#63945)
Point inventory script location to their respective version rather than devel version in documentation.
ansible-test - Now includes testing support for RHEL 8.2
ansible-test - Remove obsolete support for provisioning remote vCenter instances. The supporting services are no longer available.

Bugfixes

Collections - Allow a collection role to call a stand alone role, without needing to explicitly add ansible.legacy to the collection search order within the collection role. (#69101)
Fix cli context check for network_cli connection (#64697)
Revert 5f6427b1fc7449a5c42212013d3f628665701c3d as it breaks netconf connection
Role Installation - Ensure that a role containing files with non-ascii characters can be installed (#69133)
Update ActionBase._low_level_execute_command to honor executable (#68054)
collections - Handle errors better for filters and tests in collections, where a non-existent collection is specified, or importing the plugin results in an exception (#66721)
deal with cases in which just a file is pased and not a path with directories, now fileglob correctly searches in 'files/' subdirs.
dnf - Unified error messages when trying to install a nonexistent package with newer dnf (4.2.18) vs older dnf (4.2.9)
dnf - Unified error messages when trying to remove a wildcard name that is not currently installed, with newer dnf (4.2.18) vs older dnf (4.2.9)
hostname - make module work on Manjaro Linux (#61382)
mysql_user - fix the error No database selected (#68070).
ovirt_disk: add warning when uploading wrong format
ovirt_disk: upload image auto detect size
ovirt_network: allow to remove vlan_tag
pip - The virtualenv_command option can now include arguments without requiring the full path to the binary. (#52275)
pip - check_mode with state: present now returns the correct state for pre-release versioned packages
postgresql_set - fix converting value to uppercase (#67377).
redfish_config - fix support for boolean bios attrs (#68251)
service_facts - Now correctly parses systemd list-unit-files for systemd >=245
sysvinit - Add missing parameter module in call to daemonize().
the default parsing will now show existing JSON errors and not just YAML (last attempted), also we avoid YAML parsing when we know we only want JSON issue
win_psmodule - Fix TLS 1.2 compatibility with PSGallery.
win_psrepository - Fix TLS 1.2 compatibility with PSGallery.
win_psrepository - Fix Ignore error when trying to retrieve the list of registered repositories
zabbix_template - no longer fails with KeyError when there are no macros present in existing template (see ansible-collections/community.zabbix#19)

v2.9.7

Release Summary

Release Date: 2020-04-16
Porting Guide

Minor Changes

'Edit on GitHub' link for plugin, cli documentation fixed to navigate to correct plugin, cli source.
Handle get_tags_for_object API correctly in vmware_rest_client.
Remove redundant encoding in json.load call in ipa module_utils (#66592).
ansible-test - Upgrade OpenSUSE containers to use Leap 15.1.
ansible-test now supports testing against RHEL 7.8 when using the --remote option.
vmware_cluster - Document alternatives for deprecated parameters

Removed Features (previously deprecated)

ldap_attr, ldap_entry - The params option has been removed in Ansible-2.10 as it circumvents Ansible's option handling. Setting bind_pw with the params option was disallowed in Ansible-2.7, 2.8, and 2.9 as it was insecure. For information about this policy, see the discussion at: https://meetbot.fedoraproject.org/ansible-meeting/2017-09-28/ansible_dev_meeting.2017-09-28-15.00.log.html This fixes CVE-2020-1746

Bugfixes

security issue - The subversion module provided the password via the svn command line option --password and can be retrieved from the host's /proc/<pid>/cmdline file. Update the module to use the secure --password-from-stdin option instead, and add a warning in the module and in the documentation if svn version is too old to support it. (CVE-2020-1739)
security issue win_unzip - normalize paths in archive to ensure extracted files do not escape from the target directory (CVE-2020-1737)
security_issue - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740)
Alter task_executor's start_connection to support newer modules from collections which expect to send task UUID.
Ansible.ModuleUtils.WebRequest - actually set no proxy when use_proxy: no is set on a Windows module - #68528
Ensure DataLoader temp files are removed at appropriate times and that we observe the LOCAL_TMP setting.
Ensure we don't allow ansible_facts subkey of ansible_facts to override top level, also fix 'deprefixing' to prevent key transforms.
Ensure we get an error when creating a remote tmp if it already exists. CVE-2020-1733
Fact Delegation - Add ability to indicate which facts must always be delegated. Primarily for discovered_interpreter_python right now, but extensible later. (#61002)
Fix nxos_lacp replace operation (#64074).
Handle equal sign in password while using passwordstore lookup plugin.
In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735.
In vmware_guest_network module use appropriate network while creating or reconfiguring (#65968).
Log additional messages from persistent connection modules that may be missed if the module fails or returns early.
vmware_content_deploy_template's cluster argument no longer fails with an error message about resource pools.
ansible command now correctly sends v2_playbook_on_start to callbacks
ansible-galaxy - Error when install finds a tar with a file that will be extracted outside the collection install directory - CVE-2020-10691
ansible-galaxy collection - Preserve executable bit on build and preserve mode on install from what tar member is set to - #68415
dense callback - fix plugin access to its configuration variables and remove a warning message (#64628).
display - Improve method of removing extra new line after warnings so it does not break Tower/Runner (#68517)
docker connection plugin - do not prefix remote path if running on Windows containers.
for those running uids for invalid users (containers), fallback to uid=<uid> when logging fixes #68007
get_url pass incorrect If-Modified-Since header (#67417)
mysql_user - Fix idempotence when long grant lists are used (#68044)
os_user_role - Fix os_user_role issue to grant a role in a domain.
ovirt_storage_domain: fix update_check for warning_low_space
purefa_snmp - Fix error when deleting a manager and when creating a v2c manager (#68180)
rabbitmq_policy - Fix version parsing for RabbitMQ 3.8.
routeros_facts - Prevent crash of module when ipv6 package is not installed
setup.ps1 - Fix ansible_fqdn using the wrong values to build the actual DNS FQDN.

v2.9.6

Release Summary

Release Date: 2020-03-04
Porting Guide

Minor Changes

Fix URL in postgresql_table documentation.
Refator net_base action plugin to support collection with network platform agnostic modules.
docker connection plugin - run Powershell modules on Windows containers.
ovirt_disk: correct description of storage_domain, there is no default value of the attribute
ovirt_vm: remove deprecated warning of Linux boot parameters

Bugfixes

Bump the minimum openstacksdk version to 0.18.0 when os_network uses the port_security_enabled or mtu arguments.
Fix Python3 compatibility for vmware_export_ovf module.
Fix a bug when a host was not removed from a play after meta: end_host and as a result the host was still present in ansible_play_hosts and ansible_play_batch variables.
Fix collection install error that happened if a dependency specified dependencies to be null (#67574).
Fix examples in eos_vlans (#66131).
Templating - Ansible was caching results of Jinja2 expressions in some cases where these expressions could have dynamic results, like password generation (#34144).
Update the warning message for CONDITIONAL_BARE_VARS to list the original conditional not the value of the original conditional (#67735)
Use hostnamectl command to get current hostname for host while using systemd strategy (#59438).
also strip spaces around config values in pathlist as we do in list types
ansible-galaxy - Display proper error when invalid token is used for Galaxy servers
ansible-galaxy - Fix issue when compared installed dependencies with a collection having no MANIFEST.json or an empty version string in the json
ansible-galaxy - Fix up pagination searcher for collection versions on Automation Hub
ansible-galaxy - Remove uneeded verbose messages when accessing local token file
ansible-galaxy - Send SHA256 hashes when publishing a collection
ansible-galaxy - properly list roles when the role name also happens to be in the role path (#67365)
ansible-test validate-modules - Fix arg spec collector for PowerShell to find utils in both a collection and base.
azure_rm_resourcegroup_facts - adds the ansible_facts as a sub map to fix the KeyError (#66727).
docker_login - make sure that ~/.docker/config.json is created with permissions 0600.
ec2_asg - regression bug, when an existing autoscaling group was updated and but the launch config of existing instances was deleted.
fix the bug where IOS vlans module throws traceback. (ref: #64633)
fixes the eos_vlans repalced state behavior to configure the 'name' parameter(#67318)
get_certificate - Fix cryptography backend when pyopenssl is unavailable (#67900)
make no_log=False on a module option silence the no_log warning (#49465 #64656)
mysql_db - fix bug in the db_import function introduced by #56721 (#65351).
nxos_vlans - Allow nxos_l2_interfaces to append the allowed vlans list
openssl* modules - prevent crash on fingerprint determination in FIPS mode (#67213).
ovirt_vm: correct keyError for iSCSI parameters
ovirt_vm: correct numa nodes and update documentation
plugins - Allow ensure_type to decrypt the value for string types (and implicit string types) when value is an inline vault.
proxysql - fixed mysql dictcursor
route53 - improve handling of octal encoded characters
synchronize - allow data to be passed between two managed nodes when using the docker connection plugin (#65698)
unixy - fixed duplicate log entries on loops
vmware_host_firewall_manager - Fixed creating IP specific firewall rules with Python 2 (#67303)
vultr - Fixed the issue retry max delay param was ignored.
win_credential - Fix issue that errors when trying to add a name with wildcards.
win_unzip - Fix support for paths with square brackets not being detected properly

v2.9.5

Release Summary

Release Date: 2020-02-13
Porting Guide

Minor Changes

add one note to help ansible user to understand the requirements to (#65969)
ovirt_disk: remove default value because the parameter is required when disk is attached to vm
ovirt_vm add comunentaion about how to import ova
powershell (shell plugin) - Fix join_path to support UNC paths (#66341)

Deprecated Features

aws_az_info (aws_az_facts) - Fixed deprecation warning so that it triggers when run as aws_az_facts. Bumped removal version to 2.14

Bugfixes

AnsibleModule.run_command() - set close_fds to False on Python 2 if pass_fds are passed to run_command(). Since subprocess.Popen() on Python 2 does not have the pass_fds option, there is no way to exclude a specific list of file descriptors from being closed.
Bump the minimum openstacksdk version to 0.29.0 when os_network uses the dns_domain argument
Fix multiple issues with nxos_interfaces states (#63960).
Module arguments in suboptions which were marked as deprecated with removed_in_version did not result in a warning.
Redact GitLab Project variables which might include sensetive information such as password, api_keys and other project related details.
Working implementation for editing Cisco IOS macros(#55220)
ansible-test - Use virtualenv versions before 20 on provisioned macOS instances to remain compatible with an older pip install.
ansible-test now limits Jinja2 installs to version 2.10 and earlier on Python 2.6
ansible-test windows coverage - Ensure coverage reports are UTF-8 encoded without a BOM
display - remove extra new line after warnings (#65199)
dnf - Fix idempotence of state: installed (#64963)
docker_container - passing test: [NONE] now actually disables the image's healthcheck, as documented.
docker_swarm_service - passing test: [NONE] now actually disables the image's healthcheck, as documented.
file - change _diff_peek in argument spec to be the correct type, which is bool (#59433)
galaxy - Fix an AttributeError on ansible-galaxy install with an empty requirements.yml (#66725).
group - The group module was not correctly detecting whether a local group is existing or not with local set to yes if the same group exists in a non local group repository e.g. LDAP. (#58619)
include_vars - fix stack trace when passing dirs in an ad-hoc command (#62633)
ios* - Fix bug where IPV6 was duplicated for replace state (#66654)
ios_banner - Modified the regular expression check to be non greedy when multiple banners are present.
jenkins_job module: xml config encoding bugfix on python3
mysql_user - fix support privileges with underscore (#66974).
mysql_variable - fix the module doesn't support variables name with dot (#54239).
nxos_facts: Don't throw an error if faninfo is not reported.
nxos_telemetry - Fix fact gathering for sensor-groups (#66439)
openssl_publickey - fix a module crash caused when pyOpenSSL is not installed (#67035).
ovirt - add suport for search with space
ovirt_job: add job when job is already existing and is in state finished
ovirt_network: add check to control when creating network
pacman - fix module crash with IndexError: list index out of range (#63077)
pamd - Bugfix for attribute error when removing the first or last line
pmrun plugin - The success command string was no longer quoted. This caused unusual use-cases like become_flags=su - root -c to fail.
podman connection plugin - fix to handle the new default copy pause rootless containers from upstream (#66263)
pure - fix incorrect user_string setting in module_utils file (#66914)
redhat_subscription - do not set the default quantity to 1 when no quantity is provided (#66478)
synchronize - fix password authentication on Python 2 (#56629)
systemd - don't require systemd to be running to enable/disable or mask/unmask units
throttle: the linear strategy didn't always stuck with the throttle limit
user - update module to support silencing no_log warnings in the future (see: #64733)
wait_for_connection - with pipelining enabled, interpreter discovery would fail if the first connection attempt was not successful

v2.9.4

Release Summary

Release Date: 2020-01-20
Porting Guide

Bugfixes

yum - fix bug that caused enablerepo to not be honored when used with disablerepo all wildcard/glob (#66549)

v2.9.3

Release Summary

Release Date: 2020-01-15
Porting Guide

Minor Changes

Fixed typos in various modules regarding argument_spec data types.
dnf - Properly handle module AppStreams that don't define stream (#63683)
docker_container.py - update a containers restart_policy without restarting the container (#65993)
docker_stack - Added stdout, stderr, and rc to return values.
zabbix* - underlying python module now required in version zabbix-api==0.5.4 (#65145)

Bugfixes

SECURITY - CVE-2019-14904 - solaris_zone module accepts zone name and performs actions related to that. However, there is no user input validation done while performing actions. A malicious user could provide a crafted zone name which allows executing commands into the server manipulating the module behaviour. Adding user input validation as per Solaris Zone documentation fixes this issue.
ActionBase - Add new cleanup method that is explicitly run by the TaskExecutor to ensure that the shell plugins tmpdir is always removed. This change means that individual action plugins need not be responsible for removing the temporary directory, which ensures that we don't have code paths that accidentally leave behind the temporary directory.
CVE-2019-14905 - nxos_file_copy module accepts remote_file parameter which is used for destination name and performs actions related to that on the device using the value of remote_file which is of string type However, there is no user input validation done while performing actions. A malicious code could crafts the filename parameter to take advantage by performing an OS command injection. This fix validates the option value if it is legitimate file path or not.
Fix bandwidth calculation in nxos_ospf_vrf for Python 3 (#66095)
Fix for network_cli become method to be compatible with collections
Fix how the neighbour password was being defaulted (#65909)
Fix idempotence issue in nxos_lag_interfaces with Python 3 (#66126)
Fix issue where nxos_l3_interfaces was not rendering 'dhcp' in facts (#66049)
Fix issue where nxos_user unintentionally creates user with two different roles (#65962)
Fix issue where purge breaks with empty aggregate (#66004).
Fix issue with callbacks set_options method that was not called with collections
Fix multiple issues with how nxos_vlans Resource Module behaves (#63650)
Fix nxos_hsrp throwing a KeyError for auth_enc (#65796)
Fix nxos_vxlan_vtep_vni rendering duplicate peer-ip commands (#66088)
Fix ordering of the commands sent in nxos_snmp_community (#66094).
Fix regular expression to allow dots in username (#66293)
Fixes in network action plugins load from collections using module prefix (#65071)
Fixes in network action plugins to work in network connection plugin and modules in collection
Make netconf plugin configurable to set ncclient device handler name in netconf plugin (#65718)
Netconf modules are sending a bad rpc call for IOS-XR (#64634)
Use correct datastore in multi-datacenter environment while using vmware_deploy_ovf (#63920).
When cloning vm from the template it assigned Blank template to it and when rerun playbook it failed.
ansible-galaxy - Expand the User-Agent to include more information and add it to more calls to Galaxy endpoints.
ansible-galaxy - Treat the GALAXY_SERVER_LIST config entry that is defined but with no values as an empty list
ansible-test no longer tries to install coverage 5.0+ since those versions are unsupported
ansible-test no longer tries to install setuptools 45+ on Python 2.x since those versions are unsupported
ansible-test now ignores warnings when comparing pip versions before and after integration tests run
ansible-test now properly recognizes modules and module_utils in collections when using the blacklist plugin for the pylint sanity test
collection_loader - sort Windows modules below other plugin types so the correct builtin plugin inside a role is selected (#65298)
cyberarkpassword - fix invalid attribute access (#66268)
display logging - Fix issue where 3rd party modules will print tracebacks when attempting to log information when ANSIBLE_LOG_PATH is set - #65249
display logging - Fixed up the logging formatter to use the proper prefixes for u=user and p=process
display logging - Re-added the name attribute to the log formatter so that the source of the log can be seen
dnf module - Ensure the modules exit_json['msg'] response is always string, not sometimes a tuple.
docker_container - wait for removal of container if docker API returns early (#65811).
docker_image - fix validation of build options.
docker_image - improve file handling when loading images from disk.
docker_login - fix error handling when username or password is not specified when state is present.
docker_network - fix idempotency for multiple IPAM configs of the same IP version (#65815).
docker_network - validate IPAM config subnet CIDR notation on module setup and not during idempotence checking.
docker_swarm_service - fix task always reporting as changed when using healthcheck.start_period.
ec2_group - Fix regression with revoking security groups in EC2 Classic Load Balancers.
ec2_group_info, ec2_vol_info, ec2_vol_info - Fixed RuntimeErrors on Python3.8 when iterating filter dictionaries. (#65024)
elb_application_lb, elb_network_lb - fixed errors during listener rule comparison which caused broken JSON, and which caused some values not being compared correctly. (#65020)
elb_application_lb, elb_network_lb - idempotence check for rules now compares all values order-independently, instead of just comparing the first value if multiple are specified.
fact gathering - Display warnings and deprecation messages that are created during the fact gathering phase
gitlab_runner - fix idempotency for shared runner
mysql - dont mask mysql_connect function errors from modules (#64560).
openssl_certificate - provider option was documented as required, but it was not checked whether it was provided. It is now only required when state is present.
ovirt_network: correct external_provider logic - first try to import when not found try to create it
pacman - Fix pacman output parsing on localized environment. (#65237)
paramiko - catch and handle exception to prevent stack trace when running in FIPS mode
postgresql_privs - fix sorting lists with None elements for python3 (#65761).
postgresql_schema - use query parameters with cursor object (#65679).
postgresql_sequence - use query parameters with cursor object (#65787).
postgresql_set - use query parameters with cursor object (#65791).
postgresql_slot - use query parameters with cursor object (#65791).
roles - Ensure that allow_duplicates: true enables to run single role multiple times (#64902)
terraform - adding support for absolute paths additionally to the relative path within project_path (#58578)
terraform module - fixes usage for providers not supporting workspaces
user - fix comparison on macOS so module does not improperly report a change (#62969)
user - on systems using busybox, honor the on_changed parameter to prevent unnecessary password changing (#65711)
win_uri win_get_url - Fix the behaviour of follow_redirects: safe to actual redirect on GET and HEAD requests - #65556
yum - performance bugfix, the YumBase object was being instantiated multiple times unnecessarily, which lead to considerable overhead when operating against large sets of packages.

New Plugins

Netconf

ce - Use ce netconf plugin to run netconf commands on Huawei Cloudengine platform
default - Use default netconf plugin to run standard netconf commands as per RFC
iosxr - Use iosxr netconf plugin to run netconf commands on Cisco IOSXR platform
junos - Use junos netconf plugin to run netconf commands on Juniper JUNOS platform
sros - Use Nokia SROS netconf plugin to run netconf commands on Nokia SROS platform

v2.9.2

Release Summary

Release Date: 2019-12-04
Porting Guide

Minor Changes

Provides additional information about collection namespace name restrictions (#65151).
docker_swarm_service - Sort lists when checking for changes.

Bugfixes

Check NoneType for raw_params before proceeding in include_vars (#64939).
Fix nxos_facts rendering of keys (#65167)
Fix regression when ansible_failed_task and ansible_failed_result are not defined in the rescue block (#64789)
Fix string parsing of inline vault strings for plugin config variable sources
Fixed typo in vmware_guest_powerstate module (#65161).
Revert customization of guest custom value behavior (#64291).
AnsibleUnsafe/AnsibleContext/Templar - Do not treat AnsibleUndefined as being "unsafe" (#65198)
acme_certificate - fix misbehavior when ACME v1 is used with modify_account set to false.
ansible-galaxy - Fix collection install when installing from a URL or a file - #65109
ansible-galaxy - Return the HTTP code reason if no error msg was returned by the server - #64850
ansible-galaxy - Set User-Agent to Ansible version when interacting with Galaxy or Automation Hub
ansible-test now properly handles enumeration of git submodules. Enumeration is now done with git submodule status --recursive without specifying . for the path, since that could cause the command to fail. Instead, relative paths outside the current directory are filtered out of the results. Errors from git commands will now once again be reported as errors instead of warnings.
ansible-test windows coverage - Output temp files as UTF-8 with BOM to standardise against non coverage runs
become - Fix various plugins that still used play_context to get the become password instead of through the plugin - #62367
ce modules - Update(add) docs notes to tell user modules work connection.
ce modules - Update(add) docs notes to tell user modules work connection.
ce modules - Update(add) docs notes to tell user modules work connection.
ce modules - Update(add) docs notes to tell user modules work connection.
ce modules - Update(add) docs notes to tell user modules work connection.
ce modules - Update(add) docs notes to tell user modules work connection.
decouple k8s_scale from the k8s module utils so that it doesn't complain about missing arguments
docker_container - fix network idempotence comparison error.
docker_network - fix idempotence comparison error.
fix all checkpoint modules to be able to get parameter with value false (#65040)
fortios httpapi plugin - fix the issue that fortios httpapi plugin does not support python2
netconf_rpc module does not work with nxos (#63255).
netscaler_service - fixed issue preventing use of graceful attribute
openssh_keypair - fixes idempotence issue with public key (#64969).
openssl_csr - the module will now enforce that privatekey_path is specified when state=present.
plugins-netconf-ce - Fix failed to get version information.
postgres.py - add a new keyword argument query_params (#64661).
postgresql_db - Removed exception for 'LibraryError' (#65223).
postgresql_idx.py - use the query_params arg of exec_sql function (#64661).
postgresql_lang - use query params with cursor.execute (#65093).
postgresql_owner - use query_params with cursor object (#65310).
postgresql_privs - sort results before comparing so that the values are compared and not the result of .sort() (#65125)
postgresql_privs.py - fix reports as changed behavior of module when using type=default_privs (#64371).
postgresql_user - fix the module doesn't correctly commit changes if groups is set (#64806).
proxmox - fix version detection of proxmox 6 and up (Fixes #59164)
pulp_repo - the client_cert and client_key options were used for both requests to the Pulp instance and for the repo to sync with, resulting in errors when they were used. Use the new options feed_client_cert and feed_client_key for client certificates that should only be used for repo synchronisation, and not for communication with the Pulp instance. (#59513)
runas - Fix the runas become_pass variable fallback from ansible_runas_runas to ansible_runas_pass
win_chocolatey - Improve error checking when finding the path of a newly installed Chocolatey app
win_domain_computer - Fix idempotence checks when sAMAccountName is different from name
win_iis_webapppool - Do not try and set attributes in check mode when the pool did not exist
yarn - handle no version when installing module by name (#55097)
zabbix_action - arguments event_source and esc_period no longer required when state=absent

v2.9.1

Release Summary

Release Date: 2019-11-13
Porting Guide

Minor Changes

Fixed typo in inventory_discovery.rst document.
Fixes update_resource and delete_resource API for correct number of arguments in aws_config_aggregator (#64581).
Fixing typo mistake in testbed with section. Deploy template from content library is supported from 67U3 (#62957).
ansible-test - module validation now allows elements: for return value documentation.
ansible-test - switch from testing RHEL 8.0 and RHEL 8.1 Beta to RHEL 8.1
ansible-test no longer tries to install sanity test dependencies on unsupported Python versions
ovirt_vm: correct cpu_threads documentation
vmware_host_firewall_manager - allowed_hosts excpects a dict as parameter, list is deprecated

Bugfixes

(#63901)
security issue - Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs (CVE-2019-14864)
ACI modules - Fix a whitespace issue in filters for ACI 4.2 strict validation
ACME modules: fix bug in ACME v1 account update code
ACME modules: make sure some connection errors are handled properly
ACME modules: support Buypass' ACME v1 endpoint
Ansible.Basic - Fix issue when setting a no_log parameter to an empty string - #62613
Can't use plugin options vars in playbook when using collections (#63975)
Cloudengine module_utils - the set-id (RPC-REPLY XML attribute) may change over the time althougth set-id is the identity of the next RPC packet.
Cloudengine netconf plugin - add a dispatch RPC function,just return original RPC-REPLY, the function is used by Cloudengine module_utils.
Fix IOS_VLANS override operation for new VLANs(#63624)
Fix deprecation warning on GitLab modules
Fix for backup option dest key for network modules (#57131).
Fix for performance regression in handler invocation (#59017)
Fix ios_l2_interfaces skipping relevant L2 interfaces facts(#63779)
Fix requirements on non required module parameters
Fix the xml module to use list(elem) instead of elem.getchildren() since it is being removed in Python 3.9
Handle empty extra vars in ansible cli (#61497).
HostVarsVars - Template the __repr__ value (#64128).
Ovirt correct resolving nested atributes which are false.
Remove a temp directory created by wait_for_connection action plugin (#62407).
Remove the unnecessary warning about aptitude not being installed (#56832).
Remove unused variable in junos_user to fix flake8 failure.
TaskQueueManager - Explicitly set the mutliprocessing start method to fork to avoid issues with the default on macOS now being spawn.
To fix ios_interfaces where non-existing virtual/loopback interfaces was not getting configured
account for empty strings in when splitting the host pattern (#61964)
acl - fixed module failure if there are spaces in a path
acme_certificate - fix crash when module is used with Python 2.x.
action/ce - fix a bug, some new version os will not discard uncommitted configure with a return directly.(#63513).
ansible-galaxy - Fix pagination issue when retrieving role versions for install - #64355
ansible-test - bump version of ACME test container. The new version includes updated dependencies.
ansible-test now limits pathspec to versions prior to 0.6.0 on Python 2.6 to avoid installation errors
ansible-test now properly reports import errors for collections when running the import sanity test
ansible-test now properly uses a fresh copy of environment variables for each command invocation to avoid mixing vars between commands
ansible-test now shows the correct source path instead of %s for collection role based test targets when the -v option is used
ansible-test validate-modules sanity test code missing-module-utils-import-c#-requirements is now missing-module-utils-import-csharp-requirements (fixes ignore bug).
ansible-test validate-modules sanity test code multiple-c#-utils-per-requires is now multiple-csharp-utils-per-requires (fixes ignore bug).
ansible-test validate-modules sanity test now checks for AnsibleModule initialization instead of module_utils imports, which did not work in many cases.
ansible-test validate-modules sanity test now properly handles collections imports using the Ansible collection loader.
ansible-test validate-modules sanity test now properly handles relative imports.
ansible-test validate-modules sanity test now properly handles sys.exit in modules.
ansible-test validate-modules sanity test now properly invokes Ansible modules as scripts.
ce_acl_interface - update to fix some bugs - Modified the prompt statement when the switch device cannot be configured. (#64018)
ce_bgp - update to fix some bugs - When the vrf_name parameter is in the module and the configuration is repeatedly sent to the device, the module displays change = True. (#60573)
ce_bgp_af - update to fix some bugs - Add some update statements. (#62589)
ce_bgp_neighbor - update to fix some bugs - Add some update statements. (#60934)
ce_bgp_neighbor_af - update to fix some bugs - Add some update statements. (#60937)
ce_config - fixed issue - Re-building commands(config src) by replacing '#' with 'quit','quit' commands may close connection (#62872)
ce_evpn_bgp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61136)
ce_evpn_bgp_rr - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61168)
ce_evpn_global - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61013)
ce_facts - update to fix some bugs - Modifying regular expression errors. (#63331)
ce_info_center_global- update to fix some bugs - Add some update statements. (#61283)
ce_interface_ospf- update to fix some bugs - Add some update statements. (#61431)
ce_link_status - fix some bugs, result of interface <get> operation involves a large amount of data,interact with the device through the <get-next>.(#62417).
ce_mtu- update to fix some bugs - Contrast before and after adding configuration. (#61442)
ce_netstream_aging - Fix bugs(list index out of range).
ce_netstream_aging- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61653)
ce_netstream_export- update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61652)
ce_netstream_global - Fix bugs(list index out of range and key error).
ce_netstream_template - Fix bugs(list index out of range and update commands error).
ce_ntp - update to fix some bugs - Add some update statements. (#61654)
ce_vrf_af - update to fix some bugs - Add some update statements. (#61683)
copy - recursive copy with remote_src=yes now recurses beyond first level. (Fixes #58284)
debug - fixed an issue introduced in Ansible 2.4 where a loop of debug tasks would lose the "changed" status on each item.
docker_container - fix idempotency for IP addresses for networks. The old implementation checked the effective IP addresses assigned by the Docker daemon, and not the specified ones. This causes idempotency issues for containers which are not running, since they have no effective IP addresses assigned.
docker_container - make sure that when image is missing, check mode indicates a change (image will be pulled).
docker_image - make sure that deprecated options also emit proper deprecation warnings next to warnings which indicate how to replace them.
docker_login - Use with statement when accessing files, to prevent that invalid JSON output is produced.
docker_node_info - improve error handling when service inspection fails, for example because node name being ambiguous (#63353, PR #63418).
docker_swarm_service - source must no longer be specified for tmpfs mounts.
eos_vlans - Fixed behavior of when state=overridden
facts/virtual
gitlab_user - Fix adding ssh key to new/changed user and adding group membership for new/changed user
grafana_datasource module no longer fails if datasource name contains space characters.
iosxr - Make sure that empty configs don't throw a traceback for Resource Modules (#62515)
jenkins modules - CSRF handling fixed accordingly the latest updates in Jenkins Security model for versions > 2.173.3
junos_user - fixed issue with adding multiple values for a Junos account with aggregate mode
lineinfile - don't attempt mkdirs when path doesn't contain directory path
lineinfile - fix bug that caused multiple line insertions (#58923).
lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (#63756)
lineinfile - use correct index value when inserting a line at the end of a file (#63684)
loops - Do not indiscriminately mark loop items as unsafe, only apply unsafe to with_ style loops. The items from loop should not be explicitly wrapped in unsafe. The underlying templating mechanism should dictate this. (#64379)
module executor - Address issue where changes to Ansiballz module code, change the behavior of module execution as it pertains to __file__ and sys.modules (#64664)
openssl_certificate - fix assertonly provider certificate verification, causing 'private key mismatch' and 'subject mismatch' errors.
openssl_certificate and openssl_csr - fix Ed25519 and Ed448 private key support for cryptography backend. This probably needs at least cryptography 2.8, since older versions have problems with signing certificates or CSRs with such keys. (#59039, PR #63984)
openssl_csr - a warning is issued if an unsupported value for version is used for the cryptography backend.
ovirt: Fix fetching of nested attributes
ovirt_disk: add host parameter to specify where should be the lun disk added.
ovirt_host_network: correct dictionary check.
package_facts - fix value of vital attribute which is returned when pkg manager is used
package_facts - use module warnings rather than a custom implementation for reporting warnings
paramiko_ssh - improve authentication error message so it is less confusing
plugins-netconf-ce - to get attribute 'set-id' from rpc-reply.
postgresql_publication - fix typo in module.warn method name (#64582).
syslogger callback plugin - remove check mode support since it did nothing anyway
template lookup - fix regression when templating hostvars (#63940)
user - fix stack trace on AIX when attempting to parse shadow file that does not exist (#62510)
vmware_host_firewall_manager - Ensure we can set rule with no allowed_hosts key (#61332)
vyos - Make sure that empty configs don't throw a traceback for Resource Modules (#62520)
win_acl - Fixed error when setting rights on directory for which inheritance from parent directory has been disabled.
win_domain_computer - Honour the explicit domain server and credentials when moving or removing a computer object - #63093
win_iis_website - Actually restart the site when state=restarted - #63828
win_packages - fixed issue where Test-Path failed to find files with special characters (#62521)
win_partition - Fix invalid variable name causing a failure on checks - #62401
zabbix_host - module will now properly logout from Zabbix server and won't leave open session behind (see #63774)

v2.9.0

Release Summary

Release Date: 2019-10-31
Porting Guide

Minor Changes

Add 'auth_url' field to galaxy server config stanzas in ansible.cfg The url should point to the token_endpoint of a Keycloak server.
Add I(preferred_arrays) param to enable preferred arrays to be set in a host configuration. (#59735)
Add ability to force a protection group snapshot to immediately replicate to a remote array (if configured)
Add date header to the email based on local time in mail module (#58808).
Add folder option in vmware_datastore_cluster to place datastore cluster in specific folder (#48010).
Add folder option in vmware_dvswitch to place distributed switch in a network specific folder (#54986).
Add installation documentation for vSphere Automation SDK for Python in vmware inventory plugin docs (#57224).
Add managed object identifier (moId) and vim reference (vimref) of virtual machine in guest facts (#53372).
Add new option to default standard out callback plugin, ANSIBLE_CHECK_MODE_MARKERS, which adds check mode markers (DRY RUN, CHECK_MODE) to the output when running in check mode. It is off by default.
Add support for NIS in an NFS directory service and support for specifying an OU for an SMD directory service (#59608)
Add support for check_mode
Add toggle to show per host task start on default callback
Added C# module util that implements various access token functions
Added a parameter to allow remounting a filesystem
Added new throttle keyword, which can be used at the task, block, or play level to limit the number of workers (up to the specified forks or serial setting) allowed.
Added new parameters hostname and subdomain to kubevirt_vm module.
Adjusted PowerShell and C# collection util imports to use a Python package name that reflects the location of the util in the collection. This is a breaking change, for more information see porting_2.9_guide for more information.
All previously deprecated sudo/su and module locale global settings have been removed.
Allow ansible-doc to return JSON as output.
Allow debugger to take a templated value (#53587)
Allow expanded options for user to control behaviour on duplicate YAML keys.
Allow the users to enable or disable the rescue mode on Hetzner cloud servers
Ansible now supports relative imports of module_utils files in modules and module_utils.
Ansible will now warn if two aliases of the same option are used for Python modules.
Check dvs in the given portgroup before accessing any properties of dvs (#59952). This can be due to permission issue or no association between distributed virtual portgroup and dvswitch.
Check return value of FindByInventoryPath API used for finding folder value (#54823).
Command line argument parsing - Switch from deprecated optparse to argparse
Corrected API call for module.fail_json in command module.
Enable ansible-doc to work with 'adjacent' collections via --playbook-dir option.
Fix Key Error in get_vm() api in vmware.py module util (#60129).
Handle user unauthorization errors in VMware REST API code for tagging (#58326).
Implement config options for display_ok_hosts and display_skipped_hosts in unixy callback plugin
InventoryManager - Speed up host subset calculation by performing direct host uuid comparisons, instead of Host object comparisons
Jinja tests - Remove deprecated functionality of registering tests as filters (#55319)
Make VM name and VM UUID as mutual exclusive and required one of (#57580).
Make ansible_index_var accessible as a magic variable.
Meraki modules now return data in snake_case instead of camelCase. The ANSIBLE_MERAKI_FORMAT environment variable can be set to camelcase to revert back to camelcase until deprecation in Ansible 2.13.
Now callback plugins MUST allow for setting options as deprecation period that allowed older callbacks to ignore this is over.
Refactored ansible-galaxy collections API code to be more friendly for future bugfixes
Remove duplicate implementation of memory reservation parameter in vmware_guest (#54335).
Restrict vcenter_folder to vCenter only, since folder creation api is not supported on ESXi hostsystem (#49938).
Revert apply as the default of kubernetes modules such as k8s. This restores the 2.8 and previous behaviour as the default. apply can still be explicitly enabled #62661
Templar - Speed up is_template by lexing the string, instead of actually templating the string (#57489)
The ali_instance_facts module has been renamed to ali_instance_info.
The aws_acm_facts module has been renamed to aws_acm_info.
The aws_az_facts module has been renamed to aws_az_info.
The aws_caller_facts module has been renamed to aws_caller_info.
The aws_kms_facts module has been renamed to aws_kms_info.
The aws_region_facts module has been renamed to aws_region_info.
The aws_s3_bucket_facts module has been renamed to aws_s3_bucket_info. When called with the new name, the module no longer returns ansible_facts.
The aws_sgw_facts module has been renamed to aws_sgw_info.
The aws_waf_facts module has been renamed to aws_waf_info.
The azure_rm_aks_facts module has been renamed to azure_rm_aks_info.
The azure_rm_aksversion_facts module has been renamed to azure_rm_aksversion_info.
The azure_rm_applicationsecuritygroup_facts module has been renamed to azure_rm_applicationsecuritygroup_info.
The azure_rm_appserviceplan_facts module has been renamed to azure_rm_appserviceplan_info.
The azure_rm_automationaccount_facts module has been renamed to azure_rm_automationaccount_info.
The azure_rm_autoscale_facts module has been renamed to azure_rm_autoscale_info.
The azure_rm_availabilityset_facts module has been renamed to azure_rm_availabilityset_info.
The azure_rm_cdnendpoint_facts module has been renamed to azure_rm_cdnendpoint_info.
The azure_rm_cdnprofile_facts module has been renamed to azure_rm_cdnprofile_info.
The azure_rm_containerinstance_facts module has been renamed to azure_rm_containerinstance_info.
The azure_rm_containerregistry_facts module has been renamed to azure_rm_containerregistry_info.
The azure_rm_cosmosdbaccount_facts module has been renamed to azure_rm_cosmosdbaccount_info.
The azure_rm_deployment_facts module has been renamed to azure_rm_deployment_info.
The azure_rm_resourcegroup_facts module has been renamed to azure_rm_resourcegroup_info.
The bigip_device_facts module has been renamed to bigip_device_info.
The bigiq_device_facts module has been renamed to bigiq_device_info.
The cloudformation_facts module has been renamed to cloudformation_info. When called with the new name, the module no longer returns ansible_facts.
The cloudfront_facts module has been renamed to cloudfront_info. When called with the new name, the module no longer returns ansible_facts.
The cloudwatchlogs_log_group_facts module has been renamed to cloudwatchlogs_log_group_info.
The cs_instance_facts module has been deprecated. Use cs_instance_info instead.
The cs_zone_facts module has been deprecated. Use cs_zone_info instead.
The digital_ocean_account_facts module has been renamed to digital_ocean_account_info.
The digital_ocean_certificate_facts module has been renamed to digital_ocean_certificate_info.
The digital_ocean_domain_facts module has been renamed to digital_ocean_domain_info.
The digital_ocean_firewall_facts module has been renamed to digital_ocean_firewall_info.
The digital_ocean_floating_ip_facts module has been renamed to digital_ocean_floating_ip_info.
The digital_ocean_image_facts module has been renamed to digital_ocean_image_info.
The digital_ocean_load_balancer_facts module has been renamed to digital_ocean_load_balancer_info.
The digital_ocean_region_facts module has been renamed to digital_ocean_region_info.
The digital_ocean_size_facts module has been renamed to digital_ocean_size_info.
The digital_ocean_snapshot_facts module has been renamed to digital_ocean_snapshot_info.
The digital_ocean_sshkey_facts module has been deprecated. Use digital_ocean_sshkey_info instead.
The digital_ocean_tag_facts module has been renamed to digital_ocean_tag_info.
The digital_ocean_volume_facts module has been renamed to digital_ocean_volume_info.
The ec2_ami_facts module has been renamed to ec2_ami_info.
The ec2_asg_facts module has been renamed to ec2_asg_info.
The ec2_customer_gateway_facts module has been renamed to ec2_customer_gateway_info.
The ec2_eip_facts module has been renamed to ec2_eip_info.
The ec2_elb_facts module has been renamed to ec2_elb_info.
The ec2_eni_facts module has been renamed to ec2_eni_info.
The ec2_group_facts module has been renamed to ec2_group_info.
The ec2_instance_facts module has been renamed to ec2_instance_info.
The ec2_lc_facts module has been renamed to ec2_lc_info.
The ec2_placement_group_facts module has been renamed to ec2_placement_group_info.
The ec2_snapshot_facts module has been renamed to ec2_snapshot_info.
The ec2_vol_facts module has been renamed to ec2_vol_info.
The ec2_vpc_dhcp_option_facts module has been renamed to ec2_vpc_dhcp_option_info.
The ec2_vpc_endpoint_facts module has been renamed to ec2_vpc_endpoint_info.
The ec2_vpc_igw_facts module has been renamed to ec2_vpc_igw_info.
The ec2_vpc_nacl_facts module has been renamed to ec2_vpc_nacl_info.
The ec2_vpc_nat_gateway_facts module has been renamed to ec2_vpc_nat_gateway_info.
The ec2_vpc_net_facts module has been renamed to ec2_vpc_net_info.
The ec2_vpc_peering_facts module has been renamed to ec2_vpc_peering_info.
The ec2_vpc_route_table_facts module has been renamed to ec2_vpc_route_table_info.
The ec2_vpc_subnet_facts module has been renamed to ec2_vpc_subnet_info.
The ec2_vpc_vgw_facts module has been renamed to ec2_vpc_vgw_info.
The ec2_vpc_vpn_facts module has been renamed to ec2_vpc_vpn_info.
The ecs_service_facts module has been renamed to ecs_service_info. When called with the new name, the module no longer returns ansible_facts.
The ecs_taskdefinition_facts module has been renamed to ecs_taskdefinition_info.
The efs_facts module has been renamed to efs_info. When called with the new name, the module no longer returns ansible_facts.
The elasticache_facts module has been renamed to elasticache_info.
The elb_application_lb_facts module has been renamed to elb_application_lb_info.
The elb_classic_lb_facts module has been renamed to elb_classic_lb_info.
The elb_target_facts module has been renamed to elb_target_info.
The elb_target_group_facts module has been renamed to elb_target_group_info.
The gcp_bigquery_dataset_facts module was renamed to gcp_bigquery_dataset_info.
The gcp_bigquery_table_facts module was renamed to gcp_bigquery_table_info.
The gcp_cloudbuild_trigger_facts module was renamed to gcp_cloudbuild_trigger_info.
The gcp_compute_address_facts module was renamed to gcp_compute_address_info.
The gcp_compute_backend_bucket_facts module was renamed to gcp_compute_backend_bucket_info.
The gcp_compute_backend_service_facts module was renamed to gcp_compute_backend_service_info.
The gcp_compute_disk_facts module was renamed to gcp_compute_disk_info.
The gcp_compute_firewall_facts module was renamed to gcp_compute_firewall_info.
The gcp_compute_forwarding_rule_facts module was renamed to gcp_compute_forwarding_rule_info.
The gcp_compute_global_address_facts module was renamed to gcp_compute_global_address_info.
The gcp_compute_global_forwarding_rule_facts module was renamed to gcp_compute_global_forwarding_rule_info.
The gcp_compute_health_check_facts module was renamed to gcp_compute_health_check_info.
The gcp_compute_http_health_check_facts module was renamed to gcp_compute_http_health_check_info.
The gcp_compute_https_health_check_facts module was renamed to gcp_compute_https_health_check_info.
The gcp_compute_image_facts module was renamed to gcp_compute_image_info.
The gcp_compute_instance_facts module was renamed to gcp_compute_instance_info.
The gcp_compute_instance_group_facts module was renamed to gcp_compute_instance_group_info.
The gcp_compute_instance_group_manager_facts module was renamed to gcp_compute_instance_group_manager_info.
The gcp_compute_instance_template_facts module was renamed to gcp_compute_instance_template_info.
The gcp_compute_interconnect_attachment_facts module was renamed to gcp_compute_interconnect_attachment_info.
The gcp_compute_network_facts module was renamed to gcp_compute_network_info.
The gcp_compute_region_disk_facts module was renamed to gcp_compute_region_disk_info.
The gcp_compute_route_facts module was renamed to gcp_compute_route_info.
The gcp_compute_router_facts module was renamed to gcp_compute_router_info.
The gcp_compute_ssl_certificate_facts module was renamed to gcp_compute_ssl_certificate_info.
The gcp_compute_ssl_policy_facts module was renamed to gcp_compute_ssl_policy_info.
The gcp_compute_subnetwork_facts module was renamed to gcp_compute_subnetwork_info.
The gcp_compute_target_http_proxy_facts module was renamed to gcp_compute_target_http_proxy_info.
The gcp_compute_target_https_proxy_facts module was renamed to gcp_compute_target_https_proxy_info.
The gcp_compute_target_pool_facts module was renamed to gcp_compute_target_pool_info.
The gcp_compute_target_ssl_proxy_facts module was renamed to gcp_compute_target_ssl_proxy_info.
The gcp_compute_target_tcp_proxy_facts module was renamed to gcp_compute_target_tcp_proxy_info.
The gcp_compute_target_vpn_gateway_facts module was renamed to gcp_compute_target_vpn_gateway_info.
The gcp_compute_url_map_facts module was renamed to gcp_compute_url_map_info.
The gcp_compute_vpn_tunnel_facts module was renamed to gcp_compute_vpn_tunnel_info.
The gcp_container_cluster_facts module was renamed to gcp_container_cluster_info.
The gcp_container_node_pool_facts module was renamed to gcp_container_node_pool_info.
The gcp_dns_managed_zone_facts module was renamed to gcp_dns_managed_zone_info.
The gcp_dns_resource_record_set_facts module was renamed to gcp_dns_resource_record_set_info.
The gcp_iam_role_facts module was renamed to gcp_iam_role_info.
The gcp_iam_service_account_facts module was renamed to gcp_iam_service_account_info.
The gcp_pubsub_subscription_facts module was renamed to gcp_pubsub_subscription_info.
The gcp_pubsub_topic_facts module was renamed to gcp_pubsub_topic_info.
The gcp_redis_instance_facts module was renamed to gcp_redis_instance_info.
The gcp_resourcemanager_project_facts module was renamed to gcp_resourcemanager_project_info.
The gcp_sourcerepo_repository_facts module was renamed to gcp_sourcerepo_repository_info.
The gcp_spanner_database_facts module was renamed to gcp_spanner_database_info.
The gcp_spanner_instance_facts module was renamed to gcp_spanner_instance_info.
The gcp_sql_database_facts module was renamed to gcp_sql_database_info.
The gcp_sql_instance_facts module was renamed to gcp_sql_instance_info.
The gcp_sql_user_facts module was renamed to gcp_sql_user_info.
The gcp_tpu_node_facts module was renamed to gcp_tpu_node_info.
The gcpubsub_facts module has been renamed to gcpubsub_info.
The github_webhook_facts module has been renamed to github_webhook_info.
The gluster_heal_facts module has been renamed to gluster_heal_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_datacenter_facts module has been renamed to hcloud_datacenter_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_floating_ip_facts module has been renamed to hcloud_floating_ip_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_image_facts module has been renamed to hcloud_image_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_location_facts module has been renamed to hcloud_location_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_server_facts module has been renamed to hcloud_server_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_server_type_facts module has been renamed to hcloud_server_type_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_ssh_key_facts module has been renamed to hcloud_ssh_key_info. When called with the new name, the module no longer returns ansible_facts.
The hcloud_volume_facts module has been renamed to hcloud_volume_info. When called with the new name, the module no longer returns ansible_facts.
The hpilo_facts module has been renamed to hpilo_info. When called with the new name, the module no longer returns ansible_facts.
The iam_mfa_device_facts module has been renamed to iam_mfa_device_info.
The iam_role_facts module has been renamed to iam_role_info.
The iam_server_certificate_facts module has been renamed to iam_server_certificate_info.
The idrac_redfish_facts module has been renamed to idrac_redfish_info. When called with the new name, the module no longer returns ansible_facts.
The intersight_facts module has been renamed to intersight_info.
The jenkins_job_facts module has been renamed to jenkins_job_info.
The k8s_facts module has been renamed to k8s_info.
The lambda_facts module has been deprecated. Use lambda_info instead.
The memset_memstore_facts module has been renamed to memset_memstore_info.
The memset_server_facts module has been renamed to memset_server_info.
The na_ontap_gather_facts module has been deprecated. Use na_ontap_info instead.
The nginx_status_facts module has been deprecated. Use nginx_status_info instead.
The one_image_facts module has been renamed to one_image_info.
The onepassword_facts module has been renamed to onepassword_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_datacenter_facts module has been renamed to oneview_datacenter_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_enclosure_facts module has been renamed to oneview_enclosure_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_ethernet_network_facts module has been renamed to oneview_ethernet_network_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_fc_network_facts module has been renamed to oneview_fc_network_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_fcoe_network_facts module has been renamed to oneview_fcoe_network_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_logical_interconnect_group_facts module has been renamed to oneview_logical_interconnect_group_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_network_set_facts module has been renamed to oneview_network_set_info. When called with the new name, the module no longer returns ansible_facts.
The oneview_san_manager_facts module has been renamed to oneview_san_manager_info. When called with the new name, the module no longer returns ansible_facts.
The online_server_facts module has been deprecated. Use online_server_info instead.
The online_user_facts module has been deprecated. Use online_user_info instead.
The os_flavor_facts module has been renamed to os_flavor_info. When called with the new name, the module no longer returns ansible_facts.
The os_image_facts module has been renamed to os_image_info. When called with the new name, the module no longer returns ansible_facts.
The os_keystone_domain_facts module has been renamed to os_keystone_domain_info. When called with the new name, the module no longer returns ansible_facts.
The os_networks_facts module has been renamed to os_networks_info. When called with the new name, the module no longer returns ansible_facts.
The os_port_facts module has been renamed to os_port_info. When called with the new name, the module no longer returns ansible_facts.
The os_project_facts module has been renamed to os_project_info. When called with the new name, the module no longer returns ansible_facts.
The os_server_facts module has been renamed to os_server_info. When called with the new name, the module no longer returns ansible_facts.
The os_subnets_facts module has been renamed to os_subnets_info. When called with the new name, the module no longer returns ansible_facts.
The os_user_facts module has been renamed to os_user_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_affinity_label_facts module has been renamed to ovirt_affinity_label_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_api_facts module has been renamed to ovirt_api_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_cluster_facts module has been renamed to ovirt_cluster_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_datacenter_facts module has been renamed to ovirt_datacenter_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_disk_facts module has been renamed to ovirt_disk_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_event_facts module has been renamed to ovirt_event_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_external_provider_facts module has been renamed to ovirt_external_provider_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_group_facts module has been renamed to ovirt_group_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_host_facts module has been renamed to ovirt_host_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_host_storage_facts module has been renamed to ovirt_host_storage_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_network_facts module has been renamed to ovirt_network_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_nic_facts module has been renamed to ovirt_nic_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_permission_facts module has been renamed to ovirt_permission_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_quota_facts module has been renamed to ovirt_quota_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_scheduling_policy_facts module has been renamed to ovirt_scheduling_policy_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_snapshot_facts module has been renamed to ovirt_snapshot_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_storage_domain_facts module has been renamed to ovirt_storage_domain_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_storage_template_facts module has been renamed to ovirt_storage_template_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_storage_vm_facts module has been renamed to ovirt_storage_vm_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_tag_facts module has been renamed to ovirt_tag_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_template_facts module has been renamed to ovirt_template_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_user_facts module has been renamed to ovirt_user_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_vm_facts module has been renamed to ovirt_vm_info. When called with the new name, the module no longer returns ansible_facts.
The ovirt_vmpool_facts module has been renamed to ovirt_vmpool_info. When called with the new name, the module no longer returns ansible_facts.
The purefa_facts module has been deprecated. Use purefa_info instead.
The purefb_facts module has been deprecated. Use purefb_info instead.
The python_requirements_facts module has been renamed to python_requirements_info.
The rds_instance_facts module has been renamed to rds_instance_info.
The rds_snapshot_facts module has been renamed to rds_snapshot_info.
The redfish_facts module has been renamed to redfish_info. When called with the new name, the module no longer returns ansible_facts.
The redshift_facts module has been renamed to redshift_info.
The route53_facts module has been renamed to route53_info.
The scaleway_image_facts module has been deprecated. Use scaleway_image_info instead.
The scaleway_ip_facts module has been deprecated. Use scaleway_ip_info instead.
The scaleway_organization_facts module has been deprecated. Use scaleway_organization_info instead.
The scaleway_security_group_facts module has been deprecated. Use scaleway_security_group_info instead.
The scaleway_server_facts module has been deprecated. Use scaleway_server_info instead.
The scaleway_snapshot_facts module has been deprecated. Use scaleway_snapshot_info instead.
The scaleway_volume_facts module has been deprecated. Use scaleway_volume_info instead.
The smartos_image_facts module has been renamed to smartos_image_info. When called with the new name, the module no longer returns ansible_facts.
The vcenter_extension_facts module has been deprecated. Use vcenter_extension_info instead.
The vertica_facts module has been renamed to vertica_info. When called with the new name, the module no longer returns ansible_facts.
The vmware_about_facts module has been deprecated. Use vmware_about_info instead.
The vmware_category_facts module has been deprecated. Use vmware_category_info instead.
The vmware_cluster_facts module has been renamed to vmware_cluster_info.
The vmware_datastore_facts module has been renamed to vmware_datastore_info.
The vmware_drs_group_facts module has been deprecated. Use vmware_drs_group_info instead.
The vmware_drs_rule_facts module has been deprecated. Use vmware_drs_rule_info instead.
The vmware_dvs_portgroup_facts module has been deprecated. Use vmware_dvs_portgroup_info instead.
The vmware_guest_boot_facts module has been deprecated. Use vmware_guest_boot_info instead.
The vmware_guest_customization_facts module has been deprecated. Use vmware_guest_customization_info instead.
The vmware_guest_disk_facts module has been deprecated. Use vmware_guest_disk_info instead.
The vmware_guest_facts module has been renamed to vmware_guest_info.
The vmware_guest_snapshot_facts module has been renamed to vmware_guest_snapshot_info.
The vmware_host_capability_facts module has been deprecated. Use vmware_host_capability_info instead.
The vmware_host_config_facts module has been deprecated. Use vmware_host_config_info instead.
The vmware_host_dns_facts module has been deprecated. Use vmware_host_dns_info instead.
The vmware_host_feature_facts module has been deprecated. Use vmware_host_feature_info instead.
The vmware_host_firewall_facts module has been deprecated. Use vmware_host_firewall_info instead.
The vmware_host_ntp_facts module has been deprecated. Use vmware_host_ntp_info instead.
The vmware_host_package_facts module has been deprecated. Use vmware_host_package_info instead.
The vmware_host_service_facts module has been deprecated. Use vmware_host_service_info instead.
The vmware_host_ssl_facts module has been deprecated. Use vmware_host_ssl_info instead.
The vmware_host_vmhba_facts module has been deprecated. Use vmware_host_vmhba_info instead.
The vmware_host_vmnic_facts module has been deprecated. Use vmware_host_vmnic_info instead.
The vmware_local_role_facts module has been deprecated. Use vmware_local_role_info instead.
The vmware_local_user_facts module has been deprecated. Use vmware_local_user_info instead.
The vmware_portgroup_facts module has been deprecated. Use vmware_portgroup_info instead.
The vmware_resource_pool_facts module has been deprecated. Use vmware_resource_pool_info instead.
The vmware_tag_facts module has been renamed to vmware_tag_info.
The vmware_target_canonical_facts module has been deprecated. Use vmware_target_canonical_info instead.
The vmware_vm_facts module has been renamed to vmware_vm_info.
The vmware_vmkernel_facts module has been deprecated. Use vmware_vmkernel_info instead.
The vmware_vswitch_facts module has been deprecated. Use vmware_vswitch_info instead.
The vultr_account_facts module has been deprecated. Use vultr_account_info instead.
The vultr_block_storage_facts module has been deprecated. Use vultr_block_storage_info instead.
The vultr_dns_domain_facts module has been deprecated. Use vultr_dns_domain_info instead.
The vultr_firewall_group_facts module has been deprecated. Use vultr_firewall_group_info instead.
The vultr_network_facts module has been deprecated. Use vultr_network_info instead.
The vultr_os_facts module has been deprecated. Use vultr_os_info instead.
The vultr_plan_facts module has been deprecated. Use vultr_plan_info instead.
The vultr_region_facts module has been deprecated. Use vultr_region_info instead.
The vultr_server_facts module has been deprecated. Use vultr_server_info instead.
The vultr_ssh_key_facts module has been deprecated. Use vultr_ssh_key_info instead.
The vultr_startup_script_facts module has been deprecated. Use vultr_startup_script_info instead.
The vultr_user_facts module has been deprecated. Use vultr_user_info instead.
The xenserver_guest_facts module has been renamed to xenserver_guest_info.
The zabbix_group_facts module has been renamed to zabbix_group_info.
The zabbix_host_facts module has been renamed to zabbix_host_info.
The podman connection plugin now supports pipelining.
Typecast vlan id to string in nmcli module (#58949).
When using fetch_nested fetch also list of href, instead only single object hrefs.
acme_certificate - all alternate chains can be retrieved using the new retrieve_all_alternates option.
add purge_tags parameter to s3_bucket to allow preservation of existing tags when updating tags.
added use option to hostname module to allow user to override autodetection.
ansible-galaxy - Added the collection build command to build a collection tarball ready for uploading.
ansible-galaxy - Added the collection init command to create a skeleton collection directory.
ansible-galaxy - Added the collection install command to install collections locally.
ansible-galaxy - Added the collection publish command to publish a collection tarball to a Galaxy server.
ansible-test - Bump version of ACME test container to 1.8.0. Fixes a typo in the API and adds a newer Pebble version.
ansible-test defaults to redacting sensitive values (disable with the --no-redact option)
apt - Remove deprecated installed and removed aliases (#55311)
aws_eks_cluster - Ansible may now wait until an EKS cluster is fully removed before moving on.
backports.ssl_match_hostname - Update bundled copy of backports.ssl_match_hostname from 3.4.0.2 to 3.7.0.1 (#51794)
changed task module/action parsing to report more helpful errors
collection role dependencies will first search for unqualified role names in the containing collection.
cosmetic change, simplify FC WWN facts gathering on Solaris
default collection - a playbook run inside a collection (eg, as part of a runme.sh integration test) will first search the containing collection for unqualified module/action references (#61415)
distro - Update bundled copy of distro from 1.3.0 to 1.4.0 (#55302)
dnf - Properly handle idempotent transactions with package name wildcard globs (#62809)
dnf - Provide a better error message including python version info when installing python-dnf fails
dnf - set lock_timeout to a sane default (30 seconds, as is the cli)
docker_container - add mounts option.
docker_container - now tests for mount endpoint collisions (for both mounts and volumes) to abort early when collisions are found
docker_image - Add build.target option.
docker_image - added extra_hosts argument (#59233)
docker_swarm_service - Add npipe mount support.
docker_swarm_service - Remove requirement of secret_id on secrets and config_id on configs.
docker_swarm_service - Support passing dictionaries in networks to allow setting aliases and options.
ec2 - Remove deprecated device_type option (#55306)
ec2_eip - Added support for BYOIP to ec2_eip module and filtering reusable addresses based on tags (#59180).
ec2_instance - Remove deprecated network.ebs_optimized option (#55307)
ec2_lc - Remove deprecated device_type option (#55308)
eos_use_sessions is now type boolean instead of int.
file - Extend -diff to return list of files and folders that will be removed in case of state=absent (#56353)
gcp_compute - Added additional environment variables to the gcp_compute inventory plugin to align with the rest of the gcp_* modules.
get_certificate - added proxy_* options.
get_certificate - now works with both PyOpenSSL and cryptography Python libraries. Autodetection can be overridden with select_crypto_backend option.
get_certificate - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
getent - add service parameter to getent to lookup specified service
git - add a gpg_whitelist option to specify a list of trusted GPG fingerprints for when verify_commit is enabled (#55396)
k8s - add wait_sleep parameter (number of seconds to sleep between checks).
log_plays - Add a new log_folder option to the log_plays callback plugin.
lookup_url - added ability to specify request headers
magic variables - added a new ansible_parent_role_names magic variable that, when a role is included by another role, contains a list of all parent roles.
magic variables - added a new ansible_parent_role_paths magic variable that, when a role is included by another role, contains a list of all parent role paths.
meraki* - Idempotency check has been rewritten. The new version is more thorough.
meraki* - Meraki modules now return data when no changes are made.
meraki* - Modules now respect 429 (rate limit) and 500/502 errors with a graceful backoff.
meraki_admin - Add support for check mode.
meraki_config_template - Enable check mode.
meraki_content_filtering - Add support for check mode.
meraki_mr_l3_firewall - Integration test now uses net_id in some tests for improved code coverage.
meraki_network - Add support for disabling remote status page on a network.
meraki_network - Add support for enabling or disabling VLANs on a network.
meraki_organization - Removed the absent option for state due to the possibly catastrophic mistakes. Parameter will be added in 2.10 with safeguards.
meraki_snmp - Add support for check mode.
meraki_ssid - Add examples to documentation.
meraki_vlan - Add support for check mode.
mysql_db - now behaves better w.r.t changed results in check_mode
mysql_db now supports creation and deletion of multiple databases (#58370)
mysql_db now supports multiple databases in dump operation (#56059)
openssh_keypair - add key comment to return value
openssl_certificate - Add support for a new provider entrust (#59272).
openssl_certificate - add support for subject key identifier and authority key identifier extensions. Subject key identifiers are created by default when not explicitly disabled.
openssl_certificate - the assertonly provider has been deprecated. See examples in module to see how to replace it.
openssl_certificate - the ownca provider creates authority key identifiers if not explicitly disabled with ownca_create_authority_key_identifier: no.
openssl_certificate - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_certificate_info - add ocsp_uri return value.
openssl_certificate_info - add support for subject key identifier and authority key identifier extensions.
openssl_certificate_info - added issuer_ordered and subject_ordered return values.
openssl_certificate_info - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_csr - add support for subject key identifier and authority key identifier extensions.
openssl_csr - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_csr_info - add support for subject key identifier and authority key identifier extensions.
openssl_csr_info - added subject_ordered return value.
openssl_csr_info - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_privatekey - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_privatekey_info - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
openssl_publickey - now works with both PyOpenSSL and cryptography Python libraries. Autodetection can be overridden with select_crypto_backend option.
openssl_publickey - the pyopenssl backend has been deprecated, it will be removed in Ansible 2.13.
os_network - added MTU support when creating/updating a network
os_network - added dns_domain support when creating/updating a network
ovirt4 inventory - Updated the dynamic inventory script for Python 3 support
pluribus networks modules to handle empty output string.
postgresql_ext - add version parameter to support creation / update extensions of specific versions (#58381)
postgresql_query - Add array handling for positional_args and named_args parameters (#59955).
postgresql_query - add autocommit parameter to support commands that can't be run inside a transaction block (#58704)
postgresql_user - Add the new parameter groups (#60638).
psrp - Added the ansible_psrp_reconnection_backoff variable to control the reconnection backoff setting - #58714
purefa_ra - change resulting fact dict from I(ansible_facts) to I(ra_info) (#61355)
purefa_user - change module parameter I(api_token) to I(api) and to stop clash with known variable.
purefa_user - change resulting fact dict from I(ansible_facts) to I(user_info) (#61353)
purefa_user - change resulting facts from I(api_token) to I(user_api) for clarity (#57588)
purefb_fs - Deprecate I(nfs) param and replace with I(nfsv3). Add params I(user_quota) and I(group_quota) (#59559)
purefb_s3user - change resulting fact dict from I(ansible_facts) to I(s3user_info) (#61356)
rabbitmq_binding - added missing SSL options for HTTP GET and DELETE requests
redhat_subscription - allow to set syspurpose attributes (#59850)
redhat_subscription - do not call subscribtion-manager command, when it is not necessary (#58665)
redhat_subscription - made code more testable (#58665)
refactor iSCSI network facts for AIX and HP-UX, add unit test, remove external grep call
removed previously deprecated get_md5 option from M(stat) module.
roles and plugins in collections may now be stored in subdirectories under the roles or plugin-type dirs (#60682)
roles that define a collections search list in metadata will attempt to use the defined search list when resolving unqualified role names.
selectors2 - Update bundled copy of selectors2 from 1.1.0 to 1.1.1 (#55300)
selinux_special_filesystems config can be specified via environment variable ANSIBLE_SELINUX_SPECIAL_FS
setup - octal escape sequences are now evaluated for mount facts pulled from /etc/mtab
six - Update bundled copy of six from 1.11.0 to 1.12.0 (#55303)
syslog_json - Allow configuration of the syslog_json plugin via an Ansible configuration file.
update ansible-test default-test-container from version 1.9.1 to 1.9.2
update ansible-test default-test-container from version 1.9.2 to 1.9.3
update ansible-test default-test-container from version 1.9.3 to 1.10.1
uri - Remove deprecated HEADER_ support (#55310)
vApp setting can be set while VM creation in vmware_guest (#50617).
validate-modules - change numeric error codes to descriptive strings (#60711)
vcenter_folder - returns a dict instead of a string, the previous output is now in the 'msg' key
vcenter_folder - returns now the full path of the file in the new 'path' key
vmware - The VMware modules can now access a server behind a HTTP proxy (#52936)
vmware - reduces the memory usage during the object lookup
vmware_cluster - Refactor into several modules (vmware_cluster, vmware_cluster_drs, vmware_cluster_ha and vmware_cluster_vsan)
vmware_cluster_facts now supports tag facts (#46458).
vmware_cluster_ha - Remove a wrong parameter from an example in the documentation.
vmware_datastore_facts - When no datastore was found, returns an empty list.
vmware_datastore_maintenancemode - Raise an error if the datastore does not exist.
vmware_guest_disk module supports use_instance_uuid parameter since Ansible 2.8 (#56021).
vmware_guest_disk_facts module - added bus number of the SCSI controller to the output (#56442)
vmware_host_datastore - Ability to directly target a ESXi.
vmware_host_facts now supports tag facts (#46461).
vmware_portgroup accepts list of ESXi hostsystem. Modified get_all_host_objs API to accept list of hostsystems.
vmware_vm_facts supports folder as a filter to gather fact for VM (#56125).
vsphere_copy - The host and login parameters are deprecated, use hostname and username like for the other VMware modules.
vsphere_copy - The module can now also be used with standalone ESXi.
vultr - the retry on failure functionality was changed to use an exponential backoff behaviour.
vultr_server - Implemented support for using the ID instead of a name to match a resource, especially useful for region, plan and OS type.
win_domain_user - Allow to only set password when it actually changed (#58246)
win_domain_user - Make the query user try catch block more accurate for missing identity (#57719)
win_domain_user and win_domain_group: add created result boolean (#57547)
win_xml - Added 'count' module parameter which will return number of nodes matched by xpath if set to yes/true
win_xml - Behaviour change, fragment no longer required when processing element type nodes and state=absent.
win_xml - Behaviour change, module now processes all nodes specified by xpath, not just first encountered.
win_xml - Some output messages worded differently now the module uses a generic method to save changes.
xenserver_guest - wait_for_ip_address is now ignored when state=absent (#55348).
xml - Introduce insertbefore and insertafter to specify the position (#44811)
yum - set lock_timeout to a sane default (30 seconds, as is the cli)
zabbix_action - esc_period is now required to reflect actual Zabbix API call
zabbix_action - support for new condition operators (matches, does not match, Yes, No) added in Zabbix 4.0 and Zabbix 4.2 (https://www.zabbix.com/documentation/4.2/manual/api/reference/action/object#action_filter_condition)
zabbix_screen - added an option to sort hosts on a zabbix screen alphabetically
zabbix_screen - updated documentation and module arguments
zabbix_template - it is no longer accepted to provide parameters template_name and template_groups when using template_json
zabbix_template - new parameter dump_format allows user to specify in which format (JSON or XML) should a template be exported from Zabbix
zabbix_template - new parameter template_xml adds support for importing templates from XML documents
zabbix_template - now allows import of multiple templates at once when using template_json or template_xml parameters
zabbix_template - parameter template_groups is now required when passing template_name and template is being created for the first time. Not required when template is being updated.
zabbix_template - parameters template_name, template_json and template_xml are now mutually exclusive
zabbix_template - template can now be updated with just a clear_templates parameter without requiring any additional parameters to be passed (see examples of the module)
zfs - Remove deprecated key=value 'option' (#55318)

Deprecated Features

Deprecated net_interface, net_linkagg, net_lldp_interface, net_l2_interface, net_vlan, net_l3_interface, net_vrf, net_lldp, net_banner, net_logging, net_system, net_user, and net_static_route. Please use either the equivalent network role or the platform-specific resource module.
Deprecated setting the verbosity before the sub command for ansible-galaxy and ansible-vault. Set the verbosity level after the sub command, e.g. do ansible-galaxy init -v and not ansible-galaxy -v init.
aws_kms - Deprecate mode, role_name, role_arn, grant_types and policy_clean_invalid_entries in favour of policy
vmware_cluster - Deprecate DRS, HA and VSAN configuration in favour of new modules vmware_cluster_drs, vmware_cluster_ha and vmware_cluster_vsan.

Removed Features (previously deprecated)

redis_kv - Remove deprecated lookup plugin (#59948)

Bugfixes

security issue - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
security issue - Redact cloud plugin secrets in ansible-test when running integration tests using cloud plugins. Only present in 2.9.0b1.
security issue - TaskExecutor - Ensure we don't erase unsafe context in TaskExecutor.run on bytes. Only present in 2.9.0beta1 (#62237)
security issue - properly hide parameters marked with no_log in suboptions when invalid parameters are passed to the module (CVE-2019-14858)
Add missing directory provided via --playbook-dir to adjacent collection loading
Add no_log to credentials field to avoid disclosures, also switch type to jsonarg to avoid having users responsible for transformations.
Add nxos_telemetry replaced state (#62368).
Allow config options that are type boolean to default to None rather than only True or False.
AnsiballZ - Use importlib to load the module instead of imp on Python3+
Ansible.Basic - Fix issue when deserilizing a JSON string that is not a dictionary - #55691
AnsibleDumper - Add a representer for AnsibleUnsafeBytes (#62562).
Be sure to use the active state when checking for any_errors_fatal
CLI - the ANSIBLE_PLAYBOOK_DIR envvar or playbook_dir config can now substitute for the --playbook-dir arg on CLIs that support it (#59464)
Change enable to enabled for junos_interfaces and junos_lldp_interfaces module (#62319)
Check action plugin names for network (eos, ios, iosxr, junos, netconf, nxos) modules properly load with collections.
Clarify roles path target behaviour for ansible-galaxy
Correctly handle delegate_to hostnames in loops (#59650)
Do not re-use remote_user from previous loop iteration (#58876)
Ensure connection with remote host is created before invoking execute_command() from module side (#61596)
Fix --diff to produce output when creating a new file (#57618)
Fix PSLint errors regarding global vars (PSAvoidGlobalVars)
Fix SSL protocol references in the mqtt module to prevent failures on Python 2.6.
Fix delete to pass the right parameters(#62525)
Fix doc for proxy_username and proxy_password in yum_repository.py (#59068).
Fix firewalld source option handling to be exclusive (#55683)
Fix for junos cli_config replace option (#62131).
Fix foreman inventory plugin when inventory caching is disabled
Fix ansible/galaxy-dev#96 Add support for automation-hub authentication to ansible-galaxy
Fix ios_lldp_global enable to enabled(#62420)
Fix issue where the collection loader tracebacks if collections_paths = ./ is set in the config
Fix loading network facts modules for smart gathering (#59856).
Fix media type of RESTCONF requests.
Fix negated all,min for network_facts and remove choices (#61362).
Fix nxos_bfd_global cmd order and tests (#61943).
Fix nxos_l3_interfaces module deleting mgmt IP (#62545).
Fix privilege escalation support for the docker connection plugin when credentials need to be supplied (e.g. sudo with password).
Fix regression warning on jinja2 delimiters in when statements (#56830)
Fix regression when including a role with a custom filter (#57351)
Fix regular expression to support parsing more than 10 network interfaces in RouterOS output (#62346)
Fix strategy functions that update inventory and back 'add_host' and 'group_by' actions.
Fix support for Specialized images in Azure Shared Image Gallery
Fix the issue that disk is not activated after its creation (#57412)
Fix the upstream rpm spec file. The ansible-test package requirement on the main ansible package was formatted incorrectly.
Fix traceback error in IOS and IOSXR when ran with empty config (#62400)
Fix traceback session uid error(#62523)
Fix traceback with empty config error msg(#62538)
Fixed a traceback in the git module when using an absolute path for the repo parameter.
Fixed ce_bgp,first the pattern to be searched is need to change, otherwise there is no data to be found.then after running a task with this module,it will not show 'changed' correctly.
Fixed ce_bgp_af,'changed' of module run result is not showed, however the module runs correctly,and updates commands if result is not correct.
Fixed ce_bgp_neighbor, find specify bgp as information, as number is necessary and so on.
Fixed ce_bgp_neighbor_af,update commands should be showed correctly, and xml for filter and edit are also re-factor as the software version upgrade and update.
Fixed intermittent "JSON object must be str, bytes or bytearray, not list" error with EOS over httpapi
Fixed loading namespaced documentation fragments from collections.
Fixed role's hash_params behavior to not union (#20596).
Fixed some PSlint warnings
For package_facts, correct information about apt being missing and fix missing attribute.
Gather facts should use gather_subset config by default.
Handle IndexError while parsing empty limit file (#59695).
Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156
Inventory sources now respect setting hash_behaviour. Previously each new inventory source would overwrite existing vars, even when hash_behavior was set to merge.
Make EOS / FRR / IOS / IOSXR bgp modules collection safe
Make max_connections parameter work again in vmware_guest module (#58061).
Module tracebacks are now recognized on stdout and stderr, intead of just on stderr.
Only warn for bare variables if they are not type boolean (#53428)
Pipelining now works with the buildah plugin.
Redfish - Instead of building the Power URI from assumptions about URI structure, assemble from @odata.id information in the Chassis resource (#56137).
Remove case sensitivity on interface names from eos_interfaces, eos_l2_interfaces, eos_l3_interfaces, eos_lacp_interfaces, eos_lag_interfaces, and eos_lldp_interfaces.
Remove lingering ansible vault cipher (AES) after it was removed in
Remove unused import from iosxr l3_interfaces facts library.
Removed unused FactArgs imports from eos / ios / iosxr / junos / vyos facts modules
Return commands key instead of xml in result for junos resource module (#61773)
SECURITY Fixed the python interpreter detection, added in 2.8.0alpha1, to properly mark the returned data as untemplatable. This prevents a malicious managed machine from running code on the controller via templating.
Stabilize nxos initiated copy for nxos_file_copy plugin (#62355).
TaskExecutor - Create new instance of the action plugin on each iteration when using until (#57886)
TaskQueueManager - Ensure has_dead_workers can function, by using the correct reference, and only allow an exit code of 0. (#29124)
The ansible-galaxy publish command was using an incorrect URL for v3 servers. The configuration for v3 servers includes part of the path fragment that was added in the new test.
To fix ios_l3_interfaces resource module round trip failure(#61642)
To rename CheckPoint to Check_Point due to CP legal reasons. (#61172).
Unit tests for cp_cp_mgmt_discard
Unit tests for cp_mgmt_access_layer
Unit tests for cp_mgmt_access_layer_facts
Unit tests for cp_mgmt_access_role
Unit tests for cp_mgmt_access_role_facts
Unit tests for cp_mgmt_access_rule
Unit tests for cp_mgmt_access_rule_facts
Unit tests for cp_mgmt_address_range
Unit tests for cp_mgmt_address_range_facts(#62338)
Unit tests for cp_mgmt_administrator
Unit tests for cp_mgmt_administrator_facts
Unit tests for cp_mgmt_application_group
Unit tests for cp_mgmt_application_group_facts
Unit tests for cp_mgmt_application_site
Unit tests for cp_mgmt_application_site_category
Unit tests for cp_mgmt_application_site_category_facts
Unit tests for cp_mgmt_application_site_facts
Unit tests for cp_mgmt_assign_global_assignment
Unit tests for cp_mgmt_dns_domain
Unit tests for cp_mgmt_dns_domain_facts
Unit tests for cp_mgmt_dynamic_object
Unit tests for cp_mgmt_dynamic_object_facts
Unit tests for cp_mgmt_exception_group
Unit tests for cp_mgmt_exception_group_facts(#62216)
Unit tests for cp_mgmt_global_assignment
Unit tests for cp_mgmt_global_assignment
Unit tests for cp_mgmt_global_assignment_facts
Unit tests for cp_mgmt_global_assignment_facts
Unit tests for cp_mgmt_group
Unit tests for cp_mgmt_group
Unit tests for cp_mgmt_group_facts
Unit tests for cp_mgmt_group_facts
Unit tests for cp_mgmt_group_with_exclusion
Unit tests for cp_mgmt_group_with_exclusion
Unit tests for cp_mgmt_group_with_exclusion_facts
Unit tests for cp_mgmt_group_with_exclusion_facts
Unit tests for cp_mgmt_host
Unit tests for cp_mgmt_host
Unit tests for cp_mgmt_host_facts
Unit tests for cp_mgmt_host_facts
Unit tests for cp_mgmt_install_policy
Unit tests for cp_mgmt_multicast_address_range
Unit tests for cp_mgmt_multicast_address_range_facts
Unit tests for cp_mgmt_multicast_address_range_facts
Unit tests for cp_mgmt_network
Unit tests for cp_mgmt_package
Unit tests for cp_mgmt_package
Unit tests for cp_mgmt_package_facts
Unit tests for cp_mgmt_package_facts
Unit tests for cp_mgmt_publish
Unit tests for cp_mgmt_put_file
Unit tests for cp_mgmt_run_ips_update
Unit tests for cp_mgmt_run_script(#62322)
Unit tests for cp_mgmt_security_zone
Unit tests for cp_mgmt_security_zone
Unit tests for cp_mgmt_security_zone_facts
Unit tests for cp_mgmt_security_zone_facts
Unit tests for cp_mgmt_service_dce_rpc
Unit tests for cp_mgmt_service_dce_rpc
Unit tests for cp_mgmt_service_dce_rpc_facts
Unit tests for cp_mgmt_service_dce_rpc_facts
Unit tests for cp_mgmt_service_group
Unit tests for cp_mgmt_service_group
Unit tests for cp_mgmt_service_group_facts(#62213)
Unit tests for cp_mgmt_service_group_facts(#62214)
Unit tests for cp_mgmt_service_icmp
Unit tests for cp_mgmt_service_icmp6
Unit tests for cp_mgmt_service_icmp6_facts
Unit tests for cp_mgmt_service_icmp_facts
Unit tests for cp_mgmt_service_other
Unit tests for cp_mgmt_service_other_facts
Unit tests for cp_mgmt_service_rpc
Unit tests for cp_mgmt_service_rpc_facts
Unit tests for cp_mgmt_service_sctp
Unit tests for cp_mgmt_service_sctp_facts
Unit tests for cp_mgmt_service_tcp
Unit tests for cp_mgmt_service_tcp_facts
Unit tests for cp_mgmt_service_udp
Unit tests for cp_mgmt_service_udp_facts
Unit tests for cp_mgmt_simple_gateway
Unit tests for cp_mgmt_simple_gateway_facts
Unit tests for cp_mgmt_tag
Unit tests for cp_mgmt_tag_facts(#62215)
Unit tests for cp_mgmt_threat_exception
Unit tests for cp_mgmt_threat_exception_facts
Unit tests for cp_mgmt_threat_protection_override(#62328)
Unit tests for cp_mgmt_threat_rule
Unit tests for cp_mgmt_threat_rule_facts
Unit tests for cp_mgmt_verfiy_policy
Unit tests for the case with more than 10 network interfaces
Use async poll default setting for play tasks also, previously in only affected adhoc ansible.
Use templated loop_var/index_var when looping include* (#58820)
_purefa_facts - Fix missing API version check when calling I(admins) or I(all) as the subset
acme_certificate - Only return challenges in challenge_data and challenge_data_dns which are not yet valid.
acme_certificate - improve compatibility when finalizing ACME v2 orders. Fixes problem with Buypass' ACME v2 testing endpoint.
acme_certificate - use ipaddress module bundled with Ansible for normalizations needed for OpenSSL backend.
add options type info for Redfish modules (#54688)
adhoc CLI - when playbook-dir is specified and inside a collection, use default collection logic to resolve modules/actions
allow external collections to be created in the 'ansible' collection namespace (#59988)
allow include_role to work with ansible command
allow loading inventory plugins adjacent to playbooks
allow python_requirements_facts to report on dependencies containing dashes
ansible-connection persists even after playbook run is completed (#61591)
ansible-doc now properly handles removed modules/plugins
ansible-galaxy - Stop appendding '/api' to configured galaxy urls. Special case migrated configs.
ansible-galaxy - Default collection install path to first path in COLLECTIONS_PATHS (#62870)
ansible-galaxy - Ensure we preserve the new URL when appending /api for the case where the GET succeeds on galaxy.ansible.com
ansible-galaxy - Fix url building to not truncate the URL (#61624)
ansible-galaxy - Handle the different task resource urls in API responses from publishing collection artifacts to galaxy servers using v2 and v3 APIs.
ansible-galaxy cli - fixed --version argument
ansible-galaxy role - Fix issue where --server was not being used for certain ansible-galaxy role actions - #61609
ansible-inventory - Properly hide arguments that should not be shown (#61604)
ansible-inventory - Restore functionality to allow --graph to be limited by a host pattern
ansible-podman connection plugin - Fix case when mount of podman container fails and files can't be copied to/from container. Also add error handling in case of failed podman commands. (#57740)
ansible-test coverage - Fix the --all argument when generating coverage reports - #62096
ansible-test import sanity test now consistently reports errors against the file being tested.
ansible-test import sanity test now consistently reports warnings as errors.
ansible-test import sanity test now properly handles relative imports.
ansible-test import sanity test now properly invokes Ansible modules as scripts.
ansible-test now correctly enumerates submodules when a collection resides below the repository root
ansible-test now correctly excludes the test results temporary directory when copying files from the remote test system to the local system
ansible-test now correctly installs the requirements specified by the collection's unit and integration tests instead of the requirements specified for Ansible's own unit and integration tests
ansible-test now creates its integration test temporary directory within the collection so ansible-playbook can properly detect the default collection
ansible-test now creates output directories as needed for powershell coverage output before generating reports
ansible-test now loads the collection loader plugin early enough for ansible_collections imports to work in unit test conftest.py modules
ansible-test now properly activates the vcenter plugin for vcenter tests when docker is available
ansible-test now properly activates virtual environments created using the --venv option
ansible-test now properly creates a virtual environment using venv when running in a virtualenv created virtual environment
ansible-test now properly excludes the tests/output/ directory from code coverage
ansible-test now properly handles creation of Python execv wrappers when the selected interpreter is a script
ansible-test now properly handles warnings for removed modules/plugins
ansible-test now properly ignores the tests/output// directory when not using git
ansible-test now properly installs requirements for multiple Python versions when running sanity tests
ansible-test now properly registers its own code in a virtual environment when running from an install
ansible-test now properly searches for pythonX.Y instead of python when looking for the real python that created a virtualenv
ansible-test now properly sets PYTHONPATH for tests when running from an Ansible installation
ansible-test now properly sets ANSIBLE_PLAYBOOK_DIR for integration tests so unqualified collection references work for adhoc ansible usage
ansible-test now shows sanity test doc links when installed (previously the links were only visible when running from source)
ansible-test now updates SSH keys it generates with newer versions of ssh-keygen to function with Paramiko
ansible-vault - fix error when multiple vault password files are specified (#57172)
ansible.basics - fix core C# recursive call when logging fails (e.g. if insufficient permissions are held) (#59503)
apt - Fixed the issue the cache being updated while auto-installing its dependencies even when update_cache is set to false.
apt - fixed issue where allow_unauthenticated did not apply to dependencies when installing a deb directly
apt - strip whitespaces in package names (#55741)
apt_facts - fix performance regression when getting facts about apt packages (#60450)
apt_repository - Fix crash caused by cache.update() raising an IOError due to a timeout in apt update (#51995)
async - Fix async callback plugins to allow async output to be displayed when running command/shell (#15988)
avoid choosing an unreadable ansible.cfg just because it exists.
aws_ec2 inventory plugin - fixed race condition when trying to fetch IAM instance profile (role) credentials (#59638)
aws_kms - Update key policy when key already exists
aws_kms - Use ARN rather than ID so that cross-account changes function
aws_kms - fix exception when only Key ID is passed
aws_kms module ensure tag keys have their case preserved by avoiding a second unnecessary format conversion
aws_s3 - Improve usability when the execution host lacks MD5 support (e.g. due to FIPS-140-2).
aws_s3 - Try to wait for the bucket to exist before setting the access control list.
aws_ses_identity module works when region is provided using config or environment variables rather than the region parameter (#51531)
azure - fix for specialized images in vmss
azure_rm_dnsrecordset_info - no longer returns empty azure_dnsrecordset facts when called as _info module.
azure_rm_networkinterface_info - Fix up instances when ansible_facts is returned for the older _facts alias.
azure_rm_resourcegroup_info - no longer returns azure_resourcegroups facts when called as _info module.
azure_rm_securitygroup_info - Fix up instances when ansible_facts is returned for the older _facts alias.
azure_rm_storageaccount_info - no longer returns empty azure_storageaccounts facts when called as _info module.
azure_rm_virtualmachineimage_info - no longer returns empty azure_vmimages facts when called as _info module.
azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ansible_facts result, when called as _info module.
azure_rm_virtualnetwork_info - no longer returns empty azure_virtualnetworks facts when called as _info module.
become - Provide nice error when the shell plugin is incompatible with the configured become plugin (#57770)
ce_acl_interface - Strict regularity can't find anything.
ce_dldp - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove.
ce_dldp_interface - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove.
ce_interface - It is not a good way to find data from a xml tree by regular. lin379 line405.
ce_interface - line 750,779 Some attributes of interfaces are missing, 'ifAdminStatus', 'ifDescr', 'isL2SwitchPort'.So add them when get interface status.
ce_ospf - update to fix some bugs - Contrast before and after adding configuration. (#61684)
ce_snmp_location - fixed an out of array index error.
ce_snmp_target_host - None has no 'lower()' attribute.
ce_snmp_target_host - update to fix some bugs - Contrast before and after adding configuration. (#61842)
ce_snmp_traps - update to fix some bugs - Contrast before and after adding configuration. (#61843)
ce_static_route - update to fix some bugs - Add some update statements. (#62498)
ce_stp - update to fix some bugs - Modify the configured query statement and replace get_config with exec_command. (#61774)
ce_vxlan_arp - override 'get_config' to show specific configuration.
ce_vxlan_arp - update to fix some bugs - Modifying regular expressions. (#61995)
ce_vxlan_gateway - override 'get_config' to show specific configuration.
ce_vxlan_global - Network_cli and netconf should be not mixed together, otherwise something bad will happen. Function get_nc_config uses netconf and load_config uses network_cli.
ce_vxlan_global - line 242 , bd_info is a string array,and it should be 'extend' operation.
ce_vxlan_global - line 423, 'if' and 'else' should set a different value. if 'exist', that value is 'enable'.
ce_vxlan_global - line 477. To get state of result, if it is changed or not.
ce_vxlan_tunnel - Network_cli and netconf should be not mixed together, otherwise something bad will happen. Function get_nc_config uses netconf and load_config uses network_cli.
ce_vxlan_vap - tag named data of a xpath is unnecessary for old software version to find a element from xml tree, but element can not be found with 'data' tag for new version, so remove.
ce_vxlan_vap - update to fix some bugs - Modify the Operator Difference between Python 2 and Python 3. (#61996)
cgroup_perf_recap - When not using file_per_task, make sure we don't prematurely close the perf files
clarify error messages for 'auto' and missing libs, add missing lib msg for rpm.
cloudformation_info - Fix a KeyError returning information about the stack(s).
collection loader - ensure Jinja function cache is fully-populated before lookup
collection loader - fixed relative imports on Python 2.7, ensure pluginloader caches use full name to prevent names from being clobbered (#60317)
combine filter - Validate that undefined variables aren't used (#55810).
config - encoding failures on config values should be non-fatal (#63310)
constructed - Add a warning for the change in behavior in the sanitization of the groups option.
consul_session - sessions returned value is a list even though no sessions were found
consul_session - don't ignore validate_certs parameter
consul_session: don't ignore scheme parameter
cowsay - Fix issue with an empty cow_whitelist (#45631)
cron and cronvar - use get_bin_path utility to locate the default crontab executable instead of the hardcoded /usr/bin/crontab. (#59765)
cron cronvar - only run get_bin_path() once
cronvar - use correct binary name (#63274)
crypto modules - improve error messages when required Python library is missing.
cyberarkpassword - fix result decoding issues with Python 3 (#52625)
digital_ocean_droplet - Fix creation of DigitalOcean droplets using digital_ocean_droplet module (#61655)
display - remove leading space when displaying WARNING messages
display underlying error when reporting an invalid tasks: block.
dnf - fix formatting of module name in error message (#58647)
dnf - fix wildcard matching for state: absent (#55938)
dnsmadeeasy - force the date to be rendered with C (POSIX system default) locale as English short date names are required by API
docker connection plugin - accept version dev as 'newest version' and print warning.
docker* modules - behave better when requests errors are not caught by docker-py.
docker* modules - improve error message when docker-py is missing / has wrong version.
docker* modules - improve robustness when not handled Docker errors occur.
docker_compose - fix issue where docker deprecation warning results in ansible erroneously reporting a failure
docker_container - Add support for image lookups by digest. Fixes the detection of digest changes.
docker_container - oom_killer and oom_score_adj options are available since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
docker_container - add support for nocopy mode for volumes.
docker_container - correct variable used in warning message about default IP
docker_container - fix idempotency of log_options when non-string values are used. Also warn user that this is the case.
docker_container - fix network creation when networks_cli_compatible is enabled.
docker_container - fix port bindings with IPv6 addresses.
docker_container - improve error behavior when parsing port ranges fails.
docker_container - switch to Config data source for images (API>=1.21).
docker_container - use docker API's restart instead of stop/start to restart a container.
docker_host_info - network_filters needs docker-py 2.0.2, disk_usage needs docker-py 2.2.0.
docker_image - Add support for image lookups by digest. Fixes the detection of digest changes.
docker_image - if build was not specified, the wrong default for build.rm is used.
docker_image - if nocache set to yes but not build.nocache, the module failed.
docker_image - module failed when source: build was set but build.path options not specified.
docker_image - validate tag option value.
docker_image_info - Add support for image lookups by digest. Fixes the detection of digest changes.
docker_login - correct broken fix for #60381 which crashes for Python 3.
docker_login - report change on successful logout (#59232)
docker_network module - fix idempotency when using aux_addresses in ipam_config.
docker_swarm_service - Change the type of options gid and uid on secrets and configs to str.
docker_swarm_service - allow the same port to be published both with TCP and UDP.
docker_swarm_service - fix resource lookup if mounts.source="".
docker_swarm_service_info - work around problems with older docker-py versions such as 2.0.2.
documented ignore option for TRANSFORM_INVALID_GROUP_CHARS
dzdo did not work with password authentication
ec2_group - Don't truncate the host bits off of IPv6 CIDRs. CIDRs will be passed thru to EC2 as-is provided they are valid IPv6 representations. (#53297)
ec2_group - Fix traceback sorting dictionaries using Python 3 and ensure rules shown by diff mode are in a consistent order.
ec2_instance - Ensures ebs.volume_size and ebs.iops are int to avoid issues with Jinja2 templating
ec2_instance - make Name tag idempotent (#55224)
ec2_launch_template - Only 'volume' and 'instance' are valid resource types for tag specifications.
ecs_certificate - Always specify header connection: keep-alive for ECS API connections.
ecs_certificate - Fix formatting of contents of full_chain_path.
ensure all cases of a None remote/become user are covered.
ensure module results and facts are marked untrusted as templates for safer use within the same task
ensure run_command passes bytes to Popen, which is what it expects.
fact_cache - Define the first_order_merge method for the legacy FactCache.update(key, value).
facts - change to use boot_time on a solaris OS to report correct uptime (#53635)
facts - handle situation where ansible_architecture may not be defined (#55400)
facts - properly detect is_chroot on XFS for non-root users (#56437)
file - Fix setting relative paths for hard links (#55971)
file - fix setting attributes for symlinked file (#56928)
file - return more useful error message for recursion error (#56397)
find - clarify description of contains (#61983)
firewalld - enable the firewalld module to function offline with firewalld version 0.7.0 and newer (#63254)
first_found - Un-deprecate skip, as the alternative of errors does not work with with_first_found and only use of lookup (#58942)
fix if equals error code command is not found(#62529)
fix incorrect uses of to_native that should be to_text instead.
fixed collection-based plugin loading in ansible-connection (eg networking plugins)
gather_facts - Clean up tmp files upon completion (#57248)
gather_facts - Prevent gather_facts from being verbose, just like is done in the normal action plugin for setup (#58310)
gather_facts now correctly passes back the full output of modules on error and skipped, fixes
gcp_compute - Speed up dynamic invetory up to 30x.
get_url - Don't treat no checksum as a checksum match (#61978)
gitlab modules - Update version deprecations to use strings instead of integers so that 2.10 isn't converted to 2.1. (#55395)
gitlab_runner - Fix idempotency when creating runner (#57759)
group - The group module errored of if the gid exists with the same group name. This prevents reruns of the playbook. This fixes a regression introduced by 4898b0a.
group - properly detect duplicate GIDs when local=yes (#56481)
handlers - Cache templated handler name on included handlers to avoid later templating errors (#58769)
handlers - Only notify a handler if the handler is an exact match by ensuring listen is a list of strings. (#55575)
hcloud_volume - Fix idempotency when attaching a server to a volume.
hostname - Readded support for Cumulus Linux which broke in v2.8.0 (#57493)
hostname - fix regression with Oracle Linux (#42726)
hostname - make module work on CoreOS, Oracle Linux, Clear Linux, OpenSUSE Leap, ArchARM (#42726)
iam_password_policy - Fix AWS/boto3 errors when setting no password expiration
iam_password_policy no longer throws errors when you don't set pw_reuse_prevent
iam_password_policy now only returns changed when the policy changes
ibm_storage - Added a check for null fields in ibm_storage utils module.
include_tasks - whitelist listen as a valid keyword (#56580)
includes - Ensure to use the correct filename when AnsibleFileNotFound is encountered (#58436)
iosxr - Fix random idempotence issues with iosxr_lag_interfaces Resource Module (#62998).
iosxr - support cases where a normal commit operation also throws a prompt (#62132)
iosxr_l3_interfaces - Fixes IOSXR L3 which was having idempotent issue raised in issue #61844, also adding a RTT for iosxr_l3_interfaces resource module
ipaddr: prevent integer indices from being parsed as ip nets
java_keystore - Use SHA256 to check the fingerprints' certs. The module is compatible with java<=8 (SHA1 by default) and Java>=9 (SHA256 by default) now.
junos_config - Add commands alias to lines option to be in sync with other platforms (#62221)
junos_config - allow validate config before committing to running configuration (#61969)
junos_user - Add no_log=True to junos_user encrypted_password (#62184)
k8s - ensure k8s returns result of a resource update as it is at the end of the wait period
k8s - ensure that apply works with check mode. Bumps minimum openshift version for apply to 0.9.2.
k8s - ensure wait_condition works when Status is Unknown
k8s - resource updates applied with force work correctly now
k8s module - fix for case when resource definition yaml ended with 3 dashes
keep results subset also when not no_log.
kubevirt: apply wait_sleep fix from devel to not fail on missing param
lineinfile - fix a race / file descriptor leak when writing the file (#57327)
lvg - Fixed warning shown when using default value for pesize about conversion from int to str.
machinectl become plugin - correct bugs which induced errors on plugin usage
make command module more resilient unicode errors. Also to fs errors.
meraki_config_template - Don't query all networks unless needed.
meraki_ssid - Improved documentation about parameter dependencies.
meraki_ssid - Provides more accurate change results for some operations.
meraki_static_route - Module would make unnecessary API calls to Meraki when net_id is specified in task.
meraki_static_route - Module would make unnecessary API calls to Meraki when net_id is specified in task.
meraki_switchport - improve reliability with native VLAN functionality.
meraki_syslog - Module would ignore net_id parameter if passed.
meraki_vlan - Module would make unnecessary API calls to Meraki when net_id is specified in task.
module_defaults - Added aws_codebuild, aws_codecommit, aws_codepipeline, aws_secret, aws_ses_rule_set, cloudformation_stack_set, dms_endpoint, dms_replication_subnet_group, ec2_transit_gateway, ec2_transit_gateway_info, ecs_taskdefinition_facts, elb_target_info, iam_password_policy, redshift_cross_region_snapshots, s3_bucket_notification to the aws module_defaults group.
module_utils - remove unused objects from dict_transformations, removed, and sys_info modules (#59570)
mysql - Fix mysql_connect function's logic related to the cursor_class keyword argument (#61832).
mysql_user: fix regression introduced when fixing MariaDB/MySQL multiple versions handling
nagios - Removed redundant type check which caused crashes. Guardrails added elsewhere in earlier change.
nagios module - Fix nagios module to recognize if cmdfile exists and is fifo pipe.
netbox - Fix missing implementation of groups option (#57688)
netbox_ip_address - Fixed issue where it would create duplicate IP addresses when trying to serialize the IP address object which doesn't have the .serialize() method. This should also prevent future duplicate objects being created if they don't have the .serialize() method as well.
network_cli - ensure connection is established before returning the current prompt
new code assumed role_versions always were present event though rest of code does not.
nmcli - fixed regression caused by commit b7724fd, github issue
npm - Validate that all passed options have proper types.
nxos_file_copy call get_capabilities to initiate device connection (#62103).
nxos_l2_interfaces fix for integration tests failing to setup layer2 (#61887).
nxos_lacp_interfaces fix integration test dependencies (#61947).
onepassword - fix onepassword lookup plugin failing on fields without a name or t property (#58308)
onepassword_facts - fix onepassword_facts module failing on fields without a name or t property (#58308)
openssh_keypair - The fingerprint return value was incorrectly returning a list of ssh-keygen output; it now returns just the fingerprint value as a string
openssh_keypair - add public key and key comment validation on change
openssh_keypair - make regeneration of valid keypairs with the force option possible, add better handling for invalid files
openssh_keypair - public key's file attributes (permissions, owner, group, etc.) are now set to the same values as the private key.
openssl_certificate - When provider is entrust, use a connection: keep-alive header for ECS API connections.
openssl_certificate - invalid_at check was broken.
openssl_certificate - key_usage check was broken for pyopenssl backend. Its error message was wrong for the cryptography backend.
openssl_certificate - fix Subject Alternate Name comparison, which was broken for IPv6 addresses with PyOpenSSL, or with older cryptography versions (before 2.1).
openssl_certificate - fix private key passphrase handling for cryptography backend.
openssl_certificate - if both private key and CSR were specified, the idempotency check for selfsigned and ownca providers ignored the CSR.
openssl_certificate - improve behavior when required files are missing.
openssl_certificate - relative times did not work for pyopenssl backend under Python 3, and generally didn't work for valid_at and invalid_at for pyopenssl backend.
openssl_csr - SAN normalization for IP addresses for the pyOpenSSL backend was broken.
openssl_csr - the cryptography backend's idempotency checking for basic constraints was broken.
openssl_csr, openssl_csr_info - use ipaddress module bundled with Ansible for normalizations needed for pyOpenSSL backend.
openssl_pkcs12 - fixes crash when private key has a passphrase and the module is run a second time.
openssl_privatekey - secp256r1 got accidentally forgotten in the curve list.
os_port - handle binding:vnic_type as optional (#55524, #55525)
os_quota - fix failure to set compute or network quota when volume service is not available
os_subnet - it is valid to specify an explicit subnetpool_id rather than use_default_subnetpool or cidr
ovirt_vm - fix for module failure on creation (#59385)
pass correct loading context to persistent connections
pass correct loading context to persistent connections other than local
pip - Remove the unused and undocumented option use_mirrors.
pip - Validate that all items in the name option are strings.
pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux (#56583)
plugin loader - Restore adding plugin loader playbook dir to Playbook in addition to PlaybookCLI to solve sub directory playbook relative plugins to be located (#59548)
podman_image - handle new output format for image build
podman_image_facts - do not fail if invalid or non-existant image name is provided (#57899)
postgresql modules - use module_utils.postgres.exec_sql function instead of __exec_sql method (#57674)
postgresql_idx - remove __exec_sql method and use module_utils.postgres.exec_sql instead (#57684)
postgresql_pg_hba - After splitting fields, merge authentication options back into a single field to prevent losing options beyond the first (#57505)
postgresql_pg_hba - Fix TypeError after which pg_hba.conf is wiped (#56430)
postgresql_privs - Fix incorrect views handling (#27327).
postgresql_slot - fixed sslrootcert mapping to psycopg2 connection string
postgresql_table - fix schema handling (#57391)
preserve actual ssh error when we cannot connect.
proxmox_kvm - fixed issue when vm has not yet a name item (#58194)
psexec - Fix issue where the Kerberos package was not detected as being available.
psexec - Fix issue where the interactive option was not being passed down to the library.
psrp - Fix blank newlines appearing before stdout when using script or raw with the psrp connection plugin
psrp - Fix issues when fetching large files causing a memory leak - #55239
psrp - Fix issues with propagating errors back to Ansible with raw tasks
purefa_info - Fix missing API version check when calling I(admins) or I(all) as the subset
rabbitmq lookup plugin - Fix for rabbitmq lookups failing when using pika v1.0.0 and newer.
rabbitmq_policy - Add full check for rabbit policy changes (#29264)
rabbitmq_publish - Fix to ensure the module works correctly for pika v1.0.0 and later. (#61960)
rabbitmq_user - Handle non-zero rabbitmqctl exit codes (#56164)
rds_instance - Don't hardcode the license models because there are accepted values undocumented by AWS. Rely on the exception handling instead to provide a helpful error for invalid license models.
rds_instance no longer fails when passing neither storage_type nor iops
re allow empty plays for now, but add deprecation msg.
re-fix CLI help for module path, previous fix which was lost in parser switch
redfish_command - add If-Match etag header to Redfish PATCH requests (#56050)
redfish_command - make power commands idempotent (#55869)
redfish_facts - add MACAddress to properties fetched by Redfish GetNicInventory command
redhat_subscription - made code compatible with Python3 (#58665)
refactored into function and use in some action plugins to match actual module used, made precedence very clear in code.
regex tests - Fail with undefined error if the value is undefined (#12186)
remove all temporary directories created by ansible-config (#56488)
remove obsolete become mixin
removed chdir from action plugins when using local connection, moved into plugin itself to avoid future issues with threads.
removed_module - remove extra spaces from msg and docstring (#57209)
resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters.
route53_facts - the module did not advertise check mode support, causing it not to be run in check mode.
setup (Windows) - prevent setup module failure if Get-MachineSid fails (#47813)
setup.ps1 - Support non NETBIOS compliant hostnames (#54550)
several minor fixes to ansible logging, allow deterministic log name, better level matching, leaner setup.
show host_vars in ansible-inventory's --graph option.
ssh connection plugin - Ensure that debug messages are properly encoded as text
sts_assume_role - fix assertion text in integration test
suppress "default will change" warnings for TRANSFORM_INVALID_GROUP_CHARS setting when non-default option value is chosen
sysctl - check system values, not just sysctl.conf file, when determining state (#56153 (comment))
sysctl - fix err referenced before assignment (#58158)
sysctl: the module now also checks the output of STDERR to report if values are correctly set (#55695)
systemd - wait for a service which is in deactivating state when using state=stopped (#59471)
template lookup - restore variables between calls (#55113)
this fix result in no more traceback on empty config when state is 'merged', 'replaced' or 'overridden'. (#62518).
tower inventory plugin - fix TypeError when giving inventory_id as integer (#61333)
tower_job_wait - Fixed wrong variable specification in examples
tower_user - Fix to create user as a system auditor when specifying the auditor option (#54446)
ufw - correctly check status when logging is off (#56674)
uri - Handle multiple Content-Type headers correctly (#31238)
uri - always return a value for status even during failure (#55897)
urls - Handle redirects properly for IPv6 address by not splitting on : and rely on already parsed hostname and port values (#56258)
use versioned link generator to link correct version for seealso
user - allow 13 asterisk characters in password field without warning
user - create parent directories when the specified home path has parent directories that do not exist (#41393)
user - do not warn when using local: yes if user already exists (#58063)
user - omit incompatible options when operating in local mode (#48722)
user - properly parse the shadow file on AIX (#54461)
user - update docs to reflect proper way to remove account from all groups
vault - Fix traceback using Python2 if a vault contains non-ascii characters (#58351).
vfat - changed default value of selinux_special_filesystems to include vfat, the filesystem of /boot/efi on UEFI systems
vmware - Ensure we can use the modules with Python < 2.7.9 or RHEL/CentOS < 7.4, this as soon as validate_certs is disabled.
vmware - The VMware modules now enable the SSL certificate check unless validate_certs is false.
vmware_guest accepts 0 MB of memory reservation, fix regression introduced via 193f69064fb40a83e3e7d2112ef24868b45233b3 (#59190).
vmware_vcenter_statistics - Fix some corner cases like increasing some interval and decreasing another at the same time.
vultr_server - Fix idempotency for options ipv6_enabled and private_network_enabled.
warn user when attempting to use service with globs in systemd module.
we don't really need to template vars on definition as we do this on demand in templating.
win_acl - Change special id ref recognition to avoid language diff (#56757)
win_acl - Fix qualifier parser when using UNC paths - #55875
win_become - Do not dispose of one of the logon tokens until after the process has run
win_chocolatey - Better support detecting multiple packages installed at different versions on newer Chocolatey releases
win_chocolatey - Install the specific Chocolatey version if the version option is set.
win_domain - Fix checking for a domain introduced in a recent patch
win_domain_controller - Do not fail the play without the user being able to catch dcpromo failing because of a pending reboot within a playbook using ignore_error or retry logic.
win_domain_group_membership - Fix missing @extra_vars on Get-ADObject to support different domain and credentials for retrieval (#57404)
win_domain_user - Do not hide error and stacktrace on failures
win_dsc - Be more lenient around the accepted DateTime values for backwards compatibility - #59667
win_exec_wrapper - Be more defensive when it comes to getting unhandled exceptions
win_firewall_rule - Fix program var not expanding %SystemRoot% type vars (#44450)
win_get_url - Fix handling of restricted headers as per (#57880)
win_get_url - Fix proxy_url not used correctly (#58691)
win_hostname - Fix non netbios compliant name handling (#55283)
win_iis_virtualdirectory - Support recursive removal (#49755)
win_iis_website - site_id not used if no sites exist already and creating a new site (#47057)
win_pagefile - Fix idempotency when same settings as current (#57836)
win_pagefile - not using testPath
win_psmodule - Missing SkipPublisherCheck in Prerq installations
win_reboot - pass return value for test_command result when using the psrp connection plugin
win_reg_stat - fix issue when trying to check keys in HKU:\ - #59337
win_region - Fix the check for format when running on the psrp connection plugin
win_scheduled_task - Fix start/end bountry triggers to allow for timezone sync (#49327)
win_shell - Fix bug when setting args.executable to an executable with a space
win_user - Get proper error code when failing to validate the user's credentials
winrm - Fix issue when attempting to parse CLIXML on send input failure
xenserver_guest - fixed an issue where VM whould be powered off even though check mode is used if reconfiguration requires VM to be powered off.
xenserver_guest - proper error message is shown when maximum number of network interfaces is reached and multiple network interfaces are added at once.
xenserver_guest - when adding disks to a VM in powered on state, disks are now properly plugged/activated (#60693).
yum - Fix false error message about autoremove not being supported (#56458)
yum - gracefully handle failure case of enabling a non existent repo, as the yum cli does (Fixes #52582)
yum - handle special "_none" value for proxy in yum.conf and .repo files (#56538)
yum - handle stale/invalid yum.pid lock file (#57189)

New Plugins

Cliconf

eric_eccli - Use eccli cliconf to run command on Ericsson ECCLI platform
icx - Use icx cliconf to run command on Ruckus ICX platform

Httpapi

fortianalyzer - HttpApi Plugin for Fortinet FortiAnalyzer Appliance or VM
fortios - HttpApi Plugin for Fortinet FortiOS Appliance or VM

Lookup

avi - Look up Avi objects.

New Modules

Cloud

amazon

aws_codebuild - Create or delete an AWS CodeBuild project
aws_codepipeline - Create or delete AWS CodePipelines
aws_netapp_cvs_FileSystems - NetApp AWS Cloud Volumes Service Manage FileSystem.
aws_netapp_cvs_active_directory - NetApp AWS CloudVolumes Service Manage Active Directory.
aws_netapp_cvs_pool - NetApp AWS Cloud Volumes Service Manage Pools.
aws_netapp_cvs_snapshots - NetApp AWS Cloud Volumes Service Manage Snapshots.
dms_endpoint - creates or destroys a data migration services endpoint
dms_replication_subnet_group - creates or destroys a data migration services subnet group
lambda_info - Gathers AWS Lambda function details
rds_snapshot - manage Amazon RDS snapshots.
s3_bucket_notification - Creates, updates or deletes S3 Bucket notification for lambda

azure

azure_rm_aks_info - Get Azure Kubernetes Service facts
azure_rm_aksversion_info - Get available kubernetes versions supported by Azure Kubernetes Service
azure_rm_applicationsecuritygroup_info - Get Azure Application Security Group facts
azure_rm_appserviceplan_info - Get azure app service plan facts
azure_rm_automationaccount - Manage Azure Automation account
azure_rm_automationaccount_info - Get Azure automation account facts
azure_rm_autoscale_info - Get Azure Auto Scale Setting facts
azure_rm_availabilityset_info - Get Azure Availability Set facts
azure_rm_azurefirewall - Manage Azure Firewall instance.
azure_rm_azurefirewall_info - Get AzureFirewall info.
azure_rm_batchaccount - Manages a Batch Account on Azure.
azure_rm_cdnendpoint_info - Get Azure CDN endpoint facts
azure_rm_cdnprofile_info - Get Azure CDN profile facts
azure_rm_containerinstance_info - Get Azure Container Instance facts
azure_rm_containerregistry_info - Get Azure Container Registry facts
azure_rm_cosmosdbaccount_info - Get Azure Cosmos DB Account facts
azure_rm_deployment_info - Get Azure Deployment facts
azure_rm_devtestlab_info - Get Azure DevTest Lab facts
azure_rm_devtestlabarmtemplate_info - Get Azure DevTest Lab ARM Template facts
azure_rm_devtestlabartifact_info - Get Azure DevTest Lab Artifact facts
azure_rm_devtestlabartifactsource_info - Get Azure DevTest Lab Artifact Source facts
azure_rm_devtestlabcustomimage_info - Get Azure DevTest Lab Custom Image facts
azure_rm_devtestlabenvironment_info - Get Azure Environment facts
azure_rm_devtestlabpolicy_info - Get Azure DTL Policy facts
azure_rm_devtestlabschedule_info - Get Azure Schedule facts
azure_rm_devtestlabvirtualmachine_info - Get Azure DevTest Lab Virtual Machine facts
azure_rm_devtestlabvirtualnetwork_info - Get Azure DevTest Lab Virtual Network facts
azure_rm_dnsrecordset_info - Get DNS Record Set facts
azure_rm_dnszone_info - Get DNS zone facts
azure_rm_functionapp_info - Get Azure Function App facts
azure_rm_gallery - Manage Azure Shared Image Gallery instance.
azure_rm_gallery_info - Get Azure Shared Image Gallery info.
azure_rm_galleryimage - Manage Azure SIG Image instance.
azure_rm_galleryimage_info - Get Azure SIG Image info.
azure_rm_galleryimageversion - Manage Azure SIG Image Version instance.
azure_rm_galleryimageversion_info - Get Azure SIG Image Version info.
azure_rm_hdinsightcluster_info - Get Azure HDInsight Cluster facts
azure_rm_image_info - Get facts about azure custom images
azure_rm_iotdevice - Manage Azure IoT hub device
azure_rm_iotdevice_info - Facts of Azure IoT hub device
azure_rm_iotdevicemodule - Manage Azure IoT hub device module
azure_rm_iothub - Manage Azure IoT hub
azure_rm_iothub_info - Get IoT Hub facts
azure_rm_iothubconsumergroup - Manage Azure IoT hub
azure_rm_keyvault_info - Get Azure Key Vault facts
azure_rm_keyvaultkey_info - Get Azure Key Vault key facts.
azure_rm_loadbalancer_info - Get load balancer facts
azure_rm_lock - Manage Azure locks
azure_rm_lock_info - Manage Azure locks
azure_rm_loganalyticsworkspace_info - Get facts of Azure Log Analytics workspaces
azure_rm_manageddisk_info - Get managed disk facts
azure_rm_mariadbconfiguration_info - Get Azure MariaDB Configuration facts
azure_rm_mariadbdatabase_info - Get Azure MariaDB Database facts
azure_rm_mariadbfirewallrule_info - Get Azure MariaDB Firewall Rule facts
azure_rm_mariadbserver_info - Get Azure MariaDB Server facts
azure_rm_monitorlogprofile - Manage Azure Monitor log profile
azure_rm_mysqlconfiguration_info - Get Azure MySQL Configuration facts
azure_rm_mysqldatabase_info - Get Azure MySQL Database facts
azure_rm_mysqlfirewallrule_info - Get Azure MySQL Firewall Rule facts
azure_rm_mysqlserver_info - Get Azure MySQL Server facts
azure_rm_networkinterface_info - Get network interface facts
azure_rm_postgresqlconfiguration_info - Get Azure PostgreSQL Configuration facts
azure_rm_postgresqldatabase_info - Get Azure PostgreSQL Database facts
azure_rm_postgresqlfirewallrule_info - Get Azure PostgreSQL Firewall Rule facts
azure_rm_postgresqlserver_info - Get Azure PostgreSQL Server facts
azure_rm_publicipaddress_info - Get public IP facts
azure_rm_rediscache_info - Get Azure Cache for Redis instance facts
azure_rm_resource_info - Generic facts of Azure resources
azure_rm_roleassignment_info - Gets Azure Role Assignment facts
azure_rm_roledefinition_info - Get Azure Role Definition facts
azure_rm_routetable_info - Get route table facts
azure_rm_securitygroup_info - Get security group facts
azure_rm_servicebus_info - Get servicebus facts
azure_rm_snapshot - Manage Azure Snapshot instance.
azure_rm_sqlserver_info - Get SQL Server facts
azure_rm_storageaccount_info - Get storage account facts
azure_rm_trafficmanagerendpoint_info - Get Azure Traffic Manager endpoint facts
azure_rm_trafficmanagerprofile_info - Get Azure Traffic Manager profile facts
azure_rm_virtualmachine_info - Get virtual machine facts
azure_rm_virtualmachineextension_info - Get Azure Virtual Machine Extension facts
azure_rm_virtualmachineimage_info - Get virtual machine image facts
azure_rm_virtualmachinescaleset_info - Get Virtual Machine Scale Set facts
azure_rm_virtualmachinescalesetextension_info - Get Azure Virtual Machine Scale Set Extension facts
azure_rm_virtualmachinescalesetinstance_info - Get Azure Virtual Machine Scale Set Instance facts
azure_rm_virtualnetwork_info - Get virtual network facts
azure_rm_virtualnetworkpeering_info - Get facts of Azure Virtual Network Peering
azure_rm_webapp_info - Get Azure web app facts

cloudstack

cs_instance_info - Gathering information from the API of instances from Apache CloudStack based clouds.
cs_zone_info - Gathering information about zones from Apache CloudStack based clouds.

digital_ocean

digital_ocean_sshkey_info - Gather information about DigitalOcean SSH keys

google

gcp_appengine_firewall_rule - Creates a GCP FirewallRule
gcp_appengine_firewall_rule_info - Gather info for GCP FirewallRule
gcp_cloudfunctions_cloud_function - Creates a GCP CloudFunction
gcp_cloudfunctions_cloud_function_info - Gather info for GCP CloudFunction
gcp_cloudscheduler_job - Creates a GCP Job
gcp_cloudscheduler_job_info - Gather info for GCP Job
gcp_cloudtasks_queue - Creates a GCP Queue
gcp_cloudtasks_queue_info - Gather info for GCP Queue
gcp_compute_autoscaler - Creates a GCP Autoscaler
gcp_compute_autoscaler_info - Gather info for GCP Autoscaler
gcp_compute_snapshot - Creates a GCP Snapshot
gcp_compute_snapshot_info - Gather info for GCP Snapshot
gcp_filestore_instance - Creates a GCP Instance
gcp_filestore_instance_info - Gather info for GCP Instance
gcp_kms_crypto_key - Creates a GCP CryptoKey
gcp_kms_crypto_key_info - Gather info for GCP CryptoKey
gcp_kms_key_ring - Creates a GCP KeyRing
gcp_kms_key_ring_info - Gather info for GCP KeyRing
gcp_mlengine_model - Creates a GCP Model
gcp_mlengine_model_info - Gather info for GCP Model
gcp_mlengine_version - Creates a GCP Version
gcp_mlengine_version_info - Gather info for GCP Version
gcp_tpu_node - Creates a GCP Node
gcp_tpu_node_info - Gather info for GCP Node

hcloud

hcloud_network - Create and manage cloud Networks on the Hetzner Cloud.
hcloud_network_info - Gather info about your Hetzner Cloud networks.
hcloud_rdns - Create and manage reverse DNS entries on the Hetzner Cloud.
hcloud_route - Create and delete cloud routes on the Hetzner Cloud.
hcloud_server_network - Manage the relationship between Hetzner Cloud Networks and servers
hcloud_subnetwork - Manage cloud subnetworks on the Hetzner Cloud.

online

online_server_info - Gather information about Online servers.
online_user_info - Gather information about Online user.

openstack

os_group_info - Retrieve info about one or more OpenStack groups

ovirt

ovirt_job - Module to manage jobs in oVirt/RHV

scaleway

scaleway_image_info - Gather information about the Scaleway images available.
scaleway_ip_info - Gather information about the Scaleway ips available.
scaleway_organization_info - Gather information about the Scaleway organizations available.
scaleway_security_group_info - Gather information about the Scaleway security groups available.
scaleway_server_info - Gather information about the Scaleway servers available.
scaleway_snapshot_info - Gather information about the Scaleway snapshots available.
scaleway_volume_info - Gather information about the Scaleway volumes available.

vmware

vcenter_extension_info - Gather info vCenter extensions
vmware_about_info - Provides information about VMware server to which user is connecting to
vmware_category_info - Gather info about VMware tag categories
vmware_cluster_drs - Manage Distributed Resource Scheduler (DRS) on VMware vSphere clusters
vmware_cluster_ha - Manage High Availability (HA) on VMware vSphere clusters
vmware_cluster_vsan - Manages virtual storage area network (vSAN) configuration on VMware vSphere clusters
vmware_content_deploy_template - Deploy Virtual Machine from template stored in content library.
vmware_content_library_info - Gather information about VMware Content Library
vmware_content_library_manager - Create, update and delete VMware content library
vmware_drs_group_info - Gathers info about DRS VM/Host groups on the given cluster
vmware_drs_rule_info - Gathers info about DRS rule on the given cluster
vmware_dvs_portgroup_find - Find portgroup(s) in a VMware environment
vmware_dvs_portgroup_info - Gathers info DVS portgroup configurations
vmware_dvswitch_nioc - Manage distributed switch Network IO Control
vmware_evc_mode - Enable/Disable EVC mode on vCenter
vmware_folder_info - Provides information about folders in a datacenter
vmware_guest_boot_info - Gather info about boot options for the given virtual machine
vmware_guest_customization_info - Gather info about VM customization specifications
vmware_guest_disk_info - Gather info about disks of given virtual machine
vmware_guest_network - Manage network adapters of specified virtual machine in given vCenter infrastructure
vmware_guest_screenshot - Create a screenshot of the Virtual Machine console.
vmware_guest_sendkey - Send USB HID codes to the Virtual Machine's keyboard.
vmware_host_capability_info - Gathers info about an ESXi host's capability information
vmware_host_config_info - Gathers info about an ESXi host's advance configuration information
vmware_host_dns_info - Gathers info about an ESXi host's DNS configuration information
vmware_host_feature_info - Gathers info about an ESXi host's feature capability information
vmware_host_firewall_info - Gathers info about an ESXi host's firewall configuration information
vmware_host_ntp_info - Gathers info about NTP configuration on an ESXi host
vmware_host_package_info - Gathers info about available packages on an ESXi host
vmware_host_service_info - Gathers info about an ESXi host's services
vmware_host_ssl_info - Gather info of ESXi host system about SSL
vmware_host_vmhba_info - Gathers info about vmhbas available on the given ESXi host
vmware_host_vmnic_info - Gathers info about vmnics available on the given ESXi host
vmware_local_role_info - Gather info about local roles on an ESXi host
vmware_local_user_info - Gather info about users on the given ESXi host
vmware_portgroup_info - Gathers info about an ESXi host's Port Group configuration
vmware_resource_pool_info - Gathers info about resource pool information
vmware_target_canonical_info - Return canonical (NAA) from an ESXi host system
vmware_vm_storage_policy_info - Gather information about vSphere storage profile defined storage policy information.
vmware_vmkernel_info - Gathers VMKernel info about an ESXi host
vmware_vswitch_info - Gathers info about an ESXi host's vswitch configurations

vultr

vultr_account_info - Get information about the Vultr account.
vultr_block_storage_info - Get information about the Vultr block storage volumes available.
vultr_dns_domain_info - Gather information about the Vultr DNS domains available.
vultr_firewall_group_info - Gather information about the Vultr firewall groups available.
vultr_network_info - Gather information about the Vultr networks available.
vultr_os_info - Get information about the Vultr OSes available.
vultr_plan_info - Gather information about the Vultr plans available.
vultr_region_info - Gather information about the Vultr regions available.
vultr_server_info - Gather information about the Vultr servers available.
vultr_ssh_key_info - Get information about the Vultr SSH keys available.
vultr_startup_script_info - Gather information about the Vultr startup scripts available.
vultr_user_info - Get information about the Vultr user available.

Crypto

entrust

ecs_certificate - Request SSL/TLS certificates with the Entrust Certificate Services (ECS) API

Database

mysql

mysql_info - Gather information about MySQL servers

postgresql

postgresql_copy - Copy data between a file/program and a PostgreSQL table
postgresql_publication - Add, update, or remove PostgreSQL publication
postgresql_sequence - Create, drop, or alter a PostgreSQL sequence

Monitoring

zabbix

zabbix_mediatype - Create/Update/Delete Zabbix media types

Net Tools

hetzner_failover_ip - Manage Hetzner's failover IPs
hetzner_failover_ip_info - Retrieve information on Hetzner's failover IPs

Network

aci

aci_interface_policy_cdp - Manage CDP interface policies (cdp:IfPol)
aci_l3out_extepg - Manage External Network Instance Profile (ExtEpg) objects (l3extInstP:instP)
aci_l3out_extsubnet - Manage External Subnet objects (l3extSubnet:extsubnet)
aci_vmm_credential - Manage virtual domain credential profiles (vmm:UsrAccP)
mso_schema_site_anp_epg_domain - Manage site-local EPG domains in schema template

avi

avi_user - Avi User Module

check_point

cp_mgmt_access_layer - Manages access-layer objects on Check Point over Web Services API
cp_mgmt_access_layer_facts - Get access-layer objects facts on Check Point over Web Services API
cp_mgmt_access_role - Manages access-role objects on Check Point over Web Services API
cp_mgmt_access_role_facts - Get access-role objects facts on Check Point over Web Services API
cp_mgmt_access_rule - Manages access-rule objects on Check Point over Web Services API
cp_mgmt_access_rule_facts - Get access-rule objects facts on Check Point over Web Services API
cp_mgmt_address_range - Manages address-range objects on Check Point over Web Services API
cp_mgmt_address_range_facts - Get address-range objects facts on Check Point over Web Services API
cp_mgmt_administrator - Manages administrator objects on Check Point over Web Services API
cp_mgmt_administrator_facts - Get administrator objects facts on Check Point over Web Services API
cp_mgmt_application_site - Manages application-site objects on Check Point over Web Services API
cp_mgmt_application_site_category - Manages application-site-category objects on Check Point over Web Services API
cp_mgmt_application_site_category_facts - Get application-site-category objects facts on Check Point over Web Services API
cp_mgmt_application_site_facts - Get application-site objects facts on Check Point over Web Services API
cp_mgmt_application_site_group - Manages application-site-group objects on Check Point over Web Services API
cp_mgmt_application_site_group_facts - Get application-site-group objects facts on Check Point over Web Services API
cp_mgmt_assign_global_assignment - assign global assignment on Check Point over Web Services API
cp_mgmt_discard - All changes done by user are discarded and removed from database.
cp_mgmt_dns_domain - Manages dns-domain objects on Check Point over Web Services API
cp_mgmt_dns_domain_facts - Get dns-domain objects facts on Check Point over Web Services API
cp_mgmt_dynamic_object - Manages dynamic-object objects on Check Point over Web Services API
cp_mgmt_dynamic_object_facts - Get dynamic-object objects facts on Check Point over Web Services API
cp_mgmt_exception_group - Manages exception-group objects on Check Point over Web Services API
cp_mgmt_exception_group_facts - Get exception-group objects facts on Check Point over Web Services API
cp_mgmt_global_assignment - Manages global-assignment objects on Check Point over Web Services API
cp_mgmt_global_assignment_facts - Get global-assignment objects facts on Check Point over Web Services API
cp_mgmt_group - Manages group objects on Check Point over Web Services API
cp_mgmt_group_facts - Get group objects facts on Check Point over Web Services API
cp_mgmt_group_with_exclusion - Manages group-with-exclusion objects on Check Point over Web Services API
cp_mgmt_group_with_exclusion_facts - Get group-with-exclusion objects facts on Check Point over Web Services API
cp_mgmt_host - Manages host objects on Check Point over Web Services API
cp_mgmt_host_facts - Get host objects facts on Check Point over Web Services API
cp_mgmt_install_policy - install policy on Check Point over Web Services API
cp_mgmt_mds_facts - Get Multi-Domain Server (mds) objects facts on Check Point over Web Services API
cp_mgmt_multicast_address_range - Manages multicast-address-range objects on Check Point over Web Services API
cp_mgmt_multicast_address_range_facts - Get multicast-address-range objects facts on Check Point over Web Services API
cp_mgmt_network - Manages network objects on Check Point over Web Services API
cp_mgmt_network_facts - Get network objects facts on Check Point over Web Services API
cp_mgmt_package - Manages package objects on Check Point over Web Services API
cp_mgmt_package_facts - Get package objects facts on Check Point over Web Services API
cp_mgmt_publish - All the changes done by this user will be seen by all users only after publish is called.
cp_mgmt_put_file - put file on Check Point over Web Services API
cp_mgmt_run_ips_update - Runs IPS database update. If "package-path" is not provided server will try to get the latest package from the User Center.
cp_mgmt_run_script - Executes the script on a given list of targets.
cp_mgmt_security_zone - Manages security-zone objects on Check Point over Web Services API
cp_mgmt_security_zone_facts - Get security-zone objects facts on Check Point over Web Services API
cp_mgmt_service_dce_rpc - Manages service-dce-rpc objects on Check Point over Web Services API
cp_mgmt_service_dce_rpc_facts - Get service-dce-rpc objects facts on Check Point over Web Services API
cp_mgmt_service_group - Manages service-group objects on Check Point over Web Services API
cp_mgmt_service_group_facts - Get service-group objects facts on Check Point over Web Services API
cp_mgmt_service_icmp - Manages service-icmp objects on Check Point over Web Services API
cp_mgmt_service_icmp6 - Manages service-icmp6 objects on Check Point over Web Services API
cp_mgmt_service_icmp6_facts - Get service-icmp6 objects facts on Check Point over Web Services API
cp_mgmt_service_icmp_facts - Get service-icmp objects facts on Check Point over Web Services API
cp_mgmt_service_other - Manages service-other objects on Check Point over Web Services API
cp_mgmt_service_other_facts - Get service-other objects facts on Check Point over Web Services API
cp_mgmt_service_rpc - Manages service-rpc objects on Check Point over Web Services API
cp_mgmt_service_rpc_facts - Get service-rpc objects facts on Check Point over Web Services API
cp_mgmt_service_sctp - Manages service-sctp objects on Check Point over Web Services API
cp_mgmt_service_sctp_facts - Get service-sctp objects facts on Check Point over Web Services API
cp_mgmt_service_tcp - Manages service-tcp objects on Check Point over Web Services API
cp_mgmt_service_tcp_facts - Get service-tcp objects facts on Check Point over Web Services API
cp_mgmt_service_udp - Manages service-udp objects on Check Point over Web Services API
cp_mgmt_service_udp_facts - Get service-udp objects facts on Check Point over Web Services API
cp_mgmt_session_facts - Get session objects facts on Check Point over Web Services API
cp_mgmt_simple_gateway - Manages simple-gateway objects on Check Point over Web Services API
cp_mgmt_simple_gateway_facts - Get simple-gateway objects facts on Check Point over Web Services API
cp_mgmt_tag - Manages tag objects on Check Point over Web Services API
cp_mgmt_tag_facts - Get tag objects facts on Check Point over Web Services API
cp_mgmt_threat_exception - Manages threat-exception objects on Check Point over Web Services API
cp_mgmt_threat_exception_facts - Get threat-exception objects facts on Check Point over Web Services API
cp_mgmt_threat_indicator - Manages threat-indicator objects on Check Point over Web Services API
cp_mgmt_threat_indicator_facts - Get threat-indicator objects facts on Check Point over Web Services API
cp_mgmt_threat_layer - Manages threat-layer objects on Check Point over Web Services API
cp_mgmt_threat_layer_facts - Get threat-layer objects facts on Check Point over Web Services API
cp_mgmt_threat_profile - Manages threat-profile objects on Check Point over Web Services API
cp_mgmt_threat_profile_facts - Get threat-profile objects facts on Check Point over Web Services API
cp_mgmt_threat_protection_override - Edit existing object using object name or uid.
cp_mgmt_threat_rule - Manages threat-rule objects on Check Point over Web Services API
cp_mgmt_threat_rule_facts - Get threat-rule objects facts on Check Point over Web Services API
cp_mgmt_time - Manages time objects on Check Point over Web Services API
cp_mgmt_time_facts - Get time objects facts on Check Point over Web Services API
cp_mgmt_verify_policy - Verifies the policy of the selected package.
cp_mgmt_vpn_community_meshed - Manages vpn-community-meshed objects on Check Point over Web Services API
cp_mgmt_vpn_community_meshed_facts - Get vpn-community-meshed objects facts on Check Point over Web Services API
cp_mgmt_vpn_community_star - Manages vpn-community-star objects on Check Point over Web Services API
cp_mgmt_vpn_community_star_facts - Get vpn-community-star objects facts on Check Point over Web Services API
cp_mgmt_wildcard - Manages wildcard objects on Check Point over Web Services API
cp_mgmt_wildcard_facts - Get wildcard objects facts on Check Point over Web Services API
cp_publish - All the changes done by this user will be seen by all users only after publish is called.

eos

eos_interfaces - Manages interface attributes of Arista EOS interfaces
eos_l2_interfaces - Manages Layer-2 interface attributes of Arista EOS devices
eos_l3_interfaces - Manages L3 interface attributes of Arista EOS devices.
eos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Arista EOS devices.
eos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Arista EOS devices.
eos_lag_interfaces - Manages link aggregation groups on Arista EOS devices
eos_lldp_global - Manage Global Link Layer Discovery Protocol (LLDP) settings on Arista EOS devices.
eos_lldp_interfaces - Manage Link Layer Discovery Protocol (LLDP) attributes of interfaces on Arista EOS devices.
eos_vlans - Manage VLANs on Arista EOS devices.

eric_eccli

eric_eccli_command - Run commands on remote devices running ERICSSON ECCLI

exos

exos_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on EXOS platforms.

f5

bigip_apm_acl - Manage user-defined APM ACLs
bigip_apm_network_access - Manage APM Network Access resource
bigip_asm_dos_application - Manage application settings for DOS profile
bigip_device_certificate - Manage self-signed device certificates
bigip_firewall_log_profile - Manages AFM logging profiles configured in the system
bigip_firewall_log_profile_network - Configures Network Firewall related settings of the log profile
bigip_firewall_schedule - Manage BIG-IP AFM schedule configurations
bigip_message_routing_peer - Manage peers for routing generic message protocol messages
bigip_message_routing_protocol - Manage generic message parser profile.
bigip_message_routing_route - Manages static routes for routing message protocol messages
bigip_message_routing_router - Manages router profiles for message-routing protocols
bigip_message_routing_transport_config - Manages configuration for an outgoing connection
bigip_remote_user - Manages default settings for remote user accounts on a BIG-IP
bigip_snat_translation - Manage SNAT Translations on a BIG-IP

fortianalyzer

faz_device - Add or remove device

fortios

fortios_alertemail_setting - Configure alert email settings in Fortinet's FortiOS and FortiGate.
fortios_facts - Get facts about fortios devices.
fortios_router_access_list6 - Configure IPv6 access lists in Fortinet's FortiOS and FortiGate.
fortios_router_aspath_list - Configure Autonomous System (AS) path lists in Fortinet's FortiOS and FortiGate.
fortios_router_community_list - Configure community lists in Fortinet's FortiOS and FortiGate.
fortios_router_isis - Configure IS-IS in Fortinet's FortiOS and FortiGate.
fortios_router_key_chain - Configure key-chain in Fortinet's FortiOS and FortiGate.
fortios_router_prefix_list6 - Configure IPv6 prefix lists in Fortinet's FortiOS and FortiGate.
fortios_router_ripng - Configure RIPng in Fortinet's FortiOS and FortiGate.
fortios_router_route_map - Configure route maps in Fortinet's FortiOS and FortiGate.
fortios_router_static6 - Configure IPv6 static routing tables in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_bwl - Configure anti-spam black/white list in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_bword - Configure AntiSpam banned word list in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_dnsbl - Configure AntiSpam DNSBL/ORBL in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_fortishield - Configure FortiGuard - AntiSpam in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_iptrust - Configure AntiSpam IP trust in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_mheader - Configure AntiSpam MIME header in Fortinet's FortiOS and FortiGate.
fortios_spamfilter_options - Configure AntiSpam options in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_802_1X_settings - Configure global 802.1X settings in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_custom_command - Configure the FortiGate switch controller to send custom commands to managed FortiSwitch devices in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_igmp_snooping - Configure FortiSwitch IGMP snooping global settings in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_qos_dot1p_map - Configure FortiSwitch QoS 802.1p in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_qos_ip_dscp_map - Configure FortiSwitch QoS IP precedence/DSCP in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_qos_qos_policy - Configure FortiSwitch QoS policy in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_qos_queue_policy - Configure FortiSwitch QoS egress queue policy in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_quarantine - Configure FortiSwitch quarantine support in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_security_policy_802_1X - Configure 802.1x MAC Authentication Bypass (MAB) policies in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_security_policy_captive_portal - Names of VLANs that use captive portal authentication in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_sflow - Configure FortiSwitch sFlow in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_storm_control - Configure FortiSwitch storm control in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_stp_settings - Configure FortiSwitch spanning tree protocol (STP) in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_switch_group - Configure FortiSwitch switch groups in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_switch_interface_tag - Configure switch object tags in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_switch_log - Configure FortiSwitch logging (logs are transferred to and inserted into FortiGate event log) in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_switch_profile - Configure FortiSwitch switch profile in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_system - Configure system-wide switch controller settings in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_virtual_port_pool - Configure virtual pool in Fortinet's FortiOS and FortiGate.
fortios_switch_controller_vlan - Configure VLANs for switch controller in Fortinet's FortiOS and FortiGate.
fortios_system_affinity_interrupt - Configure interrupt affinity in Fortinet's FortiOS and FortiGate.
fortios_system_affinity_packet_redistribution - Configure packet redistribution in Fortinet's FortiOS and FortiGate.
fortios_system_alarm - Configure alarm in Fortinet's FortiOS and FortiGate.
fortios_system_alias - Configure alias command in Fortinet's FortiOS and FortiGate.
fortios_system_arp_table - Configure ARP table in Fortinet's FortiOS and FortiGate.
fortios_system_auto_install - Configure USB auto installation in Fortinet's FortiOS and FortiGate.
fortios_system_auto_script - Configure auto script in Fortinet's FortiOS and FortiGate.
fortios_system_automation_action - Action for automation stitches in Fortinet's FortiOS and FortiGate.
fortios_system_automation_destination - Automation destinations in Fortinet's FortiOS and FortiGate.
fortios_system_automation_stitch - Automation stitches in Fortinet's FortiOS and FortiGate.
fortios_system_automation_trigger - Trigger for automation stitches in Fortinet's FortiOS and FortiGate.
fortios_system_autoupdate_push_update - Configure push updates in Fortinet's FortiOS and FortiGate.
fortios_system_autoupdate_schedule - Configure update schedule in Fortinet's FortiOS and FortiGate.
fortios_system_autoupdate_tunneling - Configure web proxy tunnelling for the FDN in Fortinet's FortiOS and FortiGate.
fortios_system_cluster_sync - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization in Fortinet's FortiOS and FortiGate.
fortios_system_console - Configure console in Fortinet's FortiOS and FortiGate.
fortios_system_csf - Add this FortiGate to a Security Fabric or set up a new Security Fabric on this FortiGate in Fortinet's FortiOS and FortiGate.
fortios_system_custom_language - Configure custom languages in Fortinet's FortiOS and FortiGate.
fortios_system_ddns - Configure DDNS in Fortinet's FortiOS and FortiGate.
fortios_system_dedicated_mgmt - Configure dedicated management in Fortinet's FortiOS and FortiGate.
fortios_system_dhcp6_server - Configure DHCPv6 servers in Fortinet's FortiOS and FortiGate.
fortios_system_dns_database - Configure DNS databases in Fortinet's FortiOS and FortiGate.
fortios_system_dns_server - Configure DNS servers in Fortinet's FortiOS and FortiGate.
fortios_system_dscp_based_priority - Configure DSCP based priority table in Fortinet's FortiOS and FortiGate.
fortios_system_email_server - Configure the email server used by the FortiGate various things. For example, for sending email messages to users to support user authentication features in Fortinet's FortiOS and FortiGate.
fortios_system_external_resource - Configure external resource in Fortinet's FortiOS and FortiGate.
fortios_system_fips_cc - Configure FIPS-CC mode in Fortinet's FortiOS and FortiGate.
fortios_system_firmware_upgrade - Perform firmware upgrade on FortiGate or FortiOS (FOS) device.
fortios_system_fm - Configure FM in Fortinet's FortiOS and FortiGate.
fortios_system_fortiguard - Configure FortiGuard services in Fortinet's FortiOS and FortiGate.
fortios_system_fortimanager - Configure FortiManager in Fortinet's FortiOS and FortiGate.
fortios_system_fortisandbox - Configure FortiSandbox in Fortinet's FortiOS and FortiGate.
fortios_system_fsso_polling - Configure Fortinet Single Sign On (FSSO) server in Fortinet's FortiOS and FortiGate.
fortios_system_ftm_push - Configure FortiToken Mobile push services in Fortinet's FortiOS and FortiGate.
fortios_system_geoip_override - Configure geographical location mapping for IP address(es) to override mappings from FortiGuard in Fortinet's FortiOS and FortiGate.
fortios_system_gre_tunnel - Configure GRE tunnel in Fortinet's FortiOS and FortiGate.
fortios_system_ha - Configure HA in Fortinet's FortiOS and FortiGate.
fortios_system_ha_monitor - Configure HA monitor in Fortinet's FortiOS and FortiGate.
fortios_system_ipip_tunnel - Configure IP in IP Tunneling in Fortinet's FortiOS and FortiGate.
fortios_system_ips_urlfilter_dns - Configure IPS URL filter DNS servers in Fortinet's FortiOS and FortiGate.
fortios_system_ips_urlfilter_dns6 - Configure IPS URL filter IPv6 DNS servers in Fortinet's FortiOS and FortiGate.
fortios_system_ipv6_neighbor_cache - Configure IPv6 neighbor cache table in Fortinet's FortiOS and FortiGate.
fortios_system_ipv6_tunnel - Configure IPv6/IPv4 in IPv6 tunnel in Fortinet's FortiOS and FortiGate.
fortios_system_link_monitor - Configure Link Health Monitor in Fortinet's FortiOS and FortiGate.
fortios_system_mac_address_table - Configure MAC address tables in Fortinet's FortiOS and FortiGate.
fortios_system_management_tunnel - Management tunnel configuration in Fortinet's FortiOS and FortiGate.
fortios_system_mobile_tunnel - Configure Mobile tunnels, an implementation of Network Mobility (NEMO) extensions for Mobile IPv4 RFC5177 in Fortinet's FortiOS and FortiGate.
fortios_system_nat64 - Configure NAT64 in Fortinet's FortiOS and FortiGate.
fortios_system_nd_proxy - Configure IPv6 neighbor discovery proxy (RFC4389) in Fortinet's FortiOS and FortiGate.
fortios_system_netflow - Configure NetFlow in Fortinet's FortiOS and FortiGate.
fortios_system_network_visibility - Configure network visibility settings in Fortinet's FortiOS and FortiGate.
fortios_system_ntp - Configure system NTP information in Fortinet's FortiOS and FortiGate.
fortios_system_object_tagging - Configure object tagging in Fortinet's FortiOS and FortiGate.
fortios_system_password_policy - Configure password policy for locally defined administrator passwords and IPsec VPN pre-shared keys in Fortinet's FortiOS and FortiGate.
fortios_system_password_policy_guest_admin - Configure the password policy for guest administrators in Fortinet's FortiOS and FortiGate.
fortios_system_pppoe_interface - Configure the PPPoE interfaces in Fortinet's FortiOS and FortiGate.
fortios_system_probe_response - Configure system probe response in Fortinet's FortiOS and FortiGate.
fortios_system_proxy_arp - Configure proxy-ARP in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_admin - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_alertmail - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_auth - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_device_detection_portal - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_ec - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_fortiguard_wf - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_ftp - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_group - Configure replacement message groups in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_http - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_icap - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_image - Configure replacement message images in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_mail - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_nac_quar - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_nntp - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_spam - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_sslvpn - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_traffic_quota - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_utm - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_replacemsg_webproxy - Replacement messages in Fortinet's FortiOS and FortiGate.
fortios_system_resource_limits - Configure resource limits in Fortinet's FortiOS and FortiGate.
fortios_system_session_helper - Configure session helper in Fortinet's FortiOS and FortiGate.
fortios_system_session_ttl - Configure global session TTL timers for this FortiGate in Fortinet's FortiOS and FortiGate.
fortios_system_sflow - Configure sFlow in Fortinet's FortiOS and FortiGate.
fortios_system_sit_tunnel - Configure IPv6 tunnel over IPv4 in Fortinet's FortiOS and FortiGate.
fortios_system_sms_server - Configure SMS server for sending SMS messages to support user authentication in Fortinet's FortiOS and FortiGate.
fortios_system_snmp_community - SNMP community configuration in Fortinet's FortiOS and FortiGate.
fortios_system_snmp_sysinfo - SNMP system info configuration in Fortinet's FortiOS and FortiGate.
fortios_system_snmp_user - SNMP user configuration in Fortinet's FortiOS and FortiGate.
fortios_system_storage - Configure logical storage in Fortinet's FortiOS and FortiGate.
fortios_system_switch_interface - Configure software switch interfaces by grouping physical and WiFi interfaces in Fortinet's FortiOS and FortiGate.
fortios_system_tos_based_priority - Configure Type of Service (ToS) based priority table to set network traffic priorities in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_dns - Configure DNS servers for a non-management VDOM in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_exception - Global configuration objects that can be configured independently for all VDOMs or for the defined VDOM scope in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_link - Configure VDOM links in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_netflow - Configure NetFlow per VDOM in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_property - Configure VDOM property in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_radius_server - Configure a RADIUS server to use as a RADIUS Single Sign On (RSSO) server for this VDOM in Fortinet's FortiOS and FortiGate.
fortios_system_vdom_sflow - Configure sFlow per VDOM to add or change the IP address and UDP port that FortiGate sFlow agents in this VDOM use to send sFlow datagrams to an sFlow collector in Fortinet's FortiOS and FortiGate.
fortios_system_virtual_wire_pair - Configure virtual wire pairs in Fortinet's FortiOS and FortiGate.
fortios_system_vxlan - Configure VXLAN devices in Fortinet's FortiOS and FortiGate.
fortios_system_wccp - Configure WCCP in Fortinet's FortiOS and FortiGate.
fortios_system_zone - Configure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone in Fortinet's FortiOS and FortiGate.
fortios_user_device - Configure devices in Fortinet's FortiOS and FortiGate.
fortios_user_device_access_list - Configure device access control lists in Fortinet's FortiOS and FortiGate.
fortios_user_device_category - Configure device categories in Fortinet's FortiOS and FortiGate.
fortios_user_device_group - Configure device groups in Fortinet's FortiOS and FortiGate.
fortios_user_domain_controller - Configure domain controller entries in Fortinet's FortiOS and FortiGate.
fortios_user_fortitoken - Configure FortiToken in Fortinet's FortiOS and FortiGate.
fortios_user_fsso - Configure Fortinet Single Sign On (FSSO) agents in Fortinet's FortiOS and FortiGate.
fortios_user_fsso_polling - Configure FSSO active directory servers for polling mode in Fortinet's FortiOS and FortiGate.
fortios_user_group - Configure user groups in Fortinet's FortiOS and FortiGate.
fortios_user_krb_keytab - Configure Kerberos keytab entries in Fortinet's FortiOS and FortiGate.
fortios_user_ldap - Configure LDAP server entries in Fortinet's FortiOS and FortiGate.
fortios_user_local - Configure local users in Fortinet's FortiOS and FortiGate.
fortios_user_password_policy - Configure user password policy in Fortinet's FortiOS and FortiGate.
fortios_user_peer - Configure peer users in Fortinet's FortiOS and FortiGate.
fortios_user_peergrp - Configure peer groups in Fortinet's FortiOS and FortiGate.
fortios_user_pop3 - POP3 server entry configuration in Fortinet's FortiOS and FortiGate.
fortios_user_quarantine - Configure quarantine support in Fortinet's FortiOS and FortiGate.
fortios_user_security_exempt_list - Configure security exemption list in Fortinet's FortiOS and FortiGate.
fortios_user_setting - Configure user authentication setting in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_ca - CA certificate in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_crl - Certificate Revocation List as a PEM file in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_local - Local keys and certificates in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_ocsp_server - OCSP server configuration in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_remote - Remote certificate as a PEM file in Fortinet's FortiOS and FortiGate.
fortios_vpn_certificate_setting - VPN certificate setting in Fortinet's FortiOS and FortiGate.
fortios_vpn_l2tp - Configure L2TP in Fortinet's FortiOS and FortiGate.
fortios_vpn_pptp - Configure PPTP in Fortinet's FortiOS and FortiGate.
fortios_vpn_ssl_web_host_check_software - SSL-VPN host check software in Fortinet's FortiOS and FortiGate.
fortios_vpn_ssl_web_realm - Realm in Fortinet's FortiOS and FortiGate.
fortios_vpn_ssl_web_user_bookmark - Configure SSL VPN user bookmark in Fortinet's FortiOS and FortiGate.
fortios_vpn_ssl_web_user_group_bookmark - Configure SSL VPN user group bookmark in Fortinet's FortiOS and FortiGate.
fortios_waf_main_class - Hidden table for datasource in Fortinet's FortiOS and FortiGate.
fortios_waf_signature - Hidden table for datasource in Fortinet's FortiOS and FortiGate.
fortios_waf_sub_class - Hidden table for datasource in Fortinet's FortiOS and FortiGate.
fortios_wanopt_auth_group - Configure WAN optimization authentication groups in Fortinet's FortiOS and FortiGate.
fortios_wanopt_cache_service - Designate cache-service for wan-optimization and webcache in Fortinet's FortiOS and FortiGate.
fortios_wanopt_content_delivery_network_rule - Configure WAN optimization content delivery network rules in Fortinet's FortiOS and FortiGate.
fortios_wanopt_peer - Configure WAN optimization peers in Fortinet's FortiOS and FortiGate.
fortios_wanopt_remote_storage - Configure a remote cache device as Web cache storage in Fortinet's FortiOS and FortiGate.
fortios_wanopt_webcache - Configure global Web cache settings in Fortinet's FortiOS and FortiGate.
fortios_web_proxy_debug_url - Configure debug URL addresses in Fortinet's FortiOS and FortiGate.
fortios_web_proxy_forward_server - Configure forward-server addresses in Fortinet's FortiOS and FortiGate.
fortios_web_proxy_forward_server_group - Configure a forward server group consisting or multiple forward servers. Supports failover and load balancing in Fortinet's FortiOS and FortiGate.
fortios_web_proxy_url_match - Exempt URLs from web proxy forwarding and caching in Fortinet's FortiOS and FortiGate.
fortios_web_proxy_wisp - Configure Wireless Internet service provider (WISP) servers in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_ap_status - Configure access point status (rogue | accepted | suppressed) in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_ble_profile - Configure Bluetooth Low Energy profile in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_bonjour_profile - Configure Bonjour profiles. Bonjour is Apple's zero configuration networking protocol. Bonjour profiles allow APs and FortiAPs to connect to networks using Bonjour in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_3gpp_cellular - Configure 3GPP public land mobile network (PLMN) in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_ip_address_type - Configure IP address type availability in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_nai_realm - Configure network access identifier (NAI) realm in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_network_auth_type - Configure network authentication type in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_roaming_consortium - Configure roaming consortium in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_anqp_venue_name - Configure venue name duple in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_h2qp_conn_capability - Configure connection capability in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_h2qp_operator_name - Configure operator friendly name in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_h2qp_osu_provider - Configure online sign up (OSU) provider list in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_h2qp_wan_metric - Configure WAN metrics in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_hs_profile - Configure hotspot profile in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_icon - Configure OSU provider icon in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_hotspot20_qos_map - Configure QoS map set in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_inter_controller - Configure inter wireless controller operation in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_qos_profile - Configure WiFi quality of service (QoS) profiles in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_timers - Configure CAPWAP timers in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_vap_group - Configure virtual Access Point (VAP) groups in Fortinet's FortiOS and FortiGate.
fortios_wireless_controller_wtp_group - Configure WTP groups in Fortinet's FortiOS and FortiGate.

icx

icx_banner - Manage multiline banners on Ruckus ICX 7000 series switches
icx_command - Run arbitrary commands on remote Ruckus ICX 7000 series switches
icx_config - Manage configuration sections of Ruckus ICX 7000 series switches
icx_copy - Transfer files from or to remote Ruckus ICX 7000 series switches
icx_facts - Collect facts from remote Ruckus ICX 7000 series switches
icx_interface - Manage Interface on Ruckus ICX 7000 series switches
icx_l3_interface - Manage Layer-3 interfaces on Ruckus ICX 7000 series switches
icx_linkagg - Manage link aggregation groups on Ruckus ICX 7000 series switches
icx_lldp - Manage LLDP configuration on Ruckus ICX 7000 series switches
icx_logging - Manage logging on Ruckus ICX 7000 series switches
icx_ping - Tests reachability using ping from Ruckus ICX 7000 series switches
icx_static_route - Manage static IP routes on Ruckus ICX 7000 series switches
icx_system - Manage the system attributes on Ruckus ICX 7000 series switches
icx_user - Manage the user accounts on Ruckus ICX 7000 series switches.
icx_vlan - Manage VLANs on Ruckus ICX 7000 series switches

ios

ios_interfaces - Manages interface attributes of Cisco IOS network devices
ios_l2_interfaces - Manage Layer-2 interface on Cisco IOS devices.
ios_l3_interfaces - Manage Layer-3 interface on Cisco IOS devices.
ios_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Cisco IOS devices.
ios_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) on Cisco IOS devices interface.
ios_lag_interfaces - Manage Link Aggregation on Cisco IOS devices.
ios_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on IOS platforms.
ios_lldp_interfaces - Manage link layer discovery protocol (LLDP) attributes of interfaces on Cisco IOS devices.
ios_vlans - Manage VLANs on Cisco IOS devices.

iosxr

iosxr_interfaces - Manage interface attributes on Cisco IOS-XR network devices
iosxr_l2_interfaces - Manage Layer-2 interface on Cisco IOS-XR devices
iosxr_l3_interfaces - Manage Layer-3 interface on Cisco IOS-XR devices.
iosxr_lacp - Manage Global Link Aggregation Control Protocol (LACP) on IOS-XR devices.
iosxr_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on IOS-XR devices.
iosxr_lag_interfaces - Manages attributes of LAG/Ether-Bundle interfaces on IOS-XR devices.
iosxr_lldp_global - Manage Global Link Layer Discovery Protocol (LLDP) settings on IOS-XR devices.
iosxr_lldp_interfaces - Manage Link Layer Discovery Protocol (LLDP) attributes of interfaces on IOS-XR devices.

junos

junos_interfaces - Manages interface attributes of Juniper Junos OS network devices.
junos_l2_interfaces - Manage Layer-2 interface on Juniper JUNOS devices
junos_l3_interfaces - Manage Layer 3 interface on Juniper JUNOS devices
junos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Juniper Junos devices
junos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Juniper JUNOS devices.
junos_lag_interfaces - Manage Link Aggregation on Juniper JUNOS devices.
junos_lldp_global - Manage link layer discovery protocol (LLDP) attributes on Juniper JUNOS devices.
junos_lldp_interfaces - Manage link layer discovery protocol (LLDP) attributes of interfaces on Juniper JUNOS devices
junos_vlans - Create and manage VLAN configurations on Junos OS

meraki

meraki_firewalled_services - Edit firewall policies for administrative network services
meraki_malware - Manage Malware Protection in the Meraki cloud
meraki_mx_l7_firewall - Manage MX appliance layer 7 firewalls in the Meraki cloud
meraki_nat - Manage NAT rules in Meraki cloud
meraki_webhook - Manage webhooks configured in the Meraki cloud

netvisor

pn_fabric_local - CLI command to modify fabric-local
pn_ipv6security_raguard - CLI command to create/modify/delete ipv6security-raguard
pn_ipv6security_raguard_port - CLI command to add/remove ipv6security-raguard-port
pn_ipv6security_raguard_vlan - CLI command to add/remove ipv6security-raguard-vlan
pn_log_audit_exception - CLI command to create/delete an audit exception
pn_prefix_list - CLI command to create/delete prefix-list
pn_vrouter_bgp - CLI command to add/modify/remove vrouter-bgp
pn_vrouter_loopback_interface - CLI command to add/remove vrouter-loopback-interface
pn_vrouter_ospf - CLI command to add/remove vrouter-ospf
pn_vrouter_packet_relay - CLI command to add/remove vrouter-packet-relay
pn_vtep - CLI command to create/delete vtep

nxos

nxos_bfd_global - Bidirectional Forwarding Detection (BFD) global-level configuration
nxos_bfd_interfaces - Manages BFD attributes of nxos interfaces.
nxos_interfaces - Manages interface attributes of NX-OS Interfaces
nxos_l2_interfaces - Manages Layer-2 Interfaces attributes of NX-OS Interfaces
nxos_l3_interfaces - Manages Layer-3 Interfaces attributes of NX-OS Interfaces
nxos_lacp - Manage Global Link Aggregation Control Protocol (LACP) on Cisco NX-OS devices.
nxos_lacp_interfaces - Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Cisco NX-OS devices.
nxos_lag_interfaces - Manages link aggregation groups of NX-OS Interfaces
nxos_lldp_global - Configure and manage Link Layer Discovery Protocol(LLDP) attributes on NX-OS platforms.
nxos_telemetry - Telemetry Monitoring Service (TMS) configuration
nxos_vlans - Create VLAN and manage VLAN configurations on NX-OS Interfaces

onyx

onyx_qos - Configures QoS
onyx_traffic_class - Configures Traffic Class
onyx_wjh - Configure what-just-happend module

vyos

vyos_interfaces - Manages interface attributes of VyOS network devices.
vyos_l3_interfaces - Manages L3 interface attributes of VyOS network devices.
vyos_lag_interfaces - Manages attributes of link aggregation groups on VyOS network devices.
vyos_lldp_global - Manage link layer discovery protocol (LLDP) attributes on VyOS devices..
vyos_lldp_interfaces - Manages attributes of lldp interfaces on VyOS devices.

Notification

snow_record_find - Search for multiple records from ServiceNow

Remote Management

cpm

cpm_serial_port_config - Set Serial port parameters in WTI OOB and PDU devices
cpm_serial_port_info - Get Serial port parameters in WTI OOB and PDU devices

dellemc

ome_device_info - Retrieves the information about Device.

ucs

ucs_vlan_find - Find VLANs on Cisco UCS Manager

Source Control

gitlab_project_variable - Creates/updates/deletes GitLab Projects Variables

Storage

netapp

na_ontap_firmware_upgrade - NetApp ONTAP firmware upgrade for SP, shelf, ACP, and disk.
na_ontap_info - NetApp information gatherer
na_ontap_ipspace - NetApp ONTAP Manage an ipspace
na_ontap_kerberos_realm - NetApp ONTAP vserver nfs kerberos realm
na_ontap_ldap - NetApp ONTAP LDAP
na_ontap_ldap_client - NetApp ONTAP LDAP client
na_ontap_ndmp - NetApp ONTAP NDMP services configuration
na_ontap_object_store - NetApp ONTAP manage object store config.
na_ontap_ports - NetApp ONTAP add/remove ports
na_ontap_qos_adaptive_policy_group - NetApp ONTAP Adaptive Quality of Service policy group.
na_ontap_volume_autosize - NetApp ONTAP manage volume autosize
na_ontap_vscan - NetApp ONTAP Vscan enable/disable.
na_ontap_vserver_cifs_security - NetApp ONTAP vserver CIFS security modification
netapp_e_drive_firmware - NetApp E-Series manage drive firmware
netapp_e_firmware - NetApp E-Series manage firmware.

purestorage

purefa_alert - Configure Pure Storage FlashArray alert email settings
purefa_arrayname - Configure Pure Storage FlashArray array name
purefa_banner - Configure Pure Storage FlashArray GUI and SSH MOTD message
purefa_connect - Manage replication connections between two FlashArrays
purefa_info - Collect information from Pure Storage FlashArray
purefa_phonehome - Enable or Disable Pure Storage FlashArray Phonehome
purefa_smtp - Configure FlashArray SMTP settings
purefa_snmp - Configure FlashArray SNMP Managers
purefa_syslog - Configure Pure Storage FlashArray syslog settings
purefa_vg - Manage volume groups on Pure Storage FlashArrays
purefb_info - Collect information from Pure Storage FlashBlade
purefb_ra - Enable or Disable Pure Storage FlashBlade Remote Assist
purefb_smtp - Configure SMTP for Pure Storage FlashBlade

vexata

vexata_eg - Manage export groups on Vexata VX100 storage arrays

System

listen_ports_facts - Gather facts on processes listening on TCP and UDP ports.
syspatch - Manage OpenBSD system patches

Web Infrastructure

nginx_status_info - Retrieve information on nginx status.

Windows

win_netbios - Manage NetBIOS over TCP/IP settings on Windows.

Files

CHANGELOG-v2.9.rst

Latest commit

History

CHANGELOG-v2.9.rst

File metadata and controls

Ansible 2.9 "Immigrant Song" Release Notes

v2.9.9

Release Summary

Bugfixes

v2.9.8

Release Summary

Minor Changes

Bugfixes

v2.9.7

Release Summary

Minor Changes

Removed Features (previously deprecated)

Bugfixes

v2.9.6

Release Summary

Minor Changes

Bugfixes

v2.9.5

Release Summary

Minor Changes

Deprecated Features

Bugfixes

v2.9.4

Release Summary

Bugfixes

v2.9.3

Release Summary

Minor Changes

Bugfixes

New Plugins

Netconf

v2.9.2

Release Summary

Minor Changes

Bugfixes

v2.9.1

Release Summary

Minor Changes

Bugfixes

v2.9.0

Release Summary

Minor Changes

Deprecated Features

Removed Features (previously deprecated)

Bugfixes

New Plugins

Cliconf

Httpapi

Lookup

New Modules

Cloud

amazon

azure

cloudstack

digital_ocean

google

hcloud

online

openstack

ovirt

scaleway

vmware

vultr

Crypto

entrust

Database

mysql

postgresql

Monitoring

zabbix

Net Tools

Network

aci

avi