-
Sat Aug 10 2024 Fraser Tweedale <frase@frase.id.au> 0.18-1
- test: use RHEL with golang 1.21 for backend vm
- test: fix idm-domains-backend-deploy after RBAC changes
- chore: supress mypy errors in generated stubs
- fix(HMS-4323): print hcc reponse headers in debug
- fix(HMS-4323): print request-id header on auto_enrollment error
- fix(HMS-4128): build container
- fix: Generic proxy case, formatting
- test: explicitely disable ipa-hcc-auto-enrollment in hmsidm-rhel93
- test: print enrollment logs before tests
- ci: fix artifacts upload
- ci: make job metadata collect/teardown more robust
- feat(HMS-4049): enable ipa-hcc-auto-enrollment.service via preset
- fix: proxy mapping for stage
- Use sysusers to create system users
- Tests: Fix eslint and RHEL 8 enrollment problems
-
Sun Apr 07 2024 Christian Heimes <cheimes@redhat.com> 0.17-2
- ipa-hcc-client depends on ipa-client again
-
Sat Apr 06 2024 Christian Heimes <cheimes@redhat.com> 0.17-1
- Don't install /etc/ipa/hcc.conf by default
- Refactor: Client scripts now use hccplatform
- refactor: Move all server code to ipahcc.server
- Feat: Server features detect Console from rhsm.conf
- feat: SELinux policy for ipa-hcc-server
- Fix EPEL 8 build
-
Wed Mar 27 2024 Christian Heimes <cheimes@redhat.com> 0.16-1
- HMS-3840 feat: Detect configuration from rhsm.conf
- ipahcc-stage-console now configures proxy
- HMS-3821 feat: auto enrollment can set DNS resolver
- More Fedora packaging fixes
- Implement testing with Stage Console APIs
- Implement console proxy settings
-
Wed Mar 20 2024 Christian Heimes <cheimes@redhat.com> 0.15-1
- add CONTRIBUTING.md guidelines
- Fedora packaging fixes
-
Tue Mar 19 2024 Christian Heimes <cheimes@redhat.com> 0.14-1
- Prepare ipa-hcc for Fedora packaging
- infra: Add helper for stage console testing
- Fix: pylint warning R1737
- Fix: Typo in ipa-hcc-auto-enrollment sysconfig
- Fix various infra issues
- fix HMS-2066: Add timeout to confirmation prompt
- test: Test on RHEL 9.3 / 8.9
-
Tue Dec 05 2023 Christian Heimes <cheimes@redhat.com> 0.13-1
- feat: Enhance reporting and logging
- feat: Check remote status with HCC
- refactor: Use context="hcc" in IPA API
- infra: Log JSON error information
- infra: Refresh cache and config file
- fix: Use LDAP for public JWKs
- refactor: Run ipa-client-automount
- fix: Replace legacy with modern Insights API
- fix: Limit hostname to 63 characters
- fix: Use UEP CA to access prod cert-api
- fix: Don't create global DNSResolver
- feat: Add ipahcc-client-prepare
- fix: Fake headers can use org_id/cn from RHSM cert
- refactor: Change to --idmsvc-api-url
- HMS-2348 feat: Add ephemeral fake header to auto-enrollment
- test: Run CI on Fedora 39, drop 37
- fix: Better error reporting for missing RHSM cert
- fix: Fix typo fdqn -> fqdn
- Fix: Keycloak SSO provider requires openid scope
- doc: Add test instructions and hcc.conf info
- HMS-2814 feat: IPA client installer and automount
- test: idm-ci now requires local cloud auth
- feat: Add sso.rh.c IdP provider definitions
- HMS-2694 fix: Update JWST issuer and docs
- HMS-2595 feat: Extend ipa-hcc to retrieve+store JWKs
- test: Fix and improve coverage
- fix: Update spec file URL
- fix: Update git repo URL
- HMS-2594: IPA plugin for HCC JWKs
- test: Do not install KRA
- HMS-2532 fix: attach to api commit
- HMS-2491 test: Enable backend tests again
- HMS-2491 test: Allow backend test to fail
- HMS-2491 refactor: Separate GET signing keys
- HMS-2491 test: Update test infra for DRT
- HMS-2491 feat: Remove old domain registration
- HMS-2491 feat: Update for domain token workflow
- refactor: Remove env patching
- HMS-2446 feat: New domain reg token
- fix: Use gssproxy client keytab
- HMS-2446 refactor: Move IPA API to WSGI framework
- tests: Add test for deserialize()
- tests: Check that serializing compact form gives a ValueError
- feat: Add additional check json deserialization and update docs
- feat: Rename deserialize_json to deserialize
- feat: Do not allow compact serialization for MultiJWST
- test: Enable mypy checker for tests
- feat: Add domain token to mockapi
- test: Run CI with Fedora 37 and 38
- HMS-2070 feat: Remove D-Bus service
-
Mon Aug 14 2023 Christian Heimes <cheimes@redhat.com> 0.12-1
- fix: use new Quay org for CI images
- HMS-1789 tests: use @podengo/ipa-hcc COPR
- fix: Support latest tox on Fedora 38
- fix: Allow non-compact JWT serialization
- fix: use OpenAPI from public GitHub repo
- test: Build SRPM and RPMs on GHA
- test: update packages in containers
- fix: Don't hard-code inventory url
- doc: Add documentation for developers
- HMS-2195: fix: Use idmsvc as API slug
- feat: update locations
- fix: Fix typo in automember rule
- HMS-2147 fix: use HostConfIpa schema in HostConfResponse
- refactor: Use setuptools to install Python code
- fix: store public JWK in separate file
- HMS-1857 feat: signed assertion for host registration
- HMS-1857 feat: Add multi-sig and host token
- HMS-1289 fix: Remove inventory_id from HostConfResponse
- HMS-1857 feat: Add JWK abstraction and helpers
- feat: Update JSON schema from latest OpenAPI
- HMS-2038 test: Smoke tests with idm-domains-backend
- HMS-2068: Drop support for RHEL without PKINIT
-
Mon Jul 03 2023 Christian Heimes <cheimes@redhat.com> 0.11-1
- HMS-2052 build: Use OpenAPI schema from idm-domains-api
- HMS-2038 test: catch metadata misconfiguration early
- fix: Move rpkg output out of .tox directory
- HMS-2041 fix: Represent org id as string, not int
- HMS-2038 test: Improve testing with backend compose
- HMS-1991 fix: Tighten OpenAPI schema
- HMS-2008 feat: Adopt JSON API error objects
- Add definitions for missing JSON schemas
- HMS-1991 feat: Generate schema JSON files from OpenAPI
- HMS-1991: Refactor JSON schema
- Add project and build definitions to pyproject.toml
- HMS-1898: Fix and validate error response
- HMS-1975: Remove check-host API endpoint
- Improve CI and test with Python 3.9 (RHEL 9)
- register: prompt for confirmation
- HMS-1926: Friendly D-Bus error message
- ipa-hcc CLI: print human-readable messages
- Document how to configure for ephemeral
- logging: pretty print API response
- Reconcile JSON schema with idm-domains-backend OpenAPI
- Add verbose logging to ipa-hcc
- Prepare release 0.11
- Ephemeral env support with fake headers
- Improve Makefile and tox runner
- yamllint: don't apply truthy test to map keys
- Rename field 'cacerts' to 'ca_certs'
- Reconcile domain response schema
- Reconcile register/update domain schema
- Document how to install build and test deps
- HMS-1898 Reconcile error result schema
- Ruff: silence F811 redefined-while-unused
-
Wed May 17 2023 Christian Heimes <cheimes@redhat.com> 0.10-1
- [HMS-1788] Add simple GH CI workflow
- [HMS-1779] Move secrets and settings to CI/CD variables
- [HMS-1645] Replace bandit/flake8 with ruff linter
- Add infrastructure for mypy type checks
- [HMS-1645] Drop IPA 4.6 compatibility workarounds
- [HMS-1645] Drop Python 2 compatibility
- Run integration tests in FIPS mode
- [HMS-1645] Drop support for RHEL 7