Documentation

2. Release Notes

The following list summarizes the additions, changes, and modifications which were made to Ansible Tower 3.0.1.

2.1. Ansible Tower Version 3.0.1

  • Added a stock schedule job for the ‘Cleanup Fact Details’ management job
  • Fixed an issue with inventory syncs using Red Hat Satellite 6 credentials
  • Fixed an issue which incorrectly allowed users assigned to a system auditor role to be able to escalate privileges to teams
  • Fixed an issue with Webhook notifications where the content-type was being set incorrectly
  • Fixed an issue where canceling a new job failed to change state from “new” to “canceled”
  • Fixed an upgrade and credential migration issue which involved null inventory fields in job templates
  • Fixed an upgrade and migration issue where hosts which had previously been deleted were not skipped during the upgrade process
  • Fixed an upgrade and migration issue where job templates linked to deleted inventories caused migrations to fail
  • Fixed an upgrade and migration issue where job templates without inventories caused migrations to fail
  • Fixed an error related to the logging of RBAC migration data which caused installations to fail
  • Fixed an issue related to license checks
  • Fixed other various issues related to upgrading and migration
  • Fixed the need for elevated permissions to make changes to job templates under some scenarios
  • Fixed an issue where Organization-level admins could not edit scan jobs that were created prior to upgrading to Tower 3.0
  • Fixed an issue regarding Software Collections (SCL) installation on EL6
  • Fixed a problem with subsequent logins after upgrading to Tower 3.0 when using Google OAuth or SAML authentication
  • Discovered an issue with MS Azure inventory imports using new-style credentials being unsupported on distributions that ship python-2.7 (e.g. not EL6)
  • Updated the UI to display new jobs in the Jobs overview screen and added a cancellation method for these new jobs

2.2. Ansible Tower Version 3.0

  • Added a notifications system for Tower which supports services like Slack, HipChat, IRC, etc.

  • Added support for the new Azure inventory system and the latest Ansible Azure modules (legacy Azure inventory and credentials are still supported)

    • Azure inventory imports using new-style credentials are only supported on distributions that ship python-2.7 (e.g. not EL6)

  • Added support for keystone v3 which supports the latest Openstack versions

  • Added counts and more detail to Organization endpoints (API)

  • Added prompting for Job Templates

  • Added labels for Job Templates

  • Added support for user customization as Ansible tasks now run in their own environment

  • Added support for new Ansible Network Credentials

  • Added inventory support for Red Hat Cloudforms and Red Hat Satellite 6

  • Added SUSE, OpenSuse, and Debian support for scan jobs

  • Added a link to the schedule in the job detail view if the job was started as a result of a schedule

  • Added survey spec management without requiring that surveys be enabled on job templates

  • Added additional strict extra_vars validation. extra_vars passed to the job launch API are only honored if one of the following is true:

    • they correspond to variables in an enabled survey
    • ask_variables_on_launch is set to True

  • Added a deprecation notice for Ubuntu 12 and RHEL 6

  • Changed how Projects are linked so that they now tie singularly to an Organization

  • Changed how system tracking and scan data are stored–now in postgres. MongoDB dependency removed.

  • Discovered an issue with ECDSA credentials–if your Tower server has a version of OpenSSH that predates 5.7, jobs will fail when launched jobs with ECDSA credentials

  • Fixed issues with scan jobs on RHEL5

  • Fixed an issue with the websocket service when Tower is run on CentOS or RHEL 7.2

  • Fixed issues with Ansible’s no_log causing errors or not hiding data when running jobs

  • Fixed the way setting a license is done so that it propagates to standby Tower nodes in an HA configuration

  • Fixed GCE credential handling and inventory filtering

  • Improved (through a complete rewrite to expand and simplify) the Role-Based Access Control system in Tower

  • Improved job templates so that multiple invocations of the same job template will only block if the job templates used the same inventory

  • Improved the setup playbook so that it now hides potentially sensitive information from stdout and the setup log

  • Improved the Setup process now supports installing and configuring postgres on a remote system

  • Removed MongoDB and changed view queries to use a Postgres implementation

  • Removed soft-deletes: Tower now permanently deletes removed objects and the utilities to manage the cleanup of those soft-deleted objects have been removed

  • Removed Munin monitoring

  • Updated the look and feel of the entire Tower UI for a more approachable and intuitive user experience

  • Updated and simplifed the Tower setup process so that new Tower installs are now preloaded with Organization, Inventory, Project, and Job Template demo data

  • Updated the setup process to support installing and configuring Postgres on a remote system

  • Updated dependencies

  • Updated Red Hat Enterprise Linux 6/CentOS 6 to use python 2.7 (for Tower only)

  • Updated the minimum open file descriptor check and configuration by raising it from 1024 to 4096

For older version of the release notes, as well as other reference materials, refer to the Ansible Tower Release Notes.