Documentation

1. Release Notes for Ansible Tower Version 3.0.1

1.1. Ansible Tower Version 3.0.1

  • Added a stock schedule job for the ‘Cleanup Fact Details’ management job
  • Fixed an issue with inventory syncs using Red Hat Satellite 6 credentials
  • Fixed an issue which incorrectly allowed users assigned to a system auditor role to be able to escalate privileges to teams
  • Fixed an issue with Webhook notifications where the content-type was being set incorrectly
  • Fixed an issue where canceling a new job failed to change state from “new” to “canceled”
  • Fixed an upgrade and credential migration issue which involved null inventory fields in job templates
  • Fixed an upgrade and migration issue where hosts which had previously been deleted were not skipped during the upgrade process
  • Fixed an upgrade and migration issue where job templates linked to deleted inventories caused migrations to fail
  • Fixed an upgrade and migration issue where job templates without inventories caused migrations to fail
  • Fixed an error related to the logging of RBAC migration data which caused installations to fail
  • Fixed an issue related to license checks
  • Fixed other various issues related to upgrading and migration
  • Fixed the need for elevated permissions to make changes to job templates under some scenarios
  • Fixed an issue where Organization-level admins could not edit scan jobs that were created prior to upgrading to Tower 3.0
  • Fixed an issue regarding Software Collections (SCL) installation on EL6
  • Fixed a problem with subsequent logins after upgrading to Tower 3.0 when using Google OAuth or SAML authentication
  • Discovered an issue with MS Azure inventory imports using new-style credentials being unsupported on distributions that ship python-2.7 (e.g. not EL6)
  • Updated the UI to display new jobs in the Jobs overview screen and added a cancellation method for these new jobs

1.2. Ansible Tower Version 3.0

  • Added a notifications system for Tower which supports services like Slack, HipChat, IRC, etc.

  • Added support for the new Azure inventory system and the latest Ansible Azure modules (legacy Azure inventory and credentials are still supported)

    • Azure inventory imports using new-style credentials are only supported on distributions that ship python-2.7 (e.g. not EL6)
  • Added support for keystone v3 which supports the latest Openstack versions

  • Added counts and more detail to Organization endpoints (API)

  • Added prompting for Job Templates

  • Added labels for Job Templates

  • Added support for user customization as Ansible tasks now run in their own environment

  • Added support for new Ansible Network Credentials

  • Added inventory support for Red Hat Cloudforms and Red Hat Satellite 6

  • Added SUSE, OpenSuse, and Debian support for scan jobs

  • Added a link to the schedule in the job detail view if the job was started as a result of a schedule

  • Added survey spec management without requiring that surveys be enabled on job templates

  • Added additional strict extra_vars validation. extra_vars passed to the job launch API are only honored if one of the following is true:

    • they correspond to variables in an enabled survey
    • ask_variables_on_launch is set to True
  • Added a deprecation notice for Ubuntu 12 and RHEL 6

  • Changed how Projects are linked so that they now tie singularly to an Organization

  • Changed how system tracking and scan data are stored–now in postgres. MongoDB dependency removed.

  • Discovered an issue with ECDSA credentials–if your Tower server has a version of OpenSSH that predates 5.7, jobs will fail when launched jobs with ECDSA credentials

  • Fixed issues with scan jobs on RHEL5

  • Fixed an issue with the websocket service when Tower is run on CentOS or RHEL 7.2

  • Fixed issues with Ansible’s no_log causing errors or not hiding data when running jobs

  • Fixed the way setting a license is done so that it propagates to standby Tower nodes in an HA configuration

  • Fixed GCE credential handling and inventory filtering

  • Improved (through a complete rewrite to expand and simplify) the Role-Based Access Control system in Tower

  • Improved job templates so that multiple invocations of the same job template will only block if the job templates used the same inventory

  • Improved the setup playbook so that it now hides potentially sensitive information from stdout and the setup log

  • Improved the Setup process now supports installing and configuring postgres on a remote system

  • Removed MongoDB and changed view queries to use a Postgres implementation

  • Removed soft-deletes: Tower now permanently deletes removed objects and the utilities to manage the cleanup of those soft-deleted objects have been removed

  • Removed Munin monitoring

  • Updated the look and feel of the entire Tower UI for a more approachable and intuitive user experience

  • Updated and simplifed the Tower setup process so that new Tower installs are now preloaded with Organization, Inventory, Project, and Job Template demo data

  • Updated the setup process to support installing and configuring Postgres on a remote system

  • Updated dependencies

  • Updated Red Hat Enterprise Linux 6/CentOS 6 to use python 2.7 (for Tower only)

  • Updated the minimum open file descriptor check and configuration by raising it from 1024 to 4096