Skip to content

0.4.3

Pre-release
Pre-release
Compare
Choose a tag to compare
@alessfg alessfg released this 06 Apr 10:50
· 204 commits to main since this release
0.4.3
1a06e5e
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

BREAKING CHANGES:

The nginx_app_protect_version variable has been removed, as it cannot be implemented fully on all platforms.

FEATURES:

  • Add support for Dependabot.
  • Replace Ansible community distribution with Ansible base and add the necessary extra collections as a dependency requirement. For reference, these are: 
    ---
collections:
  - name: community.general
    version: 3.0.0
  - name: ansible.posix
    version: 1.2.0
  • Explicitly list Jinja2 2.11.3 as a requirement, as well as detail the minimum supported version (2.11.x).
  • You can now specify an nginx_app_protect_repository for NGINX App Protect.
  • You can now specify an nginx_app_protect_security_updates_repository for NGINX App Protect signatures and threat campaigns packages.
  • You can now specify NGINX App Protect signatures and threat campaigns package versions using the nginx_app_protect_signatures_version and nginx_app_protect_threat_campaigns_version variables.

ENHANCEMENTS:

  • Support for NGINX App Protect 3.1 -- Adds support for Debian 10, Ubuntu 20.04 and Alpine 3.10.
  • Add test coverage for new platforms and testing scenario.
  • Consolidate dependencies into a single tasks file.
  • Remove requirement for package_facts module when using this role.
  • Update Signatures repository URL.
  • Update Ansible base to 2.10.7, Ansible Lint to 5.0.6, Molecule to 3.3.0, yamllint to 1.26.0 and Docker Python SDK to 4.4.4.
  • Specify GitHub actions Ubuntu release.
  • Minor GitHub template tweaks, including the creation of a SECURITY doc.
  • Only run GitHub actions Galaxy CI/CD workflow when a new release is published.

KNOWN ISSUES:

Service manager support is not included in NGINX App Protect for Alpine. When using this role to install NGINX App Protect on Alpine, you will need to start the NGINX App Protect processes then reload NGINX Plus yourself in order for App Protect to function. You can use commands similar to what are contained in the entrypoint.sh script in the NGINX App Protect Administration Guide to accomplish this.

Assets 2
Loading