Release 1.1.0 - #24
Merged
Merged
Conversation
steven-schattenberg-itential
commented
Jul 28, 2026
steven-schattenberg-itential
commented
Contributor
- New: pre-flight verification playbook (verify.yml) — checks OS, hardware specs, and TLS file validity before install/upgrade.
- New: post-deployment TLS certification playbook (certify.yml) — live mTLS handshake tests across client/server/runner/Gateway Manager connections, with a generated report. (Went through a rename along the way: certify-iag5 → certify, with the old TLS-only checks becoming certify-tls.)
- New: outbound proxy support for the Gateway Manager connection (gateway_server_connect_proxy_* vars).
- Fix: missing directory default — adds a default value and directory-creation step that could leave install_gateway.yml failing when unset, plus a small systemd unit fix.
- Python 3.11 added to the default install package list.
- GATEWAY_CONFIG and ~/.local/bin added to the service's PATH/env.
- Docs/housekeeping: new CLAUDE.md, README rewrite, docs/reference_guide.md corrections and additions (confirmed aligned with actual role defaults), new docs/verify.md and docs/certify-tls.md guides, example inventory updates.
Updated env vars for user
* init commit of the verify and rename of cerify certs to certify certs
Adds a forensic installation certification playbook for IAG5 that captures service state, config properties, TLS file details, runtime versions, host info, and network connectivity as a markdown receipt. Changes: - playbooks/certify-iag5.yml: new playbook running forensic + TLS certification with independent tags (certify-install, certify, certify-iag5) - playbooks/site.yml: replace certify with certify-iag5 as final step - roles/gateway_server/tasks/certify-iag5.yml: forensic cert for server/runner - roles/gateway_server/templates/certify-iag5-server-report.md.j2: report template - roles/gateway_client/tasks/certify-iag5.yml: forensic cert for client - roles/gateway_client/templates/certify-iag5-client-report.md.j2: report template - roles/gateway_server/tasks/certify.yml: standardise TLS report filename - roles/gateway_client/tasks/certify.yml: standardise TLS report filename - roles/certify_common/defaults/main.yml: standardise TLS report filename - roles/certify_common/tasks/certify_connect_server_to_gwm.yml: fix CHECK 17 to loop over all GWM hosts in connect.hosts and correctly parse host:port for multi-host values Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Adds documentation for the certify-iag5 and certify playbooks including tag reference, report output locations, and how certification integrates with site.yml.
* Initial version of proxy support * Alway write sensitive configs to env file * Update reference guide
…ertify-tls - playbooks/certify-iag5.yml → certify.yml (replaces TLS-only playbook) - playbooks/certify.yml → certify-tls.yml (TLS-only playbook) - roles/gateway_server/tasks/certify-iag5.yml → certify.yml - roles/gateway_server/tasks/certify.yml → certify-tls.yml - roles/gateway_client/tasks/certify-iag5.yml → certify.yml - roles/gateway_client/tasks/certify.yml → certify-tls.yml - docs/certify.md → certify-tls.md Update all internal tasks_from references, import_playbook in site.yml, playbook command examples in README and docs/certify-tls.md.
certify and certify-tls are now run explicitly by the operator after deployment and do not execute automatically as part of site.yml. Update README to remove the automatic-execution description and the --tags certify-iag5 site.yml example.
Add certify-iag5 installation certification playbook
* Add default for missing dir, adjust systemd file * Updates to reference guide
steven-schattenberg-itential
requested review from
Amunagala-itential,
Madias2222,
Nick-Andreano and
kvelarde-itential
July 28, 2026 20:33
kvelarde-itential
previously requested changes
Jul 28, 2026
* Add default for missing dir, adjust systemd file * Updates to reference guide * lint issue
* Add default for missing dir, adjust systemd file * Updates to reference guide * lint issue * Add default for missing dir, adjust systemd file * Correct gitignore, readd necessary file
kvelarde-itential
self-requested a review
July 31, 2026 20:18
kvelarde-itential
approved these changes
Jul 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.