simp-beaker-helpers 3.1.0 → 3.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +9 -0
- data/lib/simp/beaker_helpers/version.rb +1 -1
- data/lib/simp/beaker_helpers.rb +7 -0
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1f747ed7e2c82094df9bdfee076de2354e8e40c51b5671d5003dd939a3c97dca
|
|
4
|
+
data.tar.gz: 11ce7874aa49de3e2f389efdb1abdfd3d96c356a40097ed371f09b810db49c6e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 87afefb2d6a5936c8b2e4f598549079de3a8e158b9f05a2e1d01005be47d4481b8b94af4dc8083a6dfb36a2a4e0eccc8e9df100ae84cd66461f65792a158619f
|
|
7
|
+
data.tar.gz: c5897a3b95fe0978543ba98476a77f77e01aaeba0cec1984b8d0ef7203f3b3fefdad2811d42ade13caa6a5391eb7515984c93a35791c302726f884cc50780baf
|
data/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,12 @@
|
|
|
1
|
+
### 3.1.1 / 2026-07-03
|
|
2
|
+
* Fixed:
|
|
3
|
+
* `run_fake_pki_ca_on` now runs `ensure_beaker_ip_on` before collecting
|
|
4
|
+
the IP addresses embedded in certificate subjectAltNames, so certs match
|
|
5
|
+
the corrected (Beaker-recorded) addresses on SUTs where the static
|
|
6
|
+
private-network IP was never applied (e.g. EL10 under Vagrant). Without
|
|
7
|
+
this, IKE peer IDs no longer match the cert SANs after remediation and
|
|
8
|
+
strict validators (libreswan 5) reject authentication.
|
|
9
|
+
|
|
1
10
|
### 3.1.0 / 2026-07-02
|
|
2
11
|
* Added:
|
|
3
12
|
* `ensure_beaker_ip_on`: detect SUTs whose recorded `host[:ip]` was never
|
data/lib/simp/beaker_helpers.rb
CHANGED
|
@@ -976,6 +976,13 @@ module Simp::BeakerHelpers # rubocop:disable Style/OneClassPerFile
|
|
|
976
976
|
# Ensure that all interfaces are active prior to collecting data
|
|
977
977
|
activate_interfaces(host)
|
|
978
978
|
|
|
979
|
+
# Ensure the Beaker-recorded IP is actually applied before it is
|
|
980
|
+
# embedded in certificate subjectAltNames (on EL10 under Vagrant the
|
|
981
|
+
# static private-network IP is silently never applied and the
|
|
982
|
+
# interface falls back to DHCP; certs cut from the DHCP address no
|
|
983
|
+
# longer match the peer IDs once the address is corrected)
|
|
984
|
+
ensure_beaker_ip_on(host)
|
|
985
|
+
|
|
979
986
|
networking_fact = pfact_on(host, 'networking')
|
|
980
987
|
if networking_fact && networking_fact['interfaces']
|
|
981
988
|
networking_fact['interfaces'].each_value do |data|
|