diff --git a/CHANGELOG.md b/CHANGELOG.md index bedb997ee3..1ed1ca2bad 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -82,6 +82,7 @@ Ansible Changes By Release - TODO: build upon this to add many features detailed in ansible-config proposal https://github.com/ansible/proposals/issues/35 * Windows modules now support the use of multiple shared module_utils files in the form of Powershell modules (.psm1), via `#Requires -Module Ansible.ModuleUtils.Whatever.psm1` * Python module argument_spec now supports custom validation logic by accepting a callable as the `type` argument. +* Windows become_method: runas is no longer marked `experimental` * Windows become_method: runas now works across all authtypes and will auto-elevate under UAC if WinRM user has "Act as part of the operating system" privilege ### Deprecations diff --git a/docs/docsite/rst/become.rst b/docs/docsite/rst/become.rst index a955956fbb..70721cdf0b 100644 --- a/docs/docsite/rst/become.rst +++ b/docs/docsite/rst/become.rst @@ -217,10 +217,7 @@ delegation or accessing forbidden system calls like the WUA API. You can use ``become`` with the same user as ``ansible_user`` to bypass these limitations and run commands that are not normally accessible in a WinRM session. -.. note:: While become support was added for Windows starting with Ansible - version 2.3, this functionality is still considered experimental and can - change in the future based on issues and limitations that are found. Prior to - Ansible 2.4, become would only work when ``ansible_winrm_transport`` was +.. note:: Prior to Ansible 2.4, become would only work when ``ansible_winrm_transport`` was set to either ``basic`` or ``credssp``, but since Ansible 2.4 become now works on all transport types. diff --git a/lib/ansible/playbook/play_context.py b/lib/ansible/playbook/play_context.py index bb79ef605f..120794536e 100644 --- a/lib/ansible/playbook/play_context.py +++ b/lib/ansible/playbook/play_context.py @@ -585,8 +585,6 @@ class PlayContext(Base): elif self.become_method == 'runas': # become is handled inside the WinRM connection plugin - display.warning("The Windows 'runas' become method is experimental, and may change significantly in future Ansible releases.") - if not self.become_user: raise AnsibleError(("The 'runas' become method requires a username " "(specify with the '--become-user' CLI arg, the 'become_user' keyword, or the 'ansible_become_user' variable)"))