From bc0406cf02b329119c562a9898d65f4c898b4dd0 Mon Sep 17 00:00:00 2001 From: Bianca Henderson Date: Wed, 4 Feb 2026 10:23:34 -0500 Subject: [PATCH] Prep 5.4.2 release (#1083) (#1087) Merging changes from stable-5 back into main. Reviewed-by: Hannah DeFazio Reviewed-by: Bikouo Aubin --- CHANGELOG.rst | 35 +++++++++++++ changelogs/changelog.yaml | 51 +++++++++++++++++-- .../fragments/1033-warnings-deprecations.yaml | 2 - .../20251002-fix-k8s-actiongroup.yaml | 2 - ...251007-selective-kubeconfig-redaction.yaml | 2 - .../20251115-limit-versions-of-helm.yaml | 2 - ...RIFY_SSL-in-kubectl-connecton-plugion.yaml | 2 - ...0260107-add-idempodency-for-helm-pull.yaml | 2 - .../20260108-fix-sanity-failures.yml | 11 ---- 9 files changed, 83 insertions(+), 26 deletions(-) delete mode 100644 changelogs/fragments/1033-warnings-deprecations.yaml delete mode 100644 changelogs/fragments/20251002-fix-k8s-actiongroup.yaml delete mode 100644 changelogs/fragments/20251007-selective-kubeconfig-redaction.yaml delete mode 100644 changelogs/fragments/20251115-limit-versions-of-helm.yaml delete mode 100644 changelogs/fragments/20251220-fix-K8S_AUTH_VERIFY_SSL-in-kubectl-connecton-plugion.yaml delete mode 100644 changelogs/fragments/20260107-add-idempodency-for-helm-pull.yaml delete mode 100644 changelogs/fragments/20260108-fix-sanity-failures.yml diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 1e350993..fb97cc93 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -61,6 +61,41 @@ Breaking Changes / Porting Guide - Remove deprecated ``k8s`` invetory plugin (https://github.com/ansible-collections/kubernetes.core/pull/867). - Remove support for ``ansible-core<2.16`` (https://github.com/ansible-collections/kubernetes.core/pull/867). +v5.4.2 +====== + +Release Summary +--------------- + +This release includes bugfixes such as replacing the passing of ``warnings`` to ``exit_json`` with ``AnsibleModule.warn`` as well as a security update for selectively redacting sensitive information from kubeconfig. + +Minor Changes +------------- + +- helm - add ``release_values`` key to ``status`` return value that can be accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056). +- helm_info - add ``release_values`` key to ``status`` return value that can be accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056). + +Deprecated Features +------------------- + +- helm - the ``status.values`` return value has been deprecated and will be removed in a release after 2027-01-08. Use ``status.release_values`` instead (https://github.com/ansible-collections/kubernetes.core/pull/1056). +- helm_info - the ``status.values`` return value has been deprecated and will be removed in a release after 2027-01-08. Use ``status.release_values`` instead (https://github.com/ansible-collections/kubernetes.core/pull/1056). + +Security Fixes +-------------- + +- Selectively redact sensitive info from kubeconfig instead of applying blanket ``no_log=True`` (https://github.com/ansible-collections/kubernetes.core/pull/1014). + +Bugfixes +-------- + +- Add idempotency for ``helm_pull`` module (https://github.com/ansible-collections/kubernetes.core/pull/1055). +- Fixed a bug where setting ``K8S_AUTH_VERIFY_SSL=true`` (or any string value) caused the value to be treated as a separate ``kubectl`` command argument (https://github.com/ansible-collections/kubernetes.core/pull/1049). +- Limit supported versions of Helm to <4.0.0 (https://github.com/ansible-collections/kubernetes.core/pull/1039). +- Replace passing ``warnings`` to ``exit_json`` with ``AnsibleModule.warn`` in the ``k8s_drain``, ``k8s_rollback.py`` and ``k8s_scale.py`` modules as it deprecated in ``ansible-core>=2.19.0`` and will be removed in ``ansible-core>=2.23.0`` (https://github.com/ansible-collections/kubernetes.core/pull/1033). +- k8s - Fix return block from the module documentation (https://github.com/ansible-collections/kubernetes.core/pull/1056). +- meta - Add ``k8s_cluster_info``, ``k8s_json_patch`` and ``k8s_rollback`` to k8s action group (https://github.com/ansible-collections/kubernetes.core/pull/992). + v5.4.1 ====== diff --git a/changelogs/changelog.yaml b/changelogs/changelog.yaml index eae3ed9f..b1208ea1 100644 --- a/changelogs/changelog.yaml +++ b/changelogs/changelog.yaml @@ -1047,9 +1047,11 @@ releases: 5.4.0: changes: minor_changes: - - Module ``helm_registry_auth`` does not support idempotency with ``helm >= 3.18.0`` - (https://github.com/ansible-collections/kubernetes.core/pull/946). - release_summary: This release updates the ``helm_registry_auth`` module to match the behavior of ``helm >= 3.18.0`` which reports a successful logout regardless of the current state (i.e., no idempotency). + - Module ``helm_registry_auth`` does not support idempotency with ``helm >= + 3.18.0`` (https://github.com/ansible-collections/kubernetes.core/pull/946). + release_summary: This release updates the ``helm_registry_auth`` module to match + the behavior of ``helm >= 3.18.0`` which reports a successful logout regardless + of the current state (i.e., no idempotency). fragments: - 20250411-kubeconfig-no_log-revert.yaml - 20250503-fix-unit-tests.yml @@ -1071,6 +1073,49 @@ releases: - 20250922-remove-ansible-six-imports.yaml - 5.4.1.yml release_date: '2025-10-07' + 5.4.2: + changes: + bugfixes: + - Add idempotency for ``helm_pull`` module (https://github.com/ansible-collections/kubernetes.core/pull/1055). + - Fixed a bug where setting ``K8S_AUTH_VERIFY_SSL=true`` (or any string value) + caused the value to be treated as a separate ``kubectl`` command argument + (https://github.com/ansible-collections/kubernetes.core/pull/1049). + - Limit supported versions of Helm to <4.0.0 (https://github.com/ansible-collections/kubernetes.core/pull/1039). + - Replace passing ``warnings`` to ``exit_json`` with ``AnsibleModule.warn`` + in the ``k8s_drain``, ``k8s_rollback.py`` and ``k8s_scale.py`` modules as + it deprecated in ``ansible-core>=2.19.0`` and will be removed in ``ansible-core>=2.23.0`` + (https://github.com/ansible-collections/kubernetes.core/pull/1033). + - k8s - Fix return block from the module documentation (https://github.com/ansible-collections/kubernetes.core/pull/1056). + - meta - Add ``k8s_cluster_info``, ``k8s_json_patch`` and ``k8s_rollback`` to + k8s action group (https://github.com/ansible-collections/kubernetes.core/pull/992). + deprecated_features: + - helm - the ``status.values`` return value has been deprecated and will be + removed in a release after 2027-01-08. Use ``status.release_values`` instead + (https://github.com/ansible-collections/kubernetes.core/pull/1056). + - helm_info - the ``status.values`` return value has been deprecated and will + be removed in a release after 2027-01-08. Use ``status.release_values`` instead + (https://github.com/ansible-collections/kubernetes.core/pull/1056). + minor_changes: + - helm - added ``release_values`` key to ``status`` return value that can be + accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056). + - helm_info - added ``release_values`` key to ``status`` return value that can + be accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056). + release_summary: This release includes various bugfixes such as replacing the + passing of ``warnings`` to ``exit_json`` with ``AnsibleModule.warn`` as well + as security updates for selectively redacting sensitive information from kubeconfig. + security_fixes: + - Selectively redact sensitive info from kubeconfig instead of applying blanket + ``no_log=True`` (https://github.com/ansible-collections/kubernetes.core/pull/1014). + fragments: + - 1033-warnings-deprecations.yaml + - 20251002-fix-k8s-actiongroup.yaml + - 20251007-selective-kubeconfig-redaction.yaml + - 20251115-limit-versions-of-helm.yaml + - 20251220-fix-K8S_AUTH_VERIFY_SSL-in-kubectl-connecton-plugion.yaml + - 20260107-add-idempodency-for-helm-pull.yaml + - 20260108-fix-sanity-failures.yml + - 5-4-2.yaml + release_date: '2026-02-03' 6.0.0: changes: breaking_changes: diff --git a/changelogs/fragments/1033-warnings-deprecations.yaml b/changelogs/fragments/1033-warnings-deprecations.yaml deleted file mode 100644 index 729cdcee..00000000 --- a/changelogs/fragments/1033-warnings-deprecations.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - Replace passing ``warnings`` to ``exit_json`` with ``AnsibleModule.warn`` in the ``k8s_drain``, ``k8s_rollback.py`` and ``k8s_scale.py`` modules as it deprecated in ``ansible-core>=2.19.0`` and will be removed in ``ansible-core>=2.23.0`` (https://github.com/ansible-collections/kubernetes.core/pull/1033). diff --git a/changelogs/fragments/20251002-fix-k8s-actiongroup.yaml b/changelogs/fragments/20251002-fix-k8s-actiongroup.yaml deleted file mode 100644 index 6bd965b7..00000000 --- a/changelogs/fragments/20251002-fix-k8s-actiongroup.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: -- meta - Add ``k8s_cluster_info``, ``k8s_json_patch`` and ``k8s_rollback`` to k8s action group (https://github.com/ansible-collections/kubernetes.core/pull/992). diff --git a/changelogs/fragments/20251007-selective-kubeconfig-redaction.yaml b/changelogs/fragments/20251007-selective-kubeconfig-redaction.yaml deleted file mode 100644 index 06d6b572..00000000 --- a/changelogs/fragments/20251007-selective-kubeconfig-redaction.yaml +++ /dev/null @@ -1,2 +0,0 @@ -security_fixes: - - Selectively redact sensitive info from kubeconfig instead of applying blanket ``no_log=True`` (https://github.com/ansible-collections/kubernetes.core/pull/1014). diff --git a/changelogs/fragments/20251115-limit-versions-of-helm.yaml b/changelogs/fragments/20251115-limit-versions-of-helm.yaml deleted file mode 100644 index 0677f823..00000000 --- a/changelogs/fragments/20251115-limit-versions-of-helm.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - Limit supported versions of Helm to <4.0.0 (https://github.com/ansible-collections/kubernetes.core/pull/1039). diff --git a/changelogs/fragments/20251220-fix-K8S_AUTH_VERIFY_SSL-in-kubectl-connecton-plugion.yaml b/changelogs/fragments/20251220-fix-K8S_AUTH_VERIFY_SSL-in-kubectl-connecton-plugion.yaml deleted file mode 100644 index 9313ea4f..00000000 --- a/changelogs/fragments/20251220-fix-K8S_AUTH_VERIFY_SSL-in-kubectl-connecton-plugion.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - Fixed a bug where setting K8S_AUTH_VERIFY_SSL=true (or any string value) caused the value to be treated as a separate kubectl command argument. (https://github.com/ansible-collections/kubernetes.core/pull/1049). diff --git a/changelogs/fragments/20260107-add-idempodency-for-helm-pull.yaml b/changelogs/fragments/20260107-add-idempodency-for-helm-pull.yaml deleted file mode 100644 index 37058d51..00000000 --- a/changelogs/fragments/20260107-add-idempodency-for-helm-pull.yaml +++ /dev/null @@ -1,2 +0,0 @@ -bugfixes: - - Add idempotency for ``helm_pull`` module (https://github.com/ansible-collections/kubernetes.core/pull/1055). diff --git a/changelogs/fragments/20260108-fix-sanity-failures.yml b/changelogs/fragments/20260108-fix-sanity-failures.yml deleted file mode 100644 index b7d0361d..00000000 --- a/changelogs/fragments/20260108-fix-sanity-failures.yml +++ /dev/null @@ -1,11 +0,0 @@ ---- -bugfixes: - - k8s - Fix return block from the module documentation (https://github.com/ansible-collections/kubernetes.core/pull/1056). -deprecated_features: - - helm - the ``status.values`` return value has been deprecated and will be removed in a release after 2027-01-08. - Use ``status.release_values`` instead (https://github.com/ansible-collections/kubernetes.core/pull/1056). - - helm_info - the ``status.values`` return value has been deprecated and will be removed in a release after 2027-01-08. - Use ``status.release_values`` instead (https://github.com/ansible-collections/kubernetes.core/pull/1056). -minor_changes: - - helm - added ``release_values`` key to ``status`` return value that can be accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056). - - helm_info - added ``release_values`` key to ``status`` return value that can be accessed using Jinja2 dot notation (https://github.com/ansible-collections/kubernetes.core/pull/1056).