kevinveenbirkenbachandClaude Opus 5.5 167cc22194 feat(inventory): fail validation on required users without a pinned password ...

A user the host's roles need but the inventory gives no password falls back
to a generated password that renders anew on every read, so password
converges set values nobody knows (echoserver and galaxyserver stopped at
web-app-matomo for that after passing validation). The validator now asks
provision's required_user_policies for each host's groups, merges the
host's users with Ansible's replace precedence and fails before the deploy,
naming the users and the provision command. Presence only: vaulted values
count, nothing is decrypted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 22:09:10 +01:00

..

administration

feat(inventory): fail validation on required users without a pinned password

2026-10-31 22:09:10 +01:00

build

…

console

…

contributing

fix(mirror): refresh a mirrored tag that upstream re-pushed

2026-10-31 09:50:14 +01:00

core

…

deploy

…

fix

…

gha

…

meta

fix(variants): apply a variant pin only while its carrier is in the round

2026-10-31 12:45:53 +01:00

setup

…

__init__.py

…

test_entrypoint_main.py

…

test_inventory_manager.py

…