kevinveenbirkenbachandClaude Opus 5.5 2393e8ddba fix(web-app-keycloak): reject scoped IPv6 admin networks, drop module docstring ...

Addresses two CodeRabbit findings on PR #1261.

1. Scoped IPv6 (thread 4421596356): ipaddress.ip_network accepts a scope
   ID, so `fe80::1%eth0` resolved to `fe80::1%eth0/128` and the vhost
   would carry `allow fe80::1%eth0/128;`, which nginx refuses to load.
   kc_admin_networks now raises AnsibleFilterError for any entry whose
   network address carries a scope ID. test_admin_allowlist.py covers a
   scoped address and a scoped CIDR; both fail against the previous
   filter.
2. Module docstring (thread 4421596351): removed; it described the
   module instead of documenting parameters or a trip-wire.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-30 16:52:06 +01:00

..

cli

…

group_vars

…

library

fix(database_query): keep psql's command tags out of the returned rows

2026-10-22 20:36:32 +02:00

plugins

Merge pull request #1256 from infinito-nexus/fix/sys-svc-proxy/per-app-security-headers/1123

2026-10-29 18:14:28 +01:00

roles

fix(web-app-keycloak): reject scoped IPv6 admin networks, drop module docstring

2026-10-30 16:52:06 +01:00

scripts

fix(ci): check the PR head against the main it was tested with

2026-10-29 22:10:45 +01:00

utils

fix(install-lint): give chrome-headless-shell a font on dnf, yum and pacman

2026-10-24 12:59:42 +02:00

__init__.py

…