kevinveenbirkenbachandClaude Opus 5.5 167cc22194 feat(inventory): fail validation on required users without a pinned password ...

A user the host's roles need but the inventory gives no password falls back
to a generated password that renders anew on every read, so password
converges set values nobody knows (echoserver and galaxyserver stopped at
web-app-matomo for that after passing validation). The validator now asks
provision's required_user_policies for each host's groups, merges the
host's users with Ansible's replace precedence and fails before the deploy,
naming the users and the provision command. Presence only: vaulted values
count, nothing is decrypted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 22:09:10 +01:00

..

credentials

test(credentials): cover the kept subtree

2026-09-28 11:46:01 +02:00

mesh

feat(svc-net-wireguard): let a compose deployment name a hub with roaming spokes

2026-10-22 10:56:50 +02:00

onion

…

provision

feat(inventory): fail validation on required users without a pinned password

2026-10-31 22:09:10 +01:00

validate

feat(inventory): fail validation on required users without a pinned password

2026-10-31 22:09:10 +01:00

__init__.py

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

test_credentials.py

…

test_devices.py

…