CHANGELOG.rst

Docker Community Collection Release Notes

Topics

• v1.9.1
  • Release Summary
  • Bugfixes
• v1.9.0
  • Release Summary
  • Minor Changes
  • Deprecated Features
  • Bugfixes
  • New Plugins
    • Connection
• v1.8.0
  • Release Summary
  • Minor Changes
  • Bugfixes
• v1.7.0
  • Release Summary
  • Minor Changes
• v1.6.1
  • Release Summary
  • Bugfixes
• v1.6.0
  • Release Summary
  • Minor Changes
  • Deprecated Features
  • Bugfixes
• v1.5.0
  • Release Summary
  • Minor Changes
  • Bugfixes
  • New Modules
• v1.4.0
  • Release Summary
  • Minor Changes
  • Breaking Changes / Porting Guide
  • Security Fixes
  • Bugfixes
• v1.3.0
  • Release Summary
  • Minor Changes
  • Bugfixes
  • New Modules
• v1.2.2
  • Release Summary
  • Security Fixes
• v1.2.1
  • Release Summary
  • Bugfixes
• v1.2.0
  • Release Summary
  • Minor Changes
  • Bugfixes
• v1.1.0
  • Release Summary
  • Minor Changes
  • Deprecated Features
  • Bugfixes
  • New Plugins
    • Connection
    • Inventory
  • New Modules
• v1.0.1
  • Release Summary
  • Bugfixes
• v1.0.0
  • Release Summary
  • Minor Changes
• v0.1.0
  • Release Summary
  • Minor Changes
  • Removed Features (previously deprecated)
  • Bugfixes

v1.9.1

Release Summary

Regular bugfix release.

Bugfixes

• docker_compose - fixed incorrect changed status for services with profiles defined, but none enabled (ansible-collections#192).

v1.9.0

Release Summary

New bugfixes and features release.

Minor Changes

• docker_* modules - include ImportError traceback when reporting that Docker SDK for Python could not be found (ansible-collections#188).
• docker_compose - added env_file option for specifying custom environment files (ansible-collections#174).
• docker_container - added publish_all_ports option to publish all exposed ports to random ports except those explicitly bound with published_ports (this was already added in community.docker 1.8.0) (ansible-collections#162).
• docker_container - added new command_handling option with current deprecated default value compatibility which allows to control how the module handles shell quoting when interpreting lists, and how the module handles empty lists/strings. The default will switch to correct in community.docker 3.0.0 (ansible-collections#186).
• docker_container - lifted restriction preventing the creation of anonymous volumes with the mounts option (ansible-collections#181).

Deprecated Features

• docker_container - the new command_handling's default value, compatibility, is deprecated and will change to correct in community.docker 3.0.0. A deprecation warning is emitted by the module in cases where the behavior will change. Please note that ansible-core will output a deprecation warning only once, so if it is shown for an earlier task, there could be more tasks with this warning where it is not shown (ansible-collections#186).

Bugfixes

• docker_compose - fixes task failures when bringing up services while using docker-compose <1.17.0 (ansible-collections#180).
• docker_container - make sure to also return container on detached=false when status code is non-zero (ansible-collections#178).
• docker_stack_info - make sure that module isn't skipped in check mode (ansible-collections#183).
• docker_stack_task_info - make sure that module isn't skipped in check mode (ansible-collections#183).

New Plugins

Connection

• nsenter - execute on host running controller container

v1.8.0

Release Summary

Regular bugfix and feature release.

Minor Changes

• Avoid internal ansible-core module_utils in favor of equivalent public API available since at least Ansible 2.9 (ansible-collections#164).
• docker_compose - added profiles option to specify service profiles when starting services (ansible-collections#167).
• docker_containers inventory plugin - when connection_type=docker-api, now pass Docker daemon connection options from inventory plugin to connection plugin. This can be disabled by setting configure_docker_daemon=false (ansible-collections#157).
• docker_host_info - allow values for keys in containers_filters, images_filters, networks_filters, and volumes_filters to be passed as YAML lists (ansible-collections#160).
• docker_plugin - added alias option to specify local names for docker plugins (ansible-collections#161).

Bugfixes

• docker_compose - fix idempotence bug when using stopped: true (ansible-collections#142, ansible-collections#159).

v1.7.0

Release Summary

Small feature and bugfix release.

Minor Changes

• docker_image - allow to tag images by ID (ansible-collections#149).

v1.6.1

Release Summary

Bugfix release to reduce deprecation warning spam.

Bugfixes

• docker_* modules and plugins, except docker_swarm connection plugin and docker_compose and docker_stack*` modules - only emit ``tls_hostname deprecation message if TLS is actually used (ansible-collections#143).

v1.6.0

Release Summary

Regular bugfix and feature release.

Minor Changes

• common module utils - correct error messages for guiding to install proper Docker SDK for Python module (ansible-collections#125).
• docker_container - allow memory_swap: -1 to set memory swap limit to unlimited. This is useful when the user cannot set memory swap limits due to cgroup limitations or other reasons, as by default Docker will try to set swap usage to two times the value of memory (ansible-collections#138).

Deprecated Features

• docker_* modules and plugins, except docker_swarm connection plugin and docker_compose and docker_stack*` modules - the current default ``localhost for tls_hostname is deprecated. In community.docker 2.0.0 it will be computed from docker_host instead (ansible-collections#134).

Bugfixes

• docker-compose - fix not pulling when state: present and stopped: true (ansible-collections#12, ansible-collections#119).
• docker_plugin - also configure plugin after installing (ansible-collections#118, ansible-collections#135).
• docker_swarm_services - avoid crash during idempotence check if published_port is not specified (ansible-collections#107, ansible-collections#136).

v1.5.0

Release Summary

Regular feature release.

Minor Changes

• Add the use_ssh_client option to most docker modules and plugins (ansible-collections#108, ansible-collections#114).

Bugfixes

• all modules - use to_native to convert exceptions to strings (ansible-collections#121).

New Modules

• docker_container_exec - Execute command in a docker container

v1.4.0

Release Summary

Security release to address another potential secret leak. Also includes regular bugfixes and features.

Minor Changes

• docker_swarm_service - change publish.published_port option from mandatory to optional. Docker will assign random high port if not specified (ansible-collections#99).

Breaking Changes / Porting Guide

• docker_swarm - if join_token is specified, a returned join token with the same value will be replaced by VALUE_SPECIFIED_IN_NO_LOG_PARAMETER. Make sure that you do not blindly use the join tokens from the return value of this module when the module is invoked with join_token specified! This breaking change appears in a minor release since it is necessary to fix a security issue (ansible-collections#103).

Security Fixes

• docker_swarm - the join_token option is now marked as no_log so it is no longer written into logs (ansible-collections#103).

Bugfixes

• docker_swarm_service - fix KeyError on caused by reference to deprecated option update_failure_action (ansible-collections#100).
• docker_swarm_service - mark secrets module option with no_log=False since it does not leak secrets (ansible-collections/community.general#2001).

v1.3.0

Release Summary

Regular feature and bugfix release.

Minor Changes

• docker_container - add storage_opts option to specify storage options (ansible-collections#91, ansible-collections#93).
• docker_image - allows to specify platform to pull for source=pull with new option pull_platform (ansible-collections#79, ansible-collections#89).
• docker_image - properly support image IDs (hashes) for loading and tagging images (ansible-collections#86, ansible-collections#87).
• docker_swarm_service - adding support for maximum number of tasks per node (replicas_max_per_node) when running swarm service in replicated mode. Introduced in API 1.40 (ansible-collections#7, ansible-collections#92).

Bugfixes

• docker_container - fix healthcheck disabling idempotency issue with strict comparison (ansible-collections#85).
• docker_image - prevent module failure when removing image that is removed between inspection and removal (ansible-collections#87).
• docker_image - prevent module failure when removing non-existant image by ID (ansible-collections#87).
• docker_image_info - prevent module failure when image vanishes between listing and inspection (ansible-collections#87).
• docker_image_info - prevent module failure when querying non-existant image by ID (ansible-collections#87).

New Modules

• docker_image_load - Load docker image(s) from archives
• docker_plugin - Manage Docker plugins

v1.2.2

Release Summary

Security bugfix release to address CVE-2021-20191.

Security Fixes

• docker_swarm - enabled no_log for the option signing_ca_key to prevent accidental disclosure (CVE-2021-20191, ansible-collections#80).

v1.2.1

Release Summary

Bugfix release.

Bugfixes

• docker connection plugin - fix Docker version parsing, as some docker versions have a leading v in the output of the command docker version --format "{{.Server.Version}}" (ansible-collections#76).

v1.2.0

Release Summary

Feature release with one new feature and two bugfixes.

Minor Changes

• docker_container - added default_host_ip option which allows to explicitly set the default IP string for published ports without explicitly specified IPs. When using IPv6 binds with Docker 20.10.2 or newer, this needs to be set to an empty string ("") (ansible-collections#70, ansible-collections#71).

Bugfixes

• docker_container - allow IPv6 zones (RFC 4007) in bind IPs (ansible-collections#66).
• docker_image - fix crash on loading images with versions of Docker SDK for Python before 2.5.0 (ansible-collections#72, ansible-collections#73).

v1.1.0

Release Summary

Feature release with three new plugins and modules.

Minor Changes

• docker_container - support specifying cgroup_parent (ansible-collections#6, ansible-collections#59).
• docker_container - when a container is started with detached=false, status is now also returned when it is 0 (ansible-collections#26, ansible-collections#58).
• docker_image - support platform when building images (ansible-collections#22, ansible-collections#54).

Deprecated Features

• docker_container - currently published_ports can contain port mappings next to the special value all, in which case the port mappings are ignored. This behavior is deprecated for community.docker 2.0.0, at which point it will either be forbidden, or this behavior will be properly implemented similar to how the Docker CLI tool handles this (ansible-collections#8, ansible-collections#60).

Bugfixes

• docker_image - if push=true is used with repository, and the image does not need to be tagged, still push. This can happen if repository and name are equal (ansible-collections#52, ansible-collections#53).
• docker_image - report error when loading a broken archive that contains no image (ansible-collections#46, ansible-collections#55).
• docker_image - report error when the loaded archive does not contain the specified image (ansible-collections#41, ansible-collections#55).

New Plugins

Connection

• docker_api - Run tasks in docker containers

Inventory

• docker_containers - Ansible dynamic inventory plugin for Docker containers.

New Modules

• current_container_facts - Return facts about whether the module runs in a Docker container

v1.0.1

Release Summary

Maintenance release with a bugfix for docker_container.

Bugfixes

• docker_container - the validation for capabilities in device_requests was incorrect (ansible-collections#42, ansible-collections#43).

v1.0.0

Release Summary

This is the first production (non-prerelease) release of community.docker.

Minor Changes

• Add collection-side support of the docker action group / module defaults group (ansible-collections#17).
• docker_image - return docker build output (ansible-collections/community.general#805).
• docker_secret - add a warning when the secret does not have an ansible_key label but the force parameter is not set (ansible-collections#30, ansible-collections#31).

v0.1.0

Release Summary

The community.docker continues the work on the Ansible docker modules and plugins from their state in community.general 1.2.0. The changes listed here are thus relative to the modules and plugins community.general.docker*.

All deprecation removals planned for community.general 2.0.0 have been applied. All deprecation removals scheduled for community.general 3.0.0 have been re-scheduled for community.docker 2.0.0.

Minor Changes

• docker_container - now supports the device_requests option, which allows to request additional resources such as GPUs (ansible/ansible#65748, ansible-collections/community.general#1119).

Removed Features (previously deprecated)

• docker_container - no longer returns ansible_facts (ansible-collections#1).
• docker_container - the default of networks_cli_compatible changed to true (ansible-collections#1).
• docker_container - the unused option trust_image_content has been removed (ansible-collections#1).
• docker_image - state=build has been removed. Use present instead (ansible-collections#1).
• docker_image - the container_limits, dockerfile, http_timeout, nocache, rm, path, buildargs, pull have been removed. Use the corresponding suboptions of build instead (ansible-collections#1).
• docker_image - the force option has been removed. Use the more specific force_* options instead (ansible-collections#1).
• docker_image - the source option is now mandatory (ansible-collections#1).
• docker_image - the use_tls option has been removed. Use tls and validate_certs instead (ansible-collections#1).
• docker_image - the default of the build.pull option changed to false (ansible-collections#1).
• docker_image_facts - this alias is on longer availabe, use docker_image_info instead (ansible-collections#1).
• docker_network - no longer returns ansible_facts (ansible-collections#1).
• docker_network - the ipam_options option has been removed. Use ipam_config instead (ansible-collections#1).
• docker_service - no longer returns ansible_facts (ansible-collections#1).
• docker_swarm - state=inspect has been removed. Use docker_swarm_info instead (ansible-collections#1).
• docker_swarm_service - the constraints option has been removed. Use placement.constraints instead (ansible-collections#1).
• docker_swarm_service - the limit_cpu and limit_memory options has been removed. Use the corresponding suboptions in limits instead (ansible-collections#1).
• docker_swarm_service - the log_driver and log_driver_options options has been removed. Use the corresponding suboptions in logging instead (ansible-collections#1).
• docker_swarm_service - the reserve_cpu and reserve_memory options has been removed. Use the corresponding suboptions in reservations instead (ansible-collections#1).
• docker_swarm_service - the restart_policy, restart_policy_attempts, restart_policy_delay and restart_policy_window options has been removed. Use the corresponding suboptions in restart_config instead (ansible-collections#1).
• docker_swarm_service - the update_delay, update_parallelism, update_failure_action, update_monitor, update_max_failure_ratio and update_order options has been removed. Use the corresponding suboptions in update_config instead (ansible-collections#1).
• docker_volume - no longer returns ansible_facts (ansible-collections#1).
• docker_volume - the force option has been removed. Use recreate instead (ansible-collections#1).

Bugfixes

• docker_login - fix internal config file storage to handle credentials for more than one registry (ansible-collections/community.general#1117).