What's Changed
SSH Keys
When using the Ansible plugin with a proxy (default) setup to communicate over SSH to a target VM/machine, in previous versions of the plugin, we'd generate RSA-2048 keys by default, unless keys were specified manually using the ssh_host_key_file and the corresponding ssh_authorized_key_file values in a template.
This release changes the default type of key to be ECDSA instead. This change was motivated by the recent rejection of ssh-rsa
as authorization algorithm in OpenSSH, since this was used to authenticate with the server we start to perform the proxy to the communicator exposed by the chosen builder.
We recognize this might cause users to experience problems if their version of OpenSSH does not support such keys, in which case, we introduced a new option to the configuration: ansible_proxy_key_type. This lets you fallback to RSA is you so choose, and may in the future be used to support alternative key formats.
Exciting New Features π
- provisioner: add winrm_use_ssl arg to provisioner by @lbajolet-hashicorp in #160
Bug fixesπ§βπ§ π
- adapter: use ECDSA keys for adapter instead of RSA by @lbajolet-hashicorp in #162
Doc improvements π
- docs: remove misconstructed tabs by @lbajolet-hashicorp in #154
Other Changes
- Put in dev mode by @nywilken in #153
- cleanup github workflows by @lbajolet-hashicorp in #161
Full Changelog: v1.0.4...v1.1.0