Patch 7.4 release (#2377)

Author: hrishikj

.bumpversion-ansible.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 7.4.12
+current_version = 7.4.13
 commit = true
 message = Bump cp-ansible Version: {current_version} → {new_version}
 tag = false

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 7.4.12
+current_version = 7.4.13
 commit = true
 message = Bump CP Version: {current_version} → {new_version}
 tag = false

CHANGELOG.rst

@@ -4,6 +4,28 @@ Ansible Playbooks for Confluent Platform - Release Notes
 
 .. contents:: Topics
 
+v7.4.13
+======
+
+Notable fixes
+-------------
+- CP critical security and vulnerability fixes can be found at https://support.confluent.io/hc/en-us/sections/360008413952-Security-Advisories-and-Security-Release-Notes
+
+New features
+-------------
+- Made retries and delays in health checks configurable for customers 
+- Introduced Indexing and default rollover strategy for log42j file
+
+Notable enhancements
+-------------
+- Added the possiblity to override a list of loggers using the update_log4j task in the common role
+- Enhanced security by masking potentially exposed sensitive secrets
+
+Bug fixes
+-------------
+- Fixes idempotency on config files when using secrets protection feature
+- Fixed bug related to zookeeper chroot creation
+
 v7.4.12
 ======
 

README.md

@@ -52,12 +52,12 @@ Ansible Playbooks for Confluent Platform (Confluent Ansible) offers a simplified
 
 ## Testing
 
-CP-Ansible's tests use the [Molecule](https://ansible.readthedocs.io/projects/molecule/) framework, and it is strongly advised to test this way before submitting a Pull Request. Please refer to the [HOW_TO_TEST.md](https://github.com/confluentinc/cp-ansible/blob/7.4.12-post/docs/HOW_TO_TEST.md)
+CP-Ansible's tests use the [Molecule](https://ansible.readthedocs.io/projects/molecule/) framework, and it is strongly advised to test this way before submitting a Pull Request. Please refer to the [HOW_TO_TEST.md](https://github.com/confluentinc/cp-ansible/blob/7.4.13-post/docs/HOW_TO_TEST.md)
 
 
 ## Contributing
 
-If you would like to contribute to the CP-Ansible project, please refer to the [CONTRIBUTE.md](https://github.com/confluentinc/cp-ansible/blob/7.4.12-post/docs/CONTRIBUTING.md)
+If you would like to contribute to the CP-Ansible project, please refer to the [CONTRIBUTE.md](https://github.com/confluentinc/cp-ansible/blob/7.4.13-post/docs/CONTRIBUTING.md)
 
 ## Support
 
@@ -69,4 +69,4 @@ This [page](https://docs.confluent.io/ansible/current/ansible-release-notes.html
 
 ## License
 
-[Apache 2.0](https://github.com/confluentinc/cp-ansible/blob/7.4.12-post/LICENSE.md)
+[Apache 2.0](https://github.com/confluentinc/cp-ansible/blob/7.4.13-post/LICENSE.md)

docs/VARIABLES.md

@@ -8,7 +8,7 @@ Below are the supported variables for the role variables
 
 Version of Confluent Platform to install
 
-Default:  7.4.12
+Default:  7.4.13
 
 ***
 
@@ -44,6 +44,14 @@ Default:  true
 
 ***
 
+### shell_executable
+
+Path to bash executable for shell tasks that require pipefail. Override if bash is at a different location on your systems.
+
+Default:  /bin/bash
+
+***
+
 ### jolokia_url_remote
 
 To copy from Ansible control host or download
@@ -5088,6 +5096,22 @@ Default:  30
 
 ***
 
+### control_center_health_check_retries
+
+Number of retries for Control Center health checks
+
+Default:  40
+
+***
+
+### control_center_health_check_retry_delay
+
+Delay in seconds between Control Center health check retries
+
+Default:  10
+
+***
+
 # kafka_broker
 
 Below are the supported variables for the role kafka_broker
@@ -5102,6 +5126,14 @@ Default:  "{{ custom_log4j }}"
 
 ***
 
+### kafka_broker_log4j_replace_loggers
+
+List of loggers to be replaced in the log4j file. Only honored if kafka_broker_custom_log4j: true
+
+Default:  []
+
+***
+
 ### kafka_broker_log4j_root_logger
 
 Root logger within Kafka's log4j config. Only honored if kafka_broker_custom_log4j: true
@@ -5174,6 +5206,30 @@ Default:  20
 
 ***
 
+### kafka_broker_health_check_urp_retries
+
+Number of retries for Under Replicated Partitions check
+
+Default:  15
+
+***
+
+### kafka_broker_health_check_urp_delay
+
+Delay in seconds between Under Replicated Partitions check retries
+
+Default:  5
+
+***
+
+### kafka_broker_health_check_retry_delay
+
+Delay in seconds between health check retries for MDS and Embedded Rest Proxy
+
+Default:  5
+
+***
+
 ### kafka_broker_jmxexporter_startup_delay
 
 Time in seconds to wait before JMX exporter starts serving metrics. Any requests within the delay period will result in an empty metrics set.
@@ -5378,6 +5434,22 @@ Default:  30
 
 ***
 
+### kafka_connect_health_check_retries
+
+Number of retries for Kafka Connect health checks
+
+Default:  40
+
+***
+
+### kafka_connect_health_check_retry_delay
+
+Delay in seconds between Kafka Connect health check retries
+
+Default:  10
+
+***
+
 ### kafka_connect_deploy_connector_timeout
 
 Time in seconds to wait while deploying kafka connector
@@ -5472,6 +5544,22 @@ Default:  15
 
 ***
 
+### kafka_rest_health_check_retries
+
+Number of retries for Rest Proxy health checks
+
+Default:  30
+
+***
+
+### kafka_rest_health_check_retry_delay
+
+Delay in seconds between Rest Proxy health check retries
+
+Default:  5
+
+***
+
 # ksql
 
 Below are the supported variables for the role ksql
@@ -5566,6 +5654,22 @@ Default:  20
 
 ***
 
+### ksql_health_check_retries
+
+Number of retries for ksqlDB health checks
+
+Default:  40
+
+***
+
+### ksql_health_check_retry_delay
+
+Delay in seconds between ksqlDB health check retries
+
+Default:  5
+
+***
+
 # schema_registry
 
 Below are the supported variables for the role schema_registry
@@ -5652,6 +5756,22 @@ Default:  15
 
 ***
 
+### schema_registry_health_check_retries
+
+Number of retries for Schema Registry health checks
+
+Default:  30
+
+***
+
+### schema_registry_health_check_retry_delay
+
+Delay in seconds between Schema Registry health check retries
+
+Default:  5
+
+***
+
 # zookeeper
 
 Below are the supported variables for the role zookeeper
@@ -5738,6 +5858,22 @@ Default:  5
 
 ***
 
+### zookeeper_health_check_retries
+
+Number of retries for Zookeeper health checks
+
+Default:  5
+
+***
+
+### zookeeper_health_check_retry_delay
+
+Delay in seconds between Zookeeper health check retries
+
+Default:  90
+
+***
+
 # kafka_connect_replicator
 
 Below are the supported variables for the role kafka_connect_replicator
@@ -5800,6 +5936,22 @@ Default:  30
 
 ***
 
+### kafka_connect_replicator_health_check_retries
+
+Number of retries for Kafka Connect Replicator health checks
+
+Default:  30
+
+***
+
+### kafka_connect_replicator_health_check_retry_delay
+
+Delay in seconds between Kafka Connect Replicator health check retries
+
+Default:  10
+
+***
+
 # ssl
 
 Below are the supported variables for the role ssl

galaxy.yml

@@ -1,7 +1,7 @@
 ---
 namespace: confluent
 name: platform
-version: 7.4.12
+version: 7.4.13
 readme: README.md
 authors:
   - Confluent Ansible Community

roles/variables/defaults/main.yml

@@ -2,7 +2,7 @@
 # Custom filters used in this file are defined in plugins/filter/filters.py
 
 ### Version of Confluent Platform to install
-confluent_package_version: 7.4.12
+confluent_package_version: 7.4.13
 
 confluent_full_package_version: "{{ confluent_package_version + '-1' }}"
 confluent_package_redhat_suffix: "{{ '-' + confluent_full_package_version if confluent_full_package_version != '' else ''}}"

roles/variables/vars/main.yml

@@ -1,5 +1,5 @@
 ---
-confluent_ansible_branch: 7.4.12-post
+confluent_ansible_branch: 7.4.13-post
 
 systemd_base_dir: "{{'/lib/systemd/system' if ansible_os_family == 'Debian' else '/usr/lib/systemd/system'}}"