v1.18.1

Full Changelog: v1.18.0...v1.18.1

v1.18.0

1.18.0 - 2026-05-17

• added normalized IdM inventory host attributes with raw-value companions, stable type metadata, schema warnings, and reusable normalization filters
• added vault_health for KRA-aware vault diagnostics that distinguish IdM reachability from vault/KRA availability and canary state
• added vault_artifact for generic vault artifact write, read, digest, and read-back verification workflows without payload interpretation
• added access_path for read-only principal, HBAC, sudo, and SELinux map readiness summaries before privileged automation
• added sudo_risk and classify_sudo_rule filters for configurable advisory sudo policy risk classification
• documented the new release gate expectations, live-lab evidence requirements, and payload handling boundaries for vault artifact workflows

Validation

• python -m pytest -q: 434 passed, 1 warning
• EIGENSTATE_REQUIRE_ANSIBLE_TEST=1 EIGENSTATE_ANSIBLE_TEST_PYTHON=3.14 ./scripts/validate-collection.sh: passed
• public documentation language, Markdown YAML examples, secret-debug lint, and production Jekyll build: passed
• clean install from the Galaxy tarball plus ansible-doc smoke for new inventory/module/filter surfaces: passed
• publish hygiene scan for implementation-assistant references: passed

Artifact

• eigenstate-ipa-1.18.0.tar.gz
• SHA256: 65cb45bffda3453f8f6a1632689e422f0e35079b7eeb1dde7349a3aca148b1be

Full Changelog: v1.17.0...v1.18.0

Full Changelog: v1.17.0...v1.18.0

v1.17.0

Full Changelog: v1.16.0...v1.17.0

v1.16.0

Full Changelog: v1.15.0...v1.16.0

v1.15.0

What's Changed

• Add reporting and drift evidence roles by @gprocunier in #7

Full Changelog: v1.14.0...v1.15.0

v1.14.0

What's Changed

• Add Kubernetes workload secret delivery roles by @gprocunier in #6

Full Changelog: v1.13.0...v1.14.0

v1.13.0

What's Changed

• Add OpenShift identity validation roles by @gprocunier in #5

Full Changelog: v1.12.0...v1.13.0

v1.12.0

What's Changed

• Add AAP golden path workflow roles by @gprocunier in #3
• Add explicit keytab and cert mutation modules by @gprocunier in #4

Full Changelog: v1.11.0...v1.12.0

eigenstate.ipa 1.11.0

• added roles/aap_execution_environment to render, build, smoke-test, push,
  and optionally register an AAP execution environment for eigenstate.ipa
• added a static execution-environment/eigenstate-idm/ scaffold for manual
  Ansible Builder workflows
• added AAP EE quickstart, disconnected build, troubleshooting, and validation
  walkthrough documentation
• added render-only validation for the EE scaffold and unit coverage for the
  role render path
• hardened RHOSO user_lease examples so admin keytab examples use the
  matching admin principal

What's Changed

• Add AAP EE easy button by @gprocunier in #2

Full Changelog: v1.10.13...v1.11.0

eigenstate.ipa 1.10.13

1.10.13 - 2026-04-27

• normalized Ansible unsafe text values before passing tls_ca_cert to FreeIPA bootstrap so AAP-provided certificate paths satisfy FreeIPA's exact primitive type checks
• guarded against finalizing a partially initialized FreeIPA environment when bootstrap has failed before core defaults are available
• added regression coverage for unsafe text certificate paths and incomplete bootstrap state

Full Changelog: v1.10.12...v1.10.13