3 people de11b86060 fix: detect missing SECP384R1 early and fix community.crypto compatibility (#14970) ...

Add pre-flight check in main.yml that catches missing cryptography/SECP384R1
before deployment starts, replacing the cryptic error from community.crypto
internals with an actionable message pointing users to run ./algo or uv sync.

Root cause of the CI ipsec/both test failures: cryptography 46.0.5 wraps
the ec module with _ModuleWithDeprecations (for SECT curve deprecation),
which breaks community.crypto's ec.__dict__.get("SECP384R1") lookup.
The fix in community.crypto 3.1.1 uses getattr() instead.

Changes:
- Add SECP384R1 pre-flight check to main.yml (conditional on ipsec_enabled)
- Add cryptography>=42.0.0 as explicit dependency in pyproject.toml
- Upgrade community.crypto to >=3.1.1 (fixes __dict__ vs getattr bug)
- Add ansible-galaxy collection install step to CI
- Use venv Python interpreter for local deployments in add_host tasks

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-22 02:40:17 -08:00

..

tmpfs

Phase 1: Quick wins for code quality and test infrastructure (#14907)

2025-11-28 17:02:17 -05:00

cloud-post.yml

fix: detect missing SECP384R1 early and fix community.crypto compatibility (#14970)

2026-02-22 02:40:17 -08:00

cloud-pre.yml

Implement self-bootstrapping uv setup to resolve issue #14776 (#14814)

2025-08-06 22:10:56 -07:00

rescue.yml

Refactoring, Linting and additional tests (#1397)

2019-04-26 11:48:28 -04:00