Release 1.18.0 for CSM 1.6

CHANGELOG.md

@@ -7,8 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.18.0] - 2024-03-20
+
+### Added
+
+- SKERN-9239: Added password-less ssh to CN/UAN to CSM layer
+
+### Removed
+
+- CASMTRIAGE-6787: `net.ipv4.conf.all.rp_filter` tunable no longer set in `ansible/roles/csm.ncn.sysctl/vars/main.yml`
+
 ## [1.17.11] - 2024-03-04
 
+### Added
+
 - Added support for `aarch64` IMS remote nodes
 
 ## [1.17.10] - 2024-02-28
@@ -419,7 +431,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Ansible playbook for applying csm packages to Compute and Application nodes
 
-[Unreleased]: https://github.com/Cray-HPE/csm-config/compare/1.17.11...HEAD
+[Unreleased]: https://github.com/Cray-HPE/csm-config/compare/1.18.0...HEAD
+
+[1.18.0]: https://github.com/Cray-HPE/csm-config/compare/1.17.11...1.18.0
 
 [1.17.11]: https://github.com/Cray-HPE/csm-config/compare/1.17.10...1.17.11
 

ansible/csm_packages.yml

@@ -52,6 +52,8 @@
       vars:
         packages: "{{ common_csm_sles_packages + application_csm_sles_packages }}"
       when: ansible_distribution_file_variety == "SUSE"
+    - role: csm.ca_cert
+    - role: trust-csm-ssh-keys
   tasks:
     - name: Add CSM services to presets file
       loop: "{{ csm_services }}"
@@ -100,6 +102,8 @@
       vars:
         packages: "{{ common_csm_sles_packages + compute_csm_sles_packages }}"
       when: ansible_distribution_file_variety == "SUSE"
+    - role: csm.ca_cert
+    - role: trust-csm-ssh-keys
   tasks:
     - name: Add CSM services to presets file
       loop: "{{ csm_services }}"

ansible/roles/csm.ncn.sysctl/vars/main.yml

@@ -1,7 +1,7 @@
 #
 # MIT License
 #
-# (C) Copyright 2023 Hewlett Packard Enterprise Development LP
+# (C) Copyright 2023-2024 Hewlett Packard Enterprise Development LP
 #
 # Permission is hereby granted, free of charge, to any person obtaining a
 # copy of this software and associated documentation files (the "Software"),
@@ -33,8 +33,6 @@ sysctl_config:
     value: 0
   - name: net.ipv4.conf.all.arp_announce
     value: 2
-  - name: net.ipv4.conf.all.rp_filter
-    value: 2
   - name: net.ipv4.neigh.default.gc_interval
     value: 30
   - name: net.ipv4.neigh.default.gc_stale_time