Commit Graph

41 Commits

Author SHA1 Message Date
Ryan Lerch
a0cd459d47 Fix some references in tasks dropping .j2
When fixing conflicts when merging the PR containing commit 47c68f4,
some of the .j2 suffuxes i added in tasks were erronounusly dropped.

this fixes those.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 19:44:59 +10:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Ryan Lerch
098a9fedf2 openshift/project - rename yaml/yml templates to .j2
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 08:37:30 +10:00
Aurélien Bompard
acc40816b7 Rewrite prefixes when forwarding vars in openshift roles
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-03 11:24:58 +01:00
Ryan Lerch
776866cba3 [ansible-lint] prefix variable names for openshift/object role
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the variables for the
openshift/object role with object_ as required by ansible-lint

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-12-03 10:48:45 +01:00
Ryan Lerch
01ace51513 [ansible-lint] prefix variable names for openshift/project role
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the rvariables for the
openshift/project role with project_ as required by ansible-lint

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-12-03 10:48:44 +01:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
620dbb5753 openshift: drop egress policy
We had this with SDN networking, but no more with newer networking.
We also don't use it anywhere, it was mostly for when fas2 was running
in openshift to isolate it and it's not there anymore.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 15:30:54 -07:00
Michal Konecny
c5e61168bb [openshift/project] Fix the parameter order for oc apply
The file needs to be specified after `-f` parameter otherwise it fails with
unexpected args error.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2023-11-23 16:39:48 +01:00
Kevin Fenzi
9e2b0cda9d openshift: validate when applying objects
Right now if there's a yml thats indented incorrectly, but parts of it
are fine, oc apply will apply those parts that are valid and just ignore
the rest. So, lets add a --validate=strict to have it reject these
entirely, so we know they have something wrong in them and we can fix
it, rather than being confused that they didn't apply anything.

Signed-off-by: Kevin Fenzi kevin@scrye.com
2023-11-08 14:11:02 -08:00
Francois Andrieu
caa4f85ed2 ocp_monitoring: move rules to openshift/project role 2023-01-27 00:08:30 +00:00
Francois Andrieu
66726137ae websites: add alerts for pod/job/build errors 2023-01-25 22:41:39 +00:00
Kevin Fenzi
8d3c180496 openshift / project: do not recurse on permissions
There's some files that get created later (like keytabs) that we don't
want to keep changing back and forth and causing things to not be
idempotent.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-21 14:16:56 -07:00
Mark O Brien
5d906f9b8c openshift: undo uneccesary changes
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 18:01:22 +00:00
Mark O Brien
2d9b23d066 openshift: change shell to command
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 17:20:57 +00:00
Mark O Brien
cebd4ce05f openshift: check return code instead of stderr
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 11:51:40 +00:00
Mark O Brien
baf4fb0812 openshift: remove temp debug command
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 11:49:34 +00:00
Mark O Brien
dc2c941c49 openshift: fix yaml indentation
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 11:42:26 +00:00
Mark O Brien
45fb1e6af1 openshift: add temp debug statement
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-02-02 11:41:11 +00:00
Michael Scherer
dfdd9ab4d4 Fix typo in the name
Mainly to increase my edit count
2020-04-24 21:34:25 +02:00
Patrick Uiterwijk
43af7f9206 Fix up egresspolicy source vs dest
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-06-20 09:44:10 +02:00
Patrick Uiterwijk
6bf7c579c2 make egresspolicy customization less simple
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-06-03 15:47:23 +02:00
Patrick Uiterwijk
c07c9415a0 Allow custom egress policies for special cases
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-06-03 15:43:39 +02:00
Patrick Uiterwijk
446d00d549 Add tag to egresspolicy role
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-09 13:42:49 +02:00
Patrick Uiterwijk
eac122c543 openshift/project: define default egress policy to prevent fas db access
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-09 13:32:55 +02:00
Patrick Uiterwijk
51769d8533 Change when
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-03 13:59:10 +02:00
Patrick Uiterwijk
09a12cf4b5 When we try to apply project.yml, the namespace does not yet exist
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-03 13:58:06 +02:00
Patrick Uiterwijk
ff117118a5 Use consistent, permanent filenames
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-04-17 01:02:21 +00:00
Patrick Uiterwijk
cba7d519d4 Silly me, ClusterRoles are separate objects
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 20:45:48 +00:00
Patrick Uiterwijk
0d614913d1 Turns out 'global' is not a valid variable name
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 20:43:45 +00:00
Patrick Uiterwijk
e0f9332d86 Turns out that namespace-local roles are broken pre openshift 3.6
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 20:42:44 +00:00
Patrick Uiterwijk
e93950fc08 I named this singular
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 19:56:14 +00:00
Patrick Uiterwijk
59949db84d Only create project if it did not exist yet
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 19:53:55 +00:00
Patrick Uiterwijk
f51408ac1a Remove project-level admins
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-08 21:45:40 +02:00
Patrick Uiterwijk
65f21ee450 Allow specifying appowners for projects
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-08 21:45:19 +02:00
Ricky Elrod
8b60f03258 The hell is a deploywer?
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2017-08-01 03:58:01 +00:00
Ricky Elrod
30021e1935 Add missing RoleBindings for waiverdb project, and abstract project out to openshift/project
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2017-08-01 03:54:10 +00:00