Aurélien Bompard
56b9c8f150
Start working on keycloak in staging
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-09-29 11:19:07 +02:00
Aurélien Bompard
beb724ee65
IPA: setup a permission to modify group managers
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-09-01 11:18:45 +02:00
Aurélien Bompard
b9c73dd6ee
Forward Openshift logs to log01
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-08-09 15:55:03 +00:00
Aurélien Bompard
20ca80e25f
fixup the fixup
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-11 18:15:13 +02:00
Aurélien Bompard
c1d5cb0c9f
Fixup last commit
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-11 18:14:24 +02:00
Aurélien Bompard
2b4fa6bd91
Refactor the sysadmin-openshift role to be a more generic openshift post-install role
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-11 18:06:07 +02:00
Nils Philippsen
6c85fda0c9
Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
...
Signed-off-by: Nils Philippsen <nils@redhat.com >
2025-07-03 20:05:02 +02:00
Aurélien Bompard
ba7712dd43
Update manual playbooks that expect unsuffixed job.yml template
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-05-13 11:30:36 +02:00
Greg Sutcliffe
2ccdc83dce
Add lint prefix to template_fullpath to match openshift/object
2025-03-13 15:45:07 +00:00
Ryan Lerch
a0cd459d47
Fix some references in tasks dropping .j2
...
When fixing conflicts when merging the PR containing commit 47c68f4 ,
some of the .j2 suffuxes i added in tasks were erronounusly dropped.
this fixes those.
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 19:44:59 +10:00
Ryan Lerch
47c68f478d
ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
...
Replaces references to template: with ansible.builtin.template
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0
ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
...
Replaces references to shell: with ansible.builtin.shell
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:29:10 +10:00
Ryan Lerch
462176464b
ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
...
Replaces many references to command: with ansible.builtin.command
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc
ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
...
Replaces many references to 'copy' with ansible.builtin.copy
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107
ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
...
Replaces many references to file: with ansible.builtin.file
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 10:41:52 +10:00
Aurélien Bompard
f3517ab537
Escape jinja template chars when necessary
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-01-14 17:25:50 +01:00
Ryan Lerch
691adee6ee
Fix name[casing] ansible-lint issues
...
fix 1900 failures of the following case issue:
`name[casing]: All names should start with an uppercase letter.`
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-14 20:20:07 +10:00
Ryan Lerch
a6a2e10539
openshift roles - rename yml templates to .j2
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-14 08:37:32 +10:00
Ryan Lerch
098a9fedf2
openshift/project - rename yaml/yml templates to .j2
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-14 08:37:30 +10:00
Aurélien Bompard
64734c21e9
Set a default for keytab_host
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-10 09:42:36 +01:00
Aurélien Bompard
ffd14b9538
Pass the variables from openshift/keytab down to keytab/service
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-10 09:34:52 +01:00
Aurélien Bompard
c9bd987c66
Fix the openshift/ipa-client role
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 12:22:12 +01:00
Aurélien Bompard
1875a0a0dc
Fix variable name conflict
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 12:12:09 +01:00
Aurélien Bompard
483f9802ac
s/route_routename/route_name/g
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 11:26:36 +01:00
Aurélien Bompard
acc40816b7
Rewrite prefixes when forwarding vars in openshift roles
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 11:24:58 +01:00
Aurélien Bompard
b9ed0ea60d
Missing prefix in openshift/route
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
a4ac9af648
Fix missing prefix in openshift/object
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
fac05df8de
Prefix openshift/secret-tls
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
c5f8fe7189
Prefix openshift/import-image
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
e5a47b8e0d
Prefix openshift/sysadmin-openshift
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
4d651a8dae
Prefix openshift/ipa-client
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:46 +01:00
Aurélien Bompard
a36b40eec8
Prefix openshift/start-build
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Aurélien Bompard
560a31ef5b
Prefix openshift/object-delete
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Aurélien Bompard
cfb590c2ed
Prefix openshift/secret-file
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Aurélien Bompard
dc65a76527
Prefix openshift/imagestream
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Aurélien Bompard
cf82a481be
Prefix openshift/keytab
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Aurélien Bompard
39f2e86658
Prefix openshift/job
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-12-03 10:48:45 +01:00
Ryan Lerch
cae52420bb
[ansible-lint] prefix variable names for openshift/rollout role
...
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the variables for the
openshift/rollout role with rollout_ as required by ansible-lint
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-12-03 10:48:45 +01:00
Ryan Lerch
4dea370c66
[ansible-lint] prefix variable names for openshift/route role
...
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the variables for the
openshift/route role with route_ as required by ansible-lint
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-12-03 10:48:45 +01:00
Ryan Lerch
776866cba3
[ansible-lint] prefix variable names for openshift/object role
...
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the variables for the
openshift/object role with object_ as required by ansible-lint
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-12-03 10:48:45 +01:00
Ryan Lerch
01ace51513
[ansible-lint] prefix variable names for openshift/project role
...
ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the rvariables for the
openshift/project role with project_ as required by ansible-lint
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-12-03 10:48:44 +01:00
Adam Williamson
4194cafaf4
prometheusRules - try going back to exactly how it was before yamllint
...
...i.e. without a comment before it to suppress yamllint. Maybe
that doesn't work either?
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2024-11-30 11:28:52 -08:00
Adam Williamson
501cb25519
Revert "openshift: try and fix an error caused by yamllint cleanup"
...
This reverts commit 054bc753ac .
It doesn't seem to help. No idea why prometheusRules is blowing
up now, then :(
2024-11-30 11:08:05 -08:00
Adam Williamson
054bc753ac
openshift: try and fix an error caused by yamllint cleanup
...
It looks like these #jinja2 comments don't work with a space
between the # and the jinja2, or something. I'm getting errors
on this template when trying to run an openshift playbook ATM.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2024-11-30 10:58:05 -08:00
Ryan Lerch
89f6f1fc32
Fix majority of remaining yamllint warnings and errors
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-11-28 17:31:45 +10:00
Michal Konecny
e230842a0a
[openshift/ipa-client] Fix krb5 config
...
There was a typo in krb5 config for staging machines as the naming
convention is stg.iad2.fedoraproject.org and not iad2.stg.fedoraproject.org.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2024-11-27 13:48:21 +01:00
Aurélien Bompard
692b98ece0
name is a reserved variable
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-11-18 17:33:37 +01:00
Aurélien Bompard
33c98f7467
Allow appowners to create pods in MirrorManager
...
Ref: https://discussion.fedoraproject.org/t/openshift-permissions-for-appowners/133816
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-10-16 12:22:27 +02:00
Aurélien Bompard
5778e0d999
Create a role to run jobs in OpenShift
...
Inspired by Koschei's `koschei/job` role.
Adapt the MirrorManager move-to-archive job to it.
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-08-06 07:49:59 +02:00
Aurélien Bompard
be05575049
Add a playbook to run move-to-archive
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-07-30 11:01:27 +02:00