[ansible-lint] prefix variable names for openshift/project role

ansible-lint requires that variables for roles are prefixed with the
name of the role. This commit prefixes the rvariables for the
openshift/project role with project_ as required by ansible-lint

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
This commit is contained in:
Ryan Lercho 2024-11-14 18:59:42 +10:00 committed by Aurélien Bompard
parent c3ef59647d
commit 01ace51513
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
68 changed files with 227 additions and 227 deletions

View file

@ -12,9 +12,9 @@
roles: roles:
# oc new-project application-monitoring # oc new-project application-monitoring
- role: openshift/project - role: openshift/project
app: application-monitoring project_app: application-monitoring
description: Hosts the application monitoring operator project_description: Hosts the application monitoring operator
appowners: project_appowners:
- asaleh - asaleh
- siddharthvipul1 - siddharthvipul1

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: asknot project_app: asknot
description: What can I do for Fedora project_description: What can I do for Fedora
appowners: project_appowners:
- zlopez - zlopez
- kevin - kevin

View file

@ -84,9 +84,9 @@
- rabbitmq_cluster - rabbitmq_cluster
- role: openshift/project - role: openshift/project
app: badges project_app: badges
description: "Badges" project_description: "Badges"
appowners: project_appowners:
- abompard - abompard
- nphilipp - nphilipp
- ryanlerch - ryanlerch

View file

@ -76,12 +76,12 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: blockerbugs project_app: blockerbugs
description: Blockerbugs project_description: Blockerbugs
appowners: project_appowners:
- frantisekz - frantisekz
- adamwill - adamwill
alert_users: project_alert_users:
- frantisekz - frantisekz
tags: tags:
- appowners - appowners

View file

@ -42,9 +42,9 @@
sent_topics: "{{ bodhi_sent_topics }}" sent_topics: "{{ bodhi_sent_topics }}"
- role: openshift/project - role: openshift/project
app: bodhi project_app: bodhi
description: bodhi project_description: bodhi
appowners: project_appowners:
- abompard - abompard
- mattia - mattia
- patrikp - patrikp
@ -55,9 +55,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: bodhi project_app: bodhi
description: bodhi project_description: bodhi
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- mattia - mattia

View file

@ -16,9 +16,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.bugzilla\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.bugzilla\..*
- role: openshift/project - role: openshift/project
app: bugzilla2fedmsg project_app: bugzilla2fedmsg
description: bugzilla2fedmsg project_description: bugzilla2fedmsg
appowners: project_appowners:
- abompard - abompard
- kevin - kevin
tags: tags:

View file

@ -24,9 +24,9 @@
critical: 50 critical: 50
- role: openshift/project - role: openshift/project
app: cloud-image-uploader project_app: cloud-image-uploader
description: AMQP consumer that uploads Cloud images to cloud providers project_description: AMQP consumer that uploads Cloud images to cloud providers
appowners: project_appowners:
- jcline - jcline
- role: openshift/object - role: openshift/object

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: compose-tracker project_app: compose-tracker
description: Opens issues for failed Composes against https://pagure.io/releng/failed-composes/ project_description: Opens issues for failed Composes against https://pagure.io/releng/failed-composes/
appowners: project_appowners:
- dustymabe - dustymabe
- mizdebsk - mizdebsk
- humaton - humaton

View file

@ -22,9 +22,9 @@
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-cincinnati.yml # to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-cincinnati.yml
roles: roles:
- role: openshift/project - role: openshift/project
app: coreos-cincinnati project_app: coreos-cincinnati
description: Fedora CoreOS Cincinnati backend project_description: Fedora CoreOS Cincinnati backend
appowners: project_appowners:
- jlebon - jlebon
- dustymabe - dustymabe
- siosm - siosm

View file

@ -15,9 +15,9 @@
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-koji-tagger.yml # to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-koji-tagger.yml
roles: roles:
- role: openshift/project - role: openshift/project
app: coreos-koji-tagger project_app: coreos-koji-tagger
description: Tags builds into koji tags within Fedora's Koji instance project_description: Tags builds into koji tags within Fedora's Koji instance
appowners: project_appowners:
- c4rt0 - c4rt0
- dustymabe - dustymabe
- jlebon - jlebon

View file

@ -35,9 +35,9 @@
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ostree-importer.yml # to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ostree-importer.yml
roles: roles:
- role: openshift/project - role: openshift/project
app: coreos-ostree-importer project_app: coreos-ostree-importer
description: Imports OSTree commits into Fedora from the Fedora CoreOS pipeline project_description: Imports OSTree commits into Fedora from the Fedora CoreOS pipeline
appowners: project_appowners:
- dustymabe - dustymabe
- jlebon - jlebon
- kevin - kevin

View file

@ -38,9 +38,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: datagrepper project_app: datagrepper
description: "Query the message history" project_description: "Query the message history"
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- kevin - kevin
@ -48,9 +48,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: datagrepper project_app: datagrepper
description: "Query the message history" project_description: "Query the message history"
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- james02135 - james02135

View file

@ -22,9 +22,9 @@
sent_topics: ^$ sent_topics: ^$
- role: openshift/project - role: openshift/project
app: datanommer project_app: datanommer
description: "Fedora messaging consumer" project_description: "Fedora messaging consumer"
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- james02135 - james02135
@ -35,9 +35,9 @@
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: datanommer project_app: datanommer
description: "Fedora messaging consumer" project_description: "Fedora messaging consumer"
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- james02135 - james02135

View file

@ -15,9 +15,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.discourse\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.discourse\..*
- role: openshift/project - role: openshift/project
app: discourse2fedmsg project_app: discourse2fedmsg
description: "Relay Discourse webhooks to Fedora Messaging" project_description: "Relay Discourse webhooks to Fedora Messaging"
appowners: project_appowners:
- ryanlerch - ryanlerch
- abompard - abompard
- kevin - kevin

View file

@ -11,16 +11,16 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: docsbuilding project_app: docsbuilding
description: Documentation building project_description: Documentation building
alerting: true project_alerting: true
appowners: project_appowners:
- asamalik - asamalik
- jibecfed - jibecfed
- dustymabe - dustymabe
- darknao - darknao
- pbokoc - pbokoc
alert_users: project_alert_users:
- darknao - darknao
- pbokoc - pbokoc
- kevin - kevin

View file

@ -16,8 +16,8 @@
ansible.builtin.include_role: ansible.builtin.include_role:
name: openshift/project name: openshift/project
vars: vars:
description: Documentation translation project_description: Documentation translation
appowners: project_appowners:
- asamalik - asamalik
- darknao - darknao
- jibecfed - jibecfed

View file

@ -17,9 +17,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: easyfix project_app: easyfix
description: "Easyfixes" project_description: "Easyfixes"
appowners: project_appowners:
- abompard - abompard
tags: tags:
- apply-appowners - apply-appowners

View file

@ -37,9 +37,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fedora_elections\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fedora_elections\..*
- role: openshift/project - role: openshift/project
app: elections project_app: elections
description: Fedora Elections apps project_description: Fedora Elections apps
appowners: project_appowners:
- bcotton - bcotton
tags: tags:
- appowners - appowners

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: fasjson project_app: fasjson
description: "Accounts API" project_description: "Accounts API"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch
@ -24,9 +24,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: fasjson project_app: fasjson
description: "Accounts API" project_description: "Accounts API"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch

View file

@ -15,9 +15,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fedocal\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fedocal\..*
- role: openshift/project - role: openshift/project
app: fedocal project_app: fedocal
description: Fedora calendar apps project_description: Fedora calendar apps
appowners: project_appowners:
- kevin - kevin
- role: openshift/object - role: openshift/object

View file

@ -15,9 +15,9 @@
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-ostree-pruner.yml # to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-ostree-pruner.yml
roles: roles:
- role: openshift/project - role: openshift/project
app: fedora-ostree-pruner project_app: fedora-ostree-pruner
description: Prunes OSTree repositories based on policy project_description: Prunes OSTree repositories based on policy
appowners: project_appowners:
- dustymabe - dustymabe
- jlebon - jlebon
- kevin - kevin

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: fedora-packages-static project_app: fedora-packages-static
description: Fedora fedora-packages-static apps project_description: Fedora fedora-packages-static apps
appowners: project_appowners:
- mymindstorm - mymindstorm
- kevin - kevin

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: flask-oidc-dev project_app: flask-oidc-dev
description: "Authentication testing" project_description: "Authentication testing"
appowners: project_appowners:
- abompard - abompard
- dkirwan - dkirwan
- jamricha - jamricha

View file

@ -12,9 +12,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: flatpak-indexer project_app: flatpak-indexer
description: Fedora Flatpak Indexer apps project_description: Fedora Flatpak Indexer apps
appowners: project_appowners:
- otaylor - otaylor
- kevin - kevin
- kalev - kalev

View file

@ -114,9 +114,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: fmn project_app: fmn
description: "Fedora Messaging Notifications" project_description: "Fedora Messaging Notifications"
appowners: project_appowners:
- abompard - abompard
- ryanlerch - ryanlerch
- nphilipp - nphilipp

View file

@ -19,9 +19,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: greenwave project_app: greenwave
description: greenwave project_description: greenwave
appowners: project_appowners:
- lholecek - lholecek
- vmaljulin - vmaljulin
- kevin - kevin

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: ipsilon-website project_app: ipsilon-website
description: "ipsilon-project.org" project_description: "ipsilon-project.org"
appowners: project_appowners:
- abompard - abompard
tags: tags:
- apply-appowners - apply-appowners

View file

@ -76,12 +76,12 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: kanban project_app: kanban
description: kanban project_description: kanban
appowners: project_appowners:
- frantisekz - frantisekz
- jskladan - jskladan
alert_users: project_alert_users:
- frantisekz - frantisekz
tags: tags:
- apply-appowners - apply-appowners

View file

@ -44,9 +44,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.kerneltest\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.kerneltest\..*
- role: openshift/project - role: openshift/project
app: kerneltest project_app: kerneltest
description: kerneltest project_description: kerneltest
appowners: project_appowners:
- pingou - pingou
- ryanlerch - ryanlerch
tags: tags:

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: languages project_app: languages
description: Localization measurement and tooling project_description: Localization measurement and tooling
appowners: project_appowners:
- darknao - darknao
- jibecfed - jibecfed

View file

@ -36,9 +36,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(meetbot|maubot)\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(meetbot|maubot)\..*
- role: openshift/project - role: openshift/project
app: maubot project_app: maubot
description: Maubot project_description: Maubot
appowners: project_appowners:
- ryanlerch - ryanlerch
- kevin - kevin

View file

@ -15,9 +15,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.mdapi\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.mdapi\..*
- role: openshift/project - role: openshift/project
app: mdapi project_app: mdapi
description: mdapi is a small API exposing the metadata contained in different RPM repositories. project_description: mdapi is a small API exposing the metadata contained in different RPM repositories.
appowners: project_appowners:
- t0xic0der - t0xic0der
- kevin - kevin

View file

@ -87,9 +87,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: messaging-bridges project_app: messaging-bridges
description: "ZeroMQ <-> AMQP bridges" project_description: "ZeroMQ <-> AMQP bridges"
appowners: project_appowners:
- abompard - abompard
- kevin - kevin
tags: tags:

View file

@ -46,13 +46,13 @@
- rabbitmq_cluster - rabbitmq_cluster
- role: openshift/project - role: openshift/project
app: mirrormanager project_app: mirrormanager
description: "MirrorManager" project_description: "MirrorManager"
appowners: project_appowners:
- abompard - abompard
- nphilipp - nphilipp
- adrian - adrian
allow_pod_creation: true project_allow_pod_creation: true
tags: tags:
- apply-appowners - apply-appowners

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: monitor-dashboard project_app: monitor-dashboard
description: POC for the dashboards project_description: POC for the dashboards
appowners: project_appowners:
- nphilipp - nphilipp
- asaleh - asaleh

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: monitor-gating project_app: monitor-gating
description: Monitor the packager and gating workflow project_description: Monitor the packager and gating workflow
appowners: project_appowners:
- nphilipp - nphilipp
- zlopez - zlopez
- patrikp - patrikp

View file

@ -12,8 +12,8 @@
roles: roles:
- role: openshift/project - role: openshift/project
description: Mote v2 project_description: Mote v2
appowners: project_appowners:
- darknao - darknao
- t0xic0der - t0xic0der
- ryanlerch - ryanlerch

View file

@ -17,9 +17,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..*
- role: openshift/project - role: openshift/project
app: noggin-centos project_app: noggin-centos
description: "Self-service account portal" project_description: "Self-service account portal"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch
@ -27,9 +27,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: noggin-centos project_app: noggin-centos
description: "Self-service account portal" project_description: "Self-service account portal"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch

View file

@ -17,9 +17,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..*
- role: openshift/project - role: openshift/project
app: noggin project_app: noggin
description: "Self-service account portal" project_description: "Self-service account portal"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch
@ -27,9 +27,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: noggin project_app: noggin
description: "Self-service account portal" project_description: "Self-service account portal"
appowners: project_appowners:
- abompard - abompard
- nils - nils
- ryanlerch - ryanlerch

View file

@ -21,9 +21,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: openscanhub project_app: openscanhub
description: openscanhub project_description: openscanhub
appowners: project_appowners:
- praiskup - praiskup
- svashisht - svashisht
- kevin - kevin
@ -32,9 +32,9 @@
- apply-appowners - apply-appowners
when: env == "production" when: env == "production"
- role: openshift/project - role: openshift/project
app: openscanhub project_app: openscanhub
description: openscanhub project_description: openscanhub
appowners: project_appowners:
- praiskup - praiskup
- svashisht - svashisht
- kevin - kevin

View file

@ -14,8 +14,8 @@
roles: roles:
- role: openshift/project - role: openshift/project
description: Openvpn Client project_description: Openvpn Client
appowners: project_appowners:
- kevin - kevin
tags: tags:
- apply-appowners - apply-appowners

View file

@ -50,9 +50,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: oraculum project_app: oraculum
description: Packager Dashboard project_description: Packager Dashboard
appowners: project_appowners:
- frantisekz - frantisekz
- jskladan - jskladan
tags: tags:

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: planet project_app: planet
description: "Fedora Planet" project_description: "Fedora Planet"
appowners: project_appowners:
- phsmoura - phsmoura
- kevin - kevin
tags: tags:

View file

@ -33,9 +33,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: poddlers project_app: poddlers
description: Small fedora-messaging toddlers that keep running around in pods. project_description: Small fedora-messaging toddlers that keep running around in pods.
appowners: project_appowners:
- abompard - abompard
- zlopez - zlopez
- kevin - kevin

View file

@ -15,9 +15,9 @@
username: "anitya{{ env_suffix }}" username: "anitya{{ env_suffix }}"
sent_topics: ^org\.release-monitoring\.{{ env_short }}\.anitya\..* sent_topics: ^org\.release-monitoring\.{{ env_short }}\.anitya\..*
- role: openshift/project - role: openshift/project
app: release-monitoring project_app: release-monitoring
description: release-monitoring project_description: release-monitoring
appowners: project_appowners:
- zlopez - zlopez
- role: openshift/secret-file - role: openshift/secret-file
app: release-monitoring app: release-monitoring

View file

@ -28,9 +28,9 @@
# The openshift/project role breaks if the project already exists: # The openshift/project role breaks if the project already exists:
# https://pagure.io/fedora-infrastructure/issue/6404 # https://pagure.io/fedora-infrastructure/issue/6404
- role: openshift/project - role: openshift/project
app: resultsdb-ci-listener project_app: resultsdb-ci-listener
description: resultsdb-ci-listener project_description: resultsdb-ci-listener
appowners: project_appowners:
- lholecek - lholecek
- vmaljulin - vmaljulin
- lrossett - lrossett

View file

@ -45,9 +45,9 @@
# The openshift/project role breaks if the project already exists: # The openshift/project role breaks if the project already exists:
# https://pagure.io/fedora-infrastructure/issue/6404 # https://pagure.io/fedora-infrastructure/issue/6404
- role: openshift/project - role: openshift/project
app: resultsdb project_app: resultsdb
description: resultsdb project_description: resultsdb
appowners: project_appowners:
- lholecek - lholecek
- vmaljulin - vmaljulin
- lrossett - lrossett

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: review-stats project_app: review-stats
description: Generate HTML with statistics about Fedora review tickets project_description: Generate HTML with statistics about Fedora review tickets
appowners: project_appowners:
- mattia - mattia
- kevin - kevin
tags: tags:

View file

@ -13,9 +13,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: test-auth project_app: test-auth
description: "Authentication testing" project_description: "Authentication testing"
appowners: project_appowners:
- abompard - abompard
tags: tags:
- apply-appowners - apply-appowners

View file

@ -64,9 +64,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: testdays project_app: testdays
description: The Fedora QE testdays application project_description: The Fedora QE testdays application
appowners: project_appowners:
- frantisekz - frantisekz
- jskladan - jskladan
tags: tags:

View file

@ -24,9 +24,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.hotness\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.hotness\..*
- role: openshift/project - role: openshift/project
app: the-new-hotness project_app: the-new-hotness
description: Fedora-messaging consumer that listens to the-new-hotness.org and files bugzilla bugs in response. project_description: Fedora-messaging consumer that listens to the-new-hotness.org and files bugzilla bugs in response.
appowners: project_appowners:
- zlopez - zlopez
- role: openshift/keytab - role: openshift/keytab

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: toddlers project_app: toddlers
description: Small fedora-messaging toddlers that keep running around project_description: Small fedora-messaging toddlers that keep running around
appowners: project_appowners:
- abompard - abompard
- zlopez - zlopez
- kevin - kevin

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: transtats project_app: transtats
description: transtats project_description: transtats
appowners: project_appowners:
- suanand - suanand
- role: openshift/object - role: openshift/object
app: transtats app: transtats

View file

@ -48,9 +48,9 @@
# The openshift/project role breaks if the project already exists: # The openshift/project role breaks if the project already exists:
# https://pagure.io/fedora-infrastructure/issue/6404 # https://pagure.io/fedora-infrastructure/issue/6404
- role: openshift/project - role: openshift/project
app: waiverdb project_app: waiverdb
description: waiverdb project_description: waiverdb
appowners: project_appowners:
- lholecek - lholecek
- vmaljulin - vmaljulin
- kevin - kevin

View file

@ -39,9 +39,9 @@
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(github|discourse)\..* sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(github|discourse)\..*
- role: openshift/project - role: openshift/project
app: webhook2fedmsg project_app: webhook2fedmsg
description: "Relay webhooks to Fedora Messaging" project_description: "Relay webhooks to Fedora Messaging"
appowners: project_appowners:
- ryanlerch - ryanlerch
- abompard - abompard
- t0xic0der - t0xic0der

View file

@ -12,10 +12,10 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: websites project_app: websites
description: Fedora websites building project_description: Fedora websites building
alerting: true project_alerting: true
appowners: project_appowners:
- ryanlerch - ryanlerch
- darknao - darknao
- kevin - kevin

View file

@ -11,9 +11,9 @@
roles: roles:
- role: openshift/project - role: openshift/project
app: zezere project_app: zezere
description: Zezere provisioning service project_description: Zezere provisioning service
appowners: project_appowners:
- pbrobinson - pbrobinson
- role: openshift/imagestream - role: openshift/imagestream
app: zezere app: zezere

View file

@ -1,12 +1,12 @@
--- ---
allow_fas_db: false project_allow_fas_db: false
allow_iad2: true project_allow_iad2: true
allow_pod_creation: false project_allow_pod_creation: false
egress_policy_template: "{{roles_path}}/openshift/project/templates/egresspolicy.yml" egress_policy_template: "{{roles_path}}/openshift/project/templates/egresspolicy.yml"
alerting: true project_alerting: true
alert_rules: project_alert_rules:
- pod - pod
- cronjob - cronjob
- buildconfig - buildconfig

View file

@ -1,14 +1,14 @@
--- ---
- name: Create project directory - name: Create project directory
file: file:
path: /etc/openshift_apps/{{app}} path: /etc/openshift_apps/{{project_app}}
state: directory state: directory
owner: root owner: root
group: root group: root
mode: "0750" mode: "0750"
- name: Determine if project already exists - name: Determine if project already exists
command: oc get project {{app}} command: oc get project {{project_app}}
register: project_exists register: project_exists
failed_when: false failed_when: false
changed_when: "'not found' in project_exists.stderr" changed_when: "'not found' in project_exists.stderr"
@ -16,10 +16,10 @@
- name: Copy project template - name: Copy project template
template: template:
src="{{roles_path}}/openshift/project/templates/project.yml" src="{{roles_path}}/openshift/project/templates/project.yml"
dest=/etc/openshift_apps/{{app}}/project.yml dest=/etc/openshift_apps/{{project_app}}/project.yml
- name: Create project - name: Create project
shell: oc apply --validate=strict -f /etc/openshift_apps/{{app}}/project.yml shell: oc apply --validate=strict -f /etc/openshift_apps/{{project_app}}/project.yml
when: "'not found' in project_exists.stderr" when: "'not found' in project_exists.stderr"
- name: deployer.yml - name: deployer.yml
@ -70,4 +70,4 @@
vars: vars:
objectname: prometheusRules.yml objectname: prometheusRules.yml
template_fullpath: "{{roles_path}}/openshift/project/templates/prometheusRules.yml" template_fullpath: "{{roles_path}}/openshift/project/templates/prometheusRules.yml"
when: alerting when: project_alerting

View file

@ -3,12 +3,12 @@ apiVersion: monitoring.coreos.com/v1beta1
kind: AlertmanagerConfig kind: AlertmanagerConfig
metadata: metadata:
name: appowners-alerts name: appowners-alerts
namespace: "{{app}}" namespace: "{{project_app}}"
spec: spec:
receivers: receivers:
- emailConfigs: - emailConfigs:
- sendResolved: true - sendResolved: true
to: "{{ alert_users | default(appowners) | product(['fedoraproject.org']) | map('join', '@') | join(',') }}" to: "{{ project_alert_users | default(project_appowners) | product(['fedoraproject.org']) | map('join', '@') | join(',') }}"
name: default name: default
route: route:
groupBy: groupBy:

View file

@ -2,12 +2,12 @@
apiVersion: authorization.openshift.io/v1 apiVersion: authorization.openshift.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
namespace: "{{app}}" namespace: "{{project_app}}"
name: appowners name: appowners
roleRef: roleRef:
name: appowner name: appowner
namespace: "{{app}}" namespace: "{{project_app}}"
userNames: userNames:
{% for owner in appowners %} {% for owner in project_appowners %}
- {{ owner }} - {{ owner }}
{% endfor %} {% endfor %}

View file

@ -5,11 +5,11 @@ kind: RoleBinding
metadata: metadata:
creationTimestamp: null creationTimestamp: null
name: system:deployers name: system:deployers
namespace: "{{app}}" namespace: "{{project_app}}"
roleRef: roleRef:
name: system:deployer name: system:deployer
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: deployer name: deployer
userNames: userNames:
- system:serviceaccount:{{app}}:deployer - system:serviceaccount:{{project_app}}:deployer

View file

@ -5,7 +5,7 @@ metadata:
name: default name: default
spec: spec:
egress: egress:
{% if not allow_fas_db %} {% if not project_allow_fas_db %}
{% if env == "staging" %} {% if env == "staging" %}
- type: Deny - type: Deny
to: to:
@ -16,7 +16,7 @@ spec:
cidrSelector: "10.3.163.42/32" cidrSelector: "10.3.163.42/32"
{% endif %} {% endif %}
{% endif %} {% endif %}
{% if not allow_iad2 %} {% if not project_allow_iad2 %}
- type: Deny - type: Deny
to: to:
cidrSelector: "10.0.0.0/8" cidrSelector: "10.0.0.0/8"

View file

@ -5,11 +5,11 @@ kind: RoleBinding
metadata: metadata:
creationTimestamp: null creationTimestamp: null
name: system:image-builders name: system:image-builders
namespace: "{{app}}" namespace: "{{project_app}}"
roleRef: roleRef:
name: system:image-builder name: system:image-builder
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: builder name: builder
userNames: userNames:
- system:serviceaccount:{{app}}:builder - system:serviceaccount:{{project_app}}:builder

View file

@ -1,15 +1,15 @@
--- ---
apiVersion: authorization.openshift.io/v1 apiVersion: authorization.openshift.io/v1
groupNames: groupNames:
- system:serviceaccounts:{{app}} - system:serviceaccounts:{{project_app}}
kind: RoleBinding kind: RoleBinding
metadata: metadata:
creationTimestamp: null creationTimestamp: null
name: system:image-pullers name: system:image-pullers
namespace: "{{app}}" namespace: "{{project_app}}"
roleRef: roleRef:
name: system:image-puller name: system:image-puller
subjects: subjects:
- kind: SystemGroup - kind: SystemGroup
name: system:serviceaccounts:{{app}} name: system:serviceaccounts:{{project_app}}
userNames: [] userNames: []

View file

@ -3,9 +3,9 @@ apiVersion: project.openshift.io/v1
kind: Project kind: Project
metadata: metadata:
annotations: annotations:
openshift.io/description: "{{description}}" openshift.io/description: "{{project_description}}"
openshift.io/display-name: "{{app}}" openshift.io/display-name: "{{project_app}}"
creationTimestamp: null creationTimestamp: null
name: "{{app}}" name: "{{project_app}}"
spec: {} spec: {}
status: {} status: {}

View file

@ -6,7 +6,7 @@ metadata:
name: alerts name: alerts
spec: spec:
groups: groups:
{% if 'cronjob' in alert_rules %} {% if 'cronjob' in project_alert_rules %}
- name: CronjobFailed - name: CronjobFailed
rules: rules:
- alert: CronjobFailed - alert: CronjobFailed
@ -18,7 +18,7 @@ spec:
labels: labels:
severity: warning severity: warning
{% endif %} {% endif %}
{% if 'buildconfig' in alert_rules %} {% if 'buildconfig' in project_alert_rules %}
- name: BuildFailed - name: BuildFailed
rules: rules:
- alert: BuildFailed - alert: BuildFailed
@ -32,7 +32,7 @@ spec:
labels: labels:
severity: warning severity: warning
{% endif %} {% endif %}
{% if 'pod' in alert_rules %} {% if 'pod' in project_alert_rules %}
- name: PodFailing - name: PodFailing
rules: rules:
- alert: PodPending - alert: PodPending

View file

@ -5,7 +5,7 @@ metadata:
annotations: annotations:
openshift.io/description: An application owner. Can view everything but ConfigMaps. openshift.io/description: An application owner. Can view everything but ConfigMaps.
name: appowner name: appowner
namespace: "{{ app }}" namespace: "{{ project_app }}"
rules: rules:
{% if env == "staging" %} {% if env == "staging" %}
- apiGroups: ["monitoring.coreos.com"] - apiGroups: ["monitoring.coreos.com"]
@ -42,7 +42,7 @@ rules:
- get - get
- list - list
- watch - watch
{% if env == "staging" or allow_pod_creation %} {% if env == "staging" or project_allow_pod_creation %}
- create - create
- delete - delete
- update - update