openshift-apps: fix yamllint on coreos/ostree files

This commit is contained in:
Dusty Mabe 2023-05-19 15:48:00 -04:00 committed by dustymabe
parent faede3940d
commit 3152c186a1
31 changed files with 341 additions and 316 deletions

View file

@ -3,10 +3,10 @@
user: root
gather_facts: false
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ci.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ci.yml
roles:
- role: openshift-apps/coreos-ci
project_name: coreos-ci
@ -19,12 +19,12 @@
- ravanelli
- walters
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-ci.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-ci.yml
- role: openshift/object-delete
app: coreos-ci
objecttype: project
objectname: coreos-ci
tags: [ never, delete ]
tags: [never, delete]

View file

@ -1,7 +1,8 @@
---
- name: provision CoreOS Cincinnati backend
hosts: os_control:os_control_stg
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml

View file

@ -1,17 +1,18 @@
---
- name: make the app be real
hosts: os_control:os_control_stg
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-koji-tagger.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-koji-tagger.yml
roles:
- role: openshift/project
app: coreos-koji-tagger
@ -58,12 +59,12 @@
template: deploymentconfig.yml
objectname: deploymentconfig.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-koji-tagger.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-koji-tagger.yml
- role: openshift/object-delete
app: coreos-koji-tagger
objecttype: project
objectname: coreos-koji-tagger
tags: [ never, delete ]
tags: [never, delete]

View file

@ -1,7 +1,8 @@
---
- name: make the app be real
hosts: os_control:os_control_stg
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -26,10 +27,10 @@
- "org.fedoraproject.prod.coreos.build.request.ostree-import"
when: env != 'staging'
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ostree-importer.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/coreos-ostree-importer.yml
roles:
- role: openshift/project
app: coreos-ostree-importer
@ -92,12 +93,12 @@
template: pvc.yml
objectname: pvc.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-ostree-importer.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/coreos-ostree-importer.yml
- role: openshift/object-delete
app: coreos-ostree-importer
objecttype: project
objectname: coreos-ostree-importer
tags: [ never, delete ]
tags: [never, delete]

View file

@ -3,10 +3,10 @@
user: root
gather_facts: false
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-coreos-pipeline.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-coreos-pipeline.yml
roles:
- role: openshift-apps/fedora-coreos-pipeline
project_name: fedora-coreos-pipeline
@ -42,10 +42,10 @@
- marmijo
- ravanelli
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/fedora-coreos-pipeline.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/fedora-coreos-pipeline.yml
- role: openshift/object-delete
app: fedora-coreos-pipeline
objecttype: project

View file

@ -1,17 +1,18 @@
---
- name: make the app be real
hosts: os_control:os_control_stg
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-ostree-pruner.yml
############################################
# actions to create the project in OpenShift
############################################
# to run: sudo rbac-playbook -l os_control_stg openshift-apps/fedora-ostree-pruner.yml
roles:
- role: openshift/project
app: fedora-ostree-pruner
@ -41,12 +42,12 @@
template: pvc.yml
objectname: pvc.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/fedora-ostree-pruner.yml
###############################################
# actions to delete the project from OpenShift
###############################################
# to run: sudo rbac-playbook -l os_control_stg -t delete openshift-apps/fedora-ostree-pruner.yml
- role: openshift/object-delete
app: fedora-ostree-pruner
objecttype: project
objectname: fedora-ostree-pruner
tags: [ never, delete ]
tags: [never, delete]

View file

@ -1,3 +1,4 @@
---
project_name: coreos-ci
project_description: CoreOS CI Infrastructure
project_service_account: coreos-ci-sa

View file

@ -1,3 +1,4 @@
---
- name: Create the directories to hold the templates
file:
path: "/root/ocp4/openshift-apps/{{project_name}}"
@ -5,7 +6,7 @@
owner: root
group: root
mode: 0770
recurse: yes
recurse: true
# generate the templates for project to be created
- name: create the templates

View file

@ -1,8 +1,9 @@
---
kind: Group
apiVersion: user.openshift.io/v1
metadata:
name: "{{project_name}}-appowners"
users:
{% for item in appowners %}
- "{{ item }}"
- "{{ item }}"
{% endfor %}

View file

@ -1,3 +1,4 @@
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:

View file

@ -1,3 +1,4 @@
---
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
@ -8,13 +9,13 @@ allowPrivilegedContainer: false
allowedCapabilities: null
apiVersion: security.openshift.io/v1
defaultAddCapabilities:
- CAP_SETFCAP
- CAP_SETFCAP
fsGroup:
type: RunAsAny
groups:
- system:cluster-admins
- system:cluster-admins
users:
- system:serviceaccount:coreos-ci:coreos-ci-sa
- system:serviceaccount:coreos-ci:coreos-ci-sa
kind: SecurityContextConstraints
metadata:
annotations:
@ -23,7 +24,7 @@ metadata:
priority: 10
readOnlyRootFilesystem: false
requiredDropCapabilities:
- MKNOD
- MKNOD
runAsUser:
type: RunAsAny
seLinuxContext:
@ -31,10 +32,9 @@ seLinuxContext:
supplementalGroups:
type: RunAsAny
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret

View file

@ -1,3 +1,4 @@
---
apiVersion: build.openshift.io/v1
kind: BuildConfig
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: build.openshift.io/v1
kind: BuildConfig
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: v1
kind: ConfigMap
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
@ -35,8 +36,8 @@ spec:
{% endif %}
# sleep infinity is useful for debugging environment issues
# comment out when not debugging
# args: ['infinity']
# command: ['/usr/bin/sleep']
# args: ['infinity']
# command: ['/usr/bin/sleep']
volumeMounts:
- name: coreos-koji-tagger-keytab-volume
mountPath: /etc/coreos-koji-tagger-keytab

View file

@ -1,8 +1,9 @@
---
apiVersion: image.openshift.io/v1
kind: List
items:
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:
@ -20,8 +21,8 @@ items:
scheduled: true
referencePolicy:
type: Source
# ImageStream for resulting built coreos-koji-tagger-img
- apiVersion: image.openshift.io/v1
# ImageStream for resulting built coreos-koji-tagger-img
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:

View file

@ -1,3 +1,4 @@
---
apiVersion: build.openshift.io/v1
kind: BuildConfig
metadata:

View file

@ -9,4 +9,3 @@ metadata:
data:
config.toml: |-
{{ load_file('fedora-messaging.toml') | indent }}

View file

@ -1,3 +1,4 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:

View file

@ -1,8 +1,9 @@
---
apiVersion: image.openshift.io/v1
kind: List
items:
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:
@ -20,8 +21,8 @@ items:
scheduled: true
referencePolicy:
type: Source
# ImageStream for resulting built coreos-ostree-importer-img
- apiVersion: image.openshift.io/v1
# ImageStream for resulting built coreos-ostree-importer-img
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:

View file

@ -1,3 +1,4 @@
---
# PVC to mount the fedora-ostree-content-volume NFS share
# that has been mapped in to OpenShift by Fedora Infra for
# us from the NetApp. This corresponds to the fedora-ostree-content{,-stg}

View file

@ -1,3 +1,4 @@
---
project_name: fedora-coreos-pipeline
project_description: Fedora CoreOS Pipeline
appowners: []

View file

@ -1,3 +1,4 @@
---
- name: Create the directories to hold the templates
file:
path: "/root/ocp4/openshift-apps/{{project_name}}"
@ -5,7 +6,7 @@
owner: root
group: root
mode: 0770
recurse: yes
recurse: true
# generate the templates for project to be created
- name: create the templates

View file

@ -1,8 +1,9 @@
---
kind: Group
apiVersion: user.openshift.io/v1
metadata:
name: "{{project_name}}-appowners"
users:
{% for item in appowners %}
- "{{ item }}"
- "{{ item }}"
{% endfor %}

View file

@ -1,3 +1,4 @@
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: build.openshift.io/v1
kind: BuildConfig
metadata:

View file

@ -1,3 +1,4 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:

View file

@ -1,8 +1,9 @@
---
apiVersion: image.openshift.io/v1
kind: List
items:
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
# ImageStream for Fedora image
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:
@ -20,8 +21,8 @@ items:
scheduled: true
referencePolicy:
type: Source
# ImageStream for resulting built fedora-ostree-pruner-img
- apiVersion: image.openshift.io/v1
# ImageStream for resulting built fedora-ostree-pruner-img
- apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
labels:

View file

@ -1,3 +1,4 @@
---
# PVC to mount the fedora-ostree-content-volume NFS share
# that has been mapped in to OpenShift by Fedora Infra for
# us from the NetApp. This corresponds to the fedora-ostree-content{,-stg}