ci-framework/post-deployment.yml at main · openstack-k8s-operators/ci-framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
- name: Run Post-deployment admin setup steps, test, and compliance scan
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: true
  tasks:
    - name: Run cifmw_setup admin_setup.yml
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: admin_setup.yml
      tags:
        - admin-setup

    # FDP Update - OpenStack package updates across all layers
    - name: FDP Update - Validate required variables
      when: cifmw_fdp_update_enabled | default(false) | bool
      tags:
        - fdp-update
      block:
        - name: Validate required variables are set
          ansible.builtin.assert:
            that:
              - cifmw_fdp_update_target_package is defined
              - cifmw_fdp_update_target_package | length > 0
              - cifmw_fdp_update_repo_baseurl is defined
              - cifmw_fdp_update_repo_baseurl | length > 0
            fail_msg: |
              Required variables are missing!

              You must set:
                - cifmw_fdp_update_target_package: Name of the RPM package to update
                - cifmw_fdp_update_repo_baseurl: Repository base URL containing the updated package
            success_msg: "Required variables validated successfully"

        - name: Update control plane container images
          ansible.builtin.import_role:
            name: fdp_update_container_images
          vars:
            cifmw_fdp_update_container_images_target_package: "{{ cifmw_fdp_update_target_package }}"
            cifmw_fdp_update_container_images_repo_baseurl: "{{ cifmw_fdp_update_repo_baseurl }}"

        - name: Update EDPM (containers and host packages)
          ansible.builtin.import_role:
            name: fdp_update_edpm
          vars:
            cifmw_fdp_update_edpm_repo_baseurl: "{{ cifmw_fdp_update_repo_baseurl }}"

    - name: Run Test
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: run_tests.yml
      tags:
        - run-tests

    - name: Run compliance scan for controllers
      ansible.builtin.import_role:
        name: compliance
      vars:
        cifmw_compliance_podman_username: "{{ cifmw_registry_token.credentials.username }}"
        cifmw_compliance_podman_password: "{{ cifmw_registry_token.credentials.password }}"
      when: cifmw_run_operators_compliance_scans | default(false) | bool
      tags:
        - compliance

- name: Run compliance scan for computes
  hosts: "{{ groups['computes'] | default ([]) }}"
  gather_facts: true
  tasks:
    - name: Run compliance scan for one compute
      ansible.builtin.import_role:
        name: compliance
        tasks_from: run_compute_node_scans.yml
      run_once: true
      when: cifmw_run_compute_compliance_scans | default(false) | bool
  tags:
    - compliance

- name: Run hooks and inject status flag
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: true
  tasks:
    - name: Run pre_end hooks
      tags:
        - pre-end
      vars:
        step: pre_end
      ansible.builtin.import_role:
        name: run_hook

    - name: Inject success flag
      ansible.builtin.file:
        path: "{{ ansible_user_dir }}/cifmw-success"
        state: touch
        mode: "0644"

- name: Run log related tasks
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: false
  tasks:
    - name: Run logging
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: run_logs.yml
      tags:
        - logs