With the upcoming activation of RHEL8 pipeline, we decided with infra it
was better to switch rdo registry to restricted access.
This means that all the job in rdo must login to registry to pull
containers.
All the Centos7 jobs must now call this role to login to the registry,
so we are expanding the login part to satisfy the workflow
RHEL8 job with podman will use a internal role instead.
Change-Id: I6e55bdcf493d04bfc88ae22154124a7888563147
We need to be able to perform a login prior to pulling containers from
registries that require authentication.
Change-Id: Ic3b720ba35db8e3f3f866cd31d9171e91b04a86c
Related-Bug: #1833584
This commit adds an option `container_registry_skip_reconfiguration`,
that, when enabled, disables the reconfiguration if docker has already
been configured once.
Change-Id: I0bcaeea9cd24ab35a81d8c3d6fc3a384c1e4c3c2
Related-Bug: #1804790
This role should really be focused on creating a working docker and
registry, and installing kolla is not really related to that.
Even in CI, if container modifications are required it is more likely
to happen via modifying existing images with
ansible-role-tripleo-modify-image, which doesn't involve the kolla
package.
Change-Id: I7ba8d89b75f206aa92bdfd907712b1b0b44a4c32
Add support to configure additional sockets with a new parameter (must
be an array):
container_registry_additional_sockets
Example of value:
container_registry_additional_sockets:
- /var/lib/openstack/docker.sock
- /var/run/some-other/docker.sock
Change-Id: I0da7f5f1005532b8ba68c46ed6ca065cc333d0d5
We don't want to automatically enable selinux options, but instead have
control via container_registry_selinux parameter if whether or not we
want to add selinux flags to docker.
This code:
{% if container_registry_mirrors | length > 0 %}registry-mirrors: [{{ container_registry_mirrors }}]{% endif %}
Needs to include the brackets and I haven't found a way yet to include
them without Ansible failure. In the meantime, let's go back on the old
code.
- add prefix to role variable names to avoid name collisions
- use ini_file rather than blockinfile for setting mount flags
- use ansible_selinux fact rather than depending on variable in role
- use role variables for setting values to be used in tasks rather than in line conditionals
- use filters for creating JSON file rather than a template
- remove '---' from YAML files since Ansible does not user YAML front matter
- update meta/main.yml