- fix: Cannot remove volumes from kube yaml - need to convert yaml to list (#180)
- fix: subgid maps user to gids, not group to gids (#178)
- ci: Add tags to TF workflow, allow more [citest bad] formats (#177)
- test: fix ostree support (#175)
- test: skip quadlet tests on non-x86_64 (#173)
- feat: Handle reboot for transactional update systems (#170)
- ci: Add workflow for ci_test bad, use remote fmf plan (#168)
- ci: Fix missing slash in ARTIFACTS_URL (#169)
- fix: Ensure user linger is closed on EL10 (#165)
- ci: Add tft plan and workflow (#162)
- ci: Update fmf plan to add a separate job to prepare managed nodes (#164)
- ci: bump sclorg/testing-farm-as-github-action from 2 to 3 (#166)
- fix: add support for EL10 (#159)
- fix: proper cleanup for networks; ensure cleanup of resources (#160)
- ci: ansible-lint action now requires absolute directory (#157)
- fix: grab name of network to remove from quadlet file (#155)
- ci: use tox-lsr 3.3.0 which uses ansible-test 2.17 (#151)
- ci: tox-lsr 3.4.0 - fix py27 tests; move other checks to py310 (#153)
- ci: Add supported_ansible_also to .ansible-lint (#154)
- feat: support registry_username and registry_password (#141)
- feat: support podman_credential_files (#142)
- feat: manage TLS cert/key files for registry connections and validate certs (#146)
- fix: use correct user for cancel linger file name (#138)
- fix: do not use become for changing hostdir ownership, and expose subuid/subgid info (#139)
- fix: make kube cleanup idempotent (#144)
- test: do not check for root linger (#140)
- chore: change no_log false to true; fix comment (#143)
- chore: use none in jinja code, not null (#145)
- ci: bump mathieudutour/github-tag-action from 6.1 to 6.2 (#136)
- fix: Add support for --check flag (#134)
- ci: bump ansible/ansible-lint from 6 to 24 (#132)
- test: gather facts for quadlet_basic test (#130)
- fix: ensure user linger is enabled and disabled correctly (#127)
- ci: fix python unit test - copy pytest config to tests/unit (#128)
- test: allow testing to see if secrets are logged (#125)
- fix: cast secret data to string in order to allow JSON valued strings (#122)
- fix: name of volume quadlet service should be basename-volume.service (#119)
- ci: support ansible-lint and ansible-test 2.16 (#116)
- ci: Use supported ansible-lint action; run ansible-lint against the collection (#117)
- fix: add no_log: true for tasks that can log secret data (#113)
- ci: bump actions/github-script from 6 to 7 (#109)
- refactor: get_ostree_data.sh use env shebang - remove from .sanity* (#110)
- feat: support for ostree systems (#105)
- build(deps): bump actions/checkout from 3 to 4 (#97)
- ci: ensure dependabot git commit message conforms to commitlint (#100)
- ci: tox-lsr version 3.1.1 (#104)
-
ci: Add markdownlint, test_converting_readme, and build_docs workflows (#93)
- markdownlint runs against README.md to avoid any issues with converting it to HTML
- test_converting_readme converts README.md > HTML and uploads this test artifact to ensure that conversion works fine
- build_docs converts README.md > HTML and pushes the result to the docs branch to publish dosc to GitHub pages site.
- Fix markdown issues in README.md
Signed-off-by: Sergei Petrosian spetrosi@redhat.com
-
docs: Make badges consistent, run markdownlint on all .md files (#94)
- Consistently generate badges for GH workflows in README RHELPLAN-146921
- Run markdownlint on all .md files
- Add custom-woke-action if not used already
- Rename woke action to Woke for a pretty badge
Signed-off-by: Sergei Petrosian spetrosi@redhat.com
-
ci: Remove badges from README.md prior to converting to HTML (#95)
- Remove thematic break after badges
- Remove badges from README.md prior to converting to HTML
Signed-off-by: Sergei Petrosian spetrosi@redhat.com
- fix: user secret support (#91)
- fix: require the crun package on EL8 (#88)
- feat: allow not pulling images, continue if pull fails (#82)
- fix: support global options in config files (#83)
- refactor: use getsubids to check subuid and subgid (#86)
- feat: add support for quadlet, secrets (#78)
- fix: facts being gathered unnecessarily (#80)
- ci: Add pull request template and run commitlint on PR title only (#76)
- ci: Rename commitlint to PR title Lint, echo PR titles from env var (#77)
- ci: ansible-lint - ignore var-naming[no-role-prefix] (#79)
- fix: make role work on ansible-core 2.15
- docs: Consistent contributing.md for all roles - allow role specific contributing.md section
- docs: remove unused Dependencies section in README
- fix: graphroot required in storage.conf on Fedora 37
- fix: Use match instead of in for test for jinja 2.7 support
- test: use podman pod exists to check if pods absent/stopped
- test: check generated files for ansible_managed, fingerprint
- test: ensure the test works with ANSIBLE_GATHERING=explicit
- ci: Add commitlint GitHub action to ensure conventional commits with feedback
- ansible-lint - changed_when required even with conditional tasks (#57)
- Add README-ansible.md to refer Ansible intro page on linux-system-roles.github.io (#54)
- Fingerprint RHEL System Role managed config files (#55)
- none
- fix typo in README (#46)
- none
- none
- Ease permissions on kube spec dir and files (#44)
- Add another example that shows using a Podman volume
- ansible-lint 6.x fixes
- add docs for state parameter (#43)
- add checking for subuid, subgid
Ensure that the specified user is present in /etc/subuid.
Ensure that the specified group is present in /etc/subgid.
- none
- none
- none
- ensure role works with podman 4.3
- ensure role works with ansible-core 2.14
- ensure role passes ansible-lint 6.x
- fix role name
-
Manage podman containers using the
podman kube playKubernetes YAML file interface -podman_kube_spec- system and user -
Automatically create host volume directories based on specifying host mounted volumes in the K8s YAML spec
-
Use
podman_host_directoriesto provide detailed ownership, permissions, SELinux policy, etc. for host directories created by the role -
Use
podman_firewallto manage firewalld properties of ports specified inpodman_kube_spec -
Use
podman_selinux_portsto manage SELinux policy for ports specified inpodman_kube_spec -
Manage config files using
podman_containers_conf,podman_registries_conf,podman_storage_conf, andpodman_policy_json
- none
- none