Add foreman_ansible

[ehelms]

No description provided.

[ehelms]

This relies on theforeman/foreman-oci-images#25 first

[ehelms]

I started adding this to help ensure the IoP use-case could work out of the box by having ansible support for remediation. There is more nuance and testing for this feature that needs to happen to be complete.

When I test this locally with the updated containers built locally, I run into the hammer sync failing with no clear reason why. That will need investigation, i.e.:

hammer ansible roles sync

[adamruzicka]

@ehelms what are your plans with this?

[evgeni]

@adamruzicka I cleaned up what I disliked, but would now require someone with Ansible knowledge to look at this :)

[adamruzicka]

Seems to work well (ad-hoc rex-like jobs, role management, role application, reports from roles). Some minor suggestions inline

[adamruzicka]

Previously we relied on /etc/ansible/roles for "user roles" (and s/role/collection/g). Having everthing in /var/lib would be cleaner, but also make the migration harder. Personally I'd be willing to make that tradeoff, but still worth calling out.

[evgeni]

I do like that it's separated from the Ansible of the host, which might (intentionally or not) contain other content too

[adamruzicka]

#713 (comment) :)

[evgeni]

that's a shiny mirror you have there. where did you get it?

[evgeni]

@adamruzicka addressed all your code-comments

[adamruzicka]

This is good. There will be a followup or two to close the feature gap, but this is a good start.