Also include support for cron scheduling

Author: MoteHue

roles/github/README.md

@@ -71,6 +71,8 @@ github_buildx_inline_config: |
 
 `github_tempest_test_suites`: provide a list of load lists to be made available within the drop-down list for running tempest. Defaults to `default` and `tempest-full`.
 
+If you are using the workflow `github_run_kolla_ansible_octavia_certificates` to check for the expiry of Octavia Amphora certificates, by default it will allow for manual execution via workflow_dispatch. You can change this to run automatically on a schedule by setting `github_octavia_certificates_schedule` to a cron schedule. If you want to change the number of days checked, set the variable `github_default_octavia_certificates_expiry_time`.
+
 If you wish to make more impactful changes such as which workflows are built and what they contain then see the list of dictionaries called `workflows` in `defaults/main.yml`
 
 `github_workflows:` is a list of dictionaries that contains each of the workflows described above. A given list element is made up of the following:

roles/github/defaults/main.yml

@@ -31,7 +31,9 @@ github_buildx_enable_provenance: false
 
 github_timeout: 360
 
-github_octavia_certificates_expiry_time: 30
+github_default_octavia_certificates_expiry_time: 30
+
+github_octavia_certificates_schedule:
 
 github_tempest_test_suites: |
   - default
@@ -68,15 +70,15 @@ github_kayobe_environment_input: |
     options: {{ github_kayobe_environments }}
   {%- endif -%}
 
-github_octavia_certificates_expiry_time_input: |
+github_octavia_certificates_input: |
   {%- if github_environment_selector == 'input' -%}
   expiry_time:
     description: |
       Check if the Octavia Amphora certificates will expire within this
       number of days (integer).
     type: string
     required: true
-    default: '{{ github_octavia_certificates_expiry_time }}'
+    default: '{{ github_default_octavia_certificates_expiry_time }}'
   {%- endif -%}
 
 github_workflows:
@@ -87,7 +89,6 @@ github_workflows:
   - "{{ github_run_infra_vm_host_package_update }}"
   - "{{ github_run_infra_vm_provision }}"
   - "{{ github_run_infra_vm_service_deploy }}"
-  - "{{ github_run_kolla_ansible_octavia_certificates }}"
   - "{{ github_run_network_connectivity_check }}"
   - "{{ github_run_overcloud_container_image_pull }}"
   - "{{ github_run_overcloud_database_backup }}"
@@ -145,12 +146,18 @@ github_run_infra_vm_service_deploy:
   arguments: "{{ github_kayobe_task_arguments }}"
   concurrency_group: infra
 
+github_octavia_certificates_schedule_trigger:
+  schedule:
+    cron: "{{ github_octavia_certificates_schedule }}"
+
+github_octavia_certificates_workflow_dispatch_trigger:
+  workflow_dispatch: "{{ github_octavia_certificates_input }}"
+
 github_run_kolla_ansible_octavia_certificates:
   file_name: run-kolla-ansible-octavia-certificates-check-expiry.yml
   use_bespoke: true
-  expiry_time: "{{ github_octavia_certificates_expiry_time }}"
-  trigger:
-    workflow_dispatch: "{{ github_octavia_certificates_expiry_time_input }}"
+  expiry_time: "{{ github_default_octavia_certificates_expiry_time }}"
+  trigger: "{{ github_octavia_certificates_schedule_trigger if github_octavia_certificates_schedule else github_octavia_certificates_workflow_dispatch_trigger }}"
   concurrency_group: overcloud
 
 github_run_network_connectivity_check:

roles/github/templates/run-kolla-ansible-octavia-certificates-check-expiry.yml.j2

@@ -59,7 +59,7 @@ jobs:
 
       - name: Check Octavia certificates expiry
         run: |
-          /src/.automation/pipeline/kolla-ansible-run.sh "octavia-certificates --check-expiry %% workflow.expiry_time %%"
+          /src/.automation/pipeline/kolla-ansible-run.sh "octavia-certificates --check-expiry <%- if github_octavia_certificates_schedule %> %% workflow.expiry_time %% <%- else %> ${{ inputs.expiry_time }} <%- endif -%>"
         env:
 <% if github_environment_selector is not none %>
           KAYOBE_ENVIRONMENT: '%% github_kayobe_arguments.KAYOBE_ENVIRONMENT %%'