-
Notifications
You must be signed in to change notification settings - Fork 21
Add IOP #280
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Add IOP #280
Conversation
bfdcd43 to
2fd7276
Compare
71ce03e to
4cf96ac
Compare
ddfec69 to
eb1df00
Compare
| - name: Enable iop | ||
| if: matrix.iop == 'enabled' | ||
| run: | | ||
| ./foremanctl deploy --add-feature iop |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
calls to foremanctl deploy are expensive (adds ca 2 minutes to the execution), so I wonder if it'd be smarter to have fewer of those "add optional feature" steps and use something like {{ matrix.iop == 'enabled' && '--add-feature iop' || '' }} inside an existing step
a200e68 to
ffcfc02
Compare
|
@evgeni For now, I want to keep the same behavior of not supporting remote database yet. Looking at Obsah, I don't think that's possible but I wanted you to check me on that. I need to forbid:
|
d5bfe6f to
1b2bf3f
Compare
That's correct, today we can only forbid "if param P has value Y you can't set params A and B at all" You could add a |
I could... just less clear then when do we do parameter validation at the CLI level and when do we do it at the checks level. |
|
Sure, yeah. We could easily enhance obsah to reject things like "if A=1 then B can't be 2", but in your case you need "if A=1 then 2 cant be IN B", and I'm not sure how to nicely express that in metadata |
|
Here is my attempt to implement that structure: theforeman/obsah#104 |
95c8203 to
acbe14a
Compare
pablomh
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Builds and creates running services :)
| iop_inventory_container_image: "quay.io/iop/host-inventory" | ||
| iop_inventory_container_tag: "foreman-3.16" | ||
|
|
||
| iop_inventory_database_name: inventory_db |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All of these vars can be deleted as they are in src/vars/database_iop.yml.
| iop_remediation_container_image: "quay.io/iop/remediations" | ||
| iop_remediation_container_tag: "foreman-3.16" | ||
|
|
||
| iop_remediation_database_name: remediations_db |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All of these vars can be deleted as they are in src/vars/database_iop.yml.
| iop_vmaas_container_image: "quay.io/iop/vmaas" | ||
| iop_vmaas_container_tag: "foreman-3.16" | ||
|
|
||
| iop_vmaas_database_name: vmaas_db |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All of these vars can be deleted as they are in src/vars/database_iop.yml.
| iop_vulnerability_container_image: "quay.io/iop/vulnerability-engine" | ||
| iop_vulnerability_container_tag: "foreman-3.16" | ||
|
|
||
| iop_vulnerability_database_name: vulnerability_db |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All of these vars can be deleted as they are in src/vars/database_iop.yml.
Signed-off-by: Eric D. Helms <[email protected]>
Signed-off-by: Eric D. Helms <[email protected]>
Signed-off-by: Eric D. Helms <[email protected]>
Signed-off-by: Eric D. Helms <[email protected]>
Signed-off-by: Eric D. Helms <[email protected]>
No description provided.