redhat-cop / anarchy Goto Github PK

View Code? Open in Web Editor NEW

29.0 29.0 12.0 2.8 MB

An operator for adding state for arbitrary api interactions

License: GNU General Public License v3.0

Dockerfile 0.26% Python 93.51% Shell 1.72% Mustache 0.89% Jinja 3.63%

babylon gpte

anarchy's People

Contributors

Stargazers

Watchers

Forkers

pabrahamsson eformat mikecali keithhansen22 darthlukan josephassiga 5l1v3r1 yvarbanov tylerauerbeck paulbarfuss mahdtech agonzalezrh

anarchy's Issues

Support custom parameters based on action

In order to integrate with project babylon we need to be able to call the same API endpoint with different parameters based on the action.

Document AnarchyAction lifecycle

https://trello.com/c/1LDmskfC/42-document-anarchyaction-lifecycle

AnarchyOperator not rerunning failures

Anarchy Operator appears to hang or get wedged

On occasions, after creating either an individual instance or a resourcepool no activity is seen on the Tower backends.

After

oc delete pod -l name=anarchy-runner -n anarchy-operator

The queue of anarchy events is released and API calls start again to Tower.

Locking mechanism to prevent multiple instances of anarchy operator

Add method for removing old AnarchyRuns and AnarchyActions

Implement action deleted handler

Implement reschedule action

Implement example of how to reschedule an action.

Develop and document babylon tower example

inconsistent label subject / subject-name

Depending on the resource you want to filter with label, you need to use either subject=... or subject-name=...

Example:

oc get anarchyevents -l   anarchy.gpte.redhat.com/subject-name=gpte.babylon-ocp4-workshop.dev-vzc5n

oc get anarchyactions  -l anarchy.gpte.redhat.com/subject=gpte.babylon-ocp4-workshop.dev-vzc5n

I would expect the label name to be the consistent across Anarchy resources

Add `when` clause to events

Events should allow for conditional handler firing based on object status.

README installation instructions : Error ImagePullBackOff

Step OpenShift) 5) after deploy-template.yml

[root@bastion 0 ~/anarchy-operator master ⭑|✔]# oc get pods
NAME                                      READY     STATUS             RESTARTS   AGE
anarchy-operator-8644944d68-dd9fx         1/1       Running            0          2m
anarchy-runner-default-58597877c6-dz575   0/1       ImagePullBackOff   0          6m
anarchy-runner-default-d96c5855b-r95kz    0/1       ImagePullBackOff   0          2m

  Type     Reason          Age              From                                  Message
  ----     ------          ----             ----                                  -------
  Normal   Scheduled       1m               default-scheduler                     Successfully assigned anarchy-operator/anarchy-runner-default-d96c5855b-r95kz to node1.babyworkshop.internal
  Warning  Failed          1m (x2 over 1m)  kubelet, node1.babyworkshop.internal  Error: ErrImagePull
  Normal   SandboxChanged  1m (x5 over 1m)  kubelet, node1.babyworkshop.internal  Pod sandbox changed, it will be killed and re-created.
  Normal   BackOff         1m (x6 over 1m)  kubelet, node1.babyworkshop.internal  Back-off pulling image "quay.io/gpte-devops-automation/anarchy-runner:0.3.4"
  Warning  Failed          1m (x6 over 1m)  kubelet, node1.babyworkshop.internal  Error: ImagePullBackOff
  Normal   Pulling         1m (x3 over 1m)  kubelet, node1.babyworkshop.internal  pulling image "quay.io/gpte-devops-automation/anarchy-runner:0.3.4"
  Warning  Failed          1m (x3 over 1m)  kubelet, node1.babyworkshop.internal  Failed to pull image "quay.io/gpte-devops-automation/anarchy-runner:0.3.4": rpc error: code = Unknown desc = Tag 0.3.4 not found in repository quay.io/gpte-devops-automation/anarchy-runner

Document AnarchyGovernor configuration

TLS Let's Encrypt Certificate Authority Issue

Not working in shared cluster, not sure why....

README: run the test playbook fails

[root@bastion 0 ~/anarchy-operator master ⭑|✚1]# ansible-playbook test/test-playbook.yaml
ERROR! no action detected in task. This often indicates a misspelled module name, or incorrect module path.

The error appears to have been in '/root/anarchy-operator/test/test-playbook.yaml': line 17, column 5, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

  tasks:
  - name: Get route for test api server
    ^ here

Implement delete protection

Delete action should have a mechanism to complete before allowing delete of anarchysubject to complete

https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#advanced-topics

Implement action modified handler

Switch ansible-runner to use action plugins

https://docs.ansible.com/ansible/latest/plugins/action.html

Installation instructions are needed

Develop and document reqres.in example

Event actions need a web callback url

Operator Lifecycle Manager (OLM) support

Support release of Anarchy with OLM, will depend on #51

Handle anarchysubjects in any namespace

Anarchy CRDs need OpenAPI v3 Spec

README section for deploy-template is out of date

[ec2-user@clientvm 0 ~/anarchy-operator master ⭑|✔]$ 
oc process -f deploy-template.yaml -p APP_DOMAIN=apps.cluster-babyprod.babyprod.babylon.open.redhat.com | oc apply -f -
error: unknown parameter name "APP_DOMAIN"
error: no objects passed to apply

Anarchy Runner support for Ansible galaxy

Refactor to use kopf - Kubernetes Operator Pythonic Framework

https://pypi.org/project/kopf/
https://kopf.readthedocs.io/en/latest/

Implement watch for governor modification

Sanity check of governor should check if the api exists

anarchy route isn't DNS 952 compliant in README installation instruction

Running instructions from the readme:

[root@bastion 1 ~/anarchy-operator master ⭑|✔]# oc process \
>   -f deploy-template.yaml \
>   -p OPERATOR_HOSTNAME=anarchy-operator.$INGRESS_DOMAIN \
> | oc apply -n anarchy-operator -f -
serviceaccount/anarchy-operator created
rolebinding.rbac.authorization.k8s.io/anarchy-operator created
deployment.apps/anarchy-operator created
service/anarchy-operator created
anarchyrunner.anarchy.gpte.redhat.com/default created
The Route "anarchy-operator" is invalid: spec.host: Invalid value: "anarchy-operator.": host must conform to DNS 952 subdomain conventions

Apparently the command:

INGRESS_DOMAIN=$(oc get ingresses.config.openshift.io cluster -o jsonpath='{.spec.domain}')

Doesn't work.

cluster is an OCP 3

Add authentication token to callback

Anarchy Operator Automatic Deployment

A nice to have feature would be to have a higher level operator that manages deployment of anarchy in namespaces. It would watch for the creation of AnarchyGovernors and deploy the anarchy operator into the namespace if it were found to not already be running there.

This higher level operator could also be responsible for automatically bumping versions of the anarchy-operator image.

redhat-cop / anarchy Goto Github PK

anarchy's People

Contributors

Stargazers

Watchers

Forkers

anarchy's Issues

Recommend Projects

Recommend Topics

Recommend Org

Jobs