more
This commit is contained in:
2
.github/workflows/pre-commit.yml
vendored
2
.github/workflows/pre-commit.yml
vendored
@@ -21,6 +21,6 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v4
|
||||||
- run: USE_PYTHON=python3.9 ./.github/workflows/run-pc.sh
|
- run: USE_PYTHON=python3.10 ./.github/workflows/run-pc.sh
|
||||||
shell: bash
|
shell: bash
|
||||||
|
|
||||||
|
|||||||
@@ -23,7 +23,7 @@
|
|||||||
loop_control:
|
loop_control:
|
||||||
loop_var: volume
|
loop_var: volume
|
||||||
label: "{{ volume.id }}"
|
label: "{{ volume.id }}"
|
||||||
register: r_snapshots
|
register: aws_r_snapshots
|
||||||
amazon.aws.ec2_snapshot:
|
amazon.aws.ec2_snapshot:
|
||||||
region: "{{ aws_region }}"
|
region: "{{ aws_region }}"
|
||||||
volume_id: "{{ volume.id }}"
|
volume_id: "{{ volume.id }}"
|
||||||
@@ -34,7 +34,7 @@
|
|||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
aws_snapshot_stat:
|
aws_snapshot_stat:
|
||||||
- key: "{{ inventory_hostname }}"
|
- key: "{{ inventory_hostname }}"
|
||||||
value: "{{ r_snapshots.results | json_query(aws_ec2_snapshot_query) }}"
|
value: "{{ aws_r_snapshots.results | json_query(aws_ec2_snapshot_query) }}"
|
||||||
|
|
||||||
- name: AWS | SNAPSHOT VM | record snapshot with host key
|
- name: AWS | SNAPSHOT VM | record snapshot with host key
|
||||||
ansible.builtin.set_stats:
|
ansible.builtin.set_stats:
|
||||||
|
|||||||
@@ -29,7 +29,7 @@
|
|||||||
wait: true
|
wait: true
|
||||||
wait_condition:
|
wait_condition:
|
||||||
type: Ready
|
type: Ready
|
||||||
register: snapshot
|
register: snapshot_snapshot
|
||||||
|
|
||||||
- name: Start VirtualMachine
|
- name: Start VirtualMachine
|
||||||
redhat.openshift_virtualization.kubevirt_vm:
|
redhat.openshift_virtualization.kubevirt_vm:
|
||||||
@@ -42,8 +42,8 @@
|
|||||||
- name: Export snapshot name
|
- name: Export snapshot name
|
||||||
ansible.builtin.set_stats:
|
ansible.builtin.set_stats:
|
||||||
data:
|
data:
|
||||||
restore_snapshot_name: "{{ snapshot.result.metadata.name }}"
|
restore_snapshot_name: "{{ snapshot_snapshot.result.metadata.name }}"
|
||||||
|
|
||||||
- name: Output snapshot name
|
- name: Output snapshot name
|
||||||
ansible.builtin.debug:
|
ansible.builtin.debug:
|
||||||
msg: "Successfully created snapshot {{ snapshot.result.metadata.name }}"
|
msg: "Successfully created snapshot {{ snapshot_snapshot.result.metadata.name }}"
|
||||||
|
|||||||
@@ -8,7 +8,7 @@
|
|||||||
check_mode: false
|
check_mode: false
|
||||||
|
|
||||||
- name: Upgrade packages (yum)
|
- name: Upgrade packages (yum)
|
||||||
ansible.builtin.yum:
|
ansible.legacy.dnf:
|
||||||
name: '*'
|
name: '*'
|
||||||
state: latest # noqa: package-latest - Intended to update packages to latest
|
state: latest # noqa: package-latest - Intended to update packages to latest
|
||||||
exclude: "{{ exclude_packages }}"
|
exclude: "{{ exclude_packages }}"
|
||||||
@@ -25,13 +25,13 @@
|
|||||||
|
|
||||||
- name: Check to see if we need a reboot
|
- name: Check to see if we need a reboot
|
||||||
ansible.builtin.command: needs-restarting -r
|
ansible.builtin.command: needs-restarting -r
|
||||||
register: result
|
register: patch_linux_result
|
||||||
changed_when: result.rc == 1
|
changed_when: patch_linux_result.rc == 1
|
||||||
failed_when: result.rc > 1
|
failed_when: patch_linux_result.rc > 1
|
||||||
check_mode: false
|
check_mode: false
|
||||||
|
|
||||||
- name: Reboot Server if Necessary
|
- name: Reboot Server if Necessary
|
||||||
ansible.builtin.reboot:
|
ansible.builtin.reboot:
|
||||||
when:
|
when:
|
||||||
- result.rc == 1
|
- patch_linux_result.rc == 1
|
||||||
- allow_reboot
|
- allow_reboot
|
||||||
|
|||||||
@@ -20,7 +20,7 @@
|
|||||||
|
|
||||||
- name: Build policy {{ policy_name }}
|
- name: Build policy {{ policy_name }}
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
policy: "{{ policy | default([]) }} + {{ [item] }}"
|
scap_client_policy: "{{ scap_client_policy | default([]) }} + {{ [item] }}"
|
||||||
loop: "{{ scap_client_policies.json.results }}"
|
loop: "{{ scap_client_policies.json.results }}"
|
||||||
when: item.name in policy_name or policy_name == 'all'
|
when: item.name in policy_name or policy_name == 'all'
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user