migrate openshift-apps to use openshift/app-actions #3459

Merged
smoliicek merged 49 commits from smoliicek/ansible:ocp-migrate/batch into main 2026-07-09 19:09:27 +00:00
Member
No description provided.
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
add openshift/app-actions to cloud-image-uploader
Some checks failed
Linter / yamllint (pull_request) Successful in 28s
Linter / ansible-lint (pull_request) Failing after 1m11s
dd32638ca7
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
add openshift/app-actions to coreos-koji-tagger
Some checks failed
Linter / yamllint (pull_request) Successful in 27s
Linter / ansible-lint (pull_request) Failing after 1m50s
6e1401652f
Signed-off-by: Vít Smolík <me@smoliicek.cz>
smoliicek force-pushed ocp-migrate/batch from 6e1401652f
Some checks failed
Linter / yamllint (pull_request) Successful in 27s
Linter / ansible-lint (pull_request) Failing after 1m50s
to 7d5d2c4874
Some checks failed
Linter / yamllint (pull_request) Failing after 36s
Linter / ansible-lint (pull_request) Failing after 1m37s
AI Code Review / ai-review (pull_request_target) Failing after 7s
2026-07-01 21:10:48 +00:00
Compare
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Signed-off-by: Vít Smolík <me@smoliicek.cz>
add openshift/app-actions to websites
Some checks failed
Linter / yamllint (pull_request) Failing after 42s
AI Code Review / ai-review (pull_request_target) Successful in 21s
Linter / ansible-lint (pull_request) Failing after 1m20s
10a35bc7bc
Signed-off-by: Vít Smolík <me@smoliicek.cz>
smoliicek changed title from WIP: migrate openshift-apps to use openshift/app-actions to migrate openshift-apps to use openshift/app-actions 2026-07-08 11:41:18 +00:00

AI Code Review

Detailed Code Review

The migration to the openshift/app-actions role has been executed consistently across all application playbooks. The refactoring successfully reduces boilerplate code and consolidates the build and deployment actions into a single role call.

No security issues, logic errors, or performance bottlenecks were identified. The use of loops and conditionals (like environment-specific deployments in fmn.yml and koschei.yml) has been accurately translated to the new role structure.

Summary

  • Overall Assessment: The migration is clean, consistent, and introduces no critical issues. The code is ready for merging.

🤖 AI Code Review | Generated with ai-code-review | Model: gemini-3.1-pro-preview

⚠️ AI-generated suggestions may be incorrect. Verify before applying. Not a replacement for human review.

## AI Code Review ### Detailed Code Review The migration to the `openshift/app-actions` role has been executed consistently across all application playbooks. The refactoring successfully reduces boilerplate code and consolidates the build and deployment actions into a single role call. No security issues, logic errors, or performance bottlenecks were identified. The use of loops and conditionals (like environment-specific deployments in `fmn.yml` and `koschei.yml`) has been accurately translated to the new role structure. ### ✅ Summary - **Overall Assessment:** The migration is clean, consistent, and introduces no critical issues. The code is ready for merging. --- 🤖 **AI Code Review** | Generated with [ai-code-review](https://gitlab.com/redhat/edge/ci-cd/ai-code-review) | **Model:** `gemini-3.1-pro-preview` ⚠️ *AI-generated suggestions may be incorrect. Verify before applying. Not a replacement for human review.*
remove trailing spaces in fmn
Some checks failed
Linter / yamllint (pull_request) Failing after 30s
Linter / ansible-lint (pull_request) Failing after 1m5s
0b19b5b754
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Author
Member

only thing that changed how the playbook runs is in websites.yml, the build now requires the build tag passed, noted by a comment in the playbook

edit: confirmed with darknao that this shouldn't affect anything

only thing that changed how the playbook runs is in `websites.yml`, the build now requires the build tag passed, noted by a comment in the playbook edit: confirmed with darknao that this shouldn't affect anything
Owner

This is a pretty massive pr. ;)

The yamllint is fun, it's failing due to missing --- at the top... but also, it needs to be changed too?
ie, can you fix that and add jira-sync.yml here?

This is a pretty massive pr. ;) The yamllint is fun, it's failing due to missing --- at the top... but also, it needs to be changed too? ie, can you fix that and add jira-sync.yml here?
Signed-off-by: Vít Smolík <me@smoliicek.cz>
remove awx & test-auth
Some checks failed
Linter / yamllint (pull_request) Failing after 31s
Linter / ansible-lint (pull_request) Failing after 3m1s
5592141c76
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Author
Member

i swear the yamllint returned all okay on my machine

i swear the yamllint returned all okay on my machine
fix all yaml-lint errors
Some checks failed
Linter / yamllint (pull_request) Successful in 31s
Linter / ansible-lint (pull_request) Failing after 2m12s
bb0cd3e8ca
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Author
Member

okay, yamllint stuff fixed + deleted awx and test-auth while i was at it

okay, yamllint stuff fixed + deleted awx and test-auth while i was at it
fix the conflict in zabbix-proxy
Some checks failed
Linter / yamllint (pull_request) Successful in 32s
Linter / ansible-lint (pull_request) Failing after 1m25s
AI Code Review / ai-review (pull_request_target) Successful in 24s
6ca182e952
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Owner

ok, it looks reasonable to me now.

This is a massive 78 commits. Should we squash it into one big one?

ok, it looks reasonable to me now. This is a massive 78 commits. Should we squash it into one big one?
Author
Member

yeah, i think that is reasonable

yeah, i think that is reasonable

AI Code Review

Detailed Code Review

The migration from individual openshift/start-build and openshift/rollout roles to the unified openshift/app-actions role is executed cleanly across multiple playbooks. The removal of the awx and test-auth components aligns with the documented intentions, and previous yaml linting issues appear to be addressed. The conditional usage of the new role (e.g., in poddlers.yml and staging environments) is well-handled. No critical security or logic issues were found during the review.

Summary

  • Overall Assessment: Review completed successfully. No critical bugs or security risks were identified in the migration to the new openshift/app-actions role.

🤖 AI Code Review | Generated with ai-code-review | Model: gemini-3.1-pro-preview

⚠️ AI-generated suggestions may be incorrect. Verify before applying. Not a replacement for human review.

## AI Code Review ### Detailed Code Review The migration from individual `openshift/start-build` and `openshift/rollout` roles to the unified `openshift/app-actions` role is executed cleanly across multiple playbooks. The removal of the `awx` and `test-auth` components aligns with the documented intentions, and previous yaml linting issues appear to be addressed. The conditional usage of the new role (e.g., in `poddlers.yml` and staging environments) is well-handled. No critical security or logic issues were found during the review. ### ✅ Summary - **Overall Assessment:** Review completed successfully. No critical bugs or security risks were identified in the migration to the new openshift/app-actions role. --- 🤖 **AI Code Review** | Generated with [ai-code-review](https://gitlab.com/redhat/edge/ci-cd/ai-code-review) | **Model:** `gemini-3.1-pro-preview` ⚠️ *AI-generated suggestions may be incorrect. Verify before applying. Not a replacement for human review.*
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infra/ansible!3459
No description provided.