RFE: Add a role for deploying through OpenShift deployment #11884

Closed
opened 2024-04-17 08:04:06 +00:00 by svashisht · 10 comments

Describe what you would like us to do:


OpenScanHub project on OpenShift currently does not use imagestreams. So only way to trigger a production deployment is to request an admin to delete and recreate pods. This is a manual step and should be automated through a role.

When do you need this to be done by? (YYYY/MM/DD)


asap

# Describe what you would like us to do: ---- OpenScanHub project on OpenShift currently does not use imagestreams. So only way to trigger a production deployment is to request an admin to delete and recreate pods. This is a manual step and should be automated through a role. # When do you need this to be done by? (YYYY/MM/DD) ---- asap
Owner

Just to clarify: The request is to add role that will allow app owners to trigger a new deployment in case they want to just restart some specific pod.

Just to clarify: The request is to add role that will allow app owners to trigger a new deployment in case they want to just restart some specific pod.
Owner

Metadata Update from @zlopez:

  • Issue tagged with: OpenShift, low-gain, medium-trouble
**Metadata Update from @zlopez**: - Issue tagged with: OpenShift, low-gain, medium-trouble
Owner

Metadata Update from @zlopez:

  • Issue priority set to: Waiting on Assignee (was: Needs Review)
**Metadata Update from @zlopez**: - Issue priority set to: Waiting on Assignee (was: Needs Review)

Maybe create a dedicated playbook to restart deployment? For example Koschei project has manual playbooks playbooks/manual/upgrade/koschei-rolling.yml and playbooks/manual/upgrade/koschei-full.yml that can be used by appowners to trigger rolling or full updates as needed.

Maybe create a dedicated playbook to restart deployment? For example Koschei project has manual playbooks `playbooks/manual/upgrade/koschei-rolling.yml` and `playbooks/manual/upgrade/koschei-full.yml` that can be used by appowners to trigger rolling or full updates as needed.
Owner

@mizdebsk That is not a bad idea, but doing that for each OpenShift project is not great. I assume it will be better to allow appowners to have ability to delete/create pods in their own project.

@mizdebsk That is not a bad idea, but doing that for each OpenShift project is not great. I assume it will be better to allow appowners to have ability to delete/create pods in their own project.
Owner

[backlog refinement]
This is still something that would be nice to have. Ideally in a way that will allow us to have something general that could be run for multiple different OpenShift projects. Allowing authorized users to rebuild, rollout project if that is needed.

[backlog refinement] This is still something that would be nice to have. Ideally in a way that will allow us to have something general that could be run for multiple different OpenShift projects. Allowing authorized users to rebuild, rollout project if that is needed.
Owner

[backlog refinement]
Situation is still the same. We would like to have this, but we need to find few cycles to spare.

[backlog refinement] Situation is still the same. We would like to have this, but we need to find few cycles to spare.
Owner

So, thinking about this more... I think we can just use the pattern some of our apps already use. Have ansible tags that also have 'never' associated, so they don't normally get run, but when the specific tag is passed they do run.

So, look at the bodhi app, you can see it has a 'build' and 'rollout' tags that build and rollout a new deployment. Those only run when '-t that tag' is passed to the playbook.

We can make a 'restart deployment' tag for this too.

So, thinking about this more... I think we can just use the pattern some of our apps already use. Have ansible tags that also have 'never' associated, so they don't normally get run, but when the specific tag is passed they do run. So, look at the bodhi app, you can see it has a 'build' and 'rollout' tags that build and rollout a new deployment. Those only run when '-t that tag' is passed to the playbook. We can make a 'restart deployment' tag for this too.
Member

i opened infra/ansible#3429 which adds this

i opened https://forge.fedoraproject.org/infra/ansible/pulls/3429 which adds this
Owner

Merged it. ;)

Hopefully we are done here. Thanks Vit!

Merged it. ;) Hopefully we are done here. Thanks Vit!
kevin closed this issue 2026-06-23 19:30:51 +00:00
Sign in to join this conversation.
No milestone
No assignees
5 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infra/tickets#11884
No description provided.