Release 1.0.3

.ansible_lint → .ansible-lint

@@ -9,9 +9,13 @@ exclude_paths:
   - .github/
   - molecule/
   - docs/
-  - .ansible-lint
-  - .yamllint
   - scripts/
-
+  - test/
+  - playbooks/tasks # Dir for testing locally
+
 skip_list:
   - yaml[line-length]
+  - var-naming[no-role-prefix]
+  - command-instead-of-module
+  - var-naming[pattern]
+  - risky-file-permissions

.github/actions/ansible/action.yml

@@ -0,0 +1,53 @@
+---
+name: ansible
+description: execute an ansible playbook
+
+runs:
+  using: composite
+  steps:
+    - name: Checkout files
+      uses: actions/checkout@v4
+
+    - name: Setup Terraform
+      uses: hashicorp/setup-terraform@v3
+      with:
+        terraform_version: "1.7.3"
+
+    - name: Get key
+      run: |
+        echo "$SSH_KEY" > .key
+        chmod 400 .key
+      shell: bash
+      env:
+        SSH_KEY: ${{secrets.SSH_PRIVATE_KEY}}
+
+    - name: Terraform Init
+      id: init
+      run: |
+        terraform init
+
+    - name: Terraform plan
+      id: plan
+      run: |
+        terraform plan -out=terraform.tfplan \
+        -var "GITHUB_RUN_ID=$GITHUB_RUN_ID" \
+        -var "do_token=${DO_PAT}" \
+        -var "terraform_backend_bucket_name=github-action-${{ github.run_id }}"
+
+    - name: Terraform Apply
+      run: |
+        terraform apply terraform.tfplan
+
+    - name: Terraform plan delete stack
+      id: plan
+      run: |
+        terraform plan -destroy -out=terraform.tfplan \
+        -var "GITHUB_RUN_ID=$GITHUB_RUN_ID" \
+        -var "do_token=${DO_PAT}" \
+        -var "terraform_backend_bucket_name=github-action-${{ github.run_id }}"
+      continue-on-error: true
+
+    - name: Terraform Apply
+      run: |
+        terraform apply terraform.tfplan
+      continue-on-error: true

.github/actions/update-readme/action.yml → .github/actions/update-version/action.yml

@@ -5,16 +5,19 @@ description: Update Readme and Changelog
 runs:
   using: composite
   steps:
-    # Update Readme 
+    # Update Readme
     - shell: bash
       run: |
+        rkub_collection=$(yq -r .version galaxy.yml)
         rke2_version=$(yq -r .global_rke2_version playbooks/vars/main.yml)
         cert_version=$(yq -r .global_CERT_VERSION playbooks/vars/main.yml)
         rancher_version=$(yq -r .global_RANCHER_VERSION playbooks/vars/main.yml)
         longhorn_version=$(yq -r .global_LONGHORN_VERSION playbooks/vars/main.yml)
         neuvector_version=$(yq -r .global_NEU_VERSION playbooks/vars/main.yml)
         cat << EOF > version.txt
+        **Ansible Collection Rkub ${rkub_collection} include:**
           - [RKE2 ${rke2_version}](https://docs.rke2.io) - Security focused Kubernetes
+          - [Cert-manager ${cert_version}](https://cert-manager.io/docs/) - Certificate manager
           - [Rancher ${rancher_version}](https://www.suse.com/products/suse-rancher/) - Multi-Cluster Kubernetes Management
           - [Longhorn ${longhorn_version}](https://longhorn.io) - Unified storage layer
           - [Neuvector ${neuvector_version}](https://neuvector.com/) - Kubernetes Security Platform
@@ -36,21 +39,21 @@ runs:
         cat << EOF > version.txt
         ## ${rkub_collection} (${date})
 
-        Versions:
+        ### Versions:
           - rke2 version: ${rke2_version}
-          - cert-manager version: ${cert_version}    
-          - rancher version: ${rancher_version} 
+          - cert-manager version: ${cert_version}
+          - rancher version: ${rancher_version}
           - longhorn version: ${longhorn_version}
           - neuvector version: ${neuvector_version}
         EOF
 
         sed -i -n -e "1,/<\!-- Release -->/ p" -e"/<\!-- End Release -->/,$ p" -e "/<\!-- Release -->/ r version.txt" CHANGELOG.md
 
-    # Git push 
+    # Git push
     - shell: bash
       run: |
         git config user.name github-actions
         git config user.email github-actions@github.com
         git add README.md CHANGELOG.md
         [[ -z $(git status -uno --porcelain) ]] && echo "No need to commit..." || git commit -m "⚡ Update README & CHANGELOG"
-        git push origin
+        git push origin HEAD:${{ github.head_ref || github.ref_name }}

.github/renovate.json

@@ -0,0 +1,188 @@
+{
+    "labels": ["dependencies"],
+    "schedule": ["after 7am on saturday"],
+    "ansible-galaxy": { "fileMatch": ["(^|/)(galaxy|requirements|ee-requirements)(\\.ansible)?\\.ya?ml$"] },
+    "pre-commit": {
+      "enabled": true,
+      "addLabels": ["pre-commit"]
+    },
+    "packageRules": [
+      {
+        "matchManagers": ["dockerfile"],
+        "matchPackagePatterns": ["ubi8"],
+        "matchUpdateTypes": ["minor"],
+        "automerge": true
+      },
+      {
+        "matchManagers": ["github-actions"],
+        "matchUpdateTypes": ["minor"],
+        "automerge": true
+      },
+      {
+        "matchPackagePatterns": ["rke2"],
+        "addLabels": ["rke2"],
+        "extractVersion": "^v(?<version>\\d+\\.\\d+.\\d+)"
+      },
+      {
+        "matchPackagePatterns": ["helm"],
+        "addLabels": ["helm"],
+        "extractVersion": "^v(?<version>\\d+\\.\\d+.\\d+)"
+      },
+      {
+        "matchPackagePatterns": ["cert-manager"],
+        "addLabels": ["cert-manager"],
+        "extractVersion": "^v(?<version>\\d+\\.\\d+.\\d+)"
+      },
+      {
+        "matchPackagePatterns": ["rancher"],
+        "addLabels": ["rancher"],
+        "extractVersion": "^v(?<version>\\d+\\.\\d+.\\d+)"
+      },
+      {
+        "matchPackagePatterns": ["longhorn"],
+        "addLabels": ["longhorn"],
+        "extractVersion": "^longhorn-(?<version>\\d+\\.\\d+.\\d+)"
+      },
+      {
+        "matchPackagePatterns": ["neuvector"],
+        "addLabels": ["neuvector"],
+        "extractVersion": "(?<version>\\d+\\.\\d+.\\d+)"
+      }
+    ],
+    "customManagers": [
+      {
+        "description": "Update RKE2 helm charts version with customDatasource",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_rke2_version: \"(?<currentValue>.*)\"\\n",
+          "- rke2 version: (?<currentValue>.*)\\n",
+          "- \\[RKE2 (?<currentValue>[^\\]]+)\\]\\(https://docs.rke2.io\\) - Security focused Kubernetes (channel stable)\\n"
+        ],
+        "depNameTemplate": "rke2",
+        "versioningTemplate": "semver-coerced",
+        "datasourceTemplate": "custom.rke2"
+      },
+      {
+        "description": "Update helm binary version based on github repo",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$"
+        ],
+        "matchStrings": [
+          "global_helm_version: \"(?<currentValue>.*?)\"\\n"
+        ],
+        "datasourceTemplate": "git-refs",
+        "depNameTemplate": "helm",
+        "packageNameTemplate": "https://github.com/helm/helm",
+        "versioningTemplate": "semver-coerced"
+      },
+      {
+        "description": "Update cert-manager helm charts version based on github repo",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_CERT_VERSION: \"(?<currentValue>.*?)\"\\n",
+          "- cert-manager version: (?<currentValue>.*)\\n",
+          "- \\[Cert-manager (?<currentValue>[^\\]]+)\\]\\(https://cert-manager.io/docs/\\) - Certificate manager\\n"
+        ],
+        "datasourceTemplate": "git-tags",
+        "depNameTemplate": "cert-manager",
+        "packageNameTemplate": "https://github.com/cert-manager/cert-manager",
+        "versioningTemplate": "semver"
+      },
+      {
+        "description": "Update Rancher helm charts version with customDatasource",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_RANCHER_VERSION: \"(?<currentValue>.*?)\"\\n",
+          "- rancher version: (?<currentValue>.*)\\n",
+          "- \\[Rancher (?<currentValue>[^\\]]+)\\]\\(https://www.suse.com/products/suse-rancher/\\) - Multi-Cluster Kubernetes Management\\n"
+        ],
+        "depNameTemplate": "rancher",
+        "versioningTemplate": "semver-coerced",
+        "datasourceTemplate": "custom.rancher"
+      },
+      {
+        "description": "Update Longhorn helm charts version based on github repo",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_LONGHORN_VERSION: \"(?<currentValue>.*?)\"\\n",
+          "- longhorn version: (?<currentValue>.*)\\n",
+          "- \\[Longhorn (?<currentValue>[^\\]]+)\\]\\(https://longhorn.io\\) - Unified storage layer\\n"
+        ],
+        "datasourceTemplate": "git-refs",
+        "depNameTemplate": "longhorn",
+        "packageNameTemplate": "https://github.com/longhorn/charts",
+        "versioningTemplate": "semver"
+      },
+      {
+        "description": "Update Neuvector helm charts version based on github repo",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_NEU_VERSION: \"(?<currentValue>.*?)\"\\n",
+          "- neuvector version: (?<currentValue>.*)\\n",
+          "- \\[Neuvector (?<currentValue>[^\\]]+)\\]\\(https://neuvector.com/\\) - Kubernetes Security Platform\\n"
+        ],
+        "datasourceTemplate": "git-refs",
+        "depNameTemplate": "neuvector",
+        "packageNameTemplate": "https://github.com/neuvector/neuvector-helm",
+        "versioningTemplate": "semver"
+      },
+      {
+        "description": "Update Kubevip version based on github repo",
+        "customType": "regex",
+        "fileMatch": [
+          "playbooks/vars/main\\.y[a]?ml$",
+          "CHANGELOG.md",
+          "README.md"
+        ],
+        "matchStrings": [
+          "global_kubevip_version: \"(?<currentValue>.*?)\"\\n",
+          "- kube-vip version: (?<currentValue>.*)\\n",
+          "- \\[Kube-vip (?<currentValue>[^\\]]+)\\]\\(https://kube-vip.io/\\) - Virtual IP and load balancer\\n"
+        ],
+        "datasourceTemplate": "git-refs",
+        "depNameTemplate": "kubevip",
+        "packageNameTemplate": "https://github.com/kube-vip/kube-vip",
+        "versioningTemplate": "semver"
+      }
+    ],
+    "customDatasources": {
+      "rke2": {
+        "defaultRegistryUrlTemplate": "https://update.rke2.io/v1-release/channels",
+        "transformTemplates": [
+          "{\"releases\":[{\"version\": $$.(data[id = 'stable'].latest),\"sourceUrl\":\"https://github.com/rancher/rke2\",\"changelogUrl\":$join([\"https://github.com/rancher/rke2/releases/\",data[id = 'stable'].latest])}],\"sourceUrl\": \"https://github.com/rancher/rke2\",\"homepage\": \"https://docs.rke2.io\"}"
+        ]
+      },
+      "rancher": {
+        "defaultRegistryUrlTemplate": "https://update.rancher.io/v1-release/channels",
+        "transformTemplates": [
+          "{\"releases\":[{\"version\": $$.(data[id = 'latest'].latest),\"sourceUrl\":\"https://github.com/rancher/rancher\",\"changelogUrl\":$join([\"https://github.com/rancher/rancher/releases/\",data[id = 'latest'].latest])}],\"sourceUrl\": \"https://github.com/rancher/rancher\",\"homepage\": \"https://ranchermanager.docs.rancher.com\"}"
+        ]
+      }
+    }
+}