Add fdp_update_edpm role for EDPM node updates

.github/workflows/verify-pr-prefix.yml

@@ -20,7 +20,12 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Dump commit message to file
+        run: |
+          git fetch origin ${{ github.event.pull_request.head.sha }}
+          git log -1 --pretty=format:"%B" ${{ github.event.pull_request.head.sha }} | head -n1 > commit-message-file
+
       - name: Run commit message check
         id: prefixcheck
         run: |
-          ./scripts/check-role-prefix.sh
+          ./scripts/check-role-prefix.sh commit-message-file

.gitignore

@@ -8,3 +8,7 @@ docs/dictionary/tmp
 .env
 .idea/
 .ansible/
+# Cursor AI - personal configs not to commit
+.cursor
+# Claude AI
+.claude

Makefile

@@ -249,7 +249,3 @@ plugin-development-disable: # Revert all changes and delete .env if no longer ne
 	grep -lEr --include=\*.py --exclude-dir=.venv 'from (?:plugins|tests)' | xargs gsed -i -e 's/from plugins/from ansible_collections\.cifmw\.general\.plugins/g' -e 's/from tests/from ansible_collections\.cifmw\.general\.tests/g'
 	gsed -i '/PYTHONPATH=/d' .env
 	[ -s .env ] || rm .env
-
-.PHONY: build-cifmw-client-container
-build-cifmw-client-container: # Locally build cifmw-client container
-		podman build --security-opt label=disable -t localhost/cifmw-client:latest -f containerfiles/Containerfile.client .

OWNERS

@@ -0,0 +1,7 @@
+# See the OWNERS docs at https://www.kubernetes.dev/docs/guide/owners/
+
+approvers:
+  - cifmw-squad
+
+reviewers:
+  - cifmw-squad

OWNERS_ALIASES

@@ -0,0 +1,119 @@
+# See the OWNERS_ALIASES docs: https://git.k8s.io/community/contributors/guide/owners.md#owners_aliases
+
+aliases:
+  cifmw-squad:
+    - rebtoor
+    - fultonj
+    - dasm
+    - danpawlik
+    - Valkyrie00
+    - yorabl
+    - tosky
+    - eshulman2
+    - evallesp
+    - bshewale
+    - amartyasinha
+    - brjackma
+    - michburk
+
+  adoption-team:
+    - sathlan
+    - jistr
+    - holser
+    - ciecierski
+    - pinikomarov
+    - klgill
+    - archana203
+
+  bgp-team:
+    - lmiccini
+    - ccamposr
+    - eduolivares
+    - frenzyfriday
+
+  dcn-team:
+    - fultonj
+    - jokke-ilujo
+
+  must-gather-team:
+    - dprince
+    - olliewalsh
+    - gibizer
+    - fmount
+    - abays
+    - pkomarov
+    - juliakreger
+    - Akrog
+    - stuggi
+
+  nfv-team:
+    - saneax
+    - atyronesmith
+    - eshulman2
+    - mnietoji
+    - rdiazcam
+
+  security-team:
+    - xek
+    - d34dh0r53
+    - dmendiza
+    - pkomarov
+    - vakwetu
+    - mauricioharley
+    - afaranha
+    - Deydra71
+
+  storage-team:
+    - eharney
+    - fultonj
+    - fmount
+    - gfidente
+    - cschwede
+    - Akrog
+    - gouthampacha
+    - tosky
+    - ASBishop
+    - silvacarloss
+    - konan-abhi
+
+  ciops-team:
+    - arxcruz
+    - dasm
+    - sdatko
+    - adrianfusco
+    - pojadhav
+    - kstrenkova
+    - imatza-rh
+    - sauragar
+    - belolipa
+
+  updates-team:
+    - sathlan
+    - jistr
+    - holser
+    - ciecierski
+    - pinikomarov
+    - archana203
+
+  # Individual contributor groups (already expanded)
+  shiftstack-team:
+    - imatza-rh
+    - eurijon
+
+  polarion-team:
+    - tosky
+    - jparoly
+    - jirimacku
+
+  reportportal-team:
+    - jirimacku
+    - dsariel
+    - sdatko
+
+  storage-contributors:
+    - fultonj
+    - fmount
+    - abays
+
+  tofu-owners:
+    - eshulman2

ci/playbooks/content_provider/run.yml

@@ -44,9 +44,15 @@
           {{ content_provider_ip | default('nowhere') }}
 
     - name: Set up content registry IP address
+      vars:
+        _registry_ip: "{{ content_provider_ip | default('') | trim }}"
+        _registry_available: "{{ _registry_ip != '' }}"
+        _registry_ip_port: "{{ _registry_ip }}:{{ cifmw_rp_registry_port | default('5001') }}"
       zuul_return:
         data:
           zuul:
             pause: true
-          content_provider_registry_ip: "{{ content_provider_ip | default('nowhere') | trim }}"
           cifmw_operator_build_output: "{{ inner_ansible_vars.cifmw_operator_build_output }}"
+          content_provider_registry_available: "{{ _registry_available }}"
+          content_provider_registry_ip: "{{ _registry_ip }}"
+          content_provider_registry_ip_port: "{{ _registry_ip_port if _registry_available else '' }}"

ci/playbooks/edpm_baremetal_update/run.yml

@@ -0,0 +1,127 @@
+---
+- name: "Run ci/playbooks/edpm_baremetal_update/run.yml"
+  hosts: "{{ cifmw_zuul_target_host | default('all') }}"
+  gather_facts: true
+  tasks:
+    - name: Filter out host if needed
+      when:
+        - cifmw_zuul_target_host is defined
+        - cifmw_zuul_target_host != 'all'
+        - inventory_hostname != cifmw_zuul_target_host
+      ansible.builtin.meta: end_host
+
+    - name: Check for edpm-ansible.yml file
+      ansible.builtin.stat:
+        path: "{{ ansible_user_dir }}/ci-framework-data/artifacts/edpm-ansible.yml"
+      register: edpm_file
+
+    - name: Check if new ssh keypair exists
+      ansible.builtin.include_role:
+        name: recognize_ssh_keypair
+
+    - name: Add crc node in local inventory
+      ansible.builtin.add_host:
+        name: crc
+        ansible_ssh_private_key_file: "{{ ansible_user_dir }}/.crc/machines/crc/{{ crc_ssh_keypair }}"
+        ansible_ssh_user: core
+        ansible_host: api.crc.testing
+
+    - name: Ensure we know ssh hosts
+      ansible.builtin.shell:
+        cmd: "ssh-keyscan {{ hostvars[item].ansible_host }} >> ~/.ssh/known_hosts"
+      loop: "{{ hostvars.keys() | reject('equalto', 'localhost') }}"
+
+    - name: Inject CRC in zuul_inventory
+      block:
+        - name: Load zuul_inventory
+          register: _inventory
+          ansible.builtin.slurp:
+            path: "{{ ansible_user_dir }}/ci-framework-data/artifacts/zuul_inventory.yml"
+
+        - name: Inject CRC in zuul_inventory.yml
+          vars:
+            _crc:
+              all:
+                hosts:
+                  crc: "{{ dict(hostvars.crc) }}"
+            _updated: >-
+              {{
+                _inventory.content | b64decode | from_yaml | combine(_crc, recursive=true)
+              }}
+          ansible.builtin.copy:
+            dest: "{{ ansible_user_dir }}/ci-framework-data/artifacts/zuul_inventory.yml"
+            content: "{{ _updated | to_nice_yaml }}"
+            mode: "0644"
+
+    - name: Set default pre-update tag if not provided
+      ansible.builtin.set_fact:
+        cifmw_minor_update_pre_update_tag: "{{ cifmw_minor_update_pre_update_tag | default('18.0-fr3-latest') }}"
+
+    - name: Get pre-update index image digest from tag
+      ansible.builtin.shell: >-
+        skopeo inspect
+        docker://quay.io/openstack-k8s-operators/openstack-operator-index:{{ cifmw_minor_update_pre_update_tag }}
+        | jq -r '.Digest'
+      register: pre_update_digest_result
+      changed_when: false
+      failed_when: pre_update_digest_result.rc != 0
+
+    - name: Set pre-update index image using digest from tag
+      ansible.builtin.set_fact:
+        cifmw_minor_update_pre_update_index_image: >-
+          quay.io/openstack-k8s-operators/openstack-operator-index@{{ pre_update_digest_result.stdout | trim }}
+
+    - name: Get minor update index image from content provider or use default
+      ansible.builtin.set_fact:
+        cifmw_minor_update_index_image: >-
+          {{
+            cifmw_operator_build_output.operators['openstack-operator'].image_catalog
+            if (cifmw_operator_build_output is defined and
+                cifmw_operator_build_output.operators is defined and
+                'openstack-operator' in cifmw_operator_build_output.operators)
+            else cifmw_minor_update_pre_update_index_image
+          }}
+
+    - name: Override operator build output with pre-update index image for Phase 1
+      ansible.builtin.set_fact:
+        cifmw_operator_build_output_pre_update: >-
+          {{
+            {
+              'cifmw_operator_build_output': {
+                'operators': {
+                  'openstack-operator': {
+                    'image_catalog': cifmw_minor_update_pre_update_index_image
+                  }
+                }
+              }
+            }
+          }}
+
+    - name: Phase 1 - Deploy with pre-update index image using deploy-edpm.yml
+      block:
+        - name: Write pre-update operator build output to temporary file
+          ansible.builtin.copy:
+            dest: "{{ ansible_user_dir }}/ci-framework-data/artifacts/operator_build_output_pre_update.yml"
+            content: "{{ cifmw_operator_build_output_pre_update | to_nice_yaml }}"
+            mode: "0644"
+
+        - name: Perform Podified and EDPM deployment on compute nodes with virtual baremetal (pre-update)
+          ansible.builtin.command:
+            chdir: "{{ ansible_user_dir }}/src/github.com/openstack-k8s-operators/ci-framework"
+            cmd: >-
+              ansible-playbook deploy-edpm.yml
+              -i "{{ ansible_user_dir }}/ci-framework-data/artifacts/zuul_inventory.yml"
+              -e @group_vars/all.yml
+              -e @scenarios/centos-9/base.yml
+              -e @scenarios/centos-9/edpm_baremetal_deployment_ci.yml
+              {%- if edpm_file.stat.exists %}
+              -e @{{ ansible_user_dir }}/ci-framework-data/artifacts/edpm-ansible.yml
+              {%- endif %}
+              {%- if cifmw_extras is defined %}
+              {%-   for extra_var in cifmw_extras %}
+              -e "{{   extra_var }}"
+              {%-   endfor %}
+              {%- endif %}
+              -e "@{{ ansible_user_dir }}/ci-framework-data/artifacts/parameters/zuul-params.yml"
+              -e "@{{ ansible_user_dir }}/ci-framework-data/artifacts/operator_build_output_pre_update.yml"
+              -e "cifmw_prepare_openstackversion=false"