Skip to content

Commit 4431aef

Browse files
irivengroupirivengroup
committed
project creation
1 parent a47cb08 commit 4431aef

141 files changed

Lines changed: 7528 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.ansible-lint‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
profile: production
2+
exclude_paths:
3+
- .github/
4+
- molecule/
5+
skip_list:
6+
- yaml[line-length]

‎.github/workflows/ci.yml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
name: ci
2+
on:
3+
push:
4+
pull_request:
5+
jobs:
6+
lint-and-structure:
7+
runs-on: ubuntu-latest
8+
steps:
9+
- uses: actions/checkout@v4
10+
- name: Basic tree check
11+
run: test -f roles/linux_upgrade/tasks/main.yml

‎.github/workflows/ci_extended.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
name: ci-extended\non:\n push:\n pull_request:\njobs:\n basic:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v4\n - run: test -f roles/linux_upgrade/tasks/main.yml\n

‎.yamllint‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extends: default
2+
rules:
3+
line-length: disable
4+
truthy: disable
5+
comments:
6+
min-spaces-from-content: 1

‎CHANGELOG-v33.md‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
2+
# CHANGELOG v33
3+
4+
## Ajouts majeurs
5+
- rollback plan
6+
- maintenance window checks
7+
- observability events
8+
- advanced prechecks
9+
- advanced network inventory
10+
- before/after diff reporting
11+
- separate ServiceNow and Jira identifiers
12+
- safe policy abstraction
13+
- advanced cluster guard commands
14+
- compliance profile hooks
15+
16+
## Fichiers ajoutés
17+
- tasks/tasks.d/core/change_management.yml
18+
- tasks/tasks.d/operations/maintenance_window.yml
19+
- tasks/tasks.d/operations/rollback_plan.yml
20+
- tasks/tasks.d/operations/observability.yml
21+
- tasks/tasks.d/operations/prechecks_advanced.yml
22+
- tasks/tasks.d/operations/post_upgrade_diff.yml
23+
- tasks/tasks.d/operations/network_advanced.yml
24+
- tasks/tasks.d/operations/kernel_modules.yml
25+
- tasks/tasks.d/operations/repo_tls.yml

‎IMPLEMENTATION_NOTES_v33.md‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
2+
# v33 implementation notes
3+
4+
This bundle applies the previously proposed global improvements as operational scaffolding and concrete role logic.
5+
6+
Areas intentionally left environment-specific:
7+
- precise quorum semantics for your cluster stack
8+
- vendor-specific rollback polling nuances
9+
- exact application profiles and health checks
10+
- internal repo TLS certificate chains and GPG fingerprints
11+
- advanced network topologies: bond/bridge/vlan mappings may require local tuning
12+
- service governance and compliance scoring weights
13+
14+
Recommended next steps:
15+
1. populate application profiles
16+
2. tune maintenance window values
17+
3. configure repo TLS/GPG expectations
18+
4. add Molecule scenarios for your supported OS paths

‎Makefile‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
.PHONY: lint syntax
2+
3+
lint:
4+
ansible-lint
5+
yamllint .
6+
7+
syntax:
8+
ansible-playbook playbooks/linux_upgrade.yml --syntax-check

‎V19_FEATURES.md‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
# v19 features
2+
3+
## Rolling upgrade
4+
- serial-based rolling execution
5+
- canary batch size support
6+
- quorum guards for pacemaker, kubernetes, openstack control plane
7+
- stop-on-failure behavior should be enforced by Ansible batch failure semantics and user strategy
8+
9+
## Vault
10+
- token auth
11+
- AppRole auth variables
12+
- JWT auth variables
13+
14+
## Suggested examples
15+
16+
### AppRole
17+
```yaml
18+
linux_upgrade_vault_enabled: true
19+
linux_upgrade_vault_auth_method: approle
20+
linux_upgrade_vault_url: https://vault.example.com
21+
linux_upgrade_vault_role_id: "..."
22+
linux_upgrade_vault_secret_id: "..."
23+
linux_upgrade_vault_mount_point: approle
24+
```
25+
26+
### JWT
27+
```yaml
28+
linux_upgrade_vault_enabled: true
29+
linux_upgrade_vault_auth_method: jwt
30+
linux_upgrade_vault_url: https://vault.example.com
31+
linux_upgrade_vault_jwt: "{{ lookup('env', 'VAULT_JWT') }}"
32+
linux_upgrade_vault_jwt_mount_point: jwt
33+
```

‎V34_NOTES.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
2+
# v34 notes
3+
4+
- Exact cluster quorum guard minimum healthy nodes is now set to 2 by default.
5+
- External application profiles can be loaded from:
6+
/etc/linux-upgrade/application_profiles.yml
7+
- Example application profiles for Java and Python are provided.
8+
- Internal GPG and TLS expectations are now variabilized through dedicated maps.

‎V35_FILESYSTEM_NOTES.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
2+
# v35 filesystem notes
3+
4+
This version adds filesystem-oriented prechecks, cleanup, selective backups and optional local snapshot strategies.
5+
6+
Recommended production tuning:
7+
- enable LVM snapshots only where free VG space is guaranteed
8+
- use btrfs/zfs snapshots only when the root filesystem is actually backed by those technologies
9+
- adjust /boot and inode thresholds per distro image standard

0 commit comments

Comments
 (0)