Merge pull request #558 from epfl-si/feature/pg-awx

[upgrade] AWX to 22.3

ansible/requirements.yml

@@ -1,3 +1,6 @@
+# 💡 Whenever this file changes on Git, the `wp-awx-ee` image needs to
+# be rebuilt in the `wwp-test` namespace, then promoted (using
+# `wpsible --prod -t awx.promote`) into the other namespaces.
 roles:
 - name: epfl_si.ansible-module-openshift
 - name: epfl_si.ansible-module-eyaml

ansible/roles/awx-instance/tasks/awx-objects.yml

@@ -123,7 +123,7 @@
 
       update_json_status(changed=get_or_create_job_template(**kwarg))
 
-- name: "`default` InstanceGroup: provide /srv NFS volume to worker pods"
+- name: "Tweaked `default` InstanceGroup"
   awx_script:
     supports_check_mode: yes
     script: |
@@ -142,9 +142,13 @@
       spec:
         containers:
           - name: worker
+            imagePullPolicy: Always
             volumeMounts:
             - name: wp-nfs
               mountPath: "/srv"
+            envFrom:
+            - secretRef:
+                name: backup-rw-credentials
         volumes:
           - name: wp-nfs
             persistentVolumeClaim:

ansible/roles/awx-instance/tasks/k8s-builds.yml

@@ -29,13 +29,13 @@
 
        USER 1000
   tags: awx.build.awx
-  notify: Restart AWX pod
 
 - name: "Rebuild {{ awx_image_name }} now"
   when: _awx_buildconfig is changed
   shell: "oc -n {{ awx_build_namespace }} start-build --wait {{ awx_image_name }}"
   delegate_to: localhost
   tags: awx.build.awx
+  notify: Restart AWX pod
 
 - name: "Patch {{ awx_base_image_mirrored_to }} into {{ awx_receptor_image_name }}"
   register: _awx_receptor_buildconfig
@@ -51,29 +51,84 @@
        USER 0
        RUN pip3 install ansible ansible-runner
        RUN set -e -x; \
-          {{ shellmacro_poor_mans_curl }} $({{ shellmacro_poor_mans_curl }} https://api.github.com/repos/ansible/receptor/releases \
-            | python3 -c \
-              "import sys; import json; import re; \
-               release = (r for r in json.load(sys.stdin) if r['name'] == '{{ awx_receptor_version }}').__next__(); \
-               asset = (a for a in release['assets'] if re.search('linux_amd64\.tar\.gz$', a['name'])).__next__(); \
-               print(asset['browser_download_url'])") \
+           {{ shellmacros_poor_mans_curl_oneline }} ; \
+           install_it ; \
+           download_github_release ansible/receptor \
+             '{{ awx_receptor_version }}' \
+             linux_amd64.tar.gz \
           | tar -C/usr/local/bin -zxvv receptor
        USER 1000
-
   tags: awx.build.receptor
-  notify: Restart AWX pod
 
 - name: "Rebuild {{ awx_receptor_image_name }} now"
   when: _awx_receptor_buildconfig is changed
   shell: "oc -n {{ awx_build_namespace }} start-build --wait {{ awx_receptor_image_name }}"
   delegate_to: localhost
   tags: awx.build.receptor
+  notify: Restart AWX pod
 
-- name: "Pull upstream awx-ee image into {{ awx_ee_image_mirrored_to }}"
+- name: "Patch Ansible assets into {{ awx_ee_image_name }}"
   delegate_to: localhost
   openshift_imagestream:
     metadata:
-      name: awx-ee
+      name: "{{ awx_ee_image_name }}"
       namespace: "{{ ansible_oc_namespace }}"
-    from: "{{ awx_ee_image_mirrored_from }}"
-    tag: "{{ awx_version }}"
+    dockerfile: |
+       # YAGNI?
+       FROM {{ awx_receptor_image_full_name }} as receptor
+
+       FROM docker-registry.default.svc:5000/wwp-test/wp-base
+
+       # YAGNI?
+       COPY --from=receptor /usr/local/bin/receptor /usr/local/bin/receptor
+
+       RUN set -e -x; apt-get -qy update ; \
+           apt-get -qy install --no-install-recommends \
+             mysql-client python3-pip restic ; \
+           apt-get -qy clean
+
+       RUN pip3 install ansible ansible-runner
+
+       RUN set -e -x; \
+         curl {{ awx_ee_entrypoint_script_source }} > /entrypoint; \
+         chmod 755 /entrypoint
+       ENTRYPOINT ["/entrypoint"]
+
+       RUN set -e -x; mkdir /runner; \
+           echo "1000:x:1000:0:container user 1000:/runner:/bin/bash" >> /etc/passwd
+       # So that the entrypoint script may futz with it:
+       RUN chmod g+w /etc/passwd
+
+       # Unfortunately, OpenShift's `docker build` emulation is not smart
+       # enough to pick up the change to user 1000 on the fly. Ah well. We'll
+       # just fix it later.
+
+       RUN chmod 777 /runner
+
+       WORKDIR /runner
+
+       USER 1000
+       RUN curl {{ awx_ee_ansible_requirements_from_url }} > requirements.yml
+       ENV HOME=/runner
+
+       RUN set -e -x ; \
+           ansible-galaxy role install --force -i -r requirements.yml ; \
+           ansible-galaxy collection install --force -i -r requirements.yml ; \
+           rm -rf .ansible/tmp; \
+           mkdir .ansible/tmp; \
+           chmod 0770 .ansible/tmp
+
+       # Undo overly permissive `/runner`; see above
+       USER 0
+       RUN  chmod 775 /runner
+       USER 1000
+
+  tags: awx.build.ee
+  register: _awx_ee_buildconfig
+
+- name: "Rebuild {{ awx_ee_image_name }} now"
+  when: _awx_ee_buildconfig is changed
+  shell: "oc -n {{ awx_build_namespace }} start-build --wait {{ awx_ee_image_name }}"
+  delegate_to: localhost
+  tags: awx.build.ee
+  # Pods that use this image are ephemeral; thus, there is no need to `notify: Restart AWX pod`

ansible/roles/awx-instance/tasks/main.yml

@@ -24,6 +24,7 @@
     - awx.build
     - awx.build.awx
     - awx.build.receptor
+    - awx.build.ee
 
 - name: "Ansible Tower images promoted from {{ awx_build_namespace }}"
   when: "ansible_oc_namespace != awx_build_namespace"
@@ -45,8 +46,8 @@
       version: "{{ awx_version }}"
     - name: "{{ awx_receptor_image_name }}"
       version: "{{ awx_receptor_version }}"
-    - name: "{{ awx_ee_image_name }}"
-      version: "{{ awx_ee_version }}"
+    - name: "wp-awx-ee"
+      version: latest
   # 💡 Other image promotion tasks (for “core” WordPress serving and
   # cron images) can be found in
   # ../../wordpress-openshift-namespace/tasks/images.yml (under tag

ansible/roles/awx-instance/templates/awx-settings.py

@@ -18,9 +18,8 @@
 
 SECRET_KEY = open('/etc/tower/conf.d/django_secret_key', 'rb').read().strip()
 
-# Use mirrored images for awx-ee ephemeral pods:
-GLOBAL_JOB_EXECUTION_ENVIRONMENTS = [{'name': 'AWX EE ({{ awx_ee_version }})', 'image': '{{ awx_ee_image_mirrored_to }}'}]
-CONTROL_PLANE_EXECUTION_ENVIRONMENT = '{{ awx_ee_image_mirrored_to }}'
+GLOBAL_JOB_EXECUTION_ENVIRONMENTS = [{'name': 'wp-awx-ee', 'image': '{{ awx_ee_image_for_pods }}'}]
+CONTROL_PLANE_EXECUTION_ENVIRONMENT = '{{ awx_ee_image_for_pods }}'
 
 
 {% if awx_verbose | default(False) %}

ansible/roles/awx-instance/templates/poor_mans_curl_lib.sh

@@ -0,0 +1,25 @@
+{#
+ # Tips and tricks to feed into sh(1) so as to work around the rampant
+ # seccomp breakage in end-of-lifed OpenShift 3
+ # (https://github.com/moby/moby/issues/42680)
+ #
+ # 💡 The bizarre extraneous semicolons are here so that the script
+ # supports being folded into a single line, for Dockerfile `RUN` bliss.
+ #}
+
+install_it () {
+   pip3 install requests >&2 ;
+} ;
+
+poorcurl () {
+    python3 -c 'import requests; import sys; sys.stdout.buffer.write(requests.get(url = sys.argv[-1]).content)' -- "$@" ;
+} ;
+
+download_github_release () {
+   poorcurl $(poorcurl "https://api.github.com/repos/$1/releases" \
+            | python3 -c \
+              "import sys; import json; import re; \
+               release = (r for r in json.load(sys.stdin) if r['name'] == '$2').__next__(); \
+               asset = (a for a in release['assets'] if a['name'].endswith('$3')).__next__(); \
+               print(asset['browser_download_url'])") ;
+}

ansible/roles/awx-instance/vars/k8s-vars.yml

@@ -15,9 +15,11 @@ awx_receptor_socket_path: /var/run/receptor/receptor.sock
 
 # AWX will spin up pods using this image when it has work to do.
 # 💡 Here “ee” means “execution environment”, not “enterprise edition”.
-awx_ee_version: "{{ awx_version }}"
-awx_ee_image_mirrored_from: "ghcr.io/ansible/awx-ee:{{ awx_ee_version }}"
-awx_ee_image_mirrored_to: "docker-registry.default.svc:5000/wwp-test/awx-ee:{{ awx_ee_version }}"
+awx_ee_image_name: wp-awx-ee
+awx_ee_ansible_requirements_from_url: https://raw.githubusercontent.com/epfl-si/wp-ops/master/ansible/requirements.yml
+awx_ee_entrypoint_script_source: >-
+  https://raw.githubusercontent.com/ansible/ansible-builder/devel/src/ansible_builder/_target_scripts/entrypoint
+awx_ee_image_for_pods: "docker-registry.default.svc:5000/{{ ansible_oc_namespace }}/{{ awx_ee_image_name }}:latest"
 
 awx_web_hostnames:
   wwp: awx-wwp.epfl.ch
@@ -37,6 +39,8 @@ awx_service_account: awx
 # `curl` (and therefore) `dnf` and `yum` are broken on CentOS 9 +
 # OpenShift 3.11, but only during builds ☹
 # (https://github.com/moby/moby/issues/42680). Here is a workaround:
-shellmacro_poor_mans_curl: >-
-       pip3 install requests >&2 &&
-       python3 -c 'import requests; import sys; sys.stdout.buffer.write(requests.get(url = sys.argv[-1]).content)' --
+shellmacros_poor_mans_curl_oneline: >-
+  {{  lookup("template", "poor_mans_curl_lib.sh")
+  | regex_replace('\\[\r\n]', '')
+  | regex_replace('[\r\n]+', ' ')
+  | regex_replace('[ \t]+',' ') }}

ansible/roles/awx-instance/vars/secrets-wwp-infra.yml

@@ -13,11 +13,11 @@
 # the reader.
 
 awx_postgresql_database:
-  name: awx-wwp-infra
-  host: pg-prod-exopge.epfl.ch
+  name: awx_wwp_infra
+  host: webhst-pg13-prod.epfl.ch
   port: 5432
-  user: awx-wwp-infra
-  password: ENC[PKCS7,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]
+  user: awx_wwp_infra
+  password: ENC[PKCS7,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]
 
 # This key is used to encrypt/decrypt things in the database; likewise, it must be the same as the test instance.
 django_secret_key: ENC[PKCS7,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]

ansible/roles/awx-instance/vars/secrets-wwp-test.yml

@@ -14,11 +14,11 @@
 
 # We use the same database as the production instance.
 awx_postgresql_database:
-  name: awx-wwp
-  host: pg-test-exopge.epfl.ch
+  name: awx_wwp
+  host: webhst-pg13-test.epfl.ch
   port: 5432
-  user: awx-wwp
-  password: ENC[PKCS7,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]
+  user: awx_wwp
+  password: ENC[PKCS7,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]
 # This key is used to encrypt/decrypt things in the database; likewise, it must be the same as the test instance.
 django_secret_key: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjT9M33ENrqKS4G/mpGoMt/KQxs7XQEeZu383mhAjoXYRaSGj9kA0XsqkQJYmJHkQt8cs/mmRWb4JlY1z0ZUXBCBRmc//3ibeqlGpSz4p5Vi3/gbL/4k22zpHHORwl83L4nDdsjr9z9uJuoyv5pOjcbiwcPKrhGv5Vclp6XAFjWLR5o5n2q3XO5ObEzb16p9xrC15r0en4GZzMe57uFxqYN6iOSablP+5LK+c2/ompA54LMzVyfBwTqo6hpBBDaT+jaJpZCage/bJJafW+x3TP0pEcb6zb5YMVi0rhyXBN4Nl3OvDL6dL1Wl30w4ql07g3WYpTYE1xzrNX96VLoEvsTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDAG8MScdUZSsbLgj4yEGQXgCCJipFRCwUg6S9v38Gt9okES2RtoWYxhgqm/7zeacruug==]
 

ansible/roles/awx-instance/vars/secrets-wwp.yml

@@ -13,11 +13,11 @@
 # the reader.
 
 awx_postgresql_database:
-  name: awx-wwp
-  host: pg-prod-exopge.epfl.ch
+  name: awx_wwp
+  host: webhst-pg13-prod.epfl.ch 
   port: 5432
-  user: awx-wwp
-  password: ENC[PKCS7,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]
+  user: awx_wwp
+  password: ENC[PKCS7,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]
 django_secret_key: ENC[PKCS7,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]
 
 awx_admin_password: ENC[PKCS7,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]

ansible/vars/image-vars.yml

@@ -14,3 +14,5 @@ wp_base_image_name: wp-base
 backup_cron_image_name: cronjob
 
 wp_ops_git_uri: https://github.com/epfl-si/wp-ops
+
+awx_ee_image_name: wp-awx-ee