Skip V-38462 in gate and cap ansible-lint
openstack-infra are creating images containing an apt.d configuration that sets AllowUnauthenticated to true to support their custom apt repos which contain unsigned packages. The presence of this file causes openstack-ansible-security to fail. We can either remove the file, or skip the V-38462 tag. Skipping the tag in the gate is probably the better long term solution. Additionally, ansible-lint 2.3.8 was released today and is now causing a number of ANSIBLE0008 errors to fail the gate. This is a temporary cap to unblock the gate. Change-Id: I2c78f4e913e99e5fc5d84fba9e28197b73ac8f25
This commit is contained in:
parent
3232ce0a56
commit
b4bb5105b6
@ -44,7 +44,10 @@ pushd "playbooks"
|
|||||||
install_bits lxc-hosts-setup.yml
|
install_bits lxc-hosts-setup.yml
|
||||||
|
|
||||||
# Apply security hardening
|
# Apply security hardening
|
||||||
install_bits security-hardening.yml
|
# NOTE(mattt): We have to skip V-38462 as openstack-infra are now building
|
||||||
|
# images with apt config Apt::Get::AllowUnauthenticated set
|
||||||
|
# to true.
|
||||||
|
install_bits --skip-tag V-38462 security-hardening.yml
|
||||||
|
|
||||||
# Bring the lxc bridge down and back up to ensures the iptables rules are in-place
|
# Bring the lxc bridge down and back up to ensures the iptables rules are in-place
|
||||||
# This also will ensure that the lxc dnsmasq rules are active.
|
# This also will ensure that the lxc dnsmasq rules are active.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
ansible-lint>=2.0.3
|
ansible-lint>=2.0.3,<2.3.8
|
||||||
flake8==2.2.4
|
flake8==2.2.4
|
||||||
hacking>=0.10.0,<0.11
|
hacking>=0.10.0,<0.11
|
||||||
pep8==1.5.7
|
pep8==1.5.7
|
||||||
|
2
tox.ini
2
tox.ini
@ -69,7 +69,7 @@ commands =
|
|||||||
[testenv:ansible-lint]
|
[testenv:ansible-lint]
|
||||||
deps =
|
deps =
|
||||||
ansible>1.9,<2.0
|
ansible>1.9,<2.0
|
||||||
ansible-lint
|
ansible-lint>=2.0.3,<2.3.8
|
||||||
whitelist_externals = bash
|
whitelist_externals = bash
|
||||||
commands =
|
commands =
|
||||||
# Perform an Ansible lint check
|
# Perform an Ansible lint check
|
||||||
|
Loading…
x
Reference in New Issue
Block a user