SSO automation changes

Signed-off-by: AniruddhaNayek <[email protected]>

examples/all.yaml

@@ -312,6 +312,20 @@ fio_git_token: ""
 fio_git_branch: ""
 fio_cleanup: true
 
+# ocp-sso vars
+sso_enabled: false
+sso_directory: "/tmp/sso"
+sso_catalogsource_image: ""        # "brew.registry.redhat.io/rh-osbs/iib:327237"
+sso_upgrade_channel: "stable"
+sso_schedulerImage: "registry.k8s.io/scheduler-plugins/kube-scheduler:v0.30.6"
+sso_go_tarball: "https://go.dev/dl/go1.22.4.linux-ppc64le.tar.gz"
+sso_e2e: false
+sso_e2e_github_repo: "https://github.com/openshift/openshift-tests-private.git"
+sso_e2e_github_branch: "master"
+sso_github_username: ""
+sso_github_token: ""
+sso_cleanup: true
+
 #ocp-verification-tests vars
 verification_enabled: false
 verification_dir: "/root/verification-tests"

examples/ocp_sso_vars.yaml

@@ -0,0 +1,14 @@
+---
+# ocp-sso vars
+sso_enabled: false
+sso_directory: "/tmp/sso"
+sso_catalogsource_image: ""        # "brew.registry.redhat.io/rh-osbs/iib:327237"
+sso_upgrade_channel: "stable"
+sso_schedulerImage: "registry.k8s.io/scheduler-plugins/kube-scheduler:v0.30.6"
+sso_go_tarball: "https://go.dev/dl/go1.22.4.linux-ppc64le.tar.gz"
+sso_e2e: false
+sso_e2e_github_repo: ""
+sso_e2e_github_branch: ""
+sso_github_username: ""
+sso_github_token: ""
+sso_cleanup: true

playbooks/main.yml

@@ -65,6 +65,8 @@
 - import_playbook: ocp-cli-plugins.yml
   when: enable_cli_plugins_test is defined and enable_cli_plugins_test
 
+- import_playbook: ocp-sso.yml
+  when: sso_enabled is defined and sso_enabled
 
 - import_playbook: ocp-compliance.yml
   when: compliance_enabled is defined and compliance_enabled

playbooks/ocp-sso.yml

@@ -0,0 +1,8 @@
+#ocp-sso.yml
+---
+- name: Installation of the Secondary Scheduler Operator and run e2e
+  hosts: bastion
+  tasks:
+  - name: Deploy Secondary Scheduler Operator
+    include_role:
+      name: ocp-sso

playbooks/roles/ocp-sso/README.md

@@ -0,0 +1,78 @@
+ocp-sso
+=========
+
+The Secondary Scheduler Operator for Red Hat OpenShift provides a way to deploy a custom secondary scheduler in OpenShift Container Platform. The secondary scheduler runs alongside the default scheduler to schedule pods. Pod configurations can specify which scheduler to use.
+
+The custom scheduler must have the /bin/kube-scheduler binary and be based on the [Kubernetes scheduling framework](https://kubernetes.io/docs/concepts/scheduling-eviction/scheduling-framework/).
+
+The Secondary Scheduler Operator creates the default roles and role bindings required by the secondary scheduler. You can specify which scheduling plugins to enable or disable by configuring the KubeSchedulerConfiguration resource for the secondary scheduler.
+
+
+This playbook will install Secondary Scheduler Operator and run the e2e from the openshift-test-private repository.
+
+
+Requirements
+------------
+
+- Running OCP 4.x cluster is needed..
+- The cluster is in a known good state, without any errors.
+- OCP secret with name ***podman-secret*** in the default namespace which is used for global secret update and has following keys: ***username***, ***password*** and ***registry***
+- Note: It is recommended to create catalog source with name "qe-app-registry" before running playbook.
+
+Role Variables
+--------------
+
+Role Variables
+--------------
+| Variable                       | Required | Default     | Comments                                       |
+|--------------------------------|----------|-------------|------------------------------------------------|
+| sso_enabled                    | no       |   false     | Set it to true to run this playbook            |
+| sso_directory                  | no       | `/tmp/sso`  | Working directory for secondary scheduler operator|
+| sso_catalogsource_image        | no       |             | Catlog source index image. If not defined, default `redhat-operators` catalog source will be used |
+| sso_upgrade_channel            | no       |    stable   | Channel version for the secondary scheduler operator|
+| sso_schedulerImage             | no       | registry.k8s.io/scheduler-plugins/kube-scheduler:v0.30.6 | k8s client package  versions that the scheduler-plugins are compiled with |
+| sso_go_tarball                 | no       | https://go.dev/dl/go1.22.4.linux-ppc64le.tar.gz | HTTPS URL for golang tarball |
+| sso_e2e                        | no       |    false    | Set it true for running e2e tests              |
+| sso_e2e_github_repo            | no       | https://github.com/openshift/openshift-tests-private.git     | github repository for running e2e tests |
+| sso_e2e_github_branch          | no       |    master   | github repository branch for running e2e tests |
+| sso_github_username            | no       |             | Github username                                |
+| sso_github_token               | no       |             | Github token                                   |
+| sso_cleanup                    | no       |    true     | Uninstall and cleanup any existing installed version of secondary scheduler operator |
+
+Dependencies
+------------
+
+- To run e2e test cases, it requires access to the openshift-test-private repository.
+
+Example Playbook
+----------------
+
+```
+  - name: Deploy Secondary Scheduler Operator
+    include_role:
+      name: ocp-sso
+```
+
+Steps to run playbook
+----------------------
+
+ - Copy `ocp4-playbooks-extras/examples/inventory` file to the home or working directory and modify it to add a remote host
+ - Copy the `ocp4-playbooks-extras/examples/ocp_sso_vars.yaml` to the home or working directory and set the role variables for `roles/ocp-sso` with the custom inputs.
+ - To execute the playbook run the below sample command
+
+
+Sample Command
+---------------
+
+ansible-playbook -i inventory -e @ocp_sso_vars.yaml ~/ocp4-playbooks-extras/playbooks/ocp-sso.yml 
+
+License
+-------
+
+See LICENCE.txt
+
+Author Information
+------------------
+
+[email protected]
+

playbooks/roles/ocp-sso/defaults/main.yml

@@ -0,0 +1,15 @@
+---
+# defaults file for playbooks/roles/ocp-sso
+sso_enabled: false
+sso_catalogsource: "redhat-operators"
+sso_directory: "/tmp/sso"
+#sso_catalogsource_image: ""
+sso_upgrade_channel: "stable"
+sso_schedulerImage: "registry.k8s.io/scheduler-plugins/kube-scheduler:v0.30.6"
+sso_go_tarball: "https://go.dev/dl/go1.22.4.linux-ppc64le.tar.gz"
+sso_e2e: false
+sso_e2e_github_repo: "https://github.com/openshift/openshift-tests-private.git"
+sso_e2e_github_branch: "master"
+#sso_github_username: ""          
+#sso_github_token: ""
+sso_cleanup: true