This change adds the clear-firewall role to the osh-infra-bandit
playbook to resolve an issue with coredns not coming up when
this job is ran on an ubuntu focal node.
Change-Id: I189ceff30271f3a478aff697b84709b19d0b09fc
The following error is appearing when the bandit playbook is used:
bandit requires Python '>=3.7' but the running Python is 3.6.9
This change specifies bandit 1.7.1 in the playbook, which is
compatible with Python 3.5+
Change-Id: I3b43ed6de3a90af49cfc7124fdee542831f73f40
This commit rewrites lint job to make template linting available.
Currently yamllint is run in warning mode against all templates
rendered with default values. Duplicates detected and issues will be
addressed in subsequent commits.
Also all y*ml files are added for linting and corresponding code changes
are made. For non-templates warning rules are disabled to improve
readability. Chart and requirements yamls are also modified in the name
of consistency.
Change-Id: Ife6727c5721a00c65902340d95b7edb0a9c77365
This change adds a non-voting bandit check to openstack-helm-infra
similar to what is ran in the openstack-helm repo.
This check will be made voting in a future change once the current
failures are addressed.
Similarly this check will be modified in a future change to
only be ran when affected python files are changed.
Change-Id: I177940f7b050fbe8882d298628c458bbd935ee89