feat(validations): Attempt to add validations

.github/workflows/risu.txt

@@ -0,0 +1,32 @@
+# TODO: This should be added to the main pipeline launch to validate the final deployment and upload the report
+
+# name: Run Risu analysis
+
+# on:
+#   push:
+#   #   branches:
+#   #     - main
+#   # schedule:
+#   #   - cron:  '0 0 * * *'
+
+# jobs:
+#   risu:
+#     runs-on: ubuntu-latest
+#     steps:
+#     - uses: actions/[email protected]
+
+#     # Use GitHub Actions' cache to shorten build times and decrease load on servers
+#     - uses: actions/[email protected]
+#       with:
+#         path: ~/.cache/pip
+#         key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements/*') }}
+#         restore-keys: |
+#           ${{ runner.os }}-pip-
+
+#     - uses: risuorg/[email protected]
+#       env:
+#         GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+#         SOSREPORT: ./validations/test
+#         CONFIGPATH: "./"
+#         RUNFILE: "./validations/build.sh"
+#         GH_PAGES_BRANCH: validation-results

.risu.conf

@@ -0,0 +1 @@
+{"output": "website/validations/risu.json", "web": true, "exclude": ["risuclient"], "extraplugintree": "validations/", "title": "Deployment Validations"}

test-requirements.txt

@@ -1 +1,2 @@
 pre-commit
+risu

validations/build.sh

@@ -0,0 +1 @@
+#!/bin/bash

validations/core/openshift/acm/agents.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# Copyright (C) 2022 Pablo Iranzo Gómez <[email protected]>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# long_name: Checks if agents (ACI) have finished
+# description: Checks agents cluster
+# priority: 900
+# bugzilla:
+
+# Load common functions
+[[ -f "${RISU_BASE}/common-functions.sh" ]] && . "${RISU_BASE}/common-functions.sh"
+
+FILE="${KUBECONFIG}"
+is_mandatory_file ${FILE}
+
+is_required_command oc
+
+COUNT=$(oc get agents -A --no-headers | grep -v Done | wc -l)
+DETAIL=$(oc get agents -A --no-headers | grep -v Done)
+WHAT="Agents pending"
+
+if [ "${COUNT}" == 0 ]; then
+    #   Nothing found
+    exit ${RC_OKAY}
+else
+    echo -e "${WHAT} found:\n ${DETAIL}" >&2
+    exit ${RC_FAILED}
+fi

validations/core/openshift/acm/managedcluster.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# Copyright (C) 2022 Pablo Iranzo Gómez <[email protected]>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# long_name: Checks if managed cluster has been detached
+# description: Checks managed cluster
+# priority: 900
+# bugzilla:
+
+# Load common functions
+[[ -f "${RISU_BASE}/common-functions.sh" ]] && . "${RISU_BASE}/common-functions.sh"
+
+FILE="${KUBECONFIG}"
+is_mandatory_file ${FILE}
+
+is_required_command oc
+
+COUNT=$(oc get managedcluster --no-headers | grep -v local-cluster | wc -l)
+DETAIL=$(oc get managedcluster --no-headers | grep -v local-cluster)
+WHAT="Undetached managedclusters"
+
+if [ "${COUNT}" == 0 ]; then
+    #   Nothing found
+    exit ${RC_OKAY}
+else
+    echo -e "${WHAT} found:\n ${DETAIL}" >&2
+    exit ${RC_FAILED}
+fi

validations/core/openshift/pendingcsr.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# Copyright (C) 2022 Pablo Iranzo Gómez <[email protected]>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# long_name: Checks if there are pending CSRs
+# description: Checks pending CSRs
+# priority: 900
+# bugzilla:
+
+# Load common functions
+[[ -f "${RISU_BASE}/common-functions.sh" ]] && . "${RISU_BASE}/common-functions.sh"
+
+FILE="${KUBECONFIG}"
+is_mandatory_file ${FILE}
+
+is_required_command oc
+
+COUNT=$(oc get csr -A --no-headers | grep -v Approved | wc -l)
+DETAIL=$(oc get csr -A --no-headers | grep -v Approved)
+WHAT="Pending CSR"
+
+if [ "${COUNT}" == 0 ]; then
+    #   Nothing found
+    exit ${RC_OKAY}
+else
+    echo -e "${WHAT} found:\n ${DETAIL}" >&2
+    exit ${RC_FAILED}
+fi

validations/core/openshift/poderrors.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# Copyright (C) 2022 Pablo Iranzo Gómez <[email protected]>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# long_name: Checks if there are pods in error
+# description: Checks pods not running nor complete
+# priority: 900
+# bugzilla:
+
+# Load common functions
+[[ -f "${RISU_BASE}/common-functions.sh" ]] && . "${RISU_BASE}/common-functions.sh"
+
+FILE="${KUBECONFIG}"
+is_mandatory_file ${FILE}
+
+is_required_command oc
+
+COUNT=$(oc get pods -A --no-headers | grep -v Running | grep -v Compl | wc -l)
+DETAIL=$(oc get pods -A --no-headers | grep -v Running | grep -v Compl)
+WHAT="Failed pods"
+
+if [ "${COUNT}" == 0 ]; then
+    #   Nothing found
+    exit ${RC_OKAY}
+else
+    echo -e "${WHAT} found:\n ${DETAIL}" >&2
+    exit ${RC_FAILED}
+fi

validations/profiles/ZTPFW-validations.txt

@@ -0,0 +1,12 @@
+# Author: Pablo Iranzo Gómez ([email protected])
+
+# Copyright (C) 2020 Pablo Iranzo Gómez <[email protected]>
+# description: Checks ZTPFW Validations results
+# long_name: ZTPFW Validations
+#
+# Defines which plugins to include, exclude, etc
+# Syntax
+# +keyword : includes keyword in plugin search
+# -keyword : excludes keyword in plugin search
+
++validations