-
OCP >= 4.20
-
oc client >= 4.20
-
Ansible with Kubernetes module (requirements)
-
Trusted Profile Analyzer 2.2
-
Trusted Artifact Signer 1.3
-
Developer Hub 1.9
-
Red Hat build of Keycloak v26
-
Tekton Pipelines 1.21
-
ArgoCD GitOps 1.19
-
Advanced Cluster Security
-
Devspaces - stable channel - last tested with 3.26.x
| Parameter | Example Value | Definition | Required? |
|---|---|---|---|
token |
sha256~vFanQbthlPKfsaldJT3bdLXIyEkd7ypO_XPygY1DNtQ |
access token for a user with cluster-admin privileges |
YES |
server |
OpenShift cluster API URL |
YES |
|
github_pat |
longString |
Personal Access Token used to download and publish content on Github. |
Required for Developer Hub deployment only. For information regarding scope, refer to the docs |
aws_ec2_access_key |
longStringOfCharacters |
AWS EC2 Access Key. |
Required for TPA Only |
aws_ec2_secret_key |
longStringOfCharacters |
AWS EC2 Secret Key. |
Required for TPA Only |
ansible-playbook -e token=${token} -e server=${server} -e aws_ec2_access_key=${AWS_ACCESS_KEY_ID} -e aws_ec2_secret_key=${AWS_SECRET_ACCESS_KEY} -e github_pat=${github_pat} playbook.yml
This playbook has tags configured. To run a single role or selected roles you can:
ansible-playbook --tags "tpa" playbook.yml
refer to test/README.adoc for testing instructions.