testing: lint and docs improvements

This commit resolves the following lint rules:

- 'yaml'
- 'yaml[truthy]'
- 'risky-file-permissions'
- 'no-changed-when'

It moves 'yaml' to 'yaml[indentation]' and 'yaml[line-length]'
to avoid skipping rules that are needed.

Adds an exclusion folder for the .github folder due to
ansible/ansible-lint#3645

Author: ccamacho

config/ansible-lint.yml

@@ -1,7 +1,11 @@
+exclude_paths:
+  - .github
+
 skip_list:
   # Hide "wrong indentation: expected 4 but found 2 (indentation)"
   # until we find out how to properly configure it
-  - 'yaml'
+  - 'yaml[indentation]'
+  - 'yaml[line-length]'
   # Do not force galaxy info in meta/main.yml
   - 'meta-no-info'
   # Hide "Commands should not change things if nothing needs doing"
@@ -16,8 +20,5 @@ skip_list:
   - 'deprecated-local-action'
   - 'no-free-form'
   - 'chema[meta]'
-  - 'yaml[truthy]'
-  - 'risky-file-permissions'
   - 'ignore-errors'
-  - 'no-changed-when'
   - 'fqcn'

roles/benchmarking/benchmarking_deploy_coco_dataset/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Benchmarking.download_coco_dataset
 

roles/benchmarking/benchmarking_deploy_coco_dataset/tasks/main.yml

@@ -36,7 +36,7 @@
   template:
     src: "{{ coco_dataset_pvc }}"
     dest: "{{ artifact_extra_logs_dir }}/001_pvc_coco-dataset.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Check if the PVC already exists
   command: oc get -f "{{ artifact_extra_logs_dir }}/001_pvc_coco-dataset.yml" -oname
@@ -52,7 +52,7 @@
   template:
     src: "{{ coco_dataset_pod }}"
     dest: "{{ artifact_extra_logs_dir }}/002_pod_coco-dataset.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Delete the Pod, if it exists
   command:

roles/benchmarking/benchmarking_run_mlperf_ssd/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Benchmarking.run_mlperf_ssd
 

roles/benchmarking/benchmarking_run_mlperf_ssd/defaults/main/preset.yaml

@@ -5,4 +5,4 @@ benchmarking_run_mlperf_ssd_dataset_pvc_name: "benchmarking-coco-dataset"
 benchmarking_run_mlperf_ssd_entrypoint_cm_name: "benchmarking-mlperf-ssd-entrypoint"
 
 # name of the pod running the SSD benchmark
-benchmarking_run_mlperf_ssd_name: "benchmarking-mlperf-ssd"
+benchmarking_run_mlperf_ssd_name: "benchmarking-mlperf-ssd"

roles/benchmarking/benchmarking_run_mlperf_ssd/tasks/main.yml

@@ -34,7 +34,7 @@
   template:
     src: "{{ benchmarking_mlperf_ssd_pod }}"
     dest: "{{ artifact_extra_logs_dir }}/001_pod_run-mlperf-ssd.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Delete the Pod, if it exists
   command:

roles/cluster/cluster_capture_environment/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.capture_environment
 

roles/cluster/cluster_capture_environment/tasks/main.yml

@@ -42,7 +42,7 @@
   copy:
     content: "{{ git_version.stdout }}"
     dest: "{{ artifact_extra_logs_dir }}/ci_artifact.git_version"
-    mode: 0644
+    mode: '0644'
 
 - name: Fetch ci-artifact last git commit
   command:
@@ -53,7 +53,7 @@
   copy:
     content: "{{ git_show.stdout }}"
     dest: "{{ artifact_extra_logs_dir }}/ci_artifact.git_commit"
-    mode: 0644
+    mode: '0644'
 
 - name: Get the cluster nodes status
   shell:

roles/cluster/cluster_create_htpasswd_user/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.create_htpasswd_adminuser
 

roles/cluster/cluster_create_htpasswd_user/tasks/main.yml

@@ -33,7 +33,7 @@
   template:
     src: "{{ cluster_create_htpasswd_user_oauth }}"
     dest: "{{ artifact_extra_logs_dir }}/oauth_htpasswd.yaml"
-    mode: 0400
+    mode: '0400'
 
 - name: Append the htpasswd OAuth identity provider
   shell:
@@ -74,6 +74,7 @@
   ansible.builtin.file:
     path: /tmp/user_kubeconfig
     state: touch
+    mode: '0644'
 
 - name: Wait for the authentication to work
   when: cluster_create_htpasswd_user_wait | bool

roles/cluster/cluster_create_htpasswd_user/vars/main/resources.yml

@@ -1,2 +1,2 @@
 ---
-cluster_create_htpasswd_user_oauth: "roles/cluster/cluster_create_htpasswd_user/templates/oauth.yml.j2"
+cluster_create_htpasswd_user_oauth: "roles/cluster/cluster_create_htpasswd_user/templates/oauth.yml.j2"

roles/cluster/cluster_create_osd/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.create_osd
 

roles/cluster/cluster_deploy_aws_efs/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_aws_efs
 

roles/cluster/cluster_deploy_aws_efs/tasks/aws-efs.yaml

@@ -98,8 +98,8 @@
   set_fact:
     cluster_tags: "{{ cluster_tags | default({}) | combine({item.key: item.value}) }}"
   with_items:
-      - {'key': 'Name' , 'value': '{{ cluster_name_cmd.stdout }}'}
-      - {'key': '{{ cluster_name_tag_cmd.stdout }}' , 'value': 'owned'}
+      - {'key': 'Name', 'value': '{{ cluster_name_cmd.stdout }}'}
+      - {'key': '{{ cluster_name_tag_cmd.stdout }}', 'value': 'owned'}
       - {'key': 'Purpose', 'value': ''}
 
 - name: Get the SecurityGroup content

roles/cluster/cluster_deploy_aws_efs/tasks/main.yml

@@ -26,7 +26,7 @@
   template:
     src: "{{ cluster_deploy_aws_efs_csi_driver }}"
     dest: "{{ artifact_extra_logs_dir }}/csi-driver.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Create the ClusterCSIDriver resource
   command: oc apply -f "{{ artifact_extra_logs_dir }}/csi-driver.yml"
@@ -35,7 +35,7 @@
   template:
     src: "{{ cluster_deploy_aws_efs_storage_class }}"
     dest: "{{ artifact_extra_logs_dir }}/storage-class.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Create the StorageClass resource
   command: oc apply -f "{{ artifact_extra_logs_dir }}/storage-class.yml"

roles/cluster/cluster_deploy_kepler/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_kepler
 

roles/cluster/cluster_deploy_kepler/tasks/main.yml

@@ -16,7 +16,7 @@
     git --git-dir "{{ kepler_location }}/.git" show
 
 - name: Deploy kepler-operator
-  shell: 
+  shell:
     cd "{{ kepler_location }}"; make deploy OPERATOR_IMG=quay.io/sustainable_computing_io/kepler-operator:latest
   register: deploy_kepler
   delay: 3

roles/cluster/cluster_deploy_ldap/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_ldap
 

roles/cluster/cluster_deploy_ldap/tasks/main.yml

@@ -72,7 +72,7 @@
   template:
     src: "{{ cluster_deploy_ldap_oauth }}"
     dest: "{{ artifact_extra_logs_dir }}/oauth_ldap.yaml"
-    mode: 0400
+    mode: '0400'
 
 - name: Get LDAP URL
   command:
@@ -168,6 +168,7 @@
   ansible.builtin.file:
     path: /tmp/user_kubeconfig
     state: touch
+    mode: '0644'
 
 - name: Wait for the authentication to work
   when: cluster_deploy_ldap_wait | bool

roles/cluster/cluster_deploy_minio_s3_server/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_minio_s3_server
 

roles/cluster/cluster_deploy_nfs_provisioner/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_nfs_provisioner
 

roles/cluster/cluster_deploy_nfs_provisioner/files/nfs-server-and-provisioner/deploy/deployment.yaml

@@ -54,7 +54,7 @@ spec:
       app: nfs-provisioner
   replicas: 1
   strategy:
-    type: Recreate 
+    type: Recreate
   template:
     metadata:
       labels:

roles/cluster/cluster_deploy_nfs_provisioner/files/nfs-server-and-provisioner/deploy/export-pv-claim.yaml

@@ -8,4 +8,4 @@ spec:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 500Gi
+      storage: 500Gi

roles/cluster/cluster_deploy_nfs_provisioner/files/nfs-server-and-provisioner/usage/pod-1.yaml

@@ -19,4 +19,3 @@ spec:
     - name: nfs-pvc
       persistentVolumeClaim:
         claimName: shared-folder
-

roles/cluster/cluster_deploy_nfs_provisioner/files/nfs-server-and-provisioner/usage/pod-2.yaml

@@ -19,4 +19,3 @@ spec:
     - name: nfs-pvc
       persistentVolumeClaim:
         claimName: shared-folder
-

roles/cluster/cluster_deploy_nginx_server/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_nginx_server
 

roles/cluster/cluster_deploy_operator/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_operator
 

roles/cluster/cluster_deploy_operator/tasks/main.yml

@@ -193,7 +193,7 @@
     template:
       src: "{{ cluster_deploy_operator_res_ns }}"
       dest: "{{ artifact_extra_logs_dir }}/src/000_namespace.yml"
-      mode: 0400
+      mode: '0400'
 
   - name: Check if the namespace exists
     command: oc get "ns/{{ cluster_deploy_operator_namespace }}"
@@ -217,7 +217,7 @@
     template:
       src: "{{ cluster_deploy_operator_res_group }}"
       dest: "{{ artifact_extra_logs_dir }}/src/001_operator_group.yml"
-      mode: 0400
+      mode: '0400'
 
   - name: Instantiate the OperatorHub OperatorGroup resource
     command: oc apply -f "{{ artifact_extra_logs_dir }}/src/001_operator_group.yml"
@@ -226,7 +226,7 @@
   template:
     src: "{{ cluster_deploy_operator_res_sub }}"
     dest: "{{ artifact_extra_logs_dir }}/src/002_sub.yml"
-    mode: 0400
+    mode: '0400'
 
 - name: Instantiate the Subscription
   command: oc apply -f "{{ artifact_extra_logs_dir }}/src/002_sub.yml"

roles/cluster/cluster_deploy_redis_server/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.deploy_redis_server
 

roles/cluster/cluster_destroy_ocp/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.destroy_ocp
 

roles/cluster/cluster_destroy_ocp/meta/main.yml

@@ -3,4 +3,3 @@ dependencies:
 - role: check_deps
   vars:
     check_deps_needs_cluster: false
-

roles/cluster/cluster_destroy_ocp/tasks/main.yml

@@ -37,7 +37,7 @@
   template:
     src: "{{ cluster_destroy_ocp_metadata_json }}"
     dest: "{{ artifact_extra_logs_dir }}/metadata.json"
-    mode: 0400
+    mode: '0400'
 
 - name: Show metadata.json (debug)
   command:

roles/cluster/cluster_destroy_osd/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.destroy_osd
 

roles/cluster/cluster_destroy_osd/vars/main/resources.yml

@@ -1 +0,0 @@
-

roles/cluster/cluster_fill_workernodes/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.fill_workernodes
 

roles/cluster/cluster_fill_workernodes/tasks/fill_node.yaml

@@ -69,7 +69,7 @@
   template:
     src: "{{ cluster_fill_workernodes_pod_template }}"
     dest: "{{ artifact_extra_logs_dir }}/src/pod_placeholder_{{ node_name }}.yaml"
-    mode: 0400
+    mode: '0400'
 
 - name: Check if the Pod already exists
   command:

roles/cluster/cluster_fill_workernodes/vars/main/resources.yml

@@ -1 +1 @@
-cluster_fill_workernodes_pod_template: roles/cluster/cluster_fill_workernodes/templates/pod_placeholder.yaml
+cluster_fill_workernodes_pod_template: roles/cluster/cluster_fill_workernodes/templates/pod_placeholder.yaml

roles/cluster/cluster_preload_image/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.preload_image
 

roles/cluster/cluster_preload_image/tasks/main.yml

@@ -9,7 +9,7 @@
   template:
     src: "{{ cluster_preload_image_ds_template }}"
     dest: "{{ artifact_extra_logs_dir }}/src/preload_daemonset.yaml"
-    mode: 0400
+    mode: '0400'
 
 - name: Delete the DaemonSet, it it exists
   command:

roles/cluster/cluster_preload_image/vars/main/resources.yml

@@ -1,2 +1,2 @@
 ---
-cluster_preload_image_ds_template: roles/cluster/cluster_preload_image/templates/daemonset.yaml.j2
+cluster_preload_image_ds_template: roles/cluster/cluster_preload_image/templates/daemonset.yaml.j2

roles/cluster/cluster_prometheus_db/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.reset_prometheus_db
 

roles/cluster/cluster_set_project_annotation/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.set_project_annotation
 

roles/cluster/cluster_set_scale/tasks/main.yml

@@ -155,5 +155,3 @@
       oc get machineset/{{ item }} -n openshift-machine-api  > {{ artifact_extra_logs_dir }}/machineset_{{ item }}.status
     failed_when: false
     loop: "{{ oc_get_machinesets.stdout_lines }}"
-
-

roles/cluster/cluster_undeploy_kepler/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.undeploy_kepler
 

roles/cluster/cluster_undeploy_kepler/tasks/main.yml

@@ -16,7 +16,7 @@
     git --git-dir "{{ kepler_location }}/.git" show
 
 - name: Undeploy kepler-operator
-  shell: 
+  shell:
     cd "{{ kepler_location }}"; make uninstall; make undeploy 2>&1
   register: undeploy_kepler
   failed_when:

roles/cluster/cluster_undeploy_ldap/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.undeploy_ldap
 

roles/cluster/cluster_upgrade_to_image/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Cluster.upgrade_to_image
 

roles/codeflare/codeflare_capture_state/defaults/main/config.yml

@@ -1,4 +1,4 @@
-# Auto-generated file, do not edit manually ... 
+# Auto-generated file, do not edit manually ...
 # Toolbox generate command: repo generate_ansible_default_settings
 # Source component: Codeflare.capture_state