David Luong
e966e9299f
Resolves #918 to make no_log configurable ( #923 )
2022-06-16 01:03:13 -04:00
Shane McDonald
e97def4429
meta -> ansible_operator_meta
2021-09-29 18:39:24 -04:00
Christian M. Adams
68b00efe5e
Set no_log on all tasks that could leak secrets in logs
2021-07-07 18:19:31 -04:00
Christian M. Adams
bfec61ad8d
Dynamically collect secrets for backup & restore roles
...
- This prevents us from overwriting vars unintentionally at restore time
- This will make it easier to add secrets to be backed up in the future
- Add generated secret names to awx spec backup
- Fail early if secret status doesn't exist
- Skip if secret is not in spec for non-generated secrets
- Secret values must be b64 decoded before secret is created
- Cleanup temp files
2021-06-15 14:17:02 -04:00
Christian M. Adams
15bc12b7f6
Remove ownerReferences based on secret name from backup
2021-05-04 11:46:09 -04:00
Christian M. Adams
5ae36367a4
Rename product specific variable names
2021-04-30 10:49:31 -04:00
Christian M. Adams
c817a2234d
Simplify vars needed for restore CR & do not garbage collect secrets
2021-04-30 10:49:31 -04:00
Christian M. Adams
82efe05343
store secrets & definitions in a tempfile dir, fix postgres label
2021-04-30 10:24:36 -04:00
Christian M. Adams
2cbf60fa17
Remove unneeded fqcn for modules & fix CI
2021-04-30 10:24:36 -04:00
Christian M. Adams
ce8c58f542
added secrets logic, fixed permissions issues
2021-04-30 10:24:36 -04:00
Christian M. Adams
5669747bbf
Scope pvc and management pod to default namespace
...
- make this configurable via tower_backup_pvc_namespace var
- remove redundant k8s task info
2021-04-30 10:24:36 -04:00
Christian M. Adams
8467209d35
init restore
2021-04-30 10:24:35 -04:00
