Disabling container validation when running redhat-subscription

subscription-manager will fail if run from within a container. Since
some nodes are bindmounting /run, a .containerenv file is exposed
inside /run on the hosts and this breaks subscription-manager on
overcloud nodes.

We can bypass this validation from subscription-manager by enabling the
SMDEV_CONTAINER_OFF environment boolean as described here [1].

Related: https://bugzilla.redhat.com/show_bug.cgi?id=2058540
[1] https://github.com/candlepin/subscription-manager/pull/2652/files

Co-authored-by: Bogdan Dobrelia <bdobreli@redhat.com>
Depends-On: https://review.opendev.org/c/openstack/ansible-role-redhat-subscription/+/831810
Change-Id: Id23af246cc91fa830c30985437791533e8bd354c
This commit is contained in:
David Vallee Delisle 2022-03-03 11:31:39 -05:00 committed by rabi
parent 3184c3471b
commit 53d3af77f7

View File

@ -47,12 +47,12 @@ resources:
properties:
type: json
value:
map_replace:
- map_replace:
- vars: RhsmVars
- values: {get_param: [RoleParameters]}
- values:
RhsmVars: {get_param: RhsmVars}
map_merge:
- rhsm_disable_container_check: true
- if:
- not: {equals: [{get_param: [RoleParameters, RhsmVars]}, '']}
- {get_param: [RoleParameters, RhsmVars]}
- {get_param: RhsmVars}
outputs:
role_data:
@ -63,7 +63,7 @@ outputs:
- name: Red Hat Subscription Management configuration during deployment
import_role:
name: redhat-subscription
vars: {get_attr: [RoleParametersValue, value, vars]}
vars: {get_attr: [RoleParametersValue, value]}
scale_tasks:
- name: Red Hat Subscription Management configuration during scale-down
tags: down
@ -71,13 +71,14 @@ outputs:
import_role:
name: redhat-subscription
tasks_from: unregister
vars: {get_attr: [RoleParametersValue, value]}
upgrade_tasks:
- name: Red Hat Subscription Management configuration
import_role:
name: redhat-subscription
vars:
map_merge:
- {get_attr: [RoleParametersValue, value, vars]}
- {get_attr: [RoleParametersValue, value]}
# Force only rhsm_repos content to be enabled.
- rhsm_repos_purge: True
- rhsm_force_register: True