Bug 2057651

Summary:	mssql - consistently use ansible_managed in configuration files managed by role
Product:	Red Hat Enterprise Linux 8	Reporter:	Noriko Hosoi <nhosoi>
Component:	ansible-collection-microsoft-sql	Assignee:	Sergei Petrosian <spetrosi>
Status:	CLOSED ERRATA	QA Contact:	Daniel Yeisley <dyeisley>
Severity:	unspecified	Docs Contact:	Eliane Ramos Pereira <elpereir>
Priority:	unspecified
Version:	8.7	CC:	briasmit, dyeisley, elpereir, gfialova, lmiksik, nhosoi, pkettman, rhel-cs-system-management-subsystem-qe, rmeggins, spetrosi
Target Milestone:	rc	Keywords:	Rebase
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	role:mssql
Fixed In Version:	ansible-collection-microsoft-sql-1.1.1-3.el8	Doc Type:	Enhancement
Doc Text:	.The Microsoft SQL System Role consistently uses "Ansible_managed" comment in its managed configuration files The `mssql` role generates the following configuration file: * `/var/opt/mssql/mssql.conf` With this update, the Microsoft SQL role inserts the "Ansible managed" comment to the configuration files, using the Ansible standard `ansible_managed` variable. The comment indicates that the configuration files should not be directly edited because the `mssql` role can overwrite the file. As a result, the configuration files contain a declaration stating that the configuration files are managed by Ansible.	Story Points:	---
Clone Of:	2044640
Clones:	2064690 2065206 (view as bug list)		Environment:
Last Closed:	2022-05-10 14:36:36 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2044640, 2057656, 2057657, 2057661, 2057662
Bug Blocks:	2047504, 2047506, 2054363, 2054364, 2054365, 2054367, 2054368, 2054369, 2057645, 2057647, 2064690, 2065206, 2129332

Description Noriko Hosoi 2022-02-23 19:30:11 UTC

+++ This bug was initially created as a clone of Bug #2044640 +++

Description of problem:
RHEL System Roles should consistently use ansible_managed to allow customers to customize the comment shown at the top of configuration files managed by RHEL System Roles.  Some roles do not use ansible_managed, or have hard coded comments.  For example, the kernel_settings role creates /etc/tuned/kernel_settings/tuned.conf with a hard coded comment.  


Version-Release number of selected component (if applicable):
rhel-system-roles-1.7.3-2.el8.noarch


Additional info:
This is likely not limited to the kernel_settings role.  All roles should be evaluated and updated as needed to use ansible_managed.  Any roles updated to use ansible_managed should refer to https://bugzilla.redhat.com/show_bug.cgi?id=2006230 to ensure multi-line ansible_managed comments are supported.

--- Additional comment from Rich Megginson on 2022-01-25 02:46:04 UTC ---

kernel_settings https://github.com/linux-system-roles/kernel_settings/pull/72
postfix - uses the `postconf` command to set configuration - so no template used to generate /etc/postfix/main.cf - we could use the "trick" developed by https://github.com/linux-system-roles/kernel_settings/pull/72/files#diff-3d0ff1709ca48add100327bb2a468e6c508fb92a159c64c4f99ad1df89d9bddeR79 to generate the ansible_managed value, then use something like `lineinfile` to ensure that value is in main.cf
logging - looks good, but need to confirm
vpn - needs ansible_managed
timesync - good
kdump - good
cockpit - good
ssh - good
ha_cluster - need to see if file format supports commenting
tlog - needs comments
certificate - not sure - says it generates scripts but I cannot find how
crypto_policies - good
firewall - good
metrics - needs comments - but this will involve changes to ansible-pcp
mssql - needs comments
nbde_client, nbde_server - uses json format - not sure about comments
network - needs comments
selinux - good
storage - I think /etc/crypttab is not "owned" by the role

in addition - there may be some of the roles that generate config files in a non-standard way (e.g. like postfix with postfix-conf - not using the template module or lookup) that we will have to do some more investigation to find out

Comment 6 Sergei Petrosian 2022-03-17 12:31:49 UTC

Comment 19 errata-xmlrpc 2022-05-10 14:36:36 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-collection-microsoft-sql bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1971