SIMP 6.4: Map old/new files and capabilities

WHITE

Mapped, but relevant Jira issues have not been researched 

ISSUE TBD: reason

Not Jira us

YELLOW

Jira issues are still being researched for this mapping

BLUE

Jira issues exist to address this mapping

PRs have been submitted to address this mapping's Jira Issues

 GREEN

Mapping + Jira Issues are complete

A1.2: simp env new|update ENVIRONMENT will copy files from %{prefix} to /var/simp/environments/${ENVIRONMENT}/ 

https://simp-project.atlassian.net/browse/SIMP-6419

Secondary Env

A2.2: simp env new|update ENVIRONMENT runs a post-action step that applies SELinux fixfiles restore to the /var/simp/environments/${ENVIRONMENT}/ + subdirectories 

• OmniEnvController calls #fix as part of #new: https://simp-project.atlassian.net/browse/SIMP-6345

  • DirEnv#fix: https://simp-project.atlassian.net/browse/SIMP-6408

    • SecondaryDirEnv#fix: https://simp-project.atlassian.net/browse/SIMP-6417

OMNI Controller

Secondary Env

A2.3: simp env fix ENVIRONMENT applies the correct SELinux contexts on demand  

• simp env fix https://simp-project.atlassian.net/browse/SIMP-6408

• DirEnv#fix + SecondaryDirEnv#fix: https://simp-project.atlassian.net/browse/SIMP-6417

Secondary Env

A3.2: (Related: A2.2) simp env new|update ENVIRONMENT runs a post-action step that applies Puppet user settings & groups  to:

• OmniEnvController delegates #fix to Env objects: https://simp-project.atlassian.net/browse/SIMP-6345

OMNI Controller

• A3.2.1: $codedir/environments/$ENVIRONMENT/ (group only)

https://simp-project.atlassian.net/browse/SIMP-6416

Puppet Env

• A3.2.2: /var/simp/environments/$ENVIRONMENT/site_files/ (group only)

https://simp-project.atlassian.net/browse/SIMP-6417

Secondary Env

• A3.2.3: /opt/puppetlabs/server/data/puppetserver/simp/environments/$ENVIRONMENT/ (user + group)

https://simp-project.atlassian.net/browse/SIMP-6422

Writable Env 

A5.2: The simp env command will ensure the cacertkey during fix ENVIRONMENT and after new|update ENVIRONMENT.

• SecondaryDirEnv#new: https://simp-project.atlassian.net/browse/SIMP-6419

• SecondaryDirEnv#fix: 

  • ISSUE TBD: should this be in #fix?

Secondary Env

A6.3: create new Extra/Omni environments on demand with simp environment new.

• PuppetDirEnv#new: https://simp-project.atlassian.net/browse/SIMP-6418

• SecondaryDirEnv#new: https://simp-project.atlassian.net/browse/SIMP-6419

• WritableDirEnv#new: https://simp-project.atlassian.net/browse/SIMP-6421

Puppet Env

Secondary Env

Writable Env 

A7.2: Environments can be removed with simp env rm ENVIRONMENT

https://simp-project.atlassian.net/browse/SIMP-6612

Puppet Env

Secondary Env

B3.2: The simp env command will ensure the correct puppet permissions are set during fix ENVIRONMENT and after new|update ENVIRONMENT. 

• B3.2.1: Note the changes above include several users, paths, and the digest algorithm.

• B3.2.2: Note that these specific UID/GIDs may no longer be necessary.  Now that the simp command is setting them, it can just check what user is configured to own what files etc.

DUPLICATE See A3.2 + children

• Puppet: https://simp-project.atlassian.net/browse/SIMP-6416

• Secondary: https://simp-project.atlassian.net/browse/SIMP-6417

• Writable: https://simp-project.atlassian.net/browse/SIMP-6422

Puppet Env

Secondary Env

Writable Env 

C1.2: The command simp env new|update ENVIRONMENT will copy files from %{prefix}/???/rsync/ to /var/simp/environments/${ENVIRONMENT}/rsync/

•  

  • See A1.

https://simp-project.atlassian.net/browse/SIMP-6419

Secondary Env

Related to A1.2, but focuses on rsync/, which will have its own skeleton directory

C2.1 The command simp env new|update ENVIRONMENT will copy files from %{prefix} to /var/simp/environments/${ENVIRONMENT}/rsync/

• This should include any logic needed to ensure a basic DNS environment

• However, the logic in the (simp-rsync) RPM seems strange

• https://simp-project.atlassian.net/browse/SIMP-6419

• ISSUE TBD: Look into basic DNS env

• ISSUE TBD: Review RPM strangeness

Secondary Env

C3.2: The simp env command will ensure the correct FACLS are set during fix ENVIRONMENT and after new|update ENVIRONMENT.

https://simp-project.atlassian.net/browse/SIMP-6417

Secondary Env

C5.2:  The simp env command will ensure the correct symlinks (if any) are managed during  new|update|remove ENVIRONMENT

https://simp-project.atlassian.net/browse/SIMP-6620

Secondary Env

D1.2: simp environment command would then install into the appropriate secondary environment directory, when these boot files exist.

https://simp-project.atlassian.net/browse/SIMP-6621

Secondary Env

A6.2: move the initial ISO install environment deploy logic into an early stage of simp config 

Uncomment OmniEnvContoller#create and integration test https://simp-project.atlassian.net/browse/SIMP-6533

• (follows https://simp-project.atlassian.net/browse/SIMP-6418)

A1.1: simp-environment.spec installs all files to %{prefix}, and does not install files into %{_var}

https://simp-project.atlassian.net/browse/SIMP-6311

A2.1: simp-environment.spec still provides SELinux policies for %{_var}

• A2.1.1: %build still builds SELinux module

• A2.1.2: %post (initial install only) applies the initial installs' fixfiles restore to the top-level /var/simp 

• A2.1.2: %post no longer applies fixfiles for separate subdirectories under /var/simp/environments/ 

  • See A2.2

1. remove policies from simp-environment: https://simp-project.atlassian.net/browse/SIMP-4379

2. create new RPM:https://simp-project.atlassian.net/browse/SIMP-6559

A3.1:  %post (initial install only) applies the Puppet user settings & groups at the top-level /var/simp 

https://simp-project.atlassian.net/browse/SIMP-6614

A4.1:  (Related: E1) Consolidate %post's yum repo creation logic into the existing script simp-utils:scripts/sbin/updaterepos

• simp-environment RPM: https://simp-project.atlassian.net/browse/SIMP-6402

•  simp-utils RPM: https://simp-project.atlassian.net/browse/SIMP-6514

See:  E1.1

A4.1.1: The two have slight differences between them that should be carried over into updaterepos

•  simp-utils RPM: https://simp-project.atlassian.net/browse/SIMP-6522

See: simp-utils RPM/ E1.2

A4.1.2:  Remove logic from RPM %post

https://simp-project.atlassian.net/browse/SIMP-6402

• createrepo removed in PR#23

  • The above pull request removed the yum repo stuff from simp-env but another ticket was opened to do the work in simp-utils.

A5.1: remove cacertkey ensure logic from %post

https://simp-project.atlassian.net/browse/SIMP-6311

patched in PR#22

A6.1: remove `/usr/local/sbin/simp_rpm_helper --rpm_dir=%{prefix} --rpm_section='post' --rpm_status=$1 --preserve --target_dir='.'` from %post

https://simp-project.atlassian.net/browse/SIMP-6311

patched in PR#22

A7.1: remove `/usr/local/sbin/simp_rpm_helper --rpm_dir=%{prefix} --rpm_section='post' --rpm_status=$1 --preserve --target_dir='.'` from %postun

https://simp-project.atlassian.net/browse/SIMP-6311

patched in PR#22

B1: keep this for now? (see discussion)

https://simp-project.atlassian.net/browse/SIMP-6584

PR#15, undone by PR#17