Add pulp_container_content role

This role uses the "Add content" API to add or remove container tags
to/from a repository.

[1] https://docs.pulpproject.org/pulp_container/restapi.html#tag/Repositories:-Container/operation/repositories_container_container_add

Author: markgoddard

roles/pulp_container_content/README.md

@@ -0,0 +1,49 @@
+pulp_container_content
+======================
+
+This role adds and removes content in Pulp container repositories.
+
+Currently only supports tags.
+
+Role variables
+--------------
+
+* `pulp_url`: URL of Pulp server. Default is `https://localhost:8080`
+* `pulp_username`: Username used to access Pulp server. Default is `admin`
+* `pulp_password`: Password used to access Pulp server. Default is unset
+* `pulp_container_content`: List of content to add or remove. Each item is a dict with the following keys:
+
+  * `src_repo`: Name of the repository to copy from when `state` is `present`,
+    or the repository to remove from when `state` is `absent`.
+  * `src_is_push`: Whether `src_repo` is a push repository. Default is `false`.
+  * `dest_repo`: Name of the repository to copy to when `state is `present`.
+  * `tags`: List of names of tags to add or remove.
+  * `state`: Whether to add (`present`) or remove (`absent`) content.
+
+Example playbook
+----------------
+
+```yaml
+---
+- name: Add or remove container content
+  any_errors_fatal: True
+  gather_facts: True
+  hosts: all
+  roles:
+    - role: pulp_container_content
+      pulp_username: admin
+      pulp_password: "{{ secrets_pulp_admin_password }}"
+      pulp_container_content:
+        # Copy tag1 and tag2 from repo1 to repo2
+        - src_repo: repo1
+          src_is_push: true
+          dest_repo: repo2
+          tags:
+            - tag1
+            - tag2
+        # Remove tag3 from repo3
+        - src_repo: repo3
+          tags:
+            - tag3
+          state: absent
+```

roles/pulp_container_content/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+pulp_url: https://localhost:8080
+pulp_username: admin
+pulp_password:
+
+pulp_container_content: []

roles/pulp_container_content/tasks/content.yml

@@ -0,0 +1,73 @@
+---
+- name: Query source repository
+  uri:
+    url: "{{ pulp_url }}/pulp/api/v3/repositories/container/container{% if item.src_is_push | default(false) | bool %}-push{% endif %}/?name={{ item.src_repo | urlencode | regex_replace('/','%2F') }}"
+    user: "{{ pulp_username }}"
+    password: "{{ pulp_password }}"
+    method: GET
+    status_code: 200
+    force_basic_auth: true
+  register: src_repo
+  when: item.state | default != 'absent'
+
+- name: Assert that source repository exists
+  assert:
+    that:
+      src_repo.json.results | length > 0
+  when: item.state | default != 'absent'
+
+- name: Query destination repository
+  uri:
+    url: "{{ pulp_url }}/pulp/api/v3/repositories/container/container/?name={{ item.dest_repo | urlencode | regex_replace('/','%2F') }}"
+    user: "{{ pulp_username }}"
+    password: "{{ pulp_password }}"
+    method: GET
+    status_code: 200
+    force_basic_auth: true
+  register: dest_repo
+
+- name: Assert that destination repository exists
+  assert:
+    that:
+      dest_repo.json.results | length > 0
+
+- name: Query tags
+  uri:
+    url: "{{ pulp_url }}/pulp/api/v3/content/container/tags/?name__in={{ item.tags | join(',') | urlencode | regex_replace('/','%2F') }}&repository_version={{ repo.json.results[0].latest_version_href | urlencode | regex_replace('/','%2F')  }}"
+    user: "{{ pulp_username }}"
+    password: "{{ pulp_password }}"
+    method: GET
+    status_code: 200
+    force_basic_auth: true
+  register: tags
+  vars:
+    repo: "{{ src_repo if item.state | default != 'absent' else dest_repo }}"
+
+# NOTE: Currently we don't verify that all tags exist. This can be fixed when we specify a different tag for each repo.
+
+- name: Add or remove content units
+  uri:
+    url: "{{ pulp_url }}{{ dest_repo.json.results[0].pulp_href }}{% if item.state | default != 'absent' %}add{% else %}remove{% endif %}/"
+    user: "{{ pulp_username }}"
+    password: "{{ pulp_password }}"
+    method: POST
+    status_code: 202
+    force_basic_auth: true
+    body:
+      content_units: "{{ tags.json.results | map(attribute='pulp_href') | list }}"
+    body_format: json
+  register: task
+
+- name: Wait for task to complete
+  uri:
+    url: "{{ pulp_url }}{{ task.json.task }}"
+    user: "{{ pulp_username }}"
+    password: "{{ pulp_password }}"
+    method: GET
+    status_code: 200
+    force_basic_auth: true
+  register: result
+  until: result.json.state not in ['waiting', 'running']
+  retries: 30
+  delay: 2
+  failed_when: result.json.state != 'completed'

roles/pulp_container_content/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Include content.yml
+  include_tasks: content.yml
+  loop: "{{ pulp_container_content }}"