encrypt pull secret with vault

playbooks/ansible.cfg

@@ -4,6 +4,7 @@ jinja2_native = True
 inventory = ./inventory.yml
 remote_user = student
 ask_pass = no
+vault_identity_list = pull@.vault_pull
 
 [privilege_escalation]
 become = no

playbooks/roles/deploy-certmanager/tasks/main.yml

@@ -1,5 +1,8 @@
 ---
 # Ensures a CertManager instance is deployed and configured with a CA.
+#
+# TODO: oc patch featuregate/cluster --type=merge -p '{"spec": {"customNoUpgrade": {"enabled": ["RouteExternalCertificate"]}}}'
+#
 - name: See if the Cert Manager project is there.
   kubernetes.core.k8s_info:
     kubeconfig: tmp/kubeconfig-ocp4

playbooks/roles/user-workload-monitoring/tasks/main.yml

@@ -47,7 +47,7 @@
             enableUserAlertmanagerConfig: true
           prometheusK8s:
             retention: 1w
-            retentionSize: 4Gi
+            retentionSize: 4G
             volumeClaimTemplate:
               spec:
                 storageClassName: nfs-storage
@@ -71,7 +71,7 @@
             enableAlertmanagerConfig: true
           prometheus:
             retention: 1w
-            retentionSize: 4Gi
+            retentionSize: 4G
             volumeClaimTemplate:
               spec:
                 storageClassName: nfs-storage