feat(telco-kpis): Add Gitea role for test report publishing

[ccardenosa]

Implement Gitea deployment and report publishing infrastructure for hosting Telco-KPIs test reports with vault integration and retention policies.

Problem

Telco-KPIs test reports need centralized hosting accessible to test engineers and stakeholders. Reports generated on bastion hosts need automated publishing to a Git-based repository system with retention management.

Solution

Created gitea Ansible role for deploying Gitea server and publishing test reports as Markdown files with compressed artifacts.

Role: playbooks/telco-kpis/roles/gitea/

Features

Deployment:

• Podman-based Gitea server deployment on bastion
• SQLite database with automatic migration handling
• Firewall configuration (port 3000)
• Accessibility checking instead of container existence
• Admin user creation with API token management

Report Publishing:

• Creates organization and repositories automatically
• Publishes Markdown reports via Gitea API
• Uploads compressed tarball as release artifact
• Updates repository README with latest report links
• Retention policy: keeps last 15 reports, removes older ones

Vault Integration:

• Gitea credentials stored in Ansible vault
• Secure API token management
• Credential validation before operations

Implementation Details

Role Structure:

• tasks/main.yml - Entry point with operation dispatch
• tasks/deploy.yml - Gitea server deployment
• tasks/initialize.yml - Initial configuration and admin setup
• tasks/validate-credentials.yml - Vault credential validation
• tasks/create-repository.yml - Repository creation
• tasks/publish-report.yml - Report publishing workflow
• defaults/main.yml - Default variables
• templates/README.md.j2 - Repository README template

Task Operations:

• gitea_operation: deploy - Deploy and initialize Gitea server
• gitea_operation: publish - Publish test report
• gitea_operation: validate - Validate vault credentials

Usage

Deploy Gitea:

- name: Deploy Gitea server
  ansible.builtin.include_role:
    name: gitea
  vars:
    gitea_operation: deploy
    gitea_vault_org: telco-kpis

Publish report:

- name: Publish test report
  ansible.builtin.include_role:
    name: gitea
  vars:
    gitea_operation: publish
    gitea_vault_org: telco-kpis
    gitea_vault_repo: hlxcl7-reports
    gitea_report_file: /path/to/report.md
    gitea_artifact_file: /path/to/artifacts.tar.gz

Key Features

Firewall Management:

• Detects firewalld vs. iptables
• Adds port 3000 rule if not present
• Handles both firewall backends

Database Migration:

• Waits for database initialization on first run
• Handles migration errors gracefully
• Retries admin user creation after migration

Repository Retention:

• Keeps last 15 reports per repository
• Automatically deletes older reports
• Prevents unbounded repository growth

Error Handling:

• Comprehensive API error checking
• Retries for transient failures
• Detailed error messages

Benefits

• Centralized test report hosting
• Automated report publishing workflow
• Secure credential management via vault
• Retention policy prevents storage bloat
• Accessible web UI for stakeholders
• Git-based versioning of reports

Integration

Used by playbooks/telco-kpis/generate-report.yml to publish aggregated test reports from all Telco-KPIs tests (node-info, BIOS validation, performance tests, deployment timeline).

Related: Telco-KPIs test infrastructure, report generation system

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign shaior for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[eifrach]

I think for this it's better to add a small retry incase there is some network latency or issue

[eifrach]

Suggested change

	podman run -d
	--name {{ gitea_container_name }}
	podman run -d --rm
	--name {{ gitea_container_name }}