Add ARM dependencies

ansible/playbooks/roles/kubernetes_master/tasks/cni-plugins/calico.yml

@@ -37,4 +37,5 @@
 - name: Include Calico deployment tasks
   include_tasks: deployments/deploy-template.yml
   vars:
+    calico_arch: "{{ global_architecture_alias[ansible_architecture] }}"
     file_name: calico.yml.j2

ansible/playbooks/roles/kubernetes_master/templates/calico.yml.j2

@@ -3861,6 +3861,10 @@ spec:
             # Set Felix endpoint to host default action to ACCEPT.
             - name: FELIX_DEFAULTENDPOINTTOHOSTACTION
               value: "ACCEPT"
+{% if 'arm64' in calico_arch %}
+            - name: FELIX_IPTABLESBACKEND
+              value: "Legacy"
+{% endif %}
             # Disable IPv6 on Kubernetes.
             - name: FELIX_IPV6SUPPORT
               value: "false"

ansible/playbooks/roles/preflight/defaults/main.yml

@@ -27,65 +27,69 @@ unsupported_roles:
   - distro: Ubuntu
     arch: aarch64
     roles:
-      - repository
-      - kafka
+      - applications
+      - elasticsearch_curator
+      - filebeat
       - firewall
+      - grafana
+      - haproxy
+      - helm
       - image_registry
+      - jmx_exporter
+      - kafka
+      - kafka_exporter
       - kubernetes_master
       - kubernetes_node
-      - helm
-      - zookeeper
-      - haproxy
       - logging
+      - node_exporter
       - opensearch
       - opensearch_dashboards
-      - elasticsearch_curator
-      - filebeat
-      - prometheus
-      - grafana
-      - node_exporter
-      - jmx_exporter
-      - rabbitmq
-      - kafka_exporter
       - postgresql
       - postgres_exporter
-      - applications
+      - prometheus
+      - rabbitmq
+      - repository
+      - rook
+      - zookeeper
+
   - distro: AlmaLinux
     arch: x86_64
     roles: []  # all supported
   - distro: AlmaLinux
     arch: aarch64
     roles:
       - elasticsearch_curator
+      - rook
   - distro: RedHat
     arch: x86_64
     roles: []  # all supported
   - distro: RedHat
     arch: aarch64
     roles:
-      - repository
-      - kafka
+      - applications
+      - elasticsearch_curator
+      - filebeat
       - firewall
+      - grafana
+      - haproxy
+      - helm
       - image_registry
+      - jmx_exporter
+      - kafka
+      - kafka_exporter
       - kubernetes_master
       - kubernetes_node
-      - helm
-      - zookeeper
-      - haproxy
       - logging
+      - node_exporter
       - opensearch
       - opensearch_dashboards
-      - elasticsearch_curator
-      - filebeat
-      - prometheus
-      - grafana
-      - node_exporter
-      - jmx_exporter
-      - rabbitmq
-      - kafka_exporter
       - postgresql
       - postgres_exporter
-      - applications
+      - prometheus
+      - rabbitmq
+      - repository
+      - rook
+      - zookeeper
 
 unsupported_postgres_extensions:
   x86_64: []

ansible/playbooks/roles/repository/files/download-requirements/requirements/aarch64/files.yml

@@ -36,5 +36,12 @@ files:
   'https://charts.bitnami.com/bitnami/node-exporter-2.3.17.tgz':
     sha256: ec586fabb775a4f05510386899cf348391523c89ff5a1d4097b0592e675ade7f
 
-  'https://helm.elastic.co/helm/filebeat/filebeat-7.9.2.tgz':
-    sha256: 5140b4c4473ca33a0af4c3f70545dcc89735c0a179d974ebc150f1f28ac229ab
+  'https://helm.elastic.co/helm/filebeat/filebeat-7.12.1.tgz':
+    sha256: 5838058fe06372390dc335900a7707109cc7287a84164ca245d395af1f9c0a79
+
+  # --- OpenSearch Bundle ---
+  'https://artifacts.opensearch.org/releases/bundle/opensearch/1.2.4/opensearch-1.2.4-linux-arm64.tar.gz':
+    sha256: 5e8cd13ad1831e4a286a54334505c16c43ce8e50981100eea4eb18f79d3e63a5
+
+  'https://artifacts.opensearch.org/releases/bundle/opensearch-dashboards/1.2.0/opensearch-dashboards-1.2.0-linux-arm64.tar.gz':
+    sha256: 1f668d98f4670f1b88f03b19d30b2cc44ec439a7b2edff1a48034717d594cfe1

ansible/playbooks/roles/repository/files/download-requirements/requirements/aarch64/images.yml

@@ -11,6 +11,7 @@ images:
 
   'registry:2.8.0':
     sha1: c6cdd738fbdd2efaef9588b439fc3a7c0c090368
+    allow_mismatch: true
 
   # applications
   'epiphanyplatform/keycloak:14.0.0':

ansible/playbooks/roles/repository/files/download-requirements/requirements/aarch64/redhat/packages.yml

@@ -37,7 +37,7 @@ packages:
     - 'docker-ce-rootless-extras-20.10.8'
     - 'elasticsearch-oss-7.10.2'  # for opendistroforelasticsearch & logging roles
     - 'ethtool'
-    - 'filebeat-7.9.2'
+    - 'filebeat-7.12.1'
     - 'firewalld'
     - 'fontconfig'  # for grafana
     - 'fping'
@@ -67,14 +67,7 @@ packages:
     - 'nmap-ncat'
     - 'nss'  # for java-1.8.0-openjdk-headless
     - 'nss-softokn'  # for nss
-    # Open Distro for Elasticsearch plugins are installed individually to not download them twice in different versions (as dependencies of opendistroforelasticsearch package)
-    - 'opendistro-alerting-1.13.1.*'
-    - 'opendistro-index-management-1.13.1.*'
-    - 'opendistro-job-scheduler-1.13.0.*'
-    - 'opendistro-performance-analyzer-1.13.0.*'
-    - 'opendistro-security-1.13.1.*'
-    - 'opendistro-sql-1.13.0.*'
-    - 'opendistroforelasticsearch-kibana-1.13.1'  # kibana has shorter version
+    - 'ntsysv'  # for python36
     - 'openssl'
     - 'perl'  # for vim
     - 'perl-Getopt-Long'  # for vim
@@ -108,6 +101,15 @@ packages:
     - 'samba-client-libs'  # for samba-client
     - 'samba-common'
     - 'samba-libs'  # for cifs-utils
+    - 'sssd'  # needed for samba packages installation
+    - 'sssd-client'  # needed for sssd upgrade
+    - 'sssd-common'  # needed for sssd upgrade
+    - 'sssd-ad'  # needed for sssd upgrade
+    - 'sssd-ipa'  # needed for sssd upgrade
+    - 'sssd-kcm'  # needed for sssd upgrade
+    - 'sssd-krb5'  # needed for sssd upgrade
+    - 'sssd-ldap'  # needed for sssd upgrade
+    - 'sssd-proxy'  # needed for sssd upgrade
     - 'slirp4netns'  # for docker-ce-rootless-extras
     - 'sysstat'
     - 'tar'

docs/changelogs/CHANGELOG-2.0.md

@@ -6,6 +6,7 @@
 
 - [#2932](https://github.com/epiphany-platform/epiphany/issues/2932) - Support `epicli upgrade` for RHEL/AlmaLinux 8
 - [#3057](https://github.com/epiphany-platform/epiphany/issues/3057) - Additional AWS authentication option
+- [#3101](https://github.com/epiphany-platform/epiphany/issues/3101) - Add support for ARM architecture for AlmaLinux 8
 
 ### Fixed
 
@@ -59,7 +60,6 @@
 - [#2891](https://github.com/epiphany-platform/epiphany/issues/2891) - Rook/Ceph Kubernetes Native Storage for AWS non-EKS
 - [#2887](https://github.com/epiphany-platform/epiphany/issues/2887) - Create Kubernetes Native Storage Epiphany configuration for AWS provider
 - [#2734](https://github.com/epiphany-platform/epiphany/issues/2734) - Document upgrade Red Hat / CentOS 7 to v 8.x
-- [#3101](https://github.com/epiphany-platform/epiphany/issues/3101) - Add support for ARM architecture for AlmaLinux 8
 
 ### Fixed
 

docs/home/ARM.md

@@ -34,6 +34,7 @@ Besides making sure that the selected providers, operating systems, components a
 
 ***Notes***
 
+- ```Rook/Ceph Cluster Storage``` is not supported on ```arm64``` and needs to be disabled in feature-mapping.
 - For the ```postgresql``` component the ```pgpool``` and ```pgbouncer``` extensions for load-balancing and replication are not yet supported on ```arm64```. These should be disabled in the ```postgressql``` and ```applications``` configurations.
 - While not defined in any of the component configurations, the ```elasticsearch_curator``` role is currently not supported on ```arm64``` and should be removed from the ```feature-mapping``` configuration if defined.
 - If you want to download ```arm64``` requirements from an ```x86_64``` machine, you can try to use a container as described [here](./howto/CLUSTER.md#downloading-offline-requirements-with-a-docker-container).