initial project commit

.ansible-lint

@@ -0,0 +1,6 @@
+skip_list:
+  - yaml[colons]
+  - yaml[empty-lines]
+  - yaml[line-length]
+  - no-changed-when
+  - ignore-errors

.drone.yml

@@ -0,0 +1,87 @@
+---
+kind: pipeline
+type: docker
+name: run_ansible_tests_fedora39
+
+global-variables:
+  ansible_image     : &ansible_image     "gitea.thezengarden.net/podman/images/ansible-dev:latest"
+  ansible_inventory : &ansible_inventory "-i 127.0.0.1, --connection=local"
+  ansible_playbook  : &ansible_playbook  "hub_approval.yml"
+
+environment:
+  ANSIBLE_INVENTORY    : *ansible_inventory
+  ANSIBLE_PLAYBOOK     : *ansible_playbook
+
+trigger:
+  branch:
+    exclude:
+      - main
+  event: [push]
+
+steps:
+  - name: "ansible_environment_verify"
+    image: *ansible_image
+    commands:
+      - git log -1
+      - ansible --version
+      - ansible-lint --version
+
+  - name: "ansible_galaxy_requirements"
+    image: *ansible_image
+    commands:
+      - ansible-galaxy install -r requirements.yml
+
+  - name: "ansible_lint"
+    image: *ansible_image
+    commands:
+      - ansible-lint --offline
+
+  - name: "ansible_playbook_execution"
+    image: *ansible_image
+    commands:
+      - ansible-playbook -v $ANSIBLE_INVENTORY $ANSIBLE_PLAYBOOK
+
+
+---
+kind: pipeline
+type: docker
+name: run_ansible_tests_centos9
+
+global-variables:
+  ansible_image     : &ansible_image     "gitea.thezengarden.net/podman/images/ansible-dev:centos-stream9"
+  ansible_inventory : &ansible_inventory "-i 127.0.0.1, --connection=local"
+  ansible_playbook  : &ansible_playbook  "hub_approval.yml"
+
+environment:
+  ANSIBLE_INVENTORY    : *ansible_inventory
+  ANSIBLE_PLAYBOOK     : *ansible_playbook
+
+trigger:
+  branch:
+    exclude:
+      - main
+  event: [push]
+
+steps:
+  - name: "ansible_environment_verify"
+    image: *ansible_image
+    commands:
+      - git log -1
+      - ansible --version
+      - ansible-lint --version
+
+  - name: "ansible_galaxy_requirements"
+    image: *ansible_image
+    commands:
+      - ansible-galaxy install -r requirements.yml
+
+  - name: "ansible_lint"
+    image: *ansible_image
+    commands:
+      - ansible-lint --offline
+
+  - name: "ansible_playbook_execution"
+    image: *ansible_image
+    commands:
+      - ansible-playbook -v $ANSIBLE_INVENTORY $ANSIBLE_PLAYBOOK
+

.gitignore

@@ -0,0 +1,4 @@
+facts.d/
+collections/ansible_collections/ans*
+collections/ansible_collections/infra*
+.vscode

ansible.cfg

@@ -0,0 +1,26 @@
+[defaults]
+inventory               = hosts
+roles_path              = roles
+collections_path        = collections
+gathering               = smart
+gather_timeout          = 300
+fact_path               = facts.d
+fact_caching            = jsonfile
+fact_caching_connection = facts.d
+fact_caching_timeout    = 300
+retry_files_enabled     = False
+forks                   = 40
+timeout                 = 30
+host_key_checking       = False
+display_skipped_hosts   = False
+bin_ansible_callbacks   = True
+callback_whitelist      = ansible.posix.profile_tasks, ansible.posix.timer
+deprecation_warnings    = False
+command_warnings        = False
+# strategy                = free
+
+
+[ssh_connection]
+pipelining = True
+ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o PreferredAuthentications=publickey
+

collections/ansible_collections/chhammer/known_bad/README.md

@@ -0,0 +1,3 @@
+# Ansible Collection - rhc.known_bad
+
+Documentation for the collection.

collections/ansible_collections/chhammer/known_bad/galaxy.yml

@@ -0,0 +1,68 @@
+### REQUIRED
+# The namespace of the collection. This can be a company/brand/organization or product namespace under which all
+# content lives. May only contain alphanumeric lowercase characters and underscores. Namespaces cannot start with
+# underscores or numbers and cannot contain consecutive underscores
+namespace: chhammer
+
+# The name of the collection. Has the same character restrictions as 'namespace'
+name: known_bad
+
+# The version of the collection. Must be compatible with semantic versioning
+version: 1.0.2
+
+# The path to the Markdown (.md) readme file. This path is relative to the root of the collection
+readme: README.md
+
+# A list of the collection's content authors. Can be just the name or in the format 'Full Name <email> (url)
+# @nicks:irc/im.site#channel'
+authors:
+  - 'Chris Hammer <chhammer@redhat.com>'
+
+
+### OPTIONAL but strongly recommended
+# A short summary description of the collection
+description: this is known to fail ansible-lint
+
+# Either a single license or a list of licenses for content inside of a collection. Ansible Galaxy currently only
+# accepts L(SPDX,https://spdx.org/licenses/) licenses. This key is mutually exclusive with 'license_file'
+license:
+  - GPL-2.0-or-later
+
+# The path to the license file for the collection. This path is relative to the root of the collection. This key is
+# mutually exclusive with 'license'
+license_file: ''
+
+# A list of tags you want to associate with the collection for indexing/searching. A tag name has the same character
+# requirements as 'namespace' and 'name'
+tags: [linux]
+
+# Collections that this collection requires to be installed for it to be usable. The key of the dict is the
+# collection label 'namespace.name'. The value is a version range
+# L(specifiers,https://python-semanticversion.readthedocs.io/en/latest/#requirement-specification). Multiple version
+# range specifiers can be set and are separated by ','
+dependencies: {}
+
+# The URL of the originating SCM repository
+repository: http://example.com/repository
+
+# The URL to any online docs
+documentation: http://docs.example.com
+
+# The URL to the homepage of the collection/project
+homepage: http://example.com
+
+# The URL to the collection issue tracker
+issues: http://example.com/issue/tracker
+
+# A list of file glob-like patterns used to filter any files or directories that should not be included in the build
+# artifact. A pattern is matched from the relative path of the file or directory of the collection directory. This
+# uses 'fnmatch' to match the files or directories. Some directories and files like 'galaxy.yml', '*.pyc', '*.retry',
+# and '.git' are always filtered. Mutually exclusive with 'manifest'
+build_ignore: []
+
+# A dict controlling use of manifest directives used in building the collection artifact. The key 'directives' is a
+# list of MANIFEST.in style
+# L(directives,https://packaging.python.org/en/latest/guides/using-manifest-in/#manifest-in-commands). The key
+# 'omit_default_directives' is a boolean that controls whether the default directives are used. Mutually exclusive
+# with 'build_ignore'
+# manifest: null

collections/ansible_collections/chhammer/known_bad/meta/runtime.yml

@@ -0,0 +1,52 @@
+---
+# Collections must specify a minimum required ansible version to upload
+# to galaxy
+requires_ansible: '>=2.9.10'
+
+# Content that Ansible needs to load from another location or that has
+# been deprecated/removed
+# plugin_routing:
+#   action:
+#     redirected_plugin_name:
+#       redirect: ns.col.new_location
+#     deprecated_plugin_name:
+#       deprecation:
+#         removal_version: "4.0.0"
+#         warning_text: |
+#           See the porting guide on how to update your playbook to
+#           use ns.col.another_plugin instead.
+#     removed_plugin_name:
+#       tombstone:
+#         removal_version: "2.0.0"
+#         warning_text: |
+#           See the porting guide on how to update your playbook to
+#           use ns.col.another_plugin instead.
+#   become:
+#   cache:
+#   callback:
+#   cliconf:
+#   connection:
+#   doc_fragments:
+#   filter:
+#   httpapi:
+#   inventory:
+#   lookup:
+#   module_utils:
+#   modules:
+#   netconf:
+#   shell:
+#   strategy:
+#   terminal:
+#   test:
+#   vars:
+
+# Python import statements that Ansible needs to load from another location
+# import_redirection:
+#   ansible_collections.ns.col.plugins.module_utils.old_location:
+#     redirect: ansible_collections.ns.col.plugins.module_utils.new_location
+
+# Groups of actions/modules that take a common set of options
+# action_groups:
+#   group_name:
+#     - module1
+#     - module2

collections/ansible_collections/chhammer/known_bad/plugins/README.md

@@ -0,0 +1,31 @@
+# Collections Plugins Directory
+
+This directory can be used to ship various plugins inside an Ansible collection. Each plugin is placed in a folder that
+is named after the type of plugin it is in. It can also include the `module_utils` and `modules` directory that
+would contain module utils and modules respectively.
+
+Here is an example directory of the majority of plugins currently supported by Ansible:
+
+```
+└── plugins
+    ├── action
+    ├── become
+    ├── cache
+    ├── callback
+    ├── cliconf
+    ├── connection
+    ├── filter
+    ├── httpapi
+    ├── inventory
+    ├── lookup
+    ├── module_utils
+    ├── modules
+    ├── netconf
+    ├── shell
+    ├── strategy
+    ├── terminal
+    ├── test
+    └── vars
+```
+
+A full list of plugin types can be found at [Working With Plugins](https://docs.ansible.com/ansible-core/2.14/plugins/plugins.html).

collections/ansible_collections/chhammer/known_bad/roles/bad/README.md

@@ -0,0 +1,38 @@
+Role Name
+=========
+
+A brief description of the role goes here.
+
+Requirements
+------------
+
+Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
+
+Role Variables
+--------------
+
+A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
+
+Dependencies
+------------
+
+A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: servers
+      roles:
+         - { role: username.rolename, x: 42 }
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+An optional section for the role authors to include contact information, or a website (HTML is not allowed).

collections/ansible_collections/chhammer/known_bad/roles/bad/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# defaults file for bad

collections/ansible_collections/chhammer/known_bad/roles/bad/handlers/main.yml

@@ -0,0 +1,2 @@
+---
+# handlers file for bad

collections/ansible_collections/chhammer/known_bad/roles/bad/meta/main.yml

@@ -0,0 +1,57 @@
+galaxy_info:
+  author: Chris Hammer
+  description: Doesn't do anything but fail
+  company: Red Hat
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: GPL-2.0-or-later
+
+  min_ansible_version: '2.9'
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  platforms:
+    - name: Fedora
+      versions:
+        - all
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.

collections/ansible_collections/chhammer/known_bad/roles/bad/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: Simply say hello whenever we're called...but cause lint to fail too.
+  debug:
+    msg: Hello world!
+
+
+- name: This is another task for a version bump
+  debug:
+    msg: "I will also fail lint because i didnt provide the FQCN. :)"

collections/ansible_collections/chhammer/known_bad/roles/bad/tests/inventory

@@ -0,0 +1,2 @@
+localhost
+

collections/ansible_collections/chhammer/known_bad/roles/bad/tests/test.yml

@@ -0,0 +1,6 @@
+---
+- name: Test the bad role
+  hosts: localhost
+  remote_user: root
+  roles:
+    - bad

collections/ansible_collections/chhammer/known_bad/roles/bad/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for bad

collections/ansible_collections/chhammer/known_good/README.md

@@ -0,0 +1,3 @@
+# Ansible Collection - rhc.known_good
+
+Documentation for the collection.

collections/ansible_collections/chhammer/known_good/galaxy.yml

@@ -0,0 +1,68 @@
+### REQUIRED
+# The namespace of the collection. This can be a company/brand/organization or product namespace under which all
+# content lives. May only contain alphanumeric lowercase characters and underscores. Namespaces cannot start with
+# underscores or numbers and cannot contain consecutive underscores
+namespace: chhammer
+
+# The name of the collection. Has the same character restrictions as 'namespace'
+name: known_good
+
+# The version of the collection. Must be compatible with semantic versioning
+version: 1.0.2
+
+# The path to the Markdown (.md) readme file. This path is relative to the root of the collection
+readme: README.md
+
+# A list of the collection's content authors. Can be just the name or in the format 'Full Name <email> (url)
+# @nicks:irc/im.site#channel'
+authors:
+  - 'Chris Hammer <chhammer@redhat.com>'
+
+
+### OPTIONAL but strongly recommended
+# A short summary description of the collection
+description: a simple collection to verify ansible-lint
+
+# Either a single license or a list of licenses for content inside of a collection. Ansible Galaxy currently only
+# accepts L(SPDX,https://spdx.org/licenses/) licenses. This key is mutually exclusive with 'license_file'
+license:
+  - GPL-2.0-or-later
+
+# The path to the license file for the collection. This path is relative to the root of the collection. This key is
+# mutually exclusive with 'license'
+license_file: ''
+
+# A list of tags you want to associate with the collection for indexing/searching. A tag name has the same character
+# requirements as 'namespace' and 'name'
+tags: [linux]
+
+# Collections that this collection requires to be installed for it to be usable. The key of the dict is the
+# collection label 'namespace.name'. The value is a version range
+# L(specifiers,https://python-semanticversion.readthedocs.io/en/latest/#requirement-specification). Multiple version
+# range specifiers can be set and are separated by ','
+dependencies: {}
+
+# The URL of the originating SCM repository
+repository: http://example.com/repository
+
+# The URL to any online docs
+documentation: http://docs.example.com
+
+# The URL to the homepage of the collection/project
+homepage: http://example.com
+
+# The URL to the collection issue tracker
+issues: http://example.com/issue/tracker
+
+# A list of file glob-like patterns used to filter any files or directories that should not be included in the build
+# artifact. A pattern is matched from the relative path of the file or directory of the collection directory. This
+# uses 'fnmatch' to match the files or directories. Some directories and files like 'galaxy.yml', '*.pyc', '*.retry',
+# and '.git' are always filtered. Mutually exclusive with 'manifest'
+build_ignore: []
+
+# A dict controlling use of manifest directives used in building the collection artifact. The key 'directives' is a
+# list of MANIFEST.in style
+# L(directives,https://packaging.python.org/en/latest/guides/using-manifest-in/#manifest-in-commands). The key
+# 'omit_default_directives' is a boolean that controls whether the default directives are used. Mutually exclusive
+# with 'build_ignore'
+# manifest: null

collections/ansible_collections/chhammer/known_good/meta/runtime.yml

@@ -0,0 +1,52 @@
+---
+# Collections must specify a minimum required ansible version to upload
+# to galaxy
+requires_ansible: '>=2.9.10'
+
+# Content that Ansible needs to load from another location or that has
+# been deprecated/removed
+# plugin_routing:
+#   action:
+#     redirected_plugin_name:
+#       redirect: ns.col.new_location
+#     deprecated_plugin_name:
+#       deprecation:
+#         removal_version: "4.0.0"
+#         warning_text: |
+#           See the porting guide on how to update your playbook to
+#           use ns.col.another_plugin instead.
+#     removed_plugin_name:
+#       tombstone:
+#         removal_version: "2.0.0"
+#         warning_text: |
+#           See the porting guide on how to update your playbook to
+#           use ns.col.another_plugin instead.
+#   become:
+#   cache:
+#   callback:
+#   cliconf:
+#   connection:
+#   doc_fragments:
+#   filter:
+#   httpapi:
+#   inventory:
+#   lookup:
+#   module_utils:
+#   modules:
+#   netconf:
+#   shell:
+#   strategy:
+#   terminal:
+#   test:
+#   vars:
+
+# Python import statements that Ansible needs to load from another location
+# import_redirection:
+#   ansible_collections.ns.col.plugins.module_utils.old_location:
+#     redirect: ansible_collections.ns.col.plugins.module_utils.new_location
+
+# Groups of actions/modules that take a common set of options
+# action_groups:
+#   group_name:
+#     - module1
+#     - module2

collections/ansible_collections/chhammer/known_good/plugins/README.md

@@ -0,0 +1,31 @@
+# Collections Plugins Directory
+
+This directory can be used to ship various plugins inside an Ansible collection. Each plugin is placed in a folder that
+is named after the type of plugin it is in. It can also include the `module_utils` and `modules` directory that
+would contain module utils and modules respectively.
+
+Here is an example directory of the majority of plugins currently supported by Ansible:
+
+```
+└── plugins
+    ├── action
+    ├── become
+    ├── cache
+    ├── callback
+    ├── cliconf
+    ├── connection
+    ├── filter
+    ├── httpapi
+    ├── inventory
+    ├── lookup
+    ├── module_utils
+    ├── modules
+    ├── netconf
+    ├── shell
+    ├── strategy
+    ├── terminal
+    ├── test
+    └── vars
+```
+
+A full list of plugin types can be found at [Working With Plugins](https://docs.ansible.com/ansible-core/2.14/plugins/plugins.html).

collections/ansible_collections/chhammer/known_good/roles/good/README.md

@@ -0,0 +1,38 @@
+Role Name
+=========
+
+A brief description of the role goes here.
+
+Requirements
+------------
+
+Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
+
+Role Variables
+--------------
+
+A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
+
+Dependencies
+------------
+
+A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: servers
+      roles:
+         - { role: username.rolename, x: 42 }
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+An optional section for the role authors to include contact information, or a website (HTML is not allowed).

collections/ansible_collections/chhammer/known_good/roles/good/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# defaults file for good

collections/ansible_collections/chhammer/known_good/roles/good/handlers/main.yml

@@ -0,0 +1,2 @@
+---
+# handlers file for good

collections/ansible_collections/chhammer/known_good/roles/good/meta/main.yml

@@ -0,0 +1,57 @@
+galaxy_info:
+  author: Chris Hammer
+  description: Doesn't do anything
+  company: Red Hat
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: GPL-2.0-or-later
+
+  min_ansible_version: '2.9'
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  platforms:
+    - name: Fedora
+      versions:
+        - all
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.

collections/ansible_collections/chhammer/known_good/roles/good/tasks/main.yml

@@ -0,0 +1,8 @@
+---
+- name: Simply say hello whenever we're called
+  ansible.builtin.debug:
+    msg: Hello world!
+
+- name: This is another good task for version bump
+  ansible.builtin.debug:
+    msg: "I like to play with things."

collections/ansible_collections/chhammer/known_good/roles/good/tests/inventory

@@ -0,0 +1,2 @@
+localhost
+

collections/ansible_collections/chhammer/known_good/roles/good/tests/test.yml

@@ -0,0 +1,6 @@
+---
+- name: Test the good role
+  hosts: localhost
+  remote_user: root
+  roles:
+    - good

collections/ansible_collections/chhammer/known_good/roles/good/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for good

hosts

@@ -0,0 +1 @@
+localhost  ansible_connection=local

hub_approval.yml

@@ -0,0 +1,70 @@
+- name: Test collection upload and approval
+  hosts: localhost
+  connection: local
+  become: false
+  gather_facts: false
+
+
+  vars:
+    __pah_host      : 10.10.42.132
+    __pah_token     : e992a78e94cfe9ba8c21b65cb62a20e6dee43104
+    __pah_namespace : chhammer
+    __pause_seconds : 10
+
+
+  tasks:
+    - name: Upload known_good collection into Private Automation Hub
+      # Using `ah_collection` for uploading collections will default
+      # to auto-approving the collection. You must set `auto_approve: False`
+      # in order to hold collection for approval review
+      infra.ah_configuration.ah_collection:
+        validate_certs : false
+        ah_host        : "{{ __pah_host }}"
+        ah_token       : "{{ __pah_token }}"
+        path           : "files/chhammer-known_good-1.0.2.tar.gz"
+        namespace      : "{{ __pah_namespace }}"
+        name           : known_good
+
+    # Example with `auto_approve` set to `false`:
+    #############################################
+    # - name: Upload known_bad collection into Private Automation Hub
+    #   infra.ah_configuration.ah_collection:
+    #     validate_certs : false
+    #     ah_host        : "{{ __pah_host }}"
+    #     ah_token       : "{{ __pah_token }}"
+    #     path           : "files/chhammer-known_bad-1.0.2.tar.gz"
+    #     namespace      : "{{ __pah_namespace }}"
+    #     name           : known_bad
+    #     auto_approve   : false
+
+
+    # Using `ah_collection_upload` for uploading collections will not
+    # auto-approve collections, likewise, there are no parameters for managing
+    # approval state via this module.
+    #
+    # Also, this does not seem to be idempotent like `ah_collection` module,
+    # hence the ignore errors. If the collection is already present or awaiting
+    # approval, this will return an error.
+    - name: Upload known_bad collection into Private Automation Hub
+      infra.ah_configuration.ah_collection_upload:
+        validate_certs : false
+        ah_host        : "{{ __pah_host }}"
+        ah_token       : "{{ __pah_token }}"
+        path           : "files/chhammer-known_bad-1.0.2.tar.gz"
+      ignore_errors: true
+
+
+    - name: After a delay approve the known_bad collection
+      block:
+        - name: Create a delay to verify uploaded collection is waiting for approval
+          ansible.builtin.pause:
+            seconds: "{{ __pause_seconds }}"
+
+        - name: Approve the known_bad collection
+          infra.ah_configuration.ah_approval:
+            validate_certs : false
+            ah_host        : "{{ __pah_host }}"
+            ah_token       : "{{ __pah_token }}"
+            namespace      : "{{ __pah_namespace }}"
+            name           : known_bad
+            version        : 1.0.2

requirements.yml

@@ -0,0 +1,3 @@
+collections:
+  - ansible.posix
+  - infra.ah_configuration