I just thought about it but I thought we could have a tripleo command like :

$ openstack tripleo container deploy --name keystone --host overcloud-controller1

$ openstack tripleo container deploy --name keystone --host overcloud-controller1 --dry-run

It would use the new Ansible-runner to execute something like: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-container-manage.html#example-with-one-container

Dry-run would basically run the same thing with Ansible in check mode.

In overall, we would still have a CLI (in tripleoclient instead of Paunch); and most of the container logic resides in podman_container which aims to be shared outside of TripleO which has been the main goal driving this effort.

What do you think?