summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Beautiful -v output from ansiblejpic2016-07-271-0/+60
| | | | | | | | | | | When supporting openshift-ansible, users share pastes like:: TASK: [openshift_serviceaccounts | Grant the user access to the privileged scc] *** changed: [li1491-86.members.linode.com] => (item=['router', {'cmd': ['oc', 'get', 'scc', 'privileged', '-o', 'yaml'], 'end': '2016-05-05 13:31:50.216857', 'stderr': u'', 'stdout': 'allowHostDirVolumePlugin: true\nallowHostIPC: true\nallowHostNetwork: true\nallowHostPID: true\nallowHostPorts: true\nallowPrivilegedContainer: true\nallowedCapabilities: null\napiVersion: v1\ndefaultAddCapabilities: null\nfsGroup:\n type: RunAsAny\ngroups:\n- system:cluster-admins\n- system:nodes\nkind: SecurityContextConstraints\nmetadata:\n annotations:\n kubernetes.io/description: \'privileged allows access to all privileged and host\n features and the ability to run as any user, any group, any fsGroup, and with\n any SELinux context. WARNING: this is the most relaxed SCC and should be used\n only for cluster administration. Grant with caution.\'\n creationTimestamp: 2016-05-05T13:30:06Z\n name: privileged\n resourceVersion: "371"\n selfLink: /api/v1/securitycontextconstraints/privileged\n uid: 7ae22005-12c5-11e6-9bc5-06174e73e52a\npriority: null\nreadOnlyRootFilesystem: false\nrequiredDropCapabilities: null\nrunAsUser:\n type: RunAsAny\nseLinuxContext:\n type: RunAsAny\nsupplementalGroups:\n type: RunAsAny\nusers:\n- system:serviceaccount:openshift-infra:build-controller\n- system:serviceaccount:management-infra:management-admin\n- system:serviceaccount:management-infra:inspector-admin\nvolumes:\n- \'*\'', 'item': 'privileged', 'changed': False, 'rc': 0, 'failed': False, 'warnings': [], 'delta': '0:00:00.264340', 'invocation': {'module_name': u'command', 'module_complex_args': {}, 'module_args': u'oc get scc privileged -o yaml'}, 'stdout_lines': ['allowHostDirVolumePlugin: true', 'allowHostIPC: true', 'allowHostNetwork: true', 'allowHostPID: true', 'allowHostPorts: true', 'allowPrivilegedContainer: true', 'allowedCapabilities: null', 'apiVersion: v1', 'defaultAddCapabilities: null', 'fsGroup:', ' type: RunAsAny', 'groups:', '- system:cluster-admins', '- system:nodes', 'kind: SecurityContextConstraints', 'metadata:', ' annotations:', " kubernetes.io/description: 'privileged allows access to all privileged and host", ' features and the ability to run as any user, any group, any fsGroup, and with', ' any SELinux context. WARNING: this is the most relaxed SCC and should be used', " only for cluster administration. Grant with caution.'", ' creationTimestamp: 2016-05-05T13:30:06Z', ' name: privileged', ' resourceVersion: "371"', ' selfLink: /api/v1/securitycontextconstraints/privileged', ' uid: 7ae22005-12c5-11e6-9bc5-06174e73e52a', 'priority: null', 'readOnlyRootFilesystem: false', 'requiredDropCapabilities: null', 'runAsUser:', ' type: RunAsAny', 'seLinuxContext:', ' type: RunAsAny', 'supplementalGroups:', ' type: RunAsAny', 'users:', '- system:serviceaccount:openshift-infra:build-controller', '- system:serviceaccount:management-infra:management-admin', '- system:serviceaccount:management-infra:inspector-admin', 'volumes:', "- '*'"], 'failed_when_result': False, 'start': '2016-05-05 13:31:49.952517'}]) changed: [li1491-86.members.linode.com] => (item=['registry', {'cmd': ['oc', 'get', 'scc', 'privileged', '-o', 'yaml'], 'end': '2016-05-05 13:31:50.216857', 'stderr': u'', 'stdout': 'allowHostDirVolumePlugin: true\nallowHostIPC: true\nallowHostNetwork: true\nallowHostPID: true\nallowHostPorts: true\nallowPrivilegedContainer: true\nallowedCapabilities: null\napiVersion: v1\ndefaultAddCapabilities: null\nfsGroup:\n type: RunAsAny\ngroups:\n- system:cluster-admins\n- system:nodes\nkind: SecurityContextConstraints\nmetadata:\n annotations:\n kubernetes.io/description: \'privileged allows access to all privileged and host\n features and the ability to run as any user, any group, any fsGroup, and with\n any SELinux context. WARNING: this is the most relaxed SCC and should be used\n only for cluster administration. Grant with caution.\'\n creationTimestamp: 2016-05-05T13:30:06Z\n name: privileged\n resourceVersion: "371"\n selfLink: /api/v1/securitycontextconstraints/privileged\n uid: 7ae22005-12c5-11e6-9bc5-06174e73e52a\npriority: null\nreadOnlyRootFilesystem: false\nrequiredDropCapabilities: null\nrunAsUser:\n type: RunAsAny\nseLinuxContext:\n type: RunAsAny\nsupplementalGroups:\n type: RunAsAny\nusers:\n- system:serviceaccount:openshift-infra:build-controller\n- system:serviceaccount:management-infra:management-admin\n- system:serviceaccount:management-infra:inspector-admin\nvolumes:\n- \'*\'', 'item': 'privileged', 'changed': False, 'rc': 0, 'failed': False, 'warnings': [], 'delta': '0:00:00.264340', 'invocation': {'module_name': u'command', 'module_complex_args': {}, 'module_args': u'oc get scc privileged -o yaml'}, 'stdout_lines': ['allowHostDirVolumePlugin: true', 'allowHostIPC: true', 'allowHostNetwork: true', 'allowHostPID: true', 'allowHostPorts: true', 'allowPrivilegedContainer: true', 'allowedCapabilities: null', 'apiVersion: v1', 'defaultAddCapabilities: null', 'fsGroup:', ' type: RunAsAny', 'groups:', '- system:cluster-admins', '- system:nodes', 'kind: SecurityContextConstraints', 'metadata:', ' annotations:', " kubernetes.io/description: 'privileged allows access to all privileged and host", ' features and the ability to run as any user, any group, any fsGroup, and with', ' any SELinux context. WARNING: this is the most relaxed SCC and should be used', " only for cluster administration. Grant with caution.'", ' creationTimestamp: 2016-05-05T13:30:06Z', ' name: privileged', ' resourceVersion: "371"', ' selfLink: /api/v1/securitycontextconstraints/privileged', ' uid: 7ae22005-12c5-11e6-9bc5-06174e73e52a', 'priority: null', 'readOnlyRootFilesystem: false', 'requiredDropCapabilities: null', 'runAsUser:', ' type: RunAsAny', 'seLinuxContext:', ' type: RunAsAny', 'supplementalGroups:', ' type: RunAsAny', 'users:', '- system:serviceaccount:openshift-infra:build-controller', '- system:serviceaccount:management-infra:management-admin', '- system:serviceaccount:management-infra:inspector-admin', 'volumes:', "- '*'"], 'failed_when_result': False, 'start': '2016-05-05 13:31:49.952517'}]) With this patch, the json is nicely indented and std{err,out} are properly printed by default with -v.
* Merge pull request #1855 from abutcher/v2-vars-filesJason DeTiberus2016-05-056-10/+79
|\ | | | | Remove vars_files for byo, scaleup and restart playbooks.
| * Remove vars_files on play includes for byo, scaleup and restart playbooks.Andrew Butcher2016-05-056-10/+79
|/
* Merge pull request #1853 from abutcher/v2-hostvarsJason DeTiberus2016-05-054-7/+46
|\ | | | | Replace hostvars with vars for openshift env facts when ansible >= v2.
| * Add oo_merge_hostvars filter for merging host & play variables.Andrew Butcher2016-05-044-13/+46
| |
| * Replace hostvars with vars for openshift env facts when ansible >= v2.Andrew Butcher2016-05-033-3/+9
| |
* | Merge pull request #1688 from jprovaznik/dnsJason DeTiberus2016-05-056-4/+63
|\ \ | |/ |/| Allow containerized deployment of dns role
| * Allow containerized deployment of dns roleJan Provaznik2016-04-266-4/+63
| | | | | | | | | | | | | | | | If containerized, docker image for bind service is built during ansible run. The default named systemd unit file triggers named-checkconf on named service start so it's not neccessary to include this validation when copying file templates (equivalent named-checkconf is included in the containerized named unit file too).
* | Merge pull request #1856 from glnds/masterJason DeTiberus2016-05-031-1/+1
|\ \ | | | | | | Added extra install dependency on OSX
| * | Added extra install dependency on OSXGert Leenders2016-05-031-1/+1
|/ /
* | Merge pull request #1854 from abutcher/v2-iptables-overridesJason DeTiberus2016-05-028-12/+35
|\ \ | | | | | | V2 iptables overrides
| * | Check and unmask iptables/firewalld.Andrew Butcher2016-05-022-0/+30
| | |
| * | Default os_firewall_use_firewalld to false in os_firewall and remove overrides.Andrew Butcher2016-05-026-12/+5
| | |
* | | Merge pull request #1852 from sdodson/dns-improvementsJason DeTiberus2016-05-022-2/+1
|\ \ \ | | | | | | | | Fix openshift_use_dnsmasq=False on 1.2/3.2 installs
| * | | listen on all interfacesScott Dodson2016-05-021-1/+0
| | | |
| * | | Fix configuration of dns_ipScott Dodson2016-05-021-1/+1
| | | |
* | | | Merge pull request #1775 from detiber/kill_deprecated_rolesJason DeTiberus2016-05-020-0/+0
|\ \ \ \ | |_|/ / |/| | | Remove deprecated online playbooks/roles
| * | | Remove deprecated online playbooks/rolesJason DeTiberus2016-04-1925-498/+0
| | | |
* | | | Merge pull request #1850 from cben/patch-1Jason DeTiberus2016-05-021-1/+5
|\ \ \ \ | |_|/ / |/| | | Fix tables in roles/openshift_metrics/README.md
| * | | Fix markdown in roles/openshift_metrics/README.mdBeni Cherniavsky-Paskin2016-05-021-1/+5
| | | | | | | | | | | | | | | | (tables, literal example)
* | | | Merge pull request #1848 from detiber/statAndrew Butcher2016-05-021-9/+7
|\ \ \ \ | |/ / / |/| | | use stat module instead of shell module and ls to check for rpm-ostree
| * | | use stat module instead of shell module and ls to check for rpm-ostreeJason DeTiberus2016-04-301-9/+7
|/ / /
* | | Merge pull request #1847 from sjenning/fix-openstack-templateJason DeTiberus2016-04-291-4/+3
|\ \ \ | | | | | | | | fix openstack template
| * | | fix openstack templateSeth Jennings2016-04-291-4/+3
|/ / /
* | | Merge pull request #1839 from abutcher/v2-deprecationsJason DeTiberus2016-04-2916-61/+56
|\ \ \ | | | | | | | | Cleanup various deprecation warnings.
| * | | Remove duplicate oauth_template fact.Andrew Butcher2016-04-291-1/+0
| | | |
| * | | Cleanup various deprecation warnings.Andrew Butcher2016-04-2915-60/+56
| | | |
* | | | Merge pull request #1845 from sdodson/nm-msgJason DeTiberus2016-04-291-1/+1
|\ \ \ \ | | | | | | | | | | Make NetworkManager failure friendlier
| * | | | Make NetworkManager failure friendlierScott Dodson2016-04-291-1/+1
| |/ / /
* | | | Merge pull request #1843 from detiber/remove_deprecated_rolesJason DeTiberus2016-04-2947-706/+59
|\ \ \ \ | |/ / / |/| | | Remove deprecated roles
| * | | Remove deprecated online playbooks/rolesJason DeTiberus2016-04-2920-379/+0
| | | |
| * | | fix up variable references remove "online" support from bin/clusterJason DeTiberus2016-04-2920-206/+59
| | | |
| * | | Remove Ops specific ansible-tower aws playbooksJason DeTiberus2016-04-297-121/+0
| | | |
* | | | Merge pull request #1841 from andrewklau/insecure-registryJason DeTiberus2016-04-291-2/+2
|\ \ \ \ | | | | | | | | | | Add openshift_docker_hosted_registry_insecure option
| * | | | Add openshift_docker_hosted_registry_insecure optionAndrew Lau2016-04-291-2/+2
| |/ / /
* | | | Merge pull request #1844 from openshift/README-updatesJason DeTiberus2016-04-291-8/+5
|\ \ \ \ | | | | | | | | | | README Updates
| * | | | README UpdatesJason DeTiberus2016-04-291-8/+5
|/ / / /
* | | | Merge pull request #1842 from talset/inventory_certJason DeTiberus2016-04-293-3/+3
|\ \ \ \ | |/ / / |/| | | Fix inventory syntax
| * | | Fix inventory syntaxetalset2016-04-293-3/+3
|/ / / | | | | | | | | | | | | * ERROR: /etc/ansible/hosts:...: variables assigned to group must be in key=value form * change key: value by key=value
* | | Merge pull request #1840 from detiber/logging_fixJason DeTiberus2016-04-291-16/+24
|\ \ \ | | | | | | | | Fix templating issue with logging role
| * | | additional fixesJason DeTiberus2016-04-281-15/+22
| | | |
| * | | Fix templating issue with logging roleJason DeTiberus2016-04-281-1/+2
| | | |
* | | | Merge pull request #1835 from sdodson/bz1331346Jason DeTiberus2016-04-281-4/+7
|\ \ \ \ | |/ / / |/| | | BuildDefaults are a kube admission controller not an openshift admission
| * | | BuildDefaults are a kube admission controller not an openshift admissionScott Dodson2016-04-281-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | controller Also, improve commenting
* | | | Merge pull request #1836 from smunilla/BZ1331365Jason DeTiberus2016-04-282-9/+16
|\ \ \ \ | | | | | | | | | | a-o-i: More friendly proxy questions
| * | | | a-o-i: More friendly proxy questionsSamuel Munilla2016-04-282-9/+16
|/ / / / | | | | | | | | | | | | | | | | Some UI improvements to help make it more clear to the user what information we are looking for.
* | | | Merge pull request #1831 from sdodson/update-repos-on-upgradeJason DeTiberus2016-04-281-1/+2
|\ \ \ \ | | | | | | | | | | Update repos per inventory before upgrading
| * | | | Update repos per inventory before upgradingScott Dodson2016-04-271-1/+2
| | | | |
* | | | | Merge pull request #1834 from jianlinliu/masterJason DeTiberus2016-04-283-3/+3
|\ \ \ \ \ | |_|/ / / |/| | | | update tenand_id typo in example file
| * | | | update tenand_id typo in example fileJianlin Liu2016-04-281-1/+1
| | | | |
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-05 00:56:45 +0000