| Age | Commit message (Collapse) | Author | 
|---|
|  | Currently, if undefined, openshift_hosted_router_selector and
openshift_hosted_registry_selector as set to the value
of openshift_hosted_infra_selector.
The set_fact logic overrides variable migration inside of
oo_filters meant to utilize the deprecated variables
openshift_router_selector and openshift_registiry_selector,
respectively.
This commit corrects the set_fact logic and removes the
unused migration from oo_filters.
Fixes: https://github.com/openshift/openshift-ansible/issues/5615 | 
|  | Automatic merge from submit-queue.
CRI-O, Docker: set the tag to the OpenShift release on RHEL
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1493376 | 
|  | Automatic merge from submit-queue.
Use etcd_ip when communicating with the cluster as a peer in etcd scaleup.
We can't communicate with the hostname here since etcd will be [configured to listen to its IP address](https://github.com/openshift/openshift-ansible/blob/ead22bb1c3b6d6366502b14b97b7aae5605f8a58/roles/etcd/defaults/main.yaml#L69).
Fixes https://github.com/openshift/openshift-ansible/issues/5620 | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Automatic merge from submit-queue.
Restore registires to /etc/sysconfig/docker
Previously, a commit was added to migrate registires
from /etc/sysconfig/docker to /etc/containers/registries.conf
We are not currently enforcing a minimum version of docker
to consume from this new file, thus some installations
are not utilizing the correct repositories.
This commit duplicates the registires in both locations
to ensure additional/blocked/insecure registries are
honored. | 
|  | Automatic merge from submit-queue.
Update to the openshift_aws style scheme for variables
Corresponding changes will be made to the other repositories after
merge.
@kwoodson
Manually tested this with openshift/origin-gce#51 | 
|  | Automatic merge from submit-queue.
Fix Prometheus byo entry point
Adds the std_include.yml playbook to the byo entrypoint and moves the conditional install to the openshift_hosted.yml portion of an install. | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Automatic merge from submit-queue.
openshift_checks: Fix incorrect list cast
``docker_image_availability`` casted ``openshift_docker_additional_registries``
to a list using the ``list()`` function. If a string was returned (IE: only
a single registry added) the result would be the string split up by
component characters. This change forces a string result from ``get_var`` to
be placed inside a list. If the result is anything BUT a string the
original ``list()`` function is called on the result.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497274
Resolves #5610 | 
|  | Automatic merge from submit-queue.
lib/base: Allow for empty option value
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1483923
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com> | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Automatic merge from submit-queue.
Reverting using uninstall variables for logging and metrics
Reverting using `uninstall` variables for logging and metrics.
Addresses bug and comments in https://bugzilla.redhat.com/show_bug.cgi?id=1496352 | 
|  | Automatic merge from submit-queue.
Fix Heketi Deployment without external registry access
#5550
Updated task to use the --image flag.
The Image will now be set to:
{{ glusterfs_heketi_image}}:{{ glusterfs_heketi_version }}
This means that the user can specify an internal registry if needed.
Created ticket with heketi:
heketi/heketi#870 | 
|  |  | 
|  | Previously, a commit was added to migrate registires
from /etc/sysconfig/docker to /etc/containers/registries.conf
We are not currently enforcing a minimum version of docker
to consume from this new file, thus some installations
are not utilizing the correct repositories.
This commit duplicates the registires in both locations
to ensure additional/blocked/insecure registries are
honored. | 
|  | Fix mispelling in error message yammlint -> yamllint | 
|  | Automatic merge from submit-queue.
Break out certificate playbooks
Break out certificate role dependencies and move them into their own playbooks. | 
|  | docker_image_availability casted openshift_docker_additional_registries
to a list using the list() function. If a string was returned (IE: only
a single registry added) the result would be the string split up by
component characters. This change forces a string result from get_var to
be placed inside a list. If the result is anything BUT a string the
original list() function is called on the result.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497274
Signed-off-by: Steve Milner <smilner@redhat.com> | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Signed-off-by: Simo Sorce <simo@redhat.com> | 
|  | Automatic merge from submit-queue.
GlusterFS: make ServiceAccounts privileged when either glusterfs or heketi is native
Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1486187
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com> | 
|  | Fix typo in openshift_default_storage_class/README | 
|  |  | 
|  | Fix some provisioning variables | 
|  |  | 
|  |  | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Corresponding changes will be made to the other repositories after
merge. | 
|  | Automatic merge from submit-queue.
openshift_node: Set DOCKER_SERVICE for system container
The node system container was being installed with the ```DOCKER_SERVICE```
holding to it's ```manifest.json``` default of docker.service. This chage
adds the ```DOCKER_SERVICE``` parameter on node system container install
so that it uses the same value from the installer stored in
```openshift.docker.service_name```.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707 | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | Automatic merge from submit-queue.
Bug 1490186: Router pod not running after router certificates redeployment
This carries https://github.com/openshift/openshift-ansible/pull/5417. More of the router cert redeploy logic could be moved into the `openshift_hosted` role with a flag. I may pull those over.
https://bugzilla.redhat.com/show_bug.cgi?id=1490186 | 
|  | block 3.6->3.7 upgrade if storage backend is not set to etcd3 | 
|  | Automatic merge from submit-queue.
Changes necessary to support AMI building
Currently, AMI building does not work.
These changes implement the necessary steps to build
an AMI for usage as a 'golden node image'. | 
|  | Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug | 
|  | is native
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com> | 
|  | Automatic merge from submit-queue.
Fix registry auth variable
There is currently a bug in registry auth
credential creation logic for openshift_node
and openshift_node_upgrade
This commit fixes the logic. | 
|  | Automatic merge from submit-queue.
fix whitespace for centos repos
This addresses an issue where repo files were missing a newline between the enabled and gpgkey entries.
Current repo file content:
```
[centos-openshift-origin]
name=CentOS OpenShift Origin
baseurl=http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS
[centos-openshift-origin-testing]
name=CentOS OpenShift Origin Testing
baseurl=http://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=0gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-debuginfo]
name=CentOS OpenShift Origin DebugInfo
baseurl=http://debuginfo.centos.org/centos/7/paas/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-source]
name=CentOS OpenShift Origin Source
baseurl=http://vault.centos.org/centos/7/paas/Source/openshift-origin/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
```
Expected content:
```
[centos-openshift-origin]
name=CentOS OpenShift Origin
baseurl=http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS
[centos-openshift-origin-testing]
name=CentOS OpenShift Origin Testing
baseurl=http://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=0
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-debuginfo]
name=CentOS OpenShift Origin DebugInfo
baseurl=http://debuginfo.centos.org/centos/7/paas/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-source]
name=CentOS OpenShift Origin Source
baseurl=http://vault.centos.org/centos/7/paas/Source/openshift-origin/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
``` | 
|  | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com> | 
|  | Registering the broker for TSB | 
|  | Automatic merge from submit-queue.
openshift_facts: coerce docker_use_system_container to bool
Use ``safe_get_bool()`` when reading ``docker_use_system_container`` to ensure
that ansible accepted inputs are turned into real boolean results.
    
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496725
3.6 Backport: https://github.com/openshift/openshift-ansible/pull/5578 | 
|  |  | 
|  |  | 
|  | Setting the MASTER_SERVICE to openshift.common.service_type.
Signed-off-by: Steve Milner <smilner@redhat.com> | 
|  | The node system container was being installed with the DOCKER_SERVICE
holding to it's manifest.json default of docker.service. This change
adds the DOCKER_SERVICE parameter on node system container install
so that it uses the same value from the installer stored in
openshift.docker.service_name.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707
Signed-off-by: Steve Milner <smilner@redhat.com> | 
|  | Quick formatting updates to the logging README | 
|  | There is currently a bug in registry auth
credential creation logic for openshift_node
and openshift_node_upgrade
This commit fixes the logic. | 
|  | ingvagabund/move-health-checks-and-ctrl-plane-ver-before-excluders
move health-checks and control-plane-verification before excluders | 
|  | auto-generated wildcard certificate or custom openshift_hosted_router_certificate. | 
|  |  | 
|  |  |