| Age | Commit message (Collapse) | Author |
|---|
|
It's a CASL-specific helper, not necessary for the provisioning
playbooks.
|
|
|
|
|
|
Provision tasks use facts like ansible_hostname and few others.
W/o gathering facts, those expire, and the provision playbook cannot
be reapplied in order to update the existing heat stack.
Refresh the facts cache by specifying gather_facts: true.
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
TODO use with
when: ansible_distribution == 'CentOS'
Also update docs for origin
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
Add a openstack_flat_secgroup, defaults to False.
When set, merges sec rules for master, node, etcd, infra nodes into a
single group. Less secure, but might help to mitigate quota limitations.
Update docs. Use timeout 30s to mitigate the error:
Timeout (12s) waiting for privilege escalation prompt.
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
When `node_ingress_cidr` to limit the IP range for the DNS server, this
can prevent the actual openshift nodes from accessing it as well.
This commit makes the access from the `openstack_subnet_prefix` always
pass through and uses `node_ingress_cidr` for additional
access control.
|
|
|
|
|
|
We should probably not pollute the role namespace with a name as common
as "common". Moving the pre_task.yml to provisioners/openstack instead.
|
|
|
|
It's under the GPLv3+ while the rest of the repo is Apache 2.
|
|
|
|
|
|
|
|
They'll live in playbooks/provisioning/openstack from now on.
|
|
This imports the openstack provisioning bits of:
https://github.com/redhat-cop/casl-ansible
taking care to preserve the original history of those files.
|
|
* Updated to use nsupdate for DNS records
* Updated formatting of dict
* Updating descriptive text
* Support for external DNS config
* Upgrading jinja2 to work correctly with latest templates
* Latest update for nsupdate
* Updated to use nsupdate for DNS records
* Updated formatting of dict
* Updating descriptive text
* Support for external DNS config
* Latest update for nsupdate
* Updated to support external public/private DNS server(s)
* Updated DNS server handling
* Updated DNS server handling
* Updated DNS server handling
* Eliminated the from the sample inventories
* Updated sample inventory to point to 2 separate DNS servers for private/public
* Playbook clean-up
* Adding 'python-dns'
* splitting subscription manager calls to allow for a clean pre-install playbook
|
|
Initial cns support
|
|
|
|
|
|
|
|
|
|
* Download openshift ansible installer from github
* Verify that all needed packages are present
|
|
|
|
* Let systemd handle retries on restart of service and avoid abort of script - fixes pv creation failure with nil for cloud provider
* Add retry logic
* Fix repo
* Use shell as systemd module does not support retry
* Fix indents
* Prep for PR
* Switch back to dev
* Try rcook method to pregenerate the azure.conf based on ansible variables
* try the right bastion script
* Get rid of excess file
* Add back marker for testing
* Fix the completion touch
* Setup for pr
|
|
* change default infra_node to 3 and completely remove vsphere_guest from clean module
* rerun inventory before clean
|
|
clean module
|
|
* Metrics deployment needs python2-passlib package
* Enable multizone deployment in GCP ref arch
* Enable cockpit in ocp deployment
|
|
* Suggest installing java-1.8.0-openjdk-headless
java-1.8.0-openjdk-headless is required when installing metrics. Failure to do so results in a confusing message:
fatal: [osacpr00-master-p8tg]: FAILED! => {"changed": false, "failed": true, "msg": "'keytool' is unavailable. Please install java-1.8.0-openjdk-headless on the control node"}
The first few times I read this I misunderstood that this was a local check for the machine that was trying to bring up the cluster. The message admittedly says "control node" right there on the tin but I guess I didn't make the connection. Regardless, seems better to add it to the list of required packages.
* Create README.md
|
|
|
|
|
|
fatal: [localhost]: FAILED! => {"changed": false, "failed": true, "msg": "{u'domain': u'global', u'message': u\"Invalid value for field 'resource.name': 'CentOS-7-x86-64-GenericCloud-1704'. Must be a match of regex '(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?)'\", u'reason': u'invalid'}"}
|
|
Ini file update
|
|
|
|
|
|
|
|
it unecessary (#47)
|
|
correct repository
|
|
|
|
|
|
|
|
* allow for metrics size to be chosen
* set the correct value and remove unneeded
|
|
|
|
* more vars for static inventory
* Update inventory
|
|
* Save custom GCP iptables rules
* Fail after cleanup, when we couldn't create the gold image
|
|
rollback of swap disable
|
|
|
|
* Cosmetics in gcloud.sh
* Configure ssh for the temp instance when creating gold image
* Updated README
|
