| Age | Commit message (Collapse) | Author |
|
Automatic merge from submit-queue.
openshift_checks: Fix incorrect list cast
``docker_image_availability`` casted ``openshift_docker_additional_registries``
to a list using the ``list()`` function. If a string was returned (IE: only
a single registry added) the result would be the string split up by
component characters. This change forces a string result from ``get_var`` to
be placed inside a list. If the result is anything BUT a string the
original ``list()`` function is called on the result.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497274
Resolves #5610
|
|
Automatic merge from submit-queue.
lib/base: Allow for empty option value
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1483923
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Currently, the node service is started before
aws credentials (if needed) are configured.
This commit ensures the aws credentials are placed
before the node service is started.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497150
|
|
Automatic merge from submit-queue.
Reverting using uninstall variables for logging and metrics
Reverting using `uninstall` variables for logging and metrics.
Addresses bug and comments in https://bugzilla.redhat.com/show_bug.cgi?id=1496352
|
|
Currently, openshift_version installs RPM packages
on all nodes and masters to aid in determining and
setting the proper version across the cluster.
This commit limits the host groups to only
masters during upgrade_control_plane plays.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
|
|
Automatic merge from submit-queue.
Fix Heketi Deployment without external registry access
#5550
Updated task to use the --image flag.
The Image will now be set to:
{{ glusterfs_heketi_image}}:{{ glusterfs_heketi_version }}
This means that the user can specify an internal registry if needed.
Created ticket with heketi:
heketi/heketi#870
|
|
* Adding 'openstack-stack-delete' role to allow for easy de-provisioning
* Updated per etsauer's comments
|
|
|
|
bring ansible service broker up to date with bearer token changes
etcd -> 0.0.0.0
add auth information to broker resource in catalog
add sandbox role to config
simplify defaults
add labels to oc_route
use new oc_route label field
Fix parameter ordering
add port back
Fix secret syntax
|
|
Previously, a commit was added to migrate registires
from /etc/sysconfig/docker to /etc/containers/registries.conf
We are not currently enforcing a minimum version of docker
to consume from this new file, thus some installations
are not utilizing the correct repositories.
This commit duplicates the registires in both locations
to ensure additional/blocked/insecure registries are
honored.
|
|
Fix mispelling in error message yammlint -> yamllint
|
|
Automatic merge from submit-queue.
Break out certificate playbooks
Break out certificate role dependencies and move them into their own playbooks.
|
|
|
|
docker_image_availability casted openshift_docker_additional_registries
to a list using the list() function. If a string was returned (IE: only
a single registry added) the result would be the string split up by
component characters. This change forces a string result from get_var to
be placed inside a list. If the result is anything BUT a string the
original list() function is called on the result.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497274
Signed-off-by: Steve Milner <smilner@redhat.com>
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Signed-off-by: Simo Sorce <simo@redhat.com>
|
|
Automatic merge from submit-queue.
GlusterFS: make ServiceAccounts privileged when either glusterfs or heketi is native
Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1486187
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
|
|
|
|
|
|
|
|
|
|
Reorganizing and making some of the plays more
reusable.
|
|
Fix typo in openshift_default_storage_class/README
|
|
|
|
Fix some provisioning variables
|
|
|
|
|
|
PR https://github.com/openshift/openshift-ansible/pull/3509 has removed any
usage of `openshift_logging_es_cpu_limit`.
Currently, the `openshift_logging_elasticsearch_cpu_limit` is either default
'1000m' or derived from `openshift_logging_es_ops_cpu_limit` but if user sets
the `openshift_logging_es_cpu_limit` in the inventory as documented, its value
is ignored.
This PR fixes the issue by trying to set
openshift_logging_elasticsearch_cpu_limit=openshift_logging_es_cpu_limit
And including the role as -ops overrides this setting.
|
|
* version bump for upgrade plays
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Corresponding changes will be made to the other repositories after
merge.
|
|
Automatic merge from submit-queue.
openshift_node: Set DOCKER_SERVICE for system container
The node system container was being installed with the ```DOCKER_SERVICE```
holding to it's ```manifest.json``` default of docker.service. This chage
adds the ```DOCKER_SERVICE``` parameter on node system container install
so that it uses the same value from the installer stored in
```openshift.docker.service_name```.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Automatic merge from submit-queue.
Bug 1490186: Router pod not running after router certificates redeployment
This carries https://github.com/openshift/openshift-ansible/pull/5417. More of the router cert redeploy logic could be moved into the `openshift_hosted` role with a flag. I may pull those over.
https://bugzilla.redhat.com/show_bug.cgi?id=1490186
|
|
block 3.6->3.7 upgrade if storage backend is not set to etcd3
|
|
Automatic merge from submit-queue.
Changes necessary to support AMI building
Currently, AMI building does not work.
These changes implement the necessary steps to build
an AMI for usage as a 'golden node image'.
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
is native
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
|
|
Automatic merge from submit-queue.
Fix registry auth variable
There is currently a bug in registry auth
credential creation logic for openshift_node
and openshift_node_upgrade
This commit fixes the logic.
|
|
Automatic merge from submit-queue.
fix whitespace for centos repos
This addresses an issue where repo files were missing a newline between the enabled and gpgkey entries.
Current repo file content:
```
[centos-openshift-origin]
name=CentOS OpenShift Origin
baseurl=http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS
[centos-openshift-origin-testing]
name=CentOS OpenShift Origin Testing
baseurl=http://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=0gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-debuginfo]
name=CentOS OpenShift Origin DebugInfo
baseurl=http://debuginfo.centos.org/centos/7/paas/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-source]
name=CentOS OpenShift Origin Source
baseurl=http://vault.centos.org/centos/7/paas/Source/openshift-origin/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
```
Expected content:
```
[centos-openshift-origin]
name=CentOS OpenShift Origin
baseurl=http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS
[centos-openshift-origin-testing]
name=CentOS OpenShift Origin Testing
baseurl=http://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin/
enabled=0
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-debuginfo]
name=CentOS OpenShift Origin DebugInfo
baseurl=http://debuginfo.centos.org/centos/7/paas/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
[centos-openshift-origin-source]
name=CentOS OpenShift Origin Source
baseurl=http://vault.centos.org/centos/7/paas/Source/openshift-origin/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/openshift-ansible-CentOS-SIG-PaaS
```
|
|
Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
|
|
Registering the broker for TSB
|
|
Some changes necessary to support provisioning
and scale group logic
|
|
|
|
Automatic merge from submit-queue.
openshift_facts: coerce docker_use_system_container to bool
Use ``safe_get_bool()`` when reading ``docker_use_system_container`` to ensure
that ansible accepted inputs are turned into real boolean results.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496725
3.6 Backport: https://github.com/openshift/openshift-ansible/pull/5578
|
|
|
|
|
|
Setting the MASTER_SERVICE to openshift.common.service_type.
Signed-off-by: Steve Milner <smilner@redhat.com>
|
|
The node system container was being installed with the DOCKER_SERVICE
holding to it's manifest.json default of docker.service. This change
adds the DOCKER_SERVICE parameter on node system container install
so that it uses the same value from the installer stored in
openshift.docker.service_name.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707
Signed-off-by: Steve Milner <smilner@redhat.com>
|