summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-01-06upgrades: set openshift_client_binary fact when running on oo_first_master hostVadim Rutkovsky
This sets openshift_client_binary var for the first master, as some roles use this var along with first_master_client_binary. Not sure if its worth setting this var for the faulty roles instead though. Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
2018-01-05Merge pull request #6511 from fabianvf/asb-origin-prefixScott Dodson
Add origin- prefix to ASB image
2018-01-05Merge pull request #6627 from sdodson/import_roleScott Dodson
Migrate to import_role for static role inclusion
2018-01-05Install web console serverSamuel Padgett
2018-01-05Remove become=no from various roles and tasksMichael Gugino
etcd runs some actions locally to copy certs from the CA cert host. This commit ensures that we respect the end user's intended behavior with become when using 'anisble_become' in the inventory. Other roles with similar tasks have been modified in the same manner. We shouldn't hard-code become behavior as it can be unexpected for the end user. This only currently works in the CI because the CI passes the '-b' argument on the command line, which will override the task behavior.
2018-01-05adding ability to add network policy objects.Shawn Hurley
2018-01-05Don't overwrite node's systemd units for containerized installVadim Rutkovsky
Systemd units are being updated in ../systemd_units.yml Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
2018-01-05Migrate to import_role for static role inclusionScott Dodson
In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
2018-01-05Merge pull request #6532 from jmencak/heat_stack-cnsOpenShift Merge Robot
Automatic merge from submit-queue. OpenStack provisioning -- support cns. Initial support for CNS nodes during OpenShift on OpenStack provisioning.
2018-01-05docker_upgrade_check: skip repoquery calls on containerized setupsVadim Rutkovsky
Fedora/CentOS Atomic hosts don't have repoquery installed - also there is no need to check available Docker rpms in the repos for Atomic
2018-01-05Merge pull request #6615 from giuseppe/cri-o-set-proxyOpenShift Merge Robot
Automatic merge from submit-queue. cri-o: set proxy variables Make CRI-O honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY. This change https://github.com/kubernetes-incubator/cri-o/pull/1245 in the system container is required
2018-01-05Adding logic to disable and reenable external communication to ES during ↵Eric Wolinetz
full restart
2018-01-05Provide example on how to use osm_etcd_image in a disconnected and ↵Ture Karlsson
containerized installation Example of how to use osm_etcd_image in accordance to: https://docs.openshift.com/container-platform/3.7/install_config/install/rpm_vs_containerized.html
2018-01-05crio: create /etc/sysconfig/crio-storageGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2018-01-05crio: configure proxy variablesGiuseppe Scrivano
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1529478 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2018-01-05Fix docker_image_availability checksMichael Gugino
This commit ensures that oreg_url is properly templated by ansible before being consumed in the logic. This commit also adds a method to the base health check class to detect if self._templar is none, and return the appropriate templated/untemplated version of the variable. This is mostly for unit tests.
2018-01-04Install node packages in one task instead of 3Michael Gugino
This commit reduces the number of package tasks from 3 to 1.
2018-01-04Don't hardcode the network interface in the openshift_logging_mux roleNathan Kinder
The openshift_logging_mux role hardcodes the 'eth0' interface alias for determining the IP address to use for incoming external client connections. This will cause the playbook to fail with an undefined variable error on systems where an 'eth0' interface does not exist. This patch changes the default IP address for external connections to use the 'ansible_default_ipv4' fact. It also allows this to be overridden by a new 'openshift_logging_mux_external_address' variable.
2018-01-04failure_summary: make sure msg is always a stringVadim Rutkovsky
Some tasks may return a dict in the msg. In that case `stringc` will fail to colorize it (with "AttributeError: <msg type> object has no attribute 'split'" error.
2018-01-04Fix flake8 errors in utils/testVadim Rutkovsky
2018-01-03Adding logic to do a full cluster restart if we are incrementing our major ↵Eric Wolinetz
versions of ES
2018-01-03Automatic commit of package [openshift-ansible] release [3.9.0-0.16.0].Jenkins CD Merge Bot
Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
2018-01-03Merge pull request #6596 from sdodson/masterScott Dodson
Add gluster 3.9 templates
2018-01-03Add gluster 3.9 templatesScott Dodson
2018-01-03Fix docker_image_availability checksMichael Gugino
This commit ensures that oreg_url is properly templated by ansible before being consumed in the logic. This commit also adds a method to the base health check class to detect if self._templar is none, and return the appropriate templated/untemplated version of the variable. This is mostly for unit tests.
2018-01-03Merge pull request #6539 from mgugino-upstream-stage/ci-in-treeScott Dodson
Add in-tree CI scripts
2018-01-03Add in-tree CI scriptsMichael Gugino
Currently, the scripts that contain testing inventory and actually execute the running of openshift-ansible plays are kept in the CI jobs themselves. This commit adds scripts into our tree so we can have better control over variables, differences between branches, and more transparency to end users for how we run our integration tests.
2018-01-03Automatic commit of package [openshift-ansible] release [3.9.0-0.15.0].Jenkins CD Merge Bot
Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
2018-01-03Automatic commit of package [openshift-ansible] release [3.9.0-0.14.0].Jenkins CD Merge Bot
Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
2018-01-03Merge pull request #6586 from ↵OpenShift Merge Robot
mgugino-upstream-stage/cast-bool-openshift_docker_use_system_container Automatic merge from submit-queue. Cast openshift_docker_use_system_container to bool openshift_docker_use_system_container might be passed in via ini inventory as 'openshift_docker_use_system_container=false' This condition will be interpreted as a string type, instead of boolean. Casting openshift_docker_use_system_container as bool will achieve the users desired intent. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1528943
2018-01-03kibana checks: use six.moves instead of ImportErrorVadim Rutkovsky
2018-01-02Merge pull request #6581 from mgugino-upstream-stage/fix-syscontainer-reg-authOpenShift Merge Robot
Automatic merge from submit-queue. Add docker auth credentials to system container install This commit adds docker auth credentials mount to system container systemd unit file. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1514324
2018-01-02Merge pull request #6522 from mgugino-upstream-stage/oauth_templateOpenShift Merge Robot
Automatic merge from submit-queue. Remove oauth_template bits from openshift_facts This commit moves some deprecated variable logic outside of openshift_facts and into role defaults.
2018-01-02Merge pull request #6583 from mgugino-upstream-stage/aws-creds-locationOpenShift Merge Robot
Automatic merge from submit-queue. Correct kublet_args cloud-provider directories This commit updates kublet_args to correct cloudprovider configuration file locaitons. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1527203
2018-01-02Merge pull request #6557 from mgugino-upstream-stage/delay-hosted-waitOpenShift Merge Robot
Automatic merge from submit-queue. Move wait_for_pods to it's own play openshift_hosted Currently, both registry and router pods need to be polled for successful deployment. Somtimes this can take up to a minute. This commit attempts to deploy both pods before polling either. This should reduce the average wait time for polling pods by 50% as time spent polling the first will also allow the second pod to continue it's own deployment.
2018-01-02Merge pull request #5894 from ewolinetz/logging_defaults_from_existingOpenShift Merge Robot
Automatic merge from submit-queue. Update logging to use existing cluster deployment for defaults This will allow us to use logging facts to set defaults of specific configurations such as ES index replicas and shard count. The update to logging facts yields us output like: ```json "elasticsearch": { "clusterrolebindings": {}, "configmaps": { "logging-elasticsearch": { "elasticsearch.yml": { "cloud": { "kubernetes": { "namespace": "${NAMESPACE}", "pod_label": "${POD_LABEL}", "pod_port": 9300 } }, "cluster": { "name": "${CLUSTER_NAME}" }, "discovery": { "type": "kubernetes", "zen.minimum_master_nodes": "${NODE_QUORUM}", "zen.ping.multicast.enabled": false }, "gateway": { "expected_nodes": "${RECOVER_EXPECTED_NODES}", "recover_after_nodes": "${NODE_QUORUM}", "recover_after_time": "${RECOVER_AFTER_TIME}" }, "index": { "number_of_replicas": 0, "number_of_shards": 1, "translog": { "flush_threshold_period": "5m", "flush_threshold_size": "256mb" }, "unassigned.node_left.delayed_timeout": "2m" }, "io.fabric8.elasticsearch.authentication.users": [ "system.logging.kibana", "system.logging.fluentd", "system.logging.curator", "system.admin" ], ``` TODO: - [x] Update logging facts to pull out settings from config maps - [x] Move `openshift_sanitize_inventory/library/conditional_set_fact.py` up to repo level - [x] Generate diffs against currently deployed configs and correctly patch in custom changes from customers - [x] Use `conditional_set_fact` to easily set defaults for logging based on logging facts, or falling back to role defaults when not specified in the inventory - [x] Update all components to follow patching configmaps
2018-01-02Automatic commit of package [openshift-ansible] release [3.9.0-0.13.0].Jenkins CD Merge Bot
Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
2018-01-02add python2-boto3 package for centos-based origin-ansible container imageJoel Diaz
There are modules in openshift-ansible that depend on boto3 (I see lib_utils/library/oo_iam_kms and lib_utils/library/oo_ec2_group). Add the dependency so that the origin-ansible container can succesfully run these modules.
2018-01-02Merge pull request #6523 from nhosoi/allowed_versionsOpenShift Merge Robot
Automatic merge from submit-queue. Bug 1527178 - installation of logging stack failed: Invalid version s… …pecified for Elasticsearch openshift_logging_{curator,elasicsearch,fluentd,kibana,mux}/vars/main.yml: - adding "3_8" to __allowed_.*_versions - replacing the value of __latest_.*_version "3_6" with "3_8". Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1527178
2018-01-02test_oc_scale: add more scale test casesVadim Rutkovsky
2018-01-02Cast openshift_docker_use_system_container to boolMichael Gugino
openshift_docker_use_system_container might be passed in via ini inventory as 'openshift_docker_use_system_container=false' This condition will be interpreted as a string type, instead of boolean. Casting openshift_docker_use_system_container as bool will achieve the users desired intent. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1528943
2018-01-02Correct kublet_args cloud-provider directoriesMichael Gugino
This commit updates kublet_args to correct cloudprovider configuration file locaitons. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1527203
2018-01-02test_oc_scale: fix test docstringsVadim Rutkovsky
2018-01-02Merge pull request #6554 from mgugino-upstream-stage/bootstrap-to-include-roleMichael Gugino
Remove bootstrap.yml from main.yml in openshift_node role
2018-01-02Updating logging_facts to be able to pull values from config maps yaml ↵Eric Wolinetz
files, use diffs to keep custom changes, white list certain settings when creating diffs
2018-01-02Add docker auth credentials to system container installMichael Gugino
This commit adds docker auth credentials mount to system container systemd unit file. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1514324
2018-01-02Automatic commit of package [openshift-ansible] release [3.9.0-0.12.0].Jenkins CD Merge Bot
Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
2018-01-02Import prerequisites.yml for OpenStackTomas Sedovic
2018-01-02Set the correct path to the openstack.conf fileTomas Sedovic
The file exists in `/etc/origin/cloudprovider/openstack.conf` not `/etc/origin/openstack.conf`.
2018-01-02Return a openshift_node_labels as a dictTomas Sedovic
The OpenStack dynamic inventory was setting the `openshift_node_labels` value as a string which causes a failure with the `lib_utils_oo_dict_to_keqv_list` filter. Fixes #6555