summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster/redeploy-certificates/etcd-ca.yml
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #6225 from mtnbikenc/include-deprecation-openshift-etcdRussell Teague2017-11-221-1/+1
|\ | | | | Include Deprecation - openshift-etcd
| * Include Deprecation - openshift-etcdRussell Teague2017-11-221-1/+1
| |
* | Merge pull request #6151 from mtnbikenc/consolidate-openshift-masterRussell Teague2017-11-221-1/+1
|\ \ | |/ |/| Playbook Consolidation - openshift-master
| * Playbook Consolidation - openshift-masterRussell Teague2017-11-221-1/+1
| |
* | Cleanup etcd runtime variable.Michael Gugino2017-11-211-2/+0
|/ | | | Cleaning out reference to etcd_runtime in openshift facts.
* Playbook Consolidation - openshift-etcdRussell Teague2017-11-161-2/+2
|
* Separate certificate playbooks.Andrew Butcher2017-10-021-15/+2
|
* consolidate etcd_common roleJan Chaloupka2017-09-251-74/+19
|
* Merge pull request #5495 from abutcher/ca-redeploy-expired-etcdOpenShift Merge Robot2017-09-241-10/+16
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue Improve CA redeploy restart logic Expired etcd certificates require special casing around restarts in the certificate redeploy playbooks. When etcd certificates are expired we can't restart masters or nodes. We also can't simply restart etcd because peers also had expired certificates so we must start/stop etcd when we detect expired etcd certificates. `openshift-ca.yml`: * No longer restart master services when etcd certificates were previously expired. * No longer restart node services when master or etcd certificates were previously expired. `etcd-ca.yml`: * No longer restart master services when etcd certificates were previously expired. Tested using [gen_expired_tls.sh](https://gist.github.com/abutcher/bdd20b9d582675d89fb22658689c49e4) on one of my master/etcd hosts to ensure that restart logic changes caused us to skip the right restarts and do a full start/stop of etcd in the `redeploy-certificates.yml` and `redeploy-etcd-certificates.yml` playbooks. Note: When this happens with a cluster and you want to replace all certificates, you can run: `redeploy-etcd-ca.yml`, `redeploy-openshift-ca.yml` (which will both skip restarts) and then run `redeploy-certificates.yml` which will now be able to full/stop start etcd.
| * Improve CA playbook restart logic and skip restarts when related services ↵Andrew Butcher2017-09-211-10/+16
| | | | | | | | had previously expired certificates.
* | Consolidate etcd certs rolesJan Chaloupka2017-09-181-4/+11
|/ | | | | | | This is a part of the etcd_ like role consolidationi into an action-based role. As part of the consilidation some roles have been removed and some replaced by include_role module. Resulting in reorder and shift of role dependencies from a role into a play.
* Separate etcd and OpenShift CA redeploy playbooks.Andrew Butcher2017-06-091-0/+158