summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster/upgrades
Commit message (Collapse)AuthorAgeFilesLines
...
| * Playbook Consolidation - InitializationRussell Teague2017-11-1511-12/+12
| |
* | Merge pull request #5500 from vshn/projtmpl1OpenShift Merge Robot2017-11-161-0/+2
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Add role to configure project request template The OpenShift master role already supports changing the master configuration to refer to a project template, but there's no way to manage that template directly. This role adds the necessary code to generate a default template and to apply customizations using the "yedit" module. We need to configure custom services and endpoints in every project. The project request template enables us to do that automatically in every project and we'd like to manage the template using Ansible.
| * | Add role to configure project request templateMichael Hanselmann2017-10-231-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | The OpenShift master role already supports changing the master configuration to refer to a project template, but there's no way to manage that template directly. This role adds the necessary code to generate a default template and to apply customizations using the "yedit" module.
* | | Merge pull request #6084 from mgugino-upstream-stage/combine-master-upgradeOpenShift Merge Robot2017-11-155-302/+6
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Combine master upgrade play with role Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
| * | | Combine master upgrade play with roleMichael Gugino2017-11-096-312/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
* | | | Merge pull request #5968 from mgugino-upstream-stage/version-scrubScott Dodson2017-11-152-2/+0
|\ \ \ \ | |_|_|/ |/| | | Removed old version code
| * | | Removed old version codeMichael Gugino2017-11-142-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* | | | Merge pull request #6068 from mtnbikenc/remove-old-upgradesOpenShift Merge Robot2017-11-1418-1224/+0
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Remove upgrade playbooks for 3.3 through 3.5 Release branches should be used for older upgrades.
| * | | | Remove upgrade playbooks for 3.3 through 3.5Russell Teague2017-11-0818-1224/+0
| | |/ / | |/| |
* | | | Allow disabling authorization migration checkScott Dodson2017-11-142-20/+24
| |/ / |/| |
* | | First pass at v3.8 supportScott Dodson2017-11-137-0/+430
|/ /
* | Fix preupgrade authorization objects are in sync minor versionsMichael Gugino2017-11-082-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, we check that upgrade target is less than 3.8, but this will break for minor upgrades. This commit set's a fact early in the upgrade process to deterime what the currently installed version on the first master is. This fact is used to determine if our currently installed version is less than 3.7. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508301
* | Fix preupgrade authorization objects are in syncMichael Gugino2017-11-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | Currently, this task is executed based on openshift_version. openshift_version is based on the upgrade target, thus not the currently install versions. This commit ensures that the task executes as intended. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508301
* | Correct groupname during upgrade_control_plane playMichael Gugino2017-11-031-1/+1
| | | | | | | | | | | | | | | | | | Currently, upgrade_control_plane calls tasks meant for master on etcd group. This commit corrects the groupname. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508734
* | Merge pull request #5875 from mgugino-upstream-stage/fix-upgrade-config-hookMichael Gugino2017-10-273-2/+6
|\ \ | | | | | | | | | | | | This previously passed all CI tests, merge queue broke last night. Merging, this is a blocker bug.
| * | Add master config upgrade hook to upgrade-all playsMichael Gugino2017-10-253-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, in 1.5, 3.6, 1.7 upgrade-all plays, control plane upgrades are not called correctly. This commit ensures the master config hook is appropriately applied during these upgrades to match the steps in control plane only upgrades. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1486054
* | | Merge pull request #5850 from mgugino-upstream-stage/remove-base-packageScott Dodson2017-10-255-5/+0
|\ \ \ | |/ / |/| | Remove base package install
| * | Remove base package installMichael Gugino2017-10-235-5/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, base atomic-openshift package is installed for versioning. This doesn't appear to be necessary. This commit removes this step. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1504196
* | | Merge pull request #5814 from mgugino-upstream-stage/docker-auth-upgradesOpenShift Merge Robot2017-10-241-0/+6
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Enable oreg_auth credential replace during upgrades Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
| * | | Enable oreg_auth credential replace during upgradesMichael Gugino2017-10-191-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
* | | | Merge pull request #5838 from ↵Jan Chaloupka2017-10-241-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | ingvagabund/strip-dash-when-comparing-versions-python3 strip dash when comparing version with Python3
| * | | | strip dash when comparing version with Python3Jan Chaloupka2017-10-231-1/+1
| | |_|/ | |/| |
* | | | Merge pull request #5796 from mgugino-upstream-stage/journald-masters-upgradesOpenShift Merge Robot2017-10-241-0/+3
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Ensure upgrades apply latest journald settings Currently, existing clusters might not have journald configurations applied. This may result in a rate- limiting of important log messages on openshift-masters. This commit ensures that journald settings are applied during the upgrade process openshif-masters. Fixes: https://github.com/openshift/openshift-ansible/issues/5642
| * | | | Ensure upgrades apply latest journald settingsMichael Gugino2017-10-181-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, existing clusters might not have journald configurations applied. This may result in a rate- limiting of important log messages on openshift-masters. This commit ensures that journald settings are applied during the upgrade process openshif-masters. Fixes: https://github.com/openshift/openshift-ansible/issues/5642
* | | | | Merge pull request #5832 from sdodson/bz1504525Scott Dodson2017-10-232-6/+13
|\ \ \ \ \ | | | | | | | | | | | | Correct version gates on policy reconciliation and add retries
| * | | | | verstion_gte seems unreliable on containerized installsScott Dodson2017-10-202-6/+7
| | | | | |
| * | | | | Retry reconcile in case of error and give up eventuallySimo Sorce2017-10-201-0/+6
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | Handles spurious failures and does not get mad if it just cannot do it. Signed-off-by: Simo Sorce <simo@redhat.com>
* | | | | Merge pull request #5845 from ingvagabund/check-correct-master-servicesScott Dodson2017-10-231-12/+25
|\ \ \ \ \ | |_|_|_|/ |/| | | | Check if the master service is non-ha or not
| * | | | Check if the master service is non-ha or notJan Chaloupka2017-10-231-12/+25
| | |_|/ | |/| |
* / | | Correct host group for controller restartRussell Teague2017-10-231-1/+1
|/ / / | | | | | | | | | | | | | | | Fixes 1504515 https://bugzilla.redhat.com/show_bug.cgi?id=1504515
* | | Merge pull request #5749 from abutcher/servinginfo-client-ca-upgradeOpenShift Merge Robot2017-10-202-0/+10
|\ \ \ | |/ / |/| | | | | | | | | | | | | | Automatic merge from submit-queue. Set servingInfo.clientCA to ca.crt during upgrade. https://bugzilla.redhat.com/show_bug.cgi?id=1501795
| * | Set servingInfo.clientCA to ca.crt during upgrade.Andrew Butcher2017-10-172-0/+10
| | |
* | | Merge pull request #5763 from mgugino-upstream-stage/fix-master-config-upgradeScott Dodson2017-10-184-64/+0
|\ \ \ | |_|/ |/| | Remove unneeded master config updates during upgrades
| * | Remove unneeded master config updates during upgradesMichael Gugino2017-10-174-64/+0
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, upgrade_control_plane.yml will add any missing sections to the openshift master's config. These additions are only needed once. Users who perform multiple upgrades to their clusters over time do not need to have these variables re-inserted. Currently, re-inserting these variables can cause unwanted local changes. This commit ensures that the variables are only inserted into openshift master's config once. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1486054
* | Merge pull request #5730 from sdodson/restart-controllersScott Dodson2017-10-172-0/+30
|\ \ | |/ |/| Restart all controllers to force reconfiguration during upgrade
| * Restart all controllers to force reconfiguration during upgradeScott Dodson2017-10-112-0/+30
| |
* | Ensure controllerConfig.serviceServingCert is correctly set during upgrade.Andrew Butcher2017-10-135-2/+42
| |
* | Ensure upgrade playbook exits on health check failuresRussell Teague2017-10-121-2/+4
| | | | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1484324
* | Merge pull request #5727 from mtnbikenc/fix-1499254OpenShift Merge Robot2017-10-111-0/+1
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. 1499254 Ensure host was reached for proper conditional validation If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
| * Ensure host was reached for proper conditional validationRussell Teague2017-10-111-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
* | Fix broken debug_levelMichael Gugino2017-10-111-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* | Display warnings at the end of the control plane upgradeScott Dodson2017-10-101-11/+14
| |
* | Force reconciliation of role for 3.6Simo Sorce2017-10-102-0/+76
|/ | | | | | | | This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code. Signed-off-by: Simo Sorce <simo@redhat.com>
* Switch to configmap leader election on 3.7 upgradeMonis Khan2017-10-061-0/+5
| | | | | | | | | | | | | | | | | This change sets the controllerConfig.election.lockName to openshift-master-controllers on a 3.7 upgrade. This is the default in a new 3.7 cluster. Important excerpt from the docs inside the origin codebase (slightly modified): There are two modes for lease operation - a legacy mode that directly connects to etcd, and the preferred mode which coordinates on a configmap or endpoint in the kube-system namespace. Because legacy mode and the new mode do not coordinate on the same key, an upgrade must stop all controllers before changing the configuration and starting controllers with the new config. Signed-off-by: Monis Khan <mkhan@redhat.com>
* Limit base-package install during master upgradesMichael Gugino2017-10-025-0/+5
| | | | | | | | | | | Currently, openshift_version installs RPM packages on all nodes and masters to aid in determining and setting the proper version across the cluster. This commit limits the host groups to only masters during upgrade_control_plane plays. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
* Merge pull request #5449 from abutcher/wildcard-router-cert-redeployOpenShift Merge Robot2017-09-301-2/+0
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Bug 1490186: Router pod not running after router certificates redeployment This carries https://github.com/openshift/openshift-ansible/pull/5417. More of the router cert redeploy logic could be moved into the `openshift_hosted` role with a flag. I may pull those over. https://bugzilla.redhat.com/show_bug.cgi?id=1490186
| * Remove oo_option facts.Andrew Butcher2017-09-291-2/+0
| |
* | Merge pull request #5593 from ingvagabund/block-upgrade-if-etcd3-not-setJan Chaloupka2017-09-301-0/+4
|\ \ | | | | | | block 3.6->3.7 upgrade if storage backend is not set to etcd3
| * | block 3.6->3.7 upgrade if storage backend is not set to etcd3Jan Chaloupka2017-09-291-0/+4
| |/
* / move health-checks and control-plane-verification before excludersJan Chaloupka2017-09-295-28/+28
|/