summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | Restart all controllers to force reconfiguration during upgradeScott Dodson2017-10-112-0/+30
| | | | |
* | | | | Merge pull request #5765 from abutcher/service-serving-cert-typoOpenShift Merge Robot2017-10-175-2/+42
|\ \ \ \ \ | |_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Ensure controllerConfig.serviceServingCert is correctly set during upgrade. A typo was originally introduced in https://github.com/openshift/openshift-ansible/pull/2449 causing an incorrect key to be configured within the master config. This commit ensures that the correct key is set during upgrades. /cc @dlbewley https://bugzilla.redhat.com/show_bug.cgi?id=1500981
| * | | | Ensure controllerConfig.serviceServingCert is correctly set during upgrade.Andrew Butcher2017-10-135-2/+42
| | |/ / | |/| |
* | | | Merge pull request #5734 from mtnbikenc/refactor-mgmt-entryOpenShift Merge Robot2017-10-162-26/+1
|\ \ \ \ | |/ / / |/| | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Refactor openshift-management entry point Moves checkpointing steps into path for both full cluster install and individual entry point playbook.
| * | | Refactor openshift-management entry pointRussell Teague2017-10-122-26/+1
| | |/ | |/|
* / | Ensure upgrade playbook exits on health check failuresRussell Teague2017-10-121-2/+4
|/ / | | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1484324
* | Merge pull request #5727 from mtnbikenc/fix-1499254OpenShift Merge Robot2017-10-111-0/+1
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. 1499254 Ensure host was reached for proper conditional validation If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
| * Ensure host was reached for proper conditional validationRussell Teague2017-10-111-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
* | Fix broken debug_levelMichael Gugino2017-10-111-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* | Merge pull request #5617 from simo5/up36roleOpenShift Merge Robot2017-10-113-11/+90
|\ \ | |/ |/| | | | | | | | | | | | | Automatic merge from submit-queue. Force reconciliation of role for 3.6 This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code.
| * Display warnings at the end of the control plane upgradeScott Dodson2017-10-101-11/+14
| |
| * Force reconciliation of role for 3.6Simo Sorce2017-10-102-0/+76
| | | | | | | | | | | | | | | | This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code. Signed-off-by: Simo Sorce <simo@redhat.com>
* | Merge pull request #5659 from mtnbikenc/fix-checkpointingOpenShift Merge Robot2017-10-105-20/+10
|\ \ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow checkpoint status to work across all groups Conditionals placed in inventories were not being applied to localhost causing the checkpoint status to not be updated properly. Moving to the `oo_all_hosts` group will correctly pick up the conditional and apply regardless of which group (or host) may have that conditional set.
| * | Allow checkpoint status to work across all groupsRussell Teague2017-10-045-20/+10
| | |
* | | Merge pull request #5129 from maxamillion/fedora-compatOpenShift Merge Robot2017-10-101-1/+10
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fedora compat fixes for package version checks and dnf bug workaround Fix a couple things that don't work with Fedora: - Don't attempt to version check components, they aren't going to match the hard coded RHEL package versions. - Work around a [bug in dnf](https://bugzilla.redhat.com/show_bug.cgi?id=1199432)'s python API that throws an error when a package spec has a `*` character in the Release field Once we're done with review, I'll squash commits.
| * | rebase on masterAdam Miller2017-10-061-1/+1
| | | | | | | | | | | | Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
| * | Add fedora compatibilityAdam Miller2017-10-061-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - don't check pkg versions on Fedora, it won't work; they move faster than RHEL and it's not realistic to maintain that package list. - handle differences between yum and dnf pkgspec for excluder - work-around for a bug in dnf https://bugzilla.redhat.com/show_bug.cgi?id=1199432 - make requirement verify one play, don't run unnecessary checks on Fedora
* | | Merge pull request #5698 from abutcher/servinginfo-client-caOpenShift Merge Robot2017-10-091-2/+2
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Bug 1493276: Setting servingInfo.clientCA to ca-bundle.crt can cause unwanted client cert popups in browser when hitting console https://bugzilla.redhat.com/show_bug.cgi?id=1493276
| * | | Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher2017-10-091-2/+2
| | | |
* | | | Merge pull request #5682 from tbielawa/openshift_managementScott Dodson2017-10-093-27/+27
|\ \ \ \ | |/ / / |/| | | Rename openshift_cfme role to openshift_management
| * | | Rename openshift_cfme role to openshift_managementTim Bielawa2017-10-063-27/+27
| |/ /
* / / Switch to configmap leader election on 3.7 upgradeMonis Khan2017-10-061-0/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change sets the controllerConfig.election.lockName to openshift-master-controllers on a 3.7 upgrade. This is the default in a new 3.7 cluster. Important excerpt from the docs inside the origin codebase (slightly modified): There are two modes for lease operation - a legacy mode that directly connects to etcd, and the preferred mode which coordinates on a configmap or endpoint in the kube-system namespace. Because legacy mode and the new mode do not coordinate on the same key, an upgrade must stop all controllers before changing the configuration and starting controllers with the new config. Signed-off-by: Monis Khan <mkhan@redhat.com>
* | Merge pull request #5336 from tbielawa/cfme_4.6OpenShift Merge Robot2017-10-052-0/+28
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Cfme 4.6 # Description * Implements support for **CFME 4.6** in OCP 3.7 * **Replaces** the Tech Preview CFME 4.5 release included in OCP 3.6 * Does not support graceful migrations from the CFME 4.5 tech preview release # References * [Trello - (5) Integrate CFME 4.6 into OCP Installation](https://trello.com/c/Rzfn5Qa8/380-5-integrate-cfme-46-into-ocp-installation) Ensure the following RFE/Errors do not happen again - [x] #4555 - Error creating the CFME user - [x] #4556 - Error in PV template evaluation - [x] #4822 - Changing `maxImagesBulkImportedPerRepository` parameter - [x] #4568 - Add NFS directory support # Features Ensure the following features are configurable in the role - [x] POC deployments can easily default to NFS storage - [ ] Production/Cloud deployments can use automatic storage providers - [ ] Able to select between podified vs. external PostgreSQL database (podified uses configured storage mechanism) - [x] Template resource requests can be overridden for POC deployments
| * | Hooks for installing CFME during full openshift installationTim Bielawa2017-10-042-0/+28
| |/
* | Merge pull request #5636 from ↵OpenShift Merge Robot2017-10-041-2/+2
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/limit-openshift-version-hosts Automatic merge from submit-queue. Limit hosts that run openshift_version role Currently, the openshift_version role is run against the oo_all_hosts group. This causes the dependencies, such as openshift_docker and docker, to be run against host groups that were not intended, such as nfs. This commit explicitly limits the openshift_version role to run only against masters, nodes, and etcd host groups. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497144
| * | Limit hosts that run openshift_version roleMichael Gugino2017-10-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the openshift_version role is run against the oo_all_hosts group. This causes the dependencies, such as openshift_docker and docker, to be run against host groups that were not intended, such as nfs. This commit explicitly limits the openshift_version role to run only against masters, nodes, and etcd host groups. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497144
* | | Merge pull request #5643 from mtnbikenc/refactor-certificatesOpenShift Merge Robot2017-10-042-11/+7
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Refactor certificate playbooks for checkpointing The recent breakout of the certificate playbooks resulted in the certificate portion of the install to be outside of the component checkpoint. This PR moves the certificate playbooks inside their respective config.yml playbook. Removes an unused tasks file from the openshift_named_certificates role.
| * | Move node cert playbook into node config pathRussell Teague2017-10-031-2/+0
| | |
| * | Move master cert playbooks into master config pathRussell Teague2017-10-032-5/+7
| | |
| * | Move etcd cert playbooks into etcd config pathRussell Teague2017-10-031-4/+0
| |/
* | Merge pull request #5632 from ↵OpenShift Merge Robot2017-10-036-1/+9
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/limit-version-upgrade-masters Automatic merge from submit-queue. Limit base-package install during master upgrades Currently, openshift_version installs RPM packages on all nodes and masters to aid in determining and setting the proper version across the cluster. This commit limits the host groups to only masters during upgrade_control_plane plays. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
| * Limit base-package install during master upgradesMichael Gugino2017-10-026-1/+9
| | | | | | | | | | | | | | | | | | | | | | Currently, openshift_version installs RPM packages on all nodes and masters to aid in determining and setting the proper version across the cluster. This commit limits the host groups to only masters during upgrade_control_plane plays. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
* | Merge pull request #5614 from mtnbikenc/fix-prometheusOpenShift Merge Robot2017-10-032-1/+1
|\ \ | |/ |/| | | | | | | | | Automatic merge from submit-queue. Fix Prometheus byo entry point Adds the std_include.yml playbook to the byo entrypoint and moves the conditional install to the openshift_hosted.yml portion of an install.
| * Fix Prometheus byo entry pointRussell Teague2017-10-022-1/+1
| |
* | Separate certificate playbooks.Andrew Butcher2017-10-028-147/+75
|/
* Merge pull request #5449 from abutcher/wildcard-router-cert-redeployOpenShift Merge Robot2017-09-304-94/+68
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Bug 1490186: Router pod not running after router certificates redeployment This carries https://github.com/openshift/openshift-ansible/pull/5417. More of the router cert redeploy logic could be moved into the `openshift_hosted` role with a flag. I may pull those over. https://bugzilla.redhat.com/show_bug.cgi?id=1490186
| * Include openshift_hosted when redeploying router certificates to handle ↵Andrew Butcher2017-09-291-71/+43
| | | | | | | | auto-generated wildcard certificate or custom openshift_hosted_router_certificate.
| * Check for router service annotations when redeploying router certificates.Andrew Butcher2017-09-291-3/+29
| |
| * Remove oo_option facts.Andrew Butcher2017-09-293-24/+0
| |
* | Merge pull request #5593 from ingvagabund/block-upgrade-if-etcd3-not-setJan Chaloupka2017-09-301-0/+4
|\ \ | | | | | | block 3.6->3.7 upgrade if storage backend is not set to etcd3
| * | block 3.6->3.7 upgrade if storage backend is not set to etcd3Jan Chaloupka2017-09-291-0/+4
| |/
* / move health-checks and control-plane-verification before excludersJan Chaloupka2017-09-295-28/+28
|/
* Merge pull request #5559 from mgugino-upstream-stage/readd-ent-registryOpenShift Merge Robot2017-09-281-9/+0
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Migrate enterprise registry logic to docker role Currently, the enterprise registry to forcefully added in openshift_facts. Recently, the docker role has been modified to consume registry variables directly, bypassing openshift_facts. This commit cleans up unused code in openshift_facts, and migrates enterprise registry logic to the docker role. Fixes: https://github.com/openshift/openshift-ansible/issues/5557
| * Migrate enterprise registry logic to docker roleMichael Gugino2017-09-271-9/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the enterprise registry to forcefully added in openshift_facts. Recently, the docker role has been modified to consume registry variables directly, bypassing openshift_facts. This commit cleans up unused code in openshift_facts, and migrates enterprise registry logic to the docker role. Fixes: https://github.com/openshift/openshift-ansible/issues/5557
* | Merge pull request #5508 from sdodson/disable-image-streamsOpenShift Merge Robot2017-09-281-1/+3
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow examples management to be disabled By setting openshift_install_examples=false the image stream and quick start templates will not be installed https://trello.com/c/zLaSgxig/436-2-customers-need-a-way-to-opt-out-of-openshift-ansible-template-and-imagestream-mangement Fixes #5061
| * | Allow examples management to be disabledScott Dodson2017-09-221-1/+3
| | |
* | | Merge pull request #5527 from mtnbikenc/installer-checkpointOpenShift Merge Robot2017-09-286-41/+121
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Installer checkpointing This pull request adds an Ansible callback plugin to allow for 'checkpointing' the status of the OpenShift-Ansible installer. The installer is divided up into phases and each phase will start with a status of 'Not Started'. As the phase is performed the status will be updated to 'In Progress' and finally 'Complete'. Should the install fail or complete successfully, the callback plugin will report the status of all phases after the PLAY RECAP. The INSTALLER STATUS is also written to the Ansible log file. https://trello.com/c/VNEvT2Fo Changes: - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install Example playbook output: ``` <- snip -> PLAY RECAP *********************************************************************************************************************************** ec2-34-207-180-218.compute-1.amazonaws.com : ok=158 changed=16 unreachable=0 failed=0 ec2-52-87-169-12.compute-1.amazonaws.com : ok=469 changed=74 unreachable=0 failed=0 ec2-52-90-209-20.compute-1.amazonaws.com : ok=157 changed=17 unreachable=0 failed=0 localhost : ok=24 changed=0 unreachable=0 failed=0 INSTALLER STATUS ***************************************************************************************************************************** Initialization : Complete etcd Install : Complete NFS Install : Not Started Load balancer Install : Not Started Master Install : Complete Master Additional Install : Complete Node Install : Complete GlusterFS Install : Not Started Hosted Install : Complete Metrics Install : Not Started Logging Install : Not Started Service Catalog Install : Not Started ```
| * | | OpenShift-Ansible Installer CheckpointingRussell Teague2017-09-276-41/+121
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install
* | | Merge pull request #5549 from ingvagabund/fix-etcd-backup-tagOpenShift Merge Robot2017-09-271-1/+1
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue evaluate etcd_backup_tag variable Bug: 1495545
| * | | evaluate etcd_backup_tag variableJan Chaloupka2017-09-271-1/+1
| |/ /