summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-etcd
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #5643 from mtnbikenc/refactor-certificatesOpenShift Merge Robot2017-10-041-0/+4
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Refactor certificate playbooks for checkpointing The recent breakout of the certificate playbooks resulted in the certificate portion of the install to be outside of the component checkpoint. This PR moves the certificate playbooks inside their respective config.yml playbook. Removes an unused tasks file from the openshift_named_certificates role.
| * Move etcd cert playbooks into etcd config pathRussell Teague2017-10-031-0/+4
| |
* | Merge pull request #5630 from abutcher/etcd-scaleup-targetOpenShift Merge Robot2017-10-031-1/+1
|\ \ | |/ |/| | | | | | | | | | | | | Automatic merge from submit-queue. Use etcd_ip when communicating with the cluster as a peer in etcd scaleup. We can't communicate with the hostname here since etcd will be [configured to listen to its IP address](https://github.com/openshift/openshift-ansible/blob/ead22bb1c3b6d6366502b14b97b7aae5605f8a58/roles/etcd/defaults/main.yaml#L69). Fixes https://github.com/openshift/openshift-ansible/issues/5620
| * Use etcd_ip when communicating with the cluster as a peer in etcd scaleup.Andrew Butcher2017-10-021-1/+1
| |
* | Separate certificate playbooks.Andrew Butcher2017-10-023-0/+51
|/
* OpenShift-Ansible Installer CheckpointingRussell Teague2017-09-271-0/+22
| | | | | | | | | | | - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install
* Merge pull request #5470 from ingvagabund/consolidate-etcd-common-roleOpenShift Merge Robot2017-09-261-6/+9
|\ | | | | | | | | | | | | Automatic merge from submit-queue Consolidate etcd common role The last PR toward a single etcd role
| * consolidate etcd_common roleJan Chaloupka2017-09-251-6/+9
| |
* | make difference filter output a list for Python3Jan Chaloupka2017-09-261-2/+2
|/
* Merge pull request #5495 from abutcher/ca-redeploy-expired-etcdOpenShift Merge Robot2017-09-241-0/+18
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue Improve CA redeploy restart logic Expired etcd certificates require special casing around restarts in the certificate redeploy playbooks. When etcd certificates are expired we can't restart masters or nodes. We also can't simply restart etcd because peers also had expired certificates so we must start/stop etcd when we detect expired etcd certificates. `openshift-ca.yml`: * No longer restart master services when etcd certificates were previously expired. * No longer restart node services when master or etcd certificates were previously expired. `etcd-ca.yml`: * No longer restart master services when etcd certificates were previously expired. Tested using [gen_expired_tls.sh](https://gist.github.com/abutcher/bdd20b9d582675d89fb22658689c49e4) on one of my master/etcd hosts to ensure that restart logic changes caused us to skip the right restarts and do a full start/stop of etcd in the `redeploy-certificates.yml` and `redeploy-etcd-certificates.yml` playbooks. Note: When this happens with a cluster and you want to replace all certificates, you can run: `redeploy-etcd-ca.yml`, `redeploy-openshift-ca.yml` (which will both skip restarts) and then run `redeploy-certificates.yml` which will now be able to full/stop start etcd.
| * Do a full stop/start when etcd certificates had expired.Andrew Butcher2017-09-211-0/+18
| |
* | Merge pull request #5507 from abutcher/etcd-scaleup-urlsOpenShift Merge Robot2017-09-231-9/+11
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue Set master facts prior to adding new etcd client urls to master config. `openshift_master` role dependencies were moved out of the role in https://github.com/openshift/openshift-ansible/pull/5392 so we need to call `openshift_master_facts` prior to patching the master config in etcd scaleup. https://bugzilla.redhat.com/show_bug.cgi?id=1490304
| * | Set master facts prior to adding new etcd client urls to master config.Andrew Butcher2017-09-221-9/+11
| |/
* / consolidate etcd_migrate roleJan Chaloupka2017-09-221-30/+37
|/
* Merge pull request #5396 from abutcher/etcd-migrate-openshift-ipScott Dodson2017-09-141-3/+3
|\ | | | | Use openshift.common.ip rather than ansible_default_ipv4 in etcd migration playbook.
| * Use openshift.common.ip rather than ansible_default_ipv4 in etcd migration ↵Andrew Butcher2017-09-131-3/+3
| | | | | | | | playbook.
* | Update master config with new client urls during etcd scaleup.Andrew Butcher2017-09-121-0/+19
|/
* Standardize etcd entry point playbooksRussell Teague2017-09-011-18/+0
|
* Merge pull request #5257 from mtnbikenc/fix-scaleupScott Dodson2017-08-302-0/+3
|\ | | | | Move firewall install and fix scaleup playbooks
| * Move firewall install and fix scaleup playbooksRussell Teague2017-08-292-0/+3
| |
* | Merge pull request #5229 from sdodson/fix-containerized-etcdv3-migrationScott Dodson2017-08-301-2/+4
|\ \ | |/ |/| Fix scaleup on containerized installations
| * Fix scaleup on containerized installationsScott Dodson2017-08-251-2/+4
| | | | | | | | | | | | The output from member add had quotes added that caused etcd to fail. Also there were some places that needed to have retries added because containerized start/stop/restart are slower than rpm based installs.
* | Remove unsupported playbooks and utilitiesRussell Teague2017-08-251-23/+0
|/
* Switch to migrating one host and forming a new clusterScott Dodson2017-08-222-10/+68
| | | | | | | | With large datasets where there are many keys with TTLs the expiry was creating a data inconsistency problem. The hope is that by performing the migration once and then forming a new cluster this is avoided. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1475351
* Update etcd scaleup entrypoint includes and use etcd_{hostname,ip} facts for ↵Andrew Butcher2017-08-111-6/+14
| | | | new member registration.
* Merge pull request #3043 from jkhelil/scaleup_etcdScott Dodson2017-08-021-0/+30
|\ | | | | Add etcd scaleup playbook
| * add etcd scaleup playbookjawed2017-06-151-0/+30
| |
* | Shut down masters before taking an etcd backupScott Dodson2017-07-271-20/+20
| |
* | attach leases via the first master only and only onceJan Chaloupka2017-06-281-0/+120
| | | | | | | | | | | | - move openshift-etcd/migrate.yml from byo to common and keep just the entry point - replace std_include with essential plays (e.g. no need to detect openshift version) - delegate the ttl re-attaching to the first master
* | detect etcd service name based on etcd runtime when restartingJan Chaloupka2017-06-201-1/+1
|/
* move etcd upgrade related code into etcd_upgrade roleJan Chaloupka2017-05-181-0/+1
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-0/+9
|
* Standardize add_host: with name and changed_whenRussell Teague2017-01-251-1/+4
| | | | | | | The add_host: task does not change any data on the host and as practice has been configured to changed_when: False. This commit standardizes that usage in the byo and common playbooks. Additionally, taks names are added to each task to improve troubleshooting.
* YAML LintingRussell Teague2016-12-121-1/+1
| | | | | * Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
* Template with_items for upstream ansible-2.2 compat.Andrew Butcher2016-10-141-1/+1
|
* Refactor etcd certificates roles.Andrew Butcher2016-08-021-113/+4
|
* Set any_errors_fatal for etcd facts play.Andrew Butcher2016-06-281-0/+1
|
* Cleanup various deprecation warnings.Andrew Butcher2016-04-291-2/+2
|
* Use openshift_hostname/openshift_ip values for etcd configuration and ↵Andrew Butcher2016-04-201-3/+5
| | | | certificates.
* Bug 1320829 - Ensure docker installed for factsJason DeTiberus2016-03-311-1/+1
| | | | | | - gather facts requiring docker only if docker is present and running - Update reference to etcd role in playbooks/common/openshift-etcd/config.yml to use openshift_etcd
* Move common common facts to openshift_factsJason DeTiberus2016-03-151-11/+3
| | | | | | | - Prevents roles that need common facts from needing to require openshift_common, which pulls in the openshift binary. - Add dependency on openshift_facts to os_firewall, since it uses openshift.common facts
* Docker role refactorJason DeTiberus2016-03-141-2/+2
| | | | | | | | | | | | | | | - refactors the docker role to push generic config into docker role and wrap openshift specific variables into an openshift_docker role and it's dependent openshift_docker_facts role - adds support for setting --confirm-def-push flag (Resolves https://github.com/openshift/openshift-ansible/issues/1014) - moves docker related facts from common/node roles to a new docker role - renames cli_docker_* role varialbes to openshift_docker-* (maintaining backward compatibility) - update role dependencies to pull in openshift_docker conditionally based on is_containerized - remove playbooks/common/openshift-docker since the docker role is now conditionally included
* Merge pull request #1019 from dgoodwin/etcd-serialBrenton Leanhardt2016-02-021-2/+26
|\ | | | | Install and start one etcd server before the others.
| * Bring first etcd server up before others.Devan Goodwin2015-12-111-2/+26
| | | | | | | | | | | | | | | | | | In faster environments (i.e. all local VMs) etcd nodes could come online at roughly the same time leading to conflicts with self-elections, resulting in a non-functional cluster. To solve we configure the first etcd host by itself, then configure the remaining ones in parallel to keep things as fast as possible.
* | Configure logrotate on atomic.Andrew Butcher2016-01-271-1/+0
| |
* | Install cockpit, logrotate and fluentd unless host is atomic.Andrew Butcher2016-01-261-1/+1
| |
* | Containerization work by @sdodsonScott Dodson2015-12-151-2/+4
| |
* | Initial containerization work from @ibottyTobias Florek2015-12-151-1/+1
| | | | | | | | copied from https://github.com/eparis/kubernetes-ansible/blob/17f98edd7ff53e649b43e26822b8fbc0be42b233/roles/common/tasks/main.yml
* | Enforce connection: local and become: no on all localhost playsJason DeTiberus2015-11-302-2/+4
|/
* Replace map with oo_collect to support python-jinja2 <2.7Andrew Butcher2015-11-201-1/+1
|