summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-master
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #6016 from kwoodson/bootstrap_enhancements-v3Kenny Woodson2017-11-081-0/+6
|\ | | | | Bootstrap enhancements.
| * Bootstrap enhancements.Kenny Woodson2017-11-081-0/+6
| |
* | Merge pull request #6031 from abutcher/temporary-servinginfo-clientcaOpenShift Merge Robot2017-11-061-0/+17
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during rolling CA redeployment. This PR temporarily configures master `servingInfo.clientCA` as `client-ca-bundle.crt` during CA redeploy so that clients referencing the old OpenShift CA can continue to function until all cluster certificates have been replaced and `servingInfo.clientCA` is reset to `ca.crt`. `client-ca-bundle.crt` is a new bundle created by the `openshift_ca` role which contains old and new OpenShift CA certificates. https://bugzilla.redhat.com/show_bug.cgi?id=1509124 Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1493276
| * | Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during ↵Andrew Butcher2017-11-061-0/+17
| | | | | | | | | | | | rolling CA redeployment.
* | | Retry restarting master controllersMichael Gugino2017-11-062-2/+12
|/ / | | | | | | | | | | | | | | | | Currently, master controller services may fail to restart if master api services are not fully initialized. This commit enables retry of master controllers. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1509837
* | Revert "Bootstrap enhancements."Clayton Coleman2017-11-051-7/+0
| |
* | Bootstrap enhancements.Kenny Woodson2017-11-031-0/+7
|/
* Correctly install cockpitScott Dodson2017-10-271-1/+1
| | | | Seems this was changed inadvertantly in #5378
* Merge pull request #5574 from dulek/containerized_kuryr_supportScott Dodson2017-10-201-0/+6
|\ | | | | Initial Kuryr support
| * Initial Kuryr supportMichał Dulko2017-10-201-0/+6
| | | | | | | | | | | | | | | | This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
* | set use_manageiq as defaultErez Freiberger2017-10-191-1/+1
|/
* Merge pull request #5659 from mtnbikenc/fix-checkpointingOpenShift Merge Robot2017-10-102-8/+4
|\ | | | | | | | | | | | | Automatic merge from submit-queue. Allow checkpoint status to work across all groups Conditionals placed in inventories were not being applied to localhost causing the checkpoint status to not be updated properly. Moving to the `oo_all_hosts` group will correctly pick up the conditional and apply regardless of which group (or host) may have that conditional set.
| * Allow checkpoint status to work across all groupsRussell Teague2017-10-042-8/+4
| |
* | Separate tuned daemon setup into a role.Jiri Mencak2017-10-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, profiles for the tuned daemon are set only for OpenShift node(s). This excludes the OpenShift loadbalancer. As a result, ARP cache limits on loadbalancers are not raised. This causes problems with HA setups where loadbalancers serve 1k+ OpenShift nodes. This commit ensures the openshift-control-plane role is applied to loadbalancers, masters and OpenShift infra nodes. Regular OpenShift worker nodes get the openshift-node profile. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1498213
* | Merge pull request #5643 from mtnbikenc/refactor-certificatesOpenShift Merge Robot2017-10-043-10/+2
|\ \ | |/ |/| | | | | | | | | | | | | Automatic merge from submit-queue. Refactor certificate playbooks for checkpointing The recent breakout of the certificate playbooks resulted in the certificate portion of the install to be outside of the component checkpoint. This PR moves the certificate playbooks inside their respective config.yml playbook. Removes an unused tasks file from the openshift_named_certificates role.
| * Move master cert playbooks into master config pathRussell Teague2017-10-033-10/+2
| |
* | Merge pull request #5621 from abutcher/scaleup-portal-netOpenShift Merge Robot2017-10-031-1/+7
|\ \ | |/ |/| | | | | | | | | | | | | Automatic merge from submit-queue. Ensure openshift.common.portal_net updated during scaleup. https://bugzilla.redhat.com/show_bug.cgi?id=1451023 This fact is set in `initialize_facts.yml` at the beginning of scaleup so make sure that we update this fact if we read a different value from the first master's config file.
| * Ensure openshift.common.portal_net updated during scaleup.Andrew Butcher2017-10-021-1/+7
| |
* | Separate certificate playbooks.Andrew Butcher2017-10-024-9/+28
|/
* Remove oo_option facts.Andrew Butcher2017-09-291-24/+0
|
* Merge pull request #5508 from sdodson/disable-image-streamsOpenShift Merge Robot2017-09-281-1/+1
|\ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow examples management to be disabled By setting openshift_install_examples=false the image stream and quick start templates will not be installed https://trello.com/c/zLaSgxig/436-2-customers-need-a-way-to-opt-out-of-openshift-ansible-template-and-imagestream-mangement Fixes #5061
| * Allow examples management to be disabledScott Dodson2017-09-221-1/+1
| |
* | OpenShift-Ansible Installer CheckpointingRussell Teague2017-09-274-0/+267
| | | | | | | | | | | | | | | | | | | | | | - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install
* | Add booleans to prevent unwanted install of nuage roles.Michael Gugino2017-09-221-0/+2
|/ | | | | | | | | | Recently, some role dependencies were removed from meta depends into playbooks. Particularly, the nuage role requires several roles. Currently, only the nuage_master role requires openshift_use_nuage to be true. This commit requires the other nuage roles to reference the variable openshift_use_nuage before install.
* Merge pull request #5371 from ingvagabund/consolidate-etcd-certs-rolesOpenShift Merge Robot2017-09-211-0/+3
|\ | | | | | | | | | | | | Automatic merge from submit-queue consolidate etcd certs roles This is a starter for consolidation of all etcd like roles into a single `etcd` action-based role. I have intentionally started with the simplest one to demonstrate the steps needed to make it so and to make the review easy enough for everyone.
| * Consolidate etcd certs rolesJan Chaloupka2017-09-181-0/+3
| | | | | | | | | | | | | | This is a part of the etcd_ like role consolidationi into an action-based role. As part of the consilidation some roles have been removed and some replaced by include_role module. Resulting in reorder and shift of role dependencies from a role into a play.
* | Merge pull request #5473 from abutcher/scaleup-network-valuesScott Dodson2017-09-212-0/+30
|\ \ | | | | | | Set network facts using first master's config during scaleup.
| * | Set network facts using first master's config during scaleup.Andrew Butcher2017-09-202-0/+30
| |/
* / Cleanup old deployment typesMichael Gugino2017-09-202-3/+8
|/ | | | | | | | | | | Previously, openshift-ansible supported various types of deployments using the variable "openshift_deployment_type" Currently, openshift-ansible only supports two deployment types, "origin" and "openshift-enterprise". This commit removes all logic and references to deprecated deployment types.
* pull openshift_master deps out into a playJan Chaloupka2017-09-131-15/+22
|
* Correct include path to not follow symlinkRussell Teague2017-09-081-1/+1
|
* Merge pull request #5305 from mtnbikenc/breakout-master-additionalOpenShift Bot2017-09-071-3/+0
|\ | | | | Merged by openshift-bot
| * Move master additional config out of baseRussell Teague2017-09-051-3/+0
| |
* | Remove openshift-commonMichael Gugino2017-09-062-5/+5
|/ | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* Break out master config into stand-alone playbookRussell Teague2017-09-012-0/+26
| | | | | | | | | Added byo/openshift-master/config.yml as a new entry point for performing master installation. Excluder disable/enable for master has been moved to common/openshift-master/config.yml to follow a standard pattern that could be used for both installation and scaleup playbooks.
* Break out node config into stand-alone playbookRussell Teague2017-08-312-20/+16
| | | | | | | | | | Added byo/openshift-node/config.yml as a new entry point for performing node installation. This playbook must be run after masters have already been deployed. Excluder disable/enable for both nodes and masters has been moved their respective config.yml. This created a common pattern that could be used for both installation and scaleup playbooks.
* Move firewall install and fix scaleup playbooksRussell Teague2017-08-292-17/+1
|
* Remove unsupported playbooks and utilitiesRussell Teague2017-08-251-23/+0
|
* Remove remaining references to openshift-master.serviceClayton Coleman2017-08-081-5/+0
| | | | Prevents playbooks from accidentally restarting the master service.
* Use existing OPENSHIFT_DEFAULT_REGISTRY setting during masters scaleupTim Bielawa2017-07-281-1/+54
| | | | | | | | | | | | | | | Fixes a bug which reported that AFTER a cluster upgrade from OCP 3.5 to 3.6, any masters which are later added via the scaleup playbooks are setting a value for OPENSHIFT_DEFAULT_REGISTRY which is inconsistent with the already configured masters. * OPENSHIFT_DEFAULT_REGISTRY value is saved from oo_first_master * The new scaleup master has a fact set noting it is a scaleup host * The saved OPENSHIFT_DEFAULT_REGISTRY value is used instead of the default for 3.6, which is to use a hard-coded registry value of 'docker-registry.default.svc:5000' Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1469336
* Default an empty list for etcd_to_config if not thereTim Bielawa2017-07-211-1/+1
| | | | | | Also add filter names of filters that failed me for to their error messages so you can figure out which filter threw an exception when you're debugging log files.
* If proxy in effect, add etcd host IP addresses to NO_PROXY list on mastersTim Bielawa2017-07-211-0/+3
| | | | Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1466783
* increase implicit 300s default timeout to explicit 600sJan Chaloupka2017-06-282-0/+2
|
* Set clean install and etcd storage on first master to fix scaleupScott Dodson2017-06-231-20/+19
| | | | Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1464011
* Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-2/+13
| | | | | This would be the case if for instance they'd upgraded and then migrated.
* etcd v3 for clean installsScott Dodson2017-06-161-0/+10
| | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* openshift-master: set r_etcd_common_etcd_runtimeGiuseppe Scrivano2017-06-061-0/+1
| | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Rework openshift_excluders roleRussell Teague2017-05-161-8/+8
|
* run excluders over selected set of hosts during control_plane/node upgradeJan Chaloupka2017-05-031-2/+14
| | | | Disable/reset excluders over requested hosts
* Normalizing groups.Kenny Woodson2017-05-011-1/+1
|