summaryrefslogtreecommitdiffstats
path: root/playbooks/common
Commit message (Collapse)AuthorAgeFilesLines
* Infra node supportWesley Hearn2015-07-232-9/+9
|
* Merge pull request #264 from lhuard1A/rhel_subscriptionThomas Wiest2015-07-171-0/+5
|\ | | | | Implement RHEL subscription for enterprise deployment type
| * Implement RHEL subscription for enterprise deployment typeLénaïc Huard2015-07-171-0/+5
| |
* | Initial HA masterJason DeTiberus2015-07-171-5/+24
|/ | | | | | | | | | | | | | | | | | | | | | - Ability to specify multiple masters - configures the CA only a single time on the first master - creates and distributes additional certs for additional master hosts - Depending on the status of openshift_master_cluster_defer_ha (defaults to False) one of two actions are taken when multiple masters are defined 1. If openshift_master_cluster_defer_ha is true a. Certs/configs for all masters are deployed b. openshift-master service is only started and enabled on the master c. HA configuration is expected to be handled by the user manually after the completion of the playbook run. 2. If oepnshift_master_cluster_defer_ha is false or undefined a. Certs/configs for all masters are deployed b. a Pacemaker/RHEL HA cluster is configured i. VIPs are configured based on the values of openshift_master_cluster_vip and openshift_master_cluster_plublic_vip ii. The openshift-master service is configured as an active/passive cluster service
* Playbook updates for clustered etcdJason DeTiberus2015-07-105-31/+280
| | | | | | | | | | | | | | | | | | | | | - Add support to bin/cluster for specifying etcd hosts - defaults to 0, if no etcd hosts are selected, then configures embedded etcd - Updates for the byo inventory file for etcd and master as node by default - Consolidation of cluster logic more centrally into common playbook - Added etcd config support to playbooks - Restructured byo playbooks to leverage the common openshift-cluster playbook - Added support to common master playbook to generate and apply external etcd client certs from the etcd ca - start of refactor for better handling of master certs in a multi-master environment. - added the openshift_master_ca and openshift_master_certificates roles to manage master certs instead of generating them in the openshift_master role - added etcd host groups to the cluster update playbooks - aded better handling of host groups when they are either not present or are empty. - Update AWS readme
* Etcd role updates and playbook updatesJason DeTiberus2015-07-104-53/+75
| | | | | | | | | | | | | | | | | | | | | - fix firewall conflict issues with co-located etcd and openshift hosts - added os_firewall dependency to etcd role - updated etcd template to better handle clustered and non-clustered installs - added etcd_ca role - generates a self-signed cert to manage etcd certificates, since etcd peer certificates are required to be client and server certs and the openshift ca will only generate client or server certs (not one authorized for both). - renamed openshift_etcd_certs role to etcd_certificates and updated it to manage certificates generated from the CA managed by the etcd_ca role - remove hard coded etcd_port in openshift_facts - updates for the openshift-etcd common playbook - removed etcd and openshift-etcd playbooks from the byo playbooks directory - added a common playbook for setting etcd launch facts - added an openshift-etcd common service playbook - removed unused variables - fixed tests for embedded_{etcd,dns,kube} in openshift_master - removed old workaround for reloading systemd units
* Add etcd role that builds out basic etcd clusterScott Dodson2015-07-103-0/+108
| | | | | | - Add initial etcd role - Add etcd playbook to create etcd client certs - Hookup master to etcd
* Adding ansible upstream sequence plugin to work around the bug in 1.9.2Jason DeTiberus2015-07-103-0/+3
|
* Bug 1241342 - Adding retry logic to handle node registration race conditionsBrenton Leanhardt2015-07-101-0/+3
|
* Using openshift.common.hostname instead of openshift_hostname for ↵Brenton Leanhardt2015-06-301-2/+2
| | | | determining node scheduleability
* The manage_node commands should only run on the first masterBrenton Leanhardt2015-06-291-23/+13
|
* delegate_to doesn't appear to be thread safeBrenton Leanhardt2015-06-291-0/+25
|
* Add openshift_examples roleScott Dodson2015-06-221-0/+1
| | | | | | This role installs db-templates, image-streams, and quickstart-templates into /usr/share/openshift/examples on the master and then uses `oc create` to import them.
* Update for RC2 changesScott Dodson2015-06-161-4/+6
| | | | | | | | | | | | | Remove openshift-deployer.kubeconfig from master template Sync config template Update enterprise image names Switch to node auto registration Add deployer to list of serviceAccountConfig.managedNames Move package installation before registering facts change default kubeconfig location Change system:openshift-client to system:openshift-master Rename node cert/key/kubeconfig per openshift/origin#3160 Update references to /var/lib/openshift/openshift.local.certificates
* BugfixesScott Dodson2015-06-101-1/+1
| | | | | - Don't include ./ in the tarball we transfer to the nodes - Fixup node argument ordering
* Templatize configs and 0.5.2 changesJason DeTiberus2015-06-102-43/+41
| | | | | | | | | | | | | | | | | | | | | | - Templatize node config - Templatize master config - Integrated sdn changes - Updates for openshift_facts - Added support for node, master and sdn related changes - registry_url - added identity provider facts - Removed openshift_sdn_* roles - Install httpd-tools if configuring htpasswd auth - Remove references to external_id - Setting external_id interferes with nodes associating with the generated node object when pre-registering nodes. - osc/oc and osadm/oadm binary detection in openshift_facts Misc Changes: - make non-errata puddle default for byo example - comment out master in list of nodes in inventory/byo/hosts - remove non-error errors from fluentd_* roles - Use admin kubeconfig instead of openshift-client
* Accomodate upstream configuration changeScott Dodson2015-06-101-1/+1
| | | | | | | | | | - Master config and certificates are now in /etc/openshift/master - Node config is now in /etc/openshift/node - Several certificates have been renamed to accomodate a flattening of structure to accomodate secret storage - Add openshift_data_dir to ensure etcd and volumes are stored in /var/lib/openshift - Add openshift_generated_configs_dir
* add use_fluentd to openshift_factsJason DeTiberus2015-06-062-4/+8
| | | | | - Move use_fluentd into openshift_facts proper - default use_fluentd to False unless deployment_type == origin
* Infrastructure - Add service action to bin/clusterJhon Honce2015-06-032-0/+36
| | | | | * Add necessary playbooks/roles * Cleanup bin/cluster to meet new design guide lines
* * Rename create_services__master to g_svc_masterJhon Honce2015-06-011-7/+1
|
* * Make fluentd deployment optional with openshift_use_fluentdJhon Honce2015-06-012-2/+2
|
* Install fluentd on nodes and masterJhon Honce2015-05-292-0/+2
| | | | * Configure fluentd to aggragate container logs
* * Deploy services from common playbookJhon Honce2015-05-291-0/+14
|
* openshift_fact and misc fixesJason DeTiberus2015-05-061-3/+2
| | | | | | | | | | | | | | | | - Do not attempt to fetch file to same file location when playbooks are run locally on master - Fix for openshift_facts when run against a host in a VPC that does not assign internal/external hostnames or ips - Fix setting of labels and annotations on node instances and in openshift_facts - converted openshift_facts to use json for local_fact storage instead of an ini file, included code that should migrate existing ini users to json - added region/zone setting to byo inventory - Fix fact related bug where deployment_type was being set on node role instead of common role for node hosts
* Add vagrantfile and minor bugfixesJason DeTiberus2015-04-281-0/+4
| | | | | | | | - Add Vagrantfile for configuring a basic cluster - Add an initial readme for using vagrant - explicitly set connection: local and sudo: false for localhost actions in playbooks/common/openshift-node/config.yml - Fix permissions issue with openshift config file for non-root user
* Merge pull request #164 from detiber/bugFixRunOnMasterThomas Wiest2015-04-211-7/+10
|\ | | | | Fix common node config playbook when ansible is run on the first master
| * Fix common node config playbook when ansible is run on the first masterJason DeTiberus2015-04-201-7/+10
| |
* | Add TODO for making node certificate sync more efficientJason DeTiberus2015-04-201-0/+3
|/
* Configuration updates for latest builds and major refactorJason DeTiberus2015-04-1412-0/+179
Configuration updates for latest builds - Switch to using create-node-config - Switch sdn services to use etcd over SSL - This re-uses the client certificate deployed on each node - Additional node registration changes - Do not assume that metadata service is available in openshift_facts module - Call systemctl daemon-reload after installing openshift-master, openshift-sdn-master, openshift-node, openshift-sdn-node - Fix bug overriding openshift_hostname and openshift_public_hostname in byo playbooks - Start moving generated configs to /etc/openshift - Some custom module cleanup - Add known issue with ansible-1.9 to README_OSE.md - Update to genericize the kubernetes_register_node module - Default to use kubectl for commands - Allow for overriding kubectl_cmd - In openshift_register_node role, override kubectl_cmd to openshift_kube - Set default openshift_registry_url for enterprise when deployment_type is enterprise - Fix openshift_register_node for client config change - Ensure that master certs directory is created - Add roles and filter_plugin symlinks to playbooks/common/openshift-master and node - Allow non-root user with sudo nopasswd access - Updates for README_OSE.md - Update byo inventory for adding additional comments - Updates for node cert/config sync to work with non-root user using sudo - Move node config/certs to /etc/openshift/node - Don't use path for mktemp. addresses: https://github.com/openshift/openshift-ansible/issues/154 Create common playbooks - create common/openshift-master/config.yml - create common/openshift-node/config.yml - update playbooks to use new common playbooks - update launch playbooks to call update playbooks - fix openshift_registry and openshift_node_ip usage Set default deployment type to origin - openshift_repo updates for enabling origin deployments - also separate repo and gpgkey file structure - remove kubernetes repo since it isn't currently needed - full deployment type support for bin/cluster - honor OS_DEPLOYMENT_TYPE env variable - add --deployment-type option, which will override OS_DEPLOYMENT_TYPE if set - if neither OS_DEPLOYMENT_TYPE or --deployment-type is set, defaults to origin installs Additional changes: - Add separate config action to bin/cluster that runs ansible config but does not update packages - Some more duplication reduction in cluster playbooks. - Rename task files in playbooks dirs to have tasks in their name for clarity. - update aws/gce scripts to use a directory for inventory (otherwise when there are no hosts returned from dynamic inventory there is an error) libvirt refactor and update - add libvirt dynamic inventory - updates to use dynamic inventory for libvirt