summaryrefslogtreecommitdiff
path: root/playbooks/common
AgeCommit message (Collapse)Author
2017-10-10Force reconciliation of role for 3.6Simo Sorce
This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code. Signed-off-by: Simo Sorce <simo@redhat.com>
2017-10-10Remove etcd health checkScott Dodson
2017-10-10Separate tuned daemon setup into a role.Jiri Mencak
Currently, profiles for the tuned daemon are set only for OpenShift node(s). This excludes the OpenShift loadbalancer. As a result, ARP cache limits on loadbalancers are not raised. This causes problems with HA setups where loadbalancers serve 1k+ OpenShift nodes. This commit ensures the openshift-control-plane role is applied to loadbalancers, masters and OpenShift infra nodes. Regular OpenShift worker nodes get the openshift-node profile. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1498213
2017-10-09Merge pull request #5698 from abutcher/servinginfo-client-caOpenShift Merge Robot
Automatic merge from submit-queue. Bug 1493276: Setting servingInfo.clientCA to ca-bundle.crt can cause unwanted client cert popups in browser when hitting console https://bugzilla.redhat.com/show_bug.cgi?id=1493276
2017-10-09Merge pull request #5682 from tbielawa/openshift_managementScott Dodson
Rename openshift_cfme role to openshift_management
2017-10-09Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher
2017-10-06Rename openshift_cfme role to openshift_managementTim Bielawa
2017-10-06Switch to configmap leader election on 3.7 upgradeMonis Khan
This change sets the controllerConfig.election.lockName to openshift-master-controllers on a 3.7 upgrade. This is the default in a new 3.7 cluster. Important excerpt from the docs inside the origin codebase (slightly modified): There are two modes for lease operation - a legacy mode that directly connects to etcd, and the preferred mode which coordinates on a configmap or endpoint in the kube-system namespace. Because legacy mode and the new mode do not coordinate on the same key, an upgrade must stop all controllers before changing the configuration and starting controllers with the new config. Signed-off-by: Monis Khan <mkhan@redhat.com>
2017-10-06migrate embedded etcd to external etcdJan Chaloupka
2017-10-06rebase on masterAdam Miller
Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
2017-10-06Add fedora compatibilityAdam Miller
- don't check pkg versions on Fedora, it won't work; they move faster than RHEL and it's not realistic to maintain that package list. - handle differences between yum and dnf pkgspec for excluder - work-around for a bug in dnf https://bugzilla.redhat.com/show_bug.cgi?id=1199432 - make requirement verify one play, don't run unnecessary checks on Fedora
2017-10-05Merge pull request #5336 from tbielawa/cfme_4.6OpenShift Merge Robot
Automatic merge from submit-queue. Cfme 4.6 # Description * Implements support for **CFME 4.6** in OCP 3.7 * **Replaces** the Tech Preview CFME 4.5 release included in OCP 3.6 * Does not support graceful migrations from the CFME 4.5 tech preview release # References * [Trello - (5) Integrate CFME 4.6 into OCP Installation](https://trello.com/c/Rzfn5Qa8/380-5-integrate-cfme-46-into-ocp-installation) Ensure the following RFE/Errors do not happen again - [x] #4555 - Error creating the CFME user - [x] #4556 - Error in PV template evaluation - [x] #4822 - Changing `maxImagesBulkImportedPerRepository` parameter - [x] #4568 - Add NFS directory support # Features Ensure the following features are configurable in the role - [x] POC deployments can easily default to NFS storage - [ ] Production/Cloud deployments can use automatic storage providers - [ ] Able to select between podified vs. external PostgreSQL database (podified uses configured storage mechanism) - [x] Template resource requests can be overridden for POC deployments
2017-10-05Merge pull request #5605 from mgugino-upstream-stage/build-provision-splitOpenShift Merge Robot
Automatic merge from submit-queue. Build provision split Make provisioning steps more reusable Reorganizing and making some of the plays more reusable. Depends-on: https://github.com/openshift/openshift-ansible/pull/5565
2017-10-04Merge pull request #5636 from ↵OpenShift Merge Robot
mgugino-upstream-stage/limit-openshift-version-hosts Automatic merge from submit-queue. Limit hosts that run openshift_version role Currently, the openshift_version role is run against the oo_all_hosts group. This causes the dependencies, such as openshift_docker and docker, to be run against host groups that were not intended, such as nfs. This commit explicitly limits the openshift_version role to run only against masters, nodes, and etcd host groups. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497144
2017-10-04Merge pull request #5643 from mtnbikenc/refactor-certificatesOpenShift Merge Robot
Automatic merge from submit-queue. Refactor certificate playbooks for checkpointing The recent breakout of the certificate playbooks resulted in the certificate portion of the install to be outside of the component checkpoint. This PR moves the certificate playbooks inside their respective config.yml playbook. Removes an unused tasks file from the openshift_named_certificates role.
2017-10-04Allow checkpoint status to work across all groupsRussell Teague
2017-10-04Hooks for installing CFME during full openshift installationTim Bielawa
2017-10-04Import upstream templates. Do the work. Validate parameters.Tim Bielawa
2017-10-04CFME 4.6 work begins. CFME 4.5 references added to the release-3.6 branchTim Bielawa
2017-10-03Merge pull request #5632 from ↵OpenShift Merge Robot
mgugino-upstream-stage/limit-version-upgrade-masters Automatic merge from submit-queue. Limit base-package install during master upgrades Currently, openshift_version installs RPM packages on all nodes and masters to aid in determining and setting the proper version across the cluster. This commit limits the host groups to only masters during upgrade_control_plane plays. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
2017-10-03Move node cert playbook into node config pathRussell Teague
2017-10-03Move master cert playbooks into master config pathRussell Teague
2017-10-03Move etcd cert playbooks into etcd config pathRussell Teague
2017-10-03Merge pull request #5621 from abutcher/scaleup-portal-netOpenShift Merge Robot
Automatic merge from submit-queue. Ensure openshift.common.portal_net updated during scaleup. https://bugzilla.redhat.com/show_bug.cgi?id=1451023 This fact is set in `initialize_facts.yml` at the beginning of scaleup so make sure that we update this fact if we read a different value from the first master's config file.
2017-10-03Limit hosts that run openshift_version roleMichael Gugino
Currently, the openshift_version role is run against the oo_all_hosts group. This causes the dependencies, such as openshift_docker and docker, to be run against host groups that were not intended, such as nfs. This commit explicitly limits the openshift_version role to run only against masters, nodes, and etcd host groups. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497144
2017-10-03Merge pull request #5630 from abutcher/etcd-scaleup-targetOpenShift Merge Robot
Automatic merge from submit-queue. Use etcd_ip when communicating with the cluster as a peer in etcd scaleup. We can't communicate with the hostname here since etcd will be [configured to listen to its IP address](https://github.com/openshift/openshift-ansible/blob/ead22bb1c3b6d6366502b14b97b7aae5605f8a58/roles/etcd/defaults/main.yaml#L69). Fixes https://github.com/openshift/openshift-ansible/issues/5620
2017-10-03Merge pull request #5614 from mtnbikenc/fix-prometheusOpenShift Merge Robot
Automatic merge from submit-queue. Fix Prometheus byo entry point Adds the std_include.yml playbook to the byo entrypoint and moves the conditional install to the openshift_hosted.yml portion of an install.
2017-10-02Limit base-package install during master upgradesMichael Gugino
Currently, openshift_version installs RPM packages on all nodes and masters to aid in determining and setting the proper version across the cluster. This commit limits the host groups to only masters during upgrade_control_plane plays. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1495107
2017-10-02Use etcd_ip when communicating with the cluster as a peer in etcd scaleup.Andrew Butcher
2017-10-02Ensure openshift.common.portal_net updated during scaleup.Andrew Butcher
2017-10-02Make provisioning steps more reusableMichael Gugino
Reorganizing and making some of the plays more reusable.
2017-10-02Separate certificate playbooks.Andrew Butcher
2017-10-02Fix Prometheus byo entry pointRussell Teague
2017-09-30Merge pull request #5449 from abutcher/wildcard-router-cert-redeployOpenShift Merge Robot
Automatic merge from submit-queue. Bug 1490186: Router pod not running after router certificates redeployment This carries https://github.com/openshift/openshift-ansible/pull/5417. More of the router cert redeploy logic could be moved into the `openshift_hosted` role with a flag. I may pull those over. https://bugzilla.redhat.com/show_bug.cgi?id=1490186
2017-09-30Merge pull request #5593 from ingvagabund/block-upgrade-if-etcd3-not-setJan Chaloupka
block 3.6->3.7 upgrade if storage backend is not set to etcd3
2017-09-29Merge pull request #5565 from mgugino-upstream-stage/provisioning-centos-supportOpenShift Merge Robot
Automatic merge from submit-queue. Changes necessary to support AMI building Currently, AMI building does not work. These changes implement the necessary steps to build an AMI for usage as a 'golden node image'.
2017-09-29Include openshift_hosted when redeploying router certificates to handle ↵Andrew Butcher
auto-generated wildcard certificate or custom openshift_hosted_router_certificate.
2017-09-29Check for router service annotations when redeploying router certificates.Andrew Butcher
2017-09-29Remove oo_option facts.Andrew Butcher
2017-09-29block 3.6->3.7 upgrade if storage backend is not set to etcd3Jan Chaloupka
2017-09-29move health-checks and control-plane-verification before excludersJan Chaloupka
2017-09-28Merge pull request #5559 from mgugino-upstream-stage/readd-ent-registryOpenShift Merge Robot
Automatic merge from submit-queue. Migrate enterprise registry logic to docker role Currently, the enterprise registry to forcefully added in openshift_facts. Recently, the docker role has been modified to consume registry variables directly, bypassing openshift_facts. This commit cleans up unused code in openshift_facts, and migrates enterprise registry logic to the docker role. Fixes: https://github.com/openshift/openshift-ansible/issues/5557
2017-09-28Changes necessary to support AMI buildingMichael Gugino
Currently, AMI building does not work. These changes implement the necessary steps to build an AMI for usage as a 'golden node image'.
2017-09-28Merge pull request #5508 from sdodson/disable-image-streamsOpenShift Merge Robot
Automatic merge from submit-queue. Allow examples management to be disabled By setting openshift_install_examples=false the image stream and quick start templates will not be installed https://trello.com/c/zLaSgxig/436-2-customers-need-a-way-to-opt-out-of-openshift-ansible-template-and-imagestream-mangement Fixes #5061
2017-09-28Merge pull request #5527 from mtnbikenc/installer-checkpointOpenShift Merge Robot
Automatic merge from submit-queue. Installer checkpointing This pull request adds an Ansible callback plugin to allow for 'checkpointing' the status of the OpenShift-Ansible installer. The installer is divided up into phases and each phase will start with a status of 'Not Started'. As the phase is performed the status will be updated to 'In Progress' and finally 'Complete'. Should the install fail or complete successfully, the callback plugin will report the status of all phases after the PLAY RECAP. The INSTALLER STATUS is also written to the Ansible log file. https://trello.com/c/VNEvT2Fo Changes: - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install Example playbook output: ``` <- snip -> PLAY RECAP *********************************************************************************************************************************** ec2-34-207-180-218.compute-1.amazonaws.com : ok=158 changed=16 unreachable=0 failed=0 ec2-52-87-169-12.compute-1.amazonaws.com : ok=469 changed=74 unreachable=0 failed=0 ec2-52-90-209-20.compute-1.amazonaws.com : ok=157 changed=17 unreachable=0 failed=0 localhost : ok=24 changed=0 unreachable=0 failed=0 INSTALLER STATUS ***************************************************************************************************************************** Initialization : Complete etcd Install : Complete NFS Install : Not Started Load balancer Install : Not Started Master Install : Complete Master Additional Install : Complete Node Install : Complete GlusterFS Install : Not Started Hosted Install : Complete Metrics Install : Not Started Logging Install : Not Started Service Catalog Install : Not Started ```
2017-09-27Merge pull request #5549 from ingvagabund/fix-etcd-backup-tagOpenShift Merge Robot
Automatic merge from submit-queue evaluate etcd_backup_tag variable Bug: 1495545
2017-09-27Merge pull request #5518 from ingvagabund/set-quota-backend-bytes-explicitlyOpenShift Merge Robot
Automatic merge from submit-queue set the etcd backend quota to 4GB by default Bug: 1492891
2017-09-27OpenShift-Ansible Installer CheckpointingRussell Teague
- Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install
2017-09-27Migrate enterprise registry logic to docker roleMichael Gugino
Currently, the enterprise registry to forcefully added in openshift_facts. Recently, the docker role has been modified to consume registry variables directly, bypassing openshift_facts. This commit cleans up unused code in openshift_facts, and migrates enterprise registry logic to the docker role. Fixes: https://github.com/openshift/openshift-ansible/issues/5557
2017-09-27evaluate etcd_backup_tag variableJan Chaloupka
generated by cgit v1.2.3 (git 2.39.1) at 2025-12-16 03:52:41 +0000