summaryrefslogtreecommitdiffstats
path: root/playbooks
Commit message (Collapse)AuthorAgeFilesLines
* Fix preupgrade authorization objects are in sync minor versionsMichael Gugino2017-11-082-1/+6
| | | | | | | | | | | | | | Currently, we check that upgrade target is less than 3.8, but this will break for minor upgrades. This commit set's a fact early in the upgrade process to deterime what the currently installed version on the first master is. This fact is used to determine if our currently installed version is less than 3.7. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508301
* Remove debug code that was mistakenly committedZohar Galor2017-11-081-9/+0
| | | | | This also causes a failure if nfs block is not defined, because the condition is missing. Anyway this shouldn't have been committed.
* Merge pull request #6031 from abutcher/temporary-servinginfo-clientcaOpenShift Merge Robot2017-11-063-5/+30
|\ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during rolling CA redeployment. This PR temporarily configures master `servingInfo.clientCA` as `client-ca-bundle.crt` during CA redeploy so that clients referencing the old OpenShift CA can continue to function until all cluster certificates have been replaced and `servingInfo.clientCA` is reset to `ca.crt`. `client-ca-bundle.crt` is a new bundle created by the `openshift_ca` role which contains old and new OpenShift CA certificates. https://bugzilla.redhat.com/show_bug.cgi?id=1509124 Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1493276
| * Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during ↵Andrew Butcher2017-11-063-5/+30
| | | | | | | | rolling CA redeployment.
* | Merge pull request #6027 from ↵OpenShift Merge Robot2017-11-062-2/+12
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/retry-restart-master-controllers Automatic merge from submit-queue. Retry restarting master controllers Currently, master controller services may fail to restart if master api services are not fully initialized. This commit enables retry of master controllers. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1509837
| * | Retry restarting master controllersMichael Gugino2017-11-062-2/+12
| |/ | | | | | | | | | | | | | | | | Currently, master controller services may fail to restart if master api services are not fully initialized. This commit enables retry of master controllers. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1509837
* / Fix preupgrade authorization objects are in syncMichael Gugino2017-11-061-1/+1
|/ | | | | | | | | | | Currently, this task is executed based on openshift_version. openshift_version is based on the upgrade target, thus not the currently install versions. This commit ensures that the task executes as intended. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508301
* Revert "Bootstrap enhancements."Clayton Coleman2017-11-053-8/+3
|
* Merge pull request #5991 from tbielawa/gate_cfmeOpenShift Merge Robot2017-11-041-1/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. management: users must acknowledge use of beta software Adds a new role variable, openshift_management_install_beta. This variable defaults to false. The value of this variable is checked during the validation phase. * If true, the install will not continue. * If false, The user is presented with an informative message letting them know this is beta software and there is low/no support at this time. The installation will abort and instruct the user how to continue.
| * management: enterprise users must acknowledge use of beta softwareTim Bielawa2017-11-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Adds a new role variable, openshift_management_install_beta. This variable defaults to false. The value of this variable is checked during the validation phase for enterprise deployment types. * If true, the install will not continue. * If false, The user is presented with an informative message letting them know this is beta software and there is low/no support at this time. The installation will abort and instruct the user how to continue.
* | Merge pull request #6006 from mgugino-upstream-stage/elb-v2OpenShift Merge Robot2017-11-033-3/+8
|\ \ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Bootstrap enhancements. This includes the elb work.
| * | Bootstrap enhancements.Kenny Woodson2017-11-033-3/+8
| | |
* | | Merge pull request #5959 from sdodson/sc-asb-tsb-on-by-defaultOpenShift Merge Robot2017-11-031-1/+1
|\ \ \ | |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Enable SC, ASB, TSB by default It was decided that SC, ASB, and TSB should be installed by default. This will not install the components on an upgrade from 3.6 to 3.7, that will require that you run the sc playbook on your own. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1508085
| * | Enable SC, ASB, TSB by defaultScott Dodson2017-11-021-1/+1
| |/ | | | | | | This will not install the components on an upgrade.
* | Merge pull request #5995 from ashcrow/docker-gc-daemonsetOpenShift Merge Robot2017-11-032-0/+12
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. openshift_hosted: Add docker-gc Two new inventory variables have been created: - ``openshift_crio_enable_docker_gc``: Enable docker_gc daemon set - ``openshift_crio_docker_gc_node_selector``: Optional dictionary to use node selector When ``openshift_crio_enable_docker_gc`` and ``openshift_use_crio`` are both true then ``docker_gc`` daemonset will be created along with adding a ``docker-gc`` sa.
| * | openshift_hosted: Add docker-gcSteve Milner2017-11-022-0/+12
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | Two new inventory variables have been created: - openshift_crio_enable_docker_gc: Enable docker_gc daemon set - openshift_crio_docker_gc_node_selector: Optional dictionary to use node selector When openshift_crio_enable_docker_gc and openshift_use_crio are both true then dockergc daemonset will be created along with adding a dockergc sa. Signed-off-by: Steve Milner <smilner@redhat.com>
* / Correct groupname during upgrade_control_plane playMichael Gugino2017-11-031-1/+1
|/ | | | | | | | | Currently, upgrade_control_plane calls tasks meant for master on etcd group. This commit corrects the groupname. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1508734
* Stating that certificate it is required when doing SSL on ELB.Kenny Woodson2017-10-311-0/+1
|
* Merge pull request #5924 from smarterclayton/bootstrap_cleanupOpenShift Merge Robot2017-10-311-0/+2
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. GCP cannot use growpart utils from AWS due to conflicting package Allow cloud provider specific packages to be specified. Also, fix a wait condition in openshift_gcp to allow masters to be bootstrapped nodes. @kwoodson
| * GCP cannot use AWS growpart packageClayton Coleman2017-10-301-0/+2
| | | | | | | | Make the required package optional
* | Merge pull request #5722 from qinpingli/sc_openstackOpenShift Merge Robot2017-10-311-1/+1
|\ \ | |/ |/| | | | | | | | | Automatic merge from submit-queue. Create default storageclass for cloudprovider openstack With this patch, a default storageclass will be created on openstack cloudprovider after installation.
| * Create default storageclass for cloudprovider openstackPing Qin2017-10-271-1/+1
| |
* | Merge pull request #5915 from sdodson/bz1507061OpenShift Merge Robot2017-10-301-1/+1
|\ \ | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Correctly install cockpit Seems this was changed inadvertantly in #5378 Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1507061
| * | Correctly install cockpitScott Dodson2017-10-271-1/+1
| | | | | | | | | | | | Seems this was changed inadvertantly in #5378
* | | Merge pull request #5720 from sdodson/issue5108Scott Dodson2017-10-301-0/+10
|\ \ \ | | | | | | | | Add dm_thin_pool for gluster use
| * | | Add dm_thin_pool for gluster useScott Dodson2017-10-301-0/+10
| | | |
* | | | Merge pull request #5823 from mtnbikenc/fix-initialize_factsScott Dodson2017-10-271-0/+1
|\ \ \ \ | | | | | | | | | | Force include_role to static for loading openshift_facts module
| * | | | Force include_role to static for loading openshift_facts moduleRussell Teague2017-10-191-0/+1
| | | | |
* | | | | Merge pull request #5742 from mtnbikenc/refactor-checksScott Dodson2017-10-275-33/+59
|\ \ \ \ \ | | | | | | | | | | | | 1504593 Refactor health check playbooks
| * | | | | Refactor health check playbooksRussell Teague2017-10-125-33/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Standardize play/tasks naming - Move install checks to separate playbook with checkpointing - Correct 'docker_storage' tags
* | | | | | Merge pull request #5875 from mgugino-upstream-stage/fix-upgrade-config-hookMichael Gugino2017-10-273-2/+6
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | This previously passed all CI tests, merge queue broke last night. Merging, this is a blocker bug.
| * | | | | Add master config upgrade hook to upgrade-all playsMichael Gugino2017-10-253-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, in 1.5, 3.6, 1.7 upgrade-all plays, control plane upgrades are not called correctly. This commit ensures the master config hook is appropriately applied during these upgrades to match the steps in control plane only upgrades. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1486054
* | | | | | Merge pull request #5885 from kwoodson/fix_image_cleanScott Dodson2017-10-262-0/+13
|\ \ \ \ \ \ | | | | | | | | | | | | | | Moving removal of unwanted artifacts to image_prep.
| * | | | | | Moving removal of unwanted artifacts to image_prep.Kenny Woodson2017-10-252-0/+13
| |/ / / / /
* | | | | | Merge pull request #5900 from kwoodson/cert_key_path_fixScott Dodson2017-10-262-3/+3
|\ \ \ \ \ \ | | | | | | | | | | | | | | Documentation fix for openshift_aws_iam_cert_key_path
| * | | | | | Fixing documentation for the cert_key_path variable name.Kenny Woodson2017-10-262-3/+3
| | |_|_|_|/ | |/| | | |
* | | | | | Merge pull request #5793 from tbielawa/openshift_management_moduleOpenShift Merge Robot2017-10-266-3/+52
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Openshift MGMT Fixes and Container Provider Integration Various small fixes/polishing to the openshift management role. * Updated uninstall script * Automatically add cluster to new management deployment * Scaffolding for scripts to add *N* number of OCP/Origin clusters as Container Providers in any arbitrary MIQ/CFME instance * Fix mis-named task in `openshift_nfs/create_export` * Uninstall playbook only runs on one master
| * | | | | Fix lintTim Bielawa2017-10-201-10/+0
| | | | | |
| * | | | | Move add_many_container_providers.yml to playbooks/byo/openshift-management ↵Andrew Butcher2017-10-202-0/+47
| | | | | | | | | | | | | | | | | | | | | | | | with a noop task include to load filter plugins.
| * | | | | Management Cleanup and Provider IntegrationTim Bielawa2017-10-204-3/+15
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add container provider integration * General cleanup * Poll until service fully starts * Add notes on multiple-provider additions
* | | | | Merge pull request #5830 from abutcher/registry-deploymentOpenShift Merge Robot2017-10-251-2/+0
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Ensure deployment_subtype is set within openshift_sanitize_inventory. https://bugzilla.redhat.com/show_bug.cgi?id=1504021
| * | | | | Ensure deployment_subtype is set within openshift_sanitize_inventory.Andrew Butcher2017-10-201-2/+0
| |/ / / /
* | | | | Merge pull request #5850 from mgugino-upstream-stage/remove-base-packageScott Dodson2017-10-256-16/+0
|\ \ \ \ \ | | | | | | | | | | | | Remove base package install
| * | | | | Remove base package installMichael Gugino2017-10-236-16/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, base atomic-openshift package is installed for versioning. This doesn't appear to be necessary. This commit removes this step. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1504196
* | | | | | Merge pull request #5810 from zgalor/refactor-prom-entryOpenShift Merge Robot2017-10-251-0/+20
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Add installer checkpoint for prometheus
| * | | | | Add installer checkpoint for prometheusZohar Galor2017-10-191-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | Add checkpoint steps for full cluster install and individual entry point playbook.
* | | | | | Merge pull request #5814 from mgugino-upstream-stage/docker-auth-upgradesOpenShift Merge Robot2017-10-241-0/+6
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Enable oreg_auth credential replace during upgrades Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
| * | | | | | Enable oreg_auth credential replace during upgradesMichael Gugino2017-10-191-0/+6
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
* | | | | | Merge pull request #5838 from ↵Jan Chaloupka2017-10-241-1/+1
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | ingvagabund/strip-dash-when-comparing-versions-python3 strip dash when comparing version with Python3
| * | | | | | strip dash when comparing version with Python3Jan Chaloupka2017-10-231-1/+1
| | | | | | |