summaryrefslogtreecommitdiffstats
path: root/playbooks
Commit message (Collapse)AuthorAgeFilesLines
* Contiv multi-master and other fixesNick Bartos2018-01-082-6/+9
| | | | | | | | | | | | | | | | | | | | | | | | Contiv's etcd was not being deployed correctly when using more than one master. To make it easier to manage, it has been moved into a k8s container. The api proxy was hardcoded to an old version (1.1.1), and in some environments would run into a docker error. This has been moved into a k8s container for easier management. The firewall was too permissive on several ports. Many were open to the world when they should have only been accessible inside the cluster. Many of the contiv role variables were not prefixed with 'contiv', which may end up clobbering variables from another role. Now all the contiv specific role variables start with 'contiv_'. The api proxy's default self-signed certificate was bundled with the role. This means someone with read-only MITM access and this key could decrypt traffic. Granted a user defined certificate from a trusted CA should be used in a production environment, it is still better to generate one in each environment when one is not provided.
* Merge pull request #6359 from spadgett/web-console-serverScott Dodson2018-01-066-0/+41
|\ | | | | Install web console server
| * Install web console serverSamuel Padgett2018-01-056-0/+41
| |
* | Merge pull request #6627 from sdodson/import_roleScott Dodson2018-01-0553-99/+99
|\ \ | | | | | | Migrate to import_role for static role inclusion
| * | Migrate to import_role for static role inclusionScott Dodson2018-01-0553-99/+99
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
* | | Merge pull request #6532 from jmencak/heat_stack-cnsOpenShift Merge Robot2018-01-052-1/+13
|\ \ \ | |/ / |/| | | | | | | | | | | | | | Automatic merge from submit-queue. OpenStack provisioning -- support cns. Initial support for CNS nodes during OpenShift on OpenStack provisioning.
| * | OpenStack provisioning -- support cns.Jiri Mencak2018-01-022-1/+13
| | |
* | | Merge pull request #6557 from mgugino-upstream-stage/delay-hosted-waitOpenShift Merge Robot2018-01-023-0/+43
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Move wait_for_pods to it's own play openshift_hosted Currently, both registry and router pods need to be polled for successful deployment. Somtimes this can take up to a minute. This commit attempts to deploy both pods before polling either. This should reduce the average wait time for polling pods by 50% as time spent polling the first will also allow the second pod to continue it's own deployment.
| * | | Move wait_for_pods to it's own play openshift_hostedMichael Gugino2017-12-213-0/+43
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, both registry and router pods need to be polled for successful deployment. Somtimes this can take up to a minute. This commit attempts to deploy both pods before polling either. This should reduce the average wait time for polling pods by 50% as time spent polling the first will also allow the second pod to continue it's own deployment.
* | | Merge pull request #6554 from mgugino-upstream-stage/bootstrap-to-include-roleMichael Gugino2018-01-021-0/+7
|\ \ \ | |/ / |/| | Remove bootstrap.yml from main.yml in openshift_node role
| * | Remove bootstrap.yml from main.yml in openshift_node roleMichael Gugino2017-12-211-0/+7
| | | | | | | | | | | | | | | | | | This commit utilizes include_role for bootstrapping the node instead of conditional include of tasks now that the node role has no meta includes that have tasks.
* | | Merge pull request #6550 from mbarnes/aws_provisioning_vars_exampleOpenShift Merge Robot2017-12-211-1/+1
|\ \ \ | |/ / |/| | | | | | | | | | | | | | Automatic merge from submit-queue. aws: Fix misnamed variable in provisioning_vars.yml.example This typo (?) in `provisioning_vars.yml.example` tripped me up while trying to run `provision_install.yml` using a configuration based on the example file.
| * | aws: Fix misnamed variable in provisioning_vars.yml.exampleMatthew Barnes2017-12-211-1/+1
| | |
* | | Merge pull request #6530 from mgugino-upstream-stage/init-task-trimMichael Gugino2017-12-2116-126/+71
|\ \ \ | | | | | | | | Move sanity_checks into custom action plugin
| * | | Remove references to deployment_typeMichael Gugino2017-12-2113-48/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Move openshift_deployment_type check into sanity_check action plugin. Remove compatibility for deployment_type. deployment_type has been deprecated for some time now.
| * | | Move validate_hosts to prerequisites.ymlMichael Gugino2017-12-204-31/+3
| | | | | | | | | | | | | | | | | | | | | | | | Move more checks outside of init/main.yml for speeding up upgrades and other operational plays that need to run.
| * | | Move sanity_checks into custom action pluginMichael Gugino2017-12-201-48/+12
| |/ / | | | | | | | | | | | | | | | | | | This commit moves sanity_checks tasks into a custom action plugin that is only run against a single host. This will result in a large reduction of tasks during initialization
* / / Fix container_runtime openshift_containerized_host_groupsMichael Gugino2017-12-212-2/+2
|/ / | | | | | | | | | | | | | | | | | | openshift_containerized_host_groups needs to be referenced via hostvars. This commit also updates tox ansible syntax checks to account for unavailability of hostsvars during syntax checks. Fixes: https://github.com/openshift/openshift-ansible/issues/6540
* | Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-2021-59/+63
| | | | | | | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* | Merge pull request #6524 from kwoodson/docker_storage_setup_overlayScott Dodson2017-12-203-0/+24
|\ \ | | | | | | Adding support for docker-storage-setup on overlay
| * | Adding support for docker-storage-setup on overlayKenny Woodson2017-12-193-0/+24
| | |
* | | Merge pull request #6469 from mgugino-upstream-stage/plugin-consolidateScott Dodson2017-12-1952-112/+78
|\ \ \ | |/ / |/| | Plugin consolidate
| * | Relocate filter plugins to lib_utilsMichael Gugino2017-12-1852-112/+78
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* / set repos after registration: convert to match task -> import_role model.Mark Lamourine2017-12-181-3/+11
|/
* Merge pull request #6489 from mgugino-upstream-stage/fix-repos-v2Michael Gugino2017-12-153-6/+6
|\ | | | | Fix rhel_subscribe boolean
| * Fix rhel_subscribe booleanMichael Gugino2017-12-153-6/+6
| | | | | | | | | | | | | | This commit fixes a variable name to it's correct name used in a when condition. Also makes use of 'is defined' consistent.
* | Merge pull request #6484 from mtnbikenc/tests-as-filtersRussell Teague2017-12-1516-44/+50
|\ \ | |/ |/| Deprecate using Ansible tests as filters
| * Deprecate using Ansible tests as filtersRussell Teague2017-12-1416-44/+50
| |
* | Merge pull request #6483 from mgugino-upstream-stage/fix-reposScott Dodson2017-12-144-5/+6
|\ \ | | | | | | Move repo and subscribe to prerequisites
| * | Move repo and subscribe to prerequisitesMichael Gugino2017-12-144-5/+6
| |/ | | | | | | | | This commit refactors some steps in rhel subscribe and moves repos.yml from init/main to prerequisites.
* | Merge pull request #5970 from mtnbikenc/fix-1506750OpenShift Merge Robot2017-12-141-7/+27
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. 1506750 Validate node hostname and IP address - Replaces use of `pause` with a `fail` task. `pause` only runs on one host, therefore the check was not run for all nodes - Adds check for valid openshift_ip Fixes 1506750 https://bugzilla.redhat.com/show_bug.cgi?id=1506750
| * | Validate node hostname and IP addressRussell Teague2017-12-131-7/+27
| | | | | | | | | | | | | | | | | | Fixes 1506750 https://bugzilla.redhat.com/show_bug.cgi?id=1506750
* | | Merge pull request #6463 from mgugino-upstream-stage/openshift-service-type-fixOpenShift Merge Robot2017-12-141-0/+1
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Add missing openshift_service_type Pull in openshift_facts to define the variable. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1525429
| * | Add missing openshift_service_typeMichael Gugino2017-12-131-0/+1
| |/ | | | | | | | | | | Pull in openshift_facts to define the variable. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1525429
* | Merge pull request #6404 from mazzystr/stablize_rhsmScott Dodson2017-12-141-0/+8
|\ \ | | | | | | Commit to stabilize RHSM operations. This code is derived from contrib
| * | Commit to stabalize RHSM operations. This code is derived from contribChris Callegari2017-12-141-0/+8
| | |
* | | Refactor node upgrade to include less serial tasksMichael Gugino2017-12-121-11/+22
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | This commit moves the pulling of images, packages, and updating config files into a non-serialized play. The serialized play is now in charge of marking unschedulable, draining, stopping and restarting services, and marking schedulable. If rpm install / container download takes 60s per host, this will save 3 hours and 10 minutes at 200 hosts per cluster and forks of 20 hosts.
* | Merge pull request #6451 from mgugino-upstream-stage/remove-empty-hosted-factsScott Dodson2017-12-121-1/+0
|\ \ | | | | | | Remove empty openshift_hosted_facts role
| * | Remove empty openshift_hosted_facts roleMichael Gugino2017-12-121-1/+0
| |/ | | | | | | This commit removes a now-empty role.
* / Refactor upgrade codepaths step 1Michael Gugino2017-12-1227-1342/+339
|/ | | | | | | | | | | | | | | | This commit refactors some upgrade code paths. Touched areas are: 1) Reduces usage of 'oo_all_hosts' in various places, especially when running upgrade_control_plane. 2) Reuses common code across the various upgrade* playbooks. 3) Moves docker upgrade checks into container_runtime_role. 4) Combines smaller playbooks and plays to reduce file sprawl.
* Merge pull request #6335 from kwoodson/node_groups_refactorScott Dodson2017-12-122-16/+23
|\ | | | | Node group management update.
| * Changing the node group format to a list.Kenny Woodson2017-12-112-16/+23
| |
* | Merge pull request #6381 from bogdando/dns_hostname_prefixesOpenShift Merge Robot2017-12-121-5/+16
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow 2 sets of hostnames for openstack provider Support private/public hostnames suffixes for DNS records. Real hostnames, Inventory variables, Nova servers and ansible hostnames will ignore the custom suffixes. Those are only for nsupdates sent to external DNS servers. Related change: add openshift_openstack_public_dns_domain to the role defaults to not rely on the group vars example only. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com> Co-authored-by: Tomas Sedovic <tsedovic@redhat.com>
| * | Allow 2 sets of hostnames for openstack providerBogdan Dobrelya2017-12-111-5/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support private/public hostnames suffixes for DNS records. Real hostnames, Inventory variables, Nova servers and ansible hostnames will ignore the custom suffixes. Those are only for nsupdates sent to external DNS servers. Related change: add openshift_openstack_public_dns_domain to the role defaults to not rely on the group vars example only. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com> Co-authored-by: Tomas Sedovic <tsedovic@redhat.com>
* | | Merge pull request #6433 from joelddiaz/example-inventory-master-portOpenShift Merge Robot2017-12-121-0/+1
|\ \ \ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. add openshift_master_api_port var to example inventory
| * | | add openshift_master_api_port var to example inventoryJoel Diaz2017-12-111-0/+1
| | |/ | |/| | | | | | | would get timeouts during master node installation without this setting
* | | Merge pull request #6414 from mgugino-upstream-stage/remove-embedded-etcdOpenShift Merge Robot2017-12-115-26/+1
|\ \ \ | |/ / |/| | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Remove unneeded embedded etcd logic Removing some remaining embedded etcd facts except for the migration plays.
| * | Remove unneeded embedded etcd logicMichael Gugino2017-12-085-26/+1
| | | | | | | | | | | | | | | Removing some remaining embedded etcd facts except for the migration plays.
* | | Merge pull request #6425 from joelddiaz/aws-readmeOpenShift Merge Robot2017-12-111-1/+1
|\ \ \ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. correct ansible-playbook command syntax
| * | | correct ansible-playbook command syntaxJoel Diaz2017-12-111-1/+1
| | | |
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-06 21:58:44 +0000