summaryrefslogtreecommitdiff
path: root/roles/docker
AgeCommit message (Collapse)Author
2017-12-01Implement container runtime roleMichael Gugino
2017-11-30retry package operationsLuke Meyer
When a package install/update fails due to network blips or other spotty availability, retry it. If the failure is a real failure (e.g. package is really not there) it still fails after 3 tries (Ansible default).
2017-11-27Merge pull request #6185 from ↵Michael Gugino
giuseppe/fix-additional-and-insecure-registries-for-crio cri-o: honor additional and insecure registries again
2017-11-27Merge pull request #6178 from giuseppe/copy-docker-to-alt-storage-pathMichael Gugino
docker: copy Docker metadata to the alternative storage path
2017-11-22Workaround the fact that package state=present with dnf fails for already ↵Jan Pazdziora
installed but excluded packages.
2017-11-22With dnf repoquery and excluded packages, --disableexcludes=all is needed to ↵Jan Pazdziora
list the package with --installed.
2017-11-20cri-o: honor additional and insecure registries againGiuseppe Scrivano
Regression introduced with: https://github.com/openshift/openshift-ansible/commit/ee6adf9e9a520cc5873bf9f36924ae9aa4c47c7c Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-11-20docker: copy Docker metadata to the alternative storage pathGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-11-16Include Deprecation - Init Playbook PathsRussell Teague
2017-11-15Merge pull request #6105 from kwoodson/docker_crio_fixScott Dodson
Fixing docker crio installation.
2017-11-15Merge pull request #6094 from ↵OpenShift Merge Robot
mgugino-upstream-stage/syscontainers-docker-login-module Automatic merge from submit-queue. Alternative method to create docker registry auth creds Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
2017-11-14Merge pull request #6102 from mgugino-upstream-stage/fix-docker-reg-auth-proxyOpenShift Merge Robot
Automatic merge from submit-queue. Run registry auth after docker restart Currently, docker login may fail if a proxy is added to the config but docker is already running. This is due to the fact that 'docker login' must have a functioning docker.service running (with valid network connection) to complete. Currently, handlers restart the docker service at the end of the role. This doesn't allow for updating proxy settings before running docker login. This commit moves 'docker login' command after flushing handlers. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511869
2017-11-14Alternative method to create docker registry auth credsMichael Gugino
Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
2017-11-14crio: sync crio.confGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-11-13Fixing islnk.Kenny Woodson
2017-11-13Run registry auth after docker restartMichael Gugino
Currently, docker login may fail if a proxy is added to the config but docker is already running. This is due to the fact that 'docker login' must have a functioning docker.service running (with valid network connection) to complete. Currently, handlers restart the docker service at the end of the role. This doesn't allow for updating proxy settings before running docker login. This commit moves 'docker login' command after flushing handlers. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511869
2017-11-06Merge pull request #6030 from giuseppe/fix-selinux-docker-tooOpenShift Merge Robot
Automatic merge from submit-queue. container-engine: ensure /var/lib/containers/ is properly labelled we were doing it only when CRI-O is installed. Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1509880 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-11-06container-engine: ensure /var/lib/containers/ is properly labelledGiuseppe Scrivano
we were doing it only when CRI-O is installed. Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1509880 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-11-06Moving docker location to share path with system containers.Kenny Woodson
2017-10-31Docker: make use of new etc/containers/registries.conf optionalMichael Gugino
Currently, not all versions of docker support using /etc/containers/registries.conf This commit makes the use of that file optional.
2017-10-31Merge pull request #5932 from mgugino-upstream-stage/retry-docker-credsOpenShift Merge Robot
Automatic merge from submit-queue. Add retry logic to docker auth credentials This commit enables retry on docker login commands. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1506931
2017-10-30Merge pull request #5917 from ashcrow/kennys-patchScott Dodson
docker: Create openshift_docker_is_node_or_master variable
2017-10-30Add retry logic to docker auth credentialsMichael Gugino
This commit enables retry on docker login commands. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1506931
2017-10-27docker: Create openshift_docker_is_node_or_master variableSteve Milner
This can be used in place of: inventory_hostname in groups['oo_masters_to_config'] or \ inventory_hostname in groups['oo_nodes_to_config'] While the previous version works, this change helps with the tasks are run during AMI creation. Code written by Kenny Woodson @kwoodson.
2017-10-27cri-o: Set max log size to 50 mbMrunal Patel
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2017-10-27Merge pull request #5911 from giuseppe/crio-open-port-10010Scott Dodson
cri-o: open port 10010
2017-10-27Merge pull request #5901 from ashcrow/failed-whenScott Dodson
crio: Add failed_when to overlay check
2017-10-27Merge pull request #5905 from ashcrow/restorcon-for-crioScott Dodson
crio: restorcon /var/lib/containers
2017-10-27cri-o: open port 10010Giuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-26crio: restorcon /var/lib/containersSteve Milner
When using the cri-o system container some items in /var/lib/containers end up having incorrect labels. This runs restorecon -R /var/lib/containers after the system container is installed.
2017-10-26crio: Add failed_when to overlay checkSteve Milner
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1506399 Signed-off-by: Steve Milner <smilner@redhat.com>
2017-10-26docker: set credentials when using system containerGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-24Merge pull request #5814 from mgugino-upstream-stage/docker-auth-upgradesOpenShift Merge Robot
Automatic merge from submit-queue. Enable oreg_auth credential replace during upgrades Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
2017-10-23Merge pull request #5818 from ashcrow/1503860OpenShift Merge Robot
Automatic merge from submit-queue. docker: Move enterprise registry from pkg to main
2017-10-19docker: Move enterprise registry from pkg to mainSteve Milner
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503860 Signed-off-by: Steve Milner <smilner@redhat.com>
2017-10-19Enable oreg_auth credential replace during upgradesMichael Gugino
Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
2017-10-19systemcontainers: Verify atomic.conf proxy is always configuredSteve Milner
A new openshift_atomic role has been created for atomic specific tasks. The first task added is proxy which handles updating /etc/atomic.conf to ensure the proper proxy configuration is configured. This task file is then included (via include_role) in system container related task files. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503903 Signed-off-by: Steve Milner <smilner@redhat.com>
2017-10-18Merge pull request #5774 from mgugino-upstream-stage/docker-option-fixScott Dodson
Fix missing docker option signature-verification
2017-10-16Fix missing docker option signature-verificationMichael Gugino
Currently, docker 1.12 can be configured to use the run-time parameter of 'signature-verification' By default, rpm installation of docker results in '--signature-verification=false' being added to OPTIONS in /etc/sysconfig/docker Currently, openshift-ansible does not preserve that value. This can cause docker to be unable to pull images from a previously working source due to a change in configuration. This commit adds the option with the default as provided by the rpm installation. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1502560
2017-10-16cri-o: error out when node is a Docker containerGiuseppe Scrivano
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1489555 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-11Ensure docker service status actually changesMichael Gugino
Currently, docker is started during the docker role. If docker is started during the run of the role, the handler to restart docker is not triggered to prevent excess restarts of the docker service. The systemd docker that starts the docker service may report the result of the task as 'changed' even though docker is already running and the state of the service itself does not change. This commit checks the status of the docker service before starting it to ensure that docker was not in an 'active' state according to systemd. If the docker service is already in the 'active' state, the restart handler will trigger and restart docker at the end of the run of the role. Fixes: https://github.com/openshift/origin/issues/16709
2017-10-10crio, docker: expect openshift_release to have 'v'Giuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-09Merge pull request #5695 from giuseppe/image_tag_default_to_releaseOpenShift Merge Robot
Automatic merge from submit-queue. docker, CRI-O: openshift_image_tag defaults to openshift_release Replace: commit c2c4ba7ec62d4dfd87d746d20991e10f2bd1bddf Author: Giuseppe Scrivano <gscrivan@redhat.com> Date: Tue Sep 26 09:01:59 2017 +0200 Require openshift_image_tag in the inventory with openshift-enterprise Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> with using openshift_release for openshift_image_tag so we don't require users to include both in their inventory. Probably it is only a temporary solution until the openshift_image_tag vs openshift_release when using Docker/CRI-O is sorted out. Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1493376
2017-10-09Merge pull request #5705 from mgugino-upstream-stage/docker-partof-iptablesScott Dodson
Add PartOf to docker systemd service unit.
2017-10-09Add PartOf to docker systemd service unit.Michael Gugino
Currently, if iptables service is restarted, existing iptables rules are removed. Docker adds iptables rules dyanmically upon startup and container creation. Restarting the iptables service results in a loss of these needed iptables rules. This commit ensures that if iptables service is restarted by anisble or the user, docker is also restarted. This ensures the proper dynamic iptables rules are in place for docker. Fixes: openshift/origin#16709
2017-10-09crio: use systemd managerGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-09crio, docker: use openshift_release when openshift_image_tag is not usedGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-09crio: fix typoGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-07Merge pull request #5661 from giuseppe/crio-use-overlay-instead-of-overlay2OpenShift Merge Robot
Automatic merge from submit-queue. cri-o: use overlay instead of overlay2 overlay2 and overlay are the same driver. Upstream CRI-O is going to drop any reference to overlay2 and use only overlay. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-10-06crio.conf.j2: sync from upstreamGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
generated by cgit v1.2.3 (git 2.39.1) at 2025-12-18 01:23:02 +0000