summaryrefslogtreecommitdiffstats
path: root/roles/openshift_common
Commit message (Collapse)AuthorAgeFilesLines
...
* remove openshift_hostname_workaround var for openshift_common, rather rely ↵Jason DeTiberus2015-03-242-6/+0
| | | | on inventory/playbook variables for openshift_hostname
* node registration changesJason DeTiberus2015-03-242-2/+2
| | | | | | | | | | | | | | - Remove default value for openshift_hostname and make it required - Remove workarounds that are no longer needed - Remove resources parameter from openshift_register_node module - pre-create node certificates for each node before registering node - distribute created node certificates to each node - Move node registration logic to a new openshift_register_nodes role - This is because we now have to run the steps on a master as opposed to on the nodes like we were previously doing. - Rename openshift_register_node module to kubernetes_register_node, one more step to genericizing enough for upstreaming, however there are still plenty of openshift specific commands that still need to be genericized.
* add repos role to gce cluster launch so that we are applying ↵Jason DeTiberus2015-03-241-3/+0
| | | | os_update_latest after repo config
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-241-0/+3
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Move yum update * to new os_update_latest roleJason DeTiberus2015-03-241-3/+0
|
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-241-0/+3
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Merge pull request #117 from detiber/repoRenameThomas Wiest2015-03-242-0/+2
|\ | | | | Rename repos role to openshift_repos
| * Rename repos role to openshift_reposJason DeTiberus2015-03-182-0/+2
| | | | | | | | | | | | | | | | | | - Rename repos role to openshift_repos - Make openshift_repos a dependency of openshift_common - Add README and metadata for openshift_repos - Playbook updates for role rename - Verify libselinux-python is installed, otherwise some of the bulit-in modules we use fail
* | Fix hostname handlingJason DeTiberus2015-03-183-7/+3
|/ | | | | - always set hostname if hostname does not match openshift_hostname - Use local IP instead of public IP as hostname for workaround
* Merge pull request #100 from detiber/randomCleanupThomas Wiest2015-03-092-14/+18
|\ | | | | Random cleanup
| * Initial READMEs for openshift_{common, node, master}Jason DeTiberus2015-03-061-13/+17
| |
| * Fix license nameJason DeTiberus2015-03-061-1/+1
| |
* | start fixing os_firewall issuesJason DeTiberus2015-03-061-1/+1
| | | | | | | | | | - Fix missed references to old firewall scripts - Fix variable name references that didn't get updated
* | Do not set KUBECONFIG for root userJason DeTiberus2015-03-061-8/+0
|/ | | | | | | - instead of setting KUBECONFIG, copy the admin kubeconfig to /root/.kube/.kubeconfig in the openshift_master and openshift_node roles - pause for 30 seconds if the openshift-master service has changed state, since the file we are copying is generated by the master
* refactor firewall management into new roleJason DeTiberus2015-03-054-43/+15
| | | | | | | | | | | | | | | | | - Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld
* Merge pull request #91 from detiber/downWithJSONThomas Wiest2015-03-021-3/+9
|\ | | | | Prefer YAML style datastructures over JSON
| * Prefer YAML style datastructures over JSONJason DeTiberus2015-03-021-3/+9
| | | | | | | | - Switch JSON style datastructures to YAML for debuggability
* | Add openshift_hostname default variable to openshift_commonJason DeTiberus2015-03-021-0/+1
| | | | | | | | | | - for use anywhere the hostname is used that would be dependent on the openshift_hostname_workaround setting.
* | add openshift_hostname workaround varJason DeTiberus2015-03-022-0/+5
|/ | | | | - use openshift_bind_ip for hostname when openshift_hostname_workaround is true - defaults to true to maintain current behavior.
* move KUBECONFIG setting to openshift_commonJason DeTiberus2015-02-241-0/+8
|
* create openshift_common roleJason DeTiberus2015-02-247-0/+113
- move common openshift logic into openshift_common - set openshift_common as a dependency for openshift_node and openshift_master - rename role variables to openshift_* to be more descriptive - start recording local_facts on the openshift hosts - clean up firewalld config to be a bit more dry - Update firewall ports for https, make sure http rules are removed - Replace references to ansible_eth0.ipv4.address with ansible_default_ipv4.address