summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/templates
Commit message (Collapse)AuthorAgeFilesLines
...
* | Add support for setting identity provider custom valuesJason DeTiberus2016-04-251-0/+5
|/ | | | | | | - htpasswd users - ldap ca file - openid ca file - request_header ca file
* Add global proxy configurationScott Dodson2016-04-223-15/+31
| | | | | | | | | | | | | | | | | | | | | | | | | Configures HTTP_PROXY, HTTPS_PROXY, NO_PROXY for master and docker services. Configugres BuildDefaults Admission controller for master to automatically insert proxy environment configuration into build environments. To use set at least these variables - openshift_http_proxy - openshift_https_proxy NO_PROXY entries will automatically be configured for hostnames of all openshift hosts. You may specify additional NO_PROXY hosts or patterns by setting `openshift_no_proxy` If you wish to disable automatic generation of NO_PROXY hosts you may set `openshift_generate_no_proxy_hosts` to False. If you wish to have different builddefaults proxy configuration than baseline proxy configuration set these variables - openshift_builddefaults_http_proxy - openshift_builddefaults_https_proxy - openshift_builddefaults_no_proxy - openshift_builddefaults_git_http_proxy - openshift_builddefaults_git_https_proxy
* Promote portal_net to openshift.common, add kube_svc_ipScott Dodson2016-04-191-2/+2
| | | | | Conflicts: roles/openshift_facts/library/openshift_facts.py
* Merge pull request #1738 from dgoodwin/image-policy-configBrenton Leanhardt2016-04-131-0/+3
|\ | | | | Support setting imagePolicyConfig JSON in inventory.
| * Support setting imagePolicyConfig JSON in inventory.Devan Goodwin2016-04-121-0/+3
| | | | | | | | | | | | | | | | | | For flexibility this is another pure JSON field to translate directly to yaml in the master config. Also updated to more safely handle JSON inventory variables as this uncovered a bug with booleans where you end up with a string containing json in your yaml.
* | use RestartSec to avoid default rate limit in systemdBrenton Leanhardt2016-04-125-0/+5
|/ | | | Lifted from https://github.com/openshift/origin/pull/8317
* Merge pull request #1722 from abutcher/containerized-cloudproviderBrenton Leanhardt2016-04-073-3/+3
|\ | | | | Add cloudprovider config dir to docker options.
| * Add cloudprovider config dir to docker options.Andrew Butcher2016-04-063-3/+3
| |
* | Merge pull request #1699 from abutcher/check-cloudprovider-kindBrenton Leanhardt2016-04-063-3/+3
|\ \ | | | | | | Check for kind in cloudprovider facts prior to accessing.
| * | Check for kind in cloudprovider facts prior to accessing.Andrew Butcher2016-04-043-3/+3
| |/
* | Add support for configuring oauth templates.Devan Goodwin2016-04-011-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow users who wish to deploy configs with ansible to define templates for oauth screens, and control the alwaysShowProviderSelection setting. There are currently three supported oauth templates, and we have a pre-existing 'oauth_template' variable, but it is assumed to mean you are controlling the 'login' screen, and this is the only one you can configure. To work around this, supporting all current and future templates, introduce a pluralized variable 'oauth_templates', which contains a JSON dict allowing the admin to control any template they wish. If both new and old variables are defined, the old one is ignored. (and can be considered deprecated) Internally the old value will be converted to the new dict, so the template just references one value. Example: openshift_master_oauth_always_show_provider_selection=true openshift_master_oauth_templates={"providerSelection": "provider-selection.html", "error": "oauth-error.html"} Yeilds: oauthConfig: alwaysShowProviderSelection: true templates: error: oauth-error.html providerSelection: provider-selection.html
* | Add support for templating master admissionConfig.Devan Goodwin2016-04-011-0/+14
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds four new inventory variables for setting sections in "admissionConfig" and "kubernetesMasterConfig.admissionConfig". openshift_master_admission_plugin_order allows configuring the list of origin admission controller plugins to enable and what order to run them in. This must be a JSON formatted list of strings: openshift_master_admission_plugin_order=["RunOnceDuration", "NamespaceLifecycle", "OriginPodNodeEnvironment", "ClusterResourceOverride", "LimitRanger", "ServiceAccount", "SecurityContextConstraint", "ResourceQuota", "SCCExecRestrictions"] openshift_master_kube_admission_plugin_order is identical but for the kubernetes admission controller plugins which appear beneath kubernetesMasterConfig. openshift_master_admission_plugin_config allows setting free-form configuration stanzas that match up with enabled admission controller plugins. This must be a JSON formatted hash: openshift_master_admission_plugin_config={"RunOnceDuration":{"configuration":{"apiVersion":"v1","kind":"RunOnceDurationConfig","activeDeadlineSecondsOverride":3600}},"ClusterResourceOverride":{"configuration":{"apiVersion":"v1","kind":"ClusterResourceOverrideConfig","limitCPUToMemoryPercent":200,"cpuRequestToLimitPercent":6,"memoryRequestToLimitPercent":60}}} openshift_master_kube_admission_plugin_config is the equivalent for kubernetes admission controller plugins. Contains a change to merge_facts to fix issues with modifying inventory variables that contain JSON dicts. If you modified a previously set variable, the result would be a merge of old and new, which is completely wrong in this case. Addded new overwrite_facts to shortcut to just taking the new values. This differs from the pre-existing concept of "protected" in that we're not protecting an old value, we're trashing it and taking the new.
* Allow for overriding scheduler configJason DeTiberus2016-03-311-15/+0
| | | | | | | | | - introduce openshift_master_scheduler_predicates and openshift_master_scheduler_priorities to override the default scheduler predicates and priorities - switch default scheduler priorities to use SelectorSpreadPriority instead of ServiceSpreadingPriority
* Add AWS cloud provider support.Andrew Butcher2016-03-293-0/+15
|
* make docker service want ose containerized servicesSeth Jennings2016-03-283-3/+3
| | | | | | | | | | | | | | | | There are points where the docker service is restarted during the install. Sometimes the services that are PartOf docker.service do not get restarted when docker is restarted. https://bugzilla.redhat.com/show_bug.cgi?id=1318948 Systemd documentation recommends using "wants" as the perferred means of creating startup linkages between units. This patch makes the ose services wanted by the docker service rather than multi-user.target. This creates a downward link from the docker service to the ose containerized services.
* Load environment files in containerized installsScott Dodson2016-03-163-3/+3
|
* improve ordering of systemd unitsJason DeTiberus2016-03-145-15/+14
|
* Ensure is_containerized is cast as bool.Andrew Butcher2016-03-143-3/+3
|
* Support openshift_image_tagBrenton Leanhardt2016-03-073-3/+3
| | | | | | | | | | | | | This is the containerized openshift_pkg_version equivalent. Originally I was hoping to reuse openshift_pkg_version for containerized installs but the fact that it's very coupled to yum made that pretty ugly. However, I did opt to rely on the previously existing 'openshift_version' variable. Containerized and RPM installs can both use that variable and it will be set appropriately if either openshift_pkg_version or openshift_image_tag are set. I suspect someday containerized installs will be the only option and I didn't can to have thinkgs like openshift_pkg_version and openshift_image_tag in the playbooks anymore the necessary.
* Correctly set the image tag for containerized installs (and upgrades)Brenton Leanhardt2016-03-036-3/+12
|
* Add gte check for 3.2, update version checks to gteJason DeTiberus2016-02-092-3/+3
|
* Merge pull request #1160 from vishpat/nuageBrenton Leanhardt2016-01-251-1/+1
|\ | | | | Nuage
| * Add Nuage support to openshift ansibleVishal Patil2016-01-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added variables Made changes for node configuration Add service restart logic to node Fixed ansible syntax errors Add cert and key info for nodes Added active and standby controller ip configuration information Uncommented the nuage sdn check Changed ca_crt -> ca_cert Added restarting of atomic openshift master Removed service account dependencies Fixes Fixed the api server url Removed redundant restart of atomic openshift master Configure nuagekubemon on all of the master nodes Restart master api and controllers as well on nuagekubemon installation Converted plugin config into template Add template for nuagekubemon Removed uplink interface from vars Able to copy cert keys Uninstall default ovs Add the kubemon template Do not install rdo sdn rpms in case of nuage Addressed latest review comments Set the networkPluginName for nuage
* | Expose console config for customizationDiego Castro2016-01-211-1/+14
| |
* | Merge pull request #1244 from abutcher/api-sysconfigBrenton Leanhardt2016-01-201-1/+1
|\ \ | | | | | | Native ha port fixes
| * | Fix native master api sysconfig.Andrew Butcher2016-01-201-1/+1
| | |
* | | Enable kubernetes master config of podEvictionTimeout from ansibleJeremiah Stuever2016-01-201-1/+1
|/ /
* | Use local address for loopback kubeconfigJason DeTiberus2016-01-141-1/+1
| |
* | consolidate steps and cleanup template dirJason DeTiberus2016-01-1410-5/+16
| |
* | - sqashed to one commitLutz Lange2016-01-121-2/+2
| |
* | Merge pull request #1018 from abutcher/secretsBrenton Leanhardt2016-01-062-3/+5
|\ \ | | | | | | Clean up idempotency issues with session secrets.
| * | Clean up idempotency issues with session secrets.Andrew Butcher2016-01-042-3/+5
| | |
* | | Fix osm_controller_args and osm_api_server_args settings.Andrew Butcher2016-01-041-2/+2
|/ /
* | Merge pull request #1096 from git001/masterBrenton Leanhardt2015-12-241-0/+6
|\ \ | | | | | | Add the new metrics and logging urls v2
| * | add the necessary URLs for logging and metricsgit0012015-12-221-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add the necessary URLs for logging and metrics use the dict in the right way add the new variables into the hosts file add the new variables into the hosts file add the new variables into the hosts file Adopted the config text
* | | Merge pull request #1094 from abutcher/notifyBrenton Leanhardt2015-12-241-0/+4
|\ \ \ | | | | | | | | Reset Type=notify for controllers service
| * | | Conditionalize for 3.1.1/1.1.1Andrew Butcher2015-12-181-0/+4
| | | |
| * | | Use notify for workaround controllers unit.Andrew Butcher2015-12-181-1/+1
| |/ /
* | | fixesJason DeTiberus2015-12-151-1/+1
| | |
* | | Containerization work by @sdodsonScott Dodson2015-12-153-2/+58
| | |
* | | Initial containerization work from @ibottyTobias Florek2015-12-151-0/+11
|/ / | | | | | | copied from https://github.com/eparis/kubernetes-ansible/blob/17f98edd7ff53e649b43e26822b8fbc0be42b233/roles/common/tasks/main.yml
* / Change controllers service type to simple.Andrew Butcher2015-12-111-1/+1
|/
* Configured master count should be 1 for pacemaker ha.Andrew Butcher2015-12-021-1/+1
|
* Refactor master identity provider configurationJason DeTiberus2015-11-232-94/+18
| | | | | | - Remote template in favor of a filter plugin - Add additional validation for identity provider config - Add mappingMethod attribute for identity providers, default to 'claim'
* Refactor named certificates.Andrew Butcher2015-11-161-5/+2
|
* 1279746: Fix leftover disabled features line in config template.Devan Goodwin2015-11-101-1/+0
|
* Merge pull request #830 from detiber/nov1beta3Brenton Leanhardt2015-11-061-3/+3
|\ | | | | apiLevel changes
| * apiLevel changesJason DeTiberus2015-11-061-3/+3
| | | | | | | | | | | | - remove kubernetesMasterConfig.apiLevels if >= 3.1/1.1 - change apiLevels conditional from using deployment_type to version_greater_than_3_1_or_1_1
* | Revert to defaultsAndrew Butcher2015-11-051-3/+3
| |
* | Various HA changes for pacemaker and native methods.Andrew Butcher2015-11-055-0/+68
| |
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-04 05:33:54 +0000