summaryrefslogtreecommitdiff
path: root/roles/openshift_master/templates
AgeCommit message (Collapse)Author
2018-01-25Don't emit assetConfig on 3.9Scott Dodson
2017-12-21Remove oauth_template bits from openshift_factsMichael Gugino
This commit moves some deprecated variable logic outside of openshift_facts and into role defaults.
2017-12-20Remove openshift.common.{is_atomic|is_containerized}Michael Gugino
We set these variables using facts in init, no need to duplicate the logic all around the codebase.
2017-12-19Merge pull request #6469 from mgugino-upstream-stage/plugin-consolidateScott Dodson
Plugin consolidate
2017-12-18Remove some small items from openshift_factsMichael Gugino
Remove some small items from openshift_facts that don't need to be there.
2017-12-18Relocate filter plugins to lib_utilsMichael Gugino
This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
2017-12-08Remove unneeded embedded etcd logicMichael Gugino
Removing some remaining embedded etcd facts except for the migration plays.
2017-12-07Remove openshift.common.service_typeMichael Gugino
This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
2017-12-05Remove all references to pacemaker (pcs, pcsd) and ↵Andrew Butcher
openshift.master.cluster_method. With pacemaker removed there is no longer a need for openshift.master.cluster_method. We only have one option.
2017-12-05Fix hosted varsMichael Gugino
Remove hosted vars from openshift_facts. The current pattern is causing a bunch of undesired sideffects.
2017-12-01Implement container runtime roleMichael Gugino
2017-11-28Remove openshift_facts project_cfg_factsMichael Gugino
This simplifies some variable logic.
2017-11-28Remove dns_port factMichael Gugino
Simply dns_port variable by remove from openshift_facts.
2017-11-27dist.iteritems() no longer exists in Python 3.Jan Pazdziora
2017-11-14Removed old version codeMichael Gugino
This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
2017-11-13Regex anchors changed to match protocol start and ports.Kenny Woodson
2017-11-01Merge pull request #5264 from AlexanderZagaynov/cors_escapeOpenShift Merge Robot
Automatic merge from submit-queue. escape corsAllowedOrigins regexp strings and anchor them `corsAllowedOrigins` parameter got interpreted by OpenShift/Kubernetes as a regular expression (there is a bug about that: https://bugzilla.redhat.com/show_bug.cgi?id=1482903). It leads to some vague behaviour, like for `127.0.0.1` value `127a0b0c1` will be matched as valid, as well as `localhost.example.com` for `localhost`. I've added regexp escaping here, as well as value anchoring to the begin and end of the string. I've also added case-insensitive flag `(?i)` to match values like `LocalHost` for `localhost`.
2017-10-27add new clusterNetworks fields to new installsJacob Tanenbaum
add clusterNetworks field to the networkConfig so that the new fields appear in new installs when openshift version is greater then 3.7
2017-10-23Merge pull request #5654 from vshn/mastersysconfigvar1OpenShift Merge Robot
Automatic merge from submit-queue. Avoid undefined variable in master sysconfig template When "openshift_master_controllers_env_vars" is set, but "openshift_master_api_env_vars" isn't, the template for the sysconfig file of atomic-openshift-master fails: AnsibleUndefinedVariable: 'dict object' has no attribute 'api_env_vars' Avoid this issue by applying "default({})" to the dict and always calling ".items()".
2017-10-20Initial Kuryr supportMichał Dulko
This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
2017-10-19Avoid undefined variable in master sysconfig templateMichael Hanselmann
When "openshift_master_controllers_env_vars" is set, but "openshift_master_api_env_vars" isn't, the template for the sysconfig file of atomic-openshift-master fails: AnsibleUndefinedVariable: 'dict object' has no attribute 'api_env_vars' Avoid this issue by applying "default({})" to the dict and always calling ".items()".
2017-10-17Merge pull request #5687 from jim-minter/tsb_configOpenShift Merge Robot
Automatic merge from submit-queue. Rewire openshift_template_service_broker_namespaces configurable @ewolinetz @bparees
2017-10-13Rewire openshift_template_service_broker_namespaces configurableJim Minter
2017-10-12Add ability to set node and master imageConfig to latestMichael Gugino
Currently, imageConfig.latest is hard-coded to false. This commit adds an appropriate boolean to enable setting to true. Fixes: https://github.com/openshift/openshift-ansible/issues/1422
2017-10-11Fix broken debug_levelMichael Gugino
Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
2017-10-09Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher
2017-09-22Fix registry_auth logic for upgradesMichael Gugino
Currently, the logic for registry authentication is not implemented correctly to account for upgrades of containerized hosts. Additionally, the logic to account for multiple runs of openshift-ansible might cause registry authentication credentials to not be mounted inside of containerized hosts. This commit adds the necessary logic to ensure containerized hosts retain registry credentials. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1494470
2017-09-11Fix: authenticated registry support for containerized hostsMichael Gugino
Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
2017-09-06Remove openshift-commonMichael Gugino
Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
2017-09-05fix comment and make it visible to end-userAlexander Zagaynov
2017-08-30escape also custom_cors_originsAlexander Zagaynov
2017-08-30add comment on regexp specificsAlexander Zagaynov
2017-08-30escape corsAllowedOrigins regexp strings and anchor themAlexander Zagaynov
2017-08-08Remove remaining references to openshift-master.serviceClayton Coleman
Prevents playbooks from accidentally restarting the master service.
2017-08-08Use the new election mode (client based) instead of direct etcd accessClayton Coleman
2017-08-01Merge pull request #4949 from carlpett/patch-1OpenShift Bot
Merged by openshift-bot
2017-08-01Merge pull request #4894 from tbielawa/reg-dns-scaleup-bz1469336OpenShift Bot
Merged by openshift-bot
2017-07-31Fix aws_secret_key checkCalle Pettersson
2017-07-28Use existing OPENSHIFT_DEFAULT_REGISTRY setting during masters scaleupTim Bielawa
Fixes a bug which reported that AFTER a cluster upgrade from OCP 3.5 to 3.6, any masters which are later added via the scaleup playbooks are setting a value for OPENSHIFT_DEFAULT_REGISTRY which is inconsistent with the already configured masters. * OPENSHIFT_DEFAULT_REGISTRY value is saved from oo_first_master * The new scaleup master has a fact set noting it is a scaleup host * The saved OPENSHIFT_DEFAULT_REGISTRY value is used instead of the default for 3.6, which is to use a hard-coded registry value of 'docker-registry.default.svc:5000' Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1469336
2017-07-06Add rate limit configurabilityScott Dodson
2017-06-26Merge pull request #4414 from sdodson/bz1460626Scott Dodson
Ensure that host pki tree is mounted in containerized components
2017-06-23Also configure default registry on HA mastersScott Dodson
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1463498
2017-06-20Adding option for serviceAccountConfig.limitSecretReferencesKenny Woodson
2017-06-20Merge pull request #4292 from sdodson/push-via-dnsOpenShift Bot
Merged by openshift-bot
2017-06-19Update atomic-openshift-master.j2Scott Dodson
2017-06-18Enable push to registry via dns only on clean 3.6 installsScott Dodson
We cannot assume that 3.5 to 3.6 upgrades were signed with the correct certs
2017-06-18Disable actually pushing to the registry via dns for nowScott Dodson
We need to sort out how to know that the registry certificate has the proper hostnames attached to it. It will for 3.6 clean installs but not for 3.5 to 3.6 upgrades. For now make it opt in and come back to this.
2017-06-18Push to the registry via dnsScott Dodson
Configures OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc Adds 'cluster.local' to dns search on nodes via dispatcher script Adds '.svc' to NO_PROXY defaults
2017-06-18Preserve etcd3 storage if it's already in useScott Dodson
This would be the case if for instance they'd upgraded and then migrated.
2017-06-12Ensure that host pki tree is mounted in containerized componentsScott Dodson
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-14 02:39:31 +0000