summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | Merge pull request #2005 from brenton/bz1338726Brenton Leanhardt2016-06-091-1/+1
|\ \ \ \ \ | |_|_|_|/ |/| | | | Bug 1338726 - never abort install if the latest version of docker is already installed
| * | | | Restore mistakenly reverted code.Devan Goodwin2016-06-091-2/+7
| | | | |
| * | | | Merge branch 'docker1.10' of https://github.com/dgoodwin/openshift-ansibleBrenton Leanhardt2016-06-071-8/+3
| |\ \ \ \
| | * | | | Fix Docker 1.10 problems with empty tags and trailing :Devan Goodwin2016-06-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Docker 1.10 is no longer tolerant of commands like "docker pull myimage:" when we do not have an image tag in play. Adjust all occurrences with one that only includes the : if a version is defined. Adjust the containerized CLI wrappers for a similar problem.
| | * | | | Docker 1.10 UpgradeDevan Goodwin2016-06-031-7/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds a separate playbook for Docker 1.10 upgrade that can be run standalone on a pre-existing 3.2 cluster. The upgrade will take each node out of rotation, and remove *all* containers and images on it, as this is reportedly faster and more storage efficient than performing the in place 1.10 upgrade. This process is integrated into the 3.1 to 3.2 upgrade process. Normal config playbooks now become 3.2 only, and require Docker 1.10. Users of older environments will have to use an appropriate openshift-ansible version. Config playbooks no longer are in the business of upgrading or downgrading docker.
* | | | | | Preserve proxy config if it's undefinedScott Dodson2016-06-071-0/+43
| | | | | |
* | | | | | At least backup thingsScott Dodson2016-06-071-0/+3
|/ / / / /
* | | | | Merge pull request #1973 from ibotty/preserve_htpasswdScott Dodson2016-06-061-1/+9
|\ \ \ \ \ | |/ / / / |/| | | | Add flag to manage htpasswd, or not.
| * | | | ensure htpasswd file existsTobias Florek2016-06-061-1/+9
| | | | | | | | | | | | | | | | | | | | Also move file mode to the file-exists check to not specify twice.
| * | | | Add flag to manage htpasswd, or not.Tobias Florek2016-06-021-1/+1
| | |_|/ | |/| | | | | | | | | | | | | | Setting `openshift_master_manage_htpasswd` falsy will disable managing the htpasswd file. It won't get overwritten/generated.
* / | | Fix error with stopping services that may not exist.Devan Goodwin2016-06-021-2/+7
|/ / / | | | | | | | | | | | | | | | Causes a hard failure due to missing etcd/atomic-openshift-master services. Instead, check that the services exist before ensuring they're stopped/disabled.
* | / Revert openshift-certificates changes.Andrew Butcher2016-05-301-1/+0
| |/ |/|
* | Merge pull request #1672 from jstuever/os_clocksJason DeTiberus2016-05-261-0/+1
|\ \ | | | | | | Add openshift_clock role
| * | Enable openshift_clock role for openshift_master, openshift_node, and ↵Jeremiah Stuever2016-05-201-0/+1
| | | | | | | | | | | | openshift_etcd
* | | Merge pull request #1908 from abutcher/openshift-certificatesJason DeTiberus2016-05-261-0/+1
|\ \ \ | |_|/ |/| | Refactor openshift certificate roles
| * | Consolidate ca/master/node certificates roles into openshift_certificates.Andrew Butcher2016-05-191-0/+1
| |/
* | Extend multiple login provider check to include origin.Andrew Butcher2016-05-231-1/+1
| |
* | Allow multiple login providers post 3.2.Andrew Butcher2016-05-231-1/+1
|/
* Allow overriding servingInfo.maxRequestsInFlight via ↵Andrew Butcher2016-05-131-1/+1
| | | | openshift_master_max_requests_inflight.
* Merge pull request #1885 from dgoodwin/proxy-quotesJason DeTiberus2016-05-123-9/+9
|\ | | | | Fix mistaken quotes on proxy sysconfig variables.
| * Fix mistaken quotes on proxy sysconfig variables.Devan Goodwin2016-05-123-9/+9
| | | | | | | | Only need double quotes if preserving whitespace, and never singles.
* | Remove old unused firewall rulesScott Dodson2016-05-111-5/+0
| |
* | Fix firewall rulesScott Dodson2016-05-112-36/+27
|/
* Merge tag 'openshift-ansible-3.0.88-1'Brenton Leanhardt2016-05-061-0/+8
|\ | | | | | | Tagging package [openshift-ansible] version [3.0.88-1] in directory [./].
| * Open port 53 whenever we're unsure of versionScott Dodson2016-05-061-0/+8
| |
* | Cleanup various deprecation warnings.Andrew Butcher2016-04-291-9/+9
|/
* Merge pull request #1812 from sdodson/issue1759Jason DeTiberus2016-04-271-0/+2
|\ | | | | Add masterConfig.volumeConfig.dynamicProvisioningEnabled
| * Add masterConfig.volumeConfig.dynamicProvisioningEnabledScott Dodson2016-04-261-0/+2
| |
* | Don't set empty HTTP_PROXY, HTTPS_PROXY, NO_PROXY valuesScott Dodson2016-04-263-16/+15
| |
* | Merge pull request #1809 from abutcher/portal-netJason DeTiberus2016-04-263-3/+3
|\ \ | |/ |/| BZ 1330357: Fail to deploy pod after installing env with openshift_master_portal_net='172.31.0.0/16'
| * Access portal_net in common facts.Andrew Butcher2016-04-263-3/+3
| |
* | Add support for setting identity provider custom valuesJason DeTiberus2016-04-252-3/+35
|/ | | | | | | - htpasswd users - ldap ca file - openid ca file - request_header ca file
* Add global proxy configurationScott Dodson2016-04-224-15/+32
| | | | | | | | | | | | | | | | | | | | | | | | | Configures HTTP_PROXY, HTTPS_PROXY, NO_PROXY for master and docker services. Configugres BuildDefaults Admission controller for master to automatically insert proxy environment configuration into build environments. To use set at least these variables - openshift_http_proxy - openshift_https_proxy NO_PROXY entries will automatically be configured for hostnames of all openshift hosts. You may specify additional NO_PROXY hosts or patterns by setting `openshift_no_proxy` If you wish to disable automatic generation of NO_PROXY hosts you may set `openshift_generate_no_proxy_hosts` to False. If you wish to have different builddefaults proxy configuration than baseline proxy configuration set these variables - openshift_builddefaults_http_proxy - openshift_builddefaults_https_proxy - openshift_builddefaults_no_proxy - openshift_builddefaults_git_http_proxy - openshift_builddefaults_git_https_proxy
* Add openshift_node_dnsmasqScott Dodson2016-04-191-4/+4
|
* Promote portal_net to openshift.common, add kube_svc_ipScott Dodson2016-04-191-2/+2
| | | | | Conflicts: roles/openshift_facts/library/openshift_facts.py
* The openshift_docker role must set the version facts for containerized installsBrenton Leanhardt2016-04-141-1/+1
| | | | | | QE found that for fresh installs we were basing the docker version facts of the images that could be pulled prior to configuring /etc/sysconfig/docker. This is an edge case but something we need to fix.
* Merge pull request #1738 from dgoodwin/image-policy-configBrenton Leanhardt2016-04-131-0/+3
|\ | | | | Support setting imagePolicyConfig JSON in inventory.
| * Support setting imagePolicyConfig JSON in inventory.Devan Goodwin2016-04-121-0/+3
| | | | | | | | | | | | | | | | | | For flexibility this is another pure JSON field to translate directly to yaml in the master config. Also updated to more safely handle JSON inventory variables as this uncovered a bug with booleans where you end up with a string containing json in your yaml.
* | Merge pull request #1744 from smunilla/BZ1323918Brenton Leanhardt2016-04-121-1/+1
|\ \ | | | | | | Convert image_tag on masters
| * | Convert image_tag on mastersSamuel Munilla2016-04-121-1/+1
| | | | | | | | | | | | Also convert openshift_image_tag to and rpm versions for masters.
* | | Fixing non-HA master restart conditionalBrenton Leanhardt2016-04-121-1/+1
| | |
* | | use RestartSec to avoid default rate limit in systemdBrenton Leanhardt2016-04-125-0/+5
| | | | | | | | | | | | Lifted from https://github.com/openshift/origin/pull/8317
* | | Containerized installs on RHEL were downgrading docker unnecessarilyBrenton Leanhardt2016-04-121-2/+2
|/ /
* / Add openshift_hosted_facts role and remove hosted facts from openshift_common.Andrew Butcher2016-04-081-0/+1
|/
* Merge pull request #1722 from abutcher/containerized-cloudproviderBrenton Leanhardt2016-04-073-3/+3
|\ | | | | Add cloudprovider config dir to docker options.
| * Add cloudprovider config dir to docker options.Andrew Butcher2016-04-063-3/+3
| |
* | Merge pull request #1699 from abutcher/check-cloudprovider-kindBrenton Leanhardt2016-04-063-3/+3
|\ \ | | | | | | Check for kind in cloudprovider facts prior to accessing.
| * | Check for kind in cloudprovider facts prior to accessing.Andrew Butcher2016-04-043-3/+3
| | |
* | | Merge pull request #1660 from dgoodwin/admission-configBrenton Leanhardt2016-04-061-3/+19
|\ \ \ | |_|/ |/| | Add support for templating master admissionConfig.
| * | Add support for configuring oauth templates.Devan Goodwin2016-04-011-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow users who wish to deploy configs with ansible to define templates for oauth screens, and control the alwaysShowProviderSelection setting. There are currently three supported oauth templates, and we have a pre-existing 'oauth_template' variable, but it is assumed to mean you are controlling the 'login' screen, and this is the only one you can configure. To work around this, supporting all current and future templates, introduce a pluralized variable 'oauth_templates', which contains a JSON dict allowing the admin to control any template they wish. If both new and old variables are defined, the old one is ignored. (and can be considered deprecated) Internally the old value will be converted to the new dict, so the template just references one value. Example: openshift_master_oauth_always_show_provider_selection=true openshift_master_oauth_templates={"providerSelection": "provider-selection.html", "error": "oauth-error.html"} Yeilds: oauthConfig: alwaysShowProviderSelection: true templates: error: oauth-error.html providerSelection: provider-selection.html