| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
Recent commit removed these checks. These two auth providers
are specifically excluded in origin, thus we should enable
the checks to ensure challenge auth is not enabled for these
providers.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1444367
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during rolling CA redeployment.
This PR temporarily configures master `servingInfo.clientCA` as `client-ca-bundle.crt` during CA redeploy so that clients referencing the old OpenShift CA can continue to function until all cluster certificates have been replaced and `servingInfo.clientCA` is reset to `ca.crt`.
`client-ca-bundle.crt` is a new bundle created by the `openshift_ca` role which contains old and new OpenShift CA certificates.
https://bugzilla.redhat.com/show_bug.cgi?id=1509124
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1493276
|
| |
| |
| |
| | |
rolling CA redeployment.
|
|/
|
|
|
|
|
| |
This commit ensures github auth validation filter works
as intended.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1444367
|
|
|
|
|
|
|
| |
This variable is no longer used and references
should be removed.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1507449
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Currently, OpenIDIdentityProvider does not support
'challenge=true' in openshift-ansible.
This is incorrect, the auth plugin OpenIDIdentityProvider
does support this.
This commit removes the unnecessary validation of
challenge key.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1444367
Fixes: https://github.com/openshift/openshift-ansible/issues/4417
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Currently, debug_level is documented as a way to change
the debug output level for both masters and nodes.
debug_level does not currently have any effect.
This commit removes debug_level from openshift_facts
and properly sets openshift_master_debug_level and
openshift_node_debug_level to the value of debug_level
specified in the inventory.
This commit also reorganizes some set_fact tasks
needed during master upgrades to put all work-around
set-facts for undefined variables in one place, allowing
for easier cleanup in the future. This includes an
entry for openshift_master_debug_level.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
|
| |
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue
Add 3.7 scheduler predicates
In 3.7 we added NoVolumeNodeConflict and MaxAzureDiskVolumeCount predicate that needs to be installed.
Check carefully, I tested it on my virtual machine, but I did not manage to run the test.
|
| | |
|
|/
|
|
|
|
|
|
|
|
|
| |
Previously, openshift-ansible supported various
types of deployments using the variable "openshift_deployment_type"
Currently, openshift-ansible only supports two deployment types,
"origin" and "openshift-enterprise".
This commit removes all logic and references to deprecated
deployment types.
|
| |
|
| |
|
| |
|
|
|
|
| |
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
|
|\
| |
| | |
Merged by openshift-bot
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This commit allows to specify imageConfig.format specifically for master
or for nodes.
One use case of this could be if you want to use customer builder
images. In this case imageConfig.format only needs to be changed in the
master-config.yml but not in the node-config.yml.
|
|\ \
| |/
|/| |
Merged by openshift-bot
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
GitHubIdentityProvider provides the ability to authenticate against
GitHub organization teams [1].
This adds the attribute as optional so that users do not get the error
"provider GitHubIdentityProvider contains unknown keys teams".
[1]: https://docs.openshift.com/container-platform/3.5/install_config/configuring_authentication.html#GitHub
|
|\ \
| | |
| | | |
Merged by openshift-bot
|
| | | |
|
| |/
|/|
| |
| | |
Will allow for default image resolution to be used.
|
| |
| |
| |
| |
| |
| |
| | |
In a project where contributors are free to use whatever editor they
want and we have linting tools that verify the proper formatting of
Python files, it should not be required to have a vim-specific line in
Python files.
|
| | |
|
| |
| |
| |
| |
| |
| | |
In ansible 2.3 "[WARNING]: when statements should not include jinja2
templating delimiters such as {{ }} or {% %}. Found: {{
g_glusterfs_hosts is not defined }}"
|
|/ |
|
| |
|
| |
|
| |
|
|
|
|
| |
Detected by pylint. The fixture indeed doesn't require an argument.
|
| |
|
|
|
|
|
|
| |
Origin 1.6 and future releases will be versioned as Origin 3.6+. This
unifies a point of inconsistency and brings Origin in line with the full
release history. Update version numbers to match that 3.x is preferred.
|
| |
|
| |
|
|
|
|
|
|
|
| |
And remove explicit dependencies on nose, replacing with pytest.
The former is the way forward, for it is a better maintained test
library, and a transitive dependency of `molecule`, the test framework
we're using to add integration tests to this repo (work in progress).
|
|
|
|
| |
In the intention to remove the dependency on nose and use only pytest.
|
|
|
|
|
| |
This removes irrelevant differences between the two test files, making
it easier to observe similarities.
|
|
|
|
|
|
|
|
| |
This is intented to make it easier to read tests top-down.
The test methods in both files are sorted somehow logically, and in the
same order in both files, to help visualizing the similarities between
them with diff tools.
|
|
|
|
|
| |
Consolidate tests for bad input into a single file instead of having
the same code in two files.
|
|
|
|
|
| |
And reorganize them in such a way to show that there are a bunch of
duplicated tests that are exactly the same.
|
|
|
|
|
|
| |
http://stackoverflow.com/a/10097543/4804690
Additionally, avoid using platform-specific '/' and '..'.
|
| |
|
| |
|
|
|
|
| |
openshift_master_facts available within the role
|
| |
|
| |
|
|
|
|
| |
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
|
|
|
|
| |
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
|
| |
|
| |
|