summaryrefslogtreecommitdiffstats
path: root/roles/openshift_node/tasks
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #6658 from mgugino-upstream-stage/containerized_boolsOpenShift Merge Robot2018-01-091-1/+1
|\ | | | | | | | | Automatic merge from submit-queue. ensure containerized bools are cast
| * ensure containerized bools are castMichael Gugino2018-01-081-1/+1
| |
* | Merge pull request #6650 from ↵OpenShift Merge Robot2018-01-091-1/+1
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | vrutkovs/containerized_upgrade_set_openshift_use_openshift_sdn Automatic merge from submit-queue. upgrades: use openshift_node_use_openshift_sdn when trying to pre-pull the image This affects 3.8/3.9 upgrades for containerized hosts, if nodes are separate from master.
| * | Use openshift_node_use_openshift_sdn when doing a containerized node upgradeVadim Rutkovsky2018-01-091-1/+1
| | | | | | | | | | | | Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* | | Properly cast crio boolean variables to boolMichael Gugino2018-01-082-4/+4
| |/ |/| | | | | | | | | | | | | | | | | | | Variables that are specifically booleans should be cast to bool. This is because users may sometimes pass them as string values. This is particularly prevalent when using ini-style inventories. Affected-by: https://github.com/ansible/ansible/issues/34591 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1531592
* | Don't overwrite node's systemd units for containerized installVadim Rutkovsky2018-01-051-1/+1
|/ | | | | | Systemd units are being updated in ../systemd_units.yml Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* Remove bootstrap.yml from main.yml in openshift_node roleMichael Gugino2017-12-211-4/+0
| | | | | | This commit utilizes include_role for bootstrapping the node instead of conditional include of tasks now that the node role has no meta includes that have tasks.
* Remove references to deployment_typeMichael Gugino2017-12-212-2/+1
| | | | | | | Move openshift_deployment_type check into sanity_check action plugin. Remove compatibility for deployment_type. deployment_type has been deprecated for some time now.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-2016-25/+25
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-181-2/+2
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Remove openshift_node_facts roleMichael Gugino2017-12-184-5/+5
| | | | | This commit removes the remainder of openshift_node_facts role.
* Merge pull request #6456 from mgugino-upstream-stage/node-factsMichael Gugino2017-12-175-9/+9
|\ | | | | Remove openshift_node_facts part 1
| * Remove openshift_node_facts part 1Michael Gugino2017-12-145-9/+9
| | | | | | | | | | This commit removes some items from openshift_facts for the openshit_node role.
* | Deprecate using Ansible tests as filtersRussell Teague2017-12-1417-30/+32
|/
* upgrade node mark 2Michael Gugino2017-12-1211-174/+219
|
* Refactor node upgrade to include less serial tasksMichael Gugino2017-12-128-189/+190
| | | | | | | | | | | | | This commit moves the pulling of images, packages, and updating config files into a non-serialized play. The serialized play is now in charge of marking unschedulable, draining, stopping and restarting services, and marking schedulable. If rpm install / container download takes 60s per host, this will save 3 hours and 10 minutes at 200 hosts per cluster and forks of 20 hosts.
* Refactor upgrade codepaths step 1Michael Gugino2017-12-121-15/+0
| | | | | | | | | | | | | | | | This commit refactors some upgrade code paths. Touched areas are: 1) Reduces usage of 'oo_all_hosts' in various places, especially when running upgrade_control_plane. 2) Reuses common code across the various upgrade* playbooks. 3) Moves docker upgrade checks into container_runtime_role. 4) Combines smaller playbooks and plays to reduce file sprawl.
* openshift_node: reintroduce restart of CRI-O.Giuseppe Scrivano2017-12-081-0/+9
| | | | | | change introduced with 39cf5084f18e2e0adca46b925660a6f2c38d227c Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Remove openshift.common.service_typeMichael Gugino2017-12-0713-29/+29
| | | | | | | | This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
* Merge pull request #6362 from mgugino-upstream-stage/crt-playsScott Dodson2017-12-073-16/+0
|\ | | | | Implement container_runtime playbooks and changes
| * Implement container_runtime playbooks and changesMichael Gugino2017-12-073-16/+0
| | | | | | | | | | | | This commit refactors some duplicate code, removes usage of set_fact where not needed, and reorganizes container_runtime role to use include_role.
* | Include Deprecation: Convert to include_tasksRussell Teague2017-12-061-1/+1
|/
* Fix oreg_auth_credentials_create register varMichael Gugino2017-12-051-2/+6
| | | | | | | | | | | | There is a variable collision for the *oreg_auth_credentials_create variables in openshift_master and openshift_node registry_create tasks. This commit ensures standard and alternative oreg auth credential placement tasks don't use the same register variable. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1520866
* Implement container runtime roleMichael Gugino2017-12-014-15/+8
|
* retry package operationsLuke Meyer2017-11-3011-0/+28
| | | | | | When a package install/update fails due to network blips or other spotty availability, retry it. If the failure is a real failure (e.g. package is really not there) it still fails after 3 tries (Ansible default).
* Combine openshift_node and openshift_node_dnsmasqMichael Gugino2017-11-275-2/+91
| | | | | This commit combines these two roles. This will prevent openshift_node_facts from running twice.
* Merge pull request #6198 from mgugino-upstream-stage/openvswitch-sys-containerMichael Gugino2017-11-271-2/+2
|\ | | | | Remove is_openvswitch_system_container from facts
| * Remove is_openvswitch_system_container from factsMichael Gugino2017-11-221-2/+2
| | | | | | | | Simply logic for this variable.
* | Include Deprecation - openshift-nodeRussell Teague2017-11-226-30/+27
|/
* Fix system_images_registry variableMichael Gugino2017-11-222-4/+4
| | | | Simplify the logic for this variable.
* Fix node system container varMichael Gugino2017-11-212-3/+3
| | | | Fix logic, make it simpler.
* Combine openshift_node and openshift_node_upgradeMichael Gugino2017-11-166-0/+320
| | | | | | | | | Currently, having openshift_node and openshift_node_upgrade as two distinct roles has created a duplication across handlers, templates, and some tasks. This commit combines the roles to reduce duplication and bugs encountered by not putting code in both places.
* Merge pull request #6094 from ↵OpenShift Merge Robot2017-11-151-0/+19
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/syscontainers-docker-login-module Automatic merge from submit-queue. Alternative method to create docker registry auth creds Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
| * Alternative method to create docker registry auth credsMichael Gugino2017-11-141-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
* | Adding instance profile support for node groups.Kenny Woodson2017-11-132-0/+2
|/
* Adding CONFIG_FILE option back.Kenny Woodson2017-11-011-3/+3
|
* Configurable node config location.Kenny Woodson2017-11-011-3/+3
|
* Merge pull request #5924 from smarterclayton/bootstrap_cleanupOpenShift Merge Robot2017-10-311-1/+1
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. GCP cannot use growpart utils from AWS due to conflicting package Allow cloud provider specific packages to be specified. Also, fix a wait condition in openshift_gcp to allow masters to be bootstrapped nodes. @kwoodson
| * GCP cannot use AWS growpart packageClayton Coleman2017-10-301-1/+1
| | | | | | | | Make the required package optional
* | Add retry logic to docker auth credentialsMichael Gugino2017-10-301-0/+3
|/ | | | | | This commit enables retry on docker login commands. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1506931
* Renaming csr to bootstrap for consistency.Kenny Woodson2017-10-251-1/+1
|
* systemcontainers: Verify atomic.conf proxy is always configuredSteve Milner2017-10-192-0/+10
| | | | | | | | | | | A new openshift_atomic role has been created for atomic specific tasks. The first task added is proxy which handles updating /etc/atomic.conf to ensure the proper proxy configuration is configured. This task file is then included (via include_role) in system container related task files. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503903 Signed-off-by: Steve Milner <smilner@redhat.com>
* Do not remove files for bootstrap if resolv or dns.Kenny Woodson2017-10-175-51/+102
|
* Fix containerized node service unit placement orderMichael Gugino2017-10-124-15/+3
| | | | | | | | | | | | | | Currently, non-containerized nodes have systemd service unit files created after registry auth credentials are created. Containerized nodes place service unit files prior to creation of these credentials. This commit ensures systemd service units are created at the correct time for both containerized and non-containerized nodes. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500642
* Fix broken debug_levelMichael Gugino2017-10-111-1/+1
| | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* Separate tuned daemon setup into a role.Jiri Mencak2017-10-102-45/+0
| | | | | | | | | | | | | | Currently, profiles for the tuned daemon are set only for OpenShift node(s). This excludes the OpenShift loadbalancer. As a result, ARP cache limits on loadbalancers are not raised. This causes problems with HA setups where loadbalancers serve 1k+ OpenShift nodes. This commit ensures the openshift-control-plane role is applied to loadbalancers, masters and OpenShift infra nodes. Regular OpenShift worker nodes get the openshift-node profile. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1498213
* Move node aws credentials to config.ymlMichael Gugino2017-10-022-16/+16
| | | | | | | | | | Currently, the node service is started before aws credentials (if needed) are configured. This commit ensures the aws credentials are placed before the node service is started. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1497150
* Merge pull request #5599 from ashcrow/node-start-fixOpenShift Merge Robot2017-10-011-0/+2
|\ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. openshift_node: Set DOCKER_SERVICE for system container The node system container was being installed with the ```DOCKER_SERVICE``` holding to it's ```manifest.json``` default of docker.service. This chage adds the ```DOCKER_SERVICE``` parameter on node system container install so that it uses the same value from the installer stored in ```openshift.docker.service_name```. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707
| * openshift_node: Add MASTER_SERVICE on system container installSteve Milner2017-09-291-0/+1
| | | | | | | | | | | | Setting the MASTER_SERVICE to openshift.common.service_type. Signed-off-by: Steve Milner <smilner@redhat.com>
| * openshift_node: Set DOCKER_SERVICE for system containerSteve Milner2017-09-291-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | The node system container was being installed with the DOCKER_SERVICE holding to it's manifest.json default of docker.service. This change adds the DOCKER_SERVICE parameter on node system container install so that it uses the same value from the installer stored in openshift.docker.service_name. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496707 Signed-off-by: Steve Milner <smilner@redhat.com>