summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* Add role to configure project request templateMichael Hanselmann2017-10-234-0/+93
| | | | | | | | The OpenShift master role already supports changing the master configuration to refer to a project template, but there's no way to manage that template directly. This role adds the necessary code to generate a default template and to apply customizations using the "yedit" module.
* Merge pull request #5818 from ashcrow/1503860OpenShift Merge Robot2017-10-232-8/+9
|\ | | | | | | | | Automatic merge from submit-queue. docker: Move enterprise registry from pkg to main
| * docker: Move enterprise registry from pkg to mainSteve Milner2017-10-192-8/+9
| | | | | | | | | | | | Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503860 Signed-off-by: Steve Milner <smilner@redhat.com>
* | Merge pull request #5761 from fabianvf/asb-client-secret-not-foundScott Dodson2017-10-234-22/+24
|\ \ | | | | | | Bug 1496426 - Update ansible-service-broker configuration to use proper certs and permissions
| * | Update defaultsFabian von Feilitzsch2017-10-194-5/+9
| | |
| * | Use service-ca.crt instead of master ca.crtFabian von Feilitzsch2017-10-191-16/+11
| | |
| * | use master certFabian von Feilitzsch2017-10-191-2/+2
| | |
| * | Bug 1496426 - add asb-client secret to openshift-ansible-service-broker ↵Fabian von Feilitzsch2017-10-191-1/+4
| | | | | | | | | | | | namespace
* | | Merge pull request #5813 from ashcrow/1503903OpenShift Merge Robot2017-10-239-62/+101
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Always ensure atomic.conf is configured for system containers. A new openshift_atomic role has been created for atomic specific tasks. The first task added is proxy which handles updating /etc/atomic.conf to ensure the proper proxy configuration is configured. This task file is then included (via include_role) in system container related task files. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503903
| * | | systemcontainers: Verify atomic.conf proxy is always configuredSteve Milner2017-10-199-62/+101
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | A new openshift_atomic role has been created for atomic specific tasks. The first task added is proxy which handles updating /etc/atomic.conf to ensure the proper proxy configuration is configured. This task file is then included (via include_role) in system container related task files. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503903 Signed-off-by: Steve Milner <smilner@redhat.com>
* | | Merge pull request #5748 from portante/fix-cpu-limitsScott Dodson2017-10-2022-65/+151
|\ \ \ | | | | | | | | Use "requests" for CPU resources instead of limits
| * | | Use "requests" for CPU resources instead of limitsPeter Portante2017-10-1922-65/+151
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We now use a CPU request to ensure logging infrastructure pods are not capped by default for CPU usage. It is still important to ensure we have a minimum amount of CPU. We keep the use of the variables *_cpu_limit so that the existing behavior is maintained. Note that we don't want to cap an infra pod's CPU usage by default, since we want to be able to use the necessary resources to complete it's tasks. Bug 1501960 (https://bugzilla.redhat.com/show_bug.cgi?id=1501960)
* | | Merge pull request #5792 from mgugino-upstream-stage/fix-master-undefined-varScott Dodson2017-10-201-0/+4
|\ \ \ | | | | | | | | Fix undefined variable for master upgrades
| * | | Fix undefined variable for master upgradesMichael Gugino2017-10-181-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, oreg_auth_credentials_replace is undefined during master upgrades. This commit ensures this variable is defined during upgrades.
* | | | Merge pull request #5752 from kwoodson/bz1491399Scott Dodson2017-10-201-0/+13
|\ \ \ \ | | | | | | | | | | [bz1491399] Adding pre check to verify clusterid is set along with cloudprovider when performing upgrade.
| * | | | Adding pre check to verify clusterid is set along with cloudprovider when ↵Kenny Woodson2017-10-161-0/+13
| | | | | | | | | | | | | | | | | | | | performing upgrade.
* | | | | Merge pull request #5821 from abutcher/ca-trust-skip-restartScott Dodson2017-10-201-2/+14
|\ \ \ \ \ | | | | | | | | | | | | Check for container runtime prior to restarting when updating system CA trust.
| * | | | | Check for container runtime prior to restarting when updating system CA trust.Andrew Butcher2017-10-191-2/+14
| | | | | |
* | | | | | Merge pull request #5766 from jcantrill/1489498_preserve_replica_countScott Dodson2017-10-206-6/+63
|\ \ \ \ \ \ | | | | | | | | | | | | | | bug 1489498. preserve replica and shard settings
| * | | | | | bug 1489498. preserve replica and shard settingsJeff Cantrill2017-10-176-6/+63
| | | | | | |
* | | | | | | Merge pull request #5783 from dymurray/readinessScott Dodson2017-10-201-0/+14
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Bug 1503233 - Add liveness and readiness probe checks to ASB deployme…
| * | | | | | | Indentation errorsDylan Murray2017-10-171-14/+14
| | | | | | | |
| * | | | | | | Bug 1503233 - Add liveness and readiness probe checks to ASB deploymentconfigDylan Murray2017-10-171-0/+14
| | | | | | | |
* | | | | | | | Merge pull request #5574 from dulek/containerized_kuryr_supportScott Dodson2017-10-2013-2/+704
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / |/| | | | | | | Initial Kuryr support
| * | | | | | | Initial Kuryr supportMichał Dulko2017-10-2013-2/+704
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
* | | | | | | | Merge pull request #5746 from staebler/Bug_1496694_new_resource_namesScott Dodson2017-10-199-71/+123
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | | Update service catalog playbook for service-catalog rc1
| * | | | | | | Change to service-signer.crt for template_service_broker CA_BUNDLEstaebler2017-10-182-3/+3
| | | | | | | |
| * | | | | | | Use service-signer.crt for ca_bundle passed to clusterservicebrokerstaebler2017-10-182-2/+6
| | | | | | | |
| * | | | | | | Rename ServiceBroker to ClusterServiceBroker for ansible_service_broker task.staebler2017-10-171-2/+2
| | | | | | | |
| * | | | | | | Add apiserver.crt to service-catalog controller-manager deployment.staebler2017-10-172-0/+21
| | | | | | | |
| * | | | | | | Remove redundant faulty role binding ifrom kubeservicecatalog_roles_bindings.ymlstaebler2017-10-173-15/+2
| | | | | | | |
| * | | | | | | Update service catalog playbook for service-catalog rc1staebler2017-10-147-64/+104
| | |_|_|_|/ / | |/| | | | |
* | | | | | | Wait longer for stable GCP instancesClayton Coleman2017-10-181-1/+1
| |_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | We are seeing instances take longer than 5m to become available, possibly due to GCP infra issues.
* | | | | | Merge pull request #5789 from zgalor/fix_limit_typoScott Dodson2017-10-181-1/+1
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | Fix typo in setting prom-proxy memory limit
| * | | | | Fix typo in setting prom-proxy memory limitZohar Galor2017-10-181-1/+1
| | |_|_|/ | |/| | | | | | | | | | | | | bz: https://bugzilla.redhat.com/show_bug.cgi?id=1493368
* / | | | Fix pvc selector default to be empty dict instead of stringZohar Galor2017-10-181-3/+3
|/ / / /
* | | | Merge pull request #5361 from kwoodson/fix_bootstrap_filesScott Dodson2017-10-1820-86/+421
|\ \ \ \ | | | | | | | | | | Provisioning updates.
| * | | | Do not remove files for bootstrap if resolv or dns.Kenny Woodson2017-10-1720-86/+421
| | | | |
* | | | | Merge pull request #5459 from zgalor/nfs_fixScott Dodson2017-10-1812-166/+90
|\ \ \ \ \ | | | | | | | | | | | | Fix prometheus role nfs
| * | | | | Fix prometheus role nfsZohar Galor2017-10-1612-166/+90
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow for external or internal nfs. use facts as used for logging and metrics. Update prometheus-alertmanager image to v0.9.1
* | | | | | Merge pull request #5774 from mgugino-upstream-stage/docker-option-fixScott Dodson2017-10-182-5/+7
|\ \ \ \ \ \ | |_|_|_|/ / |/| | | | | Fix missing docker option signature-verification
| * | | | | Fix missing docker option signature-verificationMichael Gugino2017-10-162-5/+7
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, docker 1.12 can be configured to use the run-time parameter of 'signature-verification' By default, rpm installation of docker results in '--signature-verification=false' being added to OPTIONS in /etc/sysconfig/docker Currently, openshift-ansible does not preserve that value. This can cause docker to be unable to pull images from a previously working source due to a change in configuration. This commit adds the option with the default as provided by the rpm installation. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1502560
* | | | | Merge pull request #5754 from ewolinetz/bz1501831Scott Dodson2017-10-175-87/+103
|\ \ \ \ \ | | | | | | | | | | | | Updating ES proxy image prefix and version to match other components
| * | | | | Reverting proxy image version to v1.0.0 to pass CIEric Wolinetz2017-10-161-1/+1
| | | | | |
| * | | | | Making travis happyEric Wolinetz2017-10-161-83/+83
| | | | | |
| * | | | | Updating pattern for elasticsearch_proxy imagesEric Wolinetz2017-10-134-3/+17
| | | | | |
| * | | | | Updating ES proxy image prefix and version to match other componentsEric Wolinetz2017-10-133-4/+6
| | | | | |
* | | | | | Merge pull request #5777 from wozniakjan/eventrouter_bug1501768Scott Dodson2017-10-171-2/+2
|\ \ \ \ \ \ | | | | | | | | | | | | | | Bug 1501768: fix eventrouter nodeSelector padding
| * | | | | | Bug 1501768: fix eventrouter nodeSelector paddingJan Wozniak2017-10-171-2/+2
| | |_|/ / / | |/| | | |
* | | | | | Merge pull request #5768 from giuseppe/crio-error-out-with-node-docker-containerOpenShift Merge Robot2017-10-171-0/+6
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. cri-o: error out when node is a Docker container Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1489555 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>