summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* Fix parsing certs with very large serial numbersTim Bielawa2017-06-232-3/+23
| | | | | | | | | | | Certificates with large serial numbers (such as those from commercial vendors) previously failed to parse due to absent logic in the FakeOpenSSLCertificate parser. This would cause the module to abort and break any other roles depending on the cert expiry checking results. * Identifies large serials in HEX format for decimal conversion * Update unit tests to parse a large serial
* Sync 3.5 cfme templates over to 3.6Scott Dodson2017-06-228-98/+489
|
* Merge pull request #4528 from mtnbikenc/update-templatesScott Dodson2017-06-2226-36/+519
|\ | | | | Update template examples for 3.6
| * Update template examples for 3.6Russell Teague2017-06-2126-36/+519
| |
* | Merge pull request #4503 from giuseppe/fix-unable-to-mask-service-etcd_containerOpenShift Bot2017-06-221-3/+10
|\ \ | | | | | | Merged by openshift-bot
| * | etcd, system_container: do not mask etcd_containerGiuseppe Scrivano2017-06-201-1/+8
| | | | | | | | | | | | | | | | | | Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1462087 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * | etcd, system_container: do not enable system etcdGiuseppe Scrivano2017-06-201-2/+2
| | | | | | | | | | | | | | | | | | | | | if etcd is installed and it is not the system container, only unmask the service but do not enable it. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | Merge pull request #4516 from kwoodson/limit_refsOpenShift Bot2017-06-222-13/+14
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | Fixed readme doc.Kenny Woodson2017-06-211-12/+12
| | | |
| * | | Adding option for serviceAccountConfig.limitSecretReferencesKenny Woodson2017-06-202-13/+14
| | | |
* | | | Merge pull request #4505 from ↵Jan Chaloupka2017-06-221-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | ingvagabund/set-proper-etcd-data-dir-for-system-container set proper etcd_data_dir for system container
| * | | | set proper etcd_data_dir for system containerJan Chaloupka2017-06-201-1/+1
| |/ / /
* | | | Merge pull request #4510 from ashcrow/system-container-inventoryOpenShift Bot2017-06-222-5/+5
|\ \ \ \ | | | | | | | | | | Merged by openshift-bot
| * | | | system_containers: Add openshift_ to other system_container varsSteve Milner2017-06-201-4/+4
| | | | |
| * | | | system_containers: Add openshift_ to use_system_containers varSteve Milner2017-06-202-5/+5
| |/ / /
* | | | Merge pull request #4364 from jcantrill/bz1457642_set_name_to_dcOpenShift Bot2017-06-212-1/+5
|\ \ \ \ | | | | | | | | | | Merged by openshift-bot
| * | | | bug 1457642. Use same SG index to avoid seeding timeoutJeff Cantrill2017-06-142-1/+5
| | | | |
* | | | | Merge pull request #4497 from ashcrow/atomic-version-checkOpenShift Bot2017-06-212-4/+22
|\ \ \ \ \ | |_|_|_|/ |/| | | | Merged by openshift-bot
| * | | | oc_atomic_container: Require 1.17.2Steve Milner2017-06-192-4/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The oc_atomic_container module requires features only available in atomic versions 1.17.2+. Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1461662
* | | | | Updating default from null to ""ewolinetz2017-06-201-1/+1
| |_|/ / |/| | |
* | | | Merge pull request #4292 from sdodson/push-via-dnsOpenShift Bot2017-06-205-0/+13
|\ \ \ \ | | | | | | | | | | Merged by openshift-bot
| * | | | Update atomic-openshift-master.j2Scott Dodson2017-06-191-1/+1
| | | | |
| * | | | Enable push to registry via dns only on clean 3.6 installsScott Dodson2017-06-182-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | We cannot assume that 3.5 to 3.6 upgrades were signed with the correct certs
| * | | | Disable actually pushing to the registry via dns for nowScott Dodson2017-06-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We need to sort out how to know that the registry certificate has the proper hostnames attached to it. It will for 3.6 clean installs but not for 3.5 to 3.6 upgrades. For now make it opt in and come back to this.
| * | | | Add openshift_node_dnsmasq role to upgradeScott Dodson2017-06-181-0/+3
| | | | |
| * | | | Push to the registry via dnsScott Dodson2017-06-183-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Configures OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc Adds 'cluster.local' to dns search on nodes via dispatcher script Adds '.svc' to NO_PROXY defaults
* | | | | Merge pull request #4489 from rhcarvalho/image-availability-no-tlsOpenShift Bot2017-06-191-1/+1
|\ \ \ \ \ | |_|_|_|/ |/| | | | Merged by openshift-bot
| * | | | Disable TLS verification in skopeo inspectRodolfo Carvalho2017-06-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some registries are not configured with valid certificates and thus the check fails with 'http: server gave HTTP response to HTTPS client'. Since this is not fetching images, but only checking for existence, trade security for convenience.
* | | | | Merge pull request #4486 from sdodson/etcdv3-clean-installOpenShift Bot2017-06-193-20/+7
|\ \ \ \ \ | | | | | | | | | | | | Merged by openshift-bot
| * | | | | Preserve etcd3 storage if it's already in useScott Dodson2017-06-183-20/+7
| | |/ / / | |/| | | | | | | | | | | | | | | | | | This would be the case if for instance they'd upgraded and then migrated.
* | | | | Merge pull request #4484 from jarrpa/glusterfs-fixes-tooOpenShift Bot2017-06-1913-30/+82
|\ \ \ \ \ | |_|_|/ / |/| | | | Merged by openshift-bot
| * | | | GlusterFS: Generate better secret keysJose A. Rivera2017-06-162-4/+21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Fix error when groups.glusterfs_registry is undefined.Jose A. Rivera2017-06-161-3/+3
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Use proper identity in heketi secretJose A. Rivera2017-06-162-5/+7
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Allow configuration of heketi portJose A. Rivera2017-06-1610-12/+42
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Fix variable typoJose A. Rivera2017-06-161-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Minor template fixesJose A. Rivera2017-06-163-6/+9
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | registry: mount GlusterFS storage volume from correct hostJose A. Rivera2017-06-161-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
* | | | | Merge pull request #4329 from srampal/rhel_ose_aciOpenShift Bot2017-06-1819-23/+260
|\ \ \ \ \ | |_|/ / / |/| | | | Merged by openshift-bot
| * | | | Add support for rhel, aci, vxlanSanjeev Rampal2017-05-3119-23/+260
| | | | |
* | | | | Merge pull request #3954 from ingvagabund/etcd-migrateOpenShift Bot2017-06-189-0/+274
|\ \ \ \ \ | |_|_|/ / |/| | | | Merged by openshift-bot
| * | | | Introduce etcd migrate roleJan Chaloupka2017-06-179-0/+274
| | | | |
* | | | | Merge pull request #4435 from sdodson/etcdv3-clean-installOpenShift Bot2017-06-162-2/+21
|\ \ \ \ \ | | | | | | | | | | | | Merged by openshift-bot
| * | | | | etcd v3 for clean installsScott Dodson2017-06-162-2/+21
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* | | | | Merge pull request #4466 from portante/rufusOpenShift Bot2017-06-161-0/+1
|\ \ \ \ \ | | | | | | | | | | | | Merged by openshift-bot
| * | | | | Ensure only one ES pod per PVPeter Portante2017-06-161-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bug 1460564. Fixes [BZ #1460564](https://bugzilla.redhat.com/show_bug.cgi?id=1460564). Unfortunately, the defaults for Elasticsearch prior to v5 allow more than one "node" to access the same configured storage volume(s). This change forces this value to 1 to ensure we don't have an ES pod starting up accessing a volume while another ES pod is shutting down when reploying. This can lead to "1" directories being created in `/elasticsearch/persistent/${CLUSTER_NAME}/data/${CLUSTER_NAME}/nodes/`. By default ES uses a "0" directory there when only one node is accessing it.
* | | | | | Merge pull request #4474 from rhcarvalho/rename-cockpit-shellScott Dodson2017-06-162-2/+2
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | Rename cockpit-shell -> cockpit-system
| * | | | | Rename cockpit-shell -> cockpit-systemRodolfo Carvalho2017-06-162-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The package name has changed. See https://bugzilla.redhat.com/show_bug.cgi?id=1461689 https://bugzilla.redhat.com/show_bug.cgi?id=1419718
* | | | | | Merge pull request #4334 from simaishi/cf45Scott Dodson2017-06-167-101/+180
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Update CloudForms templates for CF 4.5/CF 4.2
| * | | | | Update image repo name, images have been moved from 'cloudforms' toSatoe Imaishi2017-06-021-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | 'cloudforms42' for CF 4.2.