summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fixed readme doc.Kenny Woodson2017-06-211-12/+12
|
* Adding option for serviceAccountConfig.limitSecretReferencesKenny Woodson2017-06-204-13/+20
|
* Merge pull request #4292 from sdodson/push-via-dnsOpenShift Bot2017-06-207-0/+15
|\ | | | | Merged by openshift-bot
| * Update atomic-openshift-master.j2Scott Dodson2017-06-191-1/+1
| |
| * Enable push to registry via dns only on clean 3.6 installsScott Dodson2017-06-182-1/+4
| | | | | | | | | | We cannot assume that 3.5 to 3.6 upgrades were signed with the correct certs
| * Disable actually pushing to the registry via dns for nowScott Dodson2017-06-181-1/+1
| | | | | | | | | | | | | | We need to sort out how to know that the registry certificate has the proper hostnames attached to it. It will for 3.6 clean installs but not for 3.5 to 3.6 upgrades. For now make it opt in and come back to this.
| * Add openshift_node_dnsmasq role to upgradeScott Dodson2017-06-183-0/+5
| |
| * Push to the registry via dnsScott Dodson2017-06-183-0/+7
| | | | | | | | | | | | Configures OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc Adds 'cluster.local' to dns search on nodes via dispatcher script Adds '.svc' to NO_PROXY defaults
* | Automatic commit of package [openshift-ansible] release [3.6.119-1].Jenkins CD Merge Bot2017-06-202-2/+16
| | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.119
* | Merge pull request #4489 from rhcarvalho/image-availability-no-tlsOpenShift Bot2017-06-191-1/+1
|\ \ | | | | | | Merged by openshift-bot
| * | Disable TLS verification in skopeo inspectRodolfo Carvalho2017-06-191-1/+1
| | | | | | | | | | | | | | | | | | | | | Some registries are not configured with valid certificates and thus the check fails with 'http: server gave HTTP response to HTTPS client'. Since this is not fetching images, but only checking for existence, trade security for convenience.
* | | Merge pull request #4486 from sdodson/etcdv3-clean-installOpenShift Bot2017-06-194-22/+20
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | Preserve etcd3 storage if it's already in useScott Dodson2017-06-184-22/+20
| | | | | | | | | | | | | | | | | | | | This would be the case if for instance they'd upgraded and then migrated.
* | | | Merge pull request #4484 from jarrpa/glusterfs-fixes-tooOpenShift Bot2017-06-1913-30/+82
|\ \ \ \ | | | | | | | | | | Merged by openshift-bot
| * | | | GlusterFS: Generate better secret keysJose A. Rivera2017-06-162-4/+21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Fix error when groups.glusterfs_registry is undefined.Jose A. Rivera2017-06-161-3/+3
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Use proper identity in heketi secretJose A. Rivera2017-06-162-5/+7
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Allow configuration of heketi portJose A. Rivera2017-06-1610-12/+42
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Fix variable typoJose A. Rivera2017-06-161-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | GlusterFS: Minor template fixesJose A. Rivera2017-06-163-6/+9
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
| * | | | registry: mount GlusterFS storage volume from correct hostJose A. Rivera2017-06-161-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jose A. Rivera <jarrpa@redhat.com>
* | | | | Merge pull request #4491 from sdodson/fix-storage-migrationScott Dodson2017-06-191-2/+2
|\ \ \ \ \ | | | | | | | | | | | | Temporarilly only migrate jobs as we were before
| * | | | | Temporarilly only migrate jobs as we were beforeScott Dodson2017-06-191-2/+2
| | |_|_|/ | |/| | |
* | | | | Automatic commit of package [openshift-ansible] release [3.6.117-1].Jenkins CD Merge Bot2017-06-192-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.117
* | | | | Merge pull request #4329 from srampal/rhel_ose_aciOpenShift Bot2017-06-1820-24/+261
|\ \ \ \ \ | |/ / / / |/| | | | Merged by openshift-bot
| * | | | Add support for rhel, aci, vxlanSanjeev Rampal2017-05-3120-24/+261
| | | | |
* | | | | Merge pull request #4476 from mtnbikenc/storage-upgradeScott Dodson2017-06-187-44/+18
|\ \ \ \ \ | |_|_|/ / |/| | | | Run storage upgrade pre and post master upgrade
| * | | | Run storage upgrade pre and post master upgradeRussell Teague2017-06-187-44/+18
| | | | |
* | | | | Merge pull request #3954 from ingvagabund/etcd-migrateOpenShift Bot2017-06-1810-0/+398
|\ \ \ \ \ | |_|_|_|/ |/| | | | Merged by openshift-bot
| * | | | Introduce etcd migrate roleJan Chaloupka2017-06-1710-0/+398
| | | | |
* | | | | Automatic commit of package [openshift-ansible] release [3.6.116-1].Jenkins CD Merge Bot2017-06-182-2/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.116
* | | | | Merge pull request #4435 from sdodson/etcdv3-clean-installOpenShift Bot2017-06-163-2/+31
|\ \ \ \ \ | | | | | | | | | | | | Merged by openshift-bot
| * | | | | etcd v3 for clean installsScott Dodson2017-06-163-2/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* | | | | | Merge pull request #4466 from portante/rufusOpenShift Bot2017-06-161-0/+1
|\ \ \ \ \ \ | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | Ensure only one ES pod per PVPeter Portante2017-06-161-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bug 1460564. Fixes [BZ #1460564](https://bugzilla.redhat.com/show_bug.cgi?id=1460564). Unfortunately, the defaults for Elasticsearch prior to v5 allow more than one "node" to access the same configured storage volume(s). This change forces this value to 1 to ensure we don't have an ES pod starting up accessing a volume while another ES pod is shutting down when reploying. This can lead to "1" directories being created in `/elasticsearch/persistent/${CLUSTER_NAME}/data/${CLUSTER_NAME}/nodes/`. By default ES uses a "0" directory there when only one node is accessing it.
* | | | | | | Merge pull request #4474 from rhcarvalho/rename-cockpit-shellScott Dodson2017-06-164-5/+7
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | Rename cockpit-shell -> cockpit-system
| * | | | | | PAPR: define openshift_image_tag via command lineRodolfo Carvalho2017-06-161-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a temporary workaround to make sure the action plugin in the openshift_health_checker role can read the correct value specified in the OPENSHIFT_IMAGE_TAG environment variable, instead of a jinja2 template expression.
| * | | | | | Rename cockpit-shell -> cockpit-systemRodolfo Carvalho2017-06-163-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The package name has changed. See https://bugzilla.redhat.com/show_bug.cgi?id=1461689 https://bugzilla.redhat.com/show_bug.cgi?id=1419718
* | | | | | | Merge pull request #4334 from simaishi/cf45Scott Dodson2017-06-167-101/+180
|\ \ \ \ \ \ \ | |_|_|_|/ / / |/| | | | | | Update CloudForms templates for CF 4.5/CF 4.2
| * | | | | | Update image repo name, images have been moved from 'cloudforms' toSatoe Imaishi2017-06-021-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 'cloudforms42' for CF 4.2.
| * | | | | | Update image repo name, images have been moved from 'cloudforms' toSatoe Imaishi2017-06-021-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 'cloudforms45' for CF 4.5.
| * | | | | | CloudForms 4.5 templatesSatoe Imaishi2017-05-316-98/+177
| | | | | | |
* | | | | | | Automatic commit of package [openshift-ansible] release [3.6.114-1].Jenkins CD Merge Bot2017-06-162-2/+5
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.114
* | | | | | Automatic commit of package [openshift-ansible] release [3.6.113-1].Jenkins CD Merge Bot2017-06-162-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.113
* | | | | | Merge pull request #4294 from richm/fix-es-routes-for-new-logging-rolesOpenShift Bot2017-06-164-0/+129
|\ \ \ \ \ \ | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | fix es routes for new logging rolesRich Megginson2017-06-074-0/+129
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | port the code that creates the external Elasticsearch routes to the new logging roles Have to suppress this error message: SSL Problem illegal change cipher spec msg, conn state = 6, handshake state = 1 which is coming from the router health check, until https://github.com/openshift/origin/issues/14515 is fixed - otherwise, the es log is spammed relentlessly
* | | | | | | Merge pull request #4402 from stevekuznetsov/skuznets/router-registry-rolloutOpenShift Bot2017-06-152-13/+61
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | | Make rollout status check best-effort, add pollSteve Kuznetsov2017-06-132-2/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We cannot rely on the `watch.Until` call in the `rollout status` subcommand for the time being, so we need to ignore the result of this call. This will make the rollout status check best-effort, so we need to follow it with a poll for the actual status of the rollout, which we can extract from the `openshift.io/deployment.phase` annotation on the ReplicationControllers. This annotation can have only three values -- `Running`, `Complete` and `Failed`. If we poll on this attribute until we stop seeing `Running`, we can then inspect the last result for `Failed`; if it's present, we have failed the deployment. Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
| * | | | | | | Verify the rollout status of the hosted router and registrySteve Kuznetsov2017-06-092-14/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When deploying the hosted router and registry components, we need to ensure that they correctly roll out. The previous checks were weak in that they either simply waited for a set amount of time and/or did one replica check. They would fail if the router or registry took longer to deploy or if there were un-ready or failing replicas. The `oc rollout` command group contains the `status` endpoint for internalizing all of the logic for determining when a rollout has succeeded or failed, so simply using this client call will ensure that the router and registry correctly deploy. Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
* | | | | | | | Automatic commit of package [openshift-ansible] release [3.6.112-1].Jenkins CD Merge Bot2017-06-152-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --accept-auto-changelog --use-version=3.6.112