| Age | Commit message (Collapse) | Author |
|
|
|
Faciliate 3.7 to 3.8 to 3.9 upgrade
|
|
|
|
|
|
There are some obsoletes in 3.9 packages which lead yum to upgrade
directly from 3.7 to 3.9 when you ask for 3.8 packages while 3.9 repos
are enabled. Since we'd like to allow people to run one playbook to
upgrade from 3.7 to 3.8 to 3.9 we need to exclude those packages when
upgrading to 3.8
|
|
|
|
|
|
Don't use from ansible.module_utils.six as its no longer available in Ansible 2.4
|
|
Add missing task that got dropped in a refactor
|
|
Automatic merge from submit-queue.
Move OpenStack inventory.py out of sample-inventory
This moves the dynamic inventory for OpenStack from the `sample-inventory` dir users are expected to copy and edit to `/inventory/openstack`.
This will ensure that people don't use an outdated inventory as well as communicates that the inventory (similar to the playbooks and roles) is not something they are expected to modify under normal circumstances.
The sample inventory will now contain only `group_vars` and as such, moving from that to providing vars explicitly is also more obvious (you replace the `-i inventory` command with `-e @vars.yaml` and you're good to go).
|
|
Update console config for API changes
|
|
Automatic merge from submit-queue.
Use master group ansible_ssh_user to pull bootstrap kubeconfig
|
|
add python2-boto3 for centos-based origin-ansible container image
|
|
|
|
Web Console: use a different var for asset config
|
|
fix bug 1534271
|
|
Automatic merge from submit-queue.
Add console RBAC template
Required for https://github.com/openshift/origin-web-console-server/pull/18
Origin changes: https://github.com/openshift/origin/pull/18075
/assign @sdodson
/cc @deads2k
|
|
Adding .ini to inventory_ignore_extensions
|
|
Adding ability for ASB to interact with network resources.
|
|
Remove tuned-profiles from list of master packages upgraded
|
|
|
|
Removed in 28b254886bf17251e973bfdad4dd4c89e26187fc
|
|
This ensures mktemp from metrics role doesn't get reset when
update_asset_config is being included
|
|
|
|
Keeping the dynamic inventory in the `sample-inventory` alongside the
`group_vars` poses a problem: when we update the inventory, our users
won't get the latest version.
The dynamic inventory should be independent of the OpenShift or
OpenStack configuration and the users should be able to either pass it
explicitly or create a symlink if they want.
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Automatic merge from submit-queue.
Update to AWS EC2 root vol size so that Health Check tasks pass
AWS EC2s under the ASG and LaunchConfig are deployed with the default 10gb root vol size. Heath Checks fail because / filesystem and /var directory is too small. Health Check wants a minimum of 40Gb. 10Gb is just too small for server operations in general. Let's increase to 100Gb. Cost increase for additional EBS storage will be minimal and give plenty of elbow room for normal server operations.
|
|
Automatic merge from submit-queue.
Separate ELB & S3 from master node group provisioning
Moved s3 and elb provisioning out of `roles/openshift_aws/tasks/provisioning.yml` and into their own playbooks. These playbooks are now included in the provision playbook and in a WIP infrastructure playbook we intend to run up front in place of prerequisites.
@kwoodson what are your thoughts on something like this?
|
|
Automatic merge from submit-queue.
Fix openstack provider docs
Fix openstack provider playbook name in docs
Adjust required versions of dependencies.
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
Automatic merge from submit-queue.
Configure Kuryr CNI daemon
Kuryr CNI daemon is scalability improvement that moves watching K8s API
and VIF plugging into a separate entity called kuryr-daemon.
Kuryr-daemon will run in a container and serve requests from
kuryr-driver.
|
|
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
|
|
|
|
Install web console on upgrade
|
|
Clean up host-local IPAM data while nodes are drained
|
|
Add var for catalog controller to enable async bindings
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Created by command:
/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
|
|
Automatic merge from submit-queue.
Spelling and grammar changes to the advanced-configuration.md file.
I noticed some spelling errors when trying to read the OpenStack `advanced_configuration.md` file so I wanted to contribute the fixed spelling.
|
|
Ansible 2.4
|
|
Update latest image streams and templates
|
|
Move more plugins to lib_utils
|
|
|
|
|
|
New variable is called
'openshift_service_catalog_async_bindings_enabled' and is set to false
by default.
Also, fixed a typo in the controller template for the DaemonSet update
strategy, which caused the strategy to be set to OnDelete rather than
the intended RollingUpdate.
|
|
Automatic merge from submit-queue.
Fix Cinder Persistent Volume support
This documents how to use Cinder-backed persistent volumes with OpenStack.
It needed a change to the dynamic inventory because the "openstack" cloudprovider plugin does actually require internal name resolution -- and the `openshift_hostname` value must match the name of the Nova server.
In addition, we need to be able to specify the V2 of the Cinder API for now as described in: https://github.com/openshift/openshift-docs/issues/5730
|
|
|
|
Automatic merge from submit-queue.
Use webconsole.config.openshift.io/v1 API group
Update the install to use the new web console config API group and kind.
API change: openshift/api#29
Cluster up change: openshift/origin#18056
/assign @sdodson
@deads2k @jwforres cc
|
|
Automatic merge from submit-queue.
Update deployment and apiserver with new certs
Since new certificates are generated for every run, the apiservice
caBundle needs updating in order to have the on disk CA match what is in
Kubernetes.
Because the secrets are updated, the daemonset needs to do a rolling
update for the apiserver to pick up the new certs. Implemented here is
an added annotation to the api server such that the update occurs
automatically when the CA is changed.
---
There may be a better way to make the rolling update occur without adding an annotation, such as within ansible itself (I just didn't know how to do that). Also, I think that probably the controller needs to be updated too in order to ensure staying in sync with the api server.
Edit: I did not think that doing "oc apply" would cause the daemonset to pick up a change since the yaml may be exactly the same, but if it does then the annotation part can definitely be changed.
|