summaryrefslogtreecommitdiffstats
path: root/playbooks/common
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug after portal_net move from master to common role.Devan Goodwin2016-04-211-2/+2
| | | | | | Use of the variable was still pointing to the master role location causing the default insecure registry subnet to be used rather than the expected one.
* Merge pull request #1754 from abutcher/etcd-cert-fixesBrenton Leanhardt2016-04-203-5/+9
|\ | | | | Bug 1299065: Fix etcd hostname/ip address handling
| * Use openshift_hostname/openshift_ip values for etcd configuration and ↵Andrew Butcher2016-04-203-5/+9
| | | | | | | | certificates.
* | Fix legacy cli_docker_* vars not migrating.Devan Goodwin2016-04-201-1/+1
| | | | | | | | | | | | No hosts were matching this renamed host group, so the oo_lookup module was not being triggered to migrate these to their new openshift_docker prefix.
* | Fix use of older image tag version during upgrade.Devan Goodwin2016-04-203-4/+5
| | | | | | | | | | | | | | If doing an upgrade with a 3.2.0.x version that was older than the latest, the upgrade would actually use the latest in the systemd unit files and thus the actual containers that get used. (despite pulling down the correct version first)
* | Merge pull request #1582 from jdnieto/openshift_metricsBrenton Leanhardt2016-04-202-0/+10
|\ \ | | | | | | added new openshift-metrics service
| * | added new openshift-metrics serviceJose David Martin Nieto2016-04-202-0/+10
| |/
* / Add openshift_node_dnsmasqScott Dodson2016-04-191-1/+0
|/
* The openshift_docker role must set the version facts for containerized installsBrenton Leanhardt2016-04-141-3/+12
| | | | | | QE found that for fresh installs we were basing the docker version facts of the images that could be pulled prior to configuring /etc/sysconfig/docker. This is an edge case but something we need to fix.
* Bug 1324728 - Ansible should not downgrade docker when installing 3.2 ↵Brenton Leanhardt2016-04-121-0/+14
| | | | containerized env
* Fetching the current version a little more carefullyBrenton Leanhardt2016-04-122-5/+9
| | | | | | | | Previously we were trying to use the running container to get the current version. There are cases in which the Master or Node may not be running during upgrade. It's actually safer to just run the container to fetch the version that would be launch if the container were running. Then we pull the image to see what the latest image contains.
* Make sure Docker is restarted after we have correctly configured the ↵Brenton Leanhardt2016-04-121-1/+5
| | | | containerized systemd units
* Installs and upgrades from authenticated registries are not supported for nowBrenton Leanhardt2016-04-121-31/+0
|
* Handle cases where the pacemaker variables aren't setBrenton Leanhardt2016-04-121-1/+1
|
* Containerized installs on RHEL were downgrading docker unnecessarilyBrenton Leanhardt2016-04-122-17/+19
|
* Add support for creating secure router.Andrew Butcher2016-04-113-2/+7
| | | | | | | | | | | | | | | * Move openshift_router to openshift_hosted role which will eventually contain registry, metrics and logging. * Adds option for specifying an openshift_hosted_router_certificate cert and key pair. * Removes dependency on node label variables and retrieves the node list from the API s.t. this role can be applied to any cluster with existing nodes. I've added an openshift_hosted playbook that occurs after node install to account for this. * Infrastructure nodes are selected using openshift_hosted_router_selector which is based on deployment type by default; openshift-enterprise -> "region=infra" and online -> "type=infra".
* Merge pull request #1695 from brenton/bz1323123Brenton Leanhardt2016-04-063-4/+4
|\ | | | | Fixing bugs 1322788 and 1323123
| * Bug 1322788 - The IMAGE_VERSION wasn't added to atomic-openshift-master-api ↵Brenton Leanhardt2016-04-013-4/+4
| | | | | | | | and atomic-openshift-master-controllers
* | Merge pull request #1700 from brenton/32haBrenton Leanhardt2016-04-051-0/+7
|\ \ | | | | | | Pacemaker is unsupported for 3.2
| * | Pacemaker is unsupported for 3.2Brenton Leanhardt2016-04-041-0/+7
| |/
* | Merge pull request #1577 from brenton/docker19Brenton Leanhardt2016-04-051-2/+1
|\ \ | |/ |/| We require docker 1.9 for the 3.2 upgrade
| * We require docker 1.9 for the 3.2 upgradeBrenton Leanhardt2016-03-091-2/+1
| |
* | Bug 1320829 - Ensure docker installed for factsJason DeTiberus2016-03-311-1/+1
| | | | | | | | | | | | - gather facts requiring docker only if docker is present and running - Update reference to etcd role in playbooks/common/openshift-etcd/config.yml to use openshift_etcd
* | Bug 1322788 - The IMAGE_VERSION wasn't added to atomic-openshift-master-api ↵Brenton Leanhardt2016-03-311-0/+5
| | | | | | | | and atomic-openshift-master-controllers
* | Bug 1322338 - The upgrade should keep the option insecure-registry=172.30.0.0/16Brenton Leanhardt2016-03-302-0/+4
| |
* | Use openshift.master.ha instead of duplicating the logicBrenton Leanhardt2016-03-292-9/+3
| |
* | Workaround for authenticated registriesBrenton Leanhardt2016-03-291-0/+29
| | | | | | | | | | | | | | | | | | | | Currently there's no good way to install from a registry that requires authentication. This applies both to RPM and containerized installs: https://bugzilla.redhat.com/show_bug.cgi?id=1316341 The workaround is to 'docker login' as root and then have ansible pull the images to the image cache.
* | First pass at systemd unit refactorBrenton Leanhardt2016-03-294-58/+42
| |
* | Lock down permissions on named certificatesEli Young2016-03-211-1/+2
| |
* | Merge pull request #1614 from detiber/bz1317755Brenton Leanhardt2016-03-171-0/+10
|\ \ | | | | | | Bug 1317755 - Set insecure-registry for internal registry by default
| * | Bug 1317755 - Set insecure-registry for internal registry by defaultJason DeTiberus2016-03-171-0/+10
| | |
* | | Fix path to cacert on /healthz/ready checkScott Dodson2016-03-161-1/+1
| | |
* | | Provide cacert when performing health checksAndrew Butcher2016-03-152-2/+4
|/ /
* | Move common common facts to openshift_factsJason DeTiberus2016-03-155-140/+107
| | | | | | | | | | | | | | - Prevents roles that need common facts from needing to require openshift_common, which pulls in the openshift binary. - Add dependency on openshift_facts to os_firewall, since it uses openshift.common facts
* | Docker stderr can break this script if ansible executes it remotelyBrenton Leanhardt2016-03-141-2/+2
| |
* | Handle HA master caseBrenton Leanhardt2016-03-141-2/+17
| |
* | Bug 1315564 - Containerized installs require a running environmentBrenton Leanhardt2016-03-141-0/+20
| | | | | | | | | | If the master or node aren't running we can't determine the correct version that is currently installed.
* | Bug 1316761 - Skip the available version check if openshift_image_tag is ↵Brenton Leanhardt2016-03-141-2/+1
| | | | | | | | | | | | | | | | defined. We already have a check in pre.yml to make sure openshift_image_tag is set to a range that is allowed. This is an advanced setting and should be used to override whatever is returned by the 'latest' image in a given registry.
* | Docker role refactorJason DeTiberus2016-03-149-20/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - refactors the docker role to push generic config into docker role and wrap openshift specific variables into an openshift_docker role and it's dependent openshift_docker_facts role - adds support for setting --confirm-def-push flag (Resolves https://github.com/openshift/openshift-ansible/issues/1014) - moves docker related facts from common/node roles to a new docker role - renames cli_docker_* role varialbes to openshift_docker-* (maintaining backward compatibility) - update role dependencies to pull in openshift_docker conditionally based on is_containerized - remove playbooks/common/openshift-docker since the docker role is now conditionally included
* | Bug 1315564 - upgrade to ose3.2 failed on Atomic HostsBrenton Leanhardt2016-03-092-20/+23
| |
* | Bug 1315563 - Upgrade failed to containerized install OSE 3.1 on RHELBrenton Leanhardt2016-03-091-1/+1
|/ | | | | | Previously I was greping for 'ose' in the systemd units. That was only working on my machine because my Nodes were also Masters. It's safer to grep for openshift3 since that would be present for Masters or Nodes.
* Merge pull request #1569 from brenton/masterBrenton Leanhardt2016-03-082-4/+4
|\ | | | | reverting back to pre-pulling the master image
| * Merge branch 'wait-all-the-time' of ↵Brenton Leanhardt2016-03-082-4/+4
| |\ | | | | | | | | | https://github.com/abutcher/openshift-ansible
| | * Use /healthz/ready when verifying apiAndrew Butcher2016-03-082-4/+4
| | |
* | | Bug 1315563 - stdout IO redirection wasn't working as expected over SSH ↵Brenton Leanhardt2016-03-081-3/+3
|/ / | | | | | | | | | | connections Bug 1315563 - Upgrade failed to containerized install OSE 3.1 on RHEL
* | Merge pull request #1567 from brenton/bz1315637Brenton Leanhardt2016-03-081-1/+1
|\ \ | | | | | | Bug 1315637 - The docker wasn't upgraded on node during upgrade
| * | Bug 1315637 - The docker wasn't upgraded on node during upgradeBrenton Leanhardt2016-03-081-1/+1
| |/
* / Bug 1315564 - upgrade to ose3.2 failed on Atomic HostsBrenton Leanhardt2016-03-082-0/+3
|/
* Merge pull request #1559 from brenton/bz1315151Brenton Leanhardt2016-03-072-5/+15
|\ | | | | BZ1315151: Support openshift_image_tag
| * Support openshift_image_tagBrenton Leanhardt2016-03-072-5/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | This is the containerized openshift_pkg_version equivalent. Originally I was hoping to reuse openshift_pkg_version for containerized installs but the fact that it's very coupled to yum made that pretty ugly. However, I did opt to rely on the previously existing 'openshift_version' variable. Containerized and RPM installs can both use that variable and it will be set appropriately if either openshift_pkg_version or openshift_image_tag are set. I suspect someday containerized installs will be the only option and I didn't can to have thinkgs like openshift_pkg_version and openshift_image_tag in the playbooks anymore the necessary.