summaryrefslogtreecommitdiff
path: root/roles/docker
AgeCommit message (Collapse)Author
2017-07-20Merge pull request #4757 from sosiouxme/20170703-docker-storage-overlay2Scott Dodson
openshift_checks/docker_storage: overlay/2 support
2017-07-18Ensure proper fact evaluationScott Dodson
2017-07-18Wrap additional service changes in retriesScott Dodson
2017-07-18Test docker restart with retries 3 delay 30Steve Milner
2017-07-18docker: fix docker_selinux_enabledLuke Meyer
Document the option so that those who want to run on OverlayFS can find it. Fix the task so that setting it to False isn't interpreted as true.
2017-07-07container-engine: Update Fedora registry urlSteve Milner
2017-07-06Install container-selinux with container-engineSteve Milner
2017-06-28Add a retry to the docker restart handlerScott Dodson
2017-06-05rename daemon.json to container-daemon.jsonSteve Milner
The container-engine build has moved daemon.json to container-daemon.json to avoid collision. This change updates the template file location to follow suit.
2017-06-01Add mtu setting to /etc/sysconfig/docker-networkScott Dodson
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1457062
2017-05-25Remove typos that got reintroducedSteve Milner
2017-05-25Remove system-package=no from container-engine installSteve Milner
2017-05-17Merge pull request #4214 from giuseppe/rename-ENIRONMENT-to-EnvironmentOpenShift Bot
Merged by openshift-bot
2017-05-17systemcontainercustom.conf.j2: use Environment instead of ENVIRONMENTGiuseppe Scrivano
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1451187 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-05-16Add regexp for container-engine lineinfileSteve Milner
This ensures that if the line already exists it will be updated with the expected results from the installer.
2017-05-15use dest instead of path for lineinfileSteve Milner
Switching to dest instead of path for lineinfile. path is the name for ansible 2.3+ though dest will work for 2.2 and 2.3. Ref: http://docs.ansible.com/ansible/lineinfile_module.html
2017-05-15Add NO_PROXY workaround for container-engine atomic commandSteve Milner
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1450310
2017-05-15Add no_proxy to atomic.confSteve Milner
Requires: https://github.com/projectatomic/atomic/pull/999
2017-05-14Add docker package for container-engine installSteve Milner
The package is required so that openshift_facts is able to use the docker client to gain information on the versions.
2017-05-12Merge pull request #4174 from ashcrow/remove-userland-proxyOpenShift Bot
Merged by openshift-bot
2017-05-12Remove userland-proxy-path from daemon.jsonSteve Milner
This flag is currently being set within the system container via the init.sh
2017-05-12Fix whistespace issues in custom templateSteve Milner
2017-05-12Always add proxy items to atomic.confSteve Milner
2017-05-12Move container-engine systemd environment to updated locationSteve Milner
2017-05-11doc: Add link to daemon.json upstream docSteve Milner
2017-05-11Remove unused daemon.json keysSteve Milner
Instead of providing every possible key in the daemon.json configuration file, this update only provides keys which are actively set/used by the installer.
2017-05-11Merge pull request #4158 from ganhuang/lower_boolScott Dodson
lower case in /etc/daemon.json and correct block-registry
2017-05-10Merge pull request #4152 from sdodson/iptables-defaultOpenShift Bot
Merged by openshift-bot
2017-05-11lower case in /etc/daemon.json and correct block-registryGan Huang
2017-05-10Default to iptables on masterScott Dodson
We did this in 3.5 but never on master and we never came back to add migration support. So we'll revert this on master and if/when we add migration support we'll switch the default.
2017-05-10Rename blocked-registries to block-registriesSteve Milner
The daemon.json configuration key is block-registries. The code and installer bits call it blocked-registries.
2017-05-10Ensure true is lowercase in daemon.jsonSteve Milner
2017-05-08Use local variables for daemon.json templateSteve Milner
Instead of using bare lists and dicts this change converts variables into json for use with daemon.json. jinja2 does have an ability to do this in side of templates, however it is only available in 2.9+. Until then the use of ansible's to_json in the playbook is being used. Refs: - http://jinja.pocoo.org/docs/2.9/templates/#tojson - http://docs.ansible.com/ansible/playbooks_filters.html#filters-for-formatting-data
2017-05-05Fix 1448368, and some other minors issuesGan Huang
2017-05-03System container dockerSteve Milner
This change allows for the use of either the traditional package install of docker OR a system container install of docker. Two new inventory options, openshift_docker_use_system_container and openshift_docker_systemcontainer_image_registry_override, have been added which are be used to install with a system container. By default this option is commented out. One new fact has been added: - docker.service_name: docker by default, container-engine-docker for system container
2017-03-07Loosely couple docker to iptables serviceRussell Teague
2017-01-25Comma separate no_proxy host list in openshift_facts so that it appears as a ↵Andrew Butcher
string everywhere it is used.
2017-01-24Add new option 'openshift_docker_selinux_enabled'Russell Teague
Allows controlling 'selinux-enabled' docker options Can be set to true or false
2017-01-17v1.3 Add RHAMPScott Dodson
2016-12-14Enable firewalld by defaultRussell Teague
2016-12-12YAML LintingRussell Teague
* Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
2016-11-28Refactored to use Ansible systemd moduleRussell Teague
* Ansible systemd module used in place of service module * Refactored command tasks which are no longer necessary * Applying rules from openshift-ansible Best Practices Guide
2016-11-28Updating docs for Ansible 2.2 requirementsRussell Teague
2016-11-17Refactor to use Ansible package moduleRussell Teague
The Ansible package module will call the correct package manager for the underlying OS.
2016-11-14Docker daemon is started prematurely.Eric Mountain
Docker service is started prior to configuration changes being applied. The service is then not restarted by the handlers, so configuration changes are not applied. We now start the docker service only once all config changes have been made.
2016-11-14Added dependency of os_firewall to docker roleRussell Teague
The docker role requires iptables-services to be installed. Added dependency on so_firewall role to ensure the iptables service is installed first. Currently this will only work with iptables and not with firewalld. * Added allow_duplicates to os_firewall role meta * Removed unused task from docker/tasks * Corrected os_firewall Defaults in README
2016-11-11Resolve docker and iptables service dependenciesRussell Teague
The docker service adds rules to the iptables configuration to support proper network functionality for running containers. If the service is started prior to iptables, these rules are not properly created. * Ensure iptables is started prior to docker Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1390835
2016-10-19Fix typosRodolfo Carvalho
2016-09-29Skip the docker role in early upgrade stages.Devan Goodwin
This improves the situation further and prevents configuration changes from accidentally triggering docker restarts, before we've evacuated nodes. Now in two places, we skip the role entirely, instead of previous implementation which only skipped upgrading the installed version. (which did not catch config issues)
2016-08-27Fix review commentsManjunath A Kumatagi