summaryrefslogtreecommitdiff
path: root/roles/openshift_aws
AgeCommit message (Collapse)Author
2018-02-13oc_adm_csr: Add fail_on_timeout parameter which causes module to fail when ↵Andrew Butcher
timeout was reached.
2018-02-12Merge pull request #7073 from abutcher/aws-node-hostnameOpenShift Merge Robot
Automatic merge from submit-queue. Update user-data for FQDN instance hostnames * Remove node service start from bootstrap.yml. We start and enable the node service in user-data and we want the node service to start after NetworkManager so that the instance will have its final hostname. * Restart systemd-hostnamed before restarting NetworkManager. In testing this has ensured that instances receive an FQDN hostname which is required for kube.
2018-02-12Restart systemd-hostnamed before restarting NetworkManager in node user-data.Andrew Butcher
2018-02-07aws ami: make it so the tags from the orinal AMI are used with the newly ↵Matt Woodson
created AMI
2018-02-07Merge pull request #6993 from joelddiaz/deprovision_elbsKenny Woodson
add deprovisioning for ELB (and IAM certs)
2018-02-06Merge pull request #6990 from joelddiaz/aws_master_grp_paramsKenny Woodson
parameterize various master/infra scale group bits
2018-02-05parameterize various master scale group bitsJoel Diaz
allow selectively overriding master scale group bits: instance type: openshift_aws_master_group_instance_type scale group min size: openshift_aws_master_group_min_size scale group max size: openshift_aws_master_group_max_size scale group desired size: openshift_aws_master_group_desired_size and overriding infra scale group bits: instance type: openshift_aws_infra_group_instance_type scale group min size: openshift_aws_infra_group_min_size scale group max size: openshift_aws_infra_group_max_size scale group desired size: openshift_aws_infra_group_desired_size and overriding compute scale group bits: instance type: openshift_aws_compute_group_instance_type scale group min size: openshift_aws_compute_group_min_size scale group max size: openshift_aws_compute_group_max_size scale group desired size: openshift_aws_compute_group_desired_size also consolodate the health check for master/infra/compute since they are all the same
2018-02-02add deprovisioning for ELB (and IAM certs)Joel Diaz
add playbooks to handle deleting ELBs and any IAM certs that may have been created during provisioning. redo ELB creation to remove arbitrary wait and just retry until ELB creation succeeds
2018-02-02add S3 bucket cleanupJoel Diaz
Default to just cleaning out all the objects in the S3 bucket (IFF openshift_aws_create_s3 is 'true'). If you really, trully want to delete the S3 bucket and free up the bucket name, you can set openshift_aws_really_delete_s3_bucket to 'true' ('false' by default).
2018-01-30Re-add openshift_aws_elb_cert_arn.Andrew Butcher
2018-01-25Fix misaligned ports for sg,elb,apiChris Callegari
2018-01-24Merge pull request #6603 from joelddiaz/fetch_subnet_azOpenShift Merge Robot
Automatic merge from submit-queue. un-hardcode default subnet az allow defining 'default_az' for one of the subnets in the vpc structure, and pull that default_az and set it to openshift_aws_subnet_az. this should allow one less variable to be defined/overridded when using non-default (us-east-1) regions
2018-01-24Merge pull request #6767 from mazzystr/fix-master-internal-elbKenny Woodson
Fix to master-internal elb scheme
2018-01-22Merge pull request #6533 from joelddiaz/prereqs_uninstallOpenShift Merge Robot
Automatic merge from submit-queue. allow uninstalling AWS objects created by prerequisite playbook add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml specifically: security groups, vpcs, and any ssh keys introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning.
2018-01-22un-hardcode default subnet azJoel Diaz
allow defining 'default_az' for one of the subnets in the vpc structure, and pull that default_az and set it to openshift_aws_subnet_az. this should allow one less variable to have to be defined/overridded (openshift_aws_subnet_az) when using non-default (us-east-1) regions update provisioning_vars.yml.example to show an example VPC structure
2018-01-22allow uninstalling AWS objects created by prerequisite playbookJoel Diaz
add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml specifically: security groups, vpcs, and any ssh keys introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning. add some documentation on using deprovisioning playbooks
2018-01-19Merge pull request #6691 from abutcher/oc-adm-csr-cnAndrew Butcher
Use master group's ansible_ssh_user when accepting nodes.
2018-01-17Fix to master-internal elb schemeChris Callegari
2018-01-16Merge pull request #6531 from abutcher/bootstrap-slurp-userOpenShift Merge Robot
Automatic merge from submit-queue. Use master group ansible_ssh_user to pull bootstrap kubeconfig
2018-01-16Remove duplication in node acceptance playbook and setup master groups so ↵Andrew Butcher
that we can use the first master's ansible_ssh_user when delegating.
2018-01-15Merge pull request #6610 from mazzystr/update_awsec2_root_volOpenShift Merge Robot
Automatic merge from submit-queue. Update to AWS EC2 root vol size so that Health Check tasks pass AWS EC2s under the ASG and LaunchConfig are deployed with the default 10gb root vol size. Heath Checks fail because / filesystem and /var directory is too small. Health Check wants a minimum of 40Gb. 10Gb is just too small for server operations in general. Let's increase to 100Gb. Cost increase for additional EBS storage will be minimal and give plenty of elbow room for normal server operations.
2018-01-15Merge pull request #6692 from abutcher/cluster-operatorOpenShift Merge Robot
Automatic merge from submit-queue. Separate ELB & S3 from master node group provisioning Moved s3 and elb provisioning out of `roles/openshift_aws/tasks/provisioning.yml` and into their own playbooks. These playbooks are now included in the provision playbook and in a WIP infrastructure playbook we intend to run up front in place of prerequisites. @kwoodson what are your thoughts on something like this?
2018-01-10Move s3 & elb provisioning into their own playbooks s.t. they are applied ↵Andrew Butcher
outside of the openshift_aws master provisioning tasks.
2018-01-10Move more plugins to lib_utilsMichael Gugino
This commit continues moving plugins into lib_utils. This commit does not move any plugins for add-on roles such as logging and metrics.
2018-01-09Setup master groups in order to use the master group's ansible_ssh_user to ↵Andrew Butcher
pull bootstrap kubeconfig.
2018-01-08docker storage setup for ami buildingJoel Diaz
add host to g_new_node_hosts so that plays run against the AMI instance update example vars so that overlay2 is used by default for docker storage
2018-01-08Merge pull request #6548 from kwoodson/configurable_ami_drive_sizeKenny Woodson
Adding ability to update ami drive size.
2018-01-08Update to AWS EC2 root vol size so that Health Check tasks passChris Callegari
2018-01-05Migrate to import_role for static role inclusionScott Dodson
In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
2017-12-21Adding ability to update ami drive size.Kenny Woodson
2017-12-18Move node group tags to openshift_aws_{master,node}_group.Andrew Butcher
2017-12-11Changing the node group format to a list.Kenny Woodson
2017-12-11Copying upstream fix for ansible 2.4 ec2_group module.Kenny Woodson
2017-12-06Include Deprecation: Convert to include_tasksRussell Teague
2017-11-29Initial upgrade for scale groups.Kenny Woodson
2017-11-15Ensure node service is started.Kenny Woodson
2017-11-13Adding instance profile support for node groups.Kenny Woodson
2017-11-08Bootstrap enhancements.Kenny Woodson
2017-11-01Adding elb changes to provision elbs and add to scale group.Kenny Woodson
2017-10-27Merge pull request #5887 from kwoodson/rename_csrKenny Woodson
Renaming csr to bootstrap for consistency.
2017-10-25Renaming csr to bootstrap for consistency.Kenny Woodson
2017-10-25Moving removal of unwanted artifacts to image_prep.Kenny Woodson
2017-10-17Do not remove files for bootstrap if resolv or dns.Kenny Woodson
2017-10-11Provisioning Documentation UpdatesMichael Gugino
Updating provisioning documents. Also moved some steps from build_ami.yml to a new play for better reusability.
2017-10-05Merge pull request #5605 from mgugino-upstream-stage/build-provision-splitOpenShift Merge Robot
Automatic merge from submit-queue. Build provision split Make provisioning steps more reusable Reorganizing and making some of the plays more reusable. Depends-on: https://github.com/openshift/openshift-ansible/pull/5565
2017-10-03Merge pull request #5606 from ↵OpenShift Merge Robot
mgugino-upstream-stage/provision-scale-elb-fixes-master Automatic merge from submit-queue. Fix provisiong scale group and elb logic Some changes necessary to support provisioning and scale group logic Some of this work is duplicated from an existing PR. That PR is about to merge, so I'll rebase once that hits.
2017-10-02fix master-facts for provisioningMichael Gugino
2017-10-02Make provisioning steps more reusableMichael Gugino
Reorganizing and making some of the plays more reusable.
2017-10-02Merge pull request #5589 from mgugino-upstream-stage/provision-var-fixes-masterJan Chaloupka
Fix some provisioning variables
2017-09-29Fix provisiong scale group and elb logicMichael Gugino
Some changes necessary to support provisioning and scale group logic