summaryrefslogtreecommitdiff
path: root/roles/openshift_master_certificates
AgeCommit message (Collapse)Author
2018-02-05Correct the list of certificates checked in openshift_master_certificates ↵Andrew Butcher
s.t. masters do not incorrectly report that master certs are missing.
2018-01-10Move more plugins to lib_utilsMichael Gugino
This commit continues moving plugins into lib_utils. This commit does not move any plugins for add-on roles such as logging and metrics.
2018-01-09Chmod temp dirs created on localhostMichael Gugino
After remove become:no statements on local_action tasks, we need to ensure that the proper file permssions are applied to local temp directories. This reason for this is that the 'fetch' module does not use 'become' for the localhost, just the remote host. Additionally, users may not wish for the localhost to become during a fetch. local_action will execute with whatever permissions are specified in inventory or via cli.
2018-01-09Remove become statementsMichael Gugino
This commit removes become:no statements that break the installer in various ways.
2017-12-20Remove openshift.common.{is_atomic|is_containerized}Michael Gugino
We set these variables using facts in init, no need to duplicate the logic all around the codebase.
2017-12-18Relocate filter plugins to lib_utilsMichael Gugino
This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
2017-11-14Removed old version codeMichael Gugino
This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
2017-10-02Separate certificate playbooks.Andrew Butcher
2017-06-27Generate loopback kubeconfig separately to preserve OpenShift CA certificate.Andrew Butcher
2017-06-02Use local openshift.master.loopback_url when generating initial master ↵Andrew Butcher
loopback kubeconfigs.
2017-05-16Remove use of local_action with delegate_to and switch 'delegate_to: ↵Andrew Butcher
localhost' temporary directory cleanup actions to local_actions.
2017-05-08Fix additional master cert & client config creation.Andrew Butcher
2017-05-02Remove set operations from openshift_master_certificates iteration.Andrew Butcher
2017-03-29openshift_master_certificates: add openshift_master_cert_expire_days parameter.Slava Semushin
2017-02-22BZ1414276 - Quote ansible_ssh_user when determining group idScott Dodson
So that domain users of the format 'dom\user' may be used for ansible_ssh_user
2017-02-02Restructure certificate redeploy playbooksAndrew Butcher
2017-01-19g_master_mktemp in openshift-master conflicts with openshift_master_certificatesRich Megginson
2017-01-17Ensure serial certificate generation for node and master certificates.Andrew Butcher
2017-01-16Create individual serving cert and loopback kubeconfig for additional masters.Andrew Butcher
Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
2016-10-19Switch from "oadm" to "oc adm" and fix bug in binary sync.Devan Goodwin
Found bug syncing binaries to containerized hosts where if a symlink was pre-existing, but pointing to the wrong destination, it would not be corrected. Switched to using oc adm instead of oadm.
2016-08-23Link ca to ca-bundle when ca-bundle does not exist.Andrew Butcher
2016-08-11Support for redeploying certificates.Andrew Butcher
2016-08-01Add options for specifying named ca certificates to be added to the ↵Andrew Butcher
openshift ca bundle.
2016-07-20Refactor openshift certificates roles.Andrew Butcher
2016-05-30Revert openshift-certificates changes.Andrew Butcher
2016-05-19Consolidate ca/master/node certificates roles into openshift_certificates.Andrew Butcher
2016-04-29Cleanup various deprecation warnings.Andrew Butcher
2016-02-29Use inventory_hostname for openshift master certs to sync.Andrew Butcher
2016-02-26Synchronize master kube configsAndrew Butcher
2016-02-16Generate each master's certificates separately.Andrew Butcher
2016-02-09Add gte check for 3.2, update version checks to gteJason DeTiberus
2015-12-15Containerization work by @sdodsonScott Dodson
2015-11-06Merge pull request #796 from abutcher/master-proxy-certsBrenton Leanhardt
Fix issue with master.proxy-client.{crt,key} and omit.
2015-11-04remove debug linetalset
2015-11-04[roles/openshift_master_certificates/tasks/main.yml] Fix variable ↵talset
openshift.master.all_hostnames to openshift.common.all_hostnames
2015-11-03Add all the possible servicenames to openshift_all_hostnames for mastersScott Dodson
2015-11-02Fix issue with master.proxy-client.{crt,key} and omit.Andrew Butcher
2015-10-22Move version greater_than_fact into openshift_factsAndrew Butcher
2015-10-22Don't include proxy client cert when <3.1 or <1.1Andrew Butcher
2015-09-03Add openshift_version to set RPM versionsScott Dodson
Mostly necessary for debugging / testing upgrade paths
2015-08-26Atomic Enterprise related changes.Avesh Agarwal
2015-07-23Copy more master certs for HA masterJason DeTiberus
2015-07-17Initial HA masterJason DeTiberus
- Ability to specify multiple masters - configures the CA only a single time on the first master - creates and distributes additional certs for additional master hosts - Depending on the status of openshift_master_cluster_defer_ha (defaults to False) one of two actions are taken when multiple masters are defined 1. If openshift_master_cluster_defer_ha is true a. Certs/configs for all masters are deployed b. openshift-master service is only started and enabled on the master c. HA configuration is expected to be handled by the user manually after the completion of the playbook run. 2. If oepnshift_master_cluster_defer_ha is false or undefined a. Certs/configs for all masters are deployed b. a Pacemaker/RHEL HA cluster is configured i. VIPs are configured based on the values of openshift_master_cluster_vip and openshift_master_cluster_plublic_vip ii. The openshift-master service is configured as an active/passive cluster service
2015-07-10Playbook updates for clustered etcdJason DeTiberus
- Add support to bin/cluster for specifying etcd hosts - defaults to 0, if no etcd hosts are selected, then configures embedded etcd - Updates for the byo inventory file for etcd and master as node by default - Consolidation of cluster logic more centrally into common playbook - Added etcd config support to playbooks - Restructured byo playbooks to leverage the common openshift-cluster playbook - Added support to common master playbook to generate and apply external etcd client certs from the etcd ca - start of refactor for better handling of master certs in a multi-master environment. - added the openshift_master_ca and openshift_master_certificates roles to manage master certs instead of generating them in the openshift_master role - added etcd host groups to the cluster update playbooks - aded better handling of host groups when they are either not present or are empty. - Update AWS readme