summaryrefslogtreecommitdiff
path: root/roles/openshift_node/templates
AgeCommit message (Collapse)Author
2018-01-31add glusterblock support for ansibleMangirdas
Co-authored-by: Christina Kyriakidou <Ckyriaki@Redhat.com>
2018-01-24Merge pull request #6843 from rajatchopra/bugdnsmasqScott Dodson
Change dnsmasq Requires to Wants
2018-01-23Change dnsmasq Requires to Wants. ↵Rajat Chopra
https://bugzilla.redhat.com/show_bug.cgi?id=1532960 Signed-off-by: Rajat Chopra <rchopra@redhat.com>
2018-01-23Lowercase node names when creating certificatesVadim Rutkovsky
2018-01-08Properly cast crio boolean variables to boolMichael Gugino
Variables that are specifically booleans should be cast to bool. This is because users may sometimes pass them as string values. This is particularly prevalent when using ini-style inventories. Affected-by: https://github.com/ansible/ansible/issues/34591 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1531592
2018-01-02Add docker auth credentials to system container installMichael Gugino
This commit adds docker auth credentials mount to system container systemd unit file. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1514324
2017-12-18Relocate filter plugins to lib_utilsMichael Gugino
This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
2017-12-18Remove openshift_node_facts roleMichael Gugino
This commit removes the remainder of openshift_node_facts role.
2017-12-17Merge pull request #6456 from mgugino-upstream-stage/node-factsMichael Gugino
Remove openshift_node_facts part 1
2017-12-14Remove openshift_node_facts part 1Michael Gugino
This commit removes some items from openshift_facts for the openshit_node role.
2017-12-12crio: change socket path to /var/run/crio/crio.sockGiuseppe Scrivano
it is required for OpenShift 3.9 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-12-07Remove openshift.common.service_typeMichael Gugino
This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
2017-12-01Implement container runtime roleMichael Gugino
2017-11-27Combine openshift_node and openshift_node_dnsmasqMichael Gugino
This commit combines these two roles. This will prevent openshift_node_facts from running twice.
2017-11-14Removed old version codeMichael Gugino
This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
2017-10-20Initial Kuryr supportMichał Dulko
This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
2017-10-17Do not remove files for bootstrap if resolv or dns.Kenny Woodson
2017-10-12Add ability to set node and master imageConfig to latestMichael Gugino
Currently, imageConfig.latest is hard-coded to false. This commit adds an appropriate boolean to enable setting to true. Fixes: https://github.com/openshift/openshift-ansible/issues/1422
2017-10-10Separate tuned daemon setup into a role.Jiri Mencak
Currently, profiles for the tuned daemon are set only for OpenShift node(s). This excludes the OpenShift loadbalancer. As a result, ARP cache limits on loadbalancers are not raised. This causes problems with HA setups where loadbalancers serve 1k+ OpenShift nodes. This commit ensures the openshift-control-plane role is applied to loadbalancers, masters and OpenShift infra nodes. Regular OpenShift worker nodes get the openshift-node profile. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1498213
2017-10-05node: make node service PartOf=openvswitch.service when openshift-sdn is usedDan Williams
Commit 7f805f9a0c41477365dd88b0ac73f0d221bd654a causes the behavior seen in https://bugzilla.redhat.com/show_bug.cgi?id=1453113 because openshift-node is no longer restarted when openvswitch is, due to the change from Requires to Wants. Turns out that making the openshift node service PartOf the OVS service can achieve the same result and ensure openshift-node gets restarted whenever OVS does, which ensures that networking doesn't break underneath the node. Suggested by Giuseppe Scrivano
2017-09-25Merge pull request #5269 from rparulek/nuage-ansibleOpenShift Merge Robot
Automatic merge from submit-queue Changes for Nuage atomic ansible install
2017-09-21Move additional/block/insecure registires to /etc/containers/registries.confMichael Gugino
This commit moves additional/block/insecure registries to /etc/containers/registries.conf and comments existing lines in /etc/sysconfig/docker. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1460930
2017-09-20Changes for Nuage atomic ansible installRohan Parulekar
2017-09-11Fix: authenticated registry support for containerized hostsMichael Gugino
Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
2017-09-07Merge pull request #5208 from mgugino-upstream-stage/remove-openshift_commonOpenShift Bot
Merged by openshift-bot
2017-09-06Remove openshift-commonMichael Gugino
Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
2017-09-06remove experimental-cri flag from node configSeth Jennings
2017-08-25roles: use openshift_use_crioGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-08-15New tuned profile hierarchy.Jiri Mencak
2017-08-03openshift_node: fix typo for experimental-criSteve Milner
2017-08-03cri-o: Fix node template to use full variableSteve Milner
2017-08-03cri-o: Add cri-o as a Wants in node unitsSteve Milner
2017-08-03node.yaml: configure node to use cri-o when openshift.common.use_crioGiuseppe Scrivano
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-07-25Set TimeoutStartSec=300Scott Dodson
On nodes with thousands of services it may take a very long time to establish all of the network routing rules. The longest we've seen is about 180s
2017-07-25Revert "set KillMode to process in node service file"Scott Dodson
2017-07-13set KillMode to process in node service fileJan Chaloupka
2017-06-30Use default ports for dnsmasq and node dnsScott Dodson
2017-06-30Run dns on the node and use that for dnsmasqScott Dodson
2017-06-12Ensure that host pki tree is mounted in containerized componentsScott Dodson
2017-05-17node, systemd: change Requires to Wants for openvswitchGiuseppe Scrivano
Sometimes the node container is not started on a container-engine restart. Use a weaker dependency on openvswitch that is causing this issue Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1451192 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2017-05-12Fix templating of static service filesRussell Teague
2017-05-09Add service file templates for master and nodeSteve Milner
Adds service file templates for both maste and node. These will lay down in /etc/system/systemd to override what may already be present from a package. These instances take into account the name of the container daemon (docker or container-engine).
2017-05-09Update systemd units to use proper container service nameSteve Milner
- If using a system container: container-engine - If using a package install: docker Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1448800
2017-03-21Make /rootfs mount rslaveScott Dodson
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1427807
2017-03-15Fix containerized openvswitch raceScott Dodson
2017-03-09Allow overriding minTLSVersion and cipherSuitesMartin Eggen
Add parameters to allow overriding minTLSVersion and cipherSuites in master and node servingInfo config stanzas.
2017-03-03node/sdn: make /var/lib/cni persistent to ensure IPAM allocations stick ↵Dan Williams
around across node restart With the move to a CNI plugin, docker no longer handles IPAM, but CNI does through openshift-sdn's usage of the 'host-local' CNI IPAM plugin. That plugin stores IPAM allocations under /var/lib/cni/. If the node container gets restarted, without presreving /var/lib/cni, the IPs currently allocated to running pods get lost and on restart, openshift-sdn may allocate those IPs to new pods causing duplicate allocations. This never happened with docker because it has its own persistent IPAM store that does not get removed when docker restarts. Also because (historically) when docker restarted, all the containers died and the IP allocations were released by the daemon. Fix this by ensuring that IPAM allocations (which are tied to the life of the pod, *not* the life of the openshift-node process) persist even if the openshift-node process restarts. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1427789
2017-02-27Combined (squashed) commit for all changes related to adding Contiv support ↵Sanjeev Rampal
into Openshift Ansible. This is the first (beta) release of Contiv with Openshift and is only supported for Openshift Origin + Bare metal deployments at the time of this commit. Please refer to the Openshift and Contiv official documentation for details of the level of support for different features and modes of operation.
2017-01-18kubelet must have rw to cgroups for pod/qos cgroups to functionDerek Carr
2016-11-16Merge pull request #2763 from yfauser/byo_cni_plugin_fixesAndrew Butcher
[#2698] Change to allow cni deployments without openshift SDN
generated by cgit v1.2.3 (git 2.39.1) at 2026-04-14 23:51:12 +0000