csa/devops/ansible-patches/openshift.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Merge pull request #6423 from dav1x/add-vsphere-provider	Scott Dodson	2018-01-10	4	-0/+25
\|\ \| \| \| \|	Add vsphere provider
\| *	lint issues	Davis Phillips	2017-12-11	1	-1/+1
\| \|
\| *	add template and vsphere.conf	Davis Phillips	2017-12-11	2	-0/+21
\| \|
\| *	add vsphere cloud providers	Davis Phillips	2017-12-11	2	-0/+4
\| \|
* \|	Merge pull request #6638 from nak3/add-keycheck-logging-facts	Luke Meyer	2018-01-10	1	-2/+2
\|\ \ \| \| \| \| \| \|	Add key existing check to collect facts for rolebidings
\| * \|	Add key check for facts_for_clusterrolebindings	Kenjiro Nakayama	2018-01-09	1	-1/+1
\| \| \|
\| * \|	Add key existing check to collect facts for rolebidings	Kenjiro Nakayama	2018-01-09	1	-1/+1
\| \| \|
* \| \|	Merge pull request #6609 from nkinder/openshift_logging_mux-interface	OpenShift Merge Robot	2018-01-10	3	-1/+5
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Don't hardcode the network interface in the openshift_logging_mux role The openshift_logging_mux role hardcodes the 'eth0' interface alias for determining the IP address to use for incoming external client connections. This will cause the playbook to fail with an undefined variable error on systems where an 'eth0' interface does not exist. This patch changes the default IP address for external connections to use the 'ansible_default_ipv4' fact. It also allows this to be overridden by a new 'openshift_logging_mux_external_address' variable.
\| * \| \|	Don't hardcode the network interface in the openshift_logging_mux role	Nathan Kinder	2018-01-04	3	-1/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The openshift_logging_mux role hardcodes the 'eth0' interface alias for determining the IP address to use for incoming external client connections. This will cause the playbook to fail with an undefined variable error on systems where an 'eth0' interface does not exist. This patch changes the default IP address for external connections to use the 'ansible_default_ipv4' fact. It also allows this to be overridden by a new 'openshift_logging_mux_external_address' variable.
* \| \| \|	Merge pull request #6553 from ↵	Michael Gugino	2018-01-10	1	-24/+14
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	mgugino-upstream-stage/node-reduce-package-commands Install node packages in one task instead of 3
\| * \| \| \|	Install node packages in one task instead of 3	Michael Gugino	2018-01-04	1	-24/+14
\| \|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit reduces the number of package tasks from 3 to 1.
* \| \| \|	Merge pull request #6674 from mgugino-upstream-stage/remove-becomes2	Scott Dodson	2018-01-10	15	-36/+19
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \|	Remove become statements
\| * \| \| \|	Chmod temp dirs created on localhost	Michael Gugino	2018-01-09	4	-6/+16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	After remove become:no statements on local_action tasks, we need to ensure that the proper file permssions are applied to local temp directories. This reason for this is that the 'fetch' module does not use 'become' for the localhost, just the remote host. Additionally, users may not wish for the localhost to become during a fetch. local_action will execute with whatever permissions are specified in inventory or via cli.
\| * \| \| \|	Remove become statements	Michael Gugino	2018-01-09	13	-30/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit removes become:no statements that break the installer in various ways.
* \| \| \| \|	Merge pull request #6671 from mgugino-upstream-stage/upgrade-cp-scope	OpenShift Merge Robot	2018-01-10	9	-234/+158
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Limit host group scope on control-plane upgrades This commit limits common init code to exclude oo_nodes_to_config during upgrade_control_plane runs.
\| * \| \| \| \|	Refactor version and move some checks into sanity_checks.py	Michael Gugino	2018-01-09	9	-234/+158
\| \|/ / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit changes how we handle openshift_version role. Most of the version initialization code is only run on the first master now. All other hosts have values set from the master. Aftwards, we run some basic RPM queries to ensure that the correct version is available on the other nodes. Containerized needs to do their own image checks elsewhere.
* \| \| \| \|	Merge pull request #6602 from ewolinetz/es_full_cluster_restart	OpenShift Merge Robot	2018-01-10	6	-1/+117
\|\ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Adding logic to do a full cluster restart if we are incrementing our … …major versions of ES This will help with the upgrade from 2.x to 5.x for ES, it also fixes something I came across with the handler on 3.7 where it checks the prior deployed version of the ES pod rather than the new one.
\| * \| \| \| \|	Adding logic to disable and reenable external communication to ES during ↵	Eric Wolinetz	2018-01-05	2	-2/+35
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	full restart
\| * \| \| \| \|	Adding logic to do a full cluster restart if we are incrementing our major ↵	Eric Wolinetz	2018-01-03	6	-1/+84
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	versions of ES
* \| \| \| \| \|	Merge pull request #5853 from imcsk8/flannel-iptables	OpenShift Merge Robot	2018-01-09	2	-0/+14
\|\ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Add iptables rules for flannel [WIP] When using flannel there are iptables rules that need to be added as stated here: https://access.redhat.com/documentation/en-us/reference_architectures/2017/html-single/deploying_red_hat_openshift_container_platform_3.4_on_red_hat_openstack_platform_10/#run_ansible_installer Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493955
\| * \| \| \| \| \|	Add iptables save handler	Ivan Chavero	2018-01-08	1	-0/+4
\| \| \| \| \| \| \|
\| * \| \| \| \| \|	Fix wrong indentation	Ivan Chavero	2017-10-27	1	-2/+2
\| \| \| \| \| \| \|
\| * \| \| \| \| \|	Fix yaml indentation	Ivan Chavero	2017-10-27	1	-2/+2
\| \| \| \| \| \| \|
\| * \| \| \| \| \|	Add iptables rules for flannel	Ivan Chavero	2017-10-23	1	-0/+10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[WIP] When using flannel there are iptables rules that need to be added as stated here: https://access.redhat.com/documentation/en-us/reference_architectures/2017/html-single/deploying_red_hat_openshift_container_platform_3.4_on_red_hat_openstack_platform_10/#run_ansible_installer Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493955
* \| \| \| \| \| \|	Merge pull request #6658 from mgugino-upstream-stage/containerized_bools	OpenShift Merge Robot	2018-01-09	4	-4/+4
\|\ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. ensure containerized bools are cast
\| * \| \| \| \| \| \|	ensure containerized bools are cast	Michael Gugino	2018-01-08	4	-4/+4
\| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \|	Merge pull request #6646 from giuseppe/fix-container-engine-auth	OpenShift Merge Robot	2018-01-09	1	-0/+6
\|\ \ \ \ \ \ \ \ \| \|_\|_\|_\|/ / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. container-engine: move registry_auth.yml before pull so that the atomic pull takes into account the credentials if required. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
\| * \| \| \| \| \| \|	container-engine: move registry_auth.yml before pull	Giuseppe Scrivano	2018-01-08	1	-0/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	so that the atomic pull takes into account the credentials if required. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* \| \| \| \| \| \| \|	Merge pull request #6650 from ↵	OpenShift Merge Robot	2018-01-09	1	-1/+1
\|\ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	vrutkovs/containerized_upgrade_set_openshift_use_openshift_sdn Automatic merge from submit-queue. upgrades: use openshift_node_use_openshift_sdn when trying to pre-pull the image This affects 3.8/3.9 upgrades for containerized hosts, if nodes are separate from master.
\| * \| \| \| \| \| \| \|	Use openshift_node_use_openshift_sdn when doing a containerized node upgrade	Vadim Rutkovsky	2018-01-09	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* \| \| \| \| \| \| \| \|	Merge pull request #6659 from joelddiaz/ami_and_docker_storage_setup	Kenny Woodson	2018-01-09	1	-1/+1
\|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	docker storage setup for ami building
\| * \| \| \| \| \| \| \| \|	docker storage setup for ami building	Joel Diaz	2018-01-08	1	-1/+1
\| \| \|_\|/ / / / / / \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	add host to g_new_node_hosts so that plays run against the AMI instance update example vars so that overlay2 is used by default for docker storage
* \| \| \| \| \| \| \| \|	Merge pull request #6660 from mgugino-upstream-stage/fix-logging-static	Michael Gugino	2018-01-08	1	-1/+3
\|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix: change import_role to include_role
\| * \| \| \| \| \| \| \| \|	Fix: change import_role to include_role	Michael Gugino	2018-01-08	1	-1/+3
\| \|/ / / / / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	It appears that when one role dynamically imports another, usage of import_role inside the dynamically included role is not possible. If something is included with include_role (dynamic), all tasks therein must also use include_role (dynamic).
* \| \| \| \| \| \| \| \|	Merge pull request #6653 from mgugino-upstream-stage/fix-crio-bool	Michael Gugino	2018-01-08	10	-15/+15
\|\ \ \ \ \ \ \ \ \ \| \|/ / / / / / / / \|/\| \| \| \| \| \| \| \|	Properly cast crio boolean variables to bool
\| * \| \| \| \| \| \| \|	Properly cast crio boolean variables to bool	Michael Gugino	2018-01-08	10	-15/+15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Variables that are specifically booleans should be cast to bool. This is because users may sometimes pass them as string values. This is particularly prevalent when using ini-style inventories. Affected-by: https://github.com/ansible/ansible/issues/34591 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1531592
* \| \| \| \| \| \| \| \|	Merge pull request #6549 from mgugino-upstream-stage/node-meta-depends2	OpenShift Merge Robot	2018-01-08	1	-2/+0
\|\ \ \ \ \ \ \ \ \ \| \|/ / / / / / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Remove last of openshift_node role meta-depends Remove last non-taskless meta-depends from openshift_node role.
\| * \| \| \| \| \| \| \|	Remove last of openshift_node role meta-depends	Michael Gugino	2018-01-02	1	-2/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Remove last non-taskless meta-depends from openshift_node role. Remove variable 'openshift_node_upgrade_in_progress' as it is no longer used.
* \| \| \| \| \| \| \| \|	Merge pull request #6548 from kwoodson/configurable_ami_drive_size	Kenny Woodson	2018-01-08	1	-5/+1
\|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Adding ability to update ami drive size.
\| * \| \| \| \| \| \| \| \|	Adding ability to update ami drive size.	Kenny Woodson	2017-12-21	1	-5/+1
\| \|/ / / / / / / /
* \| \| \| \| \| \| \| \|	Merge pull request #6624 from vrutkovs/containerized-avoid-replacing-node-unit	OpenShift Merge Robot	2018-01-08	1	-1/+1
\|\ \ \ \ \ \ \ \ \ \| \|_\|/ / / / / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Don't overwrite node's systemd units for containerized install Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1527849 Perphaps this block should be removed, unless I'm missing some other case for it, as systemd units are being updated in ../systemd_units.yml.
\| * \| \| \| \| \| \| \|	Don't overwrite node's systemd units for containerized install	Vadim Rutkovsky	2018-01-05	1	-1/+1
\| \| \|_\|_\|_\|/ / / \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Systemd units are being updated in ../systemd_units.yml Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* \| \| \| \| \| \| \|	Merge pull request #6641 from sdodson/logging-loops	Michael Gugino	2018-01-08	1	-4/+4
\|\ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Switch back to dynamic include_role in logging loops
\| * \| \| \| \| \| \| \|	Switch back to dynamic include_role in logging loops	Scott Dodson	2018-01-07	1	-4/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We'd switched to import_role to avoid increased memory consumption but we must use include_role whenever we loop.
* \| \| \| \| \| \| \| \|	Merge pull request #6587 from vrutkovs/test-coverage	OpenShift Merge Robot	2018-01-08	1	-7/+344
\|\ \ \ \ \ \ \ \ \ \| \|_\|_\|_\|/ / / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Add more testcases for oc_scale module * Fixed docstrings for tests * Added tests to verify scale up/down, 'present' state, non-existant state and Replication Controller kind
\| * \| \| \| \| \| \| \|	test_oc_scale: add more scale test cases	Vadim Rutkovsky	2018-01-02	1	-0/+337
\| \| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \| \|	test_oc_scale: fix test docstrings	Vadim Rutkovsky	2018-01-02	1	-7/+7
\| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \|	Merge pull request #6507 from nbartos/continer	OpenShift Merge Robot	2018-01-07	51	-568/+905
\|\ \ \ \ \ \ \ \ \ \| \|_\|/ / / / / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatic merge from submit-queue. Contiv multi-master and other fixes Contiv's etcd was not being deployed correctly when using more than one master. To make it easier to manage, it has been moved into a k8s container. The api proxy was hardcoded to an old version (1.1.1), and in some environments would run into a docker error. This has been moved into a k8s container for easier management. The firewall was too permissive on several ports. Many were open to the world when they should have only been accessible inside the cluster. Many of the contiv role variables were not prefixed with 'contiv', which may end up clobbering variables from another role. Now all the contiv specific role variables start with 'contiv_'. The api proxy's default self-signed certificate was bundled with the role. This means someone with read-only MITM access and this key could decrypt traffic. Granted a user defined certificate from a trusted CA should be used in a production environment, it is still better to generate one in each environment when one is not provided.
\| * \| \| \| \| \| \| \|	Use Contiv version 1.2.0	Nick Bartos	2018-01-08	6	-8/+14
\| \| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \| \|	Contiv multi-master and other fixes	Nick Bartos	2018-01-08	50	-565/+896
\| \| \|_\|_\|_\|_\|/ / \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Contiv's etcd was not being deployed correctly when using more than one master. To make it easier to manage, it has been moved into a k8s container. The api proxy was hardcoded to an old version (1.1.1), and in some environments would run into a docker error. This has been moved into a k8s container for easier management. The firewall was too permissive on several ports. Many were open to the world when they should have only been accessible inside the cluster. Many of the contiv role variables were not prefixed with 'contiv', which may end up clobbering variables from another role. Now all the contiv specific role variables start with 'contiv_'. The api proxy's default self-signed certificate was bundled with the role. This means someone with read-only MITM access and this key could decrypt traffic. Granted a user defined certificate from a trusted CA should be used in a production environment, it is still better to generate one in each environment when one is not provided.