summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* allow uninstalling AWS objects created by prerequisite playbookJoel Diaz2018-01-229-0/+113
| | | | | | | | | | add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml specifically: security groups, vpcs, and any ssh keys introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning. add some documentation on using deprovisioning playbooks
* Merge pull request #6719 from wmengRH/fix_bug_1534271Scott Dodson2018-01-161-4/+4
|\ | | | | fix bug 1534271
| * fix bug 1534271MENG Weihua2018-01-151-4/+4
| |
* | Merge pull request #6706 from spadgett/console-rbacOpenShift Merge Robot2018-01-163-4/+48
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Add console RBAC template Required for https://github.com/openshift/origin-web-console-server/pull/18 Origin changes: https://github.com/openshift/origin/pull/18075 /assign @sdodson /cc @deads2k
| * | Add console RBAC templateSamuel Padgett2018-01-113-4/+48
| | |
* | | Merge pull request #6470 from oybed/cfgScott Dodson2018-01-161-1/+1
|\ \ \ | | | | | | | | Adding .ini to inventory_ignore_extensions
| * | | Adding .ini to inventory_ignore_extensionsØystein Bedin2017-12-131-1/+1
| | | |
* | | | Merge pull request #6536 from shawn-hurley/adding-asb-permissionsScott Dodson2018-01-161-0/+9
|\ \ \ \ | | | | | | | | | | Adding ability for ASB to interact with network resources.
| * | | | adding ability to add network policy objects.Shawn Hurley2018-01-051-0/+3
| | | | |
| * | | | adding ability to interact with network resources.Shawn Hurley2017-12-201-0/+6
| | | | |
* | | | | Merge pull request #6741 from sdodson/bz1534905Scott Dodson2018-01-161-1/+0
|\ \ \ \ \ | | | | | | | | | | | | Remove tuned-profiles from list of master packages upgraded
| * | | | | Remove tuned-profiles from list of master packages upgradedScott Dodson2018-01-161-1/+0
| | |_|_|/ | |/| | |
* | | | | Automatic commit of package [openshift-ansible] release [3.9.0-0.20.0].Jenkins CD Merge Bot2018-01-152-2/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
* | | | | Merge pull request #6610 from mazzystr/update_awsec2_root_volOpenShift Merge Robot2018-01-151-0/+8
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Update to AWS EC2 root vol size so that Health Check tasks pass AWS EC2s under the ASG and LaunchConfig are deployed with the default 10gb root vol size. Heath Checks fail because / filesystem and /var directory is too small. Health Check wants a minimum of 40Gb. 10Gb is just too small for server operations in general. Let's increase to 100Gb. Cost increase for additional EBS storage will be minimal and give plenty of elbow room for normal server operations.
| * | | | | Update to AWS EC2 root vol size so that Health Check tasks passChris Callegari2018-01-081-0/+8
| | | | | |
* | | | | | Merge pull request #6692 from abutcher/cluster-operatorOpenShift Merge Robot2018-01-157-19/+64
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Separate ELB & S3 from master node group provisioning Moved s3 and elb provisioning out of `roles/openshift_aws/tasks/provisioning.yml` and into their own playbooks. These playbooks are now included in the provision playbook and in a WIP infrastructure playbook we intend to run up front in place of prerequisites. @kwoodson what are your thoughts on something like this?
| * | | | | | Add cluster-operator playbook directory.Andrew Butcher2018-01-102-0/+22
| | | | | | |
| * | | | | | Move s3 & elb provisioning into their own playbooks s.t. they are applied ↵Andrew Butcher2018-01-105-19/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | outside of the openshift_aws master provisioning tasks.
* | | | | | | Merge pull request #6726 from bogdando/fix_openstack_docsOpenShift Merge Robot2018-01-152-5/+4
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fix openstack provider docs Fix openstack provider playbook name in docs Adjust required versions of dependencies. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
| * | | | | | | Adjust openstack provider dependencies versionsBogdan Dobrelya2018-01-151-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
| * | | | | | | Fix openstack provider playbook name in docsBogdan Dobrelya2018-01-151-1/+1
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* | | | | | | Merge pull request #6103 from dulek/dulek/cni-daemonOpenShift Merge Robot2018-01-153-23/+355
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Configure Kuryr CNI daemon Kuryr CNI daemon is scalability improvement that moves watching K8s API and VIF plugging into a separate entity called kuryr-daemon. Kuryr-daemon will run in a container and serve requests from kuryr-driver.
| * | | | | | Configure Kuryr CNI daemonMichał Dulko2017-12-223-23/+355
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Kuryr CNI daemon is scalability improvement that moves watching K8s API and VIF plugging into a separate entity called kuryr-daemon. Kuryr-daemon will run in a container and serve requests from kuryr-driver.
* | | | | | | Merge pull request #6707 from spadgett/console-upgradeScott Dodson2018-01-131-3/+9
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Install web console on upgrade
| * | | | | | | Install web console on upgradeSamuel Padgett2018-01-111-3/+9
| | |_|_|_|_|/ | |/| | | | |
* | | | | | | Merge pull request #6426 from danwinship/cleanup-ipamScott Dodson2018-01-131-0/+6
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Clean up host-local IPAM data while nodes are drained
| * | | | | | | Clean up host-local IPAM data while nodes are drainedDan Winship2017-12-141-0/+6
| | | | | | | |
* | | | | | | | Merge pull request #6705 from jpeeler/add-async-bindings-varScott Dodson2018-01-132-1/+6
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | Add var for catalog controller to enable async bindings
| * | | | | | | | Add var for controller to enable async bindingsJeff Peeler2018-01-112-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | New variable is called 'openshift_service_catalog_async_bindings_enabled' and is set to false by default. Also, fixed a typo in the controller template for the DaemonSet update strategy, which caused the strategy to be set to OnDelete rather than the intended RollingUpdate.
* | | | | | | | | Automatic commit of package [openshift-ansible] release [3.9.0-0.19.0].Jenkins CD Merge Bot2018-01-122-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
* | | | | | | | | Automatic commit of package [openshift-ansible] release [3.9.0-0.18.0].Jenkins CD Merge Bot2018-01-122-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
* | | | | | | | | Automatic commit of package [openshift-ansible] release [3.9.0-0.17.0].Jenkins CD Merge Bot2018-01-122-2/+95
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created by command: /usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug
* | | | | | | | | Merge pull request #6695 from mbruzek/openstack_md_fixesOpenShift Merge Robot2018-01-121-7/+7
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Spelling and grammar changes to the advanced-configuration.md file. I noticed some spelling errors when trying to read the OpenStack `advanced_configuration.md` file so I wanted to contribute the fixed spelling.
| * | | | | | | | | Spelling and grammar changes to the advanced-configuration.md file.Matt Bruzek2018-01-101-7/+7
| | | | | | | | | |
* | | | | | | | | | Merge pull request #6702 from sdodson/image-stream-syncScott Dodson2018-01-1121-45/+87
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | Update latest image streams and templates
| * | | | | | | | | | Update latest image streams and templatesScott Dodson2018-01-1121-45/+87
| | | | | | | | | | |
* | | | | | | | | | | Merge pull request #6614 from mgugino-upstream-stage/plugins-to-lib-utilsScott Dodson2018-01-1141-66/+350
|\ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / |/| | | | | | | | | | Move more plugins to lib_utils
| * | | | | | | | | | Move more plugins to lib_utilsMichael Gugino2018-01-1041-66/+350
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit continues moving plugins into lib_utils. This commit does not move any plugins for add-on roles such as logging and metrics.
* | | | | | | | | | | Merge pull request #6607 from tomassedovic/fix-cinder-pvOpenShift Merge Robot2018-01-116-2/+121
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fix Cinder Persistent Volume support This documents how to use Cinder-backed persistent volumes with OpenStack. It needed a change to the dynamic inventory because the "openstack" cloudprovider plugin does actually require internal name resolution -- and the `openshift_hostname` value must match the name of the Nova server. In addition, we need to be able to specify the V2 of the Cinder API for now as described in: https://github.com/openshift/openshift-docs/issues/5730
| * | | | | | | | | | | Fix typo in the advanced config docsTomas Sedovic2018-01-101-1/+1
| | | | | | | | | | | |
| * | | | | | | | | | | Write guide on setting up PVs with CinderTomas Sedovic2018-01-101-0/+106
| | | | | | | | | | | |
| * | | | | | | | | | | Allow using server names in openstack dynamic invTomas Sedovic2018-01-102-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When deploying on OpenStack with internal DNS configured, this will set `openshift_hostname` to the Nova server name instead of its IP address. Without those two matching, the OpenStack cloud provider configuration will fail and the OpenShift nodes will not start.
| * | | | | | | | | | | Specify the Cinder version in the inventoryTomas Sedovic2018-01-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As described in[1], OpenShift currently only works with Block Storage API v2 and the version autodetection is failing to figure that out. [1]: https://github.com/openshift/openshift-docs/issues/5730
| * | | | | | | | | | | Add documentation exampleJoel Pearson2018-01-101-0/+3
| | | | | | | | | | | |
| * | | | | | | | | | | Add blockstorage version for openstackJoel Pearson2018-01-101-0/+4
| | | | | | | | | | | |
* | | | | | | | | | | | Merge pull request #6701 from spadgett/webconsole-config-groupOpenShift Merge Robot2018-01-111-3/+3
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Use webconsole.config.openshift.io/v1 API group Update the install to use the new web console config API group and kind. API change: openshift/api#29 Cluster up change: openshift/origin#18056 /assign @sdodson @deads2k @jwforres cc
| * | | | | | | | | | | | Use webconsole.config.openshift.io/v1 API groupSamuel Padgett2018-01-111-3/+3
| | | | | | | | | | | | |
* | | | | | | | | | | | | Merge pull request #6687 from jpeeler/sc-cert-fixOpenShift Merge Robot2018-01-113-6/+4
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Update deployment and apiserver with new certs Since new certificates are generated for every run, the apiservice caBundle needs updating in order to have the on disk CA match what is in Kubernetes. Because the secrets are updated, the daemonset needs to do a rolling update for the apiserver to pick up the new certs. Implemented here is an added annotation to the api server such that the update occurs automatically when the CA is changed. --- There may be a better way to make the rolling update occur without adding an annotation, such as within ansible itself (I just didn't know how to do that). Also, I think that probably the controller needs to be updated too in order to ensure staying in sync with the api server. Edit: I did not think that doing "oc apply" would cause the daemonset to pick up a change since the yaml may be exactly the same, but if it does then the annotation part can definitely be changed.
| * | | | | | | | | | | | Update deployment and apiserver with new certsJeff Peeler2018-01-103-6/+4
| | |_|/ / / / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since new certificates are generated for every run, the apiservice caBundle needs updating in order to have the on disk CA match what is in Kubernetes. Because the secrets are updated, the daemonset needs to do a rolling update for the api server to pick up the new certs. Implemented here is an added annotation to the api server such that the update occurs automatically when the CA is changed.
* | | | | | | | | | | | Merge pull request #6623 from vrutkovs/avoid-repoquery-on-containerizedOpenShift Merge Robot2018-01-111-9/+16
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. docker_upgrade_check: skip repoquery calls on containerized setups Fedora/CentOS Atomic hosts don't have repoquery installed - also there is no need to check available Docker rpms in the repos for Atomic Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1527256 Note, that this solution is pretty naive - a better idea would be splitting the playbooks for rpm and containerized installs for clarity
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-14 06:11:53 +0000