summaryrefslogtreecommitdiffstats
path: root/playbooks
Commit message (Collapse)AuthorAgeFilesLines
* Enable oreg_auth credential replace during upgradesMichael Gugino2017-10-191-0/+6
| | | | | | | | | | | | | Currently, upgrades run a docker image pull prior to upgrading masters and nodes for containerized installs. If using a secure registry, and a user wishes to upgrade their credentials due to expiry, the image pull will fail. This commit ensures docker login credentials are updated during upgrades, if necessary. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1503995
* Merge pull request #5763 from mgugino-upstream-stage/fix-master-config-upgradeScott Dodson2017-10-184-64/+0
|\ | | | | Remove unneeded master config updates during upgrades
| * Remove unneeded master config updates during upgradesMichael Gugino2017-10-174-64/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, upgrade_control_plane.yml will add any missing sections to the openshift master's config. These additions are only needed once. Users who perform multiple upgrades to their clusters over time do not need to have these variables re-inserted. Currently, re-inserting these variables can cause unwanted local changes. This commit ensures that the variables are only inserted into openshift master's config once. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1486054
* | Merge pull request #5361 from kwoodson/fix_bootstrap_filesScott Dodson2017-10-184-7/+8
|\ \ | | | | | | Provisioning updates.
| * | Do not remove files for bootstrap if resolv or dns.Kenny Woodson2017-10-174-7/+8
| | |
* | | Merge pull request #5459 from zgalor/nfs_fixScott Dodson2017-10-181-0/+9
|\ \ \ | | | | | | | | Fix prometheus role nfs
| * | | Fix prometheus role nfsZohar Galor2017-10-161-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | Allow for external or internal nfs. use facts as used for logging and metrics. Update prometheus-alertmanager image to v0.9.1
* | | | Merge pull request #5730 from sdodson/restart-controllersScott Dodson2017-10-172-0/+30
|\ \ \ \ | |_|_|/ |/| | | Restart all controllers to force reconfiguration during upgrade
| * | | Restart all controllers to force reconfiguration during upgradeScott Dodson2017-10-112-0/+30
| | | |
* | | | Merge pull request #5765 from abutcher/service-serving-cert-typoOpenShift Merge Robot2017-10-175-2/+42
|\ \ \ \ | |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Ensure controllerConfig.serviceServingCert is correctly set during upgrade. A typo was originally introduced in https://github.com/openshift/openshift-ansible/pull/2449 causing an incorrect key to be configured within the master config. This commit ensures that the correct key is set during upgrades. /cc @dlbewley https://bugzilla.redhat.com/show_bug.cgi?id=1500981
| * | | Ensure controllerConfig.serviceServingCert is correctly set during upgrade.Andrew Butcher2017-10-135-2/+42
| | | |
* | | | Merge pull request #5734 from mtnbikenc/refactor-mgmt-entryOpenShift Merge Robot2017-10-165-30/+21
|\ \ \ \ | |_|_|/ |/| | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Refactor openshift-management entry point Moves checkpointing steps into path for both full cluster install and individual entry point playbook.
| * | | Refactor openshift-management entry pointRussell Teague2017-10-125-30/+21
| | | |
* | | | Merge pull request #5733 from ↵OpenShift Merge Robot2017-10-161-6/+18
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ingvagabund/data-migrate-of-embedded-etcd-not-allowed Automatic merge from submit-queue. data migration of embedded etcd not allowed The v2->v3 migration of an embedded etcd is depricated. Instead, one needs to run: 1. `playbooks/byo/openshift-etcd/embedded2external.yml` to migrate the embedded etcd to an external one (see https://github.com/openshift/openshift-ansible/pull/5672) 2. then `playbooks/byo/openshift-etcd/migrate.yml` to migrate the v2 data to v3 data
| * | | | data migration of embedded etcd not allowedJan Chaloupka2017-10-121-6/+18
| |/ / /
* | | | Merge pull request #5747 from ↵OpenShift Merge Robot2017-10-151-1/+1
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ingvagabund/set-initial-etcd-cluster-properly-system-container-scale-up Automatic merge from submit-queue. Set initial etcd cluster properly during system container scale up When a cluster is scaled up, the ETCD_INITIAL_CLUSTER must not contain etcd members that are not about to start or are not part of the etcd cluster. Consolidating `initial_etcd_cluster` and `etcd_initial_cluster` as they do exactly the same. Bug: 1500667
| * | | set initial etcd cluster properly during system container scale upJan Chaloupka2017-10-131-1/+1
| | | |
* | | | Merge pull request #5735 from ↵Jan Chaloupka2017-10-131-1/+1
|\ \ \ \ | |/ / / |/| | | | | | | | | | | ingvagabund/default-oo_new_etcd_to_config-to-empty-list Default groups.oo_new_etcd_to_config to an empty list
| * | | default groups.oo_new_etcd_to_config to an empty listJan Chaloupka2017-10-121-1/+1
| |/ /
* | | Merge pull request #5740 from ↵OpenShift Merge Robot2017-10-121-1/+9
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/ensure_docker_containerized_lb Automatic merge from submit-queue. Ensure docker is installed for containerized load balancers Currently, containerized load balancers may not have docker configured by openshift-ansible. This commit ensures that containerized load balancers have the openshift_docker role applied. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496756
| * | | Ensure docker is installed for containerized load balancersMichael Gugino2017-10-121-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, containerized load balancers may not have docker configured by openshift-ansible. This commit ensures that containerized load balancers have the openshift_docker role applied. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1496756
* | | | Merge pull request #5741 from mtnbikenc/fix-1484324OpenShift Merge Robot2017-10-121-2/+4
|\ \ \ \ | |/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. 1484324 Ensure upgrade playbook exits on health check failures Adds `any_errors_fatal: true` https://bugzilla.redhat.com/show_bug.cgi?id=1484324
| * | | Ensure upgrade playbook exits on health check failuresRussell Teague2017-10-121-2/+4
| |/ / | | | | | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1484324
* | | Merge pull request #5690 from mgugino-upstream-stage/provisioning-docsOpenShift Merge Robot2017-10-128-132/+258
|\ \ \ | |/ / |/| | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Provisioning Documentation Updates Updating provisioning documents. Also moved some steps from build_ami.yml to a new play for better reusability.
| * | Provisioning Documentation UpdatesMichael Gugino2017-10-118-132/+258
| | | | | | | | | | | | | | | | | | | | | Updating provisioning documents. Also moved some steps from build_ami.yml to a new play for better reusability.
* | | Merge pull request #5727 from mtnbikenc/fix-1499254OpenShift Merge Robot2017-10-111-0/+1
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. 1499254 Ensure host was reached for proper conditional validation If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
| * | Ensure host was reached for proper conditional validationRussell Teague2017-10-111-0/+1
| |/ | | | | | | | | | | | | | | | | | | | | | | If a host was unreachable during module setup, facts will not be initialized properly and will result in later failures when stepping through host groups. Verification that 'openshift' is defined will skip any hosts which were previously unreachable and did not have facts initialized. Fixes 1499254 https://bugzilla.redhat.com/show_bug.cgi?id=1499254
* | Merge pull request #5672 from ingvagabund/migrate-embedded-etcdOpenShift Merge Robot2017-10-115-27/+209
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Migrate embedded etcd to external etcd Trello card: https://trello.com/c/9fnBfkT5/528-migrate-embedded-etcd-hosts-to-external-process?menu=filter&filter=label:committed-3.7 Tested on: - [x] embedded etcd -> external rpm etcd - [x] embedded etcd -> external docker etcd One needs to set the `openshift_image_tag` before running the migration to containerized docker etcd.
| * | Remove etcd health checkScott Dodson2017-10-101-20/+4
| | |
| * | migrate embedded etcd to external etcdJan Chaloupka2017-10-065-27/+225
| | |
* | | Fix broken debug_levelMichael Gugino2017-10-111-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* | | Merge pull request #5617 from simo5/up36roleOpenShift Merge Robot2017-10-113-11/+90
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Force reconciliation of role for 3.6 This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code.
| * | Display warnings at the end of the control plane upgradeScott Dodson2017-10-101-11/+14
| | |
| * | Force reconciliation of role for 3.6Simo Sorce2017-10-102-0/+76
| | | | | | | | | | | | | | | | | | | | | | | | This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code. Signed-off-by: Simo Sorce <simo@redhat.com>
* | | Merge pull request #5659 from mtnbikenc/fix-checkpointingOpenShift Merge Robot2017-10-1012-48/+24
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow checkpoint status to work across all groups Conditionals placed in inventories were not being applied to localhost causing the checkpoint status to not be updated properly. Moving to the `oo_all_hosts` group will correctly pick up the conditional and apply regardless of which group (or host) may have that conditional set.
| * | | Allow checkpoint status to work across all groupsRussell Teague2017-10-0412-48/+24
| | |/ | |/|
* | | Merge pull request #5129 from maxamillion/fedora-compatOpenShift Merge Robot2017-10-101-1/+10
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fedora compat fixes for package version checks and dnf bug workaround Fix a couple things that don't work with Fedora: - Don't attempt to version check components, they aren't going to match the hard coded RHEL package versions. - Work around a [bug in dnf](https://bugzilla.redhat.com/show_bug.cgi?id=1199432)'s python API that throws an error when a package spec has a `*` character in the Release field Once we're done with review, I'll squash commits.
| * | | rebase on masterAdam Miller2017-10-061-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
| * | | Add fedora compatibilityAdam Miller2017-10-061-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - don't check pkg versions on Fedora, it won't work; they move faster than RHEL and it's not realistic to maintain that package list. - handle differences between yum and dnf pkgspec for excluder - work-around for a bug in dnf https://bugzilla.redhat.com/show_bug.cgi?id=1199432 - make requirement verify one play, don't run unnecessary checks on Fedora
* | | | Separate tuned daemon setup into a role.Jiri Mencak2017-10-103-0/+3
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, profiles for the tuned daemon are set only for OpenShift node(s). This excludes the OpenShift loadbalancer. As a result, ARP cache limits on loadbalancers are not raised. This causes problems with HA setups where loadbalancers serve 1k+ OpenShift nodes. This commit ensures the openshift-control-plane role is applied to loadbalancers, masters and OpenShift infra nodes. Regular OpenShift worker nodes get the openshift-node profile. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1498213
* | | Merge pull request #5698 from abutcher/servinginfo-client-caOpenShift Merge Robot2017-10-091-2/+2
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Bug 1493276: Setting servingInfo.clientCA to ca-bundle.crt can cause unwanted client cert popups in browser when hitting console https://bugzilla.redhat.com/show_bug.cgi?id=1493276
| * | | Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher2017-10-091-2/+2
| | | |
* | | | Merge pull request #5682 from tbielawa/openshift_managementScott Dodson2017-10-0910-33/+33
|\ \ \ \ | |/ / / |/| | | Rename openshift_cfme role to openshift_management
| * | | Rename openshift_cfme role to openshift_managementTim Bielawa2017-10-0610-33/+33
| |/ /
* / / Switch to configmap leader election on 3.7 upgradeMonis Khan2017-10-061-0/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change sets the controllerConfig.election.lockName to openshift-master-controllers on a 3.7 upgrade. This is the default in a new 3.7 cluster. Important excerpt from the docs inside the origin codebase (slightly modified): There are two modes for lease operation - a legacy mode that directly connects to etcd, and the preferred mode which coordinates on a configmap or endpoint in the kube-system namespace. Because legacy mode and the new mode do not coordinate on the same key, an upgrade must stop all controllers before changing the configuration and starting controllers with the new config. Signed-off-by: Monis Khan <mkhan@redhat.com>
* | Merge pull request #5336 from tbielawa/cfme_4.6OpenShift Merge Robot2017-10-053-29/+28
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Cfme 4.6 # Description * Implements support for **CFME 4.6** in OCP 3.7 * **Replaces** the Tech Preview CFME 4.5 release included in OCP 3.6 * Does not support graceful migrations from the CFME 4.5 tech preview release # References * [Trello - (5) Integrate CFME 4.6 into OCP Installation](https://trello.com/c/Rzfn5Qa8/380-5-integrate-cfme-46-into-ocp-installation) Ensure the following RFE/Errors do not happen again - [x] #4555 - Error creating the CFME user - [x] #4556 - Error in PV template evaluation - [x] #4822 - Changing `maxImagesBulkImportedPerRepository` parameter - [x] #4568 - Add NFS directory support # Features Ensure the following features are configurable in the role - [x] POC deployments can easily default to NFS storage - [ ] Production/Cloud deployments can use automatic storage providers - [ ] Able to select between podified vs. external PostgreSQL database (podified uses configured storage mechanism) - [x] Template resource requests can be overridden for POC deployments
| * | Hooks for installing CFME during full openshift installationTim Bielawa2017-10-043-15/+28
| | |
| * | Import upstream templates. Do the work. Validate parameters.Tim Bielawa2017-10-041-1/+1
| | |
| * | CFME 4.6 work begins. CFME 4.5 references added to the release-3.6 branchTim Bielawa2017-10-041-15/+1
| |/
* | Merge pull request #5605 from mgugino-upstream-stage/build-provision-splitOpenShift Merge Robot2017-10-059-113/+102
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Build provision split Make provisioning steps more reusable Reorganizing and making some of the plays more reusable. Depends-on: https://github.com/openshift/openshift-ansible/pull/5565