summaryrefslogtreecommitdiffstats
path: root/roles/openshift_ca
Commit message (Collapse)AuthorAgeFilesLines
* Default install_result when reloading generated facts.Andrew Butcher2018-01-171-1/+2
|
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-201-4/+4
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-182-6/+7
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Deprecate using Ansible tests as filtersRussell Teague2017-12-141-2/+2
|
* Add missing dependencies on openshift_facts roleScott Dodson2017-12-101-0/+1
| | | | | | | All of these roles call the openshift_facts module but didn't include the role in their dependencies which can lead to errors in Ansible 2.4. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1524102
* Remove openshift.common.service_typeMichael Gugino2017-12-071-1/+1
| | | | | | | | This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
* retry package operationsLuke Meyer2017-11-301-0/+1
| | | | | | When a package install/update fails due to network blips or other spotty availability, retry it. If the failure is a real failure (e.g. package is really not there) it still fails after 3 tries (Ansible default).
* Removed old version codeMichael Gugino2017-11-141-4/+0
| | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during ↵Andrew Butcher2017-11-061-0/+30
| | | | rolling CA redeployment.
* Remove delegate_to from openshift_facts within the openshift_ca role.Andrew Butcher2017-11-011-3/+1
|
* Separate certificate playbooks.Andrew Butcher2017-10-023-8/+8
|
* Removing dependencies for openshift_repos and setting them up early in the ↵Kenny Woodson2017-08-141-1/+0
| | | | cluster build.
* Generate loopback kubeconfig separately to preserve OpenShift CA certificate.Andrew Butcher2017-06-271-19/+40
|
* Use local openshift.master.loopback_url when generating initial master ↵Andrew Butcher2017-06-022-0/+35
| | | | loopback kubeconfigs.
* Use openshift_ca_host's hostnames to sign the CAScott Dodson2017-05-011-1/+1
| | | | | If for some reason oo_first_master and openshift_ca_host are different we could've signed the CA with the wrong hostnames.
* openshift_ca: add openshift_ca_cert_expire_days and ↵Slava Semushin2017-03-293-1/+10
| | | | openshift_master_cert_expire_days parameters.
* Do not force custom ca cert deployment.Andrew Butcher2017-02-281-0/+1
|
* [openshift_ca] Reference client binary from openshift_ca_host.Andrew Butcher2017-02-071-1/+1
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-8/+16
|
* Create individual serving cert and loopback kubeconfig for additional masters.Andrew Butcher2017-01-161-1/+1
| | | | | | Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
* Refactor to use Ansible package moduleRussell Teague2016-11-171-1/+3
| | | | | The Ansible package module will call the correct package manager for the underlying OS.
* Switch from "oadm" to "oc adm" and fix bug in binary sync.Devan Goodwin2016-10-191-1/+1
| | | | | | | | Found bug syncing binaries to containerized hosts where if a symlink was pre-existing, but pointing to the wrong destination, it would not be corrected. Switched to using oc adm instead of oadm.
* Support for redeploying certificates.Andrew Butcher2016-08-111-3/+60
|
* [openshift_ca] correct check for missing CA.Andrew Butcher2016-08-041-2/+1
|
* Add options for specifying named ca certificates to be added to the ↵Andrew Butcher2016-08-012-5/+10
| | | | openshift ca bundle.
* Refactor openshift certificates roles.Andrew Butcher2016-07-203-0/+71
|
* Always populate openshift_image_tag and openshift_pkg_version.Devan Goodwin2016-06-151-1/+1
| | | | | Allows the use of arbitrary tags, precise control over containers and rpms, and likely mixed environments.
* Merge remote-tracking branch 'upstream/master' into upgrade33Devan Goodwin2016-05-313-71/+0
|\
| * Revert openshift-certificates changes.Andrew Butcher2016-05-304-127/+0
| |
* | Fix use of openshift_version in ca role.Devan Goodwin2016-05-301-4/+1
|/
* Consolidate ca/master/node certificates roles into openshift_certificates.Andrew Butcher2016-05-194-0/+127