| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Revert "Bug 1512825 - add mux pod failed for Serial number 02 has already been issued"
@sdodson @nhosoi This reverts #6798 as we are not changing the default in origin https://github.com/openshift/origin/pull/18405.
This reverts commit ac23e6e362d8758032c1dd573d0ff6a958445df5.
That commit introduced a backwards incompatible change to how the commands run. This undoes that. The original change was not required to prevent overwriting of the serial file.
Bug 1512825
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
been issued"
This reverts commit ac23e6e362d8758032c1dd573d0ff6a958445df5.
That commit introduced a backwards incompatible change to how the
commands run. This undoes that. The original change was not
required to prevent overwriting of the serial file.
Bug 1512825
|
|/
|
|
| |
pw gen for increased secret idempotency
|
| |
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Don't update master-config.yaml with logging/metrics urls >= 3.9
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1540462
I thought about refactoring things just to move the assetConfig vs ConfigMap update into update_master_config but the tasks get called on different hosts via plays.
|
| | |
|
| | |
|
|/ |
|
|
|
|
|
|
|
|
| |
The `assetConfig` is no longer used now that the console is split into
its own pod.
- Remove `assetConfig` on upgrades to 3.9
- Stop writing logging and metrics URLs to assetConfig for 3.9
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Bug 1512825 - add mux pod failed for Serial number 02 has already been issued
According to mkhan@redhat.com, to run the "oc adm ca create-server-cert" command
line with --signer-serial option, the following changes need to be made.
1. adding --overwrite=false
2. <ca.serial.txt> should contain only [0-9A-F]*.
(no trailing newlines are allowed for now)
This patch solves 1.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
According to mkhan@redhat.com, to run the "oc adm ca create-server-cert" command
line with --signer-serial option, the following changes need to be made.
1. adding --overwrite=false
2. <ca.serial.txt> should contain only [0-9A-F]*.
(no trailing newlines are allowed for now)
This patch solves 1.
|
| |
| |
| |
| | |
Stop writing deprecated config to the console config map.
|
|\ \
| | |
| | |
| | |
| | | |
Automatic merge from submit-queue.
bug 1523047. Annotate ops projects with an .operation prefix
|
| |/ |
|
| |
| |
| |
| | |
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1535947
|
|\ \
| |/
|/|
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Setting default storage_class_names for when calling openshift_loggin…
…g_elasticsearch role
Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1521218
|
| |
| |
| |
| | |
openshift_logging_elasticsearch role
|
|/ |
|
|\
| |
| |
| |
| | |
Automatic merge from submit-queue.
logging: fix jinja filters to support py3
|
| |
| |
| |
| |
| |
| |
| | |
Since py3 returns `dict_items` for dict.keys() call instead of a list,
it should be converted into a list for compatibility
Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
After remove become:no statements on local_action tasks,
we need to ensure that the proper file permssions are
applied to local temp directories.
This reason for this is that the 'fetch' module
does not use 'become' for the localhost, just the remote
host.
Additionally, users may not wish for the localhost to
become during a fetch. local_action will execute with
whatever permissions are specified in inventory or via
cli.
|
|/
|
|
|
| |
This commit removes become:no statements that break
the installer in various ways.
|
|
|
|
|
| |
We'd switched to import_role to avoid increased memory consumption but
we must use include_role whenever we loop.
|
|\
| |
| | |
Install web console server
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
In Ansible 2.2, the include_role directive came into existence as
a Tech Preview. It is still a Tech Preview through Ansible 2.4
(and in current devel branch), but with a noteable change. The
default behavior switched from static: true to static: false
because that functionality moved to the newly introduced
import_role directive (in order to stay consistent with include*
being dynamic in nature and `import* being static in nature).
The dynamic include is considerably more memory intensive as it will
dynamically create a role import for every host in the inventory
list to be used. (Also worth noting, there is at the time of this
writing an object allocation inefficiency in the dynamic include
that can in certain situations amplify this effect considerably)
This change is meant to mitigate the pressure on memory for the
Ansible control host.
We need to evaluate where it makes sense to dynamically include roles
and revert back to dynamic inclusion if and where it makes sense to do
so.
|
|/
|
|
| |
files, use diffs to keep custom changes, white list certain settings when creating diffs
|
|
|
|
|
| |
We set these variables using facts in init, no need
to duplicate the logic all around the codebase.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit relocates filter_plugings to lib_utils,
changes the namespacing to prevent unintended use of
older versions that may be present in filter_plugins/
directory on existing installs.
Add lib_utils to meta depends for roles
Also consolidate some plugins into lib_utils from
various other areas.
Update rpm spec, obsolete plugin rpms.
|
|\
| |
| | |
fix 1519808. Only annotate ops projects when openshift_logging_use_op…
|
| | |
|
|\ \
| |/
|/| |
Do not escalate privileges in logging stack deployment task
|
| | |
|
|/ |
|
| |
|
|\
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
logging with static pvc: allow specifying the storage class name
See https://github.com/openshift/openshift-ansible/issues/6028 for more info and motivation.
|
| | |
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Automatic merge from submit-queue.
Bug 1510496 - logging: honor ES PVC size
fix for https://bugzilla.redhat.com/show_bug.cgi?id=1510496
|
| |/ |
|
| |
| |
| |
| | |
component roles set their defaults
|
|/
|
|
| |
openshift_logging pattern
|
|
|
|
| |
falling back to current logic
|
|\
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
bug 1501599. Omit logging project from overcommit restrictions
This PR:
* Annotates the logging project to remove overcommit restrictions
|
| | |
|
|/
|
|
|
|
|
|
|
| |
Currently, install_logging.yml in openshift_logging role
loops over other roles.
This creates a collision with the keyword 'item' in those roles.
This commit adds the loop_var as suggested by ansible warnings.
|
|\
| |
| | |
Use "requests" for CPU resources instead of limits
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
We now use a CPU request to ensure logging infrastructure pods are
not capped by default for CPU usage. It is still important to ensure
we have a minimum amount of CPU.
We keep the use of the variables *_cpu_limit so that the existing
behavior is maintained.
Note that we don't want to cap an infra pod's CPU usage by default,
since we want to be able to use the necessary resources to complete
it's tasks.
Bug 1501960 (https://bugzilla.redhat.com/show_bug.cgi?id=1501960)
|
|/ |
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Automatic merge from submit-queue.
Bug 1496271 - Perserve SCC for ES local persistent storage
ES can be modified to use node local persistent storage. This requires changing SCC and is described in docs:
https://docs.openshift.com/container-platform/3.6/install_config/aggregate_logging.html
During an upgrade, SCC defined by the user is ignored. This fix fetches SCC user defined as a fact and adds it to the ES DC which is later used.
Also includes cherrypicked fix for - Bug 1482661 - Preserve ES dc nodeSelector and supplementalGroups
cc @jcantrill
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
ES can be modified to use node local persistent storage. This requires
changing SCC and is described in docs:
https://docs.openshift.com/container-platform/3.6/install_config/aggregate_logging.html
During an upgrade, SCC defined by the user is ignored. This fix fetches
SCC user defined as a fact and adds it to the ES DC which is later used.
|