summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* Put back node/flat secgrp for infra nodes on openstackBogdan Dobrelya2017-06-281-0/+6
| | | | | | | Partially undo 2028883e936c8a1a0be031a19d531d0804a32b68 to unblock end-to-end deployments Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* Merge pull request #488 from bogdando/fix_flat_sgBogdan Dobrelya2017-06-231-59/+33
|\ | | | | Fix flat sec group and infra/dns sec rules
| * Fix flat sec group and infra/dns sec rulesBogdan Dobrelya2017-06-231-59/+33
| | | | | | | | | | | | | | | | | | | | Make flat sec group to only merge node/master/etcd sec rules. Add basic dns/ssh sec group and assign it to all but dns node groups. Assign only dns sec group for dns nodes. Assign only infra (and basic) sec groups for ingra nodes. Add security notes for openstack provider. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* | Use cached facts, do not become for localhost (#484)Bogdan Dobrelya2017-06-211-0/+2
|/ | | | | | Prohibit sudoing for localhost played tasks, like DNS setup. Re-use cached facts to speed up deployment. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* Fix yamllint errorsTomas Sedovic2017-06-167-52/+32
|
* Drop atomic-openshift-utils, update docs for originBogdan Dobrelya2017-06-151-2/+1
| | | | | | | | TODO use with when: ansible_distribution == 'CentOS' Also update docs for origin Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* Add a flat sec group for openstack providerBogdan Dobrelya2017-06-151-10/+128
| | | | | | | | | | Add a openstack_flat_secgroup, defaults to False. When set, merges sec rules for master, node, etcd, infra nodes into a single group. Less secure, but might help to mitigate quota limitations. Update docs. Use timeout 30s to mitigate the error: Timeout (12s) waiting for privilege escalation prompt. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
* Always let the openshift nodes access the DNSTomas Sedovic2017-06-151-0/+15
| | | | | | | | | When `node_ingress_cidr` to limit the IP range for the DNS server, this can prevent the actual openshift nodes from accessing it as well. This commit makes the access from the `openstack_subnet_prefix` always pass through and uses `node_ingress_cidr` for additional access control.
* Move pre_tasks from to the openstack provisionerTomas Sedovic2017-06-141-38/+0
| | | | | We should probably not pollute the role namespace with a name as common as "common". Moving the pre_task.yml to provisioners/openstack instead.
* Merge redhat-cop/casl-ansible into openstack-providerTomas Sedovic2017-06-1423-0/+1418
|\ | | | | | | | | | | | | | | This imports the openstack provisioning bits of: https://github.com/redhat-cop/casl-ansible taking care to preserve the original history of those files.
| * Update CASL to use nsupdate for DNS records (#48)Øystein Bedin2017-06-135-9/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Updated to use nsupdate for DNS records * Updated formatting of dict * Updating descriptive text * Support for external DNS config * Upgrading jinja2 to work correctly with latest templates * Latest update for nsupdate * Updated to use nsupdate for DNS records * Updated formatting of dict * Updating descriptive text * Support for external DNS config * Latest update for nsupdate * Updated to support external public/private DNS server(s) * Updated DNS server handling * Updated DNS server handling * Updated DNS server handling * Eliminated the from the sample inventories * Updated sample inventory to point to 2 separate DNS servers for private/public * Playbook clean-up * Adding 'python-dns' * splitting subscription manager calls to allow for a clean pre-install playbook
| * Conditionally set the openshift_master_default_subdomain to avoid overriding ↵Øystein Bedin2017-06-051-0/+2
| | | | | | | | it unecessary (#47)
| * First attempt at a simple multi-master support (#39)Eric Sauer2017-04-272-0/+71
| | | | | | | | | | | | | | | | * First attempt at a simple multi-master support * Removing unneeded inventory * adding default number of masters and lower number of nodes
| * Stack refactor (#38)Eric Sauer2017-04-255-286/+184
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Refactored openstack-stack role to: - Convert static heat template files to ansible templates - Include native ansible groups via openstack metadata. This removes the need for a playbook to map host groups - Some code cleanup * Deleting commentd out code and irrelevant plays * Refactored openstack-stack role to: - Convert static heat template files to ansible templates - Include native ansible groups via openstack metadata. This removes the need for a playbook to map host groups - Some code cleanup * Deleting commentd out code and irrelevant plays * Replacing stack parameters with jinja expressions * Updating sample inventory to work with latest dynamic inventory changes * updating inventory with host group mapping. making sync keys optional * Missing cluster_hosts group * Updating to add infra_hosts * Updating inventory per comments from oybed and sabre1041
| * Ensure DNS configuration has wildcards set for infra nodes (#24)Øystein Bedin2017-02-201-0/+10
| | | | | | | | | | | | * Ensure DNS configuration has wildcards set for infra nodes * Updated to include all cluster hosts for DNS entries
| * Fixing two significant bugs in the HEAT deployment (#13)Eric Sauer2017-02-061-0/+3
| |
| * Openstack heat (#2)Eric Sauer2016-12-2110-0/+956
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Adding a role to invoke openstack heat * Adding readme * Pulling parameters out to inventory file * start of end-to-end playbook * More enhancements and refactoring to make dynamic inventory the driver for an openshift install * Switching to variable substituted path to config.yaml playbook * Changes to allow defining of number of nodes/infranodes. * Added labels to inventory * Start of end-to-end functionality * Enhancements to support openstack heat provisioning * Updating inventory sample to remove some deprecation warnings * Working towards making the secure-registry role 'become' aware * Fixing node labels and removing secure-registry as it's no longer needed * No longer need insecure registry line, as installer will secure our registry * Adjusted dynamic inventory to filter by clusterid * Minor updates to dynamic inventory bug * Adding a refactored sample inventory directory * Refactoring playbooks for better directory structure, and to narrow down host groups * Adding volume mounts to heat template * Moving dns playbooks back to original location * Fixing incorrect file path * Cleaning up inventory samples * One more hostname to clean up * Changing var name * changed openshift-provision to openshift-prep * Adjusting current provision script to avoid breakage by new openstack-heat code
| * Fixing ansible impl to work with OSP9 and ansible 2.2Øystein Bedin2016-11-151-1/+1
| |
| * Updated env_id to be a sub-domain + make the logic a bit more flexibleØystein Bedin2016-08-212-4/+21
| |
| * Fixes Issue #163 if rhsm_password is not definedVinny Valdez2016-07-151-5/+1
| |
| * Merge pull request #157 from vvaldez/satellite-with-orgEric Sauer2016-06-211-0/+12
| |\ | | | | | | Add org parameter to Satellite with user/pass
| | * Add org parameter to Satellite with user/passVinny Valdez2016-04-231-0/+12
| | |
| * | Cleande up hostname role to make it more genericØystein Bedin2016-06-172-50/+21
| | |
| * | Updated to run as root rather than cloud-user, for now...Øystein Bedin2016-06-091-1/+1
| | |
| * | Channging hard coded host groups to match openshift-ansible expected host ↵Eric Sauer2016-06-082-13/+12
| | | | | | | | | | | | groups. Importing byo playbook now instead of nested ansible run. Need to refactor how we generate hostnames to make it fit this.
| * | Subscription manager role should accomodate orgs with spacesEric Sauer2016-06-031-1/+1
| | |
| * | Reverting previous commit and making template adjustmentsEric Sauer2016-06-031-0/+8
| | |
| * | Changes to allow runs from inside a container. Also allows for running ↵Eric Sauer2016-06-031-0/+3
| | | | | | | | | | | | upstream openshift-ansible installer
| * | Changes by JayKayy for a full provision of OpenShift on OpenStackEric Sauer2016-05-139-1/+113
| | |
| * | Fix typo in task nameVinny Valdez2016-04-271-1/+1
| |/
| * Remove vars_prompt, add info to README to re-enable and for ansible-vaultVinny Valdez2016-04-203-30/+79
| |
| * Cosmetic changes to task names and move yum clean all to prereqsVinny Valdez2016-04-201-18/+15
| |
| * Refactor use of rhsm_password to prevent display to CLIVinny Valdez2016-04-203-12/+50
| |
| * Fix bad syntax with extra 'and' in when using rhsm_poolVinny Valdez2016-04-201-2/+7
| |
| * Refactor role to dynamically determine rhsm_methodVinny Valdez2016-04-203-45/+46
| | | | | | | | | | | | | | | | | | * Removes rhsm_method * Renames rhsm_server to rhsm_satellite * Add additional pre_task checks (hosted + key) * Change conditionals from rhsm_method check to rhsm_satellite defined * Change repos disable/enable from key to if repos are defined * Update README and examples in inventory file
| * Add subscription-manager support for Hosted or SatelliteVinny Valdez2016-04-203-0/+225
| |
| * New OSE3 docker host builder and OpenStack ansible provisioning supportAndrew Block2016-02-081-0/+4
|
* More ansible migration and deploy OCP from local workstation (#376)Peter Schiffer2017-05-181-1/+1
| | | | | | | | | | | | * Create registry bucket with deployment manager * Migrate ssh proxy to Ansible * Update gce dynamic inventory script, use instance name for ssh * Fix variable name in docker storage setup role * Deploy OCP from local workstation, and not from the bastion host
* Removed hardcoded values from ansible rolesEduardo Minguez Perez2017-05-164-6/+11
|
* update for yamllint errorsJason DeTiberus2017-01-261-5/+5
|
* Making providers common (#126)Ryan Cook2017-01-132-0/+12
* Making providers common * moving directory locations * using links and removal of vars file callout * rename of file * went block crazy * cleanup * add to remove * missing Pyyaml package in README * let docker actually setup docker storage and start the service * name change * Fix for vmware. Will variablize in the future * catchup to test common providers against master * should only be schedulable nodes
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 23:42:32 +0000