summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* added destination_format to our ec2.iniMatt Woodson2015-04-291-0/+14
|
* Merge pull request #189 from kwoodson/default_multiec2Kenny Woodson2015-04-271-0/+20
|\ | | | | Ansible tower default inventory will use multi_ec2
| * Updating ansible.cfg to use multi_ec2.py for inventoryKenny Woodson2015-04-271-0/+20
| |
* | Merge pull request #179 from detiber/onlineRepoCleanupWesley Hearn2015-04-234-124/+0
|\ \ | | | | | | More repo cleanup
| * | More repo cleanupJason DeTiberus2015-04-224-124/+0
| | | | | | | | | | | | | | | - remove previously removed repo files from disk if they still exist - remove gpg keys that are no longer referenced
* | | Fixes for latest osc client config changesJason DeTiberus2015-04-223-100/+334
|/ / | | | | | | - also pylint fixes
* | Merge pull request #169 from detiber/gce_iptables_defaultsJhon Honce2015-04-223-45/+46
|\ \ | | | | | | fixes to better deal with gce image defaults
| * | pylintJason DeTiberus2015-04-211-38/+44
| | |
| * | fixes to better deal with gce image defaultsJason DeTiberus2015-04-213-8/+3
| | | | | | | | | | | | | | | | | | | | | - remove exception if INPUT rules are not found, gce centos-7 image is stripped of default rules - ignore_errors for systemctl mask operation, fails with permission denied on gce centos-7 image.
* | | Use docker-registry.ops when deploying as onlineWesley Hearn2015-04-222-0/+12
| | |
* | | Remove duplicated repos and fix enterprise-v3 repoWesley Hearn2015-04-223-44/+1
| | |
* | | Merge pull request #170 from detiber/docker-networkThomas Wiest2015-04-211-4/+17
|\ \ \ | | | | | | | | openshift-sdn-node fix to use /etc/sysconfig/docker-network
| * | | openshift-sdn-node fix to use /etc/sysconfig/docker-networkJason DeTiberus2015-04-211-4/+17
| |/ /
* | | Merge pull request #165 from detiber/noEmptyNodesThomas Wiest2015-04-211-2/+2
|\ \ \ | | | | | | | | Fix issue with nodes being set to an empty string when generating master config
| * | | Fix issue with nodes being set to an empty string when generating master configJason DeTiberus2015-04-201-2/+2
| |/ /
* / / Update online v3 repo fileJason DeTiberus2015-04-213-6/+9
|/ /
* | Merge pull request #139 from detiber/configUpdatesMasterThomas Wiest2015-04-2026-182/+218
|\ \ | | | | | | Massive refactor, deployment-type support, config updates, reduce duplication
| * | Configuration updates for latest builds and major refactorJason DeTiberus2015-04-1426-182/+218
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Configuration updates for latest builds - Switch to using create-node-config - Switch sdn services to use etcd over SSL - This re-uses the client certificate deployed on each node - Additional node registration changes - Do not assume that metadata service is available in openshift_facts module - Call systemctl daemon-reload after installing openshift-master, openshift-sdn-master, openshift-node, openshift-sdn-node - Fix bug overriding openshift_hostname and openshift_public_hostname in byo playbooks - Start moving generated configs to /etc/openshift - Some custom module cleanup - Add known issue with ansible-1.9 to README_OSE.md - Update to genericize the kubernetes_register_node module - Default to use kubectl for commands - Allow for overriding kubectl_cmd - In openshift_register_node role, override kubectl_cmd to openshift_kube - Set default openshift_registry_url for enterprise when deployment_type is enterprise - Fix openshift_register_node for client config change - Ensure that master certs directory is created - Add roles and filter_plugin symlinks to playbooks/common/openshift-master and node - Allow non-root user with sudo nopasswd access - Updates for README_OSE.md - Update byo inventory for adding additional comments - Updates for node cert/config sync to work with non-root user using sudo - Move node config/certs to /etc/openshift/node - Don't use path for mktemp. addresses: https://github.com/openshift/openshift-ansible/issues/154 Create common playbooks - create common/openshift-master/config.yml - create common/openshift-node/config.yml - update playbooks to use new common playbooks - update launch playbooks to call update playbooks - fix openshift_registry and openshift_node_ip usage Set default deployment type to origin - openshift_repo updates for enabling origin deployments - also separate repo and gpgkey file structure - remove kubernetes repo since it isn't currently needed - full deployment type support for bin/cluster - honor OS_DEPLOYMENT_TYPE env variable - add --deployment-type option, which will override OS_DEPLOYMENT_TYPE if set - if neither OS_DEPLOYMENT_TYPE or --deployment-type is set, defaults to origin installs Additional changes: - Add separate config action to bin/cluster that runs ansible config but does not update packages - Some more duplication reduction in cluster playbooks. - Rename task files in playbooks dirs to have tasks in their name for clarity. - update aws/gce scripts to use a directory for inventory (otherwise when there are no hosts returned from dynamic inventory there is an error) libvirt refactor and update - add libvirt dynamic inventory - updates to use dynamic inventory for libvirt
* / Adding ansible-tower-cli rpm to towerKenny Woodson2015-04-161-0/+1
|/
* Merge pull request #149 from kwoodson/ans_inventoryKenny Woodson2015-04-097-0/+79
|\ | | | | Adding openshift_ansible_inventory role to configure multi_ec2
| * Adding a multi_ec2 yaml configure roleKenny Woodson2015-04-097-0/+79
| |
* | Merge pull request #148 from mwoodson/tower_configMatt Woodson2015-04-091-0/+6
|\ \ | | | | | | added sebools for ansible tower
| * | added sebools for ansible tower configMatt Woodson2015-04-091-0/+6
| | |
* | | refactor yum_repo role to handle multiple repos/filesJason DeTiberus2015-04-0911-62/+183
|/ / | | | | | | | | | | | | | | | | | | | | - Rename yum_repo role to yum_repos - Update yum_repos to take a more complex datastructure to describe multiple repo files and multiple repos within those files - Update the template to support multiple repos within the repo file - Update the template to allow for any key, value pair passed in instead of a hard coded list. - Add assertions to verify the repo_files variable is properly defined - Convert the legacy variables to the new repo_files variable
* / added more options to the yum repoMatt Woodson2015-04-091-0/+4
|/
* Adding yum_repo role for facilitating repository deploymentKenny Woodson2015-04-087-0/+64
|
* move zbxapi module to a new os_zabbix roleJason DeTiberus2015-04-081-0/+273
| | | | - cleans up repo root a bit
* Add byo playbooks and enterprise docsJason DeTiberus2015-04-031-0/+1
| | | | | | | | - added byo playbooks - added byo (example) inventory - added a README_OSE.md for getting started with Enterprise deployments - Added an ansible.cfg as an example for configuration helpful for playbooks/roles
* openshift_facts role/module refactor default settingsJason DeTiberus2015-04-0339-313/+729
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add openshift_facts role and module - Created new role openshift_facts that contains an openshift_facts module - Refactor openshift_* roles to use openshift_facts instead of relying on defaults - Refactor playbooks to use openshift_facts - Cleanup inventory group_vars - Update defaults - update openshift_master role firewall defaults - remove etcd peer port, since we will not be supporting clustered embedded etcd - remove 8444 since console now runs on the api port by default - add 8444 and 7001 to disabled services to ensure removal if updating - Add new role os_env_extras_node that is a subset of the docker role - previously, we were starting/enabling docker which was causing issues with some installations - Does not install or start docker, since the openshift-node role will handle that for us - Only adds root to the dockerroot group - Update playbooks to use ops_env_extras_node role instead of docker role - os_firewall bug fixes - ignore ip6tables for now, since we are not configuring any ipv6 rules - if installing package do a daemon-reload before starting/enabling service - Add aws support to bin/cluster - Add list action to bin/cluster - Add update action to bin/cluster - cleanup some stray debug statements - some variable renaming for clarity
* * Remove DOCKER chain work aroundJhon Honce2015-03-241-8/+0
|
* Revert "Jwhonce wip/cluster"Jhon Honce2015-03-246-183/+9
|
* remove openshift_hostname_workaround var for openshift_common, rather rely ↵Jason DeTiberus2015-03-245-9/+0
| | | | on inventory/playbook variables for openshift_hostname
* node registration changesJason DeTiberus2015-03-2413-122/+282
| | | | | | | | | | | | | | - Remove default value for openshift_hostname and make it required - Remove workarounds that are no longer needed - Remove resources parameter from openshift_register_node module - pre-create node certificates for each node before registering node - distribute created node certificates to each node - Move node registration logic to a new openshift_register_nodes role - This is because we now have to run the steps on a master as opposed to on the nodes like we were previously doing. - Rename openshift_register_node module to kubernetes_register_node, one more step to genericizing enough for upstreaming, however there are still plenty of openshift specific commands that still need to be genericized.
* remove os_firewall creation of DOCKER chainJason DeTiberus2015-03-241-8/+0
|
* Use docker as package name instead of docker-ioJason DeTiberus2015-03-241-1/+1
|
* Add new role os_env_extras_node that is a subset of the docker roleJason DeTiberus2015-03-244-0/+182
| | | | | | | - Does not install or start docker, since the openshift-node role will handle that for us - Only add root to the dockerroot group and configures the enter-container script.
* Add verify_chain action to os_firewall_manage_iptables moduleJason DeTiberus2015-03-242-35/+47
| | | | | | - Add verify_chain action to os_firewall_manage_iptables module - Update os_firewall module to use os_firewall_manage_iptables for creating the DOCKER chain.
* * Add DOCKER chain to iptablesJhon Honce2015-03-241-0/+14
|
* add repos role to gce cluster launch so that we are applying ↵Jason DeTiberus2015-03-241-3/+0
| | | | os_update_latest after repo config
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-241-0/+3
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Move yum update * to new os_update_latest roleJason DeTiberus2015-03-242-3/+3
|
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-242-1/+4
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Merge pull request #117 from detiber/repoRenameThomas Wiest2015-03-2415-0/+59
|\ | | | | Rename repos role to openshift_repos
| * Rename repos role to openshift_reposJason DeTiberus2015-03-1815-0/+59
| | | | | | | | | | | | | | | | | | - Rename repos role to openshift_repos - Make openshift_repos a dependency of openshift_common - Add README and metadata for openshift_repos - Playbook updates for role rename - Verify libselinux-python is installed, otherwise some of the bulit-in modules we use fail
* | Register node fixesJason DeTiberus2015-03-183-142/+333
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Set --hostname flag in node config in openshift_node role - Support some additional node attributes in openshift_node role - podCIDR - labels - annotations - Support both output types for openshift ex config view in openshift_register_node module - Support multiple api versions in openshift_register_node module - Support additional attributes in openshift_register_node module - annotations - labels - pod_cidr - external_ips (v1beta3, will be available after next kube rebase) - internal_ips (v1beta3, will be available after next kube rebase) - hostnames (v1beta3, will be available after next kube rebase) - external_id (v1beta3, will be available after next kube rebase)
* | Fix hostname handlingJason DeTiberus2015-03-183-7/+3
|/ | | | | - always set hostname if hostname does not match openshift_hostname - Use local IP instead of public IP as hostname for workaround
* Merge pull request #112 from detiber/masterWorkaroundThomas Wiest2015-03-131-0/+17
|\ | | | | Add workaround for openshift-master startup timeout
| * Add workaround for openshift-master startup timeoutJason DeTiberus2015-03-131-0/+17
| |
* | Update openshift_register_node module for changes in .kubeconfig format ↵Jason DeTiberus2015-03-131-5/+11
|/ | | | following latest kubernetes rebase
* Allow for overriding node resourcesJason DeTiberus2015-03-093-2/+6
| | | | | | | | | | - add variable openshift_node_resources to openshift_node role - set default value for openshift_node_resources to { capacity: { cpu: ,memory: }} - If cpu is not set, then the default value will be chosen by the openshift_register_node module (num logical cpus) - If memory is not set, then the default value will be chosen by the openshift_register_node module (75% MemTotal according to /proc/meminfo)
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-14 00:40:36 +0000