summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* Only attempt to start iptables on hosts in the current batchScott Dodson2017-09-131-1/+1
| | | | | | | | | | | | If os_firewall role is called from within a play that uses serial then it was attempting to start iptables on hosts that may not have had iptables installed on them yet. So limit the hosts to the current batch. According to the ansible docs on plays where serial is unused this is the same as ansible_play_hosts. See http://docs.ansible.com/ansible/latest/playbooks_variables.html Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1490739
* Merge pull request #5405 from ewolinetz/issue_5403Scott Dodson2017-09-131-1/+0
|\ | | | | Removing setting of pod presets
| * Removing setting of pod presetsEric Wolinetz2017-09-131-1/+0
| |
* | Merge pull request #5359 from mgugino-upstream-stage/version-docker-auth-configOpenShift Bot2017-09-1311-34/+111
|\ \ | |/ |/| Merged by openshift-bot
| * Fix: authenticated registry support for containerized hostsMichael Gugino2017-09-1111-34/+111
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* | cri-o: Fix Fedora image nameSteve Milner2017-09-131-1/+1
| | | | | | | | Signed-off-by: Steve Milner <smilner@redhat.com>
* | Merge pull request #5379 from mtnbikenc/fix-jinja2-openshift_hostedOpenShift Bot2017-09-133-4/+4
|\ \ | | | | | | Merged by openshift-bot
| * | Correct logic for openshift_hosted_*_waitRussell Teague2017-09-123-4/+4
| | |
| * | Workaround Ansible Jinja2 delimiter warningRussell Teague2017-09-122-2/+2
| | | | | | | | | | | | | | | | | | | | | This workaround prevents the warnings on using Jinja2 templating delimiters in `when:` conditions in cases where a variable is used as the conditional. This has been fixed in Ansible 2.4. https://github.com/ansible/ansible/pull/25092
* | | Merge pull request #5377 from ingvagabund/double-required-disk-space-etcd-backupOpenShift Bot2017-09-132-3/+2
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | double the required disk space for etcd backupJan Chaloupka2017-09-122-3/+2
| |/ /
* | | Merge pull request #5365 from sosiouxme/20170908-disconnected-image-checkOpenShift Bot2017-09-1212-144/+184
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | openshift_health_check: allow disabling all checksLuke Meyer2017-09-122-3/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Can now set openshift_disable_check=* to disable all checks without needing to know their names. fixes bug 1462106 https://bugzilla.redhat.com/show_bug.cgi?id=1462106
| * | | docker_image_availability: fix local image searchLuke Meyer2017-09-121-5/+9
| | | | | | | | | | | | | | | | | | | | | | | | An image in the docker index may be tagged by name or by registry plus name. In order to find the image correctly locally and prevent looking for it externally, make sure all possible variations are searched.
| * | | docker_image_availability: probe registry connectivityLuke Meyer2017-09-122-122/+132
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Probe whether the host has connectivity to the registry before trying to inspect it for images, and remember the result. Also if later inspection fails due to timeout, mark registry as unreachable. Note in failure output if any registries were unreachable. Registry order should match what is configured into docker now as well. Fixes bug 1480195 https://bugzilla.redhat.com/show_bug.cgi?id=1480195
| * | | openshift_checks: add retries in pythonLuke Meyer2017-09-1210-22/+43
| |/ /
* | | Merge pull request #5343 from mtnbikenc/improve-jinja2-searchOpenShift Bot2017-09-121-1/+1
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | Improve searching when conditions for Jinja2 delimitersRussell Teague2017-09-111-1/+1
| | |/ | |/|
* | | Merge pull request #5350 from adelton/issue-2454OpenShift Bot2017-09-121-1/+1
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | Properly quote "true" and "false" strings for include_granted_scopes.Jan Pazdziora2017-09-111-1/+1
| | | |
* | | | Merge pull request #5352 from rhcarvalho/issue5311-harden-failure-summary-pluginScott Dodson2017-09-122-2/+29
|\ \ \ \ | |_|_|/ |/| | | Skip failure dedup instead of crashing
| * | | Skip failure dedup instead of crashingRodolfo Carvalho2017-09-112-2/+29
| | |/ | |/| | | | | | | | | | | | | This makes the callback plugin behave better when dedup is not possible: work with the original list of failures instead of raising an unhandled exception and producing confusing output for users.
* / | container-engine: Allow full image overrideSteve Milner2017-09-111-8/+12
|/ / | | | | | | | | | | | | | | | | | | | | | | | | openshift_docker_systemcontainer_image_registry_override has been replaced with openshift_docker_systemcontainer_image_override. The difference is openshift_docker_systemcontainer_image_override takes a full image path including the tag. Example: openshift_docker_systemcontainer_image_override=gscrivano/container-engine:latest Signed-off-by: Steve Milner <smilner@redhat.com>
* | Merge pull request #5338 from mtnbikenc/fix-pre_upgradeOpenShift Bot2017-09-112-1/+5
|\ \ | |/ |/| Merged by openshift-bot
| * Fix issue with etcd_common when using pre_upgrade tagRussell Teague2017-09-082-1/+5
| |
* | Merge pull request #5289 from jcantrill/1487573_fix_allowed_es_versionOpenShift Bot2017-09-085-10/+10
|\ \ | |/ |/| Merged by openshift-bot
| * bug 1487573. Bump the allowed ES versionsJeff Cantrill2017-09-015-10/+10
| |
* | Merge pull request #5209 from wozniakjan/logging_es_probeOpenShift Bot2017-09-072-1/+15
|\ \ | | | | | | Merged by openshift-bot
| * | elasticsearch: reintroduce readiness probeJan Wozniak2017-08-292-1/+15
| | |
* | | Consolidating AWS roles and variables underneath openshift_aws role.Kenny Woodson2017-09-0746-984/+876
| | |
* | | Merge pull request #5208 from mgugino-upstream-stage/remove-openshift_commonOpenShift Bot2017-09-0746-340/+121
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | Remove openshift-commonMichael Gugino2017-09-0646-340/+121
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* | | | Merge pull request #5310 from ashcrow/split-rhel-centos-crioOpenShift Bot2017-09-071-2/+8
|\ \ \ \ | | | | | | | | | | Merged by openshift-bot
| * | | | cri-o: Split RHEL and CentOS imagesSteve Milner2017-09-061-2/+8
| | | | |
* | | | | Merge pull request #5162 from aerialls/patch-2OpenShift Bot2017-09-071-9/+9
|\ \ \ \ \ | | | | | | | | | | | | Merged by openshift-bot
| * | | | | reverse order between router cert generationJulien Brochet2017-08-231-9/+9
| | | | | |
| * | | | | ensured to always use a certificate for the routerJulien Brochet2017-08-221-1/+1
| | | | | |
* | | | | | Merge pull request #5296 from nak3/skeopeo-command-outputOpenShift Bot2017-09-061-4/+6
|\ \ \ \ \ \ | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | output skopeo image check commandKenjiro Nakayama2017-09-051-4/+6
| | |_|/ / / | |/| | | |
* | | | | | Merge pull request #5276 from richm/masterOpenShift Bot2017-09-065-1/+11
|\ \ \ \ \ \ | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | logging set memory request to limitJeff Cantrill2017-08-305-1/+11
| | | | | | |
* | | | | | | Merge pull request #5148 from kwoodson/registry_proxy_updatesOpenShift Bot2017-09-061-0/+8
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | | Adding proxy env vars for dc/docker-registryKenny Woodson2017-08-211-0/+8
| | | | | | | |
* | | | | | | | Merge pull request #5067 from e-minguez/flannel_use_sdn_cluster_network_cidrScott Dodson2017-09-062-4/+2
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | Use the proper pod subnet instead the services one
| * | | | | | | | Use the proper pod subnet instead the services oneEduardo Minguez Perez2017-08-292-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #4809 ?
* | | | | | | | | Merge pull request #5299 from jhadvig/dnf_issueScott Dodson2017-09-063-12/+22
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | Import dnf only if importing yum fails
| * | | | | | | | | openshift_checks aos_version: also check installed under yumLuke Meyer2017-09-063-17/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tweaks to the logic around using yum vs dnf; now uses ansible_pkg_mgr to determine which is in effect for a host. Also, extended the yum logic to check installed packages in addition to available packages in the aos_version module so that disconnected installs and others with weird repo configs need not disable the package_version check.
| * | | | | | | | | Import dnf only if importing yum failsJakub Hadvig2017-09-051-6/+12
| | |_|_|/ / / / / | |/| | | | | | |
* | | | | | | | | Merge pull request #5202 from giuseppe/crio-additional-registriesOpenShift Bot2017-09-062-0/+14
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | Merged by openshift-bot
| * | | | | | | | | cri-o: add support for additional registriesGiuseppe Scrivano2017-08-242-0/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support added to CRI-O with: https://github.com/kubernetes-incubator/cri-o/commit/a35727c80bd2a26613aae21db00628045cb9be24 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>