summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml
Commit message (Collapse)AuthorAgeFilesLines
* Make sure to include upgrade_pre when upgrading master nodesScott Dodson2018-02-061-0/+3
|
* Merge pull request #7020 from vrutkovs/node-config-on-upgradeScott Dodson2018-02-061-0/+1
|\ | | | | Upgrades: pass openshift_manage_node_is_master to master nodes during upgrade
| * Upgrades: pass openshift_manage_node_is_master to master nodes during upgradeVadim Rutkovsky2018-02-061-0/+1
| | | | | | | | This ensures required labels for master would be set
* | Move cert SAN update logic to openshift-etcdRussell Teague2018-02-051-23/+0
|/
* remove openshift_upgrade_{pre,post}_storage_migration_enabled from failed_whenKenjiro Nakayama2018-02-031-3/+0
|
* Merge pull request #6958 from vrutkovs/rework-full-upgradeOpenShift Merge Robot2018-02-021-0/+6
|\ | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Upgrade playbook improvements Two changes in this PR: * Avoid duplication in upgrade.yml - it now would simply run upgrade_control_plane and upgrade_nodes playbooks * Restart controllers instead of start/stop if restart mode is 'services' * For 'system' restart mode controllers are disabled before master upgrade and re-enabled after upgrades are finished
| * Disable master controllers before upgrade and re-enable those when restart ↵Vadim Rutkovsky2018-01-311-0/+6
| | | | | | | | | | | | mode is system This removes a start/stop after control plane upgrade
* | Merge pull request #6876 from mgugino-upstream-stage/fix-restart-master-playScott Dodson2018-02-011-2/+0
|\ \ | |/ |/| Remove master_ha bool checks
| * Remove master_ha bool checksMichael Gugino2018-01-251-2/+0
| | | | | | | | | | | | | | | | | | | | Most of these checks are no longer applicable to the tasks on which they are applied. This commit removes incorrect ha checks to ensure services are restarted at appropriate times. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500897
* | Merge pull request #6859 from abutcher/bz1536217OpenShift Merge Robot2018-01-251-0/+24
|\ \ | |/ |/| | | | | Automatic merge from submit-queue. Bug 1536217: Need to validate etcd serving certs before 3.9 upgrade
| * Redeploy etcd certificates during upgrade when etcd hostname not present in ↵Andrew Butcher2018-01-241-0/+24
| | | | | | | | etcd serving cert SAN.
* | Label masters with node-role.kubernetes.io/master. This PR also sets these ↵Vadim Rutkovsky2018-01-241-10/+5
|/ | | | | | | | labels and scheduling status during upgrades Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* Merge pull request #5080 from sdodson/drain-timeoutsOpenShift Merge Robot2018-01-101-3/+9
|\ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Add the ability to specify a timeout for node drain operations A timeout to wait for nodes to drain pods can be specified to ensure that the upgrade continues even if nodes fail to drain pods in the allowed time. The default value of 0 will wait indefinitely allowing the admin to investigate the root cause and ensuring that disruption budgets are respected. In practice the `oc adm drain` command will eventually error out, at least that's what we've seen in our large online clusters, when that happens a second attempt will be made to drain the nodes, if it fails again it will abort the upgrade for that node or for the entire cluster based on your defined `openshift_upgrade_nodes_max_fail_percentage`. `openshift_upgrade_nodes_drain_timeout=0` is the default and will wait until all pods have been drained successfully `openshift_upgrade_nodes_drain_timeout=600` would wait for 600s before moving on to the tasks which would forcefully stop pods such as stopping docker, node, and openvswitch.
| * Add the ability to specify a timeout for node drain operationsScott Dodson2018-01-101-3/+9
| |
* | Merge pull request #6666 from sdodson/fix_client_binaryScott Dodson2018-01-101-3/+5
|\ \ | | | | | | Ensure that openshift_facts role is imported whenever we rely on
| * | Ensure that openshift_facts role is imported whenever we rely onScott Dodson2018-01-091-3/+5
| | | | | | | | | | | | openshift_client_binary
* | | Remove become statementsMichael Gugino2018-01-091-2/+0
|/ / | | | | | | | | This commit removes become:no statements that break the installer in various ways.
* | Merge pull request #6549 from mgugino-upstream-stage/node-meta-depends2OpenShift Merge Robot2018-01-081-2/+0
|\ \ | |/ |/| | | | | | | | | | | Automatic merge from submit-queue. Remove last of openshift_node role meta-depends Remove last non-taskless meta-depends from openshift_node role.
| * Remove last of openshift_node role meta-dependsMichael Gugino2018-01-021-2/+0
| | | | | | | | | | | | | | | | Remove last non-taskless meta-depends from openshift_node role. Remove variable 'openshift_node_upgrade_in_progress' as it is no longer used.
* | Migrate to import_role for static role inclusionScott Dodson2018-01-051-3/+3
|/ | | | | | | | | | | | | | | | | | | | | | | In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-201-9/+9
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-181-4/+4
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Deprecate using Ansible tests as filtersRussell Teague2017-12-141-9/+9
|
* Remove unneeded embedded etcd logicMichael Gugino2017-12-081-14/+0
| | | | | Removing some remaining embedded etcd facts except for the migration plays.
* Merge pull request #6371 from mtnbikenc/include-to-import_playbookOpenShift Merge Robot2017-12-071-8/+8
|\ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Include Deprecation: Convert to import_playbook * Converts playbooks/ to use `import_playbook`. * Updates remaining `include:` tasks to `include_tasks:` Trello: https://trello.com/c/ZTyZu3UM/484-3-ansible-24-include-deprecation
| * Include Deprecation: Convert to import_playbookRussell Teague2017-12-071-8/+8
| |
* | Merge pull request #6380 from sdodson/oc-admScott Dodson2017-12-071-1/+1
|\ \ | |/ |/| Remove all uses of openshift.common.admin_binary
| * Remove all uses of openshift.common.admin_binaryScott Dodson2017-12-071-1/+1
| | | | | | | | Replace with `oc adm`
* | Playbook Consolidation - etcd UpgradeRussell Teague2017-12-051-2/+2
|/
* Implement container runtime roleMichael Gugino2017-12-011-4/+0
|
* Correct usage of include_roleRussell Teague2017-11-271-1/+1
| | | | Switch to import_role for some required roles.
* Include Deprecation - openshift-masterRussell Teague2017-11-221-2/+2
|
* Playbook Consolidation - openshift-masterRussell Teague2017-11-221-2/+2
|
* Combine openshift_node and openshift_node_upgradeMichael Gugino2017-11-161-5/+5
| | | | | | | | | Currently, having openshift_node and openshift_node_upgrade as two distinct roles has created a duplication across handlers, templates, and some tasks. This commit combines the roles to reduce duplication and bugs encountered by not putting code in both places.
* Merge pull request #6084 from mgugino-upstream-stage/combine-master-upgradeOpenShift Merge Robot2017-11-151-56/+6
|\ | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Combine master upgrade play with role Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
| * Combine master upgrade play with roleMichael Gugino2017-11-091-56/+6
| | | | | | | | | | | | | | | | | | Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
* | Merge pull request #5968 from mgugino-upstream-stage/version-scrubScott Dodson2017-11-151-1/+0
|\ \ | | | | | | Removed old version code
| * | Removed old version codeMichael Gugino2017-11-141-1/+0
| |/ | | | | | | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* | Allow disabling authorization migration checkScott Dodson2017-11-141-17/+19
|/
* Merge pull request #5796 from mgugino-upstream-stage/journald-masters-upgradesOpenShift Merge Robot2017-10-241-0/+3
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Ensure upgrades apply latest journald settings Currently, existing clusters might not have journald configurations applied. This may result in a rate- limiting of important log messages on openshift-masters. This commit ensures that journald settings are applied during the upgrade process openshif-masters. Fixes: https://github.com/openshift/openshift-ansible/issues/5642
| * Ensure upgrades apply latest journald settingsMichael Gugino2017-10-181-0/+3
| | | | | | | | | | | | | | | | | | | | | | Currently, existing clusters might not have journald configurations applied. This may result in a rate- limiting of important log messages on openshift-masters. This commit ensures that journald settings are applied during the upgrade process openshif-masters. Fixes: https://github.com/openshift/openshift-ansible/issues/5642
* | verstion_gte seems unreliable on containerized installsScott Dodson2017-10-201-5/+6
| |
* | Retry reconcile in case of error and give up eventuallySimo Sorce2017-10-201-0/+6
|/ | | | | | Handles spurious failures and does not get mad if it just cannot do it. Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix broken debug_levelMichael Gugino2017-10-111-1/+0
| | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* Force reconciliation of role for 3.6Simo Sorce2017-10-101-0/+39
| | | | | | | | This is needed because in 3.6 we cannot reconcile non-cluster roles in the bootstrap reconciliation code. In 3.7 this is taken care of in code. Signed-off-by: Simo Sorce <simo@redhat.com>
* make difference filter output a list for Python3Jan Chaloupka2017-09-261-2/+2
|
* Do not reconcile in >= 3.7Simo Sorce2017-09-201-4/+3
| | | | | | | | Starting with 3.7 we use kube's RBAC which happens to do a forceful reconcile at server startup. Explicit reconciles are not needed anymore. Also drop obsolete version checks and simplify 'when' conditional Signed-off-by: Simo Sorce <simo@redhat.com>
* Don't assume storage_migration control variables are already booleanMark Chappell2017-09-131-9/+9
| | | | | | | | | | | | openshift_upgrade_pre_storage_migration_enabled openshift_upgrade_pre_storage_migration_fatal openshift_upgrade_post_storage_migration_enabled openshift_upgrade_post_storage_migration_enabled because the 4 variables are not already defaulted/evaluated there's no guarantee that they're actually the boolean type at this point. Example: if they're passed in on the command line
* Merge pull request #5247 from mgugino-upstream-stage/fix-master-upgradesOpenShift Bot2017-08-301-4/+1
|\ | | | | Merged by openshift-bot
| * Fix openshift_master upgradeMichael Gugino2017-08-291-4/+1
| | | | | | | | | | | | | | | | Currently, openshift_master upgrade play imports tasks directly from the openshift_master role. This method does not honor role defaults. This commit changes sets openshift_master_config_dir if undefined.