summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-master
Commit message (Collapse)AuthorAgeFilesLines
* Remove remaining references to openshift-master.serviceClayton Coleman2017-08-081-5/+0
| | | | Prevents playbooks from accidentally restarting the master service.
* Use existing OPENSHIFT_DEFAULT_REGISTRY setting during masters scaleupTim Bielawa2017-07-281-1/+54
| | | | | | | | | | | | | | | Fixes a bug which reported that AFTER a cluster upgrade from OCP 3.5 to 3.6, any masters which are later added via the scaleup playbooks are setting a value for OPENSHIFT_DEFAULT_REGISTRY which is inconsistent with the already configured masters. * OPENSHIFT_DEFAULT_REGISTRY value is saved from oo_first_master * The new scaleup master has a fact set noting it is a scaleup host * The saved OPENSHIFT_DEFAULT_REGISTRY value is used instead of the default for 3.6, which is to use a hard-coded registry value of 'docker-registry.default.svc:5000' Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1469336
* Default an empty list for etcd_to_config if not thereTim Bielawa2017-07-211-1/+1
| | | | | | Also add filter names of filters that failed me for to their error messages so you can figure out which filter threw an exception when you're debugging log files.
* If proxy in effect, add etcd host IP addresses to NO_PROXY list on mastersTim Bielawa2017-07-211-0/+3
| | | | Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1466783
* increase implicit 300s default timeout to explicit 600sJan Chaloupka2017-06-282-0/+2
|
* Set clean install and etcd storage on first master to fix scaleupScott Dodson2017-06-231-20/+19
| | | | Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1464011
* Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-2/+13
| | | | | This would be the case if for instance they'd upgraded and then migrated.
* etcd v3 for clean installsScott Dodson2017-06-161-0/+10
| | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* openshift-master: set r_etcd_common_etcd_runtimeGiuseppe Scrivano2017-06-061-0/+1
| | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Rework openshift_excluders roleRussell Teague2017-05-161-8/+8
|
* run excluders over selected set of hosts during control_plane/node upgradeJan Chaloupka2017-05-031-2/+14
| | | | Disable/reset excluders over requested hosts
* Normalizing groups.Kenny Woodson2017-05-011-1/+1
|
* Remove unnecessary folder refsRussell Teague2017-04-101-3/+3
|
* Removing initial setting of metrics image prefix and versionewolinetz2017-03-281-6/+0
|
* Make the OCP available version detection excluder freeJan Chaloupka2017-03-281-3/+0
| | | | | | When detecting available OCP version via repoquery, use yum.conf file with exclude= set to an empty array. So the detection is independent of the OCP excluder.
* Merge pull request #3038 from djosborne/calicoOpenShift Bot2017-03-271-0/+2
|\ | | | | Merged by openshift-bot
| * Add calico.Dan Osborne2017-03-231-0/+2
| |
* | enable excluders during node/master scaling upJan Chaloupka2017-03-161-0/+11
|/
* nuage: Move role back to configSteve Milner2017-03-101-0/+2
| | | | | | | | | d113f03 moved role dependencies out of playbooks. However, this ended up causing the masters to not be configured before the nuage steps required configured masters. This change moves the nuage specific change in d113f03 back to the config. Resolves #3583
* More fixes for reboot/wait for hosts.Devan Goodwin2017-02-101-2/+14
|
* Moving to ansible variable.Kenny Woodson2017-02-071-1/+1
|
* Specifying port for wait_for call.Kenny Woodson2017-02-071-0/+1
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-0/+19
|
* Fix host when waiting for a master system restart.Devan Goodwin2017-02-011-1/+2
| | | | | | Discovered situations where the inventory hostname may not be resolvable with operations. Switching to the ssh host (an IP) should always be correct.
* Standardize add_host: with name and changed_whenRussell Teague2017-01-251-1/+4
| | | | | | | The add_host: task does not change any data on the host and as practice has been configured to changed_when: False. This commit standardizes that usage in the byo and common playbooks. Additionally, taks names are added to each task to improve troubleshooting.
* Remove unused temporary directory in master config playbook.Andrew Butcher2017-01-231-21/+0
|
* Merge pull request #3057 from dgoodwin/serial-master-upgradeScott Dodson2017-01-192-16/+3
|\ | | | | Serial master upgrade
| * Perform master upgrades in a single play serially.Devan Goodwin2017-01-181-11/+0
| |
| * Validate system restart policy during pre-upgrade.Devan Goodwin2017-01-183-70/+68
| | | | | | | | | | | | | | | | | | | | This was done far into the process potentially leaving the user in a difficult situation if they had now considered they were running the upgrade playbook on a host that would be restarted. Instead check configuration and what host we're running on in pre-upgrade and allow the user to abort before making any substantial changes. This is a step towards merging master upgrade into one serial process.
* | More reliable wait for master after full host reboot.Devan Goodwin2017-01-181-5/+12
| | | | | | | | | | | | | | | | | | | | This would fail in some environments where openshift.common.hostname was not reachable from the local system running ansible. Additionally it is also possible the API port would not be available even if the host were. Instead we wait for master ssh connection to come back up, then wait for the master API on the remote host just as we do for the "service" style restart.
* | Create individual serving cert and loopback kubeconfig for additional masters.Andrew Butcher2017-01-161-4/+0
|/ | | | | | Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
* Do not default registry storage kind to 'nfs' when 'nfs' group exists.Andrew Butcher2017-01-121-5/+0
| | | | | | | This makes it possible to use openshift-ansible configured nfs for hosted components other than the registry while also configuring empty-dir registry storage (no openshift_hosted_registry_storage_kind set).
* Merge pull request #3060 from abutcher/return-deps-to-rolesScott Dodson2017-01-101-28/+3
|\ | | | | Return role dependencies to roles for openshift_{hosted,master,node}
| * Move role dependencies out of playbooks for openshift_master, openshift_node ↵Andrew Butcher2017-01-091-28/+3
| | | | | | | | and openshift_hosted.
* | Use openshift.common.hostname when verifying API port available.Andrew Butcher2017-01-061-7/+5
|/
* Updated OpenShift Master iptables rulesRussell Teague2016-12-121-12/+5
| | | | | | | * Removed unneeded rules * Moved etcd rule to conditional based on usage of embedded etcd https://bugzilla.redhat.com/show_bug.cgi?id=1386329
* YAML LintingRussell Teague2016-12-125-10/+11
| | | | | * Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
* openshift-master/restart : use openshift.common.hostname instead of ↵Mark Chappell2016-12-022-2/+2
| | | | | | | inventory_hostname When using a dynamic inventory inventory_hostname isn't guaranteed to be usable. We should use openshift.common.hostname which already copes with this
* Fix openshift_hosted_metrics_deployer_version set_fact.Andrew Butcher2016-11-141-1/+1
|
* Where we use curl force it to use tlsv1.2Scott Dodson2016-11-021-1/+1
| | | | | | | curl, prior to RHEL 7.2, did not properly negotiate up the TLS protocol, so force it to use tlsv1.2 Fixes bug 1390869
* Merge pull request #2627 from dgoodwin/remove-pacemaker-restartsScott Dodson2016-10-204-132/+3
|\ | | | | Drop pacemaker restart logic.
| * Drop pacemaker restart logic.Devan Goodwin2016-10-194-132/+3
| | | | | | | | | | Pacemaker clusters are no longer supported, and in some cases bugs here were causing upgrade failures.
* | Template with_items for upstream ansible-2.2 compat.Andrew Butcher2016-10-141-1/+1
|/
* Update play names for consistency.Andrew Butcher2016-09-291-2/+2
|
* Suppress more warnings.Andrew Butcher2016-09-281-0/+4
|
* Pull in keynote demo changesScott Dodson2016-08-241-0/+6
|
* Call relocated openshift-loadbalancer playbook in master scaleup.Andrew Butcher2016-08-041-0/+2
|
* Merge pull request #2049 from abutcher/named-certificatesScott Dodson2016-08-032-49/+6
|\ | | | | Named CA Certificates
| * Add options for specifying named ca certificates to be added to the ↵Andrew Butcher2016-08-012-49/+6
| | | | | | | | openshift ca bundle.
* | Refactor etcd certificates roles.Andrew Butcher2016-08-021-74/+7
|/