summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-master
Commit message (Collapse)AuthorAgeFilesLines
* More fixes for reboot/wait for hosts.Devan Goodwin2017-02-101-2/+14
|
* Moving to ansible variable.Kenny Woodson2017-02-071-1/+1
|
* Specifying port for wait_for call.Kenny Woodson2017-02-071-0/+1
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-0/+19
|
* Fix host when waiting for a master system restart.Devan Goodwin2017-02-011-1/+2
| | | | | | Discovered situations where the inventory hostname may not be resolvable with operations. Switching to the ssh host (an IP) should always be correct.
* Standardize add_host: with name and changed_whenRussell Teague2017-01-251-1/+4
| | | | | | | The add_host: task does not change any data on the host and as practice has been configured to changed_when: False. This commit standardizes that usage in the byo and common playbooks. Additionally, taks names are added to each task to improve troubleshooting.
* Remove unused temporary directory in master config playbook.Andrew Butcher2017-01-231-21/+0
|
* Merge pull request #3057 from dgoodwin/serial-master-upgradeScott Dodson2017-01-192-16/+3
|\ | | | | Serial master upgrade
| * Perform master upgrades in a single play serially.Devan Goodwin2017-01-181-11/+0
| |
| * Validate system restart policy during pre-upgrade.Devan Goodwin2017-01-183-70/+68
| | | | | | | | | | | | | | | | | | | | This was done far into the process potentially leaving the user in a difficult situation if they had now considered they were running the upgrade playbook on a host that would be restarted. Instead check configuration and what host we're running on in pre-upgrade and allow the user to abort before making any substantial changes. This is a step towards merging master upgrade into one serial process.
* | More reliable wait for master after full host reboot.Devan Goodwin2017-01-181-5/+12
| | | | | | | | | | | | | | | | | | | | This would fail in some environments where openshift.common.hostname was not reachable from the local system running ansible. Additionally it is also possible the API port would not be available even if the host were. Instead we wait for master ssh connection to come back up, then wait for the master API on the remote host just as we do for the "service" style restart.
* | Create individual serving cert and loopback kubeconfig for additional masters.Andrew Butcher2017-01-161-4/+0
|/ | | | | | Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
* Do not default registry storage kind to 'nfs' when 'nfs' group exists.Andrew Butcher2017-01-121-5/+0
| | | | | | | This makes it possible to use openshift-ansible configured nfs for hosted components other than the registry while also configuring empty-dir registry storage (no openshift_hosted_registry_storage_kind set).
* Merge pull request #3060 from abutcher/return-deps-to-rolesScott Dodson2017-01-101-28/+3
|\ | | | | Return role dependencies to roles for openshift_{hosted,master,node}
| * Move role dependencies out of playbooks for openshift_master, openshift_node ↵Andrew Butcher2017-01-091-28/+3
| | | | | | | | and openshift_hosted.
* | Use openshift.common.hostname when verifying API port available.Andrew Butcher2017-01-061-7/+5
|/
* Updated OpenShift Master iptables rulesRussell Teague2016-12-121-12/+5
| | | | | | | * Removed unneeded rules * Moved etcd rule to conditional based on usage of embedded etcd https://bugzilla.redhat.com/show_bug.cgi?id=1386329
* YAML LintingRussell Teague2016-12-125-10/+11
| | | | | * Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
* openshift-master/restart : use openshift.common.hostname instead of ↵Mark Chappell2016-12-022-2/+2
| | | | | | | inventory_hostname When using a dynamic inventory inventory_hostname isn't guaranteed to be usable. We should use openshift.common.hostname which already copes with this
* Fix openshift_hosted_metrics_deployer_version set_fact.Andrew Butcher2016-11-141-1/+1
|
* Where we use curl force it to use tlsv1.2Scott Dodson2016-11-021-1/+1
| | | | | | | curl, prior to RHEL 7.2, did not properly negotiate up the TLS protocol, so force it to use tlsv1.2 Fixes bug 1390869
* Merge pull request #2627 from dgoodwin/remove-pacemaker-restartsScott Dodson2016-10-204-132/+3
|\ | | | | Drop pacemaker restart logic.
| * Drop pacemaker restart logic.Devan Goodwin2016-10-194-132/+3
| | | | | | | | | | Pacemaker clusters are no longer supported, and in some cases bugs here were causing upgrade failures.
* | Template with_items for upstream ansible-2.2 compat.Andrew Butcher2016-10-141-1/+1
|/
* Update play names for consistency.Andrew Butcher2016-09-291-2/+2
|
* Suppress more warnings.Andrew Butcher2016-09-281-0/+4
|
* Pull in keynote demo changesScott Dodson2016-08-241-0/+6
|
* Call relocated openshift-loadbalancer playbook in master scaleup.Andrew Butcher2016-08-041-0/+2
|
* Merge pull request #2049 from abutcher/named-certificatesScott Dodson2016-08-032-49/+6
|\ | | | | Named CA Certificates
| * Add options for specifying named ca certificates to be added to the ↵Andrew Butcher2016-08-012-49/+6
| | | | | | | | openshift ca bundle.
* | Refactor etcd certificates roles.Andrew Butcher2016-08-021-74/+7
|/
* Move role dependencies to playbooks.Andrew Butcher2016-07-291-1/+29
|
* Merge pull request #2210 from abutcher/staggered-master-startScott Dodson2016-07-281-0/+1
|\ | | | | Stagger HA master service start
| * Stagger the start of master services.Andrew Butcher2016-07-241-0/+1
| |
* | Template named certificates with_items.Andrew Butcher2016-07-251-2/+2
| |
* | Replace master_cert_config_dir with common config_base fact.Andrew Butcher2016-07-251-1/+1
|/
* Refactor openshift certificates roles.Andrew Butcher2016-07-201-88/+12
|
* Merge remote-tracking branch 'upstream/master' into upgrade33Devan Goodwin2016-07-141-5/+0
|\
| * Various hosted component improvementsAndrew Butcher2016-07-071-5/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | * [openshift_projects] Add openshift_projects role * [openshift_hosted] hosted deployments use openshift_hosted_infra_selector if openshift_hosted_<component>_selector is not defined * [openshift_hosted] move openshift_projects, openshift_serviceaccounts and openshift_metrics to dependencies of openshift_hosted * [router] improve router deployment - add router option to force subdomain - add CA to router certificate options * [registry] move registry config into openshift_hosted role - additional registry fixes/tweaks - add s3 storage support for registry * [serviceaccount] fix up serviceaccount creation
* | Merge branch 'master' into upgrade33Devan Goodwin2016-06-281-1/+1
|\ \ | |/
| * Merge pull request #1927 from jfcoz/metrics_resolutionScott Dodson2016-06-231-1/+1
| |\ | | | | | | add unit in seconds for metrics resolution
| | * add unit in seconds for metrics resolutionjfcoz2016-05-231-1/+1
| | |
* | | Fix docker restarts during openshift_version role.Devan Goodwin2016-06-201-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | The variable here must be explicitly passed to the docker role, if it's passed sometimes and not others, the docker config changes triggers a docker restart effectively killing everything on the node in an unsafe manner. Instead lets make sure the value is set.
* | | Drop unused and broken "when" in vars section.Devan Goodwin2016-06-061-7/+0
| | |
* | | Do not install rpm for version in openshift_version role.Devan Goodwin2016-06-061-1/+1
| | |
* | | Merge remote-tracking branch 'upstream/master' into upgrade33Devan Goodwin2016-05-311-10/+91
|\ \ \ | |/ /
| * | Revert openshift-certificates changes.Andrew Butcher2016-05-301-10/+91
| | |
* | | Merge remote-tracking branch 'upstream/master' into upgrade33Devan Goodwin2016-05-301-133/+10
|\ \ \ | |/ /
| * | Separate master and haproxy config playbooks.Andrew Butcher2016-05-261-27/+0
| | | | | | | | | | | | | | | | | | * Move haproxy configuration to a separate openshift-loadbalancer play. * Move the haproxy role to openshift_loadbalancer. * Add openshift_loadbalancer* facts which drive haproxy configuration.
| * | Consolidate ca/master/node certificates roles into openshift_certificates.Andrew Butcher2016-05-191-91/+10
| |/