summaryrefslogtreecommitdiffstats
path: root/roles/openshift_ca/tasks
Commit message (Collapse)AuthorAgeFilesLines
* Default install_result when reloading generated facts.Andrew Butcher2018-01-171-1/+2
|
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-201-4/+4
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-181-6/+6
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Deprecate using Ansible tests as filtersRussell Teague2017-12-141-2/+2
|
* Remove openshift.common.service_typeMichael Gugino2017-12-071-1/+1
| | | | | | | | This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
* retry package operationsLuke Meyer2017-11-301-0/+1
| | | | | | When a package install/update fails due to network blips or other spotty availability, retry it. If the failure is a real failure (e.g. package is really not there) it still fails after 3 tries (Ansible default).
* Removed old version codeMichael Gugino2017-11-141-4/+0
| | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Temporarily set master servingInfo.clientCA as client-ca-bundle.crt during ↵Andrew Butcher2017-11-061-0/+30
| | | | rolling CA redeployment.
* Remove delegate_to from openshift_facts within the openshift_ca role.Andrew Butcher2017-11-011-3/+1
|
* Generate loopback kubeconfig separately to preserve OpenShift CA certificate.Andrew Butcher2017-06-271-19/+40
|
* Use local openshift.master.loopback_url when generating initial master ↵Andrew Butcher2017-06-021-0/+32
| | | | loopback kubeconfigs.
* Use openshift_ca_host's hostnames to sign the CAScott Dodson2017-05-011-1/+1
| | | | | If for some reason oo_first_master and openshift_ca_host are different we could've signed the CA with the wrong hostnames.
* openshift_ca: add openshift_ca_cert_expire_days and ↵Slava Semushin2017-03-291-1/+5
| | | | openshift_master_cert_expire_days parameters.
* Do not force custom ca cert deployment.Andrew Butcher2017-02-281-0/+1
|
* [openshift_ca] Reference client binary from openshift_ca_host.Andrew Butcher2017-02-071-1/+1
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-8/+16
|
* Create individual serving cert and loopback kubeconfig for additional masters.Andrew Butcher2017-01-161-1/+1
| | | | | | Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
* Refactor to use Ansible package moduleRussell Teague2016-11-171-1/+3
| | | | | The Ansible package module will call the correct package manager for the underlying OS.
* Switch from "oadm" to "oc adm" and fix bug in binary sync.Devan Goodwin2016-10-191-1/+1
| | | | | | | | Found bug syncing binaries to containerized hosts where if a symlink was pre-existing, but pointing to the wrong destination, it would not be corrected. Switched to using oc adm instead of oadm.
* Support for redeploying certificates.Andrew Butcher2016-08-111-3/+60
|
* [openshift_ca] correct check for missing CA.Andrew Butcher2016-08-041-2/+1
|
* Add options for specifying named ca certificates to be added to the ↵Andrew Butcher2016-08-011-5/+9
| | | | openshift ca bundle.
* Always populate openshift_image_tag and openshift_pkg_version.Devan Goodwin2016-06-151-1/+1
| | | | | Allows the use of arbitrary tags, precise control over containers and rpms, and likely mixed environments.
* Fix use of openshift_version in ca role.Devan Goodwin2016-05-301-4/+1
|
* Consolidate ca/master/node certificates roles into openshift_certificates.Andrew Butcher2016-05-191-0/+56