summaryrefslogtreecommitdiffstats
path: root/roles/openshift_common
Commit message (Collapse)AuthorAgeFilesLines
...
* Ensure openshift-sdn and flannel can't be used at the same timeSylvain Baubeau2015-10-271-0/+4
|
* Add flannel supportSylvain Baubeau2015-10-271-0/+1
| | | | Signed-off-by: Sylvain Baubeau <sbaubeau@redhat.com>
* Move openshift_data_dir to a fact based on deployment_typeScott Dodson2015-09-101-2/+0
| | | | | | Previously this was being set to /var/lib/origin regardless of deployment_type which isn't correct given that existing 'enterprise' and 'online' deployments would have been deployed with /var/lib/openshift
* Merge pull request #512 from sdodson/nextWesley Hearn2015-08-282-2/+2
|\ | | | | Merge in Atomic Enterprise work into master
| * Atomic Enterprise related changes.Avesh Agarwal2015-08-262-2/+2
| |
* | Merge pull request #459 from spinolacastro/fluentdWesley Hearn2015-08-271-0/+1
|\ \ | |/ |/| Configure Fluentd
| * Configure FluentdDiego Castro2015-08-121-0/+1
| |
* | Merge pull request #405 from sdodson/loglevel2Brenton Leanhardt2015-08-173-3/+3
|\ \ | | | | | | Set loglevel=2 as our default across the board
| * | Set loglevel=2 as our default across the boardScott Dodson2015-07-293-3/+3
| |/
* | Changes to make documentation less specific to OSE or AE and alsoAvesh Agarwal2015-08-131-3/+3
|/ | | | adds README_AEP.md.
* Replace outdated beta repo ids with 3.0 releaseTakayoshi Kimura2015-07-171-1/+1
|
* Update for RC2 changesScott Dodson2015-06-161-1/+0
| | | | | | | | | | | | | Remove openshift-deployer.kubeconfig from master template Sync config template Update enterprise image names Switch to node auto registration Add deployer to list of serviceAccountConfig.managedNames Move package installation before registering facts change default kubeconfig location Change system:openshift-client to system:openshift-master Rename node cert/key/kubeconfig per openshift/origin#3160 Update references to /var/lib/openshift/openshift.local.certificates
* Templatize configs and 0.5.2 changesJason DeTiberus2015-06-102-0/+4
| | | | | | | | | | | | | | | | | | | | | | - Templatize node config - Templatize master config - Integrated sdn changes - Updates for openshift_facts - Added support for node, master and sdn related changes - registry_url - added identity provider facts - Removed openshift_sdn_* roles - Install httpd-tools if configuring htpasswd auth - Remove references to external_id - Setting external_id interferes with nodes associating with the generated node object when pre-registering nodes. - osc/oc and osadm/oadm binary detection in openshift_facts Misc Changes: - make non-errata puddle default for byo example - comment out master in list of nodes in inventory/byo/hosts - remove non-error errors from fluentd_* roles - Use admin kubeconfig instead of openshift-client
* Accomodate upstream configuration changeScott Dodson2015-06-101-4/+0
| | | | | | | | | | - Master config and certificates are now in /etc/openshift/master - Node config is now in /etc/openshift/node - Several certificates have been renamed to accomodate a flattening of structure to accomodate secret storage - Add openshift_data_dir to ensure etcd and volumes are stored in /var/lib/openshift - Add openshift_generated_configs_dir
* add use_fluentd to openshift_factsJason DeTiberus2015-06-061-1/+0
| | | | | - Move use_fluentd into openshift_facts proper - default use_fluentd to False unless deployment_type == origin
* * Make fluentd deployment optional with openshift_use_fluentdJhon Honce2015-06-011-0/+1
|
* Configuration updates for latest builds and major refactorJason DeTiberus2015-04-142-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Configuration updates for latest builds - Switch to using create-node-config - Switch sdn services to use etcd over SSL - This re-uses the client certificate deployed on each node - Additional node registration changes - Do not assume that metadata service is available in openshift_facts module - Call systemctl daemon-reload after installing openshift-master, openshift-sdn-master, openshift-node, openshift-sdn-node - Fix bug overriding openshift_hostname and openshift_public_hostname in byo playbooks - Start moving generated configs to /etc/openshift - Some custom module cleanup - Add known issue with ansible-1.9 to README_OSE.md - Update to genericize the kubernetes_register_node module - Default to use kubectl for commands - Allow for overriding kubectl_cmd - In openshift_register_node role, override kubectl_cmd to openshift_kube - Set default openshift_registry_url for enterprise when deployment_type is enterprise - Fix openshift_register_node for client config change - Ensure that master certs directory is created - Add roles and filter_plugin symlinks to playbooks/common/openshift-master and node - Allow non-root user with sudo nopasswd access - Updates for README_OSE.md - Update byo inventory for adding additional comments - Updates for node cert/config sync to work with non-root user using sudo - Move node config/certs to /etc/openshift/node - Don't use path for mktemp. addresses: https://github.com/openshift/openshift-ansible/issues/154 Create common playbooks - create common/openshift-master/config.yml - create common/openshift-node/config.yml - update playbooks to use new common playbooks - update launch playbooks to call update playbooks - fix openshift_registry and openshift_node_ip usage Set default deployment type to origin - openshift_repo updates for enabling origin deployments - also separate repo and gpgkey file structure - remove kubernetes repo since it isn't currently needed - full deployment type support for bin/cluster - honor OS_DEPLOYMENT_TYPE env variable - add --deployment-type option, which will override OS_DEPLOYMENT_TYPE if set - if neither OS_DEPLOYMENT_TYPE or --deployment-type is set, defaults to origin installs Additional changes: - Add separate config action to bin/cluster that runs ansible config but does not update packages - Some more duplication reduction in cluster playbooks. - Rename task files in playbooks dirs to have tasks in their name for clarity. - update aws/gce scripts to use a directory for inventory (otherwise when there are no hosts returned from dynamic inventory there is an error) libvirt refactor and update - add libvirt dynamic inventory - updates to use dynamic inventory for libvirt
* openshift_facts role/module refactor default settingsJason DeTiberus2015-04-036-34/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add openshift_facts role and module - Created new role openshift_facts that contains an openshift_facts module - Refactor openshift_* roles to use openshift_facts instead of relying on defaults - Refactor playbooks to use openshift_facts - Cleanup inventory group_vars - Update defaults - update openshift_master role firewall defaults - remove etcd peer port, since we will not be supporting clustered embedded etcd - remove 8444 since console now runs on the api port by default - add 8444 and 7001 to disabled services to ensure removal if updating - Add new role os_env_extras_node that is a subset of the docker role - previously, we were starting/enabling docker which was causing issues with some installations - Does not install or start docker, since the openshift-node role will handle that for us - Only adds root to the dockerroot group - Update playbooks to use ops_env_extras_node role instead of docker role - os_firewall bug fixes - ignore ip6tables for now, since we are not configuring any ipv6 rules - if installing package do a daemon-reload before starting/enabling service - Add aws support to bin/cluster - Add list action to bin/cluster - Add update action to bin/cluster - cleanup some stray debug statements - some variable renaming for clarity
* remove openshift_hostname_workaround var for openshift_common, rather rely ↵Jason DeTiberus2015-03-242-6/+0
| | | | on inventory/playbook variables for openshift_hostname
* node registration changesJason DeTiberus2015-03-242-2/+2
| | | | | | | | | | | | | | - Remove default value for openshift_hostname and make it required - Remove workarounds that are no longer needed - Remove resources parameter from openshift_register_node module - pre-create node certificates for each node before registering node - distribute created node certificates to each node - Move node registration logic to a new openshift_register_nodes role - This is because we now have to run the steps on a master as opposed to on the nodes like we were previously doing. - Rename openshift_register_node module to kubernetes_register_node, one more step to genericizing enough for upstreaming, however there are still plenty of openshift specific commands that still need to be genericized.
* add repos role to gce cluster launch so that we are applying ↵Jason DeTiberus2015-03-241-3/+0
| | | | os_update_latest after repo config
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-241-0/+3
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Move yum update * to new os_update_latest roleJason DeTiberus2015-03-241-3/+0
|
* Use ansible playbook to initialize openshift clusterJhon Honce2015-03-241-0/+3
| | | | | * Added playbooks/gce/openshift-cluster * Added bin/cluster (will replace cluster.sh)
* Merge pull request #117 from detiber/repoRenameThomas Wiest2015-03-242-0/+2
|\ | | | | Rename repos role to openshift_repos
| * Rename repos role to openshift_reposJason DeTiberus2015-03-182-0/+2
| | | | | | | | | | | | | | | | | | - Rename repos role to openshift_repos - Make openshift_repos a dependency of openshift_common - Add README and metadata for openshift_repos - Playbook updates for role rename - Verify libselinux-python is installed, otherwise some of the bulit-in modules we use fail
* | Fix hostname handlingJason DeTiberus2015-03-183-7/+3
|/ | | | | - always set hostname if hostname does not match openshift_hostname - Use local IP instead of public IP as hostname for workaround
* Merge pull request #100 from detiber/randomCleanupThomas Wiest2015-03-092-14/+18
|\ | | | | Random cleanup
| * Initial READMEs for openshift_{common, node, master}Jason DeTiberus2015-03-061-13/+17
| |
| * Fix license nameJason DeTiberus2015-03-061-1/+1
| |
* | start fixing os_firewall issuesJason DeTiberus2015-03-061-1/+1
| | | | | | | | | | - Fix missed references to old firewall scripts - Fix variable name references that didn't get updated
* | Do not set KUBECONFIG for root userJason DeTiberus2015-03-061-8/+0
|/ | | | | | | - instead of setting KUBECONFIG, copy the admin kubeconfig to /root/.kube/.kubeconfig in the openshift_master and openshift_node roles - pause for 30 seconds if the openshift-master service has changed state, since the file we are copying is generated by the master
* refactor firewall management into new roleJason DeTiberus2015-03-054-43/+15
| | | | | | | | | | | | | | | | | - Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld
* Merge pull request #91 from detiber/downWithJSONThomas Wiest2015-03-021-3/+9
|\ | | | | Prefer YAML style datastructures over JSON
| * Prefer YAML style datastructures over JSONJason DeTiberus2015-03-021-3/+9
| | | | | | | | - Switch JSON style datastructures to YAML for debuggability
* | Add openshift_hostname default variable to openshift_commonJason DeTiberus2015-03-021-0/+1
| | | | | | | | | | - for use anywhere the hostname is used that would be dependent on the openshift_hostname_workaround setting.
* | add openshift_hostname workaround varJason DeTiberus2015-03-022-0/+5
|/ | | | | - use openshift_bind_ip for hostname when openshift_hostname_workaround is true - defaults to true to maintain current behavior.
* move KUBECONFIG setting to openshift_commonJason DeTiberus2015-02-241-0/+8
|
* create openshift_common roleJason DeTiberus2015-02-247-0/+113
- move common openshift logic into openshift_common - set openshift_common as a dependency for openshift_node and openshift_master - rename role variables to openshift_* to be more descriptive - start recording local_facts on the openshift hosts - clean up firewalld config to be a bit more dry - Update firewall ports for https, make sure http rules are removed - Replace references to ansible_eth0.ipv4.address with ansible_default_ipv4.address
generated by cgit v1.2.1 (git 2.18.0) at 2024-05-19 08:24:32 +0000