summaryrefslogtreecommitdiffstats
path: root/roles/openshift_hosted
Commit message (Collapse)AuthorAgeFilesLines
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-202-4/+4
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-183-6/+6
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Remove empty openshift_hosted_facts roleMichael Gugino2017-12-122-5/+4
| | | | This commit removes a now-empty role.
* Fix openshift hosted registry rolloutRussell Teague2017-12-111-1/+1
|
* Merge pull request #6385 from mjudeikis/hosted-template-varScott Dodson2017-12-074-0/+44
|\ | | | | add 3.8 templates for gluster ep and svc
| * add 3.8 templates for gluster ep and svcLuke Meyer2017-12-072-0/+22
| |
| * add 3.8 templates for gluster ep and svcMangirdas2017-12-072-0/+22
| |
* | Include Deprecation: Convert to include_tasksRussell Teague2017-12-064-15/+11
|/
* Fix hosted varsMichael Gugino2017-12-0513-45/+43
| | | | | | Remove hosted vars from openshift_facts. The current pattern is causing a bunch of undesired sideffects.
* Implement container runtime roleMichael Gugino2017-12-011-1/+1
|
* Merge pull request #5723 from mjudeikis/gluster-registry-backendScott Dodson2017-11-299-5/+100
|\ | | | | Add external glusterfs backend to hosted and glusterfs playbook
| * Add support for external glusterfs as registry backendMangirdas2017-11-219-5/+100
| |
* | dist.iteritems() no longer exists in Python 3.Jan Pazdziora2017-11-271-1/+1
| |
* | Merge pull request #6090 from dustymabe/dustyMichael Gugino2017-11-221-9/+2
|\ \ | |/ |/| hosted_registry: clean up tmp mount point and fstab
| * hosted_registry: clean up tmp mount point and fstabDusty Mabe2017-11-101-9/+2
| | | | | | | | Fixes #6004
* | Removed old version codeMichael Gugino2017-11-141-1/+1
|/ | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Merge pull request #5571 from vshn/registryip1OpenShift Merge Robot2017-11-093-0/+3
|\ | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow cluster IP for docker-registry service to be set For historical reasons a small set of programs in our environments rely on the cluster-internal Docker registry having the IP address "172.30.1.1". So far we always had to patch in that address manually. Adding a variable on the "openshift_hosted" role allows the IP address to be set correctly when a cluster is installed.
| * Allow cluster IP for docker-registry service to be setMichael Hanselmann2017-10-193-0/+3
| | | | | | | | | | | | | | | | For historical reasons a small set of programs in our environments rely on the cluster-internal Docker registry having the IP address "172.30.1.1". So far we always had to patch in that address manually. Adding a variable on the "openshift_hosted" role allows the IP address to be set correctly when a cluster is installed.
* | [Bug 1509354] Check if routers have certificates and use themKenny Woodson2017-11-071-3/+6
| |
* | Remove unused registry_volume_claim variableMichael Hanselmann2017-10-191-1/+0
|/ | | | | | The "registry_volume_claim" variable has not been used since at least commit 7cf5cc1 (February 21, 2017) and this commit removes the last mention.
* Merge pull request #5368 from jianlinliu/bz1490738Scott Dodson2017-10-091-2/+2
|\ | | | | Update registry_config.j2 to fix BZ#1490738
| * Update registry_config.j2Jianlin Liu2017-09-121-1/+1
| | | | | | setting openshift_hosted_registry_storage_gcs_rootdirectory default value
| * Update registry_config.j2Jianlin Liu2017-09-121-1/+1
| |
* | Include openshift_hosted when redeploying router certificates to handle ↵Andrew Butcher2017-09-291-3/+3
| | | | | | | | auto-generated wildcard certificate or custom openshift_hosted_router_certificate.
* | Rename filter_plugins to unique namesRussell Teague2017-09-271-0/+0
| | | | | | | | | | Filter plugin modules should have unique names to not conflict with core Ansible modules. (Ansible 2.4)
* | Refactor openshift_hosted plays and roleMichael Gugino2017-09-2518-172/+155
| | | | | | | | | | | | | | | | | | | | | | | | Currently, openshift_hosted role duplicates some logic across separate task chains. This commit cleans up the openshift_hosted role and converts it to be primarily used with include_role to give better logic to the playbooks that utilize this role. This commit also refactors the playbook that calls various openshift_hosted roles into individual playbooks. This allows more granularity for advanced users.
* | Merge pull request #5156 from mangirdaz/5155-hotfixOpenShift Merge Robot2017-09-181-1/+1
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue hot fix for env variable resolve If we use environment variables in our inventory files (and from what I seen we do this everywhere where We deploy OCP) our fact engine ignores env variables so if my path looks like ``` openshift_hosted_registry_routecertificates={"certfile": "{{inventory_dir}}/../files/certs/wildcard.registry.company.local.crt", "keyfile": "{{inventory_dir}}/../files/certs/wildcard.registry.companylocal.key", "cafile":"{{inventory_dir}}/../files/certs/CompanyLocalRootCA.crt"} openshift_hosted_registry_routehost=containers.registry.comany.local ``` the result is: `/../files/certs/RoSLocalRootCA.crt` We need to fix our fact set in a long run to read Ansible variables. And it was done in the same way with router certificates already.
| * | hot fix for env variable resolveMangirdas2017-08-221-1/+1
| | |
* | | Correct logic for openshift_hosted_*_waitRussell Teague2017-09-123-4/+4
| | |
* | | Workaround Ansible Jinja2 delimiter warningRussell Teague2017-09-122-2/+2
| |/ |/| | | | | | | | | | | This workaround prevents the warnings on using Jinja2 templating delimiters in `when:` conditions in cases where a variable is used as the conditional. This has been fixed in Ansible 2.4. https://github.com/ansible/ansible/pull/25092
* | Merge pull request #5208 from mgugino-upstream-stage/remove-openshift_commonOpenShift Bot2017-09-072-1/+6
|\ \ | | | | | | Merged by openshift-bot
| * | Remove openshift-commonMichael Gugino2017-09-062-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* | | Merge pull request #5162 from aerialls/patch-2OpenShift Bot2017-09-071-9/+9
|\ \ \ | | | | | | | | Merged by openshift-bot
| * | | reverse order between router cert generationJulien Brochet2017-08-231-9/+9
| | | |
| * | | ensured to always use a certificate for the routerJulien Brochet2017-08-221-1/+1
| | |/ | |/|
* | | Merge pull request #5148 from kwoodson/registry_proxy_updatesOpenShift Bot2017-09-061-0/+8
|\ \ \ | |_|/ |/| | Merged by openshift-bot
| * | Adding proxy env vars for dc/docker-registryKenny Woodson2017-08-211-0/+8
| | |
* | | Merging openshift_node with openshift bootstrap.Kenny Woodson2017-08-291-2/+2
| | |
* | | Default to global setting for firewall.Kenny Woodson2017-08-251-4/+4
| | |
* | | Merge pull request #5178 from sdodson/fix-registry-certScott Dodson2017-08-251-0/+3
|\ \ \ | | | | | | | | Add missing hostnames to registry cert
| * | | Add missing hostnames to registry certScott Dodson2017-08-231-0/+3
| | | |
* | | | Merge pull request #5011 from kwoodson/provisionScott Dodson2017-08-233-59/+66
|\ \ \ \ | |/ / / |/| | | AWS Provisioning with scale groups.
| * | | First attempt at provisioning.Kenny Woodson2017-08-213-59/+66
| |/ /
* | | Merge pull request #5120 from smarterclayton/allow_gcs_registryScott Dodson2017-08-234-12/+15
|\ \ \ | |_|/ |/| | Allow GCS object storage to be configured
| * | Allow GCS object storage to be configuredClayton Coleman2017-08-174-12/+15
| |/ | | | | | | | | | | Previously, setting the GCS registry object storage settings resulted in an invalid configuration. This generates a registry-config secret that has the correct file if the GCS config is set.
* | Merge pull request #4254 from dmsimard/registry_certsScott Dodson2017-08-214-49/+138
|\ \ | |/ |/| Refactor openshift_hosted's docker-registry route setup
| * Refactor openshift_hosted's docker-registry route setupDavid Moreau-Simard2017-07-234-49/+138
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We have identified an issue where a docker-registry service set up as 'reencrypt' with a provided certificate and a self-signed certificate on the pod does not authorize users to push images. If the docker-registry service is set up as 'passthrough' with the same provided certificate, everything works. In light of this, this commit essentially adds support for configuring provided certificates with a passthrough route while maintaining backwards compatibility with the other use cases. The default remains 'passthrough' with self-generated certificates. Other miscellaneous changes include: - Move fact setup that were only used in secure.yml there - Omit the hostname for the route if there are none to configure, oc_route takes care of handling the default - Replace hardcoded /etc/origin/master by openshift_master_config_dir
* | Updated README to reflect refactor. Moved firewall initialize into separate ↵Kenny Woodson2017-08-103-4/+10
| | | | | | | | file.
* | Adding a default condition and removing unneeded defaults.Kenny Woodson2017-08-092-8/+8
| |
* | First attempt at refactor of os_firewallKenny Woodson2017-08-086-10/+96
| |
generated by cgit v1.2.1 (git 2.18.0) at 2024-05-18 06:40:45 +0000