summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/defaults/main.yml
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #6586 from ↵OpenShift Merge Robot2018-01-031-2/+2
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/cast-bool-openshift_docker_use_system_container Automatic merge from submit-queue. Cast openshift_docker_use_system_container to bool openshift_docker_use_system_container might be passed in via ini inventory as 'openshift_docker_use_system_container=false' This condition will be interpreted as a string type, instead of boolean. Casting openshift_docker_use_system_container as bool will achieve the users desired intent. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1528943
| * Cast openshift_docker_use_system_container to boolMichael Gugino2018-01-021-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | openshift_docker_use_system_container might be passed in via ini inventory as 'openshift_docker_use_system_container=false' This condition will be interpreted as a string type, instead of boolean. Casting openshift_docker_use_system_container as bool will achieve the users desired intent. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1528943
* | Remove oauth_template bits from openshift_factsMichael Gugino2017-12-211-0/+9
|/ | | | | This commit moves some deprecated variable logic outside of openshift_facts and into role defaults.
* Remove some small items from openshift_factsMichael Gugino2017-12-181-0/+6
| | | | | Remove some small items from openshift_facts that don't need to be there.
* Combine openshift_master/vars with defaultsMichael Gugino2017-12-131-0/+42
| | | | | | | | | This commit combines these two sources of variables. Prior to the current release, some plays external to the openshift_master role consumed these variables using relative imports. This is no longer the case, so we can safely combine the vars into defaults.
* Implement container runtime roleMichael Gugino2017-12-011-0/+2
|
* Remove openshift_facts project_cfg_factsMichael Gugino2017-11-281-0/+6
| | | | This simplifies some variable logic.
* Remove dns_port factMichael Gugino2017-11-281-2/+4
| | | | Simply dns_port variable by remove from openshift_facts.
* Simplify is_master_system_container logicMichael Gugino2017-11-271-0/+2
| | | | Simplify the variable is_master_system_container
* Fix system_images_registry variableMichael Gugino2017-11-221-0/+6
| | | | Simplify the logic for this variable.
* Merge pull request #6084 from mgugino-upstream-stage/combine-master-upgradeOpenShift Merge Robot2017-11-151-0/+3
|\ | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Combine master upgrade play with role Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
| * Combine master upgrade play with roleMichael Gugino2017-11-091-0/+3
| | | | | | | | | | | | | | | | | | Currently, there are plays importing tasks directly from openshift_master role. This has caused numerous bugs and code duplicaiton in the past. This commit combines the upgrade into openshift_master role utilizing include_role syntax.
* | Alternative method to create docker registry auth credsMichael Gugino2017-11-141-0/+1
|/ | | | | | | | | | | | | | | Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
* Bootstrap enhancements.Kenny Woodson2017-11-081-81/+3
|
* MTU for bootstrapping should default to openshift_node_sdn_mtuClayton Coleman2017-10-311-2/+2
| | | | The default value needs to be consistently used.
* Merge pull request #5936 from sdodson/arbitrary-fw-rulesOpenShift Merge Robot2017-10-311-1/+3
|\ | | | | | | | | Automatic merge from submit-queue. Add arbitrary firewall port config to master too
| * Add arbitrary firewall port config to master tooScott Dodson2017-10-301-1/+3
| |
* | Use openshift.node.registry_url instead of oreg_urlClayton Coleman2017-10-301-1/+1
|/ | | | Consistent with other use
* Initial Kuryr supportMichał Dulko2017-10-201-0/+3
| | | | | | | | This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
* Do not remove files for bootstrap if resolv or dns.Kenny Woodson2017-10-171-0/+85
|
* Add ability to set node and master imageConfig to latestMichael Gugino2017-10-121-0/+3
| | | | | | | | | Currently, imageConfig.latest is hard-coded to false. This commit adds an appropriate boolean to enable setting to true. Fixes: https://github.com/openshift/openshift-ansible/issues/1422
* Fix broken debug_levelMichael Gugino2017-10-111-0/+8
| | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* Remove default value for oreg_urlMichael Gugino2017-09-201-2/+2
| | | | | | | | | | | Due to some plays importing variables from roles directly, oreg_url was being set to a default value when it otherwise shouldn't be. This commit removes the default values for oreg_url to ensure existing logic works as desired. Fixes: https://github.com/openshift/openshift-ansible/issues/5455
* Fix: authenticated registry support for containerized hostsMichael Gugino2017-09-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* Remove openshift-commonMichael Gugino2017-09-061-1/+20
| | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* Add independent registry auth supportMichael Gugino2017-08-281-0/+5
| | | | | | | | | | | | | | | | | Added the ability to support authentication for independent / 3rd party registries. This commit will allow users to provide a `oreg_auth_user` and `oreg_auth_password` to dynmically generate a docker config.json file. The docker config.json file can be used by openshift to authenticate to independent / 3rd party registries. `oreg_host` must supply endpoint connection info in the form of 'hostname.com:port', with (optional) port 443 default. To update the config.json on a later run, the user can specify `oreg_auth_credentials_replace=False` to update the credentials. These settings must be used in tandem with `oreg_url` Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* Default to global setting for firewall.Kenny Woodson2017-08-251-2/+2
|
* Updated README to reflect refactor. Moved firewall initialize into separate ↵Kenny Woodson2017-08-101-0/+3
| | | | file.
* Adding a default condition and removing unneeded defaults.Kenny Woodson2017-08-091-4/+0
|
* First attempt at refactor of os_firewallKenny Woodson2017-08-081-0/+18
|
* Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-0/+1
| | | | | This would be the case if for instance they'd upgraded and then migrated.
* etcd v3 for clean installsScott Dodson2017-06-161-2/+1
| | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* Work towards determining openshift_version when unspecified.Devan Goodwin2016-05-251-1/+1
| | | | | | | openshift_docker role was largely useless now, but also almost did what we needed. (deps ordering still needs to be changed) Remove defaulting of openshift_version.
* Fix firewall rulesScott Dodson2016-05-111-36/+0
|
* Open port 53 whenever we're unsure of versionScott Dodson2016-05-061-0/+8
|
* Add openshift_node_dnsmasqScott Dodson2016-04-191-4/+4
|
* The openshift_docker role must set the version facts for containerized installsBrenton Leanhardt2016-04-141-1/+1
| | | | | | QE found that for fresh installs we were basing the docker version facts of the images that could be pulled prior to configuring /etc/sysconfig/docker. This is an edge case but something we need to fix.
* Bug 1322788 - The IMAGE_VERSION wasn't added to atomic-openshift-master-api ↵Brenton Leanhardt2016-04-011-0/+2
| | | | and atomic-openshift-master-controllers
* Controllers_port and firewall rulesDiego Castro2016-01-121-3/+3
|
* Atomic Enterprise related changes.Avesh Agarwal2015-08-261-5/+5
|
* Initial HA masterJason DeTiberus2015-07-171-0/+6
| | | | | | | | | | | | | | | | | | | | | | - Ability to specify multiple masters - configures the CA only a single time on the first master - creates and distributes additional certs for additional master hosts - Depending on the status of openshift_master_cluster_defer_ha (defaults to False) one of two actions are taken when multiple masters are defined 1. If openshift_master_cluster_defer_ha is true a. Certs/configs for all masters are deployed b. openshift-master service is only started and enabled on the master c. HA configuration is expected to be handled by the user manually after the completion of the playbook run. 2. If oepnshift_master_cluster_defer_ha is false or undefined a. Certs/configs for all masters are deployed b. a Pacemaker/RHEL HA cluster is configured i. VIPs are configured based on the values of openshift_master_cluster_vip and openshift_master_cluster_plublic_vip ii. The openshift-master service is configured as an active/passive cluster service
* Install fluentd on nodes and masterJhon Honce2015-05-291-0/+4
| | | | * Configure fluentd to aggragate container logs
* openshift_master open port for skydns serviceJason DeTiberus2015-05-201-1/+4
|
* openshift_facts role/module refactor default settingsJason DeTiberus2015-04-031-6/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add openshift_facts role and module - Created new role openshift_facts that contains an openshift_facts module - Refactor openshift_* roles to use openshift_facts instead of relying on defaults - Refactor playbooks to use openshift_facts - Cleanup inventory group_vars - Update defaults - update openshift_master role firewall defaults - remove etcd peer port, since we will not be supporting clustered embedded etcd - remove 8444 since console now runs on the api port by default - add 8444 and 7001 to disabled services to ensure removal if updating - Add new role os_env_extras_node that is a subset of the docker role - previously, we were starting/enabling docker which was causing issues with some installations - Does not install or start docker, since the openshift-node role will handle that for us - Only adds root to the dockerroot group - Update playbooks to use ops_env_extras_node role instead of docker role - os_firewall bug fixes - ignore ip6tables for now, since we are not configuring any ipv6 rules - if installing package do a daemon-reload before starting/enabling service - Add aws support to bin/cluster - Add list action to bin/cluster - Add update action to bin/cluster - cleanup some stray debug statements - some variable renaming for clarity
* start fixing os_firewall issuesJason DeTiberus2015-03-061-0/+12
| | | | | - Fix missed references to old firewall scripts - Fix variable name references that didn't get updated
* Provide default value for openshift_node_ipsJason DeTiberus2015-03-061-0/+1
| | | | | | | | | | | | | | | | | - openshift_node_ips now defaults to [] - Previously an empty --nodes in /etc/sysconfig/master would result in the master creating a node for the localhost. The latest Origin and OSE builds now only create the implicit localhost node if run as openshift, not openshift-master. We can now safely default to setting no nodes in /etc/sysconfig/master and having nodes register themselves with the master when they come up via the 'Register node (if not already registered)' task in roles/openshift_node/tasks/main.yml) - This had an associated change for the byo scripts that had not been merged into master yet, but this PR changes the behavior of the openshift_master role to not fail if openshift_node_ips is not set. This also prevents having the openshift_master service restarted when a node is added.
* create openshift_common roleJason DeTiberus2015-02-241-1/+2
| | | | | | | | | | | - move common openshift logic into openshift_common - set openshift_common as a dependency for openshift_node and openshift_master - rename role variables to openshift_* to be more descriptive - start recording local_facts on the openshift hosts - clean up firewalld config to be a bit more dry - Update firewall ports for https, make sure http rules are removed - Replace references to ansible_eth0.ipv4.address with ansible_default_ipv4.address
* Finish origin -> openshift renameJhon Honce2014-10-021-0/+2
generated by cgit v1.2.1 (git 2.18.0) at 2024-04-29 16:38:18 +0000