summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/tasks/registry_auth.yml
Commit message (Collapse)AuthorAgeFilesLines
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-201-1/+1
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Fix incorrect register name master registry authMichael Gugino2017-12-071-1/+1
| | | | | | Corrects register variable name to registry auth support. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
* Fix oreg_auth_credentials_create register varMichael Gugino2017-12-051-2/+6
| | | | | | | | | | | | There is a variable collision for the *oreg_auth_credentials_create variables in openshift_master and openshift_node registry_create tasks. This commit ensures standard and alternative oreg auth credential placement tasks don't use the same register variable. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1520866
* Alternative method to create docker registry auth credsMichael Gugino2017-11-141-0/+20
| | | | | | | | | | | | | | | Currently, the command 'docker login' is run when using oreg with authentication. On some hosts, such as hosts configured to use system containers, the docker service is not running. 'docker login' will fail without the docker service running. This commit adds a module to idempotently add credentials to the registry credentials file without the use of 'docker login' Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1511374
* Add retry logic to docker auth credentialsMichael Gugino2017-10-301-0/+3
| | | | | | This commit enables retry on docker login commands. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1506931
* Fix broken debug_levelMichael Gugino2017-10-111-10/+0
| | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* Fix registry_auth logic for upgradesMichael Gugino2017-09-221-11/+19
| | | | | | | | | | | | | | | Currently, the logic for registry authentication is not implemented correctly to account for upgrades of containerized hosts. Additionally, the logic to account for multiple runs of openshift-ansible might cause registry authentication credentials to not be mounted inside of containerized hosts. This commit adds the necessary logic to ensure containerized hosts retain registry credentials. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1494470
* Fix: authenticated registry support for containerized hostsMichael Gugino2017-09-111-0/+27
Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341