summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/tasks
Commit message (Collapse)AuthorAgeFilesLines
...
* | Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-20/+0
|/ | | | | This would be the case if for instance they'd upgraded and then migrated.
* etcd v3 for clean installsScott Dodson2017-06-161-0/+20
| | | | | If we have no master config assume that we're a clean install. If we're a clean install and we're 3.6 or greater use etcd v3 storage.
* Add daemon_reload parameter to service tasksTim Bielawa2017-06-011-0/+1
| | | | | | | Fixes "Could not find the requested service atomic-openshift-master: cannot enable" error during reinstall. https://bugzilla.redhat.com/show_bug.cgi?id=1451693
* Fix templating of static service filesRussell Teague2017-05-122-1/+2
|
* Add service file templates for master and nodeSteve Milner2017-05-091-0/+9
| | | | | | | Adds service file templates for both maste and node. These will lay down in /etc/system/systemd to override what may already be present from a package. These instances take into account the name of the container daemon (docker or container-engine).
* Stop logging AWS credentials in master role.Devan Goodwin2017-05-031-0/+1
| | | | | | | Using lineinfile and with_items, the items end up logged and in this case include AWS credentials. Simple us of no_log to hide them.
* Don't double quote when conditionsScott Dodson2017-05-011-1/+1
|
* Use meta/main.yml for role dependenciesRussell Teague2017-03-271-4/+0
|
* Force to use TLSv1.2 (related to ↵Olivier Buisson2017-03-131-1/+1
| | | | https://github.com/openshift/openshift-ansible/pull/2707)
* master: use the new oc_atomic_container moduleGiuseppe Scrivano2017-02-281-56/+23
| | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* master, vars/main.yml: define l_is_ha and l_is_same_versionGiuseppe Scrivano2017-02-141-12/+12
| | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* master: support HA deployments with system containersGiuseppe Scrivano2017-02-102-2/+47
| | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* system-containers: implement idempotent updateGiuseppe Scrivano2017-02-101-2/+21
| | | | | | | | Upstream version has "atomic containers update ..." but the RHEL version is still using "atomic update --container" so stick with this for now. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* atomic-openshift: install as a system containerGiuseppe Scrivano2017-02-103-3/+24
| | | | | | | | | | | | | | | Use use_system_containers=true in the inventory file alternatively you can select each component as: use_openvswitch_system_container=true use_node_system_container=true use_master_system_container=true system_images_registry holds the registry from where to fetch system containers. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* YAML LintingRussell Teague2016-12-121-0/+1
| | | | | * Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
* Pre-pull master/node/ovs images during upgrade.Devan Goodwin2016-12-072-7/+8
| | | | | | | | We did this for install but not upgrade, leading to situations where the service restarts after upgrade could take much longer than expected as docker pulls down the new image. Now the images are present when we restart services and should allow them to come back online much more quickly, equivalent to rpm service restarts.
* Refactored to use Ansible systemd moduleRussell Teague2016-11-281-28/+36
| | | | | | * Ansible systemd module used in place of service module * Refactored command tasks which are no longer necessary * Applying rules from openshift-ansible Best Practices Guide
* Refactor to use Ansible package moduleRussell Teague2016-11-171-3/+5
| | | | | The Ansible package module will call the correct package manager for the underlying OS.
* Prevent useless master by reworking template for master service enf fileJawed khelil2016-11-021-16/+8
|
* Switch from "oadm" to "oc adm" and fix bug in binary sync.Devan Goodwin2016-10-191-1/+1
| | | | | | | | Found bug syncing binaries to containerized hosts where if a symlink was pre-existing, but pointing to the wrong destination, it would not be corrected. Switched to using oc adm instead of oadm.
* Apply same pattern to HA master servicesScott Dodson2016-10-101-0/+12
|
* Retry failed master startup onceDan Mace2016-10-071-0/+11
| | | | | | | | | | | | | Master startup can fail when ec2 transparently reallocates the block storage, causing etcd writes to temporarily fail. Retry failures blindly just once to allow time for this transient condition to to resolve and for systemd to restart the master (which will eventually succeed). https://github.com/coreos/etcd/issues/3864 https://github.com/openshift/origin/issues/6065 https://github.com/openshift/origin/issues/6447
* tweak logicJason DeTiberus2016-09-261-1/+1
|
* test fix for systemd changesScott Dodson2016-09-261-1/+2
|
* Fix master service status changed fact.Andrew Butcher2016-09-211-1/+5
|
* Preserve AWS options in sysconfig files.Devan Goodwin2016-08-261-1/+46
| | | | | | | | | | These could exist from 3.1 releases or manual edits, and were getting wiped out in all variants of the master sysconfig files as we template these. This change uses the established pattern of grepping them out if they're there, then reapplying them if the user has not configured the cloudprovider framework already.
* Support for redeploying certificates.Andrew Butcher2016-08-111-34/+0
|
* Merge pull request #2211 from dgoodwin/33-upgrade-playbookScott Dodson2016-08-081-4/+4
|\ | | | | 1.3 / 3.3 Upgrades
| * Introduce 1.3/3.3 upgrade path.Devan Goodwin2016-07-251-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactored the 3.2 upgrade common files out to a path that does not indicate they are strictly for 3.2. 3.3 upgrade then becomes a relatively small copy of the byo entry point, all calling the same code as 3.2 upgrade. Thus far there are no known 3.3 specific upgrade tasks. In future we will likely want to allow hooks out to version specific pre/upgrade/post tasks. Also fixes a bug where the handlers were not restarting nodes/openvswitch containers doing upgrades, due to a change in Ansible 2+.
* | Add options for specifying named ca certificates to be added to the ↵Andrew Butcher2016-08-011-1/+6
| | | | | | | | openshift ca bundle.
* | Stagger the start of master services.Andrew Butcher2016-07-241-5/+38
| |
* | Merge pull request #1990 from abutcher/openshift-certificatesScott Dodson2016-07-211-0/+1
|\ \ | |/ |/| Refactor openshift certificates roles.
| * Refactor openshift certificates roles.Andrew Butcher2016-07-201-0/+1
| |
* | Stop reporting changes when docker pull is already up to date.Devan Goodwin2016-07-201-0/+2
|/
* Always populate openshift_image_tag and openshift_pkg_version.Devan Goodwin2016-06-151-3/+2
| | | | | Allows the use of arbitrary tags, precise control over containers and rpms, and likely mixed environments.
* Merge branch 'master' into upgrade33Devan Goodwin2016-06-101-1/+1
|\
| * Merge pull request #2005 from brenton/bz1338726Brenton Leanhardt2016-06-091-1/+1
| |\ | | | | | | Bug 1338726 - never abort install if the latest version of docker is already installed
| | * Restore mistakenly reverted code.Devan Goodwin2016-06-091-2/+7
| | |
| | * Merge branch 'docker1.10' of https://github.com/dgoodwin/openshift-ansibleBrenton Leanhardt2016-06-071-8/+3
| | |\
| | | * Fix Docker 1.10 problems with empty tags and trailing :Devan Goodwin2016-06-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Docker 1.10 is no longer tolerant of commands like "docker pull myimage:" when we do not have an image tag in play. Adjust all occurrences with one that only includes the : if a version is defined. Adjust the containerized CLI wrappers for a similar problem.
| | | * Docker 1.10 UpgradeDevan Goodwin2016-06-031-7/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds a separate playbook for Docker 1.10 upgrade that can be run standalone on a pre-existing 3.2 cluster. The upgrade will take each node out of rotation, and remove *all* containers and images on it, as this is reportedly faster and more storage efficient than performing the in place 1.10 upgrade. This process is integrated into the 3.1 to 3.2 upgrade process. Normal config playbooks now become 3.2 only, and require Docker 1.10. Users of older environments will have to use an appropriate openshift-ansible version. Config playbooks no longer are in the business of upgrading or downgrading docker.
* | | | Merge remote-tracking branch 'upstream/master' into upgrade33Devan Goodwin2016-06-092-1/+55
|\ \ \ \ | |/ / /
| * | | Preserve proxy config if it's undefinedScott Dodson2016-06-071-0/+43
| | | |
| * | | At least backup thingsScott Dodson2016-06-071-0/+3
| |/ /
| * | Merge pull request #1973 from ibotty/preserve_htpasswdScott Dodson2016-06-061-1/+9
| |\ \ | | |/ | |/| Add flag to manage htpasswd, or not.
| | * ensure htpasswd file existsTobias Florek2016-06-061-1/+9
| | | | | | | | | | | | Also move file mode to the file-exists check to not specify twice.
| | * Add flag to manage htpasswd, or not.Tobias Florek2016-06-021-1/+1
| | | | | | | | | | | | | | | Setting `openshift_master_manage_htpasswd` falsy will disable managing the htpasswd file. It won't get overwritten/generated.
| * | Fix error with stopping services that may not exist.Devan Goodwin2016-06-021-2/+7
| |/ | | | | | | | | | | Causes a hard failure due to missing etcd/atomic-openshift-master services. Instead, check that the services exist before ensuring they're stopped/disabled.
* | Fix error restarting master service that may not be there.Devan Goodwin2016-05-301-2/+7
| |
* | Complete installation of first master containerized.Devan Goodwin2016-05-251-2/+1
| |