summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/templates/master.yaml.v1.j2
Commit message (Collapse)AuthorAgeFilesLines
* Don't emit assetConfig on 3.9Scott Dodson2018-01-251-0/+3
|
* Remove oauth_template bits from openshift_factsMichael Gugino2017-12-211-2/+2
| | | | | This commit moves some deprecated variable logic outside of openshift_facts and into role defaults.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-181-11/+11
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Remove unneeded embedded etcd logicMichael Gugino2017-12-081-17/+1
| | | | | Removing some remaining embedded etcd facts except for the migration plays.
* Remove all references to pacemaker (pcs, pcsd) and ↵Andrew Butcher2017-12-051-1/+1
| | | | | | | openshift.master.cluster_method. With pacemaker removed there is no longer a need for openshift.master.cluster_method. We only have one option.
* Fix hosted varsMichael Gugino2017-12-051-1/+1
| | | | | | Remove hosted vars from openshift_facts. The current pattern is causing a bunch of undesired sideffects.
* Remove openshift_facts project_cfg_factsMichael Gugino2017-11-281-6/+6
| | | | This simplifies some variable logic.
* Remove dns_port factMichael Gugino2017-11-281-1/+1
| | | | Simply dns_port variable by remove from openshift_facts.
* Removed old version codeMichael Gugino2017-11-141-39/+1
| | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Regex anchors changed to match protocol start and ports.Kenny Woodson2017-11-131-2/+2
|
* Merge pull request #5264 from AlexanderZagaynov/cors_escapeOpenShift Merge Robot2017-11-011-2/+3
|\ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. escape corsAllowedOrigins regexp strings and anchor them `corsAllowedOrigins` parameter got interpreted by OpenShift/Kubernetes as a regular expression (there is a bug about that: https://bugzilla.redhat.com/show_bug.cgi?id=1482903). It leads to some vague behaviour, like for `127.0.0.1` value `127a0b0c1` will be matched as valid, as well as `localhost.example.com` for `localhost`. I've added regexp escaping here, as well as value anchoring to the begin and end of the string. I've also added case-insensitive flag `(?i)` to match values like `LocalHost` for `localhost`.
| * fix comment and make it visible to end-userAlexander Zagaynov2017-09-051-2/+3
| |
| * escape also custom_cors_originsAlexander Zagaynov2017-08-301-1/+1
| |
| * add comment on regexp specificsAlexander Zagaynov2017-08-301-1/+1
| |
| * escape corsAllowedOrigins regexp strings and anchor themAlexander Zagaynov2017-08-301-1/+1
| |
* | add new clusterNetworks fields to new installsJacob Tanenbaum2017-10-271-0/+5
| | | | | | | | | | add clusterNetworks field to the networkConfig so that the new fields appear in new installs when openshift version is greater then 3.7
* | Initial Kuryr supportMichał Dulko2017-10-201-1/+1
| | | | | | | | | | | | | | | | This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
* | Merge pull request #5687 from jim-minter/tsb_configOpenShift Merge Robot2017-10-171-7/+0
|\ \ | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Rewire openshift_template_service_broker_namespaces configurable @ewolinetz @bparees
| * | Rewire openshift_template_service_broker_namespaces configurableJim Minter2017-10-131-7/+0
| | |
* | | Add ability to set node and master imageConfig to latestMichael Gugino2017-10-121-1/+1
|/ / | | | | | | | | | | | | | | | | Currently, imageConfig.latest is hard-coded to false. This commit adds an appropriate boolean to enable setting to true. Fixes: https://github.com/openshift/openshift-ansible/issues/1422
* | Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher2017-10-091-4/+0
| |
* | Remove openshift-commonMichael Gugino2017-09-061-3/+3
|/ | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* Use the new election mode (client based) instead of direct etcd accessClayton Coleman2017-08-081-3/+2
|
* Add rate limit configurabilityScott Dodson2017-07-061-4/+4
|
* Adding option for serviceAccountConfig.limitSecretReferencesKenny Woodson2017-06-201-1/+1
|
* Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-0/+6
| | | | | This would be the case if for instance they'd upgraded and then migrated.
* Merge pull request #3982 from jim-minter/trello131-broker-configurationOpenShift Bot2017-05-221-0/+7
|\ | | | | Merged by openshift-bot
| * add template service broker configurableJim Minter2017-04-241-0/+7
| |
* | Fix auditConfig for non-HA environmentsRussell Teague2017-05-181-1/+1
|/ | | | Bug 1447019
* Allow overriding minTLSVersion and cipherSuitesMartin Eggen2017-03-091-0/+18
| | | | | Add parameters to allow overriding minTLSVersion and cipherSuites in master and node servingInfo config stanzas.
* Combined (squashed) commit for all changes related to adding Contiv support ↵Sanjeev Rampal2017-02-271-1/+1
| | | | into Openshift Ansible. This is the first (beta) release of Contiv with Openshift and is only supported for Openshift Origin + Bare metal deployments at the time of this commit. Please refer to the Openshift and Contiv official documentation for details of the level of support for different features and modes of operation.
* Ensure embedded etcd config uses CA bundle.Andrew Butcher2017-02-091-0/+12
|
* Restructure certificate redeploy playbooksAndrew Butcher2017-02-021-0/+8
|
* Set metrics url even if metrics_deploy is falseAlberto Peon2017-01-201-2/+2
|
* Support openshift_node_port_range for configuring service NodePortsClayton Coleman2017-01-101-1/+1
| | | | | | | | | Sets the appropriate config field if openshift_node_port_range is set and also configures filewalls on each node. firewalld already supports port ranges like "30000-32000", while iptables needs that value converted to the correct "30000:32000" form for use with `--dport`. If not set, no node ports are opened.
* Fix metricsPublicURL only being set correctly on first master.Devan Goodwin2016-12-011-3/+3
| | | | | | | | | | | | | Problem was caused by facts not being set for that master. To fix this patch cleans up the calculation of metricsPublicURL in general. Because this value is used in openshift_master to template into the master config file, we now define these facts more clearly in openshift_master_facts, and add a dependency on this to openshift_metrics. The calculation of default sub-domain is also changed to remove it from system facts (as neither of these are facts about the system) and instead use plain variables.
* Merge kube_admission_plugin_config with admission_plugin_configSamuel Munilla2016-11-221-10/+0
| | | | | | | | Move the values in kube_admission_plugin_config up one level per the new format from 1.3: "The kubernetesMasterConfig.admissionConfig.pluginConfig should be moved and merged into admissionConfig.pluginConfig."
* Merge pull request #2636 from enlinxu/masterAndrew Butcher2016-11-161-0/+1
|\ | | | | Support 3rd party scheduler
| * support 3rd party schedulerenlinxu2016-10-201-0/+1
| |
* | Change to allow cni deployments without openshift SDNyfauser2016-11-081-1/+1
|/ | | | | | | The roles/openshift_facts main task did not pass the cni plugin variable to the later role playbooks. The master.yaml and node.yaml templates did not allow for a cni configuration without either installing openshift sdn or nuage. This change will allow to use os_sdn_network_plugin_name=cni and set openshift_use_openshift_sdn=false for deployments that use a cni plugin that doesn't need and want openshift sdn to be installed
* Check if openshift_master_ingress_ip_network_cidr is definedMathias Merscher2016-10-041-1/+1
| | | | Signed-off-by: Mathias Merscher <Mathias.Merscher@dg-i.net>
* allow networkConfig.ingressIPNetworkCIDRs to be configuredMathias Merscher2016-10-041-0/+3
| | | | Signed-off-by: Mathias Merscher <Mathias.Merscher@dg-i.net>
* Merge pull request #2358 from abutcher/service-serving-certsAndrew Butcher2016-08-251-0/+7
|\ | | | | enable service-serving-cert-signer by default
| * enable service-serving-cert-signer by defaultAndrew Butcher2016-08-241-0/+7
| |
* | Merge pull request #2100 from smunilla/BZ1337553Scott Dodson2016-08-241-0/+1
|\ \ | |/ |/| Add externalIPNetworkCIDRs to config
| * Add externalIPNetworkCIDRs to configSamuel Munilla2016-08-231-0/+1
| | | | | | | | | | Allow networkConfig.externalIPNetworkCIDRs to be set along with a default to emulate the old 3.1 behavior.
* | Correct masterCA config typo.Andrew Butcher2016-08-241-2/+2
|/
* qps typodeads2k2016-08-111-2/+2
|
* Merge pull request #2211 from dgoodwin/33-upgrade-playbookScott Dodson2016-08-081-0/+14
|\ | | | | 1.3 / 3.3 Upgrades
| * Add 3.3 protobuf config stanzas for master/node config.Devan Goodwin2016-07-281-0/+14
| |