summaryrefslogtreecommitdiffstats
path: root/roles/openshift_master/templates
Commit message (Collapse)AuthorAgeFilesLines
* Don't emit assetConfig on 3.9Scott Dodson2018-01-251-0/+3
|
* Remove oauth_template bits from openshift_factsMichael Gugino2017-12-211-2/+2
| | | | | This commit moves some deprecated variable logic outside of openshift_facts and into role defaults.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-203-3/+3
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Merge pull request #6469 from mgugino-upstream-stage/plugin-consolidateScott Dodson2017-12-191-11/+11
|\ | | | | Plugin consolidate
| * Relocate filter plugins to lib_utilsMichael Gugino2017-12-181-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* | Remove some small items from openshift_factsMichael Gugino2017-12-182-2/+2
|/ | | | | Remove some small items from openshift_facts that don't need to be there.
* Remove unneeded embedded etcd logicMichael Gugino2017-12-081-17/+1
| | | | | Removing some remaining embedded etcd facts except for the migration plays.
* Remove openshift.common.service_typeMichael Gugino2017-12-074-23/+23
| | | | | | | | This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
* Remove all references to pacemaker (pcs, pcsd) and ↵Andrew Butcher2017-12-051-1/+1
| | | | | | | openshift.master.cluster_method. With pacemaker removed there is no longer a need for openshift.master.cluster_method. We only have one option.
* Fix hosted varsMichael Gugino2017-12-051-1/+1
| | | | | | Remove hosted vars from openshift_facts. The current pattern is causing a bunch of undesired sideffects.
* Implement container runtime roleMichael Gugino2017-12-012-8/+8
|
* Remove openshift_facts project_cfg_factsMichael Gugino2017-11-281-6/+6
| | | | This simplifies some variable logic.
* Remove dns_port factMichael Gugino2017-11-281-1/+1
| | | | Simply dns_port variable by remove from openshift_facts.
* dist.iteritems() no longer exists in Python 3.Jan Pazdziora2017-11-271-1/+1
|
* Removed old version codeMichael Gugino2017-11-142-43/+1
| | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Regex anchors changed to match protocol start and ports.Kenny Woodson2017-11-131-2/+2
|
* Merge pull request #5264 from AlexanderZagaynov/cors_escapeOpenShift Merge Robot2017-11-011-2/+3
|\ | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. escape corsAllowedOrigins regexp strings and anchor them `corsAllowedOrigins` parameter got interpreted by OpenShift/Kubernetes as a regular expression (there is a bug about that: https://bugzilla.redhat.com/show_bug.cgi?id=1482903). It leads to some vague behaviour, like for `127.0.0.1` value `127a0b0c1` will be matched as valid, as well as `localhost.example.com` for `localhost`. I've added regexp escaping here, as well as value anchoring to the begin and end of the string. I've also added case-insensitive flag `(?i)` to match values like `LocalHost` for `localhost`.
| * fix comment and make it visible to end-userAlexander Zagaynov2017-09-051-2/+3
| |
| * escape also custom_cors_originsAlexander Zagaynov2017-08-301-1/+1
| |
| * add comment on regexp specificsAlexander Zagaynov2017-08-301-1/+1
| |
| * escape corsAllowedOrigins regexp strings and anchor themAlexander Zagaynov2017-08-301-1/+1
| |
* | add new clusterNetworks fields to new installsJacob Tanenbaum2017-10-271-0/+5
| | | | | | | | | | add clusterNetworks field to the networkConfig so that the new fields appear in new installs when openshift version is greater then 3.7
* | Merge pull request #5654 from vshn/mastersysconfigvar1OpenShift Merge Robot2017-10-231-1/+1
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Avoid undefined variable in master sysconfig template When "openshift_master_controllers_env_vars" is set, but "openshift_master_api_env_vars" isn't, the template for the sysconfig file of atomic-openshift-master fails: AnsibleUndefinedVariable: 'dict object' has no attribute 'api_env_vars' Avoid this issue by applying "default({})" to the dict and always calling ".items()".
| * | Avoid undefined variable in master sysconfig templateMichael Hanselmann2017-10-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When "openshift_master_controllers_env_vars" is set, but "openshift_master_api_env_vars" isn't, the template for the sysconfig file of atomic-openshift-master fails: AnsibleUndefinedVariable: 'dict object' has no attribute 'api_env_vars' Avoid this issue by applying "default({})" to the dict and always calling ".items()".
* | | Initial Kuryr supportMichał Dulko2017-10-201-1/+1
|/ / | | | | | | | | | | | | | | This commit enables deploying Kuryr networking on top of OpenShift in containers. kuryr-controller is a Deployment and kuryr-cni is deployed as DaemonSet (container will drop all CNI configuration files). Co-Authored-By: Antoni Segura Puimedon <celebdor@gmail.com>
* | Merge pull request #5687 from jim-minter/tsb_configOpenShift Merge Robot2017-10-171-7/+0
|\ \ | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Rewire openshift_template_service_broker_namespaces configurable @ewolinetz @bparees
| * | Rewire openshift_template_service_broker_namespaces configurableJim Minter2017-10-131-7/+0
| | |
* | | Add ability to set node and master imageConfig to latestMichael Gugino2017-10-121-1/+1
|/ / | | | | | | | | | | | | | | | | Currently, imageConfig.latest is hard-coded to false. This commit adds an appropriate boolean to enable setting to true. Fixes: https://github.com/openshift/openshift-ansible/issues/1422
* | Fix broken debug_levelMichael Gugino2017-10-113-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, debug_level is documented as a way to change the debug output level for both masters and nodes. debug_level does not currently have any effect. This commit removes debug_level from openshift_facts and properly sets openshift_master_debug_level and openshift_node_debug_level to the value of debug_level specified in the inventory. This commit also reorganizes some set_fact tasks needed during master upgrades to put all work-around set-facts for undefined variables in one place, allowing for easier cleanup in the future. This includes an entry for openshift_master_debug_level. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1500164
* | Ensure servingInfo.clientCA is set as ca.crt rather than ca-bundle.crt.Andrew Butcher2017-10-091-4/+0
| |
* | Fix registry_auth logic for upgradesMichael Gugino2017-09-222-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the logic for registry authentication is not implemented correctly to account for upgrades of containerized hosts. Additionally, the logic to account for multiple runs of openshift-ansible might cause registry authentication credentials to not be mounted inside of containerized hosts. This commit adds the necessary logic to ensure containerized hosts retain registry credentials. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1494470
* | Fix: authenticated registry support for containerized hostsMichael Gugino2017-09-112-2/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* | Remove openshift-commonMichael Gugino2017-09-065-9/+9
|/ | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* Remove remaining references to openshift-master.serviceClayton Coleman2017-08-081-18/+0
| | | | Prevents playbooks from accidentally restarting the master service.
* Use the new election mode (client based) instead of direct etcd accessClayton Coleman2017-08-081-3/+2
|
* Merge pull request #4949 from carlpett/patch-1OpenShift Bot2017-08-011-1/+1
|\ | | | | Merged by openshift-bot
| * Fix aws_secret_key checkCalle Pettersson2017-07-311-1/+1
| |
* | Merge pull request #4894 from tbielawa/reg-dns-scaleup-bz1469336OpenShift Bot2017-08-013-3/+12
|\ \ | | | | | | Merged by openshift-bot
| * | Use existing OPENSHIFT_DEFAULT_REGISTRY setting during masters scaleupTim Bielawa2017-07-283-3/+12
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes a bug which reported that AFTER a cluster upgrade from OCP 3.5 to 3.6, any masters which are later added via the scaleup playbooks are setting a value for OPENSHIFT_DEFAULT_REGISTRY which is inconsistent with the already configured masters. * OPENSHIFT_DEFAULT_REGISTRY value is saved from oo_first_master * The new scaleup master has a fact set noting it is a scaleup host * The saved OPENSHIFT_DEFAULT_REGISTRY value is used instead of the default for 3.6, which is to use a hard-coded registry value of 'docker-registry.default.svc:5000' Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1469336
* | Add rate limit configurabilityScott Dodson2017-07-061-4/+4
|/
* Merge pull request #4414 from sdodson/bz1460626Scott Dodson2017-06-263-3/+3
|\ | | | | Ensure that host pki tree is mounted in containerized components
| * Ensure that host pki tree is mounted in containerized componentsScott Dodson2017-06-123-3/+3
| |
* | Also configure default registry on HA mastersScott Dodson2017-06-232-0/+6
| | | | | | | | Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1463498
* | Adding option for serviceAccountConfig.limitSecretReferencesKenny Woodson2017-06-201-1/+1
| |
* | Merge pull request #4292 from sdodson/push-via-dnsOpenShift Bot2017-06-201-0/+3
|\ \ | | | | | | Merged by openshift-bot
| * | Update atomic-openshift-master.j2Scott Dodson2017-06-191-1/+1
| | |
| * | Enable push to registry via dns only on clean 3.6 installsScott Dodson2017-06-181-1/+1
| | | | | | | | | | | | | | | We cannot assume that 3.5 to 3.6 upgrades were signed with the correct certs
| * | Disable actually pushing to the registry via dns for nowScott Dodson2017-06-181-1/+1
| | | | | | | | | | | | | | | | | | | | | We need to sort out how to know that the registry certificate has the proper hostnames attached to it. It will for 3.6 clean installs but not for 3.5 to 3.6 upgrades. For now make it opt in and come back to this.
| * | Push to the registry via dnsScott Dodson2017-06-181-0/+3
| |/ | | | | | | | | | | Configures OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc Adds 'cluster.local' to dns search on nodes via dispatcher script Adds '.svc' to NO_PROXY defaults
* | Preserve etcd3 storage if it's already in useScott Dodson2017-06-181-0/+6
|/ | | | | This would be the case if for instance they'd upgraded and then migrated.