summaryrefslogtreecommitdiffstats
path: root/roles/openshift_node
Commit message (Collapse)AuthorAgeFilesLines
* Setup tuned after the node has been restarted.Jiri Mencak2017-09-141-4/+4
|
* Merge pull request #5370 from jmencak/tuned-openshift-ansible-bad_merge-fixOpenShift Bot2017-09-132-14/+4
|\ | | | | Merged by openshift-bot
| * Re-enabling new tuned profile hierarchy (PR5089)Jiri Mencak2017-09-122-14/+4
| |
* | Fix: authenticated registry support for containerized hostsMichael Gugino2017-09-114-16/+43
|/ | | | | | | | | | | | | | | | | | | | | | | Currently, openshift-anisble supports authentication to container registries to pull down openshift container images. The openshift_verison role uses the docker cli to gather image information from container registries before authentication credentials are provided by openshift-ansible. This commit creates the necessary token to authenticate to private registries during openshift_version. The token is generated by the role 'docker' on all hosts where docker is installed/configured when oreg_auth_users is defined. This commit also adds a read-only mount into the openshift master and node container services. This mount is '/var/lib/origin/.docker:/root/.docker:ro'. This is because the container images do not currently read the values in '/var/lib/origin/.docker' as this may be a bug upstream. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* Consolidating AWS roles and variables underneath openshift_aws role.Kenny Woodson2017-09-072-11/+29
|
* Merge pull request #5208 from mgugino-upstream-stage/remove-openshift_commonOpenShift Bot2017-09-0710-28/+38
|\ | | | | Merged by openshift-bot
| * Remove openshift-commonMichael Gugino2017-09-0610-28/+38
| | | | | | | | | | | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* | remove experimental-cri flag from node configSeth Jennings2017-09-061-2/+0
|/
* Merge pull request #5230 from kwoodson/openshift_node_bootstrapOpenShift Bot2017-08-308-187/+292
|\ | | | | Merged by openshift-bot
| * Merging openshift_node with openshift bootstrap.Kenny Woodson2017-08-298-188/+293
| |
* | Merge pull request #5128 from mgugino-upstream-stage/reg-authScott Dodson2017-08-292-0/+20
|\ \ | | | | | | Add independent registry auth support
| * | Add independent registry auth supportMichael Gugino2017-08-282-0/+20
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added the ability to support authentication for independent / 3rd party registries. This commit will allow users to provide a `oreg_auth_user` and `oreg_auth_password` to dynmically generate a docker config.json file. The docker config.json file can be used by openshift to authenticate to independent / 3rd party registries. `oreg_host` must supply endpoint connection info in the form of 'hostname.com:port', with (optional) port 443 default. To update the config.json on a later run, the user can specify `oreg_auth_credentials_replace=False` to update the credentials. These settings must be used in tandem with `oreg_url` Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1316341
* | Merge pull request #5214 from giuseppe/rename_crio_variableScott Dodson2017-08-295-6/+6
|\ \ | |/ |/| crio: rename openshift_docker_use_crio to openshift_use_crio
| * roles: use openshift_use_crioGiuseppe Scrivano2017-08-253-3/+3
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * cri-o: rename openshift_docker_use_crio to openshift_use_crioGiuseppe Scrivano2017-08-252-3/+3
| | | | | | | | | | | | | | It is confusing to have _docker_ in the name, since they are two different backends. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Default to global setting for firewall.Kenny Woodson2017-08-251-2/+2
| |
* | Merge pull request #5089 from jmencak/tuned-setupScott Dodson2017-08-252-14/+45
|\ \ | |/ |/| Setup tuned profiles in /etc/tuned
| * Setup tuned profiles in /etc/tunedJiri Mencak2017-08-152-14/+45
| |
* | Merge pull request #5054 from jmencak/tuned-profilesScott Dodson2017-08-244-0/+67
|\ \ | |/ |/| New tuned profile hierarchy.
| * New tuned profile hierarchy.Jiri Mencak2017-08-154-0/+67
| |
* | Updated README to reflect refactor. Moved firewall initialize into separate ↵Kenny Woodson2017-08-102-2/+4
| | | | | | | | file.
* | Adding a default condition and removing unneeded defaults.Kenny Woodson2017-08-092-8/+5
| |
* | First attempt at refactor of os_firewallKenny Woodson2017-08-084-28/+85
|/
* Merge pull request #4898 from giuseppe/cri-oOpenShift Bot2017-08-045-5/+39
|\ | | | | Merged by openshift-bot
| * cri-o: Restart cri-o after openshift sdn installationSteve Milner2017-08-031-0/+7
| |
| * cri-o: Continue node without SELinux checkSteve Milner2017-08-031-3/+3
| | | | | | | | | | cri-o currently requires SELinux to be off. This change disables the SELinux check in the openshift_node role when cri-o is in use.
| * openvswitch: system container depends on the cri-o serviceGiuseppe Scrivano2017-08-031-1/+12
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * openshift_node: fix typo for experimental-criSteve Milner2017-08-031-1/+1
| |
| * cri-o: Fix node template to use full variableSteve Milner2017-08-031-1/+1
| |
| * cri-o: Add cri-o as a Wants in node unitsSteve Milner2017-08-032-1/+2
| |
| * node.yaml: configure node to use cri-o when openshift.common.use_crioGiuseppe Scrivano2017-08-031-0/+15
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Merge pull request #4789 from ↵Jan Chaloupka2017-08-042-4/+4
|\ \ | |/ |/| | | | | ingvagabund/allow-to-specify-docker-registry-for-system-containers Allow to specify docker registry for system containers
| * allow to specify docker registry for system containersJan Chaloupka2017-07-192-4/+4
| |
* | Merge pull request #4912 from abutcher/openshift-node-factsOpenShift Bot2017-08-012-28/+1
|\ \ | | | | | | Merged by openshift-bot
| * | Move node facts to new openshift_node_facts role.Andrew Butcher2017-07-272-28/+1
| | |
* | | move common tasks to a single file included by both systemd_units.ymlJan Chaloupka2017-07-288-78/+85
|/ /
* | Merge pull request #4874 from ingvagabund/set-default-valuesJan Chaloupka2017-07-274-5/+9
|\ \ | | | | | | Sync all openshift.common.use_openshift_sdn uses in yaml files
| * | Sync all openshift.common.use_openshift_sdn uses in yaml filesJan Chaloupka2017-07-264-5/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most occurrences are in a form: ```yaml openshift.common.use_openshift_sdn | default(true) | bool ``` Let's make all occurences this way given the use_openshift_sdn is set to true anyway. See https://github.com/openshift/openshift-ansible/blob/0c350dcc7d06d62be5ba3a8e468dff85cdd96dd7/roles/openshift_facts/library/openshift_facts.py#L2035
* | | Merge pull request #4813 from sdodson/log-dumperScott Dodson2017-07-261-1/+1
|\ \ \ | |/ / |/| | Fix log dumping on service failure
| * | Fix log dumping on service failureScott Dodson2017-07-201-1/+1
| |/ | | | | | | Also, add log dumping to master service startup too
* | Set TimeoutStartSec=300Scott Dodson2017-07-251-0/+1
| | | | | | | | | | | | On nodes with thousands of services it may take a very long time to establish all of the network routing rules. The longest we've seen is about 180s
* | Revert "set KillMode to process in node service file"Scott Dodson2017-07-251-1/+0
|/
* Dump some logsScott Dodson2017-07-181-0/+11
|
* daemon_reload on node and ovs startScott Dodson2017-07-181-0/+2
| | | | | At least in my smoke testing of a containerized install i had to manually reload systemd
* Wrap additional service changes in retriesScott Dodson2017-07-182-0/+8
|
* Add retries to node restart handlersScott Dodson2017-07-181-1/+7
|
* Merge pull request #4540 from ↵Scott Dodson2017-07-141-0/+2
|\ | | | | | | | | giuseppe/openvswitch-syscontainer-specify-docker-service-name openvswitch, syscontainer: specify the Docker service name
| * openvswitch, syscontainer: specify the Docker service nameGiuseppe Scrivano2017-06-221-0/+2
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | set KillMode to process in node service fileJan Chaloupka2017-07-131-0/+1
| |
* | Merge pull request #4531 from abutcher/f26-ah-setseboolOpenShift Bot2017-07-062-26/+76
|\ \ | | | | | | Merged by openshift-bot
generated by cgit v1.2.1 (git 2.18.0) at 2024-05-18 19:43:23 +0000