blob: a796009302172ef178722185bd6a0dcabfe2ea0d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
|
---
# TODO: Much of this file is shared with container engine tasks
- set_fact:
l_insecure_crio_registries: "{{ '\"{}\"'.format('\", \"'.join(l2_docker_insecure_registries)) }}"
when: l2_docker_insecure_registries
- set_fact:
l_crio_registries: "{{ l2_docker_additional_registries + ['docker.io'] }}"
when: l2_docker_additional_registries
- set_fact:
l_crio_registries: "{{ ['docker.io'] }}"
when: not l2_docker_additional_registries
- set_fact:
l_additional_crio_registries: "{{ '\"{}\"'.format('\", \"'.join(l_crio_registries)) }}"
when: l2_docker_additional_registries
- set_fact:
l_openshift_image_tag: "{{ openshift_image_tag | string }}"
when: openshift_image_tag is defined
- set_fact:
l_openshift_image_tag: "latest"
when:
- openshift_image_tag is not defined
- openshift_release == "latest"
- set_fact:
l_openshift_image_tag: "{{ openshift_release | string }}"
when:
- openshift_image_tag is not defined
- openshift_release != "latest"
- name: Ensure container-selinux is installed
package:
name: container-selinux
state: present
when: not openshift.common.is_atomic | bool
- name: Check we are not using node as a Docker container with CRI-O
fail: msg='Cannot use CRI-O with node configured as a Docker container'
when:
- openshift.common.is_containerized | bool
- not openshift.common.is_node_system_container | bool
# Used to pull and install the system container
- name: Ensure atomic is installed
package:
name: atomic
state: present
when: not openshift.common.is_atomic | bool
# At the time of writing the atomic command requires runc for it's own use. This
# task is here in the even that the atomic package ever removes the dependency.
- name: Ensure runc is installed
package:
name: runc
state: present
when: not openshift.common.is_atomic | bool
- name: Check that overlay is in the kernel
shell: lsmod | grep overlay
register: l_has_overlay_in_kernel
ignore_errors: yes
- when: l_has_overlay_in_kernel.rc != 0
block:
- name: Add overlay to modprobe.d
template:
dest: /etc/modules-load.d/overlay.conf
src: overlay.conf.j2
backup: yes
- name: Manually modprobe overlay into the kernel
command: modprobe overlay
- name: Enable and start systemd-modules-load
service:
name: systemd-modules-load
enabled: yes
state: restarted
- block:
- name: Add http_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?http_proxy[:=]{1}"
line: "http_proxy: {{ openshift.common.http_proxy | default('') }}"
when:
- openshift.common.http_proxy is defined
- openshift.common.http_proxy != ''
- name: Add https_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?https_proxy[:=]{1}"
line: "https_proxy: {{ openshift.common.https_proxy | default('') }}"
when:
- openshift.common.https_proxy is defined
- openshift.common.https_proxy != ''
- name: Add no_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?no_proxy[:=]{1}"
line: "no_proxy: {{ openshift.common.no_proxy | default('') }}"
when:
- openshift.common.no_proxy is defined
- openshift.common.no_proxy != ''
- block:
- name: Set CRI-O image defaults
set_fact:
l_crio_image_prepend: "docker.io/gscrivano"
l_crio_image_name: "cri-o-fedora"
l_crio_image_tag: "latest"
- name: Use Centos based image when distribution is CentOS
set_fact:
l_crio_image_name: "cri-o-centos"
when: ansible_distribution == "CentOS"
- name: Set CRI-O image tag
set_fact:
l_crio_image_tag: "{{ l_openshift_image_tag }}"
when:
- openshift_deployment_type == 'openshift-enterprise'
- name: Use RHEL based image when distribution is Red Hat
set_fact:
l_crio_image_prepend: "registry.access.redhat.com/openshift3"
l_crio_image_name: "cri-o"
when: ansible_distribution == "RedHat"
- name: Set the full image name
set_fact:
l_crio_image: "{{ l_crio_image_prepend }}/{{ l_crio_image_name }}:{{ l_crio_image_tag }}"
# For https://github.com/openshift/aos-cd-jobs/pull/624#pullrequestreview-61816548
- name: Use a specific image if requested
set_fact:
l_crio_image: "{{ openshift_crio_systemcontainer_image_override }}"
when:
- openshift_crio_systemcontainer_image_override is defined
- openshift_crio_systemcontainer_image_override != ""
# Be nice and let the user see the variable result
- debug:
var: l_crio_image
# NOTE: no_proxy added as a workaround until https://github.com/projectatomic/atomic/pull/999 is released
- name: Pre-pull CRI-O System Container image
command: "atomic pull --storage ostree {{ l_crio_image }}"
changed_when: false
environment:
NO_PROXY: "{{ openshift.common.no_proxy | default('') }}"
- name: Install CRI-O System Container
oc_atomic_container:
name: "cri-o"
image: "{{ l_crio_image }}"
state: latest
- name: Remove CRI-O default configuration files
file:
path: "{{ item }}"
state: absent
with_items:
- /etc/cni/net.d/200-loopback.conf
- /etc/cni/net.d/100-crio-bridge.conf
- name: Create the CRI-O configuration
template:
dest: /etc/crio/crio.conf
src: crio.conf.j2
backup: yes
- name: Ensure CNI configuration directory exists
file:
path: /etc/cni/net.d/
state: directory
- name: Configure the CNI network
template:
dest: /etc/cni/net.d/openshift-sdn.conf
src: 80-openshift-sdn.conf.j2
- name: Start the CRI-O service
systemd:
name: "cri-o"
enabled: yes
state: started
daemon_reload: yes
register: start_result
- meta: flush_handlers
|
