blob: f88f167c7a896b23168ed55b80d1877226a642a0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
---
# TODO: Much of this file is shared with container engine tasks
- set_fact:
l_insecure_registries: "{{ '\"{}\"'.format('\", \"'.join(openshift.docker.insecure_registries)) }}"
- name: Ensure container-selinux is installed
package:
name: container-selinux
state: present
when: not openshift.common.is_atomic | bool
# Used to pull and install the system container
- name: Ensure atomic is installed
package:
name: atomic
state: present
when: not openshift.common.is_atomic | bool
# At the time of writing the atomic command requires runc for it's own use. This
# task is here in the even that the atomic package ever removes the dependency.
- name: Ensure runc is installed
package:
name: runc
state: present
when: not openshift.common.is_atomic | bool
- block:
- name: Add http_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?http_proxy[:=]{1}"
line: "http_proxy: {{ openshift.common.http_proxy | default('') }}"
when:
- openshift.common.http_proxy is defined
- openshift.common.http_proxy != ''
- name: Add https_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?https_proxy[:=]{1}"
line: "https_proxy: {{ openshift.common.https_proxy | default('') }}"
when:
- openshift.common.https_proxy is defined
- openshift.common.https_proxy != ''
- name: Add no_proxy to /etc/atomic.conf
lineinfile:
dest: /etc/atomic.conf
regexp: "^#?no_proxy[:=]{1}"
line: "no_proxy: {{ openshift.common.no_proxy | default('') }}"
when:
- openshift.common.no_proxy is defined
- openshift.common.no_proxy != ''
- block:
- name: Set to default prepend
set_fact:
l_crio_image_prepend: "gscrivano"
- name: Use Red Hat Registry for image when distribution is Red Hat
set_fact:
l_crio_image_prepend: "registry.access.redhat.com/openshift3"
when: ansible_distribution == 'RedHat'
- name: Use Fedora Registry for image when distribution is Fedora
set_fact:
l_crio_image_prepend: "registry.fedoraproject.org/f25"
when: ansible_distribution == 'Fedora'
# For https://github.com/openshift/openshift-ansible/pull/4049#discussion_r114478504
- name: Use a testing registry if requested
set_fact:
l_crio_image_prepend: "{{ openshift_docker_systemcontainer_image_registry_override }}"
when:
- openshift_docker_systemcontainer_image_registry_override is defined
- openshift_docker_systemcontainer_image_registry_override != ""
- name: Set the full image name
set_fact:
l_crio_image: "{{ l_crio_image_prepend }}/cri-o:latest"
# NOTE: no_proxy added as a workaround until https://github.com/projectatomic/atomic/pull/999 is released
- name: Pre-pull CRI-O System Container image
command: "atomic pull --storage ostree {{ l_crio_image }}"
changed_when: false
environment:
NO_PROXY: "{{ openshift.common.no_proxy | default('') }}"
- name: Install CRI-O System Container
oc_atomic_container:
name: "cri-o"
image: "{{ l_crio_image }}"
state: latest
- name: run CRI-O with overlay2
replace:
regexp: 'storage_driver = ""'
replace: 'storage_driver = "overlay2"'
name: /etc/crio/crio.conf
backup: yes
- name: Add overlay2 storage opts for CRI-O
lineinfile:
dest: /etc/crio/crio.conf
line: '"overlay2.override_kernel_check=1"'
insertafter: 'storage_option = \['
regexp: 'overlay2\.override_kernel_check=1'
state: present
when: ansible_distribution in ['RedHat', 'CentOS']
- name: Configure insecure registries for CRI-O
lineinfile:
dest: /etc/crio/crio.conf
line: "{{ l_insecure_registries }}"
insertafter: 'insecure_registries = \['
regexp: "{{ l_insecure_registries }}"
state: present
when: openshift_docker_insecure_registries is defined
- name: Start the CRI-O service
systemd:
name: "cri-o"
enabled: yes
state: started
daemon_reload: yes
register: start_result
- meta: flush_handlers
|
