blob: 29e16b6f8a357b5d9e8418b45e14ad54caddd040 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
---
- name: setup firewall
import_tasks: firewall.yml
- name: Set the Nuage certificate directory fact for Atomic hosts
set_fact:
cert_output_dir: /var/usr/share/nuage-openshift-monitor
when: openshift_is_atomic | bool
- name: Set the Nuage kubeconfig file path fact for Atomic hosts
set_fact:
kube_config: /var/usr/share/nuage-openshift-monitor/nuage.kubeconfig
when: openshift_is_atomic | bool
- name: Set the Nuage monitor yaml location fact for Atomic hosts
set_fact:
kubemon_yaml: /var/usr/share/nuage-openshift-monitor/nuage-openshift-monitor.yaml
when: openshift_is_atomic | bool
- name: Set the Nuage monitor certs location fact for Atomic hosts
set_fact:
nuage_master_crt_dir: /var/usr/share/nuage-openshift-monitor/
when: openshift_is_atomic | bool
- name: Set the Nuage master config directory for daemon sets install
set_fact:
nuage_master_config_dsets_mount_dir: /var/usr/share/
when: master_host_type == "is_atomic"
- name: Set the Nuage node config directory for daemon sets install
set_fact:
nuage_node_config_dsets_mount_dir: /var/usr/share/
when: slave_host_type == "is_atomic"
- name: Set the Nuage CNI plugin binary directory for daemon sets install
set_fact:
nuage_cni_bin_dsets_mount_dir: /var/opt/cni/bin
when: openshift_is_atomic | bool
- name: Create directory /usr/share/nuage-openshift-monitor
become: yes
file: path=/usr/share/nuage-openshift-monitor state=directory
when: not openshift_is_atomic | bool
- name: Create directory /var/usr/share/nuage-openshift-monitor
become: yes
file: path=/var/usr/share/nuage-openshift-monitor state=directory
when: openshift_is_atomic | bool
- name: Create directory /var/usr/bin for monitor binary on atomic
become: yes
file: path=/var/usr/bin state=directory
when: openshift_is_atomic | bool
- name: Create CNI bin directory /var/opt/cni/bin
become: yes
file: path=/var/opt/cni/bin state=directory
when: openshift_is_atomic | bool
- name: Create the log directory
become: yes
file: path={{ nuage_mon_rest_server_logdir }} state=directory
- include_tasks: serviceaccount.yml
- name: Download the certs and keys
become: yes
fetch: src={{ cert_output_dir }}/{{ item }} dest=/tmp/{{ item }} flat=yes
with_items:
- ca.crt
- nuage.crt
- nuage.key
- nuage.kubeconfig
- name: Copy the certificates and keys
become: yes
copy: src="/tmp/{{ item }}" dest="{{ cert_output_dir }}/{{ item }}"
with_items:
- ca.crt
- nuage.crt
- nuage.key
- nuage.kubeconfig
- include_tasks: certificates.yml
- name: Install Nuage VSD user certificate
become: yes
copy: src="{{ vsd_user_cert_file }}" dest="{{ cert_output_dir }}/{{ vsd_user_cert_file | basename }}"
- name: Install Nuage VSD user key
become: yes
copy: src="{{ vsd_user_key_file }}" dest="{{ cert_output_dir }}/{{ vsd_user_key_file | basename }}"
- name: Create Nuage master daemon set yaml file
become: yes
template: src=nuage-master-config-daemonset.j2 dest=/etc/nuage-master-config-daemonset.yaml owner=root mode=0644
- name: Create Nuage node daemon set yaml file
become: yes
template: src=nuage-node-config-daemonset.j2 dest=/etc/nuage-node-config-daemonset.yaml owner=root mode=0644
- name: Add the service account to the privileged scc to have root permissions
shell: oc adm policy add-scc-to-user privileged system:serviceaccount:openshift-infra:daemonset-controller
ignore_errors: true
when: inventory_hostname == groups.oo_first_master.0
- name: Spawn Nuage Master monitor daemon sets pod
shell: oc create -f /etc/nuage-master-config-daemonset.yaml
ignore_errors: true
when: inventory_hostname == groups.oo_first_master.0
- name: Spawn Nuage CNI daemon sets pod
shell: oc create -f /etc/nuage-node-config-daemonset.yaml
ignore_errors: true
when: inventory_hostname == groups.oo_first_master.0
- name: Restart daemons
command: /bin/true
notify:
- restart master api
- restart master controllers
ignore_errors: true
|
