summaryrefslogtreecommitdiffstats
path: root/roles/openshift_excluder/README.md
blob: 80cb88d4541a6152f57d48c86546d99843e2def1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
OpenShift Excluder
==================

Manages the excluder packages which add yum and dnf exclusions ensuring that
the packages we care about are not inadvertently updated. See
https://github.com/openshift/origin/tree/master/contrib/excluder

Requirements
------------

None

Inventory Variables
-------------------

| Name                                 | Default Value              | Description                            |
---------------------------------------|----------------------------|----------------------------------------|
| openshift_enable_excluders           | True                       | Enable all excluders                   |
| openshift_enable_docker_excluder     | openshift_enable_excluders | Enable docker excluder. If not set, the docker excluder is ignored. |
| openshift_enable_openshift_excluder  | openshift_enable_excluders | Enable openshift excluder. If not set, the openshift excluder is ignored. |

Role Variables
--------------

| Name                                      | Default | Choices         | Description                                                               |
|-------------------------------------------|---------|-----------------|---------------------------------------------------------------------------|
| r_openshift_excluder_action               | enable  | enable, disable | Action to perform when calling this role                                  |
| r_openshift_excluder_verify_upgrade       | false   | true, false     | When upgrading, this variable should be set to true when calling the role |
| r_openshift_excluder_package_state        | present | present, latest | Use 'latest' to upgrade openshift_excluder package                        |
| r_openshift_excluder_docker_package_state | present | present, latest | Use 'latest' to upgrade docker_excluder package                           |
| r_openshift_excluder_service_type         | None    |                 | (Required) Defined as openshift.common.service_type e.g. atomic-openshift |
| r_openshift_excluder_upgrade_target       | None    |                 | Required when r_openshift_excluder_verify_upgrade is true, defined as openshift_upgrade_target by Upgrade playbooks e.g. '3.6'|

Dependencies
------------

- lib_utils

Example Playbook
----------------

```yaml
- name: Demonstrate OpenShift Excluder usage
  hosts: oo_masters_to_config:oo_nodes_to_config
  roles:
  # Disable all excluders
  - role: openshift_excluder
    r_openshift_excluder_action: disable
    r_openshift_excluder_service_type: "{{ openshift.common.service_type }}"
  # Enable all excluders
  - role: openshift_excluder
    r_openshift_excluder_action: enable
    r_openshift_excluder_service_type: "{{ openshift.common.service_type }}"
  # Disable all excluders and verify appropriate excluder packages are available for upgrade
  - role: openshift_excluder
    r_openshift_excluder_action: disable
    r_openshift_excluder_service_type: "{{ openshift.common.service_type }}"
    r_openshift_excluder_verify_upgrade: true
    r_openshift_excluder_upgrade_target: "{{ openshift_upgrade_target }}"
    r_openshift_excluder_package_state: latest
    r_openshift_excluder_docker_package_state: latest
```

TODO
----

It should be possible to manage the two excluders independently though that's not a hard requirement. However it should be done to manage docker on RHEL Containerized hosts.

License
-------

Apache License, Version 2.0

Author Information
------------------

Scott Dodson (sdodson@redhat.com)