csa/devops/ansible-patches/openshift.git/playbooks/aws/openshift-cluster, branch ands

Merge pull request #6993 from joelddiaz/deprovision_elbs

2018-02-07T14:05:14+00:00

add deprovisioning for ELB (and IAM certs)

add deprovisioning for ELB (and IAM certs)

2018-02-02T21:05:35+00:00

add playbooks to handle deleting ELBs and any IAM certs that may have been created during provisioning.

redo ELB creation to remove arbitrary wait and just retry until ELB creation succeeds

add S3 bucket cleanup

2018-02-02T14:46:20+00:00

Default to just cleaning out all the objects in the S3 bucket (IFF openshift_aws_create_s3 is 'true').

If you really, trully want to delete the S3 bucket and free up the bucket name, you can set openshift_aws_really_delete_s3_bucket to 'true' ('false' by default).

Split control plane and component install in deploy_cluster

2018-01-23T18:01:12+00:00

Merge pull request #6533 from joelddiaz/prereqs_uninstall

2018-01-22T23:56:47+00:00

Automatic merge from submit-queue.

allow uninstalling AWS objects created by prerequisite playbook

add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml

specifically: security groups, vpcs, and any ssh keys

introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning.

allow uninstalling AWS objects created by prerequisite playbook

2018-01-22T16:38:12+00:00

add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml

specifically: security groups, vpcs, and any ssh keys

introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning.

add some documentation on using deprovisioning playbooks

Remove duplication in node acceptance playbook and setup master groups so that we can use the first master's ansible_ssh_user when delegating.

2018-01-16T21:11:02+00:00

Move s3 & elb provisioning into their own playbooks s.t. they are applied outside of the openshift_aws master provisioning tasks.

2018-01-10T20:47:54+00:00

Migrate to import_role for static role inclusion

2018-01-05T17:44:56+00:00

In Ansible 2.2, the include_role directive came into existence as
a Tech Preview. It is still a Tech Preview through Ansible 2.4
(and in current devel branch), but with a noteable change. The
default behavior switched from static: true to static: false
because that functionality moved to the newly introduced
import_role directive (in order to stay consistent with include*
being dynamic in nature and `import* being static in nature).

The dynamic include is considerably more memory intensive as it will
dynamically create a role import for every host in the inventory
list to be used. (Also worth noting, there is at the time of this
writing an object allocation inefficiency in the dynamic include
that can in certain situations amplify this effect considerably)

This change is meant to mitigate the pressure on memory for the
Ansible control host.

We need to evaluate where it makes sense to dynamically include roles
and revert back to dynamic inclusion if and where it makes sense to do
so.

Relocate filter plugins to lib_utils

2017-12-18T21:46:22+00:00

This commit relocates filter_plugings to lib_utils,
changes the namespacing to prevent unintended use of
older versions that may be present in filter_plugins/
directory on existing installs.

Add lib_utils to meta depends for roles

Also consolidate some plugins into lib_utils from
various other areas.

Update rpm spec, obsolete plugin rpms.