summaryrefslogtreecommitdiffstats
path: root/playbooks/openshift-etcd
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #7078 from mgugino-upstream-stage/limit-hostsOpenShift Merge Robot2018-02-099-2/+48
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Limit host scope during plays Many plays only target a select subset of hosts, especially oo_first_master for components such as logging and registry. This commit limits the scope of most plays to eliminate unnecessary task execution on node groups. This will result in great time savings for large deployments. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1516526
| * Limit host scope during playsMichael Gugino2018-02-099-2/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | Many plays only target a select subset of hosts, especially oo_first_master for components such as logging and registry. This commit limits the scope of most plays to eliminate unnecessary task execution on node groups. This will result in great time savings for large deployments. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1516526
* | Merge pull request #6926 from abutcher/etcd-ca-hostScott Dodson2018-02-087-12/+1
|\ \ | |/ |/| Determine which host is the etcd CA host
| * Determine which etcd host is the etcd_ca_host rather than assume it is the ↵Andrew Butcher2018-02-016-11/+0
| | | | | | | | first host in the etcd host group.
| * Attempt to back up generated certificates on every etcd host.Andrew Butcher2018-02-011-1/+1
| |
* | Add base package installation to upgrade playbooksRussell Teague2018-02-071-0/+1
| | | | | | | | | | | | | | | | Hosts will need python ipaddress module installed if it was not installed during initial installation. Bug 1540537 https://bugzilla.redhat.com/show_bug.cgi?id=1540537
* | Move cert SAN update logic to openshift-etcdRussell Teague2018-02-051-0/+33
|/
* Merge pull request #6802 from mgugino-upstream-stage/fix-etcd-scaleupOpenShift Merge Robot2018-01-231-0/+47
|\ | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fix etcd scaleup playbook Currently, etcd scaleup playbook has no way to account for newly added prerequisites.yml play. This commit allows adding new etcd hosts via scaleup play and accounts for etcd hosts that are standalone or part of nodes or masters group.
| * Fix etcd scaleup playbookMichael Gugino2018-01-221-0/+47
| | | | | | | | | | | | | | | | | | Currently, etcd scaleup playbook has no way to account for newly added prerequisites.yml play. This commit allows adding new etcd hosts via scaleup play and accounts for etcd hosts that are standalone or part of nodes or masters group.
* | Fix etcd-upgrade sanity checksMichael Gugino2018-01-191-0/+1
|/ | | | | | | | | | | This commit ensures that only oo_etcd_to_config and oo_masters_to_config are checked during sanity_checks. This will prevent hosts that have not had facts gathered (such as nodes) will not be processed for correct inventory and runtime facts. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1536317
* Fix node scaleup playsMichael Gugino2018-01-181-1/+1
| | | | | | | | Currently, users have no way to run preqrequisites.yml on just newly added nodes during scaleup. This commit ensures only the new nodes are changed during scaleup as well as ensure prerequisites are run.
* Add init/main.yml to etc-upgradeMichael Gugino2018-01-171-1/+4
| | | | | | | | | | | | | | | | Currently, etcd upgrade playbook only calls evaluate_groups to limit the number of tasks that are run against nodes during initialization. Recently, changes have been added to allow skipping of most node tasks via providing variablized host groups during initialization code. This commit allows etcd upgrades to use common init code to ensure necessary facts are defined and proper variables are sanity checked. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1527771
* Chmod temp dirs created on localhostMichael Gugino2018-01-092-0/+8
| | | | | | | | | | | | | | | After remove become:no statements on local_action tasks, we need to ensure that the proper file permssions are applied to local temp directories. This reason for this is that the 'fetch' module does not use 'become' for the localhost, just the remote host. Additionally, users may not wish for the localhost to become during a fetch. local_action will execute with whatever permissions are specified in inventory or via cli.
* Remove become statementsMichael Gugino2018-01-094-7/+0
| | | | | This commit removes become:no statements that break the installer in various ways.
* Migrate to import_role for static role inclusionScott Dodson2018-01-0513-38/+38
| | | | | | | | | | | | | | | | | | | | | | | In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-203-5/+5
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-187-23/+21
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Deprecate using Ansible tests as filtersRussell Teague2017-12-142-2/+2
|
* Remove unneeded embedded etcd logicMichael Gugino2017-12-082-5/+0
| | | | | Removing some remaining embedded etcd facts except for the migration plays.
* Merge pull request #6278 from mgugino-upstream-stage/service_typeMichael Gugino2017-12-082-3/+3
|\ | | | | Remove openshift.common.service_type
| * Remove openshift.common.service_typeMichael Gugino2017-12-072-3/+3
| | | | | | | | | | | | | | | | This commit removes openshift.common.service_type in favor of openshift_service_type. This commit also removes r_openshift_excluder_service_type from plays in favor of using the role's defaults.
* | Add os_firewall to prerequisites.ymlMichael Gugino2017-12-071-1/+0
|/ | | | | | | This needs to be in place for crio. This role only installs and enables iptables, thus should only be run once.
* Playbook Consolidation - etcd UpgradeRussell Teague2017-12-0516-39/+199
|
* Playbook Consolidation - Redeploy CertificatesRussell Teague2017-12-015-0/+152
|
* Remove openshift_clock from meta dependsMichael Gugino2017-11-272-0/+2
| | | | | This commit adds openshift_clock role to required plays instead of using meta_depends.
* Include Deprecation - openshift-etcdRussell Teague2017-11-2210-22/+22
|
* Cleanup etcd runtime variable.Michael Gugino2017-11-217-32/+6
| | | | Cleaning out reference to etcd_runtime in openshift facts.
* Playbook Consolidation - openshift-etcdRussell Teague2017-11-1618-0/+568