summaryrefslogtreecommitdiffstats
path: root/roles/openshift_aws
Commit message (Collapse)AuthorAgeFilesLines
* oc_adm_csr: Add fail_on_timeout parameter which causes module to fail when ↵Andrew Butcher2018-02-131-0/+1
| | | | timeout was reached.
* Merge pull request #7073 from abutcher/aws-node-hostnameOpenShift Merge Robot2018-02-121-0/+3
|\ | | | | | | | | | | | | | | Automatic merge from submit-queue. Update user-data for FQDN instance hostnames * Remove node service start from bootstrap.yml. We start and enable the node service in user-data and we want the node service to start after NetworkManager so that the instance will have its final hostname. * Restart systemd-hostnamed before restarting NetworkManager. In testing this has ensured that instances receive an FQDN hostname which is required for kube.
| * Restart systemd-hostnamed before restarting NetworkManager in node user-data.Andrew Butcher2018-02-121-0/+3
| |
* | aws ami: make it so the tags from the orinal AMI are used with the newly ↵Matt Woodson2018-02-071-1/+14
|/ | | | created AMI
* Merge pull request #6993 from joelddiaz/deprovision_elbsKenny Woodson2018-02-076-29/+82
|\ | | | | add deprovisioning for ELB (and IAM certs)
| * add deprovisioning for ELB (and IAM certs)Joel Diaz2018-02-026-29/+82
| | | | | | | | | | | | add playbooks to handle deleting ELBs and any IAM certs that may have been created during provisioning. redo ELB creation to remove arbitrary wait and just retry until ELB creation succeeds
* | Merge pull request #6990 from joelddiaz/aws_master_grp_paramsKenny Woodson2018-02-061-21/+19
|\ \ | | | | | | parameterize various master/infra scale group bits
| * | parameterize various master scale group bitsJoel Diaz2018-02-051-21/+19
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | allow selectively overriding master scale group bits: instance type: openshift_aws_master_group_instance_type scale group min size: openshift_aws_master_group_min_size scale group max size: openshift_aws_master_group_max_size scale group desired size: openshift_aws_master_group_desired_size and overriding infra scale group bits: instance type: openshift_aws_infra_group_instance_type scale group min size: openshift_aws_infra_group_min_size scale group max size: openshift_aws_infra_group_max_size scale group desired size: openshift_aws_infra_group_desired_size and overriding compute scale group bits: instance type: openshift_aws_compute_group_instance_type scale group min size: openshift_aws_compute_group_min_size scale group max size: openshift_aws_compute_group_max_size scale group desired size: openshift_aws_compute_group_desired_size also consolodate the health check for master/infra/compute since they are all the same
* | add S3 bucket cleanupJoel Diaz2018-02-022-0/+31
|/ | | | | | Default to just cleaning out all the objects in the S3 bucket (IFF openshift_aws_create_s3 is 'true'). If you really, trully want to delete the S3 bucket and free up the bucket name, you can set openshift_aws_really_delete_s3_bucket to 'true' ('false' by default).
* Re-add openshift_aws_elb_cert_arn.Andrew Butcher2018-01-301-1/+3
|
* Fix misaligned ports for sg,elb,apiChris Callegari2018-01-254-63/+76
|
* Merge pull request #6603 from joelddiaz/fetch_subnet_azOpenShift Merge Robot2018-01-241-2/+3
|\ | | | | | | | | | | | | | | | | Automatic merge from submit-queue. un-hardcode default subnet az allow defining 'default_az' for one of the subnets in the vpc structure, and pull that default_az and set it to openshift_aws_subnet_az. this should allow one less variable to be defined/overridded when using non-default (us-east-1) regions
| * un-hardcode default subnet azJoel Diaz2018-01-221-2/+3
| | | | | | | | | | | | | | | | allow defining 'default_az' for one of the subnets in the vpc structure, and pull that default_az and set it to openshift_aws_subnet_az. this should allow one less variable to have to be defined/overridded (openshift_aws_subnet_az) when using non-default (us-east-1) regions update provisioning_vars.yml.example to show an example VPC structure
* | Merge pull request #6767 from mazzystr/fix-master-internal-elbKenny Woodson2018-01-242-2/+2
|\ \ | | | | | | Fix to master-internal elb scheme
| * | Fix to master-internal elb schemeChris Callegari2018-01-172-2/+2
| | |
* | | Merge pull request #6533 from joelddiaz/prereqs_uninstallOpenShift Merge Robot2018-01-224-0/+63
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. allow uninstalling AWS objects created by prerequisite playbook add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml specifically: security groups, vpcs, and any ssh keys introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning.
| * | | allow uninstalling AWS objects created by prerequisite playbookJoel Diaz2018-01-224-0/+63
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | add deprovisioners/uninstallers for objects created via playbooks/aws/openshift-cluster/prerequisites.yml specifically: security groups, vpcs, and any ssh keys introduce openshift_aws_enable_uninstall_shared_objects to protect AWS objects that would be shared in the case of multiple clusters co-existing in one AWS account. right now it protects the ssh keys, but it can/should be used to protect against deleting the shared IAM instance profile as well. default this variable to False to be on the safe side when uninstalling/deprovisioning. add some documentation on using deprovisioning playbooks
* | | Merge pull request #6691 from abutcher/oc-adm-csr-cnAndrew Butcher2018-01-191-1/+3
|\ \ \ | | | | | | | | Use master group's ansible_ssh_user when accepting nodes.
| * | | Remove duplication in node acceptance playbook and setup master groups so ↵Andrew Butcher2018-01-161-1/+3
| |/ / | | | | | | | | | that we can use the first master's ansible_ssh_user when delegating.
* | | Merge pull request #6531 from abutcher/bootstrap-slurp-userOpenShift Merge Robot2018-01-161-15/+2
|\ \ \ | |/ / |/| | | | | | | | Automatic merge from submit-queue. Use master group ansible_ssh_user to pull bootstrap kubeconfig
| * | Setup master groups in order to use the master group's ansible_ssh_user to ↵Andrew Butcher2018-01-091-15/+2
| | | | | | | | | | | | pull bootstrap kubeconfig.
* | | Merge pull request #6610 from mazzystr/update_awsec2_root_volOpenShift Merge Robot2018-01-151-0/+8
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Update to AWS EC2 root vol size so that Health Check tasks pass AWS EC2s under the ASG and LaunchConfig are deployed with the default 10gb root vol size. Heath Checks fail because / filesystem and /var directory is too small. Health Check wants a minimum of 40Gb. 10Gb is just too small for server operations in general. Let's increase to 100Gb. Cost increase for additional EBS storage will be minimal and give plenty of elbow room for normal server operations.
| * | | Update to AWS EC2 root vol size so that Health Check tasks passChris Callegari2018-01-081-0/+8
| | | |
* | | | Merge pull request #6692 from abutcher/cluster-operatorOpenShift Merge Robot2018-01-152-17/+15
|\ \ \ \ | |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Separate ELB & S3 from master node group provisioning Moved s3 and elb provisioning out of `roles/openshift_aws/tasks/provisioning.yml` and into their own playbooks. These playbooks are now included in the provision playbook and in a WIP infrastructure playbook we intend to run up front in place of prerequisites. @kwoodson what are your thoughts on something like this?
| * | | Move s3 & elb provisioning into their own playbooks s.t. they are applied ↵Andrew Butcher2018-01-102-17/+15
| | | | | | | | | | | | | | | | outside of the openshift_aws master provisioning tasks.
* | | | Move more plugins to lib_utilsMichael Gugino2018-01-104-74/+4
|/ / / | | | | | | | | | | | | | | | | | | This commit continues moving plugins into lib_utils. This commit does not move any plugins for add-on roles such as logging and metrics.
* | | docker storage setup for ami buildingJoel Diaz2018-01-081-1/+1
| | | | | | | | | | | | | | | | | | add host to g_new_node_hosts so that plays run against the AMI instance update example vars so that overlay2 is used by default for docker storage
* | | Merge pull request #6548 from kwoodson/configurable_ami_drive_sizeKenny Woodson2018-01-081-5/+1
|\ \ \ | | | | | | | | Adding ability to update ami drive size.
| * | | Adding ability to update ami drive size.Kenny Woodson2017-12-211-5/+1
| |/ /
* | | Migrate to import_role for static role inclusionScott Dodson2018-01-051-3/+3
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
* | Move node group tags to openshift_aws_{master,node}_group.Andrew Butcher2017-12-183-14/+15
|/
* Changing the node group format to a list.Kenny Woodson2017-12-1121-168/+239
|
* Copying upstream fix for ansible 2.4 ec2_group module.Kenny Woodson2017-12-111-2/+2
|
* Include Deprecation: Convert to include_tasksRussell Teague2017-12-068-21/+21
|
* Initial upgrade for scale groups.Kenny Woodson2017-11-2914-48/+190
|
* Ensure node service is started.Kenny Woodson2017-11-151-0/+1
|
* Adding instance profile support for node groups.Kenny Woodson2017-11-136-0/+84
|
* Bootstrap enhancements.Kenny Woodson2017-11-0814-192/+185
|
* Adding elb changes to provision elbs and add to scale group.Kenny Woodson2017-11-018-64/+74
|
* Merge pull request #5887 from kwoodson/rename_csrKenny Woodson2017-10-271-1/+1
|\ | | | | Renaming csr to bootstrap for consistency.
| * Renaming csr to bootstrap for consistency.Kenny Woodson2017-10-251-1/+1
| |
* | Moving removal of unwanted artifacts to image_prep.Kenny Woodson2017-10-251-7/+0
|/
* Do not remove files for bootstrap if resolv or dns.Kenny Woodson2017-10-176-22/+66
|
* Provisioning Documentation UpdatesMichael Gugino2017-10-111-51/+26
| | | | | | | Updating provisioning documents. Also moved some steps from build_ami.yml to a new play for better reusability.
* Merge pull request #5605 from mgugino-upstream-stage/build-provision-splitOpenShift Merge Robot2017-10-056-24/+85
|\ | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Build provision split Make provisioning steps more reusable Reorganizing and making some of the plays more reusable. Depends-on: https://github.com/openshift/openshift-ansible/pull/5565
| * fix master-facts for provisioningMichael Gugino2017-10-022-4/+4
| |
| * Make provisioning steps more reusableMichael Gugino2017-10-026-24/+85
| | | | | | | | | | Reorganizing and making some of the plays more reusable.
* | Merge pull request #5606 from ↵OpenShift Merge Robot2017-10-032-5/+15
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | mgugino-upstream-stage/provision-scale-elb-fixes-master Automatic merge from submit-queue. Fix provisiong scale group and elb logic Some changes necessary to support provisioning and scale group logic Some of this work is duplicated from an existing PR. That PR is about to merge, so I'll rebase once that hits.
| * Fix provisiong scale group and elb logicMichael Gugino2017-09-294-11/+21
| | | | | | | | | | Some changes necessary to support provisioning and scale group logic
* | Merge pull request #5589 from mgugino-upstream-stage/provision-var-fixes-masterJan Chaloupka2017-10-024-9/+9
|\ \ | | | | | | Fix some provisioning variables