summaryrefslogtreecommitdiffstats
path: root/roles/openshift_hosted/tasks
Commit message (Collapse)AuthorAgeFilesLines
* Introduce openshift_hosted_registry_storage_class configuration variable to ↵Suren A. Chilingaryan2018-03-112-0/+2
| | | | enable dynamicly provisioned GlusterFS volume for hosted registry
* Fixes typos in hosted registry code used to provide GlusterFS supoortSuren A. Chilingaryan2018-03-111-3/+5
|
* dynamic inventory bug when group exists but its emptyMangirdas2018-02-021-1/+1
|
* Revert "Revert "use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable ↵Ben Parees2018-01-291-1/+1
| | | | to set the registry hostname""
* Revert "use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set ↵Ben Parees2018-01-271-1/+1
| | | | the registry hostname"
* Merge pull request #6830 from bparees/registry_addrOpenShift Merge Robot2018-01-241-1/+1
|\ | | | | | | | | Automatic merge from submit-queue. use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the registry hostname
| * use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the ↵Ben Parees2018-01-231-1/+1
| | | | | | | | | | | | | | | | registry hostname bug 1537593 https://bugzilla.redhat.com/show_bug.cgi?id=1537593
* | Merge pull request #6718 from sdodson/bz1533658Scott Dodson2018-01-241-1/+0
|\ \ | |/ |/| Remove unused symlink
| * Remove unused symlinkScott Dodson2018-01-131-1/+0
| |
* | Merge pull request #6696 from sdodson/bz1532973Scott Dodson2018-01-171-0/+13
|\ \ | |/ |/| Add missing task that got dropped in a refactor
| * Add missing task that got dropped in a refactorScott Dodson2018-01-161-0/+13
| | | | | | | | Removed in 28b254886bf17251e973bfdad4dd4c89e26187fc
* | Move more plugins to lib_utilsMichael Gugino2018-01-101-0/+1
|/ | | | | | | This commit continues moving plugins into lib_utils. This commit does not move any plugins for add-on roles such as logging and metrics.
* Migrate to import_role for static role inclusionScott Dodson2018-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | In Ansible 2.2, the include_role directive came into existence as a Tech Preview. It is still a Tech Preview through Ansible 2.4 (and in current devel branch), but with a noteable change. The default behavior switched from static: true to static: false because that functionality moved to the newly introduced import_role directive (in order to stay consistent with include* being dynamic in nature and `import* being static in nature). The dynamic include is considerably more memory intensive as it will dynamically create a role import for every host in the inventory list to be used. (Also worth noting, there is at the time of this writing an object allocation inefficiency in the dynamic include that can in certain situations amplify this effect considerably) This change is meant to mitigate the pressure on memory for the Ansible control host. We need to evaluate where it makes sense to dynamically include roles and revert back to dynamic inclusion if and where it makes sense to do so.
* Move wait_for_pods to it's own play openshift_hostedMichael Gugino2017-12-214-32/+9
| | | | | | | | | | | | | Currently, both registry and router pods need to be polled for successful deployment. Somtimes this can take up to a minute. This commit attempts to deploy both pods before polling either. This should reduce the average wait time for polling pods by 50% as time spent polling the first will also allow the second pod to continue it's own deployment.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-202-4/+4
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-182-5/+5
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Fix openshift hosted registry rolloutRussell Teague2017-12-111-1/+1
|
* Include Deprecation: Convert to include_tasksRussell Teague2017-12-064-15/+11
|
* Fix hosted varsMichael Gugino2017-12-057-39/+28
| | | | | | Remove hosted vars from openshift_facts. The current pattern is causing a bunch of undesired sideffects.
* Implement container runtime roleMichael Gugino2017-12-011-1/+1
|
* Merge pull request #5723 from mjudeikis/gluster-registry-backendScott Dodson2017-11-293-2/+36
|\ | | | | Add external glusterfs backend to hosted and glusterfs playbook
| * Add support for external glusterfs as registry backendMangirdas2017-11-213-2/+36
| |
* | dist.iteritems() no longer exists in Python 3.Jan Pazdziora2017-11-271-1/+1
| |
* | Merge pull request #6090 from dustymabe/dustyMichael Gugino2017-11-221-9/+2
|\ \ | |/ |/| hosted_registry: clean up tmp mount point and fstab
| * hosted_registry: clean up tmp mount point and fstabDusty Mabe2017-11-101-9/+2
| | | | | | | | Fixes #6004
* | Removed old version codeMichael Gugino2017-11-141-1/+1
|/ | | | | | This commit removes any references to versions < 1.5/3.5 We assume the version is always greater than or equal to 1.5/3.5.
* Merge pull request #5571 from vshn/registryip1OpenShift Merge Robot2017-11-091-0/+1
|\ | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Allow cluster IP for docker-registry service to be set For historical reasons a small set of programs in our environments rely on the cluster-internal Docker registry having the IP address "172.30.1.1". So far we always had to patch in that address manually. Adding a variable on the "openshift_hosted" role allows the IP address to be set correctly when a cluster is installed.
| * Allow cluster IP for docker-registry service to be setMichael Hanselmann2017-10-191-0/+1
| | | | | | | | | | | | | | | | For historical reasons a small set of programs in our environments rely on the cluster-internal Docker registry having the IP address "172.30.1.1". So far we always had to patch in that address manually. Adding a variable on the "openshift_hosted" role allows the IP address to be set correctly when a cluster is installed.
* | [Bug 1509354] Check if routers have certificates and use themKenny Woodson2017-11-071-3/+6
|/
* Include openshift_hosted when redeploying router certificates to handle ↵Andrew Butcher2017-09-291-3/+3
| | | | auto-generated wildcard certificate or custom openshift_hosted_router_certificate.
* Refactor openshift_hosted plays and roleMichael Gugino2017-09-2514-145/+94
| | | | | | | | | | | | Currently, openshift_hosted role duplicates some logic across separate task chains. This commit cleans up the openshift_hosted role and converts it to be primarily used with include_role to give better logic to the playbooks that utilize this role. This commit also refactors the playbook that calls various openshift_hosted roles into individual playbooks. This allows more granularity for advanced users.
* Merge pull request #5156 from mangirdaz/5155-hotfixOpenShift Merge Robot2017-09-181-1/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue hot fix for env variable resolve If we use environment variables in our inventory files (and from what I seen we do this everywhere where We deploy OCP) our fact engine ignores env variables so if my path looks like ``` openshift_hosted_registry_routecertificates={"certfile": "{{inventory_dir}}/../files/certs/wildcard.registry.company.local.crt", "keyfile": "{{inventory_dir}}/../files/certs/wildcard.registry.companylocal.key", "cafile":"{{inventory_dir}}/../files/certs/CompanyLocalRootCA.crt"} openshift_hosted_registry_routehost=containers.registry.comany.local ``` the result is: `/../files/certs/RoSLocalRootCA.crt` We need to fix our fact set in a long run to read Ansible variables. And it was done in the same way with router certificates already.
| * hot fix for env variable resolveMangirdas2017-08-221-1/+1
| |
* | Correct logic for openshift_hosted_*_waitRussell Teague2017-09-122-2/+2
| |
* | Workaround Ansible Jinja2 delimiter warningRussell Teague2017-09-122-2/+2
| | | | | | | | | | | | | | This workaround prevents the warnings on using Jinja2 templating delimiters in `when:` conditions in cases where a variable is used as the conditional. This has been fixed in Ansible 2.4. https://github.com/ansible/ansible/pull/25092
* | Merge pull request #5162 from aerialls/patch-2OpenShift Bot2017-09-071-9/+9
|\ \ | | | | | | Merged by openshift-bot
| * | reverse order between router cert generationJulien Brochet2017-08-231-9/+9
| | |
| * | ensured to always use a certificate for the routerJulien Brochet2017-08-221-1/+1
| |/
* | Merge pull request #5148 from kwoodson/registry_proxy_updatesOpenShift Bot2017-09-061-0/+8
|\ \ | | | | | | Merged by openshift-bot
| * | Adding proxy env vars for dc/docker-registryKenny Woodson2017-08-211-0/+8
| | |
* | | Merge pull request #5178 from sdodson/fix-registry-certScott Dodson2017-08-251-0/+3
|\ \ \ | | | | | | | | Add missing hostnames to registry cert
| * | | Add missing hostnames to registry certScott Dodson2017-08-231-0/+3
| | | |
* | | | Merge pull request #5011 from kwoodson/provisionScott Dodson2017-08-232-59/+63
|\ \ \ \ | |/ / / |/| | | AWS Provisioning with scale groups.
| * | | First attempt at provisioning.Kenny Woodson2017-08-212-59/+63
| |/ /
* | | Merge pull request #5120 from smarterclayton/allow_gcs_registryScott Dodson2017-08-232-2/+14
|\ \ \ | |_|/ |/| | Allow GCS object storage to be configured
| * | Allow GCS object storage to be configuredClayton Coleman2017-08-172-2/+14
| |/ | | | | | | | | | | Previously, setting the GCS registry object storage settings resulted in an invalid configuration. This generates a registry-config secret that has the correct file if the GCS config is set.
* | Merge pull request #4254 from dmsimard/registry_certsScott Dodson2017-08-214-49/+138
|\ \ | |/ |/| Refactor openshift_hosted's docker-registry route setup
| * Refactor openshift_hosted's docker-registry route setupDavid Moreau-Simard2017-07-234-49/+138
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We have identified an issue where a docker-registry service set up as 'reencrypt' with a provided certificate and a self-signed certificate on the pod does not authorize users to push images. If the docker-registry service is set up as 'passthrough' with the same provided certificate, everything works. In light of this, this commit essentially adds support for configuring provided certificates with a passthrough route while maintaining backwards compatibility with the other use cases. The default remains 'passthrough' with self-generated certificates. Other miscellaneous changes include: - Move fact setup that were only used in secure.yml there - Omit the hostname for the route if there are none to configure, oc_route takes care of handling the default - Replace hardcoded /etc/origin/master by openshift_master_config_dir
* | Updated README to reflect refactor. Moved firewall initialize into separate ↵Kenny Woodson2017-08-102-4/+4
| | | | | | | | file.
* | Adding a default condition and removing unneeded defaults.Kenny Woodson2017-08-092-8/+8
| |