summaryrefslogtreecommitdiffstats
path: root/roles/openshift_service_catalog
Commit message (Collapse)AuthorAgeFilesLines
* Fix indentation to make yamllint happyVadim Rutkovsky2018-02-101-28/+28
| | | | Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* Verify that requested services have schedulable nodes matching the selectorsVadim Rutkovsky2018-02-101-1/+0
| | | | Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* Normalize the time we wait for pods to 5s * 60 retriesScott Dodson2018-02-091-2/+2
|
* Set default image tag to openshift_image_tag for servicesVadim Rutkovsky2018-02-082-2/+2
| | | | Signed-off-by: Vadim Rutkovsky <vrutkovs@redhat.com>
* Merge pull request #6860 from jpeeler/aggregate-name-changeScott Dodson2018-01-294-106/+97
|\ | | | | Update catalog role patching to use new names
| * Change catalog roles install to use aggregationJeff Peeler2018-01-244-106/+97
| | | | | | | | | | | | | | | | Recently it was changed for openshift cluster roles to be reconciled via the aggregate-to* label, so this is now updated. Rather than generating portions of the file, simply use the auth reconciler and let it handle any necessary role updates. Also, since it is theoretically possible for conflicts to occur, retry reconciliation several times.
* | Bug 1524805- ServiceCatalog now works disconnectedFabian von Feilitzsch2018-01-222-2/+2
|/ | | | | Change imagePullPolicy for service catalog from Always to IfNotPresent, allowing service catalog to install in a disconnected setting
* Merge pull request #6705 from jpeeler/add-async-bindings-varScott Dodson2018-01-132-1/+6
|\ | | | | Add var for catalog controller to enable async bindings
| * Add var for controller to enable async bindingsJeff Peeler2018-01-112-1/+6
| | | | | | | | | | | | | | | | | | | | New variable is called 'openshift_service_catalog_async_bindings_enabled' and is set to false by default. Also, fixed a typo in the controller template for the DaemonSet update strategy, which caused the strategy to be set to OnDelete rather than the intended RollingUpdate.
* | Update deployment and apiserver with new certsJeff Peeler2018-01-103-6/+4
|/ | | | | | | | | | | Since new certificates are generated for every run, the apiservice caBundle needs updating in order to have the on disk CA match what is in Kubernetes. Because the secrets are updated, the daemonset needs to do a rolling update for the api server to pick up the new certs. Implemented here is an added annotation to the api server such that the update occurs automatically when the CA is changed.
* Remove references to deployment_typeMichael Gugino2017-12-211-2/+2
| | | | | | | Move openshift_deployment_type check into sanity_check action plugin. Remove compatibility for deployment_type. deployment_type has been deprecated for some time now.
* Remove openshift.common.{is_atomic|is_containerized}Michael Gugino2017-12-203-9/+9
| | | | | We set these variables using facts in init, no need to duplicate the logic all around the codebase.
* Relocate filter plugins to lib_utilsMichael Gugino2017-12-182-7/+7
| | | | | | | | | | | | | | This commit relocates filter_plugings to lib_utils, changes the namespacing to prevent unintended use of older versions that may be present in filter_plugins/ directory on existing installs. Add lib_utils to meta depends for roles Also consolidate some plugins into lib_utils from various other areas. Update rpm spec, obsolete plugin rpms.
* Merge pull request #6259 from adelton/issue-6255Michael Gugino2017-11-282-2/+2
|\ | | | | dist.iteritems() no longer exists in Python 3.
| * dist.iteritems() no longer exists in Python 3.Jan Pazdziora2017-11-272-2/+2
| |
* | Include Deprecation - openshift-service-catalogRussell Teague2017-11-222-4/+4
|/
* Give service-catalog controller-manager permissions to update status of ↵staebler2017-11-061-0/+2
| | | | ClusterServiceClasses and ClusterServicePlans
* Merge pull request #5959 from sdodson/sc-asb-tsb-on-by-defaultOpenShift Merge Robot2017-11-033-8/+8
|\ | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Enable SC, ASB, TSB by default It was decided that SC, ASB, and TSB should be installed by default. This will not install the components on an upgrade from 3.6 to 3.7, that will require that you run the sc playbook on your own. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1508085
| * Use client binary and well defined kubeconfigScott Dodson2017-11-023-8/+8
| |
* | Give admin and edit roles permission to patch ServiceInstances and ↵staebler2017-11-012-4/+5
|/ | | | ServiceBindings
* Add rules to the view ClusterRole for service catalog.staebler2017-10-303-2/+36
|
* Update the name of the service-catalog binarystaebler2017-10-262-2/+4
|
* Merge pull request #5806 from staebler/service_catalog_uninstall_issuesOpenShift Merge Robot2017-10-245-12/+36
|\ | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue. Fix a few small issues in service catalog uninstall * Service catalog install was not re-creating the apiserver.crt and apiserver.key files when generating certs. But the ca.crt and ca.key files were being re-created. This was causing non-verifiable certs to be used when service catalog was uninstalled and re-installed. The service catalog installer was changed to delete the apiserver.crt and apiserver.key files so that they are re-created using the new ca.crt and ca.key files. * The asb auth token secret was not being deleted correctly and causing the uninstaller to fail. * The asb uninstaller was attempting to delete the broker registration from the service catalog. However, the service catalog is uninstalled first. When the asb uninstaller would fail when attempting to delete the ClusterServiceBroker. The uninstaller was changed to verify that the servicecatalog APIService exists first before attempting to delete the ClusterServiceBroker. * The service catalog uninstaller was attempting to delete policybindings. The server does not have a resource type name policybinding. I do not know what the intention is there, but I have commented out that part of the uninstaller.
| * Remove extraneous spaces that yamllint dislikesstaebler2017-10-231-3/+3
| |
| * Remove role bindings during service catalog un-installstaebler2017-10-224-13/+26
| |
| * Fix a few small issues in service catalog uninstallstaebler2017-10-222-3/+14
| |
* | Fix edit and admin role patching for service catalogstaebler2017-10-231-2/+2
|/
* Add apiserver.crt to service-catalog controller-manager deployment.staebler2017-10-172-0/+21
|
* Remove redundant faulty role binding ifrom kubeservicecatalog_roles_bindings.ymlstaebler2017-10-172-14/+1
|
* Update service catalog playbook for service-catalog rc1staebler2017-10-147-64/+104
|
* Bumping version of service catalog image for 3.7Eric Wolinetz2017-10-051-1/+1
|
* OpenShift-Ansible Installer CheckpointingRussell Teague2017-09-272-217/+0
| | | | | | | | | | | - Added installer_checkpoint role and callback plugin - Added checkpoint 'Start' and 'End' plays to each installation phase Additional items related to enabling proper checkpointing: - Removed openshift_set_hostname and related task (related to 3.0) - Added openshift-hosted entry point playbook - Moved openshift metrics and logging out of openshift_hosted playbook - Moved API Aggregation play to master install
* Merge pull request #5530 from ewolinetz/bz1487959OpenShift Merge Robot2017-09-261-4/+16
|\ | | | | | | | | | | | | | | Automatic merge from submit-queue Updating to check for netnamespace kube-service-catalog to be ready When we are using the sdn multitentant plugin we need to wait for the netnamespace to be ready before we can make it a global project Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1487959
| * Updating to check for netnamespace kube-service-catalog to be readyEric Wolinetz2017-09-251-4/+16
| |
* | Generate aggregator api client config in temporary directory.Andrew Butcher2017-09-251-11/+29
|/
* Merge pull request #5226 from ewolinetz/template_service_brokerOpenShift Merge Robot2017-09-212-10/+2
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | Automatic merge from submit-queue Creating initial tsb role to consume and apply templates provided for… … tsb cc: @deads2k @sdodson Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1486623 https://bugzilla.redhat.com/show_bug.cgi?id=1470623 https://bugzilla.redhat.com/show_bug.cgi?id=1491626
| * Creating initial tsb role to consume and apply templates provided for tsbEric Wolinetz2017-09-202-10/+2
| |
* | Updating to always configure api aggregation with installationEric Wolinetz2017-09-202-5/+2
|/
* Removing setting of pod presetsEric Wolinetz2017-09-131-1/+0
|
* Remove openshift-commonMichael Gugino2017-09-062-1/+5
| | | | | | | | | Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
* Updating openshift_service_catalog to use oc_service over oc_obj to resolve ↵Eric Wolinetz2017-08-283-48/+22
| | | | idempotency issues being seen from rerunning role
* Remove the origin-master.service and associated filesClayton Coleman2017-08-081-8/+0
| | | | | | From now on, all master configurations use the api / controller split, regardless of HA mode or previous configuration. This will be our only supported configuration starting in 3.7 or 3.8.
* Fixing podpresets perms for service-catalog-controllerewolinetz2017-07-261-1/+5
|
* Updating verbs for serviceclasses objectsewolinetz2017-07-201-0/+6
|
* Setting node selector to be empty stringewolinetz2017-07-181-1/+1
|
* Adding podpreset config into master-configewolinetz2017-07-181-0/+6
|
* Updating to compare sets instead of sorted listsewolinetz2017-07-171-4/+4
|
* Adding ability to create podpreset for service-catalog-controller for bz1471881ewolinetz2017-07-171-0/+6
|
* Updating to use oc replace and conditionally update edit and admin rolesewolinetz2017-07-171-2/+14
|
* Adding in permissions to edit and admin cluster rolesewolinetz2017-07-142-0/+60
|