forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
openshift-ansible.spec
3116 lines (2934 loc) · 159 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
Name: openshift-ansible
Version: 3.5.3
Release: 1%{?dist}
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.2.0.0-1
Requires: python2
Requires: python-six
Requires: tar
Requires: openshift-ansible-docs = %{version}-%{release}
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: python-ruamel-yaml
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
# atomic-openshift-utils install
pushd utils
%{__python} setup.py build
popd
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible_plugins
cp -rp library %{buildroot}%{_datadir}/ansible/%{name}/
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/byo/* docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# openshift-ansible-filter-plugins install
cp -rp filter_plugins %{buildroot}%{_datadir}/ansible_plugins/
# openshift-ansible-lookup-plugins install
cp -rp lookup_plugins %{buildroot}%{_datadir}/ansible_plugins/
# openshift-ansible-callback-plugins install
cp -rp callback_plugins %{buildroot}%{_datadir}/ansible_plugins/
# create symlinks from /usr/share/ansible/plugins/lookup ->
# /usr/share/ansible_plugins/lookup_plugins
pushd %{buildroot}%{_datadir}
mkdir -p ansible/plugins
pushd ansible/plugins
ln -s ../../ansible_plugins/lookup_plugins lookup
ln -s ../../ansible_plugins/filter_plugins filter
ln -s ../../ansible_plugins/callback_plugins callback
popd
popd
# atomic-openshift-utils install
pushd utils
%{__python} setup.py install --skip-build --root %{buildroot}
# Remove this line once the name change has happened
mv -f %{buildroot}%{_bindir}/oo-install %{buildroot}%{_bindir}/atomic-openshift-installer
mkdir -p %{buildroot}%{_datadir}/atomic-openshift-utils/
cp etc/ansible.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible.cfg
mkdir -p %{buildroot}%{_mandir}/man1/
cp -v docs/man/man1/atomic-openshift-installer.1 %{buildroot}%{_mandir}/man1/
cp etc/ansible-quiet.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
popd
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/library
%ghost %{_datadir}/ansible/%{name}/playbooks/common/openshift-master/library.rpmmoved
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}
Requires: %{name}-roles = %{version}
Requires: %{name}-lookup-plugins = %{version}
Requires: %{name}-filter-plugins = %{version}
Requires: %{name}-callback-plugins = %{version}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# We moved playbooks/common/openshift-master/library up to the top and replaced
# it with a symlink. RPM doesn't handle this so we have to do some pre-transaction
# magic. See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the path to directory being replaced below.
-- DO NOT add a trailing slash at the end.
path = "/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library"
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}
Requires: %{name}-lookup-plugins = %{version}
Requires: %{name}-filter-plugins = %{version}
Requires: %{name}-callback-plugins = %{version}
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
# ----------------------------------------------------------------------------------
# openshift-ansible-filter-plugins subpackage
# ----------------------------------------------------------------------------------
%package filter-plugins
Summary: Openshift and Atomic Enterprise Ansible filter plugins
Requires: %{name} = %{version}
BuildArch: noarch
Requires: pyOpenSSL
%description filter-plugins
%{summary}.
%files filter-plugins
%{_datadir}/ansible_plugins/filter_plugins
%{_datadir}/ansible/plugins/filter
# ----------------------------------------------------------------------------------
# openshift-ansible-lookup-plugins subpackage
# ----------------------------------------------------------------------------------
%package lookup-plugins
Summary: Openshift and Atomic Enterprise Ansible lookup plugins
Requires: %{name} = %{version}
BuildArch: noarch
%description lookup-plugins
%{summary}.
%files lookup-plugins
%{_datadir}/ansible_plugins/lookup_plugins
%{_datadir}/ansible/plugins/lookup
# ----------------------------------------------------------------------------------
# openshift-ansible-callback-plugins subpackage
# ----------------------------------------------------------------------------------
%package callback-plugins
Summary: Openshift and Atomic Enterprise Ansible callback plugins
Requires: %{name} = %{version}
BuildArch: noarch
%description callback-plugins
%{summary}.
%files callback-plugins
%{_datadir}/ansible_plugins/callback_plugins
%{_datadir}/ansible/plugins/callback
# ----------------------------------------------------------------------------------
# atomic-openshift-utils subpackage
# ----------------------------------------------------------------------------------
%package -n atomic-openshift-utils
Summary: Atomic OpenShift Utilities
BuildRequires: python-setuptools
Requires: %{name}-playbooks >= %{version}
Requires: python-click
Requires: python-setuptools
Requires: PyYAML
BuildArch: noarch
%description -n atomic-openshift-utils
Atomic OpenShift Utilities includes
- atomic-openshift-installer
- other utilities
%files -n atomic-openshift-utils
%{python_sitelib}/ooinstall*
%{_bindir}/atomic-openshift-installer
%{_datadir}/atomic-openshift-utils/ansible.cfg
%{_mandir}/man1/*
%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
%changelog
* Tue Jan 31 2017 Scott Dodson <[email protected]> 3.5.3-1
- Adding bool filter to ensure that we correctly set ops host for fluentd
- Set default GCE hostname to shost instance name. ([email protected])
- Fail on Ansible version 2.2.1.0 ([email protected])
- During node upgrade upgrade openvswitch rpms ([email protected])
- HTPASSWD_AUTH ([email protected])
- Added repoquery to lib_utils. ([email protected])
- Create v3_5 upgrade playbooks ([email protected])
- GCE deployment fails due to invalid lookup ([email protected])
- Resolving yamllint issues from logging playbooks ([email protected])
- Updating openshift_hosted_logging to update master-configs with
publicLoggingURL ([email protected])
- Added oc_serviceaccount to lib_openshift. ([email protected])
- Breaking out master-config changing and updated playbook to apply change to
other masters ([email protected])
- fix negative stride encountered from openshift_logging ([email protected])
- add persistent versions of quickstarts ([email protected])
- Fixing docs. Added bugzilla to doc. ([email protected])
- ensuring ruamel.yaml is on target for oc_scale ([email protected])
- Updating to correctly pull handler for openshift_logging. Adding logic to
openshift_hosted_logging too ([email protected])
- Adding names to plays and standardizing ([email protected])
- Updating openshift_logging role to add kibana public url to loggingPublicURL
in master-config ([email protected])
- Only manual scale down being allowed now ([email protected])
- adopt oc_scale for openshift_metrics role ([email protected])
- fix 1414625. Additional fix to run password commands on control node
- adopt oc_scale module for openshift_logging role ([email protected])
- Adding fix for when the resource does not exist. Added test cases.
- Updating to reuse previous ES DC names and always generate DCs
- Correct usage of draining nodes ([email protected])
- Fixing fluentd node labelling ([email protected])
- Fixing linters. ([email protected])
- Fixing base.py for node and scale. Autogenerated code. ([email protected])
- Added unit integration tests. Enhanced unit tests. Fixed an issue in
openshift_cmd for namespace. ([email protected])
- Adding oadm_manage_node to lib_openshift. ([email protected])
- Fixing namespace param in doc to reflect default value. ([email protected])
- .gitignore cleanup ([email protected])
- Standardize add_host: with name and changed_when ([email protected])
- Adding banners. Small bug fix to namespace appending in base.
- Comma separate no_proxy host list in openshift_facts so that it appears as a
string everywhere it is used. ([email protected])
- Fixing tests and linting. ([email protected])
- Adding unit test for oc_scale ([email protected])
- Adding integration test for oc_scale. ([email protected])
- Adding oc_scale to lib_openshift. ([email protected])
- Add 10 second wait after disabling firewalld ([email protected])
- Added oc_secret to lib_openshift. ([email protected])
- Remove master_count restriction. ([email protected])
- flake8 mccabe dependency fix ([email protected])
- Generate the artifacts from fragments. ([email protected])
- Update the generators to include fragment banners ([email protected])
- Make use of AnsibleDumper in openshift_master filters s.t. we can represent
AnsibleUnsafeText when dumping yaml. ([email protected])
- Set metrics url even if metrics_deploy is false
- Template update for Hawkular Metrics 0.23 ([email protected])
* Wed Jan 25 2017 Scott Dodson <[email protected]> 3.5.2-1
- Sync latest image streams ([email protected])
- Fix containerized haproxy config ([email protected])
- Allow RHEL subscription for OSE 3.4 ([email protected])
- fixes BZ-1415447. Error when stopping heapster. Modify to be conditional
include ([email protected])
- override nodename for gce with cloudprovider ([email protected])
- fixes jks generation, node labeling, and rerunning for oauth secrets
- allow openshift_logging role to specify nodeSelectors ([email protected])
- Remove is_containerized check for firewalld installs ([email protected])
- Clean up pylint for delete_empty_keys. ([email protected])
- [os_firewall] Fix default iptables args. ([email protected])
- Add new option 'openshift_docker_selinux_enabled' ([email protected])
- Temporary work-around for flake8 vs maccabe version conflict
- do not set empty proxy env variable defaults ([email protected])
- fix BZ1414477. Use keytool on control node and require java
- Remove unused temporary directory in master config playbook.
- Added link to HOOKS in README ([email protected])
- HOOKS.md added documenting new hooks ([email protected])
- [os_firewall] Add -w flag to wait for iptables xtables lock.
- fixes BZ-1414625. Check for httpd-tools and java before install
- Add a mid upgrade hook, re-prefix variables. ([email protected])
- treat force_pull as a bool ([email protected])
- Adding to ansible spec and changing logging jks generation to be a
local_action ([email protected])
- Add containzerized haproxy option ([email protected])
- Reorder node dnsmasq dependency s.t. networkmanager is restarted after
firewall changes have been applied. ([email protected])
- Removing docker run strategy and make java a requirement for control host
- Adding version to lib_openshift ([email protected])
- Updating to use docker run instead of scheduling jks gen pod
- jenkins v1.3 templates should not enable oauth ([email protected])
- fix oc_apply to allow running on any control node ([email protected])
- g_master_mktemp in openshift-master conflicts with
openshift_master_certificates ([email protected])
- fixes #3127. Get files for oc_apply from remote host ([email protected])
- Debug message before running hooks. ([email protected])
- Cleaning repo cache earlier ([email protected])
- Added tar as a requirement per BZ1388445 ([email protected])
- fixes BZ141619. Corrects the variable in the README ([email protected])
- Run user provided hooks prior to system/service restarts.
- Implement pre/post master upgrade hooks. ([email protected])
- Adding oc_obj to the lib_openshift library ([email protected])
- Addressing found issues with logging role ([email protected])
- Updated the generate.py scripts for tox and virtualenv. ([email protected])
- Adding tox tests for generated code. ([email protected])
- Perform master upgrades in a single play serially. ([email protected])
- Validate system restart policy during pre-upgrade. ([email protected])
- Correct consistency between upgrade playbooks ([email protected])
- Wait for nodes to be ready before proceeding with upgrade.
* Wed Jan 18 2017 Scott Dodson <[email protected]> 3.5.1-1
- More reliable wait for master after full host reboot. ([email protected])
- kubelet must have rw to cgroups for pod/qos cgroups to function
- Adding a few updates for python27,35 compatibility ([email protected])
- update examples to cover build default/override configuration
- Fix yaml lint in easy-mode playbook ([email protected])
- Removed trailing spaces from line #34 ([email protected])
- Install subscription-manager to fix issue-3102 ([email protected])
- Changing formatting for issue#2244 update ([email protected])
- Addressing Travis errors ([email protected])
- Adding --verfiy to generate script. ([email protected])
- v1.3 Add RHAMP ([email protected])
- Update v1.4 content, add api-gateway ([email protected])
- Add v1.5 content ([email protected])
- Update example sync script ([email protected])
- use pod to generate keystores (#14) ([email protected])
- Ensure serial certificate generation for node and master certificates.
- [Cert Expiry] Add serial numbers, include example PBs, docs
- properly set changes when oc apply ([email protected])
- additional cr fixes ([email protected])
- metrics fixes for yamlint ([email protected])
- additional code reviews ([email protected])
- set replicas to current value so not to disrupt current pods (#13)
- User provided certs pushed from control. vars reorg (#12)
- update vars to allow scaling of components (#9)
- allow definition of cpu/memory limits/resources (#11)
- rename variables to be less extraneous (#10)
- copy admin cert for use in subsequent tasks (#8)
- Add tasks to uninstall metrics (#7) ([email protected])
- Custom certificates (#5) ([email protected])
- prefix vars with metrics role (#4) ([email protected])
- Bruno Barcarol Guimarães work to move metrics to ansible from deployer
- Adding oc_edit module to lib_openshift. ([email protected])
- Create individual serving cert and loopback kubeconfig for additional
masters. ([email protected])
- add configuration for build default+overrides settings ([email protected])
- delete idempotent ([email protected])
- additional comments addressed ([email protected])
- Updating upgrade_logging to be more idempotent ([email protected])
- Using oc_apply task for idempotent ([email protected])
- Removing shell module calls and cleaning up changed ([email protected])
- lib_openshift modules. This is the first one. oc_route.
- Updated modify_yaml with docstring and clarifications ([email protected])
- Rename subrole facts -> init ([email protected])
- Move Python modules into role ([email protected])
- Document playbook directories ([email protected])
- Document bin/cluster tool ([email protected])
- keys should be lowercase according to the spec ([email protected])
- filter: Removed unused validation calls ([email protected])
- Updated initializer usage in filters ([email protected])
- fix when statement indentation, cast to bool ([email protected])
- add openshift_facts as role dependency ([email protected])
- Added setup.py to flake8 tests ([email protected])
- Do not default registry storage kind to 'nfs' when 'nfs' group exists.
- Fix inconsistent task name ([email protected])
- Reduce code duplication using variable ([email protected])
- Another proposed update to the issue template ([email protected])
- Replace custom variables with openshift_facts ([email protected])
- Catch DBus exceptions on class initialization ([email protected])
- addressing comments ([email protected])
- Move playbook to BYO ([email protected])
- Fix typo in inventory README.md ([email protected])
- Refactor preflight check into roles ([email protected])
- Make flake8 (py35) happy on bare except ([email protected])
- Make callback plugin an always-on aggregate plugin ([email protected])
- Add RPM checks as an adhoc playbook ([email protected])
- first swing at release version wording ([email protected])
- Correct tox to run on Travis ([email protected])
- Adding ability to systematically modify yaml from ansible.
- oo_filters: Moved static methods to functions ([email protected])
- Correct return code compairison for yamllint ([email protected])
- Add a fact to select --evacuate or --drain based on your OCP version
- Update branch status ([email protected])
- rename openshift_metrics to openshift_hosted_metrics ([email protected])
- Update aws dynamic inventory ([email protected])
- improve issue template ([email protected])
- cleanup: Removed debug prints from tests ([email protected])
- remove debug statement from test ([email protected])
- Support openshift_node_port_range for configuring service NodePorts
- Workaround for dnf+docker version race condition ([email protected])
- use etcdctl from the container when containerized=True ([email protected])
- Partial uninstall ([email protected])
- increase test coverage ([email protected])
- Update aws dynamic inventory ([email protected])
- update travis to use tox for utils ([email protected])
- More toxification ([email protected])
- add test for utils to bump coverage ([email protected])
- The scaleup subcommand does not support the unattended option
- Move role dependencies out of playbooks for openshift_master, openshift_node
and openshift_hosted. ([email protected])
- Remove unused file ([email protected])
- Remove unused file ([email protected])
- Remove spurious argument ([email protected])
- Fixing collision of system.admin cert generation ([email protected])
- minor updates for code reviews, remove unused params ([email protected])
- Updating to use deployer pod to generate JKS chain instead
- Creating openshift_logging role for deploying Aggregated Logging without a
deployer image ([email protected])
- Begin requiring Docker 1.12. ([email protected])
* Mon Jan 09 2017 Scott Dodson <[email protected]> 3.5.0-1
- Update manpage version. ([email protected])
- Fix openshift_image_tag=latest. ([email protected])
- Use registry.access.redhat.com/rhel7/etcd instead of etcd3
- Fix repo defaults ([email protected])
- Use openshift.common.hostname when verifying API port available.
- Re-add when condition which was removed mistakenly in #3036
- logging-deployer pull fixes from origin-aggregated-logging/#317
- Don't upgrade etcd on atomic host, ever. ([email protected])
- Change wording in the quick installer callback plugin ([email protected])
- Fix jsonpath expected output when checking registry volume secrets
- Enable repos defined in openshift_additional_repos by default
- Add required python-six package to installation ([email protected])
- Hush the sudo privs check in oo-installer ([email protected])
- Add future versions to openshift_facts ([email protected])
- Cast openshift_enable_origin_repo to bool. ([email protected])
- Update CFME template to point to GA build ([email protected])
- Update aoi manpage with correct operation count ([email protected])
- Add templates for CFME Beta pod images ([email protected])
- Add osnl_volume_reclaim_policy variable to nfs_lvm role
- remove duplicate filter name and oo_pdb ([email protected])
- remove old Ops tooling ([email protected])
- enable pip cache for travis ([email protected])
- python3 support, add tox for better local testing against multiple python
versions ([email protected])
- modify_yaml: handle None value during update. ([email protected])
- Update the openshift-certificate-expiry README to reflect latest changes
- Deprecate node 'evacuation' with 'drain' ([email protected])
- Add master config hook for 3.4 upgrade and fix facts ordering for config hook
run. ([email protected])
- The next registry.access.redhat.com/rhel7/etcd image will be 3.0.15
- [uninstall] Remove excluder packages ([email protected])
- Check embedded etcd certs now, too ([email protected])
- Include 'total' and 'ok' in check results ([email protected])
- Enable firewalld by default ([email protected])
- Fix access_modes initialization ([email protected])
- Updated OpenShift Master iptables rules ([email protected])
- YAML Linting ([email protected])
- Make both backup and upgrade optional ([email protected])
- [upgrades] Upgrade etcd by default ([email protected])
- upgrades - Fix logic error about when to backup etcd ([email protected])
- Limit node certificate SAN to node hostnames/ips. ([email protected])
- Make 'cover-erase' a config file setting. Move VENT target to pre-req for all
ci-* targets ([email protected])
- Fixes to 'make ci' ([email protected])
- Resolved lint issues ([email protected])
- Minimum Ansible version check ([email protected])
- Removed verify_ansible_version playbook refs ([email protected])
- Fix coverage not appending new data ([email protected])
- Drop 3.2 upgrade playbooks. ([email protected])
- Silence warnings when using rpm directly ([email protected])
- Silence warnings when using rpm directly ([email protected])
- Silence warnings when using rpm directly ([email protected])
- Remove Hostname from 1.1 and 1.2 predicates ([email protected])
- Properly handle x.y.z formatted versions for openshift_release
- etcd_upgrade: Simplify package installation ([email protected])
- Speed up 'make ci' and trim the output ([email protected])
- add comments and remove debug code ([email protected])
- Pre-pull master/node/ovs images during upgrade. ([email protected])
- Handle updating of scheduler config during upgrade ([email protected])
- Fix templating ([email protected])
- test updates ([email protected])
- Always install latest etcd for containerized hosts ([email protected])
- etcd_upgrade : Use different variables for rpm vs container versions
- Switch back to using etcd rather than etcd3 ([email protected])
- node_dnsmasq - restart dnsmasq if it's not currently running
- Conditionalize master config update for admission_plugin_config.
- upgrade_control_plane.yml: systemd_units.yaml nees the master facts
- openshift-master/restart : use openshift.common.hostname instead of
inventory_hostname ([email protected])
- Update scheduler predicate/priorities vars ([email protected])
- fix tags ([email protected])
- openshift_node_dnsmasq - Remove strict-order option from dnsmasq
- Fix metricsPublicURL only being set correctly on first master.
- Explictly set etcd vars for byo scaleup ([email protected])
- Cleanup ovs file and restart docker on every upgrade. ([email protected])
- Sync latest image stream and templates for v1.3 and v1.4 ([email protected])
- xpaas v1.3.5 ([email protected])
- Ansible version check update ([email protected])
- allow 'latest' origin_image_tag ([email protected])
- Remove duplicate when key ([email protected])
- refactor handling of scheduler defaults ([email protected])
- update tests and flake8/pylint fixes ([email protected])
- fix tagging ([email protected])
- do not report changed for group mapping ([email protected])
- fix selinux issues with etcd container ([email protected])
- etcd upgrade playbook is not currently applicable to embedded etcd installs
- Fix invalid embedded etcd fact in etcd upgrade playbook.
- Gracefully handle OpenSSL module absence ([email protected])
- Refactored to use Ansible systemd module ([email protected])
- Updating docs for Ansible 2.2 requirements ([email protected])
- Fix the list done after cluster creation on libvirt and OpenStack
- Set nameservers on DHCPv6 event ([email protected])
- Systemd `systemctl show` workaround ([email protected])
- Verify the presence of dbus python binding ([email protected])
- Update README.md ([email protected])
- Reference master binaries when delegating from node hosts which may be
containerized. ([email protected])
- Merge kube_admission_plugin_config with admission_plugin_config
- Added a BYO playbook for configuring NetworkManager on nodes
- Make the role work on F25 Cloud ([email protected])
- Make os_firewall_manage_iptables run on python3 ([email protected])
- Modified the error message being checked for ([email protected])
- Only run tuned-adm if tuned exists. ([email protected])
- Delegate openshift_manage_node tasks to master host. ([email protected])
- Fix rare failure to deploy new registry/router after upgrade.
- Refactor os_firewall role ([email protected])
- Allow ansible to continue when a node is unaccessible or fails.
- Create the file in two passes, atomicly copy it over ([email protected])
- Escape LOGNAME variable according to GCE rules ([email protected])
- node_dnsmasq -- Set dnsmasq as our only nameserver ([email protected])
- Refactor to use Ansible package module ([email protected])
- Allow users to disable the origin repo creation ([email protected])
- Fix yum/subman version check on Atomic. ([email protected])
- Check for bad versions of yum and subscription-manager. ([email protected])
- Corrected syntax and typos ([email protected])
- Fix GCE cluster creation ([email protected])
- Optimize the cloud-specific list.yml playbooks ([email protected])
- Added ip forwarding for nuage ([email protected])
- Fix typo ([email protected])
- Fix a few places where we're not specifying the admin kubeconfig
- Add rolebinding-reader ([email protected])
- Add view permissions to hawkular sa ([email protected])
- Use multiple '-v's when creating the metrics deployer command
- Sync logging deployer changes from origin to enterprise ([email protected])
- Docker daemon is started prematurely. ([email protected])
- Sync latest enterprise/metrics-deployer.yaml ([email protected])
- Sync latest s2i content ([email protected])
- Actually upgrade host etcdctl no matter what ([email protected])
- Make etcd containerized upgrade stepwise ([email protected])
- Fix commit-offsets in version detection for containerized installs
- Fix HA upgrade when fact cache deleted. ([email protected])
- Fix openshift_hosted_metrics_deployer_version set_fact. ([email protected])
- Added dependency of os_firewall to docker role ([email protected])
- Add updates for containerized ([email protected])
- Add etcd upgrade for RHEL and Fedora ([email protected])
- Drop /etc/profile.d/etcdctl.sh ([email protected])
- Move backups to a separate file for re-use ([email protected])
- Uninstall etcd3 package ([email protected])
- Resolve docker and iptables service dependencies ([email protected])
- Add Travis integration ([email protected])
- Default groups.oo_etcd_to_config when setting embedded_etcd in control plane
upgrade. ([email protected])
- Enable quiet output for all a-o-i commands ([email protected])
- Update override cluster_hostname ([email protected])
- Reconcile role bindings for jenkins pipeline during upgrade.
- Fix typos in openshift_facts gce cloud provider ([email protected])
- Don't upgrade etcd on backup operations ([email protected])
- Bump ansible requirement to 2.2.0.0-1 (GA) ([email protected])
- Fix etcd backup failure due to corrupted facts. ([email protected])
- Re-sync v1.4 image streams ([email protected])
- Revert "Revert openshift.node.nodename changes" ([email protected])
- Change to allow cni deployments without openshift SDN ([email protected])
- README: fix markdown formatting ([email protected])
- Create contribution guide ([email protected])
- Remove README_AEP.md ([email protected])
- Install flannel RPM on containerized but not atomic ([email protected])
- README: move structure overview to the top ([email protected])
- README: cleanup setup steps ([email protected])
- README: remove OSX setup requirements ([email protected])
- Add missing symlink for node openvswitch oom fix. ([email protected])
- README: improve first paragraph ([email protected])
- README: add links, fix typos ([email protected])
- README: improve markdown formatting ([email protected])
- Make it easier to run Python tests ([email protected])
- FIx flannel var name ([email protected])
- Always add local dns domain to no_proxy ([email protected])
- Refactor default sdn_cluster_network_cidr and sdn_host_subnet_length
- Revert "Fix the nodeName of the OpenShift nodes on OpenStack"
- Revert "Fix OpenStack cloud provider" ([email protected])
- Revert "Check that OpenStack hostnames are resolvable" ([email protected])
- set AWS creds task with no_logs ([email protected])
- Change the logic to just compare against masters and nodes.
- Append /inventory/README.md to explain what is BYO inventory folder #2742
- Remove unused openshift-ansible/inventory/hosts file #2740 (contact@stephane-
klein.info)
- Remove unused playbooks adhoc metrics_setup files #2717 (contact@stephane-
klein.info)
- a-o-i: remove dummy data_file ([email protected])
- a-o-i: remove script leftover from OpenShift v2 ([email protected])
- [openstack] allows timeout option for heat create stack
- [openstack] updates documentation to show that you need to install shade
- default to multizone GCE config ([email protected])
- Add some tests for utils to get the coverage up. ([email protected])
- Update defaults for clusterNetworkCIDR & hostSubnetLength
- Add hawkular admin cluster role to management admin ([email protected])
- Prevent useless master by reworking template for master service enf file
- support 3rd party scheduler ([email protected])
- Add nuage rest server port to haproxy firewall rules. ([email protected])
- Port openshift_facts to py3 ([email protected])
- storage/nfs_lvm: Also export as ReadWriteOnce ([email protected])
* Fri Nov 04 2016 Scott Dodson <[email protected]> 3.4.17-1
- Fix indentation for flannel etcd vars ([email protected])
- Update hosted_templates ([email protected])
- remove console exclusions ([email protected])
- Restart API service always as well. ([email protected])
- Update v1.4 content ([email protected])
- Update quick installer upgrade mappings for 3.4 ([email protected])
- Update flannel etcd vars for 0.5.5 ([email protected])
- Where we use curl force it to use tlsv1.2 ([email protected])
- Bump etcd_ca_default_days to 5 years. ([email protected])
- Update master_lb vs cluster_hostname workflow ([email protected])
* Wed Nov 02 2016 Scott Dodson <[email protected]> 3.4.16-1
- Fix HA environments incorrectly detecting mixed installed environments
- Deploy an OOM systemd override for openvswitch. ([email protected])
- Only restart dnsmasq if the DNS servers have changed ([email protected])
- Update installation summary for etcd members ([email protected])
- Fix changed_when ([email protected])
- add io labels ([email protected])
- Touch all ini_file files before using them ([email protected])
- Remove commit offset strings from parsed versions ([email protected])
- Update variant_version ([email protected])
* Mon Oct 31 2016 Troy Dawson <[email protected]> 3.4.15-1
- Bump documented openshift_release for 1.4/3.4. ([email protected])
- Add requirements, fix a small formatting issue.
* Fri Oct 28 2016 Troy Dawson <[email protected]> 3.4.14-1
- Change HA master controller service to restart always. ([email protected])
- Default hosted_registry_insecure true when insecure registry present in
existing /etc/sysconfig/docker. ([email protected])
- Fix race condtion in openshift_facts ([email protected])
* Wed Oct 26 2016 Troy Dawson <[email protected]> 3.4.13-1
- [upgrades] Fix containerized node ([email protected])
- Add support for 3.4 upgrade. ([email protected])
- Update link to latest versions upgrade README ([email protected])
- Bump logging and metrics deployers to 3.3.1 and 3.4.0 ([email protected])
- Remove Vagrantfile ([email protected])
- Enable dnsmasq service ([email protected])
- Default infra template modification based on
openshift_examples_modify_imagestreams ([email protected])
- Added a parameter for cert validity ([email protected])
- Fix and reorder control plane service restart. ([email protected])
- Add node-labels to kubeletArguments ([email protected])
* Mon Oct 24 2016 Troy Dawson <[email protected]> 3.4.12-1
- Move infrastructure templates into openshift_hosted_templates role.
- Unit tests for the debug_env logger thing ([email protected])
- a-o-i: Separate install and scaleup workflows ([email protected])
- Reference full vars for registry object storage. ([email protected])
* Fri Oct 21 2016 Troy Dawson <[email protected]> 3.4.11-1
- trouble creating service signer while running upgrade dockerized
- Don't freak out if the oc command doesn't exist. ([email protected])
- Make the json template filter-driven. ([email protected])
- Add JSON result CLI parsing notes to the README ([email protected])
- The JSON result saving template now includes a summary of expired/warned
certs for easier parsing. ([email protected])
- Clean up lint and other little things (polish++) ([email protected])
- Fix playbooks, update readme, update default vars ([email protected])
- Refactor into a role ([email protected])
- Get router/registry certs. Collect common names and subjectAltNames
- Support etcd certs now. Fix lint. Generate HTML report. ([email protected])
- Try to make boiler plate for cert expiry checking ([email protected])
- Override __init__ in default callback to avoid infinite loop.
- Drop pacemaker restart logic. ([email protected])
- Fix typos ([email protected])
- Switch from "oadm" to "oc adm" and fix bug in binary sync.
- Remove uneeded import of ansible.module_utils.splitter ([email protected])
* Wed Oct 19 2016 Troy Dawson <[email protected]> 3.4.10-1
- Get rid of openshift_node_config_file entirely ([email protected])
- [logging] Fix NFS volume binding ([email protected])
- Build full node config path in systemd_units tasks. ([email protected])
- Default [] ([email protected])
- Template with_items for upstream ansible-2.2 compat. ([email protected])
* Mon Oct 17 2016 Troy Dawson <[email protected]> 3.4.9-1
- formatting updates in template ([email protected])
- Do not error on node labels set too non-string values. ([email protected])
- Use inventory variables rather than facts ([email protected])
- Resume restarting node after upgrading node rpms. ([email protected])
- upgrade: Don't check avail docker version if not already installed.
- revise docs ([email protected])
- adjustments in docs and j2 template ([email protected])
- add regionendpoint parameter for registry s3 ([email protected])
* Fri Oct 14 2016 Troy Dawson <[email protected]> 3.4.8-1
- update handling of use_dnsmasq ([email protected])
- Fix standalone docker upgrade playbook skipping nodes. ([email protected])
- Fix missing play assignment in a-o-i callback plugin ([email protected])
- Stop restarting node after upgrading master rpms. ([email protected])
- Fix upgrade mappings in quick installer ([email protected])
- nfs: Handle seboolean aliases not just in Fedora ([email protected])
* Wed Oct 12 2016 Troy Dawson <[email protected]> 3.4.7-1
- set defaults for debug_level in template and task ([email protected])
- Set HTTPS_PROXY in example builddefaults_json ([email protected])
- Fix config and namespace for registry volume detection ([email protected])
- Apply same pattern to HA master services ([email protected])
- Improve how we handle containerized node failure on first startup
- Check that OpenStack hostnames are resolvable ([email protected])
* Mon Oct 10 2016 Troy Dawson <[email protected]> 3.4.6-1
- Retry failed master startup once ([email protected])
- [logging] Fix openshift_hosted_logging_fluentd_nodeselector
- Changes for etcd servers ([email protected])
* Fri Oct 07 2016 Scott Dodson <[email protected]> 3.4.5-1
- [a-o-i] -v disables quiet ansible config. ([email protected])
* Fri Oct 07 2016 Troy Dawson <[email protected]> 3.4.4-1
- note different product versions ([email protected])
- Error out if containerized=true for lb host. ([email protected])
- Removes an unused file ([email protected])
- Update v1.3 content ([email protected])
- Add v1.4 content ([email protected])
- Set master facts for first master in node scaleup. ([email protected])
- Fix default port typo. ([email protected])
- Add example openid/request header providers and explain certificate
variables. ([email protected])
- Move openshift.common.debug.level to openshift_facts. ([email protected])
- Don't secure registry or deploy registry console when infra replics == 0
- the example line fails on releases prior to 3.3, so put a comment there.
* Tue Oct 04 2016 Scott Dodson <[email protected]> 3.4.3-1
- Check if openshift_master_ingress_ip_network_cidr is defined
- allow networkConfig.ingressIPNetworkCIDRs to be configured
- Filterize haproxy frontends/backends and add method for providing additional
frontends/backends. ([email protected])
- a-o-i: Force option should allow reinstall ([email protected])
- a-o-i: Fix openshift_node_labels ([email protected])
- Enable registry support for image pruning ([email protected])
- Default openshift_hosted_{logging,metrics}_deploy to false.
- README_CONTAINERIZED_INSTALLATION: fixed link markdown
- README_AWS: makes links consistent and working again
- a-o-i: Allow better setting of host level variables ([email protected])
- Further secure registry improvements ([email protected])
- Delgate handlers to first master ([email protected])
- Secure registry improvements. ([email protected])
- Install Registry by Default ([email protected])
- Update play names for consistency. ([email protected])
- Addressed review comments ([email protected])
- Configure ops cluster storage to match normal cluster storage
- Fix bug with service signer cert on upgrade. ([email protected])
- Add messages to let the user know if some plays were skipped, but it's ok.
Also, remove the final 'press a key to continue' prompt.
- Set named certificate destinations as basenames of provided paths.
- 'fix' unittests by removing the users ability to specify an ansible config
- Copy and paste more methods ([email protected])
- Silence/dot-print more actions in the callback ([email protected])
- Fix conflicts in spec file ([email protected])
- Use pre_upgrade tag instread of a dry run variable. ([email protected])
- Move etcd backup from pre-upgrade to upgrade itself. ([email protected])
- Allow a couple retries when unscheduling/rescheduling nodes in upgrade.
- Skip the docker role in early upgrade stages. ([email protected])
- Allow filtering nodes to upgrade by label. ([email protected])
- Allow customizing node upgrade serial value. ([email protected])
- Split upgrade for control plane/nodes. ([email protected])
- Set the DomainName or DomainID in the OpenStack cloud provider
- Use ansible.module_utils._text.to_text instead of
ansible.utils.unicode.to_unicode. ([email protected])
- Suppress more warnings. ([email protected])
- Add gitHTTPProxy and gitHTTPSProxy to advanced config json option
- Don't set IMAGE_PREFIX if openshift_cockpit_deployer_prefix is empty
- Update spec file to install manpage ([email protected])
- Verify masters are upgraded before proceeding with node only upgrade.
- Attempt to tease apart pre upgrade for masters/nodes. ([email protected])
- Split upgrade entry points into control plane/node. ([email protected])
- Reunite upgrade reconciliation gating with the play it gates on.
- Drop atomic-enterprise as a valid deployment type in upgrade.
- Stop guarding against pacemaker in upgrade, no longer necessary.
- Support openshift_upgrade_dry_run=true for pre-upgrade checks only.
- Make rhel_subscribe role default to OpenShift Container Platform 3.3
- Addresses most comments from @adellape ([email protected])
- Changes for Nuage HA ([email protected])
- Fix deployer template for enterprise ([email protected])
- Add a manpage for atomic-openshift-installer ([email protected])
- Remove the DNS VM on OpenStack ([email protected])
- tweak logic ([email protected])
- test fix for systemd changes ([email protected])
- Set default_subdomain properly for logging ([email protected])
- Adjust wait for loops ([email protected])
- Add storage for logging ([email protected])
- Fix some bugs in OpenShift Hosted Logging role ([email protected])
- Add some sample inventory stuff, will update this later ([email protected])
- Label all nodes for fluentd ([email protected])
- Rename openshift_hosted_logging_image_{prefix,version} to match metrics
- Fix deployer template for enterprise ([email protected])
- Add logging to install playbooks ([email protected])
- Fix OpenStack cloud provider ([email protected])
- Add rhaos-3.4-rhel-7 releaser to tito ([email protected])
- Fix the nodeName of the OpenShift nodes on OpenStack ([email protected])
- Fix GCE Launch ([email protected])
* Mon Sep 26 2016 Scott Dodson <[email protected]> 3.4.2-1
- Add an issue template ([email protected])
- Add openshift_hosted_router_name ([email protected])
- Fix master service status changed fact. ([email protected])
- Clarify openshift_hosted_metrics_public_url ([email protected])
- Add GCE cloud provider kind. ([email protected])
- add documentation about the openshift_hosted_metrics_public_url option
- Split openshift_builddefaults_no_proxy if it's not a list
- Fix references to openshift.master.sdn_cluster_network_cidr in node roles
- Update the OpenStack dynamic inventory script ([email protected])
- move LICENSE to /usr/share/licenses/openshift-ansible-VERSION/
- [uninstall] Stop services on all hosts prior to removing files.
- Do not create volume claims for hosted components when storage type is
object. ([email protected])
- Add portal_net and sdn_cluster_network_cidr to node NO_PROXY
- Add origin-node.service.wants to uninstall ([email protected])
- Update README.md ([email protected])
- Add 'MaxGCEPDVolumeCount' to default scheduler predicates.
- Switch to origin-1.x branch names ([email protected])
- Open ports for vxlan and Nuage monitor ([email protected])
- Add role to manageiq to allow creation of projects ([email protected])
- Add 'MaxEBSVolumeCount' to default scheduler predicates.
- a-o-i: Don't set unschedulable nodes as infra ([email protected])
- [redeploy-certificates] Set default value for
openshift_master_default_subdomain as workaround. ([email protected])
- [redeploy-certificates] Correct etcd service name. ([email protected])
- [upgrade] Create/configure service signer cert when missing.
- get quickstarts from origin, not upstream example repos ([email protected])
- Define proxy settings for node services ([email protected])
- Check for use_openshift_sdn when restarting openvswitch.
- Move delegated_serial_command module to etcd_common. ([email protected])
- Fix README links. ([email protected])
- Check for is_atomic when uninstalling flannel package. ([email protected])
- Add atomic-guest tuned profile ([email protected])
- Pause after restarting openvswitch in containerized upgrade.