forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathopenshift-ansible.spec
7566 lines (7095 loc) · 396 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 3.10.0
Release: 0.15.0%{?dist}
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.4.3
Requires: python2
Requires: python-six
Requires: tar
Requires: %{name}-docs = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
Requires: python-passlib
Requires: python2-crypto
Requires: patch
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
# atomic-openshift-utils install
pushd utils
%{__python} setup.py build
popd
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp -rp inventory/dynamic %{buildroot}%{_datadir}/ansible/%{name}/inventory
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/hosts.* inventory/README.md docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# touch a file in contiv so that it can be added to SCM's
touch %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/.empty_dir
# atomic-openshift-utils install
pushd utils
%{__python} setup.py install --skip-build --root %{buildroot}
# Remove this line once the name change has happened
mv -f %{buildroot}%{_bindir}/oo-install %{buildroot}%{_bindir}/atomic-openshift-installer
mkdir -p %{buildroot}%{_datadir}/atomic-openshift-utils/
cp etc/ansible.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible.cfg
mkdir -p %{buildroot}%{_mandir}/man1/
cp -v docs/man/man1/atomic-openshift-installer.1 %{buildroot}%{_mandir}/man1/
cp etc/ansible-quiet.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
popd
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/inventory/dynamic
%ghost %{_datadir}/ansible/%{name}/playbooks/common/openshift-master/library.rpmmoved
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}-%{release}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# Along the history of openshift-ansible, some playbook directories had to be
# moved and were replaced with symlinks for backwards compatibility.
# RPM doesn't handle this so we have to do some pre-transaction magic.
# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the paths to directories being replaced below.
-- DO NOT add a trailing slash at the end.
dirs_to_sym = {
"/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library",
"/usr/share/ansible/openshift-ansible/playbooks/certificate_expiry"
}
for i,path in ipairs(dirs_to_sym) do
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}-%{release}
Obsoletes: %{name}-lookup-plugins
Obsoletes: %{name}-filter-plugins
Obsoletes: %{name}-callback-plugins
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
# ----------------------------------------------------------------------------------
# atomic-openshift-utils subpackage
# ----------------------------------------------------------------------------------
%package -n atomic-openshift-utils
Summary: Atomic OpenShift Utilities
BuildRequires: python-setuptools
Requires: %{name}-playbooks = %{version}-%{release}
Requires: python-click
Requires: python-setuptools
Requires: PyYAML
BuildArch: noarch
%description -n atomic-openshift-utils
Atomic OpenShift Utilities includes
- atomic-openshift-installer
- other utilities
%files -n atomic-openshift-utils
%{python_sitelib}/ooinstall*
%{_bindir}/atomic-openshift-installer
%{_datadir}/atomic-openshift-utils/ansible.cfg
%{_mandir}/man1/*
%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
%changelog
* Tue Mar 27 2018 Justin Pierce <[email protected]> 3.10.0-0.15.0
- Remove etcd_migrate and embedded2external ([email protected])
- Master: change openshift_node include_tasks to import_tasks
- Use consistent image references and split out node sync ([email protected])
- Remove complex version logic and fix f27 build ([email protected])
- CSR approval should ignore errors when retrying ([email protected])
* Mon Mar 26 2018 Justin Pierce <[email protected]> 3.10.0-0.14.0
- Split the provision.yml playbook for more flexibility.
- Ensure master-logs works for both origin and enterprise ([email protected])
- Master components should not have configurable labels ([email protected])
- Remove duplicated index ([email protected])
- Revert "Use region and zone labels added by cloudprovider for scheduling"
- Replacing -v with -p for template parameters in oc_process
- ensure common_secgrp is used in all server groups ([email protected])
- package_version check: stop looking for docker ([email protected])
- minor updates to cleanup secgrp rules ([email protected])
- Configure dnsmasq before waiting for node ([email protected])
- parameterized flat and master/etcd/node secgroup rules ([email protected])
- parameterized common openstack secgroup rules ([email protected])
- fix the ELASTICSEARCH_URL for kibana ([email protected])
- Updating default run hour and minute for curator ([email protected])
- add in password auth for logging proxy ([email protected])
- Bumping up the default wait time for ES node to be yellow or green, made it
configurable for larger clusters ([email protected])
- Make ports pool the default when deploying with kuryr ([email protected])
- Allow for using an external openvswitch ([email protected])
- fixing the mounts for the daemonset config to have non subpath mount
- Remove openshift_management beta acknowledement ([email protected])
- Add metrics-server to openshift-metrics playbook ([email protected])
- Limit Prometheus discovery to relevant namespaces ([email protected])
- Don't verify node exporter is running ([email protected])
- roles/openshift-prometheus: fix failing prometheus service discovery scrapes
- upgrade prometheus v2.0.0 -> v2.1.0 ([email protected])
- Use region and zone labels added by cloudprovider for scheduling
- Remove deployment_type parameter from default predicates and priorities
lookup as it was removed from the lookup plugin ([email protected])
- use openshift_image_tag default for prometheus_node_exporter image
* Tue Mar 20 2018 Justin Pierce <[email protected]> 3.10.0-0.13.0
- EFS Provisioner: switch OCP tag to latest ([email protected])
* Mon Mar 19 2018 Justin Pierce <[email protected]> 3.10.0-0.12.0
- Bump pyOpenSSL to 17.5.0 ([email protected])
* Sat Mar 17 2018 Justin Pierce <[email protected]> 3.10.0-0.11.0
-
* Fri Mar 16 2018 Justin Pierce <[email protected]> 3.10.0-0.10.0
- Bug 1553576 - Change the self_hostname to ${hostname} in openshift-ansible
* Thu Mar 15 2018 Justin Pierce <[email protected]> 3.10.0-0.9.0
- Use oreg_url for node and master images ([email protected])
- Label master nodes with openshift-infra=apiserver ([email protected])
* Thu Mar 15 2018 Justin Pierce <[email protected]> 3.10.0-0.8.0
- Enabling multi vif pool drivers ([email protected])
- Update the examples directory for v3.10 ([email protected])
- Pop etcd_port from local_facts file ([email protected])
- Allowing means to provide custom es config entries with
openshift_logging_es_config ([email protected])
- GlusterFS - Invoke oc binary with the admin.kubeconfig token rather than
default token from $HOME/.kube/config (“[email protected]”)
- Break up components installs into separate playbooks ([email protected])
* Wed Mar 14 2018 Justin Pierce <[email protected]> 3.10.0-0.7.0
- Bug 1548641- Correct arguments to yedit ([email protected])
- Bug 1554828- Nodes are now labeled compute after other labels have been
applied ([email protected])
- Actually link to the Kuryr docs ([email protected])
- Link to the Kuryr docs ([email protected])
- Add link to the Kuryr port pool docs ([email protected])
- Add Kuryr documentation ([email protected])
* Wed Mar 14 2018 Justin Pierce <[email protected]> 3.10.0-0.6.0
- Bug 1548541- Conditional for applying defaultNodeSelector now valid
- Add support to pre-create subports at each trunk ([email protected])
- Fix missing slash in oreg_host ([email protected])
- [RHDM-354] - Add RHDM 7.0 GA templates and image streams to Openshift service
catalog ([email protected])
- Fix references to oc client ([email protected])
- Enable epel-testing repo for ansible-2.4.3 until it goes live
- GlusterFS: Add HEKETI_IGNORE_STALE_OPERATIONS to templates
- Replace ${version} with openshift_image_tag ([email protected])
- Update f27-atomic build to pull images ([email protected])
- Use internalRegistryHostname when bootstrapping ([email protected])
- In master bootstrapping mode, use the new openshift_control_plane role
- Add a local bootstrap-node-config.yml on all bootstrap nodes
- Switch to bootstrap script as a default var ([email protected])
- Prepare the node for dynamic bootstrapping ([email protected])
- Use an etcd static pod when master bootstrapping is set ([email protected])
- Add new openshift_control_plane and openshift_sdn roles ([email protected])
- Changing python regex method from match to search due to variable content
structure ([email protected])
- Adding missed line change ([email protected])
- Ensure that the aggregator is configured during all control plane upgrades
- Correctly escape the variable value for regex searching when building patch
- [grafana] Use service account token instead of hardcoded user
- [grafana] Fix wrong references to service account ([email protected])
- Revert delete tsb upgrade ([email protected])
- crio: Fixup docker SELinux permissions ([email protected])
- GlusterFS: Don't copy non-existant topology file ([email protected])
- Require Ansible 2.4.3 ([email protected])
- Update roles and playbooks to split cri-o install types ([email protected])
- openshift_node: Remove hardcoded cri-o node labels ([email protected])
- docker_gc: map the r_docker_gc_node_selectors to pairs ([email protected])
- [wip] system containers: ensure Atomic won't reset permissions for
etcd_data_dir ([email protected])
- docker-gc: use openshift_client_binary to support Atomic
- Bug 1548641- upgrade now properly sets labels and selectors
- updated uninstall section ([email protected])
- re-formatted cinder sections ([email protected])
- minor formatting ([email protected])
- updated DNS section to match updated formatting; cleaned up openstack
configuration section ([email protected])
- removed dangling link to scale documenation ([email protected])
- Added subsection regarding OS-specific dependencies ([email protected])
- remove dangling reference to control-host-image ([email protected])
- Add section about OPENSHIFT_CLUSTER env variable ([email protected])
- fixed link ([email protected])
- Separated post-install doc from README; additional cleanup
- Re-organized OpenStack documentation ([email protected])
- TSB upgrade remove and reinstall ([email protected])
- Add .default to no_proxy list for ASB. ([email protected])
- Updating how the whitelist works -- changing from removing the lines which
can cause issues when patching lines near the whitelist line to changing the
current source line to match the new souce line ([email protected])
- Use variables for docker_gc image ([email protected])
- Remove force cache during node upgrade install ([email protected])
- Bug 1550148 - Don't use undefined openshift_version in
openshift_sanitize_inventory ([email protected])
- Refactor openshift.common.deployment_type ([email protected])
- firewall: allow access to DNS for flannel network ([email protected])
- Update curator to use k8s cronjob ([email protected])
- Remove unused openshift_upgrade_config ([email protected])
- Convert calico to self-hosted install ([email protected])
- Switch the default network mode to ovs-networkpolicy ([email protected])
- Allow rcpbind for CNS block in cns-secgrp (openshift_openstack).
- Change default grafana ns to openshift-grafana ([email protected])
- Only run no_log on task that scrapes all inventory variables
- Bug 1549220 - configmap still exist after running uninstall playbook for
logging ([email protected])
- Fix grafana role node selector check ([email protected])
- cri-o: configure oci-umount with CRI-O paths ([email protected])
- added note about any_errors_fatal for ansible.cfg ([email protected])
- add missing evaluate_groups ([email protected])
- change to better coding style ([email protected])
- removed cleanup comment ([email protected])
- corrected rhel unsubscribe role ([email protected])
- Add openstack uninstall playbook ([email protected])
- add any_errors_fatal to openstack install playbook ([email protected])
- add any_errors_fatal to openstack playbooks ([email protected])
- cockpit-ui: Make it optional ([email protected])
- only annotate ops project for ops kibana when using ops ([email protected])
* Wed Mar 07 2018 Justin Pierce <[email protected]> 3.10.0-0.4.0
- During master upgrade reset loopback config ([email protected])
* Wed Mar 07 2018 Justin Pierce <[email protected]> 3.10.0-0.3.0
-
* Wed Mar 07 2018 Justin Pierce <[email protected]> 3.10.0-0.2.0
- Add wait_for_pods to upgrade for hosted components ([email protected])
- Refactor openshift.common.version to openshift_current_version
- Fix the DNS server name issue for OpenStack ([email protected])
- Fix hosted registry upgrade bug ([email protected])
- Remove redeploy after the roll has executed. ([email protected])
- ansible-quite: set callback_plugins path ([email protected])
- Make broker pods run correct versions on upgrade ([email protected])
- enable iscsid on start and add rpcbind dependencies ([email protected])
- fix bz 1550271: restore mpath defaults config ([email protected])
- Ensure removed web console extension variables are not set
- openstack: set a default when no API LB is needed ([email protected])
- openshift on openstack: fix non kuryr non API LB ([email protected])
- kuryr: fix linting tests ([email protected])
- kuryr: fix API LB and DNS access ([email protected])
- update LB ports iff the provider is haproxy ([email protected])
- kuryr: Use openshift-infra namespace ([email protected])
- kuryr: required pub subnet configuration option ([email protected])
- sanity_checks: add missing kuryr net_plugin ([email protected])
- kuryr: Make controller and CNI image configurable ([email protected])
- Check openstack kuryr prerequisites ([email protected])
- Kuryr var generation in OSt dynamic inventory ([email protected])
- kuryr: move to new binding_driver setting config ([email protected])
- Add s3 and block uninstall sections as well. ([email protected])
- Temporarily fix Dockerfile until we can find a replacement package
- Bug 1550148 - Fail install if console port does not match API server port
- Master scheduler upgrade cleanup ([email protected])
- Add proxy env vars to ASB DC. ([email protected])
- Correcting a typo: idle_timout -> idle_timeout ([email protected])
- docker_image_availability: encode error message ([email protected])
- Fix the gluster-s3 pod label used in gluster-s3 service.
- etcd scaleup: use r_etcd_common_etcdctl_command instead of binary path
- Change default etcd port to 2379 ([email protected])
- Fixing evaluating if ops deployment needs to skip health check, removing
logic for determining version, fixing pod check for elasticsearch to get
running version ([email protected])
- oc_obj: fail in state=list when return code != 0. ([email protected])
- Fix for gluster-s3 pvc check count. ([email protected])
- Allow for using an external openvswitch ([email protected])
- Fix rhgs-s3 image name ([email protected])
- Prometheus reader in continuing to #7064 using the right prometheus sa, with
view privileges. ([email protected])
- ansible-quiet.cfg: Don't set callback_plugins path ([email protected])
- Add support for instance_ids to ELB provisioner ([email protected])
- Remove RBAC console template ([email protected])
- crio: Add schedulable check for dockergc-ds ([email protected])
- Move common master upgrade playbooks to openshift-master ([email protected])
- crio: docker_gc on by default ([email protected])
- add stack update case for dry run ([email protected])
- [bz 1508561] default to secure registry and update certificates
- [BZ 1513706] make concurrenyLimit of heapster's hawkular sink configurable
- Fix redeploy router from openshift_hosted refactor. ([email protected])
- add stack dry run check ([email protected])
- prometheus retention 3d ([email protected])
- add liveness probe for config reload ([email protected])
- Add kuryr-kubernetes external lock_path * Lock path is now configurable to
run cni daemon without error. ([email protected])
- Add openstack stack failures list if stack fails to create
- Add Heat template validation ([email protected])
- Clarify node system container service unit ([email protected])
* Wed Feb 28 2018 Scott Dodson <[email protected]> 3.10.0-0.1.0
- Adding 3.10 releaser ([email protected])
- Add inventory docs for gcp variables ([email protected])
- Add prometheus node-exporter ([email protected])
- hosts.example: use 3.9 versions in sample inventory file
- upgrade: skip restart during double upgrade ([email protected])
- gcp: Move provisioning of SSH key into separate task
- fix when logging metrics user is modified ([email protected])
- bug 1537857. Additional logging proxy metrics fixes ([email protected])
- changed logic due to failures in CI ([email protected])
- ntpd/chronyd will now be started before node/master services
- Add service catalog components to upgrade ([email protected])
- Add registry GCS storage to hosts.example ([email protected])
- Remove no_log: True from openshift_version calls ([email protected])
- docker: support ADDTL_MOUNTS ([email protected])
- refactor grafana role ([email protected])
- Remove v3_8 upgrade playbooks ([email protected])
- Dump verbose curl output and API logs when API doesn't become available.
- Start master API in parallel on all masters. ([email protected])
- Update glusterfs-template: - Add GB_LOGDIR - failureThreshold as 50 secs
- Don't upgrade master nodes during double upgrade ([email protected])
- Don't upgrade nodes for OCP 3.8 ([email protected])
- sanity_checks: warn that some OCP versions cannot be installed
- repo_query: always include package_name in results ([email protected])
- Update upgrade README and add 3.7.x -> 3.9.x entry ([email protected])
- Remove unused tasks upgrade_facts in openshift_master ([email protected])
- Remove set_fact usage from web-console role ([email protected])
- Retrieve node list from API when testing for nodes with selector.
- Update controller port to match containerPort ([email protected])
- Fix way openshift_openstack_nodes_to_remove parameter is parsed in template
- logging: update README about cri-o ([email protected])
- Bug 1536651 - logging-mux not working in 3.7.z when logging installed with
openshift_logging_use_mux=true ([email protected])
- vsphere svc fix upgrade and datastore fix ([email protected])
- logging: allow fluentd to determine cri-o ([email protected])
- add generic image-and-flavor check that verifies existence and compatibility
* Sun Feb 25 2018 Justin Pierce <[email protected]> 3.9.0-0.53.0
-
* Sun Feb 25 2018 Justin Pierce <[email protected]> 3.9.0-0.52.0
- Move journald setup to node tasks from master ([email protected])
- [BZ 1497408] delete config map, dameon set, and cluster role
- Fix aggregator relative paths ([email protected])
- Fix package tasks ordering in OpenStack playbooks ([email protected])
- Change openshift_release to openshift_upgrade_target in upgrade
- Normalize times we wait on pods to 10s * 60retries ([email protected])
- start_api_server: service catalog healthcheck doesn't require proxy
- Changing default of openshift_logging_public_master_url to use
openshift_master_cluster_public_hostname if available ([email protected])
- Sync v3.8 content ([email protected])
- Sync v3.7 content ([email protected])
- Sync v3.9 content ([email protected])
- Allow branch specific pulls from origin ([email protected])
- Fixing bz1540467 docker-registry env var migration. Adding ability to oc_edit
complex array style edits. ([email protected])
- [1537872] Adding seboolean for virt_use_samba ([email protected])
- Making patching a local_action and ensuring we become:false for local_actions
- Cast string to dict in lib_utils_oo_dict_to_keqv_list ([email protected])
- refine condition for doing ami fetching ([email protected])
- Add field_selector parameter to oc_obj. ([email protected])
- GlusterFS: Check for groups in template file ([email protected])
- Updating AMI copying tags to no longer default to parent AMI.
- Remove NoVolumeNodeConflict from 3.9+ ([email protected])
* Fri Feb 23 2018 Justin Pierce <[email protected]> 3.9.0-0.51.0
-
* Thu Feb 22 2018 Justin Pierce <[email protected]> 3.9.0-0.50.0
- Fix upgrade verify_upgrade_targets ([email protected])
- Ensure wire-aggregator run on 3.7 upgrades ([email protected])
- Add no_log to prevent printing AWS creds ([email protected])
- added ci inventory and groups for containerized ([email protected])
* Thu Feb 22 2018 Justin Pierce <[email protected]> 3.9.0-0.48.0
- Fix openshift_hosted_registry_storage_glusterfs_path ([email protected])
- Revert openshift_portal_net ([email protected])
- skip search for an ami if openshift_aws_ami_map provides one
- Adding node autoapprover. ([email protected])
- Adding ability to state absent array items with index/curr_value.
- Change image location to CF 4.6 GA from Beta ([email protected])
- Update templates to mount the configmap into the directory the new image
expects ([email protected])
- Fix for support multi-cluster heketi's topology ([email protected])
* Tue Feb 20 2018 Justin Pierce <[email protected]> 3.9.0-0.47.0
- Update API healthz check to use uri module ([email protected])
- fixed an oo_filter plugin lib_utils_oo_has_no_matching_selector to do set
comparison ([email protected])
- Grafana roles updates. ([email protected])
- add deprovision playbook for cluster-operator infrastructure
- Add tox test to check for invalid playbook include ([email protected])
- Change openshift.common.hostname to inventory_hostname ([email protected])
- Fix openshift-webconsole version check ([email protected])
- add master deprovisioning ([email protected])
- Adding file locking to yedit. ([email protected])
- Log troubleshooting info when console install fails ([email protected])
- CRI-O: use /var/run/crio/crio.sock for >=3.9 ([email protected])
- Fix pvc template by replacing None by lowercase none ([email protected])
- GlusterFS: Fix uninstall regression ([email protected])
- Add prometheus reader role for lightweight privileges. ([email protected])
- docker_image_availability: encode error message ([email protected])
- Tweak things based on feedback ([email protected])
- Update example inventory to drive required hostgroups to the top
* Mon Feb 19 2018 Justin Pierce <[email protected]> 3.9.0-0.46.0
- Tolerate OVS 2.6 in 3.10 as well ([email protected])
- hosts.example: openshift_dns_ip should be node-specific ([email protected])
- Add target mount for gluster block ([email protected])
- Allow for overriding hosted registry_url variables ([email protected])
- Link to etcd v3 migration docs rather than suggesting dangerous things
- Run openshift_version for image prep ([email protected])
- Remove redundant openshift_hosted_registry_network_default
- Correct the usage of bool and str ([email protected])
- kernel module loading fix ([email protected])
- add steps in bootstrap playbook to handle updating aws.conf file
- Add cloud config variables to the sample inventory ([email protected])
- Run init/facts for docker upgrade ([email protected])
- quick installer: remove UPGRADE_MAPPINGS ([email protected])
- Update quick installer to support 3.9 and 3.8 ([email protected])
- Updating deprecation variable check to use a module for cleaner output and
use run_once to limit to one host. Add flag to skip dep check if desired
- Patch only if the file exists, otherwise we should copy the file in
- Add vsphere section for openshift_node_kubelet_args_dict ([email protected])
- Correctly comparing against the current configmap when making es configmap
patches ([email protected])
- add uninstall playbooks for compute/infra scale groups ([email protected])
- Adding ability to pass content and create files from content.
- Bug 1541946- waiting for master reboot now works behind bastion
* Thu Feb 15 2018 Justin Pierce <[email protected]> 3.9.0-0.45.0
-
* Thu Feb 15 2018 Justin Pierce <[email protected]> 3.9.0-0.44.0
-
* Thu Feb 15 2018 Justin Pierce <[email protected]> 3.9.0-0.43.0
- Changing conditional_set_fact from module to action_plugin since it does not
need to access hosts to be effective and to reduce playbook output
- Revert "Bug 1512825 - add mux pod failed for Serial number 02 has already
been issued" ([email protected])
- Fix metadata access in OpenStack inventory ([email protected])
- Adding ability to yedit json files. ([email protected])
- Simplify double upgrade version logic ([email protected])
- Whenever we create a new es node ignore health checks, changing prometheus pw
gen for increased secret idempotency ([email protected])
- oc_adm_csr: Add fail_on_timeout parameter which causes module to fail when
timeout was reached. ([email protected])
- Adding missing template ([email protected])
- Move installation of packages before container_runtime to ensure bind mounts
are avaialable. ([email protected])
- Use curl --noproxy option for internal apiserver access ([email protected])
- Revert openshift_version to previous state ([email protected])
- Add openshift_gcp_multizone bool ([email protected])
- Invert logic to decide when to re-deploy certs ([email protected])
- etcd_scaleup: use inventory_hostname when etcd ca host is being picked
- Fix docker_upgrade variable ([email protected])
- Fix gcp variable warnings ([email protected])
- Disable console install when not 3.9 or newer ([email protected])
- Fix etcd scaleup plays ([email protected])
- Add playbook to install components for cluster operator ([email protected])
- Remove cluster_facts.yml from the install.yml ([email protected])
- Allow for blank StorageClass in PVC creation ([email protected])
- Add service catalog to be upgraded ([email protected])
- Remove node start from bootstrap.yml. ([email protected])
- Restart systemd-hostnamed before restarting NetworkManager in node user-data.
- additional mounts: specify 'type' in container_runtime_crio_additional_mounts
- Fix openshift_openstack_provision_user_commands ([email protected])
- origin-dns: make sure cluster.local DNS server is listed first
- Fix OpenStack playbooks ([email protected])
- Backport changes for glusterfs, heketi, s3 and block templates
- Fix indentation to make yamllint happy ([email protected])
- Use r_etcd_common_etcdctl_command instead of hardcoded binary name to support
containerized upgrade ([email protected])
- Verify that requested services have schedulable nodes matching the selectors
- Normalize the time we wait for pods to 5s * 60 retries ([email protected])
- Pause for console rollout ([email protected])
- Fix wording ([email protected])
- Fix cloud init runcmd templating ([email protected])
- Note ignored Heat user data changes for openstack ([email protected])
- Clarify the ansible playbook vs cloud-init ([email protected])
- Fix openstack cloud-init runcmd templating ([email protected])
- [openstack] custom user commands for cloud-init ([email protected])
- Limit host scope during plays ([email protected])
- Fix upgrade-control plane post_control_plane.yml ([email protected])
- erase data only if variable is set. fix block indentatation
- uninstall playbook for GlusterFS ([email protected])
- Removing prefix and replacing with cidr, pool_start and pool_end variables.
- Make node start options configurable ([email protected])
- Support master node high availability ([email protected])
* Fri Feb 09 2018 Justin Pierce <[email protected]> 3.9.0-0.42.0
- xPaaS v1.4.8 for v3.7 ([email protected])
- xPaaS v1.4.8-1 for v3.8 ([email protected])
- xPaaS v1.4.8-1 for v3.9 ([email protected])
- Bump xpaas version ([email protected])
- Bug 1524805- CFME example now works disconnected ([email protected])
- Only try to yaml.load a file if it ends in .yml or .yaml in logging facts
- Set default image tag to openshift_image_tag for services
- Redeploy router certificates during upgrade only when secure.
- GlusterFS: Fix block StorageClass heketi route ([email protected])
- changed oc to {{ openshift_client_binary }} ([email protected])
- Use v3.9 web-console image for now ([email protected])
- Adding ability to provide additional mounts to crio system container.
- Remove spaces introduced at the start of the line
- Changing the check for the number of etcd nodes ([email protected])
- aws ami: make it so the tags from the orinal AMI are used with the newly
created AMI ([email protected])
- Setup docker excluder if requested before container_runtime is installed
- openshift_node: Remove master from aws node building ([email protected])
- Use wait_for_connection to validate ssh transport is alive
- Bug 1541625- properly cast provided ip address to unicode
- Add base package installation to upgrade playbooks ([email protected])
- 3.9 upgrade: fix typos in restart masters procedure ([email protected])
- quick installer: disable broken test_get_hosts_to_run_on6 test
- Quick installer: run prerequistes first and update path to main playbook
- Fix uninstall using openshift_prometheus_state=absent ([email protected])
- Detect config changes in console liveness probe ([email protected])
- Fix master and node system container variables ([email protected])
- Correct the list of certificates checked in openshift_master_certificates
s.t. masters do not incorrectly report that master certs are missing.
- tag fix without ose- ([email protected])
- lib_utils_oo_collect: Allow filtering on dot separated keys.
- Determine which etcd host is the etcd_ca_host rather than assume it is the
first host in the etcd host group. ([email protected])
- Attempt to back up generated certificates on every etcd host.
- Remove pre upgrade verification step re: etcd ca host. ([email protected])
- Revert "GlusterFS: Remove image option from heketi command" ([email protected])
* Wed Feb 07 2018 Justin Pierce <[email protected]> 3.9.0-0.41.0
- Allow OVS 2.7 in OCP 3.10 ([email protected])
- GlusterFS: Minor documentation update ([email protected])
- Make sure to include upgrade_pre when upgrading master nodes
* Wed Feb 07 2018 Justin Pierce <[email protected]> 3.9.0-0.40.0
- health checks: tolerate ovs 2.9 ([email protected])
- Fix docker rpm upgrade install task wording ([email protected])
- Initial support for 3.10 ([email protected])
- add deprovisioning for ELB (and IAM certs) ([email protected])
- [6632] fix indentation of terminationGracePeriodSeconds var
* Tue Feb 06 2018 Justin Pierce <[email protected]> 3.9.0-0.39.0
- Update code to not fail when rc != 0 ([email protected])
- Upgrades: pass openshift_manage_node_is_master to master nodes during upgrade
- Updates to configure monitoring container. ([email protected])
- Move cert SAN update logic to openshift-etcd ([email protected])
- Swapping container order for es pod ([email protected])
- Adding support for ES 5.x tech preview opt in ([email protected])
- bug 1540799: openshift_prometheus: update alertmanager config file flag
- parameterize various master scale group bits ([email protected])
- Use rollout instead of deploy (deprecated) ([email protected])
- cri-o: export variables defined in crio-network ([email protected])
* Mon Feb 05 2018 Justin Pierce <[email protected]> 3.9.0-0.38.0
- Moving upgrade sg playbook to 3.9 ([email protected])
- remove openshift_upgrade_{pre,post}_storage_migration_enabled from
failed_when ([email protected])
- Fix version handling in 3.8/3.9 control plane upgrades ([email protected])
- add S3 bucket cleanup ([email protected])
- dynamic inventory bug when group exists but its empty ([email protected])
- dynamic inventory bug when group exists but its empty ([email protected])
- Parameterize user and disable_root options in cloud config
- Fix softlinks broken by d3fefc32a727fe3c13159c4e9fe4399f35b487a8
* Fri Feb 02 2018 Justin Pierce <[email protected]> 3.9.0-0.37.0
- Don't use 'omit' for package module ([email protected])
- Adding requirements for logging and metrics ([email protected])
- Disable master controllers before upgrade and re-enable those when restart
mode is system ([email protected])
- upgrade: run upgrade_control_plane and upgrade_nodes playbooks during full
upgrade ([email protected])
* Fri Feb 02 2018 Justin Pierce <[email protected]> 3.9.0-0.36.0
- Add missing tasks file ([email protected])
- Upgrade to migrate to using push to DNS for registries. ([email protected])
- Adding defaults for the gcp variables to fix an undefined ansible exception.
- Fix vsphere sanitization ([email protected])
- Set a default for required vsphere variable ([email protected])
- Add python2-crypto package ([email protected])
- hosts.example: clarify usage of openshift_master_cluster_public_hostname
- Conditionally create pvcs for metrics depending on whether or not it already
exists ([email protected])
- Update hosts examples with a note about scheduling on masters
- Fixing file write issue. ([email protected])
- Only perform console configmap ops when >= 3.9 ([email protected])
- Remove playbooks/adhoc/openshift_hosted_logging_efk.yaml ([email protected])
- upgrades: use openshift_version as a regexp when checking
openshift.common.version ([email protected])
- Don't update master-config.yaml with logging/metrics urls >= 3.9
- Make master schedulable ([email protected])
- Re-add openshift_aws_elb_cert_arn. ([email protected])
- Ignore openshift_pkg_version during 3.8 upgrade ([email protected])
- bug 1537857. Fix retrieving prometheus metrics ([email protected])
- Remove master_ha bool checks ([email protected])
- Don't restart docker when re-deploying node certificates ([email protected])
- vsphere storage default add ([email protected])
* Wed Jan 31 2018 Justin Pierce <[email protected]> 3.9.0-0.35.0
- add glusterblock support for ansible ([email protected])
- Add a bare minimum localhost hosts file ([email protected])
- copy etcd client certificates for nuage openshift monitor
- fix hostvars parameter name ([email protected])
- remove mountpoint parameter ([email protected])
- flake cleanup ([email protected])
- code simplification and lint cleanup ([email protected])
- Symlink kubectl to oc instead of openshift ([email protected])
- Rework provisioners vars to support different prefix/version for Origin/OSE
- add cinder mountpoint to inventory ([email protected])
- allow setting of kibana env vars ([email protected])
- No longer compare with legacy hosted var ([email protected])
- Preserving ES dc storage type unless overridden by inventory variable
- Fix: e2e tests failing due to :1936/metrics unaccessible.
* Tue Jan 30 2018 Justin Pierce <[email protected]> 3.9.0-0.34.0
- docker_creds: decode docker_config for py3 only if its a string
- Removing ability to change default cassandra_pvc_prefix based on metrics
volume name ([email protected])
- Don't deploy the console if disabled or registry subtype ([email protected])
- [1538960] Correct ability to overried openshift_management_app_template
* Tue Jan 30 2018 Justin Pierce <[email protected]> 3.9.0-0.33.0
-
* Tue Jan 30 2018 Justin Pierce <[email protected]> 3.9.0-0.32.0
- Revert "Revert "use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to
set the registry hostname"" ([email protected])
- Rebase Prometheus example for new scrape endpoints and expose alert manager
- Revert "use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the
registry hostname" ([email protected])
- Bug 1539182: Detect if ClusterResourceOverrides enabled during console
install ([email protected])
- Fix container_runtime variable typo ([email protected])
- Correct 3.7 to 3.9 upgrade openshift_image_tag ([email protected])
- Fix misaligned ports for sg,elb,api ([email protected])
- Add GPG keys in the base image and don't install docker ([email protected])
- Change catalog roles install to use aggregation ([email protected])
- Make IP object a string ([email protected])
- Add kube service ipaddress to no_proxy list ([email protected])
* Sat Jan 27 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.31.0
- removed references to 'files' dir in spec file ([email protected])
- files in ansible roles do not need to have the path specified to them when
referenced by a builtin module, i.e., copy: ([email protected])
- moving files to their correct <role>/files dir for the openshift_web_console
and template_service_broker roles ([email protected])
* Fri Jan 26 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.30.0
- Removing dependency on the extra stroage device. ([email protected])
* Fri Jan 26 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.29.0
- Add prometheus annotations to console service ([email protected])
- Add resource requests to console template ([email protected])
- ignore 'users' field in oc_group module ([email protected])
* Fri Jan 26 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.28.0
- Updating deprecations to use callback plugin ([email protected])
- Run console pods on the master ([email protected])
* Fri Jan 26 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.26.0
- docker_image_availability: containerized overrides ([email protected])
- Remove old assetConfig from master-config.yaml ([email protected])
- Don't emit assetConfig on 3.9 ([email protected])
* Fri Jan 26 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.25.0
- [1502838] Correct certificate alt name parsing ([email protected])
- sync imagestreams+templates from origin master for v3.9 ([email protected])
- node: specify bind option to /root/.docker ([email protected])
- [1530403] Improve etcd group error message ([email protected])
- Only automatically restart if cluster is in yellow or green state
- openshift_manage_node: Label nodes in one pass ([email protected])
- Redeploy etcd certificates during upgrade when etcd hostname not present in
etcd serving cert SAN. ([email protected])
- Create swapoff module ([email protected])
- Label masters with node-role.kubernetes.io/master. This PR also sets these
labels and scheduling status during upgrades ([email protected])
- [1537946] Correct conditional check for GlusterFS IPs ([email protected])
- Remove unused node.lables from openshift_facts ([email protected])
- Change dnsmasq Requires to Wants.
https://bugzilla.redhat.com/show_bug.cgi?id=1532960 ([email protected])
- Set a default for openshift_hosted_registry_storage_azure_blob_realm
- openshift_prometheus: remove block duration settings ([email protected])
* Wed Jan 24 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.24.0
- Update CF 4.6 Beta templates in openshift_management directory
- installer: increase content width for commands, which may output URLs
- Only rollout console if config changed ([email protected])
- Protect master installed version during node upgrades ([email protected])
- [1506866] Update haproxy.cfg.j2 ([email protected])
- Split control plane and component install in deploy_cluster
- Add clusterResourceOverridesEnabled to console config ([email protected])
- [1537105] Add openshift_facts to flannel role ([email protected])
- PyYAML is required by openshift_facts on nodes ([email protected])
- Move origin-gce roles and playbooks into openshift-ansible
- Directly select the ansible version ([email protected])
- use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the
registry hostname ([email protected])
- update Dockerfile to add boto3 dependency ([email protected])
- Lowercase node names when creating certificates ([email protected])
- NFS Storage: make sure openshift_hosted_*_storage_nfs_directory are quoted
- Fix etcd scaleup playbook ([email protected])
- Bug 1524805- ServiceCatalog now works disconnected ([email protected])
- [1506750] Ensure proper hostname check override ([email protected])
- failed_when lists are implicitely ANDs, not ORs ([email protected])
- un-hardcode default subnet az ([email protected])
- Ensure that node names are lowerecased before matching ([email protected])
- Bug 1534020 - Only set logging and metrics URLs if console config map exists
- Add templates to v3.9 ([email protected])
- Use Beta repo path ([email protected])
- CF 4.6 templates ([email protected])
- Add ability to mount volumes into system container nodes ([email protected])
- Fix to master-internal elb scheme ([email protected])
- Allow 5 etcd hosts ([email protected])
- Remove unused symlink ([email protected])
- docker_creds: fix python3 exception ([email protected])
- docker_creds: fix python3 exception ([email protected])
- docker: use image from CentOS and Fedora registries ([email protected])
- crio: use Docker and CentOS registries for the image ([email protected])
- The provision_install file ends in yml not yaml! Ansible requirement
clarification. ([email protected])
* Tue Jan 23 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.23.0
- docker_image_availability: enable skopeo to use proxies ([email protected])
- Install base_packages earlier ([email protected])
- allow uninstalling AWS objects created by prerequisite playbook
- Bug 1536262: Default console and TSB node selector to
openshift_hosted_infra_selector ([email protected])
- Migrate master-config.yaml asset config ([email protected])
- Fix master scaleup play ([email protected])
- use admin credentials for tsb install operations ([email protected])
- Fix etcd-upgrade sanity checks ([email protected])
- Bug 1536253: Pass `--config` flag on oc commands when installing console
- Fix enterprise registry-console prefix ([email protected])
- [release-3.7] Fix enterprise registry console image prefix
- [release-3.6] Fix enterprise registry console image prefix
- Bug 1512825 - add mux pod failed for Serial number 02 has already been issued
- Remove old console asset config ([email protected])
- Add support for Amazon EC2 C5 instance types ([email protected])
- Fix provider network support at openstack playbook ([email protected])
* Fri Jan 19 2018 Jenkins CD Merge Bot <[email protected]> 3.9.0-0.22.0
- Fix OpenStack readme ([email protected])
- Quick installer: deprecate upgrades ([email protected])
- Fix node scaleup plays ([email protected])
- Rollout console after template service broker install ([email protected])
- Use openshift_is_containerized instead of openshift_is_atomic when installing
etcd ([email protected])
- Bug 1535947: Fix missing task in metrics, logging uninstall playbooks
- Make openshift_web_console_prefix defaults like other components
- Allow for firewalld on atomic host ([email protected])
- Drop the testing repo var from openstack readme ([email protected])
- Add Azure to support openshift_cloudprovider_kind ([email protected])
- bug 1523047. Annotate ops projects with an .operation prefix
- Pull openshift_image_tag from oo_masters_to_config rather oo_first_master.
- Ensure atomic_proxies are configured with docker ([email protected])
- Default install_result when reloading generated facts. ([email protected])
- health checks: update required pkg versions ([email protected])
- health checks: factor out get_required_version ([email protected])
- package_version check: reuse get_major_minor_version ([email protected])
- Rework default TSB prefix and imagename to match other services
- Add new grafana playbook. ([email protected])
- Remove duplication in node acceptance playbook and setup master groups so