forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathopenshift-ansible.spec
3711 lines (3522 loc) · 192 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 3.6.7
Release: 1%{?dist}
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.2.0.0-1
Requires: python2
Requires: python-six
Requires: tar
Requires: openshift-ansible-docs = %{version}
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
# atomic-openshift-utils install
pushd utils
%{__python} setup.py build
popd
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible_plugins
cp -rp library %{buildroot}%{_datadir}/ansible/%{name}/
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/byo/* docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# openshift_master_facts symlinks filter_plugins/oo_filters.py from ansible_plugins/filter_plugins
pushd %{buildroot}%{_datadir}/ansible/%{name}/roles/openshift_master_facts/filter_plugins
ln -sf ../../../../../ansible_plugins/filter_plugins/oo_filters.py oo_filters.py
popd
# openshift_master_facts symlinks lookup_plugins/oo_option.py from ansible_plugins/lookup_plugins
pushd %{buildroot}%{_datadir}/ansible/%{name}/roles/openshift_master_facts/lookup_plugins
ln -sf ../../../../../ansible_plugins/lookup_plugins/oo_option.py oo_option.py
popd
# openshift-ansible-filter-plugins install
cp -rp filter_plugins %{buildroot}%{_datadir}/ansible_plugins/
# openshift-ansible-lookup-plugins install
cp -rp lookup_plugins %{buildroot}%{_datadir}/ansible_plugins/
# openshift-ansible-callback-plugins install
cp -rp callback_plugins %{buildroot}%{_datadir}/ansible_plugins/
# create symlinks from /usr/share/ansible/plugins/lookup ->
# /usr/share/ansible_plugins/lookup_plugins
pushd %{buildroot}%{_datadir}
mkdir -p ansible/plugins
pushd ansible/plugins
ln -s ../../ansible_plugins/lookup_plugins lookup
ln -s ../../ansible_plugins/filter_plugins filter
ln -s ../../ansible_plugins/callback_plugins callback
popd
popd
# atomic-openshift-utils install
pushd utils
%{__python} setup.py install --skip-build --root %{buildroot}
# Remove this line once the name change has happened
mv -f %{buildroot}%{_bindir}/oo-install %{buildroot}%{_bindir}/atomic-openshift-installer
mkdir -p %{buildroot}%{_datadir}/atomic-openshift-utils/
cp etc/ansible.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible.cfg
mkdir -p %{buildroot}%{_mandir}/man1/
cp -v docs/man/man1/atomic-openshift-installer.1 %{buildroot}%{_mandir}/man1/
cp etc/ansible-quiet.cfg %{buildroot}%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
popd
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/library
%ghost %{_datadir}/ansible/%{name}/playbooks/common/openshift-master/library.rpmmoved
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}
Requires: %{name}-roles = %{version}
Requires: %{name}-lookup-plugins = %{version}
Requires: %{name}-filter-plugins = %{version}
Requires: %{name}-callback-plugins = %{version}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# We moved playbooks/common/openshift-master/library up to the top and replaced
# it with a symlink. RPM doesn't handle this so we have to do some pre-transaction
# magic. See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the path to directory being replaced below.
-- DO NOT add a trailing slash at the end.
path = "/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library"
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}
Requires: %{name}-lookup-plugins = %{version}
Requires: %{name}-filter-plugins = %{version}
Requires: %{name}-callback-plugins = %{version}
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
# ----------------------------------------------------------------------------------
# openshift-ansible-filter-plugins subpackage
# ----------------------------------------------------------------------------------
%package filter-plugins
Summary: Openshift and Atomic Enterprise Ansible filter plugins
Requires: %{name} = %{version}
BuildArch: noarch
Requires: pyOpenSSL
%description filter-plugins
%{summary}.
%files filter-plugins
%{_datadir}/ansible_plugins/filter_plugins
%{_datadir}/ansible/plugins/filter
# ----------------------------------------------------------------------------------
# openshift-ansible-lookup-plugins subpackage
# ----------------------------------------------------------------------------------
%package lookup-plugins
Summary: Openshift and Atomic Enterprise Ansible lookup plugins
Requires: %{name} = %{version}
BuildArch: noarch
%description lookup-plugins
%{summary}.
%files lookup-plugins
%{_datadir}/ansible_plugins/lookup_plugins
%{_datadir}/ansible/plugins/lookup
# ----------------------------------------------------------------------------------
# openshift-ansible-callback-plugins subpackage
# ----------------------------------------------------------------------------------
%package callback-plugins
Summary: Openshift and Atomic Enterprise Ansible callback plugins
Requires: %{name} = %{version}
BuildArch: noarch
%description callback-plugins
%{summary}.
%files callback-plugins
%{_datadir}/ansible_plugins/callback_plugins
%{_datadir}/ansible/plugins/callback
# ----------------------------------------------------------------------------------
# atomic-openshift-utils subpackage
# ----------------------------------------------------------------------------------
%package -n atomic-openshift-utils
Summary: Atomic OpenShift Utilities
BuildRequires: python-setuptools
Requires: %{name}-playbooks = %{version}
Requires: python-click
Requires: python-setuptools
Requires: PyYAML
BuildArch: noarch
%description -n atomic-openshift-utils
Atomic OpenShift Utilities includes
- atomic-openshift-installer
- other utilities
%files -n atomic-openshift-utils
%{python_sitelib}/ooinstall*
%{_bindir}/atomic-openshift-installer
%{_datadir}/atomic-openshift-utils/ansible.cfg
%{_mandir}/man1/*
%{_datadir}/atomic-openshift-utils/ansible-quiet.cfg
%changelog
* Thu Mar 23 2017 Jenkins CD Merge Bot <[email protected]> 3.6.7-1
- openshift_logging calculate min_masters to fail early on split brain
- Fixed linting and configmap_name param ([email protected])
- Adding configmap support. ([email protected])
- Make /rootfs mount rslave ([email protected])
- Update imageConfig.format on upgrades to match oreg_url ([email protected])
- Adding configmap support and adding tests. ([email protected])
- Adding oc_volume to lib_openshift. ([email protected])
- upgrade: restart ovs-vswitchd and ovsdb-server ([email protected])
- Make atomic-openshift-utils require playbooks of the same version
* Wed Mar 22 2017 Jenkins CD Merge Bot <[email protected]> 3.6.6-1
- Fix copy-pasta docstrings ([email protected])
- Rename _ns -> node_selector ([email protected])
- Reindent code ([email protected])
- Update the failure methods and add required variables/functions
- Import the default ansible output callback on_failed methods
- Switched Cassandra to use certificates generated by OpenShift
- Allow user to specify additions to ES config ([email protected])
* Tue Mar 21 2017 Jenkins CD Merge Bot <[email protected]> 3.6.5-1
- Attempt to match version of excluders to target version ([email protected])
- Get rid of adjust.yml ([email protected])
- Protect against missing commands ([email protected])
- Simplify excluder enablement logic a bit more ([email protected])
- Add tito releaser for 3.6 ([email protected])
- Adding oc_group to lib_openshift ([email protected])
- preflight checks: improve user output from checks ([email protected])
- preflight checks: bypass RPM excludes ([email protected])
- acceptschema2 default: true ([email protected])
- Do not require python-six via openshift_facts ([email protected])
* Sat Mar 18 2017 Jenkins CD Merge Bot <[email protected]> 3.6.4-1
- Cherry picking from #3689 ([email protected])
- Moving projects task within openshift_hosted ([email protected])
- Refactor openshift_projects role ([email protected])
- Add unit tests for existing health checks ([email protected])
- Do not update when properties when not passed. ([email protected])
- change shell to bash in generate_jks.sh ([email protected])
* Fri Mar 17 2017 Jenkins CD Merge Bot <[email protected]> 3.6.3-1
- enable docker excluder since the time it is installed ([email protected])
* Thu Mar 16 2017 Jenkins CD Merge Bot <[email protected]> 3.6.2-1
- enable excluders during node/master scaling up ([email protected])
- Fixing variable naming for 35 scoping. ([email protected])
- Fix get_router_replicas infrastructure node count. ([email protected])
- Fix containerized openvswitch race ([email protected])
* Thu Mar 16 2017 Jenkins CD Merge Bot <[email protected]> 3.6.1-1
- Bump version to 3.6.0 ([email protected])
- Improve CONTRIBUTING guide with testing tricks ([email protected])
- Update versions in example inventories ([email protected])
- Only call excluder playbooks on masters and nodes ([email protected])
- Since we've decided that we're no longer paying attention to current status
remove this as it was toggling things ([email protected])
- Remove travis notifications ([email protected])
- Removing dependency on master facts for master_public_url default
- don't assume openshift_upgrade_target is in a form d.d ([email protected])
- Cherry picked from #3657 ([email protected])
- Revert "Enable docker during installation and upgrade by default"
- Nuage service account handling by single master
- Add router svcacct cluster-reader role ([email protected])
- Cherry picking from #3644 ([email protected])
- Revert module_utils six for openshift_health_checker ([email protected])
- Refactor and remove openshift_serviceaccount ([email protected])
- Fix typo ([email protected])
- Force to use TLSv1.2 (related to https://github.com/openshift/openshift-
ansible/pull/2707) ([email protected])
- Raise on dry-run failures. ([email protected])
- validate excluders on non-atomic hosts only ([email protected])
- enable docker excluder since the time it is installed ([email protected])
- cherry picking from #3621 #3614 #3627 ([email protected])
- Renaming oadm_manage_node to oc_adm_manage_node ([email protected])
- add 'hawkular/metrics' when updating config ([email protected])
- update all the masters ([email protected])
- bug 1430661. Update masterConfig metricsPublicURL on install
- nuage: Move role back to config ([email protected])
- Fix incorrect comparison when detecting petsets ([email protected])
- Removed unused, unwanted, incorrectly committed code. ([email protected])
- Minor updates to README_CONTAINER_IMAGE.md ([email protected])
- Fix references to openshift_set_node_ip in inventory examples
- Bug 1428711 - [IntService_public_324] ES pod is unable to read
searchguard.truststore after upgarde logging from 3.3.1 to 3.5.0
- bug 1428249. Use ES hostmount storage if it exists ([email protected])
- Use ansible.compat.six where possible ([email protected])
- Remove debug task ([email protected])
- Use six from ansible.module_utils for remote hosts ([email protected])
- re-enable excluders if they are enabled after openshift version detection
- Allow overriding minTLSVersion and cipherSuites ([email protected])
- extend the excluders to containerized deployment ([email protected])
- Fixing the way policies are found. The old method was unreliable. This
method searches all and matches on properties. ([email protected])
- openshift_excluders depends on openshift_repos ([email protected])
- add ability to specify an etcd version ([email protected])
- Lowering test coverage percentage. ([email protected])
- Removing ordereddict. Replaced with sorted keys. ([email protected])
- New role ([email protected])
- Fixed for linting. ([email protected])
- enable excluders by default ([email protected])
- ignore the docker excluder status if it is not enabled by a user
- Fix pylint/pyflakes errors on master ([email protected])
- Identify PetSets in 3.4 clusters and fail if any are detected
- More logging fixes ([email protected])
- Fix for issue 3541 ([email protected])
- Fix to OpenshiftCLIConfig to support an ordereddict. This was breaking test
cases. ([email protected])
- - update excluders to latest, in non-upgrade scenarios do not update - check
both available excluder versions are at most of upgrade target version - get
excluder status through status command - make excluders enablement
configurable ([email protected])
- Adding scripts for building and pushing images ([email protected])
- Adding test_oc_adm_router. ([email protected])
- Loosely couple docker to iptables service ([email protected])
- Generic message directing people to contact support ([email protected])
- Fixing plugin, nodeselectors, and secret pull check ([email protected])
- Adding into the origin inventory doc. ([email protected])
- Add oc_objectvalidator to upgrade check ([email protected])
- Augmenting documentation for router sharding. ([email protected])
- Adding router test. ([email protected])
- openshift_facts: ensure system containers deps are installed
- Preserve order of Docker registries ([email protected])
- Updating metrics defaults ([email protected])
- Enable coveralls.io ([email protected])
- Fix indentation of run_once ([email protected])
- Update docs for test consolidation and remove the Makefile
- Consolidate root/utils tests ([email protected])
- Remove dummy setup/teardown methods ([email protected])
- Clean up test files ([email protected])
- Remove commented-out test code ([email protected])
- Make generic OCObjectValidator from OCSDNValidator ([email protected])
- logging needs openshift_master_facts before openshift_facts
- separate out test tool configs from setup.cfg ([email protected])
- Dockerfile and docs to run containerized playbooks ([email protected])
- Lower test coverage percentage. ([email protected])
- Mock runs differntly on travis. Fix the mock test params to be ANY.
- Fixed the none namespace. Fixed tests with latest loc_oc_binary call.
- Updating the namespace param to None. ([email protected])
- Regenerated code with latest yedit changes. ([email protected])
- Fixed tests to align with new naming. ([email protected])
- Fixed docs. Added check for delete failures. Updated namespace to None.
- Fixing linters ([email protected])
- Adding integration test. Fixed issue with node_selector.
- Adding oc_project to lib_openshift. ([email protected])
- Remove old commented-out tests ([email protected])
- Remove redundant assertion ([email protected])
- Fix test ([email protected])
- Lint utils/test ([email protected])
- Rewrap long lines ([email protected])
- Remove unused argument ([email protected])
- Remove unused Makefile variables ([email protected])
- Adding some more logging defaults ([email protected])
- node/sdn: make /var/lib/cni persistent to ensure IPAM allocations stick
around across node restart ([email protected])
- BZ1422348 - Don't install python-ruamel-yaml ([email protected])
- Re-generate modules ([email protected])
- Only set ownership to etcd for thirdparty datadir ([email protected])
- Added ports. ([email protected])
- Fixed router name to produce 2nd router. ([email protected])
- Updated to work with an array of routers. ([email protected])
- Adding support for router sharding. ([email protected])
- Removing the openshift_master_facts dependency ([email protected])
- bug 1420256. Initialize openshift_logging pvc_facts to empty
- Add oc_adm_policy_user task cluster-role policy ([email protected])
- Correct config for hosted registry ([email protected])
- Fixing checkout for bindings with -binding suffix ([email protected])
- Leave an empty contiv role directory ([email protected])
- Updating stdout check for changed_when ([email protected])
- test fixes for openshift_certificates_expiry ([email protected])
- oadm_policy_group/adm_policy_user module ([email protected])
- Fail on Atomic if docker is too old ([email protected])
- Remove contiv role and playbook from rpm packages ([email protected])
- Resolving yammlint errors ([email protected])
- Fixed error handling when oc adm ca create-server-cert fails. Fixed a logic
error in secure. ([email protected])
- removing extra when condition ([email protected])
- Removing run_once. ([email protected])
- Adding the activeDeadlineSeconds. Removed debug. ([email protected])
- Separating routes so logic is simpler. ([email protected])
- Defaulting variables properly to avoid undefined route in dict error.
- Add v1.3 FIS templates ([email protected])
- v1.4 Add FIS templates ([email protected])
- Add FIS templates ([email protected])
- Removed duplicate host param. ([email protected])
- Fixed failures on create when objects exist. ([email protected])
- Add ca-bundle.crt to list of certs to synchronize. ([email protected])
- Do not force custom ca cert deployment. ([email protected])
- regenerate lib_openshift with yedit exception changes ([email protected])
- Adding changed_whens for role, rolebinding, and scc reconciliation based on
output from oadm policy command ([email protected])
- raise exceptions when walking through object path ([email protected])
- logging fluentd filter was renamed to viaq ([email protected])
- Add 'persistentVolumeClaim' to volume_info type ([email protected])
- Updating delete/recreate with replace --force. ([email protected])
- Fixed logic error. Ensure both svc and dc exist. ([email protected])
- Modified base debug statements. Fixed oc_secret debug/verbose flag. Added
reencrypt for route. ([email protected])
- Adding support for a route with certs and reencrypt. ([email protected])
- node: use the new oc_atomic_container module ([email protected])
- master: use the new oc_atomic_container module ([email protected])
- etcd: use the new oc_atomic_container module ([email protected])
- lib_openshift: new module atomic_container ([email protected])
- Combined (squashed) commit for all changes related to adding Contiv support
into Openshift Ansible. This is the first (beta) release of Contiv with
Openshift and is only supported for Openshift Origin + Bare metal deployments
at the time of this commit. Please refer to the Openshift and Contiv official
documentation for details of the level of support for different features and
modes of operation. ([email protected])
- Re-generate lib_openshift ([email protected])
- Make s3_volume_mount available to set_fact call ([email protected])
- Correct fact creation for pvc ([email protected])
- [oc_obj] Move namespace argument to end of command. ([email protected])
- Create hosted registry service ([email protected])
- Correct typo in haproxy router collection. ([email protected])
- Fix issue #3505, add notes about origin upgrade versions support in BYO
upgrade README file ([email protected])
- Moving replica logic to filter_plugin to fix skipped task variable behavior.
- install the latest excluders ([email protected])
- openshift_hosted: Update tasks to use oc_ modules ([email protected])
- Rebased. ([email protected])
- Fixed indentation ([email protected])
- Adding get_env_var to deploymentconfig. ([email protected])
- Fixed default variables. Added a fix to generated secret in env var.
- Revert "Add centos paas sig common" ([email protected])
- Fix Quick Installer failed due to a Python method failure
- Removed JGroups cert and password generation. ([email protected])
- Fix symlink to lookup_plugins/oo_option.py ([email protected])
- Use 2 and 3 friendly urlparse in oo_filters ([email protected])
- Update v1.5 content ([email protected])
- Update v1.4 content ([email protected])
- xPaaS ose-v1.3.6 ([email protected])
- Prepare for origin moving to OCP version scheme ([email protected])
- initialize_openshift_version: handle excluder packages ([email protected])
- Add insecure edge termination policy for kibana. ([email protected])
- openshift_logging default to 2 replicas of primary shards
- Fixing doc for oc_adm_ca_server_cert. ([email protected])
- Convert selectattr tests to use 'match' ([email protected])
- Re-generate lib_openshift and lib_utils libraries ([email protected])
- curator config must be in /etc/curator not /usr/curator ([email protected])
- Updated for pylint. Fixed create doc. ([email protected])
- Attempt to handle router preparation errors. ([email protected])
- Fixing the generate tox tests. ([email protected])
- BZ1414276 - Quote ansible_ssh_user when determining group id
- Moving import to local class. ([email protected])
- Added required_together. Added two minor bug fixes for when data is not
passed. ([email protected])
- fix up ruamel.yaml/pyyaml no-member lint errors ([email protected])
- Renamed NotContainerized to NotContainerizedMixin and dropped no-member
- Removed unrequired no-members from yedit and generated code
- Removing reference to oadm. Moved parameter under general params.
- adding tag to update_master_config ([email protected])
- CloudFront oc_secret contents should be a list ([email protected])
- lib_openshift oc file lookup improvements ([email protected])
- roles/lib_openshift: Handle /usr/local/bin/oc with sudo ([email protected])
- if no key, cert, cacert, or default_cert is passed then do not pass to oc
- Added backup feature. Fixed a bug with reading the certificate and verifying
names. Added force option. ([email protected])
- Add SDNValidator Module ([email protected])
- bug 1425321. Default the master api port based on the facts
- Bug 1420219 - No log entry can be found in Kibana UI after deploying logging
stacks with ansible ([email protected])
- Address cert expiry parsing review comments ([email protected])
- Fix typo ([email protected])
- Update link to project homepage ([email protected])
- Implement fake openssl cert classes ([email protected])
- Removed oadm_ references in doc. ([email protected])
- Remove unused plays ([email protected])
- Remove pytest-related dependencies from setup.py ([email protected])
- Added copy support when modifying cert and key on existence
- Small spacing fix. ([email protected])
- Updated doc and defined defaults for signer_* ([email protected])
- Removed unused code. Made tests executable. ([email protected])
- Removing cmd, fixed docs and comments. ([email protected])
- Rename of oadm_ca to oc_adm_ca. Decided to whittle down to the direct call,
server_cert. ([email protected])
- Fixing doc. ([email protected])
- Adding oadm_ca to lib_openshift. ([email protected])
- Fixing docs. Fixed default_cert suggestion. ([email protected])
- Renamed modules, fixed docs, renamed variables, and cleaned up logic.
- Renaming registry and router roles to oc_adm_ ([email protected])
- Fixing registry doc and suggestions. ([email protected])
- Adding router and registry to lib_openshift. ([email protected])
- bug 142026. Ensure Ops PVC prefix are initialized to empty when ops e…
nabled ([email protected])
- Reverting logic for verify api handler to be uniform with other ways we
verify, will be uniformly updated in future ([email protected])
- bug 1417261. Quote name and secrets in logging templates
- openshift_facts: handle 'latest' version ([email protected])
- Surrounding node selector values with quotes ([email protected])
- Raise the bar on coverage requirements ([email protected])
- Accept extra positional arguments in tox ([email protected])
- Replace nose with pytest (utils) ([email protected])
- Clean up utils/README.md ([email protected])
- Replace nose with pytest ([email protected])
- Extract assertion common to all tests as function ([email protected])
- Replace nose yield-style tests w/ pytest fixtures ([email protected])
- Configure pytest to run tests and coverage ([email protected])
- Fix validation of generated code ([email protected])
- Make tests run with either nosetests or pytest ([email protected])
- Replace assert_equal with plain assert ([email protected])
- Make usage of short_version/release consistent ([email protected])
- Reorganize tests and helper functions logically ([email protected])
- Remove test duplication ([email protected])
- Move similar test cases together ([email protected])
- Insert paths in the second position of sys.path ([email protected])
- Rename test for consistency ([email protected])
- Replace has_key in new modules ([email protected])
- Fix symlink to filter_plugins/oo_filters.py ([email protected])
- Correct logic test for running pods ([email protected])
- Temporarily lower the bar for minimum coverage ([email protected])
- Unset exec bit in tests, add missing requirements ([email protected])
- Include missing unit tests to test runner config ([email protected])
- Fix tests on Python 3 ([email protected])
- Remove dead code in installer ([email protected])
- Remove dead code ([email protected])
- Document how to find dead Python code ([email protected])
- updating until statments on uri module for api verification
- add dependency on openshift_repos ([email protected])
- Fixing a bug by removing default debug ([email protected])
- Updating to use uri module instead ([email protected])
- Updating node playbooks to use oc_obj ([email protected])
- Add centos paas sig common ([email protected])
- Disentangle openshift_repos from openshift_facts ([email protected])
- Adding missing handler to resolve error that it was not found
- String compatibility for python2,3 ([email protected])
- Fix indenting/ordering in router cert redeploy ([email protected])
- post_control_plane.yml: don't fail on grep ([email protected])
- facts/main: Require Python 3 for Fedora, Python 2 everywhere else
- Fix typo, add symlinks for roles ([email protected])
- Resolve deprecation warning ([email protected])
- Revert temporary hack to skip router/registry upgrade. ([email protected])
- Don't attempt to install python-ruamel-yaml on atomic ([email protected])
- Pleasing the linting gods. ([email protected])
- Fixed tests for pyyaml vs ruamel. Added import logic. Fixed safe load.
- update example templates+imagestreams ([email protected])
- Adding fallback support for pyyaml. ([email protected])
- bug 1420217. Default ES memory to be compariable to 3.4 deployer
- Register cloudfront privkey when required ([email protected])
- initialize oo_nodes_to_upgrade group when running control plane upgrade only
- adding some quotes for safety ([email protected])
- Revert "Add block+when skip to `openshift_facts` tasks" ([email protected])
- Add missing full hostname for the Hawkular Metrics certificate (BZ1421060)
Fix issue where the signer certificate's name is static, preventing
redeployments from being acceptable. ([email protected])
- fixing use of oc_scale module ([email protected])
- fixing default for logging ([email protected])
- Fix some lint ([email protected])
- Fixed issue where upgrade fails when using daemon sets (e.g. aggregated
logging) ([email protected])
- upgrades: fix path to disable_excluder.yml ([email protected])
- Add upgrade job step after the entire upgrade performs ([email protected])
- Ansible Lint cleanup and making filter/lookup plugins used by
openshift_master_facts available within the role ([email protected])
- Update variant_version ([email protected])
- Add block+when skip to `openshift_facts` tasks ([email protected])
- Trying to fix up/audit note some changes ([email protected])
- updating defaults for logging and metrics roles ([email protected])
- Fix logic for checking docker-registry ([email protected])
- node, vars/main.yml: define l_is_ha and l_is_same_version
- Modify playbooks to use oc_obj module ([email protected])
- master, vars/main.yml: define l_is_ha and l_is_same_version
- oc route commands now using the oc_route module ([email protected])
- Modify playbooks to use oc_label module ([email protected])
- Fix cases where child classes override OpenShiftCLI values
- BZ1421860: increase Heapster's metric resolution to 30s ([email protected])
- BZ1421834: increase the Heapster metric resolution to 30s
- Fix Bug 1419654 Remove legacy config_base fallback to /etc/openshift
- Modify playbooks to use oadm_manage_node module ([email protected])
- Removing trailing spaces ([email protected])
- Removed adhoc s3_registry ([email protected])
- replace 'oc service' command with its lib_openshift equivalent
- Making router pods scale with infra nodes ([email protected])
- Provisioning of nfs share and PV for logging ops ([email protected])
- Add libselinux-python dependency for localhost ([email protected])
- oc secrets now done via oc_secret module ([email protected])
- More fixes for reboot/wait for hosts. ([email protected])
- fix openshift_logging where defaults filter needs quoting
- Do not hard code package names ([email protected])
- Refactor code to access values from task_vars ([email protected])
- oc serviceaccount now done via oc_serviceaccount module ([email protected])
- bug 1420229. Bounce metrics components to recognize changes on updates or
upgrades ([email protected])
- node: simplify when conditionals ([email protected])
- openvswitch: simplify when conditionals ([email protected])
- uninstall: delete master-api and master-controllers ([email protected])
- master: support HA deployments with system containers ([email protected])
- Ensure etcd client certs are regenerated with embedded etcd.
- bug 1420425. Allow setting of public facing certs for kibana in
openshift_logging role ([email protected])
- bug 1399523. Ops pvc should have different prefix from non-ops for
openshift_logging ([email protected])
- Include rpm/git paths in expiry README. ([email protected])
- Fixing docs, linting, and comments. ([email protected])
- fix bug 1420204. Default openshift_logging_use_journal to empty so fluentd
detects and is consistent with deployer ([email protected])
- Let pylint use as many CPUs as available ([email protected])
- Add note about extraneous virtualenvs ([email protected])
- Document how to create new checks ([email protected])
- Introduce tag notation for checks ([email protected])
- Replace multi-role checks with action plugin ([email protected])
- Removing the /usr/bin/ansible-playbook dependency in in the spec file
- use the correct name for the ruamel-yaml python module ([email protected])
- Reword module documentation ([email protected])
- Separate import groups with a blank line ([email protected])
- Remove commented-out debugging code ([email protected])
- Replace service account secrets handling with oc_serviceaccount_secret module
- node: refactor Docker container tasks in a block ([email protected])
- etcd: use as system container ([email protected])
- Implement uninstall for system containers ([email protected])
- system-containers: implement idempotent update ([email protected])
- atomic-openshift: install as a system container ([email protected])
- make sure cluster_size is an int for arith. ops ([email protected])
- Bug 1420234 - illegal_argument_exception in Kibana UI. ([email protected])
- bug 1420538. Allow users to set supplementalGroup for Cassandra
- Document openshift_cockpit_deployer_prefix and add
openshift_cockpit_deployer_version ([email protected])
- Make the cert expiry playbooks runnable ([email protected])
- Ensure embedded etcd config uses CA bundle. ([email protected])
- bug 1420684. On logging upgrade use the correct value for namespace
- Fixing docs. ([email protected])
- bug 1419962. fix openshift_metrics pwd issue after reinstall where cassandra
has incorrect pwd exception ([email protected])
- Fixing for linters. ([email protected])
- Adding test cases. ([email protected])
- Fixing docs. ([email protected])
- oc process ([email protected])
- node: ensure conntrack-tools is installed ([email protected])
- Updating defaults to pull from previously defined variable names used in
playbooks ([email protected])
- Pleasing the linting bot. ([email protected])
- fixup! master: latest use same predicates as last version
- fixup! master: latest use same priorities as last version
- Adding integration tests. ([email protected])
- Set image change triggers to auto=true for OCP 3.4 - for v1.5
- Reference class instead of self.__class__ within super constructor to avoid
calling self forever. ([email protected])
- Adding oc_env to lib_openshift. ([email protected])
- Fixing for flake8 spacing. ([email protected])
- Fixing tests for linters. ([email protected])
- Adding port support for route. ([email protected])
- use pvc_size instead of pv_size for openshift_metrics since the role creates
claims ([email protected])
- Added temporary kubeconfig file. Fixed tests to coincide with tmpfile.
- Set image change triggers to auto=true for OCP 3.4
(https://github.com/ManageIQ/manageiq-pods/pull/88) ([email protected])
- fixes 1419839. Install only heapster for openshift_metrics when heapster
standalone flag is set ([email protected])
- Adding code to copy kubeconfig before running oc commands.
- master: latest use same predicates as last version ([email protected])
- master: latest use same priorities as last version ([email protected])
- Changed lib_openshift to use real temporary files. ([email protected])
- Fixed ansible module unit and integration tests and added runners.
- Moving to ansible variable. ([email protected])
- Specifying port for wait_for call. ([email protected])
- Reverting commit 3257 and renaming master_url to openshift_logging_master_url
- [openshift_ca] Reference client binary from openshift_ca_host.
- Fix playbooks/byo/openshift_facts.yml include path ([email protected])
- Add missing symlink to roles ([email protected])
- Bump registry-console to 3.5 ([email protected])
- Added oc_serviceaccount_secret to lib_openshift. ([email protected])
- fix 1406057. Allow openshift_metrics nodeselectors for components
- Use service annotations to redeploy router service serving cert signer cert.
- Move excluder disablement into control plane and node upgrade playbooks
- Add excluder management to upgrade and config playbooks ([email protected])
- Add openshift_excluder role ([email protected])
- Fix RHEL Subscribe std_include path ([email protected])
- Copies CloudFront pem file to registry hosts ([email protected])
- Remove legacy router/registry certs and client configs from synchronized
master certs. ([email protected])
- Bump registry to 3.4 ([email protected])
- Sync latest image stream content ([email protected])
- Support latest for containerized version ([email protected])
- Ensure python2-ruamel-yaml is installed ([email protected])
- openshift_logging link pull secret to serviceaccounts fix unlabel when
undeploying ([email protected])
- fixes 1414625. Fix check of keytool in openshift_metrics role
- Doc enhancements. ([email protected])
- fixes 1417261. Points playbooks to the correct 3.5 roles for logging and
metrics ([email protected])
- Change default docker log driver from json-file to journald.
- Add logic to verify patched version of Ansible ([email protected])
- Restructure certificate redeploy playbooks ([email protected])
- Temporary hack to skip router/registry upgrade. ([email protected])
- Fixing linters. ([email protected])
- run node upgrade if master is node as part of the control plan upgrade only
- Appease yamllint ([email protected])
- Adding include_role to block to resolve when eval ([email protected])
- Updating oc_apply to use command instead of shell ([email protected])
- Wrap openshift_hosted_logging include_role within a block.
- Adding unit test. Fixed redudant calls to get. ([email protected])
- Fixing doc and generating new label with updated base. ([email protected])
- oc_label ansible module ([email protected])
- Fixing copy pasta comments. Fixed required in docs. ([email protected])
- Fix openshift_hosted_logging bool typo. ([email protected])
- Updating oc_apply changed_when conditions, fixing filter usage for
openshift_hosted_logging playbook ([email protected])
- Add default ansible.cfg file ([email protected])
- Move current node upgrade tasks under openshift_node_upgrade role
- Fix host when waiting for a master system restart. ([email protected])
- Adding bool filter to when openshift_logging_use_ops evals and updating
oc_apply to handle trying to update immutable fields ([email protected])
- Fixing for tox tests. (flake8|pylint) ([email protected])
- Adding unit test for oc_service. Added environment fix for non-standard oc
installs. ([email protected])
- Adding integration tests. ([email protected])
- Adding oc_service to lib_openshift. ([email protected])
- Sync etcd ca certs from etcd_ca_host to other etcd hosts
* Tue Jan 31 2017 Scott Dodson <[email protected]> 3.5.3-1
- Adding bool filter to ensure that we correctly set ops host for fluentd
- Set default GCE hostname to shost instance name. ([email protected])
- Fail on Ansible version 2.2.1.0 ([email protected])
- During node upgrade upgrade openvswitch rpms ([email protected])
- HTPASSWD_AUTH ([email protected])
- Added repoquery to lib_utils. ([email protected])
- Create v3_5 upgrade playbooks ([email protected])
- GCE deployment fails due to invalid lookup ([email protected])
- Resolving yamllint issues from logging playbooks ([email protected])
- Updating openshift_hosted_logging to update master-configs with
publicLoggingURL ([email protected])
- Added oc_serviceaccount to lib_openshift. ([email protected])
- Breaking out master-config changing and updated playbook to apply change to
other masters ([email protected])
- fix negative stride encountered from openshift_logging ([email protected])
- add persistent versions of quickstarts ([email protected])
- Fixing docs. Added bugzilla to doc. ([email protected])
- ensuring ruamel.yaml is on target for oc_scale ([email protected])
- Updating to correctly pull handler for openshift_logging. Adding logic to
openshift_hosted_logging too ([email protected])
- Adding names to plays and standardizing ([email protected])
- Updating openshift_logging role to add kibana public url to loggingPublicURL
in master-config ([email protected])
- Only manual scale down being allowed now ([email protected])
- adopt oc_scale for openshift_metrics role ([email protected])
- fix 1414625. Additional fix to run password commands on control node
- adopt oc_scale module for openshift_logging role ([email protected])
- Adding fix for when the resource does not exist. Added test cases.
- Updating to reuse previous ES DC names and always generate DCs
- Correct usage of draining nodes ([email protected])
- Fixing fluentd node labelling ([email protected])
- Fixing linters. ([email protected])
- Fixing base.py for node and scale. Autogenerated code. ([email protected])
- Added unit integration tests. Enhanced unit tests. Fixed an issue in
openshift_cmd for namespace. ([email protected])
- Adding oadm_manage_node to lib_openshift. ([email protected])
- Fixing namespace param in doc to reflect default value. ([email protected])
- .gitignore cleanup ([email protected])
- Standardize add_host: with name and changed_when ([email protected])
- Adding banners. Small bug fix to namespace appending in base.
- Comma separate no_proxy host list in openshift_facts so that it appears as a
string everywhere it is used. ([email protected])
- Fixing tests and linting. ([email protected])
- Adding unit test for oc_scale ([email protected])
- Adding integration test for oc_scale. ([email protected])
- Adding oc_scale to lib_openshift. ([email protected])
- Add 10 second wait after disabling firewalld ([email protected])
- Added oc_secret to lib_openshift. ([email protected])
- Remove master_count restriction. ([email protected])
- flake8 mccabe dependency fix ([email protected])
- Generate the artifacts from fragments. ([email protected])
- Update the generators to include fragment banners ([email protected])
- Make use of AnsibleDumper in openshift_master filters s.t. we can represent
AnsibleUnsafeText when dumping yaml. ([email protected])
- Set metrics url even if metrics_deploy is false
- Template update for Hawkular Metrics 0.23 ([email protected])
* Wed Jan 25 2017 Scott Dodson <[email protected]> 3.5.2-1
- Sync latest image streams ([email protected])
- Fix containerized haproxy config ([email protected])
- Allow RHEL subscription for OSE 3.4 ([email protected])
- fixes BZ-1415447. Error when stopping heapster. Modify to be conditional
include ([email protected])
- override nodename for gce with cloudprovider ([email protected])
- fixes jks generation, node labeling, and rerunning for oauth secrets
- allow openshift_logging role to specify nodeSelectors ([email protected])
- Remove is_containerized check for firewalld installs ([email protected])
- Clean up pylint for delete_empty_keys. ([email protected])
- [os_firewall] Fix default iptables args. ([email protected])
- Add new option 'openshift_docker_selinux_enabled' ([email protected])
- Temporary work-around for flake8 vs maccabe version conflict
- do not set empty proxy env variable defaults ([email protected])
- fix BZ1414477. Use keytool on control node and require java
- Remove unused temporary directory in master config playbook.
- Added link to HOOKS in README ([email protected])
- HOOKS.md added documenting new hooks ([email protected])
- [os_firewall] Add -w flag to wait for iptables xtables lock.
- fixes BZ-1414625. Check for httpd-tools and java before install
- Add a mid upgrade hook, re-prefix variables. ([email protected])
- treat force_pull as a bool ([email protected])
- Adding to ansible spec and changing logging jks generation to be a
local_action ([email protected])
- Add containzerized haproxy option ([email protected])
- Reorder node dnsmasq dependency s.t. networkmanager is restarted after
firewall changes have been applied. ([email protected])
- Removing docker run strategy and make java a requirement for control host
- Adding version to lib_openshift ([email protected])
- Updating to use docker run instead of scheduling jks gen pod
- jenkins v1.3 templates should not enable oauth ([email protected])
- fix oc_apply to allow running on any control node ([email protected])
- g_master_mktemp in openshift-master conflicts with
openshift_master_certificates ([email protected])
- fixes #3127. Get files for oc_apply from remote host ([email protected])
- Debug message before running hooks. ([email protected])
- Cleaning repo cache earlier ([email protected])
- Added tar as a requirement per BZ1388445 ([email protected])
- fixes BZ141619. Corrects the variable in the README ([email protected])
- Run user provided hooks prior to system/service restarts.
- Implement pre/post master upgrade hooks. ([email protected])
- Adding oc_obj to the lib_openshift library ([email protected])
- Addressing found issues with logging role ([email protected])
- Updated the generate.py scripts for tox and virtualenv. ([email protected])
- Adding tox tests for generated code. ([email protected])
- Perform master upgrades in a single play serially. ([email protected])
- Validate system restart policy during pre-upgrade. ([email protected])
- Correct consistency between upgrade playbooks ([email protected])
- Wait for nodes to be ready before proceeding with upgrade.
* Wed Jan 18 2017 Scott Dodson <[email protected]> 3.5.1-1
- More reliable wait for master after full host reboot. ([email protected])
- kubelet must have rw to cgroups for pod/qos cgroups to function
- Adding a few updates for python27,35 compatibility ([email protected])
- update examples to cover build default/override configuration
- Fix yaml lint in easy-mode playbook ([email protected])
- Removed trailing spaces from line #34 ([email protected])
- Install subscription-manager to fix issue-3102 ([email protected])
- Changing formatting for issue#2244 update ([email protected])
- Addressing Travis errors ([email protected])
- Adding --verfiy to generate script. ([email protected])
- v1.3 Add RHAMP ([email protected])
- Update v1.4 content, add api-gateway ([email protected])
- Add v1.5 content ([email protected])
- Update example sync script ([email protected])
- use pod to generate keystores (#14) ([email protected])
- Ensure serial certificate generation for node and master certificates.
- [Cert Expiry] Add serial numbers, include example PBs, docs
- properly set changes when oc apply ([email protected])
- additional cr fixes ([email protected])