forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 1
/
openshift-ansible.spec
9089 lines (8559 loc) · 478 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 3.11.0
Release: 0.24.0
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.6.2
Requires: python2
Requires: python-six
Requires: tar
Requires: %{name}-docs = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Obsoletes: atomic-openshift-utils <= 3.10
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
Requires: python-passlib
Requires: python2-crypto
Requires: patch
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp -rp inventory/dynamic %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp ansible.cfg %{buildroot}%{_datadir}/ansible/%{name}/ansible.cfg
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/hosts.* inventory/README.md docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# touch a file in contiv so that it can be added to SCM's
touch %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/.empty_dir
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/inventory
%{_datadir}/ansible/%{name}/ansible.cfg
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}-%{release}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# Along the history of openshift-ansible, some playbook directories had to be
# moved and were replaced with symlinks for backwards compatibility.
# RPM doesn't handle this so we have to do some pre-transaction magic.
# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the paths to directories being replaced below.
-- DO NOT add a trailing slash at the end.
dirs_to_sym = {
"/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library",
"/usr/share/ansible/openshift-ansible/playbooks/certificate_expiry"
}
for i,path in ipairs(dirs_to_sym) do
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}-%{release}
Obsoletes: %{name}-lookup-plugins
Obsoletes: %{name}-filter-plugins
Obsoletes: %{name}-callback-plugins
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
%changelog
* Mon Aug 27 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.24.0
- openshift-prometheus: change node_exporter service port to 9102
- Revert "openshift-prometheus: change node_exporter service port to 9101"
* Sun Aug 26 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.23.0
- Commit to enable standalone master instances in aws ([email protected])
- SDN check: Expand openshift_client_binary variable ([email protected])
- Don't set reclaim policy to empty string ([email protected])
- Add support to static pods for etcd helpers ([email protected])
- Creating a priority class for cluster-logging fluentd and configuring fluentd
to use it ([email protected])
- Refactor csr approvals: oc_csr_approve ([email protected])
- Change aws launch_config & autoscale group name to contain deployment serial
- Move filters ([email protected])
- Overwrite grafana datasource and dashboards ([email protected])
- Dont fail when datasource or dashboard already exists
* Thu Aug 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.22.0
- Log driver for JSON should be json-file ([email protected])
- cluster-monitoring: Add port definition to cluster-monitoring-operator
- cluster-monitoring: conditionally render proxy settings
- Reorder master install tasks ([email protected])
- openshift-control-plane: check whether the sync pods are ready before
selecting nodes ([email protected])
* Thu Aug 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.21.0
- if the cluster's arch is power (ppc64le) don't install default catalog.
create v3.11 imagestreams, quickstart, and db-templates that support ppc64le
- GlusterFS: Run kernel_modules.yml once on all nodes ([email protected])
- Replace deprecated ec2_ami_find module with ec2_ami_facts
- Allow override set scheme ([email protected])
- Remove old code related to Atomic Enterprise changes ([email protected])
- python-scandir was renamed in EPEL ([email protected])
- openshift-prometheus: change node_exporter service port to 9101
- Commit to remove openshift_master_cluster_hostname override
- Change aws launch_config & autoscale group name to contain deployment serial
- Master services are gone in 3.10 ([email protected])
* Tue Aug 21 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.20.0
- Pass region to AWS az lookup ([email protected])
- SDN check: Use openshift_client_binary ([email protected])
- RHV Provider Role and Playbooks ([email protected])
- Fix backcompat with OpenStack inventory ([email protected])
- update v3.9 to v3.11 used in the example hosts ([email protected])
- GlusterFS: Remove domain from heketi URL ([email protected])
- Bug 1615787 - Blacklist broker-apb ([email protected])
- openshift-metering: Update playbook instructions ([email protected])
- openshift-metering: Update role to use new metering CRD group and schemas and
images helm operator image ([email protected])
- openshift-metering: Update role to allow creating routes
- Removing unnecessary fail task ([email protected])
- Remove correct duplicated SCC check ([email protected])
- Revert "Remove duplicated bootstrapped SCC check" ([email protected])
- Revert "Skip base package check for openshift_ca role" ([email protected])
- Adding file rollover size and max count policies ([email protected])
- Rework node initialization procedure to prepull images earlier
- [RHPAM-1241] - Include RHPAM templates in OpenShift release
- Cleanup old sanitize inventory warnings ([email protected])
- Override configmap directly on the install role
- Correct typo in config variable ([email protected])
- Allow to override full Ansible Service Broker config map
- Changed sample inventory to reflect vars used in heat_stack.yaml.j2
- Add kuryr namespace isolation support ([email protected])
* Mon Aug 20 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.19.0
-
* Sun Aug 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.18.0
- Require Ansible 2.6.2 ([email protected])
- Remove 3.10 upgrade playbooks ([email protected])
- Use openshift_image_tag for registry-console upgrade ([email protected])
- Clean up GCP disks during deprovision ([email protected])
- Skip base package check for openshift_ca role ([email protected])
- Update search string for registry console ([email protected])
- Revert "Set correct vars for registry console" ([email protected])
- service-catalog: use K8s NamespaceLifecycle admission controller
- remove name from tag ([email protected])
- Update sanity_checks.py ([email protected])
- Provide better error message for json sanity check ([email protected])
- Remove asb-user-access cluster-role when uninstalling ASB
- Increase maximum number of open file descriptors for dnsmasq
* Thu Aug 16 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.17.0
- Update for Bugzilla 1580256 ([email protected])
- Remove duplicated bootstrapped SCC check ([email protected])
- cluster_monitoring_operator: update ClusterRole ([email protected])
- Default CFME nodeselector should be a list of str, not a dict
- Added support for ak when registering hosts ([email protected])
- Fix audit config interpolation ([email protected])
- SDN check: Ignore node's canonical name ([email protected])
- fix 1616278. Modify the default logging namespace ([email protected])
- The file name has changed to heketi_get_key.yml ([email protected])
- Bug 1615275. Regenerate session_secret if it can't be used with oauth-proxy
- Set correct vars for registry console ([email protected])
- Updating to only iterate over oo_nodes_to_config list for
oo_elasticsearch_nodes ([email protected])
- The l_glusterfs_count is a string need to cast to int for comparison.
- Specify external URL for Prometheus ([email protected])
- Remove unused/broken node cert plays ([email protected])
* Wed Aug 15 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.16.0
- remove the olm project ([email protected])
- fix ASB ClusterServiceBroker removal ([email protected])
- Cleanup logging and metrics deprecations ([email protected])
- Adding default value for openshift_logging_storage_kind ([email protected])
- change default sc nam ([email protected])
- update the commands to restart master api and controller
- fixing image defaults for logging ([email protected])
- node restart: check that all vars are defined ([email protected])
- Revert "loopback_cluster_name: use api_hostname" ([email protected])
- CFME: set default value for openshift_hosted_infra_selector
- vgchange before vgremove update. ([email protected])
- To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
remove device. ([email protected])
* Tue Aug 14 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.15.0
- Update old documentation links ([email protected])
- Replace OpenShift Enterprise references with OpenShift Container Platform
- cluster-monitoring: pass through no_proxy setting
- Add CentoOS Origin repo for 310 release ([email protected])
- cluster-monitoring: Fix OCP image names ([email protected])
- Update documentation links, docs.openshift.org -> docs.okd.io
- Require -hyperkube RPMs instead of -master ([email protected])
- [uninstall] Remove hyperkube package ([email protected])
- Don't require etcd RPM to be installable on masters ([email protected])
- Don't require fast-datapath channel on RHEL ([email protected])
- No longer require SDN to be installed on nodes ([email protected])
- Update release artifacts for OLM ([email protected])
- GlusterFS: Upgrade playbook ([email protected])
- Ensure docker package always installed ([email protected])
- re-order and required values ([email protected])
- Update route53 dns tasks ([email protected])
- Refactor registry-console template and vars ([email protected])
- Fix the ansible-service-broker URL ([email protected])
- [bz1552516] set the external url of prometheus ([email protected])
- Update console branding and doc URL for OKD ([email protected])
- SCC recouncilation has to run with older oc, before node upgrade
- Switch to oc set env, since oc env is now removed ([email protected])
- Add functionality for AWS DNS framework and route53 provider
- matching the name values ([email protected])
- openshift_cluster_monitoring_operator: Fix enterprise images
- adding parameters to allow for load balancer creation ([email protected])
- Limiting additional fact collection to non-masters since we already collect
that information for masters ([email protected])
- Remove unnecessary passlib check ([email protected])
* Sun Aug 12 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.14.0
- Revert "Remove several unused vars" ([email protected])
- Making the app nodes an optional return. ([email protected])
- 'Wait for node to be ready' task should check that all vars are defined
- Ensure kernel-modules not installed on atomic ([email protected])
- Remove extra namespaces field on configmap ([email protected])
- Adding min-port to dnsmasq configuration. ([email protected])
- pull in origin imagestream+template updates ([email protected])
- Revert "openshift_loadbalancer: remove unused vars" ([email protected])
- Remove node CSR approval from upgrade in 3.11 ([email protected])
- loopback_cluster_name: use api_hostname ([email protected])
- Add quotes to node selector ([email protected])
- Bug 1543129 - Add configuration option for ASB local registry namespaces
- Omit resetting openshift_logging_elasticsearch_pvc_dynamic if volume is NFS
- Set claimRef for logging PVC when NFS volume is created previously
- Fix prometheus annotations typo ([email protected])
* Thu Aug 09 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.13.0
- SDN check: Fix parsing time stamp's time zone ([email protected])
* Thu Aug 09 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.12.0
- add equals to quoted skopeo argument ([email protected])
- Fix missing input_image name error. ([email protected])
- excluders cannot be run on Atomic ([email protected])
- Add new line in openshift_node defaults ([email protected])
- Remove openshift_node_use_persistentlocalvolumes ([email protected])
- Remove openshift_node_image_config_latest ([email protected])
- Remove openshift_node_use_<sdn> vars ([email protected])
- Remove openshift_set_node_ip ([email protected])
- Remove openshift_node_proxy_mode ([email protected])
- Remove openshift_master_node_labels ([email protected])
- Remove openshift_manage_node_is_master ([email protected])
- openshift_loadbalancer: remove unused vars ([email protected])
- openshift_hosted: remove openshift_push_via_dns flag ([email protected])
- openshift_hosted: remove ununsed vars ([email protected])
- openshift_facts: remove unused vars ([email protected])
- openshift_expand_partition: remove unused vars ([email protected])
- openshift_examples: remove unused vars ([email protected])
- docker-gc: remove unused var ([email protected])
- Remove unused vars from control_plane role ([email protected])
- Remove unused vars in etcd role ([email protected])
- Be more accuracy for getting def_route_int and def_route_ip
- Remove master env migration module ([email protected])
- Bump OLM version to 0.6.0 ([email protected])
- nuage specific changes for eVDF and some fixes ([email protected])
- Moving file to the image to fix error. ([email protected])
- cluster-monitoring: pass through http(s) proxy settings
- Fix openshift_openstack: Add public API Record ([email protected])
- add OSA 3.11 repos for pre-release ([email protected])
- Renames CRI-O pause_image to openshift_crio_pause_image.
- pylint: disable travis error ([email protected])
- Adding image info to /etc/origin/image.yml on Azure ([email protected])
- Refactor glusterfs for scaleup ([email protected])
- Quote registry credentials for skopeo ([email protected])
- Commit to enable AWS multi avail zone ([email protected])
- rollback node ports ([email protected])
- Output cert check file to more sensible location ([email protected])
- Bug 1611841 - Allow customizing admin console certificates
- Additional cleanup of v1beta1 rbac.authorization ([email protected])
- Fix glusterfs cluster check when condition ([email protected])
- Ensure skopeo and atomic are installed in crt role ([email protected])
- Ensure that monitoring operator has nodes to run ([email protected])
- Don't get file checksum, attributes and mime type in stat module calls
- Bug 1611840 - Correctly set console replicas ([email protected])
- BZ-1608216 Set timeoutSeconds for readinessProbe on Cassandra RCs
- openshift_metering: Add options to use RDS & S3 integrations
- add conditional clauses for handling cnx versions ([email protected])
- roles/openshift_metering: Fix typo in readme ([email protected])
- Remove exclude-bootstrapped logic ([email protected])
- updating doc for SSL cert ([email protected])
- apply the container_runtime for calico ([email protected])
- Enable console picker ([email protected])
- Version_compare filter was renamed to version ([email protected])
- Avoid using deprecated syntax for filters in OLM ([email protected])
- fix bug 1608269 ([email protected])
- oc_obj should correctly identify 'results': [{}] as 'Object not found'
- router-redeploy: don't check that annotations are missing
- Update Calico versions to the latest (v3.1.3) ([email protected])
- Always ensure master config has proper url upgrade ([email protected])
- Move metrics-server out of openshift-monitoring NS ([email protected])
- Don't collect node facts on master - these are set during bootstrap
- Don't set OAUTH_CLIENT_ID in console OAuth secret ([email protected])
- Drop --confirm from migrate storage invocation ([email protected])
- Adding support for an SSL certificate signed by the OpenStack cluster
* Thu Aug 02 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.11.0
- Reorganized OpenStack cloud provider documentation ([email protected])
- Add doc note that kuryr requires openstack cloud provider
- Beginning deprecation of INSTANCE_RAM var in favor of downwardAPI provided
mem limit vol mount ([email protected])
- Adding documentation in hosts.example ([email protected])
- Fix ASB user and password defaults ([email protected])
- Add a license parameter to gcloud command ([email protected])
- adding unmount task below the backup task ([email protected])
- Bug 1610224 - Unable to find container log in Elasticsearch when using cri-o
- Added OpenStack security group requirements section ([email protected])
- Add containerized glusterfs cluster health check ([email protected])
- Allow user to specify local openstack.conf ([email protected])
- Avoid to call install_node_exporter task during uninstallation.
- Add bool filter to all instances of openshift_use_crio ([email protected])
- Cleanup node bootstrap / scaleup code ([email protected])
- Allow shared_non_ops as kibana index mode ([email protected])
- AWS: reboot instance before sealing ([email protected])
- Fix docker reg auth bugs ([email protected])
- Clarified scaling docs, combining master/infra/app sections
- ignore failing dns clean errors when running openstack uninstall playbook
- Updating how we get node names for logging hosts to build sysctl for
- Allow disabling Network Manager managed dns ([email protected])
* Fri Jul 27 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.10.0
- Disable yum-cron by default on GCP ([email protected])
- Revert "logging configure fluent to merge_json_log" ([email protected])
- logging configure fluent to merge_json_log ([email protected])
- How to deploy the cluster autoscaler ([email protected])
- Switch to openshift-node-config in prep for removing openshift start node
- Fix glusterfs storageclass heketi url ([email protected])
- Disable papr on pull requests ([email protected])
- Fedora: Install kernel-modules ([email protected])
- Allow to autoname scale group instances ([email protected])
- Add cert expiry check to upgrades ([email protected])
- handle symlinks in openshift-ansible container image ([email protected])
- Add FeatureGates for NamespacedServiceBrokers ([email protected])
- When the node process is down, don't exit ([email protected])
- Avoid undefined variable glusterfs_heketi_user_key ([email protected])
- Default openshift_is_atomic to false for openshift_repos.
- Added node selector option for CFME role and fixed formatting issues
- Remove sections of kuryr documentation that tell user to disable registry
creation ([email protected])
- Add step to remove all k8s_ containers ([email protected])
- Add RollingUpdate strategy to dockergc deployment config ([email protected])
- Support tabs in resolv.conf ([email protected])
- Add boolean to uninstall for docker ([email protected])
- Remove evaluations if group vars are defined or not
- Add OpenStack node scaleup ([email protected])
- Run DNS and RHN tasks on new masters only ([email protected])
- Add the OpenStack master scaleup playbook ([email protected])
* Mon Jul 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.9.0
- Fix order for invoking the hostpath storage task for registry
* Mon Jul 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.8.0
- metrics-server: fix a typo in installer path ([email protected])
- installer_checkpoint: use .get to avoid warnings printed in 2.6
- add firewall rules for node exporter ([email protected])
- Add rc code to docker_creds module ([email protected])
- Cope with OpenShift returning no value when an environment variable is an
empty string ([email protected])
- catalog: add RBAC rules for namespaced brokers ([email protected])
- allow NFS to be used for registry without marking cluster unsupported
- Adapt role to latest version of cluster-monitoring-operator
- Support specifying the rolebinding name ([email protected])
- update imagestreams from origin ([email protected])
- AWS: use vpc name instead of cluster id when creating security groups
- Set log-path = ~/openshift-ansible.log ([email protected])
- Add OLM install scripts ([email protected])
- Update the OpenStack Cinder PV example ([email protected])
* Thu Jul 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.7.0
- adding 3.11 tito releaser ([email protected])
- Remove alternative oreg vars and update logic ([email protected])
* Thu Jul 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.6.0
- Refactor vars in container-runtime/private ([email protected])
- Remove openshift_docker_is_node_or_master - all masters and etcd hosts are
now nodes ([email protected])
- Fix cpu_limit check in eventrouter template ([email protected])
- Wait for existing nodes to go Ready before approval ([email protected])
- Fix sanity checks for oreg_auth_user and oreg_auth_password
- Remove extra atomic checks ([email protected])
- Remove l_default_container_storage_hosts var ([email protected])
- Remove mentions of oo_hosts_containerized_managed_true group
- only sync actual resource files ([email protected])
- update the default oauth-proxy image for logging ([email protected])
- glusterfs: bind created volume to the claim ([email protected])
- Adds openshift_fs_inotify_max_user_instances to the node tuned profile.
- use local reference policy for dotnet imagestreams ([email protected])
- use local ref policy for all xpaas imagestreams ([email protected])
- Adding aggregate rule for new user authorization ([email protected])
- switch imagestreams to registry.redhat.io ([email protected])
- Rename console logoImageName -> branding ([email protected])
- Add scaleup playbook and docs for OpenStack ([email protected])
- Fix the Neutron DNS docs ([email protected])
- Uses cluster-wide settings for registry URL and credentials as default values
for ASB. ([email protected])
- Add playbook to update reg-auth credentials ([email protected])
- CLOUD-2699 remove EAP 7.0 templates ([email protected])
- Reconfigure admin console after certificates were redeployed
- Add max-size to docker log opts ([email protected])
- Various openshift-cluster-autoscaler changes ([email protected])
- Remove Get heketi route tasks ([email protected])
- generate_pv_pvcs_list: set claimRef for NFS volumes ([email protected])
- Fix storageclass setting for NFS ([email protected])
- Add support for OpenStack internal DNS ([email protected])
- oreg url fix ([email protected])
- Use glusterfs_name and glusterfs_namespace for heketi url
- Use service name for heketi url ([email protected])
- Update sdn, sdn-ovs, sync, fluentd, descheduler to have system-cluster/node-
critical priority classes. ([email protected])
- Install metrics-server pre-upgrade, if metrics ([email protected])
- Split metrics-server into its own playbook/role ([email protected])
- bug 1590920. Bump fluent default memory to 756M ([email protected])
- documentation regarding creating and using a static inventory
- Allow openstack inventory.py to output a static inventory
- Update docker registry auth to idempotent ([email protected])
- Force rebuild of config when upgrading to es5 ([email protected])
- Replace node.js proxy with oauth-proxy ([email protected])
- Addressing tox failures ([email protected])
- sdn: don't blow away all existing CNI plugins or config ([email protected])
- Add openshift_docker_gc role to upgrade path ([email protected])
- PAPR: install new requirements during upgrade ([email protected])
- Remove ec2_group - available upstream ([email protected])
- Remove rpm_q - not used ([email protected])
- Defining a default for logging_elasticsearch_rollout_override var in es
handler ([email protected])
- Only gather hosts when installing logging, otherwise remove sysctl file from
all ([email protected])
- Updating to require es node selectors for es5 install, only create sysctl
files for nodes es will run on and clean up sysctl files when uninstalling
logging ([email protected])
- Exclude existing masters from node list for CSR approval during node and
master scaleup. ([email protected])
- Fixup various TODO sections of code ([email protected])
- Add check for oreg_password by default ([email protected])
- Setup logrotate on nodes once ([email protected])
- Add openshift_metering role and playbook ([email protected])
- Remove callback plugin, artifact of a quick installer ([email protected])
- Update README ([email protected])
- Fix version requirements ([email protected])
- Fixing missing _es_version variable ([email protected])
- action_plugin_test: add necessary vars to support unittests in ansible 2.6
- ASB migrate: impove result checking ([email protected])
- Use ansible 2.6 ([email protected])
- Remove old service files before masking them ([email protected])
- switch to registry.redhat.io for infra images ([email protected])
- Fix to shebang in bootstrap script ([email protected])
- Do not delete IAM cert if explicitely requested ([email protected])
- Ensure nodes created by a scale group have a Name tag ([email protected])
- gcp: add custom repo when building base image ([email protected])
- Sync Fuse console templates ([email protected])
- Remove unused node config ([email protected])
- Remove system container bits from etcd ([email protected])
- Allow installs of Node Problem Detector during upgrades ([email protected])
- Clean cloud-init path ([email protected])
- Add atomic package to base and debug package lists
- make logging rely on a single SG index ([email protected])
- Accept client certs from node, system:admin, and bootstrap SA
- Make openshift_control_plane/check_master_api_is_ready.yml generic
- Install OpenShift admin console ([email protected])
- Add a components public playbook ([email protected])
- Wait for API availability before migrating storage, add retries
- Uninstall playbook respects openshift_use_openshift_sdn.
- Suppress unexpected error caused by non-English locale during CRI-O
installation ([email protected])
- google-cloud-sdk is x86_64 only ([email protected])
- Add SDN health check ([email protected])
- [RHDM-662] - Update RHDM templates on OCP and OSO ([email protected])
- [RHDM-662] - Update RHDM templates on OCP and OSO ([email protected])
- Add simonpasquier to the OWNERS file for prometheus installer
- hardcode flexvolume path on atomic hosts ([email protected])
- add EAP CD 13 to OS 3.10 ([email protected])
- Allow the 9k-10k port range for Prometheus ([email protected])
- Use OPENSHIFT_CLUSTER env in OpenStack uninstall ([email protected])
- Azure: update create_and_publish_offer to match new offer/SKUs
- Add EAP CD 13 imagestream and templates. ([email protected])
- Fix scalegroup upgrades so don't have to delete ASG's. ([email protected])
- prometheus: upgrade prometheus to 2.3.1 ([email protected])
- prometheus: upgrade alertmanager to 0.15.0 ([email protected])
- prometheus: upgrade node_exporter to 0.16.0 ([email protected])
- add node get-node-logs script ([email protected])
- Dedicated etcd nodes should not be added to oo_nodes_to_upgrade
- Don't upgrade nodes which only have dedicated etcd ([email protected])
- fix metrics become syntax ([email protected])
- standalone etcds: make sure etcd facts are set before applying etcd config
- additional changes to remove discovery plugin from logging
- Convert rbac v1beta to v1 ([email protected])
- Increate lbaas_activation_timeout for kuryr-controller ([email protected])
- Change multipath prio from const to alua ([email protected])
- Certificates signed by admins should be approved ([email protected])
- change become syntax ([email protected])
- Migrate old master env files to new location ([email protected])
- Make sure that we use rslave mount propagation ([email protected])
- Update ansible code to preseve path on non-atomic hosts ([email protected])
- Add kubelet-plugins to allowed locations ([email protected])
- Mount kubelet plugins inside controller ([email protected])
- Fix volume location in containarized installs ([email protected])
- updating link to Origin install documentation for latest
- PAPR: tee update log in a separate file so that it won't be truncated
- Make fs_inotify_max_user_watches configurable. ([email protected])
- change heketi logic ([email protected])
- Mark ready nodes as accepted during oc_adm_csr approval.
- Remove the extra OpenStack network tasks ([email protected])
- Add infra secgroup rules to the flat secgrp rules ([email protected])
- Stop throwing exception except ValueError ([email protected])
- Add unit test for validate_json_format_vars ([email protected])
- Validate json variable in sanity check ([email protected])
- create an imagestream import secret for importing samples
- Use openshift_is_atomic fact from delegated host ([email protected])
- Update etcd pod to 3.2.22 ([email protected])
- Add build_image playbook for OpenStack ([email protected])
- Enable extended validation of routes by default ([email protected])
- Configure node proxy settings on bootstrapped nodes ([email protected])
- Bind the node-proxier role to the SDN SA ([email protected])
- Copying acs-engine output to know location. ([email protected])
- Disable the wifi collector in node_exporter ([email protected])
- etcd: add clientAuth to server usage ([email protected])
- Bug 1589134- Namespace the CRD variable to prevent collision
- Allowing for build artifacts to persist. ([email protected])
- Gather master facts to make sure cluster_hostname gets appended to no_proxy
list on nodes ([email protected])
- Get acs-engine from new CI namespace ([email protected])
- Add Data Grid 7.2 to OpenShift Cloud Platform ([email protected])
- Discourage use of openshift_docker_additional_registries ([email protected])
- Ensure SkyDNS is enabled with Kuryr SDN ([email protected])
- Make regex for the openshift_pkg_version simpler ([email protected])
- Add unit tests for check_pkg_version_format and check_release_format
- Add format check of openshift_pkg_version and openshift_release
- Fix openshift_logging on Python3 ([email protected])
- Correct tests used as filters ([email protected])
- Only dump oreg_url when value is defined. ([email protected])
- openshift-logging use headless service for node discovery
- Variablizing vm size for azure. ([email protected])
- Add a debug statement to the image build to dump tag information.
- Fix openshift_node_config_name in bootstrap.yml. ([email protected])
- Move os_sdn_network_plugin_name into openshift_facts ([email protected])
- Update routers that are defined in openshift_hosted_routers
- Clarify example for osm_etcd_image ([email protected])
- Bump grafana version ([email protected])
- Increase watch_retry_timeout for kuryr-daemon ([email protected])
- Find router pods with fully qualified prefixes during upgrade
- Grafana: convert grafana_service_targetport in annotations
- bump xpaas to 1.4.14 ([email protected])
- Deploy grafana if openshift_hosted_grafana_deploy is set
- Add configmap-generator templates ([email protected])
- Adding owners file for openshift_logging_defaults role ([email protected])
- Change metrics-server project to "openshift-monitoring" ([email protected])
- Unify openshift_metrics_server image to standard format ([email protected])
- Remove openshift_version_gte_3_9 conditions ([email protected])
- Revert "Revert "Add metrics-server to openshift-metrics playbook""
- Remove haproxy from node package set ([email protected])
- Reconfigure web console after certificates were redeployed
- azure: disable waagent data disk management ([email protected])
- Bug 1558689 - Add iproute to Dockerfile.rhel7 ([email protected])
- configure imagePolicyConfig:allowedRegistriesForImport ([email protected])
- Deprecate openshift_node_kubelet_args and openshift_node_labels
- "Fixed ns_update var check" ([email protected])
- check_htpasswd_provider: throw error if openshift_master_identity_providers
is not parsed into a list ([email protected])
- no_proxy: use 'append' to properly add a string to a list
- Update Kuryr CNI template to 3.11 ([email protected])
- change from none to len of the string ([email protected])
- manage_node: don't add extra labels to infra/compute/master nodes
- Maybe the symlink is slightly off? ([email protected])
- openshift_aws: enabled different instance type to be used
- Persist oreg_url in node image ([email protected])
- default_storage: configure rolebindings for azure-file storage backend
- default_storage: allow configuring mountOptions and reclaimPolicy
- lib_openshift/oc_storageclass: support mountOptions and reclaimPolicy
- Add node_group_checks to openshift_node_group.yml ([email protected])
- Fully qualify all openshift/origin and openshift3/ose images
- Change the order of template_var calls in check_htpasswd_provider
- Set UID,fsGroup and Linux options to cassandra RC's ([email protected])
- Removing var openshift_logging_es5_techpreview and multi-version structures
in logging roles ([email protected])
- Sync grafana deployment. to openshift-monitoring. ([email protected])
- Set `openshift_node_group_name` for the CNS nodes ([email protected])
- Revert "Migrate hawkular metrics to a new namespace" ([email protected])
- Add doc link to check_for_config ([email protected])
- Fix invalid openshift_master_audit_config in hosts.example
- Record etcd static pod version only if master-exec has stdout
- Revert update to 3.10 registry console template ([email protected])
- Fix registry gluster storage variable ([email protected])
- Add openshift_master_cluster_hostname to no_proxy list ([email protected])
- Remove umount /var/lib/docker as docker-storage-setup --reset umount it
- Fix wrong path to docker storage ([email protected])
- Clean up docker-storage in a reliable mannger ([email protected])
- bug 1575546. Fix logging eventrouter cpu requests ([email protected])
- PAPR: set docker log driver to journald so that journal artifacts contain
docker logs too ([email protected])
- PAPR: upgrade from 3.10 branch ([email protected])
- Fixed add_container_provider.yaml so it uses openshift_management_project
variable name instead of set name ([email protected])
- Add openshift-node entry-point playbooks ([email protected])
- Update README.md ([email protected])
- Update README.md ([email protected])
- Updating node group mappings to use an openshift specific tag.
- Add extensions to included task file directives ([email protected])
- upgrade: storage migrations should use 'until' to properly retry migrations
- upgrade: init facts on nodes so that NO_PROXY would include nodes
- bug 1575903. Default ES memory to 8G ([email protected])
- Appease yamllint ([email protected])
- Fix nsupdate with allinone ([email protected])
- master config: join bootstrap settings and sync DS tasks
- Add prometheus port annotation for Grafana service ([email protected])
- add missing backticks ([email protected])
- Use ansible systemd module to check service status
- Fix OpenStack all-in-one cluster deployment ([email protected])
- Confirm iptables service status by checking command status
- Makes redeploy-registry-certificates consistent with
openshift_hosted_manage_registry. ([email protected])
- Allow for overriding of the elb names to support shorter endings for the
names ([email protected])
- When: openshift_use_kuryr --> all instances updated ([email protected])
- no longer checks if default(false) == true, casts to int
- Enable container_manage_crgroup sebool ([email protected])
- Get Kuryr Services checks openshift_use_kuryr==true before starting
- Fix S3 storage class path ([email protected])
- add openstack docs about swift/ceph rados gw backed registry
- Add support for subnet per namespace kuryr feature ([email protected])
- [RHPAM-859] - Include RHPAM templates in OpenShift release
- Add Prometheus scrape config for openshift-logging ([email protected])
- Adding sslcacert to additional repos ([email protected])
- Update glusterfs README about uninstall playbook ([email protected])
* Fri Jun 15 2018 Scott Dodson <[email protected]> 3.11.0-0.1.0
- Initial 3.11 support ([email protected])
- bump to 3.11 ([email protected])
- Branch for v3.11 ([email protected])
- Standardize master restart ([email protected])
- Enable monitoring to scrape across namespaces ([email protected])
- Fix to pass quoted unsafe strings (with characters like *,<,%%) correctly to
kubelet ([email protected])
- Bug 1584609 - Update iptablesSyncPeriod in node-config.yaml
- Bug 1591186 - Skip version and sanity checks for openshift_node_group.yml
- registry-console: limit pods to masters ([email protected])
- Align node startup async tasks with the ExecStartTimeout value
- bug 1572493. Update default logging NS in openshift_health_checker
- Fix minor indentation ([email protected])
- azure: pass image_name into tasks/create_blob_from_vm.yml
- azure: tag image as valid=true, not valid=True ([email protected])
- azure: don't try to print deployment failure message when there isn't one
- Azure: use empty dict if input image has no tags ([email protected])
- No code in openshift-ansible should be using CONFIG_FILE
- Add support for hostpath persistent volume definitions ([email protected])
- Revert "Make SDN read config file from sysconfig" ([email protected])
- Sync daemonset should start after node configmaps are created to avoid race
conditions ([email protected])
- Switch papr to use our new composite groups ([email protected])
- fix typo to leave only one ([email protected])
- Fix hostname check failure message ([email protected])
- Add retries to SCC check on upgrade ([email protected])
- mount host signature lookaside configuration ([email protected])
- checks for . ([email protected])
- Adding etcd image variables to fix azure deployments. ([email protected])
- Add master-infra and all-in-one node-configs ([email protected])
- Fix the docs, add additional .parr file description ([email protected])
- Move openshift_node_group to private play ([email protected])
- Don't restart dnsmasq during upgrade ([email protected])
- Fix ansible_service_broker role, needs openshift_facts ([email protected])
- Migrate HPA scale target refs in storage migration ([email protected])
- fixes ([email protected])
- Add a bit of detail about how to get configmaps during upgrade
- Deploy shim scripts based on the runtime in use ([email protected])
- Upgrade cri-o ([email protected])
- Fix quoting ([email protected])
- roles: openshift_control_plane: move docker scripts to crictl
- Install cri-tools even when crio isn't in use ([email protected])
- suggestions ([email protected])
- GlusterFS: Add GlusterFS hosts to openshift-hosted/config.yml playbook
- Add some openshift_node_group and openshift_node_group_name docs
- Fix sanity_checks typos ([email protected])
- Upgrade router and registry only when these are managed ([email protected])
- [WIP] Azure: calculate input image for base and node image
- Migrate hawkular metrics to a new namespace ([email protected])
- Set openshift_node_group_name for AWS hosts. ([email protected])
- Device_type is deprecated for block devices. Use volume_type instead.
- Fix flaky use of `oc process` ([email protected])
- Bug 1589015 - Switch to rolling deployment for web console
- Move openshift_master_manage_htpasswd into openshift_facts
- Bug 1586197 - Increase async timeout ([email protected])
- Make the number of service catalog retries configurable ([email protected])
- Remove default selector from sample inventory ([email protected])
- Check for node-group configmaps during upgrades ([email protected])
- Fix the flake8 and pylint errors ([email protected])
- Add kuryr label examples to the sample inventory ([email protected])
- Remove podman from install it creates problems ([email protected])
- Set openshift_node_group_name in OpenStack inventory ([email protected])
- [WIP] azure - do not tag node images as valid automatically
- Add placeholder for openshift_node_group play ([email protected])
- Check for undefined node_output.results ([email protected])
- Updating fluentd label and wait to be in a single shell rather than running a
script from /tmp ([email protected])
- Add Luis Tomas to Kuryr and OpenStack owners ([email protected])
- add task to import_role ([email protected])
- remove svc creation and master config from base tasks in vsphere cloud
provider ([email protected])
- azure: add no_log: true to acs-engine deploy task ([email protected])
- allow node config sync controller to handle multiple node labels
- Fix multimaster OpenStack deployment failure ([email protected])
- Force openshift_node_group_name for all nodes ([email protected])
- Update ansible_service_broker_node_selector to new version
- azure: always build images using ssd-backed VM ([email protected])
- azure: ensure cloud provider config is laid down in bootstrap node config
- Ensure repos only run during prerequisites.yml ([email protected])
- dockergc: change image name to ose-control-plane ([email protected])
- Remove openshift_dns_ip configuration, not valid in 3.10 ([email protected])
- Do not force-terminate etcd ([email protected])
- typo ([email protected])
- Remove unused registry-console's imagestream ([email protected])
- Ensure packages are latest ([email protected])
- Install cri-tools and podman ([email protected])
- Generalized storage setup for nodes ([email protected])
- azure: format data disk for docker use ([email protected])
- update azure OWNERS ([email protected])
- Added container_manage_cgroup in order for systemd to run in pods due to
update in selinux policy ([email protected])
* Wed Jun 06 2018 Justin Pierce <[email protected]> 3.10.0-0.63.0
- Bug 1586366 - Use include_tasks for dynamic task file includes
- Make prometheus use persistent storage by default ([email protected])
- Make Kuryr connect to OpenShift API through LB ([email protected])
* Wed Jun 06 2018 Justin Pierce <[email protected]> 3.10.0-0.61.0
- Apply app label to console replica sets and pods ([email protected])
- Only look for etcd pod on etcd hosts that are colocated w/ master
- include tcpdump in azure images ([email protected])
- Add a prerequisite check for the nsupdate var ([email protected])
- Add examples to the documentation ([email protected])
- Allow empty openshift_openstack_clusterid ([email protected])
- Update the DNS documentation ([email protected])
- Decouple the zone from the full cluster dns name ([email protected])
- Add option to pass OpenStack CA cert to Kuryr ([email protected])
* Tue Jun 05 2018 Justin Pierce <[email protected]> 3.10.0-0.60.0
-
* Tue Jun 05 2018 Justin Pierce <[email protected]> 3.10.0-0.59.0
- Don't verify java-1.8.0-openjdk ([email protected])
- Stage cri-o packages ([email protected])
- Upgrade cri-o during node upgrade ([email protected])
- Wait up to 10 minutes on image pulls ([email protected])
- Bug 1585648- Set timeout for ASB migration job (workaround for
kubernetes/kubernetes#62382) ([email protected])
- Revert "Remove unused imagestream of registry-console" ([email protected])
- crio-network: fix definition for systemd ([email protected])
- container_runtime: do not depend on iptables when using firewalld
* Fri Jun 01 2018 Justin Pierce <[email protected]> 3.10.0-0.58.0
- Fix dockergc images ([email protected])
- iSCSI: Start multipathd ([email protected])
- cri-o: If defaulting to openshift_release prefix it with v
- Updating kibana proxy image to match reg url pattern of other components
- Increase the delay between checking for image pull success
- Initialise repos before installing packages ([email protected])
- fix typo for component ([email protected])
- fix descheduler image version typo ([email protected])
- Splitting output over using stdout_lines due to name formatting
- Adding a placeholder for etcd_ip. ([email protected])