forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathopenshift-ansible.spec
8414 lines (7903 loc) · 441 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 3.11.0
Release: 0.1.0
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.4.3
Requires: python2
Requires: python-six
Requires: tar
Requires: %{name}-docs = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Obsoletes: atomic-openshift-utils <= 3.10
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
Requires: python-passlib
Requires: python2-crypto
Requires: patch
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp -rp inventory/dynamic %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp ansible.cfg %{buildroot}%{_datadir}/ansible/%{name}/ansible.cfg
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/hosts.* inventory/README.md docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# touch a file in contiv so that it can be added to SCM's
touch %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/.empty_dir
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/inventory
%{_datadir}/ansible/%{name}/ansible.cfg
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}-%{release}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# Along the history of openshift-ansible, some playbook directories had to be
# moved and were replaced with symlinks for backwards compatibility.
# RPM doesn't handle this so we have to do some pre-transaction magic.
# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the paths to directories being replaced below.
-- DO NOT add a trailing slash at the end.
dirs_to_sym = {
"/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library",
"/usr/share/ansible/openshift-ansible/playbooks/certificate_expiry"
}
for i,path in ipairs(dirs_to_sym) do
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}-%{release}
Obsoletes: %{name}-lookup-plugins
Obsoletes: %{name}-filter-plugins
Obsoletes: %{name}-callback-plugins
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
%changelog
* Fri Jun 15 2018 Scott Dodson <[email protected]> 3.11.0-0.1.0
- Initial 3.11 support ([email protected])
- bump to 3.11 ([email protected])
- Branch for v3.11 ([email protected])
- Standardize master restart ([email protected])
- Enable monitoring to scrape across namespaces ([email protected])
- Fix to pass quoted unsafe strings (with characters like *,<,%%) correctly to
kubelet ([email protected])
- Bug 1584609 - Update iptablesSyncPeriod in node-config.yaml
- Bug 1591186 - Skip version and sanity checks for openshift_node_group.yml
- registry-console: limit pods to masters ([email protected])
- Align node startup async tasks with the ExecStartTimeout value
- bug 1572493. Update default logging NS in openshift_health_checker
- Fix minor indentation ([email protected])
- azure: pass image_name into tasks/create_blob_from_vm.yml
- azure: tag image as valid=true, not valid=True ([email protected])
- azure: don't try to print deployment failure message when there isn't one
- Azure: use empty dict if input image has no tags ([email protected])
- No code in openshift-ansible should be using CONFIG_FILE
- Add support for hostpath persistent volume definitions ([email protected])
- Revert "Make SDN read config file from sysconfig" ([email protected])
- Sync daemonset should start after node configmaps are created to avoid race
conditions ([email protected])
- Switch papr to use our new composite groups ([email protected])
- fix typo to leave only one ([email protected])
- Fix hostname check failure message ([email protected])
- Add retries to SCC check on upgrade ([email protected])
- mount host signature lookaside configuration ([email protected])
- checks for . ([email protected])
- Adding etcd image variables to fix azure deployments. ([email protected])
- Add master-infra and all-in-one node-configs ([email protected])
- Fix the docs, add additional .parr file description ([email protected])
- Move openshift_node_group to private play ([email protected])
- Don't restart dnsmasq during upgrade ([email protected])
- Fix ansible_service_broker role, needs openshift_facts ([email protected])
- Migrate HPA scale target refs in storage migration ([email protected])
- fixes ([email protected])
- Add a bit of detail about how to get configmaps during upgrade
- Deploy shim scripts based on the runtime in use ([email protected])
- Upgrade cri-o ([email protected])
- Fix quoting ([email protected])
- roles: openshift_control_plane: move docker scripts to crictl
- Install cri-tools even when crio isn't in use ([email protected])
- suggestions ([email protected])
- GlusterFS: Add GlusterFS hosts to openshift-hosted/config.yml playbook
- Add some openshift_node_group and openshift_node_group_name docs
- Fix sanity_checks typos ([email protected])
- Upgrade router and registry only when these are managed ([email protected])
- [WIP] Azure: calculate input image for base and node image
- Migrate hawkular metrics to a new namespace ([email protected])
- Set openshift_node_group_name for AWS hosts. ([email protected])
- Device_type is deprecated for block devices. Use volume_type instead.
- Fix flaky use of `oc process` ([email protected])
- Bug 1589015 - Switch to rolling deployment for web console
- Move openshift_master_manage_htpasswd into openshift_facts
- Bug 1586197 - Increase async timeout ([email protected])
- Make the number of service catalog retries configurable ([email protected])
- Remove default selector from sample inventory ([email protected])
- Check for node-group configmaps during upgrades ([email protected])
- Fix the flake8 and pylint errors ([email protected])
- Add kuryr label examples to the sample inventory ([email protected])
- Remove podman from install it creates problems ([email protected])
- Set openshift_node_group_name in OpenStack inventory ([email protected])
- [WIP] azure - do not tag node images as valid automatically
- Add placeholder for openshift_node_group play ([email protected])
- Check for undefined node_output.results ([email protected])
- Updating fluentd label and wait to be in a single shell rather than running a
script from /tmp ([email protected])
- Add Luis Tomas to Kuryr and OpenStack owners ([email protected])
- add task to import_role ([email protected])
- remove svc creation and master config from base tasks in vsphere cloud
provider ([email protected])
- azure: add no_log: true to acs-engine deploy task ([email protected])
- allow node config sync controller to handle multiple node labels
- Fix multimaster OpenStack deployment failure ([email protected])
- Force openshift_node_group_name for all nodes ([email protected])
- Update ansible_service_broker_node_selector to new version
- azure: always build images using ssd-backed VM ([email protected])
- azure: ensure cloud provider config is laid down in bootstrap node config
- Ensure repos only run during prerequisites.yml ([email protected])
- dockergc: change image name to ose-control-plane ([email protected])
- Remove openshift_dns_ip configuration, not valid in 3.10 ([email protected])
- Do not force-terminate etcd ([email protected])
- typo ([email protected])
- Remove unused registry-console's imagestream ([email protected])
- Ensure packages are latest ([email protected])
- Install cri-tools and podman ([email protected])
- Generalized storage setup for nodes ([email protected])
- azure: format data disk for docker use ([email protected])
- update azure OWNERS ([email protected])
- Added container_manage_cgroup in order for systemd to run in pods due to
update in selinux policy ([email protected])
* Wed Jun 06 2018 Justin Pierce <[email protected]> 3.10.0-0.63.0
- Bug 1586366 - Use include_tasks for dynamic task file includes
- Make prometheus use persistent storage by default ([email protected])
- Make Kuryr connect to OpenShift API through LB ([email protected])
* Wed Jun 06 2018 Justin Pierce <[email protected]> 3.10.0-0.61.0
- Apply app label to console replica sets and pods ([email protected])
- Only look for etcd pod on etcd hosts that are colocated w/ master
- include tcpdump in azure images ([email protected])
- Add a prerequisite check for the nsupdate var ([email protected])
- Add examples to the documentation ([email protected])
- Allow empty openshift_openstack_clusterid ([email protected])
- Update the DNS documentation ([email protected])
- Decouple the zone from the full cluster dns name ([email protected])
- Add option to pass OpenStack CA cert to Kuryr ([email protected])
* Tue Jun 05 2018 Justin Pierce <[email protected]> 3.10.0-0.60.0
-
* Tue Jun 05 2018 Justin Pierce <[email protected]> 3.10.0-0.59.0
- Don't verify java-1.8.0-openjdk ([email protected])
- Stage cri-o packages ([email protected])
- Upgrade cri-o during node upgrade ([email protected])
- Wait up to 10 minutes on image pulls ([email protected])
- Bug 1585648- Set timeout for ASB migration job (workaround for
kubernetes/kubernetes#62382) ([email protected])
- Revert "Remove unused imagestream of registry-console" ([email protected])
- crio-network: fix definition for systemd ([email protected])
- container_runtime: do not depend on iptables when using firewalld
* Fri Jun 01 2018 Justin Pierce <[email protected]> 3.10.0-0.58.0
- Fix dockergc images ([email protected])
- iSCSI: Start multipathd ([email protected])
- cri-o: If defaulting to openshift_release prefix it with v
- Updating kibana proxy image to match reg url pattern of other components
- Increase the delay between checking for image pull success
- Initialise repos before installing packages ([email protected])
- fix typo for component ([email protected])
- fix descheduler image version typo ([email protected])
- Splitting output over using stdout_lines due to name formatting
- Adding a placeholder for etcd_ip. ([email protected])
- Updating logic when we are scaling up to skip health checks
* Fri Jun 01 2018 Justin Pierce <[email protected]> 3.10.0-0.57.0
- Ensure that vsphere is configured for master services
- Refactor gluster image to use oreg_url ([email protected])
- Approve node CSRs during node upgrade ([email protected])
- Update Prometheus to scrape the router metrics ([email protected])
- Avoid kuryr healthcheck ports collision ([email protected])
* Thu May 31 2018 Justin Pierce <[email protected]> 3.10.0-0.56.0
- Replace csr 'accepted' field with '{server,client}_accepted' fields and wait
for server and client requests to be approved. ([email protected])
- added certain vars to openshift_node_group/vars/main.yml
- Remove openshift_web_console_image_name and related ([email protected])
- Refactor etcd_image to support oreg_url ([email protected])
- Bug 1584285 - remove extra space from hostSubnetLength ([email protected])
- fixed node label bug ([email protected])
- Skip prepull status check when etcd is being scaled up ([email protected])
- Add openshift_facts dependency to TSB role ([email protected])
- Clean oc caches after openshift APIs have registered ([email protected])
- Wait for Openshift APIs to register themselves ([email protected])
- Add steps to debug control plane pods state if components didn't come up
- Update etcd pod liveness check params ([email protected])
- Wait for all control plane pods to become ready ([email protected])
- Revert deletion of imagestream and point it from deploymentconfig
- Add sanity checks for removed component image variables ([email protected])
- Refactor various components to utilize oreg_url ([email protected])
- Port 10256 must be open for service load balancers to work
- Change file permissions on console serving cert ([email protected])
- Remove unused imagestream of registry-console ([email protected])
- sync: don't match the script PID when attempting to kill kubelet
- Create default project nodeSelector for NPD to run on all nodes (including
masters) ([email protected])
- Ensure public net id is configured for Kuryr SDN ([email protected])
- Prometheus nodeselector defaults to hosted nodeselector ([email protected])
* Tue May 29 2018 Justin Pierce <[email protected]> 3.10.0-0.54.0
- cluster_monitoring_operator: Wait for CRD to be created ([email protected])
- Fix master-config.yaml typo ([email protected])
- Drop OVS from package version check ([email protected])
- Prepull etcd image ([email protected])
- prepull: set async to 0 so that task wouldn't block others
- Fix wrong command suggestion for oc adm policy reconcile-sccs
- Update openshift.json acsengine file with unstable for master.
- Specify all node packages and versions for upgrade ([email protected])
- Enable metrics scraping of availability apps ([email protected])
* Fri May 25 2018 Justin Pierce <[email protected]> 3.10.0-0.53.0
- Use registry short name rather than fqdn ([email protected])
- Upgrade to cluster-monitoring-operator:v0.0.4 ([email protected])
- Improve the wording when we block SCC reconciliation ([email protected])
- azure: tag working resource groups with "now", so that they will be pruned if
necessary ([email protected])
- Refactor logging image strings ([email protected])
- master config: remove PodPreset ([email protected])
* Fri May 25 2018 Justin Pierce <[email protected]> 3.10.0-0.52.0
- Set imagePolicyConfig.internalRegistryHostname ([email protected])
- docker: Fixup graph directory labels after docker starts ([email protected])
- fixed volume-config bug; this wasn't being applied appropriately
- Upgrade to cluster-monitoring-operator:v0.0.3 ([email protected])
- Revert "openshift_monitor_availability: use oc_obj and oc_process"
- openshift_monitor_availability: use oc_obj and oc_process
- Remove insights from origin node image build. ([email protected])
- Cleaned up openshift_node_group; fixed the labels; added a playbook to invoke
just the openshift_node_group ([email protected])
* Wed May 23 2018 Justin Pierce <[email protected]> 3.10.0-0.51.0
- Adding publish to the oo_azure module. ([email protected])
- Add master IPs to no proxy list so that liveness checks would pass
- Fix master scaleup play init_fact hosts ([email protected])
- etcd: use etcdctl cluster-health cmd for liveness probe ([email protected])
- Package pre-downloads should cause failure if required packages can not be
found ([email protected])
- Correct conditional for cloud provider ([email protected])
- Quote openshift_release in example inventory. ([email protected])
- Maintaining the same user for removing temp dir ([email protected])
- Default openshift_use_openshift_sdn to True in openshift_facts
- Refactor template_service_broker_image ([email protected])
- Cleanup ansible_service_broker_image ([email protected])
- Unify openshift_service_catalog image to standard format ([email protected])
- Pre-pull images before starting API and controller ([email protected])
- Install python-docker in prerequisites ([email protected])
- Run registry migrations when openshift_hosted_manage_registry
- Redeploy docker-registry during upgrade only if dc exists
- etcd runtime: system container can be etcd too ([email protected])
- update to oo_glusterfs_to_config as other hosts already configured with NTP.
- bug 1581052: specify the namespace ([email protected])
- Document the openshift_node_port_range variable ([email protected])
- Adding checks to make sure we dont fail if .failed doesnt exist
- Remove old openshift binaries from containerized upgragde
- Fix hosts.example openshift_master_oauth_templates ([email protected])
- include base_package playbook in glusterfs config and registry playbooks by
means of variables. This way NTP will be set using timedatectl in all the
nodes. ([email protected])
- Consolidate image diciontaries and strings ([email protected])
- Changing what we check for with is_upgrade set_fact in curator main
- add volume config generation ([email protected])
- Ensure sanity checks are run during upgrade ([email protected])
- Update lib_openshift doc strings to reflect module name ([email protected])
- NTP service is a pre-requisite for glusterfs. Ensure it is enabled and
started in host. ([email protected])
- Add openshift_openstack_heat_template_version option ([email protected])
* Mon May 21 2018 Justin Pierce <[email protected]> 3.10.0-0.50.0
-
* Mon May 21 2018 Justin Pierce <[email protected]> 3.10.0-0.49.0
- Adding strace and insights-client ([email protected])
- Updating process for doing a rolling and full cluster upgrades
- fix The error was: KeyError: 'userNames' ([email protected])
- catalog: add -cluster-id-configmap-namespace=kube-service-catalog flag
- Specify service port for Prometheus scraping ([email protected])
- avoid drop_colomun in query. ([email protected])
* Fri May 18 2018 Justin Pierce <[email protected]> 3.10.0-0.48.0
- API liveness probe: set timeout to 10 sec to prevent API restart if the
system is busy ([email protected])
- removing dnsmasq-node.conf.j2 since nothing is referencing it.
- Fixup SELinux permissions for docker when using a different graph path
- bug 1579723: use ansible_service_broker_dashboard_redirector_route in ASB
configmap ([email protected])
- RPM is currently the only way to install CRIO ([email protected])
- Mention openshift_crio_only in hosts.example ([email protected])
- openshift_checks: ignore docker_storage check if only CRIO is used
- Bug 1579269 - Updating the CRD resource names for migration.
- Adding image publishing capability to azure playbooks. ([email protected])
- Update Jinja tests used as filters ([email protected])
- Add patch to installer image ([email protected])
- Enable monitoring upgrades ([email protected])
- Adding support for node images on 3.10 for azure. ([email protected])
- ASB nodeselector needs to be converted to json to avoid possible python
unicode issues ([email protected])
- Revert "Install node-dnsmasq configuration file" ([email protected])
- Force creating hard- and softlinks ([email protected])
- Add default value to openshift_reconcile_sccs_reject_change
- Stop upgrade when existing sccs will be changed ([email protected])
- fix descheduler pod should be critical pod ([email protected])
- pass cluster cidr to proxy ([email protected])
- Fix unwanted removal of openshift.fact file ([email protected])
- Implicitly create node's IST in Kuryr's namespace ([email protected])
- openshift-node: sync script with origin ([email protected])
- oc_system_container: remove existing service file ([email protected])
- Remove correct files when converting to master configs to static
- PARP: make sure FQDN matches internal IP ([email protected])
- PAPR: rename upgrade tasks ([email protected])
- PAPR: run upgrade from 3.9 branch ([email protected])
- Add new key and remove deprecated key for master network conf
- Remove double_upgrade bits ([email protected])
- Add static cluster id label to alerts ([email protected])
- Fixes #7009: Hardcoded namespace default in lib_openshift/oc_adm_router
- Update requirements.txt ([email protected])
- Bug 1561485- get now returns empty instead of error when the namespace is
missing ([email protected])
- Update generate_pv_pvcs_list.py ([email protected])
- add support for vsphere-volume registry and other services
* Tue May 15 2018 Justin Pierce <[email protected]> 3.10.0-0.47.0
- Updating fluentd docker container mount path ([email protected])
* Tue May 15 2018 Justin Pierce <[email protected]> 3.10.0-0.46.0
- source azure credentials file ([email protected])
- Copy files from openshift_master_generated_config_dir instead using hardlinks
- Skip "At least one master is schedulable" when no masters are set in
oo_masters_to_config ([email protected])
* Tue May 15 2018 Justin Pierce <[email protected]> 3.10.0-0.44.0
- Conditionally use upgraded version of Calico for different versions
* Mon May 14 2018 Justin Pierce <[email protected]> 3.10.0-0.43.0
- Fix path annotation for the Prometheus ([email protected])
* Mon May 14 2018 Justin Pierce <[email protected]> 3.10.0-0.42.0
- Don't validate registry certificates when registry is disabled
- Node system container no longer depends on master services
- Install node-dnsmasq configuration file ([email protected])
- repoquery: Omit exclude lines when ignoring excluders
- PAPR: make ansible output verbose and drop ansible.log ([email protected])
- PAPR: human-readable output ([email protected])
- PAPR: set debug_level ([email protected])
- PAPR: always upload systemd logs, use verbose output and split systemd logs
- Kuryr: Copy CNI plugins as DaemonSet initContainer ([email protected])
* Fri May 11 2018 Justin Pierce <[email protected]> 3.10.0-0.41.0
-
* Fri May 11 2018 Justin Pierce <[email protected]> 3.10.0-0.40.0
- Readd crio registry variables ([email protected])
- Add in crio pause image code back ([email protected])
- azure: revoke sas url before deleting resource group ([email protected])
- Replace and refactor openshift_is_containerized in places
- Remove kuryr leftovers before removing the stack ([email protected])
- Fix crio pause image syntax ([email protected])
- Using existing nodeselectors for logging components as more sane defaults
- Update playbooks/adhoc/uninstall.yml
- Remove duplicate slurp of session_secrets ([email protected])
- Cleanup systemcontainer bits ([email protected])
- Add critical pod annotation so that descheduler does not evict itself or does
not get evicted by others. ([email protected])
- Make SDN read config file from sysconfig ([email protected])
- Don't remove node-config yaml when bootstrapping ([email protected])
- Fix undefined variable for existing network config ([email protected])
- Remove containerized lb support ([email protected])
- Fix hard-coded version in master config imageConfig.format
- Switch from public subnet id to network id at kuryr ([email protected])
- Fixes #8316 - upgrade from 3.9 w/o ASB to 3.10 with ASB fails
- Ensure we're running with admin kubeconfig in several locations
- Update cri-o pause image and pause command ([email protected])
* Thu May 10 2018 Justin Pierce <[email protected]> 3.10.0-0.39.0
- Fix tox ([email protected])
- Remove debugging code from #8304 ([email protected])
- Fix upgrade containerized to bootstrap ([email protected])
- Remove bootstrap boolean from gcp provision ([email protected])
- Fix and simplify Installer Checkpoint ([email protected])
* Wed May 09 2018 Justin Pierce <[email protected]> 3.10.0-0.38.0
- Ensure existing network facts are set ([email protected])
- Fix etcd runtime detection ([email protected])
- Update cloudforms templates to be in sync with
roles/openshift_management/files/templates/cloudforms ([email protected])
- Update to CloudForms 4.6.2 templates ([email protected])
- azure: append .vhd to name of blobs written during image build process. Azure
publishing portal requires input blob names to end in .vhd.
- Azure: rollback module usage to support ansible 2.4 ([email protected])
- Azure: add playbook ([email protected])
- Fix other configuration for node... ([email protected])
- Enable missing feature-gate for VolumeScheduling (also use already defined
feature-gate entry for node config) ([email protected])
- Use local variable instead of global one in template
- Fix openshift_facts migrated_facts ([email protected])
- Add the EAP CD imagestream to 3.10 ([email protected])
- Bug 1575508 - typo in file name during a rename. ([email protected])
- Modify rights to allow serviceaccount to change SELinux context of volumes
- Update daemonset to follow changes in openshift storage example:
- Add example for local persistent storage image and path
- Correct Undefined variable ([email protected])
- Parametrize provisionner image ([email protected])
- Remove redundant default value definition ([email protected])
- Copy pasted too fast, "item" variable is not defined outside mkdir loop
- Parametrize the path for local storage ([email protected])
- Add default to False to avoid error when variable is not defined
- Add possibility to enable Persistent Local Storage using Ansible
- add run_once for create secret task in calico_master role
- Convert SDN master facts to openshift_facts defaults ([email protected])
- Check console ready replicas instead of curling service ([email protected])
- Remove vendored docker_container module ([email protected])
- Compatible with the new prometheus-node-exporter ([email protected])
- Move openshift-checks before node bootstrapping ([email protected])
* Mon May 07 2018 Justin Pierce <[email protected]> 3.10.0-0.37.0
- fix ([email protected])
- Configure NetworkManager to ignore calico interfaces ([email protected])
* Mon May 07 2018 Justin Pierce <[email protected]> 3.10.0-0.36.0
- Remove non-bootstrap code ([email protected])
* Sun May 06 2018 Justin Pierce <[email protected]> 3.10.0-0.35.0
-
* Fri May 04 2018 Justin Pierce <[email protected]> 3.10.0-0.34.0
- Remove outdated api/controllers settings in - /etc/sysconfig
- Mask and disable etcd service and remove etcd system container
- Setup node in system container when updating 3.9 to 3.10
- service catalog: update for v0.1.16 ([email protected])
* Fri May 04 2018 Justin Pierce <[email protected]> 3.10.0-0.33.0
- Updating to remove annotations from namespace rather than project
- Fix papr.sh target branch for rebase ([email protected])
- Convert etcd to static pods on upgrade ([email protected])
- Resurrect scale group upgrade ([email protected])
- docker_image_availability: bz 1570479 ([email protected])
- PAPR: try to rebase on the latest code ([email protected])
- Annotating fluentd pods for promethrus scraping ([email protected])
- Excluding the eventrouter component when looking for namespaces logging is
installed in ([email protected])
- Cleanup master related plays and variables ([email protected])
- bump xpaas to 1.4.12 ([email protected])
- Rework Openshift CLI image pulling ([email protected])
- Remove certificates_to_synchronize filter module ([email protected])
- Remove clusterNetworkCIDR/hostSubnetLength from default config
- Add support for adding an additional trusted CA ([email protected])
- no_negcache set to default ([email protected])
- azure: add metadata server IP to no_proxy list ([email protected])
- Fix issue with dnsmasq not caching NXDOMAIN ([email protected])
- adding permisions for different resource names ([email protected])
- Bug 1566924 - Renaming CRDs ([email protected])
- GlusterFS: Fix setting heketi route ([email protected])
- Move Node Problem Detector to its own ns, make the ns hard-coded
- cadvisor metrics are missing due to worng kubernetes version.
- Fix alert name typo ([email protected])
- override cluster default node selector with empty project selector
- Bug 1571385- Node selector on pod rather than DC ([email protected])
- Remove system_container image from openshift_cli ([email protected])
* Tue May 01 2018 Justin Pierce <[email protected]> 3.10.0-0.32.0
- Fix redeploy cert for openshift registry ([email protected])
- Remove old content ([email protected])
- Remove older playbooks ([email protected])
- Re-add etcd rpm install path for external etcd ([email protected])
- Remove orphaned byo 3.9 upgrade playbooks ([email protected])
- Add templating check in failed_when conditions ([email protected])
- Workaround ansible/ansible #39558 ([email protected])
- router - depricate -expose-metrics --metrics-image ([email protected])
- Remove dynamic include in logging_fluentd role ([email protected])
- Add master config filepath checking ([email protected])
- README: add a note about ansible 2.5 version ([email protected])
- uninstall node group: fix deprecated syntax ([email protected])
- setup.py: exclude ymls which start with a dot ([email protected])
- setup.py: revert safe_load_all change ([email protected])
- Flush ansible handlers before running restart service tasks in contiv
- sdn: fix OOM issues with ovs-vswitchd on many-core machines ([email protected])
- etcd scaleup: removed openshift_master_facts role; seems uncessary
- Add auto-heal role and playbooks ([email protected])
- Getting intersection of __default_ops_projects and all projects currently
installed for case where we reuse installation into logging namespace and
openshift-logging isnt available ([email protected])
- sync examples ([email protected])
- Remove unused v39 upgrade ([email protected])
- dnsmasq - increase dns-forward-max, cache-size ([email protected])
* Sat Apr 28 2018 Justin Pierce <[email protected]> 3.10.0-0.31.0
- Remove openshift-ansible-catalog-console.js ([email protected])
- Add EAP CD to v3.10 ([email protected])
- Change filename to file in htpasswd auth ([email protected])
- Allow Prometheus scraping of availability namespace ([email protected])
- Update etcd restart command ([email protected])
- Enable kuryr pool driver selection ([email protected])
- Set a lower default TTL for GCP DNS records ([email protected])
- bug 1568361. Modify persistent directory for logs ([email protected])
- control plane components derived from static pods must be marked critical
* Thu Apr 26 2018 Justin Pierce <[email protected]> 3.10.0-0.30.0
- missing default variables cause curator to fail ([email protected])
- Add prerequisites.yml to papr.sh script ([email protected])
- Cert check: verify bootstrap config and skip certs, if it doesn't have
client-certificate-data ([email protected])
- Fail when unable to fetch expected security groups. ([email protected])
- Remove openshift_master_config_dir variable ([email protected])
- Remove openshift_clock role ([email protected])
- install: verify that at least one master is schedulable ([email protected])
- Revert "Don't always update dbus but do restart dbus if dnsmasq changed"
- pre upgrade: fix typo ([email protected])
* Wed Apr 25 2018 Justin Pierce <[email protected]> 3.10.0-0.29.0
- Add Alertmanager configuration ([email protected])
- Fix a few remaining image expansions ([email protected])
- add critical pod annotation to fluent to avoid eviction ([email protected])
- Update all catalog RBAC to use upstream API ([email protected])
- update jinja for template ([email protected])
- Fix BZ 1570922. ([email protected])
- Removing the extra closing parentheses. ([email protected])
- Add sanity_check for removing filepath and migrate htpasswd
- Add max-time option to curl to avoid long running ansible
- openstack: pylint fix short var name ([email protected])
- Set the master cluster hostname under OpenStack ([email protected])
- Replace stdout with content ([email protected])
- Add no_proxy to verify to check .svc ([email protected])
- Bug 1562783 - Fix egress router setup ([email protected])
- Bug 1538560 - [RFE]rename the project name mux-undefined ([email protected])
- Fix more indentation issues ([email protected])
- Fix oc_version oc_short to report '3.10' ([email protected])
- Add EAP CD to v3.9 and v3.10 ([email protected])
- Add missing attribute on htpasswd object ([email protected])
- Cleanup stale version bits ([email protected])
- Fix defaults ([email protected])
- Add jinja blocks ([email protected])
- Add remove task for route ([email protected])
- Add conditional for route ([email protected])
- Bug 1569220 - Add dashboard redirector feature ([email protected])
- openstack: Do not use layer2 mode for Octavia LB ([email protected])
- openstack: don't check for kuryr AND lbaas ([email protected])
- openstack: make master direct Octavia compatible ([email protected])
- openstack: Make LBaaSv2 backend configurable ([email protected])
- openstack/kuryr: expose origin API on 443 for pods ([email protected])
- Make Kuryr healthchecks probes optional ([email protected])
- Fix method name that was too long ([email protected])
- Fix linting issues ([email protected])
- Integrate Node Problem Detector into install ([email protected])
- Add libsemanage-python to base packages prerequisites ([email protected])
- Remove meta openshift_etcd role ([email protected])
- Adding missing deprecated var openshift_hosted_metrics_public_url and its
mapped var ([email protected])
- Update Cluster Monitoring Operator role docs ([email protected])
- Allowing ability to specify a logging namespace and override check to install
in two different namespaces ([email protected])
- Allowing way to provide ops and non ops certs for their locations for fluentd
- Forward infra elb port 80 to instance port 80. ([email protected])
- Updating to use existing logging facts over role defaults if available
- Add documentation about subports management for kuryr ([email protected])
- Add trailing newline ([email protected])
- Update unit tests to test sc changes ([email protected])
- Allow fully qualified provisioner names ([email protected])
* Mon Apr 23 2018 Justin Pierce <[email protected]> 3.10.0-0.28.0
- master-restart: wait for container to stop before proceeding
- Remove meta role openshift_etcd_client_certificates ([email protected])
- Add debug level for descheduler role. ([email protected])
- Add registry checks to v3.10 upgrade ([email protected])
- Set cli image to origin-node / ose-node ([email protected])
- Add a new monitoring availability component ([email protected])
- Check and fix registry serviceaccount ([email protected])
- Remove legacy env variables from the registry deploymentconfig if present
- spec: own playbooks/common/openshift-master ([email protected])
- spec: own inventory dir ([email protected])
* Sat Apr 21 2018 Justin Pierce <[email protected]> 3.10.0-0.27.0
- Update minimal hosts.localhost ([email protected])
- Ensure /opt/cni/bin exists when running a node in a system container
- Set default number of registry replicas to 1 ([email protected])
- Fix references to openshift_master_api_port ([email protected])
- Remove unused l_openshift_version_check_hosts ([email protected])
- Hardcode htpasswd auth provider filename ([email protected])
* Fri Apr 20 2018 Justin Pierce <[email protected]> 3.10.0-0.26.0
- docker rootdir is different when installing crio ([email protected])
- Use `inventory_hostname` not `openshift_hostname` ([email protected])
- Set OpenStack VM hostname to the entry in Nova ([email protected])
* Thu Apr 19 2018 Justin Pierce <[email protected]> 3.10.0-0.25.0
- remove stray LCs on deprovision ([email protected])
* Thu Apr 19 2018 Justin Pierce <[email protected]> 3.10.0-0.24.0
- Correct default sdn_mtu setting ([email protected])
- Fix docker client-ca.crt symlink ([email protected])
- oc_adm_csr - return timeout on other failures ([email protected])
- Append clusterid to default iam role and policy names. ([email protected])
- Allow overriding master/node iam role and policy. ([email protected])
* Thu Apr 19 2018 Justin Pierce <[email protected]> 3.10.0-0.23.0
- Adjust Kuryr CNI definitions for new Docker image ([email protected])
- Update installation/uninstallation/upgrade of descheduler component.
- Provide backup_ext functionality keeping backwards compatibility.
- Add OWNERS files ([email protected])
- Fixing indentation for topology keyfor antiaffinity rules
- Cert check: skip missing entries when a list of certs to check is assembled
- Create docker cert dir for our registry ([email protected])
- Fix up node and control-plane images ([email protected])
- Revert "crio: Fixup docker SELinux permissions" ([email protected])
- Output useful logs in CI on failure ([email protected])
- [BZ 1567251] make cassandra snapshots configurable ([email protected])
- Remove etcd_version ([email protected])
- cluster_monitoring_operator: Bump to the latest build ([email protected])
- Update the docker-registry CA symlink on nodes during upgrade
- Bug 1567767 - openshift_logging : Run JKS generation script failed
- Fix wrong handler name masters ([email protected])
- Remove all references to prometheus storage via NFS ([email protected])
- HACK: disable service catalog for HA and update PAPR tests
- Fix undefined var in openstack dns record setting ([email protected])
- Add bootstrap and join to node scaleup ([email protected])
- upgrade: verify API server is accessible before masters upgrade
- Properly detect etcd version in static pod ([email protected])
- No need to stop etcd service on bootstrapped nodes ([email protected])
- Rework etcd backup and cmd during upgrade ([email protected])
- Use nodename when waiting for node to be ready ([email protected])
- Copy master-exec script ([email protected])
- Upgrade: don't check master service status for bootstrapped nodes
- PAPR: check HA install and minor update on all-in-one cluster
- Remove deprecated networkPluginName from node config template
- Updating to use preferred only for logging components and removing infra pod
concept ([email protected])
- Update queris. ([email protected])
- Add support for kuryr-controller and kuryr-cni health checks
- Remove iam_cert23 and use upstream iam_cert. ([email protected])
- Adding anti affinity configurations for ES and kibana pods
- Opening additional ports for CNS block in heat template.
- catalog: use configmap for leader election lock ([email protected])
* Mon Apr 16 2018 Justin Pierce <[email protected]> 3.10.0-0.22.0
- Don't always update dbus but do restart dbus if dnsmasq changed
- Label all-in-one cluster as compute=true ([email protected])
- Support azure for management storage class ([email protected])
- Add storage class defaults for azure ([email protected])
- Create cloud config when using azure provider ([email protected])
- Create default storage class when using azure cloud provider
- Support azure cloud provider in facts ([email protected])
- remove all remaining variable quotation ([email protected])
- [BZ 1564857] fix image name ([email protected])
- always add es and es-ops hostname to the es server cert ([email protected])
- remove manually created ssl cert, use service-cert instead, use default
service endpoint scrape ([email protected])
- cluster_monitoring_operator: Don't use cluster-admin role
- fix certificate auth on containerized etcd ([email protected])
- Allow node-exporter port through GCP firewall ([email protected])
- Wipe filesystem metadata from CNS block devices.
- Removing heat template outputs for stack scalability.
- Ensure user provides sane values for openshift_release ([email protected])
- bug 1535300. Default logging namespace to openshift-logging
- Set the pid_max value only when lower than certain threshold.
- cluster_monitoring: Bump operator version and adjust related config
- Correct link to README.md in openshift-cluster/upgrades for v3.9
- Specify the namespace for better idempotent ([email protected])
* Thu Apr 12 2018 Justin Pierce <[email protected]> 3.10.0-0.21.0
- fixed typo, caused unknown char error ([email protected])
- Fix missing close parenthesis ([email protected])
- Fix registry x509 SAN omit placeholder ([email protected])
- Revert docker-rhel-push-plugin ([email protected])
- upgrade prometheus 2.1.0 -> 2.2.1 ([email protected])
- Only install docker-rhel-push-plugin on enterprise ([email protected])
- Don't block on node start when bootstrapping ([email protected])
- Cert verification: add more certs to verify ([email protected])
- Remove obsolete openshift_docker_disable_push_dockerhub ([email protected])
- Openshift facts: ensure 'disable-attach-detach-reconcile-sync' contains a
list value ([email protected])
* Wed Apr 11 2018 Justin Pierce <[email protected]> 3.10.0-0.20.0
- Upgrade to 3.10 with static pods ([email protected])
- Update PR docs and link to current bot commands. ([email protected])
- Add oo_etcd_to_config to service_catalog init ([email protected])
- Add missing package docker-rhel-push-plugin ([email protected])
- Add nfs storage_kind check to sanity_checks ([email protected])
- Add openshift-descheduler project. ([email protected])
- wait_for_pod: wait for deployment to be Complete ([email protected])
- Fix OpenStack playbooks on clouds without Cinder ([email protected])
* Tue Apr 10 2018 Justin Pierce <[email protected]> 3.10.0-0.19.0
- Update dbus before installing dnsmasq ([email protected])
- Removing clear_facts from 3.10 upgrade ([email protected])
* Tue Apr 10 2018 Justin Pierce <[email protected]> 3.10.0-0.18.0
- Add missing 'is' in when condiditon for slurp ([email protected])
- Prefix the node-problem-detector with the system: ([email protected])
- Fix wrong reference to user policy. ([email protected])
- Change include_ to import_ where possible ([email protected])
- Remove extra ansible.cfg ([email protected])
- Remove utils unit tests ([email protected])
- Remove atomic-openshift-utils ([email protected])
- Switch Node Problem Detector to only pull IfNotPresent, make it configurable
- Fix generate_session_secrets ([email protected])
- Update default var to set imagePullPolicy: Always ([email protected])
- Update ASB configmap to set namespace ([email protected])
- Add option to create Cinder registry volume ([email protected])
- Add the OpenStack load balancer deployment options ([email protected])
- GlusterFS: enable modprobe in pods that manage bricks ([email protected])
- Calico fixes ([email protected])
- Cleanup node role tasks ([email protected])
- Change set imagepullpolicy to allow for offline install ([email protected])
- Update console liveness probe ([email protected])
- Remove unused task-file import ([email protected])
- Remove dead code from openshift_facts ([email protected])
- PAPR: install ASB after CRD backend is used ([email protected])
- PARP: Store ansible log file separately ([email protected])
- PAPR: remove bootstrap vars to be as close to default as possible
- Remove some pointless usages of openshift_facts ([email protected])
- catalog: create service and ssl certs for controller manager
- Revert "Add metrics-server to openshift-metrics playbook"
- Remove wire_aggregator and fix runtime config ([email protected])
- ScheduledJob -> CronJob ([email protected])
- Fix path to expiry check playbook ([email protected])
- Use 'oc create secret' syntax instead of deprecated 'oc secrets new-sslauth'
- reorg provision playbooks ([email protected])
- disable adc reconciler sync for aws ([email protected])
* Fri Apr 06 2018 Justin Pierce <[email protected]> 3.10.0-0.16.0
- Use long form of "scc" resource type in logging facts ([email protected])
- Add CL role and playbook for Node Problem Detector ([email protected])
- Remove unused/obsolete items from openshift_master_facts ([email protected])
- Allow no sdn's to be specified in sanity checks ([email protected])
- Fix session secrets file and remove old facts ([email protected])
- master: set DEBUG_LOGLEVEL based on openshift_master_debug_level
- Refactor openshift_version setting ([email protected])
- Ensure legacy inventories continue to work for infra nodes
- Updating for es5.x image naming and removing restriction for origin only for
tech preview ([email protected])
- Implement descheduler cluster lifecycle role and playbook.
- Add resources and migration for new default CRD backend for ASB
- GlusterFS: Use custom StorageClass for S3 ([email protected])
- GlusterFS: Fix missing parameter for registry PVC ([email protected])
- Fix undefined variable in session secrets ([email protected])
- Updating default image tags to be only vX.Y for origin installs