forked from openshift/openshift-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
openshift-ansible.spec
9402 lines (8856 loc) · 495 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 4.0.0
Release: 0.5.0%{?dist}
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
Requires: ansible >= 2.6.2
Requires: python2
Requires: python-six
Requires: tar
Requires: %{name}-docs = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Obsoletes: atomic-openshift-utils <= 3.10
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
Requires: python-passlib
Requires: python2-crypto
Requires: patch
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp -rp inventory/dynamic %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp ansible.cfg %{buildroot}%{_datadir}/ansible/%{name}/ansible.cfg
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/hosts.* inventory/README.md docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# touch a file in contiv so that it can be added to SCM's
touch %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/.empty_dir
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/inventory
%{_datadir}/ansible/%{name}/ansible.cfg
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}-%{release}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# Along the history of openshift-ansible, some playbook directories had to be
# moved and were replaced with symlinks for backwards compatibility.
# RPM doesn't handle this so we have to do some pre-transaction magic.
# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the paths to directories being replaced below.
-- DO NOT add a trailing slash at the end.
dirs_to_sym = {
"/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library",
"/usr/share/ansible/openshift-ansible/playbooks/certificate_expiry"
}
for i,path in ipairs(dirs_to_sym) do
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}-%{release}
Obsoletes: %{name}-lookup-plugins
Obsoletes: %{name}-filter-plugins
Obsoletes: %{name}-callback-plugins
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
%pretrans roles
#RHBZ https://bugzilla.redhat.com/show_bug.cgi?id=1626048
#roles/openshift_examples/latest used to be a symlink, now its a dir
# workaround for RPM bug https://bugzilla.redhat.com/show_bug.cgi?id=975909
if [ -d %{_datadir}/ansible/%{name}/roles/openshift_examples/files/examples ]; then
find %{_datadir}/ansible/%{name}/roles/openshift_examples/files/examples -name latest -type l -delete
fi
%changelog
* Wed Sep 26 2018 AOS Automation Release Team <[email protected]> 4.0.0-0.5.0
- test/ci: set expirationDate flag for CI namespace garbage collector
- Refactored Calico and updated playbooks to reflect self-hosted Calico
installs only ([email protected])
- Enable IAM roles for EC2s in AWS ([email protected])
- Fix for recent az changes. ([email protected])
- cluster-monitoring: Bump cluster monitoring operator in origin
- Added capability to fix static addresses to openshift_ovirt provider vms
* Mon Sep 24 2018 AOS Automation Release Team <[email protected]> 4.0.0-0.4.0
- Reload tuned service when node-config.yaml has changed.
* Fri Sep 21 2018 AOS Automation Release Team <[email protected]> 4.0.0-0.3.0
- GlusterFS: Fix registry playbook PV creation ([email protected])
- Only create OpenStack router if both router and subnet are undefined
* Fri Sep 21 2018 AOS Automation Release Team <[email protected]> 4.0.0-0.2.0
-
* Fri Sep 21 2018 AOS Automation Release Team <[email protected]> 4.0.0-0.1.0
- Don't re-deploy node system containers when deploying auth credentials
- etcdv2 remove: avoid using failed_when ([email protected])
- Bump Data Grid to version 1.1.1 ([email protected])
- remove unix prefix from crio path ([email protected])
- adding container.yaml ([email protected])
- Fix openstack nsupdate record ([email protected])
- Always set openstack node private ip ([email protected])
- lib_utils_oo_oreg_image preserve path component ([email protected])
- Add unit test for oo_oreg_image filter ([email protected])
- Update installer_checkpoint plugin to handle empty stats ([email protected])
- Fix etcd scaleup playbook ([email protected])
- registry auth: fix check that node_oreg_auth_credentials_stat exists
- Fix openshift_additional_registry_credentials comparison
- Ensure glusterfs host groups are correct for registry play
- move OpenStack network fact gathering from prereqs to provision tasks
- Ensure atomic hosts prepull node image during pre-upgrade
- Make cloud-user SSH key maintenance more reliable ([email protected])
- Simplify match filter when looking for sync annotations ([email protected])
- Merge upgrade_control_plane playbooks back into one ([email protected])
- test ci: add an option to terminate VMs instead of stopping
- Update main.yml ([email protected])
- Remove duplicate words ([email protected])
- Remove traces of containerized install ([email protected])
- Move the cluster-cidr assignment to the correct configs ([email protected])
- Ensure dnsmasq is restarted during upgrades ([email protected])
- Don't install NM on atomic systems ([email protected])
- openshift-prometheus: remove deprecated prometheus stack install
- GCP upgrade: don't exclude nodes with tag_ocp-bootstrap ([email protected])
- GCP upgrade: don't exclude nodes with tag_ocp-bootstrap ([email protected])
- Hash the registry hostname to generate unique secret names
- Add retries around api service discovery ([email protected])
- Ensure that recycler pod definition is deployed during upgrade
- Change upgrade playbooks to use 4.0 ([email protected])
- Add 3 retries around all image stream create/replace ([email protected])
- Fix wrong doc default value of logging ([email protected])
- test/ci: setup network manager ([email protected])
- Update uninstall_masters play to deal with standalone instances
- Fix broken package list on fedora ([email protected])
- certificate_expiry: gather facts so ansible_date_time is defined
- Fix volume recycler configuration on upgrade ([email protected])
- openshift_storage_nfs_lvm: fix with_sequence ([email protected])
- Removing launch.yml. ([email protected])
- Wait for sync DS to set annotations on all available nodes
- sync annotations: expected number of annotations should be a number of items
- reduce number of openstack heat retries ([email protected])
- Fix openstack parameter checks ([email protected])
- Add a wait for aggregated APIs when restarting control plane
- Update openshift ca redeploy to use correct node client-ca
- Enable monitoring of openshift-metering via cluster monitoring
- Refactor csr approval for client certs ignore ready ([email protected])
- reducing /sys/fs/selinux/avc/cache_threshold to 8192 instead of 65535
- Add preview operators to OLM Catalog ([email protected])
- Collect provider facts only if cloudprovider is set ([email protected])
- - s3 variables check as part of importing the s3 tasks itself.
- Add proper liveness and readiness checks for Calico 3.2 ([email protected])
- Move controller args back to template ([email protected])
- Retry our etcd health check ([email protected])
- Set gquota on slash filesystem ([email protected])
- docker_creds: rename image_name to test_image ([email protected])
- cluster-monitoring: Fix regex_replace to remove image tag
- fix arguments to controller ([email protected])
- Update recyler to lsm_registry_url ([email protected])
- cutting 4.0 ([email protected])
- Use oreg_url rather than hardcoding path ([email protected])
- Formatting fixes on olm and catalog operators ([email protected])
- Update rh-operators catalog to latest ([email protected])
- Update OLM CRDs to latest ([email protected])
- Proper DNS for the subnet created ([email protected])
- Set etcd facts necessary for etcd scaleup ([email protected])
- Revert "Don't fetch provider openshift_facts if openshift_cloud_provider_kind
is not set" ([email protected])
- cluster-monitoring: Remove version tag for passing image repos
- Fixes: BZ1618547 disable keep ns on error in ASB to prevent resource
starvation ([email protected])
- Add openshift_additional_registry_credentials ([email protected])
- docker_creds: Add tls_verify parameter ([email protected])
- Avoid S3 deployment check ([email protected])
- Filter openshift_cloudprovider_openstack_blockstorage_ignore_volume_az to
bool ([email protected])
- Add playbook to migrate node imageConfig.format ([email protected])
- docker_creds: Use bool for test_login param ([email protected])
- Run the kube-proxy once per cluster for Calico ([email protected])
- Provide version information ([email protected])
- Annotate nodes with md5sum of the applied config ([email protected])
- Add a pod template for recycler pod ([email protected])
- Bump repo constants to support 4.0 RPMs ([email protected])
- Add calico-pull-secret ([email protected])
- Add separate Calico etcd ([email protected])
- Use true/false instead of yes/no ([email protected])
- Allow to configure BlockStorage.ignore-volume-az for Openstack Cloud Provider
* Tue Sep 11 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.35.0
- cluster-monitoring: Fix incorrect handling of conditional PVCs
- fix alertmanager example in OLM prometheus operator ([email protected])
- GlusterFS: Tweak groups for external config ([email protected])
- Fix kuryr support for custom OpenStack network and subnet
- Add missing ClusterRole for OLM ([email protected])
- GlusterFS: Fix heketi_pod check ([email protected])
- spec: remove roles/openshift_examples/lates symlink ([email protected])
- Prepare to split openshift-sdn out of the openshift binary
- SDN check: Ignore errors from `oc version` ([email protected])
* Sun Sep 09 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.34.0
-
* Sat Sep 08 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.33.0
- Install rh-operators catalog ([email protected])
- olm: add openshift_facts dependency ([email protected])
- fix ca cert deploy for 3.10. addresses
https://bugzilla.redhat.com/show_bug.cgi?id=1585978 ([email protected])
- Add oc_get_nodes to debug csr output ([email protected])
- Check for migrated status ([email protected])
- Run on first etcd only ([email protected])
- Add playbooks to remove etcdv2 data ([email protected])
- Update rh-operators catalog ([email protected])
- don't bind to cluster-admin for OLM ([email protected])
- put olm deployments in the right namespace ([email protected])
- add main.yaml for olm task ([email protected])
* Fri Sep 07 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.32.0
-
* Fri Sep 07 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.31.0
-
* Fri Sep 07 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.30.0
- Remove configmap check during upgrades ([email protected])
- Add extra debug info to csr module ([email protected])
- Revert ensure gquota set on slash filesystem ([email protected])
- Don't fetch provider facts if openshift_cloud_provider_kind is not set
- Remove unused openshift_openstack_app_floating_ip ([email protected])
- Allow custom OpenStack network and subnet ([email protected])
- Fixup PR #8671 ([email protected])
- Squash PR 8671 ([email protected])
* Thu Sep 06 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.29.0
- cluster-monitoring: Fix repo/docs URL ([email protected])
- cluster-monitoring: Make PVCs optional ([email protected])
- Fix issue with cockpit package list ([email protected])
- GlusterFS: External uninstall ([email protected])
- GlusterFS: Ignore external nodes ([email protected])
- openshifT_aws: removed subnet naming ([email protected])
- openshift-aws: updating the subnet querying ([email protected])
- Use first_master_client_binary from hostvars[groups.oo_first_master.0]
- Do not stop Opensvswitch #9895 ([email protected])
- add OWNERS file for OLM ([email protected])
- Add OLM to component upgrades ([email protected])
- Refactor image health checks ([email protected])
- OLM images: use quay for origin ([email protected])
- NSX-T fixes #8134 and fixes NSX #8015, PR #8016 ([email protected])
- update olm images to use openshift registry instead of quay
* Wed Sep 05 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.28.0
- Switch openshift_crio_enable_docker_gc default to False ([email protected])
- Add default node groups to support running cri-o runtime ([email protected])
- Rework test CI ([email protected])
* Wed Sep 05 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.27.0
- Fixing a typo s/Cound/Could/g noticed with an error getting CSR's approved
- Add namespaced servicebrokers, serviceclasses and serviceplans to
admin/edit/view ClusterRoles ([email protected])
- Update sync DS after control plane upgrade ([email protected])
- Fix incorrect reference to idp['name'] ([email protected])
- Add support for ak/orgid at uninstall/scale ([email protected])
- Configure a list of etcd cipher suites via `etcd_cipher_suites`
- GlusterFS: Fix registry.yml playbook ([email protected])
* Tue Sep 04 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.26.0
- Fix etcdctl aliases on etcd hosts ([email protected])
- Removing azure publishing tooling. ([email protected])
- repair container_runtime_extra_storage var values
- Convert all remaining registry.access.redhat.com to registry.redhat.io
- Update packages in gold image and unsubscribe ([email protected])
- Configure repositories if RHEL ([email protected])
- Update openshift_master.py ([email protected])
- Update the value of 'openshift_grafana_prometheus_serviceaccount' Fix
openshift_grafana prometheus serviceaccount default value in README,The
default value is 'promethus','promethus' missed a letter, and there should be
an e after the h,so it should be 'prometheus' ([email protected])
- kube_proxy_and_dns: add role that runs standalone kube-proxy + DNS
- Don't reset os_firewall_use_firewalld if iptables is inactive during upgrade
- crio: Don't use file locking ([email protected])
- Forcing full cluster restart to treat dcs as set ([email protected])
- Ensure gquota set on slash filesystem ([email protected])
- Use correct container CLI for docker or cri-o ([email protected])
- openshift-prometheus: improve uninstall process ([email protected])
- Install NetworkManager on OpenStack ([email protected])
- Fix incorrect formatting for ca file ([email protected])
- Refactor with_items usage with Ansible package module ([email protected])
- Move openshift_crio_pause_image to openshift_facts ([email protected])
- Update deprecated crio.sock ([email protected])
- Remove docker excluder from image prep packages ([email protected])
- Support ak/orgid and user/password ([email protected])
- Fix ASG tagging ([email protected])
- Fix loop item ([email protected])
- Ensure sebool container_manage_cgroup on upgrade ([email protected])
- issue #9820 ([email protected])
- Add support for ak/orgid for RHEL ([email protected])
- Enable context selector on console upgrade ([email protected])
- Resolves openshift_release openshift_version conversion for AWS plays
- Add extensions to tasks_from: directives ([email protected])
- Remove version_gte_3_10, version_gte_3_11, content_version
- Control plane static pods (apiserver, etcd, controller-manager) must get
highest priority class system-node-critical. Priority admission plugin was
incorrectly assigning system-cluster-critical to these pods.
- Add retry to openstack heat stack create ([email protected])
- fix error in cnx conditional regex ([email protected])
- Get cluster resources for SDN check in health.yml ([email protected])
- Update OLM roles to include resource names ([email protected])
- Update example prometheus object to include securityContext field
- Update aggregated edit role to include verbs ([email protected])
- Add mkfs_opts to extra_storage_setup.yml ([email protected])
- Revert "Revert "logging configure fluent to merge_json_log""
- bug 1597282. Quote selector to make it valid json ([email protected])
- Don't strip working set in Prometheus ([email protected])
* Tue Aug 28 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.25.0
- Fix etcd helper function template error ([email protected])
- Remove openshift_is_bootstrapped variable ([email protected])
- Fix server csr while loop oc_csr_approve ([email protected])
- Add %%{?dist} back into specfile release ([email protected])
- Prefix identity provider's CA files with identity provider names
- Dissalow custom CA file path for providers with CA path ([email protected])
- Add support for ak/orgid ([email protected])
- make azure load balancer creation parameters as options ([email protected])
- small typo in comment for vpc ([email protected])
- Add networkmanager check to sanity checks ([email protected])
- Ensure default StorageClass reclaimPolicy is set to nil instead of
emptystring when reclaim_policy undefined ([email protected])
- Add failed_when to 'Remove the image stream tag' tasks ([email protected])
- Ensure master image is pre-pulled on upgrade ([email protected])
- Updating logging eventrouter image name to match ose naming pattern
- Rename task name in role rhel_repos ([email protected])
- Update the naming of openshift on rhv to ovirt ([email protected])
- Unify cluster-monitoring install variables ([email protected])
- Fix aws elb dictionary fact for dns ([email protected])
- Cleanup upgrades - control plane + registry_auth ([email protected])
- Update pause image value in crio.conf after upgrade ([email protected])
- node kubelet args fail instead of warn ([email protected])
* Mon Aug 27 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.24.0
- openshift-prometheus: change node_exporter service port to 9102
- Revert "openshift-prometheus: change node_exporter service port to 9101"
* Sun Aug 26 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.23.0
- Commit to enable standalone master instances in aws ([email protected])
- SDN check: Expand openshift_client_binary variable ([email protected])
- Don't set reclaim policy to empty string ([email protected])
- Add support to static pods for etcd helpers ([email protected])
- Creating a priority class for cluster-logging fluentd and configuring fluentd
to use it ([email protected])
- Refactor csr approvals: oc_csr_approve ([email protected])
- Change aws launch_config & autoscale group name to contain deployment serial
- Move filters ([email protected])
- Overwrite grafana datasource and dashboards ([email protected])
- Dont fail when datasource or dashboard already exists
* Thu Aug 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.22.0
- Log driver for JSON should be json-file ([email protected])
- cluster-monitoring: Add port definition to cluster-monitoring-operator
- cluster-monitoring: conditionally render proxy settings
- Reorder master install tasks ([email protected])
- openshift-control-plane: check whether the sync pods are ready before
selecting nodes ([email protected])
* Thu Aug 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.21.0
- if the cluster's arch is power (ppc64le) don't install default catalog.
create v3.11 imagestreams, quickstart, and db-templates that support ppc64le
- GlusterFS: Run kernel_modules.yml once on all nodes ([email protected])
- Replace deprecated ec2_ami_find module with ec2_ami_facts
- Allow override set scheme ([email protected])
- Remove old code related to Atomic Enterprise changes ([email protected])
- python-scandir was renamed in EPEL ([email protected])
- openshift-prometheus: change node_exporter service port to 9101
- Commit to remove openshift_master_cluster_hostname override
- Change aws launch_config & autoscale group name to contain deployment serial
- Master services are gone in 3.10 ([email protected])
* Tue Aug 21 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.20.0
- Pass region to AWS az lookup ([email protected])
- SDN check: Use openshift_client_binary ([email protected])
- RHV Provider Role and Playbooks ([email protected])
- Fix backcompat with OpenStack inventory ([email protected])
- update v3.9 to v3.11 used in the example hosts ([email protected])
- GlusterFS: Remove domain from heketi URL ([email protected])
- Bug 1615787 - Blacklist broker-apb ([email protected])
- openshift-metering: Update playbook instructions ([email protected])
- openshift-metering: Update role to use new metering CRD group and schemas and
images helm operator image ([email protected])
- openshift-metering: Update role to allow creating routes
- Removing unnecessary fail task ([email protected])
- Remove correct duplicated SCC check ([email protected])
- Revert "Remove duplicated bootstrapped SCC check" ([email protected])
- Revert "Skip base package check for openshift_ca role" ([email protected])
- Adding file rollover size and max count policies ([email protected])
- Rework node initialization procedure to prepull images earlier
- [RHPAM-1241] - Include RHPAM templates in OpenShift release
- Cleanup old sanitize inventory warnings ([email protected])
- Override configmap directly on the install role
- Correct typo in config variable ([email protected])
- Allow to override full Ansible Service Broker config map
- Changed sample inventory to reflect vars used in heat_stack.yaml.j2
- Add kuryr namespace isolation support ([email protected])
* Mon Aug 20 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.19.0
-
* Sun Aug 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.18.0
- Require Ansible 2.6.2 ([email protected])
- Remove 3.10 upgrade playbooks ([email protected])
- Use openshift_image_tag for registry-console upgrade ([email protected])
- Clean up GCP disks during deprovision ([email protected])
- Skip base package check for openshift_ca role ([email protected])
- Update search string for registry console ([email protected])
- Revert "Set correct vars for registry console" ([email protected])
- service-catalog: use K8s NamespaceLifecycle admission controller
- remove name from tag ([email protected])
- Update sanity_checks.py ([email protected])
- Provide better error message for json sanity check ([email protected])
- Remove asb-user-access cluster-role when uninstalling ASB
- Increase maximum number of open file descriptors for dnsmasq
* Thu Aug 16 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.17.0
- Update for Bugzilla 1580256 ([email protected])
- Remove duplicated bootstrapped SCC check ([email protected])
- cluster_monitoring_operator: update ClusterRole ([email protected])
- Default CFME nodeselector should be a list of str, not a dict
- Added support for ak when registering hosts ([email protected])
- Fix audit config interpolation ([email protected])
- SDN check: Ignore node's canonical name ([email protected])
- fix 1616278. Modify the default logging namespace ([email protected])
- The file name has changed to heketi_get_key.yml ([email protected])
- Bug 1615275. Regenerate session_secret if it can't be used with oauth-proxy
- Set correct vars for registry console ([email protected])
- Updating to only iterate over oo_nodes_to_config list for
oo_elasticsearch_nodes ([email protected])
- The l_glusterfs_count is a string need to cast to int for comparison.
- Specify external URL for Prometheus ([email protected])
- Remove unused/broken node cert plays ([email protected])
* Wed Aug 15 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.16.0
- remove the olm project ([email protected])
- fix ASB ClusterServiceBroker removal ([email protected])
- Cleanup logging and metrics deprecations ([email protected])
- Adding default value for openshift_logging_storage_kind ([email protected])
- change default sc nam ([email protected])
- update the commands to restart master api and controller
- fixing image defaults for logging ([email protected])
- node restart: check that all vars are defined ([email protected])
- Revert "loopback_cluster_name: use api_hostname" ([email protected])
- CFME: set default value for openshift_hosted_infra_selector
- vgchange before vgremove update. ([email protected])
- To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
remove device. ([email protected])
* Tue Aug 14 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.15.0
- Update old documentation links ([email protected])
- Replace OpenShift Enterprise references with OpenShift Container Platform
- cluster-monitoring: pass through no_proxy setting
- Add CentoOS Origin repo for 310 release ([email protected])
- cluster-monitoring: Fix OCP image names ([email protected])
- Update documentation links, docs.openshift.org -> docs.okd.io
- Require -hyperkube RPMs instead of -master ([email protected])
- [uninstall] Remove hyperkube package ([email protected])
- Don't require etcd RPM to be installable on masters ([email protected])
- Don't require fast-datapath channel on RHEL ([email protected])
- No longer require SDN to be installed on nodes ([email protected])
- Update release artifacts for OLM ([email protected])
- GlusterFS: Upgrade playbook ([email protected])
- Ensure docker package always installed ([email protected])
- re-order and required values ([email protected])
- Update route53 dns tasks ([email protected])
- Refactor registry-console template and vars ([email protected])
- Fix the ansible-service-broker URL ([email protected])
- [bz1552516] set the external url of prometheus ([email protected])
- Update console branding and doc URL for OKD ([email protected])
- SCC recouncilation has to run with older oc, before node upgrade
- Switch to oc set env, since oc env is now removed ([email protected])
- Add functionality for AWS DNS framework and route53 provider
- matching the name values ([email protected])
- openshift_cluster_monitoring_operator: Fix enterprise images
- adding parameters to allow for load balancer creation ([email protected])
- Limiting additional fact collection to non-masters since we already collect
that information for masters ([email protected])
- Remove unnecessary passlib check ([email protected])
* Sun Aug 12 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.14.0
- Revert "Remove several unused vars" ([email protected])
- Making the app nodes an optional return. ([email protected])
- 'Wait for node to be ready' task should check that all vars are defined
- Ensure kernel-modules not installed on atomic ([email protected])
- Remove extra namespaces field on configmap ([email protected])
- Adding min-port to dnsmasq configuration. ([email protected])
- pull in origin imagestream+template updates ([email protected])
- Revert "openshift_loadbalancer: remove unused vars" ([email protected])
- Remove node CSR approval from upgrade in 3.11 ([email protected])
- loopback_cluster_name: use api_hostname ([email protected])
- Add quotes to node selector ([email protected])
- Bug 1543129 - Add configuration option for ASB local registry namespaces
- Omit resetting openshift_logging_elasticsearch_pvc_dynamic if volume is NFS
- Set claimRef for logging PVC when NFS volume is created previously
- Fix prometheus annotations typo ([email protected])
* Thu Aug 09 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.13.0
- SDN check: Fix parsing time stamp's time zone ([email protected])
* Thu Aug 09 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.12.0
- add equals to quoted skopeo argument ([email protected])
- Fix missing input_image name error. ([email protected])
- excluders cannot be run on Atomic ([email protected])
- Add new line in openshift_node defaults ([email protected])
- Remove openshift_node_use_persistentlocalvolumes ([email protected])
- Remove openshift_node_image_config_latest ([email protected])
- Remove openshift_node_use_<sdn> vars ([email protected])
- Remove openshift_set_node_ip ([email protected])
- Remove openshift_node_proxy_mode ([email protected])
- Remove openshift_master_node_labels ([email protected])
- Remove openshift_manage_node_is_master ([email protected])
- openshift_loadbalancer: remove unused vars ([email protected])
- openshift_hosted: remove openshift_push_via_dns flag ([email protected])
- openshift_hosted: remove ununsed vars ([email protected])
- openshift_facts: remove unused vars ([email protected])
- openshift_expand_partition: remove unused vars ([email protected])
- openshift_examples: remove unused vars ([email protected])
- docker-gc: remove unused var ([email protected])
- Remove unused vars from control_plane role ([email protected])
- Remove unused vars in etcd role ([email protected])
- Be more accuracy for getting def_route_int and def_route_ip
- Remove master env migration module ([email protected])
- Bump OLM version to 0.6.0 ([email protected])
- nuage specific changes for eVDF and some fixes ([email protected])
- Moving file to the image to fix error. ([email protected])
- cluster-monitoring: pass through http(s) proxy settings
- Fix openshift_openstack: Add public API Record ([email protected])
- add OSA 3.11 repos for pre-release ([email protected])
- Renames CRI-O pause_image to openshift_crio_pause_image.
- pylint: disable travis error ([email protected])
- Adding image info to /etc/origin/image.yml on Azure ([email protected])
- Refactor glusterfs for scaleup ([email protected])
- Quote registry credentials for skopeo ([email protected])
- Commit to enable AWS multi avail zone ([email protected])
- rollback node ports ([email protected])
- Output cert check file to more sensible location ([email protected])
- Bug 1611841 - Allow customizing admin console certificates
- Additional cleanup of v1beta1 rbac.authorization ([email protected])
- Fix glusterfs cluster check when condition ([email protected])
- Ensure skopeo and atomic are installed in crt role ([email protected])
- Ensure that monitoring operator has nodes to run ([email protected])
- Don't get file checksum, attributes and mime type in stat module calls
- Bug 1611840 - Correctly set console replicas ([email protected])
- BZ-1608216 Set timeoutSeconds for readinessProbe on Cassandra RCs
- openshift_metering: Add options to use RDS & S3 integrations
- add conditional clauses for handling cnx versions ([email protected])
- roles/openshift_metering: Fix typo in readme ([email protected])
- Remove exclude-bootstrapped logic ([email protected])
- updating doc for SSL cert ([email protected])
- apply the container_runtime for calico ([email protected])
- Enable console picker ([email protected])
- Version_compare filter was renamed to version ([email protected])
- Avoid using deprecated syntax for filters in OLM ([email protected])
- fix bug 1608269 ([email protected])
- oc_obj should correctly identify 'results': [{}] as 'Object not found'
- router-redeploy: don't check that annotations are missing
- Update Calico versions to the latest (v3.1.3) ([email protected])
- Always ensure master config has proper url upgrade ([email protected])
- Move metrics-server out of openshift-monitoring NS ([email protected])
- Don't collect node facts on master - these are set during bootstrap
- Don't set OAUTH_CLIENT_ID in console OAuth secret ([email protected])
- Drop --confirm from migrate storage invocation ([email protected])
- Adding support for an SSL certificate signed by the OpenStack cluster
* Thu Aug 02 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.11.0
- Reorganized OpenStack cloud provider documentation ([email protected])
- Add doc note that kuryr requires openstack cloud provider
- Beginning deprecation of INSTANCE_RAM var in favor of downwardAPI provided
mem limit vol mount ([email protected])
- Adding documentation in hosts.example ([email protected])
- Fix ASB user and password defaults ([email protected])
- Add a license parameter to gcloud command ([email protected])
- adding unmount task below the backup task ([email protected])
- Bug 1610224 - Unable to find container log in Elasticsearch when using cri-o
- Added OpenStack security group requirements section ([email protected])
- Add containerized glusterfs cluster health check ([email protected])
- Allow user to specify local openstack.conf ([email protected])
- Avoid to call install_node_exporter task during uninstallation.
- Add bool filter to all instances of openshift_use_crio ([email protected])
- Cleanup node bootstrap / scaleup code ([email protected])
- Allow shared_non_ops as kibana index mode ([email protected])
- AWS: reboot instance before sealing ([email protected])
- Fix docker reg auth bugs ([email protected])
- Clarified scaling docs, combining master/infra/app sections
- ignore failing dns clean errors when running openstack uninstall playbook
- Updating how we get node names for logging hosts to build sysctl for
- Allow disabling Network Manager managed dns ([email protected])
* Fri Jul 27 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.10.0
- Disable yum-cron by default on GCP ([email protected])
- Revert "logging configure fluent to merge_json_log" ([email protected])
- logging configure fluent to merge_json_log ([email protected])
- How to deploy the cluster autoscaler ([email protected])
- Switch to openshift-node-config in prep for removing openshift start node
- Fix glusterfs storageclass heketi url ([email protected])
- Disable papr on pull requests ([email protected])
- Fedora: Install kernel-modules ([email protected])
- Allow to autoname scale group instances ([email protected])
- Add cert expiry check to upgrades ([email protected])
- handle symlinks in openshift-ansible container image ([email protected])
- Add FeatureGates for NamespacedServiceBrokers ([email protected])
- When the node process is down, don't exit ([email protected])
- Avoid undefined variable glusterfs_heketi_user_key ([email protected])
- Default openshift_is_atomic to false for openshift_repos.
- Added node selector option for CFME role and fixed formatting issues
- Remove sections of kuryr documentation that tell user to disable registry
creation ([email protected])
- Add step to remove all k8s_ containers ([email protected])
- Add RollingUpdate strategy to dockergc deployment config ([email protected])
- Support tabs in resolv.conf ([email protected])
- Add boolean to uninstall for docker ([email protected])
- Remove evaluations if group vars are defined or not
- Add OpenStack node scaleup ([email protected])
- Run DNS and RHN tasks on new masters only ([email protected])
- Add the OpenStack master scaleup playbook ([email protected])
* Mon Jul 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.9.0
- Fix order for invoking the hostpath storage task for registry
* Mon Jul 23 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.8.0
- metrics-server: fix a typo in installer path ([email protected])
- installer_checkpoint: use .get to avoid warnings printed in 2.6
- add firewall rules for node exporter ([email protected])
- Add rc code to docker_creds module ([email protected])
- Cope with OpenShift returning no value when an environment variable is an
empty string ([email protected])
- catalog: add RBAC rules for namespaced brokers ([email protected])
- allow NFS to be used for registry without marking cluster unsupported
- Adapt role to latest version of cluster-monitoring-operator
- Support specifying the rolebinding name ([email protected])
- update imagestreams from origin ([email protected])
- AWS: use vpc name instead of cluster id when creating security groups
- Set log-path = ~/openshift-ansible.log ([email protected])
- Add OLM install scripts ([email protected])
- Update the OpenStack Cinder PV example ([email protected])
* Thu Jul 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.7.0
- adding 3.11 tito releaser ([email protected])
- Remove alternative oreg vars and update logic ([email protected])
* Thu Jul 19 2018 AOS Automation Release Team <[email protected]> 3.11.0-0.6.0
- Refactor vars in container-runtime/private ([email protected])
- Remove openshift_docker_is_node_or_master - all masters and etcd hosts are
now nodes ([email protected])
- Fix cpu_limit check in eventrouter template ([email protected])
- Wait for existing nodes to go Ready before approval ([email protected])
- Fix sanity checks for oreg_auth_user and oreg_auth_password
- Remove extra atomic checks ([email protected])
- Remove l_default_container_storage_hosts var ([email protected])
- Remove mentions of oo_hosts_containerized_managed_true group
- only sync actual resource files ([email protected])
- update the default oauth-proxy image for logging ([email protected])
- glusterfs: bind created volume to the claim ([email protected])
- Adds openshift_fs_inotify_max_user_instances to the node tuned profile.
- use local reference policy for dotnet imagestreams ([email protected])
- use local ref policy for all xpaas imagestreams ([email protected])
- Adding aggregate rule for new user authorization ([email protected])
- switch imagestreams to registry.redhat.io ([email protected])
- Rename console logoImageName -> branding ([email protected])
- Add scaleup playbook and docs for OpenStack ([email protected])
- Fix the Neutron DNS docs ([email protected])
- Uses cluster-wide settings for registry URL and credentials as default values
for ASB. ([email protected])
- Add playbook to update reg-auth credentials ([email protected])
- CLOUD-2699 remove EAP 7.0 templates ([email protected])
- Reconfigure admin console after certificates were redeployed
- Add max-size to docker log opts ([email protected])
- Various openshift-cluster-autoscaler changes ([email protected])
- Remove Get heketi route tasks ([email protected])
- generate_pv_pvcs_list: set claimRef for NFS volumes ([email protected])
- Fix storageclass setting for NFS ([email protected])
- Add support for OpenStack internal DNS ([email protected])
- oreg url fix ([email protected])
- Use glusterfs_name and glusterfs_namespace for heketi url
- Use service name for heketi url ([email protected])
- Update sdn, sdn-ovs, sync, fluentd, descheduler to have system-cluster/node-
critical priority classes. ([email protected])
- Install metrics-server pre-upgrade, if metrics ([email protected])
- Split metrics-server into its own playbook/role ([email protected])
- bug 1590920. Bump fluent default memory to 756M ([email protected])
- documentation regarding creating and using a static inventory
- Allow openstack inventory.py to output a static inventory
- Update docker registry auth to idempotent ([email protected])
- Force rebuild of config when upgrading to es5 ([email protected])
- Replace node.js proxy with oauth-proxy ([email protected])
- Addressing tox failures ([email protected])
- sdn: don't blow away all existing CNI plugins or config ([email protected])
- Add openshift_docker_gc role to upgrade path ([email protected])
- PAPR: install new requirements during upgrade ([email protected])
- Remove ec2_group - available upstream ([email protected])
- Remove rpm_q - not used ([email protected])
- Defining a default for logging_elasticsearch_rollout_override var in es
handler ([email protected])
- Only gather hosts when installing logging, otherwise remove sysctl file from
all ([email protected])
- Updating to require es node selectors for es5 install, only create sysctl
files for nodes es will run on and clean up sysctl files when uninstalling
logging ([email protected])
- Exclude existing masters from node list for CSR approval during node and
master scaleup. ([email protected])
- Fixup various TODO sections of code ([email protected])
- Add check for oreg_password by default ([email protected])
- Setup logrotate on nodes once ([email protected])
- Add openshift_metering role and playbook ([email protected])
- Remove callback plugin, artifact of a quick installer ([email protected])
- Update README ([email protected])
- Fix version requirements ([email protected])
- Fixing missing _es_version variable ([email protected])
- action_plugin_test: add necessary vars to support unittests in ansible 2.6
- ASB migrate: impove result checking ([email protected])
- Use ansible 2.6 ([email protected])
- Remove old service files before masking them ([email protected])
- switch to registry.redhat.io for infra images ([email protected])
- Fix to shebang in bootstrap script ([email protected])
- Do not delete IAM cert if explicitely requested ([email protected])
- Ensure nodes created by a scale group have a Name tag ([email protected])
- gcp: add custom repo when building base image ([email protected])
- Sync Fuse console templates ([email protected])
- Remove unused node config ([email protected])
- Remove system container bits from etcd ([email protected])
- Allow installs of Node Problem Detector during upgrades ([email protected])
- Clean cloud-init path ([email protected])
- Add atomic package to base and debug package lists
- make logging rely on a single SG index ([email protected])
- Accept client certs from node, system:admin, and bootstrap SA
- Make openshift_control_plane/check_master_api_is_ready.yml generic
- Install OpenShift admin console ([email protected])
- Add a components public playbook ([email protected])
- Wait for API availability before migrating storage, add retries
- Uninstall playbook respects openshift_use_openshift_sdn.
- Suppress unexpected error caused by non-English locale during CRI-O
installation ([email protected])
- google-cloud-sdk is x86_64 only ([email protected])
- Add SDN health check ([email protected])
- [RHDM-662] - Update RHDM templates on OCP and OSO ([email protected])
- [RHDM-662] - Update RHDM templates on OCP and OSO ([email protected])
- Add simonpasquier to the OWNERS file for prometheus installer
- hardcode flexvolume path on atomic hosts ([email protected])
- add EAP CD 13 to OS 3.10 ([email protected])
- Allow the 9k-10k port range for Prometheus ([email protected])
- Use OPENSHIFT_CLUSTER env in OpenStack uninstall ([email protected])
- Azure: update create_and_publish_offer to match new offer/SKUs
- Add EAP CD 13 imagestream and templates. ([email protected])
- Fix scalegroup upgrades so don't have to delete ASG's. ([email protected])
- prometheus: upgrade prometheus to 2.3.1 ([email protected])
- prometheus: upgrade alertmanager to 0.15.0 ([email protected])
- prometheus: upgrade node_exporter to 0.16.0 ([email protected])
- add node get-node-logs script ([email protected])
- Dedicated etcd nodes should not be added to oo_nodes_to_upgrade
- Don't upgrade nodes which only have dedicated etcd ([email protected])
- fix metrics become syntax ([email protected])
- standalone etcds: make sure etcd facts are set before applying etcd config
- additional changes to remove discovery plugin from logging
- Convert rbac v1beta to v1 ([email protected])
- Increate lbaas_activation_timeout for kuryr-controller ([email protected])
- Change multipath prio from const to alua ([email protected])
- Certificates signed by admins should be approved ([email protected])
- change become syntax ([email protected])
- Migrate old master env files to new location ([email protected])
- Make sure that we use rslave mount propagation ([email protected])
- Update ansible code to preseve path on non-atomic hosts ([email protected])
- Add kubelet-plugins to allowed locations ([email protected])
- Mount kubelet plugins inside controller ([email protected])
- Fix volume location in containarized installs ([email protected])
- updating link to Origin install documentation for latest
- PAPR: tee update log in a separate file so that it won't be truncated
- Make fs_inotify_max_user_watches configurable. ([email protected])
- change heketi logic ([email protected])
- Mark ready nodes as accepted during oc_adm_csr approval.
- Remove the extra OpenStack network tasks ([email protected])
- Add infra secgroup rules to the flat secgrp rules ([email protected])
- Stop throwing exception except ValueError ([email protected])
- Add unit test for validate_json_format_vars ([email protected])