-
Notifications
You must be signed in to change notification settings - Fork 1
/
openshift-ansible.spec
10142 lines (9499 loc) · 532 KB
/
openshift-ansible.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# %commit is intended to be set by tito custom builders provided
# in the .tito/lib directory. The values in this spec file will not be kept up to date.
%{!?commit:
%global commit c64d09e528ca433832c6b6e6f5c7734a9cc8ee6f
}
# This is inserted to prevent RPM from requiring "/usr/bin/ansible-playbook"
# The ansible-playbook requirement will be ansibled by the explicit
# "Requires: ansible" directive
%global __requires_exclude ^/usr/bin/ansible-playbook$
Name: openshift-ansible
Version: 3.11.109
Release: 1%{?dist}
Summary: Openshift and Atomic Enterprise Ansible
License: ASL 2.0
URL: https://github.com/openshift/openshift-ansible
Source0: https://github.com/openshift/openshift-ansible/archive/%{commit}/%{name}-%{version}.tar.gz
BuildArch: noarch
# We expect most to run >= 2.6 but there are some module dependency conflicts
# in openstack modules for 2.6 that are nearly impossible to resolve so tolerate 2.5.7
Requires: ansible >= 2.5.7
Requires: python2
Requires: python-six
Requires: tar
Requires: %{name}-docs = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Obsoletes: atomic-openshift-utils <= 3.10
Requires: java-1.8.0-openjdk-headless
Requires: httpd-tools
Requires: libselinux-python
Requires: python-passlib
Requires: python2-crypto
Requires: patch
Requires: pyOpenSSL
Requires: openssh-clients
%description
Openshift and Atomic Enterprise Ansible
This repo contains Ansible code and playbooks
for Openshift and Atomic Enterprise.
%prep
%setup -q
%build
%install
# Base openshift-ansible install
mkdir -p %{buildroot}%{_datadir}/%{name}
mkdir -p %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp -rp inventory/dynamic %{buildroot}%{_datadir}/ansible/%{name}/inventory
cp ansible.cfg %{buildroot}%{_datadir}/ansible/%{name}/ansible.cfg
# openshift-ansible-bin install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{python_sitelib}/openshift_ansible
mkdir -p %{buildroot}/etc/bash_completion.d
mkdir -p %{buildroot}/etc/openshift_ansible
# Fix links
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/aws
rm -f %{buildroot}%{python_sitelib}/openshift_ansible/gce
# openshift-ansible-docs install
# Install example inventory into docs/examples
mkdir -p docs/example-inventories
cp inventory/hosts.* inventory/README.md docs/example-inventories/
# openshift-ansible-playbooks install
cp -rp playbooks %{buildroot}%{_datadir}/ansible/%{name}/
cp -rp test %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv plabooks
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/playbooks/adhoc/contiv
# BZ1330091
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name lookup_plugins -type l -delete
find -L %{buildroot}%{_datadir}/ansible/%{name}/playbooks -name filter_plugins -type l -delete
# openshift-ansible-roles install
cp -rp roles %{buildroot}%{_datadir}/ansible/%{name}/
# remove contiv role
rm -rf %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/*
# touch a file in contiv so that it can be added to SCM's
touch %{buildroot}%{_datadir}/ansible/%{name}/roles/contiv/.empty_dir
# Base openshift-ansible files
%files
%doc README*
%license LICENSE
%dir %{_datadir}/ansible/%{name}
%{_datadir}/ansible/%{name}/inventory
%{_datadir}/ansible/%{name}/ansible.cfg
# ----------------------------------------------------------------------------------
# openshift-ansible-docs subpackage
# ----------------------------------------------------------------------------------
%package docs
Summary: Openshift and Atomic Enterprise Ansible documents
Requires: %{name} = %{version}-%{release}
BuildArch: noarch
%description docs
%{summary}.
%files docs
%doc docs
# ----------------------------------------------------------------------------------
# openshift-ansible-playbooks subpackage
# ----------------------------------------------------------------------------------
%package playbooks
Summary: Openshift and Atomic Enterprise Ansible Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
BuildArch: noarch
%description playbooks
%{summary}.
%files playbooks
%{_datadir}/ansible/%{name}/playbooks
# Along the history of openshift-ansible, some playbook directories had to be
# moved and were replaced with symlinks for backwards compatibility.
# RPM doesn't handle this so we have to do some pre-transaction magic.
# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement
%pretrans playbooks -p <lua>
-- Define the paths to directories being replaced below.
-- DO NOT add a trailing slash at the end.
dirs_to_sym = {
"/usr/share/ansible/openshift-ansible/playbooks/common/openshift-master/library",
"/usr/share/ansible/openshift-ansible/playbooks/certificate_expiry"
}
for i,path in ipairs(dirs_to_sym) do
st = posix.stat(path)
if st and st.type == "directory" then
status = os.rename(path, path .. ".rpmmoved")
if not status then
suffix = 0
while not status do
suffix = suffix + 1
status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)
end
os.rename(path, path .. ".rpmmoved")
end
end
end
%package roles
# ----------------------------------------------------------------------------------
# openshift-ansible-roles subpackage
# ----------------------------------------------------------------------------------
Summary: Openshift and Atomic Enterprise Ansible roles
Requires: %{name} = %{version}-%{release}
Obsoletes: %{name}-lookup-plugins
Obsoletes: %{name}-filter-plugins
Obsoletes: %{name}-callback-plugins
BuildArch: noarch
%description roles
%{summary}.
%files roles
%{_datadir}/ansible/%{name}/roles
%pretrans roles
#RHBZ https://bugzilla.redhat.com/show_bug.cgi?id=1626048
#roles/openshift_examples/latest used to be a symlink, now its a dir
# workaround for RPM bug https://bugzilla.redhat.com/show_bug.cgi?id=975909
if [ -d %{_datadir}/ansible/%{name}/roles/openshift_examples/files/examples ]; then
find %{_datadir}/ansible/%{name}/roles/openshift_examples/files/examples -name latest -type l -delete
fi
# ----------------------------------------------------------------------------------
# openshift-ansible-tests subpackage
# ----------------------------------------------------------------------------------
%package test
Summary: Openshift and Atomic Enterprise Ansible Test Playbooks
Requires: %{name} = %{version}-%{release}
Requires: %{name}-roles = %{version}-%{release}
Requires: %{name}-playbooks = %{version}-%{release}
Requires: python-boto3
BuildArch: noarch
%description test
%{summary}.
%files test
%{_datadir}/ansible/%{name}/test
%changelog
* Sun Apr 21 2019 AOS Automation Release Team <[email protected]> 3.11.109-1
-
* Thu Apr 18 2019 AOS Automation Release Team <[email protected]> 3.11.108-1
- OWNERS File Audit ([email protected])
- Test using Ansible 2.7.10 ([email protected])
- Update openshift_facts facts gathering ([email protected])
- #10765 Update installation doc link for release-3.11
* Tue Apr 16 2019 AOS Automation Release Team <[email protected]> 3.11.107-1
- openshift_ovirt: Fix hostname in the inventory groups ([email protected])
- Fix serviceaccounts' secrets for Metrics ([email protected])
* Sun Apr 14 2019 AOS Automation Release Team <[email protected]> 3.11.106-1
- Fixes NotReady nodes after ca and certificate update ([email protected])
- Ensure master vars are passed to openshift_facts on upgrade
- Console cert redeploy: rerun install ([email protected])
* Thu Apr 11 2019 AOS Automation Release Team <[email protected]> 3.11.105-1
- Update roles/openshift_logging_elasticsearch/tasks/main.yaml
- Update main.yaml ([email protected])
* Wed Apr 10 2019 AOS Automation Release Team <[email protected]> 3.11.104-1
- Change the cni-cleanup file path to /etc ([email protected])
- Backport of #10173 ([email protected])
- openshift_ovirt: fix inventory creation of multi nodes ([email protected])
- Update README.md ([email protected])
- Add playbooks to regenerate secrets for openshift-monitoring
- OLM: use olm_operator_version as a tag for Origin images
- tmpfile.d file clears the cni config on boot ([email protected])
- BZ1695856 - redeploy certificates fails if use_crio_only ([email protected])
- Option to add and annotate namespaces for openshift-service-catalog (apomitta
@apoorva-vm1.local.lan)
- BZ1694106 - Update crictl.yaml runtime-endpoint config to resolve warning
- Remove block storageclass ([email protected])
- openshift_ovirt: Support setting mac_address in the manifest
- [KIECLOUD-110] - Update RHDM and RHPAM 7.30 templates on OCP and OSO service
catalog ([email protected])
- [KIECLOUD-171] - Update Application templates and imagestreams on OCP for
RHDS and RHIPS ([email protected])
- Revert "bug 1666674. Add Kibana sar and delegate url for auth-delegator"
- test/deprovision: retry attempts to destroy instances and SG
- Providing default oreg_url for validation ([email protected])
- Update kube-rbac-proxy to v0.4.1 ([email protected])
- ASB: use `${version}` in default image ([email protected])
- Satellite image URL can be worked in example template image url replacement.
* Sun Mar 31 2019 AOS Automation Release Team <[email protected]> 3.11.103-1
- Linting fixes in playbooks and roles ([email protected])
- Updating OWNERS ([email protected])
- Remove papr test files ([email protected])
- Re-apply tuned profile during upgrade ([email protected])
- lib_utils to parse *_storage_host variables with get_templated
- Cisco ACI CNI Plugin support ([email protected])
* Thu Mar 28 2019 AOS Automation Release Team <[email protected]> 3.11.102-1
- bz1690900: no longer install etcd on masters ([email protected])
- Wait for ServiceMonitor CRD to be created should have configurable retries
and delays ([email protected])
- [release-3.11] Do not include enterprise registry unless available in
oreg_url ([email protected])
* Tue Mar 26 2019 AOS Automation Release Team <[email protected]> 3.11.101-1
- Update examples-sync.sh to use XPAAS_VERSION ose-v1.4.18 ([email protected])
- Update EAP 7.1 and 6.4 imagestreams and templates ([email protected])
- Teardown: remove security using cluster ID tag ([email protected])
* Sun Mar 24 2019 AOS Automation Release Team <[email protected]> 3.11.100-1
- Modify lib_utils_oo_oreg_image filter to work against Satellite url pattern
* Thu Mar 21 2019 AOS Automation Release Team <[email protected]> 3.11.99-1
- remove dash causing syntax error in kibana install role
- bug 1666674. Add Kibana sar and delegate url for auth-delegator
* Tue Mar 19 2019 AOS Automation Release Team <[email protected]> 3.11.98-1
- Bug 1689149 - adding secret names to SA for whitelisting
- Calico: Add support for environment variable IP_AUTODETECTION_METHOD
* Sun Mar 17 2019 AOS Automation Release Team <[email protected]> 3.11.97-1
- Change the example docker_version for 3.9 and higher
* Thu Mar 14 2019 AOS Automation Release Team <[email protected]> 3.11.96-1
- Update origin and dotnet content ([email protected])
- add race condition protection when creating projects ([email protected])
- Rely on oc_adm_policy_user to fully qualify things ([email protected])
- don't tolerate absence of resource type ([email protected])
- Don't rely on aliases after restarting apiservers ([email protected])
* Tue Mar 12 2019 AOS Automation Release Team <[email protected]> 3.11.95-1
- Include dedicated etcd in upgrade if they are nodes ([email protected])
- Redeploy admin console certificates when master certs are updated
- bug 1660956. Add container name to elasticsearch exec call
- openshift-sync: tolerate absence of KUBELET_HOSTNAME_OVERRIDE
- bug 1676720. Check for curator cronjob ([email protected])
- Increase etcd quota to 8GB. ([email protected])
- Fix version_requirement callback plugin ([email protected])
- Encode the cert when loading it ([email protected])
- Update roles/openshift_examples/files/examples/x86_64/xpaas-streams/eap-cd-
image-stream.json ([email protected])
- Add EAP CD 15 to xpass templates ([email protected])
* Sun Mar 10 2019 AOS Automation Release Team <[email protected]> 3.11.94-1
- sdn: respect DEBUG_LOGLEVEL as written out by the "Configure Node settings"
task ([email protected])
- Fix validation of values in image_policy_allowed_registries_for_import
- Don't start/stop docker when openshift_use_crio_only ([email protected])
* Thu Mar 07 2019 AOS Automation Release Team <[email protected]> 3.11.93-1
- Simplify DaemonSet Update ([email protected])
- Remove runhour and runminute from curator config sample ([email protected])
- Ensure kuryr has its own namespace ([email protected])
- Adding new kuryr handler to avoid races ([email protected])
- Logs are already being shipped to journald ([email protected])
- fluentd: tolerate all taints ([email protected])
- Fix typo mistake: appliction 2 application. ([email protected])
- Relax version requirements ([email protected])
- bug 1685618. Modify default_md for logging cert generation bug 1685655.
Update key size for logging cert generation ([email protected])
- Remove hidden tag for latest Fuse builders #11292 ([email protected])
- Make sure that the user we expect has proper credentials set.
* Wed Mar 06 2019 AOS Automation Release Team <[email protected]> 3.11.92-1
- Include iscsi storage only on non-atomic host installs. ([email protected])
- additional provider network/octavia documentation ([email protected])
- In atomic host, multipath file does not exists. Use the result while adding
LIO-ORG section as well. ([email protected])
- Add lbaas check to router subnet ([email protected])
- added provisioner file path parameter to template ([email protected])
- Set AWS_CA_BUNDLE via openshift_cloudprovider_aws_ca_bundle
- sanity checks: avoid extra hostvar lookups ([email protected])
- Bug 1671315 - Kibana and Curator pods names are with ops
* Sun Mar 03 2019 AOS Automation Release Team <[email protected]> 3.11.91-1
- Require ansible 2.6, allow ansible 2.7 ([email protected])
- Use correct Data Grid version ([email protected])
- Adding docker as waagent systemd dependency ([email protected])
- Prevent OpenStack heat from trying to create router when provider network is
specified ([email protected])
- fixing docs to match actual defaults ([email protected])
- Correct service serving secret name in the annotation ([email protected])
* Thu Feb 28 2019 AOS Automation Release Team <[email protected]> 3.11.90-1
- Add Data Grid 7.3 to OpenShift Cloud Platform ([email protected])
- Handle null values and multiple certs when checking namedCertificates.
- Re-create webconsole secrets and pods after master certs were redeployed
- Add a playbook to redeploy web-console certs ([email protected])
- Update OWNERS file. ([email protected])
- test/ci/deprovision: wait for machine to be terminated ([email protected])
- test/ci/deprovision: set shutdown behaviour when creating VMs
- test/ci: remove SG using `ec2_group` ([email protected])
- Remove deprecated "openshift_logging_curator_run_timezone variable" as of
v3.11 ([email protected])
- Uninstall: delete all cri-o containers. ([email protected])
* Sun Feb 24 2019 AOS Automation Release Team <[email protected]> 3.11.89-1
- Revert "JSON structure appears to have changed" ([email protected])
- JSON structure appears to have changed ([email protected])
- Set the SE boolean for docker to use samba ([email protected])
- Adding samba-client to list of packages to install ([email protected])
- Revert "[release-3.11] Correct regressions of Curator5 template file"
* Fri Feb 22 2019 AOS Automation Release Team <[email protected]> 3.11.88-1
- Fix when clause formatting. ([email protected])
- Ensure dns records are available when deleting the stack
- kibana, curator ops false; wait for es deploy ([email protected])
- Uninstall no longer unmounts openshift.local.volumes ([email protected])
- Add a empty device section if not present. If present, only add LIO section
under it. ([email protected])
- Move LIO-iSCSI comment to role ([email protected])
- Remove LIO-ORG configuration in multipath conf as new task will take care of
adding the device. ([email protected])
- Add product as "TCMU device". Without product field "multipath -t" fails to
list the device ([email protected])
- If the multipath config file already exists, append LIO-ORG device
configuration. ([email protected])
- Use force:no in template section to avoid overwrite ([email protected])
- Copy multipath.conf file only if target does not exists. This is to avoid any
overwriting of existing configuration. ([email protected])
* Wed Feb 20 2019 AOS Automation Release Team <[email protected]> 3.11.87-1
- Bug 1672847. Corrected KUBERNETES_TRUST_CERTIFICATES reference.
- Make same timezone with running hosts ([email protected])
* Sun Feb 17 2019 AOS Automation Release Team <[email protected]> 3.11.86-1
- Add kuryr support for network policies ([email protected])
- Correct regressions of Curator5 template file ([email protected])
- Protect from dangerous etcd_image changes ([email protected])
* Thu Feb 14 2019 AOS Automation Release Team <[email protected]> 3.11.85-1
- azure: fix typo in repo ([email protected])
- [KIECLOUD-112] - Update RHPAM/DM templates on OpenShift Service Catalog for
release 7.2.1 ([email protected])
* Wed Feb 13 2019 AOS Automation Release Team <[email protected]> 3.11.84-1
- Removing SystemKeepFree to use default value ([email protected])
- Run firewall task on upgrades ([email protected])
- azure: pull RPMs from CDN ([email protected])
- openshift_node: use init_file to replace journald.conf settings
- Remove cfme templates from openshift_examples directory ([email protected])
- Ignore paths in `etcd-servers-overrides` ([email protected])
- add Initialize facts step to html_and_json_timestamp.yaml ([email protected])
- Fix gluster deploy checks ([email protected])
- GlusterFS: Recreate config directories for external uninstall
- set permissions on vsphere.conf file ([email protected])
- Templates for CloudForms 4.7 ([email protected])
* Sun Feb 10 2019 AOS Automation Release Team <[email protected]> 3.11.83-1
- Ensure async etcd-image-pull job exists before checking status.
* Thu Feb 07 2019 AOS Automation Release Team <[email protected]> 3.11.82-1
-
* Thu Feb 07 2019 AOS Automation Release Team <[email protected]> 3.11.81-1
- Run nsx role on the first master only ([email protected])
- GlusterFS: Keep logs on uninstall ([email protected])
- GlusterFS: Implement container image version check ([email protected])
- ovs process gets killed when oom-killer is invoked ([email protected])
- Check for changes to volume-config in sync pod. ([email protected])
- Add new team members to OWNERS file. ([email protected])
- [BZ1665835] - jboss image streams do not have referencePolicy.type set to
local ([email protected])
- Remove condition for pre-pulling container images. ([email protected])
* Wed Feb 06 2019 AOS Automation Release Team <[email protected]> 3.11.80-1
-
* Tue Feb 05 2019 AOS Automation Release Team <[email protected]> 3.11.79-1
- cert expiry: cert subject can contain unicode ([email protected])
* Sun Feb 03 2019 AOS Automation Release Team <[email protected]> 3.11.78-1
- Fixes idempotency on update of service in oc_service
- Fixing incorrect indentation for cns-secgrp in heat template
- Added liveness probes to apiserver template ([email protected])
* Thu Jan 31 2019 AOS Automation Release Team <[email protected]> 3.11.77-1
- Remove hard coded gather_timeout in openshift_facts ([email protected])
- Remove docker-common in uninstall ([email protected])
- Fix formatting ([email protected])
- Update router service when its annotation changes ([email protected])
- multipath: add hardware_handler for LIO-ORG (gluster-block) config
- Set openshift_is_atomic default for gluster and kernel modules install
* Tue Jan 29 2019 AOS Automation Release Team <[email protected]> 3.11.76-1
- Bug 1651632 - Force console rollout every time the playbook runs
- [KIECLOUD-71] - Update PAM and DM templates on OpenShift for 7.2.0
- gluster: add HEKETI_DEBUG_UMOUNT_FAILURES environment variable for extra
debugging ([email protected])
- return issuer of each certificate ([email protected])
- Add EAP 7.2.0.GA imagestreams and templates ([email protected])
- Fix OpenShift SDN/OVS pod restart during upgrades ([email protected])
- Revert "sdn: upgrade SDN after all nodes are upgraded." ([email protected])
* Sun Jan 27 2019 AOS Automation Release Team <[email protected]> 3.11.75-1
- Maintain etcd as owner of certs. ([email protected])
- Update Calico README ([email protected])
- Allow configuration of Calico IP pools ([email protected])
- Add newlines when concatenating router certificate ([email protected])
- Add openshift_cloud_provider config for subnetwork-name ([email protected])
* Thu Jan 24 2019 AOS Automation Release Team <[email protected]> 3.11.74-1
- openshift_node: open the router stats port by default ([email protected])
- Pull heketi admin key from deploymentconfig object ([email protected])
- Fixed "AnsibleUndefinedVariable: 'dict object' has no attribute
'annotations'" error. ([email protected])
- gluster: detect intent to deploy legacy OpenShift Container Storage
- Fix sanity-check removed vars ([email protected])
- Fix documentation for oc - modules ([email protected])
- Include namedcertificates in the list of expiration check
- Retrieve heketi secret before setting CLI command ([email protected])
* Wed Jan 23 2019 AOS Automation Release Team <[email protected]> 3.11.73-1
- Hardcode CentOS repository template for 3.11 ([email protected])
- Run nsx_node role on opensift nodes only, Closes #11038 ([email protected])
- Add tasks to run init playbooks for collecting "openshift_is_atomic" fact
- Handle openshift multi-arch examples ([email protected])
- Fix auditConfig.policyConfiguration in master_check_paths_in_config
- split readiness from liveness probe ([email protected])
- [release 3.11] Allow OpenStack persistent volumes to specify storage class
- add new variables to specify storageclass to prometheus and alertmanager
* Sun Jan 20 2019 AOS Automation Release Team <[email protected]> 3.11.72-1
-
* Fri Jan 18 2019 AOS Automation Release Team <[email protected]> 3.11.71-1
-
* Tue Jan 15 2019 AOS Automation Release Team <[email protected]> 3.11.70-1
- fix 1665235. Specify logging cluster is requires restart
- [release 3.11] fix OpenStack heat template conditional ([email protected])
- glusterfs: Force delete heketi pod and avoid waiting for unmount, given that
we will be deleting glusterfs pod as well. ([email protected])
- [release 3.11] fix openstack facts when ec2 var is empty
* Sun Jan 13 2019 AOS Automation Release Team <[email protected]> 3.11.69-1
- Add debug info for oc get --raw step csr module ([email protected])
- Remove vendored ansible-profile callback ([email protected])
* Thu Jan 10 2019 AOS Automation Release Team <[email protected]> 3.11.68-1
- added enviroment values for easier heketi-cli usage ([email protected])
- Fix BZ1663306 when gluster nodes are SchedulingDisabled
- Fix install of kube_proxy_and_dns, with Calico ([email protected])
- unsquished parameter words ([email protected])
- better and clearer indentation in template ([email protected])
- Fix README and remove tags ([email protected])
- Do not disable ingressClass if nsx-lb is not used ([email protected])
- Fix couple of obsolete warnings ([email protected])
- Fix indentation ([email protected])
- Contains all requested changes ([email protected])
- Update roles/nsx_node/tasks/main.yml ([email protected])
- Update roles/nsx/templates/nsx-node-agent-configmap.yml.j2
- Update roles/nsx/templates/ncp-configmap.yml.j2 ([email protected])
- Fix spaces and indentations ([email protected])
- Update README.md ([email protected])
- Add NSX-T support ([email protected])
- test/aws: create necessary security groups ([email protected])
- Use namespace variable instead of default namespace value, glusterfs
- Use Calico v3.4.0 ([email protected])
- Add openshift_sdn_vxlan_port to change the vxlanPort ([email protected])
- Added missing trailing space ([email protected])
- Update README.md ([email protected])
- Update README.md ([email protected])
- fixed indentation ([email protected])
- Added GlusterFS advanced options ([email protected])
* Sun Jan 06 2019 AOS Automation Release Team <[email protected]> 3.11.67-1
-
* Thu Jan 03 2019 AOS Automation Release Team <[email protected]> 3.11.66-1
- Switch subjectAltName type to bytes when checking certs using pyOpenSSL.
- gluster: add volume mounts for /sys/class and /sys/module ([email protected])
- glusterfs: re-add /dev bind-mount ([email protected])
- sdn: upgrade SDN after all nodes are upgraded. ([email protected])
- add vsphere public network to 3.11 release ([email protected])
* Tue Jan 01 2019 AOS Automation Release Team <[email protected]> 3.11.65-1
-
* Sun Dec 30 2018 AOS Automation Release Team <[email protected]> 3.11.64-1
-
* Thu Dec 27 2018 AOS Automation Release Team <[email protected]> 3.11.63-1
-
* Tue Dec 25 2018 AOS Automation Release Team <[email protected]> 3.11.62-1
-
* Sun Dec 23 2018 AOS Automation Release Team <[email protected]> 3.11.61-1
- Added proper crio doc ([email protected])
- fix ha install. delegating tasks to ca master ([email protected])
- Add openshift_node_upgrade_pre_drain_hook ([email protected])
- create kube proxy pods for nuage install ([email protected])
- remove the hardcoded cert prefix in monitor config file
- fix openshift_service_type error in nuage_node role
- include nuage_node role when doing additional node config
- reploy etcd certificates whenever ansible is re-run
- remove the duplicate mounts in cni daemonset ([email protected])
- remove the extra spaces before colon ([email protected])
- include nuage masters in loadbalancer config ([email protected])
* Fri Dec 21 2018 AOS Automation Release Team <[email protected]> 3.11.60-1
- [3.11] Fix CentOS repo version ([email protected])
- Ensure multi pool driver can be disabled ([email protected])
- sdn: exit when OVS crashes, tail logs ([email protected])
- Add possiblity to run kuryr-controller in HA ([email protected])
- Erase docker during docker uninstall ([email protected])
* Tue Dec 18 2018 AOS Automation Release Team <[email protected]> 3.11.59-1
- hostname is configured as local-ipv4 ([email protected])
- Recovering missing features that disappear with PR 10805
* Mon Dec 17 2018 AOS Automation Release Team <[email protected]> 3.11.58-1
- bug 1655675. Extend DC recreate param to avoid premature rolebacks
- Maintain /var/lib/containers/storage mount during upgrades
- Fix openstack nsupdate record ([email protected])
- Fix output of insecure registries in /etc/containers/registries.conf
- logging support ansible 2.7 -no include_tasks parameter ([email protected])
* Thu Dec 13 2018 AOS Automation Release Team <[email protected]> 3.11.57-1
- Add openshift_node_group_name to hosts.example ([email protected])
- Set maxSurge in kuryr-controller Deployment ([email protected])
- Update Fuse templates with 7.2 release ([email protected])
* Wed Dec 12 2018 AOS Automation Release Team <[email protected]> 3.11.56-1
-
* Tue Dec 11 2018 AOS Automation Release Team <[email protected]> 3.11.55-1
- Handle audit log path in /var/log/origin ([email protected])
- Remove duplicated parameter CLUSTER_NAME on template gluster-s3-template.yml
- Cleanup kuryr role ([email protected])
- Install cifs-utils and samba required by Azure ([email protected])
- retries count increased on task ([email protected])
- Use ansible 2.7.4 ([email protected])
- Update RBAC for Calico ([email protected])
- Ensure OSE vars are not overwritten at the dynamic inventory
- add openshift_version dependency to openshift_repos role
- openshift_ovirt: add vms into inventory groups ([email protected])
- add nodejs rhoar and openjdk imagestreams for ppc64le ([email protected])
- Ensure openshift_upgrade_nodes_label works ([email protected])
- Extend Openstack cloud provider LB parameters ([email protected])
* Sun Dec 09 2018 AOS Automation Release Team <[email protected]> 3.11.54-1
-
* Thu Dec 06 2018 AOS Automation Release Team <[email protected]> 3.11.53-1
-
* Tue Dec 04 2018 AOS Automation Release Team <[email protected]> 3.11.52-1
- Install python-docker-py instead of python-docker ([email protected])
- Install boto3 from pip ([email protected])
- glusterfs: bind-mount /dev/mapper into the glusterfs-server container
- Also set etcd_cert_config_dir for calico ([email protected])
* Mon Dec 03 2018 AOS Automation Release Team <[email protected]> 3.11.51-1
- Added ovirt_admin variable to avoid use admin rights on RHV platform
* Fri Nov 30 2018 AOS Automation Release Team <[email protected]> 3.11.50-1
-
* Fri Nov 30 2018 AOS Automation Release Team <[email protected]> 3.11.49-1
- Remove 80-openshift-network.conf during uninstallation
- [KIECLOUD-56] - Update PAM DM templates on OpenShift for 7.1.1
* Thu Nov 29 2018 AOS Automation Release Team <[email protected]> 3.11.47-1
- glusterfs: bind-mount /dev/disk into the glusterfs-server container
* Wed Nov 28 2018 AOS Automation Release Team <[email protected]> 3.11.46-1
- Add openssh-clients dependency ([email protected])
- update references to outdated variable openshift_monitoring_deploy
* Tue Nov 27 2018 AOS Automation Release Team <[email protected]> 3.11.45-1
- Remove easy-mode-upload.yaml cert check. ([email protected])
- Revert "Set no_log for registry login" ([email protected])
- make crio explicit ([email protected])
- Create the namespace only in the first master ([email protected])
- deploy: no need to have volumes for /dev in privileged containers
- add crio packages ([email protected])
- Add doc to use kuryr downstream images ([email protected])
- remove crio var to be passed from playbook ([email protected])
- Set no_log for registry login ([email protected])
- Use new node labels for descheduler ([email protected])
- Add support for secret encryption ([email protected])
- Added Capability to assign an empty hostname to the created VMs
- Check for node-config.yaml file when comparing config changes. If node-
config.yaml does not exist, wipe contents of /tmp/.old. This copy the config
over if node-config.yaml was delete externally. ([email protected])
- Add pyOpenSSL openshift-ansible dep ([email protected])
- OVS: tolerate taints ([email protected])
- #10718 Fixing compatibility of yum_repo.j2 template with py3
- Update node config template for crio ([email protected])
- Add log persistency to ovs ([email protected])
- Service Catalog - wait for rollout of SC API Server & SC Controller Mgr
- Check both service catalog and install vars ([email protected])
- Add network-project-id value for kubernetes config for GCP ([email protected])
* Wed Nov 14 2018 AOS Automation Release Team <[email protected]> 3.11.44-1
- Properly prefix certificate paths ([email protected])
- [release 3.11] Check if docker is running before attempting to restart it
- Allow failure when copying kubeconfig to user home dir. ([email protected])
- move to liba mirror ([email protected])
- bye bye crio for now ([email protected])
- Start node image prepull after CRIO is restarted ([email protected])
* Fri Nov 09 2018 AOS Automation Release Team <[email protected]> 3.11.43-1
- GitHubIdentityProvider catering for GitHub Enterprise and includes examples
on using the provider. Installation includes parameters for ca and hostname
(GH enterprise specific) ([email protected])
- Update centos_repos.yml ([email protected])
- Update centos_repos.yml ([email protected])
* Fri Nov 09 2018 AOS Automation Release Team <[email protected]> 3.11.42-1
- sdn: tolerate all taints ([email protected])
- sync: tolerate all taints ([email protected])
- Update crio.conf.j2 template for registries ([email protected])
- Mount /etc/pki into controller pod ([email protected])
- Restart docker after openstack storage setup ([email protected])
- Add readiness + liveness probes for Service Catalog ([email protected])
- Run the init/main playbook properly ([email protected])
- openshift_ovirt: Add a task to create the VMs ([email protected])
- Decalre the dns variable in the defaults ([email protected])
- Fixing Typo ([email protected])
- Added capability to add dns_search and dns_server even without static
configuration ([email protected])
- Fixes #10415 maintains the name and host_name when vm count field are 1.
- Added capability to fix static addresses to openshift_ovirt provider vms
* Wed Nov 07 2018 AOS Automation Release Team <[email protected]> 3.11.41-1
- Don't attemp to install packages on atomic ([email protected])
- Fix master paths check, while using Istio ([email protected])
- openshift_prometheus: cleanup unused variables ([email protected])
* Wed Nov 07 2018 AOS Automation Release Team <[email protected]> 3.11.40-1
- add default(false) to openshift_autoheal_deploy ([email protected])
- Add Openshift 3.11 Repo ([email protected])
- Remove openshift_disable_swap for new install ([email protected])
- Reload tuned service when node-config.yaml has changed.
* Sun Nov 04 2018 AOS Automation Release Team <[email protected]> 3.11.39-1
- added needed space in error message as stated in bug# 1645718
- Replace undefined {{ item }} by filename ([email protected])
- Improve cleanup of networks and disks in GCP ([email protected])
- Fix master-config.yaml path ([email protected])
- glusterfs: Fix a typo in the README ([email protected])
- Adhoc fix first atomic master after upgrade fails ([email protected])
- Update playbooks/azure/openshift-cluster/build_node_image.yml
- add oreg_url check ([email protected])
- add version bind ([email protected])
* Fri Nov 02 2018 AOS Automation Release Team <[email protected]> 3.11.38-1
-
* Thu Nov 01 2018 AOS Automation Release Team <[email protected]> 3.11.37-1
- Backporting PR 10541 to release-3.11 ([email protected])
- downgrade azure cli ([email protected])
- Ensure Kuryr-controller runs on infra nodes ([email protected])
- add 3.11 build steps ([email protected])
- Fixes #8267 ([email protected])
- set kibana session timeout to 168 hours ([email protected])
- Add a new dockerfile to use in CI ([email protected])
- Add new package which contains test playbooks ([email protected])
- Remove traces of containerized install ([email protected])
- openshift_storage_nfs_lvm: fix with_sequence ([email protected])
- - s3 variables check as part of importing the s3 tasks itself.
- Avoid S3 deployment check ([email protected])
* Wed Oct 31 2018 AOS Automation Release Team <[email protected]> 3.11.36-1
- Make timeout a param and increase default to 20 for docker_creds.py
- Updating clean up task to match become of creation task ([email protected])
* Tue Oct 30 2018 AOS Automation Release Team <[email protected]> 3.11.35-1
- Ensure proper task ordering atomic upgrades. ([email protected])
- Increase Octavia OpenShift API loadbalancer timeouts ([email protected])
- Update existing template for registry-console and make sure created objects
are updated ([email protected])
- Fix ansible version checking ([email protected])
- Add unit test for oo_oreg_image filter ([email protected])
- lib_utils_oo_oreg_image preserve path component ([email protected])
* Sun Oct 28 2018 AOS Automation Release Team <[email protected]> 3.11.34-1
- Prepull node image using openshift_container_cli ([email protected])
* Fri Oct 26 2018 AOS Automation Release Team <[email protected]> 3.11.33-1
- Don't install cockpit unless required ([email protected])
* Thu Oct 25 2018 AOS Automation Release Team <[email protected]> 3.11.32-1
- Fix Calico liveness and readiness checks to include Calico 3.2
- Add pull secret to the Calico controllers ([email protected])
- fix fluentd prometheus scrape scheme ([email protected])
- Add permissions for the Calico CNI plugin to access namespaces
- Fix incorrect until condition in servicecatalog api check
- Run the init playbooks to properly set vars ([email protected])
- Remove value rather than replacing it with an empty string
- Update oc_group.py in src ([email protected])
- Update tests ([email protected])
- Fix oc group get ([email protected])
- Set openshift_hosted_registry_storage_swift_insecureskipverify's default
- Document openshift_hosted_registry_storage_swift_insecureskipverify
- Add openshift_hosted_registry_storage_swift_insecureskipverify parameter
- bug 1627689. Peg logging-es-ops to appropriate configmap
* Tue Oct 23 2018 AOS Automation Release Team <[email protected]> 3.11.31-1
- Ensure we don't attempt to yum install on atomic ([email protected])
- Remove hostname override from OpenStack inventory ([email protected])
* Tue Oct 23 2018 AOS Automation Release Team <[email protected]> 3.11.30-1
- cluster-monitoring: Adds storageclass name variable ([email protected])
- Mount /etc/pki into apiserver pod ([email protected])
- Enable IAM roles for EC2s in AWS ([email protected])
- This relaxes the Ansible version checking to allow 2.5.7.
- pin azure cli to version 2.0.47 ([email protected])
- Fix scaleup failure for hostname override ([email protected])
- Fail on openshift_kubelet_name_override for new hosts. ([email protected])
* Sun Oct 21 2018 AOS Automation Release Team <[email protected]> 3.11.29-1
-
* Fri Oct 19 2018 AOS Automation Release Team <[email protected]> 3.11.28-1
-
* Fri Oct 19 2018 AOS Automation Release Team <[email protected]> 3.11.27-1
-
* Thu Oct 18 2018 AOS Automation Release Team <[email protected]> 3.11.26-1
- Bump Data Grid to version 1.1.1 ([email protected])
* Thu Oct 18 2018 AOS Automation Release Team <[email protected]> 3.11.25-1
- Make sure images are prepulled when CRIO is used ([email protected])
- etcdv2 remove: avoid using failed_when ([email protected])
- Ensure skopeo is installed prior to upgrade to 3.11 ([email protected])
- Update Fuse templates with 7.1 release ([email protected])
* Tue Oct 16 2018 AOS Automation Release Team <[email protected]> 3.11.24-1
- Add ansible 2.6 repo ([email protected])
- openshift-prometheus: remove deprecated prometheus stack install
- Add 3 retries around all image stream create/replace ([email protected])
* Sun Oct 14 2018 AOS Automation Release Team <[email protected]> 3.11.23-1
- typo correction ([email protected])
- no longer creates cns security group when number of cns is 0
- Update main.yml ([email protected])
- Openshift autoheal fails to pull images even if oreg_url is specified
- Require ansible 2.6.5 ([email protected])
- Dockerfile: install ansible 2.6 and remove epel-testing ([email protected])
- Dockerfile: install ansible 2.6 ([email protected])
- Modify sync pod to check for KUBELET_HOSTNAME_OVERRIDE ([email protected])
- README: ansible 2.7 is not supported ([email protected])
- Replace openshift.node.nodename with l_kubelet_node_name ([email protected])
- Add missing option in Openstack documentation and sample file.
- Increase number of retries in sync DS ([email protected])
- Add support for only installing and running the schema installer job
- Fail on openshift_hostname defined; add openshift_kubelet_name_override
- Atomic upgrade: ensure /etc/origin/kubelet-plugins exists
- Node problem detector always pull images from registry.redhat.io for
openshift-enterprise ([email protected])
- bug 1636248. Delete logging cluster service if clusterIP != None
- Remove unused registry migration task ([email protected])
- roles/cluster_monitoring: minor wording improvement ([email protected])
- Pass admin kubeconfig ([email protected])
- Replace 'command chmod' with 'file mode=...' ([email protected])
- Add CI scripts in hack/ ([email protected])
- Fix etcd scaleup on standalone hosts ([email protected])
- Update installer_checkpoint plugin to handle empty stats ([email protected])
- Fix etcd scaleup playbook ([email protected])
- Bug 1554293 - logging-eventrouter event not formatted correctly in
Elasticsearch when using MUX ([email protected])
- Refactored Calico and updated playbooks to reflect self-hosted Calico
installs only ([email protected])
- Move the cluster-cidr assignment to the correct configs ([email protected])
- Update main.yml ([email protected])
- Add calico-pull-secret ([email protected])
- Run the kube-proxy once per cluster for Calico ([email protected])
- Add proper liveness and readiness checks for Calico 3.2 ([email protected])
- Add separate Calico etcd ([email protected])
* Wed Oct 10 2018 AOS Automation Release Team <[email protected]> 3.11.22-1
- unmount just before removing ([email protected])
- GlusterFS uninstall: Only unlabel configured nodes ([email protected])
* Mon Oct 08 2018 AOS Automation Release Team <[email protected]> 3.11.21-1
- test/ci: ensure AWS instances have public hostname ([email protected])
* Thu Oct 04 2018 AOS Automation Release Team <[email protected]> 3.11.20-1
-
* Wed Oct 03 2018 AOS Automation Release Team <[email protected]> 3.11.19-1
- glusterfs: add probe script for liveness and readiness checks
- Remove unlicensed code from internet in sanity checks ([email protected])
- Start only the ovsdb so we can add the config safely ([email protected])
- GlusterFS: Fix registry playbook PV creation ([email protected])
* Sun Sep 30 2018 AOS Automation Release Team <[email protected]> 3.11.18-1
-
* Fri Sep 28 2018 AOS Automation Release Team <[email protected]> 3.11.17-1
- Remove oreg_auth_credentials_replace from inventory ([email protected])
- test/ci: set expirationDate flag for CI namespace garbage collector
* Wed Sep 26 2018 AOS Automation Release Team <[email protected]> 3.11.16-1
- cluster-monitoring: Bump cluster monitoring operator in origin
* Tue Sep 25 2018 AOS Automation Release Team <[email protected]> 3.11.15-1
- Fix for recent az changes. ([email protected])
* Sun Sep 23 2018 AOS Automation Release Team <[email protected]> 3.11.14-1
-
* Sun Sep 23 2018 AOS Automation Release Team <[email protected]> 3.11.13-1
- Don't re-deploy node system containers when deploying auth credentials
- Don't install NM on atomic systems ([email protected])
- test/ci: setup network manager ([email protected])
- test ci: add an option to terminate VMs instead of stopping
- Simplify match filter when looking for sync annotations ([email protected])
- remove unix prefix from crio path ([email protected])
* Thu Sep 20 2018 AOS Automation Release Team <[email protected]> 3.11.12-1
- adding container.yaml ([email protected])
- Ensure glusterfs host groups are correct for registry play
- registry auth: fix check that node_oreg_auth_credentials_stat exists
- Fix openshift_additional_registry_credentials comparison
- move OpenStack network fact gathering from prereqs to provision tasks
* Wed Sep 19 2018 AOS Automation Release Team <[email protected]> 3.11.11-1
-
* Wed Sep 19 2018 AOS Automation Release Team <[email protected]> 3.11.10-1
-
* Tue Sep 18 2018 AOS Automation Release Team <[email protected]> 3.11.9-1
- Ensure atomic hosts prepull node image during pre-upgrade
- Fix broken package list on fedora ([email protected])
- upgrade: remove registry migration in 3.11 ([email protected])
* Tue Sep 18 2018 AOS Automation Release Team <[email protected]> 3.11.8-1
- Ensure dnsmasq is restarted during upgrades ([email protected])
- GCP upgrade: don't exclude nodes with tag_ocp-bootstrap ([email protected])
- GCP upgrade: don't exclude nodes with tag_ocp-bootstrap ([email protected])
* Sun Sep 16 2018 AOS Automation Release Team <[email protected]> 3.11.7-1
- Add retries around api service discovery ([email protected])
- Hash the registry hostname to generate unique secret names
- Ensure that recycler pod definition is deployed during upgrade