summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2019-04-05Dockerfile and build script for UbuntuBartek Grzybowski2-0/+35
Dockerfile that allows building a Systemd compliant Ubuntu image (for Ubuntu releases that support it). A build script for building the image. Change-Id: I3456e40e7ac96e611e957b2912405f9030dc0f04 Issue-ID: OOM-1774 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-03Merge "Improving docker restart handler"Michal Ptacek2-4/+19
2019-04-03Verify offline app repo is workingBartek Grzybowski3-1/+35
A patch for failing fast if configured offline application repository is not working properly. Just adding repo to repolist doesn't guarantee it's really operational. Change-Id: I65372b9b1ea5f5dcb797548b14e3ae1295668592 Issue-ID: OOM-1689 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-03Merge "Support time synchronization on hosts"Michal Ptacek7-3/+113
2019-04-03Merge "Improve kubectl role testability."Samuli Silvius1-1/+1
2019-04-03Merge "Improve rancher role testability"Samuli Silvius10-41/+45
2019-04-02Add helm override instructions to install guideMichal Zegan1-0/+18
This commit adds instruction about using the new helm chart overrides feature. Change-Id: I6a5d973ee91562ae618d357fd3fdecc1cf4f03bf Issue-ID: OOM-1752 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-02Support time synchronization on hostsBartek Grzybowski7-3/+113
This change introduces functionality to synchronize infra/kube nodes' clock with external NTP authority. Configuring external time source is optional, however default behaviour will be to setup NTP time source on infra-node and sync kube-nodes clock with it. It's also possible to setup custom time zone. Change-Id: I725ce9a306da1977628b6c03d5ff10fca77fb3b0 Issue-ID: OOM-1710 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-01Merge "Wrong filename does not fail transfer"Samuli Silvius1-8/+19
2019-04-01Merge "nginx update for long server names"Samuli Silvius1-0/+1
2019-04-01Allow passing any values to override.yamlMichal Zegan1-6/+6
This change allows passing any values that will then be stored to override.yaml. These values are passed from the "overrides" key, that may be set either as an extra variable or in inventory/group_vars. The root certificate is merged with the overrides dictionary before saving the file. Change-Id: I772c342b3c9eafe1849d1678b810319afaaf75bf Issue-ID: OOM-1752 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-01Improve application role testabilitySamuli Silvius13-69/+78
Remove different phases for application role as those are supposed to run after each other anyway from playbook and pre/post steps can be disabled by other means. Enable Helm override file generation customization by delegating it to separate role. Separate Helm file transfer to own module. NOTE: install.yml with all Helm commands (shell/command) is not idempotent and should be fixed with separate commit. Issue-ID: OOM-1655 Change-Id: Ib29773c4d64a0529c71c3f93c2af7265ae94059f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "Fix idempotence for firewall role"Michal Ptacek1-0/+1
2019-04-01Merge "Update Maven artifact dependency list again"Michal Ptacek2-0/+186
2019-03-29Fix helm install command not showing errorMilan Verespej1-0/+2
Issue-ID: OOM-1737 Change-Id: I240415793ea2a078ab6c6d9c0727852dc2d9ada3 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-28Update Maven artifact dependency list againkaihlavi2-0/+186
Updated additional Maven artifact dependencies for offline Nexus Issue-ID: OOM-1706 Signed-off-by: kaihlavi <l.kaihlavirt@partner.samsung.com> Change-Id: I3c744be33447fc5816bc547c0ae3cce6428dc57c
2019-03-28nginx update for long server nameseronkeo1-0/+1
This issue addresses the following error when starting nginx container: nginx: [emerg] could not build the \ server_names_hash, you should increase \ server_names_hash_bucket_size: 64 Change-Id: I369075edd16801aca6b09c6727370060225c428c Issue-ID: OOM-1765 Signed-off-by: eronkeo <ronan.keogh@est.tech>
2019-03-28Improving docker restart handlerMichal Ptacek2-4/+19
There is a bug in docker which leads to not properly shutdown service preventing subsequent startup. https://github.com/moby/moby/issues/30348 This commit is preventing this problem to appear. Change-Id: I29505610bd9954af01d73264e5414fdb2b9ac99d Issue-ID: OOM-1735 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-26Wrong filename does not fail transferSamuli Silvius1-8/+19
User typo on resource package filename or dir does not cause install to fail but just skips that resource package. Change resource paths handling to skip resource only if variable is not defined or empty, but if a value is given resource must exist or transfer fails otherwise. Issue-ID: OOM-1736 Change-Id: I765c5dc8eb5e58875f032e056f9a8360aee702c0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-26Add python-jsonpointer as a new dependencyPetr Ospalý2-1/+6
Our custom ansible module requires python-jsonpointer module to deal with jsons. Change-Id: Idd7bfcf8fcf75e4397fba51d8219b73c57df5f0e Issue-ID: OOM-1758 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-26Merge "Sanitize input arguments validation"Michal Ptacek1-4/+18
2019-03-26Merge "Fixing some yaml-lint warnings"Michal Ptacek9-16/+40
2019-03-26Fixing some yaml-lint warningsMichal Ptacek9-16/+40
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-26Merge ".gitignore for Molecule testing"Michal Ptacek1-0/+3
2019-03-26Merge "Fix issue with proxy for deb download behind proxy"Michal Ptacek1-5/+5
2019-03-26Merge "Fix git repos not using tag 3.0.1-ONAP"Michal Ptacek1-3/+3
2019-03-24Fix idempotence for firewall roleSamuli Silvius1-0/+1
Based on Molecule testing, fix idempotence. Issue-ID: OOM-1757 Change-Id: Ie2c4cdcf65aeac664d4b76daa7e979f4f23b6bdf Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-23.gitignore for Molecule testingSamuli Silvius1-0/+3
Issue-ID: OOM-1748 Change-Id: Ie1558112d6d2af2c77f9f9d0a142d417b3269589 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve kubectl role testability.Samuli Silvius1-1/+1
Move kubectl related functionality from rancher role to kubectl role and change order of execution in playbook to satisfy kubectl role dependency to rancher role regarding server value inserted into kubeconfig file. Introduced defaults and moved technical variables from group_vars into role defaults. Issue-ID: OOM-1730 Change-Id: I6339664ba52928566487edcdca8a3b42db86eeed Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve rancher role testabilitySamuli Silvius10-41/+45
Move functionality from playbook to rancher role. Introduce defaults for holding default values in rancher role. Other small changes noticed while testing rancher role with molecule. Issue-ID: OOM-1729 Change-Id: I83befa9f0964c67e209d3def76bafd2a61c1ef33 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20update for missing nginx tarfileeronkeo2-3/+7
This update adds an entry to the docker_images lists file to ensure it is saved as a tar file and available for processing in the "Prepare infra related images to infra folder" section. Change-Id: I293144daa96b3c579443a2e76a407ea04821dce7 Issue-ID: OOM-1738 Signed-off-by: eronkeo <ronan.keogh@est.tech>
2019-03-20Fix issue with proxy for deb download behind proxyTomáš Levora1-5/+5
As curl tries to use ftp transfer for some of the packages in the list, what causes an issue behind some corporate proxies, this commit unifies the sources to prevent ftp Issue-ID: OOM-1746 Change-Id: Ia7cac5a1c3d508749c3bea830c3df1137128e709 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-03-20Fix git repos not using tag 3.0.1-ONAPTomáš Levora1-3/+3
Tag 3.0.1-ONAP is not created for projects not included in the Casablanca Maintenance release, so casablanca branch is used instead Issue-ID: OOM-1745 Change-Id: I652ab0a87ddcdda0d72088609fdd1ce678159ff0 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-03-20Merge "Update Maven artifact dependency list"Michal Ptacek2-496/+638
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek5-92/+345
2019-03-20Merge "Changing keystore to trustore in policy"Tomáš Levora1-20/+20
2019-03-20Update Maven artifact dependency listkaihlavi2-496/+638
Update required Maven artifact dependencies for offline Nexus to Casablanca level Change-Id: I2c0eb230e05bb691911497eff4439b121b2a01d5 Issue-ID: OOM-1706 Signed-off-by: kaihlavi <l.kaihlavirt@partner.samsung.com>
2019-03-19Merge "Change cert signing from command to module"Michal Ptacek2-29/+14
2019-03-18Add default logging settings for dockerPetr Ospalý5-92/+345
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-18Sanitize input arguments validationBartek Grzybowski1-4/+18
This patch ensures non-positional parameters are given past positional args. So far mixing them led to malicious script behaviour. Change-Id: Idf2b6a57d0cd8561e74e467f68ddc5d086e7a0c0 Issue-ID: OOM-1621 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-18Merge "Don't remove target dir by default"Michal Ptacek1-6/+23
2019-03-15Changing keystore to trustore in policyMichal Ptacek1-20/+20
Casablanca policy is using different file as its keystore. We need to adjust our patch accordingly Issue-ID: OOM-1727 Change-Id: I67cb3f098a8e56467594832050dbc2c66dbe124c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-14Don't remove target dir by defaultBartek Grzybowski1-6/+23
If target dir given as an argument is not empty script exits and gives verbose reasoning. Introduced '--force' flag to allow overwriting non empty target dir. Improved usage synopsis. Change-Id: Ic03c926011a41e9620c941f28dbc580b5b9933ac Issue-ID: OOM-1621 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-14Fix repo checkout cmd in build guideBartek Grzybowski1-1/+1
As there is no 'casablanca' branch 'master' should be checked out. Change-Id: I9fba8ef0b10d3de3891d0e7612571789dfdc9449 Issue-ID: OOM-1621 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius7-96/+106
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-08Merge "Refine application_pre_install_role variable usage"Michal Ptacek5-16/+20
2019-03-08Modify ansible version in docker/chrootPetr Ospalý1-1/+1
Updating to ansible version: 2.7.8 Current ansible version: 2.6.3 The current version breaks json values in playbooks. Change-Id: I9858339a08711ad921122b2e7b6ccf04d62454a3 Issue-ID: OOM-1698 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-08Merge "Adding postinstall section in InstallGuide"Michal Ptacek1-0/+30
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>