summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2019-06-25Updated inventory template in install guideMichal Zegan1-40/+55
Updated the inventory file template in install guide to cover new group structure. Just copy-paste of current inventory/hosts.yml same as before. Change-Id: Iade5f8120b06bccebf8f156b2637998722ecfa07 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add etcd group support to rke roleMichal Zegan4-1/+17
Etcd cluster is now placed in members of kubernetes-etcd group instead of kubernetes-node. Due to defaults, it means infra is the only etcd by default. Change-Id: Iae05a42442849e4a248d73c2d78f5e2b0eae7255 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add kubernetes-etcd groupMichal Zegan1-0/+6
This group will contain kubernetes etcd cluster. It is separated from kubernetes control plane and, especially, nodes. There are of course no restrictions as to which machines can be etcd. Default is infrastructure-server. Change-Id: I8d3ab9b9e4680f57ea8f595d7be3ed6e2d32764c Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Make rke to use new group structureMichal Zegan5-13/+10
Rke playbook/role is modified to take advantage of the new group structure. Namely, all members of kubernetes group are treated as cluster members independent of their role. The role itself is selected in cluster.yml.j2 template based on actual membership in either kubernetes-node or kubernetes-control-plane group. Change-Id: I9a5bbfd090aff17018a610a01d6f88d848fc26c4 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add kubernetes-node group for workersMichal Zegan2-14/+17
Moved all kubernetes nodes from the kubernetes to kubernetes-node group, and made the kubernetes group a parent of both kubernetes-node and kubernetes-control-plane. The reason is that we still need to have separate groups for control planes and for nodes, but some operations are performed equally on any kind of kubernetes cluster member, and currently one would need to separately include all related groups one by one. Example of such common operation is installation of docker, that was not performed for kubernetes-control-plane group, so that docker was not installed on control planes that were neither infra nor nodes. The side effect of this change is that if infrastructure server is also a cluster member, it lands in a kubernetes group by default, and node specific setup would be performed on it. For that reason, playbook is modified to perform this setup on all kubernetes cluster members except the infra server. Change-Id: Ic827002d28e535334dbab7e5ad4aed8aa95c97a9 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add molecule tests for rke roleMichal Zegan14-0/+290
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Merge changes from topic "OOM-1806"Michal Ptacek2-59/+122
* changes: Add doc for new healthcheck feature in helm_deployment_status.py Make healthcheck script output unbuffered Support running healthcheck in any mode supported Always show healthcheck output if it was run Support SSL certificate based authentication to kube API Add Kubernetes class to track API connection settings
2019-05-30Merge "Add Molecule tests for 'dns' role"Samuli Silvius7-2/+64
2019-05-30Merge "Make molecule tests for certificates independent from docker role"Samuli Silvius2-8/+6
2019-05-30Merge "Modify docker role to use dind"Samuli Silvius2-3/+7
2019-05-30Merge "prepare-docker-dind: make docker start optional"Samuli Silvius2-0/+4
2019-05-30Add Molecule tests for 'dns' roleBartek Grzybowski7-2/+64
This commit supplements 'Molecule test for infrastructure playbook' with role level tests. Change-Id: I14cdeedf1c80c0ee06bacf0a391ee1d7ccd6df55 Issue-ID: OOM-1841 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-30Modify rancher molecule tests to use dindMichal Zegan6-53/+12
This change modifies molecule tests of rancher role to use prepare-docker-dind. Also: - it modifies prepare-common role to retrieve cluster_ip of the actual node in question, - it fixes the rancher role itself to work at all by removing auto_remove. It has been tested by running molecule converge. Change-Id: I7af4e9998feedd5f8fc3df8215e03c1b0485529c Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-30Merge "Add prepare-docker-dind role"Samuli Silvius3-0/+31
2019-05-30Add doc for new healthcheck feature in helm_deployment_status.pyBartek Grzybowski1-7/+7
A description of new --health-mode option for helm_deployment_status.py script was added to InstallGuide.rst. Change-Id: I8dd93e86eee9ade2c279f3124e01e7312e1baee5 Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-30Make healthcheck script output unbufferedBartek Grzybowski1-14/+11
A subprocess.Popen object is created instead of convenience check_output() routine usage to allow unbuffered reading stdout from asynchronously running subprocess. Change-Id: I0dca13d6ac5d533d0ef19ddc5713830c57b37175 Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-29Changing patchfile naming conventionMichal Ptacek6-7/+7
Its not needed to preserve onap release version in patch naming. Change-Id: I8dfaa56d3a74cd5227523c3acd5e31fa540a75a2 Issue-ID: OOM-1869 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-05-29Merge changes from topic "OOM-1816"Michal Ptacek17-4/+342
* changes: Molecule test for infrastructure playbook. Add the prepare-package-repository role Add prepare-nexus role Add prepare-nginx role Add the prepare-dns role Add prepare-vncserver role Allow unsafe writes when modifying resolv.conf Add nexus_come_up_wait_retries variable to nexus role Remove docker restart condition from docker role
2019-05-29Merge "Add support for extra helm install arguments"Michal Ptacek3-1/+5
2019-05-29Merge "Updating PIP packages list for Dublin"Michal Ptacek2-18/+12
2019-05-29Molecule test for infrastructure playbook.Samuli Silvius6-0/+155
These tests execute the whole infrastructure playbook. Issue-ID: OOM-1816 Change-Id: I793191e05cb0b527c3da6d820c1916231e69d865 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add the prepare-package-repository roleMichal Zegan2-0/+38
This role may be used by infra playbook tests. It downloads docker rpm packages and their dependencies to disk and creates a simulated offline rpm repository that can then be used to test installation of packages. Change-Id: Ia1a1bed1b124e036219ccc12c4650ce446955f01 Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com> Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-05-29Add prepare-nexus roleMichal Zegan2-0/+75
This role can be used by nexus role/infra playbook tests. It downloads and archives the nexus image used by these tests. It also archives some example docker images that can be used to test runtime image pushing. Change-Id: I027dd5dda60ab0abba7701cb038f6552a72e3599 Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add prepare-nginx roleMichal Zegan1-0/+28
This role can be used by nginx role/infra playbook tests. It builds and archives the nginx docker image used by these tests. Change-Id: I51052f4d587926be0331203fffd0bbd69a7dc58d Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add the prepare-dns roleMichal Zegan1-0/+22
This role can be used by infra playbook or dns role tests to download the dnsmasq docker images used during test. Change-Id: I05d9ccd1f2ac3d635c032b43078ca9a2179cb547 Issue-ID: OOM-1818 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add prepare-vncserver roleMichal Zegan1-0/+21
This role is used by infra playbook tests introduced in a follow up commit and it downloads the docker vncserver image used during testing. This role may also be useful for vncserver role tests. Change-Id: Ib9fc8041519d716207f2c1887f68fb29faab911f Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Allow unsafe writes when modifying resolv.confMichal Zegan1-0/+1
The package-repository role edits /etc/resolv.conf. Ansible modifies files atomically to prevent data loss on crash, but that does not work in docker containers because /etc/resolv.conf is bind-mounted. Allow ansible to fall back to non atomic writes in such cases. This makes it unnecessary to hack around this. Change-Id: I066205322de5cc06569e6ea3aa38885d3834f9cd Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add nexus_come_up_wait_retries variable to nexus roleMichal Zegan2-1/+2
This variable is used to set the number of retries when waiting for nexus to be running. It may occassionally be useful to increase it on slower test environments. Change-Id: Id34106dd8f9a8b2b1949b80adb22fbec3df71e23 Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Remove docker restart condition from docker roleMichal Zegan1-3/+0
Docker role doesn't trigger docker restart when run in docker container (e.g. molecule). Remove the condition, as in dind case docker in container works same way as docker out of container. Change-Id: I8c80a09baccd76c78f2cbb8e474044351fd9b3d3 Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add support for extra helm install argumentsPetr Ospalý3-1/+5
Change-Id: Ie0b4e812acf6fba4e4b8f082533ab2f998456095 Issue-ID: OOM-1877 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-05-29Merge "Adding source identification for docker data list"Samuli Silvius1-0/+1
2019-05-29Merge "Fixing access permissions for docker image list"Samuli Silvius1-0/+0
2019-05-28Adding source identification for docker data listMichal Ptacek1-0/+1
Important to know what source commit was taken for this example docker images data list we took for validation. Change-Id: Idafb60e1d965bb896d3794677de0d702081bbfa5 Issue-ID: OOM-1800 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-05-28Support running healthcheck in any mode supportedBartek Grzybowski1-4/+8
So far it was only possible to run health checking script with a default option of 'health'. This patch allows passing through to healtcheck script any mode that it supports via --health-mode runtime option. Change-Id: Ic0145e5b4a1f17d64867287538dd63b850d86feb Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-28Add needed pypi patching for oofMichal Ptacek2-9/+34
OOF component recently introduced new internet dependency and it's downloading flask and requests pip packages. This patch is needed for fixing this in offline platform. Change-Id: I5bb707bf13af30f6df5cfd42cee75e2d1839821e Issue-ID: OPTFRA-509 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-05-28Fixing access permissions for docker image listTomáš Levora1-0/+0
chmod from 775 to 664 Issue-ID: OOM-1800 Change-Id: I0f459a246bc636d696f4bbc32cca6e27ca37db80 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-05-28Updating PIP packages list for DublinTomáš Levora2-18/+12
Issue-ID: OOM-1800 Change-Id: I3a7a58534c2b7f8fa8f338b6fc65f6ef6fd11523 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-05-28Always show healthcheck output if it was runBartek Grzybowski1-3/+2
This patch changes the default behavior of showing healthcheck script results. So far output was printed only in increased verbosity mode but the proper action should be to print it whenever it was called. A bug in exec_healthcheck() routine is also fixed (subprocess.check_output() returns byte string, not an object with 'output' attribute). Change-Id: Ifd7294de9bed321123f74977f881999ce69cf878 Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-28Merge "Modify build_nexus_blob.sh to accept more input parameters"Michal Ptacek1-29/+48
2019-05-28Merge "Adding list of docker images for ONAP"Michal Ptacek4-658/+224
2019-05-27Merge "Updating NPM list for Dublin"Michal Ptacek1-321/+235
2019-05-27Fix wrong path to backup filesTomáš Levora1-2/+2
In the Nexus build script were incomplete paths to backup files what is fixed by this patch Issue-ID: OOM-1875 Change-Id: I86e3f157d6f142f87013c18c79fb58e52cad42f9 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-05-27Adding list of docker images for ONAPTomáš Levora4-658/+224
Adding initial list of docker images for Dublin ONAP deployment Issue-ID: OOM-1800 Change-Id: I887ff6a5f8688fe9353d3562a9892606ae169072 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-05-27Updating NPM list for DublinTomáš Levora1-321/+235
Issue-ID: OOM-1800 Change-Id: Iff7389dbc95e4aec501b0c53e9276869eb1e2e38 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-05-27Modify build_nexus_blob.sh to accept more input parametersMateusz Pilat1-29/+48
In order to connect nexus build blob with dynamically generated input files Issue-ID: OOM-1848 Signed-off-by: Mateusz Pilat <m.pilat@partner.samsung.com> Change-Id: Ifd1218b69e0b341fd929a5d4cda96cea17153f12
2019-05-27Merge "Adjusting patching file for Dublin"Michal Ptacek4-476/+52
2019-05-27Merge "Updating git datalist for Dublin"Michal Ptacek2-9/+2
2019-05-27Support SSL certificate based authentication to kube APIBartek Grzybowski1-1/+43
With this change script by default connects to kube API performing SSL authentication with certificates that it tries to read from kube config. A flag of '--no-ssl-auth' is provided to disable this behaviour. Change-Id: Ibc1ea21c0c9f3c4a298b5bfef35d916652b598d4 Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-27Add Kubernetes class to track API connection settingsBartek Grzybowski1-35/+56
This patch moves get_resources() routine into Kubernetes class. It's object now holds all needed API connection properties and tracks it's state to avoid passing these settings through intermediary functions all the way down to actual API calling routine. Additional checks are added in get_resources() to produce more meaningfull debug info in case of connection failure. Change-Id: Ia50fa086d22466c0fbed9eb677d2dc52709bef9f Issue-ID: OOM-1806 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-27Add list of docker images for rkePetr Ospalý1-0/+22
Change-Id: I322cce3dd073844bb7cb0772877873b4e24fe09f Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>