summaryrefslogtreecommitdiffstats
path: root/ansible/infrastructure.yml
AgeCommit message (Collapse)AuthorFilesLines
2021-11-24[ANSIBLE] Include chartmuseum role unconditionallyBartek Grzybowski1-1/+0
Helm v3 is now the default so dropping the conditional inclusion of chartmuseum role Change-Id: I78fa4a1438b49de40e16ebeb79276d74b9ecc5a6 Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-12Run chartmuseum as a docker containerBartek Grzybowski1-0/+2
A docker container for chartmuseum is run with chart storage volume mounted from hosts' resource dir for chart repo persistence across container/infra restarts. Change-Id: I692ff7a3d95414b439b15b5414bc8b959eb79414 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2020-04-30Adding Ubuntu support in Ansible - chrony roleJan Benedikt1-2/+2
Extending ansible playbooks of ubuntu support. Change the order in role calls. Chrony role was moved due to its absence in Ubuntu distribution. Firstly is necessary to initialize package repository and after that install Chrony. Issue-ID: OOM-1671 Signed-off-by: Jan Benedikt <j.benedikt@partner.samsung.com> Change-Id: Icadf8e106fba4a369148db0959dcac07a79257c2
2019-06-03Add kubernetes-node group for workersMichal Zegan1-1/+1
Moved all kubernetes nodes from the kubernetes to kubernetes-node group, and made the kubernetes group a parent of both kubernetes-node and kubernetes-control-plane. The reason is that we still need to have separate groups for control planes and for nodes, but some operations are performed equally on any kind of kubernetes cluster member, and currently one would need to separately include all related groups one by one. Example of such common operation is installation of docker, that was not performed for kubernetes-control-plane group, so that docker was not installed on control planes that were neither infra nor nodes. The side effect of this change is that if infrastructure server is also a cluster member, it lands in a kubernetes group by default, and node specific setup would be performed on it. For that reason, playbook is modified to perform this setup on all kubernetes cluster members except the infra server. Change-Id: Ic827002d28e535334dbab7e5ad4aed8aa95c97a9 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-16Molecule tests for certificates roleSamuli Silvius1-1/+1
Issue-ID: OOM-1762 Change-Id: Ic13d7ec775a52ad95fc0388e8b84ea8ab7367666 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-03Verify offline app repo is workingBartek Grzybowski1-1/+3
A patch for failing fast if configured offline application repository is not working properly. Just adding repo to repolist doesn't guarantee it's really operational. Change-Id: I65372b9b1ea5f5dcb797548b14e3ae1295668592 Issue-ID: OOM-1689 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-02Support time synchronization on hostsBartek Grzybowski1-0/+2
This change introduces functionality to synchronize infra/kube nodes' clock with external NTP authority. Configuring external time source is optional, however default behaviour will be to setup NTP time source on infra-node and sync kube-nodes clock with it. It's also possible to setup custom time zone. Change-Id: I725ce9a306da1977628b6c03d5ff10fca77fb3b0 Issue-ID: OOM-1710 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-26Fixing some yaml-lint warningsMichal Ptacek1-1/+3
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius1-0/+2
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek1-27/+1
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius1-27/+1
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek1-2/+0
2019-03-03package-repository role to streamline playbookSamuli Silvius1-21/+1
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski1-2/+0
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-06Fix sdnc/appc-ansible-server not runningMilan Verespej1-1/+1
These pods are installing packages from apt and pypi repositroies during runtime. This change creates patch and makes necessary modifications for packages being installed from offline repositories. Change-Id: Id71f40f94c8641ad0c9d1ba4c87d3daea70c828e Issue-ID: OOM-1619 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-17Handle empty runtime_imagesMichal Ptacek1-1/+1
If there is no demand for docker images to be inserted into nexus during runtime, runtime_images might be empty and this will cause unhandled error with trying to insert undefined images Change-Id: I77147b64a3d288922eec5db7e7ce422ba2ed8c12 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Issue-ID: OOM-1587
2019-01-17Fix docker config handling in offline installerMichal Zegan1-1/+1
This fixes adding of dns address to /etc/docker/daemon.json to always use infra's ip address instead of possibly using it's hostname. Also similar change is done in handling of /etc/resolv.conf in infrastructure.yml. Ip address is specified by the "cluster_ip" variable placed on a host. Inventory specifies ip for everything except resource server (just for consistency). Change-Id: I2baa3f4c7d69b8dff109b5f8ae984134caf2af7d Issue-ID: OOM-1573 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2018-12-19Add the infrastructure playbook to setup clusterPetr Ospalý1-0/+71
It will make arrangements to make offline installation possible - especially: dns handling nexus repository package installation Issue-ID: OOM-1551 Change-Id: I3c60efd413f558454d63d4e79948bcc421f7bcd1 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>