summaryrefslogtreecommitdiffstats
path: root/ansible/roles/rke
AgeCommit message (Collapse)AuthorFilesLines
2021-02-10Fix kubeconfig file permissionsBartek Grzybowski1-1/+1
Kubeconfig file should not be world readable. Helm v3 prints relevant warning to stderr if it's (kubeconfig) mode is incorrect. Change-Id: I9d2b8618cd3e43a49345e96f6ed5169438a29cef Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-04Drop DIND specific test env settings for 'rke' role/playbookBartek Grzybowski2-40/+0
DIND usage was already dropped so those settings are no longer required. Change-Id: Ifd2b5f26196f84ff0167558c1d5cd4c8218124d7 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-03Change 'rke' role testing strategyBartek Grzybowski7-77/+11
So far Molecule framework setup allowed full rke cluster deployment in testing env but since rke cluster often fails to deploy in resource constrained CI environment this change switches testing strategy to only simulate 'rke up' operation. Change-Id: Ia221da6666d558e086cd24155f5bd81237d82388 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2020-05-28Updating RKE version to Frankfurt6.0.0-ONAPTomáš Levora1-8/+10
Updating RKE to v1.0.4 for Kubernetes 1.15.9 Issue-ID: OOM-2403 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com> Change-Id: I87c3f9f4800aa40f62d7569b4ecf3fa373a16796
2020-01-13Add test scenario for unsafe volatile storageBartek Grzybowski2-0/+75
This tests rke role with etcd storage configured on tmpfs. Change-Id: I57feb705a38e87c1b2127294c3443d99cc2595aa Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Change group_vars inclusion mode in rke role testsBartek Grzybowski2-3/+1
Inclusion switched from inventory.links declaration in molecule config to filesystem symlink. Change-Id: Idcdd40ba196963f61b587c78718564c9374fa731 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Include etcd storage configuration task in testingBartek Grzybowski1-0/+7
It was missing since adding feature for etcd storage configuration in https://gerrit.onap.org/r/c/oom/offline-installer/+/94135 Change-Id: I1d354af1fd48df8cb8de002f473d32cd5d4f9075 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Limit resource footprint of rke role testsBartek Grzybowski2-19/+1
Number of kubernetes nodes created by rke role tests was limited to 1 - higher number caused resource exhaustion in CI worker (8gb memory limit). Verifier timeout was increased in routine where pod readiness is checked. Change-Id: I2c30aa999b92c4ceddccf682c4f918e953da2621 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2257
2020-01-08Add static and dynamic kubelet config supportPetr Ospalý4-2/+23
Kubelet can be configured on startup now - just add new key/values in: kubelet-static-config.yml.j2 Also kubelet static (startup) configuration can be overriden later (dynamically) during its runtime - for more info read this: https://kubernetes.io/docs/tasks/administer-cluster/reconfigure-kubelet/ Issue-ID: OOM-2199 Change-Id: Ia4790a4dfc04f0caed695df7bfd343253bd95bc0 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-10-17Update rke, kubectl and helmTomáš Levora5-115/+235
This commit updates rke (implementing K8S 1.15.4), kubectl binary and helm binary with tiller image: rke 0.3.0 kubernetes 1.15.4 kubectl 1.15.4 helm 2.14.2 dashboard 2.0.0-beta4 Kubernetes dashboard is also updated to be compliant with the 1.15 K8S. Note 1: There is a new datalist to split rke only images from other K8S related images. Note 2: El Alto recommendation cannot be fullfilled to the letter, because rke does not have any release supporting 1.15.2 version of kubernetes (only experimental). Issue-ID: OOM-2122 Change-Id: I02cf0955158eca622bcac40ceed42588dbdd3499 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com> Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-09-16Use external_ip to populate the node addressMichal Zegan1-2/+2
Use the new external_ip inventory variable to populate node address. Note that cluster_ip is still used if external_ip has not been set. This makes it possible to connect to kubernetes apiserver using the external_ip without disabling ssl cert verification. As an added bonus, the inventory hostname is now used as the node name to make node names more predictable. Change-Id: I3cc25c488d68f2f858a5eb3438d96285fa7517ca Issue-ID: OOM-2112 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-08-23Add configurable etcd storage featurePetr Ospalý3-0/+56
Plus the option to have etcd on tmpfs (volatile storage) for little bigger (maybe) speed (NOT FOR PRODUCTION DEPLOYMENT!). Issue-ID: OOM-2058 Change-Id: I0bbfc4fbae7f6b46e2fae49656437cd6748efd49 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-07-12Remove kubectl install from prepare-rkeMichal Zegan1-0/+3
This is needed because prepare-kubectl role can do just the same. Also fixed rke tests to match. Change-Id: I808df650a5f755e09c26d13db62ecfc1504a317c Issue-ID: OOM-1907 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-26Merge changes from topic "bin_utils"Samuli Silvius1-1/+1
* changes: Fix tests for binaries preparation in installation steps Add binaries preparation to installation steps
2019-06-14Add binaries preparation to installation stepsTomáš Levora1-1/+1
Adding binaries preparation into installation steps as rke binary need to be renamed and helm binary need to be unarchived. Removing those previously manual steps from BuilGuide Issue-ID: OOM-1925 Change-Id: I504320fb82e1c8f6db2f99c5dfd4518192eae895 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-06-03Add etcd group support to rke roleMichal Zegan4-1/+17
Etcd cluster is now placed in members of kubernetes-etcd group instead of kubernetes-node. Due to defaults, it means infra is the only etcd by default. Change-Id: Iae05a42442849e4a248d73c2d78f5e2b0eae7255 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add molecule tests for rke roleMichal Zegan10-0/+261
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Make rke to use new group structureMichal Zegan4-9/+8
Rke playbook/role is modified to take advantage of the new group structure. Namely, all members of kubernetes group are treated as cluster members independent of their role. The role itself is selected in cluster.yml.j2 template based on actual membership in either kubernetes-node or kubernetes-control-plane group. Change-Id: I9a5bbfd090aff17018a610a01d6f88d848fc26c4 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-20Add kubernetes dashboardPetr Ospalý5-1/+212
Either run kubectl proxy, but you must setup routes or kubectl on some node (only infra has kubectl by default). Another option is connecting onto the node where the dashboard is exposed via NodePort. Instructions are here: https://github.com/kubernetes/dashboard/wiki/Accessing-dashboard (1.7.X and above) Change-Id: I5a28f458c0ae949278b1e6eaf6eb063d09f93fc0 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-17Add setup for kubectl and helmMichal Zegan2-0/+14
the kubeconfig is copied from the cluster config directory to ~/.kube/config. Also, the playbook runs kubectl and helm roles to install tools. Change-Id: I29ee98f6502bbb7923b1ae6812dd642ca206dbce Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-17Add support for RKE kubernetes implementationPetr Ospalý6-0/+242
Added a new playbook rke.yml and role rke which uses rancher RKE: https://github.com/rancher/rke It's an implementation of the kubernetes from rancher.com folks and it is an alternative to the official kubernetes tool: kubeadm. NOTE: Rancher has a notion of a 'control plane' which cannot run with etcd on all nodes in a multi-node setup. Control-plane node is the first kubernetes node from the inventory (as of now). Change-Id: I0bf669442a5183efa20d44fb1cac823e7ce54348 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>