summaryrefslogtreecommitdiffstats
path: root/ansible/roles/rke
AgeCommit message (Collapse)AuthorFilesLines
2021-09-27[MOLECULE] Upgrade roles tests image to Centos7.9Bartek Grzybowski2-4/+4
Change-Id: I2ae6cba6e6e6bcc629dceb21609cb35cb75ea4cf Issue-ID: OOM-2837 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-14[ANSIBLE] Upgrade Kubernetes Dashboard to v2.3.1Bartek Grzybowski1-1/+1
Change-Id: Idbffeba25547f3e1a83d83c86b65ea52cecbc8c5 Issue-ID: OOM-2829 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-19[MOLECULE] Drop 'destroy' playbook for rke roleBartek Grzybowski2-35/+0
No longer required since change Ia221da6666d558e086cd24155f5bd81237d82388 Change-Id: I7ec15d63daaa3e3cdb6dbed2a4e2643bfcb99370 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE 3.3.0] Drop scenario name in molecule.ymlBartek Grzybowski2-4/+0
In Molecule 3.x.x it's no longer needed, scenario name is assumed from its directory name. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I3b25dae499d4f40851ac3fe0183ee7ab913b7dd7 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Update converge playbook file namesBartek Grzybowski2-1/+1
In 3.x.x version family of Molecule the 'playbook.yml' file for 'converge' action has changed to 'converge.yml'. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I8710ebd5710237be138f2aff8943d6c949058dbd Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Upgrade linters Molecule setupBartek Grzybowski3-12/+11
In 3.x.x version family of Molecule the syntax for linters invocation has been changed. Ref.: https://molecule.readthedocs.io/en/latest/configuration.html#lint Change-Id: I82d1fd996eb5853953ea6bc74dcbb88a485a2084 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-31Upgrade Kubernetes Dashboard to v2.0.5Bartek Grzybowski1-3/+18
Currently used 2.0.0-beta4 supported k8s 1.15 at max Change-Id: I9565eaa78ebbca48377d65d87c77bc0893b29487 Issue-ID: OOM-2715 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-03Upgrade rke version to 1.2.4 in Molecule setupBartek Grzybowski1-3/+0
Kubectl dependency is removed as it's no longer needed for rke tests. Change-Id: I0191b105e2a4cce1fe6e66678f4ce57fd2ce19ee Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-02Upgrade Kubernetes version deployed by RKE to v1.19.6Bartek Grzybowski2-61/+2
Manual system_images assignment in rke's cluster config is dropped as for any particular kubernetes release Rancher project holds a predefined, static map connecting Rancher's Kubernetes version with particular system images, so it's enough to define k8s version. Ref.: https://rancher.com/docs/rke/latest/en/config-options/system-images/ Change-Id: I027589c86500bbc5260caaa4aef7065d23d2241c Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-10Fix kubeconfig file permissionsBartek Grzybowski1-1/+1
Kubeconfig file should not be world readable. Helm v3 prints relevant warning to stderr if it's (kubeconfig) mode is incorrect. Change-Id: I9d2b8618cd3e43a49345e96f6ed5169438a29cef Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-04Drop DIND specific test env settings for 'rke' role/playbookBartek Grzybowski2-40/+0
DIND usage was already dropped so those settings are no longer required. Change-Id: Ifd2b5f26196f84ff0167558c1d5cd4c8218124d7 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-03Change 'rke' role testing strategyBartek Grzybowski7-77/+11
So far Molecule framework setup allowed full rke cluster deployment in testing env but since rke cluster often fails to deploy in resource constrained CI environment this change switches testing strategy to only simulate 'rke up' operation. Change-Id: Ia221da6666d558e086cd24155f5bd81237d82388 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2020-05-28Updating RKE version to Frankfurt6.0.0-ONAPTomáš Levora1-8/+10
Updating RKE to v1.0.4 for Kubernetes 1.15.9 Issue-ID: OOM-2403 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com> Change-Id: I87c3f9f4800aa40f62d7569b4ecf3fa373a16796
2020-01-13Add test scenario for unsafe volatile storageBartek Grzybowski2-0/+75
This tests rke role with etcd storage configured on tmpfs. Change-Id: I57feb705a38e87c1b2127294c3443d99cc2595aa Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Change group_vars inclusion mode in rke role testsBartek Grzybowski2-3/+1
Inclusion switched from inventory.links declaration in molecule config to filesystem symlink. Change-Id: Idcdd40ba196963f61b587c78718564c9374fa731 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Include etcd storage configuration task in testingBartek Grzybowski1-0/+7
It was missing since adding feature for etcd storage configuration in https://gerrit.onap.org/r/c/oom/offline-installer/+/94135 Change-Id: I1d354af1fd48df8cb8de002f473d32cd5d4f9075 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2259
2020-01-10Limit resource footprint of rke role testsBartek Grzybowski2-19/+1
Number of kubernetes nodes created by rke role tests was limited to 1 - higher number caused resource exhaustion in CI worker (8gb memory limit). Verifier timeout was increased in routine where pod readiness is checked. Change-Id: I2c30aa999b92c4ceddccf682c4f918e953da2621 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Issue-ID: OOM-2257
2020-01-08Add static and dynamic kubelet config supportPetr Ospalý4-2/+23
Kubelet can be configured on startup now - just add new key/values in: kubelet-static-config.yml.j2 Also kubelet static (startup) configuration can be overriden later (dynamically) during its runtime - for more info read this: https://kubernetes.io/docs/tasks/administer-cluster/reconfigure-kubelet/ Issue-ID: OOM-2199 Change-Id: Ia4790a4dfc04f0caed695df7bfd343253bd95bc0 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-10-17Update rke, kubectl and helmTomáš Levora5-115/+235
This commit updates rke (implementing K8S 1.15.4), kubectl binary and helm binary with tiller image: rke 0.3.0 kubernetes 1.15.4 kubectl 1.15.4 helm 2.14.2 dashboard 2.0.0-beta4 Kubernetes dashboard is also updated to be compliant with the 1.15 K8S. Note 1: There is a new datalist to split rke only images from other K8S related images. Note 2: El Alto recommendation cannot be fullfilled to the letter, because rke does not have any release supporting 1.15.2 version of kubernetes (only experimental). Issue-ID: OOM-2122 Change-Id: I02cf0955158eca622bcac40ceed42588dbdd3499 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com> Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-09-16Use external_ip to populate the node addressMichal Zegan1-2/+2
Use the new external_ip inventory variable to populate node address. Note that cluster_ip is still used if external_ip has not been set. This makes it possible to connect to kubernetes apiserver using the external_ip without disabling ssl cert verification. As an added bonus, the inventory hostname is now used as the node name to make node names more predictable. Change-Id: I3cc25c488d68f2f858a5eb3438d96285fa7517ca Issue-ID: OOM-2112 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-08-23Add configurable etcd storage featurePetr Ospalý3-0/+56
Plus the option to have etcd on tmpfs (volatile storage) for little bigger (maybe) speed (NOT FOR PRODUCTION DEPLOYMENT!). Issue-ID: OOM-2058 Change-Id: I0bbfc4fbae7f6b46e2fae49656437cd6748efd49 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-07-12Remove kubectl install from prepare-rkeMichal Zegan1-0/+3
This is needed because prepare-kubectl role can do just the same. Also fixed rke tests to match. Change-Id: I808df650a5f755e09c26d13db62ecfc1504a317c Issue-ID: OOM-1907 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-26Merge changes from topic "bin_utils"Samuli Silvius1-1/+1
* changes: Fix tests for binaries preparation in installation steps Add binaries preparation to installation steps
2019-06-14Add binaries preparation to installation stepsTomáš Levora1-1/+1
Adding binaries preparation into installation steps as rke binary need to be renamed and helm binary need to be unarchived. Removing those previously manual steps from BuilGuide Issue-ID: OOM-1925 Change-Id: I504320fb82e1c8f6db2f99c5dfd4518192eae895 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-06-03Add etcd group support to rke roleMichal Zegan4-1/+17
Etcd cluster is now placed in members of kubernetes-etcd group instead of kubernetes-node. Due to defaults, it means infra is the only etcd by default. Change-Id: Iae05a42442849e4a248d73c2d78f5e2b0eae7255 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add molecule tests for rke roleMichal Zegan10-0/+261
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Make rke to use new group structureMichal Zegan4-9/+8
Rke playbook/role is modified to take advantage of the new group structure. Namely, all members of kubernetes group are treated as cluster members independent of their role. The role itself is selected in cluster.yml.j2 template based on actual membership in either kubernetes-node or kubernetes-control-plane group. Change-Id: I9a5bbfd090aff17018a610a01d6f88d848fc26c4 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-20Add kubernetes dashboardPetr Ospalý5-1/+212
Either run kubectl proxy, but you must setup routes or kubectl on some node (only infra has kubectl by default). Another option is connecting onto the node where the dashboard is exposed via NodePort. Instructions are here: https://github.com/kubernetes/dashboard/wiki/Accessing-dashboard (1.7.X and above) Change-Id: I5a28f458c0ae949278b1e6eaf6eb063d09f93fc0 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-17Add setup for kubectl and helmMichal Zegan2-0/+14
the kubeconfig is copied from the cluster config directory to ~/.kube/config. Also, the playbook runs kubectl and helm roles to install tools. Change-Id: I29ee98f6502bbb7923b1ae6812dd642ca206dbce Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-17Add support for RKE kubernetes implementationPetr Ospalý6-0/+242
Added a new playbook rke.yml and role rke which uses rancher RKE: https://github.com/rancher/rke It's an implementation of the kubernetes from rancher.com folks and it is an alternative to the official kubernetes tool: kubeadm. NOTE: Rancher has a notion of a 'control plane' which cannot run with etcd on all nodes in a multi-node setup. Control-plane node is the first kubernetes node from the inventory (as of now). Change-Id: I0bf669442a5183efa20d44fb1cac823e7ce54348 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>