summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2019-03-07Re-factored resources upload into roleSamuli Silvius8-114/+168
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek8-19/+38
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius8-19/+38
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek3-9/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek2-0/+21
2019-03-03package-repository role to streamline playbookSamuli Silvius2-0/+21
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski3-9/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius2-0/+33
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1
2019-02-15Fix for malformed certificate issueMichal Ptacek1-1/+1
Without this patch certificate is distributed in malformed shape and leads to policy-drools pod not working Issue-ID: OOM-1662 Change-Id: I1e5f51c6aa7857a9347d2d8ef8d523508d094df0 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Conditional login update after aux_data_path setMichal Ptacek2-0/+2
After setting-up of default value for aux_data_path some of the conditional logic must be updated. Issue-ID: OOM-1659 Change-Id: I0472c2e848f9215186b8aa11557165f606cac9d4 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Merge "Fix typo in helm plugins path"Michal Ptacek1-1/+1
2019-02-14Fix wrong value for booleanMilan Verespej1-1/+1
Issue-ID: OOM-1629 Change-Id: I80ea6e72c9e5dbe3fdc63db0d177f541c749c58e Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix typo in helm plugins pathMilan Verespej1-1/+1
Issue-ID: OOM-1638 Change-Id: I00607f4861d153dc73f9ce516d9bd3b9c490a9cc Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix nfs on nodes does not install nfs packagesMilan Verespej2-1/+10
Issue-ID: OOM-1640 Change-Id: Ieb8d736e543d58facb9a84c3366c5b15418e17d2 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-12Helm install optional and default valuesSamuli Silvius1-0/+17
Make Helm applicaton installation optional by allowing user not to provide Helm charts. Then only empty Kubernetes cluster will be installed. Provide some reasonable default values for Helm charts configuration variables both in package script and ansible installer itself. User provided Helm charts configuration must be in sync with packaging and installer, provided some clarifying comments for that. Issue-ID: OOM-1629 Change-Id: Ica9fc76856cb50c9d636bea99a326736736c7a56 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-11Change helm plugin install to copy moduleMilan Verespej2-16/+22
Since helm plugin install command is not the most suitable for Ansible and it basically just creates link to plugin original location this change is using Ansible's copy module instead. Plugin is copied from install server because copy module doesn't support recursive directory copying with remote_src option. Issue-ID: OOM-1638 Change-Id: I9e9dcd8d33f8917296f576c2b34c0c576c9c126c Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-07Fix simulated_hosts templateMichal Zegan1-1/+1
This fixes simulated_hosts template to use cluster_ip instead of ansible_host as source of infra ip. Change-Id: I02e205c031d94442b3a3debeee8baebaedc7180d Issue-ID: OOM-1637 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-02-06Fix sdnc/appc-ansible-server not runningMilan Verespej1-1/+2
These pods are installing packages from apt and pypi repositroies during runtime. This change creates patch and makes necessary modifications for packages being installed from offline repositories. Change-Id: Id71f40f94c8641ad0c9d1ba4c87d3daea70c828e Issue-ID: OOM-1619 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-06Inserting our root certificate into policy podsMichal Ptacek1-0/+16
This commits introduced another bunch of patches for OOM charts we need in Casablanca to be able to get our certificate trusted by policy pods which are collecting maven artifacts from our nexus during runtime. Change-Id: I8289b155970e57059bccb5dfe09231e28bf27a32 Issue-ID: OOM-1609 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-05Fixing missing clause for enabling helm deployMichal Ptacek2-3/+13
As a part of change merged recently in 271cf3ffc2977f9e4 support for OOM plugins was introduced however it was never used. This commit is fixing this and introducing helm deploy option if plugin exists. Change-Id: Ifb77ce2098ea28f822e5e15ddf2736f0c83b946c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com> Issue-ID: OOM-1589 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-28Merge "Adding support for helm plugins"Michal Ptacek2-2/+25
2019-01-27Adding support for helm pluginsMichal Ptacek2-2/+25
Proprietary plugins can be used along with helm, in addition to that building of local helm repository can be achieved by using different target or list of targets. Change-Id: If421133b9cc8bcfa47c3e7c14e6712520231e39c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Issue-ID: OOM-1589
2019-01-21Merge "Add variable for version of rancher server"Michal Ptacek1-2/+2
2019-01-17Fix docker config handling in offline installerMichal Zegan1-1/+1
This fixes adding of dns address to /etc/docker/daemon.json to always use infra's ip address instead of possibly using it's hostname. Also similar change is done in handling of /etc/resolv.conf in infrastructure.yml. Ip address is specified by the "cluster_ip" variable placed on a host. Inventory specifies ip for everything except resource server (just for consistency). Change-Id: I2baa3f4c7d69b8dff109b5f8ae984134caf2af7d Issue-ID: OOM-1573 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-01-17Add variable for version of rancher serverMilan Verespej1-2/+2
Rancher server version is hardcoded to 1.6.14 used in Beijing deployment. This limits flexibility to use it for future versions of ONAP deployments. This change adds possibility to choose version of rancher server via variable in group_vars/infrastructure.yml and setting its default value to version used by Casablanca release. Change-Id: I3a38a882386ce6adcba77780ee79a7cedfe98e4e Issue-ID: OOM-1584 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-08Revert "Fix the problem with ansible_host for ..."Petr Ospalý1-5/+1
This reverts commit a22f6b34a424d0ce25be7e560d8072a2e84e3ab8. This commit was merged by mistake. Change-Id: Ic73bfd8e9d97c3a23629cba69047cc0edefb9cd0 Issue-ID: OOM-1573 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-07Fix the problem with ansible_host for dockerPetr Ospalý1-1/+5
WIP This solves the problem with domain name without dropping the ansible_host. Ansible_host is just resolved to the ip. By using the ping command we can avoid another dependencies. Change-Id: Ic1963d3af6a8bdd68089ac8b599731e35475d81f Issue-ID: OOM-1573 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-04Fix docker config handling in offline installerMichal Zegan1-1/+1
This fixes adding of dns address to /etc/docker/daemon.json to always use infra's ip address instead of possibly using it's hostname. It is done by replacing usage of "ansible_host" by "ansible_default_ipv4.address" fact. Change-Id: If6a29f3bf11ece7f883b099a1ab503341859cb90 Issue-ID: OOM-1573 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2018-12-20Update ansible nexus roleMichal Zegan2-1/+2
Looks like this one was a bit out of date, updating it... Change-Id: I7734fc5ccdba001d3c409244cd1625453ab232ed Issue-ID: OOM-1551 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2018-12-20Merge "Adding role for application handling"Tomáš Levora4-5/+49
2018-12-20Merge "Add ansible role for dns simulation"Michal Ptacek3-0/+53
2018-12-20Merge "Add ansible firewall role"Michal Ptacek2-0/+19
2018-12-19Adding role for application handlingMichal Ptacek4-5/+49
this ansible role contains application specific tasks, it is written in generic way and different helm charts can be used as application. In addition operator can provide proprietary pre_install and post_install hooks. Change-Id: Ibe4b330e5a725dde41aca9f6a59d702cfaba6f52 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2018-12-19Add ansible role for dns simulationTomáš Levora3-0/+53
Adding role to simulate domain names for offline installation from private nexus repositories Issue-ID: OOM-1551 Change-Id: Ia3fe274e95ef078332627af9229195bd6e9a667d Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Add ansible role for docker installationTomáš Levora2-0/+40
Adding ansible role for installation of docker and its setup Issue-ID: OOM-1551 Change-Id: I49bca8eab46a2750cd627cbf709bed6744c88df5 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Add ansible firewall roleTomáš Levora2-0/+19
Adding role to disable firewall to prevent any issue with communication during the installation Change-Id: I2390f0bc5062933e6a8bf4dcbc0b255b283f993d Issue-ID: OOM-1551 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Merge "Adding ansible helm role"Petr Ospalý1-0/+7
2018-12-19Merge "Adding ansible vncserver role"Petr Ospalý1-0/+19
2018-12-19Merge "Add resource-data handling role"Petr Ospalý3-0/+113
2018-12-19Add application-install roleTomas Levora3-0/+40
This role adds helm install handling to ansible installer Change-Id: I31f62a815822f5375cc7e5b138bec27e359127b0 Issue-ID: OOM-1551 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Merge "Adding nginx role"Michal Ptacek2-0/+142
2018-12-19Merge "Add nexus ansible role"Michal Ptacek8-0/+136
2018-12-19Adding nginx roleMichal Ptacek2-0/+142
nginx is crucial part of our offline solution, within this role we are covering deployment of this lightweight http server together with its configuration. Change-Id: I89695074349f4c6938340ab3bb735108c8c278f4 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2018-12-19Adding rancher roleMichal Ptacek4-0/+85
In kubernetes cluster configuration we still use rancher tool, this ansible role is providing handling for both rancher server and agent. Change-Id: I508a42a98902788b940b06cf95009a899c50a3b8 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2018-12-19Add resource-data handling roleMichal Ptacek3-0/+113
In this role we mostly cover uploading of data resource using either default ssh way or if nfs server is configured it can be used as well for distributing data to infra node. Change-Id: I4784c6ca931b00c1033aedb33e388badfba83650 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2018-12-19Adding ansible vncserver roleMichal Ptacek1-0/+19
Local VNCserver is expected to be good tool for accessing onap component GUI APIs howerver its not crucial part of the installation. Change-Id: If8105d5ab564f30d9da002a5bf2b1f0f3c017f78 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>