summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2019-10-17Update rke, kubectl and helmTomáš Levora5-115/+235
This commit updates rke (implementing K8S 1.15.4), kubectl binary and helm binary with tiller image: rke 0.3.0 kubernetes 1.15.4 kubectl 1.15.4 helm 2.14.2 dashboard 2.0.0-beta4 Kubernetes dashboard is also updated to be compliant with the 1.15 K8S. Note 1: There is a new datalist to split rke only images from other K8S related images. Note 2: El Alto recommendation cannot be fullfilled to the letter, because rke does not have any release supporting 1.15.2 version of kubernetes (only experimental). Issue-ID: OOM-2122 Change-Id: I02cf0955158eca622bcac40ceed42588dbdd3499 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com> Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-10-15Remove git repos list and simulationTomáš Levora1-39/+0
As no external git repo should be required, removing the list and the simulation Issue-ID: OOM-2014 Change-Id: I7b8bbaab93db173bc3f1438592d288f6090d3641 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-09-26Merge changes from topic "OOM-2112"Michal Ptacek1-2/+2
* changes: Make cicdansible to set external ip Use external_ip to populate the node address Add external_ip variable
2019-09-20Merge "Replace jinja for with filter expression in helm deploy call"Michal Ptacek1-2/+2
2019-09-16Use external_ip to populate the node addressMichal Zegan1-2/+2
Use the new external_ip inventory variable to populate node address. Note that cluster_ip is still used if external_ip has not been set. This makes it possible to connect to kubernetes apiserver using the external_ip without disabling ssl cert verification. As an added bonus, the inventory hostname is now used as the node name to make node names more predictable. Change-Id: I3cc25c488d68f2f858a5eb3438d96285fa7517ca Issue-ID: OOM-2112 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-08-23Add configurable etcd storage featurePetr Ospalý3-0/+56
Plus the option to have etcd on tmpfs (volatile storage) for little bigger (maybe) speed (NOT FOR PRODUCTION DEPLOYMENT!). Issue-ID: OOM-2058 Change-Id: I0bbfc4fbae7f6b46e2fae49656437cd6748efd49 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-07-12Remove kubectl install from prepare-rkeMichal Zegan1-0/+3
This is needed because prepare-kubectl role can do just the same. Also fixed rke tests to match. Change-Id: I808df650a5f755e09c26d13db62ecfc1504a317c Issue-ID: OOM-1907 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-07-12Replace jinja for with filter expression in helm deploy callMichal Zegan1-2/+2
This replaces jinja for constructions used to add helm arguments with jinja filter usage. Change-Id: Ia47635466f4a9251d1f33a42080d3538fc52587d Issue-ID: OOM-1911 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-07-10Merge changes Iee382756,I473f022cMichal Ptacek2-0/+3
* changes: Allow overriding docker version in prepare-docker-dind Specify source ip for rancher agent
2019-07-10Merge "Use cluster_ip for rancher server url"Michal Ptacek2-2/+1
2019-07-08Modify the way override worksMichal Zegan3-7/+22
Now the generated app_helm_override_file and the list of helm overrides is separate. The former is to contain things like user provided overrides, the latter is the list of absolute paths to preexisting helm value files. The playbook joins all that into a final list of override files that is then passed to helm. Change-Id: I8b8ded38b39aa9a75e55fc63fa0e11b986556cb8 Issue-ID: OOM-1951 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-07-05Specify source ip for rancher agentMichal Zegan2-0/+3
This change explicitly sets cluster_ip as rancher agent source ip. This avoids eventual problems with ip autodetection, especially that we know the correct ip. Change-Id: I473f022c56301cefeb98ccb5bb94d78e7ac491a7 Issue-ID: OOM-1906 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-26Merge "Remove artifacts left by 'dns' role tests"Samuli Silvius1-0/+6
2019-06-26Merge changes from topic "bin_utils"Samuli Silvius4-4/+12
* changes: Fix tests for binaries preparation in installation steps Add binaries preparation to installation steps
2019-06-26Fix tests for binaries preparation in installation stepsBartek Grzybowski2-1/+5
Change-Id: Ib28bda24b711111c13bbaf9bd2628abd2001a1a9 Issue-ID: OOM-1925 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-25Remove artifacts left by 'dns' role testsBartek Grzybowski1-0/+6
'dnsmasq.tar' docker image file will be removed after test invocation. Change-Id: I29668ece8c745794ad9462e527ca144bea6f4fc2 Issue-ID: OOM-1943 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-24Merge "Add cleanup stage to 'nexus' role test"Samuli Silvius1-0/+8
2019-06-24Merge changes from topic "kubernetes-inventory-groups"Samuli Silvius5-10/+25
* changes: Add etcd group support to rke role Add kubernetes-etcd group Make rke to use new group structure Add kubernetes-node group for workers
2019-06-24Add cleanup stage to 'nexus' role testBartek Grzybowski1-0/+8
List of docker images to download/cleanup by the prepare and cleanup stages is now defined in one place (prepare-nexus role defaults) for clarity and ease of management. Change-Id: I4c18912fd8c5eadc4d68e1bc10f5c2251d58634e Issue-ID: OOM-1915 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-24Merge "Add tests for custom ntp authority mode in 'chrony' role"Samuli Silvius3-0/+109
2019-06-24Merge "Add role level tests for 'vncserver' role"Samuli Silvius6-0/+72
2019-06-14Add binaries preparation to installation stepsTomáš Levora2-3/+7
Adding binaries preparation into installation steps as rke binary need to be renamed and helm binary need to be unarchived. Removing those previously manual steps from BuilGuide Issue-ID: OOM-1925 Change-Id: I504320fb82e1c8f6db2f99c5dfd4518192eae895 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2019-06-14Merge changes from topic "OOM-1810"Petr Ospalý3-0/+49
* changes: Add verification tests for 'chrony' role Setup 'cluster_ip' fact for infra host in 'chrony' role tests
2019-06-14Merge changes from topic "OOM-1910"Petr Ospalý6-3/+63
* changes: Clean application role mocked artifacts directories Add custom patch role scenario to 'application' role
2019-06-14Merge changes from topic "OOM-1915"Petr Ospalý7-2/+63
* changes: Update 'busybox' and 'haproxy' docker images path in tests Add role level tests for 'nexus' role Improve 'nexus' role testability
2019-06-13Add role level tests for 'vncserver' roleBartek Grzybowski6-0/+72
A cleanup stage is also added to clean testing artifacts. Change-Id: I2255a0e90a0f609bd927d3d44dd05b5847fbdfb0 Issue-ID: OOM-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-12Add verification tests for 'chrony' roleBartek Grzybowski2-0/+45
Testinfra tests are added for Molecule verifier. Change-Id: Id044cdc5535af97ce3ac48da034a9a6a1ca8cbd3 Issue-ID: OOM-1810 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-12Add tests for custom ntp authority mode in 'chrony' roleBartek Grzybowski3-0/+109
By default 'infra' node is set up as a time authority for nodes. This patch adds tests for alternative supported scenario where external time authority service is given. Change-Id: I114418e79fa90b3af1c62a148ca91af3acf2bb2b Issue-ID: OOM-1810 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-10Setup 'cluster_ip' fact for infra host in 'chrony' role testsBartek Grzybowski1-0/+4
This patch sets up a missing 'cluster_ip' fact for infrastructure host without which 'server' directive was set up improperly in chrony.conf on 'node' host. Change-Id: I3d98788b7eb54bf984d165a50072f51fd85c08fb Issue-ID: OOM-1810 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-07Merge "Replace 'with_items' loop statements with 'loop' keyword"Samuli Silvius4-7/+10
2019-06-07Merge "Add cleanup stage to 'nginx' role test"Samuli Silvius1-0/+6
2019-06-07Merge "Add role level tests for 'nginx' role"Samuli Silvius5-1/+55
2019-06-07Add role level tests for 'nexus' roleBartek Grzybowski4-0/+60
Change-Id: If8decc241614e4fe802352cc783b59f8d7ec70b4 Issue-ID: OOM-1915 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-06Improve 'nexus' role testabilityBartek Grzybowski3-2/+3
A change needed by related commit to allow building a custom nexus url. Change-Id: Iaa7e1d10d9621871e71863c77722cd635b7e1e4d Issue-ID: OOM-1915 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Use cluster_ip for rancher server urlMichal Zegan2-2/+1
This commit changes rancher role to use the cluster_ip when constructing rancher server url. This is a prerequisite to playbook level rancher tests. Change-Id: Id3eff260fe9d158aa8ab39494446ff7d6ad7ec6c Issue-ID: OOM-1906 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Fixing dns not working for other containers issueMichal Ptacek1-0/+1
If host networking is not used for dns container, dns wont work for other infra containers. This is unintentionally removed in https://gerrit.onap.org/r/#/c/oom/offline-installer/+/87422/ Change-Id: I07ce6874e7baedadbdbbcf0913f1d683e19f93cd Issue-ID: OOM-1866 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-06-05Merge "Add molecule tests for kubectl role"Samuli Silvius5-0/+63
2019-06-05Add cleanup stage to 'nginx' role testBartek Grzybowski1-0/+6
Change-Id: Idddc421d33698c08b19cc63f4e203d0964341462 Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add role level tests for 'nginx' roleBartek Grzybowski5-1/+55
Introduce full role level test coverage for 'nginx' role. Change-Id: I7c634775433a2336e43cdfc73d4698d5e2933f0e Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add molecule tests for kubectl roleMichal Zegan5-0/+63
This commit adds molecule tests for kubectl role. That includes verification for kubectl to be installed and runnable. Change-Id: I4cb0679ed6826555a6d1f6cff4542ae52869f404 Issue-ID: OOM-1908 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Add tests for helm roleMichal Zegan5-0/+64
This adds molecule tests for the helm role. Change-Id: I5be27992062ca9039c141318bc54ce85ce35526b Issue-ID: OOM-1909 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Merge "Adapting to Dublin realase"Michal Zegan2-1/+3
2019-06-05Clean application role mocked artifacts directoriesBartek Grzybowski3-1/+7
Directories created by Molecule tests were left in files tree and not cleaned up. This patch adds a task to shred them after test invocation. Change-Id: If745cfc45de2f73db5be1696a16a185ff2a625bf Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add custom patch role scenario to 'application' roleBartek Grzybowski4-2/+56
This adds test case for when application_pre_install_role and application_post_install_role are set to custom role; by default they are empty. Code condition coverage is increased. Change-Id: I14e59e15cf3ead0459374b5777f8ee03fe75d7bd Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Do not use bindmounts for nfs testsMichal Zegan1-1/+1
This commit removes bindmounting of host directories to containers in play-resources tests. It seems that it is unneeded, and it is enough to just create anonymous volumes instead of cluttering host filesystem. This is one part of a preparation for removing the cleanup-directories role that won't be needed anymore. Note: similar changes were made to the nfs role tests, for the same reasons, but cleanup-directories is not used there Change-Id: Ib33543427d72b4bc7ede532e5eb9a5023931f1fe Issue-ID: OOM-1902 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Replace 'with_items' loop statements with 'loop' keywordBartek Grzybowski4-7/+10
As of Ansible 2.5 'loop' keyword is a recommended way for looping statements instead of 'with_dict'. Change-Id: I19e00cc27e13955e2056840fd4ce99841bc824ad Issue-ID: OOM-1887 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Adapting to Dublin realaseroot2-1/+3
In Dublin: First project has taken ownership of own helm charts, oom repository must be obtained with subrepositories. By default no applications are enabled, introducing a way to submit more override files in to installer Issue-ID: OOM-1861 Signed-off-by: root <m.pilat@partner.samsung.com> Change-Id: I1724de6b87bd0e9d17df4d0f55615a3f1c439d40
2019-06-03Add etcd group support to rke roleMichal Zegan4-1/+17
Etcd cluster is now placed in members of kubernetes-etcd group instead of kubernetes-node. Due to defaults, it means infra is the only etcd by default. Change-Id: Iae05a42442849e4a248d73c2d78f5e2b0eae7255 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add molecule tests for rke roleMichal Zegan10-0/+261
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Make rke to use new group structureMichal Zegan4-9/+8
Rke playbook/role is modified to take advantage of the new group structure. Namely, all members of kubernetes group are treated as cluster members independent of their role. The role itself is selected in cluster.yml.j2 template based on actual membership in either kubernetes-node or kubernetes-control-plane group. Change-Id: I9a5bbfd090aff17018a610a01d6f88d848fc26c4 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>