summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2019-06-14Merge changes from topic "OOM-1810"Petr Ospalý3-0/+49
* changes: Add verification tests for 'chrony' role Setup 'cluster_ip' fact for infra host in 'chrony' role tests
2019-06-14Merge changes from topic "OOM-1910"Petr Ospalý6-3/+63
* changes: Clean application role mocked artifacts directories Add custom patch role scenario to 'application' role
2019-06-14Merge changes from topic "OOM-1915"Petr Ospalý7-2/+63
* changes: Update 'busybox' and 'haproxy' docker images path in tests Add role level tests for 'nexus' role Improve 'nexus' role testability
2019-06-12Add verification tests for 'chrony' roleBartek Grzybowski2-0/+45
Testinfra tests are added for Molecule verifier. Change-Id: Id044cdc5535af97ce3ac48da034a9a6a1ca8cbd3 Issue-ID: OOM-1810 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-10Setup 'cluster_ip' fact for infra host in 'chrony' role testsBartek Grzybowski1-0/+4
This patch sets up a missing 'cluster_ip' fact for infrastructure host without which 'server' directive was set up improperly in chrony.conf on 'node' host. Change-Id: I3d98788b7eb54bf984d165a50072f51fd85c08fb Issue-ID: OOM-1810 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-07Merge "Replace 'with_items' loop statements with 'loop' keyword"Samuli Silvius4-7/+10
2019-06-07Merge "Add cleanup stage to 'nginx' role test"Samuli Silvius1-0/+6
2019-06-07Merge "Add role level tests for 'nginx' role"Samuli Silvius5-1/+55
2019-06-07Add role level tests for 'nexus' roleBartek Grzybowski4-0/+60
Change-Id: If8decc241614e4fe802352cc783b59f8d7ec70b4 Issue-ID: OOM-1915 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-06Improve 'nexus' role testabilityBartek Grzybowski3-2/+3
A change needed by related commit to allow building a custom nexus url. Change-Id: Iaa7e1d10d9621871e71863c77722cd635b7e1e4d Issue-ID: OOM-1915 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Fixing dns not working for other containers issueMichal Ptacek1-0/+1
If host networking is not used for dns container, dns wont work for other infra containers. This is unintentionally removed in https://gerrit.onap.org/r/#/c/oom/offline-installer/+/87422/ Change-Id: I07ce6874e7baedadbdbbcf0913f1d683e19f93cd Issue-ID: OOM-1866 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-06-05Merge "Add molecule tests for kubectl role"Samuli Silvius5-0/+63
2019-06-05Add cleanup stage to 'nginx' role testBartek Grzybowski1-0/+6
Change-Id: Idddc421d33698c08b19cc63f4e203d0964341462 Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add role level tests for 'nginx' roleBartek Grzybowski5-1/+55
Introduce full role level test coverage for 'nginx' role. Change-Id: I7c634775433a2336e43cdfc73d4698d5e2933f0e Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add molecule tests for kubectl roleMichal Zegan5-0/+63
This commit adds molecule tests for kubectl role. That includes verification for kubectl to be installed and runnable. Change-Id: I4cb0679ed6826555a6d1f6cff4542ae52869f404 Issue-ID: OOM-1908 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Add tests for helm roleMichal Zegan5-0/+64
This adds molecule tests for the helm role. Change-Id: I5be27992062ca9039c141318bc54ce85ce35526b Issue-ID: OOM-1909 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Merge "Adapting to Dublin realase"Michal Zegan2-1/+3
2019-06-05Clean application role mocked artifacts directoriesBartek Grzybowski3-1/+7
Directories created by Molecule tests were left in files tree and not cleaned up. This patch adds a task to shred them after test invocation. Change-Id: If745cfc45de2f73db5be1696a16a185ff2a625bf Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add custom patch role scenario to 'application' roleBartek Grzybowski4-2/+56
This adds test case for when application_pre_install_role and application_post_install_role are set to custom role; by default they are empty. Code condition coverage is increased. Change-Id: I14e59e15cf3ead0459374b5777f8ee03fe75d7bd Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Do not use bindmounts for nfs testsMichal Zegan1-1/+1
This commit removes bindmounting of host directories to containers in play-resources tests. It seems that it is unneeded, and it is enough to just create anonymous volumes instead of cluttering host filesystem. This is one part of a preparation for removing the cleanup-directories role that won't be needed anymore. Note: similar changes were made to the nfs role tests, for the same reasons, but cleanup-directories is not used there Change-Id: Ib33543427d72b4bc7ede532e5eb9a5023931f1fe Issue-ID: OOM-1902 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Replace 'with_items' loop statements with 'loop' keywordBartek Grzybowski4-7/+10
As of Ansible 2.5 'loop' keyword is a recommended way for looping statements instead of 'with_dict'. Change-Id: I19e00cc27e13955e2056840fd4ce99841bc824ad Issue-ID: OOM-1887 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Adapting to Dublin realaseroot2-1/+3
In Dublin: First project has taken ownership of own helm charts, oom repository must be obtained with subrepositories. By default no applications are enabled, introducing a way to submit more override files in to installer Issue-ID: OOM-1861 Signed-off-by: root <m.pilat@partner.samsung.com> Change-Id: I1724de6b87bd0e9d17df4d0f55615a3f1c439d40
2019-06-03Add molecule tests for rke roleMichal Zegan10-0/+261
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-30Merge "Add Molecule tests for 'dns' role"Samuli Silvius5-0/+63
2019-05-30Merge "Make molecule tests for certificates independent from docker role"Samuli Silvius2-8/+6
2019-05-30Merge "Modify docker role to use dind"Samuli Silvius2-3/+7
2019-05-30Add Molecule tests for 'dns' roleBartek Grzybowski5-0/+63
This commit supplements 'Molecule test for infrastructure playbook' with role level tests. Change-Id: I14cdeedf1c80c0ee06bacf0a391ee1d7ccd6df55 Issue-ID: OOM-1841 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-30Modify rancher molecule tests to use dindMichal Zegan5-23/+9
This change modifies molecule tests of rancher role to use prepare-docker-dind. Also: - it modifies prepare-common role to retrieve cluster_ip of the actual node in question, - it fixes the rancher role itself to work at all by removing auto_remove. It has been tested by running molecule converge. Change-Id: I7af4e9998feedd5f8fc3df8215e03c1b0485529c Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Merge changes from topic "OOM-1816"Michal Ptacek4-4/+3
* changes: Molecule test for infrastructure playbook. Add the prepare-package-repository role Add prepare-nexus role Add prepare-nginx role Add the prepare-dns role Add prepare-vncserver role Allow unsafe writes when modifying resolv.conf Add nexus_come_up_wait_retries variable to nexus role Remove docker restart condition from docker role
2019-05-29Allow unsafe writes when modifying resolv.confMichal Zegan1-0/+1
The package-repository role edits /etc/resolv.conf. Ansible modifies files atomically to prevent data loss on crash, but that does not work in docker containers because /etc/resolv.conf is bind-mounted. Allow ansible to fall back to non atomic writes in such cases. This makes it unnecessary to hack around this. Change-Id: I066205322de5cc06569e6ea3aa38885d3834f9cd Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add nexus_come_up_wait_retries variable to nexus roleMichal Zegan2-1/+2
This variable is used to set the number of retries when waiting for nexus to be running. It may occassionally be useful to increase it on slower test environments. Change-Id: Id34106dd8f9a8b2b1949b80adb22fbec3df71e23 Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Remove docker restart condition from docker roleMichal Zegan1-3/+0
Docker role doesn't trigger docker restart when run in docker container (e.g. molecule). Remove the condition, as in dind case docker in container works same way as docker out of container. Change-Id: I8c80a09baccd76c78f2cbb8e474044351fd9b3d3 Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add support for extra helm install argumentsPetr Ospalý3-1/+5
Change-Id: Ie0b4e812acf6fba4e4b8f082533ab2f998456095 Issue-ID: OOM-1877 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-05-24Modify docker role to use dindMichal Zegan3-6/+7
This modifies the docker role to use dind. Note that it now uses pepare-docker-dind role, but *disables* start of docker. Change-Id: I55ac8d1f69531ba7496c34f990818b894a7d02a5 Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-22Make molecule tests for certificates independent from docker roleMichal Zegan2-8/+6
Currently molecule tests for certificates role call the docker role just to make one handler available. It actually breaks best practices of unit testing, the docker role shouldn't be called nor tested in unit test of certificates role. This commit makes certificates role independent by just creating fake handlers. Change-Id: Iec7934c7c1f4e9b37ff523e1d86a3beaaa88bdcf Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-21Fixing dnsmasq container not starting bugMichal Ptacek2-1/+4
Two problems are fixed in this commit. Firstly handler is not triggered so dnsmasq is not started. Secondly dns is not working due to loop in dns settings. Change-Id: If6874c99dcc42ef63da167abe8d1f7cdd8e0fcb1 Issue-ID: OOM-1866 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-05-21Merge changes from topic "RHEL"Michal Ptacek2-1/+5
* changes: Upgrade docker version to 18.09.5 Update of docker for RHEL
2019-05-20Add kubernetes dashboardPetr Ospalý5-1/+212
Either run kubectl proxy, but you must setup routes or kubectl on some node (only infra has kubectl by default). Another option is connecting onto the node where the dashboard is exposed via NodePort. Instructions are here: https://github.com/kubernetes/dashboard/wiki/Accessing-dashboard (1.7.X and above) Change-Id: I5a28f458c0ae949278b1e6eaf6eb063d09f93fc0 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-20Merge changes from topic "rke-support"Michal Ptacek11-13/+268
* changes: Add setup for kubectl and helm Add support for RKE kubernetes implementation
2019-05-17Upgrade docker version to 18.09.5Bartek Grzybowski2-1/+5
This patch upgrades docker version for Molecule tests to 18.09.5; it also sanitizes tasks in 'docker' role to supplement this change: https://gerrit.onap.org/r/c/87761/ Change-Id: I14beffafb129b24e7c15f8da45f1a25e27ccae9c Issue-ID: OOM-1852 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-17Add setup for kubectl and helmMichal Zegan7-13/+26
the kubeconfig is copied from the cluster config directory to ~/.kube/config. Also, the playbook runs kubectl and helm roles to install tools. Change-Id: I29ee98f6502bbb7923b1ae6812dd642ca206dbce Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-17Add support for RKE kubernetes implementationPetr Ospalý6-0/+242
Added a new playbook rke.yml and role rke which uses rancher RKE: https://github.com/rancher/rke It's an implementation of the kubernetes from rancher.com folks and it is an alternative to the official kubernetes tool: kubeadm. NOTE: Rancher has a notion of a 'control plane' which cannot run with etcd on all nodes in a multi-node setup. Control-plane node is the first kubernetes node from the inventory (as of now). Change-Id: I0bf669442a5183efa20d44fb1cac823e7ce54348 Issue-ID: OOM-1778 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-16Molecule tests for application role.Samuli Silvius8-8/+133
Issue-ID: OOM-1812 Change-Id: Ifb6f5a10afb4014b20be77a4141371e561d346ce Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-05-15Fix idempotence issue in dns roleBartek Grzybowski2-19/+12
Docker_container module was called twice: in a taks 'Start dns server container' and then as a handler but there was a divergent set o parameters for the module in them. This had the efect of the container being started by the means of the task itself but immediately after it was killed and started again by the handler because it had different set of arguments for the module. The fix is to include the handler itself as a task so the whole run is idempotent. Change-Id: I9078f9dfe5894d94d4b6a9e44411f034508992e7 Issue-ID: OOM-1845 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-10Merge "Don't set 'container' env in Molecule containers"Samuli Silvius5-12/+2
2019-05-10Fix 'cleanup' stage in 'nfs' role testBartek Grzybowski1-0/+1
This commit reverts removal of 'ignore_unreachable' option in 'cleanup.yml' for 'nfs' role tests in 96a4baf. It's needed for cleanup stage to succeed if called prior to 'create' stage (default 'test' matrix behaviour) Change-Id: I9177fb950786f05a55c45a0089fb3632503f14f5 Issue-ID: OOM-1809 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-09Don't set 'container' env in Molecule containersBartek Grzybowski5-12/+2
Molecule role tests that use pre build images had superfluous 'container' env variable declaration. It's not needed as this env is already set in Dockerfiles, for both: pre-built and custom built images. Change-Id: Iee9cc38919da894ee6cc6a2a5f1acc60d76865de Issue-ID: OOM-1841 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-26Cleanup Rancher containers after Molecule convergeBartek Grzybowski2-6/+6
Rancher role test do remove rancher/agent and rancher/server containers at 'cleanup' stage but Rancher Agent spawned containers are left orphaned. This patch adds tasks to remove them. This patch also adds custom ansible module for listing docker containers (as of ansible 2.7.10 no upstream module provides that feature, even new docker_container_info info module in ansible's devel branch doesn't have it) Change-Id: I6325dc81063b55b70136280273f8f6138c7a0375 Issue-ID: OOM-1811 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-24Merge changes from topic 'rancher_api'Michal Ptacek2-0/+81
* changes: Add support for resetting the admin password Add support for rancher authentication Refactor rancher1_api module Add support for rancher 1.6 API
2019-04-24Add support for resetting the admin passwordPetr Ospalý2-0/+9
The module rancher1_api can now reset an admin password of the default admin account (account_id: '1a1') and keep local authentication enabled. By default the authentication is not enabled, because the ansible module rancher_k8s_environment.py is not idempotent and it would need to be rewritten. Change-Id: Ib432537651b91216c32438ec1233dba3602e3faf Issue-ID: OOM-1734 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>