summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2019-04-05Merge changes I2e1aef32,Ib93e9d2aMichal Ptacek9-8/+130
* changes: Molecule test for nfs role Fix nfs role issues based on molecule testing
2019-04-03Merge "Improving docker restart handler"Michal Ptacek2-4/+19
2019-04-03Verify offline app repo is workingBartek Grzybowski2-0/+32
A patch for failing fast if configured offline application repository is not working properly. Just adding repo to repolist doesn't guarantee it's really operational. Change-Id: I65372b9b1ea5f5dcb797548b14e3ae1295668592 Issue-ID: OOM-1689 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-03Merge "Support time synchronization on hosts"Michal Ptacek4-0/+69
2019-04-03Merge "Improve kubectl role testability."Samuli Silvius1-1/+1
2019-04-03Merge "Improve rancher role testability"Samuli Silvius8-15/+32
2019-04-02Support time synchronization on hostsBartek Grzybowski4-0/+69
This change introduces functionality to synchronize infra/kube nodes' clock with external NTP authority. Configuring external time source is optional, however default behaviour will be to setup NTP time source on infra-node and sync kube-nodes clock with it. It's also possible to setup custom time zone. Change-Id: I725ce9a306da1977628b6c03d5ff10fca77fb3b0 Issue-ID: OOM-1710 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-01Merge "Wrong filename does not fail transfer"Samuli Silvius1-8/+19
2019-04-01Molecule test for nfs roleSamuli Silvius7-1/+117
Issue-ID: OOM-1756 Change-Id: I2e1aef3296689c284a4b530e6a2022302c7b86f7 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Fix nfs role issues based on molecule testingSamuli Silvius3-8/+14
Based on Molecule testing fix following issues on nfs role. - enable nfs services (previously only started) - create handler for exportfs to deal idempotency - add all kubernetes nodes to exports as it was dependent on ansible inventory order wheather correct hosts was on the list - add inventory_hostname as default host incase ansible_host variable not defined. Issue-ID: OOM-1756 Change-Id: Ib93e9d2a9cf49003d04dd5f890294eda1eb966ff Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "nginx update for long server names"Samuli Silvius1-0/+1
2019-04-01Allow passing any values to override.yamlMichal Zegan1-6/+6
This change allows passing any values that will then be stored to override.yaml. These values are passed from the "overrides" key, that may be set either as an extra variable or in inventory/group_vars. The root certificate is merged with the overrides dictionary before saving the file. Change-Id: I772c342b3c9eafe1849d1678b810319afaaf75bf Issue-ID: OOM-1752 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-01Improve application role testabilitySamuli Silvius10-52/+68
Remove different phases for application role as those are supposed to run after each other anyway from playbook and pre/post steps can be disabled by other means. Enable Helm override file generation customization by delegating it to separate role. Separate Helm file transfer to own module. NOTE: install.yml with all Helm commands (shell/command) is not idempotent and should be fixed with separate commit. Issue-ID: OOM-1655 Change-Id: Ib29773c4d64a0529c71c3f93c2af7265ae94059f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "Fix idempotence for firewall role"Michal Ptacek1-0/+1
2019-03-29Fix helm install command not showing errorMilan Verespej1-0/+2
Issue-ID: OOM-1737 Change-Id: I240415793ea2a078ab6c6d9c0727852dc2d9ada3 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-28nginx update for long server nameseronkeo1-0/+1
This issue addresses the following error when starting nginx container: nginx: [emerg] could not build the \ server_names_hash, you should increase \ server_names_hash_bucket_size: 64 Change-Id: I369075edd16801aca6b09c6727370060225c428c Issue-ID: OOM-1765 Signed-off-by: eronkeo <ronan.keogh@est.tech>
2019-03-28Improving docker restart handlerMichal Ptacek2-4/+19
There is a bug in docker which leads to not properly shutdown service preventing subsequent startup. https://github.com/moby/moby/issues/30348 This commit is preventing this problem to appear. Change-Id: I29505610bd9954af01d73264e5414fdb2b9ac99d Issue-ID: OOM-1735 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-26Wrong filename does not fail transferSamuli Silvius1-8/+19
User typo on resource package filename or dir does not cause install to fail but just skips that resource package. Change resource paths handling to skip resource only if variable is not defined or empty, but if a value is given resource must exist or transfer fails otherwise. Issue-ID: OOM-1736 Change-Id: I765c5dc8eb5e58875f032e056f9a8360aee702c0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-26Add python-jsonpointer as a new dependencyPetr Ospalý1-0/+5
Our custom ansible module requires python-jsonpointer module to deal with jsons. Change-Id: Idd7bfcf8fcf75e4397fba51d8219b73c57df5f0e Issue-ID: OOM-1758 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-26Fixing some yaml-lint warningsMichal Ptacek8-15/+37
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-24Fix idempotence for firewall roleSamuli Silvius1-0/+1
Based on Molecule testing, fix idempotence. Issue-ID: OOM-1757 Change-Id: Ie2c4cdcf65aeac664d4b76daa7e979f4f23b6bdf Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve kubectl role testability.Samuli Silvius1-1/+1
Move kubectl related functionality from rancher role to kubectl role and change order of execution in playbook to satisfy kubectl role dependency to rancher role regarding server value inserted into kubeconfig file. Introduced defaults and moved technical variables from group_vars into role defaults. Issue-ID: OOM-1730 Change-Id: I6339664ba52928566487edcdca8a3b42db86eeed Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve rancher role testabilitySamuli Silvius8-15/+32
Move functionality from playbook to rancher role. Introduce defaults for holding default values in rancher role. Other small changes noticed while testing rancher role with molecule. Issue-ID: OOM-1729 Change-Id: I83befa9f0964c67e209d3def76bafd2a61c1ef33 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek2-2/+16
2019-03-18Add default logging settings for dockerPetr Ospalý2-2/+16
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius5-94/+102
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Fix wrong detection of uploaded resourcesMilan Verespej3-21/+31
Issue-ID: OOM-1596 Change-Id: I091cd558f7574f49dddf4380df24e11141a4b78d Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-07Re-factored resources upload into roleSamuli Silvius8-114/+168
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek8-19/+38
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius8-19/+38
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek3-9/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek2-0/+21
2019-03-03package-repository role to streamline playbookSamuli Silvius2-0/+21
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski3-9/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius2-0/+33
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1
2019-02-15Fix for malformed certificate issueMichal Ptacek1-1/+1
Without this patch certificate is distributed in malformed shape and leads to policy-drools pod not working Issue-ID: OOM-1662 Change-Id: I1e5f51c6aa7857a9347d2d8ef8d523508d094df0 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Conditional login update after aux_data_path setMichal Ptacek2-0/+2
After setting-up of default value for aux_data_path some of the conditional logic must be updated. Issue-ID: OOM-1659 Change-Id: I0472c2e848f9215186b8aa11557165f606cac9d4 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Merge "Fix typo in helm plugins path"Michal Ptacek1-1/+1
2019-02-14Fix wrong value for booleanMilan Verespej1-1/+1
Issue-ID: OOM-1629 Change-Id: I80ea6e72c9e5dbe3fdc63db0d177f541c749c58e Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix typo in helm plugins pathMilan Verespej1-1/+1
Issue-ID: OOM-1638 Change-Id: I00607f4861d153dc73f9ce516d9bd3b9c490a9cc Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix nfs on nodes does not install nfs packagesMilan Verespej2-1/+10
Issue-ID: OOM-1640 Change-Id: Ieb8d736e543d58facb9a84c3366c5b15418e17d2 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-12Helm install optional and default valuesSamuli Silvius1-0/+17
Make Helm applicaton installation optional by allowing user not to provide Helm charts. Then only empty Kubernetes cluster will be installed. Provide some reasonable default values for Helm charts configuration variables both in package script and ansible installer itself. User provided Helm charts configuration must be in sync with packaging and installer, provided some clarifying comments for that. Issue-ID: OOM-1629 Change-Id: Ica9fc76856cb50c9d636bea99a326736736c7a56 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-11Change helm plugin install to copy moduleMilan Verespej2-16/+22
Since helm plugin install command is not the most suitable for Ansible and it basically just creates link to plugin original location this change is using Ansible's copy module instead. Plugin is copied from install server because copy module doesn't support recursive directory copying with remote_src option. Issue-ID: OOM-1638 Change-Id: I9e9dcd8d33f8917296f576c2b34c0c576c9c126c Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-07Fix simulated_hosts templateMichal Zegan1-1/+1
This fixes simulated_hosts template to use cluster_ip instead of ansible_host as source of infra ip. Change-Id: I02e205c031d94442b3a3debeee8baebaedc7180d Issue-ID: OOM-1637 Signed-off-by: Michal Zegan <m.zegan@samsung.com>