summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2021-12-15[ANSIBLE] Fix idempotence deficiencies in 'firewall' and 'nexus' roleBartek Grzybowski2-2/+1
Change-Id: Id154423650483512aa04607f60b4001807be6721 Issue-ID: OOM-2237 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-12-10[MOLECULE] Add testinfra tests for cert-manager roleOstap Batih1-0/+23
Issue-ID: OOM-2889 Change-Id: Ida4349ea463b3da182502ccc10927c2f22d684b9 Signed-off-by: Ostap Batih <o.batih@samsung.com>
2021-11-25[MOLECULE] Remove separate helm cases from 'application' role verifierBartek Grzybowski1-18/+3
Change-Id: I0a9fc3bad5ec639deabdf50f42f7798974e830bc Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-25[ANSIBLE] Play Helm v3 tasks unconditionallyBartek Grzybowski1-2/+1
Helm v3 is the default hence no need for conditionals. Change-Id: I2c9924a0925a8fce0ccac23430b629e3e567f654 Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-25[ANSIBLE] Drop Helm v2 specific code from application roleBartek Grzybowski7-86/+3
Change-Id: I270594786b2ec3b63b5c6cd313278bb271db44b1 Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-25[MOLECULE] Drop custom helm3 scenario for application roleBartek Grzybowski6-57/+3
Helm v3 is the default now so removing its custom scenario Change-Id: I8814d2a61e47d43e56df43889e730fada7ba99a6 Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-24[MOLECULE] Drop custom test scenario for helm v3Bartek Grzybowski9-39/+1
Helm v3 is now the default so removing its custom test scenario. Change-Id: I2c2fa2594a743a1502fe0b414aa75c145cbaa5d9 Issue-ID: OOM-2883 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-16[ANSIBLE] Setup cmctl autocompletionBartek Grzybowski2-0/+24
Bash autocompletion code is generated to facilitate autocompletion for cmctl command. Change-Id: I03494293bf91aada54af70f6e0fd2c49e2feea64 Issue-ID: OOM-2871 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-15[ANSIBLE] Install cmctl utilityBartek Grzybowski4-0/+14
Cert-manager role will also install cmctl utility for cert-manager resources management. Change-Id: I4c4d9ecb243c951a190733230f310f4899c9bc23 Issue-ID: OOM-2871 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-11-10[ANSIBLE] Add cert-manager roleBartek Grzybowski7-0/+113
A role that provisions the cert-manager (https://cert-manager.io/) onto Kubernetes cluster Change-Id: Iced3be4fae7ed20be8f58662b03a8a97b454b470 Issue-ID: OOM-2871 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-10-27[MOLECULE] Upgrade Helm3 release to 3.6.3 in test scenariosBartek Grzybowski1-1/+1
Change-Id: I819e8157758b42507c8757128f4bd047ffd4fa9b Issue-ID: OOM-2871 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-27[ANSIBLE] Disable DNS management in Network Manager only if it's installedBartek Grzybowski1-1/+5
Additional check for package presence is required as Centos7.9 cloud image does not have it in contrary to RedHat7.9 Change-Id: I6dcfba0a0fdc1be16ce2ab06eb562168f7814538 Issue-ID: OOM-2837 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-27[MOLECULE] Upgrade roles tests image to Centos7.9Bartek Grzybowski16-24/+24
Change-Id: I2ae6cba6e6e6bcc629dceb21609cb35cb75ea4cf Issue-ID: OOM-2837 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-23Merge "[ANSIBLE] Setup config file containing resources dir full path"Bartek Grzybowski3-0/+8
2021-09-17[ANSIBLE] Setup config file containing resources dir full pathBartek Grzybowski3-0/+8
Such config might be handy in scenarios where user defined scripts populated with offline-platform require to leverage the full path to resources directory on infra node. Change-Id: I5b4468ef7b396d2583ad64255679a29f3ff675b4 Issue-ID: OOM-2835 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-16[ANSIBLE] Provision custom Grafana Home dashboardBartek Grzybowski2-3/+9
Change-Id: I85e096cbecf24c2b6914b60ec97a4f056d18bd1e Issue-ID: OOM-2833 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-16[ANSIBLE] Add custom Grafana Home dashboard JSON modelBartek Grzybowski1-0/+126
Change-Id: I19acd32cacd0248b72b2887850ca9f082b8933d5 Issue-ID: OOM-2833 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-16Merge changes from topic "kubernetes-dashboard-2.3.1"Bartek Grzybowski1-1/+1
* changes: [BUILD] Update image data list for Kubernetes Dashboard v2.3.1 [ANSIBLE] Upgrade Kubernetes Dashboard to v2.3.1
2021-09-15[ANSIBLE] Change Grafana's default passwordBartek Grzybowski1-1/+1
Changing default password to avoid password change prompt on each login. Change-Id: I2fda07bd768f5a408ddd2ead6ed80e183a52a25c Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-14[ANSIBLE] Upgrade Kubernetes Dashboard to v2.3.1Bartek Grzybowski1-1/+1
Change-Id: Idbffeba25547f3e1a83d83c86b65ea52cecbc8c5 Issue-ID: OOM-2829 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-09-08[MOLECULE] Upgrade Helm release to 3.5.2Bartek Grzybowski1-1/+1
Change-Id: Ifcaa7d64094b2f29ac73907e2164ac61def1033b Issue-ID: OOM-2825 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-24[ANSIBLE] Increase Helm install timeout for kube-prometheus applicationBartek Grzybowski1-1/+1
Change-Id: Iae212643dae864360d69197e6530d6463af33ffe Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-24[ANSIBLE] Create a NodePort type service for Grafana dashboardBartek Grzybowski1-0/+8
This will allow accessing Grafana UI on controlplane public port. Change-Id: Ic3c2f22f36616fe636c966d962b9e503ef56c735 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-17[ANSIBLE] Update custom Grafana dashboardBartek Grzybowski1-167/+503
Panels added: - Node readiness status - Pod status in Onap namespace - Open file descriptors Change-Id: I5728efcbfd5008d382dc1a788e579daf225362be Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-17[ANSIBLE] Configure custom Grafana dashboardBartek Grzybowski4-1/+346
A new dashboard provider is set up in Grafana which reads the dash json definition from the file uploaded to Grafana PV Change-Id: I2704fe85e838e9aba2a846172334af467b9f2045 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-15[ANSIBLE] Setup persistent volume for Grafana dashboardsBartek Grzybowski2-3/+13
Change-Id: Ifb45abae0c8a7716addbd62d340423f1c1e44c03 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-10[ANSIBLE] Generate helm values file for kube-prometheus stackBartek Grzybowski2-0/+23
Default values file is provided and any of it's contents can be overriden by setting relevant keys in 'kube_prometheus_helm_values' dict on provisioner run time. Change-Id: I1655d64704e1ad6e9cd9650622ae1a92de902a8f Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-10[ANSIBLE] Create host paths for PVs and set their permissionsBartek Grzybowski2-0/+10
Access mode for hostPath type kubernetes PVs has to be set explicitly as setting it with pod's securityContext is not supported. Change-Id: I60ed71001fc7859440510f17c1989b35d28c37b5 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[ANSIBLE] Add 'k8s-persistent-volume' roleBartek Grzybowski3-0/+31
This role will setup predefined k8s persistent volumes. It leverages the community.kubernetes.k8s ansible module. Change-Id: If71481b6b0da60872498063ff29c8da5a3830fc5 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[MOLECULE] Add setup for new 'k8s-persistent-volume' roleBartek Grzybowski4-0/+49
Change-Id: If7eb6c058746a98566f41d8354159624293ba58d Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[ANSIBLE] Setup kube-prometheus-stack roleBartek Grzybowski4-6/+19
Change-Id: I687fa1743cd2b778a0b07ed9e51a4a2e2d142934 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-02[MOLECULE] Setup Molecule for kube-prometheus-stack roleBartek Grzybowski3-0/+18
Change-Id: Id1c40e6a7da0ad0c42b162835f09630630569dd2 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-01[ANSIBLE] Add 'kube-prometheus-stack' role skeletonBartek Grzybowski8-0/+63
Change-Id: I413186d6dc78baea4d1f22e4ed2f419f6e49bd25 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-20[MOLECULE 3.3.0] Fix verifier tests for several rolesBartek Grzybowski8-12/+10
Change-Id: I54f618fbb3d1bfefca329e647f78ba9b93f8a283 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-20[MOLECULE] Fix 'application' role runBartek Grzybowski2-3/+3
Add ansible-lint ignore rule to skip warning about unnamed task Fix verifier test Change-Id: Ie75c379b1678a594ad9a3e95442d04fc58939e6e Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-19[MOLECULE] Drop 'destroy' playbook for rke roleBartek Grzybowski2-35/+0
No longer required since change Ia221da6666d558e086cd24155f5bd81237d82388 Change-Id: I7ec15d63daaa3e3cdb6dbed2a4e2643bfcb99370 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE][MOLECULE] Skip checking packager cache cleaning idempotencyBartek Grzybowski4-38/+7
Change-Id: I621bd2ed4452c10a6747392a709d1c17282a11ef Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Upgrade 'chartmuseum' role's tasks to ansible 3.2.0Bartek Grzybowski2-0/+2
Change-Id: I96504d94eb4322857979a6ec37b2d63d4fe074df Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Fix regex pattern in 'certificates' roleBartek Grzybowski2-1/+20
[MOLECULE] Add verifier test for SubjectAlternativeName validation Issue-ID: OOM-2722 Change-Id: I8ff9fb88d5166f3d5eba5f364f9110b3b12cd47e Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Upgrade 'nexus' role's tasks to ansible 3.2.0Bartek Grzybowski2-0/+4
Change-Id: Ibeaea4b3b627c356521b4c847d56eeb922a8cca1 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Use 'listen' directive for docker handlerBartek Grzybowski2-20/+20
Using 'import_tasks' for multiple step handler is no longer supported, while 'include_tasks' has some side effects. Change-Id: I61c14c937f80dfcd1780cdc2885ac781be613978 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'vncserver' role's tasks to ansible 3.2.0Bartek Grzybowski1-0/+2
Change-Id: Ie721fac402c3cd5725c770313194a9ad98a07f2d Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'nginx' role's tasks to ansible 3.2.0Bartek Grzybowski1-0/+3
Change-Id: Ieba3f13a29240e0f8ed8ff6acb5472559a9134a5 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'dns' role's tasks to ansible 3.2.0Bartek Grzybowski2-0/+2
Change-Id: I6984396d15d0592313978c751fd109ee06d8febf Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE] Drop published ports listBartek Grzybowski1-3/+0
Published ports are discarded by docker engine when using host network mode so no need to define them. Change-Id: I71537b4191e8f05d77991d08444144031747c0b7 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[ANSIBLE 3.2.0] Upgrade 'certificates' role tasks to be ansible 3.2.0 compliantBartek Grzybowski1-16/+2
Change-Id: Id1d8da0a1dabdbe79cdb24179ddeff5564b00f17 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE] Fix 'certificates' setup and verifier testsBartek Grzybowski7-77/+29
Change-Id: I13d4774f6860f6c3e396f58f1c60ae589beea9b1 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE] Add cleanup task for 'certificates' roleBartek Grzybowski2-0/+7
Change-Id: Ifb9c9627d840158d8a4be3a1d1a1ea75dc4038c3 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE 3.3.0] Drop scenario name in molecule.ymlBartek Grzybowski32-55/+0
In Molecule 3.x.x it's no longer needed, scenario name is assumed from its directory name. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I3b25dae499d4f40851ac3fe0183ee7ab913b7dd7 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Update converge playbook file namesBartek Grzybowski42-21/+21
In 3.x.x version family of Molecule the 'playbook.yml' file for 'converge' action has changed to 'converge.yml'. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I8710ebd5710237be138f2aff8943d6c949058dbd Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>