summaryrefslogtreecommitdiffstats
path: root/ansible/roles
AgeCommit message (Collapse)AuthorFilesLines
2019-03-26Fixing some yaml-lint warningsMichal Ptacek8-15/+37
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-24Fix idempotence for firewall roleSamuli Silvius1-0/+1
Based on Molecule testing, fix idempotence. Issue-ID: OOM-1757 Change-Id: Ie2c4cdcf65aeac664d4b76daa7e979f4f23b6bdf Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve kubectl role testability.Samuli Silvius1-1/+1
Move kubectl related functionality from rancher role to kubectl role and change order of execution in playbook to satisfy kubectl role dependency to rancher role regarding server value inserted into kubeconfig file. Introduced defaults and moved technical variables from group_vars into role defaults. Issue-ID: OOM-1730 Change-Id: I6339664ba52928566487edcdca8a3b42db86eeed Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve rancher role testabilitySamuli Silvius8-15/+32
Move functionality from playbook to rancher role. Introduce defaults for holding default values in rancher role. Other small changes noticed while testing rancher role with molecule. Issue-ID: OOM-1729 Change-Id: I83befa9f0964c67e209d3def76bafd2a61c1ef33 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek2-2/+16
2019-03-18Add default logging settings for dockerPetr Ospalý2-2/+16
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius5-94/+102
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Fix wrong detection of uploaded resourcesMilan Verespej3-21/+31
Issue-ID: OOM-1596 Change-Id: I091cd558f7574f49dddf4380df24e11141a4b78d Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-07Re-factored resources upload into roleSamuli Silvius8-114/+168
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek8-19/+38
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius8-19/+38
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek3-9/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek2-0/+21
2019-03-03package-repository role to streamline playbookSamuli Silvius2-0/+21
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski3-9/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius2-0/+33
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1
2019-02-15Fix for malformed certificate issueMichal Ptacek1-1/+1
Without this patch certificate is distributed in malformed shape and leads to policy-drools pod not working Issue-ID: OOM-1662 Change-Id: I1e5f51c6aa7857a9347d2d8ef8d523508d094df0 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Conditional login update after aux_data_path setMichal Ptacek2-0/+2
After setting-up of default value for aux_data_path some of the conditional logic must be updated. Issue-ID: OOM-1659 Change-Id: I0472c2e848f9215186b8aa11557165f606cac9d4 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Merge "Fix typo in helm plugins path"Michal Ptacek1-1/+1
2019-02-14Fix wrong value for booleanMilan Verespej1-1/+1
Issue-ID: OOM-1629 Change-Id: I80ea6e72c9e5dbe3fdc63db0d177f541c749c58e Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix typo in helm plugins pathMilan Verespej1-1/+1
Issue-ID: OOM-1638 Change-Id: I00607f4861d153dc73f9ce516d9bd3b9c490a9cc Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix nfs on nodes does not install nfs packagesMilan Verespej2-1/+10
Issue-ID: OOM-1640 Change-Id: Ieb8d736e543d58facb9a84c3366c5b15418e17d2 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-12Helm install optional and default valuesSamuli Silvius1-0/+17
Make Helm applicaton installation optional by allowing user not to provide Helm charts. Then only empty Kubernetes cluster will be installed. Provide some reasonable default values for Helm charts configuration variables both in package script and ansible installer itself. User provided Helm charts configuration must be in sync with packaging and installer, provided some clarifying comments for that. Issue-ID: OOM-1629 Change-Id: Ica9fc76856cb50c9d636bea99a326736736c7a56 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-11Change helm plugin install to copy moduleMilan Verespej2-16/+22
Since helm plugin install command is not the most suitable for Ansible and it basically just creates link to plugin original location this change is using Ansible's copy module instead. Plugin is copied from install server because copy module doesn't support recursive directory copying with remote_src option. Issue-ID: OOM-1638 Change-Id: I9e9dcd8d33f8917296f576c2b34c0c576c9c126c Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-07Fix simulated_hosts templateMichal Zegan1-1/+1
This fixes simulated_hosts template to use cluster_ip instead of ansible_host as source of infra ip. Change-Id: I02e205c031d94442b3a3debeee8baebaedc7180d Issue-ID: OOM-1637 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-02-06Fix sdnc/appc-ansible-server not runningMilan Verespej1-1/+2
These pods are installing packages from apt and pypi repositroies during runtime. This change creates patch and makes necessary modifications for packages being installed from offline repositories. Change-Id: Id71f40f94c8641ad0c9d1ba4c87d3daea70c828e Issue-ID: OOM-1619 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-06Inserting our root certificate into policy podsMichal Ptacek1-0/+16
This commits introduced another bunch of patches for OOM charts we need in Casablanca to be able to get our certificate trusted by policy pods which are collecting maven artifacts from our nexus during runtime. Change-Id: I8289b155970e57059bccb5dfe09231e28bf27a32 Issue-ID: OOM-1609 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-05Fixing missing clause for enabling helm deployMichal Ptacek2-3/+13
As a part of change merged recently in 271cf3ffc2977f9e4 support for OOM plugins was introduced however it was never used. This commit is fixing this and introducing helm deploy option if plugin exists. Change-Id: Ifb77ce2098ea28f822e5e15ddf2736f0c83b946c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com> Issue-ID: OOM-1589 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-28Merge "Adding support for helm plugins"Michal Ptacek2-2/+25
2019-01-27Adding support for helm pluginsMichal Ptacek2-2/+25
Proprietary plugins can be used along with helm, in addition to that building of local helm repository can be achieved by using different target or list of targets. Change-Id: If421133b9cc8bcfa47c3e7c14e6712520231e39c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Issue-ID: OOM-1589
2019-01-21Merge "Add variable for version of rancher server"Michal Ptacek1-2/+2
2019-01-17Fix docker config handling in offline installerMichal Zegan1-1/+1
This fixes adding of dns address to /etc/docker/daemon.json to always use infra's ip address instead of possibly using it's hostname. Also similar change is done in handling of /etc/resolv.conf in infrastructure.yml. Ip address is specified by the "cluster_ip" variable placed on a host. Inventory specifies ip for everything except resource server (just for consistency). Change-Id: I2baa3f4c7d69b8dff109b5f8ae984134caf2af7d Issue-ID: OOM-1573 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-01-17Add variable for version of rancher serverMilan Verespej1-2/+2
Rancher server version is hardcoded to 1.6.14 used in Beijing deployment. This limits flexibility to use it for future versions of ONAP deployments. This change adds possibility to choose version of rancher server via variable in group_vars/infrastructure.yml and setting its default value to version used by Casablanca release. Change-Id: I3a38a882386ce6adcba77780ee79a7cedfe98e4e Issue-ID: OOM-1584 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-08Revert "Fix the problem with ansible_host for ..."Petr Ospalý1-5/+1
This reverts commit a22f6b34a424d0ce25be7e560d8072a2e84e3ab8. This commit was merged by mistake. Change-Id: Ic73bfd8e9d97c3a23629cba69047cc0edefb9cd0 Issue-ID: OOM-1573 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-07Fix the problem with ansible_host for dockerPetr Ospalý1-1/+5
WIP This solves the problem with domain name without dropping the ansible_host. Ansible_host is just resolved to the ip. By using the ping command we can avoid another dependencies. Change-Id: Ic1963d3af6a8bdd68089ac8b599731e35475d81f Issue-ID: OOM-1573 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-04Fix docker config handling in offline installerMichal Zegan1-1/+1
This fixes adding of dns address to /etc/docker/daemon.json to always use infra's ip address instead of possibly using it's hostname. It is done by replacing usage of "ansible_host" by "ansible_default_ipv4.address" fact. Change-Id: If6a29f3bf11ece7f883b099a1ab503341859cb90 Issue-ID: OOM-1573 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2018-12-20Update ansible nexus roleMichal Zegan2-1/+2
Looks like this one was a bit out of date, updating it... Change-Id: I7734fc5ccdba001d3c409244cd1625453ab232ed Issue-ID: OOM-1551 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2018-12-20Merge "Adding role for application handling"Tomáš Levora4-5/+49
2018-12-20Merge "Add ansible role for dns simulation"Michal Ptacek3-0/+53
2018-12-20Merge "Add ansible firewall role"Michal Ptacek2-0/+19
2018-12-19Adding role for application handlingMichal Ptacek4-5/+49
this ansible role contains application specific tasks, it is written in generic way and different helm charts can be used as application. In addition operator can provide proprietary pre_install and post_install hooks. Change-Id: Ibe4b330e5a725dde41aca9f6a59d702cfaba6f52 Issue-ID: OOM-1551 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2018-12-19Add ansible role for dns simulationTomáš Levora3-0/+53
Adding role to simulate domain names for offline installation from private nexus repositories Issue-ID: OOM-1551 Change-Id: Ia3fe274e95ef078332627af9229195bd6e9a667d Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Add ansible role for docker installationTomáš Levora2-0/+40
Adding ansible role for installation of docker and its setup Issue-ID: OOM-1551 Change-Id: I49bca8eab46a2750cd627cbf709bed6744c88df5 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
2018-12-19Add ansible firewall roleTomáš Levora2-0/+19
Adding role to disable firewall to prevent any issue with communication during the installation Change-Id: I2390f0bc5062933e6a8bf4dcbc0b255b283f993d Issue-ID: OOM-1551 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>