summaryrefslogtreecommitdiffstats
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2019-04-02Support time synchronization on hostsBartek Grzybowski6-0/+80
This change introduces functionality to synchronize infra/kube nodes' clock with external NTP authority. Configuring external time source is optional, however default behaviour will be to setup NTP time source on infra-node and sync kube-nodes clock with it. It's also possible to setup custom time zone. Change-Id: I725ce9a306da1977628b6c03d5ff10fca77fb3b0 Issue-ID: OOM-1710 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-01Merge "Wrong filename does not fail transfer"Samuli Silvius1-8/+19
2019-04-01Merge "nginx update for long server names"Samuli Silvius1-0/+1
2019-04-01Allow passing any values to override.yamlMichal Zegan1-6/+6
This change allows passing any values that will then be stored to override.yaml. These values are passed from the "overrides" key, that may be set either as an extra variable or in inventory/group_vars. The root certificate is merged with the overrides dictionary before saving the file. Change-Id: I772c342b3c9eafe1849d1678b810319afaaf75bf Issue-ID: OOM-1752 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-01Improve application role testabilitySamuli Silvius13-69/+78
Remove different phases for application role as those are supposed to run after each other anyway from playbook and pre/post steps can be disabled by other means. Enable Helm override file generation customization by delegating it to separate role. Separate Helm file transfer to own module. NOTE: install.yml with all Helm commands (shell/command) is not idempotent and should be fixed with separate commit. Issue-ID: OOM-1655 Change-Id: Ib29773c4d64a0529c71c3f93c2af7265ae94059f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "Fix idempotence for firewall role"Michal Ptacek1-0/+1
2019-03-29Fix helm install command not showing errorMilan Verespej1-0/+2
Issue-ID: OOM-1737 Change-Id: I240415793ea2a078ab6c6d9c0727852dc2d9ada3 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-28nginx update for long server nameseronkeo1-0/+1
This issue addresses the following error when starting nginx container: nginx: [emerg] could not build the \ server_names_hash, you should increase \ server_names_hash_bucket_size: 64 Change-Id: I369075edd16801aca6b09c6727370060225c428c Issue-ID: OOM-1765 Signed-off-by: eronkeo <ronan.keogh@est.tech>
2019-03-26Wrong filename does not fail transferSamuli Silvius1-8/+19
User typo on resource package filename or dir does not cause install to fail but just skips that resource package. Change resource paths handling to skip resource only if variable is not defined or empty, but if a value is given resource must exist or transfer fails otherwise. Issue-ID: OOM-1736 Change-Id: I765c5dc8eb5e58875f032e056f9a8360aee702c0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-26Add python-jsonpointer as a new dependencyPetr Ospalý1-0/+5
Our custom ansible module requires python-jsonpointer module to deal with jsons. Change-Id: Idd7bfcf8fcf75e4397fba51d8219b73c57df5f0e Issue-ID: OOM-1758 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-26Merge "Fixing some yaml-lint warnings"Michal Ptacek9-16/+40
2019-03-26Fixing some yaml-lint warningsMichal Ptacek9-16/+40
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-24Fix idempotence for firewall roleSamuli Silvius1-0/+1
Based on Molecule testing, fix idempotence. Issue-ID: OOM-1757 Change-Id: Ie2c4cdcf65aeac664d4b76daa7e979f4f23b6bdf Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-23.gitignore for Molecule testingSamuli Silvius1-0/+3
Issue-ID: OOM-1748 Change-Id: Ie1558112d6d2af2c77f9f9d0a142d417b3269589 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek5-92/+345
2019-03-18Add default logging settings for dockerPetr Ospalý5-92/+345
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius7-96/+106
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-08Merge "Refine application_pre_install_role variable usage"Michal Ptacek3-8/+12
2019-03-08Modify ansible version in docker/chrootPetr Ospalý1-1/+1
Updating to ansible version: 2.7.8 Current ansible version: 2.6.3 The current version breaks json values in playbooks. Change-Id: I9858339a08711ad921122b2e7b6ccf04d62454a3 Issue-ID: OOM-1698 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Refine application_pre_install_role variable usageBartek Grzybowski3-8/+12
As 'application_pre_install_role' variable set in config/application_configuration.yml must stay in sync with patch role directory name defined in package.conf under APP_CONFIGURATION variable, it's name shall stay under complete user control without any variable as part of it's name. App_helm_build_targets list and app_helm_chart_name should default to 'onap' in application_configuration.yml as customizing them isn't supported at the moment. Also fixed some wording in comments/docs in relevant files. Change-Id: I82b6dd519fbc3426739a11fac1e02eb495a668c0 Issue-ID: OOM-1697 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-07Fix wrong detection of uploaded resourcesMilan Verespej3-21/+31
Issue-ID: OOM-1596 Change-Id: I091cd558f7574f49dddf4380df24e11141a4b78d Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-07Re-factored resources upload into roleSamuli Silvius11-164/+175
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Remove useless deploy_package_repository flagBartek Grzybowski1-3/+0
Support for deploy_package_repository is only partial, setting it to 'false' would crash ansible on package installation from offline repository which wouldn't be configured then. Issue-ID: OOM-1632 Change-Id: I26d748505906703d1ee41ef3d310c1a14ff5066a Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Add more files to .gitignore"Michal Ptacek1-0/+1
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek10-49/+46
2019-03-05Add more files to .gitignoreBartek Grzybowski1-0/+1
Added additional files generated at packaging time to .gitignore not to mess up working tree Issue-ID: OOM-1697 Change-Id: I6c6194a7109aa1862cff0448566eff1db01c13f9 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius10-49/+46
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek4-11/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek4-24/+24
2019-03-03package-repository role to streamline playbookSamuli Silvius4-24/+24
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski4-11/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius3-24/+37
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-18Merge "Fix site.yml playbook by removing the setup.yml"Samuli Silvius1-2/+10
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1
2019-02-15Fix for malformed certificate issueMichal Ptacek1-1/+1
Without this patch certificate is distributed in malformed shape and leads to policy-drools pod not working Issue-ID: OOM-1662 Change-Id: I1e5f51c6aa7857a9347d2d8ef8d523508d094df0 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-15Fix site.yml playbook by removing the setup.ymlPetr Ospalý1-2/+10
setup.yml is an optional playbook which may be replaced by other means of securing the passwordless login Change-Id: Ia64eee6351e9cabc638149b5ed668885058aef89 Issue-ID: OOM-1661 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-02-14Conditional login update after aux_data_path setMichal Ptacek2-0/+2
After setting-up of default value for aux_data_path some of the conditional logic must be updated. Issue-ID: OOM-1659 Change-Id: I0472c2e848f9215186b8aa11557165f606cac9d4 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Merge "Fix typo in helm plugins path"Michal Ptacek1-1/+1
2019-02-14Fix wrong value for booleanMilan Verespej1-1/+1
Issue-ID: OOM-1629 Change-Id: I80ea6e72c9e5dbe3fdc63db0d177f541c749c58e Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix typo in helm plugins pathMilan Verespej1-1/+1
Issue-ID: OOM-1638 Change-Id: I00607f4861d153dc73f9ce516d9bd3b9c490a9cc Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix nfs on nodes does not install nfs packagesMilan Verespej2-1/+10
Issue-ID: OOM-1640 Change-Id: Ieb8d736e543d58facb9a84c3366c5b15418e17d2 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-13Merge changes Idcc4c510,I81261f51,Ica9fc768,I7b5d135aMichal Ptacek3-61/+74
* changes: More default values and simplify onap config Clarify packaging variables documentation Helm install optional and default values Helm charts dir commenting causes / dir copying
2019-02-13More default values and simplify onap configSamuli Silvius2-33/+16
Populate more default values for ansible all.yml configuration to make it simpler by default for user. Removed project_configuration variable as it caused just confusion. Replaced that mostly by using app_name variable. According to above changed simplified actual configuration config/application_configuration.yml used to install onap. Mostly removed repeation of comments. Also updated ansible/application/README.md that was not updated for a while. Issue-ID: OOM-1633 Change-Id: Idcc4c510b64bb61edd874d0e0616cdb41938f2d3 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-12Master playbook for installationSamuli Silvius1-0/+12
Create site.yml playbook as default way to run whole offline installer installation. It's mainly a document for a user about the intended order of the playbooks to run. Issue-ID: OOM-1645 Change-Id: I54640bf7d926c7c80be9bdb542683f0ba70a633f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-12Clarify packaging variables documentationSamuli Silvius1-20/+27
For the user package.sh/package.conf is a bit confusing and variables are not well named nor documented. Binary definition can be also simplified by providing just single directory to take binaries from. Corresponding variable documentation on installer side (ansible code) is also confusing and missing relation to packaging variables This commit aims on improving that documentation. Issue-ID: OOM-1633 Change-Id: I81261f51d393f434eac26c4a46624388671bd36b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>