summaryrefslogtreecommitdiffstats
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2021-06-24[ANSIBLE] Create a NodePort type service for Grafana dashboardBartek Grzybowski1-0/+8
This will allow accessing Grafana UI on controlplane public port. Change-Id: Ic3c2f22f36616fe636c966d962b9e503ef56c735 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-17[ANSIBLE] Update custom Grafana dashboardBartek Grzybowski1-167/+503
Panels added: - Node readiness status - Pod status in Onap namespace - Open file descriptors Change-Id: I5728efcbfd5008d382dc1a788e579daf225362be Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-17[ANSIBLE] Configure custom Grafana dashboardBartek Grzybowski4-1/+346
A new dashboard provider is set up in Grafana which reads the dash json definition from the file uploaded to Grafana PV Change-Id: I2704fe85e838e9aba2a846172334af467b9f2045 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-15[ANSIBLE] Setup persistent volume for Grafana dashboardsBartek Grzybowski2-3/+13
Change-Id: Ifb45abae0c8a7716addbd62d340423f1c1e44c03 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-11[ANSIBLE] Add 'nfs' playbookBartek Grzybowski3-13/+13
NFS server and mount is extracted into its own playbook. It has to be provisioned before kube-prometheus stack. Change-Id: I98942db4bcd7b16565d27f13d9a034b987467a61 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-10[ANSIBLE] Generate helm values file for kube-prometheus stackBartek Grzybowski2-0/+23
Default values file is provided and any of it's contents can be overriden by setting relevant keys in 'kube_prometheus_helm_values' dict on provisioner run time. Change-Id: I1655d64704e1ad6e9cd9650622ae1a92de902a8f Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-10[ANSIBLE] Create host paths for PVs and set their permissionsBartek Grzybowski2-0/+10
Access mode for hostPath type kubernetes PVs has to be set explicitly as setting it with pod's securityContext is not supported. Change-Id: I60ed71001fc7859440510f17c1989b35d28c37b5 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[ANSIBLE] Play the 'k8s-persistent-volume' role in 'kube_prometheus' playbookBartek Grzybowski1-0/+4
Change-Id: I754e2f29a9e721feefcb063be3575c3ef9d1599f Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[ANSIBLE] Add 'k8s-persistent-volume' roleBartek Grzybowski3-0/+31
This role will setup predefined k8s persistent volumes. It leverages the community.kubernetes.k8s ansible module. Change-Id: If71481b6b0da60872498063ff29c8da5a3830fc5 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[MOLECULE] Add setup for new 'k8s-persistent-volume' roleBartek Grzybowski4-0/+49
Change-Id: If7eb6c058746a98566f41d8354159624293ba58d Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-08[ANSIBLE] Setup kube-prometheus-stack roleBartek Grzybowski4-6/+19
Change-Id: I687fa1743cd2b778a0b07ed9e51a4a2e2d142934 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-02[MOLECULE] Setup Molecule for kube-prometheus-stack roleBartek Grzybowski3-0/+18
Change-Id: Id1c40e6a7da0ad0c42b162835f09630630569dd2 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-02[MOLECULE] Add prepare-kube-prometheus-stack roleBartek Grzybowski1-0/+11
Change-Id: I03d96d7ee3a36883deb9939c2dcfec9d8bdf6db3 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-02[ANSIBLE] Set default kube-prometheus-stack versionBartek Grzybowski1-0/+1
Change-Id: Ic28550df35a8a58dfbcc6302adbdbf2679c392da Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-01[ANSIBLE] Add kube_prometheus playbookBartek Grzybowski3-0/+8
Change-Id: I65a7560423554d375b825fe0de04e6dd558e9371 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-01[ANSIBLE] Add 'kube-prometheus-stack' role skeletonBartek Grzybowski8-0/+63
Change-Id: I413186d6dc78baea4d1f22e4ed2f419f6e49bd25 Issue-ID: INT-1926 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-06-01[MOLECULE] Pin ansible-base and Jinja pip packages versionsBartek Grzybowski1-1/+1
Issue-ID: OOM-2722 Change-Id: I75ce885df78ef953ab8a214c7ddd483bf4393823 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-20[MOLECULE 3.3.0] Fix verifier tests for several rolesBartek Grzybowski9-13/+11
Change-Id: I54f618fbb3d1bfefca329e647f78ba9b93f8a283 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-20[MOLECULE] Fix 'application' role runBartek Grzybowski2-3/+3
Add ansible-lint ignore rule to skip warning about unnamed task Fix verifier test Change-Id: Ie75c379b1678a594ad9a3e95442d04fc58939e6e Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-19[MOLECULE] Drop 'destroy' playbook for rke roleBartek Grzybowski2-35/+0
No longer required since change Ia221da6666d558e086cd24155f5bd81237d82388 Change-Id: I7ec15d63daaa3e3cdb6dbed2a4e2643bfcb99370 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-19[MOLECULE 3.3.0] Update dependencies for Molecule environmentBartek Grzybowski2-2/+2
Change-Id: Iad65f9dbd057544b77c419c9eb947142bcc062d2 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[MOLECULE] Enable idempotency test in play-infrastructureBartek Grzybowski1-19/+0
All roles that play-infrastructure encompasses have been fixed for idempotency. Change-Id: I6dd6655a6a79ed667699287d089cd9829ca2eed9 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE][MOLECULE] Skip checking packager cache cleaning idempotencyBartek Grzybowski4-38/+7
Change-Id: I621bd2ed4452c10a6747392a709d1c17282a11ef Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Upgrade 'chartmuseum' role's tasks to ansible 3.2.0Bartek Grzybowski3-0/+3
Change-Id: I96504d94eb4322857979a6ec37b2d63d4fe074df Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Fix regex pattern in 'certificates' roleBartek Grzybowski2-1/+20
[MOLECULE] Add verifier test for SubjectAlternativeName validation Issue-ID: OOM-2722 Change-Id: I8ff9fb88d5166f3d5eba5f364f9110b3b12cd47e Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Update Ansible chroot dockerfileBartek Grzybowski1-4/+2
Install ansible 3.2.0 and leverage newest alpine base layer Change-Id: Id30a7d2f31109ac61022d7f85861546417d1f38c Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-15[ANSIBLE 3.2.0] Upgrade 'nexus' role's tasks to ansible 3.2.0Bartek Grzybowski3-0/+5
Change-Id: Ibeaea4b3b627c356521b4c847d56eeb922a8cca1 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Use 'listen' directive for docker handlerBartek Grzybowski2-20/+20
Using 'import_tasks' for multiple step handler is no longer supported, while 'include_tasks' has some side effects. Change-Id: I61c14c937f80dfcd1780cdc2885ac781be613978 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'vncserver' role's tasks to ansible 3.2.0Bartek Grzybowski2-0/+3
Change-Id: Ie721fac402c3cd5725c770313194a9ad98a07f2d Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'nginx' role's tasks to ansible 3.2.0Bartek Grzybowski2-1/+7
Change-Id: Ieba3f13a29240e0f8ed8ff6acb5472559a9134a5 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE 3.2.0] Upgrade 'dns' role's tasks to ansible 3.2.0Bartek Grzybowski4-1/+4
Change-Id: I6984396d15d0592313978c751fd109ee06d8febf Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-13[ANSIBLE] Drop published ports listBartek Grzybowski1-3/+0
Published ports are discarded by docker engine when using host network mode so no need to define them. Change-Id: I71537b4191e8f05d77991d08444144031747c0b7 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[ANSIBLE 3.2.0] Upgrade 'certificates' role tasks to be ansible 3.2.0 compliantBartek Grzybowski1-16/+2
Change-Id: Id1d8da0a1dabdbe79cdb24179ddeff5564b00f17 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE] Fix 'certificates' setup and verifier testsBartek Grzybowski7-77/+29
Change-Id: I13d4774f6860f6c3e396f58f1c60ae589beea9b1 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE] Add cleanup task for 'certificates' roleBartek Grzybowski3-0/+15
Change-Id: Ifb9c9627d840158d8a4be3a1d1a1ea75dc4038c3 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-09[MOLECULE 3.3.0] Drop scenario name in molecule.ymlBartek Grzybowski35-60/+0
In Molecule 3.x.x it's no longer needed, scenario name is assumed from its directory name. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I3b25dae499d4f40851ac3fe0183ee7ab913b7dd7 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Update converge playbook file namesBartek Grzybowski48-22/+22
In 3.x.x version family of Molecule the 'playbook.yml' file for 'converge' action has changed to 'converge.yml'. Ref.: https://github.com/ansible-community/molecule/issues/2560 Change-Id: I8710ebd5710237be138f2aff8943d6c949058dbd Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Upgrade linters Molecule setupBartek Grzybowski68-276/+252
In 3.x.x version family of Molecule the syntax for linters invocation has been changed. Ref.: https://molecule.readthedocs.io/en/latest/configuration.html#lint Change-Id: I82d1fd996eb5853953ea6bc74dcbb88a485a2084 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-04-08[MOLECULE 3.3.0] Upgrade Molecule CI setupBartek Grzybowski2-5/+5
This upgrades following packages to specified versions: - Molecule => 3.3.0 - Ansible => 3.2.0 - Python => 3.8 Change-Id: I1bba9b2691d0b9650a08ebf4ca749798080dd441 Issue-ID: OOM-2722 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-31Upgrade Kubernetes Dashboard to v2.0.5Bartek Grzybowski1-3/+18
Currently used 2.0.0-beta4 supported k8s 1.15 at max Change-Id: I9565eaa78ebbca48377d65d87c77bc0893b29487 Issue-ID: OOM-2715 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-30Pin 'cryptography' pip package in ansible imageBartek Grzybowski1-1/+3
This rolls back alpine base layer to previous version and pins 'cryptography' pip package to the last known working version. Using alpine 3.13 has side efects as it upgrades python from 3.6 to 3.8 which breaks offline-installer playbooks. Change-Id: I3356e40943ffe75fe0febea31d71a51eb8a6f7bd Issue-ID: INT-1898 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-26Upgrade ansible's base image versionBartek Grzybowski1-1/+1
In 3.8 the 'cryptography' package no longer builds successfully Change-Id: I683e6553a9d1aa57069595dfdd56146c9cb45dc7 Issue-ID: INT-1898 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-03Upgrade rke version to 1.2.4 in Molecule setupBartek Grzybowski2-6/+1
Kubectl dependency is removed as it's no longer needed for rke tests. Change-Id: I0191b105e2a4cce1fe6e66678f4ce57fd2ce19ee Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-03Upgrade kubectl version and download link in it's Molecule test setupBartek Grzybowski2-2/+2
Kubectl upgraded to 1.19.6 Change-Id: I331926c81b595c17700f76c4568bc76f5d1ae8c1 Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-02Upgrade Kubernetes version deployed by RKE to v1.19.6Bartek Grzybowski3-61/+3
Manual system_images assignment in rke's cluster config is dropped as for any particular kubernetes release Rancher project holds a predefined, static map connecting Rancher's Kubernetes version with particular system images, so it's enough to define k8s version. Ref.: https://rancher.com/docs/rke/latest/en/config-options/system-images/ Change-Id: I027589c86500bbc5260caaa4aef7065d23d2241c Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-03-01Drop rancher_server_image global variableBartek Grzybowski1-1/+0
It's not in use since the time 'rancher' role got obsoleted by 'rke' one Change-Id: Ibdc26103d9f7e87c9bb29a60c9276210e88d2628 Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-24Upgrade docker version in molecule rolesBartek Grzybowski2-2/+2
Docker release is upgraded to 19.03.15 Change-Id: I04099e32f312fe2e316ab9bac0ca3b75b7b29662 Issue-ID: OOM-2686 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-12Run chartmuseum as a docker containerBartek Grzybowski14-69/+67
A docker container for chartmuseum is run with chart storage volume mounted from hosts' resource dir for chart repo persistence across container/infra restarts. Change-Id: I692ff7a3d95414b439b15b5414bc8b959eb79414 Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-11Update 'helm deploy' failure criteriaBartek Grzybowski1-1/+1
Contrary to helm v2, helm v3 prints regular output to stderr hence stderr output presence can no longer be used as failure criteria. Since 'deploy' plugin (for any helm release) prints a list of charts that failed to deploy at the end of it's run, it's output is used to detect deployment failure. Change-Id: I340e4e1a5be0949d866ddedfb49c0d23a48e67cf Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2021-02-10Fix kubeconfig file permissionsBartek Grzybowski1-1/+1
Kubeconfig file should not be world readable. Helm v3 prints relevant warning to stderr if it's (kubeconfig) mode is incorrect. Change-Id: I9d2b8618cd3e43a49345e96f6ed5169438a29cef Issue-ID: OOM-2665 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>