summaryrefslogtreecommitdiffstats
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2019-06-05Add cleanup stage to 'nginx' role testBartek Grzybowski3-0/+18
Change-Id: Idddc421d33698c08b19cc63f4e203d0964341462 Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add role level tests for 'nginx' roleBartek Grzybowski5-1/+55
Introduce full role level test coverage for 'nginx' role. Change-Id: I7c634775433a2336e43cdfc73d4698d5e2933f0e Issue-ID: OOM-1913 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add molecule tests for kubectl roleMichal Zegan5-0/+63
This commit adds molecule tests for kubectl role. That includes verification for kubectl to be installed and runnable. Change-Id: I4cb0679ed6826555a6d1f6cff4542ae52869f404 Issue-ID: OOM-1908 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Add tests for helm roleMichal Zegan5-0/+64
This adds molecule tests for the helm role. Change-Id: I5be27992062ca9039c141318bc54ce85ce35526b Issue-ID: OOM-1909 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Add prepare-helm roleMichal Zegan2-0/+21
This role downloads helm and places it in resources dir. It is needed for testing helm role. Change-Id: Ic7357f96d654a51592c332e4b61b0fe46a39270a Issue-ID: OOM-1909 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-05Merge "Remove cleanup-rancher test role"Samuli Silvius1-18/+0
2019-06-05Merge "Remove cleanup-containers test role"Samuli Silvius1-6/+0
2019-06-05Merge "Removing rancher simulations from nginx"Michal Ptacek1-2/+0
2019-06-05Merge "Adapting to Dublin realase"Michal Zegan2-1/+3
2019-06-05Clean application role mocked artifacts directoriesBartek Grzybowski4-1/+16
Directories created by Molecule tests were left in files tree and not cleaned up. This patch adds a task to shred them after test invocation. Change-Id: If745cfc45de2f73db5be1696a16a185ff2a625bf Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-05Add custom patch role scenario to 'application' roleBartek Grzybowski6-11/+76
This adds test case for when application_pre_install_role and application_post_install_role are set to custom role; by default they are empty. Code condition coverage is increased. Change-Id: I14e59e15cf3ead0459374b5777f8ee03fe75d7bd Issue-ID: OOM-1910 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Add prepare-kubectl roleMichal Zegan2-0/+21
This role is used to prepare for kubectl role tests. It may also be used when any other test needs installed kubectl, for example when verifying kubernetes cluster setup. Both cases are a bit different. Change-Id: Ie7a065c571d94f40cfd64c3eba78af3e84b3f08a Issue-ID: OOM-1908 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Remove the cleanup-directories test roleMichal Zegan1-7/+0
This role is no longer needed after removing it's usage from the nfs role. Issue-ID: OOM-1902 Change-Id: I3f4d27e769c9edc3caef1b0d85a61f071e3a3b2f Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Removing rancher simulations from nginxMichal Ptacek1-2/+0
For Dublin/RKE we don't need to simulate those 2 domains, they were needed in Casablanca for rancher git repos. Change-Id: I66a2615284150c4b466994b0906bbe3e215793d5 Issue-ID: OOM-1800 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-06-04Remove cleanup from play-resourcesMichal Zegan1-23/+0
When play-resources does not use bindmounting, there is no need to manually clean up resource files. That makes it possible to remove cleanup.yml all together. This is in preparation to remove the othervise unneeded cleanup-directories role. Change-Id: Id6c05700e8cd2e9c8f91a3cfdf46022b170e1e1e Issue-ID: OOM-1902 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Do not use bindmounts for nfs testsMichal Zegan2-2/+2
This commit removes bindmounting of host directories to containers in play-resources tests. It seems that it is unneeded, and it is enough to just create anonymous volumes instead of cluttering host filesystem. This is one part of a preparation for removing the cleanup-directories role that won't be needed anymore. Note: similar changes were made to the nfs role tests, for the same reasons, but cleanup-directories is not used there Change-Id: Ib33543427d72b4bc7ede532e5eb9a5023931f1fe Issue-ID: OOM-1902 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Remove cleanup-rancher test roleMichal Zegan1-18/+0
This role is not used by rancher tests anymore. Issue-ID: OOM-1902 Change-Id: I989c41dfbf6dec8054befad87ac367bbf1afbc02 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Remove the prepare-docker test roleMichal Zegan6-84/+0
This removed the unused prepare-docker role. The dind version is now the only one used. Change-Id: Ic7c1c46ae06d931de7abac1f225675c8d6bf7dbd Issue-ID: OOM-1902 Issue-ID: OOM-1862 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Remove cleanup-containers test roleMichal Zegan1-6/+0
This removes cleanup-containers test role, that is not used by any tests after dind changes. Change-Id: I2244257de1faa2b268e9d2f74d286c19de99fab0 Issue-ID: OOM-1902 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-04Replace 'with_items' loop statements with 'loop' keywordBartek Grzybowski4-7/+10
As of Ansible 2.5 'loop' keyword is a recommended way for looping statements instead of 'with_dict'. Change-Id: I19e00cc27e13955e2056840fd4ce99841bc824ad Issue-ID: OOM-1887 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-06-04Adapting to Dublin realaseroot2-1/+3
In Dublin: First project has taken ownership of own helm charts, oom repository must be obtained with subrepositories. By default no applications are enabled, introducing a way to submit more override files in to installer Issue-ID: OOM-1861 Signed-off-by: root <m.pilat@partner.samsung.com> Change-Id: I1724de6b87bd0e9d17df4d0f55615a3f1c439d40
2019-06-03Add etcd group support to rke roleMichal Zegan4-1/+17
Etcd cluster is now placed in members of kubernetes-etcd group instead of kubernetes-node. Due to defaults, it means infra is the only etcd by default. Change-Id: Iae05a42442849e4a248d73c2d78f5e2b0eae7255 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add kubernetes-etcd groupMichal Zegan1-0/+6
This group will contain kubernetes etcd cluster. It is separated from kubernetes control plane and, especially, nodes. There are of course no restrictions as to which machines can be etcd. Default is infrastructure-server. Change-Id: I8d3ab9b9e4680f57ea8f595d7be3ed6e2d32764c Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add molecule tests for rke roleMichal Zegan14-0/+290
This change adds molecule tests for the rke role, and modifies the rke role itself to be more idempotent/to pass linter. Note that this molecule test case uses a separate role to install docker in containers, that runs docker daemon inside of them instead of using host docker. Issue-ID: OOM-1778 Change-Id: I875f3ff2ab961e5428acee5a02287a8d2d6e9969 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Make rke to use new group structureMichal Zegan5-13/+10
Rke playbook/role is modified to take advantage of the new group structure. Namely, all members of kubernetes group are treated as cluster members independent of their role. The role itself is selected in cluster.yml.j2 template based on actual membership in either kubernetes-node or kubernetes-control-plane group. Change-Id: I9a5bbfd090aff17018a610a01d6f88d848fc26c4 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Add kubernetes-node group for workersMichal Zegan2-14/+17
Moved all kubernetes nodes from the kubernetes to kubernetes-node group, and made the kubernetes group a parent of both kubernetes-node and kubernetes-control-plane. The reason is that we still need to have separate groups for control planes and for nodes, but some operations are performed equally on any kind of kubernetes cluster member, and currently one would need to separately include all related groups one by one. Example of such common operation is installation of docker, that was not performed for kubernetes-control-plane group, so that docker was not installed on control planes that were neither infra nor nodes. The side effect of this change is that if infrastructure server is also a cluster member, it lands in a kubernetes group by default, and node specific setup would be performed on it. For that reason, playbook is modified to perform this setup on all kubernetes cluster members except the infra server. Change-Id: Ic827002d28e535334dbab7e5ad4aed8aa95c97a9 Issue-ID: OOM-1778 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-06-03Fix docker searchPetr Ospalý1-0/+1
Change-Id: I4dec01c0a2369b22c50cc9198f2355cbd5f87f82 Issue-ID: OOM-1905 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-05-30Merge "Add Molecule tests for 'dns' role"Samuli Silvius7-2/+64
2019-05-30Merge "Make molecule tests for certificates independent from docker role"Samuli Silvius2-8/+6
2019-05-30Merge "Modify docker role to use dind"Samuli Silvius2-3/+7
2019-05-30Merge "prepare-docker-dind: make docker start optional"Samuli Silvius2-0/+4
2019-05-30Add Molecule tests for 'dns' roleBartek Grzybowski7-2/+64
This commit supplements 'Molecule test for infrastructure playbook' with role level tests. Change-Id: I14cdeedf1c80c0ee06bacf0a391ee1d7ccd6df55 Issue-ID: OOM-1841 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-05-30Modify rancher molecule tests to use dindMichal Zegan6-53/+12
This change modifies molecule tests of rancher role to use prepare-docker-dind. Also: - it modifies prepare-common role to retrieve cluster_ip of the actual node in question, - it fixes the rancher role itself to work at all by removing auto_remove. It has been tested by running molecule converge. Change-Id: I7af4e9998feedd5f8fc3df8215e03c1b0485529c Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-30Merge "Add prepare-docker-dind role"Samuli Silvius3-0/+31
2019-05-29Merge changes from topic "OOM-1816"Michal Ptacek17-4/+342
* changes: Molecule test for infrastructure playbook. Add the prepare-package-repository role Add prepare-nexus role Add prepare-nginx role Add the prepare-dns role Add prepare-vncserver role Allow unsafe writes when modifying resolv.conf Add nexus_come_up_wait_retries variable to nexus role Remove docker restart condition from docker role
2019-05-29Merge "Add support for extra helm install arguments"Michal Ptacek3-1/+5
2019-05-29Molecule test for infrastructure playbook.Samuli Silvius6-0/+155
These tests execute the whole infrastructure playbook. Issue-ID: OOM-1816 Change-Id: I793191e05cb0b527c3da6d820c1916231e69d865 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add the prepare-package-repository roleMichal Zegan2-0/+38
This role may be used by infra playbook tests. It downloads docker rpm packages and their dependencies to disk and creates a simulated offline rpm repository that can then be used to test installation of packages. Change-Id: Ia1a1bed1b124e036219ccc12c4650ce446955f01 Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com> Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-05-29Add prepare-nexus roleMichal Zegan2-0/+75
This role can be used by nexus role/infra playbook tests. It downloads and archives the nexus image used by these tests. It also archives some example docker images that can be used to test runtime image pushing. Change-Id: I027dd5dda60ab0abba7701cb038f6552a72e3599 Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add prepare-nginx roleMichal Zegan1-0/+28
This role can be used by nginx role/infra playbook tests. It builds and archives the nginx docker image used by these tests. Change-Id: I51052f4d587926be0331203fffd0bbd69a7dc58d Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add the prepare-dns roleMichal Zegan1-0/+22
This role can be used by infra playbook or dns role tests to download the dnsmasq docker images used during test. Change-Id: I05d9ccd1f2ac3d635c032b43078ca9a2179cb547 Issue-ID: OOM-1818 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add prepare-vncserver roleMichal Zegan1-0/+21
This role is used by infra playbook tests introduced in a follow up commit and it downloads the docker vncserver image used during testing. This role may also be useful for vncserver role tests. Change-Id: Ib9fc8041519d716207f2c1887f68fb29faab911f Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Allow unsafe writes when modifying resolv.confMichal Zegan1-0/+1
The package-repository role edits /etc/resolv.conf. Ansible modifies files atomically to prevent data loss on crash, but that does not work in docker containers because /etc/resolv.conf is bind-mounted. Allow ansible to fall back to non atomic writes in such cases. This makes it unnecessary to hack around this. Change-Id: I066205322de5cc06569e6ea3aa38885d3834f9cd Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add nexus_come_up_wait_retries variable to nexus roleMichal Zegan2-1/+2
This variable is used to set the number of retries when waiting for nexus to be running. It may occassionally be useful to increase it on slower test environments. Change-Id: Id34106dd8f9a8b2b1949b80adb22fbec3df71e23 Issue-ID: OOM-1816 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com> Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Remove docker restart condition from docker roleMichal Zegan1-3/+0
Docker role doesn't trigger docker restart when run in docker container (e.g. molecule). Remove the condition, as in dind case docker in container works same way as docker out of container. Change-Id: I8c80a09baccd76c78f2cbb8e474044351fd9b3d3 Issue-ID: OOM-1816 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-29Add support for extra helm install argumentsPetr Ospalý3-1/+5
Change-Id: Ie0b4e812acf6fba4e4b8f082533ab2f998456095 Issue-ID: OOM-1877 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-05-24Modify docker role to use dindMichal Zegan3-6/+7
This modifies the docker role to use dind. Note that it now uses pepare-docker-dind role, but *disables* start of docker. Change-Id: I55ac8d1f69531ba7496c34f990818b894a7d02a5 Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-24prepare-docker-dind: make docker start optionalMichal Zegan2-0/+4
This change makes it possible to disable docker start after prepare-docker-dind role executes. Needed for docker role that wants to start docker by itself. Note that the docker role also tries to install docker by itself, and prepare-docker-dind does the same. The reason is that it makes it possible to fix the version of installed docker. Change-Id: I7487bc46b316c0e6c782b22d8e24afea35c3c2d5 Issue-ID: OOM-1863 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-22Make molecule tests for certificates independent from docker roleMichal Zegan2-8/+6
Currently molecule tests for certificates role call the docker role just to make one handler available. It actually breaks best practices of unit testing, the docker role shouldn't be called nor tested in unit test of certificates role. This commit makes certificates role independent by just creating fake handlers. Change-Id: Iec7934c7c1f4e9b37ff523e1d86a3beaaa88bdcf Issue-ID: OOM-1864 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-05-22Make RKE the default cluster deployment toolBartek Grzybowski2-4/+17
This change substitutes rancher_kubernetes.yml for rke.yml in site.yml making the RKE default deployment mechanism for kubernetes cluster. Change-Id: Ie1a0cb1eb94a3c5e8efd5c2c7e682c0292bc9152 Issue-ID: OOM-1873 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>