summaryrefslogtreecommitdiffstats
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek5-92/+345
2019-03-18Add default logging settings for dockerPetr Ospalý5-92/+345
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius7-96/+106
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-08Merge "Refine application_pre_install_role variable usage"Michal Ptacek3-8/+12
2019-03-08Modify ansible version in docker/chrootPetr Ospalý1-1/+1
Updating to ansible version: 2.7.8 Current ansible version: 2.6.3 The current version breaks json values in playbooks. Change-Id: I9858339a08711ad921122b2e7b6ccf04d62454a3 Issue-ID: OOM-1698 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Refine application_pre_install_role variable usageBartek Grzybowski3-8/+12
As 'application_pre_install_role' variable set in config/application_configuration.yml must stay in sync with patch role directory name defined in package.conf under APP_CONFIGURATION variable, it's name shall stay under complete user control without any variable as part of it's name. App_helm_build_targets list and app_helm_chart_name should default to 'onap' in application_configuration.yml as customizing them isn't supported at the moment. Also fixed some wording in comments/docs in relevant files. Change-Id: I82b6dd519fbc3426739a11fac1e02eb495a668c0 Issue-ID: OOM-1697 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-07Fix wrong detection of uploaded resourcesMilan Verespej3-21/+31
Issue-ID: OOM-1596 Change-Id: I091cd558f7574f49dddf4380df24e11141a4b78d Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-07Re-factored resources upload into roleSamuli Silvius11-164/+175
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Remove useless deploy_package_repository flagBartek Grzybowski1-3/+0
Support for deploy_package_repository is only partial, setting it to 'false' would crash ansible on package installation from offline repository which wouldn't be configured then. Issue-ID: OOM-1632 Change-Id: I26d748505906703d1ee41ef3d310c1a14ff5066a Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Add more files to .gitignore"Michal Ptacek1-0/+1
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek10-49/+46
2019-03-05Add more files to .gitignoreBartek Grzybowski1-0/+1
Added additional files generated at packaging time to .gitignore not to mess up working tree Issue-ID: OOM-1697 Change-Id: I6c6194a7109aa1862cff0448566eff1db01c13f9 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius10-49/+46
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek4-11/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek4-24/+24
2019-03-03package-repository role to streamline playbookSamuli Silvius4-24/+24
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski4-11/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius3-24/+37
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-18Merge "Fix site.yml playbook by removing the setup.yml"Samuli Silvius1-2/+10
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1
2019-02-15Fix for malformed certificate issueMichal Ptacek1-1/+1
Without this patch certificate is distributed in malformed shape and leads to policy-drools pod not working Issue-ID: OOM-1662 Change-Id: I1e5f51c6aa7857a9347d2d8ef8d523508d094df0 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-15Fix site.yml playbook by removing the setup.ymlPetr Ospalý1-2/+10
setup.yml is an optional playbook which may be replaced by other means of securing the passwordless login Change-Id: Ia64eee6351e9cabc638149b5ed668885058aef89 Issue-ID: OOM-1661 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-02-14Conditional login update after aux_data_path setMichal Ptacek2-0/+2
After setting-up of default value for aux_data_path some of the conditional logic must be updated. Issue-ID: OOM-1659 Change-Id: I0472c2e848f9215186b8aa11557165f606cac9d4 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-14Merge "Fix typo in helm plugins path"Michal Ptacek1-1/+1
2019-02-14Fix wrong value for booleanMilan Verespej1-1/+1
Issue-ID: OOM-1629 Change-Id: I80ea6e72c9e5dbe3fdc63db0d177f541c749c58e Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix typo in helm plugins pathMilan Verespej1-1/+1
Issue-ID: OOM-1638 Change-Id: I00607f4861d153dc73f9ce516d9bd3b9c490a9cc Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-14Fix nfs on nodes does not install nfs packagesMilan Verespej2-1/+10
Issue-ID: OOM-1640 Change-Id: Ieb8d736e543d58facb9a84c3366c5b15418e17d2 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-13Merge changes Idcc4c510,I81261f51,Ica9fc768,I7b5d135aMichal Ptacek3-61/+74
* changes: More default values and simplify onap config Clarify packaging variables documentation Helm install optional and default values Helm charts dir commenting causes / dir copying
2019-02-13More default values and simplify onap configSamuli Silvius2-33/+16
Populate more default values for ansible all.yml configuration to make it simpler by default for user. Removed project_configuration variable as it caused just confusion. Replaced that mostly by using app_name variable. According to above changed simplified actual configuration config/application_configuration.yml used to install onap. Mostly removed repeation of comments. Also updated ansible/application/README.md that was not updated for a while. Issue-ID: OOM-1633 Change-Id: Idcc4c510b64bb61edd874d0e0616cdb41938f2d3 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-12Master playbook for installationSamuli Silvius1-0/+12
Create site.yml playbook as default way to run whole offline installer installation. It's mainly a document for a user about the intended order of the playbooks to run. Issue-ID: OOM-1645 Change-Id: I54640bf7d926c7c80be9bdb542683f0ba70a633f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-12Clarify packaging variables documentationSamuli Silvius1-20/+27
For the user package.sh/package.conf is a bit confusing and variables are not well named nor documented. Binary definition can be also simplified by providing just single directory to take binaries from. Corresponding variable documentation on installer side (ansible code) is also confusing and missing relation to packaging variables This commit aims on improving that documentation. Issue-ID: OOM-1633 Change-Id: I81261f51d393f434eac26c4a46624388671bd36b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-12Helm install optional and default valuesSamuli Silvius2-12/+35
Make Helm applicaton installation optional by allowing user not to provide Helm charts. Then only empty Kubernetes cluster will be installed. Provide some reasonable default values for Helm charts configuration variables both in package script and ansible installer itself. User provided Helm charts configuration must be in sync with packaging and installer, provided some clarifying comments for that. Issue-ID: OOM-1629 Change-Id: Ica9fc76856cb50c9d636bea99a326736736c7a56 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-11Change helm plugin install to copy moduleMilan Verespej3-17/+23
Since helm plugin install command is not the most suitable for Ansible and it basically just creates link to plugin original location this change is using Ansible's copy module instead. Plugin is copied from install server because copy module doesn't support recursive directory copying with remote_src option. Issue-ID: OOM-1638 Change-Id: I9e9dcd8d33f8917296f576c2b34c0c576c9c126c Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-07Fix simulated_hosts templateMichal Zegan1-1/+1
This fixes simulated_hosts template to use cluster_ip instead of ansible_host as source of infra ip. Change-Id: I02e205c031d94442b3a3debeee8baebaedc7180d Issue-ID: OOM-1637 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-02-06Fix sdnc/appc-ansible-server not runningMilan Verespej2-2/+3
These pods are installing packages from apt and pypi repositroies during runtime. This change creates patch and makes necessary modifications for packages being installed from offline repositories. Change-Id: Id71f40f94c8641ad0c9d1ba4c87d3daea70c828e Issue-ID: OOM-1619 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-02-06Inserting our root certificate into policy podsMichal Ptacek1-0/+16
This commits introduced another bunch of patches for OOM charts we need in Casablanca to be able to get our certificate trusted by policy pods which are collecting maven artifacts from our nexus during runtime. Change-Id: I8289b155970e57059bccb5dfe09231e28bf27a32 Issue-ID: OOM-1609 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-02-05Fixing missing clause for enabling helm deployMichal Ptacek2-3/+13
As a part of change merged recently in 271cf3ffc2977f9e4 support for OOM plugins was introduced however it was never used. This commit is fixing this and introducing helm deploy option if plugin exists. Change-Id: Ifb77ce2098ea28f822e5e15ddf2736f0c83b946c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com> Issue-ID: OOM-1589 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-01-31Merge "Fix broken docker build due to pip-19.0"Michal Ptacek1-3/+3
2019-01-28Merge "Adding support for helm plugins"Michal Ptacek3-2/+37
2019-01-27Adding support for helm pluginsMichal Ptacek3-2/+37
Proprietary plugins can be used along with helm, in addition to that building of local helm repository can be achieved by using different target or list of targets. Change-Id: If421133b9cc8bcfa47c3e7c14e6712520231e39c Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com> Issue-ID: OOM-1589
2019-01-24Enable to build ansible image out of git directoryPetr Ospalý1-6/+4
Inside the build_ansible_image.sh is a variable (label for docker image) which is set to git commit hash. This is fine but you can just copy and move ansible directory elsewhere out of git and this script breaks because of this. This change preserve previous functionality but only if the script is run inside a git repository otherwise it will skip setting the label for the built docker image. Change-Id: I23f828542efddde21d1c96116de7b20272ef23ef Issue-ID: OOM-1575 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-24Fix broken docker build due to pip-19.0Petr Ospalý1-3/+3
pip-19.0 fails to build with the option --no-cache-dir Change-Id: I6494c6c6b4dc49d4fbd2ce657ed9824c5b3847e3 Issue-ID: OOM-1607 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-01-21Merge "Add variable for version of rancher server"Michal Ptacek2-2/+3
2019-01-21Merge "Fix variable nfs_mount_path not found"Samuli Silvius2-1/+2
2019-01-20Merge "Handle empty runtime_images"Michal Ptacek1-1/+1