summaryrefslogtreecommitdiffstats
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2019-04-03Verify offline app repo is workingBartek Grzybowski3-1/+35
A patch for failing fast if configured offline application repository is not working properly. Just adding repo to repolist doesn't guarantee it's really operational. Change-Id: I65372b9b1ea5f5dcb797548b14e3ae1295668592 Issue-ID: OOM-1689 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-03Merge "Support time synchronization on hosts"Michal Ptacek6-0/+80
2019-04-03Merge "Improve kubectl role testability."Samuli Silvius1-1/+1
2019-04-03Merge "Improve rancher role testability"Samuli Silvius10-41/+45
2019-04-03Building and Dockerfile for centos7Samuli Silvius4-0/+96
Add initial Dockerfile for centos7 for molecule testing. Issue-ID: OOM-1750 Change-Id: Ie4da3d80c713d1da56465c598774b370b4c01b36 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-02Support time synchronization on hostsBartek Grzybowski6-0/+80
This change introduces functionality to synchronize infra/kube nodes' clock with external NTP authority. Configuring external time source is optional, however default behaviour will be to setup NTP time source on infra-node and sync kube-nodes clock with it. It's also possible to setup custom time zone. Change-Id: I725ce9a306da1977628b6c03d5ff10fca77fb3b0 Issue-ID: OOM-1710 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-04-01Merge "Wrong filename does not fail transfer"Samuli Silvius1-8/+19
2019-04-01Molecule test for nfs roleSamuli Silvius7-1/+117
Issue-ID: OOM-1756 Change-Id: I2e1aef3296689c284a4b530e6a2022302c7b86f7 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Fix nfs role issues based on molecule testingSamuli Silvius3-8/+14
Based on Molecule testing fix following issues on nfs role. - enable nfs services (previously only started) - create handler for exportfs to deal idempotency - add all kubernetes nodes to exports as it was dependent on ansible inventory order wheather correct hosts was on the list - add inventory_hostname as default host incase ansible_host variable not defined. Issue-ID: OOM-1756 Change-Id: Ib93e9d2a9cf49003d04dd5f890294eda1eb966ff Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "nginx update for long server names"Samuli Silvius1-0/+1
2019-04-01Allow passing any values to override.yamlMichal Zegan1-6/+6
This change allows passing any values that will then be stored to override.yaml. These values are passed from the "overrides" key, that may be set either as an extra variable or in inventory/group_vars. The root certificate is merged with the overrides dictionary before saving the file. Change-Id: I772c342b3c9eafe1849d1678b810319afaaf75bf Issue-ID: OOM-1752 Signed-off-by: Michal Zegan <m.zegan@samsung.com>
2019-04-01Improve application role testabilitySamuli Silvius13-69/+78
Remove different phases for application role as those are supposed to run after each other anyway from playbook and pre/post steps can be disabled by other means. Enable Helm override file generation customization by delegating it to separate role. Separate Helm file transfer to own module. NOTE: install.yml with all Helm commands (shell/command) is not idempotent and should be fixed with separate commit. Issue-ID: OOM-1655 Change-Id: Ib29773c4d64a0529c71c3f93c2af7265ae94059f Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-04-01Merge "Fix idempotence for firewall role"Michal Ptacek1-0/+1
2019-03-29Fix helm install command not showing errorMilan Verespej1-0/+2
Issue-ID: OOM-1737 Change-Id: I240415793ea2a078ab6c6d9c0727852dc2d9ada3 Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-28nginx update for long server nameseronkeo1-0/+1
This issue addresses the following error when starting nginx container: nginx: [emerg] could not build the \ server_names_hash, you should increase \ server_names_hash_bucket_size: 64 Change-Id: I369075edd16801aca6b09c6727370060225c428c Issue-ID: OOM-1765 Signed-off-by: eronkeo <ronan.keogh@est.tech>
2019-03-28Improving docker restart handlerMichal Ptacek2-4/+19
There is a bug in docker which leads to not properly shutdown service preventing subsequent startup. https://github.com/moby/moby/issues/30348 This commit is preventing this problem to appear. Change-Id: I29505610bd9954af01d73264e5414fdb2b9ac99d Issue-ID: OOM-1735 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-26Wrong filename does not fail transferSamuli Silvius1-8/+19
User typo on resource package filename or dir does not cause install to fail but just skips that resource package. Change resource paths handling to skip resource only if variable is not defined or empty, but if a value is given resource must exist or transfer fails otherwise. Issue-ID: OOM-1736 Change-Id: I765c5dc8eb5e58875f032e056f9a8360aee702c0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-26Add python-jsonpointer as a new dependencyPetr Ospalý1-0/+5
Our custom ansible module requires python-jsonpointer module to deal with jsons. Change-Id: Idd7bfcf8fcf75e4397fba51d8219b73c57df5f0e Issue-ID: OOM-1758 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-26Rewrite the run_chroot.sh scriptMichal Zegan1-262/+156
This change heavily changes run_chroot.sh script. Major change is that most of the real script logic is now run in a namespace, so that all mounts are done in namespace. Also, all the cleanup code and some checks are removed, also the shell wrapper is removed. This change is for simplifying the run_chroot.sh. It will function the same as before from the user's point of view, except that now the script does not have to explicitly unmount filesystems that it mounted before, so no cleanup code isneeded. Also, all processes run from inside a chroot should be killed immediately when the chroot command finishes. Change-Id: I45a3dc7c6583cb9693746cc04f42b7af325724dd Signed-off-by: Michal Zegan <m.zegan@samsung.com> Issue-ID: OOM-1744
2019-03-26Merge "Fixing some yaml-lint warnings"Michal Ptacek9-16/+40
2019-03-26Fixing some yaml-lint warningsMichal Ptacek9-16/+40
Scope of this commit is to fix warnings reported by offline-installer-master-yaml-lint jenkins job Change-Id: Id858a37ce35d53ad1ffd5e5797607faae484ed15 Issue-ID: OOM-1753 Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
2019-03-24Fix idempotence for firewall roleSamuli Silvius1-0/+1
Based on Molecule testing, fix idempotence. Issue-ID: OOM-1757 Change-Id: Ie2c4cdcf65aeac664d4b76daa7e979f4f23b6bdf Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-23.gitignore for Molecule testingSamuli Silvius1-0/+3
Issue-ID: OOM-1748 Change-Id: Ie1558112d6d2af2c77f9f9d0a142d417b3269589 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve kubectl role testability.Samuli Silvius1-1/+1
Move kubectl related functionality from rancher role to kubectl role and change order of execution in playbook to satisfy kubectl role dependency to rancher role regarding server value inserted into kubeconfig file. Introduced defaults and moved technical variables from group_vars into role defaults. Issue-ID: OOM-1730 Change-Id: I6339664ba52928566487edcdca8a3b42db86eeed Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Improve rancher role testabilitySamuli Silvius10-41/+45
Move functionality from playbook to rancher role. Introduce defaults for holding default values in rancher role. Other small changes noticed while testing rancher role with molecule. Issue-ID: OOM-1729 Change-Id: I83befa9f0964c67e209d3def76bafd2a61c1ef33 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-20Merge "Add default logging settings for docker"Michal Ptacek5-92/+345
2019-03-18Add default logging settings for dockerPetr Ospalý5-92/+345
- Default configuration of logging for docker daemon. - New ansible module for generic handling of JSON files. - New setting in ansible.cfg: jinja2_native = True To preserve double-quotes in json values (OOM-1698). Issue-ID: OOM-1681 Change-Id: I8f8e19ebc290fd48a63146e96f418b98344e4433 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-14Change cert signing from command to moduleMilan Verespej2-29/+14
With newer Ansible we are now able to sign nexus certificate with own CA using openssl_certificate module. Issue-ID: OOM-1700 Change-Id: Idc54955160caef4a57bd50fc86678923511b5bce Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-12Improve certificates role testabilitySamuli Silvius7-96/+106
Move certs source path to defaults and make other small re-factoring. Issue-ID: OOM-1694 Change-Id: Ie0a4b543b40314dc5a7772dd4667b1ad218d3543 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-08Merge "Refine application_pre_install_role variable usage"Michal Ptacek3-8/+12
2019-03-08Modify ansible version in docker/chrootPetr Ospalý1-1/+1
Updating to ansible version: 2.7.8 Current ansible version: 2.6.3 The current version breaks json values in playbooks. Change-Id: I9858339a08711ad921122b2e7b6ccf04d62454a3 Issue-ID: OOM-1698 Signed-off-by: Petr Ospalý <p.ospaly@partner.samsung.com>
2019-03-07Ignore checksum from existence check of resourcesSamuli Silvius2-1/+1
To speed up resource packages existency check, ignore checsum. This change was accidentally left out from previous commit as merging was not communicated. Issue-ID: OOM-1654 Change-Id: I567eaba49e6a5244d51187d42af719bf360b41f0 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-07Refine application_pre_install_role variable usageBartek Grzybowski3-8/+12
As 'application_pre_install_role' variable set in config/application_configuration.yml must stay in sync with patch role directory name defined in package.conf under APP_CONFIGURATION variable, it's name shall stay under complete user control without any variable as part of it's name. App_helm_build_targets list and app_helm_chart_name should default to 'onap' in application_configuration.yml as customizing them isn't supported at the moment. Also fixed some wording in comments/docs in relevant files. Change-Id: I82b6dd519fbc3426739a11fac1e02eb495a668c0 Issue-ID: OOM-1697 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-07Fix wrong detection of uploaded resourcesMilan Verespej3-21/+31
Issue-ID: OOM-1596 Change-Id: I091cd558f7574f49dddf4380df24e11141a4b78d Signed-off-by: Milan Verespej <m.verespej@partner.samsung.com>
2019-03-07Re-factored resources upload into roleSamuli Silvius11-164/+175
Whole functionality of resource files upload is implemented in resource-data role instead of playbook level tasks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1654 Change-Id: I3d3da9381b0e804f511ee854c41554b924d18883 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-06Disable all default repositoriesBartek Grzybowski2-8/+42
This patch allows configuring multiple repositories via 'package_repositories' dict. It also disables all default repositories not to break 'yum' operation in environment without route to Internet. Issue-ID: OOM-1632 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> Change-Id: Id5e81e9d60d15393d5d2e12aef3da476a3b0d4c3
2019-03-06Remove useless deploy_package_repository flagBartek Grzybowski1-3/+0
Support for deploy_package_repository is only partial, setting it to 'false' would crash ansible on package installation from offline repository which wouldn't be configured then. Issue-ID: OOM-1632 Change-Id: I26d748505906703d1ee41ef3d310c1a14ff5066a Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-06Merge "Improve nginx role testability"Michal Ptacek2-12/+28
2019-03-05Merge "Add more files to .gitignore"Michal Ptacek1-0/+1
2019-03-05Merge "Re-factor nexus role to streamline playbook"Michal Ptacek10-49/+46
2019-03-05Add more files to .gitignoreBartek Grzybowski1-0/+1
Added additional files generated at packaging time to .gitignore not to mess up working tree Issue-ID: OOM-1697 Change-Id: I6c6194a7109aa1862cff0448566eff1db01c13f9 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-03-04Re-factor nexus role to streamline playbookSamuli Silvius10-49/+46
Move nexus functionality into nexus role from infrastructure playbook. This will make role easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1653 Change-Id: I1af2bfef5aa4d6c7b819f5fc40f95c6e8303598c Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-04Merge "Use 'package_facts' module in firewall role"Michal Ptacek4-11/+13
2019-03-04Merge "package-repository role to streamline playbook"Michal Ptacek4-24/+24
2019-03-03package-repository role to streamline playbookSamuli Silvius4-24/+24
Create own role for repository handling to move functionality to roles from playbooks. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1649 Change-Id: Ie8d25f83c54ec9f5a50fc6376a1ba7e166f07132 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-03-03Improve nginx role testabilitySamuli Silvius2-12/+28
Moving ports and volumes to defaults to make them easier customiced. Change-Id: I8b5418443f0b55ef61890a08c530040c07617122 Issue-ID: OOM-1693 Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-28Use 'package_facts' module in firewall roleBartek Grzybowski4-11/+13
Centos iso image doesn't have 'yum-utils' package with 'repoquery' binary which causes 'yum' module to crash. Using more generic 'package_facts' fixes that. This patch also introduces more general compatibility with RedHat/Debian based distros. Issue-ID: OOM-1632 Change-Id: Ica026c0f9a9ffa9e307f7cba589900962b0db4e7 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
2019-02-26Create setup roleSamuli Silvius3-24/+37
Creating setup role and moving functionality from setup playbook into new role. This will make roles easier to test and make it easier to implement other OS support later. Issue-ID: OOM-1663 Change-Id: If8b93066997c2442c0b94cb2a95fb535d9560b2b Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
2019-02-18Merge "Fix site.yml playbook by removing the setup.yml"Samuli Silvius1-2/+10
2019-02-15Merge "Fix for malformed certificate issue"Michal Ptacek1-1/+1