1
0
mirror of https://github.com/openshift/openshift-ansible.git synced 2026-02-05 06:46:04 +01:00

832 Commits

Author SHA1 Message Date
Gaoyun Pei
efa80c7b8e Add the afterburn as the installed package 2025-04-14 08:49:09 -04:00
Gaoyun Pei
c283ce13ac Corrent the failure msg a bit 2025-04-01 03:53:12 -04:00
Gaoyun Pei
d8bcab24d8 Remove the support for 4.19+ from the ansible playbook 2025-04-01 03:42:25 -04:00
Gaoyun Pei
a81fc72f38 Replace the unsupported option to the new one 2024-11-04 19:28:09 -05:00
Brent Barbachem
bd84996de4 OCPBUGS-34844: Force disable container tools
** Disable the container tools in a more aggressive manner.
** Skip disabling when the repo is not found.
2024-10-18 13:41:52 -04:00
Brent Barbachem
5519f89f98 OCPBUGS-43493: add crun to list of installed packages
** The new versions of crio split some of the services out. This is required
as a separate package to run crio.
2024-10-17 12:38:09 -04:00
Gaoyun Pei
000c0ca0d4 Update the network backend of podman to Netavark if installing podman-5.0 and greater 2024-08-30 03:28:19 -04:00
Gaoyun Pei
74c5183d38 Add rhel-9 attribute 2024-08-19 02:25:54 -04:00
Brent Barbachem
3a050d6d7c OCPBUGS-34844: Disable repo container-tools before installs openshift-packages 2024-07-31 12:28:09 -04:00
openshift-merge-bot[bot]
78065326c7 Merge pull request #12496 from barbacbd/update-ipsec
OCPBUGS-30802: ipsec: Update the ipsec tasks to ensure that they are idempotent
2024-04-10 13:04:11 +00:00
Brent Barbachem
938528fbb2 Fix package conflict for openshift-hyperkube
**With a recent move away from openshift-hyperkube towards openshift-kubelet
the upgrade process will break as the hyperkube package in 4.15 conflicts with
the kubelet package of 4.16. This fix will remove the hyperkube package if it is
installed. This should be backwards compatible, because this process is run before
the update to reinstall package occurs. In the event that the package was intended
to be on the system it will be reinstalled.
2024-04-04 08:12:25 -04:00
Brent Barbachem
6f79fba3c9 OCPBUGS-30802: ipsec: Update the ipsec tasks to ensure that they are idempotent
** check the number of entries with semanage. If one exists, do not re-run or it could cause install/upgrade failures.
2024-03-29 09:43:56 -04:00
openshift-merge-bot[bot]
aec1964a5b Merge pull request #12495 from sdodson/openshift-kubelet
Switch to openshift-kubelet package
2024-03-26 15:14:55 +00:00
openshift-merge-bot[bot]
2ef36bec17 Merge pull request #12476 from barbacbd/OCPBUGS-22366
OCPBUGS-22366: Restart the openvswitch service on [re]install
2024-03-08 14:11:20 +00:00
Scott Dodson
6a063c4690 Switch to openshift-kubelet package
See https://github.com/openshift/kubernetes/pull/1882

This will likely require some testing. I would expect clusters upgrading
to the new packaging to be fine but still have all of the other packages
installed. Maybe at some point we should come back and remove the other
packages but it doesn't seem imperative now.
2024-02-26 15:06:32 -05:00
Theo Barber-Bany
a59e049615 Adds azure and gcp image credential providers
Install the azure and gcp image registry credential providers, that are
required from 4.16.
2024-02-19 15:09:55 +00:00
Scott Dodson
2956dc04c1 OCPBUGS-29527: Install ose-aws-ecr-image-credential-provider
This is a new package required since 4.14.11
2024-02-15 09:56:11 -05:00
Yuval Kashtan
28cc175bdf ipsec: add chcon to make sure labels are correct 2024-02-08 23:34:52 +02:00
Yuval Kashtan
00c5695544 ipsec: split ipsec tasks to it's own role
and import it into install.yml so it will correctly run in all needed
cases
2024-02-08 23:34:36 +02:00
Yuval Kashtan
f9717d5270 ipsec: fix selinux labels on nss db dir 2024-02-08 17:27:57 +02:00
Yuval Kashtan
80c0dedb21 ipsec: edit /etc/ipsec.conf to modify nssdir
this is needed to align with where RHCOS stores nss db
2024-02-07 18:46:56 +02:00
Yuval Kashtan
16da3defa0 Add and enable ipsec service
this include installing libreswan
and enabling it's systemd service

this is to align with rhcos, see: https://github.com/openshift/os/blob/master/extensions-rhel-9.2.yaml#L14
2024-02-07 02:02:30 +02:00
Brent Barbachem
e80be9dff2 OCPBUGS-22366: Restart the openvswitch service on [re]install
Restart the openvswitch service when installed/upgraded if it exists. This should resolve network
connectivity issues during upgrades.
2024-01-03 12:13:36 -05:00
OpenShift Merge Robot
8ea9a4124e Merge pull request #12467 from barbacbd/OCPBUGS-18703
OCPBUGS-18703: Correct upgrade for conflict packages.
2023-09-27 16:28:31 -04:00
Brent Barbachem
6154dfba01 OCPBUGS-18703: Correct upgrade for conflict packages.
** The yum module was originally having issues with upgrades (conflicts). Yum had a swap but the issues persisted.
A custom workaround was used by downloading RPMs. The process worked except for upgrades. It appeared that the evs-vswitchd daemon
was not correctly restarting causing lost connections during the upgrade process. The DNF module will use the --allowerasing option to
remove and install the package at the same time, avoiding the issue.

** Also noting that there were sometimes issues when the upgrade for openvswitch would upgrade to a package of the same version. This problem
has also been tested and works better with the DNF module.
2023-09-27 10:12:45 -04:00
Brent Barbachem
9a9ba6710e OCPBUGS-18595: Update openvswitch package
** RHCOS in 4.13 bumped to OVS 3.1, we should do the same for RHEL workers as the client side (SDN pods) may soon depend on 3.1 features and 3.1 is known to perfom better.
2023-09-06 13:17:43 -04:00
Gaoyun Pei
17a6b15112 disable the GPG checking of signatures of packages being installed 2023-08-25 02:46:56 -04:00
OpenShift Merge Robot
f783c0c350 Merge pull request #12448 from barbacbd/OCPBUGS-11677
OCPBUGS-11677: Fix package conflicts on upgrade.
2023-05-16 12:40:56 -04:00
OpenShift Merge Robot
fac26a3b5a Merge pull request #12450 from barbacbd/OCPBUGS-13165
OCPBUGS-13167: Fix systemctl status for crio
2023-05-15 12:41:05 -04:00
Brent Barbachem
a4b7678c0e OCPBUGS-13165: Fix systemctl status for crio
** crio was misspelled in the gather_debug playbook
2023-05-11 14:26:38 -04:00
Brent Barbachem
3356c32fef OCPBUGS-5255: exclude kubelet from fixfiles on upgrade
** Original PR merged (https://github.com/openshift/openshift-ansible/pull/12445) but the upgrade
was not correctly applying selinux configuration details. The selinux config is broken out into
another task and imported in install and upgrade tasks.
2023-04-27 12:32:48 -04:00
Brent Barbachem
41abe22e60 OCPBUGS-11677: Fix package conflicts on upgrade.
**Openvswitch 2.1 to 2.17 cause upgrade issues. The package conflicts with itself.
Further it causes issues when the original is removed and the next is attempted
to be installed because openvswitch causes network issues when it is removed.
2023-04-21 08:03:28 -04:00
Patrick Dillon
95dac94ea1 OCPBUGS-5255: exclude kubelet from fixfiles
The node tuning operator and potentially other cluster components
can change the selinux context of the kubelet dir. By adding the
kubelet dir to the fixfiles_exclude_dirs we can prevent that.

Fixes: https://issues.redhat.com/browse/OCPBUGS-5255
2023-04-06 13:09:23 -04:00
Dan Williams
2157e9b447 node: sync OVS version with RHCOS
4.10+ should be OVS 2.17
2023-03-03 09:36:16 -06:00
OpenShift Merge Robot
f24f5553a4 Merge pull request #12393 from kevydotvinu/add-api-int
Consider api-int for openshift_node_bootstrap_server variable
2022-11-29 18:05:10 -05:00
OpenShift Merge Robot
ea4fd31937 Merge pull request #12410 from barbacbd/approve_with_config_attempts
oc csr approver: Configurable number of attempts
2022-11-29 11:24:12 -05:00
Brent Barbachem
a2709a536e oc csr approver: Configurable number of attempts
** Utilizing module_args so that the data can be applied from playbooks.
the new parameter is run_attempts and it is an integer.

** Added a pylint disbale for too many args
2022-11-29 08:43:15 -05:00
OpenShift Merge Robot
f1cc51429d Merge pull request #12419 from barbacbd/OCPBUGS-1583
Update cache before searching for versions:
2022-11-21 15:51:59 -05:00
Yaakov Selkowitz
6f69dc8692 Fix compatibility with ansible-core 2.13 2022-09-29 23:15:14 -04:00
Yaakov Selkowitz
807bdb6f7c Bundle profile_tasks callback from ansible.posix
This is used in the default/test inventories, but as they are also
packaged as samples, it is possible that users will use them too.
2022-09-29 23:13:46 -04:00
Brent Barbachem
0237f5ead3 Update cache before searching for versions:
** The install task will update the yum cache before finding the latest packages.
2022-09-29 11:49:02 -04:00
Yaakov Selkowitz
8acc846b60 Bundle non-core modules 2022-07-19 23:01:42 -04:00
Brent Barbachem
bb00601f88 Scaleup: Increase scaleup attempts in the workbook
** Increased scaleup time by increasing the number of attempts from 30 to 60. This will double the time spent. Decided not to increase wait time because it would require a wait of 40+ seconds between attempts which may look like a frozen process. Instead alert the user every 20 seconds but attempt max of 60 times.
2022-06-16 12:34:43 -04:00
Vinu K
2adef5c555 Change regex to accomodate api-int 2022-06-16 03:22:59 +05:30
OpenShift Merge Robot
66a8fb013d Merge pull request #12390 from barbacbd/Bz_2037626
Bug 2037626: Openshift_nodes: Added version for ignition to use
2022-05-03 16:43:33 -04:00
Jeremiah Stuever
12789aa01d swapoff: resolve issue where fstab and systemd conflict
Prior to this change, there was an error when a swap mount existed in
the fstab and was propigated to a systemd swap unit. This change
modifies the behavior so that the list of systemd swap units to remove
is not obtained until after the fstab changes are made.
2022-04-25 14:50:07 -07:00
Brent Barbachem
74b931b35e Openshift_nodes: Added version for ignition to use
** Forced version 3.2 for ignition. Default was 2.2 and causing issues
when tang encryption is selected (available in 4.9+).
2022-04-25 14:40:28 -04:00
Jeremiah Stuever
86bae5f1b0 swapoff: disable systemd .swap units
This change modifies the behavior of the swapoff module in the
openshift_node role so that it will also disable any .swap units from
systemd.
2022-03-29 18:16:27 -07:00
aleskandro
e370367b98 Adds aarch64 dict to enable the openshift-node role for RHEL ARM Workers 2022-03-09 14:41:16 +00:00
Scott Dodson
aee6e91fb2 Include libseccomp in the list of packages that we ensure are up to date
It looks like runc depends on >= 2.5 even though it just requires
libseccomp.so.2. This will ensure that it's up to date when we install.
2022-03-02 14:59:48 -05:00