Nicolas Massé
9 years ago
14 changed files with 231 additions and 90 deletions
@ -1,3 +1,5 @@ |
|||
--- |
|||
openshift_cluster_dns: app.openshift.test |
|||
dns_suffix: openshift.test |
|||
openshift_version: 3.4 |
|||
router_stats_password: redhat |
|||
|
|||
@ -0,0 +1,36 @@ |
|||
--- |
|||
|
|||
- name: Make sure nfs-utils is installed |
|||
yum: name=nfs-utils state=installed |
|||
|
|||
- name: set virt_use_nfs to 1 |
|||
command: setsebool -P virt_use_nfs 1 |
|||
|
|||
- name: Create a directory for NFS storage |
|||
file: path=/openshift-storage state=directory owner=nfsnobody group=nfsnobody mode=0777 |
|||
|
|||
- name: Fill /etc/exports |
|||
template: dest=/etc/exports src=exports |
|||
|
|||
- name: Start nfs-server |
|||
service: name=nfs-server state=started enabled=yes |
|||
|
|||
- name: Add an iptable rule to allow port 2049 (tcp) from other hosts |
|||
lineinfile: dest=/etc/sysconfig/iptables regexp="^-A INPUT -p tcp .*--dport 2049" line="-A INPUT -p tcp -m state --state NEW -m tcp --dport 2049 -j ACCEPT" insertafter="-A INPUT -i lo -j ACCEPT" |
|||
tags: iptables |
|||
|
|||
- name: Add an iptable rule to allow port 2049 (udp) from other hosts |
|||
lineinfile: dest=/etc/sysconfig/iptables line="-A INPUT -p udp --dport 2049 -j ACCEPT" insertafter="-A INPUT -i lo -j ACCEPT" |
|||
tags: iptables |
|||
|
|||
- name: Add an iptable rule to allow port 111 (tcp) from other hosts |
|||
lineinfile: dest=/etc/sysconfig/iptables regexp="^-A INPUT -p tcp .*--dport 111" line="-A INPUT -p tcp -m state --state NEW -m tcp --dport 111 -j ACCEPT" insertafter="-A INPUT -i lo -j ACCEPT" |
|||
tags: iptables |
|||
|
|||
- name: Add an iptable rule to allow port 111 (udp) from other hosts |
|||
lineinfile: dest=/etc/sysconfig/iptables line="-A INPUT -p udp --dport 111 -j ACCEPT" insertafter="-A INPUT -i lo -j ACCEPT" |
|||
tags: iptables |
|||
|
|||
- name: Restart iptables |
|||
service: name=iptables enabled=yes state=restarted |
|||
tags: iptables |
|||
@ -0,0 +1 @@ |
|||
/openshift-storage *(rw,all_squash) |
|||
@ -1,59 +1,7 @@ |
|||
--- |
|||
|
|||
# install atomic-openshift-utils |
|||
# run atomic-openshift-installer install |
|||
# check answer file in ~/.config/openshift/installer.cfg.yml |
|||
- name: Fill-in the ansible inventory file on the admin server |
|||
template: src=ansible-hosts dest=/etc/ansible/hosts |
|||
|
|||
# oc label node master1.example.com region="infra" zone="na" |
|||
# oc label node infranode1.example.com region="infra" zone="infranodes" |
|||
# oc label node node1.example.com region="primary" zone="east" |
|||
# oc label node node2.example.com region="primary" zone="west" |
|||
|
|||
#oadm registry --config=/etc/origin/master/admin.kubeconfig \ |
|||
# --service-account=registry \ |
|||
# --selector='region=infra' |
|||
# --mount-host=<path> |
|||
|
|||
# deploy openshift3/ose-haproxy-router |
|||
|
|||
#oc create|delete -f \ |
|||
# examples/image-streams/image-streams-rhel7.json \ |
|||
# -n openshift |
|||
|
|||
#oc create|delete -f \ |
|||
# examples/xpaas-streams/jboss-image-streams.json |
|||
# -n openshift |
|||
|
|||
#oc create -f \ |
|||
# examples/db-templates -n openshift |
|||
|
|||
#oc create|delete -f \ |
|||
# examples/quickstart-templates -n openshift |
|||
|
|||
{ |
|||
"apiVersion": "v1", |
|||
"kind": "PersistentVolume", |
|||
"metadata": { |
|||
"name": "pv0001" |
|||
}, |
|||
"spec": { |
|||
"capacity": { |
|||
"storage": "5Gi" |
|||
}, |
|||
"accessModes": [ "ReadWriteOnce" ], |
|||
"nfs": { |
|||
"path": "/tmp", |
|||
"server": "172.17.0.2" |
|||
}, |
|||
"persistentVolumeReclaimPolicy": "Recycle" |
|||
} |
|||
} |
|||
|
|||
# setsebool -P virt_use_nfs 1 |
|||
|
|||
# /example_fs *(rw,all_squash) (in /etc/exports) |
|||
|
|||
# chown -R nfsnobody:nfsnobody /example_fs |
|||
# chmod 777 |
|||
|
|||
# see https://github.com/openshift/openshift-ansible/tree/master/roles/kube_nfs_volumes |
|||
- name: Run the OpenShift installation playbook |
|||
fail: msg="run 'ansible-playbook /usr/share/ansible/openshift-ansible/playbooks/byo/config.yml' on the admin node" |
|||
|
|||
@ -0,0 +1,55 @@ |
|||
[OSEv3:children] |
|||
masters |
|||
nodes |
|||
nfs |
|||
|
|||
[OSEv3:vars] |
|||
ansible_ssh_user=redhat |
|||
ansible_become=yes # Use SUDO |
|||
deployment_type=openshift-enterprise |
|||
openshift_release={{ openshift_version }} |
|||
|
|||
openshift_master_cluster_method=native |
|||
openshift_master_cluster_hostname={{ hostvars[groups['masters'][0]]['inventory_hostname'] }} |
|||
openshift_master_cluster_public_hostname={{ hostvars[groups['masters'][0]]['inventory_hostname'] }} |
|||
|
|||
os_sdn_network_plugin_name='redhat/openshift-ovs-multitenant' |
|||
|
|||
openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider', 'filename': '/etc/origin/master/htpasswd'}] |
|||
#openshift_master_htpasswd_users={'andrew': '$apr1$cHkRDw5u$eU/ENgeCdo/ADmHF7SZhP/', 'marina': '$apr1$cHkRDw5u$eU/ENgeCdo/ADmHF7SZhP/' |
|||
|
|||
# default project node selector |
|||
osm_default_node_selector='region=primary' |
|||
openshift_hosted_router_selector='region=infra' |
|||
openshift_hosted_router_replicas=1 |
|||
#openshift_hosted_router_certificate={"certfile": "/path/to/router.crt", "keyfile": "/path/to/router.key", "cafile": "/path/to/router-ca.crt"} |
|||
openshift_hosted_registry_selector='region=infra' |
|||
openshift_hosted_registry_replicas=1 |
|||
|
|||
openshift_master_default_subdomain={{ openshift_cluster_dns }} |
|||
|
|||
#openshift_use_dnsmasq=False |
|||
#openshift_node_dnsmasq_additional_config_file=/home/bob/ose-dnsmasq.conf |
|||
|
|||
openshift_hosted_registry_storage_kind=nfs |
|||
openshift_hosted_registry_storage_access_modes=['ReadWriteMany'] |
|||
openshift_hosted_registry_storage_host={{ hostvars[groups['admin'][0]]['inventory_hostname'] }} |
|||
openshift_hosted_registry_storage_nfs_directory=/openshift-storage |
|||
openshift_hosted_registry_storage_volume_name=registry |
|||
openshift_hosted_registry_storage_volume_size=5Gi |
|||
|
|||
[nfs] |
|||
{{ hostvars[groups['admin'][0]]['inventory_hostname'] }} |
|||
|
|||
[masters] |
|||
{% for item in groups['masters'] %} |
|||
{{ hostvars[item]['inventory_hostname'] }} openshift_hostname={{ hostvars[item]['inventory_hostname'] }} openshift_public_hostname={{ hostvars[item]['inventory_hostname'] }} |
|||
{% endfor %} |
|||
|
|||
[nodes] |
|||
{% for item in groups['masters'] %} |
|||
{{ hostvars[item]['inventory_hostname'] }} openshift_hostname={{ hostvars[item]['inventory_hostname'] }} openshift_public_hostname={{ hostvars[item]['inventory_hostname'] }} openshift_node_labels="{'region': '{{ hostvars[item]['region'] }}'}" |
|||
{% endfor %} |
|||
{% for item in groups['nodes'] %} |
|||
{{ hostvars[item]['inventory_hostname'] }} openshift_hostname={{ hostvars[item]['inventory_hostname'] }} openshift_public_hostname={{ hostvars[item]['inventory_hostname'] }} openshift_node_labels="{'region': '{{ hostvars[item]['region'] }}', 'zone': '{{ hostvars[item]['zone'] }}'}" |
|||
{% endfor %} |
|||
@ -0,0 +1,36 @@ |
|||
--- |
|||
|
|||
- name: Make sure infra pods runs in the infra region |
|||
become: no |
|||
command: oc annotate namespace default openshift.io/node-selector='region=infra' --overwrite |
|||
|
|||
- name: Make sure the httpd-tools package is installed (we need htpasswd) |
|||
yum: name=httpd-tools state=installed |
|||
|
|||
- name: Create a few test users |
|||
command: htpasswd -b /etc/origin/master/htpasswd {{ item.login }} {{ item.password }} |
|||
with_items: |
|||
- { login: andrew, password: andrew } |
|||
- { login: marina, password: marina } |
|||
|
|||
- name: Recreate the default router certificate |
|||
command: oadm ca create-server-cert --signer-cert=/etc/origin/master/ca.crt --signer-key=/etc/origin/master/ca.key --signer-serial=/etc/origin/master/ca.serial.txt --hostnames='*.{{ openshift_cluster_dns }}' --cert=/home/{{ ansible_ssh_user }}/cloudapps.crt --key=/home/{{ ansible_ssh_user }}/cloudapps.key |
|||
|
|||
- name: Build the certificate + key bundle |
|||
shell: cat /home/{{ ansible_ssh_user }}/cloudapps.crt /home/{{ ansible_ssh_user }}/cloudapps.key /etc/origin/master/ca.crt > /home/{{ ansible_ssh_user }}/cloudapps.pem |
|||
|
|||
- name: Destroy the existing router |
|||
command: oc delete dc/router svc/router |
|||
become: no |
|||
|
|||
- name: Deploy the new router |
|||
command: oadm router customrouter --replicas=1 --default-cert=/home/{{ ansible_ssh_user }}/cloudapps.pem --service-account=router --stats-password='{{ router_stats_password }}' |
|||
become: no |
|||
|
|||
- name: Ship the PV creation script |
|||
template: src=create-pv.sh dest=/home/{{ ansible_ssh_user }}/create-pv.sh mode=0755 |
|||
become: no |
|||
|
|||
- name: Run the PV creation script |
|||
command: /home/{{ ansible_ssh_user }}/create-pv.sh |
|||
become: no |
|||
@ -0,0 +1,28 @@ |
|||
#!/bin/sh |
|||
|
|||
mkdir -p "$HOME/pvs/" |
|||
|
|||
for size in 1Gi 5Gi 10Gi; do |
|||
for volume in pv{1..25} ; do |
|||
cat << EOF > $HOME/pvs/pv-${size}-${volume}.json |
|||
{ |
|||
"apiVersion": "v1", |
|||
"kind": "PersistentVolume", |
|||
"metadata": { |
|||
"name": "${volume}" |
|||
}, |
|||
"spec": { |
|||
"capacity": { |
|||
"storage": "${size}" |
|||
}, |
|||
"accessModes": [ "ReadWriteOnce" ], |
|||
"nfs": { |
|||
"path": "/openshift-storage/pv-${size}-${volume}", |
|||
"server": "{{ hostvars[groups['admin'][0]]['ansible_default_ipv4']['address'] }}" |
|||
}, |
|||
"persistentVolumeReclaimPolicy": "Recycle" |
|||
} |
|||
} |
|||
EOF |
|||
done |
|||
done |
|||
Loading…
Reference in new issue