|
| 1 | + # check if Cluster Health is good |
| 2 | +- name: Check if cluster operators and nodes are healthy |
| 3 | + include_role: |
| 4 | + name: check-cluster-health |
| 5 | + |
| 6 | +- name: Get worker names |
| 7 | + command: oc get nodes -l node-role.kubernetes.io/worker --no-headers -o custom-columns=NAME:.metadata.name |
| 8 | + register: worker_list |
| 9 | + |
| 10 | +- name: Save to worker list |
| 11 | + set_fact: |
| 12 | + worker: "{{ worker_list.stdout_lines }}" |
| 13 | + |
| 14 | +- name: Check if LSO (Local Storage Operator) is already installed |
| 15 | + shell: | |
| 16 | + oc get csv -n openshift-local-storage -o json | jq -r '.items[] | select(.metadata.name | test("local-storage-operator")) | .status.phase' |
| 17 | + register: lso_csv_status |
| 18 | + changed_when: false |
| 19 | + failed_when: false |
| 20 | + |
| 21 | +- name: Set flag if LSO is installed |
| 22 | + set_fact: |
| 23 | + lso_install_req: "{{ lso_csv_status.stdout != 'Succeeded' }}" |
| 24 | + |
| 25 | +# Install LSO |
| 26 | +- name: Install LSO - Local Storage operator |
| 27 | + include_role: |
| 28 | + name: ocp-lso |
| 29 | + when: lso_install_req |
| 30 | + vars: |
| 31 | + lso_catalogsource_image: "{{ lso_index }}" |
| 32 | + upi_cluster: "{{ cluster_upi }}" |
| 33 | + device_path: "{{ volume_path }}" |
| 34 | + lso_namespace: "openshift-local-storage" |
| 35 | + lso_channel: "stable" |
| 36 | + lso_catalogsource_name: "redhat-operators" |
| 37 | + busybox_image: "quay.io/powercloud/busybox:ubi" |
| 38 | + |
| 39 | +- name: Check if ODF (OpenShift Data Foundation) is already installed |
| 40 | + shell: | |
| 41 | + oc get csv -n openshift-storage -o json | jq -r '.items[] | select(.metadata.name | test("odf-operator")) | .status.phase' |
| 42 | + register: odf_csv_status |
| 43 | + changed_when: false |
| 44 | + failed_when: false |
| 45 | + |
| 46 | +- name: Set flag if ODF is installed |
| 47 | + set_fact: |
| 48 | + odf_install_req: "{{ odf_csv_status.stdout != 'Succeeded' }}" |
| 49 | + |
| 50 | +# ODF installation |
| 51 | +- name: Install ODF - Openshift Data Foundation |
| 52 | + include_role: |
| 53 | + name: ocp-odf-operator |
| 54 | + when: odf_install_req |
| 55 | + vars: |
| 56 | + odf_catalogsource_image: "{{ odf_index }}" |
| 57 | + update_channel: "{{ odf_channel }}" |
| 58 | + test_pod_image: "quay.io/powercloud/nginx-unprivileged:latest" |
| 59 | + |
| 60 | +# Creating Project for Quay |
| 61 | +- name: Create quay-registry project |
| 62 | + k8s: |
| 63 | + state: present |
| 64 | + definition: |
| 65 | + apiVersion: v1 |
| 66 | + kind: Namespace |
| 67 | + metadata: |
| 68 | + name: "{{ quay_registry_namespace }}" |
| 69 | + annotations: |
| 70 | + openshift.io/node-selector: 'node-role.kubernetes.io/infra=' |
| 71 | + openshift.io/description: "Red Hat Quay Enterprise Container Image Repository" |
| 72 | + openshift.io/display-name: "Quay" |
| 73 | + scheduler.alpha.kubernetes.io/defaultTolerations: >- |
| 74 | + [{"operator": "Exists", "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra"}] |
| 75 | +
|
| 76 | +- name: Switch to quay-registry project |
| 77 | + command: oc project {{ quay_registry_namespace }} |
| 78 | + |
| 79 | +# Custom ImageContentSourcePolicy and CatalogSource |
| 80 | +- name: Create ImageContentSourcePolicy and CatalogSource |
| 81 | + block: |
| 82 | + - name: Include the global-secret-update role |
| 83 | + include_role: |
| 84 | + name: global-secret-update |
| 85 | + |
| 86 | + - name: Include role to create ImageContentSourcePolicy and CatalogSource |
| 87 | + include_role: |
| 88 | + name: set-custom-catalogsource |
| 89 | + vars: |
| 90 | + custom_catalogsource_name: "{{ quay_catalogsource_name }}" |
| 91 | + custom_catalogsource_display_name: "Custom Quay CatalogSource" |
| 92 | + custom_catalogsource_image: "{{ quay_catalogsource_image }}" |
| 93 | + when: quay_catalogsource_image is defined or quay_catalogsource_image != '' and quay_catalogsource_image != None |
| 94 | + |
| 95 | +- name: Use default CatalogSource if no custom image is provided |
| 96 | + set_fact: |
| 97 | + quay_catalogsource_name: "redhat-operators" |
| 98 | + when: quay_catalogsource_image is undefined or quay_catalogsource_image == '' or quay_catalogsource_image == None |
| 99 | + |
| 100 | +- name: Check if Quay CatalogSource exists and is READY |
| 101 | + shell: > |
| 102 | + oc get catalogsource {{ quay_catalogsource_name }} -n openshift-marketplace -o jsonpath='{.status.connectionState.lastObservedState}' |
| 103 | + register: quay_catsrc_check |
| 104 | + retries: 10 |
| 105 | + delay: 15 |
| 106 | + until: quay_catsrc_check.rc == 0 |
| 107 | + changed_when: false |
| 108 | + failed_when: quay_catsrc_check.rc != 0 |
| 109 | + |
| 110 | +- name: Debug output for Quay CatalogSource check |
| 111 | + debug: |
| 112 | + msg: "Quay CatalogSource '{{ quay_catalogsource_name }}' is present and in Ready state." |
| 113 | + |
| 114 | +# Label and taint infra nodes |
| 115 | +- name: Label and taint infra nodes |
| 116 | + shell: | |
| 117 | + oc label node {{ worker[0] }} node-role.kubernetes.io/infra= |
| 118 | + oc adm taint nodes {{ worker[0] }} node-role.kubernetes.io/infra:NoSchedule --overwrite |
| 119 | + oc label node {{ worker[1] }} node-role.kubernetes.io/infra= |
| 120 | + oc adm taint nodes {{ worker[1] }} node-role.kubernetes.io/infra:NoSchedule --overwrite |
| 121 | + args: |
| 122 | + executable: /bin/bash |
| 123 | + |
| 124 | +- name: Create OperatorGroup for Quay |
| 125 | + k8s: |
| 126 | + state: present |
| 127 | + definition: |
| 128 | + apiVersion: operators.coreos.com/v1 |
| 129 | + kind: OperatorGroup |
| 130 | + metadata: |
| 131 | + name: quay-operator-group |
| 132 | + namespace: "{{ quay_registry_namespace }}" |
| 133 | + spec: {} |
| 134 | + |
| 135 | +- name: Create Quay Operator Subscription |
| 136 | + k8s: |
| 137 | + state: present |
| 138 | + definition: |
| 139 | + apiVersion: operators.coreos.com/v1alpha1 |
| 140 | + kind: Subscription |
| 141 | + metadata: |
| 142 | + name: quay-operator |
| 143 | + namespace: "{{ quay_registry_namespace }}" |
| 144 | + spec: |
| 145 | + channel: "{{ quay_operator_channel }}" |
| 146 | + name: quay-operator |
| 147 | + source: "{{ quay_catalogsource_name }}" |
| 148 | + sourceNamespace: openshift-marketplace |
| 149 | + installPlanApproval: Automatic |
| 150 | + |
| 151 | +- name: Check if Quay Operator CSV is in 'Succeeded' phase |
| 152 | + shell: | |
| 153 | + oc get csv -n {{ quay_registry_namespace }} --no-headers | grep quay-operator | grep Succeeded |
| 154 | + register: csv_status |
| 155 | + retries: 10 |
| 156 | + delay: 30 |
| 157 | + until: csv_status.stdout != "" and csv_status.stderr == "" |
| 158 | + failed_when: csv_status.rc != 0 |
| 159 | + |
| 160 | +- name: Debug Quay operator CSV status |
| 161 | + debug: |
| 162 | + msg: "Quay operator CSV has successfully reached 'Succeeded' state." |
| 163 | + |
| 164 | +- name: Generate config.yaml from template |
| 165 | + template: |
| 166 | + src: config.yaml.j2 |
| 167 | + dest: /tmp/config.yaml |
| 168 | + |
| 169 | +# Create config-bundle-secret from existing config.yaml file |
| 170 | +- name: Create config-bundle-secret from rendered config.yaml |
| 171 | + shell: | |
| 172 | + oc create secret generic config-bundle-secret \ |
| 173 | + --from-file=config.yaml=/tmp/config.yaml \ |
| 174 | + -n {{ quay_registry_namespace }} \ |
| 175 | + --dry-run=client -o yaml | oc apply -f - |
| 176 | + args: |
| 177 | + executable: /bin/bash |
| 178 | + |
| 179 | +# Apply QuayRegistry CR from quay-registry.yaml |
| 180 | +- name: Apply QuayRegistry CR from quay-registry.yaml |
| 181 | + shell: oc apply -f quay-registry.yaml -n {{ quay_registry_namespace }} |
| 182 | + args: |
| 183 | + chdir: "{{ role_path }}/files" |
| 184 | + register: create_quayregistry |
| 185 | + |
| 186 | +- name: Debug QuayRegistry creation output |
| 187 | + debug: |
| 188 | + var: create_quayregistry.stdout |
| 189 | + |
| 190 | +- name: Wait a bit for pods to be created |
| 191 | + pause: |
| 192 | + seconds: 30 |
| 193 | + |
| 194 | +- name: Wait until all pods are Running or Completed in {{ quay_registry_namespace }} |
| 195 | + shell: | |
| 196 | + set -eo pipefail |
| 197 | + oc get pods -n {{ quay_registry_namespace }} -o json | \ |
| 198 | + jq -r '.items[] | [.metadata.name, .status.phase, (.status.containerStatuses[0].ready // false)] | @tsv' | \ |
| 199 | + awk ' |
| 200 | + { |
| 201 | + if ($2 != "Running" && $2 != "Succeeded") { |
| 202 | + print "WAITING: Pod", $1, "is in phase", $2; |
| 203 | + exit 1; |
| 204 | + } |
| 205 | + if ($2 == "Running" && $3 != "true") { |
| 206 | + print "WAITING: Pod", $1, "is Running but not Ready"; |
| 207 | + exit 1; |
| 208 | + } |
| 209 | + } |
| 210 | + ' |
| 211 | + register: quay_pods_check |
| 212 | + retries: 40 # 10 minutes max wait |
| 213 | + delay: 15 |
| 214 | + until: quay_pods_check.rc == 0 |
0 commit comments