Generalize variable names in installer

secret_key
This commit is contained in:
Shane McDonald 2018-04-11 22:53:20 -04:00
parent e4a6fc55df
commit 479a56c6d3
10 changed files with 96 additions and 97 deletions

View File

@ -12,12 +12,12 @@ dockerhub_version=latest
# Openshift Install
# Will need to set -e openshift_password=developer -e docker_registry_password=$(oc whoami -t)
# openshift_host=127.0.0.1:8443
# awx_openshift_project=awx
# openshift_project=awx
# openshift_user=developer
# Kubernetes Install
# kubernetes_context=test-cluster
# awx_kubernetes_namespace=awx
# kubernetes_namespace=awx
# Kubernetes and Openshift Install Resource Requests
# This is the request value for a pod's "task" container, which is the container
@ -26,8 +26,8 @@ dockerhub_version=latest
# in the pod
# A cpu_request of 1500 is 1.5 cores for the task container
# A mem_request of 2 is for 2 gigabytes of memory for the task container
# awx_task_cpu_request=1500
# awx_task_mem_request=2
# task_cpu_request=1500
# task_mem_request=2
# Common Docker parameters
postgres_data_dir=/tmp/pgdocker
@ -82,7 +82,7 @@ pg_port=5432
# AWX Secret key
# It's *very* important that this stay the same between upgrades or you will lose the ability to decrypt
# your credentials
awx_secret_key=awxsecret
secret_key=awxsecret
# Build AWX with official logos
# Requires cloning awx-logos repo into the project root.

View File

@ -1,10 +1,10 @@
# check_openshift.yml
---
- name: awx_openshift_project should be defined
- name: openshift_project should be defined
assert:
that:
- awx_openshift_project is defined and awx_openshift_project != ''
msg: "Set the value of 'awx_openshift_project' in the inventory file."
- openshift_project is defined and openshift_project != ''
msg: "Set the value of 'openshift_project' in the inventory file."
- name: openshift_user should be defined
assert:

View File

@ -1,15 +1,15 @@
---
awx_web_mem_request: 1
awx_web_cpu_request: 500
web_mem_request: 1
web_cpu_request: 500
awx_task_mem_request: 2
awx_task_cpu_request: 1500
task_mem_request: 2
task_cpu_request: 1500
awx_rabbitmq_mem_request: 2
awx_rabbitmq_cpu_request: 500
rabbitmq_mem_request: 2
rabbitmq_cpu_request: 500
awx_memcached_mem_request: 1
awx_memcached_cpu_request: 500
memcached_mem_request: 1
memcached_cpu_request: 500
rabbitmq_version: "3.7.4"

View File

@ -2,15 +2,15 @@
shell: "kubectl config set-context {{ kubernetes_context }}"
- name: Get Namespace Detail
shell: "kubectl get namespace {{ awx_kubernetes_namespace }}"
shell: "kubectl get namespace {{ kubernetes_namespace }}"
register: namespace_details
ignore_errors: yes
- name: Create AWX Kubernetes Project
shell: "kubectl create namespace {{ awx_kubernetes_namespace }}"
shell: "kubectl create namespace {{ kubernetes_namespace }}"
when: namespace_details.rc != 0
- name: Set postgresql service name
set_fact:
postgresql_service_name: "{{ awx_kubernetes_namespace }}-postgresql"
postgresql_service_name: "{{ kubernetes_namespace }}-postgresql"
when: "pg_hostname is not defined or pg_hostname == ''"

View File

@ -5,7 +5,7 @@
- name: Set kubernetes base path
set_fact:
kubernetes_base_path: "{{ awx_local_base_config_path|default('/tmp') }}/awx-config"
kubernetes_base_path: "{{ local_base_config_path|default('/tmp') }}/{{ kubernetes_deployment_name }}-config"
- include_tasks: openshift.yml
when: openshift_host is defined
@ -18,7 +18,7 @@
kubectl_or_oc: "{{ openshift_oc_bin if openshift_oc_bin is defined else 'kubectl' }}"
- name: Get Postgres Service Detail
shell: "{{ kubectl_or_oc }} describe svc {{ postgresql_service_name }} -n {{ awx_kubernetes_namespace }}"
shell: "{{ kubectl_or_oc }} describe svc {{ postgresql_service_name }} -n {{ kubernetes_namespace }}"
register: postgres_svc_details
ignore_errors: yes
when: "pg_hostname is not defined or pg_hostname == ''"
@ -31,24 +31,24 @@
- name: Set image names
block:
- name: Enable image stream lookups for awx images
shell: "{{ openshift_oc_bin }} set image-lookup --all -n {{ awx_kubernetes_namespace }}"
shell: "{{ openshift_oc_bin }} set image-lookup --all -n {{ kubernetes_namespace }}"
when: openshift_host is defined
- name: Set full web image path
set_fact:
awx_web_kubernetes_image: "{{ awx_web_image }}:{{ awx_version }}"
when: awx_web_kubernetes_image is not defined
web_kubernetes_image: "{{ web_image }}:{{ version }}"
when: web_kubernetes_image is not defined
- name: Set full task image path
set_fact:
awx_task_kubernetes_image: "{{ awx_task_image }}:{{ awx_version }}"
when: awx_task_kubernetes_image is not defined
task_kubernetes_image: "{{ task_image }}:{{ version }}"
when: task_kubernetes_image is not defined
when: dockerhub_base is not defined
- name: Set DockerHub Image Paths
set_fact:
awx_web_kubernetes_image: "{{ dockerhub_base }}/awx_web:{{ dockerhub_version }}"
awx_task_kubernetes_image: "{{ dockerhub_base }}/awx_task:{{ dockerhub_version }}"
web_kubernetes_image: "{{ dockerhub_base }}/awx_web:{{ dockerhub_version }}"
task_kubernetes_image: "{{ dockerhub_base }}/awx_task:{{ dockerhub_version }}"
when: dockerhub_base is defined
- name: Deploy PostgreSQL (OpenShift)
@ -69,7 +69,7 @@
-e POSTGRESQL_PASSWORD={{ pg_password }} \
-e POSTGRESQL_DATABASE={{ pg_database }} \
-e POSTGRESQL_VERSION=9.5 \
-n {{ awx_kubernetes_namespace }}
-n {{ kubernetes_namespace }}
register: openshift_pg_activate
when:
- pg_hostname is not defined or pg_hostname == ''
@ -78,7 +78,7 @@
- name: Deploy and Activate Postgres (Kubernetes)
shell: |
helm install --name awx --namespace {{ awx_kubernetes_namespace }} \
helm install --name awx --namespace {{ kubernetes_namespace }} \
--set postgresUser={{ pg_username }} \
--set postgresPassword={{ pg_password }} \
--set postgresDatabase={{ pg_database }} \
@ -92,7 +92,7 @@
- name: Set postgresql hostname to helm package service
set_fact:
pg_hostname: awx-postgresql
pg_hostname: "{{ kubernetes_deployment_name }}-postgresql"
when:
- pg_hostname is not defined or pg_hostname == ''
- kubernetes_context is defined
@ -107,7 +107,6 @@
path: "{{ kubernetes_base_path }}"
state: directory
- name: Template Kubernetes AWX Config
template:
src: configmap.yml.j2

View File

@ -3,7 +3,7 @@
- name: Set kubernetes_namespace
set_fact:
kubernetes_namespace: "{{ awx_openshift_project }}"
kubernetes_namespace: "{{ openshift_project }}"
- name: Ensure workspace directories exist
file:
@ -34,18 +34,18 @@
no_log: true
- name: Get Project Detail
shell: "{{ openshift_oc_bin }} get project {{ awx_openshift_project }}"
shell: "{{ openshift_oc_bin }} get project {{ openshift_project }}"
register: project_details
ignore_errors: yes
- name: Create AWX Openshift Project
shell: "{{ openshift_oc_bin }} new-project {{ awx_openshift_project }}"
shell: "{{ openshift_oc_bin }} new-project {{ openshift_project }}"
when: project_details.rc != 0
- name: Ensure PostgreSQL PVC is available
block:
- name: Check PVC status
command: "{{ openshift_oc_bin }} get pvc {{ openshift_pg_pvc_name }} -n {{ awx_openshift_project }} -o=jsonpath='{.status.phase}'"
command: "{{ openshift_oc_bin }} get pvc {{ openshift_pg_pvc_name }} -n {{ openshift_project }} -o=jsonpath='{.status.phase}'"
register: pg_pvc_status
ignore_errors: yes
@ -53,7 +53,7 @@
assert:
that:
- pg_pvc_status.stdout == "Bound"
msg: "Ensure a PVC named '{{ openshift_pg_pvc_name }}' is created and bound in the '{{ awx_openshift_project }}' namespace."
msg: "Ensure a PVC named '{{ openshift_pg_pvc_name }}' is created and bound in the '{{ openshift_project }}' namespace."
when:
- pg_hostname is not defined or pg_hostname == ''
- openshift_pg_emptydir is defined and (openshift_pg_emptydir | bool) != true

View File

@ -1,33 +1,33 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: awx-config
namespace: {{ awx_kubernetes_namespace }}
name: {{ kubernetes_deployment_name }}-config
namespace: {{ kubernetes_namespace }}
data:
secret_key: {{ awx_secret_key }}
awx_settings: |
secret_key: {{ secret_key }}
{{ kubernetes_deployment_name }}_settings: |
import os
import socket
ADMINS = ()
# Container environments don't like chroots
AWX_PROOT_ENABLED = False
# Automatically deprovision pods that go offline
AWX_AUTO_DEPROVISION_INSTANCES = True
SYSTEM_TASK_ABS_CPU = {{ ((awx_task_cpu_request|int / 1000) * 4)|int }}
SYSTEM_TASK_ABS_MEM = {{ ((awx_task_mem_request|int * 1024) / 100)|int }}
SYSTEM_TASK_ABS_CPU = {{ ((task_cpu_request|int / 1000) * 4)|int }}
SYSTEM_TASK_ABS_MEM = {{ ((task_mem_request|int * 1024) / 100)|int }}
#Autoprovisioning should replace this
CLUSTER_HOST_ID = socket.gethostname()
SYSTEM_UUID = '00000000-0000-0000-0000-000000000000'
SESSION_COOKIE_SECURE = False
CSRF_COOKIE_SECURE = False
CSRF_COOKIE_SECURE = False
REMOTE_HOST_HEADERS = ['HTTP_X_FORWARDED_FOR']
STATIC_ROOT = '/var/lib/awx/public/static'
PROJECTS_ROOT = '/var/lib/awx/projects'
JOBOUTPUT_ROOT = '/var/lib/awx/job_status'
@ -42,13 +42,13 @@ data:
EMAIL_HOST_USER = ''
EMAIL_HOST_PASSWORD = ''
EMAIL_USE_TLS = False
LOGGING['handlers']['console'] = {
'()': 'logging.StreamHandler',
'level': 'DEBUG',
'formatter': 'simple',
}
LOGGING['loggers']['django.request']['handlers'] = ['console']
LOGGING['loggers']['rest_framework.request']['handlers'] = ['console']
LOGGING['loggers']['awx']['handlers'] = ['console']
@ -68,7 +68,7 @@ data:
LOGGING['handlers']['rbac_migrations'] = {'class': 'logging.NullHandler'}
LOGGING['handlers']['system_tracking_migrations'] = {'class': 'logging.NullHandler'}
LOGGING['handlers']['management_playbooks'] = {'class': 'logging.NullHandler'}
DATABASES = {
'default': {
'ATOMIC_REQUESTS': True,

View File

@ -2,7 +2,7 @@
kind: Service
apiVersion: v1
metadata:
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
name: rabbitmq
labels:
app: rabbitmq
@ -26,7 +26,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: rabbitmq-config
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
data:
enabled_plugins: |
[rabbitmq_management,rabbitmq_peer_discovery_k8s].
@ -52,7 +52,7 @@ apiVersion: v1
kind: ServiceAccount
metadata:
name: rabbitmq
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
{% if kubernetes_context is defined %}
---
@ -60,7 +60,7 @@ kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: endpoint-reader
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
rules:
- apiGroups: [""]
resources: ["endpoints"]
@ -70,7 +70,7 @@ kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: endpoint-reader
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
subjects:
- kind: ServiceAccount
name: rabbitmq
@ -86,7 +86,7 @@ kind: Role
apiVersion: v1
metadata:
name: endpoint-reader
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
rules:
- apiGroups: [""]
resources: ["endpoints"]
@ -96,16 +96,16 @@ kind: RoleBinding
apiVersion: v1
metadata:
name: endpoint-reader
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
roleRef:
name: endpoint-reader
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
subjects:
- kind: ServiceAccount
name: rabbitmq
namespace: {{ awx_kubernetes_namespace }}
namespace: {{ kubernetes_namespace }}
userNames:
- system:serviceaccount:{{ awx_kubernetes_namespace }}:rabbitmq
- system:serviceaccount:{{ kubernetes_namespace }}:rabbitmq
{% endif %}
---
@ -124,30 +124,30 @@ spec:
template:
metadata:
labels:
name: awx-web-deploy
name: {{ kubernetes_deployment_name }}-web-deploy
service: django
app: rabbitmq
spec:
serviceAccountName: rabbitmq
containers:
- name: awx-web
image: {{ awx_web_kubernetes_image }}
- name: {{ kubernetes_deployment_name }}-web
image: {{ web_kubernetes_image }}
imagePullPolicy: Always
ports:
- containerPort: 8052
volumeMounts:
- mountPath: /etc/tower
name: awx-application-config
name: {{ kubernetes_deployment_name }}-application-config
resources:
requests:
memory: "{{ awx_web_mem_request }}Gi"
cpu: "{{ awx_web_cpu_request }}m"
- name: awx-celery
image: {{ awx_task_kubernetes_image }}
memory: "{{ web_mem_request }}Gi"
cpu: "{{ web_cpu_request }}m"
- name: {{ kubernetes_deployment_name }}-celery
image: {{ task_kubernetes_image }}
imagePullPolicy: Always
volumeMounts:
- mountPath: /etc/tower
name: awx-application-config
name: {{ kubernetes_deployment_name }}-application-config
env:
- name: DATABASE_USER
value: {{ pg_username }}
@ -169,9 +169,9 @@ spec:
value: {{ default_admin_password|default('password') }}
resources:
requests:
memory: "{{ awx_task_mem_request }}Gi"
cpu: "{{ awx_task_cpu_request }}m"
- name: awx-rabbit
memory: "{{ task_mem_request }}Gi"
cpu: "{{ task_cpu_request }}m"
- name: {{ kubernetes_deployment_name }}-rabbit
image: ansible/awx_rabbitmq:{{ rabbitmq_version }}
imagePullPolicy: Always
ports:
@ -209,20 +209,20 @@ spec:
mountPath: /etc/rabbitmq
resources:
requests:
memory: "{{ awx_rabbitmq_mem_request }}Gi"
cpu: "{{ awx_rabbitmq_cpu_request }}m"
- name: awx-memcached
memory: "{{ rabbitmq_mem_request }}Gi"
cpu: "{{ rabbitmq_cpu_request }}m"
- name: {{ kubernetes_deployment_name }}-memcached
image: memcached
resources:
requests:
memory: "{{ awx_memcached_mem_request }}Gi"
cpu: "{{ awx_memcached_cpu_request }}m"
memory: "{{ memcached_mem_request }}Gi"
cpu: "{{ memcached_cpu_request }}m"
volumes:
- name: awx-application-config
- name: {{ kubernetes_deployment_name }}-application-config
configMap:
name: awx-config
name: {{ kubernetes_deployment_name }}-config
items:
- key: awx_settings
- key: {{ kubernetes_deployment_name }}_settings
path: settings.py
- key: secret_key
path: SECRET_KEY
@ -238,10 +238,10 @@ spec:
apiVersion: v1
kind: Service
metadata:
name: awx-web-svc
namespace: {{ awx_kubernetes_namespace }}
name: {{ kubernetes_deployment_name }}-web-svc
namespace: {{ kubernetes_namespace }}
labels:
name: awx-web-svc
name: {{ kubernetes_deployment_name }}-web-svc
spec:
type: "NodePort"
ports:
@ -249,15 +249,15 @@ spec:
port: 80
targetPort: 8052
selector:
name: awx-web-deploy
name: {{ kubernetes_deployment_name }}-web-deploy
---
apiVersion: v1
kind: Service
metadata:
name: awx-rmq-mgmt
namespace: {{ awx_kubernetes_namespace }}
name: {{ kubernetes_deployment_name }}-rmq-mgmt
namespace: {{ kubernetes_namespace }}
labels:
name: awx-rmq-mgmt
name: {{ kubernetes_deployment_name }}-rmq-mgmt
spec:
type: ClusterIP
ports:
@ -265,17 +265,17 @@ spec:
port: 15672
targetPort: 15672
selector:
name: awx-web-deploy
name: {{ kubernetes_deployment_name }}-web-deploy
{% if kubernetes_context is defined %}
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: awx-web-svc
namespace: {{ awx_kubernetes_namespace }}
name: {{ kubernetes_deployment_name }}-web-svc
namespace: {{ kubernetes_namespace }}
spec:
backend:
serviceName: awx-web-svc
serviceName: {{ kubernetes_deployment_name }}-web-svc
servicePort: 80
{% endif %}
{% if openshift_host is defined %}
@ -283,8 +283,8 @@ spec:
apiVersion: v1
kind: Route
metadata:
name: awx-web-svc
namespace: {{ awx_kubernetes_namespace }}
name: {{ kubernetes_deployment_name }}-web-svc
namespace: {{ kubernetes_namespace }}
spec:
port:
targetPort: http
@ -293,7 +293,7 @@ spec:
termination: edge
to:
kind: Service
name: awx-web-svc
name: {{ kubernetes_deployment_name }}-web-svc
weight: 100
wildcardPolicy: None
{% endif %}

View File

@ -96,7 +96,7 @@
http_proxy: "{{ http_proxy | default('') }}"
https_proxy: "{{ https_proxy | default('') }}"
no_proxy: "{{ no_proxy | default('') }}"
SECRET_KEY: "{{ awx_secret_key }}"
SECRET_KEY: "{{ secret_key }}"
DATABASE_NAME: "{{ pg_database }}"
DATABASE_USER: "{{ pg_username }}"
DATABASE_PASSWORD: "{{ pg_password }}"
@ -132,7 +132,7 @@
http_proxy: "{{ http_proxy | default('') }}"
https_proxy: "{{ https_proxy | default('') }}"
no_proxy: "{{ no_proxy | default('') }}"
SECRET_KEY: "{{ awx_secret_key }}"
SECRET_KEY: "{{ secret_key }}"
DATABASE_NAME: "{{ pg_database }}"
DATABASE_USER: "{{ pg_username }}"
DATABASE_PASSWORD: "{{ pg_password }}"

View File

@ -46,7 +46,7 @@ services:
http_proxy: {{ http_proxy | default('') }}
https_proxy: {{ https_proxy | default('') }}
no_proxy: {{ no_proxy | default('') }}
SECRET_KEY: {{ awx_secret_key }}
SECRET_KEY: {{ secret_key }}
DATABASE_NAME: {{ pg_database }}
DATABASE_USER: {{ pg_username }}
DATABASE_PASSWORD: {{ pg_password }}
@ -105,7 +105,7 @@ services:
http_proxy: {{ http_proxy | default('') }}
https_proxy: {{ https_proxy | default('') }}
no_proxy: {{ no_proxy | default('') }}
SECRET_KEY: {{ awx_secret_key }}
SECRET_KEY: {{ secret_key }}
DATABASE_NAME: {{ pg_database }}
DATABASE_USER: {{ pg_username }}
DATABASE_PASSWORD: {{ pg_password }}