diff --git a/installer/inventory b/installer/inventory index 8579258ea9..44b20ccc71 100644 --- a/installer/inventory +++ b/installer/inventory @@ -12,12 +12,12 @@ dockerhub_version=latest # Openshift Install # Will need to set -e openshift_password=developer -e docker_registry_password=$(oc whoami -t) # openshift_host=127.0.0.1:8443 -# awx_openshift_project=awx +# openshift_project=awx # openshift_user=developer # Kubernetes Install # kubernetes_context=test-cluster -# awx_kubernetes_namespace=awx +# kubernetes_namespace=awx # Kubernetes and Openshift Install Resource Requests # This is the request value for a pod's "task" container, which is the container @@ -26,8 +26,8 @@ dockerhub_version=latest # in the pod # A cpu_request of 1500 is 1.5 cores for the task container # A mem_request of 2 is for 2 gigabytes of memory for the task container -# awx_task_cpu_request=1500 -# awx_task_mem_request=2 +# task_cpu_request=1500 +# task_mem_request=2 # Common Docker parameters postgres_data_dir=/tmp/pgdocker @@ -82,7 +82,7 @@ pg_port=5432 # AWX Secret key # It's *very* important that this stay the same between upgrades or you will lose the ability to decrypt # your credentials -awx_secret_key=awxsecret +secret_key=awxsecret # Build AWX with official logos # Requires cloning awx-logos repo into the project root. diff --git a/installer/roles/check_vars/tasks/check_openshift.yml b/installer/roles/check_vars/tasks/check_openshift.yml index aa13ef5a70..38d66b352c 100644 --- a/installer/roles/check_vars/tasks/check_openshift.yml +++ b/installer/roles/check_vars/tasks/check_openshift.yml @@ -1,10 +1,10 @@ # check_openshift.yml --- -- name: awx_openshift_project should be defined +- name: openshift_project should be defined assert: that: - - awx_openshift_project is defined and awx_openshift_project != '' - msg: "Set the value of 'awx_openshift_project' in the inventory file." + - openshift_project is defined and openshift_project != '' + msg: "Set the value of 'openshift_project' in the inventory file." - name: openshift_user should be defined assert: diff --git a/installer/roles/kubernetes/defaults/main.yml b/installer/roles/kubernetes/defaults/main.yml index 18243f8afc..338be64c78 100644 --- a/installer/roles/kubernetes/defaults/main.yml +++ b/installer/roles/kubernetes/defaults/main.yml @@ -1,15 +1,15 @@ --- -awx_web_mem_request: 1 -awx_web_cpu_request: 500 +web_mem_request: 1 +web_cpu_request: 500 -awx_task_mem_request: 2 -awx_task_cpu_request: 1500 +task_mem_request: 2 +task_cpu_request: 1500 -awx_rabbitmq_mem_request: 2 -awx_rabbitmq_cpu_request: 500 +rabbitmq_mem_request: 2 +rabbitmq_cpu_request: 500 -awx_memcached_mem_request: 1 -awx_memcached_cpu_request: 500 +memcached_mem_request: 1 +memcached_cpu_request: 500 rabbitmq_version: "3.7.4" diff --git a/installer/roles/kubernetes/tasks/kubernetes.yml b/installer/roles/kubernetes/tasks/kubernetes.yml index d6fa4f1142..c2f222263a 100644 --- a/installer/roles/kubernetes/tasks/kubernetes.yml +++ b/installer/roles/kubernetes/tasks/kubernetes.yml @@ -2,15 +2,15 @@ shell: "kubectl config set-context {{ kubernetes_context }}" - name: Get Namespace Detail - shell: "kubectl get namespace {{ awx_kubernetes_namespace }}" + shell: "kubectl get namespace {{ kubernetes_namespace }}" register: namespace_details ignore_errors: yes - name: Create AWX Kubernetes Project - shell: "kubectl create namespace {{ awx_kubernetes_namespace }}" + shell: "kubectl create namespace {{ kubernetes_namespace }}" when: namespace_details.rc != 0 - name: Set postgresql service name set_fact: - postgresql_service_name: "{{ awx_kubernetes_namespace }}-postgresql" + postgresql_service_name: "{{ kubernetes_namespace }}-postgresql" when: "pg_hostname is not defined or pg_hostname == ''" diff --git a/installer/roles/kubernetes/tasks/main.yml b/installer/roles/kubernetes/tasks/main.yml index b5dbb43b43..a362c092b5 100644 --- a/installer/roles/kubernetes/tasks/main.yml +++ b/installer/roles/kubernetes/tasks/main.yml @@ -5,7 +5,7 @@ - name: Set kubernetes base path set_fact: - kubernetes_base_path: "{{ awx_local_base_config_path|default('/tmp') }}/awx-config" + kubernetes_base_path: "{{ local_base_config_path|default('/tmp') }}/{{ kubernetes_deployment_name }}-config" - include_tasks: openshift.yml when: openshift_host is defined @@ -18,7 +18,7 @@ kubectl_or_oc: "{{ openshift_oc_bin if openshift_oc_bin is defined else 'kubectl' }}" - name: Get Postgres Service Detail - shell: "{{ kubectl_or_oc }} describe svc {{ postgresql_service_name }} -n {{ awx_kubernetes_namespace }}" + shell: "{{ kubectl_or_oc }} describe svc {{ postgresql_service_name }} -n {{ kubernetes_namespace }}" register: postgres_svc_details ignore_errors: yes when: "pg_hostname is not defined or pg_hostname == ''" @@ -31,24 +31,24 @@ - name: Set image names block: - name: Enable image stream lookups for awx images - shell: "{{ openshift_oc_bin }} set image-lookup --all -n {{ awx_kubernetes_namespace }}" + shell: "{{ openshift_oc_bin }} set image-lookup --all -n {{ kubernetes_namespace }}" when: openshift_host is defined - name: Set full web image path set_fact: - awx_web_kubernetes_image: "{{ awx_web_image }}:{{ awx_version }}" - when: awx_web_kubernetes_image is not defined + web_kubernetes_image: "{{ web_image }}:{{ version }}" + when: web_kubernetes_image is not defined - name: Set full task image path set_fact: - awx_task_kubernetes_image: "{{ awx_task_image }}:{{ awx_version }}" - when: awx_task_kubernetes_image is not defined + task_kubernetes_image: "{{ task_image }}:{{ version }}" + when: task_kubernetes_image is not defined when: dockerhub_base is not defined - name: Set DockerHub Image Paths set_fact: - awx_web_kubernetes_image: "{{ dockerhub_base }}/awx_web:{{ dockerhub_version }}" - awx_task_kubernetes_image: "{{ dockerhub_base }}/awx_task:{{ dockerhub_version }}" + web_kubernetes_image: "{{ dockerhub_base }}/awx_web:{{ dockerhub_version }}" + task_kubernetes_image: "{{ dockerhub_base }}/awx_task:{{ dockerhub_version }}" when: dockerhub_base is defined - name: Deploy PostgreSQL (OpenShift) @@ -69,7 +69,7 @@ -e POSTGRESQL_PASSWORD={{ pg_password }} \ -e POSTGRESQL_DATABASE={{ pg_database }} \ -e POSTGRESQL_VERSION=9.5 \ - -n {{ awx_kubernetes_namespace }} + -n {{ kubernetes_namespace }} register: openshift_pg_activate when: - pg_hostname is not defined or pg_hostname == '' @@ -78,7 +78,7 @@ - name: Deploy and Activate Postgres (Kubernetes) shell: | - helm install --name awx --namespace {{ awx_kubernetes_namespace }} \ + helm install --name awx --namespace {{ kubernetes_namespace }} \ --set postgresUser={{ pg_username }} \ --set postgresPassword={{ pg_password }} \ --set postgresDatabase={{ pg_database }} \ @@ -92,7 +92,7 @@ - name: Set postgresql hostname to helm package service set_fact: - pg_hostname: awx-postgresql + pg_hostname: "{{ kubernetes_deployment_name }}-postgresql" when: - pg_hostname is not defined or pg_hostname == '' - kubernetes_context is defined @@ -107,7 +107,6 @@ path: "{{ kubernetes_base_path }}" state: directory - - name: Template Kubernetes AWX Config template: src: configmap.yml.j2 diff --git a/installer/roles/kubernetes/tasks/openshift.yml b/installer/roles/kubernetes/tasks/openshift.yml index 21f5522c3a..6a93ca9b2c 100644 --- a/installer/roles/kubernetes/tasks/openshift.yml +++ b/installer/roles/kubernetes/tasks/openshift.yml @@ -3,7 +3,7 @@ - name: Set kubernetes_namespace set_fact: - kubernetes_namespace: "{{ awx_openshift_project }}" + kubernetes_namespace: "{{ openshift_project }}" - name: Ensure workspace directories exist file: @@ -34,18 +34,18 @@ no_log: true - name: Get Project Detail - shell: "{{ openshift_oc_bin }} get project {{ awx_openshift_project }}" + shell: "{{ openshift_oc_bin }} get project {{ openshift_project }}" register: project_details ignore_errors: yes - name: Create AWX Openshift Project - shell: "{{ openshift_oc_bin }} new-project {{ awx_openshift_project }}" + shell: "{{ openshift_oc_bin }} new-project {{ openshift_project }}" when: project_details.rc != 0 - name: Ensure PostgreSQL PVC is available block: - name: Check PVC status - command: "{{ openshift_oc_bin }} get pvc {{ openshift_pg_pvc_name }} -n {{ awx_openshift_project }} -o=jsonpath='{.status.phase}'" + command: "{{ openshift_oc_bin }} get pvc {{ openshift_pg_pvc_name }} -n {{ openshift_project }} -o=jsonpath='{.status.phase}'" register: pg_pvc_status ignore_errors: yes @@ -53,7 +53,7 @@ assert: that: - pg_pvc_status.stdout == "Bound" - msg: "Ensure a PVC named '{{ openshift_pg_pvc_name }}' is created and bound in the '{{ awx_openshift_project }}' namespace." + msg: "Ensure a PVC named '{{ openshift_pg_pvc_name }}' is created and bound in the '{{ openshift_project }}' namespace." when: - pg_hostname is not defined or pg_hostname == '' - openshift_pg_emptydir is defined and (openshift_pg_emptydir | bool) != true diff --git a/installer/roles/kubernetes/templates/configmap.yml.j2 b/installer/roles/kubernetes/templates/configmap.yml.j2 index 47eff32c89..871d7af5ab 100644 --- a/installer/roles/kubernetes/templates/configmap.yml.j2 +++ b/installer/roles/kubernetes/templates/configmap.yml.j2 @@ -1,33 +1,33 @@ apiVersion: v1 kind: ConfigMap metadata: - name: awx-config - namespace: {{ awx_kubernetes_namespace }} + name: {{ kubernetes_deployment_name }}-config + namespace: {{ kubernetes_namespace }} data: - secret_key: {{ awx_secret_key }} - awx_settings: | + secret_key: {{ secret_key }} + {{ kubernetes_deployment_name }}_settings: | import os import socket ADMINS = () - + # Container environments don't like chroots AWX_PROOT_ENABLED = False # Automatically deprovision pods that go offline AWX_AUTO_DEPROVISION_INSTANCES = True - SYSTEM_TASK_ABS_CPU = {{ ((awx_task_cpu_request|int / 1000) * 4)|int }} - SYSTEM_TASK_ABS_MEM = {{ ((awx_task_mem_request|int * 1024) / 100)|int }} + SYSTEM_TASK_ABS_CPU = {{ ((task_cpu_request|int / 1000) * 4)|int }} + SYSTEM_TASK_ABS_MEM = {{ ((task_mem_request|int * 1024) / 100)|int }} #Autoprovisioning should replace this CLUSTER_HOST_ID = socket.gethostname() SYSTEM_UUID = '00000000-0000-0000-0000-000000000000' SESSION_COOKIE_SECURE = False - CSRF_COOKIE_SECURE = False + CSRF_COOKIE_SECURE = False REMOTE_HOST_HEADERS = ['HTTP_X_FORWARDED_FOR'] - + STATIC_ROOT = '/var/lib/awx/public/static' PROJECTS_ROOT = '/var/lib/awx/projects' JOBOUTPUT_ROOT = '/var/lib/awx/job_status' @@ -42,13 +42,13 @@ data: EMAIL_HOST_USER = '' EMAIL_HOST_PASSWORD = '' EMAIL_USE_TLS = False - + LOGGING['handlers']['console'] = { '()': 'logging.StreamHandler', 'level': 'DEBUG', 'formatter': 'simple', } - + LOGGING['loggers']['django.request']['handlers'] = ['console'] LOGGING['loggers']['rest_framework.request']['handlers'] = ['console'] LOGGING['loggers']['awx']['handlers'] = ['console'] @@ -68,7 +68,7 @@ data: LOGGING['handlers']['rbac_migrations'] = {'class': 'logging.NullHandler'} LOGGING['handlers']['system_tracking_migrations'] = {'class': 'logging.NullHandler'} LOGGING['handlers']['management_playbooks'] = {'class': 'logging.NullHandler'} - + DATABASES = { 'default': { 'ATOMIC_REQUESTS': True, diff --git a/installer/roles/kubernetes/templates/deployment.yml.j2 b/installer/roles/kubernetes/templates/deployment.yml.j2 index 2e89334283..5b7cb6de63 100644 --- a/installer/roles/kubernetes/templates/deployment.yml.j2 +++ b/installer/roles/kubernetes/templates/deployment.yml.j2 @@ -2,7 +2,7 @@ kind: Service apiVersion: v1 metadata: - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} name: rabbitmq labels: app: rabbitmq @@ -26,7 +26,7 @@ apiVersion: v1 kind: ConfigMap metadata: name: rabbitmq-config - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} data: enabled_plugins: | [rabbitmq_management,rabbitmq_peer_discovery_k8s]. @@ -52,7 +52,7 @@ apiVersion: v1 kind: ServiceAccount metadata: name: rabbitmq - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} {% if kubernetes_context is defined %} --- @@ -60,7 +60,7 @@ kind: Role apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: endpoint-reader - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} rules: - apiGroups: [""] resources: ["endpoints"] @@ -70,7 +70,7 @@ kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: endpoint-reader - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} subjects: - kind: ServiceAccount name: rabbitmq @@ -86,7 +86,7 @@ kind: Role apiVersion: v1 metadata: name: endpoint-reader - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} rules: - apiGroups: [""] resources: ["endpoints"] @@ -96,16 +96,16 @@ kind: RoleBinding apiVersion: v1 metadata: name: endpoint-reader - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} roleRef: name: endpoint-reader - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} subjects: - kind: ServiceAccount name: rabbitmq - namespace: {{ awx_kubernetes_namespace }} + namespace: {{ kubernetes_namespace }} userNames: - - system:serviceaccount:{{ awx_kubernetes_namespace }}:rabbitmq + - system:serviceaccount:{{ kubernetes_namespace }}:rabbitmq {% endif %} --- @@ -124,30 +124,30 @@ spec: template: metadata: labels: - name: awx-web-deploy + name: {{ kubernetes_deployment_name }}-web-deploy service: django app: rabbitmq spec: serviceAccountName: rabbitmq containers: - - name: awx-web - image: {{ awx_web_kubernetes_image }} + - name: {{ kubernetes_deployment_name }}-web + image: {{ web_kubernetes_image }} imagePullPolicy: Always ports: - containerPort: 8052 volumeMounts: - mountPath: /etc/tower - name: awx-application-config + name: {{ kubernetes_deployment_name }}-application-config resources: requests: - memory: "{{ awx_web_mem_request }}Gi" - cpu: "{{ awx_web_cpu_request }}m" - - name: awx-celery - image: {{ awx_task_kubernetes_image }} + memory: "{{ web_mem_request }}Gi" + cpu: "{{ web_cpu_request }}m" + - name: {{ kubernetes_deployment_name }}-celery + image: {{ task_kubernetes_image }} imagePullPolicy: Always volumeMounts: - mountPath: /etc/tower - name: awx-application-config + name: {{ kubernetes_deployment_name }}-application-config env: - name: DATABASE_USER value: {{ pg_username }} @@ -169,9 +169,9 @@ spec: value: {{ default_admin_password|default('password') }} resources: requests: - memory: "{{ awx_task_mem_request }}Gi" - cpu: "{{ awx_task_cpu_request }}m" - - name: awx-rabbit + memory: "{{ task_mem_request }}Gi" + cpu: "{{ task_cpu_request }}m" + - name: {{ kubernetes_deployment_name }}-rabbit image: ansible/awx_rabbitmq:{{ rabbitmq_version }} imagePullPolicy: Always ports: @@ -209,20 +209,20 @@ spec: mountPath: /etc/rabbitmq resources: requests: - memory: "{{ awx_rabbitmq_mem_request }}Gi" - cpu: "{{ awx_rabbitmq_cpu_request }}m" - - name: awx-memcached + memory: "{{ rabbitmq_mem_request }}Gi" + cpu: "{{ rabbitmq_cpu_request }}m" + - name: {{ kubernetes_deployment_name }}-memcached image: memcached resources: requests: - memory: "{{ awx_memcached_mem_request }}Gi" - cpu: "{{ awx_memcached_cpu_request }}m" + memory: "{{ memcached_mem_request }}Gi" + cpu: "{{ memcached_cpu_request }}m" volumes: - - name: awx-application-config + - name: {{ kubernetes_deployment_name }}-application-config configMap: - name: awx-config + name: {{ kubernetes_deployment_name }}-config items: - - key: awx_settings + - key: {{ kubernetes_deployment_name }}_settings path: settings.py - key: secret_key path: SECRET_KEY @@ -238,10 +238,10 @@ spec: apiVersion: v1 kind: Service metadata: - name: awx-web-svc - namespace: {{ awx_kubernetes_namespace }} + name: {{ kubernetes_deployment_name }}-web-svc + namespace: {{ kubernetes_namespace }} labels: - name: awx-web-svc + name: {{ kubernetes_deployment_name }}-web-svc spec: type: "NodePort" ports: @@ -249,15 +249,15 @@ spec: port: 80 targetPort: 8052 selector: - name: awx-web-deploy + name: {{ kubernetes_deployment_name }}-web-deploy --- apiVersion: v1 kind: Service metadata: - name: awx-rmq-mgmt - namespace: {{ awx_kubernetes_namespace }} + name: {{ kubernetes_deployment_name }}-rmq-mgmt + namespace: {{ kubernetes_namespace }} labels: - name: awx-rmq-mgmt + name: {{ kubernetes_deployment_name }}-rmq-mgmt spec: type: ClusterIP ports: @@ -265,17 +265,17 @@ spec: port: 15672 targetPort: 15672 selector: - name: awx-web-deploy + name: {{ kubernetes_deployment_name }}-web-deploy {% if kubernetes_context is defined %} --- apiVersion: extensions/v1beta1 kind: Ingress metadata: - name: awx-web-svc - namespace: {{ awx_kubernetes_namespace }} + name: {{ kubernetes_deployment_name }}-web-svc + namespace: {{ kubernetes_namespace }} spec: backend: - serviceName: awx-web-svc + serviceName: {{ kubernetes_deployment_name }}-web-svc servicePort: 80 {% endif %} {% if openshift_host is defined %} @@ -283,8 +283,8 @@ spec: apiVersion: v1 kind: Route metadata: - name: awx-web-svc - namespace: {{ awx_kubernetes_namespace }} + name: {{ kubernetes_deployment_name }}-web-svc + namespace: {{ kubernetes_namespace }} spec: port: targetPort: http @@ -293,7 +293,7 @@ spec: termination: edge to: kind: Service - name: awx-web-svc + name: {{ kubernetes_deployment_name }}-web-svc weight: 100 wildcardPolicy: None {% endif %} diff --git a/installer/roles/local_docker/tasks/standalone.yml b/installer/roles/local_docker/tasks/standalone.yml index cba2379aa1..6bfefe9c49 100644 --- a/installer/roles/local_docker/tasks/standalone.yml +++ b/installer/roles/local_docker/tasks/standalone.yml @@ -96,7 +96,7 @@ http_proxy: "{{ http_proxy | default('') }}" https_proxy: "{{ https_proxy | default('') }}" no_proxy: "{{ no_proxy | default('') }}" - SECRET_KEY: "{{ awx_secret_key }}" + SECRET_KEY: "{{ secret_key }}" DATABASE_NAME: "{{ pg_database }}" DATABASE_USER: "{{ pg_username }}" DATABASE_PASSWORD: "{{ pg_password }}" @@ -132,7 +132,7 @@ http_proxy: "{{ http_proxy | default('') }}" https_proxy: "{{ https_proxy | default('') }}" no_proxy: "{{ no_proxy | default('') }}" - SECRET_KEY: "{{ awx_secret_key }}" + SECRET_KEY: "{{ secret_key }}" DATABASE_NAME: "{{ pg_database }}" DATABASE_USER: "{{ pg_username }}" DATABASE_PASSWORD: "{{ pg_password }}" diff --git a/installer/roles/local_docker/templates/docker-compose.yml.j2 b/installer/roles/local_docker/templates/docker-compose.yml.j2 index b3618fb706..4d6a4b5d2c 100644 --- a/installer/roles/local_docker/templates/docker-compose.yml.j2 +++ b/installer/roles/local_docker/templates/docker-compose.yml.j2 @@ -46,7 +46,7 @@ services: http_proxy: {{ http_proxy | default('') }} https_proxy: {{ https_proxy | default('') }} no_proxy: {{ no_proxy | default('') }} - SECRET_KEY: {{ awx_secret_key }} + SECRET_KEY: {{ secret_key }} DATABASE_NAME: {{ pg_database }} DATABASE_USER: {{ pg_username }} DATABASE_PASSWORD: {{ pg_password }} @@ -105,7 +105,7 @@ services: http_proxy: {{ http_proxy | default('') }} https_proxy: {{ https_proxy | default('') }} no_proxy: {{ no_proxy | default('') }} - SECRET_KEY: {{ awx_secret_key }} + SECRET_KEY: {{ secret_key }} DATABASE_NAME: {{ pg_database }} DATABASE_USER: {{ pg_username }} DATABASE_PASSWORD: {{ pg_password }}