uninstall_openshift.yml 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573
  1. # This deletes *ALL* Origin and OpenShift Enterprise content installed by
  2. # ansible. This includes:
  3. #
  4. # configuration
  5. # containers
  6. # example templates and imagestreams
  7. # images
  8. # RPMs
  9. ---
  10. - hosts: OSEv3:children
  11. become: yes
  12. tasks:
  13. - name: Detecting Operating System
  14. shell: ls /run/ostree-booted
  15. ignore_errors: yes
  16. failed_when: false
  17. register: ostree_output
  18. # Since we're not calling openshift_facts we'll do this for now
  19. - set_fact:
  20. openshift_is_atomic: "{{ ostree_output.rc == 0 }}"
  21. openshift_is_containerized: "{{ ostree_output.rc == 0 or containerized | default(false) | bool }}"
  22. # Stop services on all hosts prior to removing files.
  23. - hosts: nodes
  24. become: yes
  25. tasks:
  26. - name: Remove dnsmasq dispatcher
  27. file:
  28. path: "{{ item }}"
  29. state: absent
  30. with_items:
  31. - /etc/dnsmasq.d/origin-dns.conf
  32. - /etc/dnsmasq.d/origin-upstream-dns.conf
  33. - /etc/dnsmasq.d/openshift-ansible.conf
  34. - /etc/NetworkManager/dispatcher.d/99-origin-dns.sh
  35. - service:
  36. name: NetworkManager
  37. state: restarted
  38. - name: Stop services
  39. service: name={{ item }} state=stopped
  40. with_items:
  41. - atomic-openshift-node
  42. - openshift-node
  43. - origin-node
  44. failed_when: false
  45. - name: Stop OVS service
  46. service: name=openvswitch state=stopped
  47. failed_when: false
  48. when: openshift_use_openshift_sdn | default(True) | bool
  49. - hosts: masters
  50. become: yes
  51. tasks:
  52. - name: Stop services
  53. service: name={{ item }} state=stopped
  54. with_items:
  55. - atomic-openshift-master
  56. - atomic-openshift-master-api
  57. - atomic-openshift-master-controllers
  58. - openshift-master
  59. - openshift-master-api
  60. - openshift-master-controllers
  61. - origin-master
  62. - origin-master-api
  63. - origin-master-controllers
  64. failed_when: false
  65. - hosts: etcd
  66. become: yes
  67. tasks:
  68. - name: Stop services
  69. service: name={{ item }} state=stopped
  70. with_items:
  71. - etcd
  72. failed_when: false
  73. - hosts: lb
  74. become: yes
  75. tasks:
  76. - name: Stop services
  77. service: name={{ item }} state=stopped
  78. with_items:
  79. - haproxy
  80. failed_when: false
  81. - hosts: nodes
  82. become: yes
  83. vars:
  84. node_dirs:
  85. - "/etc/origin"
  86. - "/var/lib/origin"
  87. tasks:
  88. - name: unmask services
  89. command: systemctl unmask "{{ item }}"
  90. changed_when: False
  91. failed_when: False
  92. with_items:
  93. - firewalld
  94. - block:
  95. - block:
  96. - name: Remove packages
  97. package: name={{ item }} state=absent
  98. with_items:
  99. - atomic-openshift
  100. - atomic-openshift-clients
  101. - atomic-openshift-excluder
  102. - atomic-openshift-docker-excluder
  103. - atomic-openshift-node
  104. - atomic-openshift-sdn-ovs
  105. - cockpit-bridge
  106. - cockpit-docker
  107. - cockpit-system
  108. - cockpit-ws
  109. - kubernetes-client
  110. - openshift
  111. - openshift-node
  112. - openshift-sdn
  113. - openshift-sdn-ovs
  114. - origin
  115. - origin-excluder
  116. - origin-docker-excluder
  117. - origin-clients
  118. - origin-node
  119. - origin-sdn-ovs
  120. - tuned-profiles-atomic-openshift-node
  121. - tuned-profiles-origin-node
  122. register: result
  123. until: result is succeeded
  124. - name: Remove OVS package
  125. package: name=openvswitch state=absent
  126. register: result
  127. until: result is succeeded
  128. when: openshift_use_openshift_sdn | default(True) | bool
  129. - name: Remove flannel package
  130. package: name=flannel state=absent
  131. when: openshift_use_flannel | default(false) | bool
  132. register: result
  133. until: result is succeeded
  134. when: not openshift_is_atomic | bool
  135. - shell: systemctl reset-failed
  136. changed_when: False
  137. - shell: systemctl daemon-reload
  138. changed_when: False
  139. - name: Remove br0 interface
  140. shell: ovs-vsctl del-br br0
  141. changed_when: False
  142. failed_when: False
  143. when: openshift_use_openshift_sdn | default(True) | bool
  144. - name: Remove linux interfaces
  145. shell: ip link del "{{ item }}"
  146. changed_when: False
  147. failed_when: False
  148. with_items:
  149. - lbr0
  150. - vlinuxbr
  151. - vovsbr
  152. when: openshift_use_openshift_sdn | default(True) | bool
  153. - name: Remove virtual devices
  154. command: nmcli delete device "{{ item }}"
  155. failed_when: False
  156. with_items:
  157. - tun0
  158. when: openshift_use_openshift_sdn | default(True) | bool
  159. when: openshift_remove_all | default(true) | bool
  160. - shell: atomic uninstall "{{ item }}"-master-api
  161. changed_when: False
  162. failed_when: False
  163. with_items:
  164. - openshift-enterprise
  165. - origin
  166. - shell: atomic uninstall "{{ item }}"-master-controllers
  167. changed_when: False
  168. failed_when: False
  169. with_items:
  170. - openshift-enterprise
  171. - origin
  172. - shell: atomic uninstall "{{ item }}"-master
  173. changed_when: False
  174. failed_when: False
  175. with_items:
  176. - openshift-enterprise
  177. - origin
  178. - shell: atomic uninstall "{{ item }}"-node
  179. changed_when: False
  180. failed_when: False
  181. with_items:
  182. - openshift-enterprise
  183. - origin
  184. - shell: atomic uninstall "{{ item }}"
  185. changed_when: False
  186. failed_when: False
  187. with_items:
  188. - etcd
  189. - shell: atomic uninstall "{{ item }}"
  190. changed_when: False
  191. failed_when: False
  192. with_items:
  193. - openvswitch
  194. when: openshift_use_openshift_sdn | default(True) | bool
  195. - shell: find /var/lib/origin/openshift.local.volumes -type d -exec umount {} \; 2>/dev/null || true
  196. changed_when: False
  197. - shell: docker rm -f "{{ item }}"-master "{{ item }}"-node
  198. changed_when: False
  199. failed_when: False
  200. with_items:
  201. - openshift-enterprise
  202. - origin
  203. - shell: docker ps -a | grep Exited | egrep "{{ item }}" | awk '{print $1}'
  204. changed_when: False
  205. failed_when: False
  206. register: exited_containers_to_delete
  207. with_items:
  208. - openshift3/ose
  209. - openshift3/node
  210. - openshift3/openvswitch
  211. - openshift/origin
  212. - shell: "docker rm {{ item.stdout_lines | join(' ') }}"
  213. changed_when: False
  214. failed_when: False
  215. with_items: "{{ exited_containers_to_delete.results }}"
  216. - name: Remove k8s_ containters
  217. shell: docker ps -a -q -f name=k8s_ | xargs docker rm -f
  218. failed_when: False
  219. - block:
  220. - block:
  221. - shell: docker images | egrep {{ item }} | awk '{ print $3 }'
  222. changed_when: False
  223. failed_when: False
  224. register: images_to_delete
  225. with_items:
  226. - registry\.access\..*redhat\.com/openshift3
  227. - registry\.qe\.openshift\.com/.*
  228. - registry\.access\..*redhat\.com/rhel7/etcd
  229. - docker.io/openshift
  230. - shell: "docker rmi -f {{ item.stdout_lines | join(' ') }}"
  231. changed_when: False
  232. failed_when: False
  233. with_items: "{{ images_to_delete.results }}"
  234. when: openshift_uninstall_images | default(True) | bool
  235. - name: remove sdn drop files
  236. file:
  237. path: /run/openshift-sdn
  238. state: absent
  239. - name: Remove files owned by RPMs
  240. file: path={{ item }} state=absent
  241. with_items:
  242. - /etc/sysconfig/openshift-node
  243. - /run/openshift-sdn
  244. - name: Remove files owned by OVS RPM
  245. file: path=/etc/sysconfig/openvswitch state=absent
  246. when: openshift_use_openshift_sdn | default(True) | bool
  247. when: openshift_remove_all | default(True) | bool
  248. - find: path={{ item }} file_type=file
  249. register: files
  250. with_items:
  251. - "{{ node_dirs }}"
  252. - find: path={{ item }} file_type=directory
  253. register: directories
  254. with_items:
  255. - "{{ node_dirs }}"
  256. - file: path={{ item.1.path }} state=absent
  257. with_subelements:
  258. - "{{ files.results | default([]) }}"
  259. - files
  260. - file: path={{ item.1.path }} state=absent
  261. with_subelements:
  262. - "{{ directories.results | default([]) }}"
  263. - files
  264. - shell: systemctl daemon-reload
  265. changed_when: False
  266. - name: Remove remaining files
  267. file: path={{ item }} state=absent
  268. with_items:
  269. - /etc/ansible/facts.d/openshift.fact
  270. - /etc/openshift
  271. - /etc/openshift-sdn
  272. - /etc/pki/ca-trust/source/anchors/openshift-ca.crt
  273. - /etc/sysconfig/atomic-openshift-node
  274. - /etc/sysconfig/atomic-openshift-node-dep
  275. - /etc/sysconfig/openshift-node-dep
  276. - /etc/sysconfig/origin-node
  277. - /etc/sysconfig/origin-node
  278. - /etc/sysconfig/origin-node-dep
  279. - /etc/systemd/system/atomic-openshift-node-dep.service
  280. - /etc/systemd/system/atomic-openshift-node.service
  281. - /etc/systemd/system/atomic-openshift-node.service.wants
  282. - /etc/systemd/system/origin-node-dep.service
  283. - /etc/systemd/system/origin-node.service
  284. - /etc/systemd/system/origin-node.service.wants
  285. - name: Remove remaining OVS files
  286. file: path={{ item }} state=absent
  287. with_items:
  288. - /etc/systemd/system/openvswitch.service
  289. when: openshift_use_openshift_sdn | default(True) | bool
  290. - name: Rebuild ca-trust
  291. command: update-ca-trust
  292. - hosts: masters
  293. become: yes
  294. vars:
  295. master_dirs:
  296. - "/etc/origin"
  297. - "/var/lib/origin"
  298. tasks:
  299. - name: unmask services
  300. command: systemctl unmask "{{ item }}"
  301. changed_when: False
  302. failed_when: False
  303. with_items:
  304. - firewalld
  305. - atomic-openshift-master
  306. - name: Remove packages
  307. package: name={{ item }} state=absent
  308. when: not openshift_is_atomic | bool and openshift_remove_all | default(True) | bool
  309. with_items:
  310. - atomic-openshift
  311. - atomic-openshift-clients
  312. - atomic-openshift-excluder
  313. - atomic-openshift-docker-excluder
  314. - atomic-openshift-master
  315. - cockpit-bridge
  316. - cockpit-docker
  317. - cockpit-system
  318. - cockpit-ws
  319. - corosync
  320. - kubernetes-client
  321. - openshift
  322. - openshift-master
  323. - origin
  324. - origin-clients
  325. - origin-excluder
  326. - origin-docker-excluder
  327. - origin-master
  328. register: result
  329. until: result is succeeded
  330. - shell: systemctl reset-failed
  331. changed_when: False
  332. - shell: systemctl daemon-reload
  333. changed_when: False
  334. - name: Remove files owned by RPMs
  335. file: path={{ item }} state=absent
  336. with_items:
  337. - /etc/sysconfig/atomic-openshift-master
  338. when: openshift_remove_all | default(True) | bool
  339. - name: Remove files owned by OVS RPM
  340. file: path={{ item }} state=absent
  341. with_items:
  342. - /etc/sysconfig/openvswitch
  343. when:
  344. - openshift_remove_all | default(True) | bool
  345. - openshift_use_openshift_sdn | default(True) | bool
  346. - find: path={{ item }} file_type=file
  347. register: files
  348. with_items:
  349. - "{{ master_dirs }}"
  350. - find: path={{ item }} file_type=directory
  351. register: directories
  352. with_items:
  353. - "{{ master_dirs }}"
  354. - file: path={{ item.1.path }} state=absent
  355. with_subelements:
  356. - "{{ files.results | default([]) }}"
  357. - files
  358. - file: path={{ item.1.path }} state=absent
  359. with_subelements:
  360. - "{{ directories.results | default([]) }}"
  361. - files
  362. - set_fact:
  363. client_users: "{{ [ansible_ssh_user, 'root'] | unique }}"
  364. - name: Remove client kubeconfigs
  365. file:
  366. path: "~{{ item }}/.kube"
  367. state: absent
  368. with_items:
  369. - "{{ client_users }}"
  370. - name: Remove remaining files
  371. file: path={{ item }} state=absent
  372. with_items:
  373. - /etc/ansible/facts.d/openshift.fact
  374. - /etc/corosync
  375. - /etc/openshift
  376. - /etc/openshift-sdn
  377. - /etc/systemd/system/atomic-openshift-master.service
  378. - /etc/systemd/system/atomic-openshift-master-api.service
  379. - /etc/systemd/system/atomic-openshift-master-controllers.service
  380. - /etc/systemd/system/origin-master.service
  381. - /etc/systemd/system/origin-master-api.service
  382. - /etc/systemd/system/origin-master-controllers.service
  383. - /etc/sysconfig/atomic-openshift-master-api
  384. - /etc/sysconfig/atomic-openshift-master-controllers
  385. - /etc/sysconfig/origin-master
  386. - /etc/sysconfig/origin-master-api
  387. - /etc/sysconfig/origin-master-controllers
  388. - /etc/sysconfig/openshift-master
  389. - /etc/sysconfig/origin-master
  390. - /etc/sysconfig/origin-master-api
  391. - /etc/sysconfig/origin-master-controllers
  392. - /usr/share/openshift/examples
  393. - /usr/lib/systemd/system/atomic-openshift-master-api.service
  394. - /usr/lib/systemd/system/atomic-openshift-master-controllers.service
  395. - /usr/lib/systemd/system/origin-master-api.service
  396. - /usr/lib/systemd/system/origin-master-controllers.service
  397. - /usr/local/bin/openshift
  398. - /usr/local/bin/oadm
  399. - /usr/local/bin/oc
  400. - /usr/local/bin/kubectl
  401. - /etc/flannel
  402. - name: Remove remaining OVS files
  403. file: path={{ item }} state=absent
  404. with_items:
  405. - /etc/systemd/system/openvswitch.service
  406. when: openshift_use_openshift_sdn | default(True) | bool
  407. # Since we are potentially removing the systemd unit files for separated
  408. # master-api and master-controllers services, so we need to reload the
  409. # systemd configuration manager
  410. - name: Reload systemd manager configuration
  411. command: systemctl daemon-reload
  412. - hosts: etcd
  413. become: yes
  414. vars:
  415. etcd_dirs:
  416. - "/etc/etcd"
  417. - "/var/lib/etcd"
  418. tasks:
  419. - name: unmask services
  420. command: systemctl unmask "{{ item }}"
  421. changed_when: False
  422. failed_when: False
  423. with_items:
  424. - etcd
  425. - etcd3
  426. - firewalld
  427. - name: Stop additional atomic services
  428. service: name={{ item }} state=stopped
  429. when: openshift_is_containerized | bool
  430. with_items:
  431. - etcd_container
  432. failed_when: false
  433. - name: Remove packages
  434. package: name={{ item }} state=absent
  435. when: not openshift_is_atomic | bool and openshift_remove_all | default(True) | bool
  436. with_items:
  437. - etcd
  438. - etcd3
  439. register: result
  440. until: result is succeeded
  441. - shell: systemctl reset-failed
  442. changed_when: False
  443. - shell: systemctl daemon-reload
  444. changed_when: False
  445. - find: path={{ item }} file_type=file
  446. register: files
  447. with_items:
  448. - "{{ etcd_dirs }}"
  449. - find: path={{ item }} file_type=directory
  450. register: directories
  451. with_items:
  452. - "{{ etcd_dirs }}"
  453. - file: path={{ item.1.path }} state=absent
  454. with_subelements:
  455. - "{{ files.results | default([]) }}"
  456. - files
  457. - file: path={{ item.1.path }} state=absent
  458. with_subelements:
  459. - "{{ directories.results | default([]) }}"
  460. - files
  461. # Intenationally using rm command over file module because if someone had mounted a filesystem
  462. # at /var/lib/etcd then the contents was not removed correctly
  463. - name: Remove etcd data
  464. shell: rm -rf /var/lib/etcd/*
  465. args:
  466. warn: no
  467. failed_when: false
  468. - name: Remove remaining files
  469. file: path={{ item }} state=absent
  470. with_items:
  471. - /etc/ansible/facts.d/openshift.fact
  472. - /etc/systemd/system/etcd_container.service
  473. - /etc/profile.d/etcdctl.sh
  474. - hosts: lb
  475. become: yes
  476. tasks:
  477. - name: unmask services
  478. command: systemctl unmask "{{ item }}"
  479. changed_when: False
  480. failed_when: False
  481. with_items:
  482. - firewalld
  483. - name: Remove packages
  484. package: name={{ item }} state=absent
  485. when: not openshift_is_atomic | bool and openshift_remove_all | default(True) | bool
  486. with_items:
  487. - haproxy
  488. register: result
  489. until: result is succeeded
  490. - shell: systemctl reset-failed
  491. changed_when: False
  492. - shell: systemctl daemon-reload
  493. changed_when: False
  494. - name: Remove remaining files
  495. file: path={{ item }} state=absent
  496. with_items:
  497. - /etc/ansible/facts.d/openshift.fact
  498. - /var/lib/haproxy/stats
  499. # Here we remove only limits.conf rather than directory, as users may put their files.
  500. # - /etc/systemd/system/haproxy.service.d
  501. - /etc/systemd/system/haproxy.service.d/limits.conf
  502. - /etc/systemd/system/haproxy.service