aboutsummaryrefslogtreecommitdiffstats
path: root/manifests/profile/base/nova
AgeCommit message (Collapse)AuthorFilesLines
2016-11-01Enable TLS in the internal network for Nova APIJuan Antonio Osorio Robles1-3/+54
This optionally enables TLS for Nova API in the internal network. If internal TLS is enabled, each node that is serving the Nova API service will use certmonger to request its certificate. Note that this doesn't enable internal TLS for the nova metadata service since it doesn't run over httpd. This will be handled in a later commit. bp tls-via-certmonger Change-Id: I88380a1ed8fd597a1a80488cbc6ce357f133bd70
2016-10-18Merge "Set memcached_servers for nova API"Jenkins1-0/+10
2016-10-18Merge "Remove explicit service_name setting from nova manifest"Jenkins1-3/+2
2016-10-18Set memcached_servers for nova APIDan Prince1-0/+10
This patch updates the Nova profile so that we set memcached servers correctly for the Nova keystone auth_token middleware. Most of the hiera settings for ::nova::keystone::authtoken are already included in the t-h-t nova-api service. Change-Id: I3b7ff02abbd0d5e0c38232d02b33e4c7bc411120 Closes-bug: #1633595
2016-10-17Remove faulty migration logic to stop nova-apiJuan Antonio Osorio Robles1-13/+0
The patch making nova run over httpd had added migration logic to stop nova-api, However, this doesn't work since nova-metadata is running over the same process. Now, the fact that is was running seems to be just luck, since the systemctl runs, then we start the service via the nova::api resource. So this is fragile in it's current state. This then removes the exec, as we don't need it for the migration. Change-Id: I4603b81d30a704b07eef461b3cdbfe164614b04f
2016-10-14Remove explicit service_name setting from nova manifestJuan Antonio Osorio Robles1-3/+2
We can now get this parameter from t-h-t, so it's not needed here. Change-Id: I014e7b3a6feb5609ace2e8ef1e4df11448b0a0cc Depends-On: Ic229182cc5c887b57f6182c3db1bac8bed330f7c
2016-10-13Deploy nova over Apache httpdJuan Antonio Osorio Robles1-2/+18
This adds the necessary resources to the manifest to migrate nova to run over httpd. The service name will be moved to t-h-t in a subsequent commit, but since this patch depends on t-h-t, we try to avoid circular dependencies of repos. Change-Id: I91d430a3871672f90b0f885736f067ddae3c238c Depends-On: I57fb20cf0d58b3376243ba4aeb04e995e7152ce3
2016-09-27Move db syncs into mysql base roleDan Prince1-5/+0
This patch moves the various DB syncs into the MySQL role. Database creation needs to occur on the MySQL server to avoid permission issues. This patch also moves database creation to step 2 so we can guarantee that all per-service databases exist at this time. This avoids complex ordering needed during step 3 where services, on different hosts, can run their own db sync's in a distributed fashion. Change-Id: I05cc0afa9373429a3197c194c3e8f784ae96de5f Partial-bug: #1620595
2016-08-08Fix parameters and headers inconsistency in the puppet manifests.Carlos Camacho7-12/+0
As we are staring to manually check overcloud services the first step is to check that the puppet profiles are all aligned. Changes applied: No logic added or removed in this submission. Removed unused parameters. Align header comments structure. All profiles parameters sorted following: "Mandatory params first sorted alphabetically then optional params sorted alphabetically." Note: Following submissions will check pacemaker, cinder, mistral and redis services in the base profiles as some of them has the $pacemaker_master parameter defaulted to true. Change-Id: I2f91c3f6baa33f74b5625789eec83233179a9655
2016-08-04Merge "Add base nova-ironic profile"Jenkins1-0/+36
2016-07-21Merge "nova/api: purge archive_deleted_rows via cron"Jenkins1-0/+6
2016-07-20Merge "Make ::tripleo::profile::base classes work with multiple nodes"Jenkins1-7/+10
2016-07-20Merge "make sure we start nova-compute after nova-conductor"Jenkins1-0/+3
2016-07-20Add base nova-ironic profileDmitry Tantsur1-0/+36
Configures a nova-compute instance to use Ironic. Change-Id: I4f817aba542cfaa386b3c0617feae90c61579b43 Partially-Implements: blueprint ironic-integration
2016-07-18Make ::tripleo::profile::base classes work with multiple nodesMichele Baldessari1-7/+10
In the Next Generation HA architecture a number of active/active services will be run via systemd. In order for this to work we need to make sure that the sync_db operation only takes place on the bootstrap node, just like it is done today for the pacemaker profiles. We do this by removing sync_db as a parameter and instead set it to true or false depending if the hostname matches the bootstrap_node as it is done today in the pacemaker role. Note that we call hiera('bootstrap_nodeid', undef) because if a profile is included on a non controller node that variable will be undefined. The following testing was done: - HA puppet-pacemaker.yaml scenario with three computes - NonHA with one controller - NonHA with three controllers Fixes-Bug: 1600149 Co-Author: cmsj@tenshu.net Change-Id: I04a7b9e3c18627ea512000a34357acb7f27d6e0e Implements: blueprint ha-lightweight-architecture
2016-07-18nova/api: purge archive_deleted_rows via cronEmilien Macchi1-0/+6
The code was in THT before but now in the Nova API profile. Change-Id: I7035f7998c11dc5508dae8c1a750b93c2944b2d4
2016-07-12Merge "profile/nova/compute: add iscsi bits"Jenkins1-0/+11
2016-07-06make sure we start nova-compute after nova-conductorEmilien Macchi1-0/+3
When nova-compute and nova-conductor are collocated, we need to make sure nova-conductor starts before nova-compute otherwise nova-compute will just fail to start. Change-Id: Icc3ed768af2a08e2db78d9c9278d309a62d26850
2016-07-04Merge "nova/compute: add NFS bits"Jenkins1-1/+19
2016-07-01Replace reference to cinder:: parameter with nova:: parameterGiulio Fidente1-1/+1
Changes a reference to a cinder:: parameter into the nova compute class to a nova:: parameter, which makes sure we're not trying to access "out of bound" parameters. Change-Id: I871ef420700e6d0ee5c1e444e019d58b3a9a45a6
2016-06-30nova/compute: add NFS bitsEmilien Macchi1-1/+19
Deploy NFS bits that were in THT before. Change-Id: I75d68cc766ad274b16b22f43b7d34d02ab26de13
2016-06-30Nova API and Neutron server should run database creation in step 3Giulio Fidente1-2/+1
We perform the Galera setup in step 2 so there is no guarantee that the database will be available in that same step [1]. We used to implement a dependency in puppet using the 'galera-ready' resource (clustercheck) but this is not possible with roles because we also don't have any guarantee about clustercheck being installed on the same node. Because of the above all services must create/sync their databases in a later step. This patch fixes Nova API and Neutron Server, the other services use step 3 already. 1. https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/README.rst Change-Id: I22750ffb64afbe40b5560a6a0d0dabc5b8927d32
2016-06-29profile/nova/compute: add iscsi bitsEmilien Macchi1-0/+11
Add iscsi bits allowing live migration. Change-Id: I495a7af4220f0b35e9fd0a6cfc146610d8f46d10
2016-06-21Create libvirt micro-serviceEmilien Macchi2-14/+49
Create a new profile where we only manage Nova libvirt service. Change-Id: I2ff3cf6a31bc10aa46a089fcbfc654eda55e6ef8 Implements: blueprint refactor-puppet-manifests Depends-On: Ib0d3111560af5af451e522c6dc3b3918d0463e7d
2016-06-21Implement Libvirt profileEmilien Macchi2-0/+86
Deploy bits when running nova-compute + libvirt. Note: some work will be done in puppet-nova to decouple nova-compute from libvirt in nova::compute::libvirt class. Change-Id: I754bfa89ba78a70b4b866598fb1163f4e14807c9 Implements: blueprint refactor-puppet-manifests
2016-06-20Merge "Deploy nova::db classes in api profile"Jenkins1-0/+7
2016-06-17Deploy nova::db classes in api profileEmilien Macchi1-0/+7
Move nova::db classes from THT to puppet-tripleo in Nova API profile. Implements: blueprint refactor-puppet-manifests Change-Id: I4fc3cb822822adc1c58b2cfa2de8584a73fa6427
2016-06-16nova/api: include ::nova::network::neutronEmilien Macchi1-0/+1
It was included in THT before, but it's now in nova/api role. It will also be added in nova/compute role later. Change-Id: I6b5857d3d4740c0bf3f748719f30a05f1c62cb59
2016-06-14Implement Nova Compute profileSven Anderson1-0/+35
Implements: blueprint refactor-puppet-manifests Change-Id: I57f729daf675674ce37b49e17652c575715fbe23
2016-06-14Implement Nova vncproxy profileEmilien Macchi1-0/+35
Change-Id: I5bc2a77b5832706bd9167cf40e5a7e0f95d7b346 Implements: blueprint refactor-puppet-manifests
2016-06-14Implement Nova Consoleauth profileEmilien Macchi1-0/+35
Change-Id: I955b4fc07dc07d8adc32411848e3e131d77a5123 Implements: blueprint refactor-puppet-manifests
2016-06-14Implement Nova Scheduler profileEmilien Macchi1-0/+36
Change-Id: I5e1c90e3c6dc556f872ced73744c5c74caaa3635 Implements: blueprint refactor-puppet-manifests
2016-06-14Implement Nova API profileEmilien Macchi1-0/+43
Change-Id: I1dde63a5a7d1624494a7157a9679f88f4cb780e0 Implements: blueprint refactor-puppet-manifests
2016-06-09Import ::nova class from THTEmilien Macchi1-1/+1
Import ::nova class with memcached parameter computed from Hiera, that was previously in THT, now in nova-base role. Use step 3 for ::nova since we need it for database resources. Also make sure nova base profile is included for conductor role and any nova pacemaker role. Change-Id: I45244861082edae616f2b82334e7678cefa97bc7 Implements: blueprint refactor-puppet-manifests
2016-06-04Implement Nova conductor profileEmilien Macchi1-0/+35
Create nova-conductor profile, part of composable services. Implements: blueprint refactor-puppet-manifests Change-Id: Iaaf3a3c2528d9747e41f360a1fe55f95ed37b2d1