aboutsummaryrefslogtreecommitdiffstats
path: root/manifests/profile/base
AgeCommit message (Collapse)AuthorFilesLines
2016-08-17Merge "Add cinder-backup profiles"Jenkins3-0/+108
2016-08-17Merge "Align hiera keys with service names"Jenkins5-11/+11
2016-08-15Defaults empty hash to kernel_modules and sysctl_settingsEmilien Macchi1-3/+7
Set empty hash by default to kernel_modules and sysctl_settings so catalog won't fail if the parameters are not set in Hiera. Change-Id: I24ab535b01e2724af457d39c03cd990c574ef0aa
2016-08-11Align hiera keys with service namesSteven Hardy5-11/+11
These hiera keys aren't aligned with the service names, which will be required for composable generation of the ip lists per service. Change-Id: I423b544df174254ac511b906b0c570e701678022 Depends-On: I7febf28bf409e25e8e5961ab551b6d56bb11e0c6 Partially-Implements: blueprint custom-roles
2016-08-11Add cinder-backup profilesDan Prince3-0/+108
Adds a Cinder backup profile for Cinder backup service activation (to be used in https://review.openstack.org/#/c/304563). Cinder backup uses Swift as a default. Change-Id: Ib1dfe52b83ab01819fc669312967950e75d8ddf1 Co-Authored-By: Jon Bernard <jobernar@redhat.com> Co-Authored-By: Boris Kreitchman <bkreitch@gmail.com>
2016-08-10Merge "Fix use of bootstrap_node in cinder base profile"Jenkins4-18/+19
2016-08-10Merge "Fix mistral sync_db profile steps"Jenkins4-4/+4
2016-08-09Merge "Only db-sync sahara is included in the bootstrapnode"Jenkins3-5/+20
2016-08-09Fix mistral sync_db profile stepsCarlos Camacho4-4/+4
The services in the mistral profiles were limited to be executed only in the bootstrap master node. Change-Id: Iae42ffa37c4c9b1e070b7c3753e04c45bb97703f
2016-08-09Only db-sync sahara is included in the bootstrapnodeJuan Antonio Osorio Robles3-5/+20
Currently, sahara's db-sync is run on every node. We should instead run it if we're on the bootstrap node as race conditions may occur and these will cause issues. Change-Id: I5db281caae17402ff198cb4cd46304338d98c52e
2016-08-09Use modern auth options for NeutronSergey Kolekonov1-4/+4
auth plugins should be used instead of deprecated admin_* options Change-Id: I80da7ce0a3d11859dd9f2ae02cd9761b9b28ac27 Depends-on: I3018932a106df562e94067e037b3bc862be97b51
2016-08-09Fix use of bootstrap_node in cinder base profileGiulio Fidente4-18/+19
By inspecting bootstrap_nodeid in cinder base profile we can set sync_db appropriately and not always default to true. Change-Id: I2484b1d70a17436c0d8eab9ea8df927d57783784
2016-08-08Fix parameters and headers inconsistency in the puppet manifests.Carlos Camacho81-360/+271
As we are staring to manually check overcloud services the first step is to check that the puppet profiles are all aligned. Changes applied: No logic added or removed in this submission. Removed unused parameters. Align header comments structure. All profiles parameters sorted following: "Mandatory params first sorted alphabetically then optional params sorted alphabetically." Note: Following submissions will check pacemaker, cinder, mistral and redis services in the base profiles as some of them has the $pacemaker_master parameter defaulted to true. Change-Id: I2f91c3f6baa33f74b5625789eec83233179a9655
2016-08-08Merge "Convert ceph_pools into a hash type"Jenkins1-8/+10
2016-08-08Convert ceph_pools into a hash typeGiulio Fidente1-8/+10
By using create_resources we can create ceph::pool resources from a hash. This will make it possible to define custom attributes for the single pool from the heat templates. Change-Id: I38978f0f3119e4ab7dd45021e598253cb066cb5a
2016-08-08New composable service: SensuMartin Mágr3-0/+122
Depends-On: Ic095cd1248cc2ffcef363893b20ff57f7befd6fc Change-Id: Ia09d14fa9db07595d2e904bd9918e5645ea590c7
2016-08-05Merge "Remove keystone PKI cert generation"Jenkins1-28/+0
2016-08-05Merge "Implement aodh profiles"Jenkins5-0/+244
2016-08-05Remove keystone PKI cert generationSteven Hardy1-28/+0
We don't currently offer any parameter interface to enable PKI certs, and these have all been deprecated by keystone, so remove them. Change-Id: I8232262b928c91dcde7bea2f23fa2a7c2660719e
2016-08-05Merge "Fix mistral profile steps"Jenkins4-20/+56
2016-08-05Merge "Configure Ceph/OSD after Ceph/Mon when on same node"Jenkins1-1/+1
2016-08-04Implement aodh profilesPradeep Kilambi5-0/+244
Change-Id: Ie48a123cc5bc402aee635a5daf118b158c6f3b6a Implements: blueprint refactor-puppet-manifests
2016-08-04Merge "Add base nova-ironic profile"Jenkins1-0/+36
2016-08-04Merge "Fix Ironic dbsync ordering"Jenkins1-6/+7
2016-08-03Fix mistral profile stepsCarlos Camacho4-20/+56
Fixing Mistral profile when deploying the service. Change-Id: I942d419be951651e305d01460f394870c30a9878
2016-08-03Merge "Run local CA trust before haproxy deployment"Jenkins1-1/+3
2016-08-01New composable service: FluentDMartin Mágr1-0/+40
Change-Id: I278dfee01ed24713dec29aae55d2c7bdcb7e74bc
2016-08-01Run local CA trust before haproxy deploymentJuan Antonio Osorio Robles1-1/+3
Before haproxy tries to use the TLS certificates it should already trust the CA. So it's necessary for the local CA-related manifest to notify the ::tripleo::haproxy class. This works for newly set deployments. deployments that have already ran the ca-trust section will already trust the CA and thus won't need that part. Change-Id: I32ded4e33abffd51f220fb8a7dc6263aace72acd
2016-07-28Merge "Remove global openstack-core resource"Jenkins1-6/+0
2016-07-27Remove global openstack-core resourceGiulio Fidente1-6/+0
The openstack-core resource is not needed by the NG Pacemaker architecture. It was moved into an isolated role by [1] so that it could optionally be enabled when wanting the older architecture. This submission removes the old openstack-core global resource. 1. I74a62973146c0261385ecf5fd3d06db51e079caa Change-Id: I16a786ce167c57848551c7245f4344c382c55b3d
2016-07-27profile/base/nova: declare nova class and configure cache correctly.Emilien Macchi1-9/+19
Nova {} workaround is not working correctly, we need to merge this patch so we can move out ::nova from THT completely. Also we need to use nova::cache to configure memcached parameters. Co-Authorized-By: Giulio Fidente <gfidente@redhat.com> Co-Authorized-By: Sven Anderson <sven@redhat.com> Co-Authorized-By: Emilien Macchi <emilien@redhat.com> Depends-On: I52d5badb9960124bb8fcb54983db2853c4185e77 Depends-On: I3e400a5f64b85f0d374fc02cc5e4080d19d0f2e4 Depends-On: Iee5f8015cbf40ca0e9a435a7de919ebdb74cf93f Change-Id: Ie4e72e765f6a8ade48d4b2b766f067872554d1a2
2016-07-25Merge "Add swift ringbuilder profile"Jenkins2-0/+136
2016-07-22Merge "use parameter to lookup the step instead of hiera again"Jenkins3-5/+5
2016-07-22use parameter to lookup the step instead of hiera againEmilien Macchi3-5/+5
In some profiles, we were looking up the $step by using Hiera again, while we already do it in the parameter definition. When using this class outside THT, it will fail but with this patch, we could use just set the $step parameter and the rest of the manifest will work. Change-Id: I7082f47204fb4e529b164e4c4f1032e7bdd88f02
2016-07-22Generate HAProxy certificates in base profileJuan Antonio Osorio Robles1-2/+48
This gives the option to generate the service certificate(s) that HAProxy will use. This will be used for both the overcloud and the undercloud. bp tls-via-certmonger Change-Id: I3d0b729d0bad5252c1ae8852109c3a70c0c6ba7d
2016-07-21Merge "Ensure the Heat Domain parameters before starting heat-engine pcmk ↵Jenkins1-0/+10
service"
2016-07-21Merge "nova/api: purge archive_deleted_rows via cron"Jenkins1-0/+6
2016-07-20Ensure the Heat Domain parameters before starting heat-engine pcmk servicemarios1-0/+10
Heat needs stack_user_domain_id or stack_user_domain_name config options set in the heat.conf before starting. The domain itself doesn't need to exist until a stack is actually created, but the value needs to be there. This patch ensures that the heat domain parameters are configured before starting the heat-engine service with Pacemaker at step3 and 4, and at step5, Pacemaker will start the services and Puppet will create the domains. (note: commit message copied from https://review.openstack.org/#/c/331652/ to mitaka tht, which came first) Change-Id: I58fa53357265c1607d2df1b04cc2296083212ab7 Closes-Bug: 1599232
2016-07-20Merge "Make ::tripleo::profile::base classes work with multiple nodes"Jenkins17-109/+198
2016-07-20Merge "make sure we start nova-compute after nova-conductor"Jenkins1-0/+3
2016-07-20Add base nova-ironic profileDmitry Tantsur1-0/+36
Configures a nova-compute instance to use Ironic. Change-Id: I4f817aba542cfaa386b3c0617feae90c61579b43 Partially-Implements: blueprint ironic-integration
2016-07-20Fix Ironic dbsync orderingDmitry Tantsur1-6/+7
Including ::ironic runs ironic-dbsync by default, so we end up with ironic-dbsync run before the database is created. This patch fixes it. Change-Id: I6fef1de18e52b68caaf4cbd55c0408b98b5c26e0 Partially-Implements: blueprint ironic-integration
2016-07-20Merge "openstack-core resource does not have interleave=true"Jenkins1-1/+1
2016-07-18Make ::tripleo::profile::base classes work with multiple nodesMichele Baldessari17-109/+198
In the Next Generation HA architecture a number of active/active services will be run via systemd. In order for this to work we need to make sure that the sync_db operation only takes place on the bootstrap node, just like it is done today for the pacemaker profiles. We do this by removing sync_db as a parameter and instead set it to true or false depending if the hostname matches the bootstrap_node as it is done today in the pacemaker role. Note that we call hiera('bootstrap_nodeid', undef) because if a profile is included on a non controller node that variable will be undefined. The following testing was done: - HA puppet-pacemaker.yaml scenario with three computes - NonHA with one controller - NonHA with three controllers Fixes-Bug: 1600149 Co-Author: cmsj@tenshu.net Change-Id: I04a7b9e3c18627ea512000a34357acb7f27d6e0e Implements: blueprint ha-lightweight-architecture
2016-07-18nova/api: purge archive_deleted_rows via cronEmilien Macchi1-0/+6
The code was in THT before but now in the Nova API profile. Change-Id: I7035f7998c11dc5508dae8c1a750b93c2944b2d4
2016-07-15Merge "Add MySQL profiles"Jenkins1-0/+85
2016-07-15openstack-core resource does not have interleave=trueMichele Baldessari1-1/+1
The dummy openstack-core resource was meant to replace keystone so that restarting keystone would not restart the whole cloud. When this resource was introduced the paramter interleave=true was mistakenly left out. This causes a simple promote operation on the galera resource to restart openstack-core and its children. Change-Id: Ic590005a9419be87e6e6ea131b0ac0630c5afc19 Closes-Bug: 1603381
2016-07-14Merge "Add Mistral profiles"Jenkins4-0/+157
2016-07-14Add Mistral profilesBrad P. Crochet4-0/+157
Add Mistral profiles for non-ha and ha scenarios Change-Id: I1a072326091fd3b0c21d2f78041e3532b67c60eb Implements: blueprint refactor-puppet-manifests Depends-On: I6ce61054384c15876c498ba8cf582f88d9f7f54c
2016-07-14Add swift ringbuilder profileSteven Hardy2-0/+136
I think this will need refinement in future, but for now this is just a copy of what we have in t-h-t Change-Id: I427f0b5ee93a0870d43419009178e0690ac66bd6 Partially-Implements: blueprint refactor-puppet-manifests