aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-06-24Disable stonith temporarily during upgradesMichele Baldessari1-0/+14
It is best if we disable stonith if a cluster has it configured and on, before we call "pcs cluster stop --all", because should a service fail to stop for whatever reason, pacemaker will fence the node where it happened. This is something that we unlikely want during an upgrade as it will make things worse. Once the cluster is stopped we can reenable stonith (if it was enabled to start with) in the CIB while the cluster is shut down. Closes-Bug: #1596065 Change-Id: I38dcacfabc44539aab1f7da85168fe44a1b43a51
2016-06-24Fix ceilometer auth urlPradeep Kilambi1-1/+2
Due to a recent change introduced in puppet ceilometer[1] ceilometer auth type defaults to password type and v2 auth_url doesnt work with domain. This fixes the url to not include suffix. [1] https://review.openstack.org/#/c/320454/ Change-Id: Ibce716825c95e36a942203be2c67ea0da79503f2
2016-06-24Increase RabbitMQ maximum file descriptors.Chris Jones1-1/+1
We now allow 65536 open file descriptors to better reflect the real-world settings of downstream consumers of TripleO. Change-Id: Ib04ea6afb2da1a9101839d9d70bc8891d69700ec
2016-06-23Revert "Ceilometer composable roles for controller"Dan Prince16-380/+277
This reverts commit c48410a05ec0ffd11c717bcf350badc9e5f0e910. We've discovered this patch never had passing CI due to a DLRN build failure. Change-Id: I546cb3e340d20701662affda7e28b586c58ba6de
2016-06-23Allow neutron_options customization for dashboardDimitri Savineau2-2/+2
By default only profile_support can be configured depending of the neutron mechanism driver used (cisco_n1kv). This patch allows to add more neutron options to enable lbaas, vpnaas, etc... Change-Id: I3b3019890a146dd641d6efeb880c5de125d8d132
2016-06-23Revert "Pin puppet-lint-absolute_classname-check to 0.1.3"Emilien Macchi1-2/+1
Bug fixed: https://github.com/voxpupuli/puppet-lint-absolute_classname-check/releases/tag/0.2.2 This reverts commit 61f31831bdafbbddc7b68606832723fe2516872a. Change-Id: I05c2274cd35c187f9e6b2906ee6650cb443cb5fe
2016-06-23Merge "Ceilometer composable roles for controller"Jenkins16-277/+380
2016-06-23Merge "Drop extraconfig for neutron-opencontrail.yaml"Jenkins4-64/+34
2016-06-23Merge "Composable opencontrail plugin"Jenkins7-21/+65
2016-06-23Merge "Drop extraconfig for neutron-nuage.yaml"Jenkins4-93/+49
2016-06-23Merge "Update neutron ml2 class"Jenkins2-2/+2
2016-06-23Ceilometer composable roles for controllerPradeep Kilambi16-277/+380
Depends-On: I4b5e93a108e80e91af26ffee454130ee18c0042e Change-Id: I59c948ead475f449cb8d1b752f39b7eaaf056130
2016-06-22Pin puppet-lint-absolute_classname-check to 0.1.3Emilien Macchi1-1/+2
https://github.com/voxpupuli/puppet-lint-absolute_classname-check/issues/6 Change-Id: Ib0f1ce09b589630c6d09c8588246dafae2f2d387
2016-06-22Update neutron ml2 classEmilien Macchi2-2/+2
Class was moved in with other plugins, it's just an update. Change-Id: I6436c5c36ac0081a720cb8a737a573b1246127a1 Depends-On: I35332df5800083f3373f5c37411534d11e9b4401
2016-06-22Merge "Heat upstream default policy.json works in devstack"Jenkins1-0/+6
2016-06-22Split Heat pacemaker roles into separate servicesBrad P. Crochet4-13/+7
In order for each service to operate independently when used with Pacemaker, the roles needed to be separated. Change-Id: I0440b7b119fc9b7bb3db8a2bf341c0c6db8d3d33 Depends-On: I3fa76562c13191884a53848ad5adcbc9f5a24f61
2016-06-22Merge "Composable roles within services - NTP - CephStorage"Jenkins3-12/+3
2016-06-22Merge "Composable roles within services - NTP - ObjectStorage"Jenkins3-11/+2
2016-06-21Heat upstream default policy.json works in devstackJohn Trowbridge1-0/+6
It does not however work in TripleO, and the ping test is failing with master Heat because of this. I tried submitting a revert[1] in Heat, but they have functional tests, so it is not broken... The only option left is using puppet-heat to override the broken default. [1] https://review.openstack.org/#/c/332206/ Change-Id: I2c674a2e01eeacd17d3158f378be2d6ceeedc309
2016-06-21Composable roles within services - NTP - ObjectStorageCarlos Camacho3-11/+2
Add NTP as a composable service for ObjectStorage. Partially-implements: blueprint composable-services-within-roles Change-Id: I6315abc7955c9dc1df9f211c1c5b7332b5e01d5a
2016-06-21Composable roles within services - NTP - CephStorageCarlos Camacho3-12/+3
Add NTP as a composable service for CephStorage. Partially-implements: blueprint composable-services-within-roles Change-Id: Iee89b261b3c45f596ad84549e25d47b8ca1cfbdb
2016-06-21Composable roles within services - NTP - ComputeCarlos Camacho3-11/+1
Add NTP as a composable service for compute nodes. Partially-implements: blueprint composable-services-within-roles Change-Id: I53958a660830211dee731e0129f4ff018c0cd853
2016-06-21Merge "Composable roles within services - NTP"Jenkins6-15/+30
2016-06-21Merge "Remove nova::db classes, moved to puppet-tripleo"Jenkins2-9/+0
2016-06-21Merge "Remove ::nova::network::neutron, now in puppet-tripleo"Jenkins2-2/+0
2016-06-21Merge "Change Aodh to use own backend"Jenkins4-5/+26
2016-06-21Composable roles within services - NTPCarlos Camacho6-15/+30
Add NTP as a composable service. Also, the scope of this patch is to serve as basis for the blueprint related to the composable services walkthrough. This will be the use case documented. The puppet manifests updated to remove the current configuration for NTP is also added. Change-Id: I1d3d6229d53f48c380e6a775a7c50de8715fe949
2016-06-21Parametrize and increase default of swift-proxy node_timeoutJiri Stransky1-0/+5
We've had problems uploading images on slow virtualized environments, where the requests to swift would time out. The issue has been seen both on undercloud and overcloud. The default timeout is 10 seconds, the issue has been reportedly reproduced on undercloud with node_timeout as high as 30 seconds, but not with 60 seconds yet. Set the default timeout to 60 seconds on overcloud too. Change-Id: I7d486cf4dc9768ddbf71ab71e92db8d2ef29978e Closes-Bug: #1594725
2016-06-21Merge "Composable neutron nuage plugin"Jenkins7-10/+61
2016-06-21Merge "set aodh auth_url explicitly"Jenkins1-0/+1
2016-06-21Merge "Create Cinder backup pool in Ceph"Jenkins2-2/+12
2016-06-21Merge "Enable firewall by default on the overcloud"Jenkins1-1/+1
2016-06-21Merge "Allow sahara ports in firewall"Jenkins1-0/+4
2016-06-21Merge "Allow pacemaker ports in firewall"Jenkins1-0/+9
2016-06-21Merge "Stop using deprecated port param in firewall rules"Jenkins1-27/+27
2016-06-20Merge "Add IPv6 support for the management network"Jenkins4-1/+148
2016-06-20Change Aodh to use own backendPradeep Kilambi4-5/+26
Currently aodh uses ceilometer backend, instead change it to use its own mysql db. Change-Id: Idaa879af4e6946e804111d581402e620beb89885
2016-06-20Enable firewall by default on the overcloudBen Nemec1-1/+1
We firewall the undercloud, which is only listening on the provisioning network anyway, but our default settings leave the overcloud, which needs to be publicly accessible (for a deployment-specific definition of "public"), wide open. This seems like a bad default. Anyone who is deploying additional services can either open the firewall ports themselves as part of the deployment or can set the ManageFirewall param to false. Change-Id: I3731a0a7bc4be94c8e7a289c90d304599634e928
2016-06-20Allow sahara ports in firewallBen Nemec1-0/+4
Both with and without SSL. Change-Id: I3163cbac8cb37e03ae298fa02e85bdaa66157471
2016-06-20Allow pacemaker ports in firewallBen Nemec1-0/+9
This is required to allow ha deployments with ManageFirewall: True These are the ports documented in [1]. 1: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/Configuring_the_Red_Hat_High_Availability_Add-On_with_Pacemaker/index.html#s1-firewalls-HAAR Change-Id: I446cc0ed863df15e28fa8ec1f5e2a06c5c03af8c Closes-Bug: 1594470
2016-06-20Remove nova::db classes, moved to puppet-tripleoEmilien Macchi2-9/+0
Implements: blueprint refactor-puppet-manifests Depends-On: I4fc3cb822822adc1c58b2cfa2de8584a73fa6427 Change-Id: I61be5ccffb8c84eba5df13930fe3c742e9f0eec6
2016-06-20Remove ::nova::network::neutron, now in puppet-tripleoEmilien Macchi2-2/+0
It moved to nova/api profile. Change-Id: I6adbc0ea4db1d7d75910b41c8a43637efb6410a4 Depends-On: I6b5857d3d4740c0bf3f748719f30a05f1c62cb59
2016-06-20Create Cinder backup pool in CephBoris Kreitchman2-2/+12
Creates pool in Ceph for Cinder backups and adds proper access permissions. To be used with https://review.openstack.org/#/c/311218 Change-Id: Ibf84f78aff92dbd83c6e254ceb7a80e86c15036d
2016-06-20Add IPv6 support for the management networkMarius Cornea4-1/+148
This change introduces the ability to use IPv6 addressing for the management network by passing the network-management-v6.yaml environment file. It also adjusts the network-management.yaml environment file to point to the right network config templates. Change-Id: I7f797c49f03b2623a08e033bdf45772edff0f08f
2016-06-16Stop using deprecated port param in firewall rulesBen Nemec1-27/+27
This has been removed by the puppet-firewall module in favor of explicit dport and sport params. I believe in every case we are intending to set dport, so that's what this change does. Change-Id: I35c9efca691f865f2e2562ee81a7195d48d27d7a
2016-06-16Drop extraconfig for neutron-opencontrail.yamlDan Prince4-64/+34
This patch drops the extraconfig interface in favor of using the composable services nested stack instead. The benefit is that it is easier to enable multiple services (like network and storage backends at the same time) and all of the opencontrail settings get to live in the same file. Partially-implements: blueprint composable-services-within-roles Change-Id: I0edbd86a8c981bd6e8a547cd2a6ebed18ecdbb31
2016-06-16Composable opencontrail pluginDan Prince7-21/+65
Partially-implements: blueprint composable-services-within-roles Change-Id: I17ac5dc2a6fb82a82d1db039e61fc8e87ba88333
2016-06-16Drop extraconfig for neutron-nuage.yamlDan Prince4-93/+49
This patch drops the extraconfig interface in favor of using the composable services nested stack instead. The benefit is that it is easier to enable multiple services (like network and storage backends at the same time) and all of the nuage settings get to live in the same file. Partially-implements: blueprint composable-services-within-roles Change-Id: I15fe14e9d6881bc408eb6bb10d9293bd914ef858
2016-06-16Composable neutron nuage pluginDan Prince7-10/+61
Partially-implements: blueprint composable-services-within-roles Depends-On: Ia4a297008b259a8e238bd1ad511e82f4e5ab6d63 Change-Id: I80ac1a5393a17d4cf997cd3ef060574455d1b5ec
2016-06-16Colocation make a group for pcmk nova resources.Sofer Athlan-Guyot1-0/+7
This ensure that the entire nova-* service form a pacemaker group and that somehow pacemaker doesn't try to restart services elsewhere. Closes-bug: 1592776 Change-Id: I629db624f4179663696ffe8c80a567bf6d6b2e16