summaryrefslogtreecommitdiffstats
path: root/environments
AgeCommit message (Collapse)AuthorFilesLines
2017-02-03Disable puppet on upgrade for roles not upgradingSteven Hardy2-9/+2
Where the role has disabled upgrades, we need to skip both the ansible and puppet steps. To do this we refactor the post.j2.yaml so that it can be included in the upgrade template with an adjusted list of roles. Note this requires https://review.openstack.org/#/c/425220/ - this change will be required for local testing of this patch (run mistral-db-mange populate after updating tripleo-common and restart the mistral services, or update your repos and re-run openstack undercloud install). Partially-Implements: blueprint overcloud-upgrades-per-service Change-Id: Ie7d0fa6fef3528bd93e6cde076b964ea8de3185a
2017-02-01Merge "Add deployed server bootstrap for RHEL"Jenkins1-0/+7
2017-01-31Merge "Removes deprecated neutron-opendaylight-l3 env file"Jenkins1-14/+0
2017-01-27Add AuditD composable serviceSteven Hardy1-0/+119
This patch allows the management of the AuditD service and its associated files (such as `audit.rules`) This is achieved by means of the `puppet-auditd` puppet module. Also places ssh banner capabilities map on top of patch Change-Id: Ib8bb52dde88304cb58b051bced9779c97a314d0d Depends-On: Ie31c063b674075e35e1bfa28d1fc07f3f897407b
2017-01-27Merge "Adds SSH Banner text into sshd_config"Jenkins1-0/+13
2017-01-26Merge "Add novajoin entries to the TLS-everywhere environment file"Jenkins1-0/+9
2017-01-26Add deployed server bootstrap for RHELJames Slagle1-0/+7
This is similar to the bootstrap for CentOS, except we don't set SELinux to permissive on RHEL. Change-Id: I52b8fa017ee2821d2fa91e5ec806a55fcb92566d Partially-implements: blueprint split-stack-software-configuration
2017-01-26Add Ceph RBD mirror Pacemaker profileGiulio Fidente1-0/+2
This change adds a profile to deploy the Ceph RBD mirroring daemon as a Pacemaker resource. Change-Id: Ib07e5bca6a45f0c6c59a3acf07f4e3ae9d2f8948 Depends-On: Ic63dc5cffece38942d305f538f71dd58a5d50789 Closes-Bug: #1652177
2017-01-26Adds SSH Banner text into sshd_configLuke Hinds1-0/+13
Allow use of ooo template to populate banner text into /etc/issue Change-Id: If5b2da9415f10652a0a64503b2da4b63d1018640 Depends-On: Ie9f8afdfa9930428f06c9669fedb460dc1064d5e Closes-Bug: #1640306
2017-01-25Merge "Manage password_validator regex"Jenkins1-0/+5
2017-01-25Add novajoin entries to the TLS-everywhere environment fileJuan Antonio Osorio Robles1-0/+9
These metadata settings (the hardcoded metadata and the hook override) are used by the novajoin service when it's deployed in the undercloud, and will tell it to enroll the overcloud nodes and the services that are specified by the metadata hook. bp novajoin bp tls-via-certmonger Change-Id: Ia4645cc356688b7bcf82ed7765c0b74d53d64ed1
2017-01-25Merge "Add Octavia API service definitions"Jenkins3-0/+9
2017-01-25Merge "Add ec2-api service"Jenkins4-0/+12
2017-01-25Manage password_validator regexLuke Hinds1-0/+5
Horizon provides a password validation check, which OpenStack cloud operators can use to enforce password complexity checks for users within horizon. A dictionary containing a regular expression can be used for password validation with help text that is displayed if the password does not pass validation. HORIZON_CONFIG["password_validator"] = { "regex": '.*', "help_text": _("Your password does not meet the requirements."), } This change allows injection of the regex into horizons local_settings file from a tripleo heat template Change-Id: Ib6517c8f96148bea002b0e3442a26367b236928f Depends-On: If82a80ed6a8e6e65aecc2a25ee6d60640ae03c9a Closes-Bug: #1640800
2017-01-25Merge "pacemaker remote profile support"Jenkins1-0/+1
2017-01-24Pass parameters for TLS proxy in front of Glance-APIJuan Antonio Osorio Robles1-0/+2
If TLS in the internal network is enabled, we run glance-api beind a TLS proxy (which is actually httpd's mod_proxy). This passes the necessary hieradata. bp tls-via-certmonger Change-Id: I693213a1f35021b540202240e512d121cc1cd0eb Depends-On: Id35a846d43ecae8903a0d58306d9803d5ea00bee
2017-01-24Add ec2-api serviceSven Anderson4-0/+12
This change adds the ec2api service using the tripleo::profile::base::nova::ec2api profile. The deprecated nova-cert service is not supported, and therefore the RegisterImage action is not supported either. Change-Id: I2510fd4ed935d8423216fff9ce3adf2d69c9c804 Depends-On: If4b091e1ca02f43aa9c65392baf8ceea007b7cfb
2017-01-24pacemaker remote profile supportMichele Baldessari1-0/+1
This adds a pacemaker_remote puppet service so that an operator can automatically deploy pacemaker-remote on nodes of his choice. Change-Id: I9678606b3de9b9f4c03014b33c1dd27fcba67513 Depends-On: I581552dfa64160e2f82f6a9b8f2ae521c3d6da8d Depends-On: I92953afcc7d536d387381f08164cae8b52f41605
2017-01-23Merge "Add THT for fossw ML2 plugin in networking-fujitsu"Jenkins1-0/+22
2017-01-20Merge "Added support for pass-through iSER configuration"Jenkins1-0/+19
2017-01-19Add THT for fossw ML2 plugin in networking-fujitsuKoki Sanagi1-0/+22
Introduce THT for fossw ML2 plugin in networking-fujitsu. networking-fujitsu is a neutron ML2 plugin which enables several FUJITSU switch products in OpenStack environment. This templates deploy overcloud with FOS switch. Change-Id: I977dbecbf9f6f9725f7fb5ca4745b537a73975ff Implements: blueprint integration-fossw-networking-fujitsu Depends-On: I044c5812bbc5cd3de4bc33556cffbe5bad8e64cf Depends-On: I79df6b6a27d95f0c0e2c87207ab80235a4efccfc
2017-01-19Adds etcd composable serviceFeng Pan1-0/+2
etcd is used by networking-vpp ML2 driver as the messaging mechanism. This patch adds etcd service which can be used by other services. Implements: blueprint fdio-integration-tripleo Depends-on: Idaa3e3deddf9be3d278e90b569466c2717e2d517 Change-Id: I8ae1e2c9b0c3d6f448e1da712100938d011289f5 Signed-off-by: Feng Pan <fpan@redhat.com>
2017-01-18Merge "Add deployed server bootstrap to noop-ctlplane"Jenkins1-0/+1
2017-01-18Add Octavia API service definitionsBrent Eagles3-0/+9
Introduce basic configuration support for Octavia API service. Change-Id: I8816725ed65039af4b7d45392a2823395e81e51c Depends-On: I77783029797be4fb488c6e743c51d228eba9c474 Partially-Implements: blueprint octavia-service-integration
2017-01-18Merge "Add a environment file to disable ceilo api"Jenkins1-0/+2
2017-01-18Add a environment file to disable ceilo apiPradeep Kilambi1-0/+2
Use the standard composable interface to disable ceilo api instead of using a separate flag. Closes-bug: #1656364 Change-Id: I67900f7e6816212831aea8ed18f323652857fbd3
2017-01-18Merge "Correct typo in ManagementAllocationPools in network-environment.yaml"Jenkins1-1/+1
2017-01-18Merge "Remove Glance Registry service"Jenkins3-3/+0
2017-01-17Merge "Nova Placement API composable service"Jenkins3-0/+9
2017-01-17Add deployed server bootstrap to noop-ctlplaneDan Prince1-0/+1
This patch adds the new OS::TripleO::DeployedServer::Bootstrap entry to this template as OS::Heat::None. This fixes the undercloud t-h-t installer. Change-Id: I211fff6dd81cb1a6425dbae4b81d4e9e8819fc52
2017-01-17Merge "Allow user to configure Ceph rbd_default_features"Jenkins1-0/+3
2017-01-17Merge "HPELeftHandISCSIDriver support for Cinder"Jenkins1-0/+13
2017-01-17Nova Placement API composable serviceEmilien Macchi3-0/+9
Add support to deploy Nova Placement API service in TripleO. Change-Id: Ie41ebc362a0695c8f55419e231100c63007405ed
2017-01-17Simplify passing config to ovs agent containerMartin André1-4/+0
The mechanism to pass config files to the neutron-ovs-agent container was overly complex and not at all justified. This commit removes a few useless parameters and aligns the neutron-ovs-agents with the rest of the containers. Change-Id: Ib9a5985ac9d098731c2fb798d6c9e03cba4b87dd
2017-01-17Merge "Remove old ControllerConfig override from puppet-pacemaker.yaml"Jenkins1-1/+0
2017-01-16Merge "Fix for AllNodesExtraConfig and fix environment files to create swap ↵Jenkins2-0/+6
files/partitions"
2017-01-16Allow user to configure Ceph rbd_default_featuresJohn Fulton1-0/+3
Allow user to configure rbd_default_features parameter in ceph.conf / [client] section. Operators deploying newer Ceph clients that must use older Ceph servers need to be able to easily set this option for backwards compatibility. Change-Id: I685c95c47282894bb6309168c537de877dbccc66 Depends-On: I477640c5db2cc84622da7734fb54cfe7740bd137 Related-Bug: 1633552
2017-01-16Remove Glance Registry serviceEmilien Macchi3-3/+0
Glance registry is not required for the v2 of the API and there are plans to deprecate it in the glance community. Let's remove v1 support since it has been deprecated for a while in Glance. Depends-On: I77db1e1789fba0fb8ac014d6d1f8f5a8ae98ae84 Co-Authored: Flavio Percoco <flaper87@gmail.com> Change-Id: I0cd722e8c5a43fd19336e23a7fada71c257a8e2d
2017-01-16Deployed server bootstrap via HeatJames Slagle2-0/+8
Adds an environment file, template, and script that can be used to do initial bootstrapping of deployed servers during NodeExtraConfig. It is meant to install and configure the initial dependencies needed to apply the rest of the OpenStack configuration via Heat. Enabling yum repos and installing the initial python-heat-agent package would still have to be manual steps when using this environment. But the goal is to keep those manual steps to a minimum and automate as much as possible in deployed-server-bootstrap.sh. Along with setting EnablePackageInstall: True, this could eventually replace bootstrap-overcloud-full.sh from tripleo-ci. Partially-implements: blueprint split-stack-software-configuration Change-Id: I6be94604a46382e6288df1b36b9de8fab58696cc
2017-01-16Fix for AllNodesExtraConfig and fix environment files to create swap ↵Carlos Camacho2-0/+6
files/partitions This submission: - Fix an error in the AllNodesExtraConfig resource. (Can't merge servers multiple times). - Add environment files to deploy swap file/partition without manual edit over the templates. - If a swap partition is mounted without having it available the deployment will fail, the fix checks that if the partition is not created then the deployment continues. - Removing empty extra lines in swap templates. - Adjust description and remove unnecessary comments in swap templates. Closes-Bug: 1652184 Change-Id: I828bbbbd4c178956aac74af49f80fcd4f62fa16b
2017-01-16Merge "Add deployed-server backwards compatible template"Jenkins2-0/+5
2017-01-13Removes deprecated neutron-opendaylight-l3 env fileTim Rozet1-14/+0
Somehow missed deleting this in previous patch. This file should be removed as only neutron-opendaylight.yaml env file should be used. Related-Bug: 1654586 Change-Id: Ibd56b032b86170fed947d8030cb0bd443581ee87 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-01-13HPELeftHandISCSIDriver support for Cinderchinthagovardhan1-0/+13
Cinder configuration with HPELeftHandISCSIDriver for VSA storage Change-Id: Iaefbf38522069f6c636130e357f19a7fb7d54fe4
2017-01-13Merge "Add THT for networking-fujitsu"Jenkins1-0/+21
2017-01-11Merge "Removes deprecated OpenDaylight L2 only deployments"Jenkins1-1/+3
2017-01-11Merge "Add support for the deployment of Ceph MDS"Jenkins1-0/+2
2017-01-10Removes deprecated OpenDaylight L2 only deploymentsTim Rozet1-1/+3
Deploying ODL without L3 DVR is no longer supported. This patch moves the opendaylight-l3 env settings to be the new default for opendaylight env file, while also removing any option to disable L3. Closes-Bug: 1654586 Change-Id: Ia2488cb0b752fb4b33f03caa7a1d2469d20395f0 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-01-10Add deployed-server backwards compatible templateJames Slagle2-0/+5
In Newton, the ctlplane port on deployed-server was called <hostname>-ctlplane-port. When this code was refactored in I29fbc720c3d582cbb94385e65e4b64b101f7eac9, the -port suffix was dropped in favor of <hostname>-<network> convention, and the port resource was created directly in deployed-server.yaml instead of in a nested stack. Both of those changes were backwards incompatible -- making it impossible to upgrade to the new version of deployed-server.yaml without the ctlplane port getting deleted/recreated, which causes a change in IP address. The IP address change causes services to be misconfigured on upgrade attempts. Change-Id: I45991b60a151abf3c5e4d05a3aa7246b2d25ac5a
2017-01-10Merge "Setting networking-odl v2 as a mechanism driver"Jenkins2-3/+3
2017-01-10Add support for the deployment of Ceph MDSGiulio Fidente1-0/+2
This change adds a CephMds service, disabled by default, on the Controller role and an environment file to enable it. Change-Id: If7cb46319038a80ed52f753a623989885e1b7da4 Depends-On: Iaecc3ff7acb851776c5057c42a5a513a70425d2c Partial-Bug: #1644784