aboutsummaryrefslogtreecommitdiffstats
path: root/environments
AgeCommit message (Collapse)AuthorFilesLines
2017-08-02Merge "Fix network-isolation.j2.yaml to ignore VIPs for disabled networks"Jenkins1-1/+1
2017-08-01Fix ceilometer agent compute service namePradeep Kilambi1-1/+1
Make sure this matches whats in roles_data.yaml Change-Id: Id41c457914f557af7c9ec195c4c6f98669523ac1
2017-08-01Merge "Generate MySQL client config if service requires database"Jenkins1-1/+0
2017-08-01Update TLS-everywhere docker environmentJuan Antonio Osorio Robles1-2/+5
Some resources have changed. So the environment needed syncing Change-Id: I9aa310ae80edfccd3ed28e67a431aad6e1ed8a7f
2017-07-31Merge "Fix creation of iptables rules for non-HA containerized HAproxy"Jenkins1-0/+1
2017-07-31Merge "Add 'ovn-controller' service"Jenkins3-9/+12
2017-07-31Copy scheduler configuration from service/ironic to services-docker/ironicDmitry Tantsur1-0/+2
That was missed back then. Without it bug 1697724 is not fixed for containers. Change-Id: Ie859f10129cbdeebd9ea4522510768cec99a1df3 Related-Bug: #1697724
2017-07-29Merge "add lbaasv2 to NeutronServicePlugins in octavia containers"Jenkins1-0/+5
2017-07-28Merge "Consistent hostname format env for split-stack"Jenkins3-15/+5
2017-07-27Add 'ovn-controller' serviceNuman Siddique3-9/+12
Presently the ovn-controller service (puppet/services/neutron-compute-plugin-ovn.yaml) is started only on compute nodes. But for the cases where the controller nodes provide the north/south traffic, we need ovn-controller service runninng in controller nodes as well. This patch - Renames the neutron-compute-plugin-ovn.yaml to ovn-controller.yaml which makes more sense and sets the service name as 'ovn-controller'. - Adds the service 'ovn-controller' to Controller and Compute roles. - Adds the missing 'upgrade_tasks' section in ovn-dbs.yaml and ovn-controller.yaml Depends-On: Ie3f09dc70a582f3d14de093043e232820f837bc3 Depends-On: Ide11569d81f5f28bafccc168b624be505174fc53 Change-Id: Ib7747406213d18fd65b86820c1f86ee7c39f7cf5
2017-07-27Generate MySQL client config if service requires databaseDamien Ciabrini1-1/+0
Services that access database have to read an extra MySQL configuration file /etc/my.cnf.d/tripleo.cnf which holds client-only settings, like client bind address and SSL configuration. The configuration file is thus used by containerized services, but also by non-containerized services that still run on the host. In order to generate that client configuration file appropriately both on the host and for containers, 1) the MySQLClient service must be included by the role; 2) every containerized service which uses the database must include the mysql::client profile in the docker-puppet config generation step. By including the mysql::client profile in each containerized service, we ensure that any change in configuration file will be reflected in the service's /var/lib/config-data/{service}, and that paunch will restart the service's container automatically. We now only rely on MySQLClient from puppet/services, to make it possible to generate /etc/my.cnf.d/tripleo.cnf on the host, and to set the hiera keys that drive the generation of that config file in containers via docker-puppet. We include a new YAML validation step to ensure that any service which depends on MySQL will initialize the mysql::client profile during the docker-puppet step. Change-Id: I0dab1dc9caef1e749f1c42cfefeba179caebc8d7
2017-07-27Add environment for setting a custom domain nameBen Nemec1-0/+35
Just setting CloudDomain won't make the domains used consistent. There are a number of CloudName parameters that must be set as well. This change adds a sample environment that includes all of those parameters so it is easy to set everything consistently. Also fixes the description of CloudNameCtlplane to reflect the actual use for that parameter. Change-Id: I56d1c1c5619f83c16c4e8350aa84fccc3d748425
2017-07-27Merge "Deploy Ceph in containers using ceph-ansible via external workflow"Jenkins1-0/+12
2017-07-27Merge "Adding Tuned Service"Jenkins1-0/+1
2017-07-26Merge "Fix enable-ceph sample environment"Jenkins2-0/+8
2017-07-26Deploy Ceph in containers using ceph-ansible via external workflowGiulio Fidente1-0/+12
Add docker profiles to deploy Ceph in containers via ceph-ansible. This is implemented by triggering a Mistral workflow during one of the overcloud deployment steps, as provided by [1]. Some new service-specific parameters are available to determine the workflow to execute and the ansible playbook to use. A new `CephAnsibleExtraConfig` parameter can be used to provide arbitrary config variables consumed by `ceph-ansible`. The pre-existing template params consumed up until the Pike release to drive `puppet-ceph` continue to work and are translated, when possible, into the equivalent `ceph-ansible` variable. A new environment file is added to enable use of ceph-ansible; the pre-existing puppet-ceph implementation remains unchanged and usable for non-containerized deployments. 1. https://review.openstack.org/#/c/463324/ Change-Id: I81d44a1e198c83a4ef8b109b4eb6c611555dcdc5
2017-07-26Adds environment file for ODL + SRIOVTim Rozet1-0/+28
Using the separate neutron-opendaylight and SRIOV env files do not work because sriov includes using OVS agent (which ODL does not want or need) and the default ODL env file has no Compute ML2 because it is not needed. Thus a new environment file is needed for deploying these 2 features in combination. Closes-Bug: 1696667 Change-Id: I6f7a9368aa521de928c269619278c30acda03799 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-07-26Merge "Ps Cinder: Added support for password less login"Jenkins1-0/+1
2017-07-26Fix enable-ceph sample environmentBen Nemec2-0/+8
The necessary resource registry entries were missing from this env and the old environment was not deprecated. Change-Id: I6a9b148514fc5da1f96b9fd7fe09f564c2f82419
2017-07-26Merge "Add parameters for Veritas HyperScale distributed setup."Jenkins1-0/+7
2017-07-26Noop controller pre and post config resources.Marius Cornea1-0/+2
This change sets the ControllerPreConfig and ControllerPostConfig resources to OS::Heat::None in order to avoid setting the cluster to maintenance mode while upgrading to the docker architecture. Closes-Bug: 1706594 Change-Id: Ibd69670d1617b73a8621b8fd4243041891a96747
2017-07-26Fix creation of iptables rules for non-HA containerized HAproxyDamien Ciabrini1-0/+1
The introduction of I90253412a5e2cd8e56e74cce3548064c06d022b1 broke the HAproxy service due to some HAproxy-specific iptables rules being executed during the puppet config step. Ensure that no iptables call is performed during the generation of configuration files. Move those calls to step 1, as implemented in the pacemaker-based HAproxy service (Ib5a083ba3299a82645f1a0f9da0d482c6b89ee23). Depends-On: I2d6274d061039a9793ad162ed8e750bd87bf71e9 Closes-Bug: #1697921 Change-Id: Ica3a432ff4a9e7a46df22cddba9ad96e1390b665
2017-07-25Adding Tuned ServiceJoe Talerico1-0/+1
Allow the user to set a specific Tuned profile on a given host. Defaults to throughput-performance Change-Id: I0c66193d2733b7a82ad44b1cd0d2187dd732065a
2017-07-25Contrail network realignement + DPDK enablementMichael Henkel11-381/+88
This patch moves Contrail roles communication from public/external to internal_api network for OpenStack API. It also adds the option to enable dpdk. Monolithic firstboot script is broken down into small pre-network and per-node extraconfig scripts Change-Id: I296a3bf60cef6fa950fd71d6e68effe367d1e66b Closes-Bug: 1698422
2017-07-25Merge "Fall back to non-containerized cinder-backup and cinder-volume for HA"Jenkins1-2/+3
2017-07-25add lbaasv2 to NeutronServicePlugins in octavia containersOr Idgar1-0/+5
without lbaasv2 neutron will not be able to load the plugin and communicate with octavia. Change-Id: If44b93703d3c408ae075d73ed695c3edc58fba18
2017-07-24Consistent hostname format env for split-stackJames Slagle3-15/+5
Adds a new environment split-stack-consistent-hostname-format.j2.yaml for use with split-stack that will set the {{role.name}}HostnameFormat parameters based on the actual roles in use. It's possible to generate these parameters and values as long as the roles files is the same between the 2 stacks, which will be documented in I9997bd685f8f79537dfc377f9f1eb0c7446c3289. Removes the hardcoded paramters from the other 2 split-stack environments. Change-Id: I93bc7c1a24a9cb2f9930372970c67c0eadb14add
2017-07-24Merge "Use static environment for deployed-server neutron mappings"Jenkins1-0/+4
2017-07-24Add parameters for Veritas HyperScale distributed setup.abhishek.kane1-0/+7
Add more parameters to Veritas Hyperscale's composable service, which will be relevant in distributed setup. Change-Id: Ib1b90edbf17ea7f14bdbed4857241fca86b87a18 Signed-off-by: abhishek.kane <abhishek.kane@veritas.com>
2017-07-24Merge "Add support for nova live/cold-migration with containers"Jenkins4-0/+4
2017-07-24Merge "Remove non-containerized pacemaker resources on upgrade"Jenkins1-3/+0
2017-07-24Merge "Refactor iscsi initiator-name reset into separate service"Jenkins2-0/+4
2017-07-24Merge "Drop MongoDB from the undercloud"Jenkins1-0/+2
2017-07-23Drop MongoDB from the undercloudDan Prince1-0/+2
This patch drops MongoDB from the undercloud and swaps in a 'swift' and 'sqlalchemy' versions for the Zaqar backends. Change-Id: Ic6600f284dfbf4360b42598d3651b4c0f8046d1c
2017-07-23Add support for nova live/cold-migration with containersOliver Walsh4-0/+4
Updates hieradata for changes in https://review.openstack.org/471950. Creates a new service - NovaMigrationTarget. On baremetal this just configures live/cold-migration. On docker is includes a container running a second sshd services on an alternative port. Configures /var/lib/nova/.ssh/config and mounts in nova-compute and libvirtd containers. Change-Id: Ic4b810ff71085b73ccd08c66a3739f94e6c0c427 Implements: blueprint tripleo-cold-migration Depends-On: I6c04cebd1cf066c79c5b4335011733d32ac208dc Depends-On: I063a84a8e6da64ae3b09125cfa42e48df69adc12
2017-07-22Merge "Add composable services for the Veritas HyperScale."Jenkins2-0/+42
2017-07-21Merge "Add a new role for ComputeOvsDpdk and clean-up parameters"Jenkins3-19/+34
2017-07-21Fall back to non-containerized cinder-backup and cinder-volume for HADamien Ciabrini1-2/+3
The non-HA version of those two A/P Cinder services currently runs non-containerized, as explained in I9ac74d6717533f59945694b4a43fe56d7ca768c6 and Ib10e4f18d967d356a15b97f58c488f8402a73356. Disable their HA counterpart until the non-HA version is re-enabled. Change-Id: I2aa49330fa361e330448dc9aa88e3812d9a7d464
2017-07-20Fix network-isolation.j2.yaml to ignore VIPs for disabled networksDan Sneddon1-1/+1
This change modifies network-isolation.j2.yaml to ignore VIPs for networks that are disabled. This fixes a bug where VIPs would be created in network-isolation.yaml even if a network was disabled. Change-Id: I331b8fec3847bce6ca6c22a9f173055121ef65c9
2017-07-20Remove DockerNamespace referencesIan Main1-0/+3
This patch removes more of the DockerNamespace references as part of the cleanup/reorg of the container configuration patches. This also adds a centos-rdo environment file for use with the new interface. This file was generated with the command "openstack overcloud container image prepare" Depends-On: I729fa00175cb36b02b882d729aae5ff06d0e3fbc Depends-On: I292162d66880278de09f7acbdbf02e2312c5bb2b Co-Authored-By: Dan Prince <dprince@redhat.com> Change-Id: Ice7b57c25248634240a6dd6e14e6d411e7806326
2017-07-20Remove non-containerized pacemaker resources on upgrademarios1-3/+0
Adds upgrade_tasks to remove the pacemaker resources using the ansible-pacemaker module. Resources are disabled and removed in step2 (called only on bootstrap node) and then the cluster stop is moved to step3 The existing systemd/service call is kept but only to disable services after they are disabled/deleted from the cluster. Related-Bug: 1701485 Co-Authored-By: Damien Ciabrini <dciabrin@redhat.com> Change-Id: Ia597d240ea5834c50a8f6c4fac0b6ed417b8535c
2017-07-18Use static environment for deployed-server neutron mappingsJames Slagle1-0/+4
We can't include these mappings for the deployed-server neutron ports when using split-stack in the generated environment file because the path to the actual templates directory is not known from with the templates themselves. This patch removes the mappings from the generated environment from the stack output and adds a static environment file with relative paths that will have to be included on the deploy command cli instead. Change-Id: Id4b8c939fa7b26205609819b66e76bf73c9890d0 Closes-Bug: #1705144
2017-07-18Ps Cinder: Added support for password less loginrajinir1-0/+1
Added missing san_private_key parameter used for password less SSH authentication. Change-Id: I6d7544b525055318aa567f9cbbe318d82bafacf0 Depends-On: 70db86d3366f85edf563aa73c533931a21cfab4d
2017-07-18Merge "Enable Neutron LBaaS Integration"Jenkins1-2/+3
2017-07-17Refactor iscsi initiator-name reset into separate serviceOliver Walsh2-0/+4
This currently assumes nova-compute and iscsid run in the same context which isn't true for a containerized deployment Change-Id: I11232fc412adcc18087928c281ba82546388376e Depends-On: I91f1ce7625c351745dbadd84b565d55598ea5b59 Depends-On: I0cbb1081ad00b2202c9d913e0e1759c2b95612a5
2017-07-17Add composable services for the Veritas HyperScale.abhishek.kane2-0/+42
Add a composable service for each of: - the Veritas HyperScale's Cinder backend. - installing the Veritas HyperScale controller packages. Change-Id: I99ee827825ec2a6a3c695de1ca1c1015859fe398 Depends-On: I316b22f4f7f9f68fe5c46075dc348a70e437fb1d Depends-On: I9168bffa5c73a205d1bb84b831b06081c40af549 Signed-off-by: abhishek.kane <abhishek.kane@veritas.com>
2017-07-14Use a single configuration file for specifying docker containers.Ian Main1-115/+121
This removes the default container names from all the templates and uses a single environment file to specify the full container name and registry from which to pull. Also does away with most of DockerNamespace. Change-Id: Ieaedac33f0a25a352ab432cdb00b5c888be4ba27 Depends-On: Ibc108871ebc2beb1baae437105b2da1d0123ba60 Co-Authored-By: Dan Prince <dprince@redhat.com> Co-Authored-By: Steve Baker <sbaker@redhat.com>
2017-07-14Enable Neutron LBaaS IntegrationAndrew Toth1-2/+3
Allows the configuration of the Neutron LBaaS agent. Change-Id: I4c29ece765ec9147cef9b4d74d30e3c4483c48ab Implements: blueprint lbaasv2-service-integration
2017-07-14Add a new role for ComputeOvsDpdk and clean-up parametersSaravanan KR3-19/+34
A new role ComputeOvsDpdk has been added to avoid manual roles_data creation. And cleaned-up the DPDK parameters inline with the refactored code. Change-Id: I16dac69609c98194c2504ff067258fa14363d4f1
2017-07-13Merge "Containerize Manila Share service"Jenkins1-0/+1