summaryrefslogtreecommitdiffstats
path: root/puppet/services
AgeCommit message (Collapse)AuthorFilesLines
2016-09-16Merge "Unset Keystone public_endpoint"Jenkins1-1/+0
2016-09-14Merge "Add support for deploying Ceph RGW role"Jenkins1-0/+77
2016-09-13Merge "Enable proxy header parsing for Manila"Jenkins1-0/+1
2016-09-12Merge "De-bracket vncproxy_host in compute profile"Jenkins2-9/+2
2016-09-12Merge "Configure Keystone credentials"Jenkins1-0/+12
2016-09-12Merge "Add trunking plugin to list of default ML2 service plugins"Jenkins1-1/+1
2016-09-12Unset Keystone public_endpointAdam Young1-1/+0
The keystone public_endpoint value should be deduced from the calling request and not hardcoded, or it makes network isolation impossible. Change-Id: Ide6a65aa9393cb84591b0015ec5966cc01ffbcf8 Closes-Bug: 1381961
2016-09-12De-bracket vncproxy_host in compute profileBen Nemec2-9/+2
This is done in the vncproxy profile, but for some reason is not in the compute one. It causes hiera to explode when the brackets are left, so we need to do the bracket stripping here too. Also switches both places to just use the host_nobrackets version of the endpoint instead of stripping them with str_replace. Change-Id: I7ccd84b575fd652f6412fdb1869c31c79a7bf53b Closes-Bug: 1618623
2016-09-12Configure Keystone credentialsEmilien Macchi1-0/+12
Configure Keystone credentials by installing 2 keys with dynamic content generated by python-tripleoclient. Note: this is a first iteration of managing Keystone credentials. It has a few limitations: - keys are not exported to external storage. - keys are not rotated automatically. Change-Id: I45cf8821eadf528dfcdc8d74e6e0484597b0d2c0
2016-09-12Merge "Fix service config files having wrong map_merge format"Jenkins3-3/+3
2016-09-12Merge "Make Nova VNC Proxy service name match service net map"Jenkins2-3/+3
2016-09-12Enable proxy header parsing for ManilaJuan Antonio Osorio Robles1-0/+1
This is necessary for when HAProxy is terminating TLS for manila, else we will have keystone discovery errors. This is the same we do for several other services, as manila uses the same middleware. Change-Id: Ice78b0abceb6a956bb8c1dc6212ee1b56b62b43f
2016-09-10Merge "Adjust MTU to compensate for VLAN tag issue"Jenkins1-2/+5
2016-09-10Add support for deploying Ceph RGW roleKeith Schincke1-0/+77
This patch add support for deploying Ceph RGW. Co-Authored-By: Giulio Fidente <gfidente@redhat.com> Change-Id: I88c8659a36c2435834e8646c75880b0adc52e964
2016-09-10Make Nova VNC Proxy service name match service net mapJuan Antonio Osorio Robles2-3/+3
If these names don't match then we cannot set the service's nodes, VIP and network. Change-Id: I8f1c0eaf62eee2704a5f2556a553032106db606b Closes-Bug: #1621368
2016-09-10Merge "Add support for configuring the OVS firewall driver"Jenkins1-0/+9
2016-09-09Merge "add composable services for Contrail"Jenkins6-0/+436
2016-09-09Adjust MTU to compensate for VLAN tag issueBrent Eagles1-2/+5
Some network configurations uncovered what appears to be an issue where a spurious 802.1q header is injected into tunnelled traffic. Adjusting the default value to accomodate the extra overhead should avoid this problem. Partial-Bug: #1621533 Change-Id: I9ebad2d6ad34d90fcb998497873059995cdef276
2016-09-09Merge "Generate VIP info for ctlplane VIP, not management"Jenkins1-3/+3
2016-09-09Merge "Add global_config_settings to services' output"Jenkins2-0/+7
2016-09-09Generate VIP info for ctlplane VIP, not managementJuan Antonio Osorio Robles1-3/+3
The management network does not have a VIP, so it's been wrong to generate a cloud name and hieradata for this. Instead, the network that actually needs a name and a hosts entry is the ctlplane network, which actually has a VIP and there are services that use it. bp tls-via-certmonger Closes-Bug: #1621742 Change-Id: I163b2c7b5684da6dc290636f54eefe3f2b0c3e3f
2016-09-08Convert SwiftDevicesAndProxyConfig to composable formatSteven Hardy2-2/+18
Make use of the new composable per-service node_ips lists by adding a ServiceNetMap entry for SwiftStorage, then pass the data to construct the raw device list into puppet-tripleo instead of mangling it in t-h-t inside the role templates. This will allow running swift storage services on nodes other than the Controller and ObjectStorage roles, and is required to enable custom roles. Depends-On: I11deed1df712ecccf85d36a75b3bd2e9d226af36 Change-Id: I1bf5f8a9d34b1a5d64ab8656b386226b54ec1a27 Partially-Implements: blueprint custom-roles
2016-09-08Merge "Add base neutron service configuration"Jenkins1-8/+19
2016-09-08Add support for configuring the OVS firewall driverBrent Eagles1-0/+9
This patch introduces a parameter to allow customizing the Neutron OpenvSwitch agent's firewall driver configuration. Closes-Bug: 1618507 Change-Id: I595c392f7a1afe2164bf562224d9eda9b3dfa982
2016-09-08Merge "Create entries for overcloud VIPs in /etc/hosts"Jenkins1-0/+56
2016-09-07Merge "OVN heat templates"Jenkins2-0/+124
2016-09-07Fix service config files having wrong map_merge formatSaravanan KR3-3/+3
map_merge in heat templates should start with hypen for each map group, few templates are missing the hypen for the second map group, which is added in this patch Closes-Bug: #1621008 Change-Id: I307fdd7afc374cce46d6e378594f1b688b9fd4f6
2016-09-07Add base neutron service configurationBrent Eagles1-8/+19
Include the neutron-base service definition to align pull in common configurations. This might not be *absolutely* necessary as any required common configuration would likely already be added by and OVS agent service, etc. but it's better to be safe than sorry and it does keep things consistent across the Neutron services. Implements: blueprint tripleo-sriov Change-Id: I10a9d9b29760475e6cd75e4057051c75a52ffbb7
2016-09-07Create entries for overcloud VIPs in /etc/hostsJuan Antonio Osorio Robles1-0/+56
This will aid us in using FQDNs instead of IPs if DNS is not set. If the deployer already has DNS set up, they can easily disable this profile by adding the use-dns-for-vips.yaml environment file. bp tls-via-certmonger Change-Id: I8c1b3f253d0149d575171c208f9a1342a7b26450 Depends-On: I1bdb2701dfb3e7ef072e674c9882d3be5af7296c
2016-09-07Merge "Fix aodh auth url to remove suffix"Jenkins1-1/+1
2016-09-06Merge "Change NeutronWorkers default to result in previous behavior"Jenkins1-3/+11
2016-09-06Merge "Cleanup haproxy service from explicit services enablement"Jenkins2-23/+0
2016-09-06Fix aodh auth url to remove suffixPradeep Kilambi1-1/+1
puppet aodh auth type defaults to password type and v2 auth_url doesnt work with domain. This fixes the url to not include suffix. Change-Id: I46d53e748d8932ed1183bedbdeb5eefcde679f9e
2016-09-05add composable services for Contrailmichaelhenkel6-0/+436
- Config - Control - Analytics - Database - Webui For puppet modules see https://review.openstack.org/#/c/348905 Implements: blueprint contrail-services Depends-On: I8de63b6e21f8fdf3c2fd13bf5475cce4a85311d6 Change-Id: I7325b4268c4bec5eb7b777ea2a0639d7a8553e93
2016-09-05Merge "Ironic: update default enabled drivers"Jenkins1-1/+1
2016-09-05Merge "Ironic: configure disk erasing during cleaning"Jenkins1-0/+7
2016-09-05Merge "Ironic: enable iPXE by default and make it configurable"Jenkins1-0/+23
2016-09-04Ironic: update default enabled driversDmitry Tantsur1-1/+1
The goal is to have only production drivers available out of box. Remove agent_ipmitool as it required additional configuration of swift temporary URLs. Add pxe_ilo and pxe_drac as they work out of box. This brings the default enabled drivers list closer to one of undercloud. Note that pxe_ssh is not enabled as it's not a production driver. Change-Id: Ic7d2190e2d39a795b024c2999e22ee47b3045cf1 Partially-Implements: blueprint ironic-integration
2016-09-03Merge "Mv pacemaker and firewall out of controller"Jenkins2-1/+67
2016-09-02Mv pacemaker and firewall out of controllerDan Prince2-1/+67
This patch moves settings for pacemaker and the tripleo firewall out of controller.yaml. Related bug: #1604414 Change-Id: I0164717bfd79cdea3de8eb7a64771028bea201ac
2016-09-02Merge "Ironic: enabled_services moved from ironic to ironic::conductor manifest"Jenkins1-1/+1
2016-09-02Merge "Move snmp settings into composable services"Jenkins1-2/+2
2016-09-02Merge "Remove repeated apache-related hieradata"Jenkins1-13/+0
2016-09-02Move snmp settings into composable servicesDan Prince1-2/+2
Provides snmp_readonly_user_* parameters to the base::snmp class and removes them from the role templates. Related-bug: #1604414 Co-Authored-By: Giulio Fidente <gfidente@redhat.com> Change-Id: I35b1ff23baff0c25e742562e1103a3882f7bf767
2016-09-02Ironic: configure disk erasing during cleaningDmitry Tantsur1-0/+7
Cleaning is run before the first and between every deployments to ensure that the node is in a clean state (hence its name). The most important part of it is wiping the hard drive. This change allows tuning this action. A new option IronicCleaningDiskErase accepts the following options: * full - for full cleaning with removing the data via ATA secure erase or shred * metadata - for cleaning only partitioning table. The third option "none" is suppored by Puppet but is not advertised here as disabling disk wiping completely is known to cause bugs. Note that the upstream Ironic default is a bit unfortunate: it enabled both processes. We set the default to "full" which has the same effect, but is faster. Change-Id: I46632f71f7ab63daac243acefa5166c58ca05da0 Partially-Implements: blueprint ironic-integration
2016-09-02Ironic: enable iPXE by default and make it configurableDmitry Tantsur1-0/+23
Introduce two new options: IronicIPXEEnabled (true by default) and IronicIPXEPort (8088 by default). Also copy UEFI configuration from instack-undercloud. Change-Id: I4e037c1ea9c8663efb4d472469d0d2640e265710 Depends-On: Icb9633134114041bbd497e7652482dd5d34c9327 Partially-Implements: blueprint ironic-integration
2016-09-02Ironic: enabled_services moved from ironic to ironic::conductor manifestDmitry Tantsur1-1/+1
Change-Id: I30003e4500ccf681121bca7f0a8ffddb05f61660 Partially-Implements: blueprint ironic-integration
2016-09-02Merge "Availability monitoring agents support"Jenkins96-3/+406
2016-09-01OVN heat templatesBabu Shanmugam2-0/+124
Installs and configures OVN databases and process and also configures the neutron plugin for OVN. Implements: blueprint tripleo-ovn Change-Id: Ic3e415bb0587dd85b71f6c14a96f6b2c86a7b30f
2016-09-01Change NeutronWorkers default to result in previous behaviorBrent Eagles1-3/+11
Neutron's behavior changed in Newton with respect to the default value of 0 for NeutronWorkers. Instead of effectively treating it as "processorcount", it now assumes we mean what we say and doesn't spawn any workers, resulting in only a single process for handling API requests. This change alters the default value to regain the previous behavior. This change also extends the worker count to the RPC worker setting - which was possibly an oversight in previous releases. The default behavior will have no result for most systems. Closes-Bug: 1619383 Change-Id: Id6e3ee544160372c806905e77348150a1a1eec1b