summaryrefslogtreecommitdiffstats
path: root/puppet
AgeCommit message (Collapse)AuthorFilesLines
2016-06-10Merge "Remove unused Neutron parameters from roles"Jenkins2-60/+0
2016-06-10Merge "composable neutron ml2 and ovs agent"Jenkins7-259/+234
2016-06-10Merge "composable neutron server"Jenkins5-53/+100
2016-06-10Merge "Replace no-op TLS stacks with OS::Heat::None"Jenkins2-51/+0
2016-06-09Remove unused Neutron parameters from rolesDan Prince2-60/+0
This patch removes a variety of unused Neutron parameters. Most of these parameters stem from the old days of tripleo-image-elements and are either no longer used with or were never completely implemented to begin with. Partially-implements: blueprint composable-services-within-roles Change-Id: I478d282640affa89e38004e465458e79bd2d153b
2016-06-09composable neutron ml2 and ovs agentDan Prince7-259/+234
Adds new puppet and puppet pacemaker specific services for the Neutron ml2 configuration and the Ovs agent. Partially-implements: blueprint composable-services-within-roles Change-Id: I896e5dfe6fae49371c9fe7f47c4364eb6f621b07
2016-06-09composable neutron serverDan Prince5-53/+100
Adds new puppet and puppet pacemaker specific services for the Neutron server configuration. Depends-On: I52815f45a04bf3e39940b9cb116261730580a3e2 Partially-implements: blueprint composable-services-within-roles Change-Id: I1680d4b7044f16d672e99ca356d954b6734af287
2016-06-09Replace no-op TLS stacks with OS::Heat::NoneJuan Antonio Osorio Robles2-51/+0
These stacks effectively do nothing. So better replace them with the None resource. Change-Id: If1fc759ca7f03f66229c27560cc4b8e10baa0f11
2016-06-07Remove nova-cert from TripleOEmilien Macchi2-5/+0
Nova Cert service was useful when running EC2 API but is now useless since we don't run it anymore. This patch aims to remove it, as this is a useless service. Change-Id: If5165e98d3c7b982d091f6e80195fb02135e1368
2016-06-07Merge "Don't overwrite ceph osd_journal_size"Jenkins1-1/+0
2016-06-06Merge "Explode Loadbalancer role into HAproxy + keepalived"Jenkins3-8/+26
2016-06-06Enable nova-conductor as a composable serviceEmilien Macchi7-14/+99
Implement NovaConductor service using nova-base for common parameters. * Move rabbitmq parameters from controller.yaml to nova-base service, as an example. More parameters will move in the future. * Move nova-conductor bits from monolithic manifests to the new service using new profiles from puppet-tripleo. Depends-On: Iaaf3a3c2528d9747e41f360a1fe55f95ed37b2d1 Implements: blueprint composable-services-within-roles Change-Id: I178f092b74ae12f2cb6f006db7cb00e4d6bddfd8
2016-06-04Explode Loadbalancer role into HAproxy + keepalivedEmilien Macchi3-8/+26
Split Loadbalancer into HAproxy & Keepalived roles. Depends-On: I8aa9045fc80205485abab723968b26084f60bf71 Change-Id: If2723358099e78052c351a4a45fdf01d116a89df
2016-06-04Merge "Composable roles within services - Redis"Jenkins6-39/+77
2016-06-02Switch Cinder Api/Scheduler/Volume to composable rolesGiulio Fidente17-433/+297
Uses a shared cinder-base resource to do the database and messaging configuration for all three services. Depends-On: I3c6d5226eed5f0f852b0ad9476c7cd9a959fda69 Change-Id: I47c5fd190efca5f02e73fd22aba6cda573daf5cc
2016-06-02Composable roles within services - RedisPradeep Kilambi6-39/+77
Co-Authored-By: Carlos Camacho <ccamacho@redhat.com> Change-Id: I0d9332f7f4f9116c5435d338a9c35d4fb3f512c6 Implements: blueprint composable-services-within-roles Depends-On: I60493a3aa64e5136b763e8e2084d728f5f812f8a
2016-06-02Merge "Composable Sahara services"Jenkins8-95/+204
2016-06-02Merge "Take 'host' parameter from neutron manifest into use"Jenkins2-4/+2
2016-06-02Merge "Take 'host' parameter from nova manifest into use"Jenkins2-1/+1
2016-06-01Merge "Set rabbitmq loopback_users explicitely"Jenkins1-0/+1
2016-06-01Composable Sahara servicesBrad P. Crochet8-95/+204
Adds new puppet and puppet pacemaker specific services for Sahara API and Sahara Engine. The Pacemaker templates extend the default Sahara services and swap in the pacemaker specific puppet-tripleo profile instead. Change-Id: I1adda514e9592d149a3d45743a9a00b59c28ca38 Depends-On: I0c8bd68f9a98626e9d67ef713c72c9dd05b7cc12 Implements: blueprint composable-services-within-roles
2016-06-01Enable proxy header handling for novaJuan Antonio Osorio Robles1-0/+1
Nova is using http_proxy_to_wsgi middleware[1][2]. This parses the headers provided by the proxy, and helps us properly use TLS for keystone discovery. There was an option introduced in this middleware to have it disabled by default, and this change enables it. [1] Ia78f73e96585ab33a379a0b0be6d9682f7fbd810 [2] I808469f24066d382decf55b9dad5312d6e068da7 Change-Id: I3918f24c0c87cb626a28645b46e3df6360d5f924
2016-06-01Take 'host' parameter from neutron manifest into useJuan Antonio Osorio Robles2-4/+2
Recently the 'host' parameter was added to the neutron manifest. So we no longer need to manually add it to the configuration. Change-Id: I6cb73c6d5da8b99680dec97e03ac4805451835fb Depends-On: I81b86208826e99beccafd2871ce2afd45394e37f
2016-06-01Take 'host' parameter from nova manifest into useJuan Antonio Osorio Robles2-1/+1
Recently the 'host' parameter was added to the nova manifest. So we no longer need to manually add it to the configuration. Change-Id: I6f3dc50ea8737e5e7cd859685a9308edff976f31 Depends-On: Icce3ebc401442651942f8de3eabffadaad812377
2016-06-01Merge "compute: use new param for live_migration_tunnelled"Jenkins2-6/+6
2016-05-31Merge "Configure ObjectStorage services via resource chains"Jenkins3-0/+15
2016-05-31Merge "Cleanup hieradata to reduce Puppet warnings"Jenkins8-12/+12
2016-05-31Cleanup hieradata to reduce Puppet warningsEmilien Macchi8-12/+12
Some puppet parameters were deprecated, some of them removed. This patch reduce the number of warnings to a few, and the rest of warnings are bugs that are in progress by Puppet OpenStack team. This patch is mostly some cleanup so we don't have useless warnings in Puppet catalog. Changes: * Update Ceilometer auth params * Update Neutron auth params * Update Heat auth params * Update Swift hash suffix param * Remove neutron::server::notifications::nova_url, useless. Change-Id: Ie32681a1fe32735f70ba372630da09f91227298c
2016-05-31Merge "loadbalancer: update hiera parameters for HAproxy/keepalived split"Jenkins7-42/+53
2016-05-31Don't overwrite ceph osd_journal_sizeErno Kuvaja1-1/+0
The default journal size is 5 gigs. This change stops us overwriting it with 1 gig that is too small for production. The config value is used by ceph only when it creates the journal so this does not affect upgrades. Change-Id: I4bfd2ab47e131d8fcdd5dc75a5a56cfae8b22d5a
2016-05-31Configure ObjectStorage services via resource chainsSteven Hardy3-0/+15
Similar to the https://review.openstack.org/#/c/259568 which added support for the composable services StepConfig and ServiceConfigSettings parameters so that the Controller role supports composable services, this adds those interfaces for the ObjectStorage role. Note that at this time the ObjectStorage post config only supports steps 2, 3 and 4, not all those in services/README.rst Partially-Implements: blueprint composable-services-within-roles Change-Id: I22ffaa68a6ccd4be29d51674871268179bcddcbc
2016-05-31Fix inconsistency with ringbuilder/storage stepsSteven Hardy5-58/+65
Currently when deploying swift on the Controller nodes, we do the ringbuilder config during step3 and the swift-storage config during step 4, but this order is reversed on the ObjectStorage nodes. Also, we include the base swift class inconsistently during step2 on controller nodes, and via the overcloud-object manifest on ObjectStorage nodes. So fix this inconsistency as a precursor to conversion to composable services interfaces for the ObjectStorage role, we rework the post config so we apply the ObjectStorage config in steps 2, 3 and 4, which should hopefully get us much closer to the process used on the controller role, thus be easier to decompose in a compatible way. Partially-Implements: blueprint composable-services-within-roles Change-Id: Ic9d0ed8584a12d681a8f4d4742d39b96c15e531a
2016-05-31Convert Swift proxy to composable services formatSteven Hardy4-58/+50
Switch the swift proxy service to use the new composable services format. Change-Id: Idc9ac64818882e73836ac99bbad56eec184c9a5d Partially-Implements: blueprint composable-services-within-roles Depends-On: I6bd72284911f3f449157a6fc00b76682dd53bd8c
2016-05-30loadbalancer: update hiera parameters for HAproxy/keepalived splitEmilien Macchi7-42/+53
In puppet-tripleo, we split loadbalancer.pp in 2 classes to be more composable: haproxy & keepalived. This patch is just updating all hiera parameters related to HAproxy & keepalived. Depends-On: I46ed8348dc990d9aa0d896e1abea3b30a8292634 Change-Id: Ibf56184cd10af1d0dcae773c02b0f31a6204badf
2016-05-30compute: use new param for live_migration_tunnelledEmilien Macchi2-6/+6
Use the new interface in puppet-nova to configure this parameter. Depends-On: I3498076b292e9dff88b9ad9d5c65c99a2a98cd7f Change-Id: Id9f253e942f6373f77acc9239d79f62103b39904
2016-05-30Merge "Pass enabled and manage_service to Neutron/L3 when Pacemaker"Jenkins1-0/+2
2016-05-30Pass MysqlVirtualIP via EndpointMapGiulio Fidente29-134/+46
By passing the MysqlVirtualIP via the EndpointMap we won't need it to be provided as a parameter to the services. This follows what is already happening for the glance registry service with I9186e56cd4746a60e65dc5ac12e6595ac56505f0. Change-Id: Iad2ab389bf64d0fc8b06eb0e7d29b5370ff27dff Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
2016-05-27Merge "Enable proxy header handling for cinder"Jenkins1-0/+4
2016-05-27Merge "Configure ComputeServices via resource chains"Jenkins3-177/+220
2016-05-27Merge "Fix ceph keyring setting for gnocchi"Jenkins2-2/+6
2016-05-27Configure ComputeServices via resource chainsCarlos Camacho3-177/+220
This patch wires a Heat feature to configure services via a Heat resource chain. Additional patches will be able to configure compute services using composable services. Change-Id: Ib4fd8bffde51902aa19f9673a389600fc467fc45
2016-05-27Remove custom SSL-related resource for cinderJuan Antonio Osorio Robles2-2/+0
Now that cinder includes http_proxy_to_wsgi by default[1] our puppet resource that included it in cinder's api-paste config is not longer needed. [1] If5aab9cc25a2e7c66a0bb13b5f7488a667b30309 Change-Id: I6141b6caf9b04ee73fae3ae2b94b3001b21b9999
2016-05-27Enable proxy header handling for cinderJuan Antonio Osorio Robles1-0/+4
Cinder is using http_proxy_to_wsgi middleware. This parses the headers provided by the proxy, and helps us properly use TLS for keystone discovery. There was an option introduced in this middleware to have it disabled by default, and this change enables it. Change-Id: Ia33b3fa04d71eab10effd0b33eb2c194282cd15b
2016-05-27Merge "Enable proxy header parsing for heat"Jenkins1-0/+1
2016-05-27Merge "Configure CephStorage services via resource chains"Jenkins3-36/+69
2016-05-27Enable proxy header parsing for heatJuan Antonio Osorio Robles1-0/+1
For handling the X-Forwarded-Proto, heat uses the http_proxy_to_wsgi middleware from oslo.middleware. It used to work by default, but now configuration is required to enable that. We require it since we are effectively behind a proxy (HAProxy). Change-Id: I256f27ec6a3f66316ff6aa3f78b2f1ec1472f097
2016-05-26Remove the delay resource and its constraintsMichele Baldessari1-37/+0
With change 648099e1925e7d0d3f6906e5e8d15f3871e88460 and the replacement of ceilometer-alarm with aodh, the delay resource became a leaf in the ordering graph and serves no real purpose any longer. It can now be removed without affecting anything else. Change-Id: Ib86e609821b9f0b7b0d99c49aead20f9a177f63d
2016-05-26Set rabbitmq loopback_users explicitelyMichele Baldessari1-0/+1
In Fedora/RHEL land we carry a patch that sets the loopback_users config explicitely to []. Since this patch diverges from upstream and sometimes gets dropped by mistake during rebases, let's set this value explicitely in our config files, instead of relying on a patch that is distro-specific. The patch is here: http://pkgs.fedoraproject.org/cgit/rpms/rabbitmq-server.git/tree/rabbitmq-server-0004-Allow-guest-login-from-non-loopback-connections.patch Change-Id: If9ca05b38a8bd2a6834c08336a816bbd0ae1ea94
2016-05-26Configure CephStorage services via resource chainsGiulio Fidente3-36/+69
Also wires in the steps into the CephStorage role. Change-Id: Ib472f1279478ad7792349cc32bb3c5f510ba69fe
2016-05-26Merge "composable heat services"Jenkins12-210/+366