aboutsummaryrefslogtreecommitdiffstats
path: root/puppet
AgeCommit message (Collapse)AuthorFilesLines
2016-08-25Move glance/heat hiera settings to servicesDan Prince7-20/+48
This patch removes the remaining bind IP, and password settings for Heat and Glance into the composable services. Change-Id: I17abcb2a08a1972cbcf8163f6608ac22ddfc15f7 Related-bug: #1604414
2016-08-25Ironic: add missing haproxy and firewall configurationDmitry Tantsur3-0/+12
Make sure Ironic API listens on a different IP than HAProxy. Also open firewall ports for Ironic API and TFTP. Change-Id: I9d843e76adcdb1085fd1e9fb7408a2387909382b
2016-08-25Merge "Make OVS ARP responder feature configurable"Jenkins1-0/+6
2016-08-25Merge "Update authtoken parameters to match recent changes"Jenkins8-21/+21
2016-08-25Added a new composable service for enabling DPDK on compute nodes.Saravanan KR1-0/+73
ComputeNeutronOvsAgent should be overriden to neutron-ovs-dpdk-agent service instead of neutron-ovs-agent (default) in order to enable DPDK in OVS. This new service provides all the required parameters for enabling DPDK with OVS (vswitch::dpdk). Implements: blueprint tripleo-ovs-dpdk Depends-On: I6cfd13d4979731696b09da52b2618fa33042403d Change-Id: I538043b780a55006c54160cc7b33ddf52684ebf4
2016-08-24Update authtoken parameters to match recent changesEmilien Macchi8-21/+21
Update authtoken parameters for: - Aodh - Ironic - Manila - Nova - Ceilometer Change-Id: Ie123b8da1a7af2e406aadca4775de9e8c4e6e1f5
2016-08-24Merge "Fixes Neutron metadata parameters in THT"Jenkins1-2/+13
2016-08-24Merge "Permit usage of raw disks as backends for Swift storage"Jenkins3-2/+29
2016-08-24Fixes Neutron metadata parameters in THTTim Rozet1-2/+13
Changes include: - Adds missing parameter to enable DHCP Metadata networks, which is required to enable isolated or forced metadata via DHCP agent - Fixes isolated metadata parameter to use a boolean - Fixes regression where force metadata parameter was accidentally removed Closes-Bug: 1613743 Change-Id: I08f907fe8a8e89e108351b84db33c4d9c004b957 Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-08-24Make OVS ARP responder feature configurableBrent Eagles1-0/+6
Adds NeutronEnableARPResponder parameter to allow enabling the ARP responder feature in the OVS agent. Change-Id: Ide82d890ddbd842383255f5c06c186054ec8f97d
2016-08-24Merge "Move Keepalived/HAproxy settings out of controller"Jenkins4-37/+45
2016-08-24Set the default gnocchi driver to swiftPradeep Kilambi1-1/+1
Until mitaka we have been using file driver. Swift is much more scalable so lets use that instead as the default. Change-Id: Idb0d55f99dbdd9d89881ce981d489756eb508fc0
2016-08-24Move network bind IPs out of compute.yamlDan Prince3-16/+15
This patch moves the local bind host hiera data out of compute.yaml and into composable services. Change-Id: Iae4ca707c429cc8f5ec4d1d514ae7da0bf557dfd
2016-08-24Fix Flavor get_param for Block Storage.Sofer Athlan-Guyot1-1/+1
The get_param of the flavor was not pointing to the right parameter, leading to an empty flavor for the block storage and a failure during validation. Change-Id: Id9a3d5756be956cedf060443533b84fcc66e721c Closes-Bug: 1616453
2016-08-24Move Keepalived/HAproxy settings out of controllerDan Prince4-37/+45
This moves the config settings out of controller.yaml for Keepalived and HAproxy. NOTE: the tripleo::haproxy::redis_password wasn't getting set correctly before this patch. Looks like a breakages that occurred when puppet-tripleo dropped the loadbalancer class. Related-Bug: #1604414 Change-Id: Id24b02ac73f4ae33b20194da8a5f99f17403ece9
2016-08-24Move out of roles any Ceph settingGiulio Fidente4-45/+16
Change-Id: I6ff0f977a1fb2fd55b29becd296ab01c65b50228
2016-08-23Move RabbitMQ settings out of controller.yamlDan Prince2-32/+19
This moves the config settings out of controller.yaml for RabbitMQ and into puppet/services/rabbitmq.yaml. Related-Bug: #1604414 Change-Id: I6b3d71653fb91b89b85dae7df4088afff22b71ac
2016-08-23Move MySQL settings out of puppet/controller.yamlDan Prince3-61/+43
This moves the config settings out of controller.yaml for MySQL and into puppet/services/database/mysql.yaml. The top leve MysqlRootPassword is still maintained by default in overcloud.yaml so that users who upgrade won't get broken. New users may optionally specify the MysqlRootPassword as a parameter instead which will take priority over the top level generated parameter. We drop the top level MysqlClusterUniquePart because it is no longer used (I think it was a remnant from t-i-e). Related-Bug: #1604414 Change-Id: I06ebac0f4c87dabfccefb2e550a64650868c5b26
2016-08-23Permit usage of raw disks as backends for Swift storageGiulio Fidente3-2/+29
Adds a SwiftRawDisks parameter which can be used to provide a map disk-keyed with properties for each additional disk to be used as backend for Swift storage. Change-Id: I65ff488c8eb62c03fc45f04e70e18a5f4022d6b6 Depends-On: Id450e777930bb0b749c0ecfab0679a52a84fd7fe Depends-On: Iac75cf2244339fae444be5859b7583e80bafc4e2
2016-08-22Set cinder::api::bind_host within service templateGiulio Fidente4-31/+16
The map_replace at [1] will replace the network name with the local node IP address on the given network. 1. I7850d4dc8bf4db5f7ac6a6b53c1d900b561b4580 Change-Id: Ica064b5ffac61cebe2aae06d4f1d1d9e84258c10
2016-08-22Add deployment of CAs via hieradataJuan Antonio Osorio Robles1-0/+35
This enables us to pass a map of CAs to deploy the CA certificates using puppet and hiera instead of the bash script we were using. It also gives us the feature that we will be able to deploy several CA certificates on the nodes instead of just one as was the case before. Change-Id: I9559487874b80aeb093cc2fa2cfa7c0479d5a8b2 Depends-On: I84273b4cd6576a63fa78dc93ad6b077dd2a780c7
2016-08-22Add sriov_numvfs in THTkarthik s1-0/+8
Allow the operator to configure sriov_numvfs for each of the required SR-IOV interfaces. Depends-On: I2c1fce461d4602cd9f7de44b34e94920d1a581a6 Change-Id: I56b7ae268535a8e423e65e8f1b99763c44d99eca implements: blueprint tripleo-sriov Signed-off-by: karthik s <ksundara@redhat.com>
2016-08-22SR-IOV nic agent changes in line with composable roles.Sanjay Upadhyay1-0/+50
This add sriov nic agent as composable service. Implements: blueprint tripleo-sriov Depends-On: I3385d831a339deec7d1315f74b501e76109db811 Co-Authored-By: Saravanan KR <skramaja@redhat.com> Change-Id: I8d920f50da9e4261a9fdf702f7760efaa04a5278
2016-08-18Enable gnocchi systemd servicesMichele Baldessari7-4/+4
Marian Krcmari noticed that on a freshly deployed HA Newton system gnocchi-metricd and gnocchi-statsd are down. This likely came about when gnocchi moved to composable roles (I40a3815923099d00a0f3fc1d88a942784e7c6fb9) and those settings made sense when it was managed by pacemaker. Also make sure that all services are disabled when managed via pacemaker and add manage_service: false for gnocchi-api for pacemaker which was missing. Change-Id: If7d681e0fa3e84379ac83c8a55b481369fe2849e
2016-08-18Add DefaultPasswords to composable servicesDan Prince134-0/+497
This patch adds a new DefaultPasswords parameter to composable services. This is needed to help provide access to top level password resources that overcloud.yaml currently manages (passwords for Rabbit, Mysql, etc.). Moving the RandomString resources into composable services would cause them to regenerate within the stack. With this approach we can leave them where they are while we deprecate the top level mechanism and move the code that uses the passwords into the composable services. Change-Id: I4f21603c58a169a093962594e860933306879e3f
2016-08-18Pass ServiceNetMap to servicesGiulio Fidente134-0/+975
This will be needed to pick the network where the service has to bind to from within the service template. Change-Id: I52652e1ad8c7b360efd2c7af199e35932aaaea8c
2016-08-18Allow scheduler_available_filter to be customizablekarthik s1-0/+5
This patch allows the operator to override the default values of scheduler_available_filters, which is required for automating the deployments using SR-IOV feature. Change-Id: Ib68943c4c6926694b7d99e8f9d6135641048e04a Implements: blueprint tripleo-sriov Signed-off-by: karthik s <ksundara@redhat.com>
2016-08-18Merge "Add tripleo-firewall composable service"Jenkins7-12/+19
2016-08-18Merge "Add tripleo-packages composable service"Jenkins12-36/+25
2016-08-18Merge "Rename NeutronServer to NeutronApi to align with ServiceNetMap"Jenkins1-1/+1
2016-08-17Merge "Remove deprecated node_ips hiera keys"Jenkins1-32/+0
2016-08-17Merge "gnocchi: use new authtoken parameters"Jenkins2-21/+20
2016-08-17Use modulepath for PuppetJiri Stransky6-0/+6
We only create the /etc/puppet/modules symlinks during image building, so as we update the openstack-puppet-modules RPM during the lifecycle of a deployment, the symlinks can get out of date and some modules aren't find. This patch adds modulepath for puppet deployments, getting rid of the need for our Puppet modules to be symlinked from /etc/puppet/modules. If there are some already symlinked, they will take precedence. Also modules installed from source to /opt/stack/puppet-modules will take precedence over packaged modules in /usr/share/openstack-puppet/modules. Change-Id: I626a596478be7c55500f9e3c7118ef64ff28aaae Closes-Bug: #1613211
2016-08-17Add tripleo-firewall composable serviceDan Prince7-12/+19
This creates a new service to help manage the puppet-tripleo class that enables firewall features. Currently has no settings but this will keep our interfaces consistent. Change-Id: I5ac85fa1e460b19ee2b1a9280413aebefe300845
2016-08-17Add tripleo-packages composable serviceDan Prince12-36/+25
This creates a new service to help manage the puppet-tripleo class that enables and disables package installation features. NOTE: we can't move the upgrade setting into the new composable service yet due to coupling with the UpgradeDeployment resources. Change-Id: If35cf6a6f023e12ae8ebbc2d9929d244eb3ffa3a
2016-08-17Merge "Update Ironic composable services"Jenkins4-6/+57
2016-08-17Merge "Remove unneeded net_ip_map dump into hieradata"Jenkins5-20/+0
2016-08-17Merge "Remove deprecated net_ip_uri_map output"Jenkins5-10/+40
2016-08-17Merge "Remove deprecated net_ip_subnet_map output"Jenkins5-10/+40
2016-08-17Merge "Add cinder-backup service as role"Jenkins3-1/+97
2016-08-16gnocchi: use new authtoken parametersEmilien Macchi2-21/+20
Configure Gnocchi with authtoken new class in the Puppet module, and also remove the useless parameters that didn't exist in the module. Change-Id: I414990c4fd5c5c1cd43d50c7a3947a4a29f4587a
2016-08-17Merge "Set coordination url for gnocchi storage"Jenkins1-0/+12
2016-08-16Merge "Move neutron settings out of puppet/compute.yaml"Jenkins1-51/+0
2016-08-16Merge "Mv Ceilometer settings out of puppet/compute.yaml"Jenkins2-25/+6
2016-08-16Merge "Move Nova settings out of puppet/compute.yaml"Jenkins5-107/+62
2016-08-16Remove unneeded net_ip_map dump into hieradataGiulio Fidente5-20/+0
We will lookup bind addresses using map_replace within the templates so dumping net_ip_map as hieradata is unneeded. Change-Id: If54c9033fc58d2cfaa040e30adeed7f58e44fd88
2016-08-16Remove deprecated net_ip_uri_map outputGiulio Fidente5-10/+40
Takes the net_ip_uri_map value from the *_uri values emitted by net_ip_map instead. Also removes TenantIp and TenantIpUri from net_vip_map_external templates as there won't be any VIP on the tenant network. Change-Id: Icdac3d58162891f5ca3d5c20f14fcdff1781996f
2016-08-16Remove deprecated net_ip_subnet_map outputGiulio Fidente5-10/+40
Change-Id: I83ca923140d7f8ca3101e851e88ca3107a99555a
2016-08-15Merge "Remove deprecated hdp plugin and add ambari"Jenkins1-1/+1
2016-08-15Move neutron settings out of puppet/compute.yamlDan Prince1-51/+0
This finishes moving most of the config settings out of compute.yaml for Neutron and Rabbit. Also removes some other misc unused parameters. Change-Id: Ie340c33fb3434eb70e131ff6e252d0909aabd37c Related-Bug: #1604412