summaryrefslogtreecommitdiffstats
path: root/lib/ansible/playbooks
AgeCommit message (Collapse)AuthorFilesLines
2018-05-30Configure NAT with baremetal when necessaryTim Rozet1-1/+1
We currently only enable NAT on undercloud for virtual deployments. However, there could be a case where a baremetal deployment also needs NAT as it is not using an interface on the overcloud nodes with external access. Therefore this patch changes the behavior to configure NAT when the gateway of either the external or admin (when external is disabled) network matches an IP assigned to the undercloud. JIRA: APEX-605 Change-Id: I9c79af371913e6e5f0d39b433f68205bc7e106c5 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-05-25Remove pacmeaker workaroundTim Rozet1-27/+0
There was a compatibility issue with the centos 7.4/7.5 between the host pacemaker version and container. Now that containers have moved to 7.5 we should not need this workaround anymore. Change-Id: I9632c65e87687d4f36130719c6df9af2e913eed8 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-05-21Migrates master to use direct upstreamTim Rozet4-6/+51
We now move master to deploy from upstream. That means we do not need to build undercloud/overcloud images anymore. Changes-Include: - Remove bash build scripts as we do not need to build anything other than the python package anymore - Remove building images or iso from build.py - Remove building of images and iso from Makefile - Rename/refactor deploy settings files for nosdn and odl. The new convention is that the typical scenario names we use will deploy master. We also support n-1 OS, so in that case we use the branch name for the "feature" in the scenario name: os-odl-queens-noha. - Tacker/Congress are disabled in settings files until we fix that with upstream. Containers are now enabled by default. - Disable TLS for undercloud (was changed upstream to default enabled) - Fix environments docker directory for master THT (was changed upstream) - Includes fix for LP#1768901 - Includes workaround for LP#1770692 - Moves to docker.io for container images as it is more stable and should contain the same images - Removes the term 'common' from apex packaging for referencing the Python Apex package Change-Id: If6b433860b3ff882686c78d0f24a2f0c52b9b57a Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-04-09Fix functional issues after nosdn deploymentTim Rozet1-0/+17
After deploying with nosdn, it looks like there is some out of state issue between the services. First guess looks like something is going on with the services and timing of registering to each other through rabbit. Simply restarting the services seems to sync them back up correctly. Change-Id: I417911067c841725ee12eb9354e5759054724e01 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-04-04Adds the ability to fetch logs from deploymentTim Rozet2-0/+38
Usage: opnfv-pyutil --fetch-logs python3 utils.py --fetch-logs --lib-dir ../lib Eventually all utils.sh functions will be migrated here. Note there is no support here for containers. Will be added later. Change-Id: I223b8592ad09e0370e287ee2801072db31f9aa12 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-03-16Enables containerized overcloud deploymentsTim Rozet3-56/+140
Changes Include: - For upstream deployments, Docker local registry will be updated with latest current RDO containers, regular deployments will use latest stable - Upstream container images will then be patched/modified and then re-uploaded into local docker registry with 'apex' tag - Deployment command modified to deploy with containers - Adds a --no-fetch deployment argument to disable pulling latest from upstream, and instead using what already exists in cache - Moves Undercloud NAT setup to just after undercloud is installed. This provides internet during overcloud install which is now required for upstream container deployments. - Creates loop device for Ceph deployment when no device is provided in deploy settings (for container deployment only) - Updates NIC J2 template to use the new format in OOO since the os-apply-config method is now deprecated in > Queens JIRA: APEX-566 JIRA: APEX-549 Change-Id: I0652c194c059b915a942ac7401936e8f5c69d1fa Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-03-16Merge "Adding SRIOV scenario"Tim Rozet2-0/+11
2018-03-15Adding SRIOV scenarioRicardo Noriega2-0/+11
This scenario should enable SRIOV interfaces to be used by Neutron. Only will be supported in baremetal deployments with SRIOV capable NICs. The name of the interface must be known in advance and the physnet of the SRIOV network is set as nfv_sriov. Change-Id: Ie4295413e0be2197bd9ada4f887f6b47cd486765 Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2018-03-12Adds OS_REGION_NAME into overcloudrc filesTim Rozet1-0/+15
Although this is not required to be able to access overcloud, it is required by some tests in Functest. JIRA: APEX-570 Change-Id: I45deaa8061f1be44ce80eed4810537eaf6841803 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-03-07Merge "Adding libguestfs-tools as dependency"Feng Pan1-0/+1
2018-02-16Add http(s)_proxy handling to apexDan Radez1-0/+12
JIRA: APEX-512 Change-Id: I875bd99203b425e448e7a3f64eb9a8f99d03ddaf Signed-off-by: Dan Radez <dradez@redhat.com>
2018-02-15Ensures v4/v6 iptables filters are loadedTim Rozet1-0/+6
We configure host iptables to open different ports for VBMC. This may fail if the iptables filters are not loaded. JIRA: APEX-521 Change-Id: Ia33032c29aba3555551e39b4f819087aeafe05d9 Signed-off-by: Tim Rozet <trozet@redhat.com>
2018-02-15Adding libguestfs-tools as dependencyRicardo Noriega1-0/+1
Needed for virt-customize the images Change-Id: Ide3fff2c6b850047add6eeed4082c518c36e6e74 Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2018-02-07Allow disabling ipxe for provisioningDan Radez1-3/+0
JIRA: APEX-535 Change-Id: I52d17e962fc4a504db1ddbc20df0ac56a208f34b Signed-off-by: Dan Radez <dradez@redhat.com>
2018-01-31wrapping up deploy items for aarchDan Radez1-0/+2
Change-Id: Ib5f4715d851dc91be6a57fcb5d18a0557a7b0c7f Signed-off-by: Dan Radez <dradez@redhat.com>
2017-12-05Make introspection optionalDan Radez1-5/+3
- exposes new option to end users to skip introspection - moves the logic to decide to introspect or not into python JIRA: APEX-536 Change-Id: Ieaff11362ff8f906daa98d301d3d473ad549d08f Signed-off-by: Dan Radez <dradez@redhat.com>
2017-12-02Merge "Fix nested kvm detection and enablement"Tim Rozet1-11/+17
2017-11-30Fix nested kvm detection and enablementFeng Pan1-11/+17
- Fix ansible kvm_intel kernel module reload when trying to enable nested kvm - Add "--libvirt-type qemu" to deploy command when nested kvm is not enabled. JIRA: APEX-514 Change-Id: I0e659b1c99b5732854d723e1cb049845cb60ef37 Signed-off-by: Feng Pan <fpan@redhat.com>
2017-11-30Fixes inserting ceph OSD into compute roleTim Rozet1-1/+9
The lineinfile was not actually inserting the CephOSD line because it was already present later in the file (regardless of 'insertbefore'). Therefore we can fix it by simply removing the CephOSD line before we try to set it, since we do not need it in the storage role anyway. Change-Id: I8c8d9b6baccfc77ea582fab6ad438b02293f96fb Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-11-28Fixes upstream deploymentsTim Rozet1-0/+8
There was an issue with patching the overcloud where the patch binary is missing, making it impossible to apply patches. This change install patch now on the image. Also, although deployments were successful, storage was not working. This is because by default upstream does not apply Ceph OSDs to compute nodes for hyperconverged Ceph, but we use this as our standard deployment in Apex. This patch inserts CephOSD into the default Compute role. Note: we normally override role's services in regular Apex deployments so we do not hit this issue there. Change-Id: I5bddda4784dc00148395863ae0990343a4159602 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-11-17Removes using https with rdo-releaseTim Rozet1-1/+1
We dont need to use https with rdo-release and it can cause issues for ansible. Change-Id: I081228a05d68f987fa02480bcd1bf216573550f1 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-11-16Migrates Apex to PikeTim Rozet1-0/+16
JIRA: APEX-544 Change-Id: Ibee2068e782da75268ed76beb36ccb5dcd1847d6 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-11-07Fixes dependency install of env group Virtualization HostTim Rozet1-1/+1
Virtualization Host env group started failing for users with centos 7.4 and according to Ansible guide the correct format for env groups should be "@^" prefix: http://docs.ansible.com/ansible/latest/yum_module.html JIRA: APEX-539 Change-Id: I3f71ce4462b33ad0772963869db4ea3c0f6e9e51 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-11-06Adds ability to deploy from upstream openstackTim Rozet1-1/+9
To deploy with upstream openstack branch, use new deploy setting 'os_version'. A default scenario file for nosdn with pike has been included in this patch. If 'os_version' is a version other than the default version for this OPNFV release, then upstream is used. In order to use upstream with the current OS version use '--upstream' argument to the deploy command, to force an upstream deployment. Also include '-e upstream-environment.yaml' to use default upstream deployment settings. Supports nosdn and odl-nofeature deployments. Change-Id: Ic07e308827b449637b4e86cdd086434e4de2fb69 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-10-18Adapt zrpcd to work for Carbon/Nitrogentomsou1-6/+6
It updates the quagga tar.gz file which is used to install zrpcd/quagga. The new rpms are compiled with thrift-version 4 Zrpcd is installed as a process. Additional changes takwqe place adopting the installation and checking of zrpcd process Note that an extra patch is needed to update or remove the building procedure, which is present within the project but not used actually. JIRA: APEX-508 Change-Id: If6da075d2aafdb8c2ecfc599f595a7201490aa23 Signed-off-by: tomsou <soth@intracom-telecom.com>
2017-10-11Increase ssh timeout and add retry for AnsibleTim Rozet1-0/+6
Several users have experienced random disconnections from the undercloud during deployment. This should help to stop deployments from aborting. Change-Id: Idb7619d493b329944f21ea6641f6826a8fcc3907 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-10-03This config is no longer neededDan Radez1-1/+0
it is setting and unescaped default value which ended up setting an invalid value. removing it uses the default which accomplishes what this was originally attempting to put into place. Change-Id: I03660921860adf7625e17d2c4a3ba07b62d0f3f0 Signed-off-by: Dan Radez <dradez@redhat.com>
2017-09-29Adds Calipso scenarioTim Rozet1-0/+38
Change-Id: Icc8a23e49c9ccc011481f6b97599d4f75873ebb1 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-09-25Applies Tacker upstream patches and fixes fernet dir permsTim Rozet1-1/+3
We need a couple patches to Tacker upstream that we will not get now that our images are frozen in RDO. We should remove them on upgrade to Pike. Also this patch fixes the permissions on the fernet keys dir so that the Tacker group can write. Change-Id: I6468356f1d16d3b8ab58d46f653431e29960e190 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-09-22Fixes Tacker auth and fernet keys dirTim Rozet1-0/+6
Tacker authtoken was missing password which is now added in the tht patch. Tacker also needs 'etc/tacker/vim/fernet_keys' in order to be able to create VIMs. The real fix to this missing directory is to the rpm itself: https://review.rdoproject.org/r/#/c/9725/ However in this patch we ensure it is created in Ansible because RDO images are frozen in for now in Apex so we would not pick up new RDO packages. apex-tripleo-heat-templates: I2b347cbc4595e6651b0d4be032cb862fde72e15f Change-Id: I76959cbfd581b9fec69749ccbcbcb39dc959a883 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-09-21Revert "Adds Calipso scenario"Tim Rozet1-4/+0
This reverts commit 433961f8c0b816f19aa858654261fa87d2f02a19. Change-Id: Ic8a14d2e0ad8d1006625af401fde2f365890650b Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-09-20Adds Calipso scenarioTim Rozet1-0/+4
Calipso uses docker containers and is post deployment feature that can be used to monitor pieces of the stack. This patch installs it to the undercloud rather than the jumphost as it is easier to manage for cleanup and dependencies. Change-Id: Ie2dacc4f14b391a864fafb2e75ebcd15facb19f1 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-09-11Dup owner, changing to groupDan Radez1-1/+1
Change-Id: I8ca1501949a0e272e928c6b31b08eba2519951ec Signed-off-by: Dan Radez <dradez@redhat.com>
2017-09-07Merge "Skip introspection for aarch64 BM deployments"Tim Rozet1-4/+6
2017-09-06Enabling the aarch check for deploymentDan Radez1-1/+1
Change-Id: Ic5f1fc8a61f74f7aa6b2fabf67169c601a603367 Signed-off-by: Dan Radez <dradez@redhat.com>
2017-09-06Skip introspection for aarch64 BM deploymentsDan Radez1-4/+6
Change-Id: I630e90065f9cc76ef42ca9b23aea920c2493b53f Signed-off-by: Dan Radez <dradez@redhat.com>
2017-09-01Merge "Adds Undercloud retry and log fetch"Feng Pan1-4/+16
2017-08-31Adds Undercloud retry and log fetchTim Rozet1-4/+16
Retry to install the undercloud if it fails due to sometimes failing. Also copy undercloud log over to host temp dir. Change-Id: I50f98c4f0d52fa6bb56d9dcd0766bbe745160452 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-31Adds showing overcloud failuresTim Rozet1-2/+6
Change-Id: Ic09a9b6d57d2ab05562f64a75f9732f76ac61bb7 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-30Merge "Fixes missing iso packages and idempotency of virt resources"Feng Pan1-5/+14
2017-08-29Fixes missing iso packages and idempotency of virt resourcesTim Rozet1-5/+14
Python packages for ansible (py2.x) were missing causing ansible to fail. This patch adds those packages to the ISO and deploy dependencies playbook. Also includes fixes for deploy_dependencies playbook for virt resources to make them idempotent by removing using 'command' and instead just declaring 'state'. Change-Id: I9311184a6f3c40ead0a8ba16fa0b61667876cf12 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-29Removes ignoring errors on congress configTim Rozet1-1/+0
Now that congress has been fixed this should always work. Change-Id: I701707b8b91b340289613bdb31fa91456743d233 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-25Skip the python3 vbmc patchDan Radez1-0/+5
- vbmc has already been imported so we know it's there if vbmc is located in a different spot than the hardcoded location just skip the patch Change-Id: I765fb94c09e0775084ecd37659f4900411eb0e3e Signed-off-by: Dan Radez <dradez@redhat.com>
2017-08-25Merge "Updates and additions to handle aarch64"Dan Radez3-7/+24
2017-08-24Updates and additions to handle aarch64Dan Radez3-7/+24
- move patches from x86 only to common virt-customize - updates to undercloud to configure pxe and external network - initial updates to overcloud deploy functions JIRA: APEX-381 Change-Id: I496e196535e63bfd31654d0f501fe3f00fa5ca3f Signed-off-by: Dan Radez <dradez@redhat.com>
2017-08-24Updates RPM specs and buildingTim Rozet1-4/+6
Changes Include: - Disables ONOS from rpm and image building - Fixes opnfv-apex package dependency for python34-opnfv-apex - Updates requirements for python34-opnfv-apex - Updates docs - Removes temporary build qcow2 for odl which was being bundled into our dev tars unnecessarily Change-Id: Ief668067181fc35a54553ae118b7950bddce1940 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-23Migrates Apex to PythonTim Rozet11-4/+499
Removes all bash libraries and converts almost all of the code to a mixture of Python and Ansible. utils.sh and clean.sh still exist. clean.sh will be migrated fully to clean.py in another patch. The Apex Python package is now built into the opnfv-apex-common RPM. To install locally do 'pip3 install .'. To deploy: opnfv-deploy -d <file> -n <file> --image-dir /root/apex/.build -v --debug Non-python files (THT yaml, settings files, ansible playbooks) are all installed into /usr/share/opnfv-apex/. The RPM will copy settings files into /etc/opnfv-apex/. JIRA: APEX-317 Change-Id: I3232f0329bcd13bce5a28da6a8c9c84d0b048024 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-08-02Builds and installs ovs 2.6.1 with NSH supportTim Rozet1-1/+2
Change-Id: I369b9d24880ebdb0836e42740ebf27082be9de99 Signed-off-by: Tim Rozet <trozet@redhat.com>
2017-07-31Adds Barometer servicejhinman11-1/+1
Adds Barometer service as a deploy option to Compute nodes by specifying barometer as true in deploy settings. Barometer packages are installed only for x86_64. Adds scenarios os-nosdn-bar-ha and os-nosdn-bar-noha. Add scenarios to opnfv-apex-common.spec. Temporarily remove references to snmp packages. apex-tripleo-heat-templates: I397d2557639c87ab8afacd076a5b9fd7c056dce7 apex-puppet-tripleo: I878ff8d1e0a8b96f3380bb77f168cd5a4c3f6543 Puppet module is at: https://github.com/johnhinman/puppet-barometer. Change-Id: Ic087c2052f7849ee2cf6c63224558c2b36a8ca1f Signed-off-by: jhinman1 <john.hinman@intel.com>
2017-05-30Moving to forks on gerrit.opnfv.orgDan Radez1-1/+7
Migrating off of github onto opnfv.org to host our forked projects that are side loaded into our builds apex-tripleo-heat-templates: Ic65cfeee4a55e993629f831c8c9d9addf6f3dff4 apex-puppet-tripleo: If498c41d706c8f14a5b0bbee64cb4d26cd78c2d0 apex-os-net-config: I5281a57640f388e984b061702362f9c82d08da78 Change-Id: Ieb5cf293ad06d90fce7a9467e32ac0f2d8731a0a Signed-off-by: Dan Radez <dradez@redhat.com> Signed-off-by: Feng Pan <fpan@redhat.com>