X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=puppet%2Fmanifests%2Fovercloud_compute.pp;h=581823468fd8b00760f0b125e1325451a9beea1f;hb=83fd16ecf46f9848247ea9676cacf195db71da21;hp=2150bab8ac8143435913e4bf9bd9ace18188c290;hpb=0f2bf59910639c62442aa3a1266ea4e67d76d25a;p=apex-tripleo-heat-templates.git

diff --git a/puppet/manifests/overcloud_compute.pp b/puppet/manifests/overcloud_compute.pp
index 2150bab8..58182346 100644
--- a/puppet/manifests/overcloud_compute.pp
+++ b/puppet/manifests/overcloud_compute.pp
@@ -13,7 +13,8 @@
 # License for the specific language governing permissions and limitations
 # under the License.
 
-include tripleo::packages
+include ::tripleo::packages
+include ::tripleo::firewall
 
 create_resources(sysctl::value, hiera('sysctl_settings'), {})
 
@@ -24,14 +25,14 @@ if count(hiera('ntp::servers')) > 0 {
 file { ['/etc/libvirt/qemu/networks/autostart/default.xml',
         '/etc/libvirt/qemu/networks/default.xml']:
   ensure => absent,
-  before => Service['libvirt']
+  before => Service['libvirt'],
 }
 # in case libvirt has been already running before the Puppet run, make
 # sure the default network is destroyed
 exec { 'libvirt-default-net-destroy':
   command => '/usr/bin/virsh net-destroy default',
-  onlyif => '/usr/bin/virsh net-info default | /bin/grep -i "^active:\s*yes"',
-  before => Service['libvirt'],
+  onlyif  => '/usr/bin/virsh net-info default | /bin/grep -i "^active:\s*yes"',
+  before  => Service['libvirt'],
 }
 
 include ::nova
@@ -49,16 +50,17 @@ if $rbd_ephemeral_storage or $rbd_persistent_storage {
   include ::ceph::profile::client
 
   $client_keys = hiera('ceph::profile::params::client_keys')
+  $client_user = join(['client.', hiera('ceph_client_user_name')])
   class { '::nova::compute::rbd':
-    libvirt_rbd_secret_key => $client_keys['client.openstack']['secret'],
+    libvirt_rbd_secret_key => $client_keys[$client_user]['secret'],
   }
 }
 
 if hiera('cinder_enable_nfs_backend', false) {
-  if ($::selinux != "false") {
+  if str2bool($::selinux) {
     selboolean { 'virt_use_nfs':
-        value => on,
-        persistent => true,
+      value      => on,
+      persistent => true,
     } -> Package['nfs-utils']
   }
 
@@ -69,20 +71,20 @@ include ::nova::compute::libvirt
 include ::nova::network::neutron
 include ::neutron
 
-class { 'neutron::plugins::ml2':
+class { '::neutron::plugins::ml2':
   flat_networks        => split(hiera('neutron_flat_networks'), ','),
   tenant_network_types => [hiera('neutron_tenant_network_type')],
 }
 
-class { 'neutron::agents::ml2::ovs':
+class { '::neutron::agents::ml2::ovs':
   bridge_mappings => split(hiera('neutron_bridge_mappings'), ','),
   tunnel_types    => split(hiera('neutron_tunnel_types'), ','),
 }
 
 if 'cisco_n1kv' in hiera('neutron_mechanism_drivers') {
-  class { 'neutron::agents::n1kv_vem':
-    n1kv_source          => hiera('n1kv_vem_source', undef),
-    n1kv_version         => hiera('n1kv_vem_version', undef),
+  class { '::neutron::agents::n1kv_vem':
+    n1kv_source  => hiera('n1kv_vem_source', undef),
+    n1kv_version => hiera('n1kv_vem_version', undef),
   }
 }
 
@@ -97,7 +99,7 @@ snmp::snmpv3_user { $snmpd_user:
   authtype => 'MD5',
   authpass => hiera('snmpd_readonly_user_password'),
 }
-class { 'snmp':
+class { '::snmp':
   agentaddress => ['udp:161','udp6:[::1]:161'],
   snmpd_config => [ join(['rouser ', hiera('snmpd_readonly_user_name')]), 'proc  cron', 'includeAllDisks  10%', 'master agentx', 'trapsink localhost public', 'iquerySecName internalUser', 'rouser internalUser', 'defaultMonitors yes', 'linkUpDownNotifications yes' ],
 }