Dan Prince [Thu, 3 Aug 2017 14:20:15 +0000 (10:20 -0400)]
Remove baremetal cron jobs on docker upgrade
Change-Id: I072a3f582cdb978187d14233ea1ba636d12a1293
Closes-bug: #
1708466
Jenkins [Thu, 3 Aug 2017 06:46:16 +0000 (06:46 +0000)]
Merge "Fix CA file bind mounting in containers"
Jenkins [Thu, 3 Aug 2017 04:30:48 +0000 (04:30 +0000)]
Merge "Render isolated network templates using jinja2"
Jenkins [Thu, 3 Aug 2017 01:40:17 +0000 (01:40 +0000)]
Merge "Make RoleParameters and key_name descriptions consistent"
Jenkins [Thu, 3 Aug 2017 01:02:42 +0000 (01:02 +0000)]
Merge "Set redis password hiera value in compute agent"
Jenkins [Thu, 3 Aug 2017 01:02:35 +0000 (01:02 +0000)]
Merge "Cinder volume/backup containers shouldn't mount two paths at same point"
Jenkins [Thu, 3 Aug 2017 00:45:30 +0000 (00:45 +0000)]
Merge "Update TLS-everywhere docker environment"
Jenkins [Thu, 3 Aug 2017 00:44:41 +0000 (00:44 +0000)]
Merge "Fix keystone, cinder, heat-api cron containers"
Ben Nemec [Tue, 27 Jun 2017 16:07:52 +0000 (11:07 -0500)]
Make RoleParameters and key_name descriptions consistent
The key_name default is ignored because the parameter is used in
some mutually exclusive environments where the default doesn't
need to be the same.
Change-Id: I77c1a1159fae38d03b0e59b80ae6bee491d734d7
Partial-Bug:
1700664
Jenkins [Wed, 2 Aug 2017 21:04:45 +0000 (21:04 +0000)]
Merge "Fix ceilometer agent compute service name"
Jenkins [Wed, 2 Aug 2017 05:11:22 +0000 (05:11 +0000)]
Merge "Fix iscsid role data's section"
John Fulton [Wed, 2 Aug 2017 02:54:56 +0000 (02:54 +0000)]
Cinder volume/backup containers shouldn't mount two paths at same point
Docker refuses to start the container because config_files/src-ceph:ro
is mounted at both /etc/ceph and config-data/puppet-generated/ceph.
The mount to /var/lib/config-data/puppet-generated/ceph should have
been removed in commit
ed0b77ff93a1a1e071d32f6a758e04c6d0b041ef.
Change-Id: I411b4764a54fc21e97e4c41a5fef00c7e6e2b64d
Closes-Bug: #
1707956
Jenkins [Wed, 2 Aug 2017 01:35:47 +0000 (01:35 +0000)]
Merge "Fix network-isolation.j2.yaml to ignore VIPs for disabled networks"
Jenkins [Wed, 2 Aug 2017 01:30:11 +0000 (01:30 +0000)]
Merge "Remove empty metadata_settings from iscsid and multipathd templates"
Jenkins [Wed, 2 Aug 2017 01:29:22 +0000 (01:29 +0000)]
Merge "Adds stop and disable for libvirtd on upgrade to containers"
Pradeep Kilambi [Wed, 26 Jul 2017 15:18:40 +0000 (11:18 -0400)]
Set redis password hiera value in compute agent
Without this config defaults to undef in containers
Change-Id: Id47f365364e7b0d399de92995871b136550cd625
Pradeep Kilambi [Mon, 24 Jul 2017 19:26:47 +0000 (15:26 -0400)]
Fix ceilometer agent compute service name
Make sure this matches whats in roles_data.yaml
Change-Id: Id41c457914f557af7c9ec195c4c6f98669523ac1
Jenkins [Tue, 1 Aug 2017 20:00:18 +0000 (20:00 +0000)]
Merge "Generate MySQL client config if service requires database"
Jenkins [Tue, 1 Aug 2017 17:20:06 +0000 (17:20 +0000)]
Merge "Add missing metadata_settings from docker services"
marios [Tue, 1 Aug 2017 14:24:18 +0000 (17:24 +0300)]
Adds stop and disable for libvirtd on upgrade to containers
Adds this into the tripleo_upgrade_node.sh executed by the
operator for the major upgrade see the bug for more info
Change-Id: Ic54b48b149594e8ea08e95152111bcdaf7b252b7
Closes-Bug:
1707926
Dan Prince [Mon, 31 Jul 2017 21:49:24 +0000 (17:49 -0400)]
Fix keystone, cinder, heat-api cron containers
The cron containers need to run as root in order to create PID files
correctly.
Additionally, the keystone_cron container was misconfigured to
use /usr/bin/cron instead of the correct /usr/bin/crond.
Additionally we have an issue where the Kolla keystone container has
hard coded ARGS for the docker container which causes -DFOREGROUND
(an Apache specific argument) to get appended onto the kolla_start
command thus causing crond to fail to startup correctly. This
works around the issue by overriding the command and calling
kolla_set_configs manually. Once we fix this in Kolla we can
revisit this.
Change-Id: Ib8fb2bef9a3bb89131265051e9ea304525b58374
Related-bug:
1707785
Juan Antonio Osorio Robles [Tue, 1 Aug 2017 07:01:54 +0000 (07:01 +0000)]
Fix CA file bind mounting in containers
The syntax was wrong and wasn't actually bind mounting the CA file.
This fixes it.
Change-Id: Icfa2118ccd2a32fdc3d1af27e3e3ee02bdfbb13b
Juan Antonio Osorio Robles [Tue, 1 Aug 2017 05:54:05 +0000 (08:54 +0300)]
Update TLS-everywhere docker environment
Some resources have changed. So the environment needed syncing
Change-Id: I9aa310ae80edfccd3ed28e67a431aad6e1ed8a7f
Juan Antonio Osorio Robles [Tue, 1 Aug 2017 05:42:33 +0000 (08:42 +0300)]
Remove empty metadata_settings from iscsid and multipathd templates
metadata_settings is meant to have a specific format or be completely
absent. Unfortunately the hook [1] doesn't an empty value for this. So
we remove it as an easy fix before figuring out how to add such a
functionality to the hook.
[1] https://github.com/openstack/tripleo-heat-templates/blob/master/extraconfig/nova_metadata/krb-service-principals.yaml
Co-Authored-By: Thomas Herve <therve@redhat.com>
Change-Id: Ieac62a8076e421b5c4843a3cbe1c8fa9e3825b38
Jenkins [Mon, 31 Jul 2017 19:32:47 +0000 (19:32 +0000)]
Merge "Enable Dpdk after rebooting with Hugepages for OvS2.7"
Jenkins [Mon, 31 Jul 2017 15:26:54 +0000 (15:26 +0000)]
Merge "Fix creation of iptables rules for non-HA containerized HAproxy"
Juan Antonio Osorio Robles [Mon, 31 Jul 2017 15:22:44 +0000 (18:22 +0300)]
Add missing metadata_settings from docker services
These are needed for the TLS everywhere bits.
Change-Id: I81fcf453fc1aaa2545e0ed24013f0f13b240a102
Jenkins [Mon, 31 Jul 2017 14:23:06 +0000 (14:23 +0000)]
Merge "Add 'ovn-controller' service"
Saravanan KR [Fri, 14 Jul 2017 04:11:28 +0000 (09:41 +0530)]
Enable Dpdk after rebooting with Hugepages for OvS2.7
With OvS2.7, DPDK is initialized immediately after setting
dpdk-init flag. DPDK requires hugepages configuration to be
available on kernel args with a reboot. This patch reboots
the node after applying the kernel args. And once the node
is rebooted, DPDK will be enabled and then the deployment
continues.
Change-Id: Ide442e09c2bea56a38399247de588e63b4272326
Jenkins [Sat, 29 Jul 2017 00:59:17 +0000 (00:59 +0000)]
Merge "add lbaasv2 to NeutronServicePlugins in octavia containers"
Jenkins [Fri, 28 Jul 2017 15:57:33 +0000 (15:57 +0000)]
Merge "Also log docker-puppet.py puppet output to console"
Jenkins [Fri, 28 Jul 2017 15:46:58 +0000 (15:46 +0000)]
Merge "Enable Zaqar API SSL"
Bogdan Dobrelya [Fri, 28 Jul 2017 09:25:42 +0000 (11:25 +0200)]
Also log docker-puppet.py puppet output to console
Running puppet apply with --logdest syslog results in all the output
being redirected to syslog. You get no error messages. In the case where this fails, the subsequent debug task shows nothing useful
as there was no stdout/stderr.
Also pass --logdest console to docker-puppet's puppet apply so that
we get the output for the debug task.
Related-Bug: #
1707030
Change-Id: I67df5eee9916237420ca646a16e188f26c828c0e
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
Jenkins [Fri, 28 Jul 2017 02:57:20 +0000 (02:57 +0000)]
Merge "Consistent hostname format env for split-stack"
Numan Siddique [Thu, 13 Jul 2017 11:44:51 +0000 (17:14 +0530)]
Add 'ovn-controller' service
Presently the ovn-controller service (puppet/services/neutron-compute-plugin-ovn.yaml)
is started only on compute nodes. But for the cases where the controller nodes
provide the north/south traffic, we need ovn-controller service runninng in controller
nodes as well.
This patch
- Renames the neutron-compute-plugin-ovn.yaml to ovn-controller.yaml which makes more
sense and sets the service name as 'ovn-controller'.
- Adds the service 'ovn-controller' to Controller and Compute roles.
- Adds the missing 'upgrade_tasks' section in ovn-dbs.yaml and ovn-controller.yaml
Depends-On: Ie3f09dc70a582f3d14de093043e232820f837bc3
Depends-On: Ide11569d81f5f28bafccc168b624be505174fc53
Change-Id: Ib7747406213d18fd65b86820c1f86ee7c39f7cf5
James Slagle [Thu, 27 Jul 2017 17:59:04 +0000 (13:59 -0400)]
Also log puppet output to console
Running puppet apply with --logdest syslog results in all the output
being redirected to syslog. You get no error messages. In the case where
this ansible task fails, the subsequent debug task shows nothing useful
as there was no stdout/stderr.
Also pass --logdest console to puppet apply so that we get the output
for the debug task. My local testing showed that when specifying logdest
twice, both values were honored, and the output went to syslog and the
console.
Change-Id: Id5212b3ed27b6299e33e81ecf71ead554f9bdd29
Closes-Bug: #
1707030
Damien Ciabrini [Fri, 7 Jul 2017 14:44:26 +0000 (10:44 -0400)]
Generate MySQL client config if service requires database
Services that access database have to read an extra MySQL configuration file
/etc/my.cnf.d/tripleo.cnf which holds client-only settings, like client bind
address and SSL configuration. The configuration file is thus used by
containerized services, but also by non-containerized services that still
run on the host.
In order to generate that client configuration file appropriately both on the
host and for containers, 1) the MySQLClient service must be included by the
role; 2) every containerized service which uses the database must include the
mysql::client profile in the docker-puppet config generation step.
By including the mysql::client profile in each containerized service, we ensure
that any change in configuration file will be reflected in the service's
/var/lib/config-data/{service}, and that paunch will restart the service's
container automatically.
We now only rely on MySQLClient from puppet/services, to make it possible to
generate /etc/my.cnf.d/tripleo.cnf on the host, and to set the hiera keys that
drive the generation of that config file in containers via docker-puppet.
We include a new YAML validation step to ensure that any service which depends
on MySQL will initialize the mysql::client profile during the docker-puppet
step.
Change-Id: I0dab1dc9caef1e749f1c42cfefeba179caebc8d7
Damien Ciabrini [Thu, 27 Jul 2017 16:44:15 +0000 (12:44 -0400)]
Fix iscsid role data's section
The iscsid service definition has a typo, config_setting should
read config_settings
Change-Id: I12605dba61fd5f6ce80c3ab78e883ed5ebf3ca62
Jenkins [Thu, 27 Jul 2017 14:10:56 +0000 (14:10 +0000)]
Merge "Add PCI to nova compute container for passthrough support"
Jenkins [Thu, 27 Jul 2017 11:36:48 +0000 (11:36 +0000)]
Merge "Enable libvirtd_config puppet tag in nova-libvirtd docker service"
Thomas Herve [Wed, 19 Jul 2017 09:13:19 +0000 (11:13 +0200)]
Enable Zaqar API SSL
This sets the SSL flag in the docker service and expose the parameter in
the docker service.
Depends-On: I4c68a662c2433398249f770ac50ba0791449fe71
Change-Id: Ic3df2b9ab7432ffbed5434943e04085a781774a0
Jenkins [Thu, 27 Jul 2017 06:18:28 +0000 (06:18 +0000)]
Merge "Deploy Ceph in containers using ceph-ansible via external workflow"
Jenkins [Thu, 27 Jul 2017 06:07:25 +0000 (06:07 +0000)]
Merge "Make collectd run as root inside the container"
Jenkins [Thu, 27 Jul 2017 06:06:46 +0000 (06:06 +0000)]
Merge "Adding Tuned Service"
Jenkins [Wed, 26 Jul 2017 22:57:25 +0000 (22:57 +0000)]
Merge "aodh: add gnocchi_external_project_owner config"
Jenkins [Wed, 26 Jul 2017 22:57:18 +0000 (22:57 +0000)]
Merge "Fix enable-ceph sample environment"
Giulio Fidente [Thu, 25 May 2017 23:35:53 +0000 (01:35 +0200)]
Deploy Ceph in containers using ceph-ansible via external workflow
Add docker profiles to deploy Ceph in containers via ceph-ansible. This is
implemented by triggering a Mistral workflow during one of the overcloud
deployment steps, as provided by [1].
Some new service-specific parameters are available to determine the workflow to
execute and the ansible playbook to use. A new `CephAnsibleExtraConfig`
parameter can be used to provide arbitrary config variables consumed by `ceph-ansible`.
The pre-existing template params consumed up until the Pike release to
drive `puppet-ceph` continue to work and are translated, when possible, into
the equivalent `ceph-ansible` variable.
A new environment file is added to enable use of ceph-ansible;
the pre-existing puppet-ceph implementation remains unchanged and usable
for non-containerized deployments.
1. https://review.openstack.org/#/c/463324/
Change-Id: I81d44a1e198c83a4ef8b109b4eb6c611555dcdc5
Jenkins [Wed, 26 Jul 2017 19:58:54 +0000 (19:58 +0000)]
Merge "Provides Ceph config into OpenStack clients"
Dan Sneddon [Mon, 19 Jun 2017 18:34:05 +0000 (11:34 -0700)]
Render isolated network templates using jinja2
This change adds templates that are used to create network and
port definition templates for each network that is defined in
network_data.yaml. In order to render the templates, additional
fields have been added to the network_data.yaml file. If this
optional data is present, it will be used to populate the default
parameter values in the network template.
The only required parameters in the network_data.yaml file is
the network name. If the network will have IPv6 addresses, then
ipv6: true must be set on the network.
The existing networks have been modeled in the network_data.yaml,
but until these templates are removed from the j2_excludes.yaml
file they will not be generated on the fly. Any additional
networks will have templates generated.
This change also removes an unnecessary conditional from the
networks.j2.yaml file, since InternalApiNetwork doesn't need
to be reformatted as InternalNetwork (it's only used in this
one file).
A follow-up patch will remove the existing network definitions
so all networks are created dynamically.
Change-Id: If074f87494a46305c990a0ea332c7b576d3c6ed8
Depends-On: Iab8aca2f1fcaba0c8f109717a4b3068f629c9aab
Partially-Implements: blueprint composable-networks
Jenkins [Wed, 26 Jul 2017 13:47:21 +0000 (13:47 +0000)]
Merge "Stop Heat WSGI services on docker upgrade"
Jenkins [Wed, 26 Jul 2017 13:47:14 +0000 (13:47 +0000)]
Merge "Ps Cinder: Added support for password less login"
Ben Nemec [Thu, 13 Jul 2017 15:44:16 +0000 (10:44 -0500)]
Fix enable-ceph sample environment
The necessary resource registry entries were missing from this env
and the old environment was not deprecated.
Change-Id: I6a9b148514fc5da1f96b9fd7fe09f564c2f82419
Jenkins [Wed, 26 Jul 2017 13:22:29 +0000 (13:22 +0000)]
Merge "Replace outdated instruction with link to upstream doc"
Jenkins [Wed, 26 Jul 2017 13:22:15 +0000 (13:22 +0000)]
Merge "Add parameters for Veritas HyperScale distributed setup."
Jenkins [Wed, 26 Jul 2017 13:14:34 +0000 (13:14 +0000)]
Merge "Open up firewall for the control-ports in the bundles"
Jenkins [Wed, 26 Jul 2017 13:14:21 +0000 (13:14 +0000)]
Merge "Add NodeTLSData to generic role.role.j2.yaml"
Jenkins [Wed, 26 Jul 2017 13:13:56 +0000 (13:13 +0000)]
Merge "Make various password descriptions consistent"
Jenkins [Wed, 26 Jul 2017 13:13:47 +0000 (13:13 +0000)]
Merge "Stop also openstack-swift-object-expirer when upgrading swift services"
Jenkins [Wed, 26 Jul 2017 11:21:46 +0000 (11:21 +0000)]
Merge "Contrail network realignement + DPDK enablement"
Jenkins [Wed, 26 Jul 2017 09:26:06 +0000 (09:26 +0000)]
Merge "Add keystone cron container to run token_flush"
Jenkins [Wed, 26 Jul 2017 08:55:52 +0000 (08:55 +0000)]
Merge "nova_api_cron docker fix: add /var/spool/cron/nova"
Jenkins [Wed, 26 Jul 2017 06:19:09 +0000 (06:19 +0000)]
Merge "Add containerized manila-share to CI"
Damien Ciabrini [Wed, 14 Jun 2017 11:52:33 +0000 (07:52 -0400)]
Fix creation of iptables rules for non-HA containerized HAproxy
The introduction of I90253412a5e2cd8e56e74cce3548064c06d022b1 broke the HAproxy
service due to some HAproxy-specific iptables rules being executed during the
puppet config step.
Ensure that no iptables call is performed during the generation of configuration
files. Move those calls to step 1, as implemented in the pacemaker-based
HAproxy service (Ib5a083ba3299a82645f1a0f9da0d482c6b89ee23).
Depends-On: I2d6274d061039a9793ad162ed8e750bd87bf71e9
Closes-Bug: #
1697921
Change-Id: Ica3a432ff4a9e7a46df22cddba9ad96e1390b665
Steven Hardy [Tue, 4 Jul 2017 17:08:10 +0000 (18:08 +0100)]
Add NodeTLSData to generic role.role.j2.yaml
This is currently included in the controller-role template, so we need
to add it to the generic role.role.j2.yaml in order to convert the
controller-role template to be rendered via j2
Change-Id: I01bf01c8a31e4cc26f202dd1774845ec33f50bcd
Partially-Implements: blueprint composable-networks
Jenkins [Tue, 25 Jul 2017 22:08:49 +0000 (22:08 +0000)]
Merge "Add cinder cron container to run db purge"
Giulio Fidente [Tue, 11 Jul 2017 10:20:05 +0000 (12:20 +0200)]
Provides Ceph config into OpenStack clients
Given ceph-ansible or puppet-ceph will have created the Ceph
config files and keyrings in /etc/ceph on baremetal, this change
copies into the OpenStack containers the necessary files for the
services to be able to connect to the Ceph cluster.
Change-Id: Ibc9964902637429209d4e1c1563b462c60090365
Oliver Walsh [Tue, 25 Jul 2017 21:54:56 +0000 (22:54 +0100)]
Enable libvirtd_config puppet tag in nova-libvirtd docker service
Required now that https://review.openstack.org/480289 has merged
Change-Id: I17f6c9b5a6e2120a53bae296042ece492210597a
Related-Bug: #
1696504
Jenkins [Tue, 25 Jul 2017 21:28:22 +0000 (21:28 +0000)]
Merge "Add heat api container to run cron purge_deleted"
Joe Talerico [Thu, 6 Apr 2017 11:38:59 +0000 (07:38 -0400)]
Adding Tuned Service
Allow the user to set a specific Tuned profile on a given host.
Defaults to throughput-performance
Change-Id: I0c66193d2733b7a82ad44b1cd0d2187dd732065a
Michael Henkel [Fri, 16 Jun 2017 18:02:59 +0000 (11:02 -0700)]
Contrail network realignement + DPDK enablement
This patch moves Contrail roles communication from public/external
to internal_api network for OpenStack API.
It also adds the option to enable dpdk.
Monolithic firstboot script is broken down into small pre-network
and per-node extraconfig scripts
Change-Id: I296a3bf60cef6fa950fd71d6e68effe367d1e66b
Closes-Bug:
1698422
Jenkins [Tue, 25 Jul 2017 14:59:34 +0000 (14:59 +0000)]
Merge "Fall back to non-containerized cinder-backup and cinder-volume for HA"
Or Idgar [Tue, 25 Jul 2017 10:37:13 +0000 (13:37 +0300)]
add lbaasv2 to NeutronServicePlugins in octavia containers
without lbaasv2 neutron will not be able to load the plugin
and communicate with octavia.
Change-Id: If44b93703d3c408ae075d73ed695c3edc58fba18
Jenkins [Tue, 25 Jul 2017 05:56:33 +0000 (05:56 +0000)]
Merge "Modifying Cisco templates to support composable roles"
Jenkins [Tue, 25 Jul 2017 05:56:06 +0000 (05:56 +0000)]
Merge "Increase default RabbitMQ/Erlang TCP timeout from 5 to 15 seconds"
Jenkins [Tue, 25 Jul 2017 05:11:52 +0000 (05:11 +0000)]
Merge "Mount /var/lib/neutron in neutron agents for metadata proxy"
Jenkins [Tue, 25 Jul 2017 05:11:45 +0000 (05:11 +0000)]
Merge "Add metadata_settings in Heat APIs"
Jenkins [Tue, 25 Jul 2017 00:53:46 +0000 (00:53 +0000)]
Merge "CI/scenarios : Add scenario007 for OVN services"
Sandhya Dasu [Tue, 18 Jul 2017 15:44:17 +0000 (11:44 -0400)]
Modifying Cisco templates to support composable roles
Change-Id: I21fee832aeeb9780f818ae869ea8714f28bbe4a0
Closes-bug: #
1704853
Jenkins [Mon, 24 Jul 2017 20:47:16 +0000 (20:47 +0000)]
Merge "Revert "Disable systemd-networkd & systemd-resolved""
James Slagle [Mon, 24 Jul 2017 18:39:23 +0000 (14:39 -0400)]
Consistent hostname format env for split-stack
Adds a new environment split-stack-consistent-hostname-format.j2.yaml
for use with split-stack that will set the {{role.name}}HostnameFormat
parameters based on the actual roles in use.
It's possible to generate these parameters and values as long as the
roles files is the same between the 2 stacks, which will be documented
in I9997bd685f8f79537dfc377f9f1eb0c7446c3289.
Removes the hardcoded paramters from the other 2 split-stack
environments.
Change-Id: I93bc7c1a24a9cb2f9930372970c67c0eadb14add
Jenkins [Mon, 24 Jul 2017 18:41:06 +0000 (18:41 +0000)]
Merge "Set name property on missing deployments"
Jenkins [Mon, 24 Jul 2017 18:14:22 +0000 (18:14 +0000)]
Merge "Use static environment for deployed-server neutron mappings"
Jenkins [Mon, 24 Jul 2017 18:06:20 +0000 (18:06 +0000)]
Merge "Move docker_puppet_tasks calculation into services.yaml"
Jenkins [Mon, 24 Jul 2017 18:06:12 +0000 (18:06 +0000)]
Merge "Move services.yaml output calculation into Value resources"
Jenkins [Mon, 24 Jul 2017 18:05:54 +0000 (18:05 +0000)]
Merge "Release 7.0.0.0b3"
Jenkins [Mon, 24 Jul 2017 17:31:59 +0000 (17:31 +0000)]
Merge "Cleans up exec workaround for ODL container clustering"
abhishek.kane [Mon, 24 Jul 2017 09:13:32 +0000 (14:43 +0530)]
Add parameters for Veritas HyperScale distributed setup.
Add more parameters to Veritas Hyperscale's composable service, which
will be relevant in distributed setup.
Change-Id: Ib1b90edbf17ea7f14bdbed4857241fca86b87a18
Signed-off-by: abhishek.kane <abhishek.kane@veritas.com>
Jenkins [Mon, 24 Jul 2017 15:22:39 +0000 (15:22 +0000)]
Merge "Add support for nova live/cold-migration with containers"
Emilien Macchi [Mon, 24 Jul 2017 15:09:03 +0000 (08:09 -0700)]
Release 7.0.0.0b3
Change-Id: Ibb75bfd01712257a20d72554308a0c099dd52b18
Jenkins [Mon, 24 Jul 2017 13:03:56 +0000 (13:03 +0000)]
Merge "Remove non-containerized pacemaker resources on upgrade"
Thomas Herve [Mon, 24 Jul 2017 11:30:08 +0000 (13:30 +0200)]
Add metadata_settings in Heat APIs
We don't expose metadata_settings in Heat services, so SSL shouldn't
work.
Change-Id: I411085d9b249e54a2462de5efe4abf8f0865c0c2
Steven Hardy [Wed, 19 Jul 2017 19:36:11 +0000 (20:36 +0100)]
Move docker_puppet_tasks calculation into services.yaml
This makes the RolesData output more accurate, and we can rework
things so docker-puppet only gets run when there is a non-empty
file calculated (e.g there are tasks to run).
Change-Id: I8cdab3c857977c80fe2e359ab9e05740a838d66b
Steven Hardy [Wed, 19 Jul 2017 12:15:38 +0000 (13:15 +0100)]
Move services.yaml output calculation into Value resources
This stores the result of the yaql queries etc for easier debugging, and
also so there's no risk we constantly re-evaluate the expensive query
which can happen with some heat versions and configurations.
This also gives a nicer error when things go wrong as when a query fails
you know which resource had an error, and also the validation on resources
is currently stricter due to bug #
1599114. We also get some additional
type validation from each OS::Heat::Value resource, e.g it checks if the
calculated value is a valid map or list.
The final advantage (and the original motivation for doing this) is that
we can easily filter null values for any outputs where this isn't already
done, which makes the config data written via openstack overcloud config
download cleaner.
Change-Id: Ia6697cf2e47f3f7b727d620536e0873a985c98c4
Jenkins [Mon, 24 Jul 2017 04:36:35 +0000 (04:36 +0000)]
Merge "Refactor iscsi initiator-name reset into separate service"
Jenkins [Mon, 24 Jul 2017 04:12:47 +0000 (04:12 +0000)]
Merge "Drop MongoDB from the undercloud"
Jenkins [Mon, 24 Jul 2017 04:11:16 +0000 (04:11 +0000)]
Merge "Support configurable Zaqar backends"
Dan Prince [Mon, 26 Jun 2017 14:48:15 +0000 (10:48 -0400)]
Drop MongoDB from the undercloud
This patch drops MongoDB from the undercloud and swaps
in a 'swift' and 'sqlalchemy' versions for the Zaqar
backends.
Change-Id: Ic6600f284dfbf4360b42598d3651b4c0f8046d1c
Dan Prince [Mon, 26 Jun 2017 14:40:46 +0000 (10:40 -0400)]
Support configurable Zaqar backends
This patch adds parameters to configure alternative version
of the Zaqar messaging and management backends.
The intent is to make use of these settings in the
containers undercloud to use swift/mysql backends as a default
thus avoiding the dependency on MongoDB.
Change-Id: Ifd6a561737184c9322192ffc9a412c77d6eac3e9
Depends-On: Ie6a56b9163950cee2c0341afa0c0ddce665f3704
Depends-On: I3598e39c0a3cdf80b96e728d9aa8a7e6505e0690
Numan Siddique [Tue, 18 Jul 2017 15:58:18 +0000 (21:28 +0530)]
CI/scenarios : Add scenario007 for OVN services
Depends-On: Ide11569d81f5f28bafccc168b624be505174fc53
Change-Id: Ie3f09dc70a582f3d14de093043e232820f837bc3
Oliver Walsh [Wed, 7 Jun 2017 23:17:53 +0000 (00:17 +0100)]
Add support for nova live/cold-migration with containers
Updates hieradata for changes in https://review.openstack.org/471950.
Creates a new service - NovaMigrationTarget. On baremetal this just configures
live/cold-migration. On docker is includes a container running a second sshd
services on an alternative port.
Configures /var/lib/nova/.ssh/config and mounts in nova-compute and libvirtd
containers.
Change-Id: Ic4b810ff71085b73ccd08c66a3739f94e6c0c427
Implements: blueprint tripleo-cold-migration
Depends-On: I6c04cebd1cf066c79c5b4335011733d32ac208dc
Depends-On: I063a84a8e6da64ae3b09125cfa42e48df69adc12