Jenkins [Sun, 12 Feb 2017 13:00:23 +0000 (13:00 +0000)]
Merge "Dump and run puppet for role which are disable_upgrade_deployment true"
Jenkins [Fri, 10 Feb 2017 19:23:05 +0000 (19:23 +0000)]
Merge "Remove gnocchi db sync from the ansible upgrade step"
Jenkins [Fri, 10 Feb 2017 17:51:43 +0000 (17:51 +0000)]
Merge "Remove unused SR-IOV parameter NeutronSupportedPCIVendorDevs"
Mathieu Bultel [Fri, 10 Feb 2017 16:22:56 +0000 (17:22 +0100)]
Remove gnocchi db sync from the ansible upgrade step
Since gnocchi db sync for upgrade is made by puppet
we need to remove it from ansible tasks
Change-Id: I4a26513c3e3d0dcf77c007ea865364e38da3a94a
marios [Fri, 23 Dec 2016 12:18:20 +0000 (14:18 +0200)]
Adds cluster status check_and_fail before running upgrade (step0)
This depends on a change in the pacemaker_cluster resource
https://review.gerrithub.io/#/c/307078/
Change-Id: Iaf50e27607b159173190912604198b6a471fe35f
Jenkins [Fri, 10 Feb 2017 15:26:46 +0000 (15:26 +0000)]
Merge "Add pacemaker composable upgrade steps"
Jenkins [Fri, 10 Feb 2017 15:26:39 +0000 (15:26 +0000)]
Merge "Remove legacy major upgrade scripts for Ceph and BlockStorage"
Jenkins [Fri, 10 Feb 2017 15:26:29 +0000 (15:26 +0000)]
Merge "Remove aodh db sync from ansible upgrade"
Mathieu Bultel [Tue, 24 Jan 2017 13:36:59 +0000 (14:36 +0100)]
Dump and run puppet for role which are disable_upgrade_deployment true
We wants to run puppet on each role which has the flag
disable_upgrade_deployment to true. It will run after the upgrade
of the role and before running the whole converge step.
Change-Id: Ia85be688d070dfb5b8337e8ef3c4bc439fb6052e
Dan Radez [Tue, 22 Nov 2016 18:00:45 +0000 (13:00 -0500)]
adding Congress Support
Depends-On: Ic74ccd5fa7b3b04ca810416e5160463252f17474
Implements: blueprint congress-service-integration
Change-Id: Ie60540c340c0eb71ff376aba65507a8bb3e909b6
Signed-off-by: Dan Radez <dradez@redhat.com>
Giulio Fidente [Mon, 6 Feb 2017 11:17:04 +0000 (12:17 +0100)]
Remove legacy major upgrade scripts for Ceph and BlockStorage
We do not need the upgrade scripts used to migrate Ceph from
hammer to jewel. This submission removes that and the legacy
upgrade scripts used for the BlockStorage role.
Change-Id: I2674216dd9b5b849de6a2624ee1115420a254182
marios [Fri, 13 Jan 2017 11:06:14 +0000 (13:06 +0200)]
Delivers upgrade scripts where upgrade steps are disabled
This delivers a /root/tripleo_upgrade_node.sh to those nodes
that have the disable_upgrade_deployment flag set to true.
They will later be upgraded manually by the operator who will
invoke the script delivered here using upgrade-non-controller.sh
We can also deliver any service specific upgrade configuration,
such as configuring nova-compute to use the placement API as this
is required in order for placement to be configured and installed
during the subsequent upgrade steps for controller services.
This removes the compute and swift specific upgrade scripts as
they are now merged into the common
tripleo_upgrade_node.sh - removing any hard coded
reference to a particular role name (compute/objectstorage) and
only relying on the disable_upgrade_deployment is roles_data.yaml
Change-Id: I4531a4038b78087ef4a1a62c35f1328822427817
Co-Authored-By: Mathieu Bultel <mbultel@redhat.com>
Mathieu Bultel [Tue, 7 Feb 2017 16:46:34 +0000 (17:46 +0100)]
Make UpgradeBatch resource depends on BatchConfig step0
Make UpgradeBatch depends on BatchConfig, for step0
avoid creation of the UpgradeBatchConfig_stepX prior
to UpgradeBatchConfig step0 and add condition
Change-Id: I852beee65590270422cfbc9abe02111d88442f2e
Mathieu Bultel [Thu, 9 Feb 2017 07:03:59 +0000 (08:03 +0100)]
Remove aodh db sync from ansible upgrade
The db sync won't be run by ansible but by puppet
as part of the converge step
Change-Id: Ie868a92ece020e5749a401e0897be5ab80f13559
Dan Radez [Tue, 22 Nov 2016 18:00:45 +0000 (13:00 -0500)]
Adding Tacker Support
Depends-On: Ide0e60f3b7a3733788af4337c1c39b4a956c876f
Depends-On: I3d6bbc05644e840395f87333ec80e3b844f69903
Depends-On: Idf6abcb7fe766546cb362ad4afe54f4bccd9c994
Implements: blueprint tacker-service-integration
Change-Id: Ibddc81561f6e6ba671bd01a9251c57d3ad67ba8c
Signed-off-by: Dan Radez <dradez@redhat.com>
Jenkins [Thu, 9 Feb 2017 17:02:55 +0000 (17:02 +0000)]
Merge "Re-organizes Contrail services to the correct roles"
Pradeep Kilambi [Wed, 8 Feb 2017 19:29:54 +0000 (14:29 -0500)]
Remove deprecated metering_secret
use telemetry_secret instead which is already set.
Change-Id: I1815ba16519a529c6b7cbdf164e8853857692d73
Michael Henkel [Thu, 26 Jan 2017 14:24:04 +0000 (15:24 +0100)]
Re-organizes Contrail services to the correct roles
In current setup some Contrail services belong to the wrong roles.
The Contrail control plane can be impacted if the Analytics database has
problems.
Change-Id: I0d57a2324c38b5b20cc687c6217a7a364941f7e6
Depends-On: Id0dd35b95c5fe9d0fcc1e16c4b7d6cc601f10818
Closes-Bug: #
1659560
Jenkins [Wed, 8 Feb 2017 18:23:53 +0000 (18:23 +0000)]
Merge "Remove openstack-ceilometer-expirer check"
Jenkins [Wed, 8 Feb 2017 11:15:10 +0000 (11:15 +0000)]
Merge "Composable service support for Cinder Dell EMC Storage Center"
Jenkins [Wed, 8 Feb 2017 06:58:48 +0000 (06:58 +0000)]
Merge "implement a collectd composable service"
Jenkins [Tue, 7 Feb 2017 23:46:06 +0000 (23:46 +0000)]
Merge "Add registry and role service list entries for Octavia"
Jenkins [Tue, 7 Feb 2017 23:02:32 +0000 (23:02 +0000)]
Merge "Stop deploying Nova API in WSGI with Apache"
Jenkins [Tue, 7 Feb 2017 20:57:13 +0000 (20:57 +0000)]
Merge "Introduce Octavia implementation services"
Jenkins [Tue, 7 Feb 2017 20:57:06 +0000 (20:57 +0000)]
Merge "Stop setting bind_address on nova db uri."
Emilien Macchi [Fri, 3 Feb 2017 15:30:59 +0000 (10:30 -0500)]
Stop deploying Nova API in WSGI with Apache
It was suggested by Nova team to not deploying Nova API in WSGI with
Apache in production.
It's causing some issues that we didn't catch until now (see in the bug
report). Until we figure out what was wrong, let's disable it so we can
move forward in the upgrade process.
Change-Id: I09b73476762593642a0e011f83f0233de68f2c33
Related-Bug:
1661360
rajinir [Wed, 18 Jan 2017 21:02:45 +0000 (15:02 -0600)]
Enables support for configuring Cinder with Dell EMC
ScaleIO storage backend.
This change adds all relevant parameters for:
- Dell EMC ScaleIO Block Storage driver configuration
Closes-Bug: #
1661316
Depends-On: I5534aab53b70de215336a076d25263c73b8d7b5b
Change-Id: I8927151adbce235595a5c62365e1f87a6503c462
Oliver Walsh [Tue, 7 Feb 2017 10:18:36 +0000 (10:18 +0000)]
Stop setting bind_address on nova db uri.
This reverts the changes in https://review.openstack.org/414629 for nova as
they are incompatible with cell_v2.
This is a temporary fix for HA while a long-term solution is developed.
Change-Id: I79d30a2d76a354999152c0c997ea77f104c51027
Related-bug: #
1643487
Closes-bug: #
1662344
rajinir [Thu, 26 Jan 2017 19:23:01 +0000 (13:23 -0600)]
Composable services support for Cinder Dell EMC PS Series
Updated the heat templates for Cinder Dell EMC PS Series backend
to use composable services and rebranding of EQLX to Dell EMC PS Series
Closes-Bug: #
1661313
Change-Id: Id9d6f172f3f79a31788b26c7776d738fda5a30fa
Lars Kellogg-Stedman [Wed, 21 Dec 2016 18:14:01 +0000 (13:14 -0500)]
implement a collectd composable service
The collectd composable service permits an operator to configure
collectd metrics collection as part of the overcloud install.
Depends-on: I03cfbd96778a76125d18e2ca2f48d96e292608de
Change-Id: I143565329f5128f15cc39c9b62a6b242666383ab
Jenkins [Tue, 7 Feb 2017 06:17:04 +0000 (06:17 +0000)]
Merge "Adds default Keystone region to regionOne Closes-Bug: #
1661839"
Jenkins [Mon, 6 Feb 2017 22:49:45 +0000 (22:49 +0000)]
Merge "Remove openstack-ceilometer-api pre upgrade check"
Jenkins [Mon, 6 Feb 2017 22:01:43 +0000 (22:01 +0000)]
Merge "Remove precheck on services which run on httpd for upgrade"
Jenkins [Mon, 6 Feb 2017 16:17:01 +0000 (16:17 +0000)]
Merge "Remove old host param"
Mathieu Bultel [Mon, 6 Feb 2017 15:39:54 +0000 (16:39 +0100)]
Remove precheck on services which run on httpd for upgrade
Those services is not handle with systemctl
Change-Id: Ia57dffd42a11070696fda14f1e91de2993e63479
Marius Cornea [Mon, 6 Feb 2017 15:26:56 +0000 (16:26 +0100)]
Remove openstack-ceilometer-api pre upgrade check
This change removes the pre upgrade check for a running
openstack-ceilometer-api service as this service doesn't exists in
Newton. Ceilometer API runs under httpd:
[root@overcloud-controller-0 ~]# httpd -t -D DUMP_VHOSTS | grep ceilo
10.0.0.23:8777 overcloud-controller-0.internalapi.localdomain
(/etc/httpd/conf.d/10-ceilometer_wsgi.conf:6)
Change-Id: I5cbf8ccf72f9071e328f52d373cf9e8edf5793f4
Closes-Bug:
1661251
Jenkins [Mon, 6 Feb 2017 14:16:51 +0000 (14:16 +0000)]
Merge "Provide a default value for Ironic cleaning_network configuration"
Ramon Acedo [Sat, 4 Feb 2017 13:50:08 +0000 (13:50 +0000)]
Adds default Keystone region to regionOne
Closes-Bug: #
1661839
Change-Id: I9498be04749dc866d0423e75e57d4c07eaf3e904
Jenkins [Fri, 3 Feb 2017 21:42:40 +0000 (21:42 +0000)]
Merge "Disable batch upgrade deployments for disabled roles"
Jenkins [Fri, 3 Feb 2017 21:42:33 +0000 (21:42 +0000)]
Merge "Reduce number of steps for upgrades"
Jenkins [Fri, 3 Feb 2017 21:41:31 +0000 (21:41 +0000)]
Merge "Simplify/fix config enabled conditions for upgrades"
Jenkins [Fri, 3 Feb 2017 21:40:04 +0000 (21:40 +0000)]
Merge "Configure VNC Server listen address through t-h-t"
Jenkins [Fri, 3 Feb 2017 18:33:46 +0000 (18:33 +0000)]
Merge "net-config-multinode: make controlplane int idempotent"
rajinir [Thu, 26 Jan 2017 19:45:33 +0000 (13:45 -0600)]
Composable service support for Cinder Dell EMC Storage Center
Updated the heat templates for Cinder Dell EMC Storage Center
Backend to use composable services
Closes-Bug: #
1661314
Change-Id: I454549c45da7388f0e42975c9f4637dde9ec51e3
Brent Eagles [Tue, 20 Dec 2016 15:41:42 +0000 (12:11 -0330)]
Add registry and role service list entries for Octavia
This patch adds the Octavia services to the registry and controller role
(disabled by default). Also included is an example environment file for
enabling the services and required configuration. The API service
profile is also amended configure the load balancer service provider in
neutron to point to the octavia load balancer driver.
Change-Id: I7f3bba950f5b1574ba842a39e93a8ac2b1ccf7bb
Partially-implements: blueprint octavia-service-integration
Emilien Macchi [Fri, 3 Feb 2017 14:17:59 +0000 (09:17 -0500)]
net-config-multinode: make controlplane int idempotent
When doing a stack-update, it will try to create the control plane
interface again.
Add this conditional so the interface is not created if already exist.
Note: this code has been taken from tripleo-ci and is consistent with
how multinode jobs are currently tested.
Co-Authored-By: James Slagle <jslagle@redhat.com>
Co-Authored-By: Steven Hardy <shardy@redhat.com>
Co-Authored-By: Mathieu Bultel <mbultel@redhat.com>
Change-Id: I773fdf5359cead6961b595e3c8192b02406452b7
Related-Bug: #
1661412
Dmitry Tantsur [Thu, 2 Feb 2017 09:38:46 +0000 (10:38 +0100)]
Provide a default value for Ironic cleaning_network configuration
Ironic will soon refuse to start when at least some value is not provided.
Unfortunately, we do not create any overcloud[*] networks during deployment.
Fortunately, Ironic does not validate this value until actual cleaning. So,
this change sets it to "provisioning", which is what people often use.
An update will follow to the documentation to recommend this name:
http://tripleo.org/advanced_deployment/baremetal_overcloud.html#configuring-cleaning
A new parameter is created for this value, with a reminded to change it to
an actual UUID later on. While a pre-defined name will work in a simplest case,
in a real multi-tenant deployment a network name conflict is possible.
Using a UUID is safer in this regard.
[*] networks created in overcloud neutron
Change-Id: I1b7dc2ff70d3b76f19a183a60e88cf72f6d2a318
Closes-Bug: #
1661082
Carlos Camacho [Fri, 3 Feb 2017 12:09:58 +0000 (13:09 +0100)]
Remove openstack-ceilometer-expirer check
This wont work as openstack-ceilometer-expirer
cant be listed from systemctl.
Also we are not runing any upgrade task.
i.e.:
[root@overcloud-controller-0 ceilometer]# systemctl list-units | grep ceilometer
openstack-ceilometer-api.service loaded active running OpenStack ceilometer API service
openstack-ceilometer-central.service loaded active running OpenStack ceilometer central agent
openstack-ceilometer-collector.service loaded active running OpenStack ceilometer collection service
openstack-ceilometer-notification.service loaded active running OpenStack ceilometer notification agent
Change-Id: Ia9f7d3744264af1a37c06b9c8878cd95bed4e1c5
Steven Hardy [Thu, 2 Feb 2017 18:29:52 +0000 (18:29 +0000)]
Disable batch upgrade deployments for disabled roles
Currently we don't correctly disable the batch_upgrade_tasks, so
rework the loops to ensure we only create the batch deployments
for roles which enabled upgrades.
Note this modifies some loop whitespace too which cleans up the
rendered output and makes it a bit more readable/compact.
Change-Id: I1c257dcc351e99efa54f9cae4b3009287908756e
Partially-Renders: blueprint overcloud-upgrades-per-service
Steven Hardy [Mon, 30 Jan 2017 10:20:32 +0000 (10:20 +0000)]
Reduce number of steps for upgrades
We don't need all the steps currently enabled for either batched
or concurrent updates, so decrease them. In future we can perhaps
introspect the task tags during plan creation and set these
dynamically.
Change-Id: I0358886a332dfbecd03bc4a67086b08d25756c22
Partially-Implements: blueprint overcloud-upgrades-per-service
Steven Hardy [Mon, 30 Jan 2017 10:17:53 +0000 (10:17 +0000)]
Simplify/fix config enabled conditions for upgrades
We should enable each kind of upgrade per role, not per step
so rework the conditions, and also only apply it to the deployment
(to save the round-trip to the nodes applying an empty config)
but don't disable the *Config resources as the overhead of these
is small, and we reference the Step1 config in the outputs, even
if it's empty.
Change-Id: Iee2f1fb5b1d8b0b6001c6ab0f2a4ef2858cef281
Partially-Implements: blueprint overcloud-upgrades-per-service
Steven Hardy [Thu, 2 Feb 2017 12:03:03 +0000 (12:03 +0000)]
Disable puppet on upgrade for roles not upgrading
Where the role has disabled upgrades, we need to skip both the ansible and
puppet steps. To do this we refactor the post.j2.yaml so that it can be
included in the upgrade template with an adjusted list of roles.
Note this requires https://review.openstack.org/#/c/425220/ - this
change will be required for local testing of this patch
(run mistral-db-mange populate after updating tripleo-common
and restart the mistral services, or update your repos and re-run
openstack undercloud install).
Partially-Implements: blueprint overcloud-upgrades-per-service
Change-Id: Ie7d0fa6fef3528bd93e6cde076b964ea8de3185a
lhinds [Fri, 3 Feb 2017 09:30:33 +0000 (09:30 +0000)]
Added further security functionality in release notes.
This patch seeks to add futher security functions present within
tripleo for the ocata release.
Change-Id: Ie89b85589c2dfd3580de75253b73009b5d06c9f2
Jenkins [Fri, 3 Feb 2017 09:20:41 +0000 (09:20 +0000)]
Merge "Moving the validation for using the template alias version for all templates"
Jenkins [Fri, 3 Feb 2017 00:38:48 +0000 (00:38 +0000)]
Merge "Switch item notation to jinja format"
Emilien Macchi [Thu, 2 Feb 2017 21:10:15 +0000 (16:10 -0500)]
CI: enable debug on multinode and upgrade job
We're running TripleO CI jobs outside TripleO projects (nova, gnocchi,
etc), folks need more debug to be helpful.
Change-Id: I512ad89d9ac82ae62f9cbe7d0029fb1ac7445cc9
Pradeep Kilambi [Thu, 2 Feb 2017 20:53:29 +0000 (15:53 -0500)]
Remove old host param
Change-Id: Ib9e1a4ccdf447455a330687184eae471b9f3f4d4
Depends-On: I2b48d23006e38f56f04456b4556374bf0fcdb14a
Marius Cornea [Thu, 2 Feb 2017 17:46:48 +0000 (18:46 +0100)]
Switch item notation to jinja format
This change fixes the item variable notation in
puppet/services/ceph-osd.yaml.
Change-Id: I4d105619e4ac913b4a711bf91fea5f6e3c9b4caa
Closes-Bug:
1661339
Babu Shanmugam [Tue, 15 Nov 2016 11:42:12 +0000 (11:42 +0000)]
OVN plugin configuration fixes
This patch renames certain ovn plugin and controller configuration
parameters as well as adds some additional ml2 configuration parameters.
It also disables the need for the neutron metadata agent.
Co-authored-by: Numan Siddique <nusiddiq@redhat.com>
Change-Id: Idc9e7ef4a1b88013bca3eac3c136e4710e38a5c0
Jenkins [Thu, 2 Feb 2017 15:16:16 +0000 (15:16 +0000)]
Merge "Allow the override of pacemaker::corosync::settle_tries"
Mathieu Bultel [Fri, 25 Nov 2016 10:46:53 +0000 (11:46 +0100)]
Add pacemaker composable upgrade steps
This review adds the pacemaker ansible upgrade steps
into the pacemaker service manifest.
It makes use of the ansible-pacemaker module which for now
is at https://github.com/redhat-openstack/ansible-pacemaker
Change-Id: I33c798a198046d5f66e6b20f86080a8187dc208b
Jenkins [Thu, 2 Feb 2017 13:36:32 +0000 (13:36 +0000)]
Merge "Don't run yum_update.sh inside docker"
Jenkins [Thu, 2 Feb 2017 13:32:49 +0000 (13:32 +0000)]
Merge "Temporary UCSM mapping files should be opened with write mode"
Jenkins [Thu, 2 Feb 2017 13:31:41 +0000 (13:31 +0000)]
Merge "Use common directory in CI scenario for net-config"
Jenkins [Thu, 2 Feb 2017 10:34:11 +0000 (10:34 +0000)]
Merge "Don't run ceilometer-upgrade via upgrade_tasks"
Carlos Camacho [Thu, 2 Feb 2017 09:46:55 +0000 (10:46 +0100)]
Moving the validation for using the template alias version for all templates
Currently we are applying this validation for the services templates, this
submission moves it to run with all templates.
Also fixed those templates not using the alias name.
Change-Id: I3a2c0ce6adcc8061fdc51f73fdc6b9748c0fead9
Saravanan KR [Wed, 1 Feb 2017 10:03:28 +0000 (15:33 +0530)]
Remove unused SR-IOV parameter NeutronSupportedPCIVendorDevs
This parameter has been removed in neutron from the sriov conf
file, in Ocata. Removing the parameter from tripleo.
Closes-Bug: #
1660929
Change-Id: Icd8a1f6c9049434fd86ceeb24881e1ed49f2bb17
Jenkins [Wed, 1 Feb 2017 23:35:02 +0000 (23:35 +0000)]
Merge "Add more explicit messagae to build_endpoint_map's check option"
Jenkins [Wed, 1 Feb 2017 23:26:52 +0000 (23:26 +0000)]
Merge "Add deployed server bootstrap for RHEL"
Jenkins [Wed, 1 Feb 2017 23:24:25 +0000 (23:24 +0000)]
Merge "Validate that endpoint_map.yaml is up to date in the gate"
Jenkins [Wed, 1 Feb 2017 22:04:54 +0000 (22:04 +0000)]
Merge "Add ability to toggle swift's ceilometer transport_url SSL"
Juan Antonio Osorio Robles [Wed, 1 Feb 2017 21:09:03 +0000 (23:09 +0200)]
Add more explicit messagae to build_endpoint_map's check option
This will hopefully help developers know what to do if their patch fails
this verification.
Change-Id: I01fe9ca30295c6264affdbdb773b039a744289ea
Zane Bitter [Wed, 1 Feb 2017 21:05:03 +0000 (16:05 -0500)]
Validate that endpoint_map.yaml is up to date in the gate
Change-Id: I72aa48c72c825151739cb478c58e9a6c841c9130
Juan Antonio Osorio Robles [Wed, 1 Feb 2017 20:35:42 +0000 (22:35 +0200)]
Configure VNC Server listen address through t-h-t
This adds an entry for libvirt (which is used by the VNC server) on
which we can tell it via t-h-t on which IP address to listen on.
Change-Id: Ie377c09734e9f6170daa519aed69c53fc67c366b
Related-Bug: #
1660099
Juan Antonio Osorio Robles [Tue, 31 Jan 2017 23:21:09 +0000 (01:21 +0200)]
FreeIPA: don't preprovision service principals if novajoin is enabled
novajoin will do this once it's enabled in CI.
Change-Id: I9f19d833f306930704b09de0c4d425461f1f3f63
Steven Hardy [Wed, 1 Feb 2017 19:00:38 +0000 (19:00 +0000)]
Don't run ceilometer-upgrade via upgrade_tasks
This needs to be run by puppet or ansible runs it as root and the
later run by puppet fails due to permissions on the logfile.
Probably we need to remove the *sync calls for most services to
avoid similar issues, now that we're running puppet as part of the
pre-converge upgrade process but that will be done in another patch.
Change-Id: I808db2c175325a25058226842684558ea06fb5c5
Partially-Implements: blueprint overcloud-upgrades-per-service
Emilien Macchi [Wed, 1 Feb 2017 17:21:11 +0000 (12:21 -0500)]
Remove Gemfile and Rakefile
We are not running syntax and lint jobs in THT for master & newton,
let's remove useless files.
Change-Id: Ia572a0eb8872ab199bc68a51750dfc17ca5ee034
Emilien Macchi [Wed, 1 Feb 2017 13:57:58 +0000 (08:57 -0500)]
Disable the deprecation warnings as errors for puppet-syntax
Recently puppet4 started deprecating ruby 2.0 with the following
commit: https://github.com/puppetlabs/puppet/commit/
e9eda7ed56fddcf185fc155d7e0ae054ea327504
One way to work-around this (in the absence of a more recent ruby
version) is to not treat this deprecation warnings as fatal when
doing the puppet syntax check
Change-Id: Id49c5068ab4609e3da0417af4714e8cb8485f3d1
Closes-Bug: #
1660943
Juan Antonio Osorio Robles [Mon, 30 Jan 2017 18:48:27 +0000 (20:48 +0200)]
Add ability to toggle swift's ceilometer transport_url SSL
So, if RabbitClientUseSSL is set, this will enable TLS for the
swift's ceilometer message broker connection.
Change-Id: Ide70a509aefc9e7eb9d7cc5b3a60520fa42b4010
Depends-On: I8b7457b6233c4f88af2d7bc1b9304fcccb6edf61
Jenkins [Tue, 31 Jan 2017 12:51:19 +0000 (12:51 +0000)]
Merge "Configure DPDK options to isolate PMD cores and ovs process cores"
Jenkins [Tue, 31 Jan 2017 10:15:48 +0000 (10:15 +0000)]
Merge "docker: eliminate copy-json.py in favor of json-file"
Jenkins [Tue, 31 Jan 2017 09:48:48 +0000 (09:48 +0000)]
Merge "Removes deprecated neutron-opendaylight-l3 env file"
Mathieu Bultel [Tue, 31 Jan 2017 08:09:14 +0000 (09:09 +0100)]
Use common directory in CI scenario for net-config
The multinode_major_upgrade scenario is using an external
directory for net-config.
Moving this to the internal directory in tht common/
Change-Id: I41692d2ddb9fbd2002fd7910933ab4edff74f33e
Jenkins [Mon, 30 Jan 2017 21:07:38 +0000 (21:07 +0000)]
Merge "Add upgrade support for CephRGW service"
Brent Eagles [Fri, 16 Dec 2016 15:43:57 +0000 (12:13 -0330)]
Introduce Octavia implementation services
Initial service definition files for Octavia backend services.
Change-Id: I1ae2bc0387dff5218f731f1860277dc1ad2b9528
Partially-implements: blueprint octavia-service-integration
Depends-On: Ic6f945cdf36744382a4a63fcc374d5562964ca68
Depends-On: I1dd1873b646e8569ed0a85c5ee7eb3bec3a8b1fa
Giulio Fidente [Wed, 25 Jan 2017 11:53:52 +0000 (12:53 +0100)]
Describe use of Manila/CephFS in capabilites_map
This is meant to describe in the UI how to use the
manila-cephfsnative-config environment file to deploy Manila with
Ceph as backend using either a TripleO managed or an externally
managed Ceph cluster.
Also adds a puppet-ceph.yaml environment file meant to enable the
deployment of a Ceph cluster, given that storage-environment.yaml
is meant to be customized by the user instead.
Change-Id: Iefd7056a9bc079025e6ac4dd50edcd2e2635e1b0
Jenkins [Mon, 30 Jan 2017 15:56:17 +0000 (15:56 +0000)]
Merge "multinode/upgrade: set heat::rpc_response_timeout to 600"
Dan Prince [Wed, 4 Jan 2017 02:57:14 +0000 (21:57 -0500)]
docker: eliminate copy-json.py in favor of json-file
This patch rewires how we configure the Kolla external config files
via Heat templates and uses a more simple json-file heat hook to
directly write out Kolla config files to disk.
By using a heat hook instead of a shell script we can avoid
Json conversion issues. Additionally, This generic json file hook will
be useful for other ad-hoc Json file configuration within the TripleO
docker architecture.
Co-Authored-By: Martin André <m.andre@redhat.com>
Change-Id: I8c72a4a9a7022f722bfe1cef3e18517605720cce
Depends-On: I2b372ac2e291339e436202c9fe58a681ed6a743f
Depends-On: Id3f779b11e23fd3122ef29b7ccbae116667d4520
Jenkins [Fri, 27 Jan 2017 22:04:18 +0000 (22:04 +0000)]
Merge "Add AuditD composable service"
Jenkins [Fri, 27 Jan 2017 19:22:15 +0000 (19:22 +0000)]
Merge "Pass parameters for TLS proxy in front of neutron server"
Emilien Macchi [Fri, 27 Jan 2017 19:14:53 +0000 (14:14 -0500)]
multinode/upgrade: set heat::rpc_response_timeout to 600
Continue the work done on https://review.openstack.org/#/c/423302/
Change-Id: I931534e0ec33e131809186f74068eb479d38a0f9
Jenkins [Fri, 27 Jan 2017 18:58:36 +0000 (18:58 +0000)]
Merge "Remove create-legacy-resource-types opts"
Jenkins [Fri, 27 Jan 2017 17:52:29 +0000 (17:52 +0000)]
Merge "Use os-net-config in multinode jobs"
Juan Antonio Osorio Robles [Wed, 25 Jan 2017 17:42:33 +0000 (19:42 +0200)]
Pass parameters for TLS proxy in front of neutron server
If TLS in the internal network is enabled, we run neutron-server
behind a TLS proxy (which is actually httpd's mod_proxy). This passes
the necessary hieradata.
bp tls-via-certmonger
Depends-On: I6dfbf49f45aef9f47e58b5c0dbedd2b4e239979e
Change-Id: I9252512dbf9cf2e3eec50c41bf10629d36070bbd
Emilien Macchi [Wed, 25 Jan 2017 15:35:20 +0000 (10:35 -0500)]
Use os-net-config in multinode jobs
Full credits to James Slagle, author of this code in TripleO CI:
https://review.openstack.org/#/c/409346
This patch adds a new template for configuring networking on the
Overcloud nodes using os-net-config in multinode jobs. Previously we
were not using os-net-config at all.
Also updates the multinode.yaml environment to use this network config
template.
The IP of each subnode is used when the vxlan tunnels are configured in
OVS, given that, each node needs its own unique network configuration.
To accomodate that, the templates makes use of the network_config_hook
function to influence run-os-net-config.sh
This patch is just the first step to totally switching to os-net-config
in multinode jobs. The devstack-gate code is still in use to bootstrap
the initial networking on the undercloud and subnodes. That will be
switched over in subsequent patches.
Change-Id: I6efa71eb23109d0b3b480061135c572ab89f5981
Co-Authorized-By: James Slagle <jslagle@redhat.com>
Implements: blueprint multinode-ci-os-net-config
Oliver Walsh [Thu, 26 Jan 2017 11:21:41 +0000 (11:21 +0000)]
Add support for Jinja2 includes
This replicates the behavior of the custom Jinja2 loader from tripleo-common to
allow template validation on the local filesystem using tox.
Change-Id: I27683ab31187c6334dc5b4b5363a3347874b9a90
Partially-Implements: blueprint overcloud-upgrades-per-service
Depends-On: Idc5c3f49c7a2fc7f3622c76da001992cc657384e
Steven Hardy [Wed, 18 Jan 2017 12:25:56 +0000 (12:25 +0000)]
Add AuditD composable service
This patch allows the management of the AuditD service and its associated
files (such as `audit.rules`)
This is achieved by means of the `puppet-auditd` puppet module.
Also places ssh banner capabilities map on top of patch
Change-Id: Ib8bb52dde88304cb58b051bced9779c97a314d0d
Depends-On: Ie31c063b674075e35e1bfa28d1fc07f3f897407b
Jenkins [Fri, 27 Jan 2017 12:58:03 +0000 (12:58 +0000)]
Merge "Adds a pre-upgrade check that service is running (step0)"
Jenkins [Fri, 27 Jan 2017 12:29:12 +0000 (12:29 +0000)]
Merge "Adds SSH Banner text into sshd_config"
marios [Fri, 23 Dec 2016 14:07:44 +0000 (16:07 +0200)]
Adds a pre-upgrade check that service is running (step0)
Adds a step0 for most services to check that the state is running
before continuing with any of the other upgrades steps (these are
tagged step0).
You can skip this service check by overriding the
SkipUpgradeConfigTags parameter as follows:
parameter_defaults:
SkipUpgradeConfigTags: validation
Co-Authored-By: Steven Hardy <shardy@redhat.com>
Change-Id: Ie276f153015f671b720b6ed5beaac1b921661909