apex-tripleo-heat-templates.git
8 years agoIncreasing neutron timeout for low memory usage
Arx Cruz [Mon, 24 Oct 2016 14:27:11 +0000 (16:27 +0200)]
Increasing neutron timeout for low memory usage

We are noticing several tests failing in our low memory environment
because of timeout in neutron requests.
As an example the test
tempest.api.compute.servers.test_server_actions.ServerActionsTestJSON
fails because it requests to plug a vif, and send request to neutron,
which responds in more than neutron_url_timeout, and since the option
vif_plugging_is_fatal is set to True as default, the test fails.
Shortly thereafter, checking in neutron log you can see the request,
returning with the proper status, after more than neutron_url_timeout,
however, it's already too late once nova already marked the instance
with error status, and so the test fails.

Closes-Bug: #1641135

Change-Id: If0991c114f199490ac0deb71eb569a42d4711359

8 years agoFix the rabbitmq/redis pacemaker resource timeouts on updates
Michele Baldessari [Wed, 19 Oct 2016 12:44:01 +0000 (14:44 +0200)]
Fix the rabbitmq/redis pacemaker resource timeouts on updates

With the following two changes we increased the timeout for redis and
rabbit for both starting and stopping to 200s:
https://review.openstack.org/386618 newton (merged)
https://review.openstack.org/385555 master (merged)

We want to also fix that on minor updates on all our supported
releases upstream and downstream (newton, mitaka, liberty, kilo).
This way we can guarantee that we have a uniform timeout for
sart and stop for rabbit and redis across all our releases.

Change-Id: If59bf3386832ee78d3a654f01077aff2e8be76e8
Closes-Bug: #1634851

8 years agoMerge "Composable Mistral services"
Jenkins [Fri, 21 Oct 2016 21:04:15 +0000 (21:04 +0000)]
Merge "Composable Mistral services"

8 years agoMerge "Prefill Sensu client custom config"
Jenkins [Fri, 21 Oct 2016 21:00:23 +0000 (21:00 +0000)]
Merge "Prefill Sensu client custom config"

8 years agoMerge "Clarify horizon allowed hosts setting"
Jenkins [Fri, 21 Oct 2016 20:59:23 +0000 (20:59 +0000)]
Merge "Clarify horizon allowed hosts setting"

8 years agoMerge "Use correct password for keystone bootstrap"
Jenkins [Fri, 21 Oct 2016 17:13:22 +0000 (17:13 +0000)]
Merge "Use correct password for keystone bootstrap"

8 years agoClarify horizon allowed hosts setting
Matthias Runge [Tue, 30 Aug 2016 07:56:54 +0000 (09:56 +0200)]
Clarify horizon allowed hosts setting

Horizon allowed hosts should name the IP addresses/
DNS names (short/long) the Horizon node is listening to.
Allowed hosts is used for header checks and is a security
mechanism.

Change-Id: I81c96357f969a1a436eecd35eb178579159bc719

8 years agoMerge "Add special case handling for OVS upgrade in updates and upgrades"
Jenkins [Fri, 21 Oct 2016 16:23:16 +0000 (16:23 +0000)]
Merge "Add special case handling for OVS upgrade in updates and upgrades"

8 years agoMerge "Use ::os_workers fact instead of ::processorcount"
Jenkins [Fri, 21 Oct 2016 16:13:55 +0000 (16:13 +0000)]
Merge "Use ::os_workers fact instead of ::processorcount"

8 years agoMerge "Add parameters to run cinder over httpd"
Jenkins [Fri, 21 Oct 2016 15:45:37 +0000 (15:45 +0000)]
Merge "Add parameters to run cinder over httpd"

8 years agoMerge "Add missing Ceph endpoints from tls-everywhere environment"
Jenkins [Fri, 21 Oct 2016 14:42:17 +0000 (14:42 +0000)]
Merge "Add missing Ceph endpoints from tls-everywhere environment"

8 years agoMerge "Include ceilometer in swift proxy pipeline"
Jenkins [Fri, 21 Oct 2016 13:16:34 +0000 (13:16 +0000)]
Merge "Include ceilometer in swift proxy pipeline"

8 years agoMerge "Removes EnableODL heat parameter and fixes missing local_ip param"
Jenkins [Fri, 21 Oct 2016 12:58:45 +0000 (12:58 +0000)]
Merge "Removes EnableODL heat parameter and fixes missing local_ip param"

8 years agoUse ::os_workers fact instead of ::processorcount
Juan Antonio Osorio Robles [Fri, 21 Oct 2016 12:37:35 +0000 (15:37 +0300)]
Use ::os_workers fact instead of ::processorcount

Change-Id: Ib25849565c617f32357ef545957f58454b2a53f8

8 years agoComposable Mistral services
Brad P. Crochet [Tue, 31 May 2016 15:05:55 +0000 (11:05 -0400)]
Composable Mistral services

Adds new puppet specific services for Mistral
API and Mistral Engine.

This submission enables the mistral service by default in the
overcloud, a following submission will disable it and make it
optional by enabling it on demand based in an environment file.

Depends-On: Iae42ffa37c4c9b1e070b7c3753e04c45bb97703f
Depends-On: I942d419be951651e305d01460f394870c30a9878
Depends-On: I6cb2cbf4a2abf494668d24b8c36b0d525643f0af
Implements: blueprint composable-services-within-roles
Co-Authored-By: Carlos Camacho <ccamacho@redhat.com>
Change-Id: Id5ff9cb498b5a47af38413d211ff0ed6ccd0015b

8 years agoMerge "Generate internal TLS hieradata for apache services"
Jenkins [Fri, 21 Oct 2016 12:05:37 +0000 (12:05 +0000)]
Merge "Generate internal TLS hieradata for apache services"

8 years agoAdd missing Ceph endpoints from tls-everywhere environment
Juan Antonio Osorio Robles [Fri, 21 Oct 2016 11:36:56 +0000 (14:36 +0300)]
Add missing Ceph endpoints from tls-everywhere environment

Change-Id: Ib945e570556e8e10e5bb07faa57270958c9eda99

8 years agoMerge "Bind mount files to run DiD in latest atomic host"
Jenkins [Fri, 21 Oct 2016 09:20:01 +0000 (09:20 +0000)]
Merge "Bind mount files to run DiD in latest atomic host"

8 years agoMerge "Have docker start script honor configuration"
Jenkins [Fri, 21 Oct 2016 09:19:54 +0000 (09:19 +0000)]
Merge "Have docker start script honor configuration"

8 years agoOpen port 16509 for libvirt for live migration
James Slagle [Thu, 20 Oct 2016 21:25:21 +0000 (17:25 -0400)]
Open port 16509 for libvirt for live migration

Port 16509 should be opened for tcp traffic to enable live migration.

See Also:
http://docs.openstack.org/admin-guide/compute-configuring-migrations.html

Previously, we were not enabling any iptables rules on the Compute
Roles, so this is a regression.

Change-Id: Ie4abf53dc2a8171af48d02e34a1a3ad43f27cfb3
Closes-Bug: #1635427

8 years agoInclude ceilometer in swift proxy pipeline
Pradeep Kilambi [Sat, 17 Sep 2016 16:23:15 +0000 (12:23 -0400)]
Include ceilometer in swift proxy pipeline

new ceilometermiddleware is available and integrated into
puppet-swift. Lets leverage it and include it in the
swift proxy pipeline. The correcponding puppet triple
change for this is Ie49f4a750368ff174b23b8d6baa743d0956d727e

Closes-Bug: #1631108

Change-Id: I82da0240d60d1eed54f1c0927e6157bb63025a19

8 years agoMerge "Disables Neutron ML2 config on Compute for OpenDaylight"
Jenkins [Thu, 20 Oct 2016 18:35:45 +0000 (18:35 +0000)]
Merge "Disables Neutron ML2 config on Compute for OpenDaylight"

8 years agoAdd special case handling for OVS upgrade in updates and upgrades
marios [Thu, 20 Oct 2016 10:42:37 +0000 (13:42 +0300)]
Add special case handling for OVS upgrade in updates and upgrades

This adds a special case handling for the opensvswitch package
as discussed at the related bug below.
This is added/handled here for both the minor update and the
major mitaka...newton upgrade.

Change-Id: I9b1f0eaa0d36a28e20b507bec6a4e9b3af1781ae
Closes-Bug: 1635205

8 years agoGenerate internal TLS hieradata for apache services
Juan Antonio Osorio Robles [Mon, 26 Sep 2016 15:34:10 +0000 (15:34 +0000)]
Generate internal TLS hieradata for apache services

This adds an environment file that can be used to enable TLS in
the internal endpoints via certmonger if used. This will include
a nested stack that will create the hash that will be used to
create the certmonger certificates.

When setting up a service over apache via puppet, we used to disable
explicitly ssl (which sets modd_ssl-related fields for that vhost).
We now make this depend on the EnableInternalTLS flag. This has only
been done for keystone, but more services will be added as the
puppet code lands

bp tls-via-certmonger

Depends-On: I303f6cf47859284785c0cdc65284a7eb89a4e039
Change-Id: I12e794f2d4076be9505dabfe456c1ca6cfbd359c

8 years agoBind mount files to run DiD in latest atomic host
Martin André [Tue, 26 Jul 2016 09:31:49 +0000 (11:31 +0200)]
Bind mount files to run DiD in latest atomic host

The /usr/bin/docker is a shell script in latest atomic host, pointing
to either docker-latest or docker-current binary. Bind mount the
required files from atomic host to be able to run docker in docker
inside heat-agents container.

Co-Authored-By: Flavio Percoco <flavio@redhat.com>
Change-Id: I97e29f65beb3a3f89c1b42c339e2e89f0fc1d519

8 years agoHave docker start script honor configuration
Martin André [Tue, 6 Sep 2016 13:37:00 +0000 (15:37 +0200)]
Have docker start script honor configuration

The test was always evaluate as true which resulted in
insecure_registry line being set even when DockerNamespaceIsRegistry
was set to false.

Change-Id: Iacb73a4908a6a27082b94fe919734e644ed47b19

8 years agoMerge "Set nova service_name via t-h-t"
Jenkins [Tue, 18 Oct 2016 19:55:16 +0000 (19:55 +0000)]
Merge "Set nova service_name via t-h-t"

8 years agoMerge "Fix api_extensions_path in neutron-opencontrail environment"
Jenkins [Tue, 18 Oct 2016 19:53:20 +0000 (19:53 +0000)]
Merge "Fix api_extensions_path in neutron-opencontrail environment"

8 years agoMerge "Enable proxy headers parsing for Neutron"
Jenkins [Tue, 18 Oct 2016 13:47:37 +0000 (13:47 +0000)]
Merge "Enable proxy headers parsing for Neutron"

8 years agoMerge "Add apache workers to nova-api conditional"
Jenkins [Tue, 18 Oct 2016 12:50:14 +0000 (12:50 +0000)]
Merge "Add apache workers to nova-api conditional"

8 years agoAdd parameters to run cinder over httpd
Juan Antonio Osorio Robles [Mon, 17 Oct 2016 07:13:38 +0000 (10:13 +0300)]
Add parameters to run cinder over httpd

This adds the necessary hieradata to run cinder over httpd instead
of eventlet.

Change-Id: Ic1967a6f4f60a273965811516f33121115d518b4

8 years agoMerge "Ensure all HostsDeployments finish before puppet"
Jenkins [Tue, 18 Oct 2016 10:17:22 +0000 (10:17 +0000)]
Merge "Ensure all HostsDeployments finish before puppet"

8 years agoFix api_extensions_path in neutron-opencontrail environment
Cyril Lopez [Mon, 17 Oct 2016 22:45:01 +0000 (00:45 +0200)]
Fix api_extensions_path in neutron-opencontrail environment

There is a missing repositiry for LBaaS in api_extensions_path in neutron-opencontrail.
This patch is working in my lab : tripleo liberty and opencontrail 3.0.2

Closes-Bug: #1634120

Change-Id: Ie06612faf226d0e5e75f3f8a9b560118cba5ff4c
Signed-off-by: Cyril Lopez <cylopez@redhat.com>
8 years agoAdd apache workers to nova-api conditional
Steven Hardy [Mon, 17 Oct 2016 18:02:41 +0000 (19:02 +0100)]
Add apache workers to nova-api conditional

Without this httpd fails to start on deployments where the
worker count isn't explicitly overridden via a parameter.

Change-Id: Ie7b31bc6e022a0166af126c866994bdd019718df
Closes-Bug: #1634213

8 years agoRemoves EnableODL heat parameter and fixes missing local_ip param
Tim Rozet [Fri, 14 Oct 2016 21:36:26 +0000 (17:36 -0400)]
Removes EnableODL heat parameter and fixes missing local_ip param

EnableOpenDaylightOnController was not very composable.  Removing this
parameter to make the service truly composable.  Also fixes missing
local_ip setting for OVS, required for VXLAN or GRE tenant networks.

Closes-Bug: 1633625

Depends-On: Ia55c05e12d5d434111a13e1ed795da530e3ff4a5

Change-Id: I0e07e1631793311334d1436ee8fdf9af2802ba70
Signed-off-by: Tim Rozet <trozet@redhat.com>
8 years agoSet nova service_name via t-h-t
Juan Antonio Osorio Robles [Fri, 14 Oct 2016 10:08:56 +0000 (13:08 +0300)]
Set nova service_name via t-h-t

with the move to use httpd instead of eventlet, We now add this
parameter in t-h-t to be able to clean it up from the puppet-tripleo
manifest.

Change-Id: Ic229182cc5c887b57f6182c3db1bac8bed330f7c
Depends-On: I4603b81d30a704b07eef461b3cdbfe164614b04f

8 years agoEnable proxy headers parsing for Neutron
Juan Antonio Osorio Robles [Mon, 17 Oct 2016 08:49:25 +0000 (11:49 +0300)]
Enable proxy headers parsing for Neutron

http_proxy_to_wsgi middleware was recently added to Neutron [1] and
in order to take it into use, we need to enable it via hiera.

[1] Ice9ee8f4e04050271d59858f92034c230325718b
Depends-On: I99bc9486fdd85857ce73c413e17400320bd6ec5b
Related-Bug: #1590608

Change-Id: I10c065e726f2708e09acfc04dac3cae34a534d23

8 years agoglance_multiple_locations when NovaEnableRbdBackend=true
Attila Fazekas [Mon, 17 Oct 2016 06:39:28 +0000 (08:39 +0200)]
glance_multiple_locations when NovaEnableRbdBackend=true

glance_multiple_locations does not needed when the
NovaEnableRbdBackend=false, but it is neede when both the
image and the instance storage is rbd and
the show_image_direct_url is enabled.

The condition introduced in Ia7e0558e4f318640981abb44d188e3479b5eae69

Change-Id: Ia8a8cd9aeda69e9a7db6f95dcf418f56e29cae00
Closes-Bug: 1632285

8 years agoDisables Neutron ML2 config on Compute for OpenDaylight
Tim Rozet [Fri, 14 Oct 2016 21:50:12 +0000 (17:50 -0400)]
Disables Neutron ML2 config on Compute for OpenDaylight

This is not needed with ODL and actually triggers deployments to fail
due to missing ODL username/password info on compute nodes.

Depends-On: Ifd906db4e6062ac271c2147fe1149b1009d06ae2

Closes-Bug: 1633630

Change-Id: Ib88e8ef91c393d30c44b86a932103f5a294bc547
Signed-off-by: Tim Rozet <trozet@redhat.com>
8 years agoMerge "Modify the constraint to allow single quote for DPDK core list param"
Jenkins [Fri, 14 Oct 2016 23:21:40 +0000 (23:21 +0000)]
Merge "Modify the constraint to allow single quote for DPDK core list param"

8 years agoMerge "Move trunk service plugin to the proper list"
Jenkins [Fri, 14 Oct 2016 23:21:33 +0000 (23:21 +0000)]
Merge "Move trunk service plugin to the proper list"

8 years agoMerge "Pass heat domain admin password to keystone"
Jenkins [Fri, 14 Oct 2016 22:50:30 +0000 (22:50 +0000)]
Merge "Pass heat domain admin password to keystone"

8 years agoMerge "Fixes missing provider mappings for OpenDaylight"
Jenkins [Fri, 14 Oct 2016 18:41:37 +0000 (18:41 +0000)]
Merge "Fixes missing provider mappings for OpenDaylight"

8 years agoEnsure all HostsDeployments finish before puppet
Dan Prince [Fri, 14 Oct 2016 17:39:01 +0000 (13:39 -0400)]
Ensure all HostsDeployments finish before puppet

This makes sure that the Host settings for all deployments are finished
before starting the AllNodesDeployments which execute puppet.

Change-Id: Ibe604472255ce905ca2c1dca2a9b07a6f8f40e47
Related-bug: #1633565

8 years agoheat-api-cfn endpoint is created to RegionOne instead of regionOne
Luca Lorenzetto [Fri, 14 Oct 2016 15:27:44 +0000 (17:27 +0200)]
heat-api-cfn endpoint is created to RegionOne instead of regionOne

When deploying, heat-api-cfn is assigned to RegionOne. This leads to a
bad user experience when logging into horizon, because if RegionOne is
selected by default, the users finds all menus empty (no computing, or
anything else).

Thanks to trown for finding out the issue.

Closes-Bug: 1633524

Change-Id: Ic108280f6b0875ffec10be6f696669962fb82e6b

8 years agoMerge "Add contrail services to the resource registry"
Jenkins [Fri, 14 Oct 2016 14:31:18 +0000 (14:31 +0000)]
Merge "Add contrail services to the resource registry"

8 years agoFixes missing provider mappings for OpenDaylight
Tim Rozet [Fri, 30 Sep 2016 16:49:06 +0000 (12:49 -0400)]
Fixes missing provider mappings for OpenDaylight

Provider mappings were not parameterized, and this is traditionally
required for VLAN provider networks.  In ODL Boron with new netvirt,
this value is required to be set in order to use external networks.

Closes-Bug: #1627898

Change-Id: I8001a4077fc7c4af458033043ea438c32c9772b0
Signed-off-by: Tim Rozet <trozet@redhat.com>
8 years agoPass heat domain admin password to keystone
Steven Hardy [Thu, 13 Oct 2016 18:00:09 +0000 (19:00 +0100)]
Pass heat domain admin password to keystone

This is needed to create the user/domain/project in the
keystone profile on whatever role is running the keystone service.

Change-Id: I115ead005974080e0a35e3675d9b37828c8934b1
Closes-Bug: #1631130
Depends-On: Ib088a572b384b479f51d56555734d78ab840a1f3

8 years agoModify the constraint to allow single quote for DPDK core list param
Saravanan KR [Fri, 14 Oct 2016 11:16:50 +0000 (16:46 +0530)]
Modify the constraint to allow single quote for DPDK core list param

DPDK core list has to be give a string. For multiple cores, it
be given as "'1,2'". But the constraint does not allow ' (single
quote) to be set in the string. Modifying the constraint pattern.
Closes-Bug: #1633433

Change-Id: Ide2194d9ef5c10e276fa1a634919dfb286e483d6

8 years agoMerge "Fix default Swift ring partition power"
Jenkins [Fri, 14 Oct 2016 10:21:35 +0000 (10:21 +0000)]
Merge "Fix default Swift ring partition power"

8 years agoMerge "Enable Glance multiple locations when using Ceph"
Jenkins [Fri, 14 Oct 2016 08:12:08 +0000 (08:12 +0000)]
Merge "Enable Glance multiple locations when using Ceph"

8 years agoMerge "Split out hosts config deployment"
Jenkins [Fri, 14 Oct 2016 02:18:56 +0000 (02:18 +0000)]
Merge "Split out hosts config deployment"

8 years agoEnable Glance multiple locations when using Ceph
Giulio Fidente [Tue, 11 Oct 2016 10:51:44 +0000 (12:51 +0200)]
Enable Glance multiple locations when using Ceph

Currently Glance v2 doesn't allow to specify custom locations for
images by default, it returns 403. To enable this, the
'show_multiple_locations' param must be set to True.

Also see similar change introduced in devstack [1].

1. Id0f1c398b8b48f2ffc2488b29bc7cbd279069337

Change-Id: Ia7e0558e4f318640981abb44d188e3479b5eae69
Closes-Bug: 1632285

8 years agoMerge "Enable object versioning in Swift proxy"
Jenkins [Thu, 13 Oct 2016 20:17:15 +0000 (20:17 +0000)]
Merge "Enable object versioning in Swift proxy"

8 years agoSplit out hosts config deployment
Dan Prince [Tue, 11 Oct 2016 01:03:12 +0000 (21:03 -0400)]
Split out hosts config deployment

This patch moves the hosts configuration into its own deployment.
It will continue to use os-apply-config as something that is
required early on in the bootstrapping (it needs to be
configured before puppet runs for example).

The motivation here is so we can refactor all-nodes-config.yaml to use a
new hiera hook that that avoids os-apply-config entirely.

Change-Id: Ib3e4380f205358b27d22a1102b663cf300b1ed86
Partial-bug: #1596373

8 years agoMerge "Enable proxy headers parsing for Aodh"
Jenkins [Thu, 13 Oct 2016 16:35:02 +0000 (16:35 +0000)]
Merge "Enable proxy headers parsing for Aodh"

8 years agoMerge "Enable proxy headers parsing for Gnocchi"
Jenkins [Thu, 13 Oct 2016 16:34:55 +0000 (16:34 +0000)]
Merge "Enable proxy headers parsing for Gnocchi"

8 years agoMerge "Enable proxy headers parsing for Ceilometer"
Jenkins [Thu, 13 Oct 2016 16:31:56 +0000 (16:31 +0000)]
Merge "Enable proxy headers parsing for Ceilometer"

8 years agoMerge "Only set NovaWorkers in the non-default case"
Jenkins [Thu, 13 Oct 2016 14:21:06 +0000 (14:21 +0000)]
Merge "Only set NovaWorkers in the non-default case"

8 years agoMove trunk service plugin to the proper list
Brent Eagles [Thu, 13 Oct 2016 13:25:55 +0000 (10:55 -0230)]
Move trunk service plugin to the proper list

The trunk plugin required for trunk port support in neutron was added to
the incorrect plugin list.

Change-Id: I8d424d6a6045e07d9fbab1a864470ceefdb1ad8e
Closes-Bug: #1633079

8 years agoMerge "Be more inclusive in insecure registry regex"
Jenkins [Thu, 13 Oct 2016 12:57:38 +0000 (12:57 +0000)]
Merge "Be more inclusive in insecure registry regex"

8 years agoMerge "Add flag for internal TLS"
Jenkins [Thu, 13 Oct 2016 11:42:23 +0000 (11:42 +0000)]
Merge "Add flag for internal TLS"

8 years agoMerge "Add HAProxy TLS handled by certmonger as composable service"
Jenkins [Thu, 13 Oct 2016 11:41:20 +0000 (11:41 +0000)]
Merge "Add HAProxy TLS handled by certmonger as composable service"

8 years agoPrefill Sensu client custom config
Martin Mágr [Fri, 7 Oct 2016 13:30:35 +0000 (15:30 +0200)]
Prefill Sensu client custom config

- Custom config has to contain OpenStack auth information,
  so it has to be generated for user during deployment.
  This patch maintains the ability to provide a custom
  configuration for the Sensu client.

Change-Id: If449642c4bbad683421e1f461b8721e655db0c45

8 years agoEnable proxy headers parsing for Ceilometer
Juan Antonio Osorio Robles [Thu, 13 Oct 2016 08:55:29 +0000 (11:55 +0300)]
Enable proxy headers parsing for Ceilometer

http_proxy_to_wsgi middleware was recently added to Ceilometer [1] and
in order to take it into use, we need to enable it via hiera.

[1] I24f16dda49bd9e7930ca9f0d32bf0793463aff03
Depends-On: I1812a27202ba3714b354aeb27611d38def87a7fc
Related-Bug: #1590608

Change-Id: If8de25afa13de6797895f36c98ffdde8cf3e8656

8 years agoMerge "Disable IPv6 RAs & Autoconf For All (Not Just Default)"
Jenkins [Thu, 13 Oct 2016 08:49:30 +0000 (08:49 +0000)]
Merge "Disable IPv6 RAs & Autoconf For All (Not Just Default)"

8 years agoEnable proxy headers parsing for Aodh
Juan Antonio Osorio Robles [Thu, 13 Oct 2016 08:43:35 +0000 (11:43 +0300)]
Enable proxy headers parsing for Aodh

http_proxy_to_wsgi middleware was recently added to Aodh [1] and
in order to take it into use, we need to enable it via hiera.

[1] If2ada8a94c8e1ceacd4509605b4cd766a78f71d5
Depends-On: I0981e152700ed4511b797011ebe18e857c1fed71
Related-Bug: #1590608

Change-Id: Ie9605ae1e5437f488802b03ca23a325866f0ceb5

8 years agoEnable proxy headers parsing for Gnocchi
Juan Antonio Osorio Robles [Thu, 13 Oct 2016 05:57:37 +0000 (08:57 +0300)]
Enable proxy headers parsing for Gnocchi

http_proxy_to_wsgi middleware was recently added to Gnocchi [1] and
in order to take it into use, we need to enable it via hiera.

[1] Ic5526cf37e70335fa2cc70946a271253f227f129
Related-Bug: #1590608

Change-Id: I145dcfa3455ca1541cbf6b5fc4b601f0813619c0

8 years agoMerge "Remove duplicate metadata keys from nova-api.yaml"
Jenkins [Thu, 13 Oct 2016 03:22:55 +0000 (03:22 +0000)]
Merge "Remove duplicate metadata keys from nova-api.yaml"

8 years agoMerge "Special case non-matching ObjectStorage role port names"
Jenkins [Wed, 12 Oct 2016 23:57:31 +0000 (23:57 +0000)]
Merge "Special case non-matching ObjectStorage role port names"

8 years agoDisable IPv6 RAs & Autoconf For All (Not Just Default)
Dan Sneddon [Wed, 12 Oct 2016 19:38:21 +0000 (12:38 -0700)]
Disable IPv6 RAs & Autoconf For All (Not Just Default)

The current kernel sysctl settings modify the
net.ipv6.conf.default.accept_ra and net.ipv6.conf.default.autoconf
to both be '0'. However, this is overridden by the settings in
net.ipv6.conf.all, so no matter what setting is in the ifcfg file
for the IPv6 interface, autoconfiguration and accept_ra will be
enabled. This causes a security vulnerability where rogue RAs
could be used to intercept traffic from the controllers.

This change sets both default and all settings to '0' for IPv6
accept_ra and autoconf.

Closes-Bug: 1632830
Change-Id: I95b86c5c6feed30dfa5103ffbddb9e85ac567bbb

8 years agoMerge "Allow Glance API and Registry to be split"
Jenkins [Wed, 12 Oct 2016 19:32:19 +0000 (19:32 +0000)]
Merge "Allow Glance API and Registry to be split"

8 years agoOnly set NovaWorkers in the non-default case
Dan Prince [Tue, 11 Oct 2016 16:09:43 +0000 (12:09 -0400)]
Only set NovaWorkers in the non-default case

This patch updates the t-h-t templates for
nova services so that we only set the value of workers in
the non-default case. TripleO has always defaulted the
workers count to 0 and there was recently a regression in
nova where they treat the default of 0 as invalid (a bug
that may get fixed in nova but we don't want to wait on it)

This patch avoids the issue by allowing the default value
to be unset if the TripleO default of 0 is configured.

Change-Id: I175977b88129d87caeb32332d47eb14816a6d5d4
Closes-bug: #1631133

8 years agoRemove duplicate metadata keys from nova-api.yaml
Dan Prince [Tue, 11 Oct 2016 15:38:38 +0000 (11:38 -0400)]
Remove duplicate metadata keys from nova-api.yaml

These keys are already specified in nova-metadata.yaml
where they get set correctly per the network management
local IP (based on 'service_name' list).

Depends-On: I94f985e719a3bf7408655fbbb5ab1aeaf15e994e

Change-Id: I5d57561b732783118efd2a637aa137f5f7bcddbc
Partial-bug: #1631133

8 years agoMerge "Add parameters to run nova over httpd"
Jenkins [Wed, 12 Oct 2016 16:42:24 +0000 (16:42 +0000)]
Merge "Add parameters to run nova over httpd"

8 years agoAdd contrail services to the resource registry
Carlos Camacho [Fri, 9 Sep 2016 19:36:40 +0000 (21:36 +0200)]
Add contrail services to the resource registry

Added contrail resource registry entries.

Implements: blueprint contrail-services

Change-Id: I03894bff63d54637ba1b10a279e2d75f97a06b3c

8 years agoSpecial case non-matching ObjectStorage role port names
Steven Hardy [Wed, 12 Oct 2016 10:50:23 +0000 (11:50 +0100)]
Special case non-matching ObjectStorage role port names

Unfortunately we use "SwiftStorage" in the ObjectStorage role
template, so we have to special-case this for backwards compatibility
or deployments enabling the ObjectStorage role will fail.

Ideally we'd align the port names in the objectstorage-role.yaml, but we
can't becauuse all the ports would be replaced in existing deployments
on update.

Change-Id: Ia07e193d2b9a4d33c6272c2b4448133584b81350
Closes-Bug: #1632663

8 years agoAllow Glance API and Registry to be split
Dan Prince [Wed, 28 Sep 2016 15:36:27 +0000 (11:36 -0400)]
Allow Glance API and Registry to be split

The glance-api and glance-registry services are currently coupled
in that some of the hiera settings in the API are required for
the registry to run correctly (the backend settings).

This patch moves some of the common settings into glance-base and
then updates the glance-api and glance-registry services to
supply that service.

Change-Id: Ie3d7e24c7fd475e3f6ad542c1654eb7dbd9d9b35
Closes-bug: #1628582

8 years agoMerge "Set the notification driver for glance"
Jenkins [Wed, 12 Oct 2016 06:58:27 +0000 (06:58 +0000)]
Merge "Set the notification driver for glance"

8 years agoMerge "Actually start the systemd services in step3 of the major-upgrade step"
Jenkins [Tue, 11 Oct 2016 11:38:21 +0000 (11:38 +0000)]
Merge "Actually start the systemd services in step3 of the major-upgrade step"

8 years agoEnable object versioning in Swift proxy
Christian Schwede [Mon, 10 Oct 2016 16:02:07 +0000 (18:02 +0200)]
Enable object versioning in Swift proxy

Tempest expects object versioning to be enabled by default in Swift;
if not it has to be disabled explicitly in the Tempest config.

This is a commonly used middleware, therefore it should be enabled
in the overcloud proxy nodes as well.

Closes-Bug: 1632215
Depends-On: I07a206473ff7939749e3eba1dfe3ea8c4526eb5c
Change-Id: I4eae08ff3f9a3a2f829c3497c1c2aaee8e7f8554

8 years agoMerge "Remove unneeded *_enable_backend hiera from Manila backends"
Jenkins [Mon, 10 Oct 2016 19:35:57 +0000 (19:35 +0000)]
Merge "Remove unneeded *_enable_backend hiera from Manila backends"

8 years agoActually start the systemd services in step3 of the major-upgrade step
Michele Baldessari [Mon, 10 Oct 2016 19:18:26 +0000 (21:18 +0200)]
Actually start the systemd services in step3 of the major-upgrade step

We have the following function in the upgrade process after we updated
the packages and called the db-sync commands:
services=$(services_to_migrate)
...
for service in $(services); do
    manage_systemd_service start "${service%%-clone}"
    check_resource_systemd "${service%%-clone}" started 600
done

The above is broken because $services contains a list of services to
start, so $(services) will return gibberish and the for loop will never
execute anything.

One of the symptoms for this is the openstack-nova-compute service not
restarting on the compute nodes during the yum -y upgrade. The reason
for this is that during the service restart, nova-compute waits for
nova-conductor to show up in the rabbitmq queues, which cannot happen
since the service was actually never started.

Change-Id: I811ff19d7b44a935b2ec5c5e66e5b5191b259eb3
Closes-Bug: #1630580

8 years agoFix default Swift ring partition power
Christian Schwede [Mon, 10 Oct 2016 11:42:22 +0000 (13:42 +0200)]
Fix default Swift ring partition power

Looks like swift::ringbuilder::part_power is not used at all; actually
the partition power on the overcloud is 18, which is the default in
puppet-swift if nothing else is defined.

Closes-Bug: 1631926
Depends-On: I78049105adf52226d47cc6764b1ba6c2c06e91e5
Change-Id: I65335c8d31ed1130e71f1e193eb519b9f7f2438e

8 years agoSet the notification driver for glance
Pradeep Kilambi [Mon, 10 Oct 2016 12:45:08 +0000 (08:45 -0400)]
Set the notification driver for glance

Need to set the right default notification driver for glance so
telemetry receives them accordingly. Without this tempest tests
fail.

Closes-bug: #1631939

Change-Id: I1cee5467d077eea6142076925646f7d0cdae96c7

8 years agoMerge "Add new environment for debug"
Jenkins [Mon, 10 Oct 2016 09:30:29 +0000 (09:30 +0000)]
Merge "Add new environment for debug"

8 years agoMerge "Make step an integer on the pacemaker controller"
Jenkins [Mon, 10 Oct 2016 09:06:44 +0000 (09:06 +0000)]
Merge "Make step an integer on the pacemaker controller"

8 years agoMerge "Add cloud names to hosts output"
Jenkins [Fri, 7 Oct 2016 19:49:46 +0000 (19:49 +0000)]
Merge "Add cloud names to hosts output"

8 years agoMake step an integer on the pacemaker controller
Dan Prince [Fri, 7 Oct 2016 19:12:58 +0000 (15:12 -0400)]
Make step an integer on the pacemaker controller

This resolves the issue causing the 'step' hiera setting
to get written as a string (thus causing puppet failures)
on a pacemaker controller.

Change-Id: I70037889e499846460357928f8637a35ac97bc7a
Closes-bug: #1631488

8 years agoAdd new environment for debug
Wes Hayutin [Fri, 7 Oct 2016 14:06:04 +0000 (10:06 -0400)]
Add new environment for debug

Introduce a new environment template that enables the Debug parameter.
By default the value is set to "true".

Change-Id: Ieac59de42ffef6afa5d8f10ef1925c32c7dc8551

8 years agoMerge "Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration"
Jenkins [Fri, 7 Oct 2016 17:04:12 +0000 (17:04 +0000)]
Merge "Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration"

8 years agoRemove unneeded *_enable_backend hiera from Manila backends
Giulio Fidente [Fri, 7 Oct 2016 10:33:50 +0000 (12:33 +0200)]
Remove unneeded *_enable_backend hiera from Manila backends

Depends-On: I04e28a95e8d69a24cd3df109bf1802bfcbd941db

Change-Id: I4ada033155e5fde0add08ec9aa8f6af7c31d53f3

8 years agoMerge "Ceilometer Wsgi Mitaka->Newton upgrades"
Jenkins [Fri, 7 Oct 2016 11:15:38 +0000 (11:15 +0000)]
Merge "Ceilometer Wsgi Mitaka->Newton upgrades"

8 years agoAdd cloud names to hosts output
Juan Antonio Osorio Robles [Thu, 6 Oct 2016 08:17:38 +0000 (11:17 +0300)]
Add cloud names to hosts output

Closes-Bug: #1631277
Change-Id: I126b3ed2afdf03ffabb7e57f8792b9f7ecc06a09

8 years agoMerge "Serialize AllNodesDeployment and UpdateWorkflow"
Jenkins [Fri, 7 Oct 2016 10:38:04 +0000 (10:38 +0000)]
Merge "Serialize AllNodesDeployment and UpdateWorkflow"

8 years agoCeilometer Wsgi Mitaka->Newton upgrades
Pradeep Kilambi [Wed, 24 Aug 2016 15:45:06 +0000 (11:45 -0400)]
Ceilometer Wsgi Mitaka->Newton upgrades

In Newton, ceilometer api is changed to run under apache wsgi
instead of eventlet. This will require upgrades for mitaka
deployments to switch to wsgi.

Closes-Bug: 1631297
Change-Id: If9d6987cd0a8fc5d3f9de518ba422d97d5149732

8 years agoSerialize AllNodesDeployment and UpdateWorkflow
Steven Hardy [Thu, 6 Oct 2016 18:15:29 +0000 (19:15 +0100)]
Serialize AllNodesDeployment and UpdateWorkflow

Otherwise there may be a race between updating the hiera
and running the UpdateWorkflow

Change-Id: I22cd893e0db3df6d39504fbd61d7d9024cebb1c5
Related-Bug: 1631297

8 years agoMerge "Specify the Ceph packages to be installed"
Jenkins [Fri, 7 Oct 2016 00:26:06 +0000 (00:26 +0000)]
Merge "Specify the Ceph packages to be installed"

8 years agoMerge "Add Select per-network hostnames for service_node_names to role.role.j2.yaml"
Jenkins [Thu, 6 Oct 2016 23:24:42 +0000 (23:24 +0000)]
Merge "Add Select per-network hostnames for service_node_names to role.role.j2.yaml"

8 years agoSpecify the Ceph packages to be installed
John Fulton [Wed, 5 Oct 2016 03:29:25 +0000 (23:29 -0400)]
Specify the Ceph packages to be installed

The puppet-ceph module defaults to 'ceph' but that is a metapacakge
which isn't provided in all repos.

Depends-On: I13462219522386f8740b0d70916a44f3474115e4
Change-Id: Ie55d22301dd22102d471e6002dfcaad4bfadd5f6
Related-Bug: 1629933