apex-tripleo-heat-templates.git
7 years agoMerge "Add DockerPuppetProcessCount defaults to 3" into stable/pike
Jenkins [Thu, 31 Aug 2017 00:24:53 +0000 (00:24 +0000)]
Merge "Add DockerPuppetProcessCount defaults to 3" into stable/pike

7 years agoMerge "Add missing Docker service" into stable/pike
Jenkins [Wed, 30 Aug 2017 23:46:50 +0000 (23:46 +0000)]
Merge "Add missing Docker service" into stable/pike

7 years agoMerge "Set docker-puppet --health-cmd = /bin/true" into stable/pike
Jenkins [Wed, 30 Aug 2017 21:34:57 +0000 (21:34 +0000)]
Merge "Set docker-puppet --health-cmd = /bin/true" into stable/pike

7 years agoMerge "container ovs-agent, ensure br-ex exists" into stable/pike
Jenkins [Wed, 30 Aug 2017 21:33:36 +0000 (21:33 +0000)]
Merge "container ovs-agent, ensure br-ex exists" into stable/pike

7 years agoMerge "Use integers for rabbitmq ports" into stable/pike
Jenkins [Wed, 30 Aug 2017 18:28:09 +0000 (18:28 +0000)]
Merge "Use integers for rabbitmq ports" into stable/pike

7 years agoMerge "Update UPPER_CONSTRAINTS_FILE for stable/pike" into stable/pike
Jenkins [Wed, 30 Aug 2017 15:04:04 +0000 (15:04 +0000)]
Merge "Update UPPER_CONSTRAINTS_FILE for stable/pike" into stable/pike

7 years agoMerge "Update .gitreview for stable/pike" into stable/pike
Jenkins [Wed, 30 Aug 2017 15:03:56 +0000 (15:03 +0000)]
Merge "Update .gitreview for stable/pike" into stable/pike

7 years agocontainer ovs-agent, ensure br-ex exists
Steve Baker [Mon, 14 Aug 2017 22:26:24 +0000 (10:26 +1200)]
container ovs-agent, ensure br-ex exists

Currently the container neutron-ovs-agent is stuck in a restart loop
in many environments because the bridge br-ex is missing.

This bridge is created by running the puppet class
neutron::agents::ml2::ovs but limiting that run to tag
neutron::plugins::ovs::bridge.

The hiera neutron::agents::ml2::ovs::bridge_mappings should already
exists to create the bridge with the required settings.

This change should ensure br-ex exists after step 3.

Since br-ex is created regardless of the chosen network config,
environments/docker-network.yaml is not longer required. It can be
deleted once there are no more references to it in CI and
documentation.

Change-Id: Ie425148b0ad0f38e149c5fa0a97d98ec35d0a5bb
Closes-Bug: #1699261
Closes-Bug: #1691403
Closes-Bug: #1689556
(cherry picked from commit 76f130d6e8f7434433b2602af9794f1e9c742e1f)

7 years agoUse integers for rabbitmq ports
Juan Antonio Osorio Robles [Tue, 29 Aug 2017 08:22:30 +0000 (08:22 +0000)]
Use integers for rabbitmq ports

They should be integers as specified in the parameter definition
of the class. Else it'll fail.

Change-Id: I06b6e46c0722516e28e8bff4d481fb4b7a08bd61
Closes-Bug: #1713659
(cherry picked from commit 4bea8cf918463c43c7d5f4e46984ab54271ea3e5)

7 years agoAdd missing Docker service
Alex Schultz [Tue, 29 Aug 2017 15:30:18 +0000 (09:30 -0600)]
Add missing Docker service

The example composable roles are missing the docker service declaration
so they currently do not work when trying to deploy with containerized
services.

Change-Id: I986ae561b950e74aacea10bce84673e8d0c9bd97
Closes-Bug: #1713755
(cherry picked from commit 50c975d1590930e6ce453942f99759a25ec08703)

7 years agoUse Python to compute release notes version
Emilien Macchi [Tue, 29 Aug 2017 17:20:36 +0000 (10:20 -0700)]
Use Python to compute release notes version

Leave the version fields blank, since the release notes document
applies to all versions.
That will avoid manual changes in the future like we did until now.

Change-Id: Ibb33ade808c9866b5314b7dda60a44000089a467
(cherry picked from commit 4782394044a8f66de63db7772b7a5992a781cc57)

7 years agoMerge "Support deploying OVN as container services" into stable/pike
Jenkins [Wed, 30 Aug 2017 12:05:32 +0000 (12:05 +0000)]
Merge "Support deploying OVN as container services" into stable/pike

7 years agoMerge "Make archive policy configurable" into stable/pike
Jenkins [Wed, 30 Aug 2017 10:33:56 +0000 (10:33 +0000)]
Merge "Make archive policy configurable" into stable/pike

7 years agoAdd DockerPuppetProcessCount defaults to 3
Dan Prince [Sat, 26 Aug 2017 03:01:24 +0000 (23:01 -0400)]
Add DockerPuppetProcessCount defaults to 3

docker-puppet.py is very aggressive about running concurrently.
It uses python multiprocessing to run multiple config generating
containers at once. This seems to work well in general, but
in some cases... perhaps when the registry is slow or under
heavy load can cause timeouts to occur. Lately I'm seeing
several 'container did not start before the specified timeout'
errors that always seem to occur when config files are generated
(docker-puppet.py is initially executed.

A couple of things:

 -when config files are generated this is the first time
  most of the containers are pulled to each host machine
  during deployment

 -docker-puppet.py runs many of these processes at once. Some
  of them run faster, other not.

 -docker daemon's pull limit defaults to 3. This would throttle
  the above a bit perhaps contributing the the likelyhood of a timeout.

One solution that seems to work for me is to set the PROCESS_COUNT
in docker-puppet.py to 3. As this matches docker daemon's default
it is probably safer at the cost of being slightly slower in some
cases.

Change-Id: I17feb3abd9d36fe7c95865a064502ce9902a074e
Closes-bug: #1713188
(cherry picked from commit 949d367ddeb42eff913cdbed733ccf6239b4864b)

7 years agoSet docker-puppet --health-cmd = /bin/true
Dan Prince [Sat, 26 Aug 2017 02:35:47 +0000 (22:35 -0400)]
Set docker-puppet --health-cmd = /bin/true

Change-Id: Idf627a348cad8d5287c82cb393367210f1c760cf
Closes-bug: #1713185
(cherry picked from commit 20e1f0e8c9a2bbc3734f6eec0ee9ac2d5156f166)

7 years agomanila: set "host" to "hostgroup"
Tom Barron [Thu, 24 Aug 2017 16:27:20 +0000 (12:27 -0400)]
manila: set "host" to "hostgroup"

when running manila-share under control of pacemaker, as
is done for cinder-volume service in the same circumstance.

Change-Id: Ic97f01913bae2a388c962a38fa175eb1d763cdcb
Depends-On: Ie31f2d5ccf458f5fcfe8bec5f2c37f45070cfde2
Closes-Bug: #1712842
(cherry picked from commit 8fa6c6e58c7ac0d32bf2f0dfb586683cf006e3bf)

7 years agoMerge "Enable ceilometer compute agent" into stable/pike
Jenkins [Tue, 29 Aug 2017 01:24:38 +0000 (01:24 +0000)]
Merge "Enable ceilometer compute agent" into stable/pike

7 years agoMerge "Handle failure of carrier check in configure_safe_defaults()" into stable...
Jenkins [Mon, 28 Aug 2017 19:01:51 +0000 (19:01 +0000)]
Merge "Handle failure of carrier check in configure_safe_defaults()" into stable/pike

7 years agoMerge "Add panko publisher in the event pipeline" into stable/pike
Jenkins [Mon, 28 Aug 2017 19:01:43 +0000 (19:01 +0000)]
Merge "Add panko publisher in the event pipeline" into stable/pike

7 years agoSupport deploying OVN as container services
Numan Siddique [Thu, 13 Jul 2017 15:16:45 +0000 (20:46 +0530)]
Support deploying OVN as container services

This patch adds the support to containerize OVN services for the
base profile.

OVN db servers do not support active-active mode yet. It does support
master-slave mode supported through pacemaker, which will be supported
in a later patch.

Presently the tripleo container framework doesn't allow to start a
container in only controller 0 (or bootstrap node). OVN db servers and
ovn-northd are started on all the controllers, but only the OVN db
servers running in the boot strap controller are configured to listen
on the tcp ports 6641 and 6642. OVN neutron mechanism driver
and ovn-controller's use the ovn_dbs_vip to connect to the OVN db servers.
Haproxy configures all the controllers as back ends, but only OVN db
servers running on controller 0 respond since only they are configured
properly.

The OVN containers running on other controller nodes do not interact
any way, but are wasteful resources.

This patch also adds the scenario007-multinode-containers CI template.

Partial-bug: #1699085
Change-Id: I98b85191cc1fd8c2b166924044d704e79a4c4c8a
(cherry picked from commit e7cd03d2f0fcd8e3069246ced94f1a83869b8bea)

7 years agoMake archive policy configurable
Pradeep Kilambi [Wed, 23 Aug 2017 14:34:46 +0000 (10:34 -0400)]
Make archive policy configurable

Change-Id: I603ce6922130fe32aa1a154df8146ee582bf1a45
(cherry picked from commit b1d7887ce710a98f061100e2878a54c06a5d09e2)

7 years agoHandle failure of carrier check in configure_safe_defaults()
Bob Fournier [Wed, 23 Aug 2017 21:15:34 +0000 (17:15 -0400)]
Handle failure of carrier check in configure_safe_defaults()

Configure_safe_defaults() should handle carrier check failures
in the same way as the change that was made to
dhcp-all-interfaces.sh in https://review.openstack.org/#/c/419527/.
That is, it should ignore failures when cat'ing the carrier file.

Change-Id: I100a40835d0ccecee9b4851aae6366c6ab4813a5
Closes-Bug: 1712687
(cherry picked from commit ed976d285caab1858f0b6e74e14a723113d27052)

7 years agoEnable ceilometer compute agent
Arx Cruz [Fri, 25 Aug 2017 11:13:24 +0000 (13:13 +0200)]
Enable ceilometer compute agent

This service isn't being started by default and it's required in order
to ceilometer collect data about cpu, which is required to run tempest
integration tests

Closes-Bug: #1713038
Change-Id: I79ba7744db78636fba78e041443148c91e06f940
(cherry picked from commit a2ce6d238cd7e72029fdd6e6364a0501f3bfc835)

7 years agoAdd panko publisher in the event pipeline
Pradeep Kilambi [Wed, 23 Aug 2017 14:18:13 +0000 (10:18 -0400)]
Add panko publisher in the event pipeline

Even though panko is deprecated, we still enable it by default.
So lets keep it in pipeline as well until its fully dead.

Change-Id: Idac89820a66c59b921551857cccae6dbc38241c3
(cherry picked from commit 3dbd5bfe86c2d6864c5678774fc7f910ab846300)

7 years agoContainarise Barbican API
Janki Chhatbar [Fri, 7 Jul 2017 06:20:28 +0000 (11:50 +0530)]
Containarise Barbican API

This containerises Barbican API in TripleO

Change-Id: Icc5e9841ea48c806af4db61cd6de5e9a7a40a988
Partial-Bug: 1668924
Depends-On: I6b5ec18ccdd51b90ff27ff7d4341260dfba71e4e
(cherry picked from commit 6d338b809accea4d3ba09ca8363b1a97ed79b658)

7 years agoUpdate UPPER_CONSTRAINTS_FILE for stable/pike
OpenStack Release Bot [Thu, 24 Aug 2017 21:05:08 +0000 (21:05 +0000)]
Update UPPER_CONSTRAINTS_FILE for stable/pike

Change-Id: If1376a7d802d79c2b7533c8f315f47c21f896476

7 years agoUpdate .gitreview for stable/pike
OpenStack Release Bot [Thu, 24 Aug 2017 21:05:07 +0000 (21:05 +0000)]
Update .gitreview for stable/pike

Change-Id: I62443317bb2a7fbe84f6bb2aa769053b66edb022

7 years agoMerge "Remove baremetal cron jobs on docker upgrade"
Jenkins [Thu, 24 Aug 2017 18:08:52 +0000 (18:08 +0000)]
Merge "Remove baremetal cron jobs on docker upgrade"

7 years agoMerge "Docker: Enable TLS in the internal network for libvirt"
Jenkins [Thu, 24 Aug 2017 17:56:50 +0000 (17:56 +0000)]
Merge "Docker: Enable TLS in the internal network for libvirt"

7 years agoMerge "Specify the start count to 0 for the update step loop"
Jenkins [Thu, 24 Aug 2017 10:42:38 +0000 (10:42 +0000)]
Merge "Specify the start count to 0 for the update step loop"

7 years agoMerge "Do not install additional CentOS packages via ceph-ansible"
Jenkins [Thu, 24 Aug 2017 03:54:01 +0000 (03:54 +0000)]
Merge "Do not install additional CentOS packages via ceph-ansible"

7 years agoMerge "More fixes for the Ceph docker images url parsing"
Jenkins [Wed, 23 Aug 2017 23:24:58 +0000 (23:24 +0000)]
Merge "More fixes for the Ceph docker images url parsing"

7 years agoMerge "Configure listen_address for libvirtd when TLS is enabled"
Jenkins [Wed, 23 Aug 2017 20:40:30 +0000 (20:40 +0000)]
Merge "Configure listen_address for libvirtd when TLS is enabled"

7 years agoDo not install additional CentOS packages via ceph-ansible
Giulio Fidente [Wed, 23 Aug 2017 15:52:05 +0000 (17:52 +0200)]
Do not install additional CentOS packages via ceph-ansible

EPEL is required by the Ceph RPM repo maintained at ceph.com but
not by the CentOS SIG repo. The other packages should be already
installed in the infra image.

This change overrides the list of required packages in ceph-ansible
so that it does not install epel-release nor additional unneeded
packages [1].

1. https://github.com/ceph/ceph-ansible/blob/master/group_vars/all.yml.sample#L67

Change-Id: I7b6d2794ebfc0df5b3d5ad9de1d1d55740a38ae0
Closes-Bug: #1712599

7 years agoMerge "docker: Stop all active ceilometer services during compute upgrade"
Jenkins [Wed, 23 Aug 2017 17:15:44 +0000 (17:15 +0000)]
Merge "docker: Stop all active ceilometer services during compute upgrade"

7 years agoSpecify the start count to 0 for the update step loop
Mathieu Bultel [Tue, 22 Aug 2017 20:14:56 +0000 (22:14 +0200)]
Specify the start count to 0 for the update step loop

Force the count start to 0 to ensure that the
update step loop will start to 0 and execute the
update step0

Closes-Bug: #1712498

Change-Id: I71be55c1f56e53e5c565bec281795d63e5845ff6

7 years agoConfigure listen_address for libvirtd when TLS is enabled
Juan Antonio Osorio Robles [Wed, 23 Aug 2017 05:24:32 +0000 (08:24 +0300)]
Configure listen_address for libvirtd when TLS is enabled

It wasn't being configured, and the default is to listen on all
interfaces. This fixes that.

Change-Id: I00da25474fb1544eabdedaf126e67d5a6617f02f
Closes-Bug: #1712475

7 years agoDocker: Enable TLS in the internal network for libvirt
Juan Antonio Osorio Robles [Tue, 22 Aug 2017 18:19:23 +0000 (18:19 +0000)]
Docker: Enable TLS in the internal network for libvirt

Bind mounts the necessary certs and keys to enable live migrations
using TLS.

bp tls-via-certmonger-containers

Depends-On: I26a7748b37059ea37f460d8c70ef684cc41b16d3
Change-Id: I81efa85d916823f740bf320c88a248403743a45b

7 years agoMerge "Accept multiple registries in DockerInsecureRegistryAddress"
Jenkins [Wed, 23 Aug 2017 01:20:29 +0000 (01:20 +0000)]
Merge "Accept multiple registries in DockerInsecureRegistryAddress"

7 years agoMerge "Add Ceilometer API and Collector service to roles_data"
Jenkins [Wed, 23 Aug 2017 00:10:37 +0000 (00:10 +0000)]
Merge "Add Ceilometer API and Collector service to roles_data"

7 years agoMerge "Render port templates via j2"
Jenkins [Tue, 22 Aug 2017 18:31:58 +0000 (18:31 +0000)]
Merge "Render port templates via j2"

7 years agoMerge "Zaqar: Match service name with service-net-map"
Jenkins [Tue, 22 Aug 2017 18:31:51 +0000 (18:31 +0000)]
Merge "Zaqar: Match service name with service-net-map"

7 years agoMerge "Fix configuration files path for logrotate container"
Jenkins [Tue, 22 Aug 2017 16:17:18 +0000 (16:17 +0000)]
Merge "Fix configuration files path for logrotate container"

7 years agoZaqar: Match service name with service-net-map
Juan Antonio Osorio Robles [Tue, 22 Aug 2017 12:06:30 +0000 (12:06 +0000)]
Zaqar: Match service name with service-net-map

This is required for t-h-t to generate the appropriate hieradata.

Change-Id: I9b451eac4427a52ad8eec62ff89acc6c6d3ab799
Closes-Bug: #1712328

7 years agoMerge "Add nova metadata to TLS everywhere/docker services list"
Jenkins [Tue, 22 Aug 2017 11:50:51 +0000 (11:50 +0000)]
Merge "Add nova metadata to TLS everywhere/docker services list"

7 years agoMerge "change sriovnicswitch to be first with openvswitch"
Jenkins [Tue, 22 Aug 2017 10:27:44 +0000 (10:27 +0000)]
Merge "change sriovnicswitch to be first with openvswitch"

7 years agoFix configuration files path for logrotate container
Martin André [Tue, 22 Aug 2017 09:55:19 +0000 (11:55 +0200)]
Fix configuration files path for logrotate container

The config_volume is named 'crond', and so must me the path to
puppet-generated directory.

Change-Id: I13b4ad7642ddf3bc5d1f4aa979b4a91a89605fb1
Closes-Bug: #1712300

7 years agoMerge "TLS everywhere/haproxy: Remove empty postsave command"
Jenkins [Mon, 21 Aug 2017 18:55:35 +0000 (18:55 +0000)]
Merge "TLS everywhere/haproxy: Remove empty postsave command"

7 years agoRender port templates via j2
Steven Hardy [Fri, 18 Aug 2017 15:48:05 +0000 (16:48 +0100)]
Render port templates via j2

Remove these from the j2 excludes and instead render all the networks
to avoid duplication.

Change-Id: Id8e14e06ffe959c50456b4c88fef306046a8b478
Partially-Implements: blueprint composable-networks

7 years agoMerge "Add logrotate with crond service"
Jenkins [Mon, 21 Aug 2017 18:04:02 +0000 (18:04 +0000)]
Merge "Add logrotate with crond service"

7 years agoMerge "Let mds create manila key and fs"
Jenkins [Mon, 21 Aug 2017 17:22:50 +0000 (17:22 +0000)]
Merge "Let mds create manila key and fs"

7 years agoAdd nova metadata to TLS everywhere/docker services list
Juan Antonio Osorio Robles [Mon, 21 Aug 2017 16:11:27 +0000 (16:11 +0000)]
Add nova metadata to TLS everywhere/docker services list

This is working, so we add it to the list.

bp tls-via-certmonger-containers

Change-Id: Ib545d4e6c130b73b4921eb9b6325d2e8d6ff1e2c

7 years agoTLS for containerized horizon
Juan Antonio Osorio Robles [Fri, 18 Aug 2017 05:42:59 +0000 (05:42 +0000)]
TLS for containerized horizon

bind mount the certificates needed for TLS.

bp tls-via-certmonger-containers

Change-Id: Ib9b533249be37665b77396a76133cc42fd15ee2b

7 years agoMerge "Enable TLS for containerized RabbitMQ"
Jenkins [Mon, 21 Aug 2017 11:49:28 +0000 (11:49 +0000)]
Merge "Enable TLS for containerized RabbitMQ"

7 years agoAdd logrotate with crond service
Bogdan Dobrelya [Wed, 2 Aug 2017 12:48:26 +0000 (14:48 +0200)]
Add logrotate with crond service

Add a docker service template to provide containerized services
logs rotation with a crond job.
Add OS::TripleO::Services::LogrotateCrond to CI multinode-containers
and to all environments among with generic services like Ntp or Kernel.
Set it to OS::Heat::None for non containerized environments and
only enable it to the environments/docker.yaml.

Closes-bug: #1700912

Change-Id: Ic94373f0a0758e9959e1f896481780674437147d
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
7 years agoMerge "Add certmonger user profile to all overcloud roles"
Jenkins [Sat, 19 Aug 2017 08:47:15 +0000 (08:47 +0000)]
Merge "Add certmonger user profile to all overcloud roles"

7 years agoMerge "Mount ceph config on gnocchi statsd"
Jenkins [Sat, 19 Aug 2017 05:38:03 +0000 (05:38 +0000)]
Merge "Mount ceph config on gnocchi statsd"

7 years agoMerge "Swith to the appropriate ceph-ansible playbook on upgrade"
Jenkins [Sat, 19 Aug 2017 05:37:50 +0000 (05:37 +0000)]
Merge "Swith to the appropriate ceph-ansible playbook on upgrade"

7 years agoMerge "Extend VNC port range"
Jenkins [Sat, 19 Aug 2017 05:19:14 +0000 (05:19 +0000)]
Merge "Extend VNC port range"

7 years agoMerge "Prepare reno for TripleO Pike RC1"
Jenkins [Sat, 19 Aug 2017 03:14:49 +0000 (03:14 +0000)]
Merge "Prepare reno for TripleO Pike RC1"

7 years agoMerge "Convert scenario001-multinode-containers job to ceph-ansible"
Jenkins [Sat, 19 Aug 2017 03:14:19 +0000 (03:14 +0000)]
Merge "Convert scenario001-multinode-containers job to ceph-ansible"

7 years agoMerge "ci: don't deploy swift on basic multinode job"
Jenkins [Sat, 19 Aug 2017 03:14:05 +0000 (03:14 +0000)]
Merge "ci: don't deploy swift on basic multinode job"

7 years agoMerge "Enable TLS for nova-metadata"
Jenkins [Sat, 19 Aug 2017 03:13:49 +0000 (03:13 +0000)]
Merge "Enable TLS for nova-metadata"

7 years agoMerge "Add params needed for the ceph-ansible switch to containers playbook"
Jenkins [Sat, 19 Aug 2017 03:13:28 +0000 (03:13 +0000)]
Merge "Add params needed for the ceph-ansible switch to containers playbook"

7 years agoMerge "Tag the ha containers with 'pcmklatest' at deploy time"
Jenkins [Sat, 19 Aug 2017 03:07:10 +0000 (03:07 +0000)]
Merge "Tag the ha containers with 'pcmklatest' at deploy time"

7 years agoMerge "Add support for Dell EMC Unity Cinder backend"
Jenkins [Sat, 19 Aug 2017 00:10:52 +0000 (00:10 +0000)]
Merge "Add support for Dell EMC Unity Cinder backend"

7 years agoMerge "scenario002/multinode: do not run containerized Zaqar"
Jenkins [Fri, 18 Aug 2017 23:48:48 +0000 (23:48 +0000)]
Merge "scenario002/multinode: do not run containerized Zaqar"

7 years agoMerge "scenario002/container: run Barbican non-containerized"
Jenkins [Fri, 18 Aug 2017 23:37:28 +0000 (23:37 +0000)]
Merge "scenario002/container: run Barbican non-containerized"

7 years agoMerge "Workaround for RHEL registration as "localhost""
Jenkins [Fri, 18 Aug 2017 23:14:50 +0000 (23:14 +0000)]
Merge "Workaround for RHEL registration as "localhost""

7 years agoMount ceph config on gnocchi statsd
Pradeep Kilambi [Thu, 17 Aug 2017 16:31:52 +0000 (12:31 -0400)]
Mount ceph config on gnocchi statsd

gnocchi-statsd needs access to ceph config. lets mount the
ceph config files so it doesnt throw conf_read_file errors.

Change-Id: I1426d580c8d8d60e986ca859f89eeb8799ab6bd2

7 years agoPrepare reno for TripleO Pike RC1
Emilien Macchi [Fri, 18 Aug 2017 16:49:45 +0000 (09:49 -0700)]
Prepare reno for TripleO Pike RC1

Change-Id: Ied1d57cd187ffe480912a3820587952aa88936c3

7 years agoMerge "Also write an upgrade_tasks_playbook"
Jenkins [Fri, 18 Aug 2017 16:01:03 +0000 (16:01 +0000)]
Merge "Also write an upgrade_tasks_playbook"

7 years agoMore fixes for the Ceph docker images url parsing
Giulio Fidente [Fri, 18 Aug 2017 16:01:02 +0000 (18:01 +0200)]
More fixes for the Ceph docker images url parsing

Existing code was still failing the following scenario:

  http://192.168.24.1:8787/ceph/rhceph-2-rhel7:latest

Now this has been tested with the following variations:

  http://192.168.24.1:8787/ceph/rhceph-2-rhel7:latest
  http://192.168.24.1:8787/rhceph-2-rhel7:latest
  192.168.24.1:8787/ceph/rhceph-2-rhel7:latest
  192.168.24.1:8787/rhceph-2-rhel7:latest
  192.168.24.1/ceph/daemon:latest

And then the same list without the custom registry host.

Change-Id: Ifc871de8c2678f6a6fc5d234bfb62e8273c1b0b7

7 years agoMerge "Enable listening on TLS for the internal network for horizon"
Jenkins [Fri, 18 Aug 2017 15:25:44 +0000 (15:25 +0000)]
Merge "Enable listening on TLS for the internal network for horizon"

7 years agoci: don't deploy swift on basic multinode job
Emilien Macchi [Fri, 18 Aug 2017 15:11:12 +0000 (08:11 -0700)]
ci: don't deploy swift on basic multinode job

Swift is already deployed on scenario002, and we want to keep
basic multinode as basic as possible with only the minimum so it runs
faster and we can use it for early tests in our CI.

Change-Id: I6d2f434305d7ca0d704a9454b758670c39a0af4a

7 years agoMerge "Restore and split nova metadata docker service out of nova-api."
Jenkins [Fri, 18 Aug 2017 14:23:28 +0000 (14:23 +0000)]
Merge "Restore and split nova metadata docker service out of nova-api."

7 years agoLet mds create manila key and fs
Jan Provaznik [Tue, 11 Jul 2017 10:10:45 +0000 (12:10 +0200)]
Let mds create manila key and fs

ceph-ansible will take care of setting up client keys both
in ceph and on client side. It will also create filesystem
for manila. To assure that manila manifest can work in future
both with puppet and with ceph-ansible, creation of filesystem
is moved to ceph-mds manifest and creation of manila key on ceph
side is moved to ceph-base (so manila key is always created),
manila key is added to ceph-external for external ceph deployments.
Key creation is removed from manila.pp in patch
I2b5567a39ac8737e80758b705818cc1807dc8bf1

Change-Id: I6308a317ffe0af244396aba5197c85e273e69f68
Related-To: Ia3ef9e9a2b159dacea01e38762145ff2bcc7ba27
Depends-On: I3f18bbe476c4f43fa4e162cc66c5df443122cd0c

7 years agoMerge "TLS everywhere/docker: add nova services to environment"
Jenkins [Fri, 18 Aug 2017 14:21:44 +0000 (14:21 +0000)]
Merge "TLS everywhere/docker: add nova services to environment"

7 years agoTag the ha containers with 'pcmklatest' at deploy time
Michele Baldessari [Tue, 8 Aug 2017 07:46:26 +0000 (09:46 +0200)]
Tag the ha containers with 'pcmklatest' at deploy time

We need to tag the HA containers with a special tag so
that the RA definition never changes. We do this step in THT
as opposed to puppet because we need to guarantee
that all images are tagged on all nodes *before* step 2 where the bundle
gets created.

NB: Getting the image name without the tag will require some more
yaql work to get all the cases right. Right now this works only
if we enforce that the image has a ':tag' at the end of the name.
So far this is always the case. If things change we will need to
amend this code.

Co-Authored-By: Damien Ciabrini <dciabrin@redhat.com>
Co-Authored-By: Sofer Athlan-Guyot <sathlang@redhat.com>
Change-Id: I362e6cf26fba77d3f949b7d2fc4b35a3eab9087e

7 years agoEnable TLS for containerized RabbitMQ
Juan Antonio Osorio Robles [Mon, 14 Aug 2017 16:13:50 +0000 (16:13 +0000)]
Enable TLS for containerized RabbitMQ

Bind mounts and adds the appropriate permissions for the cert and
key that's used for TLS.

bp tls-via-certmonger-containers

Depends-On: I62ff89362cfcc80e6e62fad09110918c36802813
Change-Id: I48325893a00690e2f5d6f1d685f903234545d5b8

7 years agoTLS everywhere/haproxy: Remove empty postsave command
Juan Antonio Osorio Robles [Fri, 18 Aug 2017 12:07:12 +0000 (15:07 +0300)]
TLS everywhere/haproxy: Remove empty postsave command

This is addressed by the patch this depends on.

bp tls-via-certmonger
Depends-On: I62ff89362cfcc80e6e62fad09110918c36802813

Change-Id: Ibecc461b0c9af02500f590a1f7469d7e4ff20d95

7 years agoConvert scenario001-multinode-containers job to ceph-ansible
Giulio Fidente [Tue, 18 Jul 2017 21:31:18 +0000 (23:31 +0200)]
Convert scenario001-multinode-containers job to ceph-ansible

Updates ci/environments/scenario001-multinode-containers.yaml
to use ceph-ansible instead of puppet-ceph.

Change-Id: Idbd02a3c7404daecdc6e2c45ea6d3478bf70552c
Depends-On: Ifa4937624ed14a3ece48dd92ba4f69b5e4928e77

7 years agoMerge "Refactor setup_docker_host.sh as host_prep_tasks"
Jenkins [Fri, 18 Aug 2017 09:17:15 +0000 (09:17 +0000)]
Merge "Refactor setup_docker_host.sh as host_prep_tasks"

7 years agoMerge "Provide sample environment for composable roles"
Jenkins [Fri, 18 Aug 2017 07:43:47 +0000 (07:43 +0000)]
Merge "Provide sample environment for composable roles"

7 years agoMerge "Containerize Manila Share for HA"
Jenkins [Fri, 18 Aug 2017 07:39:02 +0000 (07:39 +0000)]
Merge "Containerize Manila Share for HA"

7 years agoEnable listening on TLS for the internal network for horizon
Juan Antonio Osorio Robles [Tue, 1 Aug 2017 13:10:27 +0000 (16:10 +0300)]
Enable listening on TLS for the internal network for horizon

This sets the flag that tells the horizon manifest to use TLS for the
configuration.

bp tls-via-certmonger

Depends-On: I7f2e11eb60c7b075e8a59f28682ecc50eeb95c3e
Change-Id: I13d59e7663538884b34b5a910b741de8721abbb9

7 years agoMerge "Add support for installing Ceph MDS via ceph-ansible"
Jenkins [Fri, 18 Aug 2017 02:50:50 +0000 (02:50 +0000)]
Merge "Add support for installing Ceph MDS via ceph-ansible"

7 years agoMerge "Make cinder-manage db sync run on only one controller during upgrade"
Jenkins [Fri, 18 Aug 2017 02:23:17 +0000 (02:23 +0000)]
Merge "Make cinder-manage db sync run on only one controller during upgrade"

7 years agoMerge "Remove iscsid from TLS everywhere docker environment"
Jenkins [Fri, 18 Aug 2017 01:28:19 +0000 (01:28 +0000)]
Merge "Remove iscsid from TLS everywhere docker environment"

7 years agoRestore and split nova metadata docker service out of nova-api.
Oliver Walsh [Thu, 17 Aug 2017 21:47:21 +0000 (22:47 +0100)]
Restore and split nova metadata docker service out of nova-api.

I2c39a2957fd95dd261b5b8c4df5e66e00a68d2f7 changed nova api to http from
eventlet, however we need to continue running the eventlet service as
it is required for the nova metadata api.

However this should be tied to the OS::TripleO::Services::NovaMetadata
service, so duplicate the required config in nova-metadata.yaml.

Change-Id: I398575d565d5527bcaa1c8b33b9de2e1e0f2f6fd
Depends-On: Id3407e151566d16c6ae1e1ea8c1b021dac22e727
Closes-bug: #1711425

7 years agoMerge "Mount NFS volume to docker container."
Jenkins [Thu, 17 Aug 2017 19:10:04 +0000 (19:10 +0000)]
Merge "Mount NFS volume to docker container."

7 years agoMerge "Enable TLS configuration for containerized RabbitMQ"
Jenkins [Thu, 17 Aug 2017 18:46:42 +0000 (18:46 +0000)]
Merge "Enable TLS configuration for containerized RabbitMQ"

7 years agoWorkaround for RHEL registration as "localhost"
James Slagle [Thu, 17 Aug 2017 18:27:30 +0000 (14:27 -0400)]
Workaround for RHEL registration as "localhost"

Workaround systems getting registered as "localhost" during
RHEL registration if they don't have a fqdn set by first
rm'ing the /etc/rhsm/facts directory. When the directory does not
exist, the katello-rshm-consumer which runs when installing
the katello-ca-consumer will not set the hostname.override fact to
"localhost".

Change-Id: Ia29aa9c775f715f9745bb7e1e4022cc395a7d092
Partial-Bug: #1711435

7 years agoEnable TLS for nova-metadata
Juan Antonio Osorio Robles [Thu, 17 Aug 2017 17:30:57 +0000 (17:30 +0000)]
Enable TLS for nova-metadata

This also tells the neutron metadata agent to use TLS for contacting
nova-metadata.

bp tls-via-certmonger
Depends-On: I97ac2da29be468c75713fe2fae7e6d84cae8f67c
Depends-On: I9df395dc699090bd73265d10395e155e9b8adb26

Change-Id: I9a8c54f6e052852b8f9d06a42da87773f4da3a15

7 years agoAdd certmonger user profile to all overcloud roles
Juan Antonio Osorio Robles [Thu, 17 Aug 2017 17:40:19 +0000 (20:40 +0300)]
Add certmonger user profile to all overcloud roles

This is needed for TLS everywhere, else the certs won't be requested.

Change-Id: I9849e009843683a75fefa6e9f4b8213bcff3a889
Closes-Bug: #1711424

7 years agoAdd Ceilometer API and Collector service to roles_data
Pradeep Kilambi [Thu, 17 Aug 2017 14:47:08 +0000 (10:47 -0400)]
Add Ceilometer API and Collector service to roles_data

Ceilometer api and collector are disabled in pike. During upgrade case,
if its not in the roles_data the disable task doesnt get picked
up and continue to run. This should be removed in Queen cycle.

Change-Id: I3bf555ac9488fc6622e6a62a809150082a85ea54

7 years agoMerge "Enable TLS for containerized MySQL"
Jenkins [Thu, 17 Aug 2017 16:08:31 +0000 (16:08 +0000)]
Merge "Enable TLS for containerized MySQL"

7 years agoMerge "Enable TLS for containerized haproxy"
Jenkins [Thu, 17 Aug 2017 16:08:20 +0000 (16:08 +0000)]
Merge "Enable TLS for containerized haproxy"

7 years agoMerge "Render IP map and host maps according to network_data.yaml"
Jenkins [Thu, 17 Aug 2017 15:51:00 +0000 (15:51 +0000)]
Merge "Render IP map and host maps according to network_data.yaml"

7 years agoMerge "Enable TLS configuration for containerized HAProxy"
Jenkins [Thu, 17 Aug 2017 15:48:44 +0000 (15:48 +0000)]
Merge "Enable TLS configuration for containerized HAProxy"