Browse Source

Retire instack-undercloud

instack-undercloud is no longer in use by the TripleO project. Removing
the code to avoid confusion. Stable branches will continue to be
maintained for their life however no new features should be added.

Change-Id: I63a813c7c1ffd30ca30017133d31a497b77a9a4d
Blueprint: remove-instack-undercloud
Alex Schultz 6 months ago
parent
commit
87abe05ba0
100 changed files with 6 additions and 7942 deletions
  1. 0
    7
      .coveragerc
  2. 0
    54
      .gitignore
  3. 1
    0
      .gitreview
  4. 0
    4
      .testr.conf
  5. 0
    22
      Gemfile
  6. 0
    175
      LICENSE
  7. 0
    18
      README.md
  8. 5
    0
      README.rst
  9. 0
    6
      Rakefile
  10. 0
    2
      bindep.txt
  11. 0
    3
      config-generator/undercloud.conf
  12. 0
    4
      doc/source/api/index.rst
  13. 0
    8
      doc/source/api/undercloud.rst
  14. 0
    278
      doc/source/conf.py
  15. 0
    24
      doc/source/index.rst
  16. 0
    4
      elements/centos-cr/README.rst
  17. 0
    9
      elements/centos-cr/pre-install.d/00-enable-cr-repo
  18. 0
    9
      elements/instack-vm/README.md
  19. 0
    3
      elements/instack-vm/element-deps
  20. 0
    18
      elements/instack-vm/extra-data.d/50-add-instack-files
  21. 0
    10
      elements/instack-vm/install.d/50-ip-forward
  22. 0
    19
      elements/instack-vm/install.d/51-instack-files
  23. 0
    3
      elements/instack-vm/package-installs.yaml
  24. 0
    6
      elements/instack-vm/post-install.d/90-remove-cloud-init
  25. 0
    7
      elements/instack-vm/post-install.d/90-set-hostname
  26. 0
    13
      elements/overcloud-full/README.rst
  27. 0
    7
      elements/overcloud-full/install.d/50-persistent-journal
  28. 0
    2
      elements/overcloud-full/package-installs.yaml
  29. 0
    6
      elements/overcloud-full/post-install.d/50-remove-libvirt-default-net
  30. 0
    4
      elements/pip-and-virtualenv-override/README.md
  31. 0
    1
      elements/pip-and-virtualenv-override/element-provides
  32. 0
    9
      elements/puppet-stack-config/README.rst
  33. 0
    2
      elements/puppet-stack-config/element-deps
  34. 0
    5
      elements/puppet-stack-config/extra-data.d/10-install-git
  35. 0
    58
      elements/puppet-stack-config/install.d/02-puppet-stack-config
  36. 0
    7
      elements/puppet-stack-config/install.d/10-puppet-stack-config-puppet-module
  37. 0
    1
      elements/puppet-stack-config/os-apply-config/etc/puppet/hieradata/CentOS.yaml
  38. 0
    22
      elements/puppet-stack-config/os-apply-config/etc/puppet/hieradata/RedHat.yaml
  39. 0
    19
      elements/puppet-stack-config/os-refresh-config/configure.d/50-puppet-stack-config
  40. 0
    7
      elements/puppet-stack-config/os-refresh-config/post-configure.d/10-iptables
  41. 0
    2
      elements/puppet-stack-config/package-installs.yaml
  42. 0
    729
      elements/puppet-stack-config/puppet-stack-config.pp
  43. 0
    1049
      elements/puppet-stack-config/puppet-stack-config.yaml.template
  44. 0
    1
      elements/undercloud-install/element-provides
  45. 0
    3
      elements/undercloud-install/os-apply-config/etc/os-net-config/config.json
  46. 0
    46
      elements/undercloud-install/os-apply-config/root/stackrc
  47. 0
    1
      elements/undercloud-install/os-apply-config/root/stackrc.oac
  48. 0
    24
      elements/undercloud-install/os-apply-config/root/tripleo-undercloud-passwords
  49. 0
    1
      elements/undercloud-install/os-apply-config/root/tripleo-undercloud-passwords.oac
  50. 0
    29
      elements/undercloud-install/os-apply-config/var/opt/undercloud-stack/masquerade
  51. 0
    11
      elements/undercloud-install/os-refresh-config/configure.d/30-reload-keepalived
  52. 0
    41
      elements/undercloud-install/os-refresh-config/post-configure.d/80-seedstack-masquerade
  53. 0
    44
      elements/undercloud-install/os-refresh-config/post-configure.d/98-undercloud-setup
  54. 0
    66
      imagefactory/Makefile
  55. 0
    12
      imagefactory/dib_deploy_ramdisk_ironic.tdl
  56. 0
    12
      imagefactory/dib_discovery_ramdisk.tdl
  57. 0
    12
      imagefactory/dib_overcloud_cinder_volume.tdl
  58. 0
    12
      imagefactory/dib_overcloud_compute.tdl
  59. 0
    12
      imagefactory/dib_overcloud_control.tdl
  60. 0
    12
      imagefactory/dib_overcloud_swift_storage.tdl
  61. 0
    26
      imagefactory/input_image.ks
  62. 0
    12
      imagefactory/input_image.tdl
  63. 0
    41
      imagefactory/utility_image.ks
  64. 0
    15
      imagefactory/utility_image.tdl
  65. 0
    18
      instack_undercloud/__init__.py
  66. 0
    0
      instack_undercloud/tests/__init__.py
  67. 0
    1635
      instack_undercloud/tests/test_undercloud.py
  68. 0
    274
      instack_undercloud/tests/test_validator.py
  69. 0
    2405
      instack_undercloud/undercloud.py
  70. 0
    211
      instack_undercloud/validator.py
  71. 0
    35
      json-files/centos-7-undercloud-packages.json
  72. 0
    35
      json-files/rhel-7-undercloud-packages.json
  73. 0
    84
      lower-constraints.txt
  74. 0
    25
      releasenotes/notes/6.0.0-7413b6a7cecc00b6.yaml
  75. 0
    4
      releasenotes/notes/Configure-auth-and-authtoken-for-novajoin-0cadd15e79b54c47.yaml
  76. 0
    5
      releasenotes/notes/TLS-by-default-bc12660c12ba7ab1.yaml
  77. 0
    5
      releasenotes/notes/add-additional-endpoints-96cb28a13c79e9d9.yaml
  78. 0
    5
      releasenotes/notes/add-certificate-ekus-13e92513c562f0dc.yaml
  79. 0
    4
      releasenotes/notes/add-gnocchi-event-dispatcher-d70df046292e333e.yaml
  80. 0
    4
      releasenotes/notes/add-os-auth-type-5ed9338e73e0e172.yaml
  81. 0
    6
      releasenotes/notes/add-variables-for-ironic-inspector-proxy-5fd349c75e3c054a.yaml
  82. 0
    9
      releasenotes/notes/ansible-deploy-a257e06fddb7001f.yaml
  83. 0
    6
      releasenotes/notes/change-cert-precedence-e1926868d137aa1d.yaml
  84. 0
    12
      releasenotes/notes/change-default-nonssl-undercloud-ports-34e60f87f3eb7ad6.yaml
  85. 0
    7
      releasenotes/notes/configurable-clients-endpoint_type-fc658f7ae935133f.yaml
  86. 0
    6
      releasenotes/notes/create-heat-cfn-endpoint-c7c00e3b61a98b5e.yaml
  87. 0
    3
      releasenotes/notes/deprecate-instack-virt-setup-0e76669d1e068408.yaml
  88. 0
    4
      releasenotes/notes/deprecate_auth_uri_parameter-545d2c29c84c7c64.yaml
  89. 0
    5
      releasenotes/notes/deprecate_instack-083e17fb09f07fa0.yaml
  90. 0
    6
      releasenotes/notes/disable-ceilometer-api-14b270afc22d75c1.yaml
  91. 0
    6
      releasenotes/notes/disable-ceilometer-collector-64bbcbe58b122721.yaml
  92. 0
    10
      releasenotes/notes/disable-telemetry-by-default-d596b78fc08df1a9.yaml
  93. 0
    11
      releasenotes/notes/disallow-ip-changes-bde0e2528544c71b.yaml
  94. 0
    6
      releasenotes/notes/dnsmask-pxe-filter-start-stop-commands-c1f71c6f38f27c78.yaml
  95. 0
    6
      releasenotes/notes/docker_registry_mirror-41c5a17eec6133f2.yaml
  96. 0
    6
      releasenotes/notes/domain_params-63ef884e1ee154c0.yaml
  97. 0
    5
      releasenotes/notes/drop-ceilometer-collector-c47d9aa6d47efedf.yaml
  98. 0
    5
      releasenotes/notes/drop-legacy-ceilometer-api-b4b3540353f24905.yaml
  99. 0
    5
      releasenotes/notes/enable-cinder-description-c53f8dc3a61e27c1.yaml
  100. 0
    0
      releasenotes/notes/fix-mistral-error-handling-58010a43f53ded5e.yaml

+ 0
- 7
.coveragerc View File

@@ -1,7 +0,0 @@
1
-[run]
2
-branch = True
3
-source = instack_undercloud
4
-omit = instack_undercloud/tests/*
5
-
6
-[report]
7
-ignore_errors = True

+ 0
- 54
.gitignore View File

@@ -1,54 +0,0 @@
1
-*.py[cod]
2
-*.sw[op]
3
-
4
-# C extensions
5
-*.so
6
-
7
-# Packages
8
-*.egg
9
-*.egg-info
10
-dist
11
-build
12
-eggs
13
-parts
14
-sdist
15
-develop-eggs
16
-.installed.cfg
17
-lib
18
-lib64
19
-
20
-# Installer logs
21
-pip-log.txt
22
-
23
-# Unit test / coverage reports
24
-.coverage
25
-cover
26
-.tox
27
-.testrepository
28
-nosetests.xml
29
-
30
-# Translations
31
-*.mo
32
-
33
-# Mr Developer
34
-.mr.developer.cfg
35
-.project
36
-.pydevproject
37
-*.bundle
38
-Gemfile.lock
39
-
40
-# Mr Mac User
41
-.DS_Store
42
-._.DS_Store
43
-
44
-# tarballs
45
-*.tar.gz
46
-
47
-# sdist generated stuff
48
-AUTHORS
49
-ChangeLog
50
-
51
-instack.answers
52
-
53
-# Files created by releasenotes build
54
-releasenotes/build

+ 1
- 0
.gitreview View File

@@ -3,3 +3,4 @@ host=review.openstack.org
3 3
 port=29418
4 4
 project=openstack/instack-undercloud
5 5
 defaultbranch=master
6
+

+ 0
- 4
.testr.conf View File

@@ -1,4 +0,0 @@
1
-[DEFAULT]
2
-test_command=OS_STDOUT_CAPTURE=1 OS_STDERR_CAPTURE=1 OS_TEST_TIMEOUT=60 OS_LOG_CAPTURE=1 ${PYTHON:-python} -m subunit.run discover -t ./instack_undercloud ./instack_undercloud $LISTOPT $IDOPTION
3
-test_id_option=--load-list $IDFILE
4
-test_list_option=--list

+ 0
- 22
Gemfile View File

@@ -1,22 +0,0 @@
1
-source ENV['GEM_SOURCE'] || "https://rubygems.org"
2
-
3
-group :development, :test, :system_tests do
4
-  gem 'puppet-openstack_spec_helper',
5
-    :git     => 'https://git.openstack.org/openstack/puppet-openstack_spec_helper',
6
-    :branch  => 'master',
7
-    :require => false
8
-end
9
-
10
-if facterversion = ENV['FACTER_GEM_VERSION']
11
-  gem 'facter', facterversion, :require => false
12
-else
13
-  gem 'facter', :require => false
14
-end
15
-
16
-if puppetversion = ENV['PUPPET_GEM_VERSION']
17
-  gem 'puppet', puppetversion, :require => false
18
-else
19
-  gem 'puppet', :require => false
20
-end
21
-
22
-# vim:ft=ruby

+ 0
- 175
LICENSE View File

@@ -1,175 +0,0 @@
1
-
2
-                                 Apache License
3
-                           Version 2.0, January 2004
4
-                        http://www.apache.org/licenses/
5
-
6
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
7
-
8
-   1. Definitions.
9
-
10
-      "License" shall mean the terms and conditions for use, reproduction,
11
-      and distribution as defined by Sections 1 through 9 of this document.
12
-
13
-      "Licensor" shall mean the copyright owner or entity authorized by
14
-      the copyright owner that is granting the License.
15
-
16
-      "Legal Entity" shall mean the union of the acting entity and all
17
-      other entities that control, are controlled by, or are under common
18
-      control with that entity. For the purposes of this definition,
19
-      "control" means (i) the power, direct or indirect, to cause the
20
-      direction or management of such entity, whether by contract or
21
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
22
-      outstanding shares, or (iii) beneficial ownership of such entity.
23
-
24
-      "You" (or "Your") shall mean an individual or Legal Entity
25
-      exercising permissions granted by this License.
26
-
27
-      "Source" form shall mean the preferred form for making modifications,
28
-      including but not limited to software source code, documentation
29
-      source, and configuration files.
30
-
31
-      "Object" form shall mean any form resulting from mechanical
32
-      transformation or translation of a Source form, including but
33
-      not limited to compiled object code, generated documentation,
34
-      and conversions to other media types.
35
-
36
-      "Work" shall mean the work of authorship, whether in Source or
37
-      Object form, made available under the License, as indicated by a
38
-      copyright notice that is included in or attached to the work
39
-      (an example is provided in the Appendix below).
40
-
41
-      "Derivative Works" shall mean any work, whether in Source or Object
42
-      form, that is based on (or derived from) the Work and for which the
43
-      editorial revisions, annotations, elaborations, or other modifications
44
-      represent, as a whole, an original work of authorship. For the purposes
45
-      of this License, Derivative Works shall not include works that remain
46
-      separable from, or merely link (or bind by name) to the interfaces of,
47
-      the Work and Derivative Works thereof.
48
-
49
-      "Contribution" shall mean any work of authorship, including
50
-      the original version of the Work and any modifications or additions
51
-      to that Work or Derivative Works thereof, that is intentionally
52
-      submitted to Licensor for inclusion in the Work by the copyright owner
53
-      or by an individual or Legal Entity authorized to submit on behalf of
54
-      the copyright owner. For the purposes of this definition, "submitted"
55
-      means any form of electronic, verbal, or written communication sent
56
-      to the Licensor or its representatives, including but not limited to
57
-      communication on electronic mailing lists, source code control systems,
58
-      and issue tracking systems that are managed by, or on behalf of, the
59
-      Licensor for the purpose of discussing and improving the Work, but
60
-      excluding communication that is conspicuously marked or otherwise
61
-      designated in writing by the copyright owner as "Not a Contribution."
62
-
63
-      "Contributor" shall mean Licensor and any individual or Legal Entity
64
-      on behalf of whom a Contribution has been received by Licensor and
65
-      subsequently incorporated within the Work.
66
-
67
-   2. Grant of Copyright License. Subject to the terms and conditions of
68
-      this License, each Contributor hereby grants to You a perpetual,
69
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
70
-      copyright license to reproduce, prepare Derivative Works of,
71
-      publicly display, publicly perform, sublicense, and distribute the
72
-      Work and such Derivative Works in Source or Object form.
73
-
74
-   3. Grant of Patent License. Subject to the terms and conditions of
75
-      this License, each Contributor hereby grants to You a perpetual,
76
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
77
-      (except as stated in this section) patent license to make, have made,
78
-      use, offer to sell, sell, import, and otherwise transfer the Work,
79
-      where such license applies only to those patent claims licensable
80
-      by such Contributor that are necessarily infringed by their
81
-      Contribution(s) alone or by combination of their Contribution(s)
82
-      with the Work to which such Contribution(s) was submitted. If You
83
-      institute patent litigation against any entity (including a
84
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
85
-      or a Contribution incorporated within the Work constitutes direct
86
-      or contributory patent infringement, then any patent licenses
87
-      granted to You under this License for that Work shall terminate
88
-      as of the date such litigation is filed.
89
-
90
-   4. Redistribution. You may reproduce and distribute copies of the
91
-      Work or Derivative Works thereof in any medium, with or without
92
-      modifications, and in Source or Object form, provided that You
93
-      meet the following conditions:
94
-
95
-      (a) You must give any other recipients of the Work or
96
-          Derivative Works a copy of this License; and
97
-
98
-      (b) You must cause any modified files to carry prominent notices
99
-          stating that You changed the files; and
100
-
101
-      (c) You must retain, in the Source form of any Derivative Works
102
-          that You distribute, all copyright, patent, trademark, and
103
-          attribution notices from the Source form of the Work,
104
-          excluding those notices that do not pertain to any part of
105
-          the Derivative Works; and
106
-
107
-      (d) If the Work includes a "NOTICE" text file as part of its
108
-          distribution, then any Derivative Works that You distribute must
109
-          include a readable copy of the attribution notices contained
110
-          within such NOTICE file, excluding those notices that do not
111
-          pertain to any part of the Derivative Works, in at least one
112
-          of the following places: within a NOTICE text file distributed
113
-          as part of the Derivative Works; within the Source form or
114
-          documentation, if provided along with the Derivative Works; or,
115
-          within a display generated by the Derivative Works, if and
116
-          wherever such third-party notices normally appear. The contents
117
-          of the NOTICE file are for informational purposes only and
118
-          do not modify the License. You may add Your own attribution
119
-          notices within Derivative Works that You distribute, alongside
120
-          or as an addendum to the NOTICE text from the Work, provided
121
-          that such additional attribution notices cannot be construed
122
-          as modifying the License.
123
-
124
-      You may add Your own copyright statement to Your modifications and
125
-      may provide additional or different license terms and conditions
126
-      for use, reproduction, or distribution of Your modifications, or
127
-      for any such Derivative Works as a whole, provided Your use,
128
-      reproduction, and distribution of the Work otherwise complies with
129
-      the conditions stated in this License.
130
-
131
-   5. Submission of Contributions. Unless You explicitly state otherwise,
132
-      any Contribution intentionally submitted for inclusion in the Work
133
-      by You to the Licensor shall be under the terms and conditions of
134
-      this License, without any additional terms or conditions.
135
-      Notwithstanding the above, nothing herein shall supersede or modify
136
-      the terms of any separate license agreement you may have executed
137
-      with Licensor regarding such Contributions.
138
-
139
-   6. Trademarks. This License does not grant permission to use the trade
140
-      names, trademarks, service marks, or product names of the Licensor,
141
-      except as required for reasonable and customary use in describing the
142
-      origin of the Work and reproducing the content of the NOTICE file.
143
-
144
-   7. Disclaimer of Warranty. Unless required by applicable law or
145
-      agreed to in writing, Licensor provides the Work (and each
146
-      Contributor provides its Contributions) on an "AS IS" BASIS,
147
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
148
-      implied, including, without limitation, any warranties or conditions
149
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
150
-      PARTICULAR PURPOSE. You are solely responsible for determining the
151
-      appropriateness of using or redistributing the Work and assume any
152
-      risks associated with Your exercise of permissions under this License.
153
-
154
-   8. Limitation of Liability. In no event and under no legal theory,
155
-      whether in tort (including negligence), contract, or otherwise,
156
-      unless required by applicable law (such as deliberate and grossly
157
-      negligent acts) or agreed to in writing, shall any Contributor be
158
-      liable to You for damages, including any direct, indirect, special,
159
-      incidental, or consequential damages of any character arising as a
160
-      result of this License or out of the use or inability to use the
161
-      Work (including but not limited to damages for loss of goodwill,
162
-      work stoppage, computer failure or malfunction, or any and all
163
-      other commercial damages or losses), even if such Contributor
164
-      has been advised of the possibility of such damages.
165
-
166
-   9. Accepting Warranty or Additional Liability. While redistributing
167
-      the Work or Derivative Works thereof, You may choose to offer,
168
-      and charge a fee for, acceptance of support, warranty, indemnity,
169
-      or other liability obligations and/or rights consistent with this
170
-      License. However, in accepting such obligations, You may act only
171
-      on Your own behalf and on Your sole responsibility, not on behalf
172
-      of any other Contributor, and only if You agree to indemnify,
173
-      defend, and hold each Contributor harmless for any liability
174
-      incurred by, or claims asserted against, such Contributor by reason
175
-      of your accepting any such warranty or additional liability.

+ 0
- 18
README.md View File

@@ -1,18 +0,0 @@
1
-Team and repository tags
2
-========================
3
-
4
-[![Team and repository tags](https://governance.openstack.org/tc/badges/instack-undercloud.svg)](https://governance.openstack.org/tc/reference/tags/index.html)
5
-
6
-<!-- Change things from this point on -->
7
-
8
-Undercloud Install via instack
9
-==============================
10
-
11
-instack-undercloud is tooling for installing a TripleO undercloud.
12
-
13
-It is part of the TripleO project:
14
-https://docs.openstack.org/tripleo-docs/latest/
15
-
16
-* Free software: Apache license
17
-* Source: https://git.openstack.org/cgit/openstack/instack-undercloud
18
-* Bugs: https://bugs.launchpad.net/tripleo

+ 5
- 0
README.rst View File

@@ -0,0 +1,5 @@
1
+This project is no longer maintained.
2
+
3
+The contents of this repository are still available in the Git source code management system. To see the contents of this repository before it reached its end of life, please check out the previous commit with "git checkout HEAD^1".
4
+
5
+For any further questions, please email openstack-dev@lists.openstack.org or join #openstack-dev on Freenode.

+ 0
- 6
Rakefile View File

@@ -1,6 +0,0 @@
1
-require 'puppetlabs_spec_helper/rake_tasks'
2
-require 'puppet-lint/tasks/puppet-lint'
3
-
4
-PuppetLint.configuration.fail_on_warnings = true
5
-PuppetLint.configuration.send('disable_80chars')
6
-PuppetSyntax.fail_on_deprecation_notices = false

+ 0
- 2
bindep.txt View File

@@ -1,2 +0,0 @@
1
-libssl-dev [platform:dpkg test]
2
-openssl-devel [platform:rpm test]

+ 0
- 3
config-generator/undercloud.conf View File

@@ -1,3 +0,0 @@
1
-[DEFAULT]
2
-output_file = undercloud.conf.sample
3
-namespace = instack-undercloud

+ 0
- 4
doc/source/api/index.rst View File

@@ -1,4 +0,0 @@
1
-.. toctree::
2
-   :maxdepth: 1
3
-
4
-   undercloud

+ 0
- 8
doc/source/api/undercloud.rst View File

@@ -1,8 +0,0 @@
1
-===================
2
- :mod:`undercloud`
3
-===================
4
-
5
-.. automodule:: instack_undercloud.undercloud
6
-  :members:
7
-  :undoc-members:
8
-  :show-inheritance:

+ 0
- 278
doc/source/conf.py View File

@@ -1,278 +0,0 @@
1
-# -*- coding: utf-8 -*-
2
-# Licensed under the Apache License, Version 2.0 (the "License");
3
-# you may not use this file except in compliance with the License.
4
-# You may obtain a copy of the License at
5
-#
6
-#    http://www.apache.org/licenses/LICENSE-2.0
7
-#
8
-# Unless required by applicable law or agreed to in writing, software
9
-# distributed under the License is distributed on an "AS IS" BASIS,
10
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
11
-# implied.
12
-# See the License for the specific language governing permissions and
13
-# limitations under the License.
14
-#
15
-
16
-# If extensions (or modules to document with autodoc) are in another directory,
17
-# add these directories to sys.path here. If the directory is relative to the
18
-# documentation root, use os.path.abspath to make it absolute, like shown here.
19
-#sys.path.insert(0, os.path.abspath('.'))
20
-
21
-# -- General configuration ------------------------------------------------
22
-
23
-
24
-# If your documentation needs a minimal Sphinx version, state it here.
25
-#needs_sphinx = '1.0'
26
-
27
-# Add any Sphinx extension module names here, as strings. They can be
28
-# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
29
-# ones.
30
-extensions = [
31
-    'sphinx.ext.autodoc',
32
-    'sphinx.ext.intersphinx',
33
-    'openstackdocstheme',
34
-]
35
-
36
-# Add any paths that contain templates here, relative to this directory.
37
-templates_path = ['_templates']
38
-
39
-# The suffix of source filenames.
40
-source_suffix = '.rst'
41
-
42
-# The encoding of source files.
43
-#source_encoding = 'utf-8-sig'
44
-
45
-# The master toctree document.
46
-master_doc = 'index'
47
-
48
-# General information about the project.
49
-project = u'Instack Undercloud'
50
-copyright = u'2015, OpenStack Foundation'
51
-bug_tracker = u'Launchpad'
52
-bug_tracker_url = u'https://launchpad.net/tripleo'
53
-
54
-# The version info for the project you're documenting, acts as replacement for
55
-# |version| and |release|, also used in various other places throughout the
56
-# built documents.
57
-#
58
-# The short X.Y version.
59
-version = '3.0.0'
60
-# The full version, including alpha/beta/rc tags.
61
-release = '3.0.0'
62
-
63
-# The language for content autogenerated by Sphinx. Refer to documentation
64
-# for a list of supported languages.
65
-#language = None
66
-
67
-# There are two options for replacing |today|: either, you set today to some
68
-# non-false value, then it is used:
69
-#today = ''
70
-# Else, today_fmt is used as the format for a strftime call.
71
-#today_fmt = '%B %d, %Y'
72
-
73
-# List of patterns, relative to source directory, that match files and
74
-# directories to ignore when looking for source files.
75
-exclude_patterns = []
76
-
77
-# The reST default role (used for this markup: `text`) to use for all
78
-# documents.
79
-#default_role = None
80
-
81
-# If true, '()' will be appended to :func: etc. cross-reference text.
82
-#add_function_parentheses = True
83
-
84
-# If true, the current module name will be prepended to all description
85
-# unit titles (such as .. function::).
86
-#add_module_names = True
87
-
88
-# If true, sectionauthor and moduleauthor directives will be shown in the
89
-# output. They are ignored by default.
90
-#show_authors = False
91
-
92
-# The name of the Pygments (syntax highlighting) style to use.
93
-pygments_style = 'sphinx'
94
-
95
-# A list of ignored prefixes for module index sorting.
96
-#modindex_common_prefix = []
97
-
98
-# If true, keep warnings as "system message" paragraphs in the built documents.
99
-#keep_warnings = False
100
-
101
-
102
-# -- Options for HTML output ----------------------------------------------
103
-
104
-# The theme to use for HTML and HTML Help pages.  See the documentation for
105
-# a list of builtin themes.
106
-html_theme = 'openstackdocs'
107
-
108
-# Theme options are theme-specific and customize the look and feel of a theme
109
-# further.  For a list of options available for each theme, see the
110
-# documentation.
111
-#html_theme_options = {}
112
-
113
-# Add any paths that contain custom themes here, relative to this directory.
114
-# html_theme_path = []
115
-
116
-# The name for this set of Sphinx documents.  If None, it defaults to
117
-# "<project> v<release> documentation".
118
-#html_title = None
119
-
120
-# A shorter title for the navigation bar.  Default is the same as html_title.
121
-#html_short_title = None
122
-
123
-# The name of an image file (relative to this directory) to place at the top
124
-# of the sidebar.
125
-#html_logo = None
126
-
127
-# The name of an image file (within the static path) to use as favicon of the
128
-# docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
129
-# pixels large.
130
-#html_favicon = None
131
-
132
-# Add any paths that contain custom static files (such as style sheets) here,
133
-# relative to this directory. They are copied after the builtin static files,
134
-# so a file named "default.css" will overwrite the builtin "default.css".
135
-#html_static_path = ['_static']
136
-
137
-# Add any extra paths that contain custom files (such as robots.txt or
138
-# .htaccess) here, relative to this directory. These files are copied
139
-# directly to the root of the documentation.
140
-#html_extra_path = []
141
-
142
-# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
143
-# using the given strftime format.
144
-html_last_updated_fmt = '%Y-%m-%d %H:%M'
145
-
146
-# If true, SmartyPants will be used to convert quotes and dashes to
147
-# typographically correct entities.
148
-#html_use_smartypants = True
149
-
150
-# Custom sidebar templates, maps document names to template names.
151
-#html_sidebars = {}
152
-
153
-# Additional templates that should be rendered to pages, maps page names to
154
-# template names.
155
-#html_additional_pages = {}
156
-
157
-# If false, no module index is generated.
158
-#html_domain_indices = True
159
-
160
-# If false, no index is generated.
161
-#html_use_index = True
162
-
163
-# If true, the index is split into individual pages for each letter.
164
-#html_split_index = False
165
-
166
-# If true, links to the reST sources are added to the pages.
167
-#html_show_sourcelink = True
168
-
169
-# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
170
-#html_show_sphinx = True
171
-
172
-# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
173
-#html_show_copyright = True
174
-
175
-# If true, an OpenSearch description file will be output, and all pages will
176
-# contain a <link> tag referring to it.  The value of this option must be the
177
-# base URL from which the finished HTML is served.
178
-#html_use_opensearch = ''
179
-
180
-# This is the file name suffix for HTML files (e.g. ".xhtml").
181
-#html_file_suffix = None
182
-
183
-# Output file base name for HTML help builder.
184
-htmlhelp_basename = 'instack-underclouddoc'
185
-
186
-
187
-# -- Options for LaTeX output ---------------------------------------------
188
-
189
-latex_elements = {
190
-# The paper size ('letterpaper' or 'a4paper').
191
-#'papersize': 'letterpaper',
192
-
193
-# The font size ('10pt', '11pt' or '12pt').
194
-#'pointsize': '10pt',
195
-
196
-# Additional stuff for the LaTeX preamble.
197
-#'preamble': '',
198
-}
199
-
200
-# Grouping the document tree into LaTeX files. List of tuples
201
-# (source start file, target name, title,
202
-#  author, documentclass [howto, manual, or own class]).
203
-latex_documents = [
204
-  ('index', 'instack-undercloud.tex', u'instack-undercloud Documentation',
205
-   u'2015, OpenStack Foundation', 'manual'),
206
-]
207
-
208
-# The name of an image file (relative to this directory) to place at the top of
209
-# the title page.
210
-#latex_logo = None
211
-
212
-# For "manual" documents, if this is true, then toplevel headings are parts,
213
-# not chapters.
214
-#latex_use_parts = False
215
-
216
-# If true, show page references after internal links.
217
-#latex_show_pagerefs = False
218
-
219
-# If true, show URL addresses after external links.
220
-#latex_show_urls = False
221
-
222
-# Documents to append as an appendix to all manuals.
223
-#latex_appendices = []
224
-
225
-# If false, no module index is generated.
226
-#latex_domain_indices = True
227
-
228
-
229
-# -- Options for manual page output ---------------------------------------
230
-
231
-# One entry per manual page. List of tuples
232
-# (source start file, name, description, authors, manual section).
233
-man_pages = [
234
-    ('index', 'instack-undercloud', u'instack-undercloud Documentation',
235
-     [u'2015, OpenStack Foundation'], 1)
236
-]
237
-
238
-# If true, show URL addresses after external links.
239
-#man_show_urls = False
240
-
241
-
242
-# -- Options for Texinfo output -------------------------------------------
243
-
244
-# Grouping the document tree into Texinfo files. List of tuples
245
-# (source start file, target name, title, author,
246
-#  dir menu entry, description, category)
247
-texinfo_documents = [
248
-  ('index', 'instack-undercloud', u'instack-undercloud Documentation',
249
-   u'2015, OpenStack Foundation', 'instack-undercloud',
250
-   'Tooling for installing TripleO undercloud.',
251
-   'Miscellaneous'),
252
-]
253
-
254
-# Documents to append as an appendix to all manuals.
255
-#texinfo_appendices = []
256
-
257
-# If false, no module index is generated.
258
-#texinfo_domain_indices = True
259
-
260
-# How to display URL addresses: 'footnote', 'no', or 'inline'.
261
-#texinfo_show_urls = 'footnote'
262
-
263
-# If true, do not generate a @detailmenu in the "Top" node's menu.
264
-#texinfo_no_detailmenu = False
265
-
266
-# -- Options for Internationalization output ------------------------------
267
-locale_dirs = ['locale/']
268
-
269
-# openstackdocstheme options
270
-repository_name = 'openstack/instack-undercloud'
271
-bug_project = 'tripleo'
272
-bug_tag = 'documentation'
273
-
274
-rst_prolog = """
275
-.. |project| replace:: %s
276
-.. |bug_tracker| replace:: %s
277
-.. |bug_tracker_url| replace:: %s
278
-""" % (project, bug_tracker, bug_tracker_url)

+ 0
- 24
doc/source/index.rst View File

@@ -1,24 +0,0 @@
1
-Welcome to |project| documentation
2
-====================================
3
-
4
-The instack-undercloud project has code and diskimage-builder
5
-elements for deploying a TripleO undercloud to an existing system.
6
-
7
-See the `TripleO documentation`_ for the full end-to-end workflow.
8
-
9
-.. _`TripleO documentation`: https://docs.openstack.org/tripleo-docs/latest/
10
-
11
-API Documentation
12
-=================
13
-
14
-.. toctree::
15
-   :maxdepth: 1
16
-
17
-   api/index
18
-
19
-Indices and tables
20
-==================
21
-
22
-* :ref:`genindex`
23
-* :ref:`modindex`
24
-* :ref:`search`

+ 0
- 4
elements/centos-cr/README.rst View File

@@ -1,4 +0,0 @@
1
-Enable the CentOS CR Repo
2
-
3
-Allow use of packages from the CentOS CR repository, per the instructions at
4
-https://wiki.centos.org/AdditionalResources/Repositories/CR

+ 0
- 9
elements/centos-cr/pre-install.d/00-enable-cr-repo View File

@@ -1,9 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-# Per https://seven.centos.org/2015/03/centos-7-cr-repo-has-been-populated/
7
-# we need to update before we can enable the cr repo.
8
-yum -y update
9
-yum-config-manager --enable cr

+ 0
- 9
elements/instack-vm/README.md View File

@@ -1,9 +0,0 @@
1
-Build an instack vm image
2
-
3
-This element allows building an instack vm image using diskimage-builder. To build
4
-the image simply include this element and the appropriate distro element.
5
-For example:
6
-
7
-disk-image-create -a amd64 -o instack \
8
-    --image-size 30 \
9
-    fedora instack-vm

+ 0
- 3
elements/instack-vm/element-deps View File

@@ -1,3 +0,0 @@
1
-local-config
2
-package-installs
3
-vm

+ 0
- 18
elements/instack-vm/extra-data.d/50-add-instack-files View File

@@ -1,18 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eu
4
-set -o pipefail
5
-
6
-ANSWERSFILE=${ANSWERSFILE:-""}
7
-
8
-if [ -z "$ANSWERSFILE" ]; then
9
-    echo "\$ANSWERSFILE should be defined."
10
-    exit 1
11
-fi
12
-
13
-file_list="$ANSWERSFILE
14
-$TE_DATAFILE"
15
-
16
-for f in $file_list; do
17
-    cp "$f" "$TMP_HOOKS_PATH"
18
-done

+ 0
- 10
elements/instack-vm/install.d/50-ip-forward View File

@@ -1,10 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-# When using instack-virt-setup, it makes sense to always enable IP forwarding
7
-# so the Overcloud nodes can have external access.
8
-cat > /etc/sysctl.d/ip-forward.conf <<EOF
9
-net.ipv4.ip_forward=1
10
-EOF

+ 0
- 19
elements/instack-vm/install.d/51-instack-files View File

@@ -1,19 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eu
4
-set -o pipefail
5
-
6
-useradd -m stack
7
-
8
-cat > /etc/sudoers.d/stack <<eof
9
-stack ALL=(ALL) NOPASSWD:ALL
10
-eof
11
-
12
-chmod 0440 /etc/sudoers.d/stack
13
-visudo -c
14
-
15
-mkdir -p /home/stack/.ssh
16
-cp /tmp/in_target.d/undercloud.conf.sample /home/stack/undercloud.conf
17
-cp /tmp/in_target.d/$(basename $TE_DATAFILE) /home/stack/instackenv.json
18
-
19
-chown -R stack:stack /home/stack

+ 0
- 3
elements/instack-vm/package-installs.yaml View File

@@ -1,3 +0,0 @@
1
-net-tools:
2
-yum-utils:
3
-git:

+ 0
- 6
elements/instack-vm/post-install.d/90-remove-cloud-init View File

@@ -1,6 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eu
4
-set -o pipefail
5
-
6
-yum erase -y cloud-init

+ 0
- 7
elements/instack-vm/post-install.d/90-set-hostname View File

@@ -1,7 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-echo "$UNDERCLOUD_VM_NAME.localdomain" > /etc/hostname
7
-echo "127.0.0.1   $UNDERCLOUD_VM_NAME $UNDERCLOUD_VM_NAME.localdomain" >> /etc/hosts

+ 0
- 13
elements/overcloud-full/README.rst View File

@@ -1,13 +0,0 @@
1
-overcloud-full
2
-==============
3
-
4
-Element for the overcloud-full image created by instack-undercloud.
5
-
6
-Workarounds
7
------------
8
-
9
-This element can be used to apply needed workarounds.
10
-
11
-* openstack-glance-api and openstack-glance-registry are currently installed
12
-  explicitly since this is not handled by the overcloud-control element from
13
-  tripleo-puppet-elements

+ 0
- 7
elements/overcloud-full/install.d/50-persistent-journal View File

@@ -1,7 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eu
4
-set -o pipefail
5
-
6
-# Enable persistent logging for the systemd journal
7
-mkdir -p /var/log/journal

+ 0
- 2
elements/overcloud-full/package-installs.yaml View File

@@ -1,2 +0,0 @@
1
-openstack-glance-api:
2
-openstack-glance-registry:

+ 0
- 6
elements/overcloud-full/post-install.d/50-remove-libvirt-default-net View File

@@ -1,6 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-rm -f /etc/libvirt/qemu/networks/autostart/default.xml

+ 0
- 4
elements/pip-and-virtualenv-override/README.md View File

@@ -1,4 +0,0 @@
1
-This element will override the behavior from the pip-and-virtualenv element
2
-from tripleo-image-elements so that python-pip and python-virtualenv are never
3
-installed.
4
-

+ 0
- 1
elements/pip-and-virtualenv-override/element-provides View File

@@ -1 +0,0 @@
1
-pip-and-virtualenv

+ 0
- 9
elements/puppet-stack-config/README.rst View File

@@ -1,9 +0,0 @@
1
-puppet-stack-config
2
--------------------
3
-
4
-puppet-stack-config provides static puppet configuration for a single node
5
-baremetal cloud using the Ironic driver. A yaml template is used to render a
6
-hiera data file at /etc/puppet/hieradata/puppet-stack-config.yaml.
7
-
8
-The template rendering takes its input from a set of defined environment
9
-variables.

+ 0
- 2
elements/puppet-stack-config/element-deps View File

@@ -1,2 +0,0 @@
1
-hiera
2
-puppet-modules

+ 0
- 5
elements/puppet-stack-config/extra-data.d/10-install-git View File

@@ -1,5 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-
5
-yum -y install git

+ 0
- 58
elements/puppet-stack-config/install.d/02-puppet-stack-config View File

@@ -1,58 +0,0 @@
1
-#!/usr/bin/python
2
-# Copyright 2015 Red Hat, Inc.
3
-# All Rights Reserved.
4
-#
5
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
6
-# not use this file except in compliance with the License. You may obtain
7
-# a copy of the License at
8
-#
9
-#     http://www.apache.org/licenses/LICENSE-2.0
10
-#
11
-# Unless required by applicable law or agreed to in writing, software
12
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
13
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
14
-# License for the specific language governing permissions and limitations
15
-# under the License.
16
-
17
-import os
18
-import subprocess
19
-import tempfile
20
-
21
-import pystache
22
-
23
-from instack_undercloud import undercloud
24
-
25
-renderer = pystache.Renderer(escape=lambda s: s)
26
-template = os.path.join(os.path.dirname(__file__),
27
-                        '..',
28
-                        'puppet-stack-config.yaml.template')
29
-
30
-context = {item: os.environ.get(item)
31
-           for item in undercloud.InstackEnvironment.PUPPET_KEYS}
32
-
33
-endpoint_context = {}
34
-for k, v in os.environ.items():
35
-    if k.startswith('UNDERCLOUD_ENDPOINT_'):
36
-        endpoint_context[k] = v
37
-context.update(endpoint_context)
38
-
39
-# Make sure boolean strings are treated as Bool()
40
-for k, v in list(context.items()):
41
-    if v == 'False':
42
-        context[k] = False
43
-    elif v == 'True':
44
-        context[k] = True
45
-
46
-with open(template) as f:
47
-    puppet_stack_config_yaml = renderer.render(f.read(), context)
48
-
49
-puppet_stack_config_yaml_path = '/etc/puppet/hieradata/puppet-stack-config.yaml'
50
-
51
-if not os.path.exists(os.path.dirname(puppet_stack_config_yaml_path)):
52
-    os.makedirs(os.path.dirname(puppet_stack_config_yaml_path))
53
-with open(puppet_stack_config_yaml_path, 'w') as f:
54
-    f.write(puppet_stack_config_yaml)
55
-
56
-# Secure permissions
57
-os.chmod(os.path.dirname(puppet_stack_config_yaml_path), 0750)
58
-os.chmod(puppet_stack_config_yaml_path, 0600)

+ 0
- 7
elements/puppet-stack-config/install.d/10-puppet-stack-config-puppet-module View File

@@ -1,7 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-mkdir -p /etc/puppet/manifests
7
-cp $(dirname $0)/../puppet-stack-config.pp /etc/puppet/manifests/puppet-stack-config.pp

+ 0
- 1
elements/puppet-stack-config/os-apply-config/etc/puppet/hieradata/CentOS.yaml View File

@@ -1 +0,0 @@
1
-tripleo::selinux::mode: permissive

+ 0
- 22
elements/puppet-stack-config/os-apply-config/etc/puppet/hieradata/RedHat.yaml View File

@@ -1,22 +0,0 @@
1
-rabbitmq::package_provider: yum
2
-tripleo::selinux::mode: enforcing
3
-tripleo::profile::base::sshd::options:
4
-  HostKey:
5
-    - '/etc/ssh/ssh_host_rsa_key'
6
-    - '/etc/ssh/ssh_host_ecdsa_key'
7
-    - '/etc/ssh/ssh_host_ed25519_key'
8
-  SyslogFacility: 'AUTHPRIV'
9
-  AuthorizedKeysFile: '.ssh/authorized_keys'
10
-  ChallengeResponseAuthentication: 'no'
11
-  GSSAPIAuthentication: 'yes'
12
-  GSSAPICleanupCredentials: 'no'
13
-  UsePAM: 'yes'
14
-  UseDNS: 'no'
15
-  X11Forwarding: 'yes'
16
-  UsePrivilegeSeparation: 'sandbox'
17
-  AcceptEnv:
18
-    - 'LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES'
19
-    - 'LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT'
20
-    - 'LC_IDENTIFICATION LC_ALL LANGUAGE'
21
-    - 'XMODIFIERS'
22
-  Subsystem: 'sftp  /usr/libexec/openssh/sftp-server'

+ 0
- 19
elements/puppet-stack-config/os-refresh-config/configure.d/50-puppet-stack-config View File

@@ -1,19 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-function puppet_apply {
7
-    set +e
8
-    $@ 2>&1
9
-    rc=$?
10
-    set -e
11
-
12
-    echo "puppet apply exited with exit code $rc"
13
-
14
-    if [ $rc != 2 -a $rc != 0 ]; then
15
-        exit $rc
16
-    fi
17
-}
18
-
19
-puppet_apply puppet apply --summarize --detailed-exitcodes /etc/puppet/manifests/puppet-stack-config.pp

+ 0
- 7
elements/puppet-stack-config/os-refresh-config/post-configure.d/10-iptables View File

@@ -1,7 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-set -o pipefail
5
-
6
-EXTERNAL_BRIDGE=br-ctlplane
7
-iptables -w -t nat -C PREROUTING -d 169.254.169.254/32 -i $EXTERNAL_BRIDGE -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8775 || iptables -w -t nat -I PREROUTING -d 169.254.169.254/32 -i $EXTERNAL_BRIDGE -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8775

+ 0
- 2
elements/puppet-stack-config/package-installs.yaml View File

@@ -1,2 +0,0 @@
1
-pystache:
2
-python-oslo-concurrency:

+ 0
- 729
elements/puppet-stack-config/puppet-stack-config.pp View File

@@ -1,729 +0,0 @@
1
-# Copyright 2015 Red Hat, Inc.
2
-# All Rights Reserved.
3
-#
4
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
5
-# not use this file except in compliance with the License. You may obtain
6
-# a copy of the License at
7
-#
8
-#     http://www.apache.org/licenses/LICENSE-2.0
9
-#
10
-# Unless required by applicable law or agreed to in writing, software
11
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
12
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
13
-# License for the specific language governing permissions and limitations
14
-# under the License.
15
-
16
-warning('instack-undercloud is deprecated in Rocky and is replaced by containerized-undercloud.')
17
-
18
-# Deploy os-net-config before everything in the catalog
19
-include ::stdlib
20
-class { '::tripleo::network::os_net_config':
21
-  stage => 'setup',
22
-}
23
-
24
-# enable ip forwarding for the overcloud nodes to access the outside internet
25
-# in cases where they are on an isolated network
26
-ensure_resource('sysctl::value', 'net.ipv4.ip_forward', { 'value' => 1 })
27
-# NOTE(aschultz): clear up old file as this used to be managed via DIB
28
-file { '/etc/sysctl.d/ip-forward.conf':
29
-  ensure => absent
30
-}
31
-# NOTE(aschultz): LP#1750194 - docker will switch FORWARD to DROP if ip_forward
32
-# is not enabled first.
33
-Sysctl::Value['net.ipv4.ip_forward'] -> Package<| title == 'docker' |>
34
-
35
-# NOTE(aschultz): LP#1754426 - remove cloud-init and disable os-collect-config
36
-package { 'cloud-init':
37
-  ensure => 'absent',
38
-}
39
-service { 'os-collect-config':
40
-  ensure => stopped,
41
-  enable => false,
42
-}
43
-
44
-# Run  OpenStack db-sync at every puppet run, in any case.
45
-Exec<| title == 'neutron-db-sync' |> { refreshonly => false }
46
-Exec<| title == 'keystone-manage db_sync' |> { refreshonly => false }
47
-Exec<| title == 'glance-manage db_sync' |> { refreshonly => false }
48
-Exec<| title == 'nova-db-sync-api' |> { refreshonly => false }
49
-Exec<| title == 'nova-db-sync' |> { refreshonly => false }
50
-Exec<| title == 'nova-db-online-data-migrations' |> { refreshonly => false }
51
-Exec<| title == 'ironic-db-online-data-migrations' |> { refreshonly => false }
52
-Exec<| title == 'heat-dbsync' |> {
53
-  refreshonly => false,
54
-  # Heat database on the undercloud can be really big, db-sync take usually at least 10 min.
55
-  timeout     => 900,
56
-}
57
-Exec<| title == 'aodh-db-sync' |> { refreshonly => false }
58
-Exec<| title == 'ironic-dbsync' |> { refreshonly => false }
59
-Exec<| title == 'mistral-db-sync' |> { refreshonly => false }
60
-Exec<| title == 'mistral-db-populate' |> { refreshonly => false }
61
-Exec<| title == 'zaqar-manage db_sync' |> { refreshonly => false }
62
-Exec<| title == 'cinder-manage db_sync' |> { refreshonly => false }
63
-
64
-Keystone::Resource::Service_identity {
65
-  default_domain => hiera('keystone_default_domain'),
66
-}
67
-
68
-include ::tripleo::profile::base::time::ntp
69
-
70
-include ::rabbitmq
71
-Class['::rabbitmq'] -> Service['httpd']
72
-
73
-include ::tripleo::firewall
74
-include ::tripleo::selinux
75
-include ::tripleo::profile::base::kernel
76
-include ::tripleo::profile::base::certmonger_user
77
-
78
-if hiera('tripleo::haproxy::service_certificate', undef) {
79
-  class {'::tripleo::profile::base::haproxy':
80
-    enable_load_balancer => true,
81
-  }
82
-  include ::tripleo::keepalived
83
-  # NOTE: The following is required because we need to make sure that keepalived
84
-  # is up and running before rabbitmq. The reason is that when the undercloud is
85
-  # with ssl the hostname is configured to one of the VIPs so rabbit will try to
86
-  # connect to it at startup and if the VIP is not up it will fail (LP#1782814)
87
-  Class['::tripleo::keepalived'] -> Class['::rabbitmq']
88
-
89
-  # NOTE: This is required because the haproxy configuration should be changed
90
-  # before any keystone operations are triggered. Without this, it will try to
91
-  # access the new endpoints that point to haproxy even if haproxy hasn't
92
-  # started yet. The same is the case for ironic and ironic-inspector.
93
-  Class['::tripleo::haproxy'] -> Anchor['keystone::install::begin']
94
-}
95
-
96
-# MySQL
97
-include ::tripleo::profile::base::database::mysql
98
-# Raise the mysql file limit
99
-exec { 'systemctl-daemon-reload':
100
-  command     => '/bin/systemctl daemon-reload',
101
-  refreshonly => true,
102
-}
103
-file { '/etc/systemd/system/mariadb.service.d':
104
-  ensure => 'directory',
105
-  owner  => 'root',
106
-  group  => 'root',
107
-  mode   => '0755',
108
-}
109
-file { '/etc/systemd/system/mariadb.service.d/limits.conf':
110
-  ensure  => 'file',
111
-  owner   => 'root',
112
-  group   => 'root',
113
-  mode    => '0644',
114
-  content => "[Service]\nLimitNOFILE=16384\n",
115
-  require => File['/etc/systemd/system/mariadb.service.d'],
116
-  notify  => [Exec['systemctl-daemon-reload'], Service['mysqld']],
117
-}
118
-Exec['systemctl-daemon-reload'] -> Service['mysqld']
119
-
120
-file { '/var/log/journal':
121
-  ensure => 'directory',
122
-  owner  => 'root',
123
-  group  => 'root',
124
-  mode   => '0755',
125
-  notify => Service['systemd-journald'],
126
-}
127
-service { 'systemd-journald':
128
-  ensure => 'running'
129
-}
130
-
131
-# FIXME: this should only occur on the bootstrap host (ditto for db syncs)
132
-# Create all the database schemas
133
-# Example DSN format: mysql+pymysql://user:password@host/dbname
134
-$allowed_hosts = ['%',hiera('controller_host')]
135
-$re_dsn = '//([^:]+):([^@]+)@\[?([^/]+?)\]?/([a-z_-]+)'
136
-$keystone_dsn = match(hiera('keystone::database_connection'), $re_dsn)
137
-class { '::keystone::db::mysql':
138
-  user          => $keystone_dsn[1],
139
-  password      => $keystone_dsn[2],
140
-  host          => $keystone_dsn[3],
141
-  dbname        => $keystone_dsn[4],
142
-  allowed_hosts => $allowed_hosts,
143
-}
144
-$glance_dsn = match(hiera('glance::api::database_connection'), $re_dsn)
145
-class { '::glance::db::mysql':
146
-  user          => $glance_dsn[1],
147
-  password      => $glance_dsn[2],
148
-  host          => $glance_dsn[3],
149
-  dbname        => $glance_dsn[4],
150
-  allowed_hosts => $allowed_hosts,
151
-}
152
-$nova_dsn = match(hiera('nova::database_connection'), $re_dsn)
153
-class { '::nova::db::mysql':
154
-  user          => $nova_dsn[1],
155
-  password      => $nova_dsn[2],
156
-  host          => $nova_dsn[3],
157
-  dbname        => $nova_dsn[4],
158
-  allowed_hosts => $allowed_hosts,
159
-}
160
-$nova_api_dsn = match(hiera('nova::api_database_connection'), $re_dsn)
161
-class { '::nova::db::mysql_api':
162
-  user          => $nova_api_dsn[1],
163
-  password      => $nova_api_dsn[2],
164
-  host          => $nova_api_dsn[3],
165
-  dbname        => $nova_api_dsn[4],
166
-  allowed_hosts => $allowed_hosts,
167
-}
168
-$nova_placement_dsn = match(hiera('nova::placement_database_connection'), $re_dsn)
169
-class { '::nova::db::mysql_placement':
170
-  user          => $nova_placement_dsn[1],
171
-  password      => $nova_placement_dsn[2],
172
-  host          => $nova_placement_dsn[3],
173
-  dbname        => $nova_placement_dsn[4],
174
-  allowed_hosts => $allowed_hosts,
175
-}
176
-$neutron_dsn = match(hiera('neutron::server::database_connection'), $re_dsn)
177
-class { '::neutron::db::mysql':
178
-  user          => $neutron_dsn[1],
179
-  password      => $neutron_dsn[2],
180
-  host          => $neutron_dsn[3],
181
-  dbname        => $neutron_dsn[4],
182
-  allowed_hosts => $allowed_hosts,
183
-}
184
-$heat_dsn = match(hiera('heat_dsn'), $re_dsn)
185
-class { '::heat::db::mysql':
186
-  user          => $heat_dsn[1],
187
-  password      => $heat_dsn[2],
188
-  host          => $heat_dsn[3],
189
-  dbname        => $heat_dsn[4],
190
-  allowed_hosts => $allowed_hosts,
191
-}
192
-if str2bool(hiera('enable_telemetry', false)) {
193
-
194
-  # Ceilometer
195
-
196
-  include ::ceilometer::keystone::auth
197
-  include ::aodh::keystone::auth
198
-  include ::ceilometer
199
-  include ::ceilometer::agent::notification
200
-  include ::ceilometer::agent::central
201
-  include ::ceilometer::agent::auth
202
-  include ::ceilometer::dispatcher::gnocchi
203
-
204
-  # We need to use exec as the keystone dependency wouldnt allow
205
-  # us to wait until service is up before running upgrade. This
206
-  # is because both keystone, gnocchi and ceilometer run under apache.
207
-  exec { 'ceilo-gnocchi-upgrade':
208
-    command => 'ceilometer-upgrade --skip-metering-database',
209
-    path    => ['/usr/bin', '/usr/sbin'],
210
-  }
211
-
212
-  # This ensures we can do service validation on gnocchi api before
213
-  # running ceilometer-upgrade
214
-  $command = join(['curl -s',
215
-                  hiera('gnocchi_healthcheck_url')], ' ')
216
-
217
-  openstacklib::service_validation { 'gnocchi-status':
218
-    command     => $command,
219
-    tries       => 20,
220
-    refreshonly => true,
221
-    subscribe   => Anchor['gnocchi::service::end']
222
-  }
223
-
224
-# Ensure all endpoint exists and only then run the upgrade.
225
-  Keystone::Resource::Service_identity<||>
226
-  -> Openstacklib::Service_validation['gnocchi-status']
227
-  -> Exec['ceilo-gnocchi-upgrade']
228
-
229
-  # Aodh
230
-  $aodh_dsn = match(hiera('aodh::db::database_connection'), $re_dsn)
231
-  class { '::aodh::db::mysql':
232
-    user          => $aodh_dsn[1],
233
-    password      => $aodh_dsn[2],
234
-    host          => $aodh_dsn[3],
235
-    dbname        => $aodh_dsn[4],
236
-    allowed_hosts => $allowed_hosts,
237
-  }
238
-  include ::aodh
239
-  include ::aodh::api
240
-  include ::aodh::wsgi::apache
241
-  include ::aodh::evaluator
242
-  include ::aodh::notifier
243
-  include ::aodh::listener
244
-  include ::aodh::client
245
-  include ::aodh::db::sync
246
-  include ::aodh::auth
247
-  include ::aodh::config
248
-
249
-  # Gnocchi
250
-  $gnocchi_dsn = match(hiera('gnocchi::db::database_connection'), $re_dsn)
251
-  class { '::gnocchi::db::mysql':
252
-    user          => $gnocchi_dsn[1],
253
-    password      => $gnocchi_dsn[2],
254
-    host          => $gnocchi_dsn[3],
255
-    dbname        => $gnocchi_dsn[4],
256
-    allowed_hosts => $allowed_hosts,
257
-  }
258
-  include ::gnocchi
259
-  include ::gnocchi::keystone::auth
260
-  include ::gnocchi::api
261
-  include ::gnocchi::wsgi::apache
262
-  include ::gnocchi::client
263
-  include ::gnocchi::db::sync
264
-  include ::gnocchi::storage
265
-  include ::gnocchi::metricd
266
-  include ::gnocchi::statsd
267
-  include ::gnocchi::config
268
-  $gnocchi_backend = downcase(hiera('gnocchi_backend', 'swift'))
269
-  case $gnocchi_backend {
270
-      'swift': { include ::gnocchi::storage::swift }
271
-      'file': { include ::gnocchi::storage::file }
272
-      'rbd': { include ::gnocchi::storage::ceph }
273
-      default: { fail('Unrecognized gnocchi_backend parameter.') }
274
-  }
275
-
276
-  # Panko
277
-  $panko_dsn = match(hiera('panko::db::database_connection'), $re_dsn)
278
-  class { '::panko::db::mysql':
279
-    user          => $panko_dsn[1],
280
-    password      => $panko_dsn[2],
281
-    host          => $panko_dsn[3],
282
-    dbname        => $panko_dsn[4],
283
-    allowed_hosts => $allowed_hosts,
284
-  }
285
-  include ::panko
286
-  include ::panko::keystone::auth
287
-  include ::panko::config
288
-  include ::panko::db
289
-  include ::panko::db::sync
290
-  include ::panko::api
291
-  include ::panko::wsgi::apache
292
-  include ::panko::client
293
-} else {
294
-  # If Telemetry is disabled, ensure we tear down everything:
295
-  # packages, services, configuration files.
296
-  Package { [
297
-    'python-aodh',
298
-    'python-ceilometer',
299
-    'python-gnocchi',
300
-    'python-panko'
301
-  ]:
302
-    ensure => 'purged',
303
-    notify => Service['httpd'],
304
-  }
305
-  File { [
306
-    '/etc/httpd/conf.d/10-aodh_wsgi.conf',
307
-    '/etc/httpd/conf.d/10-ceilometer_wsgi.conf',
308
-    '/etc/httpd/conf.d/10-gnocchi_wsgi.conf',
309
-    '/etc/httpd/conf.d/10-panko_wsgi.conf',
310
-  ]:
311
-    ensure => absent,
312
-    notify => Service['httpd'],
313
-  }
314
-}
315
-
316
-$ironic_dsn = match(hiera('ironic::database_connection'), $re_dsn)
317
-class { '::ironic::db::mysql':
318
-  user          => $ironic_dsn[1],
319
-  password      => $ironic_dsn[2],
320
-  host          => $ironic_dsn[3],
321
-  dbname        => $ironic_dsn[4],
322
-  allowed_hosts => $allowed_hosts,
323
-}
324
-
325
-$ironic_inspector_dsn = match(hiera('ironic::inspector::db::database_connection'), $re_dsn)
326
-class { '::ironic::inspector::db::mysql':
327
-  user          => $ironic_inspector_dsn[1],
328
-  password      => $ironic_inspector_dsn[2],
329
-  host          => $ironic_inspector_dsn[3],
330
-  dbname        => $ironic_inspector_dsn[4],
331
-  allowed_hosts => $allowed_hosts,
332
-}
333
-
334
-# pre-install swift here so we can build rings
335
-include ::swift
336
-
337
-if hiera('tripleo::haproxy::service_certificate', undef) {
338
-  $keystone_public_endpoint = join(['https://', hiera('controller_public_host'), ':13000'])
339
-  $enable_proxy_headers_parsing = true
340
-} else {
341
-  $keystone_public_endpoint = undef
342
-  $enable_proxy_headers_parsing = false
343
-}
344
-
345
-if str2bool(hiera('enable_telemetry', false)) {
346
-  $notification_topics = ['notifications']
347
-} else {
348
-  $notification_topics = []
349
-}
350
-
351
-class { '::keystone':
352
-  enable_proxy_headers_parsing => $enable_proxy_headers_parsing,
353
-  notification_topics          => $notification_topics,
354
-}
355
-include ::keystone::wsgi::apache
356
-include ::keystone::cron::token_flush
357
-include ::keystone::roles::admin
358
-include ::keystone::endpoint
359
-include ::keystone::cors
360
-include ::keystone::config
361
-
362
-include ::heat::keystone::auth
363
-include ::heat::keystone::auth_cfn
364
-include ::neutron::keystone::auth
365
-include ::glance::keystone::auth
366
-include ::nova::keystone::auth
367
-include ::nova::keystone::auth_placement
368
-include ::swift::keystone::auth
369
-include ::ironic::keystone::auth
370
-include ::ironic::keystone::auth_inspector
371
-
372
-#TODO: need a cleanup-keystone-tokens.sh solution here
373
-keystone_config {
374
-  'ec2/driver': value => 'keystone.contrib.ec2.backends.sql.Ec2';
375
-}
376
-
377
-# TODO: notifications, scrubber, etc.
378
-class { '::glance::api':
379
-  enable_proxy_headers_parsing => $enable_proxy_headers_parsing,
380
-}
381
-include ::glance::backend::swift
382
-include ::glance::notify::rabbitmq
383
-
384
-class { '::nova':
385
-  debug               => hiera('debug'),
386
-  notification_format => 'unversioned',
387
-}
388
-
389
-class { '::nova::api':
390
-  enable_proxy_headers_parsing => $enable_proxy_headers_parsing,
391
-}
392
-include ::nova::wsgi::apache_api
393
-include ::nova::cell_v2::simple_setup
394
-include ::nova::placement
395
-include ::nova::wsgi::apache_placement
396
-include ::nova::cron::archive_deleted_rows
397
-include ::nova::cron::purge_shadow_tables
398
-include ::nova::config
399
-include ::nova::conductor
400
-include ::nova::scheduler
401
-include ::nova::scheduler::filter
402
-include ::nova::compute
403
-
404
-class { '::neutron':
405
-  debug        => hiera('debug'),
406
-}
407
-
408
-include ::neutron::server
409
-include ::neutron::server::notifications
410
-include ::neutron::quota
411
-include ::neutron::plugins::ml2
412
-include ::neutron::agents::dhcp
413
-include ::neutron::agents::l3
414
-include ::neutron::plugins::ml2::networking_baremetal
415
-include ::neutron::agents::ml2::networking_baremetal
416
-include ::neutron::config
417
-
418
-# Make sure ironic endpoint exists before starting the service
419
-Keystone_endpoint <||> -> Service['ironic-neutron-agent']
420
-
421
-class { '::neutron::agents::ml2::ovs':
422
-  bridge_mappings => split(hiera('neutron_bridge_mappings'), ','),
423
-}
424
-
425
-neutron_config {
426
-  'DEFAULT/notification_driver': value => 'messaging';
427
-}
428
-
429
-# swift proxy
430
-include ::memcached
431
-include ::swift::proxy
432
-include ::swift::ringbuilder
433
-include ::swift::proxy::proxy_logging
434
-include ::swift::proxy::healthcheck
435
-include ::swift::proxy::bulk
436
-include ::swift::proxy::cache
437
-include ::swift::proxy::keystone
438
-include ::swift::proxy::authtoken
439
-include ::swift::proxy::staticweb
440
-include ::swift::proxy::copy
441
-include ::swift::proxy::slo
442
-include ::swift::proxy::dlo
443
-include ::swift::proxy::versioned_writes
444
-include ::swift::proxy::ratelimit
445
-include ::swift::proxy::catch_errors
446
-include ::swift::proxy::tempurl
447
-include ::swift::proxy::formpost
448
-include ::swift::objectexpirer
449
-include ::swift::config
450
-
451
-# swift storage
452
-class { '::swift::storage::all':
453
-  mount_check    => str2bool(hiera('swift_mount_check')),
454
-  allow_versions => true,
455
-}
456
-if(!defined(File['/srv/node'])) {
457
-  file { '/srv/node':
458
-    ensure  => directory,
459
-    owner   => 'swift',
460
-    group   => 'swift',
461
-    require => Package['swift'],
462
-  }
463
-}
464
-# This is no longer automatically created by Swift itself
465
-file { '/srv/node/1':
466
-    ensure  => directory,
467
-    owner   => 'swift',
468
-    group   => 'swift',
469
-    require => File['/srv/node'],
470
-}
471
-$swift_components = ['account', 'container', 'object']
472
-swift::storage::filter::recon { $swift_components : }
473
-swift::storage::filter::healthcheck { $swift_components : }
474
-
475
-$controller_host = hiera('controller_host_wrapped')
476
-ring_object_device { "${controller_host}:6000/1":
477
-  zone   => 1,
478
-  weight => 1,
479
-}
480
-Ring_object_device<||> ~> Service['swift-proxy-server']
481
-ring_container_device { "${controller_host}:6001/1":
482
-  zone   => 1,
483
-  weight => 1,
484
-}
485
-Ring_container_device<||> ~> Service['swift-proxy-server']
486
-ring_account_device { "${controller_host}:6002/1":
487
-  zone   => 1,
488
-  weight => 1,
489
-}
490
-Ring_account_device<||> ~> Service['swift-proxy-server']
491
-
492
-# Ensure rsyslog catches up change in /etc/rsyslog.d and forwards logs
493
-exec { 'restart rsyslog':
494
-  command => '/bin/systemctl restart rsyslog',
495
-}
496
-
497
-# Apache
498
-include ::apache
499
-
500
-# Heat
501
-class { '::heat':
502
-  debug                        => hiera('debug'),
503
-  keystone_ec2_uri             => join([hiera('keystone_auth_uri'), '/ec2tokens']),
504
-  enable_proxy_headers_parsing => $enable_proxy_headers_parsing,
505
-  heat_clients_endpoint_type   => hiera('heat_clients_endpoint_type', 'internal'),
506
-}
507
-include ::heat::api
508
-include ::heat::wsgi::apache_api
509
-include ::heat::api_cfn
510
-include ::heat::wsgi::apache_api_cfn
511
-include ::heat::engine
512
-include ::heat::keystone::domain
513
-include ::heat::cron::purge_deleted
514
-include ::heat::cors
515
-include ::heat::config
516
-
517
-include ::keystone::roles::admin
518
-
519
-include ::nova::compute::ironic
520
-include ::nova::network::neutron
521
-include ::nova::cors
522
-
523
-# Ironic
524
-
525
-include ::ironic
526
-include ::ironic::api
527
-include ::ironic::wsgi::apache
528
-include ::ironic::conductor
529
-include ::ironic::drivers::ansible
530
-include ::ironic::drivers::drac
531
-include ::ironic::drivers::ilo
532
-include ::ironic::drivers::inspector
533
-include ::ironic::drivers::interfaces
534
-include ::ironic::drivers::ipmi
535
-include ::ironic::drivers::pxe
536
-include ::ironic::drivers::redfish
537
-include ::ironic::drivers::staging
538
-include ::ironic::glance
539
-include ::ironic::inspector
540
-include ::ironic::inspector::cors
541
-include ::ironic::inspector::pxe_filter
542
-include ::ironic::inspector::pxe_filter::dnsmasq
543
-include ::ironic::neutron
544
-include ::ironic::pxe
545
-include ::ironic::service_catalog
546
-include ::ironic::swift
547
-include ::ironic::cors
548
-include ::ironic::config
549
-
550
-Keystone_endpoint<||> -> Service['ironic-inspector']
551
-
552
-# https://bugs.launchpad.net/tripleo/+bug/1663273
553
-Keystone_endpoint <||> -> Service['nova-compute']
554
-Keystone_service <||> -> Service['nova-compute']
555
-
556
-# This is a workaround for a race between nova-compute and ironic
557
-# conductor.  When https://bugs.launchpad.net/tripleo/+bug/1777608 is
558
-# fixed this can be removed.  Currently we wait 1 minutes for the
559
-# ironic conductor service to be ready. As puppet can order thing its
560
-# own way and be slow (especially in CI env) we can have services
561
-# started at more than one minute appart, hence the need for it.
562
-Service[$::ironic::params::conductor_service] -> Service[$::nova::params::compute_service_name]
563
-
564
-if str2bool(hiera('enable_tempest', true)) {
565
-  # tempest
566
-  package{'openstack-tempest': }
567
-  # needed for /bin/subunit-2to1 (called by run_tempest.sh)
568
-  package{'subunit-filters': }
569
-}
570
-
571
-# Ensure dm thin-pool is never activated. This avoids an issue
572
-# where the instack host (in this case on a VM) was crashing due to
573
-# activation of the docker thin-pool associated with the atomic host.
574
-augeas { 'lvm.conf':
575
-  require => Package['nova-compute'],
576
-  context => '/files/etc/lvm/lvm.conf/devices/dict/',
577
-  changes => 'set global_filter/list/1/str "r|^/dev/disk/by-path/ip.*iscsi.*\.org\.openstack:.*|"'
578
-}
579
-
580
-if str2bool(hiera('enable_docker_registry', true)) {
581
-  ensure_resource('group', 'docker', {
582
-    'ensure' => 'present',
583
-  })
584
-  ensure_resource('user', 'docker_user', {
585
-    'name'   => hiera('tripleo_install_user'),
586
-    'groups' => 'docker',
587
-    'notify' => Service['docker'],
588
-  })
589
-  include ::tripleo::profile::base::docker_registry
590
-}
591
-
592
-include ::mistral
593
-$mistral_dsn = match(hiera('mistral::database_connection'), $re_dsn)
594
-class { '::mistral::db::mysql':
595
-  user          => $mistral_dsn[1],
596
-  password      => $mistral_dsn[2],
597
-  host          => $mistral_dsn[3],
598
-  dbname        => $mistral_dsn[4],
599
-  allowed_hosts => $allowed_hosts,
600
-}
601
-include ::mistral::keystone::auth
602
-include ::mistral::db::sync
603
-include ::mistral::api
604
-include ::mistral::engine
605
-ensure_resource('user', 'mistral', {
606
-  'name'   => 'mistral',
607
-  'groups' => 'docker',
608
-})
609
-include ::mistral::executor
610
-include ::mistral::cors
611
-include ::mistral::cron_trigger
612
-include ::mistral::config
613
-
614
-# ensure TripleO common entrypoints for custom Mistral actions
615
-# are installed before performing the Mistral action population
616
-package {'openstack-tripleo-common': }
617
-Package['openstack-tripleo-common'] ~> Exec['mistral-db-populate']
618
-# If ironic inspector is not running, mistral-db-populate will have invalid
619
-# actions for it.
620
-Class['::ironic::inspector'] ~> Exec['mistral-db-populate']
621
-# db-populate calls inspectorclient, which will use the keystone endpoint to
622
-# check inspector's version. So that's needed before db-populate is executed.
623
-Class['::ironic::keystone::auth_inspector']  ~> Exec['mistral-db-populate']
624
-
625
-if str2bool(hiera('enable_ui', true)) {
626
-  include ::tripleo::ui
627
-}
628
-
629
-if str2bool(hiera('enable_validations', true)) {
630
-  include ::tripleo::profile::base::validations
631
-}
632
-
633
-include ::zaqar
634
-$zaqar_dsn = match(hiera('zaqar::management::sqlalchemy::uri'), $re_dsn)
635
-class { '::zaqar::db::mysql':
636
-  user          => $zaqar_dsn[1],
637
-  password      => $zaqar_dsn[2],
638
-  host          => $zaqar_dsn[3],
639
-  dbname        => $zaqar_dsn[4],
640
-  allowed_hosts => $allowed_hosts,
641
-}
642
-include ::zaqar::db::sync
643
-include ::zaqar::management::sqlalchemy
644
-include ::zaqar::messaging::swift
645
-include ::zaqar::keystone::auth
646
-include ::zaqar::keystone::auth_websocket
647
-include ::zaqar::transport::websocket
648
-include ::zaqar::transport::wsgi
649
-
650
-include ::zaqar::server
651
-include ::zaqar::wsgi::apache
652
-include ::zaqar::config
653
-
654
-zaqar::server_instance{ '1':
655
-  transport => 'websocket'
656
-}
657
-
658
-if str2bool(hiera('enable_cinder', true)) {
659
-  $cinder_dsn = match(hiera('cinder::database_connection'), $re_dsn)
660
-  class { '::cinder::db::mysql':
661
-    user          => $cinder_dsn[1],
662
-    password      => $cinder_dsn[2],
663
-    host          => $cinder_dsn[3],
664
-    dbname        => $cinder_dsn[4],
665
-    allowed_hosts => $allowed_hosts,
666
-  }
667
-  include ::cinder::keystone::auth
668
-
669
-  include ::cinder
670
-  include ::cinder::api
671
-  include ::cinder::cron::db_purge
672
-  include ::cinder::config
673
-  include ::cinder::glance
674
-  include ::cinder::scheduler
675
-  include ::cinder::volume
676
-  include ::cinder::wsgi::apache
677
-
678
-  $cinder_backend_name = hiera('cinder_backend_name')
679
-  cinder::backend::iscsi { $cinder_backend_name:
680
-    iscsi_ip_address => hiera('cinder_iscsi_address'),
681
-    iscsi_helper     => 'lioadm',
682
-    iscsi_protocol   => 'iscsi'
683
-  }
684
-
685
-  include ::cinder::backends
686
-
687
-  if str2bool(hiera('cinder_enable_test_volume', false)) {
688
-    include ::cinder::setup_test_volume
689
-  }
690
-}
691
-
692
-# firewalld is a dependency of some anaconda packages, so we need to use purge
693
-# to ensure all the things that it might be a dependency for are also
694
-# removed. See LP#1669915
695
-ensure_resource('package', 'firewalld', {
696
-  'ensure' => 'purged',
697
-})
698
-ensure_resource('package', 'openstack-selinux')
699
-ensure_resource('package', 'parted')
700
-ensure_resource('package', 'psmisc')
701
-
702
-include ::tripleo::profile::base::sshd
703
-
704
-# Swift is using only a single replica on the undercloud. Therefore recovering
705
-# from a corrupted or lost object is not possible, and running replicators and
706
-# auditors only wastes resources.
707
-$needless_services = [
708
-  'swift-account-auditor',
709
-  'swift-account-replicator',
710
-  'swift-container-auditor',
711
-  'swift-container-replicator',
712
-  'swift-object-auditor',
713
-  'swift-object-replicator']
714
-
715
-Service[$needless_services] {
716
-  enable => false,
717
-  ensure => stopped,
718
-}
719
-
720
-# novajoin install
721
-if str2bool(hiera('enable_novajoin', false)) {
722
-  include ::nova::metadata::novajoin::auth
723
-  include ::nova::metadata::novajoin::api
724
-}
725
-
726
-# Any special handling that need to be done during the upgrade.
727
-if str2bool($::undercloud_upgrade) {
728
-  # Noop
729
-}

+ 0
- 1049
elements/puppet-stack-config/puppet-stack-config.yaml.template
File diff suppressed because it is too large
View File


+ 0
- 1
elements/undercloud-install/element-provides View File

@@ -1 +0,0 @@
1
-operating-system

+ 0
- 3
elements/undercloud-install/os-apply-config/etc/os-net-config/config.json View File

@@ -1,3 +0,0 @@
1
-{{#os_net_config}}
2
-{{.}}
3
-{{/os_net_config}}

+ 0
- 46
elements/undercloud-install/os-apply-config/root/stackrc View File

@@ -1,46 +0,0 @@
1
-# Clear any old environment that may conflict.
2
-for key in $( set | awk '{FS="="}  /^OS_/ {print $1}' ); do unset $key ; done
3
-NOVA_VERSION=1.1
4
-export NOVA_VERSION
5
-OS_PASSWORD={{admin_password}}
6
-export OS_PASSWORD
7
-OS_AUTH_TYPE=password
8
-export OS_AUTH_TYPE
9
-{{#service_certificate}}
10
-OS_AUTH_URL=https://{{public_host}}:13000/
11
-PYTHONWARNINGS="ignore:Certificate has no, ignore:A true SSLContext object is not available"
12
-export OS_AUTH_URL
13
-export PYTHONWARNINGS
14
-{{/service_certificate}}
15
-{{^service_certificate}}
16
-OS_AUTH_URL=http://{{local-ip-wrapped}}:5000/
17
-export OS_AUTH_URL
18
-{{/service_certificate}}
19
-OS_USERNAME=admin
20
-OS_PROJECT_NAME=admin
21
-COMPUTE_API_VERSION=1.1
22
-# 1.34 is the latest API version in Ironic Pike supported by ironicclient
23
-IRONIC_API_VERSION=1.34
24
-OS_BAREMETAL_API_VERSION=$IRONIC_API_VERSION
25
-OS_NO_CACHE=True
26
-OS_CLOUDNAME=undercloud
27
-export OS_USERNAME
28
-export OS_PROJECT_NAME
29
-export COMPUTE_API_VERSION
30
-export IRONIC_API_VERSION
31
-export OS_BAREMETAL_API_VERSION
32
-export OS_NO_CACHE
33
-export OS_CLOUDNAME
34
-OS_IDENTITY_API_VERSION='3'
35
-export OS_IDENTITY_API_VERSION
36
-OS_PROJECT_DOMAIN_NAME='Default'
37
-export OS_PROJECT_DOMAIN_NAME
38
-OS_USER_DOMAIN_NAME='Default'
39
-export OS_USER_DOMAIN_NAME
40
-
41
-# Add OS_CLOUDNAME to PS1
42
-if [ -z "${CLOUDPROMPT_ENABLED:-}" ]; then
43
-    export PS1=${PS1:-""}
44
-    export PS1=\${OS_CLOUDNAME:+"(\$OS_CLOUDNAME)"}\ $PS1
45
-    export CLOUDPROMPT_ENABLED=1
46
-fi

+ 0
- 1
elements/undercloud-install/os-apply-config/root/stackrc.oac View File

@@ -1 +0,0 @@
1
-mode: 0600

+ 0
- 24
elements/undercloud-install/os-apply-config/root/tripleo-undercloud-passwords View File

@@ -1,24 +0,0 @@
1
-UNDERCLOUD_ADMIN_PASSWORD=$(sudo hiera admin_password)
2
-UNDERCLOUD_ADMIN_TOKEN=$(sudo hiera keystone::admin_token)
3
-UNDERCLOUD_CEILOMETER_METERING_SECRET=$(sudo hiera ceilometer::metering_secret)
4
-UNDERCLOUD_CEILOMETER_PASSWORD=$(sudo hiera ceilometer::keystone::authtoken::password)
5
-UNDERCLOUD_CEILOMETER_SNMPD_PASSWORD=$(sudo hiera snmpd_readonly_user_password)
6
-UNDERCLOUD_CEILOMETER_SNMPD_USER=$(sudo hiera snmpd_readonly_user_name)
7
-UNDERCLOUD_DB_PASSWORD=$(sudo hiera admin_password)
8
-UNDERCLOUD_GLANCE_PASSWORD=$(sudo hiera glance::api::keystone_password)
9
-UNDERCLOUD_HAPROXY_STATS_PASSWORD=$(sudo hiera tripleo::haproxy::haproxy_stats_password)
10
-UNDERCLOUD_HEAT_ENCRYPTION_KEY=$(sudo hiera heat::engine::auth_encryption_key)
11
-UNDERCLOUD_HEAT_PASSWORD=$(sudo hiera heat::keystone_password)
12
-UNDERCLOUD_HEAT_STACK_DOMAIN_ADMIN_PASSWORD=$(sudo hiera heat_stack_domain_admin_password)
13
-UNDERCLOUD_HORIZON_SECRET_KEY=$(sudo hiera horizon_secret_key)
14
-UNDERCLOUD_IRONIC_PASSWORD=$(sudo hiera ironic::api::authtoken::password)
15
-UNDERCLOUD_NEUTRON_PASSWORD=$(sudo hiera neutron::server::auth_password)
16
-UNDERCLOUD_NOVA_PASSWORD=$(sudo hiera nova::keystone::authtoken::password)
17
-UNDERCLOUD_RABBIT_COOKIE=$(sudo hiera rabbit_cookie)
18
-UNDERCLOUD_RABBIT_PASSWORD=$(sudo hiera rabbit_password)
19
-UNDERCLOUD_RABBIT_USERNAME=$(sudo hiera rabbit_username)
20
-UNDERCLOUD_SWIFT_HASH_SUFFIX=$(sudo hiera swift::swift_hash_suffix)
21
-UNDERCLOUD_SWIFT_PASSWORD=$(sudo hiera swift::proxy::authtoken::admin_password)
22
-UNDERCLOUD_MISTRAL_PASSWORD=$(sudo hiera mistral::admin_password)
23
-UNDERCLOUD_ZAQAR_PASSWORD=$(sudo hiera zaqar::keystone::authtoken::password)
24
-UNDERCLOUD_CINDER_PASSWORD=$(sudo hiera cinder::keystone::authtoken::password)

+ 0
- 1
elements/undercloud-install/os-apply-config/root/tripleo-undercloud-passwords.oac View File

@@ -1 +0,0 @@
1
-mode: 0600

+ 0
- 29
elements/undercloud-install/os-apply-config/var/opt/undercloud-stack/masquerade View File

@@ -1,29 +0,0 @@
1
-# In case this script crashed or was interrupted earlier, flush, unlink and
2
-# delete the temp chain.
3
-IPTCOMMAND=iptables
4
-if [[ {{local-ip}} =~ : ]] ; then
5
-    IPTCOMMAND=ip6tables
6
-fi
7
-$IPTCOMMAND -w -t nat -F BOOTSTACK_MASQ_NEW || true
8
-$IPTCOMMAND -w -t nat -D POSTROUTING -j BOOTSTACK_MASQ_NEW || true
9
-$IPTCOMMAND -w -t nat -X BOOTSTACK_MASQ_NEW || true
10
-$IPTCOMMAND -w -t nat -N BOOTSTACK_MASQ_NEW
11
-# Build the chain we want.
12
-{{#masquerade_networks}}
13
-NETWORK={{.}}
14
-NETWORKS={{#masquerade_networks}}{{.}},{{/masquerade_networks}}
15
-# Shell substitution to remove the traling comma
16
-NETWORKS=${NETWORKS%?}
17
-$IPTCOMMAND -w -t nat -A BOOTSTACK_MASQ_NEW -s $NETWORK -d $NETWORKS -j RETURN
18
-$IPTCOMMAND -w -t nat -A BOOTSTACK_MASQ_NEW -s $NETWORK -j MASQUERADE
19
-{{/masquerade_networks}}
20
-# Link it in.
21
-$IPTCOMMAND -w -t nat -I POSTROUTING -j BOOTSTACK_MASQ_NEW
22
-# Delete the old chain if present.
23
-$IPTCOMMAND -w -t nat -F BOOTSTACK_MASQ || true
24
-$IPTCOMMAND -w -t nat -D POSTROUTING -j BOOTSTACK_MASQ || true
25
-$IPTCOMMAND -w -t nat -X BOOTSTACK_MASQ || true
26
-# Rename the new chain into permanence.
27
-$IPTCOMMAND -w -t nat -E BOOTSTACK_MASQ_NEW BOOTSTACK_MASQ
28
-# remove forwarding rule (fixes bug 1183099)
29
-$IPTCOMMAND -w -D FORWARD -j REJECT --reject-with icmp-host-prohibited || true

+ 0
- 11
elements/undercloud-install/os-refresh-config/configure.d/30-reload-keepalived View File

@@ -1,11 +0,0 @@
1
-#!/bin/bash
2
-set -eux
3
-
4
-if systemctl is-enabled keepalived; then
5
-    # This needs to be run after os-net-config, since os-net-config potentially
6
-    # can restart network interfaces, which would affects VIPs controlled by
7
-    # keepalived. So don't just move this up without knowing the consequences.
8
-    # You have been warned.
9
-    systemctl reload keepalived
10
-fi
11
-

+ 0
- 41
elements/undercloud-install/os-refresh-config/post-configure.d/80-seedstack-masquerade View File

@@ -1,41 +0,0 @@
1
-#!/bin/bash
2
-set -eux
3
-
4
-RULES_SCRIPT=/var/opt/undercloud-stack/masquerade
5
-
6
-. $RULES_SCRIPT
7
-
8
-iptables-save > /etc/sysconfig/iptables
9
-
10
-
11
-# We are specifically running the following commands after the
12
-# iptables rules to ensure the persisted file does not contain any
13
-# ephemeral neutron rules. Neutron assumes the iptables rules are not
14
-# persisted so it may cause an issue if the rule is loaded on boot
15
-# (or via iptables restart). If an operator needs to reload iptables
16
-# for any reason, they may need to manually reload the appropriate
17
-# neutron agent to restore these iptables rules.
18
-# https://bugzilla.redhat.com/show_bug.cgi?id=1541528
19
-if /bin/test -f /etc/sysconfig/iptables && /bin/grep -q neutron- /etc/sysconfig/iptables
20
-then
21
-    /bin/sed -i /neutron-/d /etc/sysconfig/iptables
22
-fi
23
-
24
-if /bin/test -f /etc/sysconfig/ip6tables && /bin/grep -q neutron- /etc/sysconfig/ip6tables
25
-then
26
-    /bin/sed -i /neutron-/d /etc/sysconfig/ip6tables
27
-fi
28
-
29
-
30
-# Do not persist ephemeral firewall rules managed by ironic-inspector
31
-# pxe_filter 'iptables' driver.
32
-# https://bugs.launchpad.net/tripleo/+bug/1765700
33
-if /bin/test -f /etc/sysconfig/iptables && /bin/grep -v "\-m comment \--comment" /etc/sysconfig/iptables | /bin/grep -q ironic-inspector
34
-then
35
-    /bin/sed -i "/-m comment --comment.*ironic-inspector/p;/ironic-inspector/d" /etc/sysconfig/iptables
36
-fi
37
-
38
-if /bin/test -f /etc/sysconfig/ip6tables && /bin/grep -v "\-m comment \--comment" /etc/sysconfig/ip6tables | /bin/grep -q ironic-inspector
39
-then
40
-    /bin/sed -i "/-m comment --comment.*ironic-inspector/p;/ironic-inspector/d" /etc/sysconfig/ip6tables
41
-fi

+ 0
- 44
elements/undercloud-install/os-refresh-config/post-configure.d/98-undercloud-setup View File

@@ -1,44 +0,0 @@
1
-#!/bin/bash
2
-
3
-set -eux
4
-
5
-source /root/tripleo-undercloud-passwords
6
-source /root/stackrc
7
-
8
-INSTACK_ROOT=${INSTACK_ROOT:-""}
9
-export INSTACK_ROOT
10
-if [ -n "$INSTACK_ROOT" ]; then
11
-    PATH=$PATH:$INSTACK_ROOT/instack-undercloud/scripts
12
-    export PATH
13
-fi
14
-
15
-if [ ! -f /root/.ssh/authorized_keys ]; then
16
-    sudo mkdir -p /root/.ssh
17
-    sudo chmod 7000 /root/.ssh/
18
-    sudo touch /root/.ssh/authorized_keys
19
-    sudo chmod 600 /root/.ssh/authorized_keys
20
-fi
21
-
22
-if [ ! -f /root/.ssh/id_rsa ]; then
23
-    ssh-keygen -b 1024 -N '' -f /root/.ssh/id_rsa
24
-fi
25
-
26
-cat /root/.ssh/id_rsa.pub >> /root/.ssh/authorized_keys
27
-
28
-if [ -e /usr/sbin/getenforce ]; then
29
-    if [ "$(getenforce)" == "Enforcing" ]; then
30
-        set +e
31
-        selinux_wrong_permission="$(find /root/.ssh/ -exec ls -lZ {} \; | grep -v 'ssh_home_t')"
32
-        set -e
33
-        if [ -n "${selinux_wrong_permission}" ]; then
34
-            semanage fcontext -a -t ssh_home_t '/root/.ssh(/.*)?'
35
-            restorecon -R /root/.ssh/
36
-        fi
37
-    fi
38
-fi
39
-
40
-# Disable nova quotas
41
-openstack quota set --cores -1 --instances -1 --ram -1 $(openstack project show admin | awk '$2=="id" {print $4}')
42
-
43
-# instack-prepare-for-overcloud
44
-rm -rf $HOME/.novaclient

+ 0
- 66
imagefactory/Makefile View File

@@ -1,66 +0,0 @@
1
-utility-image:
2
-	imagefactory --debug base_image \
3
-		--file-parameter install_script \
4
-		utility_image.ks utility_image.tdl
5
-
6
-input-image:
7
-	imagefactory --debug base_image \
8
-		--file-parameter install_script \
9
-		input_image.ks input_image.tdl
10
-
11
-overcloud-images: overcloud-control overcloud-compute overcloud-cinder-volume overcloud-swift-storage deploy-ramdisk-ironic discovery-ramdisk
12
-	
13
-overcloud-control:
14
-	imagefactory --debug \
15
-		target_image \
16
-		--id $(INPUT_IMAGE_ID) \
17
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
18
-		--file-parameter utility_customizations dib_overcloud_control.tdl \
19
-		--parameter results_location "/overcloud-control.tar" indirection
20
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
21
-
22
-overcloud-compute:
23
-	imagefactory --debug \
24
-		target_image \
25
-		--id $(INPUT_IMAGE_ID) \
26
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
27
-		--file-parameter utility_customizations dib_overcloud_compute.tdl \
28
-		--parameter results_location "/overcloud-compute.tar" indirection
29
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
30
-
31
-overcloud-cinder-volume:
32
-	imagefactory --debug \
33
-		target_image \
34
-		--id $(INPUT_IMAGE_ID) \
35
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
36
-		--file-parameter utility_customizations dib_overcloud_cinder_volume.tdl \
37
-		--parameter results_location "/overcloud-cinder-volume.tar" indirection
38
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
39
-
40
-overcloud-swift-storage:
41
-	imagefactory --debug \
42
-		target_image \
43
-		--id $(INPUT_IMAGE_ID) \
44
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
45
-		--file-parameter utility_customizations dib_overcloud_swift_storage.tdl \
46
-		--parameter results_location "/overcloud-swift-storage.tar" indirection
47
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
48
-
49
-deploy-ramdisk-ironic:
50
-	imagefactory --debug \
51
-		target_image \
52
-		--id $(INPUT_IMAGE_ID) \
53
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
54
-		--file-parameter utility_customizations dib_deploy_ramdisk_ironic.tdl \
55
-		--parameter results_location "/deploy-ramdisk-ironic.tar" indirection
56
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
57
-
58
-discovery-ramdisk:
59
-	imagefactory --debug \
60
-		target_image \
61
-		--id $(INPUT_IMAGE_ID) \
62
-		--parameter utility_image $(UTILITY_IMAGE_ID) \
63
-		--file-parameter utility_customizations dib_discovery_ramdisk.tdl \
64
-		--parameter results_location "/discovery-ramdisk.tar" indirection
65
-	tar -x -f $$(ls -1tr /var/lib/imagefactory/storage/*.body | tail -n 1)
66
-

+ 0
- 12
imagefactory/dib_deploy_ramdisk_ironic.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images deploy-ramdisk
9
-</command>
10
-<command name="tar">tar cf /mnt/deploy-ramdisk-ironic.tar deploy-ramdisk-ironic.initramfs deploy-ramdisk-ironic.kernel</command>
11
-</commands>
12
-</template>

+ 0
- 12
imagefactory/dib_discovery_ramdisk.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images discovery-ramdisk
9
-</command>
10
-<command name="tar">tar cf /mnt/discovery-ramdisk.tar discovery-ramdisk.initramfs discovery-ramdisk.kernel</command>
11
-</commands>
12
-</template>

+ 0
- 12
imagefactory/dib_overcloud_cinder_volume.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images overcloud-cinder-volume
9
-</command>
10
-<command name="tar">tar cf /mnt/overcloud-cinder-volume.tar overcloud-cinder-volume.qcow2 overcloud-cinder-volume.vmlinuz overcloud-cinder-volume.initrd</command>
11
-</commands>
12
-</template>

+ 0
- 12
imagefactory/dib_overcloud_compute.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images overcloud-compute
9
-</command>
10
-<command name="tar">tar cf /mnt/overcloud-compute.tar overcloud-compute.qcow2 overcloud-compute.vmlinuz overcloud-compute.initrd</command>
11
-</commands>
12
-</template>

+ 0
- 12
imagefactory/dib_overcloud_control.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images overcloud-control
9
-</command>
10
-<command name="tar">tar cf /mnt/overcloud-control.tar overcloud-control.qcow2 overcloud-control.vmlinuz overcloud-control.initrd</command>
11
-</commands>
12
-</template>

+ 0
- 12
imagefactory/dib_overcloud_swift_storage.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-<commands>
3
-   <command name='mount'>mount /dev/vdb1 /mnt</command>
4
-   <command name='backup'>cp /etc/sudoers /etc/sudoers_backup</command>
5
-   <command name='pty'>sed 's/.*requiretty//g' /etc/sudoers_backup > /etc/sudoers</command>
6
-   <command name='convert'>qemu-img convert -O qcow2 /mnt/input_image.raw /mnt/input_image.qcow2</command>
7
-   <command name="localimage">export DIB_LOCAL_IMAGE=/mnt/input_image.qcow2
8
-instack-build-images overcloud-swift-storage
9
-</command>
10
-<command name="tar">tar cf /mnt/overcloud-swift-storage.tar overcloud-swift-storage.qcow2 overcloud-swift-storage.vmlinuz overcloud-swift-storage.initrd</command>
11
-</commands>
12
-</template>

+ 0
- 26
imagefactory/input_image.ks View File

@@ -1,26 +0,0 @@
1
-url --url=http://download.eng.brq.redhat.com/pub/fedora/releases/20/Fedora/x86_64/os/
2
-# Without the Everything repo, we cannot install cloud-init
3
-repo --name="fedora-everything" --baseurl=http://download.eng.brq.redhat.com/pub/fedora/releases/20/Everything/x86_64/os/
4
-install
5
-text
6
-keyboard us
7
-lang en_US.UTF-8
8
-skipx
9
-network --device eth0 --bootproto dhcp
10
-rootpw ROOTPW
11
-firewall --disabled
12
-authconfig --enableshadow --enablemd5
13
-selinux --enforcing
14
-timezone --utc America/New_York
15
-bootloader --location=mbr --append="console=tty0 console=ttyS0,115200"
16
-zerombr
17
-clearpart --all --drives=vda
18
-part / --fstype="ext4" --size=3000
19
-reboot
20
-
21
-%packages
22
-@core
23
-cloud-init
24
-tar
25
-
26
-%end

+ 0
- 12
imagefactory/input_image.tdl View File

@@ -1,12 +0,0 @@
1
-<template>
2
-  <name>f20-jeos</name>
3
-  <os>
4
-    <name>Fedora</name>
5
-    <version>20</version>
6
-    <arch>x86_64</arch>
7
-    <install type='url'>
8
-      <url>http://download.eng.brq.redhat.com/pub/fedora/releases/20/Fedora/x86_64/os/</url>
9
-    </install>
10
-  </os>
11
-  <description>Fedora 20 JEOS Image</description>
12
-</template>

+ 0
- 41
imagefactory/utility_image.ks View File

@@ -1,41 +0,0 @@
1
-url --url=http://download.eng.brq.redhat.com/pub/fedora/releases/20/Fedora/x86_64/os/
2
-# Without the Everything repo, we cannot install cloud-init
3
-repo --name="fedora-everything" --baseurl=http://download.eng.brq.redhat.com/pub/fedora/releases/20/Everything/x86_64/os/
4
-repo --name="updates" --baseurl=http://download.eng.brq.redhat.com/pub/fedora/linux/updates/20/x86_64/
5
-repo --name=openstack --baseurl=http://repos.fedorapeople.org/repos/openstack/openstack-juno/fedora-20/
6
-
7
-# Uncomment the following line to use the copr repository
8
-# repo --name=copr-openstack-m --baseurl=http://copr-be.cloud.fedoraproject.org/results/slagle/openstack-m/fedora-$releasever-$basearch/
9
-
10
-install
11
-text
12
-keyboard us
13
-lang en_US.UTF-8
14
-
15
-skipx
16
-
17
-network --device eth0 --bootproto dhcp
18
-rootpw ROOTPW
19
-firewall --disabled
20
-authconfig --enableshadow --enablemd5
21
-selinux --enforcing
22
-timezone --utc America/New_York
23
-bootloader --location=mbr --append="console=tty0 console=ttyS0,115200"
24
-zerombr
25
-clearpart --all --drives=vda
26
-
27
-part biosboot --fstype=biosboot --size=1
28
-part /boot --fstype ext4 --size=200 --ondisk=vda
29
-part pv.2 --size=1 --grow --ondisk=vda
30
-volgroup VolGroup00 --pesize=32768 pv.2
31
-logvol swap --fstype swap --name=LogVol01 --vgname=VolGroup00 --size=768 --grow --maxsize=1536
32
-logvol / --fstype ext4 --name=LogVol00 --vgname=VolGroup00 --size=1024 --grow
33
-reboot
34
-
35
-%packages
36
-@core
37
-qemu-img
38
-instack-undercloud
39
-git
40
-%end
41
-

+ 0
- 15
imagefactory/utility_image.tdl View File

@@ -1,15 +0,0 @@
1
-<template>
2
-  <name>f20-jeos</name>
3
-  <os>
4
-    <name>Fedora</name>
5
-    <version>20</version>
6
-    <arch>x86_64</arch>
7
-    <install type='url'>
8
-      <url>http://download.eng.brq.redhat.com/pub/fedora/releases/20/Fedora/x86_64/os/</url>
9
-    </install>
10
-  </os>
11
-  <disk>
12
-    <size>40</size>
13
-  </disk>
14
-  <description>Fedora 20 JEOS Image</description>
15
-</template>

+ 0
- 18
instack_undercloud/__init__.py View File

@@ -1,18 +0,0 @@
1
-# -*- coding: utf-8 -*-
2
-
3
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
4
-# not use this file except in compliance with the License. You may obtain
5
-# a copy of the License at
6
-#
7
-#      http://www.apache.org/licenses/LICENSE-2.0
8
-#
9
-# Unless required by applicable law or agreed to in writing, software
10
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12
-# License for the specific language governing permissions and limitations
13
-# under the License.
14
-
15
-import pbr.version
16
-
17
-
18
-__version__ = pbr.version.VersionInfo('instack_undercloud')

+ 0
- 0
instack_undercloud/tests/__init__.py View File


+ 0
- 1635
instack_undercloud/tests/test_undercloud.py
File diff suppressed because it is too large
View File


+ 0
- 274
instack_undercloud/tests/test_validator.py View File

@@ -1,274 +0,0 @@
1
-# Copyright 2015 Red Hat Inc.
2
-#
3
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
4
-# not use this file except in compliance with the License. You may obtain
5
-# a copy of the License at
6
-#
7
-#      http://www.apache.org/licenses/LICENSE-2.0
8
-#
9
-# Unless required by applicable law or agreed to in writing, software
10
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12
-# License for the specific language governing permissions and limitations
13
-# under the License.
14
-
15
-import mock
16
-
17
-from oslo_config import fixture as config_fixture
18
-from oslo_config import cfg
19
-from oslotest import base
20
-
21
-from instack_undercloud import undercloud
22
-from instack_undercloud import validator
23
-
24
-
25
-class TestValidator(base.BaseTestCase):
26
-    def setUp(self):
27
-        super(TestValidator, self).setUp()
28
-        self.conf = self.useFixture(config_fixture.Config())
29
-        # ctlplane-subnet - config group options
30
-        self.grp0 = cfg.OptGroup(name='ctlplane-subnet',
31
-                                 title='ctlplane-subnet')
32
-        self.opts = [cfg.StrOpt('cidr'),
33
-                     cfg.StrOpt('dhcp_start'),
34
-                     cfg.StrOpt('dhcp_end'),
35
-                     cfg.StrOpt('inspection_iprange'),
36
-                     cfg.StrOpt('gateway'),
37
-                     cfg.BoolOpt('masquerade')]
38
-        self.conf.register_opts(self.opts, group=self.grp0)
39
-        self.grp1 = cfg.OptGroup(name='subnet1', title='subnet1')
40
-        self.conf.config(cidr='192.168.24.0/24',
41
-                         dhcp_start='192.168.24.5', dhcp_end='192.168.24.24',
42
-                         inspection_iprange='192.168.24.100,192.168.24.120',
43
-                         gateway='192.168.24.1', masquerade=True,
44
-                         group='ctlplane-subnet')
45
-
46
-    @mock.patch('netifaces.interfaces')
47
-    def test_validation_passes(self, ifaces_mock):
48
-        ifaces_mock.return_value = ['eth1']
49
-        undercloud._validate_network()
50
-
51
-    def test_fail_on_local_ip(self):
52
-        self.conf.config(local_ip='193.0.2.1/24')
53
-        self.assertRaises(validator.FailedValidation,
54
-                          undercloud._validate_network)
55
-
56
-    def test_fail_on_network_gateway(self):
57
-        self.conf.config(gateway='193.0.2.1', group='ctlplane-subnet')
58
-        self.assertRaises(validator.FailedValidation,
59
-                          undercloud._validate_network)
60
-
61
-    def test_fail_on_dhcp_start(self):
62
-        self.conf.config(dhcp_start='193.0.2.10', group='ctlplane-subnet')
63
-        self.assertRaises(validator.FailedValidation,
64
-                          undercloud._validate_network)
65
-
66
-    def test_fail_on_dhcp_end(self):
67
-        self.conf.config(dhcp_end='193.0.2.10', group='ctlplane-subnet')
68
-        self.assertRaises(validator.FailedValidation,
69
-                          undercloud._validate_network)
70
-
71
-    def test_fail_on_inspection_start(self):
72
-        self.conf.config(inspection_iprange='193.0.2.100,192.168.24.120',
73
-                         group='ctlplane-subnet')
74
-        self.assertRaises(validator.FailedValidation,
75
-                          undercloud._validate_network)
76
-
77
-    def test_fail_on_inspection_end(self):
78
-        self.conf.config(inspection_iprange='192.168.24.100,193.0.2.120',
79
-                         group='ctlplane-subnet')
80
-        self.assertRaises(validator.FailedValidation,
81
-                          undercloud._validate_network)
82
-
83
-    def test_fail_on_dhcp_order(self):
84
-        self.conf.config(dhcp_start='192.168.24.100', dhcp_end='192.168.24.10',
85
-                         group='ctlplane-subnet')
86
-        self.assertRaises(validator.FailedValidation,
87
-                          undercloud._validate_network)
88
-
89
-    def test_fail_on_dhcp_equal(self):
90
-        self.conf.config(dhcp_start='192.168.24.100',
91
-                         dhcp_end='192.168.24.100', group='ctlplane-subnet')
92
-        self.assertRaises(validator.FailedValidation,
93
-                          undercloud._validate_network)
94
-
95
-    def test_fail_on_inspection_order(self):
96
-        self.conf.config(inspection_iprange='192.168.24.120,192.168.24.100',
97
-                         group='ctlplane-subnet')
98
-        self.assertRaises(validator.FailedValidation,
99
-                          undercloud._validate_network)
100
-
101
-    def test_fail_on_inspection_equal(self):
102
-        self.conf.config(inspection_iprange='192.168.24.120,192.168.24.120',
103
-                         group='ctlplane-subnet')
104
-        self.assertRaises(validator.FailedValidation,
105
-                          undercloud._validate_network)
106
-
107
-    def test_fail_on_range_overlap_1(self):
108
-        self.conf.config(dhcp_start='192.168.24.10', dhcp_end='192.168.24.100',
109
-                         inspection_iprange='192.168.24.90,192.168.24.110',
110
-                         group='ctlplane-subnet')
111
-        self.assertRaises(validator.FailedValidation,
112
-                          undercloud._validate_network)
113
-
114
-    def test_fail_on_range_overlap_2(self):
115
-        self.conf.config(dhcp_start='192.168.24.100',
116
-                         dhcp_end='192.168.24.120',
117
-                         inspection_iprange='192.168.24.90,192.168.24.110',
118
-                         group='ctlplane-subnet')
119
-        self.assertRaises(validator.FailedValidation,
120
-                          undercloud._validate_network)
121
-
122
-    def test_fail_on_range_overlap_3(self):
123
-        self.conf.config(dhcp_start='192.168.24.20', dhcp_end='192.168.24.90',
124
-                         inspection_iprange='192.168.24.10,192.168.24.100',
125
-                         group='ctlplane-subnet')
126
-        self.assertRaises(validator.FailedValidation,
127
-                          undercloud._validate_network)
128
-
129
-    def test_fail_on_range_overlap_4(self):
130
-        self.conf.config(dhcp_start='192.168.24.10', dhcp_end='192.168.24.100',
131
-                         inspection_iprange='192.168.24.20,192.168.24.90',
132
-                         group='ctlplane-subnet')
133
-        self.assertRaises(validator.FailedValidation,
134
-                          undercloud._validate_network)
135
-
136
-    def test_fail_on_invalid_local_ip(self):
137
-        self.conf.config(local_ip='192.168.24.1')
138
-        self.assertRaises(validator.FailedValidation,
139
-                          undercloud._validate_network)
140
-
141
-    def test_fail_on_unqualified_hostname(self):
142
-        self.conf.config(undercloud_hostname='undercloud')
143
-        self.assertRaises(validator.FailedValidation,
144
-                          undercloud._validate_network)
145
-
146
-    def test_no_alter_params(self):
147
-        self.conf.config(cidr='192.168.24.0/24', group='ctlplane-subnet')
148
-        params = {opt.name: self.conf.conf[opt.name]
149
-                  for opt in undercloud._opts}
150
-        params.update(
151
-            {opt.name: self.conf.conf.get('ctlplane-subnet')[opt.name]
152
-             for opt in undercloud._subnets_opts})
153
-        save_params = dict(params)
154
-        validator.validate_config(params, lambda x: None)
155
-        self.assertEqual(save_params, params)
156
-
157
-    @mock.patch('netifaces.interfaces')
158
-    def test_valid_undercloud_nameserver_passes(self, ifaces_mock):
159
-        ifaces_mock.return_value = ['eth1']
160
-        self.conf.config(undercloud_nameservers=['192.168.24.4',
161
-                                                 '192.168.24.5'])
162
-        undercloud._validate_network()
163
-
164
-    def test_invalid_undercloud_nameserver_fails(self):
165
-        self.conf.config(undercloud_nameservers=['Iamthewalrus'])
166
-        self.assertRaises(validator.FailedValidation,
167
-                          undercloud._validate_network)
168
-
169
-    def test_fail_on_invalid_public_host(self):
170
-        self.conf.config(undercloud_public_host='192.0.3.2',
171
-                         undercloud_service_certificate='foo.pem',
172
-                         enable_ui=False)
173
-        self.assertRaises(validator.FailedValidation,
174
-                          undercloud._validate_network)
175
-
176
-    def test_fail_on_invalid_admin_host(self):