openstack/kolla-ansible
Code Issues Proposed changes
8,516 Commits 5 Branches 115 Tags
5190481c08
Commit Graph

8516 Commits

Author SHA1 Message Date
Yotaro Konishi
5190481c08 Support custom_config for trove-taskmanager/conductor 
This patch updates trove configuration tasks to apply custom_config to
trove-taskmanager/conductor.conf.

Currently only trove.conf is custom-configurable, and the file is to be
loaded by trove-api service only. Therefore, we cannot apply
custom_config to trove-taskmanager/conductor services.

Change-Id: I0a64c4f0df32eb87cd91ebd8eafb512575061413
Closes-Bug: #1706883
 2018-03-20 09:01:17 +09:00
Zuul
1ab1c835c4 Merge "Add config necessary to use Barbican with Murano" 2018-03-19 09:17:13 +00:00
Zuul
555a57fe4f Merge "Missing configuration for Trove single tenant" 2018-03-19 09:13:45 +00:00
Zuul
5c66b522a4 Merge "Updated from global requirements" 2018-03-19 08:59:14 +00:00
yufei
2c13a5f258 s/openstack_version/openstack_release/g 
replace openstack_version with openstack_release

Change-Id: Ib7cb3ae220971bbfdaf5e1e382333f6c62fd130a
 2018-03-19 11:37:19 +08:00
OpenStack Proposal Bot
421f060947 Updated from global requirements 
Change-Id: I562fd5272088d387e5d66314e352ff1d38ea0413
 2018-03-17 08:35:39 +00:00
Zuul
b42b1361ee Merge "New murano_auth section in Murano config" 2018-03-16 08:23:13 +00:00
Zuul
a4991c6973 Merge "Security reinforce for apache server" 2018-03-16 08:06:29 +00:00
ellen
62db01caa0 New murano_auth section in Murano config 
Add the new murano_auth section to the Murano config
file so that Murano will deploy application packages.

Change-Id: I8ea7264759742e7af038b4cec346fc7ef7f7edcb
 2018-03-15 10:09:44 -04:00
OpenStack Proposal Bot
76f1ad41df Updated from global requirements 
Change-Id: Ib440c05aa88fcacbe64aadc6e1f9fd38c47d2d57
 2018-03-15 07:04:48 +00:00
Zuul
e655430857 Merge "Specify 'become' for only necessary tasks (Queens roles)" 2018-03-14 17:15:24 +00:00
Jeffrey Zhang
f8cb527f78 Security reinforce for apache server 
Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c
 2018-03-14 18:14:26 +08:00
Zuul
3011f56eff Merge "Updated from global requirements" 2018-03-14 07:28:43 +00:00
Zuul
d10e614876 Merge "Update kolla_internal_vip_address to kolla_internal_fqdn" 2018-03-14 07:26:14 +00:00
Zuul
7dc385577f Merge "Add a configuration about docker runtime directory" 2018-03-14 07:14:46 +00:00
OpenStack Proposal Bot
b066eb9eb8 Updated from global requirements 
Change-Id: I836b0d6e915c32074d8062b5914277497ec4f444
 2018-03-14 05:34:06 +00:00
Zuul
a909943bf3 Merge "Upgrade the rst convention of the Reference Guide [1]" 2018-03-13 13:55:05 +00:00
Zuul
01ccd0d394 Merge "Fix telegraf output for influxdb" 2018-03-13 13:55:04 +00:00
Zuul
2210b60266 Merge "Add the missing serial for roll upgrade" 2018-03-13 13:53:23 +00:00
Duong Ha-Quang
542e1f87d1 Specify 'become' for only necessary tasks (Queens roles) 
Add become to only neccesary tasks in roles:

- blazar
- opendaylight
- redis
- tempest
- vitrage

Change-Id: Ib3a48c1c21a19a23e87d2e465fd7012e3eee7565
Partial-Implements: blueprint ansible-specific-task-become
 2018-03-13 15:55:31 +07:00
Zuul
7a0ffbdc1c Merge "Detect openstack_release in kolla-ansible deploy-bifrost" 2018-03-13 08:40:52 +00:00
Zuul
ee00e3eeb3 Merge "Use www-data user for bifrost nginx log directory" 2018-03-13 08:24:31 +00:00
Zuul
e160734abc Merge "Workaround for Bifrost being unable to write to /etc/hosts" 2018-03-13 08:24:23 +00:00
Zuul
3b27a9fe20 Merge "Don't set mysql_service_name for bifrost" 2018-03-13 08:21:19 +00:00
Zuul
fde4f2112d Merge "Handle external ceph configs as templates" 2018-03-13 07:42:28 +00:00
Zuul
08b4930e29 Merge "Homogenize the topics conf variable on templates" 2018-03-13 07:35:49 +00:00
Zuul
d4057c5aa4 Merge "murano internal authentication needs /v3" 2018-03-13 07:29:00 +00:00
Zuul
fd6e1c045a Merge "Specify 'become' for only neccesary tasks (all other roles)" 2018-03-13 04:38:09 +00:00
Zuul
9275ba878f Merge "FIX inject password error" 2018-03-12 14:27:32 +00:00
Vladislav Belogrudov
ed583e1ca4 murano internal authentication needs /v3 
Missing [murano_auth] with auth_uri ending in '/v3' leads to
keystone authentication failures - murano uses old v2 keystone.

Change-Id: I41846ac4fa78da90e02d91e8d1cec7405178f7df
Closes-Bug: #1753480
 2018-03-12 16:53:01 +03:00
Zuul
46ae8d3feb Merge "Remove policy.json" 2018-03-12 13:04:01 +00:00
Zuul
b6777c983c Merge "XenAPI: centralize the facts files" 2018-03-12 03:04:30 +00:00
Duong Ha-Quang
9965cc46ff Specify 'become' for only neccesary tasks (all other roles) 
Add become to only neccesary tasks in roles:

- aodh
- barbican
- bifrost
- ceilometer
- ceph
- chrony
- cinder
- cloudkitty
- collectd
- congress
- designate
- elasticsearch
- etcd
- freezer
- gnocchi
- grafana
- influxdb
- ironic
- iscsi
- karbor
- kibana
- kuryr
- magnum
- manila
- mistral
- mongodb
- multipathd
- murano
- octavia
- panko
- qdrouterd
- rally
- sahara
- searchlight
- senlin
- skydive
- solum
- swift
- swift
- tacker
- telegraf
- tempest
- trove
- vmtp
- watcher
- zun

Change-Id: I6e32d94d4172dd96d09d8609e8a5221ab5586a31
Partial-Implements: blueprint ansible-specific-task-become
 2018-03-12 09:37:43 +07:00
Zuul
6092391357 Merge "Skydive: Fix endpoint for keystone (analyser)" 2018-03-11 03:49:00 +00:00
Zuul
2fb5e939d2 Merge "Duplicated [oslo_policy]" 2018-03-11 03:45:42 +00:00
Zuul
52615a5355 Merge "Use zuul firewall rules in gate" 2018-03-11 03:44:31 +00:00
OpenStack Proposal Bot
27b4ce4afc Updated from global requirements 
Change-Id: Ie6fd05b52592ad48fd7acbd6b7e9a6f48ffd1150
 2018-03-10 13:17:44 +00:00
Kevin TIBI
2c8160b17d Skydive: Fix endpoint for keystone (analyser) 
Skydive need to use internal endpoint
for join keystone like other service.

Change-Id: I6fd76a035ab316f21d483a28a25bfb94c9ed6b95
Closes-Bug: #1747401
 2018-03-09 18:06:33 +01:00
Zuul
4512508545 Merge "Optimize reconfiguration for mongodb" 2018-03-09 15:54:34 +00:00
Zuul
a9f20f82c0 Merge "Optimise the destroy role by script module" 2018-03-09 15:50:10 +00:00
ZhongShengping
af87ad7c06 Duplicated [oslo_policy] 
Remove duplicated [oslo_policy] in magnum.conf.

Change-Id: I69c82e31d7041d7e8f9c31ba1bf54f0906f2a6dc
Closes-Bug: #1754593
 2018-03-09 16:36:53 +08:00
ZhongShengping
0b58fb52ca Remove policy.json 
Change-Id: Iad449b35c1e947a0187c5cbf8348d6e9e1b3d597
Closes-bug: #1751976
 2018-03-09 16:34:23 +08:00
Zuul
a125530b90 Merge "Add the missing ceph_mon host groups for Manila" 2018-03-09 08:11:43 +00:00
Paul Bourke
404d4d0a50 Use zuul firewall rules in gate 
Till now we've been flusing iptables in the gates to allow cross node
communication in the multi node ceph jobs. This raised security
concerns, in particular it exposed memcached to the external net.

This patch uses the infra provided role 'multi-node-firewall' in order
to correctly configure iptables. Thanks to Jeremy Stanley and Jeffrey
for help with this.

Closes-Bug: #1749326
Change-Id: Iafaf1cf1d9b0227b0f869969d0bd52fbde3791a0
 2018-03-08 16:37:13 +00:00
Zuul
4e870b46f9 Merge "Revert "Revert "Use fernet in gates""" 2018-03-08 14:52:24 +00:00
Mark Goddard
862f7b281e Detect openstack_release in kolla-ansible deploy-bifrost 
This ensures that the default value of openstack_release - "auto" - is
handled correctly when deploying bifrost.

Change-Id: I71e6fc5a6b82dc5d6788bf093cd079c45d890ffd
 2018-03-08 10:13:32 +00:00
Jeffrey Zhang
06e7334263 Revert "Revert "Use fernet in gates"" 
This reverts commit 2a4ce0b8fc7f811d96b7353f5ca46da59cdf2905.

Change-Id: I52efd29791a230df1ce7e3acde4b7184aec34150
 2018-03-08 07:50:16 +00:00
Zuul
dc9481aafc Merge "Updated from global requirements" 2018-03-08 03:29:53 +00:00
Zuul
6efc505530 Merge "Use Elasticsearch via HAProxy in Kibana" 2018-03-08 02:56:05 +00:00
Zuul
8ea57fe726 Merge "Security memcached: disable UDP" 2018-03-07 17:25:03 +00:00