openstack/kolla-ansible
Code Issues Proposed changes
8,508 Commits 5 Branches 112 Tags
b42b1361ee
Commit Graph

8508 Commits

Author SHA1 Message Date
Zuul
b42b1361ee Merge "New murano_auth section in Murano config" 2018-03-16 08:23:13 +00:00
Zuul
a4991c6973 Merge "Security reinforce for apache server" 2018-03-16 08:06:29 +00:00
ellen
62db01caa0 New murano_auth section in Murano config 
Add the new murano_auth section to the Murano config
file so that Murano will deploy application packages.

Change-Id: I8ea7264759742e7af038b4cec346fc7ef7f7edcb
 2018-03-15 10:09:44 -04:00
OpenStack Proposal Bot
76f1ad41df Updated from global requirements 
Change-Id: Ib440c05aa88fcacbe64aadc6e1f9fd38c47d2d57
 2018-03-15 07:04:48 +00:00
Zuul
e655430857 Merge "Specify 'become' for only necessary tasks (Queens roles)" 2018-03-14 17:15:24 +00:00
Jeffrey Zhang
f8cb527f78 Security reinforce for apache server 
Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c
 2018-03-14 18:14:26 +08:00
Zuul
3011f56eff Merge "Updated from global requirements" 2018-03-14 07:28:43 +00:00
Zuul
d10e614876 Merge "Update kolla_internal_vip_address to kolla_internal_fqdn" 2018-03-14 07:26:14 +00:00
Zuul
7dc385577f Merge "Add a configuration about docker runtime directory" 2018-03-14 07:14:46 +00:00
OpenStack Proposal Bot
b066eb9eb8 Updated from global requirements 
Change-Id: I836b0d6e915c32074d8062b5914277497ec4f444
 2018-03-14 05:34:06 +00:00
Zuul
a909943bf3 Merge "Upgrade the rst convention of the Reference Guide [1]" 2018-03-13 13:55:05 +00:00
Zuul
01ccd0d394 Merge "Fix telegraf output for influxdb" 2018-03-13 13:55:04 +00:00
Zuul
2210b60266 Merge "Add the missing serial for roll upgrade" 2018-03-13 13:53:23 +00:00
Duong Ha-Quang
542e1f87d1 Specify 'become' for only necessary tasks (Queens roles) 
Add become to only neccesary tasks in roles:

- blazar
- opendaylight
- redis
- tempest
- vitrage

Change-Id: Ib3a48c1c21a19a23e87d2e465fd7012e3eee7565
Partial-Implements: blueprint ansible-specific-task-become
 2018-03-13 15:55:31 +07:00
Zuul
7a0ffbdc1c Merge "Detect openstack_release in kolla-ansible deploy-bifrost" 2018-03-13 08:40:52 +00:00
Zuul
ee00e3eeb3 Merge "Use www-data user for bifrost nginx log directory" 2018-03-13 08:24:31 +00:00
Zuul
e160734abc Merge "Workaround for Bifrost being unable to write to /etc/hosts" 2018-03-13 08:24:23 +00:00
Zuul
3b27a9fe20 Merge "Don't set mysql_service_name for bifrost" 2018-03-13 08:21:19 +00:00
Zuul
fde4f2112d Merge "Handle external ceph configs as templates" 2018-03-13 07:42:28 +00:00
Zuul
08b4930e29 Merge "Homogenize the topics conf variable on templates" 2018-03-13 07:35:49 +00:00
Zuul
d4057c5aa4 Merge "murano internal authentication needs /v3" 2018-03-13 07:29:00 +00:00
Zuul
fd6e1c045a Merge "Specify 'become' for only neccesary tasks (all other roles)" 2018-03-13 04:38:09 +00:00
Zuul
9275ba878f Merge "FIX inject password error" 2018-03-12 14:27:32 +00:00
Vladislav Belogrudov
ed583e1ca4 murano internal authentication needs /v3 
Missing [murano_auth] with auth_uri ending in '/v3' leads to
keystone authentication failures - murano uses old v2 keystone.

Change-Id: I41846ac4fa78da90e02d91e8d1cec7405178f7df
Closes-Bug: #1753480
 2018-03-12 16:53:01 +03:00
Zuul
46ae8d3feb Merge "Remove policy.json" 2018-03-12 13:04:01 +00:00
Zuul
b6777c983c Merge "XenAPI: centralize the facts files" 2018-03-12 03:04:30 +00:00
Duong Ha-Quang
9965cc46ff Specify 'become' for only neccesary tasks (all other roles) 
Add become to only neccesary tasks in roles:

- aodh
- barbican
- bifrost
- ceilometer
- ceph
- chrony
- cinder
- cloudkitty
- collectd
- congress
- designate
- elasticsearch
- etcd
- freezer
- gnocchi
- grafana
- influxdb
- ironic
- iscsi
- karbor
- kibana
- kuryr
- magnum
- manila
- mistral
- mongodb
- multipathd
- murano
- octavia
- panko
- qdrouterd
- rally
- sahara
- searchlight
- senlin
- skydive
- solum
- swift
- swift
- tacker
- telegraf
- tempest
- trove
- vmtp
- watcher
- zun

Change-Id: I6e32d94d4172dd96d09d8609e8a5221ab5586a31
Partial-Implements: blueprint ansible-specific-task-become
 2018-03-12 09:37:43 +07:00
Zuul
6092391357 Merge "Skydive: Fix endpoint for keystone (analyser)" 2018-03-11 03:49:00 +00:00
Zuul
2fb5e939d2 Merge "Duplicated [oslo_policy]" 2018-03-11 03:45:42 +00:00
Zuul
52615a5355 Merge "Use zuul firewall rules in gate" 2018-03-11 03:44:31 +00:00
OpenStack Proposal Bot
27b4ce4afc Updated from global requirements 
Change-Id: Ie6fd05b52592ad48fd7acbd6b7e9a6f48ffd1150
 2018-03-10 13:17:44 +00:00
Kevin TIBI
2c8160b17d Skydive: Fix endpoint for keystone (analyser) 
Skydive need to use internal endpoint
for join keystone like other service.

Change-Id: I6fd76a035ab316f21d483a28a25bfb94c9ed6b95
Closes-Bug: #1747401
 2018-03-09 18:06:33 +01:00
Zuul
4512508545 Merge "Optimize reconfiguration for mongodb" 2018-03-09 15:54:34 +00:00
Zuul
a9f20f82c0 Merge "Optimise the destroy role by script module" 2018-03-09 15:50:10 +00:00
ZhongShengping
af87ad7c06 Duplicated [oslo_policy] 
Remove duplicated [oslo_policy] in magnum.conf.

Change-Id: I69c82e31d7041d7e8f9c31ba1bf54f0906f2a6dc
Closes-Bug: #1754593
 2018-03-09 16:36:53 +08:00
ZhongShengping
0b58fb52ca Remove policy.json 
Change-Id: Iad449b35c1e947a0187c5cbf8348d6e9e1b3d597
Closes-bug: #1751976
 2018-03-09 16:34:23 +08:00
Zuul
a125530b90 Merge "Add the missing ceph_mon host groups for Manila" 2018-03-09 08:11:43 +00:00
Paul Bourke
404d4d0a50 Use zuul firewall rules in gate 
Till now we've been flusing iptables in the gates to allow cross node
communication in the multi node ceph jobs. This raised security
concerns, in particular it exposed memcached to the external net.

This patch uses the infra provided role 'multi-node-firewall' in order
to correctly configure iptables. Thanks to Jeremy Stanley and Jeffrey
for help with this.

Closes-Bug: #1749326
Change-Id: Iafaf1cf1d9b0227b0f869969d0bd52fbde3791a0
 2018-03-08 16:37:13 +00:00
Zuul
4e870b46f9 Merge "Revert "Revert "Use fernet in gates""" 2018-03-08 14:52:24 +00:00
Mark Goddard
862f7b281e Detect openstack_release in kolla-ansible deploy-bifrost 
This ensures that the default value of openstack_release - "auto" - is
handled correctly when deploying bifrost.

Change-Id: I71e6fc5a6b82dc5d6788bf093cd079c45d890ffd
 2018-03-08 10:13:32 +00:00
Jeffrey Zhang
06e7334263 Revert "Revert "Use fernet in gates"" 
This reverts commit 2a4ce0b8fc7f811d96b7353f5ca46da59cdf2905.

Change-Id: I52efd29791a230df1ce7e3acde4b7184aec34150
 2018-03-08 07:50:16 +00:00
Zuul
dc9481aafc Merge "Updated from global requirements" 2018-03-08 03:29:53 +00:00
Zuul
6efc505530 Merge "Use Elasticsearch via HAProxy in Kibana" 2018-03-08 02:56:05 +00:00
Zuul
8ea57fe726 Merge "Security memcached: disable UDP" 2018-03-07 17:25:03 +00:00
caoyuan
8f2256d299 Optimise the destroy role by script module 
Ansible provide script module to run shell script, The local script at
path will be transferred to the remote node and then executed, so no
need to copy script to remote node and use shell moulde to run it.
this patch optimise it.

Change-Id: If774502b66652f25593cda137cc8a5baefbd9695
 2018-03-07 01:46:25 +00:00
Christian Berendt
fcf755c8ce Handle external ceph configs as templates 
Change-Id: Ice5b058fe17ad7d648f21d1ddacaa339c6f7102f
 2018-03-06 18:47:42 +01:00
Zuul
83573ca16e Merge "Use kolla_user variable to setting kolla user name" 2018-03-06 13:27:27 +00:00
Mark Goddard
2f8c9f83fa Use www-data user for bifrost nginx log directory 
Bifrost uses the www-data user for nginx on debian/ubuntu, and nginx on
other platforms. Kolla-ansible currently uses the nginx user for all
platforms when creating a log directory. This change uses the www-data
user on debian/ubuntu when setting ownership of the bifrost nginx log
directory.

Change-Id: I142a158b6f2e8f8a46b684267f6fbb2a6e22a259
Closes-Bug: #1753750
 2018-03-06 13:25:16 +00:00
OpenStack Proposal Bot
1429ddbdc6 Updated from global requirements 
Change-Id: Ia9a7b76a9db4a149d9e0df16ac576ecd706df22b
 2018-03-06 12:48:47 +00:00
Kevin TIBI
7764ed9894 Fix telegraf output for influxdb 
Kolla add multiple url in one outputs.influxdb.
This configuration is when influxdb is in cluster mode.
We need to write one conf by influxdb server.

Change-Id: I1c788b3c8400e74d50cace5a334311408989c5e1
 2018-03-06 09:36:12 +00:00