openstack/kolla-ansible
Code Issues Proposed changes
8,481 Commits 5 Branches 112 Tags
fde4f2112d
Commit Graph

8481 Commits

Author SHA1 Message Date
Zuul
fde4f2112d Merge "Handle external ceph configs as templates" 2018-03-13 07:42:28 +00:00
Zuul
08b4930e29 Merge "Homogenize the topics conf variable on templates" 2018-03-13 07:35:49 +00:00
Zuul
d4057c5aa4 Merge "murano internal authentication needs /v3" 2018-03-13 07:29:00 +00:00
Zuul
fd6e1c045a Merge "Specify 'become' for only neccesary tasks (all other roles)" 2018-03-13 04:38:09 +00:00
Zuul
9275ba878f Merge "FIX inject password error" 2018-03-12 14:27:32 +00:00
Vladislav Belogrudov
ed583e1ca4 murano internal authentication needs /v3 
Missing [murano_auth] with auth_uri ending in '/v3' leads to
keystone authentication failures - murano uses old v2 keystone.

Change-Id: I41846ac4fa78da90e02d91e8d1cec7405178f7df
Closes-Bug: #1753480
 2018-03-12 16:53:01 +03:00
Zuul
46ae8d3feb Merge "Remove policy.json" 2018-03-12 13:04:01 +00:00
Zuul
b6777c983c Merge "XenAPI: centralize the facts files" 2018-03-12 03:04:30 +00:00
Duong Ha-Quang
9965cc46ff Specify 'become' for only neccesary tasks (all other roles) 
Add become to only neccesary tasks in roles:

- aodh
- barbican
- bifrost
- ceilometer
- ceph
- chrony
- cinder
- cloudkitty
- collectd
- congress
- designate
- elasticsearch
- etcd
- freezer
- gnocchi
- grafana
- influxdb
- ironic
- iscsi
- karbor
- kibana
- kuryr
- magnum
- manila
- mistral
- mongodb
- multipathd
- murano
- octavia
- panko
- qdrouterd
- rally
- sahara
- searchlight
- senlin
- skydive
- solum
- swift
- swift
- tacker
- telegraf
- tempest
- trove
- vmtp
- watcher
- zun

Change-Id: I6e32d94d4172dd96d09d8609e8a5221ab5586a31
Partial-Implements: blueprint ansible-specific-task-become
 2018-03-12 09:37:43 +07:00
Zuul
6092391357 Merge "Skydive: Fix endpoint for keystone (analyser)" 2018-03-11 03:49:00 +00:00
Zuul
2fb5e939d2 Merge "Duplicated [oslo_policy]" 2018-03-11 03:45:42 +00:00
Zuul
52615a5355 Merge "Use zuul firewall rules in gate" 2018-03-11 03:44:31 +00:00
OpenStack Proposal Bot
27b4ce4afc Updated from global requirements 
Change-Id: Ie6fd05b52592ad48fd7acbd6b7e9a6f48ffd1150
 2018-03-10 13:17:44 +00:00
Kevin TIBI
2c8160b17d Skydive: Fix endpoint for keystone (analyser) 
Skydive need to use internal endpoint
for join keystone like other service.

Change-Id: I6fd76a035ab316f21d483a28a25bfb94c9ed6b95
Closes-Bug: #1747401
 2018-03-09 18:06:33 +01:00
Zuul
4512508545 Merge "Optimize reconfiguration for mongodb" 2018-03-09 15:54:34 +00:00
Zuul
a9f20f82c0 Merge "Optimise the destroy role by script module" 2018-03-09 15:50:10 +00:00
ZhongShengping
af87ad7c06 Duplicated [oslo_policy] 
Remove duplicated [oslo_policy] in magnum.conf.

Change-Id: I69c82e31d7041d7e8f9c31ba1bf54f0906f2a6dc
Closes-Bug: #1754593
 2018-03-09 16:36:53 +08:00
ZhongShengping
0b58fb52ca Remove policy.json 
Change-Id: Iad449b35c1e947a0187c5cbf8348d6e9e1b3d597
Closes-bug: #1751976
 2018-03-09 16:34:23 +08:00
Zuul
a125530b90 Merge "Add the missing ceph_mon host groups for Manila" 2018-03-09 08:11:43 +00:00
Paul Bourke
404d4d0a50 Use zuul firewall rules in gate 
Till now we've been flusing iptables in the gates to allow cross node
communication in the multi node ceph jobs. This raised security
concerns, in particular it exposed memcached to the external net.

This patch uses the infra provided role 'multi-node-firewall' in order
to correctly configure iptables. Thanks to Jeremy Stanley and Jeffrey
for help with this.

Closes-Bug: #1749326
Change-Id: Iafaf1cf1d9b0227b0f869969d0bd52fbde3791a0
 2018-03-08 16:37:13 +00:00
Zuul
4e870b46f9 Merge "Revert "Revert "Use fernet in gates""" 2018-03-08 14:52:24 +00:00
Jeffrey Zhang
06e7334263 Revert "Revert "Use fernet in gates"" 
This reverts commit 2a4ce0b8fc7f811d96b7353f5ca46da59cdf2905.

Change-Id: I52efd29791a230df1ce7e3acde4b7184aec34150
 2018-03-08 07:50:16 +00:00
Zuul
dc9481aafc Merge "Updated from global requirements" 2018-03-08 03:29:53 +00:00
Zuul
6efc505530 Merge "Use Elasticsearch via HAProxy in Kibana" 2018-03-08 02:56:05 +00:00
Zuul
8ea57fe726 Merge "Security memcached: disable UDP" 2018-03-07 17:25:03 +00:00
caoyuan
8f2256d299 Optimise the destroy role by script module 
Ansible provide script module to run shell script, The local script at
path will be transferred to the remote node and then executed, so no
need to copy script to remote node and use shell moulde to run it.
this patch optimise it.

Change-Id: If774502b66652f25593cda137cc8a5baefbd9695
 2018-03-07 01:46:25 +00:00
Christian Berendt
fcf755c8ce Handle external ceph configs as templates 
Change-Id: Ice5b058fe17ad7d648f21d1ddacaa339c6f7102f
 2018-03-06 18:47:42 +01:00
Zuul
83573ca16e Merge "Use kolla_user variable to setting kolla user name" 2018-03-06 13:27:27 +00:00
OpenStack Proposal Bot
1429ddbdc6 Updated from global requirements 
Change-Id: Ia9a7b76a9db4a149d9e0df16ac576ecd706df22b
 2018-03-06 12:48:47 +00:00
Jianghua Wang
65fa37fb84 XenAPI: centralize the facts files 
When bootstrap compute hosts for XenAPI, it will generate a facts
file for each compute node. It contains some XenAPI specific variables
for both the compute host and the XenServer where the compute host
run on. This commit is to fetch the facts file into deployment host
and put it under a centralized directory - each compute host will
have a separate sub-dir which is named with its *inventory_hostname*.

In this way, the following tasks can use proper variable from the
proper facts file which exactly belongs to the host they running on.

Change-Id: I68d1a2d098d38c8e6bf4db76cdaf1f0465831822
blueprint: xenserver-support
 2018-03-05 13:57:15 +00:00
Kevin TIBI
87036f357e Security memcached: disable UDP 
CVE-2018-1000115

Change-Id: I30acb41f1209c0d07eb58f4feec91bc53146dcea
Closes-Bug: #1753425
 2018-03-05 10:40:40 +01:00
Zuul
e66cb5d46b Merge "Fix disable haproxy causes the neutron service connection error" 2018-03-03 12:46:02 +00:00
xiaoxu780
a4ac90d723 Fix disable haproxy causes the neutron service connection error 
Change-Id: I31969667ab86f61d38752954cb0e565ad7e41970
Closes-Bug: #1752760
 2018-03-01 21:57:20 -05:00
OpenStack Release Bot
e2d3119bd6 Update reno for stable/queens 
Change-Id: I8ee8b4198ccf2f79fdc1acc3a303ede18960a2a1
 2018-03-01 16:51:56 +00:00
Sylvain Baubeau
84724b5462 Fix skydive agent openvswitch configuration 
Change-Id: I1f721a3e9ad3d1a937e05f1d0d53c810b9f2ac39
 2018-02-28 15:34:51 +01:00
zhubingbing
83fe717837 Use kolla_user variable to setting kolla user name 
Change-Id: I653e16270aab539edcec6d8622f0a1c06d04b492
 2018-02-27 15:39:27 +08:00
Zuul
378b8dd932 Merge "Use local cirros image if available" 2018-02-27 05:18:55 +00:00
Doug Szumski
e3fa6d5454 Use Elasticsearch via HAProxy in Kibana 
The original code assumes that ElasticSearch will be deployed
on the same node as Kibana. This isn't always the case. When
they are not on the same node, Kibana will not be able to
connect to ElasticSearch and deployment will fail on the task:
'kibana : Wait for kibana to register in elasticsearch'.

A second advantage of making this change is that Kibana won't
break if ElasticSearch goes down on the node that it's running on
when there are additional ElasticSearch instances on other nodes.

A disadvantage of this change is that queries from Kibana to
ElasticSearch will no longer be local.

Closes-Bug: 1751817
Change-Id: I02ab2e7b1eb963b33e29c8f649cc9db0d63316f7
 2018-02-26 15:49:28 +00:00
Zuul
dd694b2362 Merge "Fix the warning when reload the docker" 2018-02-26 09:46:17 +00:00
Zuul
837c88537a Merge "Replace kolla title with kolla-ansible" 2018-02-26 09:22:12 +00:00
caoyuan
37ef38b6a3 Fix the warning when reload the docker 
use systemd module to reload the docker service, rather than
command

Change-Id: I2e3b2299365701a08de4025d6ad34cb492b33fda
Closes-Bug: #1751690
 2018-02-26 03:24:24 +00:00
Zuul
28d5e07869 Merge "Use rpc_transport_url in blazar" 2018-02-25 08:45:44 +00:00
caoyuan
442631b5ba Add the missing ceph_mon host groups for Manila 
when Manila use ceph as backend, Manila will pull keyring
from ceph mon node [0], but the site.yml missing it.

[0]: https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/manila/tasks/ceph.yml#L18

Change-Id: If8f0b9f186a27d9a86227cd5e5ce2405bf57749e
Closes-Bug: #1751534
 2018-02-25 11:55:40 +08:00
zhubingbing
c887c93a36 Use rpc_transport_url in blazar 
Change-Id: Ifc0f1e356dd6a5c194d00ab20f3122d17c7223cc
 2018-02-24 19:48:22 +08:00
Zuul
9a86713551 Merge "Fix tacker vnffgd version" 2018-02-24 10:15:10 +00:00
zhubingbing
077c85b13f Replace kolla title with kolla-ansible 
This is mainly kolla-ansible installation part

Change-Id: Iab14884cfc037bc3cb8055db487c53aa14da070f
 2018-02-24 10:09:40 +00:00
Zuul
1886cff420 Merge "Fix fernet deploy on gate" 2018-02-24 06:42:45 +00:00
Zuul
6b67149f3e Merge "Use rpc_transport_url in vitrage.conf" 2018-02-24 05:55:50 +00:00
zhubingbing
72b84b01cf Use rpc_transport_url in vitrage.conf 
Change-Id: I1d24d4a90a6ab4abc6a3b24c0334b380d53e896a
 2018-02-23 23:12:27 +08:00
Jeffrey Zhang
2bbd5399de Fix fernet deploy on gate 
keystone-ssh is required by keystone-fernet. So start keystone-ssh
container before keystone-fernet.

Closes-Bug: #1751224
Change-Id: Ie1c8ae185549acc3dd87a2c5f0356443ea7924a5
 2018-02-23 08:51:53 +00:00