# These initial groups are the only groups required to be modified. The # additional groups are for more control of the environment. # NOTE(yoctozepto): In CI we want to test Masakari HA but not of other services, # to conserve the resources. Hence, we set Masakari groups to use both # primary and secondary while the parent group (control) uses only primary. [control] {% if scenario == 'masakari' %} {% for host in hostvars if host in ['primary'] %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% elif scenario == 'monasca' %} {% for host in hostvars if host in ['primary', 'secondary1', 'secondary2'] %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% else %} {% for host in hostvars %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% endif %} [network:children] control # NOTE(yoctozepto): Until we are able to isolate network namespaces in k-a, # we are forced to separate Pacemaker remotes from full members. # This is not as bad as it sounds, because it would be enforced in # non-containerised environments anyway. # In CI we want Pacemaker remotes to run on ternaries (to test multiple remotes). [compute] {% if scenario == 'masakari' %} {% for host in hostvars if host in ['ternary1', 'ternary2'] %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% else %} {% for host in hostvars %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% endif %} [storage] {% for host in hostvars %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} [monitoring] {% if scenario == 'monasca' %} {% for host in hostvars if host in ['secondary3', 'secondary4', 'secondary5'] %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% else %} {% for host in hostvars %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% endif %} [deployment] {% for host in hostvars %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endfor %} {% if scenario == 'cells' %} {% for host in hostvars %} {% set cell_name = 'cell' ~ loop.index %} [{{ cell_name }}] {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} [{{ cell_name }}:vars] nova_cell_name = {{ cell_name }} nova_cell_compute_group = {{ cell_name }} nova_cell_conductor_group = {{ cell_name }} nova_cell_novncproxy_group = {{ cell_name }} nova_novncproxy_port = {{ 6080 + loop.index0 }} {% endfor %} {% endif %} [baremetal:children] control network compute storage monitoring [tls-backend:children] control # You can explicitly specify which hosts run each project by updating the # groups in the sections below. Common services are grouped together. [common:children] control network compute storage monitoring [collectd:children] compute [grafana:children] monitoring [etcd:children] control [influxdb] # NOTE(dszumski): This doesn't support clustering primary [prometheus:children] monitoring [kafka:children] control [kibana:children] control [telegraf:children] compute control monitoring network storage [elasticsearch:children] control # NOTE(yoctozepto): Until we are able to isolate network namespaces in k-a, # we are forced to separate Pacemaker remotes from full members. # This is not as bad as it sounds, because it would be enforced in # non-containerised environments anyway. # In CI we want Pacemaker to run on primary and secondary (to test with HA). [hacluster] {% for host in hostvars %} {% if host in ['primary', 'secondary'] %} {{ host }} ansible_host={{ hostvars[host]['ansible_host'] }} ansible_user=kolla ansible_ssh_private_key_file={{ ansible_env.HOME ~ '/.ssh/id_rsa_kolla' }} {% endif %} {% endfor %} [hacluster-remote:children] compute [loadbalancer:children] network [mariadb:children] control [rabbitmq:children] control [outward-rabbitmq:children] control [qdrouterd:children] control [monasca-agent:children] compute control monitoring network storage [monasca:children] monitoring [storm:children] monitoring [keystone:children] control [glance:children] control [nova:children] control [neutron:children] network [openvswitch:children] network compute manila-share [cinder:children] control [cloudkitty:children] control [freezer:children] control [memcached:children] control [horizon:children] control [swift:children] control [barbican:children] control [heat:children] control [murano:children] control [solum:children] control [ironic:children] control [magnum:children] control [sahara:children] control [mistral:children] control [manila:children] control [ceilometer:children] control [aodh:children] control [cyborg:children] control compute [gnocchi:children] control [tacker:children] control [trove:children] control [senlin:children] control [vitrage:children] control [watcher:children] control [octavia:children] control [designate:children] control [placement:children] control [bifrost:children] deployment [zookeeper:children] control [zun:children] control [skydive:children] monitoring [redis:children] control [blazar:children] control # Additional control implemented here. These groups allow you to control which # services run on which hosts at a per-service level. # # Word of caution: Some services are required to run on the same host to # function appropriately. For example, neutron-metadata-agent must run on the # same host as the l3-agent and (depending on configuration) the dhcp-agent. # Common [cron:children] common [fluentd:children] common [kolla-logs:children] common [kolla-toolbox:children] common # Elasticsearch Curator [elasticsearch-curator:children] elasticsearch # Glance [glance-api:children] glance # Nova [nova-api:children] nova [nova-conductor:children] nova [nova-super-conductor:children] nova [nova-novncproxy:children] nova [nova-scheduler:children] nova [nova-spicehtml5proxy:children] nova [nova-compute-ironic:children] nova [nova-serialproxy:children] nova # Neutron [neutron-server:children] control [neutron-dhcp-agent:children] neutron [neutron-l3-agent:children] neutron [neutron-metadata-agent:children] neutron [neutron-ovn-metadata-agent:children] compute [neutron-bgp-dragent:children] neutron [neutron-infoblox-ipam-agent:children] neutron [neutron-metering-agent:children] neutron [ironic-neutron-agent:children] neutron # Cinder [cinder-api:children] cinder [cinder-backup:children] storage [cinder-scheduler:children] cinder [cinder-volume:children] storage # Cloudkitty [cloudkitty-api:children] cloudkitty [cloudkitty-processor:children] cloudkitty # Freezer [freezer-api:children] freezer [freezer-scheduler:children] freezer # iSCSI [iscsid:children] compute storage ironic [tgtd:children] storage # Manila [manila-api:children] manila [manila-scheduler:children] manila [manila-share:children] network [manila-data:children] manila # Swift [swift-proxy-server:children] swift [swift-account-server:children] storage [swift-container-server:children] storage [swift-object-server:children] storage # Barbican [barbican-api:children] barbican [barbican-keystone-listener:children] barbican [barbican-worker:children] barbican # Heat [heat-api:children] heat [heat-api-cfn:children] heat [heat-engine:children] heat # Murano [murano-api:children] murano [murano-engine:children] murano # Monasca [monasca-agent-collector:children] monasca-agent [monasca-agent-forwarder:children] monasca-agent [monasca-agent-statsd:children] monasca-agent [monasca-api:children] monasca [monasca-log-persister:children] monasca [monasca-log-metrics:children] monasca [monasca-thresh:children] monasca [monasca-notification:children] monasca [monasca-persister:children] monasca # Storm [storm-worker:children] storm [storm-nimbus:children] storm # Ironic [ironic-api:children] ironic [ironic-conductor:children] ironic [ironic-inspector:children] ironic [ironic-pxe:children] ironic [ironic-ipxe:children] ironic # Magnum [magnum-api:children] magnum [magnum-conductor:children] magnum # Sahara [sahara-api:children] sahara [sahara-engine:children] sahara # Solum [solum-api:children] solum [solum-worker:children] solum [solum-deployer:children] solum [solum-conductor:children] solum [solum-application-deployment:children] solum [solum-image-builder:children] solum # Mistral [mistral-api:children] mistral [mistral-executor:children] mistral [mistral-engine:children] mistral [mistral-event-engine:children] mistral # Ceilometer [ceilometer-central:children] ceilometer [ceilometer-notification:children] ceilometer [ceilometer-compute:children] compute [ceilometer-ipmi:children] compute # Aodh [aodh-api:children] aodh [aodh-evaluator:children] aodh [aodh-listener:children] aodh [aodh-notifier:children] aodh # Cyborg [cyborg-api:children] cyborg [cyborg-agent:children] compute [cyborg-conductor:children] cyborg # Gnocchi [gnocchi-api:children] gnocchi [gnocchi-statsd:children] gnocchi [gnocchi-metricd:children] gnocchi # Trove [trove-api:children] trove [trove-conductor:children] trove [trove-taskmanager:children] trove # Multipathd [multipathd:children] compute storage # Watcher [watcher-api:children] watcher [watcher-engine:children] watcher [watcher-applier:children] watcher # Senlin [senlin-api:children] senlin [senlin-conductor:children] senlin [senlin-engine:children] senlin [senlin-health-manager:children] senlin # Octavia [octavia-api:children] octavia [octavia-driver-agent:children] octavia [octavia-health-manager:children] octavia [octavia-housekeeping:children] octavia [octavia-worker:children] octavia # Designate [designate-api:children] designate [designate-central:children] designate [designate-producer:children] designate [designate-mdns:children] network [designate-worker:children] designate [designate-sink:children] designate [designate-backend-bind9:children] designate # Placement [placement-api:children] placement # Zun [zun-api:children] zun [zun-wsproxy:children] zun [zun-compute:children] compute [zun-cni-daemon:children] compute # Skydive [skydive-analyzer:children] skydive [skydive-agent:children] compute network # Tacker [tacker-server:children] tacker [tacker-conductor:children] tacker # Vitrage [vitrage-api:children] vitrage [vitrage-notifier:children] vitrage [vitrage-graph:children] vitrage [vitrage-ml:children] vitrage # Blazar [blazar-api:children] blazar [blazar-manager:children] blazar # Prometheus [prometheus-node-exporter:children] monitoring control compute network storage [prometheus-mysqld-exporter:children] mariadb [prometheus-haproxy-exporter:children] loadbalancer [prometheus-memcached-exporter:children] memcached [prometheus-cadvisor:children] monitoring control compute network storage [prometheus-alertmanager:children] monitoring [prometheus-openstack-exporter:children] monitoring [prometheus-elasticsearch-exporter:children] elasticsearch [prometheus-blackbox-exporter:children] monitoring [prometheus-libvirt-exporter:children] compute # NOTE(yoctozepto): In CI we want to test Masakari HA but not of other services, # to conserve the resources. Hence, we set Masakari groups to use both # primary and secondary while the parent group (control) uses only primary. [masakari-api:children] hacluster [masakari-engine:children] hacluster [masakari-hostmonitor:children] hacluster [masakari-instancemonitor:children] compute [ovn-controller:children] ovn-controller-compute ovn-controller-network [ovn-controller-compute:children] compute [ovn-controller-network:children] network [ovn-database:children] control [ovn-northd:children] ovn-database [ovn-nb-db:children] ovn-database [ovn-sb-db:children] ovn-database [venus:children] monitoring [venus-api:children] venus [venus-manager:children] venus