294 Commits

Author SHA1 Message Date
Sam Yaple
97a8ba6fd7 Fix incorrect ansible variable
Change-Id: Ic6755dfe5c3741e4a945c8353f643bbf1479c172
Closes-Bug: #1519040
2015-11-23 17:37:04 +00:00
Sam Yaple
970617b80a Make the database json variable more readable
Additionally remove tty from the container cleanup docker section. It
was added in a sed in a previous patchset by serves no purpose.

Change-Id: Ib617870616bca687f72ffaa44b2e9a3a11ef1011
Partially-Implements: blueprint cleanup-playbooks
2015-11-23 17:24:22 +00:00
Hui Kang
790bf336d5 Fix bootstrap for services
The bootstrap tasks could be started on any node listed in the
site.yml

The issue is that all the tasks must run on the same node, and the
only node that all the tasks can run on is the 'api' node due to
needing to start the bootstrap container which binds in the configs.

delegate_to is required to ensure that the proper node gets the task.

Co-Authored-By: Sam Yaple <sam@yaple.net>
Change-Id: Ica04ab366777a571a92212ac22c482f1881d4ecd
Closes-Bug: #1513598
Related-Bug: #1513439
2015-11-23 17:09:36 +00:00
Sam Yaple
42b9660c7c Only start nova-data on the compute hosts
Change-Id: Icd7aa39556c50a3367c3b9630b24b7195612ba70
Closes-Bug: #1517914
2015-11-20 22:04:54 +00:00
Jenkins
8d387dcdb9 Merge "Fix ironic-api listen address" 2015-11-20 20:41:42 +00:00
Jenkins
296d17af2d Merge "Ensure config directory exists for container ironic-pxe" 2015-11-20 15:42:51 +00:00
Andrey Shestakov
88c7ad1f09 Fix ironic-api listen address
Set host_ip to internal address for ironic-api service

Change-Id: I001a422a0474e88c1433a7b3ab5e005f2b8c337c
Closes-Bug: #1518336
2015-11-20 17:16:46 +02:00
Jenkins
96667c9241 Merge "Move data container to start.yml" 2015-11-20 15:01:52 +00:00
Andrey Shestakov
f3e59083ab Ensure config directory exists for container ironic-pxe
Config directory for ironic-pxe should be created before copying files into it

Change-Id: I5ad8e44273c3d185cf7fbe94787aff47595aabb0
Closes-Bug: #1518330
2015-11-20 16:20:58 +02:00
akwasniewska
206455120f Fixed log error messages from keystone to syslog.
Rsyslog adapted to filter keystone error log messages.

Related bug: 1516462

Change-Id: I4d8d4280dc8fef870d56d8466ed466241ee18e64
2015-11-17 20:27:08 +01:00
Jenkins
86b778c27f Merge "Fix keystone settings for Magnum" 2015-11-17 22:20:20 +00:00
Paul Bourke
89a421fba1 Fix keystone settings for Magnum
It currently has auth_url typoed which results in auth_url being
specified twice

Change-Id: Ia5b6385f8d28a23fc05908ceec75a7e8528894d9
Closes-Bug: #1517141
2015-11-17 17:09:08 +00:00
Paul Bourke
988c4f23f1 Fix issues in Glance filesystem backend
The drop root change for Glance highlighted the fact that we were
binding volumes from glance_data into the wrong container - it was
glance_registry whereas it should be glance_api. This would result in
all images being lost if the glance_api container happens to restart.

Also, we need a sudoers file to chown the file backend dir to the glance
user.

Change-Id: If04337045bb94b3126e48d1f5bf0ea29e20373ae
Closes-Bug: #1516729
2015-11-17 09:42:39 +00:00
Britt Houser
66c15ce55e drop root on memcached
This patch add the USER directive to the memcached container.
It also removes the -u from the command line to launch
memcached, since it will already be run as that use.

Change-Id: I87d782a424df99fe1b5694debafa3c0c4a9aba27
Partially-Implements: blueprint drop-root
2015-11-14 11:38:30 -05:00
Jenkins
84b6f7edc4 Merge "Add Ansible support for Magnum" 2015-11-13 17:01:04 +00:00
Jenkins
9e9dc83d85 Merge "Add playbook for hosts pre-deployment checks (ports, files)" 2015-11-13 14:43:39 +00:00
Vladislav Belogrudov
3bd4c2a607 Add playbook for hosts pre-deployment checks (ports, files)
This playbook runs on hosts before deployment to be sure we don't
have any conflicting services running and systems are in expected
state.

DocImpact

Change-Id: If5f288b7fbdf269697ca834da4eb969b61683ca0
Partially-implements: blueprint precheck-tasks
2015-11-13 16:35:33 +03:00
Michal Rostecki
2cd5d9ed74 Add Ansible support for Magnum
Change-Id: Idb25ac4d3148c9b9400cf675ac2e47d35cce6224
Implements: blueprint ansible-magnum
2015-11-13 11:31:34 +01:00
Ryan Hallisey
22def41d37 Drop root privileges for rabbitmq
Drop root privileges for rabbitmq.  Only the rabbitmq user
will be able to execute chown of /var/lib/rabbitmq.

Change-Id: I546e6b475a8462bfbc75972854e1fee64f96d9cb
Partially-Implements: blueprint drop-root
2015-11-12 11:38:17 -05:00
Sam Yaple
564f8f2bd4 Move data container to start.yml
The original reason for having the data container in the bootstrap.yml
was to keep consistency with rabbitmq and mariadb, but in light of
this bug we need to move the data container out of the bootstrap.yml
role since we will be limiting the hosts that those tasks can run on.

Change-Id: I7f2f5979b01807275908699d1243756cb97d3588
Partial-Bug: #1513598
2015-11-09 10:47:16 +00:00
Sam Yaple
4ad8db7168 Remove unused cinder-data container
The cinder-data container serves no purpose and is not actually used
past the bootstrap container and should be removed.

Additionally add the missing '---' header to the start.yml file.

TrivialFix
Related-Bug: #1513598
Related-Bug: #1513439
Change-Id: I22b630bbee954e12a4de5652b7fb068669f633c5
2015-11-09 10:47:16 +00:00
Sam Yaple
6b28343017 Incorrect parsed variable name
database_user_create was not correctly referenced when parsing the
variable names. This could never actually lead to a situation that
reported a false change, but it could break an operation if you were
using the --step option with ansible and skipped the database create
task.

TrivialFix
Backport: Liberty

Change-Id: Idf69fffcc3814f509448ccea11b7d175f074ccf1
2015-11-09 10:47:15 +00:00
Jenkins
44b5a8867e Merge "Finish implementation of spice" 2015-11-06 21:57:08 +00:00
Sam Yaple
99932d650d Finish implementation of spice
Due bad rebases there is a huge section of the spice patch missing
from the implementation unfortunately. This patch finishes the rest
of this patch out properly.

Change-Id: I693c6745e9594fd91eb6453f6de9dfcbd410e89c
Paritally-Implements: blueprint nova-proxies
2015-11-06 03:48:07 +00:00
Jenkins
037bdca42d Merge "bootstrap takes place on the wrong node" 2015-11-06 03:32:36 +00:00
Jenkins
58a9759b84 Merge "Allow disabling of sysctl values" 2015-11-06 03:31:22 +00:00
Sam Yaple
e2bc9dcf79 bootstrap takes place on the wrong node
The bootstrap must occur on the nova-api node due to binding in the
nova-api directory (same goes for all other services)

Closes-Bug: #1513439
Backport: Liberty
Change-Id: Iab88b49712828085e4d7e7f85e6d8f0b7999a9bf
2015-11-05 16:30:44 +00:00
Sam Yaple
1efdf4574d Allow disabling of sysctl values
The main reason for this change is to allow the DinD stuff to work. It
has limited use outside of that use case, but it may still be useful
to others in the future.

Change-Id: Ib3a4639cfb3fc0d378d33fc8b9ff8eb597f818ab
Partially-Implements: blueprint multinode-gate
2015-11-05 16:29:25 +00:00
Sam Yaple
347730cec8 Remove vip for rabbitmq
Adjust all the configs to list all the rabbitmq hosts rather than
running rabbitmq through the VIP. This is made possible by clusterer
which has already merged.

Change-Id: I5db48f5f10ec68f4c8863a29bc13984f6845a4f9
Partially-Implements: blueprint rabbitmq-clusterer
2015-11-05 15:43:20 +00:00
Jenkins
32006d8149 Merge "Ansible config for Spice console" 2015-11-03 20:48:36 +00:00
Sam Yaple
cd3c089978 Ansible config for Spice console
Change-Id: Id6ccf169c8ce07c78df150de21ab2d36eec3949f
Partially-Implements: blueprint nova-proxies
2015-11-03 06:32:52 +00:00
Sam Yaple
d01e9a43dd Use rabbitmq-clusterer when deploying
Change-Id: I2a9c6fa16444a2142ab77f58d188eda84a2e59fd
Partially-Implements: blueprint rabbitmq-clusterer
2015-11-03 04:51:45 +00:00
Jenkins
d66e425397 Merge "Automate setting up a cache tier" 2015-11-03 00:23:26 +00:00
Jenkins
8f5955307c Merge "Allow ceph pool names to be configurable" 2015-11-03 00:23:19 +00:00
Jenkins
2c2b6c58cf Merge "Allow specifying erasure as the pool type" 2015-11-03 00:23:12 +00:00
Jenkins
5136a85edd Merge "heat containers depends on 'common' (rsyslog, log_data, kolla-ansible)" 2015-11-02 12:46:54 +00:00
Jenkins
59c8ad0cd9 Merge "HAProxy does not have murano-api configuration" 2015-11-01 23:38:59 +00:00
Vladislav Belogrudov
f4eb89f8b0 HAProxy does not have murano-api configuration
This commit fixes configuration for murano-api HA

Change-Id: I6b6f2c266cbb4c8131a949e31094572dad91fc40
Closes-Bug: #1510921
Backport: Liberty
2015-11-01 20:27:02 +00:00
Jérôme Vizcaino
b072ea9c3d nova.conf: fix incorrect neutron credentials.
Nova should use Neutron credentials to interact with Neutron.

Backport: liberty
Closes-Bug: #1512070
Change-Id: I78ec4c032d457b519ccfed9cab190afd65027048
2015-11-01 12:02:00 +01:00
Jérôme Vizcaino
96a5d1a1eb heat containers depends on 'common' (rsyslog, log_data, kolla-ansible)
Change-Id: Ice5ddf2cfcf5655cb98ec4f822fd376589c14cec
Closes-Bug: 1509627
2015-10-24 11:41:18 +02:00
Sam Yaple
268aaa60fd Fix broken galera
A previous commit [1] broke Galera on Ubuntu while trying to fix
Centos. This fixes the underlying different between the two distros
and should help prevent that kind of mistake in the future.

[1] I523d1989575dbe24a891fcae3b6bf56d83e69615

Change-Id: Ie3e47f10cb669f36f8d2f166c88555931a54e3ec
Backport: Liberty
Closes-Bug: #1509281
2015-10-23 20:15:37 +00:00
Steven Dake
3842391b78 Encode datadir for xtrabackup
Xtrabackup previously used a hardcoded datadir.  In the latest
update to xtrabackup, the my.cnf config option datadir is now
parsed.  This variable was unset, causing galera to implode.

backport: liberty

Change-Id: I523d1989575dbe24a891fcae3b6bf56d83e69615
Closes-Bug: #1509281
2015-10-23 03:19:31 -07:00
Sam Yaple
b27880aa77 Automate setting up a cache tier
Introduces a new flag to bootstrap cache devices

DocImpact
Partially-Implements: blueprint ceph-improvements

Change-Id: I09b5a0d5c61b3465237e5f01dc10120725561cd3
2015-10-22 10:51:44 +00:00
Sam Yaple
1d60be3770 Allow ceph pool names to be configurable
Change-Id: Ic408ef7aec7f1c95396a0ccf0209b104908a3f21
Partially-Implements: blueprint ceph-improvements
2015-10-22 10:51:44 +00:00
Sam Yaple
6932ca48b8 Allow specifying erasure as the pool type
Change-Id: I581efd7c0d138cb78ab3afd755521f3fb375c0ee
Partially-Implements: blueprint ceph-improvements
2015-10-22 10:51:44 +00:00
Jenkins
ef862427fa Merge "Add nova-spicehtml5proxy console" 2015-10-21 10:01:15 +00:00
Sam Yaple
a7d4431928 Add nova-spicehtml5proxy console
Change-Id: I0ca15e00ee52373b84f7021d86a29304526b7436
Partially-Implements: blueprint nova-proxies
2015-10-19 12:09:48 +00:00
Sam Yaple
d6bf048c34 Use bool filter for ironic
TrivialFix

Change-Id: Idaa6376c8585b9bebe1d68a518f965124dfe6b76
2015-10-18 19:19:43 +00:00
Jenkins
968a42b826 Merge "Enable COMPRESS_OFFLINE for Horizon" 2015-10-15 15:01:15 +00:00
Sam Yaple
2ea87ebdb7 Use memcache for consoleauth and horizon
Unfortunately there was no was to avoid memcache for consoleauth, so
we might as well take advantage of it for Horizon as well.

Change-Id: Idd338a025b031f6b50fe0c9f03c2c8d862f9d4c0
Closes-Bug: #1504606
Closes-Bug: #1504800
2015-10-15 10:47:21 +00:00