2888 Commits

Author SHA1 Message Date
Trevor Vardeman
4c9097c681 Adding changes to support ppc64le amphora builds with CentOS
Updated diskimage create script to include an argument for disabling the temporary filesystem.
Updated diskimage create to support ppc64le as an argument.
Updated backports to support a properly configured PaaS repository for CentOS on power.

Change-Id: I8897278b1ac8b76d564f45bd0c7cbc26b29a8e5d
2019-04-18 11:11:09 -05:00
Gregory Thiemonge
a509710a7f Fix spare amphora failover
Failover of spare amphorae failed with an exception,
because they're not attached to any loadbalancer.

This commit fixes this issue, allowing to rotate/update
spare amphora images.

Story: 2005470
Task: 30549

Change-Id: I9c9002486a9a547a215514c24ccb95f039b23ec2
2019-04-17 10:46:24 +02:00
Zuul
66656bceb6 Merge "Update documentation about rotating amphorae" 2019-04-16 16:27:16 +00:00
Gregory Thiemonge
c987140f68 Update documentation about rotating amphorae
Now that octavia provides API and cli to failover and check amphorae
statuses, we can simplify operator maintenance doc.

Change-Id: I2da1f2cc78b8f4338d4481f8529cbd0a02fa66bf
2019-04-16 16:50:49 +02:00
Michael Johnson
7d1bdc31bb Fix missing REDIRECT_PREFIX in the api-ref
The Octavia API reference was missing the option of "REDIRECT_PREFIX"
as one of the L7 policy actions. This patch corrects that.

Change-Id: I5fa14354fb88b325380834e0deec09bfb813b409
2019-04-15 16:03:42 -07:00
Carlos Goncalves
b274355e8e Constraint networkx to <2.3 for Python 2
networkx >=2.3 supports Python 3 only [1]. This patch constraints
networkx to <2.3 for Python 2.

[1] https://networkx.github.io/documentation/stable/news.html#networkx-2-3

Change-Id: Icfc804f40130a613ac78165e487853c47c87e49c
2019-04-15 19:42:03 +02:00
Zuul
bd07eada87 Merge "Add error-handling for permission of /etc/octavia" 2019-04-14 21:52:05 +00:00
Zuul
6e321eb218 Merge "Fix the amphora base port coming up" 2019-04-09 14:46:36 +00:00
Zuul
b207213204 Merge "Fix spare amphora check and creation" 2019-04-06 01:55:43 +00:00
Michael Johnson
41ff43131f Fix the amphora base port coming up
A recent change[1] broke the base port IP address coming up in the
amphora. This would cause active/standby and single topology amphora
with members on the VIP subnet to fail.

This patch resolves this issue by not flushing the eth1:0 address.

Story: 2005383
Task: 30368

[1] https://review.openstack.org/#/c/648504/

Change-Id: I52e7e9f172b7783bae09be76cc137f4e7198165f
2019-04-05 11:42:47 -07:00
Gregory Thiemonge
951afb9a0a Fix IPv6 in Active/Standby topology on CentOS
Avoid duplicated IPv6 VIP addresses on CentOS in Active/Standby mode,
Keepalived will set/unset the VIP address.

Story: 2005365
Task: 30340

Change-Id: I05b31ba628bafeefec36cc5c000dae1aefb63d67
2019-04-04 13:23:56 +02:00
Zuul
a728bc000f Merge "Fix setting of VIP QoS policy" 2019-04-03 22:37:52 +00:00
Gregory Thiemonge
0b468090e6 Fix spare amphora check and creation
This patch fixes an issue when the SparesPool table is empty that blocks
spare amphorae creation. It creates a new spares pool entry if the table
is empty.

Story 2005352
Task 30306

Change-Id: I0ce2778277640ee9e509c709bf8621b8b025d6d3
2019-04-03 14:13:59 -07:00
Gregory Thiemonge
5fb79c9495 Fix invalid query selector with list_ports
Fixed an exception thrown by neutron_client's list_ports when the
deletion of the VIP security group fails.

Story 2005355
Task 30309

Change-Id: I7d972dcc6b43406523063f2082b42e2d9a2b50c9
2019-04-03 17:20:43 +02:00
Carlos Goncalves
e0c45ce4d2 Fix setting of VIP QoS policy
Load balancers were going in to ERROR when updating vip_qos_policy_id in
two different cases:

- QoS extension enabled: the VIP DB data model was incorrectly
  constructed ('vip_qos_policy_id' where it should have been
  'qos_policy_id')
- QoS extension disabled: setting an UUID or None would fail in the LB
  update flow as the extension is disabled, and the API would return
  HTTP 202 to the user.

Story: 2004602
Task: 28512

Change-Id: Ie974afa52fe70cbab72b7e7f75bf7ee1015e148c
2019-04-03 14:59:58 +02:00
Zuul
147a340f40 Merge "Fix diskimage-create tox, add `build and test` targets" 2019-04-03 03:12:17 +00:00
Zuul
3aa581e6bc Merge "Fix VIP plugging on CentOS-based amphorae" 2019-04-03 03:12:10 +00:00
Zuul
5eee09c85a Merge "Add support to the Python Visual Studio Debugger" 2019-04-02 22:55:27 +00:00
Carlos Goncalves
95a872fcd9 Fix VIP plugging on CentOS-based amphorae
ifup does not provide option -v in CentOS-based amphorae.
This option was added in I0dbb145ab9a0bb8f831c1db28cabd262f9394e7e.

Story: 2005341
Task: 30288

Change-Id: I56947e0d2bb207b59b0b3928efc96546d6410f43
2019-04-02 13:59:29 +02:00
Zuul
9e5e5cd22f Merge "Fix initialization of Barbican client" 2019-03-31 09:06:05 +00:00
Carlos Goncalves
31741aa474 Add support to the Python Visual Studio Debugger
Change-Id: I1051656d61709c2f418e2fabdee2d16c889b7efd
2019-03-29 11:34:16 +01:00
Michael Johnson
23a411413f Fix ifup failures on member interfaces with IPv6
When an older version of ifup is used, there are cases where bringing
up an IPv6 address on an interface will fail with "RTNETLINK answers:
File exists"
This patch corrects this issue by bringing the interface up and
flushing the existing addresses prior to the ifup.
This returns a previous behavior of the ifdown/ifup commands.

Change-Id: I0dbb145ab9a0bb8f831c1db28cabd262f9394e7e
Story: 2005320
Task: 30248
2019-03-28 11:45:19 -07:00
Zuul
ab413f971e Merge "Replace openstack.org git:// URLs with https://" 2019-03-27 17:17:02 +00:00
Zuul
971debcc75 Merge "Adds server_certs_key_passphrase to octavia.conf" 2019-03-27 11:22:39 +00:00
Nir Magnezi
962f5f26a5 Adds server_certs_key_passphrase to octavia.conf
The server_certs_key_passphrase was added in
I06d329ca53bc36bd27f7870ae7c7ca0cf18575b2 and should be
a part of the example octavia.conf

Change-Id: I5e60e8fbb7af381b59c6d7b02d5ba8eb47e91720
2019-03-26 16:25:23 +02:00
Ian Wienand
b0bc17a202 Replace openstack.org git:// URLs with https://
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.

This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.

This update should result in no functional change.

For more information see the thread at

 http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html

Change-Id: I72f802b75abb2d3ab3f9b693b40b2cd2890b9980
2019-03-24 20:34:48 +00:00
Michael Johnson
811ec10f32 Make sure the expected codes list is sorted
Previously the HTTP expected codes was using a set data type.
This patch changes the set to a sorted list to allow for consistent
testing and to make sure our expected codes list is always nicely
sorted.

Change-Id: Id53c2552221bb133d69193f60516c6a785b8c7f7
2019-03-21 14:29:26 -07:00
7736eead78 Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: I4067d881c500699d1a853db4d512aa64823f5ddb
Sem-Ver: feature
2019-03-21 17:27:40 +00:00
Zuul
68b9d06dae Merge "Fix a lifecycle bug with child objects" 4.0.0.0rc1 2019-03-21 00:24:58 +00:00
Zuul
a635dd6bc9 Merge "Limit spares pool to the spare_amphora_pool_size" 2019-03-20 21:31:54 +00:00
Michael Johnson
f73fe9c084 Fix a lifecycle bug with child objects
In some edge cases, when a request comes in to update a child
resource (member, HM, or l7rule), the API would not always make
sure the parent object (pool or l7policy) was in a mutable status.

This patch fixes this by checking the parent provisioning_status
before allowing a muttable change on a child object.

It also resolves two cases where a parent object status was not being
reset on a reverted flow.

Change-Id: I86f76bebce0993215fd34ccd33251ba1e6c325a9
Story: 2005249
Task: 30043
2019-03-20 12:47:54 -07:00
Zuul
090c36cfd2 Merge "Refactors LB delete flow and removes listener delete" 2019-03-20 11:48:44 +00:00
Pavel Abalikhin
dc5a708d9a Fix initialization of Barbican client
Region and endpoint_type parameters should be used when initializing
Barbican client.

Change-Id: Id5a0c6f061e36b93e82d2eea8a5bac9ede66b159
Story: 2005233
Task: 30015
2019-03-18 12:14:23 +03:00
German Eichberger
6a6e0d243b Refactors LB delete flow and removes listener delete
This refactors the method generating the lb delete flow and
removes redundant code between cascade and the normal delete.
It also removed the listener delete from the non-cascade flow
thus speeding up the deletion.

Change-Id: I6133e9b5f1c4c440a56bf75a1e3369424971f33a
2019-03-14 10:29:26 +00:00
Michael Johnson
ae26cf9ebf Add a bionic test image periodic job.
Change-Id: Iea0bc66f56d0d07f3f7fdf0d6c45ed20527f334c
2019-03-13 09:36:35 -07:00
Kenichi Omichi
6c0af86e4c Add error-handling for permission of /etc/octavia
create_certificates.sh requires permission of /etc/octavia basically
and creates certificates under that. If not granting enough permission
the script creates these files under current directory and that makes
mess. So this patch adds minimum error-handling for avoiding that.

Change-Id: I5166329a7c45c8f17890f11af99bedb206144de5
2019-03-13 12:37:37 +00:00
Zuul
db84b649d7 Merge "Remove unnecessary \n from create_certificates.sh" 2019-03-13 10:42:29 +00:00
Zuul
12668dec63 Merge "Fix LB failover when in ERROR" 2019-03-12 23:44:08 +00:00
Zuul
db1f078765 Merge "Fix typo and remove useless lines in user guide" 2019-03-12 22:17:13 +00:00
Michael Johnson
a205ab3ebe Limit spares pool to the spare_amphora_pool_size
This patch fixes a bug where the housekeeping controllers may launch
more spare amphora than the spare_amphora_pool_size setting.

Story: 2003094
Task 23186

Change-Id: I4c98b3442d2471662488184fa7e91ac64ec33279
2019-03-12 09:32:43 -07:00
Zuul
c6eb595796 Merge "Set octavia available in tempest config" 2019-03-12 12:37:36 +00:00
Zuul
93baf20b7d Merge "Resolve amphora agent read timeout issue" 2019-03-12 12:35:53 +00:00
Zuul
f935cab208 Merge "Fix an amphora driver bug for TLS client auth" 2019-03-11 18:56:43 +00:00
Zuul
404607b705 Merge "Fix parallel plug vip" 2019-03-11 18:56:38 +00:00
Zuul
7fc5406bd2 Merge "Fix performance of housekeeping DB clean up" 2019-03-11 18:56:32 +00:00
Gregory Thiemonge
ad81ad4175 Fix typo and remove useless lines in user guide
- The details on 'admin' user and its ID doesn't provide significant
  information
- The 2nd 'tls_secret1' in the HTTP and TLS-terminated HTTPS section is
  not used

Change-Id: Ic8fd7fed4454d1c7c7e66d433655c0d54221e86a
2019-03-11 15:36:55 +01:00
Zuul
5b3b0c6b16 Merge "Add a prelude to the Stein release notes" 2019-03-10 10:13:36 +00:00
Zuul
6e1ecac44d Merge "Fix updates to the provider driver guide." 2019-03-09 08:54:56 +00:00
Kenichi Omichi
2850c84770 Remove unnecessary \n from create_certificates.sh
When operating bin/create_certificates.sh, it shows like
 ...
 certificate need to be different so a hacker can't just use the server certificate from a
 compromised amphora to control all the others.
 \nTo use the certificates copy them to the directory specified in the octavia.conf

If we want to add a new line with "\n", we need to pass -e to echo.
Otherwise, we can just remove it.

Change-Id: I9cf7da7650df29c97ab8c46846dbf62f2bede5f4
2019-03-09 00:59:15 +00:00
Michael Johnson
4c0fd91dcc Add a prelude to the Stein release notes
This patch adds a prelude to the stein release notes and fixes some
formatting issues in previous Stein release notes.

Change-Id: Ic0e8d9e70eb61ef471304ecfd9985c8da0725b3d
2019-03-09 00:07:06 +00:00