ed136ef79c
The rolling upgrade test is currently not setting the endpoint correctly due to 'keystone_upgrade' not being defined. This patch removes the requirement to define the var by ensuring that the role always uses haproxy. This prevents having to remember to set the var when doing development and makes better sense for test purposes anyway. This patch also serialises the upgrade and ensures that the backend is set into maintenance mode when the upgrade is actioned. Change-Id: I8f16495607abb871390d28c0b3e9b2b856dda097 Depends-On: I5cbb3824430dc09b36476f81e0cdfd4f0a15f497
67 lines
2.3 KiB
YAML
67 lines
2.3 KiB
YAML
---
|
|
# Copyright 2016 Internet Solutions (Pty) Ltd
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
|
|
# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
|
|
|
|
tempest_run: yes
|
|
|
|
tempest_plugins:
|
|
- name: keystone
|
|
repo: https://git.openstack.org/openstack/keystone
|
|
branch: master
|
|
|
|
tempest_test_whitelist:
|
|
- keystone_tempest_plugin.tests.api.identity*
|
|
|
|
external_lb_vip_address: 10.1.0.1
|
|
internal_lb_vip_address: 10.1.0.1
|
|
test_keystone_host: "{{ external_lb_vip_address }}"
|
|
|
|
# For upgrades we need haproxy variables
|
|
haproxy_default_services:
|
|
- service:
|
|
haproxy_service_name: galera
|
|
haproxy_backend_nodes: "{{ [groups['galera_all'][0]] | default([]) }}" # list expected
|
|
haproxy_backup_nodes: "{{ groups['galera_all'][1:] | default([]) }}"
|
|
haproxy_port: 3306
|
|
haproxy_balance_type: tcp
|
|
haproxy_timeout_client: 5000s
|
|
haproxy_timeout_server: 5000s
|
|
haproxy_backend_options:
|
|
- "mysql-check user {{ galera_monitoring_user }}"
|
|
haproxy_whitelist_networks:
|
|
- 192.168.0.0/16
|
|
- 172.16.0.0/12
|
|
- 10.0.0.0/8
|
|
- service:
|
|
haproxy_service_name: keystone_service
|
|
haproxy_backend_nodes: "{{ groups['keystone_all'] | default([]) }}"
|
|
haproxy_port: 5000
|
|
haproxy_ssl: "{{ haproxy_ssl }}"
|
|
haproxy_balance_type: "http"
|
|
haproxy_backend_options:
|
|
- "httpchk HEAD /"
|
|
- service:
|
|
haproxy_service_name: keystone_admin
|
|
haproxy_backend_nodes: "{{ groups['keystone_all'] | default([]) }}"
|
|
haproxy_port: 35357
|
|
haproxy_balance_type: "http"
|
|
haproxy_backend_options:
|
|
- "httpchk HEAD /"
|
|
|
|
ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
|
|
haproxy_ssl: false
|