Collection of scripts and manifests for module testing
Go to file
Alfredo Moralejo 3cef1a78c1 Undefine ssl certificate parameters for mariadb
After mariadb 10.5.18, mariadb fails to start if ssl cert parameters
are configured in the file but the certificates do not exist [1]. This
problem was fixed in puppetlabs-mysql 13.1.0[2] but we use older
versions (13.0.0 in stable/zed for example) in stable branch jobs.

CentOS Stream 9 has just bumped to mariadb-10.5.22 and this is breaking
all non-ssl jobs.

All releases <= Zed didn't use ssl in mariadb with p-o-i deployments
but puppetlabs-mysql set default values so we need to explicitly
undefine them.

[1] https://mariadb.com/kb/en/mariadb-10-5-18-release-notes/#ssl
[2] https://github.com/puppetlabs/puppetlabs-mysql/issues/1509

Change-Id: Ibe0a00c02dcf855b313ea2e31f098e3d46d2c088
(cherry picked from commit 110821810d)
(cherry picked from commit 0df0cccba6)
(cherry picked from commit dcf8378786)
2024-01-12 17:16:00 +09:00
contrib Fix ipv6 certificate to make it compliant with IDNA 2018-03-20 22:38:03 +01:00
files CentOS: Install gpg keys from repository 2021-01-23 23:43:32 +09:00
fixtures Enable Designate in Ubuntu 2022-07-26 10:13:36 +09:00
hiera Remove leftovers from mongodb 2018-01-25 12:27:36 +01:00
manifests Undefine ssl certificate parameters for mariadb 2024-01-12 17:16:00 +09:00
playbooks Replace the remaning usage of gem --no-ri and --no-rdoc 2021-03-18 21:32:36 +09:00
templates Re-enable Designate on CentOS7 2017-02-02 22:15:04 +00:00
zuul.d Remove tripleo-based jobs ahead of Wallaby EOL 2023-11-07 14:20:09 -05:00
.gitignore Dissuade .gitignore references to personal tools 2018-10-08 11:47:07 +08:00
.gitreview Update .gitreview for stable/wallaby 2021-04-04 14:25:45 +00:00
Gemfile Remove pin of fast_gettext 2022-04-19 23:35:03 +00:00
LICENSE Add LICENSE file 2015-07-13 14:58:14 -04:00
Puppetfile Remove dependency on puppet-tacker 2023-03-10 11:54:53 +09:00
Puppetfile_unit Add Puppet Litmus and remove Puppet 5 testing 2020-09-01 15:06:37 +02:00
README.md Stable-only: Add missing placement service 2021-05-25 01:04:04 +09:00
Rakefile Align the stars 2017-02-01 22:36:10 -05:00
all-in-one.sh Replace gem --no-ri and --no-rdoc with --no-document 2020-09-02 14:15:03 +02:00
bindep.txt Move other-requirements.txt to bindep.txt 2016-08-12 21:10:15 +02:00
configure_facts.sh Ubuntu: Use debian-<release> ceph repo 2022-08-20 16:03:55 +00:00
copy_logs.sh Merge "Capture config files for iscsid/tgtd" into stable/wallaby 2022-08-29 06:18:26 +00:00
external_modules.txt Unpin apt and concat version 2020-05-14 22:44:21 +10:00
functions Ignore sealerts in CentOS 9 too 2022-08-29 10:57:03 +00:00
install_modules.sh Stable-only: Pin semantic_puppet in CentOS 8 2023-04-13 06:28:22 +00:00
install_modules_unit.sh Add puppet core providers for puppet6 2018-11-20 11:37:55 +01:00
openstack_modules.txt Remove dependency on puppet-tacker 2023-03-10 11:54:53 +09:00
run_tests.sh Fix outdated test case name for volume backup tests 2022-09-08 15:17:25 +00:00

README.md

Team and repository tags

Team and repository tags

puppet-openstack-integration

Table of Contents

  1. Overview - What is Puppet OpenStack Integration?
  2. Description - What does the project do?
  3. Development - Guide for contributing
  4. All-in-one - How to deploy a cloud with Puppet
  5. Contributors - Those with commits

Overview

Puppet OpenStack Integration makes sure we can continuously test and validate OpenStack setups deployed with Puppet modules. The repository itself contains some scripts and Puppet manifests that help to deploy OpenStack in OpenStack Infrastructure environment.

Description

OpenStack Infrastructure is deploying four jobs per supported Operating System (Ubuntu and CentOS): scenario001, scenario002, scenario003 and scenario004.

OpenStack services are balanced between four scenarios because OpenStack Infastructure Jenkins slaves can not afford the load of running everything on the same node. One manifest (scenario-aio) is used for people who want to run a simple All-In-One scenario.

- scenario001 scenario002 scenario003 scenario004 scenario-aio
ssl yes yes yes yes no
ipv6 centos7 centos7 centos7 centos7 no
keystone X X X X X
glance rbd swift file swift+rgw file
nova rbd X X rbd X
placement X X X X X
neutron ovs ovs linuxbridge ovs ovs
cinder rbd iscsi iscsi
ceilometer X
aodh X
panko X
designate bind
backup swift
gnocchi rbd
ec2api X
heat X X
swift X
sahara X
trove X
horizon X X
ironic X
zaqar X
murano X
magnum X
mistral X
barbican X X
ceph X X
ceph rgw X
vitrage X
watcher X
bgpvpn-api X
bgp-dr X
redis X
l2gw X
om rpc amqp1 rabbit rabbit rabbit rabbit
om notify rabbit rabbit rabbit rabbit rabbit

When the Jenkins slave is created, the run_tests.sh script will be executed. This script will execute install_modules.sh that prepare /etc/puppet/modules with all Puppet modules dependencies.

Then, it will execute Puppet a first time by applying a scenario manifest. If the first run executes without error, a second Puppet run will be executed to verify there is no change in the catalog and make sure the Puppet run is idempotent.

If Puppet runs are successful, the script will run Tempest Smoke tests, that will execute some scenarios & API tests. It covers what we want to validate, and does not take too much time.

Development

Developer documentation for the entire Puppet OpenStack project:

Note: SSL Certificates

puppet-openstack-integration ships it's own SSL keys and certificates in order to be able to test implementations secured over SSL/TLS.

It doesn't re-generate new ones every time for the sake of simplicity: we're not testing that we can generate certificates properly, we're testing services.

The configuration as well as the commands used to generate these keys and certificates are stored in the contrib directory.

All-In-One

If you're new in Puppet OpenStack and you want to deploy an All-In-One setup of an OpenStack Cloud with the Puppet modules, please follow the steps:

git clone https://opendev.org/openstack/puppet-openstack-integration
cd puppet-openstack-integration
./all-in-one.sh

Look at Description to see which services it will install (scenario-aio).

Contributors