Commit Graph

3817 Commits (master)

Author SHA1 Message Date
Zuul 019ec49518 Merge "Do no set ovn-match-northd-version to true by default." 2023-03-13 19:24:56 +00:00
Takashi Kajinami 3e4ba706bb Make lint jobs non-voting
The current implementation is not compliant with the latest lint
packages. Because TripleO is being retired soon, instead of fixing
the job, let's make it non-voting so that we can merge some last-minute

Change-Id: I2225150e5489c60eebf7cea34f91c89ca64c2fec
2023-03-09 20:39:33 +09:00
Sofer Athlan-Guyot 178c9cb7f5 Do no set ovn-match-northd-version to true by default.
This was introduced in commit ec21edf4d9
when ovn-controllers were not updated before northdb.

Now, ovn-controller are updated first so the "Fail-safe upgrade"
procedure[1] should not be used by default anymore.

Closes-Bug: #2007870


Change-Id: I38829bc84ecc4cdeabd72e94db8341e86a2c1222
2023-02-23 19:00:33 +01:00
Zuul 96e08f65e8 Merge "collectd: Allow duplicate plugins" 2023-02-14 11:54:59 +00:00
Zuul a6f7477631 Merge "Prepare a new release of puppet-tripleo" 2023-02-10 21:50:15 +00:00
Zuul 0f1cdaec15 Merge "mysql: Fix broken log-driver" 2023-02-10 21:50:13 +00:00
Takashi Kajinami 55b5b8096a Prepare a new release of puppet-tripleo
This is to prepare a new release after Zed, so that we use different
versions for master and zed, which is required to make upgrade work

Change-Id: Ibfec3f4bf17284474bc0d6831e6fb8d62fb05a01
2023-02-08 09:25:00 +00:00
Takashi Kajinami 7705e0f53f mysql: Fix broken log-driver
This fixes the wrong edit made by [1] and ensures log driver is

[1] Iffe9c9a1d7ca736f273d2da43928d7da4a99d1d6

Change-Id: I1e679ba4f30cb7f9eb827b91e36cb8feed9afd8f
2023-02-07 17:58:44 +09:00
Zuul dde5b8adde Merge "[Pure Storage] Add iSCSI CIDR list parameter for FlashArray Cinder driver" 2023-02-01 05:00:29 +00:00
Takashi Kajinami 6372a182e4 Ensure haproxy::balancemember::ports is a string
The recent change[1] in puppetlabs-haproxy introduced data type check
and now the ports parameter accept only string or array of strings and
no longer accepts an integer.

This ensures the value is converted to avoid validation errors.

[1] 95ca912f77

Closes-Bug: #2003882
Change-Id: I65720576249f2242331e38762dd0d5860d74de9d
2023-01-26 09:30:02 +00:00
Zuul b34e442bf2 Merge "Cinder: Remove implementation for Dell SC driver" 2023-01-12 09:28:09 +00:00
Zuul b624fc538d Merge "Manila: Remove implementation for VMAX share driver support" 2023-01-12 05:44:13 +00:00
Takashi Kajinami 220da27ac8 collectd: Allow duplicate plugins
Sometimes different services require the same collectd plugin. For
example, ceph-osd and ceph-mon require the common ceph.

This change makes sure that such duplicate requirements do not cause
resource declaration error.

This change is wallaby-backport-potential.

Change-Id: I5592967b3a7bb928265e2ca909cf88a1f92964be
2023-01-12 04:53:41 +00:00
Zuul 79a67be5cf Merge "aodh-evaluator: Require redis backend" 2023-01-11 15:07:01 +00:00
Zuul a0b44af837 Merge "ceilometer-polling: : Require redis backend" 2023-01-11 09:39:44 +00:00
Zuul 140ce74f22 Merge "[Pure Storage] Add NVMe transport parameter for FlashArray Cinder driver" 2023-01-11 06:51:49 +00:00
Simon Dodsley 2e32a8dd97 [Pure Storage] Add NVMe transport parameter for FlashArray Cinder driver
Depends-On: I7e1172b3048e6bf84be7dad4d193f10e9b15138e
Change-Id: I37e84017926baa0db31271c32400938ee53fb3d2
2023-01-03 10:34:12 -05:00
Simon Dodsley 23e2a46730 [Pure Storage] Add iSCSI CIDR list parameter for FlashArray Cinder driver
Depends-on: Ia493843b286bd55002beaf74cca37f500c0448d6
Change-Id: I6a3d2626be0f59500fa164b05d96a8b637c51b86
2022-12-29 10:19:35 -05:00
Takashi Kajinami 65d06c9069 Ironic: Manage [nova] options by puppet
This enables the ironic::nova class, to manage [nova] options in
ironic.conf, to disable/enable power notifications from ironic to

Partial-Bug: #2000308
Change-Id: I273524330c11910e15f8eccdb9025db6e7c881e1
2022-12-22 21:52:04 +09:00
Takashi Kajinami 285607dd6a Cinder: Remove implementation for Dell SC driver
... because it was deprecated several cycles ago in favor of renaming
to Dell/EMC SC driver. The resource template to use this implementation
was already removed from t-h-t by [1].

[1] 3699a56891f8abce10d75a1b1cbbd6f2f775ff77

Change-Id: I4586a887ad25eaa2050ba1459842c248ecca478f
2022-12-12 10:48:28 +09:00
Zuul 1461e26d7c Merge "Ceilometer: Add support for oslo.cache parameters" 2022-12-08 20:08:52 +00:00
Zuul d79306a290 Merge "Adapt to the heartbeat_key parameter migration" 2022-12-07 05:54:05 +00:00
Takashi Kajinami 8bb19dab9c Adapt to the heartbeat_key parameter migration
The heartbeat_key parameter of the octavia::health_manager class has
been migrated to the octavia::controller class, because it is used by
multiple services, and the old parameter has been removed by [1].

This updates the test hieradata to make sure the new parameter is set.


Change-Id: Id1a109e50a11c5dce6c6f9e310f27d3668d011a3
2022-12-06 16:39:56 +09:00
Zuul af765172d6 Merge "Enable fence_watchdog configuration in stonith topology" 2022-12-05 10:53:14 +00:00
Luca Miccini 6fc7430c18 Enable fence_watchdog configuration in stonith topology
This commit extends the fencing manifest to make use of a
"fence_watchdog" device and allows using the resulting "watchdog"
resource in a stonith topology.

In order for this to work the cluster must have been configured with
sbd, either manually or via 'pacemaker::corosync::enable_sbd: true'.
In addition, the fence_watchdog resource needs a supported watchdog
timer device to perform the self fencing.

The fence_watchdog configuration is very much opinionated:
- it assumes the resource name to be 'watchdog' (hardcoded in pacemaker)
- it only supports "all or nothing" scenario, in which all the cluster
  nodes need to make use of it
- it is not supported to be used with pacemaker_remote nodes

The fencing creation logic has been adjusted to use the pacemaker
boostrap node to create the watchdog resource and the stonith topology
for all the nodes in the cluster (since this is a single shared
resource we couldn't reuse the old "every man for himself" logic).

fence_watchdog device can be defined like any other fencing device
via fencing.yaml or equivalent:

  EnableFencing: true
    - agent: fence_watchdog
      host_mac: 52:54:00:74:f7:51

Ideally fence_watchdog should be used a last resort, and so placed
at the bottom of a stonith topology where power-based fencing agents
are the primary choice for fencing.

The default value for stonith-watchdog-timeout (60s) can be
overridden via tripleo::fencing::watchdog_timeout .

Depends-On: Id010a392df0047d53dfab1c21cc78021c8c1aabf

Change-Id: I89a6014ffb40bc0935a348af7687684f3a71a968
2022-12-02 14:57:47 +01:00
Zuul 1e80192b76 Merge "Template option addition for --pids-limit on Galera cluster resource" 2022-11-25 03:55:48 +00:00
Zuul 4de87558af Merge "Stop creating ceilometer database" 2022-11-24 22:54:20 +00:00
Zuul 578d917cab Merge "Ceilometer: Skip configuring db parameters" 2022-11-24 22:54:17 +00:00
Zuul fa9fbe51e9 Merge "Remove manifests for networking-ansible plugin" 2022-11-24 20:31:14 +00:00
Antonio Romito 91eb4140b5 Template option addition for --pids-limit on Galera cluster resource
mysql_bundle.pp has been modified to be able to configure --pids-limit option
using a template. By default the parameter remains 'undef' when not specified.
When "tripleo::profile::pacemaker::database::mysql_bundle::pids_limit:" is used
as an ExtraConfig it will automatically set the value in the Galera cluster

Closes-Bug: #1982751

Change-Id: Iffe9c9a1d7ca736f273d2da43928d7da4a99d1d6
2022-11-24 09:06:30 +00:00
Takashi Kajinami e1fd19eaa5 Manila: Remove implementation for VMAX share driver support
... because the support has been removed.

Change-Id: I98be49707843e9fab65518fbe07f852833ef4b2a
2022-11-22 08:57:46 +00:00
Zuul 1a8f56cecf Merge "Remove manifests for VPP and Neutron ML2/VPP plugin" 2022-11-22 06:20:32 +00:00
Takashi Kajinami cd794e51ea Remove manifests for VPP and Neutron ML2/VPP plugin
... because these services are no longer supported by t-h-t. This
allows us to remove puppet-fdio, which looks unmaintained, from
the dependencies.

Change-Id: Ibe0a59ad3dd9069e9650036cb2af31a3b9ddfb69
2022-11-18 15:29:15 +09:00
Zuul befb989e70 Merge "Support for Cinder IBM Svf driver" 2022-11-16 05:22:51 +00:00
Zuul be6ce360f4 Merge "Support deploying additional internal glance-api service" 2022-11-16 04:09:30 +00:00
Takashi Kajinami 6872a3ef82 Remove manifests for networking-ansible plugin
... because it is no longer supported by t-h-t.

Change-Id: Ie76536c8e3f80feee09ff5b5f8781e938a6e3e56
2022-11-16 10:31:28 +09:00
katarimanoj a7487743e5 Support for Cinder IBM Svf driver
This patch adds support for Cinder IBM Spectrum virtualize family (Svf)

Depends-On: I43f954879de6ce70237cb468e7ef1fbc2649edcd
Change-Id: I3c74f492d9d34eb8e16d9a203b5f02714b02f69a
2022-11-14 11:47:05 +09:00
Zuul 3e1b2ba4a9 Merge "Correct TLS cert permission" 2022-11-09 11:35:36 +00:00
Alan Bishop b3be1dc18c Support deploying additional internal glance-api service
OSSN-0090 [1] recommends deploying two instances of the glance-api
service: a "user facing" service, plus an "internal" service that is
accessible via keystone's internal endpoint.

To support this, the tripleo::profile::base::glance::api class is
enhanced to allow overriding certain associated glance::api parameters.
This makes it possible to override parameters when including the
glance::api class in order to facilitate configuring two different
instances of the glance-api service, each with their own configuration.

The tripleo::haproxy class is enhanced to provide HA support for running
the internal glance-api service on its own TCP port (defaults to 9293).


Change-Id: Ideb5a951d538d9e2c7cca11dfe0e8b99520de959
2022-11-01 11:42:01 -07:00
rabi e40b7c4a23 Bump metadata for tripleo zed release
Bump metadata version to 17.0.0

Change-Id: I6ec41b9059c0af29cde61d7ead556bc3cf836e52
2022-10-31 12:54:22 +00:00
Zuul d649079ee7 Merge "Disable keystone domain creation by keystone::ldap_backend" 2022-10-26 18:24:42 +00:00
Zuul 78ef4f5194 Merge "Remove unused resource to set up ceilometer DB" 2022-10-25 19:44:06 +00:00
Zuul 85876847c8 Merge "fencing: Remove unused logic to detect deployment type" 2022-10-25 03:56:23 +00:00
Zuul 124ef70e0d Merge "MySQL Client: Remove logic for non-containerized deployment" 2022-10-25 03:56:20 +00:00
Martin Mágr 109a62a61e Correct TLS cert permission
This patch corrects file permission of cert directory and certificates
for QDR.

Change-Id: I5a8e4b3598d5e5a30ec967fba504bac91c7f51ec
2022-10-20 11:28:16 +02:00
Zuul c1d535d0ea Merge "haproxy: Remove logic for non-containerized haproxy service" 2022-10-18 11:11:59 +00:00
Zuul 4abef13c85 Merge "Allow passing aditional arguments to wsrep_provider_options" 2022-10-13 21:36:44 +00:00
Luca Miccini 171814ebba Allow passing aditional arguments to wsrep_provider_options
This commit allows to inject arbitrary arguments into the
wsrep_provider_options string.
Operators should be extremely careful in doing so as there is no
validation or syntax checking whatsoever.


  tripleo::profile::pacemaker::database::mysql_bundle::provider_options: 'evs.suspect_timeout=PT30S'

results in:

wsrep_provider_options = evs.suspect_timeout=PT30S;gcache.recover=no;gmcast.listen_addr=tcp://;socket.ssl_key=/etc/pki/tls/private/mysql.key;socket.ssl_cert=/etc/pki/tls/certs/mysql.crt;socket.ssl_cipher=AES128-SHA256;socket.ssl_ca=/etc/ipa/ca.crt;

Change-Id: Ie4711ace66846b10252bccdddae84e045af3f604
2022-10-06 15:24:33 +02:00
Zuul 9842277217 Merge "Fix typos in parameter descriptions, comments and tests" 2022-10-03 12:28:14 +00:00
Takashi Kajinami 6af76714f6 Ceilometer: Add support for oslo.cache parameters
... and ensures memcached backend is set according to the deployment
architecture automatically.

Change-Id: I4c89ce09c7da33254cc01f2b5b1f8c3c7bd8a9b6
2022-09-28 14:47:12 +09:00