2660 Commits

Author SHA1 Message Date
Cédric Jeanneret
0976e4eeb3 Update log-driver value for podman
Depending on the podman version, "json-file" is set to noop and makes
podman crash (true for at least podman 1.4.1), while older versions
re-add this json-file as an alias to k8s-file (true since 1.4.3).

Ensuiring we're using k8s-file will prevent issues depending on the
podman version.

Relates to https://bugzilla.redhat.com/show_bug.cgi?id=1754416
Closes-Bug: #1844856

Change-Id: I70eba8af06741ed81173689a03c4867421917cd6
2019-09-23 13:49:31 +02:00
Zuul
f494131c2d Merge "Use memcached for token caching in authtoken for telemetry services" 2019-09-23 03:30:09 +00:00
Zuul
10310d4dfd Merge "Support deploying multiple Cinder Pure Storage backends" 2019-09-21 20:59:12 +00:00
Zuul
36cbe74aad Merge "Add support for separate VIP in ovn_dbs" 2019-09-21 00:04:22 +00:00
Zuul
2c9a4c12fd Merge "Fix wrong comment about heat_enable_db_purge" 2019-09-21 00:04:21 +00:00
Zuul
5e1ef18516 Merge "Disable keystone token_flush by default" 2019-09-20 23:56:51 +00:00
Zuul
2a930a1a8f Merge "Use memcached for token caching in barbican authtoken" 2019-09-20 10:27:50 +00:00
Zuul
5930ed0450 Merge "Correct wrong name in certmonger_certificate for ovn_controller" 2019-09-20 10:01:15 +00:00
Zuul
d67124c026 Merge "Add basic unit tests for tripleo::profile::base::keystone" 2019-09-20 02:14:51 +00:00
Zuul
f97f1cd0bb Merge "Use memcached for token caching in octavia authtoken" 2019-09-19 19:04:23 +00:00
Michele Baldessari
6b05849ab9 Add support for separate VIP in ovn_dbs
We make the manifest contemplate the fact that ovn_dbs might have
its own separate DB. This way when I620e37117c26b5b51bf9e1eda91daeb00fdf0f43
lands and OVN DB will have its own separate VIP, it will all just work.

We also switch the explicit ordering constraints around pacemaker
resources to collectors, so the case of non existing resources (like the
separate VIP for ovn_dbs) will automatically work.

In the case of separate VIP and stack update we also add code to remove
the additional constraints that were imposed on the internal API VIP due
to being part of haproxy.

Related-Bug: #1841811
Depends-On: I8f7f5534ab3d053ba07d4fd56975e02b3f83eedc
Change-Id: Ic62b0fbc0fee40638811a5cd77a5dc5a4d82acf5
2019-09-19 09:16:14 +02:00
Takashi Kajinami
f907b0ec26 Disable keystone token_flush by default
We don't need token_flush job for keystone now as we use fernet
token which does not require to be persisted inside database.

Change-Id: I164b42d292481530b024ed9f329dd9bfa11aceaf
2019-09-19 08:31:23 +09:00
Kamil Sambor
44f423240a Correct wrong name in certmonger_certificate for ovn_controller
Change-Id: I69f48b174381f3959b2819aec714bbba8bf9cda8
2019-09-17 10:47:42 +02:00
Takashi Kajinami
6080f92919 Add basic unit tests for tripleo::profile::base::keystone
Change-Id: I9e6ce53ea06aededbf3b96a986f2b27283484867
2019-09-17 13:14:51 +09:00
Zuul
2fede0c3af Merge "Add unit tests for tripleo::profile::base::glance::api" 2019-09-16 22:24:55 +00:00
Zuul
cff98c4f60 Merge "Imporve unit test coverage for cinder manifects" 2019-09-16 18:46:48 +00:00
Zuul
e19de636a5 Merge "Improve unit test coverage for neutron manifests" 2019-09-16 18:46:47 +00:00
Takashi Kajinami
9908094644 Fix wrong comment about heat_enable_db_purge
TrivialFix

Change-Id: Id6d04039ab8b6ed839cd6f8e453c3d93fc7dc978
2019-09-16 11:21:45 +09:00
Nathan Kinder
a22d1b5882 Correct ovn_controller_certificate_specs hiera variable name
A recently merged change introduced a new puppet parameter
ovn_controller_certificate_specs with a matching hiera variable.
This change had a typo where the lookup is done from hieradata,
which this patch corrects.

Change-Id: Ifd789d8df0c279ab0a948011c0886e6fca0f664c
2019-09-13 17:01:57 -07:00
Zuul
16a2fcaa60 Merge "Add missing response to Redis tcp-check in HAProxy" 2019-09-13 19:30:50 +00:00
Emilien Macchi
b09d1cb114 Support deploying multiple Cinder Pure Storage backends
Enhance tripleo::profile::base::cinder::volume::pure to support
deploying multiple instances of the cinder::backend::pure backend.
The changes are backward compatible with existing single instance
deployments.

The patch updates the $backend_name parameter to support a list
of names instead of a single name. It also adds a new (optional)
$multi_config parameter, which is a hash of values associated with
each backend. The hash keys match the existing THT parameter names.

Co-Authored-By: Alan Bishop <abishop@redhat.com>
Change-Id: Ia7cc82f5eb4e228a43e47624d87e319ac5340268
2019-09-13 06:12:16 -07:00
Zuul
a0fe2968cb Merge "Enable deep_compare for fencing resource" 2019-09-13 12:31:48 +00:00
Luca Miccini
35964d29d4 Enable deep_compare for fencing resource
This complements https://review.opendev.org/#/c/679407 allowing
deep_compare and update_settle_secs to be set globally via:

  tripleo::fencing::deep_compare: true
  tripleo::fencing::update_settle_secs: XXX

Depends-on: https://review.opendev.org/#/c/679407

Change-Id: I0e1a8da4112479f39ad72fd7184ad5838c5b59fe
2019-09-13 07:01:30 +02:00
Zuul
e71e0fee34 Merge "Support connecting OVN DB over SSL" 2019-09-12 19:00:34 +00:00
Zuul
1d93e2f1fa Merge "Use memcached for token caching in ironic authtoken" 2019-09-12 16:16:55 +00:00
Takashi Kajinami
f2a38f6abd Improve unit test coverage for neutron manifests
Add some missing tests for module import or step switching
to have better test coverage.
Also, add tests for tripleo::profile::base::neutron:server,
which is not tested by serverspec currently.

Change-Id: I4ff1d0856158c206996548bacd4616cb9abc4ef5
2019-09-12 10:13:28 +09:00
Kamil Sambor
f5bbc3ff85 Support connecting OVN DB over SSL
This patch introduce parameters which support using SSL to connect to
OVN_Northbound DB and OVN_Southbound DB.

Depends-On: https://review.opendev.org/#/c/674603/
Change-Id: I03bda5d2e36ab168079fc7e8be220c9a4e29e44f
Signed-off-by: Kamil Sambor <ksambor@redhat.com>
2019-09-11 18:08:12 +02:00
Takashi Kajinami
44cedb08a7 Imporve unit test coverage for cinder manifects
Add some missing tests to assert module import to improve test
coverage for cinder manifests.

Change-Id: Iad5d55d0679c1cbb5bac3c9f737eef89cfc86f39
2019-09-11 23:39:26 +09:00
Radoslaw Smigielski
fb602da597 Add missing response to Redis tcp-check in HAProxy
HAProxy Redis configuration contains the tcp-check section.
That tcp-check section is missing authentication response.

Auth request:
    > tcp-check send AUTH\ password\r\n

Should be followed by:
    > expect string +OK

This make sure we won't continue when auth was not suncesful.

Change-Id: Ia4d615a2a038f0b2e5e33f4b0eabe7f777a74145
Closes-Bug: #1843535
2019-09-11 13:12:48 +02:00
Takashi Kajinami
652a780148 Use memcached for token caching in barbican authtoken
Use memcached to cache token in barbican authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: I5dc9be5a9c6fff46b22064aa1f684be8e48ffa66
2019-09-11 12:51:25 +09:00
Zuul
bbef575f01 Merge "Add missing tests for module import in nova" 2019-09-10 22:13:42 +00:00
Zuul
b12f051818 Merge "Use memcached for token caching in glance authtoken" 2019-09-10 22:13:41 +00:00
Zuul
5d8a30825f Merge "Use memcached for token caching in cinder authtoken" 2019-09-10 22:13:40 +00:00
Zuul
aa4417017d Merge "Use memcached for token caching in heat authtoken" 2019-09-10 22:08:59 +00:00
Zuul
12b7e6f60b Merge "Use memcached for token caching in neutron authtoken" 2019-09-10 22:08:57 +00:00
Takashi Kajinami
ce42b4b096 Use memcached for token caching in authtoken for telemetry services
Use memcached to cache token in authtoken middleware for telemetry
services(gnocchi, aodh and panko), as in-process cache, which we
currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: Ib9a881ab52d44c77eeef1716cb4e9f6340735ebc
2019-09-11 00:11:22 +09:00
Takashi Kajinami
40e01f28f6 Add unit tests for tripleo::profile::base::glance::api
Add missing unit tests for tripleo::profile::base::glance::api .

Change-Id: I3d0c5f163761dd595260620f15fd6f78effca84f
2019-09-10 23:39:27 +09:00
Takashi Kajinami
048b6cfb22 Use memcached for token caching in ironic authtoken
Use memcached to cache token in ironic authtoken, as in-process
cache, which we currently use, was already deprecated[1].
Also, add unit tests for ironic related manifests.

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: I0f0ce58682789c8fd8b8625aaebfe4b75aea6105
2019-09-10 23:01:40 +09:00
Takashi Kajinami
1b1de7c9dd Use memcached for token caching in octavia authtoken
Use memcached to cache token in octavia authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: I09a73ae54e7b4b04396c3b31063833eca8bf5352
2019-09-10 14:30:28 +09:00
Takashi Kajinami
8267a1e45f Use memcached for token caching in heat authtoken
Use memcached to cache token in heat authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: I03026900a8727efc0d5b1d6a73426e96f75749d1
2019-09-08 23:25:39 +09:00
Takashi Kajinami
953d77a327 Add missing tests for module import in nova
There are some imodules imported in tripleo::profile::base::nova,
and tripleo::profile::base::nova::api but not tested.
Add missing these teses, so that we can check all includes are
working as expected

Trivial-fix

Change-Id: Ieca24f03e612859b59913e766f232d957569449e
2019-09-08 22:30:16 +09:00
Takashi Kajinami
22eeade936 Use memcached for token caching in neutron authtoken
Use memcached to cache token in neutron authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: I8a7b01b4f16ab94fedabc20cc876b68d8cb6e04a
2019-09-08 21:54:47 +09:00
Takashi Kajinami
828a387ef9 Use memcached for token caching in glance authtoken
Use memcached to cache token in glance authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: Iba9c1df73c00e5eb314cb6bc2cda06ccd6ead96f
2019-09-08 21:53:48 +09:00
Takashi Kajinami
a44f486f0d Use memcached for token caching in cinder authtoken
Use memcached to cache token in cinder authtoken, as in-process
cache, which we currently use, was already deprecated[1].

[1] Ied2b88c8cefe5655a88d0c2f334de04e588fa75a

Change-Id: If9363e3fa172e9aa36574cc575683cdde2861087
2019-09-08 11:51:03 +09:00
Zuul
d667bad643 Merge "Add support for cinder RBD driver parameter" 2019-09-07 05:07:39 +00:00
Zuul
f959ea6889 Merge "Remove deprecated cinder parameters" 2019-09-07 01:02:52 +00:00
Zuul
1592f94b6f Merge "Fix tripleo::profile::base::monitoring::sensu rspec test" 2019-09-06 23:07:57 +00:00
Alan Bishop
6653440df8 Remove deprecated cinder parameters
Clean up parameters and hiera data associated with deprecated cinder
parameters removed from puppet-cinder by [1].

[1] https://review.opendev.org/678965

Change-Id: Ie763c985d32ecf942b32af2ff0eb5c531547b5c4
2019-09-06 10:58:39 -07:00
Alan Bishop
d4affe0a5b Add support for cinder RBD driver parameter
Add the ability to control the rbd_flatten_volume_from_snapshot
setting in cinder's RBD driver. The parameter has been supported in
puppet-cinder for a while, and this patch makes it possible to
control the value using hiera data.

Change-Id: I430a2d1793ffcd0964d268a1930e3fb85e32a995
2019-09-06 10:57:44 -07:00
Alan Bishop
04b14abc04 Fix tripleo::profile::base::monitoring::sensu rspec test
Add ipaddress fact when testing tripleo::profile::base::monitoring::sensu.
The latest facterdb no longer defines ::ipaddress, which is the default
value for ::sensu module's client_address.

Change-Id: I714b8bf69ef26ee7bb5195a3001f86d45e6e1fb6
2019-09-06 10:49:55 -07:00