2479 Commits

Author SHA1 Message Date
Alfredo Moralejo
5460291800 Update version in metadata.json
It was bumped as seen with pbr in [1] but puppet modules version is
defined in metadata.json.

[1] https://review.opendev.org/#/c/653763/

Change-Id: I4633d96a0bb7375b95f3fa5f2423325add3b8f4f
2019-05-08 10:55:38 +02:00
Zuul
388f96b348 Merge "Remove ntp" 2019-05-07 13:51:51 +00:00
Zuul
2678a4c2b8 Merge "Switch metrics qdrs to edge mode" 2019-05-05 17:37:30 +00:00
Zuul
a63b0b06ed Merge "Safeguard against 'Undef' length() checks." 2019-05-05 17:37:29 +00:00
Alex Schultz
ce0cffe077 Remove ntp
We no longer support ntp so we should remove the puppet classes and
puppet-ntp usage.

Change-Id: I8d813fdccb45a464e5bbecda2de0f322299cf6e3
Depends-On: https://review.opendev.org/#/c/656999/
Related-Blueprint: tripleo-chrony
2019-05-03 12:07:16 -06:00
Luca Miccini
10216c7865 Expose innodb_lock_wait_timeout via hieradata.
Along the same lines of https://review.opendev.org/#/c/603996/.
This commits expoxes one more knob to the operators, allowing them
to tweak the value of innodb_lock_wait_timeout (default = 50).
From upstream docs:

~~~
Time in seconds that an InnoDB transaction waits for an InnoDB
row lock (not table lock) before giving up with the error
ERROR 1205 (HY000): Lock wait timeout exceeded; try restarting transaction.
When this occurs, the statement (not transaction) is rolled back.
~~~

As for the other parameters it defaults to 'undef' so to keep the
default value of 50.

Change-Id: Ic2e1666ad39762caf9bf68272fdb00ee42658bb8
2019-05-03 14:27:52 +02:00
Martin Magr
ccbaeac737 Switch metrics qdrs to edge mode
We have proper qdrouterd version available now, so we can do the switch.

Change-Id: Ic11e0330010f51c39a8a27700cd7d96b466bd532
2019-05-02 10:02:15 +02:00
Luca Miccini
ffdc816e37 Safeguard against 'Undef' length() checks.
Hit the following during a deployment:

"Error: Evaluation Error: Error while evaluating a Function Call
'length' parameter 'arg' expects a value of type Collection, String,
or Binary, got Undef"

This commit adds a safeguard to skip the length check if
$driver_devices is 'Undef'.

Closes-bug: #1827091

Change-Id: Ide850ab917736f066c38e2e55960a03e1fcd3523
2019-05-01 19:10:51 +02:00
Zuul
23e8ef2ea5 Merge "redis HA: allow SELinux relabel for /var/run/redis" 2019-04-30 11:32:28 +00:00
Zuul
7a1fde15c0 Merge "Remove unused docker_distribution template" 2019-04-29 21:12:58 +00:00
Damien Ciabrini
afebff58fb redis HA: allow SELinux relabel for /var/run/redis
/var/run/redis is bind-mounted from the host, and on every reboot
that directory is recreated with default context for the host.

Configure the bind-mount so that /var/run/redis is relabelled
with a container context every time the redis container is started,
so that kolla can copy its config file and update the owner and
attributes as expected without SELinux denials.

Change-Id: Iaa8a99eb9ced21fb6c7c87c5b56dec55383af9a9
Partial-Bug: #1826554
2019-04-29 18:50:43 +02:00
Zuul
9796ecc00a Merge "Implement stonith levels and enable kdump agent." 2019-04-28 21:44:40 +00:00
Zuul
6b61b80581 Merge "Fix puppet unit ci config" 2019-04-28 11:15:30 +00:00
Emilien Macchi
977cf8f588 Remove unused docker_distribution template
Docker profile was remove, this file is a leftover.

Change-Id: I7bfc011e8ac4f93cf569340aa42e79a45ed6c199
2019-04-28 08:22:12 +00:00
Zuul
2b448c10b3 Merge "nova: Remove profile::base::nova::placement" 2019-04-27 01:22:22 +00:00
Alex Schultz
5cbead7254 Fix puppet unit ci config
We no longer use puppet 4.x so lets drop that job. Additionally we made
the 6.0 version voting but forgot to add it to the gate.

Change-Id: I1e891b8d7b4be7fc679cc352473079354a917c4b
2019-04-26 22:37:39 +00:00
Zuul
58d4e0707e Merge "Fixup tests for puppet 6" 2019-04-26 03:44:05 +00:00
Zuul
e0677e0b1a Merge "Use validate_legacy" 2019-04-26 03:21:54 +00:00
Zuul
fb09d3b585 Merge "Remove ODL tests" 2019-04-25 17:53:09 +00:00
Zuul
760da061e0 Merge "Add support to set ovs_nb_connection" 2019-04-25 17:53:08 +00:00
Luca Miccini
bacfec8647 Implement stonith levels and enable kdump agent.
This commit extends the stonith generation logic to allow operators
to make use of fencing levels.
Given a fence.yaml file like the following:

parameter_defaults:
  EnableFencing: true
  FencingConfig:
    devices:
      level1:
      - agent: fence_agent1
        host_mac: aa:bb:cc:dd:ee:ff
        params:
          someparam: somevalue
      level2:
      - agent: fence_agent2
        host_mac: aa:bb:cc:dd:ee:ff
        params:
          someotherparam: someothervalue

The code iterates over the "levelX" key and creates the respective
stonith resources and adds them to the specified stonith level.

It should be backwards compatible since it checks if "devices" is
an array (no level specified) and reconducts this case to level=1.

Example results below.

* without levels:*

hieradata:

    "tripleo::fencing::config": {
        "devices": [
            {
                "agent": "fence_ipmilan",
                "host_mac": "e4:43:4b:4b:c8:19",

[root@overcloud-controller-0]# pcs status
...

 stonith-fence_ipmilan-e4434b4bc819     (stonith:fence_ipmilan):        Started overcloud-controller-1

[root@overcloud-controller-0]# pcs stonith level
Target: overcloud-controller-0
  Level 1 - stonith-fence_ipmilan-e4434b4bc819

* with levels: *

hieradata:

    "tripleo::fencing::config": {
        "devices": {
            "level1": [
               {
               "agent": "fence_ipmilan",
               "host_mac": "e4:43:4b:4b:c8:19",
            ...
            "level2": [
               {
               "agent": "fence_kdump",
               "host_mac": "e4:43:4b:4b:c8:19",

[root@overcloud-controller-0 ]# pcs status
...
 stonith-fence_ipmilan-e4434b4bc819     (stonith:fence_ipmilan):        Started overcloud-controller-1
 stonith-fence_kdump-e4434b4bc819       (stonith:fence_kdump):  Started overcloud-controller-2

[root@overcloud-controller-0 ]# pcs stonith level
Target: overcloud-controller-0
  Level 1 - stonith-fence_ipmilan-e4434b4bc819
  Level 2 - stonith-fence_kdump-e4434b4bc819

Change-Id: I42033be840ba41e9944af65815a63059834144e9
2019-04-25 16:34:47 +00:00
Zuul
287b28431a Merge "Remove puppet selinux management" 2019-04-25 16:16:04 +00:00
Alex Schultz
9de8c4eb38 Fixup tests for puppet 6
The tests were failing under puppet 6 due to some missing hieradata.
This change pulls in the now seperated selinux and augeas core modules
and adds the missing bootstrap node hieradata.
It also update data structure testing for haproxy testing.

Depends-On: https://review.opendev.org/#/c/655273/
Change-Id: Id59f3759652d8c1efea46918a9dc5c84fac361e3
2019-04-24 22:13:39 +00:00
Emilien Macchi
f1ae850e2c Remove ODL tests
They don't work fine on Puppet 6 & new rspec puppet, and we're going to
remove ODL soon anyway.

Change-Id: I79058181d850fad97b4b54c949ca272896eb1ba4
2019-04-24 22:12:33 +00:00
Zuul
1ad39b25f4 Merge "Fix keepalived VIP monitoring script" 2019-04-23 23:02:09 +00:00
Alex Schultz
fee086939c Remove puppet selinux management
This is managed via ansible now and should no longer be managed via
puppet since we need to have it setup prior to configuring all the
containers items.

Change-Id: Id8d340072ec2941b99b5bc3c6a0511af506ea50b
Depends-On: https://review.opendev.org/#/c/653625/
2019-04-23 16:14:45 -06:00
Lee Yarwood
953b4c3633 nova: Remove profile::base::nova::placement
Depends-On: https://review.openstack.org/#/c/635141/
Change-Id: I523dcbe4559fce067d815a3972df3a909ed87b2e
2019-04-23 13:58:33 +00:00
Zuul
03b94bfb9d Merge "Set octavia provider_drivers config option correctly" 2019-04-22 20:07:17 +00:00
OpenDev Sysadmins
42642c450b OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:35:27 +00:00
Zuul
720e4f6af3 Merge "Bump metadata for release" 2019-04-19 05:40:39 +00:00
Zuul
cd2d4bb33b Merge "Fix missing version requirements" 2019-04-19 05:40:37 +00:00
Damien Ciabrini
f5d6110a79 Fix keepalived VIP monitoring script
Currently keepalived monitors VIPs by running some shell commands
that target HAProxy. The generated shell command is invalid, which
makes keepalived log errors.

Tue Apr 16 11:55:57 2019:    Command = '/usr/bin/test' '-S' '/var/lib/haproxy/stats' '&&' 'echo' 'show'
Tue Apr 16 11:55:57 2019: Script `haproxy` now returning 2
Tue Apr 16 11:55:57 2019: VRRP_Script(haproxy) failed (exited with status 2)

Fix quoting and invoke /bin/sh explicitely to fix the error:

Thu Apr 18 13:16:35 2019:    Command = '/usr/bin/sh' '-c' 'test -S /var/lib/haproxy/stats && echo show info | socat /var/lib/haproxy/stats stdio'
Thu Apr 18 13:16:35 2019: VRRP_Script(haproxy) succeeded

Change-Id: I5a757f88963270e77c8ec411cd292a30f89c6bc0
Closes-Bug: #1825366
2019-04-18 11:47:10 -06:00
Alex Schultz
d1bbad0646 Bump metadata for release
10.4.0 failed due to bad metadata.json. Need to bump the version so we
can release the fix.

Change-Id: Ia0cca4b7b32af010b2a39daa42c2415382cb8723
2019-04-18 09:37:12 -06:00
Alex Schultz
523fe8add9 Fix missing version requirements
Change-Id: Ieb326ae1eca7dc2d565f7a1cd02abe8a2311e836
2019-04-18 09:36:04 -06:00
f2cf8379a5 Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: I3ebb1467744db803b645972b08225e649579807d
Sem-Ver: feature
2019-04-18 14:56:54 +00:00
Zuul
a149a85cfb Merge "Correct how podman exec is called for the neutron-keepalived-state-change" 2019-04-18 11:06:51 +00:00
Rabi Mishra
d88db3ad71 Add support to set ovs_nb_connection
When using ovn provider unless set, it would try to
connect to 127.0.0.1.

Change-Id: If8eb685dd21791b65845afd44fb483592b8bcc0c
Depends-On: https://review.openstack.org/653673
Closes-Bug: #1825146
2019-04-18 13:47:49 +05:30
Zuul
0f14559d10 Merge "placement: Initial extraction of the Placement service from Nova" 2019-04-18 01:50:34 +00:00
Zuul
1c245da0ad Merge "Extend fencing to hosts using fence_rhevm agent." 10.4.0 2019-04-17 17:14:46 +00:00
Rabi Mishra
2a1167dd7b Set octavia provider_drivers config option correctly
Change-Id: I4cb95de0cd963899d2db7e08704ed734e87751d7
Partial-Bug: #1825146
2019-04-17 21:33:38 +05:30
Cédric Jeanneret
f5a7ca6fb5 Correct how podman exec is called for the neutron-keepalived-state-change
Podman exec doesn't have the "--detach" flag, so this one didn't work at
all until now.

Change-Id: Ibf18056dc1ed0168b3aa467e7034af7e59c98cb7
2019-04-17 13:55:29 +02:00
Zuul
11fb84b9e3 Merge "Enable file logging for podman neutron sidecars" 2019-04-17 09:06:03 +00:00
Zuul
ca2985bf8f Merge "Qdr: InternalTLS support." 2019-04-16 20:53:55 +00:00
Cédric Jeanneret
be1c9e1f85 Enable file logging for podman neutron sidecars
In order to get a more complete container logging, we now enable
the file logging for the podman containers.
This will output container stdout/stderr in a file located in the
new /var/log/containers/stdouts location.

This follows the other efforts already made with paunch[1] and
docker-puppet.py (now named container-puppet.py)[2]

Notes:
- podman supports only "json-file", allowing to push files in the
  location we want via the "path" log option
- docker doesn't have the "path" log option and push its log in
  /var/lib/docker/containers/ID/ID-json.log - unusable since it's
  destroyed upon container removal.

[1] https://review.openstack.org/635437
[2] https://review.openstack.org/635438

Change-Id: Ibaa8bca52ea2f68afa1effc989b04d2e6213813a
2019-04-16 14:11:00 +02:00
Emilien Macchi
e10400a022 Release Stein RC1
Change-Id: I3ee8f23f62ff2089797df0a541ae83000d1835d1
2019-04-15 14:47:37 -04:00
Luca Miccini
4187a9d01f Extend fencing to hosts using fence_rhevm agent.
This commit extends the fencing class allowing operators to use
fence_rhevm for nodes running on oVirt / RHV.

Change-Id: I1499ef2efce2b5708262d587bf5786a329e10b09
2019-04-12 11:17:17 +02:00
Cédric Jeanneret
541e9ea2a7 Fix ntp module version to an existing tag/branch
The 4.2.x was apparently removed at some point, and this makes the
unit tests fails.

This patch will need to be backported down to Queens.

Change-Id: I6a5a0541d2cccc2e210954c4d3b3c45d24d1d649
Closes-Bug: #1823838
2019-04-09 09:22:52 +02:00
Jiri Stransky
566703dc27 Fix RabbitMQ locale for CentOS 7 (Puppet part)
It seems that CentOS 7 does not have C.UTF-8 locale. Since we need
UTF-8-based locale, use en_US.UTF-8 instead.

Change-Id: I25d2b9a227a7c5de127bdfd9d2f387be9eea01e0
Partial-Bug: #1823062
2019-04-04 11:14:18 +02:00
Zuul
81d7714744 Merge "Add an Endpoint in ceilometer" 2019-04-03 16:18:10 +00:00
Zuul
8ba5ae4485 Merge "Allow neutron wrapper containers log to syslog" 2019-04-02 22:38:13 +00:00