openstack
/
puppet-tripleo
Code Issues Proposed changes
RETIRED, Lightweight composition layer for Puppet TripleO
2,161 Commits 3 Branches 39 Tags 63 MiB
Go to file
Michele Baldessari 0f27a41b7b Allow the IHA OCF and fencing resource to be moved to the nova service user 
Currently both nova evacuate and fence compute in the Instance HA
setup of tripleo user the keystone admin user in order to query nova,
evacuate instances, disable/enable the nova-compute service and
call the nova force-down API.

With this patch we introduce the keystone_tenant parameter which is
needed when moving to the nova service user as it is different than
keystone_admin in that case.

Tested as follows:
1. Deployed a normal unpatched OSP13 with IHA
2. Run a redeploy with the following addition:
parameter_defaults:
  ExtraConfig:
    tripleo::profile::base::pacemaker::instance_ha::keystone_password: "%{hiera('nova::keystone::authtoken::password')}"
    tripleo::profile::base::pacemaker::instance_ha::keystone_admin: 'nova'
    tripleo::profile::base::pacemaker::instance_ha::keystone_tenant: 'service'
3. Observe the following:
3.1. Both the fence_compute and nova evacuate resources have updated attributes
3.2. IHA still works correctly

Closes-Bug: #1848451

Change-Id: If6b19ad05e0f91425f93a1c123947e92cf2ba949
(cherry picked from commit 066a360ee5)
(cherry picked from commit 4e785257bd)
 		2019-10-21 11:34:55 +02:00
files neutron dhcpd: Add script for certmonger postsave_cmd 2019-02-14 11:22:35 +01:00
lib Fix interface_for_ip for newer facter versions 2019-07-08 09:32:50 -06:00
manifests Allow the IHA OCF and fencing resource to be moved to the nova service user 2019-10-21 11:34:55 +02:00
releasenotes Merge "Add support for Ironic Networking Baremetal" into stable/queens 2019-08-16 18:47:04 +00:00
spec Merge "Collectd QDR connection" into stable/queens 2019-09-23 19:22:12 +00:00
templates Add dateext and related parameters for logrotate 2019-07-16 00:50:02 +00:00
zuul.d Remove scenario008 jobs 2019-06-13 22:58:13 +00:00
.gitignore Update gitignore not to exclude fixture hieradata 2017-05-17 14:45:35 -06:00
.gitreview OpenDev Migration Patch 2019-04-19 19:35:29 +00:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Load puppet-openstack_spec_helper locally during tests 2018-02-12 10:53:40 +08:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras Collectd QDR connection 2019-09-17 21:41:27 +02:00
README.md Update the doc link 2017-12-16 02:49:05 +00:00
Rakefile Composable HA 2017-01-25 19:32:31 +00:00
bindep.txt Add Puppet package to bindep, for module build 2017-10-27 13:50:15 -07:00
metadata.json Prepare puppet-tripleo 8.5.1 (queens) 2019-09-09 13:05:33 -04:00
setup.cfg Fixes license to explicitly be Apache 2.0 2017-10-09 11:06:29 -04:00
setup.py chmod +x setup.py 2017-10-06 12:28:56 -07:00
test-requirements.txt Remove pinned versions from test-requirements.txt 2018-01-16 12:29:50 +08:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/queens 2018-03-03 11:40:56 +00:00

README.md

Team and repository tags

Team and repository tags

puppet-tripleo

Lightweight composition layer for Puppet TripleO.

Contributing