puppet-tripleo/manifests
Michele Baldessari 72392a373c Use verify_on_create when creating pacemaker remote resources
We currently create remote resources without waiting for their creation.
This leads to the following potential race (spotted by Marian Mkrcmari):
- On Step1 pacemaker bootstrap node creates the resource but the remote
  resource is not yet created
- Step1 completes and Step2 starts
- On Step2 the remote node sets a property (or calls pcs cib) but the
  remote is not yet set up so 'pcs cluster cib' will fail there with:

    (err): Could not evaluate: backup_cib: Running: /usr/sbin/pcs cluster
    cib /var/lib/pacemaker/cib/puppet-cib-backup20170506-15994-1swnk1i failed
    with code: 1 ->

Note that when verify_on_create is set to true we are not using the cib
dump/push mechanism. That is fine because we create the remotes on
step1 and the dump/push mechanism is only needed starting from step2
when multiple nodes set cluster properties at the same time.

Tested by Marian Mkrcmari successfully as well.

Closes-Bug: #1689028

Change-Id: I764526b3f3c06591d477cc92779d83a19802368e
Depends-On: I1db31dcc92b8695ab0522bba91df729b37f34e0f
(cherry picked from commit b6d02fd500)
2017-05-19 08:09:16 +02:00
..
certmonger Fix MySQL service name parameter 2017-01-27 21:03:58 +02:00
cluster Modify cassandra dependency 2015-12-14 14:15:15 +00:00
firewall Add a default rule for dhcpv6 traffic 2017-01-27 10:54:28 +01:00
glance NFS mounting for Glance file backend 2016-10-21 17:41:03 +02:00
haproxy Fix typo in endpoint.pp 2017-01-20 07:25:52 +00:00
host Delete the unnecessary word in numvfs_persistence.pp 2017-01-23 06:10:02 +00:00
network Fix style nits in contrail manifests 2017-02-01 21:35:15 +01:00
pacemaker IPv6 VIP addresses need to be /128 2017-05-04 12:18:46 +02:00
packages packages: run upgrade at 'setup' stage 2016-10-14 18:17:30 -04:00
profile Use verify_on_create when creating pacemaker remote resources 2017-05-19 08:09:16 +02:00
fencing.pp Add support for fence_ironic fencing agent. 2017-01-11 16:55:32 +00:00
firewall.pp firewall: stop using stdlib stages 2016-11-21 14:24:20 -05:00
haproxy.pp Add tunnel timeout for ui proxy container 2017-04-04 11:06:18 +00:00
init.pp Implement firewalling in tripleo::firewall 2015-07-15 11:58:46 +02:00
keepalived.pp [keepalived] fix netmask for vip 2017-01-25 14:35:53 +00:00
noop.pp Add class to set noop on various puppet resources 2015-07-03 17:16:07 -04:00
packages.pp Ensure package updates don't happen unexpectedly 2016-12-22 16:42:12 +00:00
redis_notification.pp Loadbalancer: Add support for Redis 2015-04-16 21:13:40 +02:00
selinux.pp Add tripleo::selinux 2016-05-05 13:19:20 -04:00
tls_proxy.pp Add TLS proxy resource 2016-12-20 08:50:08 +00:00
trusted_ca.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00
trusted_cas.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00
ui.pp Enable languages in UI config 2017-02-18 15:19:32 +00:00