Go to file
Juan Antonio Osorio Robles 6fa7a0974a TLS by default for the overcloud
This gets a TLS certificate for the overcloud when necessary:

* If no incoming cert/key is provided and we don't expect the
  overcloud's certmonger instances to request the certificates,
  we request one to the undercloud's certmonger local CA.

* If a certificate was provided, we verify if it's user-provided
  or if it was autogenerated.

  - If it was user-provided we pass through that certificate

  - If it was autogenerated, we request or resubmit the request
    if it's needed.

* We also accept the EnableTLS flag, which the deployer can
  explicitly turn off if they decide not to use TLS.

Depends-On: Ic70dd323b33596eaa3fc18bdc69a7c011ccd7fa1
Change-Id: I3d3cad0eb1396e7bee146794b29badad302efdf3
2018-05-08 10:45:29 +00:00
2018-03-07 13:55:23 -05:00
2018-05-08 10:45:29 +00:00
2015-11-30 23:01:07 +00:00
2015-04-09 13:57:40 +00:00
2015-04-29 13:34:49 +02:00
2015-04-29 13:34:49 +02:00
2015-04-29 13:34:49 +02:00
2015-04-29 13:34:49 +02:00
2018-05-08 10:45:29 +00:00
2017-03-10 03:40:32 +00:00
2018-05-08 10:45:29 +00:00

Team and repository tags

image

tripleo-common

A common library for TripleO workflows.

Action Development

When developing new actions, you will checkout a copy of tripleo-common to an undercloud machine and add actions as needed. To test the actions they need to be installed and selected services need to be restarted. Use the following code to accomplish these tasks. :

sudo rm -Rf /usr/lib/python2.7/site-packages/tripleo_common*
sudo python setup.py install
sudo cp /usr/share/tripleo-common/sudoers /etc/sudoers.d/tripleo-common
sudo systemctl restart openstack-mistral-executor
sudo systemctl restart openstack-mistral-engine
# this loads the actions via entrypoints
sudo mistral-db-manage populate
# make sure the new actions got loaded
mistral action-list | grep tripleo

Workflow Development ------------------

When developing new workflows, you will need to reload the modified workflows, e.g the following will reload all the workflows from the default packaged location, or you can use a similar approach to replace only a single workbook while under development. :

for workbook in $(openstack workbook list -f value -c Name | grep tripleo); do
    openstack workbook delete $workbook
done
for workflow in $(openstack workflow list -f value -c Name | grep tripleo); do
    openstack workflow delete $workflow
done
for workbook in $(ls /usr/share/openstack-tripleo-common/workbooks/*); do
    openstack workbook create $workbook
done

Validations

Prerequisites

If you haven't installed the undercloud with the enable_validations set to true, you will have to prepare your undercloud to run the validations:

$ sudo pip install git+https://git.openstack.org/openstack/tripleo-validations
$ sudo yum install ansible
$ sudo useradd validations

Finally you need to generate an SSH keypair for the validation user and copy it to the overcloud's authorized_keys files:

$ mistral execution-create tripleo.validations.v1.copy_ssh_key

Running validations using the mistral workflow

Create a context.json file containing the arguments passed to the workflow:

{
  "validation_names": ["512e", "rabbitmq-limits"]
}

Run the tripleo.validations.v1.run_validations workflow with mistral client:

mistral execution-create tripleo.validations.v1.run_validations context.json

Running groups of validations

Create a context.json file containing the arguments passed to the workflow:

{
  "group_names": ["network", "post-deployment"]
}

Run the tripleo.validations.v1.run_groups workflow with mistral client:

mistral execution-create tripleo.validations.v1.run_groups context.json
Description
RETIRED, A Python library for code common to TripleO CLI and TripleO UI.
Readme 82 MiB