10277 Commits

Author SHA1 Message Date
Giulio Fidente
086238e911 Enable Ceph RGW 'account in url' option
This requires an update of the endpoint but is necessary to be able
to use public-readable containers (like temporary URLs) with RGW.

Change-Id: I6bd11bdf9c74db24c0d21fa600030e9f3b144df0
Closes-Bug: 1826894
(cherry picked from commit 7c379543ccab831da0bf4f8f4b850b534d5c5247)
2019-06-20 17:25:48 +00:00
Zuul
14f4f239d6 Merge "Override ovn::controller::hostname to use hiera:fqdn_canonical" into stable/stein 2019-06-20 16:45:14 +00:00
Zuul
8e33c2ae36 Merge "Disable iscsi.service to avoid iscsid on host from getting started" into stable/stein 2019-06-20 16:45:07 +00:00
Zuul
a83aefcd09 Merge "Put on hold the Ansible package update until is fixed" into stable/stein 2019-06-20 16:14:40 +00:00
99039a8195 Override ovn::controller::hostname to use hiera:fqdn_canonical
ovn::controller::hostname defaults to ::fqdn,
hostname can differ based on how nova configures it, detected
when dhcp_domain name is removed in [1].
So it's good to rely on fqdn_canonical hiera key which
nova also relies on to set "host" in nova.conf.

This backport excludes neutron_url_timeout chnage.

Related-Bug: #1829993
Change-Id: If52302b5a04b5e146ac53ccd3fc65a064b2df2fb
(cherry picked from commit 5e83eeda5b5d85022a48b71c10bcad0155063779)
2019-06-20 12:49:10 +05:30
Zuul
9ebe0a0b33 Merge "Fix network rename + service_net_map_replace" into stable/stein 2019-06-19 23:13:23 +00:00
Takashi Kajinami
5e70fa8691 Disable iscsi.service to avoid iscsid on host from getting started
When some stale shutdown happens on the node, iscsi.service detects
remaining information about iscsi connection, and recovers connections
based on the information, with starting iscsid service on host.
This causes a collision between iscsid on host and iscsid in container,
which makes iscsid container keep restarting.

This patch makes sure that iscsi.service on host is disabled
when we deploy iscsid container, to avoid iscsid on host is started
unexpectedly.

Change-Id: I6c36cd15edfa53c3c76be9095ff40cecf451490d
Closes-Bug: #1833019
(cherry picked from commit 0d67ecaf75d9375e2a88479514ce6cb7e910ec5e)
2019-06-18 08:46:58 +09:00
Alex Schultz
eff8376233 Fix bare reference of cinder_enable_iscsi_backend
Ansible is throwing a deprecation warning for this so we need to add a
|bool to the usage of cinder_enable_iscsi_backend

Change-Id: If536dbc8ace915d171a23e289da2777e74dc3b27
Related-Bug: #1832402
(cherry picked from commit ed5c2ad70a13a564efab35ca3b677511053dbaa0)
2019-06-17 14:15:26 +00:00
Carlos Camacho
126ab39816 Put on hold the Ansible package update until is fixed
Package update for Ansible breaks[1] with:
Ansible 2.7 crashes on apt upgrade
because it upgrades itself to 2.8:
"fragment_class is None"

[1]: https://github.com/ansible/ansible/issues/56636

Change-Id: I1dabe448edfb118440b9ef1ee59c2e080d16ccf8
Closes-Bug: 1831589
(cherry picked from commit 53650f9635bc3b911e368a894603d7d07e3dec6a)
2019-06-17 12:19:22 +02:00
Zuul
b8ebdfda4e Merge "Add panko_api_cron container" into stable/stein 2019-06-16 05:51:13 +00:00
Zuul
9267601415 Merge "Fix NovaNfs role parameters" into stable/stein 2019-06-15 16:37:41 +00:00
Harald Jensås
459b873c29 Fix network rename + service_net_map_replace
If name_lower of a network is changed, and service_net_map_replace
is used. The subnet defined for the network in roles_data would
have to be updated to match the new name_lower. This was not the
case prior to stein, because roles_data did'nt include the subnet.

A downstream regression test is failing because of this. The
workaround is to update roles_data with a value for the subnet
that match name_lower.

This patch should fix the need to update roles_data in the case
that the net_map_replace matches the subnet in roles_data and no
additional subnet with this defined for this network in
network_data.

Closes-Bug: #1832759
Change-Id: I10f99fad0f0016bf81edd53e1c5579f9d5c0ef88
(cherry picked from commit 564d89b2f8609c79a2c21224c72a15b45397fbb7)
2019-06-15 07:54:10 +00:00
Zuul
1b30a36250 Merge "Remove scenario008 jobs" into stable/stein 2019-06-15 06:13:22 +00:00
Zuul
9fee07bddd Merge "Set cache_backend for token caching" into stable/stein 2019-06-14 19:40:53 +00:00
Zuul
cf91366752 Merge "Explicitly set ansible_python_interpreter in external upgrade playbook" into stable/stein 2019-06-14 19:37:14 +00:00
Zuul
b800722e5d Merge "Handle openvswitch meta-package on undercloud upgrade." into stable/stein 2019-06-14 19:22:27 +00:00
Piotr Kopec
247e8e86f3 Fix NovaNfs role parameters
This I2702a022565a130ab339d165cb2252ad67d1162e introduces bug
which breaks NFS for Nova. The NFS task in in host_prep_tasks
did not run because we did not meet the nfs_backend_enable|bool
condition.

Closes-Bug: #1832850

Change-Id: Id918080bf0817ce24eb4abe716a4f1b1375c236d
(cherry picked from commit 60248889a59957c1b323ce6a9859d56eb78cfce3)
2019-06-14 15:10:31 +02:00
Zuul
ee46829483 Merge "Remove incorrect use of PlacementApi in ControllerStorageNfs" into stable/stein 2019-06-14 11:45:35 +00:00
Jiri Stransky
d5d227b548 Explicitly set ansible_python_interpreter in external upgrade playbook
During the run of external upgrade playbook, we connect to systems
with different OS releases via delegate_to, which seems to confuse the
autodetection of Python interpreter. Set it explicitly to
platform-python which should work both on EL7 and EL8.

Co-Authored-By: Sergii Golovatiuk <sgolovat@redhat.com>
Change-Id: Ieb486f0c3e4de7229cdd2be49d4d0f038668f06d
Closes-Bug: #1830713
(cherry picked from commit 770b578bfbb151a91184f1e6f403e952def0c30e)
2019-06-14 09:37:50 +00:00
Rabi Mishra
0f5bc4d1b5 Set cache_backend for token caching
'fernet' is the token provider since octata. As we've memcached
in the undercloud, we should enable caching by setting
cache_backend to 'dogpile.cache.memcached'.

Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
Closes-Bug: #1832437
(cherry picked from commit e2a4d90aad3a6978ea9a6e4de132adca51df0c15)
2019-06-14 08:20:33 +05:30
Zuul
068c5c41c5 Merge "Add healthcheck to ironic_pxe_http" into stable/stein 2019-06-14 01:36:04 +00:00
Zuul
7869cd9cd8 Merge "Fix RedisVirtualIP when overrdiing InternalApi name_lower" into stable/stein 2019-06-14 01:34:35 +00:00
Ronelle Landy
d76839874f Remove scenario008 jobs
ODL is no longer tested.

Change-Id: I056f69aab636d7d03c1eb78b38078f80e7150ca9
2019-06-13 20:44:30 +00:00
Giulio Fidente
c433f92585 Remove incorrect use of PlacementApi in ControllerStorageNfs
Looks like we accidentally added a service we didn't want in Stein
for the ControllerStorageNfs role.

Closes-Bug: 1832748
Change-Id: I1086ca9c9d070852b88faed1168bdd601e0dfdae
2019-06-13 17:18:06 +00:00
Zuul
b8b6273dc3 Merge "Fix log owner on computes during overcloud deploy runs" into stable/stein 2019-06-13 13:59:50 +00:00
Zuul
17ba8d8350 Merge "Force ansible serial to 1 for the Controller" into stable/stein 2019-06-13 13:59:49 +00:00
Jose Luis Franco Arza
09465e4261 Handle openvswitch meta-package on undercloud upgrade.
As done for the overcloud in [0], we need to include the
same special package handling in the tasks in charge of
upgrading the undercloud.

This patch adds special handling for the rhosp-openvswitch
layered product package to ensure that openvswitch networking
remains available during the upgrade.

[0] - 1773afb068

(cherry picked from commit bbc18dd8d8db9f24bfb1e7dbb5ee760bd9036465)
Change-Id: Ib115e70ce0ce53a8638ccbe6c9fe6ed6a421e09b
Closes-Bug: #1830627
2019-06-13 10:56:13 +00:00
Zuul
8ba51e65f2 Merge "Configure server_certs_key_passphrase for Octavia" into stable/stein 2019-06-13 02:40:00 +00:00
Harald Jensås
46741fc85d Fix RedisVirtualIP when overrdiing InternalApi name_lower
When overriding RedisVirtualIP name_lower and using the
service_net_map_replace the overridden name_lower is was
not used in VipSubnetMapDefaults.

Get name_lower from the _service_nets jinja2 variable
which holds the replaced name_lower for the network when
service_net_map_replace is used.

Closes-Bug: #1832461
Change-Id: I839474dcce749fc3a75ae0e1be16780ddb83f5b3
(cherry picked from commit 2bd0012a6e1fc0decad9522ab1d50491f991cbe1)
2019-06-12 23:02:49 +00:00
Zuul
10e09446a0 Merge "Make NovaResumeGuestsStateOnHostBoot podman compatible" into stable/stein 2019-06-12 17:55:15 +00:00
Mathieu Bultel
0339c45d99 Force ansible serial to 1 for the Controller
By introducing update_serial variable we parallelize update
execution on non-pacemaker enabled nodes. Custom role data users
need to update their role files. By default we do serial 1 making
sure nothing changes for users who didn't update their role data.

Resolves: rhbz#1652057
Closes-Bug: #1831617

Change-Id: I4ee0110a6c2b9466d81e37e5df27f5f81a6eceb5
(cherry picked from commit a59a188a6b6ef7275d318d95b17d3a692065e16a)
2019-06-12 14:56:40 +00:00
Zuul
fdcfc30583 Merge "Re-enable manila dashboard" into stable/stein 2019-06-12 12:55:30 +00:00
Zuul
da08c3237f Merge "Configure Neutron API for Nova Placement..." into stable/stein 2019-06-12 12:48:44 +00:00
Martin Schuppert
1d02e964db Fix log owner on computes during overcloud deploy runs
[1] switched to run nova-manage discovery as non root user. In case of
updates there can be already a nove-manage log owned by root from previous
runs. This change make sure we change the owner of nova-manage log to
nova:nova on overcloud deploy runs on the computes

[1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova-compute-container-puppet.yaml

Closes-Bug: #1832482

Change-Id: Ie6d3f5262f7eb20ef92b07f2f359d88cb77b8752
(cherry picked from commit ccabc8f8e68c12321b98e4ada12c005d61b724a1)
2019-06-12 12:49:34 +02:00
Zuul
3b72463eed Merge "Correct ceph configuration for scenario 10 environments" into stable/stein 2019-06-12 05:41:18 +00:00
Zuul
b695c0af15 Merge "Add networks to Standalone role" into stable/stein 2019-06-12 03:08:19 +00:00
Zuul
c4ac068ef3 Merge "Add {{role.name}}RemovalPoliciesMode parameter" into stable/stein 2019-06-11 18:21:41 +00:00
Zuul
360f0087a4 Merge "DVR neutron template should enable ARP responder" into stable/stein 2019-06-11 18:00:40 +00:00
Goutham Pacha Ravi
d52e34b8cd Re-enable manila dashboard
The Shared File Systems service (manila) provides
a dashboard plugin that needs to be enabled by
tripleo. It appears that it was disabled inadvertently
while triaging a bug with the dashboard and sqlite.

See: Launchpad bug #1766184
and associated commit: https://review.opendev.org/#/c/613186/

Change-Id: If4bc4ed0e9fa31e11a5a701dc57ffdf67aade861
Closes-Bug: #1832302
(cherry picked from commit 1de24c49624049787cbd290d11b1eecefc4d62df)
2019-06-11 16:02:02 +00:00
Zuul
cc867e6fec Merge "Fix correct network for nova-vnc" into stable/stein 2019-06-11 13:57:41 +00:00
Alex Schultz
e5e7fea691 Add networks to Standalone role
The standalone role can be used with and without an undercloud. If you
deploy it with an undercloud and use network-isolation, then the
deployment will fail because the networks aren't defined in the role.
Since it doesn't hurt to have them on in the non-undercloud version,
lets add them back in.  They were previously removed as part of
https://review.opendev.org/#/c/628265/

Change-Id: I366631cb6ecd39595c00204a02408beb431af70e
Closes-Bug: #1832043
(cherry picked from commit da1827f7d348fd90e00f8381347febe01b6f7239)
2019-06-11 13:31:00 +00:00
Martin Schuppert
3ba431d305 Make NovaResumeGuestsStateOnHostBoot podman compatible
With podman therefore are changes required to the libvirt-guests
unit file and how we dealt with dependencies of the containers.
With podman systemd is used to manage the containers which we now
can use for container dependencies and use libvirt-guests from
inside a container.

Change-Id: I2a1f370732effd3303942dd5ec46892ec4a85df9
Closes-Bug: #1830067
(cherry picked from commit 6b0d025fd6f5b44428555d12071c700d794a687e)
2019-06-11 13:29:08 +00:00
Ade Lee
e6c610ac6a Fix correct network for nova-vnc
The network for nova-vnc is not set correctly when determining
principals and hostnames for TLS certs.

Closes-Bug: #1832013
Change-Id: Ie8f31413a485c7a91a421ffeefe230a353266993
(cherry picked from commit aa305a9d7ff8162d5acc5e1698badce2a6e61c04)
2019-06-11 06:05:40 +00:00
Vinay Kapalavai
c2ceefcd58 Add panko_api_cron container
Currently panko expirer isn't running in a separate container,
which results in events piling up in the configured database.
This change deploys panko_api_cron as a container and
periodically deletes events from db

Closes-Bug: #1832274
Change-Id: I4c941048a3561af9458208fe86e1b86156eb7ebc
(cherry picked from commit 66a638a8df8fa5b7c9bb92eb1e9da9d09c1fb447)
2019-06-10 18:25:06 -04:00
Rabi Mishra
b4779ec178 Add {{role.name}}RemovalPoliciesMode parameter
This adds a new paramter to reset/update existing blacklisted nodes
set prior to this update with either node delete or using parameter
{{role.name}}RemovalPolicies.

Related-Bug: #1741053
Change-Id: I870d7605e35a7cda76d9de0e8830a87c898533d6
(cherry picked from commit b3b9b44dae232447d5d3fc181a4f7922ef85b597)
2019-06-10 21:35:03 +00:00
Karthik S
aa2be6cbe0 Add ComputeHCIOvsDpdk role
Created a role for ComputeHCI and OvS DPDK based on the existing
ComputeHCI and ComputeOvsDpdk roles.

Change-Id: Ib5ead8dbfd3e0697585d7ff597634b7f42df1052
(cherry picked from commit 166dd42fcdc834cf2ea053a979ae3d012cb7b7e6)
2019-06-10 14:36:16 +00:00
Zuul
a42b885dc2 Merge "Fix disappearing Puppet logs" into stable/stein 2019-06-10 10:54:23 +00:00
Zuul
dfc31b9aab Merge "Clean metrics related environments" into stable/stein 2019-06-10 05:07:50 +00:00
Jiri Stransky
242efd05cd Fix disappearing Puppet logs
It seems that recently Puppet logs started disappearing. Passing
`--logdest` to `puppet apply` multiple times was probably working
before as described in change
Id5212b3ed27b6299e33e81ecf71ead554f9bdd29, but it seems to work no
longer. In my testing, the output went only into syslog, and if Puppet
failed, we had no Puppet output in the Ansible logs.

The fix is to only log to console (as is the default) and use `logger
-s` to effectively `tee` the output into syslog too. The logger
command also has `-t puppet-user` because that's how Puppet tags its
output when running with `--logdest syslog`.

Change-Id: I46194897640198b6d817faf00be1d565a680ec02
Closes-Bug: #1831887
(cherry picked from commit fda0f4284b5972eb0716675a128e43104f5181c7)
2019-06-09 16:29:06 +00:00
Pranali Deore
b12c8035d7 Add more settings for glance image cache
Adding some THT parameters for controlling below cache settings,

 - image_cache_dir
 - image_cache_max_size
 - image_cache_stall_time

blueprint: split-controlplane-glance-cache

Change-Id: Id30392df14a79d02cc9236fe7843fc9bff14ba9d
(cherry picked from commit 1f2a71e41b708fa71fbee2d64abbeae1596eb52c)
2019-06-08 09:52:51 +00:00