We did it in the past (3 years ago!) in instack-undercloud:
43e792c684
in the context of: https://bugzilla.redhat.com/show_bug.cgi?id=1235908
This time, we have the same problem when the undercloud is
containeirized.
This patch is actually setting parity with keystone config from
instack-undercloud, but also raising an actual issue that will be
addressed this cycle.
In the meantime, let's increase the token expiration so we can move
forward with testing the containerized undercloud.
Change-Id: Iceaaf53fae44b5bcda9f6517f163939ba6be3d49
Related-Bug: #1761050
These tasks would run before any individual server deployments. A
specific use case is for rebooting dpdk/nfv nodes before applying
NetworkDeployment, etc.
Change-Id: I9e410def25184e635568db67149264ac89c999ed
set_fact logs the fact value. In the case of reading the role_data_*
files, this is very verbose as the files can be large. Use no_log: True
to make these tasks less verbose. The content is saved in the
config-download output already, so no useful info is lost.
Change-Id: Ie6f75113194961628a0c9bdfbfbf5d88a18059eb
Closes-Bug: #1760996
Add blank lines between the Ansible tasks and plays in the stack
outputs. This is an improvement in readability for the user.
Change-Id: I52ebd9081cacf213ac29f1d24e73db6ea5cfe33f
The Neutron UID is not static and may be different between the host and
neutron container. Since we generate certificates and keys on the host
for neutron and then mount them in a container, it is highly likely the
container Neutron UID will not match the one used on the host to
generate the files and reading these files will fail in the container.
This patch modifies the permissions after the files are mounted in the
container to be owned by the correct Neutron UID.
Closes-Bug: 1759049
Depends-On: I83b14b91d1ee600bd9d5863acba34303921368ce
Change-Id: Ibad3f1af4b44459e96a6dc9937e5fcef3e6335f4
Signed-off-by: Tim Rozet <trozet@redhat.com>
LiquidioCompute nodes use OS::TripleO::Services::LiquidioCompute
to apply necessary configuration. This service declaration is
currently missing in overcloud puppet service registry file.
Without this declaration, respective role can not be used.
Change-Id: I17af0945feb5be2450dbcd4f29f861d57d2db205
Closes-Bug: 1760544
This reverts commit bd48087520.
After further inspection It seems that panko dbsync shouldn't be
needed, as it will upgrade an newly created empty db.
And this is assuming we find a way to:
- configure panko database connection properly
- create the db
Knowing that we don't have access to this information[1] as the
new hieradata haven't been rendered at this stage.
So all that to upgrade a newly (I guess empty) database seems like too
much trouble.
The db will be created in the last step of the FFU.
[1] https://github.com/openstack/tripleo-heat-templates/blob/stable/ocata/puppet/services/panko-base.yaml#L39..L75
Change-Id: Ie68849a7033c199c339d28cdb10c3dba9419904b
Closes-Bug: #1760135
* Add a new post install software deployment which runs
a python script to configure the undercloud control
plane network. Replaces section in post shell script.
Change-Id: I1cd594564d1628a6e1fccb9eadf18b716ccc5c72
The Octavia amphora agent periodically sends heartbeat packets to the
Octavia health manager service which listens on udp/5555. A firewall
rule needs to be added to allow such traffic on interface
OctaviaMgmtPortDevName.
Change-Id: If6c98c18dfe02d5ab8af1806fed401ab945ed18a
This is necessary for certain setups (such as enabling multiple LDAP
domains). So, instead of always adding checks every time to see if
we need to refresh or not, lets just do it always, thus simplifying
the already convoluted logic here.
Change-Id: Ie1a0b9740ed18663451a3907ec3e3575adb4e778
Closes-Bug: #1748219
Co-Authored-By: Raildo Mascena <rmascena@redhat.com>
Add static routes to non-local subnets on the ctlplane
network.
Depends-On: I5fbac0c4a75ad2fb719bfd10887778c8eaeacfd6
Change-Id: I43f8fc0aa150f9470e67c8c16a14273abc749c00
In I75f087dc456c50327c3b4ad98a1f89a7e012dc68 we removed much of
the legacy upgrade workflow. This now also removes the
disable_upgrade_deployment flag and the tripleo_upgrade_node.sh
script, both of which are no longer used and have no effect on
the upgrade.
Related reviews
I7b19c5299d6d60a96a73cafaf0d7103c3bd7939d tripleo-common
I4227f82168271089ae32cbb1f318d4a84e278cc7 python-tripleoclient
Change-Id: Ib340376ee80ea42a732a51d0c195b048ca0440ac
When using get-occ-config.sh with a role with a count greater
than 1, the script will now configure all nodes that are of that role
type instead of exiting after only configuring the first.
Previously, the expression ((i++)) evaluated to 0, and when using
arithmetic expansion, causes a rc of 1, which caused the script to exit
after configuring the first node.
Change-Id: I0a39f2b8f1de5302fd426999acfe5043b0361987
Closes-Bug: #1759581
This patch enable the option --purge
in the Cron cleaning the Nova deleted instances.
Also, enables the --all-cells option to
cause the purge to be applied against all cell
databases
Also adds new cron options to purge the shadow
tables daily with a 14 days retention period.
Depends-On: I2dcf37417c36fb8b1bde207c60d22d580005715c
Depends-On: I4ac0c9bd30463c546b141326b1293c78f845cf81
Depends-On: I9ffebfad1d31182f43ed688a7c1ff3047655cbae
Depends-On: Ia99cd83dae1ed35b4cb6f035c445617f1e40f490
Change-Id: I5033f9a4e2f540b9f0154e287560bd6cce412663
The resource name that metadata_settings is referring
to is different from the one defined in resources.
Change-Id: Iae5e03547696063ce9bbe32275dc4dbde468700f
Emilien Macchi
James Slagle
Zuul
Tim Rozet
Dmitry Tantsur
Pradeep Kilambi
mandreou
hanish gogada
Athlan-Guyot sofer
Carlos Goncalves
Harald Jensas
Juan Antonio Osorio Robles
Carlos Camacho
Sai Ram Peesapati
Ben Nemec