8913 Commits

Author SHA1 Message Date
Jose Luis Franco Arza
25a4fb7b62 Force rhsm re-registration during upgrades.
The redhat-subscription ansible module doesn't cover the case
when a system is already registered via Satellite and we try to
upgrade it's repositories to a new version providing a different
activation key. The role will catch that the system is already
registered and it won't register the new activation key.
This patch passes the rhsm_force_registration option when invoking
redhat-subscription during an upgrade. This way the system will
be unregistered and registered again, activating the new key passed.

Change-Id: I9cd35882e5db47d22df8a456749188c17b48e451
Closes-Bug: #1807987
2018-12-11 17:17:29 +01:00
Zuul
a0cf19837b Merge "Allow to skip docker reconfiguration during stack update" 2018-12-11 10:38:51 +00:00
Zuul
bf48c36bc4 Merge "upgrade: remove tasks that stop and disable services" 2018-12-11 05:11:53 +00:00
Zuul
95368f6e30 Merge "Allow to run docker-puppet.py with SELinux enabled" 2018-12-10 22:14:57 +00:00
Zuul
d99e6b5407 Merge "Disable pacemaker on multinode-containers (fs010)" 2018-12-10 18:13:40 +00:00
Zuul
2256a5e84a Merge "Re-implement keepalived restart without pre_deploy" 2018-12-10 18:11:35 +00:00
Zuul
ddc69b2570 Merge "Don't mount data folder" 2018-12-10 17:48:06 +00:00
Emilien Macchi
e4ee042a2a upgrade: remove tasks that stop and disable services
We don't need upgrade_tasks that stop systemd services since all
services are now containerized.
However, we decided to keep the tasks that remove the rpms in case some
of deployments didn't cleanup them in previous releases, they can still
do it now.

Change-Id: I6abdc9e37966cd818306f7af473958fd4662ccb5
Related-Bug: #1806733
2018-12-10 09:19:59 -05:00
Zuul
dbc66fd451 Merge "Add hosts to expected ansible groups" 2018-12-10 12:13:21 +00:00
Mike Fedosin
dcdf75b94f Allow to run docker-puppet.py with SELinux enabled
In docker-puppet.py script we try to relable
/usr/share/openstack-puppet/modules by adding ":z" suffix
in the end.

Unfortunatelly this operation is not allowed in docker with
enabled SELinux. Docker's error message is:

Error response from daemon: error setting label on mount source
'/usr/share/openstack-puppet/modules': SELinux relabeling of
/usr/share/openstack-puppet/modules is not allowed:
"Relabeling content in /usr is not allowed.".

It leads to the fact that during the configuration the jobs fails
with "Permission denied - /usr/share/openstack-puppet/modules"

There is no need to relable that folder since it's read-only.
After removing ":z" it is possible to deploy the overcloud with
enabled SELinux.

Closes-Bug: #1807680

Change-Id: I11c7c5e9594fe0cdb2a114f81033651e411c9e3c
2018-12-10 10:28:18 +00:00
Zuul
64b95749e4 Merge "Update kolla_config to deal with keystone fernet key rotation" 2018-12-08 20:57:26 +00:00
Zuul
a0b72fa415 Merge "Handle python binary look for scripts" 2018-12-08 11:42:23 +00:00
Zuul
2917aca731 Merge "Lower mistral-executor nofile to 1024" 2018-12-08 10:53:56 +00:00
Zuul
c2c0c4f8a2 Merge "Remove CephAnsibleSkipTags from scenario1/4 standalone ci envs" 2018-12-08 09:23:47 +00:00
Zuul
0c05cdaec3 Merge "Remove nic for storage_mgt network" 2018-12-08 07:35:13 +00:00
Giulio Fidente
55a22c5caf Lower mistral-executor nofile to 1024
Containers inherit file descriptor limit from docker daemon (currently:1048576)
which is very high causing python2 subprocess to take very long and ansible
facts gathering to time out.

This patch defaults nofile limit to 1024 for mistral-executor, like it is
on the baremetal node.

Co-Authored-By: Yatin Karel <ykarel@redhat.com>

Change-Id: Ia76fcb87fc98fd93d6f487dd40d407c0bc875ffd
Related-Bug: 1806073
2018-12-08 05:44:58 +00:00
Zuul
e4aa5f8958 Merge "Flatten Aodh service configuration" 2018-12-07 23:52:51 +00:00
Zuul
be322149bc Merge "Update yaml-validate for deployment/ folders" 2018-12-07 23:52:49 +00:00
Zuul
49caf84512 Merge "Fix fs035 by defining a default gateway_ipv6" 2018-12-07 17:32:31 +00:00
Zuul
570f1da4e3 Merge "Remove common bootstrap_nodeid from deploy_steps/tripleo-packages.yaml" 2018-12-07 16:57:36 +00:00
Zuul
fd04035471 Merge "Set facter variable 'uuid' explicitly in docker-puppet.py" 2018-12-07 06:18:21 +00:00
Zuul
7e754dcf14 Merge "Specify multiple NtpServers by default" 2018-12-06 22:14:22 +00:00
Emilien Macchi
be61d8a2b5 Re-implement keepalived restart without pre_deploy
... and use host_prep_tasks from config-download.
We are trying to HostPrepConfig resource that use OS::Heat::SoftwareConfig
and the old fashion to run Ansible, for more native config-downlaod.
undercloud_pre is the only service that needs HostPrepConfig now, so
let's switch to config-download.

It restarts keepalived container at each undercloud install & upgrade.
Also it adds support for podman as it uses container_cli variable.

Note: the workaround can still be removed once we have Keepalived 2.0.6
but it won't happen before CentOS8 probably.

Change-Id: I7454013c2e37058b5010a2a6cacfae0d0f873744
Related-Bug: #1791238
2018-12-06 17:08:57 -05:00
Marios Andreou
57c4f03c0d Remove CephAnsibleSkipTags from scenario1/4 standalone ci envs
We should not be overriding the skip tags otherwise we get the bug below

Closes-Bug: #1806853
Change-Id: I5a549eca8d2a750c751b193c24f77d3466acc2f9
2018-12-06 17:01:50 +00:00
Emilien Macchi
0a99380389 Disable pacemaker on multinode-containers (fs010)
The integration between podman and pacemaker is still work in progress.
While it's being done, let's remove pacemaker from this job, so we can
have at least one CI job running with podman on the overcloud.
We still have coverage for pacemaker in the container-upgrade jobs.

This patch will likely be reverted once we have pacemaker + podman
ready for centos7.

Change-Id: I8638386c8f394c98b047fb2ae4ff97daeeaf4475
2018-12-06 15:29:38 +00:00
Alex Schultz
2dfd0ea8ca Flatten Aodh service configuration
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration.
With this patch the baremetal version of aodh services have been
removed.

Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Depends-On: https://review.rdoproject.org/r/#/c/16994/
Change-Id: I39645aff0365218d4b841ed0d9c964b3622f143a
Related-Blueprint: services-yaml-flattening
2018-12-06 15:07:05 +00:00
Alex Schultz
623924972f Update yaml-validate for deployment/ folders
Since we're looking at flattening the services into a deployment/
folder, we need to update the validation script to also handle this
directory structure. Additionally this change updates the service name
validation to ensure that the service name in matches the start of the
filename itself.

Change-Id: Ibb140a38b69a8780adf69362e0f437b3426f360d
Related-Blueprint: service-yaml-flattening
2018-12-06 08:06:10 -07:00
Zuul
eb70154796 Merge "Invoke redhat-subscription role during upgrade." 2018-12-06 15:05:42 +00:00
Zuul
0fc5a381c2 Merge "Add DockerPuppetMountHostPuppet parameter" 2018-12-06 15:05:40 +00:00
Zuul
a073fe75f2 Merge "Fix Swift S3 API configuration" 2018-12-06 15:05:36 +00:00
Zuul
2ba1218849 Merge "Mount puppet-generated directory for tripleo-validations" 2018-12-06 14:53:41 +00:00
Zuul
834a3d8335 Merge "Fix logging for metrics_qdr" 2018-12-06 11:59:58 +00:00
Zuul
f9ab5d07be Merge "Enable ironic-inspector support in ironic when enabling ironic-inspector" 2018-12-06 11:59:56 +00:00
Zuul
2485978bee Merge "Add SERVICE_bootstrap_node_ip values to allNodesConfig" 2018-12-06 11:49:36 +00:00
Rabi Mishra
670e720030 Remove nic for storage_mgt network
We don't enable StorageMgmt network on the Compute role by default.

Change-Id: Idd0be76c8d7ad45cddc80b7c1867919acae77ea6
Depends-On: https://review.openstack.org/622960
Depends-On: https://review.openstack.org/618669
Related-Bug: #1800811
2018-12-06 08:24:40 +00:00
Janki Chhatbar
e9525d3a7d Don't mount data folder
"data" folder mounted on host sometimes makes ODL
believe that it has boot features installed. So ODL
doesnot generate required files.

So don't mount that folder so that ODL can boot
properly on restart.

Closes-Bug: #1805859

Change-Id: Icb415f6ac379e757edfe6dd73f80484a6697d152
2018-12-06 05:51:28 +00:00
Zuul
38f7f7d9a7 Merge "nova_compute fails to start in tls-everywhere configuration" 2018-12-06 05:06:02 +00:00
Zuul
769f18f0f5 Merge "Check for available networks for a role" 2018-12-05 19:01:14 +00:00
Zuul
1447b424c6 Merge "[Core] Change openstack-dev to openstack-discuss." 2018-12-05 15:56:15 +00:00
Sorin Sbarnea
446dcc179d Fix fs035 by defining a default gateway_ipv6
Change-Id: I95e2a659927f44e2941b10daa10c7fc9c605bbd8
Closes-Bug: 1806897
2018-12-05 14:23:51 +00:00
Zuul
c1aea11dce Merge "Mount config-data/puppet-generated/nova for nova_api_ensure_default_cell" 2018-12-05 08:55:37 +00:00
Zuul
0f61e70e4f Merge "neutron-cleanup skips ports marked skip_cleanup=true" 2018-12-05 08:29:15 +00:00
Zuul
ff873543da Merge "Use correct permission on Gnocchi tmp dir" 2018-12-04 22:28:06 +00:00
Zuul
f7f7835fcf Merge "Add env file for standalone scenario002" 2018-12-04 22:19:10 +00:00
Zuul
79ce8a504b Merge "Use InternalApi network for openshift_master_cluster_hostname" 2018-12-04 17:36:34 +00:00
Zuul
0bfcc0fc73 Merge "Set balance to source for openshift_router endpoints" 2018-12-04 17:36:31 +00:00
Zuul
d73dedd4bc Merge "Use new ODL diagstatus heath check REST URL" 2018-12-04 17:36:29 +00:00
Zuul
2557bfdf14 Merge "Create clouds.yaml for the undercloud" 2018-12-04 16:30:30 +00:00
Alex Schultz
90d3723175 Specify multiple NtpServers by default
The NtpServer default set now includes multiple pool.ntp.org hosts to
ensure that the time can be properly synced during the deployment.
Having only a single timesource can lead to deployment failures if the
time source is unavailable during the deployment. It is recommended
that you either set multiple NtpServers or use the NtpPool
configuration to ensure that enough time sources are available for the
hosts. Note that the NtpPool configuration is only available when using
chrony.

Change-Id: I5b82d77cbf0f2e8c2a59645a72aa533d7d2c86b8
Closes-Bug: #1806521
2018-12-04 08:31:55 -07:00
Zuul
aee048d3bb Merge "Add a gateway IP to the Management net in network_data.yaml" 2018-12-04 14:03:09 +00:00