With I57047682cfa82ba6ca4affff54fab5216e9ba51c Heat has added
a new template version for wallaby. This would allow us to use
2-argument variant of the ``if`` function that would allow for
e.g. conditional definition of resource properties and help
cleanup templates. If only two arguments are passed to ``if``
function, the entire enclosing item is removed when the condition
is false.
Change-Id: I25f981b60c6a66b39919adc38c02a051b6c51269
This changes all these parameters as heat would correctly
parse all values. Also, drops all yaql shenanigans
used for their handling and heat conditions.
Also fixes wrong usage of non-existent NeutronWrapperDebug
parameter in ovn-metadata-container-puppet.yaml.
We had converted all ``Debug`` parameters to boolean with
Ib6c3969d4dd75d5fb2cc274266c060acff8d5571.
Change-Id: Ia2bffffde34aa248a4cc60c3895464f1f9d1ded2
This was mainly there as an legacy interface which was
for internal use. Now that we pull the passwords from
the existing environment and don't use it, we can drop
this.
Reduces a number of heat resources.
Change-Id: If83d0f3d72a229d737a45b2fd37507dc11a04649
Undercloud record for hosts has to be in all the nodes that fetch
images from it. Proper location for this code is where we set up
podman. If it's only in ContainerImagesPrepare it runs on the
Controller role only.
Closes-Bug: #1871243
Change-Id: Id081f049bca6c961ad2ff649ac357cea8d552739
Due to IPv6, the undercloud's container registry had to change
from an IP address in the full hostname [0]. This impacts into
the upgrade to Train as the overcloud nodes do not contain the
Undercloud's host in /etc/hosts as well as it's missing in the
registries.conf.
This patch adds two new upgrade tasks to handle:
1. container-image-prepare: Ensure that /etc/hosts file contains
an entry for the Undercloud's ctrlplane hostname. This task makes
use of the global_vars ansible parameter undercloud_hosts_entry
which contains a list of the undercloud's ctrlplan hostnames (calling
getent hosts underneath).
2. podman-baremetal-ansible: There is already an upgrade task which
takes care of reconfiguring podman during the upgrade, so this patch
simply sets up the right container unsecure registries and passes it
into the reconfiguring task. It also changes the (step | int) into
step|int as the upgrade tasks require step|int condition to decide in
which step_X playbook fall, otherwise the task will appear in every
step_X playbook.
[0] - Iac6efde9dd283906274d95c3a239b4b882ec052e
Depends-On: https://review.opendev.org/708128
Closes-Bug: #1863598
Change-Id: Ifadc797f33d759eed38c9d9274fa588b6dd19488
Ansible has decided that roles with hypens in them are no longer supported
by not including support for them in collections. This change renames all
the roles we use to the new role name.
Depends-On: Ie899714aca49781ccd240bb259901d76f177d2ae
Change-Id: I4d41b2678a0f340792dd5c601342541ade771c26
Signed-off-by: Kevin Carter <kecarter@redhat.com>
We were never using Debug if ContainerImagePrepareDebug was not set.
This change adds the Debug param and updates ContainerImagePrepareDebug
to be '' by default. This makes it honor the Debug setting if
ContainerImagePrepareDebug is not configured.
Change-Id: I09b3b112d7654fed5270c0b1148b57b91b4a3215
Related-Bug: #1850934
Replace include_role with import_role to fix tags as upgrade/update
invokes ansible with "--tags container_image_prepare"
Change-Id: I396ff9bae534e9137da30c7a260b49f579ee8bfe
Closes-Bug: #1844109
Like other *Debug parameters, make it so we first look for
ContainerImagePrepareDebug to be set, otherwise we fallback to Debug;
like we already do in all other OpenStack services.
Change-Id: I0f18b475c69a8ba71b06f517e87caf0d5c209fbb
The THT file has been converted to use a newly created role found within
TripleO-Ansible. The THT process will now run all tasks through the role
using "include_role". To ensure we're keeping things separated, all of
the data transformations will still be taken care of in the heat template.
This ensures we have clean lines of separation allowing both services to
work as expected, without nuance or confusion.
Depends-On: Ic6e26eb95734ccf17e42e649b5e5808e1a096a78
Change-Id: I3a87dbb6e9fdaf78f6ffa2ac03a0069222c12d48
Story: 2005985
Task: 34442
Signed-off-by: Kevin Carter <kevin@cloudnull.com>
This list will be used by container image prepare to determine whether
to prepare images for every architecture in the registry, or just for
the default architecture.
Change-Id: Ie2885e5a5cdd6dde71be996950154cd2e759062f
Blueprint: multiarch-support
This defines the interface to specify the authentication credentials
for container image registries which require them. It is separate from
the ContainerImagePrepare parameter so that the credentials only need
to be stated once, and so the secrets can be flagged as hidden
parameters.
Change-Id: I3b2743cd48b2083468acb83a4ddeb98a93d795a2
Partial-Bug: #1823579
If container_image_prepare_debug, we also want to redirect all the
output into the same logfile used to write image operations.
Indeed, some command output isn't shown in the logfile, even with
--debug, but sent to sdterr.
To make it easier for operators on where to find logs, let's just use
the logfile in place and export everything in there, only when debug is
activated.
Change-Id: I66e846bda2bef0d27a2a26a4083249c583982e0c
This patch switches the default mechanism driver for neutron from
openvswitch to OVN.
It will also flip scenario007 job to run with ML2/OVS.
Depends-On: I74ffb6b7f912e1fce6ce428cd23a7283c91b8b96
Depends-On: I99ba2fd6a85b4895b577719a7541b7cbf1fdb85c
Depends-On: Ib60de9b0df451273d1d81ba049b46b5214e09080
Depends-On: Iaed7304adf40a87a0f14b7a95339f8416140e947
Change-Id: Iab52cdf5d0f7a392c4f17c884493b5c5beb1d89f
Co-Authored-By: Kamil Sambor <ksambor@redhat.com>
Set to false by default for backward compatibility, we can set it to
True and it'll add --debug when running the tripleo container image
prepare command, useful to have more verbosity.
Change-Id: I7d0b4035de748bf2453321d3ab09d09fd45abf8d