66 Commits

Author SHA1 Message Date
Zuul
02efe58a62 Merge "Clean up Cinder backends in capabilities map" 2018-05-14 23:10:52 +00:00
Hamdy Khader
afcf2c71e3 Add support for NVMeOF cinder backend
Change-Id: I2ee3b44fc4a7bede635b0bfcacd1dab8547d123a
2018-05-07 15:45:42 +03:00
Alan Bishop
48c6253835 Clean up Cinder backends in capabilities map
Fix references to the NetApp and Veritas Hyperscale Cinder backend
environment files. Also remove extraneous "configured via puppet"
in the backend descriptions.

Closes-Bug: #1769639
Change-Id: Ic5266abcafed5790296fd910b01aadf3d03900b5
2018-05-07 08:44:28 -04:00
Zuul
0da17202ec Merge "Add support for Dell EMC XtremIO Cinder ISCSI Backend" 2018-03-16 01:18:44 +00:00
rajinir
a462d796a7 Add support for Dell EMC XtremIO Cinder ISCSI Backend
This change adds a new define for cinder::backend::dellemc_xtremio_iscsi

Change-Id: Icf4a199383064e7884953f0f5085dcef54c3b9a4
Implements: blueprint dellemc-xtremeio-cinder
2018-03-09 14:25:14 -06:00
Wojciech Dec
d726a9c8b4 Add cisco VTS ML2 template for a dockerized service and default environment settings
Change-Id: I01989cdec64d5dd3c38ea484d59c89c7bd873b83
Implements: blueprint ml2-cisco-vts
Signed-off-by: Wojciech Dec <wdec@cisco.com>
2018-02-20 21:11:19 +01:00
Zuul
16e15b73b9 Merge "Add support for Dell EMC VNX Cinder Backend" 2018-02-07 03:47:17 +00:00
rajinir
afe81a4e05 Add support for Dell EMC VNX Cinder Backend
This change adds a new define for cinder::backend::dellemc_vnx

Change-Id: I57af2f781c24c74b355410ffb4dc28382ee183fd
Implements: blueprint dellemc-vnx-cinder
2018-01-30 10:57:56 -06:00
lhinds
7e68dbdf8c Implements AIDE Intrusion Detection System
Introduces a service to configure AIDE Intrusion Detection.

This service init's the database and copies the new database
to the active naming. It also sets a cron job, using email if
`AideEmail` is populated, otherwise the reports are sent to
`/var/log/aide/`.

AIDE rules can be supplied as a hash, and should the rules ever
be changed, the service will populate the new rules and re-init
a fresh integrity database.

Related-Blueprint: tripleo-aide-database
Depends-On: Iac2ceb7fc6b610f8920ae6f75faa2885f3edf6eb
Change-Id: I23d8ba2c43e907372fe079026df1fca5fa1c9881
2018-01-15 13:10:16 +00:00
Zuul
8a2fd62f23 Merge "Update capabilities-map.yaml to include latest storage environments" 2017-12-05 17:45:03 +00:00
Jiri Tomasek
9726a78ea9 Update capabilities-map.yaml to include latest storage environments
* updated Ceph features to use environments from ceph-ansible
* added docker-ha.yaml as HA option
* added containers-deafult-parameters.yaml

Closes-Bug: 1735214
Change-Id: I5845e8ca5212a0b97c21d6e44db0e0a1ddfc23fc
2017-11-29 17:38:48 +01:00
lhinds
502fde7a64 Implements management of /etc/login.defs
Enables management of shadow password directives in login.defs

By allowing operators to set values in login.defs, they are able
to improve password security for newly created system accounts.

This change will in turn allow operators to adhere with security
hardening frameworks, such as STIG DISA & CIS Security Benchmarks.

bp login-defs

Change-Id: Id4fe88cb9569f18f27f94c35b5c27a85fe7947ae
Depends-On: Iec8c032adb44593da3770d3c6bb5a4655e463637
2017-11-29 09:23:25 +00:00
Victoria Martinez de la Cruz
6740f94914 Removes manila-generic-config from TripleO
Generic driver is not intended to be used in real environments
since it introduces a SPOF in the data path. Due to this, it
doesn't make sense and generates confusion to have the environment
file, so in this patch set we simply remove it.

Change-Id: I2e1db2bd614eae65e59712f50dc3391f16f6b388
Closes-Bug: #1708680
2017-10-16 16:54:47 -03:00
Bernard Cafarelli
7059ca1316 Add networking-sfc support
Enables deployment of service function chaining via the networking-sfc
project.

Implements: blueprint networking-sfc-support

Co-Authored-By: Bernard Cafarelli <bcafarel@redhat.com>
Change-Id: I230b31dc9ed0ecc5046064628ba2f2505e589522
Depends-On: Icd433ddc6ae7de19a09f9e33b410a362c317138a
2017-10-10 13:33:32 +00:00
Ricardo Noriega
a18a94e498 Add Bagpipe driver composable service
The BaGPipe driver for the BGPVPN service plugin is designed
  to work jointly with the openvswitch ML2 mechanism driver.

Change-Id: I17ed258231e7efdd1ca8e0697d074b11961ed0ae
Depends-On: I1e0227d8055f456043fe63c6a9cbd722d7bf84a7
Partially-Implements: blueprint bgpvpn-service-integration
Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2017-09-01 11:56:47 +02:00
rajinir
f6c9906d51 Add support for Dell EMC Isilon Manila backend
This change adds support for manila::backend::dellemc_isilon

Change-Id: I92592e4b717d4b1812ccd810ec1daaedd181c3dd
Implements: blueprint dellemc-isilon-manila
2017-08-30 04:42:09 +00:00
rajinir
04daabdc84 Add support for Dell EMC VMAX Manila Backend
This change adds support for manila::backend::dellemc_vmax

Change-Id: I92e189c8741c496ef6c27130f73829c327a99f1b
Implements: blueprint dellemc-vmax-manila
2017-08-30 04:42:01 +00:00
rajinir
c771899055 Add support for Dell EMC VMAX ISCSI Backend
This change adds a new define for cinder::backend::dellemc_vmax_iscsi

Change-Id: I7c685e0a3186da138964f17b487fb0c3533f58c7
Implements: blueprint dellemc-vmax-isci
2017-08-30 04:41:47 +00:00
rajinir
a3debcfa8b Add support for Dell EMC VNX Manila Backend
This change adds support for manila::backend::dellemc_vnx

Change-Id: I5fa5c2d6956429d1b9c12a5af6d4a887ed0624d9
Implements: blueprint dellemc-vnx-manila
2017-08-22 11:40:23 -05:00
rajinir
c5ee7b7714 Add support for Dell EMC Unity Manila Backend
This change adds support for manila::backend::dellemc_unity

Change-Id: Idec67d190b12359e8e6f1c157577088fa84ef41d
Implements: blueprint dellemc-unity-manila
2017-08-22 11:40:23 -05:00
rajinir
9353db123d Add support for Dell EMC Unity Cinder backend
This change adds a new define for cinder::backend::dellemc_unity.

Change-Id: I7f9dbb707cf9b5c90ec2f31dcff82cd578805b80
Implements: blueprint dellemc-unity-cinder
2017-08-17 08:36:14 +00:00
Jiri Tomasek
6a3ad6fa45 Update capabilities map to match latest environments
This change updates capabilities-map.yaml to properly map existing
environments

Closes-Bug: 1708159
Change-Id: I4104b6b59b3e9b19a06cdc233dae4f68fe033580
2017-08-02 14:05:14 +02:00
abhishek.kane
91c1a81531 Add composable services for the Veritas HyperScale.
Add a composable service for each of:
  - the Veritas HyperScale's Cinder backend.
  - installing the Veritas HyperScale controller packages.

Change-Id: I99ee827825ec2a6a3c695de1ca1c1015859fe398
Depends-On: I316b22f4f7f9f68fe5c46075dc348a70e437fb1d
Depends-On: I9168bffa5c73a205d1bb84b831b06081c40af549
Signed-off-by: abhishek.kane <abhishek.kane@veritas.com>
2017-07-17 13:27:25 +05:30
Ryan Hefner
6a151ec697 Enable Neutron LBaaS Integration
Allows the configuration of the Neutron LBaaS agent.

Implements: blueprint lbaasv2-service-integration
Change-Id: Iae2bf7faeea93d5275994b2ee10f9bf863ed6152
Depends-On: Ieeb21fafd340fdfbaddbe7633946fe0f05c640c9
2017-07-04 13:53:03 +00:00
Peng Liu
633ab23f88 Add l2gw neutron agent support
L2 Gateway (L2GW) is an API framework for OpenStack that offers bridging
two or more networks together to make them look at a single broadcast
domain. This patch implements the l2gw agent which is one of the backend
of the l2 gateway service plugin.

Change-Id: I1ae8132ceff9410be7bd82caddf0d14251e720bf
Depends-On: If1501c153b1b170b9550cb7e5a23be463fba1fe9
Partially-Implements: blueprint l2gw-service-integration
Signed-off-by: Peng Liu <pliu@redhat.com>
2017-05-18 16:36:12 +08:00
Jenkins
68402dc7f5 Merge "Enables support for configuring Cinder with Pure Storage FlashArray storage backend" 2017-04-28 18:34:21 +00:00
Jenkins
6db405e9df Merge "Add initial support for NSX plugin" 2017-04-25 04:11:08 +00:00
Jenkins
8eaecb6489 Merge "Remove root_template and root_environment from capabilities-map.yaml" 2017-04-19 18:38:18 +00:00
Jenkins
ae6883323e Merge "Grouped all the Operational tools" 2017-04-12 02:22:11 +00:00
lhinds
9945538069 Adds service for managing securetty
This adds the ability to manage the securetty file.

By allowing management of securetty, operators can limit root
console access and improve security through hardening.

Change-Id: I0767c9529b40a721ebce1eadc2dea263e0a5d4d7
Partial-Bug: #1665042
Depends-On: Ic4647fb823bd112648c5b8d102913baa8b4dac1c
2017-04-06 13:30:50 +01:00
Gary Kotton
78f4a33166 Add initial support for NSX plugin
Add the support for the VMware NSX plugin

Co-Authored-By: Tong Liu <tongl@vmware.com>

Change-Id: I3567cbb4ed8d6e5b2a3ea6b8cff6c7b8ed13b692
2017-04-06 04:11:15 -07:00
Simon Dodsley
1f8de419ef Enables support for configuring Cinder with Pure Storage
FlashArray storage backend

This adds the necessary parameters for:
 - Pure Storage FlashArray Block Storage driver configuration

Change-Id: I5b5617dd57015c0944a2d0c60187b01ede09b480
2017-04-04 22:11:34 -04:00
Peng Liu
d7c00f01b5 Add l2gw neutron service plugin support
L2 Gateway (L2GW) is an API framework for OpenStack that offers bridging
two or more networks together to make them look at a single broadcast
domain. This patch implements the l2gw neutron service plugin support part
in t-h-t.

Change-Id: I1b52dc2c11a15698e43b6deeac6cadeeba1802d5
Depends-On: I01a8afdc51b2a077be1bbc7855892f68756e1fd3
Partially-Implements: blueprint l2gw-service-integration
Signed-off-by: Peng Liu <pliu@redhat.com>
2017-03-30 14:42:10 +00:00
Juan Badia Payno
a314ce59f1 Grouped all the Operational tools
So far the operational tools are:
  - Availability monitoring
  - Centralized logging
  - Performance monitoring
This change added the performance monitoring under the Operational tools
so on the tripleo-ui --> deployment configuration --> operational tools
all these features can be added

Change-Id: I7335eaeaed4118422f5630d042229f1a1bf60b5d
2017-03-28 19:39:56 +02:00
Ricardo Noriega
b67ad0695e Add BGPVPN composable service
This project aims at supporting inter-connection between L3VPNs
 and Neutron resources, i.e. Networks, Routers and Ports.

Partially-Implements: blueprint bgpvpn-service-integration

Depends-On:I7c1686693a29cc1985f009bd7a3c268c0e211876
Change-Id: I576c9ac2b443dbb6886824b3da457dcc4f87b442
Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2017-03-10 11:35:48 +01:00
Yolanda Robla
ee9c789b23 Enable keystone cadf notifications
It will allow to configure keystone event notifications
using CADF, as documented on:
https://docs.openstack.org/developer/keystone/event_notifications.html

CADF events provide auditing capabilities for compliance with
security.

Change-Id: Id16b264c295b9e3adbf960366ff8328ba8dcd485
2017-03-06 18:10:55 +01:00
Christopher Brown
b9aa2c1e0c Removes old environment file references
ODL-l3 env file was removed in commit 7163746
manage-firewall was removed in commit 2064ab8 as this was enabled
by default

Change-Id: I8ed8d4ed5bf709f2ac581adfaacc24a7582f13bd
2017-03-03 14:00:53 +00:00
Ana Krivokapic
3e6147dee4 Remove root_template and root_environment from capabilities-map.yaml
These values now live in plan-environment.yaml.

Change-Id: I7a9448df7c9f84beaac9238f1278633c3ec5ad28
Closes-bug: #1668953
Depends-On: I961624723d127aebbaacd0c2b481211d83dde3f6
2017-03-03 11:56:27 +01:00
Christopher Brown
3c441842dd Removes opencontrail reference
The opencontrail environment file was removed in commit da91bb6
so this is no longer required

Change-Id: I835dc665ede7fdb50d5be2c3251b8acf20c3ce37
2017-03-02 16:55:14 +00:00
Jenkins
666af8ba41 Merge "Add Ceph RGW to capabilities map" 2017-02-15 03:36:28 +00:00
Jenkins
854b5120cc Merge "Describe use of Manila/CephFS in capabilites_map" 2017-02-14 17:34:36 +00:00
Giulio Fidente
fa29c83b51 Add Ceph RGW to capabilities map
This will provide an option in the UI to deploy Ceph RGW as a
replacement for Swift.

Change-Id: If2281edce49d2981f891c95ebb507e3a4b9e438e
2017-02-14 11:56:29 +01:00
Jenkins
18d3479385 Merge "Enables support for configuring Cinder with Dell EMC ScaleIO storage backend." 2017-02-13 18:00:05 +00:00
Jenkins
a79b3ecb39 Merge "Composable service support for Cinder Dell EMC Storage Center" 2017-02-08 11:15:10 +00:00
rajinir
2026ee4e4f Enables support for configuring Cinder with Dell EMC
ScaleIO storage backend.

This change adds all relevant parameters for:
 - Dell EMC ScaleIO Block Storage driver configuration

Closes-Bug: #1661316
Depends-On: I5534aab53b70de215336a076d25263c73b8d7b5b
Change-Id: I8927151adbce235595a5c62365e1f87a6503c462
2017-02-07 12:06:47 -06:00
rajinir
a19e570cad Composable services support for Cinder Dell EMC PS Series
Updated the heat templates for Cinder Dell EMC PS Series backend
to use composable services and rebranding of EQLX to Dell EMC PS Series

Closes-Bug: #1661313

Change-Id: Id9d6f172f3f79a31788b26c7776d738fda5a30fa
2017-02-07 11:54:24 +00:00
rajinir
341afb9f83 Composable service support for Cinder Dell EMC Storage Center
Updated the heat templates for Cinder Dell EMC Storage Center
Backend to use composable services

Closes-Bug: #1661314

Change-Id: I454549c45da7388f0e42975c9f4637dde9ec51e3
2017-02-03 12:07:33 -06:00
Giulio Fidente
5339b918b1 Describe use of Manila/CephFS in capabilites_map
This is meant to describe in the UI how to use the
manila-cephfsnative-config environment file to deploy Manila with
Ceph as backend using either a TripleO managed or an externally
managed Ceph cluster.

Also adds a puppet-ceph.yaml environment file meant to enable the
deployment of a Ceph cluster, given that storage-environment.yaml
is meant to be customized by the user instead.

Change-Id: Iefd7056a9bc079025e6ac4dd50edcd2e2635e1b0
2017-01-30 16:41:29 +00:00
Steven Hardy
afdc138987 Add AuditD composable service
This patch allows the management of the AuditD service and its associated
files (such as `audit.rules`)

This is achieved by means of the `puppet-auditd` puppet module.

Also places ssh banner capabilities map on top of patch

Change-Id: Ib8bb52dde88304cb58b051bced9779c97a314d0d
Depends-On: Ie31c063b674075e35e1bfa28d1fc07f3f897407b
2017-01-27 13:23:18 +00:00
Jenkins
ca8fc7ea69 Merge "Manage password_validator regex" 2017-01-25 23:50:48 +00:00