Commit Graph

7273 Commits

Author SHA1 Message Date
Dan Prince
3b56c9e501 Add validation on role names
Also, fixes role templates that weren't passing this new validation.

Closes-bug: #1756346

Change-Id: I387386a0d7cf47fe11f24a68b9f2bb2ee2f0b7bd
2018-04-25 15:42:22 +00:00
Zuul
1bec57e977 Merge "Add validation for SoftwareConfig outputs" 2018-04-25 08:44:14 +00:00
Zuul
cfc4126af2 Merge "No-op Mistral workflow resources for update/upgrade/ffwd" 2018-04-25 04:53:30 +00:00
Zuul
822bd996b3 Merge "Support separate oslo.messaging services for RPC and Notification" 2018-04-25 04:43:46 +00:00
Zuul
f9a4653f03 Merge "Fail validation on new workflow_tasks" 2018-04-24 14:41:40 +00:00
Zuul
f05507195b Merge "Suppress warnings with -qq" 2018-04-24 14:41:38 +00:00
Zuul
74e57fb1ed Merge "Added missing pki volume for custom CA." 2018-04-24 14:30:04 +00:00
Zuul
373a873689 Merge "Default collectd to overcloud gnocchi" 2018-04-24 11:44:06 +00:00
Zuul
8e95d2c251 Merge "Start using nova_metadata_host" 2018-04-24 11:23:20 +00:00
Zuul
aead20e3cf Merge "Modify libvirt port range for live-migration" 2018-04-24 08:34:55 +00:00
James Slagle
87c76e8d7a Fail validation on new workflow_tasks
Adds a new validation to check role_data for workflow_tasks. If found,
the validation will fail. Existing templates with workflow_tasks are
excluded for now until they are fully migrated to external_deploy_tasks.

Depends-On: I0cf206e8ceeecfca17dd99a83b8c2eaa50e66712
Change-Id: I830a5cda660f5f73ca3a98f4a886abce6989daf0
implements: blueprint deprecate-workflow-tasks
2018-04-24 04:14:26 +00:00
James Slagle
d696030293 Suppress warnings with -qq
The quiet arg (-q) is cumulative and should suppress warnings when -qq is
specified per the help text. These warnings were previously added and
did not honor -qq.

Depends-On: I0cf206e8ceeecfca17dd99a83b8c2eaa50e66712
Change-Id: Ic9fe4d7934fa6ad9c4d689a5402f43231c245ada
2018-04-24 04:14:03 +00:00
Zuul
bcb3c24461 Merge "Add neutron-plugin-ml2 to the scenario007" 2018-04-23 20:48:31 +00:00
Zuul
7466fee90f Merge "Telemetry services need to access to Storage" 2018-04-23 20:48:29 +00:00
Zuul
784145857d Merge "Add environment file for Mellanox SDN" 2018-04-23 17:11:52 +00:00
Zuul
6de48359b2 Merge "Fix openstack-nova-consoleauth service upgrade check" 2018-04-23 15:21:12 +00:00
Zuul
d96f262e74 Merge "Enable management network in network_data" 2018-04-23 13:59:15 +00:00
Martin Mágr
723e428f40 Default collectd to overcloud gnocchi
This patch makes it possible to use overcloud gnocchi instance as datastore
for collectd.

Closes-Bug: #1766255
Change-Id: I122c705eed80a4ee0cefcbd077e6f03cd320d448
2018-04-23 15:35:31 +02:00
Alex Schultz
106666d333 Add neutron-plugin-ml2 to the scenario007
Change-Id: I52c9c0c52abee9b09acb73d8cfb17c2a07eb9b98
Related-Bug: #1765975
2018-04-23 06:30:56 -06:00
Cédric Jeanneret
3637f0325f Added missing pki volume for custom CA.
Some services want the CA to be in the anchors directory. Just mount it
everywhere.

Change-Id: I5cf028d9424a253f8b5d66d818a091508b9486d7
Closes-Bug: #1766178
2018-04-23 13:37:20 +02:00
Zuul
297aac5c25 Merge "Revert "Fix neutron-plugin-ml2.yaml puppet base ref"" 2018-04-23 11:01:21 +00:00
Jiri Stransky
19be98ba07 No-op Mistral workflow resources for update/upgrade/ffwd
So far we haven't been disabling workflows for update/upgrade. We
should disable them by default as they could have the potential to
disrupt the update/upgrade/ffwd procedure.

The main example of a thing we deploy via the workflow resources is
Ceph. We decided no-opping ceph-ansible for the main
update/upgrade/ffwd upgrade steps is the safest path forward and we'll
update/upgrade Ceph it after the main procedure is finished.


Change-Id: I34c7213ab7b70963ad2e50f7633b665fad70bde5
2018-04-23 10:47:58 +00:00
Mehdi Abaakouk
39f5b64394 Telemetry services need to access to Storage
Gnocchi stores data in Swift or Ceph. So when composable roles are used
it needs to access to the Storage network to connect to them.

Change-Id: I11f4ec4a91a9240bde6d504a84351185ed5a6997
2018-04-23 09:36:01 +02:00
Marius Cornea
b1d0ed0910 Fix openstack-nova-consoleauth service upgrade check
When running the FFU workflow the openstack-nova-consoleauth
service gets stopped before running the upgrade tasks so the
task for disabling the service is ignored. This change fixes
the nova_consoleauth_enabled command to check if the service
is enabled instead of active.

Change-Id: If1e0f43c1962496b68c1c982db86a6dec58e05c5
Closes-bug: 1765997
2018-04-23 00:02:09 -04:00
Andrew Smith
78bc457585 Support separate oslo.messaging services for RPC and Notification
This commit introduces oslo.messaging services in place of a single
rabbitmq server. This will enable the separation of rpc and
notifications for the continued use of a single backend (e.g.
rabbitmq server) or a dual backend for the messaging communications.

This patch:
* add oslo_messaging_rpc and oslo_messaging_notify services
* add puppet services for rpc and notification
  (rabbitmq and qdrouterd servers)
* add docker services to deploy rpc (rabbitmq or qdrouterd)
  and notify (rabbitmq or shared)
* retains rabbit parameters for core services
* update resource registries, service_net_map, roles, etc.
* update ci environment container scenarios
* add environment generator for messaging
* add release note

Depends-On: Ic2c1a58526febefc1703da5fec12ff68dcc0efa0
Depends-On: I154e2fe6f66b296b9b643627d57696e5178e1815
Depends-On: I03e99d35ed043cf11bea9b7462058bd80f4d99da
Needed-By: Ie181a92731e254b7f613ad25fee6cc37e985c315
Change-Id: I934561612d26befd88a9053262836b47bdf4efb0
2018-04-22 04:33:44 +00:00
e8f1427ee2 Revert "Fix neutron-plugin-ml2.yaml puppet base ref"
This reverts commit 70ccf2120e.

This breaks scenarios where OS::TripleO::Docker::NeutronMl2PluginBase is overridden like ovn, odl, etc.

Change-Id: Ic2c1a58526febefc1703da5fec12ff68dcc0efa0
Closes-Bug: #1765975
2018-04-22 03:53:07 +00:00
Zuul
f0501fd00e Merge "Add missing undercloud upgrade tasks" 2018-04-21 20:27:03 +00:00
Zuul
f4b62d7b5e Merge "add lower-constraints job" 2018-04-21 11:18:38 +00:00
Zuul
fea5bfbcc8 Merge "Remove todo as mistral tag filtering is fixed" 2018-04-21 10:02:58 +00:00
Zuul
d8b4385971 Merge "Omit hiera YAML validations for external deploys" 2018-04-21 07:10:16 +00:00
Zuul
34ef2efc6f Merge "Upgrade: make bundles use new container image name after upgrade" 2018-04-21 05:17:18 +00:00
Zuul
ab5f7147bb Merge "Fix neutron-plugin-ml2.yaml puppet base ref" 2018-04-21 03:05:51 +00:00
Zuul
b85aaa0a24 Merge "Improve nova-ironic cellv2 discovery" 2018-04-21 03:05:46 +00:00
Doug Hellmann
08b1132f89 add lower-constraints job
Create a tox environment for running the unit tests against the lower
bounds of the dependencies.

Create a lower-constraints.txt to be used to enforce the lower bounds
in those tests.

Add openstack-tox-lower-constraints job to the zuul configuration.

See http://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html
for more details.

Change-Id: I67d2ab519d1baf463e4ad253b8a85b5194ad31f6
Depends-On: https://review.openstack.org/555034
Signed-off-by: Doug Hellmann <doug@doughellmann.com>
2018-04-20 16:10:28 -04:00
Marius Cornea
9932c2841c Enable management network in network_data
This change enables the management network in network_data to allow
upgrading environments that were initially deployed with this optional
network enabled.

Change-Id: I39b1a70f0a27bdab4d6280d54107ff209d4bb67d
Closes-bug: 1765547
2018-04-20 15:40:03 -04:00
Zuul
f346f3eeab Merge "Track global failures flag for YAML validations" 2018-04-20 17:24:44 +00:00
Emilien Macchi
8b246ab695 Add missing undercloud upgrade tasks
Nova API and Mistral API need to be stopped because they'll be
containerized during the upgrade.

Change-Id: I9f8af1cd2e775a92a0b1acf2ae9eec12f6c90974
2018-04-20 08:14:30 -07:00
Zuul
65e828e2b3 Merge "Reduce verbosity during mysql bootstrap" 2018-04-20 14:07:41 +00:00
Zuul
9adbefc722 Merge "Disallow SSLv2, SSLv3 and TLS1.0 in httpd for FedRAMP compliance." 2018-04-20 13:59:45 +00:00
James Slagle
a134b717dd Add validation for SoftwareConfig outputs
SoftwareConfig/StructuredConfig outputs aren't supported with
config-download given that Heat doesn't know what the output values will
since Ansible is applying all configuration after the stack is complete.

This validation will report a warning whenever it finds use of outputs on
these resource types.

After config-download is the default and the Heat driven method is no
longer supported, we can switch this warning to an error.

Change-Id: I44d5ee3bab3d05ab0a59261d15ea915c75b35713
2018-04-20 13:27:22 +00:00
Zuul
0bf8943f05 Merge "undercloud: deploy SSH service" 2018-04-20 11:11:47 +00:00
Bogdan Dobrelya
68c60892a1 Omit hiera YAML validations for external deploys
Closes-bug: #1765641

Change-Id: I3e98521f6396acc9e4e1a7b32faec85e988ab0fe
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-04-20 11:11:19 +02:00
Bogdan Dobrelya
70ccf2120e Fix neutron-plugin-ml2.yaml puppet base ref
Change-Id: I697c222bae3639c49e2bd5b45aef38f9a92c67bc
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-04-20 09:36:52 +02:00
Zuul
4948725c3d Merge "Add CACerts service to scenario003" 2018-04-19 23:55:06 +00:00
Zuul
e35161ee10 Merge "Rely on client defaults for the Ceph container image to use in CI" 2018-04-19 22:58:16 +00:00
Zuul
ae4ff0148c Merge "Containerize Neutron LBaaS service plugin" 2018-04-19 22:53:30 +00:00
Zuul
6b06b1011b Merge "Use external IP for public interfaces" 2018-04-19 22:40:46 +00:00
Damien Ciabrini
a246549303 Reduce verbosity during mysql bootstrap
During the initial deployment, a one-time container is used to bootstrap the
mysql databse on disk, create the required users and set their password. The
script that runs that is too verbose and logs some credentials in the
container's logs and in the journal.

Use kolla_extend_start directly instead of kolla_start to stop tracing shell
commands and reduce logging to the bare minimum for troubleshooting.

Closes-Bug: #1765339

Change-Id: I90827feff0d1b9fd8badb72e68e4c8dd8db8aea5
2018-04-19 19:14:03 +00:00
Zuul
a5b913e1eb Merge "Disable FluentClient service for ffwd/upgrades." 2018-04-19 16:17:12 +00:00
Bogdan Dobrelya
b079bcc3e1 Track global failures flag for YAML validations
Closes-bug: #1764741

Change-Id: Id0313cde5e1d86103940ff4f77f09b79d0d04ec3
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-04-19 16:44:21 +02:00