280 Commits

Author SHA1 Message Date
Harald Jensås
d5ecc1f651 Make krb-service-principal metadata per-Role
Not all roles are connected to all networks, there is no
need to create metadata for networks not associated with
the role.

In edge/spine-and-leaf deployments the total number of
composable networks used can be high. Passing all the
networks we quickly go beyond the nova metadata fields
size limit (each field cannot exceed 256 bytes).

Also update tools/check-up-to-date.sh script to use the
simple yaml-diff.py instead of diff. The env generator
code will sort data, while jinja rendered environments
are not sorted, thus need to diff the data in yaml not
the text.

Closes-Bug: #1821377
Change-Id: I5ae3bc845b0a6ad6986d44b14ff4b0737a9b033b
2019-04-05 14:22:20 +00:00
Juan Antonio Osorio Robles
a0e262e20c TLS everywhere: switch Octavia to use DNS entries
The entries in the tls-everywhere-endpoints-dns.yaml was wrong for
octavia; pointing to IPs instead of DNS. This made the TLS everywhere
deployment fail, since it assigns certificates for DNS subjectAltNames.

Change-Id: Ic6f0f26c03c443edf1715927a4542245e08567f4
Closes-Bug: #1822035
2019-03-28 10:49:33 +02:00
Emilien Macchi
fc65d197c7 Move apache service under deployment directory
Move the apache service undercloud the deployment directory.

Change-Id: Iead4f910390cb75f56f96da2d24889a461275c9d
Related-Blueprint: services-yaml-flattening
2019-03-26 08:04:42 -04:00
Martin Schuppert
393e89bfb6 Make nfs version for nova ephemeral storage configurable
New parameter ``NovaNfsVersion`` allow configuring the NFS version
used for nova storage (when NovaNfsEnabled is true). Since NFSv3
does not support full locking a NFSv4 version need to be used. To
not break current installations the default is the previous hard
coded version 4.

Change-Id: I810478ed82ee6dc056d9652be91dc45b123e78cf
2019-03-19 11:42:32 +00:00
Zuul
96689c079a Merge "Move Designate to Experimental" 2019-03-13 14:34:58 +00:00
Emilien Macchi
f1ab762ed1 Move Designate to Experimental
Designate is a great service but unfortunatly, we don't have
full time maintainers therefore we can't certify the service will be
tested and work correctly.

In this patch, we create an experimental folder and put Designate in it.

Change-Id: I8a587ebdca2c7e64ab8348155cf75c2dbb65a5ed
2019-03-12 15:12:27 +00:00
Zuul
6d8e7f4058 Merge "Install and configure tmpwatch for log cleanup" 2019-03-12 13:46:17 +00:00
Zuul
61de5331a5 Merge "Remove Congress" 2019-03-12 01:05:56 +00:00
Cédric Jeanneret
836705161c Install and configure tmpwatch for log cleanup
Installing and configuring tmpwatch allows to get rid of some
ugly things in logrotate configuration. As the container has no
network access anymore, we have to install the tool on the host
directly - this isn't that bad.

In order to avoid issues with logrotate manage logs, we explicitely
exclude patterns manage in the specific logorate configuration.

Also, always in order to avoid issues and ensure logrotate does its
own cleanup, we clean files one day later.

Change-Id: Ic666388d9ba7556e7b68ab2fc1082957a9e26552
2019-03-11 16:33:22 +01:00
Zuul
4d0c90b22c Merge "Move openstack clients service" 2019-03-01 21:01:54 +00:00
Emilien Macchi
f3b85e4ba5 Remove Congress
Congress doesn't seem to be used anywhere, we never had a bug report or
any sign of somebody out there actually using it.

Let's remove its support in TripleO, to reduce the codebase.

Change-Id: Idca6b12f1c0ca3bc15bedf6469d4063a4dac31fa
2019-02-28 16:29:03 -05:00
Zuul
0a5e9a44bd Merge "step4: flatten nova service configuration" 2019-02-25 23:54:11 +00:00
Martin Schuppert
37e1122f8c Add OvnDbInternal to EndpointMap and use it for ovn_db_host
OVN controller/metadata use ovn_dbs_vip hiera key to configure
the central ovn DB. This key is not available on split control
plane or multi cell setup and therefore installation fails.

With this change a new entry gets created in the EndpointMap
named OvnDbInternal. This can then be exported for an overcloud
stack and can be used as an input for the cell stack.

The information from the EndpointMap is used for ovn-metadata
and ovn-controller as the ovn_db_host information in puppet-tripleo

Change-Id: I0d9eb663405d1113ea84e3c12651a3f0dbdfc75d
Closes-Bug: #1817524
2019-02-25 10:14:19 +01:00
Jill Rouleau
acb61d2c18 step4: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration.

Change-Id: I9bd5c9f007d9f69d7310cdd0106bcc923c1b0acd
2019-02-20 14:28:20 -07:00
Emilien Macchi
359e72b60c standalone: switch container registry to ImageServce
... instead of DockerRegistry.

blueprint podman-support
Change-Id: I3a4c4f7f7d41473999ca00fbf3231a62910e199c
2019-02-20 13:43:58 +00:00
Zuul
69a4022ceb Merge "step2: flatten the designate service configurations" 2019-02-19 02:09:04 +00:00
Zuul
127d519a1e Merge "flatten qdrouterd service configs" 2019-02-19 02:00:22 +00:00
Zuul
ea60b78f84 Merge "Move ipa enrollment to host_prep_tasks" 2019-02-18 21:10:42 +00:00
Dan Prince
6090dc6677 step2: flatten the designate service configurations
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration
for the designate Producer, Worker, and Mdns services.

Change-Id: Ibbd14996eb6fc9b2e45dd9f24d3b7156c42da990
Related-Blueprint: services-yaml-flattening
2019-02-18 08:11:17 -05:00
Zuul
209e438a73 Merge "step1: flatten the designate service configurations" 2019-02-16 02:32:11 +00:00
Alex Schultz
2e0af58585 Move openstack clients service
Moving the service that installs all the openstack clients to the
deployment directory.

Change-Id: I5cfecf0217232380319a68e3689a7fe7d945b15a
Related-Blueprint: services-yaml-flattening
2019-02-15 13:32:06 -07:00
Jill Rouleau
479d7f5872 flatten qdrouterd service configs
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration.

Change-Id: I7b1688a12964d939ece33a7f06d2493bf13c08eb
2019-02-15 12:53:15 -07:00
Zuul
d3ca79db72 Merge "Switch default neutron ML2 mechanism driver to OVN" 2019-02-15 16:59:59 +00:00
Ade Lee
2a83856585 Move ipa enrollment to host_prep_tasks
This addresses a possible bug when using FreeIPA to do TLS
everywhere.

It is possible that the IPA server is not on the ctlplane.
In this case, when the nodes start up, the registration of the node
with IPA will fail, resulting in failed certificate issuance requests
later on.

We introduce a composable service to run in host_prep_tasks.
This will always run once the networks have been set up.  If the
instance has already been enrolled (by cloud-init or in an update),
then the script executed by the service will just exit.

In this iteration, we simply execute the code that the cloud-init
would have done.  In later releases, we will execute all the code
performed by novajoin-server here in ansible - and deprecate the
novajoin server.

Change-Id: I31f64c3cbd1d151e3c2a436cc3e2ec5316535087
Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Resolves: rhbz#1661635
Closes-Bug: #1815924
2019-02-14 16:07:17 +00:00
Daniel Alvarez
6053eb1964 Switch default neutron ML2 mechanism driver to OVN
This patch switches the default mechanism driver for neutron from
openvswitch to OVN.

It will also flip scenario007 job to run with ML2/OVS.

Depends-On: I74ffb6b7f912e1fce6ce428cd23a7283c91b8b96
Depends-On: I99ba2fd6a85b4895b577719a7541b7cbf1fdb85c
Depends-On: Ib60de9b0df451273d1d81ba049b46b5214e09080
Depends-On: Iaed7304adf40a87a0f14b7a95339f8416140e947
Change-Id: Iab52cdf5d0f7a392c4f17c884493b5c5beb1d89f
Co-Authored-By: Kamil Sambor <ksambor@redhat.com>
2019-02-14 15:58:27 +01:00
Jill Rouleau
98ecf97609 step2: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration. With this patch the baremetal version of
nova has been removed.

Change-Id: Ia41a6adf9fda2d6be8f1b5ac57854381b7f92ce7
2019-02-13 06:20:55 +00:00
Zuul
638ae116f1 Merge "flatten the horizon service configurations" 2019-02-12 12:24:58 +00:00
Zuul
bd48c535a8 Merge "Move container-image-prepare.j2.yaml to deployment dir" 2019-02-07 23:49:37 +00:00
Steve Baker
2e899f3943 Move container-image-prepare.j2.yaml to deployment dir
Change-Id: Idf8eab2c0290c02908ffd3284543046cdf8aa5ba
2019-02-07 10:26:20 +13:00
Dan Prince
b8d2dd3ac6 step1: flatten the designate service configurations
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration
for the designate API, Central, and Sink services.

Related-Blueprint: services-yaml-flattening

Change-Id: I1c18780b252ce118836462b0857040fe1a3e8789
2019-02-06 09:42:16 -05:00
Cédric Jeanneret
c9adaaeb2f Flatten rabbitmq service - step 2
Now that we could get rid of the puppet dedicated definitions,
we can move the docker/* rabbitmq related stuff to the final
location, and correct the paths and some nits.

Change-Id: I47ca1e303bd38642200ccb7f6823bcd06cd00255
2019-02-06 12:50:51 +01:00
Cédric Jeanneret
fb7ea6734e Flatten rabbitmq service - step 1
This flattens rabbitmq and removes puppet parts. The next step will
move the flattened templates to their final location.

It's split in two steps in order to make reviews easier on that big change.

Change-Id: I30f0802770d86d64e2ec6fa93dc9a608d4b15d69
2019-02-05 15:44:40 +01:00
Dan Prince
3238e547a6 flatten the horizon service configurations
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration
for the horizon service.

With this patch the baremetal version of each respective horizon service
has been removed.

Change-Id: I132465a32cd9f5e094ed184a92549d6521ad4e64
Related-Blueprint: services-yaml-flattening
2019-02-04 14:23:57 -05:00
Zuul
9617be2d2f Merge "step1: flatten the neutron service configurations" 2019-02-02 06:15:44 +00:00
Zuul
34cabe691f Merge "flatten the swift service configurations" 2019-02-01 20:51:40 +00:00
Dan Prince
dcdb82c506 step1: flatten the neutron service configurations
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration
for the neutron-api, neutron-dhcp, and neutron-l3 services.

With this patch the baremetal version of each respective neutron service
has been removed.

Related-Blueprint: services-yaml-flattening

Change-Id: I6d1fae29498d2c8bffff2ccffcfbf0b605350205
2019-02-01 09:56:42 -05:00
Zuul
2e55557806 Merge "flatten haproxy service configuration" 2019-01-31 17:28:27 +00:00
David J Peacock
05d77c9ed5 flatten haproxy service configuration
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration.

With this patch the baremetal version of haproxy services has been removed.

Change-Id: Id55ae44a7b1b5f08b40170f7406e14973fa93639
Related-Blueprint: services-yaml-flattening
2019-01-29 12:33:16 -05:00
Zuul
9c887d2340 Merge "Update parameters for cinder's Netapp backend" 2019-01-29 06:02:40 +00:00
Dan Prince
f0aecdd362 flatten the swift service configurations
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration
for all swift services.

With this patch the baremetal version of each swift service has been removed
except for swift-dispersion which only exists in baremetal form.

Related-Blueprint: services-yaml-flattening

Change-Id: I7986efed381a2149bdff42526048ae72e0bf36c0
2019-01-26 17:10:27 -05:00
Alan Bishop
639285f091 Update parameters for cinder's Netapp backend
Update THT to align with puppet-tripleo changes made in [1]
- Add new CinderNetappPoolNameSearchPattern parameter
- Deprecate CinderNetappStoragePools parameter
- Remove previously deprecated CinderNetappEseriesHostType parameter

[1] https://review.openstack.org/570406

Fix relative path in file the sample-env-generator uses to generate
environments/storage/cinder-netapp-config.yaml.

Change-Id: I813ca60eb5ce9e008e1b72e88d83709d3125676f
2019-01-24 15:39:00 -05:00
Alex Schultz
a0400c998c Move selinux to deployment folder
Change-Id: Ieda56421b27e54787fffbc39f8470a67aca38c1d
Related-Blueprint: services-yaml-flattening
2019-01-22 13:21:13 -07:00
Zuul
4d617a85ed Merge "Allow ssh from all for undercloud" 2019-01-21 16:10:16 +00:00
Emilien Macchi
2b7cb19876 Allow ssh from all for undercloud
I89cff59947dda3f51482486c41a3d67c4aa36a3e broke SSH access on the
Undercloud, we shouldn't be that restrictive by default for the
undercloud and standalone (as deployed via tripleo deploy).

This change adds a new parameter called SshFirewallAllowAll that can be
used to include an allow all for ssh. By default it is disabled when
deploying the overcloud but is used by the undercloud and standalone to
allow access after installation.

Change-Id: Ie548f7216610e15af24c96f65a58cc8de603235c
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
2019-01-18 11:14:12 -07:00
David J Peacock
123f40a565 flatten cinder service configuration
This change combines the previous puppet and docker files into a single
file that performs the docker service installation and configuration.

With this patch the baremetal version of cinder services has been removed.

Change-Id: I88f047a8ee9c3eed80e4c48ed9cabdb3035d518b
Related-Blueprint: services-yaml-flattening
2019-01-18 08:55:26 -05:00
Juan Antonio Osorio Robles
eb52c794d9 Add HorizonSecureCookies to environments/ssl/enable-tls.yaml
It was missing and breaking folks trying to use it.

Change-Id: I06c3a8499ce72973f850df60961226a168ba49e4
Closes-Bug: #1812211
2019-01-17 14:40:49 +02:00
Zuul
512f59a8cf Merge "flatten tripleo-packages service configuration" 2019-01-12 19:03:19 +00:00
Zuul
2ca3c7c94c Merge "Move docker into deployment directory" 2019-01-10 23:35:05 +00:00
Zuul
f1ce0b106b Merge "Flatten Keystone service configuration" 2019-01-10 05:37:26 +00:00
Emilien Macchi
2d608e07b5 Move docker into deployment directory
This changes moves docker services from puppet to deployment directory.

Change-Id: I11a34708ee91f5b5928d7c647c83e95ca1b01cae
Related-Blueprint: services-yaml-flattening
2019-01-09 22:58:50 +00:00