Moving the network and port management for OVN
bridge MAC addresses to ansible.
Removes the heat resources, and adds an external
deploy task at step 0 in the ovn controller service
templates which uses the 'tripleo_ovn_mac_addresses'
ansible module to create/remove OVN mac address ports.
Adds parameter role_specific OVNStaticBridgeMacMappings,
parameter that can be used to set static bridge mac
mappings. When this is set no neutron resources will be
created by the tripleo_ovn_mac_addresses ansible module.
OVNStaticBridgeMacMappings must be used for standalone
deployments.
Implements: blueprint network-data-v2-port
Depends-On: https://review.opendev.org/782891
Depends-On: https://review.opendev.org/783137
Change-Id: I6ce29d2908e76044c55eb96d0d3779fe67ba9169
The Veritas HyperScale driver has been removed from cinder[1], thus
we should remove its support from TripleO as well.
[1] 9aca21f5cec8f03a3bb410acb21399955144fe0f
Because the implementation was removed a while ago, this change doesn't
deprecate the feature but directly remove it.
Change-Id: I5dd448ac0a7c9a786b9239290d1690d51f50f71c
This change drops some leftovers of Midonet support, which was already
removed[1].
[1] 91d28753936dad5f7740a75e293796b94440c660
Change-Id: I6ceccf4d70c52a31598deea6fb9faabd3f4a5ee5
There isn't a 1:1 correlation between the designate worker and bind
instances nor is it always desirable to run them on the same host.
Depends-On: If97e16a125537c1b5d9f5cfac1de0ffae0edb99a
Change-Id: I624299476a2911f12b1f5ce01964e5d926c6b38e
Change it to POLL_SERVER_HEAT (Attempt 2, Earlier attempt had
issues when changing this as simultaneously deleting a bunch
of SoftwareDeployment resources). This is required to remove
swift from undercloud.
Change-Id: I639f5626013cd0ef61c1f9066fab7a7b8806287f
Sahara support was deprecated during previous Ussuri cycle[1], so we
can remove it completely now.
[1] f1d9b15c85fd1ed2250d40cea8184a18f458234f
Change-Id: Id047221cb912c09984cc3bf864196a26fd36736f
This changes the parameter to non-role specific and by default
true. The dependant python-tripleoclient patch adds a check
to ensure that we only allow usage of old heat nic congigs with
'NetworkConfigWithAnsible: false'.
Change-Id: Ie37bdfe64eb1b33afe326161fc6f99601addb7b5
For each role create a network config resource
{role.name}}NetworkConfig. Remove per node
NetworkConfig resource from puppet/role.role.j2.yaml.
NOTE: CI nic config templates was updated with using
tools/merge-new-params-nic-config-script.py
Depends-On: https://review.opendev.org/753930
Change-Id: Iff4bf742947a5a8170938372a8075519850b6f63
There appears to be an inconsistency in the ironic configuration
between the undercloud vs the minion.
The minion has:
enabled_inspect_interfaces=no-inspect
The undercloud has:
enabled_inspect_interfaces=idrac,ilo,inspector,no-inspect,redfish
Fix this by adding the same default params for Ironic on UC minions as
the main undercloud environment defines it.
Change-Id: I0aaf6a9e5ac0a2f7ed95c8f046a4df6147ff0edb
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
A network used to allocate MAC addresses for OVN chassis.
Ports without and IP allocation will be created on this
network, the MAC addresses of the ports will by used to
configure the ovn-chassis-mac-mappings.
NOTE, we may want to change the 'base_mac' option of the
undercloud, so that we don't have collissions with the
overcloud 'base_mac'.
Related-Bug: #1881593
Change-Id: If495b5d5c1e6beff02b48507051cccfb70fd995c
This change updates the baremetal host sshd management to use ansible
instead of puppet. It should still be noted that the nova-migration
container still uses puppet to manage sshd.
Change-Id: Iedd149c123d807dee229160f8e9f1b17bf379368
Depends-On: https://review.opendev.org/#/c/742970/
This commit attempts to build out a composible service that enrolls the
undercloud as a FreeIPA host using an OTP. This is similar to what we've
done in the past for tls-everywhere except we're not using novajoin.
Change-Id: I770227b2f4f1ea447cf0138f57a6ed66c034d225
- Docker isn't supported anymore.
- Clients are now installed by Ansible, not Puppet
- Neutron SRIOV host isn't supported and operators should deploy with
sriov_pf network object in nic configs.
- firewall is now managed by Ansible, not Puppet
Change-Id: I2b6068a719563a53bc255dcce72a92465e7df468
It seems that netwokring-fujitsu is no longer maintained[1], and it's
not compatible with Python 3.6 which currently all OpenStack services
require.
[1] https://opendev.org/x/networking-fujitsu
Change-Id: Iae639864cce8e3add635944f157ecde074312e74
We don't deploy Keepalived in multi-node as our HA story is done with
Pacemaker. Therefore, we don't use VRRP protocol that Keepalived
provides to maintain the VIPs alive, so we don't really need this
service.
Instead, we can configure the VIPs on the br-ctlplane interface which
already handled the local_ip. Now it also handles the configuration of
public ip and admin ip.
Keepalived is now deprecated and will be removed in the next cycle.
blueprint replace-keepalived-undercloud
Change-Id: I3192be07cb6c19d5e26cb4cddbe68213e7e48937
Now puppet-tripleo is responsible to set memcache for caching, we can
remove uselsess hieradata overriding in the undercloud environment
file.
Depends-on: https://review.opendev.org/#/c/715582/
Change-Id: I20ebe407a362e939fbda7a511de287cbe46a0ef9
This switch seems to be creating issues with upgrades, where a number of
software deployments are deleted concurrently while updating the config
transport for the server. Switching the config transport does not work
with convergence heat and should be fixed in heat. We can revert this
now, as we still use swift for other stuff in the undercloud. Can be
changed once the issue is fixed in heat.
It also reverts the following dependant commit.
Revert "Cleanup SoftwareConfigTransport"
This reverts commit (1821c01846a20da331959ff49fe8536f1e1bf86a and
3ea9dd4040686b7c2ec82f7e7e467e0b3c3bd2a7)
Closes-Bug: #1869335
Change-Id: I835c8be3eecce91f8a370d036bf1085bc445e01d
Cinder has many templates for its various backend drivers, and they
all default to OS::Heat::None in the resource registry. There's no
need to mention them in most env files, and removing the references
reduces maintenance work when cinder's list of backend templates
changes (which it tends to do).
Change-Id: I794c7d9bd024fd12289571f2bfde16230f8fc32c
We're dropping this as it has no testing and is not currentily available
for CentOS 8.
Change-Id: I408490346840d5a2e3ae29f53cbc100edcf72ee7
Depends-On: https://review.opendev.org/#/c/712517/
They were deprecated in Train and aren't used anywhere.
This also remove scenario006 which wasn't working anyway, and was
deploying the kubernetes service.
Change-Id: Id2ea4944c688039e28c4d16635bb4f2b0ed23154
The NeutronServer service mapping has been outdated for a while in favor
of using the NeutronApi service name. Previously, the 2 service mappings
just pointed at the same service template.
This patch properly cleans up any old files still using NeutronServer,
and adds a deprecation for the old mapping. An environment file is added
to enable the old mapping if needed.
This patch will be backported to train, and then the environment file
can be removed in ussuri in a subsequent patch.
Also cleans up an outdated FIXME comment in
overcloud-resource-registry.j2.yaml.
Change-Id: I48b969941c3c6cb1a5b39c8292f461c61b3dabd7
This change removes all plumgrid templates and options from the code base.
Sadly the company "plumgrid" no longer exists, and because of that, there's
no need to carry this deployment code.
Change-Id: I9767602f6930516b577baf9b2f0feb71e4bf4fdf
Signed-off-by: Kevin Carter <kecarter@redhat.com>
Sensu client has been deprecated and it's functionality substituted
by collectd-sensubility. This patch removes sensu-client composable
service
Change-Id: I4be68eb7319b2c92cc7d0fc9df7a5c87dfb5106c
The Tacker service has been incomplete since Queens. They restructured
the services and TripleO has never implemented code to handle this new
structure. Since it's been disabled since Queens and there is currently
no plans to fix it, let's remove the service code.
Change-Id: I2856e894b58d50c2d3484ccd02bfb1d43625847f
Depends-On: https://review.opendev.org/#/c/682457/
Related-Bug: #1714270
The NeutronAZConfig service was removed in commit
20f34fc556a45f3bd408433a6be99553e863f8ed, so it can be removed from the
undercloud minion environments as well.
Change-Id: Ib5f3e872adab34570397be868b54ce06785f528a
This patch removes fluentd composable service in favor of rsyslog composable service
and modifies *LoggingSource configuration accordingly.
Change-Id: I1e12470b4eea86d8b7a971875d28a2a5e50d5e07
Since this is nwo set to POLL_SERVER_HEAT by default in the
overcloud-resource-registry-puppet.j2.yaml, we no longer need to
override it for the undercloud/standalone use case.
See https://review.opendev.org/#/c/671980/
Change-Id: I3e2cfd856bf46fb82998e8f14c64b11299862238
Migrate the generation of the all_nodes hieradata from Heat to using the
tripleo-hieradata role instead.
Change-Id: I9a37d1faec73a81a28d8f89d86375fb15ee765c7
Depends-On: I6e1e1c28dc09c9e04119db910068d62409a5afc8
This adds a role and service files to support an undercloud minion that
runs additional services that connects to an undercloud.
Change-Id: Ib6fb39f7baa6972ea9879f4f29d7dd46487e2b8f
Related-Blueprint: undercloud-minion