Commit Graph

120 Commits

Author SHA1 Message Date
Emilien Macchi
81211c114c Remove support for Cisco N1KV
Cisco N1KV has announced EOL & EOS. So we are removing its support in
TripleO.

Change-Id: Icd56f6cba30ea2a0377ccbc9e830cd981a00e478
2019-07-21 18:58:53 -04:00
Emilien Macchi
91d2875393 Remove support for Midonet plugin
The plugin isn't well maintained and we have zero feedback on how it is
working, therefore we are removing it from the tree; and a composable
service can be added out of tree later if needed.

Change-Id: Ibbcf0316aebd6c1ca87f510f5aa4c4b44941ed88
2019-07-18 19:12:36 +00:00
Emilien Macchi
2ccd776390 Remove support for Cisco UCSM plugin
The plugin doesn't have maintainers nor testing in recent releases,
let's remove it from the tree; and a composable service can be added
later if needed, out of tree.

Change-Id: I7edc7d1c817c5577a11effc6732fb3797574ebac
2019-07-15 10:42:41 -04:00
Rabi Mishra
39a5545c41 Change OS::Heat::*Deployments to OS::Heat:*DeploymentGroup
Those are hidden resource types in heat. Changing these types
would not result in replacement of the resources.

Change-Id: I22d23a8f187263bd36e364f0cd3301c830f3220b
2019-07-04 20:21:06 +05:30
Emilien Macchi
d8ebe0c502 neutron: force project_name for midonet & bigswitch
Related to https://review.opendev.org/661416
In TripleO we use 'service', and not 'services'.
So we need to force the midonet & bigswitch configs to be 'service'.

Change-Id: If04a3f055ce9ebb1bdfeb20cbf82638fadcda71a
2019-05-28 10:12:51 -04:00
Alex Schultz
e2a8a494c5 Handle upper and lower case system uuids
We need to be able to handle when system uuids are upper or lower case
because newer versions of dmidecode have normalized to lower case. Users
who were on CentOS/RHEL 7.5 and older may have per-node customizations
with upper case which turn lowercase with an update to 7.6. This affects
hieradata customizations as well as os-net-config mapping files. This
change outputs both an upper and lowercase hieradata uuid file to handle
the both versions of the UUID. Additionally this change normalizes the
id comparison for os-net-config mappings to lower case.

Change-Id: I65f46056f8a908c60c99d1cee3738344a0bce6b7
Closes-Bug: #1816652
2019-02-19 12:58:54 -07:00
Zuul
06ecf7bb82 Merge "Remove incorrect mapped_data key from cisco ml2 hieradata" 2019-02-11 19:13:00 +00:00
John Fulton
fe2fda491b Change NodeDataLookup type from string to json
The NodeDataLookup parameter should be valid JSON and we should
help the user by adding type checking for this early in the
deployment so that the user doesn't experience the related bug.

Change-Id: Id9d2208f1cbaba9234d7657420cd7efcad3507a0
Related-Bug: #1784967
Related-Bug: #1814070
2019-02-05 11:53:45 +00:00
Sam Betts
95245f6ad4 Remove incorrect mapped_data key from cisco ml2 hieradata
Since os-apply-config changed to the hiera hook here:
c5d10cd9fc
the mapped_data key is no longer required and results in an additional
incorrect key being written to the hiera data. This patch removes it to
ensure the hiera data for cisco ml2 works as expected.

Change-Id: I730b107d4b5a002f82f658a83d11162606e44a16
Closes-Bug: #1791044
2019-02-04 20:06:11 -05:00
Zuul
3619ca4d00 Merge "CiscoNexus: Update and Remove deprecated vars" 2019-01-03 07:47:55 +00:00
Zuul
a0b72fa415 Merge "Handle python binary look for scripts" 2018-12-08 11:42:23 +00:00
Rabi Mishra
4de17945a1 Set facter variable 'uuid' explicitly in docker-puppet.py
Unprivileged docker-puppet-$service containers don't have access
to devices and can't get facter 'uuid' variable. Therefore per node
hiera customizations don't work. We can work around this by using
/sys/class/dmi/id/product_uuid instead.

dmidecode>=3.1 returns system-id in lower case, so it's better to
use lowe case for compatibility.

This would also require changes to the docs as ironic node
introspection data may show it in both cases.

Change-Id: I899de7732c5b29ed70d4d487fdbc363117ac327f
Closes-Bug: #1806011
2018-12-01 19:13:37 +05:30
Alex Schultz
1e5ccb4c7d Handle python binary look for scripts
We have some scripts that we deploy via tripleo that use inline python.
For this we need to be able to find an available python on the system in
order for it to work. This change adds a lookup function to the scripts
to find a working version of python as /usr/bin/python may not exist.

Change-Id: Ida7a7cbd064ebdb923f38c9102eb4b0771f9b273
Related-Blueprint: python3-support
2018-11-26 16:48:51 +00:00
Carol Bouchard
a425a6f1ff CiscoNexus: Update and Remove deprecated vars
Update and Remove deprecated variables from Cisco Nexus Config.
* Deprecated variables include vlan_name_prefix, svi_round_robin,
  provider_vlan_name_prefix, persistent_switch_config,
  never_cache_ssh_connection, ssh_port, switch_replay_count,
  nexus_driver, and host_key_checks.
* Change config replay to on by defaulting switch_heartbeat_time=30.
* Replaced method of configurating host_ports_mapping config.

Depends-On: Iee2f869c4054f1120d224994aba8c827f981e6c0
Change-Id: Ibda17afdcf7a6748f15390fd8a0a8b70bb6dfc2b
Closes-bug:  #1793381
2018-11-06 15:52:30 +00:00
Steven Hardy
b278f6c476 Remove unused tls-cert-inject.yaml template
This is no longer handled as the TLS handling tasks were converted
to ansible, and in the context of this series we need to remove it
because it references bootstrap_nodeid

Partial-Bug: #1792613
Change-Id: Ib32177b116f148f007574847320566e32240cf96
2018-10-12 11:12:25 +01:00
Zuul
e82ddf5e32 Merge "Delete FreeIPA enroll script" 2018-09-19 04:01:55 +00:00
Juan Antonio Osorio Robles
63a8f5529f Remove md5 checksum output from CA injection
This doesn't work with config download anymore, since the software
configs are overwritten. It was never a very useful output anyway, so
it's being removed.

Change-Id: I2c4fc26009fb6e031c6d7fe11401e85c995bd210
Closes-Bug: #1786954
2018-08-14 17:32:27 +03:00
Juan Antonio Osorio Robles
4a3668cfe9 Delete FreeIPA enroll script
This was used to manually enroll nodes to FreeIPA. It's not used nor
supported, so lets delete it. The favored alternative is to use
novajoin.

Closes-Bug: #1786762

Change-Id: If11767e2260187c22a09999d523e8c4fc103964b
2018-08-13 13:51:37 +03:00
Mathieu Bultel
a472f7d513 Match only haproxy for docker ps and skipp all *-haproxy occurences
The grep regexp can match several lines if the haproxy pattern
is present.
By matching only the started by a whitespace it will match
the haproxy container listed by docker ps:
[...] Up 17 hours   neutron-haproxy-qrouter
[...] Up 20 hours   haproxy-bundle-docker-

Change-Id: Id63991e862ab10170c8afbde7a11677cc3d2e2f6
2018-06-11 10:50:39 +02:00
Carlos Camacho
44ef2a3ec1 Change template names to rocky
The new master branch should point now to rocky.

So, HOT templates should specify that they might contain features
for rocky release [1]

Also, this submission updates the yaml validation to use only latest
heat_version alias. There are cases in which we will need to set
the version for specific templates i.e. mixed versions, so there
is added a variable to assign specific templates to specific heat_version
aliases, avoiding the introductions of error by bulk replacing the
the old version in new releases.

[1]: https://docs.openstack.org/heat/latest/template_guide/hot_spec.html#rocky
Change-Id: Ib17526d9cc453516d99d4659ee5fa51a5aa7fb4b
2018-05-09 08:28:42 +02:00
Zuul
a30f74a5e9 Merge "Sanitize the uuid string" 2018-04-12 23:05:52 +00:00
Zuul
e9418e171c Merge "Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker" 2018-04-11 08:58:18 +00:00
Juan Antonio Osorio Robles
8b85faf7e6 Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker
As part of the minor update workflow and the update workflow, this changes
the pacemaker haproxy bundle resource to add the needed mount for public
TLS to work.

This also handles the reloading of the container to fetch any new certificates
and if needed, it will restart the pacemaker resource (for upgrades), since
we would need pacemaker to re-create the resource.

Change-Id: I850f4de17e7f7e3b46deb27119227ef76658dcb5
Closes-Bug: #1759797
2018-04-10 12:09:21 +00:00
Alex Schultz
dc3781778e Sanitize the uuid string
dmidecode can return some additional data if SMBIOS is updated. Let's
ensure that the expected output matches the expected UUID format. The
expected string from the 'dmidecode --s system-uuid' call should look
like "79287E4C-2FBF-11B2-A85C-EB9FB9250CBA".

Change-Id: Ib0d19e64b2f24f4a9229f8868795e8979e267f04
Closes-Bug: #1762460
2018-04-09 09:36:34 -06:00
Juan Antonio Osorio Robles
1877ef80be Default NodeTLSData to always attempt setting TLS cert
This is part of enabling TLS by default. It'll be needed in order to get
the certificate injection to work.

Needed-By: I3d3cad0eb1396e7bee146794b29badad302efdf3
Change-Id: I25e35ad1e4f12eb4cca7a0cd3e120e70e4a8c564
2018-04-09 07:46:45 +03:00
Sandhya Dasu
b2d76220f0 Adding new config parameters for Cisco UCSM ML2 driver
UCSM ML2 driver now supports the following additional
configuration parameters:
1. ucsm_https_verify
2. sp_template_list
3. vnic_template_list

Change-Id: Ie74f1b9653894f8c717156beb604dae9d9e60e6a
2018-02-13 16:26:12 +00:00
Carol Bouchard
d11d8155b5 Latest Nexus Configuration Variables Updates
Add new interface Config variables added to Nexus plugin.
    vnc_pool
    intfcfg.portchannel
Identify variables which are obsolete and those being deprecated.
Change default to switch_heartbeat_time.

Depends-On: I940659bdd448b7bda1c38d9343ec6322390b027a
Change-Id: I1995711fc976e72e4254fc0738e4c91b455830ab
Closes-bug:  #1672493
2018-01-12 21:04:03 +00:00
Giulio Fidente
1971e7b049 Passes NodeDataLookup to ceph-ansible workflow
Per-node customizations were only dumped as hieradata, so the
ceph-ansible workflow could not consume them.
This change passes the structure to the mistral workflow so that it
can consume the data and populate the inventory accordingly.

Change-Id: Ie7a9f10f0c821b8c642494a4d3933b2901f39d40
Depends-On: Ia23825aea938f6f9bcf536e35cad562a1b96c93b
Closes-Bug: #1736707
2017-12-13 14:38:02 +01:00
Zuul
410027d64f Merge "Add name property where missing" 2017-12-05 18:07:49 +00:00
James Slagle
7a3fc67559 Add name property where missing
All SoftwareDeployment resources should use the name property when using
config-download.

This also adds a validation to check that the name property is set in
yaml-validate.py

Change-Id: I621e282a2e2c041a0701da0296881c615f0bfda4
Closes-Bug: #1733586
2017-12-04 18:01:52 -05:00
Carlos Camacho
927495fe3d Change template names to queens
The new master branch should point now to queens instead of pike.

So, HOT templates should specify that they might contain features
for queens release [1]

[1]: https://docs.openstack.org/heat/latest/template_guide/hot_spec.html#queens

Change-Id: I7654d1c59db0c4508a9d7045f452612d22493004
2017-11-23 10:15:32 +01:00
Juan Antonio Osorio Robles
d1f3b1f683 Remove certificate before updating it
Containerized HAProxy always tries to load the SSL certificate; if TLS
is not enabled it will create the file as a directory. This messes up
with the script that actually injects the HAProxy certificate into the
undercloud. To address this, we update that script to take this into
account.

Change-Id: Ifc748648cc0f8caaf5a551fd0bc5724b94f3087d
Closes-Bug: #1728267
2017-11-07 09:00:00 +00:00
Zuul
2b7ccf6159 Merge "added level of indirection causes incorrect hiera config" 2017-11-01 19:27:35 +00:00
Aditya Vaja
485339129c added level of indirection causes incorrect hiera config
- until Newton this worked fine, however starting with Ocata, we
   do not need the key 'mapped_data'
 - having it results in extra indirection in the dictionary in
   neutron_bigswitch_data.json

Change-Id: I3bc9940aeff4e290d83de95a7df294c11f061954
2017-09-28 17:36:26 -07:00
Vineet Paul
4b1276b8f6 Drop extraconfig for nova-nuage
Made the Compute as a composable service with Nuage.
Moved all the Nuage specific parameters from extraconfig to be part of this service.

Change-Id: Ic83e9c18d09fbba62bb5d8a12e28a23127f4197d
2017-08-16 07:46:00 -04:00
Juan Antonio Osorio Robles
74e7e67459 Move HAProxy's public TLS logic from controller to service template
This de-couples public TLS from controllers to now run wherever HAProxy
is deployed.

Partially-Implements: blueprint composable-networks
Change-Id: I9e84a25a363899acf103015527787bdd8248949f
2017-08-11 04:07:38 +00:00
Sandhya Dasu
605ad6f65d Modifying Cisco templates to support composable roles
Change-Id: I21fee832aeeb9780f818ae869ea8714f28bbe4a0
Closes-bug:  #1704853
2017-07-24 23:49:37 +00:00
Carlos Camacho
0a0e2ee629 Update the template_version alias for all the templates to pike.
Master is now the development branch for pike
changing the release alias name.

Change-Id: I938e4a983e361aefcaa0bd9a4226c296c5823127
2017-05-19 09:58:07 +02:00
Jenkins
c7b045e44e Merge "Add composable role support for NetApp Cinder back end" 2017-04-12 15:28:00 +00:00
Alan Bishop
c533a3219e Add composable role support for NetApp Cinder back end
Convert NetApp Cinder back end to support composable roles via new
"CinderBackendNetApp" service.

Closes-Bug: #1680568
Change-Id: Ia3a78a48c32997c9d3cbe1629c2043cfc5249e1c
2017-04-10 11:38:49 -04:00
Giulio Fidente
b5b6681a74 Replace references to the 192.0.2 network
Following change I1393d65ffb20b1396ff068def237418958ed3289 the ctlplane
network will be 192.168.24 by default and not 192.0.2 anymore.

This change removes old references left to 192.0.2 network from the
overcloud templates.

Change-Id: I1986721d339887741038b6cd050a46171a4d8022
2017-04-10 14:05:50 +02:00
Alex Schultz
8eaa5f8e10 Re-Add bigswitch agent support
The agent configuration was lost in newton during the puppet-tripleo and
THT role conversion. This change adds support for including the bigswitch
agent service for composable roles.

Change-Id: I46896389e48cdbe2864bf5b609a786f1c84ef908
Closes-Bug: #1673126
2017-03-17 15:10:39 -06:00
marios
c5d10cd9fc Use the new hiera hook in all remaining templates
The new hiera hook in I21639f6aadabf9e49f40d1bb0b1d0edcfc4dbc5e
was added to most of the tripleo-heat-templates in
Ibe7e2044e200e2c947223286fdf4fd5bcf98c2e1

The new hook is installed by default if you use tripleo-common
Ia1864933235152b7e899c4442534879f8e22240d and will be installed
as part of the Newton to Ocata upgrades workflow in
I0c7a32194c0069b63a501a913c17907b47c9cc16

In order to use the new hiera data as part of the upgrade we
need to remove the old hieradata which will break anyone still
defining and using it. This change updates the remaining vendor
plugin manifests to use the new hiera hook. The pre-requisite
is that the new hook is installed on their overcloud (as above
it comes if you follow the N..O upgrade)

Change-Id: Ic95154734cb21e6b941c7f1569295b413963831d
2017-03-06 10:33:01 +02:00
Jenkins
f190469c01 Merge "Re-organizes Contrail services to the correct roles" 2017-02-09 17:02:55 +00:00
Michael Henkel
da91bb6e1e Re-organizes Contrail services to the correct roles
In current setup some Contrail services belong to the wrong roles.
The Contrail control plane can be impacted if the Analytics database has
problems.

Change-Id: I0d57a2324c38b5b20cc687c6217a7a364941f7e6
Depends-On: Id0dd35b95c5fe9d0fcc1e16c4b7d6cc601f10818
Closes-Bug: #1659560
2017-02-08 20:25:41 +01:00
Jenkins
a79b3ecb39 Merge "Composable service support for Cinder Dell EMC Storage Center" 2017-02-08 11:15:10 +00:00
rajinir
a19e570cad Composable services support for Cinder Dell EMC PS Series
Updated the heat templates for Cinder Dell EMC PS Series backend
to use composable services and rebranding of EQLX to Dell EMC PS Series

Closes-Bug: #1661313

Change-Id: Id9d6f172f3f79a31788b26c7776d738fda5a30fa
2017-02-07 11:54:24 +00:00
rajinir
341afb9f83 Composable service support for Cinder Dell EMC Storage Center
Updated the heat templates for Cinder Dell EMC Storage Center
Backend to use composable services

Closes-Bug: #1661314

Change-Id: I454549c45da7388f0e42975c9f4637dde9ec51e3
2017-02-03 12:07:33 -06:00
Jenkins
a6522190b3 Merge "Temporary UCSM mapping files should be opened with write mode" 2017-02-02 13:32:49 +00:00
Steven Hardy
3c6ec654b4 Bump template version for all templates to "ocata"
Heat now supports release name aliases, so we can replace
the inconsistent mix of date related versions with one consistent
version that aligns with the supported version of heat for this
t-h-t branch.

This should also help new users who sometimes copy/paste old templates
and discover intrinsic functions in the t-h-t docs don't work because
their template version is too old.

Change-Id: Ib415e7290fea27447460baa280291492df197e54
2016-12-23 11:43:39 +00:00