Commit Graph

78 Commits

Author SHA1 Message Date
Emilien Macchi
2ccd776390 Remove support for Cisco UCSM plugin
The plugin doesn't have maintainers nor testing in recent releases,
let's remove it from the tree; and a composable service can be added
later if needed, out of tree.

Change-Id: I7edc7d1c817c5577a11effc6732fb3797574ebac
2019-07-15 10:42:41 -04:00
Carlos Goncalves
14436f915b Remove Neutron LBaaS
The project has been retired and there will be no Train release [1].
This patch removes Neutron LBaaS support in tripleo-heat-templates.

[1] https://review.opendev.org/#/c/658494/

Closes-Bug: #1831618
Change-Id: If13bbcdea82045d816485412f252c9b52bcf45a7
2019-06-04 15:12:38 +02:00
Dan Prince
793187d62e Move Aide to deployments
Also, removed entry from capabilities map that no
longer exists.

Change-Id: Ie70ff205a18c04d795c748d3a8d6f89bf401d67c
Related-Blueprint: services-yaml-flattening
2019-03-28 08:24:40 -04:00
Zuul
f800fc303b Merge "Add Mellanox SDN ML2 template for a containerized service" 2019-03-04 12:06:35 +00:00
Hamdy Khader
0a9ff03c76 Add Mellanox SDN ML2 template for a containerized service
Change-Id: I2868ed8cbe5414c1f09679f37853e3ebb5fd284d
2019-02-27 13:41:55 +00:00
Kamil Sambor
9b5cb4b3aa Enable OVN baremetal by default with Ironic service
Switch overcloud Ironic to OVN baremetal and distinguish undercloud
ironic config from overcloud ironic config. Currently undercloud is
using ML2/OVS and will need 'openvswitch' driver there while the
overcloud default driver has now been shifted to ML2/OVN.
Hence we need to split the ironic environment to cover both scenarios.

Change-Id: I754edb68a715b6386a77684d9a72af64e4f188b2
2019-02-20 12:12:24 +01:00
Zuul
30f95926a9 Merge "Update manila environment file name in capabilities-map" 2019-01-16 22:53:58 +00:00
Emilien Macchi
be07f991b6 Remove MongoDB
MongoDB support was stopped in Pike, it is not used anywhere now.
Therefore, in Stein are removing it to clean things up.

Change-Id: I4ec8f35b1dd71c25cfb41cc54105ac743ef67745
2019-01-04 15:17:00 +00:00
Rabi Mishra
841e175110 Update manila environment file name in capabilities-map
In commit 08e67b8ff0 environment
file names were changed to remove 'docker'. However, capabilities
map still has a wrong entry.

Change-Id: Id6877a135adbdaa6b2bff77333e2c9f6fbd9efba
Related-Bug: #1782622
2018-12-03 12:20:42 +05:30
Zuul
cf77ea0ae0 Merge "Add networking-ansible ML2 plugin support" 2018-07-05 17:44:05 +00:00
rabi
6d5b9ab421 Add networking-ansible ML2 plugin support
Depends-On: https://review.openstack.org/577074
Depends-On: https://review.openstack.org/576093

Change-Id: Ib0c2395fbabc654378101527ca065b5c69d3222d
2018-07-02 13:22:04 +05:30
Jiri Tomasek
0f6c13fc97 Update capabilities-map
* Remove docker.yaml from capabilities-map as its resource registry
  is already included in overcloud-resource-registry-puppet.j2.yaml
* Add inject-trust-anchor.yaml to Security section
* Remove unused docker-network.yaml reference

Change-Id: Id637303a434f1fa6bff2a6d415ab56af4e067aa9
2018-06-13 11:22:08 +02:00
Zuul
02efe58a62 Merge "Clean up Cinder backends in capabilities map" 2018-05-14 23:10:52 +00:00
Hamdy Khader
afcf2c71e3 Add support for NVMeOF cinder backend
Change-Id: I2ee3b44fc4a7bede635b0bfcacd1dab8547d123a
2018-05-07 15:45:42 +03:00
Alan Bishop
48c6253835 Clean up Cinder backends in capabilities map
Fix references to the NetApp and Veritas Hyperscale Cinder backend
environment files. Also remove extraneous "configured via puppet"
in the backend descriptions.

Closes-Bug: #1769639
Change-Id: Ic5266abcafed5790296fd910b01aadf3d03900b5
2018-05-07 08:44:28 -04:00
Zuul
0da17202ec Merge "Add support for Dell EMC XtremIO Cinder ISCSI Backend" 2018-03-16 01:18:44 +00:00
rajinir
a462d796a7 Add support for Dell EMC XtremIO Cinder ISCSI Backend
This change adds a new define for cinder::backend::dellemc_xtremio_iscsi

Change-Id: Icf4a199383064e7884953f0f5085dcef54c3b9a4
Implements: blueprint dellemc-xtremeio-cinder
2018-03-09 14:25:14 -06:00
Wojciech Dec
d726a9c8b4 Add cisco VTS ML2 template for a dockerized service and default environment settings
Change-Id: I01989cdec64d5dd3c38ea484d59c89c7bd873b83
Implements: blueprint ml2-cisco-vts
Signed-off-by: Wojciech Dec <wdec@cisco.com>
2018-02-20 21:11:19 +01:00
Zuul
16e15b73b9 Merge "Add support for Dell EMC VNX Cinder Backend" 2018-02-07 03:47:17 +00:00
rajinir
afe81a4e05 Add support for Dell EMC VNX Cinder Backend
This change adds a new define for cinder::backend::dellemc_vnx

Change-Id: I57af2f781c24c74b355410ffb4dc28382ee183fd
Implements: blueprint dellemc-vnx-cinder
2018-01-30 10:57:56 -06:00
lhinds
7e68dbdf8c Implements AIDE Intrusion Detection System
Introduces a service to configure AIDE Intrusion Detection.

This service init's the database and copies the new database
to the active naming. It also sets a cron job, using email if
`AideEmail` is populated, otherwise the reports are sent to
`/var/log/aide/`.

AIDE rules can be supplied as a hash, and should the rules ever
be changed, the service will populate the new rules and re-init
a fresh integrity database.

Related-Blueprint: tripleo-aide-database
Depends-On: Iac2ceb7fc6b610f8920ae6f75faa2885f3edf6eb
Change-Id: I23d8ba2c43e907372fe079026df1fca5fa1c9881
2018-01-15 13:10:16 +00:00
Zuul
8a2fd62f23 Merge "Update capabilities-map.yaml to include latest storage environments" 2017-12-05 17:45:03 +00:00
Jiri Tomasek
9726a78ea9 Update capabilities-map.yaml to include latest storage environments
* updated Ceph features to use environments from ceph-ansible
* added docker-ha.yaml as HA option
* added containers-deafult-parameters.yaml

Closes-Bug: 1735214
Change-Id: I5845e8ca5212a0b97c21d6e44db0e0a1ddfc23fc
2017-11-29 17:38:48 +01:00
lhinds
502fde7a64 Implements management of /etc/login.defs
Enables management of shadow password directives in login.defs

By allowing operators to set values in login.defs, they are able
to improve password security for newly created system accounts.

This change will in turn allow operators to adhere with security
hardening frameworks, such as STIG DISA & CIS Security Benchmarks.

bp login-defs

Change-Id: Id4fe88cb9569f18f27f94c35b5c27a85fe7947ae
Depends-On: Iec8c032adb44593da3770d3c6bb5a4655e463637
2017-11-29 09:23:25 +00:00
Victoria Martinez de la Cruz
6740f94914 Removes manila-generic-config from TripleO
Generic driver is not intended to be used in real environments
since it introduces a SPOF in the data path. Due to this, it
doesn't make sense and generates confusion to have the environment
file, so in this patch set we simply remove it.

Change-Id: I2e1db2bd614eae65e59712f50dc3391f16f6b388
Closes-Bug: #1708680
2017-10-16 16:54:47 -03:00
Bernard Cafarelli
7059ca1316 Add networking-sfc support
Enables deployment of service function chaining via the networking-sfc
project.

Implements: blueprint networking-sfc-support

Co-Authored-By: Bernard Cafarelli <bcafarel@redhat.com>
Change-Id: I230b31dc9ed0ecc5046064628ba2f2505e589522
Depends-On: Icd433ddc6ae7de19a09f9e33b410a362c317138a
2017-10-10 13:33:32 +00:00
Ricardo Noriega
a18a94e498 Add Bagpipe driver composable service
The BaGPipe driver for the BGPVPN service plugin is designed
  to work jointly with the openvswitch ML2 mechanism driver.

Change-Id: I17ed258231e7efdd1ca8e0697d074b11961ed0ae
Depends-On: I1e0227d8055f456043fe63c6a9cbd722d7bf84a7
Partially-Implements: blueprint bgpvpn-service-integration
Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2017-09-01 11:56:47 +02:00
rajinir
f6c9906d51 Add support for Dell EMC Isilon Manila backend
This change adds support for manila::backend::dellemc_isilon

Change-Id: I92592e4b717d4b1812ccd810ec1daaedd181c3dd
Implements: blueprint dellemc-isilon-manila
2017-08-30 04:42:09 +00:00
rajinir
04daabdc84 Add support for Dell EMC VMAX Manila Backend
This change adds support for manila::backend::dellemc_vmax

Change-Id: I92e189c8741c496ef6c27130f73829c327a99f1b
Implements: blueprint dellemc-vmax-manila
2017-08-30 04:42:01 +00:00
rajinir
c771899055 Add support for Dell EMC VMAX ISCSI Backend
This change adds a new define for cinder::backend::dellemc_vmax_iscsi

Change-Id: I7c685e0a3186da138964f17b487fb0c3533f58c7
Implements: blueprint dellemc-vmax-isci
2017-08-30 04:41:47 +00:00
rajinir
a3debcfa8b Add support for Dell EMC VNX Manila Backend
This change adds support for manila::backend::dellemc_vnx

Change-Id: I5fa5c2d6956429d1b9c12a5af6d4a887ed0624d9
Implements: blueprint dellemc-vnx-manila
2017-08-22 11:40:23 -05:00
rajinir
c5ee7b7714 Add support for Dell EMC Unity Manila Backend
This change adds support for manila::backend::dellemc_unity

Change-Id: Idec67d190b12359e8e6f1c157577088fa84ef41d
Implements: blueprint dellemc-unity-manila
2017-08-22 11:40:23 -05:00
rajinir
9353db123d Add support for Dell EMC Unity Cinder backend
This change adds a new define for cinder::backend::dellemc_unity.

Change-Id: I7f9dbb707cf9b5c90ec2f31dcff82cd578805b80
Implements: blueprint dellemc-unity-cinder
2017-08-17 08:36:14 +00:00
Jiri Tomasek
6a3ad6fa45 Update capabilities map to match latest environments
This change updates capabilities-map.yaml to properly map existing
environments

Closes-Bug: 1708159
Change-Id: I4104b6b59b3e9b19a06cdc233dae4f68fe033580
2017-08-02 14:05:14 +02:00
abhishek.kane
91c1a81531 Add composable services for the Veritas HyperScale.
Add a composable service for each of:
  - the Veritas HyperScale's Cinder backend.
  - installing the Veritas HyperScale controller packages.

Change-Id: I99ee827825ec2a6a3c695de1ca1c1015859fe398
Depends-On: I316b22f4f7f9f68fe5c46075dc348a70e437fb1d
Depends-On: I9168bffa5c73a205d1bb84b831b06081c40af549
Signed-off-by: abhishek.kane <abhishek.kane@veritas.com>
2017-07-17 13:27:25 +05:30
Ryan Hefner
6a151ec697 Enable Neutron LBaaS Integration
Allows the configuration of the Neutron LBaaS agent.

Implements: blueprint lbaasv2-service-integration
Change-Id: Iae2bf7faeea93d5275994b2ee10f9bf863ed6152
Depends-On: Ieeb21fafd340fdfbaddbe7633946fe0f05c640c9
2017-07-04 13:53:03 +00:00
Peng Liu
633ab23f88 Add l2gw neutron agent support
L2 Gateway (L2GW) is an API framework for OpenStack that offers bridging
two or more networks together to make them look at a single broadcast
domain. This patch implements the l2gw agent which is one of the backend
of the l2 gateway service plugin.

Change-Id: I1ae8132ceff9410be7bd82caddf0d14251e720bf
Depends-On: If1501c153b1b170b9550cb7e5a23be463fba1fe9
Partially-Implements: blueprint l2gw-service-integration
Signed-off-by: Peng Liu <pliu@redhat.com>
2017-05-18 16:36:12 +08:00
Jenkins
68402dc7f5 Merge "Enables support for configuring Cinder with Pure Storage FlashArray storage backend" 2017-04-28 18:34:21 +00:00
Jenkins
6db405e9df Merge "Add initial support for NSX plugin" 2017-04-25 04:11:08 +00:00
Jenkins
8eaecb6489 Merge "Remove root_template and root_environment from capabilities-map.yaml" 2017-04-19 18:38:18 +00:00
Jenkins
ae6883323e Merge "Grouped all the Operational tools" 2017-04-12 02:22:11 +00:00
lhinds
9945538069 Adds service for managing securetty
This adds the ability to manage the securetty file.

By allowing management of securetty, operators can limit root
console access and improve security through hardening.

Change-Id: I0767c9529b40a721ebce1eadc2dea263e0a5d4d7
Partial-Bug: #1665042
Depends-On: Ic4647fb823bd112648c5b8d102913baa8b4dac1c
2017-04-06 13:30:50 +01:00
Gary Kotton
78f4a33166 Add initial support for NSX plugin
Add the support for the VMware NSX plugin

Co-Authored-By: Tong Liu <tongl@vmware.com>

Change-Id: I3567cbb4ed8d6e5b2a3ea6b8cff6c7b8ed13b692
2017-04-06 04:11:15 -07:00
Simon Dodsley
1f8de419ef Enables support for configuring Cinder with Pure Storage
FlashArray storage backend

This adds the necessary parameters for:
 - Pure Storage FlashArray Block Storage driver configuration

Change-Id: I5b5617dd57015c0944a2d0c60187b01ede09b480
2017-04-04 22:11:34 -04:00
Peng Liu
d7c00f01b5 Add l2gw neutron service plugin support
L2 Gateway (L2GW) is an API framework for OpenStack that offers bridging
two or more networks together to make them look at a single broadcast
domain. This patch implements the l2gw neutron service plugin support part
in t-h-t.

Change-Id: I1b52dc2c11a15698e43b6deeac6cadeeba1802d5
Depends-On: I01a8afdc51b2a077be1bbc7855892f68756e1fd3
Partially-Implements: blueprint l2gw-service-integration
Signed-off-by: Peng Liu <pliu@redhat.com>
2017-03-30 14:42:10 +00:00
Juan Badia Payno
a314ce59f1 Grouped all the Operational tools
So far the operational tools are:
  - Availability monitoring
  - Centralized logging
  - Performance monitoring
This change added the performance monitoring under the Operational tools
so on the tripleo-ui --> deployment configuration --> operational tools
all these features can be added

Change-Id: I7335eaeaed4118422f5630d042229f1a1bf60b5d
2017-03-28 19:39:56 +02:00
Ricardo Noriega
b67ad0695e Add BGPVPN composable service
This project aims at supporting inter-connection between L3VPNs
 and Neutron resources, i.e. Networks, Routers and Ports.

Partially-Implements: blueprint bgpvpn-service-integration

Depends-On:I7c1686693a29cc1985f009bd7a3c268c0e211876
Change-Id: I576c9ac2b443dbb6886824b3da457dcc4f87b442
Signed-off-by: Ricardo Noriega <rnoriega@redhat.com>
2017-03-10 11:35:48 +01:00
Yolanda Robla
ee9c789b23 Enable keystone cadf notifications
It will allow to configure keystone event notifications
using CADF, as documented on:
https://docs.openstack.org/developer/keystone/event_notifications.html

CADF events provide auditing capabilities for compliance with
security.

Change-Id: Id16b264c295b9e3adbf960366ff8328ba8dcd485
2017-03-06 18:10:55 +01:00
Christopher Brown
b9aa2c1e0c Removes old environment file references
ODL-l3 env file was removed in commit 7163746
manage-firewall was removed in commit 2064ab8 as this was enabled
by default

Change-Id: I8ed8d4ed5bf709f2ac581adfaacc24a7582f13bd
2017-03-03 14:00:53 +00:00
Ana Krivokapic
3e6147dee4 Remove root_template and root_environment from capabilities-map.yaml
These values now live in plan-environment.yaml.

Change-Id: I7a9448df7c9f84beaac9238f1278633c3ec5ad28
Closes-bug: #1668953
Depends-On: I961624723d127aebbaacd0c2b481211d83dde3f6
2017-03-03 11:56:27 +01:00