Commit Graph

348 Commits

Author SHA1 Message Date
Zuul
51c22afdf0 Merge "Add NovaLocalMetadataPerCell cell support" 2019-08-14 17:07:11 +00:00
Martin Schuppert
2cd9e44e66 Add NovaLocalMetadataPerCell cell support
Indicates that the nova-metadata API service has been deployed
per-cell, so that we can have better performance and data isolation
in a multi-cell deployment. Users should consider the use of this
configuration depending on how neutron is setup. If networks span
cells, you might need to run nova-metadata API service globally.
If your networks are segmented along cell boundaries, then you can
run nova-metadata API service per cell.

Introduces a new endpoint_map entry NovaMetadataInternal.

If NovaLocalMetadataPerCell is true, NovaMetadataCellInternal points
to the local cell endpoint.

If NovaLocalMetadataPerCell is false, NovaMetadataCellInternal points
to the central control plane nova metadata endpoint.

The NovaMetadataCellInternal endpoint is then used to configure the
nova-metadata api endpoint the ovn metadata agent points to.

Also removes setting the deprecated [DEFAULT]/nova_metadata_ip
hiera key and only uses [DEFAULT]/nova_metadata_host for the ovn
metadata agent.

Depends-On: https://review.opendev.org/675070
Depends-On: https://review.opendev.org/650943
Change-Id: I78f6d30676ee166f84d8aca1609b376bb73e5f2c
Closes-Bug: #1823760

Change-Id: I1e05230e4105a3706f0662b0c203137d05ebf3d8
2019-08-12 17:42:51 +02:00
Piotr Kopec
2b2216bf67 Add ContainerImagePrepare service to CellController role
The CellController role does not have ContainerImagePrepare
service. This result in empty external_deploy_steps_tasks.yaml
and does not update container images when trying to update
the cell stack.

Change-Id: Ib12d99be11e34b77fe3697c9ce09f84e4a1294f3
Closes-Bug: 1839789
2019-08-12 00:27:17 +02:00
Emilien Macchi
c845595ba3 Removal of OpenShift deployed by TripleO support
OpenShift deployed by TripleO support has been removed in a downstream
version of Stein which make the upstream support difficult to maintain.
OpenShift can be deployed using OpenShift-Ansible and
users who desire to deploy OpenShift 3.11 onto bare metal nodes can
still do so using openshift-ansible directly. The provisioning of
the Operating System on baremetal can be done with OpenStack Ironic on
the Overcloud or also can be done with deployed-servers, achieving the
same result.

Change-Id: I6a73f7f22dda69bef324ffdaecdcd6be693c1257
2019-08-06 17:22:24 -04:00
Alex Schultz
6d9a9f0565 Add ssh configuration for minion
Currently once the install is complete, a user is locked out which isn't
ideal. Let's manage the ssh like we do for the undercloud as well.

Change-Id: Ia94a3b92355cb0bd24f133a22e3dc5977fcb5180
Closes-Bug: #1837942
2019-07-25 14:00:21 -06:00
Zuul
f7b4851d99 Merge "Rsyslog composable service" 2019-07-24 18:02:58 +00:00
Zuul
6e777cf24d Merge "Add dashboard component as new ceph composable service." 2019-07-20 14:04:15 +00:00
Martin Magr
8727ef050c Rsyslog composable service
This patch adds rsyslogd composable service with the same behaviour
the fluentd composable service currently has.

Co-Authored-By: Juan Badia Payno <jbadiapa@redhat.com>
Change-Id: I18e349c450a42dc7e9867d200e777a324e2d12bc
2019-07-18 15:41:28 +00:00
Oliver Walsh
c2977e3c00 Add missing update_serial key to compute roles
I missed this the changes from I4ee0110a6c2b9466d81e37e5df27f5f81a6eceb5 when
rebasing I9f40a2a3561fcb1d1fec9d9c3c1f9cabaf02650c.

Add the missing key to the roles and add some validation to catch this.

Change-Id: I0f38df69777340ebbdc5c419f121524dbc74cad7
Related-bug: #1831617
Implements: blueprint nova-backend-per-role
2019-07-17 16:08:40 +01:00
fpantano
a407d4f5da
Add dashboard component as new ceph composable service.
This review introduces the CephDashboard service
to allow operators to deploy the new ceph dashboard
along with the other ceph components.
According to the spec we can add the environment
file to reference the template that contains all the
parameters needed to deploy the ceph-dashboard via
ceph-ansible related roles.

Implements: blueprint ceph-dashboard
Change-Id: I1d31cd99823686986cdbd3ac1df184e9457a361e
2019-07-17 15:53:34 +02:00
Oliver Walsh
65d7e55f54 Make nova ephemeral storage backend configurable per-role
When multiple Compute roles are used, admins may want to use different storage
backends on each role.

This change turns NovaEnableRbdBackend into a role specific param.
Any other config that is implicitly enabled by the global NovaEnableRbdBackend
now requires a dedicated param.

Co-Authored-By: ratailor@redhat.com
Change-Id: I9f40a2a3561fcb1d1fec9d9c3c1f9cabaf02650c
Implements: blueprint nova-backend-per-role
2019-07-03 11:00:51 +01:00
Zuul
96a527e40d Merge "Add UndercloudMinion environments" 2019-06-26 08:21:03 +00:00
Alan Bishop
b172661995 Make Multipathd an optional service
This is part 1 of a series of patches to properly deploy multipathd.

This patch makes Multipathd an optional TripleO service (defaults to
OS::Heat::None), and binds it to every role that might use the service.
This is essentially any role that accesses cinder volumes. Previously,
the service was not optional, but was not bound to any roles and so it
was never deployed.

Partial-Bug: #1834042
Change-Id: I3bc7d8557f758103c35533a59e06e36cd15f98b9
2019-06-24 07:15:37 -07:00
Alex Schultz
eeb0d54958 Add UndercloudMinion environments
This adds a role and service files to support an undercloud minion that
runs additional services that connects to an undercloud.

Change-Id: Ib6fb39f7baa6972ea9879f4f29d7dd46487e2b8f
Related-Blueprint: undercloud-minion
2019-06-21 15:43:42 -06:00
Zuul
c9b209fa59 Merge "Revert "Revert "Switch off nova metadata api on the undercloud""" 2019-06-12 12:24:01 +00:00
Zuul
f698209e11 Merge "Add new role parameter NovaLibvirtMemStatsPeriodSeconds" 2019-06-12 07:44:21 +00:00
Zuul
f7fb4bdaed Merge "Add networks to Standalone role" 2019-06-11 03:35:29 +00:00
Rajesh Tailor
66c4e23654 Add new role parameter NovaLibvirtMemStatsPeriodSeconds
Add role parameter NovaLibvirtMemStatsPeriodSeconds which allows to
set `libvirt/mem_stats_period_seconds` parameter value to
number of seconds to memory usage statistics period, where
zero or negative value mean to disable memory usage statistics.

Default value for the parameter is 10.
Also set the default value to 0 for Real-Time Compute roles.

Depends-On: https://review.opendev.org/#/c/663522/
Change-Id: I8e1a81bc69b4d266755ba3c2a4bf17f37d276fd7
2019-06-10 14:57:35 +05:30
Zuul
19bca968a1 Merge "Add ComputeHCIOvsDpdk role" 2019-06-10 04:41:07 +00:00
Alex Schultz
da1827f7d3 Add networks to Standalone role
The standalone role can be used with and without an undercloud. If you
deploy it with an undercloud and use network-isolation, then the
deployment will fail because the networks aren't defined in the role.
Since it doesn't hurt to have them on in the non-undercloud version,
lets add them back in.  They were previously removed as part of
https://review.opendev.org/#/c/628265/

Change-Id: I366631cb6ecd39595c00204a02408beb431af70e
Closes-Bug: #1832043
2019-06-07 13:44:14 -06:00
Mathieu Bultel
a59a188a6b Force ansible serial to 1 for the Controller
By introducing update_serial variable we parallelize update
execution on non-pacemaker enabled nodes. Custom role data users
need to update their role files. By default we do serial 1 making
sure nothing changes for users who didn't update their role data.

Resolves: rhbz#1652057
Closes-Bug: #1831617

Change-Id: I4ee0110a6c2b9466d81e37e5df27f5f81a6eceb5
2019-06-07 14:25:54 +02:00
Karthik S
166dd42fcd Add ComputeHCIOvsDpdk role
Created a role for ComputeHCI and OvS DPDK based on the existing
ComputeHCI and ComputeOvsDpdk roles.

Change-Id: Ib5ead8dbfd3e0697585d7ff597634b7f42df1052
2019-06-06 17:52:31 +00:00
Zuul
ebcc709330 Merge "Add creating br-ex for compute node in ovn" 2019-06-06 16:22:28 +00:00
Zuul
24608f6513 Merge "Remove Neutron LBaaS" 2019-06-05 17:17:15 +00:00
Kamil Sambor
ff7cce93eb Add creating br-ex for compute node in ovn
For ovn compute nodes we need br-ex exactly like with
ComputeDVR role. Now we can do this in jinja templates
using new tag external_bridge

Change-Id: If44e9cbad714ce3954928407c42a8dc2473fed2e
Closes-Bug: #1822367
2019-06-05 10:15:39 +02:00
Alex Schultz
67f8a42a85 Remove tripleo-ui references
We've removed the contents from tripleo-ui. Let's cleanup the remaining
tripleo-ui items.

Depends-On: https://review.opendev.org/#/c/662873/
Closes-Bug: #1831478
Change-Id: Ic6c0e2d42781633f78cb0d70b265456e71579a51
2019-06-04 07:29:51 -06:00
Carlos Goncalves
14436f915b Remove Neutron LBaaS
The project has been retired and there will be no Train release [1].
This patch removes Neutron LBaaS support in tripleo-heat-templates.

[1] https://review.opendev.org/#/c/658494/

Closes-Bug: #1831618
Change-Id: If13bbcdea82045d816485412f252c9b52bcf45a7
2019-06-04 15:12:38 +02:00
Steve Baker
2efcb7b4ec Revert "Revert "Switch off nova metadata api on the undercloud""
This reverts commit 6ce5b5e12d.

Change-Id: I8ccc74898554344c64cf61a2216cef5b6b649a58
2019-06-03 23:49:49 +00:00
Zuul
457572bd48 Merge "Ensure openstack clients are installed" 2019-05-31 05:09:00 +00:00
Zuul
4a3491b0fc Merge "Sync the ControllerStorageNfs role with the Controller role" 2019-05-31 05:08:58 +00:00
Alex Schultz
885715855b Ensure openstack clients are installed
We need to ensure the openstack clients are installed on controllers for
the deployed server case. This should be handled by the overcloud images
themselves, however if the images are not used we should make sure the
clients get installed with our OpenstackClients service.

Change-Id: If7fad9f24c7294c2d749fc3838b1fb71182930fc
Related-Bug: #1829769
2019-05-20 10:01:51 -06:00
Goutham Pacha Ravi
cb8d27105d Sync the ControllerStorageNfs role with the Controller role
Add missing services

Change-Id: I55ee3eae53b17ae022c4d711223a159cdb33ba9a
2019-05-17 14:52:19 -07:00
Zuul
c33f8cb117 Merge "Remove NovaConsoleauth Service" 2019-05-17 16:21:03 +00:00
Zuul
f5ba43ea21 Merge "Add DPDK support for OVN" 2019-05-10 21:03:53 +00:00
Martin Schuppert
20dbe32060 Remove NovaConsoleauth Service
As of Rocky [1], the nova-consoleauth service has been deprecated and
cell databases are used for storing token authorizations. All new consoles
will be supported by the database backend and existing consoles will be
reset. Console proxies must be run per cell because the new console token
authorizations are stored in cell databases.

nova-consoleauth was deprecated in tripleo with:
I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f

This change now removes the NovaConsoleauth Service.

[1] https://docs.openstack.org/releasenotes/nova/rocky.html

Closes-Bug: #1828414

Change-Id: Icdfbf26b5e83cc07a560eb227a0cf822e4c5a1e3
2019-05-09 15:24:13 +02:00
Zuul
62ffd0683d Merge "Revert "Switch off nova metadata api on the undercloud"" 2019-05-08 05:44:08 +00:00
Alex Schultz
6ce5b5e12d Revert "Switch off nova metadata api on the undercloud"
This reverts commit 28a675dea5.

Change-Id: I7bfd1fc7b7fa873d249a158604c2f5fe57a86a25
Closes-Bug: #1828065
2019-05-07 15:15:30 +00:00
Zuul
c6a8010dcf Merge "Use timesync service" 2019-05-06 23:29:12 +00:00
Vadim Khitrin
894481fafe Enable Podman Service For Lacking Roles
ComputeOvsDpdkSriov, ComputeOvsDpdkSriovRT and CellController roles do
not include OS::TripleO::Services::Podman which may cause Overcloud deployments to
fail.

Adding Podman service to these roles in order to be aligned with the rest of the roles.

Change-Id: If9b9ffa4651133b966ea0c28069dd1a81f3b2df5
2019-05-04 17:17:50 +03:00
Alex Schultz
90562b6f5d Use timesync service
The Ntp service should no longer defined on the roles as we should be
using the meta Timesync service to ensure the correct service is defined
for the sync service.

Change-Id: Ic2fb3291de78891d05ef12e3778263fe74fbff8c
Related-Blueprint: tripleo-chrony
Closes-Bug: #1827676
2019-05-03 14:41:27 -06:00
Steve Baker
28a675dea5 Switch off nova metadata api on the undercloud
All known consumers of boot data (os-collect-config, etc) have a
preference for using config-drive as the data source.

The last known consumer was novajoin, but that switched to preferring
config-drive early in the Stein development cycle[1] so it should now
be safe to switch off the nova metadata API service.

[1] https://review.opendev.org/#/c/607492/
Blueprint: nova-less-deploy

Change-Id: If35aec24f446769fca7897c2126fb6657454f073
2019-04-30 14:10:32 -06:00
Zuul
bc2d60cb74 Merge "Remove puppet selinux management" 2019-04-25 16:05:45 +00:00
Lee Yarwood
555178160b placement: Introduce an extracted PlacementAPI service
This change introduces an optional extracted version of the Placement
service into TripleO. This extracted version will only be required once
the Placement service is fully removed from Nova during the T cycle
(previously S but delayed) at which point the corresponding
NovaPlacement service will also be removed from TripleO.

The majority of this change is code motion between the original
NovaPlacement service and the new PlacementAPI service.

Upgrades from the original NovaPlacement service to the extracted
PlacementAPI service are not currently supported by this change and will
be worked on independently during the Train cycle.

Co-authored-by: mschuppert@redhat.com

Depends-On: https://review.openstack.org/#/c/624335/
Change-Id: I9e3287bcbe9d317f32bf6b468c6ee17f04b6fff9
2019-04-18 17:34:06 +02:00
Alex Schultz
e7dee7bd2e Remove puppet selinux management
We've switched the selinux mode management to ansible as part of the
deploy-steps and it's always included now so the service is not
necessary.

Change-Id: I562053ba6767bd9ab7af3cf06b93906568bec5cd
2019-04-18 08:25:32 -06:00
James Slagle
00f35055da Add Etcd to DistributedCompute roles
The Etcd service is needed for A/A management of the CinderVolume
service on these roles so it should be added to the roles by default.

Change-Id: I9d3d17fec857014f399b8339ce7c68f844d230a9
implements: blueprint split-controlplane-templates
2019-04-15 17:46:22 -04:00
Saravanan KR
fca0945708 Add DPDK support for OVN
Add a service to enable DPDK on the compute nodes,
along with OVN.

Change-Id: I4473f1dfef9eebb886823fb2f436d14dd5b6d5ad
2019-04-12 13:26:25 +05:30
Martin Schuppert
ffa6810e49 Add novnc proxy to cellsv2 multicell controller
With cellsv2 multicell in each cell there needs to be a novnc proxy as the
console token is stored in the cell conductor database. This change adds
the NovaVncProxy service to the CellController role and configures the
endpoint to the local public address of the cell.

Closes-Bug: #1822607
Depends-On: https://review.openstack.org/649265

Change-Id: Ia3a36d369fdc18685f4c965a9e371ca3143967bf
2019-04-02 11:52:35 +02:00
James Slagle
c023784d5e Add storage_mgmt network to DistributedComputeHCI role
As the DistributedComputeHCI role contains Ceph, it also needs the
storage_mgmt network.

Change-Id: I7d587c333e98b0546f29bbd5c4f4906221658502
2019-03-25 10:48:40 -04:00
Zuul
6d8e7f4058 Merge "Install and configure tmpwatch for log cleanup" 2019-03-12 13:46:17 +00:00
Zuul
61de5331a5 Merge "Remove Congress" 2019-03-12 01:05:56 +00:00