43 Commits

Author SHA1 Message Date
Martin Schuppert
b4e4878b83 Deprecate nova-consoleauth service
As of Rocky [1], the nova-consoleauth service has been deprecated and
cell databases are used for storing token authorizations. All new consoles
will be supported by the database backend and existing consoles will be
reset. Console proxies must be run per cell because the new console token
authorizations are stored in cell databases.

Lets deprecate it also in tripleo that it can be removed in a later
release.

[1] https://docs.openstack.org/releasenotes/nova/rocky.html

Change-Id: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f
2019-04-08 12:03:49 +00:00
Zuul
c297ec2a3e Merge "Deprecate messaging params replaced by global oslo params" 2019-04-03 11:25:15 +00:00
Martin Schuppert
ffa6810e49 Add novnc proxy to cellsv2 multicell controller
With cellsv2 multicell in each cell there needs to be a novnc proxy as the
console token is stored in the cell conductor database. This change adds
the NovaVncProxy service to the CellController role and configures the
endpoint to the local public address of the cell.

Closes-Bug: #1822607
Depends-On: https://review.openstack.org/649265

Change-Id: Ia3a36d369fdc18685f4c965a9e371ca3143967bf
2019-04-02 11:52:35 +02:00
Zuul
0deae042ad Merge "Fix Nova/Libvirt memory backed file conditions when they are role params" 2019-03-28 18:47:43 +00:00
Andrew Smith
405366fa32 Deprecate messaging params replaced by global oslo params
Depends-On: I03900b39ab257a9563db37e403254b54f846c056
Change-Id: Ib55c72c0bab9aa0ffc05752a680f573cc351ae17
2019-03-28 12:13:07 -06:00
Zuul
3a49974ee0 Merge "Move apache service under deployment directory" 2019-03-28 01:36:58 +00:00
Oliver Walsh
89def2b55a Fix Nova/Libvirt memory backed file conditions when they are role params
The QemuMemoryBackingDir and NovaLibvirtFileBackedMemory params can be a role
parameters however the heat conditions only checked the normal param.

Change-Id: Iac6d96b2eb3ab92211150572f5a117f07964aaa1
Related-bug: 1793687
2019-03-28 01:08:43 +00:00
Emilien Macchi
860333cf31 Rename /var/lib/docker-config-scripts to /var/lib/container-config-scripts
We don't have Docker anymore so let's avoid confusion and rename this
directory.

Change-Id: I79fca28ef8e5396fee78bef992fd800918f05b88
2019-03-26 21:21:57 +00:00
Emilien Macchi
fc65d197c7 Move apache service under deployment directory
Move the apache service undercloud the deployment directory.

Change-Id: Iead4f910390cb75f56f96da2d24889a461275c9d
Related-Blueprint: services-yaml-flattening
2019-03-26 08:04:42 -04:00
Zuul
a9cfa4667e Merge "Make sure openssl-perl is installed on split stack tls-everywhere deployments" 2019-03-25 15:26:28 +00:00
Zuul
ccb5ff610f Merge "Change scheme/port to template instead of getting from hiera" 2019-03-25 14:05:57 +00:00
Zuul
9e70a6f1fb Merge "Make nfs version for nova ephemeral storage configurable" 2019-03-24 04:03:31 +00:00
Martin Schuppert
b3ce4f00b4 Make sure openssl-perl is installed on split stack tls-everywhere deployments
Directory /etc/pki/CA is no longer available in CentOS 8 with base openssl
package. Libvirt still has the default to /etc/pki/CA for some TLS settings.
Lets add openssl-perl to get /etc/pki/CA and keep defaults where possible.

The package gets added to overcloud image and container via:
https://review.openstack.org/645498
https://review.openstack.org/645501

This check is mainly to make sure the package is also installed on
split stack deployments.

Change-Id: Id81ad942db6b193ab8b1dad537c65249348714d8
Related-Bug: #1821139
2019-03-22 20:04:26 +00:00
Martin Schuppert
f441b25be2 Change scheme/port to template instead of getting from hiera
In https://review.openstack.org/631227 we had to fetch scheme/port
from hiera. Since https://bugs.launchpad.net/nova/+bug/1812196 in
nova is now fixed we could revert back to template those.

Change-Id: Ifebcd154b46dd78139c05d793d5593d87300c11b
Related-Bug: #1811004
2019-03-20 14:29:13 +00:00
Lee Yarwood
7985f02b82 nova: Deprecate the nova-placement service
This will be replaced by an extracted Placement API service in Train.

Change-Id: Ic904aba7c19eda0a0a22dd2d13b9d4182b4595c4
2019-03-20 10:28:46 +00:00
Sergii Golovatiuk
2a8fcc4ddf Remove UpgradeRemoveUnusedPackages
UpgradeRemoveUnusedPackages is not used anymore. All packages are
supposed to be removed on undercloud upgrade to 14.

Change-Id: Ie6b739390ec0ae0c5773a5a6c63b49422195623a
2019-03-19 13:40:02 +00:00
Martin Schuppert
393e89bfb6 Make nfs version for nova ephemeral storage configurable
New parameter ``NovaNfsVersion`` allow configuring the NFS version
used for nova storage (when NovaNfsEnabled is true). Since NFSv3
does not support full locking a NFSv4 version need to be used. To
not break current installations the default is the previous hard
coded version 4.

Change-Id: I810478ed82ee6dc056d9652be91dc45b123e78cf
2019-03-19 11:42:32 +00:00
Emilien Macchi
5ff6f7416d Switch ContainerCli to podman by default
The plan is:

- Docker is deprecated in Stein
- Podman is the default in Stein
- Docker will be removed in Train

Change-Id: I8f00d3e539abc4a169d6b48b8ce697e54aa2eae9
2019-03-12 11:17:15 -04:00
Emilien Macchi
160cddda3f Rename docker_config_scripts to container_config_scripts
Change-Id: Iabd65560c2fc28b3aeca07a21efa861c4c583c01
2019-03-06 09:05:50 -05:00
Dan Prince
2325992aef Drop unused deployment services parameters
This patch drops unused parameters in several services.

Change-Id: I4fc39a1998fb83b23f3d1c28196da20fe7f56262
2019-03-04 07:52:56 -05:00
Dan Prince
e14dfc8329 Fix monitoring_subscription on misc services
Some of these were missing or got dropped due to recent flattening
efforts.

Change-Id: I7c7c2ea134aa8b18c7d19c3d9435c90cc49cda77
2019-03-04 07:52:56 -05:00
Zuul
306ba5c9bb Merge "Add functionality to manage KSM on compute nodes per role" 2019-02-27 19:02:51 +00:00
Martin Schuppert
badf39735d Add functionality to manage KSM on compute nodes per role
Adds functionality whether to enable / disable KSM on compute nodes.
Especially in NFV use case one wants to disable the service and as there
is in general little benefit in overcloud nodes, KSM is disabled per
default, but can be enabled using the new NovaComputeEnableKsm role
parameter.

Change-Id: I1b8dba2e2a9ff4f5ad73a4fbc3251b5dc96fd38e
2019-02-25 16:25:49 +01:00
Jill Rouleau
acb61d2c18 step4: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration.

Change-Id: I9bd5c9f007d9f69d7310cdd0106bcc923c1b0acd
2019-02-20 14:28:20 -07:00
Zuul
fa9f481380 Merge "nova_libvirt_init_secret: add net=host" 2019-02-20 15:43:32 +00:00
Zuul
a21b246010 Merge "Remove upgrade_tasks added during nova services flattening." 2019-02-20 13:26:36 +00:00
Emilien Macchi
3836f0ff7b nova_libvirt_init_secret: add net=host
Required by podman to create the virsh secrets.
Somehow it was hidden by podman.

Change-Id: I0e956e59fc8729bb31f2e4e000597db2611849d9
2019-02-19 23:44:52 +00:00
Zuul
5b811749f9 Merge "Fail to live migration if instance has NUMA topology" 2019-02-19 19:50:57 +00:00
Zuul
0d6a2b52b3 Merge "Drop step_config from containerized Nova services" 2019-02-19 17:42:55 +00:00
Jose Luis Franco Arza
3a86fc57d7 Remove upgrade_tasks added during nova services flattening.
During some of the nova service flattening it was included some of the
baremetal upgrade_tasks into the containerized services. This patch removes
them.

Change-Id: I4a569195deeadb34180561c778dabe77be4f6466
Closes-Bug: #1816453
2019-02-19 17:19:35 +01:00
Zuul
f75ece0bd0 Merge "Correct sshd configuration within nova-migration-target" 2019-02-19 15:48:14 +00:00
Cédric Jeanneret
acebe25936 Correct sshd configuration within nova-migration-target
The flattening introduced an error with sshd config, where the
host was listening on port 2022, preventing the nova_migration_target
container to start, since it wants to start an sshd service on port
2022.

Closes-Bug: 1816523

Change-Id: I3a7ba82cf978cf6c056dba2d623fc94183650474
2019-02-19 10:04:56 +01:00
Rajesh Tailor
f7bc59d4b8 Fail to live migration if instance has NUMA topology
Live migration is currently totally broken if a NUMA topology is
present. This affects everything that's been regrettably stuffed in with
NUMA topology including CPU pinning, hugepage support and emulator
thread support. Side effects can range from simple unexpected
performance hits (due to instances running on the same cores) to
complete failures (due to instance cores or huge pages being mapped to
CPUs/NUMA nodes that don't exist on the destination host).

Until such a time as we resolve these issues, we should alert users to
the fact that such issues exist. A workaround option is provided for
operators that _really_ need the broken behavior, but it's defaulted to
False to highlight the brokenness of this feature to unsuspecting
operators.

The related nova change is I217fba9138132b107e9d62895d699d238392e761

The proposed change allows to configure the 'enable_numa_live_migration'
workarounds option through TripleO. By default this feature will be
disabled for NUMA topology instances.

Depends-On: I16794fbfef0e6e83d3fcebb9e6bc2fcf478ebf72
Change-Id: I523756b418afe1827490c936966af8936ffdbaa6
2019-02-19 13:38:13 +05:30
Dan Prince
23e7aee080 Drop step_config from containerized Nova services
Duplicate 'step_config' sections were added to these services
during the recent flattening efforts. This is causing Puppet
to execute on the host which can cause duplicate ssh port
errors in the case of the nova-migration-target service.

Change-Id: I7034a0952788db8c663ed00fb2c8622f3e14122b
Closes-bug: #1816484
2019-02-18 15:47:37 -05:00
Juan Antonio Osorio Robles
284cfe911b Re-Add mysql configuration for nova host discovery
It was removed again by a recent commit [1]. This configuration is
needed for TLS everywhere.

[1] Ife9bf12d3a6011906fa8d9f97f7524b51aef906a

Change-Id: I3896bc9eccc1fb08923b4dbecd8109f3b56038e9
Closes-Bug: #1815888
2019-02-18 21:41:00 +02:00
Oliver Walsh
dc9a76aa23 cell_v2 multi-cell
- uses split-control-plane
- adds a new CellController role
  - nova-conductor, message rpc (not notifications) and db
- move nova dbsync from nova-api to nova-conductor
  - nova db is more tightly coupled to conductor/computes
  - we don't have a nova-api services on a CellController
  - super-conductor on Controller will sync cell0 db
- new 'magic' MysqlCellInternal endpoint
  - always refers the to local MysqlInternal endpoint
  - identical to MysqlInternal for regular deployment
  - but doesn't get overridden when inheriting EndpointMap from parent
    control-plane stack
- duplicate service node name hiera for transport_urls on cell stack
  - nova -> cell oslo messaging rpc nodes
  - neutron agent -> global messaging rpc nodes
- run cell host discovery only on default cell, for additional cells
the cell needs to be created first

bp tripleo-multicell-basic

Co-Authored-By: Martin Schuppert <mschuppert@redhat.com>

Change-Id: Ife9bf12d3a6011906fa8d9f97f7524b51aef906a
Depends-On: I79c1080605611c5c7748a28d2afcc9c7275a2e5d
2019-02-15 12:16:48 +01:00
Zuul
1c46d1850a Merge "step3: flatten nova service configuration" 2019-02-15 10:17:56 +00:00
Martin Schuppert
56ebb309ed Add missing parts from step2: flatten nova service configuration
[1] missed some parts from puppet/services/nova-libvirt.yaml which
broke tls-everywhere as the qemu-nbd-client-cert were not created,
also the file was not removed after merge.

Changes:
- added missing parts from puppet/services/nova-libvirt.yaml
- removed no longer needed ENV parameters for
  nova_cell_v2_discover_host.py
- re-added /etc/my.cnf.d to nova_cell_v2_discover_host
- deleted puppet/services/nova-libvirt.yaml

[1] https://review.openstack.org/633278

Change-Id: I8d476fd7a040d275cd70ea8393386443b557fe4d
Closes-Bug: #1815888
2019-02-14 16:29:32 +01:00
Jill Rouleau
92ea1131c7 step3: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration. With this patch the baremetal version of
nova has been removed.

Change-Id: Ic577851f8d865d5eec41dbfb00c27520bedc3fdb
2019-02-13 06:21:17 +00:00
Jill Rouleau
98ecf97609 step2: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration. With this patch the baremetal version of
nova has been removed.

Change-Id: Ia41a6adf9fda2d6be8f1b5ac57854381b7f92ce7
2019-02-13 06:20:55 +00:00
Juan Antonio Osorio Robles
9689f6ed06 Re-Add the StackUpdateType parameter to the nova-vnc-proxy template
This service was flattened recently [1], and this parameter was
missing.

[1] https://review.openstack.org/#/c/632522/

Closes-Bug: #1815713
Change-Id: I07cf56712f7131f8f2949ecd6200f621d4f165ef
2019-02-13 08:07:39 +02:00
Jose Luis Franco Arza
a40a4927bf Remove upgrade_tasks added during nova services flatten.
The check and stop for systemd services during upgrade tasks was
removed in [0], however the task to stop them was re-included by
mistake.

[0] - e4ee042a2aaf880e9863461a7423549be3bb0aa1
Closes-Bug: #1815170

Change-Id: I62c9c0a01ab723347e724c46b9b7be78ec6213c0
2019-02-08 08:20:27 +01:00
Jill Rouleau
2bae8cc78a step1: flatten nova service configuration
This change combines the previous puppet and docker files
into a single file that performs the docker service installation
and configuration. With this patch the baremetal version of
nova has been removed.

Change-Id: If8f4daa9127aa528a2088a978494f2d6d83106e2
2019-02-04 14:27:41 -07:00