8 Commits

Author SHA1 Message Date
ramishra
7f195ff9a8 Remove DefaultPasswords interface
This was mainly there as an legacy interface which was
for internal use. Now that we pull the passwords from
the existing environment and don't use it, we can drop
this.

Reduces a number of heat resources.

Change-Id: If83d0f3d72a229d737a45b2fd37507dc11a04649
2021-02-12 11:38:44 +05:30
Michele Baldessari
2f460accb9 pcmk_remote FFU support for Instance HA
The idea here is to set an override key like the following
during the upgrade:
hiera -c /etc/puppet/hiera.yaml pacemaker_remote_short_node_names_override
["compute-0"]

So that puppet-tripleo can detect the key and act accordingly knowning
that it is being upgraded (main reason is that the authkey management
for remotes needs to be special-cased in puppet).
Once the upgrade is completed we remove the key in post_upgrade_tasks.
Tested this on a number of runs and confirmed that:
- The IHA FFU completed correctly on controlplane + computes
- Tempest still works after the FFU
- The override keys are correctly removed at the end of the upgrade
  of each compute node

Closes-Bug: #1888398

Change-Id: I8bc42fb758a333adc9cd65602b44fabee6fc4041
2020-08-12 17:09:41 +02:00
Takashi Kajinami
fffdcf0f30 Use absolute name to include puppet classes
Current puppet modules uses only absolute name to include classes,
so replace relative name by absolute name in template files so that
template description can be consistent with puppet implementation.

Change-Id: I7a704d113289d61ed05f7a31d65caf2908a7994a
2020-04-11 08:13:23 +09:00
Takashi Kajinami
3056f25bd1 Make pcsd listen on PacemakerNetwork/PacemakerRemoteNetwork
Configure bind address for pcsd so that it listens on a specific
network instead of all available networks.

Closes-Bug: #1856626
Depends-on: https://review.opendev.org/#/c/697942
Depends-on: https://review.opendev.org/#/c/697943
Change-Id: Icc78fb96b28cd7a036d958ba78b2075e7c241207
2019-12-17 10:16:35 +09:00
Kevin Carter
50367fbe35 Convert firewall rules to use TripleO-Ansible
This change converts our filewall deployment practice to use
the tripleo-ansible firewall role. This change creates a new
"firewall_rules" object which is queried using YAQL from the
"FirewallRules" resource.

A new parameter has been added allowing users to input
additional firewall rules as needed. The new parameter is
`ExtraFirewallRules` and will be merged on top of the YAQL
interface.

Depends-On: Ie5d0f51d7efccd112847d3f1edf5fd9cdb1edeed
Change-Id: I1be209a04f599d1d018e730c92f1fc8dd9bf884b
Signed-off-by: Kevin Carter <kecarter@redhat.com>
2019-11-18 15:40:22 -06:00
Luca Miccini
9f2ab2b88b Enable deep_compare by default for stonith resources
With this commit we enable deep_compare by default, allowing stonith
resources to be updated via stack update.

Co-Authored-By: Michele Baldessari <michele@acksyn.org>

Depends-on: https://review.opendev.org/#/c/681778/
Depends-on: https://review.opendev.org/#/c/679407/
Change-Id: I330698f41cc092bdeb741c0b9c729264cf2cb28c
2019-09-13 10:09:12 +00:00
Martin Magr
5ccf8951e5 Remove fluentd composable service
This patch removes fluentd composable service in favor of rsyslog composable service
and modifies *LoggingSource configuration accordingly.

Change-Id: I1e12470b4eea86d8b7a971875d28a2a5e50d5e07
2019-08-29 13:52:55 +01:00
Dan Prince
ba14b75c89 Move pacemaker, pacemaker-remote into deployments
Change-Id: I0edd7a5f11b80a5995dc275fac68d231af20d5be
Related-Blueprint: services-yaml-flattening
2019-04-22 20:54:13 -04:00