RETIRED, Heat templates for deploying OpenStack
Go to file
Damien Ciabrini 2487becc6a HA: minor update of arbitrary container image name
HA services get their container image name from a pacemaker
resource configuration. This image name is shared between
all cluster nodes.

To achieve image update without service disruption, a pacemaker
resource is configured to use an intermediate image name
"<registry>/<namespace>/<servicename>:pcmklatest" pointing to
the real image name configured in Heat. This tag can then be
updated independently on every node during the minor update.

In order to support the same rolling update when the <namespace>
changes in the container image, we need a similar floating
approach for the prefix part of the container image.

Introduce a new Heat parameter ClusterCommonTag that, when enabled,
sets the intermediate image name to
"cluster-common-tag/<servicename>:pcmklatest". By default, this
parameter is disabled and the original naming scheme is conserved.

Note: by introducing this new naming scheme, we stop seeing a
meaningful image name prefix when doing a "pcs status", but since
we already can't tell what image ID the :pcmklatest tag points to,
we don't lose much information really.

Related-Bug: #1854730

Change-Id: Id369154d147cd5cf0a6f997bf806084fc7580e01
(cherry picked from commit a166ec6bca)
(cherry picked from commit 44b6e6b852)
(cherry picked from commit f366adbd15)
2020-03-17 12:35:55 +01:00
ci Fix scenario glance backend for scenario010 2020-02-18 12:10:50 -03:30
common deploy-steps: use lookup() to get pre|post_deployments_role variables 2019-12-14 10:34:47 -05:00
deployed-server [Stein and older] Ensure tmpwatch installed 2020-02-21 14:17:14 -07:00
docker HA: minor update of arbitrary container image name 2020-03-17 12:35:55 +01:00
docker_config_scripts HA: ensure TRIPLEO_MINOR_UPDATE is defined for <svc>_restart_bundle 2019-10-24 12:00:18 +02:00
environments Disable haproxy when using external LB 2019-11-05 16:46:37 +00:00
extraconfig Relax filtering in krb-service-principals jinja 2020-01-09 06:44:53 +00:00
firstboot Try a timesync as part of first boot 2019-05-23 08:16:41 -06:00
network Ignore SR-IOV VFs on dhcp_all_interfaces list 2020-02-04 05:10:22 +00:00
plan-samples Role specific derive parameters workflow parameter 2018-06-28 08:10:27 -04:00
puppet Check Ceph*Key value format and halt on error 2020-03-11 11:09:45 +01:00
releasenotes HA: minor update of arbitrary container image name 2020-03-17 12:35:55 +01:00
roles Add SSHD composable service to Networker role definition 2020-01-29 15:05:05 -07:00
sample-env-generator Fix ssl.yaml generating GaneshaInternal in the endpoint map 2019-06-05 20:08:22 +00:00
scripts [Templates] Use str_replace for hosts. 2018-11-15 08:54:39 +00:00
tools NodeDataLookup utility should rely on python env 2020-02-20 22:22:02 +00:00
tripleo_heat_templates Do not generate apache/haproxy certs for invalid networks 2018-02-08 12:50:04 +00:00
validation-scripts Make comparisons case insensitive 2019-06-26 08:06:52 -06:00
zuul.d Add scenario010 standalone for rock tripleo-heat-templates zuul 2020-02-19 10:37:57 +02:00
.gitignore Sample environment generator 2017-06-12 15:02:50 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:35:11 +00:00
.testr.conf Improve nova statedir ownership logic 2018-07-09 17:07:30 +01:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
README.rst Fix RST syntax (needed by release) 2018-07-25 22:39:40 -04:00
all-nodes-validation.yaml Optional ICMP validation of controllers and gateways 2019-03-18 17:06:34 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Add in roles data validation 2017-07-07 09:51:40 -06:00
bootstrap-config.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
capabilities-map.yaml Update manila environment file name in capabilities-map 2019-03-20 05:23:41 +00:00
config-download-software.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
config-download-structured.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
default_passwords.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
hosts-config.yaml [Templates] Use str_replace for hosts. 2018-11-15 08:54:39 +00:00
j2_excludes.yaml Remove ipv6 specific network templates 2017-08-31 13:12:17 -07:00
lower-constraints.txt Ensure unique containers names in docker-puppet 2018-10-31 10:35:27 +01:00
net-config-bond.j2.yaml Add ability to specify dns search domains 2019-05-23 16:24:49 -04:00
net-config-bridge.j2.yaml Add per-network routes to NIC templates 2018-07-30 09:53:30 +02:00
net-config-linux-bridge.j2.yaml Add per-network routes to NIC templates 2018-07-30 09:53:30 +02:00
net-config-noop.j2.yaml Add per-network routes to NIC templates 2018-07-30 09:53:30 +02:00
net-config-standalone.j2.yaml Add ability to specify dns search domains 2019-05-23 16:24:49 -04:00
net-config-static-bridge-with-external-dhcp.j2.yaml Add per-network routes to NIC templates 2018-07-30 09:53:30 +02:00
net-config-static-bridge.j2.yaml Add ability to specify dns search domains 2019-05-23 16:24:49 -04:00
net-config-static.j2.yaml Add ability to specify dns search domains 2019-05-23 16:24:49 -04:00
net-config-undercloud.j2.yaml Add ability to specify dns search domains 2019-05-23 16:24:49 -04:00
network_data.yaml Allow overlay tunnel endpoints on IPv6 address 2019-09-02 15:24:34 +02:00
network_data_ganesha.yaml Allow overlay tunnel endpoints on IPv6 address 2019-09-02 15:24:34 +02:00
network_data_openshift.yaml Add network data for use with openshift deployments 2018-11-08 08:42:24 +01:00
network_data_routed.yaml Allow overlay tunnel endpoints on IPv6 address 2019-09-02 15:24:34 +02:00
overcloud-resource-registry-puppet.j2.yaml [Rocky and older] Actually install tmpwatch on overcloud nodes 2019-12-10 14:56:47 +01:00
overcloud.j2.yaml Add network vip mapping into service data 2020-01-27 09:14:09 +00:00
plan-environment.yaml Add name and description fields to plan-environment.yaml 2017-04-12 17:25:40 +02:00
requirements.txt Ensure unique containers names in docker-puppet 2018-10-31 10:35:27 +01:00
roles_data.yaml Ensure openstack clients are installed 2019-06-19 22:18:57 +00:00
roles_data_undercloud.yaml [Rocky-only] Install and configure tmpwatch for log cleanup 2019-03-21 18:25:45 +01:00
setup.cfg Drop deprecated templates/Makefile/merge.py 2015-11-25 15:00:13 -05:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-requirements.txt Improve nova statedir ownership logic 2018-07-09 17:07:30 +01:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/rocky 2018-08-24 14:44:46 +00:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

  • roles: example roles that can be used with the tripleoclient to generate

    a roles_data.yaml for a deployment See the roles/README.rst for additional details.

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scn000 scn001 scn002 scn003 scn004 scn006 scn007 scn009 scn010 non-ha ovh-ha
openshift

X

keystone

X

X

X

X

X

X

X

X

X

X

glance

rbd

swift

file

rgw

file

file

file

file

file

cinder

rbd

iscsi
heat

X

X

ironic

X

mysql

X

X

X

X

X

X

X

X

X

X

neutron

ovs

ovs

ovs

ovs

ovs

ovn

ovs

ovs

ovs

neutron-bgpvpn

wip

ovn

X

neutron-l2gw

wip

om-rpc rabbit rabbit

amqp1

rabbit rabbit rabbit rabbit rabbit rabbit
om-notify rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit
mongodb
redis

X

X

haproxy

X

X

X

X

X

X

X

X

X

memcached

X

X

X

X

X

X

X

X

X

pacemaker

X

X

X

X

X

X

X

X

X

nova

qemu

qemu

qemu

qemu

ironic

qemu

qemu

qemu

qemu

ntp

X

X

X

X

X

X

X

X

X

X

X

snmp

X

X

X

X

X

X

X

X

X

X

X

timezone

X

X

X

X

X

X

X

X

X

X

X

sahara

X

mistral

X

swift

X

aodh

X

X

ceilometer

X

X

gnocchi

rbd

swift

panko

X

X

barbican

X

zaqar

X

ec2api

X

cephrgw

X

tacker

X

congress

X

cephmds

X

manila

X

collectd

X

fluentd

X

sensu-client

X

designate

X

octavia

X

X