RETIRED, Heat templates for deploying OpenStack
Go to file
Juan Antonio Osorio Robles 31bc6eaa88 Add certmonger-user profile
This profile will request the certificates for the services on the node.
So with this, we will remove the requesting of these certs on the
services' profiles themselves.

The reasoning for this is that for a containerized environment, the
containers won't have credentials to the CA while the baremetal node
does. So, with this, we will have this profile that still gets executed
in the baremetal nodes, and we can subsequently pass the requested
certificates by bind-mounting them on the containers. On the other hand,
this approach still works well for the TLS-everywhere case when the
services are running on baremetal.

Change-Id: Ibf58dfd7d783090e927de6629e487f968f7e05b6
Depends-On: I4d2e62b5c1b893551f9478cf5f69173c334ac81f
2017-03-13 17:10:13 +02:00
ci Merge "Add upgrade support for Horizon" 2017-02-28 15:18:41 +00:00
deployed-server Add certmonger-user profile 2017-03-13 17:10:13 +02:00
docker Remove docker_image sections (unused) 2017-03-10 08:35:57 +01:00
environments Add certmonger-user profile 2017-03-13 17:10:13 +02:00
extraconfig Merge "Remove the openvswitch special case upgrade code" 2017-03-08 09:51:16 +00:00
firstboot Merge "Add support for node groups in NetConfigDataLookup" 2017-02-23 03:51:37 +00:00
network Merge "Don't assume default network names in net_ip*map" 2017-02-25 16:38:11 +00:00
puppet Add certmonger-user profile 2017-03-13 17:10:13 +02:00
releasenotes Merge "Remove ha-by-default release note" 2017-03-13 08:48:27 +00:00
scripts Don't rely on lsb_release for hosts template write 2016-12-08 20:09:26 +00:00
tools Add pep8 tests on docker/services/* 2017-03-10 08:36:36 +01:00
validation-scripts FQDN validation 2017-02-14 17:39:35 +00:00
.gitignore Add ReNo support 2017-01-13 14:35:27 -05:00
.gitreview Update stackforge references to openstack 2013-08-17 22:57:57 -04:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
MANIFEST.in Add release configuration. 2013-10-22 17:49:35 +01:00
README.rst Deploy Manila with CephMDS in scenario004 2017-02-14 10:59:51 +01:00
all-nodes-validation.yaml FQDN validation 2017-02-14 17:39:35 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bootstrap-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
capabilities-map.yaml Add BGPVPN composable service 2017-03-10 11:35:48 +01:00
default_passwords.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
hosts-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
j2_excludes.yaml Add generic template for custom roles. 2016-10-06 02:13:36 +00:00
net-config-bond.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-linux-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-noop.yaml Update net-config-noop to use apply-config 2017-01-08 15:02:11 -05:00
net-config-static-bridge-with-external-dhcp.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-undercloud.yaml Template and role support for the undercloud 2017-01-06 20:01:14 -05:00
overcloud-resource-registry-puppet.j2.yaml Add certmonger-user profile 2017-03-13 17:10:13 +02:00
overcloud.j2.yaml Merge "Don't recalculate EndpointMap to get outputs" 2017-02-27 09:19:16 +00:00
plan-environment.yaml Add plan-environment.yaml 2017-03-01 12:44:24 +01:00
requirements.txt Updated from global requirements 2017-01-14 10:47:01 +00:00
roles_data.yaml Add certmonger-user profile 2017-03-13 17:10:13 +02:00
roles_data_undercloud.yaml Enable IronicPxe in the undercloud 2017-03-02 15:11:10 -05:00
setup.cfg Drop deprecated templates/Makefile/merge.py 2015-11-25 15:00:13 -05:00
setup.py Updated from global requirements 2017-01-10 09:44:01 +00:00
test-requirements.txt Updated from global requirements 2017-02-14 06:02:06 +00:00
tox.ini Validate that endpoint_map.yaml is up to date in the gate 2017-02-01 16:06:20 -05:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scenario001 scenario002 scenario003 scenario004 multinode-nonha
keystone

X

X

X

X

X

glance

file

swift

file

file

swift

cinder

rbd

iscsi

iscsi

heat

X

X

X

X

X

mysql

X

X

X

X

X

neutron

ovs

ovs

ovs

ovs

X

rabbitmq

X

X

X

X

X

mongodb

X

X

redis

X

haproxy

X

X

X

X

X

keepalived

X

X

X

X

X

memcached

X

X

X

X

X

pacemaker

X

X

X

X

X

nova

qemu

qemu

qemu

qemu

X

ntp

X

X

X

X

X

snmp

X

X

X

X

X

timezone

X

X

X

X

X

sahara

X

mistral

X

swift

X

X

aodh

X

ceilometer

X

gnocchi

X

panko

X

barbican

X

zaqar

X

ec2api

X

cephrgw

X

X

tacker

X

congress

X

cephmds

X

manila

X