RETIRED, Heat templates for deploying OpenStack
Go to file
zshi 4483378fec Disable core dump for setuid programs
The core dump of a setuid program is more likely
to contain sensitive data, as the program itself
runs with greater privileges than the user who
initiated execution of the program. Disabling the
ability for any setuid program to write a core
file decreases the risk of unauthorized access of
such data.

This change sets core dump for setuid programs
to '0'.

Change-Id: Ib05d993c1bb59b59c784e438f805733f636c743d
Signed-off-by: zshi <zshi@redhat.com>
2017-03-28 14:18:52 +08:00
ci Remove unnecesary code to enable panko-api 2017-03-13 09:35:48 +01:00
deployed-server Merge "Sort ResourceGroup resource list" 2017-03-27 19:59:32 +00:00
docker Merge "Run nova-api hosts discovery after nova-compute start" 2017-03-27 13:19:13 +00:00
environments Merge "Remove unnecesary code to enable panko-api" 2017-03-26 01:04:31 +00:00
extraconfig Merge "Don't try to run os-net-config from yum_update.sh" 2017-03-20 17:16:05 +00:00
firstboot Merge "Add support for node groups in NetConfigDataLookup" 2017-02-23 03:51:37 +00:00
network Merge "Don't assume default network names in net_ip*map" 2017-02-25 16:38:11 +00:00
puppet Disable core dump for setuid programs 2017-03-28 14:18:52 +08:00
releasenotes Disable core dump for setuid programs 2017-03-28 14:18:52 +08:00
scripts Don't rely on lsb_release for hosts template write 2016-12-08 20:09:26 +00:00
tools Change kolla_config from required to optional in pep8. 2017-03-20 17:06:29 -04:00
validation-scripts FQDN validation 2017-02-14 17:39:35 +00:00
.gitignore Add ReNo support 2017-01-13 14:35:27 -05:00
.gitreview Update stackforge references to openstack 2013-08-17 22:57:57 -04:00
all-nodes-validation.yaml FQDN validation 2017-02-14 17:39:35 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Add bindep support 2017-03-13 12:11:46 -04:00
bootstrap-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
capabilities-map.yaml Add BGPVPN composable service 2017-03-10 11:35:48 +01:00
default_passwords.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
hosts-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
j2_excludes.yaml Add generic template for custom roles. 2016-10-06 02:13:36 +00:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
MANIFEST.in Add release configuration. 2013-10-22 17:49:35 +01:00
net-config-bond.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-linux-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-noop.yaml Update net-config-noop to use apply-config 2017-01-08 15:02:11 -05:00
net-config-static-bridge-with-external-dhcp.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-undercloud.yaml Template and role support for the undercloud 2017-01-06 20:01:14 -05:00
overcloud-resource-registry-puppet.j2.yaml Add certmonger-user profile 2017-03-13 17:10:13 +02:00
overcloud.j2.yaml Pick dynamically the first node for stack validation 2017-03-17 09:29:41 +01:00
plan-environment.yaml Add plan-environment.yaml 2017-03-01 12:44:24 +01:00
README.rst Update README for Glance coverage 2017-03-13 20:16:16 -04:00
requirements.txt Updated from global requirements 2017-01-14 10:47:01 +00:00
roles_data_undercloud.yaml Containerize panko api service 2017-03-17 14:30:11 +00:00
roles_data.yaml Add certmonger-user profile 2017-03-13 17:10:13 +02:00
setup.cfg Drop deprecated templates/Makefile/merge.py 2015-11-25 15:00:13 -05:00
setup.py Updated from global requirements 2017-01-10 09:44:01 +00:00
test-requirements.txt Updated from global requirements 2017-02-14 06:02:06 +00:00
tox.ini Validate that endpoint_map.yaml is up to date in the gate 2017-02-01 16:06:20 -05:00

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scenario001 scenario002 scenario003 scenario004 multinode-nonha
keystone

X

X

X

X

X

glance

rbd

swift

file

swift + rbd

swift

cinder

rbd

iscsi

iscsi

heat

X

X

X

X

X

mysql

X

X

X

X

X

neutron

ovs

ovs

ovs

ovs

X

rabbitmq

X

X

X

X

X

mongodb

X

X

redis

X

haproxy

X

X

X

X

X

keepalived

X

X

X

X

X

memcached

X

X

X

X

X

pacemaker

X

X

X

X

X

nova

qemu

qemu

qemu

qemu

X

ntp

X

X

X

X

X

snmp

X

X

X

X

X

timezone

X

X

X

X

X

sahara

X

mistral

X

swift

X

X

aodh

X

ceilometer

X

gnocchi

X

panko

X

barbican

X

zaqar

X

ec2api

X

cephrgw

X

X

tacker

X

congress

X

cephmds

X

manila

X