openstack
/
tripleo-heat-templates
Code Issues Proposed changes
RETIRED, Heat templates for deploying OpenStack
7,880 Commits 3 Branches 28 Tags 322 MiB
Go to file
Martin Schuppert 5dd4018141 Instance create fails due to wrong default secontext with NFS 
With NovaNfsEnabled instance create fails due to wrong default
secontext. The default in THT is set to nova_var_lib_t in
Ie4fe217bd119b638f42c682d21572547f02f17b2 while
system_u:object_r:nfs_t:s0 should have access. The virt_use_nfs
boolean, which is turned on by openstack-selinux, should cover
this use case.

This changes the default to context=system_u:object_r:nfs_t:s0

Change-Id: I2a28462b6f6bc9f8a41a81ea8c65471f05df3b85
Closes-Bug: 1781894
 		2018-07-24 08:12:07 +02:00
ci Merge "HA support for OpenShift" 2018-07-12 04:25:29 +00:00
common Merge "Add blankline for readability" 2018-07-13 06:09:09 +00:00
deployed-server Merge "Use UpgradeInitCommonCommand with deployed-server too" 2018-06-14 11:05:03 +00:00
docker Merge "Unify the Manila HA and non-HA docker configurations" 2018-07-14 20:09:56 +00:00
environments Instance create fails due to wrong default secontext with NFS 2018-07-24 08:12:07 +02:00
extraconfig Merge "Replace raw_get with dict access syntax" 2018-07-12 04:25:32 +00:00
firstboot Change template names to rocky 2018-05-09 08:28:42 +02:00
network Merge "HA support for OpenShift" 2018-07-12 04:25:29 +00:00
plan-samples Role specific derive parameters workflow parameter 2018-06-28 08:10:27 -04:00
puppet Instance create fails due to wrong default secontext with NFS 2018-07-24 08:12:07 +02:00
releasenotes Instance create fails due to wrong default secontext with NFS 2018-07-24 08:12:07 +02:00
roles Merge "HA support for OpenShift" 2018-07-12 04:25:29 +00:00
sample-env-generator Merge "Clean up env files for Cinder's Netapp backend" 2018-07-14 02:36:19 +00:00
scripts Cleanup hosts name on initial install 2018-07-09 15:02:08 -06:00
tools Merge "Remove the OVS-DPDK deprecated parameters" 2018-07-09 23:03:32 +00:00
tripleo_heat_templates Do not generate apache/haproxy certs for invalid networks 2018-02-08 12:50:04 +00:00
validation-scripts Use ipaddress module 2018-02-27 18:01:21 +01:00
zuul.d Add scenario011 to install ironic in the overcloud 2018-06-25 12:09:38 +00:00
.gitignore Sample environment generator 2017-06-12 15:02:50 -05:00
.gitreview Update stackforge references to openstack 2013-08-17 22:57:57 -04:00
.testr.conf Sample environment generator 2017-06-12 15:02:50 -05:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
README.rst Merge "Update scenario003 to deploy separate messaging backends" 2018-07-05 07:06:59 +00:00
all-nodes-validation.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Add in roles data validation 2017-07-07 09:51:40 -06:00
bootstrap-config.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
capabilities-map.yaml Merge "Add networking-ansible ML2 plugin support" 2018-07-05 17:44:05 +00:00
config-download-software.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
config-download-structured.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
default_passwords.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
hosts-config.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
j2_excludes.yaml Remove ipv6 specific network templates 2017-08-31 13:12:17 -07:00
lower-constraints.txt add lower-constraints job 2018-04-20 16:10:28 -04:00
net-config-bond.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-bridge.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-linux-bridge.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-noop.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-standalone.j2.yaml Add basics for standalone node 2018-05-16 14:19:43 -06:00
net-config-static-bridge-with-external-dhcp.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-static-bridge.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-static.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
net-config-undercloud.j2.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
network_data.yaml Add default value for name_lower in network_data.yaml to update ServiceNetMap 2018-06-28 10:17:28 -04:00
network_data_ganesha.yaml Enable management network in network_data 2018-04-20 15:40:03 -04:00
overcloud-resource-registry-puppet.j2.yaml Merge "Store ODL logs to file" 2018-07-06 13:34:01 +00:00
overcloud.j2.yaml Merge "Add default value for name_lower in network_data.yaml to update ServiceNetMap" 2018-06-30 09:22:04 +00:00
plan-environment.yaml Add name and description fields to plan-environment.yaml 2017-04-12 17:25:40 +02:00
requirements.txt Add validation for hiera interpolation in services 2018-04-18 10:11:39 +02:00
roles_data.yaml Set tuned profile for compute roles 2018-06-14 14:07:51 +02:00
roles_data_undercloud.yaml Add SELinux management to containerized undercloud 2018-06-28 09:12:30 -06:00
setup.cfg Drop deprecated templates/Makefile/merge.py 2015-11-25 15:00:13 -05:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-requirements.txt Updated from global requirements 2018-03-15 09:38:11 +00:00
tox.ini add lower-constraints job 2018-04-20 16:10:28 -04:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

* Release notes: https://docs.openstack.org/releasenotes/tripleo-heat-templates/ Features --------

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

  • roles: example roles that can be used with the tripleoclient to generate

    a roles_data.yaml for a deployment See the roles/README.rst for additional details.

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scn000 scn001 scn002 scn003 scn004 scn006 scn007 scn009 non-ha ovh-ha
openshift

X
keystone

X

X

X

X

X

X

X

X

X
glance

rbd

 swift

file

rgw

file

file

file

file
cinder

rbd

 iscsi
heat

X

X
ironic

X
mysql

X

X

X

X

X

X

X

X

X
neutron

ovs

ovs

ovs

ovs

ovs

ovn

ovs

ovs
neutron-bgpvpn

wip
ovn

X
neutron-l2gw

wip
om-rpc rabbit rabbit

amqp1

 rabbit rabbit rabbit rabbit rabbit
om-notify rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit
mongodb
redis

X

X
haproxy

X

X

X

X

X

X

X

X
memcached

X

X

X

X

X

X

X

X
pacemaker

X

X

X

X

X

X

X

X
nova

qemu

qemu

qemu

qemu

 ironic

qemu

qemu

qemu
ntp

X

X

X

X

X

X

X

X

X

X
snmp

X

X

X

X

X

X

X

X

X

X
timezone

X

X

X

X

X

X

X

X

X

X
sahara

X
mistral

X
swift

X
aodh

X

X
ceilometer

X

X
gnocchi

rbd

swift
panko

X

X
barbican

X
zaqar

X
ec2api

X
cephrgw

X
tacker

X
congress

X
cephmds

X
manila

X
collectd

X
fluentd

X
sensu-client

X
designate

X