RETIRED, Heat templates for deploying OpenStack
Go to file
Giulio Fidente 7ecd756b7c Permit access to Ceph RGW for 'member' role
From the Rocky release, Keystone is bootstrapped by default [1]
with a 'member' role, while previously we used to create at
deployment time a role called 'Member'.

Role names are case insensitive in Keystone but Ceph RGW expects
a whitelist of role names to which access is permitted. This change
adds 'member' to the Ceph RGW whitelist, in addition to 'Member'.

1. https://blueprints.launchpad.net/keystone/+spec/basic-default-roles

Change-Id: Ib3c70c136fa4a03b58edc370343a01d657b5b101
Closes-Bug: 1847539
(cherry picked from commit 1357a131c8)
2019-10-15 10:33:11 +02:00
ci Remove ContainerCLI from ovb-ha default file 2019-10-01 08:19:50 +00:00
common Run facts gathering always for upgrades. 2019-09-16 09:16:55 +00:00
container_config_scripts HA: fix <service>_restart_bundle with minor update workflow 2019-09-06 13:45:11 +02:00
deployed-server Use timesync service 2019-05-07 13:52:17 +00:00
deployment Permit access to Ceph RGW for 'member' role 2019-10-15 10:33:11 +02:00
environments Fix selinux context for glance-api 2019-09-25 09:41:52 +00:00
extraconfig Filter nameservers for undercloud networks 2019-08-29 15:17:14 +00:00
firstboot Try a timesync as part of first boot 2019-05-22 15:39:18 +00:00
network Merge "Fix external resource usage in additional subnets" into stable/stein 2019-08-15 21:43:20 +00:00
plan-samples Role specific derive parameters workflow parameter 2018-06-28 08:10:27 -04:00
puppet Enable deep_compare by default for stonith resources 2019-09-20 16:52:55 +02:00
releasenotes Merge "Add new parameter options to Octavia service" into stable/stein 2019-10-12 07:29:00 +00:00
roles Add missing update_serial key to compute roles 2019-08-06 16:58:25 +01:00
sample-env-generator Fix ssl.yaml generating GaneshaInternal in the endpoint map 2019-06-05 06:07:08 +00:00
scripts [Templates] Use str_replace for hosts. 2018-11-12 16:33:27 +01:00
tools Add missing update_serial key to compute roles 2019-08-06 16:58:25 +01:00
tripleo_heat_templates Merge "Trim whitespace in multi-line env descriptions" 2019-04-16 05:28:25 +00:00
validation-scripts Make comparisons case insensitive 2019-06-26 08:03:27 -06:00
zuul.d Set scenario009 job voting to false 2019-10-11 08:59:19 +00:00
.gitignore Remove developer tools from tripleo .gitignore 2018-11-06 14:40:19 +02:00
.gitreview Update .gitreview for stable/stein 2019-05-01 14:51:47 +00:00
.testr.conf Improve nova statedir ownership logic 2018-07-09 17:07:30 +01:00
all-nodes-validation.yaml Optional ICMP validation of controllers and gateways 2019-01-28 17:18:27 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Use https instead of http for docs links 2018-12-03 03:29:26 -08:00
capabilities-map.yaml Move Aide to deployments 2019-03-28 08:24:40 -04:00
config-download-software.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
config-download-structured.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
default_passwords.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
hosts-config.yaml [Templates] Use str_replace for hosts. 2018-11-12 16:33:27 +01:00
j2_excludes.yaml Remove ipv6 specific network templates 2017-08-31 13:12:17 -07:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
lower-constraints.txt Enable paunch logging to its full extent 2019-03-22 11:42:12 +01:00
net-config-bond.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-bridge.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-linux-bridge.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-noop.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-standalone.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-static-bridge-with-external-dhcp.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-static-bridge.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-static.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-undercloud.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
network_data_ganesha.yaml Merge "Allow overlay tunnel endpoints on IPv6 address" 2019-01-10 21:13:19 +00:00
network_data_openshift.yaml Add network data for use with openshift deployments 2018-11-05 09:42:10 +01:00
network_data_routed.yaml Merge "Allow overlay tunnel endpoints on IPv6 address" 2019-01-10 21:13:19 +00:00
network_data_subnets_routed.yaml L3 routed networks - data + env (1/3) 2018-12-30 19:24:29 +01:00
network_data_undercloud.yaml Add network data for the undercloud 2019-01-21 19:35:37 +01:00
network_data.yaml Add external_resource_vip_id property to network_data.yaml 2019-03-25 10:48:40 -04:00
overcloud-resource-registry-puppet.j2.yaml Try a timesync as part of first boot 2019-05-22 15:39:18 +00:00
overcloud.j2.yaml Remove os-collect-config related poperties and attributes 2019-06-20 16:27:21 +00:00
plan-environment.yaml Add name and description fields to plan-environment.yaml 2017-04-12 17:25:40 +02:00
README.rst Remove Congress 2019-02-28 16:29:03 -05:00
requirements.txt Enable paunch logging to its full extent 2019-03-22 11:42:12 +01:00
roles_data_undercloud.yaml Install and configure tmpwatch for log cleanup 2019-03-11 16:33:22 +01:00
roles_data.yaml Force ansible serial to 1 for the Controller 2019-06-12 14:56:40 +00:00
setup.cfg [Core] Change openstack-dev to openstack-discuss. 2018-12-04 12:07:33 +01:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-requirements.txt Update hacking version 2018-12-31 17:42:10 +00:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/stein 2019-05-01 14:51:54 +00:00

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

  • roles: example roles that can be used with the tripleoclient to generate

    a roles_data.yaml for a deployment See the roles/README.rst for additional details.

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scn000 scn001 scn002 scn003 scn004 scn006 scn007 scn009 scn010 non-ha ovh-ha
openshift

X

keystone

X

X

X

X

X

X

X

X

X

X

glance

rbd

swift

file

rgw

file

file

rbd

file

file

cinder

rbd

iscsi
heat

X

X

ironic

X

mysql

X

X

X

X

X

X

X

X

X

X

neutron

ovn

ovn

ovn

ovn

ovn

ovs

ovn

ovn

ovn

neutron-bgpvpn

wip

ovn

X

neutron-l2gw

wip

om-rpc rabbit rabbit

amqp1

rabbit rabbit rabbit rabbit rabbit rabbit
om-notify rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit
redis

X

X

haproxy

X

X

X

X

X

X

X

X

X

memcached

X

X

X

X

X

X

X

X

X

pacemaker

X

X

X

X

X

X

X

X

X

nova

qemu

qemu

qemu

qemu

ironic

qemu

qemu

qemu

qemu

ntp

X

X

X

X

X

X

X

X

X

X

X

snmp

X

X

X

X

X

X

X

X

X

X

X

timezone

X

X

X

X

X

X

X

X

X

X

X

sahara

X

mistral

X

swift

X

aodh

X

X

ceilometer

X

X

gnocchi

rbd

swift

panko

X

X

barbican

X

zaqar

X

ec2api

X

cephrgw

X

tacker

X

cephmds

X

manila

X

collectd

X

fluentd

X

sensu-client

X

designate

X

octavia

X