openstack/tripleo-heat-templates
Code Issues Proposed changes
RETIRED, Heat templates for deploying OpenStack
14,789 Commits 3 Branches 28 Tags 322 MiB
8e28fde39c
Go to file
Slawek Kaplonski 8e28fde39c Allow neutron to configure secure RBAC options 
This updates the neutron api container to set the appropriate
configuration options when EnforceSecureRbac is True. This will be
needed when more OpenStack services support system-scope and deployers
want to enable those personas.

Change-Id: I6dc238c2b59c5c1d89d54a2dd1fbf7cef0d16313
2022-01-25 09:19:41 +01:00
baremetal-samples Add sample baremetal_deployment.yaml 2021-07-15 16:52:09 -04:00
ci Merge "Add show unknown only host_status to scn002" 2022-01-19 16:05:39 +00:00
common Merge "Fix cloud-init detection rules" 2022-01-21 10:49:01 +00:00
container_config_scripts Add timestamps to nova/placement wait for scripts 2021-11-22 11:02:03 +01:00
deployed-server fix typo in readme 2021-07-09 07:30:35 -05:00
deployment Allow neutron to configure secure RBAC options 2022-01-25 09:19:41 +01:00
doc Add doc/requirements 2021-01-05 09:49:46 +01:00
environments Merge "Missing OVN Parameters" 2022-01-22 02:44:23 +00:00
extraconfig Fix IPv6 router on UC re-install 2021-12-21 10:46:36 +01:00
firstboot Revert "Revert "Add chrony waitsync back in"" 2021-12-28 19:21:26 +00:00
network Remove tripleo_ovn_mac_port_name port tag 2021-12-10 14:07:37 +01:00
network-data-samples Update network-data v2 samples for ipv6 2021-09-21 17:03:26 +05:30
plan-samples Fix plan-samples README.rst 2021-03-04 13:42:01 +05:30
puppet Make UpgradeLeappDevelSkip per-role 2021-06-13 22:48:01 +01:00
releasenotes Allow neutron to configure secure RBAC options 2022-01-25 09:19:41 +01:00
roles Merge "Align services of ControllerSriov role" 2022-01-19 19:23:24 +00:00
sample-env-generator Merge "Deprecate env/enable-designate in favor of env/services/designate.yaml" 2021-12-15 18:04:19 +00:00
scripts Pass OS_CLOUD env when migrating to heat ephemeral. 2022-01-17 16:43:09 +01:00
tools Make tools scripts executable 2021-12-06 17:10:58 +01:00
tripleo_heat_templates Remove six library 2021-10-06 07:01:42 +00:00
zuul.d Use Python3 yoga unit tests 2021-12-15 18:24:30 +09:00
.ansible-lint Remove duplicate keys from yaml files 2021-03-29 13:56:31 +00:00
.gitignore Deprecate DeployedServerPortMap 2021-06-28 17:44:11 -04:00
.gitreview OpenDev Migration Patch 2019-04-19 19:34:55 +00:00
.testr.conf Improve nova statedir ownership logic 2018-07-09 17:07:30 +01:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Fixed tox executions 2021-03-26 15:37:07 +00:00
config-download-software.yaml Use 'wallaby' heat_template_version 2021-03-31 17:35:12 +05:30
config-download-structured.yaml Use 'wallaby' heat_template_version 2021-03-31 17:35:12 +05:30
j2_excludes.yaml Remove ipv6 specific network templates 2017-08-31 13:12:17 -07:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
network_data_dashboard.yaml Add note indicating only Controllers use network VIPs 2021-05-11 15:09:50 -07:00
network_data_default.yaml Add network-v2 default files + vip data examples 2021-06-07 13:22:40 +02:00
network_data_ganesha.yaml Add note indicating only Controllers use network VIPs 2021-05-11 15:09:50 -07:00
network_data_routed.yaml Add note indicating only Controllers use network VIPs 2021-05-11 15:09:50 -07:00
network_data_subnets_routed.yaml Add note indicating only Controllers use network VIPs 2021-05-11 15:09:50 -07:00
network_data_undercloud.yaml Add network data for the undercloud 2019-01-21 19:35:37 +01:00
network_data.yaml Add note indicating only Controllers use network VIPs 2021-05-11 15:09:50 -07:00
overcloud-resource-registry-puppet.j2.yaml Cinder: Remove support for deprecated Dell EMC volume drivers 2022-01-12 12:09:38 +09:00
overcloud.j2.yaml Make PingTestGatewayIPsMap a map of flatten lists 2021-11-12 12:16:48 -03:00
README.rst Remove zaqar 2021-09-16 15:12:29 -06:00
requirements.txt Remove six library 2021-10-06 07:01:42 +00:00
roles_data_undercloud.yaml Remove zaqar 2021-09-16 15:12:29 -06:00
roles_data.yaml Cinder: Remove support for deprecated Dell EMC volume drivers 2022-01-12 12:09:38 +09:00
setup.cfg Add support for py39 2021-03-24 09:40:57 +00:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-ansible-requirements.txt Change tests to run on ansible-core 2.11 2021-08-08 09:12:53 +00:00
test-requirements.txt Enable ansible-lint 2021-03-30 09:18:15 +01:00
tox.ini Merge "Skip yaml validation for releasenotes and zuul.d" 2021-10-01 12:17:16 +00:00
vip_data_default.yaml Add network-v2 default files + vip data examples 2021-06-07 13:22:40 +02:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

  • roles: example roles that can be used with the tripleoclient to generate

    a roles_data.yaml for a deployment See the roles/README.rst for additional details.

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scn000 scn001 scn002 scn003 scn004 scn006 scn007 scn009 scn010 scn013 non-ha ovh-ha
keystone

X

X

X

X

X

X

X

X

X

X

X
glance

rbd

 swift

file

rgw

file

file

rbd

file

file

file
cinder

rbd

 iscsi
heat

X

X
ironic

X
mysql

X

X

X

X

X

X

X

X

X

X

X
neutron

ovn

ovn

ovn

ovn

ovn

ovs

ovn

ovn

ovn

ovn
neutron-bgpvpn

wip
ovn

X
neutron-l2gw

wip
om-rpc rabbit rabbit

amqp1

 rabbit rabbit rabbit rabbit rabbit rabbit rabbit
om-notify rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit
redis

X

X
haproxy

X

X

X

X

X

X

X

X

X

X
memcached

X

X

X

X

X

X

X

X

X

X
pacemaker

X

X

X

X

X

X

X

X

X

X
nova

qemu

qemu

qemu

qemu

 ironic

qemu

qemu

qemu

qemu

qemu
placement

X

X

X

X

X

X

X

X

X

X
ntp

X

X

X

X

X

X

X

X

X

X

X

X
snmp

X

X

X

X

X

X

X

X

X

X

X

X
timezone

X

X

X

X

X

X

X

X

X

X

X

X
swift

X
aodh

X

X
ceilometer

X

X
gnocchi

rbd

swift
barbican

X
cephrgw

X
cephmds

X
manila

X
collectd

X
designate

X
octavia

X

X
rear

X
Extra Firewall

X