RETIRED, Heat templates for deploying OpenStack
Go to file
lhinds 9945538069 Adds service for managing securetty
This adds the ability to manage the securetty file.

By allowing management of securetty, operators can limit root
console access and improve security through hardening.

Change-Id: I0767c9529b40a721ebce1eadc2dea263e0a5d4d7
Partial-Bug: #1665042
Depends-On: Ic4647fb823bd112648c5b8d102913baa8b4dac1c
2017-04-06 13:30:50 +01:00
ci Adds service for managing securetty 2017-04-06 13:30:50 +01:00
deployed-server Purge initial firewall for deployed-server's 2017-04-03 12:52:45 -04:00
docker Merge "docker-puppet.py fail if any worker fails" 2017-04-06 10:50:37 +00:00
environments Adds service for managing securetty 2017-04-06 13:30:50 +01:00
extraconfig Merge "Add special case upgrade from openvswitch 2.5.0-14" 2017-04-01 16:28:20 +00:00
firstboot Merge "Add support for node groups in NetConfigDataLookup" 2017-02-23 03:51:37 +00:00
network Merge "Qpid dispatch router composable role" 2017-04-03 14:54:19 +00:00
puppet Adds service for managing securetty 2017-04-06 13:30:50 +01:00
releasenotes Merge "Add manual ovs upgrade script for workaround ovs upgrade issue" 2017-04-06 10:35:52 +00:00
scripts Don't rely on lsb_release for hosts template write 2016-12-08 20:09:26 +00:00
tools Qpid dispatch router composable role 2017-03-29 10:19:41 +02:00
validation-scripts FQDN validation 2017-02-14 17:39:35 +00:00
.gitignore Add ReNo support 2017-01-13 14:35:27 -05:00
.gitreview Update stackforge references to openstack 2013-08-17 22:57:57 -04:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
MANIFEST.in Add release configuration. 2013-10-22 17:49:35 +01:00
README.rst Add monitoring agents deployment to CI 2017-04-04 21:52:04 +02:00
all-nodes-validation.yaml FQDN validation 2017-02-14 17:39:35 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Add bindep support 2017-03-13 12:11:46 -04:00
bootstrap-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
capabilities-map.yaml Adds service for managing securetty 2017-04-06 13:30:50 +01:00
default_passwords.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
hosts-config.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
j2_excludes.yaml Add generic template for custom roles. 2016-10-06 02:13:36 +00:00
net-config-bond.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-linux-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-noop.yaml Update net-config-noop to use apply-config 2017-01-08 15:02:11 -05:00
net-config-static-bridge-with-external-dhcp.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static-bridge.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-static.yaml Bump template version for all templates to "ocata" 2016-12-23 11:43:39 +00:00
net-config-undercloud.yaml Template and role support for the undercloud 2017-01-06 20:01:14 -05:00
overcloud-resource-registry-puppet.j2.yaml Adds service for managing securetty 2017-04-06 13:30:50 +01:00
overcloud.j2.yaml Merge "Remove useless trailing '\n' in /etc/hosts file." 2017-04-03 14:54:11 +00:00
plan-environment.yaml Add plan-environment.yaml 2017-03-01 12:44:24 +01:00
requirements.txt Updated from global requirements 2017-03-28 13:03:01 +00:00
roles_data.yaml Adds service for managing securetty 2017-04-06 13:30:50 +01:00
roles_data_undercloud.yaml Containerize panko api service 2017-03-17 14:30:11 +00:00
setup.cfg Drop deprecated templates/Makefile/merge.py 2015-11-25 15:00:13 -05:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-requirements.txt Updated from global requirements 2017-02-14 06:02:06 +00:00
tox.ini Validate that endpoint_map.yaml is up to date in the gate 2017-02-01 16:06:20 -05:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scenario001 scenario002 scenario003 scenario004 multinode-nonha
keystone

X

X

X

X

X

glance

rbd

swift

file

swift + rbd

swift

cinder

rbd

iscsi

iscsi

heat

X

X

X

X

X

mysql

X

X

X

X

X

neutron

ovs

ovs

ovs

ovs

X

rabbitmq

X

X

X

X

X

mongodb

X

X

redis

X

haproxy

X

X

X

X

X

keepalived

X

X

X

X

X

memcached

X

X

X

X

X

pacemaker

X

X

X

X

X

nova

qemu

qemu

qemu

qemu

X

ntp

X

X

X

X

X

snmp

X

X

X

X

X

timezone

X

X

X

X

X

sahara

X

mistral

X

swift

X

X

aodh

X

ceilometer

X

gnocchi

X

panko

X

barbican

X

zaqar

X

ec2api

X

cephrgw

X

X

tacker

X

congress

X

cephmds

X

manila

X

collectd

X

fluentd

X

sensu-client

X