openstack/tripleo-heat-templates
Code Issues Proposed changes
RETIRED, Heat templates for deploying OpenStack
10,751 Commits 3 Branches 28 Tags 322 MiB
e80356e454
Go to file
John Eckersberg e80356e454 rabbitmq: Open ports 25673-25683 for CLI tools 
Since RabbitMQ 3.7.4, the CLI tools (rabbitmqctl and friends)
parallelize the querying of information from cluster members.  In
order to receive stream data back, the cli instance binds and
registers itself on an available port (default between 35672 and
35682, inclusive).  If these ports are firewalled off, then
rabbitmqctl commands such as list_queues will hang waiting for data
from remote cluster members.

This patch does two things:

1) Reconfigures rabbitmqctl to bind to 25673-25683 instead of the
default range of 35672-35682.  This ensures the ports are not in the
ephemeral port range and avoids unintended collisions.

2) Opens the firewall on 25673-25683 to enable communication.

Resolves: rhbz#1811680

Change-Id: If5caa51cd9a3aef97d06d491dde1d5129cc1a569
(cherry picked from commit a2bc2e10b0)
(cherry picked from commit 40a1e5ba18)
2020-04-01 10:34:43 +00:00
ci Remove support for ceph-ansible fetch directory 2020-03-03 08:29:12 -05:00
common Merge "Fix generation of TRIPLEO_CONFIG_HASH for services" into stable/stein 2020-02-13 23:28:13 +00:00
container_config_scripts Merge "HA: ensure TRIPLEO_MINOR_UPDATE is defined for <svc>_restart_bundle" into stable/stein 2019-10-25 19:47:11 +00:00
deployed-server Added OctaviaDeploymentConfig to deployed server role 2020-02-26 16:05:42 -03:30
deployment rabbitmq: Open ports 25673-25683 for CLI tools 2020-04-01 10:34:43 +00:00
environments Enable "port_forwarding" feature in neutron ML2 ovs environment 2019-11-25 09:10:04 +01:00
extraconfig Relax filtering in krb-service-principals jinja 2019-12-06 01:32:29 +00:00
firstboot Try a timesync as part of first boot 2019-05-22 15:39:18 +00:00
network ControlPlaneSubnetCidr in net_vip_map_external 2020-03-17 22:45:30 +00:00
plan-samples Role specific derive parameters workflow parameter 2018-06-28 08:10:27 -04:00
puppet Merge "Swap tasks to avoid non-existing variable error." into stable/stein 2020-02-20 01:29:01 +00:00
releasenotes Merge "ControlPlaneSubnetCidr in net_vip_map_external" into stable/stein 2020-03-24 05:47:46 +00:00
roles Install and start Rsyslog on the Undercloud & Standalone 2019-11-04 22:43:07 +01:00
sample-env-generator Install and start Rsyslog on the Undercloud & Standalone 2019-11-04 22:43:07 +01:00
scripts [Templates] Use str_replace for hosts. 2018-11-12 16:33:27 +01:00
tools NodeDataLookup utility should rely on python env 2020-02-20 22:21:35 +00:00
tripleo_heat_templates Merge "Trim whitespace in multi-line env descriptions" 2019-04-16 05:28:25 +00:00
validation-scripts Make comparisons case insensitive 2019-06-26 08:03:27 -06:00
zuul.d Set scenario009 job voting to false 2019-10-11 08:59:19 +00:00
.gitignore Remove developer tools from tripleo .gitignore 2018-11-06 14:40:19 +02:00
.gitreview Update .gitreview for stable/stein 2019-05-01 14:51:47 +00:00
.testr.conf Improve nova statedir ownership logic 2018-07-09 17:07:30 +01:00
all-nodes-validation.yaml Optional ICMP validation of controllers and gateways 2019-01-28 17:18:27 +00:00
babel.cfg Add release configuration. 2013-10-22 17:49:35 +01:00
bindep.txt Use https instead of http for docs links 2018-12-03 03:29:26 -08:00
capabilities-map.yaml Move Aide to deployments 2019-03-28 08:24:40 -04:00
config-download-software.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
config-download-structured.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
default_passwords.yaml Change template names to rocky 2018-05-09 08:28:42 +02:00
hosts-config.yaml [Templates] Use str_replace for hosts. 2018-11-12 16:33:27 +01:00
j2_excludes.yaml Remove ipv6 specific network templates 2017-08-31 13:12:17 -07:00
LICENSE Add license file 2014-01-20 11:58:20 +01:00
lower-constraints.txt Enable paunch logging to its full extent 2019-03-22 11:42:12 +01:00
net-config-bond.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-bridge.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-linux-bridge.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-noop.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-standalone.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-static-bridge-with-external-dhcp.j2.yaml Add {{network.name}}NetworkVlanID to THT/net-config-* 2019-04-09 23:04:58 +02:00
net-config-static-bridge.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-static.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
net-config-undercloud.j2.yaml Add ability to specify dns search domains 2019-05-23 20:31:34 +00:00
network_data_ganesha.yaml Merge "Allow overlay tunnel endpoints on IPv6 address" 2019-01-10 21:13:19 +00:00
network_data_openshift.yaml Add network data for use with openshift deployments 2018-11-05 09:42:10 +01:00
network_data_routed.yaml Merge "Allow overlay tunnel endpoints on IPv6 address" 2019-01-10 21:13:19 +00:00
network_data_subnets_routed.yaml L3 routed networks - data + env (1/3) 2018-12-30 19:24:29 +01:00
network_data_undercloud.yaml Add network data for the undercloud 2019-01-21 19:35:37 +01:00
network_data.yaml Add external_resource_vip_id property to network_data.yaml 2019-03-25 10:48:40 -04:00
overcloud-resource-registry-puppet.j2.yaml Install tmpwatch on the overcloud 2019-12-19 13:32:31 +01:00
overcloud.j2.yaml Add network vip mapping into service data 2020-01-27 09:13:55 +00:00
plan-environment.yaml Add name and description fields to plan-environment.yaml 2017-04-12 17:25:40 +02:00
README.rst Remove Congress 2019-02-28 16:29:03 -05:00
requirements.txt Enable paunch logging to its full extent 2019-03-22 11:42:12 +01:00
roles_data_undercloud.yaml Install and start Rsyslog on the Undercloud & Standalone 2019-11-04 22:43:07 +01:00
roles_data.yaml Force ansible serial to 1 for the Controller 2019-06-12 14:56:40 +00:00
setup.cfg [Core] Change openstack-dev to openstack-discuss. 2018-12-04 12:07:33 +01:00
setup.py Updated from global requirements 2017-03-28 13:03:01 +00:00
test-requirements.txt Update hacking version 2018-12-31 17:42:10 +00:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/stein 2019-05-01 14:51:54 +00:00

README.rst

Team and repository tags

image

tripleo-heat-templates

Heat templates to deploy OpenStack using OpenStack.

Features

The ability to deploy a multi-node, role based OpenStack deployment using OpenStack Heat. Notable features include:

  • Choice of deployment/configuration tooling: puppet, (soon) docker
  • Role based deployment: roles for the controller, compute, ceph, swift, and cinder storage
  • physical network configuration: support for isolated networks, bonding, and standard ctlplane networking

Directories

A description of the directory layout in TripleO Heat Templates.

  • environments: contains heat environment files that can be used with -e

    on the command like to enable features, etc.

  • extraconfig: templates used to enable 'extra' functionality. Includes

    functionality for distro specific registration and upgrades.

  • firstboot: example first_boot scripts that can be used when initially

    creating instances.

  • network: heat templates to help create isolated networks and ports
  • puppet: templates mostly driven by configuration with puppet. To use these

    templates you can use the overcloud-resource-registry-puppet.yaml.

  • validation-scripts: validation scripts useful to all deployment

    configurations

  • roles: example roles that can be used with the tripleoclient to generate

    a roles_data.yaml for a deployment See the roles/README.rst for additional details.

Service testing matrix

The configuration for the CI scenarios will be defined in tripleo-heat-templates/ci/ and should be executed according to the following table:

- scn000 scn001 scn002 scn003 scn004 scn006 scn007 scn009 scn010 non-ha ovh-ha
openshift

X
keystone

X

X

X

X

X

X

X

X

X

X
glance

rbd

 swift

file

rgw

file

file

rbd

file

file
cinder

rbd

 iscsi
heat

X

X
ironic

X
mysql

X

X

X

X

X

X

X

X

X

X
neutron

ovn

ovn

ovn

ovn

ovn

ovs

ovn

ovn

ovn
neutron-bgpvpn

wip
ovn

X
neutron-l2gw

wip
om-rpc rabbit rabbit

amqp1

 rabbit rabbit rabbit rabbit rabbit rabbit
om-notify rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit rabbit
redis

X

X
haproxy

X

X

X

X

X

X

X

X

X
memcached

X

X

X

X

X

X

X

X

X
pacemaker

X

X

X

X

X

X

X

X

X
nova

qemu

qemu

qemu

qemu

 ironic

qemu

qemu

qemu

qemu
ntp

X

X

X

X

X

X

X

X

X

X

X
snmp

X

X

X

X

X

X

X

X

X

X

X
timezone

X

X

X

X

X

X

X

X

X

X

X
sahara

X
mistral

X
swift

X
aodh

X

X
ceilometer

X

X
gnocchi

rbd

swift
panko

X

X
barbican

X
zaqar

X
ec2api

X
cephrgw

X
tacker

X
cephmds

X
manila

X
collectd

X
fluentd

X
sensu-client

X
designate

X
octavia

X