The ansible-pacemaker module was added into the overcloud image at a
time we executed Ansible locally on the overcloud hosts. Now that
Ansible is executed from the undercloud, we only need such modules
installed on the undercloud.
This reverts commit 60f12230aa.
The tuned-profiles-cpu-partitioning package is needed by Tuned service
deployed on all roles, including Ceph. This change moves the pacakge
dependency into overcloud-base to reflect that.
Without it, images built from overcloud-ceph-storage would not deploy
In order to properly switch the firewall to nftables, we of course need
its actual package to be installed. Currently, only iptables-nft wrapper
is present - this includes the `nft' binary, but not the service.
Note that we can live with both binaries - this is needed anyway, since
services such as neutron are still calling `iptables' directly.
This reverts commit 7f14422965.
Reason for revert:
This module is required by puppet-vswitch.
This change removes the unused puppet modules from elements. Detail
- puppet-openstack_extras is not currently used by puppet-tripleo.
puppet-corosync is required by puppet-openstack_extras so can be
removed as well.
- puppet-healthcheck was added so that service availability can be
checked by the tcp_conn_validator resource, but the resource is not
- puppet-staging was required by puppetlabs-mysql but is no longer
required since 7.0.0 .
With I835511b960df09bd05bd8aaf1695757f0b079c12 we restricted
the list of fence-agents installed by default but unfortunately
left fence-agents-compute out (needed for instance-ha).
This commit adds this agent to the list of pre-installed rpms.
... because manifests to deploy Contrail components are removed.
This also removes elements to install contrail software because there
is no implementation left dependent on the elements in upstream.
With this patch, we are removing yum_plugin_priorities_package and
python_ipaddr from overcloud-base element as a part of refactoring
to only support centos/rhel 8/9.
This repo have stable branches, so train builds should be using
stable/train of tripleo-puppet-elements.
Now that the hardened whole-disk image is the default, installing only
the required fence agents will avoid agents which depend on packages
which the openstack-secure element will delete (specifically, telnet).