microstack/snap-overlay/templates
Dmitrii Shcherbakov 780a4c4ead Use focal/core20/Ussuri/OVN & enable confinement
Major changes:

* Plumbing necessary for strict confinement with
  the microstack-support interface
  https://github.com/snapcore/snapd/pull/8926
  * Until the interface is merged, devmode will be used and kernel
    modules will be loaded via an auxiliary service.
* upgraded OpenStack components to Focal (20.04) and OpenStack Ussuri;
  * reworked the old patches;
  * added the Placement service since it is now separate;
  * addressed various build issues due to changes in snapcraft and
    built dependencies:
    * e.g. libvirt requires the build directory to be separate from the
      source directory) and LP: #1882255;
    * LP: #1882535 and https://github.com/pypa/pip/issues/8414
    * LP: #1882839
    * LP: #1885294
    * https://storyboard.openstack.org/#!/story/2007806
    * LP: #1864589
    * LP: #1777121
    * LP: #1881590
* ML2/OVS replated with ML2/OVN;
  * dnsmasq is not used anymore;
  * neutron l3 and DHCP agents are not used anymore;
  * Linux network namespaces are only used for
    neutron-ovn-metadata-agent.
  * ML2 DNS support is done via native OVN mechanisms;
  * OVN-related database services (southbound and northbound dbs);
  * OVN-related control plane services (ovn-controller, ovn-northd);
* core20 base support (bionic hosts are supported);
* the removal procedure now relies on the "remove" hook since `snap
remove` cannot be used from the confined environment anymore;
* prerequisites to enabling AppArmor confinement for QEMU processes
  created by the confined libvirtd.
* Added the Spice html5 console proxy service to enable clients to
  retrieve and use it via
  `microstack.openstack console url show --spice <servername>`.
* Added missing Cinder templates and DB migrations for the Cinder DB.
* Added experimental support for a loop device-based LVM backend for
  Cinder. Due to LP: #1892895 this is not recommended to be used in
  production except for tempest testing with an applied workaround;
  * includes iscsid and iscsi-tcp kernel module loading;
  * includes LIO and loading of relevant kernel modules;
  * An LVM PV is created on top of a loop device with a backing file
  present in $SNAP_COMMON/cinder-lvm.img;
  * A VG is created on top of the PV;
  * LVs are created by Cinder and exported via LIO over iscsi to iscsid
  which hot-plugs new SCSI devices. Those SCSI devices are then
  propagated by Nova to libvirt and QEMU during volume attachment;
* Added post-deployment testing via rally and tempest (via the
  microstack-test snap). A set of tests included into Refstack 2018.02
  is executed (except for object storage tests due to the lack of object
  storage support).

Change-Id: Ic70770095860a57d5e0a55a8a9451f9db6be7448
2020-09-25 13:20:12 +00:00
..
05_snap_tweaks.j2 Fixed dashboard_allowed_hosts config setting. 2019-11-21 08:47:04 +01:00
cinder-api.ini.j2 Major restructure 2018-11-02 10:55:42 +00:00
cinder-nginx.conf.j2 Major restructure 2018-11-02 10:55:42 +00:00
cinder-rootwrap.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
cinder-snap.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
cinder.database.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
cinder.keystone.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
cinder.rabbitmq.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
clustering-nginx.conf Clustering prototype 2019-11-04 13:03:41 +00:00
filebeat.yaml.j2 Added Filebeat, NRPE and Telegraf to Microstack 2020-02-11 14:33:26 +00:00
glance-snap.conf.j2 Make logging better 2019-10-08 13:13:23 +00:00
glance.conf.d.keystone.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
glance.database.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
horizon-nginx.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
horizon-snap.conf.j2 Make logging better 2019-10-08 13:13:23 +00:00
horizon.ini.j2 Fix horizon (#23) 2018-11-07 16:30:20 -05:00
iscsid.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
keystone-api.ini.j2 Major restructure 2018-11-02 10:55:42 +00:00
keystone-nginx.conf.j2 Make logging better 2019-10-08 13:13:23 +00:00
keystone-snap.conf.j2 Make logging better 2019-10-08 13:13:23 +00:00
keystone.database.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
libvirtd.conf.j2 Strict confinement related fixes 2020-04-02 17:31:54 +00:00
microstack.json.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
microstack.rc.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
neutron-snap.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
neutron.conf.d.rabbitmq.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
neutron.database.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
neutron.keystone.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
neutron.nova.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
neutron_ovn_metadata_agent.ini.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
nginx.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
nova-nginx.conf.j2 Major restructure 2018-11-02 10:55:42 +00:00
nova-snap.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
nova.conf.d.console.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
nova.conf.d.database.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
nova.conf.d.glance.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
nova.conf.d.keystone.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
nova.conf.d.neutron.conf.j2 Clustering prototype 2019-11-04 13:03:41 +00:00
nova.conf.d.placement.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
nova.conf.d.rabbitmq.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
nrpe.cfg.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement-api.ini.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement-nginx.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement-snap.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement.conf.d.database.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement.conf.d.keystone.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
placement.conf.d.placement-api.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
rabbitmq.conf.j2 Made horizon, rabbit and mysql ports configurable 2019-11-27 15:27:54 +00:00
targets.conf.j2 Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
telegraf.conf.j2 Added Filebeat, NRPE and Telegraf to Microstack 2020-02-11 14:33:26 +00:00
virtlogd.conf.j2 Make logging better 2019-10-08 13:13:23 +00:00