216 Commits

Author SHA1 Message Date
Chris Dent
67bc8e8ab9 Cleanup create_accounts functions
lib/nova and lib/ceilometer had function calls not in the desired
form.

Change-Id: I6b848e51654a48fe2df6084efdb0f67fd5e180f0
2014-10-08 12:07:46 +01:00
Jenkins
f33e76bf9b Merge "Add Nova v2.1 API endpoint" 2014-10-07 03:51:05 +00:00
Joe Gordon
82d6e53752 don't set nova.conf auth_strategy
keystone is the default value, so no need to override it.

Change-Id: I8e00071612d79959531feffc7e7993fa8c536359
2014-10-01 12:11:42 -07:00
Jenkins
9241e36bf1 Merge "Remove Nova v3 API endpoint" 2014-09-28 02:24:26 +00:00
Jenkins
b4aad373ae Merge "Stop setting nova.conf settings that mean nothing" 2014-09-28 01:22:33 +00:00
Joe Gordon
1f79bad7ec Stop setting nova.conf settings that mean nothing
* DEFAULT.fixed_range isn't a valid option in nova anymore
* DEFAULT.osci_compute_workers was never a thing, it should be
  DEFAULT.osapi_compute_workers

Change-Id: Ib08f3e20e4685b331385431276f890205fa76da6
2014-09-26 09:59:47 -07:00
Joe Gordon
a7bde1fdf7 Cleanup nova-cinder nova.conf section
Stop using deprecated conf names, don't override default values with
default values.

Change-Id: I2c7e0833a61926b9fc9b5de4e38fdd626501d78d
2014-09-26 09:52:13 -07:00
Ken'ichi Ohmichi
3feaa383ce Add Nova v2.1 API endpoint
In Juno cycle, we started to implement Nova v2.1 API and most part
has been implemented now.
For using/testing the API, this patch adds the endpoint setting to
devstack.

Change-Id: I25557cb2b0a1384ee11d3e1ae7d424828e766e50
2014-09-25 02:10:24 +00:00
Ken'ichi Ohmichi
fa4ece89f7 Remove Nova v3 API endpoint
Nova v3 API has disappeared in Juno cycle, and we don't test the API
now on the gate since If63dcdb2d05aa0fab0b6848a1248b6678f1ee9ad .
This patch removes the endpoint of Nova v3 API.

Change-Id: I85f87b37558a15d1eaaa781b02fec5b02bd2ab44
2014-09-25 02:08:10 +00:00
Rob Crittenden
18d4778cf7 Configure endpoints to use SSL natively or via proxy
Configure nova, cinder, glance, swift and neutron to use SSL
on the endpoints using either SSL natively or via a TLS proxy
using stud.

To enable SSL via proxy, in local.conf add

ENABLED_SERVICES+=,tls-proxy

This will create a new test root CA, a subordinate CA and an SSL
server cert. It uses the value of hostname -f for the certificate
subject. The CA certicates are also added to the system CA bundle.

To enable SSL natively, in local.conf add:

USE_SSL=True

Native SSL by default will also use the devstack-generate root and
subordinate CA.

You can override this on a per-service basis by setting

<SERVICE>_SSL_CERT=/path/to/cert
<SERVICE>_SSL_KEY=/path/to/key
<SERVICE>_SSL_PATH=/path/to/ca

You should also set SERVICE_HOST to the FQDN of the host. This
value defaults to the host IP address.

Change-Id: I36fe56c063ca921131ad98439bd452cb135916ac
Closes-Bug: 1328226
2014-09-24 18:36:37 -04:00
Brant Knudson
0595237e8a Function for auth_token middleware config
Each project was configuring the auth_token middleware using several
lines of inisets. Since all the projects should configure the
auth_token middleware in the same way create a function and call it.

Change-Id: I3b6727d5a3bdc0ca600d8faa23bc6db32bb32260
2014-09-21 11:18:01 -05:00
Jenkins
106b379741 Merge "Set default API_WORKERS" 2014-09-20 03:46:26 +00:00
Dean Troyer
05bd7b803d Set default API_WORKERS
Set the API_WORKERS default to control memory usage. Maximum is nproc / 2 and
minimum is 2.

* Also updates https://review.openstack.org/#/c/117517/ to remove the
  conditional test as API_WORKERS should always be set.
* Update https://review.openstack.org/#/c/109058/ for ceilometer to use API_WORKERS

The following reviews can move forward either as-is or with minor tweaks:
* Keystone: https://review.openstack.org/#/c/121384/ - remove the if check
* Swift: https://review.openstack.org/#/c/121456/ - unabandon, the default
  to 1 is fine, or remove it to match the others.
* Trove: https://review.openstack.org/#/c/121438/ - remove the if check

https://etherpad.openstack.org/p/devstack-workers has the details

Change-Id: Id28d72ebf01c88b7df301edf7d1dd7ec23fcd0d6
2014-09-19 09:06:21 -05:00
Jay Lau
04e3e502e4 Set allow_migrate_to_same_host as True by default
After OpenStack was installed with devstack on a single node, cold
migration always failed because the default value of
allow_migrate_to_same_host is False. This means that devstack do not
support cold migrate a VM to a same host by default.

Normally, a developer will set up OpenStack with devstack on a single
node, so it is better that we change this value to True to enable
cold migration with a single node after installed by devstack.

Change-Id: I961395f1c79d9600917b6186964c13c92a8a6266
2014-09-14 09:23:30 -04:00
Jenkins
efa18c73ab Merge "Replace screen_it() with run_process() throughout" 2014-09-13 12:38:34 +00:00
Chris Dent
2f27a0ed3c Replace screen_it() with run_process() throughout
run_process will use screen if USE_SCREEN=True (the default),
otherwise it will simply start the requested service. Therefore
wherever screen_it used, run_process can be instead.

Where stop_screen was found it has been replaced with stop_process.

A tail_log function has been added which will tail a logfile in a
screen if USE_SCREEN is True.

lib/template has been updated to reflect the use of the new
functions.

When using sg the quoting in run_process gets very complicated.
To get around this run_process and the functions it calls accepts
an optional third argument. If set it is a group to be used with sg.

Change-Id: Ia3843818014f7c6c7526ef3aa9676bbddb8a85ca
2014-09-11 18:59:39 +01:00
Bob Ball
2f72050ace Allow setting the number of workers to be used.
Environments with large numbers of CPUs will create a large
number of workers which can have an unnecessarily large
impact on memory usage, particular where you know how many
workers are needed.

Change-Id: Ie4bb075310a61a0873c9e56e4974600dbb4794a1
2014-09-09 15:54:36 +01:00
Jenkins
a7a2b883b2 Merge "Add and document $NOVA_VNC_ENABLED for forcing VNC on" 2014-08-27 04:13:05 +00:00
Matt Riedemann
ad9776e107 Remove API_RATE_LIMIT variable since it's wrong anyway
The api_rate_limit config option in nova has defaulted to False since
Havana per commit cfdc59860ef1482e3b064f90f719ec9e484590ce. This change
removes the variable and code that's used to set it in nova.conf since
if we left it in we'd change the default to False to match the code, and
we'd be breaking anyone that is relying on this to be True anyway.

Note that this variable exists in devstack essentially for Tempest so we
can set it in devstack-gate, which is kind of a moot point now given the
code defaults to it anyway.

Change I21dbd72f9959a4e3d62c36831df03b351a51172e removes it from
devstack-gate.

Change-Id: Ib0538bdd23b17e519b9c917018ccc9fa8c6425c5
2014-08-21 13:40:13 -07:00
Robbie Harwood (frozencemetery)
4e07fdcba7 Add and document $NOVA_VNC_ENABLED for forcing VNC on
This allows multinode setups to function correctly without enabling the
unneeded n-novnc and n-xvnc services on pure compute nodes.

Change-Id: Ie02734bb598d27560cf5d674c9e1d9b8dca3801f
Closes-Bug: 1342155
2014-08-20 17:09:59 -04:00
Dean Troyer
0038a1ac6e Clean up local variable usage - Nova
Change-Id: Ia4896746a2f574b7fcb95f85640e0d31c50c372b
2014-07-28 10:15:09 -05:00
Christian Berendt
4a67885629 Remove configuration parameter EXTRA_OPTS
According to the comments in stack.sh the configuration parameter
EXTRA_OPTS should be removed during the Juno cycle.

Change-Id: Ic71d38d6f9b8a8949e45ce3321d593ee2f8feb40
2014-07-26 21:52:26 +02:00
Gael Chamoulaud
6dd8a8bee4 Users in service group should not have email addresses
Change-Id: Ieed9dffce5cf1e735e482dd3494ac1e103b50955
Closes-Bug: 1185201
Signed-off-by: Gael Chamoulaud <gchamoul@redhat.com>
2014-07-22 17:29:04 +02:00
Bartosz Górski
0abde393c5 Adds support for multi-region
Change-Id: Ib85fe7cb375692b04aca4c46f61ba7e1fbfa501b
Implements: blueprint multi-region
2014-07-01 14:58:35 +00:00
Gary Kotton
8f8ea9ac91 Glance: start to use nova's glance configuration section
Commit 4b6e75b5f8037adbf63ac2f03dca17f0c8c0bc08 added support
of a neutron section. This updates the code to make use of
that section.

Change-Id: Ib9a0f2aeb0d91adeb567f79917804f0a89fdb6e1
2014-06-20 00:51:09 -07:00
Jamie Lennox
3561d7f9ed Use identity_uri instead of auth fragments
auth_token middleware now accepts a standard URL string as the parameter
identity_uri instead of specifying protocol etc individually. Change the
services over to use this.

Also changes over some other places in which the auth fragments are used
individually to the new variables and fixes up some misconfigurations of
auth_token.

identity_uri option was release in keystoneclient 0.8.0

Change-Id: Iac13bc3d08c524a6a0f39cdfbc1009e2f5c45c2a
2014-06-16 15:16:48 +10:00
Jenkins
df97cf3676 Merge "Remove unnecessary ini commenting from nova" 2014-06-15 01:49:44 +00:00
Jenkins
1e2417b302 Merge "a more proper default nic selection criteria" 2014-06-15 01:32:23 +00:00
Matt Riedemann
9800256ba7 Don't set nova api/conductor workers since nova handles this
The changes to devstack to set nova api/conductor workers to 4 predated
commit 75c96a48fc7e5dfb59d8258142b01422f81b0253 to default the workers
equal to the number of CPUs, so this change just removes the hard-coding
from devstack and relies on nova's defaults for number of workers.

Change-Id: I384fc9eeb7a7eddf4679a6852203307a92d88a93
2014-06-06 11:52:30 -07:00
Sean Dague
fdb920c31d a more proper default nic selection criteria
look at all interfaces that ip link shows as being up, then filter
them for ^e or ^p devices. Should hold even after the bridges get
built.

Change-Id: If6b1e623f9d146c2430dc8a4a007997290b90846
2014-06-05 19:09:57 -04:00
Jamie Lennox
25e548be3c Remove unnecessary ini commenting from nova
Nova does not ship these options in it's api-paste.conf any more so the
functions have no effect.

Change-Id: Ie4527a0639e977e83e6bfc07751ba062839e0600
2014-06-02 10:42:14 +10:00
Sean Dague
1100717753 be a little more clever about interface default
the interface default of eth0 has become more wrong since we've
got a generation of Linux distros that don't use eth* as their
interface naming. Instead of that do a slightly more clever, but
probably still wrong thing, of picking an interface that exists
and is a physical interface.

This is still overridable, however won't cause really cryptic
failures in nova-compute because it's trying to use an interface
that doesn't exist *really* late in the network creation.

Change-Id: I93016ff5a25678de76254418155c839a269486a0
2014-05-28 17:30:10 -04:00
Jenkins
f63ee0e38d Merge "Some smaller fixes for openSUSE 13.1 support" 2014-04-24 22:04:30 +00:00
Joe Gordon
3317437cac Don't set nova.conf values to there default value
No need to set osapi_compute_extension and volume_api_class to there
default values.

Change-Id: I1f5345fa2e0ac3a3fbb96a63f36207d2233d7837
2014-04-17 17:05:12 -07:00
Ralf Haferkamp
65aaa183f4 Some smaller fixes for openSUSE 13.1 support
* dnsmasq-utils is also required on openSUSE 13.1 (for dhcp_release)
* make sure that iscsid is actually started. On openSUSE it's not
  started by default.

Change-Id: Ibceb7ce1372ca74010bdc9f44258a5a25182adc6
2014-04-15 17:56:58 +02:00
Ralf Haferkamp
55dd68a6e1 Use nova bindir of /usr/bin on SUSE
Similar to Fedora pip on SUSE installs things into /usr/bin by default.

Change-Id: I73a71288915b99d553ebe9d8e17ac7abef451a60
2014-04-11 17:10:24 +02:00
Joe Gordon
6b2f26577b Fix is_n-cell-enabled
devstack-gate just adds the n-cell to the list of enabled_services and
devstack does the rest.

Change-Id: I1d7f8d085a5f46078131f0f6f670e929ec63f805
2014-03-26 19:19:01 -07:00
Jenkins
5d4406c56d Merge "Complete moving Keystone setup out of keystone_data.sh" 2014-03-18 05:46:48 +00:00
Joe Gordon
bbf759e9ed Only stop n-cpu in stop_nova_compute
Move screen_stop n-cpu from stop_nova_rest to stop_nova_compute.

Change-Id: I672673a55869d3f68e12c476924fc742e8260f39
2014-03-13 18:09:17 -07:00
Jenkins
dd1b5bb465 Merge "Split up stop_nova to match start_nova" 2014-03-13 02:15:03 +00:00
Joe Gordon
767b5a45b7 Split up stop_nova to match start_nova
Split stop_nova into: stop_nova_compute and stop_nova_rest. This is
needed to support the partial-ncpu grenade test where we want to stop
everything but nova_compute.

Change-Id: I6a21821277e56897d705ca5746806e2211632d12
2014-03-12 10:34:09 -07:00
Jenkins
c0dea9789b Merge "Do not restart libvirt if n-cpu is disabled" 2014-03-12 17:08:31 +00:00
Jenkins
3b06c40707 Merge "Add n-obj to stop_nova" 2014-03-11 15:16:59 +00:00
Dean Troyer
42a59c2bfa Complete moving Keystone setup out of keystone_data.sh
* Move remaining role creation to create_keystone_accounts()
* Move glance creation to create_glance_accounts()
* Move nova/ec2/s3 creation to create_nova_accounts()
* Move ceilometer creation to create_ceilometer_accounts()
* Move tempest creation to create_tempest_accounts()
* Convert moved code to use OpenStackClient for setup
* files/keystone_data.sh is removed

Note that the SERVICE_TENANT and ADMIN_ROLE lookups in the other service
implementations are not necessary with OSC, all operations can be done
using names rather than requiring IDs.

Change-Id: I4283ca0036ae39fd44ed2eed834b69d78e4f8257
2014-03-10 15:17:30 -05:00
Sean Dague
13349080b1 put libvirt debug in the right place
libvirt debug setting was happening in a place where we weren't
actually resetting the daemon. Move it to into the hypervisor
plugin where we do.

Change-Id: Ia79b0ef50f6b8fb007a20ce5cb4e510a5e4600a5
2014-03-10 11:27:23 -04:00
Sergey Skripnick
a99b869d3c Do not restart libvirt if n-cpu is disabled
If this service is disable in localrc, libvirt does not installed at all,
and should not be restarted.

Change-Id: Iaf482d4a82a26546c25249b3e32c7e629d862a1b
Closes: bug 1288236
2014-03-06 19:12:49 +02:00
Alexander Gordeev
4d8af4aa05 Add n-obj to stop_nova
Add missing nova-object service to nova services list

Change-Id: Ib26204b69356ad030ba3d03f095993370fbb2676
2014-03-06 15:10:40 +04:00
Sean Dague
12cb2299e8 nova changes for multinode working under -o errexit
There was a stray inicomment on paste outside of a nova-api block. This
fails under -o errexit because the paste.ini doesn't exist.

Move this to inside the correct block.

Change-Id: Iffbdae6716a1c2a8f650b68edd4faf436434eab1
2014-02-28 20:07:05 -05:00
Ian Wienand
aee18c749b Enforce function declaration format in bash8
Check that function calls look like ^function foo {$ in bash8, and fix
all existing failures of that check.  Add a note to HACKING.rst

Change-Id: Ic19eecb39e0b20273d1bcd551a42fe400d54e938
2014-02-28 07:59:03 +11:00
Steve Martinelli
19685428e3 Change most keystoneclient commands to openstacklient in libs
migrated most keystoneclient commands from the following libs:
 ceilometer
 cinder
 ironic
 keystone
 marconi
 neutron
 nova
 savanna
 swift
 trove

Also need to set and unset openstackclient specific environment
variables from stack.sh

Change-Id: I725f30bc08e1df5a4c5770576c19ad1ddaeb843a
2014-02-14 21:30:57 -06:00