293 Commits

Author SHA1 Message Date
Ifat Afek
ab584e500e Added a Vitrage client
Story: 2002684
Task: 23116
Change-Id: If05f0907d8f43f64327c7774170e5b559286fc06
2019-12-19 15:25:30 +00:00
Zuul
d33d27af0d Merge "zun: add 'tty' property to container" 2019-12-19 08:23:21 +00:00
Zuul
80e3534832 Merge "Add release note for log path changes" 2019-12-19 07:30:15 +00:00
Hongbin Lu
74567b3f08 zun: add 'tty' property to container
This property allows users to open the TTY of the container.
It basically allows users to use horizon's console to access
the container interactively. For example:

  resources:
    test:
      type: OS::Zun::Container
      properties:
        image: "cirros"
        interactive: true
        tty: true
        command: "/bin/sh"

Change-Id: I70f64d43ed6d2bcb5bab3e5c8f986ca827df8c6f
Closes-Bug: #1856233
2019-12-19 02:38:40 +00:00
Haider, Nafiz (nh532m)
c7455722e1 Deprecate injected_file properties in Nova Quota Resource
The following properties are deprecated in nova and need to be removed
from the nova quota resource.

Corresponding nova PS deprecating properties:
https://review.opendev.org/#/c/509013/

Change-Id: If4390977f942087a1012d609186eefc4a624d411
2019-12-13 15:59:40 -06:00
Zuul
4820a9b8e5 Merge "Imported Translations from Zanata" 2019-12-05 08:44:26 +00:00
Zuul
02e9fb9580 Merge "Fix Firewall policy resource" 2019-12-05 07:18:47 +00:00
OpenStack Proposal Bot
fa1e211a16 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ia1b1fd0dc91129146f0ec14985922090f8e04c0a
2019-12-05 07:18:24 +00:00
Zuul
ed7add1638 Merge "Drop Python2 support" 2019-11-15 04:57:50 +00:00
OpenStack Proposal Bot
70962a434e Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ibcba46308206fa54949e905355c0f639c006e845
2019-11-14 07:35:29 +00:00
Rabi Mishra
49a2a1e55a Remove nova api extension checks
Entire api extension concept has been removed from nova. API bindings
which have been deprecated since Train release are removed with
https://review.opendev.org/#/c/686516/.

Change-Id: Ifd318a54ef01eb500cebbc11e642b3ae62e5fc79
2019-11-06 20:03:56 +05:30
Zane Bitter
e0dbb3f7fa Drop Python2 support
Change-Id: I6f248dfd82502ef225ba755246c2de385d30f4b2
2019-11-06 16:55:41 +08:00
lidong
624be98be0 Fix Firewall policy resource
OS::Neutron::FirewallPolicy resource cannot be created without firewall_rules.
I can create firewall policy via the rest api of neutron.And in the rest api
of neutron to create firewall policy ,the firewall_rules is an optional parameter.
This should be consistent with the rest api of neutron.
So I think the firewall_rules should be an optional property
of OS::Neutron::FirewallPolicy resource.

Add releasenote about this.

Change-Id: I74cb22a7995376c2339f24fca9ca5d651d598480
Task: 36037
2019-10-15 01:19:40 +00:00
Zuul
008346fd3a Merge "Support domain in keystone lookups" 2019-10-08 18:51:00 +00:00
Sampat P
169a35e059 Support domain in keystone lookups
Implements: User, group, role and project lookup across domains.
Added domain parameter to keystone lookup functions.
Heat templates now support user{domain}, group{domain},
role{domain} and project{domain} to support cross domain
lookup. Keystone constrains will also work across domain.

Release note added.

Story: 2005523
Task: 30642

Change-Id: I2b02787bd8883ced631b81174cee9134445bf170
2019-10-01 09:42:40 -04:00
Zuul
b729cba6ca Merge "Support Ignition for userdata" 2019-10-01 05:46:30 +00:00
Feilong Wang
f6249c0110 Support Ignition for userdata
Fedora CoreOS will replace Fedora Atomic being the next generation
container OS. So it would be nice to support Fedora CoreOS in Heat.
In Fedora CoreOS, the cloud-init will be replaced with Ignition[1],
so the changes proposed in this patch are mainly focusing on how to
support Ignition when using Heat SOFTWARE_CONFIG with Ignition.

Task: 36671
Story: 2006566

Change-Id: I11df2431634de7d8b584b1a2ac733d43959e34fc
2019-10-01 07:08:05 +13:00
c7e4a17cff Update master for stable/train
Add file to the reno documentation build to show release notes for
stable/train.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/train.

Change-Id: Iffb1374dacda4cef97b5128105dccb984f9a5554
Sem-Ver: feature
2019-09-29 19:52:30 +00:00
Zuul
ca645aba79 Merge "Remove designate v1 support" 2019-09-28 07:06:01 +00:00
ricolin
4099eea873 Add release note for log path changes
Depends-On: https://review.opendev.org/#/c/495310
Change-Id: Ieb12e1595f89f08b28275a607ec43f916553d71c
2019-09-26 13:35:26 +08:00
Rabi Mishra
a8fba21f23 Remove designate v1 support
Remove support completely and map the v1 resources to
NoneResource.

Change-Id: I8252e7feb4c1b87497770bf045d844fe5975c2b9
2019-09-26 10:04:03 +05:30
Zuul
784863f12a Merge "Bump the openstackdocstheme extension to 1.20" 2019-09-25 15:50:37 +00:00
ricolin
92ca51ec81 Add release notes
Add release notes for:
- Change default designate client version from V1 to V2.
- Hidden multiattach property in OS::Cinder::Volume

Depends-On: https://review.opendev.org/#/c/682792
Change-Id: I3bb257d7e0c3926aed5df75455f2f2d231dea328
2019-09-20 07:11:39 +00:00
Simon Merrick
3fda946ff3 Add heat resource for creating Aodh loadbalancer_member_health alarm type[1]
Aodh loadbalancer_member_health alarm was implemented in 654221[2]. This patch
adds a corresponding heat resource for managing it's lifecycle.

 - Add new resource OS:Aodh:LBMemberHealthAlarm
 - Add unit test for LoadBalancerMemberHealthAlarms

[1]: https://docs.openstack.org/aodh/latest/contributor/architecture.html#id5
[2]: https://review.opendev.org/#/c/654221/

Change-Id: I26582fbd0b980d848f7e4cdb8bb2c8833385fe9b
Task: 34767
2019-08-02 12:19:42 +12:00
pengyuesheng
14f2678c48 Bump the openstackdocstheme extension to 1.20
Some options are now automatically configured by the version 1.20:
- project
- html_last_updated_fmt
- latex_engine
- latex_elements
- version
- release.

Change-Id: Ie6b9bdc0cdb6939903920806334f71aa6133c12b
2019-08-01 09:43:50 +08:00
Zuul
4563f0d0db Merge "Disallow in-place update of Port MAC address" 2019-07-29 18:33:57 +00:00
Zuul
54005a2a9f Merge "Add dedicated auth endpoint config for servers" 2019-07-25 21:52:54 +00:00
Georgina Shippey
5ba3b60874 Add dedicated auth endpoint config for servers
Added a new config option to specify the keystone authentication
endpoint to pass into cloud-init data.

Heat code currently has several different methods of retrieving the
keystone endpoint to embed into cloud-init data for created
servers. This data is currently read from several different parts
of the heat config file rather than the service catalog which results
in URLs being passed which are appropriate for the heat service rather
than the server. In particular there can be misconfiguration of
servers due to deployments which separate the internal and
external API endpoints.

This patch introduces a new config variable
server_keystone_endpoint_type which if set
reads the keystone endpoint directly from the service catalog,
if it is unset the original behavior is unchanged.

story: 2004808
task:  28967
story: 2004524
Change-Id: I5d8fc5977014b196c34f4a59a30a7525bc778359
2019-07-12 13:50:38 +00:00
Zuul
5ee25d3c45 Merge "Allow creating trusts with allow_redelegation" 2019-07-03 16:19:19 +00:00
Zuul
8aea1ca7b2 Merge "Add doc for multi-clouds support" 2019-06-28 15:16:02 +00:00
ricolin
fdb5e892bf Add doc for multi-clouds support
Add doc for multi-clouds support in template guide.

Also remove redundant credential information in multi-clouds
integration test.

Change-Id: I76c6427b7bbdac2af3b7f01aff1b0541e56b3653
Story: #2002126
Task: #19808
2019-06-25 07:37:27 +00:00
Zane Bitter
28975c7cd6 Disallow in-place update of Port MAC address
While Neutron may technically allow updating the requested MAC address
of a port (for admin users only), in practice this only appears to work
when the port is not in use. Use Heat's replace-on-update flow, which is
designed to handle resources that are in use, to deal with changes to
the requested MAC.

Change-Id: I278584ecfe59a338d3135416527d9d3332808d2a
Depends-On: https://review.opendev.org/665692
Task: 31012
2019-06-17 14:41:26 +00:00
Oleksiy Petrenko
e377658586 Allow creating trusts with allow_redelegation
If you set up heat with trusts enabled, heat fails to create remote
stack since by default it creates trusts with turned off redelegation.

This commit adds a new option `allow_trusts_redelegation`
(False by default) which, when enabled together with
`reauthentication_auth_method` set to `trusts` will make Heat to create
trusts with allow_redelegation=True, both for trusts used for deferred
auth and for long creating stacks.

Change-Id: I73e73455139a87fb798fd8a4651c075a91be75fd
Story: #2005062
Task: 29606
Task: 17266
2019-06-12 12:18:58 +03:00
Zuul
4e6751b561 Merge "Added release note for QosBandwithLimitRule direction property" 2019-04-22 20:34:07 +00:00
Zane Bitter
276dd95b3e Added release note for QosBandwithLimitRule direction property
Change-Id: I5f0f2f79427f868381a6127e1d50f4943e93e7c4
Task: 30445
2019-04-10 09:25:58 -04:00
Zuul
5bafd120bf Merge "Validate attributes schema" 2019-04-02 09:29:25 +00:00
Zuul
7ffcda79da Merge "Handle unicode in constraints" 2019-03-27 22:56:23 +00:00
Zuul
3b34ef05d2 Merge "Support tags for Octavia pool member" 2019-03-22 00:35:44 +00:00
Lingxian Kong
f3c08330fe Support tags for Octavia pool member
The API doc:
https://developer.openstack.org/api-ref/load-balancer/v2/index.html#create-member

Change-Id: I6c5aaf116916eb197a62d89561d4d20236006581
Story: #2005219
Task: #29998
2019-03-21 20:11:48 +00:00
ff57ccdecc Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: I51c12c8cbd90c913e928711bfb31e77ad636d8c7
Sem-Ver: feature
2019-03-20 13:48:19 +00:00
Zuul
acce80a257 Merge "Deprecate personality for OS::Nova::Server" 2019-03-18 09:23:50 +00:00
ricolin
3ad7ab2884 Override ssl options for heatclient in RemoteStack
Allow the user to set the CA cert for SSL option for contacting the
remote Heat in the properties of an OS::Heat::Stack resource.

Story: #1702645
Task: #17270

Change-Id: I37528bb2b881a196216a7e6e23af871ab0f313d6
2019-03-14 01:23:58 +08:00
ricolin
6990331639 Support remote stack with another OpenStack provider
Allow OS::Heat::Stack to access remote stack from another OpenStack
provider. Also enable functional tests for multi-cloud.

Implement multi-cloud support as an extension to the existing multi-region
support. Allow operate a remote stack (from another OpenStack cloud) as a
resource in stack from local OpenStack cloud.

I propose we add multi cloud support into ``OS::Heat::Stack`` and change the
property schema for ``context``. Within context, we should adding
following properties:

* credential_secret_id: ID of Barbican Secret. Which stores authN
  information for remote cloud.

Service will use auth information from Barbican Secret to access
 Orchestration service in another OpenStack.
Must make sure you're able toget that secret from Barbican service when
provide `credential_secret_id` property.

Story: #2002126
Task: #26907
Depends-On: https://review.openstack.org/579750

Change-Id: I2f3de3e7c29cf7debb1474228c8a9a81725a72ed
2019-03-13 22:15:45 +08:00
Zuul
2e3091e5b6 Merge "Improve best existing resource selection" 2019-03-13 07:04:51 +00:00
ricolin
680d7a0ecf Deprecate personality for OS::Nova::Server
This patch deprecate personality property for `OS::Nova::Server`.
Since that property is deprecated by nova since version 2.57,
we should plan to Hidden that property soon.
please use ``user_data`` or ``metadata`` instead. If that
property really required, use config ``max_nova_api_microversion``
to set the maximum nova API microversion <2.57 for nova client
plugin to support personality property.

Add config option ``max_nova_api_microversion`` to set the maximum
nova API microversion for nova client plugin.

Story: #2004188
Task: #29979

Change-Id: I1852739e818ec67ac5a821e436e243eaa72f0938
2019-03-13 06:52:02 +00:00
Zuul
e7c2cbe340 Merge "Support Neutron L2Gateway resource" 2019-03-07 18:36:57 +00:00
Zuul
4cac915c28 Merge "Support Neutron L2GatewayConnection resource" 2019-03-07 18:07:50 +00:00
Jason Neatherway
0731857d0d Support Neutron L2Gateway resource
The Neutron extension for layer2 gateway (networking-l2gw) provides a API to
manage L2GW components. The proposed change is to implement two new Heat
resources to allow management of the L2GW and L2GW-connection resources.
This change implements the first of the two resources,
OS::Neutron::L2Gateway

Change-Id: Ib850f027833106cb39d3d1f6e644bbb1f79f1aac
Task: #19995
Story: #2002150
2019-03-08 02:32:29 +11:00
Jason Neatherway
7e53efc1a5 Support Neutron L2GatewayConnection resource
The Neutron extension for layer2 gateway (networking-l2gw) provides a API to
manage L2GW components. The proposed change is to implement two new Heat
resources to allow management of the L2GW and L2GW-connection resources.
This change implements the 2nd of two resources,
OS::Neutron::L2GatewayConnection

Change-Id: I2295acafa652ace7180d1250c85f8ee079351628
Task: #23118
Story: #2002150
2019-03-08 01:07:01 +11:00
Kazunori Shinohara
8c46dacd6a Add a Blazar Host resource
Add a OS::Blazar::Host resource plugin to support Blazar which is a
resource reservation services in OpenStack.

Co-author: Asmita Singh <Asmita.Singh@nttdata.com>

Change-Id: Ie5b9373681943222268eb9144740f5733ffef750
Task: 22881
Story: 2002085
2019-02-18 06:41:23 +00:00