Connections default to 'public' interface when attempting to run
openstack commands. This breaks setups where the network hosts are
separate from the controllers.
This change adds an ``openstack_interface`` variable to select the
correct endpoint to use, which defaults to ``internal``.
Co-Authored-By: Michael Senizaiz <michael@r-hpc.com>
Change-Id: Ifa766d2cc3ed7077f03c571398072ad5117701c6
Story: 2006814
Task: 37374
If ironic_serial_console_autoenable is set to true, ironic compute node
serial consoles are automatically enabled during kayobe overcloud post
configure. However, the baremetal-compute-serial-console.yml playbook
expects a variable called cmd to be defined, and set to 'enable' in
order to enable serial consoles. This patch fixes the issue.
We also add a conditional to only import the playbook when ironic is
enabled in the overcloud.
Change-Id: Ice26a113f9023b1a25a4af0552d07c5e95e64556
Story: 2006662
Task: 36924
Not setting cpu-mode will reduce the number of TCG emulated features.
Hopefully this will make CI more reliable.
Change-Id: I24a8832c02db6ba019ab8f5c2b9d7216a9b7d213
This is to resolve the following issue in CI:
c/_cffi_backend.c:15:17: fatal error: ffi.h: No such file or directory
#include <ffi.h>
^
compilation terminated.
error: command 'gcc' failed with exit status 1
----------------------------------------
ERROR: Command errored out with exit status 1: /home/zuul/kayobe-venv/bin/python -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-install-PV3WhJ/cffi/setup.py'"'"'; __file__='"'"'/tmp/pip-install-PV3WhJ/cffi/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(__file__);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))' install --record /tmp/pip-record-ZvlZVY/install-record.txt --single-version-externally-managed --compile --install-headers /home/zuul/kayobe-venv/include/site/python2.7/cffi Check the logs for full command output.
Change-Id: I1bd724be7dc77058870f37cb1c9404472fa466ca
see: https://zuul.opendev.org/t/openstack/build/c20a316a699b4073abf75960634ebfcd
TASK [image-download : Ensure the image is downloaded] *************************
task path: /home/zuul/kayobe-venv/share/kayobe/ansible/roles/image-download/tasks/main.yml:19
fatal: [localhost]: FAILED! => {
"msg": "The field 'vars' has an invalid value, which includes an undefined variable. The error was: 'dict object' has no attribute 'content'\n\nThe error appears to have been in '/home/zuul/kayobe-venv/share/kayobe/ansible/roles/image-download/tasks/main.yml': line 19, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n - name: Ensure the image is downloaded\n ^ here\n"
}
to retry, use: --limit @/home/zuul/kayobe-venv/share/kayobe/ansible/kolla-openstack.retry
PLAY RECAP *********************************************************************
controller0 : ok=3 changed=0 unreachable=0 failed=0
localhost : ok=6 changed=2 unreachable=0 failed=1
Change-Id: I45fb193b423c7e874aa70cd5f0252e0b0f4e2f05
Story: 2006715
Task: 37086
In an environment where ironic is disabled, but IPA images are built
locally for the seed, the following task will fail in a number of
commands, e.g. kayobe overcloud service deploy:
Validate the presence of locally built Ironic Python Agent (IPA) images
We need to only execute this task when ironic is enabled.
Change-Id: I61067164a003bcdf6079cdaca36f0e1755186f60
Story: 2006669
Task: 36935
Docker CE has added a default DROP policy to the FORWARD chain. When
nova-compute runs on the controller, kolla ansible sets the
net.bridge.bridge-nf-call-iptables sysctl to 1, which causes iptables to
process frames forwarded across bridges.
Currently, the kayobe-overcloud-centos job is failing quite frequently
with timeouts when deploying bare metal compute. Experimentation with
iptables hasn't revealed why this only happens sometimes, or exactly
what traffic is being blocked, but opening up the firewall does seem to
fix the issue. We won't see this in production since control and compute
services are on separate hosts.
This change updates the iptables configuration used in CI to forward all
frames on the bridge, breth1.
Change-Id: If96437b73b9b5c58600ba1b004f53ee0c1f14398
Story: 2006534
Task: 36590
We don't need to provide additional quotes for passing these arguments
to playbooks, since this is now done automatically via
kayobe.utils.quote_and_escape.
Change-Id: I9588b58449e8c8f8eab85ce01b4e130adc150ac6
Story: 2006475
Task: 36416
Modifies provisioning and cleaning networks in multi-tenant ironic
environments to be non-shared. Flat networks remain shared.
To apply the change to an existing environment, run 'kayobe overcloud
post configure'.
Change-Id: Ie59f0c729381e5bea112ab7f5d0c738a9488b772
Story: 2006409
Task: 36295
Also refactors the CI job playbooks to create the previous git repo
clones for upgrade jobs in the kayobe-base job.
Change-Id: I10c2b872887a47fab1a373fc0525dcd6fc78f7e2
