312 Commits

Author SHA1 Message Date
Ghanshyam Mann
e5505b8b34 Remove retired Qinling support
Qinling project is retiring in Wallaby cycle[1].
This commit removes the usages of Qinling project
before its code is removed.

Needed-By: https://review.opendev.org/c/openstack/qinling/+/764521

[1] http://lists.openstack.org/pipermail/openstack-discuss/2020-November/018638.html

Change-Id: I59a61dda68e66eeaa0526e2b91de9316fd04dee8
2020-11-28 00:05:22 -06:00
Zuul
d169b4f5c7 Merge "Fix Python setup when venv is not used" 2020-11-27 20:26:39 +00:00
Zuul
2c32e66841 Merge "Support for firewalld ZONE option in network interfaces configuration" 2020-11-26 12:59:54 +00:00
Piotr Parczewski
e748faea00 Fix Python setup when venv is not used
Set packages argument explicitly as a list to avoid "No package matching
'<generator object select_or_reject at 0x7ff25f341750>' is available" error.

Story: 2008378
Task: 41298
Change-Id: Ibe44583cb93b7dca8f5091c893386a15288af915
2020-11-23 19:51:46 +01:00
Bartosz Bezak
d10d95f949 Support for firewalld ZONE option in network interfaces configuration
Change-Id: Id21616b5c03922002cd7c99d6df7976a502b4e3c
Story: 2008369
Task: 41279
2020-11-19 15:19:52 +01:00
da6debd3b9 Update master for stable/victoria
Add file to the reno documentation build to show release notes for
stable/victoria.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/victoria.

Change-Id: I79b0d63a283b56a12b5acd3aaa740a6be3c3cb6f
Sem-Ver: feature
2020-11-18 17:17:42 +00:00
Pierre Riteau
9df0f00bc5 Configure bifrost to use firewalld trusted zone
Without this setting, bifrost creates a bifrost firewalld zone only
allowing network traffic for Ironic services and assigns the
provisioning network interface to it, potentially causing loss of
connectivity.

Using the public zone is suggested as a workaround [1] but is not
sufficient: it allows SSH traffic, but blocks other services deployed on
the seed, such as Docker registry traffic.

[1] https://review.opendev.org/#/c/754406/

Change-Id: I80f9d95f02e11fda5916f9a9dd257b688a9db7e2
Story: 2008153
Task: 40899
2020-10-07 17:38:43 +02:00
Zuul
6154be4513 Merge "Disable overcloud networks for Ironic when unused" 2020-10-06 14:19:01 +00:00
Zuul
d0d7f07c0b Merge "Disable ironic in the overcloud by default" 2020-10-06 14:18:56 +00:00
Mark Goddard
869185ea7b Switch default docker storage driver to overlay2
To avoid switching existing deployments from devicemapper to overlay2,
we check the existing storage driver configuration directly with the
Docker daemon, or if unreachable by reading the /etc/docker/daemon.json
configuration file.

Co-Authored-By: Pierre Riteau <pierre@stackhpc.com>
Story: 2005667
Task: 30972

Change-Id: Iaf2ee8c9f302f4684ae039bb00b2e2e5969cf1fc
2020-10-05 19:59:11 +00:00
Mark Goddard
64fd8e1726 Disable overcloud networks for Ironic when unused
We do not need the workload provisioning, cleaning or inspection
networks when Ironic is disabled in the overcloud.

Change-Id: I300d0ef136224126f25d2c70a80a42afeea5f586
Story: 2008207
Task: 40992
2020-10-02 14:23:10 +00:00
Mark Goddard
f9de6a025d Disable ironic in the overcloud by default
Ironic is now disabled by default in the overcloud. This brings Kayobe's
default set of services into line with Kolla Ansible. For environments
using Ironic in the overcloud, set kolla_enable_ironic to true in
kolla.yml.

Story: 2008207
Task: 40991

Change-Id: I33eb4fa534847e199a599350b525d4762a2beaac
2020-10-01 16:28:30 +02:00
Zuul
3a8b560d63 Merge "Add missing barbican.conf support" 2020-09-24 10:28:52 +00:00
Michal Nasiadka
0f25900a43 Add missing barbican.conf support
Story: 2008170
Task: 40925

Change-Id: I3014983f481a5dca7c93e140b3e10caa5d537669
2020-09-23 19:17:51 +00:00
Mark Goddard
7b80482ac3 Docker registry basic auth
Adds support for HTTP basic authentication with the Docker registry.

The kolla docker registry password is now written to passwords.yml.

Change-Id: Ie6e854a66a6660d4e02771fe2b5dd97af814194d
Story: 2007952
Task: 40429
2020-09-21 14:19:29 +02:00
Zuul
79426d0740 Merge "Support neutron-mlnx-agent" 2020-09-17 22:25:10 +00:00
Zuul
620b4e61f7 Merge "Remove support for deprecated Yum variables" 2020-09-17 20:47:06 +00:00
Mark Goddard
26cea075f2 Remove support for deprecated Yum variables
The variables in yum.yml and yum-cron.yml were deprecated in Ussuri.
This patch removes them, and updates the defaults in dnf.yml.

Story: 2008160
Task: 40906

Change-Id: I97cc98dd2ff726e5885fefcab17f17796d9fd453
2020-09-17 14:32:28 +00:00
Bharat Kunwar
d29aca985e Support neutron-mlnx-agent
Depends-On: I173669bdf92b1f2ea98907ba16808ca3c914944c
Change-Id: I5a5bd255b937fe5d4c56cc21ef898b796c5bda41
2020-09-17 14:25:50 +02:00
Pierre Riteau
2606c23812 Avoid setting IPADDR=0.0.0.0
Configuring network interfaces with IPADDR=0.0.0.0 may fail with:
Error, some other host (FF:FF:FF:FF:FF:FF) already uses address 0.0.0.0.

Change-Id: I908dc3320cb1dce7a040a1dbfeac414ace22d6e3
Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com>
Story: 2007900
Task: 40289
2020-09-16 15:29:14 +02:00
Michal Nasiadka
1094358033 Move dnf.yml earlier in host configure workflow
Since kayobe is installing python3-pip in pip.yml - and dnf proxy is set
later, it fails on no-direct-internet systems.

Change-Id: I93f29ec4334829bfec107ba7aa6df05a47d2ab96
Story: 2008067
Task: 40750
Depends-On: https://review.opendev.org/748587
Depends-On: https://review.opendev.org/750804
2020-09-11 19:59:02 +00:00
Zuul
faf03dbf35 Merge "Add support for custom Aodh configuration" 2020-08-22 00:46:57 +00:00
Zuul
cd834045c8 Merge "Make pip_index_url variable conditional" 2020-08-22 00:07:07 +00:00
Pierre Riteau
878fe5728b Add support for custom Aodh configuration
Change-Id: I19ef5a46dccacc00db495993cc744938921996a1
Story: 2008019
Task: 40671
2020-08-21 20:54:21 +00:00
Bartosz Bezak
7113ae4617 Make pip_index_url variable conditional
Setting pip's proxy variable, operator needs to set also pip_index_url,
even when one wants to use default value of index_url.
This patch sets pip's index_url only when pip_index_url is not empty.

Change-Id: If435e9025f3d78364b229bbe4458f5f1e1ab49aa
2020-08-21 20:01:44 +00:00
Pierre Riteau
ea4a507f04 Support setting ethtool options on network interfaces
Change-Id: I5650b8b489d5968b42526e45667dfc7fa6ad7b2f
Story: 2008020
Task: 40672
2020-08-17 16:35:11 +02:00
Zuul
dce3545efb Merge "Add support for custom Masakari configuration" 2020-08-07 18:14:39 +00:00
Zuul
80e0e671ba Merge "Docker registry TLS" 2020-08-06 12:14:48 +00:00
Mark Goddard
bc32529008 Add support for custom Masakari configuration
Change-Id: Ibcf12f4d80bd9744867688ba986cd59be82f3e5a
Story: 2007969
Task: 40470
2020-08-05 09:28:25 +01:00
Zuul
30ad2ff968 Merge "Support configuration of Bifrost's Ironic extra kernel parameters" 2020-07-28 17:10:00 +00:00
Zuul
96dfbe4483 Merge "Add support for custom options in static routes" 2020-07-28 16:50:28 +00:00
Zuul
a2bdcc0cc7 Merge "Fix network configuration when no eth0 interface is present" 2020-07-28 16:50:23 +00:00
Mark Goddard
411e148450 Docker registry TLS
Adds support for enabling TLS on the Docker registry.

Change-Id: Idac6a1dfb17f4a22b3043531d1181a5585cafe6a
Story: 2007952
Task: 40428
2020-07-24 09:11:45 +01:00
Pierre Riteau
271bc72dae Set endpoint type variables to publicURL in public-openrc.sh
Change-Id: I9d7f0bf7daa6d1abe31de0e76a508820ed123c28
Story: 2007950
Task: 40426
2020-07-23 15:43:31 +02:00
Zuul
97373c0519 Merge "Fix network configuration of network hosts" 2020-07-22 20:36:22 +00:00
Mark Goddard
f618a2c4b8 Update seed VM image to CentOS 8.2
If using a CentOS 8.2 bifrost_deploy image on a CentOS 8.1 seed host, we
may see an error such as the following:

    TASK [Ensure the overcloud host image has bogus name server entries removed]
    fatal: [seed]: FAILED!

Running virt-customize with more debug in the Bifrost container, we see
this output:

qemu-kvm: error: failed to set MSR 0x48e to 0xfff9fffe04006172
qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/target/i386/kvm.c:2695: kvm_buf_set_msrs: Assertion `ret == cpu->kvm_msr_buf->nmsrs' failed.

This appears to be an incompatibility between qemu/libvirt in CentOS 8.1
and 8.2.

This change fixes the issue for new deployments by updating the seed VM
image to CentOS 8.2.  Existing deployments will need to update packages
on the seed host to match the bifrost_deploy container.

Change-Id: Icf64b15e58c84f31a11cdefcdb79558b58737da1
Story: 2007942
Task: 40407
2020-07-21 14:16:21 +01:00
Zuul
3a9c589666 Merge "Remove opendaylight support" 2020-07-15 17:04:55 +00:00
Zuul
fed87a1e9d Merge "Allow to customise hardware inspection timeouts" 2020-07-14 10:01:11 +00:00
jacky06
3f6ffb9d83 Remove opendaylight support
It has been deprecated in Ussuri cycle.

Change-Id: I01da8af2255e2ac4751279db712292f9b862adad
2020-07-10 17:52:14 +00:00
Pierre Riteau
ca648622b1 Fix network configuration when no eth0 interface is present
Change-Id: Idbdd494f9435d663564346fd0e0a053b656168c3
Story: 2007913
Task: 40316
2020-07-10 15:06:01 +02:00
Mark Goddard
2b86fd9945 Add support for custom options in static routes
Currently it is possible to set the CIDR, gateway and route table for
static routes. Other options cannot be set. This change adds support for
setting arbitrary options via an 'options' attribute in the route, which
should be a list of additional options to apply.

Depends on
https://github.com/michaelrigart/ansible-role-interfaces/pull/74.

Story: 2007835
Task: 40122

Change-Id: Ib27deac4ddf4976a571b192ee5d1b8ca57701916
2020-07-08 19:25:40 +02:00
jacky06
335ed05a5d Remove mongodb integration
more info: a6c97d7284

Depends-On: https://review.opendev.org/#/c/735030/
Change-Id: Ib94da2b14182ddc4157ca09066bd049c842fdf9c
2020-07-07 23:38:12 +08:00
Zuul
8d67d72fa4 Merge "Remove retired congress" 2020-07-02 17:53:46 +00:00
gugug
7fdacf4759 Remove the neutron-fwaas since it retired
Depends-On: I561504160e5548c54d1af31821c3366ab34cf0ec
Change-Id: I3c921f5a558ae57ecc22fc6fc1959fb621c57709
2020-06-30 01:39:03 +00:00
Pierre Riteau
58f26fb61b Fix network configuration of network hosts
The Control Plane Service Placement documentation connects network hosts
to networks listed in controller_network_host_network_interfaces.
However this only contained public, tunnel, and external networks. For a
fully functional network host, we also need:

- the overcloud admin network, to manage the host
- internal network, for services to interact with each other
- storage network, for manila-share

This change updates the default network configuration for network hosts
and adds a variable to define extra networks like for other hosts. It
also improves the documentation for adding network hosts.

Change-Id: I1bb857bfca9e209bc6de30ae9852a4a08b2c7fb0
2020-06-25 18:50:49 +02:00
gugug
c456f0b9b7 Remove retired congress
Congress has been retired, remove the congress stuff

See https://review.opendev.org/721742

Change-Id: I0af07cf3cde5cf2ca2700c647eb40cc509379864
2020-06-23 23:25:25 +08:00
Pierre Riteau
db15a80123 Allow to customise hardware inspection timeouts
Change-Id: I2e45876f89121d66cf03b50824bd8258517b88cb
Story: 2007844
Task: 40135
2020-06-22 12:24:00 +02:00
Pierre Riteau
5b44571248 Support configuration of Bifrost's Ironic extra kernel parameters
Change-Id: I3f96c877b24d4a400578dc618a6dc488c0fdeeef
Story: 2001987
Task: 19607
2020-06-19 12:19:16 +02:00
Zuul
da95fc897d Merge "Fix kayobe baremetal compute commands" 2020-06-18 12:49:01 +00:00
Zuul
043f843759 Merge "Copy custom certificates" 2020-06-17 19:09:47 +00:00