172 Commits

Author SHA1 Message Date
Kien Nguyen
043943117d Use <project>_install_type instead of kolla_install_type
Use <project>_install_type instead of kolla_install_type
to set python_path. For example, general kolla_install_type
is 'binary', but user wants to deploy Horizon from 'source'.
Horizon templates still use python_path=/usr/share/openstack-dashboard,
it is wrong.

Change-Id: Ide6a24e17b1f8ab6506aa5e53f70693706830418
2019-01-04 14:33:46 +07:00
Zuul
4ded787e79 Merge "Allow custom horizon policy files for disabled openstack projects." 2018-12-27 10:19:58 +00:00
Martin Chlumsky
18dd74ac8d Allow custom horizon policy files for disabled openstack projects.
Currently, you cannot deploy custom policy files in horizon for disabled
openstack projects that don't have a horizon plugin.

This patch allows customizing disabled openstack projects policy files
used by horizon.  For services that do not have horizon plugins, it
creates variables of the form `enable_*_horizon_policy_file` and sets
these to the relevant `enable_*` variables by default. This ensures
backwards compatibility.

This patch is useful when you are migrating to kolla-ansible from
another deployment method one openstack project at a time and you have
custom policy files deployed by the old method.

Partially-Implements: blueprint docs-migrating-to-kolla
Closes-Bug: #1809314
Change-Id: Ifc33ef65759fa4831c24d177b272af5b45f80931
2018-12-21 11:39:53 -05:00
Eduardo Gonzalez
1a682fab28 Support stop specific containers
With this change, an operator may be able to stop a
service container without stopping all services in a host.
This change is the starting point to start
fast-forward upgrades support.
In next changes new flags will be introducced to disable
stop dataplane services during upgrades.

Change-Id: Ifde7a39d7d8596ef0d7405ecf1ac1d49a459d9ef
Implements: blueprint support-stop-containers
2018-11-26 08:07:01 +00:00
Adam Harwell
f1c8136556 Refactor haproxy config (split by service) V2.0
Having all services in one giant haproxy file makes altering
configuration for a service both painful and dangerous. Each service
should be configured with a simple set of variables and rendered with a
single unified template.

Available are two new templates:

* haproxy_single_service_listen.cfg.j2: close to the original style, but
only one service per file
* haproxy_single_service_split.cfg.j2: using the newer haproxy syntax
for separated frontend and backend

For now the default will be the single listen block, for ease of
transition.

Change-Id: I6e237438fbc0aa3c89a3c8bd706a53b74e71904b
2018-09-26 03:30:38 -07:00
MinSun
12f4554330 Support checkout dedicated version from git with dev mode
Now kolla dev mode only support clone master branch from git,
add version tag to support clone dedicated branch.

Change-Id: I88de238e5dc7461ba0662a3ecea9a2d80fd0db60
2018-08-14 16:06:00 +08:00
Zuul
3e45b2cbec Merge "Use include_tasks instead of include" 2018-07-27 08:16:08 +00:00
Lakshmi Prasanna Goutham Pratapa
14bf524756 Apply Resource Constraints to Services.
This commit is to apply resource-constraints to a few more OpenStack services.
Commit to  apply constraints to the last set of services will be made in
the upcoming commit.

Depends-on: Icafa54baca24d2de64238222a5677b9d8b90e2aa
Change-Id: I39004f54281f97d53dfa4b1dbcf248650ad6f186
2018-07-26 11:35:28 +00:00
Jeffrey Zhang
b51eeed89e Use include_tasks instead of include
include is marked as deprecated since ansible 2.4[0]

[0] https://docs.ansible.com/ansible/2.4/include_module.html#deprecated

Co-Authored-By: confi-surya <singh.surya64mnnit@gmail.com>
Change-Id: Ic9d71e1865d1c728890625aeddf424a5734c0a8a
2018-07-25 23:57:22 +08:00
jing.liuqing
695d44fac4 Enable neutron vpnaas dashboard dynamically
neutron-vpnaas-dashboard is split into standalone repo. Need enable it
dynamic.

Depends-On: Ife1e39d4fff9e878a101ff716545166a30091f69
Change-Id: Ia3faa5b52f9321349e57902b5b1d90068d388cc0
Closes-Bug: #1777750
2018-06-20 11:07:03 +08:00
Ha Manh Dong
30be04ea91 Specify 'become' for all tasks that use kolla_docker module
Add become to all tasks that use the module "kolla_docker"

Change-Id: I4309c4011687b88ec31d739fd8f834fe2326ff10
Partial-Implements: blueprint ansible-specific-task-become
2018-06-08 12:39:24 +00:00
Zuul
913e6572c1 Merge "horizon: allow to configure by custom_local_settings.j2" 2018-05-23 08:16:26 +00:00
Zuul
db5c1bd2e9 Merge "Add congress-dashboard into Horizon" 2018-05-21 14:12:54 +00:00
Jorge Niedbalski
d516ad7da2 horizon: allow to configure by custom_local_settings.j2
kolla-ansible should provide a mechanism to allow operators to overwrite
the default (or not exposed through configuration) options for the
local_settings.

local_settings.j2 may be good place to configure horizon but requires
operator to sync it every release.

custom_local_settings.j2 can be used to overwrite things from
local_settings.j2 without a need of syncing it first.

This patch also adds a release note and a documentation section
under the advanced configuration page.

Partial-Bug: #1769970
Depends-On: https://review.openstack.org/#/c/567006/
Change-Id: I84b54ba737276114e512d4577ac4b9010682bb98
2018-05-18 13:27:18 -04:00
Jeffrey Zhang
c567055176 Fix ansible warning
- rename action and serial to kolla_ansible and kolla_serial
- use become instead of "sudo <command>" in shell
- Remove quota for failed_when and changed_when in rabbitmq tasks

Change-Id: I78cb60168aaa40bb6439198283546b7faf33917c
Implements: blueprint migrate-to-ansible-2-2-0
2018-05-11 02:54:02 +00:00
caoyuan
4b42434910 Add congress-dashboard into Horizon
Change-Id: I9e94daaa2054e7aa4b814516f8cf2b6a4981465c
Depends-on: I5cd0cc2c884530525b3019c22c04a782a181a3bf
2018-04-20 10:10:33 +08:00
caoyuan
0460663296 Add blazar-dashboard into Horizon
Change-Id: Ie1ce8f29199dc36c0fe7671be48e7a655d997eb1
Deponds-on: I67876c734d147593a188ba385b60e02350b44fae
2018-04-19 23:07:43 +08:00
Zuul
9c4e4dcf54 Merge "Add Octavia Horizon plugin" 2018-04-04 08:55:40 +00:00
Carlos Goncalves
24f4fcdd22 Add Octavia Horizon plugin
Change-Id: I2f5d70bb5707b940387d613879bf2caab35d6bd9
2018-04-03 23:35:41 +01:00
Nick Jones
fd186a2a7c
[Horizon] Allow configuration of Keystone's URL
This commit introduces a new variable, horizon_keystone_url, which
allows the administrator to specify the Keystone URL.

This defaults to the internal Keystone URL for backwards compatibility's
sake.

Closes-Bug: #1759623

Change-Id: Idf178a6398000fcb2d02b6f37b8ef408218b94ee
Signed-off-by: Nick Jones <nick@stackhpc.com>
2018-04-03 09:54:38 +01:00
Eduardo Gonzalez
ea1a1dee0d Verify YAML syntax in gates
This patchset implements yamllint test to all *.yml
files.

Also fixes syntax errors to make jobs to pass.

Change-Id: I3186adf9835b4d0cada272d156b17d1bc9c2b799
2018-03-26 17:56:22 +02:00
Zuul
7851de5c3c Merge "Run database migrate for horizon during upgrade" 2018-03-26 11:55:56 +00:00
Jeffrey Zhang
0135ea0d28 Run database migrate for horizon during upgrade
Change-Id: I1db585242cc3a5dcb2fe1ac79091d19f624c6f70
Closes-Bug: #1758855
2018-03-26 09:52:46 +00:00
Zuul
1ab1c835c4 Merge "Add config necessary to use Barbican with Murano" 2018-03-19 09:17:13 +00:00
Jeffrey Zhang
f8cb527f78 Security reinforce for apache server
Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c
2018-03-14 18:14:26 +08:00
Zuul
3318cbd19b Merge "Support policy.yaml file [part 8]" 2018-01-24 14:07:54 +00:00
Alexandru Bogdan Pica
8e3b79440c Implement external MariaDB and pre-configured Databases support
This change allows the following use cases:

1. Using an already-configured MariaDB / MySQL server / Cluster
2. Using already-created DB users, without requiring root DB access.

Update: added external mariadb precheck

Change-Id: I78b0d178306d7c5293b0bf53e445f19f18b4b824
Implements: blueprint external-mariadb-support.
Closes-Bug: #1603121
2018-01-23 13:07:40 +00:00
Dai Dang Van
6d49dbb48a Support policy.yaml file [part 8]
- Horizon

This will copy only yaml or json policy file if they exist.

Change-Id: Ib8875ca54dc9dc69abc8338413f7724d9d4ecc45
Implements: blueprint support-custom-policy-yaml
Co-authored-By: Duong Ha-Quang <duonghq@vn.fujitsu.com>
2018-01-22 01:57:14 +00:00
Paul Bourke
1bcdf3932d Add config necessary to use Barbican with Murano
Murano offers optional Barbican integration for apps using sensitive
data [0]

This patch adds the necessary config pieces to allow these apps to work out of
the box.

[0] https://docs.openstack.org/murano/latest/admin/appdev-guide/encrypting_properties.html

Change-Id: Ia78f53b12619deb518111a1c02c00d73bf5acdb1
2018-01-18 04:11:57 +00:00
caoyuan
b63ecd7e3e Update kolla_internal_fqdn to database_address since it defined in all.yml
through the database_address has beed defined in groups_vars/all.yml, we should
better use it, this way, if we want to use external database, we just need to
redefined in all.yml

refer to https://github.com/openstack/kolla-ansible/blob/master/ansible/group_vars/all.yml#L83
Co-Authored-By: chenqiaomin <chen.qiaomin@99cloud.net>

Change-Id: Ie559301451954e16347ceaabf02f594c5c5cbe56
2018-01-17 13:01:48 +08:00
chenxing
12cdd90633 Enable vitrage dashboard
Depends-On: I5846b48d336583ae82743f61bfbdadc99c755e8d
Change-Id: Iaf15dad5e4d527b8721409e56fc081043c1cb174
Implements: blueprint vitrage-roles
2018-01-08 06:52:46 +00:00
Jeffrey Zhang
4f1182a3c6 Enable heat dashboard dynamically
heat dashboard is split from horizon code base in Queens cycle.[0][1]

[0] https://review.openstack.org/#/c/523402/
[1] https://github.com/openstack/heat-dashboard

Depends-On: I920394b8cb6eb7027df9110fe88de6842d2bd8b3
Change-Id: I14ce4886ec7c6cf4ce284c9768493919dd65c83b
Close-Bug: #1737475
2017-12-11 15:32:37 +08:00
Zuul
56e5d56acf Merge "Add horizon domain dropdown" 2017-12-01 07:15:29 +00:00
Pierre Hanselmann
27253723e3 Add horizon domain dropdown
Added ``horizon_keystone_domain_choices`` hash. It can be used to set the
available domains to choose from on the horizon login page. This feature
was introduced in pike release.

Change-Id: Ia7d2bc45e518848a04ce78e7833e1cf9a0ef21ce
2017-11-28 13:28:36 +01:00
Zuul
2f3a06ab5d Merge "Remove the unnecessary horizon_auth" 2017-11-01 05:31:48 +00:00
Duong Ha-Quang
2d3866c6a4 Specify 'become' for only necessary tasks (default roles)
Add become to only neccesary tasks in roles:
- glance
- heat
- horizon
- keystone
- neutron
- nova
- openvswitch

Gate is also updated to use 'become' feature

Change-Id: I2f3f27306e9f384148e1ad4d54d8da2ebef34d00
Partial-Implements: blueprint ansible-specific-task-become
2017-10-31 02:55:31 +00:00
caoyuan
ff358576a4 Remove the unnecessary horizon_auth
the auth is used for registry, but the horizon not need, so the
openstack_horizon_auth should be remove.
refer to https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/nova/tasks/register.yml#L13

Change-Id: Ibd8985651bd64cba3e30c15596f0ae6d692b973b
2017-10-26 17:54:44 +08:00
Jenkins
9874b1b36c Merge "Horizon multidomain flag" 2017-09-26 10:39:31 +00:00
Pierre Hanselmann
bd186a2e47 Horizon multidomain flag
Added horizon_keystone_multidomain flag. It can be now overriden
in globals.yml. Default set to False.

Change-Id: I6f8f261cf4b9779e57c2443ac219cdddb1731f52
2017-09-25 15:28:45 +02:00
Jenkins
fd1711cd76 Merge "Enable neutron fwaas dashboard dynamically" 2017-09-25 13:28:13 +00:00
Jeffrey Zhang
56693c3421 Enable neutron fwaas dashboard dynamically
neutron-fwaas-dashboard is split into standalone repo. Need enable it
dynamic.

Depends-On: Ic1ff58df2c23db77aace95fd6d4eabbd62227e3b
Change-Id: I37b3258a394a7722b0837d6b1707326d7e37c9ba
Closes-Bug: #1719147
2017-09-25 11:05:01 +08:00
Pierre Hanselmann
8298afef01 WSGI configuration missing directive
WSGI configuration is missing the directive
"WSGIApplicationGroup %{GLOBAL}" after
WSGIProcessGroup" in the horizon template.
Of all WSGI configuration templates it is
the only one that does not have the
"WSGIApplicationGroup" line.

Change-Id: I3001901abbaae842f49179b6febf844337431afc
Closes-Bug: #1717922
2017-09-20 11:40:35 +02:00
Paul Bourke
e44a396f54 Perform bootstrap on Horizon upgrade
The value of horizon_backend_database defaults to the value of
'enable_murano'. If a user happens to have enabled/deployed Murano prior
to upgrading Horizon, Horizon will then get configured to use the
backend database, though the bootstrap will be missing and results in a
broken Horizon on upgrade.

Closes-Bug: #1714949
Change-Id: I37c99c93f2966915c38d4e1aeaa48152254d62ea
2017-09-04 12:54:23 +00:00
Jeffrey Zhang
a729dcc4a2 Mount host /tmp folder to horizon container
When uploading an image through horizon, the image is saved in /tmp
folder temporarily. Since the container root is only 10GB, a big image
will crash horizon container.
This patch mounts the host /tmp folder to horizon container.

[0] https://docs.djangoproject.com/en/1.11/topics/http/file-uploads/#where-uploaded-data-is-stored

Change-Id: Idf6a137d09d9e45105c3ec86e6337dd1826f7a03
Closes-Bug: #1712453
2017-08-23 08:49:01 +08:00
Michal Nasiadka
141dbc8f14 Fixes horizon reconfigure for adding custom *_policy.json files
Change-Id: I2d9fca7d4272c69c75b106ac4cea244a371d3b5f
Closes-bug: #1707163
2017-07-28 13:09:19 +02:00
Jenkins
06046f3943 Merge "Unified Apache access log format" 2017-07-27 09:30:53 +00:00
Tatsuma Matsuki
db0f469614 Unified Apache access log format
Apache access log formats are modified to be consistent with
the format defined in wsgi-keystone.conf, which includes
the response time (%D) and X-forwarder-For fields.

Change-Id: I02aa5eb106fb894196dfb6e22daf2968e27ed3cb
Closes-Bug: #1703571
2017-07-26 04:11:54 +00:00
Pavel Glushchak
0f70b3883d Make cinder-backup service optional
Introduced new option enable_cinder_backup, that controls
whether to deploy cinder-backup service.

Change-Id: Ibb0ca0a478748d4caba4df434456ead0df95ffca
Signed-off-by: Pavel Glushchak <pglushchak@virtuozzo.com>
2017-07-25 11:04:39 +03:00
Jenkins
23ac09c955 Merge "Add dev mode for Horizon" 2017-07-23 02:53:19 +00:00
chenxing
b39da1e4c2 Update the documentation link for doc migration
Change-Id: I8c340cfe33789badb4f8df93f0c13f56fdea5dbf
2017-07-21 09:49:19 +00:00