305 Commits

Author SHA1 Message Date
Jenkins
8df4d59593 Merge "Restart lbaas agent when lbaas conf changed" 2017-07-19 03:26:57 +00:00
Jeffrey Zhang
cacf08f0a6 Remove all kolla-kubernetes configurations
kolla-kubernetes is using its own configuration generation[0], so it is
time for kolla-ansible to remove the related code to simplify the
logical.

[0] https://github.com/openstack/kolla-kubernetes/tree/master/ansible

Change-Id: I7bb0b7fe3b8eea906613e936d5e9d19f4f2e80bb
Implements: blueprint clean-k8s-config
2017-07-18 22:00:58 +08:00
shaofeng_cheng
6c58d554de Restart lbaas agent when lbaas conf changed
Neutron-lbaas-agent container is not restart when neutron_lbaas.conf changed.

Closes-Bug: #1704900

Change-Id: Ie9babdf5ad0875b604cb1728a116b450e0f89858
2017-07-18 09:35:19 +08:00
Jenkins
d5c6689629 Merge "Fix fwaas options" 2017-07-14 13:17:42 +00:00
Jenkins
003450a2c6 Merge "Only use br-tun on network and compute nodes" 2017-07-13 12:08:41 +00:00
Jenkins
a71aa61ea7 Merge "Use unified vars in task" 2017-07-12 01:56:12 +00:00
Jenkins
9e2a023397 Merge "Use /run for all containers when need access namespace" 2017-07-12 01:55:23 +00:00
Jenkins
4510c525a6 Merge "Set neutron RPC workers and state report workers" 2017-07-10 13:44:18 +00:00
Jenkins
0572a394be Merge "Avoid launching "local" actions too many times" 2017-07-10 13:40:49 +00:00
Jeffrey Zhang
dba360f5a8 Use /run for all containers when need access namespace
If use /run/netns, it may cause namepace stale and unable to remove. The
root cause may be that docker engine still unrelease the namespace
folder.

Change-Id: If120d54c266878990c952b60043b596b0a0788ab
Closes-Bug: #1703077
2017-07-08 14:07:59 +08:00
Jenkins
f2a19a4811 Merge "Standardize Keystone domain variables" 2017-07-07 09:21:16 +00:00
jimmygc
865736c21d Fix fwaas options
fwaas is in pending create state when I attach it to a router.
This patch fix this.

Change-Id: I18b56ed3698e22a02a8718b39360fde76c12428b
Closes-Bug: #1689703
2017-07-07 13:00:02 +08:00
Jenkins
088ac7270d Merge "Add lbaas support to vsphere by vmware-nsx plugin" 2017-07-06 22:46:46 +00:00
Jenkins
7c789a662c Merge "Add VMware NSXV support to neutron" 2017-07-06 22:46:39 +00:00
Bertrand Lallau
372e991bec Standardize Keystone domain variables
As described here:
https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L841
https://github.com/openstack/keystone/blob/master/keystone/conf/identity.py#L21

* default project domain name MUST be named 'Default'
* default project domain id MUST be named 'default'
* default project user name MUST be named 'Default'
* default project user id MUST be named 'default'

Change-Id: I610a0416647fdea31bb04889364da5395d8c8d74
2017-07-06 14:34:11 +00:00
Jenkins
ae4d957137 Merge "Add option ha_vrrp_health_check_interval for l3" 2017-07-06 07:56:09 +00:00
Bertrand Lallau
a9113fc466 Avoid launching "local" actions too many times
In order to speed up deployment time some "local" actions should be run
only once using 'run_once: True'.
This will decrease deployment time in case of multihost configuration.

Change-Id: I6015d772d35c15e96c52f577013b6e41197cb41a
2017-07-05 15:55:39 +02:00
Jenkins
34ac75a2dc Merge "Neutron: nova_metadata_ip property is deprecated" 2017-07-05 01:05:08 +00:00
Bertrand Lallau
d2f72599e4 Set neutron RPC workers and state report workers
rpc_workers and rpc_state_report_workers are set to 1 by default in
Neutron:
https://github.com/openstack/neutron/blob/master/neutron/conf/service.py#L30

By design neutron-server is a central RPC service for all agents (L2
agents, L3 agents, Metadata agents, LB agents, VPN agents, ...).
For a production ready cloud, these variables must be set to a greater
value than 1.

Change-Id: Ib39be32748c3ee8077941fd1659db12c9d80055c
Closes-Bug: #1671734
2017-07-04 12:36:06 +00:00
Jenkins
19c1bc7f88 Merge "Remove symlink in reconfigure tasks" 2017-07-04 03:11:37 +00:00
Eduardo Gonzalez
8d5526c070 Remove symlink in reconfigure tasks
Some roles have a symlink to deploy.yml file
for reconfigure. This is causing some issues.
"included task files must contain a list of tasks"

Change-Id: Ie7ade52900a61bc1c5b867fa7a8f75fc541a6426
Closes-Bug: #1694251
2017-07-03 09:34:21 +00:00
Jenkins
f2f3104e9f Merge "Fix the database user name for all roles" 2017-07-01 00:41:49 +00:00
Jenkins
99075dab64 Merge "Enable port_security by default" 2017-06-30 09:40:36 +00:00
Jenkins
ee11884e37 Merge "Add possibility to configure tenant network types and type drivers" 2017-06-29 13:11:04 +00:00
Bertrand Lallau
99137b8651 Neutron: nova_metadata_ip property is deprecated
As described here:
https://github.com/openstack/neutron/blob/master/neutron/conf/agent/metadata/config.py#L47
nova_metadata_host must be used.

Change-Id: Idd1c2a8beebf39a3c420cbf1f1268f9935d938bb
2017-06-29 08:18:00 +00:00
Jenkins
b560b64e74 Merge "Add flag to allow provider networks" 2017-06-27 16:40:09 +00:00
Vladislav Belogrudov
f6eefdf388 Add flag to allow provider networks
In case of provider networks we need to configure external bridge
on compute nodes, like it is done in DVR. The only way to tell
if provider networks are to be used is a new flag.

Change-Id: I1aef197ee2b84e28f2131f058e6995551f873fe1
Closes-Bug: #1694726
2017-06-27 08:33:43 +00:00
Vladislav Belogrudov
296ddbeb03 Add possibility to configure tenant network types and type drivers
This patch add configuration options for tenant network types and type
drivers. Both lists are checked so that tenant types are listed in
drivers. For ironic 'flat' driver is mandatory and is added explicitly
into ironic prechecks.

Change-Id: Ie5775001165412910a258cbed2d2ebbb8ebbd879
Closes-Bug: #1694725
2017-06-21 17:14:25 +03:00
caoyuan
36c530f9ed Fix the database user name for all roles
when create database user, it should use
database_user, not database_name.

Change-Id: I4dfa01d1a5a46c5c58f1fc47b0be71b186462764
Closes-Bug: #1698762
2017-06-20 21:19:31 +08:00
liyingjun
bcb2da2ba2 Add option ha_vrrp_health_check_interval for l3
option 'ha_vrrp_health_check_interval' is needed to fix split-brain
in HA router[1][2], we should add this to l3_agent.ini.

[1] https://bugs.launchpad.net/neutron/+bug/1365461
[2] https://bugs.launchpad.net/neutron/+bug/1375625
[3] https://docs.openstack.org/ocata/networking-guide/deploy-ovs-ha-vrrp.html#keepalived-vrrp-health-check

Change-Id: I3f38f09068c17e3ed790611ffe5e445d14318cd1
Closes-bug: #1698992
2017-06-20 04:53:22 -04:00
Eduardo Gonzalez
112d632640 Enable port_security by default
Neutron recommend as good practice to enable port_security
extension by default. Current networks will remain using
security groups, but will allow users to disable port_security
in their port or networks.
An example use case is nfv.

Change-Id: I69f2e3567fd00695cf1c4bcc9177c2b88e33c3ab
2017-06-19 14:09:32 +02:00
Eduardo Gonzalez
a3f957591c Only use br-tun on network and compute nodes
Neutron-server does not use br-tun at all,
this is only needed at compute and network nodes.

Change-Id: I0e11baa3fc8ee15c951cf4fc9aaa3a1d47819e81
Closes-Bug: #1642521
2017-06-16 13:35:12 +00:00
Jeffrey Zhang
03e1b05f99 Use unified vars in task
Ansible task support vars directive, no need implement another one in
merge_config. This patch remove the vars directive in merge_config
action plugin.

Change-Id: I33648a2b6e39b4d49ce76eb66fbf2522721f8c68
2017-06-15 22:37:28 +08:00
Dan Ardelean
58ce2b54ea Add Hyper-V role
Implement an ansible role that adds Hyper-V as a compute node for
OpenStack using Kolla.

This will install and configure the Nova Compute service, the
Hyper-V Neutron agent and FreeRDP-WebConnect.
https://docs.openstack.org/ocata/config-reference/compute/hypervisor-hyper-v.html

Change-Id: I601835b0769c5ff173a980a05a752391ae8cc82f
Implements: blueprint hyperv-ansible-role
Co-Authored-By: Alessandro Pilotti <apilotti@cloudbasesolutions.com>
2017-06-15 16:12:31 +03:00
Vladislav Belogrudov
91789c4dfd Add /lib/modules to neutron_openvswitch_agent
On many systems IPv6 related modules are not loaded by default.
Usually when one runs ip6tables-* commands required modules are
probed. In neutron_openvswitch_agent container /lib/modules
does not exist. The commands fail to process ip6 firewall
rules as consequence.

Change-Id: Ic4e72eb4f5304f013b7a09ddd31794cfafa67e0b
Closes-Bug: #1615715
2017-06-14 14:37:37 +03:00
jimmygc
8d1b745f45 Add VMware NSXV support to neutron
Implements NSXV network part of  the blueprint.

Change-Id: I6b92b946667ebbbd2721a99fd299981cfc99693f
Partially-implements: blueprint kolla-ansible-support-vsphere
Co-Authored-By: shaofeng cheng <chengsf@winhong.com>
2017-06-12 09:51:23 +00:00
Jenkins
53a4f23469 Merge "Neutron oslo_messaging_notifications config error" 2017-06-12 07:07:12 +00:00
Bertrand Lallau
e624f216a8 Neutron oslo_messaging_notifications config error
With the following configuration in globals.yml:
enable_ceilometer="no"
enable_designate="no"
enable_searchlight="yes"

neutron.conf is generated like following:

[oslo_messaging_notifications]
driver = messagingv2
topics =

=> topics value is missing.
This patch fix it.

Closes-Bug: #1671940
Change-Id: I28ab60c61882caaba823bab84f30f77e270f29b4
2017-06-08 13:55:47 +00:00
Jenkins
225e09c7f1 Merge "Mixing binary and source images for N* and O* projects" 2017-06-06 07:08:59 +00:00
Dai Dang Van
e8b58956f7 Mixing binary and source images for N* and O* projects
In case Kolla's users want to deploy with both of
binary and source image, we should have a variable
install type that define install type for each project.

We also add specific image tag for each Openstack project.

This commit is implemented for Neutron, Nova,
Octavia project and Openvswitch as well.

Change-Id: I04d3a17231b607795bbddb85cd940fa725ff7a61
Implements: blueprint mixing-binary-and-source-image
2017-06-04 22:47:09 +07:00
Eduardo Gonzalez
ab4b1ff785 Support OSprofile usage
OSprofile allows user/devs trace OpenStack requests.

Implements: blueprint enable-osprofiler
Co-Authored-By: Bertrand Lallau <bertrand.lallau@gmail.com>
Change-Id: I82ea85d726011ef6cbf99380f395452d6d7f8053
2017-06-02 22:41:33 +02:00
msimonin
8e9cd4d278 Fix nova fake driver support
Recent code updates[1][2] broke the support for nova fake drivers.
in [1], nova_services dict is introduce but the change is not refected
in nova.conf.j2[3] when dealing with its elements.
in [2], two typos make neutron handlers to fail.

[1]: https://review.openstack.org/#/c/407416/
[2]: https://review.openstack.org/#/c/424504/
[3]:
https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/nova/templates/nova.conf.j2#L35

Change-Id: Ie32c76c4c902f1d95a1b4c97f8cbdb7ab101e48b
Closes-bug: #1695218
2017-06-02 10:48:54 +02:00
Bertrand Lallau
afdd11b9a2 Generalize api_interface_address variable usage
Useful api_interface_address variable has been define here:
https://github.com/openstack/kolla-ansible/blob/master/ansible/group_vars/all.yml#L57
In order to simplify codebase we must use it as much as possible.

Change-Id: I18fec19bf69e05a22a4142a9cd1165eccd022455
2017-05-23 08:35:15 +00:00
shaofeng_cheng
afe207212d Fix vpnaas in service_plugins
If enable vpnaas,service_plugins value is 'neutron_vpnaas.services
.vpn.plugin.VPNDriverPlugin'.
It throw warning for 'stevedore.named [-]Could not load
neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin'

Closes-Bug: #1690693

Change-Id: Ia00f733da2dcbdd50e3d62dfe98c8f44cc4a1d26
2017-05-16 09:24:35 +08:00
shaofeng_cheng
df3bef048d Fix lbaasv2 in service_plugins
If enable lbaas,service_plugins value is 'neutron_lbaas.services
.loadbalancer.plugin:LoadBalancerPluginv2'.
It throw warning for 'stevedore.named [-]Could not load neutron_lbaas
.services.loadbalancer.plugin.LoadBalancerPluginv2'

Closes-Bug: #1690694

Change-Id: I38d61405710ca88fbdb3cfd72a534986cf933195
2017-05-15 09:30:11 +08:00
Jenkins
a8257a19ee Merge "Fix neutron-openvswitch-agent crash on multinode" 2017-05-10 09:13:50 +00:00
Eduardo Gonzalez
2eeca32dae Fix neutron-openvswitch-agent crash on multinode
neutron-openvswitch-agent enter in restarting status in multinode
deployments because br-ex is no longer created on compute nodes
unless DVR is enabled.

This change add a conditional to only add bridge_mappings when
the node is in network or in compute when dvr is enabled.

Change-Id: I9d49158127af7fd78ecbc3d64a7509d1e4ae5672
Closes-Bug: #1688571
2017-05-05 15:56:51 +02:00
shaofeng_cheng
940067c8e8 Add lbaas support to vsphere by vmware-nsx plugin
Add lbaas support to vsphere by vmware-nsx plugin in neutron.

Depends-On: I6b92b946667ebbbd2721a99fd299981cfc99693f

Change-Id: I350d242c5b2df19970d75529c1b7ad8c405d4848
Partially-implements: blueprint kolla-ansible-support-vsphere
2017-05-05 15:13:11 +08:00
Jeffrey Zhang
b1f015616c Add timeout parameter for precheck tasks
wait_for module waits 300 seconds for the port started or stopped.  This
is meaningless and useless in precheck. This patch change timeout to 1
seconds.

Change-Id: I9b251ec4ba17ce446655917e8ef5e152ef947298
Closes-Bug: #1688152
2017-05-04 09:02:25 +08:00
Jenkins
5bf62c937c Merge "Cleanup /lib/modules volume mounts in containers" 2017-05-02 12:15:41 +00:00