4023 Commits

Author SHA1 Message Date
Mark Goddard
2e190597bb Fix missed kolla_action and kolla_serial
In change I78cb60168aaa40bb6439198283546b7faf33917c, action was changed
to kolla_action, and serial to kolla_serial, to avoid Ansible warnings
due to use of reserved keywords. In that change, some keywords were
missed, and some changes that were merged since then have not switched
to the new variables. This change fixes all current instances of those
issues.

Change-Id: I357dffdfcb2b405e280a962d366ee65eebf0a8d1
Implements: blueprint migrate-to-ansible-2-2-0
2018-05-16 13:13:06 +01:00
Zuul
e303c74e68 Merge "dev mode: Add support for senlin" 2018-05-16 07:20:25 +00:00
Zuul
b1a7f406be Merge "Delete the null notify" 2018-05-15 16:03:08 +00:00
Zuul
d3bff002e6 Merge "Remove keystone_authtoken section for ceilometer" 2018-05-15 14:20:45 +00:00
ZhijunWei
5c26ccff64 Delete the null notify
Change-Id: I3789e98034b0080d2dba62f8b59fbff8b2b3e4d7
2018-05-15 14:00:38 +00:00
Zuul
ef9944aa1f Merge "Fix create Magnum trustee user role failed" 2018-05-15 08:13:18 +00:00
Zuul
6bce632416 Merge "Remove kubetoolbox image from common role" 2018-05-14 23:08:52 +00:00
ZhijunWei
96d2749e8d Remove keystone_authtoken section for ceilometer
Now, the ceilometer use [service_credentials] to get credentials[0][1],
remove the unused [keystone_authtoken]

[0]: https://github.com/openstack/ceilometer/blob/master/devstack/plugin.sh#L294
[1]: https://docs.openstack.org/ceilometer/latest/configuration/index.html

Change-Id: Ic92f9ecb1a43c11311f2a428611e78c0986f02cf
2018-05-14 14:38:07 +00:00
caoyuan
87d1276a86 Fix create Magnum trustee user role failed
when run creating Magnum trustee user role task, the
domain parameter must be domain id[0]. so kolla-ansible
need to register the result of Creating Magnum trustee
domain task, and use the domain id when creating
Magnum trustee user role.

[0]: https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/magnum/tasks/register.yml#L59

Co-Authored-By: ZhijunWei <wzj334965317@outlook.com>
Change-Id: I57cdd011b7fc863133f9e3b43ae783cd1486e644
Closes-Bug: #1766410
2018-05-14 16:30:40 +08:00
wu.chunyang
a0f43fde5d optimize the freezer tag
keep consistent with other projects

Change-Id: I3eae5efbc148a87dea44ce1fe727f6314a437e98
2018-05-12 10:50:53 +08:00
Zuul
905de55cda Merge "Remove ironic_host_manager usage" 2018-05-11 21:52:43 +00:00
Zuul
06b46533a4 Merge "Fix ansible warning" 2018-05-11 04:13:44 +00:00
Zuul
10b3e38961 Merge "Apply Glance database migration" 2018-05-11 02:55:14 +00:00
Jeffrey Zhang
c567055176 Fix ansible warning
- rename action and serial to kolla_ansible and kolla_serial
- use become instead of "sudo <command>" in shell
- Remove quota for failed_when and changed_when in rabbitmq tasks

Change-Id: I78cb60168aaa40bb6439198283546b7faf33917c
Implements: blueprint migrate-to-ansible-2-2-0
2018-05-11 02:54:02 +00:00
Zuul
f3484f8fd3 Merge "Make the workers configurable for gnocchi metricd" 2018-05-11 02:37:51 +00:00
Zuul
ece6b40ed2 Merge "Fix nova_proxy_admin_tenant_name typo" 2018-05-11 02:28:47 +00:00
Zuul
62237489f0 Merge "Make generated private key files not world readable" 2018-05-10 15:43:17 +00:00
Zuul
d3f496ec7f Merge "List and map compute hosts by service instead of by compute node." 2018-05-10 08:53:03 +00:00
Zuul
25a9456491 Merge "Disable glance-registry" 2018-05-10 08:36:41 +00:00
Mohamed El Gindi
558bf6b345 Fix nova_proxy_admin_tenant_name typo
In trove-taskmanager.conf a typo has been
introduced for nova_proxy_admin_tenant_name
option.

It currently is:
"nova_proxy_admin_tenant_name = services"
But should be:
"nova_proxy_admin_tenant_name = service"

Change-Id: I7b5d0ca4c6c994b6dd3c5de3f0a79637fda88177
Closes-Bug: #1770262
2018-05-09 13:59:59 -07:00
Mark Giles
3991ebcd79 Make generated private key files not world readable
The kolla-ansible certificates command creates a self-signed
certificate and corresponding private key.  This change sets the
file mode on the files that contain the private key so that they
are not world readable.

Change-Id: I7bfba5975af8d230e5d00c2ce801a914fbbf2d4e
2018-05-09 14:39:05 -04:00
Zuul
b60468f06e Merge "Do not create nova db user if database unchanged" 2018-05-09 16:32:36 +00:00
Duong Ha-Quang
365e3d3a3f Apply Glance database migration
Apply Glance database upgrade procedure:

https://docs.openstack.org/glance/latest/admin/zero-downtime-db-upgrade.html

Rolling upgrade in Glance requires that glance-registry is not deployed and run

Depends-On: https://review.openstack.org/532128
Depends-On: https://review.openstack.org/566804

Change-Id: Ia5d0cee2385facefda9d423051b74ab51d075f13
Implements: blueprint apply-service-upgrade-procedure
2018-05-09 16:29:27 +00:00
wu.chunyang
bd708d9433 Make the workers configurable for gnocchi metricd
By default, the workers for gnocchi_metricd is 5[0], it's too
small for production environment, this PS to make it configurable,
in this way, user can change it according to actual needs.

[0]: https://github.com/openstack/kolla-ansible/blob/master/ansible/group_vars/all.yml#L356

Change-Id: Ibf4dec793f02c407547c77963cc13799d044b90f
2018-05-09 21:45:18 +08:00
Jorge Niedbalski
b0ba58d536 List and map compute hosts by service instead of by compute node.
This commit adds the --by-service flag in the discover_hosts
command of the nova cell subsystem, using this flag,
hosts are mapped based on the existing nova-compute services instead
of using the compute node reference.

In this way, we can ensure that the host mappings exists
for this new host (and create it if not) preventing the
HostMappingNotFound exception to loop over and over.

Bug: #1768094
Change-Id: I948004031bc3e125f929ed3e6c670aea11e73a31
Signed-off-by: Jorge Niedbalski <jorge.niedbalski@linaro.org>
2018-05-09 10:02:53 -03:00
chenxing
f7d995d619 Update the cirros default password
Following by https://docs.openstack.org/image-guide/obtain-images.html#cirros-test

Change-Id: Ide3508b3af6923a06e63242dc730b2742147ce37
2018-05-09 17:00:35 +08:00
Duong Ha-Quang
a155e796af Disable glance-registry
As described in [1], [2], glance-registry was deprecated from Queens and will be
removed in S, so we should disable glance registry in Queens but keep the image
and deploy logic if user need this (but it's low chance due to glance-registry
almost do nothing currently).

This patch only disable glance registry microservice.

[1]: http://specs.openstack.org/openstack/glance-specs/specs/newton/approved/glance/deprecate-registry.html
[2]: https://blueprints.launchpad.net/glance/+spec/deprecate-registry

Change-Id: I6667325711d1c54cf5233ad6973d89ea396a46b5
Closes-bug: #1769837
2018-05-08 14:43:30 +07:00
Zuul
fd0c73006f Merge "Allow setting computes_need_external_bridge." 2018-05-08 02:01:09 +00:00
Zuul
d67a2d288d Merge "Only copy custom fluentd filters when fluentd is enabled" 2018-05-07 18:45:35 +00:00
Jorge Niedbalski
bb1da0074f Allow setting computes_need_external_bridge.
Allow to set computes_need_external_bridge to true/false
depending on the desired configuration, for allowing
cases such as disable dvr and enable l3 ha.

Closes-Bug: #1769686

Change-Id: I1565b08dfccb7bec2ddda8c048b7d951c9eb1824
Signed-off-by: Jorge Niedbalski <jorge.niedbalski@linaro.org>
2018-05-07 15:38:12 -03:00
Zuul
47b94cb6e4 Merge "add the environment attribute to etcd deploy" 2018-05-07 09:03:05 +00:00
Zuul
ef228c3d61 Merge "Automatically add Prometheus as a Grafana datasource" 2018-05-07 09:00:23 +00:00
Zuul
b5a6bed708 Merge "Make sure aodh/service_credentials wotks with internalURL" 2018-05-07 08:15:08 +00:00
Zuul
7ae618e55e Merge "kolla-ansible fix to correct magnum k8s deployment" 2018-05-07 08:09:15 +00:00
chenxing
6397c2abf5 Extra fix for removed module_extra_vars
Some variables should be modified too, just like this commit:
https://review.openstack.org/552863

Change-Id: Id43eefb948a05de03d19c46048b6151bf6f5dc0a
Related-Bug: #1769463
2018-05-07 10:38:47 +08:00
Zuul
017eadd844 Merge "Add endpoint type specifications to murano config" 2018-05-07 00:15:35 +00:00
yuqian
bf0f155d13 Make sure aodh/service_credentials wotks with internalURL
Aodh service credential defaults to publicURL.

Aodh should work with the internal interface (v3 API Identity syntax):

.....
[service_credentials]
interface = internal
.....

Change-Id: Ie11290be25291fee1938032ae6294546fb7a98f3
2018-05-06 17:42:12 +08:00
Simon Piette
fdb325aba6 add the environment attribute to etcd deploy
In ansible/roles/etcd/tasks/config.yml, the kolla_docker
compare_container action doesn't check environment.

Once a container is created, it won't get recreated if only the
environment change. This commit add the environment attribute to the
kolla_docker action in etcd role

Change-Id: I8fb71cc945867e06acc67f6d1256bf62f4276206
Closes-Bug: #1765517
2018-05-04 14:37:59 -04:00
Bharat Kunwar
c20c69ee5e kolla-ansible fix to correct magnum k8s deployment
Magnum was unable to fire up k8s cluster because heat-container-agent
inside kube-master was pointing to internal keystone endpoint instead of
public endpoint. This fix tells kolla ansible to set clients_keystone
auth_uri to public endpoint so that heat-container-agent communication
with heat is successfully authenticated by keystone.

Change-Id: Ida49528f88685710b5e6b8f3c4d4622506af5ae1
Closes-Bug: #1762754
2018-05-04 17:23:37 +01:00
ZhijunWei
80ec86f18d Remove kubetoolbox image from common role
Since the kolla-kubernetes has been separated, and nowhere to
use kubetoolbox, it is safe to remove it from kolla-ansible.

Change-Id: I9aa59d45fa04c13944120f1f99af2361551147ad
2018-05-04 13:18:11 +00:00
Mark Goddard
7c046ee9a4 Only copy custom fluentd filters when fluentd is enabled
Change-Id: Iedf87342eeee90d58734ba21216296f3d94f76c8
TrivialFix
2018-05-04 11:39:39 +01:00
wu.chunyang
998b9fbbec Remove "keystone_token_provider==uuid" from keystone.conf
it missing from [0]

[0]: https://review.openstack.org/#/c/566210/

Change-Id: I990dea52d3aa45d3d7c352c2664541799d912cdc
2018-05-04 18:01:53 +08:00
Zuul
4caea9d6d2 Merge "Remove uuid as keystone_token_provider" 2018-05-04 07:48:40 +00:00
Zuul
d3198580f5 Merge "Restructure the vpnaas roles" 2018-05-04 06:36:13 +00:00
Zuul
5abeaff832 Merge "Ironic dnsmasq should not use VIP for TFTP server" 2018-05-04 05:42:18 +00:00
Duong Ha-Quang
84aeff4e92 Remove uuid as keystone_token_provider
Keystone removed uuid token provider in Rocky

This patch change the default value and fix comments for the option.

Change-Id: Idca0004852b688fcdd34ef47c38dec6b8bf05f86
Closes-Bug: #1757520
2018-05-04 11:58:40 +07:00
Zuul
ad2b856178 Merge "Let haproxy to be ODL websocket's frontend" 2018-05-04 04:09:21 +00:00
Mark Giles
6777c903a0 Automatically add Prometheus as a Grafana datasource
Assuming both Prometheus and Grafana are enabled, this change
configures Grafana such that it can use data collected by the
Prometheus server.

Partially-Implements: blueprint prometheus
Change-Id: I0290806d0c622b1de33cf7047f099795b4c780b9
2018-05-03 11:29:27 -04:00
Zuul
f27ca1a395 Merge "Add cap NET_ADMIN for ironic_dnsmasq" 2018-05-03 14:46:13 +00:00
Matt Riedemann
bb61590399 Remove ironic_host_manager usage
The baremetal scheduling options were deprecated
in Pike and the ironic_host_manager was deprecated
in Queens and has now been removed. Deployments
must use resource classes now for baremetal scheduling.

Depends-On: https://review.openstack.org/565805/
Change-Id: I92cab1c7b5dc8201b0a8a94287c75d6348ab4465
2018-05-02 12:07:44 -04:00