3550 Commits

Author SHA1 Message Date
Vladislav Belogrudov
7c448f39c2 Add Barbican section in Nova and Cinder to use disk encryption
Change-Id: I5bbd20a390f385a60ff2f330cc8fa7fb1117a42a
Closes-Bug: #1721292
2017-10-05 09:51:17 +00:00
Eduardo Gonzalez
56374206be Fix deployment with public TLS enabled
When deploying with tls enabled in public
endpoints, ansible modules fails due SSL certificates
are self-signed.

This change adds a new variable to allow customization
on which endpoints ansible should connect.
Defaults to admin because admin auth parameters defaults
to admin endpoint.

Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
Closes-Bug: #1720995
2017-10-05 08:36:34 +00:00
Bertrand Lallau
4cfe5f8de1 Fluentd: remove apache record_transformer filter
Record transformer is used to add a 'Severity' field in event.
This Field is unused and not generated for other programs, hence
It can be removed safely.

Change-Id: I62e461e5006516dcbd6c64e1770d6936f9a9d55c
2017-10-04 14:13:05 +00:00
Jenkins
709c6b7ba5 Merge "set glance_api_version = 2 in cinder configure" 2017-10-04 10:09:20 +00:00
Jenkins
109328be3e Merge "Specify 'become' to necessary tasks (general roles)" 2017-10-03 20:01:04 +00:00
Zuul
7ab8039806 Merge "Fix neutron invalid json file" 2017-10-03 03:52:06 +00:00
Jeffrey Zhang
068a45e39e Implement neutron firewall v2
Closes-Bug: #1719775
Depends-On: I76803f0f81260129a242e31e81f4f956c5a44ef9
Change-Id: I675c486dda17ce5d6d5a9f665ade904f42d06611
2017-10-03 10:36:56 +08:00
Zuul
dc19ee6605 Merge "fix wrong keystone_authtoken settings" 2017-10-02 16:13:01 +00:00
Dan Ardelean
e82855559d [HyperV] Add pull and precheck actions to nova-hyperv role
Closes-Bug: #1720777
Change-Id: Iebc619cea158685077928b54cb5c9332427bc596
2017-10-02 16:38:56 +03:00
Zuul
ecbb55117a Merge "Add fluentd enable option" 2017-10-02 09:33:00 +00:00
Pierre Hanselmann
c60293f6d6 Fix neutron invalid json file
Fix a missing comma in config.json when neutron_plugin_agent is set
to 'vmware_nsxv' or 'vmware_dvs'.

Closes-Bug: #1720380

Change-Id: I088f09a426a5435202176c45a77b1fbc19468f97
2017-09-29 16:53:28 +02:00
Christian Berendt
d1182186c2 Fix name of nova-hyperv play in site.yml
Change-Id: I2aec6ed398c3e0ddbb9646c4d033cc5625301817
2017-09-29 11:40:47 +02:00
Christian Berendt
15f0d7ae3a Add missing NOTE marker to site.yml
Change-Id: I53fea2f5629f0c1b64549c1bf6d07113d17dae81
2017-09-29 11:39:01 +02:00
Zuul
bdf704843a Merge "bind_host and bind_port are coming under `api_setting" 2017-09-29 03:57:26 +00:00
yong sheng gong
fcbb75ceae fix wrong keystone_authtoken settings
Change-Id: Idfc0b4c6f4f5c699cd999662a98862ccc5286a5f
Closes-bug: 1720179
2017-09-28 16:28:16 +00:00
Jenkins
558953c81b Merge "Add service plugin segment to neutron" 2017-09-28 11:59:21 +00:00
Christian Berendt
2e91cc197b Add service plugin segment to neutron
This also sorts the list service_plugins.

Change-Id: I28c12337e56060061a5db13c9a23f8d4b231b1fd
2017-09-28 09:33:26 +02:00
Tatsuma Matsuki
03354bc99e Add fluentd enable option
This change adds enable_fluentd option and enables some other log shippers
to be integrated. When enable_fluentd is "no", syslog server is also disabled.
Then, this change also adds syslog parameters to use a syslog server
prepared by users.

Change-Id: I7c83ef7fe30a6b9ab7385bcee953ad07e96b0a83
Implements: blueprint fluentd-enable-option
2017-09-28 04:36:36 +00:00
wanghongxu
1ec5f6e9a3 set glance_api_version = 2 in cinder configure
We need set glance_api_version = 2 in cinder
configure to support upload volume to image.

Change-Id: I6162b94833043edb06b434bc578f4caa47213b94
Closes-bug: #1720048
2017-09-28 11:17:09 +08:00
Jenkins
ef691c57cc Merge "Support HiPE (High-Performance Erlang) in RabbitMQ role" 2017-09-28 01:46:14 +00:00
Christian Berendt
108d60cb05 Support HiPE (High-Performance Erlang) in RabbitMQ role
Change-Id: I6394475f14bb4875be6d924591e4aea533ac2eb6
Closes-bug: #1621404
Depends-on: Ifc4f1d0f1b59b1789011e33c649033eb3cf5b010
2017-09-27 09:23:23 +02:00
Jenkins
39a2b59056 Merge "Copy certifications info octavia housekeeping and health manager container" 2017-09-27 03:47:54 +00:00
Jenkins
9b5bdb6576 Merge "common: fix ansible location" 2017-09-27 02:18:25 +00:00
Jenkins
b84a4427e5 Merge "Fix "key_repository is world readable: /etc/keystone/fernet-keys/" warning" 2017-09-26 19:17:36 +00:00
Zhangfei Gao
30f0dc10ce common: fix ansible location
When deploying on arm64, common reports error:
stat /usr/bin/ansible: no such file or directory

The reason is ansible is installed to /usr/local/bin/ansible
rather that /usr/bin/ansible
Fix the issue to call ansible directly, to consider both cases.

Change-Id: Ie90bd9c4d7d3a4b7b0aef884351cb58ed13ebd11
Signed-off-by: Kevin Zhao <kevin.zhao@linaro.org>
Signed-off-by: Zhangfei Gao <zhangfei.gao@linaro.org>
2017-09-26 18:54:19 +00:00
Jenkins
9e9dcd26c2 Merge "Add tacker dev mode" 2017-09-26 17:58:28 +00:00
Jenkins
9cdbae707b Merge "Simplify Openstack services configuration possibilities" 2017-09-26 15:49:22 +00:00
Jenkins
345eced125 Merge "Config my_ip to api_interface_address in cinder.conf" 2017-09-26 15:49:15 +00:00
Jenkins
9840f5c39d Merge "Add dev mode for glance" 2017-09-26 15:43:02 +00:00
Jenkins
e710a8e92e Merge "Remove too many inventory levels for iscsid" 2017-09-26 15:33:54 +00:00
Jenkins
1390c9e32c Merge "optimize the command format for murano start.yml" 2017-09-26 10:41:03 +00:00
Jenkins
9874b1b36c Merge "Horizon multidomain flag" 2017-09-26 10:39:31 +00:00
Jenkins
e7c6f25187 Merge "Use octavia account instead of admin in octavia" 2017-09-26 10:39:08 +00:00
Bertrand Lallau
4bce67c540 Fluentd: fix Mariadb mysqld_safe log not match
The following warning logs appears in fluentd container:

[warn]: pattern not match: "170908 21:34:12 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql/"

This patch fix it

Change-Id: I9820b8c5fd3456ba9c032fdf326c65632d147e50
Closes-Bug: #1708571
2017-09-26 11:37:51 +02:00
Christian Berendt
83bda89600 Increase vm.max_map_count on elasticsearch nodes
When using newer Elasticsearch versions you will receive the following error
when trying to start: elasticsearch | max virtual memory areas
vm.max_map_count [65530] likely too low, increase to at least [262144]

This could be solved by increasing the vm.max_map_count value via sysctl.

Reference: https://www.elastic.co/guide/en/elasticsearch/reference/current/vm-max-map-count.html

Change-Id: I9fa7b0222104d68bdfc838637acf5e36c479e6b2
Closes-bug: #1719528
2017-09-26 09:52:48 +02:00
Jeffrey Zhang
ef85df2335 Copy certifications info octavia housekeeping and health manager container
octavia-housekeeping container need certifications to create spare
amphore instances.

octavia-health-manager container need certifications to create stable
amphore instances.

Change-Id: I90b9c4c39f6542bb1ee5f40a8d0a39ae8d0ab2b0
Closes-Bug: #1719063
2017-09-26 15:42:57 +08:00
Jenkins
70bb073bd3 Merge "Allow Cinder to use ZFSSA iSCSI volume service" 2017-09-26 07:16:58 +00:00
Jenkins
afa98e04ee Merge "Wrong secure_proxy_ssl_header value in nova.conf.j2 template" 2017-09-26 07:12:56 +00:00
Jenkins
aa3d644f99 Merge "Fluentd: fix duplicate log level naming" 2017-09-26 07:11:36 +00:00
Jenkins
31ee451bec Merge "filesystem_store_datadir should not be set when external Ceph is used" 2017-09-26 07:08:25 +00:00
Jeffrey Zhang
b7bfe84a51 Use octavia account instead of admin in octavia
Closes-Bug: #1719503
Change-Id: I705de11614f2d086bd123ea5b3841f59b5a24666
2017-09-26 11:29:21 +08:00
Jeffrey Zhang
c18d05cfa6 Config my_ip to api_interface_address in cinder.conf
my_ip is used by iscsi_ip_address in cinder.conf. Configure it to
api_interface_address.

Change-Id: Ib9f9140668f807b26bdaec849fc0cef0a63a8ca0
Closes-Bug: #1719274
2017-09-25 23:29:00 +08:00
Jenkins
03da4f8735 Merge "Optimize the yaml format for Barbican check.yml" 2017-09-25 15:28:53 +00:00
goldyfruit
f82b6b5dc0 Wrong secure_proxy_ssl_header value in nova.conf.j2 template
The value set for "secure_proxy_ssl_header" should be
"HTTP_X_FORWARDED_PROTO" and not "X-Forwarded-Proto".

Change-Id: I7f4cc4871164ca9096a190101c179daa41e1ae9a
Closes-Bug: #1719325
2017-09-25 10:22:07 -04:00
Pierre Hanselmann
bd186a2e47 Horizon multidomain flag
Added horizon_keystone_multidomain flag. It can be now overriden
in globals.yml. Default set to False.

Change-Id: I6f8f261cf4b9779e57c2443ac219cdddb1731f52
2017-09-25 15:28:45 +02:00
Jenkins
fd1711cd76 Merge "Enable neutron fwaas dashboard dynamically" 2017-09-25 13:28:13 +00:00
Jenkins
6ef31cf973 Merge "Fluentd: reduce CPU and I/O consumption" 2017-09-25 13:15:49 +00:00
Jenkins
2eafc4ca27 Merge "Fix kolla-ansible genconfig for mariadb" 2017-09-25 12:37:33 +00:00
Jenkins
1b9acf0663 Merge "Make the pg and pgp value configurable" 2017-09-25 11:27:25 +00:00
Mark Goddard
de56340f86 Fix kolla-ansible genconfig for mariadb
For the genconfig command, master_host will not be defined as it is
defined dynamically in bootstrap.yml.

Co-Authored-By: Stig Telfer <stig@stackhpc.com>
Change-Id: Ib988c8e2de475e9b973fed2f7f752cb2500953c3
Closes-Bug: #1707856
2017-09-25 10:53:36 +01:00