11167 Commits

Author SHA1 Message Date
Zuul
5273828fae Merge "Remove support for Python 2 on the host" 2020-04-21 17:01:25 +00:00
Zuul
7a34f82a60 Merge "Fix monasca deployment due to monasca_log_dir" 2020-04-21 07:05:34 +00:00
Zuul
9f54c6fd1b Merge "Remove support for CentOS 7" 2020-04-20 16:57:53 +00:00
Zuul
95471c47cc Merge "Fix kibana deployment with openstack_cacert unset" 2020-04-20 16:19:04 +00:00
Mark Goddard
284f492861 Remove support for Python 2 on the host
Drops support for creating Python 2 virtualenvs in bootstrap-servers,
and looking for a python2 interpreter in the kolla-ansible script.

Also forces the use of Python 3 as the remote interpreter in CI on
Debian and Ubuntu hosts, since they typically symlink the unversioned
interpreter to python2.7.

Change-Id: Id0e977de381e7faafed738674a140ba36184727e
Partially-Implements: blueprint drop-py2-support
2020-04-20 16:18:31 +00:00
Zuul
bb6e23fb29 Merge "Add vitrage-persistor service" 2020-04-17 19:57:08 +00:00
Q.hongtao
d0b06f679b Add vitrage-persistor service
Kolla Ansible was missing vitrage-persistor service
required by Vitrage for data storage.

Depends on fixing availability of Kolla image.

Change-Id: I8158ba66b8b624f6bcb89da9c990a30a68b7187b
Depends-On: Id5e143636f9a81e7294b775f3d8b9134bee58054
Closes-Bug: #1869319
2020-04-17 15:34:46 +00:00
Radosław Piliszek
8bff82d50e Remove unused rgw_port ceph variable
It was missed in kolla-ceph removal in [1].

[1] 4e6fe7a6da4d5471cd0425c781f25f3e9567d3a0

Change-Id: Iacfce48f23dc5887c5f549a70250eee3e4e3f026
2020-04-17 16:41:30 +02:00
Zuul
6c73b863da Merge "Remove octavia user from admin project" 2020-04-17 13:05:17 +00:00
Zuul
e17ac13c6b Merge "OVN: Followup changes" 2020-04-17 10:47:06 +00:00
Zuul
fb00819e86 Merge "Add support for encrypting cinder api." 2020-04-17 10:45:00 +00:00
Xing Zhang
bb7e1e8660 Remove octavia user from admin project
It is unnecessary to add octavia user into admin project.
Octavia project does not require this action. Like other projects,
octavia user in service project with admin role is enough.

[1] https://docs.openstack.org/octavia/latest/install/install-ubuntu.html
[2] https://docs.openstack.org/octavia/latest/contributor/guides/dev-quick-start.html#production-deployment-walkthrough
[3] https://github.com/openstack/octavia/blob/master/devstack/plugin.sh

Closes-Bug: #1873176
Change-Id: I35d35177aaabfc6f0abc533a1f756b363bd02308
2020-04-17 09:50:33 +00:00
Zuul
7a193d1f06 Merge "Ansible lint: lines longer than 160 chars" 2020-04-17 09:29:00 +00:00
Zuul
7f199f9bce Merge "CI: Set post timeout to half hour" 2020-04-17 05:14:09 +00:00
Michal Nasiadka
ca380e6d30 OVN: Followup changes
Followup of last reviews from [1].

[1]: https://review.opendev.org/#/c/696841

Change-Id: I7085093b20e8848e09dc521ae9fbf120e909470d
2020-04-16 18:13:35 +02:00
Zuul
2ba903de0d Merge "CI: do not build images on aarch64" 2020-04-16 15:59:13 +00:00
Zuul
87984f5425 Merge "Add Ansible group check to prechecks" 2020-04-16 15:33:46 +00:00
Zuul
2e2672e753 Merge "Fix nova compute addition with limit" 2020-04-16 15:33:44 +00:00
Zuul
6cd0cfea36 Merge "[horizon] Move 'balance' HAProxy keyword" 2020-04-16 15:33:41 +00:00
Michal Nasiadka
4f8af713e1 CI: Set post timeout to half hour
Observed that a couple of jobs daily fail on post-timeout, when uploading
logs to Swift.

Change-Id: I4445ebafd3eaae2f83b31dd1fc7f3f07d9c5612f
2020-04-16 16:44:28 +02:00
Zuul
7f42813159 Merge "Refactor copy certificates task" 2020-04-16 14:03:37 +00:00
Zuul
b4686771b8 Merge "Fix service_mapped_to_host filter for common services" 2020-04-16 14:03:34 +00:00
Zuul
93ff86bcb9 Merge "Fix Octavia CA cert paths" 2020-04-16 14:03:32 +00:00
Michal Nasiadka
d403690b88 Ansible lint: lines longer than 160 chars
Change-Id: I500cc8800c412bc0e95edb15babad5c1189e6ee4
2020-04-16 15:59:06 +02:00
Zuul
b6801477db Merge "Support Neutron policy file in both .json and .yaml format" 2020-04-16 13:32:01 +00:00
Zuul
a679bf5c65 Merge "[haproxy-config] Fix missing servers in split cfg" 2020-04-16 12:47:33 +00:00
Zuul
a1793a2f97 Merge "Add cafile for ironic-neutron-agent" 2020-04-16 10:48:57 +00:00
zhangmeng
c8ada70747 Add support for encrypting cinder api.
Change-Id: I4673f436d8943e6fce7e579446c27ec8215b7346
2020-04-16 18:17:46 +08:00
Marcin Juszkiewicz
3d653038dc CI: do not build images on aarch64
We publish those images for a while.

Change-Id: Ifc157b43e87e4f77a1c70d98343bd0ef9cc0de79
2020-04-16 09:29:07 +00:00
Jason Anderson
5c760df3d5 [horizon] Move 'balance' HAProxy keyword
The "balance" keyword is not valid in a frontend section. From the
HAProxy documentation[1]:

balance <algorithm> [ <arguments> ]
balance url_param <param> [check_post [<max_wait>]]
  Define the load balancing algorithm to be used in a backend.
  May be used in sections :   defaults | frontend | listen | backend
                                 yes   |    no    |   yes  |   yes

When running HAProxy using the "split" template style, where a
frontend/backend pair are used instead of one listen section, HAProxy
will emit warnings for the Horizon config due to this.

[1]: https://www.haproxy.org/download/1.5/doc/configuration.txt

Closes-Bug: #1872540
Change-Id: I91cee275d91a51944298618493f4ea0cd80282cc
2020-04-16 09:25:18 +00:00
lixuehai
ea4505f17a Fix Octavia CA cert paths
This fixes Octavia in scenarios requiring providing
CA cert (self-signed, internally-signed).

Change-Id: I60b7ec85f4fd8bbacf5df0ab7ed9a00658c91871
Closes-Bug: #1872404
2020-04-16 11:11:46 +02:00
Zuul
975db2b2b4 Merge "OVN Support" 2020-04-15 20:51:57 +00:00
Zuul
155bd8d2aa Merge "Fix Designate not to use etcd coordination backend" 2020-04-15 15:50:37 +00:00
Scott Solkhon
92deddca88 Support Neutron policy file in both .json and .yaml format
Change-Id: I22a995195a1d12bb759cba9777527c23475124f2
2020-04-15 14:30:45 +01:00
Mark Goddard
3af28d2151 Fix nova compute addition with limit
Deploy a small cloud. Add one host to the compute group in the
inventory, and scale out:

$ kolla-ansible deploy --limit <new compute host>

The command succeeds, but creating an instance fails with the following:

    Host 'compute0' is not mapped to any cell

This happens because we only discover computes on the first host in the
cell's nova conductor group. If that host is not in the specified limit,
the discovery will not happen.

This change fixes the issue by running compute discovery when any ironic
or virtualised compute hosts are in the play batch, and delegating it to
a conductor.

Change-Id: Ie984806240d147add825ffa8446ae6ff55ca4814
Closes-Bug: #1869371
2020-04-14 19:36:49 +00:00
Jason Anderson
6d00236edb
[haproxy-config] Fix missing servers in split cfg
When using the split config style, all backends would be empty, which
meant that HAProxy was unable to serve any traffic. This turned out to
be due to a bad default in the split config template.

Closes-Bug: #1872545
Change-Id: I952e526e735e1d31445963f04d41d66bbdbfdee4
2020-04-14 13:36:57 -05:00
Zuul
cee03f4b00 Merge "[elasticsearch] Add migration for Kibana 6.x index" 2020-04-14 18:00:45 +00:00
James Kirsch
4d155d69cd Refactor copy certificates task
Refactor service configuration to use the copy certificates task. This
reduces code duplication and simplifies implementing encrypting backend
HAProxy traffic for individual services.

Change-Id: I0474324b60a5f792ef5210ab336639edf7a8cd9e
2020-04-14 17:26:19 +00:00
Mark Goddard
8cc58e3669 Fix service_mapped_to_host filter for common services
In Ibecac60d1417269bbe25a280996ca9de6e6d018f, the services in the common
role were marked as being mapped to the 'all' group, since the
'service_mapped_to_host' filter expects every service definition to have
either a 'group' or 'host_in_groups' field. While this allows the filter
to pass the common services without error, it will not actually show
them as being mapped to any hosts. This is because the filter uses the
'group_names' variable, which contains all of the groups that a host
belongs to, except the default 'all' group.

This change fixes the issue by returning True from
service_mapped_to_host when the service's group is 'all'.

Change-Id: I39c8416f5d30a535c1743f9c43434b7d2a382196
Related-Bug: #1868596
2020-04-14 14:15:54 +01:00
Zuul
3f6314215c Merge "[elasticsearch] Update config for 6.x" 2020-04-14 11:43:39 +00:00
Radosław Piliszek
3c234603a9 Fix Designate not to use etcd coordination backend
etcd via tooz does not support group membership required by
Designate coordination.
The best k-a can do is not to configure etcd in Designate.

Change-Id: I2f64f928e730355142ac369d8868cf9f65ca357e
Closes-bug: #1872205
Related-bug: #1840070
2020-04-13 17:33:02 +02:00
Zuul
969159cc17 Merge "Fix live migration to use migration int. address" 2020-04-12 06:14:09 +00:00
Zuul
ee21a7a503 Merge "Allow operators to use "ceilometer-upgrade" parameters" 2020-04-12 05:45:48 +00:00
Rafael Weingärtner
6fcccdae59 Allow operators to use "ceilometer-upgrade" parameters
Allow operators to use custom parameters with the ceilometer-upgrade
command. This is quite useful when using the dynamic pollster subsystem;
that sub-system provides flexibility to create and edit pollsters configs,
which affects gnocchi resource-type configurations. However, Ceilometer
uses default and hard-coded resource-type configurations; if one customizes
some of its default resource-types, he/she can get into trouble during
upgrades. Therefore, the only way to work around it is to use the
"--skip-gnocchi-resource-types" flag. This PR introduces a method for
operators to execute such customization, and many others if needed.

Depends-On: https://review.opendev.org/#/c/718190/
Change-Id: I92f0edba92c9e3707d89b3ff4033ac886b29cf6d
2020-04-11 14:09:06 +00:00
Zuul
b9f07bc3c4 Merge "Set mistral to use internalURL in admin-openrc.sh" 2020-04-11 10:39:40 +00:00
Zuul
573390303c Merge "CI: do 12 attempts to connect to test instance" 2020-04-10 20:17:06 +00:00
Marcin Juszkiewicz
bfd661a600 CI: tell Nova which CPU to emulate on AArch64
AArch64 does not have a way to get cpu features from libvirt.

Change-Id: Ieed404e17e8a9829f38c03f7ee7fdb3caa3919e8
2020-04-10 16:50:22 +00:00
Marcin Juszkiewicz
6f24582eb9 CI: do 12 attempts to connect to test instance
AArch64 needs a bit more time to boot testing instance. So give it more
time by doubling amount of connect attempts.

Change-Id: I87ca65691dfbac84349e8af24d2f36f1db1c8be1
2020-04-10 16:50:04 +00:00
Radosław Piliszek
20f39e4a36 Ignore .vscode/ in Git
This is the directory used by Visual Studio Code for customized
workspace preferences.

Change-Id: I8bf38a5b3b8a4fe89e6b0c611e8dcb4b9a9f3302
2020-04-10 15:55:42 +02:00
Xing Zhang
1763afc255
Set mistral to use internalURL in admin-openrc.sh
mistralclient osc plugin does not support cacert and insecure [1]
mistralclient interface support fixed in [2]

[1] https://bugs.launchpad.net/python-mistralclient/+bug/1715091
[2] https://review.opendev.org/#/q/topic:bug/1854339

Change-Id: I44726b12358bc3c5898ba952371fb838693aca2c
2020-04-10 21:20:29 +08:00