9251 Commits

Author SHA1 Message Date
Liping Mao (limao)
735d085bc7 Fix redis sentinel change myid every time when it restarted
If you use COPY_ALWAYS, kolla will overwrite /etc/redis/redis.conf.
But Redis Sentinel will store myid in this file. So when it restart,
Redis Sentinel will regenerate new myid every time. Redis Sentinel
cluster will see more and more sentinel, This patch use hash value
with hostname as sentinel myid.

Change-Id: I6d9403231e41baac177f29c58e67ba605795385d
Closes-bug: #1788179
2018-08-23 14:34:28 +08:00
Zuul
eb249b4fea Merge "add trove policy file customization" 2018-08-20 18:08:00 +00:00
Zuul
511e3d2389 Merge "Make source jobs voting and gating" 2018-08-20 09:38:56 +00:00
Zuul
1a6d28e756 Merge "Explicitly specify endpoint type during Monasca registration" 2018-08-20 08:43:39 +00:00
wu.chunyang
69bc7b4ee2 add trove policy file customization
now,the trove does not support policy customization.
this ps to add it.

Change-Id: I32d62d0293ddf63572cf754a7108ed74f94b216a
2018-08-20 04:28:06 +00:00
Doug Szumski
ea5a7dd300 Explicitly specify endpoint type during Monasca registration
Monasca defaults to using the public endpoint to register
Monasca endpoints which is bad practice and doesn't work on
some deployments. This change uses the admin interface by
default.

Change-Id: Ia9c5e041e71867fe72aad43e1344cd2107652d7d
Co-Authored-By: Mark Goddard <mark@stackhpc.com>
Closes-Bug: #1787610
2018-08-17 16:46:01 +01:00
Eduardo Gonzalez
f5e83cedb4 Temporary ignore B303 in bandit tests
Revert this change once the insecure usages are fixed.

Change-Id: Id7e8c9fe72db1b6f123eca540e09f77ddee2f242
2018-08-17 15:04:18 +00:00
Zuul
144b3ecb03 Merge "Fix etcd when Kuryr is disabled" 2018-08-15 15:54:10 +00:00
Mark Goddard
9322db0ed2 Make source jobs voting and gating
As discussed in Kolla IRC meeting 26th July 2018 [1].

[1]
http://eavesdrop.openstack.org/meetings/kolla/2018/kolla.2018-07-25-15.00.log.html#l-77

Change-Id: I6fc46658a9516e44843f31a308504534a6b93d8d
2018-08-15 16:51:09 +01:00
Zuul
fb6c6f10d9 Merge "Fixes bind9 restarting when no designate_forwarders_addresses" 2018-08-15 15:36:31 +00:00
Zuul
a018e60c2a Merge "[prometheus-alertmanager] use template/first_found instead of merge_yaml." 2018-08-15 13:36:05 +00:00
Zuul
659dd21161 Merge "Fix cloudkitty mispelling" 2018-08-15 10:37:34 +00:00
Zuul
acb72ddbe1 Merge "Fix prechecks for adding a new haproxy node" 2018-08-15 09:56:20 +00:00
Ha Manh Dong
9ae2ca6323 Fix cloudkitty mispelling
Change-Id: Icc949ce71fb2788d8aa91346bf8559c2c11bcb2c
Close-Bug: #1787097
2018-08-15 13:25:47 +07:00
Eduardo Gonzalez
fae046ece8 Fixes bind9 restarting when no designate_forwarders_addresses
When deploying designate if no designate_forwarders_addresses
is provided, bind9 container keeps restarting due an invalid(empty)
forwarder addresses is set in named.conf

Change-Id: I7d309eb077243435dd2038629074251abec7d3e1
Closes-Bug: #1787092
2018-08-15 08:24:48 +02:00
Zuul
0a2ce9a93c Merge "Use lbproxy instead of lbagent in neutron when deploy Octavia" 2018-08-14 06:42:02 +00:00
Zuul
9a1cbdcb46 Merge "Remove keystone version in tacker.conf" 2018-08-14 01:49:13 +00:00
Zuul
d4fcfdc980 Merge "Fix kolla_docker ansible-doc examples" 2018-08-14 01:48:20 +00:00
Cong Ha Minh
438ae3b640 Use lbproxy instead of lbagent in neutron when deploy Octavia
Disable neutron-lbaas-agent and use lbaasv2-proxy  when enable octavia.
Use keystone-auth v3 and internal endpoint for lbaasv2 plugin.

Change-Id: I69e8436f3722cf99644457323b71b94dc9036bb9
Co-Authored-By: Hieu LE <hieulq2@viettel.com.vn>
Closes-Bug: #1756771
Closes-Bug: #1738115
2018-08-13 14:08:52 +05:30
Zuul
0cc8d65a63 Merge "fix sahara_api is always restarting" 2018-08-13 08:00:27 +00:00
Zuul
e9b089d2cd Merge "Save targetcli configuration to a volume for container upgrades" 2018-08-13 07:09:28 +00:00
Zuul
749832dd51 Merge "Fix ceilometer bootstrap" 2018-08-13 07:02:41 +00:00
wu.chunyang
3fe57abeb2 fix sahara_api is always restarting
shara_api need auth_url arguments in keystone_authtoken group.
follow the configure document[0], the auth_url should under
trustee group. but the keystone use default "keystone_authtoken "
group to authenticate,if we wanna use trustee group to authenticate,
we need add "auth_section=trustee" under keystone_authtoken group
,when add this , the trustee group also need auth_type which sahara
have not register into oslo_config.when add to register,the username may
hardcode[1],so i think the best way to reslove this problem is to
add auth_url under keystone_authtoken

[0]https://docs.openstack.org/sahara/latest/configuration/descriptionconfig.html
[1]d60a3b152b/sahara/utils/openstack/keystone.py (L41)

Change-Id: I7e94cf56fa38f01e2b3d93303f8192cb66ba76ab
2018-08-10 15:24:55 +00:00
wu.chunyang
bdaa2021a6 Monasca API uses new config file name
fix monasca api warning,the new config file name is api.conf

Change-Id: Iabfbeab45d4e16602781d5fdf1ff0b2b67168d77
Closes-Bug: #1784656
2018-08-10 06:28:45 +00:00
Eduardo Gonzalez
7d263e20cf Remove keystone version in tacker.conf
Tacker is failing registering VIM monitoring
into mistral because the v3 in the auth url.

The auth url is being used auth_url + '/v3' in the code,
ending in a http://url:35357/v3/v3

210d8f93bb/tacker/nfvo/nfvo_plugin.py (L93)


Change-Id: If5abbee1377ecdb2913a42bdfa77e7fbbfbe9367
2018-08-09 15:17:25 +00:00
Eduardo Gonzalez
2e7da7a38f Fix kolla_docker ansible-doc examples
Missing the module name in the examples.

Change-Id: I7a60f92bd163688401ab5dd0f6cc9464ae934356
2018-08-09 17:07:03 +02:00
Zuul
f3e2ab217f Merge "Add ResellerAdmin role for ceph-rgw" 2018-08-09 09:54:08 +00:00
Zuul
aebddc90f8 Merge "Clear all l3 related namespace before starting neutron-l3-agent only when l3_ha is enable" 2018-08-09 07:44:50 +00:00
Zuul
21b3774270 Merge "Disable the ntp service when bootstrap-servers" 2018-08-09 06:53:01 +00:00
Jorge Niedbalski
19ec40170f [prometheus-alertmanager] use template/first_found instead of merge_yaml.
Change https://review.openstack.org/#/c/571826/4/
introduced the usage of merge_yaml for rendering the
prometheus-alertmanager.yml configuration.

However the merge_yaml module doesn't do a deep copy of >=
second level properties, so it doesn't works for
most configurations.

Bug: #1786077
Change-Id: I35297c6e2a3800582fb1fd3782a5d93558562b1d
Signed-off-by: Jorge Niedbalski <jorge.niedbalski@linaro.org>
2018-08-08 12:32:24 -04:00
Farid Da Encarnacao
353230a17e Clear all l3 related namespace before starting neutron-l3-agent only when l3_ha is enable
If we are not using l3 ha mode, it’s not necessary to delete the namespaces related to l3. It will speed up the start of the neutron l3 agent.

Change-Id: I78f6d927a78e8f9e4ed855e4b6d1362bdfc6b985
Closes-Bug: #1785880
2018-08-08 10:34:27 -04:00
Zuul
cd03e963c6 Merge "zun: set docker api version to 1.24" 2018-08-08 11:29:57 +00:00
Zuul
dc99fddc33 Merge "Deprecate auth_uri option" 2018-08-08 10:23:56 +00:00
Xinliang Liu
943e41d2cb Add ResellerAdmin role for ceph-rgw
ResellerAdmin role is used to give users object storage administration role
in their projects.

It is required to pass object storage quotas tests[1] of DefCore (OpenStack
Powered) certification test suite.

[1] tempest.api.object_storage.test_account_quotas*
Related-Bug: #1700729

Change-Id: Id976827aa7da271e54b77476f175f06bd1a00cc8
2018-08-08 14:10:10 +08:00
Eduardo Gonzalez
9b05c94266 Split zuul.yaml into multiple files
With the current increase of zuul jobs and
service testing, is easier to maintain and
control what changes are done in different files.

Ideally jobs.yaml would be split into multiple files,
in example per distro, install type, aio or multinode,
etc

Change-Id: I78d3f1f00f96ef3042e94bba6b19e61d7fff4203
2018-08-07 23:06:52 +02:00
Zuul
8247b6f3e4 Merge "Stabilise Bifrost CI job" 2018-08-07 11:29:03 +00:00
Zuul
3848ad8c1f Merge "Add elasticsearch port" 2018-08-07 09:49:54 +00:00
Zuul
3fe204afd2 Merge "Fix ironic inspector dnsmasq listening interface" 2018-08-07 07:31:28 +00:00
ZhongShengping
ae246945a6 Deprecate auth_uri option
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.

[1]https://review.openstack.org/#/c/508522/

Co-Authored-By: confi-surya <singh.surya64mnnit@gmail.com>
Change-Id: Ifd8527d404f1df807ae8196eac2b3849911ddc26
Closes-Bug: #1761907
2018-08-07 11:58:23 +05:30
Zuul
e9981b7ba8 Merge "Allow 400 response when creating kibana ES index" 2018-08-06 09:11:54 +00:00
Zuul
70abec9e77 Merge "Update elasticsearch and kibana version to 5.x" 2018-08-06 09:11:53 +00:00
Mark Goddard
ea2cda217e Fix ironic inspector dnsmasq listening interface
The variable 'ironic_dnsmasq_interface' is used to configure the interface
used by the ironic inspector dnsmasq service for DHCP on the inspection
network. It is being used correctly in inspector.conf, but not in the
dnsmasq configuration file, which uses api_interface. This change modifies
the dnsmasq configuration file to also use ironic_dnsmasq_interface.

Change-Id: I7670544f4bc41c93ac1d081486502f9ffb8f2286
Closes-Bug: #1785574
2018-08-06 09:26:14 +01:00
Zuul
dda0e3d960 Merge "fix aodh warning" 2018-08-06 01:45:28 +00:00
Zuul
b8d7750cd6 Merge "Add Cinder credentials to ironic.conf" 2018-08-04 13:15:55 +00:00
Zuul
3c08f229a1 Merge "Added kolla_inspector_extra_kernel_options" 2018-08-04 10:40:29 +00:00
Mark Goddard
76c83a4096 Allow 400 response when creating kibana ES index
If the index already exists, kibana will respond with a 400 error. This
is required to support reconfigure and upgrade of kibana.

Change-Id: Ieee6d636fe81692dffb886f917b8398df10a525f
2018-08-03 12:50:21 +01:00
Kevin Tibi
c408afbae7 Update elasticsearch and kibana version to 5.x
Change the path for kibana binary and add upgrade tasks for
elasticsearch [1].

[1] https://www.elastic.co/guide/en/elasticsearch/reference/5.0/restart-upgrade.html

Depends-On: I8ed60eab2c15ae966960bcbeadb7aa25fece83a5
Change-Id: I9f566c0cb808c905736cc4090539672863260ad5
Implements: bp-elasticsearch-upgrade
2018-08-03 12:50:16 +01:00
Zuul
d368cc2de8 Merge "Remove the outdated note information" 2018-08-03 10:46:59 +00:00
Zuul
fb708ccc0e Merge "Add check to ansible argument_spec" 2018-08-03 10:46:58 +00:00
Will Miller
9500783551 Add Cinder credentials to ironic.conf
Ironic requires the Keystone credentials to communicate with Cinder if
booting from volume.

Change-Id: Id9a90d986e391e84c8ad918af371a5aef33a3524
Closes-Bug: #1785201
2018-08-03 09:50:34 +00:00