10566 Commits

Author SHA1 Message Date
Zuul
ef5691580c Merge "Improve admin-openrc" 2019-09-09 14:44:15 +00:00
chenxing
16d0d4c361 Update python_path for "source" install type
Both ubuntu source and binary install type support python3 now,
python_path should be updated.

Depends-On: https://review.opendev.org/675581
Partially Implements: blueprint python3-support

Change-Id: I4bf721b44220bde2d25d4d985f5ca411699a5a72
2019-09-09 16:06:23 +08:00
Zuul
69799ca1d6 Merge "Modernize the way of configuring Docker daemon" 2019-09-07 21:16:20 +00:00
Zuul
556f08b5c1 Merge "Fix Nova cell search" 2019-09-07 19:46:24 +00:00
Mark Goddard
8489a753ba Add [nova] section to ironic.conf
In the Train cycle, ironic added a [nova] section to its configuration.
This is used to configure access to Nova API, for sending power state
callbacks.

This change adds the [nova] section to ironic.conf.

Change-Id: Ib891af1db2a2c838c887e858ea0721f5e6a4fab0
Closes-Bug: #1843070
2019-09-06 17:00:21 +01:00
Mark Goddard
3da0531906 Fix removed and deprecated options in ironic.conf
The ironic configuration in ironic.conf uses several options which have
been removed in the Train cycle:

[glance] glance_api_servers was removed in https://review.opendev.org/#/c/665929.
[neutron] url was removed in https://review.opendev.org/#/c/672971.

We should use the endpoint catalog instead of specifying the endpoint
for both of these, and also ironic inspector. region_name and
valid_interfaces have been added for that purpose.

Other options are deprecated.

[conductor] api_url: Use [service_catalog] section to lookup ironic API
endpoint instead.

[inspector] enabled: No longer used.

Change-Id: If07c4ff9bfea7d780aeff5c3295a0ace7d10ecdc
Closes-Bug: #1843067
2019-09-06 16:55:37 +01:00
Q.hongtao
dd6a9d7d9f Fix misspell word
Change-Id: I124cba4bfe85e76f732ae618619594004a5c911f
2019-09-06 16:11:17 +08:00
Marcin Juszkiewicz
a5808ad8ba Modernize the way of configuring Docker daemon
Instead of changing Docker daemon command line let's change config
for Docker instead. In /etc/docker/daemon.json file as it should be.

Custom Docker options can be set with 'docker_custom_config' variable.

Old 'docker_custom_option' is still present but should be avoided.

Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I1215e04ec15b01c0b43bac8c0e81293f6724f278
2019-09-05 08:19:26 +00:00
Zuul
8661599b9e Merge "[nova] Fix service catalog lookup of Neutron endpoint" 2019-09-04 09:18:37 +00:00
Xing Zhang
f8c3dccd5c
Improve admin-openrc
add clear old environment
set openstack client to use internalURL
set manila client to use internalURL

Change-Id: I263fa11ff5439b28d63a6a9ce7ba460cb56fb8e2
2019-09-04 14:37:16 +08:00
Doug Szumski
7b636033ee Fix Nova cell search
The output from `nova-manage cell_v2 list_cells --verbose` contains
an extra column, stating whether the cell is enabled or not. This means
that the regex never matches, so existing_cells is always empty.

This fix updates the regex by adding a match group for this field which
may be used in a later change.

Unfortuately the CLI doesn't output in JSON format, which would make
this a lot less messy.

Closes-Bug: #1842460
Change-Id: Ib6400b33785f3ef674bffc9329feb3e33bd3f9a3
2019-09-03 18:12:14 +01:00
Zuul
92008433e5 Merge "Remove Heat environment file disabling deprecated plugins" 2019-09-03 15:23:44 +00:00
Manuel Rodriguez
1662a77b55 Add support to enable l3 port-forwarding plugin
Allows enabling neutron port forwarding plugin
and l3 extension to forward ports from floating
IP to a fixed neutron port.

Change-Id: Ic25c96a0ddcf4f69acbfb7a58acafec82c3b0aed
Implements: blueprint enable-l3-port-forwarding
2019-09-02 16:28:51 -04:00
Zuul
d6556adef4 Merge "Fix Zun Docker remote API host" 2019-09-02 18:14:34 +00:00
Pierre Riteau
c9d13858d6 Remove Heat environment file disabling deprecated plugins
Commit d68644386f5c159ac646f70883ecf1349c153c76 disabled these
deprecated plugins more than three years ago.

Change-Id: I2dd2a89a7aa2c4a54882a8b0aa8d23d874c0e4cc
Closes-Bug: #1839172
2019-09-02 19:13:57 +02:00
Zuul
cccc5c6f36 Merge "Set my_ip in ironic.conf" 2019-09-01 12:49:25 +00:00
Zuul
9aceea8ef3 Merge "Use secure websocket for nova serial console proxy when TLS enabled" 2019-09-01 12:47:04 +00:00
Joseph M
096555dcf2 [nova] Fix service catalog lookup of Neutron endpoint
nova.conf currently uses the [neutron] "url" parameter which has been
deprecated since 17.0.0. In multi-region environments this can
cause Nova to look up the Neutron endpoint for a different region.
Remove this parameter and set region_name and
valid_interfaces to allow the correct lookup to be performed.

Change-Id: I1bbc73728439a460447bc8edd264f9f2d3c814e0
Closes-Bug: #1836952
2019-08-30 13:14:59 -04:00
Jan Horstmann
870cb1beb2 Use net_default_mac in ansible/roles/ironic/templates/ironic_pxe_uefi.default.j2
Upstream ironic went from $net_default_ip to $net_default_mac in
ironic/drivers/modules/master_grub_cfg.txt with
https://review.opendev.org/#/c/578959/

This commit makes the same change for
ansible/roles/ironic/templates/ironic_pxe_uefi.default.j2

Using $net_default_ip breaks ironic standalone deployments with
[dhcp]dhcp_provider = none

Change-Id: I2ca9a66d2bdb0aab5cd9936c8be8206e6ade3bd5
Closes-Bug: 1842078
2019-08-30 16:12:33 +02:00
Will Szumski
94d824dd0e Use secure websocket for nova serial console proxy when TLS enabled
This resolves an issue where the web browser would complain that it
was trying to connect to insecure websocket when using HTTPS with
horizon.

Change-Id: Ib75cc2bc1b3811bc31badd5fda3db3ed0c59b119
Closes-Bug: #1841914
2019-08-29 11:02:28 +01:00
Will Szumski
a85c68a9fc Set my_ip in ironic.conf
Change-Id: Ic80dbe1f4f7289fe2c2143125a381cec4586f7ef
Closes-Bug: #1841908
2019-08-29 10:40:53 +01:00
Zuul
c3665aa327 Merge "docs: ceph-ansible usage, add note around ceph keys" 2019-08-28 09:54:17 +00:00
Zuul
91108c3fac Merge "Moves monasca-thresh java.io.tmpdir to existing docker volume" 2019-08-28 08:13:17 +00:00
Zuul
d191da6709 Merge "Fixes Monasca log transformer UTC offset exception" 2019-08-28 07:48:52 +00:00
Zuul
42aef5a50f Merge "Support configuration of trusted CA certificate file" 2019-08-28 07:48:51 +00:00
Zuul
74976bbec8 Merge "Add support for using custom Logstash patterns" 2019-08-28 07:48:49 +00:00
Zuul
f960a5b58e Merge "HAProxy backend connection limits" 2019-08-27 12:58:07 +00:00
Zuul
d8e961eeaa Merge "Wait for MariaDB to be accessible via HAProxy" 2019-08-27 12:58:06 +00:00
Zuul
d6e8394320 Merge "Check for CRITICAL, WARNING and ERROR log messages in CI" 2019-08-27 12:42:44 +00:00
Zuul
e8f17f5b7a Merge "Set default timeout to 60 seconds for docker stop" 2019-08-27 12:42:43 +00:00
Zuul
398f928e81 Merge "Remove stale nova-consoleauth variables" 2019-08-27 12:37:46 +00:00
Zuul
d68ed4f5cd Merge "[octavia] Add region-specific catalog lookups" 2019-08-27 12:37:45 +00:00
Zuul
b4379865f9 Merge "[blazar] Use database_address as default DB addr" 2019-08-27 12:14:05 +00:00
Zuul
8189143fe1 Merge "Remove invalid reference to Placement API" 2019-08-27 11:45:11 +00:00
Joseph M
51033d9b31 [octavia] Add region-specific catalog lookups
octavia.conf is missing configuration values required to do service
catalog lookups in multiple region environments. Without them Octavia
can try to contact a service in a different region than its own. Specify
region_name and endpoint_type for the glance, neutron, and nova services
to prevent this from happening.

Change-Id: I753cf443c1506bbd7b69fc47e2e0a9b39857509c
Closes-Bug: #1841479
2019-08-26 18:11:36 -04:00
Zuul
84044f1eac Merge "Use fluentd image labels" 2019-08-23 19:09:54 +00:00
Radosław Piliszek
c24dcf8a38 Fix Zun Docker remote API host
This makes WS (so e.g. console) always work with the way we
deploy Zun. Otherwise it used the first IP address.

Change-Id: Ib31c5944be2f6fa00cdf5da3e638a590e6bace40
Closes-bug: #1841243
Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-08-23 19:38:18 +02:00
Jason Anderson
0d93fa71d8
[blazar] Use database_address as default DB addr
The internal FQDN assumes that HAProxy is set up to route traffic to the
DB; other services default to the value of database_address.

Change-Id: I9a333a89adfa4f620f211c831d659b8d52e307d5
2019-08-23 10:37:26 -05:00
Doug Szumski
bcdd0dd257 Remove invalid reference to Placement API
The Placement API has moved out of the Nova role and is no
longer defined in `nova_services`.

Change-Id: I7b9601334c7e4c6b075a233557669ad414556e09
2019-08-23 14:27:34 +01:00
Michal Nasiadka
837f19a770 docs: ceph-ansible usage, add note around ceph keys
ceph-ansible by default generates what we call nova.keyring as
openstack.keyring - adding a note to not confuse users.

Change-Id: I3992a037ab8e7947e35521b5c721a89bd954fdcd
2019-08-23 09:27:04 +00:00
Krzysztof Klimonda
b0ecd8b67c Implement TLS encryption for internal endpoints
This review is the first one in a series of patches and it introduces an
optional encryption for internal openstack endpoints, implementing part
of the add-ssl-internal-network spec.

Change-Id: I6589751626486279bf24725f22e71da8cd7f0a43
2019-08-22 16:39:21 -07:00
Zuul
af77a88775 Merge "Don't assume etcd group exists in baremetal role" 2019-08-22 18:28:13 +00:00
Mark Goddard
331d373b99 Don't assume etcd group exists in baremetal role
The baremetal role does not currently assume too much about the
inventory, and in kayobe the seed is deployed using a very minimal
inventory.

Icf3f01516185afb7b9f642407b06a0204c36ecbe added a reference to the etcd
group in the baremetal role, which causes kayobe seed deployment to fail
with the following error:

    AnsibleUndefinedVariable: 'dict object' has no attribute 'etcd'

This change defaults the group lookup to an empty list.

Change-Id: Ib3252143a97652c5cf70b56cbfd7c7ce69f93a55
Closes-Bug: #1841073
2019-08-22 16:30:56 +01:00
Michal Nasiadka
4180bee020 Use fluentd image labels
In order to orchestrate smooth transition to fluentd 0.14.x
aka 1.0 stable branch aka td-agent 3
from td-agent repository - use image labels (fluentd_version
and fluentd_binary).

Depends-On: https://review.opendev.org/676411
Change-Id: Iab8518c34ef876056c6abcdb5f2e9fc9f1f7dbdd
2019-08-22 12:36:51 +00:00
Mark Goddard
67c59b1cf7 Remove stale nova-consoleauth variables
Nova-consoleauth support was removed in
I099080979f5497537e390f531005a517ab12aa7a, but these variables were
left.

Change-Id: I1ce1631119bba991225835e8e409f11d53276550
2019-08-22 12:25:18 +01:00
Zuul
e25d915dd9 Merge "Fix HAProxy check for MariaDB" 2019-08-22 10:33:14 +00:00
Zuul
ea4d672113 Merge "Add --force to ceph mgr dashboard enablement" 2019-08-22 10:27:29 +00:00
Michal Nasiadka
361f61d4a9 Add --force to ceph mgr dashboard enablement
Sometimes mgr dashboard enablement fails with following message:
"Error ENOENT: all mgr daemons do not support module 'dashboard',
pass --force to force enablement"

Change-Id: Ie7052dbdccb855e02da849dbc207b5d1778e2c82
2019-08-21 14:31:45 +00:00
ljhuang
74edd54b67 Add meta for some roles
The meta is missing, this PS to add it

Change-Id: Ib7e39820a48659202ddd1c1f91b2e8c3f0529443
2019-08-21 07:41:45 +00:00
Zuul
e8212a3080 Merge "Fix import of horizon custom_local_settings on python3" 2019-08-20 20:15:03 +00:00