10364 Commits

Author SHA1 Message Date
Xing Zhang
aa45d379a0
Add DNS to subjectAltName in Self-Signed Certificate
According to [1]:
IP address used in the IP options can be in either IPv4 or IPv6 format.
DNS can be used for IPv4 only, IPv6 only and dual stack.

Also should have FQDNs in subjectAltName per current[2].

[1] https://www.openssl.org/docs/man1.0.2/man5/x509v3_config.html
[2] https://support.google.com/chrome/a/answer/7391219

Partially-Implements: blueprint ipv6-control-plane

Change-Id: Ibad8f8c734984aeda8ddac1a5db39875bc242bbf
2019-09-11 11:40:12 +08:00
Zuul
15ce0e0600 Merge "Configure Zun for Placement (Train+)" 2019-09-10 17:51:49 +00:00
liyingjun
04975ceaf1 Fixes default volumes config for masakari-instancemonitor
Change-Id: Idee76f6da357c600d52b4280d29b685ed443191a
2019-09-10 11:34:02 +08:00
Hongbin Lu
0f5e065855 Configure Zun for Placement (Train+)
After the integration with placement [1], we need to configure how
zun-compute is going to work with nova-compute.

* If zun-compute and nova-compute run on the same compute node,
  we need to set 'host_shared_with_nova' as true so that Zun
  will use the resource provider (compute node) created by nova.
  In this mode, containers and VMs could claim allocations against
  the same resource provider.
* If zun-compute runs on a node without nova-compute, no extra
  configuration is needed. By default, each zun-compute will create
  a resource provider in placement to represent the compute node
  it manages.

[1] https://blueprints.launchpad.net/zun/+spec/use-placement-resource-management

Change-Id: I2d85911c4504e541d2994ce3d48e2fbb1090b813
2019-09-10 01:47:15 +00:00
Zuul
21f22a6da9 Merge "Fix misspell word" 2019-09-09 14:56:38 +00:00
Zuul
ef5691580c Merge "Improve admin-openrc" 2019-09-09 14:44:15 +00:00
Zuul
69799ca1d6 Merge "Modernize the way of configuring Docker daemon" 2019-09-07 21:16:20 +00:00
Zuul
556f08b5c1 Merge "Fix Nova cell search" 2019-09-07 19:46:24 +00:00
Q.hongtao
dd6a9d7d9f Fix misspell word
Change-Id: I124cba4bfe85e76f732ae618619594004a5c911f
2019-09-06 16:11:17 +08:00
Marcin Juszkiewicz
a5808ad8ba Modernize the way of configuring Docker daemon
Instead of changing Docker daemon command line let's change config
for Docker instead. In /etc/docker/daemon.json file as it should be.

Custom Docker options can be set with 'docker_custom_config' variable.

Old 'docker_custom_option' is still present but should be avoided.

Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I1215e04ec15b01c0b43bac8c0e81293f6724f278
2019-09-05 08:19:26 +00:00
Zuul
8661599b9e Merge "[nova] Fix service catalog lookup of Neutron endpoint" 2019-09-04 09:18:37 +00:00
Xing Zhang
f8c3dccd5c
Improve admin-openrc
add clear old environment
set openstack client to use internalURL
set manila client to use internalURL

Change-Id: I263fa11ff5439b28d63a6a9ce7ba460cb56fb8e2
2019-09-04 14:37:16 +08:00
Doug Szumski
7b636033ee Fix Nova cell search
The output from `nova-manage cell_v2 list_cells --verbose` contains
an extra column, stating whether the cell is enabled or not. This means
that the regex never matches, so existing_cells is always empty.

This fix updates the regex by adding a match group for this field which
may be used in a later change.

Unfortuately the CLI doesn't output in JSON format, which would make
this a lot less messy.

Closes-Bug: #1842460
Change-Id: Ib6400b33785f3ef674bffc9329feb3e33bd3f9a3
2019-09-03 18:12:14 +01:00
Zuul
92008433e5 Merge "Remove Heat environment file disabling deprecated plugins" 2019-09-03 15:23:44 +00:00
Manuel Rodriguez
1662a77b55 Add support to enable l3 port-forwarding plugin
Allows enabling neutron port forwarding plugin
and l3 extension to forward ports from floating
IP to a fixed neutron port.

Change-Id: Ic25c96a0ddcf4f69acbfb7a58acafec82c3b0aed
Implements: blueprint enable-l3-port-forwarding
2019-09-02 16:28:51 -04:00
Zuul
d6556adef4 Merge "Fix Zun Docker remote API host" 2019-09-02 18:14:34 +00:00
Pierre Riteau
c9d13858d6 Remove Heat environment file disabling deprecated plugins
Commit d68644386f5c159ac646f70883ecf1349c153c76 disabled these
deprecated plugins more than three years ago.

Change-Id: I2dd2a89a7aa2c4a54882a8b0aa8d23d874c0e4cc
Closes-Bug: #1839172
2019-09-02 19:13:57 +02:00
Zuul
cccc5c6f36 Merge "Set my_ip in ironic.conf" 2019-09-01 12:49:25 +00:00
Zuul
9aceea8ef3 Merge "Use secure websocket for nova serial console proxy when TLS enabled" 2019-09-01 12:47:04 +00:00
Joseph M
096555dcf2 [nova] Fix service catalog lookup of Neutron endpoint
nova.conf currently uses the [neutron] "url" parameter which has been
deprecated since 17.0.0. In multi-region environments this can
cause Nova to look up the Neutron endpoint for a different region.
Remove this parameter and set region_name and
valid_interfaces to allow the correct lookup to be performed.

Change-Id: I1bbc73728439a460447bc8edd264f9f2d3c814e0
Closes-Bug: #1836952
2019-08-30 13:14:59 -04:00
Jan Horstmann
870cb1beb2 Use net_default_mac in ansible/roles/ironic/templates/ironic_pxe_uefi.default.j2
Upstream ironic went from $net_default_ip to $net_default_mac in
ironic/drivers/modules/master_grub_cfg.txt with
https://review.opendev.org/#/c/578959/

This commit makes the same change for
ansible/roles/ironic/templates/ironic_pxe_uefi.default.j2

Using $net_default_ip breaks ironic standalone deployments with
[dhcp]dhcp_provider = none

Change-Id: I2ca9a66d2bdb0aab5cd9936c8be8206e6ade3bd5
Closes-Bug: 1842078
2019-08-30 16:12:33 +02:00
Will Szumski
94d824dd0e Use secure websocket for nova serial console proxy when TLS enabled
This resolves an issue where the web browser would complain that it
was trying to connect to insecure websocket when using HTTPS with
horizon.

Change-Id: Ib75cc2bc1b3811bc31badd5fda3db3ed0c59b119
Closes-Bug: #1841914
2019-08-29 11:02:28 +01:00
Will Szumski
a85c68a9fc Set my_ip in ironic.conf
Change-Id: Ic80dbe1f4f7289fe2c2143125a381cec4586f7ef
Closes-Bug: #1841908
2019-08-29 10:40:53 +01:00
Zuul
c3665aa327 Merge "docs: ceph-ansible usage, add note around ceph keys" 2019-08-28 09:54:17 +00:00
Zuul
91108c3fac Merge "Moves monasca-thresh java.io.tmpdir to existing docker volume" 2019-08-28 08:13:17 +00:00
Zuul
d191da6709 Merge "Fixes Monasca log transformer UTC offset exception" 2019-08-28 07:48:52 +00:00
Zuul
42aef5a50f Merge "Support configuration of trusted CA certificate file" 2019-08-28 07:48:51 +00:00
Zuul
74976bbec8 Merge "Add support for using custom Logstash patterns" 2019-08-28 07:48:49 +00:00
Zuul
f960a5b58e Merge "HAProxy backend connection limits" 2019-08-27 12:58:07 +00:00
Zuul
d8e961eeaa Merge "Wait for MariaDB to be accessible via HAProxy" 2019-08-27 12:58:06 +00:00
Zuul
d6e8394320 Merge "Check for CRITICAL, WARNING and ERROR log messages in CI" 2019-08-27 12:42:44 +00:00
Zuul
e8f17f5b7a Merge "Set default timeout to 60 seconds for docker stop" 2019-08-27 12:42:43 +00:00
Zuul
398f928e81 Merge "Remove stale nova-consoleauth variables" 2019-08-27 12:37:46 +00:00
Zuul
d68ed4f5cd Merge "[octavia] Add region-specific catalog lookups" 2019-08-27 12:37:45 +00:00
Zuul
b4379865f9 Merge "[blazar] Use database_address as default DB addr" 2019-08-27 12:14:05 +00:00
Zuul
8189143fe1 Merge "Remove invalid reference to Placement API" 2019-08-27 11:45:11 +00:00
Joseph M
51033d9b31 [octavia] Add region-specific catalog lookups
octavia.conf is missing configuration values required to do service
catalog lookups in multiple region environments. Without them Octavia
can try to contact a service in a different region than its own. Specify
region_name and endpoint_type for the glance, neutron, and nova services
to prevent this from happening.

Change-Id: I753cf443c1506bbd7b69fc47e2e0a9b39857509c
Closes-Bug: #1841479
2019-08-26 18:11:36 -04:00
Zuul
84044f1eac Merge "Use fluentd image labels" 2019-08-23 19:09:54 +00:00
Radosław Piliszek
c24dcf8a38 Fix Zun Docker remote API host
This makes WS (so e.g. console) always work with the way we
deploy Zun. Otherwise it used the first IP address.

Change-Id: Ib31c5944be2f6fa00cdf5da3e638a590e6bace40
Closes-bug: #1841243
Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-08-23 19:38:18 +02:00
Jason Anderson
0d93fa71d8
[blazar] Use database_address as default DB addr
The internal FQDN assumes that HAProxy is set up to route traffic to the
DB; other services default to the value of database_address.

Change-Id: I9a333a89adfa4f620f211c831d659b8d52e307d5
2019-08-23 10:37:26 -05:00
Doug Szumski
bcdd0dd257 Remove invalid reference to Placement API
The Placement API has moved out of the Nova role and is no
longer defined in `nova_services`.

Change-Id: I7b9601334c7e4c6b075a233557669ad414556e09
2019-08-23 14:27:34 +01:00
Michal Nasiadka
837f19a770 docs: ceph-ansible usage, add note around ceph keys
ceph-ansible by default generates what we call nova.keyring as
openstack.keyring - adding a note to not confuse users.

Change-Id: I3992a037ab8e7947e35521b5c721a89bd954fdcd
2019-08-23 09:27:04 +00:00
Zuul
af77a88775 Merge "Don't assume etcd group exists in baremetal role" 2019-08-22 18:28:13 +00:00
Mark Goddard
331d373b99 Don't assume etcd group exists in baremetal role
The baremetal role does not currently assume too much about the
inventory, and in kayobe the seed is deployed using a very minimal
inventory.

Icf3f01516185afb7b9f642407b06a0204c36ecbe added a reference to the etcd
group in the baremetal role, which causes kayobe seed deployment to fail
with the following error:

    AnsibleUndefinedVariable: 'dict object' has no attribute 'etcd'

This change defaults the group lookup to an empty list.

Change-Id: Ib3252143a97652c5cf70b56cbfd7c7ce69f93a55
Closes-Bug: #1841073
2019-08-22 16:30:56 +01:00
Michal Nasiadka
4180bee020 Use fluentd image labels
In order to orchestrate smooth transition to fluentd 0.14.x
aka 1.0 stable branch aka td-agent 3
from td-agent repository - use image labels (fluentd_version
and fluentd_binary).

Depends-On: https://review.opendev.org/676411
Change-Id: Iab8518c34ef876056c6abcdb5f2e9fc9f1f7dbdd
2019-08-22 12:36:51 +00:00
Mark Goddard
67c59b1cf7 Remove stale nova-consoleauth variables
Nova-consoleauth support was removed in
I099080979f5497537e390f531005a517ab12aa7a, but these variables were
left.

Change-Id: I1ce1631119bba991225835e8e409f11d53276550
2019-08-22 12:25:18 +01:00
Zuul
e25d915dd9 Merge "Fix HAProxy check for MariaDB" 2019-08-22 10:33:14 +00:00
Zuul
ea4d672113 Merge "Add --force to ceph mgr dashboard enablement" 2019-08-22 10:27:29 +00:00
Michal Nasiadka
361f61d4a9 Add --force to ceph mgr dashboard enablement
Sometimes mgr dashboard enablement fails with following message:
"Error ENOENT: all mgr daemons do not support module 'dashboard',
pass --force to force enablement"

Change-Id: Ie7052dbdccb855e02da849dbc207b5d1778e2c82
2019-08-21 14:31:45 +00:00
ljhuang
74edd54b67 Add meta for some roles
The meta is missing, this PS to add it

Change-Id: Ib7e39820a48659202ddd1c1f91b2e8c3f0529443
2019-08-21 07:41:45 +00:00