242 Commits

Author SHA1 Message Date
Duong Ha-Quang
cc2e3743bf Prevent cinder conf from copy nfs_shares to unrelated nodes
Prevent cinder conf from copy nfs_shares to all nodes instead of
just cinder-volume.

Change-Id: I4f94b6c0ca8b628c1babee7fff0b66fb5a8df257
Closes-Bug: #1713010
2018-01-02 14:53:34 +07:00
Zuul
48e577ec59 Merge "Enable nfs driver volume snapshots by default" 2017-12-14 08:17:09 +00:00
Zuul
a9b8a392ce Merge "Restart services after a change in the external ceph configuration" 2017-12-13 17:58:43 +00:00
Zuul
9e62641cd2 Merge "Move Cinder backend passwords to passwords.yml" 2017-12-13 17:45:43 +00:00
Vladislav Belogrudov
962a886e35 Enable nfs driver volume snapshots by default
Change-Id: I36d7d62514416104c1f2f36cbd29c26c34c0d20d
Closes-Bug: #1733304
2017-12-06 12:38:13 +00:00
Vladislav Belogrudov
4829ed2c87 Move Cinder backend passwords to passwords.yml
Move Hitachi NAS and Oracle ZFSSA passwords
to /etc/kolla/passwords.yml

Change-Id: I1c94c45701fda5430b5d5a88c719db13d1956b11
Closes-Bug: #1733565
2017-12-06 15:29:28 +03:00
Zuul
9b48099441 Merge "Add support for hybrid messaging backends" 2017-11-28 19:06:49 +00:00
Andrew Smith
fd1d3af0df Add support for hybrid messaging backends
This commit separates the messaging rpc and notify transports in order
to support separate and different oslo.messaging backends

This patch:
* add rpc and notify variables
* update service role conf templates
* add example to globals.yaml
* add release note

Implements: blueprint hybrid-messaging
Change-Id: I34691c2895c8563f1f322f0850ecff98d11b5185
2017-11-22 14:09:40 -05:00
Paul Bourke
a80f47da36 Add a precheck to ensure Cinder backend enabled
Make sure at least one Cinder backend is enabled if enable_cinder=True

Change-Id: Ie40f4832f7860fcbc7074b61df9f49fcaed2471b
2017-11-22 10:30:05 +00:00
Christian Berendt
6039ad46f9 Restart services after a change in the external ceph configuration
Change-Id: I6b6114e85a4df82458c441f471929513c2526c23
2017-11-02 08:43:43 +01:00
Jenkins
d474987ad9 Merge "Fix deployment with public TLS enabled" 2017-10-12 08:41:00 +00:00
Christian Berendt
a055e0261f Allow use of external ceph as cinder backup backend
Change-Id: Ifaf6bca0a02e382d36a3a6168572ebb63878a496
2017-10-06 17:07:08 +02:00
Vladislav Belogrudov
7c448f39c2 Add Barbican section in Nova and Cinder to use disk encryption
Change-Id: I5bbd20a390f385a60ff2f330cc8fa7fb1117a42a
Closes-Bug: #1721292
2017-10-05 09:51:17 +00:00
Eduardo Gonzalez
56374206be Fix deployment with public TLS enabled
When deploying with tls enabled in public
endpoints, ansible modules fails due SSL certificates
are self-signed.

This change adds a new variable to allow customization
on which endpoints ansible should connect.
Defaults to admin because admin auth parameters defaults
to admin endpoint.

Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
Closes-Bug: #1720995
2017-10-05 08:36:34 +00:00
wanghongxu
1ec5f6e9a3 set glance_api_version = 2 in cinder configure
We need set glance_api_version = 2 in cinder
configure to support upload volume to image.

Change-Id: I6162b94833043edb06b434bc578f4caa47213b94
Closes-bug: #1720048
2017-09-28 11:17:09 +08:00
Jenkins
9cdbae707b Merge "Simplify Openstack services configuration possibilities" 2017-09-26 15:49:22 +00:00
Jenkins
345eced125 Merge "Config my_ip to api_interface_address in cinder.conf" 2017-09-26 15:49:15 +00:00
Jenkins
70bb073bd3 Merge "Allow Cinder to use ZFSSA iSCSI volume service" 2017-09-26 07:16:58 +00:00
Jeffrey Zhang
c18d05cfa6 Config my_ip to api_interface_address in cinder.conf
my_ip is used by iscsi_ip_address in cinder.conf. Configure it to
api_interface_address.

Change-Id: Ib9f9140668f807b26bdaec849fc0cef0a63a8ca0
Closes-Bug: #1719274
2017-09-25 23:29:00 +08:00
caoyuan
8fed5e2e62 Make the pg and pgp value configurable
Change-Id: I99cca8c3830077736f71a7ab1abd3818688f9bb1
2017-09-22 03:21:52 +00:00
Vladislav Belogrudov
73225d285c Allow Cinder to use ZFSSA iSCSI volume service
Added configuration to enable Oracle ZFS Storage Appliance:
https://docs.openstack.org/cinder/pike/configuration/block-storage/drivers/zfssa-iscsi-driver.html

Change-Id: Id5807f0d4567e16a68283cace7e126eddc4dea20
Implements: blueprint zfssa-cinder-support
2017-09-21 15:34:26 +00:00
Bertrand Lallau
a3dfdfc085 Simplify Openstack services configuration possibilities
Actually Openstack services configuration can be overriden using many
files:
- /etc/kolla/config/<< service name >>/<< config file >>
- /etc/kolla/config/<< service name >>/<<host>>/<< config file >>
- /etc/kolla/config/global.conf
- /etc/kolla/config/database.conf
- /etc/kolla/config/messaging.conf

Only per-service configuration is actually documented here:
https://github.com/openstack/kolla-ansible/blob/master/doc/advanced-configuration.rst#L164

Allowing to globally modify service configuration can be perform too,
but it can be done in 3 different manners, all not documented:
- /etc/kolla/config/global.conf
- /etc/kolla/config/database.conf
- /etc/kolla/config/messaging.conf

database.conf and messaging.conf seems redundant with global.conf.
In order to simplify codebase it seems logical to remove them.

Documentation has been added for overriding configuration globally and
release note has been added too.

Closes-Bug: #1682479
Change-Id: I5d922dfc0d938173bad34ac64e490b78db1b7e31
2017-09-13 17:47:36 +02:00
Bertrand Lallau
c751a4f780 Revert "Fix modify external ceph.conf not restart related containers"
This reverts commit 0ec2bf39ef90fa4192439a8b331603f99e0391c4.

Change-Id: I6e02b2bc15ccda8039850fc5827b3b5e4323e679
Closes-Bug: #1713926
2017-08-30 09:18:44 +02:00
zhubingbing
0ec2bf39ef Fix modify external ceph.conf not restart related containers
modify /etc/kolla/config/cinder/ceph.conf,
run kolla-ansible reconfigure but
in the container /etc/ceph.conf has not changed

Change-Id: I3bd55f76295b9ad1b799db9e910dbd0cd03d417c
2017-08-23 04:32:55 +00:00
Jenkins
e5df37608f Merge "copy cinder_backup keyring from cinder_backup" 2017-08-14 11:09:24 +00:00
Jenkins
f21d954179 Merge "Add default volume_backend_name for rbd driver in cinder volume" 2017-08-02 07:15:38 +00:00
Jenkins
06046f3943 Merge "Unified Apache access log format" 2017-07-27 09:30:53 +00:00
Kuo-tung Kao
20595eb838 copy cinder_backup keyring from cinder_backup
keyring should copy from cinder_backup folder when using external ceph

Change-Id: Ic7c5532355eed1fa1362f84f5c2691f698d5792a
Closes-Bug: 1703733
2017-07-27 16:36:13 +08:00
Tatsuma Matsuki
db0f469614 Unified Apache access log format
Apache access log formats are modified to be consistent with
the format defined in wsgi-keystone.conf, which includes
the response time (%D) and X-forwarder-For fields.

Change-Id: I02aa5eb106fb894196dfb6e22daf2968e27ed3cb
Closes-Bug: #1703571
2017-07-26 04:11:54 +00:00
Pavel Glushchak
0f70b3883d Make cinder-backup service optional
Introduced new option enable_cinder_backup, that controls
whether to deploy cinder-backup service.

Change-Id: Ibb0ca0a478748d4caba4df434456ead0df95ffca
Signed-off-by: Pavel Glushchak <pglushchak@virtuozzo.com>
2017-07-25 11:04:39 +03:00
Jeffrey Zhang
2352f99863 Add default volume_backend_name for rbd driver in cinder volume
volume_backend_name is required when using volume type.

Change-Id: Idab2ab98dea4940ba9404b219dbed935db0d51ed
Closes-Bug: #1705657
2017-07-21 16:25:07 +08:00
Jenkins
0cd868243f Merge "Disable trace for all containers running httpd" 2017-07-19 08:09:06 +00:00
Jenkins
f50efca182 Merge "Update cinder sanity check to use built in shade" 2017-07-19 03:24:38 +00:00
Jenkins
d079951252 Merge "Remove all kolla-kubernetes configurations" 2017-07-19 03:23:51 +00:00
Jeffrey Zhang
f5dd178fc5 Disable trace for all containers running httpd
Trace method is enabled in default for httpd. There is security risk
with trace enabled. So disable it in default. more info please check[0].

[0] https://security.stackexchange.com/a/7711

Change-Id: I4496a6d058d88e1abfb210085f189e7a610e0362
Closes-Bug: #1705160
2017-07-19 10:52:41 +08:00
Jenkins
4d38340623 Merge "Support cinder backend for glance" 2017-07-18 15:41:23 +00:00
Jeffrey Zhang
cacf08f0a6 Remove all kolla-kubernetes configurations
kolla-kubernetes is using its own configuration generation[0], so it is
time for kolla-ansible to remove the related code to simplify the
logical.

[0] https://github.com/openstack/kolla-kubernetes/tree/master/ansible

Change-Id: I7bb0b7fe3b8eea906613e936d5e9d19f4f2e80bb
Implements: blueprint clean-k8s-config
2017-07-18 22:00:58 +08:00
Jenkins
8c92888657 Merge "Add VMware DataStore support to cinder" 2017-07-17 08:57:49 +00:00
Jenkins
1515164e15 Merge "Migrate cinder-api under apache" 2017-07-13 11:37:49 +00:00
shaofeng_cheng
f12a4a6dad Add VMware DataStore support to cinder
Add VMware VMDK driver supports to cinder service.
The VMware driver for OpenStack Block Storage is recommended and
should be used for managing volumes based on vSphere data stores.
see
https://docs.openstack.org/ocata/config-reference/compute/hypervisor-vmware.html
https://docs.openstack.org/ocata/config-reference/block-storage/drivers/vmware-vmdk-driver.html#block-storage-vmdk-driver

Partially-implements: blueprint kolla-ansible-support-vsphere

Change-Id: Ic3eb7ae34c1e8584945b3d97f8b427ee67ea8fba
2017-07-13 09:44:12 +08:00
Jenkins
a71aa61ea7 Merge "Use unified vars in task" 2017-07-12 01:56:12 +00:00
Paul Bourke
eea490e604 Update cinder sanity check to use built in shade
The current module 'kolla_sanity' was written as a shim before full
shade support was added to Ansible. This should now no longer be needed,
we can implement the checks using Ansible provided modules.

Change-Id: If212243e42615d7725201ee577bec40a1305887d
Depends-On: I6e3f4b72243da1cfa76d32822ec4f75f689f7317
Partially-implements: blueprint sanity-check-container
2017-07-10 14:44:44 +01:00
Jenkins
0572a394be Merge "Avoid launching "local" actions too many times" 2017-07-10 13:40:49 +00:00
Jeffrey Zhang
a6831e945f Support cinder backend for glance
Change-Id: I32de4c37f531a3d22bf80e1eca6635631e489842
Closes-Bug: #1702842
2017-07-07 16:56:10 +08:00
Bertrand Lallau
372e991bec Standardize Keystone domain variables
As described here:
https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L841
https://github.com/openstack/keystone/blob/master/keystone/conf/identity.py#L21

* default project domain name MUST be named 'Default'
* default project domain id MUST be named 'default'
* default project user name MUST be named 'Default'
* default project user id MUST be named 'default'

Change-Id: I610a0416647fdea31bb04889364da5395d8c8d74
2017-07-06 14:34:11 +00:00
Eduardo Gonzalez
d708e95658 Migrate cinder-api under apache
Cinder ubuntu binary was already migrated under apache.
This change migrates rest of the distros/install types to
be executed under an apache process.

Change-Id: I8544eec5bfebf771d758f13abf4dfbc802f5d24f
2017-07-06 09:42:28 +00:00
Bertrand Lallau
a9113fc466 Avoid launching "local" actions too many times
In order to speed up deployment time some "local" actions should be run
only once using 'run_once: True'.
This will decrease deployment time in case of multihost configuration.

Change-Id: I6015d772d35c15e96c52f577013b6e41197cb41a
2017-07-05 15:55:39 +02:00
Jenkins
bb5ccf3d29 Merge "Cinder: modernize nova config" 2017-07-02 09:26:30 +00:00
Bertrand Lallau
84738f062d Cinder: modernize nova config
As describe here:
https://github.com/openstack/cinder/blob/master/cinder/compute/nova.py#L42

* remove 'nova_catalog_info' deprecated option
* add new [nova] section

Change-Id: Ib89a589c8eb8d81839bd4d07d7174b3272136934
2017-06-29 17:23:44 +02:00
caoyuan
36c530f9ed Fix the database user name for all roles
when create database user, it should use
database_user, not database_name.

Change-Id: I4dfa01d1a5a46c5c58f1fc47b0be71b186462764
Closes-Bug: #1698762
2017-06-20 21:19:31 +08:00