This change [0] reverted designate dashboard change because
designate was not finished, we forgot to enable again.
[0] https://review.openstack.org/#/c/408714/
Change-Id: Ibaf7e5a5dc8cbef619d86a0f2b240d384984e8bd
In order to speed up deployment time some "local" actions should be run
only once using 'run_once: True'.
This will decrease deployment time in case of multihost configuration.
Change-Id: I6015d772d35c15e96c52f577013b6e41197cb41a
Kolla-ansible actually bring it's own barbican-api-paste.ini file to
enable Keystone authentication, in order to fix this
https://bugs.launchpad.net/kolla/+bug/1625337
auth_token middleware is actually managed by Barbican.
Furthermore barbican-api-paste.ini brings by Kolla-ansible is outdated:
* http_proxy_to_wsgi middleware is missing
Hence this file should not be managed statically by kolla-ansible.
This patch keep custom paste file feature. Just put the file to
/etc/kolla/config/barbican/barbican-api.ini path.
Change-Id: Ia50237f7df7f89526a976575b017145c71b11ec0
Closes-bug: #1695026
As of [1], the ironic configuration for neutron, glance, swift,
inspector and service_catalog requires explicit configuration of
authentication parameters for communication with these services.
This change adds the required parameters to [neutron], [glance] and
[inspector] sections of ironic.conf. Kolla-ansible does not configure
the [swift] or [service_discovery] sections currently.
We also replace option [glance] glance_hosts with [glance]
glance_api_servers as the former is deprecated.
Since we no longer need to support generating configuration for
kolla-kubernetes[2], some related options have been cleaned.
[1]
4f9035c24f
[2]
https://blueprints.launchpad.net/kolla-ansible/+spec/clean-k8s-config
Change-Id: Ifc239af5f3e44a508fedc9dea08cb06160c4f7f3
Closes-Bug: #1701713
When an external Etcd server is used, config is generated like following:
etcd:
client_timeout: 100
embeded: no
servers:
- http://10.200.200.10:2379
"embeded" config has wrong spelling, the good one is "embedded".
Hence default config is used (yes), and external Etcd server is not used.
Closes-Bug: #1697614
Change-Id: I59ac990b0b865c926b53f829bdfea186fc1e10b1
SKIP_LOG_SETUP variable was used by Heka stuff.
Heka has been removed from Kolla and Kolla-ansible.
Change-Id: I4448b26ace899eb888d34a12a85b019597e25435
rpc_workers and rpc_state_report_workers are set to 1 by default in
Neutron:
https://github.com/openstack/neutron/blob/master/neutron/conf/service.py#L30
By design neutron-server is a central RPC service for all agents (L2
agents, L3 agents, Metadata agents, LB agents, VPN agents, ...).
For a production ready cloud, these variables must be set to a greater
value than 1.
Change-Id: Ib39be32748c3ee8077941fd1659db12c9d80055c
Closes-Bug: #1671734
* add additional options called 'endpoint_type' for each of config groups
related to openstack clients used by Magnum.
* add Glance, Neutron and Nova config groups.
Change-Id: Ie74979e05c4f5763674ba2fc5b9f07bd51ad9454
Some roles have a symlink to deploy.yml file
for reconfigure. This is causing some issues.
"included task files must contain a list of tasks"
Change-Id: Ie7ade52900a61bc1c5b867fa7a8f75fc541a6426
Closes-Bug: #1694251
The TFTP server used by ironic and ironic inspector (in.tftpd) requires
files to be world readable in order for them to be accessible via
TFTP[1].
The permissions of these files were recently changed to 0600 along with
a number of other files[2].
This change reverts the permissions to 0644 for the ironic inspector PXE
configuration files.
[1] https://linux.die.net/man/8/in.tftpd (security section)
[2]
274291463e
Change-Id: Ibc281949ebf5bab1e1d2e450ec943728aa00943b
Closes-Bug: #1701695
Logrotate configuration is missing for ironic-inspector. Prior to [1],
ironic-inspector logs were stored in
kolla_logs/ironic/ironic-inspector.log. After [1], the logs
are stored in kolla_logs/ironic-inspector/ironic-inspector.log
but the logrotate config was not updated.
[1]
07453f3460
Change-Id: I7e78faea361cd67069c1a96aaf0a2ffffc0e8666
Closes-Bug: #1701578
RDO packages a distribution configuration file
/usr/share/nova/nova-dist.conf which contains the following setting:
firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver
This causes the nova-compute-ironic service to fail to start as the
nova ironic virt driver attempts and fails to create a firewall driver
using this class.
This change reinstates the explicit setting of the [DEFAULT]
firewall_driver option to the noop driver which resolves this issue.
This comes at the cost of a WARN log message due to the option being
deprecated (see
6d831db687).
Change-Id: I41bd9d0671118ff256e7ada766e8653bb4b2b376
Closes-Bug: #1701564
Add additional options called 'endpoint_type' for each of config groups
related to nova, cinder and neutron clients.
Change-Id: I24dc11502b148fbe564dc63c6f78b7dcbfe44f01
Like elasticsearch is already deployed by Kolla-ansible it can be used
to store Graph events.
Closes-Bug: #1697638
Change-Id: I1f33e044d33c21516cb3bf8c6fd5bb0745b843c1
