7349 Commits

Author SHA1 Message Date
Bertrand Lallau
fdc75cdd8c Magnum: update clients config groups
* add additional options called 'endpoint_type' for each of config groups
related to openstack clients used by Magnum.
* add Glance, Neutron and Nova config groups.

Change-Id: Ie74979e05c4f5763674ba2fc5b9f07bd51ad9454
2017-07-04 11:09:05 +00:00
Jenkins
99075dab64 Merge "Enable port_security by default" 2017-06-30 09:40:36 +00:00
Jenkins
09511bc232 Merge "Use aodh alarms with tacker" 2017-06-30 09:40:29 +00:00
Jenkins
0a343d1cf0 Merge "Comment designate options at globals.yml" 2017-06-30 09:37:50 +00:00
Jenkins
8f34fdccbd Merge "Modify glance log name" 2017-06-30 08:12:10 +00:00
Jenkins
ee11884e37 Merge "Add possibility to configure tenant network types and type drivers" 2017-06-29 13:11:04 +00:00
Jenkins
161607f97c Merge "Remove Ubuntu Trusty 14.04 related code" 2017-06-28 15:49:41 +00:00
Jenkins
b29c904cd4 Merge "Updated from global requirements" 2017-06-28 15:39:52 +00:00
Jenkins
2eb85595d4 Merge "fix horizon contents path for ubuntu/binary" 2017-06-28 15:39:45 +00:00
Jenkins
1d152f7da2 Merge "Always create ResellerAdmin role for Swift" 2017-06-28 15:37:48 +00:00
Jenkins
3b86d5fda2 Merge "Remove the unnecessary jinja2 templating delimiters" 2017-06-28 14:43:25 +00:00
zhubingbing
08c5de2017 Modify glance log name
change api.log and registry.log to glance-api.log and glance-registry.log

Closes-bug: #1700718

Change-Id: Ifcde8699fa9537fa06445f79c4bd14b4ee0df32c
2017-06-28 14:41:16 +00:00
Bertrand Lallau
6c4d100911 Remove Ubuntu Trusty 14.04 related code
Removed code try to install Wily(15.10) kernel in case of Ubuntu
Trusty(14.04).
Last Openstack version supported on Ubuntu 14.04 is Mitaka.
Hence Ubuntu 14.04 related code can be safely remove from Ansible tasks
since Kolla Newton release.

Co-Authored-By: Duong Ha-Quang <duonghq@vn.fujitsu.com>
Change-Id: Ieca7975a69fb0ba8b49cc522f05e4beca1c2f526
2017-06-28 11:09:10 +02:00
OpenStack Proposal Bot
a6d90dd480 Updated from global requirements
Change-Id: I6bb90e40a4661663b2386506463dce4fb59018a8
2017-06-27 17:44:25 +00:00
Jenkins
b560b64e74 Merge "Add flag to allow provider networks" 2017-06-27 16:40:09 +00:00
Noboru Iwamatsu
60439d897d fix horizon contents path for ubuntu/binary
The static contents directory path of the openstack-dashboard
provided by Ubuntu Cloud Archive is different from RDO's.
This fixes the horizon.conf template to set the correct alias
when ubuntu+binary are specified.

Change-Id: I1b0c04cecc66b42bf764aa035e7ec24c37d805e3
Closes-Bug: #1700712
2017-06-28 00:30:08 +09:00
Jenkins
70265d3476 Merge "Add sanity checks for Barbican" 2017-06-27 13:24:19 +00:00
Jenkins
ef5ebace65 Merge "The notify "Restart tacker containers" is not correct" 2017-06-27 12:43:10 +00:00
Vladislav Belogrudov
0ffa770b83 Always create ResellerAdmin role for Swift
ResellerAdmin role should be created always when Swift is enabled
and not only for Ceilometer. The role is needed for normal users
to get administration rights for their Swift projects and is
required to pass DefCore (OpenStack Powered) certification.

Change-Id: I4faa63b8fae1814e382de2794301248cc0f4a90a
Closes-Bug: #1700729
2017-06-27 12:34:15 +03:00
Vladislav Belogrudov
f6eefdf388 Add flag to allow provider networks
In case of provider networks we need to configure external bridge
on compute nodes, like it is done in DVR. The only way to tell
if provider networks are to be used is a new flag.

Change-Id: I1aef197ee2b84e28f2131f058e6995551f873fe1
Closes-Bug: #1694726
2017-06-27 08:33:43 +00:00
Jenkins
52cd348ae1 Merge "Use kuryr for zun network" 2017-06-27 05:37:49 +00:00
Jenkins
450b8df39f Merge "Add cli options to cleanup-images" 2017-06-27 05:19:37 +00:00
ZhongShengping
acecdc2cf1 The notify "Restart tacker containers" is not correct
No handler named "Restart tacker containers", and we should restart
the tacker container according to the context

Change-Id: Idad8843e85eeb536d7abf8332606801f5b6e78ce
Closes-Bug: #1700007
2017-06-27 09:31:40 +08:00
Paul Bourke
4261ded648 Add sanity checks for Barbican
Change-Id: I5744784afc13f2ee884c8dca2b32c982ebebc542
Partially-implements: blueprint sanity-check-container
2017-06-26 17:00:22 +01:00
Jenkins
9e88df11ab Merge "Retry Keystone's default user role creation" 2017-06-26 14:57:06 +00:00
Jenkins
be8f64492c Merge "Barbican simple_crypto plugin broken - invalid key" 2017-06-26 08:58:03 +00:00
Jenkins
9114ca0d8d Merge "Fix kuryr ansible deployment" 2017-06-26 08:11:10 +00:00
Jenkins
f933504953 Merge "The notify "Restart keystone containers" is not correct" 2017-06-26 08:08:10 +00:00
Jenkins
6e91f2e7f0 Merge "Pull cinder cephx keyring only when cinder_backup_ceph is true in nova" 2017-06-25 04:42:21 +00:00
jiangpch
77358dd920 The notify "Restart keystone containers" is not correct
No handler named "Restart keystone containers", and we should restart
the keystone and the keystone-fernet container according to the context

Closes-Bug: #1699924

Change-Id: I62512dc022426cc762ff603d8554e48651fa621f
2017-06-23 00:51:10 +00:00
Jenkins
87c860dbf9 Merge "Add upgrade release note for ovs split" 2017-06-22 14:54:49 +00:00
Jenkins
a252889c8d Merge "Fix baremetal role idempotency" 2017-06-22 14:46:44 +00:00
Jeffrey Zhang
a1f42ad38a Pull cinder cephx keyring only when cinder_backup_ceph is true in nova
Change-Id: Ia766c1aa60d51fbff2c620394474597a7146b9cc
Closes-Bug: #1699658
2017-06-22 12:39:36 +08:00
Michal (inc0) Jastrzebski
2e3b6639fe Fix baremetal role idempotency
When you add new nodes to existing cluster, docker will restart
all anyway and that will break a lot, including mariadb.

Change-Id: Ie46f99a141f99480a87218ead4b76ba65f2edae9
Closes-Bug: #1699335
2017-06-21 11:04:19 -07:00
Mark Goddard
2e4359069e Barbican simple_crypto plugin broken - invalid key
When using the simple_crypto plugin, barbican expects the
[simple_crypto_plugin] kek config value to be a base64-encoded 32 byte
value. However, kolla-ansible is providing a standard autogenerated
password.

There are two relevant variables in kolla-ansible -
barbican_crypto_password (a standard password) and barbican_crypto_key
(a HMAC-SHA256 key). There is no use of barbican_crypto_key other than
when it is generated. barbican_crypto_password is used to set the
[simple_crypto_plugin] kek config value but causes an error when the
simple_crypto plugin is used as the value is not in the expected format.
Using barbican_crypto_key instead resolves the error. Clearly there is a
naming issue here and we should be using barbican_crypto_key instead of
barbican_crypto_password.

This change removes the barbican_crypto_password variable and uses
barbican_crypto_key instead.

Change-Id: I63e2b381c260265e5901ee88ca0a649d96952bda
Closes-Bug: #1699014
Related-Bug: #1683216
Co-Authored-By: Stig Telfer <stig@stackhpc.com>
2017-06-21 17:07:17 +01:00
Vladislav Belogrudov
296ddbeb03 Add possibility to configure tenant network types and type drivers
This patch add configuration options for tenant network types and type
drivers. Both lists are checked so that tenant types are listed in
drivers. For ironic 'flat' driver is mandatory and is added explicitly
into ironic prechecks.

Change-Id: Ie5775001165412910a258cbed2d2ebbb8ebbd879
Closes-Bug: #1694725
2017-06-21 17:14:25 +03:00
Jenkins
9dc17cee0f Merge "Add webconsole support in ironic" 2017-06-21 13:25:26 +00:00
Jenkins
a428a53a3b Merge "Fix jenkins link in running-tests" 2017-06-21 13:22:26 +00:00
kylin7-sg
7d26aa40eb Fix jenkins link in running-tests
The previous link doesn't exist anymore, using new link instead.

Change-Id: I6d24faee6fe5b5984c9152168c6dac44135f8414
2017-06-21 05:39:29 -04:00
shaofeng_cheng
7f7b6a08ed Add webconsole support in ironic
Add webconsole support in ironic by pxe_ipmitool driver.
Serial speed must be the same as the serial configuration in
the BIOS settings, so that the operating system boot process
can be seen in the web console.

see:
https://docs.openstack.org/project-install-guide/baremetal/draft/advanced.html#appending-kernel-parameters-to-boot-instances

Change-Id: I967ed2f63a50d024c54e0762ec6c0ae09b66d6bd
2017-06-21 17:20:03 +08:00
Juan J. Martinez
ba5c430278 Retry Keystone's default user role creation
Sometimes Ansible is faster running tasks that haproxy tagging Keystone
services as UP. Keystone bootstrap uses SQL directly but the default
user role creation requires the API, and because of that it may fail.

Retry in case the backend is not yet available.

Change-Id: I9dfc030bbf92ca0a3dcb008d55e9fa2055f900ec
Closes-Bug: 1699096
2017-06-20 15:24:18 +01:00
Michal (inc0) Jastrzebski
339b27c7fe Enable multi-scenario gates
First non-trivial scenario we'll be testing in gates will be cinder +
ceph. This patchset is supposed to create framework to easily add new
testing scenarios.

Change-Id: I6790eaf5cf3297af04a64e4169a39b6e2cd1890f
2017-06-19 10:14:33 -07:00
Vladislav Belogrudov
ea5d1a581b Add documetation for kolla-mergepwd tool
Change-Id: I7b542cacb9f21dd84a7e3864c7cd95565dbbf8fb
Implements: blueprint kolla-merge-passwords
2017-06-19 14:10:56 +00:00
Eduardo Gonzalez
112d632640 Enable port_security by default
Neutron recommend as good practice to enable port_security
extension by default. Current networks will remain using
security groups, but will allow users to disable port_security
in their port or networks.
An example use case is nfv.

Change-Id: I69f2e3567fd00695cf1c4bcc9177c2b88e33c3ab
2017-06-19 14:09:32 +02:00
Jenkins
3f63620a4c Merge "Fix mongodb name in cron.json" 2017-06-19 11:22:46 +00:00
Jenkins
1529d4e54e Merge "Use cryptography instead of pycrypto" 2017-06-19 10:44:53 +00:00
Jenkins
bdb3a12db4 Merge "Use templates for keystone domain specific configurations" 2017-06-19 08:50:19 +00:00
Jenkins
440a06089b Merge "Add Skydive startup guide documentation" 2017-06-17 13:23:43 +00:00
Jenkins
6aa4f96d3e Merge "Revert "Enable port_security in gate to fix the neutron broken"" 2017-06-16 15:18:11 +00:00
Jenkins
f07515afe8 Merge "Add vhost to outward rabbitmq for Murano" 2017-06-16 11:28:33 +00:00