167 Commits

Author SHA1 Message Date
Emilien Macchi
800278b093 unit tests: make Keystone_endpoint match service by name/type
Since a chance in puppet-keystone (1], we now match an endpoint with a
service name/type.
)
[1] http://git.openstack.org/cgit/openstack/puppet-keystone/commit/?id=0a4e06abb0f5b3f324464ff5219d2885816311ce

Closes-Bug: #1528308

Change-Id: I80391b8170f7e9525f85db8fdcfc517d68ae1aab
2015-12-22 18:07:16 +01:00
Jenkins
057649984a Merge "Support of PyMySQL driver for MySQL backend" 2015-12-15 10:30:33 +00:00
Jenkins
8f7703ad96 Merge "Remove qpid messaging support" 2015-12-08 03:02:38 +00:00
Denis Egorenko
dcd32842ab Remove qpid messaging support
Qpid messaging driver is removed from Oslo.messaging [1]
Therefore, we cannot support it anymore.

[1] I4a9cba314c4a2f24307504fa7b5427424268b114

Change-Id: I2bb8e24e3dc316af672aa18f4e3cbf57e4746ad7
2015-12-07 20:31:59 +03:00
Jenkins
0e0c449041 Merge "Allow customization of db sync command line" 2015-12-03 19:11:33 +00:00
Javier Pena
f70d5d5f31 Support of PyMySQL driver for MySQL backend
Add the ability to use python-pymysql library as backend for MySQL
connections.

Update acceptance tests to use pyMySQL.

Change-Id: Id27afb52428a50ec889e8ae77f3509e1ca956538
Docs: https://wiki.openstack.org/wiki/PyMySQL_evaluation
2015-12-03 10:11:31 +01:00
Mykyta Karpin
6aa38dc8ae add more heat.conf settings to heat, engine classes
heat.conf settings added:

 max_template_size
 max_json_body_size
 max_resources_per_stack
 notification_driver
 instance_connection_https_validate_certificates
 instance_connection_is_secure

Change-Id: I00db48bb7e5fde7ba1048fc1cb24fcdcf4e85c04
2015-12-02 10:37:19 +02:00
Mykyta Karpin
ae20443751 Switch Heat to $::os_service_default - part 1
Switching Heat to usage of os_service_default fact

Change-Id: Iff9cda880bb938b1fff3bf217c7cbf233daaf68a
Related-bug: #1515273
2015-11-26 18:21:56 +02:00
Jenkins
35bf220a37 Merge "Add os_service_default support to heat tests" 2015-11-20 13:24:22 +00:00
Jenkins
9feac68da1 Merge "Add rabbit_ha_queues option" 2015-11-20 03:35:56 +00:00
Jenkins
b4651f8753 Merge "Remove POSIX users, groups, and file modes." 2015-11-20 03:32:44 +00:00
Jenkins
443ef2576b Merge "Improve heat::keystone::domain" 2015-11-19 16:24:14 +00:00
Nate Potter
4d4430efd6 Allow customization of db sync command line
Add parameter to heat::db::sync to allow end
users to add command line parameters to the db sync command.

Change-Id: Id9de1022481fbeedc3db78a3dd2e3c5f2a962e10
Partial-bug: #1472740
2015-11-19 15:18:27 +00:00
Emilien Macchi
193833d05a Acceptance: use common bits from puppet-openstack-integration
Change-Id: I1e969bc14142fbb4fad823d4c4790f4961be6385
2015-11-18 17:56:19 +01:00
Mykyta Karpin
d57948dcfe Add os_service_default support to heat tests
Heat classes tests are modified to support
	os_service_default facts.

Change-Id: Ie8201de4158f1442eade93fee042453f4effb34c
2015-11-18 13:57:58 +02:00
Xingchao Yu
cb7f3fa6eb Add rabbit_ha_queues option
There are two ways for setting up RabbitMQ HA:

 1. Configure rabbit_hosts to multi rabbit hosts.
 2. Setting up a loadbalancer in front of RabbitMQ cluster,
    provide a unique address in rabbit_host

In current, rabbit_ha_queues option is controled by rabbit_hosts
if conditional statement. When users try the second method:
changing rabbit_ha_queues to true. If they don't set rabbit_hosts
, then current logic will not work.

This patch is aim to add an rabbit_ha_queues option, set it to undef by
default for backward compatbility.

Change-Id: I25fe5ef79d774757ee395efeaf4588efc56aada5
Close-Bug: #1485287
2015-11-18 03:17:37 +08:00
Jenkins
1ac41b7b1f Merge "Bump UCA and RDO to Liberty GA" 2015-11-16 22:15:11 +00:00
Martin Mágr
e7c472d053 Improve heat::keystone::domain
- change resource names so that autorequire works
 - enable to skip Keystone resource management

Change-Id: I9078be31f26e454e0686debcefa070721767a581
2015-11-09 12:01:36 +01:00
Martin Mágr
aede7c5c91 Fix unit test
Proper heat_stack_user_role has to be used in unit tests.

Change-Id: If267826060bac33d94f7907fed6d42dd0440fcc9
2015-11-09 11:58:26 +01:00
Emilien Macchi
7e2bfbcdf9 Bump UCA and RDO to Liberty GA
Bump from UCA RDO Liberty testing to GA repos.
Depends-On: I19a1588c488d56b647703c0267540c7649fdc6d1

Change-Id: Iac3055939db3b4a9270ffad17499bfb9b16463f5
2015-11-04 10:10:32 -05:00
Jenkins
c597729622 Merge "Change section name for AMQP rabbit parameters" 2015-10-28 08:28:12 +00:00
Jenkins
416b57d850 Merge "Move deps & external hooks into a standalone class" 2015-10-23 12:11:06 +00:00
Jenkins
d7ca0ce559 Merge "Change section name for AMQP qpid parameters" 2015-10-22 10:47:54 +00:00
Denis Egorenko
cef8a55374 Change section name for AMQP rabbit parameters
Parameter 'amqp_durable_queues' under section 'DEFAULT' now is
deprecated since Liberty and should be placed under certain
rpc backend section [1,2]

[1] https://github.com/openstack/oslo.messaging/blob/liberty/oslo_messaging/_drivers/amqp.py#L36
[2] http://docs.openstack.org/liberty/config-reference/content/configuring-rpc.html

Change-Id: Ib7bbea586b21c42eb9fd13c4a376d23fce165272
2015-10-21 20:15:28 +03:00
Denis Egorenko
1c4d0bba2a Fix rspec unit & beaker tests
Problem #1
https://review.openstack.org/#/c/228744/ has been merged, we need to
drop the 'tenant' parameter to Keystone_user resource.

Problem #2
https://review.openstack.org/#/c/228744/ has been merged, we need to
drop the '_member_' role management.

Change-Id: I22313fed2c9f2c07caa6058e615d3872e0cfb861
2015-10-21 11:54:56 -04:00
Denis Egorenko
65df5d530b Change section name for AMQP qpid parameters
According to docs for liberty and kilo [1,2] should be
section 'oslo_messaging_qpid' instead of 'DEFAULT'.

[1] http://docs.openstack.org/liberty/config-reference/content/configuring-rpc.html
[2] http://docs.openstack.org/kilo/config-reference/content/configuring-rpc.html

Change-Id: Ic96528a60730a43838e002e639fa7aeb166c2424
2015-10-21 14:52:07 +03:00
Drew Fisher
679c8a3379 Remove POSIX users, groups, and file modes.
This patch removes the File, Group, and User resources of /etc/heat and
/etc/heat/heat.conf which should be delivered by packaging tools.  These
resources (mode, user, and group attributes) could be in conflict with
different OS packaging systems which isn't a desired result.

Change-Id: I5d49f3fc06df295700377eb66f883c9780959f96
Closes-Bug: #1458915
2015-10-20 08:40:56 -06:00
Sebastien Badia
0be4a41486 db: Use postgresql lib class for psycopg package
This patch introduce the same design than mysql for postgresql
by requiring dedicated lib::python class instead of declaring
a new resource package within heat module.

Change-Id: I386e61054e84b14d25afebb4aa415ab2b6161a57
2015-10-20 16:27:14 +02:00
Clayton O'Neill
dca9fe942b Move deps & external hooks into a standalone class
Previously the anchors and dependencies that allow external hooks were
all in the main ::heat class.  However, if you wanted to include just
::heat::db::mysql, then it would fail, since it assumed the main heat
class was included.  This moves all of those resources and relationships
into a new class, ::heat::deps.  All of the classes will now include
this class so that the anchors and deps are always evaluated even if
only a portion of the classes are used, and even if ::heat isn't pulled
in.

Change-Id: I4297df160a7afae2b66c1ac76e37de313fa4fb09
Closes-Bug: #1507934
2015-10-20 09:57:36 -04:00
Jenkins
905185c66b Merge "Add hooks for external install & svc management" 2015-10-19 23:44:02 +00:00
Jenkins
c9295a7224 Merge "Introduce heat::db class" 2015-10-19 23:39:47 +00:00
Yanis Guenane
fb4486166a Introduce heat::db class
Current modules[1][2][3] implements a
<component>::db class that is not implemented in heat.
This commit aims to apply here the same logic

[1] https://github.com/openstack/puppet-nova/blob/master/manifests/db.pp
[2]
https://github.com/openstack/puppet-designate/blob/master/manifests/db.pp
[3]
https://github.com/openstack/puppet-ceilometer/blob/master/manifests/db.pp

Change-Id: I922260265d110d5823c546813ee125400ecc183d
2015-10-14 09:34:58 +02:00
Gilles Dubreuil
f592e646c4 Missing domain in keystone::domain
The domain name wasn't used for the keystone_user_role resource.

This change requires "replace indirection calls" [1]
Both needs to be merged as same time in order to pass CI tests.

[1] https://review.openstack.org/226624

Change-Id: I2a717b06a73af966d6625b4f6ec3254baf7c50a0
Depends-On: I36fabf547fa50fc14d49f491f11cb4a0571f7d31
2015-10-14 09:00:32 +11:00
Jenkins
06953c3d44 Merge "Put all the logging related parameters to the logging class" 2015-10-12 13:28:22 +00:00
Yanis Guenane
9ad6f36ea4 Put all the logging related parameters to the logging class
Currently logging configuration is splitted in two distinct classes, the
init.pp and the logging.pp classes. This review aims to centralize all
logging related parameters in a single class, the logging.pp one.

The impacted parameters are :

  * use_syslog
  * use_stderr
  * log_facility
  * verbose
  * debug
  * log_dir

This change remains backward compatible with what is currently in place

Change-Id: Ia040f7c935941da0b747cf3e8b5eda1abf2ae07a
2015-10-01 10:11:47 +02:00
Matt Fischer
bc4e8c0d65 Make the role for heat_stack_user configurable
Before you could configure the role in the config file but not the
keystone role that was created. Now you can do both.

Change-Id: Iea6df1679d3ceef1f0876e65dac06628147c700b
2015-09-29 19:44:53 -06:00
Emilien Macchi
320e93d301 Allow to not manage Keystone domain
When configuring Heat domains, we might want to use the default domain.
However, the default domain might already exist or managed by
puppet-keystone.
This patch allows to disable its management in puppet-heat, but keep
True for backward compatibility so the domain will be managed by
default.

Change-Id: I2e9f2ebb5b12cc33565d74bf955250dcc82bcbb9
2015-09-25 12:26:03 -04:00
Emilien Macchi
b608fcebda Update rpc_backend default parameter
rpc_backend should be 'rabbit' which is the default in Olso Messaging.
This patch update the default and the conditional.

Change-Id: I392dc5670d8b9ebb8c58e06c8cadd44a4adb1694
2015-09-24 08:39:22 -04:00
Emilien Macchi
1b209d35be Cleanup configure_delegated_roles deprecated parameter
In Kilo, we decided to use ::heat::keystone::auth to manage the
Keystone_role resource to help with Trusts configuration.
Though the configuration was and still remains part of ::heat::engine
class because we assume ::heat::keystone::auth can be run outside the
heat-engine node.

So this patch aims to drop the deprecated parameter, update the
documentation and unit tests.

Change-Id: I045a3a82095e23778c4e878b13f2fc7f561d680e
2015-09-24 07:54:27 -04:00
Emilien Macchi
bfbcb914bd Bump RDO packages to tested repos
RDO has now [1] a repo that is tested against real CI.
Using this repository will avoid more failures in our CI.

[1] http://trunk.rdoproject.org/centos7-liberty/current-passed-ci/

Change-Id: I2729f3f4b218fa083670a76529d80c8f966da573
2015-09-22 13:47:08 -04:00
Emilien Macchi
f5193ad715 acceptance: switch RDO to CBS repositories
This patch changes the repositories used to install OpenStack Liberty on
RDO by using CBS repositories and RDO trunk.

Here is the RDO roadmap that is suggested if we want to run Liberty:
From now until GA:
http://trunk.rdoproject.org/centos7-liberty/current/
http://cbs.centos.org/repos/cloud7-openstack-liberty-testing/x86_64/os/
http://cbs.centos.org/repos/cloud7-openstack-common-testing/x86_64/os/

After GA:
http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty

Note about EPEL: deps from EPEL are rebuilt in CBS, so EPEL could be
disabled in the future.

Change-Id: Ica576b745e50feefa34bb5f084f79ef5067cb7b1
2015-09-10 15:49:24 -04:00
Emilien Macchi
07e52b5ac9 acceptance: bump trusty packaging to trusty-proposed/liberty
Since our recent discussion about Ubuntu packaging, we decided to bump
Ubuntu packaging to trusty-proposed/liberty so we can install Liberty in
a better shape than current situation (Staging repo).

This patch installs UCA liberty repository.

Depends-On: I57e2ddc5d0e228142f8045623ffbde362c0e7f7b
Change-Id: I20decfb1743b334a44365166b310c264f521e4d7
2015-09-02 21:10:36 +00:00
Clayton O'Neill
b2f791400d Add hooks for external install & svc management
This adds defined anchor points for external modules to hook into the
software install, config and service dependency chain.  This allows
external modules to manage software installation (virtualenv,
containers, etc) and service management (pacemaker) without needing rely
on resources that may change or be renamed.

Change-Id: I032ee01505e0cbc125b0e219c436b77c93f57720
2015-08-29 03:19:02 +00:00
Jenkins
16b4eca4c9 Merge "Create Heat Domain with Keystone_domain resource" 2015-08-21 03:03:43 +00:00
Jenkins
5212597481 Merge "Reflect provider change in puppet-openstacklib" 2015-08-20 16:36:37 +00:00
Jenkins
b8cb628617 Merge "Initial msync run for all Puppet OpenStack modules" 2015-08-20 01:24:04 +00:00
Yanis Guenane
ed3732cc78 Reflect provider change in puppet-openstacklib
With the creation of the new openstack_config provider, some processing
that was done in heat_config has been centralized in
openstack_config.

Impacted methods are :

  * section
  * setting
  * separator

Also, this commit adds the fact that, when passing a specific string
(ensure_absent_val) the provider will behave as if ensure => absent was
specified. '<SERVICE DEFAULT>' is the default value for
ensure_absent_val.

The use case is the following :

heat_config { 'DEFAULT/foo' : value => 'bar' } # will work as usual

heat_config { 'DEFAULT/foo' : value => '<SERVICE DEFAULT>' } # will mean absent

That means that all the current :

if $myvar {
  heat_config { 'DEFAULT/foo' : value => $myvar }
} else {
  heat_config { 'DEFAULT/foo' : ensure => absent }
}

can be removed in favor of :

heat_config { 'DEFAULT/foo' : value => $myvar }

If for any reason '<SERVICE DEFAULT>' turns out to be a valid value for
a specific parameter. One could by pass that doing the following :

heat_config { 'DEFAULT/foo' : value => '<SERVICE DEFAULT>',
ensure_absent_val => 'foo' }

Change-Id: Iaaf2e5755080ef32d7d585465aaea6fd408d0ece
Depends-On: I0eeebde3aac2662cc7e69bfad7f8d2481463a218
2015-08-19 10:37:05 +02:00
Cody Herriges
4fa9985f2a Initial msync run for all Puppet OpenStack modules
This patch is the initial modulesync run, it impacts:

* gitignore: just a sync between projects
* gemfile:
  - update and allow to setup facter version and gem source
  - split beaker gems with a dedicated group
  - switch to rspec-puppet 2.2.0
* rakefile:
  - use the new syntax for lint configuration
  - add a acceptance target
* acceptance:
  - sync nodesets
* spec: added rspec coverage report

Change-Id: Ib75add2af3380d0b1d4ce320b58df22b6c3ffa57
2015-08-18 14:37:18 +02:00
Jenkins
4db0ab63b4 Merge "acceptance: enable debug & verbosity for OpenStack logs" 2015-08-17 14:15:27 +00:00
Emilien Macchi
2ed33d3166 acceptance: enable debug & verbosity for OpenStack logs
Enable debug & verbose when possible for OpenStack services logs, so we can read a maximum
of informations in Jenkins jobs logs and easily debug our eventual failures.

Change-Id: I5bdb2f9d9083efdfff9fa43f45371a90a75e38b7
2015-08-16 09:50:01 -04:00