2891 Commits

Author SHA1 Message Date
Steven Hardy
2df399d652 Replace ceilometer-dbsync by ceilometer-upgrade
https://review.openstack.org/#/c/388688/ has removed ceilometer-dbsync so
ceilometer-upgrade must be used instead.

Additionally, ceilometer-dbsync enabled option --skip-gnocchi-resource-types
and ceilometer-upgrade doesn't, so i'm setting it by default to ensure backwards compatibility.

Note this is based on the corresponding fix to puppet-ceilometer ref

https://review.openstack.org/#/c/396570

Change-Id: Ic0a15c75d1cd3e3f70eeafd9ba09d50c58cc1293
Closes-Bug: #1641076
2016-11-15 11:31:35 +00:00
Jenkins
f7cf9d8fc1 Merge "Fix typo in Keystone Sensu subscription" 2016-11-14 17:02:23 +00:00
Jenkins
8f9b77ada8 Merge "Use default Sensu redact" 2016-11-14 13:18:42 +00:00
Jenkins
9797d93561 Merge "Fixes missing OVS Firewall config with OpenDaylight" 2016-11-14 07:36:34 +00:00
Jenkins
b339ee8331 Merge "Configure civetweb bind socket via puppet-tripleo" 2016-11-12 13:11:42 +00:00
Jenkins
865345db0b Merge "Neutron L3 service cleanups for hiera json hook" 2016-11-11 21:19:03 +00:00
Jenkins
e90a43895b Merge "Enable internal TLS for Cinder API" 2016-11-11 21:04:52 +00:00
Jenkins
7c017a85c5 Merge "Increasing neutron timeout for low memory usage" 2016-11-11 20:21:43 +00:00
Jenkins
d3acb7983f Merge "Handle null role_data in services" 2016-11-11 19:20:08 +00:00
Tim Rozet
a5cec52a6c Fixes missing OVS Firewall config with OpenDaylight
Currently OVS tunnel firewall rules are held within the neutron ovs
agent service heat template.  That service is not used with ODL, so
consequently ODL was missing the VXLAN and GRE firewall rules and
traffic would not pass between nodes.  This adds the missing rules to
the OpenDaylight OVS service.

Closes-Bug: 1641191

Change-Id: Icfd7db6a3e8fcdd02646fb7e413f40f26b03b994
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-11-11 13:59:06 -05:00
Giulio Fidente
76b0edcb77 Configure civetweb bind socket via puppet-tripleo
When the civetweb binding IP is version 6 it needs to be enclosed
in brackets or the bind socket parsing fails. The mangling happens
in puppet-tripleo, this change updates the templates to push the
appropriate hiera keys.

Change-Id: Ic7004d768ed5e0f2382ffaa57961ea0ef9162527
Closes-Bug: #1636515
Depends-On: Ib84fa3479c2598bff7e89ad60a1c7d5f2c22c18c
2016-11-11 15:03:25 +00:00
Jenkins
b0ffc79452 Merge "Fix inconsistent Manila service naming" 2016-11-11 14:47:28 +00:00
Arx Cruz
c99c48b84e Increasing neutron timeout for low memory usage
We are noticing several tests failing in our low memory environment
because of timeout in neutron requests.
As an example the test
tempest.api.compute.servers.test_server_actions.ServerActionsTestJSON
fails because it requests to plug a vif, and send request to neutron,
which responds in more than neutron_url_timeout, and since the option
vif_plugging_is_fatal is set to True as default, the test fails.
Shortly thereafter, checking in neutron log you can see the request,
returning with the proper status, after more than neutron_url_timeout,
however, it's already too late once nova already marked the instance
with error status, and so the test fails.

Closes-Bug: #1641135

Change-Id: If0991c114f199490ac0deb71eb569a42d4711359
2016-11-11 15:45:23 +01:00
Martin Mágr
c921b15c90 Use default Sensu redact
By default sensu-puppet is overring default list of varibles which should
be redacted. This patch enables to configure redact list and uses default
value given by [1]. This patch also serves as a workaround until [2]
is merged in the module itself (or in case it won't get merged).

[1] https://sensuapp.org/docs/0.24/reference/clients.html
[2] https://github.com/sensu/sensu-puppet/pull/580

Closes-Bug: #1641080
Closes-Bug: rhbz#1392473
Change-Id: I21201f734d2fbf5f571091603126cf11cfdd8c40
2016-11-11 11:16:02 +01:00
Jenkins
9211e2b61d Merge "Add missing Barbican endpoint from tls-everywhere environment" 2016-11-11 09:00:55 +00:00
Jenkins
9b4a981f95 Merge "Fix race during major-upgrade-pacemaker step" 2016-11-10 19:00:08 +00:00
Jenkins
64a277323c Merge "Removes deprecated overcloud VIP outputs" 2016-11-10 18:36:33 +00:00
Jenkins
8a2542757a Merge "Fixes incorrect reference to OpendaylightApiNetwork" 2016-11-10 18:08:11 +00:00
Jenkins
1e11964372 Merge "Ensure heat-domain hiera is in nodes that contain keystone" 2016-11-10 18:07:58 +00:00
Steven Hardy
548bf8ada5 Fix inconsistent Manila service naming
The capitalization of OS::Tripleo is wrong compared to all other services
so correct this for avoidance of confusion when folks write custom roles_data
files or pass custom service lists via *Services parameters.

Change-Id: Ib73c80871b45586edb5774e90280ff89fc0d9895
Closes-Bug: 1640871
2016-11-10 17:06:47 +00:00
Martin Mágr
e2ebc8ea11 Fix typo in Keystone Sensu subscription
Closes-Bug: rhbz#1392428
Closes-Bug: #1640834
Change-Id: I2a1a869493ccb4c8d5b9aea26b8ef947750d2cfe
2016-11-10 16:26:56 +01:00
Jenkins
977106ff5e Merge "Select bootstrap node by list index not name" 2016-11-10 15:07:35 +00:00
Dan Prince
36aa652247 Neutron L3 service cleanups for hiera json hook
This patch resolves a few issues I noticed when porting our
Neutron L3 service to support the new heat hiera agent hook (which
uses Json instead of Yaml).

 - If NeutronExternalNetworkBridge is an emptry string '' Json was
   dropping the single quotes thus causing the bridge to get set
   incorrectly in the config file. To correct this we use a heat
   conditional to avoid setting the external bridge (the '' default
   is what we want in this case) if the bridge is an empty string.

Change-Id: I5037cbde6b76a37a4c22c4616278420e9d759109
Partial-bug: #1596373
2016-11-10 07:44:15 -05:00
Dan Prince
93b4d836ee Handle null role_data in services
This patch updates the Yaql expressions that work on role_data
so that they evaluate properly when the get_attr for role_data
is null.

I hit issues using this for the heat undercloud installer and this
seems to resolve them.

Change-Id: I0493d0525cd3ad280339f26ef9d3aa311af9962e
2016-11-10 07:42:13 -05:00
Steven Hardy
390292e59e Select bootstrap node by list index not name
Modify the syntax used to access the ResourceGroup attributes so we
always select the first node from the group, e.g even if the node
named "0" in the ResourceGroup nested stack has been removed due to
the removal policy.

Change-Id: I8b1c9538976a1518b220187a0034ad41a738d5a6
Closes-Bug: #1640449
2016-11-10 10:28:31 +00:00
Jenkins
2ad72b7e96 Merge "Add firewall rules for manila api service" 2016-11-10 08:53:40 +00:00
Tom Barron
96a458d52d Add firewall rules for manila api service
When the manila api service is deployed
on a different role than the controller the
iptables rules on that role fail to ACCEPT
tcp at the manila API ports.

Add tripleo.manila_api.firewall_rules to
the relevant puppet services module.

Change-Id: I1c5459f5ba989657fd99fd72c7ac9f8781cc7206
Closes-Bug: #1640568
2016-11-09 14:09:44 -05:00
Jenkins
1efaa8c6a2 Merge "Reload haproxy configuration as a post-deployment step" 2016-11-09 18:10:35 +00:00
Jenkins
f754c57ee1 Merge "ceilometer compute agent needs restart on compute upgrade" 2016-11-09 17:05:41 +00:00
Jenkins
3ddf0dd3ef Merge "set url_base option in static web middleware" 2016-11-09 16:30:18 +00:00
Michele Baldessari
dde12b075f Fix race during major-upgrade-pacemaker step
Currently when we call the major-upgrade step we do the following:
"""
...
if [[ -n $(is_bootstrap_node) ]]; then
    check_clean_cluster
fi
...
if [[ -n $(is_bootstrap_node) ]]; then
    migrate_full_to_ng_ha
fi
...
for service in $(services_to_migrate); do
    manage_systemd_service stop "${service%%-clone}"
    ...
done
"""

The problem with the above code is that it is open to the following race
condition:
1. Code gets run first on a non-bootstrap controller node so we start
stopping a bunch of services
2. Pacemaker notices will notice that services are down and will mark
the service as stopped
3. Code gets run on the bootstrap node (controller-0) and the
check_clean_cluster function will fail and exit
4. Eventually also the script on the non-bootstrap controller node will
timeout and exit because the cluster never shut down (it never actually
started the shutdown because we failed at 3)

Let's make sure we first only call the HA NG migration step as a
separate heat step. Only afterwards we start shutting down the systemd
services on all nodes.

We also need to move the STONITH_STATE variable into a file because it
is being used across two different scripts (1 and 2) and we need to
store that state.

Co-Authored-By: Athlan-Guyot Sofer <sathlang@redhat.com>

Closes-Bug: #1640407
Change-Id: Ifb9b9e633fcc77604cca2590071656f4b2275c60
2016-11-09 14:51:51 +01:00
Jenkins
8e84a58749 Merge "Defaults kernel.pid_max to 1048576" 2016-11-09 13:45:28 +00:00
Jenkins
f118fc0619 Merge "Enable internal TLS for Nova API" 2016-11-09 13:30:18 +00:00
Jenkins
465324cb6a Merge "Add Sahara plugins list as a configurable parameter" 2016-11-09 10:51:12 +00:00
Thiago da Silva
14829560b6 set url_base option in static web middleware
Depends-On: Icf45cf2aece398b836c87ddffde5d3056e96dc4d

Change-Id: I3577dc38a0b52092ee5e98a381eb52c3d2768c10
Signed-off-by: Thiago da Silva <thiago@redhat.com>
2016-11-08 16:37:51 -05:00
Jenkins
56bbb9f0ce Merge "Enable internal TLS for gnocchi" 2016-11-08 16:22:00 +00:00
Pradeep Kilambi
094bbefe71 ceilometer compute agent needs restart on compute upgrade
After compute nodes are upgraded, the ceilometer compute agent
doesnt poll and throws warnings. Restarting the compute agent
at this step gets the service back to its normal state.

Closes-Bug: #1640177

Change-Id: I7392de43e933b1d16002e12e407748ae289d5e99
2016-11-08 15:52:04 +00:00
Jenkins
f01f9e4cbe Merge "Do not reference CephBase from CephExternal service" 2016-11-08 15:29:01 +00:00
Jenkins
82f50a2d2d Merge "Use --globoff when downloading artifacts" 2016-11-08 15:19:19 +00:00
Jenkins
189f37ff9b Merge "Add SNMP role to the CephStorage nodes" 2016-11-08 15:08:47 +00:00
Carlos Camacho
17e727d716 Reload haproxy configuration as a post-deployment step
After deploying a fresh installed Overcloud or updating the stack
the haproxy configuration is updated correctly but no change in the
HA proxy stats happens.

This submission will add the missing resources to run pre and post
puppet tasks.

Closes-bug: 1640175

Change-Id: I2f08704daeee502c618256695a30ce244a1d7ba5
2016-11-08 13:56:18 +00:00
Giulio Fidente
b1624dd33d Use --globoff when downloading artifacts
We do not encode the chars like [] possibly found in  the artifacts
URL, so curl tries to glob against IPv6 addresses in brackets. This
change adds --globoff to the curl options so that IPv6 addresses in
brackets are not misinterpreted.

Closes-Bug: 1640148
Change-Id: Ic86ba1e5fb674bc15b4bcc6bd3ea9e943c4fbf8e
2016-11-08 12:19:27 +00:00
Juan Antonio Osorio Robles
665fad1e4c Enable internal TLS for Cinder API
This adds the necessary hieradata for enabling TLS in the internal
network for Cinder API.

bp tls-via-certmonger
Depends-On: Ib4a9c8d3ca57f1b02e1bb0d150f333db501e9863

Change-Id: I126e890076bc96b1cd166a919eff6aa1bb80510b
2016-11-08 11:51:18 +00:00
Tim Rozet
5ba02aa54b Removes deprecated overcloud VIP outputs
These VIPs were previously used to create endpoints, but are no longer
used.  The one exception is KeystoneAdminVip, which is used by the
python-client.

Closes-Bug: 1639956

Change-Id: Iafdf37b6ee91806d683592a99e025a8de4c0ff20
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-11-07 16:48:35 -05:00
Tim Rozet
d3f75f6329 Fixes incorrect reference to OpendaylightApiNetwork
The renaming of the network to conform to correct case parsing was done
and converted OpenDaylightApiNetwork -> OpendaylightApiNetwork.  There
was still a reference to the old network name which would result in an
empty value being pass to odl_bind_ip.

Closes-Bug: 1639944

Change-Id: I17fe348c4651420112b9b37711654a454e30b291
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-11-07 16:34:45 -05:00
Juan Antonio Osorio Robles
b5cb4e4211 Add missing Barbican endpoint from tls-everywhere environment
Change-Id: Ibabf09a8b6f35c9b086efeffcf7db89ab8d6b63b
2016-11-07 17:02:35 +00:00
Juan Antonio Osorio Robles
ed95fda7ed Ensure heat-domain hiera is in nodes that contain keystone
The commit that this depends on only works if heat is deployed in the
same node as keystone. Once we deploy them in different nodes, keystone
won't be able to retrieve the appropriate hieradata. This fixes that by
setting the appropriate hieradata to be deployed on the keystone service
by the heat profiles.

Change-Id: I1f08db68a14486526879d1a5a1ff78cb17686924
Depends-On: I7d42d04ef0c53dc1e62d684d8edacfed9fd28fbe
2016-11-07 16:59:20 +00:00
Jenkins
eab3b9f72e Merge "Move per role Services defaults into environment file" 2016-11-07 16:09:13 +00:00
Jenkins
20188a2bf0 Merge "Change nova ram_allocation_ratio to match puppet-nova" 2016-11-07 14:48:11 +00:00
Jenkins
2454ee755f Merge "Add an optional extra node admin ssh key parameter" 2016-11-07 14:12:20 +00:00