2891 Commits

Author SHA1 Message Date
Steven Hardy
d297e02c03 Move per role Services defaults into environment file
For parameter merge strategies to work we need to merge multiple environment
files, which doesn't consider the defaults defined in the heat template.

Moving where we define these defaults will enable the merge strategies
applied when appending services to roles in environment files to work.

Change-Id: I1ef1ad685c8a15308d051665c576a98b277f2496
Closes-Bug: #1635409
2016-11-07 15:08:26 +01:00
Jenkins
f761bf9e35 Merge "Move db settings from manila-api to manila-base" 2016-11-07 13:35:31 +00:00
Jenkins
c1421dd565 Merge "Include keystone authtoken config in manila-share service" 2016-11-07 13:34:35 +00:00
Jenkins
cc67cc7be4 Merge "Ensure we update ceph and composable nodes" 2016-11-07 12:50:45 +00:00
Steven Hardy
b4bfc17728 Add an optional extra node admin ssh key parameter
This can be used to pass the e.g. the tripleo-validations ssh key into
the deployment.

Change-Id: I861b9e2252a9c8122dcf7df261386f1ea5200c4f
Related-Bug: #1635226
2016-11-07 12:19:14 +01:00
Jenkins
8d51344919 Merge "swift/proxy: remove swift::proxy::ceilometer::rabbit_host" 2016-11-05 16:55:26 +00:00
Jenkins
d0c9a86b3b Merge "nova: add missing vnc console port in firewall" 2016-11-05 12:11:54 +00:00
Jenkins
7a8611b180 Merge "nova/libvirt: add missing ports for live-migration" 2016-11-05 12:11:47 +00:00
Ben Nemec
16004b9e7e Move db settings from manila-api to manila-base
manila-share also needs the db configuration so the db-sync works
correctly when manila-api is running on a non-controller node.

Change-Id: Ib8a6f10ef6a650275fc011e51acfc4b5c7c99164
Closes-Bug: 1633077
2016-11-04 16:27:08 -05:00
Ben Nemec
f20c044c73 Include keystone authtoken config in manila-share service
Because manila-share is a pacemaker-managed service, it has to be
on the controller node.  If you deploy the api services to a
different node, then manila-share loses access to the authtoken
hieradata generated by manila-api.  Adding it explicitly to the
manila-share config allows this setup to deploy sanely.

Note that I'm having a different problem with manila db-syncs in
this setup, so there's likely another patch required to get it
fully working.

Change-Id: Iac782fa67ea912d24b9905dd8bbafb8ff28dd669
Partial-Bug: 1633077
2016-11-04 12:28:18 -05:00
Jenkins
463f6f6554 Merge "Updated Nuage neutron plugin name" 2016-11-04 17:23:08 +00:00
Emilien Macchi
a560e98874 swift/proxy: remove swift::proxy::ceilometer::rabbit_host
The param is now managed in puppet-tripleo like other services.

Change-Id: I306aa6ac6e2cfc0d4602e15e11564a6be096a121
Depends-On: Ibc0ed642931dd3ada7ee594bb8c70a1c3462206d
2016-11-04 15:50:46 +00:00
Jenkins
cac8c7d285 Merge "Update openstack-puppet-modules dependencies" 2016-11-04 14:08:15 +00:00
Jenkins
27a9382dd8 Merge "Fixup the start of swift services" 2016-11-04 14:08:08 +00:00
Jenkins
08dfb23632 Merge "Add option to disable "d1" Swift device" 2016-11-04 13:24:39 +00:00
Giulio Fidente
69be131d40 Defaults kernel.pid_max to 1048576
In some scenarios we reach the kernel.pid_max value, this change
adds a parameter to the Kernel service for configuration of the
sysctl key and defaults it to 1048576.

Change-Id: Id8f3e6b7ed9846022898d7158fe9180418847085
Closes-Bug: #1639191
2016-11-04 11:12:43 +01:00
Emilien Macchi
fa5a9add9f nova: add missing vnc console port in firewall
- Remove vncproxy firewall rules from nova-api service
- Add vncproxy firewall rules to nova-vncproxy service
- Add console port range firewall rules to nova-libvirt service

Change-Id: I421ae21c130cac6f25e7c0869b941ba77441172c
2016-11-03 18:22:21 +00:00
Emilien Macchi
d006338bd4 nova/libvirt: add missing ports for live-migration
Some ports are missing to support live-migration. This patch adds them.

Documented here:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/paged/migrating-instances/chapter-1-how-to-migrate-a-live-instance

Change-Id: I72634a9940c11602522322235e51bf27cb664e57
2016-11-03 18:22:14 +00:00
Jenkins
2df74cc829 Merge "Rework gnocchi-upgrade to run in a separate upgrade step" 2016-11-03 17:28:58 +00:00
Jenkins
d73f663f66 Merge "gnocchi statsd should be able to send data to port 8125" 2016-11-03 08:36:35 +00:00
marios
a7af5b90e4 Fixup the start of swift services
Seems the conditional has changed and we should pickup the
tripleo::profile::base::swift::storage::enable_swift_storage
hiera data.

After controller nodes are upgraded the swift services were down
even though there was no stand-alone swift node (the current
conditional was failing as that hiera isn't set any more)

Closes-Bug: 1638821
Change-Id: Id1383c1e54f9cae13fd375e90da525230e5d23eb
2016-11-03 07:33:40 +00:00
Carlos Camacho
56c38c1eea Add Sahara plugins list as a configurable parameter
The hardcoded list should be configurable, and defaulted
to their current value.

Change-Id: I517aa61f21c6f4d0975b10a7aa85177c543487e0
Closes-bug: 1560098
2016-11-02 14:47:01 +01:00
Lukas Bezdicka
9bb00f28b9 Ensure we update ceph and composable nodes
The update configuration is generated into ceph.yaml and into
{rolename}.yaml. We should ensure puppet hiera is looking for
these files.

Change-Id: I261d16bc365b3d19adc502385edcc509a53ffc2a
Closes-Bug: #1638346
Resolves: rhbz#1388977
2016-11-02 13:55:33 +01:00
Giulio Fidente
ba66980aa3 Do not reference CephBase from CephExternal service
We want CephExternal to work without referencing CephBase which
instead defines common settings for hosted Ceph deployments.

This change fixes a reference to CephBase which was mistakenly
introduced with fix for bug #1632285.

Change-Id: Id27e935f91ad76a6877b3aa7588f54d6140aa41f
Closes-Bug: #1635014
2016-11-02 12:15:24 +01:00
Pradeep Kilambi
204ebf8233 gnocchi statsd should be able to send data to port 8125
currently udp port 8125 is blocked by default. This can cause issues
when sending statsd data.

Change-Id: Icb5569c4e3dc981e9a8accf32eedd3370552cb34
2016-11-01 16:11:28 -04:00
Jenkins
d106161466 Merge "Add Barbican to the overcloud" 2016-11-01 17:27:20 +00:00
Lukas Bezdicka
d8fa70d2fd Update openstack-puppet-modules dependencies
OPM package is metadata package with unversioned requirements which
means that update does not update the dependencies. This leaves us
with old puppet modules and old puppet during the puppet run.

Change-Id: I80f8a73142a09bb4178bb5a396d256ba81ba98a8
Closes-Bug: #1638266
Resolves: rhbz#1390559
2016-11-01 13:44:57 +01:00
Pradeep Kilambi
a8e119094f Rework gnocchi-upgrade to run in a separate upgrade step
gnocchi when configured with swift will require keystone
to be available to authenticate to migrate to v3. At this
step keystone is not available and gnocchi upgrade fails
with auth error. Instead start apache in step 3, start
apache first and then run gnocchi upgrade in a separate
step and let upgrade happen here.

Closes-Bug: #1634897

Change-Id: I22d02528420e4456f84b80905a7b3a80653fa7b0
2016-11-01 08:33:23 -04:00
Jenkins
0f41197e6a Merge "Re-add NFS backend for Glance" 2016-11-01 12:23:47 +00:00
Steven Hardy
eb34d8cfc0 Change nova ram_allocation_ratio to match puppet-nova
The interface for this moved to init.pp, the one we currently
use now only outputs a warning, it doesn't actually set anything.

Change-Id: Idc40cf0dc4ff0f598e0918e0de8b3233b524cdd5
Closes-Bug: 1638254
2016-11-01 11:15:38 +00:00
Juan Antonio Osorio Robles
65db3743ab Enable internal TLS for Nova API
This adds the necessary hieradata for enabling TLS in the internal
network for Nova API.

bp tls-via-certmonger
Depends-On: I88380a1ed8fd597a1a80488cbc6ce357f133bd70

Change-Id: I45197f98e5b65d6b2ec364676870db4ce582ffe9
2016-11-01 12:22:14 +02:00
Jenkins
3c76dac14d Merge "Add replacepkgs to the manual ovs upgrade workaround and fix a typo" 2016-10-31 23:37:24 +00:00
lokesh-jain
4a17efe5a7 Updated Nuage neutron plugin name
Updated plugin name for configuring Nuage.
Nuage plugin name changed after Liberty release
and needs to be updated at all instances.
Updated neutron-nuage-config.yaml file to reflect
the change.

Change-Id: I7cce9a07b909ab59bf249439eec0833afce5cca6
Closes-Bug: #1635033
2016-10-31 13:05:52 -04:00
Giulio Fidente
178b647166 Add SNMP role to the CephStorage nodes
Previously the CephStorage nodes were missing the SNMP role.

Change-Id: I1356a3ff8da51da4d79b28312f9e3821652b6291
2016-10-31 16:42:31 +01:00
Jenkins
d7653b73a4 Merge "Enable internal TLS for aodh" 2016-10-31 11:49:34 +00:00
Jenkins
e713171e1e Merge "Fix Swift proxy pipeline ordering" 2016-10-31 11:47:52 +00:00
Jenkins
e71604beaf Merge "Enable internal TLS for ceilometer" 2016-10-31 09:43:25 +00:00
Christian Schwede
38fe61be95 Fix Swift proxy pipeline ordering
The Ceilometer middleware is in the wrong place; actually any middleware
should be deployed after catch_errors to catch any errors that would
otherwise crash the proxy service. Additionally the ceilometer
middleware should be deployed after any authentication middleware.

Closes-Bug: 1637471
Co-Authored-By: Thiago da Silva <thiago@redhat.com>
Change-Id: I710ff2f51271a78582fa502e7eecfa687800c664
2016-10-28 13:33:31 +02:00
Christian Schwede
813b3dc4fc Add option to disable "d1" Swift device
A default TripleO installation uses a local directory named "d1" to be
used by Swift. With SwiftRawDisks set it is highly unlikely that that an
operator wants to use this any longer, because it affects system
perforamce and might result in an overfilled the system disk. In this
case d1 should be no longer when building rings.

This patch makes it possible to disable the d1 device usage in the ring
building process by using a new option "SwiftUseLocalDir". This is set
by default to true, not changing the default behavior. If set to false,
the d1 device won't be used when building rings.

Closes-Bug: 1634051
Change-Id: Ia9ad38e3ffa533e170f4cedd0518d830e9b2fa69
2016-10-28 08:49:51 +02:00
Juan Antonio Osorio Robles
9e2e558a5f Set cinder's service name to httpd via t-h-t
With this, we can clean it from puppet-tripleo.

Change-Id: I13638cd1af52537bef8540f0d5fa5f5f7decd392
Depends-On: Ic1967a6f4f60a273965811516f33121115d518b4
2016-10-27 12:08:11 +00:00
Mathieu Bultel
61cba946cd Add replacepkgs to the manual ovs upgrade workaround and fix a typo
rpm command will return an exit 1 if ovs package is already
there and will exit the step_1.sh script. To get around this
force the update with --replacepkgs

Also remove the \ just before the $ which cause a syntax
error for the ceph storage

Change-Id: I11fcf688982ceda5eef7afc8904afae44300c2d9
Closes-bug: 1636748
2016-10-27 11:38:12 +03:00
Jenkins
e60c5377fb Merge "Remove double tcp_listen_options entries for rabbit" 2016-10-26 16:43:41 +00:00
Jenkins
ef38e5af9f Merge "Remove duplicate bind_host from nova-api profile" 2016-10-26 13:35:53 +00:00
Christian Schwede
82e262dff2 Fix usage of SwiftRawDisks
Using the SwiftRawDisks parameter neither created the XFS filesystem nor
mounted the device, requiring manual intervention by an operaror.

Partial-Bug: 1634051
Change-Id: I2da0f12635a37c1f339a3be59a7d00f352adf283
2016-10-26 10:09:41 +02:00
Jenkins
ab00d9393b Merge "Fix the stonith property during upgrades" 2016-10-25 14:38:50 +00:00
Michele Baldessari
3866490052 Fix the rabbitmq/redis pacemaker resource timeouts on updates
With the following two changes we increased the timeout for redis and
rabbit for both starting and stopping to 200s:
https://review.openstack.org/386618 newton (merged)
https://review.openstack.org/385555 master (merged)

We want to also fix that on minor updates on all our supported
releases upstream and downstream (newton, mitaka, liberty, kilo).
This way we can guarantee that we have a uniform timeout for
sart and stop for rabbit and redis across all our releases.

Change-Id: If59bf3386832ee78d3a654f01077aff2e8be76e8
Closes-Bug: #1634851
2016-10-22 20:59:16 +00:00
Jenkins
2dc1618e21 Merge "Composable Mistral services" 2016-10-21 21:04:15 +00:00
Jenkins
774ad60314 Merge "Prefill Sensu client custom config" 2016-10-21 21:00:23 +00:00
Jenkins
f4ec754a4d Merge "Clarify horizon allowed hosts setting" 2016-10-21 20:59:23 +00:00
Jenkins
9b3aba0309 Merge "Use correct password for keystone bootstrap" 2016-10-21 17:13:22 +00:00