6279 Commits

Author SHA1 Message Date
Zuul
c32ba879a1 Merge "Enable barbican keystone listener" 2018-01-06 09:35:14 +00:00
Zuul
f9d9919e5d Merge "Remove _member_ role from the keystone accepted roles" 2018-01-06 06:38:34 +00:00
Zuul
3de239d41b Merge "puppet apply: add --summarize" 2018-01-06 04:13:18 +00:00
Zuul
072f0ff28b Merge "Add MinPoll and MaxPoll options to NTP module" 2018-01-06 04:12:14 +00:00
Emilien Macchi
eb324768d0 puppet apply: add --summarize
... so we can know how long take resources configuration in Puppet
catalogs, and more easily debug why we have timeouts.

Change-Id: If3fae8837140caae91120e46b4880146ffe22afc
2018-01-04 09:37:46 -08:00
Bogdan Dobrelya
82f128f15b Fix puppet config volume for iscsid in containers
Bind mount the /etc/iscsi host path for iscsi container puppet config.
Use the real host path /etc/iscsi for containers dependsing on it.

Closes-bug: #1735425

Change-Id: I838427ccae06cfe1be72939c4bcc2978f7dc36a8
Depends-on: I7e9f0641164691682516ac3e72e2145c7d112409
Co-authored-by: Alan Bishop <abishop@redhat.com>
Co-authored-by: Martin André <m.andre@redhat.com>
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-01-02 17:14:17 +00:00
Zuul
d05b39d149 Merge "Remove pingtest env for scenario007" 2017-12-30 13:06:03 +00:00
Zuul
9d9a9302b1 Merge "Add support for DVR in OVN based environments" 2017-12-30 09:53:10 +00:00
Zuul
b9f53536b2 Merge "heat-base: remove default policy rules" 2017-12-30 07:05:06 +00:00
Emilien Macchi
95bafaf6cb zuul: cleanup old unused jobs
Change-Id: I1728c7172b7e11b417a0c77aff677a1441f22966
2017-12-29 14:01:46 -08:00
Emilien Macchi
f855222a93 CI: move tacker / congress from scenario001 to 007
scenario001 is timeouting a lot while scenario 007 is fine and far from
timeout limit, so moving out services.

Change-Id: Id34321f95a0584cbc9f6e40f3cd47ed0386cfc9d
2017-12-29 13:52:48 -08:00
Emilien Macchi
c54b1b6169 heat-base: remove default policy rules
... the rule:context_is_admin is now managed in policy-in-code, in Heat:
https://git.openstack.org/cgit/openstack/heat/tree/heat/policies/base.py#n25

Furthermore, the policy.json file management was removed with:
https://review.rdoproject.org/r/#/c/11102/

Change-Id: Ibb2b7fa8750070fb338d04482a473a2bb3a2ea80
2017-12-29 21:42:23 +00:00
Emilien Macchi
ae81ed9f93 scenario001: disable mongodb (not used)
Change-Id: I4184146486840f9f226749da2cd054864fa42498
2017-12-29 08:36:57 -08:00
Emilien Macchi
fc2d8b2cdc Remove pingtest env for scenario007
We don't need it anymore, since we run Tempest.

Change-Id: I6a78f19fa49a0d53167a6b5a105ba43bd5ab6fc8
2017-12-29 07:47:17 -08:00
Emilien Macchi
2fa0ecece5 multinode-contaier: reduce the number of services
The job timeouts too much, some services are already covered by
scenarios, no need to duplicate testing.

Change-Id: I30092400142af5c3308534a8da9daa22cbb82bad
Depends-On: I2a4aa707fa10664f1fc9026e3eb417f35834436f
2017-12-29 07:38:03 -08:00
Emilien Macchi
6a6872f390 Introduce OS::TripleO::Services::Rhsm
Background:
extraconfig/pre_deploy/rhel-registration interface has been maintained
for some time now but it's missing some features and the code overlaps
with ongoing efforts to convert everything to Ansible.

Plan:
Consume ansible-role-redhat-subscription from TripleO, so all the logics
goes into the Ansible role, and not in TripleO anymore.
The single parameter exposed to TripleO is RhsmVars and any Ansible
parameter can be given to make the role working.
The parameter can be overriden per roles, so we can think at specific
cases were some Director roles would have specific RHSM configs.
Once we have feature parity between what is done and what was here
before, we'll deprecate the old interface.

Testing:
Because RHSM can't be tested on CentOS, this code was manually tested on
RHEL against the public subscription portal. Also, we verified that
generated Ansible playbooks were correct and called the role with the
right parameters.

Documentation:
We'll work on documentation during the following weeks and explain
how to switch from the previous interface to the new one, and also
document new uses requested by our users.

Change-Id: I8610e4f1f8478f2dcbe3afc319981df914ce1780
2017-12-27 11:03:49 -08:00
Keith Schincke
45e96e5fa5 Remove _member_ role from the keystone accepted roles
As per the development mailing list: Keystone removed _member_ role management

Change-Id: I4f553431d1c38ca8d2c18a213d07f957c388d914
2017-12-27 13:37:40 -05:00
Mike Fedosin
30154ed638 Add MinPoll and MaxPoll options to NTP module
These options specify the minimum and maximum poll intervals
for NTP messages, in seconds to the power of two.

The maximum poll interval defaults to 10 (1,024 s), but can be
increased by the MaxPoll option to an upper limit of 17 (36.4 h).
The minimum poll interval defaults to 6 (64 s), but can be decreased
by the MinPoll option to a lower limit of 4 (16 s).

Change-Id: Ib2929be86e8cb31c00d166abe750354188302415
Closes-bug: #1736170
2017-12-27 16:12:52 +01:00
Zuul
bacacf79e2 Merge "Add docker-registry service" 2017-12-27 13:11:56 +00:00
Zuul
faa521be7d Merge "fix generate_environments to run in python3" 2017-12-27 10:12:15 +00:00
Zuul
acb23f709d Merge "Fixing bug in "test_environment_generator.py"" 2017-12-27 10:12:14 +00:00
Dan Prince
cec41586f7 Add docker-registry service
This is required for the containerized undercloud.

Change-Id: I542a19c084f37aaafd72378857af4f379f335a39
2017-12-27 01:41:50 +00:00
waleed mousa
4fbc8962fc Adds environment file for ODL OVS Hardware Offload
Change-Id: I0bf2bbe486d3897fe18f2bbbd493d745499a51f9
2017-12-27 01:27:48 +00:00
Moshe Levi
609784ded1 fix generate_environments to run in python3
This patch fix the following error when running python3
TypeError: can only concatenate list (not "dict_keys") to list

Change-Id: Ic487bf4c4f6cb2bc35011416056bef1417a23076
2017-12-27 03:25:04 +02:00
waleed mousa
6035443151 Fixing bug in "test_environment_generator.py"
The method "generate_environments" in environment_generator.py
takes two arguments but 1 given in "test_environment_generator.py"

Change-Id: I39abcf2340ce04f3d193d80c8af177027c512556
2017-12-27 03:25:04 +02:00
Zuul
e6db8c4ad0 Merge "Allow to increase docker daemon verbosity" 2017-12-26 15:55:56 +00:00
John Fulton
e5cda83954 Add new roles for Ceph containerization
With the move to containers, Ceph OSDs may be combined with other
Ceph services and dedicated Ceph monitors on controllers will be
used less. Popular Ceph roles which include OSDs are Ceph file,
object and nodes which can run all Ceph services. This pattern
will also apply to HCI roles. This change adds the following
pre-composed roles to make it easier for users to use these
patterns:

- CephAll: Standalone Storage Full Role (OSD + MON + RGW + MDS + MGR + RBD Mirroring)
- CephFile: Standalone Scale-out File Role (OSD + MDS)
- CephObject: Standalone Scale-out Object Role (OSD + RGW)
- HciCephAll: HCI Full Stack Role (OSD + MON + Nova + RGW + MDS + MGR + RBD Mirroring)
- HciCephFile: HCI Scale-out File Role (OSD + Nova + MDS)
- HciCephObject: HCI Scale-out Object Role (OSD + Nova + RGW)
- HciCephMon: HCI Scale-out Block Full Role (OSD + MON + MGR + Nova)
- ControllerNoCeph: OpenStack Controller without any Ceph Services

Change-Id: Idce7aa04753eadb459124d6095efd1fe2cc95c17
2017-12-24 07:07:11 +00:00
Emilien Macchi
309e409c37 zuul: disable voting on scenario 001, 002 and 003
CI is very unstable now but we need to merge some patches
so we can get promotion and hopefully stabilize CI.

Change-Id: Iffbb2da53221efe6f014f245316c66913ff8c648
2017-12-23 23:05:59 -08:00
Zuul
843f6dc4ca Merge "Add validation task in docker services [Heat]" 2017-12-23 07:20:36 +00:00
Zuul
8809cd0ad4 Merge "Update templates alias to queens" 2017-12-23 07:20:34 +00:00
Zuul
28cbfa8d33 Merge "Improve debugging possibilities for docker-puppet.py time handling" 2017-12-23 04:25:17 +00:00
Zuul
17c227f5e2 Merge "Add proper debug switch on init_bundles" 2017-12-23 01:24:10 +00:00
Zuul
ed38a7dafd Merge "Wait for rabbitmq_ready tag" 2017-12-21 22:38:17 +00:00
Mike Fedosin
5ef76cc16c Allow to increase docker daemon verbosity
This patch exposes puppet_tripleo's docker_options
in the tripleo-heat-templates.

Change-Id: I1b48b2a25dfa5afc3d2e4e4c8f0593e03ead3907
Closes-bug: #1715134
2017-12-21 20:52:21 +01:00
Ade Lee
02d452a097 Enable barbican keystone listener
The barbican keystone listener has been added to the same pod
as the barbican api.  Need to set some barbican config to enable it.

Also set a specific topic for barbican_notifications so that
we do not compete with other services.

Change-Id: I5f7e4d2367b9776a1b7e74d1727472e1f81f509a
2017-12-21 14:33:00 -05:00
Zuul
91cf79d74f Merge "nova: Add VerifyGlanceSignatures compute param" 2017-12-21 17:31:13 +00:00
Daniel Alvarez
e9a1122b3b Add support for DVR in OVN based environments
This patch adds the ability to configure DVR in
networking-ovn setups.

Depends-On: I565a5b9918eaf9df1d315c653f76dc4136953ca9

Change-Id: I14d3411f62b411010ea4bd270746436fe3e3cd3a
Signed-off-by: Daniel Alvarez <dalvarez@redhat.com>
2017-12-21 13:06:46 +01:00
Zuul
8a608f34d8 Merge "Manila network plugin address family support" 2017-12-21 02:26:27 +00:00
Zuul
1bf2793db8 Merge "Check for yum lock befor all yum* operations." 2017-12-20 16:25:39 +00:00
Lee Yarwood
80e9bb33a9 nova: Add VerifyGlanceSignatures compute param
This controls image signature verification during instance creation on
the compute host.

Change-Id: I0d80cbd38eb4e3d110443f6b9a8a7c7643c43453
2017-12-20 10:07:06 +00:00
Carlos Camacho
b13728cac3 Update templates alias to queens
There are still some templates with the wrong
alias name. This patch updates them with the
correct version.

Change-Id: I43549ac98f3736029d4aaad1ead745caf40f9299
2017-12-20 10:27:23 +01:00
Ian Main
e144858927 Create flavors for undercloud
We weren't creating the default flavors for the undercloud.  Do it here!

Co-Authored-By: Martin André <m.andre@redhat.com>
Change-Id: Ic0b00ab42422e8d7f1ddd750d993c7919af0823e
2017-12-19 22:17:53 +00:00
Tom Barron
d8b1d64add Manila network plugin address family support
Set NetworkPluginIpv6Enabled if IPv6 networks
have been enabled.  Currently this parameter and
NetworkPluginIPv4Enabled are mutually exclusive so
set the latter false as well.  Default is IPv4
with NetworkPluginIPv4Enabled.

Depends-On: Ic7e5b5351e429755ba48613ab89d1b7e7d6e2d34
Change-Id: Ia895d7190f0fb8e97c87b3178461d9fc26393b9b
2017-12-19 17:10:07 -05:00
Zuul
ec0f4130ea Merge "Enable queueing to use barbican workers for key generation" 2017-12-19 20:52:31 +00:00
Zuul
eb0b4d1534 Merge "undercloud: set default_resource_class to 'baremetal'" 2017-12-19 20:52:25 +00:00
Zuul
bcad34bc53 Merge "Improve comment re nova live_migration_tunnelled setting" 2017-12-19 20:37:31 +00:00
Zuul
82a9a293d2 Merge "fix the description of CongressDebug" 2017-12-19 20:37:30 +00:00
Michele Baldessari
bab6ec2532 Wait for rabbitmq_ready tag
We need to wait for rabbitmq_ready exec so that rabbit is fully
up. This can only happen if we add the tag for it.
Also we need to make sure that launching the epmd process cannot
happen. The reason for this is the following:
When the puppet-rabbitmq module gets invoked (a simple facter run
will be sufficient) inside the rabbitmq_init_bundle container it spawns
an epmd process.
Now if we wait for the Exec[rabbitmq-ready], it means that this epmd
process is staying around until rabbit is up, but then will disappear
suddenly when the rabbitmq_init_bundle container exits, which will
subsequently confuse the rabbitmq cluster and make it fail.

Partial-Bug: #1739026

Co-Authored-By: Damien Ciabrini <dciabrin@redhat.com>
Co-Authored-By: John Eckersberg <jeckersb@redhat.com>

Change-Id: Ie74a13a6c8181948900ea0de8ee9717f76f3ce79
2017-12-19 15:36:12 +01:00
Yurii Prokulevych
bfe876e01c Check for yum lock befor all yum* operations.
A previous (failed/hanging?) yum process blocks 'yum makecache'
 and 'yum check-update' operations, which leads to timeout during
minor update.

Change-Id: I461c1c722944813493f53f339054f420d6ddbe15
Related-Bug: #1704131
2017-12-19 12:01:05 +02:00
Zuul
3848aea06e Merge "Add "clean" tox target" 2017-12-19 03:54:55 +00:00