365 Commits

Author SHA1 Message Date
Jenkins
7c017a85c5 Merge "Increasing neutron timeout for low memory usage" 2016-11-11 20:21:43 +00:00
Jenkins
b0ffc79452 Merge "Fix inconsistent Manila service naming" 2016-11-11 14:47:28 +00:00
Arx Cruz
c99c48b84e Increasing neutron timeout for low memory usage
We are noticing several tests failing in our low memory environment
because of timeout in neutron requests.
As an example the test
tempest.api.compute.servers.test_server_actions.ServerActionsTestJSON
fails because it requests to plug a vif, and send request to neutron,
which responds in more than neutron_url_timeout, and since the option
vif_plugging_is_fatal is set to True as default, the test fails.
Shortly thereafter, checking in neutron log you can see the request,
returning with the proper status, after more than neutron_url_timeout,
however, it's already too late once nova already marked the instance
with error status, and so the test fails.

Closes-Bug: #1641135

Change-Id: If0991c114f199490ac0deb71eb569a42d4711359
2016-11-11 15:45:23 +01:00
Steven Hardy
548bf8ada5 Fix inconsistent Manila service naming
The capitalization of OS::Tripleo is wrong compared to all other services
so correct this for avoidance of confusion when folks write custom roles_data
files or pass custom service lists via *Services parameters.

Change-Id: Ib73c80871b45586edb5774e90280ff89fc0d9895
Closes-Bug: 1640871
2016-11-10 17:06:47 +00:00
Juan Antonio Osorio Robles
b5cb4e4211 Add missing Barbican endpoint from tls-everywhere environment
Change-Id: Ibabf09a8b6f35c9b086efeffcf7db89ab8d6b63b
2016-11-07 17:02:35 +00:00
Jenkins
463f6f6554 Merge "Updated Nuage neutron plugin name" 2016-11-04 17:23:08 +00:00
Jenkins
d106161466 Merge "Add Barbican to the overcloud" 2016-11-01 17:27:20 +00:00
Jenkins
0f41197e6a Merge "Re-add NFS backend for Glance" 2016-11-01 12:23:47 +00:00
lokesh-jain
4a17efe5a7 Updated Nuage neutron plugin name
Updated plugin name for configuring Nuage.
Nuage plugin name changed after Liberty release
and needs to be updated at all instances.
Updated neutron-nuage-config.yaml file to reflect
the change.

Change-Id: I7cce9a07b909ab59bf249439eec0833afce5cca6
Closes-Bug: #1635033
2016-10-31 13:05:52 -04:00
Jenkins
2dc1618e21 Merge "Composable Mistral services" 2016-10-21 21:04:15 +00:00
Jenkins
774ad60314 Merge "Prefill Sensu client custom config" 2016-10-21 21:00:23 +00:00
Jenkins
85f6017ba2 Merge "Add missing Ceph endpoints from tls-everywhere environment" 2016-10-21 14:42:17 +00:00
Jiri Stransky
b6a4bdc3e4 Re-add NFS backend for Glance
We lost ability to store Glance images in NFS mounts as we moved to NG
HA architecture. This patch re-adds that ability, but the parameter
interface changes because the semantics change as well. (Pacemaker
allowed for different mounts than just NFS so the parameters were more
generic, although we only ever tested and documented NFS usage.)

Change-Id: Ic5197e09846bbf75d780dcc74da1717dcf8301d0
Related-Bug: #1635606
2016-10-21 16:22:40 +02:00
Jenkins
cc79c92b73 Merge "Removes EnableODL heat parameter and fixes missing local_ip param" 2016-10-21 12:58:45 +00:00
Brad P. Crochet
9dfc243202 Composable Mistral services
Adds new puppet specific services for Mistral
API and Mistral Engine.

This submission enables the mistral service by default in the
overcloud, a following submission will disable it and make it
optional by enabling it on demand based in an environment file.

Depends-On: Iae42ffa37c4c9b1e070b7c3753e04c45bb97703f
Depends-On: I942d419be951651e305d01460f394870c30a9878
Depends-On: I6cb2cbf4a2abf494668d24b8c36b0d525643f0af
Implements: blueprint composable-services-within-roles
Co-Authored-By: Carlos Camacho <ccamacho@redhat.com>

Change-Id: Id5ff9cb498b5a47af38413d211ff0ed6ccd0015b
2016-10-21 08:07:08 -04:00
Jenkins
ded5fe48f7 Merge "Generate internal TLS hieradata for apache services" 2016-10-21 12:05:37 +00:00
Juan Antonio Osorio Robles
7cc594c53a Add missing Ceph endpoints from tls-everywhere environment
Change-Id: Ib945e570556e8e10e5bb07faa57270958c9eda99
2016-10-21 14:36:56 +03:00
Juan Antonio Osorio Robles
debbfbbf8f Generate internal TLS hieradata for apache services
This adds an environment file that can be used to enable TLS in
the internal endpoints via certmonger if used. This will include
a nested stack that will create the hash that will be used to
create the certmonger certificates.

When setting up a service over apache via puppet, we used to disable
explicitly ssl (which sets modd_ssl-related fields for that vhost).
We now make this depend on the EnableInternalTLS flag. This has only
been done for keystone, but more services will be added as the
puppet code lands

bp tls-via-certmonger

Depends-On: I303f6cf47859284785c0cdc65284a7eb89a4e039
Change-Id: I12e794f2d4076be9505dabfe456c1ca6cfbd359c
2016-10-20 12:22:42 +03:00
Ade Lee
5f2f5422d7 Add Barbican to the overcloud
Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Depends-On: If2804b469eb3ee08f3f194c7dd3290d23a245a7a
Depends-On: I091ecfbcb2e38fe77203244ac7a597aedcb558fb
Change-Id: Iacc504fc4fa2d06893917024ce2340d3fb80b626
2016-10-19 06:40:08 +00:00
Tim Rozet
59f19b5e37 Removes EnableODL heat parameter and fixes missing local_ip param
EnableOpenDaylightOnController was not very composable.  Removing this
parameter to make the service truly composable.  Also fixes missing
local_ip setting for OVS, required for VXLAN or GRE tenant networks.

Closes-Bug: 1633625

Depends-On: Ia55c05e12d5d434111a13e1ed795da530e3ff4a5

Change-Id: I0e07e1631793311334d1436ee8fdf9af2802ba70
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-10-17 11:32:06 -04:00
Tim Rozet
6b9fe61995 Disables Neutron ML2 config on Compute for OpenDaylight
This is not needed with ODL and actually triggers deployments to fail
due to missing ODL username/password info on compute nodes.

Depends-On: Ifd906db4e6062ac271c2147fe1149b1009d06ae2

Closes-Bug: 1633630

Change-Id: Ib88e8ef91c393d30c44b86a932103f5a294bc547
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-10-15 21:47:31 +00:00
Jenkins
8b9e9ff4cc Merge "Add flag for internal TLS" 2016-10-13 11:42:23 +00:00
Jenkins
a3f9cf1314 Merge "Add HAProxy TLS handled by certmonger as composable service" 2016-10-13 11:41:20 +00:00
Martin Mágr
9d9eecea56 Prefill Sensu client custom config
- Custom config has to contain OpenStack auth information,
  so it has to be generated for user during deployment.
  This patch maintains the ability to provide a custom
  configuration for the Sensu client.

Change-Id: If449642c4bbad683421e1f461b8721e655db0c45
2016-10-13 11:53:58 +02:00
Jenkins
ca91ce746f Merge "Remove unneeded *_enable_backend hiera from Manila backends" 2016-10-10 19:35:57 +00:00
Wes Hayutin
ff908cc0cc Add new environment for debug
Introduce a new environment template that enables the Debug parameter.
By default the value is set to "true".

Change-Id: Ieac59de42ffef6afa5d8f10ef1925c32c7dc8551
2016-10-07 17:27:22 +00:00
Jenkins
521b8d418f Merge "Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration" 2016-10-07 17:04:12 +00:00
Giulio Fidente
87e83b796d Remove unneeded *_enable_backend hiera from Manila backends
Depends-On: I04e28a95e8d69a24cd3df109bf1802bfcbd941db

Change-Id: I4ada033155e5fde0add08ec9aa8f6af7c31d53f3
2016-10-07 13:58:53 +02:00
Jenkins
b301d5edb7 Merge "Ceilometer Wsgi Mitaka->Newton upgrades" 2016-10-07 11:15:38 +00:00
Pradeep Kilambi
eaf91da5ef Ceilometer Wsgi Mitaka->Newton upgrades
In Newton, ceilometer api is changed to run under apache wsgi
instead of eventlet. This will require upgrades for mitaka
deployments to switch to wsgi.

Closes-Bug: 1631297
Change-Id: If9d6987cd0a8fc5d3f9de518ba422d97d5149732
2016-10-07 11:43:33 +03:00
Dan Prince
ddd4d3cd9f Re-enable ManageFirewall by default.
This default setting got lots in the composable roles/services patches.

Re-enable the ManageFirewall setting by default per what we did in
git commit 73c76b867ddc8a23a30b9a3cac4031189d4178c6.

We also fix a typo in neutron-api.yaml so that the firewall rules
matches to service_name. (otherwise it won't get loaded).

Also, drops the environments/manage-firewall.yaml which is
no longer needed if we enable firewall management by default.

Change-Id: Ie198e4efd190131d0722085b10ef77da9005bc1b
Closes-bug: 1629934
2016-10-06 15:08:53 +00:00
Jenkins
022c8586a9 Merge "Set proper ceph config path for manila" 2016-10-06 12:31:49 +00:00
Tom Barron
273a4499d6 Set proper ceph config path for manila
When deploying manila with cephfs backend,
/etc/manila/manila.conf should define

  cephfs_conf_path = /etc/ceph/ceph.conf

in the cephfs native backend since this is
the conventional path that ceph operators expect
and since we document that path upstream.

Change-Id: I4abf5c33b675b1102413a84d64f4ce23b07b4485
Closes-Bug: 1630777
2016-10-05 17:55:09 -04:00
Jenkins
5e4a51363b Merge "Adds Environment File for Removing Sahara during M/N upgrade" 2016-10-05 18:01:20 +00:00
Tim Rozet
78500bc2e6 Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration
This patch modifies the service name to be more appropriately called
"OpenDaylightApi" along side the "OpenDaylightOvs" service used to
configure OpenVSwitch.  It also splits out the OVS configuration for
controller nodes into the composable OpenDaylightOvs service.

Related-Bug: #1629408

Change-Id: I15221401acdfb2a9ef81107b54a8005348f8372f
Signed-off-by: Tim Rozet <trozet@redhat.com>
2016-10-05 12:06:59 -04:00
Jenkins
ef8bf6379e Merge "Fixing resources path in OpenDaylight" 2016-10-05 14:30:53 +00:00
marios
2e6cc07c1a Adds Environment File for Removing Sahara during M/N upgrade
The default path if the operator does nothing is to keep the
sahara services on mitaka to newton upgrades.

If the operator wishes to remove sahara services then they
need to specify the provided major-upgrade-remove-sahara.yaml
environment file in the stack upgrade commands.

The existing migration to ha arch already removes the constraints
and pcs resource for sahara api/engine so we just need to stop
it from starting again if we want to remove it.

This adds a  KeepSaharaServiceOnUpgrade parameter to determine if
Sahara is disabled from starting up after the controllers are
upgraded (defaults true).

Finally it is worth noting that we default the sahara services
as 'on' during converge here in the resource_registry of the
converge environment file; any subsequent stack updates where
the deployment contains sahara services will need to
include the -e /environments/services/sahara.yaml environment
file.

Related-Bug: 1630247
Change-Id: I59536cae3260e3df52589289b4f63e9ea0129407
2016-10-05 16:32:31 +03:00
Jenkins
ccbc75a814 Merge "Use netapp_host_type instead of netapp_eseries_host_type" 2016-10-04 11:00:47 +00:00
Jenkins
935fbd6feb Merge "Fixed NoneType issue when monitoring-environment.yaml" 2016-10-03 09:50:30 +00:00
Juan Badia Payno
b6b35e4785 Fixed NoneType issue when monitoring-environment.yaml
When you tried to use the environemnt/monitoring-environment.yaml
as a part of the deployment on the overcloud you hit the
following error and it stops the deploy of the overcloud.

***
Deploying templates in the directory /home/stack/tripleo-heat-templates
'NoneType' object does not support item assignment
***

Closes-Bug: #1629323
Change-Id: I8cf2e7d8f3a4e79cc71a1566ec17d0a977c38d60
Signed-off-by: Juan Badia Payno <jbadiapa@redhat.com>
2016-09-30 15:36:33 +02:00
Juan Badia Payno
a23f1929b7 Fixed NoneType issue when logging-environment.yaml is used
When you tried to use the environemnt/logging-environemnt.yaml
as a part of the deployment on the overcloud you hit the
following error and it stops the deploy of the overcloud.

***
Deploying templates in the directory /home/stack/tripleo-heat-templates
'NoneType' object does not support item assignment
***

Closes-Bug: #1629315
Change-Id: I55e5c7f20ddf30f3e48247b734f6fa47f5de3750
Signed-off-by: Juan Badia Payno <jbadiapa@redhat.com>
2016-09-30 15:13:57 +02:00
Juan Antonio Osorio Robles
d2af1b887a Add flag for internal TLS
This sets up a flag that tells the profiles to use TLS (this will happen
in the internal network).

bp tls-via-certmonger

Change-Id: If47febb5b38b1c65f60f9de87a34cb31936a7c0d
2016-09-30 04:32:08 +00:00
Juan Antonio Osorio Robles
9bf37e06b5 Add HAProxy TLS handled by certmonger as composable service
This adds some basic pieces to get certmonger to manage the
certificates for HAProxy. The aim is to be flexible enough that we
will be able to manage both public and internal certificates.

This also adds a relevant environment to get the endpoints to have
TLS everywhere.

bp tls-via-certmonger

Depends-On: I89001ae32f46c9682aecc118753ef6cd647baa62
Change-Id: Ife5f8c2f07233295bc15b4c605acf3d9bd62f162
2016-09-29 17:15:13 +00:00
Giulio Fidente
752394a111 Use netapp_host_type instead of netapp_eseries_host_type
This patch deprecates netapp_eseries_host_type in favor of netapp_host_type.

Change-Id: I113c770ca2e4dc54526d4262bacae48e223c54f4
Closes-Bug: 1579161
2016-09-29 10:52:12 +02:00
Jenkins
38bc3e782a Merge "Add metricd workers support in gnocchi" 2016-09-27 08:24:24 +00:00
Jenkins
b3aab2900f Merge "Activate StorageMgmtPort on computes in HCI environment" 2016-09-27 05:57:14 +00:00
Jenkins
9df19caa5c Merge "Add integration with Manila CephFS Native driver" 2016-09-27 01:11:53 +00:00
Carlos Camacho
3e0694ec1c Add metricd workers support in gnocchi
Depending on the environment, gnocchi workers
uses several controller resources RAM/CPU,
this option makes it configurable.

Also, configured to 1 in environments/low-memory-usage.yaml
which will reduce the service footprint in i.e. CI

Change-Id: Ia008b32151f4d8fec586cf89994ac836751b7cce
Closes-bug: #1626473
2016-09-26 09:28:20 +02:00
Itzik Brown
06da49ee31 Fixing resources path in OpenDaylight
Fixing the path to the resources:
OS::TripleO::Services::OpenDaylight
OS::TripleO::Services::OpenDaylightOvs

Change-Id: Ibdd2149fffe64a17ab25921c3f311a2b4b7242c7
2016-09-25 15:03:10 +03:00
Erno Kuvaja
0eb5de0c5d Add integration with Manila CephFS Native driver
Enables configuring CephFS Native backend for Manila.

This change is based on the usage of environments like in
review https://review.openstack.org/#/c/354019 for Netapp
driver.

Co-Authored-By: Marios Andreou <marios@redhat.com>
Change-Id: If013d796bcdfe48b2c995bcab462c89c360b7367
Depends-On: I918f6f23ae0bd3542bcfe1bf0c797d4e6aa8f4d9
Depends-On: I2b537f735b8d1be8f39e8c274be3872b193c1014
2016-09-23 16:23:05 +03:00