276 Commits

Author SHA1 Message Date
Jenkins
f07515afe8 Merge "Add vhost to outward rabbitmq for Murano" 2017-06-16 11:28:33 +00:00
Paul Bourke
aff43f73e3 Add vhost to outward rabbitmq for Murano
Change-Id: I09654f29b59e0327ee1a7961e0990e4c6927e8fc
Closes-Bug: #1620374
2017-06-15 14:19:33 +01:00
Dan Ardelean
58ce2b54ea Add Hyper-V role
Implement an ansible role that adds Hyper-V as a compute node for
OpenStack using Kolla.

This will install and configure the Nova Compute service, the
Hyper-V Neutron agent and FreeRDP-WebConnect.
https://docs.openstack.org/ocata/config-reference/compute/hypervisor-hyper-v.html

Change-Id: I601835b0769c5ff173a980a05a752391ae8cc82f
Implements: blueprint hyperv-ansible-role
Co-Authored-By: Alessandro Pilotti <apilotti@cloudbasesolutions.com>
2017-06-15 16:12:31 +03:00
Paul Bourke
d8fe3ea780 Add a new 'outward' rabbitmq instance
Certain services such as Murano and trove require access to a rabbitmq
instance from tenant networks. [0]

Exposing the internal rabbitmq to end users is a security hole, hence
there are two options, 1) use vhosts in the existing rabbitmq, or two a
separate rabbitmq instances. Given the importance of rabbitmq to the
OpenStack deployment, we have decided to go with a separate instance.
Refer to [1] for more detail on the various options.

This change makes the rabbitmq role generic so that it can be reused, in
this case to start 'outward_rabbitmq'. It needs to be exposed via
haproxy both for network isolation and also because this is what Murano
configuration requires.

Follow on patches will be added to add a vhost in this outward instance
for Murano and other services which require access.

Based on the original work by bdaca[2]

[0] http://murano.readthedocs.io/en/stable-liberty/intro/architecture.html
[1] http://lists.openstack.org/pipermail/openstack-dev/2016-December/109091.html
[2] https://review.openstack.org/#/c/374525

Change-Id: Ib2bcc7ed4bf4f883a7cd1dfad3db89201e3cfd8d
Partial-Bug: #1620374
Depends-On: I020eb6219f89a310451becde41f6f1c7f54baadd
Co-Authored-By: Bartłomiej Daca <bartek.daca@gmail.com>
2017-06-15 11:12:22 +00:00
Jenkins
ca95e2c4e4 Merge "Add a Kolla 'devstack' mode" 2017-06-14 00:02:42 +00:00
Paul Bourke
5cb375645c Add a Kolla 'devstack' mode
Add a new variable 'kolla_devmode', which when enabled, clones and
bindmounts service source code into the containers.

This commit adds the relevant changes for Heat, more services can be
added and built upon.

Usage:
* Set 'kolla_devmode: yes'

* Code is cloned to /opt/stack/{{ project_name }} on target
  node(s)

* Users can develop in these repos, and simply restart the container to
  pick up / test changes.

Debugging can be done from the host via 'remote_pdb'[0].

[0] https://pypi.python.org/pypi/remote-pdb

Implements: blueprint mount-sources
Change-Id: Ic0431b10d723bf84eeefc72039376fe0058dd902
2017-06-08 09:55:54 +01:00
Mathieu Rohon
43900bc8b6 Add skydive service
This patch introduces the ansible materials to deploy
the skydive service, that can be used to monitor and
troubleshoot networking in an openstack deployment.

Implements: blueprint skydive-service

Co-Authored-By: Nicolas Bouron <nicolas.bouron@gmail.com>
Signed-off-by: Mathieu Rohon <mathieu.rohon@gmail.com>

Change-Id: I53051a1b0c85380416288e17040a398b6efb62c0
2017-06-06 09:09:10 +02:00
Eduardo Gonzalez
ab4b1ff785 Support OSprofile usage
OSprofile allows user/devs trace OpenStack requests.

Implements: blueprint enable-osprofiler
Co-Authored-By: Bertrand Lallau <bertrand.lallau@gmail.com>
Change-Id: I82ea85d726011ef6cbf99380f395452d6d7f8053
2017-06-02 22:41:33 +02:00
Jenkins
62972a6c8e Merge "Fix zun deployment" 2017-06-02 12:35:21 +00:00
Eduardo Gonzalez
27b577c484 Fix zun deployment
Configure zun-api to use apache.
Fix zun endpoint (tenant_id) causes a 404 error.
Fix zun.conf options
Change zun port, correct port is 9517
Zun compute need privileged and mount docker lib volume

Change-Id: Id9455e7dde62e1994a3f6ae8f30d378e5cda4262
Closes-Bug: #1682165
2017-06-01 14:26:13 +00:00
Jenkins
f1b7366e78 Merge "Add copy ceph keyring files conditions in cinder" 2017-05-23 11:23:15 +00:00
Jenkins
2286330829 Merge "Add VMware DataStore support to glance" 2017-05-23 10:57:03 +00:00
shaofeng_cheng
c6d2070511 Add VMware DataStore support to glance
Add configure the VMware Storage Backend in glance-api.
Because of the following document was not updated:
https://docs.openstack.org/developer/glance/configuring.html#configuring-the-vmware-storage-backend

So,see code:
https://github.com/openstack/glance_store/blob/master/glance_store/_drivers/vmware_datastore.py
https://github.com/openstack/glance_store/blob/master/glance_store/backend.py

Partially-implements: blueprint kolla-ansible-support-vsphere

Change-Id: Icb73ec501aabd938eb23257518ce0650a329bef3
2017-05-22 16:55:14 +08:00
Bertrand Lallau
2afc869d0f Configure Kibana default index pattern
When Kibana interface is opened for the first time, it requires creating
a default index pattern. To view, analyse and search logs, at least one
index pattern has to be created.
This patch automate "flog-*" default index pattern creation and set it
has default config.

Partially-implements: blueprint default-kibana-dashboard
Change-Id: Ie36696f9ad38ba7e49e65e0793a3b98d9f03ee8d
2017-05-02 22:30:47 +02:00
shaofeng_cheng
3a67e5727b Add copy ceph keyring files conditions in cinder
If used external ceph for cinder,the ceph storage not enable cephx.
So ceph keyring file not does not exist.
Task throw warning of copy over ceph keyring files.

Change-Id: Ibb3cd536c982ad9dede3c2a0ecfc02cdf6e4c1b9
Closes-Bug: #1684461
2017-04-21 09:58:50 +08:00
Jenkins
5be2a8d6a0 Merge "Fix ceph role set target_max_bytes for cache pools" 2017-04-17 11:37:05 +00:00
shaofeng_cheng
cd103b187b Fix ceph role set target_max_bytes for cache pools
Ceph is not able to determine the size of a cache pool automatically,
so the configuration on the absolute size is required here
otherwise the flush/evict will not work.
see
http://docs.ceph.com/docs/master/rados/operations/cache-tiering/

Change-Id: I4d4abb50787093a292e1ee6eb790c10ecf5ccb94
Closes-Bug: #1654375
2017-04-14 18:11:33 +08:00
Jenkins
f9e7e8e893 Merge "Split Openvswitch into own role" 2017-04-13 14:39:16 +00:00
Marcus G K Williams
9badc4de21 Split Openvswitch into own role
Creates Openvswitch role and splits
openvswitch from Neutron role to enable
third party networking solutions that use
Openvswitch or customize Openvswitch.
For example Openvswitch with dpdk or
OpenDaylight.

Change-Id: I5a41c42c5ec0a5e6999b2570ddac0f5efc3102ee
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Partially-Implements: blueprint opendaylight-support
2017-04-11 16:15:35 -07:00
Paul Bourke (pbourke)
93ff74e4d3 Revert "Remove useless variable glance_backend_file"
Turns out this variable is not so useless...! In
I2c167bae6f34a102cd7fe66401d7defe13bf2bf7 we need to determine if a file
based backend is in use in order to determine how many api servers to
start. Without this variable these kind of checks would all need to be
updated every time a new shared storage backend is added.

This reverts commit 867c3bda391626e3d4d6d4d6e803f08621b8f579.

Change-Id: I335acc12b68b577b33d6cb28675225c40e6231cd
2017-04-06 15:36:10 +01:00
Jenkins
7c7ead154d Merge "Use versionless keystone endpoints" 2017-04-05 04:51:33 +00:00
Jenkins
bed0357931 Merge "Remove useless variable glance_backend_file" 2017-03-30 15:11:22 +00:00
jimmygc
867c3bda39 Remove useless variable glance_backend_file
When glance_backend_ceph is not enabled, glance uses file as
backend store by default. Since glance_backend_file is useless
and not overriding glance backend when glance_backend_ceph is
enabled. I think it is good to remove it.

Change-Id: I94cbd8661e43ab296478470ed57d0effc5622ee5
2017-03-30 16:16:47 +08:00
root
2364bee3cc Add zun ansible role
Change-Id: I13cf03d6a97fb94dd7cb309e99a417ad101dc21a
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Partially-implements: bp add-zun-ansible-role
2017-03-30 04:15:17 -04:00
Jenkins
e2d60f5264 Merge "Fix can't find /usr/lib/libCryptoki2_64.so in barbican" 2017-03-22 14:11:11 +00:00
zhubingbing
6d0e31f232
Fix can't find /usr/lib/libCryptoki2_64.so in barbican
Link https://docs.openstack.org/project-install-guide/key-manager/newton/barbican-backend.html#simple-crypto-plugin

Change-Id: I351738c2a98090c56ac69e477fbe5ddec4cc5b26
Closes-Bug: #1672001
2017-03-22 20:43:14 +08:00
Jenkins
9ce2a9b5f4 Merge "Add neutron-bgp-dragent playbooks and sensible defaults." 2017-03-20 10:47:01 +00:00
Eduardo Gonzalez
b14f1c5695 Use versionless keystone endpoints
nova quota fail to create due a recent change.
Keystone endpoint cannot have version v3 in the url.

During upgrade to Pike nova endpoint must be changed
to be versionless.

Change-Id: Idb433d526f7d44dfe4fd02ee918bd67e05c523f6
Depends-On: I568db4559428525ac6c5083cfc20cffc20be6342
Closes-Bug: #1668663
2017-03-19 12:30:33 +00:00
Jenkins
9e804f4286 Merge "Multi-regions Support" 2017-03-16 17:42:07 +00:00
Thomas O'Neill
94dec80705 Add neutron-bgp-dragent playbooks and sensible defaults.
Depends-On: If7f5c80eb10a1c418785d9c659ae18bfecfcfe33
Change-Id: I9c54f01193b4e12338e71cd1f0a4635dcbfa43fe
Implements: blueprint neutron-bgp-dragent
2017-03-16 10:03:17 +00:00
Paul Bourke
b03906dd8b Enable horizon_backend_database if murano is enabled
Change-Id: I0eed4024b4ca86e458d92bd9703fb4a02feee947
Closes-Bug: #1666618
2017-03-14 14:19:40 +00:00
rcherrueau
dcdbe44190
Multi-regions Support
Add support for basic multiple regions, that is to say, many OpenStack
with a shared Keystone (same users) and Horizon. The shared Keystone
and Horizon are deployed into one region, for instance RegionOne.
Services of other regions have an access to this Keystone. This
support assumes that the operator knows the name of all OpenStack
regions in advance, and considers as many Kolla runs as there are
regions.

The new variable, multiple_regions_names, contains the name of
regions. It is needed by the region that includes Keystone and
Horizon. In register.yml, it specifies to create as many Keystone
endpoints as there are regiones, so that services of other regions can
connect to Keystone. In local_settings.j2, it changes the render to
support multiple regions in Horizon. The multi-regions.rst explains
how to perform a multiple regions deployment.

Implements: blueprint multi-kolla-config
Change-Id: Icab2aebfc4de0e3bc609950956e0af397705f403
2017-03-10 14:24:42 +01:00
caoyuan
a82aadd982 Add the missing "ironic_inspector" into precheks
- remove the unnecessary blank
- add "ironic_inspector" into its own prechecks and haproxy prechecks

Change-Id: Id542971057a9116eef679f1eb0827266eb18ba30
Closes-bug: #1668178
2017-02-27 07:57:30 +00:00
Jenkins
dd35292aa6 Merge "Fix typo in all.yml" 2017-02-17 03:36:10 +00:00
zhuzeyu
f6af64bd99 Fix typo in all.yml
Change-Id: Ifff1d1840c3e790afbe6993d0a9c6e201d5f0ba4
2017-02-16 09:32:09 +08:00
Chung Chih, Hung
b719782d44 Secret generate fail with hostvars is undefined
When Kolla-kubernetes try to generate secret, it will found one file
named ansible/group_vars/all.yml at kolla reporitory. Then try to render
the file. There is one variable named tunnel_interface_addres which will
access hostvars variable, but this variable is not exist at kubernetes
orchestration engine.

We should add condition statement which will determine whether
orchestration engine is ansible.

Co-Authored-By: Duong Ha-Quang <duonghq@vn.fujitsu.com>

Change-Id: I998a7540de3dcae53acb73de79fb8a8e76cc4225
Closed-Bug: 1649247
2017-02-16 08:15:42 +07:00
caowei
d467161399 Load freezer dashboard
Change-Id: Ib7354920de24dbab9481553bad6521e2f5e93fae
Depends-On: I8a70c7e95cdd6517816060e148d3fdc4857182f4
Closes-Bug: #1661953
2017-02-05 21:24:34 +08:00
Jenkins
4938e80b81 Merge "Enable tacker_horizon when enable_tacker is yes" 2017-02-05 12:57:50 +00:00
Jenkins
6856a6f804 Merge "Integrate designate with neutron" 2017-02-05 02:36:21 +00:00
qiankun.zhang
138ff1656d Enable tacker_horizon when enable_tacker is yes
Depends-On: Ic63c88436b03c14ef767ee102625e697250c00e0
Change-Id: I0220cdb13686deda8b7a3a622530cd72fbe80dad
Closes-Bug: #1647894
2017-02-04 01:54:36 +00:00
Eduardo Gonzalez
e516ea5099 Integrate designate with neutron
Integrate designate service with neutron to allow instances
and floatingip resolve designate dns.
MDNS service need to be reachable from nova instances
in order to resolve DNS queries.
Added new dns_interface to make this configurable.
Add designate guide.

Closes-Bug: #1661330

Change-Id: I5a2ac5cf2a9aa0977ae42d53dd64699623ddf3ed
2017-02-03 11:06:59 +00:00
Jeffrey Zhang
facfabf3bb Implement nova placement service
Closes-Bug: #1660987
Depends-On: I30efc20e6d918e08860584c017455e6d5fa91a35
Change-Id: If0a79b6013f28871dc9f13c510c919078f3304d5
2017-02-02 05:18:13 +00:00
Jenkins
2157d9787a Merge "Add freezer ansible role" 2017-01-27 12:12:52 +00:00
caowei
9c82ed8071 Add freezer ansible role
Co-Authored-By: caoyuan <cao.yuan@99cloud.net>
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>

Change-Id: I419f7ceb219ea9643cfd225c130018f967ddd860
Partially-implements: bp freezer-ansible-role
2017-01-27 11:19:13 +00:00
Jenkins
8884422f3d Merge "Refactor register.yml files" 2017-01-26 18:48:59 +00:00
Jeffrey Zhang
8155d74d8d Refactor register.yml files
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Change-Id: I9a4a6b6523dee4b388513386b7d85d421f2b7b89
2017-01-26 17:10:27 +00:00
Jenkins
7ee53a563a Merge "Add chrony ansible role" 2017-01-26 12:03:27 +00:00
Jenkins
f2f30b4a5e Merge "Ansible config for nova-serialproxy console" 2017-01-24 16:40:40 +00:00
Jenkins
1da30ce395 Merge "Allow cinder-volume to be configured to use HNAS nfs" 2017-01-24 13:08:38 +00:00
Jenkins
2b37e3b871 Merge "Add fluentd role" 2017-01-24 12:54:12 +00:00