aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles/neutron
AgeCommit message (Collapse)AuthorFilesLines
2016-11-15Remove Ansible from KollaSteven Dake36-1776/+0
Change-Id: I5396e4b9927d3e65b6aa4185238a43a4765a996b
2016-11-15Merge "Ansible-ize OpenStack Designate"Jenkins1-2/+3
2016-11-14Merge "Fix placement of policy.json"Jenkins1-1/+10
2016-11-14Ansible-ize OpenStack DesignateRoss Krumbeck1-2/+3
Implement containers for main designate components. Add designate enable options and port configuration. Add designate groups to ansible inventory. Add designate configuration to haproxy. Add designate port checks. Add designate passwords to passwords.yml. Enable Designate and Neutron integration. Enable Designate and Nova integration. Fix designate-pool-manager container name for consistency. Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: I34d8126e0cd8d71d5ced9b62f3776cc354fbb549 Implements: blueprint ansible-designate
2016-11-14Fix neutron.conf.j2 metadata_workers spelling errorbjorn lofdahl1-1/+1
Change-Id: I8dbb25d643ab8da2b049f70d28bdd0839b9f2605 Closes-Bug: #1641591
2016-11-12Fix placement of policy.jsonDuong Ha-Quang1-1/+10
Currently, policy.json is put in "{{ node_config_directory }}/{{ service_name }}" in target nodes. Relocation policy.json to "{{ node_config_directory }}/{{ item }}" with item is corresponding service compoment config directory. Currently, the policy.json is copied to all services, but it should be reviewed and left only in neccesary service (at many cases, only API service needs that). Redundant files will be removed in follow up patchset. Change-Id: I0e997dccf4ec438c9c0436db71ec2fd06650f50d Closes-Bug: #1639686
2016-11-06Uses tunnel_interface as ovs tunnel instead of api_interfaceZhijiang Hu1-1/+1
Closes-Bug: #1638242 Change-Id: Ib5192d1379457cd4292fc71dcbd62f78a02a1c07 Signed-off-by: Zhijiang Hu <hu.zhijiang@zte.com.cn>
2016-11-04Merge "Custom policy files"Jenkins1-0/+11
2016-11-03Move precheck into its own roleJeffrey Zhang1-0/+1
* Merge prechecks.yml and site.yml playbook * Create empty precheck.yml into all roles. Change-Id: I8a138558a26c0a2a66c5fd48ed37be657c99c1dd Implements: blueprint condition-pre-check
2016-10-30deprecate external_network_bridge option in neutronZhongShengping1-1/+0
Option "external_network_bridge" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future. Change-Id: I2752fca275dd7b340c0ff97bfa3eecc0d3358e63 Closes-Bug: #1637808
2016-10-28Custom policy filesEduardo Gonzalez1-0/+11
Allow operators to use their custom policy files. Avoid maintain policy files in kolla repos, only copying the files when an operator add their custom config. Implements: blueprint custom-policies Change-Id: Icf3c961b87cbc7a1f1dd2ffbfffcf271d151d862
2016-10-18Merge "Fix neutron upgrade permission issue"Jenkins8-0/+81
2016-10-18Fix neutron upgrade permission issueJeffrey Zhang8-0/+81
Change-Id: Id4e9d019ee5072b3a24e383174a2acfdb3ed984d Partial-Bug: #1631503
2016-10-17Merge "Fix stale namespace removal issue"Jenkins1-11/+11
2016-10-15OpenStack Services Should Use keystone_internal_url for authDave McCowan1-1/+1
Horizon and Neutron mistakenly were using keystone_public_url for authentication. This works without error in deployments when the internal services happen to have access to the public network, but it is still wrong. This fails to work when the internal services can not access the public URLs, for example when TLS is enabled on the public endppoints. This patches corrects horizon and neutron to use keystone_internal_url for auth. Change-Id: I59b9094364bef375036028ba86a771dabf28c963 Closes-bug: #1625648
2016-10-15Fix stale namespace removal issueJeffrey Zhang1-11/+11
When using both /run and /run/netns in docker container, mount propagation won't work when delete namespace after the containers are restarted. This PS makes /run mount as shared. Closes-Bug: #1616268 Change-Id: Ie16699e1b193b2bf1263d89ea634e89ea69add9e
2016-10-14Remove indentation from l3_agent.ini.j2James McCarthy1-3/+3
If enable_neutron_dvr is set, it leads to a failure of the 'Copying over l3_agent.ini' task due to parsing errors. TrivialFix Closes-bug: #1633488 Change-Id: Ia30970d65cf7b09fff336fe878d2be02e934b082
2016-10-13Merge "Fix template for multiple physical networks"Jenkins1-2/+3
2016-10-13Merge "Remove do_reconfigure.yml file for all roles"Jenkins2-333/+323
2016-10-13Fix template for multiple physical networksliyingjun1-2/+3
This patch [1] adds support to config multiple physical networks for ovs neutron plugin, but it missed to change ml2_conf.ini.j2 correspondingly. [1]: https://review.openstack.org/#/c/373455/ Change-Id: I1937e1e5986657470add07d4bcf8587642aa45ec Closes-bug: #1631903
2016-10-04Fix l3_agent.ini rendering error when DVRPaul Bourke1-1/+1
The if/else blocks in this file cause a rendering error on control nodes when enable_neutron_dvr: yes ParsingError: File contains parsing errors: <???> [line 3]: u' external_network_bridge =\n' Change-Id: Ia461dcbbec531c4c6295b3c7e10da12c57b7d58b Closes-Bug: 1626995
2016-09-27Remove do_reconfigure.yml file for all rolesJeffrey Zhang2-333/+323
do_reconfigure.yml is introduced to use serial directive. But we use it in wrong. Now serial has moved to playbook file. So it is time to remove the do_reconfigure.yml file Closes-Bug: #1628152 Change-Id: I8d42d27e6bc302a0e575b0353956eaef9b2ca9fd
2016-09-22Merge "Add fwaas_driver.ini file to neutron-vpnaas-agent container"Jenkins1-0/+6
2016-09-21Allow operators to provision multiple physical networksPaul Bourke1-1/+4
Currently Kolla operators are restricted to configuring one physical network (physnet1). This change along with ml2_conf.ini augmentation can be used to setup multiple physical networks in openvswitch. E.g. To configure two physical networks, physnet1 and physnet2, with ports eth1 and eth2 associated respectively: In /etc/kolla/globals.yml, set neutron_bridge_name: "br-ex,br-ex2" neutron_external_interface: "eth1,eth2" In /etc/kolla/config/neutron/ml2_conf.ini [ovs] bridge_mappings = physnet1:br-ex,physnet2:br-ex2 Co-Authored-By: Mick Thompson <michael.a.thompson@oracle.com> Closes-Bug: #1625700 DocImpact Change-Id: I9454ca98d9b058368129123109ccc56f95519874
2016-09-20Add fwaas_driver.ini file to neutron-vpnaas-agent containerChristian Berendt1-0/+6
This solves the following issue: oslo_config.cfg.ConfigFilesNotFoundError: Failed to find some config files: /etc/neutron/fwaas_driver.ini Change-Id: I606e591057574ca113f2cba18618f455f7c36bc6 Closes-bug: #1625672
2016-09-19Merge "Remove duplicate lbaas provider config"Jenkins1-5/+0
2016-09-19Remove duplicate lbaas provider configliyingjun1-5/+0
Option `service_provider` is defined in neutron_lbaas.conf, there is a duplicated config option in neutron.conf, it should be removed there. Otherwise neutron-server will not be able to start with error: 'Invalid: Driver neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver is not unique across providers' Change-Id: I3fc379535eb00bbcb23aa41de95ca8161883a181 Closes-bug: #1625174
2016-09-19Fix vpnaas for neutronliyingjun1-1/+1
1. Install the missing vpnaas python module in neutron-server Dockerfile 2. Remove duplicated neutron-lbaas-common package from neutron-server, since it is installed in neutron-base 3. Fix service plugin config, it's not vpn`ass` ;)) 'vpnass' -> 'neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin' [1] [1]: https://github.com/openstack/neutron-vpnaas/blob/stable/newton/devstack/settings#L8 Change-Id: I5250b6875d96ef5df9cf39bce10ce072982aa80d Closes-bug: #1625020
2016-09-15Integrate neutron-vpnaas-agent into the neutron Ansible roleChristian Berendt15-19/+203
Implements: blueprint neutron-vpnaas-agent Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: I1fae21f48d5beef47934aef7c23910536955f2b8
2016-09-14Merge "Add Networking-SFC role"Jenkins3-1/+60
2016-09-14Allow Neutron to be run in DVR modePaul Bourke5-6/+32
Introduces a new property "enable_neutron_dvr", along with the appropriate service and template changes to allow DVR. Closes-Bug: #1623463 DocImpact: dvr changes network data paths and adds requirements for NICs Co-Authored-By: Vladislav Belogrudov <vladislav.belogrudov@oracle.com> Change-Id: I87a26e9258228ae2ccb76be1e5f0bb44fac128df
2016-09-14Add Networking-SFC roleprithiv3-1/+60
Networking-SFC is a neutron big-tent project support Service Function Chaining in Neutron. * Rename the image from neutron-networking-sfc-agent to neutron-sfc-agent. * Add networking-sfc role in playbooks. Co-Authored-by: Jeffrey Zhang <zhang.lei.fly@gmail.com> Change-Id: I1f99650eed85f59929d4ab6b2226603c54f29577 Implements: blueprint enable-networking-sfc-support
2016-09-13Fix transport for kolla-kubernetesKevin Fox1-1/+1
TrivialFix Change-Id: I1b6aafaa462b9585f351b627277aa1f2c516bfa2
2016-09-13Added serial option to site.yml.Mick Thompson2-2/+0
Useful for upgrade etc., which is preferablly done serially. Example usage: tools/kolla-ansible deploy OR tools/kolla-ansible upgrade Closes-Bug: #1576708 DocImpact Change-Id: I34b2e16f8ce53e472a4682a4738c4ac0f5abf00c
2016-09-12Adding required check for Orchestration KubernetesSerguei Bezverkhi4-5/+8
Thgis PS add missing check for Kubernetes orchestration engine, without these changes, running kolla-ansible genconfig fails for Kubernetes environment. TrivialFix Change-Id: I25eeb7ae3ddba7c924f6d48aa24afdbe74227170
2016-09-09Move transport_url parameter before service_providers sectionChristian Berendt1-2/+2
TrivialFix Change-Id: I3ab030e4723afb032011b7aacf4b909764e954f0
2016-09-02Merge "Move to transport_url for rabbitmq configuration"Jenkins1-6/+2
2016-08-31Add option to support dhcp/l3 agent haliyingjun2-0/+11
New option enable_neutron_agent_ha added to enable/disable dhcp/l3 agent high availability, dhcp_agents_per_network is default to 2 and it's configurable. Implement blueprint: support-network-ha Change-Id: Id4742aa67c80584634b923195545bf2b654172f3
2016-08-25Move to transport_url for rabbitmq configurationJeffrey Zhang1-6/+2
rabbit_hosts, rabbit_userid and rabbit_password are deprecated for removal.[0] rpc_backend is deprecated for removal.[1] rabbit_ha_queues is deprecated. it is useless when using RabbitMQ >= 3.0 [2] [0] https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/_drivers/impl_rabbit.py#L112,#L134 [1] https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/transport.py#L46 [2] https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/_drivers/impl_rabbit.py#L163,L174 Closes-Bug: #1614082 Change-Id: I05d318ba6c11c5dbfa9fbf67d088a43ab465be30
2016-08-17Start using orchestration_engine variableSerguei Bezverkhi1-1/+1
This PS switches to use orchestration_engine variable to differentiate between ansible and kubernetes when generating configs. TrivialFix Change-Id: I8e566a9995f49e924614331458d0c81b9925e543
2016-08-15Merge "Fix the neutron-lbaas-agent container issues"Jenkins4-11/+9
2016-08-11Fix interface address for Neutron-serverKen Wronkiewicz1-5/+9
Note: This should not result in any behavior changes in regular Kolla, just Kolla-Kubernetes and only when you've overridden stuff in globals.yml Binds to the api_interface_address variable and uses the keystone and memcached facts we defined in earlier patches. Co-authored-by: Ryan Hallisey <rhallise@redhat.com> Change-Id: I8610f4adaa557a21fedd05601e10f5c308fd7ce3 Partially-implements: blueprint api-interface-bind-address-override
2016-08-10Merge "Port with_ loop variable syntax to Ansbile 2"Jenkins1-4/+4
2016-08-10Merge "Introduce a script to launch ovsdb-server process"Jenkins1-1/+1
2016-08-09Introduce a script to launch ovsdb-server processSerguei Bezverkhi1-1/+1
The reason for introducing this script is to be able to launch ovsdb-server and initialize it (create external bridge and plug external interface) in one shot. It is applicable ONLY to Kubernetes environment and it is required for Kubernetes DaemonSet usage. The behavior in classical Kolla has not been changed. TrivialFix Change-Id: I54897cc2c0f2bcaaf0411822f3409bf96e92833d
2016-08-09Port with_ loop variable syntax to Ansbile 2Duong Ha-Quang1-4/+4
Migrate to full variable syntax in with_ loop instead of bare variables for: - ceph - ceilometer - glance - heat - horizon - keystone - mariadb - memcached - neutron - nova - rabbitmq Change-Id: Ib925b4ecea47ac758a77739c9c7e140f06933b08 Partial-Implements: blueprint ansible2
2016-08-09Merge "Make the enable_isolated_metadata and force_metadata to yes in default"Jenkins1-0/+2
2016-08-01Change config for lbaas service_pluginsliyingjun1-1/+1
Lbaasv2 is used by default, we should change service_plugins for lbaas from 'lbaas' to 'neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2' as suggested in networking-guide: http://docs.openstack.org/mitaka/networking-guide/adv-config-lbaas.html#configuring-lbaas-v2-with-an-agent Change-Id: I49a24500403bd2717fcad49742830c6ceaaf210b Closes-bug: #1608344
2016-07-28Merge "Use lbaas alias instead of the class name"Jenkins1-1/+1
2016-07-27Use a lower number of the workersJeffrey Zhang1-0/+3
Use a lower number of workers rather than the default value, which is equal to the number of the cpu. Otherwise, in a multi cpu environment, the number of the processes will very high. In this PS, we use min(5, << number of cpu >>) as the default worker count. Closes-Bug: #1582254 Change-Id: I1c32cf0db794b43b8fb8be18f39190422ca5846f