aboutsummaryrefslogtreecommitdiff
path: root/ansible
AgeCommit message (Collapse)AuthorFilesLines
2016-03-02Reconfigure cinder serviceJeffrey Zhang2-0/+85
Change-Id: I8d207d1782acfebf5c07de39df3257fd9bdbbada Partially-implements: bp kolla-reconfig
2016-03-02Reconfigure glance serviceJeffrey Zhang2-0/+73
Change-Id: Ic9e98941711a5fd1b8546de58d278a0b00cf350b Partially-implements: bp kolla-reconfig
2016-03-02Merge "Add ansible support for Manila"Jenkins16-0/+434
2016-03-02Reconfigure for HeatSteven Dake2-0/+79
Add reconfiguration for heat-api, heat-engine, heat-api-cfn. Change-Id: I60d538d08eaf1db38876cccbb0db530b52d302b8 Partially-Implements: blueprint kolla-reconfig
2016-03-02Merge "Add kolla_docker action for reconfigure"Jenkins2-20/+85
2016-03-02Merge "Sanity check for swift"Jenkins3-0/+26
2016-03-02Add kolla_docker action for reconfigureJeffrey Zhang2-20/+85
add three actions used for reconfigure * restart_container * get_container_env * get_container_state Partially-implements: bp kolla-reconfig Change-Id: I63609ce47f044926ff276ab1188b10f44270a0b5
2016-03-01Add ansible support for ManilaMauricio Lima16-0/+434
Co-Authored-By: Marc Koderer <marc@koderer.com> Change-Id: I16bab281f2eca341b7a649f766bae5f2cf18a117 Partially-Implements: blueprint enable-manila-containers
2016-03-01Change default CONFIG_STRATEGYSamYaple1-1/+1
Due to the fact COPY_ONCE is not how most people expect the container to work, as well as causing additional delays in the reconfigure process by needing to delete and recreate teh container, we should default to COPY_ALWAYS. It is both how operators and deployers expect things to work and allows a quick restart to pull in a new config. TrivialFix Change-Id: Ie5f043fc66aa85378f456017c9e31ddbbe6d8880
2016-03-01Merge "Move ironic-discoverd to ironic-inspector"Jenkins12-32/+32
2016-03-01Merge "Remove keystone admin token"Jenkins4-41/+11
2016-03-01Remove keystone admin tokenSamYaple4-41/+11
Admin token has been deprecated upstream. It will be removed in O. We switch over to the new `keystone-manage bootstrap` method for creating the initial admin user, role, and project. Co-Authored-By: Sam Yaple <sam@yaple.net> Change-Id: I6ca90e8d4c3b71009e24b049b2efbc08c05ebfbf
2016-02-29Merge "Move shared variables to group_vars/all.yml"Jenkins4-6/+4
2016-02-29Merge "Use kolla_internal_vip_address for kolla_internal_fqdn"Jenkins1-1/+1
2016-02-29Move shared variables to group_vars/all.ymlSamYaple4-6/+4
This follows the structure we have for Ironic and Nova Closes-Bug: #1551316 Change-Id: I609e3dda40c65b73bb5e1208f702740416a042ed
2016-02-29Use kolla_internal_vip_address for kolla_internal_fqdnJeffrey Zhang1-1/+1
Use kolla_internal_vip_address for kolla_internal_fqdn in the all.yml file. In this way, the global.yml no need set the old/deprecated kolla_internal_address variable. TrivialFix Change-Id: I0768b9a2b615afb6a8b1f7c065189a495b8f9c9b
2016-02-29Sanity check for swiftEugene Bagdasaryan3-0/+26
This runs first sanity check for swift. Once swift is deployed it checks list() Change-Id: I613bf9f2893d66814863893ec5acde5aa252548d Partially-Implements: blueprint sanity-check-container
2016-02-29Merge "Remove the role path from the template src"Jenkins4-4/+4
2016-02-29Move ironic-discoverd to ironic-inspectorAllen Gao12-32/+32
Closes-Bug: #1551052 Change-Id: Ic226287bbf1f1e8d5cc2e1d80ce2975448b1f95c
2016-02-29Run the keystone reconfigure only on keystone group hostJeffrey Zhang1-0/+1
Run the keystone reconfigure only when inventory_hostname in groups['keystone'] Partially-implements: bp kolla-reconfig Change-Id: I9d4b5f39f2d68cfd2ae087e3f8a2ee4785eb9586
2016-02-29Remove the role path from the template srcAllen Gao4-4/+4
The path of the template file under the same role can easily be omitted, and we are using this omitting in most places except those this commit is fixing. TrivialFix Change-Id: I6d1563e235151669d9d9268d69555aae15e31926
2016-02-28Merge "Fix the syntax error for manila in neutron role"Jenkins3-12/+12
2016-02-28Merge "Sanity check for cinder"Jenkins3-0/+27
2016-02-28Merge "Reconfigure keystone service"Jenkins2-0/+41
2016-02-28Merge "Modify a hard-code keystone username in neutron and heat."Jenkins2-4/+4
2016-02-28Fix the syntax error for manila in neutron roleJeffrey Zhang3-12/+12
This is introduced by I21904659b1789fa71118401bfb6ac2227ae564da TrivialFix Change-Id: I8ab62c5b6c69e198e29205518941a9b0054c105f
2016-02-27Sanity check for cinderjvora3-0/+27
This runs first sanity check for cinder. Once cinder is deployed it checks volumes.list() Change-Id: I1b4cc57f21cf0fa52a391229c2c2b3fa995d32a8 Partially-Implements: blueprint sanity-check-container
2016-02-27Merge "Change kolla_internal_address variable"Jenkins46-194/+196
2016-02-27Reconfigure keystone serviceJeffrey Zhang2-0/+41
Partially-implements: bp kolla-reconfig Change-Id: Ied293e59bf4531e88a0e5e5bf9a5f5f495d2a0e7
2016-02-26Merge "Neutron ugprade play"Jenkins3-18/+42
2016-02-26Merge "Add upgrade play for ceph"Jenkins4-5/+16
2016-02-26Merge "Add suport to neutron-agents and ovs runs in storage node"Jenkins5-0/+26
2016-02-26Merge "Add Ansible scripts to generate TLS certificates for testing"Jenkins4-0/+63
2016-02-26Change kolla_internal_address variableSamYaple46-194/+196
Due to poor planning on our variable names we have a situation where we have "internal_address" which must be a VIP, but "external_address" which should be a DNS name. Now with two vips "external_vip_address" is a new variable. This corrects that issue by deprecating kolla_internal_address and replacing it with 4 nicely named variables. kolla_internal_vip_address kolla_internal_fqdn kolla_external_vip_address kolla_external_fqdn The default behaviour will remain the same, and the way the variable inheritance is setup the kolla_internal_address variable can still be set in globals.yml and propogate out to these 4 new variables like it normally would, but all reference to kolla_internal_address has been completely removed. Change-Id: I4556dcdbf4d91a8d2751981ef9c64bad44a719e5 Partially-Implements: blueprint ssl-kolla
2016-02-26Add suport to neutron-agents and ovs runs in storage nodeMauricio Lima5-0/+26
The generic driver for manila need the neutron agents and OVS / Linuxbridge running on the same node as manila_share. This is necessary when the DHSS (Driver Handles Share Servers) is the value "True", so that the manila_share can talk with NFS manager. Change-Id: I21904659b1789fa71118401bfb6ac2227ae564da Partially-Implements: blueprint enable-manila-containers
2016-02-26Add Ansible scripts to generate TLS certificates for testingDave McCowan4-0/+63
Working towards the blueprint that will add TLS protection for the external endpoints, kolla needs certificates. When kolla deploys OpenStack, the external VIP will need a server side certifcate. Clients that access those endpoints will need the public CA certificate that signed that certificate. This ansible script will create these two certificates to make it easy to use TLS in a test environment. The generated certificate files are: /etc/kolla/certificates/haproxy.pem (server side certificate) /etc/kolla/certificates/haproxy-ca.pem (CA certificate) The generated certificates are not suitable for use in a production environment, but will be useful for testing and verifying operations. Partially-implements: blueprint ssl-kolla Change-Id: I208777f9e5eee3bfb06810c7b18a2727beda234d
2016-02-26Neutron ugprade playSamYaple3-18/+42
Since openvswitch is handled in the kernel, it really is as simple as upgrade the container since the container only has userspace tools in it. Partially-Implements: blueprint upgrade-kolla Implements: blueprint upgrade-neutron Change-Id: Iec57c67a1ccba8f48b752fe832cd714bcc658af0
2016-02-26Add upgrade play for cephSamYaple4-5/+16
Ceph is pretty easy to work with. Upgrade mons, then osds, then rgws We want to eventually make these serial values configurable, but for now due to cephs delicate distributed network nature it is safest to only run 1 change at a time. Change-Id: Icc721ab3651379c28fee853ca95f9e3ddf102998 Partially-Implements: blueprint upgrade-kolla Implements: blueprint upgrade-ceph
2016-02-26Fix parsing of RabbitMQ logsÉric Lemoine1-3/+4
Currently Heka fails to parse the RabbitMQ logs. There are two problems: 1. The rabbit-sasl.log file is ignored but the file_match expression does not match. 2. The delimiter used in the RegexSplitter makes Heka stop on the very first log entry. '\n\n(=[^=]+====' (with two \n's) is a better delimiter. deliver_incomplete_final is used to get the final log entry. TrivialFix Change-Id: I94720340d5b2d6fd5d7641b9ff58733f6cd882ee
2016-02-26Modify a hard-code keystone username in neutron and heat.wangtianfa2-4/+4
Changed hard-code keystone username for neutron and heat in the neutron.conf template and heat.conf template. TrivialFix Change-Id: Ibdd1422bd4cae5011f9fc5f4de7dfc58601dca1d
2016-02-25Merge "HAProxy and Keepalived upgrade"Jenkins1-0/+18
2016-02-25Merge "Add the default empty reconfigure.yml file to all roles"Jenkins21-0/+21
2016-02-25HAProxy and Keepalived upgradeMichal (inc0) Jastrzebski1-0/+18
This is single task to upgrade both haproxy and keepalived. It stops slave nodes of keepalived and upgrades them separately to avoid VIP migration and allow nearly no-downtime upgrade Change-Id: I06124635a3f3553a4e8e91013cefbf897dd7179f Implements: blueprint upgrade-haproxy Implements: blueprint upgrade-keepalived Partially-implements: blueprint upgrade-kolla
2016-02-25Add the default empty reconfigure.yml file to all rolesJeffrey Zhang21-0/+21
DocImpact Partially-implements: bp kolla-reconfig Change-Id: I9738e80960bcfbef18d1ef1b7942f81c45684e85
2016-02-24Merge "Ensuring the Mariadb bootstrap configured properly"Jenkins1-1/+4
2016-02-24Merge "Switch ceph to use storage network"Jenkins5-16/+22
2016-02-24Switch ceph to use storage networkSamYaple5-16/+22
Ceph was not properly using storage network. TrivialFix Change-Id: Ibf3da5d19cd2ca874d251b455a7eb856154fc3f7
2016-02-24Merge "Use passed client IP address in various audit logs"Jenkins6-3/+7
2016-02-24Merge "Fix non-idempotent heka bootstrap"Jenkins1-0/+2
2016-02-24Use passed client IP address in various audit logsDave McCowan6-3/+7
HAProxy: change to use option forwardfor to pass origin IP address to backend via X-Forwarded-For header Keystone: Apache does the audit logs for keystone. Change the LogFormat to display the passed address instead of the connection address which is that of the load balancer. Nova, Cinder, Glance: these services can make use of the address passed in X-Forwarded-For. With this setting the API logs for these services include the client IP address. Change-Id: Ia861ecc11a7c7d463d0366586926d1a842853f69 Closes-Bug: #1548935