aboutsummaryrefslogtreecommitdiff
path: root/etc/kolla/passwords.yml
AgeCommit message (Collapse)AuthorFilesLines
2016-12-29Clean up kolla-ansible related files from KollaSayantani Goswami1-154/+0
- Remove globals.yml and passwords.yml files. - The gate was still using these files from the kolla directory. Modified the gate to prevent using these files from the kolla directory. - Modified the deploy_aio.sh file to populate passwords in passwords.yml using kolla-ansible. Change-Id: I1ed7849d54cab6d5a9217dced73327ea13f06636 Closes-Bug: #1653035
2016-11-14Ansible-ize OpenStack DesignateRoss Krumbeck1-0/+4
Implement containers for main designate components. Add designate enable options and port configuration. Add designate groups to ansible inventory. Add designate configuration to haproxy. Add designate port checks. Add designate passwords to passwords.yml. Enable Designate and Neutron integration. Enable Designate and Nova integration. Fix designate-pool-manager container name for consistency. Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: I34d8126e0cd8d71d5ced9b62f3776cc354fbb549 Implements: blueprint ansible-designate
2016-10-19Support searchlight ansible roleliyingjun1-0/+2
Searchlight is an Openstack search and index service, this patch implements the ansible role for searchlight. Implement blueprint: support-searchlight-deployment Change-Id: Ibf42d5b259a6740d6596041f896e1009657b7388
2016-09-22Merge "Allow use of database for Horizon sessions"Jenkins1-0/+1
2016-09-15Add Kuryr ansible role3.0.0.0rc1Hui Kang1-0/+2
Change-Id: I7134bffab940ee780e5f5010d639af56f97b41d6 Co-authored-by: Mohammad Banikazemi <mb@us.ibm.com> Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Co-Authored-By: Antoni Segura Puimedon <antonisp@celebdor.com> Partially-implements: bp kuryr-docker-plugin
2016-09-15Add etcd ansible roleHui Kang1-0/+5
Change-Id: If8351ab3000006323a05924e907f1e3745768304 Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>> Partially-implements: bp kuryr-docker-plugin
2016-09-14Merge "Added grafana role"Jenkins1-0/+3
2016-09-14Added grafana roleMathias Ewald1-0/+3
Added ansible role to deploy grafana Added host group for grafana deployment Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: I3dec4e8586b6f65fa7de66a48506d1c79de2fe1e Partially-Implements: Blueprint performance-monitoring
2016-09-14Add Senlin Ansible roleEduardo Gonzalez1-0/+3
Change-Id: Ic941a396b5cd9abfb5e9941218e91b784f8bba0a Implements: bp senlin-container
2016-09-13Add Barbican ansible rolezhubingbing1-0/+3
Partially-Implements: blueprint barbican-ansible Change-Id: Id6be35b1d0527d5c38d4ea8576b233ebcc404718
2016-09-08Allow use of database for Horizon sessionsPaul Bourke1-0/+1
Database-backed sessions are scalable (using an appropriate database strategy), persistent, and can be made high-concurrency and highly-available [0] Default is off. [0] http://docs.openstack.org/developer/horizon/topics/deployment.html#database Co-Authored-By: Vladislav Belogrudov <vladislav.belogrudov@oracle.com> Closes-Bug: 1618781 Change-Id: Ib68a21397dc020d20e07dcc51d3d0fdc1de102ff
2016-09-07Add sahara ansible rolezhubingbing1-0/+3
Change-Id: I75b58248bfc4e86cace75faa82526d55a9ebbdbf Partially-Implements: blueprint sahara-role
2016-09-07Merge "Add cloudkitty ansible role"Jenkins1-0/+3
2016-09-07Add cloudkitty ansible roleChristian Berendt1-0/+3
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: Id83c852e32c3dd583e6128e888ac511634e8eabb Partially-Implements: blueprint cloudkitty
2016-09-07Implement Ansible rally rolezhubingbing1-0/+2
Change-Id: I647c38adbfd00c70874cf51c0bfcb68d243e26cc Partially-Implements: blueprint rally-role
2016-09-06Add gnocchi ansible rolezhubingbing1-0/+10
Partially-Implements: blueprint ansible-gnocchi Change-Id: I8dd0460bd21ac0a233fab0142ec7b6079459bdc2
2016-09-01Added Ansible playbook for congress deploymail2nadeem921-0/+3
Change-Id: Id04fe7a8f30ed0dae292933662036f4775e394a2 Partially-Implements: blueprint enable-congress-container
2016-08-31adds bifrost ssh key generationSean Mooney1-0/+4
- This change extend the genpwd.py command to generate an ssh key pair bifrost. - This change bifrost config and bootstrap task to install the generated keys. - This change updates the bifrost guide to discribe how to provide your own key. Change-Id: I05243f58843d9195cace253dff5628fae89c78e8 Implements: blueprint bifrost-support
2016-08-31Merge "Add aodh role"Jenkins1-0/+3
2016-08-31Add aodh rolezhubingbing1-0/+3
Partially-Implements: blueprint ansible-aodh Change-Id: I9e20f4bf5e7d8f37f243ae15746e2b7bb49eb20c
2016-08-25Add full support for fernetShaun Smekel1-0/+4
This addresses the ansible aspects of fernet key bootstrapping as well as distributed key rotation. - Bootstrapping is handled in the same way as keystone bootstrap. - A new keystone-fernet and keystone-ssh container is created to allow the nodes to communicate with each other (taken from nova-ssh). - The keystone-fernet is a keystone container with crontab installed. This will handle key rotations through keystone-manage and trigger an rsync to push new tokens to other nodes. - Key rotation is setup to be balanced across the keystone nodes using a round-robbin style. This ensures that any node failures will not stop the keys from rotating. This is configured by a desired token expiration time which then determines the cron scheduling for each node as well as the number of fernet tokens in rotation. - Ability for recovered node to resync with the cluster. When a node starts it will run sanity checks to ensure that its fernet tokens are not stale. If they are it will rsync with other nodes to ensure its tokens are up to date. The Docker component is implemented in: https://review.openstack.org/#/c/349366 Change-Id: I15052c25a1d1149d364236f10ced2e2346119738 Implements: blueprint keystone-fernet-token
2016-08-10add baremetal role to install kolla deps.Sean Mooney1-0/+4
Change-Id: Ie70db1b18a73528b1194e4fbcf53d09fed20f4a0 Implements: blueprint kolla-host
2016-08-05Add Watcher default settingsDave Walker (Daviey)1-0/+3
This adds: - AIO and multinode inventory samples - Password (blank) fields for default password.yml - Default to not enabled, in globals.yml This is the last changeset in the series to add basic Watcher functionality to Kolla. Change-Id: I9daec0eadc8dad3d37e03e7d69783af003af0916 Closes-bug: #1598929 Partially-implements: blueprint watcher Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2016-06-16Implement ceilometer ansible roleHui Kang1-0/+5
Change-Id: I13c50a78b2dc7c98b720a4b2e7161104213bd295 Implements: bp ansible-ceilometer
2016-04-28Remove the useless nova_ssh configure in the passwords.ymlJeffrey Zhang1-3/+0
The nova_ssh_private_key and nova_ssh_public_key is useless, and they should not be merged. Change-Id: I7e7178398242060a78fe7caee6e14fa77f2ffe35 Closes-Bug: #1576199
2016-04-03Implement nova-ssh containerJeffrey Zhang1-0/+7
Add a nova-ssh container to handle the `nova migrate` and `nova resize` case, in which the nova will use ssh to copy files between machines. Change-Id: Ie6675943f3aeabfbba8589d308d55b9c89d732db Closes-Bug: #1562141
2016-03-24Add kibana authentication using HAproxyakwasniewska1-0/+5
Change-Id: Ib501571dd34cb68924775ce738499d63df5718dd Closes-Bug: 1556487
2016-03-21Remove static passwordCarlos Cesario1-4/+4
Remove static password into file passwords.yml Change-Id: I68d766b9d9b4a7055629473de9bb9d6ab59d8503 Closes-Bug: #1559266
2016-03-21Add generate_passwords.py to generate passwordsSamYaple1-41/+36
As with all tools, this is a first pass at the generation. Perhaps we even want to move this into kolla/kolla/cmd and be generated with tox itself in the future. This tool, when run, will only populate empty fields that have no values meaning that it is safe to run repeatedly on the same file. Of note, there is no way to preserve comments in the file after it has been processed by the yaml parser in python. Comments and sections will remain in the passwords.yml template for additional documentation if the user wishes to populate the file themselves. Use SystemRandom and clean up the docs a bit to not use pronouns. Co-Authored-By: Steven Dake <stdake@cisco.com> Closes-Bug: #1559266 Change-Id: I2932d592df8871f1b7811059206d0b4d0553a687
2016-03-19Move manila variableSamYaple1-7/+0
The user variable was incorrectly in passwords.yml The naming was inconsistent, it should be prefixed with manila_* Removed old unused variable TrivialFix Change-Id: I182797fcc6d62d35174403d78d71c8ad7ddcbc43
2016-03-19Add memcached_servers to keystone_auth sectionSamYaple1-0/+1
The in-process cache for keystone tokens has been deprecated due to "incosistent results and high memory usage" with the expectation we switch to memcached_servers if we want to stay performant. Add memcache_servers [cache] section to the appropriate servers as the [DEFAULT]\memcache_servers options was deprecated. TrivialFix Related-Id: Ied2b88c8cefe5655a88d0c2f334de04e588fa75a Change-Id: Ic971bdddc0be3338b15924f7cc0f97d4a3ad2440
2016-03-04Add authentication for keepalivedJeffrey Zhang1-0/+1
TrivialFix Closes-Bug: #1551314 Change-Id: Id85859500aec283703b6b6714abf213a42286182
2016-03-01Add ansible support for ManilaMauricio Lima1-0/+11
Co-Authored-By: Marc Koderer <marc@koderer.com> Change-Id: I16bab281f2eca341b7a649f766bae5f2cf18a117 Partially-Implements: blueprint enable-manila-containers
2016-03-01Remove keystone admin tokenSamYaple1-1/+0
Admin token has been deprecated upstream. It will be removed in O. We switch over to the new `keystone-manage bootstrap` method for creating the initial admin user, role, and project. Co-Authored-By: Sam Yaple <sam@yaple.net> Change-Id: I6ca90e8d4c3b71009e24b049b2efbc08c05ebfbf
2016-02-15Use uppercase 'S' in word "OpenStack"venkatamahesh1-1/+1
Change-Id: I27ca0ea75f3d6a4371c91b3cb2c7a999ec90fbc4
2016-02-02Create nova-api databaseSamYaple1-0/+1
This is a required patch. Kilo introduced a nova-api database but didn't use it. [1] Mitaka now uses it and has broken booting instances. [2] [1] https://wiki.openstack.org/wiki/ReleaseNotes/Kilo#OpenStack_Compute_.28Nova.29 [2] https://github.com/openstack/nova/blob/df0fca62cf5324f5b6eae0fed1f88c6c9ed61c71/releasenotes/notes/request-spec-api-db-b9cc6e0624d563c5.yaml Change-Id: If0a7f4ba4937fab8d60f5236ca00db06faa768c7 Closes-Bug: #1540579
2016-01-05Ansible files for mistral containers.hparekh1-0/+3
Change-Id: Ifb55ff4a7ca70bc3d10fbb2ec067c245342d3288 Partially-implements: blueprint enable-mistral-container
2015-11-13Add Ansible support for MagnumMichal Rostecki1-0/+3
Change-Id: Idb25ac4d3148c9b9400cf675ac2e47d35cce6224 Implements: blueprint ansible-magnum
2015-10-15Use memcache for consoleauth and horizonSam Yaple1-0/+1
Unfortunately there was no was to avoid memcache for consoleauth, so we might as well take advantage of it for Horizon as well. Change-Id: Idd338a025b031f6b50fe0c9f03c2c8d862f9d4c0 Closes-Bug: #1504606 Closes-Bug: #1504800
2015-09-28Add Ansible support for IronicJeff Peeler1-0/+3
Configuration based off upstream documentation here: http://docs.openstack.org/developer/ironic/deploy/install-guide.html A few notes: -ironic-api is not configured to use mod_wsgi -several places it's noted that discoverd is going away and needs to be replaced with ironic-inspector - (sqlite connection should be changed too) -currently enabling ironic reconfigures nova compute (driver and scheduler) as well as changes neutron network settings -a nice enhancement would be to configure the web console Required post-deployment configuration: Create the flat network to launch the instances: neutron net-create --tenant-id $TENANT_ID sharednet1 --shared \ --provider:network_type flat --provider:physical_network physnet1 neutron subnet-create sharednet1 $NETWORK_CIDR --name $SUBNET_NAME \ --ip-version=4 --gateway=$GATEWAY_IP --allocation-pool \ start=$START_IP,end=$END_IP --enable-dhcp And then the above ID is used to set cleaning_network_uuid in the neutron section of ironic.conf. Change-Id: I572e7ff1f23c4e57a2c50817cafe9269fd9950dd Implements: blueprint ironic-container
2015-09-25Make OpenStack use CephSam Yaple1-0/+1
This implements all the openstack pieces needed to make ceph work. DocImpact Change-Id: I1d24476a966602cf955e5ef872b0efb01319894a Partially-Implements: blueprint ceph-container Implements: blueprint kolla-live-migration
2015-09-24Ceph Ansible supportSam Yaple1-0/+7
Add the initial playbooks for making ceph and ansible play nice together. This does not include all of the openstack changes to make things like nova, glance, and cinder work. This will simply build the ceph cluster and thats it. The next patchset will do the OpenStack integration. DocImpact Change-Id: Ie1697dde5f92e833652933a80f0004f31b641330 Partially-Implements: blueprint ceph-container
2015-09-17Expose HAProxy stats for management purposeQiu Yu1-0/+6
Change-Id: Ia7263a9993e29c8f3db71e86264b786398224223 Closes-Bug: #1496658
2015-09-07Add ansible support for MuranoMick Thompson1-0/+3
Deploy the core services for murano-api and murano-engine containers. Implements: bp ansible-murano Change-Id: Ibcc618665a3509465ba8f9249a417e8848087eef
2015-08-29Add Ansible support for HeatSteven Dake1-1/+4
This changes bootstrapping of the Heat container to bootstrap the Heat container with a heat domain user. This requires some work from bootstrap.yml to pass in several environment variables needed by the heat domain setup script. Co-Authored-By: Sam Yaple <sam@yaple.net> Change-Id: Iab05983754fa514835cb5ff54d775faa18773110 Partially-implements: blueprint ansible-heat
2015-08-26Implement Ansible role for SwiftPaul Bourke1-0/+4
This currently deploys the core services for a working Swift which are account/container/object/proxy. I've included some basic docs in docs/swift-related.rst, which gives usage instructions and more context on this patch. These are really to give an overview of the state of Swift in Kolla as of now, so unless there's some major inaccuracy there please don't nitpick it. Change-Id: Id0c54be3e24c46459c40b16b7020f05bddbe1b19 Implements: blueprint ansible-swift
2015-08-12Add ansible support for CinderSwapnil Kulkarni1-0/+3
Change-Id: I0694e5ad95aa7f924ebd3a29dff1f85e6307b7ae Partially-implements: blueprint ansible-cinder Partially-Implements: blueprint remove-abstraction-ansible Co-Authored-By: Ryan Hallisey <rhallise@redhat.com>
2015-07-12Ansible Nova w/ libvirt supportSam Yaple1-0/+7
Initial support for Nova in Ansible Partially-Implements: blueprint ansible-service Change-Id: I4b0a74bd3e5daa5664f5e1e622bfb40c3285949e
2015-07-09Ansible Glance supportSam Yaple1-0/+3
Adds support for glance in ansible Partially-Implements: blueprint ansible-service Change-Id: I2d162e79f85877116b0e33b1843de6ccb62a445a
2015-07-05Have bootstrap script create the initial endpointSam Yaple1-0/+1
Due to a few issue that exist between keystone v3 and v2.0 the endpoint needs to be created as v2.0. If it is created as v3, v2.0 queries will not see the endpoint. https://bugs.launchpad.net/keystone/+bug/1470635 Change-Id: Ie7ff88b8cbb23b3ca149cb6e8d5a18a427d22038 Partially-Implements: blueprint ansible-service
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 22:15:14 +0000