Commit Graph

82 Commits

Author SHA1 Message Date
Ghanshyam Mann ea238dc447 Retire openstack-chef: remove repo content
OpenStack-chef project is retiring
- https://review.opendev.org/c/openstack/governance/+/905279

this commit remove the content of this project repo

Depends-On: https://review.opendev.org/c/openstack/project-config/+/909134
Change-Id: Ie74b00de70c5ce8180b1d6b06394572ef8025f34
2024-02-19 16:52:22 +00:00
Lance Albertson f04c63bd47 CentOS 8 support
- Update package names
- Migrate to using apache2_mod_wsgi resource and require apache2 ~> 8.6
- Update ChefSpec

Depends-On: https://review.opendev.org/c/openstack/cookbook-openstack-identity/+/815147
Change-Id: Iecf9c2a68d3c246412d2a09a7ac0888dd406c268
Signed-off-by: Lance Albertson <lance@osuosl.org>
2021-10-22 16:54:24 -07:00
Lance Albertson 21424d8868 Chef 17 support
- Remove bind from Berksfile
- Update copyright years
- Require Chef >= 16.0

Depends-On: https://review.opendev.org/c/openstack/cookbook-openstack-identity/+/814051
Change-Id: If07c6d8973bbba605756938f62d351cc323edd7b
Signed-off-by: Lance Albertson <lance@osuosl.org>
2021-10-14 12:56:13 -07:00
Lance Albertson 4c8ec227d6 Update to Chef Workstation 21.2.303
- Cookstyle fixes

Change-Id: I230221e0350a53c0fb5ca05d74cf100c330becc4
Depends-On: https://review.opendev.org/c/openstack/openstack-chef/+/779389
Signed-off-by: Lance Albertson <lance@osuosl.org>
2021-03-08 16:23:13 -08:00
Lance Albertson c13ea35e3d Cookstyle 6.19.5 fixes
Update ChefSpec due to changes made in apache2 cookbook.

Depends-On: https://review.opendev.org/756168
Change-Id: Ia19ea6bebf787f1d8b1542bb6c895a294a5e72bc
Signed-off-by: Lance Albertson <lance@osuosl.org>
2020-10-05 17:30:51 -07:00
Lance Albertson 922e5284e2 Chef 16 updates
Depends-On: https://review.opendev.org/747556
Change-Id: Ib869c7c1aded0cc0669f83fdad9ac1077851f08f
Signed-off-by: Lance Albertson <lance@osuosl.org>
2020-08-27 17:42:17 -07:00
Lance Albertson dbb2758ddd Stein fixes
- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
  cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the template[/etc/aodh/aodh.conf],
  template[/etc/gnocchi/gnocchi.conf] and
  template[/etc/ceilometer/ceilometer.conf] to resources improve
  security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Add missing ChefSpec tests
- Switch package installations to send packages as arrays instead of individual
  package resources. This generally speeds up chef runs.
- Cleanup array syntax using %w() instead of []

Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706101
Depends-On: https://review.opendev.org/706151
Change-Id: I73e3c3dce64798a4d6ba5c94cc45dfabc4d2d0ff
2020-03-19 13:00:31 -07:00
Lance Albertson 111d3621a9 Update to apache2 ~> 8.0 cookbook
This brings us up to date with the latest apache2 cookbook which
included a major refactor in 6.0.0 removing all of the definitions and
recipe with proper resources. Instead of using the apache2_default_site
resource, directly use a template and then enable the config file using
the apache2_site resource. This gives us the most flexibility.

Additional fixes:
- Install mod_wsgi as a package on RHEL since there is no built-in
  resource for it.
- Remove hack for restarting apache.
- Convert web_app to template and subscribe to restarting apache.
- Remove resources to restore SELinux contexts since this taken care of
  by Chef now automatically.
- Don't set SELinux to permissive on RHEL (I tested this works properly
  with it set to enforcing).
- Remove collector recipe as this service has been deprecated upstream.
- Add openstack-ceilometer-notification package for RHEL in
  agent_notification_packages as it was missing.
- Fix gnocchi-api_wsgi_and aodh-api_wsgi_file file on RHEL
- Remove openstack-aodh package in aodh_packages for RHEL as it does not
  exist
- Clean up arrays in attributes using %w(foo) instead of ['foo']
- Set group for upgrade scripts so it can read files properly on RHEL
- Add missing ChefSpec tests for aodh
- Include additional cookbooks in Berksfile required for CI

Depends-On: https://review.opendev.org/702772
Depends-On: https://review.opendev.org/701824
Change-Id: Ie7e6d792a764314775c40d4489cfba05d5c483ce
2020-01-30 09:31:59 -08:00
Lance Albertson 2e36b048fc Manage /etc/ceilometer/polling.yaml
This adds management of /etc/ceilometer/polling.yaml which defines which metrics
to poll and how often. This pulls in the default configuration which the same
for both RHEL and Ubuntu and adds two new attributes for configuring the file.

In addition, restart various services related to the configuration file.

Change-Id: I69ed0a8933a971d9cac20dbd4133197a7e4274af
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-11-19 09:47:54 +00:00
Lance Albertson 0a6f1d840a Remove deprecated api service
The API service for Ceilometer was deprecated in Ocata [1] and apparently we
missed that. This removes all references to the API service which is no longer
needed.

[1] https://docs.openstack.org/releasenotes/ceilometer/ocata.html#deprecation-notes

Change-Id: I7a888a4aaadaa8213d6763854b39d78910fad0db
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-11-19 09:47:11 +00:00
Lance Albertson 2fc511323f Create attribute for setting options passed to ceilometer-upgrade
I ran into a problem similar to this one [1] where testing gnocchi
commands did not work properly. The key problem is the fact that
`--skip-gnocchi-resource-types` was included in the ceilometer-upgrade
command.  To allow an easy work around, I figure we can just create an
attribute which can add any option to ceilometer-upgrade so you can set
it to '' if you don't want it.

It might be debatable on whether to just default to run it with out
ceilometer-upgrade instead.

Some additional fixes include:

- Move the ceilometer-upgrade command to a new setup recipe where it
  makes more sense since it needs to be run after Ceilometer and Gnocchi
  are setup.
- Fix name of gnocchi-metricd_service for RHEL
- Add same apache restart fixes that we implemented in other cookbooks.
  This is needed so that you can properly run ceilometer-upgrade with
  gnocchi enabled.

[1] https://bugs.launchpad.net/openstack-ansible/+bug/1737096

Change-Id: I619ef044b8cb254b23e0c7bc674c46d5dd7e0076
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-11-18 14:47:26 -08:00
Zuul f78fc972d0 Merge "Allow ability to configure pipeline publishers" 2019-11-18 16:11:13 +00:00
Zuul 39f8639584 Merge "Don't copy gnocchi_resources.yaml for RHEL" 2019-11-18 15:59:04 +00:00
Lance Albertson e416ba5d72 Allow ability to configure pipeline publishers
This adds a template for managing the pipeline.yaml file which allows one to
configure the pipeline publishers such as gnocchi or prometheus. The template
file was taken from the latest Rocky tarball for ceilometer.

Change-Id: I938219bfdcfa69a910cae4b72a40c19d5124d99e
2019-11-05 19:12:05 -08:00
Lance Albertson ec8989cfca Don't copy gnocchi_resources.yaml for RHEL
RDO provides a sane copy of this file and it's causing issues on RHEL platforms.

Change-Id: Ia75850fd53829593d556e1e3fb1650f8ad919415
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-10-23 15:33:52 -07:00
Lance Albertson fd3d9ceb62 Fixes to support fog-openstack-1.x
fog-openstack-1.x already appends "auth/tokens" so we no longer need to
do that.

In addition, re-add openstack_endpoint_type which is now fixed now that this [1]
has been released upstream.

[1] https://github.com/fog/fog-openstack/pull/494

Change-Id: I06ee3681ff8bc90f15b2b0ecbdcaebe475709b31
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-10-14 06:27:17 -07:00
Lance Albertson e0a39ccaf1 Fix gnocchi endpoint issues
This fixes two primary issues:

- Removal of using node['openstack']['api']['auth']['version'] and converting to
  using ::URI.decode
- Renaming endpoint attributes from telemetry-metric to telemetry_metric to
  match what's used in openstack-common. Also rename all attributes to using the
  underscore to minimize confusion.

Change-Id: I59c960a18f9e88eea494ec3c7bdbf189309f23e7
Signed-off-by: Lance Albertson <lance@osuosl.org>
2019-06-15 22:56:30 -07:00
Seb-Solon 94e56a4138 Add: Aodh support into telemetry
Closes-Bug: #1779940

Change-Id: I6deefd31562fba5da3987ab31534ebd6689d27e2
2018-07-05 13:06:26 -04:00
Samuel Cassiba a5d4ce3bd2 Simplify identity endpoint
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. As a result, the admin endpoint is no
longer deployed by default.

[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components

Change-Id: Ic2733d94e776eaa50ad8e4a39e6d2a8c18a45d89
Implements: blueprint simplify-identity-endpoint
2018-06-14 19:15:45 -07:00
Zuul d480d8801f Merge "disable ceilometer events when using gnocchi as backend" 2017-12-22 20:55:18 +00:00
Jan Klare 720ffcb9ed
disable ceilometer events when using gnocchi as backend
Change-Id: I0b9adc6a2ea8d5973c71152dd5d5efa3bbacf2a6
2017-12-15 12:09:55 +01:00
Samuel Cassiba b1c74d581e telemetry refactor for Pike and Chef 13
- implemented foodcritic and cookstyle corrections
- deprecated node.foo.bar method access for node['foo']['bar'] bracket syntax
- moved package_overrides to common cookbook

Implements blueprint modern-chef

Change-Id: I7471f1ca3b2348d76e1fd502f335047053459ff4
2017-12-10 11:38:02 -08:00
Roger Luethi 88c718d574 Remove domain role from ceilometer, gnocchi service users
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
membership cannot be tacked on later. This resource gave the users the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).

We add the domain_name attribute that creates the users in the
desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the users are to be
created in the Default domain).

Change-Id: Ie793b3d2e0419da90888edbf33ff28d819892dcf
2017-11-13 15:08:49 +00:00
Roger Luethi 9ad24ffd47 Remove superfluous role_name arguments
This patch removes the role_name when using openstack_user's :create
action (it gets ignored by the target method).

Note that the spec test would still pass if only the line in
identity_registration.rb (but not the test) were changed, because the
code that actually does grant the role to the resource is executed right
after user creation and before any tests check the resource for the
existence of the role_name attribute. In other words: if the argument
were required in a call but only supplied in another call, the spec
tests would not catch it. Something to watch out for.

Change-Id: I45754d269598b821f0b86b6257556ebfe74dcd6b
2017-11-13 15:53:27 +01:00
Seb-Solon 2e812eb316 Replace ceilometer-dbsync by ceilometer-upgrade
ceilometer-dbsync is removed in pike release
see : https://docs.openstack.org/releasenotes/ceilometer/en_GB/ocata.html

Change-Id: I2d2407e4b0deb38e8fa410c9e96e2d16e69964e3
Closes-Bug: #1727329
2017-10-26 09:19:43 -04:00
Samuel Cassiba d6736f20ac Initial telemetry Pike updates
- Switched default linter to cookstyle
- Renamed rake tasks to better conform with Chef conventions
- Normalized template banner

Change-Id: If802d82561619a0b7951422dc0e1e913f2c4c8b4
2017-08-25 10:14:01 -04:00
Samuel Cassiba 76ee6952af Style and lint fixes for chefdk, deprecated Gemfile
- Style and lint fixes for newer chefdk
- Removed ancient Gemfile
- Rewrote metadata.rb for readability

Change-Id: Iba9ba7110dfde7635edc6706ecbbafbdbb161002
2017-08-10 17:50:31 -04:00
Christoph Albers 5578a44ee7 Fixed directory creation
- there was a bug when creating the
  node['apache']['run_dir']}/ceilometer directory
  which won't be created when the enclosing folder doesn't exist.
  This is the case especially on Compute-Nodes in Multi-Node environments

Change-Id: Id7fa2f415b85c83c978cf391c7ad4afe08239250
2017-07-25 12:01:44 +00:00
Samuel Cassiba 128e66eb4b Corrects Ceilometer installation, fixes typo
- corrects deamon_process to daemon_process
- removes duplicate Listen directive in wsgi-template.conf.erb that gets
  emitted in ports.conf that the apache2 cookbook lays down
- adds a run directory for ceilometer api socket

Change-Id: Ia369a50e42453428b0c572659b0c4078920e9890
2017-03-06 18:09:03 -08:00
Jenkins 3d4ebe0106 Merge "Add an option variable to gnocchi-upgrade command" 2017-02-20 13:06:11 +00:00
Jens Rosenboom 3b8259871e Add an option variable to gnocchi-upgrade command
When running with Ceph as Gnocchi storage backend, the upgrade may fail
in certain situations, so we need to be able to insert some option into
the call.

Change-Id: I52be4a184be2b0cca2289acce86d8fdf3b807651
2017-02-17 15:29:04 +01:00
Jens Rosenboom 73fa9aa276 Fix gnocchi installation for Newton
- Remove hardcoded old package version, always upgrade to latest
  version instead
- Install python-gnocchiclient needed by ceilometer in order to access
  the gnocchi backend

Change-Id: I6f6af90d3107df86bd0abbaacfca0836f7771cfe
2017-02-15 17:42:45 +01:00
Samuel Cassiba 5ffe62cb7d Deprecated python-ceilometerclient / python-gnocchiclient
- deleted client.rb
- deprecated python-ceilometerclient / python-gnocchiclient
  references

Implements blueprint newton-xenial

Change-Id: I94ce3d095349bcf59115c3655b13bccd2932130a
2016-12-20 08:40:14 +00:00
Jenkins a266dc83ee Merge "ceilometer-api and gnocchi-api need to be disabled on Ubuntu" 2016-12-19 18:53:06 +00:00
mbuege fa541f72fd ceilometer-api and gnocchi-api need to be disabled on Ubuntu
Change-Id: I76622053bd792c70b84f1cf358e7ab118ef23390
2016-12-19 12:10:22 +01:00
Christoph Albers 948cf7a4b3 RPC_backend / transport_url workover
- removed deprecated rabbitmq attributes
- added rabbit_transport_url

Change-Id: Iafb0c0644d4e9462aca0ee140aa0d06fa18e5f3e
2016-12-16 17:48:37 +01:00
Christoph Albers dd8c23b596 Now using bind_service instead of node attributes
Change-Id: Iae2f2fc10071e969be905e5eca9401de1fba1c28
2016-12-16 09:35:17 +01:00
Christoph Albers b33c0ca574 Ceilometer-api / Gnocchi-api WSGI refactor
- now using wsgi apps for both apis
- bumped gnocchi package version due to python-openssl bugs

Change-Id: I63636ca8c08660f44433e701c55e1e0e7db5465f
2016-12-09 10:01:43 +00:00
Christoph Albers 2e00d31d1f use_cookbook-openstackclient/identity_v3
- Now use cookbook-openstackclient to create endpoints role service and
  user
- added domain creation and access granting
- added values to work with identity_v3
- rewrote specs to work again
- updated readme

Change-Id: I6c91c874013190522dd7f1fd6060dc3796dc80fd
Depends-On: I0f8955f05de9b33711c54b9a198f45018cceb8e1
Depends-On: I2d404a424bd79a6e9b282304e21591fa33a48981
Depends-On: If7b4d6e563081a0be9957353d73ef61a9688df56
Depends-On: I84f850f32f25a318c3ed3c7337a0dfa6f641a5fe
2016-09-30 12:00:22 +02:00
Jan Klare faceb7e6e0 initial refactoring step and addition of gnocchi
* applied new template logic and refactored all recipes accordingly
* removed vmware and suse support and specs
* removed alarm ceilometer-alarm notifier and evaluator (needs to be rewritten
  for aodh)
* added recipe for telemetry-metric/gnocchi deployment
* set gnocchi as default dispatcher for ceilometer
* added initial specs for gnocchi recipes

Depends-On: I22114b6d2d46cce561a2f292b92ff5f531cff533
Change-Id: If513cb2715d8266845bd6541d12005edef70f11c
2016-06-20 17:50:16 +02:00
Mark Vanderwiel 7b4eed9eb5 Replace deprecated get_secret
Use get_password 'token' instead.

Change-Id: Iab395042c34bceb1ce30e01d264276ef4cc8d251
Partial-Bug: #1467662
2015-06-22 15:49:51 -05:00
Mark Vanderwiel d2d9cd81ec Cleanup minor rubocop offenses
Cleaned up all the minor rubocop issues, the ones left relate to
complex logic and what I think is a bug in rubocop for nested
vs compact modules/class definitions.

Change-Id: Ib326cac0e09df628189e290807513bad59df0b76
2015-05-29 12:18:53 -05:00
Chen Zhiwei fca4820bff Revert "Use new "service" role instead of "admin""
This reverts commit 5388baa0a1.

Closes-Bug: #1447940
Change-Id: I333a731f6bc169b46b86fded1572baca1516ce8f
2015-04-24 15:57:28 +08:00
Mark Vanderwiel fe9acf1d3e Use identity_uri_transform for identiry_uri support
Remove deprecated keys and use identity_uri via the new transform
helper method.

Change-Id: Ibd21f81607f5ef1b02e07e4da3e5ea306f7d6f8b
Implements: blueprint identity-uri
2015-04-06 17:10:09 +00:00
Mark Vanderwiel 5388baa0a1 Use new "service" role instead of "admin"
Change-Id: I1c9067884145da5f607085f9ffef754e4d342a35
Partial-Bug: #1436050
2015-03-25 08:12:27 -05:00
Ken Thomas 013f010d55 Use identity-internal instead of public endpoint
The discussion on using identity-internval vs the public
identity-api endpoint can be found here:
https://groups.google.com/forum/#!topic/opscode-chef-openstack/an9rydsrC0k

Change-Id: Ic3a1b4914aeb095b4e9b37d5d4f4275bfa970edc
Partial-Bug: 1412919
2015-02-03 20:36:01 +00:00
Ken Thomas dcaeffd75c Use new common specific_endpoint routines
Now that admin_endpoint, public_endpoint, and internal_endpoint
in the common library are working, these are the changes to use
them in the openstack-telemetry recipes.

Change-Id: Ibddb87c1ae2e92c43c0b88495d363b6d8179d300
Partial-Bug: 1412919
2015-01-30 22:20:27 +00:00
lqslan 2d36ef461f Make ceilometer dbsync command timeout to be an optional parameter
The default dbsync command timeout value 3600 seconds may be too small
when there are large data in ceilometer database.
Make timeout to be optional to fix this problem.

Change-Id: Id4e703fab260f8e010ff089e4134e7aab8e21fd2
Closes-bug: #1389111
2014-11-05 17:46:48 +08:00
ZHU ZHU 67e3279071 Add rabbit HA configurations
This commit will add the rabbit HA related two configurations:
 - rabbit_hosts
 - rabbit_ha_queues

Change-Id: I85c329778de7baf138ec860e09f7e1572ad4c19a
2014-10-25 08:15:53 -05:00
Mark Vanderwiel d2b5ba6136 Fix DB2 and nosql ceilometer dbsync
* Remove very old and now incorrect check for running
ceilometer-dbsync with nosql.  This is fine to do now, and is
needed when nosql is used for DB2 with ceilometer.

Change-Id: Id31d7dffb3e01513bb0470a7a6f5f07118dc28ef
Closes-Bug: #1373600
2014-09-24 15:19:21 -05:00