In venv --upgrade does nothing good since venv have constraints-bound
versions of everything installed. It does bad thing though: it tries to
upgrade setuptools (they are not mentioned in upstream constraints.txt)
and break further building.
Change-Id: If86ed67b574db3323d36e1402c2795a9b5dcb7b2
This is a separate REST API stack and data model used to track resource
provider inventories and usages, along with different classes of
resources.
SSL support for placement api will be added in separate CRs.
Change-Id: I8bec585dd5d9eb7f52c1cd50e1e3d44aba6bbe9d
Package quem-kvm depends on qemu-system-x86 that depends on libgtk-3-0
and libvte-2.91-0 that are provided by testing and jessie repositories
and don't exist in jessie-backports, so we decided to switch to testing
repo with installation of qemu-kvm and pin version of it
Change-Id: I9f08c3be522d0fa5ca5dfee1f18029c379e670e9
nova-compute-ironic service is same as nova-compute, but with the special
compute_driver and few config options required for Ironic.
While Ironic has poor integration with Nova, this service cannot be run
with regular nova-compute service on same host.
Change-Id: I5b6975f2b0fc5fb4002f8ecfc530c4c69ef53e43
This patch adds optional support for TLS encryption in libvirtd endpoints using
certificates.
Without encryption, libvirtd listens on private interface of K8s node without
any authentication thus allowing connections from any host on the internal
network.
TLS for libvirt is ENABLED by default and can be disabled in fuel-ccp-nova's
defaults.yaml file. When using TLS, CCP operator has 3 options:
1. Use sample, self-signed wildcard certificates valid for 10 years built into
config files (e.g. for testing purposes) - default.
2. Regenerate above certs using a script provided in tools/.
3. Provide own certificates.
The TLS configuration provided by this patch uses workarounds to make wildcard
certifcates work and should be used for testing purposes only.
The reason to have TLS enabled by default is to run all tests (e.g. CI) with
encrypted communication and catch possible errors.
An implementation more suitable for production usage may follow in a separate
patch.
Change-Id: I1d770e3618e2f5a32573b7ded74b11df18338f85
Only testing packages available(no backports).
That means - libvirtd and compute containers now contain major lib
changes comparing to the rest of containers.
I have to add new daemon to address new libvirt behaviorm plus
I have to override the OS upper-constrains to match the libvirt
2.4.0 version.
Do we want this? :-)
Change-Id: I3860238eeaa055609ef9217ee587eabad7cc6ebc
For now this is the only working solution that doesn't require running scp
between computes (and configuring ssh keys) and should work without patching
Nova. But hostname has to be used in live_migration_uri.
More correct setting would be:
live_migration_inbound_addr = "{{ network_topology["private"]["address"] }}"
and no live_migration_uri (it's not required in this case).
But this won't work in master untill https://review.openstack.org/#/c/398956/
is merged and in Netwton until fixes are backported.
Also this patch adds dosfstools package to nova-compute container which is
needed for Nova to create config drive for an instance with mkfs.vfat command.
Change-Id: Ibeca3aca413c5ceace97b836bc56320fb9947220
Additionally add option to set as variable keyserver and keyid.
Depends-On: I0304ce2c5b4f90f83130f7b7959a410d19f8ed32
Change-Id: I327a52cf332fc23b8272f8a7056b4939ba37f513
--no-cache-dir is now default for microservices venv and there's no need
to pass requirements.txt to pip directly, especially as constraints
file.
Also removed cloning of requirements repo in nova-compute as constraints
are already embedded in microservices venv.
Change-Id: I806e156f4865b552f6636dd3b540bfe8c65ae8ac
qemu-kvm doesn't pull all qemu-system packages and saves ~167Mb of image
size;
usermode is a GUI tool that by some accident ended up in the repo, it
pulls a lot of big libraries (GTK+), without it image is another 58 Mb
lighter.
Change-Id: Iaf388dd9a0e2903c47c74662377aee7a184029a5
Images will be built with sources from master branch of
https://github.com/openstack/nova.git repository by default.
Change-Id: If48c9ec6023332a5ac52d825cbcc4f4cf7ba2301
Depends-On: I4d91aa8632fcd55735d791300fde475696b435b5
Andreas Jaeger