This patch removes hardcoded type for 'baremetal' Neutron network.
Update ironic conductor config with new config option:
* enabled_network_interfaces - list of enabled network interfaces on
Ironic conductor
* cleaning_network_name - name of Neutron network to be used
during node cleaning
* provisioning_network_name - name of Neutron network to be used
during node provisioning
Add openrc generation task for nodes with ironic role, needed as it is
required for translation from name to uuid.
Change-Id: I63da8332cade0e76bdd687f0522bbc4c3006a68f
Related-Bug: #1588380
This file is huge if there are many nodes in cluster. Now
we generate it and store in memory for each node and it
takes a lot of time and memory.
Let's split it into common and node-specific parts so that
we can generate common part once and copy it from master
node to each node affected by deployment.
Change-Id: I114a8598460bef9063e43505f46fe38cd564d8c7
Closes-Bug: #1660308
DB tasks should wait for galera explicitly. There shouldn't be
conditions when primary-database is done, allowing *-db tasks to create
users while galera is syncing with other nodes. That causes split brain
as *-db tasks create users in MyISAM tables which is not handled by
Galera.
Closes-Bug: #1636841
Change-Id: I729ba0f2bfce1e731de36c932f5f0350e91adb22
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
This option is going to be totally removed in puppet-upstream, so
we need to remove it as well. It was deprecated in Newton cycle.
Closes-Bug: #1628509
Change-Id: I39d4716e91944436d0eb017ffb02e14cfdec4e2e
This change sets more strict permissions for data in the:
- /etc/hiera
- /etc/facter
- /etc/fuel/cluster
Change-Id: Ie652f6d323088321ce9dae468df527457328b69e
Closes-Bug: #1603182
Signed-off-by: Maksim Malchuk <mmalchuk@mirantis.com>
This change updates where we calculate the memcache server information
to the globals hiera data and updates all the openstack services to
use the heira memcached_servers key for consistency. Additionally all
api services have been updated to configure the memcached servers for
the keystone_authtoken middleware configuration to improve the
responsiveness of the service.
Change-Id: Id1034e22d79c3ea6b25575d9bcf8e8750a02365d
Closes-Bug: #1597512
All hiera files should have world-readable permissions.
Change-Id: I19afc6dcd9586da68918cda8ea8898acd0635ad9
Closes-Bug: #1599460
Closes-Bug: #1588434
Signed-off-by: Maksim Malchuk <mmalchuk@mirantis.com>
If operator has changed admin user, old one will now be stored in
/etc/hiera/old_admin_user.yaml as an access hash. Then it will be
deleted after new user creation.
Change-Id: I30213c02c4a370aee9db1597cf32dd8f08ae6539
Closes-Bug: #1578348
This patch essentially reverts change sets
Ia1d45f45cbbd91b7c6cacd4aa46dae0a92e4156e and
I38ad9d5fd63dda374274858632710c121d721451 which were created because
of the regression introduced by
Icc27b6701726afb98df71050c344c6cd9525301e. But we are also reducing
the cross-depends to only match the primary-database and database
tasks to prevent possible loops.
We can only wait on the mysql backend if it's configured and we don't
configure the mysql haproxy backend if mysql is not enabled on a node.
Additionally we need to wait until the database is actually setup before
running any of the db tasks.
Change-Id: I4b9bc29b4134872908af1900f6a3e5ccbdb9e392
Closes-Bug: #1591256
Many tasks depend on a regular expression which should be updated to
remove unnecessary dependencies to unrelated possible tasks defined
pre/post deployment or in a plugins.
Change-Id: I5943cacc09c2d4164673b60687d71118b8e50b72
Closes-Bug: #1590444
Signed-off-by: Maksim Malchuk <mmalchuk@mirantis.com>
Fixes dependency chain for services, such as keystone-db,
so that the following conditions are met:
* primary-database task must be run first (on any node)
* database task must be run (if it's required for current node)
This fixes a regression introduced by Icc27b6701726afb98df71050c344c6cd9525301e
Change-Id: I38ad9d5fd63dda374274858632710c121d721451
Closes-Bug: #1590024
* stop using 'len' statement to calculate cluster changes
* get real 'mgmt/messaging' instead of 'amqp_hosts' as second
generated from first most of times
* fix too narrow statements
Change-Id: I5dca76a6d3b1bc289de605e7034ffda6c3e2faee
Closes-Bug: #1589543
'keystone_user_role' provider was used to assign 'admin' role
to 'admin' user in 'Default' domain.
Change-Id: Id0e58ffa7abb2ae0d66a405439850b3a5dad6201
Related-Bug:#1584143
Plugins are able to override VIPs. So the situation when VIPs hash
is empty is quite possible and is used by some of existing plugins.
This patch makes yaql conditions properly handle such situations.
Change-Id: I426e8d8999d51468c9a85ed139ab10ab4397353c
Closes-bug: #1582151
As new serializer was introduced in nailgun and it is allow to run
a task on custom condition - move some tasks to use those conditions
to better handle redeployment cases.
This patch includes fixes for
* most of common tasks
* most of controller tasks
* compute tasks
Closes-Bug: #1567424
Change-Id: I3401e3127efc3e0c9ebc1be30f5f097575ca5890
DocImpact
In order to better support loose coupling of openstack version to fuel
we need to separate the tasks that call into the specific version of the
puppet-openstack modules so that they can more easily be versioned from
their fuel version.
Initially we are separating them, later they will become their own
repository.
Change-Id: I8ea6c0387b73f8094d306a73dd779967d6d91871
Blueprint: fuel-openstack-tasks
Andreas Jaeger