Commit Graph

163 Commits

Author SHA1 Message Date
Andreas Jaeger ae84af7fb4 Retire repository
Fuel repositories are all retired in openstack namespace, retire
remaining fuel repos in x namespace since they are unused now.

This change removes all content from the repository and adds the usual
README file to point out that the repository is retired following the
process from
https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project

See also
http://lists.openstack.org/pipermail/openstack-discuss/2019-December/011675.html

A related change is: https://review.opendev.org/699752 .

Change-Id: Ic1a73a0127e813fa5907e0639c47e61b1326add2
2019-12-18 19:36:10 +01:00
Ian Wienand 7c9e3d42f3 Replace openstack.org git:// URLs with https://
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.

This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.

This update should result in no functional change.

For more information see the thread at

 http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html

Change-Id: If53bce838cc3dac5fd9e12bab155d3020a666c12
2019-03-24 20:33:36 +00:00
Simon Pasquier 127d0b7635 Fix Puppet tests
Change-Id: I7cdb25db8b6d8a8948749caeac9566510fdbcf77
2017-03-29 10:20:42 +02:00
Simon Pasquier 2ed538655f Disable SSLv3 in HAProxy
Change-Id: I1b6914b8110f6ca7f9c18179e00e446e1ea4a5fd
Partial-Bug: #1667356
2017-03-14 09:42:15 +01:00
Simon Pasquier d4c3707582 Support CADF notifications
Change-Id: Ibc504c401a95df527b47f469ed5df7467bec959d
2017-03-09 14:59:31 +01:00
Swann Croiset 034953e59c Create the dashboard link when upgrading from 0.10.x
Change-Id: I74f5d53f6141ab2a400fb6223a7f2487cdda7adc
2017-01-27 13:49:39 +01:00
Jenkins 6c95cc266b Merge "Get rid of auto_expand_replicas for Kibana indices" 2017-01-11 13:35:22 +00:00
Simon Pasquier 1c35a4eda8 Get rid of auto_expand_replicas for Kibana indices
Setting auto_expand_replicas to "0-all" can make the Kibana indices
unavailable when scaling up the Elasticsearch cluster. As a consequence,
the Kibana service is unavailable and the operator needs to manually fix
the problem. This change applies the same replication settings as for
the log and notification indices leading to more predictable behavior.
It also enforces the replication settings in the provision_services.pp
manifest to deal with scale-down and scale-up operations.

Change-Id: I8979f3d006ccd908711cbe0862032dc7b73d9b62
Closes-Bug: #1552258
2017-01-11 10:05:44 +01:00
Simon Pasquier 8c8606cf4f Enforce literal strings in Hiera YAML file
Change-Id: I2c0729364fc131329dbc7479c30af41c8490e82c
Closes-Bug: #1631544
2017-01-10 09:44:44 +01:00
Jenkins e6ee56cb59 Merge "Fix typo error" 2017-01-04 09:17:53 +00:00
Simon Pasquier a0ed325ff1 Fix metadata.json for lma_logging_analytics
Change-Id: Iaf952f68f11b01340dc9bb483a52c0ab267f543f
2016-12-20 15:02:00 +01:00
pangliye 75e317785f Fix typo error
Fix some typo error

Change-Id: If6c598335f04416e696969055a6c94ed84fe1f39
2016-12-12 17:16:56 +08:00
Guillaume Thouvenin ce21fa8ed5 Allow to pass a list of LDAP servers
Change-Id: Ie1670bb591e0c76fdf1e00cf783149324c9890ce
Closes-Bug: #1624002
2016-09-28 15:06:15 +00:00
Roman Babyuk 46bada8ee6 Add support for dynamic scripting
This change is required for the Telemetry plugin that leverages dynamic
scripting.

Change-Id: I330cd17fbd5867b3e3180b4ac6dbfe79dde50f43
2016-09-23 14:37:54 +00:00
Simon Pasquier c0794133d6 Fix Elasticsearch curator job
This change upgrades the version of elasticsearch-curator because the
previous version (3.3.0) doesn't support Elasticsearch 2.x. As a
consequence, data older than the defined retention period was never
removed from Elasticsearch.

The curator is now installed on all the Elasticsearch nodes (previously
only on the primary node) and by configuration, it will only be
executed on the ES cluster master node.

Change-Id: I9da9e67fa4d353e78bd752456a9b01ca1fbae704
Closes-Bug: #1616765
Related-Bug: #1602719
2016-08-26 11:28:12 +02:00
Simon Pasquier d0e0a8d09a Pin the puppetlabs_spec_helper version
The latest version of puppetlabs_spec_helper (1.2.0) depends on
rubocop-rspec which itself requires at least Ruby 2.2.

Change-Id: I8c12c5cac64d29e91586a3445f814ada5e49d71c
2016-08-24 11:16:42 +02:00
Guillaume Thouvenin f4352e7767 Modify the check of the hostname in SSL certificate
This patch modifies the check of the hostname within the SSL certificate
to support certificate with wildcard.

Change-Id: I7b4ef37e0b8e90c4767c3711e00a888b95495043
Closes-Bug: #1608665
2016-08-17 09:21:00 +02:00
Guillaume Thouvenin 459a7f2723 Fix issue with LDAP protocol radio button
This patch modifies the label of the radio button used for selecting
the LDAP protocol to make it unique across all the StackLight plugins.

Change-Id: I3e2de2c59bc46594293cfd902098b9ae7292869b
Partial-Bug: #1599778
2016-08-09 16:25:05 +02:00
Simon Pasquier a9059a0f90 Configure the management gateway on the nodes
Without this change, the nodes are configured to use the Fuel node as
their default gateway. Note that the code path is different between MOS
8 and MOS 9 because of this bug fix [1] that hasn't been backported on
MOS 8.

[1] https://bugs.launchpad.net/fuel/+bug/1541309

Change-Id: I80a2fadf8b16b139d07c48a33c52efd33c66935f
Closes-Bug: #1583994
2016-07-29 08:53:10 +00:00
Simon Pasquier 2d74feb3d5 Configure Kibana to use its own VIP
This change modifies the deployment manifests to use the Kibana VIP
address instead of the one allocated for Elasticsearch. It allows then
the deployer to expose the Kibana dashboard on the public network using
network templates if needed.

Change-Id: I8debb43e3e382a7319a70643116572a7e50cb246
DocImpact: document the Kibana VIP address
Implements-blueprint: kibana-grafana-public-ip-access
Depends-On: Icdf9315239a8fde8b0528f555a89adf0374c408f
2016-07-27 11:14:13 +02:00
Jenkins dc4b768a48 Merge "Fix the TCP port for Kibana viewer dashboard" 2016-07-22 08:20:25 +00:00
Simon Pasquier efed2b21a0 Fix the TCP port for Kibana viewer dashboard
Change-Id: Ie69930cdec256b15792bfa06496aa03b4f1188b0
Closes-Bug: #1605155
2016-07-21 11:34:14 +02:00
Simon Pasquier f20a5e1c7e Enable IP forwarding for HAProxy
This is required for multi-rack environments where the nodes are
located on different subnets.

Change-Id: I415d4ef81490f07c8987ed43492334a480c228c2
Closes-Bug: #1604432
2016-07-20 10:02:47 +00:00
Swann Croiset 51bbdc809c Use standard HTTP ports
Depends-On: Id94cae82b2bea92e049975ccc9e91e4383f52931
Change-Id: I534edfd8da3999312b175a08b18a89b8972dbdca
2016-07-12 08:29:05 +00:00
Jenkins e5612d5f5d Merge "Set recover_after_time default value when using CLI" 2016-07-05 14:19:46 +00:00
Jenkins dee30590e0 Merge "Do not verify LDAP server certificate" 2016-07-05 12:41:15 +00:00
Swann Croiset b2678fbca7 Set recover_after_time default value when using CLI
Change-Id: Icb6e1ffd43363070100705a05fea80d65b316798
Closes-bug: #1593135
2016-07-04 15:43:36 +02:00
Guillaume Thouvenin 408c62f8b2 Display port in the link shown in Fuel UI
Change-Id: Ia96ef4d78b2bd0de8493268bd19773221b2c82da
2016-07-04 13:16:18 +00:00
Swann Croiset a0c681eec3 Do not verify LDAP server certificate
DocImpact LDAP server certificate is not verified

Change-Id: I4afd8687e96082769dfb843542ad75c8a4294e70
2016-07-01 13:46:34 +02:00
Swann Croiset 510a32ab23 Display 2 Kibana links for admin and viewer roles
Change-Id: I6792e98f0b719b6682720c32879195a9478a89a7
2016-06-29 17:18:59 +02:00
Swann Croiset e19d42b190 Implement LDAP integration for Kibana
Implement-blueprint: ldap-integration-in-stacklight

Change-Id: I838c84333feab7828adda0dfc731a8582287f83d
2016-06-29 17:18:59 +02:00
Swann Croiset 5d742d2ff2 Restrict access to Kibana
Only Apache needs to access directly Kibana.

Change-Id: I539a9a10b69d300a7d1555d44fdf57ddd391ac0c
2016-06-28 15:34:56 +02:00
Swann Croiset 32df03578f Use hiera hash for TLS options
Change-Id: I0a4bdd57e4176452c111f2e5e3c2cdbd6b852a1e
2016-06-28 15:34:56 +02:00
Swann Croiset d5110af7f5 Fix minimum_master_nodes determination
Change-Id: Ic8e2e8d283f13ff4679819d79845c2b2473cf66f
2016-06-28 15:34:56 +02:00
Jenkins 7e7949ff00 Merge "Add authentication for Kibana" 2016-06-24 16:09:35 +00:00
Jenkins 9ed1ae1a93 Merge "Fix Rakefile regarding lint usage" 2016-06-24 15:36:34 +00:00
Swann Croiset 469db9e35d Add authentication for Kibana
An Apache virtual host is configured as a reverse proxy to enforce
basic HTTP authentication.

DocImpact Kibana has now credentials

Change-Id: I65f44534581531a9ff923b54a4b08f77df070040
2016-06-23 13:18:47 +02:00
Swann Croiset c229b758a6 Fix puppet lint 140 characters
Change-Id: Ic53b0fb6e011b19d3bf3c58fdd6d1bd3f78691a9
2016-06-22 18:29:46 +02:00
Guillaume Thouvenin d3bea6b796 Remove call to hiera_hash('elasticsearch_kibana')
Change-Id: I7b298ce99b9a8dbe191ee9cb5b38754aeb012375
2016-06-22 12:02:28 +02:00
Guillaume Thouvenin 15d65ae5b7 Enable secure communication over HTTPS for Kibana
This patch configures HAProxy to terminate SSL connection when the
support for SSL/TLS is enabled in StackLight.

DocImpact Add support for TLS
Change-Id: Icdff278875d7daf928fa036ec1e4905205791546
Implements: blueprint support-secure-communication
2016-06-22 10:35:53 +02:00
Simon Pasquier dcd747e678 Fix Rakefile regarding lint usage
See https://github.com/rodjek/puppet-lint/issues/355

Change-Id: I74bec9d1a1fb9bb84acf5c494c9f7f003040c617
2016-06-21 17:37:44 +02:00
Jenkins 746d71328b Merge "Rotate Kibana logs" 2016-06-09 17:21:26 +00:00
Swann Croiset 52476e669c Install explicit package version of Elasticsearch
Change-Id: I2722a9c56b9fae33950714733a74f7557eb147e8
Related-bug: #1590013
2016-06-09 07:50:22 +00:00
Swann Croiset 6853f52c5c Rotate Elasticsearch logs
In order to fully wrap up the Elasticsearch configuration including
log management, this commit moves all the Elasticsearch related stuff
from the manifest into a new Puppet module lma_logging_analytics::elasticsearch.

Closes-bug: #1572929
Change-Id: I3dd6d027d2b1de3d6ae3baa01a92dbca1d0ff95b
2016-06-09 07:50:13 +00:00
Swann Croiset 156cd78dec Rotate Kibana logs
Change-Id: I8b0c419c3cd67ffec20b0cd5ed733c6f057f1147
2016-06-09 09:48:56 +02:00
Swann Croiset 0c696459c9 Upgrade to Kibana 4.5.1 / Elasticsearch 2.3.3
DocImpact Kibana Screenshot and ES upgrade

Fixes-bug: #1545739

Change-Id: I068ec6e6981b9b7729d0041be65760206790f615
2016-06-09 09:48:56 +02:00
Swann Croiset d9734cb5b6 Fix index template for notifications
Change-Id: Ieb74fd58d7e60d6f471e8c223f836e64e270cfd2
2016-05-30 10:42:54 +02:00
Simon Pasquier c79b7c2b99 Use hiera_hash for network data
Change-Id: I858f89fa3d642bbfeb6c355efa26330d463882e7
Partial-Bug: #1585350
2016-05-25 10:27:28 +02:00
Simon Pasquier 393e3e59fc Fix typo in config.js
Change-Id: Iea8cc2e2283654432fe691c4d9078710e80f2393
2016-05-13 15:41:25 +02:00
Simon Pasquier 0baef19e01 Fix deployment when using network templates
Elasticsearch and Nginx can be deployed on any network thanks to network
templates. This change removes all the hard-coded dependencies on the
management network. All port numbers for Nginx and Elasticsearch are
also moved to Hiera to make it easier to customize if needed.

Related-Bug: #1514365
Closes-Bug: #1577358
Change-Id: If3656be46d93418a2f481e740c59ec9df5ce8523
2016-05-11 07:19:39 +00:00