This patch adds support to deploy Ironic with separate Neutron network
for provisioning baremetal instances.
* Add NetworkDeploymentSerializer100 as Ironic multitenancy is supported
from Newton, and we will backport this till stable/newton.
* Update network scheme generation to create 'vlan' baremetal network,
assign IPs to Ironic conductors from this network, make them
accessible from baremetal servers.
* Add new checkbox at 'Openstack Settings/Additional components' tab
which allows to define if separate provisioning network should be used
during deployment. This is a trigger to switch ironic deployment to
multitenancy case. If not selected old behaviour is kept, 'flat'
network is used. The checkbox is shown only when Ironic component is
enabled.
Change-Id: I861a8b3b046202526d6a856c9f2dca2cfaddc887
Related-Bug: #1588380
We are going to use provisioned cluster nodes as workers for
distributed task serialization. Package python-distributed
provides dask-worker for nailgun code execution. Other packages
are nailgun requirements.
Change-Id: I95b7682c64fe2eedb26fc80046909974cc792c91
Implements: blueprint distributed-serialization
Distributed serialization is implemented with python distributed
library. We have scheduler for jobs management and workers for
jobs processing. Scheduler is started on the master node as well
as set of workers on it. Also workers are started on all nodes.
In the cluster settings we can select the type of serialization
and nodes statuses that allows serialization on it. By default
nodes with status 'ready' are excluded from the workers list.
For data serialization we are using only nodes from the cluster
where serialization is performing.
Before the computation fresh nailgun code is sent to the workers
as zip file and it will be imported for job execution. So we always
have fresh nailgun code on the workers.
In one job we are processing chunks of tasks on the workers. This
approach significantly boosts performance. The tasks chunk size
is defined as settings.LCM_DS_TASKS_PER_JOB parameter.
For limiting memory consumption on the master node we use parameter
settings.LCM_DS_NODE_LOAD_COEFF for calculation max number of jobs
in the processing queue.
Synthetic tests of distributed serialization for 500 nodes with
nubmer of ifaces >= 5 performed on 40 cores (4 different machines)
took 6-7 minutes on average.
Change-Id: Id8ff8fada2f1ab036775fc01c78d91befdda9ea2
Implements: blueprint distributed-serialization
Since Fuel 10, Ceilometer and MongoDB services become experimental features.
* Ceilometer and MongoDB settings are shown on Settings tab in Fuel UI
only if "experimental" feature group is enabled
* MongoDB role is available if "experimental" feature group is enabled only
* Ceilometer option is removed from the cluster creation wizard
Implements: blueprint remove-ceilometer
Change-Id: I6df3b47c14cafb1544dfe034cd9a2c0ad14205be
Since Fuel 10, Murano service becomes an experimental feature.
* Murano settings are shown on Settings tab in Fuel UI
only if "experimental" feature group is enabled
* Murano option is removed from the cluster creation wizard
Implements: blueprint make-murano-experimental
Change-Id: I4dd0853138c045b8d7e8f6ff940c09250763a56b
* min value was set in openstack.yaml
* appropriate validator was added
* tests for validator were changed
* migration node and release attributes was added
* tests for migration were added
Change-Id: Iec723c7f02e874bf8567665a30af30c61aff7f34
Closes-Bug: #1653081
Add Intel 82599 10Gb dual port backplane connection
card to the list of dpdk supported nics.
Change-Id: I02aeecd6bb512342c4b15945b6877dda7b44cf89
Closes-Bug: #1651412
Remove restrictions on set of BOND properties. Now BOND can have
any attributes.
Remove redundant `bond_properties`.
Change-Id: I60d1a0628d84c5ba49bb5b45824d660297dacccc
Implements: blueprint nics-and-nodes-attributes-via-plugin
Refactor interface logic:
* remove interface_properties
* CRUD operations for NIC attributes
* default values for NIC meta and attributes
Change-Id: I26106f1b55c704a9e79d01fadc48c88a92ccc414
Implements: blueprint nics-and-nodes-attributes-via-plugin
It is required for firewall driver selecting
Implements: blueprint security-groups-support-for-ovs
Change-Id: Id9307c5e72e35de9090804813122ea44045a371b
This commit switching tasks resolution approach to the tags based one.
Tag - minimal unit what's necessary only for task resolution and can be
mapped to the node through the role interface only. Each role provides set
of tags in its 'tags' field and may be modified via role API. Tag may be
created separately via tag API, but, this tag can not be used unless it's
stuck to the role.
Change-Id: Icd78fd124997c8aafb07964eeb8e0f7dbb1b1cd2
Implements: blueprint role-decomposition
CA certificate verification should be available only if
Bypass verification is disabled.
Some changes were made in vmware_attributes_metadata
in openstack.yaml so we have to update releases table
accordingly during upgrade.
Change-Id: Ibc1da57cfda4e732210e5eddb821856f72770dda
Closes-bug: #1616438
Default minimum of values in text_list setting value list
was changed from 1 to 0 here: https://review.openstack.org/#/c/389195/
So, min=1 limit should be restored
for "NTP server list" setting not to change its functionality.
Related-Bug: #1613614
Change-Id: If354f86c5cd11fe7eb0dc07c7c4d1048dcb75363
(cherry picked from commit 670d71fb92)
The issue is that sometimes users want
to be able to have emtpy lists for
some attributes like for example upstream
dns.
Change-Id: Ib96b0cb051892e50f26a46ce33eeb477ef2a36f1
Related-Bug: #1613614
So that it could be set by a user.
Also error message is returned in a structured way so that UI could
display it.
Also partial update of cluster attributes is supported.
Change-Id: Ib4a434039213cc91e0514240e722b7266f158ec5
Closes-Bug: #1621429
(cherry picked from commit d00f3d9228)
A 'tags' attribute has been added to each role in 'roles_metadata'.
Initially all non-controller roles will only have a tag of their own
role name. This will allow existing tasks which do not have tags
associated with them to work correctly. In the abscence of tags a
task's roles will be used to determine which nodes it will run on.
Implements: blueprint role-decomposition
Change-Id: I390580146048b6e00ec5c42d0adf995a4cff9167
CA file is not uploaded because we made a mistake
in name vc_ca_file.
Fix typos vc_ca_file -> vcenter_ca_file to get correct
certificate files for cinder and compute item in
orchestrator serializer.
Change-Id: I531a1d6fb7d8cf28df644f8d2301cec4f437a996
Closes-bug: #1623478
CA certificate verification should be available only if
Bypass verification is disabled.
Partial-Bug: 1616438
Change-Id: Ib83210f52c7874398fcb1791e51091e05151273f
Depends-On: Id38bf7c74869fa60852ca1cb2ccaa9c63412cf64
Andreas Jaeger