Commit Graph

12 Commits

Author SHA1 Message Date
Alex Schultz 87abe05ba0 Retire instack-undercloud
instack-undercloud is no longer in use by the TripleO project. Removing
the code to avoid confusion. Stable branches will continue to be
maintained for their life however no new features should be added.

Change-Id: I63a813c7c1ffd30ca30017133d31a497b77a9a4d
Blueprint: remove-instack-undercloud
2018-10-30 12:16:18 +00:00
James Slagle 06f98106e0 Create firewall rules with puppet
Replaces uses of add-rule with using the puppet-tripleo firewall class.
This removes additional dependencies on scripts provided by the elements
(add-rule).  There is still one usage of iptables directly in
10-iptables that will be cleaned up in a subsequent patch.

With this change, we can remove the iptables element from the json
files.

blueprint undercloud-elements
Change-Id: I5d496efe22c1a5e17a2b688ba6dfbcfd403349db
Depends-On: I0598007f90018f80a3266193bb24dbf112de49b7
2016-05-13 16:27:10 -04:00
Jenkins 1b36357f54 Merge "Add -w to iptables calls" 2016-02-19 16:09:08 +00:00
Ben Nemec b26d750e6c Add -w to iptables calls
If another process happens to be making an iptables call, the calls
in our post-configure scripts can be killed, with a message such as

Another app is currently holding the xtables lock. Perhaps you want
to use the -w option?

Adding -w will tell iptables to wait until the lock is available,
so such a situation won't kill the undercloud install.

Change-Id: Id7c9482c26954fd2dc86bc0ef3325bdd12dd8f42
2016-02-15 20:54:18 +00:00
Dan Prince 17e410270a Install zaqar (messaging) in the undercloud
Add support for installing OpenStack zaqar if enable_zaqar
is set to true.

Depends-on: Ibb380401eb58319c9a0c239598571f1b11b020d4
Depends-on: I668ecc79f1684438beff620394711c6bb8f2cc34

Change-Id: Idf5858bc8414a3e55fc68e43feb99de73474b9c5
2016-02-15 12:45:11 -05:00
Emilien Macchi 9ad196c922 iptables: add missing rule for ceilometer/ssl
We need to open 13777 port, which is open when Ceilometer is run with
SSL, using HAproxy SSL termination.

Change-Id: Ieab416e67f295569f48c0bf10876055936b6cb48
2016-02-04 14:02:47 +01:00
Dan Prince 6da04f9c5f Install mistral (workflow) in the undercloud
OpenStack has a workflow service so provide the
option to use it for some things.

Change-Id: I2a806d6d131feb82d7d9cfa07da044bcaaf5b95d
Depends-on: Ide01de8c761ccd099b7a8469bff34316ff5c04f2
Depends-on: I986623ca541552755951d1d10e4e6e097276d249
Depends-on: I1afca0eb57792b11b1f15041bd59bcec82fe6337
2016-01-05 16:12:47 -05:00
Jenkins 801428e3b4 Merge "Install local docker registry with puppet" 2015-12-18 15:47:24 +00:00
Jeff Peeler 623be791ce Install local docker registry with puppet
This is for overcloud usage for when containerized services are
deployed. Using a local registry allows for faster network transfers
after the initial pull to other nodes. The puppet config option to enable
this functionality is 'enable_docker_registry'.

The RPM dependencies for docker-registry not already included in instack
is as follows:
    python-blinker
    c-ares
    python-gunicorn
    libev
    python-gevent
    python-backports-lzma
    m2crypto

The registry default port of 5000 conflicts with keystone, so it has
been changed to 8787 instead. Iptables rule for port 8787 has been added
to allow outside access.

Change-Id: I40e871f9017315886b1aac256f3fd6b9778ac21b
2015-12-09 14:06:50 -05:00
Ben Nemec ae5143cb8a Allow ssl ports in firewall
Without this, undercloud installs using ssl will not have the
appropriate ports opened.

Change-Id: Ia5bc1ec9c3faed1b63097011ec24f222d4394b34
2015-11-30 17:54:46 +00:00
John Trowbridge 3bcf7fc99f Use puppet to configure ironic-inspector
This removes the ironic-inspector element from the
undercloud install, and instead uses the puppet module
to setup the ironic-inspector service.

Depends-On: I9b2917a2c3f6afe75dc295c81d09f7a12856007f
Change-Id: Ic3eca27515721000ed1c9d19a2427276e6b1af68
2015-10-09 13:39:41 -04:00
Dan Prince d6fcf4e086 Move 10-tftp-iptables to 10-iptables
I was looking for iptables rules and the name of this file
confused me. Renaming it to 10-iptables should make
it more clear what it is doing.

Change-Id: Ibe1182cd4817b70664541128bf1c74d753768f05
2015-09-03 13:42:11 -04:00