Commit Graph

9 Commits

Author SHA1 Message Date
Alex Schultz 87abe05ba0 Retire instack-undercloud
instack-undercloud is no longer in use by the TripleO project. Removing
the code to avoid confusion. Stable branches will continue to be
maintained for their life however no new features should be added.

Change-Id: I63a813c7c1ffd30ca30017133d31a497b77a9a4d
Blueprint: remove-instack-undercloud
2018-10-30 12:16:18 +00:00
Harald Jensas 983c2be88e Add per subnet masquerading
Masquerading for external access for each routed
network, if enabled.

Implements: blueprint tripleo-routed-networks-ironic-inspector
Implements: blueprint tripleo-routed-networks-deployment
Change-Id: I792b516314302e2c290e63c10fb0fe6881ce7236
2018-02-06 09:35:07 +01:00
Harald Jensas 5353915e2c Create static routes for remote subnets
Add static routes to reach remote subnets via
router connected to locale ctlplane segment.

Implements: blueprint tripleo-routed-networks-ironic-inspector
Implements: blueprint tripleo-routed-networks-deployment
Change-Id: Ibfc4c1492377ea4c3966ffadfd440bd705c45d19
2018-02-05 19:24:02 -08:00
Ben Nemec ec15341ccd Generate a standalone stackrc
Previously the stackrc file made a hiera call to get the admin
password.  The problem with this is that it makes the stackrc file
non-portable to any system except the undercloud.  Writing the
actual password into stackrc will allow it to work on any system
that has network connectivity to the undercloud.

Note that this does not have any negative impact on the security
of the stackrc file since previously the user sourcing it would have
had to have sudo access to read the password from hiera anyway.  If
anything this is more secure because it does not require allowing
root access to any user of stackrc.

Depends-On: I6ccb832b52a476b5fa659a9a8f09e38ae41d324b
Change-Id: I7a6b665cf9d40889e8e72475887c7ce166e77a40
2017-10-13 15:53:38 +00:00
Derek Higgins 24694e5fd0 Provide LOCAL_IP_WRAPPED as a instack env variable
This can be then be used in places that require a IP
address to be wrapped in square brackets if it is IPv6.

Change-Id: Idb437dee5ddec0a015c68847b9514f7bbb3f70a1
2017-09-06 15:26:46 +01:00
Ben Nemec 9c6424df5d Validate vips when generating certificate too
When generate_service_certificate is True,
undercloud_service_certificate will not necessarily be set when it
is passed to validation.  We need to check if either value is set
when deciding whether to validate vips.

Unit tests for this behavior were missing as well, so those have
been added.

Another consideration for this change is that we have started
passing non-IP values to these vip parameters when configuring
ssl.  This is counterintuitive, but apparently works as intended
so let's just rename the parameters and handle both IPs and DNS
names for those values.

Change-Id: I53151d4f555d5d161a3e53ce5f022e3bf3b2ffbd
Closes-Bug: 1643655
2017-01-19 08:11:21 -07:00
Ade Lee 2e88f187bb Add option to set undercloud dns nameserver
This adds an undercloud_nameserver option which will be taken into
account in os-net-config to set up the undercloud's nameserver. If left
unset, it will give an empty list to the dns_servers parameter in
os-net-config, which will actually do nothing. If set, it will use that
nameserver as the sole member of a list that is passed to the
aforementioned parameter.

Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Change-Id: I2b8a3f64dc1958f00b0471b68ba8283da76a4e7b
2016-12-02 08:15:47 +02:00
James Slagle f52a3af42b Add net config override
Adds the ability to override the os-net-config data for the undercloud.
In some cases, a single bridge with a single physical interface may not
be sufficient for all cases. This will allow for more advanced
customization of the undercloud networking.

The path to a custom os-net-config json template can be specificed in
undercloud.conf with the net_config_override option.

Change-Id: I1fdc62d61eb5d2ea7e9418e40aa8c07173169d35
2016-06-21 15:40:13 -04:00
James Slagle b35b6ee999 Move 02-undercloud-stack-heat-metadata to python module
Moves the python code in 02-undercloud-stack-heat-metadata to be part of
the instack_undercloud python module instead of an element.

This depends on adding jq and pystache as package dependencies for
instack-undercloud:
https://review.rdoproject.org/r/#/c/1074/

blueprint undercloud-elements
Change-Id: I087bbc44080d94206f1489a1ecc7ccbb777bde3c
2016-05-19 16:24:34 -04:00