Commit Graph

274 Commits

Author SHA1 Message Date
Ghanshyam Mann 72ea117f61 Retire Tripleo: remove repo content
TripleO project is retiring
- https://review.opendev.org/c/openstack/governance/+/905145

this commit remove the content of this project repo

Change-Id: Ic549bdcc76a5e12a0104143fbe79fd0db2c866b0
2024-02-24 11:44:35 -08:00
Takashi Kajinami 20848d87ca Omit --deployed-server in master
... because the option is deprecated in master[1] and has no effect.

Also, deployed-server-environment.yaml is not required when
the --deployed-server option is used since stable/wallaby[2].

[1] c6cd190a9f63738deafa4c616e0be8e06afedc96
[2] d6fba3f09f8de569b7fcf2bd9519c3112b1cc056

Change-Id: I4411a06026fc5bdf69061a643bc731e91c27640c
2022-11-10 12:50:19 +00:00
Takashi Kajinami 4a4bd9c06a overcloud: Remove logic for unsupported old releases
This change removes logic for releases older than train, because these
releases are already EOLed. This covers only overcloud-* roles and
playbooks and the other items will be covered by separate changes.

Note that this change also removes the containerized_* variables
because current active releases(>=Train) no longer supports
non-containerized deployment. The containerized_overcloud_upgrade
variable is still left because the variable is still required by
the tripleo-ci-base-multinode-standard job template.

Change-Id: If29ec2c2219a28a1f79db0e552e2c622c0a7bda6
2022-10-25 16:32:53 +09:00
Sandeep Yadav cd5cd5ec4f Create a yaml with custom CI rules for Firewall
We need some tweaks in the firewall rules in order to be able to switch
to nftables.

After analyzing the dropped packets[1], we must open a couple of ports
related to VXLAN[2], as well as ensuring ssh has the same opening as the
current "openstack-INPUT" chain created in iptables via the CI itself.

This patch generates the needed configurations for both undercloud and
overcloud, since both will basically need the same things.

[1] https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
[2] https://opendev.org/openstack/tripleo-docs/src/branch/master/deploy-guide/source/features/security_hardening.rst#vxlan-and-nftables

Change-Id: Ic3e0f63e98d97323c313a87045d0fe01bec5ded8
2022-09-19 11:22:55 +02:00
Ronelle Landy bb07f124fb Add option to specify the NovaHWMachineType
If the specified default machine type is not
supported on the currently deployed OS, this
patch adds the option to specify a parameter
to override the default.

Related Bug: BZ: 2110535

Change-Id: Id0f0bf0d9efb2136ae49b8475e80774dd0578230
2022-07-27 11:40:00 -04:00
Zuul 16c63a7a1b Merge "Add args for deployments when fips is enabled" 2022-01-26 18:50:04 +00:00
yatinkarel 66a0628921 Generate scripts for network/vip/node provisions
These will be useful when there is need to reprovision
these along with overcloud.

In CI jobs these are already generated, this patch is to
make normal quickstart.sh deploy's to have these
scripts generated.

Change-Id: Iaec8c01e61d24165cb83227c767099d37e11de1e
2022-01-12 16:54:10 +05:30
Amol Kahat 37a64ea0ca
set NovaLibvirtNumPciePorts to 12
New qemu-kvm-6.1.0 version is buggy version and excluded in master
and wallaby (Ia6a9e01ca2adbde1e7a0b7cce9fe5842a0d54b1b,
Iac4425d655df2f519f5b467e3754dad08ac9b1f5).
New version was impacted q35 machines for CentOS-8 and Stream-9.

qemu-kvm-6.1.0 + NovaLibvirtNumPciePorts: 12 + q35 instances
for CentOS8 and Stream works fine.

Related-Bug: #1950916
Signed-off-by: Amol Kahat <amolkahat@gmail.com>
Change-Id: I39c00edd97e321963d1ced74dcf5a2a27fa032cc
2022-01-04 13:36:42 +05:30
Ade Lee 341a548ac2 Add args for deployments when fips is enabled
Depends-On: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/815141
Change-Id: Ibb1dfdd0f45c6061d48ba4b6e490ec03df7ff97b
2021-12-09 00:30:48 +00:00
Sandeep Yadav 27dca26e9a Update condition to include cloud-names.yaml
We are creating a new featureset064 that will deploy overcloud with
custom network + custom overcloud name + IPA integration.

For that new featureset, We don't want to add the default
file created from cloud-names.yaml.j2 template but instead use
the values we defined in ci tht templates[1] for custom networks.

Adding a var non_custom_network that defaults to true so that we
can override in fs064.

testproject: https://review.rdoproject.org/r/c/testproject/+/31954

[1] https://review.opendev.org/c/openstack/tripleo-heat-templates/+/812369

Change-Id: I4fec8997d3f74552b72a6e1a33258c684f683eff
2021-12-06 13:07:07 +05:30
Sagi Shnaidman dbd36eebc7 Run CI with Ansible 2.11 (extras)
Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart/+/769480

Change-Id: I1669faf68853e75ef36a87feb5f1c083d15da804
2021-11-16 17:10:33 +00:00
Zuul 982e295c77 Merge "Use network-v2 workflow for Controlplane VIP" 2021-11-01 19:48:01 +00:00
Zuul 8485721e17 Merge "Create overcloud_baremetal_deploy.yaml file properly" 2021-10-30 05:53:47 +00:00
Zuul 055ab27cd1 Merge "Fixed minor typo in the task name" 2021-10-30 00:27:37 +00:00
Juan Badia Payno d8622a2e52 Create overcloud_baremetal_deploy.yaml file properly
Currently the overcloud_baremetal_deploy does not match the
VMs with the flavor/role properly. The way that
currently creates the file may deploy the compute on
a ceph or a controller vm.

This way the vms will be used for the role that
they were created

Closes-Bug: #1949070
Change-Id: I4de262fc049b74482ff7220a11ec864133f1cb75
2021-10-28 19:48:55 +02:00
Chandan Kumar (raukadah) eefc98e6d5 [EL9] Set NovaLibvirtNumPciePorts to 12
Temporarily add a workaround for EL9 by setting
~~~
NovaLibvirtNumPciePorts: 12
~~~

It's basically a workaround for a bug [1] in qemu that is currently
being worked on.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2006409

Related-Bug: #1947861

Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
Change-Id: Ia2ad24960fc3477390a868e6572c260543b5c37a
2021-10-27 21:05:06 +05:30
Jiri Podivin e3d13b710f Fixed minor typo in the task name
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
Change-Id: I7db33e008750d357603a06fa82d5488852b59566
2021-10-27 15:27:59 +02:00
Harald Jensås 5c39f7b16c Use network-v2 workflow for Controlplane VIP
tripleo-ci-centos-8-containers-multinode on change
https://review.opendev.org/798642 fails with:
  Conflict detected for resource_registry entry:
    OS::TripleO::Network::Ports::ControlPlaneVipPort.

The network-v2 workflow will create the ctlplane VIP
prior to the heat stack and automatically include the
required overrides. So there is no reason to manually
override the resource in the job.

Depends-On: I2d14d9e587fce28ea0897bb235c9dedc8f68fa12
Depends-On: Ife4b15a784c70fe031af98f3aa135737232d56a6
Change-Id: I42bcff7e1f1c17c24800343712ddcb8785892b64
2021-10-27 14:26:07 +02:00
Zuul 594c2e32da Merge "Remove use of --skip-nodes-and-networks" 2021-10-14 22:39:51 +00:00
Harald Jensås 103eaf8322 Remove use of --skip-nodes-and-networks
The depens-on removes the usage of --skip-nodes-and-networks,
instead the existing --baremtal-deployment option is used to
provide the capability to enable/disable "all-in-one" network+
node provisioning with overcloud deploy command.

Depends-On: Idaab1f28c4d645279eff0c01b24435bf8571299b
Change-Id: I00241ee91cee42770c67fa181482c6e6ad9dedf1
2021-10-08 09:38:24 +02:00
Sandeep Yadav 04434b3cee Don't pass --network-ports in node provision
Since [0] --network-ports is deprecated.

We are currently receiving a deprecated warning[1]
~~~
DEPRECATED option "--network-ports" detected.
This option is no longer used, network ports are always managed.
~~~

It is not needed to tripleo_overcloud_node_provision_network_ports
in tripleo_overcloud_node_provision role anymore.

[0] https://review.opendev.org/c/openstack/python-tripleoclient/+/803946
[1] https://logserver.rdoproject.org/openstack-periodic-integration-stable1/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-8-ovb-3ctlr_1comp-featureset001-wallaby/7b85778/logs/undercloud/home/zuul/overcloud_node_provision.log.txt.gz

Change-Id: I136b6d62a78ddb4926ce05b2b93f47b47b407bbe
2021-10-07 23:21:20 +05:30
Steve Baker 91c6018d6e Support setting growvols_args in topology_map
Some roles (Controller with swift, and ObjectStorage) will need the
/srv volume to grow to store swift content. This allows custom
growvols_args to be specified on a per-role basis using the
topology_map.

Change-Id: I87836cef3b8815223ae0b038d6e295bccaa3ee65
2021-10-07 09:29:41 +13:00
Zuul 82d1afdee0 Merge "Revert "Don't run ephemeral heat for non enabled scenarios"" 2021-10-05 00:05:54 +00:00
Zuul cf98a2f811 Merge "Enable Memcached TLS on the overcloud by default" 2021-10-04 16:06:45 +00:00
rabi 326b8d9fc2 Revert "Don't run ephemeral heat for non enabled scenarios"
This reverts commit 149476a816.

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart/+/810083
Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart/+/810048
Change-Id: I5c46a69c6ebcf95c03fa6a90b60be10ed5286249
2021-09-21 12:27:44 +05:30
Sandeep Yadav 22e056fd36 Allow Override default network_data/vip yaml
With this change we are adding capability to create custom
baremetal environment specific yaml templates:-

* network_data.yaml
* vip_data.yaml

Above files will be created using the var `network_data_details` and
`network_vip_details` defined in downstream env_setting.yml(details
about env_setting.yml in [1])

Also, Updating `overcloud-deploy` role to parameterize the location of
network_data.yaml and vip_data.yaml file, this will help override the
default location.

[1] https://opendev.org/openstack/ansible-role-collect-logs/src/branch/master/docs/static/baremetal-overcloud/environment-settings-structure.rst

Change-Id: Ibfbe2d2af8372f47f6e6a31ca821bfb314ce347f
2021-09-08 13:33:36 +05:30
Amol Kahat 075574a19b Migrate overcloud-deploy.sh shell script to ansible roles part-3
Migrate overcloud node provision from shell script to
tripleo_operator_node_provision role in tripleo.operator
collections

Signed-off-by: Amol Kahat <amolkahat@gmail.com>
Change-Id: I3745e4c4a34c99b02ada736d4d69c838bdf8793c
2021-08-26 13:22:37 -04:00
Amol Kahat 50a33c8272 Migrate overcloud-deploy.sh shell script to ansible roles part-2
Migrate overcloud network vip provision from shell script to
tripleo_overcloud_network_vip_provision role in tripleo.operator
collections.

Signed-off-by: Amol Kahat <amolkahat@gmail.com>
Change-Id: Ie189fa25cb647a50834fcff8ee59df1d1946392d
2021-08-25 09:00:06 -04:00
Amol Kahat 15bf005d0c Migrate overcloud-deploy.sh shell script to ansible roles part-1
Migrate overcloud network provision from shell script to
tripleo_overcloud_network_provision role in tripleo.operator
collections.

Signed-off-by: Amol Kahat <amolkahat@gmail.com>
Change-Id: Icc189b72d8a64652d60b8de34b9f5b392af227ff
2021-08-25 08:56:59 -04:00
Zuul a0a1ee6208 Merge "Don't run os-net-config twice in CI" 2021-07-05 14:43:59 +00:00
ramishra 33422e0c9f Don't run os-net-config twice in CI
We're running it twice at the moment before stack and one more
time in deploy steps.

Change-Id: Ie52df7132f6165f831eda6d8e8583e661847db48
2021-07-04 15:09:48 +05:30
Harald Jensås a48818b803 CI use '--skip-nodes-and-networks' in oc deploy
Since the CI run's the commands to provision networks,
virtual IPs and baremetal nodes individually prior to
running overcloud deploy we can disable these steps
when running overcloud deploy.

NOTE: 'network_provison' is only set to True for Wallaby
and later releases.

Depends-On: I2fa073863f2d292575ee1dbdc0da271434f219f6
Change-Id: I8008344f215be6a54e00d7d27b697375b7f88f0f
2021-06-29 09:50:59 +02:00
Harald Jensås d6482cd149 Run os-net-config as part of node provisioning
Render in the network_config from the node topology_map
and switch the 'node provision' command to use the
'--network-config' option so that the tripleo_network_config
role is applied to deployed nodes prior to running the
overcloud deploy command.

Related: blueprint network-data-v2-ports
Depends-On: https://review.opendev.org/790286
Change-Id: I438220744bdb1d426c8484d8548716278737ff86
2021-06-08 06:10:18 +00:00
ramishra 149476a816 Don't run ephemeral heat for non enabled scenarios
We can convert other jobs and finally remove this.

Change-Id: Ic0c408d66635ab1a34b698fe36627a02bd196305
2021-06-01 19:53:12 +05:30
Zuul ab660b9b42 Merge "Support using ephemeral Heat" 2021-05-18 19:39:20 +00:00
James Slagle 96ab93f4fe Support using ephemeral Heat
Adds support for a new ansible variables ephemeral_heat and
ephemeral_heat_args, which will allow job configs to deploy with
--heat-type in order to use the ephemeral heat deployment.

Implements: blueprint ephemeral-heat-overcloud
Signed-off-by: James Slagle <jslagle@redhat.com>
Change-Id: I29cf6dd8a32242f27a40946688f9dede8968c7f9
2021-05-17 16:40:46 -04:00
Harald Jensås 4bd259ca17 CI - neutron VIP resource prior to heat stack
When 'network_provision' is enabled run the command
to provsion neutron Virtual IP API resources prior
to creating the heat stack, and include the environment
file to override the stack resource's to use the
'deployed_vip' templates.

Related: blueprint network-data-v2-ports
Depends-On: https://review.opendev.org/779634
Depends-On: https://review.opendev.org/775406
Change-Id: Ic2fefa4d6ed980a74feeb57813e980260b8a5b84
2021-05-03 13:22:36 +02:00
Harald Jensås 3b38acdb12 CI - Dummy overcloud-vips-deployed.yaml file
Add a dummy overcloud-vips-deployed.yaml file so
that we can land https://review.opendev.org/779828
before https://review.opendev.org/774903 where there
is a circular dependency.

Change-Id: If10a80ca47e21214f9b9c35d529976eba9958d8a
Related: blueprint network-data-v2-ports
2021-05-03 13:16:11 +02:00
Grzegorz Grasza 1067a057be Enable Memcached TLS on the overcloud by default
Include the environment file for enabling memcached TLS when TLS
Everywhere is enabled, so that it is tested in the CI (FS039).

Change-Id: I9da7ab89453364e5405ad183b0f08dc2e5b014af
2021-04-21 11:27:22 +02:00
matbu 7a5ed70cf8 Remove legacy tripleo-validations roles calls
This patch remove useless tripleo-validations calls in the
tripleo-quickstart-extras playbook.
Only validations and standalone is used for now in CI.

The other implementations was legacy implementation that is not
used anymore in CI

Change-Id: I2ef1f06007c646ef4307c0cc0b6f60af414f9234
2021-04-12 12:24:41 +02:00
Zuul a9e1bb591e Merge "Remove all rocky related conditionals and tests after rocky End of Life" 2021-04-06 00:43:05 +00:00
Zuul 1353686ddf Merge "Baremetal deploy network ports support" 2021-03-29 15:39:42 +00:00
Marios Andreou c2b0910fe1 Remove all rocky related conditionals and tests after rocky End of Life
Rocky is now EOL since [1][2] so this removes all the rocky related tests
or conditionals.
Related reviews in topic branch tripleo-ci-reduce-rocky [3].

[1] https://review.opendev.org/c/openstack/releases/+/774244
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020912.html
[3] https://review.opendev.org/q/topic:tripleo-ci-reduce-rocky

Change-Id: Icb999fa6c8278bd54c200c73963b5e364c94c23d
2021-03-29 11:54:27 +00:00
Harald Jensås 4a4f64b89d CI - Fix the environment ordering
The overcloud-networks-deployed.yaml must be added after
environments/network-isolation.yaml so that resource's
are actually overriden.

Change-Id: I72c9e16588fd4fa1c90c5835907ff552fab7132e
Related: blueprint network-data-v2
2021-03-10 01:58:18 +01:00
Harald Jensås 4f5fea3b0f Baremetal deploy network ports support
Add '--network-ports' to the 'overcloud node provision'
command.

Include networks in overcloud_baremetal_deploy.yaml

Depends-On: https://review.opendev.org/765545
Depends-On: https://review.opendev.org/764493
Depends-On: https://review.opendev.org/764810
Depends-On: https://review.opendev.org/767068
Partial-Implements: blueprint network-data-v2-ports
Change-Id: If1247da749b248b2226cddfce545a51835e57419
2021-03-03 14:29:43 +00:00
Zuul a3e82dd2cb Merge "Don't create redundant heat_stack_owner role" 2021-02-08 11:28:26 +00:00
Harald Jensås 8d23c18c84 Allow deploying composable networks without heat
Add option 'network_provision' (default: false).
When enabled composable networks are deployed with
the `openstack overcloud network provision` command
prior to creating the heat stack.

The overcloud-networks-deployed.yaml is added to the
network_args in the deploy command to activate the
network/deployed_networks.yaml template.

Depends-On: https://review.opendev.org/762348
Depends-On: https://review.opendev.org/751875
Depends-On: https://review.opendev.org/762652
Change-Id: I842820bfe9998574e53c79a8a4715e637350ad9c
2021-01-12 09:12:22 +01:00
ramishra 4cbe54933d Don't create redundant heat_stack_owner role
This is not required as all the roles of the user are
delegated by default to the trustee. Also removes the
tempest configuration related to that.

Change-Id: Id57ecea69a3568767f5b4bea101c14ad1335d286
2020-12-22 11:08:55 +05:30
David Vallee Delisle 711b336853 extra_tht_configs is broken
This is the generated string without this patch:
"extra_tht_config_args": " -e {{ working_dir }}/overcloud_debug.yaml{{
working_dir }} ",

There's a specific note about this behavior in the ansible doc:
https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters.html#searching-strings-with-regular-expressions

Change-Id: I372072b17a71985e1a20cf250a0165a256463fe8
2020-12-11 10:42:14 -05:00
Sandeep Yadav 805a2192ed Modify overcloud-deploy to support multiple stacks
To make overcloud-deploy role support deployment of multiple overcloud
stacks using a single undercloud node - we have generalized the vars
for stack name and removed hardcoding on "overcloud" name.

We also created a new playbook which install two overcloud stack -
overcloud and overcloud-two.

we also created j2 version of deploy and post-deploy script for
overcloud-two stack.

Intention is to create a new ci periodic job which test multi overcloud
stack deployment, The new ci job will not be executed upstream but 
rather in periodic only.

Change-Id: I353a0497cb4d44f82806381ee0a33b978c86be5f
2020-12-04 15:11:11 +00:00