Commit Graph

295 Commits

Author SHA1 Message Date
Ghanshyam Mann 72ea117f61 Retire Tripleo: remove repo content
TripleO project is retiring
- https://review.opendev.org/c/openstack/governance/+/905145

this commit remove the content of this project repo

Change-Id: Ic549bdcc76a5e12a0104143fbe79fd0db2c866b0
2024-02-24 11:44:35 -08:00
Marios Andreou d25bfbfad9 Add support for role specific container prep to undercloud-deploy
This adds support for the per-role container image prepare params
into the undercloud-deploy role. See [1] for other related patches.

The undercloud-mixed-os play is changed to resolve the rhel/centos8
ci-testing hash for periodic jobs before undercloud-deploy for the
multi container prep.

Vars are being set with [2] but the single deploy workflow will
not be enabled until [3] merges.

[1] https://review.opendev.org/q/topic:role-image-prepare-stable/wallaby
[2] https://review.opendev.org/c/openstack/tripleo-quickstart/+/868208
[3] https://review.opendev.org/c/openstack/tripleo-ci/+/868207

Change-Id: Ieaad3d17bb9c63f7042f0454d81dffada98c5947
2023-02-03 12:30:14 +02:00
Takashi Kajinami 149ae7e63f undercloud: Remove logic for unsupported old releases
This change removes logic for releases older than train, because these
releases are already EOLed. This covers only undercloud-* roles and
playbooks.

Note that this change also removes the containerized_* variables
because current active releases(>=Train) no longer supports
non-containerized deployment. The containerized_undercloud_upgrade
variable is still left because the variable is still required by
the tripleo-ci-base-multinode-standard job template.

In addition, TripleO UI support is removed because the component was
retired before Train.

Change-Id: I5132e5bac4ddaa6f76564cab67e486cb5a4e2bbb
2022-10-25 17:15:36 +09:00
Sandeep Yadav cd5cd5ec4f Create a yaml with custom CI rules for Firewall
We need some tweaks in the firewall rules in order to be able to switch
to nftables.

After analyzing the dropped packets[1], we must open a couple of ports
related to VXLAN[2], as well as ensuring ssh has the same opening as the
current "openstack-INPUT" chain created in iptables via the CI itself.

This patch generates the needed configurations for both undercloud and
overcloud, since both will basically need the same things.

[1] https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
[2] https://opendev.org/openstack/tripleo-docs/src/branch/master/deploy-guide/source/features/security_hardening.rst#vxlan-and-nftables

Change-Id: Ic3e0f63e98d97323c313a87045d0fe01bec5ded8
2022-09-19 11:22:55 +02:00
Sandeep Yadav 37a150f5ed Add custom CI rules to the Undercloud Firewall
We noticed some packet drops on undercloud node after switching to
nftables [1] and [2]

In order to properly get VXLAN support, We have to add a couple of
rules to the Undercloud firewall. This is especially true for a lab
environment, or on the upstream CI infrastructure.

Also, Port 19885 is for console log streaming.

Patch[3] add this requirement in the documentation as well.

Testproject[4] works well, We can check the rendered
undercloud-parameter-defaults.yaml[5] its is correctly poppulated
with right rules.

[1] https://logserver.rdoproject.org/54/31954/58/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset039-master/490510a/logs/undercloud/var/log/extra/dropped-packets.txt.gz
[2] https://logserver.rdoproject.org/54/31954/49/check/periodic-tripleo-ci-centos-9-containers-multinode-master/66bb894/logs/undercloud/var/log/extra/dropped-packets.txt.gz
[3] https://review.opendev.org/c/openstack/tripleo-docs/+/851849
[4] https://review.rdoproject.org/r/c/testproject/+/31954/61#message-6f6b2fe65899192fd18eb110665d2361bd38682d
[5] https://logserver.rdoproject.org/54/31954/61/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset001-master/27d2796/logs/undercloud/home/zuul/undercloud-parameter-defaults.yaml.txt.gz

Change-Id: Ic19ed9b8e95dbe2d3ad7efce7221a28dc8526be4
2022-08-08 12:18:33 +05:30
Zuul bbd3ad9f78 Merge "Disable direct override using ironic_config" 2022-08-03 14:47:34 +00:00
Marios Andreou b1685977ef Remove podman_version fact and conditional from undercloud-deploy
This was added in [1] but no longer needed. The fact is not consumed
anywhere else [2], the branches mentioned are EOL and podman is now
on v3.0 in train e.g. [3].

The conditional is causing problems for the mixed os job in [4]
because we include_tasks and not the whole undercloud-deploy role to
regenerate the containers prepare file.

[1] 9d31d8996c
[2] https://codesearch.opendev.org/?q=podman_version
[3] https://logserver.rdoproject.org/openstack-periodic-integration-stable4/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-8-containers-multinode-train/5dc578c/logs/undercloud/var/log/extra/package-list-installed.txt.gz
[4] https://logserver.rdoproject.org/34/44234/1/check/periodic-tripleo-ci-centos-8-9-multinode-mixed-os/2892353/job-output.txt

Change-Id: Iab4776bb71e37bacae77e678484b2a1f308573db
2022-07-28 18:47:33 +03:00
Takashi Kajinami a0c94281af Disable direct override using ironic_config
... because it does not allow us to implement these parameters in
puppet-ironic. We should NOT use this interface in CI but should use
only native puppet parameters.

This replaces usage of arbitrary interface by the native puppet
parameters. These parameters are not yet implemented because
the existing override is causing duplicate definition, but will be
added once this change is merged.

Change-Id: I1754111c943afc004ef3a3226f662d415f910999
2022-07-26 17:04:48 +09:00
Marios Andreou abc50905fa Adds toci playbooks and updates for new multinode mixed OS jobs
This adds some new playbooks to be used by the new multinode mixed
os job (See topic at [1] for related reviews). Also updates the
extras-common and undercloud-deploy roles to allow the mixed-os
job to use the correct content provider.

[1] https://review.opendev.org/q/topic:oooci_mixed_rhel

Change-Id: Ie7a95056bfb0a90d2e6fb6e5ec9c8ed66f8ef31e
2022-07-20 12:25:52 +03:00
Cédric Jeanneret bd772df0eb Allow CI to switch the firewall engine
In order to properly test nftables in the different scenarios, we want
to be able to switch the engine.

Depends-On: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/841445
Change-Id: I136c0d40b8088779a5fbc3570e1f136a88ec41e3
2022-06-21 14:47:55 +02:00
Zuul be5e48aeed Merge "Push to local registry when building containers" 2022-05-23 08:42:00 +00:00
Jakob Meng 554075ecc7 Use timezone UTC on undercloud
Previously no timezone was defined in undercloud config [1][2],
so TripleO kept using the local timezone on the undercloud [3].
This patch changes the timezone on the undercloud to UTC in order
to match the overcloud [4][5] and simplify debugging of ci issues.

Ref.:
[1] https://opendev.org/openstack/tripleo-quickstart/src/branch/master/config/general_config
[2] https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/undercloud-deploy/templates/undercloud.conf.j2
[3] 8edbcca6bf/tripleoclient/v1/undercloud_config.py (L503)
[4] https://opendev.org/openstack/tripleo-ansible/src/branch/master/tripleo_ansible/roles/tripleo_timezone/defaults/main.yml
[5] https://opendev.org/openstack/tripleo-heat-templates/src/branch/master/deployment/time

Signed-off-by: Jakob Meng <code@jakobmeng.de>
Change-Id: I522d9719fcbd061b9c927a07722a4c39319cffad
2022-05-18 11:33:15 +02:00
yatinkarel 172c0cac55 Push to local registry when building containers
This will allow for overcloud nodes to access
images from undercloud registry.

Change-Id: I8e985b3759b3acbd80189be5f69f84936c29ff0c
2022-05-16 11:38:20 +05:30
Zuul 27a0115b37 Merge "Increase ironic conductor heartbeat times" 2022-04-28 21:50:22 +00:00
Douglas Viroel adb8f8a12f Increase ironic conductor heartbeat times
This patch increases ironic conductor heartbeat times
to avoid conductor being considered offline, on high load
systems. This patch is a workaround to avoid node provision
failures on OVB jobs.

Related-Bug: #1970484

Change-Id: I9d1e8d0d6b50c0a5524bba8588c06af573cff780
2022-04-28 11:34:24 +00:00
Cédric Jeanneret 142ad66f32 Move the masquerade override to parameter
Using the default parameter override allows to get rid of the hieradata
part, meaning we should be able to get rid of the puppet-firewall part
for the masquerade management.

Change-Id: I0a2b94002f489fd3545b52aed691c2796dd6e7d8
2022-04-26 09:10:59 +02:00
chandan kumar 10a3cda75c Revert "Convert a hieradata override to plain t-h-t parameter"
This reverts commit aec2975826.

Reason for revert: downstream ovb is broken check rhbz#2076756

Change-Id: I8654e603121cb09d95c06d2b9a1d5dda2cfa5de9
2022-04-20 08:18:24 +00:00
Cédric Jeanneret aec2975826 Convert a hieradata override to plain t-h-t parameter
Since we're moving the masquerade management out of puppet[1], we
cannot rely on hieradata anymore.

This patch creates a custom_env_file taking care of the override of the
actual heat MasqueradeNetworks parameter.

It also get rid of an ugly pattern, and uses an actual list for the
custom_env_files (while still supporting the space separated string).

[1] https://review.opendev.org/q/topic:masquerade-ansible

Depends-On: https://review.opendev.org/c/openstack/tripleo-ansible/+/836871
Change-Id: I977d245eb4863b37c63e21c416debe8df34b813b
2022-04-08 14:31:02 +02:00
Harald Jensås 0dc4f9ac62 Use from_yaml filter if not mapping
Try to use from_yaml filter on undercloud_parameter_defaults_args
if it is not a mapping value.

See: https://review.opendev.org/c/openstack/tripleo-quickstart/+/828089/11/config/general_config/featureset010.yml#97

Related-Bug: #1959726
Change-Id: I60012ef3c696e0880df76450c0ffc84091ef7aaf
2022-03-22 20:09:12 +00:00
Harald Jensås 132010fa26 Add undercloud_parameter_defaults var undercloud-deploy
Update undercloud-parameter-defaults.yaml.j2 to allow setting
undercloud_parameter_defaults.

Change-Id: Icfd03129bbb8645d4c6d64c8177fb9184ad8548a
2022-02-10 23:33:24 +00:00
Zuul e95976d306 Merge "Set DockerInsecureRegistryAddress consistantly" 2021-11-03 15:45:56 +00:00
yatinkarel 40451a3f30 Set DockerInsecureRegistryAddress consistantly
Set DockerInsecureRegistryAddress consistantly
across standalone deploy/upgrade and undercloud
deploy roles.

Also include following changes:-
- Use local_docker_registry_host in place of standalone_ip
as that's common for both undercloud and standalone deploys.
- Use quay.io instead of docker.io as a default registry due
to rate limits with docker.io.

Follow up of [1].

[1] https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/814699

Change-Id: I4286e1d0867fc972517f8e27665f43777c2da52a
2021-11-02 17:10:19 +05:30
Douglas Viroel 202c6967b3 Add 'power_state_change_timeout' to undercloud-setup
This patch adds a new ironic configuration option to set
'power_state_change_timeout' during undercloud-setup.

Change-Id: I35ef92472c58679c58b7b99764634c04c4cae13d
Signed-off-by: Douglas Viroel <dviroel@redhat.com>
2021-10-26 20:56:04 -03:00
yatinkarel 68af35edf1 Allow to build containers before undercloud-install
If build_container_images is true build containers
and use these build containers instead of downloading
containers and running container updates.

Change-Id: If6f0c21581039a2318a5b019175852f5c5263f62
2021-10-20 21:08:21 +05:30
yatinkarel ebf8e6a257 Drop legacy undercloud install
Use undercloud_install from tripleo-operator-ansible
for all supported releases i.e train+.

Also cleanup vars/templates related to legacy undercloud
install.

Due to release=master condition tripleo-operator-ansible
was used only for master and in mean while there were
multiple releases.

Change-Id: I813decf17ff58b53677bd84a4fab5c1fad7d60ef
2021-10-20 17:03:23 +05:30
Zuul 8c0f19ae7b Merge "Remove `--old-deploy-image` var for image upload" 2021-07-14 11:02:38 +00:00
Rabi Mishra aba4ddf72f Revert "Add ansible var to enable swift on undercloud"
This reverts commit c619e45f2d.

Reason for revert: Use the defaults for swift in tripleoclient, else we've issues during upgrades.

Change-Id: I6f7543560d5953a135a90e92b96ca4f6dae57d29
2021-07-13 18:06:31 +05:30
Sandeep Yadav f7410178ba Remove `--old-deploy-image` var for image upload
`--old-deploy-image` was added as liberty only code to allow uploading
the old deploy ramdisk.[1]

Since Mitaka the old ramdisk is not be supported. With this patch:
removing this from ci code as well.

[1] https://review.opendev.org/c/openstack/python-tripleoclient/+/263351

Change-Id: I3a86c000a3d46dd8cfdc92ad30fcde21f522a5be
2021-07-13 15:59:42 +05:30
Ronelle Landy d46cbb211a Add missing custom container parameters - overcloud
roles/standalone/tasks/containers.yml has a number of
ceph-related and other custom parameters that were
missing from the overcloud prep parameters.

This review adds those custom parameters to ensure
that the correct containers (from the desired
registries and namespaces) are used.

Change-Id: Id3b1ea025b748dee578e5bfb1cdd41d0bb7f7383
2021-06-23 12:30:28 +00:00
Ronelle Landy ef91d725f8 Test container updates when delorean-current does not exist
delorean-current does not exist is downstream jobs.
This review set_fact to edit the default value
before adding component repos.

Change-Id: I8c163457c24e92a4a98d4796b7dfd8351c0bfe14
2021-06-08 13:57:46 +00:00
Ronelle Landy da5514a356 Only add a comma before multiple update repos
When adding repos to update in standalone
and undercloud, only add a comma before the list
of additional repos if a previous update repos
exist.

Change-Id: Ic1568c99e16eecd607f063fe8a95fa8c4aa9ed2b
2021-06-01 12:20:05 +00:00
Zuul 7470f4389e Merge "Collect the old and new path for outputs/passwords first" 2021-05-20 21:11:08 +00:00
James Slagle 96ab93f4fe Support using ephemeral Heat
Adds support for a new ansible variables ephemeral_heat and
ephemeral_heat_args, which will allow job configs to deploy with
--heat-type in order to use the ephemeral heat deployment.

Implements: blueprint ephemeral-heat-overcloud
Signed-off-by: James Slagle <jslagle@redhat.com>
Change-Id: I29cf6dd8a32242f27a40946688f9dede8968c7f9
2021-05-17 16:40:46 -04:00
James Slagle 80032da4f8 Collect the old and new path for outputs/passwords first
Now that Idded7faba1ff6c811b94503c559029aeeaca6a06 has merged, passwords
for tripleo deploy are written to the consistent working directory, so
both the old and new locations need to be collected in our job logs.

We collect the new path first with first_found, since it will be the
default path going forward.

Partial-Bug: #1921975
Signed-off-by: James Slagle <jslagle@redhat.com>
Change-Id: Iec4c477bf294514bbf9375fc77f44f5b37334bdb
2021-05-11 18:19:04 -04:00
Zuul 31d1492a13 Merge "Collect and output outputs/passwords files with old and new locations" 2021-04-07 23:06:45 +00:00
James Slagle 8b65d49b74 Collect and output outputs/passwords files with old and new locations
In Idded7faba1ff6c811b94503c559029aeeaca6a06, we are changing the
default path for tripleo-undercloud-outputs.yaml and
tripleo-undercloud-passwords.yaml. These tasks in CI that expect the
files to exist at the old location are updated to use the first_found
lookup to check both the old and new paths.

Likewise, when the output files are written on the minion, they are
written to both the old and new locations until the tripleoclient patch
merges.

Once the tripleoclient patch merges, we can update these tasks to only
look at the new path.

Partial-Bug: #1921975
Signed-off-by: James Slagle <jslagle@redhat.com>
Change-Id: If28d5b225439162b7983165fe3bea605971cfb74
2021-04-07 09:32:14 -04:00
Marios Andreou c2b0910fe1 Remove all rocky related conditionals and tests after rocky End of Life
Rocky is now EOL since [1][2] so this removes all the rocky related tests
or conditionals.
Related reviews in topic branch tripleo-ci-reduce-rocky [3].

[1] https://review.opendev.org/c/openstack/releases/+/774244
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020912.html
[3] https://review.opendev.org/q/topic:tripleo-ci-reduce-rocky

Change-Id: Icb999fa6c8278bd54c200c73963b5e364c94c23d
2021-03-29 11:54:27 +00:00
wes hayutin 37109c55aa Revert "Upgrade linters (ansible-lint v5)"
This reverts commit ac93fbbb47.

Reason for revert: breaks default install path for quickstart

Change-Id: I7d513d1bffdfd4293f199c38216ceb00343e06c5
2021-03-12 17:50:42 +00:00
Sorin Sbarnea ac93fbbb47 Upgrade linters (ansible-lint v5)
Change-Id: I75562efd62fff9739d32f8b1b92e7826120e9d1a
2021-03-11 13:48:54 +00:00
Zuul d14052101e Merge "Add ansible var to enable swift on undercloud" 2021-02-05 21:27:45 +00:00
ramishra c619e45f2d Add ansible var to enable swift on undercloud
This would allow us to enable swift on the undercloud
when using quickstart.

Depends-On: https://review.opendev.org/c/openstack/python-tripleoclient/+/772968
Change-Id: Ied28977184c43e9d64c160e52d2ac501ba34705a
2021-02-02 14:27:36 +05:30
Harald Jensås 654484103e Add ironic_network_interface opts undercloud.conf.j2
Adds options:
  ironic_default_network_interface
  ironic_enabled_network_interfaces

Change-Id: I8ae3f956b8ddf485f423403faa5b1fcc46409d8b
2021-01-13 09:49:22 +00:00
Zuul b339732aed Merge "Add dns_nameservers options to undercloud.conf.j2" 2020-11-14 00:27:30 +00:00
Harald Jensås 6d6abe0990 Add dns_nameservers options to undercloud.conf.j2
Adds dns_nameservers in [ctlplane-subnet] section.

Change-Id: I3ad29d778e233121c2588cb5f9f3324eed0e99cb
2020-11-09 12:23:52 +00:00
Harald Jensås f9c0de69a3 Add IPv6 options to undercloud.conf.j2 template
Adds ipv6_address_mode option.

Change-Id: I2bd9d51256918ad68e6496310c061b221ddd0f32
2020-11-09 12:23:34 +00:00
Chandan Kumar (raukadah) 1aa2135090 Added tasks for building containers on CentOS-7
It will be used with the content provider job.
Set buildcontainers_venv: false to use dlrn installed
packages.

buildcontainers_rpm_setup_config: "" as kolla will
download the required dlrn repos and gating repo.

Added undercloud tag to prepare and use old
container workflow for c7 based env.

Added insecure registry for docker.

Change-Id: Ic5f569a78b5341fcee9cd013eddfffd3eeb66fa0
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
2020-10-17 09:15:47 +05:30
Marios Andreou 8d535ec0f9 Wire up job.registry_ip_address_branch for content provider jobs
Wires up the content provider container registry address into
DockerInsecureRegistryAddress. Makes sure we are using the
_address_branch version in all other references to the
job.registry_ip_address var.

Needed by the upgrade jobs in https://review.opendev.org/753403
Change-Id: If9b516860ad3f102e39cb8755cd8aee6f9aae413
2020-10-15 13:11:35 +03:00
Zuul c8f638d2f8 Merge "ensure that novajoin is using |bool" 2020-09-28 20:47:57 +00:00
Wes Hayutin b3f4b24d97 ensure that novajoin is using |bool
Change-Id: Ibfbc3d61ebe97503c77313f2a6ff769f71332cc0
2020-09-28 08:09:57 -06:00
Wes Hayutin 9260bdfa3a consolidate variable undercloud_enable_novajoin to common
Depends-On: https://review.opendev.org/#/c/754408/
Change-Id: I440694d19286a0802f42f8e1cbd298dbda6ed903
2020-09-26 23:48:50 +00:00