Commit Graph

52 Commits

Author SHA1 Message Date
Ghanshyam Mann c49552281f Retire Tripleo: remove repo content
TripleO project is retiring
- https://review.opendev.org/c/openstack/governance/+/905145

this commit remove the content of this project repo

Change-Id: I235b08d63bab01a94a41b29b40724f05c88a534f
2024-02-24 11:44:21 -08:00
Sandeep Yadav 0c7ca14e76 Include custom ci firewall rule in deployment
We noticed some packet drops on Overcloud node after switching to
nftables [1] in periodic-tripleo-ci-centos-9-scenario007-
multinode-oooq-container-master job.

In order to properly get VXLAN support, We create a yaml
ci_custom_firewall_rules.yaml during overcloud-deploy rule which
add some custom ci firewall rules to the Overcloud node. This is
especially true for a lab environment, or on the upstream CI
infrastructure.

This patch include yaml: ci_custom_firewall_rules.yaml in the
deployment.

Please refer to the documentation [2] to know more about the
requirement of these additional rules.

[1] https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
[2] https://opendev.org/openstack/tripleo-docs/src/branch/master/deploy-guide/source/features/security_hardening.rst#vxlan-and-nftables

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096
Change-Id: I9c856506331a7c511e1457d72b9922de78c2f403
2022-09-15 13:09:25 +05:30
Sandeep Yadav 04bf8cb8ac Enable auditd service in featureset010
Ansible tripleo_auditd role is now used to configure auditd service
and puppet-auditd is deprecated and archived.

Enabling auditd service in featureset010 to test auditd service in
CI.

Currently we are enabling only for master but once the backport
merges we can enable auditd service for older releases as well.

Depends-On: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/852734
Change-Id: I4603db243eec097fcf454e6fa8367fb7a0c93d97
2022-08-22 04:51:11 +00:00
Soniya Vyas d53a274119 Run featureset010 job with tempest-allow
This patch replace the tempest_test_whitelist with tempest_allowed_group
that is to be used by tempest-allow.

Testing here:- https://review.rdoproject.org/r/c/testproject/+/40171
Depends-On: https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/843769
Change-Id: Ib9ce791e12fcc19fad56af092081589688f45ffc
2022-06-23 14:12:06 +00:00
Harald Jensås 8e35055877 Don't use ipxe-snponly on CentOS 7
Job `tripleo-ci-centos-7-containers-multinode` is failing
because packaging issue in CentOS 7.

CentOS 8 ipxe-bootimgs package has:
  /usr/share/ipxe/ipxe-i386.efi
  /usr/share/ipxe/ipxe-snponly-x86_64.efi
  /usr/share/ipxe/ipxe-x86_64.efi

CentOS 7 ipxe-bootimgs package has:
  /usr/share/ipxe/ipxe-snponly-x86_64.efi
  /usr/share/ipxe/ipxe.efi

So puppet in train does not set $arch for CentOS < 8, since the
packaging of ipxe.efi was not arch specific. But ipxe-snponly
is arch specific.

This change forces ipxe instead of ipxe-snponly for the CentOS 7
job.

Related-Bug: 1959726
Depends-On: Icfd03129bbb8645d4c6d64c8177fb9184ad8548a
Change-Id: Iffaee944c2a2bcfdad8dee1fe6c2c4a7a1d84155
2022-03-01 13:47:52 +01:00
Harald Jensås 19e6750531 Enable '--baremetal-deployment' fs010/fs030/fs037
Related change: https://review.opendev.org/806562
Would need '--baremetal-deployment' to make overcloud
deploy provision the ControlPlane VIP.

Change-Id: Ife4b15a784c70fe031af98f3aa135737232d56a6
2021-10-28 10:27:26 +02:00
Harald Jensås dbb21969d2 Disable protected resourced types
This review adds and extra-vars to
disable protected resourced types in
releases wallaby and after for
fs010, fs037, fs035 and fs020.

There is a need to disable the resource
registry override protection to merge:
https://review.opendev.org/798642

Closes-Bug: #1943579
Change-Id: I618c0a0d99c934fb65a6af30bc76096d52d4679d
2021-09-14 18:07:13 -04:00
James Slagle 2289341399 Support using ephemeral Heat
Updates the containers-multinode job to enable using ephemeral heat
using the newly added ephemeral_heat/ephemeral_heat_args variable.

Implements: blueprint ephemeral-heat-overcloud
Signed-off-by: James Slagle <jslagle@redhat.com>
Change-Id: Ide514b7f2ea94a1a82bd414840a9adb0a79ade98
2021-05-19 08:17:15 -04:00
matbu b43e41f401 Remove legacy tripleo-validations configurations
This patch removes:
* legacy tripleo-validations config boolean, since now the role
  is in tripleo-validations repos and is enabling by another
  configuration in the zuul config directly
* documentation, because its now outdated and a new one should
  be moved under tripleo-validations repos

Change-Id: Ibc5e1aec08643d53760953ebb1c026e99689a2b6
2021-04-19 06:48:57 +00:00
Marios Andreou 7b8d8ecfca Remove all rocky related config/conditionals/tests as tripleo rocky is EOL
Rocky is now EOL since [1][2] so this removes all the rocky related tests
or conditionals.
Related reviews in topic branch tripleo-ci-reduce-rocky [3].

[1] https://review.opendev.org/c/openstack/releases/+/774244
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020912.html
[3] https://review.opendev.org/q/topic:tripleo-ci-reduce-rocky

Change-Id: Ibb602d1a2e3bd62463ad8861e66c23248f037923
2021-04-01 16:12:59 +03:00
Chandan Kumar (raukadah) ad0f465cd6 Remove undercloud_enable_tempest var
Since we are working in process of removing tempest container
from wallaby release and all the tempest run is switched to
os_tempest for all supported release in tripleo-ci.

This change is not going to affect any periodic jobs also.

It also removes run_tempest and tempest_format var.

Related-Bug: #1916875

Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
Change-Id: I3d046047833044fd2d75ba399f784be5d992fbef
2021-03-11 15:29:53 +05:30
Rabi Mishra ea3230188f Remove resource_registry args for some multinode features
This removes the resource registry args for some multinode
scenarios that are currently used. There are also a bunch of
multinode scenarios that seems to have been converted to
standalone ones. They dont even have appropriate envs in tht.
Those are not changed with this patch and should be cleaned in
a separate patch.

Change-Id: Ia40bf244f91c61b8d67eadb5b00a6cade28d00b2
2020-10-08 10:01:56 +05:30
Ronelle Landy c19342bc21 Remove verbose log output
The overcloud deploy logs are now larger than than
the should be. Remove the verbose output to
reduce the log size.

Change-Id: Iea8f2f361013cadb048efaf3174fd18f0ecbc87c
Depends-On: https://review.opendev.org/#/c/742517/
2020-07-24 20:09:55 +00:00
Emilien Macchi 301bb6ddd9 fs010/undercloud: disable paunch
Change-Id: I313dc6233895f37fb7616aee730e5802c9aac3df
2020-01-11 03:52:47 +00:00
Emilien Macchi 97e0c940f3 fs010: disable validations on the undercloud
The validations cause timeouts, we should have them tested outside of
gate/check for now.

Change-Id: I198939058b9d09b18e914db42b1bf896dc243d63
Related-Bug: #1844446
2019-09-18 17:25:46 -04:00
Ronelle Landy b465c650d8 Move *_container_cli settings to extras-common
Remove  *_container_cli settings out of
feature set file to single-source
the setting in tqe role extras-common.

Change-Id: I833348a18597c230fea4a01ab203569ffe5ef7a0
Depends-On: https://review.opendev.org/#/c/678881/
2019-08-28 11:53:59 +05:30
Chandan Kumar (raukadah) 53ad72adf4 Enable os_tempest for master multinode jobs
As overcloud clouds.yaml support landed in Tripleo for train
release and os_tempest ansible role is used for running
tempest. Multinode container job runs for other releases also
so it updates the fs010 to run os_tempest for master only.

Closes-Bug: #1837019

Change-Id: I96925574858223348faf35521fb2afdf7710e0db
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
2019-07-18 11:58:31 +00:00
Sorin Sbarnea 4a41ca7bf0 Lint fixes for ci-scripts and config folders
This normalizes the formatting of files from ci-scripts and config
folders in order to allow further hardening of linting.

Fixing linting was too big to be made in a single commit as it would
involve too many files to review and could merge conflicts with
existing changes. Thus doing it in few chunks would makes it possible.

Original full change is at https://review.openstack.org/#/c/627545/ and
will be the one merging the last.

Change-Id: Ifb215c0e2ea0ef7115897721f75ba8489bd59b97
2018-12-28 10:01:11 +00:00
Emilien Macchi a8029c8f9b Revert "temporarily turn off podman"
This reverts commit 6822ba9a7e.
We disabled the relabeling on /run/netns, it should
work better now.

It also properly enables podman on the overcloud without extra_args,
which will avoid issues when overriding the extra args.

Depends-On: I34813b240284c8d9b35e044bc9654d556ec0cbdb
Change-Id: Id75697e86cd5d08d116d6b074342801da4572f2f
2018-12-23 15:21:18 +00:00
Wes Hayutin 6822ba9a7e temporarily turn off podman
We're hitting several issues in the upstream
ci related to podman :(

https://bugs.launchpad.net/tripleo/+bug/1804434
https://github.com/containers/libpod/issues/1844

Related-Bug: #1804434
Related-Bug: #1809218
Change-Id: I19aa04382ba159768a1748d44412bbc670facaf3
2018-12-21 11:23:17 -07:00
Emilien Macchi 8ffb8a3561 fs010: enable Podman on the overcloud
First CI job to test podman on the overcloud, instead of docker.

Depends-On: I8638386c8f394c98b047fb2ae4ff97daeeaf4475
Change-Id: Id0e737af4cb82d56b0c2db3303a767bb671917ea
2018-12-06 15:30:40 +00:00
Emilien Macchi 2ad3e8bd10 Revert "Revert "Revert "(squash) disabling podman everywhere in gate"""
Closes-Bug: #1803232
This reverts commit 0eb6f366d0.

Change-Id: I21a5a07d0c9752051e720734d34a732d4d85adab
2018-11-14 12:48:50 +00:00
Emilien Macchi 0eb6f366d0 Revert "Revert "(squash) disabling podman everywhere in gate""
Related-Bug: #1803232
This reverts commit 9989134abc.

Change-Id: Ia0b9ba83223ef2c83ff69999bd0b1c9894796d1b
2018-11-14 01:05:52 +00:00
Emilien Macchi 9989134abc Revert "(squash) disabling podman everywhere in gate"
This reverts commit de5ca4162e.

Closes-Bug: #1800737
Depends-On: I5e0715a9b7a052126fb01c8d2c3da36a38bec2bf
Change-Id: I23a50cff9ee8b052fe2352ee4b4c70427bfd4811
2018-11-03 03:55:26 +00:00
Emilien Macchi de5ca4162e (squash) disabling podman everywhere in gate
Until we fix the situation, we want to remove podman from our gate.

Revert "fs010: switch undercloud to podman"

This reverts commit 39d1da5267.

Revert "fs050: upgrade the undercloud to Podman containers"

This reverts commit ab6cbcb0ce.

Revert "Switch fs027 to deploy with podman"

This reverts commit f77771843f.

Change-Id: I3715a0432ead1eb1d18deb5893858e051a0b5539
Related-Bug: #1800737
2018-10-31 11:03:07 -04:00
Emilien Macchi 39d1da5267 fs010: switch undercloud to podman
To iterate in podman testing, switch the fs010 to deploy an undercloud
with podman instead of docker, in master (stein) only.

blueprint podman-support
Change-Id: I7dd2ff456f5310735a61ee59a3e873af48260870
2018-10-29 11:22:35 +00:00
Bogdan Dobrelya 2c11596a96 Use undercloud templates path for UC deployments
Depends-On: I4e0dcf24b93b8e4afb8359cb5108c4b7b5ba3d55

Change-Id: I63437f67ffbee7a43dcfaf28ffd08594f9c977fa
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-08-13 16:03:03 +02:00
Arx Cruz f11e671055 Running containerized tempest only in containerized environment
Tempest container is available and built when we deploy
containerized undercloud.
Since undercloud is containerized from rocky and ongoing, this patch
enable containerized tempest when undercloud is running as container.
Also, moved all tempest related configuration to the end of file to
avoid overwritten options

Depends-On: https://review.openstack.org/#/c/580384/
Change-Id: Icdb0f2b033ad0d1ba2548c591fa32dc649fff319
2018-08-10 10:08:52 +02:00
Emilien Macchi 596d117734 Remove --use-heat usage, as it's deprecated
For all the jobs using --use-heat, remove its usage as it's deprecated
in Rocky.

Change-Id: Icaaab7c0f09b3aadae6a5acb8f0d798f9c73148e
2018-07-20 13:42:36 +00:00
Emilien Macchi 6df42a0f6e Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud""
This reverts commit a76f5e5c3e.
Change-Id: Ib25edc4b235181b172d8e9c89efc7a624636fe41
2018-07-05 13:42:29 +00:00
Zuul e5e612c806 Merge "Add config-download back into queens CI" 2018-05-22 04:06:07 +00:00
Alex Schultz cf9a0be291 Add config-download back into queens CI
We incorrectly dropped the config download items in
Ic5c5df350a7eb5291d45cf8e229af575fe9bed57 for featuresets that had it
enabled in queens. Since we won't be backporting the default changes in
tripleoclient back to queens we need to add a special case for these
featuresets in queens.

Change-Id: I9aa449a3198568c25d4dbc838669f493b0e3c103
Closes-Bug: #1771549
2018-05-21 15:37:00 -06:00
Arx Cruz 1bdf8a68af Run tempest containerized
From master and onwards, we are going to run tempest in containers.
This set the following jobs to run tempest in containers:

* tripleo-ci-centos-7-containers-multinode
* tripleo-ci-centos-7-scenario001-multinode-oooq-container
* tripleo-ci-centos-7-scenario002-multinode-oooq-container
* tripleo-ci-centos-7-scenario003-multinode-oooq-container
* tripleo-ci-centos-7-scenario004-multinode-oooq-container
* tripleo-ci-centos-7-scenario007-multinode-oooq-container

Change-Id: I3af9ad4f43c1c056bd732124eaf4f1f6f194be5b
Depends-On: https://review.openstack.org/#/c/562155/
2018-05-21 10:49:40 +00:00
James Slagle 99a6d31a45 Remove explicit --config-download
Now that config-download is the default across tripleoclient and
tripleo-heat-templates, we can update all the CI jobs to remove the
explicit --config-download and -e
environments/config-download-environment.yaml.

Note that --deployed-server didn't actually trigger any needed behaviors
with --config-download, so where it was used, it has now been removed as
well.

Change-Id: Ic5c5df350a7eb5291d45cf8e229af575fe9bed57
2018-05-09 09:24:34 -04:00
Chandan Kumar 4a7bbb4599 Rename test_regex to test_white_regex
* https://review.openstack.org/551441 introduced test_black_regex
  in order to skip test directly from featureset files. In order
  to avoid confusion between test_regex and test_black_regex, we
  are renaming test_regex to test_white_regex.
 * It will fix all the featuresets.

Depends-On: https://review.openstack.org/560006
Change-Id: If66225c2e2f8c571cc85aebacee01431e4f64dcc
2018-04-25 08:37:57 +00:00
James Slagle a76f5e5c3e Revert "Deploy container-multinode (fs010) with a containerized undercloud"
This reverts commit f61f8d0e60.

tripleo-common patches aren't being tested since this merged to convert
the undercloud to containers on March 29th. Nothing updates the mistral
container to use the tripleo-common code being tested.

Change-Id: I2cb7d59ab1f42bfa6d852213b792b428a75c4fcc
Partial-Bug: #1762422
2018-04-09 09:48:48 -04:00
Emilien Macchi f61f8d0e60 Deploy container-multinode (fs010) with a containerized undercloud
We'll also switch featureset001 (ovb-ha) for the next job.

Change-Id: I942b48ef2fd4813ad2fdc5bae6694485de222ab5
2018-03-29 15:07:09 +00:00
Wes Hayutin bab0f87196 remove deployed_server from common args
deployed_server is no longer common
through out the multinode featuresets.
deploy_steps_ansible_workflow is an
alternative now.

Related-Bug: #1748315
Change-Id: I28988d30338527669da25bc764143cf57a995af9
2018-02-09 14:05:30 +00:00
Wes Hayutin 905258d323 Activate config-download only in Queens and beyond
... the feature doesn't work in Pike.

Related-Bug: #1748315
Change-Id: I9c54f72e1b527ca68e88cc253c673362ca7943f1
2018-02-08 22:06:45 -08:00
Emilien Macchi 6c96e5def7 fs010: switch tempest test to test_network_basic_ops
fs010 has too many timeouts in upstream CI, we'll stop to deploy some
services, Cinder included (already covered by 2 other scenarios).

So we want to run test_network_basic_ops instead of the boot from
volume.

Change-Id: I2a4aa707fa10664f1fc9026e3eb417f35834436f
2017-12-29 07:36:49 -08:00
Gael Chamoulaud 9a71cc8176 Enable tripleo-validations runs in featureset010
Change-Id: I35309ec5c1abe7eecb67e675bd3a4ad62719243c
Signed-off-by: Gael Chamoulaud <gchamoul@redhat.com>
2017-12-05 15:55:59 +01:00
Emilien Macchi 0a9929d16c Remove tempest_config (obsolete)
Depends-On: Ie3b37b17bf41b5f36bc60bfd0e4607ed4a3aaf6d
Change-Id: If51721ac720843fa81a7e20ae37a5ac702c3f6c5
2017-11-24 04:46:16 +00:00
Emilien Macchi 0b52386477 fs010: remove legacy config-download parameters
Cleaning up technical debt by removing useless parameters.

Change-Id: I60d5bd33c4d08ccc3fa1b346617877fa3cd76551
Depends-On: I5fb650b2976c74fd5e07393ab3deced7d2bf3fff
2017-11-20 09:44:52 -08:00
Emilien Macchi 77f747af7a fs010: use --config-download from tripleoclient
See https://review.openstack.org/#/c/514701/ for the context.
This is a new iteration of testing config-download.

Change-Id: I18815c9920454290d965ef632a29ee13c718cd0d
Implements: ansible-config-download-ci
Depends-On: If23e223b4a0387efcc745d02154c6bdd2dee23fc
Depends-On: Iff7a1b211a545f1227b9e13e304b858128fb855b
Depends-On: I20d4107eed4c92b891e3b2dc749b8aeedfe4ef75
2017-11-18 20:46:17 +00:00
Emilien Macchi d5d7218fa1 fs10: deploy steps with ansible
On FS10, use Ansible to deploy TripleO steps.
For that, it will generate Ansible configuration, download it and
execute it from the undercloud.

Depends-On: I2aa1a04ea8a963b9c613008c12b1efffd365ceaf
Change-Id: Ib7451f59664380d437a9f42efdfad09d070e8072
2017-11-02 01:25:29 +00:00
Martin André cbeb7b84f0 Use different variables for deploy and upgrade scenarios
Use the new upgrade_composable_scenario variable from oooq-extra to set
the composable scenario file used during upgrade.

Closes-Bug: #1714905

Change-Id: Ie0e8de54794a9259c0aeb8c67ae0f6a908844093
2017-10-15 06:49:39 +00:00
Wes Hayutin 54f7a32e4b moving docker registry config to environment
Adding the docker registry config to the featureset config
breaks the fs config when executed in other environments.

Depends-On: I9b3ac36033c0b9e994a13188f750e9e1d484bd2d
Change-Id: I5b8a99b4ada9868169a4631aa591a911357f9bcb
2017-08-20 17:24:23 +00:00
John Trowbridge 3ed912bd91 Move common multinode role setup from tripleo-ci
This configuration was previously in tripleo-ci in the
testenv/multinode.yml file, but it is not specific to tripleo-ci.

This would be nice to add to the common multinode config and only
override where needed, but our current code does not allow for
overriding what is in the common config.

Change-Id: Ia042fc578ade2c073504ceb117b1da3ff0a4e051
2017-08-19 06:52:13 +00:00
Emilien Macchi 7261d35e8e fs010: enable tempest
Enable tempest on the multinode-container job instead of pingtest.

Depends-On: I398575d565d5527bcaa1c8b33b9de2e1e0f2f6fd
Change-Id: Idf506292d38c8ee1521bc0b5cf758914d5c20ca0
2017-08-18 04:26:57 +00:00
Sagi Shnaidman 8a78e84f17 Use undercloud docker proxy
Use NODEPOOL_DOCKER_REGISTRY_PROXY in containers jobs

Change-Id: If625faffc1c5a51929816d8565630a1ddddc5df2
2017-08-15 13:30:37 +00:00