Commit Graph

36 Commits

Author SHA1 Message Date
Ghanshyam Mann c49552281f Retire Tripleo: remove repo content
TripleO project is retiring
- https://review.opendev.org/c/openstack/governance/+/905145

this commit remove the content of this project repo

Change-Id: I235b08d63bab01a94a41b29b40724f05c88a534f
2024-02-24 11:44:21 -08:00
Sandeep Yadav 0c7ca14e76 Include custom ci firewall rule in deployment
We noticed some packet drops on Overcloud node after switching to
nftables [1] in periodic-tripleo-ci-centos-9-scenario007-
multinode-oooq-container-master job.

In order to properly get VXLAN support, We create a yaml
ci_custom_firewall_rules.yaml during overcloud-deploy rule which
add some custom ci firewall rules to the Overcloud node. This is
especially true for a lab environment, or on the upstream CI
infrastructure.

This patch include yaml: ci_custom_firewall_rules.yaml in the
deployment.

Please refer to the documentation [2] to know more about the
requirement of these additional rules.

[1] https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
[2] https://opendev.org/openstack/tripleo-docs/src/branch/master/deploy-guide/source/features/security_hardening.rst#vxlan-and-nftables

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096
Change-Id: I9c856506331a7c511e1457d72b9922de78c2f403
2022-09-15 13:09:25 +05:30
Harald Jensås 19e6750531 Enable '--baremetal-deployment' fs010/fs030/fs037
Related change: https://review.opendev.org/806562
Would need '--baremetal-deployment' to make overcloud
deploy provision the ControlPlane VIP.

Change-Id: Ife4b15a784c70fe031af98f3aa135737232d56a6
2021-10-28 10:27:26 +02:00
Harald Jensås dbb21969d2 Disable protected resourced types
This review adds and extra-vars to
disable protected resourced types in
releases wallaby and after for
fs010, fs037, fs035 and fs020.

There is a need to disable the resource
registry override protection to merge:
https://review.opendev.org/798642

Closes-Bug: #1943579
Change-Id: I618c0a0d99c934fb65a6af30bc76096d52d4679d
2021-09-14 18:07:13 -04:00
James Slagle 60e7988a91 Enable ephemeral_heat for featureset037
featureset037 is
tripleo-ci-centos-8-scenario000-multinode-oooq-container-updates, as
well as the -(train|ussuri/victoria) variants. However ephemeral_heat
enablement is restricted to just the wallaby+ branches in the variable
definition.

This needs to be enabled explicitly for this job before we can proceed
with https://review.opendev.org/c/789930 to use ephemeral heat by
default.

Signed-off-by: James Slagle <jslagle@redhat.com>
Depends-On: I3d8a1282c388a8201ec1ce5c7d64796c0ce6026a
Change-Id: I81d5a8e86b1b2dd03d4ea29dee10b90efe460094
2021-05-20 11:35:27 -04:00
matbu b43e41f401 Remove legacy tripleo-validations configurations
This patch removes:
* legacy tripleo-validations config boolean, since now the role
  is in tripleo-validations repos and is enabling by another
  configuration in the zuul config directly
* documentation, because its now outdated and a new one should
  be moved under tripleo-validations repos

Change-Id: Ibc5e1aec08643d53760953ebb1c026e99689a2b6
2021-04-19 06:48:57 +00:00
Marios Andreou 7b8d8ecfca Remove all rocky related config/conditionals/tests as tripleo rocky is EOL
Rocky is now EOL since [1][2] so this removes all the rocky related tests
or conditionals.
Related reviews in topic branch tripleo-ci-reduce-rocky [3].

[1] https://review.opendev.org/c/openstack/releases/+/774244
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020912.html
[3] https://review.opendev.org/q/topic:tripleo-ci-reduce-rocky

Change-Id: Ibb602d1a2e3bd62463ad8861e66c23248f037923
2021-04-01 16:12:59 +03:00
ramishra 72ad6faa62 Remove update-plan-only from converge
This was added to reduce the CI wall time. As we're removing
overcloud plan, this won't work. We can skip the converge
step if required later if we want to reduce the time jobs
take.

Change-Id: Ifd0371274fcc42286217a5c47e3998aafa98ddcc
2021-01-20 08:58:34 +05:30
Arx Cruz c301c85f12 Replace run_tempest with use_os_tempest
The variable run_tempest was used by validate-tempest. Since now we use
only os_tempest, this variable is no longer required, however, since
use_os_tempest is default to true, we must change it where the
run_tempest is false, like in the upgrade/update jobs, since we don't
run tempest on those.

Change-Id: Idb8166992976ce6303f95f72011aa65fe536931e
2021-01-13 12:19:31 +01:00
Ronelle Landy ae871a35c8 Update fs037 to containers-default-parameters after stein
Ensure that the container_registry_file is referenced
correctly for upgrades involves releases stein
and before.

This is the third revision of patches to address
the related bug.

Change-Id: Ib036d9758f64ab78c6cf0f91c5fd788e0e167eda
Related-Bug: #1903581
2020-11-17 07:03:38 +00:00
Arx Cruz e683b3282f Disable os_tempest
This featureset runs with scenario000 who have only keystone installed,
and so, it's not possible to run tempest. Since we are moving
validate-tempest (which is already disabled) to os_tempest, we must
disable it here as well.

Change-Id: I223bcf16fd3184d33306fa84c09f55b0927f589c
2020-11-03 20:40:52 +01:00
Rabi Mishra cb3ea1affc Drop OS::TripleO::Undercloud::Net::SoftwareConfig mappings
Removes the redundant undercloud mapping from featuresets.
We've the default mapping in environments/undercloud.yaml.
Also this CI specific environment is redundant.

Change-Id: I72e41fb8cdebff12aab9704c2a9c4e368410c1ad
2020-10-07 08:35:24 +05:30
Rafael Folco 9f022fd4ab Fix containers config file on fs037
prepare-parameter file is used for stein onwards.

Change-Id: I33b790f3b4e82dd532019a75dea92189f260946b
Closes-Bug: #1895314
2020-09-17 09:45:42 -03:00
Alex Schultz e71869391b Disable tripleo_upgrade_debug
This option adds --debug to the cli command which generates an excessive
amount of logs. We shouldn't have this enabled by default.

Change-Id: I655aa888ca10cc622f80f3f267cdaddf844bdf81
2020-09-09 13:11:28 -06:00
Jose Luis Franco Arza 28c92c2e6d Leave container_registry_file to identify containers file in pre-rocky jobs.
From rocky onwards, the file used to identify the containers parameters
passed to be containers-prepare-parameter.yaml. This file had a different
format than in previous releases. At that point, a new variable was
introuduced in tripleo-upgrade to identify this containers parameter file:
uc_containers_prepare_file. To allow a transition from pre-rocky jobs to
post-rocky, the container_registry_file parameter was left to know the
name of the old containers prepare file. This file was removed from the
appended overcloud_deploy.sh files to avoid issues during the upgrade/
update prepare step [0].

Updates/Upgrades jobs were still using the container_registry_file as
the parameter used to set up the containers, pointing at the post-rocky
file containers-prepare-parameter.yaml. The code in [0] then removed it
from the appended -e environmetn files, running the overcloud update
prepare without the right containers-prepare-parameter.yaml.

[0] - https://review.opendev.org/#/c/717698
Change-Id: I6816db7382e7db6d0ae644c9487b2c5ee595a441
Closes-Bug: #1887176
2020-09-03 15:13:00 +00:00
Jose Luis Franco Arza 2df91fd29d Pass tripleo-admin user for updates/upgrades in Queens.
fs037 and fs051, use config-download when running Queens jobs. The
config-download deployment uses tripleo-admin user for the ansible
execution, however we had hardcoded the zuul user (as Rocky, Stein
and master do use config-download by default). As a consequence, to
have the Queens jobs which use these featuresets working, we need
to specify the use of the overcloud-ssh-user to tripleo-admin.

Change-Id: I475c7c805fdcaa90b9b0183135d81f10faba3b8d
Closes-Bug: #1840763
2019-08-27 11:25:25 +02:00
Jose Luis Franco Arza 22faab5b30 Set overcloud_ssh_user to zuul in upgrades jobs.
Currently, we are using zuul user as overcloud_ssh_user during overcloud
deployment. While for upgrades, we are still passing tripleo-admin. This
is causing the upgrade prepare command to fail.

Change-Id: If4bd02dad8d69ba4c818ba8d800423bcc8ecfea4
Closes-Bug: #1813564
2019-01-28 12:58:06 +01:00
Sorin Sbarnea 4a41ca7bf0 Lint fixes for ci-scripts and config folders
This normalizes the formatting of files from ci-scripts and config
folders in order to allow further hardening of linting.

Fixing linting was too big to be made in a single commit as it would
involve too many files to review and could merge conflicts with
existing changes. Thus doing it in few chunks would makes it possible.

Original full change is at https://review.openstack.org/#/c/627545/ and
will be the one merging the last.

Change-Id: Ifb215c0e2ea0ef7115897721f75ba8489bd59b97
2018-12-28 10:01:11 +00:00
Jose Luis Franco Arza 3fd28a0d78 Use containers-prepare-parameters in upgrades/updates jobs.
The output from the containers image prepare
step is not the containers-default-parameters.yaml
file with the list of containers, but another file
named containers-prepare-parameters.yaml which
contains the ContainerImagePrepare parameter. This
parameter is used during deployment-steps to get
the list of containers.

Co-Authored-By: Quique Llorente <ellorent@redhat.com>

Closes-Bug: #1789881
Depends-On: If0c7786059f1d0d91d2279f45c67525908633378
Depends-On: I96109c2452d7568da4a9374661a8ba8b9ba71458
Change-Id: I9bd21b67a9bf9254458351e8ba784ed66f9949f4
2018-09-07 03:08:56 +00:00
Bogdan Dobrelya 2c11596a96 Use undercloud templates path for UC deployments
Depends-On: I4e0dcf24b93b8e4afb8359cb5108c4b7b5ba3d55

Change-Id: I63437f67ffbee7a43dcfaf28ffd08594f9c977fa
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2018-08-13 16:03:03 +02:00
Emilien Macchi 596d117734 Remove --use-heat usage, as it's deprecated
For all the jobs using --use-heat, remove its usage as it's deprecated
in Rocky.

Change-Id: Icaaab7c0f09b3aadae6a5acb8f0d798f9c73148e
2018-07-20 13:42:36 +00:00
Jose Luis Franco Arza 7445fc3cb7 Clean up upgrades/updates featureset.
Once [0] got merged, there is no chance that the
overcloud-upgrade role will run. Upgrade job have
all been moved to use the new tripleo-upgrade, so
we can dispense all overcloud-upgrade related
variables from the featuresets.

[0] - Iaf30244187d27909ab803175843056e0827d0b24

Change-Id: Ibe715cc4f604ba554db8dd4ab2d95391e4b1f311
2018-07-02 12:27:06 +02:00
yatin fb01990712 Switch to containerized undercloud net config
fs020 is switched to containerized undercloud in [1],
it's failing since then. Switch to undercloud net config
to fix this. fs002 is fixed in [2].

Also change it in other containerized undercloud featuresets.

[1] https://review.openstack.org/#/c/572215/
[2] https://review.openstack.org/#/c/576987/

Change-Id: I992a49ef025065f4dc02c650105832e85d9eb8b8
Related-Bug: #1749707
2018-06-29 09:52:56 +05:30
Emilien Macchi 46e8af3f72 Switch more promotion jobs to containerized undercloud
Switch fs002, 020 and 037 to containerized undercloud.

Depends-On: Id6822ee8297943145865fc468d9c7a7c8fbb64c0
Change-Id: I6355b76c31d8ad8cdc36ca34ce93de639ddb90e9
2018-06-16 15:12:52 +00:00
Alex Schultz cf9a0be291 Add config-download back into queens CI
We incorrectly dropped the config download items in
Ic5c5df350a7eb5291d45cf8e229af575fe9bed57 for featuresets that had it
enabled in queens. Since we won't be backporting the default changes in
tripleoclient back to queens we need to add a special case for these
featuresets in queens.

Change-Id: I9aa449a3198568c25d4dbc838669f493b0e3c103
Closes-Bug: #1771549
2018-05-21 15:37:00 -06:00
Zuul 606445bbb1 Merge "Remove explicit --config-download" 2018-05-14 23:27:05 +00:00
Zuul 3a395d5aa1 Merge "Don't run full update/upgrade converge in CI to keep sane wall time" 2018-05-09 23:09:15 +00:00
James Slagle 99a6d31a45 Remove explicit --config-download
Now that config-download is the default across tripleoclient and
tripleo-heat-templates, we can update all the CI jobs to remove the
explicit --config-download and -e
environments/config-download-environment.yaml.

Note that --deployed-server didn't actually trigger any needed behaviors
with --config-download, so where it was used, it has now been removed as
well.

Change-Id: Ic5c5df350a7eb5291d45cf8e229af575fe9bed57
2018-05-09 09:24:34 -04:00
Zuul 22ef78f425 Merge "Remove use_tripleo_upgrade and add var into fs037." 2018-05-05 04:49:11 +00:00
Jiri Stransky 6e30581a72 Don't run full update/upgrade converge in CI to keep sane wall time
We discovered we need to put back stack updates into the converge
operations. This increases the run time of the upgrade procedure
considerably, and e.g. our voting CI job for updates might go over the
time limit. We'll need to start passing --update-plan-only to the
converge operation to keep CI on previous run times.

Change-Id: Idc5dbebc116aba2420d275aab3981186511f298e
Related-Bug: #1768586
2018-05-04 12:08:26 +02:00
Jose Luis Franco Arza 012d69bcdc Remove use_tripleo_upgrade and add var into fs037.
As part of the upgrades/updates playbook refactor
it has been removed the existence of a 'legacy'
and 'new' upgrades playbook, which was being
controlled by the 'use_tripleo_upgrade' variable
Iaf30244187d27909ab803175843056e0827d0b24.

Also, it's been moved the parameter container_registry_file
from the overcloud update's playbook into its
corresponding fs.

Related-Bug: #1749740

Depends-On: Iaf30244187d27909ab803175843056e0827d0b24
Depends-On: Iec42b574d697f3acfd668636e3dd11217a3ea25e
Change-Id: I27f13b164bb78619f8830b875ec9f04445ce1e26
2018-04-25 15:55:17 +02:00
Chandan Kumar 4a7bbb4599 Rename test_regex to test_white_regex
* https://review.openstack.org/551441 introduced test_black_regex
  in order to skip test directly from featureset files. In order
  to avoid confusion between test_regex and test_black_regex, we
  are renaming test_regex to test_white_regex.
 * It will fix all the featuresets.

Depends-On: https://review.openstack.org/560006
Change-Id: If66225c2e2f8c571cc85aebacee01431e4f64dcc
2018-04-25 08:37:57 +00:00
Jiri Stransky 190c3b6941 Make sure we keep using tripleo-admin as ssh user in CI
First we switched the user to tripleo-admin [1] which made CI on
updates job green, but broke Nova-based environments. We're now
switching the default back to heat-admin [2] which will break updates
job again, so we add support to tripleo-upgrade [3] to customize the
user name and set it here to the value for CI (deployed server
environments).

Fear not, when we switch to --config-download as our only supported
deployment method, tripleo-admin should become unconditionally present
in all environments, and we'll be able to converge to a single method
of logging into the overcloud nodes.

[1] I1ec66886d6d61ccf528e5e27872cf68c7a603727
[2] I0df57002b2305c1e2504c9f7a7d0c326d8ffcaf7
[3] Ib486a812aa9fd96bc753eda122cd05682d97b209

Co-Authored-By: Jose Luis Franco <jfrancoa@redhat.com>
Change-Id: I063d438fbeeded28134658aaefc6c8b7119aee43
Related-Bug: #1759845
Depends-On: I0df57002b2305c1e2504c9f7a7d0c326d8ffcaf7
2018-04-09 12:30:37 +02:00
Jose Luis Franco Arza 8928e2a713 Add tripleo-upgrade specific parameters.
In order to run some of the needed
tripleo-upgrade tasks, we need to set
tripleo_ci variable, as the role is being
used for downstream as well as upstream
testing and this is the flag to run specific
TripleO CI tasks.

Change-Id: I15530dce10d3e2bd08f69e6d71ca0ba95a27b30c
2018-03-26 17:46:42 +02:00
Jose Luis Franco Arza 0cd80724e9 Add validation-errors-nonfatal and debug into updates job.
These two flags enable running the 'overcloud update prepare'
appending --validation-errors-nonfatal flag, as well as obtaining
more debugging information when running the updates commands [0].

[0] https://github.com/openstack/tripleo-upgrade/blob/master/defaults/main.yml#L173-L181

Change-Id: I6aecee2159d0bfdacd80c44d5c3987b2f4f7095e
2018-03-22 08:25:47 +01:00
Jiri Stransky 746e802b48 Add featureset for overcloud update job
Co-Authored-By: Gabriele Cerami <gcerami@redhat.com>
Change-Id: Ic4359e3fdf052eb1207f9980c07284ce580f8629
2018-02-15 11:54:00 +01:00