Commit Graph

28 Commits

Author SHA1 Message Date
Ghanshyam Mann c49552281f Retire Tripleo: remove repo content
TripleO project is retiring
- https://review.opendev.org/c/openstack/governance/+/905145

this commit remove the content of this project repo

Change-Id: I235b08d63bab01a94a41b29b40724f05c88a534f
2024-02-24 11:44:21 -08:00
Zuul c66fd16be0 Merge "Include custom ci firewall rule in deployment" 2022-09-22 15:46:22 +00:00
Sandeep Yadav 0c7ca14e76 Include custom ci firewall rule in deployment
We noticed some packet drops on Overcloud node after switching to
nftables [1] in periodic-tripleo-ci-centos-9-scenario007-
multinode-oooq-container-master job.

In order to properly get VXLAN support, We create a yaml
ci_custom_firewall_rules.yaml during overcloud-deploy rule which
add some custom ci firewall rules to the Overcloud node. This is
especially true for a lab environment, or on the upstream CI
infrastructure.

This patch include yaml: ci_custom_firewall_rules.yaml in the
deployment.

Please refer to the documentation [2] to know more about the
requirement of these additional rules.

[1] https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
[2] https://opendev.org/openstack/tripleo-docs/src/branch/master/deploy-guide/source/features/security_hardening.rst#vxlan-and-nftables

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096
Change-Id: I9c856506331a7c511e1457d72b9922de78c2f403
2022-09-15 13:09:25 +05:30
Soniya Vyas 587591f531 Run featureset039 job with tempest-allow
This patch replace the tempest_test_whitelist
with tempest_allowed_group that is to be used
by tempest-allow.

Depends-On:- https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/855495
Testing here:- https://review.rdoproject.org/r/c/testproject/+/40083

Change-Id: Id373840f1eaf637b2bd32a1b472ed44d8379f0cf
2022-09-01 10:44:52 +00:00
Douglas Viroel f818e848aa Add 'tempest_tempestconf_profile_overrides' to tempest profile
This patch updates some featureset configuration files that are
defining 'tempest_tempestconf_profile' with overrides set to
'tempest_tempest_conf_overrides'. Since [1], a new var was added
to hold tempestconf profile overrides. This patch combines
both 'tempest_tempestconf_profile_overrides' and
'tempest_tempest_conf_overrides' to define tempestconf profile
overrides, since lots of jobs definitions still use
'tempest_tempest_conf_overrides'.
This fix is needed since these configuration files are currently
defining 'tempest_tempestconf_profile', see [2].

[1] 1003438006
[2] 1003438006/defaults/main.yml (L319-L325)

Change-Id: I86289df6d6480405b7b6e0ee7028978f6c9a4ab7
Signed-off-by: Douglas Viroel <dviroel@redhat.com>
2022-03-09 10:21:56 -03:00
Ronelle Landy cf48a79c8f Change supp user per ansible_distribution_major_version
When running on CentOS Stream 9 distribution, the supplemental
user should be 'cloud-user', instead of 'centos'

Closes-Bug: #1956563
Change-Id: Id90c0bcc2f15a742b83b834acc75231ca4d44a83
2022-01-17 09:16:00 -03:00
Zuul 033081af23 Merge "Enable ephemeral heat for fs001, fs002 and fs039" 2021-07-07 10:45:47 +00:00
ramishra df346cec9b Enable ephemeral heat for fs001, fs002 and fs039
These featuresets still deploying installed heat.
Also drops installed heat from fs027.

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/799414
Change-Id: Ifa8b980a72c0746fb079f7f3bfefb550268ed853
2021-07-04 18:05:47 +05:30
ramishra 132641cec2 Don't explicitly disable telemetry
Legacy telemetry has been disabled by default since
ussuri.

Change-Id: I08c8897c46aaa722b4b939d2677fe8fa2027c8f6
2021-06-15 07:17:21 +00:00
Sandeep Yadav cc22e6ddea Switch off nova/glance/swift in featureset039
We have switched off nova/glance in fs001/fs020/fs035 for ussuri+
in [1] and [2]. We need same for fs039. Enabling metalsmith based
deployment for ussuri+ with "baremetal_provision"

* Removing swift from fs039 file and let workflow take the default
values from [3]. "undercloud_enable_swift" default value is false
for wallaby branch and onwards[2]. Swift was added here to support
nova/ironic for master branch in [4].

* Adding --disable-validations in extra-args for ussuri/victoria.
In master/wallaby we don't need to disable validations anymore with
pre-deployed Overcloud nodes, details in [5]. Fs020 also have same
configurations.

[1] 3ab630033a
[2] https://review.opendev.org/c/openstack/tripleo-quickstart/+/773648
[3] https://opendev.org/openstack/tripleo-quickstart-extras/src/branch/master/roles/extras-common/defaults/main.yml
[4] 5dcdeb2020
[5] https://review.opendev.org/c/openstack/tripleo-docs/+/771970/4/deploy-guide/source/features/deployed_server.rst

Change-Id: I99ea1a5da7c5b701f795973dc33c66464a54e639
2021-04-21 17:52:38 +05:30
Marios Andreou 7b8d8ecfca Remove all rocky related config/conditionals/tests as tripleo rocky is EOL
Rocky is now EOL since [1][2] so this removes all the rocky related tests
or conditionals.
Related reviews in topic branch tripleo-ci-reduce-rocky [3].

[1] https://review.opendev.org/c/openstack/releases/+/774244
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020912.html
[3] https://review.opendev.org/q/topic:tripleo-ci-reduce-rocky

Change-Id: Ibb602d1a2e3bd62463ad8861e66c23248f037923
2021-04-01 16:12:59 +03:00
Chandan Kumar (raukadah) ad0f465cd6 Remove undercloud_enable_tempest var
Since we are working in process of removing tempest container
from wallaby release and all the tempest run is switched to
os_tempest for all supported release in tripleo-ci.

This change is not going to affect any periodic jobs also.

It also removes run_tempest and tempest_format var.

Related-Bug: #1916875

Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
Change-Id: I3d046047833044fd2d75ba399f784be5d992fbef
2021-03-11 15:29:53 +05:30
ramishra 5dcdeb2020 Enable swift for fs039
Nova/Ironic require swift for certain use cases. Let's enable
it for fs039 where we use nova for node provisioning.

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/773559
Change-Id: Ia30d28237c744644e5b8a435458a65fdbcfea4ae
2021-02-02 14:28:50 +05:30
Arx Cruz 9799408049 Remove tempest_private_net_provider_type from featuresets
This configuration should not be used in featureset, because it would
never be overwriten, it should be in the playbooks/tempest.yml in
tripleo-quickstart-extras

Change-Id: I06480c30e0c671c3f97361c8bdc06c5fc28dfb94
2020-10-19 10:54:01 +02:00
Rabi Mishra cb3ea1affc Drop OS::TripleO::Undercloud::Net::SoftwareConfig mappings
Removes the redundant undercloud mapping from featuresets.
We've the default mapping in environments/undercloud.yaml.
Also this CI specific environment is redundant.

Change-Id: I72e41fb8cdebff12aab9704c2a9c4e368410c1ad
2020-10-07 08:35:24 +05:30
Ade Lee cf9d8268c2 making sure undercloud_enable_novajoin set correctly
Closes-Bug: #1897414
Change-Id: I69a2614f0b686463fbbc71f13457dd65fe7a0015
2020-09-26 16:28:56 -06:00
Rabi Mishra cc72c4c882 Enable undercloud nova for featureset039
This featureset does not seem to work without nova
on the undercloud. I don't know the details of how
it would work without nova. It can be migrated separately
later.

Depends-On: https://review.opendev.org/#/c/749679/
Change-Id: Iad3f867009b242b81042d525a7ab9462658cccc7
2020-09-04 21:09:35 +05:30
Grzegorz Grasza 5b9868e9f3 Modify fs039 to run without novajoin on Ussuri+
This tests TLS-Everywhere without novajoin,
which is the new way TLS-Everywhere is supported on master.

Depends-On: https://review.opendev.org/721615
Depends-On: https://review.opendev.org/740102
Change-Id: I7452ae02c763d9540642485f6cdad45ee20cb2f5
2020-07-21 10:10:36 +02:00
Marios Andreou a20c2b1185 Move featureset039 to os-tempest conditionally adds required vars
As in the other featuresets we need to add some os-tempest related
values. We want to move to os-tempest and away from legacy validate
tempest, especially for centos8 fs39. Tracked by tripleo-ci squad
in [1].

[1] https://hackmd.io/7MBqFHurTA2e5H8kYRwgag#Reviews-still-in-play-to-addmove-jobs

Change-Id: Ib0ba26b0d73613d859a474f3953c18feeb9952d2
2020-04-06 14:22:16 +00:00
John Dennis 98d7a4a9cd Add Keycloak setup to featureset039
featureset039 is primarily used when TLS everywhere, novajoin and IPA
are needed. We want to round out this functionality with support for
federated authentication by installing the Keycloak IdP on the
supplemental node. The keycloak-setup role is being added in
tripleo-quickstart-extras as a consequence those patches appear
elsewhere in a different repository.

This patch adds the necessary configuration parameters to
featureset039 to invoke the keycloak-setup role in
tripleo-quickstart-extras and adds a dependency in
quickstart-extras-requirements.txt on an Ansible role
(nkinder.keycloak) used to install Keycloak.

Partial-Bug: 1836415

Change-Id: I59eaa2dfe7b5a3a16be18ec5d3cc03f1e68a2661
Signed-off-by: John Dennis <jdennis@redhat.com>
2019-10-15 12:53:42 -03:00
Ronelle Landy b465c650d8 Move *_container_cli settings to extras-common
Remove  *_container_cli settings out of
feature set file to single-source
the setting in tqe role extras-common.

Change-Id: I833348a18597c230fea4a01ab203569ffe5ef7a0
Depends-On: https://review.opendev.org/#/c/678881/
2019-08-28 11:53:59 +05:30
Sagi Shnaidman 811843b1a0 Use private IP for supplemental node
When connecting to supplemental node use private IP
as it's only available in this step.

Change-Id: I1e57b9fe823263caa15522e84bf9482b5c47491b
2019-02-18 20:49:12 +00:00
Sagi Shnaidman a9ab51f8d5 Add supplemental node to inventory
Change-Id: Id431120ab8d84fe7c05b008c9b3b1be6e4dd4af4
2019-02-12 15:01:35 +00:00
Sagi Shnaidman 114249e026 Update FreeIPA featureset file
Change-Id: Ifcd2f6644e809070fddec52a21ba0f28b4660705
2019-02-07 12:01:11 +00:00
Sorin Sbarnea 4a41ca7bf0 Lint fixes for ci-scripts and config folders
This normalizes the formatting of files from ci-scripts and config
folders in order to allow further hardening of linting.

Fixing linting was too big to be made in a single commit as it would
involve too many files to review and could merge conflicts with
existing changes. Thus doing it in few chunks would makes it possible.

Original full change is at https://review.openstack.org/#/c/627545/ and
will be the one merging the last.

Change-Id: Ifb215c0e2ea0ef7115897721f75ba8489bd59b97
2018-12-28 10:01:11 +00:00
Harald Jensås 4453efa2f8 Use a shorter default domain name
Some of the CI jobs use very long <hostname>'s,
resulting in the FQDN to be more than 63 characters
long which is the max for linux, see GETHOSTNAME(2).

Change the default to use: <hostname>.ooo.test instead.

Related-Bug: #1803703
Change-Id: Ia8f758a094d36c3f3bec383f1d3a8e1a5d4bd052
2018-11-19 17:01:07 +01:00
Sagi Shnaidman 43ba8ce92d Don't use NTP server in extra args
We have ntp_args which include ntp_server variable. Don't set it
in extra agrs so we can overwrite it.

Change-Id: Ib6a30b4581f095b89f0a128232c165c53a716a48
2018-07-15 21:23:46 +03:00
Harry Rybacki 98335418cf Add Featureset 39 -- HA deploy w/ IPA
Adding proposed featureset 39. This is a port of the old ipa.yml
config. It was left in place so as to not inadvertently induce
any regressions in existing workflows.

Change-Id: Ib8f2fe291ed984416772e8c655d3c3e2f5c83d05
2018-02-13 16:37:23 -05:00