Commit Graph

510 Commits

Author SHA1 Message Date
OpenDev Sysadmins 4c6d645909 OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:42:46 +00:00
Andreas Jaeger d139d81213 Retire astara repo
Retire repository, following
https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project

Change-Id: I0a8240c961955447d65aee7af24e03cb81da12d3
2018-10-14 12:52:23 +02:00
OpenStack Proposal Bot a6cd8a5594 Updated from global requirements
Change-Id: Idebe82a50af671eecce0b9b51525e62c075f7760
2016-07-01 15:51:44 +00:00
Ryan Petrello 8868ad47a2 Skip IP addresses that fail to delete (instead of raising a 500).
Change-Id: Ib30a0736277c90171e92617819ea34109481d8ad
2016-06-22 08:18:57 -04:00
OpenStack Proposal Bot 4f09fd0f2f Updated from global requirements
Change-Id: Ida16b60942d7a2c944f7dff5811315765ffcb116
2016-06-14 05:18:42 +00:00
OpenStack Proposal Bot c21a64ea7b Updated from global requirements
Change-Id: I24c03abfdef70504630af1fe0de3191a7847fcdc
2016-06-01 18:59:08 +00:00
Jenkins de521c6ea5 Merge "Updated from global requirements" 2016-05-27 18:10:05 +00:00
Jenkins 01e5f8a7af Merge "change authby to secret for better interop" 2016-05-26 20:34:13 +00:00
OpenStack Proposal Bot eea4ee87bd Updated from global requirements
Change-Id: I731988a3c7e9e9c1a4557b19c711d03c67cfae9f
2016-05-26 16:56:09 +00:00
Jenkins 5ff33aa3b6 Merge "Updated from global requirements" 2016-05-23 22:59:57 +00:00
Adam Gandelman 010808ffdb DIB: add libffi-dev to ansible element's build deps
Newer versions of paramiko (pulled in via ansible install)
now require libffi-dev to build.

Closes-bug: #1583321
Change-Id: If3794ededacfcf53857328a19627cf0331878822
2016-05-18 15:51:58 -07:00
OpenStack Proposal Bot f313402bb9 Updated from global requirements
Change-Id: I02b6d45bf43e37bec21154cbff4aea17b05fd916
2016-05-17 14:02:18 +00:00
Mark McClain d44aa3fe23 change authby to secret for better interop
Change-Id: I9b0fb3e0b0877175fa8ef4ec766a0a5ef75ce6cc
2016-04-12 22:07:27 -04:00
OpenStack Proposal Bot 1b37c48f2a Updated from global requirements
Change-Id: I4929f32eec18cbabe2695f66a6bf6eb7d3cb63dd
2016-04-07 15:19:06 +00:00
Mark McClain 4dde1f78e7 Ensure VPN settings are more prescriptive.
Previously VPN service relied on default behaviours and an open
firewall.  This specifies more values and ensures the firewall is
properly set.  Additionally, test coverage is expanded.

Closes-Bug:1564213
Change-Id: Iefaccddaad54c412195802f97811722bb593b2ca
2016-03-30 23:33:16 -04:00
Jenkins bf0fb3b0e2 Merge "Allow gunicorn workers 5 min. to process requests" 2016-03-29 20:15:15 +00:00
Adam Gandelman 179d723747 Allow gunicorn workers 5 min. to process requests
Config updates can be time consuming, especially in testing environments
that utilize virt-on-virt.  Rather than timing out workers that are taking
a long time to process an update, bump the timeout to 5 minutes and allow
the requesting orchestrator to time out its request at shorter deadlines
instead.

Change-Id: Ibee73d7a43864da645b5d7198a5df2f2bf936ea9
2016-03-29 11:03:29 -07:00
Adam Gandelman effbf9e950 Fix permissions on /etc/nginx/sites-enabled
With the switch to rootwrap, the API service now runs as the gunicorn
user but /etc/nginx/sites-enabled is still owned by root.  This updates
the DIB element to ensure its writable by gunicorn for config rendering.

Also makes a trivial update to releasenotes to remove the UNRELEASED
flag from mitaka.

Change-Id: Ieac128e47a44dd48acd00f68cd8e3a9ca15441ec
Closes-bug: #1558577
2016-03-28 12:01:28 -07:00
OpenStack Proposal Bot d1e318afdc Updated from global requirements
Change-Id: I352b08e461f18c08f9dacd6240e672152b7a9791
2016-03-20 15:41:39 +00:00
Mark McClain 920954e31d Add support for StrongSwan VPN to router
This change adds Strongswan to support VPNaaS in appliance.

Change-Id: I1adb74c159eaf4f62950d17ed015856e90a91641
Partial-Blueprint: neutron-vpnaas
2016-03-18 14:29:40 -07:00
Adam Gandelman 8633d1a5bc Adds ConntrackdManager
Used for setting up conntrackd between two clustered peers.

Partially-implements: blueprint appliance-ha

Change-Id: Ice3f4dbed02b877bc64ae73879a74acc26cca47e
2016-03-18 11:05:03 -07:00
Adam Gandelman 02383adf64 Adds keepalived based VRRPIPManager
This adds a new IP manager driver for configuring addresses
and routes via keepalived instead of directly.  It used when
the logical resource is configured to be highly-available,
according to configuration pushed by the orchestrator.

We rely on a 'ha_resource' flag attached to the main config
dict to enable it, and use specific HA config about peers and
cluster priority contained in the 'ha_config' section of the
main config.

The resulting keepalived cluster contains a VRRP instance for
each interface, with the exception of the management interface.

Partially-implements: blueprint appliance-ha

Change-Id: I5ababa41d65642b00f6b808197af9b2a59ebc67a
2016-03-17 23:16:11 +00:00
Jenkins f02b1f48ce Merge "Add missing rootwrap filter for astara-gratuitous-arp" 2016-03-17 18:46:51 +00:00
Jenkins 44d1965789 Merge "Make defaults can be override by local settings" 2016-03-17 01:39:36 +00:00
Jenkins 42f366c1a4 Merge "Fix pep8 errors for unit test files" 2016-03-14 18:59:58 +00:00
Adam Gandelman 5635065c2e Add missing rootwrap filter for astara-gratuitous-arp
This was missing in the original rootwrap addition.

Closes-bug: #1555816
Change-Id: I8569ec89cd3a9763b497fa82206463906b7aebc3
2016-03-10 13:21:54 -08:00
Mark McClain 5994b8b148 do not apply SNAT when packet is generated by appliance
SNAT was incorrectly applied to traffic originating from the appliance.
This change marks the traffic so that the NAT rule is skipped and adds
clarifying comments to SNAT code.

Change-Id: Ifa6ea089c5bff6c57f4ba22095ef357eeb1ff786
Closes-Bug: 1550541
2016-03-07 10:20:37 -05:00
Jenkins f27ff0a643 Merge "Astara appliance oslo.rootwrap" 2016-03-04 23:21:52 +00:00
Jenkins 10ffb58882 Merge "Remove iptables assumption that all routers have external networks" 2016-03-04 22:21:51 +00:00
OpenStack Proposal Bot 93586ce15b Updated from global requirements
Change-Id: I5a495288fa185b09069f50232ff551687f16bb88
2016-03-04 14:15:01 +00:00
Adam Gandelman 33ee88897c Remove iptables assumption that all routers have external networks
In order to remove the auto-addition of external networks, we need
to remove the assumption in the appliance that all routers have one.
This avoids adding external network related iptables rules when the
router config does not have an external port.

Change-Id: Ifaf53a26f6d89da199101f386f4674c9f39f8326
2016-03-02 12:44:51 -08:00
Yang Hongyang aa07af17e6 Fix pep8 errors for unit test files
Fix pep8 errors for unit test files

Change-Id: Ib9704be17ce82b1f6414549365b087ee34a39499
2016-03-01 03:20:12 +08:00
OpenStack Proposal Bot 0dc45a3fd8 Updated from global requirements
Change-Id: I1d5249462777e70094abe4020f704b17e951e875
2016-02-20 09:31:06 +00:00
Ryan Petrello dae911ea41 Work around a potential bug in dnsmasq's config parser.
It seems that dnsmasq sometimes mistakes IPV6 addresses in dhcp-host config
options for hardware addresses;  to work around this, only ever specify *one*
IPv4 and IPv6 address for the dhcp-host config value.

Closes-bug: 1545054
Change-Id: I8f508bf12a09efb46027737f3d1d285aef826f67
2016-02-19 10:02:44 -05:00
Xiayu abd07978e0 Astara appliance oslo.rootwrap
Use oslo.rootwrap to replace the default root_helper sudo.

Change-Id: I5875cd647a4cc4f60f3058a98ea8a829cf056c43
Implements: blueprint astara-rootwrap
2016-02-18 08:54:45 +00:00
OpenStack Proposal Bot 8843fc2f70 Updated from global requirements
Change-Id: I234faafd59ee2394a59a0630ccd28d2859d188cf
2016-02-17 19:17:51 +00:00
Jenkins 2feacf442a Merge "trivial: remove unused Makefile" 2016-02-17 18:50:56 +00:00
Jenkins c416443440 Merge "ignore pbr outputs" 2016-02-17 18:48:06 +00:00
OpenStack Proposal Bot a8a67c3f9d Updated from global requirements
Change-Id: Ib5621b49f6e1d0403647653f89d57936f2c4c7a9
2016-02-10 21:51:39 +00:00
Yang Hongyang aab3394412 ignore pbr outputs
ignore pbr outputs AUTHORS, ChangeLog

Change-Id: I46ce45e8f6a613b0f625084b65e0f95e7fb5632e
2016-02-09 14:41:34 +08:00
Yang Hongyang eda5834715 trivial: remove unused Makefile
Makefile is not used by anything infra related anymore, drop it.

Change-Id: I2c3e03cbf9a973a20262b22196e249d45ae6dbd0
2016-02-09 07:25:56 +08:00
Yang Hongyang 3a214fbdee Make defaults can be override by local settings
Make defaults can be override by local settings, it is useful because
users might use non-standard SSH ports and so on.

Change-Id: Ic30e611f73ce844848efb452b53f86242be9219d
2016-02-07 00:14:23 +08:00
Jenkins 78f1a36693 Merge "Make the management interface MTU configurable" 2016-02-02 16:49:48 +00:00
Mark McClain 6eccab929b Make the management interface MTU configurable
The default MTU for the management interface is sometimes bigger than
allowable by the physical infrastructure.  Make the MTU configurable in
cloud-init and via config json.  For cloud-init default it to the minimum size
for IPv6 if the value is not specified in boot command.

Change-Id: Ib4d4381f6977aabbeefd2f520bb5fc26ea54ffcd
Closes-Bug: #1539786
2016-02-01 12:01:14 -05:00
Mark McClain 04c29debb5 Add vim package back to image
It is useful to have an editor on the appliance.

Change-Id: Ic400e5cbdb1d39b67d2b808371dc41e810eb9c7b
2016-01-29 15:34:35 -05:00
Jenkins fd5a2b2b07 Merge "Remove unused imported module" 2016-01-27 19:54:21 +00:00
Jenkins 3ca6cdc969 Merge "Remove unused variables 'LOG'" 2016-01-27 19:54:14 +00:00
Yang Li 972fc12594 Remove unused variables 'LOG'
Perhaps it will be used for debbuging, but now
it's unused.

Change-Id: I1e9c612a13e5673a762b673117d64169fbf4f2a8
2016-01-26 16:07:24 +08:00
Yang Li 5a0603a653 Remove unused imported module
Change-Id: I8f30ba42279c4f3ec457caf7848def9629a9d14c
2016-01-26 15:51:40 +08:00
Jenkins 7cc0742a1b Merge "Fix reduplicative function definition" 2016-01-26 00:12:58 +00:00