Replace the hardcoded bloated template with a variant of our standard
template that only includes the values that are really needed.
This will allow deployments to override the default values and for
example deploy libvirtd with TLS authentication according to [0].
[0] https://wiki.openstack.org/wiki/OSSN/OSSN-0007
Change-Id: Ib7b305670f525bbf975ec33ed070e2d960347ef4
(cherry picked from commit ad3d1c3c65)
* removed all unused attributes
* removed vmware specific configuration option that can be set in a
wrapper cookbook (and was not maintained for quite some time)
* removed caseswitch for nova user and group since we currently only
support debian and rhel
* moved all libvirtd related config options to specific attribute file
in preparation for further refactoring
Change-Id: I42a0bbcd03a570b9d6d24ba32ed2cafacc33ec76
(cherry picked from commit ad88dc2a78)
Zuul no longer requires the project-name for in-repo configuration.
Omitting it makes forking or renaming projects easier.
Change-Id: I4ba7d342c78ba223329ed924d03efdfbd7ad2262
* The nova-placement-api package creates a "nova-placement-api.conf" in
apache2 sites-available, which currently leads to two conflicting
configurations (our "placement-api.conf" and the one from the package
"nova-placement-api.conf"). With this change the
"nova-placement-api.conf" will be replaced with our version of it.
Change-Id: I8ee7f190a6d73cace60a5fcd6b58d6b4e0288a95
We need to use the proper db_uri() result here, like we do for the
database connection options in nova.conf, otherwise things will fail in
a multinode setup.
Change-Id: I70d27eb4456c9e8b322c05649254624d4be4c5e5
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
membership cannot be tacked on later. This resource gave the users
the role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the nova and placement
users in the desired domain. Note that this change needs a sufficiently
recent openstackclient cookbook -- otherwise the domain_name attribute
is ignored (which does not matter as long as the users are to be created
in the Default domain).
Change-Id: I333da4d0d93c8a0065c6c1001b5ebed8cd6eab5c
This patch removes the role_name when using openstack_user's :create
action (it gets ignored by the target method).
Note that the spec test would still pass if only the line in
identity_registration.rb (but not the test) were changed, because the
code that actually does grant the role to the resource is executed right
after user creation and before any tests check the resource for the
existence of the role_name attribute. In other words: if the argument
were required in a call but only supplied in another call, the spec
tests would not catch it. Something to watch out for.
Change-Id: I559ffa40c37f8e073a8e7fcb5186f2270e5ccd72
1) Update doc links according to OpenStack document migration
2) Use https instead of http for docs links
Change-Id: I498646c65f25e9f205f1ba58426174a961caeb55
- Added basic cellv2 recipe, as it is required from Ocata on
- Style and lint fixes to support newer chefdk
- Rewrote metadata.rb for readability
- Removed ancient Gemfile
Change-Id: I97b453fc419bfbf01679dadf39a256b1f0f99859
The default content of api-paste.ini has changed, in particular we were
missing the http_proxy_to_wsgi filter allowing proper URL discovery.
Change-Id: Iaa968a963df5baf49116829f111ef4f46c4f8951
- nova-cert is deprecated and causes build failures if attempts to
utilize it are made.
- nova-placement-api package is prefixed with openstack- in RDO.
Change-Id: Iea2070467503f9a434e927e2580ef2b4135e98f7
With Nova Cells v2, new compute hosts must either be added explicitly to
the cells database or Nova can run an automatic discovery job from time
to time. We opt for the latter, allowing for painless addition of new
compute nodes to an existing setup.
Change-Id: I3b41887e6a3fcc62a5f25319b6da4811d7636b1a
Ubuntu has decided to change the group name from libvirtd to libvirt after
Xenial. This change is also in the libvirt packages from the Ocata UCA, so
we need to follow them here.
Change-Id: Ib87e9b5142b835c4be5e07b9d53e39b48b6f605e
The placement-api has been added by nova for the Newton cycle, it has
become mandatory for Ocata.
It is deployed as a wsgi app similar to what we have for keystone and
gnocchi already.
Change-Id: I1d1f1cc7046cb30a91894a0c884bc861d7f3dd95
The docker-setup receive has been unmaintained and untested for some
time now. The nova-docker project is also being removed from
OpenStack [1] and people are advised to look at deploying Zun as
a replacement.
This also avoids having to rewrite this receipe in order to remove the
use of the deprecated python cookbook.
[1] https://review.openstack.org/430232
Change-Id: Ia8c9db272c6a0353130fc93d446b385fd72ac250
Partial-Bug: 1558538
- Now use cookbook-openstackclient to create endpoints role service and
user
- added domain creation and access granting
- added values to work with identity_v3
- rewrote specs to work again
- added needed keystone_authtoken attributes + neutron
- updated readme
Change-Id: I84f850f32f25a318c3ed3c7337a0dfa6f641a5fe
Depends-On: I0f8955f05de9b33711c54b9a198f45018cceb8e1
Depends-On: I2d404a424bd79a6e9b282304e21591fa33a48981
Depends-On: If7b4d6e563081a0be9957353d73ef61a9688df56
The default backend for oslo_cache is dogpile.cache.null, so we need to
explicitly specify the proper backend that we want to use.
Related-Bug: 1572062
Change-Id: I8942f872c072f263959ac8790df7f7eedc9599e2
On recent test machines, curl isn't available anymore, so use wget
instead. Piping directly into bash isn't that great anyway.
Change-Id: I5d6b5480cf8dc789848c7a0f54b88646500c94d0
* added sync for api_db (required in mitaka) and needed configuration options in
nova.conf
* made libvirtd_opts configurable in preparation for xenial and systemd on
ubuntu (libvirtd needs to be started with just -l option on xenial)
Change-Id: I6c01e45f10d75db96c95c0bb37b016ada2f5933f
Depends-On: Idf6645064a1c2f337f542b29a026969c7d35efbe
api-ec2 is being replaced by the `openstack-ec2` cookbook.
Change-Id: I5b4bc088bbf9a5061ed311d164dc381a3caca2d5
Depends-On: I2dbbafaf8641ece00d4181d1ea4ba93f00eed6ed