Commit Graph

71 Commits

Author SHA1 Message Date
Andreas Jaeger a2f59fb08e Retire repository
Fuel repositories are all retired in openstack namespace, retire
remaining fuel repos in x namespace since they are unused now.

This change removes all content from the repository and adds the usual
README file to point out that the repository is retired following the
process from
https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project

See also
http://lists.openstack.org/pipermail/openstack-discuss/2019-December/011675.html

A related change is: https://review.opendev.org/699752 .

Change-Id: I475d7b45ec71eda36ef56ea9877cfd8545528444
2019-12-18 19:35:04 +01:00
OpenDev Sysadmins 710c3d052a OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:50:38 +00:00
Alex Schultz 2c04b04345 Wait for all database tasks
This change updates the cross depends for the keystone-db task to ensure
all database tasks are run prior to running keystone db creation.
Previously we were only waiting for the primary controller database
tasks but if this plugin is used in conjunction with the
detached-database plugin on a different host it could cause failures.

Change-Id: I4e1068306c7b8d568e41acdcf0692b6c75e5b04f
Closes-Bug: #1595219
2016-06-23 12:24:24 -06:00
Matthew Mosesohn fa7d4daf68 Add heat-cfn-keystone to required_for in keystone-controller
Also fix python-openstackclient package install.

Change-Id: Iad6ff64be7e96214332a3519abcbc40c3fe4f863
Closes-Bug: #1590435
2016-06-08 17:43:01 +03:00
Matthew Mosesohn 6e8977b414 Raise minimum version to 10.0
Fuel Mitaka release is not compatible with changes recently made,
so its support is now dropped.

Change-Id: I259e0bac78068c63bec19b93e6b4427e34c28c98
Related-Bug: #1583747
2016-05-23 14:38:28 +03:00
Matthew Mosesohn 6e0f251742 Update plugin version to 4
v4 will allow using a regexp for role so that this plugin would pass the
validation.

Change-Id: I718373ca5e2a001a45bce04c778896b9bac8509e
Partial-Bug: #1581038
2016-05-18 17:50:16 +03:00
Matthew Mosesohn a785ff52d8 Fix parseyaml and nodes hash lookup
Parseyaml now returns undef instead of false if it cannot parse
any values. Now it also accepts a default value, which has been
set to {}.

Nodes hash is now located inside network_metadata.

Change-Id: I2951bf32b9f5c7e660f8bf989bbd0f8643f89d37
Partial-Bug: #1582228
Partial-Bug: #1582230
2016-05-16 17:25:39 +03:00
Matthew Mosesohn bfcaa72eea Update condition to run hiera override task on all roles
Role '*' cannot be used any more because of a regression in
evaluating task roles.

Change-Id: I4d0500cafb516c500779ef2b3335fdf26092e8e7
Related-Bug: #1570846
2016-04-17 11:51:23 +04:00
Matthew Mosesohn 2e00703682 Add newton-10.0 support
Change-Id: I5545cd2388805a129cc92f61da29bb31d1d145a0
Partial-Bug: #1570939
2016-04-15 18:32:40 +03:00
Matthew Mosesohn db6b591ae7 Fix release compatibility for plugin. Remove old releases
Change-Id: Ib2e0e56c6f973bf95213dbdaa0e7e7d67eb5fe53
Partial-Bug: #1566912
2016-04-07 15:23:10 +03:00
Matthew Mosesohn ed0444be4c Add radosgw-keystone task to keystone-controller tasks
Change-Id: If47632b38d98c2e3d4d697937e732cd10c6b286b
Related-Bug: #1553239
2016-03-31 18:42:29 +03:00
Matthew Mosesohn aa2b581a1d Refactor plugin to depend on controller galera and rabbitmq
Now with advanced task deployment features, we can deploy
detached-keystone during the middle of controller deployment
and no longer require separated database plugin.

As a consequence this fixes ceilometer deployment as well, which
requires RabbitMQ to be functioning.

Changed hiera role lookups to compensate for multirole parallel
deployment.

Fixed OS_AUTH_URL in openrc on controllers to point to
keystone VIP instead of management.

Change-Id: Ic09939dbf077e99e22d9f937d8a6f3f5fe77db67
Closes-Bug: #1553239
Closes-Bug: #1561050
2016-03-29 19:01:54 +03:00
Jenkins 59ff042425 Merge "Fix hiera key colocate_haproxy" 2016-03-21 15:14:00 +00:00
Matthew Mosesohn 1c65a9d177 Adjust auth_file class to osnailyfacter
Related change I2b9ee47557fd9531ebf39414461e9a3df75e60f9
forces this change to be made.

Change-Id: Icbfd362fb01c1b58779066df5a93e737ba9a2b50
Closes-Bug: #1559966
2016-03-21 12:57:39 +03:00
Matthew Mosesohn 76879e598f Fix hiera key colocate_haproxy
The key name should be colocate_haproxy, not haproxy_colocate.
Related-Bug: #1556052

Change-Id: I00d2ff262a9a1980a6dcb23e53e12279dad2f2e7
2016-03-18 19:17:21 +03:00
Matthew Mosesohn 36ef9a841c Disable haproxy VIP colocation for keystone role
Change-Id: If7de248adda2637132d4bf9dc9d6d1aec20f091d
Closes-Bug: #1556052
2016-03-17 17:34:25 +03:00
Jenkins 7a2379998e Merge "Refactor tasks for version 2.0.0" 2016-03-16 16:48:40 +00:00
Matthew Mosesohn e05ae03e64 Unset default keystone API version
Change-Id: Icaf29a302c5f630563d4e386e03a9633f8ffcce3
Closes-Bug: #1556061
2016-03-11 16:46:26 +03:00
Matthew Mosesohn d623989baa Refactor tasks for version 2.0.0
Version 2.0.0 tasks enable parallel deployment and
cross-dependencies. This patch adds support to the
plugin so that the other tasks can be deployed as such.

Change-Id: Iddb778b3ba558248562d8e9bbe2e84973bfb6100
Partial-Bug: #1548340
2016-03-02 19:04:16 +03:00
Jenkins 0fa0c616dc Merge "Add 9.0 releases" 2016-03-02 14:42:31 +00:00
Jenkins 9ad35ee5e5 Merge "Point haproxy on controllers to service_endpoint vip for keystone" 2016-03-02 14:40:01 +00:00
Jenkins e573714a6f Merge "Remove murano references" 2016-03-02 14:39:54 +00:00
Matthew Mosesohn fbea9a35e2 Add 9.0 releases
Change-Id: I885e5d4b9a1e69f3b8ac03a56dd20e014ae68b4b
Partial-Bug: #1548340
2016-03-02 13:50:27 +03:00
Matthew Mosesohn a4f1373010 Point haproxy on controllers to service_endpoint vip for keystone
Keystone on controllers are used to proxy traffic to public_vip
so that public SSL works. Now traffic will proxy to haproxy on
separate-keystone HAProxy and then to keystone backed by apache.

This change enables a deployer to remove any given keystone node,
but keep HAproxy reporting as UP because plugins cannot trigger
controller redeploy.

Change-Id: If54c7d4f9cf069fc932b354ce6f263d5a87b3969
Partial-Bug: #1544023
2016-02-24 12:23:10 +03:00
Matthew Mosesohn 8d9a457c2d Disable primary-keystone task on controllers
This task gets handled on the separate-keystone role.

Change-Id: Ifd1a0cf22b7185f8e9c6b8ae389a95d9d066fc96
Closes-Bug: #1547823
2016-02-20 14:18:22 +04:00
Matthew Mosesohn 335f11b416 Remove murano references
Murano is now managed by a separate plugin and
cannot be configured directly.

Change-Id: Icf225265f659eef4cd0314fa9bc690084bd62522
Closes-Bug: #1547809
2016-02-20 13:42:50 +04:00
Matthew Mosesohn 4dc2277164 Fix memcached_addresses lookup
Look up ipaddresses instead of hostnames

Change-Id: Ibdfdf633174fd77888fcf70fe7abf91c2291467d
Related-Bug: #1540388
2016-02-09 20:13:26 +03:00
Matthew Mosesohn 536685c4ba Fix broken memcached_addresses line
Change-Id: Ibf63283ec0be16f511f6ea4863330ede5047afa5
Related-Bug: #1540388
2016-02-09 13:57:38 +03:00
Matthew Mosesohn d96494d6d6 Add memcached_addresses lookup for keystone
Keystone granular task now requires memcached_addresses
array, instead of memcache_roles in hiera. This fixes the
issue where detach-keystone nodes deploy with memcache entries
pointing to controller nodes.

Change-Id: I111ee3ccbedc5db1b150e63f19bf8c59c9ff7c9d
Closes-Bug: #1540388
2016-02-08 19:51:17 +03:00
Matthew Mosesohn 0fcb14914f Use hiera/plugins directory instead of override
hiera task now precreates an entry in /etc/hiera.yaml
for all plugins so that it is no longer necessary to
inject an override entry.

Change-Id: Ib44a98e81768dd69d947197612bc45c6ab857e23
Partial-Bug: #1540388
2016-02-03 18:55:39 +03:00
Jenkins d47c9280d5 Merge "Exclude 'setup_repositories' task from graph" 2016-02-02 08:57:13 +00:00
slava 63f95c3945 Exclude 'setup_repositories' task from graph
'setup_repositories' task had 'upload_core_repos' name in 7.0
release. Anyway, it's not necessary to specify this task in
tasks set as it's running on all nodes(the same for 'setup_repos'
task in >7.0 releases).

Change-Id: I2b41cc8be6d1bbf90f783db1d338915a694da929
Closes-Bug: #1539611
2016-02-01 13:55:05 +03:00
Vladimir Kuklin bf42642f9d Adjust openrc creation to use whole auth url
Closes-bug: #1533588

Change-Id: Ifb8a4c9b2724a83310ab697aa4f3187113d3ccf7
Depends-on: #Ic3a70137e95df91c8e8fa257f16274e68075c800
2016-01-29 21:44:32 +03:00
Stanislaw Bogatkin 22a7972e03 Add repositories to target node
As fuel_pkgs task needs to have repositories to install packages
from - add those repositories to node.

Change-Id: I2482232f97afc54349c51faf6148e795b87c0549
Closes-Bug: #1536190
2016-01-22 18:42:03 +03:00
Vladimir Khlyunev 814d62b646 Add liberty-8.0 version to metadata.yaml
Leave 2015.1-8.0 because we need to keep backward
compatibility with iso<450 at least for 2nd acceptande round.

Change-Id: I534eeeb177a9913adb172e2594e2666ea72256bb
Partial-Bug:1535293
2016-01-18 20:19:06 +03:00
Jenkins 70a2d71b9c Merge "Adjust plugin setting wording" 2016-01-11 13:09:59 +00:00
Matthew Mosesohn a8ce72fd71 Adjust plugin setting wording
Adjusted plugin name to match other detach-* plugin settings.

Change-Id: I6bb17af57879071668d455aa09fa84fae70e0042
Partial-Bug: #1532762
2016-01-11 14:29:23 +03:00
Bartosz Kupidura 3c1ffde9ae Use SSL path when SSL enabled
Change-Id: Id292e2411902f0e4f3ea86402ee58eb7d07bfd11
Closes-Bug: #1530119
2016-01-07 16:30:25 +01:00
Matthew Mosesohn 294eb338fb Remove cwd from keystone_firewall task
cwd needs to be the default value for running puppet manifests
located inside plugin deployment_scripts.

Change-Id: I3355bc3ccbc9306abfb9acd35aab3ee07fc6d719
Closes-bug: #1529630
2015-12-28 16:48:26 +03:00
Jenkins ac27875c18 Merge "Fix syntax error in keystone-controller.pp" 2015-12-25 13:08:02 +00:00
Matthew Mosesohn 866195f2e4 Fix syntax error in keystone-controller.pp
Change-Id: I5167893157f9216d4d6f458bbc3dfd28f7c5550f
Closes-Bug: #1529203
2015-12-25 13:25:14 +03:00
Jenkins 02eb42d56b Merge "Enable haproxy on controller role in all cases" 2015-12-23 16:47:33 +00:00
Jenkins 9e43b8d89a Merge "Move firewall to a plugin-specific task" 2015-12-23 12:59:42 +00:00
Matthew Mosesohn 73b7c6e286 Enable haproxy on controller role in all cases
Previously haproxy was enabled only on controller for
SSL mode. Now it's enabled for all modes in order to
fix murano deployment.

Change-Id: I4c356f9622ad340e6915f5e4d446aaf8eb15149f
Closes-Bug: #1499375
2015-12-23 15:24:49 +03:00
Matthew Mosesohn 6047e1f3f9 Move firewall to a plugin-specific task
This removes dependency on fuel-library firewall task,
which defines many firewall rules that are not needed
by standalone-keystone nodes.

Change-Id: I6ef56e64d53dfd86c5e151b2ba6924051b9916db
Partial-Bug: #1528283
2015-12-22 17:51:19 +03:00
Alex Schultz 1b52cf830a Put plugin hiera in place
This change updates corrects the sed used to update the hiera.yaml for
the plugin to ensure the plugin hiera is actually defined.

Change-Id: I56b8e6447e201af3378826c539056ec5d8cca795
Closes-Bug: #1528215
Related-Bug: #1525014
2015-12-21 09:14:38 -07:00
Alex Schultz 14aa54ba9c Fix hiera overrides for 8.0
This change updates how we add our hiera override to support the
hiera.yaml format change in 8.0

Change-Id: Ic2e620b5402c2fcd80bfe022c78d4fe800a5d568
Related-Bug: #1526502
2015-12-17 16:33:07 -07:00
Matthew Mosesohn 73d541228d Add apache as a task requirement for task-keystone
Configuring apache after keystone led to broken apache
configuration, and it should be run before keystone task.

Change-Id: Ic0a1db21de97ad279fa452288defdea268634de3
Closes-Bug: #1522065
2015-12-02 18:51:23 +03:00
Matthew Mosesohn 2557bb01ac Add ssl tasks to keystone role and fix ordering
Added ssl-keys-saving and ssl-add-trust-chain tasks to keystone
role so that it can contact public endpoint on public VIP
(after controller deployment) and validate the SSL cert.

Non-primary standalone keystone role should run before all other
default roles as well.

Closes-Bug: #1511319
Change-Id: I3eaee62ce8399ee9e053f03a419e0cf99559c80a
2015-10-29 17:31:43 +03:00
Jenkins 0f3eb3257d Merge "Move workloads_collector_user_add to keystone role" 2015-10-23 12:19:21 +00:00