Commit Graph

34 Commits

Author SHA1 Message Date
Andreas Jaeger a2f59fb08e Retire repository
Fuel repositories are all retired in openstack namespace, retire
remaining fuel repos in x namespace since they are unused now.

This change removes all content from the repository and adds the usual
README file to point out that the repository is retired following the
process from
https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project

See also
http://lists.openstack.org/pipermail/openstack-discuss/2019-December/011675.html

A related change is: https://review.opendev.org/699752 .

Change-Id: I475d7b45ec71eda36ef56ea9877cfd8545528444
2019-12-18 19:35:04 +01:00
Matthew Mosesohn fa7d4daf68 Add heat-cfn-keystone to required_for in keystone-controller
Also fix python-openstackclient package install.

Change-Id: Iad6ff64be7e96214332a3519abcbc40c3fe4f863
Closes-Bug: #1590435
2016-06-08 17:43:01 +03:00
Matthew Mosesohn a785ff52d8 Fix parseyaml and nodes hash lookup
Parseyaml now returns undef instead of false if it cannot parse
any values. Now it also accepts a default value, which has been
set to {}.

Nodes hash is now located inside network_metadata.

Change-Id: I2951bf32b9f5c7e660f8bf989bbd0f8643f89d37
Partial-Bug: #1582228
Partial-Bug: #1582230
2016-05-16 17:25:39 +03:00
Matthew Mosesohn aa2b581a1d Refactor plugin to depend on controller galera and rabbitmq
Now with advanced task deployment features, we can deploy
detached-keystone during the middle of controller deployment
and no longer require separated database plugin.

As a consequence this fixes ceilometer deployment as well, which
requires RabbitMQ to be functioning.

Changed hiera role lookups to compensate for multirole parallel
deployment.

Fixed OS_AUTH_URL in openrc on controllers to point to
keystone VIP instead of management.

Change-Id: Ic09939dbf077e99e22d9f937d8a6f3f5fe77db67
Closes-Bug: #1553239
Closes-Bug: #1561050
2016-03-29 19:01:54 +03:00
Jenkins 59ff042425 Merge "Fix hiera key colocate_haproxy" 2016-03-21 15:14:00 +00:00
Matthew Mosesohn 1c65a9d177 Adjust auth_file class to osnailyfacter
Related change I2b9ee47557fd9531ebf39414461e9a3df75e60f9
forces this change to be made.

Change-Id: Icbfd362fb01c1b58779066df5a93e737ba9a2b50
Closes-Bug: #1559966
2016-03-21 12:57:39 +03:00
Matthew Mosesohn 76879e598f Fix hiera key colocate_haproxy
The key name should be colocate_haproxy, not haproxy_colocate.
Related-Bug: #1556052

Change-Id: I00d2ff262a9a1980a6dcb23e53e12279dad2f2e7
2016-03-18 19:17:21 +03:00
Matthew Mosesohn 36ef9a841c Disable haproxy VIP colocation for keystone role
Change-Id: If7de248adda2637132d4bf9dc9d6d1aec20f091d
Closes-Bug: #1556052
2016-03-17 17:34:25 +03:00
Matthew Mosesohn e05ae03e64 Unset default keystone API version
Change-Id: Icaf29a302c5f630563d4e386e03a9633f8ffcce3
Closes-Bug: #1556061
2016-03-11 16:46:26 +03:00
Jenkins 9ad35ee5e5 Merge "Point haproxy on controllers to service_endpoint vip for keystone" 2016-03-02 14:40:01 +00:00
Matthew Mosesohn a4f1373010 Point haproxy on controllers to service_endpoint vip for keystone
Keystone on controllers are used to proxy traffic to public_vip
so that public SSL works. Now traffic will proxy to haproxy on
separate-keystone HAProxy and then to keystone backed by apache.

This change enables a deployer to remove any given keystone node,
but keep HAproxy reporting as UP because plugins cannot trigger
controller redeploy.

Change-Id: If54c7d4f9cf069fc932b354ce6f263d5a87b3969
Partial-Bug: #1544023
2016-02-24 12:23:10 +03:00
Matthew Mosesohn 335f11b416 Remove murano references
Murano is now managed by a separate plugin and
cannot be configured directly.

Change-Id: Icf225265f659eef4cd0314fa9bc690084bd62522
Closes-Bug: #1547809
2016-02-20 13:42:50 +04:00
Matthew Mosesohn 4dc2277164 Fix memcached_addresses lookup
Look up ipaddresses instead of hostnames

Change-Id: Ibdfdf633174fd77888fcf70fe7abf91c2291467d
Related-Bug: #1540388
2016-02-09 20:13:26 +03:00
Matthew Mosesohn 536685c4ba Fix broken memcached_addresses line
Change-Id: Ibf63283ec0be16f511f6ea4863330ede5047afa5
Related-Bug: #1540388
2016-02-09 13:57:38 +03:00
Matthew Mosesohn d96494d6d6 Add memcached_addresses lookup for keystone
Keystone granular task now requires memcached_addresses
array, instead of memcache_roles in hiera. This fixes the
issue where detach-keystone nodes deploy with memcache entries
pointing to controller nodes.

Change-Id: I111ee3ccbedc5db1b150e63f19bf8c59c9ff7c9d
Closes-Bug: #1540388
2016-02-08 19:51:17 +03:00
Matthew Mosesohn 0fcb14914f Use hiera/plugins directory instead of override
hiera task now precreates an entry in /etc/hiera.yaml
for all plugins so that it is no longer necessary to
inject an override entry.

Change-Id: Ib44a98e81768dd69d947197612bc45c6ab857e23
Partial-Bug: #1540388
2016-02-03 18:55:39 +03:00
Vladimir Kuklin bf42642f9d Adjust openrc creation to use whole auth url
Closes-bug: #1533588

Change-Id: Ifb8a4c9b2724a83310ab697aa4f3187113d3ccf7
Depends-on: #Ic3a70137e95df91c8e8fa257f16274e68075c800
2016-01-29 21:44:32 +03:00
Bartosz Kupidura 3c1ffde9ae Use SSL path when SSL enabled
Change-Id: Id292e2411902f0e4f3ea86402ee58eb7d07bfd11
Closes-Bug: #1530119
2016-01-07 16:30:25 +01:00
Jenkins ac27875c18 Merge "Fix syntax error in keystone-controller.pp" 2015-12-25 13:08:02 +00:00
Matthew Mosesohn 866195f2e4 Fix syntax error in keystone-controller.pp
Change-Id: I5167893157f9216d4d6f458bbc3dfd28f7c5550f
Closes-Bug: #1529203
2015-12-25 13:25:14 +03:00
Jenkins 02eb42d56b Merge "Enable haproxy on controller role in all cases" 2015-12-23 16:47:33 +00:00
Jenkins 9e43b8d89a Merge "Move firewall to a plugin-specific task" 2015-12-23 12:59:42 +00:00
Matthew Mosesohn 73b7c6e286 Enable haproxy on controller role in all cases
Previously haproxy was enabled only on controller for
SSL mode. Now it's enabled for all modes in order to
fix murano deployment.

Change-Id: I4c356f9622ad340e6915f5e4d446aaf8eb15149f
Closes-Bug: #1499375
2015-12-23 15:24:49 +03:00
Matthew Mosesohn 6047e1f3f9 Move firewall to a plugin-specific task
This removes dependency on fuel-library firewall task,
which defines many firewall rules that are not needed
by standalone-keystone nodes.

Change-Id: I6ef56e64d53dfd86c5e151b2ba6924051b9916db
Partial-Bug: #1528283
2015-12-22 17:51:19 +03:00
Alex Schultz 1b52cf830a Put plugin hiera in place
This change updates corrects the sed used to update the hiera.yaml for
the plugin to ensure the plugin hiera is actually defined.

Change-Id: I56b8e6447e201af3378826c539056ec5d8cca795
Closes-Bug: #1528215
Related-Bug: #1525014
2015-12-21 09:14:38 -07:00
Alex Schultz 14aa54ba9c Fix hiera overrides for 8.0
This change updates how we add our hiera override to support the
hiera.yaml format change in 8.0

Change-Id: Ic2e620b5402c2fcd80bfe022c78d4fe800a5d568
Related-Bug: #1526502
2015-12-17 16:33:07 -07:00
Matthew Mosesohn 418cbc01cd Add rabbitmq workaround if rabbitmq plugin enabled
Keystone admin fails if no RabbitMQ servers are available,
so AMQP should be correctly configured.

FIXME. RabbitMQ plugin cannot notify other plugins of its
settings because in normal deployments, those role are
not present in the deployment graph and fail to resolve.

Change-Id: Ifb03165d44395ac7957180c454b70c148d653df3
Partial-Bug: #1490523
2015-09-03 20:46:36 +03:00
Matthew Mosesohn b49c5c7262 Disable public_service_endpoint if SSL enabled
Since there is no SSL certificate or hostname for
public keystone VIP, we need to disable listening
on public keystone VIP for SSL deployments.

Change-Id: Ifb04ef48d9afa4672cdf69b69628f3dbd5d1e1aa
Closes-Bug: #1491009
2015-09-01 17:49:42 +03:00
Sergii Golovatiuk 968bb2bd79 Fix behavior on empty yaml
parseyaml('') returns false which cannot be used in pick as pick
requires Array or Hash on input. Adding is_bool allows to address this
issue

Proper fix should be in parseyaml itself. [MODULES-2462] should address
this issue.

Change-Id: I1ac53f2944d2fa7831430adbc06893e114191b6d
Closes-Bug: 1488455
2015-08-25 14:34:43 +02:00
Sergii Golovatiuk 80d422554e Use standard virtual_ips task for keystone_vip
Change-Id: I9f280239199820dcd53f72c9ad0c48497ccda319
Closes-Bug: 1487543
2015-08-24 12:23:37 +02:00
Matthew Mosesohn 55f6321e42 Enable haproxy for keystone on controller if SSL enabled
There is only 1 DNS entry created on the public network, so
the public VIP must serve keystone for SSL enabled deployment.
(Recommit with fix of Change-Id: Iaaba02f55e2501b3e8b45b3b330d05f7b007af03 )

Change-Id: I37cbe436a6f0c19014259f4c9fb8b75efcf18450
Closes-Bug: #1484465
2015-08-18 13:05:23 +03:00
Matthew Mosesohn 989683f1f3 Revert "Enable haproxy for keystone on controller if SSL enabled"
This reverts commit 3fb883b1f2.

Change-Id: I698f648b2a2cfc8dc5d794d303bd8c3d176abdd8
2015-08-18 10:02:00 +00:00
Matthew Mosesohn 3fb883b1f2 Enable haproxy for keystone on controller if SSL enabled
There is only 1 DNS entry created on the public network, so
the public VIP must serve keystone for SSL enabled deployment.

Change-Id: Iaaba02f55e2501b3e8b45b3b330d05f7b007af03
Closes-Bug: #1484465
2015-08-18 08:29:31 +02:00
Bartłomiej Piotrowski c5b5df02fd Initial commit
Change-Id: I0cb81f6abd3e280e2eb0b1432c49c88a986ea53c
2015-08-17 13:16:42 +02:00