openstack/devstack-plugin-ceph - devstack-plugin-ceph - OpenDev: Free Software Needs Free Tools

The dependent nova fix resolves the issue with rbd and
shelve/unshelve testing in tempest. Re-enabling the test
needs to be branch-specific since devstack-plugin-ceph
is branch-less but the fixes in nova will be branch
specific so we don't want to enable this on any nova
branch that does not have the fix since it would break
the job on those branches.
Related-Bug: #1653953
Depends-On: https://review.opendev.org/457886/
Co-Authored-By: Matt Riedemann <mriedem.os@gmail.com>
Change-Id: Ifbfc15033020c430a93574f2726b2279c9be130d

This patch adds support for installing, configuring all required
ceph-iscsi related packages and daemons. ceph-iscsi requires kernel
version 4.16 or greater.
To enable set
ENABLE_CEPH_ISCSI=True
Adds new config options
CEPH_ISCSI_TARGET_IQN - the rbd-target-gw iqn to use to export volumes
CEPH_ISCSI_API_HOST - the rbd-target-api ip to use to listen on
CEPH_ISCSI_API_PORT - the rbd-target-api port
CEPH_ISCSI_API_USER - the rbd-target-api user for auth against the api
CEPH_ISCSI_API_PASSWORD - the rbd-target-api password for auth against the api
The following packages are required and their deps
tcmu-runner - this requires kernel version 4.16 and > to work. Ubuntu
doesn't have a prebuilt package for this, so we pull it down and compile it.
rtslib-fb - has a pypi package
configshell-fb - has a pypi package
targetcli-fb - doesn't have a pypi package.
ceph-iscsi - doesn't have a pypi package.
The reference documentaion to setup ceph-iscsi targets and daemons:
http://docs.ceph.com/docs/master/rbd/iscsi-target-cli-manual-install
Change-Id: Idfac4883b9d31e80124b8f2f1cc60dd9ce18c594

Allow running api and scenario tests
together in the manila test jobs.
Change-Id: Ifbf998d7c8a27ad22a39f46547d1548c052614d0

Bring CentOS in line with ubuntu and use luminous rather than
jewel for all manila builds.
Change-Id: Ib0924e42551d25b68ee22ffb9b52caba302ac19c

Change-Id: I82cc5232870a820c4c8a0526eb44de45cd67a369

Builds for ubuntu bionic are working now.
We need newer features not yet packaged for ubuntu bionic
for python3 and ceph volume chmod support.
Change-Id: I20fa99c6f6da7d4042b50020ab0e9f34e7ac2de6

Use python3 compatible tempest test discovery and
install the relevant python3 libraries.
Change-Id: Iabd1952ddaba85316dec5cf60c89122dc3825912

The shaman ceph and ganesha repos for ubuntu bionic are less
stable than those available with the bionic distro itself so
use the latter.
Also refactor the ceph/ganesha repo configuration so that it
is easier to read and maintain, and since bionic does not ship
with knfs installed make the service stop/disable for these
services robust in that case.
Change-Id: If00cc82cfb076c75a11738dcaca372b0cc7a1848

Enable encrypted volume testing.
Change-Id: I96739a3592241aff6326662d15f36b39f1772356

Continue to use the upstream shaman repos for manila so
we can test changes prior to their inclusion in the distro.
Also overwrite /etc/ganesha/ganesha.conf rather than
appending to it since the file now ships with configuration
that breaks ganesha with CephFS FSAL.
Change-Id: I6db16684fcf1e4ad573e25f0475b283cd85dc2c7

Similar to what happened some time ago for the stable/queens branch, we
are now seeing issues again on master after there was a new Paste
release being made a couple of weeks ago. So we need to perform
the same workaround of forcing pip to install PasteDeploy over
the distro version on the master branch.
Change-Id: I3e98a08e78182bdf5ec09b30e31b98435ec29456
Closes-Bug: 1803143

Ubuntu Bionic has Ceph Luminous packages available natively, so we don't
need to set up any additional repositories.
Add a delay after starting ceph-mon in order to allow it to run
properly.
Change-Id: I2c40c4b4e49145d679affaba678f7117ce73a1d1

Simply use $KEYSTONE_SERVICE_URI, which is the value also
exported through OS_* variables.
Change-Id: I07296379fa691fed20ed5b1c53b335b2442a6c4e

The functions support only repositories from shaman,
but they can be extended to support stable repositories as well.
Change-Id: I633f80c0f74a69e6d67674398f2013f09b96c661

Clean the "CentOS" branch, so that it should work for all
CentOS/RHEL variants (7.x). Make sure to install the
required repositories also in the non-Manila case.
Fedora already ships Ceph packages so does not need additional
repositories.
Do not try to install ceph-radosgw twice.
Finally, explicitly fail for other distributions (not supported
de-facto even in the current code).
Change-Id: I83b1fffad405bc122bc55ef1173f5239f41d2b36

The remaining occurrences of cat <<... EOF populate non-INI files.
Remove few security checks which are not needed, because iniset
takes care of checking the existence of the section and keys and
adding or replacing them if needed.
Change-Id: I4951e1f2f456b3c6f83fd4868db90fae9d811fbe

The integration with keystone through the PKI tokens (which is removed
anyway since Ocata) and SSL is now disabled by default, and enabled
only if a new variable (CEPH_RGW_KEYSTONE_SSL) is explicitely set
to True.
Change-Id: I4884a8e63c04451e83eb7a104ad7eb7d520b0921

It was removed from DevStack before the Ocata release, see
https://review.openstack.org/#/c/391380/
The support for the only alternative (templated catalog) was
removed even earlier, before Mitaka:
https://review.openstack.org/#/c/278333/
This means that the entry points for Swift can always be
configured when RadosGW is enabled.
Change-Id: I25c1f963665fab1dc77db40a2742dc29a9c1ee0b

The names were used for the same entity, so the default was never
applied. Use the variable defined first (and whose name looks
more consistent with the variable normally used to defined
the identity name).
Also, change the default version to 3. As no one seems to be
using it right now on the gates, it should not break anything.
Change-Id: I4cbb104198e2cdaa8e3e8c4b1f1c20dc3e0048b5

The workaround in order to fix the issue with Paste/PasteDeploy being
pulled in as system packages when installing ceph is only needed for the
Pike UCA. Assume that we only use that when devstack is running at the
stable/queens branch.
Change-Id: I0bbf04be015b777b3feb2c5e837b1f46f81cf3e9

This fixes a small logical error, we only want to set a libvirt secret
if nova is enabled, not both cinder and nova. This prevents a
deployment with cinder but not nova from being successful.
Change-Id: Ief83fe661cf1b2099af8131a7a206ffca3458dc7

The regex in 84068e was inverted.
Change-Id: Ibac88f2f5a2fbd52a3111d87d48352dd6dd813c4

This assumes that nobody is using this plugin
on outdated versions of Fedora.
Also don't recommend an outdated Fedora.
Change-Id: I858b78ee1a02e98a5bf4545ee315328e3fab0010

... and export counter in RADOS pool.
Change-Id: I192a0aebdd7cad11c9aa2e8e6b3c4e814f55a12d

We should only attempt to install the python3 packages
if we're running in a python3 environment.
Change-Id: Ic5e3046917a51d884091b449a433259c049ac016
Closes-Bug: #1724249 

The gate-tempest-dsvm-full-devstack-plugin-ceph-ubuntu-xenial job is
currently failing at a rate of 100% since we updated to use the Pike
UCA. The Ceph packages in the Pike UCA are pulling in python-paste and
python-pastedeploy. When devstack pip installs a newer version of
python-paste to satisfy upper-constraints, we end up with Paste
installed from pypi and python-pastedeploy installed from the Ubuntu
archive and Keystone fails to start with the error:
 "ImportError: cannot import name deploy."
This adds a hack to force an update of PasteDeploy from pypi during the
devstack "stack install" phase to work around the problem and get the
job passing again.
Change-Id: Idf28de8faa56c2d387291c7d14ac6d4bf1c74c6a

Recently, I noticed in the devstack experimental job
gate-tempest-dsvm-py35-full-devstack-plugin-ceph-ubuntu-xenial-nv that
when Glance runs under python 3, it was unable to import rados and rbd
because the Ceph plugin doesn't install the python 3 packages. This
adds the packages to the list for install.
Change-Id: Ib4f956e45885df583624bd7c24989472f44eb365

ceph-mgr daemon is required as part of Ceph cluster from
luminous release onwards.
Change-Id: I0903b3cd9fa84041bcd7ed5034d8a60d14759e92
Closes-Bug: #1708169 

The manila cephfs-nfs driver jenkins gate has been failing for a while
since it started using Ceph >= 12.1.1. The manila driver is unable to
fetch Ceph cluster usage stats as it did with earlier Ceph releases.
Temporarily revert to using Kraken 11.2.x stable packages to unblock
the failing gate.
Partial-Bug: #1708169
Change-Id: I4e842e2cee14755e02714e856114a5eabb5613b3

... for cephfs-nfs driver
Change-Id: I7d59ce288a245e7399b38020282be8e7c7fe62f7

This command no longer exists.
Closes-Bug: #1700160
Change-Id: I9feaff1e8d7e6505d36d0702ef531a95289f9618

This is to workaround this test which is not currently
working:
https://review.openstack.org/#/c/471352/
Change-Id: I9506e326f9432eda3a057996805d4b0cd7a91446

- 24 and 25 are the currently supported releases.
- 22 and 23 are now unsupported and are EOL.
Fedora Releases
https://fedoraproject.org/wiki/Releases
Change-Id: Ib03fdb0855eb02f7495b3835d8016cbe08508b1e

... for Manila. Tested to work in Ubuntu Xenial
and CentOS 7 environments.
Co-Authored-By: Tom Barron <tpb@dyncloud.net>
Change-Id: Ib2e806fefdd0548b06ff6aadd4b6a8e62001ea33

... for Ceph versions >= 11.1
For versions of Ceph >= 11.1, starting ceph-mon service doesn't
implicitly call ceph-create-keys to create the client admin key [1].
Call ceph-create-keys after starting MONs to do so.
[1] http://tracker.ceph.com/issues/16036
 cc441cbd6e
Change-Id: Id67cc875ce5e8bca7430465a30e2b02dd81c7e6a

When setting up Manila with CephFS in Ubuntu machines, don't
always install Ceph packages for xenial. Allow installation
of Ceph packages for trusty in Ubuntu trusty machines.
Change-Id: I70d26a3db2034331c8101795b432831718a15273

For manila-CephFS CI, latest Jewel Ceph packages built using
gitbuilder were installed. Jenkins based Ceph build system is going to
replace the gitbuilder based build system. Switch to using packages
built by the newer system.
Change-Id: Ic9b76bc5754dc8b98a11da9fadbeb9d6ace87d5b
Closes-bug: #1642678 

Ceph doesn't support volume swapping so disable that feature in
tempest.
Change-Id: I8f3da1d730113b100526662ba7ec71f603ab36da

There is no snapshot manage feature on ceph backend and
tests for the same should be skipped on ceph jobs.
There is devstack variable to do so.
Currently gate-tempest-dsvm-full-ceph-plugin-src-glance_store-ubuntu-xenial
is failing and blocking glance-store
Details:
http://lists.openstack.org/pipermail/openstack-dev/2017-January/110257.html
This commit sets TEMPEST_VOLUME_MANAGE_SNAPSHOT to False for ceph jobs.
Change-Id: Ie3eca6db5c76153d46e4dfbe9b552e4025347d31

In [1] the default value for CEPH_LOOPBACK_DISK_SIZE_DEFAULT was changed
to be VOLUME_BACKING_FILE_SIZE instead of a fixed value. This will break
in some cases as there is no fallback defined for
VOLUME_BACKING_FILE_SIZE in devstack/lib/ceph.
[1] https://review.openstack.org/403988
Change-Id: I117e36db442c8ef8c469e4149629e8a27d22da22

The backing disk currently created is 8GB. devstack-gate
sets that to 24GB when running Tempest. We're seeing ceph
job failures due to NoValidHost in the cinder scheduler
because 8GB isn't enough capacity for Tempest runs. So this
change uses the same backing disk size for the ceph jobs as
we get in the default devstack setup, which uses LVM.
Depends-On: I71be308c8373e9ac429b901c374100c6b3c1e59d
Change-Id: I788eefa6c1d427bf51d2d3d40be4abe0336443e7
Closes-Bug: #1645530 

Add config file argument to ceph commands in cleanup_ceph_remote
function so that it will cleanup properly if CEPH_CONF_FILE has
a non-default value.
Change-Id: I0c6dc3494bcf700364af0c578cc9a60b082427d5
Closes-Bug: #1643513