openstack-ansible-os_nova

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# {{ ansible_managed }}

{% set _api_threads = ansible_processor_vcpus|default(2) // 2 %}

{% set api_threads = _api_threads if _api_threads > 0 else 1 %}

[DEFAULT]

Disable stderr logging OSLO logging currently defaults the 'use_stderr' option to True which results duplicate logs in service daemon logs for both upstart and systemd. To correct this issue the use_stderr option has been set to false. Change-Id: I1974b9ad4080aa4253de9e3112f0973d44aa23f8 Closes-Bug: 1588051 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2016年08月04日 12:36:55 -05:00

# Disable stderr logging

use_stderr = False

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Logs / State

debug = {{ debug }}

Enable fatal_deprecations configuration per OpenStack service Introduced namespaced variables for all OpenStack services supporting this setting as defined through oslo libraries. Default value is False in each case. Gating commit checks now enable the fatal_deprecations setting for each supporting service. Closes Bug: 1428412 Change-Id: I5f41d3fdfa1cc876efc0c33c657c9dad18a8ba51

2015年03月16日 19:39:20 -05:00

fatal_deprecations = {{ nova_fatal_deprecations }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

log_dir = /var/log/nova

state_path = {{ nova_system_home_folder }}

rootwrap_config = /etc/nova/rootwrap.conf

service_down_time = 120

Make default_schedule_zone configurable in nova This patch allows a deployer to set a default availability zone (AZ) to use for new instance builds if the AZ isn't specified in the boot request. By default, nova sets this to None. Deployers can use the nova_default_schedule_zone variable to set a default AZ for boot requests without an AZ specified. Docs/release notes will be proposed in OpenStack-Ansible's main repo. Closes-Bug: 1472428 Change-Id: I69627d7987a3158a3a005406245ea6df881715d8

2016年03月08日 16:00:09 -06:00

default_schedule_zone = {{ nova_default_schedule_zone }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

Role should default to no external SSL termination Also, variable naming should match what is in Id87fab39c929e0860abbc3755ad386aa6893b151 Change-Id: Iadf64979d01d15f459b8fcdd92a60b207745c006

2016年03月04日 17:28:33 -05:00

{% if nova_external_ssl | bool %}

Enable SSL termination for all services This change makes it so that all services are expecting SSL termination at the load balancer by default. This is more indicative of how a real world deployment will be setup and is being added such that we can test a more production like deployment system by default. The AIO will now terminate SSL in HAProxy using a self-signed cert. Change-Id: I913b4140e258b56d56f5323d55fd633288b3ef6a Re-Implementation-Of: https://review.openstack.org/#/c/277199/9 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2016年02月07日 14:38:30 -06:00

secure_proxy_ssl_header = {{ nova_secure_proxy_ssl_header }}

{% endif %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Quota

Allow configuration of all default quota options Add all remaining configurable default quota options for nova, neutron, and cinder. Change-Id: I3bbbba2f2ca9495c7060ffa5ac5d70e865758518 Closes-Bug: #1446431

2015年07月15日 23:39:41 -07:00

quota_cores = {{ nova_quota_cores }}

quota_fixed_ips = {{ nova_quota_fixed_ips }}

quota_floating_ips = {{ nova_quota_floating_ips }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

quota_injected_file_content_bytes = {{ nova_quota_injected_file_content_bytes }}

quota_injected_file_path_length = {{ nova_quota_injected_file_path_length }}

quota_injected_files = {{ nova_quota_injected_files }}

Allow configuration of all default quota options Add all remaining configurable default quota options for nova, neutron, and cinder. Change-Id: I3bbbba2f2ca9495c7060ffa5ac5d70e865758518 Closes-Bug: #1446431

2015年07月15日 23:39:41 -07:00

quota_instances = {{ nova_quota_instances }}

quota_key_pairs = {{ nova_quota_key_pairs }}

quota_metadata_items = {{ nova_quota_metadata_items }}

quota_networks = {{ nova_quota_networks }}

quota_ram = {{ nova_quota_ram }}

quota_security_group_rules = {{ nova_quota_security_group_rules }}

quota_security_groups = {{ nova_quota_security_groups }}

quota_server_group_members = {{ nova_quota_server_group_members }}

quota_server_groups = {{ nova_quota_server_groups }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Scheduler

cpu_allocation_ratio = {{ nova_cpu_allocation_ratio }}

disk_allocation_ratio = {{ nova_disk_allocation_ratio }}

max_instances_per_host = {{ nova_max_instances_per_host }}

max_io_ops_per_host = {{ nova_max_io_ops_per_host }}

ram_allocation_ratio = {{ nova_ram_allocation_ratio }}

ram_weight_multiplier = {{ nova_ram_weight_multiplier }}

reserved_host_disk_mb = {{ nova_reserved_host_disk_mb }}

reserved_host_memory_mb = {{ nova_reserved_host_memory_mb }}

scheduler_driver = {{ nova_scheduler_driver }}

scheduler_available_filters = {{ nova_scheduler_available_filters }}

scheduler_default_filters = {{ nova_scheduler_default_filters }}

scheduler_driver_task_period = {{ nova_scheduler_driver_task_period }}

scheduler_host_manager = {{ nova_scheduler_host_manager }}

scheduler_host_subset_size = {{ nova_scheduler_host_subset_size }}

scheduler_max_attempts = {{ nova_scheduler_max_attempts }}

scheduler_weight_classes = {{ nova_scheduler_weight_classes }}

Add Nova config for os_ironic role This patch configures Nova for use with Ironic, noting that without moving to cells, an openstack-ansible install can support only one type of hypervisor at a time (i.e. kvm or ironic etc). Setting the nova_virt_type determines whether Nova is configured for Ironic. If it is left unset, the default kvm hypervisor is used. The nova virtualization types have all been moved into a single nova_virt_types data structure which is used to define facts for a specific supported virtualization type. This change is compatible with older versions of overrides as the virt type values are used to set host facts which could also be set using user variables or any other means to predefine a default value. Change-Id: Ic8160fa00457d68ee223452f4dae6d38bffcdca0 Signed-off-by: Michael Davies <michael@the-davies.net> Partially-implements: blueprint role-ironic Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2016年03月16日 08:42:26 +00:00

scheduler_use_baremetal_filters = {{ nova_scheduler_use_baremetal_filters }}

scheduler_tracks_instance_changes = {{ nova_scheduler_tracks_instance_changes }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Compute

Added options for enabling instance_passwords The nova.conf and tempest.conf option for `enable_instance_password` has been added as a default. This option has a default of True in nova but false in tempest. This causes temptest to fail scheme validation on newer versions of temptest. To fix this issue the option being added with a default value of True for both tempest and nova. Change-Id: I19f5da9820f2367b3d8dd0a7f215aa3f3ea5f611 Partial-Bug: #1468061

2015年06月23日 14:38:12 -05:00

enable_instance_password = {{ nova_enable_instance_password }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

compute_driver = {{ nova_compute_driver }}

instance_name_template = instance-%08x

instances_path = {{ nova_system_home_folder }}/instances

api_paste_config = /etc/nova/api-paste.ini

allow_resize_to_same_host = True

Allow additional nova.conf variables to be set Add variables for the following 2 nova.conf vars: image_cache_manager_interval (default 0) remove_unused_resized_minimum_age_seconds (default 3600) Change-Id: Ifa52ab226bfe695b64c32c94dd3ffccf465345a0 Closes-Bug: #1424808

2015年02月25日 09:18:43 +00:00

image_cache_manager_interval = {{ nova_image_cache_manager_interval }}

Add resume_guests_state_on_host_boot to nova.conf Add the ability to enable the resume_guests_state_on_host_boot flag in nova.conf to start guests that were running before the host rebooted. Change-Id: I7365d972dc7e41a46b340396a73518b1da918f05 Closes-Bug: 1483246

2015年08月11日 10:41:30 -04:00

resume_guests_state_on_host_boot = {{ nova_resume_guests_state_on_host_boot }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

Add ssl deployment to novnc console type Deploy user SSL keys for novnc console containers so users viewing the console in Horizon will be able to access the console over https. Example configuration: nova_console_type: novnc nova_novncproxy_proto: https nova_console_user_ssl_cert: ~/certs/horizon.pem nova_console_user_ssl_key: ~/certs/horizon.key nova_console_user_ssl_ca_cert: "{{ ssl_ca_cert }}" Change-Id: Icb66631ac0b00afe12519fd742e3198e828a10cc

2016年01月14日 20:14:48 -06:00

{% if nova_console_user_ssl_cert is defined and nova_console_user_ssl_key is defined and inventory_hostname in groups['nova_console'] %}

# Console SSL keys

ssl_only = true

cert = {{ nova_console_ssl_cert }}

key = {{ nova_console_ssl_key }}

{% endif %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Api's

Updated repository for minimum viable kilo install * Updated Keystone wsgi and paste files from upstream. * Updated all clients in the openstack_client.yml file. * Kilo services are tracking the head of master. * Removed pinned middleware because they're pinned else where. * Added additional service references for neutron vpnaas, fwaas, and lbaas which have now been moved into their own repos and no longer exist within the core neutron repository. * The neutron vpnaas, fwaas, and lbaas have been removed from the basic plugins being loaded and a comment has been added to describe how one might add them back in. * Updated rootwrap filters for neutron dhcp and l3. * Updated heat policy.json * Added the `python-libguestfs` to the nova-compute installation packages. * Updates all services to point to the latest kilo tag Services updated due to deprecated configs: * Keystone * Glance * Nova * Neutron (is still using the deprecated nova auth plugin) * Heat * Tempest Items for future work post initial release: * roles/os_neutron/files/post-up-checksum-rules:25: TODO(cloudnull) remove this script once the bug is fixed. * roles/rabbitmq_server/tasks/rabbitmq_cluster_join.yml:17: TODO(someone): implement a more robust way of checking Implements: blueprint minimal-kilo Closes-Bug: 1428421 Closes-Bug: 1428431 Closes-Bug: 1428437 Closes-Bug: 1428445 Closes-Bug: 1428451 Closes-Bug: 1428469 Closes-Bug: 1428639 Change-Id: I28a305d9e40a9cf70148ef7d7b00d467a65ca076

2015年03月22日 09:09:53 -05:00

enabled_apis = {{ nova_enabled_apis }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

osapi_compute_workers = {{ nova_osapi_compute_workers | default(api_threads) }}

# Rpc all

rpc_backend = {{ nova_rpc_backend }}

Fix bug in RPC config that broke Rabbit SSL support The use_rabbit_ssl query parameter is not respected by oslo.messaging's rabbit driver, only the pika driver supports configuration using query parameters at present. Change-Id: I397b56423d9ef6757bada27c92b7c9f0d5126cc9 Implements: blueprint multi-rabbitmq-clusters

2016年07月29日 14:51:48 -04:00

transport_url = rabbit://{% for host in nova_rabbitmq_servers.split(',') %}{{ nova_rabbitmq_userid }}:{{ nova_rabbitmq_password }}@{{ host }}:{{ nova_rabbitmq_port }}{% if not loop.last %},{% else %}/{{ nova_rabbitmq_vhost }}{% endif %}{% endfor %}

2015年09月25日 14:14:23 +01:00

executor_thread_pool_size = {{ nova_rpc_thread_pool_size }}

Add remote procedure call tunables to nova and neutron This allows us to override the default settings, which is useful for large deployments or deploying a large number of instances. It also uses an unused variable in neutron for setting the rpc_backend. Change-Id: I83d11eb79b30dda51c6f738433ca960a0f63246e Closes-bug: 1471926

2015年07月23日 12:58:37 -05:00

rpc_conn_pool_size = {{ nova_rpc_conn_pool_size }}

rpc_response_timeout = {{ nova_rpc_response_timeout }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Metadata

Allow metadata_host to be different to LB VIP Changes metadata_host to a var, which defaults to "internal_lb_vip" but can be changed. This allows you to set a metadata_host that is not the internal_lb_vip. Change-Id: Ic1c9d40aedb24596fe2a24f236c49a79028102b8

2016年05月25日 18:50:56 +01:00

metadata_host = {{ nova_metadata_host }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

metadata_port = {{ nova_metadata_port }}

metadata_workers = {{ nova_metadata_workers | default(api_threads) }}

# Network

Ensure that nova and neutron provide consistent DHCP domain values This patch adds the dhcp_domain config entry to nova.conf and implements group_vars to default both nova and neutron's dhcp domain values to be the same. The individual values can still be overridden in user_variables by using nova_dhcp_domain or neutron_dhcp_domain, but it's expected that deployers would like these to be consistent. Change-Id: I97beb78f62aeca2665ff72805056d36ead2adaaa Closes-Bug: #1482045

2015年08月14日 13:38:21 +01:00

dhcp_domain = {{ nova_dhcp_domain }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

force_dhcp_release = True

dhcpbridge_flagfile = /etc/nova/nova.conf

firewall_driver = {{ nova_firewall_driver }}

Nuage nova configuration ansible changes Change-Id: I2f787669441e4881f340c76afbb93c7678610dcb

2016年03月23日 11:26:44 -04:00

use_forwarded_for = {{ nova_network_services[nova_network_type]['use_forwarded_for'] | bool }}

Fix to correctly set the nova_management_address This change sets the nova management address based on the facts the play is able to set about the environment. This will correct configure the nova to use a specific management network which is not always the default container address. Closes-Bug: #1504226 Change-Id: Ib6d84072d379118ebfc560f4594c28e1fecf3b40 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2015年10月08日 11:43:57 -05:00

my_ip = {{ nova_management_address }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

default_floating_pool = public

Replace network_api_class with use_neutron network_api_class config has been deprecated in favor of use_neutron Prior to this change, the nova-compute.log would complain with: "Config mismatch. The network_api_class specifies nova.network.neutronv2.api.API, however use_neutron is not set to True. Using Neutron networking for now, however please set use_neutron to True in your configuration as network_api_class is deprecated and will be removed." Change-Id: I2933565deec42172c9cdc836c5a4b88b44214d07

2016年06月21日 13:25:02 -04:00

use_neutron = True

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Authentication

auth_strategy = keystone

## Vif

linuxnet_interface_driver = {{ nova_linuxnet_interface_driver }}

Change nova_virt_type from lxc to lxd lxc was originally chosen due to faulty documentation and / or error. The correct value should be lxd to avoid confusion, as well as possibly allow for lxc support via libvirt in the future. Change-Id: Id72228ab31e345eecbd4de0031c156622795a1da

2016年08月25日 14:37:14 -04:00

{% if nova_virt_type in ['kvm', 'lxd', 'qemu', 'xen'] %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

libvirt_vif_type = ethernet

Filter libvirt in nova.conf. Add nova_powervm module in nova.virt Filter libvirt in nova.conf. Create nova_powervm symbolic link to nova.virt.nova_powervm module. Change-Id: I479ff18d15097738eb6671d3cdbe66e6ef66cd31

2016年06月30日 16:51:23 +08:00

{% endif %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

vif_plugging_timeout = 10

vif_plugging_is_fatal = False

# Hypervisor

default_ephemeral_format = ext4

# Configdrive

Remove hardcoded config drive enforcement This change removes the forced use of config drive to ensure that a user can choose to use config drive as needed. This adds ability to disable/enable config drive and allows libvirt to listen for connections on tcp as needed for live migrations (prohibited otherwise by config drive). The following new variables were added to os_nova role: nova_force_config_drive nova_libvirtd_listen_tls: 1 nova_libvirtd_listen_tcp: 0 nova_libvirtd_auth_tcp: sasl Change-Id: I1de35a4b3611b8bc33a21930dae3fd38f9aaa151 Closes-Bug: #1468514 DocImpact

2015年06月24日 22:51:41 -05:00

force_config_drive = {{ nova_force_config_drive }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Policy

max_age = {{ nova_max_age }}

Implement Ceilometer This patch implements the implement-ceilometer blueprint. It addes the necessary role/variables to deploy ceilometer with a Mongodb backend. The Monogdb backend is assumed to be up and configured and the playbooks only require a few values to be set in user_variables to establish a connection. Change-Id: I2164a1f27f632ce254cc2711ada2c449a9961fed Implements: blueprint implement-ceilometer

2015年04月06日 14:39:11 +00:00

# Ceilometer notification configurations

{% if nova_ceilometer_enabled %}

instance_usage_audit = True

instance_usage_audit_period = hour

notify_on_state_change = vm_and_task_state

Fix notification_driver option Option "notification_driver" from group "DEFAULT" is deprecated. Use option "driver" from group "oslo_messaging_notifications". Change-Id: I98ccf46b380a28e8ea1995d06321b5af6c461aed

2016年07月18日 19:27:54 +08:00

{% endif %}

{% if nova_ceilometer_enabled %}

[oslo_messaging_notifications]

driver = messagingv2

Fix bug in RPC config that broke Rabbit SSL support The use_rabbit_ssl query parameter is not respected by oslo.messaging's rabbit driver, only the pika driver supports configuration using query parameters at present. Change-Id: I397b56423d9ef6757bada27c92b7c9f0d5126cc9 Implements: blueprint multi-rabbitmq-clusters

2016年07月29日 14:51:48 -04:00

transport_url = rabbit://{% for host in nova_rabbitmq_telemetry_servers.split(',') %}{{ nova_rabbitmq_telemetry_userid }}:{{ nova_rabbitmq_telemetry_password }}@{{ host }}:{{ nova_rabbitmq_telemetry_port }}{% if not loop.last %},{% else %}/{{ nova_rabbitmq_telemetry_vhost }}{% endif %}{% endfor %}

Implement Ceilometer This patch implements the implement-ceilometer blueprint. It addes the necessary role/variables to deploy ceilometer with a Mongodb backend. The Monogdb backend is assumed to be up and configured and the playbooks only require a few values to be set in user_variables to establish a connection. Change-Id: I2164a1f27f632ce254cc2711ada2c449a9961fed Implements: blueprint implement-ceilometer

2015年04月06日 14:39:11 +00:00

{% endif %}

Remove Mitaka Deprecated items This commit removes the following Mitaka deprecated items from the nova template (and their variable definitions, if any): - the managers ```compute_manager``` and ```conductor.manager``` - ```security_group_api``` now that it's discovered with ```use_neutron``` - live/block_migration_flag config options (see also https://review.openstack.org/#/c/263436/) - ```memcached_servers``` from [DEFAULT] (moved to [cache]) Change-Id: I13c503a0ab23c72f90462cbada50424edbaa71b8

2016年07月16日 12:24:40 +01:00

# Cache

[cache]

enabled = true

Adopt oslo_cache.memcache_pool as cache backend By default, oslo_cache uses the dogpile.cache.null backend, which discards access tokens generated by nova-consoleauth. Change-Id: Id8aacf772bd1e615fd4b386b26e4b51315546313 Related-Bug: #1572062

2016年08月19日 16:56:09 -03:00

backend = oslo_cache.memcache_pool

Remove Mitaka Deprecated items This commit removes the following Mitaka deprecated items from the nova template (and their variable definitions, if any): - the managers ```compute_manager``` and ```conductor.manager``` - ```security_group_api``` now that it's discovered with ```use_neutron``` - live/block_migration_flag config options (see also https://review.openstack.org/#/c/263436/) - ```memcached_servers``` from [DEFAULT] (moved to [cache]) Change-Id: I13c503a0ab23c72f90462cbada50424edbaa71b8

2016年07月16日 12:24:40 +01:00

memcache_servers = {{ memcached_servers }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Cinder

[cinder]

Switch Nova/Tempest to use/test Cinder API v2 As per https://blueprints.launchpad.net/cinder/+spec/deprecate-v1-api the Cinder API v1 was designated as deprecated in Juno and was meant to be removed in Kilo, but appears to still be usable in Kilo. This patch configures Nova to use the Cinder v2 API instead of the v1 API. This patch configures Tempest to test both the Cinder v1 and v2 API's for now. Once the API is removed upstream we can change this. DocImpact Closes-Bug: #1481542 Change-Id: I6513c07e1b5d5653b84ad0b2b490ac8451f2bdf1

2015年08月18日 08:17:17 +01:00

catalog_info = volumev2:cinderv2:internalURL

Add configurable option [cinder]/cross_az_attach nova has the configuration option [cinder]/cross_az_attach with a default of True. This option allows attaching between instances and volumes in different availability zones. This commit makes this option configurable in the nova.conf template and uses a default of True. Change-Id: Ia95f3d4447b026a8e93c74a8c65a63dcea89994f Closes-bug: 1457140

2015年06月22日 12:41:06 +01:00

cross_az_attach = {{ nova_cross_az_attach }}

Set cinder service region. Define the local service region for cinder in nova.conf. This is needed when cinder endpoints exist in multiple regions. Change-Id: I6f9a2478b4b4d409f2aaeed105fbdb571c2fafe6

2016年07月23日 08:40:10 -05:00

os_region_name = {{ nova_service_region }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

Add novnc console support This change adds in support for the novnc console type in Nova. * The change adds in a few new variables to the defaults which allow for the novnc console to be configued. * A port entry was added to haproxy to support the console type. * noVNC is being installed from source in the nova_console container. The git repo has been added to the openstack_other.yml repo-package file which allows for the repo to be cloned into the repo containers and then distributed out where needed from within the environment. Closes-Bug: 1428833 Change-Id: I221557aad77bf266b4e2fae23007ffa210aa1f75 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2015年09月25日 20:50:42 -05:00

{% if nova_console_type == 'spice' %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

[spice]

agent_enabled = {{ nova_console_agent_enabled }}

enabled = {{ nova_console_agent_enabled }}

keymap = {{ nova_console_keymap }}

# Console Url and binds

html5proxy_base_url = {{ nova_spice_html5proxy_base_url }}

Fix to correctly set the nova_management_address This change sets the nova management address based on the facts the play is able to set about the environment. This will correct configure the nova to use a specific management network which is not always the default container address. Closes-Bug: #1504226 Change-Id: Ib6d84072d379118ebfc560f4594c28e1fecf3b40 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2015年10月08日 11:43:57 -05:00

server_listen = {{ nova_management_address }}

server_proxyclient_address = {{ nova_management_address }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

Ensure that the vnc console is disabled when spice is enabled The spice and vnc consoles are mutually exclusive with Horizon set to auto-detect the console type. It is also clear from the configuration method that the designed implementation is to deploy only one of them. This patch ensures that only one is enabled at a time by explicitly disabling the vnc console (which defaults to enabled). Change-Id: Ib0368d3d6125e4abe7f9a9c40748457fc0d349f2

2015年10月19日 20:23:08 +01:00

[vnc]

enabled = False

Add novnc console support This change adds in support for the novnc console type in Nova. * The change adds in a few new variables to the defaults which allow for the novnc console to be configued. * A port entry was added to haproxy to support the console type. * noVNC is being installed from source in the nova_console container. The git repo has been added to the openstack_other.yml repo-package file which allows for the repo to be cloned into the repo containers and then distributed out where needed from within the environment. Closes-Bug: 1428833 Change-Id: I221557aad77bf266b4e2fae23007ffa210aa1f75 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2015年09月25日 20:50:42 -05:00

{% elif nova_console_type == 'novnc' %}

[vnc]

enabled = {{ nova_novncproxy_agent_enabled }}

keymap = {{ nova_novncproxy_vnc_keymap }}

novncproxy_base_url = {{ nova_novncproxy_base_url }}

vncserver_listen = {{ nova_novncproxy_vncserver_listen }}

vncserver_proxyclient_address = {{ nova_novncproxy_vncserver_proxyclient_address }}

{% endif %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Glance

[glance]

Nova role should not default vars outside the nova namespace This patch resolves the following: - Removing the default var declaration of glance_api_servers and declaring it within the functional test vars since the role does require the variable be defined. - Fix absence of neutron_openvswitch_agent due to https://review.openstack.org/338129 - Adjust the use of rabbitmq vars to ensure that they're properly namespaced. https://review.openstack.org/339810 Co-Authored-By: Jean-Philippe Evrard <jean-philippe.evrard@rackspace.co.uk> Depends-On: Ibc0a5b70d4da2e905b10b4c1334b57a6f0f3b4ed Change-Id: If33d3ce9e9dfee827a92c9c0813b7c0a18cb8a7b Partial-Bug: #1596084

2016年07月12日 13:38:06 +01:00

api_servers = {{ nova_glance_api_servers }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

# Neutron

[neutron]

url = {{ neutron_service_adminurl }}

region_name = {{ neutron_service_region }}

Resolve oslo_config deprecations in nova.conf Each of the following log messages are resolved by these changes: * Option "auth_plugin" from group "keystone_authtoken" is deprecated. Use option "auth_type" from group "keystone_authtoken". * Option "use_local" from group "conductor" is deprecated for removal. * Option "host" from group "glance" is deprecated for removal. * Option "port" from group "glance" is deprecated for removal. Under the [glance] group the use of api_servers in all cases is the current recommendation per related change-id. As a result, the glance_host and glance_service_port variables which were used to define the deprecated configuration values are used to construct an api_servers value that is backwards-compatible. The glance_host variable is already provided by the OpenStack-Ansible playbook to install nova so no new required role vars are introduced. The glance_host var is not renamed to begin with the nova_ namespace prefix at this time. That change should be introduced in a following patch. The following message is not addressed: * Option "username" from group "keystone_authtoken" is deprecated. Use option "user-name" from group "keystone_authtoken". This is a bogus warning, There is no support for use of user-name in the keystone auth library. Related-To: I8c973e9f325f5b732d827a702a98eff8ca56cbd7 Change-Id: I8697775ccc77c11b4ed2735f40eaf3c68975a16c

2016年03月09日 12:28:28 -08:00

auth_type = password

Upgrade the Keystone library to use v3 In order to enable and deploy federated Keystone, we need to use version 3 of the Keystone API and the v3 Keystone Client. This work begins that transition by having a set of backwards compatible library commands. Specifically, this commit updates the keystone library to use v3 Keystone Client and the usage of ensure_tenant in the os_keystone tasks to use the v3 admin url. In version 3 of Keystone's Endpoints (Catalog) API each endpoint only has one URL and has separate interface types (public, internal, admin). This change updates all uses of ensure_endpoint to structure the endpoint data in a better way for the ensure_endpoint command in the keystone module. As a result, some incidents where internalurl and adminurl were swapped have been fixed. Note: In new deployments the endpoints will be created using the v3 API and will therefore not be available via the v2 API. This will be a breaking change to legacy CLI clients. The openstack CLI should be used instead. DocImpact Related-Bug: #1470635 Partially-implements: blueprint keystone-federation Change-Id: I2cd4f505e850b4b113452abc25ee00d486b1637d

2015年06月29日 23:23:08 -05:00

# Keystone client plugin password option

password = {{ neutron_service_password }}

# Keystone client plugin username option

username = {{ neutron_service_user_name }}

project_name = {{ neutron_service_project_name }}

user_domain_name = {{ neutron_service_domain_name |default("Default") }}

project_domain_name = {{ neutron_service_domain_name |default("Default") }}

# Keystone client plugin authentication URL option

auth_url = {{ keystone_service_adminurl }}

Enable SSL termination for all services This change makes it so that all services are expecting SSL termination at the load balancer by default. This is more indicative of how a real world deployment will be setup and is being added such that we can test a more production like deployment system by default. The AIO will now terminate SSL in HAProxy using a self-signed cert. Change-Id: I913b4140e258b56d56f5323d55fd633288b3ef6a Re-Implementation-Of: https://review.openstack.org/#/c/277199/9 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

2016年02月07日 14:38:30 -06:00

insecure = {{ keystone_service_adminuri_insecure | bool }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

metadata_proxy_shared_secret = {{ nova_metadata_proxy_secret }}

service_metadata_proxy = {{ nova_metadata_proxy_enabled }}

Nuage nova configuration ansible changes Change-Id: I2f787669441e4881f340c76afbb93c7678610dcb

2016年03月23日 11:26:44 -04:00

{% if nova_network_services[nova_network_type]['ovs_bridge'] is defined %}

ovs_bridge = {{ nova_network_services[nova_network_type]['ovs_bridge'] }}

{% endif %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

[conductor]

topic = conductor

workers = {{ nova_conductor_workers | default(api_threads) }}

[keystone_authtoken]

Enable all services to use Keystone 'insecurely' This patch introduces an insecure flag for the Keystone internal and admin endpoints: * keystone_service_adminuri_insecure * keystone_service_internaluri_insecure Both values default to false. If you have setup SSL endpoints for Keystone using an untrusted certificate then you should set the appropriate flag to true in your user_variables. This patch is used to enable testing and development with Keystone SSL endpoints without having to make use of SSL certificates signed by a trusted, public CA. The patch introduces a new optional argument (insecure) to the keystone, glance and neutron Ansible libraries. This is a boolean value which, when true, enables these libraries to access Keystone endpoints 'insecurely'. When these libraries are used in plays, the appropriate value is set automatically as per the above conditions. Implements: blueprint keystone-federation Change-Id: Ia07e7e201f901042dd06a86efe5c6f6725e9ce13

2015年07月07日 21:01:20 +00:00

insecure = {{ keystone_service_internaluri_insecure | bool }}

Update keystone middleware in nova for Kilo Update keystone authentication middleware in nova to support the v3 API in Kilo. Partially implements: blueprint master-kilofication Change-Id: I2f38ed9a5ad82d98596835a59f6852f1bd3d8ffc

2015年04月09日 11:01:17 -05:00

auth_plugin = {{ nova_keystone_auth_plugin }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

signing_dir = {{ nova_system_home_folder }}/cache/api

Revert "Fix auth_url for nova configuration" This reverts commit 58e8d870bc1eea3211ed9cb7a2601bb27b6653c2. opentack-ansible is struggling with tempest failures in the gate due to 503s. Nova api reveals consistent CRITICAL errors with the message "MissingRequiredOptions: Auth plugin requires parameters which were not given: auth_url" Change-Id: If8780ddc85f18f93facc9ee61e773f602f03ccc5

2016年03月09日 22:18:46 +00:00

auth_url = {{ keystone_service_adminuri }}

Update keystone middleware in nova for Kilo Update keystone authentication middleware in nova to support the v3 API in Kilo. Partially implements: blueprint master-kilofication Change-Id: I2f38ed9a5ad82d98596835a59f6852f1bd3d8ffc

2015年04月09日 11:01:17 -05:00

auth_uri = {{ keystone_service_internaluri }}

project_domain_id = {{ nova_service_project_domain_id }}

user_domain_id = {{ nova_service_user_domain_id }}

project_name = {{ nova_service_project_name }}

username = {{ nova_service_user_name }}

password = {{ nova_service_password }}

Define keystone region name. If multiple regions exist, keystone_authtoken should contain region_name. This prevents the nova service from authenticating across regions. Change-Id: I886b730109adef93145c632f03b6c1eb1072bd81

2016年07月19日 10:54:23 -05:00

region_name = {{ keystone_service_region }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

memcached_servers = {{ memcached_servers }}

token_cache_time = 300

revocation_cache_time = 60

# if your memcached server is shared, use these settings to avoid cache poisoning

memcache_security_strategy = ENCRYPT

memcache_secret_key = {{ memcached_encryption_key }}

# if your keystone deployment uses PKI, and you value security over performance:

check_revocations_for_cached = False

Add missing DB configuration for nova-cert and nova-consoleauth The databse configuration is required by the nova-cert and nova- consoleauth services. This change adds nova_console and nova_cert groups to the conditional which checks when to apply the databse configuration. Change-Id: I95531887decb2588a3fbdbe99f307bdc6219d28c Closes-Bug: #1565784

2016年04月04日 10:42:17 -03:00

{% if inventory_hostname in (groups['nova_conductor'] + groups['nova_scheduler'] + groups['nova_api_os_compute'] + groups['nova_api_metadata'] + groups['nova_console'] + groups['nova_cert']) %}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

[database]

Switch from MySQL-python to PyMySQL As part of the cross-project effort [1] to prepare OpenStack for Python3 as the primary Python version used, the decision has been made to switch from using MySQL-python to PyMySQL [2]. This patch switches all OpenStack Services to use the PyMySQL library. [1] https://etherpad.openstack.org/p/liberty-cross-project-python3 [2] https://review.openstack.org/184388 UpgradeImpact Implements: blueprint liberty-release Change-Id: I7532b5dd72cd2f682f1e4ffdf290b741c2185cb3

2015年10月09日 17:25:10 +01:00

connection = mysql+pymysql://{{ nova_galera_user }}:{{ nova_container_mysql_password }}@{{ nova_galera_address }}/{{ nova_galera_database }}?charset=utf8

Allow configuration of Nova SQLAlchemy options Add variables for the following 3 nova.conf vars: max_overflow (default 10) max_pool_size (default 5) pool_timeout (default 30) This allows for sql tuning to better support bulk operations (boot/delete) with the ability to define custom values in nova.conf based on business needs. Change-Id: Ic427e6822f636a304cbbfaab5ac74a13e912da0f Closes-Bug: #1447389

2015年04月29日 16:07:29 -07:00

max_overflow = {{ nova_db_max_overflow }}

max_pool_size = {{ nova_db_max_pool_size }}

pool_timeout = {{ nova_db_pool_timeout }}

Add support for the nova_api db This change adds in the nova_api db migration that has to happen within mitaka. This is a new required DB though the DB entry has existed since Kilo. Change: * The change brings in two new DB create commands as well as an additional task to execute the nova api_db sync. * Additionally, new DB tunings were added to the defaults file. Re-Implementation-Of: https://review.openstack.org/#/c/274932/9 UpgradeImpact Signed-off-by: Kevin Carter <kevin.carter@rackspace.com> Change-Id: If63b541bfaf91333ac5963d391e6058ac8254eec

2016年02月01日 17:03:47 -06:00

[api_database]

connection = mysql+pymysql://{{ nova_api_galera_user }}:{{ nova_api_container_mysql_password }}@{{ nova_api_galera_address }}/{{ nova_api_galera_database }}?charset=utf8

max_overflow = {{ nova_api_db_max_overflow }}

max_pool_size = {{ nova_api_db_max_pool_size }}

pool_timeout = {{ nova_api_db_pool_timeout }}

Convert existing roles into galaxy roles This change implements the blueprint to convert all roles and plays into a more generic setup, following upstream ansible best practices. Items Changed: * All tasks have tags. * All roles use namespaced variables. * All redundant tasks within a given play and role have been removed. * All of the repetitive plays have been removed in-favor of a more simplistic approach. This change duplicates code within the roles but ensures that the roles only ever run within their own scope. * All roles have been built using an ansible galaxy syntax. * The `*requirement.txt` files have been reformatted follow upstream Openstack practices. * Dynamically generated inventory is now more organized, this should assist anyone who may want or need to dive into the JSON blob that is created. In the inventory a properties field is used for items that customize containers within the inventory. * The environment map has been modified to support additional host groups to enable the seperation of infrastructure pieces. While the old infra_hosts group will still work this change allows for groups to be divided up into seperate chunks; eg: deployment of a swift only stack. * The LXC logic now exists within the plays. * etc/openstack_deploy/user_variables.yml has all password/token variables extracted into the separate file etc/openstack_deploy/user_secrets.yml in order to allow seperate security settings on that file. Items Excised: * All of the roles have had the LXC logic removed from within them which should allow roles to be consumed outside of the `os-ansible-deployment` reference architecture. Note: * the directory rpc_deployment still exists and is presently pointed at plays containing a deprecation warning instructing the user to move to the standard playbooks directory. * While all of the rackspace specific components and variables have been removed and or were refactored the repository still relies on an upstream mirror of Openstack built python files and container images. This upstream mirror is hosted at rackspace at "http://rpc-repo.rackspace.com" though this is not locked to and or tied to rackspace specific installations. This repository contains all of the needed code to create and/or clone your own mirror. DocImpact Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk> Closes-Bug: #1403676 Implements: blueprint galaxy-roles Change-Id: I03df3328b7655f0cc9e43ba83b02623d038d214e

2015年02月14日 10:06:50 -06:00

{% endif %}