openstack/puppet-openstack-integration - puppet-openstack-integration - OpenDev: Free Software Needs Free Tools

Before create and add swap on system, check whether swapfile
is mounted. If so, try to swapoff the swapfile and remove it.
Change-Id: Ic3a9ffc34872a83a491412237369442f369c21d1

This sets the IP for Zaqar vhost. It also configures SSL for the HTTPd
service.
Change-Id: Iccd96c8c476a7c372f7a92a8b6be57e031cd31bd

Trove was not deployed because of a typo.
Change-Id: I238a1bf833f712070559a894fb8e4b6e3a93e034

Change-Id: I05fd6c451da98d3e4021b79d4e51667006435df1

Change-Id: Ia326d825c8d0610beb5e84f37eaacd4c7ae1f42a

The ceph repo for Ubunto was broken and pointed to
http://mirror.centos.org/centos/7/storage/x86_64/ceph-jewel/dists/xenial/main/binary-amd64/Packages
[1].
Furthermore epel activation/deactivation makes no sense on Ubuntu
platform.
[1] http://logs.openstack.org/65/432165/19/check/gate-puppet-vswitch-puppet-beaker-rspec-ubuntu-xenial/daad266/console.html#_2017年04月03日_05_13_45_306095
Closes-Bug: #1678932
Change-Id: I5d3c75b14145d3f55eec5f019b962cc4888404e5

Change-Id: I6aa5b7d9f0b75201ab5f674232ade307f9c398ce

Beaker jobs don't exectute run_tests.sh so they can't find the actual
mirror that needs to be used in OpenStack Infra. Let's use pick so we
can fallback to the rdoproject server on that case.
Change-Id: I9fcfed06fbad0a2c1a82133dcf727ac2f8eaca9e

Change-Id: I0afacba3cd67b8eebb5de23b575a4740e565a67b

Currently, openstack-infra has create an proxy cache of
trunk.rdoproject.org. This is a short term solutions until we add RDO
to our AFS mirrors. Update repo.pp to start using it.
We also use the direct hash from delorean.repo, to avoid potential
issue where packages chages on remote node after we start downloading
things.
Change-Id: Id1819cf0dc49a89256a971ce9d8420622db901e8
Signed-off-by: Paul Belanger <pabelanger@redhat.com>

Change-Id: Ib051d713ce4d4110ff315315e23779e53bef0493
Closes-Bug: #1677459 

We don't need this workaround anymore, we got a promotion with fixed package.
This reverts commit 2348c0c847.
Change-Id: I6f77b4f0978f80b05ad1b39257c490fa01fa7f05

Until now, we were only supporting the Ceph mirrors for Ubuntu platform.
- Enforce http for OpenStack Infra AFS mirrors (https is not supported
 yet)
- Set CEPH_MIRROR_HOST to the right mirror depending of the platform
- Force https when possible
Change-Id: Ica91b23c0954ccee17ea13903048b6133758f9f3

Watcher recently added gnocchiclient as a requirement but packaging
does not have it yet so to clear up CI while we wait, let's just include
it for now.
Change-Id: Ic7d7f3bf7fec6e6689529836a6dd68bbaf8ae75c

Currently it's set to [::1] which is not longer
accepted as valid after https://review.openstack.org/#/c/448849/
Change-Id: If51e1884d665481b461f4968985c16b024d539a4

It would be helpful when debugging beaker or p-o-i jobs to have the list
of gems so we can easily compare with previous CI runs and make a diff
very quickly.
Change-Id: I6801c18fe345378b15b5f5be9ff0c5e9124bfa1a

Change-Id: Ic85df072aaca8e0193ced68ad9ea746eea7baa6b

Change-Id: I3db082a4e74ef1d2852a64f884ba77484f5ae2b8

The UCA pike repo has been populated with a clone of ocata for now and
will be updated at m1.
Change-Id: I92848568d33226b718cc659af037e96ae6598e4f

Change-Id: I138a96d957bf1cd2dc7f713ed85a2b2349f110a1

choose a test without heat
checking a basic functionality of vitrage
sending an event to raise an alarm and see it in vitrage
Change-Id: I0bc2eb459e1ac4458833bac2d319a94b23b98b6a

Add fernet keys rotations to our testing.
- Rotate keys every 5 minutes
- Maintain tokens valid 10 minutes
- Keep 4 active keys: (token_expiration / rotation_frequency) +2
 10 / 2 + 2 = 4
The frequencies are very short but that way we can have a real scenario
of fernet keys rotations in our CI jobs where Tempest runs during ~15
minutes.
See example on:
https://docs.openstack.org/admin-guide/identity-fernet-token-faq.html
Change-Id: I3d4133ee3a0e3dc52586a6d671d7ef85a9e886d0
Depends-On: I125e81d8cd130fadb8271f1b7bcdcf9794c79f47

There is a permanent redirection from http to https in buildlogs, cbs
and trunk repos that might create issues when the redirection fails for
some reasons.
Let's use https directly.
Change-Id: I6cb60e63b3a366c5e9b7f0b2c036fd15fa0d9492

Now when set network port_security_enabled to false,
return {"NeutronError": {"message": "Unrecognized attribute(s)
'port_security_enabled'", "type": "HTTPBadRequest", "detail": ""}}
Change-Id: If59d1b25c557eebb8a9b9db24e7bd209373d6720

We're now well past ocata-m3, so lets remove the exclusions we had for
issues with ocata ubuntu packages.
Change-Id: I7af84157a6c91c58981108747549c15ff8feb80a

The pike version of the delorean deps exists now, lets use it.
Change-Id: I238fa16abd22f8b4666d42dd72a2b651ee5df5f7

If we don't, the default 'all' is used, which means tempest executes all
tests irrespective of whether the setup supports all those extensions,
or not. For example, trunk service plugin is not enabled by the repo;
neither port_security ml2 extension driver is. If a test that requires
any of those features land in tempest repo, the gate will immediately
break. Actually, tempest already has some tests for port_security, but
they are not executed at the moment by the virtue of a special
port_security config option that is False by default. That may change in
the future [1].
It's good practice to explicitly configure the list of extensions that
are known to work for the setup in question.
[1] I471575bdc106e1a6d1ecdb313dbe77b4102d8f15
Change-Id: I323ff03c5798a41de4870ed99e71ed5a9456a6af
Depends-On: I31105600dfd5632ec4341b35ca3e8a13af3bb945

The orchestration should be managed in puppet-keystone, not here.
We are changing it here:
https://review.openstack.org/445681
Change-Id: I0bafdf747405ec9fb3375a32c0660586c64fa316

We want to validate compute services with ssh connection, to catch more
issues in our CI, so enable this option which is disabled by default in
Tempest.
Depends-On: I5edc8c2a33c29c64dc2ff49300b550f145415185
Change-Id: Idd07337f936613471227f689e774db21eb2d8477

Change-Id: I4c4e92719d51e865701b3616172094a69310dc6b

The enable_notifications option has beed deprecated and will be
removed in puppet-sahara. So we can remove it.
Change-Id: I2d3dff9ae45b8e409c5deecc9dfb70b3555a99e4

We are hitting timeouts in IO bound processes as swift but we
don't have much information about what processes are causing
this IO peaks.
This patch adds iotop and iostat information to the logs in
addition to dstat output.
Change-Id: I4c50d4405a923eb2652fc39f6cea9889597ae44e