clearlinux/clear-config-management
2
0
Fork 0
mirror of https://github.com/clearlinux/clear-config-management.git synced 2026-09-05 05:01:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
70 Commits 8 Branches 32 Tags
3.2
Commit Graph
70 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alberto Murillo ebd586307e examples ciao: add glance_fqdn var 
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.2 		2016-05-18 10:48:26 -05:00
Alberto Murillo 4730dfc4fd ciao-compute: update clearlinux image 
- Use a newer release of clearlinux cloud image
with fixes for sudo.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.1 		2016-05-17 15:58:12 -05:00
Alberto Murillo e07475a54b ciao-controller: Retrieve cacert from keystone node 
- Keystone might be installed in a different machine
than the controller node.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-17 15:58:12 -05:00
Alberto Murillo baec03ac04 ciao: add handlers to restart services 
- ciao-common: add handler to reload systemd config files
- ciao-controller: add handler to restart controller service
- ciao-controller: add handler to restart scheduler service
- ciao-compute: add handler to restart compute service
- ciao-network: add handler to restart network service

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-17 15:58:12 -05:00
Alberto Murillo 0f3d8fadd2 Merge pull request #11 from erick0z/cinder_https_endpoint 
Cinder: https endpoint
 2016-05-17 14:53:39 -05:00
Cardona Ruiz, Erick e9fb18574b os-cinder: https endpoint 
- Add support of running cinder-api with ngingx and uwsgi in order to accept SSL
  - Enforce https endpoint for cinder and cinderv2 APIs

Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
 2016-05-17 14:22:55 -05:00
Alberto Murillo 6db61996ef os-glance: use ca file 
- Use CA certificate to communicate to keystone
instead of using the insecure option.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-17 11:51:30 -05:00
Alberto Murillo a16ec4d2dc ciao: Fix example vars file 
- Add was missing glance variables
- Add quotes to ciao_mgmt_subnet variable

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-16 18:05:25 -05:00
Alberto Murillo 931e9d32bf os-glance: Enable SSL on glance api 
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-16 18:00:35 -05:00
Alberto Murillo 367b6a4d33 os-common: Add restart nginx handler 
- Removes restart nginx handler from os-keystone and adds it to
os-common so it can be used by other services.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-16 18:00:35 -05:00
Alberto Murillo 9f47db5854 os-keystone: move certificates to /etc/keystone 
- Move api certificates from /etc/nginx/ssl to a per-application directory
like /etc/keystone/ssl

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-16 18:00:35 -05:00
Alberto Murillo b07889bb07 os-common: Fix keystone_fqdn var 
- keystone_fqdn is used from different roles so it should default to
the ansible_fqdn variable for the first host under openstack_identity
section.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
 2016-05-16 18:00:35 -05:00
Alberto Murillo 4858e58c5d Merge pull request #10 from leoswaldo/master 
Add creation of systemd configuration files directory
 2016-05-16 17:43:22 -05:00
Leoswaldo Macias f1e36de006 ciao-common: create systemd config dir 
The creation of this directory will allow to create configuration files
for systemd units of ciao components.

Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
 2016-05-16 17:19:46 -05:00
Alberto Murillo e58de40323 CIAO: Add playbooks 
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.0 		2016-05-12 14:16:10 -05:00
Alberto Murillo 9f72445be4 Merge pull request #9 from leoswaldo/feature_cinder_role 
Cinder: Add role
 2016-05-11 15:27:26 -05:00
erick0zcr 7c307650eb Cinder: Add role 
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
 2016-05-11 09:37:24 -05:00
Alberto Murillo 1c1ed989be Merge pull request #8 from erick0z/feature_swift_sslauth 
Add SSLAuth support to swift
 2016-05-06 16:21:08 -05:00
Erick Cardona cc0be7a888 Swift: add SSL auth 
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
 2016-05-06 16:14:38 -05:00
Alberto Murillo 3bc887bffb Remove openstack components not used in CIAO from README 2016-05-03 17:47:39 -05:00
Alberto Murillo 6f45275537 Force ssl on keystone 2016-05-02 16:35:21 -05:00
Alberto Murillo 2ff18f59b4 Prune non CIAO components 2016-05-02 16:26:26 -05:00
Munoz, Obed N da31abd4d0 Add Swift to Supported components list 
Signed-off-by: Munoz, Obed N <obed.n.munoz@intel.com>
 2016-04-29 10:50:49 -05:00
Alberto Murillo 88dc7a6777 Use keystone_fqdn for all endpoints. 
There is the case when you specify the ip address or even 'localhost'
in the hosts file but the endpoints should always point to the fqdn.
2.6 		2016-04-28 16:34:37 -05:00
Alberto Murillo 9b3d0e32a5 Merge pull request #7 from leoswaldo/mysql_localhost 
Enable localhost connections for mysql users
 2016-04-28 14:18:58 -05:00
Alberto Murillo 526cab3a5c Merge pull request #6 from erick0z/feature_swift_role 
Feature swift role
 2016-04-28 14:17:56 -05:00
Leoswaldo Macias e5b4246ce0 Enable localhost connections for mysql users 
Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
 2016-04-28 14:17:02 -05:00
Cardona Ruiz, Erick f076a2f2fc Add swift role 
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
 2016-04-27 10:36:44 -05:00
Alberto Murillo 2e058ffcb0 Sync ceph roles 2.5 2016-04-25 10:42:13 -05:00
Alberto Murillo 5d42d9d609 Add keystone ssl variables into sample variables file. 2.4 2016-04-22 11:13:17 -05:00
Alberto Murillo bebb96fd0b Remove rabbitmq settings 
- Keystone and glance doesnt really use rabbitmq. However these values
are configured by devstack and thus ended up on this playbooks.
 2016-04-22 10:54:17 -05:00
Alberto Murillo a61ef02636 Add public_interface var 
- Remove nova_public_interface_name and neutron_public_interface_name
since both are referring to the same thing, the interface where services
will run on that node.

- Add public_interface var with default value of the interface name
with a configured default gateway (ansible_default_ipv4.alias)

- Remove common_interface_detect.yml since it was testing for groups
names that might not be defined when deploying only keystone without
nova and neutron
 2016-04-22 10:46:48 -05:00
Alberto Murillo 7fbd2ce7cd Stateless support for horizon. 
Enable /etc/horizon/local_settings.d/*.py configuration files
2.3 		2016-04-19 16:57:29 -05:00
Alberto Murillo 620226c859 Allow glance,nova,neutron and heat to communicate to 
keystone via SSL
 2016-04-19 16:13:28 -05:00
Alberto Murillo b181be3a95 Add support for SSL to keystone 2016-04-18 17:58:34 -05:00
Alberto Murillo a3eb75b4d6 Install a default openssl.cnf 
openssl needs a /etc/ssl/openssl.cnf file to create certificates.
 2016-04-18 17:57:25 -05:00
Alberto Murillo 9642b4dfd8 Include Ansible-OpenSSL role 
This role was taken from
https://github.com/rclayton-the-terrible/Ansible-OpenSSL
 2016-04-18 17:57:25 -05:00
Obed N Munoz 176740ec36 Merge pull request #4 from albertomurillo/keystone 
Keystone
 2016-04-15 17:20:39 -05:00
Alberto Murillo d42233ae8b Do not print passwords on stdout 
os-keystone and os-heat where leaking user passwords
on the stdout of ansible-playbook run.
 2016-04-15 16:11:53 -05:00
Alberto Murillo 224dcb115c Create users roles services and projects from the playbook. 2016-04-15 15:50:32 -05:00
Alberto Murillo a66fc18d59 Create keystone nginx configuration in /etc 
keystone nginx configuration should be created in /etc since we now
provide variables to change the port where keystone listens and
we do not want to overwrite files in /usr/share/nginx/
2.2 		2016-04-15 15:20:18 -05:00
Obed N Munoz 4ae849a97a Merge pull request #3 from albertomurillo/keystone 
Set variables for keystone ports
 2016-04-15 14:43:38 -05:00
Alberto Murillo dfaa763d6b Set variables for keystone ports 
- Sometimes non-standard ports like 35357 and 5000 are blocked on the
firewall. This patch creates keystone_admin_port and keystone_user_port
variables with default values of 35357 and 5000 to permit the user to
deploy keystone on another port.
 2016-04-15 14:40:04 -05:00
Alberto Murillo bac4ec2313 Remove keystone's admin_token references. 2016-04-13 14:55:53 -05:00
Alberto Murillo 4329b6ede3 Update playbooks to use database-mariadb bundle 
database-mariadb-dev bundle should be used only for dev purposes.
database-mariadb was updated to include the python mysql driver.
2.1 		2016-04-12 17:47:53 -05:00
Simental Magana, Marcos 43ce939539 update OpenStack roles to Mitaka release 
Signed-off-by: Simental Magana, Marcos <marcos.simental.magana@intel.com>
2.0 		2016-04-11 12:01:08 -05:00
Simental Magana, Marcos 7de3e94e04 cleanup groups_vars/all file 2016-04-11 11:57:07 -05:00
Leoswaldo Macias 6053263397 Enable socket to be up not service 
Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
 2016-04-11 10:03:18 -05:00
Leoswaldo Macias 1cfe518464 Remove unecessary files 
Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
 2016-04-08 16:20:40 -05:00
Obed N Munoz dcd04e1a98 Merge pull request #1 from mrkz/mitaka_update_demo 
Update the demo user/project creation for mitaka
 2016-04-08 09:59:05 -05:00