80 Commits
Author SHA1 Message Date
Alberto Murillo 6e963a56e2 ciao: Install the latest ciao-cnci-agent into cnci image
The latest ciao cnci image (at the time of this commit) is based
on clearlinux 8260 which contains an old version of cnci agent.

This commit fetchs the latest ciao-cnci-agent binary and its
assosiated service file and injects them into the cnci image

- Update clearlinux image url to 8740
- Update ciao cnci image url to 8260
- Inject ciao-cnci-agent into cnci image
- Inject ciao-cnci-agent.service into cnci image

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.4
2016-06-14 18:34:00 -05:00
Alberto Murillo 490fde6e43 ciao: Make use of ciao configuration
Ciao configuration implements an API for ciao components
to fetch and store cluster configuration data from a
specific storage backend.

ciao-scheduler reads the configuration from the backend
and propagates it to other components through SSNTP

More detailed information can be found at:
https://github.com/01org/ciao/tree/master/configuration

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-06-14 16:41:02 -05:00
Alberto Murillo d037427cc9 Merge pull request #15 from obedmr/ciao/datastore
Add datastore paths in ciao-controller command
2016-05-30 15:02:34 -05:00
Munoz, Obed N 1454de7742 [ciao-controller] Add datastore paths in ciao-controller command
Signed-off-by: Munoz, Obed N <obed.n.munoz@intel.com>
2016-05-30 14:47:41 -05:00
Alberto Murillo 818ce5b7c5 ciao-controller: rename cloud-init user
- let cloud-init create a user named 'demouser' which
describes better the intent of the user and because
'ciao' is already taken by a system user

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.3
2016-05-19 11:12:18 -05:00
Alberto Murillo 49b0cd86b3 os-glance: use fqdn for endpoint url
- Use fqdn in the endpoint url no matter if you
defined an ip, hostname or fqdn in the hosts file.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-19 11:12:15 -05:00
Alberto Murillo 9ea5a8356e Merge pull request #13 from erick0z/swift_https_endpoint
os-swift: enable https endpoint
2016-05-18 16:53:51 -05:00
Cardona Ruiz, Erick a200b8191e os-swift: enable https endpoint
- Enforce SSL connections from openstack clients to swift proxy

Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-05-18 16:46:26 -05:00
Alberto Murillo fd72dbb94c Merge pull request #12 from erick0z/fix_cinder_ssl_dir
os-cinder: Fix ssl certs path
2016-05-18 15:12:37 -05:00
Cardona Ruiz, Erick 1b37fc586c os-cinder: Fix ssl certs path
- Add /etc/keystone/ssl/server as a certificates path.

Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-05-18 14:41:18 -05:00
Alberto Murillo ebd586307e examples ciao: add glance_fqdn var
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.2
2016-05-18 10:48:26 -05:00
Alberto Murillo 4730dfc4fd ciao-compute: update clearlinux image
- Use a newer release of clearlinux cloud image
with fixes for sudo.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.1
2016-05-17 15:58:12 -05:00
Alberto Murillo e07475a54b ciao-controller: Retrieve cacert from keystone node
- Keystone might be installed in a different machine
than the controller node.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-17 15:58:12 -05:00
Alberto Murillo baec03ac04 ciao: add handlers to restart services
- ciao-common: add handler to reload systemd config files
- ciao-controller: add handler to restart controller service
- ciao-controller: add handler to restart scheduler service
- ciao-compute: add handler to restart compute service
- ciao-network: add handler to restart network service

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-17 15:58:12 -05:00
Alberto Murillo 0f3d8fadd2 Merge pull request #11 from erick0z/cinder_https_endpoint
Cinder: https endpoint
2016-05-17 14:53:39 -05:00
Cardona Ruiz, Erick e9fb18574b os-cinder: https endpoint
- Add support of running cinder-api with ngingx and uwsgi in order to accept SSL
  - Enforce https endpoint for cinder and cinderv2 APIs

Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-05-17 14:22:55 -05:00
Alberto Murillo 6db61996ef os-glance: use ca file
- Use CA certificate to communicate to keystone
instead of using the insecure option.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-17 11:51:30 -05:00
Alberto Murillo a16ec4d2dc ciao: Fix example vars file
- Add was missing glance variables
- Add quotes to ciao_mgmt_subnet variable

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-16 18:05:25 -05:00
Alberto Murillo 931e9d32bf os-glance: Enable SSL on glance api
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-16 18:00:35 -05:00
Alberto Murillo 367b6a4d33 os-common: Add restart nginx handler
- Removes restart nginx handler from os-keystone and adds it to
os-common so it can be used by other services.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-16 18:00:35 -05:00
Alberto Murillo 9f47db5854 os-keystone: move certificates to /etc/keystone
- Move api certificates from /etc/nginx/ssl to a per-application directory
like /etc/keystone/ssl

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-16 18:00:35 -05:00
Alberto Murillo b07889bb07 os-common: Fix keystone_fqdn var
- keystone_fqdn is used from different roles so it should default to
the ansible_fqdn variable for the first host under openstack_identity
section.

Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
2016-05-16 18:00:35 -05:00
Alberto Murillo 4858e58c5d Merge pull request #10 from leoswaldo/master
Add creation of systemd configuration files directory
2016-05-16 17:43:22 -05:00
Leoswaldo Macias f1e36de006 ciao-common: create systemd config dir
The creation of this directory will allow to create configuration files
for systemd units of ciao components.

Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
2016-05-16 17:19:46 -05:00
Alberto Murillo e58de40323 CIAO: Add playbooks
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
3.0
2016-05-12 14:16:10 -05:00
Alberto Murillo 9f72445be4 Merge pull request #9 from leoswaldo/feature_cinder_role
Cinder: Add role
2016-05-11 15:27:26 -05:00
erick0zcr 7c307650eb Cinder: Add role
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-05-11 09:37:24 -05:00
Alberto Murillo 1c1ed989be Merge pull request #8 from erick0z/feature_swift_sslauth
Add SSLAuth support to swift
2016-05-06 16:21:08 -05:00
Erick Cardona cc0be7a888 Swift: add SSL auth
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-05-06 16:14:38 -05:00
Alberto Murillo 3bc887bffb Remove openstack components not used in CIAO from README 2016-05-03 17:47:39 -05:00
Alberto Murillo 6f45275537 Force ssl on keystone 2016-05-02 16:35:21 -05:00
Alberto Murillo 2ff18f59b4 Prune non CIAO components 2016-05-02 16:26:26 -05:00
Munoz, Obed N da31abd4d0 Add Swift to Supported components list
Signed-off-by: Munoz, Obed N <obed.n.munoz@intel.com>
2016-04-29 10:50:49 -05:00
Alberto Murillo 88dc7a6777 Use keystone_fqdn for all endpoints.
There is the case when you specify the ip address or even 'localhost'
in the hosts file but the endpoints should always point to the fqdn.
2.6
2016-04-28 16:34:37 -05:00
Alberto Murillo 9b3d0e32a5 Merge pull request #7 from leoswaldo/mysql_localhost
Enable localhost connections for mysql users
2016-04-28 14:18:58 -05:00
Alberto Murillo 526cab3a5c Merge pull request #6 from erick0z/feature_swift_role
Feature swift role
2016-04-28 14:17:56 -05:00
Leoswaldo Macias e5b4246ce0 Enable localhost connections for mysql users
Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
2016-04-28 14:17:02 -05:00
Cardona Ruiz, Erick f076a2f2fc Add swift role
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
2016-04-27 10:36:44 -05:00
Alberto Murillo 2e058ffcb0 Sync ceph roles 2.5 2016-04-25 10:42:13 -05:00
Alberto Murillo 5d42d9d609 Add keystone ssl variables into sample variables file. 2.4 2016-04-22 11:13:17 -05:00
Alberto Murillo bebb96fd0b Remove rabbitmq settings
- Keystone and glance doesnt really use rabbitmq. However these values
are configured by devstack and thus ended up on this playbooks.
2016-04-22 10:54:17 -05:00
Alberto Murillo a61ef02636 Add public_interface var
- Remove nova_public_interface_name and neutron_public_interface_name
since both are referring to the same thing, the interface where services
will run on that node.

- Add public_interface var with default value of the interface name
with a configured default gateway (ansible_default_ipv4.alias)

- Remove common_interface_detect.yml since it was testing for groups
names that might not be defined when deploying only keystone without
nova and neutron
2016-04-22 10:46:48 -05:00
Alberto Murillo 7fbd2ce7cd Stateless support for horizon.
Enable /etc/horizon/local_settings.d/*.py configuration files
2.3
2016-04-19 16:57:29 -05:00
Alberto Murillo 620226c859 Allow glance,nova,neutron and heat to communicate to
keystone via SSL
2016-04-19 16:13:28 -05:00
Alberto Murillo b181be3a95 Add support for SSL to keystone 2016-04-18 17:58:34 -05:00
Alberto Murillo a3eb75b4d6 Install a default openssl.cnf
openssl needs a /etc/ssl/openssl.cnf file to create certificates.
2016-04-18 17:57:25 -05:00
Alberto Murillo 9642b4dfd8 Include Ansible-OpenSSL role
This role was taken from
https://github.com/rclayton-the-terrible/Ansible-OpenSSL
2016-04-18 17:57:25 -05:00
Obed N Munoz 176740ec36 Merge pull request #4 from albertomurillo/keystone
Keystone
2016-04-15 17:20:39 -05:00
Alberto Murillo d42233ae8b Do not print passwords on stdout
os-keystone and os-heat where leaking user passwords
on the stdout of ansible-playbook run.
2016-04-15 16:11:53 -05:00
Alberto Murillo 224dcb115c Create users roles services and projects from the playbook. 2016-04-15 15:50:32 -05:00