aboutsummaryrefslogtreecommitdiffstats
path: root/deployment/noheat/infra-openstack/ansible/group_vars
AgeCommit message (Collapse)AuthorFilesLines
2022-10-12noheat: Upgrades, refactor, deploy DevstackMaciej Wereski5-3/+36
* Revert "Enable VID" (this reverts commit 2223bfaffa8fe5fb90c578ec71a035f001b9ce22) * make sure ca-certificates is current * add ability to configure Docker daemon * upgrade Ubuntu to 20.04 * update tools, dependencies, Ansible Galaxy collections, Docker, RKE, k8s & charts * make Prometheus & MetalLB optional * deploy Istio * use copy instead of ansible.posix.synchronize * Allow to set IP address pools in OpenStack * fix ansible-lint issues * split big tasks files into smaller ones * migrate to ansible-core * add 'make onap' task * add Devstack deployment * fix NFS exports * add Strimzi * install Docker on operator * override Nexus only on hosts that need it * ability to set override file (sm-onap is default) * ability to set ONAP (OOM) branch * ability to set Devstack version * add playbook to deploy everything * describe how to run playbooks * save operator0 access information * install Galaxy deps with dedicated module Issue-ID: INT-1601 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I88cfeeaf281c175340b63909983251ecd62eeb00
2022-09-30noheat: improvements for infra setup and Helm push pluginRado Chmiel1-0/+7
* set remote_src in helm installation * add umount to clean up nfs mountpoint * fix pip executable error for Ubuntu 20.04 * make separate volume usage for instances optional * add ability to set public DNS servers to network creation * change installation method to command since current stable release of kubernetes.core doesnt support versioning * hardcode helm push plugin version to 0.9.0 Issue-ID: INT-1601 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I5d374db779f6fc1f165eb5efe9b69b8a05c9f388
2021-08-24noheat deployment: use nfs0 as nexus3 bastionMaciej Wereski1-1/+1
Bastion rules may cause DNS malfunction sometimes. It won't be an issue on NFS server but might be on control or operator host. Issue-ID: INT-1601 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I23f49a20257c34475ed02f4c0df036f0ded450f4
2021-04-30Set up network for in-cluster deployment stagePawel Wieczorek2-0/+4
This patch adds new network traffic exceptions to the infrastructure setup step. This change has to be done during the infrastructure setup step because OpenStack client is not available from within the cluster. Issue-ID: INT-1601 Change-Id: I5adbce6197d8de6ab2bf7f54c73d6003442674da Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2021-04-28Prepare operation machine for in-cluster deployment stagePawel Wieczorek2-0/+2
This patch creates an in-cluster inventory based on the dynamic one from creating OpenStack VMs. It will be used at the next deployment stage. This patch also adds missing documentation on required software to run these Ansible playbooks. Issue-ID: INT-1601 Change-Id: Ibf009a2530de989b1927a7a4a2f328fa61c1dd55 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2021-01-29Divide host group into cluster and operation instancesPawel Wieczorek2-4/+12
Issue-ID: INT-1601 Change-Id: I799f15077437bcd836c5a38a004d974eed64f707 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2021-01-07Allow using multiple remote IP prefixes for security groupsPawel Wieczorek2-2/+5
This patch is required for allowing machine-to-machine traffic within ONAP cluster with no Vagrant operator involvement. Issue-ID: INT-1601 Change-Id: I0159b3176ecb3e5783f4f87b9b507824fc411b2b Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2021-01-07Allow operator access to the clusterPawel Wieczorek2-55/+74
This patch creates operator keypair and deploys its public key to all machines in the cluster. Previously cluster could be accessed from OpenStack admin machine only. Additional information added to the "all.yml*" group variables allowed keeping current roles generic and flexible. Issue-ID: INT-1601 Change-Id: I6b289ff9a8c9ebe04562671b8f4b4468b543723f Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2021-01-07Add Ubuntu Bionic image to the DevStack instancePawel Wieczorek1-2/+2
Image "cirros-0.5.1-x86_64-disk" will no longer be suitable for testing ONAP infrastructure deployment because it lacks Python interpreter. Python is required for provisioning ONAP infrastructure VMs using Ansible. Issue-ID: INT-1601 Change-Id: I68aa4d941350b1abf32b4d2bc00cbee489af6587 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Use external volumes for OpenStack virtual machinesPawel Wieczorek2-0/+7
This allows easier storage quota changes (without the need to modify flavors). Issue-ID: INT-1601 Change-Id: I0fe7557ff6f23eb0e29314ee0d4819893583a294 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Add hosts configuration for Service Mesh ONAPPawel Wieczorek1-0/+53
Added configuration resembles set of instances already in use for Service Mesh Proof-of-Concept purposes. Floating IPs were disabled on Worker and NFS nodes to limit resource usage. Issue-ID: INT-1601 Change-Id: Ie575c37344da21e71a8e0803e2e5bd2db18d9290 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Make Vagrant-based environment safe defaultsPawel Wieczorek2-19/+20
Having a symlink instead of actual file allows having less changes between upstream repository and on-premise deployment. This patch does not affect development environment in any way. Issue-ID: INT-1601 Change-Id: I489c7ce7084d48ba03962e44d64f56c316bcc56a Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Add Ansible roles for OpenStack security groupsPawel Wieczorek1-0/+5
Additional OpenStack security group and its rules are required to allow traffic to virtual machines created on DevStack. Virtual machines will be accessible from 172.24.4.0/24 network (default public IP pool). Issue-ID: INT-1601 Change-Id: I902f64f542197e329e21790f98662d2e408d4bb6 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Add Ansible roles for OpenStack hostsPawel Wieczorek1-1/+11
Key pair is generated upon host creation and removed after the host is destroyed. This patch is based on previous work by: Krzysztof Opasiak <k.opasiak@samsung.com> Issue-ID: INT-1601 Change-Id: I9acd0b68a3ee79a0d710c40e0a1cc8470dfacce5 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-07-30Add Ansible roles for OpenStack networkPawel Wieczorek1-0/+4
This patch also adds Vagrant provisioners for creating and destroying OpenStack infrastructure. These are set to never run (unless explicitly called by the operator) because DevStack instance on a separate machine might not be ready to provide OpenStack API. This patch is based on previous work by: Krzysztof Opasiak <k.opasiak@samsung.com> Test harness is based on blog post [1] by: Chris Morgan <me@chrismorgan.info> [1] https://chrismorgan.info/blog/make-and-git-diff-test-harness Issue-ID: INT-1601 Change-Id: I031ca7a5a43cca0258dc0dc9e0339182c431898a Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>