As rest of the files are follow the same pattern
So in same manner following the same for fluentd format config

Change-Id: I114e3a09e9747085adcc06caa419d5ebe61cec7b

Removed extra line

Change-Id: I519b8a58a67300d25e2dffa65015f879b9b1d322

Fluentd custom output and filter configs target directory can have unknown
permissions, so copy these configs as root.

Change-Id: I1649f8cd4a5066245e8f79e8e71b6bbf04dbcb62
Closes-Bug: #1760213

Change-Id: I2f5d70bb5707b940387d613879bf2caab35d6bd9

This feature replaces splitting of compute hosts into inner
and external with a new variable 'neutron_compute_dvr_mode'
that controls whether computes will have full-blown DVR or
internal only (tenant) networking.

Change-Id: I6720ccfcfcec89f9996d4cb5ae60f31eb3113667
Implements: blueprint dvr-mode-property

This commit provides operators with the ability to specify additional
options per HTTP or TCP listener stanza.

Change-Id: I66cc5372f2a686213b6748a8260cfe84f789ad8e
Implements: blueprint haproxy-listener-extra-options

This commit introduces a new variable, horizon_keystone_url, which
allows the administrator to specify the Keystone URL.

This defaults to the internal Keystone URL for backwards compatibility's
sake.

Closes-Bug: #1759623

Change-Id: Idf178a6398000fcb2d02b6f37b8ef408218b94ee
Signed-off-by: Nick Jones <nick@stackhpc.com>

This patch changes the wrong designate producer image
from "{{ designate_central_image }}:{{ designate_central_tag }}"
to "{{ designate_producer_image }}:{{ designate_producer_tag }}"

Change-Id: I8eabd47b14eb698676acbcc20141fa81c663422b
Closes-bug:1759629

When upgrade from ceph Jewel to ceph luminous, the client.admin caps
should add `mgr 'allow *'` caps

Change-Id: Ia4cb7a59d4cf215a1dce1efe31e00f1401e0b753
Closes-Bug: #1750967

keystone_* containers are created via the kolla_docker ansible module
with common_options set to docker_common_options. However, when the
containers are checked, common_options are not passed to the
kolla_docker ansible module. This can cause the keystone_* containers
to be restarted during a reconfigure when there are no changes to
keystone configuration.

Add the common_options argument to the kolla_docker ansible module when
checking the keystone containers and set it to docker_common_options.

Change-Id: I44aefcf3d71faecaf1ffe384fd5a2f611e584a37
Closes-Bug: #1759922

timeout tunnel is use for WebSocket and CONNECT protocol. Need use a
larger number for it. Otherwise, novnc will be auto disconnected if no
action happend in a short time on browser.

Change-Id: If37623e8fda5260ab0b38d2203f5266777dba063
Closes-Bug: #1759774

The mariadb port information may not be passed in login_host and
login_port.

Change-Id: I15522de345a27ffc4773f00c38c8f0216d103c40
Closes-bug: #1759568

Error path[1] of WSGIScriptAlias of panko for ubuntu, the right path is
/usr/lib/python2.7/dist-packages/panko/api/app.wsgi.

[1]http://logs.openstack.org/02/504302/4/check/puppet-openstack-beaker-xenial/aeb24d6/job-output.txt.gz#_2018-02-28_00_39_06_878490

Change-Id: I87531e4e5ef80e704bae52ed36a6cdbb01d4cffa
Closes-Bug: #1753865

Clients usually have sophisticated logic for handling
key redistribution on node failure; so going under the
covers and messing with that is bad (because then the
clients and their sophisticated logic is unaware of
what is going on).

Change-Id: Ica12240440d28f930b917d5d6202f4f9e6675b2a

- redis is much faster than ceph as incoming storage
- redis tooz backend is full implemented

Change-Id: Ia0b4bc65ea11e504c82fc8a5ad8aa447bee00630

This patchset implements yamllint test to all *.yml
files.

Also fixes syntax errors to make jobs to pass.

Change-Id: I3186adf9835b4d0cada272d156b17d1bc9c2b799

Change-Id: I1db585242cc3a5dcb2fe1ac79091d19f624c6f70
Closes-Bug: #1758855

Change-Id: Id55daa93cc4778bd59dd8befbe4ed04c031f4384
Closes-bug: #1758850

Since pbr 1.4.0, wsgi_scripts entrypoing is supported and it will
generated a wsgi compatible binary file.

Change-Id: I4192258226ec94b667913fd6fe099c4923145ea7

The default max memory is 64MB, which is too small for production
environment.

Change-Id: I72d87cd29762fe49ae4f711f092df655cea954a9
Closes-Bug: #1758286

This picks up the abandoned review:
https://review.openstack.org/#/c/412423



Co-Authored-By: Sam Yaple <sam@yaple.net>
Partially-Implements: blueprint monasca-roles
Change-Id: Idc01afcb125271181ee5e15d327d0929f07b49e9

the valid option support [none, novnc, spice, rdp] [0], but all.yml
miss it. this ps to fix it

[0]: https://github.com/openstack/kolla-ansible/blob/master/etc/kolla/globals.yml#L136

Change-Id: I133b85b0fbc632b049542512bcbe5b2c533084b1

This is currently using the full path for the destination
which doesn't appear to be what is wanted; instead the
actual file name should be used.

Closes-Bug: 1757532

Change-Id: If85e98097a0d0e0b55d0b2993185c8591e6dd10e

pool application is mandatory since ceph Luminous.

Change-Id: I8c124899b46b1388ab3c2957b4ece0f6aab1378b
Closes-Bug: #1757957

cloudkitty-processor service error[1] when using ceilometer collector.
Because the ceilometer collector has been removed in cloudkitty repo[2].

[1]http://logs.openstack.org/21/555121/1/check/puppet-openstack-beaker-centos-7/404b6ea/logs/cloudkitty/processor.txt.gz#_2018-03-22_04_39_53_481
[2]https://review.openstack.org/#/c/548630/

Change-Id: I414b63e9e943068e712818d2937390b9cdbfdcc0
Closes-Bug: #1757946

Change-Id: Idc536ee347fdb042653c662c777f27c9d0e411ae
Closes-Bug: #1757385

Change-Id: I109d431eefa8725540b893b4dc61525b46b29c6a
Co-Authored-By: pippo <huang.zhiping@99cloud.net>

Currently glance has a very simplistic ability to configure
notifications which seems different than nova and neutron which
both allow for selecting the topics used. In order to make glance
work like the others just have glance be configured like the other
projects notifications are being configured.

Change-Id: Ia12993e1b86d040c2705e72b32f93b874fe4adc6

Swift configuration needs container and account quotas to
pass 'OpenStack Powered' certification test suite

Co-Authored-By: Alexander Reunov <alexander.reunov@oracle.com>
Change-Id: I7a31315754cbb46257d3d98379daa39d32205480
Closes-Bug: #1757451

Since pbr 1.4.0, wsgi_scripts entrypoing is supported and it will
generated a wsgi compatible binary file. No need to copied it to
/var/www/cgi-bin/keystone folder.

Change-Id: If85558dcdcdf185be6171de20eed3faa8e101661

Change-Id: I5f9d3eb6bd42f43073704d1e8c2b8bd03fb9eb9b

the condition check is duplicated with https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/cinder/tasks/config.yml#L122



Change-Id: I9ca176a7aca9348d7e2e37cfe3b7efa315294d1d
Co-Authored-By: wu.chunyang <wu.chunyang@99cloud.net>

When the virt dirver is xenapi, we should explicitly specify host
with dom0's hostname for nova-compute. The host field should be same
as neutron-openvswitch-agent-xenapi.

In order to use dom0's hostname, we need pull the bootstrap_xenapi
to before running nova config tasks. The dom0's hostname will be
included in the XenAPI facts.

Change-Id: Ibfc964bbd6c569062ad33c1399f9a4612baf5b92
blueprint: xenserver-support

This patch updates trove configuration tasks to apply custom_config to
trove-taskmanager/conductor.conf.

Currently only trove.conf is custom-configurable, and the file is to be
loaded by trove-api service only. Therefore, we cannot apply
custom_config to trove-taskmanager/conductor services.

Change-Id: I0a64c4f0df32eb87cd91ebd8eafb512575061413
Closes-Bug: #1706883

Change-Id: I29f4d999c711f11f2db4e2d68b3ff194f0ab032b
Partially-implements: blueprint better-reconfigure
Co-Authored-By: Mark Goddard <mark@stackhpc.com>
Co-Authored-By: wu.chunyang <wu.chunyang@99cloud.net>

Services such as Zookeeper and Kafka use ini files which do not
explicitly specify sections. This change supports merging ini
files with no sections, so that the configuration for these
services follows the example configuration provided for them
as closely as possible.

Closes-Bug: #1756101
Partially-Implements: blueprint monasca-roles
Change-Id: I1061729875e5545c7af7d80779f9c2124b6c7134

Change-Id: If968e05459e38fe7a8c676e4480af22cc1de0b49
Closes-Bug: #1756221

Add the new murano_auth section to the Murano config
file so that Murano will deploy application packages.

Change-Id: I8ea7264759742e7af038b4cec346fc7ef7f7edcb

Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c

Add become to only neccesary tasks in roles:

- blazar
- opendaylight
- redis
- tempest
- vitrage

Change-Id: Ib3a48c1c21a19a23e87d2e465fd7012e3eee7565
Partial-Implements: blueprint ansible-specific-task-become