Change-Id: I6b6114e85a4df82458c441f471929513c2526c23

Add become to only neccesary tasks in roles:
- glance
- heat
- horizon
- keystone
- neutron
- nova
- openvswitch

Gate is also updated to use 'become' feature

Change-Id: I2f3f27306e9f384148e1ad4d54d8da2ebef34d00
Partial-Implements: blueprint ansible-specific-task-become

Become option is missed in patch #398682, this patchset fix this issue.

Change-Id: I228c31486210ef1de76601d3ea4ee955a628ca73
Partial-Implements: blueprint ansible-specific-task-become

Iscsi containers on compute and storage nodes in
restarting mode w/o config files

Closes-Bug: #1727785

Change-Id: I1c2b1db791dc9be76e60425e4752d64ffba34f1b

the auth is used for registry, but the horizon not need, so the
openstack_horizon_auth should be remove.
refer to https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/nova/tasks/register.yml#L13

Change-Id: Ibd8985651bd64cba3e30c15596f0ae6d692b973b

panko.conf depends on "service_name" variable, but when generating
panko.conf in ceilometer, this variable is not set.

Panko is a single process service, no need add such test. So simple
remove the if clause.

Change-Id: I5ba41046e35cd3fa00b8c22e1b4435acfaff5279
Closes-Bug: #1725159

Change-Id: I27508cb182bc3d3e2a0cbd7d429fe65d2271b2ea

Number of workers for Watcher api service can not be configure, this
patch to fix it.

refer to https://github.com/openstack/watcher/blob/master/watcher/conf/api.py#L43

Change-Id: I2763b8e225ceb4b8e067d53b8d5f0ffba31563a6

flat network type is not mandatory. There are two cases,

1. ironic with flat network: we can use neutron vlan network to
   provision baremetal nodes, as long as the interface of the baremetal
   nodes are configured to use the same vlan.

2. ironic with neutron network: all provision and cleaning_network can
   be vlan type and no flat is needed at all.

So we should remove the task.

Change-Id: I176ded6d2a8b14e350f665f63bc37eb488d32679
Closes-Bug: #1725170

This applications package is useful to have in place,
import io.murano.applications along with the core package.

Change-Id: I819eebe2deae2d1ff0375a2dd39a33f50817bb83

Partial-Bug: #1720601
Change-Id: Ibc20a6ae8c645ff82f3c14a6286073dffd4cfae2

when mapping file from host to container, if the file doesn't exist, it
will become a folder. So map folder rather than file.

Change-Id: I053ff11d32948711c0e4c3241f56d1f6210348ac
Closes-Bug: #1720189

Use kolla will have upgrade issue and kolla user may not exist too
during deployment.

Partial-Implements: blueprint ansible-specific-task-become
Change-Id: Ida3b645dcf86191b22e80d1b67694ccfb8fd9144

kolla-ansible can take globals.yml from any directory by using
--config-dir argument. So store admin credentials there as well.

Not everyone runs kolla-ansible as a root.

Change-Id: I0709482ead4b7a67e82796e17f85bde151e71bc0

outward_rabbitmq is determined  using enable_outward_rabbitmq
property rather than current haproxy_enable_external_vip

Change-Id: Iee096ab50fd4d9f5f3fe05880d0e0a7842c59d0a
Closes-Bug: 1722854

Change-Id: Ie26c6b392c5ac86c3ec5effa5241ce5cad10fe40

This is required by routed provider networks.

Change-Id: I529c310c5119e68343114dc1ef12d7d8cc7e2ce1

The admin_password and admin_user in default section is discarded
in code, no longer be used anymore.

Change-Id: I1d31faf0781cb61d13aa6a76534e38783e4f920f

We want to treat the nova-compute-ironic log in the same way as
the other nova logs so that it doesn't go missing from fluentd
output.

Change-Id: I145389cd0cceeed506e2a9c084d290341047c9aa
Closes-Bug: #1721814

Change-Id: Ifaf6bca0a02e382d36a3a6168572ebb63878a496

gnocchi client requires this, others may also

Change-Id: I848df2e4964958902955f7c72e94e1e64a67bca1

For a deployment behind a firewall/proxy server some additional
environment settings should be passed along, for containers
such as magnum

This commit adds three new properties;
 container_http_proxy
 container_https_proxy
 container_no_proxy

In particular, the user will want to set container_http_proxy
and container_https_proxy properties with the proxy server
details.

Closes-Bug: #1628335
Change-Id: I0950a0467b4b68c38b13875eaf9cd433e64363cf

Change-Id: I5bbd20a390f385a60ff2f330cc8fa7fb1117a42a
Closes-Bug: #1721292

When deploying with tls enabled in public
endpoints, ansible modules fails due SSL certificates
are self-signed.

This change adds a new variable to allow customization
on which endpoints ansible should connect.
Defaults to admin because admin auth parameters defaults
to admin endpoint.

Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
Closes-Bug: #1720995

Record transformer is used to add a 'Severity' field in event.
This Field is unused and not generated for other programs, hence
It can be removed safely.

Change-Id: I62e461e5006516dcbd6c64e1770d6936f9a9d55c

Closes-Bug: #1719775
Depends-On: I76803f0f81260129a242e31e81f4f956c5a44ef9
Change-Id: I675c486dda17ce5d6d5a9f665ade904f42d06611

Closes-Bug: #1720777
Change-Id: Iebc619cea158685077928b54cb5c9332427bc596

Fix a missing comma in config.json when neutron_plugin_agent is set
to 'vmware_nsxv' or 'vmware_dvs'.

Closes-Bug: #1720380

Change-Id: I088f09a426a5435202176c45a77b1fbc19468f97

Change-Id: Idfc0b4c6f4f5c699cd999662a98862ccc5286a5f
Closes-bug: 1720179

This also sorts the list service_plugins.

Change-Id: I28c12337e56060061a5db13c9a23f8d4b231b1fd

This change adds enable_fluentd option and enables some other log shippers
to be integrated. When enable_fluentd is "no", syslog server is also disabled.
Then, this change also adds syslog parameters to use a syslog server
prepared by users.

Change-Id: I7c83ef7fe30a6b9ab7385bcee953ad07e96b0a83
Implements: blueprint fluentd-enable-option

We need set glance_api_version = 2 in cinder
configure to support upload volume to image.

Change-Id: I6162b94833043edb06b434bc578f4caa47213b94
Closes-bug: #1720048

Change-Id: I6394475f14bb4875be6d924591e4aea533ac2eb6
Closes-bug: #1621404
Depends-on: Ifc4f1d0f1b59b1789011e33c649033eb3cf5b010

When deploying on arm64, common reports error:
stat /usr/bin/ansible: no such file or directory

The reason is ansible is installed to /usr/local/bin/ansible
rather that /usr/bin/ansible
Fix the issue to call ansible directly, to consider both cases.

Change-Id: Ie90bd9c4d7d3a4b7b0aef884351cb58ed13ebd11
Signed-off-by: Kevin Zhao <kevin.zhao@linaro.org>
Signed-off-by: Zhangfei Gao <zhangfei.gao@linaro.org>

The following warning logs appears in fluentd container:

[warn]: pattern not match: "170908 21:34:12 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql/"

This patch fix it

Change-Id: I9820b8c5fd3456ba9c032fdf326c65632d147e50
Closes-Bug: #1708571

When using newer Elasticsearch versions you will receive the following error
when trying to start: elasticsearch | max virtual memory areas
vm.max_map_count [65530] likely too low, increase to at least [262144]

This could be solved by increasing the vm.max_map_count value via sysctl.

Reference: https://www.elastic.co/guide/en/elasticsearch/reference/current/vm-max-map-count.html

Change-Id: I9fa7b0222104d68bdfc838637acf5e36c479e6b2
Closes-bug: #1719528

octavia-housekeeping container need certifications to create spare
amphore instances.

octavia-health-manager container need certifications to create stable
amphore instances.

Change-Id: I90b9c4c39f6542bb1ee5f40a8d0a39ae8d0ab2b0
Closes-Bug: #1719063

Closes-Bug: #1719503
Change-Id: I705de11614f2d086bd123ea5b3841f59b5a24666

my_ip is used by iscsi_ip_address in cinder.conf. Configure it to
api_interface_address.

Change-Id: Ib9f9140668f807b26bdaec849fc0cef0a63a8ca0
Closes-Bug: #1719274

The value set for "secure_proxy_ssl_header" should be
"HTTP_X_FORWARDED_PROTO" and not "X-Forwarded-Proto".

Change-Id: I7f4cc4871164ca9096a190101c179daa41e1ae9a
Closes-Bug: #1719325