Docker will change the name volume folder permission to image already
set. /var/log/kolla is not created and well configured in image.

This patch set creates and configures proper permission /var/log/kolla
in base image.
This patch set also fixed the ceph image by adding ceph user to kolla
group.

TrivialFix

Change-Id: Ib5ef0187e90de2699b3cda31e819b4babb07e0af

TrivialFix

Change-Id: Id2cd736f136068514f26977b434b15a8b1ffc8be

Fix typo in variable name ("yup" instead of "yum"), which means we now
import the repo keys we intended to. Furthermore we no longer try to
import EPEL key in that very spot, as it should be imported after
epel-release is installed, which already happens later during the base
image build.

CentOS/EPEL keys in the image before this patch:

()[root@6843e7e136cf ~]# rpm -q gpg-pubkey --qf '%{summary}\n' | grep -i -E '(centos)|(epel)'
gpg(CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>)
gpg(Fedora EPEL (7) <epel@fedoraproject.org>)

With this patch:

()[root@64a6ae7d0347 ~]# rpm -q gpg-pubkey --qf '%{summary}\n' | grep -i -E '(centos)|(epel)'
gpg(CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>)
gpg(CentOS Storage SIG (http://wiki.centos.org/SpecialInterestGroup/Storage) <security@centos.org>)
gpg(CentOS Virtualization SIG (http://wiki.centos.org/SpecialInterestGroup/Virtualization) <security@centos.org>)
gpg(Fedora EPEL (7) <epel@fedoraproject.org>)

Change-Id: I5cd22a887282e5de199a809b0798a439ce1a99e7
Closes-Bug: #1625585

Update to epel-release 7-6. Also, move from HTTPS to HTTP in the RHEL
builds to match what is happening in Oracle Linux. Seems as though HTTPS
does not work any longer.

TrivialFix

Change-Id: Icc457a333acdd5cc5b1e124d4308c4af1eb8d2cc

This is needed by glance cinder storage[0].

[0] https://github.com/openstack/glance_store/blob/master/glance_store/_drivers/cinder.py

Change-Id: I6645239acb3fb300afde8cc5260c8935c387d06f
Closes-Bug: #1625226

Change-Id: Id702e5e79958a764d827703e996927b161fb379e
Closes-Bug: #1625212

1.Change "ironic_base" to "ironic_inspector" in ironic-inspector Dockerfile
2.add {% block footer %}{% endblock %}
TrivialFix

Closes-Bug: #1625131
Change-Id: Ibd02676e91a9b00cb1a46e7d00eaa3ab2c6c6412

Change-Id: I78ce0071474fc693aa2a05397b2a9b5974266cd9
Partial-bug: #1609814

1. Install the missing vpnaas python module in neutron-server Dockerfile
2. Remove duplicated neutron-lbaas-common package from neutron-server,
since it is installed in neutron-base
3. Fix service plugin config, it's not vpn`ass` ;)) 'vpnass' ->
'neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin' [1]

[1]:
https://github.com/openstack/neutron-vpnaas/blob/stable/newton/devstack/settings#L8

Change-Id: I5250b6875d96ef5df9cf39bce10ce072982aa80d
Closes-bug: #1625020

Add installation of ironic-inspector package
on binary ubuntu or via pip on any source type of installations.

Change-Id: I5946369b6424c32e0cbf00a6590d41eb85b1de18
Closes-bug: #1565936

TrivialFix

Change-Id: I5fb6e2b72e56e018ed640811a9f4d1d77a3efb11

Modify permissions in collectd container to
facilitate inclusion of plugins.

Change-Id: If9ac860c7e533814d014834a18e0501d6512be61
Closes-Bug: #1620603

TrivialFix

Change-Id: Ia18cb89e0951359226add5cbd96d3a91c7fcfd8a

Change-Id: If8351ab3000006323a05924e907f1e3745768304
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com&gt;>
Partially-implements: bp kuryr-docker-plugin

Kuryr repo has been split to kuryr and kuryr-libnetwork

Change-Id: I6d05adf1de89611e2cb0f8469ed42ca1401ace56
Co-authored-by: Mohammad Banikazemi <mb@us.ibm.com>
Partially-implements: bp kuryr-docker-plugin

Need to add nova user to qemu group.

Change-Id: I0df21d00fb295e0f2c14dd6abd4bee518fec8371
Closes-Bug: #1623682

The change c7c87909 has introduced an unconditional check
for wsrep cluster during bootstrap process whether is ready or not
and if it is not, bootstrap fails.
In kubernetes environment wsrep driver is set to none, cluster will
NEVER reach ready state hence causing kubernetes mariadb bootstrap job
failure.

Closes-Bug: #1623662

Change-Id: I0e6fc098861b7eeab544229d0b04a78fa498ddb9

This implements the neutron-vpnaas-agent container for Ubuntu/Debian
with installation from source packages.

Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>

Implements: blueprint neutron-vpnaas-agent

Change-Id: I3e4b513fb8e1670c4df0edb4951610f777ff72e6

Networking-SFC is a neutron big-tent project support Service Function
Chaining in Neutron.

* Rename the image from neutron-networking-sfc-agent to
  neutron-sfc-agent.
* Add networking-sfc role in playbooks.

Co-Authored-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Change-Id: I1f99650eed85f59929d4ab6b2226603c54f29577
Implements: blueprint enable-networking-sfc-support

Change-Id: I9cd7e6d26af913f06f6b9119496e2f228266b293
Partially-Implements: blueprint nova-proxies
Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>

Customizations of packages for source builds

Closes-Bug: #1623083
Change-Id: I99263af53c8f9830bcf0c6fec78194c8f7cd88c5

Change needed to add header blocks to all Dockerfiles, similar to the
base.

Use case is to easily run something before packages are installed, e.g.
to COPY a local rpm in that can be added to the package list.

Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee
Closes-Bug: 1618969

Wait until the mariadb cluster is fully functional
- check existence of mariadb.pid is insufficient because the cluster
  may not be fully prepared

Change-Id: I611b38f7dbc8032c42aee2a040fb1210b4bee7eb
closes-bug: #1614363

Closes-Bug: #1622609

Change-Id: I89d4059e2c31b7f1737c147479cdc3c36b06fa69

TrivialFix

Change-Id: If74270337a5d9829784ee3e28d4f994a6fd845db

TrivialFix

Change-Id: Ibd4ba9dbe2cadb304e027b60d5b7378416719d12

Change-Id: I5b96dc0e8debd718bb61b3bd9c1c2028af004a1c
Closes-bug: #1622777

For centos, we should be using the RDO repositories to provide
rabbitmq-server.  This version is updated with bug fixes and provides
a more stable experience then using rabbitmq.com builds.

Co-Authored-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Co-Authored-by: Michal (inc0) Jastrzebski <inc007@gmail.com>
Closes-Bug: #1621460
Change-Id: Ib0eafc5da4397756fbdd837520b15543180ce229

Added grafana repository to base image

Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>

Installed grafana from repository

Change-Id: Ib99195ec4522f185f6fd4cebf10e305bb58f69c4
Partially-Implements: Blueprint performance-monitoring

UCA latest Newton release lack of neutron-lbaas-common package, disable
neutron-lbaas-agent for Ubuntu binary until they fix it.

TrivialFix

Change-Id: I2c02fc578cffe82918ae6affe6cf0e6095ae47e4
Signed-off-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>

This patch changes version of ceph from hammer to jewel. Also removed
versionlock as it seems we don't use it in ubuntu, and actually might be
risky if we miss security patch on ceph.

Change-Id: Ib8f88c2f914a4b635e59a509fa0194605eb73165
Implements: blueprint upgrade-ceph-to-jewel

Database-backed sessions are scalable (using an appropriate database
strategy), persistent, and can be made high-concurrency and
highly-available [0]

Default is off.

[0] http://docs.openstack.org/developer/horizon/topics/deployment.html#database



Co-Authored-By: Vladislav Belogrudov <vladislav.belogrudov@oracle.com>
Closes-Bug: 1618781

Change-Id: Ib68a21397dc020d20e07dcc51d3d0fdc1de102ff

When using an NFS server for backup a cinder container mounts a location
specified in configuration file (one can do this via add-on files).
The mount process fails due to missing mount.nfs and mount.nfs4 tools.

Change-Id: Ic34667c1bf4d4660a4e773a9f8d98996ea11c070
Closes-Bug: #1620548

Change-Id: I647c38adbfd00c70874cf51c0bfcb68d243e26cc
Partially-Implements: blueprint rally-role

Change-Id: I2e2546fbc292975742f48ab35b92455b1bfc685c
Closes-Bug: #1616779

Change-Id: I548c20afd7ce7ba27a5475c69c78c7d267ccc24b
Partially-Implements: blueprint cloudkitty-docker

Partially-Implements: blueprint barbican-container

Change-Id: I2c4d5df1b35be95f75413067efacc0b401e7ce08

TrivialFix

Change-Id: Icb092e47713e0b89859747d6ed4c02b3950d7ced
Signed-off-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>

This patch makes the ip tool available.

Kolla-Kubernetes needs it to figure out what ip addresses
are associated with the running containers as they are not
known before hand.

TrivialFix

Change-Id: I4713bb9db471463dedeb4984a55dd86e903ef65b

1. Add the missing packages in the gnocchi image
   packages: lz4 sqlalchemy_utils gnocchiclient

2. gnocchi config path is error
   gnocchi config path is /gnocchi/etc/gnocchi

3. gnocchi sync db command is error
   sync db command is: gnocchi-upgrade
   Reference link: http://docs.openstack.org/developer/gnocchi/install.html

4. gnocchi log directory is /var/log/kolla/gnocchi

5. Add gnocchi-api running as a mod_wsgi
   Reference link: http://docs.openstack.org/developer/gnocchi/running.html

6. Add gnocchi sudoers file

Closes-Bug: #1607332

Change-Id: Id3aded82706ffd204373c97a020980d0d9b72663