Commit Graph

1705 Commits

Author SHA1 Message Date
Zuul 629dc4d008 Merge "virt/ironic: Implement rescue and unrescue" 2018-07-15 07:49:36 +00:00
Zuul 21a368e1a6 Merge "Heal allocations with incomplete consumer information" 2018-07-13 19:26:59 +00:00
Matt Riedemann 6b6d81cf2b Heal allocations with incomplete consumer information
Allocations created before microversion 1.8 didn't have project_id
/ user_id consumer information. In Rocky those will be migrated
to have consumer records, but using configurable sentinel values.

As part of heal_allocations, we can detect this and heal the
allocations using the instance.project_id/user_id information.

This is something we'd need if we ever use Placement allocation
information counting quotas.

Note that we should be using Placement API version 1.28 with
consumer_generation when updating the allocations, but since
people might backport this change the usage of consumer
generations is left for a follow up patch.

Related to blueprint add-consumer-generation

Change-Id: Idba40838b7b1d5389ab308f2ea40e28911aecffa
2018-07-13 11:29:54 -04:00
Taku Izumi a07b68ea92 virt/ironic: Implement rescue and unrescue
This patch adds implementation of rescue and unrescue for ironic virt
driver.

Implements: blueprint ironic-rescue-mode

Change-Id: I7c20a0c5f566c3255350fd494d1a2cde84a99440
Signed-off-by: Taku Izumi <izumi.taku@jp.fujitsu.com>
Co-Authored-By: Hironori Shiina <shiina.hironori@jp.fujitsu.com>
2018-07-13 01:56:13 +00:00
Zuul 3dc4e61f6e Merge "Update process doc to be more generic about point of contact" 2018-07-13 00:30:18 +00:00
Zuul 536e5fa57f Merge "Mention osc-placement for managing traits in docs" 2018-07-12 18:49:06 +00:00
melanie witt d76c54a70e Update process doc to be more generic about point of contact
The docs currently name a past PTL by IRC nick -- update it to be
more generic so we don't have to update it every time the PTL
changes.

Change-Id: I31dbf0ee4f7650389e824c25c3aea7529d63eaa0
2018-07-12 17:23:03 +00:00
Matt Riedemann 7ac21382f9 Mention osc-placement for managing traits in docs
This just links to the osc-placement plugin docs
for managing required and forbidden traits in the
flavor extra specs docs.

Change-Id: I8549dc404a62a05d327a2c7a4813e7cc505d6b06
2018-07-12 11:25:31 -04:00
Stephen Finucane d1820d14c6 Revert "docs: Disable smartquotes"
Bump the minimum version of oslo.config to 6.1.0, which adds proper
support for parsing Opt.help as rST [1]. This in turn allows us to
revert commit 75fc300901, which is a
temporary fix relying on deprecated features of Sphinx.

[1] https://review.openstack.org/#/c/553860/

Change-Id: I8f56bdce37cfc538348490052a24e463164c86a3
2018-07-11 14:02:32 +01:00
Zuul d3fa585f5e Merge "Update some placement docs to reflect modern times" 2018-07-11 05:28:02 +00:00
Chris Dent cc7f4ea724 Update some placement docs to reflect modern times
This change provides a small number of updates to the placement user and
contributor documentation to reflect some of the things that have
changed recently. This is by no means complete, but is an improvement
over what was there.

Partial-Bug: #1778227

Change-Id: Ia348cd3c99b1a5104e15595fdebc83e1ca582a98
2018-07-11 01:33:28 +00:00
Zuul f92b1326de Merge "Allow templated cell_mapping URLs" 2018-07-10 06:10:07 +00:00
Zuul 6a10534526 Merge "[doc] enhance admin/configuration/api.rst" 2018-07-03 18:59:32 +00:00
Zuul 5d59bc6337 Merge "Update xenapi_disable_agent config option usage in docs" 2018-07-03 15:36:53 +00:00
Zuul 1f91390c52 Merge "Update admin/flavors document" 2018-07-02 12:34:48 +00:00
Zuul ccd254acd8 Merge "More config drive docs updates" 2018-07-02 11:04:51 +00:00
Takashi NATSUME 8f0aa1f35c Update admin/flavors document
Replace nova commands with openstack commands.
Add an example to create a private flavor.
Repopulate the "Modify a flavor" section.
Replace 'extra_spec' with 'extra_specs'.
Fix a wrong link.
Remove rxtx-factor in descriptions and command examples.

Change-Id: I14295dddc302a603a71f71ccb6fcc5745ca7826c
2018-07-02 15:17:52 +09:00
jichen f44d28590b [doc] enhance admin/configuration/api.rst
enhance doc including remove 'nova-api' daemon which is deprecated
to use wsgi instead, and added some operations for password
response.

Change-Id: I4cb7ac55683951aa5900699ba587da03c22fb0a1
2018-07-02 04:24:59 +00:00
Zuul a7a4f4a367 Merge "Mention PowerVM support of config drive" 2018-06-29 18:10:09 +00:00
Zuul 44c8aec3f0 Merge "Mention nova-status upgrade check CLI in upgrade doc" 2018-06-29 15:45:58 +00:00
Zuul bd8a14b26c Merge "Fix CLI docs for nova-manage api_db commands" 2018-06-29 15:45:22 +00:00
Zuul 9d2f0ed810 Merge "Remove file injection from config drive sample docs" 2018-06-29 15:45:13 +00:00
Zuul 60c348386a Merge "libvirt: Fix the rescue race for vGPU instances" 2018-06-29 08:51:59 +00:00
Sylvain Bauza 1c59397e09 libvirt: Fix the rescue race for vGPU instances
When rescuing an instance having a vGPU, we were not using the vGPU.
There would then be a race condition during the rescue where the vGPU
could be passed to another instance.
Instead, we should just make sure the vGPU would also be in the rescued
instance.

Change-Id: I7150e15694bb149ae67da37b5e43b6ea7507fe82
Closes-bug: #1762688
2018-06-28 18:41:15 -04:00
Matt Riedemann 70b1045a5a More config drive docs updates
This adds two things:

1. Mention the img_config_drive image property
   which can be used to force a config drive.

2. Note that the config_drive_cdrom config option
   is for hyper-v only.

Change-Id: Id9a16e07709a445814fb7a183bd12f7740722ced
2018-06-28 13:08:58 -04:00
Matt Riedemann 39d4577521 Remove file injection from config drive sample docs
File injection is disabled by default (see
[libvirt]/inject_partition) and deprecated
in the API since microversion 2.57. We
don't really want people relying on file
injection, so this removes it from the
config drive docs. While in here, also
replace the 'nova boot' command mention
with 'openstack server create' since that
is the command used through the examples.

Change-Id: I4521eca6f6cbd4f8cd6dad48ab1d40a1b136bf73
2018-06-28 12:59:34 -04:00
Eric Fried 5c0f9379b5 Mention PowerVM support of config drive
...in the config-drive user doc.

Change-Id: Idc1b656a0aa5cd442fae3be895369fa71c86fc99
Closes-Bug: #1779159
2018-06-28 15:44:45 +00:00
Matt Riedemann 255f71ac67 Update xenapi_disable_agent config option usage in docs
The xenapi_disable_agent config option was moved to
[xenserver]/disable_agent so this just updates the config
drive docs.

Change-Id: I6573e7c86d00e9174a5219397f676503c0e9b744
2018-06-28 11:23:43 -04:00
Zuul c9cbc4c91d Merge "Add information of deprecation nova-network in system-admin.rst" 2018-06-27 22:06:49 +00:00
Dan Smith 50658eee4f Allow templated cell_mapping URLs
The way we store DB and MQ URLs in the API database causes issues for
some deployments (and deployment tools) which want to use per-host
credentials or remote hostnames. Since all the URLs loaded from the
database are the same on all systems, this becomes very difficult and
some have even resorted to using client-based aliasing underneath Nova
and just providing URLs that reference those aliases.

This makes our CellMapping object load the URLs out of the database,
and apply variable substitution from the CONF-resident base URLs
for any fields provided. Such functionality will let operators
define per-host credentials in [database]/connection, for example,
and have those applied to the database_connection URLs loaded from
CellMapping records.

Change-Id: Iab296c27bcd56162e2efca5fb232cae0aea1160e
2018-06-27 12:54:44 -07:00
Zuul 46bfd6f1c2 Merge "xenapi: drop deprecated vif_driver config option" 2018-06-26 16:14:54 +00:00
Matt Riedemann 1476b030bd Fix CLI docs for nova-manage api_db commands
There were a few changes needed here:

1. There is no "API cell database", just the API
   database, so this removes mentions of cells.

2. The VERSION argument was missing from the sync help.

3. The sync command does not create a database, it upgrades
   the schema. Wording for that was borrowed from the
   nova-manage db sync help.

4. Starting in Rocky, the api_db sync command also upgrades
   the schema for the optional placement database if configured
   so that's mentioned here as well.

Change-Id: Ibc49f93b8bd51d9a050acde5ef3dc8aad91321ca
Closes-Bug: #1778733
2018-06-26 10:16:55 -04:00
Zuul 08a618d0c4 Merge "Update links in README" 2018-06-26 12:37:49 +00:00
Zack Cornelius b1fdb2ee0c Fix nits from change Ia7cf4414feb335b3c2e863b4c8b4ff559b275c34
Change-Id: I05f0791d41c65115c9153f301b387dfdf9065007
Implements: blueprint libvirt-file-backed-memory
2018-06-21 17:43:05 -05:00
Zack Cornelius e9683f1432 Implement discard for file backed memory
Add the discard flag to libvirt XML when supported by libvirt and qemu,
and when using file backed memory.

The discard flag causes qemu to discard allocated memory via calling
madvise with MADV_REMOVE when using file backed memory, to prevent
writing out dirty instance memory. This is a significant performance
improvement for shutting down instances that have recently written to
significant portions of their memory.

As qemu and libvirt do not guarantee the discard is run, this cannot be
used for security purposes.

Change-Id: Ia7cf4414feb335b3c2e863b4c8b4ff559b275c34
Implements: blueprint libvirt-file-backed-memory
2018-06-21 11:45:31 -05:00
Zack Cornelius 8566dcfef4 Fix nits from change I676291ec0faa1dea0bd5050ef8e3426d171de4c6
Change-Id: If6ea6701d73a4a8abb6a75c54308a386eec7a4b2
Implements: blueprint libvirt-file-backed-memory
2018-06-21 11:13:44 -05:00
Zack Cornelius cbc28f0d15 Implement file backed memory for instances in libvirt
File backed memory is enabled per Nova compute host. When enabled, host
will report 'file_backed_memory_capacity' for available memory.

When enabled, instances will create memory backing files in the
directory specified in libvirt's qemu.conf file 'memory_backing_dir'
config option.

This feature is not compatible with memory overcommit, and requires
'ram_allocation_ratio' to be set to 1.0

Change-Id: I676291ec0faa1dea0bd5050ef8e3426d171de4c6
Implements: blueprint libvirt-file-backed-memory
2018-06-20 11:25:06 -05:00
Kevin_Zheng a79e2885d0 Mention nova-status upgrade check CLI in upgrade doc
Mention nova-status upgrade check CLI in upgrade doc

Closes-Bug: #1772973
Change-Id: I5e643febebd435550af2d7c49546a16ac5a21453
2018-06-20 14:22:13 +08:00
zhangyangyang a3070730f0 Add information of deprecation nova-network in system-admin.rst
Change-Id: I9afc1edce489b6949ab9d9572fbee0e997cc54f4
2018-06-20 11:30:55 +08:00
Zuul afcf078715 Merge "Add policy rule to block image-backed servers with 0 root disk flavor" 2018-06-19 12:01:13 +00:00
Zuul 877a8bcb9f Merge "Add trusted certs to feature support matrix docs" 2018-06-18 12:44:41 +00:00
Zuul 907e168431 Merge "Add supplementary info for simple_cell_setup cmd" 2018-06-16 00:54:20 +00:00
Matt Riedemann 763fd62464 Add policy rule to block image-backed servers with 0 root disk flavor
This adds a new policy rule which defaults to behave in a
backward compatible way, but will allow operators to enforce
that servers created with a zero disk flavor must also be
volume-backed servers.

Allowing users to upload their own images and create image-backed
servers on local disk with zero root disk size flavors can be
potentially hazardous if the size of the image is unexpectedly
large, since it can consume the local disk (or shared storage pool).

It should be noted that disabling the new policy rule will
result in a non-backward compatible API behavior change and no
microversion is being introduced for this because enforcement via
a new microversion would not close the security gap on any previous
microversions.

Related compute API reference and user documentation is updated
to mention the policy rule along with a release note since
this is tied to a security bug, which will be backported to stable
branches.

Change-Id: Id67e1285a0522474844de130c9263e11868f67fb
Closes-Bug: #1739646
2018-06-15 17:10:11 -04:00
Matt Riedemann df57c50b2d Add trusted certs to feature support matrix docs
Even though the feature is technically virt driver agnostic,
the plumbing happens through the virt drivers, so the feature
is only supported by certain virt drivers (libvirt only at
the time of this patch). So this adds a section to the feature
support matrix about the trusted certs validation feature.

Also updates the certificate validation user docs based on
the nova boot --trusted-image-certificate-id option name
in the dependent python-novaclient change.

Depends-On: https://review.openstack.org/500396/

Related to blueprint nova-validate-certificates

Change-Id: Ic5cb4a98c73cc404c7033cf183f25a97aba3c994
2018-06-15 08:37:24 -04:00
Zuul bfeea18358 Merge "Update nova-status & docs: require placement 1.25" 2018-06-15 11:12:22 +00:00
Zuul a879f7984f Merge "Add certificate validation docs" 2018-06-15 04:33:30 +00:00
Zuul 9c4622a668 Merge "Add troubleshooting item about ignored microversions" 2018-06-15 03:33:32 +00:00
Chen 8992416f9d Add supplementary info for simple_cell_setup cmd
Mention that if no transport_url is provided then the one
in the configuration file will be used for command
``nova-manage cell_v2 simple_cell_setup [--transport-url <transport_url>]``,
just like that for other cell_v2 commands.

Change-Id: Ifededa59f7ffe5887e67e29b93f70fa70dfaef33
2018-06-15 11:17:48 +08:00
Jackie Truong 196eef0f65 Add certificate validation docs
This change adds documentation for Nova's certificate validation
feature.

Change-Id: If551f1265cf662c76a0c7cb38781641a77af0826
Implements: blueprint nova-validate-certificates
2018-06-14 16:12:34 -04:00
Matt Riedemann 70aa9a1b79 Add troubleshooting item about ignored microversions
If the compute endpoint in the service catalog is configured
for /v2 legacy compat mode, microversions in the request are
silently ignored by the LegacyV2CompatibleWrapper. This
adds a troubleshooting entry for that situation.

At this point, we might want to consider deprecating or at
least logging warnings if microversions are requested and
LegacyV2CompatibleWrapper strips them out, but that's fodder
for a separate change.

Change-Id: Ia7ecbf95d0a3e14c7f82b6a93c2ac4c4cfb89549
2018-06-14 13:21:30 -04:00