Skip to content

Instantly share code, notes, and snippets.

View michalskalski's full-sized avatar

Michal Skalski michalskalski

View GitHub Profile
(undercloud) [stack@undercloud ~]$ openstack ccloud nodemap list
+---------------------------------+----------------+------------+----------------+
| Name | IP | Hypervisor | Hypervisor IP |
+---------------------------------+----------------+------------+----------------+
| overcloud8st-afxctrl-0 | 192.168.213.69 | controler2 | 192.168.213.6 |
| overcloud8st-afxctrl-1 | 192.168.213.52 | controler3 | 192.168.213.7 |
| overcloud8st-afxctrl-2 | 192.168.213.58 | controler1 | 192.168.213.5 |
| overcloud8st-ctrl-0 | 192.168.213.73 | controler2 | 192.168.213.6 |
| overcloud8st-ctrl-1 | 192.168.213.63 | controler1 | 192.168.213.5 |
| overcloud8st-ctrl-2 | 192.168.213.59 | controler3 | 192.168.213.7 |
@michalskalski
michalskalski / rulset.diff
Created October 19, 2020 19:23
firewall-cmd --reload impact on libvirt rules , NAT stop to work vm can't access external resources.
RHEL8: firewall-cmd --reload impact on libvirt rules , NAT stop to work vm can't access external resources.
'sudo systemctl restart libvirtd'restores rules
Rule list: sudo nft list ruleset
--- libvirt 2020-10-19 21:06:30.434593275 +0200
+++ reload 2020-10-19 21:08:14.026787785 +0200
@@ -1,80 +1,27 @@
table ip filter {
chain INPUT {
type filter hook input priority filter; policy accept;
- counter packets 12 bytes 844 jump LIBVIRT_INP
@michalskalski
michalskalski / localhost-defined.json
Created October 9, 2020 13:50
Facts propagation when localhost is explicitly defined in ansible inventory
cc-0.mskalski.net ok: {
"changed": false,
"msg": {
"ansible_check_mode": false,
"ansible_connection": "local",
"ansible_diff_mode": false,
"ansible_facts": {},
"ansible_forks": 5,
"ansible_inventory_sources": [
"/var/lib/app/ansible/playbooks/inventory"
@michalskalski
michalskalski / JENKINS-28447.workaround.groovy
Created July 9, 2020 13:52 — forked from kad/JENKINS-28447.workaround.groovy
workaround for JENKINS-28447 in case of github trigger plugin.
// Reconfigure job to have Pipeline DSL configured inside job, instead of from scm.
// Put snippet below to pipeline text box
// Define additional job parameters:
// GITHUB_PROJECT: string, URL to your GitHub repository
// GITHUB_AUTH: string, credentials ID to use in case of private GitHub repository
node {
dir('pipeline_handover') {
checkout([$class: 'GitSCM',
branches: [[name: "origin-pull/$GITHUB_PR_NUMBER/$GITHUB_PR_COND_REF"]],
doGenerateSubmoduleConfigurations: false,
@michalskalski
michalskalski / policy.json
Created January 16, 2019 14:31
Contrail policy.json
{
"context_is_admin": "role:admin",
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"default": "rule:admin_or_owner",
"list_subnets": "rule:admin_or_owner",
"create_subnets": "rule:admin_or_owner",
"show_subnet": "rule:admin_or_owner",
"update_subnet": "rule:admin_or_owner",
"delete_subnet": "rule:admin_or_owner",
"list_virtual_DNSs": "rule:admin_or_owner",
ssh-rsa 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 mskalski@juniper.net
@michalskalski
michalskalski / template.yaml
Created March 23, 2017 16:12
Fuel network template with SRIOV. Remember to add intel_iommu=on to kernel parameters.
adv_net_template:
default:
network_assignments:
fuelweb_admin:
ep: br-fw-admin
management:
ep: br-mgmt
private:
ep: br-mesh
public:
@michalskalski
michalskalski / file.patch
Created February 27, 2017 16:03
allow assign cinder role without backend
--- cinder.json.back 2017-02-27 09:39:25.144547732 +0000
+++ cinder.json 2017-02-27 15:58:21.409183930 +0000
@@ -2,10 +2,6 @@
"meta": {
"restrictions": [
{
- "message": "Cinder LVM should be enabled in the environment settings.",
- "condition": "settings:storage.volumes_lvm.value == false"
- },
- {
#!/bin/bash
if ! grep -q nfs-common "/usr/share/fuel-mirror/ubuntu.yaml"; then
cat > /tmp/mirror.patch << EOF
--- /usr/share/fuel-mirror/ubuntu.yaml.orig 2017-02-03 23:18:19.724275289 +0000
+++ /usr/share/fuel-mirror/ubuntu.yaml 2017-02-03 23:17:38.732605069 +0000
@@ -107,6 +107,7 @@
- "msmtp-mta"
- "multipath-tools"
- "multipath-tools-boot"
@michalskalski
michalskalski / template.yaml
Last active January 31, 2017 09:40
Fuel network template. One additional network + different network interface names. Controllers are VMs, computes are bare-metals.
adv_net_template:
default:
nic_mapping:
default:
adm: ens5 # admin
api: ens6.101 # management
priv: ens6.102 # private
storage: ens7 # storage
ext: ens8
vm_adm: eth0 # admin