Sync up arcus/train-production to arcus/ussuri-production

See merge request !173

Conflicts:
	etc/kayobe/environments/production/kolla/config/cinder/cinder-volume.conf
	etc/kayobe/environments/production/kolla/config_template/cinder/cinder-volume.conf
	etc/kayobe/environments/production/secrets.yml

Update Octavia hard-coded resources after repaving the Arcus staging cluster...

See merge request !170

John Garbutt authored 2 years ago and Paul Browne committed 2 years ago

Port 4569 is used for the haproxy checks, be we didn't open it.
Lets open that up, but only on the internal network.

 server clc-ar17-u24 10.5.1.1:3306
   check port 4569  inter 2000 rise 2 fall 5

John Garbutt authored 2 years ago and Paul Browne committed 2 years ago

We need to expose on net ip so we get loadbalancing

Add Grafana+Kibana firewall rules on Internal API network required to satisfy Ussuri Prometheus checks

Update Octavia hard-coded resources after repaving the Arcus staging cluster to perform T->U upgrade

Update staging env Tempest overrides from re-paved Ussuri cluster to reflect UUID changes

See merge request !169

Fix/increase overheating threshold

See merge request !167

Fix issue with firewall ordering

See merge request !164

The issue was that the firewall rules were being inserted below a rule
that dropped all traffic. Here is a snippet from iptables-save.

```
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -j firewallgen_input
```

By always inserting this beginning of the chain, we ensure that the
rules in this chain always take precedence.

Fix mariadb haproxy check

See merge request !162

Port 4569 is used for the haproxy checks, be we didn't open it.
Lets open that up, but only on the internal network.

 server clc-ar17-u24 10.5.1.1:3306
   check port 4569  inter 2000 rise 2 fall 5

Fix up grafana and kibana haproxy alerts

See merge request !161

We need to expose on net ip so we get loadbalancing

Make elasticsearch heap smaller in staging

See merge request !159

Disable kayobe fact cache

See merge request !160

This caused issues during the upgrade as one of the playbooks create an incomplete cache file. Temporarily disabling to work around this issue.

To remove the memory problems.

Fix issue with glance multi store config

See merge request !157

Merge from scientific-openstack/ussuri

See merge request !158