14556 Commits

Author SHA1 Message Date
Zuul
8d6b5de4c1 Merge "ironic: fix tftp server address in the dnsmasq configuration" 2025-04-18 10:43:22 +00:00
Zuul
d30a35958f Merge "manila: add missing become to "Copying over existing policy file" task" 2025-04-18 10:33:05 +00:00
Zuul
5e74421fcc Merge "Replace ipaddr with ansible.utils.ipaddr" 2025-04-16 16:25:25 +00:00
Zuul
421237f857 Merge "ironic: change enable_ironic_neutron_agent default to no" 2025-04-15 14:24:10 +00:00
Zuul
dfe70e812b Merge "Fix Nova and Cinder external ceph enabled check" 2025-04-10 16:25:37 +00:00
Matt Anson
da12a4be7b Fix Nova and Cinder external ceph enabled check
Restore checks that nova_backend == 'rbd' and
cinder_backend_ceph before pushing libvirt secret
xmls for both services. Removed in [1].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/914997

Closes-Bug: #2106720
Change-Id: Ib0a557adc4b9f8349d54e6e243270e8195dd39e5
2025-04-10 12:16:05 +00:00
Matt Crees
8fa110bb86 Upgrade RabbitMQ docs for the Epoxy release
Updates the HA section to account for the change to quorum queues and
streams by default.

Also adds a note to the SLURP section as it's not needed for Epoxy.

Change-Id: Id4a3b4f3934622572c8493678f109fa67ccfdec6
2025-04-09 16:21:07 +02:00
Matt Crees
50bbcb09d0 Don't allow quorum queues to be disabled
We will be upgrading RabbitMQ to version 4.0 in Epoxy. This will not
work without quorum queues being enabled.

Change-Id: Ic6ad64bf8c62bbff175e15029eb121814032c40e
2025-04-09 16:20:59 +02:00
Michal Arbet
6149799a6d [CI] Use ss instead of netstat
In case of rabbitmq container is unhealthy
let's use `ss` command instead of `netstat` as
``netstat`` is not present in distros anymore and
in containers we already have iproute2 [debian/ubuntu]
and iproute [rhel based] package installed.

[1] https://zuul.opendev.org/t/openstack/build/c70df1ecb52841579207c26cdc159327

+ echo 'rabbitmq - netstat -an'
rabbitmq - netstat -an
+ sudo docker exec rabbitmq netstat -an
OCI runtime exec failed: exec failed: unable to start container process: exec: "netstat": executable file not found in $PATH: unknown

Change-Id: I8417545735ea02d14dc1f83e18aa75b94213f814
2025-04-09 16:18:34 +02:00
klippo
c08bd597ce
Correctly append --ask-vault-password as a single argument
Closes-Bug: #2106540
Change-Id: I143e3267622b106fa65bc952d62412ffcaeeae7c
Signed-off-by: Michael Klippberg <klippo@deny.se>
2025-04-09 09:30:55 +02:00
Zuul
d64909ff30 Merge "Remove deprecated secure_proxy_ssl_header option" 2025-04-09 04:18:14 +00:00
Matt Crees
8f0a4f6726 Remove om_enable_rabbitmq_high_availability
We're going to upgrade RabbitMQ to 4.0, so this option will not longer
be supported.

Change-Id: Ide75a8c9086798bf4bdf5bc02d4a1be17017884f
2025-04-03 09:02:34 +01:00
Zuul
6ca5ed84ba Merge "cinder: Add support for using uWSGI" 2025-04-03 07:36:11 +00:00
Zuul
1676592cef Merge "rabbitmq: Add support for using stream queues for fanout" 2025-04-03 05:21:50 +00:00
Zuul
3bbb392348 Merge "Remove oslo_concurrency from keystone.conf" 2025-04-02 17:38:35 +00:00
Pierre Riteau
ddd6d5ab6b Document dev mode with custom repository
Change-Id: I9b33e5d0a9a4094ccf8a32e5562ab10f577487b3
2025-04-02 15:19:07 +02:00
Michal Nasiadka
4614aad4cc rabbitmq: Add support for using stream queues for fanout
The global configuration of rabbit_qos_prefetch_count = 1
in oslo.messaging is a deliberate choice that balances
compatibility, fairness, and reliability across all
OpenStack services.

While some services (particularly those using quorum queues)
could theoretically benefit from a higher or even unlimited
prefetch count for performance reasons, this is not universally
safe. Specifically, RabbitMQ stream queues - which are used in
certain OpenStack components do not support a prefetch_count of
0. Setting this value to 0 would result in runtime errors
or stalls, as the stream protocol requires a positive credit
window to function properly. Oslo.messaging enforces this by
raising an error if prefetch_count = 0 is set while using stream
queues.

A value of 1 is the lowest legal and universally compatible
setting. It works safely with both stream and quorum queues.
It also improves fairness in message distribution across worker
processes. In distributed services like Nova, Neutron, or
Cinder, this helps avoid uneven load where one worker might
prefetch many messages while others remain idle.
A low prefetch count ensures that messages are pulled only
when the worker is ready, promoting better load balancing and
more predictable performance.

Although a higher prefetch value could increase throughput in
certain scenarios, it comes at the cost of memory usage, risk
of overloading specific nodes, and potential starvation of
others. Until oslo.messaging supports queue-type-specific or
per-service tuning, the value of 1 remains the safest and
most predictable option that works well in mixed OpenStack
environments.

In summary, rabbit_qos_prefetch_count = 1 is not about
optimizing raw throughput for any one service, but about
ensuring stable, fair, and reliable behavior across all
services that rely on oslo.messaging, regardless of the queue
type or broker backend used.

Change-Id: I541f704bfa2e98068096331afbdb591659cbc40b
2025-04-02 12:59:07 +02:00
Zuul
b65c866ab3 Merge "Improve Ironic pin_release_version configuration" 2025-04-01 14:26:27 +00:00
Zuul
509bdc40cc Merge "Disable firewalld in Bifrost container" 2025-04-01 12:49:50 +00:00
Grzegorz Koper
94b91727a2 Improve Ironic pin_release_version configuration
This change improves the configuration of Ironic's pin_release_version setting
by:

1. Renaming the variable from openstack_previous_release_name to
   ironic_pin_release_version to better reflect its purpose
2. Making the setting optional by default
3. Adding proper documentation explaining when to use this setting

See: https://docs.openstack.org/ironic/latest/configuration/config.html#DEFAULT.pin_release_version

Change-Id: Iaecc2a5999ff1dbc5abf56d400f9b9ac5293d1d7
2025-04-01 11:58:24 +02:00
Zuul
53b5d8eeb0 Merge "Move kolla_toolbox to high level client" 2025-04-01 08:20:44 +00:00
Zuul
810940dc31 Merge "Fix reference to generating a private CA" 2025-04-01 05:56:59 +00:00
Zuul
9aad8dd69f Merge "Fix config.json templates for Prometheus exporters" 2025-04-01 01:38:57 +00:00
Zuul
b5c211bb2d Merge "Bump ansible-core versions to 2.17 and 2.18" 2025-03-31 21:22:27 +00:00
Zuul
981e40e8b0 Merge "Fix usage of multiple OVN availability zones" 2025-03-31 16:09:55 +00:00
Zuul
173025b9b5 Merge "Process Epoxy removals from TODO" 2025-03-31 15:53:17 +00:00
Zuul
c89bd66b23 Merge "CI: bump amphora image to jammy" 2025-03-31 15:52:13 +00:00
Zuul
ee7be96384 Merge "Remove service role from ironic-inspector user" 2025-03-31 14:53:36 +00:00
Matt Crees
865c33087a Remove service role from ironic-inspector user
Related-Bug: #2064655
Change-Id: I76956cb9b30ceef5fe8ccd13feb22cc40e6dc305
2025-03-31 10:30:35 +00:00
Roman Krček
c803413c52 Move kolla_toolbox to high level client
Move from APIClient to PodmanClient and DockerClient clients.

Signed-off-by: Roman Krček <roman.krcek@tietoevry.com>
Change-Id: I6c5734b6fff1bd42929851a263620bb4d959ac25
2025-03-31 09:33:56 +00:00
Zuul
c48f394da2 Merge "Assign labels to kolla volumes" 2025-03-31 08:44:08 +00:00
Zuul
5252790047 Merge "Support removing user role assignments" 2025-03-31 06:51:34 +00:00
Zuul
356867ee44 Merge "Adding new placement error to expected critical msgs" 2025-03-28 11:55:23 +00:00
Grzegorz Koper
f1fa914a89 Bump ansible-core versions to 2.17 and 2.18
Bump Ansible collections

Change-Id: I1128f44c2d1731407969fdea337f7923efe91ade
2025-03-28 09:04:24 +00:00
Zuul
39c3fe03f4 Merge "Rabbitmq: enable quorum for transient queues" 2025-03-28 07:44:21 +00:00
Zuul
ddaa130087 Merge "Correct lock path for ironic-inspector" 2025-03-28 06:22:24 +00:00
Zuul
e2b7e4de77 Merge "add lightbits driver support" 2025-03-27 20:57:40 +00:00
Will Szumski
5db605ca33 Correct lock path for ironic-inspector
Follow up to I93bbaa61b2d8b5cb0d1a11783086b37a860173b6 which
used a path that did not exist in the ironic-inspector
container.

Change-Id: I52fc5656d07c2586cf8f184183465f5f9af744de
2025-03-27 16:11:19 +00:00
Zuul
965c493054 Merge "Fix octavia.conf generation after jobboard fix" 2025-03-27 15:20:29 +00:00
Grzegorz Koper
4f9bb2b5a4 Adding new placement error to expected critical msgs
It's expected during upgrade jobs.

Change-Id: I51aca294d256c33ae52eaab4dcc67860cfc876af
2025-03-27 13:08:01 +00:00
Grzegorz Koper
664a79f42f Disable firewalld in Bifrost container
Not needed inside the container, as firewalld runs on the host.
It was failing bifrost deploy jobs on Rocky.

Make directory creation idempotent during bootstrap.

Fix Bifrost tests by using python-ironicclient instead of python-openstackclient, which is not installed in the container.

Change-Id: I5b85efe655978214ad02abf3cda4c4d2b9649add
2025-03-27 13:39:17 +01:00
Sven Kieske
3c3a18aa5b Rabbitmq: enable quorum for transient queues
This helps to improve the reliability of openstack services when
a rabbitmq node has issues.

See also: https://bugs.launchpad.net/oslo.messaging/+bug/2031497

Adjust the upgrade tests similar to what was done
during the introduction of quorum queues in I6c033d460a5c9b93c346e9e47e93b159d3c27830

Closes-Bug: #2078339
Partial-Bug: #2077448
Depends-On: https://review.opendev.org/c/openstack/oslo.messaging/+/888479
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/924623
Signed-off-by: Sven Kieske <kieske@osism.tech>
Change-Id: Idb8a8d2e560206f7697c0771c9ae3913268fa6dd
2025-03-27 08:35:35 +00:00
Marek Buch
bff6ee9d7e Assign labels to kolla volumes
Kolla volumes do not have assigned any labels, that makes
identification and filtering for kolla specific volumes hard.
This change allows for easier volume management.

Closes-bug: #1630545
Change-Id: I6b536f73433cfc64881ac66e53aa0a5eed709ce6
Signed-off-by: Marek Buch <marek.buch@tietoevry.com>
2025-03-27 07:51:50 +00:00
Zuul
75eee4f531 Merge "Allow ignoring missing containers in service-stop" 2025-03-26 21:57:35 +00:00
Michal Nasiadka
44c2fbf622 Fix octavia.conf generation after jobboard fix
Add Jinja2 option to not delete trailing newlines in for loops
Followup after [1]

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/942799


Change-Id: I2683156ea3f241381d58830153dd77b608b6fb6a
2025-03-26 19:52:32 +00:00
Zuul
107b9bf9ce Merge "Deprecate bifrost and deploy-bifrost/deploy-servers subcommands" 2025-03-26 15:31:44 +00:00
Seunghun Lee
6043614519 Fix config.json templates for Prometheus exporters
4 exporters prometheus-cadvisor, prometheus-elasticsearch-exporter,
prometheus-memcached-exporter and prometheus-node-exporter templates
JSON object for copying CA into containers in wrong JSON array.

Corrected this by moving the JSON object templating from
``permissions`` to ``config_files``.

Closes-Bug: #2104253
Change-Id: Ib633667ccb025c87da237894f0c9a5d793bc62f8
2025-03-26 14:33:28 +00:00
Zuul
def1618a70 Merge "Remove notifiers from uwsgi service role" 2025-03-26 14:04:58 +00:00
Zuul
b285dfe82f Merge "Remove contrib/bash-completion and demos" 2025-03-26 12:02:50 +00:00
Michal Nasiadka
c04611efd2 CI: bump amphora image to jammy
focal is not getting builds since July 2024

Change-Id: Ief6e5482e54c34ffdc703bb650bda51bae2bcb5b
2025-03-26 12:45:25 +01:00