6693 Commits

Author SHA1 Message Date
Michal Nasiadka
3dcb6ad809 nova: disable external metadata haproxy frontend
We are not using it anywhere (metadata agents are using internal network),
so let's disable it by default.

Change-Id: If06db5030b0f09e20ef506c3b3ab39c3573b5f3d
2022-01-05 14:15:06 +00:00
Zuul
0950b464f0 Merge "horizon: move horizon_enable_tls_backend to group_vars" 2021-12-31 11:11:03 +00:00
Zuul
18f0f54536 Merge "Use Docker healthchecks for storm services" 2021-12-31 10:16:12 +00:00
Zuul
e5e1fad6b3 Merge "Add ovn_sb_connection to octavia.conf" 2021-12-30 17:30:18 +00:00
Zuul
dbe9bbc2ad Merge "Add ironic-inspector policy configuration" 2021-12-30 15:22:33 +00:00
Ching Kuo
1077a9a4e7 Add ovn_sb_connection to octavia.conf
This commit added ovn_sb_connection to octavia.conf otherwise it will
try to connect to ovn-sb-db using the default address which is
127.0.0.1 while the ovn-sb-db listen on the IP address of the
api_interface.

Closes-Bug: #1950111

Change-Id: I9cb9a0365d00ffd70562b4b3e83493ec09bd52c2
2021-12-29 10:38:23 +08:00
Mark Goddard
1fd1f131e7 Remove unused template wsgi_python.conf.j2
We stopped using this file in Queens
(https://review.opendev.org/494635), but the file was not removed at
that time.

Change-Id: Ibe5fb291e7c39965f5c4ff5ee4ea0bb1f8e6e9c2
Closes-Bug: #1840158
2021-12-28 14:37:33 +00:00
Zuul
54bc017ae1 Merge "Remove Monasca Log Metrics service" 2021-12-27 22:00:24 +00:00
Zuul
42fd0a795e Merge "Stop creating non-keystone admin endpoints" 2021-12-27 15:06:12 +00:00
Margarita Shakhova
590cd71893 Add ironic-inspector policy configuration
Fix configuration for ironic role in order to apply custom
policies for ironic-inspector API

Closes-Bug: #1952948
Change-Id: Id454c693f570e99ea58d2a6231f01a84b80ca56a
2021-12-22 05:49:55 -05:00
Zuul
97db1b89d7 Merge "Add way to change logrotate scheduling" 2021-12-21 23:53:30 +00:00
Zuul
b9d39af030 Merge "ovn: configure ovn in ovsdb only on ovn-controller hosts" 2021-12-21 18:46:39 +00:00
Zuul
86bca63351 Merge "Fix aodh wsgi config file in Debuntu binary" 2021-12-21 18:29:08 +00:00
Zuul
f4e9c618f4 Merge "Support copying static Vendordata file into Nova API container" 2021-12-21 18:29:03 +00:00
Zuul
efdc335d4d Merge "kibana: do not send cluster statistics to Elastic" 2021-12-21 16:01:32 +00:00
Mark Goddard
4c6d777868 horizon: move horizon_enable_tls_backend to group_vars
This variable is referenced by horizon_listen_port, which becomes
undefined outside of the horizon role. One symptom of this is that
the hostvars variable becomes undefined when referenced for debugging
purposes.

This issue was introduced by Ibb5ad1a5d1bbc74bcb62610d77852d8124c4a323,
which has been backported to Victoria.

This change fixes the issue by moving horizon_enable_tls_backend to
group_vars.

TrivialFix

Change-Id: I1fc4e2a24fe096a49434d7e16851e63efd25d74c
2021-12-21 15:29:08 +00:00
Zuul
6cf9d1301e Merge "Use Docker healthchecks for zookeeper services" 2021-12-21 12:35:37 +00:00
Zuul
2bf4470fc4 Merge "Drop vmtp" 2021-12-21 12:16:06 +00:00
Dr. Jens Harbott
479a78706a Stop creating non-keystone admin endpoints
The admin interface for endpoints never had any real use, the
functionality was the same as for the public or internal endpoints,
except for Keystone. Even for Keystone with API v3 it would no longer
really be needed, but it is still being required by some libraries that
cannot be changed in order to stay backwards compatible.

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: Icf3bf08deab2c445361f0a0124d87ad8b0e4e9d9
2021-12-21 13:09:36 +01:00
Radosław Piliszek
0cbdedd0a3 Drop vmtp
Details in the attached reno.

Change-Id: I438a453ca522493524fdb9760c1edb330916084b
2021-12-21 07:29:32 +00:00
Zuul
0f460f56de Merge "[Security] Add log4j vulnerability mitigation in Elasticsearch" 2021-12-20 22:10:08 +00:00
Zuul
16db562f87 Merge "Use Docker healthchecks for neutron-bgp-dragent service" 2021-12-20 16:06:11 +00:00
Zuul
78c7952d83 Merge "Update noVNC URL for noVNC >= 1.0.0" 2021-12-20 15:01:02 +00:00
likui
f17bd2db77 Add logrotate to libvirt service
Change-Id: I5d6af3707c3de4466699f1a0e6ff2f2e2fe4e123
2021-12-20 19:44:49 +08:00
Zuul
a681494528 Merge "Bump timeout for grafana startup" 2021-12-16 15:13:17 +00:00
Piotr Parczewski
ecbd96bebb [Security] Add log4j vulnerability mitigation in Elasticsearch
Change-Id: I2d4a4fab35771723be82a1c8b98dbe4cc3164f58
2021-12-16 08:40:41 +00:00
Zuul
db789efce0 Merge "Update dnsmasq logging" 2021-12-09 14:31:39 +00:00
Michal Nasiadka
675d4f55d5 bifrost: set IPA deploy logs dir to /var/log/kolla/ironic
By default those are saved in /var/log/ironic/deploy.
Change of path was introduced by [1] since Victoria.

[1]: https://review.opendev.org/c/openstack/bifrost/+/742854

Change-Id: I0fb69a06d6565d633f9ea0e37e0a780a70bb0ced
2021-12-09 11:34:51 +01:00
Dr. Jens Harbott
f8f34e0c47
Bump timeout for grafana startup
The initial migrations when starting grafana for the first time may
sometimes take much longer than 20s, we have seen samples up to near
60s. Allow 120s to have some margin. Also make the timeout parameters
configurable.

Closes-Bug: 1769962
Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: If9186d8aa65150c492657550064789e211dbb570
2021-12-09 08:05:57 +01:00
Seena Fallah
e4af0c03d2 ovn: configure ovn in ovsdb only on ovn-controller hosts
Based on some variables like tunnel_interface_address that are not present in nodes without ovn-controller like controller nodes this task will be failed because of undefined variable

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
Change-Id: Ic511bf6479438f9288a008afb2aae43083a4e69f
Closes-Bug: #1953367
2021-12-06 19:43:00 +03:30
Michal Arbet
f6d591917b Fix aodh wsgi config file in Debuntu binary
This patch is fixing file path for WSGIScriptAlias
as debian/ubuntu binary packages installs /usr/bin/aodh-api
as it is in source images also. For details please check
LP bug report.

Closes-Bug: #1953059
Change-Id: I9efe73193bf828b084c2844be73c9813a969c9c7
2021-12-05 20:11:11 +00:00
Zuul
a338df77f1 Merge "Fix monasca-thresh upgrade" 2021-12-04 21:28:25 +00:00
Zuul
d894d97c5b Merge "Finish removing Monasca Log Transformer" 2021-12-04 21:28:22 +00:00
Zuul
80632b3958 Merge "openvswitch: move from docker exec to openvswitch_db" 2021-12-04 21:06:30 +00:00
Zuul
4ebdf54733 Merge "[release] Set previous_release to xena" 2021-12-02 15:42:37 +00:00
Christian Berendt
fd88098b2e kibana: do not send cluster statistics to Elastic
With the previous setting of optIn=False, users still get nagged on the
starting page to enable telemetry, let's disable completely instead.

Change-Id: I258006c09edf7e36570f6575db07cce474c2ef8b
2021-12-02 15:05:17 +01:00
Pierre Riteau
546122f1ae Update noVNC URL for noVNC >= 1.0.0
The documentation for novncproxy_base_url says:

    If using noVNC >= 1.0.0, you should use ``vnc_lite.html`` instead of
    ``vnc_auto.html``.

While novnc packages in CentOS, Debian, and Ubuntu still provide
vnc_auto.html for compatibility, this could be dropped in the future.

Change-Id: I04883c877015c1835c8b6b2c8be1fb7156ceb340
2021-12-01 17:41:35 +01:00
Pierre Riteau
b06784e875 Fix monasca-thresh upgrade
Change Ib225d76076782d695c9387e1c2693bae9a4521d7 introduced a new
upgrade task for monasca-thresh. Because the task is not restricted to
the correct group, it fails while trying to stop monasca_thresh on hosts
not running this container.

Change-Id: I33c2c458a98145315b0de0c069f13b83f59622eb
Closes-Bug: #1952408
2021-11-26 11:04:41 +01:00
Maksim Malchuk
fa2a0d572b Cleanup leftovers of the removed tempest role
Remove the role directory and one file left atfer
If3cf073e88c83f670c867a49afe48845f9e81008

Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
Change-Id: I6c3b46b858ef4f1954a99bccd10b80973a57ba77
2021-11-26 01:24:16 +03:00
Zuul
fb60cf8aad Merge "Remove unused region_name option" 2021-11-25 18:47:56 +00:00
Doug Szumski
9af42fcebc Support copying static Vendordata file into Nova API container
Nova provides a mechanism to set static vendordata via a file [1].
This patch provides support in Kolla Ansible for using this
feature.

Arguably this could be part of a generic mechansim for copying
arbitrary config, but:

- It's not clear if there is anything else that would take
  advantage of this
- One size might not fit all

[1] https://docs.openstack.org/nova/latest/configuration/config.html#api.vendordata_jsonfile_path

Change-Id: Id420376d96d0c40415c369ae8dd36e845a781820
2021-11-25 17:24:05 +00:00
Michal Nasiadka
8df6cf4814 openvswitch: move from docker exec to openvswitch_db
Change-Id: Ifee8af246312cad5b68ff1bf2793963bf7028dc8
2021-11-25 05:55:23 +00:00
Zuul
e80b877d26 Merge "Specify log file name for Nova API" 2021-11-23 13:09:29 +00:00
Seena Fallah
b5282d4ed4 haproxy: remove unused tls check condition in config
The check condition is similar to the previous if and it can be merged

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
Change-Id: I62213d91945de42ffc87ecad1e96fa4fc0760f10
2021-11-17 03:08:52 +03:30
Doug Szumski
5b06115be8 Finish removing Monasca Log Transformer
This service was disabled in the Wallaby release and all
references to it can now be removed.

Change-Id: I482640dd63959143732d86fcffb320cc94611247
2021-11-15 10:40:21 +00:00
likui
42035e211f The deprecated iscsi deploy interface has been removed since xena
[1] https://docs.openstack.org/releasenotes/ironic/xena.html

Change-Id: Ic0dd9fa7ef76b647682e124b1bae52e931a38225
2021-11-15 18:30:59 +08:00
Doug Szumski
31d08410e0 Remove Monasca Log Metrics service
This service was deprecated in the Wallaby release and we
can now start removing it if it hasn't already been removed.

Change-Id: I7d825906edc4b78677d839942cba3a158f44b2e2
2021-11-15 10:28:43 +00:00
Doug Szumski
76d4a054cf Specify log file name for Nova API
When only the directory is specified, separate log files
are created for the Nova API / metadata services with a
-wsgi postfix. This affects the 'programname' field in
Fluentd which affects the processing of these logs. This
is a regression.

When the log file name is specified, the directory is
not required.

Closes-Bug: #1950185
Change-Id: I8fec8b787349f83c05d8af7f52fc58da7c3e9cc4
2021-11-15 10:00:26 +00:00
Michal Arbet
e598588c32 Add way to change logrotate scheduling
This patch adding way to change schedule
for logrotate.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/813008
Change-Id: I033c51704bfb806f6515db26b8159fae12469ba5
2021-11-12 17:50:03 +01:00
Zuul
28d5fdf0f7 Merge "Stop creating unused cron/logrotate directory" 2021-11-12 10:59:47 +00:00