6379 Commits

Author SHA1 Message Date
zhangmeng
41a9402910 make "external_labels" optional on prometheus.yml
Closes-bug: 1944699
Change-Id: I6d0bb3b88983846fdd9c8af09456a106a940d191
2022-07-20 15:25:30 +08:00
Dr. Jens Harbott
3f8683cccc Don't disable neutron-bgp-dragent with OVN
The neutron-bgp-dragent container is also needed when using OVN as
backend plugin.

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: Idec79a53fad048f45139af3b8c72e85385ac80b6
2022-07-03 22:01:52 +02:00
Zuul
fde5eeec29 Merge "Remove unused variable haproxy_enable_federation_openid" 2022-06-30 12:35:14 +00:00
Mark Goddard
2793741fa4 Remove unused variable haproxy_enable_federation_openid
Change-Id: Ia735f0f8c12acf6b89fcb8e31a3e290a4def96ab
2022-06-30 10:41:13 +01:00
Pierre Riteau
13b0f3b861 Make external access to monitoring services configurable
Change-Id: Iaf6bf36ae0adce3342981c36c859fc138b172f6b
2022-06-27 11:57:53 +02:00
Zuul
5865b0e9a8 Merge "Support setting Nova API microversion for openstack-exporter" 2022-06-24 08:48:43 +00:00
Zuul
d6bb0dc7e2 Merge "Fix typo in prometheus-node-exporter restart handler" 2022-06-23 20:07:26 +00:00
Pierre Riteau
41fba3c5df Support setting Nova API microversion for openstack-exporter
Starting from v1.5.0 of the exporter, OS_COMPUTE_API_VERSION can be set
to configure the Nova API version to be used [1]. Microversion 2.1 can
be used to keep metrics unmodified from the previous exporter version
deployed by Kolla (v1.3.0).

Support it with prometheus_openstack_exporter_compute_api_version,
defaulting to using the latest version.

[1] https://github.com/openstack-exporter/openstack-exporter/pull/201

Change-Id: I7605a3f9f74effb29ecec3b28e4709fd5f7f8cd4
2022-06-23 17:11:50 +02:00
Pierre Riteau
06223d651b Fix typo in prometheus-node-exporter restart handler
Change-Id: Ib05569a08e2fe21dae31cdacad3b622d17cb5db3
2022-06-22 16:51:49 +02:00
Michal Arbet
889c0d168c Fix nested mounts of /run/openvswitch
As kolla-toolbox is mounting /run:/run
there is no need to mount also /run/openvswitch.
This is causing /run/openvswitch is mounted
again and again up to 32767 times after kolla-toolbox
restart.

Closes-Bug: #1979295
Change-Id: I49b3bde8b2bd61b6c931a81542a0d89f8a303ffc
2022-06-21 11:47:04 +02:00
Radosław Piliszek
72b63dfee7 Further Keystone-related cleanups
Per comments on [1].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/843727

Change-Id: I60162b54bc06e158534d29311d4474b34750c64d
2022-06-20 08:40:03 +00:00
Zuul
6a329d4642 Merge "Fix typo in endpoint influxdb_internal_endpoint variable" 2022-06-13 13:14:08 +00:00
Will Szumski
49006e56d9 Add keystone_authtoken.service_type
Fixes an issue where access rules failed to validate:

    Cannot validate request with restricted access rules. Set
    service_type in [keystone_authtoken] to allow access rule validation

I've used the values from the endpoint. This was mostly a straight
forward copy and paste, except:

- versioned endpoints e.g cinderv3 where I stripped the version
- monasca has multiple endpoints associated with a single service. For
  this, I concatenated logging and monitoring to be logging-monitoring.

Closes-Bug: #1965111
Change-Id: Ic4b3ab60abad8c3dd96cd4923a67f2a8f9d195d7
2022-06-09 22:49:38 +02:00
T0125936 - LALLAU Bertrand
13af278708 Fix typo in endpoint influxdb_internal_endpoint variable
This patch simply fix a typo in 'influxdb_internal_endpoint' variable.

Change-Id: I1b1068e84be7f7eaff1a4eab1ba9ddcd6f4241c7
2022-06-08 11:31:38 +02:00
Michal Arbet
fe1a8a346c Remove nova related config from placement
This patch is removing nova configuration
options, this was probably caused by migration
from nova-placement to placement.

Change-Id: Ib54b26428b79d5c4f554928b8634a0bb4e884a90
2022-06-02 16:35:32 +02:00
Zuul
53f546778d Merge "Remove configuration related to api_workers" 2022-06-02 13:38:39 +00:00
Zuul
f54a687a20 Merge "Split haproxy and keepalived restarts" 2022-06-02 11:45:25 +00:00
Michal Arbet
eafd3a59af Remove configuration related to api_workers
This patch is removing api related configuration
from service's config files as we are using
apache mod_wsgi and this configuration is not
used.

Change-Id: I69a1542a6f24214fbf6e703782aefb566de4fb26
2022-06-02 12:09:37 +02:00
Zuul
4336ffbe44 Merge "Add support for custom alert notification templates" 2022-06-02 10:05:06 +00:00
Zuul
b42cc19b57 Merge "Do not use keystone_admin_url et al" 2022-06-01 13:30:18 +00:00
Zuul
84ece4de0d Merge "Control Masakari monitors deploy" 2022-05-31 15:56:25 +00:00
Zuul
7ed26c8a46 Merge "Improve MariaDB restore procedure" 2022-05-31 10:18:37 +00:00
Michal Arbet
959b7f7921 Split haproxy and keepalived restarts
We need this to be stop-start as haproxy and proxysql need to be
reconfigured simultaneously when switching between them.

This change also introduces checks for service enablement.

Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I2e10f490305f3d8b1b7abbc66ddb40df65c37fe7
2022-05-31 11:14:40 +02:00
Radosław Piliszek
7ca9349b09 Do not use keystone_admin_url et al
Following up on [1].
The 3 variables are only introducing noise after we removed
the reliance on Keystone's admin port.

[1] I5099b08953789b280c915a6b7a22bdd4e3404076

Change-Id: I3f9dab93042799eda9174257e604fd1844684c1c
2022-05-28 18:19:01 +02:00
Zuul
15a81a2883 Merge "Do not use a different port for Keystone admin endpoint" 2022-05-27 08:33:57 +00:00
Radosław Piliszek
42c2520144 Do not use a different port for Keystone admin endpoint
Docs and reno included.

Change-Id: I5099b08953789b280c915a6b7a22bdd4e3404076
2022-05-26 13:38:26 +00:00
Maksim Malchuk
d3dbd812c5 Control Masakari monitors deploy
Add a switches to enable/disable deploy of the Masakari monitors.

Change-Id: I3ab603f7cab7946ea8f2e063fe91190d6592066a
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-05-25 15:19:32 +03:00
k-s-dean
fcba927d7b talk TLS to openstack exporter via haproxy
Closes-Bug: #1975598
Change-Id: If4c85f8e960141d08a89accdc11a3271f31974c1
2022-05-24 16:23:42 +01:00
Radosław Piliszek
3e75a33ad4 Use the new image naming scheme
Change-Id: Ib4b15ed4feac82d8492b1c0f0238a752eac668e6
2022-05-23 06:37:25 +00:00
Mark Goddard
5d28a7c89b masakari: support libvirt SASL in instance monitor
Since enabling libvirt SASL authentication, the masakari instance
monitor fails to connect to libvirt. We see the following error in logs:

    libvirt.libvirtError: authentication failed: Failed to start SASL
    negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
    found)

This change adds support for SASL authentication in Masakari instance
monitor.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
Closes-Bug: #1965754
Change-Id: I974046662b383a12ac6281b725523760a96657bd
2022-05-21 13:27:27 +00:00
Zuul
789bae70eb Merge "Fix redis_sentinel container restarts" 2022-05-18 13:18:31 +00:00
Zuul
1aa13614d8 Merge "Delete keystone_token_provider variable" 2022-05-18 10:20:47 +00:00
Piotr Parczewski
77e811e25c Add support for custom alert notification templates
Change-Id: I9e4e1287ea69960ae3b13734acc3eb0b087a8d86
2022-05-18 12:03:47 +02:00
Ramona Rautenberg
b3b9dff3cd Delete keystone_token_provider variable
In the last PTG it was decided to drop the keystone_token_provider variable, because there is no other option anymore.

Signed-off-by: Ramona Rautenberg <rautenberg@osism.tech>
Change-Id: I1ee2c3f9b7dbbbf4633c5874cdbb3c4f8c09e277
2022-05-17 15:53:23 +02:00
Zuul
4976bff593 Merge "Remove sanity checks" 2022-05-16 10:14:40 +00:00
Zuul
a482ef956a Merge "Use 'cloudkitty_influxdb_use_ssl' when creatign InfluxDB database" 2022-05-16 10:04:09 +00:00
Zuul
1b9843e1f0 Merge "ovn: add ovn-openflow-probe-interval var" 2022-05-16 10:03:18 +00:00
Zuul
b87e833d91 Merge "Add support for Pure Storage FlashArray backend to Cinder" 2022-05-13 20:01:49 +00:00
Michal Arbet
257ef9fae8 Fix redis_sentinel container restarts
Redis Sentinel modifies its config.
Since we now check config in check-containers,
the redis_sentintel container is restarted each time.

This patch together with kolla patch fixes this issue.

Closes-Bug: #1967664
Depends-On: https://review.opendev.org/c/openstack/kolla/+/840954
Change-Id: Ia76329cb851d266cd888f51b7f70a4cdc40e3ac3
2022-05-13 20:28:13 +02:00
Tim Beermann
591f366ed7 Remove sanity checks
"Smoke tests" for barbican, cinder, glance and keystone have been removed as discussed in PTG April 2022.

Signed-off-by: Tim Beermann <beermann@osism.tech>
Change-Id: I613287a31e0ea6aede070e7e9c519ab2f5f182bd
2022-05-13 17:41:34 +00:00
Simon Dodsley
f088b799a5 Add support for Pure Storage FlashArray backend to Cinder
Add an enable_cinder_backend_pure_iscsi and
enable_cinder_backend_pure_fc options to etc/kolla/globals.yml
to enable use of the FlashArray backend.
Update the documentation to include a section on configuring
Cinder with the FlashArray.

Implements: blueprint pure-cinder-driver
Change-Id: I464733f1322237321ed1ffff8636cf30bd1cbb38
2022-05-13 10:11:08 -04:00
Zuul
3c5f25fc4e Merge "Fix malformed OIDCMemCacheServers" 2022-05-13 10:33:17 +00:00
Mathias Fechner
491b8fb49a ovn: add ovn-openflow-probe-interval var
The inactivity probe interval of the OpenFlow  connection
to the OpenvSwitch integration bridge, in seconds. If the
value is zero, it disables the connection keepalive  fea‐
ture.

If  the  value  is  nonzero,  then it will be forced to a
value of at least 5s.

The value is set to 60 seconds by default as described in
"OVN issues in the field".

https://www.openvswitch.org/support/ovscon2019/day1/1436-OVSCON-Nouman.pdf
https://www.ovn.org/support/dist-docs/ovn-controller.8.html

Change-Id: I7066c3a8b33b482774f310c45142ac2936a5c405
2022-05-12 11:55:42 +02:00
k-s-dean
656f6cdb08 Put openstack exporter behind HAproxy so only one is queried at a time
Closes-Bug: #1972818

Change-Id: I9e36b9169b6725bf6db953e464fc099087747778
2022-05-12 07:41:57 +00:00
Kevin Rasmussen
6563191de8 Fix malformed OIDCMemCacheServers
Change from comma separated list of memcache servers to space separated list.
Comma seperated list results in a 500 error response.
Upstream docs state this should be space separated and can be found here:
https://github.com/zmartzone/mod_auth_openidc/blob/master/auth_openidc.conf#L629-L631

Closes-Bug: #1972033
Change-Id: Ibaef3672c656213dd5ba1488379d686130e041c5
2022-05-06 15:31:45 -07:00
Pierre Riteau
555cd39f1a Fix typos in docs
This is a follow up to I7e5c1e20c7b66b64cbd333f669ef8d8da60daaa8.

Change-Id: I11a86f59c1fb9cddde3370b544ee7bf4e8ae4fb4
2022-05-02 15:44:34 +02:00
Zuul
6b9321dc23 Merge "Multiple DHCP ranges for Ironic Inspector" 2022-05-02 10:50:39 +00:00
Rafael Weingärtner
ceddf3b202 Use 'cloudkitty_influxdb_use_ssl' when creatign InfluxDB database
Change-Id: Iff395a1dff654eb4b005eec2db395b603b1aec72
2022-04-27 08:50:57 -03:00
Christian Berendt
ea5b4d7e26 [bifrost] add bifrost_deploy_verbosity parameter
With the parameter bifrost_deploy_verbosity it is possible
to set the verbosity of the bootstrap of Bifrost.

This makes it possible to reduce verbosity when running
/bifrost/playbooks/install.yaml if needed.

Change-Id: I5815220f2193a492ae7e1f63443075790ae7aaef
2022-04-24 18:07:30 +02:00
Zuul
2445c78c92 Merge "[ironic] add coordination backend for ironic inspector" 2022-04-22 16:05:58 +00:00