13092 Commits

Author SHA1 Message Date
Michal Arbet
eafd3a59af Remove configuration related to api_workers
This patch is removing api related configuration
from service's config files as we are using
apache mod_wsgi and this configuration is not
used.

Change-Id: I69a1542a6f24214fbf6e703782aefb566de4fb26
2022-06-02 12:09:37 +02:00
Zuul
4336ffbe44 Merge "Add support for custom alert notification templates" 2022-06-02 10:05:06 +00:00
Zuul
12e8312520 Merge "Switch to Cortex-A72 cpu on AArch64" 2022-06-02 09:36:32 +00:00
Marcin Juszkiewicz
c9a3dd9cd3 Switch to Cortex-A72 cpu on AArch64
CPU model "max" fails to boot CirrOS and some other images when QEMU 7.0
is used.

Change-Id: Ie34a883ac7ae989d7f74c19b9c9ee9f08a82a35f
2022-06-01 19:09:52 +02:00
Zuul
b42cc19b57 Merge "Do not use keystone_admin_url et al" 2022-06-01 13:30:18 +00:00
Zuul
84ece4de0d Merge "Control Masakari monitors deploy" 2022-05-31 15:56:25 +00:00
Zuul
7ed26c8a46 Merge "Improve MariaDB restore procedure" 2022-05-31 10:18:37 +00:00
Michal Arbet
959b7f7921 Split haproxy and keepalived restarts
We need this to be stop-start as haproxy and proxysql need to be
reconfigured simultaneously when switching between them.

This change also introduces checks for service enablement.

Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I2e10f490305f3d8b1b7abbc66ddb40df65c37fe7
2022-05-31 11:14:40 +02:00
Zuul
28b4c5d35c Merge "docs: add information about development libvirt TLS certs" 2022-05-30 13:36:36 +00:00
Zuul
bb44b51d46 Merge "Fix a comment on openstack_interface" 2022-05-30 12:26:11 +00:00
Zuul
49422da8d9 Merge "[CI] Nullify attempts" 2022-05-30 12:26:07 +00:00
Radosław Piliszek
c906ab2a91 [CI] Use the script module for running core tests
Depending on the way the testing script is called, it may sense
stdin being available and not being a tty [1]. The logic in the
Glance part of the client is then broken [2] as it detects both
volume and stdin as sources of the image and fails.
The proposed approach uses the script module for these tests.
This fixes the cephadm upgrade jobs where this script was called
using the shell module which causes this behaviour. The script
module is not affected. FWIW, the command module is affected
the same as shell because shell extends the command module.

[1] 6810414e45/openstackclient/image/v2/image.py (L114-L120)
[2] 6810414e45/openstackclient/image/v2/image.py (L414)

Change-Id: I3ce4059063e3a51eb1c5b42bda79893b56bd85f0
Story: 2006294
2022-05-29 16:57:47 +00:00
Radosław Piliszek
3cef2671ce [CI] Properly use Yoga u-c everywhere
Follow-up to [1].
This unbreaks CI which was broken by a recent change to
master upper-constraints. [2]

[1] I82c4ff3b246c7db65ac8660b096d4a9a15dda8d7
[2] https://review.opendev.org/c/openstack/requirements/+/843722/3/upper-constraints.txt#b244

Change-Id: Idc7a893f53c6975cc4a3f6090020d973fa2288bb
2022-05-29 16:56:40 +00:00
Radosław Piliszek
8ab13c5d93 Fix a comment on openstack_interface
Change-Id: Id8573ad6727c62e355923b787c51766bc27ed848
2022-05-28 18:31:00 +02:00
Radosław Piliszek
7ca9349b09 Do not use keystone_admin_url et al
Following up on [1].
The 3 variables are only introducing noise after we removed
the reliance on Keystone's admin port.

[1] I5099b08953789b280c915a6b7a22bdd4e3404076

Change-Id: I3f9dab93042799eda9174257e604fd1844684c1c
2022-05-28 18:19:01 +02:00
Radosław Piliszek
153956e458 [CI] Nullify attempts
Per Clark Boylan's feedback [1], retries cause a retry not only
for pre playbook failures but also for cases where Ansible detects
network connectivity issues and they are caused by disks getting
filled to their fullest. This is an issue we experience that
sometimes results in a POST_FAILURE but certain FAILUREs are
retried which wastes CI resources.
The problematic jobs are ceph jobs. They are to be looked into.
Backport to all branches.
We can adjust retries for the core jobs that do not exhibit the
nasty behaviour but first we can try running without retries
to measure the troublesomeness.

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/843536

Change-Id: I32fc296083b4881e8f457f4235a32f94ed819d9f
2022-05-27 20:14:26 +02:00
Zuul
15a81a2883 Merge "Do not use a different port for Keystone admin endpoint" 2022-05-27 08:33:57 +00:00
Zuul
1716d6945f Merge "Make redis connection string configurable" 2022-05-26 16:05:21 +00:00
Radosław Piliszek
42c2520144 Do not use a different port for Keystone admin endpoint
Docs and reno included.

Change-Id: I5099b08953789b280c915a6b7a22bdd4e3404076
2022-05-26 13:38:26 +00:00
Zuul
7130d101ca Merge "talk TLS to openstack exporter via haproxy" 2022-05-26 13:03:38 +00:00
Michal Arbet
71ea62543a Make redis connection string configurable
Change-Id: I44c8a059918918f5bdc1c0190110a05d8d7f8f2d
2022-05-26 14:49:17 +02:00
Maksim Malchuk
d3dbd812c5 Control Masakari monitors deploy
Add a switches to enable/disable deploy of the Masakari monitors.

Change-Id: I3ab603f7cab7946ea8f2e063fe91190d6592066a
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-05-25 15:19:32 +03:00
Zuul
9549e8ccfe Merge "genpwd: handle lack of password file nicer" 2022-05-25 06:03:04 +00:00
Zuul
e9882bae94 Merge "ovn: add network group to neutron-ovn-metadata-agent" 2022-05-24 22:41:45 +00:00
k-s-dean
fcba927d7b talk TLS to openstack exporter via haproxy
Closes-Bug: #1975598
Change-Id: If4c85f8e960141d08a89accdc11a3271f31974c1
2022-05-24 16:23:42 +01:00
Zuul
118ca739e3 Merge "CI: Fix prometheus-efk scenario with TLS enabled" 2022-05-24 14:48:26 +00:00
Marcin Juszkiewicz
333c74feb4 genpwd: handle lack of password file nicer
From:

(kolla) 13:11 (s) marcin@puchatek:kolla-ansible$ kolla-genpwd
Traceback (most recent call last):
  File "/home/marcin/.virtualenvs/kolla/bin/kolla-genpwd", line 8, in <module>
    sys.exit(main())
  File "/home/marcin/.virtualenvs/kolla/lib/python3.10/site-packages/kolla_ansible/cmd/genpwd.py", line 135, in main
    genpwd(passwords_file, length, uuid_keys, ssh_keys, blank_keys,
  File "/home/marcin/.virtualenvs/kolla/lib/python3.10/site-packages/kolla_ansible/cmd/genpwd.py", line 59, in genpwd
    with open(passwords_file, 'r') as f:
FileNotFoundError: [Errno 2] No such file or directory: '/etc/kolla/passwords.yml'

To:

(kolla) 13:17 (s) marcin@puchatek:kolla-ansible$ kolla-genpwd
ERROR: Passwords file "/etc/kolla/passwords.yml" is missing

Change-Id: I18a9559daeb3d124a03dcb735ebb01a2cf24f617
2022-05-24 13:18:20 +02:00
Zuul
2bbf5273c6 Merge "[CI] Move queue setting to project level" 2022-05-24 10:42:37 +00:00
Mark Goddard
8bff3e9a67 CI: Fix prometheus-efk scenario with TLS enabled
Change-Id: Ic55a7384c298ef517aa4b7f0eaa67d53b5d70df0
2022-05-24 09:31:30 +01:00
Radosław Piliszek
3e75a33ad4 Use the new image naming scheme
Change-Id: Ib4b15ed4feac82d8492b1c0f0238a752eac668e6
2022-05-23 06:37:25 +00:00
Mark Goddard
5d28a7c89b masakari: support libvirt SASL in instance monitor
Since enabling libvirt SASL authentication, the masakari instance
monitor fails to connect to libvirt. We see the following error in logs:

    libvirt.libvirtError: authentication failed: Failed to start SASL
    negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
    found)

This change adds support for SASL authentication in Masakari instance
monitor.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
Closes-Bug: #1965754
Change-Id: I974046662b383a12ac6281b725523760a96657bd
2022-05-21 13:27:27 +00:00
Radosław Piliszek
564b405a91 [CI] Restore token critical error filter
It was removed as part of improvements in [1]. But it seems it's
a different type/class of errors and should still be filtered
out here.
This time for all the services to avoid extra copies.

[1] Ie6a95c3ca84df82ca8463cf76054e125cb1ffff1

Change-Id: If7c5b938dc7417831a90f360d6e3655d1ad4084e
2022-05-21 13:27:15 +00:00
Radosław Piliszek
ae88173ff1 [CI] Keep testing with Yoga u-c
The projects started dropping support for Python 3.6 and thus
CentOS Stream 8 which K-A tests against, resulting in broken CI.
This change ensures that we keep upper-contraints also on Yoga as
we do for the images we deploy.

Change-Id: I82c4ff3b246c7db65ac8660b096d4a9a15dda8d7
2022-05-21 15:24:08 +02:00
Michal Nasiadka
4a62a8df90 ovn: add network group to neutron-ovn-metadata-agent
According to OVN SRIOV docs [1] - neutron-ovn-metadata-agent needs
to be deployed on network nodes (OVN chassis).

[1]: https://docs.openstack.org/neutron/latest/admin/ovn/sriov.html

Change-Id: I111df79f08eb76a735f33c6edf03b5a302fb6cc3
2022-05-18 16:11:46 +02:00
Zuul
789bae70eb Merge "Fix redis_sentinel container restarts" 2022-05-18 13:18:31 +00:00
Zuul
1aa13614d8 Merge "Delete keystone_token_provider variable" 2022-05-18 10:20:47 +00:00
Piotr Parczewski
77e811e25c Add support for custom alert notification templates
Change-Id: I9e4e1287ea69960ae3b13734acc3eb0b087a8d86
2022-05-18 12:03:47 +02:00
Radosław Piliszek
171eabbf85 [CI] Move queue setting to project level
Per [1].

[1] http://lists.zuul-ci.org/pipermail/zuul-discuss/2022-May/001801.html

Change-Id: I2197b5436a4b4d4220c916d2f3129f49f13b70ec
2022-05-18 09:51:26 +02:00
Ramona Rautenberg
b3b9dff3cd Delete keystone_token_provider variable
In the last PTG it was decided to drop the keystone_token_provider variable, because there is no other option anymore.

Signed-off-by: Ramona Rautenberg <rautenberg@osism.tech>
Change-Id: I1ee2c3f9b7dbbbf4633c5874cdbb3c4f8c09e277
2022-05-17 15:53:23 +02:00
Zuul
5645a4c008 Merge "[CI] Test Glance interaction with Cinder" 2022-05-16 10:17:35 +00:00
Zuul
4976bff593 Merge "Remove sanity checks" 2022-05-16 10:14:40 +00:00
Zuul
a482ef956a Merge "Use 'cloudkitty_influxdb_use_ssl' when creatign InfluxDB database" 2022-05-16 10:04:09 +00:00
Zuul
1b9843e1f0 Merge "ovn: add ovn-openflow-probe-interval var" 2022-05-16 10:03:18 +00:00
Zuul
b87e833d91 Merge "Add support for Pure Storage FlashArray backend to Cinder" 2022-05-13 20:01:49 +00:00
Zuul
e0ef8057ff Merge "Fix Ansible errors if globals.yml is not modified" 2022-05-13 20:01:46 +00:00
Michal Arbet
257ef9fae8 Fix redis_sentinel container restarts
Redis Sentinel modifies its config.
Since we now check config in check-containers,
the redis_sentintel container is restarted each time.

This patch together with kolla patch fixes this issue.

Closes-Bug: #1967664
Depends-On: https://review.opendev.org/c/openstack/kolla/+/840954
Change-Id: Ia76329cb851d266cd888f51b7f70a4cdc40e3ac3
2022-05-13 20:28:13 +02:00
Tim Beermann
591f366ed7 Remove sanity checks
"Smoke tests" for barbican, cinder, glance and keystone have been removed as discussed in PTG April 2022.

Signed-off-by: Tim Beermann <beermann@osism.tech>
Change-Id: I613287a31e0ea6aede070e7e9c519ab2f5f182bd
2022-05-13 17:41:34 +00:00
Simon Dodsley
f088b799a5 Add support for Pure Storage FlashArray backend to Cinder
Add an enable_cinder_backend_pure_iscsi and
enable_cinder_backend_pure_fc options to etc/kolla/globals.yml
to enable use of the FlashArray backend.
Update the documentation to include a section on configuring
Cinder with the FlashArray.

Implements: blueprint pure-cinder-driver
Change-Id: I464733f1322237321ed1ffff8636cf30bd1cbb38
2022-05-13 10:11:08 -04:00
Zuul
3c5f25fc4e Merge "Fix malformed OIDCMemCacheServers" 2022-05-13 10:33:17 +00:00
Zuul
dd7e10e194 Merge "Put openstack exporter behind HAproxy so only one is queried at a time" 2022-05-13 09:48:56 +00:00