6746 Commits

Author SHA1 Message Date
Célestin Matte
4b52e11528 Fix ansible-lint warnings related to jinja spacing
Change-Id: I901c0a57efcb6cbaaac43f64f2243fff7d7980c8
2023-09-18 15:44:39 +02:00
Zuul
65079b4dc1 Merge "keystone: ensure bool for two parameters" 2023-09-18 12:26:24 +00:00
Zuul
b69aa4ea08 Merge "ceilometer: process custom event_pipeline.yaml with merge_yaml" 2023-09-18 10:18:03 +00:00
Zuul
ff9d69d247 Merge "Configure Nova libvirt.num_pcie_ports to 16 by default" 2023-09-18 10:08:24 +00:00
Christian Berendt
c9a4b36e52 keystone: ensure bool for two parameters
* keystone_enable_federation_openid
* enable_keystone_federation

Closes-Bug: #2036390

Change-Id: Ieef1dce006c339643ad4fa544218c6482c2ad32c
2023-09-18 11:09:39 +02:00
Christian Berendt
50abf90f59 ceilometer: process custom event_pipeline.yaml with merge_yaml
Allow more flexibility by adding a host specific template. Also
using the merge_yaml action allow us to drop the logic around deciding
which template to use.

Change-Id: I41a3226679c622e5e98df074cee195e8436ea45b
2023-09-15 11:22:49 +02:00
Michal Nasiadka
f6d0ffd61c ovn: Fix broken deployment/reconfig on Ubuntu
Initially Ubuntu/Debian used /var/run/openvswitch as default OVN run dir,
it seems it has changed long time ago - but we haven't picked that up on latest
OVN DB refactor.

Adding in OVN and OVN upgrade Debian jobs to enhance coverage.

Closes-Bug: #2035584

Change-Id: I78967c4499269578ac921ad9a553946b65e1293f
2023-09-14 09:41:09 +00:00
Jeffrey Zhang
b8e77deeef Configure Nova libvirt.num_pcie_ports to 16 by default
When using the 'q35' machine type, by default, it allows only
a single PCIe device to be hotplugged. Nova currently sets
'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is
not sufficient for hotplug use.

The max value is 28, but 16 is enough in most cases.

More info please check

* [0] https://libvirt.org/pci-hotplug.html
* [1] https://marcin.juszkiewicz.com.pl/2018/02/19/hotplug-in-vm-easy-to-say/
* [2] https://review.opendev.org/c/openstack/nova/+/545034

Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com>

Change-Id: I7b8063566837aeb947927b7d6858417982b63deb
Closes-Bug: 1909063
2023-09-11 12:56:02 +00:00
Christian Berendt
9dc2b019a2 senlin: add missing cafile parameter
The cafile parameter in the authentication section is required
in the senlin.conf configuration file when working with
self-signed certificates.

Change-Id: I3cd43cc7f43782a6c1d701a3e5b977bbc42e3719
2023-09-08 18:24:02 +02:00
Zuul
e38f5e0c23 Merge "ovn: Improve clustering" 2023-09-06 10:08:43 +00:00
Zuul
df44a7fb16 Merge "Prevent libvirtd reload when only generating config" 2023-09-05 18:21:51 +00:00
Michal Nasiadka
7cc4bf6203 ovn: Improve clustering
Currently clustering steps are very static, if for a reason first
node in the inventory fails and gets re-introduced - K-A will create
a second empty cluster on that node.

This patch changes the approach and checks if cluster exists, if it
does - chooses a donor for the new node from currently running
node set.

Also it fixes node replacement - it removes old node from cluster
(that has the same ip address as newly provisioned node).

Closes-Bug: #1875223

Change-Id: Ia025283e38ea7c3bd37c7a70d03f6b46c68f4456
2023-09-05 09:18:38 +00:00
Zuul
a7756fa3a0 Merge "Configure OVN to emit "need to frag" packets in case of MTU mismatch" 2023-09-04 08:59:56 +00:00
Zuul
26ba26cd18 Merge "Fix designate-producers not running properly" 2023-08-31 21:29:35 +00:00
Zuul
dc42b98e7a Merge "Change regex for the multiline parser at the fluentd rabbitmq input" 2023-08-31 10:29:50 +00:00
Zuul
b3c13d22ff Merge "Use better default bind address for ironic-tftp" 2023-08-30 17:03:38 +00:00
Zuul
33e652bde6 Merge "Fixes WEBSSO_KEYSTONE_URL Value" 2023-08-30 14:50:37 +00:00
Zuul
93ab4914e9 Merge "Drop useless DUMMY_ENVIRONMENT environment for cron container" 2023-08-30 14:49:27 +00:00
Zuul
3bdcaa2ed1 Merge "Fixes task name in notify module to the actual task name" 2023-08-30 14:49:25 +00:00
joek-office
b9f2ad94a7 Change regex for the multiline parser at the fluentd rabbitmq input
Related-Bug: #2015184

Closes-Bug: #2015184

Change-Id: I6ea0949d58e38e2cda41c9702001e7bd500f23f1
2023-08-30 12:25:00 +00:00
Robin Klostermeyer
9a9c8fe794 Add ironic-prometheus-exporter
This commit adds the ironic-prometheus-exporter, following the
conventions used by the previously integrated exporters. '[The] Ironic
Prometheus Exporter is a Tool to expose hardware sensor data in the
Prometheus format through an HTTP endpoint.'[0]

Prometheus has been enabled in CI jobs to ensure test coverage.

[0] https://opendev.org/openstack/ironic-prometheus-exporter

Depends-On: https://review.opendev.org/c/openstack/kolla/+/874415

Change-Id: I6d421effd833d2e0524dd0b81736445c9a730ea9
2023-08-30 09:24:56 +02:00
Juan Pablo Suazo Sarrocchi
95317e5df2 Fixes task name in notify module to the actual task name
An OVS-DPDK task had part of its name capitalized,
presumably due to the newly added ansible linter,
but this change was not reflected in the notify
module which calls the task. This results in an
inability to deploy openstack with OVS-DPDK.

This commit fixes the name of the task in the
notify module.

Closes-Bug: #2033413
Change-Id: Iae8a937bb2c35d2eb83e2c4522d829a6cfe25f0d
Signed-off-by: Juan Pablo Suazo <jsuazo@whitestack.com>
2023-08-29 12:51:44 -04:00
Bartosz Bezak
cf8283928e Configure OVN to emit "need to frag" packets in case of MTU mismatch
It is useful when external network's MTU is lower then internal
geneve networks.
Host kernel needs to be in version >= 5.2 for this option to work.
All Kolla supported host operating systems have higher kernel version.

Change-Id: Id64e99b07e2bb5e6c97b784f4ffedafc7e7de188
2023-08-29 10:08:53 +00:00
Erik Olof Gunnar Andersson
8e3c168908 Fix designate-producers not running properly
Kolla is setting the producer tasks to None, and this
disables all producer tasks.

Starting with the next release of Designate a new task
was added to the producer named increment_serial that
is now critical path for incrementing the serial for each zone.
fb9c2da977

Closes-Bug: #1879557
Change-Id: Ief8dca4e27197c9576e215cbd960da75f6fdc20c
2023-08-29 10:07:32 +00:00
Maksim Malchuk
b205dad892 Drop useless DUMMY_ENVIRONMENT environment for cron container
Since I033c51704bfb806f6515db26b8159fae12469ba5 the DUMMY_ENVIRONMENT
environment for cron container is useless, lets drop it.

Trivial-Fix

Change-Id: Id8bf642a57b54ecafe0ee6981e044b1aba872ef7
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-08-27 02:20:46 +03:00
Matt Crees
60282285bd Add command to force reset the state of RabbitMQ
This command can be invoked with ``kolla-ansible rabbitmq-reset-state``.
This is primarily designed to be used when enabling HA queues[1].

As such, this also updates the RabbitMQ documentation to use this
command.

[1] https://docs.openstack.org/kolla-ansible/latest/reference/message-queues/rabbitmq.html#high-availability

Change-Id: I6ad95a3618fc1a34af56657ef99ef14dc979f17a
2023-08-25 10:09:58 +00:00
Michal Nasiadka
d1a52b5816 debian: Add Bookworm Host OS support
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/892323

Change-Id: I11db700511233aa60229ee65d0cc96e46aafdf90
2023-08-24 19:08:36 +00:00
Zuul
0765e276fe Merge "glance/neutron: drop nbproc and add nbthread support" 2023-08-21 15:03:28 +00:00
Rodolfo Díaz
59204b2fee Fixes WEBSSO_KEYSTONE_URL Value
Change I60162b54bc06e158534d29311d4474b34750c64d
removed the `/v3` prefix from the WEBSSO_KEYSTONE_URL
variable. However, keystone endpoints do in fact
have the `/v3` prefix, and Horizon expects the
WEBSSO_KEYSTONE_URL variable to already contain
the prefix.

This patch adds the prefix again so that SSO
works with Horizon again.

Closes-Bug: #2028921
Change-Id: I5799f7a6fa4f52c2904b14fc02ed18443f4194bd
Signed-off-by: Juan Pablo Suazo <jsuazo@whitestack.com>
2023-08-21 14:19:01 +00:00
Michal Nasiadka
30fce65b2a glance/neutron: drop nbproc and add nbthread support
Change-Id: I42f9f182a2dab8563008e8b817ac58a69b72b062
2023-08-18 12:21:41 +00:00
Zuul
6af1754071 Merge "loadbalancer: remove support for haproxy_processes" 2023-08-18 10:28:23 +00:00
Léo Gillot-Lamure
b230858fb4 loadbalancer: remove support for haproxy_processes
Threads are the recommended way to scale CPU performance since HAProxy
1.8.

Official documentation says: « While "nbproc" historically used to be the only
way to use multiple processors, it also involved a number of shortcomings
related to the lack of synchronization between processes (health-checks, peers,
stick-tables, stats, ...) which do not affect threads. As such, any modern
configuration is strongly encouraged to migrate away from "nbproc" to
"nbthread". ».

Change-Id: I6f2e9d74e68703c8e0827e495945a75f020e1561
2023-08-18 06:39:58 +00:00
Zuul
3eec4b41aa Merge "loadbalancer: support cpu-map for threads" 2023-08-17 14:31:06 +00:00
Zuul
4cd8b77fd4 Merge "loadbalancer: support setting nbthread with variable haproxy_threads" 2023-08-17 14:11:28 +00:00
Zuul
dbad6c1f28 Merge "Fix improper designate-manage command usage." 2023-08-17 11:55:40 +00:00
Zuul
a34f1cd7e6 Merge "Add support for checking Octavia cert expiration" 2023-08-17 07:21:28 +00:00
Zuul
01a911b27d Merge "Fix an undefined variable bug for venus deployment" 2023-08-15 09:23:14 +00:00
Maksim Malchuk
e365f4b70d Deny access to public /server-status in http Openstack services
This change block access to the public /server-status url on all
http services exposed by HAProxy, also fixes an issue with Horizon
where 'Require all granted' open access to the /server-status in
the HAProxy-less configurations. Without this change the issue
affects only Ubuntu/Debian installations where mod_status in Apache2
enabled by default.

Closes-Bug: #1996913
Change-Id: I3ec1af6353c3ecc64589599abe375b0ae9b14d5c
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-08-10 10:28:10 +00:00
Zuul
0a0eb30bc9 Merge "ironic: add ironic_agent_files_directory parameter" 2023-08-09 16:34:41 +00:00
Zuul
b49694ff99 Merge "rabbitmq: add rabbitmq_datadir_volume parameter" 2023-08-09 16:22:01 +00:00
Zuul
7575f4a485 Merge "Enable nova libvirt driver skip_cpu_compare_on_dest workaround" 2023-08-08 09:07:20 +00:00
Léo Gillot-Lamure
789ac7388c loadbalancer: support cpu-map for threads
The directive used has the same semantic as what is done above for nbproc > 1:
it binds each thread to a CPU. It is simpler and does not require a loop because
it uses the auto: syntax available in HAProxy 2.4.

Change-Id: I1ce124b678140f5f4737df557683bb67bc7cfc66
2023-08-02 13:25:55 +00:00
Léo Gillot-Lamure
e043828601 loadbalancer: support setting nbthread with variable haproxy_threads
Threads are the recommended way to scale CPU performance since HAProxy
1.8.

Official documentation says: « While "nbproc" historically used to be the only
way to use multiple processors, it also involved a number of shortcomings
related to the lack of synchronization between processes (health-checks, peers,
stick-tables, stats, ...) which do not affect threads. As such, any modern
configuration is strongly encouraged to migrate away from "nbproc" to
"nbthread". ».

While more recent versions of HAProxy automatically detect the number of
available CPU and enable threads for them, it can be useful to explicitely set
the value.

In this patch, setting cpu-map for threads is not supported.

Change-Id: Id917c70f3dbe52f24f25d9403ba8151729e8966b
2023-08-02 13:25:50 +00:00
Christian Berendt
58b5ca2783 ironic: add ironic_agent_files_directory parameter
With the parameter ironic_agent_files_directory it is possible to provide
the directory for the ironic-agent.kernel and ironic-agent.initramfs
files. By default the parameter is set to the value of node_custom_config.
This corresponds to the existing behaviour.

Change-Id: I53bb0eddc5380713a967356c85897d8df8ce505f
2023-08-02 14:14:47 +02:00
howardlee
7cb92baf05 Fix an undefined variable bug for venus deployment
The external_protocol variable does not exist, resulting in an error
during the venus deployment process. This commit will fix that.

Closes-Bug: #2029353

Change-Id: I2d983eecd8861689fdab7d60bdb9dd34ea0c159e
2023-08-02 18:15:01 +08:00
Zuul
4bfd9d85cd Merge "zun: Fix capsule functionality and tests" 2023-08-01 13:15:46 +00:00
Bartosz Bezak
bcf002509d Enable nova libvirt driver skip_cpu_compare_on_dest workaround
With the libvirt driver, during live migration,skip comparing guest CPU
with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0,
libvirt will do the correct thing with respect to checking CPU
compatibility on the destination host during live migration.[1]

[1] 267a40663c

Change-Id: I947c94b59368c7a2740583bf57e407296473d75e
2023-08-01 10:44:24 +02:00
Paul Arthur
acf9375edc Fix loop label syntax error with ansible-core 2.15
Labels are supposed to be strings, but prior to
https://github.com/ansible/ansible/pull/80040 Ansible
did not enforce this.

Change-Id: Iefad160be12f1b5e689a74a82714857fa867d69a
Signed-off-by: Paul Arthur <paul.arthur@flowerysong.com>
2023-07-27 18:05:47 +00:00
Zuul
af2ccd1572 Merge "Trivial: Add deploy-containers for skyline" 2023-07-27 10:37:17 +00:00
Zuul
7dbe8184de Merge "haproxy: support single external frontend" 2023-07-25 10:11:17 +00:00