6776 Commits

Author SHA1 Message Date
James Kirsch
5581a28253 Add support for LetsEncrypt-managed certs
Add support for automatic provisioning and renewal of HTTPS
certificates via LetsEncrypt.

Spec is available at:
https://etherpad.opendev.org/p/kolla-ansible-letsencrypt-https

Depends-On: https://review.opendev.org/c/openstack/kolla/+/887347
Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io>
Implements: blueprint letsencrypt-https
Change-Id: I35317ea0343f0db74ddc0e587862e95408e9e106
2023-11-07 10:59:51 +01:00
Zuul
255ce5c11e Merge "prometheus: Fix etcd scrape when etcd uses TLS" 2023-11-02 09:19:57 +00:00
Zuul
8e302cc47d Merge "Improve grok pattern matching for apache logs" 2023-10-30 15:09:30 +00:00
Zuul
66853f8620 Merge "Remove keystone admin leftovers" 2023-10-24 15:43:01 +00:00
Zuul
f34ec164a6 Merge "Add support of podman deployment" 2023-10-23 13:06:49 +00:00
Ivan Halomi
9a3f463345 Add support of podman deployment
This change adds basic deployment based on Podman
container manager as an alternative to Docker.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com>
Signed-off-by: Petr Tuma <p.tuma@partner.samsung.com>
Change-Id: I2b52964906ba8b19b8b1098717b9423ab954fa3d
Depends-On: Ie4b4c1cf8fe6e7ce41eaa703b423dedcb41e3afc
2023-10-20 17:51:52 +02:00
Michal Nasiadka
0386f54ff6 Rename per role filters files
Related to ansible-core bug [1].

[1]: https://github.com/ansible/ansible/issues/81945

Change-Id: Idede07a5f0fd1a3ee63e1c54a263e358e95b3a86
2023-10-19 10:11:24 +02:00
Zuul
a6120f231a Merge "Fix Cyborg endpoints again" 2023-10-13 18:04:46 +00:00
Laurie Fisher
63213c0e23 Improve grok pattern matching for apache logs
Apache grok pattern updated to match the size of response in bytes,
the time taken to serve the request and the user-agent that made
the request.

Change-Id: I8ce6e6e10bbf55ef8aa21f983f4a6c4b6dc24402
2023-10-13 14:03:56 +00:00
Grzegorz Koper
8fb0bddfe9 Fix services config in single external frontend
Adding missing group_vars for gnocchi service.
Using proper variables in haproxy config for vitrage and venus services.

Closes-Bug: #2038904
Change-Id: I06e8f29440c13864a866ea03ce0a0821fbe846f8
2023-10-12 12:00:44 +00:00
Michal Nasiadka
99ab6aedbb Remove keystone admin leftovers
Change-Id: Ic153a91beb30daa334ccbb0430ce8340bd6c480f
2023-10-06 08:57:40 +00:00
Rafal Lewandowski
ec11c31253 Add a separate interface address for tgtd
Closes-Bug: #2031237
Change-Id: I7a4eaeab0c106ebdcb4d4cf9825c53dd8ad62dbf
2023-10-05 13:27:28 +02:00
Michal Nasiadka
00dfa4233c Remove remnants of Monasca and deps
Following Monasca initial removal in [1]

[1]: I6fc7842bcda18e417a3fd21c11e28979a470f1cf

Change-Id: I94d6f102e8da3882f37f3007639b917c49f907a9
2023-10-02 13:10:03 +02:00
Zuul
28bf63f269 Merge "Fix http/2 support for internal endpoints" 2023-09-27 19:10:23 +00:00
Zuul
fdc3b122c1 Merge "zun: Deprecate Zun provisionally" 2023-09-27 14:46:48 +00:00
Zuul
b422bada22 Merge "Add ML2/OVN and ML2/OVS setting checks for neutron" 2023-09-27 13:26:03 +00:00
Maksim Malchuk
f2a63a522c Fix http/2 support for internal endpoints
Followup on I2e00d3e9193a3052d43a228915ea249794490afe.
Fixes an issue with wrong copy/paste.

Related-Bug: #1850924
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
Change-Id: I979a4e5b534f105a2e81f88f9675feddc883490a
2023-09-27 08:21:12 +00:00
Jan Gutter
f8d4db54db
zun: Deprecate Zun provisionally
* Zun currently has a dependency on a combination of Docker and
  etcd that is no longer installable (or supported) in newer
  distros.
* These components are core dependencies of other systems and
  vendoring them will be very painful.
* Work to update Zun past this is scheduled for the 'C' cycle.
* If Zun regains compatibility, backports to this series will be
  considered.

Change-Id: I6a2a4ffdcaf1c4fab1097e94d5f255ffb9a2947d
2023-09-26 21:48:12 +01:00
Rafal Lewandowski
d3d67dc02c Add ML2/OVN and ML2/OVS setting checks for neutron
It will check the setting of neutron_plugin_agent,
if it is set to "ovn" or "openvswitch", and run
container and volume checks to make sure the other
agent was not already deployed.

Change-Id: Ie00572f3ff9d3500abd5519bd472e2134c318886
2023-09-26 21:24:12 +02:00
Dincer Celik
f64c86de1d [haproxy] Adds http/2 support to HAProxy
This change introduces haproxy_enable_http2 to let operators enable
http/2 on HAProxy frontends when kolla_enable_tls_external is enabled.

Change-Id: I2e00d3e9193a3052d43a228915ea249794490afe
Closes-Bug: #1850924
2023-09-25 11:36:54 +02:00
Bartosz Bezak
7186f960d9 Add option for extra kernel modules in neutron role
Closes-Bug: #2036741

Change-Id: Ib448d04e43dff78e344064161beadae917c41206
2023-09-21 11:54:00 +00:00
Mark Goddard
05df4e7209 prometheus: Fix etcd scrape when etcd uses TLS
Use HTTPS to scrape etcd metrics when etcd TLS is enabled.

Change-Id: Iaff10d5314a8dc5b07137d93c269f1ac24cf63de
Closes-Bug: #2036950
2023-09-21 12:28:38 +01:00
Zuul
59ab6bf049 Merge "Fix ansible-lint warnings related to jinja spacing" 2023-09-20 15:00:08 +00:00
Zuul
daf7174283 Merge "ansible: bump min version to 2.14 and max to 2.15" 2023-09-20 11:40:53 +00:00
Zuul
d0262bdc3e Merge "toolbox: use script handling signals" 2023-09-18 18:44:38 +00:00
Zuul
1bd1517d27 Merge "Support customising Nova config at the individual service level" 2023-09-18 14:29:28 +00:00
Célestin Matte
4b52e11528 Fix ansible-lint warnings related to jinja spacing
Change-Id: I901c0a57efcb6cbaaac43f64f2243fff7d7980c8
2023-09-18 15:44:39 +02:00
Zuul
65079b4dc1 Merge "keystone: ensure bool for two parameters" 2023-09-18 12:26:24 +00:00
Zuul
b69aa4ea08 Merge "ceilometer: process custom event_pipeline.yaml with merge_yaml" 2023-09-18 10:18:03 +00:00
Zuul
ff9d69d247 Merge "Configure Nova libvirt.num_pcie_ports to 16 by default" 2023-09-18 10:08:24 +00:00
Christian Berendt
c9a4b36e52 keystone: ensure bool for two parameters
* keystone_enable_federation_openid
* enable_keystone_federation

Closes-Bug: #2036390

Change-Id: Ieef1dce006c339643ad4fa544218c6482c2ad32c
2023-09-18 11:09:39 +02:00
Christian Berendt
50abf90f59 ceilometer: process custom event_pipeline.yaml with merge_yaml
Allow more flexibility by adding a host specific template. Also
using the merge_yaml action allow us to drop the logic around deciding
which template to use.

Change-Id: I41a3226679c622e5e98df074cee195e8436ea45b
2023-09-15 11:22:49 +02:00
Michal Nasiadka
f6d0ffd61c ovn: Fix broken deployment/reconfig on Ubuntu
Initially Ubuntu/Debian used /var/run/openvswitch as default OVN run dir,
it seems it has changed long time ago - but we haven't picked that up on latest
OVN DB refactor.

Adding in OVN and OVN upgrade Debian jobs to enhance coverage.

Closes-Bug: #2035584

Change-Id: I78967c4499269578ac921ad9a553946b65e1293f
2023-09-14 09:41:09 +00:00
Jeffrey Zhang
b8e77deeef Configure Nova libvirt.num_pcie_ports to 16 by default
When using the 'q35' machine type, by default, it allows only
a single PCIe device to be hotplugged. Nova currently sets
'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is
not sufficient for hotplug use.

The max value is 28, but 16 is enough in most cases.

More info please check

* [0] https://libvirt.org/pci-hotplug.html
* [1] https://marcin.juszkiewicz.com.pl/2018/02/19/hotplug-in-vm-easy-to-say/
* [2] https://review.opendev.org/c/openstack/nova/+/545034

Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com>

Change-Id: I7b8063566837aeb947927b7d6858417982b63deb
Closes-Bug: 1909063
2023-09-11 12:56:02 +00:00
John Garbutt
69a6782329 Support customising Nova config at the individual service level
For example, an operator may wish to customise the
nova-compute-ironic service configuration without affecting
other Nova services.

Closes-Bug: #2034949

Change-Id: If8648d8e85ab3dbcbb4ecba674b2e34b06898327
2023-09-08 17:56:51 +01:00
Christian Berendt
9dc2b019a2 senlin: add missing cafile parameter
The cafile parameter in the authentication section is required
in the senlin.conf configuration file when working with
self-signed certificates.

Change-Id: I3cd43cc7f43782a6c1d701a3e5b977bbc42e3719
2023-09-08 18:24:02 +02:00
Zuul
e38f5e0c23 Merge "ovn: Improve clustering" 2023-09-06 10:08:43 +00:00
Zuul
df44a7fb16 Merge "Prevent libvirtd reload when only generating config" 2023-09-05 18:21:51 +00:00
Michal Nasiadka
7cc4bf6203 ovn: Improve clustering
Currently clustering steps are very static, if for a reason first
node in the inventory fails and gets re-introduced - K-A will create
a second empty cluster on that node.

This patch changes the approach and checks if cluster exists, if it
does - chooses a donor for the new node from currently running
node set.

Also it fixes node replacement - it removes old node from cluster
(that has the same ip address as newly provisioned node).

Closes-Bug: #1875223

Change-Id: Ia025283e38ea7c3bd37c7a70d03f6b46c68f4456
2023-09-05 09:18:38 +00:00
Zuul
a7756fa3a0 Merge "Configure OVN to emit "need to frag" packets in case of MTU mismatch" 2023-09-04 08:59:56 +00:00
Zuul
26ba26cd18 Merge "Fix designate-producers not running properly" 2023-08-31 21:29:35 +00:00
Zuul
dc42b98e7a Merge "Change regex for the multiline parser at the fluentd rabbitmq input" 2023-08-31 10:29:50 +00:00
Zuul
b3c13d22ff Merge "Use better default bind address for ironic-tftp" 2023-08-30 17:03:38 +00:00
Zuul
33e652bde6 Merge "Fixes WEBSSO_KEYSTONE_URL Value" 2023-08-30 14:50:37 +00:00
Zuul
93ab4914e9 Merge "Drop useless DUMMY_ENVIRONMENT environment for cron container" 2023-08-30 14:49:27 +00:00
Zuul
3bdcaa2ed1 Merge "Fixes task name in notify module to the actual task name" 2023-08-30 14:49:25 +00:00
joek-office
b9f2ad94a7 Change regex for the multiline parser at the fluentd rabbitmq input
Related-Bug: #2015184

Closes-Bug: #2015184

Change-Id: I6ea0949d58e38e2cda41c9702001e7bd500f23f1
2023-08-30 12:25:00 +00:00
Michal Nasiadka
71dd6eb983 ansible: bump min version to 2.14 and max to 2.15
Change-Id: Ia982df80d688522dbaa5fc3e462c1a009d512cb6
2023-08-30 12:24:06 +00:00
Robin Klostermeyer
9a9c8fe794 Add ironic-prometheus-exporter
This commit adds the ironic-prometheus-exporter, following the
conventions used by the previously integrated exporters. '[The] Ironic
Prometheus Exporter is a Tool to expose hardware sensor data in the
Prometheus format through an HTTP endpoint.'[0]

Prometheus has been enabled in CI jobs to ensure test coverage.

[0] https://opendev.org/openstack/ironic-prometheus-exporter

Depends-On: https://review.opendev.org/c/openstack/kolla/+/874415

Change-Id: I6d421effd833d2e0524dd0b81736445c9a730ea9
2023-08-30 09:24:56 +02:00
Juan Pablo Suazo Sarrocchi
95317e5df2 Fixes task name in notify module to the actual task name
An OVS-DPDK task had part of its name capitalized,
presumably due to the newly added ansible linter,
but this change was not reflected in the notify
module which calls the task. This results in an
inability to deploy openstack with OVS-DPDK.

This commit fixes the name of the task in the
notify module.

Closes-Bug: #2033413
Change-Id: Iae8a937bb2c35d2eb83e2c4522d829a6cfe25f0d
Signed-off-by: Juan Pablo Suazo <jsuazo@whitestack.com>
2023-08-29 12:51:44 -04:00