6353 Commits

Author SHA1 Message Date
Radosław Piliszek
7ca9349b09 Do not use keystone_admin_url et al
Following up on [1].
The 3 variables are only introducing noise after we removed
the reliance on Keystone's admin port.

[1] I5099b08953789b280c915a6b7a22bdd4e3404076

Change-Id: I3f9dab93042799eda9174257e604fd1844684c1c
2022-05-28 18:19:01 +02:00
Zuul
15a81a2883 Merge "Do not use a different port for Keystone admin endpoint" 2022-05-27 08:33:57 +00:00
Radosław Piliszek
42c2520144 Do not use a different port for Keystone admin endpoint
Docs and reno included.

Change-Id: I5099b08953789b280c915a6b7a22bdd4e3404076
2022-05-26 13:38:26 +00:00
k-s-dean
fcba927d7b talk TLS to openstack exporter via haproxy
Closes-Bug: #1975598
Change-Id: If4c85f8e960141d08a89accdc11a3271f31974c1
2022-05-24 16:23:42 +01:00
Radosław Piliszek
3e75a33ad4 Use the new image naming scheme
Change-Id: Ib4b15ed4feac82d8492b1c0f0238a752eac668e6
2022-05-23 06:37:25 +00:00
Mark Goddard
5d28a7c89b masakari: support libvirt SASL in instance monitor
Since enabling libvirt SASL authentication, the masakari instance
monitor fails to connect to libvirt. We see the following error in logs:

    libvirt.libvirtError: authentication failed: Failed to start SASL
    negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
    found)

This change adds support for SASL authentication in Masakari instance
monitor.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
Closes-Bug: #1965754
Change-Id: I974046662b383a12ac6281b725523760a96657bd
2022-05-21 13:27:27 +00:00
Zuul
789bae70eb Merge "Fix redis_sentinel container restarts" 2022-05-18 13:18:31 +00:00
Zuul
1aa13614d8 Merge "Delete keystone_token_provider variable" 2022-05-18 10:20:47 +00:00
Ramona Rautenberg
b3b9dff3cd Delete keystone_token_provider variable
In the last PTG it was decided to drop the keystone_token_provider variable, because there is no other option anymore.

Signed-off-by: Ramona Rautenberg <rautenberg@osism.tech>
Change-Id: I1ee2c3f9b7dbbbf4633c5874cdbb3c4f8c09e277
2022-05-17 15:53:23 +02:00
Zuul
4976bff593 Merge "Remove sanity checks" 2022-05-16 10:14:40 +00:00
Zuul
a482ef956a Merge "Use 'cloudkitty_influxdb_use_ssl' when creatign InfluxDB database" 2022-05-16 10:04:09 +00:00
Zuul
1b9843e1f0 Merge "ovn: add ovn-openflow-probe-interval var" 2022-05-16 10:03:18 +00:00
Zuul
b87e833d91 Merge "Add support for Pure Storage FlashArray backend to Cinder" 2022-05-13 20:01:49 +00:00
Michal Arbet
257ef9fae8 Fix redis_sentinel container restarts
Redis Sentinel modifies its config.
Since we now check config in check-containers,
the redis_sentintel container is restarted each time.

This patch together with kolla patch fixes this issue.

Closes-Bug: #1967664
Depends-On: https://review.opendev.org/c/openstack/kolla/+/840954
Change-Id: Ia76329cb851d266cd888f51b7f70a4cdc40e3ac3
2022-05-13 20:28:13 +02:00
Tim Beermann
591f366ed7 Remove sanity checks
"Smoke tests" for barbican, cinder, glance and keystone have been removed as discussed in PTG April 2022.

Signed-off-by: Tim Beermann <beermann@osism.tech>
Change-Id: I613287a31e0ea6aede070e7e9c519ab2f5f182bd
2022-05-13 17:41:34 +00:00
Simon Dodsley
f088b799a5 Add support for Pure Storage FlashArray backend to Cinder
Add an enable_cinder_backend_pure_iscsi and
enable_cinder_backend_pure_fc options to etc/kolla/globals.yml
to enable use of the FlashArray backend.
Update the documentation to include a section on configuring
Cinder with the FlashArray.

Implements: blueprint pure-cinder-driver
Change-Id: I464733f1322237321ed1ffff8636cf30bd1cbb38
2022-05-13 10:11:08 -04:00
Zuul
3c5f25fc4e Merge "Fix malformed OIDCMemCacheServers" 2022-05-13 10:33:17 +00:00
Mathias Fechner
491b8fb49a ovn: add ovn-openflow-probe-interval var
The inactivity probe interval of the OpenFlow  connection
to the OpenvSwitch integration bridge, in seconds. If the
value is zero, it disables the connection keepalive  fea‐
ture.

If  the  value  is  nonzero,  then it will be forced to a
value of at least 5s.

The value is set to 60 seconds by default as described in
"OVN issues in the field".

https://www.openvswitch.org/support/ovscon2019/day1/1436-OVSCON-Nouman.pdf
https://www.ovn.org/support/dist-docs/ovn-controller.8.html

Change-Id: I7066c3a8b33b482774f310c45142ac2936a5c405
2022-05-12 11:55:42 +02:00
k-s-dean
656f6cdb08 Put openstack exporter behind HAproxy so only one is queried at a time
Closes-Bug: #1972818

Change-Id: I9e36b9169b6725bf6db953e464fc099087747778
2022-05-12 07:41:57 +00:00
Kevin Rasmussen
6563191de8 Fix malformed OIDCMemCacheServers
Change from comma separated list of memcache servers to space separated list.
Comma seperated list results in a 500 error response.
Upstream docs state this should be space separated and can be found here:
https://github.com/zmartzone/mod_auth_openidc/blob/master/auth_openidc.conf#L629-L631

Closes-Bug: #1972033
Change-Id: Ibaef3672c656213dd5ba1488379d686130e041c5
2022-05-06 15:31:45 -07:00
Pierre Riteau
555cd39f1a Fix typos in docs
This is a follow up to I7e5c1e20c7b66b64cbd333f669ef8d8da60daaa8.

Change-Id: I11a86f59c1fb9cddde3370b544ee7bf4e8ae4fb4
2022-05-02 15:44:34 +02:00
Zuul
6b9321dc23 Merge "Multiple DHCP ranges for Ironic Inspector" 2022-05-02 10:50:39 +00:00
Rafael Weingärtner
ceddf3b202 Use 'cloudkitty_influxdb_use_ssl' when creatign InfluxDB database
Change-Id: Iff395a1dff654eb4b005eec2db395b603b1aec72
2022-04-27 08:50:57 -03:00
Christian Berendt
ea5b4d7e26 [bifrost] add bifrost_deploy_verbosity parameter
With the parameter bifrost_deploy_verbosity it is possible
to set the verbosity of the bootstrap of Bifrost.

This makes it possible to reduce verbosity when running
/bifrost/playbooks/install.yaml if needed.

Change-Id: I5815220f2193a492ae7e1f63443075790ae7aaef
2022-04-24 18:07:30 +02:00
Zuul
2445c78c92 Merge "[ironic] add coordination backend for ironic inspector" 2022-04-22 16:05:58 +00:00
Mark Goddard
832989d0a6 nova: use any_errors_fatal for once-per-cell tasks
We run some nova tasks once per cell, using a condition to match a
single host in the cell. In other similar tasks, we use run_once, which
will fail all hosts if the task fails. Typically these tasks are
critical, and that is desirable. However, with the approach used in
nova-cell to support multiple cells, if a once-per-cell task fails, then
other hosts will continue to execute, which could lead to unexpected
results.

This change adds any_errors_fatal to the plays or blocks that run these
tasks.

Closes-Bug: #1948694

Change-Id: I2a5871ccd4e8198171ef3239ce95f475f3e4b051
2022-04-22 10:37:25 +00:00
Zuul
1de1e0f36c Merge "nova: improve compute service registration failure handling" 2022-04-21 21:23:22 +00:00
Christian Berendt
2edc32f2eb [ironic] add coordination backend for ironic inspector
Change-Id: Ide82b7a7fa6752b60f2c9c31cdc4c79183fc62f6
2022-04-21 21:11:53 +02:00
Zuul
2c15d36fed Merge "Adds prometheus_scrape_interval" 2022-04-21 16:55:35 +00:00
Zuul
489d6bb3b1 Merge "Configure Prometheus Pushgateway Options" 2022-04-21 16:37:33 +00:00
Zuul
a4ccb37767 Merge "drop install_type from image names" 2022-04-21 13:06:26 +00:00
Marcin Juszkiewicz
1620ab5be9 drop install_type from image names
We have only one value for install_type now and it gets removed from
image names.

Change-Id: I8bf95fd7aa9dd26b80d618ca0fcb097003b4cb0a
2022-04-20 12:29:12 +02:00
LinPeiWen
6503644140 fluentd: remove deprecated parameter
In fluentd v1.0, "format" became a deprecated parameter,
replaced by "<parse>"

Change-Id: I0825e81fcd90fbc7f64c8df3ea9ae199ad79294a
2022-04-16 09:36:13 +00:00
Zuul
27bf4e9351 Merge "Switch prometheus to active/passive mode" 2022-04-15 13:05:19 +00:00
Will Szumski
6906b275ef Switch prometheus to active/passive mode
This uses the same approach as the mariadb role (and others).

Closes-Bug: #1928193
Co-Authored-By: John Garbutt <johng@stackhpc.com>
Change-Id: I79a7a8c80327cfd9ef31d17fe71f450a181a638c
2022-04-15 10:10:50 +00:00
Zuul
0226172ef7 Merge "libvirt: Fix nova-libvirt-cleanup command" 2022-04-14 08:03:20 +00:00
Juan Pablo Suazo
e7fc3bc441 Configure Prometheus Pushgateway Options
Adds the ability to configure the Prometheus Pushgateway options
alongside the rest of kolla-ansible's configurations.

Closes-Bug: #1968597
Signed-off-by: Juan Pablo Suazo <jsuazo@whitestack.com>
Change-Id: I2d20288267ceda95076229628db10299ddbde31f
2022-04-13 16:27:52 -04:00
Maksim Malchuk
762aecbfae Multiple DHCP ranges for Ironic Inspector
Add a new parameter 'ironic_dnsmasq_dhcp_ranges' and enable the
configuration of the corresponding 'dhcp-range' and 'dhcp-option'
blocks in Ironic Inspector dnsmasq for multiple ranges.

The old parameters 'ironic_dnsmasq_dhcp_range' and
'ironic_dnsmasq_default_gateway' used for the only range are now
removed.

This change implements the same solution used in the TripleO several
years ago in the: Ie49b07ffe948576f5d9330cf11ee014aef4b282d

Also, this change contains: Iae15e9db0acc2ecd5b087a9ca430be948bc3e649
fix for lease time.
The value can be changed globally or per range.

Change-Id: Ib69fc0017b3bfbc8da4dfd4301710fbf88be661a
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2022-04-13 19:26:31 +00:00
Christian Berendt
89659b4607 ovs-dpdk: add ovs-dpdkctl.sh to the role itself
Currently the ovs-dpdkctl.sh file is present in the tools
directory and the "Copying ovs-dpdkctl tool" task accesses it.

This is bad practice. Files copied from a role should either be
referenced by an absolute path or be part of the role itself.

This change moves the ovs-dpdkctl.sh file in the files
directory of the role.

Change-Id: I01459d39207e54f270f32f37b4a5153c5a819347
2022-04-13 15:42:57 +00:00
Bernd Mueller
92f8daad52 added missing become in ovs-dpdk role
Signed-off-by: Bernd Mueller <mueller@b1-systems.de>
Change-Id: I90d98be9dfb14942ffb4f5293cf52a96a643ee90
2022-04-12 15:08:34 +02:00
Zuul
c6aec10667 Merge "Deprecate enable_ironic_ipxe" 2022-04-11 15:57:54 +00:00
Zuul
4601fdbabd Merge "drop qdrouterd support" 2022-04-11 11:52:36 +00:00
Zuul
8f4a060ec2 Merge "Ironic: rename containers" 2022-04-11 11:06:40 +00:00
Zuul
e86912d893 Merge "Ironic: Support both plain PXE and iPXE" 2022-04-11 11:06:37 +00:00
Marcin Juszkiewicz
b540717387 drop qdrouterd support
Change-Id: I562fa187094f212003d0b17d20675f771cf082e6
2022-04-08 17:21:33 +02:00
Radosław Piliszek
b09be6263f Deprecate enable_ironic_ipxe
Change-Id: I2ae1a402e723cd1063618d1b9fb18f6adb27a390
2022-04-06 08:52:00 +00:00
Radosław Piliszek
e8025b3cb8 Ironic: rename containers
Change-Id: I8e4096d7136d0ce9e54f1af0bb9ba110487fb35b
2022-04-06 08:51:05 +00:00
Radosław Piliszek
9503308a87 Ironic: Support both plain PXE and iPXE
Depends-On: https://review.opendev.org/c/openstack/kolla/+/832163
Change-Id: Ia2dba1854e925041ae23c731273b810bb2d5ec30
2022-04-06 08:47:17 +00:00
Marcin Juszkiewicz
463f10014e drop binary install type from templates and config
As we have only source image type then we do not need to handle other
option.

Change-Id: I753aa0182cfc975bb8b5cd1476ab2c336a7691fa
2022-04-05 15:31:21 +02:00
Mark Goddard
188b328566 libvirt: Fix nova-libvirt-cleanup command
This change addresses an issue in the nova-libvirt-cleanup command,
added in I46854ed7eaf1d5b5e3ccd8531c963427848bdc99.

Check for rc=1 pgrep command, since a lack of matches is a pass.

Also, use bash for set -o pipefail.

Change-Id: Iffda0dfffce8768324ffec55e629134c70e2e996
2022-04-05 08:09:14 +00:00