13178 Commits

Author SHA1 Message Date
Bartosz Bezak
826fd12a11 Revert "Generate ovn-chassis-mac-mappings on ovn-controller group"
This reverts commit 8bf8656dbad3def707eca2d8ddd2c9bfed389b86.

Reason for revert: Setting ovn-chassis-mac-mappings on network nodes 
is causing mac flooding [1] [2] for traffic between external ports, 
and very slow troughput in consequence.
OVN HA Chassis priorities between gateways should probably be managed
by Neutron [3]

[1] https://mail.openvswitch.org/pipermail/ovs-discuss/2020-September/050691.html
[2] https://mail.openvswitch.org/pipermail/ovs-discuss/2022-May/051837.html
[3] https://mail.openvswitch.org/pipermail/ovs-discuss/2022-October/052068.html

Change-Id: Ia3b279d7e2c08464fda1a5dc41518296f559e93f
2022-11-23 13:16:59 +00:00
Bartosz Bezak
8bf8656dba Generate ovn-chassis-mac-mappings on ovn-controller group
Previously ovn-chassis-mac-mappings [1] has been added only to
ovn-controller-compute group. However external ports are being
scheduled on network nodes, therefore we need also do that there.

Closes-Bug: 1995078

[1] https://github.com/ovn-org/ovn/blob/v22.09.0/controller/ovn-controller.8.xml#L239

Change-Id: Ie62e9220bad56262cad602ca1480e6ca65827819
2022-11-15 14:12:52 +01:00
Zuul
0ea486b6ce Merge "docs: Octavia OVN provider" 2022-11-14 12:59:55 +00:00
Mark Goddard
6c0c2b9850 docs: Octavia OVN provider
Change-Id: Ib3dba0a3741d918a189edfa43041207a59392f07
2022-11-14 12:35:42 +00:00
Zuul
a0fc5c5205 Merge "octavia: run auto_configure only when amphora is enabled" 2022-11-10 12:14:49 +00:00
Zuul
f65b1f9163 Merge "[ironic] Remove useless tasks" 2022-11-09 12:08:54 +00:00
Ivan Halomi
4ca2d41762 Adding container_engine to kolla_toolbox module
Second part of patchset:
https://review.opendev.org/c/openstack/kolla-ansible/+/799229/
in which was suggested to split patch into smaller ones.

THis change adds container_engine to module parameters
so when we introduce podman, kolla_toolbox can be used
for both engines.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Co-authored-by: Martin Hiner <m.hiner@partner.samsung.com>
Change-Id: Ic2093aa9341a0cb36df8f340cf290d62437504ad
2022-11-04 15:32:30 +01:00
Zuul
0761285f90 Merge "Adding container engine to kolla_container_facts" 2022-11-03 21:26:04 +00:00
Ivan Halomi
7a9f04573a Adding container engine to kolla_container_facts
Second part of patchset:
https://review.opendev.org/c/openstack/kolla-ansible/+/799229/
in which was suggested to split patch into smaller ones.

This change adds container_engine variable to kolla_container_facts
module, this prepares module to be used with docker and podman as well
without further changes in roles.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Co-authored-by: Martin Hiner <m.hiner@partner.samsung.com>
Change-Id: I9e8fa30646844ab4a288555f3aafdda345b3a118
2022-11-02 13:44:45 +01:00
Zuul
4fa36cbe08 Merge "Fix ironic interface option for ironic-inspector" 2022-11-02 08:04:43 +00:00
Michal Arbet
6c9d1f9b55 Fix missing logrotate configuration for proxysql logs
This trivial patch is just adding missed logrotate
configuration for proxysql.

Closes-Bug: #1995248
Change-Id: I3ad88d03836930160b6db43a7cad63b34ffc62b0
2022-10-31 11:26:43 +01:00
Mark Goddard
fa96fd1a2f Fix ironic interface option for ironic-inspector
The correct option to use is valid_interfaces [1], not os_endpoint_type.
The os_endpoint_type option was removed in Train.

[1] https://docs.openstack.org/ironic-inspector/wallaby/configuration/sample-config.html

Change-Id: I3906d7b9a2bebfe5c323cba5f80add3e932468c8
Closes-Bug: #1995246
Related-Bug: #1990675
2022-10-31 09:45:38 +00:00
Zuul
f15cb4dda3 Merge "CI: set cpu_model to Nehalem for kvm jobs" 2022-10-28 12:40:04 +00:00
Zuul
c3dde9933e Merge "Mount /run directory into zun_cni_daemon container" 2022-10-28 12:03:36 +00:00
Zuul
beb15b62e2 Merge "Usage of kolla_container_engine variable instead of docker" 2022-10-28 10:00:44 +00:00
Michal Nasiadka
587f5382de octavia: run auto_configure only when amphora is enabled
Change-Id: I87845ec386fda3c6582abad37ae7d8600f222000
2022-10-28 11:59:35 +02:00
Ivan Halomi
910f9bd36f Usage of kolla_container_engine variable instead of docker
First part of patchset:
 https://review.opendev.org/c/openstack/kolla-ansible/+/799229/
in which was suggested to split patch into smaller ones.

This implements kolla_container_engine variable
in command calls of docker,so later on it can be
also used for podman without further change.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Change-Id: Ic30b67daa2e215524096ad1f4385c569e3d41b95
2022-10-28 09:15:55 +02:00
Zuul
5baec2f43e Merge "[ironic] Drop an extra wait" 2022-10-27 15:59:47 +00:00
Zuul
ef9a20c11a Merge "[CI] Test image from instance" 2022-10-27 15:59:43 +00:00
Michal Nasiadka
aa1b19c3c0 CI: set cpu_model to Nehalem for kvm jobs
RHEL 9 are being compiled for the x86_64-v2 architecture which is
newer than the qemu default of qemu64. Nehalem is apparently the
oldest model that works for x86_64-v2 and is expected to work on
Intel and AMD cpus with kvm or qemu.

See devstack change [0].

[0]: Ibd6e11b59f3c8655bc60ace7383a08458b2177f2

Change-Id: Ia0a3620bae21984933756331bb5937ce681d3237
2022-10-27 15:19:05 +00:00
Zuul
bede68572a Merge "Support specifying Nova compute provider config" 2022-10-27 13:31:45 +00:00
Zuul
f9bc6b10a5 Merge "Default to Rocky Linux instead of CentOS Stream" 2022-10-26 12:20:31 +00:00
Zuul
065d61f329 Merge "Adds ability to configure ProxySQL's max replication lag" 2022-10-20 14:40:51 +00:00
Zuul
05da50b46e Merge "designate: Enable Sink only when designate is enabled" 2022-10-20 13:54:57 +00:00
Bartosz Bezak
b4ff2ad981 designate: Enable Sink only when designate is enabled
A recent patch [1] enabled sink related changes to nova/neutron even
when designate is not enabled. This patch fixes that.

[1] - https://review.opendev.org/c/openstack/kolla-ansible/+/802301

Change-Id: I6d76f342a7cdbcc61d1522689ea489b60353adcd
2022-10-20 13:09:13 +02:00
Zuul
e35eb12b9e Merge "Update RHEL family information" 2022-10-20 11:02:23 +00:00
Michal Arbet
bee253e337 Adds ability to configure ProxySQL's max replication lag
By default ProxySQL's default value of max_replication_lag
is 0 which is in fact disabling this feature [1].
If it is greater than 0, ProxySQL will regularly monitor
replication lag and if it goes beyond the configured threshold
it will temporary shun the host until replication catches up.

This should be configurable via kolla-ansible as every
openstack deployment can be different in terms of network
delays, database load etc.. , so user should have option
to configure when database backend will be shunned.

[1] https://proxysql.com/documentation/main-runtime/

Change-Id: I66171638abc712cb84b380042f1d29f54c499e73
2022-10-20 11:41:34 +02:00
Zuul
4e00d7984d Merge "[tox] Fix installation of requirements" 2022-10-19 17:58:03 +00:00
wuchunyang
ccbdfaea5c Mount /run directory into zun_cni_daemon container
During zun_cni_daemon binds the port to container netns,
zun_cni_damon creates a new net namepsaces(cni-xxx),
Currently, the namespace is only present inside the
zun_cni_daemon container, if this container restart or
rerun, all zun capsules will lost network capability.

Closes-Bug: #1993551

Change-Id: I3642bbf1ad8e8f4744b215fb8deff25fd4ceae75
2022-10-19 22:56:29 +08:00
Maksim Malchuk
9d5924cbc4 Fix freezer deployment
Following up on [1] and fix freezer deployment accidentally broken
after removing 'domain_name' from the 'openstack_auth'.

1. Ib631e2211682862296cce9ea179f2661c90fa585

Change-Id: Ie928f8a4506f41407d76edcb6b52ca7cddb52214
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-10-18 16:13:36 +03:00
Marcin Juszkiewicz
3c6959df33 Default to Rocky Linux instead of CentOS Stream
We agreed that CentOS Stream 9 images are not published as we keep it
for CI use only (to check potential failures before it hits RHEL).

We recommend Rocky Linux 9 instead.

Change-Id: I06e6746e5c2abbdcd97912ea2f99d82fc662531d
2022-10-18 14:50:11 +02:00
Marcin Juszkiewicz
33d37575f9 Update RHEL family information
Some time ago we dropped RHEL as one of possible options. During 'Zed'
cycle we added Rocky Linux 9 as alternative to CentOS Stream 9.

This change updates some mentions of both.

Change-Id: I9ed93efcb7d1ff97b1c7d8342db8252aba2a9887
2022-10-18 14:42:39 +02:00
Piotr Parczewski
766a7827f9 Deprecate Monasca and dependencies
Adds a deprecation notice for Monasca service together with
its dependecies: Kafka, Storm and Zookeeper.

Change-Id: Ia9daf170ce9157edb2132c69ee6a923bc4d6f980
2022-10-12 10:33:47 +00:00
Michal Nasiadka
b6c68e2bb4 Skip ansible-lint fqcn for module actions and role-name
Add noqa for:
Object of type PosixPath is not JSON serializable

Change-Id: Id6ef88bb8cd16120bf31da679d1129d99f4b9fd8
2022-10-12 10:02:52 +02:00
Zuul
a8b601dc12 Merge "CI: Fix init-swift" 2022-10-10 12:53:35 +00:00
Zuul
2d56e829ac Merge "Make Keystone admin endpoint creation optional" 2022-10-10 12:28:16 +00:00
Zuul
2e2cd75979 Merge "Stop showing image locations" 2022-10-10 08:39:34 +00:00
Zuul
b83cba838a Merge "Fix image from volume upload ERRORs and WARNINGs with Ceph RBD" 2022-10-10 08:35:27 +00:00
Michal Nasiadka
35f90a31eb CI: Fix init-swift
Container image naming scheme has changed

Change-Id: I775ea3f796290c670e4b04640f4429304dae609c
2022-10-10 08:19:17 +00:00
Zuul
e8887c2cec Merge "[CI] Improve Cinder testing robustness" 2022-10-07 17:05:20 +00:00
Zuul
c1f31c909d Merge "Make Cinder with iSCSI use fewer volumes" 2022-10-07 17:00:04 +00:00
Radosław Piliszek
a4b4043308 Fix image from volume upload ERRORs and WARNINGs with Ceph RBD
By resetting image_upload_use_cinder_backend to upstream default.

When uploading volume to glance image, cinder looks at the backend's
image_upload_use_cinder_backend config knob to decide whether to try link
the glance image to a cloned volume made by cinder, i.e. by doing all work
locally and only updating glance's locations for the image (when the knob
is set to True). However, after all [1], [2] and [3], which happens since
Victoria, this option requires further config from user (using volume type
with image_service:store_id property (aka extra spec) set to the desired
glance store (even if there is only one cinder store configured).

Please read the bug report as to why the option removal is the
best option (TL;DR it is the most compatible approach).

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/708114
[2] https://review.opendev.org/c/openstack/glance_store/+/746556
[3] https://review.opendev.org/c/openstack/cinder/+/661676

Closes-Bug: #1991516
Change-Id: Ife87ee0241d907a0c407eb21811a354ed1734408
2022-10-07 15:05:12 +00:00
Radosław Piliszek
febd99eb69 Make Cinder with iSCSI use fewer volumes
These are not used by the relevant daemons and so can be dropped to,
e.g., avoid creating the cinder volume on hosts where there is no
cinder.

Change-Id: Ia8d906a9e0227f361883a7ec1ec8dcd73e4104dc
2022-10-07 14:20:45 +00:00
Radosław Piliszek
3a0465f89a [CI] Improve Cinder testing robustness
Use the smallest images possible and always wait 5 minutes before
declaring a failure.

Change-Id: I1a5d623a86a27826b3e36dfe5fb4c55f3d46f3f2
2022-10-07 14:20:24 +00:00
Radosław Piliszek
da292982b1 Stop showing image locations
This is generally considered insecure because it may reveal
sensitive data [1].
Furthermore, it happens that the default Ceph perms cause fatal
ERRORs with this setting:
1) when Glance wants to remove an image, it cannot list children
because Cinder or Nova might have created a linked volume clone
behind the scenes and it is put in another pool (volumes/vms)
which Glance cannot normally access;
2) when Nova wants to create an image, it lacks permissions
to write to the images pool.

Thus, I propose that Kolla Ansible stops setting this by default
and relies on the working defaults.
The downside is that this disables optimisations in Cinder and Nova.
On the other hand, these optimisations have nasty behaviour of
being linked directly to the original image, preventing its removal.

[1] https://docs.openstack.org/glance/yoga/configuration/glance_api.html#DEFAULT.show_multiple_locations

Change-Id: I63ee9a6eefd8593f2169bba34dbb699f413d7cf8
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/860093
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/860291
Closes-Bug: #1992153
2022-10-07 14:20:08 +00:00
Radosław Piliszek
39269a4f64 [heat] Remove an ancient deprecated task
Change-Id: Ic267b0bc1153940f7595a1cf93ff2c62dd084d4e
2022-10-07 14:19:47 +00:00
Doug Szumski
522c3291cd Support specifying Nova compute provider config
In the Victoria cycle, Nova merged improved support for
managing resource providers:
https://review.opendev.org/q/topic:bp%252Fprovider-config-file

See the blueprint for more details:
https://docs.openstack.org/nova/latest/admin/managing-resource-providers.html

This change allows us to copy the necessary configuration.

Change-Id: I0a3caaad73bc6fe27380e7f6bf6b792aca51c84c
2022-10-07 12:58:38 +00:00
Dr. Jens Harbott
df73e3ab02 Fix indentation in test script
bashate 2.1.1 now also verifies the indentation of comments, so watch
out.

Change-Id: Ia423d8e96884cf1f5a1edbf768ad3202af4bdc86
2022-10-07 13:22:38 +02:00
Zuul
17aeda1fcf Merge "Bump Ansible min version to 2.12/5 and max to 2.13/6" 2022-10-05 18:04:38 +00:00
Radosław Piliszek
1a4689975e [CI] Test image from instance
This is a missing Nova->Glance interaction that is sometimes
useful.

Change-Id: I05b22d90ec31ef3b63210c2563d6e5547d565874
Depends-On: https://review.opendev.org/c/openstack/kolla/+/860230
2022-10-05 09:30:35 +00:00