6234 Commits

Author SHA1 Message Date
Pierre Riteau
b36c91b684 cloudkitty: fix URL used for Prometheus collector
The Prometheus HTTP API is reachable under /api/v1. Without this fix,
CloudKitty receives 404 errors from Prometheus.

Change-Id: Ie872da5ccddbcb8028b8b57022e2427372ed474e
2022-02-21 18:06:13 +01:00
Zuul
83fa907961 Merge "Add support for VMware First Class Disk (FCD)" 2022-02-21 11:07:00 +00:00
Pierre Riteau
b210dcd6e2 Configure node-exporter to report correct file system metrics
Without this configuration, all mount points are reporting the same
utilisation metrics [1]. With the rslave option, all root mounts from
the host are visible in the container, so we can remove the bind mounts
for /proc and /sys.

[1] https://github.com/prometheus/node_exporter#docker

Change-Id: I4087dc81f9d1fa5daa24b9df6daf1f9e1ccd702f
Closes-Bug: #1961438
2022-02-18 18:36:22 +01:00
Zuul
b668e27356 Merge "Add support for VMware NSXP" 2022-02-18 12:04:41 +00:00
alecorps
812e03f75e Add support for VMware First Class Disk (FCD)
An FCD, also known as an Improved Virtual Disk (IVD) or
Managed Virtual Disk, is a named virtual disk independent of
a virtual machine. Using FCDs for Cinder volumes eliminates
the need for shadow virtual machines.
This patch adds Kolla support.

Change-Id: Ic0b66269e6d32762e786c95cf6da78cb201d2765
2022-02-18 11:15:14 +00:00
Pierre Riteau
dcba829792 Allow to define extra parameters for Prometheus exporters
The following variables are added:

* prometheus_blackbox_exporter_cmdline_extras
* prometheus_elasticsearch_exporter_cmdline_extras
* prometheus_haproxy_exporter_cmdline_extras
* prometheus_memcached_exporter_cmdline_extras
* prometheus_mysqld_exporter_cmdline_extras
* prometheus_node_exporter_cmdline_extras
* prometheus_openstack_exporter_cmdline_extras

Change-Id: I5da2031b9367115384045775c515628e2acb1aa4
2022-02-18 10:12:22 +01:00
Alban Lecorps
458c8b13df Add support for VMware NSXP
NSXP is the OpenStack support for the NSX Policy platform.
This is supported from neutron in the Stein version. This patch
adds Kolla support

This adds a new neutron_plugin_agent type 'vmware_nsxp'. The plugin
does not run any neutron agents.

Change-Id: I9e9d8f07e586bdc143d293e572031368af7f3fca
2022-02-17 08:59:14 +00:00
Zuul
df4b46a31b Merge "Fix fluentd v1 buffer syntax issue" 2022-02-16 20:55:37 +00:00
Zuul
c37c9b59b4 Merge "Refactor fluentd syslog logging" 2022-02-16 20:55:11 +00:00
Zuul
facd64ef26 Merge "[haproxy] optionally set socket to allow admin commands" 2022-02-16 00:33:06 +00:00
Michal Nasiadka
fcdba9e850 CI: Fix new ansible-lint failures
Change-Id: I27b0e42fba93a35c6d878d108bf1e7fdebc9e3db
2022-02-15 07:42:53 +00:00
Isaac Prior
b3e2fcc793 Fix fluentd v1 buffer syntax issue
Change-Id: I5b3ab3ab8153cda283dec772bf1393af0caf4137
Closes-Bug: 1919179
2022-02-11 11:33:38 +00:00
Michal Nasiadka
b97832dd4f Refactor fluentd syslog logging
Co-Authored-By: Mark Goddard <mark@stackhpc.com>

Change-Id: I75ca59d981bcd2dd51faa296ab0b4223a891f5cb
2022-02-11 11:33:38 +00:00
Pierre Riteau
50edb94ded neutron: fix placement endpoint type configuration
Change-Id: I3362bd283eb7fb80f5da70f2a388f89f220617ea
Closes-Bug: #1960503
2022-02-10 13:14:32 +01:00
Zuul
9fcbbfad75 Merge "Fix Apparmor libvirt profile removal" 2022-02-10 10:36:06 +00:00
Imran Hussain
f4bfab57bd [haproxy] optionally set socket to allow admin commands
Allow operators to set haproxy socket to admin level.
This is done via the flag haproxy_socket_level_admin which
is set to "no" by default.

Closes-Bug: 1960215

Signed-off-by: Imran Hussain <ih@imranh.co.uk>
Change-Id: Ia0da89288d68f5803ace1934c013053f12343195
2022-02-09 17:21:18 +00:00
Zuul
54e543ac34 Merge "octavia: drop warning about certificate changes" 2022-02-09 07:45:40 +00:00
Zuul
211c34b40e Merge "Glance: add lock_path setting" 2022-02-08 17:24:15 +00:00
Mark Goddard
bede2a8581 octavia: drop warning about certificate changes
The change happened in Train, time to move on.

Change-Id: Ie58265284b2e6b4b30b24fc2f22dd4f5eec05d5b
2022-02-08 12:18:13 +00:00
Maksim Malchuk
75f55d13ad Fix Apparmor libvirt profile removal
The apparmor_parser actually doesn't remove the file or doesn't create
the symlink in '/etc/apparmor.d/disable' itself so the next run of the
baremetal role will fail with the error "Unable to remove "libvirtd".
Even more after reboot, the profile is still active. We need to
disable the profile completly ourselves. This change fixes the
idempotents of the baremetal role.

Closes-Bug: #1960302
Change-Id: I162e417387393e806886b1c9ea8053b89778b4d1
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-02-08 13:52:45 +03:00
Pierre Riteau
71bd200833 Revert "Add workaround for keystonemiddleware/neutron memcached issue"
The default configuration was changed to use the advanced cache pool in
keystonemiddleware 9.3.0 (Xena release) [1].

This reverts commit 5a52d8e4a0c5d4c246deb8851ef893df63ee0847 (except the
release note).

[1] https://review.opendev.org/c/openstack/keystonemiddleware/+/773939

Change-Id: I290d0a81c57c189b6eb62fc3eee3ed19f441671b
2022-02-08 10:12:03 +01:00
Zuul
0488566e82 Merge "certificates: generate libvirt TLS certificates" 2022-02-03 19:11:03 +00:00
Zuul
881b0aa972 Merge "Deploy Zun with Cinder Ceph support" 2022-02-03 15:49:46 +00:00
Mark Goddard
33e93ab323 certificates: generate libvirt TLS certificates
Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.

The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.

Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
2022-02-03 14:32:38 +00:00
Buddhika Sanjeewa
eb7e0f6fda Deploy Zun with Cinder Ceph support
Enables zun to access cinder volumes when cinder is configured to use
external ceph.
Copies ceph config file and ceph cinder keyring to /etc/ceph in
zun_compute container.

Closes-Bug: 1848934
Change-Id: Ie56868d5e9ed37a9274b8cbe65895f3634b895c8
2022-02-02 19:15:51 +00:00
Will Szumski
e7455759ad Add OIDCDiscoverURL mod_oidc option
This gets rid of one of the steps in the authentication flow.

Closes-Bug: 1930055
Change-Id: I4ed4651b55a912f1d9aec7277bae6bb4776f1e0a
2022-02-02 15:40:50 +01:00
Radosław Piliszek
75305aa897 Glance: add lock_path setting
This is required to use, e.g., Cinder iSCSI backend with Glance.

Closes-Bug: #1959663
Change-Id: I6d5e0e4ab70922a772f3c82e914f9e7d37cf0318
2022-02-01 11:24:04 +00:00
Michal Nasiadka
7f2d203354 horizon: Support custom themes
Custom themes support for horizon deployment.
 - horizon role task added for copying theme files
 - added theme copying into the container in templates
 - docs and reno updated

Change-Id: If9982c8e18be31772cb031ef72b7eebd4d768be5
Co-Authored-By: Jakub Darmach <jakub@stackhpc.com>
Depends-On: https://review.opendev.org/c/openstack/kayobe/+/824565
Depends-On: https://review.opendev.org/c/openstack/kolla/+/826672
2022-01-31 14:34:24 +00:00
Zuul
d8b2c72fdf Merge "Fix log rotation for fluentd created files" 2022-01-28 12:24:37 +00:00
Zuul
2d72fc5da4 Merge "prometheus: add tls_connect blackbox module" 2022-01-28 12:24:35 +00:00
Zuul
826dfb4547 Merge "Fix usage of Subject Alternative Name for TLS" 2022-01-27 16:53:28 +00:00
Zuul
f1c68d1d53 Merge "fluentd: remove legacy parsing config" 2022-01-26 17:07:26 +00:00
Zuul
e65c157eb8 Merge "openvswitch: add option to set hw offload" 2022-01-26 10:55:02 +00:00
Zuul
941076eae4 Merge "Fix bad openstack command while registering IDP" 2022-01-26 07:14:05 +00:00
Kevin Rasmussen
f955383b9c Fix bad openstack command while registering IDP
This fixes a bug in registering identity providers

The bug was caused by a missing `=` in the openstack command

Add the missing `=` after `--os-user-domain-name`

Closes-Bug: #1959022
Change-Id: I73f80cd2c81a3944de0933e60f5768956a1a3b70
2022-01-25 18:02:50 +00:00
Zuul
cb69f7d379 Merge "Fluentd cleanup" 2022-01-25 16:22:21 +00:00
Zuul
d241a3dc8c Merge "fluentd: add modern parsing config" 2022-01-25 14:48:49 +00:00
Zuul
70a46fdeb5 Merge "Use subnet_dns_publish_fixed_ip Neutron extension" 2022-01-25 13:40:38 +00:00
Isaac Prior
79b59e2c0b Fix log rotation for fluentd created files
Overrides default fluentd buffer config to stop log files from using
datestamped filenames, allowing logrotate to manage them.

Closes-Bug: #1940118
Change-Id: I40c4e209470d21e0a02fd447fb628acfdae9fa9d
2022-01-25 12:02:20 +00:00
Zuul
b41268308b Merge "Delete the logrotate files because they do not have separate logs" 2022-01-25 10:54:53 +00:00
Zuul
9d5e091b04 Merge "Remove custom value for max_allowed_request_size_in_bytes" 2022-01-25 10:54:09 +00:00
Zuul
2146015cf0 Merge "Revert "Use friendly target names in Prometheus"" 2022-01-25 09:55:44 +00:00
Dr. Jens Harbott
e00e46d337 Use subnet_dns_publish_fixed_ip Neutron extension
There are multiple Neutron extensions that can be used for DNS
integration. The "dns" extension has only minimum functionality, for
most deployments either "dns_domain_ports" or
"subnet_dns_publish_fixed_ip" would be used, with the latter being a
superset of the two others [0].

[0] https://docs.openstack.org/neutron/xena/admin/config-dns-int-ext-serv.html#use-case-3-ports-are-published-directly-in-the-external-dns-service

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: I1056bddfd49265ffe21b4d000898d72bba3ebfad
2022-01-21 22:27:23 +00:00
Zuul
fb26785ce9 Merge "Use Docker healthchecks for ironic-neutron-agent services" 2022-01-21 13:11:44 +00:00
Zuul
b7babcdcfe Merge "Make nova_ssh listen on api_interface as well" 2022-01-20 20:53:06 +00:00
Zuul
d5dcb66479 Merge "Add Ansible 5 aka core 2.12 support" 2022-01-20 20:53:03 +00:00
Michal Nasiadka
dac58808c0 openvswitch: add option to set hw offload
Change-Id: I8bf5453c6943fd2ad8912e5d80af179296ada894
2022-01-20 19:57:09 +00:00
Zuul
e048401940 Merge "Clean up chrony cleanup" 2022-01-20 03:59:07 +00:00
likui
98c6a4b65a Use Docker healthchecks for ironic-neutron-agent services
This change enables the use of Docker healthchecks for ironic-neutron-agent services.

Change-Id: I80f8319b2cf2e4ae09904a08532cde5ec0385fa3
Implements: blueprint container-health-check
2022-01-19 10:06:41 +00:00
Pierre Riteau
57fb7fd0a5 Remove custom value for max_allowed_request_size_in_bytes
There is no explanation for why this option was bumped to 1 MB instead
of the upstream default. This has been the case since the original
barbican role commit in 2016.

Restore upstream default in Yoga.

Change-Id: Ib0245f44d2b049f7e2254d8d2ea4b2080a8d62dd
2022-01-18 22:04:31 +01:00