6616 Commits

Author SHA1 Message Date
Michal Nasiadka
b6b7401c0d mariadb: Remove wsrep-notify.sh
Closes-Bug: #1947534

Change-Id: I08be074c3633cc4fb0a0bc6c9cb8d03eb5226d89
2021-10-20 05:37:57 +00:00
Zuul
525161d2af Merge "Correctly create the dhcp_agent.ini and l3_agent.ini" 2021-10-12 00:04:31 +00:00
Zuul
6ee1661d96 Merge "Do not load br_netfilter" 2021-10-11 15:50:48 +00:00
Zuul
7af8667eb6 Merge "Trivial but necessary fix - loadbalancer weight" 2021-10-11 14:02:43 +00:00
Maksim Malchuk
78260f98e4 Correctly create the dhcp_agent.ini and l3_agent.ini
The section [ovs] is needed only for ovs/ovn configurations.

TrivialFix

Change-Id: If9015b8f53c04cf3257331449ebd50163fabcab0
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2021-10-11 16:37:12 +03:00
Zuul
612937de0f Merge "Fix privileges for MariaDB 10.5" 2021-10-11 11:15:04 +00:00
Zuul
0a6ff9b043 Merge "Do not set net.ipv4.ip_forward sysctl" 2021-10-11 10:55:56 +00:00
Michal Arbet
2455a95f34 Trivial but necessary fix - loadbalancer weight
Weight for haproxy backend was merged in [1] with
tiny bug, there is need to convert to int to check
conditional <= 256. Otherwise, it's not working as
expected.

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/775627

Change-Id: Icb6f5147ebd2a0be52ba4ef6ba4a00bbd0242d3d
2021-10-11 12:03:17 +02:00
Michal Arbet
f1cbff6b7e Trivial fix shebang in keystone's fernet-node-sync.sh.j2
Change-Id: I86aeafccd2a2bff1d89a40785e1a6715097bb849
2021-10-07 17:44:35 +02:00
Radosław Piliszek
c7c14e1c43 Fix privileges for MariaDB 10.5
"BINLOG MONITOR" and "SLAVE MONITOR" replace
"REPLICATION CLIENT" (which is now an alias for "BINLOG MONITOR").
The validation in Ansible MySQL collection is too simple to
understand aliases and breaks. Hence, let's use the canonical
names and adapt per service according to its needs.

Change-Id: I1175e4846384accd19942620dc155d0c5728e64b
2021-10-07 09:24:31 +00:00
Zuul
01470fc7e9 Merge "Use friendly target names in Prometheus" 2021-10-06 16:27:21 +00:00
Zuul
61b98f6899 Merge "Do not create haproxy and swift log dirs needlessly" 2021-10-06 14:55:05 +00:00
Marcin Juszkiewicz
0df36ce1e2 Debian: apt-transport-https is transitional package
We do not need anymore as APT already knows how to do HTTPS.

Change-Id: I0b89b17ea2443e4578906afe4b518477462f981f
2021-10-06 11:17:03 +00:00
Zuul
bd6ca6b286 Merge "Do not enable mariadb-clustercheck when not needed" 2021-10-05 10:03:53 +00:00
Zuul
059ace7136 Merge "Switch default images source to quay.io" 2021-10-05 10:03:51 +00:00
Christian Berendt
4f78c696c2 Do not become root when searching for custom prometheus alert rules files
Change-Id: I6da412d6d3e7d067c8d903ee884711ac509d24aa
2021-10-04 09:49:58 +02:00
Radosław Piliszek
15259002be Do not load br_netfilter
Nor set related sysctls.
More details in the reno.

Change-Id: I898548ecc6df3caa094c3222159b7ba1e16dc211
Closes-Bug: #1945789
2021-10-01 13:23:54 +00:00
Mark Goddard
1d0171fc70 monasca: change default of monasca_ntp_server
Updates the default value of 'monasca_ntp_server' from
'external_ntp_servers[0]' to '0.pool.ntp.org'.  This is due to the
removal of the 'external_ntp_servers' variable as part of the removal of
Chrony deployment.

Change-Id: I2e7538a2e95c7b8e9280eb051ee634b4313db129
2021-10-01 14:07:56 +01:00
wu.chunyang
1f71df1a8b Remove chrony role from kolla
chrony is not supported in Xena cycle, remove it from kolla

Moved tasks from chrony role to chrony-cleanup.yml playbook to avoid a
vestigial chrony role.

Co-Authored-By: Mark Goddard <mark@stackhpc.com>

Change-Id: I5a730d55afb49d517c85aeb9208188c81e2c84cf
2021-09-30 18:56:14 +02:00
Zuul
bfba65f286 Merge "Add support for Ceph RadosGW integration" 2021-09-30 16:06:48 +00:00
Zuul
2e9d9148f6 Merge "Deploy source type images by default" 2021-09-30 14:30:34 +00:00
Mark Goddard
8c5012e940 Add support for Ceph RadosGW integration
* Register Swift-compatible endpoints in Keystone
* Load balance across RadosGW API servers using HAProxy

The support is exercised in the cephadm CI jobs, but since RGW is
not currently enabled via cephadm, it is not yet tested.

https://docs.ceph.com/en/latest/radosgw/keystone/

Implements: blueprint ceph-rgw

Change-Id: I891c3ed4ed93512607afe65a42dd99596fd4dbf9
2021-09-30 13:08:13 +00:00
Zuul
9e380bf11c Merge "Transition Keystone admin user to system scope" 2021-09-30 09:33:10 +00:00
Mark Goddard
66c84843e4 Deploy source type images by default
Source images get the most test coverage, so it makes sense to deploy
these by default.

Change-Id: I8d0c8750e2c1600e84cc2e677a4eae0e9f502dac
2021-09-30 08:07:48 +00:00
Radosław Piliszek
1bfed045cf Do not set net.ipv4.ip_forward sysctl
To prevent a security issue.
More details in the reno.

Change-Id: I8bb398e299aa68147004723a18d3a1ec459011e5
Closes-Bug: #1945453
2021-09-29 15:19:12 +00:00
Niklas Hagman
2e933dceb5 Transition Keystone admin user to system scope
A system-scoped token implies the user has authorization to act on the
deployment system. These tokens are useful for interacting with
resources that affect the deployment as a whole, or exposes resources
that may otherwise violate project or domain isolation.

Since Queens, the keystone-manage bootstrap command assigns the admin
role to the admin user with system scope, as well as in the admin
project. This patch transitions the Keystone admin user from
authenticating using project scoped tokens to system scoped tokens.
This is a necessary step towards being able to enable the updated oslo
policies in services that allow finer grained access to system-level
resources and APIs.

An etherpad with discussion about the transition to the new oslo
service policies is:

https://etherpad.opendev.org/p/enabling-system-scope-in-kolla-ansible

Change-Id: Ib631e2211682862296cce9ea179f2661c90fa585
Signed-off-by: Niklas Hagman <ubuntu@post.blinkiz.com>
2021-09-28 09:45:06 -07:00
Zuul
56938253a7 Merge "Add way to change weight of haproxy backend per service" 2021-09-28 12:22:55 +00:00
Radosław Piliszek
2c6bc0bd1a Do not create haproxy and swift log dirs needlessly
Closes-Bug: #1945070
Change-Id: I1b2a82b57cb9884b6c3c3ad07f6449ae29042a3d
2021-09-27 16:01:47 +00:00
Zuul
f7d5cebce2 Merge "Use mariadb_tag as default for all mariadb tags" 2021-09-27 10:51:39 +00:00
Michal Arbet
7c2b4bead2 Add way to change weight of haproxy backend per service
This patch adding option to control weight of haproxy
backends per service via host variable.

Example:

[control]
server1 haproxy_nova_api_weight=10
server2 haproxy_nova_api_weight=2 haproxy_keystone_internal_weight=10
server3 haproxy_keystone_admin_weight=50

If weight is not defined, everything is working as before.

Change-Id: Ie8cc228198651c57f8ffe3eb060875e45d1f0700
2021-09-26 09:43:57 +02:00
Zuul
d85af34ccd Merge "Bump up Ansible max supported ver to 4.x" 2021-09-24 16:43:01 +00:00
Zuul
3101c5abc3 Merge "Skip setting rp_filter by default" 2021-09-23 19:14:55 +00:00
Michał Nasiadka
1b650534c0 Bump up Ansible max supported ver to 4.x
This change bumps up max supported Ansible version
to 4.x (ansible-core 2.11.x) and minimum to 2.10.

Change-Id: I8b9212934dfab3831986e8db55671baee32f4bbd
2021-09-23 10:45:31 +00:00
Piotr Parczewski
4ff65b7661 Use friendly target names in Prometheus
Change-Id: I16fdb2f93ddb656eeacd3f2b84190f9bdcfaa21c
2021-09-22 11:09:32 +02:00
Mark Goddard
6dc8b56390 Use mariadb_tag as default for all mariadb tags
This allows one variable to specify the tag for all MariaDB images.

Change-Id: I164cdd41787f8bd52d8e08cb380d42625a8bbd84
TrivialFix
2021-09-21 06:50:41 +00:00
Zuul
daf2a39643 Merge "Fix neutron upgrade using host limit without controllers" 2021-09-20 23:11:19 +00:00
Zuul
27f338a939 Merge "use ironic user in ironic_neutron_agent.ini file" 2021-09-20 20:03:12 +00:00
Zuul
cdaa0dbe24 Merge "Add disable_firewall variable" 2021-09-20 19:57:38 +00:00
Zuul
000b347431 Merge "Remove haproxy,keepalived groups" 2021-09-20 18:09:00 +00:00
Zuul
7cf30017ea Merge "Add Alertmanger metric target(s)" 2021-09-20 18:08:56 +00:00
Radosław Piliszek
2cf9ae2cf5 Do not enable mariadb-clustercheck when not needed
Closes-Bug: #1944114
Change-Id: Idd525fda7ff94f70794f4c582cd74470c7f40fae
2021-09-20 09:58:56 +00:00
Radosław Piliszek
0d9477de38 Switch default images source to quay.io
Docs adapted to match.
Removed the unsupported-for-quay option to set up
a pull-through cache.

Closes-Bug: #1942134
Change-Id: If5a26b1ba4bf35bc29306c24f608396dbf5e3371
2021-09-16 17:27:39 +00:00
Michal Arbet
f0241f807f Remove haproxy,keepalived groups
Haproxy was renamed in [1].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/770618

Change-Id: Ib2d7f0774fede570a8c4c315d83afd420c31da0b
2021-09-16 13:41:13 +02:00
Zuul
3455105321 Merge "gnocchi: fix external ceph integration when gnocchi-statsd is disabled" 2021-09-15 09:33:03 +00:00
Bernd Mueller
ae69994db7 use ironic user in ironic_neutron_agent.ini file
Signed-off-by: Bernd Mueller <mueller@b1-systems.de>
Change-Id: Idb8a82acbd8193fd3fe71c080a1c57e8614d89ec
2021-09-13 10:55:03 +02:00
Pierre Riteau
72e0673989 Fix neutron upgrade using host limit without controllers
When running kolla-ansible upgrade with a host limit that does not
include controllers, the neutron upgrade fails.

Change-Id: I7125a6ef1f180db6997026ff27e84feb04ee239d
Closes-Bug: #1939691
2021-09-10 22:22:40 +02:00
Zuul
a1a22b3a89 Merge "toolbox: Allow different users logging to ansible.log" 2021-09-09 15:55:27 +00:00
Zuul
2bd945b0f6 Merge "Add a ovsdb_timeout variable for better configuration" 2021-09-09 11:01:11 +00:00
Zuul
f27c409eea Merge "Bump libvirtd memlock ulimit" 2021-09-09 10:58:27 +00:00
Zuul
f99bf8325f Merge "Never make Docker registry insecure by default" 2021-09-09 10:49:03 +00:00