13598 Commits

Author SHA1 Message Date
Michal Nasiadka
bc203433f1 Add support for ansible-core
Collections version taken from official Ansible 7 package [1]
and limited to the same major version.

[1]: https://github.com/ansible-community/ansible-build-data/blob/main/7/ansible-7.7.0.yaml

Change-Id: I0f1ea9717397adc2d2c3215d74ec3759f351a57a
2023-11-08 09:52:20 +00:00
Will Szumski
37c2ab2aaa Support exposing prometheus_server externally
This avoids the need to use a proxy, or some other means, to connect to
Prometheus. This is disabled by default and can be enabled by setting
enable_prometheus_server_external to true.

Change-Id: Ia0af044ff436c2a204b357750a16ff49fcdfec45
2023-11-07 14:52:06 +00:00
Will Szumski
1235c7253d CI: Adds a kolla-variables parent job
This allows us to share variables between jobs without inheriting any
of the pre-run, post-run or cleanup playbooks of the parent job. These
run due to the zuul inheritance rules, see:

https://zuul-ci.org/docs/zuul/latest/config/job.html#job

Signed-off-by: Will Szumski <will@stackhpc.com>
Change-Id: Id0a34778accafdc62ebe916e81d69f31c6274d4c
2023-11-07 14:51:36 +00:00
Zuul
e3cdb8eb3d Merge "Add support for LetsEncrypt-managed certs" 2023-11-07 14:45:36 +00:00
Zuul
c799af8467 Merge "octavia: enable jobboard" 2023-11-07 13:28:17 +00:00
James Kirsch
5581a28253 Add support for LetsEncrypt-managed certs
Add support for automatic provisioning and renewal of HTTPS
certificates via LetsEncrypt.

Spec is available at:
https://etherpad.opendev.org/p/kolla-ansible-letsencrypt-https

Depends-On: https://review.opendev.org/c/openstack/kolla/+/887347
Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io>
Implements: blueprint letsencrypt-https
Change-Id: I35317ea0343f0db74ddc0e587862e95408e9e106
2023-11-07 10:59:51 +01:00
Christian Berendt
76cb8574ee octavia: enable jobboard
Enable the jobboard feature for the Octavia amphora provider. This
requires Redis as a dependency, a precheck is added to ensure proper
configuration.

https://docs.openstack.org/octavia/latest/install/install-amphorav2.html

Change-Id: Iec3c8a4b4e257557dc8ec995c41d0ad7e88e13e2
2023-11-07 09:38:38 +00:00
Michal Arbet
c5f3f23e05 [podman] Fix cross dependency image build
When the kolla-ansible project has a cross dependency on
the kolla project, CI have to build an image from that change
locally. However, Podman refuses to push to localhost, so it is
necessary to set the local repo as insecure for the test.

Change-Id: I786b22ff0cd581f90ba4bec08842651a6509a745
2023-11-03 12:05:04 +01:00
Zuul
255ce5c11e Merge "prometheus: Fix etcd scrape when etcd uses TLS" 2023-11-02 09:19:57 +00:00
Zuul
6eea013ea3 Merge "CI: Install container engine sdk" 2023-10-31 09:59:22 +00:00
Zuul
8e302cc47d Merge "Improve grok pattern matching for apache logs" 2023-10-30 15:09:30 +00:00
Michal Nasiadka
fed05c8018 CI: Install container engine sdk
In order to drop docker pip package from requirements.txt in Kolla
we need to start installing that here.

Change-Id: Ifd3b86afb65760c3b3ce7f26feebdaf0789fb525
2023-10-30 11:52:09 +01:00
Zuul
66853f8620 Merge "Remove keystone admin leftovers" 2023-10-24 15:43:01 +00:00
Zuul
f34ec164a6 Merge "Add support of podman deployment" 2023-10-23 13:06:49 +00:00
Ivan Halomi
9a3f463345 Add support of podman deployment
This change adds basic deployment based on Podman
container manager as an alternative to Docker.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com>
Signed-off-by: Petr Tuma <p.tuma@partner.samsung.com>
Change-Id: I2b52964906ba8b19b8b1098717b9423ab954fa3d
Depends-On: Ie4b4c1cf8fe6e7ce41eaa703b423dedcb41e3afc
2023-10-20 17:51:52 +02:00
Michal Nasiadka
79637cb99e Revert "CI: Pin ansible-core due to breakage"
This reverts commit d3c4ff8b95552a25bcca1fc01bebeca6d624d633.

Reason for revert: workaround is present

Change-Id: I40f794ce5f401a7357099dff10f7f8e05e1c4826
2023-10-19 08:20:03 +00:00
Michal Nasiadka
0386f54ff6 Rename per role filters files
Related to ansible-core bug [1].

[1]: https://github.com/ansible/ansible/issues/81945

Change-Id: Idede07a5f0fd1a3ee63e1c54a263e358e95b3a86
2023-10-19 10:11:24 +02:00
Zuul
a6120f231a Merge "Fix Cyborg endpoints again" 2023-10-13 18:04:46 +00:00
Laurie Fisher
63213c0e23 Improve grok pattern matching for apache logs
Apache grok pattern updated to match the size of response in bytes,
the time taken to serve the request and the user-agent that made
the request.

Change-Id: I8ce6e6e10bbf55ef8aa21f983f4a6c4b6dc24402
2023-10-13 14:03:56 +00:00
Zuul
ec4b9e875a Merge "Fix services config in single external frontend" 2023-10-13 10:16:50 +00:00
Grzegorz Koper
8fb0bddfe9 Fix services config in single external frontend
Adding missing group_vars for gnocchi service.
Using proper variables in haproxy config for vitrage and venus services.

Closes-Bug: #2038904
Change-Id: I06e8f29440c13864a866ea03ce0a0821fbe846f8
2023-10-12 12:00:44 +00:00
Michal Arbet
2c0f416e3a Fix podman logs
Change-Id: I7b1a5bef0cb1dc1dfad1c6c4ca486e6ead847f12
2023-10-12 07:29:10 +00:00
Zuul
9951c44090 Merge "Add a separate interface address for tgtd" 2023-10-11 13:38:52 +00:00
Michal Nasiadka
d3c4ff8b95 CI: Pin ansible-core due to breakage
It seems latest ansible-core 2.14 and 2.15 breaks a filter
in kolla-ansible - let's pin for now and fix the issue in a
separate patchset.

Change-Id: I200ad775094230e4bf8bb40988c12ea03471008f
2023-10-11 10:26:38 +02:00
Michal Nasiadka
99ab6aedbb Remove keystone admin leftovers
Change-Id: Ic153a91beb30daa334ccbb0430ce8340bd6c480f
2023-10-06 08:57:40 +00:00
Rafal Lewandowski
ec11c31253 Add a separate interface address for tgtd
Closes-Bug: #2031237
Change-Id: I7a4eaeab0c106ebdcb4d4cf9825c53dd8ad62dbf
2023-10-05 13:27:28 +02:00
Zuul
13ba75cccf Merge "Default keystone user role changed to member" 2023-10-04 14:58:08 +00:00
Bartosz Bezak
fc7deed9cd Default keystone user role changed to member
_member_ role is a long not used default keystone role,
for instance Horizon moved to use member role from yoga [1]

[1] https://docs.openstack.org/horizon/yoga/configuration/settings.html#openstack-keystone-default-role

Closes-Bug: #2038314
Change-Id: Idc9bce82c682e37c5bea10c93577091b85f3ad45
2023-10-04 11:07:09 +00:00
Zuul
0a392a69f5 Merge "kolla_address: check correct error return value" 2023-10-03 12:48:51 +00:00
Célestin Matte
eec8b05914 kolla_address: check correct error return value
Unlike other methods such as resolve(), get() does not return an Undefined object, but None.
This removes 4 ansible-lint warnings in various files calling kolla_address.

Closes-Bug: #2038281

Change-Id: I591a50512a954210f951c40a350ed4b9e1fc48ae
2023-10-03 08:10:24 +00:00
Michal Nasiadka
00dfa4233c Remove remnants of Monasca and deps
Following Monasca initial removal in [1]

[1]: I6fc7842bcda18e417a3fd21c11e28979a470f1cf

Change-Id: I94d6f102e8da3882f37f3007639b917c49f907a9
2023-10-02 13:10:03 +02:00
Zuul
28bf63f269 Merge "Fix http/2 support for internal endpoints" 2023-09-27 19:10:23 +00:00
Zuul
fdc3b122c1 Merge "zun: Deprecate Zun provisionally" 2023-09-27 14:46:48 +00:00
Zuul
b422bada22 Merge "Add ML2/OVN and ML2/OVS setting checks for neutron" 2023-09-27 13:26:03 +00:00
Maksim Malchuk
f2a63a522c Fix http/2 support for internal endpoints
Followup on I2e00d3e9193a3052d43a228915ea249794490afe.
Fixes an issue with wrong copy/paste.

Related-Bug: #1850924
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
Change-Id: I979a4e5b534f105a2e81f88f9675feddc883490a
2023-09-27 08:21:12 +00:00
Jan Gutter
f8d4db54db
zun: Deprecate Zun provisionally
* Zun currently has a dependency on a combination of Docker and
  etcd that is no longer installable (or supported) in newer
  distros.
* These components are core dependencies of other systems and
  vendoring them will be very painful.
* Work to update Zun past this is scheduled for the 'C' cycle.
* If Zun regains compatibility, backports to this series will be
  considered.

Change-Id: I6a2a4ffdcaf1c4fab1097e94d5f255ffb9a2947d
2023-09-26 21:48:12 +01:00
Rafal Lewandowski
d3d67dc02c Add ML2/OVN and ML2/OVS setting checks for neutron
It will check the setting of neutron_plugin_agent,
if it is set to "ovn" or "openvswitch", and run
container and volume checks to make sure the other
agent was not already deployed.

Change-Id: Ie00572f3ff9d3500abd5519bd472e2134c318886
2023-09-26 21:24:12 +02:00
Dincer Celik
f64c86de1d [haproxy] Adds http/2 support to HAProxy
This change introduces haproxy_enable_http2 to let operators enable
http/2 on HAProxy frontends when kolla_enable_tls_external is enabled.

Change-Id: I2e00d3e9193a3052d43a228915ea249794490afe
Closes-Bug: #1850924
2023-09-25 11:36:54 +02:00
Bartosz Bezak
7186f960d9 Add option for extra kernel modules in neutron role
Closes-Bug: #2036741

Change-Id: Ib448d04e43dff78e344064161beadae917c41206
2023-09-21 11:54:00 +00:00
Mark Goddard
05df4e7209 prometheus: Fix etcd scrape when etcd uses TLS
Use HTTPS to scrape etcd metrics when etcd TLS is enabled.

Change-Id: Iaff10d5314a8dc5b07137d93c269f1ac24cf63de
Closes-Bug: #2036950
2023-09-21 12:28:38 +01:00
Zuul
59ab6bf049 Merge "Fix ansible-lint warnings related to jinja spacing" 2023-09-20 15:00:08 +00:00
Zuul
28ffebca93 Merge "debian: Remove kolla-ansible-debian-zun job" 2023-09-20 14:12:28 +00:00
Zuul
daf7174283 Merge "ansible: bump min version to 2.14 and max to 2.15" 2023-09-20 11:40:53 +00:00
Zuul
d0262bdc3e Merge "toolbox: use script handling signals" 2023-09-18 18:44:38 +00:00
Zuul
dec41d6add Merge "README: link to the meetings page directly" 2023-09-18 14:29:32 +00:00
Zuul
8d26cd79d4 Merge "Add genconfig to the Operating Kolla guide" 2023-09-18 14:29:30 +00:00
Zuul
1bd1517d27 Merge "Support customising Nova config at the individual service level" 2023-09-18 14:29:28 +00:00
Célestin Matte
4b52e11528 Fix ansible-lint warnings related to jinja spacing
Change-Id: I901c0a57efcb6cbaaac43f64f2243fff7d7980c8
2023-09-18 15:44:39 +02:00
Zuul
65079b4dc1 Merge "keystone: ensure bool for two parameters" 2023-09-18 12:26:24 +00:00
Zuul
b69aa4ea08 Merge "ceilometer: process custom event_pipeline.yaml with merge_yaml" 2023-09-18 10:18:03 +00:00