13614 Commits

Author SHA1 Message Date
Michal Nasiadka
cea076f379 Introduce oneshot docker_restart_policy
docker_restart_policy: no causes systemd units to not get created
and we use it in CI to disable restarts on services.

Introducing oneshot policy to not create systemd unit for oneshot
containers (those that are running bootstrap tasks, like db
bootstrap and don't need a systemd unit), but still create systemd
units for long lived containers but with Restart=No.

Change-Id: I9e0d656f19143ec2fcad7d6d345b2c9387551604
2023-11-14 15:17:50 +00:00
Zuul
e545515e50 Merge "CI: Add redis to octavia scenario in setup_gate" 2023-11-13 18:04:20 +00:00
Zuul
70307aa0ae Merge "CI: Fix tenks for newer libvirt" 2023-11-13 17:15:07 +00:00
Zuul
233b5c06f7 Merge "octavia-certificates: fix missing collection for ansible-core" 2023-11-13 17:15:04 +00:00
Zuul
04e1446bf5 Merge "Add fluent config for letsencrypt" 2023-11-13 15:24:41 +00:00
Michal Nasiadka
b9f0854c86 CI: Fix tenks for newer libvirt
Copy cat of I2cfd2667abb1ae8988b7a7fd9761b75c20a0eaa4

Co-Authored-By: Pierre Riteau <pierre@stackhpc.com>
Change-Id: If4feec0a86f9a50ed43920ecf4d0da8875c71f4e
2023-11-13 14:18:32 +01:00
Michal Nasiadka
f3a6c77b18 octavia-certificates: fix missing collection for ansible-core
community.crypto collection was omitted in ansible-core implementation
patch
adding in trigger for requirements-core.yml to all optional jobs

Change-Id: Ib6bdea51280e171d42d6d37b0ab96c31697fddbe
2023-11-13 13:00:14 +00:00
Zuul
3e0014a7ea Merge "CI: Configure ephemeral disk using Kolla role" 2023-11-09 17:01:41 +00:00
Michal Nasiadka
ad5e8ffd33 CI: Add redis to octavia scenario in setup_gate
Octavia now requires redis - see [1].

[1]: Iec3c8a4b4e257557dc8ec995c41d0ad7e88e13e2

Change-Id: I5aa489209984974b2345b1f5f7608db022a1405e
2023-11-09 15:59:29 +00:00
Michal Arbet
5e54663e20 Fix kolla_docker module
Change-Id: I7df734cf15eba1af4da92f9c4ef12cc761442ca1
2023-11-09 11:47:32 +01:00
Zuul
e9dd15967b Merge "Add support for ansible-core" 2023-11-08 15:01:02 +00:00
Zuul
a599e91178 Merge "Set HORIZON_IMAGES_UPLOAD_MODE to direct by default" 2023-11-08 13:41:00 +00:00
Michal Nasiadka
bc203433f1 Add support for ansible-core
Collections version taken from official Ansible 7 package [1]
and limited to the same major version.

[1]: https://github.com/ansible-community/ansible-build-data/blob/main/7/ansible-7.7.0.yaml

Change-Id: I0f1ea9717397adc2d2c3215d74ec3759f351a57a
2023-11-08 09:52:20 +00:00
Boxiang Zhu
69d979c048 [CI] Add skyline scenario
Skyline is a new service for dashboard.
This patch adds a CI scenario which tests Skyline deployment.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/826948
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/828464

Implements: blueprint skyline
Change-Id: I48488a24d6c8a03cd129929347b1bdac25f198b0
2023-11-08 09:28:53 +08:00
Will Szumski
37c2ab2aaa Support exposing prometheus_server externally
This avoids the need to use a proxy, or some other means, to connect to
Prometheus. This is disabled by default and can be enabled by setting
enable_prometheus_server_external to true.

Change-Id: Ia0af044ff436c2a204b357750a16ff49fcdfec45
2023-11-07 14:52:06 +00:00
Will Szumski
1235c7253d CI: Adds a kolla-variables parent job
This allows us to share variables between jobs without inheriting any
of the pre-run, post-run or cleanup playbooks of the parent job. These
run due to the zuul inheritance rules, see:

https://zuul-ci.org/docs/zuul/latest/config/job.html#job

Signed-off-by: Will Szumski <will@stackhpc.com>
Change-Id: Id0a34778accafdc62ebe916e81d69f31c6274d4c
2023-11-07 14:51:36 +00:00
Zuul
e3cdb8eb3d Merge "Add support for LetsEncrypt-managed certs" 2023-11-07 14:45:36 +00:00
Zuul
c799af8467 Merge "octavia: enable jobboard" 2023-11-07 13:28:17 +00:00
Michal Arbet
b4dd2cc773 Add fluent config for letsencrypt
Depends-On: https://review.opendev.org/c/openstack/kolla/+/899773
Change-Id: I016c7a54ee2c43b6bbad0cb3eb3fe216f3d66238
2023-11-07 10:59:52 +01:00
James Kirsch
5581a28253 Add support for LetsEncrypt-managed certs
Add support for automatic provisioning and renewal of HTTPS
certificates via LetsEncrypt.

Spec is available at:
https://etherpad.opendev.org/p/kolla-ansible-letsencrypt-https

Depends-On: https://review.opendev.org/c/openstack/kolla/+/887347
Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io>
Implements: blueprint letsencrypt-https
Change-Id: I35317ea0343f0db74ddc0e587862e95408e9e106
2023-11-07 10:59:51 +01:00
Christian Berendt
76cb8574ee octavia: enable jobboard
Enable the jobboard feature for the Octavia amphora provider. This
requires Redis as a dependency, a precheck is added to ensure proper
configuration.

https://docs.openstack.org/octavia/latest/install/install-amphorav2.html

Change-Id: Iec3c8a4b4e257557dc8ec995c41d0ad7e88e13e2
2023-11-07 09:38:38 +00:00
Michal Nasiadka
82c0efd139 Set HORIZON_IMAGES_UPLOAD_MODE to direct by default
Change-Id: I4aa6dc90c6e6da6cd5fa94ad9ea02396e9c60a8b
2023-11-06 15:30:18 +00:00
Michal Arbet
c5f3f23e05 [podman] Fix cross dependency image build
When the kolla-ansible project has a cross dependency on
the kolla project, CI have to build an image from that change
locally. However, Podman refuses to push to localhost, so it is
necessary to set the local repo as insecure for the test.

Change-Id: I786b22ff0cd581f90ba4bec08842651a6509a745
2023-11-03 12:05:04 +01:00
Zuul
255ce5c11e Merge "prometheus: Fix etcd scrape when etcd uses TLS" 2023-11-02 09:19:57 +00:00
Zuul
6eea013ea3 Merge "CI: Install container engine sdk" 2023-10-31 09:59:22 +00:00
Zuul
8e302cc47d Merge "Improve grok pattern matching for apache logs" 2023-10-30 15:09:30 +00:00
Michal Nasiadka
58f7ad3112 CI: Configure ephemeral disk using Kolla role
Depends-On: https://review.opendev.org/c/openstack/kolla/+/899465
Change-Id: I876536263865077b7ecb2288ad95061292babcce
2023-10-30 14:56:26 +00:00
Michal Nasiadka
fed05c8018 CI: Install container engine sdk
In order to drop docker pip package from requirements.txt in Kolla
we need to start installing that here.

Change-Id: Ifd3b86afb65760c3b3ce7f26feebdaf0789fb525
2023-10-30 11:52:09 +01:00
Zuul
66853f8620 Merge "Remove keystone admin leftovers" 2023-10-24 15:43:01 +00:00
Zuul
f34ec164a6 Merge "Add support of podman deployment" 2023-10-23 13:06:49 +00:00
Ivan Halomi
9a3f463345 Add support of podman deployment
This change adds basic deployment based on Podman
container manager as an alternative to Docker.

Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com>
Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com>
Signed-off-by: Petr Tuma <p.tuma@partner.samsung.com>
Change-Id: I2b52964906ba8b19b8b1098717b9423ab954fa3d
Depends-On: Ie4b4c1cf8fe6e7ce41eaa703b423dedcb41e3afc
2023-10-20 17:51:52 +02:00
Michal Nasiadka
79637cb99e Revert "CI: Pin ansible-core due to breakage"
This reverts commit d3c4ff8b95552a25bcca1fc01bebeca6d624d633.

Reason for revert: workaround is present

Change-Id: I40f794ce5f401a7357099dff10f7f8e05e1c4826
2023-10-19 08:20:03 +00:00
Michal Nasiadka
0386f54ff6 Rename per role filters files
Related to ansible-core bug [1].

[1]: https://github.com/ansible/ansible/issues/81945

Change-Id: Idede07a5f0fd1a3ee63e1c54a263e358e95b3a86
2023-10-19 10:11:24 +02:00
Zuul
a6120f231a Merge "Fix Cyborg endpoints again" 2023-10-13 18:04:46 +00:00
Laurie Fisher
63213c0e23 Improve grok pattern matching for apache logs
Apache grok pattern updated to match the size of response in bytes,
the time taken to serve the request and the user-agent that made
the request.

Change-Id: I8ce6e6e10bbf55ef8aa21f983f4a6c4b6dc24402
2023-10-13 14:03:56 +00:00
Zuul
ec4b9e875a Merge "Fix services config in single external frontend" 2023-10-13 10:16:50 +00:00
Grzegorz Koper
8fb0bddfe9 Fix services config in single external frontend
Adding missing group_vars for gnocchi service.
Using proper variables in haproxy config for vitrage and venus services.

Closes-Bug: #2038904
Change-Id: I06e8f29440c13864a866ea03ce0a0821fbe846f8
2023-10-12 12:00:44 +00:00
Michal Arbet
2c0f416e3a Fix podman logs
Change-Id: I7b1a5bef0cb1dc1dfad1c6c4ca486e6ead847f12
2023-10-12 07:29:10 +00:00
Zuul
9951c44090 Merge "Add a separate interface address for tgtd" 2023-10-11 13:38:52 +00:00
Michal Nasiadka
d3c4ff8b95 CI: Pin ansible-core due to breakage
It seems latest ansible-core 2.14 and 2.15 breaks a filter
in kolla-ansible - let's pin for now and fix the issue in a
separate patchset.

Change-Id: I200ad775094230e4bf8bb40988c12ea03471008f
2023-10-11 10:26:38 +02:00
Michal Nasiadka
99ab6aedbb Remove keystone admin leftovers
Change-Id: Ic153a91beb30daa334ccbb0430ce8340bd6c480f
2023-10-06 08:57:40 +00:00
Rafal Lewandowski
ec11c31253 Add a separate interface address for tgtd
Closes-Bug: #2031237
Change-Id: I7a4eaeab0c106ebdcb4d4cf9825c53dd8ad62dbf
2023-10-05 13:27:28 +02:00
Zuul
13ba75cccf Merge "Default keystone user role changed to member" 2023-10-04 14:58:08 +00:00
Bartosz Bezak
fc7deed9cd Default keystone user role changed to member
_member_ role is a long not used default keystone role,
for instance Horizon moved to use member role from yoga [1]

[1] https://docs.openstack.org/horizon/yoga/configuration/settings.html#openstack-keystone-default-role

Closes-Bug: #2038314
Change-Id: Idc9bce82c682e37c5bea10c93577091b85f3ad45
2023-10-04 11:07:09 +00:00
Zuul
0a392a69f5 Merge "kolla_address: check correct error return value" 2023-10-03 12:48:51 +00:00
Célestin Matte
eec8b05914 kolla_address: check correct error return value
Unlike other methods such as resolve(), get() does not return an Undefined object, but None.
This removes 4 ansible-lint warnings in various files calling kolla_address.

Closes-Bug: #2038281

Change-Id: I591a50512a954210f951c40a350ed4b9e1fc48ae
2023-10-03 08:10:24 +00:00
Michal Nasiadka
00dfa4233c Remove remnants of Monasca and deps
Following Monasca initial removal in [1]

[1]: I6fc7842bcda18e417a3fd21c11e28979a470f1cf

Change-Id: I94d6f102e8da3882f37f3007639b917c49f907a9
2023-10-02 13:10:03 +02:00
Zuul
28bf63f269 Merge "Fix http/2 support for internal endpoints" 2023-09-27 19:10:23 +00:00
Zuul
fdc3b122c1 Merge "zun: Deprecate Zun provisionally" 2023-09-27 14:46:48 +00:00
Zuul
b422bada22 Merge "Add ML2/OVN and ML2/OVS setting checks for neutron" 2023-09-27 13:26:03 +00:00