11039 Commits

Author SHA1 Message Date
Radosław Piliszek
cf918fbc29 Fix native openvswitch firewall driver in neutron-openvswitch-agent
ovs-ofctl is still being run by neutron-openvswitch-agent.
Potential removal is scheduled for Victoria.
Until then, we have to mount /run/openvswitch in there.

Change-Id: Ia73b5665cece523bb822f6a223335f6fae94fb6a
Closes-bug: #1867506
2020-03-16 19:36:40 +00:00
Zuul
c63722f32a Merge "CI: Ignore neutron-server CRITICAL about WSREP" 2020-03-16 13:22:04 +00:00
Zuul
af3fe8f176 Merge "Use proper es schema in fluentd when use internal tls" 2020-03-16 11:55:42 +00:00
Radosław Piliszek
16ade28d5f CI: Ignore neutron-server CRITICAL about WSREP
We are getting this randomly on neutron-server shutdown
for upgrade.
As it does not affect real operations (and if it did,
we would definitely see it now), let's ignore it.

Change-Id: Ibe561517d44a1108e8223442a71fab36b69c2258
Related-bug: #1863579
2020-03-16 10:00:46 +00:00
Zuul
5a11f14b1b Merge "CI: Debug init-runonce" 2020-03-15 20:18:18 +00:00
Jeffrey Zhang
6aceaee4ad Use proper es schema in fluentd when use internal tls
Fix elasticsearch schema in fluentd when kolla_enable_tls_internal is
true.

Change-Id: I51286d2def7a762d569740c1abc5b924b682ad9d
Closes-Bug: #1867481
2020-03-15 08:47:07 +08:00
Zuul
fd2a5b2cf2 Merge "CI: Use network mode = host for builds" 2020-03-13 20:26:32 +00:00
Zuul
dd55cf6ed0 Merge "Copy ca certificates also to horizon container" 2020-03-12 21:11:35 +00:00
yj.bai
ed2df25ebc Copy ca certificates also to horizon container
Add copy ca file to horizon container.
because:
Could not find a suitable TLS CA certificate bundle,
invalid path: /etc/pki/ca-trust/source/anchors/kolla-customca-haproxy-internal.crt

Closes-Bug: #1867121

Change-Id: I64d4dbeebd53048705005b61eb3c5b2104e8f2ed
Signed-off-by: yj.bai <bai.yongjun@99cloud.net>
2020-03-12 16:59:53 +00:00
Mark Goddard
96151a35d0 Host OS prechecks follow up
We only log the release in the 'Checking host OS release or version'
precheck, but we allow either the release or version to be included in
the list. For example, on CentOS 7:

    CentOS release Core is not supported. Supported releases are: 8

Include the version in the failure message too.

Change-Id: I0302cd4fc94a0c3a6aa1dbac7b9fedf37c11b81e
Related: blueprint improve-prechecks
2020-03-11 17:08:17 +00:00
Zuul
cced7e04e5 Merge "Check supported host OS distributions in prechecks" 2020-03-11 11:19:54 +00:00
Zuul
e49448439b Merge "Fix HAProxy monitor VIP precheck" 2020-03-11 02:43:00 +00:00
Zuul
f867373a73 Merge "support ipv6 for grafana.ini.j2" 2020-03-11 02:29:54 +00:00
Zuul
011ef713f4 Merge "CI: CentOS 8: Enable Ceph Ansible upgrade check job" 2020-03-10 18:52:49 +00:00
yj.bai
3e582a05fa support ipv6 for grafana.ini.j2
grafana not support ipv6 in grafana.ini.j2.

Closes-Bug: #1866141

Change-Id: Ia89a9283e70c10a624f25108b487528dbb370ee4
Signed-off-by: yj.bai <bai.yongjun@99cloud.net>
2020-03-10 17:47:34 +00:00
Will Szumski
a1c51b73c7 Use macro to avoid repetition
I didn't use a for loop as the logic for omitting the
comma for the final element dirties the logic.

Change-Id: Id29d5deebcc5126d69a1bd8395e0df989f2081f0
2020-03-10 13:00:34 +00:00
Zuul
2a2ce059dc Merge "Add notify restart container when cert changed" 2020-03-10 12:12:55 +00:00
Zuul
98bd59455d Merge "Fix elasticsearch configuration in ipv6 environments" 2020-03-10 12:05:16 +00:00
Zuul
5fbadcd8c3 Merge "Delete stale fluent config on restart" 2020-03-10 12:05:15 +00:00
Zuul
879707f06d Merge "CI: Add CentOS 8 upgrade to gate" 2020-03-10 11:51:13 +00:00
Zuul
3dd096b0b6 Merge "CI: Enable CentOS 8 bifrost job" 2020-03-10 11:26:59 +00:00
Mark Goddard
d20c65ed48 Check supported host OS distributions in prechecks
This should help to ensure that users are running tested and supported
host OS distributions.

Change-Id: I6ee76463d284ad4f3646af1c7ec2b7e50e2f3b15
Partially-Implements: blueprint improve-prechecks
2020-03-10 11:04:29 +00:00
Mark Goddard
93a4dcc1b9 Fix HAProxy monitor VIP precheck
If haproxy is running somewhere in the cluster and listening on the VIP,
but not running locally, then the following precheck may fail:

   TASK [haproxy : Checking free port for HAProxy monitor (vip interface)]

   msg: Timeout when waiting for 192.0.2.10:61313 to stop.

This change fixes the issue by skipping the check if HAProxy is running
on any host.

Change-Id: I831eb2f700ef3fcf65b7e08382c3b4fcc4ce8d8d
Closes-Bug: #1866617
2020-03-10 10:57:53 +00:00
Mark Goddard
5b9b882ca7 CI: CentOS 8: Enable Ceph Ansible upgrade check job
Change-Id: Id83870942d8488ad0b16e0917c190b8ff3a4dcef
Partially-Implements: blueprint centos-rhel-8
2020-03-10 10:50:06 +00:00
Zuul
d9cf6a3fa2 Merge "Enable buffering to file for Monasca logs" 2020-03-10 09:45:55 +00:00
Zuul
f4d2b6e092 Merge "Construct service REST API urls using configured protocol" 2020-03-10 08:42:57 +00:00
Zuul
6ece8fbdad Merge "Use "name:" instead of "role:" for *_role modules" 2020-03-10 08:40:43 +00:00
yj.bai
d3cc2f670e Add notify restart container when cert changed
When change the cert file in /etc/kolla/certificate/.
The certificate in the container has not changed.
So I think can use kolla-ansible deploy when certificate is
changed. restart <container>

Partially-Implements: blueprint custom-cacerts

Change-Id: Iaac6f37e85ffdc0352e8062ae5049cc9a6b3db26
Signed-off-by: yj.bai <bai.yongjun@99cloud.net>
2020-03-10 16:23:09 +08:00
Will Szumski
e7870e9df9 Delete stale fluent config on restart
We already only include .conf files in fluent.conf:

(fluentd)[fluentd@cpu-e-1041 /etc/fluentd]$ cat fluent.conf
@include input/*.conf
@include filter/*.conf
@include format/*.conf
@include output/*.conf

so this change should not cause ill effect. This works because of the
merge option in config files:

merge: merges the source directory into the target directory instead of
replacing it. Boolean, defaults to false.

see https://docs.openstack.org/kolla/latest/admin/kolla_api.html#kolla-api-external-config

Change-Id: I28f63ec81f1ea5bc4a213d053bfb2c04388d5925
Closes-Bug: #1862211
2020-03-10 07:52:25 +00:00
Jeffrey Zhang
3a8f533839 Fix elasticsearch configuration in ipv6 environments
Closes-Bug: #1866727
Change-Id: I455ef6026b39110791cd38dac053205550af1ce2
2020-03-10 07:38:33 +00:00
Radosław Piliszek
a4f162ebed CI: Add CentOS 8 upgrade to gate
Change-Id: If5afd6f7dbf45ccee95e99ddf080b276466a2eda
2020-03-09 21:52:17 +01:00
Radosław Piliszek
464e7f8061 CI: Enable CentOS 8 bifrost job
Depends-on: https://review.opendev.org/711293
Change-Id: Ida5332cf2a8ac24a25eccc487e8a11c1e975ddcc
2020-03-09 21:42:19 +01:00
Hongbin Lu
15afa61397 zun: load container driver from entry point
Starting from U release, container driver is loaded from entry point.
Deployers should specify the entry point (i.e. ``docker``) in config
option ``container_driver`` under ``[DEFAULT]`` session.

Zun patch: https://review.opendev.org/#/c/703259/

Change-Id: I96e38760e7b13a6e11737372e9e7fd36cca6f749
2020-03-07 01:24:52 +00:00
Zuul
e3c936ebab Merge "Deprecate neutron-fwaas support" 2020-03-06 18:32:22 +00:00
Zuul
8a763b3267 Merge "Remove enable_cadf_notifications variable" 2020-03-06 17:03:15 +00:00
Zuul
14dab828d5 Merge "Fix renos" 2020-03-06 15:02:23 +00:00
Christian Berendt
77a1d27938 Remove enable_cadf_notifications variable
The variable enable_cadf_notifications is deprecated and marked
for removal during the U cycle.

Change-Id: I5e4d20d112db2392b55a0788f4d704ab6ca6112f
2020-03-06 13:40:43 +00:00
Zuul
2978f13714 Merge "zuul: drop all CentOS 7 jobs" 2020-03-06 12:00:29 +00:00
Zuul
1496356139 Merge "Add deprecation note to nova-hyperv role" 2020-03-06 11:52:47 +00:00
Marcin Juszkiewicz
f487fc5e5c zuul: drop all CentOS 7 jobs
Change-Id: If63e1d00f0e56b65b636d38a6533c63d2ee1e0e2
2020-03-06 11:13:54 +00:00
Zuul
ee7d2979eb Merge "CentOS 8: CI: Add upgrade job" 2020-03-06 11:01:19 +00:00
Christian Berendt
bf774974c0 Deprecate neutron-fwaas support
Change-Id: I2257dedb21f335666695648bd4bbd725e7b082b3
2020-03-05 19:21:43 +00:00
Christian Berendt
e81eed930e Add deprecation note to nova-hyperv role
The support of hyperv was deprecated.

Change-Id: I3e1ca3ac0a8bac8ba68911ffb4925c5a474f24dd
2020-03-05 12:13:46 +00:00
Radosław Piliszek
d7d4b91659 Fix renos
to backport before releases

Change-Id: I3ed8b56232e9fa99f7a0bb262d57a2d13cb18999
2020-03-03 20:25:33 +01:00
Christian Berendt
d749b34160 Add deprecation notes to vmware/xenserver/hyperv guides
The support of vmware, xenserver and hyperv was deprecated.

Change-Id: Id06770c2247ce242f1fc2ac7220bbe6c3070598d
2020-03-03 19:05:06 +01:00
Zuul
a7a61b9462 Merge "CI: Add Ceph groups back to inventory" 2020-03-03 14:29:39 +00:00
Zuul
0a0e60580f Merge "service-rabbitmq: do not log password (use no_log)" 2020-03-03 12:26:32 +00:00
Radosław Piliszek
525a7f326f CI: Use network mode = host for builds
This avoids issues with IPv6 not enabled in docker.

Change-Id: I0faa1df8a04acd1746fa8a5f0d8455f819c254b5
2020-03-03 13:15:30 +01:00
Zuul
bca303cacd Merge "Configurable logrotate rotation interval and count" 2020-03-03 11:37:04 +00:00
Mark Goddard
29f223c02a CentOS 8: CI: Add upgrade job
Test upgrade from CentOS 8 train to CentOS 8 master.

Change-Id: Ibff2c7f8844dec4758945cbc7aa8df80d70a3dfd
Partially-Implements: blueprint centos-rhel-8
2020-03-03 10:29:31 +00:00