openstack/kolla-ansible.git/ansible/roles/aodh, branch stable/2026.1

Fix for overly restrictive permissions on ca-certificates directory

2026-05-12T05:56:37+00:00

Closes-Bug: #2112280 Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850 Signed-off-by: Rafal Lewandowski Signed-off-by: Michal Nasiadka (cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)

Drop support for running WSGI under Apache

2026-04-24T11:07:46+00:00

The migration to uWSGI has been successfully completed. All API services now run exclusively under uWSGI. The *_wsgi_provider variables have been removed from all affected roles along with leftover Apache wsgi config templates and fluentd Apache log handling. Rework Apache fluentd input configuration so it doesn't glob out whole /var/log/kolla/*/* and just include required services when enabled. Change-Id: I1475e629d033163a50a5c681c8fe2557a7b10bae Signed-off-by: Michal Nasiadka Signed-off-by: Bartosz Bezak

Standardize API health check endpoints

2026-04-12T13:02:28+00:00

Configure dedicated health check endpoints for Load Balancers Standardize health check paths in OpenStack and Grafana Ansible defaults to improve Load Balancer (HAProxy) reliability. The 'httpchk' configuration for the modified roles now uses dedicated health check endpoints (e.g., /healthcheck or /api/health) and enforces an HTTP 200 OK expectation. This ensures faster and more robust failure detection. Additionally, by moving health checks away from generic endpoints (such as OPTIONS /), application logs are now much cleaner. The log files will no longer be flooded every second with HAProxy probe entries like: "OPTIONS / HTTP/1.0" 200 94 0.000954 NOTE: The following services are exceptions to this standardization and still use the root endpoint (`/`) for health checks due to the lack of a dedicated health check middleware in their default API paste configuration: **cyborg_api**, **masakari**, **mistral_api**, **nova_api**, **octavia_api**, **placement**, **tacker**, **venus**, and **watcher**. Updated roles: * aodh * barbican * cinder * cloudkitty * cyborg * designate * etcd * glance * gnocchi * grafana * heat * horizon * influxdb * ironic * keystone * loadbalancer * magnum * manila * masakari * mistral * neutron * nova * nova-cell * octavia * opensearch * placement * rabbitmq * skyline * tacker * trove * venus * watcher * zun Change-Id: Ibbb9fda45a98565ab12e784bbef80be787bd6638 Signed-off-by: Piotr Milewski

ansible-lint: Fix fqcn[actions-core] for aodh

2026-03-19T12:18:52+00:00

Change-Id: I68a255c80066bb5a206ac9246f4f0e57114ab253 Signed-off-by: Michal Nasiadka

aodh: apply aodh_api_workers to uWSGI

2026-01-27T13:59:16+00:00

Partial-Bug: #2139153 Change-Id: I7afd65e72d598fb5bca5f5bdf383244198946e8a Signed-off-by: Bartosz Bezak

Add support for Debian Trixie (13)

2025-12-19T14:55:59+00:00

Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka

ansible-lint: fix unnamed-task in aodh

2025-12-10T21:19:48+00:00

Change-Id: Ic5739b7d7c8d28d0db473ffe22c7c0cabe426ed0 Signed-off-by: Bertrand Lanson

ansible-lint: Fix yaml[truthy] in aodh role

2025-11-21T11:24:57+00:00

Change-Id: Icae3b3b6935ad6837831e43dc5ce847fcc1c374c Signed-off-by: Michal Nasiadka

Bump ansible-core to 2.18/2.19

2025-10-28T11:26:36+00:00

Bumped collections in requirements-core.yml to Ansible 12 major versions, see [1]. [1]: https://github.com/ansible-community/ansible-build-data/blob/main/12/ansible-12.1.0.yaml Depends-On: https://review.opendev.org/c/openstack/kolla/+/960307 Co-authored-by: Doug Szumski doug@stackhpc.com Change-Id: If8a29052d8a43ffc0fef11514adabb5e4ab9d977 Signed-off-by: Michal Nasiadka

aodh: Switch to uWSGI

2025-09-18T05:56:16+00:00

Change-Id: I52ea761bd5375a94339f25ce0e77df6f78f6d9eb Signed-off-by: Michal Nasiadka