openstack/kolla-ansible.git/ansible/roles/designate, branch stable/2026.1

Fix for overly restrictive permissions on ca-certificates directory

2026-05-12T05:56:37+00:00

Closes-Bug: #2112280 Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850 Signed-off-by: Rafal Lewandowski Signed-off-by: Michal Nasiadka (cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)

Standardize API health check endpoints

2026-04-12T13:02:28+00:00

Configure dedicated health check endpoints for Load Balancers Standardize health check paths in OpenStack and Grafana Ansible defaults to improve Load Balancer (HAProxy) reliability. The 'httpchk' configuration for the modified roles now uses dedicated health check endpoints (e.g., /healthcheck or /api/health) and enforces an HTTP 200 OK expectation. This ensures faster and more robust failure detection. Additionally, by moving health checks away from generic endpoints (such as OPTIONS /), application logs are now much cleaner. The log files will no longer be flooded every second with HAProxy probe entries like: "OPTIONS / HTTP/1.0" 200 94 0.000954 NOTE: The following services are exceptions to this standardization and still use the root endpoint (`/`) for health checks due to the lack of a dedicated health check middleware in their default API paste configuration: **cyborg_api**, **masakari**, **mistral_api**, **nova_api**, **octavia_api**, **placement**, **tacker**, **venus**, and **watcher**. Updated roles: * aodh * barbican * cinder * cloudkitty * cyborg * designate * etcd * glance * gnocchi * grafana * heat * horizon * influxdb * ironic * keystone * loadbalancer * magnum * manila * masakari * mistral * neutron * nova * nova-cell * octavia * opensearch * placement * rabbitmq * skyline * tacker * trove * venus * watcher * zun Change-Id: Ibbb9fda45a98565ab12e784bbef80be787bd6638 Signed-off-by: Piotr Milewski

ansible-lint: Fix fqcn[actions-core] for designate

2026-03-20T06:43:13+00:00

Change-Id: I2b5d292648ab39330ee52a22338c1a3e04b01e91 Signed-off-by: Michal Nasiadka

ansible-lint: fix yaml[line-length] in designate

2026-01-15T16:57:08+00:00

Change-Id: Ic15ae91cedb0913a7310da540c83f5e0bb52e3e3 Signed-off-by: Axel Jacquet

Switch to pypi version of j2lint and fix linting errors

2025-12-30T16:31:17+00:00

Since ipwrap filter is getting moved another time inside ansible code - let's switch to j2lint that is actively maintained and it's rules will help in readability of jinja2 templates Change-Id: I6762b691b927de31fa1abd83c4c14e87226fe5e2 Signed-off-by: Michal Nasiadka

Add support for Debian Trixie (13)

2025-12-19T14:55:59+00:00

Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka

ansible-lint: fix unnamed-task in designate

2025-12-10T21:19:48+00:00

Change-Id: I7be0b0d12b3be90ced3693f8927bc732f4f514e2 Signed-off-by: Bertrand Lanson

designate: Switch designate-api to uWSGI

2025-12-10T11:11:25+00:00

Change-Id: I3437010b61dd1874f60d60158494f83599a0ea8f Signed-off-by: Michal Nasiadka

Merge "ansible-lint: Fix no-changed-when"

2025-12-04T14:47:56+00:00

ansible-lint: Fix no-changed-when

2025-12-04T10:06:51+00:00

Change-Id: I676f8d3c4cc446d7dd65239c0363e4d362662b0d Signed-off-by: Michal Nasiadka