openstack/kolla-ansible.git/ansible/roles/etcd/defaults/main.yml, branch stable/2026.1

Fix ETCD health check hardcoded to HTTP

2026-10-12T12:34:30+00:00

The ETCD health check assumes HTTP regardless of the configured protocol, causing incorrect health status when ETCD is configured to use TLS/HTTPS. Closes-Bug: #2167236 Change-Id: I55810de8f6b2c3e318cb3dbb6431e9dd09c1a4a8 Signed-off-by: Warren Jeffs (cherry picked from commit ba60dba12ef0ac5d5f04795982d320e468c9b524)

Standardize API health check endpoints

2026-04-12T13:02:28+00:00

Configure dedicated health check endpoints for Load Balancers Standardize health check paths in OpenStack and Grafana Ansible defaults to improve Load Balancer (HAProxy) reliability. The 'httpchk' configuration for the modified roles now uses dedicated health check endpoints (e.g., /healthcheck or /api/health) and enforces an HTTP 200 OK expectation. This ensures faster and more robust failure detection. Additionally, by moving health checks away from generic endpoints (such as OPTIONS /), application logs are now much cleaner. The log files will no longer be flooded every second with HAProxy probe entries like: "OPTIONS / HTTP/1.0" 200 94 0.000954 NOTE: The following services are exceptions to this standardization and still use the root endpoint (`/`) for health checks due to the lack of a dedicated health check middleware in their default API paste configuration: **cyborg_api**, **masakari**, **mistral_api**, **nova_api**, **octavia_api**, **placement**, **tacker**, **venus**, and **watcher**. Updated roles: * aodh * barbican * cinder * cloudkitty * cyborg * designate * etcd * glance * gnocchi * grafana * heat * horizon * influxdb * ironic * keystone * loadbalancer * magnum * manila * masakari * mistral * neutron * nova * nova-cell * octavia * opensearch * placement * rabbitmq * skyline * tacker * trove * venus * watcher * zun Change-Id: Ibbb9fda45a98565ab12e784bbef80be787bd6638 Signed-off-by: Piotr Milewski

ansible-lint: fix yaml[line-length] in etcd

2026-03-03T08:25:13+00:00

Change-Id: I5ce8f791c2dc13128de33dd49fb3eb7b3f8d5c12 Signed-off-by: Bertrand Lanson

Add support for Debian Trixie (13)

2025-12-19T14:55:59+00:00

Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka

Fix etcd backend certificates not being templated

2025-08-18T11:19:44+00:00

etcd backend certificates won't be templated due to `etcd_enable_tls_backend` not being defined, which results in the `kolla_copy_backend_tls_files` variable evaluating to false. Change-Id: I04d3b93aa15fb18fb8beefd49c0ba8a0c0dfca08 Signed-off-by: Jake Hutchinson

Introduce docker_image_url variable

2025-06-04T09:32:08+00:00

Stop repeating the same code (actually 158 times). Change-Id: I2fd04e6ed72f3702eb41fe5cf172f47a33e93bbd

Don't notify handlers during copy-cert

2024-12-01T21:16:25+00:00

This is a prerequisite for patchset #745164 This fixes unwanted restarts during copying of certificates. By removing conditional statements from role handlers in #745164, copying certificates caused containers to restart, this is unwanted during the genconfig process. However, if we would remove handler notifiers from copying certificates, the container would never restart, since from #745164, containers will restart only if any of the files specified in config.json change. Certificates are now copied to intermediary location inside of the container, from which the script kolla_copy_cacerts will install them in the trust store. Depends-on: https://review.opendev.org/c/openstack/kolla/+/926882 Change-Id: Ib89048c7e0f250182c4bf57d8c8a1b5478e9b4ab Signed-off-by: Roman Krček

Add support for docker_image_name_prefix

2024-07-19T06:10:45+00:00

The Kolla project supports building images with user-defined prefixes. However, Kolla-ansible is unable to use those images for installation. This patch fixes that issue. Closes-Bug: #2073541 Change-Id: Ia8140b289aa76fcd584e0e72686e3786215c5a99

etcd: update to v3.4

2023-11-29T17:43:33+00:00

* Updates etcd to v3.4 * Updated the config to use v3.4's logging mechanism * Deprecated etcd CA parameters aren't used, so we are not affected by their removal. * Note that we are not currently guarding against skip-version updates for etcd. Notable non-voting jobs exercising some of this: * kolla-ansible-ubuntu-upgrade-cephadm (cinder->tooz->etcd3gw->etcd) * kolla-ansible-ubuntu-zun (see https://review.opendev.org/c/openstack/openstack-ansible/+/883194 ) Depends-On: https://review.opendev.org/c/openstack/kolla/+/890464 Change-Id: I086e7bbc7db64421445731a533265e7056fbdb43

etcd: deduplicate environments for containers

2023-11-29T17:43:22+00:00

* etcd service containers usually have a set of environment parameters required to boot the container. * The short-lived etcd bootstrap containers pass extra ETCD_INITIAL_* environment variables, but still need to pass the ones that the service containers use. * This uses ansible's `combine` filter to cut down on the duplication. * This is intended to be just a straightforward refactor. Change-Id: I04e95f92a8f365553afd618d58b99de595d48312