openstack/kolla-ansible.git/ansible/roles/nova/templates/nova-api.json.j2, branch stable/2026.1

Fix for overly restrictive permissions on ca-certificates directory

2026-05-12T05:56:37+00:00

Closes-Bug: #2112280 Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850 Signed-off-by: Rafal Lewandowski Signed-off-by: Michal Nasiadka (cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)

Drop support for running WSGI under Apache

2026-04-24T11:07:46+00:00

The migration to uWSGI has been successfully completed. All API services now run exclusively under uWSGI. The *_wsgi_provider variables have been removed from all affected roles along with leftover Apache wsgi config templates and fluentd Apache log handling. Rework Apache fluentd input configuration so it doesn't glob out whole /var/log/kolla/*/* and just include required services when enabled. Change-Id: I1475e629d033163a50a5c681c8fe2557a7b10bae Signed-off-by: Michal Nasiadka Signed-off-by: Bartosz Bezak

Add TLS support for MariaDB Connections

2025-07-09T11:41:04+00:00

Since Kolla-Ansible now supports TLS for MariaDB, this patch adds support for services that can use this feature. This feature can be used only when ProxySQL is used as LB. Signed-off-by: Michal Arbet Change-Id: I052c763073c5da29cb8e78004a01a22217dde5da

fixed jinja2 template variable parsing

2025-04-23T20:57:25+00:00

There’s a small issue in command variable: Using {{ apache_binary }} inside another Jinja expression ({{ command }}) which won't be resolved correctly because nested {{ }} doesn't evaluate. Closes-Bug: #2107983 Change-Id: I34d97b16d341c8b09f169559495036e753abda71

nova: Add support for using uWSGI

2025-01-21T06:42:57+00:00

Depends-On: https://review.opendev.org/c/openstack/kolla/+/935974 Change-Id: I084ed924a60ae266c3f51a44c22834402ef7f00e

Don't notify handlers during copy-cert

2024-12-01T21:16:25+00:00

This is a prerequisite for patchset #745164 This fixes unwanted restarts during copying of certificates. By removing conditional statements from role handlers in #745164, copying certificates caused containers to restart, this is unwanted during the genconfig process. However, if we would remove handler notifiers from copying certificates, the container would never restart, since from #745164, containers will restart only if any of the files specified in config.json change. Certificates are now copied to intermediary location inside of the container, from which the script kolla_copy_cacerts will install them in the trust store. Depends-on: https://review.opendev.org/c/openstack/kolla/+/926882 Change-Id: Ib89048c7e0f250182c4bf57d8c8a1b5478e9b4ab Signed-off-by: Roman Krček

Support copying static Vendordata file into Nova API container

2021-11-25T17:24:05+00:00

Nova provides a mechanism to set static vendordata via a file [1]. This patch provides support in Kolla Ansible for using this feature. Arguably this could be part of a generic mechansim for copying arbitrary config, but: - It's not clear if there is anything else that would take advantage of this - One size might not fit all [1] https://docs.openstack.org/nova/latest/configuration/config.html#api.vendordata_jsonfile_path Change-Id: Id420376d96d0c40415c369ae8dd36e845a781820

Add support for encrypting Nova API

2020-08-15T13:22:44+00:00

This patch introduces an optional backend encryption for the Nova API service. When used in conjunction with enabling TLS for service API endpoints, network communcation will be encrypted end to end, from client through HAProxy to the Nova service. Change-Id: I48e1540b973016079d5686b328e82239dcffacfd Partially-Implements: blueprint add-ssl-internal-network

Support policy.yaml file [part 2]

2018-01-29T13:35:59+00:00

- Keystone - Glance - Nova - Cinder This will copy only yaml or json policy file if they exist. Change-Id: I4a9415d82322aed68c9b7650bdf346f58fa49e2a Implements: blueprint support-custom-policy-yaml Co-authored-By: Duong Ha-Quang

Add custom policies in service.json

2016-12-02T16:22:17+00:00

Include custom policy.json files in service-api.json.j2 files Change-Id: Ic55bfc6f61131aa72c3497ce8b2282056bcc7f92 Partially-Implements: blueprint custom-policies