openstack/kolla-ansible.git/ansible/roles/opensearch, branch stable/2026.1

Ensure OpenSearch waits for recovery during upgrade

2026-07-30T08:13:24+00:00

Change-Id: I8825f41a1753eb323e0fdf1bf38a679670e01ba7 Signed-off-by: Alex Welsh (cherry picked from commit 37194fcab7883b8626f2eab5a4f6a19246b85ec9)

Revert "Ensure OpenSearch waits for recovery during upgrade"

2026-07-29T07:51:21+00:00

This reverts commit 79f6f2a049bad1d3cb51ba50981a01f63503a329. Reason for revert: post-config job leaks OpenSearch secret to logs (see failed prometheus-opensearch jobs) Change-Id: I63432e19c42ac9f3eebebadb474882ccda3780ed Signed-off-by: fprzewozn

Ensure OpenSearch waits for recovery during upgrade

2026-07-27T14:22:38+00:00

There's actually two fixes here The first waits until the OpenSearch state is healthy before moving on to Dashboards. Otherwise, OpenSearch Dashboards does its internal `.kibana` index migration before OpenSearch has fully recovered. This creates a corrupted `.kibana_1` index, making Dashboard enter an infinite polling loop and fail to start. The second adds retries to the "Create OpenSearch Dashboards Index Pattern" task. Dashboards seems to take a while to start up post-upgrade, I think again, it's doing some internal migrations for the latest version. Without first checking the API is ready, it consistently fails to be ready, and throws 503s by the time we try to create index patterns. Change-Id: Ic06ccc6b7ec22fa1b0cfa2a144878672d314e93e Closes-Bug: #2161333 Signed-off-by: Alex Welsh (cherry picked from commit 79f6f2a049bad1d3cb51ba50981a01f63503a329)

Fix for overly restrictive permissions on ca-certificates directory

2026-05-12T05:56:37+00:00

Closes-Bug: #2112280 Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850 Signed-off-by: Rafal Lewandowski Signed-off-by: Michal Nasiadka (cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)

opensearch: automate index pattern creation in dashboards

2026-04-27T16:42:02+00:00

Previously, operators had to manually create the default index pattern after the first login to OpenSearch Dashboards. This commit automates the creation of the default index pattern using the OpenSearch Dashboards Saved Objects API during the post-config phase. The pattern is dynamically named based on the opensearch_log_index_prefix variable (defaulting to "flog-*") and automatically sets "@timestamp" as the time field. Documentation has been updated to reflect that the first-login manual setup is no longer required for the default log indices. Change-Id: I8d49a270ace187b3b13103452e93d305505f6cbb Signed-off-by: Piotr Milewski

ansible-lint: Fix fqcn[actions]

2026-03-24T05:36:36+00:00

Change-Id: I3f9e5aada1059d882d2013e0721c10708f43d1cf Signed-off-by: Michal Nasiadka

ansible-lint: Fix fqcn[actions-core] for opensearch

2026-03-23T12:56:49+00:00

Change-Id: Id50822f572164e2b7c2576b3f53c125fd1678f60 Signed-off-by: Michal Nasiadka

ansible-lint: fix yaml[line-length] in opensearch

2026-01-15T16:57:22+00:00

Change-Id: I0c143c7f6e05da417c8a2e68a4557fc144e6ee14 Signed-off-by: Bertrand Lanson

Add support for Debian Trixie (13)

2025-12-19T14:55:59+00:00

Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka

ansible-lint: fix unnamed-task in opensearch

2025-12-10T21:19:49+00:00

Change-Id: I3f24d64d4c28e22d463a4c6028b021c59379d61c Signed-off-by: Bertrand Lanson