openstack/kolla-ansible.git/ansible/roles/prometheus-node-exporters, branch stable/2026.1Unnamed repository; edit this file 'description' to name the repository.
https://git.platform-os.org/openstack/kolla-ansible.git/atom?h=stable%2F2026.12026-05-12T05:56:37+00:00Fix for overly restrictive permissions on ca-certificates directory2026-05-12T05:56:37+00:00Rafal Lewandowskirafal@stackhpc.com2025-11-30T17:30:21+00:00urn:sha1:adec4ae2ec454f543183fcaf9dcb168e684ed927
Closes-Bug: #2112280
Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850
Signed-off-by: Rafal Lewandowski <rafal@stackhpc.com>
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
(cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)
ansible-lint: Fix fqcn[actions-core] for prometheus2026-03-23T12:57:16+00:00Michal Nasiadkamnasiadka@gmail.com2026-03-23T09:47:43+00:00urn:sha1:20acd03681cbab33b7d7fa5a9aa65dca02da2cf5
Change-Id: I05782b4ad692995183af699f8b0d01e1cd2ad317
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Bind cAdvisor exporter to listen only internally2026-03-18T07:10:10+00:00Stig Telferstig@stackhpc.com2026-03-17T13:05:46+00:00urn:sha1:735f126d1188deb56616ec84d3f92fef14edf661
cAdvisor was listening on all interfaces, which would potentially
expose information about running containers on public networks.
Change the cAdvisor startup invocation to bind only to the internal
API interface.
Closes-Bug: #2144659
Change-Id: Ica0d5e727467988fab3d4eb532caa7226556e714
Signed-off-by: Stig Telfer <stig@stackhpc.com>
ansible-lint: fix yaml[line-length] in roles2026-01-15T16:57:26+00:00Bertrand Lansonbertrand.lanson@infomaniak.com2025-12-13T15:54:53+00:00urn:sha1:42c391cde8129d3d7bca89f217ad6b171491ac53
role: prometheus-node-exporters
Change-Id: I80f5a13796b53f8d2cca332e870354cbb1af9bf3
Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
Add support for Debian Trixie (13)2025-12-19T14:55:59+00:00Michal Nasiadkamnasiadka@gmail.com2025-12-05T14:26:02+00:00urn:sha1:536f4ae1a21ee715106dd7435c42935eb06df7ca
Remove /etc/timezone bind mount since Debian does not provide
that file anymore.
Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793
Change-Id: If1a289068093843184f0d7b495815db006f2d563
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
ansible-lint: fix unnamed-task in roles2025-12-10T21:19:49+00:00Bertrand Lansonbertrand.lanson@protonmail.com2025-12-10T20:43:16+00:00urn:sha1:d1c16bf9752098813a7acb6d12ef67f2fe7bdf2c
role: prometheus-node-exporters
Change-Id: I1294c23f6ec0cf1e24f07b0d989f6001c1a9c5e1
Signed-off-by: Bertrand Lanson <bertrand.lanson@protonmail.com>
Performance: Split out prometheus node exporter and cadvisor2025-09-09T13:18:59+00:00Mark Goddardmark@stackhpc.com2020-07-08T18:22:29+00:00urn:sha1:dba99ea974ccfa59c8701a64731ae3b72a226122
Executing tasks has a performance penalty, even if they are skipped [1].
The prometheus role deploys a few types of services:
* core prometheus server and alert manager services
* centralised service-based exporters (mysql, memcached, OpenStack,
etc.)
* distributed node-based exporters (node exporter, cadvisor) that are
deployed to all hosts
There is a significant overhead in executing the tasks associated with
the core services and centralised exporters against all hosts, even
though they are skipped.
This change extracts the node exporter and cadvisor deployment into a
new prometheus-node-exporters role, to avoid executing the prometheus
role against all hosts. The new role is lightweight, and has a small
number of tasks, which should significantly improve performance.
[1]
https://github.com/stackhpc/ansible-scaling/blob/master/doc/skip.md
Partially-Implements: blueprint performance-improvements
Change-Id: I6913756ff85b7cc626d50ce16d55085d3683db17
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>