openstack/kolla-ansible.git/ansible/roles/proxysql-config, branch stable/2026.1

ansible-lint: Fix fqcn[actions-core] for proxysql-config

2026-03-23T12:57:22+00:00

Change-Id: I4fc8a4f6881601b9bbc36d73beb1bbc92164edca Signed-off-by: Michal Nasiadka

ansible-lint: fix yaml[line-length] in role

2026-03-13T16:40:13+00:00

role: proxysql-config Change-Id: I68d86c224be9073caccafa729cf13b3d41690685 Signed-off-by: Bertrand Lanson

ansible-lint: Rework validate-all-file into custom rules

2026-01-09T08:34:19+00:00

Test roles/ subdirectories as well (used by Zuul) In addition to that container_exec_become will also fail when "docker exec" or "podman exec" will be used instead of "{{ kolla_container_engine }} exec" Generated-By: Claude Change-Id: I75c1e48c36bb0284e2927b1cb354ce9ec47967d7 Signed-off-by: Michal Nasiadka

Switch to pypi version of j2lint and fix linting errors

2025-12-30T16:31:17+00:00

Since ipwrap filter is getting moved another time inside ansible code - let's switch to j2lint that is actively maintained and it's rules will help in readability of jinja2 templates Change-Id: I6762b691b927de31fa1abd83c4c14e87226fe5e2 Signed-off-by: Michal Nasiadka

Fix routing of queries without schema to service's DB shard

2025-06-05T04:28:18+00:00

Some queries (e.g. SET AUTOCOMMIT, ROLLBACK) may be executed before schema is selected, causing them to be routed to hostgroup 0, which does not exist if user using different `mariadb_default_shard_id`. This change sets default_hostgroup (shard_id) for users to ensure correct routing even when schema is not specified. Also adjusts nova-cell user generation logic to include shard assignment, so queries from nova_ users are properly routed, even if schema is not used directly. This avoids silent misrouting and improves reliability in multi-shard deployments. Note: These errors are not visible in CI because mariadb_default_shard_group_id = 0 and ProxySQL routes to hostgroup 0 by default when no routing rule matches. Depends-On: https://review.opendev.org/c/openstack/kolla/+/951741 Closes-Bug: #2112339 Change-Id: I4f3380a83fa992c3413e82a4692c26a07b25d57f

Remove notifiers from loadbalancer config

2025-04-29T08:59:17+00:00

No handlers should be triggered during config. Container will be restarted automatically when check-containers is ran for the loadbalancer containers if config has changed. Change-Id: I05b587364ad174d8944c95e54e6e6853d34ec83c Signed-off-by: Roman Krček

Fix proxysql-config's TLS DB configuration

2024-12-01T21:17:25+00:00

This patch removes `proxysql_project_database_internal_tls_enable` variable and also 'use_ssl: 1' option from ProxySQL's user configuration. The reason for this removal is that when 'use_ssl: 1' option is enabled on the ProxySQL frontend side, ProxySQL does not allow non-TLS connections. This, of course, breaks upgrades or reconfigurations when an operator enables TLS, as it blocks all non-TLS service connections at the moment of switching. Simply said, we do not need to, nor can we, strictly enforce user connections over TLS because it disrupts reconfiguration and upgrades. Instead, it is sufficient to reconfigure the service to connect over TLS - which is already implemented. It also corrects the `database_enable_tls_internal` variable, ensuring it is enabled only when `kolla_enable_tls_internal` is enabled, rather than `kolla_enable_tls_backend`. Closes-Bug: #2086466 Change-Id: I6c56b144a81f800e062d6670733ca606733c9e1b

Add frontend TLS ability to ProxySQL

2024-10-25T19:42:50+00:00

This patch ads an ability to receive TLS connections to ProxySQL. Certificates and variable lookups are added in order for TLS to be enabled by _database_internal_tls_enable. Note that in order for this to work, mysql connection strings need to have TLS enabled, which can be added in separate per-service patches Change-Id: I2c06ce5e138f52259c1725dae37f25c1b00d1e6b

Fix issues introduced by ansible-lint 6.6.0

2022-09-21T14:34:54+00:00

mainly jinja spacing and jinja[invalid] related Change-Id: I6f52f2b0c1ef76de626657d79486d31e0f47f384

Add proxysql-config role and wrap it in loadbalancer-config role

2022-08-09T10:16:16+00:00

This patch ads proxysql-config role which is used for generating users and rules configuration. Change-Id: I1fcb0e8040ea55f8f6b8384a56479eabdaf61c33