openstack/kolla-ansible.git/ansible/roles/trove, branch stable/2026.1

Fix trove-api queue manager process name

2026-11-04T15:58:50+00:00

Set a unique processname for trove-api to prevent shared-memory file collisions when running under uWSGI. Closes-Bug: #2170958 Change-Id: Iee2c76fd8ba11446688b61a9b109c8bdba0fc820 Signed-off-by: Piotr Milewski (cherry picked from commit 0931b528df42dbd1b9c32feba09ee30716156f32)

Fix for overly restrictive permissions on ca-certificates directory

2026-05-12T05:56:37+00:00

Closes-Bug: #2112280 Change-Id: I52499bdf2b7fc70f91a4c2920749bfef83a79850 Signed-off-by: Rafal Lewandowski Signed-off-by: Michal Nasiadka (cherry picked from commit e302bab31f30296f7d6f41c3d46e19cf5668b97a)

Drop support for running WSGI under Apache

2026-04-24T11:07:46+00:00

The migration to uWSGI has been successfully completed. All API services now run exclusively under uWSGI. The *_wsgi_provider variables have been removed from all affected roles along with leftover Apache wsgi config templates and fluentd Apache log handling. Rework Apache fluentd input configuration so it doesn't glob out whole /var/log/kolla/*/* and just include required services when enabled. Change-Id: I1475e629d033163a50a5c681c8fe2557a7b10bae Signed-off-by: Michal Nasiadka Signed-off-by: Bartosz Bezak

Standardize API health check endpoints

2026-04-12T13:02:28+00:00

Configure dedicated health check endpoints for Load Balancers Standardize health check paths in OpenStack and Grafana Ansible defaults to improve Load Balancer (HAProxy) reliability. The 'httpchk' configuration for the modified roles now uses dedicated health check endpoints (e.g., /healthcheck or /api/health) and enforces an HTTP 200 OK expectation. This ensures faster and more robust failure detection. Additionally, by moving health checks away from generic endpoints (such as OPTIONS /), application logs are now much cleaner. The log files will no longer be flooded every second with HAProxy probe entries like: "OPTIONS / HTTP/1.0" 200 94 0.000954 NOTE: The following services are exceptions to this standardization and still use the root endpoint (`/`) for health checks due to the lack of a dedicated health check middleware in their default API paste configuration: **cyborg_api**, **masakari**, **mistral_api**, **nova_api**, **octavia_api**, **placement**, **tacker**, **venus**, and **watcher**. Updated roles: * aodh * barbican * cinder * cloudkitty * cyborg * designate * etcd * glance * gnocchi * grafana * heat * horizon * influxdb * ironic * keystone * loadbalancer * magnum * manila * masakari * mistral * neutron * nova * nova-cell * octavia * opensearch * placement * rabbitmq * skyline * tacker * trove * venus * watcher * zun Change-Id: Ibbb9fda45a98565ab12e784bbef80be787bd6638 Signed-off-by: Piotr Milewski

trove: Switch to uWSGI

2026-03-26T16:02:07+00:00

Change-Id: I1197ee1bd571a20ce23bee596c5e44d763e2b1f0 Signed-off-by: Michal Nasiadka

ansible-lint: Fix fqcn[actions-core] for trove

2026-03-24T05:36:03+00:00

Change-Id: I058b0bf35540507d1dfdd2e0d1f30c8f8f87b4e7 Signed-off-by: Michal Nasiadka

ansible-lint: fix yaml[line-length] in trove

2026-03-03T08:25:14+00:00

Change-Id: I06e1f324eacf2a43071da2788c5d91c647f8fa12 Signed-off-by: Bertrand Lanson

Merge "Fix trove_api healthcheck with TLS backend"

2025-12-31T19:01:13+00:00

Switch to pypi version of j2lint and fix linting errors

2025-12-30T16:31:17+00:00

Since ipwrap filter is getting moved another time inside ansible code - let's switch to j2lint that is actively maintained and it's rules will help in readability of jinja2 templates Change-Id: I6762b691b927de31fa1abd83c4c14e87226fe5e2 Signed-off-by: Michal Nasiadka

Fix trove_api healthcheck with TLS backend

2025-12-22T04:56:00+00:00

When trove_enable_tls_backend is enabled, the API healthcheck must use https scheme instead of plain http. This change updates the healthcheck command accordingly. Change-Id: I5782a5da30434cf5c5ae0fcb60b3c6f178351fb7 Closes-Bug: #2136977 Signed-off-by: hamidlotfi