openstack/kolla-ansible.git/tools, branch stable/2025.1

[stable-only] Split CA of ProxySQL internal TLS and backend TLS

2026-10-16T08:49:06+00:00

ProxySQL frontend TLS (database internal TLS) and backend TLS (database backend TLS) expects different CA if users use chain of certificates (e.g. use of intermediate certificates). Frontend TLS expects the intermediate certificate that signed the leaf certificate as a CA file, whereas backend TLS expects root CA. To fix, users are now required to create a file named ``proxysql-ca.pem`` at ``kolla_certificates_dir``, which is a copy of the intermediate certificate. If your system is not affected by this bug, you're not required to create the new file ``proxysql-ca.pem``. Stable/2025.1 changes: - use root_dir (renamed to certificates_root_dir in 2026.1) - add proxysql_ca_file mock to tools/validate-all-file.py (replaced by ansible-lint rules in 2026.1) Closes-bug: #2150449 Change-Id: I88911badb0d0801f79317df6681c571cc1c8cfee Signed-off-by: Seunghun Lee Signed-off-by: Bartosz Bezak (cherry picked from commit 6c16ce6442af52a22357da69e41968f99c69d300)

Allow to override Cirros image URL for air-gapped environments

2025-06-25T15:08:47+00:00

Change-Id: I917b63ac93a7370e4e064a3fcce70820521387d4 Signed-off-by: Maksim Malchuk (cherry picked from commit b9c5fb3616bbe3094b295be976e819df91fa692e)

Merge "Remove Swift role"

2025-03-24T14:13:46+00:00

Remove Swift role

2025-03-21T16:30:59+00:00

Since Swift is broken and since deprecation nobody did pick up the work to make it working - let's remove swift role and associated integrations/CI scripts. Change-Id: I08e92aaeea644053fd25f80ce1f276a495cebbfc

ovn: Add support for OVN SB Relay

2025-03-20T13:50:53+00:00

Add support for deploying OVN SB relays [1]. This is enabled by default to improve large scale scenarios. Default mechanism deploys one relay group per 50 ovn-controller hosts and uses random but idempotent method to choose a relay for a given host. neutron-server and Octavia will connect directly to SB cluster, not via the relays. kolla-ansible check subcommand does not support ,,iterated'' containers for now - but will be introduced in a subsequent patch. [1]: https://docs.ovn.org/en/latest/tutorials/ovn-ovsdb-relay.html Co-Authored-By: Krzysztof Tomaszewski Depends-On: https://review.opendev.org/c/openstack/kolla/+/928898 Change-Id: Id7d6973668d8b2b194913b533f8cb756c6708536

Rewrite kolla-ansible CLI to python

2024-10-28T08:48:23+00:00

Moving the CLI to python allows for easier maintenance and larger feature-set. This patch introduces a few breaking changes! The changes stem the nature of the cliff package. - the order of parameters must be kolla-ansible - mariadb_backup and mariadb_recovery now are mariadb-backup and mariadb-recovery Closes-bug: #1589020 Signed-off-by: Roman Krček Change-Id: I9749b320d4f5eeec601a055b597dfa7d8fb97ce2

Do not remove inventory file if placed in /etc/kolla

2024-09-16T08:15:45+00:00

This patch fix issue when inventory file is deleted by kolla-ansible -i /etc/kolla/inventory destroy call. Now, inventories are available in tools/cleanup-host so we can ignore their removal. Closes-Bug: #2052706 Change-Id: If89e94356de515b40ca4e8c023979cd498146303

Merge "Add command to upgrade to a target version of RMQ"

2024-08-22T21:15:44+00:00

Bump Ansible versions to 2.16 and 2.17

2024-08-16T18:52:07+00:00

Change-Id: Ic87fb3e4c014d3090869d5631e02982829df6312

Add command to upgrade to a target version of RMQ

2024-08-12T14:05:42+00:00

Required before a SLURP upgrade Change-Id: I09a45d26a6075554b204e007f64122f23de5f53c