aboutsummaryrefslogtreecommitdiff
path: root/ansible/inventory
AgeCommit message (Collapse)AuthorFilesLines
2026-04-27Drop zun and kuryrMichal Nasiadka2-32/+0
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-20Merge "cinder: Change default destination for cinder-volume/backup containers"Zuul2-1/+30
2026-04-17Merge "Implement neutron-ovn-vpn-agent"Zuul2-0/+6
2026-04-17cinder: Change default destination for cinder-volume/backup containersMichal Nasiadka2-1/+30
Kolla-Ansible defaulted for long time to deploy cinder-volume/backup containers on storage group, which is good for Cinder LVM deployments. Problem is - majority of deployments does not use Cinder LVM backend - they use mainly Ceph (based on OpenStack User Survey) and probably some other proprietary vendors which are API driven. Let's change the default to reflect reality. If a user has cinder lvm enabled - we will deploy it as it was before If a user has both cinder lvm and something else enabled - we will deploy cinder-volume and cinder-backup in both places (cinder group and storage group) If a user doesn't have cinder lvm enabled - we deploy only in the cinder group Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-17Implement neutron-ovn-vpn-agentMaximilian Stinsky2-0/+6
This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-16Merge "Add OpenStack Network Exporter for Prometheus"Zuul2-0/+8
2026-04-16Add OpenStack Network Exporter for PrometheusDoug Szumski2-0/+8
This is for gathering OVS/OVN related metrics. See: https://github.com/openstack-k8s-operators/openstack-network-exporter Depends-On: https://review.opendev.org/c/openstack/kolla/+/951971 Change-Id: I5752b3fe6457dcf2f191326a85c548584b5675b1 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-14common: Rename role to kolla_toolboxMichal Nasiadka2-9/+5
Renaming it to kolla_toolbox to comply with Ansible Galaxy role naming standard Change-Id: I5e3cbcd5e8028574eeab148f1e2222378f121a22 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-09Merge "kolla-logs: break out from common role"Zuul2-5/+9
2026-04-09kolla-logs: break out from common roleMichal Nasiadka2-5/+9
In the process of renaming common role to kolla-toolbox - the only non-toolbox tasks are creation of kolla_logs volume and establishing a link in /var/log/kolla Change-Id: I12a0c0276ca4c915afc98363ab329331dc79f6bc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-16prometheus: add valkey exporter supportPiotr Milewski2-0/+6
Add prometheus-valkey-exporter deployment to enable monitoring of Valkey servers. Depends-On: https://review.opendev.org/c/openstack/kolla/+/976650 Change-Id: I0ff56028f34a0ad21c4c122da3f27cf73d0e0b00 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-14Merge "influxdb/telegraf: Drop deployment"Zuul2-20/+0
2026-02-06valkey: fix upgrade failure when redis inventory group is absentPiotr Milewski2-0/+8
During upgrades from 2025.1 to 2025.2 the Valkey role still expects the legacy ``redis`` inventory group to be present for migration purposes. Closes-Bug: #2140980 Change-Id: I29400817f580ee22e6d45f1c0e730397f3323c44 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-01-23influxdb/telegraf: Drop deploymentMichal Nasiadka2-20/+0
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-19Merge "Fix inventory file for cyborg control services"Zuul2-2/+0
2025-11-06Replace Redis with ValkeyGrzegorz Koper2-2/+2
This change replaces Redis with Valkey, which is non-existent on Rocky Linux 10 / CentOS Stream 10 due to licensing issues. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: Ifcc6ec6e943c20867d969b0bdb0e4cbac53eea1e Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-28Drop venusMichal Nasiadka2-18/+0
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Change-Id: I78cf7a33bf1025f5c8e4b76ecfeef7d8a3126d61 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05Remove ironic-inspector deploymentMichal Nasiadka2-2/+2
Ironic Inspector has been retired and its functionality has been moved to Ironic. Added a change to service-ks-register to make password optional (to able to remove user without a password being passed in). Using the opportunity - increasing CI coverage to include inspection. Change-Id: If178c23249370c7c69744843737e61a6309d6a19 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-18neutron: Switch to uWSGIMichal Nasiadka2-28/+47
Also split services into: - api - rpc-worker (only for ML2/OVS) - periodic-worker - ovn-maintenance-worker (only for ML2/OVN) Remove neutron-tls-proxy since it's not needed anymore Change-Id: Iac99be59139eeb232dd3b00ec90fae0a4ea7547d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-21Add network group to tls-backendMichal Nasiadka2-0/+2
In case of a deployment utilising network nodes the backend TLS configuration is missing on network nodes. Closes-Bug: #2117084 Change-Id: I58219d2a3edbb83ef52d8d123b188429642dc1a3 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-03-24Merge "Remove Swift role"Zuul2-32/+0
2025-03-21Remove Swift roleMichal Nasiadka2-32/+0
Since Swift is broken and since deprecation nobody did pick up the work to make it working - let's remove swift role and associated integrations/CI scripts. Change-Id: I08e92aaeea644053fd25f80ce1f276a495cebbfc
2025-03-20ovn: Add support for OVN SB RelayMichal Nasiadka2-0/+6
Add support for deploying OVN SB relays [1]. This is enabled by default to improve large scale scenarios. Default mechanism deploys one relay group per 50 ovn-controller hosts and uses random but idempotent method to choose a relay for a given host. neutron-server and Octavia will connect directly to SB cluster, not via the relays. kolla-ansible check subcommand does not support ,,iterated'' containers for now - but will be introduced in a subsequent patch. [1]: https://docs.ovn.org/en/latest/tutorials/ovn-ovsdb-relay.html Co-Authored-By: Krzysztof Tomaszewski <ktomaszewski@cloudferro.com> Depends-On: https://review.opendev.org/c/openstack/kolla/+/928898 Change-Id: Id7d6973668d8b2b194913b533f8cb756c6708536
2024-12-18nova: Split out metadata to a separate containerMichal Nasiadka2-0/+6
This is needed for introducing standalone uWSGI Change-Id: I7c7213eed10dc408238071a43fd89d5e66665e7b
2024-11-08Fix inventory file for cyborg control servicesBertrand Lanson2-2/+0
Fix a scheduling issue in the multinode and all-in-one inventory files, that would cause cyborg api and conductor service to also be scheduled on compute nodes rather then exclusively staying on the control plane. Closes-Bug: #2087552 Change-Id: I69d9a44db037fce42cb5a25b5688313eece15484
2024-08-27Drop prometheus-msteams supportBartosz Bezak2-6/+0
The prometheus-msteams project is no longer maintained [1]. As a result support for deploying prometheus-msteams via kolla-ansible has been dropped. Users are encouraged to migrate to the native Prometheus Alertmanager integration with Microsoft Teams [2]. [1] https://github.com/prometheus-msteams/prometheus-msteams/issues/343 [2] https://prometheus.io/docs/alerting/latest/configuration/#msteams_config Change-Id: I93d28ef138b4e784465f3a7eaa11101ea5877050
2024-04-25Drop VitrageMichal Nasiadka2-38/+0
It was deprecated in Antelope cycle. Change-Id: I499e69ec6db63e4067e49376e2a1f3e01e48fe62
2024-04-25Drop MuranoMichal Nasiadka2-26/+0
It's inactive and hasn't produced a 2024.1 release [1]. In addition to that, there's a CVE that hasn't really been patched [2]. Also drop outward_rabbitmq that was used only with Murano. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects [2]: https://lists.openstack.org/archives/list/openstack-announce@lists.openstack.org/thread/4FYM6GSIM5WZSJQIG4TT5Q3UBKQIHLWX/ Change-Id: I691205730b0e10a42ce61f3340cc39ee51bd1010
2024-04-24Drop SenlinMichal Nasiadka2-32/+0
It's inactive and hasn't produced a 2024.1 release [1]. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects Change-Id: I217b3633f07e5b2c657e20b19aaa4fbb46535a97
2024-04-24Drop SaharaMichal Nasiadka2-20/+0
It's inactive and hasn't produced a 2024.1 release [1]. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects Change-Id: I888963751b6e1ed080588297c2889e700431516c
2024-04-24Drop SolumMichal Nasiadka2-44/+0
It's inactive and hasn't produced a 2024.1 release [1]. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects Change-Id: Ic988295bc5b8acb19df008fe0d52a3bcc6de2135
2024-04-24Drop FreezerMichal Nasiadka2-20/+0
It's inactive and hasn't produced a 2024.1 release [1]. There are some efforts to restore Freezer, but let's remove it for now. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects Change-Id: Ie42012af9e5c64bca23a6e6826bfc4651fd194bd
2024-01-05Enable HAProxy Prometheus metrics endpointDawud2-6/+0
HAProxy exposes a Prometheus metrics endpoint, it just needs to be enabled. Enable this and remove configuration for prometheus-haproxy-exporter. Remaining prometheus-haproxy-exporter containers will automatically be removed. Change-Id: If6e75691d2a996b06a9b95cb0aae772db54389fb Co-Authored-By: Matt Anson <matta@stackhpc.com>
2023-11-07Add support for LetsEncrypt-managed certsJames Kirsch2-0/+18
Add support for automatic provisioning and renewal of HTTPS certificates via LetsEncrypt. Spec is available at: https://etherpad.opendev.org/p/kolla-ansible-letsencrypt-https Depends-On: https://review.opendev.org/c/openstack/kolla/+/887347 Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Implements: blueprint letsencrypt-https Change-Id: I35317ea0343f0db74ddc0e587862e95408e9e106
2023-10-02Remove remnants of Monasca and depsMichal Nasiadka2-108/+0
Following Monasca initial removal in [1] [1]: I6fc7842bcda18e417a3fd21c11e28979a470f1cf Change-Id: I94d6f102e8da3882f37f3007639b917c49f907a9
2023-05-19neutron: Add neutron-ovn-agent supportMichal Nasiadka2-0/+7
Depends-On: https://review.opendev.org/c/openstack/neutron/+/878535 Change-Id: I05d8b29b59a7de76da488f68775547a8f0f11d0f
2023-02-07Merge "remove elasticsearch remnants in antelope cycle"Zuul2-8/+0
2023-02-07remove elasticsearch remnants in antelope cycleBartosz Bezak2-8/+0
Change-Id: I115b491eca413437926f5bcaf53336151f9a7c0b
2023-01-31Add skyline serviceyangshaoxue2-0/+20
Support to deploy skyline by kolla-ansible. Implements: blueprint skyline Depends-On: https://review.opendev.org/c/openstack/kolla/+/826948 Change-Id: Ice5621491a432ba32138abd6f62d1f815cc219e0
2023-01-05Drop skydiveMichal Nasiadka2-22/+0
Change-Id: I8855bd60c2fd77f33fb55d4123131a94327bd166
2022-12-01Replace ElasticSearch and Kibana with OpenSearchMichal Nasiadka2-18/+20
This change replaces ElasticSearch with OpenSearch, and Kibana with OpenSearch Dashboards. It migrates the data from ElasticSearch to OpenSearch upon upgrade. No TLS support is in this patch (will be a followup). A replacement for ElasticSearch Curator will be added as a followup. Depends-On: https://review.opendev.org/c/openstack/kolla/+/830373 Co-authored-by: Doug Szumski <doug@stackhpc.com> Co-authored-by: Kyle Dean <kyle@stackhpc.com> Change-Id: Iab10ce7ea5d5f21a40b1f99b28e3290b7e9ce895
2022-08-15Merge "Remove the deprecated storage_interface var"Zuul1-1/+1
2022-08-10Add support for deploying prometheus-msteamsPierre Riteau2-0/+6
This can be used to forward Prometheus Alertmanager notifications to Microsoft Teams. Change-Id: I563f2438b3cb0895606b029b5269ce2e50c413e3 Depends-On: https://review.opendev.org/c/openstack/kolla/+/812678
2022-07-27Remove the deprecated storage_interface varRadosław Piliszek1-1/+1
Change-Id: I63673761959a560e97c848f092f086ceba25839a
2022-06-20ovn: Fixup inventories after 842364Michal Nasiadka1-0/+1
Change-Id: I98c6ec5148d2e4051a6aa2f9f91e129a87e14c73
2022-05-18ovn: add network group to neutron-ovn-metadata-agentMichal Nasiadka1-0/+1
According to OVN SRIOV docs [1] - neutron-ovn-metadata-agent needs to be deployed on network nodes (OVN chassis). [1]: https://docs.openstack.org/neutron/latest/admin/ovn/sriov.html Change-Id: I111df79f08eb76a735f33c6edf03b5a302fb6cc3
2022-04-11Merge "drop qdrouterd support"Zuul2-6/+0
2022-04-08drop qdrouterd supportMarcin Juszkiewicz2-6/+0
Change-Id: I562fa187094f212003d0b17d20675f771cf082e6
2022-04-06Ironic: rename containersRadosław Piliszek2-4/+4
Change-Id: I8e4096d7136d0ce9e54f1af0bb9ba110487fb35b
2022-04-01Move venus group to the correct inventory sectionPierre Riteau2-6/+6
The main venus group should not be in the group providing additional control of service placement. Change-Id: I569254077d5ef9814c99bbcc7fafd7be3bacad67
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 16:00:39 +0000