aboutsummaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2025-12-29docs: add CI coverage matrixBartosz Bezak2-0/+42
Change-Id: I7e67d029b0771d7b878dbf09cd058a6c03b33288 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-12-23Merge "Add RabbitMQ management interface SSL"Zuul1-1/+0
2025-12-23Merge "Add support for libvirt swtpm (vTPM) configuration."Zuul1-0/+10
2025-12-19Add support for Debian Trixie (13)Michal Nasiadka1-1/+1
Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-18Merge "glance: Switch to use uWSGI"Zuul1-4/+0
2025-12-15Add support for libvirt swtpm (vTPM) configuration.Franciszek Przewozny1-0/+10
Since both nova-compute and nova-libvirt Kolla images have swtpm packages installed [1], it is possible to configure vTPM for libvirt instances. This patch adds support for such configuration in kolla-ansible. [1] https://bugs.launchpad.net/kolla/+bug/2062572 Closes-Bug: #2106219 Change-Id: Ic7969b05bde258c38ee31fe2821aeb4e9c77a567 Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
2025-12-12glance: Switch to use uWSGIMichal Nasiadka1-4/+0
Glance is removing their warning around running in WSGI [1], so let's switch. [1]: https://review.opendev.org/c/openstack/glance/+/963294 Change-Id: Iae2c5ef5251d6695daf3262ed208c4bd914d7fb3 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-11Merge "Add DNS server config for Ironic DHCP"Zuul1-0/+10
2025-12-06Fix incorrect mariadb-recovery task name in error messageVudn2-2/+2
Closes-Bug: #2133983 Change-Id: Ib79cd622123d9b6727ab1d674f680b8e2d52ed68 Signed-off-by: Vudn <dangngocvu4@gmail.com>
2025-11-28docs: when reno is requiredMichal Nasiadka1-3/+6
In Zed PTG we decided to limit the amount of release notes this change adds the criteria when reno is required to the docs [1]: https://etherpad.opendev.org/p/kolla-zed-ptg#L149 Change-Id: I4f153a619eb57a75ebdb1aba4b71e422b30d74fe Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-18Drop requirement for blueprints.Michael Still1-3/+7
Update contributor guide per conversation with Michał Nasiadka (mnasiadka) on IRC. Change-Id: I9bd8c46b084ff0ffce6c3abce972508fd9d59d69 Signed-off-by: Michael Still <mikal@stillhq.com>
2025-11-17Add DNS server config for Ironic DHCPThomas Sell1-0/+10
Closes-Bug: #2061131 Change-Id: I061cdcf10e22beabe658687b3e67f8071f20df1a Signed-off-by: Thomas Sell <thomas.sell@bih-charite.de>
2025-11-06Replace Redis with ValkeyGrzegorz Koper2-4/+4
This change replaces Redis with Valkey, which is non-existent on Rocky Linux 10 / CentOS Stream 10 due to licensing issues. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: Ifcc6ec6e943c20867d969b0bdb0e4cbac53eea1e Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30Merge "Enable Neutron agent wrappers by default"Zuul1-1/+1
2025-10-30Merge "Support ironic-pxe-filter"Zuul1-0/+20
2025-10-30Merge "Run neutron-ovn-metadata-agent haproxy processes in separate containers"Zuul1-2/+3
2025-10-29Enable Neutron agent wrappers by defaultBartosz Bezak1-1/+1
Neutron agent wrappers are now enabled by default. Wrapper containers restart DHCP, L3, and related agents without having to respawn the main service containers, which reduces dataplane disruptions during upgrades and restarts. Operators who need the previous behaviour can set ``neutron_agents_wrappers`` to ``"no"`` in ``/etc/kolla/globals.yml``. Change-Id: I755e3dfcd326f7c1c05c1e9275dda93753db5873 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-29Run neutron-ovn-metadata-agent haproxy processes in separate containersMaximilian Stinsky1-2/+3
Follow up on Iaa1e687152db8351bc0e9b10e66f412860ac13a5 This patch implements the same experimental feature of running processes in seperated containers to the neutron-ovn-metadata-agent Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Depends-On: https://review.opendev.org/c/openstack/kolla/+/960726 Change-Id: If42aa11735bee963afc33d2e06541e1d9aab0515 Signed-off-by: Maximilian Stinsky <maximilian.stinsky-damke@wiit.cloud> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-28Bump ansible-core to 2.18/2.19Michal Nasiadka1-4/+4
Bumped collections in requirements-core.yml to Ansible 12 major versions, see [1]. [1]: https://github.com/ansible-community/ansible-build-data/blob/main/12/ansible-12.1.0.yaml Depends-On: https://review.opendev.org/c/openstack/kolla/+/960307 Co-authored-by: Doug Szumski doug@stackhpc.com Change-Id: If8a29052d8a43ffc0fef11514adabb5e4ab9d977 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24Support ironic-pxe-filterWill Szumski1-0/+20
Closes-Bug: #2094790 Depends-On: https://review.opendev.org/c/openstack/kolla/+/939256 Change-Id: I1b5329d814432604640990b0ecc28906845e29d6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Will Szumski <will@stackhpc.com>
2025-10-17Add RabbitMQ management interface SSLFranciszek Przewozny1-1/+0
This change implements RabbitMQ management interface SSL configuration when ``rabbitmq_enable_tls`` is enabled. Change-Id: Iaedad0e13f81b546af3a8e0c1e6ae7ca9da994a4 Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
2025-10-10Merge "Customize the authentication error timeout page in modOIDC"Zuul1-0/+14
2025-10-09Customize the authentication error timeout page in modOIDCRafael Weingärtner1-0/+14
There is a situation that happens when a user triggers an authentication in OpenStack that uses Identity federation, which leads users to a blank page with an error message that might not be that clear to users. If the user takes too long to enter his/her credentials in the login page of the IdP, the user sees a page saying that the authentication took too much and that the user must try it again. However, if the user tries again, she/he is already logged in to the IdP, and then the user gets access direct to Horizon. This whole process can be a bit confusing for users, and they saw an error page after the login, which leads them to think that there was an error in the authentication, but then when he/she tries again, everything just works. Therefore, to handle such cases we propose Kolla-ansble to use a custom error page that has an automatic redirect if the error happens. The timeout is managed by "OIDCStateTimeout" variable. The default (which is what we have in place now) is 300 seconds (5 minutes): https://github.com/zmartzone/mod_auth_openidc/blob/d13ee0e4bd2cef94c4d2b55829310175288e0bdf/src/mod_auth_openidc.c#L651). I would not recommend the increase of this timeout though. I would rather decrease this value; 5 minutes to such an operation is already too much. This variable can be overridden via wsgi-keystone.conf file. To customize the error page we have the following variable "OIDCHTMLErrorTemplate". The template is processed in the following line: https://github.com/zmartzone/mod_auth_openidc/blob/f2b8315cd48faba04320e9a06fc52b57f0989dcb/src/util.c#L1619. As we can see, there is no default page. The default HTML is hardcoded in C++, and the template requires two "%s" placeholders that will receive the title of the error message and the full description of the error. Change-Id: Iebda3ca7a5f9cef7e5e0930fc4f70764774d6ed5 Signed-off-by: Rafael Weingärtner <rafael@apache.org>
2025-10-08ovn-db: Add OVN_NB_DB and OVN_SB_DB env variablesMichal Nasiadka1-0/+7
It will make running ovn-nbctl and ovn-sbctl working on all nodes irrespective of their cluster role. Excerpt from ovn-nbctl: --db database The OVSDB database remote to contact. If the OVN_NB_DB en‐ vironment variable is set, its value is used as the de‐ fault. Otherwise, the default is unix:/ovnnb_db.sock, but this default is unlikely to be useful outside of single-ma‐ chine OVN test environments. Closes-Bug: #2116313 Change-Id: I85f7bfd0aaa6f2d426ddb28950acbbca9d385aac Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-03Merge "docs: add validate-config to cli tips & tricks"Zuul1-0/+4
2025-10-03docs: add validate-config to cli tips & tricksNorman Ziegner1-0/+4
Change-Id: Iac15261a0916d14094afdd9b3cb5cba88f505d0f Signed-off-by: Norman Ziegner <n.ziegner@hzdr.de>
2025-10-02Merge "Move to for Rocky Linux 10"Zuul5-10/+10
2025-10-02Merge "Split out cron to a separate role"Zuul1-3/+3
2025-10-02Move to for Rocky Linux 10Michal Nasiadka5-10/+10
CephAdm, Octavia, OVN and NFV jobs are not added here, because these rely on Valkey/Redis available. Ironic jobs are not added, because ipxe.efi is not packaged in EL10 and needs a followup patch. Let's Encrypt jobs are also not added, due to ssl certificate validation errors. Depends-On: https://review.opendev.org/c/openstack/kolla/+/956554 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: I51823808c4e4ac08ae8f080aacf6a3759589571d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02docs: change docs after fluentd move to its own roleBartosz Bezak1-2/+2
follow up to [1] [1] https://review.opendev.org/c/openstack/kolla-ansible/+/954619 Change-Id: I7d23b9b57deb6d421a8953fe78774bd0155db625 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-02Split out cron to a separate roleMichal Nasiadka1-3/+3
We've split out fluentd to move it earlier in the deployment workflow - cron and kolla-toolbox are currently the only components in common role. Splitting it out will help with limiting kolla-ansible to reconfigure only services managed by cron role. Change-Id: Ia74c7d1e78e9d756a83c8adc7d9d8d9adb371751 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-25group_vars: Reorganize huge all.yml into smaller filesMichal Nasiadka5-14/+15
This will help us to trigger scenario jobs on changes in given group_vars files. Changes to Zuul config to trigger given scenarios will be posted as a follow-up. Change-Id: I3f17adf655d2d0c1fc2969153dddb0c72b11397a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-17Merge "Add documentation for Kolla Ansible CLI command completion"Zuul1-0/+30
2025-09-15Remove reference to EXTRA_OPTS in documentationMatt Anson1-3/+0
Passing the contents of EXTRA_OPTS into ansible-playbook is no longer supported, so remove reference to this functionality from the documentation. Closes-Bug: #2123837 Change-Id: Ibaf8af1de66f76772a617b05467ba611d0bbd20d Signed-off-by: Matt Anson <matta@stackhpc.com>
2025-09-05Remove ironic-inspector deploymentMichal Nasiadka1-6/+6
Ironic Inspector has been retired and its functionality has been moved to Ironic. Added a change to service-ks-register to make password optional (to able to remove user without a password being passed in). Using the opportunity - increasing CI coverage to include inspection. Change-Id: If178c23249370c7c69744843737e61a6309d6a19 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-21Merge "Replace outdated core team list by Gerrit links"Zuul1-42/+6
2025-08-21Replace outdated core team list by Gerrit linksPierre Riteau1-42/+6
Copied from the same file in Kolla documentation. Change-Id: I4a2beae7613c18cd19e16d4d04f42685a94b4f4f Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-19Merge "Drop RabbitMQ SLURP docs"Zuul1-52/+0
2025-08-19Drop RabbitMQ SLURP docsMatt Crees1-52/+0
We don't need to handle extra version upgrades from Caracal -> Epoxy, so these docs can be dropped. Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> Change-Id: I122821b6aaf11cbf3d8695340d23c168b3373b58
2025-08-19update development docs after cli move to pythonBartosz Bezak1-7/+5
Follow up to [1]. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/923110 Change-Id: I8a4f6c6bee01e0e12da2c15836135bc890c72cde Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Merge "neutron: Switch to uWSGI"Zuul1-4/+0
2025-08-18neutron: Switch to uWSGIMichal Nasiadka1-4/+0
Also split services into: - api - rpc-worker (only for ML2/OVS) - periodic-worker - ovn-maintenance-worker (only for ML2/OVN) Remove neutron-tls-proxy since it's not needed anymore Change-Id: Iac99be59139eeb232dd3b00ec90fae0a4ea7547d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-13Set default external Let's Encrypt cert serverSeunghun Lee1-13/+20
Currently, unless users set either external or internal cert server by themselves, enabling Let's Encrypt with ``enable_letsencrypt`` does nothing. This change makes the external certificate get managed by Let's Encrypt by default when Let's Encrypt is enabled. The server address is default Let's Encrypt ACME server [1] which was the former default before change [2]. [1] https://acme-v02.api.letsencrypt.org/directory [2] https://review.opendev.org/c/openstack/kolla-ansible/+/925971 Closes-bug: #2120451 Change-Id: I10e800aede5966e030ed8e661e2eb45b126ff678 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-08-07Drop VMware supportMichal Nasiadka5-516/+1
Change-Id: I20a669bf7796285df04723a9110f9c74788600e1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-03Fix docs rendering errors.Michael Still19-122/+124
I was reading https://docs.openstack.org's version of the kolla-ansible advanced configuration guide and noticed some RST rendering errors. This patch corrects those errors so that the page renders correctly. Change-Id: I330678d8971d286e67f115eace1cb606d30433b6
2025-05-16Add documentation for Kolla Ansible CLI command completionMarek Buch1-0/+30
This change adds instructions to the documentation on how to enable shell command completion for the kolla-ansible CLI. It covers all necessary steps. Change-Id: I5cacf29d2fb9c0b473cf858f1c050bc70890cc42 Signed-off-by: Marek Buch <marek.buch@tietoevry.com>
2025-05-09Merge "doc: remove keystone admin port cleanup"20.0.0.0rc120.0.0Zuul1-17/+0
2025-05-08Merge "Add Pure Storage FlashBlade as Manila backend"Zuul2-0/+287
2025-05-08Merge "Add container engine migration scenario"Zuul1-0/+38
2025-05-05Merge "Run ML2/OVS agents processes in separate containers"Zuul1-0/+15
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 17:51:25 +0000