aboutsummaryrefslogtreecommitdiff
path: root/etc/kolla
AgeCommit message (Collapse)AuthorFilesLines
2026-08-19Extend the nova_scheduler healthcheck timeout.Michael Still1-0/+15
Nova changed in 2026.1 how long their services take to gracefully shutdown. The default value of [DEFAULT]/graceful_shutdown_timeout has been changed from 60 to 180 seconds for all Nova services. [...] Operators using external system (e.g. k8s, systemd) to manage the Nova services should ensure that their service stop timeouts are set to at least graceful_shutdown_timeout to avoid forcefully killing service before Nova finish its graceful shutdown. Kolla-Ansible failed to update the period of time that ansible waits for Nova services to shut down. This causes both CI failures and failures for deployers when trying to manage some Nova containers. Prompt: Michael asked for assistance debugging why CI jobs were failing with nova-scheduler timeouts. Assisted-By: Claude Opus 5 (1M context, high effort) <noreply@anthropic.com> Co-Authored-By: Claude Opus 5 (1M context, high effort) <noreply@anthropic.com> Closes-Bug: #2162860 Change-Id: If7c5a6d885b19e39cfc305440424f10de3a5ea05 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 4ce86ef1db631c15e6e5e142d2908f73348377d4)
2026-05-11Switch openstack_release to 2026.1Michal Nasiadka1-1/+1
Change-Id: Icf7b5877f6865191f7b80d903608a6f7d5962527 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-27Drop zun and kuryrMichal Nasiadka2-13/+1
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-16Add OpenStack Network Exporter for PrometheusDoug Szumski1-0/+1
This is for gathering OVS/OVN related metrics. See: https://github.com/openstack-k8s-operators/openstack-network-exporter Depends-On: https://review.opendev.org/c/openstack/kolla/+/951971 Change-Id: I5752b3fe6457dcf2f191326a85c548584b5675b1 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-03-30Merge "prometheus: add valkey exporter support"Zuul1-0/+1
2026-03-24ansible-lint: Disable comment checks in etc/kolla/globals.ymlMichal Nasiadka1-0/+1
Restore strictness of check, because we stop using .ansible-lint-ignore file. Change-Id: Ia5e80d96efc27e4deb4402bd89df7e58d9b5ca82 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-16prometheus: add valkey exporter supportPiotr Milewski1-0/+1
Add prometheus-valkey-exporter deployment to enable monitoring of Valkey servers. Depends-On: https://review.opendev.org/c/openstack/kolla/+/976650 Change-Id: I0ff56028f34a0ad21c4c122da3f27cf73d0e0b00 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-14Merge "influxdb/telegraf: Drop deployment"Zuul1-15/+3
2026-03-03ansible-lint: fix yaml[line-length] in globalsBertrand Lanson1-2/+10
Change-Id: Ie0cac0b369149895446e999c5af18e08cc33dcd9 Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
2026-01-23influxdb/telegraf: Drop deploymentMichal Nasiadka1-15/+3
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-15Add support for libvirt swtpm (vTPM) configuration.Franciszek Przewozny1-0/+1
Since both nova-compute and nova-libvirt Kolla images have swtpm packages installed [1], it is possible to configure vTPM for libvirt instances. This patch adds support for such configuration in kolla-ansible. [1] https://bugs.launchpad.net/kolla/+bug/2062572 Closes-Bug: #2106219 Change-Id: Ic7969b05bde258c38ee31fe2821aeb4e9c77a567 Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
2025-11-28ansible-lint: Remove yaml[truthy] from excludesMichal Nasiadka1-130/+130
Normalize quotes and some other easy fixes done by ansible-lint --fix Also drop etc from excludes and ignore comment check in etc/kolla/globals.yml Pinning to ansible-lint<25.11.0 because 25.11.1 is breaking without any messages Change-Id: I7dee3866191cef84cd12b1816cdab0a02380ec7f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-06Replace Redis with ValkeyGrzegorz Koper2-11/+13
This change replaces Redis with Valkey, which is non-existent on Rocky Linux 10 / CentOS Stream 10 due to licensing issues. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: Ifcc6ec6e943c20867d969b0bdb0e4cbac53eea1e Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30Merge "Enable Neutron agent wrappers by default"Zuul1-0/+3
2025-10-30Merge "Support ironic-pxe-filter"Zuul1-0/+1
2025-10-29Enable Neutron agent wrappers by defaultBartosz Bezak1-0/+3
Neutron agent wrappers are now enabled by default. Wrapper containers restart DHCP, L3, and related agents without having to respawn the main service containers, which reduces dataplane disruptions during upgrades and restarts. Operators who need the previous behaviour can set ``neutron_agents_wrappers`` to ``"no"`` in ``/etc/kolla/globals.yml``. Change-Id: I755e3dfcd326f7c1c05c1e9275dda93753db5873 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-28Drop venusMichal Nasiadka2-5/+0
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Change-Id: I78cf7a33bf1025f5c8e4b76ecfeef7d8a3126d61 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24neutron: Remove support for linux bridge mechanism driverTakashi Kajinami1-4/+2
... because it was removed from neutron during 2025.1 cycle[1]. [1] https://review.opendev.org/c/openstack/neutron/+/927216 Depends-On: https://review.opendev.org/c/openstack/kolla/+/962279 Change-Id: I79d896d7dea299641bc5a7f0f2a0735c9719a16d Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-10-24Support ironic-pxe-filterWill Szumski1-0/+1
Closes-Bug: #2094790 Depends-On: https://review.opendev.org/c/openstack/kolla/+/939256 Change-Id: I1b5329d814432604640990b0ecc28906845e29d6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Will Szumski <will@stackhpc.com>
2025-09-25group_vars: Reorganize huge all.yml into smaller filesMichal Nasiadka1-1/+1
This will help us to trigger scenario jobs on changes in given group_vars files. Changes to Zuul config to trigger given scenarios will be posted as a follow-up. Change-Id: I3f17adf655d2d0c1fc2969153dddb0c72b11397a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05Remove ironic-inspector deploymentMichal Nasiadka2-6/+3
Ironic Inspector has been retired and its functionality has been moved to Ironic. Added a change to service-ks-register to make password optional (to able to remove user without a password being passed in). Using the opportunity - increasing CI coverage to include inspection. Change-Id: If178c23249370c7c69744843737e61a6309d6a19 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07Drop VMware supportMichal Nasiadka2-26/+2
Change-Id: I20a669bf7796285df04723a9110f9c74788600e1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-05-08Merge "Add Pure Storage FlashBlade as Manila backend"Zuul1-0/+6
2025-05-08Merge "Add container engine migration scenario"Zuul1-0/+1
2025-05-06Merge "Add key type for letsencrypt certificate"Zuul1-0/+5
2025-05-06Add key type for letsencrypt certificateJay Jahns1-0/+5
Allows the insertion of a key type for letsencrypt, due to the fact that there are other 3rd party solutions (i.e. Vault) that require specific RSA key types. This change allows the ability to use vault instead of the public DNS so we can effectively provide private DNS certificates to an environment. Depends-On: https://review.opendev.org/c/openstack/kolla/+/934681 Closes-Bug: 2087860 Change-Id: I9ba49b1150e656dcb16ee3cf3b79b56e7ef2d3a5
2025-04-28Merge "Add venus-dashboard into horizon"Zuul1-0/+1
2025-04-28Add Pure Storage FlashBlade as Manila backendSimon Dodsley1-0/+6
Follow existing patterns to add support for the Pure Storage FlashBlade NFS Manila driver. Change-Id: I5ed40748439111e5986d6bf44ecb6b9fe7478dc9
2025-04-15Merge "ironic: change enable_ironic_neutron_agent default to no"Zuul1-1/+1
2025-03-27Merge "add lightbits driver support"Zuul1-0/+1
2025-03-21Remove Swift roleMichal Nasiadka2-39/+3
Since Swift is broken and since deprecation nobody did pick up the work to make it working - let's remove swift role and associated integrations/CI scripts. Change-Id: I08e92aaeea644053fd25f80ce1f276a495cebbfc
2025-03-19Add container engine migration scenarioKonstantin Yarovoy1-0/+1
Add "migrate-container-engine" action to kolla-ansible which changes the container engine on which the Openstack is deployed on. For example Docker to Podman and vice versa. Depends-on: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/925083 Signed-off-by: Konstantin Yarovoy <konstantin.yarovoy@tietoevry.com> Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com> Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Change-Id: Icd709cb042d44e063c5da64ab0695b0b6ba6d48b
2025-03-13Fix variable name in globals.yml for enabling the memcached_exporterNorman Ziegner1-1/+1
Change-Id: I3301f881bbcd1d10497e97afc0d65677aa7fc8de Signed-off-by: Norman Ziegner <n.ziegner@hzdr.de>
2025-03-12add lightbits driver supportyuval1-0/+1
Change-Id: I50c5a1443c5d2012388debed20b96274bc69e7e7
2025-02-11ironic: change enable_ironic_neutron_agent default to noMichal Nasiadka1-1/+1
networking-baremetal is only required when bare metal servers are using flat network type. In most cases it's vlan - so let's not impose additional agent (with a separate agent in `openstack network agent list` per Ironic baremetal) on users needlessly. Change-Id: I91570ba0ecf66551cb8e13a80c1d9aacabfc944a
2025-02-05Support reducing scope of delegated fact gatheringMark Goddard1-3/+9
When Kolla Ansible is executed with a '--limit' argument, the scope of an operation is limited to the hosts in the limit. For example: kolla-ansible deploy --limit control Due to the nature of configuring clustered software services, there are cases where we need to know information about other hosts. Most often this is related to their hostname or network addresses. To make this work, Kolla Ansible gathers facts for hosts outside of the limit using delegated fact gathering [1]. By default, Kolla Ansible gathers facts for all hosts. Because delegated facts are gathered serially in batches by the active hosts, this can take a long time when there are not many hosts in the limit. This change makes it possible to reduce the set of hosts eligible for delegated fact gathering by setting 'kolla_ansible_delegate_facts_hosts' to a list of hosts. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_delegation.html#delegating-facts Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/899615 Change-Id: Id0bda00b81b5bc6a9a870e231335c33d9828e95f
2024-12-31Fix l7 haproxy check for opensearch-dashboards and prometheus-serverMichal Nasiadka1-0/+1
After I839f7f1051182fe797394e5436571d64d5c5b5a4 prometheus-opensearch jobs are broken - this patch fixes that. opensearch-dashboards will respond to "OPTIONS /" with 404 and prometheus will respond with 400 Change-Id: I41fb046b85509b56611ffd575f15088834187ba8
2024-12-16Add Let's Encrypt EAB supportPiotr Parczewski1-0/+7
Depends-on: https://review.opendev.org/c/openstack/kolla/+/916617 Change-Id: I57f621e5480db7caa7c939b31cb4080d51d02ff0
2024-11-29Add venus-dashboard into horizonhowardlee1-0/+1
Depends-on: Idbb16f373260735e9650be57042952258a2ee3f9 Change-Id: I72238959940b125348aef0d2509f9a13d98ce73b
2024-11-25Enhance Ceph Integration for Multiple ClustersMichal Arbet1-6/+0
This patch enhances Kolla-Ansible's existing support for multiple Ceph clusters by improving the management of custom users, pools, and cluster names. It aligns the Ceph integration more closely with the official Ceph user management guidelines [1]. Keyrings now follow the format `$cluster.client.$user.keyring`, and configurations are easier to handle when multiple Ceph clusters are in use, especially in environments with multiple availability zones. Previously, workarounds were needed for keyrings and config files, which this patch eliminates, providing a cleaner and more structured configuration approach which follows the Ceph best practices. The default Kolla setup remains unaffected by these changes, ensuring backward compatibility. Updated documentation and examples are included. [1] https://docs.ceph.com/en/latest/rados/operations/user-management/#keyring-management Change-Id: I2593b6df737b384f1a5fba22f69e851c575990b4
2024-10-25Merge "Add backend TLS between MariaDB and ProxySQL"Zuul1-1/+1
2024-10-25cinder: Drop Hitachi HNAS NFS driver supportMichal Nasiadka1-1/+0
It has been removed in I23867aa98f68298beb5db4558c66c1ffd4e7d6f1 Change-Id: I12d287b9f7f1e5ddf754b7f2ca1dee39778e710e
2024-10-25Add backend TLS between MariaDB and ProxySQLMatus Jenca1-1/+1
This commit adds TLS connection between ProxySQL and MariaDB. Frontend TLS ( between services and ProxySQL) will be added in another commit. Parialy Implements: mariadb-ssl-support Change-Id: I154cbb096469c5515c9d8156c2c1c5dd07b95849 Signed-off-by: Matus Jenca <matus.jenca@dnation.cloud>
2024-10-17Switch mariadb's loadbalancer from HAProxy to ProxySQLMichal Arbet1-1/+1
It's been some time since ProxySQL has been with us in Kolla. Let's switch the load balancer for MariaDB connections from HAProxy to ProxySQL. Depends-On: https://review.opendev.org/c/openstack/kolla/+/928956 Change-Id: I42ba4fb83b5bb31058e888f0d39d47c27b844de5
2024-09-18Fixing typo in etc/kolla/globals.ymlGrzegorz Koper1-1/+1
Closes-bug: #2077511 Change-Id: Icd15e8d04771cf50bc704f0c40006a8ac0aeb3ef
2024-09-13Refactor nova upgrade taskRoman Krček1-7/+5
This is a prerequisite for patchset #924651 Nova runs checks before upgrading. A new nova_upgrade_checks container is started for that purpose. This container uses the new nova-api image, but the old config.json file. The image expects CA certificates in a certain location, but due to the old config.json file, they will not be present. This results in the container not trusting keystone SSL certificate and the upgrade fails, since it can't connect. Moving the config section before the checks ensures that the new container has all the certificates it needs to connect to Keystone. Also nova_enable_rolling_upgrade is no longed used, so there was no point in keeping upgrade tasks split. Change-Id: I44bf48fb86f639d7f0acb786392573ebfed7ee97 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com>
2024-09-02Merge "Drop prometheus-msteams support"Zuul1-1/+0
2024-08-27Drop prometheus-msteams supportBartosz Bezak1-1/+0
The prometheus-msteams project is no longer maintained [1]. As a result support for deploying prometheus-msteams via kolla-ansible has been dropped. Users are encouraged to migrate to the native Prometheus Alertmanager integration with Microsoft Teams [2]. [1] https://github.com/prometheus-msteams/prometheus-msteams/issues/343 [2] https://prometheus.io/docs/alerting/latest/configuration/#msteams_config Change-Id: I93d28ef138b4e784465f3a7eaa11101ea5877050
2024-08-23Merge "Revert "Allow setting any_errors_fatal true for gather-facts""Zuul1-8/+0
2024-08-22Merge "Add NVMe-TCP Cinder driver support for Pure Storage"Zuul1-0/+1
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 15:46:36 +0000