aboutsummaryrefslogtreecommitdiff
path: root/tests/run.yml
AgeCommit message (Collapse)AuthorFilesLines
2026-04-27Drop zun and kuryrMichal Nasiadka1-13/+3
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Support multiple Nova Compute Ironic instancesDoug Szumski1-5/+6
Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Bertrand Lanson <bertrand.lanson@protonmail.com> Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-21CI: Fix ovn-upgrade jobsMichal Nasiadka1-1/+2
Since we use the same globals before upgrade and after upgrade, we need to not enable vpnaas before the upgrade, because there's no additional logic for configuring neutron-ovn-vpn-agent in previous release. Rename the role under /roles to fit out naming and ensure no clashes with other role names Change-Id: I3ccef6b1e75224a60036e9bf49500804ee76eba6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-17Implement neutron-ovn-vpn-agentMaximilian Stinsky1-0/+8
This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-15Fix keystone with IDP configured.Taavi Ansper1-0/+15
1. Add CI coverage for keystone_identity_providers under federation scenario. 2. Add fix for federation config in keystone role if keystone_identity_providers is defined. 3. Update Horizon tests with federation example. 4. Use openstack.cloud ansible modules instead of python-openstackclient in register_identity_providers.yml Closes-Bug: #2134455 Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859 Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-04-13CI: Test for leaked passwords in syslogMichal Nasiadka1-0/+4
Change-Id: I611a61dc90aa6e1aa16971e2dd17a959f7587947 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-02-24CI: use Tempest checkout in master jobsBartosz Bezak1-0/+26
Temporarily drop bcrypt from master upper-constraints in CI. Keep tagged Tempest in upgrade jobs and stable branches Change-Id: Iab349d3f5c3e104bf7ce8fefda29a46023766950 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-02-10CI: skip ARA in slurp ansible upgradeBartosz Bezak1-1/+0
ARA is already installed in the same venv, so this step only needs kolla-ansible and ansible-core. That was needed in previous SLURP cycle. ara<1.0.0 currently fails with ModuleNotFoundError: pkg_resources [1] [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 Change-Id: Ia5e6ee943fe8d2a5d0a633aa2058548abf7e2df9 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-11-13CI: Switch IPA images source locationMichal Nasiadka1-1/+1
It should be ironic-python-agent, not builder. It seems Ironic has switched upload locations long time ago. Change-Id: I0189391dede5b325941d32ff54ac7032d1d20e5b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-05CI: Remove Rocky9 Python handlingMichal Nasiadka1-11/+0
Change-Id: I9686da42a5f59fa36811c4500f8c67c0d32b92b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-03CI: ironic - stop using tinyipaBartosz Bezak1-3/+3
Tinyipa was dropped [1]. Increase the Tenks nodes to 3 GiB ram and force `cpu_mode: maximum` so the CentOS Stream IPA no longer errors with "Fatal glibc error: CPU does not support x86-64-v2" [1] https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/962490 Change-Id: If27163c55375338d9347afff0d2b9c19419fe06a Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-28Drop venusMichal Nasiadka1-8/+1
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Change-Id: I78cf7a33bf1025f5c8e4b76ecfeef7d8a3126d61 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-20CI: Switch test-core-openstack.sh to Tempest runMichal Nasiadka1-26/+6
Unfortunately that will lead to dropping DNS integration tests for internal DNS, because neutron-tempest-plugin does not have such tests. Change-Id: Ic1e0a6643e67467a22e91d277a9947c027935f09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-20CI: Rework setup_disks.sh into Ansible roleMichal Nasiadka1-5/+2
Change-Id: Icd8648399a7d0a74419c80d573792397f971ff3c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-15CI: Rework reconfigure.sh to Ansible roleMichal Nasiadka1-9/+2
Change-Id: Ibe21c342ae4c4d79c16d4058f90f5763e94d231c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-13CI: rework upgrade.sh to Ansible roleMichal Nasiadka1-8/+2
Change-Id: I73ca974aa6eef071e53dcbb9b66af2713ac655a8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-10Merge "CI: Rework test-dashboard.sh to Ansible role"Zuul1-18/+4
2025-10-10CI: Rework test-dashboard.sh to Ansible roleMichal Nasiadka1-18/+4
Change-Id: Iaeb6786625c8c0c71c7b4e0ab9450c67bc13ed1c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-10Merge "CI: Rework test/deploy/upgrade-bifrost.sh into Ansible roles"Zuul1-23/+9
2025-10-10CI: Rework test/deploy/upgrade-bifrost.sh into Ansible rolesMichal Nasiadka1-23/+9
Change-Id: I55ea22002ea81085a43dc053f619bb61cd497c69 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09Merge "CI: Rework deploy.sh to an Ansible role"Zuul1-10/+2
2025-10-09CI: Rework deploy.sh to an Ansible roleMichal Nasiadka1-10/+2
Change-Id: Iecb212c38732d38f704f1a7d43036f8bbade496a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-08ovn-db: Add OVN_NB_DB and OVN_SB_DB env variablesMichal Nasiadka1-0/+1
It will make running ovn-nbctl and ovn-sbctl working on all nodes irrespective of their cluster role. Excerpt from ovn-nbctl: --db database The OVSDB database remote to contact. If the OVN_NB_DB en‐ vironment variable is set, its value is used as the de‐ fault. Otherwise, the default is unix:/ovnnb_db.sock, but this default is unlikely to be useful outside of single-ma‐ chine OVN test environments. Closes-Bug: #2116313 Change-Id: I85f7bfd0aaa6f2d426ddb28950acbbca9d385aac Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-22CI: Reorganise scenarios into project templatesMichal Nasiadka1-2/+2
This patch moves into using project templates, which is easier to organise. base_distro and upgrade variables are derived from base.yaml and respective job name - so don't need to be specified in each job anymore. All jobs will now also have an OS release specified, so it's easier to add different OS release jobs (e.g. when backporting new release support to stable branch). Change-Id: I1f08f9b9064d9f7e95b07944db0e7ebac3120c57 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-15CI: Add telemetry scenarioMichal Nasiadka1-0/+7
Removing python-ceilometerclient since it didn't have a release since 2017 Change-Id: I4c20d268c202e1699f44f7d672c159d3ffa895eb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12CI: Template out kolla-build.conf using Ansible roleMichal Nasiadka1-9/+17
Change-Id: I79ec11c013fb1d7381fc152ab92e3d607ae822b9 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-05[CI] Enable virtualenv testing for Debian/UbuntuMichal Arbet1-5/+0
This patch enables testing with a runtime virtualenv on Debian and Ubuntu in CI jobs and without for RHEL derivatives. Summary: - Deployments on Debian/Ubuntu now test virtualenv creation logic. Change-Id: I5d4c5d960441025da1fc1b6f197b03476b1be1a9
2025-06-02[CI] Override MariaDB memory usage for CIMichal Arbet1-0/+3
Our CI environment runs all services (including qemu, libvirt, etc.) on a single node with only 8 GB RAM. The default MariaDB configuration is too memory-heavy for such constrained resources. This change introduces a mariadb-overrides.j2 file that limits key memory-consuming options: - max_connections = 300 (instead of 10000) - innodb_buffer_pool_size = 1024M - tmp_table_size / max_heap_table_size = 32M These limits help avoid OOM kills during testing and prevent unnecessary RAM consumption. This change is CI-specific and does not impact kolla-ansible user deployments. Change-Id: I9a59b2f7c5dafdfeb147eb93d89039e98988049f
2025-05-14[CI] Fix bootstrap testingMichal Arbet1-26/+25
This patch adjusts the CI in such a way that we can finally test the correctness of bootstrap-servers. - It correctly installs the virtualenv at the beginning - It sets ansible_python_interpreter to this virtualenv - It runs bootstrap-servers between upgrades - It moves package installation from the CI playbook to ansible-collections-kolla To summarize: this patch aligns behavior and tests the code within the boundaries it should be tested in - that is, inside a virtualenv. This naturally also tests the correctness of ansible-collection-kolla, which installs packages and other dependencies (now not mixed with OS py interpreter). This is important, especially due to a bug in older versions of Docker and requests, which required running bootstrap-servers. Proof of this is that the rocky9-octavia job is finally working, with no more issues with package cryptography (which was read from OS python environment by ansible). TL;DR: From now on, it runs correctly inside a virtualenv, and the OS interpreter no longer interferes. Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/946983 Change-Id: Ifea75c2e14ffececbe271bee1549e92bded90d48
2025-05-08Merge "Add container engine migration scenario"Zuul1-1/+15
2025-03-28Bump ansible-core versions to 2.17 and 2.18Grzegorz Koper1-1/+6
Bump Ansible collections Change-Id: I1128f44c2d1731407969fdea337f7923efe91ade
2025-03-24setup.cfg: Replace dashes with underscoresBartosz Bezak1-1/+1
setuptools 78.0.1 disallowed deprecated dash-separated and uppercase options in setup.cfg [1] [1] https://github.com/pypa/setuptools/pull/4870 Change-Id: I7c51eb7d62a209c2ff53b0a6f49dcbdcdabd7c6d (cherry picked from commit 0aa7766c1b791d9e311aad7b3cf7d01ff2a64c62)
2025-03-19Add container engine migration scenarioKonstantin Yarovoy1-1/+15
Add "migrate-container-engine" action to kolla-ansible which changes the container engine on which the Openstack is deployed on. For example Docker to Podman and vice versa. Depends-on: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/925083 Signed-off-by: Konstantin Yarovoy <konstantin.yarovoy@tietoevry.com> Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com> Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Change-Id: Icd709cb042d44e063c5da64ab0695b0b6ba6d48b
2025-02-20Merge "CI: Remove unnecessary ansible values (after migration to ansible-core)"Zuul1-3/+0
2025-02-20Merge "Revert "CI: Switch to stable/2024.2 tinyipa due to failures""Zuul1-6/+2
2025-02-18CI: Remove unnecessary ansible values (after migration to ansible-core)Michal Nasiadka1-3/+0
Change-Id: Ibd5095f55c64031d13160107dcbd9fed98a1bd87
2025-01-25Revert "CI: Switch to stable/2024.2 tinyipa due to failures"Pierre Riteau1-6/+2
This reverts commit 3d8d34d486226a370be24e99eff1d1f9fcc622c7. Reason for revert: TinyIPA images from master are working again Change-Id: Ibbce77b18ceb23d0be898fe2d060d7cb0dba2e8f
2025-01-23swift: Deprecate for removal in 2025.2Michal Nasiadka1-43/+2
Disable CI jobs as well - those have been failing for some time and there's no volunteer to fix them. Change-Id: I13dc1822f2b803b5a4dbc99cc63ab05ce6016613
2024-12-11CI: Switch to stable/2024.2 tinyipa due to failuresMichal Nasiadka1-2/+6
Revert once master works again Change-Id: Ie6be273e729f54b8a3fe364abcdd46ff4615cfea
2024-11-29Merge "CI: Add post-upgrade description to post-upgrade tasks"Zuul1-4/+4
2024-11-03Fix Octavia cert generationMichal Nasiadka1-1/+1
I have no clue how it worked previously in CI, but now it's using default path to the inventory - which does not exist. In addition to that, type=int in cliff will default to None, so the check had to be rewritten - because we always did cert expiry check instead of generating them. Change-Id: I84d71558c2666ba2cfa47054f782d25ff0c1f691
2024-10-25Add backend TLS between MariaDB and ProxySQLMatus Jenca1-0/+10
This commit adds TLS connection between ProxySQL and MariaDB. Frontend TLS ( between services and ProxySQL) will be added in another commit. Parialy Implements: mariadb-ssl-support Change-Id: I154cbb096469c5515c9d8156c2c1c5dd07b95849 Signed-off-by: Matus Jenca <matus.jenca@dnation.cloud>
2024-08-16Bump Ansible versions to 2.16 and 2.17Michal Nasiadka1-1/+10
Change-Id: Ic87fb3e4c014d3090869d5631e02982829df6312
2024-07-11Merge "Fix prechecks for interfaces with dashes"Zuul1-1/+1
2024-07-10[CI] Force config drive for ipv6 jobsMichal Arbet1-0/+2
As our CI is ipv6 only and using cirros for tests. Therefore we need to set force_config_drive = true. Change-Id: I07058a4b30d0de1aaf8e82656024c5f6a99b290b
2024-07-09Fix prechecks for interfaces with dashesMichal Nasiadka1-1/+1
Closes-Bug: #2070051 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/923544 Change-Id: I221eb136e77c61aef39e8646b48b927352d1419d
2024-06-13[CI] Remove SLURP related ansible installationBartosz Bezak1-8/+0
Change-Id: I517d9f078a4dbb34178c851c1bc8b51b738882da
2024-04-29Merge "CI: Break OVN cluster before reconfigure"Zuul1-0/+2
2024-04-10CI: Add post-upgrade description to post-upgrade tasksMichal Nasiadka1-4/+4
Change-Id: I4c0c514bb8c05ccc5179300cd8310018e1e3ffa3
2024-03-15Update Skyline configuration to enable SSOUwe Jäger1-0/+7
Change-Id: I5b4a30e605bb143cf342f83f0c811c25046269ef
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 17:20:53 +0000