aboutsummaryrefslogtreecommitdiff
path: root/tests/templates
AgeCommit message (Collapse)AuthorFilesLines
2026-10-15CI: Emulate Redfish baremetal with TenksJed Preist1-0/+17
Emulate baremetal using Tenks to test the deployment of Redfish baremetal with Ironic. Depends-On: https://review.opendev.org/c/openstack/tenks/+/995697 Change-Id: I2df2287c15d1afaba9d63956bcfa2fc7e71c3530 Signed-off-by: Jed Preist <jed@stackhpc.com> (cherry picked from commit 06da80983a66e88251f08535b43ce984f4729e4f)
2026-09-24CI: Prefer ipv4 over ipv6 and disable docker mirrorMichal Nasiadka1-0/+4
We're getting some ipv6 issues in VexxHost's ca-ymq-1 region, this should at least work around them. Change-Id: I26412e410e9aebb24bc98c943f418f824032be40 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 2f64452fbad843816d74b7584ea81d33d8054a14)
2026-06-17Fix OVN SB relay port calculation for relay counts > 9amir581181-1/+1
The OVN SB relay port was generated using string concatenation between the port prefix and relay group ID. When the relay count exceeded 9, this resulted in invalid port numbers such as 166410. Update the port calculation to use numeric addition instead, ensuring ports remain within the expected and valid range. Closes-Bug: #2131191 Change-Id: I4738339431483c3d38fb322c18888fe61cae1a62 Signed-off-by: amir58118 <sahahmadi96@gmail.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 6c2b9225d52cf2470d7ed85fa5fde833d764bb3c)
2026-04-27Drop zun and kuryrMichal Nasiadka2-30/+0
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Support multiple Nova Compute Ironic instancesDoug Szumski3-1/+44
Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Bertrand Lanson <bertrand.lanson@protonmail.com> Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-21CI: Fix ovn-upgrade jobsMichal Nasiadka1-0/+2
Since we use the same globals before upgrade and after upgrade, we need to not enable vpnaas before the upgrade, because there's no additional logic for configuring neutron-ovn-vpn-agent in previous release. Rename the role under /roles to fit out naming and ensure no clashes with other role names Change-Id: I3ccef6b1e75224a60036e9bf49500804ee76eba6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-20Merge "cinder: Change default destination for cinder-volume/backup containers"Zuul1-0/+17
2026-04-17Merge "Implement neutron-ovn-vpn-agent"Zuul2-0/+4
2026-04-17cinder: Change default destination for cinder-volume/backup containersMichal Nasiadka1-0/+17
Kolla-Ansible defaulted for long time to deploy cinder-volume/backup containers on storage group, which is good for Cinder LVM deployments. Problem is - majority of deployments does not use Cinder LVM backend - they use mainly Ceph (based on OpenStack User Survey) and probably some other proprietary vendors which are API driven. Let's change the default to reflect reality. If a user has cinder lvm enabled - we will deploy it as it was before If a user has both cinder lvm and something else enabled - we will deploy cinder-volume and cinder-backup in both places (cinder group and storage group) If a user doesn't have cinder lvm enabled - we deploy only in the cinder group Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-17Implement neutron-ovn-vpn-agentMaximilian Stinsky2-0/+4
This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-16Merge "Add OpenStack Network Exporter for Prometheus"Zuul2-0/+6
2026-04-16Add OpenStack Network Exporter for PrometheusDoug Szumski2-0/+6
This is for gathering OVS/OVN related metrics. See: https://github.com/openstack-k8s-operators/openstack-network-exporter Depends-On: https://review.opendev.org/c/openstack/kolla/+/951971 Change-Id: I5752b3fe6457dcf2f191326a85c548584b5675b1 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-15Fix keystone with IDP configured.Taavi Ansper5-0/+382
1. Add CI coverage for keystone_identity_providers under federation scenario. 2. Add fix for federation config in keystone role if keystone_identity_providers is defined. 3. Update Horizon tests with federation example. 4. Use openstack.cloud ansible modules instead of python-openstackclient in register_identity_providers.yml Closes-Bug: #2134455 Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859 Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-04-14common: Rename role to kolla_toolboxMichal Nasiadka1-6/+5
Renaming it to kolla_toolbox to comply with Ansible Galaxy role naming standard Change-Id: I5e3cbcd5e8028574eeab148f1e2222378f121a22 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-14CI: Bump wsrep_slave_threads to 8Michal Nasiadka1-0/+1
We sometimes get mariadb healthcheck issues in CI (check-failure phase) where MariaDB has IST transfer failure in the logs that would require a restart of MariaDB node - let's try bumping wsrep_slave_threads to have the IST finish faster and be less prone on network/cpu issues. Change-Id: I0fdc8a42f282dfa8b7b0e7d5e1a297000f294c7d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-09Merge "kolla-logs: break out from common role"Zuul1-0/+10
2026-04-09kolla-logs: break out from common roleMichal Nasiadka1-0/+10
In the process of renaming common role to kolla-toolbox - the only non-toolbox tasks are creation of kolla_logs volume and establishing a link in /var/log/kolla Change-Id: I12a0c0276ca4c915afc98363ab329331dc79f6bc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-30CI: fix prometheus-valkey-exporter inventory groupPiotr Milewski1-0/+3
Fixes CI failure where the valkey exporter group was missing from the generated inventory while valkey was enabled. Change-Id: I1b718b12fe4483a397771426a1c8c1d0f310d22d Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-17Revert "CI: Pin docker to <29"Pierre Riteau1-2/+0
This reverts commit 6828a59bfc79eb988def6d52fc4dc1a56bdd5404. Signed-off-by: Pierre Riteau <pierre@stackhpc.com> Change-Id: I9cc7ce32dff4a11f2e03f01f1a1f93f57c38ee6c
2026-03-14Merge "influxdb/telegraf: Drop deployment"Zuul1-4/+0
2026-03-12Revert "CI: Stop testing heat until Horizon fixes land"Taavi Ansper1-1/+1
This reverts commit 68ec4c294e66fb51f1b6297ab1d29e014c9856d1. Reason for revert: https://review.opendev.org/c/openstack/heat-dashboard/+/979418 was merged. Change-Id: I6940ddb4b4b85203077eac63fb4c682b32a3727f Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-03-10CI: Stop testing heat until Horizon fixes landMichal Nasiadka1-1/+1
See https://review.opendev.org/c/openstack/releases/+/979473 Change-Id: Ia9d26f74b17e9c15fbd59ba3c3ace7c9f895e181 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-02-11CI: use 3 ovn sb db relays for better coverageBartosz Bezak1-0/+1
Change-Id: I5cf2fbd0bb4812b212a6bf05c4d4a2dd992a6cfe Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-27Merge "CI: Add CloudKitty scenario"Zuul1-0/+4
2026-01-27CI: Run at minimum 2 workers due to uWSGI processes settingMichal Nasiadka1-2/+2
Closes-Bug: #2121620 Change-Id: Ic0d7652e80d38df2ce225dca171903c07ec45df3 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-23influxdb/telegraf: Drop deploymentMichal Nasiadka1-4/+0
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-07CI: Add CloudKitty scenarioMichal Nasiadka1-0/+4
Do not enable Prometheus in it yet, because OpenStack Exporter fails on startup due to unavailability of OpenStack APIs - and since we run systemd units in CI with no restart on failure - it fails miserably. Change-Id: I3de44a22fe3a4213cc095431645d37f265143919 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-30Switch to pypi version of j2lint and fix linting errorsMichal Nasiadka3-31/+31
Since ipwrap filter is getting moved another time inside ansible code - let's switch to j2lint that is actively maintained and it's rules will help in readability of jinja2 templates Change-Id: I6762b691b927de31fa1abd83c4c14e87226fe5e2 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-29CI: Add SLURP scenarioBartosz Bezak1-0/+4
Change-Id: I0a0e694c594ef5f479bf0e0d12a6cdd011dab250 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-12-12CI: add rocky10 upgrade jobsBartosz Bezak1-16/+0
Change-Id: I6042cf9ebf1251e1f516201e3bc3068acc613471 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-11-14Merge "CI: Stop using infra cache servers as registry"Zuul1-7/+0
2025-11-14CI: Stop using infra cache servers as registryMichal Nasiadka1-7/+0
It stopped working with docker-ce >= 29.0.0 and has proven to be problematic in the past Change-Id: I9a3d8d3dd268b7bb098b8e87d22b11e4ef0c72e9 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-12CI: Pin docker to <29Michal Nasiadka1-0/+2
Change-Id: I5fb29efc9bff4560528a98824399126eb13873c7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-07Merge "keystone: Add support for deploying httpd for federation"Zuul1-0/+4
2025-11-06keystone: Add support for deploying httpd for federationMichal Nasiadka1-0/+4
Depends-On: https://review.opendev.org/c/openstack/kolla/+/954707 Change-Id: I1f519b3ce8b7f2ceee2eaef88e4afc8ca8fa2f6e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-06Replace Redis with ValkeyGrzegorz Koper2-4/+23
This change replaces Redis with Valkey, which is non-existent on Rocky Linux 10 / CentOS Stream 10 due to licensing issues. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: Ifcc6ec6e943c20867d969b0bdb0e4cbac53eea1e Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-03CI: ironic - stop using tinyipaBartosz Bezak1-4/+4
Tinyipa was dropped [1]. Increase the Tenks nodes to 3 GiB ram and force `cpu_mode: maximum` so the CentOS Stream IPA no longer errors with "Fatal glibc error: CPU does not support x86-64-v2" [1] https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/962490 Change-Id: If27163c55375338d9347afff0d2b9c19419fe06a Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-30Merge "Support ironic-pxe-filter"Zuul1-0/+1
2025-10-28Drop venusMichal Nasiadka2-15/+0
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Change-Id: I78cf7a33bf1025f5c8e4b76ecfeef7d8a3126d61 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24Support ironic-pxe-filterWill Szumski1-0/+1
Closes-Bug: #2094790 Depends-On: https://review.opendev.org/c/openstack/kolla/+/939256 Change-Id: I1b5329d814432604640990b0ecc28906845e29d6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Will Szumski <will@stackhpc.com>
2025-10-03CI: Fine tune proxysql connect and ping timeoutsMichal Nasiadka1-1/+5
Change-Id: Ide74d1a4ca4d0a9a65f8ce4fff2563c4f08708a7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-22CI: Reorganise scenarios into project templatesMichal Nasiadka1-1/+1
This patch moves into using project templates, which is easier to organise. base_distro and upgrade variables are derived from base.yaml and respective job name - so don't need to be specified in each job anymore. All jobs will now also have an OS release specified, so it's easier to add different OS release jobs (e.g. when backporting new release support to stable branch). Change-Id: I1f08f9b9064d9f7e95b07944db0e7ebac3120c57 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-15Merge "CI: Add telemetry scenario"Zuul1-0/+6
2025-09-15CI: Add telemetry scenarioMichal Nasiadka1-0/+6
Removing python-ceilometerclient since it didn't have a release since 2017 Change-Id: I4c20d268c202e1699f44f7d672c159d3ffa895eb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05Remove ironic-inspector deploymentMichal Nasiadka2-0/+11
Ironic Inspector has been retired and its functionality has been moved to Ironic. Added a change to service-ks-register to make password optional (to able to remove user without a password being passed in). Using the opportunity - increasing CI coverage to include inspection. Change-Id: If178c23249370c7c69744843737e61a6309d6a19 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-18neutron: Switch to uWSGIMichal Nasiadka1-13/+22
Also split services into: - api - rpc-worker (only for ML2/OVS) - periodic-worker - ovn-maintenance-worker (only for ML2/OVN) Remove neutron-tls-proxy since it's not needed anymore Change-Id: Iac99be59139eeb232dd3b00ec90fae0a4ea7547d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-10Add support for CentOS 10 StreamMichal Nasiadka1-2/+1
Signed-Off-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I998fdeb51f3f01a878c159f477004b8edf4e0aa9
2025-06-05[CI] Enable virtualenv testing for Debian/UbuntuMichal Arbet1-1/+4
This patch enables testing with a runtime virtualenv on Debian and Ubuntu in CI jobs and without for RHEL derivatives. Summary: - Deployments on Debian/Ubuntu now test virtualenv creation logic. Change-Id: I5d4c5d960441025da1fc1b6f197b03476b1be1a9
2025-06-02[CI] Override MariaDB memory usage for CIMichal Arbet1-0/+5
Our CI environment runs all services (including qemu, libvirt, etc.) on a single node with only 8 GB RAM. The default MariaDB configuration is too memory-heavy for such constrained resources. This change introduces a mariadb-overrides.j2 file that limits key memory-consuming options: - max_connections = 300 (instead of 10000) - innodb_buffer_pool_size = 1024M - tmp_table_size / max_heap_table_size = 32M These limits help avoid OOM kills during testing and prevent unnecessary RAM consumption. This change is CI-specific and does not impact kolla-ansible user deployments. Change-Id: I9a59b2f7c5dafdfeb147eb93d89039e98988049f
2025-05-14[CI] Fix bootstrap testingMichal Arbet1-1/+2
This patch adjusts the CI in such a way that we can finally test the correctness of bootstrap-servers. - It correctly installs the virtualenv at the beginning - It sets ansible_python_interpreter to this virtualenv - It runs bootstrap-servers between upgrades - It moves package installation from the CI playbook to ansible-collections-kolla To summarize: this patch aligns behavior and tests the code within the boundaries it should be tested in - that is, inside a virtualenv. This naturally also tests the correctness of ansible-collection-kolla, which installs packages and other dependencies (now not mixed with OS py interpreter). This is important, especially due to a bug in older versions of Docker and requests, which required running bootstrap-servers. Proof of this is that the rocky9-octavia job is finally working, with no more issues with package cryptography (which was read from OS python environment by ansible). TL;DR: From now on, it runs correctly inside a virtualenv, and the OS interpreter no longer interferes. Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/946983 Change-Id: Ifea75c2e14ffececbe271bee1549e92bded90d48
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 17:21:06 +0000