aboutsummaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)AuthorFilesLines
3 daysMerge "CI: Emulate Redfish baremetal with Tenks" into stable/2026.1Zuul2-41/+69
2026-10-15CI: Emulate Redfish baremetal with TenksJed Preist2-41/+69
Emulate baremetal using Tenks to test the deployment of Redfish baremetal with Ironic. Depends-On: https://review.opendev.org/c/openstack/tenks/+/995697 Change-Id: I2df2287c15d1afaba9d63956bcfa2fc7e71c3530 Signed-off-by: Jed Preist <jed@stackhpc.com> (cherry picked from commit 06da80983a66e88251f08535b43ce984f4729e4f)
2026-10-15Merge "CI: Don't fail on Neutron wrapper managed containers" into stable/2026.1Zuul1-7/+23
2026-10-05Merge "Fix trailing comma bug in DockerWorker.generate_tls()" into stable/2026.1Zuul1-0/+60
2026-09-30CI: Don't fail on Neutron wrapper managed containersMichal Nasiadka1-7/+23
Filter out the ones in state removing and also by name Change-Id: I0ea5522b1a3a3dbb2071ff93f6800f898858f41b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 983379e1e4bc9c0db9965315e0cdfd76aa2921bd)
2026-09-24CI: Prefer ipv4 over ipv6 and disable docker mirrorMichal Nasiadka2-0/+15
We're getting some ipv6 issues in VexxHost's ca-ymq-1 region, this should at least work around them. Change-Id: I26412e410e9aebb24bc98c943f418f824032be40 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 2f64452fbad843816d74b7584ea81d33d8054a14)
2026-09-10Fix trailing comma bug in DockerWorker.generate_tls()Tikhon Masalov1-0/+60
In generate_tls(), tls_cert and tls_key were assigned with trailing commas, which caused them to become single-element tuples (None,) instead of None. This made the if tls_cert: check always true, leading to TypeError when check_file() received a tuple instead of a string path. Remove the trailing commas so tls_cert and tls_key are plain values. Remove TestTLS.setUp(_get_host_timezone) for stable branches: _get_host_timezone does not exist in kolla_container_worker.py on older branches, causing AttributeError in TestTLS setUp. Closes-Bug: #2166845 Change-Id: I06b8876838ee2ec3c20c9a98448fc9e5588f32cd Signed-off-by: Tikhon Masalov <t.masalov@maxima-int.com> (cherry picked from commit 2f8958235bc16a89a33c0711f1dfcb7bca87a1a9)
2026-09-03Fix compare_labels when image doesn't existAlex Welsh2-0/+12
check_image() from kolla_docker_worker returns None when the image doesn't exist locally. This means that when compare_labels tries to read a value from it, it will error out. This chain happens when comparing an image that doesn't exist locally. In the past we didn't hit this because checks ran sequentially and it would exit before hitting this. A recent change [1] means that now all checks run always. This patch fixes the issue in two ways. First, it makes the docker worker return an empty dict from check_image when it doesn't exist. Second, compare_labels now truthy-checks the output before proceeding, and returns straight away if it's False. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/978162 Change-Id: I3c33ac3a474f80bca100005f61c1c0bfedc46170 Signed-off-by: Alex Welsh <alex@stackhpc.com> Closes-Bug: #2166024 (cherry picked from commit ffc50e8d33ade7a0d58ef83b79ed296a28b49608)
2026-08-24merge_configs: Add lstrip_blocksMichal Nasiadka2-0/+73
Closes-Bug: #2164718 Change-Id: If5b7f30d2467b61c3578d09992faf446b5d25f4e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0f4da209da6fa39739ffc7b7fb1a69dc967734b7)
2026-08-04Fix Docker cpuset dimension comparisonLoan Harrouin1-0/+54
When enabling cpuset_cpus or cpuset_mems on existing Docker containers, Docker may report the current value as an empty string when no cpuset constraint is configured. These dimensions are cpuset-list strings, not numeric resource values. Compare them as strings in the Docker worker instead of passing them through the numeric dimension comparison logic. Closes-Bug: 2143874 Change-Id: I1b8cd72846b28f556c8f9a0ba114a8af9221e85a Signed-off-by: Loan Harrouin <loan.harrouin@gmail.com> (cherry picked from commit 8304bb3884237bf5aee1c60715d097e88561d56d)
2026-07-28CI: Install kernel-modules-extra for running kernelMichal Nasiadka1-1/+1
Currently we're installing kernel-modules-extra for newest kernel, which is not always the case for OpenDev images. Change-Id: Ic1a196d690b0a92aaf3f1ddc6cd466894bf1cbc5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0484f7b66d1541710bc820e8af88d6d9117c5f63)
2026-07-19CI: Install kernel-modules-extra on RockyMichal Nasiadka1-0/+7
Started failing on Rocky 10 with: Jul 18 09:28:34 localhost iptables.init[857]: Warning: Extension state is not supported, missing kernel module? Change-Id: Ib7df1eaa8a3f75fe8040fd2d646cf7d02e0322cc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 7dc2b7f819e30c046eeb5104a9fbe81a24c97402)
2026-07-01UnicodeDecodeError in PodmanWorker.compare_configEttore Simone1-0/+18
During container config comparison, podman's Docker-compat exec API inconsistently demultiplexes the 8-byte frame headers from the output stream depending on podman version, leaving binary bytes in raw_output. This will raise an "UnicodeDecodeError: 'utf-8' codec can't decode byte 0x?? in position 167: invalid start byte" Closes-Bug: 2153943 Change-Id: Ida1c017f50b9a24b88f8962d304eb015fa357211 Signed-off-by: Ettore Simone <ettore.simone@gmail.com> (cherry picked from commit c99f521356012d5bc42ab3c41a994b67657e86f0)
2026-06-22fix kolla_toolbox running with wrong HOME envBertrand Lanson1-0/+60
There is a possibility that the ansible-runner in kolla_toolbox is executed with the wrong environment variables if run in a specific way. The cause is not super clear, but the solution is to simply force it to use the correct HOME value. Closes-Bug: #2153544 Change-Id: Ibad84e358f21564c570161f7e4f21b117398df3b Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com> (cherry picked from commit 2104f74a2616821c2bd848411ebfce266a3edd69)
2026-06-17Fix OVN SB relay port calculation for relay counts > 9amir581181-1/+1
The OVN SB relay port was generated using string concatenation between the port prefix and relay group ID. When the relay count exceeded 9, this resulted in invalid port numbers such as 166410. Update the port calculation to use numeric addition instead, ensuring ports remain within the expected and valid range. Closes-Bug: #2131191 Change-Id: I4738339431483c3d38fb322c18888fe61cae1a62 Signed-off-by: amir58118 <sahahmadi96@gmail.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 6c2b9225d52cf2470d7ed85fa5fde833d764bb3c)
2026-04-27Drop zun and kuryrMichal Nasiadka6-216/+4
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-25Merge "Support multiple Nova Compute Ironic instances"Zuul4-6/+50
2026-04-24Support multiple Nova Compute Ironic instancesDoug Szumski4-6/+50
Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Bertrand Lanson <bertrand.lanson@protonmail.com> Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-24Drop support for running WSGI under ApacheMichal Nasiadka1-0/+4
The migration to uWSGI has been successfully completed. All API services now run exclusively under uWSGI. The *_wsgi_provider variables have been removed from all affected roles along with leftover Apache wsgi config templates and fluentd Apache log handling. Rework Apache fluentd input configuration so it doesn't glob out whole /var/log/kolla/*/* and just include required services when enabled. Change-Id: I1475e629d033163a50a5c681c8fe2557a7b10bae Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-04-21CI: Fix ovn-upgrade jobsMichal Nasiadka2-1/+4
Since we use the same globals before upgrade and after upgrade, we need to not enable vpnaas before the upgrade, because there's no additional logic for configuring neutron-ovn-vpn-agent in previous release. Rename the role under /roles to fit out naming and ensure no clashes with other role names Change-Id: I3ccef6b1e75224a60036e9bf49500804ee76eba6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-20Merge "cinder: Change default destination for cinder-volume/backup containers"Zuul1-0/+17
2026-04-17Merge "Implement neutron-ovn-vpn-agent"Zuul3-0/+12
2026-04-17cinder: Change default destination for cinder-volume/backup containersMichal Nasiadka1-0/+17
Kolla-Ansible defaulted for long time to deploy cinder-volume/backup containers on storage group, which is good for Cinder LVM deployments. Problem is - majority of deployments does not use Cinder LVM backend - they use mainly Ceph (based on OpenStack User Survey) and probably some other proprietary vendors which are API driven. Let's change the default to reflect reality. If a user has cinder lvm enabled - we will deploy it as it was before If a user has both cinder lvm and something else enabled - we will deploy cinder-volume and cinder-backup in both places (cinder group and storage group) If a user doesn't have cinder lvm enabled - we deploy only in the cinder group Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-17Implement neutron-ovn-vpn-agentMaximilian Stinsky3-0/+12
This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-16Merge "Add OpenStack Network Exporter for Prometheus"Zuul2-0/+6
2026-04-16Add OpenStack Network Exporter for PrometheusDoug Szumski2-0/+6
This is for gathering OVS/OVN related metrics. See: https://github.com/openstack-k8s-operators/openstack-network-exporter Depends-On: https://review.opendev.org/c/openstack/kolla/+/951971 Change-Id: I5752b3fe6457dcf2f191326a85c548584b5675b1 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-15Fix keystone with IDP configured.Taavi Ansper7-0/+448
1. Add CI coverage for keystone_identity_providers under federation scenario. 2. Add fix for federation config in keystone role if keystone_identity_providers is defined. 3. Update Horizon tests with federation example. 4. Use openstack.cloud ansible modules instead of python-openstackclient in register_identity_providers.yml Closes-Bug: #2134455 Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859 Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-04-14common: Rename role to kolla_toolboxMichal Nasiadka1-6/+5
Renaming it to kolla_toolbox to comply with Ansible Galaxy role naming standard Change-Id: I5e3cbcd5e8028574eeab148f1e2222378f121a22 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-14Merge "CI: Bump wsrep_slave_threads to 8"Zuul1-0/+1
2026-04-14Merge "CI: Test for leaked passwords in syslog"Zuul1-0/+4
2026-04-14CI: Bump wsrep_slave_threads to 8Michal Nasiadka1-0/+1
We sometimes get mariadb healthcheck issues in CI (check-failure phase) where MariaDB has IST transfer failure in the logs that would require a restart of MariaDB node - let's try bumping wsrep_slave_threads to have the IST finish faster and be less prone on network/cpu issues. Change-Id: I0fdc8a42f282dfa8b7b0e7d5e1a297000f294c7d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-13CI: Test for leaked passwords in syslogMichal Nasiadka1-0/+4
Change-Id: I611a61dc90aa6e1aa16971e2dd17a959f7587947 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-09Merge "kolla-logs: break out from common role"Zuul1-0/+10
2026-04-09kolla-logs: break out from common roleMichal Nasiadka1-0/+10
In the process of renaming common role to kolla-toolbox - the only non-toolbox tasks are creation of kolla_logs volume and establishing a link in /var/log/kolla Change-Id: I12a0c0276ca4c915afc98363ab329331dc79f6bc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-30CI: fix prometheus-valkey-exporter inventory groupPiotr Milewski1-0/+3
Fixes CI failure where the valkey exporter group was missing from the generated inventory while valkey was enabled. Change-Id: I1b718b12fe4483a397771426a1c8c1d0f310d22d Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-25kolla_toolbox: fix secrets leakingMichal Nasiadka1-188/+482
Replace ansible CLI invocation with ansible-runner, passing module args via put_archive tar stream instead of exec argv. Override _log_invocation to add no_log values to relevant variables on module invocation (without that we leak secrets on each module invocation - check for "Invoked with" syslog entries) runner_on_skipped is required for --check support Requires ansible-runner in the kolla_toolbox image (Depends-On). Depends-On: https://review.opendev.org/c/openstack/kolla/+/980788 Closes-Bug: #2131197 Closes-Bug: #2138622 Assisted-By: Claude Sonnet 4.6 Change-Id: I110f79aa911b746d13f6648883191edabea10563 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-03-17Revert "CI: Pin docker to <29"Pierre Riteau1-2/+0
This reverts commit 6828a59bfc79eb988def6d52fc4dc1a56bdd5404. Signed-off-by: Pierre Riteau <pierre@stackhpc.com> Change-Id: I9cc7ce32dff4a11f2e03f01f1a1f93f57c38ee6c
2026-03-14Merge "influxdb/telegraf: Drop deployment"Zuul1-4/+0
2026-03-12Revert "CI: Stop testing heat until Horizon fixes land"Taavi Ansper1-1/+1
This reverts commit 68ec4c294e66fb51f1b6297ab1d29e014c9856d1. Reason for revert: https://review.opendev.org/c/openstack/heat-dashboard/+/979418 was merged. Change-Id: I6940ddb4b4b85203077eac63fb4c682b32a3727f Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-03-12selenium: Use Horizon login urlMichal Nasiadka1-5/+5
Previously we used logout url in the test, which worked (and was also used in Horizon). It stopped working after recent changes, but changing to login url fixes that. Change-Id: I19c24ce44370ab949bfea49aef7023dd323fff6a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Co-Authored-By: Taavi Ansper <taaviansperr@gmail.com>
2026-03-10CI: Stop testing heat until Horizon fixes landMichal Nasiadka1-1/+1
See https://review.opendev.org/c/openstack/releases/+/979473 Change-Id: Ia9d26f74b17e9c15fbd59ba3c3ace7c9f895e181 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-02Merge "Revert "CI: Pin testtools in yet another place""Zuul1-3/+1
2026-02-27Revert "CI: Pin testtools in yet another place"Michal Nasiadka1-3/+1
This reverts commit a91a4a875b0006026eb6710835d0e1404dae0ba7. Reason for revert: not needed anymore Change-Id: I9c0e0a56632cc9110fd8416a0c3639ee9c3758ba Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-02-24CI: use Tempest checkout in master jobsBartosz Bezak2-0/+35
Temporarily drop bcrypt from master upper-constraints in CI. Keep tagged Tempest in upgrade jobs and stable branches Change-Id: Iab349d3f5c3e104bf7ce8fefda29a46023766950 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-02-18CI: Pin testtools in yet another placeMichal Nasiadka1-1/+3
Change-Id: Ie92c37549db32c988ee329fd37c6f593319b502c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-02-11CI: use 3 ovn sb db relays for better coverageBartosz Bezak1-0/+1
Change-Id: I5cf2fbd0bb4812b212a6bf05c4d4a2dd992a6cfe Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-02-10CI: skip ARA in slurp ansible upgradeBartosz Bezak1-1/+0
ARA is already installed in the same venv, so this step only needs kolla-ansible and ansible-core. That was needed in previous SLURP cycle. ara<1.0.0 currently fails with ModuleNotFoundError: pkg_resources [1] [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 Change-Id: Ia5e6ee943fe8d2a5d0a633aa2058548abf7e2df9 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-27Merge "CI: Add CloudKitty scenario"Zuul1-0/+4
2026-01-27CI: Run at minimum 2 workers due to uWSGI processes settingMichal Nasiadka1-2/+2
Closes-Bug: #2121620 Change-Id: Ic0d7652e80d38df2ce225dca171903c07ec45df3 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-27tests: Change Selenium port from 4444 to 4500Piotr Milewski1-2/+6
The default Selenium port (4444) conflicts with MariaDB SST (State Snapshot Transfer), which also uses port 4444. This overlap caused intermittent test failures and MariaDB timeouts during CI runs. This commit shifts the Selenium standalone container to port 4500 to ensure environment stability. Change-Id: Ie259629617d47367c412336434069e5d4f5cae3a Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit 2da3a2c0555c5671d8d473ef71c763cc0437b3b1)
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 14:35:27 +0000