aboutsummaryrefslogtreecommitdiff
path: root/tools
AgeCommit message (Collapse)AuthorFilesLines
2026-04-17Implement neutron-ovn-vpn-agentMaximilian Stinsky1-38/+101
This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-19ansible-lint: Fix fqcn[actions-core] in playbooksMichal Nasiadka1-2/+2
Also add all failed roles into ignore and these will be removed in subsequent patches Change-Id: Ifa6f2725cfa93cb14d72daf27448bd58f186acfd Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-14Merge "influxdb/telegraf: Drop deployment"Zuul1-5/+0
2026-01-23influxdb/telegraf: Drop deploymentMichal Nasiadka1-5/+0
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-09ansible-lint: Rework validate-all-file into custom rulesMichal Nasiadka1-227/+0
Test roles/ subdirectories as well (used by Zuul) In addition to that container_exec_become will also fail when "docker exec" or "podman exec" will be used instead of "{{ kolla_container_engine }} exec" Generated-By: Claude Change-Id: I75c1e48c36bb0284e2927b1cb354ce9ec47967d7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-04ansible-lint: Fix risky-*Michal Nasiadka1-0/+1
Change-Id: I3914252b2d884349b9744d229406cf49d691ebec Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-28ansible-lint: Remove yaml[truthy] from excludesMichal Nasiadka1-1/+1
Normalize quotes and some other easy fixes done by ansible-lint --fix Also drop etc from excludes and ignore comment check in etc/kolla/globals.yml Pinning to ansible-lint<25.11.0 because 25.11.1 is breaking without any messages Change-Id: I7dee3866191cef84cd12b1816cdab0a02380ec7f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-06CI: Bump cirros version to 0.6.3Michal Nasiadka1-1/+1
Change-Id: Id979cc7e4f88994a051a4037224c2c1af479dcfd Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-21Remove egrep usage from scriptsMichal Nasiadka3-5/+5
egrep: warning: egrep is obsolescent; using grep -E Change-Id: I4df0d520546da141cafc15e9464149059fdc06a6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-14Allow to override Cirros image URL for air-gapped environmentsMaksim Malchuk1-1/+1
Change-Id: I917b63ac93a7370e4e064a3fcce70820521387d4 Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2025-03-24Merge "Remove Swift role"Zuul2-8/+0
2025-03-21Remove Swift roleMichal Nasiadka2-8/+0
Since Swift is broken and since deprecation nobody did pick up the work to make it working - let's remove swift role and associated integrations/CI scripts. Change-Id: I08e92aaeea644053fd25f80ce1f276a495cebbfc
2025-03-20ovn: Add support for OVN SB RelayMichal Nasiadka1-0/+3
Add support for deploying OVN SB relays [1]. This is enabled by default to improve large scale scenarios. Default mechanism deploys one relay group per 50 ovn-controller hosts and uses random but idempotent method to choose a relay for a given host. neutron-server and Octavia will connect directly to SB cluster, not via the relays. kolla-ansible check subcommand does not support ,,iterated'' containers for now - but will be introduced in a subsequent patch. [1]: https://docs.ovn.org/en/latest/tutorials/ovn-ovsdb-relay.html Co-Authored-By: Krzysztof Tomaszewski <ktomaszewski@cloudferro.com> Depends-On: https://review.opendev.org/c/openstack/kolla/+/928898 Change-Id: Id7d6973668d8b2b194913b533f8cb756c6708536
2024-10-28Rewrite kolla-ansible CLI to pythonRoman Krček1-608/+0
Moving the CLI to python allows for easier maintenance and larger feature-set. This patch introduces a few breaking changes! The changes stem the nature of the cliff package. - the order of parameters must be kolla-ansible <action> <arguments> - mariadb_backup and mariadb_recovery now are mariadb-backup and mariadb-recovery Closes-bug: #1589020 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Change-Id: I9749b320d4f5eeec601a055b597dfa7d8fb97ce2
2024-09-16Do not remove inventory file if placed in /etc/kollaMichal Arbet2-2/+23
This patch fix issue when inventory file is deleted by kolla-ansible -i /etc/kolla/inventory destroy call. Now, inventories are available in tools/cleanup-host so we can ignore their removal. Closes-Bug: #2052706 Change-Id: If89e94356de515b40ca4e8c023979cd498146303
2024-08-22Merge "Add command to upgrade to a target version of RMQ"Zuul1-0/+8
2024-08-16Bump Ansible versions to 2.16 and 2.17Michal Nasiadka1-2/+2
Change-Id: Ic87fb3e4c014d3090869d5631e02982829df6312
2024-08-12Add command to upgrade to a target version of RMQMatt Crees1-0/+8
Required before a SLURP upgrade Change-Id: I09a45d26a6075554b204e007f64122f23de5f53c
2024-04-22CI: Add codespell to pep8Michal Nasiadka1-5/+5
Fix existing spelling errors Change-Id: Ie689cf5a344aaa630a4860448b09242333a8e119
2024-04-05CI: bump cirros versionSven Kieske1-1/+1
Signed-off-by: Sven Kieske <kieske@osism.tech> Change-Id: Ib9a0d9bab0c64f5179715dbc629703e7a6947c98
2024-03-14Bump ansible-core versions to 2.15 and 2.16Michal Nasiadka1-2/+2
Change-Id: Iab40eb92c7e4a9092471bef9d4477a4fa34f1c85
2024-01-08CI: Test Nova server resize functionalityPierre Riteau1-0/+1
This adds an extra resize operation to core OpenStack tests. This should be fast since we are only increasing the number of cores of the VM and could help catch additional errors in CI tests. Change-Id: Ia61b995dbffcda4f1e6494548df457231cb67bd7
2023-11-15Rename kolla_docker to kolla_containerMartin Hiner1-4/+4
Changes name of ansible module kolla_docker to kolla_container. Change-Id: I13c676ed0378aa721a21a1300f6054658ad12bc7 Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com>
2023-11-08Add support for ansible-coreMichal Nasiadka1-1/+7
Collections version taken from official Ansible 7 package [1] and limited to the same major version. [1]: https://github.com/ansible-community/ansible-build-data/blob/main/7/ansible-7.7.0.yaml Change-Id: I0f1ea9717397adc2d2c3215d74ec3759f351a57a
2023-10-02Remove remnants of Monasca and depsMichal Nasiadka1-7/+0
Following Monasca initial removal in [1] [1]: I6fc7842bcda18e417a3fd21c11e28979a470f1cf Change-Id: I94d6f102e8da3882f37f3007639b917c49f907a9
2023-09-20Merge "ansible: bump min version to 2.14 and max to 2.15"Zuul1-2/+2
2023-09-11Merge "cleanup: fix cleanup containers"Zuul1-0/+3
2023-09-08CI: add block support to validate-all-file.pyMichal Nasiadka1-27/+45
This change also refactors code a bit to allow additional checks in the same os.walk loop Change-Id: Ib40af3ee309c773afba4776183d162327a9a0e1c
2023-08-30ansible: bump min version to 2.14 and max to 2.15Michal Nasiadka1-2/+2
Change-Id: Ia982df80d688522dbaa5fc3e462c1a009d512cb6
2023-08-28cleanup: fix cleanup containersMichal Nasiadka1-0/+3
Currently the script only stops containers and removes services, without disabling service or removing symlink - which renders the service in a not-found state. After we disable and stop - some of the services end up in failed state (due to wrong exit codes for various reasons) - running reset-failed fixes that. Change-Id: I637783ce758dbf1c2a7b4b99aa6b61e2c5ca1460
2023-08-25Add command to force reset the state of RabbitMQMatt Crees1-0/+6
This command can be invoked with ``kolla-ansible rabbitmq-reset-state``. This is primarily designed to be used when enabling HA queues[1]. As such, this also updates the RabbitMQ documentation to use this command. [1] https://docs.openstack.org/kolla-ansible/latest/reference/message-queues/rabbitmq.html#high-availability Change-Id: I6ad95a3618fc1a34af56657ef99ef14dc979f17a
2023-08-17Merge "Add support for checking Octavia cert expiration"Zuul1-1/+11
2023-05-19Merge "Add container engine option to scripts"Zuul9-44/+98
2023-05-18ansible: bump min to 2.13 and max to 2.14.2Michal Nasiadka1-2/+2
We limit to 2.14.2 due to a regression in ansible-core [1] that breaks conditional include_task loops in handlers. This is used for controlled restarts of MariaDB and RabbitMQ. [1]: https://github.com/ansible/ansible/commit/65366f663de7d044f42ae6dd53368fd4c1f88b35 Change-Id: I57425680a4cdbf0daeb9b2cc35920f1b933aa4a8 Co-Authored-By: Michal Nasiadka <michal@stackhpc.com>
2023-04-28Add container engine option to scriptsMartin Hiner9-44/+98
This patch add a way to choose container engine inside tool and test scripts. This is in preparation for Podman introduction but still leaves Docker as default container engine. Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com> Change-Id: I395d2bdb0dfb4b325b6ad197c8893c8a0f768324
2023-04-27Add support for checking Octavia cert expirationMatt Crees1-1/+11
Adds a flag ``kolla-ansible octavia-certificates --check-expiry <days>`` to the ``octavia-certificates`` command to check if the certificates will expire within a given number of days. Change-Id: I869b8afd85fe282d823ecf3593aa22f94a61b2a0
2023-04-20Merge "Revert "ansible: bump min to 2.13 and max to 2.14""Zuul1-2/+2
2023-04-20Revert "ansible: bump min to 2.13 and max to 2.14"Dr. Jens Harbott1-2/+2
This reverts commit 9867060b6b3bd36aad121b53b9e5dddfca8a8e4c. Reason for revert: seems this broke some jobs Change-Id: I1ca81214ece403351c0a522ea05bf07802e4c4c0
2023-04-19Merge "cli: fix find globals.d"Zuul1-1/+1
2023-04-13ansible: bump min to 2.13 and max to 2.14Michal Nasiadka1-2/+2
Change-Id: Ibc9cc91f64b0450de3cae6e2830b4ff2c52c0395
2023-03-31cli: fix find globals.dMichal Nasiadka1-1/+1
Currently when the /etc/kolla/globals.d directory does not exist it writes an error on stderr. Change-Id: I2d4b3dd9dde3d383af213dc6fd376bc14c650a7d
2023-03-26[CI] Test Neutron with IPv6 networksRadosław Piliszek1-8/+38
Make sure to actually test IPv6 connectivity to our test instance in the IPv6 jobs. Change-Id: I7845448804e191af356e82f8ad33c563ffd8ebd5
2023-03-21Add flags for RabbitMQ message TTL & queue expiryMatt Crees1-0/+3
Adds two new flags to alter behaviour in RabbitMQ: * `rabbitmq_message_ttl_ms`, which lets you set a TTL on messages. * `rabbitmq_queue_expiry_ms`, which lets you set an expiry time on queues. See https://www.rabbitmq.com/ttl.html for more information on both. Change-Id: I51ca37ffbb1bb5c07f2d39873f0f33ca20263f2a
2023-03-20Merge "Add flag to change RabbitMQ ha-mode definition"Zuul1-0/+1
2023-02-23Allow to override CirrOS version in init-runonceBartosz Bezak1-1/+1
This is to allow us to customize for CI. Change-Id: Ie45860fa2228c21ce45ac8118267fb8304129802
2023-02-14CI: bump cirros to 0.6.1Michal Nasiadka1-2/+2
Change-Id: I80fb1469ae4ff8d38198e495690496fcb5eadc18
2023-02-14Add flag to change RabbitMQ ha-mode definitionMatt Crees1-0/+1
Adds the flag `rabbitmq_ha_replica_count` to change how many different nodes a queue should be mirrored across. If the value is not set, then it defaults to "ha-mode":"all". This value is unset by default to avoid any unexpected changes to the RabbitMQ definitions.json file, as that would trigger an unexpected restart of RabbitMQ during the next deploy. Change-Id: Iee98cd937197a73a3b04aa8501fa325e8ecfff24
2023-02-07remove elasticsearch remnants in antelope cycleBartosz Bezak1-5/+0
Change-Id: I115b491eca413437926f5bcaf53336151f9a7c0b
2023-01-19Add systemd container controlMartin Hiner1-1/+7
This commit adds SystemdWorker class to kolla_docker ansible module. It is used to manage container state via systemd calls. Change-Id: I20e65a6771ebeee462a3aaaabaa5f0596bdd0581 Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com> Signed-off-by: Martin Hiner <m.hiner@partner.samsung.com>
2023-01-03Merge "Integrate oslo-config-validator"Zuul1-0/+6
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 14:35:27 +0000