| Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: I77c4d442645a7d5253b458ce6584f2ba599bc4c3
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
(cherry picked from commit e975285743d08dda7e5b6ca70018441b9d7bd249)
|
|
|
|
Add kolla_toolbox and proxysql-config,
remove common, proxysql and haproxy.
Change-Id: Ia65420a6124f6dc95e3b0c4760ed6a613972e1d0
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
(cherry picked from commit 81eaf351ef7bfde38bb311076a2607e371d785d1)
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
The shared periodic-stable-jobs template in openstack-zuul-jobs runs
openstack-tox-py310 on stable/2026.1, but kolla-ansible on this branch
sets python_requires >= 3.11 and requires ansible-core >= 2.19, whose
every satisfying release needs Python >= 3.11. The py310 tox
environment therefore cannot even install: pip fails to resolve
ansible-core in seconds, and the job has failed on every run. In the
30 days to 2026-07-01 that was 30 failures from 30 runs in the
periodic-stable pipeline, pure noise for anyone watching the periodic
dashboards.
Zuul templates cannot exclude individual jobs, so replace the shared
template with an explicit periodic-stable job list running what the
shared template would have run minus the impossible interpreter: docs
and py313. This mirrors the approach already taken for check and gate
on this branch with the local openstack-python3-jobs-kolla-ansible
template, which exists precisely to skip py310 jobs.
Assisted-By: Claude Fable 5 (1M context, medium effort)
Change-Id: I284ab75a3e476e6e623507084cfed5675f77d430
Signed-off-by: Michael Still <mikal@stillhq.com>
|
|
|
|
Change-Id: If655cd51857b65b16bde1f8870edbd217f5c10e5
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Switch to httpd image which was introduced for keystone-httpd and
is identical to letsencrypt-webserver image.
The letsencrypt-webserver image will be removed afterwards in [1].
[1]: https://review.opendev.org/c/openstack/kolla/+/986151
Depends-On: https://review.opendev.org/c/openstack/kolla/+/986377
Change-Id: Ica381670de4b157c97be4089eaeb7fe2f7ba039f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Zun is broken in 2026.1, it has been released broken and there are
no reviews on the patch to fix it [1].
[1]: https://review.opendev.org/c/openstack/zun/+/982362
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150
Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Adds support for deploying multiple instances of the Nova
Compute Ironic service on the same host. This is useful
in large baremetal deployments, where the sharding and/or
conductor group feature is used to scale out the service.
A further patch to support deploying multiple Ironic
conductor instances will follow.
Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com>
Co-Authored-By: Bertrand Lanson <bertrand.lanson@protonmail.com>
Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90
Signed-off-by: Doug Szumski <doug@stackhpc.com>
|
|
We enabled prometheus due to testing of network-exporter
Change-Id: I382ab5394baef107cfe62f6e1416561b269cf58c
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
Kolla-Ansible defaulted for long time to deploy cinder-volume/backup
containers on storage group, which is good for Cinder LVM deployments.
Problem is - majority of deployments does not use Cinder LVM
backend - they use mainly Ceph (based on OpenStack User Survey)
and probably some other proprietary vendors which are API driven.
Let's change the default to reflect reality.
If a user has cinder lvm enabled - we will deploy it as it was before
If a user has both cinder lvm and something else enabled - we will deploy
cinder-volume and cinder-backup in both places (cinder group and storage group)
If a user doesn't have cinder lvm enabled - we deploy only in the cinder group
Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
1. Add CI coverage for keystone_identity_providers under federation
scenario.
2. Add fix for federation config in keystone role if keystone_identity_providers is
defined.
3. Update Horizon tests with federation example.
4. Use openstack.cloud ansible modules instead of python-openstackclient
in register_identity_providers.yml
Closes-Bug: #2134455
Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859
Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
|
|
|
|
We sometimes get mariadb healthcheck issues in CI (check-failure phase)
where MariaDB has IST transfer failure in the logs that would require
a restart of MariaDB node - let's try bumping wsrep_slave_threads to have
the IST finish faster and be less prone on network/cpu issues.
Change-Id: I0fdc8a42f282dfa8b7b0e7d5e1a297000f294c7d
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
It currently only holds kolla-toolbox and due to introducing
clouds.yaml for kolla-toolbox usage we should separate these two
for readability.
Change-Id: I0b4d3b8ab199260cd5087c10cf916f9d43f346cc
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
There was a lot of repetitive jinja for the cron templates for
logrotate, but they were also fairly infrequently overriden from
the default. Let's DRY up this code by having a default template
and only overriding it when required.
Co-Authored-By: Doug Szumski <doug@stackhpc.com>
Change-Id: I23c3dd66e71a6729a42ea7988931a46ce20d4fc6
Signed-off-by: Michael Still <mikal@stillhq.com>
|
|
|
|
Change-Id: I3e2fcee68efeae8c7ea9428156b63b9a9cfc1be0
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Change-Id: Iaf33e0fec67eaee026dc4da7d32be164a7f717b1
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Change-Id: Ia1d284933f6542c9bf82950726c93bbe55181b8b
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I1c0312aa7bdfb78fedef6c98463f25e6460f4587
Co-Authored-By: Pierre Riteau <pierre@stackhpc.com>
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Temporarily drop bcrypt from master upper-constraints in CI.
Keep tagged Tempest in upgrade jobs and stable branches
Change-Id: Iab349d3f5c3e104bf7ce8fefda29a46023766950
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
OVN is the only role using iterated containers,
it would be good to trigger it when the
service-check-containers role is edited.
Change-Id: I72c962b426799ad032f03fe7ea21a037f2c44dfd
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Change-Id: If35b2d3e8f10fbe23fd1ab82369d692f1b3a7939
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
|
|
|
|
Partial-Bug: #2139153
Change-Id: I989cc52dbc327a716f5f97768c72ff00013163d2
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Change-Id: I0a5128bfafb108847465ba0958966dd33610e4b6
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Now they trigger on everything, which doesn't make sense.
Change-Id: I7d556f333d8d589f7dac67b2aaef35712f3274b7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
Disabling requirements check because we need to pin bcrypt to
a version lower than 5.0.0, due to passlib and bcrypt
incompatibility, and since passlib is basically dead - there's
no way to fix that in any other way for stable branches.
Related issue: https://github.com/ansible/ansible/issues/85919
Closes-Bug: #2126975
Closes-Bug: #2102117
Signed-off-by: Christian Berendt <berendt@osism.tech>
Signed-off-by: Joachim de Groot <joacihm.de.groot@menzel-it.net>
Change-Id: I47eee02a47104d3411992f7e6e9dd8f0c2ad0919
|
|
|
|
Do not enable Prometheus in it yet, because
OpenStack Exporter fails on startup due to unavailability
of OpenStack APIs - and since we run systemd units in CI
with no restart on failure - it fails miserably.
Change-Id: I3de44a22fe3a4213cc095431645d37f265143919
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
wait_discover_computes.yml had to be updated to pass ansible-lint
checks for undefined variables (ansible_facts.hostname/nodename was
rendered as UndefinedMarker type)
Change-Id: Iaded12e9bcf7ed558b7e35ea526ef1355cbca61a
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I0a0e694c594ef5f479bf0e0d12a6cdd011dab250
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
|
|
|
|
Remove /etc/timezone bind mount since Debian does not provide
that file anymore.
Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793
Change-Id: If1a289068093843184f0d7b495815db006f2d563
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Add keyCertSign and digitalSignature key_usage required by Python 3.13 [1]
[1]: https://github.com/canonical/microk8s/issues/4864
Change-Id: Ia0c55ed6137b0ccd16815f9f7a49b3b30a982154
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I7505f8feeb85f606df92a20bf4a4700d5ea36a51
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I6042cf9ebf1251e1f516201e3bc3068acc613471
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Change-Id: I95ee094ade6efa02a19f29a4d9bdf8d7fb97e84e
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
|
|
Idempotence isn't tested in CI and seems to have led to bugs,
especially in podman, where it would just break, and reconfiguring
would restart the entire cluster. Let's test it in CI to ensure
this doesn't happen.
Change-Id: I810fa1818bb9a0a11f200da2b782c2fde72f3b3a
Signed-off-by: Bertrand Lanson <bertrand.lanson@protonmail.com>
|
|
Change-Id: I20e8571464e20ea0e0981a52db3182402ff8f01c
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
This reverts commit 809e5b2e341fefd655c12532d61a588bc2ce4091.
Reason for revert: It's failing again
Change-Id: Iddc5b14bf6fec937030ac75a3fce1774d46460cb
Signed-Off-By: <mnasiadka@gmail.com>
|
|
|
|
|
|
Depends-On: https://review.opendev.org/c/openstack/kolla/+/954707
Change-Id: I1f519b3ce8b7f2ceee2eaef88e4afc8ca8fa2f6e
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|