summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2019-06-26base: do not put grafana repo twiceMarcin Juszkiewicz1-2/+0
By mistake I added it second time in 1e7a78932dc0461c60d9fd6e613b252d8b22ff01 commit. Change-Id: I78e9574ea01d84051dbc649fea1b5b9556778a15
2019-06-26Merge "Fix deployment of ceph-nfs container failing due to wrong USER"Zuul1-3/+0
2019-06-25Remove Oracle Linux stuff in CI codeRadosław Piliszek2-24/+0
Oracle Linux is no longer tested via CI after [1]. This patch removes OL support from Zuul files. [1] https://review.opendev.org/664217 Change-Id: I527aba3635ef82e2d2a88ee7f5250bf03e420800 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-25[prometheus/openstack-exporter] Changed repository location and version.Jorge Niedbalski1-2/+2
Version 0.0.9 has been released, also the default organization has been changed to its own org[0]. [0] https://github.com/openstack-exporter/openstack-exporter Change-Id: Ib82810a8d33dd91d28537058e873724a22067103 Signed-off-by: Jorge Niedbalski <niedbalski@gmail.com>
2019-06-25Merge "Make SKIPPED_IMAGES more flexible"Zuul2-80/+48
2019-06-24Merge "Implement Apache WSGI for Qinling"Zuul3-5/+52
2019-06-24Merge "Add a variable to configure repos disabled in base CentOS image"Zuul1-6/+11
2019-06-24Upgrade Monasca to InfluxDB 1.7Doug Szumski3-21/+12
Monasca now supports InfluxDB 1.7, the current version provided by Kolla. We no longer need to build an old version for Monasca. Depends-On: https://review.opendev.org/#/c/658330 Change-Id: I5a86405901139d643172835acb89f55b14bfedbf
2019-06-20Implement Apache WSGI for QinlingGaëtan Trellu3-5/+52
Since this review[1], Qinling supports WSGI execution. From a production perspective, Qinling should be deployed using Apache and mod_wsgi. [1] https://review.opendev.org/#/c/661851/ Change-Id: I9aaee4c2932f1e4ea9fe780a64e96a28fa6bccfb Story: 2005920 Task: 34181
2019-06-20Clean up test processRadosław Piliszek10-133/+62
If stestr failed, then no node info was logged. Logging node info is now handled in pre and post stages of Zuul. Additionally Zuul v3 migration recommendations were applied and some unused code removed improving general readability. Change-Id: Iae9d37cb76997ba8389e21c7e2a3bf5905abe029 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-19Make SKIPPED_IMAGES more flexibleRadosław Piliszek2-80/+48
With introduction of new architectures, it seems reasonable to allow skipping of images based on their architecture. Additionally, the existing framework had unneccessary duplication. This commit makes the feature more flexible and cleaner. Existing skips have been programmatically rewritten. Change-Id: I34c002a0ee605ca121d9d923b256e4fe1ea3d9aa Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-19Fix deployment of ceph-nfs container failing due to wrong USERRadosław Piliszek1-3/+0
The startup script requires to be run as root, not ceph. All other ceph images follow this rule. Also removed redundant blank line. Change-Id: I1d69ec0ca97dbbacccfe737fca03c9739244b900 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-18Merge "Disable and remove OracleLinux CI jobs"Zuul1-58/+0
2019-06-18Merge "openstack-base: add several popular python modules"Zuul1-0/+10
2019-06-18Merge "Remove crane image"Zuul8-99/+5
2019-06-18Merge "Add sha256 in ceph fetch keys"Zuul1-0/+2
2019-06-18Merge "Add upgrade note for nova-placement-api removal"Zuul1-0/+5
2019-06-18Merge "Remove nova-consoleauth"Zuul2-31/+8
2019-06-18Merge "Fix ownership of ironic inspector DHCP hostsdir"Zuul1-1/+2
2019-06-18Merge "base: do not use non-free repositories for Ubuntu"Zuul3-12/+12
2019-06-18Merge "Move to releases.openstack.org"Zuul1-3/+3
2019-06-18ubuntu: use UCA/trainMarcin Juszkiewicz3-3/+3
Change-Id: If75db0f9fc1bfe82a4ace2cd5bfe603cfe5a5396
2019-06-18Add sha256 in ceph fetch keysMichal Nasiadka1-0/+2
fetch_ceph_keys.py is using insecure sha1 function, this patch adds sha256 beside sha1 - in order to remove sha1 safely in U release. Change-Id: I32ba1abd204c9dba4bbe3132b5650b0e391616af Closes-Bug: #1826327
2019-06-18Add a variable to configure repos disabled in base CentOS imageRadosław Piliszek1-6/+11
[1] disabled CentOS Ceph Nautilus repo for Stein. It turned out to be a problem for TripleO ([2]) which does not use upstream Ceph repo and actually relies on CentOS Ceph Nautilus repo. We did not leave the option to override our customization. This patch adds a customizable variable to base CentOS image: centos_yum_repos_to_disable [1] https://review.opendev.org/651601 [2] https://review.opendev.org/664244 Change-Id: I867ca75cafe853b206beae2f81dfb79b62d05557 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-17base: do not use non-free repositories for UbuntuMarcin Juszkiewicz3-12/+12
Remove restricted and multiverse from ubuntu. restricted is supported software that is non-free. multiverse is unsupported software that is non-free. We should not use any of them. And they are not mirrored by OpenStack infra. Change-Id: I34b9d56559eada96abec13814a2aa91b57055710
2019-06-17Merge "grafana/aarch64: use package from upstream repositories"Zuul4-17/+11
2019-06-17openstack-base: add several popular python modulesMarcin Juszkiewicz1-0/+10
During building of all source images there are Python modules repeating in several targets. bcrypt: bifrost, ceilometer, cinder, dragonflow, freezer, keystone, manila, mistral, neutron, nova, rally, sahara, tacker, tempest, vmtp logutils: aodh, barbican, blazar, ceilometer, cloudkitty, designate, dragonflow, gnocchi, heat, ironic, kuryr, magnum, mistral, neutron, octavia, panko, qinling, solum, tacker, tempest, vitrage, watcher, zun pecan: aodh, barbican, blazar, ceilometer, cloudkitty, designate, dragonflow, gnocchi, heat, ironic, kuryr, magnum, mistral, neutron, octavia, panko, qinling, solum, tacker, tempest, vitrage, watcher, zun psutil: ceilometer, cinder, designate, dragonflow, freezer, heat, ironic, magnum, manila, mistral, monasca-agent, murano, neutron, nova, octavia, panko, searchlight, senlin, tacker, vitrage, watcher, zaqar, zun pymongo: almanach, aodh, freezer, horizon, monasca-agent, neutron-server-opendaylight, panko, vmtp, zaqar pyroute2: dragonflow, kuryr, mistral, neutron, nova, octavia, tacker setproctitle: aodh, ceilometer, cloudkitty, dragonflow, gnocchi, heat, kuryr, neutron, octavia, qinling, tacker, tempest, vitrage, zun simplegeneric: aodh, blazar, ceilometer, cloudkitty, glance, ironic, magnum, mistral, octavia, panko, qinling, searchlight, solum, watcher PyNaCl: bifrost, ceilometer, cinder, dragonflow, freezer, manila, mistral, neutron, nova, rally sahara, tacker, tempest, vmtp WSME: aodh, blazar, ceilometer, cloudkitty, glance, ironic, magnum, mistral, octavia, panko, qinling, searchlight, solum, watcher Change-Id: I3990254258289fae8fbaf505de0f8cdede435111
2019-06-17There is no Java 8 in Debian 'buster'Marcin Juszkiewicz3-4/+25
Debian 'buster' release contains Java 11 only. So kafka, logstash, storm images needed adjustments. Change-Id: I9f1e809d0ef1955b832dd384912f880088426306
2019-06-17Change port of docker registrypengdake2-3/+3
The port of docker registry is conflict with keystone. So we need to change port of docker registry. Change-Id: If15c0caf76b5406f590b05030e43d65ca14c8788 Signed-off-by: pengdake <19921207pq@gmail.com>
2019-06-17Run nova api_db sync before db syncMark Goddard1-2/+2
Backport: Stein, Rocky Since cells v2 was introduced, nova operators must run two commands to migrate the database schemas of nova's databases - nova-manage api_db sync and nova-manage db sync. It is necessary to run them in this order, since the db sync may depend on schema changes made to the api database in the api_db sync. Executing the db sync first may fail, for example with the following seen in a Queens to Rocky upgrade: nova-manage db sync ERROR: Could not access cell0. Has the nova_api database been created? Has the nova_cell0 database been created? Has "nova-manage api_db sync" been run? Has "nova-manage cell_v2 map_cell0" been run? Is [api_database]/connection set in nova.conf? Is the cell0 database connection URL correct? Error: (pymysql.err.InternalError) (1054, u"Unknown column 'cell_mappings.disabled' in 'field list'") [SQL: u'SELECT cell_mappings.created_at AS cell_mappings_created_at, cell_mappings.updated_at AS cell_mappings_updated_at, cell_mappings.id AS cell_mappings_id, cell_mappings.uuid AS cell_mappings_uuid, cell_mappings.name AS cell_mappings_name, cell_mappings.transport_url AS cell_mappings_transport_url, cell_mappings.database_connection AS cell_mappings_database_connection, cell_mappings.disabled AS cell_mappings_disabled \nFROM cell_mappings \nWHERE cell_mappings.uuid = %(uuid_1)s \n LIMIT %(param_1)s'] [parameters: {u'uuid_1': '00000000-0000-0000-0000-000000000000', u'param_1': 1}] (Background on this error at: http://sqlalche.me/e/2j85) Despite this error, the command actually exits zero, so kolla does not notice the failure. This change reorders these two commands to run the api_db sync before the db sync. Change-Id: I0514c02aaee1a413a7979c3a426e0484df839861 Closes-Bug: #1832860
2019-06-15Merge "[neutron] Do not migrate all subprojects"Zuul1-1/+1
2019-06-15Merge "Remove Neutron LBaaS support"Zuul8-86/+11
2019-06-14doc: Start using openstackdoctheme's extlink extensionchenxing7-18/+17
This ensures we have version-specific references to other projects [1]. Note that this doesn't mean the URLs are actually valid - we need to do more work (linkcheck?) here, but it's an improvement nonetheless. [1] https://docs.openstack.org/openstackdocstheme/latest/#external-link-helper Change-Id: I7c979dacd89ebead404b751d596ba120b38f00f3
2019-06-12Move to releases.openstack.orgtonybrad1-3/+3
Change-Id: I7ec146d0edc96f5ce925792530c42d7eedf8a409
2019-06-11Fix lower-constraints test fail due to failing dep buildRadosław Piliszek2-2/+1
Ubuntu Bionic updated OpenSSL package to new release: from 1.1.0 to 1.1.1 It caused cryptography in version from lower-constraints to fail to build in Zuul. Additionally, constrained cryptography version did not match the requirement for constrained PyOpenSSL. This commit bumps the version to the minimum required by constrained PyOpenSSL. It works because manylinux1 (binary) wheel exists. This version agrees also with upper-constraints for Queens. Dependency on cryptography is removed as it is not used directly by kolla (and requirements checker requires lower-constraints matching version - let's not create an illusion of usage). Change-Id: I8ae19f212049cae5dfb4e8dd6ec6cd14a8c46e0e Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-10Merge "Fix issues with Percona in Zuul and clean up a little bit"Zuul8-99/+17
2019-06-10Merge "Debian/Ubuntu: allow to use unsigned repositories"Zuul1-6/+8
2019-06-10Disable and remove OracleLinux CI jobsMark Goddard1-58/+0
We have agreed to remove support for Oracle Linux, starting by disabling the CI jobs. http://lists.openstack.org/pipermail/openstack-discuss/2019-June/006896.html Change-Id: Ic7e7bedf36f98e3f7a0e2a22ec76136f4414c765
2019-06-09Fix ownership of ironic inspector DHCP hostsdirMark Goddard1-1/+2
If you run with enable_ironic set to true and ironic_inspector_pxe_filter set to dnsmasq (the default in stein), ironic inspector can fail with the following in the logs: Permission denied: u'/var/lib/ironic-inspector/dhcp-hostsdir/<MAC address>' A node must be registered with a port for this to happen. Weirdly this happens on centos/source, ubuntu/source, and ubuntu/binary, but not centos/binary. This change changes the ownership of /var/lib/ironic-inspector/dhcp-hostsdir to ironic-inspector user to make it writeable. Change-Id: I19447727f19dbd9c0a3e17d218b48ddc4c253587 Closes-Bug: #1832026
2019-06-08Fix issues with Percona in Zuul and clean up a little bitRadosław Piliszek8-99/+17
Percona site has connectivity issues from OVH hosts (of Zuul). This patch makes it so that: - the internal repo is actually used - RPM GPG keys are downloaded from the actually used repo - Ubuntu mimics the RHEL behavior (i.e. the Percona repo is enabled only in the xtrabackup image) extra benefit: no need for APT preferences for Percona repo to spare MariaDB deps Change-Id: Id27831f6b404762f9e44fd6bd1c4702bf06b05f8 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-07Add script to check for forbidden instructionsMartin André2-0/+50
When building images for binary type, it is expected to not install executables from untrusted sources, and gem, sensu-install, npm or pip packages for instance should come from the distro itself. This commit adds a `validate-binary-build.sh` script that checks for forbidden commands in the rendered Dockerfile templates for the binary type builds and hooks this script with the pep8 CI job. The output is just informative for now until we've fixed the culprit Dockerfiles, then we'll make the script return an error code and with the ability to fail the pep8 CI check. This should prevent unwanted commands from entering binary type Dockerfiles. Change-Id: I66e54bd18f4256cdca6c0c50626de4f975c246b8
2019-06-07Debian/Ubuntu: allow to use unsigned repositoriesMarcin Juszkiewicz1-6/+8
When we run Debian 'buster' or Ubuntu 18.04 in CI job they refuse to work as infra mirror is not signed. This patch instructs APT to use unsigned repos anyway. Change-Id: I530fde5b57894afda2de98d7c217e735497e3feb
2019-06-07grafana/aarch64: use package from upstream repositoriesMarcin Juszkiewicz4-17/+11
We were installing 5.2.4 version instead of just latest one like it is done on x86-64. Change-Id: If8434c6c05e415ac8d601260d02b25facbdef1f5
2019-06-07Merge "Use packagecloud/ubuntu rabbitmq repo for all archs"Zuul2-0/+6
2019-06-07Remove crane imageMark Goddard8-99/+5
This image was deprecated in the Stein cycle. Change-Id: I249b78cd263c97c4a9223523c77f8c325f3e649a
2019-06-07Remove nova-consoleauthStephen Finucane2-31/+8
The nova-consoleauth service was deprecated during the Rocky release [1] and has not been necessary since unless you're using cells v1. As Kolla has never supported cells v1, which is finally being removed during Train [2], we can get ahead of the curve and stop deploying nova-consoleauth immediately. [1] https://specs.openstack.org/openstack/nova-specs/specs/rocky/implemented/convert-consoles-to-objects.html [2] https://blueprints.launchpad.net/nova/+spec/remove-cells-v1/ Change-Id: I19d467adbc1dab6709ce9667b18f1bb6dff12c1e Signed-off-by: Stephen Finucane <stephenfin@redhat.com> Depends-On: I099080979f5497537e390f531005a517ab12aa7a
2019-06-07Remove Neutron LBaaS supportCarlos Goncalves8-86/+11
The project has been retired and there will be no Train release [1]. This patch removes Neutron LBaaS support in Kolla. [1] https://review.opendev.org/#/c/658494/ Depends-On: https://review.opendev.org/#/c/663875/ Change-Id: I99484c48ed09f7e015e134bdff1f298c359c6905
2019-06-07Merge "Ignore EM releases in version-check.py"Zuul1-0/+4
2019-06-07Merge "Debian/Ubuntu: more python3 packages for binary"Zuul29-85/+93
2019-06-07Merge "Debian/Ubuntu: move to Python 3 for source images"Zuul36-62/+105
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 10:37:28 +0000