summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2019-06-06Merge "Remove tripleo-ui"Zuul5-90/+4
2019-06-06Debian/Ubuntu: more python3 packages for binaryMark Goddard29-86/+94
backport: Stein During the switch to Stein UCA, we did not switch all packages to python 3 for Debian/Ubuntu binary images. This change switches some more of those packages. Change-Id: I0bff21384d88ea678608392de2db1ba418c96665 Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2019-06-06Debian/Ubuntu: move to Python 3 for source imagesMarcin Juszkiewicz36-62/+105
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3 based packages but not switched to use Python 3. Some of images still contain Python 2. There are two reasons: - Ceph (ceph-common depends on Py2) - python3-ldappool on Ubuntu 18.04 In Ceph situation Py3 packages were added. For second one we can not do anything - Py2 dependency got dropped in Ubuntu 18.10 version. Removed neutron-server-plugin-networking-infoblox due to being not maintained. Once https://review.opendev.org/#/c/657578/ get merged someone may revert that part. Implements: blueprint debian-ubuntu-python3 Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026 Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
2019-06-06Merge "Blacklist bandit 1.6.0"Zuul2-2/+3
2019-06-05[neutron] Do not migrate all subprojectsJason1-1/+1
Instead of migrating all Neutron subprojects at bootstrap time, target specifically the neutron, neutron-fwaas, and neutron-vpnaas subprojects speficially. If a subproject is not specified, all subprojects are migrated, which is not the intended behavior. Change-Id: Icb8d572b7f084804e0423a8a3171dd66646b3885
2019-06-05Allow building images if parent was skippedJason1-1/+3
This fixes a bug where if an image had a parent that was skipped, it would never get built. Normally when a parent finishes building it triggers the build of its children. This process is kicked off by Kolla finding the grandparents that have no parents above them. However, sometimes parents should be skipped, and in this case they would never get scheduled, and so their children would never build, producing a strange error without much information. Fix is to allow building an image if its parent is explicitly marked as having been skipped. The use-case for this is when you want to iterate on building an image without going through the cost of re-running the parent builds. In particular, if your builds are using Git sources, which break Docker caches, the cost of parent builds is high and the feedback loop during development has a much higher latency. Allowing some way for images to be rebuilt in a targeted manner is helpful when in the development phase. Change-Id: I6b6897d20626825bcd235b9a85859644effbd222 Closes-Bug: #1810979
2019-06-05Remove tripleo-uiAlex Schultz5-90/+4
The tripleo-ui project has been removed from the upstream. Remove the references to the tripleo-ui containers. Change-Id: I353ecd3ed04c78fd21f0108c5e1355280d3f3bb9 Closes-Bug: #1831478
2019-06-05Merge "create missing apache2 directory on Debian/Ubuntu"Zuul23-0/+23
2019-06-05Use packagecloud/ubuntu rabbitmq repo for all archsMarcin Juszkiewicz2-0/+6
Change-Id: I880a33b56a2fe9b86de57326c80310a6a83c5e50
2019-06-05Merge "Ceph: Update to Nautilus on CentOS and OracleLinux"Zuul5-9/+51
2019-06-03Merge "Use the default policy.json for Qinling"Zuul1-1/+1
2019-06-03create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz23-0/+23
Ubuntu/source deployment of several images (horizon, placement-api, zun) failed with: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Change-Id: Ie2a1077f7def0743f1403341985e2109aa490026
2019-06-02Merge "Update contributor guide"Zuul6-17/+355
2019-05-31Ceph: Update to Nautilus on CentOS and OracleLinuxMark Goddard5-9/+51
The CentOS Stein OpenStack distribution depends on the Ceph Nautilus release, while Kolla currently deploys Luminous on CentOS. This change switches CentOS and OracleLinux builds to use Ceph Nautilus. Support for auth UID has been removed in the Nautilus release [1][2], so we have removed the --set-uid argument from calls to ceph-authtool. Also ceph-osd bootstrap mode fails when no mon config is provided, so we added --no-mon-config (mon config is injected later after bootstrap). Due to ceph-nfs build issues (ceph upstream nfs-ganesha rpms relied on older version of userspace-rcu, than CentOS Storage SIG packages) we need to move to ceph upstream rpm repos. [1] https://github.com/ceph/ceph/commit/d6def8ba1126209f8dcb40e296977dc2b09a376e [2] http://docs.ceph.com/docs/master/releases/nautilus/ Co-Authored-By: Michal Nasiadka <michal.nasiadka@nokia.com> Change-Id: I000398f587c5f4d6cc8995e34e162eebc77bc3e3 Implements: blueprint centos-ceph-nautilus
2019-05-29Use td-agent-gem to install fluentd monasca plugin on ubuntuMark Goddard2-9/+10
If monasca is enabled on ubuntu, we see the following error in fluentd: [error]: config error file="/etc/td-agent/td-agent.conf" error_class=Fluent::ConfigError error="Unknown output plugin 'monasca'. Run 'gem search -rd fluent-plugin' to find plugins" This is because we use 'fluent-gem install' to install the gem, which works on CentOS but on Ubuntu it is necessary to use 'td-agent-gem install'. Change-Id: I515f9764ca93a41a871e520696193a9298856d08 Closes-Bug: #1830147
2019-05-29Use the default policy.json for QinlingGaetan Trellu1-1/+1
To avoid complexity and possible issue during the Qinling usage we should build the Qinling Docker images with the policy.json file. The reason why is because Qinling doesn't have default policies. Change-Id: I13f64fcbfb3150efcb94af267f463eaddb11621d Closes-Bug: #1830900 Implements: blueprint qinling-support
2019-05-28Merge "Install fluentd gem on debian/ubuntu for non x86_64"Zuul4-7/+31
2019-05-28Merge "create missing apache2 directory on Debian/Ubuntu"Zuul2-0/+2
2019-05-24Merge "Bump Monasca Fluentd plugin version"Zuul1-1/+1
2019-05-24Install iputils package in neutron containersSlawek Kaplonski1-0/+2
This package provides e.g. arping tool which is used by Neutron services. On e.g. RHEL7 it was probably installed as some dependency to other package but on RHEL8 it's missing which cause some errors e.g. in neutron_l3_agent container. Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6 Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
2019-05-23create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz2-0/+2
Ubuntu/source deployment of horizon and placement-api failed: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Once directory is in place it works fine. Change-Id: Icbd500e5b16deb0eafc0821a1c117794ddb8ae62
2019-05-23Bump Monasca Fluentd plugin versionDoug Szumski1-1/+1
Bump version to include support for setting log message field name. Change-Id: Ib3953b49247bb36ac8ce25578c05c6bcb2a1905a Partial-Bug: #1830184
2019-05-22Merge "Fix multiple mon deployment failures"Zuul1-1/+11
2019-05-21Update contributor guideMark Goddard6-17/+355
... or "what I wish existed when I first became PTL" Some general improvements to the contributor guide, plus new sections for PTL duties and release management. Change-Id: Ib3c1c8179adb7ad8e10d5e0223232b7a734bde53
2019-05-21Merge "nova-libvirt: in Debian qemu-kvm is x86 only"Zuul1-1/+4
2019-05-20Ignore EM releases in version-check.pyMark Goddard1-0/+4
We don't want to use Extended Maintenance (EM) tags, since these are just markers of a point in time and not available as released artifacts. Change-Id: If552f7ffc22d4b25769c14c083179eecf5a93158
2019-05-20Add Qinling containersGaetan Trellu10-0/+121
Add Qinling Dockerfile , Qinling is an OpenStack project to provide "Function as a service". This project aims to provide a platform to support serverless functions. Change-Id: Idebf5c8756a0d0225adcce29b45a399120bb5eb6 Implements: blueprint qinling-support
2019-05-15Merge "Update Python 3 test runtimes for Train"Zuul1-2/+1
2019-05-15Blacklist bandit 1.6.0confi-surya2-2/+3
There's a regression[0] in bandit 1.6.0 which causes bandit to stop respecting excluded directories, and our tests throw a bunch of violations. Blacklist this version, but allow newer versions as there is already a pull request[1] to fix it, and I expect it will be included in the next release. [0] https://github.com/PyCQA/bandit/issues/488 [1] https://github.com/PyCQA/bandit/pull/489 Change-Id: I4429614a57fb512fe2bfdf0686c3eff0adc2a2f4
2019-05-13Merge "Update kubectl v1.5.4 to v1.11.0"Zuul1-1/+1
2019-05-09Fix bandit failure B105 in keystone fernetMark Goddard1-1/+2
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: '/etc/keystone/fernet-keys' Severity: Low Confidence: Medium Location: docker/keystone/keystone-fernet/fetch_fernet_tokens.py:27 More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html Ignore bandit failures on this line. Change-Id: I9828c23e4bcec7553a69aa5f20e990e0ef0538ea Closes-Bug: #1828416
2019-05-09Update Python 3 test runtimes for Trainconfi-surya1-2/+1
Following the process set down in the TC resolution on updating Python versions: https://governance.openstack.org/tc/resolutions/20181024-python-update-process.html Change-Id: I436fb2b84855fe5f8caaa0a072f0169965140db5
2019-05-07Merge "[Trivial fix]Remove unnecessary slash"Zuul1-2/+1
2019-05-07Merge "Add sqlite package to manila-share"Zuul1-4/+8
2019-05-07Merge "Add template override for grafana plugins"Zuul1-2/+7
2019-05-07Merge "Improve doc of kolla-build '--docker-dir' option"Zuul1-1/+2
2019-05-07Update kubectl v1.5.4 to v1.11.0chenming1-1/+1
Change-Id: I51c4a4a139e87fd82f411d07683f62453889de9a
2019-05-07Add sqlite package to manila-shareRafal Wadolowski1-4/+8
The docker image was built without sqlite package, which is required for nfs backend. Without this package manila-share fails to start. Change-Id: I2f7d8c283393ca947a1d51c6e3cd20e888fbc3e4 Closes-Bug: #1824511
2019-05-07Add upgrade note for nova-placement-api removalMark Goddard1-0/+5
The nova-placement-api image has been removed, since it was renamed to placement-api in the Stein release. Change-Id: I7907ececf0c195c1b86808cb17349251d16fd9af
2019-05-07Merge "Drop systemd support from PAM"Zuul1-0/+4
2019-05-07Merge "Remove nova-placement-api"Zuul2-82/+0
2019-05-06nova-libvirt: in Debian qemu-kvm is x86 onlyMarcin Juszkiewicz1-1/+4
This package provides just a wrapper script /usr/bin/kvm which run qemu-system-x86 in kvm mode for backwards compatibility. Change-Id: I0cc03a1ab5a79ae49fa7d13ac549e21d3ec5295d
2019-05-06[Trivial fix]Remove unnecessary slashzhufl1-2/+1
This is to remove the unncessary slash when the line doesn't exceed the length of 79, to make the code more readable. Change-Id: I53fdb56f001837e833df46cb86cdaab9c710ac99
2019-05-01Drop systemd support from PAMCédric Jeanneret1-0/+4
The line being removed is the cause of audit.log spam with a SELinux enforcing (and permissive) system. They are due to the fact we're calling "sudo" from within some containers, and PAM wants to connect to the host "dbus" socket (mounted in /run). This action is obviously denied by SELinux. The "-" prefix makes this module optional anyway, but apparently PAM does see it and tries to use it. Dropping this module has no consequences other than preventing log spamming. Change-Id: I3e0e86026f5a4a78473bed824cd1682d3a020cd5 Co-Authored-By: Michele Baldessari <mbaldess@redhat.com> Resolves-Bug: #1819461
2019-04-30Improve doc of kolla-build '--docker-dir' optionRadoslaw Smigielski1-1/+2
Let's make clear that '--docker-dir' can be specified multiple times as argument of kolla-build. It was not clear if '--docker-dir' options accept comma separated list of values or it can be specified multiple times. Change-Id: I7cf9a7c2a6c7876e5784a3df93369e7fa5036173 Partial-Bug: #1827146
2019-04-30Add template override for grafana pluginsArnaud PARENT1-2/+7
Change-Id: I209c3c60d5c2edb6856e81eb374fbcad648e3904 Closes-Bug: #1827025
2019-04-29Merge "Reuse /var/lib/tempest symlink for rpm also"Zuul1-5/+2
2019-04-29Merge "Move to opendev"Zuul10-23/+23
2019-04-29Remove nova-placement-apiLee Yarwood2-82/+0
Now that the required changes to extract Placement from Nova have landed in kolla-ansible we can remove the nova-placement-api service from kolla. Change-Id: Ifff5c60f5690098619bf5a43f25ae3895a96e0d2
2019-04-25Merge "Install udevadm in ironic-conductor image"Zuul1-0/+11