| Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
backport: Stein
During the switch to Stein UCA, we did not switch all packages to python
3 for Debian/Ubuntu binary images. This change switches some more of
those packages.
Change-Id: I0bff21384d88ea678608392de2db1ba418c96665
Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
|
|
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3
based packages but not switched to use Python 3.
Some of images still contain Python 2. There are two reasons:
- Ceph (ceph-common depends on Py2)
- python3-ldappool on Ubuntu 18.04
In Ceph situation Py3 packages were added. For second one we can not do
anything - Py2 dependency got dropped in Ubuntu 18.10 version.
Removed neutron-server-plugin-networking-infoblox due to being not
maintained. Once https://review.opendev.org/#/c/657578/ get merged
someone may revert that part.
Implements: blueprint debian-ubuntu-python3
Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026
Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
|
|
|
|
Instead of migrating all Neutron subprojects at bootstrap time, target
specifically the neutron, neutron-fwaas, and neutron-vpnaas subprojects
speficially. If a subproject is not specified, all subprojects are
migrated, which is not the intended behavior.
Change-Id: Icb8d572b7f084804e0423a8a3171dd66646b3885
|
|
This fixes a bug where if an image had a parent that was skipped, it
would never get built. Normally when a parent finishes building it
triggers the build of its children. This process is kicked off by Kolla
finding the grandparents that have no parents above them. However,
sometimes parents should be skipped, and in this case they would never
get scheduled, and so their children would never build, producing a
strange error without much information.
Fix is to allow building an image if its parent is explicitly marked as
having been skipped.
The use-case for this is when you want to iterate on building an
image without going through the cost of re-running the parent builds. In
particular, if your builds are using Git sources, which break Docker
caches, the cost of parent builds is high and the feedback loop during
development has a much higher latency. Allowing some way for images
to be rebuilt in a targeted manner is helpful when in the development
phase.
Change-Id: I6b6897d20626825bcd235b9a85859644effbd222
Closes-Bug: #1810979
|
|
The tripleo-ui project has been removed from the upstream. Remove the
references to the tripleo-ui containers.
Change-Id: I353ecd3ed04c78fd21f0108c5e1355280d3f3bb9
Closes-Bug: #1831478
|
|
|
|
Change-Id: I880a33b56a2fe9b86de57326c80310a6a83c5e50
|
|
|
|
|
|
Ubuntu/source deployment of several images (horizon, placement-api, zun)
failed with:
+ exec /usr/sbin/apache2 -DFOREGROUND
apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot
Change-Id: Ie2a1077f7def0743f1403341985e2109aa490026
|
|
|
|
The CentOS Stein OpenStack distribution depends on the Ceph Nautilus
release, while Kolla currently deploys Luminous on CentOS.
This change switches CentOS and OracleLinux builds to use Ceph Nautilus.
Support for auth UID has been removed in the Nautilus release [1][2], so
we have removed the --set-uid argument from calls to ceph-authtool.
Also ceph-osd bootstrap mode fails when no mon config is provided, so
we added --no-mon-config (mon config is injected later after bootstrap).
Due to ceph-nfs build issues (ceph upstream nfs-ganesha rpms relied on older
version of userspace-rcu, than CentOS Storage SIG packages) we need to move
to ceph upstream rpm repos.
[1] https://github.com/ceph/ceph/commit/d6def8ba1126209f8dcb40e296977dc2b09a376e
[2] http://docs.ceph.com/docs/master/releases/nautilus/
Co-Authored-By: Michal Nasiadka <michal.nasiadka@nokia.com>
Change-Id: I000398f587c5f4d6cc8995e34e162eebc77bc3e3
Implements: blueprint centos-ceph-nautilus
|
|
If monasca is enabled on ubuntu, we see the following error in fluentd:
[error]: config error file="/etc/td-agent/td-agent.conf"
error_class=Fluent::ConfigError error="Unknown output plugin 'monasca'.
Run 'gem search -rd fluent-plugin' to find plugins"
This is because we use 'fluent-gem install' to install the gem, which
works on CentOS but on Ubuntu it is necessary to use 'td-agent-gem
install'.
Change-Id: I515f9764ca93a41a871e520696193a9298856d08
Closes-Bug: #1830147
|
|
To avoid complexity and possible issue during the Qinling usage
we should build the Qinling Docker images with the policy.json file.
The reason why is because Qinling doesn't have default policies.
Change-Id: I13f64fcbfb3150efcb94af267f463eaddb11621d
Closes-Bug: #1830900
Implements: blueprint qinling-support
|
|
|
|
|
|
|
|
This package provides e.g. arping tool which is used by Neutron
services.
On e.g. RHEL7 it was probably installed as some dependency to other
package but on RHEL8 it's missing which cause some errors e.g.
in neutron_l3_agent container.
Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6
Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
|
|
Ubuntu/source deployment of horizon and placement-api failed:
+ exec /usr/sbin/apache2 -DFOREGROUND
apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot
Once directory is in place it works fine.
Change-Id: Icbd500e5b16deb0eafc0821a1c117794ddb8ae62
|
|
Bump version to include support for setting log message field
name.
Change-Id: Ib3953b49247bb36ac8ce25578c05c6bcb2a1905a
Partial-Bug: #1830184
|
|
|
|
... or "what I wish existed when I first became PTL"
Some general improvements to the contributor guide, plus new sections
for PTL duties and release management.
Change-Id: Ib3c1c8179adb7ad8e10d5e0223232b7a734bde53
|
|
|
|
We don't want to use Extended Maintenance (EM) tags, since these are
just markers of a point in time and not available as released artifacts.
Change-Id: If552f7ffc22d4b25769c14c083179eecf5a93158
|
|
Add Qinling Dockerfile , Qinling is an OpenStack project
to provide "Function as a service". This project aims to
provide a platform to support serverless functions.
Change-Id: Idebf5c8756a0d0225adcce29b45a399120bb5eb6
Implements: blueprint qinling-support
|
|
|
|
There's a regression[0] in bandit 1.6.0 which causes bandit to stop
respecting excluded directories, and our tests throw a bunch of
violations. Blacklist this version, but allow newer versions as there is
already a pull request[1] to fix it, and I expect it will be included in
the next release.
[0] https://github.com/PyCQA/bandit/issues/488
[1] https://github.com/PyCQA/bandit/pull/489
Change-Id: I4429614a57fb512fe2bfdf0686c3eff0adc2a2f4
|
|
|
|
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: '/etc/keystone/fernet-keys'
Severity: Low Confidence: Medium
Location: docker/keystone/keystone-fernet/fetch_fernet_tokens.py:27
More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
Ignore bandit failures on this line.
Change-Id: I9828c23e4bcec7553a69aa5f20e990e0ef0538ea
Closes-Bug: #1828416
|
|
Following the process set down in the TC resolution on updating Python
versions:
https://governance.openstack.org/tc/resolutions/20181024-python-update-process.html
Change-Id: I436fb2b84855fe5f8caaa0a072f0169965140db5
|
|
|
|
|
|
|
|
|
|
Change-Id: I51c4a4a139e87fd82f411d07683f62453889de9a
|
|
The docker image was built without sqlite package, which is required for
nfs backend. Without this package manila-share fails to start.
Change-Id: I2f7d8c283393ca947a1d51c6e3cd20e888fbc3e4
Closes-Bug: #1824511
|
|
The nova-placement-api image has been removed, since it was renamed to
placement-api in the Stein release.
Change-Id: I7907ececf0c195c1b86808cb17349251d16fd9af
|
|
|
|
|
|
This package provides just a wrapper script /usr/bin/kvm which run
qemu-system-x86 in kvm mode for backwards compatibility.
Change-Id: I0cc03a1ab5a79ae49fa7d13ac549e21d3ec5295d
|
|
This is to remove the unncessary slash when the line doesn't
exceed the length of 79, to make the code more readable.
Change-Id: I53fdb56f001837e833df46cb86cdaab9c710ac99
|
|
The line being removed is the cause of audit.log spam with a
SELinux enforcing (and permissive) system. They are due to the
fact we're calling "sudo" from within some containers, and PAM
wants to connect to the host "dbus" socket (mounted in /run).
This action is obviously denied by SELinux.
The "-" prefix makes this module optional anyway, but apparently
PAM does see it and tries to use it.
Dropping this module has no consequences other than preventing
log spamming.
Change-Id: I3e0e86026f5a4a78473bed824cd1682d3a020cd5
Co-Authored-By: Michele Baldessari <mbaldess@redhat.com>
Resolves-Bug: #1819461
|
|
Let's make clear that '--docker-dir' can be specified multiple times
as argument of kolla-build. It was not clear if '--docker-dir' options
accept comma separated list of values or it can be specified multiple
times.
Change-Id: I7cf9a7c2a6c7876e5784a3df93369e7fa5036173
Partial-Bug: #1827146
|
|
Change-Id: I209c3c60d5c2edb6856e81eb374fbcad648e3904
Closes-Bug: #1827025
|
|
|
|
|
|
Now that the required changes to extract Placement from Nova have landed
in kolla-ansible we can remove the nova-placement-api service from
kolla.
Change-Id: Ifff5c60f5690098619bf5a43f25ae3895a96e0d2
|
|
|