summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2019-06-12Move to releases.openstack.orgtonybrad1-3/+3
Change-Id: I7ec146d0edc96f5ce925792530c42d7eedf8a409
2019-06-11Fix lower-constraints test fail due to failing dep buildRadosław Piliszek2-2/+1
Ubuntu Bionic updated OpenSSL package to new release: from 1.1.0 to 1.1.1 It caused cryptography in version from lower-constraints to fail to build in Zuul. Additionally, constrained cryptography version did not match the requirement for constrained PyOpenSSL. This commit bumps the version to the minimum required by constrained PyOpenSSL. It works because manylinux1 (binary) wheel exists. This version agrees also with upper-constraints for Queens. Dependency on cryptography is removed as it is not used directly by kolla (and requirements checker requires lower-constraints matching version - let's not create an illusion of usage). Change-Id: I8ae19f212049cae5dfb4e8dd6ec6cd14a8c46e0e Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-10Merge "Fix issues with Percona in Zuul and clean up a little bit"Zuul8-99/+17
2019-06-10Merge "Debian/Ubuntu: allow to use unsigned repositories"Zuul1-6/+8
2019-06-10Disable and remove OracleLinux CI jobsMark Goddard1-58/+0
We have agreed to remove support for Oracle Linux, starting by disabling the CI jobs. http://lists.openstack.org/pipermail/openstack-discuss/2019-June/006896.html Change-Id: Ic7e7bedf36f98e3f7a0e2a22ec76136f4414c765
2019-06-09Fix ownership of ironic inspector DHCP hostsdirMark Goddard1-1/+2
If you run with enable_ironic set to true and ironic_inspector_pxe_filter set to dnsmasq (the default in stein), ironic inspector can fail with the following in the logs: Permission denied: u'/var/lib/ironic-inspector/dhcp-hostsdir/<MAC address>' A node must be registered with a port for this to happen. Weirdly this happens on centos/source, ubuntu/source, and ubuntu/binary, but not centos/binary. This change changes the ownership of /var/lib/ironic-inspector/dhcp-hostsdir to ironic-inspector user to make it writeable. Change-Id: I19447727f19dbd9c0a3e17d218b48ddc4c253587 Closes-Bug: #1832026
2019-06-08Fix issues with Percona in Zuul and clean up a little bitRadosław Piliszek8-99/+17
Percona site has connectivity issues from OVH hosts (of Zuul). This patch makes it so that: - the internal repo is actually used - RPM GPG keys are downloaded from the actually used repo - Ubuntu mimics the RHEL behavior (i.e. the Percona repo is enabled only in the xtrabackup image) extra benefit: no need for APT preferences for Percona repo to spare MariaDB deps Change-Id: Id27831f6b404762f9e44fd6bd1c4702bf06b05f8 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-07Add script to check for forbidden instructionsMartin André2-0/+50
When building images for binary type, it is expected to not install executables from untrusted sources, and gem, sensu-install, npm or pip packages for instance should come from the distro itself. This commit adds a `validate-binary-build.sh` script that checks for forbidden commands in the rendered Dockerfile templates for the binary type builds and hooks this script with the pep8 CI job. The output is just informative for now until we've fixed the culprit Dockerfiles, then we'll make the script return an error code and with the ability to fail the pep8 CI check. This should prevent unwanted commands from entering binary type Dockerfiles. Change-Id: I66e54bd18f4256cdca6c0c50626de4f975c246b8
2019-06-07Debian/Ubuntu: allow to use unsigned repositoriesMarcin Juszkiewicz1-6/+8
When we run Debian 'buster' or Ubuntu 18.04 in CI job they refuse to work as infra mirror is not signed. This patch instructs APT to use unsigned repos anyway. Change-Id: I530fde5b57894afda2de98d7c217e735497e3feb
2019-06-07grafana/aarch64: use package from upstream repositoriesMarcin Juszkiewicz4-17/+11
We were installing 5.2.4 version instead of just latest one like it is done on x86-64. Change-Id: If8434c6c05e415ac8d601260d02b25facbdef1f5
2019-06-07Merge "Use packagecloud/ubuntu rabbitmq repo for all archs"Zuul2-0/+6
2019-06-07Remove crane imageMark Goddard8-99/+5
This image was deprecated in the Stein cycle. Change-Id: I249b78cd263c97c4a9223523c77f8c325f3e649a
2019-06-07Remove nova-consoleauthStephen Finucane2-31/+8
The nova-consoleauth service was deprecated during the Rocky release [1] and has not been necessary since unless you're using cells v1. As Kolla has never supported cells v1, which is finally being removed during Train [2], we can get ahead of the curve and stop deploying nova-consoleauth immediately. [1] https://specs.openstack.org/openstack/nova-specs/specs/rocky/implemented/convert-consoles-to-objects.html [2] https://blueprints.launchpad.net/nova/+spec/remove-cells-v1/ Change-Id: I19d467adbc1dab6709ce9667b18f1bb6dff12c1e Signed-off-by: Stephen Finucane <stephenfin@redhat.com> Depends-On: I099080979f5497537e390f531005a517ab12aa7a
2019-06-07Remove Neutron LBaaS supportCarlos Goncalves8-86/+11
The project has been retired and there will be no Train release [1]. This patch removes Neutron LBaaS support in Kolla. [1] https://review.opendev.org/#/c/658494/ Depends-On: https://review.opendev.org/#/c/663875/ Change-Id: I99484c48ed09f7e015e134bdff1f298c359c6905
2019-06-07Merge "Ignore EM releases in version-check.py"Zuul1-0/+4
2019-06-07Merge "Debian/Ubuntu: more python3 packages for binary"Zuul29-85/+93
2019-06-07Merge "Debian/Ubuntu: move to Python 3 for source images"Zuul36-62/+105
2019-06-06Merge "Remove tripleo-ui"Zuul5-90/+4
2019-06-06Debian/Ubuntu: more python3 packages for binaryMark Goddard29-86/+94
backport: Stein During the switch to Stein UCA, we did not switch all packages to python 3 for Debian/Ubuntu binary images. This change switches some more of those packages. Change-Id: I0bff21384d88ea678608392de2db1ba418c96665 Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2019-06-06Debian/Ubuntu: move to Python 3 for source imagesMarcin Juszkiewicz36-62/+105
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3 based packages but not switched to use Python 3. Some of images still contain Python 2. There are two reasons: - Ceph (ceph-common depends on Py2) - python3-ldappool on Ubuntu 18.04 In Ceph situation Py3 packages were added. For second one we can not do anything - Py2 dependency got dropped in Ubuntu 18.10 version. Removed neutron-server-plugin-networking-infoblox due to being not maintained. Once https://review.opendev.org/#/c/657578/ get merged someone may revert that part. Implements: blueprint debian-ubuntu-python3 Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026 Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
2019-06-06Merge "Blacklist bandit 1.6.0"Zuul2-2/+3
2019-06-05[neutron] Do not migrate all subprojectsJason1-1/+1
Instead of migrating all Neutron subprojects at bootstrap time, target specifically the neutron, neutron-fwaas, and neutron-vpnaas subprojects speficially. If a subproject is not specified, all subprojects are migrated, which is not the intended behavior. Change-Id: Icb8d572b7f084804e0423a8a3171dd66646b3885
2019-06-05Allow building images if parent was skippedJason1-1/+3
This fixes a bug where if an image had a parent that was skipped, it would never get built. Normally when a parent finishes building it triggers the build of its children. This process is kicked off by Kolla finding the grandparents that have no parents above them. However, sometimes parents should be skipped, and in this case they would never get scheduled, and so their children would never build, producing a strange error without much information. Fix is to allow building an image if its parent is explicitly marked as having been skipped. The use-case for this is when you want to iterate on building an image without going through the cost of re-running the parent builds. In particular, if your builds are using Git sources, which break Docker caches, the cost of parent builds is high and the feedback loop during development has a much higher latency. Allowing some way for images to be rebuilt in a targeted manner is helpful when in the development phase. Change-Id: I6b6897d20626825bcd235b9a85859644effbd222 Closes-Bug: #1810979
2019-06-05Remove tripleo-uiAlex Schultz5-90/+4
The tripleo-ui project has been removed from the upstream. Remove the references to the tripleo-ui containers. Change-Id: I353ecd3ed04c78fd21f0108c5e1355280d3f3bb9 Closes-Bug: #1831478
2019-06-05Merge "create missing apache2 directory on Debian/Ubuntu"Zuul23-0/+23
2019-06-05Use packagecloud/ubuntu rabbitmq repo for all archsMarcin Juszkiewicz2-0/+6
Change-Id: I880a33b56a2fe9b86de57326c80310a6a83c5e50
2019-06-05Merge "Ceph: Update to Nautilus on CentOS and OracleLinux"Zuul5-9/+51
2019-06-03Merge "Use the default policy.json for Qinling"Zuul1-1/+1
2019-06-03create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz23-0/+23
Ubuntu/source deployment of several images (horizon, placement-api, zun) failed with: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Change-Id: Ie2a1077f7def0743f1403341985e2109aa490026
2019-06-02Merge "Update contributor guide"Zuul6-17/+355
2019-05-31Ceph: Update to Nautilus on CentOS and OracleLinuxMark Goddard5-9/+51
The CentOS Stein OpenStack distribution depends on the Ceph Nautilus release, while Kolla currently deploys Luminous on CentOS. This change switches CentOS and OracleLinux builds to use Ceph Nautilus. Support for auth UID has been removed in the Nautilus release [1][2], so we have removed the --set-uid argument from calls to ceph-authtool. Also ceph-osd bootstrap mode fails when no mon config is provided, so we added --no-mon-config (mon config is injected later after bootstrap). Due to ceph-nfs build issues (ceph upstream nfs-ganesha rpms relied on older version of userspace-rcu, than CentOS Storage SIG packages) we need to move to ceph upstream rpm repos. [1] https://github.com/ceph/ceph/commit/d6def8ba1126209f8dcb40e296977dc2b09a376e [2] http://docs.ceph.com/docs/master/releases/nautilus/ Co-Authored-By: Michal Nasiadka <michal.nasiadka@nokia.com> Change-Id: I000398f587c5f4d6cc8995e34e162eebc77bc3e3 Implements: blueprint centos-ceph-nautilus
2019-05-29Use td-agent-gem to install fluentd monasca plugin on ubuntuMark Goddard2-9/+10
If monasca is enabled on ubuntu, we see the following error in fluentd: [error]: config error file="/etc/td-agent/td-agent.conf" error_class=Fluent::ConfigError error="Unknown output plugin 'monasca'. Run 'gem search -rd fluent-plugin' to find plugins" This is because we use 'fluent-gem install' to install the gem, which works on CentOS but on Ubuntu it is necessary to use 'td-agent-gem install'. Change-Id: I515f9764ca93a41a871e520696193a9298856d08 Closes-Bug: #1830147
2019-05-29Use the default policy.json for QinlingGaetan Trellu1-1/+1
To avoid complexity and possible issue during the Qinling usage we should build the Qinling Docker images with the policy.json file. The reason why is because Qinling doesn't have default policies. Change-Id: I13f64fcbfb3150efcb94af267f463eaddb11621d Closes-Bug: #1830900 Implements: blueprint qinling-support
2019-05-28Merge "Install fluentd gem on debian/ubuntu for non x86_64"Zuul4-7/+31
2019-05-28Merge "create missing apache2 directory on Debian/Ubuntu"Zuul2-0/+2
2019-05-24Merge "Bump Monasca Fluentd plugin version"Zuul1-1/+1
2019-05-24Install iputils package in neutron containersSlawek Kaplonski1-0/+2
This package provides e.g. arping tool which is used by Neutron services. On e.g. RHEL7 it was probably installed as some dependency to other package but on RHEL8 it's missing which cause some errors e.g. in neutron_l3_agent container. Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6 Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
2019-05-23create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz2-0/+2
Ubuntu/source deployment of horizon and placement-api failed: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Once directory is in place it works fine. Change-Id: Icbd500e5b16deb0eafc0821a1c117794ddb8ae62
2019-05-23Bump Monasca Fluentd plugin versionDoug Szumski1-1/+1
Bump version to include support for setting log message field name. Change-Id: Ib3953b49247bb36ac8ce25578c05c6bcb2a1905a Partial-Bug: #1830184
2019-05-22Merge "Fix multiple mon deployment failures"Zuul1-1/+11
2019-05-21Update contributor guideMark Goddard6-17/+355
... or "what I wish existed when I first became PTL" Some general improvements to the contributor guide, plus new sections for PTL duties and release management. Change-Id: Ib3c1c8179adb7ad8e10d5e0223232b7a734bde53
2019-05-21Merge "nova-libvirt: in Debian qemu-kvm is x86 only"Zuul1-1/+4
2019-05-20Ignore EM releases in version-check.pyMark Goddard1-0/+4
We don't want to use Extended Maintenance (EM) tags, since these are just markers of a point in time and not available as released artifacts. Change-Id: If552f7ffc22d4b25769c14c083179eecf5a93158
2019-05-20Add Qinling containersGaetan Trellu10-0/+121
Add Qinling Dockerfile , Qinling is an OpenStack project to provide "Function as a service". This project aims to provide a platform to support serverless functions. Change-Id: Idebf5c8756a0d0225adcce29b45a399120bb5eb6 Implements: blueprint qinling-support
2019-05-15Merge "Update Python 3 test runtimes for Train"Zuul1-2/+1
2019-05-15Blacklist bandit 1.6.0confi-surya2-2/+3
There's a regression[0] in bandit 1.6.0 which causes bandit to stop respecting excluded directories, and our tests throw a bunch of violations. Blacklist this version, but allow newer versions as there is already a pull request[1] to fix it, and I expect it will be included in the next release. [0] https://github.com/PyCQA/bandit/issues/488 [1] https://github.com/PyCQA/bandit/pull/489 Change-Id: I4429614a57fb512fe2bfdf0686c3eff0adc2a2f4
2019-05-13Merge "Update kubectl v1.5.4 to v1.11.0"Zuul1-1/+1
2019-05-09Fix bandit failure B105 in keystone fernetMark Goddard1-1/+2
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: '/etc/keystone/fernet-keys' Severity: Low Confidence: Medium Location: docker/keystone/keystone-fernet/fetch_fernet_tokens.py:27 More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html Ignore bandit failures on this line. Change-Id: I9828c23e4bcec7553a69aa5f20e990e0ef0538ea Closes-Bug: #1828416
2019-05-09Update Python 3 test runtimes for Trainconfi-surya1-2/+1
Following the process set down in the TC resolution on updating Python versions: https://governance.openstack.org/tc/resolutions/20181024-python-update-process.html Change-Id: I436fb2b84855fe5f8caaa0a072f0169965140db5
2019-05-07Merge "[Trivial fix]Remove unnecessary slash"Zuul1-2/+1
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-07 03:13:44 +0000