summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2022-05-30Replace Certbot with Lego for Let's Encrypt containergeneralfuzz5-6/+69
Replaces Certbot with Lego for certificate retrieval and renewal. Lego includes support for DNS ACME Challenges. Adds ssh-client to LetsEncrypt and ssh-server to HAProxy to allow both the transfer of Let's Encrypt certificates to the HAProxy container and to enable live updating of HAProxy certifices using the HAProxy API exposed on the local HAProxy socket. Implements: blueprint letsencrypt-https Change-Id: I737e1ce5bfc37d0703879c8272a9e915084c5ca6
2022-05-29Use the new image naming scheme by defaultRadosław Piliszek7-22/+31
Adds a relevant reno to inform users about the change and the possibility to customise the prefix. Additionally, this patch includes the fix to Ubuntu image builds regarding rabbitmq and erlang. Both the changes are required to fix master CI. Change-Id: I6bc8b489a810849744c8bead6b9e350c5d3e36b7 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/843752
2022-05-24Merge "[CI] Move queue setting to project level"Zuul4-3/+3
2022-05-21[CI] Fix tags in publishingRadosław Piliszek1-1/+1
The original patch did not insert dashes as promised in the commit message. [1] [1] https://review.opendev.org/c/openstack/kolla/+/840164 Change-Id: Ibd6e06502ce56f5e0b44dea604ffee2fd9b7b8be
2022-05-21[bifrost] Force Bifrost to use the correct u-cRadosław Piliszek1-1/+1
Following up on [1], Bifrost also needs to use correct u-c and, surprise-surprise, this is set via a third variable, this time environment one for the bash script. Oh well. Let's do it. This has the added benefit of not requiring additional download of u-c as it reuses the already existing one. [1] https://review.opendev.org/c/openstack/kolla/+/842276 Change-Id: I2cc79c476d089977b57006dd4ce2e9a8c6206aa1
2022-05-18Fix local sources of git repositoriesRadosław Piliszek1-10/+11
This is I2cbf1f539880d512aa223c3ef3a4b19ee18854ac extended to fix the case when a git repository is used with a git repo. This is probably a rarer use case but, still, we use it in CI for in-review changes testing. Change-Id: I77b0dcd2e9dfd8ea8390a471b80c8954b67ef91b
2022-05-18Fix redis-sentinel containers always reporting changedMichal Arbet2-0/+35
The CONFIG REWRITE command rewrites the redis.conf file the server was started with, applying the minimal changes needed to make it reflect the configuration currently used by the server, which may be different compared to the original one because of the use of the CONFIG SET command. https://redis.io/commands/config-rewrite/ Because of above behaviour it's needed to hack kolla's CMD. Without this hack container's /usr/local/bin/kolla_set_configs --check is always reporting changed state even if config is not changed. Therefore redis containers are always restarted by kolla-ansible. This patch is fixing this. Change-Id: I8245b9e753fa4175dacfa679a078f63876b0d327 Partial-Bug: #1967664
2022-05-18[CI] Move queue setting to project levelRadosław Piliszek4-3/+3
Per [1]. [1] http://lists.zuul-ci.org/pipermail/zuul-discuss/2022-May/001801.html Change-Id: I46f03329853a2025bff20b7b60e35c06aba619eb
2022-05-18[bifrost] Force Bifrost to use the correct git branchRadosław Piliszek2-0/+7
Bifrost decides on the branches to use by itself. Early in the cycle, they are often not set correctly and may break our CI. This patch ensures we force Bifrost to use the expected branches, making us independent of Bifrost getting fixed. Change-Id: I33dbca927062284fd7a06ab6db732dd5e2219c40
2022-05-13Merge "[publishing] use a new naming scheme"Zuul6-3/+13
2022-05-06Merge "prometheus-libvirt-exporter: fix build with newer Go"Zuul1-1/+3
2022-05-06Update meeting timePierre Riteau2-2/+2
Change-Id: Ifa487c077f1feae19e3b021b2ba5dca2dd6d8a99
2022-05-06prometheus-libvirt-exporter: fix build with newer GoMarcin Juszkiewicz1-1/+3
I have no idea how Go works. This change make build happen. Change-Id: I09ea136c7354143f45f856d5e8d8ed1192879622
2022-05-02[publishing] use a new naming schemeRadosław Piliszek6-3/+13
This change switches published images names from the current format <base_distro>-<image_name>:<openstack_release>-<arch_suffix> to a preciser and image-oriented (for better variant listing) format <image_name>:<openstack_release>-<base_distro>-<base_distro_version>-<arch_suffix> Change-Id: I6a4b5c2087b94f96f72aa9d0d0781ff14d3ee6bb
2022-04-29Merge "Add multipath to cinder-volume"Zuul1-0/+2
2022-04-29Merge "Use rsync to update kayobe-config"Zuul1-1/+1
2022-04-27Use rsync to update kayobe-configPierre Riteau1-1/+1
Using cp will leave removed files in kayobe-config. Change-Id: I39ab4afa4b713ab1a573e2ad9922b4c847ad35ef
2022-04-27Add multipath to cinder-volumeVladislav Belogrudov1-0/+2
Cinder-volume container can operate on multipath devices but fails to do so due to absent multipath package for several images. This fix explicitely adds multipath to the image. Closes-Bug: #1970541 Change-Id: I14af40078508b06e46866b77ab200228ec827a0d
2022-04-26Bump up Alertmanager versionSven Kieske2-1/+5
Change-Id: I793e35ef347c9d44b4e870cd3ca1bd459e557623
2022-04-22Merge "adjust permissions on _extend_start files (part II)"Zuul41-41/+41
2022-04-22Merge "monasca-thresh: drop special handling for Ubuntu"Zuul1-6/+0
2022-04-22Merge "grafana: drop check for not supported architectures"Zuul1-7/+0
2022-04-22Merge "[release] Use yoga branch for neutron-vpnaas and monasca-api"Zuul1-6/+2
2022-04-22adjust permissions on _extend_start files (part II)Marcin Juszkiewicz41-41/+41
Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760
2022-04-22Merge "flatten images a bit"Zuul53-281/+246
2022-04-21Merge "Add fluent-logger to images"Zuul1-0/+1
2022-04-21Merge "Add support for checking more daemons"Zuul1-2/+34
2022-04-21Add fluent-logger to imagesMichal Arbet1-0/+1
There is proposed change in kolla-ansible below which is changing the way how central-logging works and adding native fluent logging. Because of this, it's needed to add python fluent library to openstack images. Proposed Change: - https://review.opendev.org/#/c/755775/ Change-Id: Iedc782a3317c93a2af0da4696fd71c05e0e4a55e
2022-04-21monasca-thresh: drop special handling for UbuntuMarcin Juszkiewicz1-6/+0
Bug mentioned in Dockerfile was fixed about 4 years ago. Change-Id: I6d90e6673b01756e7de7c8eeb29423cee0cce6f7
2022-04-21grafana: drop check for not supported architecturesMarcin Juszkiewicz1-7/+0
Kolla supports only AArch64 and x86-64 so there is no need to check for other architectures. Change-Id: I44e45492bcbdd56a5c985ba84bad66202c9fde55
2022-04-21flatten images a bitMarcin Juszkiewicz53-281/+246
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-21[release] Use yoga branch for neutron-vpnaas and monasca-apiMark Goddard1-6/+2
These were not available at the time we switched everything else. Venus remains unavailable. Change-Id: Ic9e54568a2844991b12e04ebfb1444b5cf286dbb
2022-04-21switch to short image names by defaultMarcin Juszkiewicz3-10/+2
We can drop temporary 'use-short-names' argument and make short (kolla/debian-nova-libvirt:master) image names default. Kolla Ansible is using short names now. Change-Id: I153355353cd12aa25adaa9c87438a478748dfb28
2022-04-21Add support for checking more daemonsMichal Arbet1-2/+34
This patch is changing the way how keepalived checks daemons liveness. Check_alive.sh will find checks for daemons which are copied by kolla-ansible and return 0/1 if alive/down. This patch is required for proxysql HA. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/770215 Change-Id: I68836918466beb572e42ffedce127747290ad481
2022-04-19add a way to not have 'install_type' in image name (temporary)Marcin Juszkiewicz3-3/+10
--use-short-names argument drops 'install_type' from image names: kolla/debian-openstack-base:14.1.0 This should allow to get rid of '-source' in image names without disrupting CI jobs. Switch publish jobs to use short names so k-a tests will have ready to use images for both long and short names. Change-Id: I29c9d51f4b518a4e2d3157ab5d6cc434fb83f2ef
2022-04-15enable logging to file for quiet modeMarcin Juszkiewicz3-11/+30
We have 'quiet' mode where only minimal data is printed to the console. But there were no logs at all then. This change generates log files (if 'logs-dir' argument is used) during quiet build. Also enables 'quiet' mode for CI so Zuul will not have to parse 29MB JSON file each time. Change-Id: If7d5c2807f0947a8bbbc1ceb8531c9b9c9287c1f
2022-04-15Revert "CI: add templated Dockerfiles to build logs"Radosław Piliszek2-2/+0
This reverts commit 09c890b12463a4b2c8767231189e7016f337fbc3. Reason for revert: That change caused all Kolla's work items to be transferred. This includes tarballs, their extracted contents, cloned git repositories, etc. to also be transferred to swift which takes extra time, pollutes logs and decreases the stability of jobs slightly (the mechanism is not designed for this kind of load). The collection of templated Dockerfiles in CI has to be reimplemented if it is wanted. Change-Id: Ideaf66ce18c993802f4d20f490caa47cec0dde5e
2022-04-14drop install_type almost everywhereMarcin Juszkiewicz8-85/+68
The only place where it stays is argument parsing where it gets ignored. Hardcoded to 'source' to make merging both kolla and kolla-ansible changes easier. Change-Id: I6890a7ec7baf507f8acd75b42bbd0fb17c2e4511 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/837620
2022-04-14Fix image builds with sources using a type=gitMarcin Juszkiewicz2-1/+20
A recent change to git [1] introduced a new behaviour to work around a CVE [2] that disallows any git operations in directories not owned by the current user. This may seem unrelated to installation, but it plays havoc with PBR, which calls out to git to get to get revision history. So if you are "pip install"-ing from a source tree you don't own, the PBR git calls in that tree now fail and the install blows up. When using type=source, kolla clones the repository, then creates a tarball from it, which is ADDed to the image. The ownership of the files in the tarball is preserved, which in this case will be the user running kolla-build. Since the Docker build runs as root, we hit the PBR issue. Our solution is to make sure that any tarball we generate from git sources have all files owned by root:root so that the root user is able to use git commands when building container images. [1] https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9 [2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24765. Closes-Bug: #1969096 Related-Bug: #1968877 Co-Authored-By: Mark Goddard <mark@stackhpc.com> Change-Id: I2cbf1f539880d512aa223c3ef3a4b19ee18854ac
2022-04-12Merge "drop list of images unbuildable for source type"Zuul1-3/+0
2022-04-12Merge "CI: drop 'source' from build job names"Zuul3-48/+48
2022-04-12Merge "Adjust permissions on _extend_start files."Zuul71-70/+75
2022-04-12Merge "Deprecate hacluster-pcs"Zuul1-0/+5
2022-04-12Merge "CI: drop install_type from build jobs"Zuul1-1/+0
2022-04-11CI: drop install_type from build jobsMarcin Juszkiewicz1-1/+0
Change-Id: If524e45dc262efb253fc06329d4567412282926d
2022-04-11Deprecate hacluster-pcsRadosław Piliszek1-0/+5
It is not used in k-a and has never been. Change-Id: I600cc276ba67d88928e6c2c87810459435b92650
2022-04-11Remove duplicate entry in UNBUILDABLE_IMAGESRadosław Piliszek1-1/+0
hacluster-pcs is already in centos, no need to be in centos+aarch64. TrivialFix Change-Id: I9868f73172efedf113c3cc1567098b3439e2a205
2022-04-11Adjust permissions on _extend_start files.Tim Shearer71-70/+75
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-11Merge "for Zed cycle minimal Python version is 3.8"Zuul1-1/+1
2022-04-11Merge "cyborg-agent: no need to check for install_type"Zuul1-4/+0
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-10 22:11:48 +0000