aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2025-01-07neutron-dhcp-agent: change dnsmasq.log rightsMichal Nasiadka2-0/+11
Fixes /var/log/kolla/neutron/dnsmasq.log rights so fluentd can read logs from that file. Closes-Bug: #1693712 Change-Id: I57e36ef07e8840eead2efde77e0ab9dfd4842931
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul2-1/+9
2024-12-30Merge "Remove setuptools pin"Zuul2-1/+3
2024-12-23cinder: Fix log dir permissionMichal Nasiadka1-0/+3
In order to add support to uwsgi (which is opening the log file after dropping privileges) we need to set proper permissions for /var/log/kolla/cinder directory Change-Id: I46da8fad93febbc462cbe42a0d96ef7d423b8965
2024-12-19Merge "Move uwsgi installation to openstack-base"Zuul3-7/+8
2024-12-18[letsencrypt] Rename script for updating certificatesMichal Arbet3-3/+3
This patch renames the update-haproxy-cert script to update-loadbalancer-cert to make the name more generic. The change is necessary because support for ProxySQL will be introduced in the next patch, requiring a name that reflects broader applicability. To keep the diff in the following patch clean and easier to review, this patch focuses exclusively on the rename. Change-Id: I15f9b5cf3976f4298cdc7da4530f2d7d09614e88
2024-12-17Update Let's Encrypt lego versionPiotr Parczewski2-3/+9
Change-Id: I979df16dea4499b470ce7a4e23df7927a5952aa7
2024-12-16Merge "magnum: Add helm binary for magnum-cluster-api"Zuul2-0/+11
2024-12-16Merge "Fix EAB support in letsencrypt"Zuul1-10/+12
2024-12-13Remove deprecated AngularJS plugins from GrafanaDawud2-1/+6
Change-Id: Id81ce23fed7c19211aa8b15abce185d990be8389
2024-12-13magnum: Add helm binary for magnum-cluster-apiMichal Nasiadka2-0/+11
Closes-Bug: #2091608 Change-Id: I52105f6cbf7529ce107cabf8a38a10525be7435c
2024-12-12Merge "Revert "CI: Pin requests to <2.32 for publish jobs""Zuul1-9/+0
2024-12-11Fix EAB support in letsencryptMichal Arbet1-10/+12
This patch fixes recently merged [1] patch. - Original patch added params function args eab, hmac, key_id, but then EXTERNAL_ACCOUNT_BINDING_OPTS var is passed into obtain_or_renew_certificate which can't work - This patch correctly set EXTERNAL_ACCOUNT_BINDING, HMAC, KEY_ID defaults and then call obtain_or_renew_certificate function with them. This will ensure that arguments are always set, so we can write if condtional correctly and process. [1] https://review.opendev.org/c/openstack/kolla/+/916617 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/933924 Change-Id: I406ff10edec9dc94b1a3de005080e149ee3ab3f2
2024-12-11Remove setuptools pinMichal Nasiadka2-1/+3
Change-Id: I7d08ebb65e2de82e3edba7bd9307b2b6ac8cb7a8
2024-12-11Merge "Revert "[release] Use Dalmatian sources by default""Zuul4-3/+4
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul6-25/+32
(Dalmatian)""
2024-12-11Revert "CI: Pin requests to <2.32 for publish jobs"Michal Nasiadka1-9/+0
This reverts commit 428f37124986019bedc897469f9b1f3470b62082. Reason for revert: Should be fixed now Change-Id: Ife393e7f1b00fa37921e7822668d6a40dd467d5b
2024-12-10Revert "[release] Use Dalmatian sources by default"Michal Nasiadka4-3/+4
This reverts commit 5af5febf50bc0a02422b437b16598570d0c5ffe3. Reason for revert: Epoxy cycle is on In addition to the revert skyline-apiserver aiosqlite u-c is removed until [1] is merged, designate rootwrap.conf.sample file has been renamed to rootwrap.conf and pycadf is bumped to 4.0.0. [1]: https://review.opendev.org/c/openstack/skyline-apiserver/+/935604 Change-Id: I1265633f0913b7927955564fac911a682615004a
2024-12-10Merge "Add Python 3.12 classifier"Zuul1-0/+1
2024-12-10Merge "CI: Stop using LABEL for ephemeral0"Zuul1-2/+1
2024-12-09Merge "Update release-management doc with openstack-manuals step"Zuul1-0/+4
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski2-1/+9
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b
2024-12-09CI: Stop using LABEL for ephemeral0Michal Nasiadka1-2/+1
For some reason it doesn't work in raxflex, i.e. the created filesystems label is not seen. Change-Id: I9c805b866ee359d2da150438ca78be25b1462988
2024-12-05Merge "Add Let's Encrypt EAB support"Zuul2-3/+33
2024-12-05Add Let's Encrypt EAB supportPiotr Parczewski2-3/+33
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/935656 Change-Id: I0b20d82a0061062f8aa9dfe179b1d02708ad610e
2024-12-02Add Python 3.12 classifierPierre Riteau1-0/+1
Change-Id: I56cf5a869e854f760874d207802173c89b04c0df
2024-12-02Change copy-cacerts behaviourRoman Krček1-19/+40
So far, the certificates were not part of config.json files for containers. With future patches that will remove container restarts based on triggers from config and service-copy-cert, it is important that all files that change during config are specified in config.json so that kolla-set-configs --check can detect those changes and based on that restart the container. This patch provides prerequisite for future patch in kolla-ansible. Comments from kevko: The script also takes into account whether review [1] is merged or not, ensuring that it will function correctly in both cases thanks to review [2], because using the state file, we can effectively verify whether the config.json that copies CA certs to /var/lib/kolla/share is being used or not. If we didn’t handle it this way, we would have to rely on checking whether the directory /var/lib/kolla/share exists or some another magic, which is insufficient because various states and combinations of Kolla image and Kolla-Ansible versions could result in certificates always being copied. This method provides a clear and definitive distinction. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651 [2] https://review.opendev.org/c/openstack/kolla/+/915440 Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka6-25/+32
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-28CI: Use debian/ubuntu images from quay mirrorMichal Nasiadka1-0/+9
Change-Id: I3fab494e939478458c2c299303f5c2c91943e0ec
2024-11-21Move uwsgi installation to openstack-baseMichal Nasiadka3-7/+8
Change-Id: I581ff79993d011b421d69295a6552cb14b8e2e66
2024-11-15Merge "Add mechanism for patching files in containers"Zuul210-5/+610
2024-11-15Add mechanism for patching files in containersMichal Arbet210-5/+610
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-11-08Merge "CI: Add reno linting"Zuul28-57/+71
2024-11-08CI: Add reno lintingMichal Nasiadka28-57/+71
Change-Id: I799d6bf7a381c377dee565c13b1732f7313520f4
2024-11-08Update release-management doc with openstack-manuals stepDr. Jens Harbott1-0/+4
After a release is made, kolla docs need to be added to the docs index. Change-Id: I204c288399992b66682415b4ccb4845cfa9ea064
2024-11-06Fix handling configs in base imageMichal Arbet3-0/+617
This commit restructures the handling of configuration files in set_configs.py, introducing functions for managing default configuration files first. Closes-Bug: #2060855 Change-Id: If91e0330dc149143c82d2183b8ddf6fa9f68d80e
2024-11-05Enhance logging format for better readabilityMichal Arbet2-1/+16
Added timestamp with milliseconds, log level, and custom date format to improve clarity and make logs more useful for debugging. Change-Id: Ice2d601eddb54bbb0e7e3be6f03ba6db58256c1f
2024-10-28Update master for stable/2024.2OpenStack Release Bot2-0/+7
Add file to the reno documentation build to show release notes for stable/2024.2. Use pbr instruction to increment the minor version number automatically so that master versions are higher than the versions on stable/2024.2. Sem-Ver: feature Change-Id: Ib8db1e811fc8bae9600730536a48b6358cbcf76d
2024-10-25Merge "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"19.0.0.0rc1Zuul6-32/+25
2024-10-24Merge "[release] Use Dalmatian sources by default"Zuul1-1/+1
2024-10-24[release] Use Dalmatian sources by defaultBartosz Bezak1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I9a671d63dc6c6919609b667704bc3ce6d91fa22b
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka6-32/+25
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-24CI: bump hackingMichal Nasiadka5-7/+8
Change-Id: I5f2177b7c2edc0e35ed2e8e9bdfc4be2f262309f
2024-10-24Merge "etcd: Bump version to v3.5.16"Zuul2-3/+9
2024-10-22Merge "Fix missing tss user in Ubuntu/Debian nova containers"Zuul3-0/+8
2024-10-22Fix missing tss user in Ubuntu/Debian nova containersRafal Lewandowski3-0/+8
Closes-Bug: #2067050 Change-Id: Ife426c073048ff27bdfd9f3af30aaaab8c2e4497
2024-10-09Add way to backup from MariaDB replica serverMichal Arbet3-1/+144
ProxySQL reports its version to MySQL clients, causing the backup process to fail when ProxySQL is used. This patch adds a new script that handles backups from the replica server directly, without modifying the original backup script. The new script retrieves the server address via the load balancer and connects directly to the replica server to execute the backup. Moreover, this reduces the risk that the backup will be inconsistent or that it will block OpenStack MySQL clients, because they are connected to a different server, and no one is connected to the replica, or that it will overload the load balancer (such as ProxySQL or HAProxy) which listens on the VIP. Closes-Bug: #2080818 Change-Id: Ibf7e40e8b059d733e114963022df06180249c650
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul5-9/+12
2024-10-07Merge "[release] Change RDO's DELOREAN_DEPS repo to Dalmatian"Zuul1-1/+1
2024-10-03aarch64: Exclude syslinux from ironic conductor packagesBartosz Bezak1-1/+5
The 'syslinux' package is not available on aarch64, so it is only included in the ironic conductor packages for x86_64 systems. Related-Bug: #1749780 Change-Id: I3eea308a0a70e47dd3b185eece106185b25616f5
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 07:58:44 +0000