| Age | Commit message (Collapse) | Author | Files | Lines |
|
Stein only.
Change-Id: I1d175b603bbc3adbd371a2d66401ed380378ea9e
|
|
Backport to all supported branches.
Change-Id: I4a13bbe959e3324f05d5cf78a3be2415eb2ba7ec
(cherry picked from commit 004d9eb5d575fcb140b4d90fb30ced0a81dd3e66)
|
|
Upstream removed Ubuntu repositories.
Train/Stein only
Change-Id: Ice125e101a689fd3df9d1cd9a093a026f9747a3e
|
|
For Stein (due to CentOS 7) includes as well:
- get_pip macro: fix for Python 2.7
- sensu-client: Pin simpleidn Ruby gem
simpleidn Ruby gem started requiring Ruby 2.2.
- monasca-grafana: Pin git Ruby gem
fpm Ruby gem started requiring git Ruby gem
git Ruby gem started requiring Ruby 2.3
- mark helm-repository as unbuildable
It no longer builds, it's not used, it's been removed...
Change-Id: I0c4d5e1ea16c6677813a334b38b3a22ad811531d
Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Depends-On: https://review.opendev.org/772501
(cherry picked from commit a8c12def858b57349207cab5fa8dabb3c23bdfa0)
|
|
|
|
The script should check for heat_user_domain explicitly instead of matching on "heat"
Closes-Bug: #1839824
Change-Id: Iac83444487d2aa96a0f90086029f43922d1e7856
(cherry picked from commit 5e946cac490077011709c7587dc5e0b06927464f)
|
|
This fixes the FC Cinder backend usage in Nova.
Change-Id: I036cfe3af3dd96625f986a820c78a10e6558b086
Closes-bug: #1884484
(cherry picked from commit 0c8702c96f852eae7a1fb784a260c01c15fb86f3)
|
|
There are several issues with kolla_set_configs --check:
1. We calculate the destination path incorrectly when comparing a file
in a directory, due to passing arguments to os.path.relpath in the
wrong order
2. For directories that have not changed, we also attempt to compare
them as files, which fails when they are open()ed.
3. If the config JSON does not have a config_files key, it fails with a
KeyError.
The first two issues affect the fluentd container, which specifies
directories as the source, without using a glob. The third affects OVN
containers.
This patch fixes these issues.
Closes-Bug: #1890567
Change-Id: I8921befe51da4282121443849177a7ca5ebe8822
(cherry picked from commit c5320eb22386c34d83435fa0b9aa03b178996b52)
|
|
Change-Id: I2b4cfdb25f3ff82d8d6fdebba8b75a818c10a388
(cherry picked from commit 9ca43b9ed7814045a0219e17524f4e2aed2f1771)
|
|
Switch to YAJI JSON parser as suggested in [1].
[1] https://docs.fluentd.org/quickstart/faq#i-got-encoding-error-inside-plugin-how-to-fix-it
Closes-Bug: #1889065
Change-Id: I2ecd3b029b956e000feaaa9e10a169521ba53d66
(cherry picked from commit 556d4353aa846765557cfdd3c6e087a25248c517)
|
|
ironic drivers-requirements installation fails with:
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc5 in position 2:
ordinal not in range(128)
Squashed ,,cherry-pick'' from stable/train - adding LANG block and locale-gen
for Ubuntu family in base Dockerfile:
https://review.opendev.org/#/c/684808/
https://review.opendev.org/#/c/691835/
https://review.opendev.org/#/c/694099/
Temporarily blocks bifrost building as well - to revert!
Change-Id: I79ee884ad35bf5166c9ea303d73416271ff5f637
|
|
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we
should remove the nss-systemd lookup from containers. The reasons for
this are as follows:
1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5
when this nss module is triggered it tries to talk to dbus.
It triggers a bunch of selinux denials and it makes little sense
to open all containers to talk to dbus.
In particular, if a container is run as non-privileged and bind-mounts
/run from the host, we will hit selinux denials like the following:
type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus"
2) It just makes little sense in a kolla-world to have containers
talk to dbus/systemd and it saves us some time when a lookup triggers
the systemd module for whatever reason. Especially because the
nss-systemd module does a few things which are not useful in a container
(ensures that the root and nobody users and groups remain resolvable,
SystemD's DynamicUser= feature, provide Lookup API via Varlink)
The sed regex gives us the wanted results:
$ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf
--- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000
+++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000
@@ -53,9 +53,9 @@
# group: db files
# In order of likelihood of use to accelerate lookup.
-passwd: sss files systemd
+passwd: sss files
shadow: files sss
-group: sss files systemd
+group: sss files
hosts: files dns myhostname
services: files sss
netgroup: sss
Related-Bug: #1883849
Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
(cherry picked from commit dc2ddfa9750f94430a5b04b62fc1fa6adcb234f8)
|
|
Both issues affect Train and earlier releases.
1. Fix monasca-grafana by pinning more Ruby gems
childprocess 3.0.0 and ffi 1.13.0 depend on Ruby 2.3.
2. Bump bifrost to 6.0.4
Bifrost had a fix to stop using the master branch of DIB which dropped
support for Python 2.
3. Drop docker-client from OracleLinux sensu-client image
The package fails to install due to a missing dependency on
subscription-manager.
Change-Id: Ida7e20833360bbca69c6aafc4f5d7cb375bb106f
Closes-Bug: #1882070
(cherry picked from commit 3784d32d9ceacf0dad8057092752f1ae7be37ed3)
|
|
This is a follow up for [1].
"rally-manage db" command was deprecated since 0.10.0 but Ubuntu ships
0.9.1 for Bionic.
[1] https://bugs.launchpad.net/kolla/+bug/1856693
Closes-Bug: #1872283
Change-Id: I5fb0fc4e6a8bf7ab07abc9c78f0673e3e764b4d1
|
|
Glance API image lacked nfs programs/utils to be able to mount
NFS exports.
This affected Glance usage with Cinder backend when NFS was used
as Cinder backend.
Closes-Bug: #1868574
Change-Id: I3aac1e6a7f7c5f839b036f15713af949fba206cc
(cherry picked from commit cac9d46aa6dbac6631bdcae67db125a88e1c3234)
|
|
|
|
This fixes the issue when keystone-manage output included
backslashes and/or double quotation marks which broke JSON string.
Change-Id: Ifae18c407210c12745d29fc4c95dca69aeafe6a8
Closes-bug: #1866017
(cherry picked from commit 33d184a731458bb45d1206bdae4fb172629a76e7)
|
|
Kolla was missing vitrage-persistor image required by Vitrage
for data storage.
Change-Id: Id5e143636f9a81e7294b775f3d8b9134bee58054
Closes-Bug: #1869319
(cherry picked from commit ad06096448a585a16ad73b610b0adc81b597ccec)
|
|
The sensu image became unbuildable, failing to install the ceph plugin:
Unable to resolve dependencies: sensu-plugins-ceph requires english (= 0.6.3)
This has happened because the author of the 'english' gem has seen fit
to publish a new 0.7.0 release, and 'yank' [1] all previous releases
from rubygems.
This change removes the ceph and process-checks plugins, which both
suffer from a dependency on the yanked english 0.6.3.
[1] https://rubygems.org/gems/english/versions/0.6.3
Change-Id: I9d34413fa10b5a2920aca60b08141bfaddcc7415
Closes-Bug: #1871600
(cherry picked from commit 818dc4d6ff12a3119be072e0c68e2d2c8da9b799)
|
|
The extend_start.sh script for cinder-api uses an incorrect test to
check if the MAX_NUMBER variable is set. This leads to a incorrect
cinder-manage command being run if this variable is not set, making the
database migration fail.
This change fixes the test to properly use the MAX_NUMBER variable.
Change-Id: Ie46da709db0de09a9cf641b3c154275282f213fc
Closes-Bug: #1866827
(cherry picked from commit ff42ff20048ef3b7d2f8df04ada8ff4bf7b710e0)
|
|
1. Pin openstacksdk and client libraries in kolla-toolbox
Stein and below only.
openstacksdk released 0.45.0 (and possibly 0.44.0 as well) which dropped
py2 compat but did not advertise the fact. It was amended later but it
will now always affect kolla images until pinned to older.
The observable error is:
"ImportError: No module named queue"
Since Train we pin u-c, but not before that.
This change introduces a version constraint for openstacksdk and client
libs:
- python-novaclient
- python-cinderclient
- python-keystoneclient
- python-glanceclient
2. Make deploy jobs non-voting
For similar reasons to 1., the deploy jobs fail when using the openstack
client for testing. Due to a dependency loop between these two projects,
we must make these jobs non-voting to fix the image build. This should
be reverted ASAP.
3. CI: Add https match for mirror.centos.org to template-overrides
Some CentOS repos (currently one - Ceph NFS Ganesha) use
https://mirror.centos.org instead of http:// and we break
their definition by removing mirrorlist= entry and not inserting baseurl
entry due to a missing match.
Original Change-Id: I7b29f8c6be80820042023d2b85162d5cc9a65f08
Change-Id: I8c2da6437333210a7926f2deb926ab5d1c93c3c6
Closes-Bug: #1870349
|
|
On AArch64 systems we are unable to deploy Stein due to lack of
mariabackup command.
Change-Id: I00b8c945470a0f63f23f2d0da74eed3189f5d9e5
Closes-bug: #1867750
|
|
manual backport from master changes:
- https://review.opendev.org/#/c/712987/
- https://review.opendev.org/#/c/713403
Upstream kibana package contains NodeJS x86-64 binaries so can not be
used directly on non-x86 architectures. I took upstream packages,
removed NodeJS binary from it and added 'nodejs' dependency.
Package is present in my Linaro OBS repository where I keep other
packages needed for aarch64 kolla run. Via APT pinning I mark them as
not wanted so they are not used on any architecture with two exceptions:
1. libvirt - we need fixed version to be able to use ThunderX servers
2. kibana - to be able to run it at all
For x86-64 upstream kibana package is used.
Closes-bug: #1867365
Change-Id: I955619d6992f8714ae753dc155e248d255340ecf
|
|
|
|
When doing a source install, ironic doesn't have python3-systemd as a
dependency and the current ironic-conductor container doesn't install
the required dependencies which causes the ansible deploy interface to
fail with the error, "Systemd bindings do not exist". This adds the
needed dependencies when doing a source build. This installs the needed
files for both rpm and deb builds on python 2.x and 3.x.
Change-Id: I5d1bcb0f7d7902b4e122c12697483433bcf52ca2
Closes-Bug: #1861427
(cherry picked from commit 4a67e58f7971641c55247f02985e13ef391ca7ab)
|
|
Adds ssh clients to Ironic Conductor container for
ansible deploy interface.
Change-Id: Ib995c6ebe5ee76ee1a39e4b5918a79bd61b87a01
Closes-Bug: #1862079
(cherry picked from commit 7234e8b2f72275c85caa146a6d9e49d1ab8281b7)
|
|
Backport: train
Closes-Bug: #1859047
Change-Id: I9032e43bffa3a3de6c33a4ab59f65bafb0129dd5
(cherry picked from commit 902f16cb1a8efc44da8669a6707d93d47160ae9d)
|
|
backport: train, stein, rocky
Override in filter needs to follow the rule:
<image_name>_<call_type>_<override/append/remove>
`call_type` for `kolla_toolbox_pip_virtualenv_packages` should be
`pip_virtualenv_packages`, and `pip_packages` can't match with
`kolla_toolbox_pip_virtualenv_packages`, this makes
the value can't be overrode in template override.
Change-Id: I1dbe2dfd4bce73ce2285f45f997d45b5dcc95f4c
Closes-bug: #1865119
(cherry picked from commit 74d5a66e6bf744ad936d702443a8d64be86441ba)
|
|
Fix inability to run UEFI-based images/instances by installing UEFI
packages also in nova-libvirt image which is not based on nova-base.
Adapted for Stein and below (e.g. Rocky) by removing
any C8 support.
Closes-Bug: #1814552
Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Co-authored-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I1d5cd3d9af98444acac5bedd7daeaa6c6673dcd6
(cherry picked from commit 15b68c15c1dd0c2df1cc49b550f2fa03a4c65e8e)
(cherry picked from commit ffaf585d0f05ccd9123459bb0cdf345af5b09573)
|
|
Change is required to properly implement logic in fernet-node-sync.sh on
kolla-ansible side - to add a check if fernet key store is populated with
required number of tokens.
Change-Id: I51ed61e34a1dd79532b4528e56a9cd9011d46e6d
Related-Bug: #1846789
(cherry picked from commit 267cb8b14ae8472d00e09c2b5e35bda7de2de54f)
|
|
Replaces 'swift-object' package with 'swift-object-expirer' package.
Change-Id: I8fa3fcad88b35743e042d8a62ccee722b08af673
Closes-Bug: #1859607
(cherry picked from commit 190a6f7a264c1ea8c0c565d2b75fb73fdc29d500)
|
|
'rally-manage db' command was deprecated since 0.10.0 [1]. Should use
'rally db' instead.
[1] https://rally.readthedocs.io/en/latest/project_info/release_notes/archive/v0.10.0.html#command-line-interface
Closes-Bug: #1856693
Change-Id: I578f7a6d907d5579180bc64c99c7e6c8edf3afc8
(cherry picked from commit 1114859b5cb940290f405cd64e34c6638dcebcae)
|
|
When [1] was committed, neutron stopped building for Train.
Analogous patch is proposed to other stable branches.
This patch removes neutron from upper-constraints.
Kolla master is affected directly because we build Train
for CentOS 7 atm.
1. https://review.opendev.org/#/c/697370/
Change-Id: I944e8e42fef1d359d767cbc6e1c13371ed753f31
|
|
When [1] was committed, horizon stopped building for Train.
Analogous patch is proposed to other stable branches.
This patch removes horizon from upper-constraints.
Kolla master is affected directly because we build Train
for CentOS 7 atm.
[1] https://opendev.org/openstack/requirements/commit/3e54878f9c87266e1b9775f72af06de27a3dad65
Co-authored-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I1bd5a40eeef9612d995c81426fe510e89f438725
(cherry picked from commit 8b7ec43536842dd500cc5ee1198a318070ac1046)
|
|
Ubuntu/source deployment of several images (horizon, placement-api, zun)
failed with:
+ exec /usr/sbin/apache2 -DFOREGROUND
apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot
Change-Id: Ie2a1077f7def0743f1403341985e2109aa490026
(cherry picked from commit 932f09bcd65e15524b5229fdb6bc73a7e0111b27)
|
|
Affected builds on Ubuntu which had:
npm 3.5.2
while the latest was:
npm 6.13.4
And CentOS had:
npm 5.6.0
This patch runs npm update via npm.
Pinned to 6.x.
Additionally, this moves npm packages prefix (root) to
/usr/local to avoid conflicts with native packages.
Change-Id: Ibaacc1cc478b2b2f8196a5da4eea3570d7d310ff
Closes-bug: #1856699
(cherry picked from commit 308e85aa413da84ed107b27fa09a3f0e0a64392f)
|
|
In some situations, Keystone bootstrap can fail, and then unhelpfully
fails displaying the error message output by the 'keystone-manage
bootstrap' command. This appears to be due to unprintable control
characters in the error message which prevent the output of the script
from being valid JSON.
This change fixes the issue by piping the output through 'cat -v', which
replaces unprintable characters with control codes.
Change-Id: I82444bc2272311023cc9e92c5a298d1c4c87483b
Closes-Bug: #1855701
(cherry picked from commit bcca3fabe305c1e206fdb231c31809ceff2d4774)
|
|
Change-Id: Ib56e62d1fb4d0fc4a6c627b87a929be0bc614d1e
Closes-bug: #1852086
(cherry picked from commit 0186c5e3cafeae0bb1c39bdef0df6ade827552d5)
|
|
|
|
Instead of doing a recursive chown on /srv/node, chown only /srv/node
and any immediate subdirectory under /srv/node.
Change-Id: I8fd93fa77ba9fc63910360300b8783a34bd4e6d5
Closes-Bug: #1851169
(cherry picked from commit 2d122afaf9817cadc668b308c4f736e47c09a55f)
|
|
manila-share cannot start on debian/ubuntu because python3-cephfs is missing.
Change-Id: Ia592dda4ee20979c701efe6007f236dba9848997
Closes-Bug: #1851692
(cherry picked from commit 1d5a208c2e5c81ed4169c63d1d5ea0ad31b78f2f)
|
|
|
|
|
|
This is a combination of 3 commits from Train. Rather than dropping
xtrabackup, we are keeping it in addition to adding support for
backups using mariabackup.
1. Drop Percona XtraBackup in favour of MariaDB Backup
XtraBackup started failing to install on Ubuntu and does not support
MariaDB 10.3 version.
Related-Bug: #1843043
I9cf62c8e03a02574d85e5349df1d23a51d4c99be
2. Fix mariabackup arguments
After switching from innobackupex to mariabackup [1] for database
backups, the kolla_mariadb_backup.sh script was not modified to account
for the difference in arguments between innobackupex and mariabackup.
There is a compatibility mode, the documentation [2] for which covers
some of the differences.
The following have been changed:
- Add explicit --backup argument, now required
- Remove './' positional argument - not required with --stream
- Remove --no-timestamp argument - only supported in innobackupex
compatibility mode
- Remove --incremental argument - implied by --incremental-history-name
- Remove deprecated --compress argument, which requires qpress to be
installed (it is not). The stream is now passed through gzip instead
[3]
[1] https://mariadb.com/kb/en/library/mariabackup-overview/
[2] https://mariadb.com/kb/en/library/mariabackup-options/#-innobackupex
[3] https://mariadb.com/kb/en/library/using-encryption-and-compression-tools-with-mariabackup/
I67cff47cbf56570b8eaeb66092dd87c2769fc8a6
Closes-Bug: #1843043
(cherry picked from commit 65b27d772be32738a8508ea8e6c07f74f229cdb7)
3. Set pipefail in kolla_mariadb_backup.sh
Without this, a failure in mariabackup would be ignored due to the pipe
to gzip.
I84536b302991e8fb04d5fa67ea266bc428437ce1
Related-Bug: #1843043
Change-Id: Idf1aed905a7d9ad461dd6fe17ed199c8d60370e6
|
|
We broke 'apt_sources_list' and 'apt_preferences' options quite a while
ago. Turned out that fix is quite simple.
This change adds empty sources.list and apt-preferences files which are
always added into images. If kolla-build.conf will use any of APT
related options then those files will be replaced with provided ones.
Change-Id: I7bbdcbd5c60f654a484a872209e0537e3950346c
Closes-bug: #1706549
(cherry picked from commit bf20b41e7dea702b693fa98ea27822c8a33a5591)
|
|
The ICMP probe in the Prometheus blackbox exporter requires
elevated privileges to function. Linux root user or CAP_NET_RAW
capability is required. Can be set by executing setcap
cap_net_raw+ep blackbox_exporter. This change also bumps the version
of the blackbox exporter to the next minor version to allow for this
support.
'+ep' means we're adding the capability as effective and permitted.
See: https://github.com/prometheus/blackbox_exporter
Change-Id: I1c3b817712ae10edd45de01382b044af2fb728bd
Closes-Bug: #1840631
Co-authored-by: Jack Heskett <Jack.Heskett@gresearch.co.uk>
(cherry picked from commit b5a4478b0fa9b775a9b5c45545e78e9215a50588)
|
|
|
|
Change-Id: I242945edba84b891ccbf82d5fcce8ef5fe37ad3d
(cherry picked from commit 939a56035b8f15b74dff2d68154963735b0f73b4)
|
|
xfsprogs is required for formatting XFS ephemeral disk partitions
when format=xfs is specified as instance create failes with
'mkfs.xfs: No such file or directory' due to missing xfsprogs
package in the nova-compute container.
Closes-Bug: #1850610
Change-Id: Iaf3414464f3dd747427247339c6b201b352063cb
(cherry picked from commit 9b1a243a3a1669532f25bbdcbc56b78f0f72882c)
|
|
Disables other sources with qpid packages.
Change-Id: I508b8258e0d0aacfa0e4ff56706b5f273d2fbf0a
Closes-bug: #1850044
(cherry picked from commit e41e86c805167b9ab2f5c6217f8f8ad5cf773f52)
|