summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2019-06-17There is no Java 8 in Debian 'buster'Marcin Juszkiewicz3-4/+25
Debian 'buster' release contains Java 11 only. So kafka, logstash, storm images needed adjustments. Change-Id: I9f1e809d0ef1955b832dd384912f880088426306
2019-06-17Run nova api_db sync before db syncMark Goddard1-2/+2
Backport: Stein, Rocky Since cells v2 was introduced, nova operators must run two commands to migrate the database schemas of nova's databases - nova-manage api_db sync and nova-manage db sync. It is necessary to run them in this order, since the db sync may depend on schema changes made to the api database in the api_db sync. Executing the db sync first may fail, for example with the following seen in a Queens to Rocky upgrade: nova-manage db sync ERROR: Could not access cell0. Has the nova_api database been created? Has the nova_cell0 database been created? Has "nova-manage api_db sync" been run? Has "nova-manage cell_v2 map_cell0" been run? Is [api_database]/connection set in nova.conf? Is the cell0 database connection URL correct? Error: (pymysql.err.InternalError) (1054, u"Unknown column 'cell_mappings.disabled' in 'field list'") [SQL: u'SELECT cell_mappings.created_at AS cell_mappings_created_at, cell_mappings.updated_at AS cell_mappings_updated_at, cell_mappings.id AS cell_mappings_id, cell_mappings.uuid AS cell_mappings_uuid, cell_mappings.name AS cell_mappings_name, cell_mappings.transport_url AS cell_mappings_transport_url, cell_mappings.database_connection AS cell_mappings_database_connection, cell_mappings.disabled AS cell_mappings_disabled \nFROM cell_mappings \nWHERE cell_mappings.uuid = %(uuid_1)s \n LIMIT %(param_1)s'] [parameters: {u'uuid_1': '00000000-0000-0000-0000-000000000000', u'param_1': 1}] (Background on this error at: http://sqlalche.me/e/2j85) Despite this error, the command actually exits zero, so kolla does not notice the failure. This change reorders these two commands to run the api_db sync before the db sync. Change-Id: I0514c02aaee1a413a7979c3a426e0484df839861 Closes-Bug: #1832860
2019-06-15Merge "[neutron] Do not migrate all subprojects"Zuul1-1/+1
2019-06-15Merge "Remove Neutron LBaaS support"Zuul6-74/+1
2019-06-10Merge "Fix issues with Percona in Zuul and clean up a little bit"Zuul7-97/+13
2019-06-09Fix ownership of ironic inspector DHCP hostsdirMark Goddard1-1/+2
If you run with enable_ironic set to true and ironic_inspector_pxe_filter set to dnsmasq (the default in stein), ironic inspector can fail with the following in the logs: Permission denied: u'/var/lib/ironic-inspector/dhcp-hostsdir/<MAC address>' A node must be registered with a port for this to happen. Weirdly this happens on centos/source, ubuntu/source, and ubuntu/binary, but not centos/binary. This change changes the ownership of /var/lib/ironic-inspector/dhcp-hostsdir to ironic-inspector user to make it writeable. Change-Id: I19447727f19dbd9c0a3e17d218b48ddc4c253587 Closes-Bug: #1832026
2019-06-08Fix issues with Percona in Zuul and clean up a little bitRadosław Piliszek7-97/+13
Percona site has connectivity issues from OVH hosts (of Zuul). This patch makes it so that: - the internal repo is actually used - RPM GPG keys are downloaded from the actually used repo - Ubuntu mimics the RHEL behavior (i.e. the Percona repo is enabled only in the xtrabackup image) extra benefit: no need for APT preferences for Percona repo to spare MariaDB deps Change-Id: Id27831f6b404762f9e44fd6bd1c4702bf06b05f8 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-07grafana/aarch64: use package from upstream repositoriesMarcin Juszkiewicz4-17/+11
We were installing 5.2.4 version instead of just latest one like it is done on x86-64. Change-Id: If8434c6c05e415ac8d601260d02b25facbdef1f5
2019-06-07Merge "Use packagecloud/ubuntu rabbitmq repo for all archs"Zuul2-0/+6
2019-06-07Remove crane imageMark Goddard4-89/+0
This image was deprecated in the Stein cycle. Change-Id: I249b78cd263c97c4a9223523c77f8c325f3e649a
2019-06-07Remove nova-consoleauthStephen Finucane1-31/+0
The nova-consoleauth service was deprecated during the Rocky release [1] and has not been necessary since unless you're using cells v1. As Kolla has never supported cells v1, which is finally being removed during Train [2], we can get ahead of the curve and stop deploying nova-consoleauth immediately. [1] https://specs.openstack.org/openstack/nova-specs/specs/rocky/implemented/convert-consoles-to-objects.html [2] https://blueprints.launchpad.net/nova/+spec/remove-cells-v1/ Change-Id: I19d467adbc1dab6709ce9667b18f1bb6dff12c1e Signed-off-by: Stephen Finucane <stephenfin@redhat.com> Depends-On: I099080979f5497537e390f531005a517ab12aa7a
2019-06-07Remove Neutron LBaaS supportCarlos Goncalves6-74/+1
The project has been retired and there will be no Train release [1]. This patch removes Neutron LBaaS support in Kolla. [1] https://review.opendev.org/#/c/658494/ Depends-On: https://review.opendev.org/#/c/663875/ Change-Id: I99484c48ed09f7e015e134bdff1f298c359c6905
2019-06-07Merge "Debian/Ubuntu: more python3 packages for binary"Zuul29-85/+93
2019-06-07Merge "Debian/Ubuntu: move to Python 3 for source images"Zuul33-56/+99
2019-06-06Debian/Ubuntu: more python3 packages for binaryMark Goddard29-86/+94
backport: Stein During the switch to Stein UCA, we did not switch all packages to python 3 for Debian/Ubuntu binary images. This change switches some more of those packages. Change-Id: I0bff21384d88ea678608392de2db1ba418c96665 Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2019-06-06Debian/Ubuntu: move to Python 3 for source imagesMarcin Juszkiewicz33-56/+99
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3 based packages but not switched to use Python 3. Some of images still contain Python 2. There are two reasons: - Ceph (ceph-common depends on Py2) - python3-ldappool on Ubuntu 18.04 In Ceph situation Py3 packages were added. For second one we can not do anything - Py2 dependency got dropped in Ubuntu 18.10 version. Removed neutron-server-plugin-networking-infoblox due to being not maintained. Once https://review.opendev.org/#/c/657578/ get merged someone may revert that part. Implements: blueprint debian-ubuntu-python3 Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026 Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
2019-06-05[neutron] Do not migrate all subprojectsJason1-1/+1
Instead of migrating all Neutron subprojects at bootstrap time, target specifically the neutron, neutron-fwaas, and neutron-vpnaas subprojects speficially. If a subproject is not specified, all subprojects are migrated, which is not the intended behavior. Change-Id: Icb8d572b7f084804e0423a8a3171dd66646b3885
2019-06-05Remove tripleo-uiAlex Schultz2-74/+0
The tripleo-ui project has been removed from the upstream. Remove the references to the tripleo-ui containers. Change-Id: I353ecd3ed04c78fd21f0108c5e1355280d3f3bb9 Closes-Bug: #1831478
2019-06-05Merge "create missing apache2 directory on Debian/Ubuntu"Zuul23-0/+23
2019-06-05Use packagecloud/ubuntu rabbitmq repo for all archsMarcin Juszkiewicz2-0/+6
Change-Id: I880a33b56a2fe9b86de57326c80310a6a83c5e50
2019-06-05Merge "Ceph: Update to Nautilus on CentOS and OracleLinux"Zuul5-9/+51
2019-06-03Merge "Use the default policy.json for Qinling"Zuul1-1/+1
2019-06-03create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz23-0/+23
Ubuntu/source deployment of several images (horizon, placement-api, zun) failed with: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Change-Id: Ie2a1077f7def0743f1403341985e2109aa490026
2019-05-31Ceph: Update to Nautilus on CentOS and OracleLinuxMark Goddard5-9/+51
The CentOS Stein OpenStack distribution depends on the Ceph Nautilus release, while Kolla currently deploys Luminous on CentOS. This change switches CentOS and OracleLinux builds to use Ceph Nautilus. Support for auth UID has been removed in the Nautilus release [1][2], so we have removed the --set-uid argument from calls to ceph-authtool. Also ceph-osd bootstrap mode fails when no mon config is provided, so we added --no-mon-config (mon config is injected later after bootstrap). Due to ceph-nfs build issues (ceph upstream nfs-ganesha rpms relied on older version of userspace-rcu, than CentOS Storage SIG packages) we need to move to ceph upstream rpm repos. [1] https://github.com/ceph/ceph/commit/d6def8ba1126209f8dcb40e296977dc2b09a376e [2] http://docs.ceph.com/docs/master/releases/nautilus/ Co-Authored-By: Michal Nasiadka <michal.nasiadka@nokia.com> Change-Id: I000398f587c5f4d6cc8995e34e162eebc77bc3e3 Implements: blueprint centos-ceph-nautilus
2019-05-29Use td-agent-gem to install fluentd monasca plugin on ubuntuMark Goddard2-9/+10
If monasca is enabled on ubuntu, we see the following error in fluentd: [error]: config error file="/etc/td-agent/td-agent.conf" error_class=Fluent::ConfigError error="Unknown output plugin 'monasca'. Run 'gem search -rd fluent-plugin' to find plugins" This is because we use 'fluent-gem install' to install the gem, which works on CentOS but on Ubuntu it is necessary to use 'td-agent-gem install'. Change-Id: I515f9764ca93a41a871e520696193a9298856d08 Closes-Bug: #1830147
2019-05-29Use the default policy.json for QinlingGaetan Trellu1-1/+1
To avoid complexity and possible issue during the Qinling usage we should build the Qinling Docker images with the policy.json file. The reason why is because Qinling doesn't have default policies. Change-Id: I13f64fcbfb3150efcb94af267f463eaddb11621d Closes-Bug: #1830900 Implements: blueprint qinling-support
2019-05-28Merge "Install fluentd gem on debian/ubuntu for non x86_64"Zuul4-7/+31
2019-05-28Merge "create missing apache2 directory on Debian/Ubuntu"Zuul2-0/+2
2019-05-24Merge "Bump Monasca Fluentd plugin version"Zuul1-1/+1
2019-05-24Install iputils package in neutron containersSlawek Kaplonski1-0/+2
This package provides e.g. arping tool which is used by Neutron services. On e.g. RHEL7 it was probably installed as some dependency to other package but on RHEL8 it's missing which cause some errors e.g. in neutron_l3_agent container. Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6 Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
2019-05-23create missing apache2 directory on Debian/UbuntuMarcin Juszkiewicz2-0/+2
Ubuntu/source deployment of horizon and placement-api failed: + exec /usr/sbin/apache2 -DFOREGROUND apache2: Syntax error on line 80 of /etc/apache2/apache2.conf: DefaultRuntimeDir must be a valid directory, absolute or relative to ServerRoot Once directory is in place it works fine. Change-Id: Icbd500e5b16deb0eafc0821a1c117794ddb8ae62
2019-05-23Bump Monasca Fluentd plugin versionDoug Szumski1-1/+1
Bump version to include support for setting log message field name. Change-Id: Ib3953b49247bb36ac8ce25578c05c6bcb2a1905a Partial-Bug: #1830184
2019-05-22Merge "Fix multiple mon deployment failures"Zuul1-1/+11
2019-05-21Merge "nova-libvirt: in Debian qemu-kvm is x86 only"Zuul1-1/+4
2019-05-20Add Qinling containersGaetan Trellu6-0/+98
Add Qinling Dockerfile , Qinling is an OpenStack project to provide "Function as a service". This project aims to provide a platform to support serverless functions. Change-Id: Idebf5c8756a0d0225adcce29b45a399120bb5eb6 Implements: blueprint qinling-support
2019-05-13Merge "Update kubectl v1.5.4 to v1.11.0"Zuul1-1/+1
2019-05-09Fix bandit failure B105 in keystone fernetMark Goddard1-1/+2
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: '/etc/keystone/fernet-keys' Severity: Low Confidence: Medium Location: docker/keystone/keystone-fernet/fetch_fernet_tokens.py:27 More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html Ignore bandit failures on this line. Change-Id: I9828c23e4bcec7553a69aa5f20e990e0ef0538ea Closes-Bug: #1828416
2019-05-07Merge "[Trivial fix]Remove unnecessary slash"Zuul1-2/+1
2019-05-07Merge "Add sqlite package to manila-share"Zuul1-4/+8
2019-05-07Merge "Add template override for grafana plugins"Zuul1-2/+7
2019-05-07Update kubectl v1.5.4 to v1.11.0chenming1-1/+1
Change-Id: I51c4a4a139e87fd82f411d07683f62453889de9a
2019-05-07Add sqlite package to manila-shareRafal Wadolowski1-4/+8
The docker image was built without sqlite package, which is required for nfs backend. Without this package manila-share fails to start. Change-Id: I2f7d8c283393ca947a1d51c6e3cd20e888fbc3e4 Closes-Bug: #1824511
2019-05-07Merge "Drop systemd support from PAM"Zuul1-0/+4
2019-05-07Merge "Remove nova-placement-api"Zuul2-82/+0
2019-05-06nova-libvirt: in Debian qemu-kvm is x86 onlyMarcin Juszkiewicz1-1/+4
This package provides just a wrapper script /usr/bin/kvm which run qemu-system-x86 in kvm mode for backwards compatibility. Change-Id: I0cc03a1ab5a79ae49fa7d13ac549e21d3ec5295d
2019-05-06[Trivial fix]Remove unnecessary slashzhufl1-2/+1
This is to remove the unncessary slash when the line doesn't exceed the length of 79, to make the code more readable. Change-Id: I53fdb56f001837e833df46cb86cdaab9c710ac99
2019-05-01Drop systemd support from PAMCédric Jeanneret1-0/+4
The line being removed is the cause of audit.log spam with a SELinux enforcing (and permissive) system. They are due to the fact we're calling "sudo" from within some containers, and PAM wants to connect to the host "dbus" socket (mounted in /run). This action is obviously denied by SELinux. The "-" prefix makes this module optional anyway, but apparently PAM does see it and tries to use it. Dropping this module has no consequences other than preventing log spamming. Change-Id: I3e0e86026f5a4a78473bed824cd1682d3a020cd5 Co-Authored-By: Michele Baldessari <mbaldess@redhat.com> Resolves-Bug: #1819461
2019-04-30Add template override for grafana pluginsArnaud PARENT1-2/+7
Change-Id: I209c3c60d5c2edb6856e81eb374fbcad648e3904 Closes-Bug: #1827025
2019-04-29Merge "Reuse /var/lib/tempest symlink for rpm also"Zuul1-5/+2
2019-04-29Remove nova-placement-apiLee Yarwood2-82/+0
Now that the required changes to extract Placement from Nova have landed in kolla-ansible we can remove the nova-placement-api service from kolla. Change-Id: Ifff5c60f5690098619bf5a43f25ae3895a96e0d2
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 06:26:17 +0000