summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2022-09-27grafana: ignore SHA1 gpg key on CentOS Stream 9 (and family)Marcin Juszkiewicz2-1/+6
RHEL 9 refuses to use SHA1 gpg keys. Grafana team still did not handled key upgrade: https://github.com/grafana/grafana/issues/41036 Change-Id: Id963271103ce1397b7a5498d032e8f797edfcc70
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz22-69/+105
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-09-23Merge "centos: we install 'hostname' in base image"Zuul3-3/+0
2022-09-13centos: we install 'hostname' in base imageMarcin Juszkiewicz3-3/+0
There is no need to install it in other images. Change-Id: I9fdb987533662ee532141b06fc23b64c92788429
2022-09-12Add missing labels blocksChristian Berendt2-1/+5
Change-Id: I1396131c3e33e5f139339a203ebfb48841a358d7
2022-09-06Merge "Debian: use OpenStack Zed repos"Zuul1-1/+1
2022-09-06Merge "Fix CVE-2022-38060"Zuul2-17/+4
2022-09-02prometheus-ovn-exporter: use sha256sumMarcin Juszkiewicz1-1/+1
shasum requires 30M of Perl on CentOS 9 while sha256sum is already present. Change-Id: I9372ebc643fced497ab01480f4c7cd6caa65c282
2022-09-01Merge "prometheus: Add OVN exporter"Zuul1-0/+36
2022-09-01Debian: use OpenStack Zed reposMarcin Juszkiewicz1-1/+1
With source base images we use small amount of packages from there. Some Python/JS updates and novnc/spice stuff. Change-Id: I41d8d3ae0e43ba7b54b126e076134f13dcab7859
2022-08-31Merge "Revert "Workaround setuptools==60.0.0 breakages""Zuul1-3/+0
2022-08-31Merge "Make keystone_bootstrap accept no ADMIN_URL too"Zuul1-4/+12
2022-08-31Merge "Bump prometheus services to latest version"Zuul11-43/+30
2022-08-30Bump prometheus services to latest versionwuchunyang11-43/+30
blackbox_exporter -> 0.22.0 prometheus_cadvisor -> 0.45.0 elasticsearch_exporter -> 1.5.0 haproxy_exporter -> 0.13.0 prometheus_libvirt_exporter -> 2.3.2 memcached_exporter_version -> 0.10.0 prometheus_msteams -> 1.5.1 prometheus_mtail -> v3.0.0-rc50 mysqld_exporter -> 0.14.0 node_exporter -> 1.3.1 prometheus -> 2.38.0 Change-Id: I3452e8904992bfb977dcae4084a0d98aab82e221
2022-08-30Merge "rabbitmq: Update to 3.10"Zuul3-6/+6
2022-08-29Fix CVE-2022-38060Radosław Piliszek2-17/+4
Closes-Bug: #1985784 Change-Id: I66476a2b396e2cbe41e68ac51f57aae1806b2ed8
2022-08-26Make keystone_bootstrap accept no ADMIN_URL tooRadosław Piliszek1-4/+12
To be able to drop the dummy arg. Change-Id: Ibcc3e6b4e6015604c218e384d87de7b9e9aed4c8
2022-08-25prometheus: Add OVN exporterMichał Nasiadka1-0/+36
Change-Id: I2a1d97421f53e63bb2e8d93dcdbc9b738e39670d
2022-08-25Add python-binary-memcached to openstack-basewu.chunyang1-0/+1
python-binary-memcached is required by keystone cache. ref: https://docs.openstack.org/keystone/latest/admin/configuration.html#caching-layer Change-Id: Ibaf5925607b45bc8e69af39f2d1cdcb49332f9f0
2022-08-24Merge "Add Ubuntu Jammy MariaDB repository"Zuul1-0/+4
2022-08-24Add Ubuntu Jammy MariaDB repositoryMichal Nasiadka1-0/+4
Change-Id: I15b08cca39a3bd069cb714c5b3164fd8254d8d30
2022-08-23Merge "mariadb: Fix RPM repository URLs"Zuul2-6/+6
2022-08-22mariadb: Fix RPM repository URLsMark Goddard2-6/+6
The MariaDB project changed the location of the repositories, and the old URLs no longer work. Change-Id: Ia094cd1e29232c47d1fb26e00de569677bc5b8a1
2022-08-22curl: Add retriesMichal Nasiadka1-0/+1
Change default 0 retries to 5, that should help for transient errors (timeouts, HTTP 408, 429, 500, 502, 503 or 504). Change-Id: Iad3c7270579ffb38299269481ac64d5582abaa22
2022-08-22rabbitmq: Update to 3.10Michal Nasiadka3-6/+6
3.10 comes with quorum queues support, Erlang 25 is the recommended series. Change-Id: I67f8df66b4896a9b223c02ed09f68f3f43693849
2022-08-22Switch to use Zed binary packages from UCADr. Jens Harbott2-2/+2
At R-8 week we are moving to current release binary packages for Ubuntu. Change-Id: I06d2cf01a10bf5fb967fd22c9e55833bace7379b
2022-08-09Remove Keystone admin endpointRadosław Piliszek1-3/+2
It can still be optionally enabled in Kolla Ansible. Change-Id: I34ec4a2e9505e9b4c1b8306b87fcd7242a0da227
2022-08-09Don't install the tooz etcd3 extraStephen Finucane1-1/+1
The etcd3 extra in tooz has been deprecated [1] as the library it uses under the hood, python-etcd3, is currently stale and unmaintained. It will be removed in a future release. Stop installing this. [1] https://opendev.org/openstack/tooz/commit/7ee2780af87a013c83fb5a8a5d0c7ab0767b3db8 Change-Id: Ib54a2868cb33de5fc2800f314b2811c67ef13461 Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2022-07-29mariadb-clustercheck: do not install xinetdMarcin Juszkiewicz1-8/+0
We moved to socat on kolla-ansible side. Change-Id: Icce201677dceaab8ca6f045158bbf565eef3a324
2022-07-28Run proxysql with proxysql userMichal Arbet3-14/+11
This patch is switching root user to proxysql user and provides some necessary changes to work. Change-Id: Id603cc1e9c084eac8afc4c6d2ddde9a1f4fe6728
2022-07-27Move to Ubuntu Jammy (22.04)Michal Nasiadka2-10/+10
mariadb - downloads.mariadb.com doesn't have jammy version, should be there soon - using Ubuntu provided version for now telegraf/collectd - collectd packages missing in Jammy - marked as unbuildable monasca - requires new librdkafka, no wheel for Python 3.10 for now Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/846070 Change-Id: I11b4fbcaba165824252902d0270ce1dbbc3d6e9d
2022-07-26Merge "Install etcd binary from github"Zuul1-6/+10
2022-07-21Update ProxySQL to version 2.4Michal Arbet2-4/+4
This patch is updating ProxySQL from version 2.3 to version 2.4, which has several new features and bugfixes. Change-Id: I625f72aac591aee8b1efe51f0b4a9e7660e6dbdc
2022-07-20Install etcd binary from githubWill Szumski1-6/+10
Removes a dependency on RDO for install etcd in CentOS images. Aligns version of etcd across all distributions, see below: ``` (venv-kolla) [will@juno kolla]$ docker run --rm -it kolla/ubuntu-source-etcd:yoga bash ()[etcd@730a011b670a /]$ etcd --version etcd Version: 3.2.26 Git SHA: Not provided (use ./build instead of go build) Go Version: go1.13.7 Go OS/Arch: linux/amd64 ``` ``` (venv-kolla) [will@juno kolla]$ sudo docker run -it kolla/centos-source-etcd:yoga bash ()[etcd@9aa486c9e94f /]$ etcd --version etcd Version: 3.2.21 Git SHA: 3ac81f3 Go Version: go1.12.8 Go OS/Arch: linux/amd64 ``` ``` (venv-kolla) [will@juno kolla]$ docker run --rm -it kolla/debian-source-etcd:yoga bash ()[etcd@b49cb5fcdf87 /]$ etcd --version etcd Version: 3.3.25 Git SHA: Not provided (use ./build instead of go build) Go Version: go1.15.9 Go OS/Arch: linux/amd64 ``` This will also allow us to update to a more recent version in the future. We have to be careful not to jump by more than one point release to ensure compatibility: https://etcd.io/docs/v3.5/upgrades/upgrading-etcd/#upgrading-an-etcd-v3x-cluster Change-Id: I62a34256fb7395d0448af169ac3cf036f60cd290
2022-06-22Bump prometheus-openstack-exporter version to 1.6.0Pierre Riteau1-5/+5
Change-Id: I4bd581c3ea422e1c9a075a71721413d47fdbdfe4 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/828902
2022-06-17Bump skydive version to 0.28Daniel Stoye1-1/+1
Skydive versions prior to 0.28.0 panic on newer versions of libc. Fixed upstream in 0.28, see: https://github.com/skydive-project/skydive/issues/2329 This should be backported to at least xena and yoga, as skydive is currently not working with centos 8 on these releases. Closes-Bug: #1940862 Change-Id: I177949b9319a977c9cd9121eb28b710256b72a5a
2022-06-09Switch OPENSTACK_RELEASE back to masterMichal Nasiadka1-0/+3
Cap openstacksdk in kolla-toolbox to avoid ansible-openstack-collection from failing. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/844905 Change-Id: I4d7dcc413cd9ab0b9db550e1aed7d2229b04c5d1
2022-05-30Replace Certbot with Lego for Let's Encrypt containergeneralfuzz5-6/+69
Replaces Certbot with Lego for certificate retrieval and renewal. Lego includes support for DNS ACME Challenges. Adds ssh-client to LetsEncrypt and ssh-server to HAProxy to allow both the transfer of Let's Encrypt certificates to the HAProxy container and to enable live updating of HAProxy certifices using the HAProxy API exposed on the local HAProxy socket. Implements: blueprint letsencrypt-https Change-Id: I737e1ce5bfc37d0703879c8272a9e915084c5ca6
2022-05-29Use the new image naming scheme by defaultRadosław Piliszek1-2/+2
Adds a relevant reno to inform users about the change and the possibility to customise the prefix. Additionally, this patch includes the fix to Ubuntu image builds regarding rabbitmq and erlang. Both the changes are required to fix master CI. Change-Id: I6bc8b489a810849744c8bead6b9e350c5d3e36b7 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/843752
2022-05-21[bifrost] Force Bifrost to use the correct u-cRadosław Piliszek1-1/+1
Following up on [1], Bifrost also needs to use correct u-c and, surprise-surprise, this is set via a third variable, this time environment one for the bash script. Oh well. Let's do it. This has the added benefit of not requiring additional download of u-c as it reuses the already existing one. [1] https://review.opendev.org/c/openstack/kolla/+/842276 Change-Id: I2cc79c476d089977b57006dd4ce2e9a8c6206aa1
2022-05-18Fix redis-sentinel containers always reporting changedMichal Arbet2-0/+35
The CONFIG REWRITE command rewrites the redis.conf file the server was started with, applying the minimal changes needed to make it reflect the configuration currently used by the server, which may be different compared to the original one because of the use of the CONFIG SET command. https://redis.io/commands/config-rewrite/ Because of above behaviour it's needed to hack kolla's CMD. Without this hack container's /usr/local/bin/kolla_set_configs --check is always reporting changed state even if config is not changed. Therefore redis containers are always restarted by kolla-ansible. This patch is fixing this. Change-Id: I8245b9e753fa4175dacfa679a078f63876b0d327 Partial-Bug: #1967664
2022-05-18[bifrost] Force Bifrost to use the correct git branchRadosław Piliszek1-0/+2
Bifrost decides on the branches to use by itself. Early in the cycle, they are often not set correctly and may break our CI. This patch ensures we force Bifrost to use the expected branches, making us independent of Bifrost getting fixed. Change-Id: I33dbca927062284fd7a06ab6db732dd5e2219c40
2022-05-06prometheus-libvirt-exporter: fix build with newer GoMarcin Juszkiewicz1-1/+3
I have no idea how Go works. This change make build happen. Change-Id: I09ea136c7354143f45f856d5e8d8ed1192879622
2022-04-29Merge "Add multipath to cinder-volume"Zuul1-0/+2
2022-04-27Add multipath to cinder-volumeVladislav Belogrudov1-0/+2
Cinder-volume container can operate on multipath devices but fails to do so due to absent multipath package for several images. This fix explicitely adds multipath to the image. Closes-Bug: #1970541 Change-Id: I14af40078508b06e46866b77ab200228ec827a0d
2022-04-26Bump up Alertmanager versionSven Kieske1-1/+1
Change-Id: I793e35ef347c9d44b4e870cd3ca1bd459e557623
2022-04-22Merge "adjust permissions on _extend_start files (part II)"Zuul41-41/+41
2022-04-22Merge "monasca-thresh: drop special handling for Ubuntu"Zuul1-6/+0
2022-04-22Merge "grafana: drop check for not supported architectures"Zuul1-7/+0
2022-04-22adjust permissions on _extend_start files (part II)Marcin Juszkiewicz41-41/+41
Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760