aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2024-12-30Merge "Remove setuptools pin"Zuul2-1/+3
2024-12-23cinder: Fix log dir permissionMichal Nasiadka1-0/+3
In order to add support to uwsgi (which is opening the log file after dropping privileges) we need to set proper permissions for /var/log/kolla/cinder directory Change-Id: I46da8fad93febbc462cbe42a0d96ef7d423b8965
2024-12-19Merge "Move uwsgi installation to openstack-base"Zuul2-7/+3
2024-12-18[letsencrypt] Rename script for updating certificatesMichal Arbet3-3/+3
This patch renames the update-haproxy-cert script to update-loadbalancer-cert to make the name more generic. The change is necessary because support for ProxySQL will be introduced in the next patch, requiring a name that reflects broader applicability. To keep the diff in the following patch clean and easier to review, this patch focuses exclusively on the rename. Change-Id: I15f9b5cf3976f4298cdc7da4530f2d7d09614e88
2024-12-16Merge "magnum: Add helm binary for magnum-cluster-api"Zuul1-0/+3
2024-12-13Remove deprecated AngularJS plugins from GrafanaDawud1-1/+1
Change-Id: Id81ce23fed7c19211aa8b15abce185d990be8389
2024-12-13magnum: Add helm binary for magnum-cluster-apiMichal Nasiadka1-0/+3
Closes-Bug: #2091608 Change-Id: I52105f6cbf7529ce107cabf8a38a10525be7435c
2024-12-11Fix EAB support in letsencryptMichal Arbet1-10/+12
This patch fixes recently merged [1] patch. - Original patch added params function args eab, hmac, key_id, but then EXTERNAL_ACCOUNT_BINDING_OPTS var is passed into obtain_or_renew_certificate which can't work - This patch correctly set EXTERNAL_ACCOUNT_BINDING, HMAC, KEY_ID defaults and then call obtain_or_renew_certificate function with them. This will ensure that arguments are always set, so we can write if condtional correctly and process. [1] https://review.opendev.org/c/openstack/kolla/+/916617 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/933924 Change-Id: I406ff10edec9dc94b1a3de005080e149ee3ab3f2
2024-12-11Remove setuptools pinMichal Nasiadka2-1/+3
Change-Id: I7d08ebb65e2de82e3edba7bd9307b2b6ac8cb7a8
2024-12-11Merge "Revert "[release] Use Dalmatian sources by default""Zuul2-1/+2
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul3-18/+14
(Dalmatian)""
2024-12-10Revert "[release] Use Dalmatian sources by default"Michal Nasiadka2-1/+2
This reverts commit 5af5febf50bc0a02422b437b16598570d0c5ffe3. Reason for revert: Epoxy cycle is on In addition to the revert skyline-apiserver aiosqlite u-c is removed until [1] is merged, designate rootwrap.conf.sample file has been renamed to rootwrap.conf and pycadf is bumped to 4.0.0. [1]: https://review.opendev.org/c/openstack/skyline-apiserver/+/935604 Change-Id: I1265633f0913b7927955564fac911a682615004a
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski1-1/+3
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b
2024-12-05Merge "Add Let's Encrypt EAB support"Zuul1-3/+29
2024-12-05Add Let's Encrypt EAB supportPiotr Parczewski1-3/+29
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/935656 Change-Id: I0b20d82a0061062f8aa9dfe179b1d02708ad610e
2024-12-02Change copy-cacerts behaviourRoman Krček1-19/+40
So far, the certificates were not part of config.json files for containers. With future patches that will remove container restarts based on triggers from config and service-copy-cert, it is important that all files that change during config are specified in config.json so that kolla-set-configs --check can detect those changes and based on that restart the container. This patch provides prerequisite for future patch in kolla-ansible. Comments from kevko: The script also takes into account whether review [1] is merged or not, ensuring that it will function correctly in both cases thanks to review [2], because using the state file, we can effectively verify whether the config.json that copies CA certs to /var/lib/kolla/share is being used or not. If we didn’t handle it this way, we would have to rely on checking whether the directory /var/lib/kolla/share exists or some another magic, which is insufficient because various states and combinations of Kolla image and Kolla-Ansible versions could result in certificates always being copied. This method provides a clear and definitive distinction. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651 [2] https://review.opendev.org/c/openstack/kolla/+/915440 Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka3-18/+14
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-21Move uwsgi installation to openstack-baseMichal Nasiadka2-7/+3
Change-Id: I581ff79993d011b421d69295a6552cb14b8e2e66
2024-11-15Add mechanism for patching files in containersMichal Arbet205-4/+516
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-11-06Fix handling configs in base imageMichal Arbet1-0/+151
This commit restructures the handling of configuration files in set_configs.py, introducing functions for managing default configuration files first. Closes-Bug: #2060855 Change-Id: If91e0330dc149143c82d2183b8ddf6fa9f68d80e
2024-11-05Enhance logging format for better readabilityMichal Arbet1-1/+5
Added timestamp with milliseconds, log level, and custom date format to improve clarity and make logs more useful for debugging. Change-Id: Ice2d601eddb54bbb0e7e3be6f03ba6db58256c1f
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka3-14/+18
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-22Merge "Fix missing tss user in Ubuntu/Debian nova containers"Zuul2-0/+2
2024-10-22Fix missing tss user in Ubuntu/Debian nova containersRafal Lewandowski2-0/+2
Closes-Bug: #2067050 Change-Id: Ife426c073048ff27bdfd9f3af30aaaab8c2e4497
2024-10-09Add way to backup from MariaDB replica serverMichal Arbet2-1/+139
ProxySQL reports its version to MySQL clients, causing the backup process to fail when ProxySQL is used. This patch adds a new script that handles backups from the replica server directly, without modifying the original backup script. The new script retrieves the server address via the load balancer and connects directly to the replica server to execute the backup. Moreover, this reduces the risk that the backup will be inconsistent or that it will block OpenStack MySQL clients, because they are connected to a different server, and no one is connected to the replica, or that it will overload the load balancer (such as ProxySQL or HAProxy) which listens on the VIP. Closes-Bug: #2080818 Change-Id: Ibf7e40e8b059d733e114963022df06180249c650
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul2-3/+3
2024-10-03aarch64: Exclude syslinux from ironic conductor packagesBartosz Bezak1-1/+5
The 'syslinux' package is not available on aarch64, so it is only included in the ironic conductor packages for x86_64 systems. Related-Bug: #1749780 Change-Id: I3eea308a0a70e47dd3b185eece106185b25616f5
2024-10-03aarch64: fix name of rabbitmq copr repoBartosz Bezak1-1/+1
it should be the same as in repos.yaml Change-Id: Ieb413f7a4bd1989d7f29309368b6b218d1395e0b
2024-10-02Merge "erlang/aarch64: Move to openstack-kolla owned COPR"Zuul3-12/+12
2024-10-02erlang/aarch64: Move to openstack-kolla owned COPRMichal Nasiadka3-12/+12
Change-Id: I219418411470bdeae9af84277f5150a623c05e69
2024-10-01Bump proxysql to 2.7.xMichal Arbet2-3/+3
This patch bump proxysql 2.6.x to 2.7.x Change-Id: I6e726d8ebf9dbc6d019dd72d6d0be9d9957a3f22
2024-09-30Switch to Ubuntu 24.04 LTSMichal Nasiadka3-16/+10
Add setuptools because Python3.12 dropped distutils Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/925581 Change-Id: Ie12c43dc1de122c203edc28181366457ccd67834
2024-09-30Added systemd-standalone-sysusers package for DebuntuMichal Arbet1-0/+1
This package provides a standalone sysusers binary with minimal dependencies, designed for use in non-systemd environments. This package simply ensures that all packages that want to install systemd as dependency will have to settle for this one because the systemd package breaks systemd-standalone-sysusers, as it is an alternative. [1] https://packages.debian.org/bookworm/systemd-standalone-sysusers [2] https://packages.ubuntu.com/noble/systemd-standalone-sysusers Change-Id: I3ba85069c265844bd2f8b5e6d2b14f32e4898cfd
2024-09-30Merge "pyinotify is no longer needed"Zuul1-1/+0
2024-09-27Merge "Revert "Pin OpenSearch Dashboards to 2.15""Zuul2-17/+1
2024-09-27Revert "Pin OpenSearch Dashboards to 2.15"Bartosz Bezak2-17/+1
This reverts commit 3c49991a86cb26dd0447fa748d1df9df5aed92bb. Reason for revert: bug fixed upstream https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8097 Change-Id: Icc810554dc877c9dedaf26609d59a93059a38ba7
2024-09-26dev-mode: Run kolla_install_projects using sudoMichal Nasiadka2-1/+4
Since packages are installed using root during image build - we need to use sudo when updating those packages when using dev-mode. Change-Id: Idf14e334d50abeb1719563b1733af0b8425b3b55
2024-09-23Add missing iso packages to ironic-conductorRafal Lewandowski1-0/+4
Closes-Bug: #2067133 Change-Id: I097ad8988a4707173c19006d83b4d76cec5d0940
2024-09-23Merge "Switch to Dynamic Python Version Detection"Zuul6-12/+31
2024-09-20Merge "Fix state checking via kolla_set_configs"Zuul1-0/+14
2024-09-19Switch to Dynamic Python Version DetectionMichal Arbet6-12/+31
This commit removes the hardcoded KOLLA_DISTRO_PYTHON_VERSION and replaces it with dynamic Python version detection during container images build. Dockerfiles and scripts now use general python3 references, simplifying maintenance and ensuring compatibility with future Python versions. Test cases relying on distro_python_version were also cleaned up. Change-Id: I891749598247a5e951ed4a873b16acfd0566f59c
2024-09-19Add libnetfilter-log to l3 agent containerMichael Chapman1-2/+3
neutron-fwaas requires libnetfilter-log1 when fwaas_v2_log is enabled on l3 agent. As this package isn't easily available via rpm, this is only added for deb platforms. Partial-Bug: #2079775 Change-Id: I22d05d1a1c6ab92ed5507d6c90b8c2281abfc7af
2024-09-17Merge "Fix cinder-backup: add missing sysfsutils,lsscsi package"Zuul1-2/+6
2024-09-17Fix cinder-backup: add missing sysfsutils,lsscsi packageBui Doan Dang1-2/+6
Closes-Bug: #2078886 Change-Id: Ia678484c001c66a9db675035dbb4505b0448bf58 Signed-off-by: Bui Doan Dang <doandang27052000@gmail.com>
2024-09-16Fix state checking via kolla_set_configsMichal Arbet1-0/+14
Kolla checks the status of its configurations using kolla_set_configs --check. However, this doesn't work for the command block in the config.json file. This means that if only the command value changes, but not the config_files block, which is common practice in Kolla-Ansible btw, the container will not report the changes. This is undesirable and important to fix, especially considering the planned rework of notifiers in Kolla-Ansible [1]. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/773243/14 Closes-Bug: #2080861 Change-Id: I2a290da38ea34b05ce3da8fb8b39b6252bf2da47
2024-09-16Merge "Removal of deletion of the proxysql database"Zuul1-13/+0
2024-09-13Merge "rabbitmq: Switch to Cloudsmith mirrors"Zuul2-4/+10
2024-09-13Merge "openvswitch: Drop ovs_ensure_configured.sh"Zuul3-25/+6
2024-09-12Removal of deletion of the proxysql databaseMichal Arbet1-13/+0
It seems that at the time of implementing proxysql, it did not have the --reload parameter, or I overlooked it back then. In any case, it is available now, and this patch just removes the deletion of the proxysql database and keeps it there. The deletion was in the extended start precisely because proxysql ignored changes in the configuration file, so the internal database was always rebuilt during a restart. However, this now works with the --reload parameter. Change-Id: I47848bb1e9847821c9b5fa25f0d817ef00358dd6
2024-09-12rabbitmq: Switch to Cloudsmith mirrorsMatt Crees2-4/+10
PackageCloud is discontinued as of August 18th [1]. Also corrects the versions docs for RabbitMQ and Erlang. Use new RMQ Cloudsmith repo URLs, these now use *.rabbitmq.com domains [2]. 1. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#packagecloud-will-be-discontinued-on-aug-18th-2024 2. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#mirrors-now-use-rabbitmqcom-domains Change-Id: I2cce3dd2540c878878ff0aae80ee5a7e0f455da7
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 07:58:56 +0000