| Age | Commit message (Collapse) | Author | Files | Lines |
|
Backport to all supported branches.
Change-Id: I4a13bbe959e3324f05d5cf78a3be2415eb2ba7ec
(cherry picked from commit 004d9eb5d575fcb140b4d90fb30ced0a81dd3e66)
|
|
This fixes the FC Cinder backend usage in Nova.
Change-Id: I036cfe3af3dd96625f986a820c78a10e6558b086
Closes-bug: #1884484
(cherry picked from commit 0c8702c96f852eae7a1fb784a260c01c15fb86f3)
|
|
There are several issues with kolla_set_configs --check:
1. We calculate the destination path incorrectly when comparing a file
in a directory, due to passing arguments to os.path.relpath in the
wrong order
2. For directories that have not changed, we also attempt to compare
them as files, which fails when they are open()ed.
3. If the config JSON does not have a config_files key, it fails with a
KeyError.
The first two issues affect the fluentd container, which specifies
directories as the source, without using a glob. The third affects OVN
containers.
This patch fixes these issues.
Closes-Bug: #1890567
Change-Id: I8921befe51da4282121443849177a7ca5ebe8822
(cherry picked from commit c5320eb22386c34d83435fa0b9aa03b178996b52)
|
|
Switch to YAJI JSON parser as suggested in [1].
[1] https://docs.fluentd.org/quickstart/faq#i-got-encoding-error-inside-plugin-how-to-fix-it
Closes-Bug: #1889065
Change-Id: I2ecd3b029b956e000feaaa9e10a169521ba53d66
(cherry picked from commit 556d4353aa846765557cfdd3c6e087a25248c517)
|
|
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we
should remove the nss-systemd lookup from containers. The reasons for
this are as follows:
1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5
when this nss module is triggered it tries to talk to dbus.
It triggers a bunch of selinux denials and it makes little sense
to open all containers to talk to dbus.
In particular, if a container is run as non-privileged and bind-mounts
/run from the host, we will hit selinux denials like the following:
type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus"
2) It just makes little sense in a kolla-world to have containers
talk to dbus/systemd and it saves us some time when a lookup triggers
the systemd module for whatever reason. Especially because the
nss-systemd module does a few things which are not useful in a container
(ensures that the root and nobody users and groups remain resolvable,
SystemD's DynamicUser= feature, provide Lookup API via Varlink)
The sed regex gives us the wanted results:
$ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf
--- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000
+++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000
@@ -53,9 +53,9 @@
# group: db files
# In order of likelihood of use to accelerate lookup.
-passwd: sss files systemd
+passwd: sss files
shadow: files sss
-group: sss files systemd
+group: sss files
hosts: files dns myhostname
services: files sss
netgroup: sss
Related-Bug: #1883849
Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
(cherry picked from commit dc2ddfa9750f94430a5b04b62fc1fa6adcb234f8)
|
|
This is a follow up for [1].
"rally-manage db" command was deprecated since 0.10.0 but Ubuntu ships
0.9.1 for Bionic.
[1] https://bugs.launchpad.net/kolla/+bug/1856693
Closes-Bug: #1872283
Change-Id: I5fb0fc4e6a8bf7ab07abc9c78f0673e3e764b4d1
|
|
Glance API image lacked nfs programs/utils to be able to mount
NFS exports.
This affected Glance usage with Cinder backend when NFS was used
as Cinder backend.
Closes-Bug: #1868574
Change-Id: I3aac1e6a7f7c5f839b036f15713af949fba206cc
(cherry picked from commit cac9d46aa6dbac6631bdcae67db125a88e1c3234)
|
|
|
|
This fixes the issue when keystone-manage output included
backslashes and/or double quotation marks which broke JSON string.
Change-Id: Ifae18c407210c12745d29fc4c95dca69aeafe6a8
Closes-bug: #1866017
(cherry picked from commit 33d184a731458bb45d1206bdae4fb172629a76e7)
|
|
Kolla was missing vitrage-persistor image required by Vitrage
for data storage.
Change-Id: Id5e143636f9a81e7294b775f3d8b9134bee58054
Closes-Bug: #1869319
(cherry picked from commit ad06096448a585a16ad73b610b0adc81b597ccec)
|
|
The extend_start.sh script for cinder-api uses an incorrect test to
check if the MAX_NUMBER variable is set. This leads to a incorrect
cinder-manage command being run if this variable is not set, making the
database migration fail.
This change fixes the test to properly use the MAX_NUMBER variable.
Change-Id: Ie46da709db0de09a9cf641b3c154275282f213fc
Closes-Bug: #1866827
(cherry picked from commit ff42ff20048ef3b7d2f8df04ada8ff4bf7b710e0)
|
|
|
|
When doing a source install, ironic doesn't have python3-systemd as a
dependency and the current ironic-conductor container doesn't install
the required dependencies which causes the ansible deploy interface to
fail with the error, "Systemd bindings do not exist". This adds the
needed dependencies when doing a source build. This installs the needed
files for both rpm and deb builds on python 2.x and 3.x.
Change-Id: I5d1bcb0f7d7902b4e122c12697483433bcf52ca2
Closes-Bug: #1861427
(cherry picked from commit 4a67e58f7971641c55247f02985e13ef391ca7ab)
|
|
Adds ssh clients to Ironic Conductor container for
ansible deploy interface.
Change-Id: Ib995c6ebe5ee76ee1a39e4b5918a79bd61b87a01
Closes-Bug: #1862079
(cherry picked from commit 7234e8b2f72275c85caa146a6d9e49d1ab8281b7)
|
|
to backport before releases
Change-Id: I467da5e7e2e59d226987db970ea80c161bc454e4
(cherry picked from commit 0b10e5ca800388b193e5ef2e85ffd6bf64bcae10)
|
|
Backport: train
Closes-Bug: #1859047
Change-Id: I9032e43bffa3a3de6c33a4ab59f65bafb0129dd5
(cherry picked from commit 902f16cb1a8efc44da8669a6707d93d47160ae9d)
|
|
backport: train, stein, rocky
Override in filter needs to follow the rule:
<image_name>_<call_type>_<override/append/remove>
`call_type` for `kolla_toolbox_pip_virtualenv_packages` should be
`pip_virtualenv_packages`, and `pip_packages` can't match with
`kolla_toolbox_pip_virtualenv_packages`, this makes
the value can't be overrode in template override.
Change-Id: I1dbe2dfd4bce73ce2285f45f997d45b5dcc95f4c
Closes-bug: #1865119
(cherry picked from commit 74d5a66e6bf744ad936d702443a8d64be86441ba)
|
|
It includes several bug fixes, in particular one for an issue when
coordination is disabled [1].
[1] https://github.com/gnocchixyz/gnocchi/issues/996
Change-Id: I0ac41463bd6ca1eb363e1c5cdc29f7222ec382b1
|
|
Fix inability to run UEFI-based images/instances by installing UEFI
packages also in nova-libvirt image which is not based on nova-base.
Adapted for Stein and below (e.g. Rocky) by removing
any C8 support.
Closes-Bug: #1814552
Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Co-authored-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Change-Id: I1d5cd3d9af98444acac5bedd7daeaa6c6673dcd6
(cherry picked from commit 15b68c15c1dd0c2df1cc49b550f2fa03a4c65e8e)
(cherry picked from commit ffaf585d0f05ccd9123459bb0cdf345af5b09573)
|
|
Replaces 'swift-object' package with 'swift-object-expirer' package.
Change-Id: I8fa3fcad88b35743e042d8a62ccee722b08af673
Closes-Bug: #1859607
(cherry picked from commit 190a6f7a264c1ea8c0c565d2b75fb73fdc29d500)
|
|
'rally-manage db' command was deprecated since 0.10.0 [1]. Should use
'rally db' instead.
[1] https://rally.readthedocs.io/en/latest/project_info/release_notes/archive/v0.10.0.html#command-line-interface
Closes-Bug: #1856693
Change-Id: I578f7a6d907d5579180bc64c99c7e6c8edf3afc8
(cherry picked from commit 1114859b5cb940290f405cd64e34c6638dcebcae)
|
|
In some situations, Keystone bootstrap can fail, and then unhelpfully
fails displaying the error message output by the 'keystone-manage
bootstrap' command. This appears to be due to unprintable control
characters in the error message which prevent the output of the script
from being valid JSON.
This change fixes the issue by piping the output through 'cat -v', which
replaces unprintable characters with control codes.
Change-Id: I82444bc2272311023cc9e92c5a298d1c4c87483b
Closes-Bug: #1855701
(cherry picked from commit bcca3fabe305c1e206fdb231c31809ceff2d4774)
|
|
Change-Id: Ib56e62d1fb4d0fc4a6c627b87a929be0bc614d1e
Closes-bug: #1852086
(cherry picked from commit 0186c5e3cafeae0bb1c39bdef0df6ade827552d5)
|
|
Usage of dumb-init can also be disabled from cli with
`--nouse-dumb-init` when building images.
Also moves ENTRYPOINT outside of dumb_init_installation
block.
Change-Id: Id32d54fc9913b83cf121ede5a5e265e0772062ae
Related-Bug: #1821970
(cherry picked from commit fb4cb9efda5a522ba0d837047385b61275d09150)
|
|
Change-Id: I9615bc26156a26616dea083c3db4efbf7717231c
|
|
Because kolla not have cyborg so should add this.
Implements: blueprint add-cyborg
Change-Id: I497e67e3a754fccfd2ef5a82f13ccfaf890a6fcd
|
|
The user tss is wanted by libvirt and comes with the trousers package.
Prior RHEL8 it comes via the gnutls -> trousers dependencies, but there is
no such a dependency in RHEL8, so make sure we have trousers installed.
Change-Id: I9f11ba53d5c6f0a435a62bb462164566c4519d9f
Closes-Bug: #1821309
|
|
|
|
|
|
The code of Sahara plugins has been extracted during the Stein cycle.
Add support for:
- the source-based deployment method (a beta release of
the plugins is available on pypi) and
- the RPM-based method (RDO contains the packages for the plugins.)
This change is required also for the RPM method. Even if
the RPM packages of the plugins are linked through weak dependencies
to the sahara-api and sahara-engine packages (Supplements),
weak dependencies are currently disabled here.
Change-Id: I5241d84aa1ca2830cfdb60c1a3ff4e958a21b345
|
|
Default to true (to maintain backward compatibility), this parameter
will allow to disable the Package cache cleaning when building the Kolla
images.
In TripleO, we are investigating how we can accelerate the builds by not
cleaning the Yum cache and this patch will help us to do so.
Also included same for deb package_install method.
Co-Authored-By: Jon Schlueter <jschluet@redhat.com>
Change-Id: I0adc85302dfe0411d362c899f3e0d6a0019680d4
|
|
Buster is at freeze phase so safe to update and use. Will give us
Python 3 based OpenStack packages (usually release delayed).
Change-Id: I48c2d252a834716f1bcf10b18f2d32fe541e8137
|
|
|
|
Add configuration to allow the switch between dnf/yum or provide an
alternative package manager.
Change-Id: I913769fcf5875a12b4561958cf7c90b74cd116ea
|
|
RDO is currently working on python3 support for the next version of
CentOS/RHEL based systems. This package uses the distro_python3 flag
that was added as part of I4028991bad92c0e8e21066cc4173c06ce5eba393 to
use the python3 specific package names. This change only adds python3
package names for RHEL systems.
Conflicts-With: https://review.openstack.org/#/c/636457/
Change-Id: Iad6b70b433a0dd1b0f8ae6790fd280594517661a
Related-Blueprint: python3-support
|
|
This variable was never in released code, and was removed in
https://review.openstack.org/#/c/642014.
Change-Id: Iec8c1dc717bc8c3cfae4538b1846db4610b83ff6
|
|
RHEL7 derived distros use Python 2.7
RHEL8 uses Python 3.6
Ubuntu 18.04 uses Python 3.6, but we haven't enabled it yet.
Debian:buster uses Python 3.7, but we haven't enabled it yet.
We have several places in code where "/lib/pythonX.Y/site-packages"
is used so we need to know value of X.Y rather than py2/py3 switch.
How to check for Python 2:
{% if distro_python_version == '2.7' %}
Breaks: Iad6b70b433a0dd1b0f8ae6790fd280594517661a
Change-Id: Ie24f109af19ae0438c21e0d43cb3cc947812b4ce
|
|
We have code for it in four places so it is a good candidate for macro.
Change-Id: Icadcbbe5b386bdf688fd67e8160b40974f047377
|
|
This adds support for building an mtail image for generating metrics
from logs. These metrics can then be used to trigger alerts. For example,
one may want to track user logins, kernel errors, filesystem corruption
etc.
Change-Id: I0b3eee33c608b08f1e915a08096a1194d359805a
Partially-Implements: blueprint mtail
|
|
Many images have 'if x86_64 then amd64 elif aarch64 then arm64' check to
comply with Debian like architecture names in several projects.
This patch creates 'debian_arch' variable which can be used in all
Docker files (similar to 'base_arch' one).
All required images got converted to use it.
Change-Id: I9c5e6f13d6c9b24fe323408512bd5aef290111ad
|
|
Currently in all the Dockerfile.j2 files, we are doing base distro if
conditions for package names when installing via a binary. Rather than
duplicating these base_distro in [<distros>], let's provide a single
value for determining the binary installation method. This change adds a
base_package_type which we can use to lookup if 'rpm' or if 'deb' rather
than relying on specific distro names.
Change-Id: I8a0c6c8fbc32a8cfa6932fddf28a449fceda3d49
|
|
As we add support for python3 on RHEL based systems, we need to add a
flag to key off of in the Dockerfiles to swap out the python3 package
names. This change adds a distro_python3 configuration option that can
be defined to force python3 or python2 package names. If this option
is not provided, we set this to True for RHEL 8 based distros and false
for other distros.
Change-Id: I4028991bad92c0e8e21066cc4173c06ce5eba393
Related-Blueprint: python3-support
|
|
This change breaks out the Placement service from Nova ahead of it's
removal from the project later in Stein.
For the time being the original Nova Placement images are left in place
but they will be removed later in the cycle once the Placement code is
removed from the Nova project by the following change:
https://review.openstack.org/#/c/618215/
Co-Authored-By: Lee Yarwood <lyarwood@redhat.com>
Change-Id: I2bf6f5bf45b76e6900f41c21e9af30c69dc6e9c0
|
|
|
|
Reference:
https://docs.openstack.org/releasenotes/vitrage/unreleased.html#relnotes-3-1-0-37
Closes-Bug: #1807349
Change-Id: I625abab383774b01ccb95e6010d41bce4e2cb1a6
|
|
The crane component is being dropped by the Pulp project, it won't be
ported to python 3 and it has just been removed from Fedora.
TripleO currently doesn't need a container based alternative because
its solution will be installed on the host.
Change-Id: I60f2e1fb9b47e7c9c08b6174cec2c1286ad32edc
|
|
|
|
|
|
Follow Zaqar installation documentation [1]
[1] https://docs.openstack.org/zaqar/latest/install/
Change-Id: Ic356fb81c19ebbc78aa3c7e871c4946d1f712a45
Implements: blueprint ansible-zaqar
|
|
|