Commit Graph

198 Commits

Author SHA1 Message Date
Dmitriy Rabotyagov 54813d6be4 Enabled memcached usage for token caching
As of today blazar warns out on startup that using the in-process token
cache is deprecated for quite a while. In order to get rid of this warning
we add memcached configuration for keystone token.

Change-Id: Ibd80231bdb1dfe2e66e69c4538a2129c7f84c92f
2024-01-05 23:06:54 +01:00
Dmitriy Rabotyagov 21f304634e Add variable to define list of manager plugins
In order to be more flexible regarding required plugins, we implement a
new variable that will allow to set a list of enabled filters for blazar.

With that we also enable floatingip plugin that has been added to Blazar
a while ago.

Change-Id: Iaff9284eec3a57a6470afb5e912cad17970baa2f
2024-01-05 22:53:16 +01:00
Dmitriy Rabotyagov 06291ec0e6 Create required freepool aggregate
For normal functioning of Blazar reservation it expects a nova agregate exist
to be used for host reservation.

Thus, to make deployment more convenient for deployer we add fuctionality
of creating such aggregate.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/904786
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/878794
Change-Id: I7f56b8c8f2394d5fae1476441c8e2e2a5f07467c
2024-01-05 21:30:49 +00:00
Dmitriy Rabotyagov 676846b6a2 Fix Blazar authentication and endpoints definition
Closes-Bug: #2048048
Co-Authored-By: Alexey Rusetsky <fenuks@fenuks.ru>
Change-Id: I0dc54f1de1992b24cac7fcdc88d04daa2901cbc4
2024-01-05 21:13:07 +00:00
Dmitriy Rabotyagov 856b4401a1 Add quorum support for service
This change implements and enables by default quorum support
for rabbitmq as well as providing default variables to globally tune
it's behaviour.

Change-Id: If9a9ee764dd41767aaa1285903eb3c21cc0da40c
2023-09-28 14:29:25 +00:00
Jonathan Rosser 41554792a3 Fix linter errors for example playbook
Change-Id: Ibb32523ef2e96b5dd6def8182c591a9792b59fac
2023-09-28 15:29:09 +01:00
Zuul 72cc94356a Merge "Fix linters and metadata" 2023-08-14 10:56:31 +00:00
Dmitriy Rabotyagov 8242307cf7 Use proper galera port in configuration
While <service>_galera_port is defined and used for db_setup
role, it's not in fact used in a connection string for oslo.db.

Change-Id: I753c328569e1ee6d69a0ad2168b6493a3c7438f9
2023-08-07 07:03:11 +00:00
Dmitriy Rabotyagov 9f6ea81c64 Fix linters and metadata
With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.

With that we also update metdata to reflect current state.

Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
Change-Id: Ic97b301d704d3bc19142315a69724c05f3cad875
2023-07-13 16:41:33 +02:00
Damian Dabrowski 8b39e84ec1 Add TLS support to blazar backends
By overriding the variable `blazar_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the blazar backend api.

The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: Ic784cb180ff4cbc81c230b0a3a62015a71ea3f99
2023-04-29 18:35:56 +02:00
Damian Dabrowski c9d10f41fa Add uWSGI support to blazar
This patch adds uWSGI support to os_blazar role. All openstack services
should stay behind uWSGI.

It's also required for upcoming TLS backend feature. Blazar does not
have native TLS support so it needs to be handled by uWSGI.

Change-Id: I65511de4d5014a28f0f91536f9dbaf96fcb8e7a2
2023-04-24 12:48:23 +02:00
Damian Dabrowski c1418e167a Fix blazar_service_type
As described in [1], blazar_service_type should be set to 'reservation'.
Otherwise blazar CLI won't be able to find its endpoint.

[1] https://docs.openstack.org/blazar/latest/install/install-without-devstack.html

Change-Id: I01874c617e5da75010c54b64901c90a986468807
2023-04-17 20:16:41 +02:00
Dmitriy Rabotyagov 8c0744496b Ensure service is restarted on unit file changes
At the moment we don't restart services if systemd unit file is changed.

We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now  we ensure that role handlers will also listen for systemd
unit changes.

Change-Id: I001ffdb5eedfb8d17edd593dfb1818c5b1bd02df
2023-04-10 15:43:16 +02:00
OpenStack Release Bot d643b6026f Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: Id6725ddfc8f014b0fe85c39d40f67cdbad89e818
2022-12-13 13:12:17 +00:00
Erik Berg 1ed399ce86 Remove redundant vars line
Introduced by the discreet commit 'update to the latest'

Change-Id: I4dac82dd4e6a51a7b0fc99ec80c5ae2fa7981ea7
2022-09-15 10:47:18 +02:00
Dmitriy Rabotyagov 711160baea Support service tokens
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.

Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: I3a1c2d87a39eaf342411f3b607bc909f924944cb
2022-06-15 17:43:49 +02:00
Dmitriy Rabotyagov 1a5758969a Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.


Change-Id: Ic60f8576f17e513622c036bd88c9602d82f04c33
2022-05-30 16:01:21 +02:00
OpenStack Proposal Bot 8fc28683bb Updated from OpenStack Ansible Tests
Change-Id: Ie37faadf02ee9c26091d43b571600fd7d3f13e64
2022-04-04 09:11:31 +00:00
Jonathan Rosser 65a14576c7 Cleanup setup.py config
Change-Id: Idf2fcb80b6d777fd428e2d131cf719811058eaef
2022-04-04 10:11:04 +01:00
Zuul 99d47ee2c7 Merge "Use common service setup tasks from a collection rather than in-role" 2022-01-13 15:59:10 +00:00
Jonathan Rosser 5e30d71ade Use common service setup tasks from a collection rather than in-role
Change-Id: Ib6b44ea47b092463994f1a44e70113cad1d00687
2022-01-13 11:24:30 +00:00
Jonathan Rosser b616643319 Refactor use of include_vars
Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.

This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.

Change-Id: Ibd7e65b25fca496a6393692c6952c9604430ec92
2022-01-12 08:40:21 +00:00
OpenStack Proposal Bot 988401a1c5 Updated from OpenStack Ansible Tests
Change-Id: I0615d07a6cc5c42abe2e7d7db2f6ab64168cc4dc
2021-12-17 16:45:28 +00:00
OpenStack Proposal Bot 2f857a0c18 Updated from OpenStack Ansible Tests
Change-Id: Ie6b17a25901c28e41febd686080c8d02316fce57
2021-12-04 17:39:36 +00:00
Damian Dabrowski 7e7b7347f7 Database connection pooling improvements
- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: Ib4a0581c5bbe2b14abcd80f97ac2e36ec0dbf4b1
2021-12-03 11:40:31 +01:00
Dmitriy Rabotyagov c5d1740fbe Use config_template as a collection
Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814



Change-Id: I8abcf60dcc8a264c221de89ff01906edf3ce8a39
2021-11-30 15:17:13 +02:00
Dmitriy Rabotyagov 956c84d1a4 Refactor galera_use_ssl behaviour
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.

Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.

[1] 78f0cf99e5/pymysql/connections.py (L267)

Change-Id: I7042118a17d533c472f09bb2098bbc3c01195477
2021-09-21 11:14:02 +00:00
Dmitriy Rabotyagov d4ca9d3483 Clean up debian blazar_distro_packages
Sync packages instaklled for debian and redhat. We don't need these
packages to be installed to all blazar containers instead of being devel
ones.

Change-Id: I2f49f5c0badb730cafef6b53c9c99db362285dd8
2021-09-21 14:13:00 +03:00
likui f8a2116875 Changed minversion in tox to 3.18.0
The patch bumps min version of tox to 3.18.0 in order to
replace tox's whitelist_externals by allowlist_externals option:
https://github.com/tox-dev/tox/blob/master/docs/changelog.rst#v3180-2020-07-23

Change-Id: I953e69dbd07f724562ee6c913a944d0fdf45192e
2021-07-03 21:29:37 +08:00
Dmitriy Rabotyagov d0323e9bb1 Replace linters test with integarted one
We've created integrated linters check job a while back and it's successfully
working for several releases. At the moment we experience difficulties
with future maintenance of the linters check from the openstack-ansible-tests
repo. So instead of fixing current one, we replace it with modern version of
the test.


Change-Id: Id3033cfd18f074c8665d0c9f580ec4076415c599
2021-05-21 15:52:21 +03:00
Zuul bd42ae0f53 Merge "Add variables for rabbitmq ssl configuration" 2021-05-18 16:23:30 +00:00
Jonathan Rosser 30c2316e6c Add variables for rabbitmq ssl configuration
Change-Id: I4ca1b85b67a6f6fd4f951c1cb3c256ec959e7ee4
2021-05-17 07:56:03 +00:00
OpenStack Proposal Bot 1cc9878d8d Updated from OpenStack Ansible Tests
Change-Id: I981fe2e8ef660afa35c621823c6b76e1f5cceb4e
2021-04-19 09:56:57 +00:00
OpenStack Proposal Bot a6bf5152ca Updated from OpenStack Ansible Tests
Change-Id: If3f8d8870ba00b84219469f258e6cd8cb42a9868
2021-03-22 08:46:15 +00:00
Zuul 6e8ccf3f89 Merge "Allow to override blazar policy files" 2021-03-19 20:43:35 +00:00
Dmitriy Rabotyagov fcc6a1b6ea Allow to override blazar policy files
We implement `blazar_policy_overrides` variable in order to allow
management of balazar policy files when needed.

Change-Id: I581a9c9659d3d023eb40cf2c6dfc2d01fa0a7464
2021-03-16 16:44:37 +02:00
Jonathan Rosser e89bd175d5 Use ansible_facts[] instead of fact variables
See https://github.com/ansible/ansible/issues/73654

Change-Id: Ib92816da66e068fc119c55118f07873e5dba748a
2021-03-16 08:00:11 +00:00
OpenStack Proposal Bot d3b9030c97 Updated from OpenStack Ansible Tests
Change-Id: Id6ce814d74f66c079efe1c42291f803b571b2582
2021-03-12 22:17:48 +00:00
Jonathan Rosser 8eb1734656 Remove references to unsupported operating systems
All references to Gentoo, SUSE, Debian stretch and Centos-7  are removed.
Conditional tasks, ternary operators and variables are simplified where possible
OS specific variables files are generalised where possible

Change-Id: I3781543c5f5005d578a4010ac8ff41dbdcc8407a
2021-03-10 16:32:42 +00:00
Zuul 40944ad5a3 Merge "[reno] Stop publishing release notes" 2021-01-26 18:26:22 +00:00
Jonathan Rosser 746e9a4895 Move blazar pip packages from constraints to requirements
This is necessary to support the new pip resolver

Change-Id: I5ce52c9e5a39c376652cba7b13a1e0e50b784aa7
2021-01-25 08:50:21 +00:00
dmitriy 1c24c1ab9e [reno] Stop publishing release notes
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.


Change-Id: I8d9b29e345501f7a2475b43144d98169c553e1db
2021-01-22 18:24:29 +02:00
Zuul d7ce529278 Merge "Use global service variables" 2021-01-07 17:02:36 +00:00
Dmitriy Rabotyagov b7a54b1849 Use global service variables
Instead of overriding each service separatelly it might make
sense for deployers to define some higher level variable that
will be used first or fallback to default variable.

Change-Id: Ifb25edf453f04594303d391c4e1dd245f6400c2b
2021-01-05 18:40:45 +02:00
zhoulinhui 740806fa1d Replace deprecated UPPER_CONSTRAINTS_FILE variable
Change-Id: I949deb56eda385c427847e392efb5da53830f23b
2020-11-10 13:11:37 +08:00
OpenStack Proposal Bot 8f7815fecc Updated from OpenStack Ansible Tests
Change-Id: I96bc9771890f3ea9cebe5a9dbbd78afc86d0c4cc
2020-10-19 09:19:37 +00:00
Zuul cabc6efeed Merge "Define condition for the first play host one time" 2020-10-06 09:28:24 +00:00
Zuul ab5879578c Merge "Updated from OpenStack Ansible Tests" 2020-10-02 16:07:20 +00:00
Jonathan Rosser e77e0418ed Fix linter errors
Change-Id: I8f4bc0ef15106f97cdaec2999196eb0e7664aae6
2020-10-01 16:38:46 +01:00
OpenStack Proposal Bot 9cc1c035be Updated from OpenStack Ansible Tests
Change-Id: I543e45ebc2bd326e30a0b73a937a8d24a8601dbd
2020-10-01 14:29:36 +00:00