Commit Graph

17 Commits

Author SHA1 Message Date
Dmitriy Rabotyagov f5aa36a38d Use proper galera port in configuration
While <service>_galera_port is defined and used for db_setup
role, it's not in fact used in a connection string for oslo.db.

Change-Id: I795e7a7423d3efd5168dd8e8d89b3c86aa13c31f
2023-07-31 15:18:32 +02:00
Dmitriy Rabotyagov f728ca5707 Support service tokens
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.

Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: Ie5ebb4d68ed06cff26462dc55092fda8a9ad2f44
2022-06-15 19:11:22 +02:00
Dmitriy Rabotyagov a422c42665 Refactor galera_use_ssl behaviour
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.

Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.

[1] 78f0cf99e5/pymysql/connections.py (L267)

Change-Id: I94b3f8ba5116cdfb94e9d0dc575bd7edb1d27b3c
2021-12-06 20:52:14 +02:00
Zuul 82bbca6961 Merge "Refactor definition of lock path" 2021-12-06 18:41:05 +00:00
Damian Dabrowski 48a8c0627a Database connection pooling improvements
- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: If245cd3f12a919933d912205dd60f1e02f555f7c
2021-12-06 09:00:04 +00:00
Dmitriy Rabotyagov 58c289d7cb Refactor definition of lock path
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819300
Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/819298
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/820008
Change-Id: I495f99d1378233d1b5d6ebc8ef101f683129a84f
2021-12-06 08:59:58 +00:00
Dmitriy Rabotyagov 286414c2a6 Set manila_backends to empty dict by default
This simplifies logic across the role and not verify if variable is
defined each time we're attempting to use it.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/787341
Change-Id: I6db4ad6e6389b1ff63dc52a1e48c477a97905d17
2021-05-20 18:52:19 +00:00
Jonathan Rosser bb870ea34e Add variables for rabbitmq ssl configuration
Change-Id: I419cc8f2920bb2a5108cacb95e41a9965b3dd659
2021-05-18 16:31:24 +00:00
Dmitriy Rabotyagov de29f07d77 [goal] Deprecate the JSON formatted policy file
As per the community goal of migrating the policy file
the format from JSON to YAML[1], we need to replace policy.json to
policy.yaml and remove deprecated policy.json.

config_template has been choosen instead of the copy, since it can
properly handle content that has been lookuped.

We make a separate task not to restart service when it's not needed.

CephFS Native hook has been removed since [2] as manila leverages MGR
now and doesn't require having directory in share.

Additionally bionic test is removed as we don't have Octopus infra
mirrors for it.

[1] https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html
[2] a830710939

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/791202
Change-Id: I7a1807e4b984e31cb6250132f35d4c27f0b69b0c
2021-05-13 13:11:04 +00:00
Mohammed Naser abbfec221b Start using uWSGI role
Move service to use uWSGI role instead of iternal task for uwsgi
deployment. This aims to ease the maintenance of uWSGI and speedup
metal deployments as the same uwsgi environment will be used
across all services.

Change-Id: I946adf21b58e117508dcc470c0fb3e9c2565c26d
2020-11-06 12:59:12 +00:00
Guilherme Steinmüller fcf3781459 Refactor memcached_servers
This patch aims to add a prefix for memcached_server
on each role to give the ability for deployers to
override the location of memcached cluster. I.e users
wants to create a single memcached cluster with k8s
for each service.

We also add pymemcache based on [1]

[1] https://review.opendev.org/711429

Change-Id: I06993827240135365c83bbfd4a75712598a2310a
2020-03-16 14:05:59 +00:00
Mohammed Naser 0f369f4ae2 cleanup: config values
There are certain configuration values which are defaults and have
no purpose in being overwritten, users can use the overrides.

Also, some have been removed because they don't exist inside manila
anymore.

Change-Id: I1fada7b36fc0aae81f6adf5bc28035777e255eef
2020-02-10 09:03:11 +00:00
Dmitriy Rabotyagov a97cbbd565 Add manila CI
This patch aims to fix and cleaup manila role and add CI into it.

Changes it implements:
* Fix endpoint creation
* adds playbook.yml in examples to use integrated linters check
* adds role CI tests using integrated repo
* adds sqlite installation

Depends-On: https://review.opendev.org/704163
Depends-On: https://review.opendev.org/702853
Depends-On: https://review.opendev.org/674653
Depends-On: https://review.opendev.org/703136
Change-Id: I0807180bd9b2ccbf2f1ebb6a72d74e9f0d126ba6
2020-01-30 14:07:20 +01:00
Dmitriy Rabotyagov 203eb8772a smart_sources: Use config files from repo
Do not carry and maintain rootwrap and api files, since they are present
inside pip packages and deployed during installation.
This also adds deployment of rootwrap filters for manila-share nodes.

Change-Id: I41b680f5dcb5be92e3304c591d9a4705cf138a72
2019-08-08 16:00:18 +03:00
Dmitriy Rabotyagov 7364011f4d Set defaults for project-specific variables
Since neutron, nova and cinder variables are not defined in manila scope,
we need to set defaults for them.
Also some options are not used so there is no reason to carry them.

Change-Id: I294a9dd1939f7392806ba6e1db2bf3de56cb4dcb
2019-08-06 14:48:04 +03:00
Kevin Carter b9809ef89d Update manila so that it works with cephfs
This change updates manila so that it can function with cephfs.
While cephfs was assumed to work these changes solidify support
and tune up the role.

Change-Id: I4d95bfc15d09b7b7c0b997d7eab91509b0c63885
Signed-off-by: cloudnull <kevin@cloudnull.com>
2019-03-27 22:39:33 +00:00
Michael Vollman f9bfb7f0bc Basic working os_manila role
Starting this new role as a copy of the os_cinder role due to the
similarities between the two openstack projects.  This role will
deploy manila api, scheduler and share services on ubuntu with the
default local LVM backed NFS scenario.

Change-Id: Ibda073e5aaa6df3b254961d4aed3a8d5961f3432
2019-03-08 19:41:48 +00:00