Commit Graph

291 Commits

Author SHA1 Message Date
Jimmy McCrory 5b7aee491c Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 501cf14342dd5519f064bca2ec999d204c00bc67
  - Ensure nova_device_spec is templated as JSON string
    
    When the nova_device_spec variable is provided as either a string or a
    mapping, ensure that it's templated as a JSON string.
    
    Also handle either strings or mappings within nova_device_spec if it's
    provided as a list.
    
    Closes-Bug: 2057961
    Change-Id: I7041a19547af580408ff704578cb8f12d37da1ae
2024-03-15 10:24:31 +00:00
Zuul 0ad1ad4a9c Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to bfa8e12fccda29096f6b766035f392daa99a0ad9
  - Merge "Fix nova device_spec to support multiple values"
  - Fix nova device_spec to support multiple values
    
    It appears there was a change to remove the list option when
    moving from pci_passthrough_whitelist. Instead device_spec
    can be specified multiple times in the file.
    
    This patch aims to resolve this whilst maintaining backwards
    compatibility.
    
    Change-Id: I12b38e45d7b41fbf4786d3320e511eb9127fe216
2024-02-13 14:37:15 +00:00
Dmitriy Rabotyagov 6ee2a8a3c9 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to b78e8a68ea9f20e1220847ccae8e73604ee50ab7
  - Evaluate my_ip address once
    
    Instead of evaluating same condition of my_ip in multiple places across
    the role this patch suggests doing this once in vars and using the
    resulting variable afterwards.
    
    This not only reduce amount of evaluations made throughout the role runtime,
    but also solves possible corner cases where some syntax may go off.
    
    Closes-Bug: #2052884
    Change-Id: I454b53713ecacf844ac14f77b6d1e1adc1322c0e
2024-02-12 13:09:18 +00:00
Dmitriy Rabotyagov e0f5c879bb Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 9843c47e81b2d093af585549af7a9f2fb82e11d1
  - Always distribute qemu config file
    
    In case when ceph is not being used as backend for nova, qemu.conf
    file is not distributed, thus some settings, like nova_qemu_vnc_tls do
    not have any effect
    
    Closes-Bug: #2003749
    Change-Id: I4bc68567cda57d73d030d9a5017cc411f7ee7732
2024-02-07 10:51:23 +00:00
Dmitriy Rabotyagov 252c327d38 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 5300fcea9d0f03d0efae24048ea943dcd8f0863e
  - Run ceph_client when cinder uses Ceph
    
    In usecases where only cinder is using ceph we currently do not
    execute ceph_client role, which makes nodes failing to spawn instances
    from RBD volumes.
    
    Sample usecase where Glance might be using Swift and it might be desired to use
    local storage for Nova ephemeral drives, but cinder spawning volumes
    on Ceph
    
    Currently this can be workarounded with setting `nova_rbd_inuse: True` but
    at the same time `nova_libvirt_images_rbd_pool: ''`, though this is
    counter-intuitive and this patch aims to improve this.
    
    Change-Id: I412d1e9ccb51f0cd33a98333bfa1a01510867fbe
2024-01-18 19:16:10 +00:00
Dmitriy Rabotyagov 3f75e5c1bf Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 5a533aae238638a7af50c75d334f67215fe2142f
  - Improve Blazar integration with Nova
    
    As of today we do not have any means of Blazar integration with Nova,
    while we do provide roles for Blazar installation for a while now. This
    patch aims to bring in more native integration and remove necessity
    of overrides for such deployment.
    
    Related-Bug: #2048048
    Co-Authored-By: Alexey Rusetsky <fenuks@fenuks.ru>
    Change-Id: Ica50a5504de1b1604f72123751cbb3f45c85ab46
2024-01-08 13:17:45 +00:00
Zuul 387862cbf6 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 20e83153bb27ceef7c860526c5b838d2fc8a711b
  - Merge "Drop until-complete  flag for db purge"
  - Drop until-complete  flag for db purge
    
    Flag --until-complete is not valid for the nova-manage db purge command,
    it is working only for archive_deleted_rows [1]. Suposedly it was a
    copy/paste mistake to keep the flag in place.
    
    [1] https://docs.openstack.org/nova/latest/cli/nova-manage.html#db-archive-deleted-rows
    
    Change-Id: I7be8c41bd52b955d83c4452e67ef323abe00969e
2023-11-10 16:38:12 +00:00
Damian Dabrowski d0c4425d3b Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to ab72a180e687a209b1b48deebd0c37b6ebca042c
  - Avoid failures when default libvirt network does not exist
    
    This is a follow-up change to [1]. Depending on operating system and
    environment configuration, default libvirt network may not exist.
    Right now, `Check for libvirt default network` task throws an error in
    this case causing nova playbook to fail.
    
    This change fixes that by instructing ansible to not throw an error
    if `virsh net-list` fails with "Network not found: no network with
    matching name" because it is acceptable to not have this network.
    
    [1] https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/899768
    
    Change-Id: If692bc94f421bc84ad9e6d43f548b68196a9e751
2023-11-10 11:21:39 +00:00
Damian Dabrowski c34efb7593 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to feb15af75b1d38fdfa2c670c55a6d0f4c95c5ad7
  - Always disable libvirt default network
    
    Currently, autostart for libvirt default network is disabled only when
    this network is active during nova playbook execution.
    It's an incorrect behavior because in some cases this network may not be
    active from the beginning.
    Autostart should be always disabled to ensure that this network will not
    be unexpectedly marked as active in the future(during package upgrade,
    host reboot etc.).
    
    Closes-Bug: #2042369
    Change-Id: I697234bda1601b534ce1b6ab186fa98f83179ee8
2023-11-06 15:09:04 +00:00
Zuul 83599f7fc4 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to f372c88a093ce8a48cc3b7e0a26fd5ea06aec59a
  - Merge "Add nova_libvirt_live_migration_inbound_addr to compute SAN"
  - Add nova_libvirt_live_migration_inbound_addr to compute SAN
    
    Some deployments might want to perform live migrations over dedicated
    networks, like fast storage network, while keep management over default
    mgmt network.
    
    Current default behaviour will prevent such usecase, since
    nova_libvirt_live_migration_inbound_addr is not added to the generated
    for libvirtd certificate, and thus live migration will fail.
    
    Also to enable users override default behviour more nicely and reduce
    code duplication, new variable ``nova_pki_compute_san`` was introduced,
    that handles SAN definition for compute nodes.
    
    Change-Id: I22cc1a20190f0573b0350369a6cea5310ab0f0a7
2023-10-26 09:58:25 +00:00
Zuul 1a608ac6cc Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 5b7678c503971ae4aa1b115288401d3036e717fb
  - Merge "Cleanup upgrade to ssh_keypairs step"
  - Cleanup upgrade to ssh_keypairs step
    
    We have migrated to usage of ssh_keypairs role a while ago and we
    can remove old migration clean-up task.
    
    Change-Id: Ie3cbeb4bd41d3137f2332f28dbc72c8028fb5b3a
2023-10-26 09:54:31 +00:00
Stuart Grace 310dc7abe2 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 7f431ebcda478e023d7cf173ed43cc08b648bb3b
  - Use internal endpoint for barbican API
    
    Nova defaults to using public endpoint for Barbican API which would
    require internet access from the compute node so change this to
    use the internal API endpoint.
    
    Change-Id: Iaa14a9bf80d2e02197e74d67e812afc518fe1b65
2023-10-20 21:33:12 +00:00
Dmitriy Rabotyagov 0021c3a244 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 4aa65eb60691c50c9022c22848e3338c8f350af3
  - Fix logic of discovering hosts by service
    
    For quite some time, we relate usage of --by-service flag for
    nova-manage cell_v2 discover_hosts command to the used nova_virt_type.
    However, we run db_post_setup tasks only once and delegating to the
    conductor host. With latest changes to the logic, when this task in
    included from the playbook level it makes even less sense, since
    definition of nova_virt_type for conductor is weird and wrong.
    
    Instead, we attempt to detect if ironic is in use by checking hostvars
    of all compute nodes for that. It will include host_vars, group_vars,
    all sort of extra variables, etc.
    
    Thus, ironic hosts should be better discovered now with nova-manage
    command.
    
    Related-Bug: #2034583
    Change-Id: I3deea859a4017ff96919290ba50cb375c0f960ea
2023-10-20 09:17:54 +00:00
Zuul 677e74b0a1 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 32867052d70333d78b54b272987d55fc73d2344a
  - Merge "Run nova_db_post_setup from playbook directly"
  - Run nova_db_post_setup from playbook directly
    
    Due to some bugs delegation of tasks from compute to conductor hosts
    does not work in real life. Due to that task import was moved to
    the playbook level using role import in combination with tasks_from.
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/897570
    Change-Id: I777b1c90f57c805bc0a8593b5a5c7e63e43c4cd8
2023-10-16 22:45:48 +00:00
Dmitriy Rabotyagov 078e7b8a44 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to b266f9cda4a37037ca2eb158a8e2b22df6a3fa88
  - Stop generating ssh keypair for nova user
    
    With transition to ssh-certificates for nova authorization, we no longer
    need to generate and have SSH certificates for the nova user.
    
    Change-Id: Iff105bafc177271cb59fb0662d4c139f56e64325
2023-10-16 12:05:30 +00:00
Dmitriy Rabotyagov de8e7bf5e2 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 6fd5535e57066a1ee63d657f2d5c4f9c40d76214
  - Add barbican_service_user section
    
    Defining barbican_service_user is required for succesfull attachement
    of ecnrypted volumes to VMs. Without it being in place nova-compute
    fails with not being able to get service_token.
    
    Change-Id: I8ae3e263185b1cd8036a4fde12d9c950f2ce8b98
2023-10-09 14:27:50 +00:00
Dmitriy Rabotyagov 34e9395213 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to d82a9d424e41dcf8f34cef06cdc2b9e6991c8248
  - Fix example playbook linters
    
    Change-Id: I0d44b87c2ac31827eeb72c1db3d48e0ca571633a
2023-10-09 14:26:35 +00:00
Zuul d6519cd3b7 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to e57d07663303b88558f1dd1c22cddd77fb9a2538
  - Merge "Do not install qemu package on debian derived OS"
  - Do not install qemu package on debian derived OS
    
    This is a dummy package with almost no content and no dependancies.
    It does not exist on debian 12.
    
    Change-Id: Ibb330238e728af257d46812e64a58fc71a424a1f
2023-09-20 15:15:09 +00:00
Dmitriy Rabotyagov 9d3ba5032b Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 08ccb5108adfec922343e4efcf7368ffa770a519
  - Split lines to not exceed 160 characters limit
    
    Change-Id: Ia5afdded2df7ec80b36072dec3c7fbbce5600647
2023-09-20 12:32:56 +00:00
Marc Gariepy 0cde7e8c82 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 9d2924fa80a9c71b6ed0f6cd7bb8f6b9ad9450fe
  - Config has changed for pci passthrough.
    
    updating the config for pci devices since the old config is deprecated.
    https://docs.openstack.org/nova/latest/configuration/config.html#pci.device_spec
    
    Change-Id: Id2da29464359b4845c7d05e3bec53759341f4bad
2023-09-06 00:10:20 +00:00
Zuul c350ee93b9 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 6873b7d8a1e683af7ffdaf26892ea90e6872efbe
  - Merge "Add quorum queues support for the service"
  - Add quorum queues support for the service
    
    This change implements and enables by default quorum support
    for rabbitmq as well as providing default variables to globally tune
    it's behaviour.
    
    In order to ensure upgrade path and ability to switch back to HA queues
    we change vhost names with removing leading `/`, as enabling quorum
    requires to remove exchange which is tricky thing to do with running
    services.
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/875399
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/873618
    Change-Id: I792595dac8b651debcd364cd245145721575a516
2023-09-04 08:03:03 +00:00
Zuul 0308c35c0f Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to bf6aaf7ab04b1a86baea320bd008f3aadd6f1a05
  - Merge "Enable multiple console proxies where requried in deployments"
  - Enable multiple console proxies where requried in deployments
    
    When Nova is deployed with a mix of x86 and arm systems
    (for example), it may be necessary to deploy both 'novnc' and
    'serialconsole' proxy services on the same host in order to
    service the mixed compute estate.
    
    This patch introduces a list which defines the required proxy
    console types.
    
    Change-Id: I93cece8babf35854e5a30938eeb9b25538fb37f6
2023-08-30 09:49:31 +00:00
James Denton a6f47cd415 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to a2fb474086f91b58a55308f091f4b4a841942646
  - Allow Glance region to be set via variable
    
    The region_name var is missing from the [glance] block in
    the nova.conf template, and while a conf override can be used,
    all other service blocks have region_name defined and overridable
    with service_region.
    
    Change-Id: I28ac078f9ebe24c8799638e93d0967003d0c0605
2023-08-22 14:23:15 +00:00
Zuul a96e0de02e Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 2928f95e1ad70ff914deefcf2c66b6b49125a89e
  - Merge "Fix linters and metadata"
  - Fix linters and metadata
    
    With update of ansible-lint to version >=6.0.0 a lot of new
    linters were added, that enabled by default. In order to comply
    with linter rules we're applying changes to the role.
    
    With that we also update metdata to reflect current state.
    
    Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
    Change-Id: I730ae569f199fc8542a5a61beb149f459465d7e2
2023-08-14 11:19:50 +00:00
Damian Dabrowski 4822357713 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 7000bc3f3f401c1f3557d074bae197513c977464
  - Deprecate nova_ram_weight_multiplier
    
    Long time ago a variable `nova_ram_weight_multiplier` was implemented
    and its default value was set to 5.0.
    There are 2 issues with this:
    1. Default value in nova is 1.0 [1] so our value is much bigger than
    nova's default without having a strong reason for that.
    2. OSA does not provide similar variables for other multipliers like
    `cpu_weight_multiplier`.
    
    Because there are a couple of different multipliers and more of them
    can be implemented in the future(for ex.
    `hypervisor_version_weight_multiplier` was implemented in 2023.2) it
    would be hard for the OSA project to maintain variables for all of them.
    It is better to deprecate `nova_ram_weight_multiplier` and let users
    define multipliers with `nova_nova_conf_overrides` if necessary.
    
    [1] https://docs.openstack.org/nova/2023.1/configuration/config.html#filter_scheduler.ram_weight_multiplier
    
    Change-Id: I4f82840e94312d38696e3ddd05ef494821233f4d
2023-08-08 15:50:19 +00:00
Damian Dabrowski da92de1d25 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to c90a5c2b927b955aaa82d78e65548423b24f2ecc
  - Apply always tag to nova_virt_detect.yml
    
    Running nova playbook with tag limit may lead to an error:
    
    The conditional check 'nova_virt_type != 'ironic'' failed. The error
    was: error while evaluating conditional (nova_virt_type != 'ironic'):
    'nova_virt_type' is undefined\n\nThe error appears to be in
    '/etc/ansible/roles/os_nova/tasks/main.yml': line 289, column 3, but
    may be elsewhere in the file depending on the exact syntax problem.
    
    It can be easily fixed by applying always tag to tasks from
    nova_virt_detect.yml
    
    Change-Id: I56aee80180804b8a3e3316cffc6fa8115513b8f1
2023-07-06 17:45:36 +00:00
Dmitriy Rabotyagov dc7d548078 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 47007578b164287c5bbbf425222cd8a53a37a306
  - Install libvirt-deamon for RHEL systems
    
    CentOS has upgraded their libivrt to version 9.3, where libvirt-daemon
    is not installed as a dependency anymore. So we need to explicitly
    isntall this package to restore functionality.
    
    [1] https://bugzilla.redhat.com/show_bug.cgi?id=2209936
    
    Change-Id: Ic6f2606b5a478c7a891c25bd131ad351a19699bc
2023-05-26 01:25:48 +00:00
Dmitriy Rabotyagov 91aea236ab Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 00d59dcd4198cd34b23fa384b0cdc85e69931192
  - Add auth credentials for service_user
    
    Having auth credentials in service_user is required to interact with
    other services. Otherwise nova won't be properly authenticated,
    for example during volume detach request.
    
    Change-Id: Ifd607d3acfb18ee4d1de0b8dc39350419cae9c22
2023-05-23 13:30:03 +00:00
Zuul c1a3a4df83 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 4b20549673e80d15eea25c889b869cd7d26ee161
  - Merge "Define service_user for nova services"
  - Define service_user for nova services
    
    In order to cover OSSA-2023-003, a requirement to define service_user
    section for all nova services has been added by nova.
    
    Change-Id: I81cd6431fec94f56b0ebd66c94e90c9623ba0e38
2023-05-20 10:16:28 +00:00
Zuul b9d51c254c Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 34e86d2851000ad3d1ca6eed31455a670cfe7d5e
  - Merge "Add way to periodically trim Nova DB"
  - Add way to periodically trim Nova DB
    
    We're adding 2 services that are responsible for executing db purge and
    archive_deleted_rows. Services will be deployed by default, but left
    stopped/disabled. This way we allow deployers to enable/disable
    feature by changing value of nova_archive/purge_deleted.
    
    Otherwise, when variables set to true once, setting them to false won't
    lead to stopoing of DB trimming and that would need to be done manualy.
    
    Change-Id: I9f110f663fae71f5f3c01c6d09e6d1302d517466
2023-05-18 21:33:57 +00:00
Zuul 569c9d92ae Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 6314e46fe91f65a8929c1ad7c811e24efa7b95de
  - Merge "Ensure ipxe-qemu is always installed"
  - Ensure ipxe-qemu is always installed
    
    This is required by qemu-system-x86 but only recommended by
    qemu-system-arm. Without the file /usr/lib/ipxe/efi-virtio.rom
    from ipxe-qemu it is not possible to boot a VM on arm
    hosts.
    
    This patch ensures that ipxe-qemu is always installed.
    
    Change-Id: I27fd98a1568bda8bea3d88c3f18b44a080982d0e
2023-05-18 18:32:13 +00:00
Zuul 1e1a56119e Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 2925c1c29c518af42f43347764370222b290a3cb
  - Merge "Delegate compute wait tasks to service_setup_host"
  - Delegate compute wait tasks to service_setup_host
    
    At the moment, we do deploy openrc file on conductors and delegate
    task to them. At the moment there is no good reason to do so,
    since we're actively utilizing service_setup_host for all interactions
    with API. With that we also replace `openstack` commands with native
    compute_service_info module that provides all information we need.
    
    Change-Id: I016ba4c5dd211c5165a74a6011da7bb384c7a82a
2023-05-09 12:14:08 +00:00
Zuul 63b02f8770 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 5a839b7af3b8617d319bfe71e6d40b1173dc7c81
  - Merge "Use include instead of import for conditional tasks"
  - Use include instead of import for conditional tasks
    
    When import is used ansible loads imported role or tasks which
    results in plenty of skipped tasks which also consume time. With
    includes ansible does not try to load play so time not wasted on
    skipping things.
    
    Depends-On: https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/880344
    Change-Id: I47c6623e166254802ed0b479b2353c5f2ceb5cfa
2023-05-04 23:12:03 +00:00
Zuul 5f212aadbb Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to dd00e710d7a1edbce6600032aed5c63354346f7d
  - Merge "Add TLS support to nova API backends"
  - Add TLS support to nova API backends
    
    By overriding the variable `nova_backend_ssl: True` HTTPS will
    be enabled, disabling HTTP support on the nova backend api.
    
    The ansible-role-pki is used to generate the required TLS
    certificates if this functionality is enabled.
    
    `nova_pki_console_certificates` are used to encrypt:
    - traffic between console proxy and compute hosts
    
    `nova_pki_certificates` are used to encrypt:
    - traffic between haproxy and its backends(including console proxy)
    
    It would be complex to use nova_pki_console_certificates to encrypt
    traffic between haproxy and console proxy because they don't have valid
    key_usage for that and changing key_usage would require to manually set
    `pki_regen_cert` for existing environments.
    
    Certs securing traffic between haproxy and console proxy are provided in
    execstarts because otherwise they would have to be defined in nova.conf
    that may be shared with nova-api(which stands behind uwsgi and should
    not use TLS).
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
    Change-Id: Ibff3bf0b5eedc87c221bbb1b5976b12972fda608
2023-05-03 14:57:07 +00:00
Dmitriy Rabotyagov 21cc5addf2 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to cb62372a31da4633525977bf93cfa952a7531108
  - Move online_data_migrations to post-setup
    
    According to nova rolling upgrade process [1], online_data_migrations
    should run once all the services are running the latest version of the
    code and were restarted. With that, we should move online migrations
    after handlers being flushed, when all services are restarted.
    
    At the same time, nova-status upgrade check must run before services
    are restarted to the new version, as service restart might lead to
    service breakage if upgrade check fails [2]. It makes no sense to
    run upgrade check when upgrade is fully finished.
    
    [1] https://docs.openstack.org/nova/latest/admin/upgrades.html#rolling-upgrade-process
    [2] https://docs.openstack.org/nova/latest/cli/nova-status.html#upgrade
    
    Change-Id: Ic681f73a09bb0ac280c227f85c6e79b31fd3429a
2023-04-14 15:06:27 +00:00
Dmitriy Rabotyagov 0478e11260 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 94690a06dac367d036c0aea82ba2cd278763b2e1
  - Ensure service is restarted on unit file changes
    
    At the moment we don't restart services if systemd unit file is changed.
    
    We knowingly prevent systemd_service role handlers to execute
    by providing `state: started` as otherwise service will be restarted twice.
    With that now  we ensure that role handlers will also listen for systemd
    unit changes.
    
    Change-Id: I4273d2fbcbff3028e693e3274093c1afebdcfca2
2023-04-11 20:00:16 +00:00
Dmitriy Rabotyagov bec2506ec2 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to b6e904213e26c2c007fba30b8928f49f77f3779b
  - Remove nova_network_services mapping
    
    At the moment we don't really utilize neutron_provider_networks
    mapping except of 2 quite specific drivers, that are NSX and Nuage.
    For these 2 usecases we suggest using overrides functionality instead.
    
    Change-Id: I7d905a1dbda1ec722b161b96742247c806bed162
2023-04-08 10:44:58 +00:00
Dmitriy Rabotyagov 7ec1de3c2f Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 0e59a29947baaa0df7c4242d26eadb402ddefb4c
  - Remove use_forwarded_for definition for nova-api
    
    use_forwarded_for option for api has been deprecated since 26.0.0
    as this feature is the duplicate of the HTTPProxyToWSGI that
    has being enabled by default now.
    
    Change-Id: I45e70e42605455df944ced63f106a76f351052e8
2023-04-08 10:44:57 +00:00
Dmitriy Rabotyagov 77d9fae778 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 6dfcf9d4c8d3c0604e1a3646e62490eb94056678
  - Remove calico driver reference
    
    Calico driver support has been removed from OpenStack-Ansible
    starting in Antelope release [1]. We clean-up nove role to drop calico
    support from it as well.
    
    [1] https://review.opendev.org/c/openstack/openstack-ansible/+/866119
    
    Change-Id: Ie9c118b8bab265e5bf06b6ec05731cd673ee4d95
2023-04-08 10:44:55 +00:00
Jonathan Rosser 351a6f6379 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to a5808248cb90a94e807ebc1b71a8e0a4f65df7ee
  - Stop installing qemu-system on debian variants
    
    qemu-system on debian derivative OS is a meta-package which installs
    qemu-system-* for all architecures understood by qemu.
    
    This is different from redhat type OS where the qemu-kvm package
    installed with dnf only installs the qemu-system-* binary matching
    the host architecture.
    
    This gives two problems, first there is inconsistency in openstack-ansible
    deployments between redhat and debian OS. Second, there is a potentially
    unexpected emulation of architectures when launching VM on a cloud
    with a mix of compute architectures when a full set of qemu-system-*
    binaries is available on a compute node. The compute node becomes a
    candidate for scheduling any of the supported architectures and a
    very specific configuration is needed both from the operator and end
    user to ensure that VM are run on a native architecture or emulated as
    required.
    
    This patch changes the installation so that redhat and debian compute nodes
    only have the native qemu-system binary installed.
    
    A new feature should be introduced to openstack-ansible in the future
    to explicitly control installation of non-native qemu-system-* binaries
    and write the config options for controlling emulation.
    
    Change-Id: I1c876c7968efb7f24880f1a6e96ba6b7264ddc94
2023-03-27 15:36:57 +00:00
Zuul 4cd3f3d770 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to c0fa21ca476d6191ce5df0c55f1c1419558ba9c4
  - Merge "Install openvswitch repo for RDO scenario"
  - Install openvswitch repo for RDO scenario
    
    RDO packages for nova does depend on python3-openvswitch,
    which makes it required to install OVS on computes regardless
    of everything else.
    
    We also clean out pre-rhel9 variable files as they're not needed anymore
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/872896
    Change-Id: I3e31254b7dd1c0ff3cb46153cefce6f6cadd52aa
2023-02-21 20:16:54 +00:00
Zuul a2f4654a8f Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to f521dd8d13af5996389af7f8a53f7735204120c5
  - Merge "Use SSL database connections with nova-manage"
  - Use SSL database connections with nova-manage
    
    When Galera SSL is enabled, use SSL encrypted database connections with
    nova-manage commands where a connection string is provided.
    
    Change-Id: I7019b966b475c09a4e3218461941c1112ae28028
2023-02-13 12:22:43 +00:00
James Denton 677988a042 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 69df45b068ade8311ace9ef30745bd229ed9ea24
  - Add authentication for [cinder] section of nova.conf
    
    Nova complains about an inability to access endpoint list for block
    storage. This patch updates nova.conf with the respective configuration.:
    
    Example errors in nova-compute log:
    
    1. The [cinder] section of your nova configuration file must be configured
    for authentication with the block-storage service endpoint.
    
    2. Delete attachment failed for attachment <UUID>. Error: Unknown auth type:
    None (HTTP 401) Code: 401: cinderclient.exceptions.Unauthorized:
    Unknown auth type: None (HTTP 401)
    
    Change-Id: I4c1ae32ed078a4412ff44b7ac3f921b223d0cba3
2023-02-13 12:22:42 +00:00
Jonathan Rosser 0bbb857f88 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to b0fcbce66f1a86ac493bfec7a23932e6534bfb48
  - Support configuration of resource providers with config files
    
    Resource providers can be configured using the API or CLI, or they
    can also be configured on a per-compute node basis using config
    files stored in /etc/nova/provider_config.
    
    This patch adds support for a user defined list of provider config
    files to be created on the compute nodes. This can be specified in
    user_variables or perhaps more usefully in group_vars/host_vars.
    A typical use case would be describing the resources made available
    as a result of GPU or other hardware installed in a compute node.
    
    Change-Id: I13d70a1030b1173b1bc051f00323e6fb0781872b
2023-01-18 09:32:53 +00:00
Dmitriy Rabotyagov 8c9317a48a Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to e8049ceaea20395630bb9fc64b2fee6477f25dc0
  - Fix scheduler track_instance_changes option
    
    There was a typo for track_instance_changes once it was moved
    under filter_scheduler.
    
    [1] https://docs.openstack.org/nova/latest/configuration/config.html#filter_scheduler.track_instance_changes
    
    Change-Id: I8316989a57ada71e72af114984ec25f227def7ba
2023-01-13 17:24:17 +00:00
Dmitriy Rabotyagov e37c74d877 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 9a3d5b0be33ee241b6dd2e2a9a408e2784a4747a
  - Enable rbd download when nova_glance_rbd is in use
    
    With original patch [1] I somehow missed to define enable_rbd_download
    along with adding rbd_user/pool/conf. However, neither of these
    options are taken into account if enable_rbd_download is set to false,
    which is the default value.
    
    [1] https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/828897
    
    Change-Id: I3220de5863c9c3af418e71774c103c4712b16086
2023-01-09 18:01:40 +00:00
OpenStack Release Bot b3a2b68870 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to a7061f3861cc7f8337175d74bdc344b200f192d3
  - Update master for stable/zed
    
    Add file to the reno documentation build to show release notes for
    stable/zed.
    
    Use pbr instruction to increment the minor version number
    automatically so that master versions are higher than the versions on
    stable/zed.
    
    Sem-Ver: feature
    Change-Id: I877a352de30bdf9b461603e236d8ec0973640c45
2022-12-13 14:01:28 +00:00
Zuul a50fea667a Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to 28d82b68b591a635335da4e0496c22c7700fe66d
  - Merge "Define local facts separately only for distro"
  - Define local facts separately only for distro
    
    We do define local facts locally using python_venv_build role so no need
    to do the same as a separate task for source installs. Though these
    facts are still needed for distro path.
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/862924
    Change-Id: I2f7f1281d19d61a7b4cbf14369aa3bb007debd0d
    Needed-By: https://review.opendev.org/c/openstack/openstack-ansible/+/866126
2022-12-08 14:44:16 +00:00
Zuul 151f779423 Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to ab92656a3612906969c21f0948aefc02c2c6a04c
  - Merge "Add nova_ironic_serialconsole_type default setting"
  - Add nova_ironic_serialconsole_type default setting
    
    This variable determines if one of the nova console proxies is
    deployed alongside the nova-compute service for ironic. Currently
    the only supported values are "disabled" and "serialconsole"
    
    Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/860947
    Change-Id: I8eae97f9c60956049072de8b04e557671a8cdcfa
2022-12-06 21:28:44 +00:00
George Shuklin 0f3b499efa Update git submodules
* Update openstack-ansible-os_nova from branch 'master'
  to fc87fa7b32a53909721c29cfe8e845340b944d62
  - fix: os_vif_ovs should not be in the middle of libvirt section
    
    Section
    
    [os_vif_ovs]
    isolate_vif = True
    
    was placed in the middle of the [libvirt] section, causing
    all migration settings to be placed in os_vif_ovs instead of libvirt.
    
    Change-Id: Ief7eb74343f69912fa8a41a200edf22596adfea3
2022-12-01 23:01:27 +00:00