* Update openstack-ansible-os_placement from branch 'master'
to e32db7ae7590e451a67d1e6f69c4021d3d9ac68d
- Add online_data_migrations for placement
According to the placement upgrade process, online_data_migrations
should be triggered right after upgrading database schema
and placement services on all controller nodes [1]
We also replace usage of `need_service_restart` local fact
with `need_online_data_migrations` as first one is never actually used.
[1] https://docs.openstack.org/placement/latest/cli/placement-manage.html#placement-database
Change-Id: I430ea45fe321440d832a0a90747b80f5d197f073
* Update openstack-ansible-os_placement from branch 'master'
to 8dc0edec53ed75bbc875e42987273dd5785b1edc
- Merge "Fix linters and metadata"
- Fix linters and metadata
With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.
With that we also update metdata to reflect current state.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/891474
Change-Id: I315c7fa58ee07786832d21c13f281968ee3d400a
* Update openstack-ansible-os_placement from branch 'master'
to 88218e77c96b285faf1d2a3c749b942920e50ae3
- Use proper galera port in configuration
While <service>_galera_port is defined and used for db_setup
role, it's not in fact used in a connection string for oslo.db.
Change-Id: I6746406488c372d5e31350ec8092af8cef027657
* Update openstack-ansible-os_placement from branch 'master'
to 30b4098fd2b9e8eb17e4b03b4632f9f6637000b8
- Add TLS support to placement backends
By overriding the variable `placement_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the placement backend api.
The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: Id84137b624624482939989098f1b04263d62c0fd
* Update openstack-ansible-os_placement from branch 'master'
to 5ad5bc1d84f245fe59f5c52ac5227e4cabff6424
- Ensure service is restarted on unit file changes
At the moment we don't restart services if systemd unit file is changed.
We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now we ensure that role handlers will also listen for systemd
unit changes.
Change-Id: Iaa2f286fa25412a1ed8c72c0b62bacd3ac50f125
* Update openstack-ansible-os_placement from branch 'master'
to 250411c408af13d07e67a4d8148937fdc812a6ce
- Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.
Sem-Ver: feature
Change-Id: Ia8d85d04b427fda33b8dbde917c5b42d1a277a10
* Update openstack-ansible-os_placement from branch 'master'
to 6084c248fcae02c413133329b705678cd75c1bfe
- Install git into placement containers
If venv_wheel_build_enable is defined to False, placement will fail to
clone and install repositories due to missing git binary.
Change-Id: If1e3eec0c558d1472da7bc3a4e87825e36ba4fdc
Related-Bug: #1989506
* Update openstack-ansible-os_placement from branch 'master'
to 39f3c1f016f077a8b1b647b1c14f11cda3ccb7a1
- Remove redundant vars line
This line has been here since the initial commit
Iaa11a8cc4d945712b62c3b9c2cb6ad168def34eb, but should already
be covered by the distribution_major_version line above.
Change-Id: Ia6b77dd8cd70e099e9b287625ab3320b1986f599
* Update openstack-ansible-os_placement from branch 'master'
to 6239b64f3c1170ffcf767c6d766bf1662a83ff7d
- Merge "Support service tokens"
- Support service tokens
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.
Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: I4e9fff59bbfa9c8a1ae0236d077ac9ee2881c04b
Related-Bug: #1948456
* Update openstack-ansible-os_placement from branch 'master'
to 240cd95c59ddc5d704b4682e4d34531d7e8f82f9
- Remove mention of haproxy-endpoints role
Role was never migrated to usage of haproxy-endpoints role
and included task was used instead the whole time.
With that to reduce complexity and to have unified approach, all mention
of the role and handler are removed from the code.
Change-Id: I4614e0249d65fda1762c6d31d93b3b77babb290e
* Update openstack-ansible-os_placement from branch 'master'
to 025824434be3ee3b551b54f42b3b6b7f2dd9288e
- Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.
Change-Id: If134334692ceb392f5a3704415ea4bb6cdeeb85f
* Update openstack-ansible-os_placement from branch 'master'
to ba338055bb7ea2f6a5412904350141d510c91c88
- Merge "Use common service setup tasks from a collection rather than in-role"
- Use common service setup tasks from a collection rather than in-role
Change-Id: I6d6831e5760c040cc46e4493b79b3aee58fbbb08
* Update openstack-ansible-os_placement from branch 'master'
to 68894c47e1cb03d3ec2bdb1f73322aca19199e6b
- Fix incorrect ansible tag
Change-Id: I5ed7d7a41e81243d6ad2dd7a4300cf772ed0ac7f
* Update openstack-ansible-os_placement from branch 'master'
to ff56a9050ffc65e99ea6ea8dbe09ed63cd663fb8
- Merge "Move system_crontab_coordination role to collection"
- Move system_crontab_coordination role to collection
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/824590
Change-Id: I5d02a3ddabf5a22d8e954e9c5e843a38c078a547
* Update openstack-ansible-os_placement from branch 'master'
to ee909497f29724048b5f46f3b758d6880bd883e5
- Refactor use of include_vars
Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.
This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.
Change-Id: If58b7e10f39affe2f34af9e9503bc1f90caa4b0e
* Update openstack-ansible-os_placement from branch 'master'
to ed4f061d5000ecd1d2412494d28a31123b217dc5
- Database connection pooling improvements
- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: I77b4e8c70a21eada431c824044c0d1563df70dcc
* Update openstack-ansible-os_placement from branch 'master'
to f8e279cc3db073d824b70f95069525ddabe7914a
- Use config_template as a collection
Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814
Change-Id: I374d125994239a885007081d0490e4a2c7018235
* Update openstack-ansible-os_placement from branch 'master'
to ad9f7c87cb55bfd40e57ad5401868f4b2a58c929
- Refactor galera_use_ssl behaviour
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.
Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.
[1] 78f0cf99e5/pymysql/connections.py (L267)
Change-Id: Ie6e82e625808c64d44e603843ec985daf18efca4
* Update openstack-ansible-os_placement from branch 'master'
to cb9fc915dbb1c3e8b0e0f10730001bb8769dec34
- Changed minversion in tox to 3.18.0
The patch bumps min version of tox to 3.18.0 in order to
replace tox's whitelist_externals by allowlist_externals option:
https://github.com/tox-dev/tox/blob/master/docs/changelog.rst#v3180-2020-07-23
Change-Id: I4765340f01bd4969cf8cd2d3f949219ad93c3f79
* Update openstack-ansible-os_placement from branch 'master'
to 5fab204977a768a0a30a5685b97b1fd817b1f1bf
- These should be indented four spaces to match the other things in this block
Change-Id: Ic5e1af250513b896e7f23a3bdc14dc1dd1aa2e3a
* Update openstack-ansible-os_placement from branch 'master'
to a8f9bf811e4717ac414a64878a95ff715959a348
- Replace linters test with integarted one
We've created integrated linters check job a while back and it's successfully
working for several releases. At the moment we experience difficulties
with future maintenance of the linters check from the openstack-ansible-tests
repo. So instead of fixing current one, we replace it with modern version of
the test.
Change-Id: I0bfe5fdf3694232108e52b3bccfba950a2ecf15b
* Update openstack-ansible-os_placement from branch 'master'
to 0dfcbc27ecb07db6664b3bb00e1630af4edb02c4
- Allow to override placement policy files
We implement `placement_policy_overrides` variable in order to allow
management of placement policy files when needed.
Change-Id: If219ac80ceed2bf455a7de83b848c9d0a66371a4
* Update openstack-ansible-os_placement from branch 'master'
to 33ad9aec7c9c6d093b9e03fffa0903cba99bde24
- Merge "Remove references to unsupported operating systems"
- Remove references to unsupported operating systems
All references to Gentoo, SUSE, Debian stretch and Centos-7 are removed.
Conditional tasks, ternary operators and variables are simplified where possible
OS specific variables files are generalised where possible
Change-Id: I58b9cec20349c722631e5934c44efb54153daab7
* Update openstack-ansible-os_placement from branch 'master'
to 3fcf5109596d70d7de984ca92dec1afceaa2d655
- Use ansible_facts[] instead of fact variables
See https://github.com/ansible/ansible/issues/73654
Change-Id: I2197cf5a9a19e6af0912f21dcc12cd7551dc2e85
* Update openstack-ansible-os_placement from branch 'master'
to b58217c7877a40795b884ff61d2aee11396983b2
- Merge "Move placement pip package from a constraint to a requirement"
- Move placement pip package from a constraint to a requirement
This is necessary to support the new pip resolver.
Depends-On: I9be6bbf4a29a4da2ddf96dc0336bc2a7d8ec9281
Depends-On: I49c75dd11d6c4e8d37fe013b7ffdfd56ff193fcd
Change-Id: I00b42c61d03c83bfbfec69ad3bd47d940bb449d2
* Update openstack-ansible-os_placement from branch 'master'
to fb5101f7ea340065b36c5bc8ab6b5748e3a5fd7f
- [reno] Stop publishing release notes
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.
Change-Id: I6b2d4f0cb4686e1606b8f6256e0dbd501c688cf3
* Update openstack-ansible-os_placement from branch 'master'
to a12e134c1cd8e79abf6064f098505e8b338395ce
- Merge "Use global service variables"
- Use global service variables
Instead of overriding each service separatelly it might make
sense for deployers to define some higher level variable that
will be used first or fallback to default variable.
Change-Id: I5b8a03d96375d67c8090af182d244495fd0a7f67
* Update openstack-ansible-os_placement from branch 'master'
to bf42c4a4038d7743df5134f41f803f26c3cdbd90
- Reduce number of processes on small systems
Even the most modest 4C/8T system would run with the maximum 16 processes
due to the calculation being VCPU*2.
We devide amount of CPUs to number of threads for hyperthreaded CPUs
Change-Id: I1dbbfc82f24732f8534594ff25aefc03e5c4003c
* Update openstack-ansible-os_placement from branch 'master'
- Trigger service restart
We need to trigger restart of the service once config is changed
Change-Id: I9417f519ba272a8a2ebe08e71311cba27220c4cc
* Update openstack-ansible-os_placement from branch 'master'
- Merge "Remove support for lxc2 config keys"
- Remove support for lxc2 config keys
Change-Id: I1eedc024a173a5fba605e39fa2065f6d4f41be64
* Update openstack-ansible-os_placement from branch 'master'
- Define condition for the first play host one time
We use the same condition, which defines against what host some "service"
tasks should run against, several times. It's hard to keep it the same
across the role and ansible spending additional resources to evaluate
it each time, so it's simpler and better for the maintenance to set
a boolean variable which will say for all tasks, that we want to run
only against signle host, if they should run or not now.
Change-Id: If086478f8ea9a0ffb763fd05d6a110e1c12f32b3
* Update openstack-ansible-os_placement from branch 'master'
- Use the utility host for db setup tasks
Move it to the service setup host (defaults to utility[0]) instead
of the galera[0] host, and use galera_address (defaults to internal VIP)
as the endpoint instead of a local connection on the db host.
Change-Id: Ic831664bd500b8a3ed22238fef0b19ed56313d72
* Update openstack-ansible-os_placement from branch 'master'
- Cleanup ansible_python_interpreter
ansible_pyhton_interpreter is set to auto, it's not needed anywhere now.
Change-Id: Ieb635b4eb731521bf30790f1b3f9db5df90db75f
* Update openstack-ansible-os_placement from branch 'master'
- Merge "Use newer openstackdocstheme and reno versions"
- Use newer openstackdocstheme and reno versions
The sync from https://review.opendev.org/733244 updated to
openstackdocstheme 2.2.1 and reno 3.1.0 versions.
Set openstackdocs_pdf_link to link to PDF file. Note that
the link to the published document only works on docs.openstack.org
where the PDF file is placed in the top-level html directory. The
site-preview places the PDF in a pdf directory.
openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.
See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html
Change-Id: I436916fffd872f48292b6d85454410bb27ca47e7
* Update openstack-ansible-os_placement from branch 'master'
- Update master for stable/ussuri
Add file to the reno documentation build to show release notes for
stable/ussuri.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.
Change-Id: Ib26763dd8aefbf55c8c753bb126dc2567cebdee3
Sem-Ver: feature
Dmitriy Rabotyagov
OpenStack Release Bot