Commit Graph

1310 Commits

Author SHA1 Message Date
Zuul 3392f8555a Merge "vitrage: Stop tweaking config/log directory" 2024-04-17 20:02:56 +00:00
Zuul b7d9b4031d Merge "Use anchor instead of specific package resource" 2024-04-17 16:54:30 +00:00
Zuul b15da79b93 Merge "Refactor ssl_key to simplify horizon manifest" 2024-04-17 16:54:28 +00:00
Takashi Kajinami 3fd3c85f55 Use anchor instead of specific package resource
... to make the manifest more robust with the changes in underlying
modules.

Change-Id: Icf3bf402e694db0f2dcabffbfdfd2f639585e9de
2024-04-17 18:01:55 +09:00
Takashi Kajinami 726c408409 vitrage: Stop tweaking config/log directory
... because current vitrage-tempest-plugin does not need access to
vitrage config files or log files.

Also remove the not for old bug which was already resolved.

Change-Id: Ic50a72a80277345b78368c81c7889721af9ef10d
2024-04-17 08:55:03 +00:00
Takashi Kajinami a207b80f97 Refactor ssl_key to simplify horizon manifest
Change-Id: Id8098a6ee85224945408ec48a391c6f3937a4fd2
2024-04-17 12:48:24 +09:00
Takashi Kajinami cf24cb24a2 Test redis sentinel coordination backend
tooz 6.1.0 introduced support for authentication and SSL for Redis
Sentinel connections. Switch the coordination backend to Sentinel to
test this deployment pattern.

Note that redis storage driver in gnocchi does not yet support SSL and
authentication for Sentinel so it still continues using Redis.

Change-Id: Ie429773523280aa15d2da3eec9bd775364b44333
2024-04-12 00:25:56 +09:00
Takashi Kajinami 646eeea9d5 Test redis (sentinel) cache backend
oslo.cache 3.7.0 introduced new options to use redis or redis sentinel
as backend. To test the functionality to configure this backend, switch
the cache backend in scenario001(Redis) and scenario002(Sentinel).

The switch is made only in CentOS because Caracal (or master) packages
are not available for Ubuntu, but may be later made in Ubuntu as well
once UCA Caracal is released.

Change-Id: Ieb681f5bbbf28e1963ab346c17e07265769da4e6
2024-04-12 00:23:33 +09:00
Zuul 2fd6333f6f Merge "tempest: Set new metric_backends option" 2024-03-26 16:15:14 +00:00
Zuul 369635359f Merge "octavia: Use module feature to install certificate files" 2024-03-26 12:41:23 +00:00
Zuul 1922b2a420 Merge "Replace deprecated trove::api::service_credentials" 2024-03-26 12:40:06 +00:00
Takashi Kajinami b00ce4c19a tempest: Set new metric_backends option
Change-Id: Id7960cd67eec3d18d5899205733486b99769b3cc
2024-03-26 10:24:35 +09:00
Zuul 11ff84756e Merge "Enable service user token for Barbican key manager" 2024-03-25 15:40:19 +00:00
Takashi Kajinami 97d7001ea7 Replace deprecated trove::api::service_credentials
Depends-on: https://review.opendev.org/914052
Change-Id: Ie8f5260a502dd39d05b138394db79808f64bc596
2024-03-25 13:07:28 +09:00
Takashi Kajinami 0775bb5580 Enable service user token for Barbican key manager
We already configure the auth options for this feature but did not
enable it actually.

Change-Id: I2b117ba6ddb962632775afa8bcb5aa01911527f0
2024-03-20 02:41:13 +09:00
Takashi Kajinami 67183376c6 Neutron: Enable metadata extension of ovn-agent
Depends-on: https://review.opendev.org/c/openstack/puppet-neutron/+/913460
Change-Id: I2a89309f694b047b8c222c017d6b61f62b2ed331
2024-03-16 22:31:13 +09:00
Takashi Kajinami c86b3217ca Neutron: Use IPv6 metadata host
Change-Id: I4e02f53b5594b9089f1c10858b3918f55923b8b5
2024-03-16 21:04:59 +09:00
Takashi Kajinami d7c2ba0550 octavia: Use module feature to install certificate files
Change-Id: I634c0ee99383c4b0dfd62e829cae7a7ddb02e774
2024-03-15 12:25:23 +09:00
Takashi Kajinami 9550949c86 Enable SSL validation for dashboard test
Change-Id: I4d74f2ac32e855790d26d7e8f59dc89b13d6f0c1
2024-03-08 18:13:30 +09:00
Takashi Kajinami 0f0823113d Drop a few remaining ec2api-tempest-plugin parameters
Some of the parameters of ec2api-tempest-plugin were not removed when
we removed EC2 API[1].

[1] cddbe5e38b

Change-Id: I4218179e08dabe61858827c9d71402dd013962e7
2024-03-08 12:53:39 +09:00
Zuul 5054bdb48c Merge "Remove murano" 2024-03-07 18:14:04 +00:00
Takashi Kajinami 502ba0c5b9 Remove murano
The murano project is being marked inactive[1] and will be excluded
from caracal release. Because of the project status and the fact that
puppet-murano has had no meaningful update or feedback from actual
users, we decided to retire the module in this cycle[2].

[1] https://review.opendev.org/c/openstack/governance/+/910434
[2] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/message/VHE6WWZKOTTKBLUVMABAAQKBN2QSEED4/

Change-Id: I0f21526476de33761ed17bae27d9915072b1cade
2024-03-06 01:19:57 +00:00
Takashi Kajinami da4432fe37 glance: deploy glance cache cron jobs
... so that we can validate cron jobs managed by the glance::cache::*
class.

Change-Id: I5d5d0cc5d53a648b0f98fb894c82967e4f5a44dc
2024-03-05 11:56:05 +09:00
Zuul dd0b489134 Merge "Remove puppet-ec2api" 2024-02-29 23:01:36 +00:00
Zuul c9800c4d62 Merge "Cinder: Look up glance endpoint from catalog" 2024-02-29 12:45:03 +00:00
Takashi Kajinami cddbe5e38b Remove puppet-ec2api
The EC2-API project was marked inactive, because of lack of appropriate
maintenance effort[1] and the project was excluded from Caracal
deliverables. This removes testing with the puppet-ec2api module
because we are also retiring this module for the unmaintained project.

[1] https://review.opendev.org/c/openstack/governance/+/902625

Change-Id: Ic8c89e096e9b3acd5a71ec0be1bff20936977bcf
2024-02-28 15:28:07 +09:00
Zuul 1d1b99eb2d Merge "Remove puppet-sahara" 2024-02-23 18:03:38 +00:00
Takashi Kajinami fc96ad92f6 Cinder: Look up glance endpoint from catalog
... instead of overriding the endpoint. This allows us to decouble
cinder manifest from glance manifest.

Change-Id: Ifa9f23c11be6fc9d14c4373a7ee605033738897b
2024-02-22 15:40:47 +09:00
Takashi Kajinami 835a008ebf Remove puppet-sahara
The sahara project was marked inactive, because of lack of appropriate
maintenance effort[1] and the project was excluded from Caracal
deliverables. This removes testing with the puppet-sahara module
because we are also retiring this module for the unmaintained project.

[1] https://review.opendev.org/c/openstack/governance/+/899986

Change-Id: Icb639d2724df41035af53e67de7d24558832adb6
2024-02-22 15:00:04 +09:00
Takashi Kajinami e864873cf7 Barbican: Enable asynchronous process
This ensure barbican-api delegate processes to barbican-worker over
rabbitmq, which is more popular deployment pattern in production.

Change-Id: Id2ec1bf07ee77a3ede1888db09d21005468d25ab
2024-02-22 01:47:40 +00:00
Zuul 2421238a0e Merge "Redis: Enable Sentinel" 2024-02-16 16:47:27 +00:00
Zuul cbcd649bef Merge "neutron: Disable rpc workers when ovn driver is used" 2024-02-10 05:47:32 +00:00
Takashi Kajinami 8a93901ee5 Redis: Enable Sentinel
Sentinel is a popular method to achieve high availability of Redis.
This is a prep work to test deployment with Redis Sentinel, and
deploys Sentinel service. Services still use Redis directly, but some
scenario may be updated to use Redis via Sentinel.

Change-Id: I728596ef20956537e38f082c9381266f8eaa686d
2024-02-10 12:50:12 +09:00
Takashi Kajinami 70b2faca1f neutron: Disable rpc workers when ovn driver is used
Neutron need no rpc workers when ovn mechanism is used and no
additional agents run. See [1] for details.

[1] https://review.opendev.org/c/openstack/neutron/+/823637

Change-Id: Ib7cce86a1f40424c1480845c28e71b25edfc501d
2024-02-09 14:45:32 +09:00
Zuul 41003dc949 Merge "octavia: Enable jobboard settings" 2024-02-06 04:08:01 +00:00
Zuul dc7874917b Merge "Trove: Enable caching" 2024-02-06 03:58:02 +00:00
Zuul b0c7a7f94a Merge "Enable caching in more services" 2024-02-05 22:26:50 +00:00
Takashi Kajinami bcd8cc0637 Trove: Enable caching
Trove supports caching using oslo.cache. This enables this feature to
test the related deployment logic.

Depends-on: https://review.opendev.org/907645
Change-Id: I36fa179f19cb9e97fa597045986bcb52d74125b7
2024-02-05 01:46:44 +00:00
Takashi Kajinami 126d20f076 octavia: Enable jobboard settings
Octavia introduced the jobboard driver for amphora v2. Although we are
using noop drivers in our CI at this moment, we can enable the feature
for testing.

Depends-on: https://review.opendev.org/907685
Change-Id: I4789a9b6aa289cf6926931bf82dab5b5dd02fa8f
2024-02-04 17:20:40 +00:00
Takashi Kajinami fc190c54d7 Enable caching in more services
This enables caching using oslo.cache in the following services, to
test the related deployment logics.

- ec2-api
- neutron
- watcher
- zaqar

Change-Id: Ia58a85701107bab747e0f33133486e63be54a0a9
2024-02-04 15:59:07 +09:00
Takashi Kajinami 2eb5714adb Neutron: Add more validation for supported conbimations
Some plugins are not supported with ovn mechanism driver. This adds
a few more validations to reject unsupported plugins when ovn is used.

Change-Id: I9e9c309c9afc95d2fdb2d8cd624b35e84c2dbefb
2024-01-25 00:42:38 +09:00
Takashi Kajinami 63a65da0f4 l2gw: Add note about "wrong" service provider
... to help people understand why we have that wrong configuration.

Also the logic for Ubuntu is not used and we need a common pattern for
all plugins. So let's remove the unused logic now for easier
maintenance.

Change-Id: Id694e0c33c4086e1d316304ccf674aa3e3416405
2024-01-25 00:36:52 +09:00
Zuul 6cc6f37a64 Merge "Remove workaround for bz 2259076" 2024-01-23 14:40:31 +00:00
Zuul 1895c4fe96 Merge "Enable Neutron TaaS" 2024-01-23 11:37:59 +00:00
Zuul 07e740ec5a Merge "Neutron: Enable VPNaaS extension in l3 agent" 2024-01-23 09:14:27 +00:00
Takashi Kajinami ef5c2bfdc0 Remove workaround for bz 2259076
... since the issue is fixed in the current TaaS package in RDO.

Change-Id: I30ff8f2706e674f66dea5b552dbbe1c9367e0fd1
2024-01-20 12:36:27 +00:00
Takashi Kajinami 94c7d321e7 Enable Neutron TaaS
This enables the Tap-as-a-Service plugin in neutron to test the
deployment support we recently added to puppet-neutron.

Depends-on: https://review.opendev.org/906016
Change-Id: I1bed97477fa737733d5b59b7de085e61494c69f9
2024-01-20 20:08:04 +09:00
Takashi Kajinami f492cf29ad Neutron: Enable VPNaaS extension in l3 agent
This was overlooked when VPNaaS support was added by [1].

[1] b69ea6177a

Change-Id: Ibb651f65f47313dc2c708e515c5002f30bc5ef82
2024-01-18 11:39:02 +09:00
Takashi Kajinami 211dc77fb9 swift: Enable backend_ratelimit middleware
The backend_ratelimit middleware was enabled in the sample config files
in swift.

Change-Id: Idd789f00c183ef8c2f5bf77b7c1b3fb997c1b638
2024-01-07 15:51:16 +00:00
Takashi Kajinami df3d689042 Ensure os_keepalived_dac_override is enabled
According to [1], the dac override options may be disabled in a future
release.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2000945

Change-Id: I3779072f9213fee03f350cc9a8786072c318037d
2023-12-21 19:37:16 +09:00