Commit Graph

531 Commits

Author SHA1 Message Date
Dmitriy Rabotyagov c6b7df85a8 Add quorum support for service
This change implements and enables by default quorum support
for rabbitmq as well as providing default variables to globally tune
it's behaviour.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/896017
Change-Id: I02d380104ffc9507fdbf660db2627b0b1930f9ec
2023-10-20 11:54:38 +00:00
Dmitriy Rabotyagov bf019ab6d7 Fix linters and metadata
With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.

With that we also update metdata to reflect current state.

Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/888517
Change-Id: I53c0166beb446802641c701f6e43d5e317f9d54a
2023-08-23 09:31:20 +02:00
Zuul eeb070c682 Merge "Use proper galera port in configuration" 2023-08-22 19:29:13 +00:00
Dmitriy Rabotyagov 19a539d8b7 Define constraints file for docs and renos
Right now we are not using any constraints for docs and releasenotes builds.
This has resulted in docs job failures once Sphinx 7.2.0 has been released.

The patch will ensure that constraints are used an we should not face
simmilar issue again.

TOX_CONSTRAINTS_FILE is updated by Release bot once new branch is created,
so it should always track relevant constraints.

Some extra syntax-related changes can apply, since patch is being passed
through ConfigParser, that does not preserve comments and align indenting.


Change-Id: Ida35a2a1e00284d4d3b6b27fa800ce532d09e9a8
2023-08-17 16:32:07 +02:00
Dmitriy Rabotyagov f39015d801 Use proper galera port in configuration
While <service>_galera_port is defined and used for db_setup
role, it's not in fact used in a connection string for oslo.db.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/888517
Change-Id: I6299827be3828931f9c796edb655aae8f1fcff23
2023-08-16 13:34:01 +00:00
Damian Dabrowski 4b2134df19 Add TLS support to aodh backends
By overriding the variable `aodh_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the aodh backend api.

The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: Ibb4d7b465f07fff6c172b38aa647fd8d6a4fcd43
2023-04-29 18:35:33 +02:00
Dmitriy Rabotyagov ec2caff080 Ensure service is restarted on unit file changes
At the moment we don't restart services if systemd unit file is changed.

We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now  we ensure that role handlers will also listen for systemd
unit changes.

Change-Id: Ic56d5d1bd1ead8fd6bb642913370fa206799256f
2023-04-10 15:29:52 +02:00
OpenStack Release Bot 7000e35a6c Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I003e0137edc97b7ae64c3de84df3a276d22ef01d
2022-12-13 13:11:12 +00:00
Matthew Thode c87f251c5a Install git into aodh containers
If venv_wheel_build_enabled is default to False, aodh will fail to clone
and install repositories due to missing git binary.

Related-bug: #1995535

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/864962
Signed-off-by: Matthew Thode <mthode@mthode.org>
Change-Id: Ied5a4defa1351dced468a7215e5c84fe30a58c24
2022-11-24 17:23:05 +00:00
Erik Berg f6ff84cdcc Remove redundant vars line
This line snuck in with I6e1931e55c3b492ea0b5eb6e093c7cb5f5e826ac
probably to bring it in line with other OSA roles, but should already
be covered by the distribution_major_version line above.

Change-Id: Ia84ef13bb31b52e7f3875ed731cf06ddbcdb5951
2022-09-15 10:40:51 +02:00
Dmitriy Rabotyagov 3e94523ec7 Support service tokens
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.

Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/846347
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: I883d84859811714362c5b58f33dfae808317bfdc
2022-06-17 13:40:57 +00:00
Dmitriy Rabotyagov 1f5f88d80e Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.


Change-Id: Id2e8e24364a743fc5154e5c2e63fa1f5eaeb1f2c
2022-05-30 16:01:20 +02:00
Jonathan Rosser e70f0e2bef Use common service setup tasks from a collection rather than in-role
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/834889
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/840724

Change-Id: I9afa64ad181656a3594e364f06442eac0282de5f
2022-05-05 19:30:31 +00:00
Zuul a71e9a5339 Merge "Use openstack uri proto" 2022-04-06 13:15:20 +00:00
OpenStack Proposal Bot df236fc2a3 Updated from OpenStack Ansible Tests
Change-Id: I49522101226fd4ff9cf3b93ee75855f07a9574c3
2022-03-31 20:14:23 +00:00
Marc Gariepy 2ea4e53c6f Cleanup setup.py config
Change-Id: I3733d7115b8629195cc933328d2237c0a2ffb446
2022-03-31 10:38:19 -04:00
Dmitriy Rabotyagov 426737ba6a Use openstack uri proto
Align aodh role with others and use
openstack_service_<type>uri_proto variables as default ones
to define protocol being used for endpoints.

Change-Id: Idbc68f7496fd57f98fc77b9d0e345e576b51d108
2022-03-23 11:51:23 +01:00
Jonathan Rosser 2e3e39ab6b Remove legacy apache variables
Change-Id: I3f63f7b01dfa99a90d69534dd2fea90bc2b1b422
2022-02-02 04:04:34 -05:00
Jonathan Rosser b7ff1830da Remove policy.json cleanup handler
Change-Id: I331169ba48ff07d600c257a64db224517a5f36b9
2022-02-02 04:04:34 -05:00
Zuul 7c9db91baa Merge "Ensure libxml2 is installed on debian systems" 2022-01-26 10:05:44 +00:00
Jonathan Rosser 0ffeff0ec1 Ensure libxml2 is installed on debian systems
Closes-Bug: 1958434
Change-Id: I8ad644ed723e05058be92e5f67a4d7b7542a7071
2022-01-25 10:23:57 -05:00
Jonathan Rosser 88c914ac6b Refactor use of include_vars
Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.

This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.

Change-Id: I6e1931e55c3b492ea0b5eb6e093c7cb5f5e826ac
2022-01-12 11:17:20 +00:00
OpenStack Proposal Bot 1f87f0ede2 Updated from OpenStack Ansible Tests
Change-Id: Icf7520eeec14c9a0427226990693a70ced8ce2ac
2021-12-17 16:45:19 +00:00
OpenStack Proposal Bot 6ab60d2ed1 Updated from OpenStack Ansible Tests
Change-Id: I005c91c73321bcf2b3d90488637adab28ea9aea4
2021-12-04 17:39:29 +00:00
Damian Dabrowski b6307058ec Database connection pooling improvements
- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: Id7b0c26409a0d1b33a679201655a4dd08bacc57a
2021-12-03 11:50:01 +01:00
Dmitriy Rabotyagov 4546eb97ee Use config_template as a collection
Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814



Change-Id: I8012108a59b52156fefc0d73011465066f922c4e
2021-11-30 15:17:15 +02:00
Dmitriy Rabotyagov bc541db1a2 Refactor galera_use_ssl behaviour
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.

Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.

[1] 78f0cf99e5/pymysql/connections.py (L267)

Change-Id: Ie02010583c9c9fc82211065cedac4fc120a31318
2021-09-17 13:57:47 +00:00
likui bcedd4e7c2 Changed minversion in tox to 3.18.0
The patch bumps min version of tox to 3.18.0 in order to
replace tox's whitelist_externals by allowlist_externals option:
https://github.com/tox-dev/tox/blob/master/docs/changelog.rst#v3180-2020-07-23

Change-Id: Ic6bf814245e150811c3edb33f94ab5105ce76c8a
2021-07-03 21:26:20 +08:00
Dmitriy Rabotyagov a38daa515d Replace linters test with integarted one
We've created integrated linters check job a while back and it's successfully
working for several releases. At the moment we experience difficulties
with future maintenance of the linters check from the openstack-ansible-tests
repo. So instead of fixing current one, we replace it with modern version of
the test.


Change-Id: I1f3746d04f1d339709db2d06d5af1158a39ebd0c
2021-05-21 15:52:21 +03:00
Zuul f37a734ebb Merge "Add variables for rabbitmq ssl configuration" 2021-05-18 17:10:23 +00:00
Jonathan Rosser 9337c335c0 Add variables for rabbitmq ssl configuration
Change-Id: I88124396aba6d2b2432df7ca5c1a6e2d187b0fbd
2021-05-17 07:54:33 +00:00
Zuul 18c511c63b Merge "[reno] Stop publishing release notes" 2021-05-06 14:47:02 +00:00
Zuul 9a099cc13f Merge "Updated from OpenStack Ansible Tests" 2021-05-06 14:46:59 +00:00
Dmitriy Rabotyagov 705b782589 [goal] Deprecate the JSON formatted policy file
As per the community goal of migrating the policy file
the format from JSON to YAML[1], we need to replace policy.json to
policy.yaml and remove deprecated policy.json.

We make a separate task not to restart service when it's not needed.

[1]https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/781513
Change-Id: Ifd1190981a2c50b54efa129f60b0d4a0f448bb60
2021-05-05 19:15:53 +00:00
dmitriy 79e64a9297 [reno] Stop publishing release notes
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.


Change-Id: I16984f76ef7b8962fa3d242ba0d5b24cca98b4e6
2021-04-19 22:06:32 +00:00
OpenStack Proposal Bot b8dfe761d6 Updated from OpenStack Ansible Tests
Change-Id: I0082c74d11fe802207c9f20929895e7cb4284b18
2021-04-19 09:56:44 +00:00
OpenStack Proposal Bot 5a358a64b7 Updated from OpenStack Ansible Tests
Change-Id: I9ad58c4336b7e68fb99e867374ac81a59ae51f89
2021-03-22 08:46:04 +00:00
Zuul 3b304fbbf6 Merge "Use ansible_facts[] instead of fact variables" 2021-03-17 14:58:43 +00:00
Zuul aa0b8ee1ce Merge "Remove references to unsupported operating systems" 2021-03-17 14:18:34 +00:00
Jonathan Rosser 37efa0a469 Use ansible_facts[] instead of fact variables
See https://github.com/ansible/ansible/issues/73654

Change-Id: I83375d4d96fee13c21dc133dbf5a5b8ed64b826a
2021-03-16 07:58:51 +00:00
OpenStack Proposal Bot c983c930a4 Updated from OpenStack Ansible Tests
Change-Id: I8c16db6f51536a8634c6f61949d842f5a123e301
2021-03-12 22:17:27 +00:00
Jonathan Rosser c25a19af45 Remove references to unsupported operating systems
All references to Gentoo, SUSE, Debian stretch and Centos-7  are removed.
Conditional tasks, ternary operators and variables are simplified where possible
OS specific variables files are generalised where possible

Depends-On: Ia88b8e606a19ad8ee20665e125df1079b0a771ff
Change-Id: I88c4317a711ec9c8e00b13a2f4deede1e53830b1
2021-03-11 14:37:27 +00:00
Jonathan Rosser 19eac02395 Switch default virtualenv to python3
Depends-On: Ia88b8e606a19ad8ee20665e125df1079b0a771ff
Change-Id: Ic2aab8aa458077d9bc778de3affb18b6d192d2bd
2021-03-11 14:37:09 +00:00
Zuul c6392f9797 Merge "Move aodh pip packages from constraints to requirements" 2021-02-09 11:45:35 +00:00
Zuul c8ef07e03b Merge "Fix documentation formatting" 2021-01-26 09:51:07 +00:00
Jonathan Rosser 405f551fad Move aodh pip packages from constraints to requirements
Change-Id: I73773536938dff9f768381a333c5fa02c98e9d55
2021-01-25 08:44:38 +00:00
wangqi 18b54e16e0 Fix documentation formatting
remove unnessary '='

Change-Id: If78c5c7fad0a10fe786e8d7b9808e1e39a3ab1c9
2021-01-13 17:41:14 +00:00
Dmitriy Rabotyagov d6d0cd22ed Use global service variables
Instead of overriding each service separatelly it might make
sense for deployers to define some higher level variable that
will be used first or fallback to default variable.

Change-Id: I74376cc3c20df54663ffbec5daa7413853391714
2021-01-05 17:58:25 +02:00
Zuul 13ef8fa191 Merge "Remove duplicated aodh_db_setup_host" 2020-11-17 12:38:13 +00:00
Zuul f480030647 Merge "Updated from OpenStack Ansible Tests" 2020-11-12 12:51:46 +00:00