Commit Graph

58 Commits

Author SHA1 Message Date
Aleksandr Chudinov e8de2a5f0b Add property protection configuration
Allows to configure property protection according to
https://docs.openstack.org/glance/latest/admin/property-protections.html

Change-Id: I9b4c0985969a4945ce8a1058206376b0347fbb27
2024-02-28 11:30:50 +02:00
Dmitriy Rabotyagov d0f6fd67cc Enable uWSGI usage for Ceph backends
Since upstream bug [1] preventing us to disable uWSGI for Ceph was fixed,
we can remove extra logic of disabling uWSGI usage when Ceph is among
configured storages.

[1] https://review.opendev.org/c/openstack/glance_store/+/885581

Change-Id: Ibcd9df6a547febb8f47b88d0c98277b46faf489c
2024-01-18 15:27:17 +01:00
Dmitriy Rabotyagov aa69a6fe5c Make glance_additional_stores work nicely with multi-store
While we assume that glance_additional_stores can be list of mappings
for multistore glance support, bunch of other logic in role still treats
it as simple list and make verifications against it. So in case one
dares to override variable according to our suggestion, they also need
to override bunch of other things.

We change defaults for `glance_available_stores` variable and always
define it as a multistore list of mappings.

Then we introduce a variable `glance_available_store_types` that is a
list of types for each of configured storage.

Logic of how storages are defined in glance config is also changed now.
Storages won't be defined if there's no "default" record for them in
glance_available_stores.

For each new store that deployer wants to provision, they now can pass
`config` key for glance stores, rather then use config overrides.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/901041
Change-Id: I1416e0f6e3ed79abd10f468b52fc712d35a61bd2
2023-11-27 11:36:33 +00:00
OpenStack Release Bot 7b88f5a74e Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I0e6b4917786b6b5d2d983db092bc45f635abea2c
2022-12-13 13:14:00 +00:00
Damian Dabrowski 5bc252de44 Add external_lb_vip_address to glance_cors_allowed_origin by default
Since ``horizon_images_upload_mode`` is enabled by default and
``glance_show_multiple_locations`` is disabled by default(turns out
it's not really required), we should add ``external_lb_vip_address`` to
``glance_cors_allowed_origin`` as default.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/862167
Change-Id: I6d13e1e985f8e3bbb97b0af7063b469cb4b2dbca
2022-10-20 19:08:44 +02:00
Dmitriy Rabotyagov 887a59256e Use systemd_mount native syntax for mounts
Currently we have bunch of limitations related to the format
of ``glance_nfs_client``. While systemd_mount role is flexible enough
to allow mount cephfs or s3fs, variable format has weird assumptions
that we want to change for better flexability.

Since keys of variable are changing, new name for it was picked to
reflect purpose of the variable better.

Change-Id: Ic0d91a3a873b4253255beac79becf01b4a304695
2022-04-12 12:56:38 +02:00
Dmitriy Rabotyagov b7673143de Add glance cache variables into glance-api
In glance caching doc is stated[1], that some of the variables
should be defined in both glance-api and glance-cache config and should
be exactly the same, otherwise issues might raise.

We also introduce glance_image_cache_stall_time variable to control
cache time reliable across config files

[1] https://docs.openstack.org/glance/train/admin/cache.html#configuration-options-for-the-image-cache

Change-Id: Ic229e71978961546cec5f58a9c963c71e05ffba4
2021-01-13 13:58:22 +02:00
Dmitriy Rabotyagov ed736fd783 Cleanup glance-registry service
Glance-registry service has been removed in V cycle with [1]

We do all necessary cleanup to fully remove service deployment.

[1] https://review.opendev.org/738671/

Change-Id: I0b2e2e39040fd0daef04724f94a39f2d11e4d105
2020-07-07 07:30:17 +03:00
Andreas Jaeger 4da8348f57 Use newer openstackdocstheme and reno versions
The sync from https://review.opendev.org/733244 updated to
openstackdocstheme 2.2.1 and reno 3.1.0 versions.

Set openstackdocs_pdf_link to link to PDF file. Note that
the link to the published document only works on docs.openstack.org
where the PDF file is placed in the top-level html directory. The
site-preview places the PDF in a pdf directory.

openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.

See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html

Change-Id: I0f97a36bdb6f824d3600913c876a704cb19cd369
2020-06-03 19:13:18 +02:00
OpenStack Release Bot 95617567cb Update master for stable/ussuri
Add file to the reno documentation build to show release notes for
stable/ussuri.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.

Change-Id: Id6d0f1464d7c56ac7908a3931dd08fa391f8a539
Sem-Ver: feature
2020-06-01 13:13:49 +00:00
Andreas Jaeger 7b99ed7ed4 Update docstheme for style
New version of openstackdocstheme (Victoria+) respects pygments_style.
Since this repo is using now Victoria (master) requirements but has
not branched for Ussuri yet, it uses the new version.

Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.

Change-Id: If6ace6bdcfc9218d227612813931741a9e69d132
2020-05-20 18:48:15 +02:00
OpenStack Release Bot 08e11979ae Update master for stable/train
Add file to the reno documentation build to show release notes for
stable/train.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/train.

Change-Id: If1b2da9d14e76b2214702b5f26aa2b5c53f0688d
Sem-Ver: feature
2019-10-22 18:58:09 +00:00
Dmitriy Rabotjagov e01aed0d63 Replace git.openstack.org with opendev.org
This patch replaces git.openstack.org with opendev.org as redirection
from old path was enabled.

Change-Id: Ice94fbb7881061c2ce79dbc15eb3e062a655d45e
2019-05-30 09:38:22 +00:00
OpenStack Release Bot 2cf6f0097e Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: I1249b614aa13be0354976a29a3163083312a14b9
Sem-Ver: feature
2019-04-08 09:18:14 +00:00
Francois Deppierraz b026e8af86 releasenotes: oslo-messaging-separate-backends add project name
Without this patch, the release notes published at
https://docs.openstack.org/releasenotes/openstack-ansible/rocky.html contains
the same line multiple times which is not very clear.

[...]
    Support separate oslo.messaging services for RPC and Notifications
    to enable operation of separate and different messaging backend servers.

    Support separate oslo.messaging services for RPC and Notifications
    to enable operation of separate and different messaging backend servers.
[...]

Change-Id: I0ed1a43670d97f2e2215d04c641f7bd4cfbe4f44
2018-10-15 16:55:56 +02:00
Zuul b3e2bcda20 Merge "Add ability to configure cross-origin requests" 2018-09-04 12:21:27 +00:00
Mohammed Naser 788273c6b5 Add ability to configure cross-origin requests
The patch introduces a variable `glance_cors_allowed_origin` which
allows a user to configure a specific origin that can do cross
domain requests.

Change-Id: I45f30d2ea7070e62d5d14ad87c872e98af1d7890
2018-08-31 10:41:05 +00:00
OpenStack Release Bot b0e132c4a8 Update reno for stable/rocky
Change-Id: I1441124f01f2c6268c6d27983a42df43f5cee258
2018-08-10 16:46:39 +00:00
Jonathan Rosser 33b0e35e06 Remove glance v1 api and tests
The glance v1 endpoints were removed in [1].

[1] 3dde3204d5

Change-Id: I90f0b7c6963c433aba6d91e7f4df4401e410439e
2018-07-30 17:37:23 +01:00
Jesse Pretorius fa11f38215 Execute service setup against a delegated host using Ansible built-in modules
In order to reduce the packages required to pip install on to the hosts,
we allow the service setup to be delegated to a specific host, defaulting
to the deploy host. We also switch as many tasks as possible to using the
built-in Ansible modules which make use of the shade library.

The 'virtualenv' package is now installed appropriately by the openstack_hosts
role, so there's no need to install it any more. The 'httplib2' package is a
legacy Ansible requirement for the get_url/get_uri module which is no longer
needed. As there are no required packages left, the task to install them is
also removed.

With the dependent patches, the openstack_openrc role is now executed once
on the designated host, so it is no longer required as a meta-dependency for
the role.

Ansible 2.5 is a hard dependency for this patch due to the dynamic setting
of the ansible_python_interpreter, which in 2.4 is literally interpreted,
but in 2.5 thanks to [1] is now templated. See [2] for more details.

[1] https://github.com/ansible/ansible/pull/33698
[2] https://github.com/ansible/ansible/issues/18665
Depends-On: https://review.openstack.org/501814
Depends-On: https://review.openstack.org/568139
Depends-On: https://review.openstack.org/568141
Depends-On: https://review.openstack.org/568146
Depends-On: https://review.openstack.org/571423
Depends-On: https://review.openstack.org/579233
Depends-On: https://review.openstack.org/579959
Depends-On: https://review.openstack.org/580156
Change-Id: I6a5a85fae5a481900149a343a163fe82e788d1eb
2018-07-06 13:54:34 +00:00
Andrew Smith 87d070f4be Update to use oslo.messaging services for RPC and Notify
This introduces oslo.messaging variables that define the RPC and
Notify transports for the OpenStack services. These parameters
replace the rabbitmq values and are used to generate the messaging
transport_url for the service. The association of the messaging
backend server to the oslo.messaging services will then be
transparent to the glance service.

This patch:
* Add oslo.messaging variables for RPC and Notify to defaults
* Update transport_url generation
* Add oslo.messaging to inventory
* Add release note

Depends-On: If4326a6848d2d32af284fdbb94798eb0b03734d5
Change-Id: Ib647d87df040c77ee3906b1bf58764ca5f3d765d
2018-05-30 14:33:02 -04:00
Markos Chandras ba64ce3083 Add support for using distribution packages for OpenStack services
Distributions provide packages for the OpenStack services so we add
support for using these instead of the pip ones.

Change-Id: I026a440b6a0fda43b613e30f359b2a23c3c1151f
Depends-On: I5a78e2120e596d36629b4ba978b2b5df76b149b0
Implements: blueprint openstack-distribution-packages
2018-05-04 15:42:26 +01:00
OpenStack Release Bot 1c35f4f301 Update reno for stable/queens
Change-Id: I475a89d803c1d38ab29783d7e578852d1d365e47
2018-02-14 15:48:04 +00:00
Kevin Carter 477d44cab9
Update glance NFS for systemd
Systemd has the ability to manage mounts and ensure functionality
/ resource management. Using a systemd mount has the benifit of not
requiring writes to the legacy fstab file which can impact OS
functionality especially when deploying on baremetal. This change
moves the glance NFS mount to a systemd unit file allowing systemd
to manage it independently with no potentially breaking impact to
the underlying operating system.

Changes:
 - This PR corrects a long standing issue when using Glance+NFS where
   initial deployment would work but if the playbooks were run again
   it would fail due to the glance images location being an NFS mount
   point with a potentially different UID/GID. To correct this we stat
   the directory and if it does NOT exist it is created.
 - Following the nova pattern options have been provided to set the UID
   and GID of the glance user.
 - To ensure out NFS backend solution works with the installation of
   glance a test has been added to deploy glance using an NFS backend.
 - An upgrade task has been added to this commit to clean up legacy
   mounts, This task should be removed in R.

Change-Id: I716c9fe35391629532e67e212d45ea27a5422d1b
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2017-12-12 17:49:55 -06:00
Jesse Pretorius 4fa9872510 Disable glance-registry and the v1 API by default
When using the glance v2 API the glance-registry service is
optional, and the intention is to remove the glance-registry
service in the S cycle.

The glance v1 API is scheduled to be removed in Queens.
This patch therefore disables the v1 API by default to give
us as much time as possible to identify the impact of that
and to get the issues resolved before it is removed from
the code-base.

The patch also cleans up the glance-registry init files
to handle the transition in an existing environment.

Tests are added to validate that enabling the v1 API still
works, and enabling the v2 registry still works.

Change-Id: I4c27aa0ca5b649e4fa76cfd0f326d80f50074db1
2017-11-20 12:48:55 +00:00
Jesse Pretorius 1416013cd4 Allow deployment without glance-registry
The glance v1 API is deprecated and intended to be removed
from the glance code within the Queens or Rocky cycles.

When using the glance v2 API the glance-registry service is
optional, and the intention is to remove the glance-registry
service in the S cycle. The glance-registry service is required
when using the v1 API though.

Furthermore, when using the glance-registry service it is not
possible to execute a rolling upgrade without losing API
transactions.

Given the above information, this patch enables the deployment
of glance with only the v2 API enabled, and without the
glance-registry service. It adds a per-commit test to validate
that this configuration works.

This patch also corrects a previous misconfiguration which
enabled the v2 registry service, but did not set the data_api
correctly for the API service to inform it that the registry
was operating.

The glance_enable_v1_registry variable is also removed as it
is meaningless. The v1 API *requires* the registry to be
enabled, so we just enable it if glance_enable_v1_api is
enabled.

Change-Id: Ie95daed286798d139f0a35ffdd2a4dd1cdda6ff9
2017-11-20 12:48:02 +00:00
Andreas Jaeger 6adc4a4512 Remove setting of version/release from releasenotes
Release notes are version independent, so remove version/release
values. We've found that projects now require the service package
to be installed in order to build release notes, and this is entirely
due to the current convention of pulling in the version information.

Release notes should not need installation in order to build, so this
unnecessary version setting needs to be removed.

This is needed for new release notes publishing, see
I56909152975f731a9d2c21b2825b972195e48ee8 and the discussion starting
at
http://lists.openstack.org/pipermail/openstack-dev/2017-November/124480.html
.

Change-Id: I967a2e5c2a014894198a908dc2d38ec0b2cb185e
2017-11-17 07:56:44 +01:00
Jean-Philippe Evrard 2cab2c2298 Update upgrade role for Queens from P
This changes the a-r-r with the proper version, and fixes
the repo path for role upgrades:

The role will, during test-upgrade-pre, have its current branch
checked out, and will deploy the current branch infrastructure,
including the generation of the constraints.

Then, the installation of previous branch of the role will use
the constraints for its previous version, but will have no
constraints for it, and fail.

We need to generate the constraints for the previous version too.
This should do it.

On top of that, we needed to update the work for Zuul v3:
This implements the initial OSA zuul v3 role jobs.

This patch implements an initial set of jobs intended to match
the current job execution method. It does not intend to improve
how the jobs are executed - only to replicate what is currently
in openstack-infra/openstack-zuul-jobs and provide the platform
to iterate on.

Change-Id: I8710e7b9bb6010ba98279f61a63274ace56f6e8d
Co-Authored-By: Jesse Pretorius <jesse.pretorius@rackspace.co.uk>
2017-10-17 18:32:54 +00:00
Jenkins 57a630c283 Merge "Update reno for stable/pike" 2017-08-22 14:49:48 +00:00
lidong 54c6069901 Fix a typo
Fix a typo in file:
releasenotes/notes/glance-init-config-overrides-d1c8c3dcc50c109a.yaml

Change-Id: Ibb08769d5e7e42b19813a23965e30af5c1a1ac31
2017-08-22 12:20:01 +08:00
OpenStack Release Bot d8e6236e27 Update reno for stable/pike
Change-Id: I64ab95c9b9a13d184b9d1b05d583c725b5a9f0ec
2017-08-21 10:32:40 +01:00
Andy McCrae 8c2f4b0b7c Implement uWSGI for glance-api
As part of the Pike goals we are moving api services to run as WSGI
apps. glance-api service is set up as a wsgi app, and this patch moves
it over.

Since this is just a drop in replacement for the existing eventlet
service operators and deployers should notice no difference.

Implements: blueprint goal-deploy-api-in-wsgi
Change-Id: Ie5fbf437031be01682534c466b3737d090a81c57
2017-07-25 14:20:24 +01:00
ZhongShengping 599fb64de0 Fix openstackdocstheme settings
To use openstackdocstheme 1.11.0 properly, this patch fixes
some settings according to follow[0].

[0]https://docs.openstack.org/openstackdocstheme/latest/

Change-Id: I362996b70abdb2753df458d21e889a63835e4438
2017-07-03 16:15:19 +08:00
ZhongShengping ec8a57a708 Switch from oslosphinx to openstackdocstheme
As part of the docs migration work[0] for Pike we need to switch to use the
openstackdocstheme.

[0]https://review.openstack.org/#/c/472275/

Change-Id: I76a6f30fad10075fe7f5a5ca0d2d0b81df891c32
2017-06-26 11:33:14 +08:00
ZhongShengping c82d7f8421 Deprecate rpc_backend option
Option "rpc_backend" from group "DEFAULT" is deprecated for removal
(Replaced by [DEFAULT]/transport_url). Its value may be silently
ignored in the future.

Change-Id: I87f2673dd677e3a609c4a029d37945179d3ab270
Implements: blueprint deprecate-rpc-backend
2017-06-18 15:08:29 +00:00
Andy McCrae 22f93d5ef1 Remove duplicate Release note.
There was an erroneous merge when renaming release notes.
This patch removes the duplicate.

Change-Id: I3608c7500e8728658028cb128fa7e0bf05e69553
2017-04-28 14:57:41 +01:00
Jesse Pretorius fe45a9c8f2 Rename release note to unique hash
Change-Id: Ie215b3585c3826d7514cd9e5df5779307b72a6b8
2017-04-28 11:38:32 +01:00
Jesse Pretorius 9aa3e0017f Reduce init restart time
The 'RestartSec' value which controls the time between the
service stop and start when restarting has been reduced from
150 seconds to 2 seconds to make the restart happen faster.

These values can be adjusted by using the *_init_config_overrides
variables which use the config_template task to change template
defaults.

Change-Id: I4e97676327d1fcb8b2c7c92b6fc1859e0251637e
2017-04-26 13:10:32 +00:00
Jenkins b47cc378cd Merge "Rename reno to avoid conflict on integrated repo" 2017-04-11 15:34:48 +00:00
Andy McCrae f7497ca553 Rename reno to avoid conflict on integrated repo
Change-Id: I8e0fcebd5056fea0a9b735b7b29c5156024651bc
2017-04-11 12:03:01 +01:00
Andy McCrae 3a1dfa5cbc Rename reno to avoid conflict on integrated repo
Change-Id: I65b26bb3d27800dfdb4cbd02224ce78264ee352f
2017-04-11 11:50:32 +01:00
Kevin Carter 96576b8b5b Ensure the components are isolated from the system
This creates a specific slice which all OpenStack services will operate
from. By creating an independent slice these components will be governed
away from the system slice allowing us to better optimise resource
consumption.

See the following for more information on slices:

* https://www.freedesktop.org/software/systemd/man/systemd.slice.html

See for following for more information on resource controls:

* https://www.freedesktop.org/software/systemd/man/systemd.resource-control.html

Tools like ``systemd-cgtop`` and ``systemd-cgls`` will now give us
insight into specific processes, process groups, and resouce consumption
in ways that we've not had access to before. To enable some of this reporting
the accounting options have been added to the [Service] section of the unit
file.

Change-Id: Id0908bd10497a8875dac60bfad080a58759c7ac7
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2017-03-28 19:30:04 -05:00
Ravi Gummadi c18d9704af Cap the number of worker threads
Users can configure the number of worker threads however when it's
not specified the calculated number of workers can get too large on
hosts with a large number of CPUs.

Change-Id: Ibd293f102bc0201d5d451549d37458bef352d930
2017-02-23 01:50:23 -05:00
Cao Xuan Hoang b1ef3f7888 Use https instead of http for git.openstack.org
Trivialfix

Change-Id: I058fba4184eb84ca3dff0f95f90dc0657f937613
2017-02-06 16:52:28 +07:00
OpenStack Release Bot feb724b7e8 Update reno for stable/ocata
Change-Id: I41d724e68e32a9f7e3fc1a84a1d0978286a0883e
2017-02-03 18:58:14 +00:00
Andy McCrae 847aa11341 Detach glance swift_store_auth_insecure from Keystone
When not using local swift, backed by local keystone, we need the option
to set the swift_storage_auth_insecure to be different to the
keystone_internaluri_auth_insecure value.

This patch sets up it's own glance_swift_store_auth_insecure variable
which defaults to keystone_internaluri_auth_insecure, but can be
changed.

Change-Id: Ib9da0d1f94ea1cd46aa91a1fce0e97070f402693
2016-11-28 14:51:01 +00:00
Jesse Pretorius a4c008c815 Simplify pip options/constraints mechanism
The current constraints generation for the
installation involves multiple tasks and multiple
variables.

Using multiple tasks extends the installation time
unnecessarily and the additional variables are
unnecessary.

This patch aims to simplify the mechanism and
hopes to speed it up a little.

Change-Id: I6c6214b16168abb571cc2d02bc01a80ba13bbe9f
2016-11-02 16:49:28 +00:00
Andreas Jaeger a30fb6326c Enable release notes translation
Releasenote translation publishing is being prepared. 'locale_dirs'
needs to be defined in conf.py to generate translated version of the
release notes.

Note that this repository might not get translated release notes - or
no translations at all - but we add the entry here nevertheless to
prepare for it.

Change-Id: Ief5cd80ef38eb62734f37e77236db4cddf996f58
2016-10-06 20:36:36 +02:00
Major Hayden bbde86f44a Update reno for stable/newton
Change-Id: I000553edf81aa640202b1a917a6a14f1f298adc8
2016-09-29 14:16:55 -05:00
Major Hayden ffacc20cc8 Implement CentOS 7 support in os_glance
This change implements CentOS 7 support within the os_glance role.

Change-Id: I65d8e66673f5372fe880680a035842ffcd775ac2
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
Co-Authored-By: Major Hayden <major@mhtx.net>
Co-Authored-By: Marc Gariepy <gariepy.marc@gmail.com>
2016-09-19 15:47:39 +00:00