Commit Graph

8 Commits

Author SHA1 Message Date
Damian Dabrowski aaf4b3f201 Add TLS support to zun backends
By overriding the variable `zun_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the zun backend api.

The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: I85f90c573007f422b004b41e785bd1c86a21ec92
2023-05-19 09:06:00 +00:00
Dmitriy Rabotyagov 330b91efec Ensure service is restarted on unit file changes
At the moment we don't restart services if systemd unit file is changed.

We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now  we ensure that role handlers will also listen for systemd
unit changes.

Change-Id: I53545ede7b2f129bbbf3518ab517f6f37d78598e
2023-05-19 09:05:51 +00:00
Dmitriy Rabotyagov 9a39e22b0f Remove mention of haproxy-endpoints role
Role was never migrated to usage of haproxy-endpoints role
and included task was used instead the whole time.
With that to reduce complexity and to have unified approach, all mention
of the role and handler are removed from the code.

Change-Id: Ie8f7af4f4028e3447319039fee8b0f82005c7add
2022-06-14 20:06:38 +02:00
Andrew Bonney fb440ce3d0 Add support for kata container runtime
This adds support for kata containers by installing and configuring
the relevant runtime.

The default remains as 'runc' but can be adjusted using the
variable added to the defaults.

Change-Id: Iea07012d092333c656b397f97b541a2f0a5f0e44
2021-01-12 08:30:57 +00:00
Jesse Pretorius 6eb94ebfef Use a common python build/install role
In order to radically simplify how we prepare the service
venvs, we use a common role to do the wheel builds and the
venv preparation. This makes the process far simpler to
understand, because the role does its own building and
installing. It also reduces the code maintenance burden,
because instead of duplicating the build processes in the
repo_build role and the service role - we only have it all
done in a single place.

We also change the role venv tag var to use the integrated
build's common venv tag so that we can remove the role's
venv tag in group_vars in the integrated build. This reduces
memory consumption and also reduces the duplication.

This is by no means the final stop in the simplification
process, but it is a step forward. The will be work to follow
which:

1. Replaces 'developer mode' with an equivalent mechanism
   that uses the common role and is simpler to understand.
   We will also simplify the provisioning of pip install
   arguments when doing this.

Depends-On: https://review.openstack.org/598957
Change-Id: Ia3646f395a17c90de6ff7b23e31897573691b5d4
Implements: blueprint python-build-install-simplification
Signed-off-by: Jesse Pretorius <jesse.pretorius@rackspace.co.uk>
2018-09-03 18:11:27 +01:00
zhulingjie 7746c53125 Remove the unnecessary space
Change-Id: I8278f0826a9ef620fb8142338caea4dcf103c2b9
2018-07-11 22:36:48 -04:00
Jean-Philippe Evrard 12c92738c4 Fix usage of "|" for tests
With the more recent versions of ansible, we should now use
"is" instead of the "|" sign for the tests.

This should fix it.

Change-Id: Ifdbd067fe773b86bf065f618267d5132184efd22
2018-07-12 16:54:54 +02:00
Kevin Carter daf9f9d60a
first commit
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2018-06-05 15:36:33 -05:00