* Update openstack-ansible-ops from branch 'master'
to 9224f5df39682c6c9e8837e4bebf4e36352b84f7
- Clean up zuul jobs
Remove centos-7 jobs and migrate all others to focal/jammy.
As this is the ops repo some of these jobs might break, but thats
OK as it is best effort here.
Change-Id: Iead05995797652f5cd3d76db4b4eb6267e25835b
* Update openstack-ansible-ops from branch 'master'
to e03fc5a279a967215611aae1d8f6ff20aba81d03
- Add hook playbook install and test magnum capi driver
Change-Id: I3a7ee79c10c39cb805ed2134b21055d63786663d
* Update openstack-ansible-ops from branch 'master'
to c03b0e73897a25c23eebdf637fe6caffb82f2062
- Add playbook to run functional test of magnum capi driver
Change-Id: Ice644b43eccdc3d3509235ca7f3d3acfca84f364
* Update openstack-ansible-ops from branch 'master'
to 51a254943fada1ab3abd96dde80d583f5f6e5bd0
- Add role to install and run sonobouy k8s validation tests
Change-Id: Ic5af3ec8f8553f54f95e945a91068873f02d1d1a
* Update openstack-ansible-ops from branch 'master'
to 025f68aea8edb46c9e98ed1eccbf54a311974312
- Cluster API Bootstrapping playbook
Change-Id: Ic9abda6619d10bb5c2b1ac2cf77f962a793714d9
* Update openstack-ansible-ops from branch 'master'
to e983053d9808ef41aad519ed2c975fe088cf5767
- Add collection to deploy magnum cluster-api with vexxhost driver
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/908179
Change-Id: I121f5e97453354bb5c0227b296462805e269a7f5
* Update openstack-ansible-ops from branch 'master'
to 9b50eb10880d77fbf69d44431a3dc7746269767c
- Allow to gracefully drain backends when disabled
This adds required parameters to the playbook to drain existing connections
towards backends instead of forcefully closing connections.
Change-Id: Iad35b654e0cec1b9e4083ef547822feecdf917b6
* Update openstack-ansible-ops from branch 'master'
to a6fe4260a23a24c84642adcad7ba0b4980f086d4
- Use only unique backends to iterate over
Prior output was containing same host multiple times. Applying uniq
to the stdout should eliminate that and result in running module only
once per host as was originally intended.
Change-Id: I0993a276d26a7da86fa60b8735de05ee24160395
* Update openstack-ansible-ops from branch 'master'
to 12e85362a6ebf73c9a8935631c4e0d6166dcb254
- Fix missing cinder volume backend for ceph
- Adding cinder-volume on infra-hosts once ceph is enabled
- Fix missing osa_no_containers default value of false
Change-Id: Id7898c9dff84cbb981c9c0c916a65abcc5256dfd
* Update openstack-ansible-ops from branch 'master'
to fed822056b419ffd0b1e6cf7d9376b9d0ea93952
- Merge "Add zuul jobs for elk metrics on ubuntu jammy"
- Add zuul jobs for elk metrics on ubuntu jammy
Change-Id: I2d4dee4b61254eb0ca8eb3667d35cc7e220a7e47
* Update openstack-ansible-ops from branch 'master'
to 76525f44d6beb9fd5eb644953cbc1ac2fbbf643b
- Merge "Collect hardware facts for elastic data nodes"
- Collect hardware facts for elastic data nodes
This is needed to have the required ansible facts for doing
memory calculations.
Change-Id: I8f260b723bbdca4c26ba62b01fcf8cb589ed31ce
* Update openstack-ansible-ops from branch 'master'
to 1afff2760fd49b6e0241b2c932620e255f7c0304
- Ensure python3-pexpect is installed on Ubuntu Bionic
CI jobs are failing on Bionic as this is missing, probably becasue
ansible is finding a python3 interpreter when previously it found
python2.
Change-Id: I80c66bd93e57d5e46af85cbf4a271a90d97533cc
* Update openstack-ansible-ops from branch 'master'
to 9b1ea92f881521c9c950b4b06f460e459a512878
- Remove "warn" parameter from command module
This is removed in ansible 2.14.
Change-Id: Ic228ba62d33e3056be71a1d2285b068fc82f32d9
* Update openstack-ansible-ops from branch 'master'
to 2a6c5710785134c602fcc943055f7d4778d1de6d
- Update tox.ini to work with 4.0
With tox release of 4.0, some parameters were deprecated and are ignored now
which causes tox failures. One of the most spread issues we have is using
`whitelist_externals` isntead of `allowlist_externals`
Change-Id: I2b9d561d7e7a63c3540197b4ebc58f1e5b8846ec
* Update openstack-ansible-ops from branch 'master'
to 44ae9af3f59d943fb933f20f9c4542d28f4eacb5
- Merge "kibana: fix installation on ubuntu jammy and other py3 only systems"
- kibana: fix installation on ubuntu jammy and other py3 only systems
Change-Id: I0231b0b00277f306066d4827988f9640d9a1fba7
* Update openstack-ansible-ops from branch 'master'
to e13281a2464b68d7a618ee321433be3a4308739d
- Set permissions on elastic data directories
Change-Id: I70cc0192da9809798c90859937cd339ac1e1a971
* Update openstack-ansible-ops from branch 'master'
to 2b65764a2e8360cc57b78fc32b6f0afecb29f7af
- Enable cluster ID monitoring setting for beats using logstash
Change-Id: I59e7c92ebd91ceca161577e73d9f24826abedda1
* Update openstack-ansible-ops from branch 'master'
to 5437ddbd86660d8d98f4db9ea0a702f424557a95
- Add support for enabling ELK stack security
Change-Id: I661662c0784010ca2fcc3b3d31df1a1d79dbed1e
* Update openstack-ansible-ops from branch 'master'
to 29080ab4f6cfbcb9e55cfdcab3f6e569c88e814a
- Add support for apt package pinning
Adds variables to pin elastic package versions to ensure they
can't move out of sequence. An individual variable is added
for journalbeat given it is withdrawn from 7.16.
Includes a version bump to a more recent 7.x release which is
still compatible with this role
Change-Id: I5e6c42398acf70012bf879f41953d409abbd89f4
* Update openstack-ansible-ops from branch 'master'
to 14807039427bf5988806983a12a5f4cb06667465
- Fix role installation in tests
Previous collection addition commit assumed multiple yaml files
could be passed in at once.
Change-Id: Ia23f1102e76f57d20af755bd0fb26018c1cf632a
* Update openstack-ansible-ops from branch 'master'
to f74ad7d93b9165da8db5651b98b0d0baa87c9ea8
- gather facts for elk_metrics
Change-Id: I418b7d050ba30e212b09c21b289900106a31bdf4
Signed-off-by: Matthew Thode <mthode@mthode.org>
* Update openstack-ansible-ops from branch 'master'
to effd1542c9c9272fadd69520350170010902e47a
- Correct OVNL3RouterPlugin path
This patch updates the OVNL3RouterPlugin path to
match previously updated documentation.
Change-Id: I7873a2c2575a7a1184d9b2c5534b7135eee3cc0d
* Update openstack-ansible-ops from branch 'master'
to ff7cbf5548ed5bfe8b48857310179353b9325c31
- Update MNAIO to use Ansible Collections
This patch updates various playbooks within the MNAIO to use ansible
collections, which is required for the latest Ansible versions.
Change-Id: Ia7694e6b182dc8898b56730537cc99759a722b20
* Update openstack-ansible-ops from branch 'master'
to 6cc3b9b03d2a4747fbd6f57d8964f239c818bf0b
- Merge "Address ELK deprecations necessary before v8 upgrades"
- Address ELK deprecations necessary before v8 upgrades
Various configuration options have changed since v7 was initially
released. This patch addresses the obvious issues in ElasticSearch
and Kibana.
Change-Id: Ie9b6bf768dabe258171e5f53cfa02c462f44a557
* Update openstack-ansible-ops from branch 'master'
to a2db066e0efa311640b683db2ee5bff91f14464c
- Merge "beats: allow definition of custom hostname where necessary"
- beats: allow definition of custom hostname where necessary
Adds a variable to enable overriding of the name which beats
use to identify themselves to elasticsearch.
Change-Id: Ic1353431336394d03aadee8dd03333ef138e437e
* Update openstack-ansible-ops from branch 'master'
to b8f14666056e77160199b238ea8fb3258a7eb015
- Merge "Serialise operations on components which may be highly available"
- Serialise operations on components which may be highly available
Minimal playbook changes to reduce the risk out outages. This
could be further improved by contacting the elasticsearch API
during actions to ensure that each node recovers before moving
on to the next.
Change-Id: If106efd5700c770a8256adb11cb4735d11cbed5c
* Update openstack-ansible-ops from branch 'master'
to a5d31f3b471e4d060b0012794bbf8651b7b5ab3a
- Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.
Change-Id: Id540deef52eea623aacff607709def993e869e05
* Update openstack-ansible-ops from branch 'master'
to dff4647b702ecbd5459789533ba2b7036293a742
- Merge "Add journald input support to filebeat"
- Add journald input support to filebeat
Journalbeat is removed in ELK 7.16 and merged into
filebeat. This patch adds defaults which allow this
input to be enabled via a single variable.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-ops/+/843423
Change-Id: I5563d6493a6a53374170c4bdaa1edfbff85b300d
* Update openstack-ansible-ops from branch 'master'
to 60be6b1ae970d68e38f25c2ff9b8ff52d6a4021b
- Merge "kibana: fix bug in templating variable selection"
- kibana: fix bug in templating variable selection
A long standing typo means that highly available
kibana instances could become confused. This becomes
more apparent when ELK security is enabled.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-ops/+/843423
Change-Id: I7fa759da107337c78c44b950b86a769df5e20d87
* Update openstack-ansible-ops from branch 'master'
to 82e542eff13de223dcf63161fce87d817ff60f9f
- Merge "kibana: add configuration option for base url"
- kibana: add configuration option for base url
Recent versions of ELK complain when this URL is not
set. This parameters allows users to set the URL which
is used to access Kibana.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-ops/+/843423
Change-Id: I4cafc29bde353f4cf1286af73617b1ad3d5fea3d
* Update openstack-ansible-ops from branch 'master'
to d2b39a00326c4d4ade7c3c9b57a4da17d2c645cb
- Merge "beats: fix potential for indexes to be set up incorrectly"
- beats: fix potential for indexes to be set up incorrectly
If a deployment is running a mix of versions, running once
would only run against a single version, missing out the index
setup for other versions of the beats.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-ops/+/843423
Change-Id: Ib6b0e77b96aec33779062a81dbad0931eeaa8806
* Update openstack-ansible-ops from branch 'master'
to 7cfcbbeccfd7d61c23ccbf9672dbc1f3d38532e3
- elk7: minimal fixes to CI jobs
This is a minimal patch to address failing CI to enable
other patches to be submitted.
Similar patches are likely to be required for other OSA
ops components, but this will be tackled at a later date.
Change-Id: I6020d7b820c1f7d781691df9a1d657aef0ea010b
* Update openstack-ansible-ops from branch 'master'
to ab914468040f949c067b0b86cb488c4698799a4e
- Update MNAIO for Focal
This patch removes legacy support for 14.04/16.04/18.04
on the deploy node and moves the default deploy to
Xena on 20.04 LTS. Root disk size has been bumped to support
upgrades (8 GB -> 12 GB).
Change-Id: I81a13464b9daa90090cb380e2b0d89e5eb8fe89a
* Update openstack-ansible-ops from branch 'master'
to 5c1bd46f917fc4396cd546169c20a40bbb689f2c
- Merge "Fixed venvs pattern to be more specific"
- Fixed venvs pattern to be more specific
Closes-Bug: #1910223
Change-Id: Icb58263a2a59f131715a5120652a39ed67673e39
* Update openstack-ansible-ops from branch 'master'
to a7de5d89a894eefc95418ff7a73ade57708dd083
- Removed task to cleanup venv tgz
venv tgz in /var/cache/ no longer exist.
Change-Id: Ib91712b5663ec24e29de28e2522046c8dc1b90c6
* Update openstack-ansible-ops from branch 'master'
to 518159ef404cd2a56d2483b7d51fd0b1e02cba14
- Merge "It's always systemd. Remove references to upstart"
- It's always systemd. Remove references to upstart
Upstart was last seen on ubuntu-14
Change-Id: I5cfbcc10fd1fbb76e5606e3f550327c4c8f3ff45
* Update openstack-ansible-ops from branch 'master'
to 0fcbc4afaac2ae2ad0e12bdee4c10a31ba849490
- Merge "Remove tasks for v6.5 beats (aarch64) from elk7"
- Remove tasks for v6.5 beats (aarch64) from elk7
These beats don't seem to be available at the urls, and they're
version 6.5.0.
Change-Id: I0022250dd58ce0f39c02e0733a17e53d753a2675
* Update openstack-ansible-ops from branch 'master'
to 09a310f75824a2717c112f3569417f35a6d84424
- Merge "Allow longer timeouts for elasticsearch.service"
- Allow longer timeouts for elasticsearch.service
/usr/lib/systemd/system/elasticsearch.service comes with a
TimeoutStartSec=75, which is not enough time for a somewhat busy
E5-2430L v2 @ 2.40GHz to get things going.
We don't want to permanently override that with a default of 75 in
case they decide to bump or remove that timeout in the future.
Change-Id: Ida8668f5548a15a8f597839bd9002585aeea5d1a
* Update openstack-ansible-ops from branch 'master'
to 501803569e4a985fde07a5257f82e2f3992d20fe
- remove argsplat warning
Since we can't be sure how deployers would override this setting,
we try applying all parameters, and omit those not defined.
Change-Id: Ie83b708ac7ee094e5ab0a72099d83418cc4cb58a
* Update openstack-ansible-ops from branch 'master'
to ea16ee62de3581beb3c3b38b7ec5bf3983ff33d7
- Change get-pip urls
The path for get-pip.py script in versions 3.2 and 3.4 have been changed
with this commit [1].
[1] 2360f025eb
Change-Id: Iedef41b53c4e5fa28dac8206c5ba39dab5033815
* Update openstack-ansible-ops from branch 'master'
to 397ed3f1eb1067fa43b5466dde05354ac4548ee0
- Merge "apm-server gets fussy about file-permissions"
- apm-server gets fussy about file-permissions
"Exiting: error loading config file: config file
("/etc/apm-server/apm-server.yml") must be owned by the user identifier
(uid=0) or root"
apm-server is normally run under its own user, and permissions on
/etc/apm-server/apm-server.yml reflect that, so we disable the check
while running running `setup` under root.
Change-Id: If25b446b49a29d1ac86261fe632bb6fe791f13ce
Jonathan Rosser