* Update openstack-ansible-os_swift from branch 'master'
to 719f8437f47756bba4baa448e35b462aef3face3
- Remove nobarrier mount option from docs
Swift stopped including this option in its docs in 2019, and recent
kernels stopped recognizing it as a valid option, leading to mount
failures.
Related-Change: https://review.opendev.org/c/openstack/swift/+/665984
Closes-Bug: #2051764
Change-Id: I4f2ff43ac90023db422633246e89146b377cee74
* Update openstack-ansible-os_swift from branch 'master'
to 0ba35bf8416e3e1f1edb4171c895a4c3e34ca6ab
- Add quorum queues support for service
This change implements and enables by default quorum support
for rabbitmq as well as providing default variables to globally tune
it's behaviour.
In order to ensure upgrade path and ability to switch back to HA queues
we change vhost names with removing leading `/`, as enabling quorum
requires to remove exchange which is tricky thing to do with running
services.
Change-Id: Id5f6cabed7ec035845865d6d5facc63590c56d43
* Update openstack-ansible-os_swift from branch 'master'
to ee795c740c645df9567014c93ddecf16b0246eb4
- Fix example playbook linters
Change-Id: I403f4add2f2eb896c96c9c6905694ef32ffc7677
* Update openstack-ansible-os_swift from branch 'master'
to 1d0bba49a7ff8b469007d596451927374a2e2c2e
- Stop reffering _member_ role
Keystone has stopped providing or reffering `_member_` role for a while,
thus role should not be refferenced anymore.
Moreover, with 2023.1 service policies have dropped `_member_`
which resulted in the role to be insufficient for basic operations.
Change-Id: I4d6eacae2041b0a00114dda4e8315d4ec6295319
Related-Bug: #2029486
* Update openstack-ansible-os_swift from branch 'master'
to 99c6fb28355553e1d42ed1dfc8ec2e98fe077f8c
- Fix linters and metadata
With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.
With that we also update metdata to reflect current state.
Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
Change-Id: I6bbb97cd2f1daac42269a335014eb6cf7f28d24e
* Update openstack-ansible-os_swift from branch 'master'
to 96a262b26b93cd0ccdaadf9263039b382d266da1
- Add TLS support to swift backends
By overriding the variable `swift_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the swift backend api.
The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: Idb7882775a90ada9bb9e1450168916c73bf8ae4b
* Update openstack-ansible-os_swift from branch 'master'
to 78e75642e73c7fdf4f65a33890e6e65a2275b751
- Ensure service is restarted on unit file changes
At the moment we don't restart services if systemd unit file is changed.
We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now we ensure that role handlers will also listen for systemd
unit changes.
Change-Id: I78c9888f7f2b97bd901d9fcce636bc22b6411eb9
* Update openstack-ansible-os_swift from branch 'master'
to d17911391942edc448904c1cd6bbc9be13742984
- Fix role as a result of ANSIBLE_INJECT_FACT_VARS=false
ansible_<variable> injection is now disabled by default in
openstack-ansible so the network interface information is now
accessed via ansible_facts['ifname'] rather than
ansible_facts['ansible_ifname'].
This patch also replaces the use of hostvars[inventory_hostname]
with the more correct access via ansible_facts.
Change-Id: Id2c59badb6767d62799ab51504444d935b68b4ce
* Update openstack-ansible-os_swift from branch 'master'
to 737c9a51d6fb78927594ddccc1277c0173868f6a
- Update tox.ini to work with 4.0
With tox release of 4.0, some parameters were deprecated and are ignored now
which causes tox failures. One of the most spread issues we have is using
`whitelist_externals` isntead of `allowlist_externals`
Change-Id: Ic7864bf2150acbeab504d4dce3dd1a920974e5eb
* Update openstack-ansible-os_swift from branch 'master'
to 4a3d207c5aff84b2af52e456b17794ef87b6e035
- Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.
Sem-Ver: feature
Change-Id: Ibe537add36546f7b1b8e791943a9f7dd9d26a3db
* Update openstack-ansible-os_swift from branch 'master'
to 89a6bb07187f87aa8aab11ffba14f0248019886f
- Add support for running object-servers Per Disk
Adds support for configuring different storage port per disk
in the storage policy ring. This Swift feature is described
here https://docs.openstack.org/swift/latest/deployment_guide.html#running-object-servers-per-disk
Signed-off-by: Andrej Babolcai <andrej.babolcai@gmail.com>
Change-Id: I254e35a67195817c237dba00bec6338d3fffa985
* Update openstack-ansible-os_swift from branch 'master'
to 0b14d1ebaed2e89b08cf329940e94a2be95247e4
- Replace git-core with git for debian
With ansible-core 2.13 it tries to substitude package resolution in apt
module.
However git-core is used in Debian as transitional name, but ansible
tries to select it and provide version, which is not correct behaviour.
But since git-core is not really valid anyway, we just replace it
to workaround ansible's imperfectness.
Change-Id: Ic931147588dc549eaf41db9ff1c4abda2b8537c5
* Update openstack-ansible-os_swift from branch 'master'
to b899b28880f1537531800798afbb2f2b2e80f10a
- Remove redundant vars line
This line snuck in with Ib586cfc978f1e5fa05f6ce4add8a337eb433f82f
probably to bring it in line with other OSA roles, but should already
be covered by the distribution_major_version line above.
Change-Id: I78e89768f077b1cf1562b91ae0066620eb226cc7
* Update openstack-ansible-os_swift from branch 'master'
to 5139ecc2334f5059c452e99080660be2a36671d5
- Support service tokens
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.
Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: If34e0170ea0e0f7727cfadba982f3c7dae6ae216
* Update openstack-ansible-os_swift from branch 'master'
to e2e110154939a8a7170e07aec3a24ad64d0b3403
- Merge "Sync rings to all swift hosts to build_files"
- Sync rings to all swift hosts to build_files
In previous patch [1] I wrongly assumed that there's no reason to have
/etc/swift/ring_build_files/
on all hosts. However, there's another logic in the role, that assumes
having these files and verifying md5sum of them.
As an easy bugfix, we're returning sync to ring_build_files until we
change logic. It's also easily backportable.
[1] https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/765354
Change-Id: If0e686352e08379027508c2939fae00db6ae6cb8
Closes-Bug: #1973045
* Update openstack-ansible-os_swift from branch 'master'
to 7d8259c4860270472b6669503a091e5025c0d513
- Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.
Change-Id: Ifd2b3956ee3f8a7847256d6444cccf674c7d526e
* Update openstack-ansible-os_swift from branch 'master'
to 4ca16593d841182d63afd777cf9d47dd18e02666
- Merge "Use common service setup tasks from a collection rather than in-role"
- Use common service setup tasks from a collection rather than in-role
Change-Id: I04531583a731d02a011f72f6d79eced434a66eaa
* Update openstack-ansible-os_swift from branch 'master'
to 021d286b56ab89c1c86a98e506134035b3532537
- Merge "Refactor use of include_vars"
- Refactor use of include_vars
Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.
This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.
Change-Id: Ib586cfc978f1e5fa05f6ce4add8a337eb433f82f
* Update openstack-ansible-os_swift from branch 'master'
to 73c39cd9d6efd5b09e4e628ec60a5d3c1d13c843
- Merge "Use config_template as a collection"
- Use config_template as a collection
Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814
Change-Id: Iff0959a012d1875e01cd72bee3fb75906ef0983a
* Update openstack-ansible-os_swift from branch 'master'
to b96ce882213d5944fd72f5607b909877fc17c461
- Replace linters test with integarted one
We've created integrated linters check job a while back and it's successfully
working for several releases. At the moment we experience difficulties
with future maintenance of the linters check from the openstack-ansible-tests
repo. So instead of fixing current one, we replace it with modern version of
the test.
Change-Id: Iebcc755c22b8b34e06be95acd48c3ab9cecf953b
* Update openstack-ansible-os_swift from branch 'master'
to 2ce00d6c69854a175d876c95b3439863a20a5fe4
- Do not collect gnocchi project ID
Ceilometer middleware now accepts also project names,
so it's not required to gain project UUID [1].
We also switching gnocchi project name to `service` for all scenarios
as it's already whitelisted by default [2]
[1] e2bf485044
[2] 082dabb1b7/ceilometermiddleware/swift.py (L158)
Closes-Bug: #1879192
Change-Id: I40d3178d1b3bd1234ac34c6fa1d0d2bcb7160720
* Update openstack-ansible-os_swift from branch 'master'
to 24bbb72ac97bbd2683d0eae04b8ab4c3674005bc
- Revert "split templates to work around configparser bug"
This reverts commit 3e151d97adbff78be1b146938374a0dced5970e9.
Reason for revert: Upstream bug has been fixed
Change-Id: I5498030487677523ae71ae2f9a13074ab4552204
Related-Bug: #1872553
Closes-Bug: #1921354
* Update openstack-ansible-os_swift from branch 'master'
to 992ab38b616a1339ec40b54d0ce3b83f67b8cb29
- Merge "Use ansible_facts[] instead of fact variables"
- Use ansible_facts[] instead of fact variables
See https://github.com/ansible/ansible/issues/73654
Change-Id: Ia3c80d5c0e63ee9c38868c41c9235c51a2498971
* Update openstack-ansible-os_swift from branch 'master'
to a1205ca3a9e8f0fb587691c3842b285f9be157f9
- Remove references to unsupported operating systems
All references to Gentoo, SUSE, Debian stretch and Centos-7 are removed.
Conditional tasks, ternary operators and variables are simplified where possible
OS specific variables files are generalised where possible
Change-Id: I30e528914092c5c4df081031045e3d2f2e949bfd
* Update openstack-ansible-os_swift from branch 'master'
to 3c16888e1af1dfd5cf7d07719d040587e5e015f3
- Merge "[reno] Stop publishing release notes"
- [reno] Stop publishing release notes
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.
Change-Id: Icd059fb0ec832e8b7b4e6f9a671b11959b6bda26
* Update openstack-ansible-os_swift from branch 'master'
to baa3dc357801ca0631308a939259feeb0e237099
- Move swift packages from constraints to requirements
This is necessary to use the new pip resolver
Change-Id: I5c22a77fc889b78bad6d1e27f7c631ef4b8a8220
* Update openstack-ansible-os_swift from branch 'master'
to d3f80f734a3ba69da019a9adf853cd541dc8fd84
- Use global service variables
Instead of overriding each service separatelly it might make
sense for deployers to define some higher level variable that
will be used first or fallback to default variable.
Change-Id: Ia08e7c0c1a7398c6edac32dc04cb90e50b502059
* Update openstack-ansible-os_swift from branch 'master'
to 58e003f44e1dba26c5fa8457cd1a41c88a1a2bb9
- Merge "Use synchronize module for rings distribution"
- Use synchronize module for rings distribution
Instead of using rsync which do not respect ssh ports, we fetch rings
to the deploy host and distribute them back to swift hosts
Change-Id: I9f8bc0af9803d2a235b3da956b5618adfe195c00
Closes-Bug: #1904935
* Update openstack-ansible-os_swift from branch 'master'
to 569c8cfb0092cc9bc295d709e1f382ed232032b7
- Define condition for the first play host one time
We use the same condition, which defines against what host some "service"
tasks should run against, several times. It's hard to keep it the same
across the role and ansible spending additional resources to evaluate
it each time, so it's simpler and better for the maintenance to set
a boolean variable which will say for all tasks, that we want to run
only against signle host, if they should run or not now.
Change-Id: I4abb67271bd635c8cde5d4d65451e5fa0091868b
* Update openstack-ansible-os_swift from branch 'master'
to 5e4c9582f19ae54ff68d68c68ef7e37f1162faac
- Reduce number of processes on small systems
Even the most modest 4C/8T system would run with the maximum 16 processes
due to the calculation being VCPU*2.
We devide amount of CPUs to number of threads for hyperthreaded CPUs
Change-Id: Ie3c590d413b001ac9ccdb6522c9654b4372b5e10
* Update openstack-ansible-os_swift from branch 'master'
- Add global override for service bind address
Change-Id: Id04786c64e6dcc955e086a26f0abe38e2437d23f
* Update openstack-ansible-os_swift from branch 'master'
- Delegate gnocchi retrievement task to setup host
Since we don't have required libraries on the swift hosts,
we should delegate openstack collection tasks to the setup host.
Change-Id: Ib8a8875c1a355b1f67cdc2bc4f1d028fa7ae3496