2660 Commits

Author SHA1 Message Date
Zuul
b3d9b3773c Merge "Remove kolla_enable_host_ntp variable" 2023-12-01 17:40:17 +00:00
Zuul
bc24c9ece1 Merge "Remove libgcrypt package update" 2023-12-01 12:58:51 +00:00
Pierre Riteau
8da5472ea8 Remove kolla_enable_host_ntp variable
This variable was configuring enable_host_ntp in kolla-ansible, which
was removed in the Xena release.

Change-Id: I737598d3bbe40b933b4b727eccc3b2a76ed97cdb
2023-12-01 13:02:19 +01:00
Zuul
c418bb67ca Merge "Install docker Python package in kolla venv" 2023-12-01 04:08:43 +00:00
Zuul
8e82a6b4a6 Merge "switches: add flag to save configuration on Dell switches" 2023-12-01 02:22:16 +00:00
Zuul
624c7f3893 Merge "Adds initial support for vGPUs" 2023-11-30 22:56:08 +00:00
Zuul
68bb8d6112 Merge "Fix configuration dump with inline encrypted variables" 2023-11-30 14:57:28 +00:00
Will Szumski
bd36b5f018 Adds initial support for vGPUs
Adds support for configuring vGPUs on NVIDIA hardware.

Closes-Bug: #2028843
Change-Id: I4c8481f7429dbf50d51e26bd7acee24e16ee6c79
2023-11-30 14:33:32 +01:00
Pierre Riteau
5e39e08587 Install docker Python package in kolla venv
The docker Python package was dropped from kolla requirements [1], but
we still need to install it to build container images.

[1] https://review.opendev.org/c/openstack/kolla/+/896644

Change-Id: I241884497f4fb707385eb12d5fcc187ed839f754
2023-11-30 14:14:51 +01:00
Zuul
409d85758a Merge "Allow more fine-grained groups for ironic, loadbalancer & network" 2023-11-30 11:20:16 +00:00
Mark Goddard
78702d0e30 Fix configuration dump with inline encrypted variables
If inline Ansible vault encryption is used to define an encrypted
variable in kayobe-config, running 'kayobe configuration dump -l <host>'
fails with the following:

  Failed to decode config dump YAML file /tmp/tmp_fg1bv_j/localhost.yml:
  ConstructorError(None, None, "could not determine a constructor for
  the tag '!vault'", <yaml.error.Mark object at 0x7f1e5c7404c0>)

This change fixes the error by using the Ansible YAML loader which
supports the vault tag. Any vault encrypted variables are sanitised in
the dump output. Note that variables in vault encrypted files are not
sanitised.

Change-Id: I4830500d3c927b0689b6f0bca32c28137916420b
Closes-Bug: #2031390
2023-11-30 10:55:46 +01:00
Zuul
323912d769 Merge "kolla-bifrost: Add precheck for inspection allocation pool" 2023-11-29 17:10:48 +00:00
Zuul
c113ddd5b6 Merge "Honor custom ssh args in kayobe-ansible-user.yml" 2023-11-29 12:33:36 +00:00
Zuul
3c0f016314 Merge "Deduplicate before picking merge strategy" 2023-11-29 11:37:32 +00:00
Zuul
76208da885 Merge "Adds support for using Dell OS 10 switches with NGS" 2023-11-28 18:05:03 +00:00
Pierre Riteau
ad2057e2d3 Remove libgcrypt package update
This fix was added when upgrading from CentOS Linux 8.2 to 8.3. This is
likely not required on currently supported operating systems.

Change-Id: Ic2c47ae4514d98ff18c5d17ba62b50c47f3929c1
2023-11-24 10:39:57 +00:00
Michal Nasiadka
1e2ac5eb28 kolla-bifrost: Add precheck for inspection allocation pool
Change-Id: I73fad29af6a57b29afea46947d1ae90546253a2a
2023-11-23 10:59:52 +00:00
Zuul
14bcaba0a3 Merge "Add support for setting Docker daemon debug" 2023-11-22 08:47:46 +00:00
Zuul
0cb0e9feef Merge "provision-net: Remove transitional unshare code" 2023-11-21 19:39:41 +00:00
Will Szumski
786a78d074 Deduplicate before picking merge strategy
I missed this when I refactored the code to fallback
to templating. We need to deduplicate before picking
the strategy for the fallback to work for symlinked files.

Change-Id: Iddd6c90a6daa41e1d1cdaa6b598491792c13394d
Closes-Bug: #2042689
2023-11-17 18:56:23 +00:00
Pierre Riteau
8da3481ca2 CI: Test SELinux configuration
Change-Id: I06b0bd4634ebb8b78baa23656c891333fd96b88b
2023-11-17 13:19:45 +01:00
Michal Nasiadka
351e6b3173 Drop not used grafana-conf from reqs
Change-Id: Id80e7d28c20b1f9ecc52473013c78c28d2ab5532
2023-11-15 18:56:02 +01:00
Michal Nasiadka
beb6ec7903 Remove Monasca and co remnants
Change-Id: I2577245440d510ab19f48915479a8e3575b996b7
2023-11-15 18:53:55 +01:00
Grzegorz Koper
a46b78e594 ipa-images: use changed openstack.cloud output
Updating requirements.yml with latest os-networks role

Following up:
Ia3550644e5fc3e83f792e46d42b4c35d5eec4705

Change-Id: I9cb1b4c5329dc9db8562cf317616101d35f13edb
2023-11-14 12:27:58 +00:00
Zuul
6f34ca0cbd Merge "veth: Remove support for EL8 / network-scripts" 2023-11-10 18:01:52 +00:00
Zuul
82ea6c78d8 Merge "dnf: Remove workaround for uppercase repo files" 2023-11-09 01:49:15 +00:00
Zuul
b31023ea54 Merge "Fix setting kolla_admin_openrc_cacert" 2023-11-09 01:35:47 +00:00
Zuul
1d2d03b76a Merge "Fallback to templating when only one source exists" 2023-11-08 19:52:02 +00:00
Zuul
63f9aa4ef1 Merge "Generate local Kolla Ansible config in check mode" 2023-11-08 18:26:14 +00:00
Zuul
c9086d7d29 Merge "dev: Improve error checking for config check functions" 2023-11-08 16:56:03 +00:00
Zuul
79ebd52445 Merge "Fix an issue when user forgot combine custom passwords" 2023-11-08 16:55:53 +00:00
Zuul
7bde4424ec Merge "Improve neutron images regex" 2023-11-08 16:33:20 +00:00
Zuul
c2f8691fe9 Merge "Bump up Ansible supported versions to 7.x/8.x" 2023-11-08 16:15:42 +00:00
Will Szumski
86d9a533e8 Fallback to templating when only one source exists
This is a backwards compatability improvement, since it was previously
permitted to have a config file that templated to invalid yaml/ini.

Change-Id: I53a0894cc64e83c7342a82ad987b7e5a4696ece2
Closes-Bug: #2042690
2023-11-08 12:33:41 +00:00
Grzegorz Koper
80f6db34cd Bump up Ansible supported versions to 7.x/8.x
This change bumps up the maximum supported version of Ansible to 8.x
(ansible-core 2.15.x) and minimum to 7.x (ansible-core 2.14.x).

Depends on:
https://github.com/stackhpc/ansible-role-systemd-networkd/pull/10

https://github.com/stackhpc/ansible-role-dell-powerconnect-switch/pull/13

https://github.com/stackhpc/ansible-role-mellanox-switch/pull/8

gateway_ip was being set to empty string. This was triggering neutron
""Invalid input for gateway_ip. Reason: '' is not a valid IP address."
Omitting by default.

Installing openstack.cloud collection.
Upgrade failed as Ansible in kayobe-venv was not upgraded.

Change-Id: Ia3550644e5fc3e83f792e46d42b4c35d5eec4705
2023-11-07 18:33:06 +01:00
Zuul
6e404d1fe4 Merge "Stop merging config when symlink points to same file" 2023-11-07 14:23:31 +00:00
Zuul
ed75bf83be Merge "CI: Drop tox-py38 job" 2023-11-06 15:03:29 +00:00
Grzegorz Koper
9146fdbc41 CI: Changing docker network driver in molecule
Setting network mode to host.
Enables testing without additional configuration of the host.

Change-Id: I46406d414290ed785a4644c88cbc76ff074e96a2
2023-11-06 09:58:16 +00:00
Will Szumski
2f4b45cd17 Stop merging config when symlink points to same file
This can result in duplicated configuration options.

Change-Id: I4dd6ffae027345b8c1cc217a63e85f8af7fc9746
Closes-Bug: #2042689
2023-11-03 17:49:26 +00:00
Mark Goddard
1fd4e05c59 dnf: Remove workaround for uppercase repo files
I8bf75ce44b9ec1fdd477fcddf2deebf2929d9fc1 added a workaround to remove
incorrectly named DNF repository files.

This workaround has been in place since the Antelope release and can now
be removed.

Change-Id: I7ba61ffa8aaabcedf1c5249e5f39f39257410f9a
2023-11-02 09:36:26 +00:00
Mark Goddard
874e3d1070 provision-net: Remove transitional unshare code
Ie59f0c729381e5bea112ab7f5d0c738a9488b772 changed the provision-net and
cleaning-net to be non-shared when they are VLAN networks. It also
added some transitional tasks to modify existing VLAN networks to unset
the shared property.

This change removes the transitional code since it has been in place for
over 3 years.

This change also slightly refactors the code to use only a 'tasks' list.

Change-Id: I6d358502d37e6a2d0098ad4733840613e93b4279
2023-11-02 09:31:21 +00:00
Michal Nasiadka
d9ee59ea1b Improve neutron images regex
Match ML2/OVS agents only when OVN is not enabled.

Change-Id: Ia2ba7414202de6750b18ada47e7a5bb0b636e7b3
2023-11-02 07:44:02 +01:00
Zuul
9836fa7e6c Merge "Bump hacking version" 2023-11-01 20:04:11 +00:00
Zuul
af90e846fb Merge "Support building Neutron OVN agent image" 2023-11-01 20:04:09 +00:00
Mark Goddard
8dc73ed2fe veth: Remove support for EL8 / network-scripts
We no longer support EL8 or network-scripts.

Debian systems never used this role, so also removing those tasks.

Change-Id: I17b93c75a1ff8eb8d636247696f4a1709ca486d5
2023-11-01 17:15:44 +00:00
Mark Goddard
35259800aa switches: add flag to save configuration on Dell switches
Currently only supported on Dell OS9 and OS10 switches, and provides no
CLI integration.

Change-Id: Ia9242ed823868cba3a27fb9344a3b01283528d87
2023-11-01 16:57:03 +00:00
Zuul
29f7b3b755 Merge "Add seed_deploy_containers_registry_attempt_login" 2023-11-01 16:16:58 +00:00
Mark Goddard
2071dc9a38 Allow more fine-grained groups for ironic, loadbalancer & network
Kayobe has fairly coarse-grained default groups - controller, compute,
etc, which work well in the majority of cases. Kolla Ansible allows much
more fine-grained placement on a per-service basis, e.g.
ironic-conductor. If the operator has taken advantage of this
fine-grained placement, then it is possible that some of the assumptions
in Kayobe may be incorrect. This is one downside of the split between
Kayobe and Kolla Ansible.

For example, Ironic conductor services may have been moved to a subset
of the top level 'controllers' group. In this case, we would not want
the Ironic networks to be mapped to all hosts in the controllers group -
only those running Ironic conductor services. The same argument can be
made if the loadbalancer services (HAProxy & keepalived) or Neutron
dataplane services (e.g. L3 & DHCP agents) have been separated from the
top level 'network' group.

This change abstracts the placement of Ironic conductor Ironic
inspector, loadbalancer and network services into separate variables,
rather than referencing the top level 'controllers' and 'network' groups
directly. These variables may be updated by the operator to match the
service placement.

Change-Id: Idbf181c795ee98ad653f11ae483f9dab4ef1b599
2023-11-01 16:16:45 +00:00
Maksim Malchuk
73abf0e57e Fix an issue when user forgot combine custom passwords
Fixes an issue when user forgot to combine
'kolla_ansible_custom_passwords',
'kolla_ansible_default_custom_passwords' and own dictionary with
custom passwords in configuration files. Now
'kolla_ansible_extra_custom_passwords' should provide only user
custom passwords to add or override in the passwords.yml.

Change-Id: I4813a1f6ab9cb566596e806bd0ada6dff342d119
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-11-01 11:30:45 +00:00
Mark Goddard
95729405a3 Fix setting kolla_admin_openrc_cacert
Kolla Ansible renamed kolla_internal_fqdn_cacert to
kolla_admin_openrc_cacert in Victoria, after which we no longer set the
variable correctly in globals.yml. This would lead to a missing
OS_CACERT in admin-openrc.sh and public-openrc.sh.

This change fixes the issue by renaming the relevant Kayobe variables to
match and passing through the correct variable. Backwards compatibility
is provided until the end of the deprecation period.

kolla_public_openrc_cacert -> kolla_external_fqdn_cacert
kolla_admin_openrc_cacert -> kolla_internal_fqdn_cacert

Story: 2010486
Task: 47054

Change-Id: I9e1cc20579cf80525d6ef732a1aac99a65bc171b
Co-Authored-By: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-11-01 10:55:19 +00:00