Since Murano is moved to inactive state, we can not provide further
releases of the role either, which means that Sahara should be dropped
from the integrated repo.
With that it's worth to preserve actuall playbook that was used for
deployment as example playbook, in case somebody needs to use old
role/service version in their deployments.
Change-Id: Iffcf7e865591ef76f62053f3ec3d022a90cfb331
Since 2024.1 is inactive project and we removed it from releasing. So
we should not attempt to run any meaningful testing unless project
will move back to Active state.
Change-Id: I9f17827ca9eb76dda24a770cadeae86aa707dc1a
This change implements and enables by default quorum support
for rabbitmq as well as providing default variables to globally tune
it's behaviour.
In order to ensure upgrade path and ability to switch back to HA queues
we change vhost names with removing leading `/`, as enabling quorum
requires to remove exchange which is tricky thing to do with running
services.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/896017
Change-Id: Ic9cf5ffae328b5dff3fb357a27628ffab7698b22
While <service>_galera_port is defined and used for db_setup
role, it's not in fact used in a connection string for oslo.db.
Change-Id: I3b0657b8d3b062eb6c8af44f0905066dba150a88
Right now we are not using any constraints for docs and releasenotes builds.
This has resulted in docs job failures once Sphinx 7.2.0 has been released.
The patch will ensure that constraints are used an we should not face
simmilar issue again.
TOX_CONSTRAINTS_FILE is updated by Release bot once new branch is created,
so it should always track relevant constraints.
Some extra syntax-related changes can apply, since patch is being passed
through ConfigParser, that does not preserve comments and align indenting.
Change-Id: I385e0a3bcddb949f0e6e4c0eef67ff48745da9d3
With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.
With that we also update metdata to reflect current state.
Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
Change-Id: Id9475194ab695b2a188f33e8f8a209ebbc44363f
By overriding the variable `murano_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the murano backend api.
The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: Ifdebdd2929737b09724024cb307dac139f618713
At the moment we don't restart services if systemd unit file is changed.
We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now we ensure that role handlers will also listen for systemd
unit changes.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_heat/+/879963
Change-Id: I3ecb1d9892145906d2f384d53ec47e722ab2649b
With tox release of 4.0, some parameters were deprecated and are ignored now
which causes tox failures. One of the most spread issues we have is using
`whitelist_externals` isntead of `allowlist_externals`
Change-Id: If539db8261f3ab2aff2c476bdead78083ab2eb69
Add file to the reno documentation build to show release notes for
stable/zed.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.
Sem-Ver: feature
Change-Id: If0179c694e96a4ad5da2c2d9901b7374e282b58f
This line has been here since the initial commit
Ib006dc0578f436076cfe196c8574106e3dc7cbc6, but should already
be covered by the distribution_major_version line above.
Change-Id: Ib3fbf40ac94aa56f9cfbc912f2b83ca0f2186fdb
Role was never migrated to usage of haproxy-endpoints role
and included task was used instead the whole time.
With that to reduce complexity and to have unified approach, all mention
of the role and handler are removed from the code.
Change-Id: I27c2ddedc3997d63ddcb08c9f4c06ec1cb287ed1
Instead of overriding each service separatelly it might make
sense for deployers to define some higher level variable that
will be used first or fallback to default variable.
Change-Id: I87c5c56838bdec247bb46062fe8c9c4f063abde1
Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.
Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: I07b63c327639fd69ff8705f11909ee62b582fede
Instead of running muranoclient on murano host, we're delegating
execution to service_setup_host. This reduce
complexity and remove some requirements for murano hosts.
With that we also replace usage of muranoclient
with openstackclient.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/846162
Change-Id: I9c432b4a24127fad3bfe0f24d02fa750170f483e
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.
Change-Id: Id8c1fb76eb00056fef039cfdcd2ef351358f53c7
Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.
This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.
Change-Id: Ibf1f9d10222b28814565171a811dadb30c88c6f7
- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: I9350f40b8661e3d684292c0a26135e16af1927ea
Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814
Change-Id: I3f1fa58bc738abf6991fcd8389d2b7cb90dc9d8a
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.
Change-Id: I662b7194bfb3e3e185b29598c19fa032111e3b64
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.
Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.
[1] 78f0cf99e5/pymysql/connections.py (L267)
Change-Id: Ib0cfe24da5685ce866327dc099e873345abc3681
Debian Stretch (the current target of "debian-stable") is no longer
supported by infra. Remove these jobs.
Cherry-Picked-From: cf9c3c510a0c374eabc80667da3004ddbd955246
Change-Id: I35da8bfb3d714d086fdbd376c2f3cf9eba4e6b21
The sync from https://review.opendev.org/733244 updated to
openstackdocstheme 2.2.1 and reno 3.1.0 versions.
Set openstackdocs_pdf_link to link to PDF file. Note that
the link to the published document only works on docs.openstack.org
where the PDF file is placed in the top-level html directory. The
site-preview places the PDF in a pdf directory.
openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.
See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html
Change-Id: I01ad8256b6ee4ea086024a677dca44fa26f07358
Add file to the reno documentation build to show release notes for
stable/ussuri.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.
Change-Id: I299b8e3af569348ae366e7212e017ffad7df6789
Sem-Ver: feature
New version of openstackdocstheme (Victoria+) respects pygments_style.
Since this repo is using now Victoria (master) requirements but has
not branched for Ussuri yet, it uses the new version.
Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.
Change-Id: I0e6bd2b1b97c44dfec8f6f0f196fdca3fbdce94f