36439 Commits

Author SHA1 Message Date
Clark Boylan
59c06c93c2 Move grafyaml check and gate jobs in repo
This jobs are super stale now (py35?) and don't seem to function
reliably. Rather than update the config here in project config we remove
the jobs here with the intention of adding new jobs that make sens
in the in repo config.

Change-Id: I35704d26099b6f3fd5a03adc22670c023be4a4b0
2022-10-14 15:45:23 -07:00
Zuul
f0ef2ee1d7 Merge "Add project for managing zuul jobs for charms" 2022-10-12 16:21:19 +00:00
Liam Young
6a04129593 Add project for managing zuul jobs for charms
Add a project for defining the zuul jobs for testing charms.

Change-Id: I69a9c9f388371a7a8ad1c7fe5cfc8f6c444d4f45
Required-By: I07ace283a8255f106c141d7bea06618f802e3b51
2022-10-12 09:41:31 +01:00
Dr. Jens Harbott
702037af47 Switch the requirements-constraints job to py310
Since the PTI switched the supported python versions for the current
cycle from 3.8+3.9 to 3.9+3.10, we want to update the constraints
generation accordingly. Since we don't have a stable platform where we
can run both py3.9 and py3.10 in parallel, generate constraints only for
py3.10 for now.

Change-Id: I4a4d9cb6e292bb693ae424be0928501fed81113f
2022-10-12 05:38:30 +00:00
Zuul
b70a078917 Merge "Replace old Zed cycle key with 2023.1/Antelope" 2022-10-07 15:23:24 +00:00
Clark Boylan
6beca8328b Update OpenDev tenants' default ansible to 6
Zuul is looking at dropping ansible 5 support. By updating our default
ansible version to 6 early we can provide valuable feedback to the Zuul
project. That said we expect this to function. The Zuul Zuul tenant is
already running under ansible 6, and I've done some testing with
devstack [0] that appears to show those jobs running happily.

The openstack release is now out the door which makes this a good time
to change the zuul default.

[0] https://review.opendev.org/c/openstack/devstack/+/858436

Change-Id: I61493e74d9955a444326d72e085f511a838f88dd
2022-10-05 08:09:11 -07:00
Zuul
41686c0bee Merge "charms: add new ceph subteam" 2022-09-29 15:03:11 +00:00
Zuul
d0e49b25ca Merge "Add rockylinux-9-arm64" 2022-09-28 16:06:16 +00:00
Michal Nasiadka
d61182e6c5 Add rockylinux-9-arm64
Change-Id: I522bf00c737dd96cac337c37068545d168ecce32
2022-09-27 07:24:26 +00:00
James Page
58a07b520c charms: add new ceph subteam
Create new ACL for a charms-ceph subgroup and apply to all
Ceph related charm projects.

Change-Id: Ia8cfcad6aafcc95af20c0bb0fbf987e06e740a59
2022-09-26 10:24:03 +01:00
lotorev vitaly
805d136b94 Update link to zuul gating docs
Old link is broken.

Change-Id: Ibc66fa75fefe28d3dc5bdf0ffcd69b25b59f473a
2022-09-23 21:05:47 +00:00
Zuul
c501a29fe1 Merge "Add oran-o2 app to StarlingX" 2022-09-23 18:08:12 +00:00
Jeremy Stanley
fcd02797ee Add missing rockylinux and openeuler entries
Our various nodepool launcher configs have gotten out of sync with
recent additions. Try to match them up better by adding rockylinux
and openeuler to places where they were missing. In particular, this
addresses an inconsistency on nl04 which caused the service to crash
at last restart due to rockylinux missing from the main diskimages
list.

Change-Id: Ie157ab7f667dbdc313b7fdbfc1df71874e8bd0fc
2022-09-20 12:35:16 +00:00
Jeremy Stanley
b597a94b2e Add missing fedora-36 label to nl01
This seems to have been overlooked when the label was added to other
launchers, and is contributing to NODE_FAILURE results for some
jobs, particularly now that fedora-latest is relying on it.

Change-Id: Ifc0e5452ac0cf275463f6f1cfbe0d7fe350e3323
2022-09-19 15:05:52 +00:00
Jeremy Stanley
87bc275514 Move queues from pipeline to project level
Zuul now expects queue to be a project attribute, and won't process
pipeline definitions which still include it. Fix immediately.

Change-Id: Id2968b1b4ed8996365cc4cd4fe1e30f1e7ea64f9
2022-09-19 12:33:51 +00:00
Clark Boylan
6bcf188869 Bump Zuul tenant default ansible version to 6
Zuul will eat its own dogfood to ensure that new functionality like
Ansible 6 support works properly.

Change-Id: I577b1af5bca4fc44cd03e9d5f95306b3cd7f8b08
2022-09-16 08:59:09 -07:00
Bin Yang
4ec6f7edcb Add oran-o2 app to StarlingX
Story: 2010278
Task: 46333

Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: I44c1a772ef306549981239e4e053cb3918b1bb20
2022-09-16 14:34:28 +08:00
Zuul
28516a1a82 Merge "Setup #openinfra-envirosig IRC Channel" 2022-09-15 03:57:16 +00:00
OpenStack Proposal Bot
47df2e8db1 Normalize projects.yaml
Change-Id: I9a894b9e88e12582d0f7087f04a4cd8e3eae9c76
2022-09-15 02:16:51 +00:00
Felipe Reyes
94022085ae Add Keystone OpenID Connect charm to OpenStack charms
Add new charm that enables Keystone to support OpenID Connect via
Federation.

Change-Id: Ic758858db00a72a136e21c18f452df07f4ea74c2
Required-By: I1b7495f0a5010f9768845882a6e072b5be3f18b9
2022-09-13 13:35:25 -03:00
Dr. Jens Harbott
5ca02d7cf5 Fix update_target definition for service-types-authority
The variable name was wrong.

Change-Id: Id0598d7e093a1f146a55c7cfc590857d6a863e7f
2022-09-13 15:37:24 +02:00
ghanshyam mann
acbfd1d74a Make python version template unversioned
From 2023.1 cycle, TC agree to make python version
template to be unversioned
- https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/856903

This commit updates the release script to update the
unversioned template from next cycle.

Change-Id: Icf03e279bf574f5ff0c0f14b53c4ef76b6098c46
2022-09-12 11:03:59 +00:00
Zuul
25553520db Merge "Add STS-Silicom app to StarlingX" 2022-09-09 15:35:21 +00:00
zhangbailin
a732a2d7ae Add api-ref-job for Venus
Venushas already set up api-ref configuration with [1],
So add the gate job for this.

[1] https://review.opendev.org/c/openstack/venus/+/856379

Change-Id: I9963a9641951e9613d0efaa06a92a52399688b72
2022-09-09 15:40:08 +08:00
Ian Wienand
3fa0c6cc1c upload-npm: use token auth
Replace the username/password combo with a generated token

Depends-On: https://review.opendev.org/c/zuul/zuul-jobs/+/856225
Change-Id: I69914490a0132dee42d84a17589028dc684abc09
2022-09-08 12:57:34 +10:00
Jeremy Stanley
90961679b6 Replace old Zed cycle key with 2023.1/Antelope
This is a zuul-encrypted export of the signing subkey for the
OpenStack 2023.1/Antelope release cycle:
0xa7475c5f2122fec3f90343223fe3bf5aad1080e4

This was created using the instructions from our documentation:
https://docs.opendev.org/opendev/system-config/latest/signing.html

Depends-On: https://review.opendev.org/856325
Change-Id: I141514eaf31b2249f0901ad1ff93cc1bbe940c2d
2022-09-07 19:41:04 +00:00
Jeremy Stanley
109c7dbc23 Correct inline comment about ansible-lint pin
It's https://github.com/ansible/ansible-lint/issues/2320 which is
blocking our use of newer ansible-lint (though it's worth revisiting
whether testing with ansible-lint is still of any real value).

Change-Id: Ie3e42df7f90e5349bf1513e8896b1d5e16125b42
2022-09-07 18:43:21 +00:00
Steven Webster
ca21bda79c Add STS-Silicom app to StarlingX
The STS-Silicom app is intended to be used to configure
PTP/SyncE configurations on certain NICs from the Silicom
vendor.

Story: 2010213
Task: 46215

Signed-off-by: Steven Webster <steven.webster@windriver.com>
Change-Id: Ie6bf611af6f6e61aefd54dbfeed61896c98b437b
2022-09-07 08:51:09 -04:00
Clark Boylan
b9828899a7 Update deprecated merge-failure zuul syntax
The zuul pipeline reporter for merge-failure is now canonically called
merge-conflict. The old name has been deprecated and will be removed in
the near future. Update our config to use the new name.

Change-Id: Iaf49c8231618c7a24a0dca7f23d5b3770818dc80
2022-09-02 09:20:34 -07:00
Neil Hanlon
ba93b3570a
Add epel element to Rocky Linux 9 configuration
The element was missing from the configuration due to an oversight, this
change brings it in line with C9S as well as Rocky 8 to have EPEL
enabled.

Change-Id: I080f8118ccf411e363e0f7c2433dfaa9e911dd15
2022-09-01 09:05:38 -04:00
Zuul
09292df2d2 Merge "Add nested-virt-rockylinux-9" 2022-09-01 08:08:24 +00:00
Jeremy Stanley
ddfdf914a1 Match the ansible-lint <6.5 pin from zuul-jobs
We try to test our job content with the same ansible-lint versions
used by the zuul/zuul-jobs repository. Adjust our exclusions to
match what it's using, for consistency and ease of future
maintenance.

Change-Id: I2300e8950780245a38f68ce9cc5aa5ff62e65e40
2022-08-29 23:25:01 +00:00
Jeremy Stanley
a87b6d69f5 Exclude .cache when running flake8
For local runs of testenv:linters we cache all the external Ansible
playbooks and roles ansible-lint will need to reference in order to
validate content in this repository. We build that cache in a .cache
directory, but not everything in the cached repositories is suitable
for flake8 checking, so add that directory to its exclusion list.

Also add the same directory to .gitignore, so Git will stop
complaining about it being untracked.

Change-Id: I1f740edd75cc7f6ba0f4a73f0a409a620b437b16
2022-08-26 19:51:57 +00:00
Brian Rosmaita
9e669e52a4 [glance] Make Review-Priority completely sticky
Currently the value persists only if it's the max or min, and only
when there are no code changes or if it's a trivial rebase.

The behavior we'd like is that the assigned priority should persist
across the series of patch sets, even if there are code changes,
because this label indicates the relative importance of getting eyes
on the review, and is not directly involved in the code being approved.

A -1 Review-Priority ("Branch Freeze"), in addition to being sticky,
will continue to block submission of the patch.

Change-Id: Iee323ab80f9a58bf49827c23934560edfad57bf3
2022-08-26 12:14:02 -04:00
Tony Breeds
d84a9b1ec7 Update timer settings to match docs
In I478a64b21d9f19ece21ec5fb7a1327a106664529 (Move the
requirements-constraints job to the periodic-weekly pipeline) we
switched the job to run from the weekly pipeline.  After checking on
Saturday at approx 17:00 UTC) the job hadn't triggered.

I took this to IRC[1]:

12:50 <tonyb> Tony Breeds:
Totally not important but I'm noticing something strange with the periodic-weekly pipeline.  Looking at: https://opendev.org/openstack/project-config/src/branch/master/zuul.d/pipelines.yaml#L214-L224 that pipeline is to run at 08:00am Saturday (UTC), but looking at https://zuul.opendev.org/t/openstack/builds?pipeline=periodic-weekly&skip=0 it seems to be running at 08:00am on Sunday?
13:22 <frickler> Jens Harbott
tonyb: indeed, seems that zuul documentation is wrong. apschedule has mon=0 ... sun=6 https://apscheduler.readthedocs.io/en/3.x/modules/triggers/cron.html#module-apscheduler.triggers.cron
13:23 <frickler> Jens Harbott
most weird about it is that nobody seems to have noticed this before

Given the comment makes sense lets update the code to match.

[1] https://meetings.opendev.org/irclogs/%23openstack-infra/%23openstack-infra.2022-08-20.log.html#t2022-08-20T17:50:48

Change-Id: I4d4d70730362a8c80cbcb0b5abf57a12fad2ae9f
2022-08-25 19:46:39 -07:00
Tony Breeds
46838fbda8 Exclude ansible-lint 6.5.1 also.
ansible-lint introduced a regression as described in
"Don't use ansible-lint 6.5.0" I1770e034772b55b993d276d580c5a75d059bd822
the fix is still in draft and 6.5.1 has been released so lets skip that
too

Change-Id: I641a1246f870869153df782381fd9dafa180da26
2022-08-25 19:46:39 -07:00
Zuul
d67d326bef Merge "Formally retire puppet-tuskar" 2022-08-24 19:39:31 +00:00
Zuul
955895b6dc Merge "Retire openstack-helm-addons repository" 2022-08-24 19:30:22 +00:00
Zuul
e5b95109b6 Merge "nodepool: add rocky-9 stub" 2022-08-24 19:06:52 +00:00
Jeremy Stanley
c9c122460e Don't use ansible-lint 6.5.0
We have some skips in our playbooks which 6.5.0 ignores because of
https://github.com/ansible/ansible-lint/issues/2320 so block that
version and hope the fix makes it into the next release.

Change-Id: I1770e034772b55b993d276d580c5a75d059bd822
2022-08-24 18:26:41 +00:00
Michal Nasiadka
13552d20e5 Add nested-virt-rockylinux-9
Change-Id: I5c8c8350173d0aee0683c7fe40fafce7b5602a51
2022-08-24 17:47:11 +02:00
Ian Wienand
690553d1af nodepool: add rocky-9 stub
Add a rocky-9 stub; see I89cff1aa9d3b60ee24176cbfea9d1a81e2c976cd

Change-Id: I4212fbbca0a11af67c35029a8c8f7139e11ddc53
2022-08-22 11:25:54 +10:00
Ian Wienand
36b9c302e5 nodepool: Add Fedora 36
Add Fedora 36 builds

Change-Id: I64fac34945ea5c6ec91ddd442281fcaba2c53271
2022-08-22 11:25:09 +10:00
Tony Breeds
704503bd60 Move the requirements-constraints job to the periodic-weekly pipeline
Generating these updates on a daily basis isn't realistic and they often
take several modifications to merge.  The current process withing the
requirements team is to modify the topic and then work on them.  The
next time the periodic pipeline triggers we "ignore" the new change.

This change switches to the periodic-weekly pipeline to better match the
available workflow of the requirements team

Change-Id: I478a64b21d9f19ece21ec5fb7a1327a106664529
2022-08-18 19:43:11 -05:00
Clark Boylan
a6d4fae070 Tune sshd connections settings on test nodes
Update the sshd_config on our test nodes to accomodate what appears to
be an increase in ssh scanner traffic. In particular LoginGraceTime
defaults to 120 seconds. We reduce that to 30 seconds to cycle
connections more quickly. Then we also increase the maximum number of
connection startups to 30 from the default of 10. We also reduce the
random fail rate from 30% to 10% between 31 and 100 connections.

I'm not entirely certain this will fix things, but based on what we've
seen from logs it may be what we need to make ssh to test nodes more
reliable.

Change-Id: Ifacf7d00de157ab2fb60cde990f0b49f03f71415
2022-08-17 12:40:46 -07:00
Pierre Riteau
e63b79785c Add StackHPC Ansible roles used by openstack/kayobe
Change-Id: I76433698e519013987f29254fe23f224e6f399ae
2022-08-12 18:18:54 +02:00
OpenStack Proposal Bot
19ac46ee76 Normalize projects.yaml
Change-Id: I782cf0c6863ce7452776a18f1607f703a39fcc04
2022-08-12 02:23:45 +00:00
Zuul
094291739d Merge "linter: update ansible-lint; add auto-download of roles" 2022-08-11 23:56:34 +00:00
Ian Wienand
826a79f50f linter: update ansible-lint; add auto-download of roles
This updates ansible-lint to the 6.x releases.  It also updates the
ansible installed to our current zuul version.

It cleans up the config file and marks it as yaml.  A few new
exceptions are added with explainations.

We don't need to fake the zuul_return by telling ansible-lint to mock
it.  This is added to the config, and we can remove the stub file.

A constant source of problems running this locally is that you have to
have the other role repos checked out so ansible-lint can do its
checks.  Add a smaller helper script for doing this locally.  In the
gate, ANSIBLE_ROLES_PATH is set to the Zuul checkouts of these
projects.  Locally, add a smaller helper "ansible-lint-roles-cache.sh"
that pulls the projects into a .cache directory.  If they are already
there, they get updated.  By default locally we will use these
checkouts.  This way, "tox -e linters" just works without having to do
anything else.

This also modifies the xargs to run the check all at once, instead of
fork for each file.  I did try autodetection but it seems like other
yaml files in the roles/playbook directories still confuse
ansible-lint.

Also I don't think we need a ansible-playbook --syntax-check step;
ansible-lint covers that.

Change-Id: I972f73037b9f904a555b81f3835ca5261639ed01
2022-08-12 09:29:11 +10:00
Zuul
2064841008 Merge "Add #openstack-latinamerica to accessbot" 2022-08-11 22:33:39 +00:00