Skip to content

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Dec 3, 2025

This PR contains a snapshot of master from upstream master.

mnasiadka and others added 30 commits September 25, 2025 13:54
Default is 4 - adapting to the same value as in Devstack

Change-Id: I40aaa939f092387eaf5ef65332747224314636c2
Signed-off-by: Michal Nasiadka <[email protected]>
Switching the default to uWSGI due to the changes that are happening
in OpenStack - with projects dropping wsgi_file(s) and moving
to modules.

Separate Apache/mod_wsgi container that will serve for OIDC/SAML cases
will be posted as a follow-up.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/961676

Change-Id: Ia6b719847033f7861e814b4e1d8da810dafcc2aa
Signed-off-by: Michal Nasiadka <[email protected]>
Closes-Bug: #2111328

Change-Id: I3b3b2c434b393dd268e129d2b2d90cca0d0d67d2
Signed-off-by: Piotr Milewski <[email protected]>
Change-Id: Iab4dbffc796ebf5bdf32b6eda33f3204a70d1392
Signed-off-by: Michal Nasiadka <[email protected]>
kolla_container_facts could only get running containers,
this patch adds the ability to specify, that user wants
even stopped containers.
Also updates module's docs and corrects few typos.

Change-Id: I9ace3c1d802bc00ce692b3ca755384c6b62bd72d
Signed-off-by: Roman Krček <[email protected]>
Notification of handlers on service config change is now
mostly delegated to the service-check-containers role,
but handlers that restart nova_libvirt and ovn_sb_db_relays
still remain.

Remove these remaining handlers to ensure that all service
containers are restarted by service-check-containers.

Partial-Bug: #2123946
Change-Id: I57a51fb46cb7c58074044bac76b1160620086cb8
Signed-off-by: Matt Anson <[email protected]>
The basic approach is:
- we test majority in aio and cephadm scenarios
- additional scenario jobs are only triggered on roles
  that are not covered by aio/cephadm (and the ones
  that are relevant for given scenario)

Change-Id: I56b4e1218092ffcca074fef3ceac8e9d99054b21
Signed-off-by: Michal Nasiadka <[email protected]>
We've split out fluentd to move it earlier in the
deployment workflow - cron and kolla-toolbox are currently
the only components in common role.

Splitting it out will help with limiting kolla-ansible
to reconfigure only services managed by cron role.

Change-Id: Ia74c7d1e78e9d756a83c8adc7d9d8d9adb371751
Signed-off-by: Michal Nasiadka <[email protected]>
follow up to [1]
[1] https://review.opendev.org/c/openstack/kolla-ansible/+/954619

Change-Id: I7d23b9b57deb6d421a8953fe78774bd0155db625
Signed-off-by: Bartosz Bezak <[email protected]>
The Fluentd service is tested by the prometheus-opensearch scenario.
This change will ensure the scenario runs when the Fluentd role
or group vars are updated.

Change-Id: Ia6b8b879082d746f9ed1aec142f9fcbcb9d688bc
Signed-off-by: Doug Szumski <[email protected]>
Fluentd now sends logs directly to OpenSearch node IPs instead of using
a Load Balancer. This change reduces Load Balancer overhead from high
log volumes. The Load Balancer for OpenSearch remains in place, as it
is still used by OpenSearch Dashboards. Fluentd continues to handle node
availability, automatically distributing logs via round-robin, ensuring
log delivery even if individual OpenSearch nodes become unavailable.

Fixed Fluentd configuration template to avoid generating unnecessary
empty lines when optional parameters are not set.

Change-Id: I972268857f0389b3f313070491352789bcb1e409
Signed-off-by: Piotr Milewski <[email protected]>
CephAdm, Octavia, OVN and NFV jobs are not added here, because these rely on
Valkey/Redis available.
Ironic jobs are not added, because ipxe.efi is not packaged in EL10 and needs
a followup patch.
Let's Encrypt jobs are also not added, due to ssl certificate validation
errors.

Depends-On: https://review.opendev.org/c/openstack/kolla/+/956554
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237

Change-Id: I51823808c4e4ac08ae8f080aacf6a3759589571d
Signed-off-by: Michal Nasiadka <[email protected]>
OpenSearch Dashboards accepts a list of OpenSearch hosts [1]. This
patch switches to using that mechanism for load balancing,
rather than HAProxy.

One benefit is that if HAProxy goes down, OpenSearch Dashboards will
remain functional.

Connection to the OpenSearch frontend remains unchanged.

[1] https://github.com/opensearch-project/OpenSearch-Dashboards/blob/main/config/opensearch_dashboards.yml#L26

Signed-off-by: Doug Szumski <[email protected]>
Change-Id: If1a1bd0adbd1d0a41d9432d4474e8e74ca8b6873
Change-Id: I4641683420e813e2a8fb5dd2d26c1e07aa486403
Signed-off-by: Michal Nasiadka <[email protected]>
Change-Id: Iac15261a0916d14094afdd9b3cb5cba88f505d0f
Signed-off-by: Norman Ziegner <[email protected]>
Change-Id: Ide74d1a4ca4d0a9a65f8ce4fff2563c4f08708a7
Signed-off-by: Michal Nasiadka <[email protected]>
Since Debian is often failing (cirros boot crashes) - let's mark
it as non voting.

Change-Id: Icb8fc54d658937cc806e0441b452b6f4320b292a
Signed-off-by: Michal Nasiadka <[email protected]>
Change-Id: I43d0a65ae796b080dd977f5c227f7360746e7c9b
Signed-off-by: Michal Nasiadka <[email protected]>
Change-Id: Id979cc7e4f88994a051a4037224c2c1af479dcfd
Signed-off-by: Michal Nasiadka <[email protected]>
Move tasks that modified host configuration from kolla-ansible
role common to a-c-k as they need to be run only once on the
boostrap of the host and are not strongly related to the common
services.

Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/948525
Change-Id: I21c36df43425e2390b62f2d0257e99940e098734
Signed-off-by: Roman Krček <[email protected]>
Depends-On: https://review.opendev.org/c/openstack/kolla/+/963192

Change-Id: Ic9ddafb9ad5dcd27bb5efec1e94e64db886ee954
Signed-off-by: Michal Nasiadka <[email protected]>
Zuul and others added 22 commits November 24, 2025 22:11
Normalize quotes and some other easy fixes done by
ansible-lint --fix

Also drop etc from excludes and ignore comment check in
etc/kolla/globals.yml

Pinning to ansible-lint<25.11.0 because 25.11.1 is breaking
without any messages

Change-Id: I7dee3866191cef84cd12b1816cdab0a02380ec7f
Signed-off-by: Michal Nasiadka <[email protected]>
Change-Id: I4099b338b0d16bedf5731a3a63eeaad27a321d9b
Signed-off-by: Michal Nasiadka <[email protected]>
In Zed PTG we decided to limit the amount of release notes
this change adds the criteria when reno is required to the docs

[1]: https://etherpad.opendev.org/p/kolla-zed-ptg#L149

Change-Id: I4f153a619eb57a75ebdb1aba4b71e422b30d74fe
Signed-off-by: Michal Nasiadka <[email protected]>
The loadbalancer role used haproxy_external_single_frontend_public_port
(hardcoded to 443) instead of haproxy_single_external_frontend_public_port
(smart default based on TLS setting). This broke HTTP-only deployments where
services expected port 80 but haproxy bound to port 443.

Closes-bug: #2133456
Change-Id: I128f7cab52818d369ee7d3252d81383cf49eca97
Signed-off-by: Bertrand Lanson <[email protected]>
To add extra configuration lines to the backend section of the haproxy
config files (tcp and http) for each service, the
'haproxy_backend_http_extra' and 'haproxy_backend_tcp_extra' variables
were added to its jinja2 template file.


Change-Id: I9e0e4b07af16463064e709896b83b6c86a799340
Signed-off-by: Mohsen Sepandar <[email protected]>
Closes-Bug: #1914393
Change-Id: Ia5ad5a92c2f1f3a9197e2f6f078c97ccbe95b445
Signed-off-by: Michal Nasiadka <[email protected]>
@github-actions github-actions bot requested a review from a team as a code owner December 3, 2025 08:55
@github-actions github-actions bot added automated Automated action performed by GitHub Actions synchronisation labels Dec 3, 2025
@Alex-Welsh Alex-Welsh enabled auto-merge December 3, 2025 08:57
@Alex-Welsh Alex-Welsh merged commit e75e656 into stackhpc/master Dec 3, 2025
3 checks passed
@Alex-Welsh Alex-Welsh deleted the upstream/master-2025-12-03 branch December 3, 2025 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated action performed by GitHub Actions synchronisation

Projects

None yet

Development

Successfully merging this pull request may close these issues.