Synchronise master with upstream#859
Open
github-actions[bot] wants to merge 180 commits intostackhpc/masterfrom
Open
Synchronise master with upstream#859github-actions[bot] wants to merge 180 commits intostackhpc/masterfrom
github-actions[bot] wants to merge 180 commits intostackhpc/masterfrom
Conversation
Adds haproxy_cloudkitty_api_client_timeout and haproxy_cloudkitty_api_server_timeout for the cloudkitty_api and cloudkitty_api_external HAProxy frontend/backend entries. Defaults are set to haproxy_server_timeout and haproxy_client_timeout. Change-Id: I0294cae7379b017cb470fe43fe2594d66a627499 Signed-off-by: Dawud <dawud@stackhpc.com>
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Closes-Bug: #2138290 Change-Id: Ic5fc1b7e801b28a2bb20b4a60146ac443ffe5ef0 Signed-off-by: Matt Crees <mattc@stackhpc.com>
When using containerd, ulimits are not enforced by default. On Debian-based systems this commonly results in missing nofile limits and service startup failures. This change introduces sane default ulimit values for Debian-based distributions while keeping existing EL9 behavior unchanged. Closes-Bug: #2132378 Change-Id: I6c6c61df96aea8a12bde2f17afc09adfd5aa2b31 Signed-off-by: amir58118 <sahahmadi96@gmail.com>
The destroy task 'Clean up Octavia interface service' requires root privileges to remove the systemd service file. Without privilege escalation the task fails, causing the destroy workflow to stop. Add become: true to ensure the task runs with the required permissions. Closes-Bug: #2143078 Change-Id: If3c005b076f6e086cdb2f83dab954c77bd81d888 Signed-off-by: Shapovalov, Pavel <pshapovalov@itkey.com>
Adds the ovn_northd_cmdline_extras variable to allow operators to pass additional command-line arguments to the ovn-northd daemon. This enables customization of performance-related parameters such as thread count (--n-threads), parallel build (--use-parallel-build), and inactivity probe timeout (--inactivity-probe). The implementation follows the established cmdline_extras pattern used throughout kolla-ansible for services like Prometheus exporters. Closes-Bug: #2142316 Change-Id: I870034da10f80ff2208bbad529fa7de9a2548c06 Signed-off-by: Antony Messerli <antony@mes.ser.li>
See https://review.opendev.org/c/openstack/releases/+/979473 Change-Id: Ia9d26f74b17e9c15fbd59ba3c3ace7c9f895e181 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Change-Id: Ief82106a3dca9abf97a3a4153015c15c75fee492 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Change-Id: I2c9440a46dda9d5d188ae1efc6e363970220c37c Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
Currently, the nova-cell role always uses default templates, preventing host- or service-specific overrides. This patch makes the tasks check for operator-provided templates first and fall back to defaults if none are found. Closes-Bug: #2135121 Change-Id: Id166ff4841fa55aba57a41983d2dd93f9e6005ab Signed-off-by: Robbert Nijgh <rmnijgh@hotmail.com>
Previously we used logout url in the test, which worked (and was also used in Horizon). It stopped working after recent changes, but changing to login url fixes that. Change-Id: I19c24ce44370ab949bfea49aef7023dd323fff6a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Co-Authored-By: Taavi Ansper <taaviansperr@gmail.com>
This reverts commit 68ec4c2. Reason for revert: https://review.opendev.org/c/openstack/heat-dashboard/+/979418 was merged. Change-Id: I6940ddb4b4b85203077eac63fb4c682b32a3727f Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
This commit adds the missing 'healthcheck' parameter to the masakari-api restart handler. This mismatch was causing CI job failures due to unexpected service disruptions. Closes-Bug: #2143979 Change-Id: I1ae16d85eb85b507dea9410433b9196de15a7f8a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Plugins must be installed during the Kolla image build. Installing plugins via the UI causes Grafana backends to get out-of-sync in multi-node deployments. In any deployment, any plugins installed via the UI will be lost if the Grafana container is updated. This change also prevents trying to fetch a plugin verification key from grafana.com, since it is not required. Change-Id: Iddc9b75b5c16bf44b38f2348b46a32b946b2428a Closes-Bug: #2122587 Signed-off-by: Doug Szumski <doug@stackhpc.com>
This commit adds the ability to enable and configure LDAP authentication for Grafana. It introduces a new variable 'grafana_ldap_enabled' and automates the process of copying the 'ldap.toml' configuration file and updating 'grafana.ini'. Change-Id: I1f9de8202629904757840f5b2b5d0b8429e42f96 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
role: proxysql-config Change-Id: I68d86c224be9073caccafa729cf13b3d41690685 Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
Change-Id: If3a5ac62502e14160e0a5e638d3bc1234a201731 Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
Change-Id: I5e4b3740499ddedf43f647ede4d37a619eebe61a Signed-off-by: Bertrand Lanson <bertrand.lanson@infomaniak.com>
When the upstream endpoint uses HTTPS, TLS errors were observed. This fix checks if the upstream endpoint is HTTPS and ensures TLSv1.2 and TLSv1.3 are enabled in the nginx configuration. References: * https://review.opendev.org/c/openstack/skyline-apiserver/+/941715 Closes-Bug: #2091935 Related-Bug: #1951437 Change-Id: I597c8f1f609580cfc8c29efbc79ada312e667441 Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
This patch moves the default Ironic kernel parameters from templates into variables located in the 'Kernel Parameters' section. Existing configurations are supported using existing variables. Default NTP configuration for the Ironic Python Agent (IPA) was also added in this patch. Change-Id: I2ef63233eae661ed056bfa215b2875f44e0b6134 Signed-off-by: Doug Szumski <doug@stackhpc.com>
This patch adds the ability for operators to provide a custom wsrep-notify.sh script to handle Galera cluster events (e.g., node status changes, membership updates). If a script is placed in the custom configuration directory on the control host (/etc/kolla/config/mariadb/wsrep-notify.sh), Kolla Ansible will copy it to the nodes, mount it into the MariaDB container at /usr/local/bin/ and enable 'wsrep_notify_cmd'. This enables integration with external systems like Alertmanager or local logging without hardcoding scripts into the roles. Change-Id: I7887889cb2e4038baeb566884cb847a71b5f99a6 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Fixes CI failure where the valkey exporter group was missing from the generated inventory while valkey was enabled. Change-Id: I1b718b12fe4483a397771426a1c8c1d0f310d22d Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Change-Id: I3e2fcee68efeae8c7ea9428156b63b9a9cfc1be0 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
This is required as per [1]. [1]: https://docs.openstack.org/glance/latest/configuration/configuring.html#configuring-the-cinder-storage-backend Closes-Bug: #2007261 Change-Id: I914ad9d9b76727bc3761bfff0972b37cf31ff088 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
This reverts commit 7aab7e9. Reason for revert: This broke cloudkitty Change-Id: I8735eb5ef07b9a3c7d15ac730a7fccec9ced64e2 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
This feature has been deprecated in mod_auth_openidc since version 2.4.14 and removed in 2.4.16.2/2.4.18.1. Only Ubuntu Noble from currently supported distros has enough old version to support it. Closes-Bug: #2146990 Change-Id: If7d35df7f9f4853d05442d53fa580a34393804cd Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
Recent changes to OpenStack Compute have added a number of new configuration options for SPICE VDI consoles. Additionally, it is not always desirable to enable the HTML5 transcoding proxy for SPICE consoles in Horizon. This patch adds configuration to globals.yml for most of these new options. Specifically: * nova_spice_html5: whether to enable the HTML5 transcoding proxy or not. Defaults to the previous behaviour of enabling the proxy. Notably, nova_spice_require_secure is not exposed here as it implies that qemu is configured to support TLS, and that TLS certificates have been configured in the nova_libvirt container. These changes are large, and are included in a separate patch for clarity. Additionally, OpenStack Compute added these configuration options in 2023.1, and they are exposed as well: * nova_spice_image_compression: "auto_glz" * nova_spice_jpeg_compression: "auto" * nova_spice_zlib_compression: "auto" * nova_spice_playback_compression: true * nova_spice_streaming_mode: "filter" All configuration options and their various values are documented by OpenStack Compute in their documentation. Partial-Bug: #2131793 (spice-direct consoles) Change-Id: I07f6890f1c7c4e543667d3cbd7b3e82bd9ec83e3 Signed-off-by: Michael Still <mikal@stillhq.com>
Change-Id: I8a1f0207a70bcd6a2773d593ff85e84477a8a0cc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
inspector still needs to be handled in G for slurp Change-Id: Ibeefbc4f2818e51b40524a8b5b69118870ec37c6 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
github-actions
bot
added
automated
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
17 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains a snapshot of master from upstream master.