- Aug 13, 2020
-
-
James Kirsch authored
This patch introduces a global keep alive timeout value for services that leverage httpd + wsgi to handle http/https requests. The default value is one minute. Change-Id: Icf7cb0baf86b428a60a7e9bbed642999711865cd Partially-Implements: blueprint add-ssl-internal-network
-
- Aug 05, 2020
- Aug 04, 2020
-
-
Zuul authored
-
James Kirsch authored
Updated TLS documentation to reflect new features and configuration options added in Ussuri. Change-Id: I74550eaf394287b14fc521293cc4b5ea8074192c Partially-Implements: blueprint add-ssl-internal-network
-
Radosław Piliszek authored
These two roles were missing 'stop' and 'deploy-containers', respectively. Change-Id: Iaf434be9baf1973323bb177fad799aea39210fba
-
Zuul authored
-
Zuul authored
-
- Aug 03, 2020
-
-
Zuul authored
-
Zuul authored
-
Mark Goddard authored
Some plays were not applied to all groups referenced by the services they deploy. In most cases this works fine, but if the default inventory is modified this may cause problems where containers are not deployed to hosts in the missing groups, if they are not a member of other groups that the play is targeted to. This change syncs up the play hosts for all services. Closes-Bug: #1889387 Change-Id: I6b92d8e53a29b06a065e0611840140d09c8a6695
-
- Aug 01, 2020
-
-
Zuul authored
-
- Jul 31, 2020
- Jul 30, 2020
-
-
Zuul authored
-
Radosław Piliszek authored
Masakari was introduced parallelly to deploy-containers action and so we missed to add this functionality to it. Change-Id: Ibef198d20d481bc92b38af786cdf0292b246bb12 Closes-Bug: #1889611
-
Nick Jones authored
With an incorrectly named section, whatever's defined in here is actually ignored which can result in unexpected behaviour. Closes-Bug: 1889455 Change-Id: Ib2e2b53e9a3c0e62a2e997881c0cd1f92acfb39c Signed-off-by:
Nick Jones <nick@dischord.org>
-
Michal Nasiadka authored
Change-Id: I8aa02ac2caf320934be5ca439b9b9a24ac6aa573
-
- Jul 29, 2020
-
-
Marcin Juszkiewicz authored
Change-Id: I96c477063338c48b033694dd85482a8723fd498b
-
likui authored
Option "network_label_regex" from group "DEFAULT" is deprecated for removal. Change-Id: I8aab2ca322159e61e4cbe9a5b30825a71a991e7e
-
- Jul 28, 2020
-
-
Radosław Piliszek authored
If not running containerised chrony, we need to check that host has its own means of system clock synchronization. Change-Id: I31b3e9ed625d63a4bf82c674593522268c20ec4c Partial-Bug: #1885689
-
Mark Goddard authored
Including tasks has a performance penalty when compared with importing tasks. If the include has a condition associated with it, then the overhead of the include may be lower than the overhead of skipping all imported tasks. In the case of the check-containers.yml include, the included file only has a single task, so the overhead of skipping this task will not be greater than the overhead of the task import. It therefore makes sense to switch to use import_tasks there. Partially-Implements: blueprint performance-improvements Change-Id: I65d911670649960708b9f6a4c110d1a7df1ad8f7
-
Zuul authored
-
Zuul authored
-
- Jul 27, 2020
-
-
Radosław Piliszek authored
Modern Ansible handles this just fine. Change-Id: Iea4d0499b92e2449ef8bc01651af6d3548ceab20
-
Radosław Piliszek authored
These are noop after Hyper-V support was removed. Change-Id: Ib451b154893e5cedc366aed83c35f48d92c7ab82
-
Justinas Balciunas authored
This change disables services in the Prometheus openstack-exporter if they are not enabled in the deployment. Such behaviour allows to avoid warnings and errors in the log files and keep the log file contents clean and informative. Change-Id: I4dcac976620a5f451e3d273183199aefe400994a
-
Zuul authored
-
Zuul authored
-
Zuul authored
-
Zuul authored
-
Mark Goddard authored
Moved the TLS documentation from "advanced-configuration" doc to its own TLS document. This is in preparation for improving it. Change-Id: I4c83f1810ef1222aaa3560174c1ba39328853c4e Co-Authored-By:
James Kirsch <generalfuzz@gmail.com>
-
Christian Berendt authored
Change-Id: I2e22ec47f644de2f1509a0111c9e1fffe8da0a1a
-
Dincer Celik authored
Docker is manipulating iptables rules by default to provide network isolation, and this might cause problems if the host already has an iptables-based firewall. This change introduces docker_disable_default_iptables_rules to disable the iptables manipulation by putting "iptables: false" [1] to daemon.json For better defaults, this feature will be enabled by default in Victoria. [1] https://docs.docker.com/network/iptables/ Closes-Bug: #1849275 Change-Id: I165199fc98fb98f227f2a20284e1bab03ef65b5b
-
Doug Szumski authored
This fixes an issue where multiple Grafana instances would race to bootstrap the Grafana DB. The following changes are made: - Only start additional Grafana instances after the DB has been configured. - During upgrade, don't allow old instances to run with an upgraded DB schema. Change-Id: I3e0e077ba6a6f43667df042eb593107418a06c39 Closes-Bug: #1888681
-
Doug Szumski authored
This ensures that when using automatic Kafka topic creation, with more than one node in the Kafka cluster, all partitions in the topic are automatically replicated. When a single node goes down in a >=3 node cluster, these topics will continue to accept writes providing there are at least two insync replicas. In a two node cluster, no failures are tolerated. In a three node cluster, only a single node failure is tolerated. In a larger cluster the configuration may need manual tuning. This configuration follows advice given here: [1] https://docs.cloudera.com/documentation/kafka/1-2-x/topics/kafka_ha.html#xd_583c10bfdbd326ba-590cb1d1-149e9ca9886--6fec__section_d2t_ff2_lq Closes-Bug: #1888522 Change-Id: I7d38c6ccb22061aa88d9ac6e2e25c3e095fdb8c3
-
Michal Nasiadka authored
fluentd logs currently to stdout, which is known to produce big docker logs in /var/lib/docker. This change makes fluentd to log to /var/log/kolla/fluentd. Closes-Bug: #1888852 Change-Id: I8fe0e54cb764a26d26c6196cef68aadc6fd57b90
-
- Jul 25, 2020
-
-
Zuul authored
-
- Jul 24, 2020
-
-
Mark Goddard authored
This reverts commit 8fc86893. It appears that it is still necessary to wait for ironic to be up, otherwise inspector may fail to start: The baremetal service for 192.0.2.10:None exists but does not have any supported versions. Change-Id: Ibc8314c91113618ce9e92b8933a63eba3cf3bbe1
-
Zuul authored
-