Skip to content
Snippets Groups Projects
  1. Nov 05, 2024
    • Matt Crees's avatar
      Fix cinder etcd3gw backend_url · 81310d40
      Matt Crees authored
      Multiple parameters in the URL should be prefixed with an ampersand.
      
      Closes-Bug: #2085908
      Change-Id: Ia9e43f7043c0757e11e1924c3df9fe16c037d484
      (cherry picked from commit d808d716)
      81310d40
  2. Oct 25, 2024
  3. Sep 20, 2024
  4. Aug 20, 2024
  5. Aug 12, 2024
  6. Feb 21, 2024
  7. Feb 15, 2024
  8. Nov 30, 2023
  9. Nov 29, 2023
  10. Oct 25, 2023
  11. Jun 14, 2023
    • Michal Arbet's avatar
      Add support for multiple ceph files · fdf2385f
      Michal Arbet authored
      This patch is adding a feature for an option to copy different
      ceph configuration files and corresponding keyrings for cinder,
      glance, manila, gnocchi and nova services.
      
      This is especially useful when the deployment uses availability
      zones as below example.
      
        - Individual compute can read/write to individual ceph
          cluster in same AZ.
        - Cinder can write to several ceph clusters in several AZs.
        - Glance can use multistore and upload images to
          several ceph clusters in several AZs at once.
      
      Change-Id: Ie4d8ab5a3df748137835cae1c943b9180cd10eb1
      fdf2385f
  12. May 16, 2023
    • Sean Mooney's avatar
      always add service_user section to nova.conf · ddadaa28
      Sean Mooney authored
      
      As of I3629b84d3255a8fe9d8a7cea8c6131d7c40899e8 nova
      now requires the service_user section to be configured
      to address CVE-2023-2088. This change adds
      the service user section to the nova.conf template in
      the nova and nova-cell roles.
      
      Related-Bug: #2004555
      Signed-off-by: default avatarSven Kieske <kieske@osism.tech>
      Change-Id: I2189dafca070accfd8efcd4b8cc4221c6decdc9f
      (cherry picked from commit a77ea13ef1991543df29b7eea14b1f91ef26f858)
      (cherry picked from commit 03c12abbcc107bfec451f4558bc97d14facae01c)
      (cherry picked from commit cb105dc293ff1cdb11ab63fa3e3bf39fd17e0ee0)
      (cherry picked from commit efe6650d09441b02cf93738a94a59723d84c5b19)
      ddadaa28
  13. Mar 02, 2023
  14. Feb 14, 2023
  15. Jan 13, 2023
    • Matt Crees's avatar
      Add a flag to handle RabbitMQ high availability · 09df6fc1
      Matt Crees authored
      A combination of durable queues and classic queue mirroring can be used
      to provide high availability of RabbitMQ. However, these options should
      only be used together, otherwise the system will become unstable. Using
      the flag ``om_enable_rabbitmq_high_availability`` will either enable
      both options at once, or neither of them.
      
      There are some queues that should not be mirrored:
      * ``reply`` queues (these have a single consumer and TTL policy)
      * ``fanout`` queues (these have a TTL policy)
      * ``amq`` queues (these are auto-delete queues, with a single consumer)
      An exclusionary pattern is used in the classic mirroring policy. This
      pattern is ``^(?!(amq\\.)|(.*_fanout_)|(reply_)).*``
      
      Change-Id: I51c8023b260eb40b2eaa91bd276b46890c215c25
      09df6fc1
  16. Jan 05, 2023
  17. Nov 07, 2022
    • Simon Dodsley's avatar
      Add NVMe-RoCE Cinder driver support for Pure Storage · 716899ff
      Simon Dodsley authored
      From OpenStack Zed the Pure Storage Cinder driver supports
      NVMe-RoCE as a dataplane protocol. This patch adds support
      for this new driver type.
      
      Also amend a couple of documentation formatting typos.
      
      Change-Id: Ic1eed7d19e9b583e22419625c92ac3507ea4614d
      716899ff
  18. Oct 07, 2022
  19. Oct 03, 2022
  20. Aug 17, 2022
    • Will Szumski's avatar
      Introduce variables for cinder backend names · 0fe8010c
      Will Szumski authored
      This allows you to use a more descriptive name if you desire.
      For example, when using cinder with multiple ceph backends, rbd-1,
      doesn't convey much information. You could include location, disk
      technology, etc. in the name.
      
      Change-Id: Icfdc2e5726fec8b645d6c2c63391a13c31f2ce9a
      0fe8010c
  21. Jul 27, 2022
  22. Jul 21, 2022
  23. Jun 09, 2022
    • Will Szumski's avatar
      Add keystone_authtoken.service_type · 49006e56
      Will Szumski authored
      Fixes an issue where access rules failed to validate:
      
          Cannot validate request with restricted access rules. Set
          service_type in [keystone_authtoken] to allow access rule validation
      
      I've used the values from the endpoint. This was mostly a straight
      forward copy and paste, except:
      
      - versioned endpoints e.g cinderv3 where I stripped the version
      - monasca has multiple endpoints associated with a single service. For
        this, I concatenated logging and monitoring to be logging-monitoring.
      
      Closes-Bug: #1965111
      Change-Id: Ic4b3ab60abad8c3dd96cd4923a67f2a8f9d195d7
      49006e56
  24. Jun 02, 2022
    • Michal Arbet's avatar
      Remove configuration related to api_workers · eafd3a59
      Michal Arbet authored
      This patch is removing api related configuration
      from service's config files as we are using
      apache mod_wsgi and this configuration is not
      used.
      
      Change-Id: I69a1542a6f24214fbf6e703782aefb566de4fb26
      eafd3a59
  25. May 28, 2022
    • Radosław Piliszek's avatar
      Do not use keystone_admin_url et al · 7ca9349b
      Radosław Piliszek authored
      Following up on [1].
      The 3 variables are only introducing noise after we removed
      the reliance on Keystone's admin port.
      
      [1] I5099b08953789b280c915a6b7a22bdd4e3404076
      
      Change-Id: I3f9dab93042799eda9174257e604fd1844684c1c
      7ca9349b
  26. May 13, 2022
    • Simon Dodsley's avatar
      Add support for Pure Storage FlashArray backend to Cinder · f088b799
      Simon Dodsley authored
      Add an enable_cinder_backend_pure_iscsi and
      enable_cinder_backend_pure_fc options to etc/kolla/globals.yml
      to enable use of the FlashArray backend.
      Update the documentation to include a section on configuring
      Cinder with the FlashArray.
      
      Implements: blueprint pure-cinder-driver
      Change-Id: I464733f1322237321ed1ffff8636cf30bd1cbb38
      f088b799
  27. Feb 18, 2022
    • alecorps's avatar
      Add support for VMware First Class Disk (FCD) · 812e03f7
      alecorps authored
      An FCD, also known as an Improved Virtual Disk (IVD) or
      Managed Virtual Disk, is a named virtual disk independent of
      a virtual machine. Using FCDs for Cinder volumes eliminates
      the need for shadow virtual machines.
      This patch adds Kolla support.
      
      Change-Id: Ic0b66269e6d32762e786c95cf6da78cb201d2765
      812e03f7
  28. Jan 04, 2022
  29. Jun 22, 2021
  30. Jun 21, 2021
  31. Feb 24, 2021
    • Doug Szumski's avatar
      Fix Cinder log parsing · fa5511c7
      Doug Szumski authored
      
      The Cinder API log is currently written to a file called
      cinder-wsgi.log, and the WSGI logs to cinder-api.log. Fluentd
      then tries to parse the WSGI log as an OpenStack log which
      results in 'got incomplete line' errors and prevents proper
      ingestion of these logs.
      
      Co-Authored-By: default avataryaoning <yaoning@unitedstack.com>
      Closes-Bug: 1916752
      Change-Id: I3296dcc4780160cbf88bd18285571276f58bb249
      fa5511c7
  32. Sep 22, 2020
    • Pierre Riteau's avatar
      Reduce the use of SQLAlchemy connection pooling · c8177202
      Pierre Riteau authored
      When the internal VIP is moved in the event of a failure of the active
      controller, OpenStack services can become unresponsive as they try to
      talk with MariaDB using connections from the SQLAlchemy pool.
      
      It has been argued that OpenStack doesn't really need to use connection
      pooling with MariaDB [1]. This commit reduces the use of connection
      pooling via two configuration options:
      
      - max_pool_size is set to 1 to allow only a single connection in the
        pool (it is not possible to disable connection pooling entirely via
        oslo.db, and max_pool_size = 0 means unlimited pool size)
      - lower connection_recycle_time from the default of one hour to 10
        seconds, which means the single connection in the pool will be
        recreated regularly
      
      These settings have shown better reactivity of the system in the event
      of a failover.
      
      [1] http://lists.openstack.org/pipermail/openstack-dev/2015-April/061808.html
      
      Change-Id: Ib6a62d4428db9b95569314084090472870417f3d
      Closes-Bug: #1896635
      c8177202
  33. Sep 17, 2020
    • Mark Goddard's avatar
      Support TLS encryption of RabbitMQ client-server traffic · 761ea9a3
      Mark Goddard authored
      This change adds support for encryption of communication between
      OpenStack services and RabbitMQ. Server certificates are supported, but
      currently client certificates are not.
      
      The kolla-ansible certificates command has been updated to support
      generating certificates for RabbitMQ for development and testing.
      
      RabbitMQ TLS is enabled in the all-in-one source CI jobs, or when
      The Zuul 'tls_enabled' variable is true.
      
      Change-Id: I4f1d04150fb2b5af085b762890092f87ae6076b5
      Implements: blueprint message-queue-ssl-support
      761ea9a3
  34. Aug 19, 2020
    • Rafael Weingärtner's avatar
      Standardize use and construction of endpoint URLs · f425c067
      Rafael Weingärtner authored
      
      The goal for this push request is to normalize the construction and use
       of internal, external, and admin URLs. While extending Kolla-ansible
       to enable a more flexible method to manage external URLs, we noticed
       that the same URL was constructed multiple times in different parts
       of the code. This can make it difficult for people that want to work
       with these URLs and create inconsistencies in a large code base with
       time. Therefore, we are proposing here the use of
       "single Kolla-ansible variable" per endpoint URL, which facilitates
       for people that are interested in overriding/extending these URLs.
      
      As an example, we extended Kolla-ansible to facilitate the "override"
      of public (external) URLs with the following standard
      "<component/serviceName>.<companyBaseUrl>".
      Therefore, the "NAT/redirect" in the SSL termination system (HAproxy,
      HTTPD or some other) is done via the service name, and not by the port.
      This allows operators to easily and automatically create more friendly
       URL names. To develop this feature, we first applied this patch that
       we are sending now to the community. We did that to reduce the surface
        of changes in Kolla-ansible.
      
      Another example is the integration of Kolla-ansible and Consul, which
      we also implemented internally, and also requires URLs changes.
      Therefore, this PR is essential to reduce code duplicity, and to
      facility users/developers to work/customize the services URLs.
      
      Change-Id: I73d483e01476e779a5155b2e18dd5ea25f514e93
      Signed-off-by: default avatarRafael Weingärtner <rafael@apache.org>
      f425c067
  35. Jul 09, 2020
  36. Jun 27, 2020
    • James Kirsch's avatar
      Fix etcd protocol configuration · a1584322
      James Kirsch authored
      The etcd service protocol is currently configured with internal_protocol.
      The etcd service is not load balanced by a HAProxy container, so
      there is no proxy layer to do TLS termination when internal_protocol
      is configured to be "https".
      
      Until the etcd service is configured to deploy with native TLS
      termination, the etcd uses should be independent of
      internal_protocol, and "http" by default.
      
      Change-Id: I730c02331514244e44004aa06e9399c01264c65d
      Closes-Bug: 1884137
      a1584322
  37. Jun 11, 2020
    • Michal Arbet's avatar
      Fix group_vars and cinder template per documentation · f1addfa3
      Michal Arbet authored
      When installing kolla with external ceph, ceph_cinder_user
      var has to be set per documentation instead of ceph_cinder_volume_user.
      This value is also rendered in example etc/kolla/globals.yml file.
      
      This patch is fixing this bug or, let's say typo.
      
      Change-Id: Id82b07867f4bc0e5d5e56363f0122014df6892bc
      f1addfa3
  38. Apr 03, 2020
  39. Mar 26, 2020
Loading