- Sep 24, 2020
-
-
James Kirsch authored
This patch introduces an optional backend encryption for the Ironic API service. When used in conjunction with enabling TLS for service API endpoints, network communcation will be encrypted end to end, from client through HAProxy to the Ironic service. Change-Id: I9edf7545c174ca8839ceaef877bb09f49ef2b451 Partially-Implements: blueprint add-ssl-internal-network
-
- Sep 10, 2020
-
-
Pierre Riteau authored
This reverts commit 316b0496, because ironic-inspector is not ready to use WSGI. It would need to be split into two separate containers, one running ironic-inspector-api-wsgi and another running ironic-inspector-conductor. Change-Id: I7e6c59dc8ad4fdee0cc6d96313fe66bc1d001bf7
-
Radosław Piliszek authored
Per the recent Kayobe brekage due to TLS support in Ironic [1], let's test Ironic Inspector API as well. [1] https://review.opendev.org/750804 Change-Id: I7ccf0c4286f8907bc2fa2eabc41ec2876c9815a9
-
Pierre Riteau authored
Change-Id: Ia4626479e092be8b033bcd4e75e78a33167423d3
-
zhoulinhui authored
requirements.txt is unnecessary when run tox -e releasenotes, releasenotes relative stuffs is in doc/requirements.txt, this ps to remove the requirements.txt from tox.ini and reuse [docs] deps Change-Id: Ia6c51f9ffe1257f16e9bd55fe21cc832b634cbf3
-
Radosław Piliszek authored
Change-Id: I5609812d4f92d88b04bc887886d1ba08893505d9 Story: 2007865 Task: 40199 Closes-Bug: #1886298
-
- Sep 09, 2020
- Sep 08, 2020
-
-
Zuul authored
-
Zuul authored
-
Radosław Piliszek authored
This is confusing as it is not meant to be used by users. Also, various tools show duplicated matches due to both locations containing the exact same content. Change-Id: I2debe121f64954e57788270d3258775f29f1cbb0
-
- Sep 07, 2020
-
-
Zuul authored
-
Michal Nasiadka authored
As per [1] and [2] - it solves a problem, where neutron-ovn-metadata-agent will spawn high number of workers (defaults to half number of CPUs). [1]: http://lists.openstack.org/pipermail/openstack-discuss/2020-September/016960.html [2]: https://bugs.launchpad.net/neutron/+bug/1893656 Change-Id: Id69f9399fe76ff7c4e2e17b5ab5ec7df1a01c5c9
-
- Sep 03, 2020
-
-
likui authored
The Python 2.7 Support has been dropped since Ussuri. Change-Id: I9927a83748a4b13c57bcadd081c60ea9609ced55
-
- Sep 02, 2020
-
-
Zuul authored
-
Mark Goddard authored
The variable was documented as database_username, but should be database_user. Change-Id: Ia1fd8f9a9336c26520041fa2138c763a8c382bca
-
- Sep 01, 2020
-
-
Pierre Riteau authored
The Prometheus OpenStack exporter was needlessly configured to use the prometheus Docker volume and change permissions of /data, which does not exist in the container image. This must have been copy-pasted from existing Prometheus code. Change-Id: I96017c17e68ca7a00a2d5ac41f2f43ef87694514
-
- Aug 31, 2020
-
-
Zuul authored
-
- Aug 29, 2020
-
-
James Kirsch authored
This patch introduces an optional backend encryption for the Ironic API and Ironic Inspector service. When used in conjunction with enabling TLS for service API endpoints, network communcation will be encrypted end to end, from client through HAProxy to the Ironic service. Change-Id: I3e82c8ec112e53f907e89fea0c8c849072dcf957 Partially-Implements: blueprint add-ssl-internal-network Depends-On: https://review.opendev.org/#/c/742776/
-
- Aug 28, 2020
-
-
Mark Goddard authored
Including tasks has a performance penalty when compared with importing tasks. If the include has a condition associated with it, then the overhead of the include may be lower than the overhead of skipping all imported tasks. In the case of the register.yml and bootstrap.yml includes, all of the tasks in the included file use run_once: True. The run_once flag improves performance at scale drastically, so importing these tasks unconditionally will have a lower overhead than a conditional include task. It therefore makes sense to switch to use import_tasks there. See [1] for benchmarks of run_once. [1] https://github.com/stackhpc/ansible-scaling/blob/master/doc/run-once.md Change-Id: Ic67631ca3ea3fb2081a6f8978e85b1522522d40d Partially-Implements: blueprint performance-improvements
-
Mark Goddard authored
Including tasks has a performance penalty when compared with importing tasks. The nova-cell role uses include_tasks twice when generating certificates and keys for libvirt TLS. While a dynamic include makes sense here for a non-default feature, we can use one include rather than two with the same effect. Since this task runs against compute nodes the overhead is significant. See [1] for benchmarks of include_tasks and import_tasks. [1] https://github.com/stackhpc/ansible-scaling/blob/master/doc/include-and-import.md Partially-Implements: blueprint performance-improvements Change-Id: Ic687d2f7d4625aede386e576ebb174da72142756
-
Mark Goddard authored
Including tasks has a performance penalty when compared with importing tasks. If the include has a condition associated with it, then the overhead of the include may be lower than the overhead of skipping all imported tasks. For unconditionally included tasks, switching to import_tasks provides a clear benefit. Benchmarking of include vs. import is available at [1]. This change switches from include_tasks to import_tasks where there is no condition applied to the include. [1] https://github.com/stackhpc/ansible-scaling/blob/master/doc/include-and-import.md#task-include-and-import Partially-Implements: blueprint performance-improvements Change-Id: Ia45af4a198e422773d9f009c7f7b2e32ce9e3b97
-
Zuul authored
-
Michal Nasiadka authored
Change-Id: I1318a5ea7f746012cc3055d4c03fd0508df921ff
-
- Aug 26, 2020
- Aug 25, 2020
-
-
Mark Goddard authored
We no longer support any OS distros that use /etc/modules. Change-Id: Ic41cad64ed0479a0cef7321aeed191fe06a30e8f
-
Zuul authored
-
Zuul authored
-
wu.chunyang authored
when use multiple regions, those tasks always get a wrong endpoint. Change-Id: Ie164687b2ffd80cedf8a00e7f705b73fccd416e2
-
- Aug 24, 2020
-
-
Zuul authored
-
Nick Jones authored
Enabling both l2_population and arp_responder for LinuxBridge can cause problems in some configurations [0]. This commit removes the explicit 'true', reverting it to the default which is 'False'. Closes-Bug: #1892776 [0] https://bugs.launchpad.net/neutron/+bug/1661717 Change-Id: Ia9445a651fd7a082835a858964bcb9e8e325338d Signed-off-by:
Nick Jones <nick@dischord.org>
-
Zuul authored
-
Zuul authored
-
Zuul authored
-
Zuul authored
-
Zuul authored
-
Zuul authored
-