11057 Commits

Author SHA1 Message Date
Takashi Kajinami
55c045539d Drop installation of tox
The comment indicates that tox is used to generate config files, but
it's actually not.

Change-Id: Iddd45e084641bb3711985484e988ed533965f4f4
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2026-02-25 23:40:28 +09:00
Zuul
3bd7a7bde0 Merge "Updated from generate-devstack-plugins-list" 2026-02-18 19:13:11 +00:00
Zuul
c9ce879e9e Merge "Add www_authenticate_uri" 2026-02-18 16:30:55 +00:00
Zuul
6611fc1619 Merge "Create dedicated function to manage only keystoneauth options" 2026-02-18 16:30:50 +00:00
OpenStack Proposal Bot
e9cf8cf3ed Updated from generate-devstack-plugins-list
Change-Id: I440ae4bfbb97202f3b6ddca99d58fb3ff4604352
Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org>
Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-02-18 03:03:08 +00:00
Abhishek Bongale
cc82266a57 Add venv for plugin list generation
Isolate dependencies for generate-devstack-plugins-list.sh by
creating a dedicated Python virtual environment with required
packages. This ensures the script uses the correct version of
dependencies regardless of system Python configuration.

Closes-Bug: #2138869
Change-Id: I8a7e49b0b908aec7c95b7fbfb6c9a16375f267a6
Signed-off-by: Abhishek Bongale <abhishekbongale@outlook.com>
2026-02-17 04:52:56 +00:00
Dr. Jens Harbott
ea0fdd2c80 Drop platform job for Ubuntu Jammy
The job stopped working recently, the reason is unclear, but since Jammy
is no longer included as required platform, let's just stop testing it.

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: I796eddac96313584f4aa5225a9b9803bb2ad19b5
2026-02-16 07:53:08 +01:00
Zuul
91cf65b74d Merge "Add Swift storage policy to extend testing" 2026-02-13 18:14:05 +00:00
Zuul
6090462a38 Merge "Fix S3 API authentication failures" 2026-02-03 21:01:23 +00:00
Zuul
0a017c5bcf Merge "allow get_extra_files to retry on common errors" 2026-02-03 18:52:54 +00:00
Zuul
a3a87d39ee Merge "lib/neutron: read api-paste and rootwrap from $NEUTRON_DIR/etc/neutron" 2026-02-03 18:42:55 +00:00
Zuul
4be4658da9 Merge "Install OVMF package" 2026-02-03 18:42:51 +00:00
Christian Schwede
01f574d501 Fix S3 API authentication failures
This change is required as a follow up to [1] and [2]. Recent versions
of Keystone require auth tokens when accessing the /v3/s3tokens Keystone
endpoint.

[1] https://review.opendev.org/c/openstack/keystone/+/966069
[2] https://review.opendev.org/c/openstack/swift/+/966062

Closes-Bug: #2139405
Signed-off-by: Christian Schwede <cschwede@redhat.com>
Change-Id: I55f6e2c68ae7d76b94919ed47df0a2251287e67b
2026-01-30 11:52:14 +01:00
Zuul
a677748821 Merge "Fix duplicated wget package" 2026-01-25 14:16:51 +00:00
Takashi Kajinami
64dc60a11b Fix duplicated wget package
Trivial-Fix

Change-Id: I061c5dcdd88cb1514b9f4e449d8317e2e1f48b81
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2026-01-25 01:24:37 +09:00
Sean Mooney
20ed3c5f11 Improve OVS/OVN stop robustness for restacking
The stop_ovn function stops services but leaves behind runtime files
and stale configuration that can cause restacking failures. This change
improves robustness by:

- Making _stop_process check is-active in addition to is-enabled, so
  services are stopped even if they are running but not enabled.

- Clearing OVS external-ids before stopping to prevent stale config
  (ovn-remote, ovn-bridge, etc.) from persisting across restacks.

- Cleaning up runtime files (*.sock, *.pid, *.ctl) in both OVS_RUNDIR
  and OVN_RUNDIR after stopping services, as stale sockets can prevent
  ovsdb-server from binding on restart.

- Removing database lock files (.*.db.~lock~) which can block database
  access if services crash or stop uncleanly.

These changes allow stack.sh to run successfully after unstack.sh
without requiring a full clean.sh.

Generated-By: Cursor claude-opus-4.5
Change-Id: I8736f19a8892200948ee74854f99fd99eed5110b
Signed-off-by: Sean Mooney <work@seanmooney.info>
2026-01-22 14:40:48 +00:00
Sean Mooney
5e21304153 Refactor MySQL auth to support restacking
This change refactors the MySQL/MariaDB configuration to:

- Allow both unix_socket and mysql_native_password authentication
  using the MariaDB 'IDENTIFIED VIA ... OR ...' syntax. This enables
  restacking without needing to reset authentication in unstack.sh.

- Add use_mariadb_socket_auth helper variable to simplify the complex
  conditional logic (addresses TODO comment).

- Fix missing DATABASE_USER@'%' creation for modern Debian/Ubuntu
  with MariaDB socket auth.

- Fix inconsistent distro checks that were missing trixie.

- Remove dead Oracle Linux code since it's not in SUPPORTED_DISTROS.
  Oracle Linux is still handled as RHEL-like via is_fedora().

Generated-By: Cursor claude-opus-4.5
Change-Id: I4becbfe6325bcb29deef8e50e9a9f05678f47802
Signed-off-by: Sean Mooney <work@seanmooney.info>
2026-01-22 14:40:48 +00:00
Sean Mooney
2df8cce816 Fix missing service stops in unstack.sh
Several services started by stack.sh were not properly stopped in
unstack.sh, which could leave processes running and prevent clean
restacking:

- tcpdump: lib/tcpdump was not sourced, so stop_tcpdump was unavailable.
  Added source and stop call when tcpdump service is enabled.

- s-container-sync: Swift's container-sync daemon was started via
  run_process but not explicitly stopped. Added stop_process call in
  stop_swift function.

- ldap: The stop_ldap function existed but was never called. Added
  stop call in UNSTACK_ALL section, consistent with mysql/rabbit
  handling.

These fixes ensure all services started by stack.sh are properly
stopped by unstack.sh, allowing clean restacking.

Generated-By: Cursor claude-opus-4.5
Change-Id: I8bcc6fe82264bb35a616dae39f4216ba6200b547
Signed-off-by: Sean Mooney <work@seanmooney.info>
2026-01-22 14:40:47 +00:00
Sean Mooney
efb34cacc7 Fix neutron service detection in unstack.sh
Neutron services (neutron-api, neutron-rpc-server, and
neutron-periodic-workers) were not being stopped during unstack
because they were not detected as enabled in ENABLED_SERVICES.

The root cause was that these services were dynamically enabled
during stack.sh execution via inline enable_service calls in
start_neutron_service_and_check(), but this logic was not
replicated in unstack.sh. When unstack.sh called stop_process
for these services, the is_service_enabled check failed because
the services were not in ENABLED_SERVICES.

This fix creates a shared enable_neutron_server_services()
function that encapsulates the service enabling logic, reading
neutron.conf to determine which services should be enabled
(including conditional RPC worker enablement based on the
rpc_workers configuration). This function is now called from
both the stack.sh path (in start_neutron_service_and_check)
and the unstack.sh path (after loading plugin settings).

This ensures both stack and unstack use identical logic to
determine enabled services, allowing stop_process to properly
detect and stop all neutron server services.

Generated-By: Cursor claude-sonnet-4.5
Change-Id: I6179f3a861401ff12178aaee8b82ba7bf71dd765
Signed-off-by: Sean Mooney <work@seanmooney.info>
2026-01-22 14:40:40 +00:00
Zuul
174bce17f2 Merge "Fix centos/rhel 9/10 dependencies" 2026-01-07 20:15:58 +00:00
Zuul
ce688725c3 Merge "Drop lib/oslo from unstack.sh" 2026-01-07 11:02:34 +00:00
Gregory Thiemonge
92a70ba9dd Fix centos/rhel 9/10 dependencies
An error was introduced in [0], it added an incorrect dependency on
genisoimage for nova, and kept a valid dependency on xorriso in n-cpu.
It breaks centos 10 deployments, the expected behavior is to use xorriso
on modern rhel/centos.

[0] https://review.opendev.org/c/openstack/devstack/+/963799

Change-Id: I0057f934c453ded198f8b5e58f4924260a3d2508
Signed-off-by: Gregory Thiemonge <gthiemon@redhat.com>
2026-01-06 08:54:48 +01:00
Rodolfo Alonso Hernandez
0b200dd617 lib/neutron: read api-paste and rootwrap from $NEUTRON_DIR/etc/neutron
Related patches:
* https://review.opendev.org/c/openstack/devstack/+/961224
* https://review.opendev.org/c/openstack/neutron/+/961130

Signed-off-by: Rodolfo Alonso Hernandez <ralonsoh@redhat.com>
Change-Id: I7cf4483d533f9536d2450088a97e95dfb4f22e3a
2026-01-02 09:41:15 +01:00
Zuul
a05d26ebc4 Merge "Fix ownership of keyring file" 2025-12-19 10:41:00 +00:00
Zuul
feb2482328 Merge "Drop logic for CentOS (Stream) 8" 2025-12-18 10:40:30 +00:00
Zuul
bd160a3d2a Merge "Silence SyntaxWarnings in outfilter.py" 2025-12-17 21:39:24 +00:00
Zuul
e4ac936551 Merge "Quiet regex SyntaxWarning in mlock_report" 2025-12-17 21:39:20 +00:00
Zuul
c50ebf0865 Merge "Enable response validation in Nova" 2025-12-17 21:39:17 +00:00
Zuul
4a18166d9b Merge "[Neutron] Add TARGET_ENABLE_OVN_AGENT variable to enable OVN agent" 2025-12-17 21:39:10 +00:00
Zuul
520e144c1b Merge "Remove option for apache < 2.4" 2025-12-17 20:36:38 +00:00
Zuul
f755f3ffe3 Merge "almalinux: Switch to build OVS from source" 2025-12-17 18:22:31 +00:00
Zuul
5d8e557a8e Merge "lib/neutron: Prepare for move of api-paste, rootwrap conf" 2025-12-17 18:16:37 +00:00
Takashi Kajinami
c11b16b44d Fix ownership of keyring file
The file should be owned by the user(STACK_USER) to run the process.
Note that STACK_USER may not match the current user in case stack.sh is
run by root.

Also we should not assume that the group name always matches the user
name.

Change-Id: Iec300311cab1b1a2fa124879aa3dc6a57a6a706b
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-12-17 16:36:14 +00:00
Michal Nasiadka
fc31d8a37e almalinux: Switch to build OVS from source
Since almalinux-10 label in OpenDev runs on both x86-64-v2 and v3,
and CentOS NFV SIG OVS packages are only build for v3, these jobs
have been only successful when spawned on v3 hardware.

In order to make the job passable on v2 hardware - we should be
building OVS from source.

Rename the jobs to reflect the change

Change-Id: I67b19c18b45af23cda7899f7c2edab21b8ed1ede
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-09 16:55:26 +00:00
Zuul
4220539d47 Merge "Re-add the ironic job in gate" 2025-11-26 20:40:34 +00:00
Zuul
f9448d8978 Merge "Revert "Cap stable/2025.2 network, swift, volume api_extensions for tempest"" 2025-11-25 14:01:51 +00:00
Sean Mooney
c2a5090c2f allow get_extra_files to retry on common errors
This change add 4 new varibles to devstack to allow controlling
the behvaior fo downloadign files via get_extra_files

EXTRA_FILES_RETRY=${EXTRA_FILES_RETRY:-3}
EXTRA_FILES_RETRY_ERRORS=${EXTRA_FILES_RETRY_ERRORS:-"500,503"}
EXTRA_FILES_DOWNLOAD_TIMEOUT=${EXTRA_FILES_DOWNLOAD_TIMEOUT:-2}
EXTRA_FILES_RETRY_TIMEOUT=${EXTRA_FILES_RETRY_TIMEOUT:-10}

get_extra_files checks if a file is precached and downlaods
it if not present

The new fucntionaltiy modifes the wget invocation to retry
up to 3 times if there are dns name issues, connection refused
or the server return a 500 or 503

This change will not retry on 403 or 429 error codes
which are often used to indicate rate limits.

The download timeout remains at 2 seconds but
can now be set if required. A 10 second over all retry
wait timeout is added matching wgets default.

finally the use of sed to strip the file:// prefix
if present is replace with usign bash parmater expansion
echo "${file_url#file://}"

Assisted-By: gemini pro 3
Change-Id: Iedbb8974dce34a3d1c89f2a2561df76e696afae6
Signed-off-by: Sean Mooney <work@seanmooney.info>
2025-11-24 19:15:51 +00:00
Ghanshyam
5d602fef2a Revert "Cap stable/2025.2 network, swift, volume api_extensions for tempest"
This reverts commit 093bc57518.

Reason for revert:

This is done by mistake on master. It needs to be done on stable/2025.2 https://review.opendev.org/c/openstack/devstack/+/968073

Change-Id: I8bd7b732c181f3abb015a57b4445332614f8c6c9
Signed-off-by: Ghanshyam <gmaan@ghanshyammann.com>
2025-11-21 20:40:07 +00:00
Dr. Jens Harbott
e8a11f5070 Drop lib/oslo from unstack.sh
This was missed in [0].

[0] I6a66359c19d0385beafb4c5e57b6ec3cd6d9cc54

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: Idaee45beb63b2badc72c4a70442c5b9aa7fb19fe
2025-11-21 21:01:50 +01:00
Rodolfo Alonso Hernandez
9a0db4f499 [Neutron] Add TARGET_ENABLE_OVN_AGENT variable to enable OVN agent
The new flag ``TARGET_ENABLE_OVN_AGENT`` will be disabled by default.
If enabled:
* The OVN agent will be enabled, regardless of not being configured.
* The OVN Metadata agent will be disabled, regardless of being
  configured.

This variable will be used, initially, in the grenade jobs. It will
be used to test the migration from the OVN Metadata agent to the
OVN agent.

This variable will be removed in 2026.2, along with the OVN Metadata
agent, that is set as deprecated and marked for removal.

Related-Bug: #2112313
Signed-off-by: Rodolfo Alonso Hernandez <ralonsoh@redhat.com>
Change-Id: I8f91e1cb8543da489f495b8cf5196e606a0f5eea
2025-11-18 07:55:53 +00:00
Zuul
f61d747518 Merge "Enable response validation in Keystone" 2025-11-14 14:20:56 +00:00
Zuul
1a059f699d Merge "Add support for trixie and platform job" 2025-11-11 09:57:03 +00:00
Dr. Jens Harbott
f8ebb4939c Add support for trixie and platform job
Dropping libapache2-mod-proxy-uwsgi package for debuntu, which is no
longer needed for Jammy, Bookworm and beyond.

libpcre3-dev is removed form the set of packages pre installed
for debian systems.

This change adds both single and two node nodesets for trixie.

Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Signed-off-by: Sean Mooney <work@seanmooney.info>
Change-Id: Ib056d2ad64b31657ea8ef9359fed78e589b01b88
2025-11-10 17:39:27 +01:00
Zuul
b0016635d5 Merge "Avoid timeout in capture-system-logs due to df command" 2025-11-08 02:34:08 +00:00
Ghanshyam Maan
a041a7fc66 Re-add the ironic job in gate
Ironic job ironic-tempest-bios-ipmi-direct-tinyipa
has been renamed to ironic-tempest-bios-ipmi-direct
- https://review.opendev.org/c/openstack/ironic/+/950192

Zuul did not give any error or warning when this jobs was
ignored to run and it went unnotice until I manually checked
the gate jobs.

Change-Id: I9b6bb94456ccfd17c2e38cdaa772aef372d169d0
Signed-off-by: Ghanshyam Maan <gmaan@ghanshyammann.com>
2025-11-06 18:39:36 +00:00
Stephen Finucane
3566a15b8e Enable response validation in Nova
Per inline description

Change-Id: I85c959461e4e96b69d252e06fc697a1c61488411
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2025-11-06 15:30:39 +00:00
Stephen Finucane
1c86258e6b Enable response validation in Keystone
Unlike other projects, Keystone was previously enabling validation for
all responses. This is a bad idea (TM). Quoting from the Keystone docs
for the new '[api] response_validation' option added in [1]:

  'warn' is the current recommendation for production environments. If
  you find it necessary to enable the 'ignore' option, please report the
  issues you are seeing to the Keystone team so we can improve our
  schemas.

  'error' should not be used in a production environment. This is
  because schema validation happens *after* the response body has been
  generated, meaning any side effects will still happen and the call may
  be non-idempotent despite the user receiving a HTTP 500 error.

DevStack is not used for production environments and is instead the
test harness used for the bulk of our integration testing. We *do* want
failed response validation to result in an error, since it will
highlight bugs in our schemas. Thus, we should override the default
value for this option.

[1] https://review.opendev.org/c/openstack/keystone/+/962851

Change-Id: I9fc2c5dce9511165ad2c1ab18db5eb439d357d9b
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
Related-bug: #2126676
2025-11-06 15:30:35 +00:00
Takashi Kajinami
df74bcda89 Install OVMF package
OVMF package is required to enable UEFI boot support.

Change-Id: Ib1c3ab57740488a3ab8650ef033e1e6ec398f108
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-11-06 13:55:04 +09:00
Zuul
b0146a2d97 Merge "Remove use of pkg_resources" 2025-11-04 14:31:22 +00:00
Zuul
55f4dab4c6 Merge "Add AlmaLinux 10 platform job" 2025-11-03 20:42:54 +00:00