openstack/openstack-ansible-os_cloudkitty - openstack-ansible-os_cloudkitty - OpenDev: Free Software Needs Free Tools

<service>-config tags are quite broad and have a long execution
time. Where you only need to modify a service's '.conf' file and
similar it is useful to have a quicker method to do so.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/920058
Change-Id: Iae6fb286658fc924796a29fb08979cfe9113283b

Update the zed release notes configuration to build from
unmaintained/zed.
Change-Id: I0626c23aaa23e2d446db2b0a0cfa7c38dd783738

When rabbit_stream_fanout is set to true, rabbit_qos_prefetch_count
should be set to a positive value.
This also fixes defenition of transient_quorum_queue as if
rabbit_stream_fanout is enabled - transient_quorum_queue should be also
enabled. [1]
[1] https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/_drivers/impl_rabbit.py#L726-L736
Change-Id: I2c25783d4c65aa04ad9305adf2cbb6028e1dab57

During last release cycle oslo.messaging has landed [1] series of extremely
useful changes that are designed to implement modern messaging
techniques for rabbitmq quorum queues.
Since these changes are breaking and require queues being re-created,
it makes total sense to align these with migration to quorum queues by default.
[1] https://review.opendev.org/q/topic:%22bug-2031497%22
Change-Id: I520ae8cf928404a9ed077d6e6812c4f13d0102bb

In order to be able to globally enable notification reporting for all services,
without an need to have ceilometer deployed or bunch of overrides for each
service, we add `oslomsg_notify_enabled` variable that aims to control
behaviour of enabled notifications.
Presence of ceilometer is still respected by default and being referenced.
Potential usecase are various billing panels that do rely on notifications
but do not require presence of Ceilometer.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/914144
Change-Id: I60746cedeec323bcede3bb5aa4968f0388e262bb

In order to allow definition of policies per service, we need to add variables
to service roles, that will be passed to openstack.osa.mq_setup.
Currently this can be handled by leveraging group_vars and overriding `oslomsg_rpc_policies` as a whole, but it's not obvious and
can be non-trivial for some groups which are co-locating multiple services
or in case of metal deployments.
Change-Id: I147c08178ed359f9e445ee41fb6c368706c94800

Cloudkitty has released it's v2 API couple of cycles ago with [1]. High time to
enable it as well.
[1] https://review.opendev.org/c/openstack/cloudkitty/+/832923
Change-Id: I11838780e84d6e721033b5c7aa77c8a0ca8ea121

This change implements and enables by default quorum support
for rabbitmq as well as providing default variables to globally tune
it's behaviour.
In order to ensure upgrade path and ability to switch back to HA queues
we change vhost names with removing leading `/`, as enabling quorum
requires to remove exchange which is tricky thing to do with running
services.
Change-Id: I722aefb5290a68311faf1d44c279151e8492466a

Change-Id: I64c16cfa138b6ef4a20fdfa16ca0c6bb73d345fb

With update of ansible-lint to version >=6.0.0 a lot of new
linters were added, that enabled by default. In order to comply
with linter rules we're applying changes to the role.
With that we also update metdata to reflect current state.
Depends-On: https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/888223
Change-Id: Ib51c7ec8d83ffe82c98d1c8d3200ce4510775895

By overriding the variable `cloudkitty_backend_ssl: True` HTTPS will
be enabled, disabling HTTP support on the cloudkitty backend api.
The ansible-role-pki is used to generate the required TLS
certificates if this functionality is enabled.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/879085
Change-Id: I0566028b4737306954b544d040b52cee1fddaa1f

At the moment we don't restart services if systemd unit file is changed.
We knowingly prevent systemd_service role handlers to execute
by providing `state: started` as otherwise service will be restarted twice.
With that now we ensure that role handlers will also listen for systemd
unit changes.
Change-Id: I5d491104173dc0217fac62618c13e8ac5a57233b

Add file to the reno documentation build to show release notes for
stable/zed.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.
Sem-Ver: feature
Change-Id: Ie13e1d8fee402e06ee57311c1e360324db7ea38f

With ansible-core 2.13 it tries to substitude package resolution in apt
module.
However git-core is used in Debian as transitional name, but ansible
tries to select it and provide version, which is not correct behaviour.
But since git-core is not really valid anyway, we just replace it
to workaround ansible's imperfectness.
Change-Id: Ie4b8ce21c101551505eec1529235a57e9176d3c9

This line snuck in with I81413b5ff415ee3d0b5a33189335591146e8f698
probably to bring it in line with other OSA roles, but should already
be covered by the distribution_major_version line above.
Change-Id: I8ec073f36556c5d7da2be7aae23a192266d39a5d

Implement support for service_tokens. For that we convert
role_name to be a list along with renaming corresponding variable.
Additionally service_type is defined now for keystone_authtoken which
enables to validate tokens with restricted access rules
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690
Change-Id: Icb1de8c7e0a5196a4df457a5d4a3ca524d4622d0

With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.
Change-Id: I92ad4a90f367fe95899973912edb222e84903adc

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/839989
Change-Id: I19d8215e653d42698806c645ac4ae7747c4ea35e

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/839989
Change-Id: I7e79f669d4b65ce067c57bda06e1887c1125ee4e

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/839989
Change-Id: Ie0e94e91fb0547b3d5d90e405956cb0ef59312e3

Use a first_found lookup instead of a with_first_found loop so that
the 'paths' parameter can be used.
This ensures that only vars from the role are included, and not vars
from a parent calling role. This can happen when a parent role has
a higher priority vars file available for inclusion than the role
it calls.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/839989
Change-Id: I81413b5ff415ee3d0b5a33189335591146e8f698

Change-Id: I6c3de8e6b9ac1ef9a7deaabd0fa4decb085738d1

Change-Id: I258b21915478d4148a3db92c77a483d87a70c6a6

Change-Id: I90d66d04f1b91755b4e042bd0bbb999b2ef658ed

- Implemented new variable ``connection_recycle_time`` responsible for SQLAlchemy's connection recycling
- Set new default values for db pooling variables which are inherited from the global ones.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819424
Change-Id: I4ae28b356a404c1e76e5cff986d4fe0172b564f2

Since we still use ceph-ansible that has their own implementation of
config_template module it's worth to use mentioned module as a collection
explicitly.
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/819814
Change-Id: I895d7342cea3c7c74732138a87d0b1aee61c2345

With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.
Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.
[1] 78f0cf99e5/pymysql/connections.py (L267)
Change-Id: I756a6cdaa4b619671da73c65761c796a0b2ade81

The patch bumps min version of tox to 3.18.0 in order to
replace tox's whitelist_externals by allowlist_externals option:
https://github.com/tox-dev/tox/blob/master/docs/changelog.rst#v3180-2020年07月23日
Change-Id: I5b4df1b67d4adab6c3cfcb1eb148c19b5abe251a

The Cloudkitty role has been lacking some attention for a while
causing some of the configuration and examples outdated.
Now that Cloudkitty playbook and dashboard can be installed using
OSA without running any additional playbooks from this repository
i have removed those from here.
Change-Id: I0fe96c318273f0016d93cf043bda74feb11c63f8

This playbook is also used by integrated ansible-lint check to verify
role syntax.
Change-Id: Ia53b316f9449af44d9218526c8f61af7d83775c7

Change-Id: If8362185261aefa741f9c21c57b3dfe258d8543d

Setuptools v54.1.0 introduces a warning that the use of dash-separated
options in 'setup.cfg' will not be supported in a future version [1].
Get ahead of the issue by replacing the dashes with underscores. Without
this, we see 'UserWarning' messages like the following on new enough
versions of setuptools:
 UserWarning: Usage of dash-separated 'description-file' will not be
 supported in future versions. Please use the underscore name
 'description_file' instead
[1] https://github.com/pypa/setuptools/commit/a2e9ae4cb
Change-Id: I002be9d2c1f5dbf8d3be07850f8e01e69888236a

As per the community goal of migrating the policy file
the format from JSON to YAML[1], we need to replace policy.json to
policy.yaml and remove deprecated policy.json.
[1]https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html
Change-Id: I5714f88ab0df41adbac52ff65f16f37e69bafb79

Change-Id: I57d383d1d0ea1dc9fcc73ec3f8c41725fb24814b

In order to do a more complete verification of any patches,
we add a full uncontainerised OpenStack deployment to the
functional testing using the integrated repo.
This replaces the previous role functional test mechanism.
Depends-On: Id191e07eab2bef84dad30e55f59fd914b0358bfe
Change-Id: Iec5c24d38f492af064968b2b621bba8b507d56f5

Previous to this change the uwsgi config had virtualenv include /bin, leading to $venv/bin/bin in execution
Change-Id: I4d2b60b655e5688359ed7b65569ec5500c542c0f

Change-Id: I2459bbefed75133e3acfff62efb1174903e7c42e

See https://github.com/ansible/ansible/issues/73654
Change-Id: Ia088d1b4074e3bbcd3054f5be00b39429437750d

Change-Id: I77f84cb7ba7e8f201aba37ca0e01e098731c2228

All references to Gentoo, SUSE, Debian stretch and Centos-7 are removed.
Conditional tasks, ternary operators and variables are simplified where possible
OS specific variables files are generalised where possible
Change-Id: Ifd45cedcf98487b1a8b5531962529f0784f3065e