Skip to content

Synchronise master with upstream#863

Merged
Alex-Welsh merged 14 commits intostackhpc/masterfrom
upstream/master-2026-04-13
Apr 13, 2026
Merged

Synchronise master with upstream#863
Alex-Welsh merged 14 commits intostackhpc/masterfrom
upstream/master-2026-04-13

Conversation

@github-actions
Copy link
Copy Markdown

This PR contains a snapshot of master from upstream master.

mnasiadka and others added 14 commits April 3, 2026 13:19
Change-Id: I11167abf2bfab89f199b93abda80a01cc31a6731
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Change-Id: I15eb7f618909d8c55507a66b2c941bd15fa36cd8
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Some tasks have been mistakenly marked as to be removed
in Gazpacho instead of after Gazpacho/in Hibiscus.

Change-Id: I6b6f98371546ab4fa316c53effb2be1954c3a84b
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
The option OIDCTokenBindingPolicy was deleted from mod_auth_openidc [1].
Remove it from our documentation. SSO with Keycloak was successfully
tested without it.

Keep documentation about keystone_federation_oidc_additional_options by
using OIDCOutgoingProxy instead.

[1] OpenIDC/mod_auth_openidc@f9a5250

Change-Id: Icfe4ef0f6070a97c4e43f691643169e71cc2772a
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
Change-Id: I083a6dc921a2fb11edce4deb8bd8528cd8be8121
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
The Fluentd config contains a record_transformer filter
for `infra.var.log.kolla.*.*.log`, but no input source
or rewrite_tag_filter produces tags matching that pattern.

Kolla service logs are tagged under `kolla.*`, and
infrastructure logs use `infra.*`. Since
`infra.var.log.kolla.*.*.log` is never generated, the filter
is effectively dead code.

Remove it to keep the tag pipeline accurate and easier to follow.

Change-Id: I8ec4a294c8204efeb1957730684fdede22a880a7
Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
There was a lot of repetitive jinja for the cron templates for
logrotate, but they were also fairly infrequently overriden from
the default. Let's DRY up this code by having a default template
and only overriding it when required.

Co-Authored-By: Doug Szumski <doug@stackhpc.com>

Change-Id: I23c3dd66e71a6729a42ea7988931a46ce20d4fc6
Signed-off-by: Michael Still <mikal@stillhq.com>
In the process of renaming common role to kolla-toolbox - the only
non-toolbox tasks are creation of kolla_logs volume and establishing
a link in /var/log/kolla

Change-Id: I12a0c0276ca4c915afc98363ab329331dc79f6bc
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Configure dedicated health check endpoints for Load Balancers

Standardize health check paths in OpenStack and Grafana
Ansible defaults to improve Load Balancer (HAProxy) reliability.

The 'httpchk' configuration for the modified roles now uses
dedicated health check endpoints (e.g., /healthcheck or
/api/health) and enforces an HTTP 200 OK expectation.
This ensures faster and more robust failure detection.

Additionally, by moving health checks away from generic
endpoints (such as OPTIONS /), application logs are now
much cleaner. The log files will no longer be flooded
every second with HAProxy probe entries like:

"OPTIONS / HTTP/1.0" 200 94 0.000954

NOTE: The following services are exceptions to this
standardization and still use the root endpoint (`/`)
for health checks due to the lack of a dedicated health
check middleware in their default API paste configuration:
**cyborg_api**, **masakari**, **mistral_api**, **nova_api**,
**octavia_api**, **placement**, **tacker**, **venus**, and **watcher**.

Updated roles:
* aodh
* barbican
* cinder
* cloudkitty
* cyborg
* designate
* etcd
* glance
* gnocchi
* grafana
* heat
* horizon
* influxdb
* ironic
* keystone
* loadbalancer
* magnum
* manila
* masakari
* mistral
* neutron
* nova
* nova-cell
* octavia
* opensearch
* placement
* rabbitmq
* skyline
* tacker
* trove
* venus
* watcher
* zun

Change-Id: Ibbb9fda45a98565ab12e784bbef80be787bd6638
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
@github-actions github-actions Bot added automated Automated action performed by GitHub Actions synchronisation labels Apr 13, 2026
@github-actions github-actions Bot requested a review from a team as a code owner April 13, 2026 07:01
@Alex-Welsh Alex-Welsh closed this Apr 13, 2026
@Alex-Welsh Alex-Welsh reopened this Apr 13, 2026
@Alex-Welsh Alex-Welsh merged commit 8ec3561 into stackhpc/master Apr 13, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated action performed by GitHub Actions synchronisation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants