openstack-cluster-installer (40) [PTS] [DDPO]

NEW: VCS has unreleased changes: 41 > 40

Git: https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/wallaby
Path: debian/changelog
Browser: https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer
Last scan: 2021-04-09 22:33:07+00
Next scan: 2021-04-18 10:51:00+00
Merge requests: 4

Debian changelog in Git:

openstack-cluster-installer (41) UNRELEASED; urgency=medium

  * Fix poc-bin/oci-poc-install-cluster-swift with the new VM layout.
  * Add udev rule and sort script to restore sanity in drive orders on
    HP DL385, Qemu and others.
  * Handle region_name per cluster.
  * Set net.ipv4.ip_nonlocal_bind on all servers, needed if we set
    LocalAddress in sshd + bgp-to-the-host.
  * Cloudkitty: use keystone as fetcher_backend.
  * Fix rabbit URL for ceilometer notifications in the controller.
  * Add ceilometermiddleware support for swiftproxy.
  * Call ::nova::cinder for any OpenStack release >= train, in both the
    controller and compute classes.
  * Add support for Ceilometer dynamic pollsters.
  * Make Nova's reserved_host_memory_mb configurable, and set default to 16GB.
  * Add optional activation of tempurl, symlink and staticweb swiftproxy
    middlewares on swiftproxy nodes.
  * Move cloudkitty & gnocchi dbs to the messaging nodes, on a new Galera
    cluster for billing.
  * Automatically write /etc/ceilometer/gnocchi_resources.yaml from
    /etc/openstack-cluster-installer/gnocchi_resources.yaml. Same with
    /etc/cloudkitty/metrics.yml for the processor.
  * Rate limit the API to a customizable value, at the iptables level (default:
    100 queries/s connection max per /24), and haproxy (default: 20 concurrent
    sockets), with no limit for cluster internal use.
  * Increased memcached max_connections to 16k (instead of 8k).
  * Only keep 7 days of haproxy logs instead of the default which is 52.
  * controller: also install python3-pankoclient.
  * Configure by default the number of keystone uwsgi workers.
  * Added filebeat support.
  * Add missing pciutils depends in the openstack-cluster-installer-common
    package (the agent uses it).

 -- Thomas Goirand <zigo@debian.org>  Tue, 16 Feb 2021 19:08:35 +0100

This branch is 77 commits ahead of tag debian/40

Git log:

commit 81bec042cfa71b9db79233d8f8c8fd90de5daf76
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Apr 9 23:59:44 2021 +0200

    Updated d/copyright.

commit f9ed48e85f8eb7fd11de22a15af18b8e78d24dc8
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Apr 9 23:57:46 2021 +0200

    Add CODING_STYLE file.

commit 719d2f512f68efc6214d6237ace9837ba8382f06
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Apr 9 13:31:28 2021 +0200

      * Add missing pciutils depends in the openstack-cluster-installer-common
        package (the agent uses it).

commit e394f5bb5995a28ec071ac34c94a8019596b2162
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Apr 8 19:34:37 2021 +0200

    Added filebeat support.

commit 9228f40a1787ac72057aed513d5757e042f6b233
Author: Olivier Chaze <olivier.chaze@infomaniak.com>
Date:   Thu Apr 8 17:12:36 2021 +0200

    CEPH: "mon osd down out" parameters

commit 2c493e5bb5ce0bb2cbdc1bcb95f0dd4ed50ddec9
Author: Olivier Chaze <olivier.chaze@infomaniak.com>
Date:   Thu Apr 8 17:05:42 2021 +0200

    default pg count set to #^2

commit f67f1c84170bed056a7fdcfce3f7316fc88a7776
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Apr 7 13:24:09 2021 +0200

    Configure by default the number of keystone uwsgi workers.

commit 8a5380606fcb462c3e542f6c0bb63168986fa7e9
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Apr 7 13:19:53 2021 +0200

    Add confirmation before overwritting production code with sync-oci-code

commit 7a24705cd9070d50d92f5ffeb5a9f53f385ac134
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Apr 6 22:55:37 2021 +0200

    Fix controllers for puppet-openstack 18.4.0

commit 22d4de0225e6c9324dc820ac5f6babe5348ff8a5
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Apr 6 12:16:17 2021 +0200

    Add missing $region_name param in swiftstore.pp.

commit 45c0cfe5b02e5d02b8c9bc1f63bac8d2e9c7e454
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Apr 6 10:36:54 2021 +0200

    Always generate non-empty $cinder_notif_transport_url, otherwise the controller fails to apply.

commit 9347b523464682a1b2d9eaa413b7ef9bc5d99b6d
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Apr 1 14:06:43 2021 +0200

    Fix nova.conf: glance/api_servers
    Fix octavia.conf: certificates/ca_certificates_file & certificates/region_name

commit 6c5d3ae0db422551479decbec85c6d62f7209526
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 31 22:44:45 2021 +0200

    Fix Glance endpoint

commit be75be8a6d6d1c7b766db01ee68ce7339cab0520
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 31 22:44:28 2021 +0200

    Fix oci-poc-install-cluster-compute to match VM profiles.

commit b7a947d49d2b5df6cb1770c5bb0a8664c541d01e
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 31 16:43:39 2021 +0200

    compute.pp: make it work with Wallaby.

commit aa947d67460b5f2b3a94830bd5a2328c2703b980
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 31 14:39:07 2021 +0200

    wallaby: ssl_verify_client set to on when calling ::horizon.

commit e5011e9ad05ba084802899be128987f467a2429d
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 31 12:13:16 2021 +0200

    Correctly schedule Cron['oci-glance-images-rsync] and Cron['oci-fernet-keys-rotate'] after installation of glance and keystone.

commit c9b9a4de728ef5c4f5edc33ee949ad357b7f2cb6
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 30 11:27:31 2021 +0200

    Fix controller.pp for wallaby

commit 361ce2744a6ed710df09113bb90978aecd27b409
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 29 12:20:32 2021 +0200

    Fix generating swift ring (wrong SQL query).

commit 74653fe1e2c890f59b8dd7bd54e5e6039eb3accb
Author: Thomas Goirand <zigo@debian.org>
Date:   Sun Mar 28 20:52:27 2021 +0200

    Add bullseye-wallaby key

commit e19ac3c97cb4a0eff8f03e6165cb71d44e79357a
Author: Thomas Goirand <zigo@debian.org>
Date:   Sun Mar 28 18:50:21 2021 +0200

    Fixed default debian-security URL.

commit 8fd814bc423f0c3651108c33eb3292b0484911f3
Merge: 0c401ad fe8c585
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 22 12:18:03 2021 +0100

    Merge branch 'debian/wallaby' of ssh://salsa.debian.org/openstack-team/debian/openstack-cluster-installer into debian/wallaby

commit 0c401adf41e0e9fee71533ea7cc429dbc3ab5bc5
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 22 12:16:38 2021 +0100

    Fix panko-api port.
    enc: fix pass_zabbix_authtoken in messaging nodes.

commit fe8c585bb72fb7fdcf9edff2ae79f01b01b2be83
Author: Simeon Gourlin <simeon.gourlin@infomaniak.com>
Date:   Mon Mar 22 10:51:39 2021 +0100

    Add metadata_cache_expiration parameter default to '60' for Nova api

commit db0439433250c86fee3cbdcea5350248690cb983
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 22 09:44:08 2021 +0100

    Configure pass_gnocchi_rscuuid correctly in ::gnocchi::statsd in messaging nodes.

commit 6548084157ef405004b506806bb30f8b3ca17adc
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 22 09:41:38 2021 +0100

    Add monitoring info in /etc/oci in messaging nodes.

commit c1f7a04c8489032e732bde54365ed7ef02d4047f
Merge: a1d0b7c 0a8bc8e
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 20:46:45 2021 +0100

    Merge branch 'debian/wallaby' of ssh://salsa.debian.org/openstack-team/debian/openstack-cluster-installer into debian/wallaby

commit a1d0b7c548eca0431d891ce3a19914528de099bd
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 17:38:36 2021 +0100

    Configure the compute pollsters.

commit 73b245b20b10dcb0843b955c217b3a3eb2e5e104
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 13:56:09 2021 +0100

    Fix ::aodh::auth (ie: service_credentials) region

commit ca3e92bd6a6063edf6eef45f3fc3a6b0bf6455b1
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 13:39:05 2021 +0100

    controller: also install python3-pankoclient.

commit 3309a45b3fce5066b0489106de8b4f750a9f6015
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 11:55:15 2021 +0100

    Only keep 7 days of haproxy logs instead of the default which is 52.

commit 7db0aeb13ccca9b96a00ae7dd0182555671a4bb8
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 11:31:25 2021 +0100

    Also whitelist the API IP in iptables / haproxy.

commit fb5dea110a9b545e6d8e61b11871c1bf61296e3f
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 11:18:48 2021 +0100

    Rate limit connections with haproxy.

commit c5dd57b9019ff6d8105e8b09c509bcb3512fef46
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 18 09:25:50 2021 +0100

    Increased memcached max_connections to 16k (instead of 8k).

commit 70f7eb7f5c8bb8789d8d45417be2959024e2e6ba
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 17 23:17:20 2021 +0100

      * Rate limit the API to a customizable value (default: 100 queries/s),
        no limit for cluster internal consumption.

commit d808d9f1ecc73552ea19d1be8b64aa9ef78eecdd
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 17 22:52:39 2021 +0100

    Revert "Rate limit the API to a customizable value (default: 10 000 queries/s)."
    
    This reverts commit afaf974a1a89668cdcd896b6ab2a0da805f5b3b3.

commit afaf974a1a89668cdcd896b6ab2a0da805f5b3b3
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Mar 17 22:25:59 2021 +0100

    Rate limit the API to a customizable value (default: 10 000 queries/s).

commit 0a8bc8eae74d58eacb43238a402784ca481a283e
Author: Simeon Gourlin <simeon.gourlin@infomaniak.com>
Date:   Tue Mar 16 17:29:45 2021 +0100

    Add cname_lookup middleware in swift proxy server.

commit 0f8db32a70ac433a29fc092db6dcaba89c5a9a0b
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 15:58:35 2021 +0100

    Also handle /etc/cloudkitty/metrics.yml on the controllers
    if there's no messaging nodes.

commit b9638c671fe72f3f93e01a0a129019de21eab04c
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 14:01:52 2021 +0100

    Handle /etc/cloudkitty/metrics.yml

commit 84bf30627cb591d54c52d101c271b79e4431ff40
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 11:39:34 2021 +0100

      * Automatically write /etc/ceilometer/gnocchi_resources.yaml from
        /etc/openstack-cluster-installer/gnocchi_resources.yaml.

commit 2f3ada4d4e04e73e7706220b4e711c229623645d
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 10:36:39 2021 +0100

    Increase zookeeper max_allowed_connections

commit 413eae6cb01c82be760cc2e1fc093bd3befccf83
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 10:35:27 2021 +0100

    Fix transmiting pass_keystone_admin to messaging.pp

commit fe3c5b1a0e10fa36bd728ecf1f9e18abf54cc5f7
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 09:40:36 2021 +0100

    README.md: gnocchi resource-type create

commit 16f22bc1a1a599839c08794c4a3e1a6b6b1d1fb2
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 16 09:40:02 2021 +0100

      * Move cloudkitty & gnocchi dbs to the messaging nodes, on a new Galera
        cluster for billing.

commit 8242821783f61adb6c9efcb3cdf9ddebe2f85d4f
Author: Simeon Gourlin <simeon.gourlin@infomaniak.com>
Date:   Fri Mar 12 18:58:33 2021 +0100

    Adding middleware domain_remap for Swift public part, and fix udev rule for disk detection (in case of scsi reset)

commit a22aa2a41cb3f9fbbcbe50132aa228604176b92a
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 11 20:47:50 2021 +0100

    swiftproxy: add crossdomain when using public cloud features for the pipeline.

commit 7e58cb9ee15b38f1b9c8b0be0fbfc347a45ef50e
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 11 20:47:21 2021 +0100

    16 workers for Gnocchi metricd

commit c2419eba33bcbecee2463f54fee191547f0760bd
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 11 17:49:40 2021 +0100

    ::ceilometer::agent::notification : 16 workers.

commit 27d818875d56afd7367291b1a317bc2b03ce9b34
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 11 11:54:54 2021 +0100

    Call ::swift::proxy::symlink only if >= victoria

commit 8696c8ba60ff7aaed6dbfaddd2efd2bf47072e16
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 11 11:41:31 2021 +0100

      * Add optional activation of tempurl, symlink and staticweb swiftproxy
        middlewares on swiftproxy nodes.

commit aafcbbc517253ae83cdc660ec101d2246e9f8cc0
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Mar 9 11:55:51 2021 +0100

    Make Nova's reserved_host_memory_mb configurable, and set default to 16GB.

commit 6897169f5f8d779431091363063ca9e2b25fa45c
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 8 22:03:47 2021 +0100

    Add support for Ceilometer dynamic pollsters.

commit da675b2f612dc7e699d9e3bff39812022d37a651
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 12:49:56 2021 +0100

    Fix syntax in common/usr/bin/oci-block-device-udev-sorting

commit a5c3c8aafcf65f761f0c57145eae1bd854b55bf2
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 12:31:20 2021 +0100

    Comments about HPE physical drives.

commit 9d962ad5b92a44c59219de484ae4933eb533f7f5
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 12:27:57 2021 +0100

    Better values for HPE drives.

commit c795238ddc56097b3606750a8edc60dd941373a7
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 12:23:35 2021 +0100

    More accepted values for HPE physicaldrive in udev rule script.

commit efd93dffb40e6b0d274e6d8074b6d04e666eefb7
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 11:29:25 2021 +0100

    oci-block-device-udev-sorting: do not fill OCI udev cache file with empty PHYSDRIVE data.

commit 25eedd7643a08ab2ebcd0b051a388e9b966a69df
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 11:18:23 2021 +0100

    Accelerate ssacli controller slot=0 physicaldrive all show detail parsing and allow more possible values for physicaldrive.

commit 2d23c5d9c3853b3c2a7970ebc2f0e0c3cde370df
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 26 09:37:15 2021 +0100

    Do not install puppet/files (folder is gone).

commit 3842f3eb052cfb54a018b9f04e3e1d8cfd31a266
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Feb 25 17:43:00 2021 +0100

      * Add ceilometermiddleware support for swiftproxy.
      * Call ::nova::cinder for any OpenStack release >= train, in both the
        controller and compute classes.

commit c3a954388f3530835802d28beb502ab2970ef59d
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 24 14:21:29 2021 +0100

    Cloudkitty: use keystone as fetcher_backend.

commit 1cc8f623598ed5bf9bde9925e13898eae8c92ed1
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 23 13:53:27 2021 +0100

      * Set net.ipv4.ip_nonlocal_bind on all servers, needed if we set
        LocalAddress in sshd + bgp-to-the-host.

commit 779c896102772b633be538381d66ae7dc8af36c5
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Feb 22 15:18:20 2021 +0100

    Add ACTION=="add" in the 65-sdx-order.rules

commit 0f4403441b9ae1fc7e34d7dce5a95fd3e10713d6
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 19 16:29:37 2021 +0100

    Fix oci-hdd-maint for the new swift udev rules.

commit 597ef512c280d770e75e910b49b5b2d8a16df3fa
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 19 09:12:40 2021 +0100

    HPE blockdev udev rules: Implement oci-block-device-udev-sorting using ssacli + caching + locking.

commit c704636ffad1bb7b9d6ec13bff4167187708d08c
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 17 09:47:57 2021 +0100

    Ensure sshd starts after frr, which is useful for bgp-to-the-host setup.

commit 331bc7b03e909a075ec9713000e9ef7e62e7b97b
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 16 19:08:51 2021 +0100

    Handle region_name per cluster.

commit d277fcf13b5ef80dac62a8ad045ec92b3e14d1aa
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 16 17:07:14 2021 +0100

    Fix oci-block-device-udev-sorting with kernel 5.x

commit 27b30f37bb13991befe15413d5cfd029850b11a8
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 16 16:05:44 2021 +0100

    Fix oci-hdd-maint for new style udev rules for block devices.

commit 34a677319cf05ab1cf02f360a83e1359518f42f3
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 16 09:27:03 2021 +0100

    Fix installation command line when using udev rules for block devices.

commit 6da57772d4c8919bab9bbd8f5c18c161afb5f1ea
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Feb 15 17:21:58 2021 +0100

    block device udev rule: report current real device name, not just the symlink name.

commit 195c9d48435f36de3941c1efb1fe4aa6384a8d9c
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Feb 15 17:03:59 2021 +0100

    Fix again agent reporting with udev rules.

commit d201fa053c32ed1ed3400c353ebd395552a30299
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Feb 15 16:41:38 2021 +0100

    Fix the agent to correctly report if using the udev rule.

commit 9bcf8761787a44475edd49b5d582e98686015e88
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Feb 15 12:43:38 2021 +0100

    Use use_oci_sort_dev in enc.php and swift{store,proxy}.pp

commit eb0f679a300a129f3188d9ede414955ccfc63f9e
Author: Thomas Goirand <zigo@debian.org>
Date:   Fri Feb 12 13:09:10 2021 +0100

      * Fix poc-bin/oci-poc-install-cluster-swift with the new VM layout.
      * Add udev rule and sort script to restore sanity in drive orders on
        HP DL385, Qemu and others.
    
    Agent fix.

commit 3f89cffebb12f67119c93965e37b3a12331664e6
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 10 14:33:58 2021 +0100

    oci-poc: Fix shutting-down mysql when saving the cluster.