Commit Graph

2820 Commits

Author SHA1 Message Date
Zuul 1ecab6dbc5 Merge "doc: Fix markup syntax and typo" 2024-09-05 16:04:22 +00:00
Zuul c79bec0f22 Merge "libvirt: Launch instances with stateless firmware" 2024-09-01 07:57:54 +00:00
Zuul b36f01be63 Merge "Correct info about volume-backed server rebuild" 2024-08-30 01:16:27 +00:00
Zuul 52fa9bc4f7 Merge "libvirt: Add config option to require secure SPICE." 2024-08-30 00:28:04 +00:00
Dr. Jens Harbott 5fa069c29a Delete ./doc/source/_static/support-matrix.css file
This file is being automatically generated during the docs build, no
need to have it persisted in git.

Change-Id: Ib45f722cc305e1d828d31724535e31ad3dda6c2e
2024-08-29 09:27:04 +02:00
Michael Still e06890d101 libvirt: Add config option to require secure SPICE.
This patch adds the following SPICE-related configuration option
to the 'spice' configuration group:

- require_secure

When set to true, libvirt will be provided with domain XML which
configures SPICE VDI consoles to require secure connections (that
is, connections protected by TLS). Attempts to connect without
TLS will receive an error indicating they should retry the connection
on the TLS port.

Change-Id: Ica7083b0836f8d66cad8a4b4097613103fc91560
2024-08-21 18:09:50 +10:00
Takashi Kajinami 3169e7cebd libvirt: Launch instances with stateless firmware
This change implements the actual functionality to allow users to
launch instances with stateless firmware (read-only firmware image +
no NVRAM).

Note that this feature is supported by the libvirt virt driver, and
also requires libvirt >= 8.6.0.

Implements: blueprint libvirt-stateless-firmware
Change-Id: I7219bfa11ae98e65c326bec1a99c49d3e245cb9a
2024-08-21 10:52:05 +09:00
Rajat Dhasmana f57176dd29 Correct info about volume-backed server rebuild
In the evacuate vs rebuild doc, it is stated that nova does not
support volume-backed server rebuild which is not correct.
With the introduction of microversion 2.93, we support volume
backed server rebuild and this patch aims at correcting that
information.

Change-Id: I5da86ad115f628582404dee52bcbfb250fdb7cd4
2024-07-22 12:45:06 +05:30
Zuul ac4a67cbda Merge "docs: Follow up for persistent mdevs" 2024-05-27 11:01:32 +00:00
Zuul 3dfdc10f63 Merge "libvirt: Create persistent mdevs" 2024-05-27 11:01:26 +00:00
Zuul bded279a00 Merge "docs: Add more information about unified limits" 2024-05-23 19:48:39 +00:00
melanie witt c7e49dfa16 docs: Follow up for persistent mdevs
This address review feedback on change
I7e1d10e66a260efd0a3f2d6522aeb246c7582178 to add some clarifying text
to the docs and release note.

Related to blueprint persistent-mdevs

Change-Id: I472552c64cc2c2ce06896158664faac0199d90bd
2024-05-23 18:29:04 +00:00
Zuul d7d2fb1edd Merge "scheduler: AggregateMultitenancyIsolation to support unlimited tenant" 2024-05-23 15:35:54 +00:00
Alexey Stupnikov ac8729ac87 [doc] Improve description for nova-manage db purge
--before argument is currently described in ambiguous way: it
is not actually used to filter entries ARCHIVED before specified
date. Instead, it compares provided data with "deleted_at" value
for most rows and "updated_at" or "created_at" for remaining ones.

Since we already talk about time of deletion when describing
--before argument of "nova-manage db archive_deleted_rows" rows,
it make sense to not provide extra details here as well.

Change-Id: Ib5940e88a52dc8d32303e27237e567c3481fc3dc
2024-05-21 20:19:18 +02:00
melanie witt d45379c6b4 docs: Add more information about unified limits
The admin docs are missing some details about enabling unified limits,
like oslo.limit configuration and Keystone roles. This adds more
information about what roles are needed for what actions, how to set
quota limits, quota enforcement, and unified limits in general.

This also removes a couple of tables from the user docs that show
obsolete/deprecated quota limits because they may be more confusing
than helpful considering we don't want new deployments to use them and
they add more clutter to the page.

More info is also added regarding the CLI commands for unified limits
and makes it consistent between the user and admin docs.

Change-Id: Id93f9997d1b217e0c2151c88323564f7a7fefc02
2024-05-17 19:17:05 +00:00
Balazs Gibizer 3c0eadae0b Reject AZ changes during aggregate add / remove host
After this patch nova rejects the add host to aggregate API action
if the host has instances and the new aggregate for the host would
mean that these instances need to move from one AZ (even from the
default one) to another. Such AZ change is not implemented in nova
and currently leads to stuck instances.

Similarly nova will reject remove host from aggregate API action if the
host has instances and the aggregate removal would mean that the
instances need to change AZ.

Depends-On: https://review.opendev.org/c/openstack/tempest/+/821732

Change-Id: I19c4c6d34aa2cc1f32d81e8c1a52762fa3a18580
Closes-Bug: #1907775
2024-05-08 14:56:56 +02:00
Sahid Orentino Ferdjaoui 3cd26b0a08 scheduler: AggregateMultitenancyIsolation to support unlimited tenant
This commit removes the previous limitation on the number of tenants
that can be filtered using the `filter_tenant_id` aggregate property
in the AggregateMultitenancyIsolation scheduler filter.

The `filter_tenant_id` can now be used as a suffix, allowing for an
unlimited number of tenant ID properties to be set on the
aggregate. This update maintains backward compatibility.

Implements: blueprint aggregatemultitenancyisolation-to-support-unlimited-tenant
Signed-off-by: Sahid Orentino Ferdjaoui <sahid.ferdjaoui@industrialdiscipline.com>
Change-Id: Ic87d142647774b62a6af2cc5eb7a3cd66f9afeb7
2024-04-26 07:07:03 +00:00
Sean Mooney 33a56781f4 fix sphinx-lint errors in docs and add ci
This change mainly fixes incorrect use of backticks
but also adress some other minor issues like unbalanced
backticks, incorrect spacing or missing _ in links.

This change add a tox target to run sphinx-lint
as well as adding it to the relevent tox envs to enforce
it in ci. pre-commit is leveraged to install and execute
sphinx-lint but it does not reqiure you to install the
hooks locally into your working dir.

Change-Id: Ib97b35c9014bc31876003cef4362c47a8a3a4e0e
2024-04-17 13:33:47 +01:00
Takashi Natsume 33ba0f2935 Update contributor guide for 2024.2 Dalmatian
Signed-off-by: Takashi Natsume <takanattie@gmail.com>
Change-Id: Ie06ed81873fa33fb7e1efe3d2db272f0f90619f7
2024-03-25 08:17:42 +00:00
melanie witt 74befb68a7 libvirt: Create persistent mdevs
Related to blueprint persistent-mdevs

Change-Id: I7e1d10e66a260efd0a3f2d6522aeb246c7582178
2024-03-21 23:44:32 -04:00
Zuul 34fb6a250f Merge "Fix tipo" 2024-03-20 16:52:47 +00:00
Amit Uniyal a8f81d5f08 Disconnecting volume from the compute host
cmd nova-manage volume_attachment refresh vm-id vol-id connetor

There were cases where the instance said to live in compute#1 but the
connection_info in the BDM record was for compute#2, and when the script
called `remote_volume_connection` then nova would call os-brick on
compute#1 (the wrong node) and try to detach it.

In some case os-brick would mistakenly think that the volume was
attached (because the target and lun matched an existing volume on the
host) and would try to disconnect, resulting in errors on the compute
logs.

- Added HostConflict exception
- Fixes dedent in cmd/manange.py
- Updates nova-mange doc

Closes-Bug: #2012365
Change-Id: I21109752ff1c56d3cefa58fcd36c68bf468e0a73
2024-03-01 05:17:42 +00:00
Zuul b6dc431831 Merge "Add nova-manage ironic-compute-node-move" 2024-02-29 18:46:32 +00:00
Zuul 6834b2da1e Merge "docs: Further clarifications to the SG doc" 2024-02-29 17:03:21 +00:00
Zuul 9c6e593144 Merge "HyperV: Remove extra specs of HyperV driver" 2024-02-29 15:54:09 +00:00
Stephen Finucane a211ea82a1 docs: Further clarifications to the SG doc
Add some notes and clarify some details:

- You don't *have* to specify an IP protocol: non-IP Ethertypes are
  possible
- It is not possible to automatically create ports *without* the default
  SG (nor will it ever be possible - proxy APIs are bad)
- Remove the default SG can break access to the metadata service

Change-Id: Id66a92bdfd6e1663acddca830b2a9e99ac23a758
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2024-02-29 12:19:55 +00:00
Zuul 060445aa2f Merge "Modify the mdevs in the migrate XML" 2024-02-29 06:58:40 +00:00
Zuul bb55200683 Merge "enforce remote console shutdown" 2024-02-28 16:33:27 +00:00
Sylvain Bauza 8abc7b47fd Modify the mdevs in the migrate XML
Now the destination returns the list of the needed mdevs for the
migration, we can change the XML.

Note: this is the last patch of the feature branch.
I'll work on adding mtty support in the next patches in the series
but that's not a feature usage.

Change-Id: Ib448444be09df50c3db5ccda8a49bfd882c18edf
Implements: blueprint libvirt-mdev-live-migrate
2024-02-28 15:53:49 +01:00
Amit Uniyal 5ecf1d324d enforce remote console shutdown
- Adds a CONF option enforce_session_timeout
- Adds Timer to close connection once token expire
- refactor close_connection functionality
- Fixes existing and adds new unit tests
- Adds release note
- Updates admin guide

Change-Id: I5d7e8faf1d271e9dd98d24e825631246308e7141
2024-02-27 13:23:49 +00:00
Zuul 065f6e1b51 Merge "trivial doc fix" 2024-02-26 08:33:29 +00:00
Rajesh Tailor 0d1a2cab78 trivial doc fix
In cells-v2 doc, the templated URLs example for
config-option `transport_url` uses : instead of @.

This change corrects the example for the same.

Change-Id: I521a9e648404825a798f568f8a88cf17af8880f3
2024-02-26 13:27:53 +05:30
John Garbutt 08d7be1726 Add nova-manage ironic-compute-node-move
When people transition from three ironic nova-compute processes down
to one process, we need a way to move the ironic nodes, and any
associcated instances, between nova-compute processes.

For saftey, a nova-compute process must first be forced_down via
the API, similar to when using evacaute, before moving the associated
ironic nodes to another nova-compute process. The destination
nova-compute process should ideally not be running, but not forced
down.

blueprint ironic-shards

Change-Id: I33034ec77b033752797bd679c6e61cef5af0a18f
2024-02-25 13:25:27 -08:00
Zuul 3209f65516 Merge "HyperV: Remove RDP console API" 2024-02-20 07:01:10 +00:00
Zuul 1644557db3 Merge "docs: Further tweaks to the CPU models document" 2024-02-16 18:33:10 +00:00
Ghanshyam Mann 3b4db6408e HyperV: Remove extra specs of HyperV driver
There are a few extra spec which are only applicable for HyperV driver,
therefore those are removed.

Change-Id: I9bd959fdf9938b2752c4927c5ff7daf89b5f0d38
2024-02-13 20:25:22 +00:00
Ghanshyam Mann 0c1e1ccf03 HyperV: Remove RDP console API
RDP console was only for HyperV driver so removing the
API. As API url stay same (because same used for other
console types API), RDP console API will return 400.

Cleaning up the related config options as well as moving its
API ref to obsolete seciton.

Keeping RPC method to avoid error when old controller is used
with new compute. It can be removed in next RPC version bump.

Change-Id: I8f5755009da4af0d12bda096d7a8e85fd41e1a8c
2024-02-13 12:24:38 -08:00
Ghanshyam Mann c76c72cfe0 Remove HyperV: cleanup doc/code ref
Cleanup doc/code ref of HyperV driver.

Change-Id: I6cd8fb90829e040bfd356ff6b1c41aa9a1c906d2
2024-02-07 12:08:07 -08:00
Ghanshyam Mann b068b04372 Remove the Hyper-V driver
Nova Hyper-V driver is not tested in OpenStack upstream and no maintianers.
This driver has been marked as deprecated in Antelope release. It has dependency
on the OpenStack Winstacker project which has been retired[1].

As discussed in vPTG[2], removing the HyperV driver, tests, and its config.

[1] https://review.opendev.org/c/openstack/governance/+/886880
[2] https://etherpad.opendev.org/p/nova-caracal-ptg#L301

Change-Id: I568c79bae9b9736a20c367096d748c730ed59f0e
2024-02-05 12:06:58 -08:00
Arnaud Morin 5da11e4231 Fix tipo
Change-Id: I414e8a88f878b8eff34d7a1bf23d855d3ed4c101
Signed-off-by: Arnaud Morin <arnaud.morin@ovhcloud.com>
2024-01-30 15:14:36 +01:00
Pierre Riteau 1c20647a14 doc: Fix markup syntax and typo
Change-Id: Ic2f56600802a279d34033b28acd47d8dfbbb2797
2024-01-23 16:15:16 +01:00
Sylvain Bauza cc25813b6d doc: drop blockdiag usage
Since blockdiag seems a bit unmaintenained, let's just statically
generate the SVGs but let's keep the source files in tree so we can
modify the diagrams whenever we want, provided blockdiag exists in
a foreseenable future :-)

Closes-Bug: #2026345

Change-Id: I1cc078554ab149a9849c895e08c878180b7510b0
2024-01-22 18:27:04 +01:00
Zuul 897a91b928 Merge "docs: fix 404 for ironic docs" 2023-12-20 05:29:07 +00:00
Zuul d5726a81b8 Merge "Remove deprecated [api] use_forwarded_for" 2023-12-20 03:47:46 +00:00
Sean Mooney f4852f4c81 [codespell] fix final typos and enable ci
This chnage adds the pre-commit config and
tox targets to run codespell both indepenetly
and via the pep8 target.

This change correct all the final typos in the
codebase as detected by codespell.

Change-Id: Ic4fb5b3a5559bc3c43aca0a39edc0885da58eaa2
2023-12-15 12:32:42 +00:00
Zuul 45e2349408 Merge "Remove outdated comment about allocation ratios" 2023-12-14 16:49:58 +00:00
Takashi Kajinami a5f68d355c Remove deprecated [api] use_forwarded_for
This option was deprecated in favor of the HTTPProxyToWSGI middleware
in 26.0.0 release[1].

[1] cf906cdcc2

Related-Bug: #1967686
Change-Id: Iad8880127531dc2788d646f8a05b5c17fd9d0969
2023-12-14 14:41:00 +09:00
Zuul d26c77b7d7 Merge "docs: Address nits in new security group doc" 2023-12-13 20:37:00 +00:00
Zuul d8f24663ea Merge "docs: Revamp the security groups guide" 2023-12-13 20:32:16 +00:00
Stephen Finucane 91fc3747a3 docs: Address nits in new security group doc
Change-Id: I8439c5df745712fe11b89acb794a6e92290ba3c9
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2023-12-13 19:53:55 +00:00