pre-update

check-for-dangling-images

Check for podman dangling images.

Make sure before update we do not have any dangling images.

  • hosts: undercloud

  • groups: pre-update

  • parameters:

    • check_for_dangling_images_debug: False

  • roles: check_for_dangling_images

Role documentation

compute-tsx

RHEL8.x kernel flag for Compute nodes validation.

RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3.

Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process.

This also impacts upstream CentOS systems.

  • hosts: nova_libvirt

  • groups: pre-upgrade, pre-system-upgrade, pre-overcloud-prepare, pre-overcloud-upgrade, pre-overcloud-converge, pre-update, pre-update-prepare, pre-update-run, pre-update-converge

  • parameters:

    • compute_tsx_debug: False

    • compute_tsx_warning: False

  • roles: compute_tsx

Role documentation

container-status

Ensure container status.

Detect failed containers and raise an error.

  • hosts: undercloud, allovercloud

  • groups: pre-upgrade, pre-update, post-deployment, post-upgrade

  • parameters:

  • roles: container_status

Role documentation

openstack-endpoints

Check connectivity to various OpenStack services.

This validation gets the PublicVip address from the deployment and tries to access Horizon and get a Keystone token.

  • hosts: undercloud

  • groups: post-deployment, pre-upgrade, post-upgrade, pre-update, post-update

  • parameters:

  • roles: openstack_endpoints

Role documentation

package-version

The Validation name goes here.

Write a description of your validations

  • hosts: all

  • groups: prep, pre-deployment, post-deployment, pre-upgrade, post-upgrade, pre-update, pre-system-upgrade, pre-undercloud-upgrade, pre-overcloud-prepare, pre-overcloud-upgrade, pre-overcloud-converge, pre-ceph, post-ceph

  • parameters:

    • package_version_debug: False

  • roles: package_version

Role documentation

repos

Check correctness of current repositories.

Detect whether the repositories listed in yum repolist can be connected to and that there is at least one repo configured. Detect if there are any unwanted repositories (such as EPEL) enabled.

  • hosts: undercloud, allovercloud

  • groups: pre-upgrade, pre-update

  • parameters:

  • roles: repos

Role documentation

system-encoding

System encoding.

Ensure the local is unicode

  • hosts: all

  • groups: pre-deployment, pre-upgrade, pre-update

  • parameters:

    • system_encoding_debug: False

  • roles: system_encoding

Role documentation

undercloud-heat-purge-deleted

Verify heat-manage purge_deleted is enabled in crontab.

Without a purge_deleted crontab enabled, the heat database can grow very large. This validation checks that the purge_deleted crontab has been set up.

  • hosts: undercloud

  • groups: pre-upgrade, pre-update, pre-deployment

  • parameters:

    • cron_check: heat-manage purge_deleted

  • roles: undercloud_heat_purge_deleted

Role documentation

undercloud-service-status

Verify undercloud services state before running update or upgrade.

Check undercloud status before running a stack update - especially minor update and major upgrade.

  • hosts: undercloud

  • groups: post-upgrade, pre-upgrade, post-update, pre-update

  • parameters:

  • roles: undercloud_service_status

Role documentation