openstack/kolla-ansible.git/ansible/library, branch stable/2026.1

Ensure OpenSearch waits for recovery during upgrade

2026-07-30T08:13:24+00:00

Change-Id: I8825f41a1753eb323e0fdf1bf38a679670e01ba7 Signed-off-by: Alex Welsh (cherry picked from commit 37194fcab7883b8626f2eab5a4f6a19246b85ec9)

fix kolla_toolbox running with wrong HOME env

2026-06-22T12:21:26+00:00

There is a possibility that the ansible-runner in kolla_toolbox is executed with the wrong environment variables if run in a specific way. The cause is not super clear, but the solution is to simply force it to use the correct HOME value. Closes-Bug: #2153544 Change-Id: Ibad84e358f21564c570161f7e4f21b117398df3b Signed-off-by: Bertrand Lanson (cherry picked from commit 2104f74a2616821c2bd848411ebfce266a3edd69)

kolla_toolbox: fix secrets leaking

2026-03-25T19:15:26+00:00

Replace ansible CLI invocation with ansible-runner, passing module args via put_archive tar stream instead of exec argv. Override _log_invocation to add no_log values to relevant variables on module invocation (without that we leak secrets on each module invocation - check for "Invoked with" syslog entries) runner_on_skipped is required for --check support Requires ansible-runner in the kolla_toolbox image (Depends-On). Depends-On: https://review.opendev.org/c/openstack/kolla/+/980788 Closes-Bug: #2131197 Closes-Bug: #2138622 Assisted-By: Claude Sonnet 4.6 Change-Id: I110f79aa911b746d13f6648883191edabea10563 Signed-off-by: Michal Nasiadka Signed-off-by: Bartosz Bezak

CI: Fix hardcoded passwords check introduced by bandit

2026-01-19T09:53:36+00:00

Tests had to be a bit refactored due to pep8 E501 (line too long) See [1]. [1]: https://github.com/PyCQA/bandit/commit/649b9bdf87f4f9d850b29819b14b847bd3b8f970 Change-Id: I99407525546f50c4ff1c0101316485604c83b07f Signed-off-by: Michal Nasiadka

kolla_toolbox: Add support for deprecation warnings

2026-01-12T14:30:24+00:00

ansible-core 2.20 introduced some deprecation warnings in internal module functions and not all modules have adapted to new functionality, therefore kolla_toolbox invocations contain both deprecation warnings (or other warnings) and JSON blocks. This patch adds support for separating these and printing deprecation warnings using warn() function in AnsibleModule Closes-Bug: #2138234 Change-Id: I2008d9d8c85b2216036f5155e29f7e5db43832f0 Signed-off-by: Michal Nasiadka

Add ability to get stopped container's facts

2025-10-01T11:28:40+00:00

kolla_container_facts could only get running containers, this patch adds the ability to specify, that user wants even stopped containers. Also updates module's docs and corrects few typos. Change-Id: I9ace3c1d802bc00ce692b3ca755384c6b62bd72d Signed-off-by: Roman Krček

Revert "security: hide sensitive auth_password in kolla_container module logs"

2025-08-13T14:55:49+00:00

This reverts commit 9e8b2c4661416e7812afa70bad144201ea410fe9. Reason for revert: no_log=True on common_options over-redacts, including parsed stdout, breaking CI. Different approach needed. Change-Id: Ia1a1a247c72b0edb13a26f3f73259abe4f92b762 Signed-off-by: Michal Nasiadka

security: hide sensitive auth_password in kolla_container module logs

2025-08-12T07:01:51+00:00

Added no_log=True to the 'common_options' argument in generate_module() to prevent the auth_password and other sensitive data from being printed in Ansible logs during container operations. This improves security by hiding credentials from logs. This change addresses the issue where auth_password was visible in logs despite already having no_log=True on the auth_password parameter itself, because it was nested inside common_options dict without no_log protection. Closes-Bug: #2120302 Change-Id: I2064f822bda1c2618605ecfb9bf26ad820ccbbf2 Signed-off-by: Piotr Milewski

Merge "Move kolla_toolbox to high level client"

2025-04-01T08:20:44+00:00

Move kolla_toolbox to high level client

2025-03-31T09:33:56+00:00

Move from APIClient to PodmanClient and DockerClient clients. Signed-off-by: Roman Krček Change-Id: I6c5734b6fff1bd42929851a263620bb4d959ac25