openstack/kolla-ansible.git/roles/openstack-clients, branch stable/2026.1

Drop zun and kuryr

2026-04-27T05:18:03+00:00

Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka

Support multiple Nova Compute Ironic instances

2026-04-24T13:47:26+00:00

Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak Co-Authored-By: Bertrand Lanson Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski

Implement neutron-ovn-vpn-agent

2026-04-17T09:07:00+00:00

This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot Signed-off-by: Piotr Milewski

CI: Reorganise scenarios into project templates

2025-09-22T11:52:00+00:00

This patch moves into using project templates, which is easier to organise. base_distro and upgrade variables are derived from base.yaml and respective job name - so don't need to be specified in each job anymore. All jobs will now also have an OS release specified, so it's easier to add different OS release jobs (e.g. when backporting new release support to stable branch). Change-Id: I1f08f9b9064d9f7e95b07944db0e7ebac3120c57 Signed-off-by: Michal Nasiadka

Merge "CI: Add telemetry scenario"

2025-09-15T10:34:24+00:00

CI: Add telemetry scenario

2025-09-15T07:18:58+00:00

Removing python-ceilometerclient since it didn't have a release since 2017 Change-Id: I4c20d268c202e1699f44f7d672c159d3ffa895eb Signed-off-by: Michal Nasiadka

Remove ironic-inspector deployment

2025-09-05T09:26:59+00:00

Ironic Inspector has been retired and its functionality has been moved to Ironic. Added a change to service-ks-register to make password optional (to able to remove user without a password being passed in). Using the opportunity - increasing CI coverage to include inspection. Change-Id: If178c23249370c7c69744843737e61a6309d6a19 Signed-off-by: Michal Nasiadka

Remove Swift role

2025-03-21T16:30:59+00:00

Since Swift is broken and since deprecation nobody did pick up the work to make it working - let's remove swift role and associated integrations/CI scripts. Change-Id: I08e92aaeea644053fd25f80ce1f276a495cebbfc

Revert "CI: Pin openstackclient to <7"

2024-08-08T07:42:46+00:00

This reverts commit 9a5059d4408a11f23c23f2543c404292ac9d088a. Reason for revert: let's use UC Change-Id: Ifa2c455a0ac5d239cbd7de329521474b366b3c76

CI: Use u-c in openstack-clients role

2024-08-07T17:24:57+00:00

Change-Id: I29a3f86b59aeaa8ca64d5e6780fa094b903d0039