openstack/kolla-ansible.git/tests/run.yml, branch stable/2026.1

Drop zun and kuryr

2026-04-27T05:18:03+00:00

Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka

Support multiple Nova Compute Ironic instances

2026-04-24T13:47:26+00:00

Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak Co-Authored-By: Bertrand Lanson Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski

CI: Fix ovn-upgrade jobs

2026-04-21T05:19:25+00:00

Since we use the same globals before upgrade and after upgrade, we need to not enable vpnaas before the upgrade, because there's no additional logic for configuring neutron-ovn-vpn-agent in previous release. Rename the role under /roles to fit out naming and ensure no clashes with other role names Change-Id: I3ccef6b1e75224a60036e9bf49500804ee76eba6 Signed-off-by: Michal Nasiadka

Implement neutron-ovn-vpn-agent

2026-04-17T09:07:00+00:00

This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot Signed-off-by: Piotr Milewski

Fix keystone with IDP configured.

2026-04-15T12:23:10+00:00

1. Add CI coverage for keystone_identity_providers under federation scenario. 2. Add fix for federation config in keystone role if keystone_identity_providers is defined. 3. Update Horizon tests with federation example. 4. Use openstack.cloud ansible modules instead of python-openstackclient in register_identity_providers.yml Closes-Bug: #2134455 Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859 Signed-off-by: Taavi Ansper

CI: Test for leaked passwords in syslog

2026-04-13T11:34:24+00:00

Change-Id: I611a61dc90aa6e1aa16971e2dd17a959f7587947 Signed-off-by: Michal Nasiadka

CI: use Tempest checkout in master jobs

2026-02-24T12:20:44+00:00

Temporarily drop bcrypt from master upper-constraints in CI. Keep tagged Tempest in upgrade jobs and stable branches Change-Id: Iab349d3f5c3e104bf7ce8fefda29a46023766950 Signed-off-by: Bartosz Bezak

CI: skip ARA in slurp ansible upgrade

2026-02-10T15:39:40+00:00

ARA is already installed in the same venv, so this step only needs kolla-ansible and ansible-core. That was needed in previous SLURP cycle. ara<1.0.0 currently fails with ModuleNotFoundError: pkg_resources [1] [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 Change-Id: Ia5e6ee943fe8d2a5d0a633aa2058548abf7e2df9 Signed-off-by: Bartosz Bezak

CI: Switch IPA images source location

2025-11-13T06:15:03+00:00

It should be ironic-python-agent, not builder. It seems Ironic has switched upload locations long time ago. Change-Id: I0189391dede5b325941d32ff54ac7032d1d20e5b Signed-off-by: Michal Nasiadka

CI: Remove Rocky9 Python handling

2025-11-05T09:35:08+00:00

Change-Id: I9686da42a5f59fa36811c4500f8c67c0d32b92b5 Signed-off-by: Michal Nasiadka