openstack/kolla-ansible.git/tests/templates, branch stable/2026.1

CI: Emulate Redfish baremetal with Tenks

2026-10-15T09:08:59+00:00

Emulate baremetal using Tenks to test the deployment of Redfish baremetal with Ironic. Depends-On: https://review.opendev.org/c/openstack/tenks/+/995697 Change-Id: I2df2287c15d1afaba9d63956bcfa2fc7e71c3530 Signed-off-by: Jed Preist (cherry picked from commit 06da80983a66e88251f08535b43ce984f4729e4f)

CI: Prefer ipv4 over ipv6 and disable docker mirror

2026-09-24T14:18:38+00:00

We're getting some ipv6 issues in VexxHost's ca-ymq-1 region, this should at least work around them. Change-Id: I26412e410e9aebb24bc98c943f418f824032be40 Signed-off-by: Michal Nasiadka Signed-off-by: Bartosz Bezak (cherry picked from commit 2f64452fbad843816d74b7584ea81d33d8054a14)

Fix OVN SB relay port calculation for relay counts > 9

2026-06-17T08:07:30+00:00

The OVN SB relay port was generated using string concatenation between the port prefix and relay group ID. When the relay count exceeded 9, this resulted in invalid port numbers such as 166410. Update the port calculation to use numeric addition instead, ensuring ports remain within the expected and valid range. Closes-Bug: #2131191 Change-Id: I4738339431483c3d38fb322c18888fe61cae1a62 Signed-off-by: amir58118 Signed-off-by: Michal Nasiadka (cherry picked from commit 6c2b9225d52cf2470d7ed85fa5fde833d764bb3c)

Drop zun and kuryr

2026-04-27T05:18:03+00:00

Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka

Support multiple Nova Compute Ironic instances

2026-04-24T13:47:26+00:00

Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak Co-Authored-By: Bertrand Lanson Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski

CI: Fix ovn-upgrade jobs

2026-04-21T05:19:25+00:00

Since we use the same globals before upgrade and after upgrade, we need to not enable vpnaas before the upgrade, because there's no additional logic for configuring neutron-ovn-vpn-agent in previous release. Rename the role under /roles to fit out naming and ensure no clashes with other role names Change-Id: I3ccef6b1e75224a60036e9bf49500804ee76eba6 Signed-off-by: Michal Nasiadka

Merge "cinder: Change default destination for cinder-volume/backup containers"

2026-04-20T09:15:13+00:00

Merge "Implement neutron-ovn-vpn-agent"

2026-04-17T15:06:26+00:00

cinder: Change default destination for cinder-volume/backup containers

2026-04-17T13:43:47+00:00

Kolla-Ansible defaulted for long time to deploy cinder-volume/backup containers on storage group, which is good for Cinder LVM deployments. Problem is - majority of deployments does not use Cinder LVM backend - they use mainly Ceph (based on OpenStack User Survey) and probably some other proprietary vendors which are API driven. Let's change the default to reflect reality. If a user has cinder lvm enabled - we will deploy it as it was before If a user has both cinder lvm and something else enabled - we will deploy cinder-volume and cinder-backup in both places (cinder group and storage group) If a user doesn't have cinder lvm enabled - we deploy only in the cinder group Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c Signed-off-by: Michal Nasiadka

Implement neutron-ovn-vpn-agent

2026-04-17T09:07:00+00:00

This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot Signed-off-by: Piotr Milewski