openstack/kolla-ansible.git/tools, branch stable/2026.1

Implement neutron-ovn-vpn-agent

2026-04-17T09:07:00+00:00

This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot Signed-off-by: Piotr Milewski

ansible-lint: Fix fqcn[actions-core] in playbooks

2026-03-19T12:17:03+00:00

Also add all failed roles into ignore and these will be removed in subsequent patches Change-Id: Ifa6f2725cfa93cb14d72daf27448bd58f186acfd Signed-off-by: Michal Nasiadka

Merge "influxdb/telegraf: Drop deployment"

2026-03-14T12:38:44+00:00

influxdb/telegraf: Drop deployment

2026-01-23T16:33:19+00:00

Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Telegraf was deprecated in June 2025. Removing both in one patch for convenience. Change-Id: Ieee2be3a06a5ac9504a822cc0a727e662146b260 Signed-off-by: Michal Nasiadka

ansible-lint: Rework validate-all-file into custom rules

2026-01-09T08:34:19+00:00

Test roles/ subdirectories as well (used by Zuul) In addition to that container_exec_become will also fail when "docker exec" or "podman exec" will be used instead of "{{ kolla_container_engine }} exec" Generated-By: Claude Change-Id: I75c1e48c36bb0284e2927b1cb354ce9ec47967d7 Signed-off-by: Michal Nasiadka

ansible-lint: Fix risky-*

2025-12-04T08:19:16+00:00

Change-Id: I3914252b2d884349b9744d229406cf49d691ebec Signed-off-by: Michal Nasiadka

ansible-lint: Remove yaml[truthy] from excludes

2025-11-28T09:06:26+00:00

Normalize quotes and some other easy fixes done by ansible-lint --fix Also drop etc from excludes and ignore comment check in etc/kolla/globals.yml Pinning to ansible-lint<25.11.0 because 25.11.1 is breaking without any messages Change-Id: I7dee3866191cef84cd12b1816cdab0a02380ec7f Signed-off-by: Michal Nasiadka

CI: Bump cirros version to 0.6.3

2025-10-06T08:44:53+00:00

Change-Id: Id979cc7e4f88994a051a4037224c2c1af479dcfd Signed-off-by: Michal Nasiadka

Remove egrep usage from scripts

2025-07-21T12:31:40+00:00

egrep: warning: egrep is obsolescent; using grep -E Change-Id: I4df0d520546da141cafc15e9464149059fdc06a6 Signed-off-by: Michal Nasiadka

Allow to override Cirros image URL for air-gapped environments

2025-06-14T19:33:03+00:00

Change-Id: I917b63ac93a7370e4e064a3fcce70820521387d4 Signed-off-by: Maksim Malchuk