aboutsummaryrefslogtreecommitdiff
path: root/zuul.d
AgeCommit message (Collapse)AuthorFilesLines
2026-07-30CI: add opensearch jobs to gate and make them votingBartosz Bezak1-1/+8
Change-Id: I77c4d442645a7d5253b458ce6584f2ba599bc4c3 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit e975285743d08dda7e5b6ca70018441b9d7bd249)
2026-07-24Merge "Replace periodic-stable-jobs with local job list." into stable/2026.1Zuul1-1/+4
2026-07-20CI: Fix role path filtersBartosz Bezak5-6/+6
Add kolla_toolbox and proxysql-config, remove common, proxysql and haproxy. Change-Id: Ia65420a6124f6dc95e3b0c4760ed6a613972e1d0 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 81eaf351ef7bfde38bb311076a2607e371d785d1) Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-07-08Replace periodic-stable-jobs with local job list.Michael Still1-1/+4
The shared periodic-stable-jobs template in openstack-zuul-jobs runs openstack-tox-py310 on stable/2026.1, but kolla-ansible on this branch sets python_requires >= 3.11 and requires ansible-core >= 2.19, whose every satisfying release needs Python >= 3.11. The py310 tox environment therefore cannot even install: pip fails to resolve ansible-core in seconds, and the job has failed on every run. In the 30 days to 2026-07-01 that was 30 failures from 30 runs in the periodic-stable pipeline, pure noise for anyone watching the periodic dashboards. Zuul templates cannot exclude individual jobs, so replace the shared template with an explicit periodic-stable job list running what the shared template would have run minus the impossible interpreter: docs and py313. This mirrors the approach already taken for check and gate on this branch with the local openstack-python3-jobs-kolla-ansible template, which exists precisely to skip py310 jobs. Assisted-By: Claude Fable 5 (1M context, medium effort) Change-Id: I284ab75a3e476e6e623507084cfed5675f77d430 Signed-off-by: Michael Still <mikal@stillhq.com>
2026-05-06Merge "letsencrypt: Switch webserver image to httpd"Zuul1-2/+3
2026-04-28ironic: Switch ironic-http to use httpd imageMichal Nasiadka1-0/+1
Change-Id: If655cd51857b65b16bde1f8870edbd217f5c10e5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-27letsencrypt: Switch webserver image to httpdMichal Nasiadka1-2/+3
Switch to httpd image which was introduced for keystone-httpd and is identical to letsencrypt-webserver image. The letsencrypt-webserver image will be removed afterwards in [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/986151 Depends-On: https://review.opendev.org/c/openstack/kolla/+/986377 Change-Id: Ica381670de4b157c97be4089eaeb7fe2f7ba039f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-27Drop zun and kuryrMichal Nasiadka1-42/+0
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/986150 Change-Id: I8ced621754d03c44b7672dd94fc3d7d2173ac734 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Support multiple Nova Compute Ironic instancesDoug Szumski2-0/+48
Adds support for deploying multiple instances of the Nova Compute Ironic service on the same host. This is useful in large baremetal deployments, where the sharding and/or conductor group feature is used to scale out the service. A further patch to support deploying multiple Ironic conductor instances will follow. Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com> Co-Authored-By: Bertrand Lanson <bertrand.lanson@protonmail.com> Change-Id: Ibbddfd87e831a3775c3ed66c80b18e5070cedc90 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-22CI: Add ^prometheus img regex to ovn scenarioMichal Nasiadka1-0/+1
We enabled prometheus due to testing of network-exporter Change-Id: I382ab5394baef107cfe62f6e1416561b269cf58c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-20Merge "cinder: Change default destination for cinder-volume/backup containers"Zuul1-0/+1
2026-04-17cinder: Change default destination for cinder-volume/backup containersMichal Nasiadka1-0/+1
Kolla-Ansible defaulted for long time to deploy cinder-volume/backup containers on storage group, which is good for Cinder LVM deployments. Problem is - majority of deployments does not use Cinder LVM backend - they use mainly Ceph (based on OpenStack User Survey) and probably some other proprietary vendors which are API driven. Let's change the default to reflect reality. If a user has cinder lvm enabled - we will deploy it as it was before If a user has both cinder lvm and something else enabled - we will deploy cinder-volume and cinder-backup in both places (cinder group and storage group) If a user doesn't have cinder lvm enabled - we deploy only in the cinder group Change-Id: Ia4a874de8f1b8eab8ff688eab4c6af013449c18c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-15Fix keystone with IDP configured.Taavi Ansper1-0/+2
1. Add CI coverage for keystone_identity_providers under federation scenario. 2. Add fix for federation config in keystone role if keystone_identity_providers is defined. 3. Update Horizon tests with federation example. 4. Use openstack.cloud ansible modules instead of python-openstackclient in register_identity_providers.yml Closes-Bug: #2134455 Change-Id: Id03bc5770c3856c7c09a34e327b33786d7b7d859 Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
2026-04-14Merge "Break out clouds.yaml/openrc creation from common role"Zuul2-0/+3
2026-04-14CI: Bump wsrep_slave_threads to 8Michal Nasiadka1-0/+1
We sometimes get mariadb healthcheck issues in CI (check-failure phase) where MariaDB has IST transfer failure in the logs that would require a restart of MariaDB node - let's try bumping wsrep_slave_threads to have the IST finish faster and be less prone on network/cpu issues. Change-Id: I0fdc8a42f282dfa8b7b0e7d5e1a297000f294c7d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-14Break out clouds.yaml/openrc creation from common roleMichal Nasiadka2-0/+3
It currently only holds kolla-toolbox and due to introducing clouds.yaml for kolla-toolbox usage we should separate these two for readability. Change-Id: I0b4d3b8ab199260cd5087c10cf916f9d43f346cc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-08Simplify cron jobs for log rotateMichael Still1-2/+2
There was a lot of repetitive jinja for the cron templates for logrotate, but they were also fairly infrequently overriden from the default. Let's DRY up this code by having a default template and only overriding it when required. Co-Authored-By: Doug Szumski <doug@stackhpc.com> Change-Id: I23c3dd66e71a6729a42ea7988931a46ce20d4fc6 Signed-off-by: Michael Still <mikal@stillhq.com>
2026-03-31Merge "CI: move aarch64 jobs to 16G ram nodes"Zuul2-5/+35
2026-03-31CI: move aarch64 jobs to 16G ram nodesBartosz Bezak2-5/+35
Change-Id: I3e2fcee68efeae8c7ea9428156b63b9a9cfc1be0 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-03-20CI: Move CentOS Stream 10 AIO job to 16GB nodesetBartosz Bezak2-1/+7
Change-Id: Iaf33e0fec67eaee026dc4da7d32be164a7f717b1 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-03-18CI: Add prometheus-node-exportes to scenario triggerMichal Nasiadka1-1/+1
Change-Id: Ia1d284933f6542c9bf82950726c93bbe55181b8b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-03Switch from passlib to internal bcrypt filterMichal Nasiadka1-2/+1
Change-Id: I1c0312aa7bdfb78fedef6c98463f25e6460f4587 Co-Authored-By: Pierre Riteau <pierre@stackhpc.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-02-24CI: use Tempest checkout in master jobsBartosz Bezak1-0/+1
Temporarily drop bcrypt from master upper-constraints in CI. Keep tagged Tempest in upgrade jobs and stable branches Change-Id: Iab349d3f5c3e104bf7ce8fefda29a46023766950 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-02-05CI: add service-check-containers to ovn scenario triggerBartosz Bezak1-1/+1
OVN is the only role using iterated containers, it would be good to trigger it when the service-check-containers role is edited. Change-Id: I72c962b426799ad032f03fe7ea21a037f2c44dfd Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-29CI: include missing nova-cell in scenario file filtersBartosz Bezak6-7/+9
Change-Id: If35b2d3e8f10fbe23fd1ab82369d692f1b3a7939 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-28Merge "cinder: apply cinder_api_workers to uWSGI"Zuul1-2/+2
2026-01-27Merge "CI: Add CloudKitty scenario"Zuul2-0/+40
2026-01-27cinder: apply cinder_api_workers to uWSGIBartosz Bezak1-2/+2
Partial-Bug: #2139153 Change-Id: I989cc52dbc327a716f5f97768c72ff00013163d2 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-24CI: Fix parent of bookworm ovn upgrade jobMichal Nasiadka1-1/+1
Change-Id: I0a5128bfafb108847465ba0958966dd33610e4b6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-21CI: Limit kayobe jobs triggerMichal Nasiadka1-0/+8
Now they trigger on everything, which doesn't make sense. Change-Id: I7d556f333d8d589f7dac67b2aaef35712f3274b7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-15Merge "requirements: pin bcrypt to supported version"Zuul1-1/+2
2026-01-15requirements: pin bcrypt to supported versionChristian Berendt1-1/+2
Disabling requirements check because we need to pin bcrypt to a version lower than 5.0.0, due to passlib and bcrypt incompatibility, and since passlib is basically dead - there's no way to fix that in any other way for stable branches. Related issue: https://github.com/ansible/ansible/issues/85919 Closes-Bug: #2126975 Closes-Bug: #2102117 Signed-off-by: Christian Berendt <berendt@osism.tech> Signed-off-by: Joachim de Groot <joacihm.de.groot@menzel-it.net> Change-Id: I47eee02a47104d3411992f7e6e9dd8f0c2ad0919
2026-01-08Merge "Test idempotence of reconfigure command in CI"Zuul1-1/+1
2026-01-07CI: Add CloudKitty scenarioMichal Nasiadka2-0/+40
Do not enable Prometheus in it yet, because OpenStack Exporter fails on startup due to unavailability of OpenStack APIs - and since we run systemd units in CI with no restart on failure - it fails miserably. Change-Id: I3de44a22fe3a4213cc095431645d37f265143919 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-31Bump ansible-core to 2.19/2.20Michal Nasiadka1-3/+3
wait_discover_computes.yml had to be updated to pass ansible-lint checks for undefined variables (ansible_facts.hostname/nodename was rendered as UndefinedMarker type) Change-Id: Iaded12e9bcf7ed558b7e35ea526ef1355cbca61a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-29CI: Add SLURP scenarioBartosz Bezak4-3/+20
Change-Id: I0a0e694c594ef5f479bf0e0d12a6cdd011dab250 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-12-20Merge "Add support for Debian Trixie (13)"Zuul23-128/+108
2025-12-19Merge "tempest: Rework regex to a list"Zuul2-2/+4
2025-12-19Add support for Debian Trixie (13)Michal Nasiadka23-128/+108
Remove /etc/timezone bind mount since Debian does not provide that file anymore. Depends-On: https://review.opendev.org/c/openstack/kolla/+/964793 Change-Id: If1a289068093843184f0d7b495815db006f2d563 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-19certificates: rework to use Ansible modulesMichal Nasiadka2-1/+2
Add keyCertSign and digitalSignature key_usage required by Python 3.13 [1] [1]: https://github.com/canonical/microk8s/issues/4864 Change-Id: Ia0c55ed6137b0ccd16815f9f7a49b3b30a982154 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-18tempest: Rework regex to a listMichal Nasiadka2-2/+4
Change-Id: I7505f8feeb85f606df92a20bf4a4700d5ea36a51 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-12CI: add rocky10 upgrade jobsBartosz Bezak6-4/+56
Change-Id: I6042cf9ebf1251e1f516201e3bc3068acc613471 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-12-11CI: Switch previous_release to 2025.2Pierre Riteau1-1/+1
Change-Id: I95ee094ade6efa02a19f29a4d9bdf8d7fb97e84e Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-11-29Test idempotence of reconfigure command in CIBertrand Lanson1-1/+1
Idempotence isn't tested in CI and seems to have led to bugs, especially in podman, where it would just break, and reconfiguring would restart the entire cluster. Let's test it in CI to ensure this doesn't happen. Change-Id: I810fa1818bb9a0a11f200da2b782c2fde72f3b3a Signed-off-by: Bertrand Lanson <bertrand.lanson@protonmail.com>
2025-11-24CI: Add site.yml to all jobs triggerMichal Nasiadka1-0/+1
Change-Id: I20e8571464e20ea0e0981a52db3182402ff8f01c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-14Merge "Revert^2 "ovn: Mark as non-voting due to db related failures""Zuul1-4/+1
2025-11-14Revert^2 "ovn: Mark as non-voting due to db related failures"Michal Nasiadka1-4/+1
This reverts commit 809e5b2e341fefd655c12532d61a588bc2ce4091. Reason for revert: It's failing again Change-Id: Iddc5b14bf6fec937030ac75a3fce1774d46460cb Signed-Off-By: <mnasiadka@gmail.com>
2025-11-07Merge "keystone: Add support for deploying httpd for federation"Zuul2-0/+38
2025-11-07Merge "uwsgi: Add configuration for http chunked input"Zuul1-1/+1
2025-11-06keystone: Add support for deploying httpd for federationMichal Nasiadka2-0/+38
Depends-On: https://review.opendev.org/c/openstack/kolla/+/954707 Change-Id: I1f519b3ce8b7f2ceee2eaef88e4afc8ca8fa2f6e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>