openstack/kolla.git/kolla/common/users.py, branch master

Implement container image build for kerbside.

2026-06-03T03:10:47+00:00

This change adds images for Kerbside. Kerbside is a SPICE protocol native proxy used to expose the new spice-direct console type provided by Openstack Compute. This allows high fidelity virtual desktop experiences without requiring transcoding of the console into HTML5 in Horizon, or allowing users direct access to the console ports on your hypervisors. Sadly, Red Hat chose to remove SPICE support from qemu in RHEL9, and Rocky Linux has followed along. You therefore _must_ run the Debian or Ubuntu container images if you wish to use the ``spice-direct`` console type. Architecturally Kerbside has two components -- an API service which turns console access URLs from Nova into URLs to ``.vv`` files, and a proxy service which actually proxies the SPICE traffic. These are handled as separate container images here because they're quite different. One is a WSGI REST API, and the other is a daemon. It is also likely that deployers would choose to host these on different machines. Finally, the proxy service needs to be special cased in load balancing because it strongly expects to terminate TLS itself. The haproxy is therefore configured as a layer 4 proxy in this case. Depends-On: https://review.opendev.org/c/openstack/kolla/+/991249 Change-Id: If60a70745462e1360cfadaab1a5a8d75b7fdeb21 Partial-Bug: #2131793 (spice-direct consoles) Signed-off-by: Michael Still

Drop zun and kuryr

2026-04-24T17:12:29+00:00

Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Change-Id: I770b9e62c66f8cc63475d51f80eecacc8415b91f Signed-off-by: Michal Nasiadka

Drop Telegraf

2026-01-22T13:53:19+00:00

It has been deprecated in June 2025. Change-Id: I45bfed8ac7fd86dedab81533751e573272c01012 Signed-off-by: Michal Nasiadka

influxdb: Drop support

2026-01-22T09:58:48+00:00

Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Change-Id: Id17aa4946617c851780d424e7e053dd79196be6f Signed-off-by: Michal Nasiadka

redis: Drop redis and redis-sentinel images

2025-12-03T11:06:34+00:00

We switched to Valkey Change-Id: Ic40fecb87dd3eaf67eb1d3088978d462ff5b4320 Signed-off-by: Michal Nasiadka

Merge "Add Valkey"

2025-10-30T09:05:33+00:00

Add Valkey

2025-10-29T15:32:24+00:00

Change-Id: I02f3adf9825636e2b81c50543d6f95ea986019b6 Signed-off-by: Michal Nasiadka

Drop Venus images

2025-10-27T09:38:44+00:00

It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/964860 Change-Id: I3a04487a75c04ba989fa70f2025db33308671dfb Signed-off-by: Michal Nasiadka

Drop ironic-inspector

2025-09-05T07:23:23+00:00

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951864 Change-Id: Ie7e607c5a9c6f8c2e36aea5d52dc2ffbe97dddb3 Signed-off-by: Michal Nasiadka

Enabling support for Thales Luna user id and group id.

2025-05-02T10:20:00+00:00

The new client software version requires the use of a specific group called "hsmusers", and for consistency reasons, we are specifying both, the user id and the group id, and inserting the Barbican username inside of such a group. More information can be found on https://www.thalesdocs.com/gphsm/luna/7/docs/pci/Content/install/client_install/linux_install.htm Change-Id: Ib7d0c879b3741ca472cd0bbf3a9a88a0fee25cac Signed-off-by: Mauricio Harley