Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1 2026-03-30T18:47:21+00:00 2026-03-30T18:47:21+00:00 Piotr Milewski vurmil@gmail.com 2025-12-23T09:30:02+00:00 urn:sha1:cbca935b87b4606534fc08d2cae80d864af51c7c Currently, Kolla images lack standard metadata, making it difficult to identify their build source, creation time, or exact version solely by inspecting the image artifact. This patch introduces the addition of Open Container Initiative (OCI) standard labels to all generated images. The build process now detects metadata (utilizing `direct_url.json` for pip-installed packages to avoid subprocess calls) and injects the following labels into the container runtime config: * org.opencontainers.image.authors * org.opencontainers.image.created * org.opencontainers.image.description * org.opencontainers.image.licenses * org.opencontainers.image.revision * org.opencontainers.image.source * org.opencontainers.image.title * org.opencontainers.image.url * org.opencontainers.image.version Example output: "Labels": { "org.opencontainers.image.authors": "Kolla Project (https://launchpad.net/kolla)", "org.opencontainers.image.created": "2025-12-22T14:02:47.015819", "org.opencontainers.image.description": "OpenStack Kolla keystone-ssh image", "org.opencontainers.image.licenses": "Apache-2.0", "org.opencontainers.image.revision": "96b54022857ccef8dc6bb11789abe32119827109", "org.opencontainers.image.source": "https://opendev.org/openstack/kolla", "org.opencontainers.image.title": "keystone-ssh", "org.opencontainers.image.url": "https://opendev.org/openstack/kolla", "org.opencontainers.image.version": "master-ubuntu-noble" } This enhancement improves the interoperability of Kolla images with standard container tools and registries that display OCI metadata. Change-Id: I3451940c90180ba91759c839987434e94251e32e Signed-off-by: Piotr Milewski <vurmil@gmail.com> 2025-08-06T09:50:39+00:00 Bartosz Bezak bartosz@stackhpc.com 2025-08-04T09:31:26+00:00 urn:sha1:ddac7ca1ed393609b7bda8753db3598f1ae02648 Since Docker 28.3.3 the daemon rejects a push that carries no `X-Registry-Auth` header [1]. The SDK already sets this header when it finds credentials, so the breakage happens only on anonymous pushes. During `PushTask.push_image()` we now check whether the SDK can resolve credentials for the target registry; if it cannot, we inject `auth_config={}`, causing the SDK to send the minimal "{}" header that satisfies the daemon while leaving authenticated pushes unchanged. Drop this addition when [2] is fixed. [1] https://github.com/moby/moby/pull/50371 [2] https://github.com/docker/docker-py/issues/3348 Closes-Bug: #2119619 Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> 2025-02-19T22:43:19+00:00 Michal Arbet michal.arbet@ultimum.io 2025-02-19T22:22:07+00:00 urn:sha1:405f95019354b9be45a750e246127bd9c68d2508 When kolla is cloning a Git repository during the build process, the `.git/config` file retains the remote origin URL, which may expose sensitive credentials if authentication tokens are embedded in the URL. This fix ensures that the remote is removed after cloning to prevent unintended exposure of credentials. Closes-Bug: #2098904 Change-Id: Iec21fc2363e03133ec77326da7392bc25b40132a 2024-08-27T20:20:32+00:00 Michal Nasiadka mnasiadka@gmail.com 2024-03-26T11:07:14+00:00 urn:sha1:ece67cd2aec82d661ba355ce6bc6e41bb88001b6 Change-Id: I802267d848c1dee722015b0d379bd9210f6c103e 2024-03-28T16:29:14+00:00 Zuul zuul@review.opendev.org 2024-03-28T16:29:14+00:00 urn:sha1:95a671b00df7625a357aa73f99f75965cb08aff2 2024-02-21T08:26:52+00:00 Michal Nasiadka mnasiadka@gmail.com 2024-02-14T13:02:50+00:00 urn:sha1:750a137815f1ca58c7e65d23e9d63403ea282b1a Move most curl sources to sources.py, so it can be automatically updated in future. This also makes overriding the versions/locations/sha256 easier. Change-Id: Ib3497fe96162ae190e5c113cacaaa3ef8334f590 2024-02-08T00:16:05+00:00 Tadas Sutkaitis tadasas@gmail.com 2023-07-20T21:44:37+00:00 urn:sha1:3ee1a82d8761902a75e075ccbcd8e9e02a226051 The main goal is to be able to build ARM images on standard x86 hardware. Add simple functions supported by python-py and podman-py to enable creation of container images on emulated architectures. Change-Id: I1526b460f6e271c2ec63ab3a3b1dc348d742e96d 2023-11-28T11:07:42+00:00 Bartosz Bezak bartosz@stackhpc.com 2023-11-28T11:02:41+00:00 urn:sha1:ef4bd9bbcd2b8b1df067004b806ee6cbcf2f6467 Change-Id: I473ea1c68d2fd7f15fa0545d77892276b1accfeb 2023-09-29T04:59:16+00:00 Michal Nasiadka mnasiadka@gmail.com 2023-09-26T19:38:07+00:00 urn:sha1:1d204e759ae5ac46b3fb6fe4ecfcfd819b8392b6 Example: Traceback (most recent call last): File "/home/ubuntu/kolla/kolla/image/build.py", line 79, in run task.run() File "/home/ubuntu/kolla/kolla/image/tasks.py", line 144, in run self.builder(self.image) File "/home/ubuntu/kolla/kolla/image/tasks.py", line 424, in builder if isinstance(e, podman.errors.exceptions.BuildError): NameError: name 'podman' is not defined Change-Id: I947c77750b3ccfb975e010c2042a3716e3e46bde 2023-09-21T09:01:21+00:00 Michal Arbet michal.arbet@ultimum.io 2023-09-12T00:28:08+00:00 urn:sha1:b76bd4c6efa22af43d7895a7b5e95c75806d3893 Add podman as an option to choose for container engine for kolla-build (--engine podman) Signed-off-by: Konstantin Yarovoy <konstantin.yarovoy@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I068c906df97745e397408d8c3ef6af47ee037638