openstack/kolla.git/kolla/image, branch stable/2026.1Unnamed repository; edit this file 'description' to name the repository.
https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.12026-06-11T19:36:25+00:00kolla-build: Use SandboxedEnvironment to prevent SSTI2026-06-11T19:36:25+00:00Michal Nasiadkamnasiadka@gmail.com2026-06-10T16:27:50+00:00urn:sha1:d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e
Switch from jinja2.Environment to
jinja2.sandbox.SandboxedEnvironment to block Server-Side Template
Injection attacks.
Closes-Bug: #2146056
Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
(cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
Merge "Add OCI standard labels to container images"2026-03-31T12:07:07+00:00Zuulzuul@review.opendev.org2026-03-31T12:07:07+00:00urn:sha1:205bc944be6c67d81bc2b9f3b7d3303faaf5b866Add OCI standard labels to container images2026-03-30T18:47:21+00:00Piotr Milewskivurmil@gmail.com2025-12-23T09:30:02+00:00urn:sha1:cbca935b87b4606534fc08d2cae80d864af51c7c
Currently, Kolla images lack standard metadata, making it difficult
to identify their build source, creation time, or exact version solely
by inspecting the image artifact.
This patch introduces the addition of Open Container Initiative (OCI)
standard labels to all generated images. The build process now detects
metadata (utilizing `direct_url.json` for pip-installed packages to
avoid subprocess calls) and injects the following labels into the
container runtime config:
* org.opencontainers.image.authors
* org.opencontainers.image.created
* org.opencontainers.image.description
* org.opencontainers.image.licenses
* org.opencontainers.image.revision
* org.opencontainers.image.source
* org.opencontainers.image.title
* org.opencontainers.image.url
* org.opencontainers.image.version
Example output:
"Labels": {
"org.opencontainers.image.authors": "Kolla Project (https://launchpad.net/kolla)",
"org.opencontainers.image.created": "2025-12-22T14:02:47.015819",
"org.opencontainers.image.description": "OpenStack Kolla keystone-ssh image",
"org.opencontainers.image.licenses": "Apache-2.0",
"org.opencontainers.image.revision": "96b54022857ccef8dc6bb11789abe32119827109",
"org.opencontainers.image.source": "https://opendev.org/openstack/kolla",
"org.opencontainers.image.title": "keystone-ssh",
"org.opencontainers.image.url": "https://opendev.org/openstack/kolla",
"org.opencontainers.image.version": "master-ubuntu-noble"
}
This enhancement improves the interoperability of Kolla images with
standard container tools and registries that display OCI metadata.
Change-Id: I3451940c90180ba91759c839987434e94251e32e
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Drop Telegraf2026-01-22T13:53:19+00:00Michal Nasiadkamnasiadka@gmail.com2026-01-22T13:52:10+00:00urn:sha1:b9d760137704b50fab538f6cb5324dc8b9f77851
It has been deprecated in June 2025.
Change-Id: I45bfed8ac7fd86dedab81533751e573272c01012
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Switch to Debian Trixie2025-12-16T12:15:22+00:00Michal Nasiadkamnasiadka@gmail.com2025-10-24T14:58:36+00:00urn:sha1:cee27f6426f49b4242b0535d0e0dee6f8a44dbda
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
redis: Drop redis and redis-sentinel images2025-12-03T11:06:34+00:00Michal Nasiadkamnasiadka@gmail.com2025-12-03T09:31:30+00:00urn:sha1:2da1676d7a861ff921936443861559f1b994f776
We switched to Valkey
Change-Id: Ic40fecb87dd3eaf67eb1d3088978d462ff5b4320
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Merge "debian: Use {{ openstack_release_codename }} for extrepo"2025-10-06T14:17:59+00:00Zuulzuul@review.opendev.org2025-10-06T14:17:59+00:00urn:sha1:ccaf00b93663fceb56571c8920b549a58c3603d2Move to Rocky Linux 102025-10-01T12:39:22+00:00Michal Nasiadkamnasiadka@gmail.com2025-08-05T12:24:11+00:00urn:sha1:d4b777bb060517dbb0b648d5d7d5c07336969866
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237
Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
debian: Use {{ openstack_release_codename }} for extrepo2025-09-23T12:51:50+00:00Michal Nasiadkamnasiadka@gmail.com2025-08-06T08:36:11+00:00urn:sha1:d9a4b6cfa946e66f6304c06e6fc27a5c7b72d56c
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Merge "Enable Prometheus mtail build for ARM64"2025-08-20T13:58:48+00:00Zuulzuul@review.opendev.org2025-08-20T13:58:48+00:00urn:sha1:1c5239e1938a03a64a838ac54ea5e7c5681c6f83