aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2026-09-16grafana: install Prometheus datasource pluginstable/2025.2Piotr Milewski2-1/+11
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit aece83cc507ac587769ae61d011161d462dafb1d)
2026-08-31stable-only: Update Prometheus to version 3.5.521.3.0Pierre Riteau2-3/+7
Change-Id: If19d55a88975e6717eec2b9cac9fd28b050028e9 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit c4e23082aaf2329ffd1b1ddb3992a881aa53af3f)
2026-08-03ironic-pxe: don't fail if symlinks already exist21.2.0Owen Jones2-4/+8
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com> (cherry picked from commit 2da1223d8301da05f9b070ca656d62c1bde93c66)
2026-07-22CI: run copr periodic job only on masterBartosz Bezak1-0/+1
Change-Id: Ic17e82b4c5b75b8910fd47794326c0b26b50bfdd Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit d77c185bed0f2634893a288ee3ea3a6e7ad4feaf)
2026-07-09Adopt an AI policyDr. Jens Harbott2-2/+45
From the experience we have made so far, a lot of AI based contributions tend to cause more work rather than they bring benefit. So we caution people to avoid this when possible. The wording of the policy was adapted from the Zuul project [0]. [0] https://review.opendev.org/c/zuul/zuul/+/993998 Co-Authored-By: James E. Blair <jim@acmegating.com> Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I5fcd5bea33c4f4c87b6f6cf0a96514e8d2da3af3 (cherry picked from commit a1d8036c5cb7731a5488cbdc695eb3c0a27bf4cb)
2026-06-25Merge "[2025.2 and older] Create Ironic temp directory" into stable/2025.2Zuul2-0/+16
2026-06-24Merge "Update Prometheus to version 3.5.4" into stable/2025.2Zuul2-3/+7
2026-06-23Merge "Install and start virtlogd in nova-libvirt." into stable/2025.2Zuul2-1/+15
2026-06-22Install and start virtlogd in nova-libvirt.Michael Still2-1/+15
Due to implementation choices in qemu and libvirt, standard log rotate does not work on these console files, and instead the usual approach is to have libvirt's virtlogd rotate the contents of the console log file when it gets a bit big. OpenStack Compute knows how to read data from more than one rotated console log file if required to service a REST API request. OpenStack Kolla and Kolla-Ansible deploy OpenStack components in docker or podman containers. An error in the startup configuration for the nova_libvirt container results in the libvirt virtlogd daemon not being run, which results in this console log rotation not occurring. This opens up the risk of a disk usage denial of service attack on a hypervisor. The console log is stored on the same filesystem as ephemeral disks, and OpenStack Nova will take a hypervisor out of service if disk space becomes constrained. There is some protection from the instance console not being able to write data particularly quickly, but it is definitely still possible to fill the hypervisor file system -- especially if multiple instances are used. This misconfiguration appears to exist in all versions of Kolla / Kolla-Ansible as best as I can tell. Partial-Bug: 2155214 Change-Id: Ib62191e3022e5bcff781c12f662c9800fb210eb9 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 97d1352f225509bcb5e3e25013e9bfe1f3c995f0)
2026-06-22Update Prometheus to version 3.5.4Pierre Riteau2-3/+7
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.4 Change-Id: I1ec8f15e14360422aa316779bd19195fd1f4f7a1 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit e4114abcdaa604d243da48ea0187fd5673191eb6)
2026-06-19[2025.2 and older] Create Ironic temp directoryJed Preist2-0/+16
Creates a temp directory at /var/lib/ironic/tmp inside the Ironic container. Change-Id: Ia35c87428841e57a04b42541021d6b7daa3cd43a Signed-off-by: Jed Preist <jed@stackhpc.com>
2026-06-16CI: Switch arm64 publish jobs to periodic-weeklyPierre Riteau1-0/+2
OpenDev does not have enough aarch64 node capacity at this point and the backlog has grown to several days, which is also blocking non-arm64 periodic jobs. This means new Kolla images are not published to Quay.io. Switch arm64 publish jobs to periodic-weekly so they stop blocking other publish jobs. Change-Id: Iffa7e2908c1beb083a9535e7328dcab687248c06 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit c2a33b186be3c5991c85fdc0fa5172f52e55900a)
2026-06-11kolla-build: Use SandboxedEnvironment to prevent SSTIMichal Nasiadka4-3/+115
Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
2026-06-09keepalived: Install mariadb client packageMichal Nasiadka1-2/+6
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/992020 Related-Bug: #2155865 Change-Id: I1c67f6b0f4780b7caf83ccf95a20861d9fefe20b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 7477b2244ee525ffd6effeb4229608991c639fc8)
2026-05-22Merge "Update Prometheus to version 3.5.3" into stable/2025.2Zuul3-7/+7
2026-05-14horizon: rebuild static assets after theme changesGrzegorz Koper2-1/+9
Include the theme directory in settings_bundle so theme-only changes invalidate the cache and rebuild the static assets. Closes-Bug: #2148389 Change-Id: If4fbc24c5c339f7dee7bf67a09fc6448ede0c9fd Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> (cherry picked from commit 21cacdd855bca15be846d392ec6795d667bf8ac1)
2026-05-13Ignore D001 Line too long errors in release notesPierre Riteau1-0/+9
The release notes job was changed [1], leading to build failures. Resolve by ignoring errors in existing files. [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/RLOKQLQUDAVSML4C4OW2EM4OXOGRCYBA/ Change-Id: I3db224fbf7ffaf153fb6307d506fdad980bb429d Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 5c3d61abbbc3b5c0c484f5054def1ba294145eed)
2026-05-04Update Prometheus to version 3.5.3Piotr Milewski3-7/+7
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.3 Change-Id: I9f4243a40d0907639324308d84d8a860c1e54941 Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit 655991d734af3d44c44e1fb4e47b7a850807258f)
2026-04-15Return missing systemd-udev into cinder and glance containers21.1.0Victor Chembaev2-2/+4
systemd-udev package provides /usr/lib/udev/scsi_id tool, required for operating with scsi-attached storage Closes-Bug: #2148205 Change-Id: I7b0c25d361fc61992089ee88625fb3ab63c12fb4 Signed-off-by: Victor Chembaev <chembervint@gmail.com> (cherry picked from commit 5096d8bff2519e983cb1c1b06a96a55f1849d87a)
2026-04-10Remove dsa from haproxy-ssh host key typesAntony Messerli1-1/+1
CentOS/Rocky 10 no longer supports DSA keys, causing haproxy-ssh to fail on startup with "unknown key type dsa". This aligns haproxy-ssh with the same fix already applied to keystone-ssh and nova-ssh. Closes-Bug: #2143880 Change-Id: I3990c2c67756378063e0867edcd004e8d28574dd Signed-off-by: Antony Messerli <antony@mes.ser.li> (cherry picked from commit 01fef6fc62c4dbf3c7f75bde1cdcf73e1b1745aa)
2026-04-09Merge "CI: Drop changing visibility using uri" into stable/2025.2Zuul5-33/+0
2026-04-07CI: Drop changing visibility using uriMichal Nasiadka5-33/+0
It has not been working and leaks secret Related-Bug: #2147406 Change-Id: If5c1905a096d776811ce932cb040e20f5dfebf82 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 8745919e6ce5b9648776ab8f8a9d8947b4d1f252)
2026-04-02Re-enable SPICE support on Ubuntu Noble.Michael Still2-0/+14
The move to Ubuntu Noble for Kolla 2025.1 onwards accidentally broke SPICE consoles for Nova (both Horizon and spice-direct). This is because Debian and Ubuntu now package the SPICE support in a separate package. Without this package, an attempt to start an instance in Nova requiring SPICE will result in messages like this in the nova-libvirt logs: libvirt.libvirtError: unsupported configuration: spice graphics are not supported with this QEMU And the instance will enter an error state. The fix is to install the `qemu-system-modules-spice` package as well in the nova-libvirt image. Closes-Bug: #2138186 Change-Id: Ib4ced4a04353b9c11c6f0abb7cfa91001b239e53 Signed-off-by: Michael Still <mikal@stillhq.com>
2026-03-25Merge "Add Open vSwitch/OVN versions to support matrix" into stable/2025.2Zuul4-1/+27
2026-03-16Update Prometheus to version 3.5.1Pierre Riteau2-3/+7
Change-Id: I66015b45f2c1f915e1aadc57af9c3d239e9c2472 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 5a0e470152471e27ed04419f27523355abfc6d89)
2026-03-06Fix MariaDB version numberSeunghun Lee1-1/+1
MariaDB was bumped to 11.4 LTS with [1] [1] https://review.opendev.org/c/openstack/kolla/+/926981 Change-Id: I068c16974f2088746a91b61c583591042619b591 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com> (cherry picked from commit 761b0c0beb564d81fcbd420099ea7512e83bb789)
2026-03-03Add Open vSwitch/OVN versions to support matrixPierre Riteau4-1/+27
Change-Id: I1436c52b7199309a75c38799fb64799f4607a263 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 0f8932b5a6a83853e8d39e46067ec6288750814e)
2026-02-10Remove special handling for python3.12Pierre Riteau2-23/+0
This is not required anymore since we have switched to Rocky Linux 10. Change-Id: I10b68c2d3afa91cabf9341df75d8cf9f626c0f9b Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 64475a0b1b4dccbc3b817c78453e1d027b3f0d68)
2026-02-10horizon: pin setuptools <82Bartosz Bezak1-2/+5
setuptools 82 removed pkg_resources [1] [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 Related-Bug: #2141293 Change-Id: Iced7662f7e58b9f094306e9a6c4f1b5a79f48b17 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 4cdf881631eb0a671b9f70d5afefa6ead1949118)
2026-01-23Merge "Fix ironic-pxe syslinux-tftpboot on aarch64 Rocky Linux" into ↵Zuul2-6/+7
stable/2025.2
2026-01-22Fix ironic-pxe syslinux-tftpboot on aarch64 Rocky LinuxBartosz Bezak2-6/+7
Closes-Bug: #2138872 Change-Id: I6e30b749488a0ef2f247adf182db40cda8fa8ca4 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 900fd8002a6a6538d48127e232b9ac0ba4499b99)
2026-01-22Update README with new mission statementDr. Jens Harbott2-27/+30
We have said for a long time that the images that the project produces are only meant for testing purposes, amend the documentation to be more explicit about it. - Add a release note stating the same stable-only: Dropped the further updates to the README Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: Ia04afe6387f94e33ca087dcf9d369ef22b8e8f28 (cherry picked from commit 1a3987372c857f8ca5e4ecd9c4be7b617df0e758)
2026-01-13Add genisoimage package to nova-compute-ironicRafal Lewandowski2-1/+11
Closes-Bug: #2132960 Change-Id: I672f625e445bd1a2db1c4994baa7c44c20723a62 Signed-off-by: rafal Lewandowski <rafal@stackhpc.com> (cherry picked from commit 96b54022857ccef8dc6bb11789abe32119827109)
2026-01-13Switch publishing jobs to periodic-stable pipelineDr. Jens Harbott3-3/+3
So that they can be properly tracked. Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: Iee576232130ddaaf71f10f89f6828b74506c875b
2026-01-12CI: Fix publish job secret aliasesBartosz Bezak4-9/+17
Change-Id: Ib7c2d8419932e049db871053c3b4faad791c3566 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 5a47700917e51ce4f3fe5bc4b4197f09bf0fce32)
2026-01-10Update repo GPG key for influxdata.Michael Still3-2/+8
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit b852b8ce32a53cd747d8385e6185d2ad521dee5d)
2026-01-09CI: rotate zuul secretsBartosz Bezak5-63/+66
and store COPR webhook URLs as list Change-Id: Ic75619db8c4b4f02bc51f4bfa6ae067acd1ba7e8 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 9d9c922c51bec2f18ff64399d8feb55157d2959a)
2025-12-03mariadb: Switch EL to mariadb upstream reposMichal Nasiadka1-4/+1
Change-Id: I8fa363e7e9bc87195adaf218c46d6e9fb4575419 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 3b1fe42e32a734fe555e9377b23faae4984a62ce)
2025-12-02manila: Stop enabling kolla_el10 COPR repoMichal Nasiadka1-4/+0
This repo enablement is here by mistake, the glusterfs-fuse package installation has been removed in the original CentOS Stream 10 patch. Change-Id: I395fcae7fd39ea7488191690f994ad98a8184f65 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 14a7644a1e458dcfe8e928d9ea032b0465da08f5)
2025-11-27rocky: Remove EPEL hack - 10.1 is outMichal Nasiadka1-5/+0
Change-Id: I60de8ef452adad4a9b0d974a2678264b91eb6e3b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit cbbc1b0bca94e0f768be8433ba4bd38cb6f0c583)
2025-11-19Transition to the new rabbitmq Debian package archives.Michael Still4-7/+14
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 0fc73a644bdb7e4f583ba5ebf7ee3fcd60fb8ffc)
2025-11-10Update TOX_CONSTRAINTS_FILE for stable/2025.221.0.0.0rc221.0.0OpenStack Release Bot1-3/+3
Update the URL to the upper-constraints file to point to the redirect rule on releases.openstack.org so that anyone working on this branch will switch to the correct upper-constraints list automatically when the requirements repository branches. Until the requirements repository has as stable/2025.2 branch, tests will continue to use the upper-constraints list on master. Change-Id: Ifb73233a7f09959c321a97bd7bd672747eff4c54 Signed-off-by: OpenStack Release Bot <infra-root@openstack.org> Generated-By: openstack/project-config:roles/copy-release-tools-scripts/files/release-tools/functions
2025-11-10Update .gitreview for stable/2025.2OpenStack Release Bot1-0/+1
Change-Id: I0dbf391094eb34fb52274a35fdb1008322904c3b Signed-off-by: OpenStack Release Bot <infra-root@openstack.org> Generated-By: openstack/project-config:roles/copy-release-tools-scripts/files/release-tools/functions
2025-11-07Tidy up release notes for Flamingo release21.0.0.0rc1Bartosz Bezak11-26/+47
Change-Id: I10f47d3454fd81a36aa7a724050869ef680e88b4 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-11-06Merge "Add httpd image for OIDC/SAML frontend in uWSGI case"Zuul2-0/+46
2025-11-05debian: use valkey from bookworm-backportsBartosz Bezak2-2/+10
To fix arm64 valkey build. The virtual `valkey` resolves to `valkey-server` in bookworm-backports, but our global -1000 pin blocks it. Amd64 worked only because extrepo shipped it. Use valkey directly from the backports packages instead. follow up to https://review.opendev.org/c/openstack/kolla/+/932174 Change-Id: I846e4f19696ca28758cb9c0400be96c01b079daa Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-11-03Bump versions of packages in sources.pyMichal Nasiadka2-11/+12
Change-Id: I395cfdf22cd87a43294dbae561a8872cb0b48e1b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-31CI: Fix publish secret for arm64Michal Nasiadka1-1/+1
Change-Id: Ifd0b4d511aa5481ff9066c81289457383932079b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30CI: Fix missing variable in publish jobsMichal Nasiadka3-3/+3
Change-Id: Ie76463977d2e9e4358bcd37b62cc8172813cf7b4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30Merge "Add Valkey"Zuul6-1/+112
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 19:04:25 +0000