aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
10 daysMerge "Install syslinux in debian ironic-conductor containers" into ↵stable/2026.1Zuul2-0/+9
stable/2026.1
2026-10-21CI: Adapt role names after Zuul landed collections supportMichal Nasiadka1-2/+2
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/1011772 Change-Id: I2457d03c340c38111f3ce3e190e70f5584c842ed Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 124ec18eacd6fdf892d8b6c4d32ccfedecaeb66e)
2026-10-12Install syslinux in debian ironic-conductor containersJed Preist2-0/+9
Install syslinux in debian ironic-conductor containers, to provide files required for creating disk images that can be booted with the redfish-virtual-media boot interface Closes-Bug: #2163659 Change-Id: I61360a9062e365a3ae09853908e8aca8e04597bb Signed-off-by: Jed Preist <jed@stackhpc.com> (cherry picked from commit 9a972298bb490d4ead8f2d5ed68f500a2f55f4b9)
2026-09-29Merge "grafana: install Prometheus datasource plugin" into stable/2026.1Zuul2-1/+11
2026-09-17CI: add letsencrypt scenarioBartosz Bezak2-0/+13
Change-Id: Ic188d411ed0dd36e1703c6ff4e657872703670a4 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit f584ba56bc5169655cece65995cd6d6dc7664cde)
2026-09-16grafana: install Prometheus datasource pluginPiotr Milewski2-1/+11
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit aece83cc507ac587769ae61d011161d462dafb1d)
2026-08-26stable-only: Update Prometheus to version 3.5.522.2.0Pierre Riteau2-3/+7
Change-Id: If19d55a88975e6717eec2b9cac9fd28b050028e9 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-08-03ironic-pxe: don't fail if symlinks already exist22.1.0Owen Jones2-4/+8
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com> (cherry picked from commit 2da1223d8301da05f9b070ca656d62c1bde93c66)
2026-07-30CI: add prometheus-opensearch scenarioBartosz Bezak2-0/+13
Change-Id: Ia0db3a7e6c31dc86129456c554b72a386fa254ec Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 4b869009c3336ab0f68353e71fcef30dd4cf44b3)
2026-07-22CI: run copr periodic job only on masterBartosz Bezak1-0/+1
Change-Id: Ic17e82b4c5b75b8910fd47794326c0b26b50bfdd Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit d77c185bed0f2634893a288ee3ea3a6e7ad4feaf)
2026-07-09Adopt an AI policyDr. Jens Harbott2-2/+45
From the experience we have made so far, a lot of AI based contributions tend to cause more work rather than they bring benefit. So we caution people to avoid this when possible. The wording of the policy was adapted from the Zuul project [0]. [0] https://review.opendev.org/c/zuul/zuul/+/993998 Co-Authored-By: James E. Blair <jim@acmegating.com> Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I5fcd5bea33c4f4c87b6f6cf0a96514e8d2da3af3 (cherry picked from commit a1d8036c5cb7731a5488cbdc695eb3c0a27bf4cb)
2026-06-23Merge "CI: Switch periodics to periodic-stable" into stable/2026.1Zuul3-3/+3
2026-06-19Update Prometheus to version 3.5.4Pierre Riteau2-3/+7
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.4 Change-Id: I1ec8f15e14360422aa316779bd19195fd1f4f7a1 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit e4114abcdaa604d243da48ea0187fd5673191eb6)
2026-06-16CI: Switch arm64 publish jobs to periodic-weeklyPierre Riteau2-0/+4
OpenDev does not have enough aarch64 node capacity at this point and the backlog has grown to several days, which is also blocking non-arm64 periodic jobs. This means new Kolla images are not published to Quay.io. Switch arm64 publish jobs to periodic-weekly so they stop blocking other publish jobs. Change-Id: Iffa7e2908c1beb083a9535e7328dcab687248c06 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit c2a33b186be3c5991c85fdc0fa5172f52e55900a)
2026-06-16CI: Switch periodics to periodic-stableMichal Nasiadka3-3/+3
Change-Id: Ibf803f197d65e08ba2840eca6e23dca3ce565838 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-15Install and start virtlogd in nova-libvirt.Michael Still2-1/+16
Due to implementation choices in qemu and libvirt, standard log rotate does not work on these console files, and instead the usual approach is to have libvirt's virtlogd rotate the contents of the console log file when it gets a bit big. OpenStack Compute knows how to read data from more than one rotated console log file if required to service a REST API request. OpenStack Kolla and Kolla-Ansible deploy OpenStack components in docker or podman containers. An error in the startup configuration for the nova_libvirt container results in the libvirt virtlogd daemon not being run, which results in this console log rotation not occurring. This opens up the risk of a disk usage denial of service attack on a hypervisor. The console log is stored on the same filesystem as ephemeral disks, and OpenStack Nova will take a hypervisor out of service if disk space becomes constrained. There is some protection from the instance console not being able to write data particularly quickly, but it is definitely still possible to fill the hypervisor file system -- especially if multiple instances are used. This misconfiguration appears to exist in all versions of Kolla / Kolla-Ansible as best as I can tell. Partial-Bug: 2155214 Change-Id: Ib62191e3022e5bcff781c12f662c9800fb210eb9 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 97d1352f225509bcb5e3e25013e9bfe1f3c995f0)
2026-06-11kolla-build: Use SandboxedEnvironment to prevent SSTIMichal Nasiadka4-3/+115
Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
2026-06-11Merge "Revert "kolla-toolbox: Pin openstacksdk to 4.14.0"" into stable/2026.1Zuul1-1/+1
2026-06-11Merge "keepalived: Install mariadb client package" into stable/2026.1Zuul1-2/+6
2026-06-11Revert "kolla-toolbox: Pin openstacksdk to 4.14.0"Michal Nasiadka1-1/+1
This reverts commit 214fc1c123ace93d0fd75c1536a550a3b7bea7f4. Reason for revert: openstack.cloud 2.6.0 was released with a fix Signed-off-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I68999a73556dcce3060c9059d9b6a3cec122acbb
2026-06-10kolla-toolbox: Pin openstacksdk to 4.14.0Michal Nasiadka1-1/+1
4.15.0 is out and it broke openstack.cloud modules Change-Id: I8e0f7663339964ca4418e38314adcb0487833464 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-09keepalived: Install mariadb client packageMichal Nasiadka1-2/+6
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/992020 Related-Bug: #2155865 Change-Id: I1c67f6b0f4780b7caf83ccf95a20861d9fefe20b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 7477b2244ee525ffd6effeb4229608991c639fc8)
2026-05-22Merge "horizon: rebuild static assets after theme changes" into stable/2026.1Zuul2-1/+9
2026-05-15Add 2026.1 preludeMichal Nasiadka1-0/+43
Change-Id: I585ed69a67940dec907996324ce98b5efbf02fe6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-14horizon: rebuild static assets after theme changesGrzegorz Koper2-1/+9
Include the theme directory in settings_bundle so theme-only changes invalidate the cache and rebuild the static assets. Closes-Bug: #2148389 Change-Id: If4fbc24c5c339f7dee7bf67a09fc6448ede0c9fd Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> (cherry picked from commit 21cacdd855bca15be846d392ec6795d667bf8ac1)
2026-05-13Ignore D001 Line too long errors in release notesPierre Riteau1-0/+9
The release notes job was changed [1], leading to build failures. Resolve by ignoring errors in existing files. [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/RLOKQLQUDAVSML4C4OW2EM4OXOGRCYBA/ Change-Id: I3db224fbf7ffaf153fb6307d506fdad980bb429d Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 5c3d61abbbc3b5c0c484f5054def1ba294145eed)
2026-05-10Merge "ironic-pxe: Remove httpd setup call" into stable/2026.122.0.0.0rc222.0.0Zuul1-2/+0
2026-05-08ironic-pxe: Remove httpd setup callMichal Nasiadka1-2/+0
We're not using ironic-pxe as ironic-http anymore and kolla_httpd_setup has been removed from base. Change-Id: Id25e39cee9fd64d147301a39528aa8525bd682c2 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 5df2cc1252265bacef4d1dee30355d1ff5464709)
2026-05-08Remove influxdb from repos.yamlMichal Nasiadka3-11/+0
It was ommitted in the original influxdb removal patch [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/973051 Change-Id: Ie28d1cc615cc09f013438285b4dcbc2dbab0f4b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 83b8161b12bb1a32b8b872c46533cfa6a2fe9d7f)
2026-05-07Update TOX_CONSTRAINTS_FILE for stable/2026.1OpenStack Release Bot1-3/+3
Update the URL to the upper-constraints file to point to the redirect rule on releases.openstack.org so that anyone working on this branch will switch to the correct upper-constraints list automatically when the requirements repository branches. Until the requirements repository has as stable/2026.1 branch, tests will continue to use the upper-constraints list on master. Change-Id: I23df187c7fd2494de22c50f80e220838886d5f67 Signed-off-by: OpenStack Release Bot <infra-root@openstack.org> Generated-By: openstack/project-config:roles/copy-release-tools-scripts/files/release-tools/functions
2026-05-07Update .gitreview for stable/2026.1OpenStack Release Bot1-0/+1
Change-Id: I7f7509ce6b76d2e04682bc06de9fb125de64244a Signed-off-by: OpenStack Release Bot <infra-root@openstack.org> Generated-By: openstack/project-config:roles/copy-release-tools-scripts/files/release-tools/functions
2026-05-06Drop apache installation outside of httpd container22.0.0.0rc1Michal Nasiadka11-81/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986483 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986352 Change-Id: Ia66dde09bbbad2a5a9e67a8c642f3223ca38be43 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-05set_configs: Add support for creating directories and setting permsMichal Nasiadka4-0/+151
Change-Id: Id63c035fafaa68a9004c65161c5a3a3ad5544f02 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-04Merge "Remove Babel from openstack-base"Zuul1-1/+0
2026-05-04Merge "Bump OVN to 26.03 in Rocky Linux 10 images"Zuul4-6/+6
2026-05-04Remove Babel from openstack-basePierre Riteau1-1/+0
The Babel dependency was removed from most OpenStack projects years ago. Change-Id: I21fc99f42b0fbfa45ff2d9366ea603866e6682d4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-05-04Merge "Update Prometheus to version 3.5.3"Zuul3-7/+7
2026-04-29Update Prometheus to version 3.5.3Piotr Milewski3-7/+7
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.3 Change-Id: I9f4243a40d0907639324308d84d8a860c1e54941 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-28Bump OVN to 26.03 in Rocky Linux 10 imagesBartosz Bezak4-6/+6
Change-Id: I3f0dab4b7d612d3e3f3057c1db8c36e3905cec75 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-04-28keystone: Remove wsgi fileMichal Nasiadka2-3/+0
Kolla-Ansible has been migrated long ago to use uwsgi app instead of file. Change-Id: I347c6f89136427347e9443c85230632474adb7eb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Remove httpd_setup calls from api containersMichal Nasiadka21-47/+0
We have dropped mod_wsgi support from services in [1]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/982414 Change-Id: Ie5da8427706dfb74bad4e174c990355a6870114c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Drop mod_wsgiMichal Nasiadka2-4/+0
It's not needed since [1]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/982414 Change-Id: I39ab300240b0178f3697ff2dcdf1fab2c3b828bf Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Remove upper-constraints from Kolla linters.Michael Still4-2/+5
Linting on master for Kolla is failing right now. The root cause is that master's upper-constraints.txt pins pathspec===1.1.0, but ansible-lint 26.4.0 requires pathspec<1.1.0,>=1.0.3. Sadly not using upper-constraints in Kolla linters is a little more complex than in Kolla-Ansible because of the inheritance of tox dependencies. This patch therefore moves ansible-lint from test-requirements.txt to a new lint-requirements.txt file. Change-Id: I751ab5eb7a798502e79228568bda53fdec4971d6 Signed-off-by: Michael Still <mikal@stillhq.com>
2026-04-27Merge "Update Prometheus to version 3.5.2"Zuul3-7/+7
2026-04-27Merge "Drop zun and kuryr"Zuul25-327/+9
2026-04-27Merge "Switch to binary release of OpenStack Network exporter"Zuul3-34/+18
2026-04-24Update Prometheus to version 3.5.2Pierre Riteau3-7/+7
Change-Id: I9d82fbcc26a8a3af2718ea8e1f2e0d87a3523579 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-04-24Drop zun and kuryrMichal Nasiadka25-327/+9
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Change-Id: I770b9e62c66f8cc63475d51f80eecacc8415b91f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Switch to binary release of OpenStack Network exporterDoug Szumski3-34/+18
We no longer need to build this from source: aharivel has kindly responded to our request to create a release: https://github.com/openstack-k8s-operators/openstack-network-exporter/releases Needed-By: I35b3bb10aec18a9377515e8c04d2542e712c0f12 Change-Id: Id30cab4e4bbac470f33354870fd941c3ea17815c Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-24Remove reference to deprecated app.wsgi in Aodh imagePiotr Milewski1-4/+1
The app.wsgi entry point has been removed upstream in Aodh 2026.1 (see: https://review.opendev.org/c/openstack/aodh/+/983216) Change-Id: I2738b7844bf852f2a0a1ca903463f92ffc25f4d2 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 13:26:43 +0000