aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2025-03-17debian: Use Dalmatian extrepo releaseMichal Nasiadka2-1/+6
Change-Id: I954106dc32b4c08604d5c40e00fe53e5bb18b266
2025-02-25[release] Use UCA EpoxyGrzegorz Koper2-2/+2
Change-Id: I6c15cf0fd7b8f1cc3339936c58ad8a8581cfc570
2025-02-21Merge "CI: Use ansible-lint for CI roles and playbooks"Zuul15-67/+94
2025-02-21CI: Add rocky support to process_build_logs.pyMichal Nasiadka1-1/+1
Change-Id: I57e05a235359547a4477dc869e92047818dc5c15
2025-02-20CI: Use ansible-lint for CI roles and playbooksMichal Nasiadka15-67/+94
Removing dbus-python deps because now a-c-k handles that. Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/942179 Change-Id: I97a97da73a7ccb27789e979656867e4adfe8a633
2025-02-19Remove Git remote origin after cloning sourcesMichal Arbet2-0/+6
When kolla is cloning a Git repository during the build process, the `.git/config` file retains the remote origin URL, which may expose sensitive credentials if authentication tokens are embedded in the URL. This fix ensures that the remote is removed after cloning to prevent unintended exposure of credentials. Closes-Bug: #2098904 Change-Id: Iec21fc2363e03133ec77326da7392bc25b40132a
2025-02-18Merge "CI: Move pre tasks into roles"Zuul3-195/+77
2025-02-18Allow to use configure_user macro for external templatesAndriy Kurilin8-1/+175
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to build 'in-house'/'not-built-in' projects with Kolla. This commits extends this feature with an ability to use configure_user macro for 'not-built-in' users. The implementation is done the same way as for 'sources', i.e. engine after registers new section structure as soon as it finds unknown '<project>-user' section. In addition, the documentation and CI are extended to cover ``--docker-dir`` option. Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
2025-02-17CI: Move pre tasks into rolesMichal Nasiadka3-195/+77
Change-Id: If5aa7371d14041d6e0efca866341be2894fd6f87
2025-02-14Merge "Add ovn-sb-db-relay image with newer ovn-ctl"Zuul1-0/+15
2025-02-11Merge "Adds missing nvme package in cinder-backup"Zuul2-3/+3
2025-02-07Fix permissions for ironic metricsMichal Arbet3-1/+14
This patch adds creation of metrics folder, set permissions and SetGID bit. Closes-Bug: #2097098 Change-Id: Ic46b895775edf5e5fb2b637be49e2de1eb4adf36
2025-02-06Install pycadf from pypi packageMichal Arbet11-17/+10
Previously, the `pycadf` package did not include configuration files, so they were manually installed from source. However, this was fixed in pycadf's upstream in [1], allowing us to rely on the package itself. Additionally, the `ceilometer_api_audit_map.conf` file has been removed, as it was dropped in pycadf's upstream commit here [2] [1] https://review.opendev.org/c/openstack/pycadf/+/936741 [2] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I022aa4c403f08385beb83b5d0c81f8abb42eb4a7
2025-02-02Merge "Prometheus update all exporters to the latest versions"Zuul2-27/+44
2025-01-31Bump pycadf version to 4.0.1Michal Arbet2-2/+1
This patch also removing copy of ceilometer_api_audit_map.conf file as it is now removed [1]. [1] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I7c086ed5da0e3713ac15aaeaceb38f4a05b84bf0
2025-01-30Prometheus update all exporters to the latest versionsPiotr Milewski2-27/+44
prometheus-alertmanager: 0.27.0 -> 0.28.0 prometheus-blackbox-exporter: 0.24.0 -> 0.25.0 prometheus-cadvisor: 0.49.1 -> 0.49.2 prometheus-elasticsearch-exporter: 1.7.0 -> 1.8.0 prometheus-memcached-exporter: 0.14.2 -> 0.15.0 prometheus-mtail: 3.0.0-rc54 -> 3.0.8 prometheus-mysqld-exporter: 0.15.1 -> 0.16.0 prometheus-node-exporter: 1.7.0 -> 1.8.2 prometheus 2.50.1 -> 2.55.1 Co-authored-by: Piotr Parczewski <piotr@stackhpc.com> Change-Id: I9359df23a41a600dd46dbc1812a54be57fd33f71
2025-01-29Merge "cinder: Fix log dir permission"Zuul1-0/+3
2025-01-24Merge "swift: Deprecate for removal in 2025.2"Zuul2-0/+11
2025-01-24Merge "Fix genconfig"Zuul4-8/+34
2025-01-24swift: Deprecate for removal in 2025.2Michal Nasiadka2-0/+11
Change-Id: Ie62060b806c3d66653901bf6f2b5ea8941e7a6be
2025-01-24Add ovn-sb-db-relay image with newer ovn-ctlMichal Nasiadka1-0/+15
We need newer ovn-ctl with [1] - for now download that from ovn-org/ovn@master - once 25.03 is branched we should get that the normal way. [1]: https://github.com/ovn-org/ovn/commit/2ecba75432cf90ffb5d6a3a53b8aed521ecf0f44 Change-Id: I429f00ed4bdcd24409d14453ab53c5fa11fdb00b
2025-01-24Fix genconfigMichal Nasiadka4-8/+34
Currently tox -e genconfig fails with stevedore issues, because tox is not doing sdist. Closes-Bug: #2051575 Change-Id: Idfc26fe380a546d0fd712a531e5913090b01d808
2025-01-20Merge "Update Let's Encrypt lego version"Zuul2-3/+9
2025-01-13Merge "openvswitch: Fix logs dir permission"Zuul3-0/+12
2025-01-13openvswitch: Fix logs dir permissionMichal Nasiadka3-0/+12
Closes-Bug: #1795609 Change-Id: Iedfb2df027c0cefc45668a76d45ce62193aba9ef
2025-01-13ironic: Fix dnsmasq.log permissionsMichal Nasiadka2-0/+15
Closes-Bug: #2093881 Change-Id: I3f45178c07a9cd054e572ff80d0e19fb014d69d3
2025-01-13Adds missing nvme package in cinder-backupFelipeAFV2-3/+3
The package moved to the cinder-base image since it already added to the cinder-volume in I84c7633765749a5e9ced983505ef290c32154ccc. Closes-Bug: #2089587 Change-Id: I06e61ab388d9ecfa78e5d1fe1ae9cb8602d1cd36 Signed-off-by: FelipeAFV <ffigueroa@whitestack.com> Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2025-01-10Merge "[letsencrypt] Rename script for updating certificates"Zuul3-3/+3
2025-01-07Merge "neutron-dhcp-agent: change dnsmasq.log rights"Zuul2-0/+11
2025-01-07neutron-dhcp-agent: change dnsmasq.log rightsMichal Nasiadka2-0/+11
Fixes /var/log/kolla/neutron/dnsmasq.log rights so fluentd can read logs from that file. Closes-Bug: #1693712 Change-Id: I57e36ef07e8840eead2efde77e0ab9dfd4842931
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul2-1/+9
2024-12-30Merge "Remove setuptools pin"Zuul2-1/+3
2024-12-23cinder: Fix log dir permissionMichal Nasiadka1-0/+3
In order to add support to uwsgi (which is opening the log file after dropping privileges) we need to set proper permissions for /var/log/kolla/cinder directory Change-Id: I46da8fad93febbc462cbe42a0d96ef7d423b8965
2024-12-19Merge "Move uwsgi installation to openstack-base"Zuul3-7/+8
2024-12-18[letsencrypt] Rename script for updating certificatesMichal Arbet3-3/+3
This patch renames the update-haproxy-cert script to update-loadbalancer-cert to make the name more generic. The change is necessary because support for ProxySQL will be introduced in the next patch, requiring a name that reflects broader applicability. To keep the diff in the following patch clean and easier to review, this patch focuses exclusively on the rename. Change-Id: I15f9b5cf3976f4298cdc7da4530f2d7d09614e88
2024-12-17Update Let's Encrypt lego versionPiotr Parczewski2-3/+9
Change-Id: I979df16dea4499b470ce7a4e23df7927a5952aa7
2024-12-16Merge "magnum: Add helm binary for magnum-cluster-api"Zuul2-0/+11
2024-12-16Merge "Fix EAB support in letsencrypt"Zuul1-10/+12
2024-12-13magnum: Add helm binary for magnum-cluster-apiMichal Nasiadka2-0/+11
Closes-Bug: #2091608 Change-Id: I52105f6cbf7529ce107cabf8a38a10525be7435c
2024-12-12Merge "Revert "CI: Pin requests to <2.32 for publish jobs""Zuul1-9/+0
2024-12-11Fix EAB support in letsencryptMichal Arbet1-10/+12
This patch fixes recently merged [1] patch. - Original patch added params function args eab, hmac, key_id, but then EXTERNAL_ACCOUNT_BINDING_OPTS var is passed into obtain_or_renew_certificate which can't work - This patch correctly set EXTERNAL_ACCOUNT_BINDING, HMAC, KEY_ID defaults and then call obtain_or_renew_certificate function with them. This will ensure that arguments are always set, so we can write if condtional correctly and process. [1] https://review.opendev.org/c/openstack/kolla/+/916617 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/933924 Change-Id: I406ff10edec9dc94b1a3de005080e149ee3ab3f2
2024-12-11Remove setuptools pinMichal Nasiadka2-1/+3
Change-Id: I7d08ebb65e2de82e3edba7bd9307b2b6ac8cb7a8
2024-12-11Merge "Revert "[release] Use Dalmatian sources by default""Zuul4-3/+4
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul6-25/+32
(Dalmatian)""
2024-12-11Revert "CI: Pin requests to <2.32 for publish jobs"Michal Nasiadka1-9/+0
This reverts commit 428f37124986019bedc897469f9b1f3470b62082. Reason for revert: Should be fixed now Change-Id: Ife393e7f1b00fa37921e7822668d6a40dd467d5b
2024-12-10Revert "[release] Use Dalmatian sources by default"Michal Nasiadka4-3/+4
This reverts commit 5af5febf50bc0a02422b437b16598570d0c5ffe3. Reason for revert: Epoxy cycle is on In addition to the revert skyline-apiserver aiosqlite u-c is removed until [1] is merged, designate rootwrap.conf.sample file has been renamed to rootwrap.conf and pycadf is bumped to 4.0.0. [1]: https://review.opendev.org/c/openstack/skyline-apiserver/+/935604 Change-Id: I1265633f0913b7927955564fac911a682615004a
2024-12-10Merge "Add Python 3.12 classifier"Zuul1-0/+1
2024-12-10Merge "CI: Stop using LABEL for ephemeral0"Zuul1-2/+1
2024-12-09Merge "Update release-management doc with openstack-manuals step"Zuul1-0/+4
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski2-1/+9
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b