aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2026-08-31grafana: install Prometheus datasource pluginPiotr Milewski2-1/+11
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-08-27Merge "letsencrypt: Add ACME dns-01 challenge support"Zuul2-7/+76
2026-08-27Ensure openvswitch-base children get ovs repoAlex Welsh7-0/+26
Previously, openvswitch-base would enable the openvswitch repo, and child containers (e.g. ovn-base, ovn-controller, etc) would be built using ovn packages from that repo. Recently [1] builds were changed to clean up repos at the end of the build, so now dependent containers must re-enable the repo manually. Also added an openvswitch repo override to tests to avoid regresssion. [1] Ie5b9970a4575b6258dc238059d3f33ddfe155789 Closes-Bug: #2163314 Change-Id: I4ea1cc812167142743e3ebcbd532281bfe8a9799 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2026-08-26Updated from check-sourcesOpenStack Proposal Bot2-39/+74
Change-Id: If773969cd58b8a17c103f27294171d5dd99ccc9d Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-08-25CI: Post sources.yaml changesMichal Nasiadka5-4/+36
Add sources.yaml trigger on aio/mariadb/prometheus jobs Move out yamllint header from sources.yaml to yamllint config, because the kolla-check-sources.py does not ensure the header is there and it's easier to fix it in this repo. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/1002239 Change-Id: I4e01fb50ca92a12812a0ab1c63b44e1aa5d4a717 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-08-24CI: Don't build from Zuul overrides in upgrade jobsMichal Nasiadka1-0/+2
Our upgrade jobs don't have their own set of required-projects, so we end up using master version of Zuul cached repos and previous-release u-c - which obviously breaks. Change-Id: Ib381c5226b0407deea11ae70188ab2f2239d08eb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-08-22Switch sources.py into sources.yamlMichal Nasiadka4-476/+390
Needed-By: https://review.opendev.org/c/openstack/project-config/+/998419 Change-Id: Ib00fc1a1cb2aebddf8f6a7badade2946aef31d25 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-08-18CI: Switch to build from Zuul cached reposMichal Nasiadka5-29/+275
Instead of overloading tarballs.opendev.org (and relying on their functional state), let's build images directly from Zuul cached workspaces. Adding a script that will validate if we're missing anything when adding new images. Change-Id: Ie1d8dce841b9a996e96e3a6e1b097b0d256c0bea Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-08-17Merge "Drop leftover of monasca support"Zuul2-8/+0
2026-08-13Updated ansible-lint in lint-requirements.txtOpenStack Proposal Bot1-1/+1
Change-Id: Iba2dc449ad8d8b50c5525769892163a2c7263d7c Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-08-05letsencrypt: Add ACME dns-01 challenge supportTimon Schnell2-7/+76
This adds support for the ACME dns-01 challenge while keeping http-01 the default. A new --challenge option (default http-01) selects the challenge type. When dns-01 is selected, --dns-provider names any DNS provider compiled into the bundled lego binary, and an optional --dns-additional-opts passthrough forwards extra lego DNS flags (such as --dns.resolvers or --dns.propagation-disable-ans) for environments where the authoritative name server propagation check cannot be performed. Provider credentials are supplied via --env-file: lego DNS providers read credentials only from environment variables, so the wrapper exports the file's contents before lego runs. The file is parsed like docker --env-file: literal KEY=VALUE pairs split on the first '=', comments and blank lines ignored, values taken verbatim and never executed as shell. Selecting dns-01 without --dns-provider fails fast. Co-Authored-By: Premysl Kouril <premysl.kouril@ultimum.io> Assisted-By: Claude Code Change-Id: I61dc5e3f399f6eec02475c7b90e0f41c85c6093c Signed-off-by: Timon Schnell <timon.schnell@btc-it-services.com> Signed-off-by: Jan Horstmann <horstmann@osism.tech>
2026-08-05Add cleanup_repos to revert build_only overridesMichal Nasiadka124-38/+979
Repos marked build_only: true are backed up before handle_repos() overwrites them and restored at the end of each image build, so CI mirror URLs are not baked into the final image. The cleanup RUN was injected into every Dockerfile, not just images that called handle_repos() for those repos. Child images with no backup fell through to "rm -f", deleting the inherited repo file (e.g. debian.sources in bifrost-base, breaking cpio install). Fix by adding a {repo}.enabled sentinel that handle_repos creates when it processes a build_only repo, making the cleanup conditional on that sentinel. Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-31Merge "ironic-pxe: don't fail if symlinks already exist"Zuul2-4/+8
2026-07-30Merge "Move PIP_* env variables to ARG and config"Zuul8-34/+79
2026-07-30Allow lowercase fromMichal Nasiadka2-2/+45
Change-Id: I42cf2aac795e9f61692deec956de0bedab55086f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-30Move PIP_* env variables to ARG and configMichal Nasiadka8-34/+79
Leaving empty CI template_overrides file in case we need to use it in future. Change-Id: Ic46f1a594bcc330536bc78d93ece10e60622f6d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-30CI: add prometheus-opensearch scenarioBartosz Bezak2-0/+13
Change-Id: Ia0db3a7e6c31dc86129456c554b72a386fa254ec Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-07-23Merge "Rework tar normalization to a shared function"Zuul2-24/+82
2026-07-23Rework tar normalization to a shared functionMichael Sherman2-24/+82
Add missing tests Change-Id: I91b42fe530f87af7d78bb1a543b29a4b0d50872e Signed-off-by: Michael Sherman <shermanm@uchicago.edu>
2026-07-23Merge "Add monitoring for external component versions"Zuul2-0/+355
2026-07-22Merge "CI: run copr periodic job only on master"Zuul1-0/+1
2026-07-22CI: copr - replace secrets without newlinesMichal Nasiadka2-23/+22
Change-Id: I37bb0b5056b2e055d0d0c9da5d0beba4b9ba9067 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-22Merge "rabbitmq: Update to 4.3"Zuul6-5/+9
2026-07-21CI: copr - convert uuid to stringMichal Nasiadka1-2/+2
There's a possibility that Zuul is marking uuid secret as !unsafe, let's convert it to a string. Change-Id: I63a1d49f6ed62d31fdd8bedccb719a6c5f7b5bb5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-21CI: Rework copr job to a different secret formatMichal Nasiadka4-30/+44
Change-Id: I2ef1b33b8d4527e0aea4f00dd1ce0770da2c495e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-21Merge "CI: copr - remove no_log"Zuul1-1/+0
2026-07-21Merge "neutron: Move tap-as-a-service to be a plugin"Zuul2-1/+4
2026-07-21Merge "Bump ansible-core to 2.21"Zuul3-2/+7
2026-07-21CI: copr - remove no_logMichal Nasiadka1-1/+0
Change-Id: I21d486f356d814319fcc4039fa13a7dbbacf6a04 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-21neutron: Move tap-as-a-service to be a pluginMichal Nasiadka2-1/+4
Neutron has changed policy definitions and it's fixed in unreleased version of tap-as-a-service - and we're installing that package from pypi instead of from tarballs. Change-Id: Icffea19cf9c1279dd7e133c5588efd5818249b75 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-21copr: Remove validation with no_logMichal Nasiadka1-9/+1
Earlier task with no_log causes the UUID in the URL to be redacted Change-Id: I98cd55dfce2bd9328a0805e893f80a3d5fbac73a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-21copr: Debug periodic job by removing no_logMichal Nasiadka2-1/+1
It fails now and no_log doesn't help in debugging why Change-Id: I93f49e5c9bb12cb7c15b5d4ac4bc61000fcd8400 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-20Merge "CI: Fix copr webhook secret"Zuul3-7/+8
2026-07-20rabbitmq: Update to 4.3Piotr Milewski6-5/+9
Erlang 28 is only supported for new clusters. Upgrades of clusters running RabbitMQ with Khepri on Erlang 27 to Erlang 28 have a known issue affecting rolling upgrades. Change-Id: I60d85a92534e8aa9ec6a72d71457057b96d7e554 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-07-20ironic-pxe: don't fail if symlinks already existOwen Jones2-4/+8
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com>
2026-07-20Merge "Add AI/LLM assistant guide documents"Zuul4-4/+213
2026-07-20CI: run copr periodic job only on masterBartosz Bezak1-0/+1
Change-Id: Ic17e82b4c5b75b8910fd47794326c0b26b50bfdd Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-07-20CI: Fix copr webhook secretMichal Nasiadka3-7/+8
It has incorrect format for a list variable switch to periodic for now to validate success Change-Id: Id9696e77bf2dfb07940607947ada05b433353091 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-20Add monitoring for external component versionsPiotr Milewski2-0/+355
This commit introduces a new tool designed to monitor versions of external components defined in kolla/common/sources.py. Change-Id: I85e35fcba454c519c12c7ed90210b7dbd46c1677 Signed-off-by: Piotr Milewski <vurmil@gmail.com> Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-20Add AI/LLM assistant guide documentsMichal Nasiadka4-4/+213
See I5fcd5bea33c4f4c87b6f6cf0a96514e8d2da3af3 Change-Id: Ia9f6cf6847ebd42ad3de73628759ad540a370c66 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-20Merge "ironic: stop using driver-requirements.txt"Zuul2-2/+1
2026-07-17ironic: stop using driver-requirements.txtMichal Nasiadka2-2/+1
It was removed with [1]. [1]: https://opendev.org/openstack/ironic/commit/299203f7a327be883707da950630c35714b482a2# Change-Id: Ic71e22241ab58175ebda95efac152c5a5c5d5000 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-17Updated ansible-lint in lint-requirements.txtOpenStack Proposal Bot1-1/+1
Change-Id: Iefd253479bbc3f96c0f694f3f6542b1caa651e3c Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-07-11Merge "Update docstring in handle_repos"Zuul1-5/+13
2026-07-11Merge "Add support to override base repos"Zuul13-94/+532
2026-07-10Bump ansible-core to 2.21Michal Nasiadka3-2/+7
Change-Id: I51c63b487b2550f6357aba6068f671b3c22df5da Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-10CI: Fix file triggers after docker/ moveMichal Nasiadka10-88/+54
Change-Id: Icb27b676ae686fe57f894e8da103da8641ed8eb2 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09CI: Remove npm proxy configurationMichal Nasiadka1-8/+0
We don't use npm anywhere Change-Id: Ibc1b213d575775f79fd5b7b6b8c6e21685fdb0b0 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Update docstring in handle_reposMichal Nasiadka1-5/+13
Change-Id: Ic088f5a85f3c033b0c5024d0b2e1bc889c52648d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Add support to override base reposMichal Nasiadka13-94/+532
BaseOS and AppStream for CentOS/Rocky ubuntu, ubuntu-security for Ubuntu debian, debian-security for Debian ubuntu-cloud-archive is not really a base repo - so removing it from ubuntu.sources Change-Id: Iab98de963f2e8532389b7563bb572d8aa20c7aa6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>