aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2026-10-12Install syslinux in debian ironic-conductor containersJed Preist1-0/+1
Install syslinux in debian ironic-conductor containers, to provide files required for creating disk images that can be booted with the redfish-virtual-media boot interface Closes-Bug: #2163659 Change-Id: I61360a9062e365a3ae09853908e8aca8e04597bb Signed-off-by: Jed Preist <jed@stackhpc.com> (cherry picked from commit 9a972298bb490d4ead8f2d5ed68f500a2f55f4b9)
2026-09-16grafana: install Prometheus datasource pluginPiotr Milewski1-1/+4
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit aece83cc507ac587769ae61d011161d462dafb1d)
2026-08-03ironic-pxe: don't fail if symlinks already exist22.1.0Owen Jones1-4/+2
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com> (cherry picked from commit 2da1223d8301da05f9b070ca656d62c1bde93c66)
2026-06-15Install and start virtlogd in nova-libvirt.Michael Still2-1/+16
Due to implementation choices in qemu and libvirt, standard log rotate does not work on these console files, and instead the usual approach is to have libvirt's virtlogd rotate the contents of the console log file when it gets a bit big. OpenStack Compute knows how to read data from more than one rotated console log file if required to service a REST API request. OpenStack Kolla and Kolla-Ansible deploy OpenStack components in docker or podman containers. An error in the startup configuration for the nova_libvirt container results in the libvirt virtlogd daemon not being run, which results in this console log rotation not occurring. This opens up the risk of a disk usage denial of service attack on a hypervisor. The console log is stored on the same filesystem as ephemeral disks, and OpenStack Nova will take a hypervisor out of service if disk space becomes constrained. There is some protection from the instance console not being able to write data particularly quickly, but it is definitely still possible to fill the hypervisor file system -- especially if multiple instances are used. This misconfiguration appears to exist in all versions of Kolla / Kolla-Ansible as best as I can tell. Partial-Bug: 2155214 Change-Id: Ib62191e3022e5bcff781c12f662c9800fb210eb9 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 97d1352f225509bcb5e3e25013e9bfe1f3c995f0)
2026-06-11Merge "Revert "kolla-toolbox: Pin openstacksdk to 4.14.0"" into stable/2026.1Zuul1-1/+1
2026-06-11Merge "keepalived: Install mariadb client package" into stable/2026.1Zuul1-2/+6
2026-06-11Revert "kolla-toolbox: Pin openstacksdk to 4.14.0"Michal Nasiadka1-1/+1
This reverts commit 214fc1c123ace93d0fd75c1536a550a3b7bea7f4. Reason for revert: openstack.cloud 2.6.0 was released with a fix Signed-off-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I68999a73556dcce3060c9059d9b6a3cec122acbb
2026-06-10kolla-toolbox: Pin openstacksdk to 4.14.0Michal Nasiadka1-1/+1
4.15.0 is out and it broke openstack.cloud modules Change-Id: I8e0f7663339964ca4418e38314adcb0487833464 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-09keepalived: Install mariadb client packageMichal Nasiadka1-2/+6
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/992020 Related-Bug: #2155865 Change-Id: I1c67f6b0f4780b7caf83ccf95a20861d9fefe20b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 7477b2244ee525ffd6effeb4229608991c639fc8)
2026-05-14horizon: rebuild static assets after theme changesGrzegorz Koper1-1/+2
Include the theme directory in settings_bundle so theme-only changes invalidate the cache and rebuild the static assets. Closes-Bug: #2148389 Change-Id: If4fbc24c5c339f7dee7bf67a09fc6448ede0c9fd Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> (cherry picked from commit 21cacdd855bca15be846d392ec6795d667bf8ac1)
2026-05-10Merge "ironic-pxe: Remove httpd setup call" into stable/2026.122.0.0.0rc222.0.0Zuul1-2/+0
2026-05-08ironic-pxe: Remove httpd setup callMichal Nasiadka1-2/+0
We're not using ironic-pxe as ironic-http anymore and kolla_httpd_setup has been removed from base. Change-Id: Id25e39cee9fd64d147301a39528aa8525bd682c2 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 5df2cc1252265bacef4d1dee30355d1ff5464709)
2026-05-08Remove influxdb from repos.yamlMichal Nasiadka1-1/+0
It was ommitted in the original influxdb removal patch [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/973051 Change-Id: Ie28d1cc615cc09f013438285b4dcbc2dbab0f4b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 83b8161b12bb1a32b8b872c46533cfa6a2fe9d7f)
2026-05-06Drop apache installation outside of httpd container22.0.0.0rc1Michal Nasiadka10-81/+3
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986483 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986352 Change-Id: Ia66dde09bbbad2a5a9e67a8c642f3223ca38be43 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-05set_configs: Add support for creating directories and setting permsMichal Nasiadka1-0/+22
Change-Id: Id63c035fafaa68a9004c65161c5a3a3ad5544f02 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-04Merge "Remove Babel from openstack-base"Zuul1-1/+0
2026-05-04Merge "Bump OVN to 26.03 in Rocky Linux 10 images"Zuul1-1/+1
2026-05-04Remove Babel from openstack-basePierre Riteau1-1/+0
The Babel dependency was removed from most OpenStack projects years ago. Change-Id: I21fc99f42b0fbfa45ff2d9366ea603866e6682d4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-04-28Bump OVN to 26.03 in Rocky Linux 10 imagesBartosz Bezak1-1/+1
Change-Id: I3f0dab4b7d612d3e3f3057c1db8c36e3905cec75 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-04-28keystone: Remove wsgi fileMichal Nasiadka2-3/+0
Kolla-Ansible has been migrated long ago to use uwsgi app instead of file. Change-Id: I347c6f89136427347e9443c85230632474adb7eb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Remove httpd_setup calls from api containersMichal Nasiadka21-47/+0
We have dropped mod_wsgi support from services in [1]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/982414 Change-Id: Ie5da8427706dfb74bad4e174c990355a6870114c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Drop mod_wsgiMichal Nasiadka2-4/+0
It's not needed since [1]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/982414 Change-Id: I39ab300240b0178f3697ff2dcdf1fab2c3b828bf Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-27Merge "Drop zun and kuryr"Zuul16-295/+0
2026-04-27Merge "Switch to binary release of OpenStack Network exporter"Zuul1-29/+8
2026-04-24Drop zun and kuryrMichal Nasiadka16-295/+0
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Change-Id: I770b9e62c66f8cc63475d51f80eecacc8415b91f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Switch to binary release of OpenStack Network exporterDoug Szumski1-29/+8
We no longer need to build this from source: aharivel has kindly responded to our request to create a release: https://github.com/openstack-k8s-operators/openstack-network-exporter/releases Needed-By: I35b3bb10aec18a9377515e8c04d2542e712c0f12 Change-Id: Id30cab4e4bbac470f33354870fd941c3ea17815c Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-24Remove reference to deprecated app.wsgi in Aodh imagePiotr Milewski1-4/+1
The app.wsgi entry point has been removed upstream in Aodh 2026.1 (see: https://review.opendev.org/c/openstack/aodh/+/983216) Change-Id: I2738b7844bf852f2a0a1ca903463f92ffc25f4d2 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-15Merge "Return missing systemd-udev into cinder and glance containers"Zuul2-2/+4
2026-04-15Return missing systemd-udev into cinder and glance containersVictor Chembaev2-2/+4
systemd-udev package provides /usr/lib/udev/scsi_id tool, required for operating with scsi-attached storage Closes-Bug: #2148205 Change-Id: I7b0c25d361fc61992089ee88625fb3ab63c12fb4 Signed-off-by: Victor Chembaev <chembervint@gmail.com>
2026-04-13Add Prometheus network exporterDoug Szumski1-0/+45
This exporter comes from https://github.com/openstack-k8s-operators and will replace the existing OVN exporter which was archived at the end of 2024. It can gather metrics from both OVN and OVS based OpenStack clouds. Change-Id: Idb070d5e5469abd472481f7e19614ee2a78c85d0 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-03Merge "add venv path check when set dev mode"Zuul1-1/+3
2026-04-02Merge "Add Dockerfile for neutron-ovn-vpn-agent"Zuul1-0/+31
2026-04-01Merge "Remove dsa from haproxy-ssh host key types"Zuul1-1/+1
2026-03-30Merge "Bump OVN to 25.09 in Rocky Linux 10 images"Zuul1-1/+1
2026-03-30Merge "Prometheus: add valkey exporter image"Zuul1-0/+25
2026-03-26Switch to Gazpacho/2026.1 sourcesMichal Nasiadka1-3/+7
Change-Id: I9b6eba0c55fa9914e8db3576127f7d53c13e97d5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-25Prometheus: add valkey exporter imagePiotr Milewski1-0/+25
Adds a new prometheus-valkey-exporter image to support monitoring of Valkey instances. Change-Id: Id0ad47301e48fc4e2cb1f93865a5c5d58f521467 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-25Merge "rabbitmq: Update to 4.2"Zuul4-4/+4
2026-03-25Add Dockerfile for neutron-ovn-vpn-agentMaximilian Stinsky1-0/+31
This patch adds support for the standalone neutron-ovn-vpn-agent. The new agent was added in the 2024.1 and is required for vpnaas when using ovn. [1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/765353 Related-Bug: #2048392 Change-Id: I552b9fbc8fa0b49d3e0e3212dd11962b02837b9f Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Pablo COLSON <colson.pablo@gmail.com> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-25Merge "Drop Telegraf"Zuul3-57/+0
2026-03-25Merge "kolla-toolbox: Add ansible-runner"Zuul1-0/+1
2026-03-25Merge "horizon: add django-redis dependency"Zuul1-1/+2
2026-03-24Bump OVN to 25.09 in Rocky Linux 10 imagesPierre Riteau1-1/+1
This matches the version used by Ubuntu images since Flamingo [1][2]. Debian Trixie still uses 25.03 [3]. Support for 25.03 has ended on 7 March, 2026 [4] while 25.09 is supported until 5 September, 2026 [5]. [1] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/flamingo_versions.html [2] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/gazpacho_versions.html [3] https://packages.debian.org/source/trixie/ovn [4] https://www.ovn.org/en/releases/25.03/ [5] https://www.ovn.org/en/releases/25.09/ Change-Id: I323ea4e7dabecfcf20fa890e028eeb1c3766be0b Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-03-20Add NVME CLI to Glance API containerStig Telfer1-0/+2
VAST uses NVME-over-TCP to implement Cinder volumes. When Cinder uses VAST as a backend driver and Glance uses Cinder as store, the nvme-cli package is needed in glance-api, to generate NVME NQNs. Partial-Bug: #2035975 Change-Id: If185fc29eabc831a7cc1b28b435cc5ecfd63732e Signed-off-by: Stig Telfer <stig@stackhpc.com>
2026-03-17Remove dsa from haproxy-ssh host key typesAntony Messerli1-1/+1
CentOS/Rocky 10 no longer supports DSA keys, causing haproxy-ssh to fail on startup with "unknown key type dsa". This aligns haproxy-ssh with the same fix already applied to keystone-ssh and nova-ssh. Closes-Bug: #2143880 Change-Id: I3990c2c67756378063e0867edcd004e8d28574dd Signed-off-by: Antony Messerli <antony@mes.ser.li>
2026-03-17rabbitmq: Update to 4.2Piotr Milewski4-4/+4
Change-Id: Id6684e4356f68e4348c0f8c1c0c1e5397553397e Signed-off-by: Piotr Milewski <vurmil@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-03-16kolla-toolbox: Add ansible-runnerMichal Nasiadka1-0/+1
Change-Id: I34c84882447ed7641f410d95a58da4718c87aa87 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-16horizon: add django-redis dependencyPiotr Milewski1-1/+2
Add django-redis to the Horizon image to support Redis/Valkey as Django cache and session backend. Closes-Bug: #2093414 Change-Id: Ib327dfb770aea5d953baba2399f97cf3ea12defd Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-02-11Merge "Stop installation of zake"Zuul1-1/+1
2026-02-11Merge "Drop sqlalchemy-migrate"Zuul1-1/+0