aboutsummaryrefslogtreecommitdiff
path: root/kolla/docker
AgeCommit message (Collapse)AuthorFilesLines
8 daysSupport neutron agent wrappers in neutron-ovn-agentMichael Still2-0/+13
Neutron has removed the standalone OVN metadata agent, so metadata is now served by the metadata extension of neutron-ovn-agent. Give that image the same extend_start.sh as neutron-metadata-agent, so that its HAProxy processes can run in separate containers and survive agent restarts. Related-Bug: #2161114 Change-Id: Iee3d4639183434c83f57cc459c3e14159d932105 Assisted-By: Claude Opus 5.5 (low effort) Signed-off-by: Michael Still <mikal@stillhq.com>
9 daysMerge "cinder-volume: add customizable pip package list"Zuul1-1/+4
2026-10-15keystone: Remove keystone containerMichal Nasiadka3-142/+0
We completed the keystone-api migration in Ib7ef5526e087429dfeb5a3211e19efda4776b52c Change-Id: I6dc81171470a9c7fc6385a9d6867b7d4a584dc8e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-10-15Merge "Remove creating logdirs in docker images"Zuul60-480/+0
2026-10-14Merge "base: Drop redhat binary versionlock block"Zuul1-2/+0
2026-10-10Merge "Install syslinux in debian ironic-conductor containers"Zuul1-0/+1
2026-10-10cinder-volume: add customizable pip package listSimon Dodsley1-1/+4
The Everpure FlashArray Cinder driver imports the py-pure-client SDK, which kolla-ansible's native enable_cinder_backend_pure_* flags assume is present. Stock images do not carry it, so operators have to rebuild cinder-volume themselves. Baking the SDK in is not an option: it installs to roughly 700 MB of generated REST models, far too much to add to every cinder-volume image for one backend. Instead give cinder-volume its own pip package list, empty by default and run through the customizable filter, so a vendor SDK can be added with a single template-override line: {% set cinder_volume_pip_packages_append = ['py-pure-client'] %} without touching cinder-base and therefore the API, scheduler and backup images. This is the mechanism nova-compute and ironic-conductor already expose for their optional packages. Related-Bug: #2170385 Assisted-By: Claude Code claude-fable-5-1 Change-Id: If8202b9f04f0299183019891e4ddd636669b25b4 Signed-off-by: Simon Dodsley <simon@purestorage.com>
2026-10-05Merge "keystone: Introduce keystone-api container"23.0.0.0rc1Zuul3-0/+160
2026-10-01Drop ovn-ctl download from OVN relay imageBartosz Bezak1-6/+0
The packaged ovn-ctl already supports relays: OVN 26.03 on Rocky and Ubuntu, and 25.03 on Debian. Change-Id: I1597d9fbc6905207e86893d998ca85eb90de21dc Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-10-01Merge "Fix: Zstd missing from ironic conductor container."Zuul1-1/+3
2026-10-01keystone: Introduce keystone-api containerMichal Nasiadka3-0/+160
It's a clone of keystone container image. After using the new container in Kolla-Ansible - the old keystone container image can be dropped. Change-Id: Ia5684a4c5e5eb25fa5194dac9f841b0793203718 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-28Merge "mariadb: Remove unused replica backup script"Zuul2-151/+0
2026-09-24Fix: Zstd missing from ironic conductor container.Claudia Watson1-1/+3
Ironic-conductor needs zstd installed to be able to decompress zstd compressed files. Patch installs zstd to docker container. Patch merged in Feb 2025 ( https://review.opendev.org/c/openstack/ironic/+/938904 ) enabled the detection and decompression of zstd compressed files. Zstd is a popular choice for compression, therefore, would be useful to support. Closes-Bug: #2167459 Change-Id: I5fa8ec4dd5d1d4938e0b47c99d07d328286ecda9 Signed-off-by: Claudia Watson <claudia@stackhpc.com>
2026-09-18Install syslinux in debian ironic-conductor containersJed Preist1-0/+1
Install syslinux in debian ironic-conductor containers, to provide files required for creating disk images that can be booted with the redfish-virtual-media boot interface Closes-Bug: #2163659 Change-Id: I61360a9062e365a3ae09853908e8aca8e04597bb Signed-off-by: Jed Preist <jed@stackhpc.com>
2026-09-18Merge "grafana: replace deprecated grafana-cli"Zuul1-1/+1
2026-09-16mariadb: Remove unused replica backup scriptminwooseo2-151/+0
Kolla Ansible no longer uses the replica-specific backup script after backups were changed to run against the local database instance. Remove kolla_mariadb_backup_replica.sh and stop installing it in the MariaDB server image. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/1002239 Change-Id: I666986e67940a2e8c2d567a8a6de4befca5ea4d2 Signed-off-by: minwooseo <alsdn1211@naver.com>
2026-09-11Merge "Drop support for CentOS Stream 10"Zuul10-108/+27
2026-09-10base: Drop redhat binary versionlock blockMichal Nasiadka1-2/+0
Change-Id: If7b5d045200d40dc9f49d26f2833af9a54f7ca96 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-10Drop support for CentOS Stream 10Michal Nasiadka10-108/+27
Change-Id: I5973943fe83bbb00cfc8623c0cd4d4b98b369315 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-09Merge "grafana: install Prometheus datasource plugin"Zuul1-1/+4
2026-09-09Remove creating logdirs in docker imagesMichal Arbet60-480/+0
Change-Id: Iaddda80bc78bf727d8a2835d1528f49639aa87a0 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
2026-09-02Merge "Ensure openvswitch-base children get ovs repo"Zuul5-0/+15
2026-09-02grafana: replace deprecated grafana-cliPiotr Milewski1-1/+1
Change-Id: I68bd3b2dabe9631f7f15b801aaf020380f95fa7d Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-08-31grafana: install Prometheus datasource pluginPiotr Milewski1-1/+4
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-08-27Merge "letsencrypt: Add ACME dns-01 challenge support"Zuul1-7/+62
2026-08-27Ensure openvswitch-base children get ovs repoAlex Welsh5-0/+15
Previously, openvswitch-base would enable the openvswitch repo, and child containers (e.g. ovn-base, ovn-controller, etc) would be built using ovn packages from that repo. Recently [1] builds were changed to clean up repos at the end of the build, so now dependent containers must re-enable the repo manually. Also added an openvswitch repo override to tests to avoid regresssion. [1] Ie5b9970a4575b6258dc238059d3f33ddfe155789 Closes-Bug: #2163314 Change-Id: I4ea1cc812167142743e3ebcbd532281bfe8a9799 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2026-08-05letsencrypt: Add ACME dns-01 challenge supportTimon Schnell1-7/+62
This adds support for the ACME dns-01 challenge while keeping http-01 the default. A new --challenge option (default http-01) selects the challenge type. When dns-01 is selected, --dns-provider names any DNS provider compiled into the bundled lego binary, and an optional --dns-additional-opts passthrough forwards extra lego DNS flags (such as --dns.resolvers or --dns.propagation-disable-ans) for environments where the authoritative name server propagation check cannot be performed. Provider credentials are supplied via --env-file: lego DNS providers read credentials only from environment variables, so the wrapper exports the file's contents before lego runs. The file is parsed like docker --env-file: literal KEY=VALUE pairs split on the first '=', comments and blank lines ignored, values taken verbatim and never executed as shell. Selecting dns-01 without --dns-provider fails fast. Co-Authored-By: Premysl Kouril <premysl.kouril@ultimum.io> Assisted-By: Claude Code Change-Id: I61dc5e3f399f6eec02475c7b90e0f41c85c6093c Signed-off-by: Timon Schnell <timon.schnell@btc-it-services.com> Signed-off-by: Jan Horstmann <horstmann@osism.tech>
2026-08-05Add cleanup_repos to revert build_only overridesMichal Nasiadka118-7/+375
Repos marked build_only: true are backed up before handle_repos() overwrites them and restored at the end of each image build, so CI mirror URLs are not baked into the final image. The cleanup RUN was injected into every Dockerfile, not just images that called handle_repos() for those repos. Child images with no backup fell through to "rm -f", deleting the inherited repo file (e.g. debian.sources in bifrost-base, breaking cpio install). Fix by adding a {repo}.enabled sentinel that handle_repos creates when it processes a build_only repo, making the cleanup conditional on that sentinel. Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-31Merge "ironic-pxe: don't fail if symlinks already exist"Zuul1-4/+2
2026-07-30Move PIP_* env variables to ARG and configMichal Nasiadka1-3/+3
Leaving empty CI template_overrides file in case we need to use it in future. Change-Id: Ic46f1a594bcc330536bc78d93ece10e60622f6d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-22Merge "rabbitmq: Update to 4.3"Zuul4-4/+4
2026-07-21Merge "neutron: Move tap-as-a-service to be a plugin"Zuul1-1/+0
2026-07-21Merge "Bump ansible-core to 2.21"Zuul1-1/+1
2026-07-21neutron: Move tap-as-a-service to be a pluginMichal Nasiadka1-1/+0
Neutron has changed policy definitions and it's fixed in unreleased version of tap-as-a-service - and we're installing that package from pypi instead of from tarballs. Change-Id: Icffea19cf9c1279dd7e133c5588efd5818249b75 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-20rabbitmq: Update to 4.3Piotr Milewski4-4/+4
Erlang 28 is only supported for new clusters. Upgrades of clusters running RabbitMQ with Khepri on Erlang 27 to Erlang 28 have a known issue affecting rolling upgrades. Change-Id: I60d85a92534e8aa9ec6a72d71457057b96d7e554 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-07-20ironic-pxe: don't fail if symlinks already existOwen Jones1-4/+2
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com>
2026-07-17ironic: stop using driver-requirements.txtMichal Nasiadka2-2/+1
It was removed with [1]. [1]: https://opendev.org/openstack/ironic/commit/299203f7a327be883707da950630c35714b482a2# Change-Id: Ic71e22241ab58175ebda95efac152c5a5c5d5000 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-10Bump ansible-core to 2.21Michal Nasiadka1-1/+1
Change-Id: I51c63b487b2550f6357aba6068f671b3c22df5da Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Add support to override base reposMichal Nasiadka2-11/+10
BaseOS and AppStream for CentOS/Rocky ubuntu, ubuntu-security for Ubuntu debian, debian-security for Debian ubuntu-cloud-archive is not really a base repo - so removing it from ubuntu.sources Change-Id: Iab98de963f2e8532389b7563bb572d8aa20c7aa6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-06Migrate to pyproject.tomlMichal Nasiadka370-0/+10879
[tool.setuptools.data-files] does not support recursive directory installation. The old setup.cfg [files] worked because PBR's FilesConfig.expand_globs() used os.walk() to expand docker/*, but this hook is not triggered by the pbr.build PEP-517 backend. Move docker/ into kolla/ and use [tool.setuptools.package-data] instead. Update kolla_worker._get_images_dir() to check the kolla package directory first so both editable and regular installs work. Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:28:16 +0000