aboutsummaryrefslogtreecommitdiff
path: root/kolla
AgeCommit message (Collapse)AuthorFilesLines
2026-08-31stable-only: Update Prometheus to version 3.5.521.3.0Pierre Riteau1-3/+3
Change-Id: If19d55a88975e6717eec2b9cac9fd28b050028e9 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit c4e23082aaf2329ffd1b1ddb3992a881aa53af3f)
2026-06-22Update Prometheus to version 3.5.4Pierre Riteau1-3/+3
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.4 Change-Id: I1ec8f15e14360422aa316779bd19195fd1f4f7a1 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit e4114abcdaa604d243da48ea0187fd5673191eb6)
2026-06-11kolla-build: Use SandboxedEnvironment to prevent SSTIMichal Nasiadka3-2/+113
Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
2026-05-04Update Prometheus to version 3.5.3Piotr Milewski1-3/+3
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.3 Change-Id: I9f4243a40d0907639324308d84d8a860c1e54941 Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit 655991d734af3d44c44e1fb4e47b7a850807258f)
2026-03-16Update Prometheus to version 3.5.1Pierre Riteau1-3/+3
Change-Id: I66015b45f2c1f915e1aadc57af9c3d239e9c2472 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 5a0e470152471e27ed04419f27523355abfc6d89)
2026-01-10Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit b852b8ce32a53cd747d8385e6185d2ad521dee5d)
2025-11-19Transition to the new rabbitmq Debian package archives.Michael Still2-6/+6
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 0fc73a644bdb7e4f583ba5ebf7ee3fcd60fb8ffc)
2025-11-03Bump versions of packages in sources.pyMichal Nasiadka1-9/+9
Change-Id: I395cfdf22cd87a43294dbae561a8872cb0b48e1b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30Merge "Add Valkey"Zuul1-1/+5
2025-10-29Add ValkeyMichal Nasiadka1-1/+5
Change-Id: I02f3adf9825636e2b81c50543d6f95ea986019b6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-28Merge "Drop Venus images"Zuul2-9/+1
2025-10-27Drop Venus imagesMichal Nasiadka2-9/+1
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/964860 Change-Id: I3a04487a75c04ba989fa70f2025db33308671dfb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-14mariadb: Bump to 11.4Michal Nasiadka1-4/+3
11.4 is the next LTS release (see [1]) New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB client variable ``ssl-verify-server-cert`` change from ``FALSE`` to ``TRUE``. [2] This variable can be overidden by assigning ``TRUE`` to environment variable with the same name. [1]: https://mariadb.org/11-4-lts/ [2]: https://jira.mariadb.org/browse/MDEV-31857 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281 Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14Merge "Drop support for building MariaDB clustercheck"Zuul1-1/+1
2025-10-14Drop support for building MariaDB clustercheckSeunghun Lee1-1/+1
MariaDB clustercheck script has not been maintained and it will not work with MariaDB 11.4 (the next LTS version). This is because clustercheck.sh uses ``mysql*`` commands but from MariaDB 11.4, those commands are not supported. The health check of MariaDB server containers will be done by new script which comes with change [1]. Without MariaDB clustercheck, MariaDB server becomes only container image in the family, so mariadb-base and mariadb-server dockerfiles are merged. To avoid breaking changes, the name 'mariadb-server' is retained. Follow-up to rename references in Kolla and K-A from 'mariadb-server' to 'mariadb' would be nice. [1] https://review.opendev.org/c/openstack/kolla/+/962657 Change-Id: I01278f76ee82b018a854b5862f3caaa8c78a9a30 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-10repos: Deduplicate repos.yamlMichal Nasiadka2-169/+74
Introduce rpm/deb entry in repos.yaml, create a structure [base_package_type]: [base_distro]: [base_distro-$arch] Allow any of these to be undefined, defaulting to empty dict This allows to deduplicate entries between distros of the same base_package_type (rpm/deb) Sort repos.yaml Change-Id: Ifc351d5d612e6c6cc82be282aed179c656ae252c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-8/+8
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-06Merge "debian: Use {{ openstack_release_codename }} for extrepo"Zuul2-0/+10
2025-10-06Merge "Add MariaDB healthcheck.sh"Zuul1-0/+5
2025-10-03Add MariaDB healthcheck.shSeunghun Lee1-0/+5
MariaDB clustercheck has not been updated for a long time. Since the script uses ``mysql*`` commands but MariaDB 11.4 (next LTS version) does not support them, it will not work once MariaDB gets upgraded. Added alternative MariaDB container health check script ``healthcheck.sh`` from official MariaDB docker images. [1] This script uses ``mariadb*`` commands, so it's prone to MariaDB upgrade. [1] https://mariadb.com/docs/server/server-management/install-and-upgrade-mariadb/installing-mariadb/binary-packages/automated-mariadb-deployment-and-administration/docker-and-mariadb/using-healthcheck-sh Change-Id: I7816edb6ebd8c95412a6833ea20b32193c2d1415 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-02Stop duplicating repos in repos.yamlMichal Nasiadka2-233/+5
Change-Id: Ic8bfaedb1e94dd8b64fa8a63d9cd3b76a2b73ffb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka3-166/+533
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka3-5/+9
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23debian: Use {{ openstack_release_codename }} for extrepoMichal Nasiadka2-0/+10
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-22Merge "Switch to 2025.2 release"Zuul1-1/+1
2025-09-19Merge "Drop ironic-inspector"Zuul2-5/+1
2025-09-18Switch to 2025.2 releaseMichal Nasiadka1-1/+1
Change-Id: Ib73e2c47faf66ddee79d07259e75f1b1d721f0aa Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-11gnocchi: Bump to 4.7.0Michal Nasiadka1-1/+1
This is required for uwsgi module usage Change-Id: If1a078d2704fbd0b119d6c1ffc5a10aeff0a150a Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-10Merge "Prometheus and core components update"Zuul1-28/+28
2025-09-05Drop ironic-inspectorMichal Nasiadka2-5/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951864 Change-Id: Ie7e607c5a9c6f8c2e36aea5d52dc2ffbe97dddb3 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-5/+1
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-27Prometheus and core components updatePiotr Milewski1-28/+28
Updates a range of monitoring and core infrastructure components to their latest stable upstream versions to leverage new features and bug fixes. etcd: 3.5.16 -> 3.6.4 letsencrypt-lego: 4.20.4 -> 4.25.2 prometheus-blackbox-exporter: 0.25.0 -> 0.27.0 prometheus-cadvisor: 0.49.2 -> 0.53.0 prometheus-elasticsearch-exporter: 1.8.0 -> 1.9.0 prometheus-memcached-exporter: 0.15.0 -> 0.15.3 prometheus-mysqld-exporter: 0.16.0 -> 0.17.2 prometheus-node-exporter: 1.8.2 -> 1.9.1 prometheus-server: 3.2.1 -> 3.5.0 The Prometheus-server package has also been switched to a Long-Term Support (LTS) version, which ensures extended stability and security support. Change-Id: Ib9805fb6a93a0da887918174d9994caa5f1306d3 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-08-20Merge "Enable Prometheus mtail build for ARM64"Zuul1-1/+0
2025-08-20Merge "Influxdb: use stable RHEL repo"Zuul1-1/+0
2025-08-19Merge "Enable Barbican build on Ubuntu ARM64"Zuul1-1/+0
2025-08-18Influxdb: use stable RHEL repoBartosz Bezak1-1/+0
Switch the RHEL repo to the stable channel as per [1]. Use new GPG. Telegraf arm64 builds are enabled again, as binaries exists. [1] https://repos.influxdata.com/stable/x86_64/ Change-Id: Ie4f6f15404f6965df51f3214506ae9f8bb9b61e7 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Enable Barbican build on Ubuntu ARM64Bartosz Bezak1-1/+0
Re-enable the Ubuntu arm64 build. The previous exclusion was due to uWSGI issue [1], which is no longer reproducible on Ubuntu Noble. Change-Id: I400e9a9a3bf03053589835f933023eedee504f08 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Enable Prometheus mtail build for ARM64Bartosz Bezak1-1/+0
arm64 binaries are available currently. Change-Id: Iabf606848a6160eaf9e2494a2564f37c6db09882 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Merge "Revert "Switch to 2025.1 sources""Zuul1-1/+1
2025-08-14Bump libvirt exporterAlex-Welsh1-3/+3
Bumps libvirt exporter source from v1.6.0 to v2.2.0. This fixes some metrics that were lost when the exporter was changed from the old "tinkoff" source to "inovex". See also Icc8a3651d601ab45d448c9d252ca6155219d21cf Closes-Bug: #2120639 Change-Id: Ib738325603173157b4c482f9de6d5d9cea0b758a Signed-off-by: Alex Welsh <alex@stackhpc.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-4/+4
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12Revert "Switch to 2025.1 sources"Michal Nasiadka1-1/+1
This reverts commit 0733a13d7be896dac4004212f9eef48a845b26c2. Reason for revert: switch back to master Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/956785 Change-Id: If888500a791c66a592f17aa2be1f3784ee009a91 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-4/+4
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-08-06send empty X-Registry-Auth for anonymous pushesBartosz Bezak2-5/+25
Since Docker 28.3.3 the daemon rejects a push that carries no `X-Registry-Auth` header [1]. The SDK already sets this header when it finds credentials, so the breakage happens only on anonymous pushes. During `PushTask.push_image()` we now check whether the SDK can resolve credentials for the target registry; if it cannot, we inject `auth_config={}`, causing the SDK to send the minimal "{}" header that satisfies the daemon while leaving authenticated pushes unchanged. Drop this addition when [2] is fixed. [1] https://github.com/moby/moby/pull/50371 [2] https://github.com/docker/docker-py/issues/3348 Closes-Bug: #2119619 Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul4-7/+12
2025-07-16Move to CentOS Stream 10Michal Nasiadka4-7/+12
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-06Remove the OVN exporter for PrometheusDoug Szumski1-11/+0
Since this exporter is no longer developed, and is not used in Kolla Ansible, remove it immediately. A replacement has been proposed in change #951971. Change-Id: Ie47aed221d04bbb2b50ccfbd7c398e6ab6022442
2025-06-05Merge "Revert "[release] Use RDO's Epoxy packages""Zuul1-1/+1
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski1-16/+16
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet1-4/+4
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 18:02:38 +0000