aboutsummaryrefslogtreecommitdiff
path: root/kolla
AgeCommit message (Collapse)AuthorFilesLines
2026-08-26stable-only: Update Prometheus to version 3.5.522.2.0Pierre Riteau1-3/+3
Change-Id: If19d55a88975e6717eec2b9cac9fd28b050028e9 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-06-19Update Prometheus to version 3.5.4Pierre Riteau1-3/+3
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.4 Change-Id: I1ec8f15e14360422aa316779bd19195fd1f4f7a1 Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit e4114abcdaa604d243da48ea0187fd5673191eb6)
2026-06-11kolla-build: Use SandboxedEnvironment to prevent SSTIMichal Nasiadka3-2/+113
Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
2026-05-08Remove influxdb from repos.yamlMichal Nasiadka1-9/+0
It was ommitted in the original influxdb removal patch [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/973051 Change-Id: Ie28d1cc615cc09f013438285b4dcbc2dbab0f4b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 83b8161b12bb1a32b8b872c46533cfa6a2fe9d7f)
2026-04-29Update Prometheus to version 3.5.3Piotr Milewski1-3/+3
This release fixes multiple security issues [1]. [1] https://github.com/prometheus/prometheus/releases/tag/v3.5.3 Change-Id: I9f4243a40d0907639324308d84d8a860c1e54941 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-04-27Merge "Update Prometheus to version 3.5.2"Zuul1-3/+3
2026-04-27Merge "Drop zun and kuryr"Zuul3-21/+3
2026-04-24Update Prometheus to version 3.5.2Pierre Riteau1-3/+3
Change-Id: I9d82fbcc26a8a3af2718ea8e1f2e0d87a3523579 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-04-24Drop zun and kuryrMichal Nasiadka3-21/+3
Zun is broken in 2026.1, it has been released broken and there are no reviews on the patch to fix it [1]. [1]: https://review.opendev.org/c/openstack/zun/+/982362 Change-Id: I770b9e62c66f8cc63475d51f80eecacc8415b91f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-24Switch to binary release of OpenStack Network exporterDoug Szumski1-2/+7
We no longer need to build this from source: aharivel has kindly responded to our request to create a release: https://github.com/openstack-k8s-operators/openstack-network-exporter/releases Needed-By: I35b3bb10aec18a9377515e8c04d2542e712c0f12 Change-Id: Id30cab4e4bbac470f33354870fd941c3ea17815c Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-04-13Add Prometheus network exporterDoug Szumski1-0/+6
This exporter comes from https://github.com/openstack-k8s-operators and will replace the existing OVN exporter which was archived at the end of 2024. It can gather metrics from both OVN and OVS based OpenStack clouds. Change-Id: Idb070d5e5469abd472481f7e19614ee2a78c85d0 Signed-off-by: Doug Szumski <doug@stackhpc.com>
2026-03-31Merge "Add OCI standard labels to container images"Zuul2-3/+74
2026-03-30Add OCI standard labels to container imagesPiotr Milewski2-3/+74
Currently, Kolla images lack standard metadata, making it difficult to identify their build source, creation time, or exact version solely by inspecting the image artifact. This patch introduces the addition of Open Container Initiative (OCI) standard labels to all generated images. The build process now detects metadata (utilizing `direct_url.json` for pip-installed packages to avoid subprocess calls) and injects the following labels into the container runtime config: * org.opencontainers.image.authors * org.opencontainers.image.created * org.opencontainers.image.description * org.opencontainers.image.licenses * org.opencontainers.image.revision * org.opencontainers.image.source * org.opencontainers.image.title * org.opencontainers.image.url * org.opencontainers.image.version Example output: "Labels": { "org.opencontainers.image.authors": "Kolla Project (https://launchpad.net/kolla)", "org.opencontainers.image.created": "2025-12-22T14:02:47.015819", "org.opencontainers.image.description": "OpenStack Kolla keystone-ssh image", "org.opencontainers.image.licenses": "Apache-2.0", "org.opencontainers.image.revision": "96b54022857ccef8dc6bb11789abe32119827109", "org.opencontainers.image.source": "https://opendev.org/openstack/kolla", "org.opencontainers.image.title": "keystone-ssh", "org.opencontainers.image.url": "https://opendev.org/openstack/kolla", "org.opencontainers.image.version": "master-ubuntu-noble" } This enhancement improves the interoperability of Kolla images with standard container tools and registries that display OCI metadata. Change-Id: I3451940c90180ba91759c839987434e94251e32e Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-30Merge "Update Ceph Squid RPM repo to centos-10-stream"Zuul2-2/+2
2026-03-30Merge "Prometheus: add valkey exporter image"Zuul1-0/+11
2026-03-26Switch to Gazpacho/2026.1 sourcesMichal Nasiadka2-3/+6
Change-Id: I9b6eba0c55fa9914e8db3576127f7d53c13e97d5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-25Prometheus: add valkey exporter imagePiotr Milewski1-0/+11
Adds a new prometheus-valkey-exporter image to support monitoring of Valkey instances. Change-Id: Id0ad47301e48fc4e2cb1f93865a5c5d58f521467 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-03-25Update Ceph Squid RPM repo to centos-10-streamSeunghun Lee2-2/+2
Change-Id: I530a0f710507c8f959ccf10e4d3560372e800a05 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2026-03-25Merge "Drop Telegraf"Zuul3-4/+1
2026-03-25Merge "Update ProxySQL 3.0.x RPM repo to use almalinux 10"Zuul1-1/+1
2026-03-18Merge "Update Prometheus Alertmanager and exporters to the latest"Zuul1-24/+24
2026-03-12Update Prometheus Alertmanager and exporters to the latestSeunghun Lee1-24/+24
* prometheus-alertmanager: 0.28.1 -> 0.31.1 * prometheus-blackbox-exporter: 0.27.0 -> 0.28.0 * prometheus-cadvisor: 0.53.0 -> 0.56.2 * prometheus-elasticsearch-exporter: 1.9.0 -> 1.10.0 * prometheus-libvirt-exporter: 2.2.0 -> 2.3.1 * prometheus-memcached-exporter: 0.15.3 -> 0.15.5 * prometheus-mysqld-exporter: 0.17.2 -> 0.18.0 * prometheus-node-exporter: 1.9.1 -> 1.10.2 prometheus-mtail and prometheus-openstack-exporter were not updated as there are no later stable releases. Change-Id: If4f6bed2254f01eb7f9e3aec01cfc81c493ae787 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2026-03-12Update ProxySQL 3.0.x RPM repo to use almalinux 10Seunghun Lee1-1/+1
Change-Id: Ic79e5385607f6241cefb5d16d6d233fde814899f Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2026-02-23Update Prometheus to version 3.5.1Pierre Riteau1-3/+3
Change-Id: I66015b45f2c1f915e1aadc57af9c3d239e9c2472 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-01-22Drop TelegrafMichal Nasiadka3-4/+1
It has been deprecated in June 2025. Change-Id: I45bfed8ac7fd86dedab81533751e573272c01012 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-22Merge "influxdb: Drop support"Zuul2-2/+1
2026-01-22influxdb: Drop supportMichal Nasiadka2-2/+1
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support). There are no plans in upgrading InfluxDB to v2 - so let's drop it. Change-Id: Id17aa4946617c851780d424e7e053dd79196be6f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-01-22Update README with new mission statementDr. Jens Harbott1-3/+0
We have said for a long time that the images that the project produces are only meant for testing purposes, amend the documentation to be more explicit about it. Further changes: - Make the wording respect both Docker and Podman as container engines - Update outdated information - Add a release note stating the same Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: Ia04afe6387f94e33ca087dcf9d369ef22b8e8f28
2026-01-21Remove remaining mentions of Docker HubPierre Riteau1-3/+1
Change-Id: I76f91c0f59a2a623308267afa7810314294fa064 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-01-20Merge "opensearch: Fix repository name"Zuul1-1/+1
2026-01-09Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com>
2025-12-19opensearch: Fix repository namePierre Riteau1-1/+1
Change-Id: If59a55b758f48b7b89beb3b0dd94f1b8002cee73 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-12-16Switch to Debian TrixieMichal Nasiadka4-20/+18
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-05Merge "Revert "Switch to 2025.2 release""Zuul1-1/+1
2025-12-05Revert "Switch to 2025.2 release"Michal Nasiadka1-1/+1
This reverts commit a28d2409c58c3192ed9c1b5dc1049ae466502577. Change-Id: I55c99ea29f20165b7853976f13312fca62e0be8f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-03redis: Drop redis and redis-sentinel imagesMichal Nasiadka3-5/+3
We switched to Valkey Change-Id: Ic40fecb87dd3eaf67eb1d3088978d462ff5b4320 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-18Transition to the new rabbitmq Debian package archives.Michael Still2-6/+6
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com>
2025-11-03Bump versions of packages in sources.pyMichal Nasiadka1-9/+9
Change-Id: I395cfdf22cd87a43294dbae561a8872cb0b48e1b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-30Merge "Add Valkey"Zuul1-1/+5
2025-10-29Add ValkeyMichal Nasiadka1-1/+5
Change-Id: I02f3adf9825636e2b81c50543d6f95ea986019b6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-28Merge "Drop Venus images"Zuul2-9/+1
2025-10-27Drop Venus imagesMichal Nasiadka2-9/+1
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/964860 Change-Id: I3a04487a75c04ba989fa70f2025db33308671dfb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-14mariadb: Bump to 11.4Michal Nasiadka1-4/+3
11.4 is the next LTS release (see [1]) New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB client variable ``ssl-verify-server-cert`` change from ``FALSE`` to ``TRUE``. [2] This variable can be overidden by assigning ``TRUE`` to environment variable with the same name. [1]: https://mariadb.org/11-4-lts/ [2]: https://jira.mariadb.org/browse/MDEV-31857 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281 Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14Merge "Drop support for building MariaDB clustercheck"Zuul1-1/+1
2025-10-14Drop support for building MariaDB clustercheckSeunghun Lee1-1/+1
MariaDB clustercheck script has not been maintained and it will not work with MariaDB 11.4 (the next LTS version). This is because clustercheck.sh uses ``mysql*`` commands but from MariaDB 11.4, those commands are not supported. The health check of MariaDB server containers will be done by new script which comes with change [1]. Without MariaDB clustercheck, MariaDB server becomes only container image in the family, so mariadb-base and mariadb-server dockerfiles are merged. To avoid breaking changes, the name 'mariadb-server' is retained. Follow-up to rename references in Kolla and K-A from 'mariadb-server' to 'mariadb' would be nice. [1] https://review.opendev.org/c/openstack/kolla/+/962657 Change-Id: I01278f76ee82b018a854b5862f3caaa8c78a9a30 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-10repos: Deduplicate repos.yamlMichal Nasiadka2-169/+74
Introduce rpm/deb entry in repos.yaml, create a structure [base_package_type]: [base_distro]: [base_distro-$arch] Allow any of these to be undefined, defaulting to empty dict This allows to deduplicate entries between distros of the same base_package_type (rpm/deb) Sort repos.yaml Change-Id: Ifc351d5d612e6c6cc82be282aed179c656ae252c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-8/+8
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-06Merge "debian: Use {{ openstack_release_codename }} for extrepo"Zuul2-0/+10
2025-10-06Merge "Add MariaDB healthcheck.sh"Zuul1-0/+5
2025-10-03Add MariaDB healthcheck.shSeunghun Lee1-0/+5
MariaDB clustercheck has not been updated for a long time. Since the script uses ``mysql*`` commands but MariaDB 11.4 (next LTS version) does not support them, it will not work once MariaDB gets upgraded. Added alternative MariaDB container health check script ``healthcheck.sh`` from official MariaDB docker images. [1] This script uses ``mariadb*`` commands, so it's prone to MariaDB upgrade. [1] https://mariadb.com/docs/server/server-management/install-and-upgrade-mariadb/installing-mariadb/binary-packages/automated-mariadb-deployment-and-administration/docker-and-mariadb/using-healthcheck-sh Change-Id: I7816edb6ebd8c95412a6833ea20b32193c2d1415 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 17:25:07 +0000