aboutsummaryrefslogtreecommitdiff
path: root/kolla
AgeCommit message (Collapse)AuthorFilesLines
2026-10-16Merge "Install syslinux in debian ironic-conductor containers" into ↵Zuul1-0/+1
stable/2026.2
2026-10-16Install syslinux in debian ironic-conductor containersJed Preist1-0/+1
Install syslinux in debian ironic-conductor containers, to provide files required for creating disk images that can be booted with the redfish-virtual-media boot interface Closes-Bug: #2163659 Change-Id: I61360a9062e365a3ae09853908e8aca8e04597bb Signed-off-by: Jed Preist <jed@stackhpc.com> (cherry picked from commit 9a972298bb490d4ead8f2d5ed68f500a2f55f4b9)
2026-10-15keystone: Remove keystone containerMichal Nasiadka3-160/+0
We completed the keystone-api migration in Ib7ef5526e087429dfeb5a3211e19efda4776b52c Change-Id: I6dc81171470a9c7fc6385a9d6867b7d4a584dc8e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit f738a5e56be543fc5be1bfc4e256544db03fc682)
2026-10-14Use gazpacho for UCAMichal Nasiadka1-1/+1
Unfortunately Hibiscus will not have a Noble/UCA dist. Closes-Bug: #2170813 Related-Bug: #2170815 Change-Id: Id65412f12d7f6a4689c059a8d1bd8ec910d89653 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 5a9d6b070fb1d0713a1d30146615ed687e961aad)
2026-10-12Change OPENSTACK_RELEASE to 2026.223.0.0.0rc223.0.0Michal Nasiadka1-2/+2
Change-Id: I83802b06d2efc0eb25d1ba05ad52bb5ea24f6a56 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-10-05Merge "keystone: Introduce keystone-api container"23.0.0.0rc1Zuul3-0/+160
2026-10-01Drop ovn-ctl download from OVN relay imageBartosz Bezak1-6/+0
The packaged ovn-ctl already supports relays: OVN 26.03 on Rocky and Ubuntu, and 25.03 on Debian. Change-Id: I1597d9fbc6905207e86893d998ca85eb90de21dc Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-10-01Merge "Fix: Zstd missing from ironic conductor container."Zuul1-1/+3
2026-10-01keystone: Introduce keystone-api containerMichal Nasiadka3-0/+160
It's a clone of keystone container image. After using the new container in Kolla-Ansible - the old keystone container image can be dropped. Change-Id: Ia5684a4c5e5eb25fa5194dac9f841b0793203718 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-28Merge "Updated from check-sources"Zuul1-6/+6
2026-09-28Merge "mariadb: Remove unused replica backup script"Zuul2-151/+0
2026-09-28Updated from check-sourcesOpenStack Proposal Bot1-6/+6
Change-Id: I9d628acc34bf8568500ec43e0ede2257ff567ab0 Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-25Updated from check-sourcesOpenStack Proposal Bot1-18/+18
Change-Id: I11fb14bd470e78eb5fe6f75a6494ef61483e67d8 Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-24Fix: Zstd missing from ironic conductor container.Claudia Watson1-1/+3
Ironic-conductor needs zstd installed to be able to decompress zstd compressed files. Patch installs zstd to docker container. Patch merged in Feb 2025 ( https://review.opendev.org/c/openstack/ironic/+/938904 ) enabled the detection and decompression of zstd compressed files. Zstd is a popular choice for compression, therefore, would be useful to support. Closes-Bug: #2167459 Change-Id: I5fa8ec4dd5d1d4938e0b47c99d07d328286ecda9 Signed-off-by: Claudia Watson <claudia@stackhpc.com>
2026-09-22Merge "Allow lowercase from"Zuul2-2/+45
2026-09-18Merge "grafana: replace deprecated grafana-cli"Zuul1-1/+1
2026-09-18Merge "Ensure git cloned dirs are writable for the executing user"Zuul1-0/+6
2026-09-16mariadb: Remove unused replica backup scriptminwooseo2-151/+0
Kolla Ansible no longer uses the replica-specific backup script after backups were changed to run against the local database instance. Remove kolla_mariadb_backup_replica.sh and stop installing it in the MariaDB server image. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/1002239 Change-Id: I666986e67940a2e8c2d567a8a6de4befca5ea4d2 Signed-off-by: minwooseo <alsdn1211@naver.com>
2026-09-16Ensure git cloned dirs are writable for the executing userMichal Nasiadka1-0/+6
Closes-Bug: #2167377 Change-Id: Ic5e32b79d058223634d990fb2e33041692f682ce Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-16Updated from check-sourcesOpenStack Proposal Bot1-3/+3
Change-Id: I386a9056a6802beaa0d8c110b9fc2f9a7fe8ce5c Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-15Pin Lego to v4Bartosz Bezak1-3/+4
Lego v5 changes the CLI and storage layout [1], breaking the current certificate scripts. Migration is not trivial. Use lts_branch to stay on v4 for now. [1] https://go-acme.github.io/lego/migration/index.html Change-Id: I4c481c0664de36171ae54efb304ee5790d428a6a Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-09-11Merge "Drop support for CentOS Stream 10"Zuul17-172/+69
2026-09-10Drop support for CentOS Stream 10Michal Nasiadka17-172/+69
Change-Id: I5973943fe83bbb00cfc8623c0cd4d4b98b369315 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-10Updated from check-sourcesOpenStack Proposal Bot1-3/+3
Change-Id: I35291ca92527da34565c84955fad6156d686fdae Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-09Merge "grafana: install Prometheus datasource plugin"Zuul1-1/+4
2026-09-09Updated from check-sourcesOpenStack Proposal Bot1-6/+6
Change-Id: I9d6a6eb0eaf2eee352b80a0583e87f832659aaf1 Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-07Updated from check-sourcesOpenStack Proposal Bot1-6/+6
Change-Id: I32526f218776214f1f9516b126e10816769eb220 Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-09-02Merge "Ensure openvswitch-base children get ovs repo"Zuul5-0/+15
2026-09-02grafana: replace deprecated grafana-cliPiotr Milewski1-1/+1
Change-Id: I68bd3b2dabe9631f7f15b801aaf020380f95fa7d Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-09-01Merge "Upgrade Prometheus Server to 3.13.x LTS"Zuul1-5/+5
2026-09-01Upgrade Prometheus Server to 3.13.x LTSPiotr Milewski1-5/+5
Upgrade Prometheus Server from the 3.5.x LTS release to the 3.13.x LTS release. Change-Id: I8de87eff00b226e8a85eca317af944e9b6c97b3f Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-09-01Updated from check-sourcesOpenStack Proposal Bot1-9/+9
Change-Id: I5b1271480c4c3c17e202a81379289730f39ba567 Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-08-31grafana: install Prometheus datasource pluginPiotr Milewski1-1/+4
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-08-27Merge "letsencrypt: Add ACME dns-01 challenge support"Zuul1-7/+62
2026-08-27Ensure openvswitch-base children get ovs repoAlex Welsh5-0/+15
Previously, openvswitch-base would enable the openvswitch repo, and child containers (e.g. ovn-base, ovn-controller, etc) would be built using ovn packages from that repo. Recently [1] builds were changed to clean up repos at the end of the build, so now dependent containers must re-enable the repo manually. Also added an openvswitch repo override to tests to avoid regresssion. [1] Ie5b9970a4575b6258dc238059d3f33ddfe155789 Closes-Bug: #2163314 Change-Id: I4ea1cc812167142743e3ebcbd532281bfe8a9799 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2026-08-26Updated from check-sourcesOpenStack Proposal Bot1-39/+39
Change-Id: If773969cd58b8a17c103f27294171d5dd99ccc9d Signed-off-by: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> Generated-By: openstack/project-config:playbooks/proposal/propose_update.sh
2026-08-25CI: Post sources.yaml changesMichal Nasiadka1-1/+0
Add sources.yaml trigger on aio/mariadb/prometheus jobs Move out yamllint header from sources.yaml to yamllint config, because the kolla-check-sources.py does not ensure the header is there and it's easier to fix it in this repo. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/1002239 Change-Id: I4e01fb50ca92a12812a0ab1c63b44e1aa5d4a717 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-08-22Switch sources.py into sources.yamlMichal Nasiadka2-437/+326
Needed-By: https://review.opendev.org/c/openstack/project-config/+/998419 Change-Id: Ib00fc1a1cb2aebddf8f6a7badade2946aef31d25 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-08-05letsencrypt: Add ACME dns-01 challenge supportTimon Schnell1-7/+62
This adds support for the ACME dns-01 challenge while keeping http-01 the default. A new --challenge option (default http-01) selects the challenge type. When dns-01 is selected, --dns-provider names any DNS provider compiled into the bundled lego binary, and an optional --dns-additional-opts passthrough forwards extra lego DNS flags (such as --dns.resolvers or --dns.propagation-disable-ans) for environments where the authoritative name server propagation check cannot be performed. Provider credentials are supplied via --env-file: lego DNS providers read credentials only from environment variables, so the wrapper exports the file's contents before lego runs. The file is parsed like docker --env-file: literal KEY=VALUE pairs split on the first '=', comments and blank lines ignored, values taken verbatim and never executed as shell. Selecting dns-01 without --dns-provider fails fast. Co-Authored-By: Premysl Kouril <premysl.kouril@ultimum.io> Assisted-By: Claude Code Change-Id: I61dc5e3f399f6eec02475c7b90e0f41c85c6093c Signed-off-by: Timon Schnell <timon.schnell@btc-it-services.com> Signed-off-by: Jan Horstmann <horstmann@osism.tech>
2026-08-05Add cleanup_repos to revert build_only overridesMichal Nasiadka121-38/+907
Repos marked build_only: true are backed up before handle_repos() overwrites them and restored at the end of each image build, so CI mirror URLs are not baked into the final image. The cleanup RUN was injected into every Dockerfile, not just images that called handle_repos() for those repos. Child images with no backup fell through to "rm -f", deleting the inherited repo file (e.g. debian.sources in bifrost-base, breaking cpio install). Fix by adding a {repo}.enabled sentinel that handle_repos creates when it processes a build_only repo, making the cleanup conditional on that sentinel. Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-31Merge "ironic-pxe: don't fail if symlinks already exist"Zuul1-4/+2
2026-07-30Allow lowercase fromMichal Nasiadka2-2/+45
Change-Id: I42cf2aac795e9f61692deec956de0bedab55086f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-30Move PIP_* env variables to ARG and configMichal Nasiadka4-3/+35
Leaving empty CI template_overrides file in case we need to use it in future. Change-Id: Ic46f1a594bcc330536bc78d93ece10e60622f6d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-23Merge "Rework tar normalization to a shared function"Zuul2-24/+82
2026-07-23Rework tar normalization to a shared functionMichael Sherman2-24/+82
Add missing tests Change-Id: I91b42fe530f87af7d78bb1a543b29a4b0d50872e Signed-off-by: Michael Sherman <shermanm@uchicago.edu>
2026-07-23Merge "Add monitoring for external component versions"Zuul1-0/+9
2026-07-22Merge "rabbitmq: Update to 4.3"Zuul4-4/+4
2026-07-21Merge "neutron: Move tap-as-a-service to be a plugin"Zuul2-1/+4
2026-07-21Merge "Bump ansible-core to 2.21"Zuul1-1/+1
2026-07-21neutron: Move tap-as-a-service to be a pluginMichal Nasiadka2-1/+4
Neutron has changed policy definitions and it's fixed in unreleased version of tap-as-a-service - and we're installing that package from pypi instead of from tarballs. Change-Id: Icffea19cf9c1279dd7e133c5588efd5818249b75 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>