aboutsummaryrefslogtreecommitdiff
path: root/kolla
AgeCommit message (Collapse)AuthorFilesLines
2025-08-14Bump libvirt exporterAlex-Welsh1-3/+3
Bumps libvirt exporter source from v1.6.0 to v2.2.0. This fixes some metrics that were lost when the exporter was changed from the old "tinkoff" source to "inovex". See also Icc8a3651d601ab45d448c9d252ca6155219d21cf Closes-Bug: #2120639 Change-Id: Ib738325603173157b4c482f9de6d5d9cea0b758a Signed-off-by: Alex Welsh <alex@stackhpc.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-4/+4
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12Revert "Switch to 2025.1 sources"Michal Nasiadka1-1/+1
This reverts commit 0733a13d7be896dac4004212f9eef48a845b26c2. Reason for revert: switch back to master Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/956785 Change-Id: If888500a791c66a592f17aa2be1f3784ee009a91 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-4/+4
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-08-06send empty X-Registry-Auth for anonymous pushesBartosz Bezak2-5/+25
Since Docker 28.3.3 the daemon rejects a push that carries no `X-Registry-Auth` header [1]. The SDK already sets this header when it finds credentials, so the breakage happens only on anonymous pushes. During `PushTask.push_image()` we now check whether the SDK can resolve credentials for the target registry; if it cannot, we inject `auth_config={}`, causing the SDK to send the minimal "{}" header that satisfies the daemon while leaving authenticated pushes unchanged. Drop this addition when [2] is fixed. [1] https://github.com/moby/moby/pull/50371 [2] https://github.com/docker/docker-py/issues/3348 Closes-Bug: #2119619 Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul4-7/+12
2025-07-16Move to CentOS Stream 10Michal Nasiadka4-7/+12
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-06Remove the OVN exporter for PrometheusDoug Szumski1-11/+0
Since this exporter is no longer developed, and is not used in Kolla Ansible, remove it immediately. A replacement has been proposed in change #951971. Change-Id: Ie47aed221d04bbb2b50ccfbd7c398e6ab6022442
2025-06-05Merge "Revert "[release] Use RDO's Epoxy packages""Zuul1-1/+1
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski1-16/+16
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet1-4/+4
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use bookworkm suite for rabbitmq APT repoMichal Arbet2-4/+4
Change-Id: Ifd664de82a81830eeda8ccc019b22ee93768635e
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-4/+4
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-14Revert "[release] Use RDO's Epoxy packages"Michal Nasiadka1-1/+1
This reverts commit 64f171ccfa02bfeb9c92a641e186bd987f0099ae. Reason for revert: Let's switch to master Change-Id: I28f474015ffd000a3c2cf4c461c3c2f2b8959b0b
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-4/+4
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-05-02Enabling support for Thales Luna user id and group id.Mauricio Harley1-0/+4
The new client software version requires the use of a specific group called "hsmusers", and for consistency reasons, we are specifying both, the user id and the group id, and inserting the Barbican username inside of such a group. More information can be found on https://www.thalesdocs.com/gphsm/luna/7/docs/pci/Content/install/client_install/linux_install.htm Change-Id: Ib7d0c879b3741ca472cd0bbf3a9a88a0fee25cac Signed-off-by: Mauricio Harley <mharley@redhat.com>
2025-04-24Merge "Upgrade Prometheus to v3"Zuul1-4/+4
2025-04-22Upgrade Prometheus to v3Piotr Parczewski1-4/+4
Needed-by: https://review.opendev.org/c/openstack/kolla-ansible/+/945611 Change-Id: I4113976db743d3c5c4ff62f2876e224888f05a36
2025-04-17Update prometheus alertmanager to newest available versionJack Hodgkiss1-3/+3
* prometheus-alertmanager: 0.28.0 -> 0.28.1 Change-Id: Iec5b936ae77f2d8298803fbfe50f55b2ed69f4b3
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul1-0/+24
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka1-0/+24
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-03-25Switch to 2025.1 sourcesMichal Nasiadka1-1/+1
Change-Id: If0cd6444e5d0c898d199a98204588f8ffa4351b9
2025-03-24Merge "Remove swift container images"Zuul3-6/+1
2025-03-21tests: Add cross-arch test for etcdBartosz Bezak2-0/+47
Ensure that when building etcd with --base-arch aarch64, Kolla uses the arm64 tarball instead of amd64. Related-Bug: #2103810 Change-Id: I6248cb6646b2b0c7af1c29f9a0a244cef1c4cf05
2025-03-21fix sources.py based cross-arch buildsBartosz Bezak1-0/+3
Derive debian_arch from base_arch by default when not set by the user. This ensures that cross-architecture builds correctly download the appropriate binaries, while preserving any explicit user override. Closes-Bug: #2103810 Change-Id: I11b7e19ac3a12147138a98fc1e030767f70b44c9
2025-03-21Remove swift container imagesMichal Nasiadka3-6/+1
Change-Id: I05a96f27b47a0f87bcf435872dd08ec0927232e3
2025-03-13[release] Use RDO's Epoxy packagesGrzegorz Koper1-1/+1
Change-Id: I86a894398f5a41e996735f06fe170fc5e305abbf
2025-02-19Remove Git remote origin after cloning sourcesMichal Arbet1-0/+1
When kolla is cloning a Git repository during the build process, the `.git/config` file retains the remote origin URL, which may expose sensitive credentials if authentication tokens are embedded in the URL. This fix ensures that the remote is removed after cloning to prevent unintended exposure of credentials. Closes-Bug: #2098904 Change-Id: Iec21fc2363e03133ec77326da7392bc25b40132a
2025-02-18Allow to use configure_user macro for external templatesAndriy Kurilin2-1/+18
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to build 'in-house'/'not-built-in' projects with Kolla. This commits extends this feature with an ability to use configure_user macro for 'not-built-in' users. The implementation is done the same way as for 'sources', i.e. engine after registers new section structure as soon as it finds unknown '<project>-user' section. In addition, the documentation and CI are extended to cover ``--docker-dir`` option. Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
2025-02-06Install pycadf from pypi packageMichal Arbet1-4/+0
Previously, the `pycadf` package did not include configuration files, so they were manually installed from source. However, this was fixed in pycadf's upstream in [1], allowing us to rely on the package itself. Additionally, the `ceilometer_api_audit_map.conf` file has been removed, as it was dropped in pycadf's upstream commit here [2] [1] https://review.opendev.org/c/openstack/pycadf/+/936741 [2] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I022aa4c403f08385beb83b5d0c81f8abb42eb4a7
2025-02-02Merge "Prometheus update all exporters to the latest versions"Zuul1-27/+27
2025-01-31Bump pycadf version to 4.0.1Michal Arbet1-1/+1
This patch also removing copy of ceilometer_api_audit_map.conf file as it is now removed [1]. [1] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I7c086ed5da0e3713ac15aaeaceb38f4a05b84bf0
2025-01-30Prometheus update all exporters to the latest versionsPiotr Milewski1-27/+27
prometheus-alertmanager: 0.27.0 -> 0.28.0 prometheus-blackbox-exporter: 0.24.0 -> 0.25.0 prometheus-cadvisor: 0.49.1 -> 0.49.2 prometheus-elasticsearch-exporter: 1.7.0 -> 1.8.0 prometheus-memcached-exporter: 0.14.2 -> 0.15.0 prometheus-mtail: 3.0.0-rc54 -> 3.0.8 prometheus-mysqld-exporter: 0.15.1 -> 0.16.0 prometheus-node-exporter: 1.7.0 -> 1.8.2 prometheus 2.50.1 -> 2.55.1 Co-authored-by: Piotr Parczewski <piotr@stackhpc.com> Change-Id: I9359df23a41a600dd46dbc1812a54be57fd33f71
2025-01-24Merge "Fix genconfig"Zuul1-6/+15
2025-01-24Fix genconfigMichal Nasiadka1-6/+15
Currently tox -e genconfig fails with stevedore issues, because tox is not doing sdist. Closes-Bug: #2051575 Change-Id: Idfc26fe380a546d0fd712a531e5913090b01d808
2024-12-17Update Let's Encrypt lego versionPiotr Parczewski1-3/+3
Change-Id: I979df16dea4499b470ce7a4e23df7927a5952aa7
2024-12-13magnum: Add helm binary for magnum-cluster-apiMichal Nasiadka1-0/+8
Closes-Bug: #2091608 Change-Id: I52105f6cbf7529ce107cabf8a38a10525be7435c
2024-12-11Merge "Revert "[release] Use Dalmatian sources by default""Zuul2-2/+2
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul1-1/+5
(Dalmatian)""
2024-12-10Revert "[release] Use Dalmatian sources by default"Michal Nasiadka2-2/+2
This reverts commit 5af5febf50bc0a02422b437b16598570d0c5ffe3. Reason for revert: Epoxy cycle is on In addition to the revert skyline-apiserver aiosqlite u-c is removed until [1] is merged, designate rootwrap.conf.sample file has been renamed to rootwrap.conf and pycadf is bumped to 4.0.0. [1]: https://review.opendev.org/c/openstack/skyline-apiserver/+/935604 Change-Id: I1265633f0913b7927955564fac911a682615004a
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka1-1/+5
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-15Add mechanism for patching files in containersMichal Arbet3-1/+35
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-10-25Merge "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"19.0.0.0rc1Zuul1-5/+1
2024-10-24Merge "[release] Use Dalmatian sources by default"Zuul1-1/+1
2024-10-24[release] Use Dalmatian sources by defaultBartosz Bezak1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I9a671d63dc6c6919609b667704bc3ce6d91fa22b
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka1-5/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-24CI: bump hackingMichal Nasiadka4-6/+7
Change-Id: I5f2177b7c2edc0e35ed2e8e9bdfc4be2f262309f
2024-10-24Merge "etcd: Bump version to v3.5.16"Zuul1-3/+3
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul1-4/+4
2024-10-07Merge "[release] Change RDO's DELOREAN_DEPS repo to Dalmatian"Zuul1-1/+1