| Age | Commit message (Collapse) | Author | Files | Lines |
|
This release fixes multiple security issues [1].
[1] https://github.com/prometheus/prometheus/releases/tag/v3.5.4
Change-Id: I1ec8f15e14360422aa316779bd19195fd1f4f7a1
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
|
|
Add --buildkit flag to use docker buildx build instead of the docker-py
SDK. An optional --buildkit-builder selects a named buildx builder
instance, enabling docker-container or remote drivers for multi-arch
builds.
--buildkit and --squash are mutually exclusive and rejected at startup.
PushTask is skipped when buildkit is active; push is handled inline.
Set buildkit as the new default.
Change-Id: Idbf1d1bdc091bb84721f8006c2b916731b999859
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Following the PTG agreement, this commit extends the container
configuration engine (set_configs.py) to support YAML format while
maintaining backward compatibility with JSON.
- Integrated 'yaml' library as a universal parser for both JSON
and YAML formats (YAML is a superset of JSON)
- Updated 'load_config' to search for 'config.json', 'config.yaml'
- Added 'python3-yaml' (Debian) and 'python3-pyyaml' (RHEL) as
required base packages in Dockerfile.j2
This change improves configuration readability and allows for
easier maintenance while ensuring no breakage for existing
JSON-based deployments.
Change-Id: Icfb52b8f94e1036d5952b160c5921348d1427fda
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
This change adds images for Kerbside. Kerbside is a SPICE protocol
native proxy used to expose the new spice-direct console type provided
by Openstack Compute. This allows high fidelity virtual desktop
experiences without requiring transcoding of the console into HTML5
in Horizon, or allowing users direct access to the console ports on
your hypervisors.
Sadly, Red Hat chose to remove SPICE support from qemu in RHEL9, and
Rocky Linux has followed along. You therefore _must_ run the Debian or
Ubuntu container images if you wish to use the ``spice-direct``
console type.
Architecturally Kerbside has two components -- an API service which
turns console access URLs from Nova into URLs to ``.vv`` files, and
a proxy service which actually proxies the SPICE traffic. These are
handled as separate container images here because they're quite
different. One is a WSGI REST API, and the other is a daemon. It is
also likely that deployers would choose to host these on different
machines.
Finally, the proxy service needs to be special cased in load
balancing because it strongly expects to terminate TLS itself. The
haproxy is therefore configured as a layer 4 proxy in this case.
Depends-On: https://review.opendev.org/c/openstack/kolla/+/991249
Change-Id: If60a70745462e1360cfadaab1a5a8d75b7fdeb21
Partial-Bug: #2131793 (spice-direct consoles)
Signed-off-by: Michael Still <mikal@stillhq.com>
|
|
|
|
Change-Id: Ic305125f32963dcc5a841e63dec2d368d0549eab
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
The project[1] has received no commit for 4 years. Its latest commit
still uses upper constraints from the old, abandoned Wallaby branch.
[1] https://opendev.org/x/networking-infoblox
Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/988844
Change-Id: I9e2ba00671eb7d05de3c40ed9524f20922e081b1
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
|
|
|
|
Add file to the reno documentation build to show release notes for
stable/2026.1.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2026.1.
Sem-Ver: feature
Change-Id: I5b72baf1137e1307cb4c67e05281236a772e430c
Signed-off-by: OpenStack Release Bot <infra-root@openstack.org>
Generated-By: openstack/project-config:roles/copy-release-tools-scripts/files/release-tools/add_release_note_page.sh
|
|
Include the theme directory in settings_bundle so theme-only changes
invalidate the cache and rebuild the static assets.
Closes-Bug: #2148389
Change-Id: If4fbc24c5c339f7dee7bf67a09fc6448ede0c9fd
Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com>
|
|
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986483
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986352
Change-Id: Ia66dde09bbbad2a5a9e67a8c642f3223ca38be43
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: Id63c035fafaa68a9004c65161c5a3a3ad5544f02
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
This release fixes multiple security issues [1].
[1] https://github.com/prometheus/prometheus/releases/tag/v3.5.3
Change-Id: I9f4243a40d0907639324308d84d8a860c1e54941
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
Change-Id: I3f0dab4b7d612d3e3f3057c1db8c36e3905cec75
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
|
|
Change-Id: I9d82fbcc26a8a3af2718ea8e1f2e0d87a3523579
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
|
|
Zun is broken in 2026.1, it has been released broken and there are
no reviews on the patch to fix it [1].
[1]: https://review.opendev.org/c/openstack/zun/+/982362
Change-Id: I770b9e62c66f8cc63475d51f80eecacc8415b91f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
This exporter comes from https://github.com/openstack-k8s-operators
and will replace the existing OVN exporter which was archived at the
end of 2024.
It can gather metrics from both OVN and OVS based OpenStack clouds.
Change-Id: Idb070d5e5469abd472481f7e19614ee2a78c85d0
Signed-off-by: Doug Szumski <doug@stackhpc.com>
|
|
|
|
|
|
Currently, Kolla images lack standard metadata, making it difficult
to identify their build source, creation time, or exact version solely
by inspecting the image artifact.
This patch introduces the addition of Open Container Initiative (OCI)
standard labels to all generated images. The build process now detects
metadata (utilizing `direct_url.json` for pip-installed packages to
avoid subprocess calls) and injects the following labels into the
container runtime config:
* org.opencontainers.image.authors
* org.opencontainers.image.created
* org.opencontainers.image.description
* org.opencontainers.image.licenses
* org.opencontainers.image.revision
* org.opencontainers.image.source
* org.opencontainers.image.title
* org.opencontainers.image.url
* org.opencontainers.image.version
Example output:
"Labels": {
"org.opencontainers.image.authors": "Kolla Project (https://launchpad.net/kolla)",
"org.opencontainers.image.created": "2025-12-22T14:02:47.015819",
"org.opencontainers.image.description": "OpenStack Kolla keystone-ssh image",
"org.opencontainers.image.licenses": "Apache-2.0",
"org.opencontainers.image.revision": "96b54022857ccef8dc6bb11789abe32119827109",
"org.opencontainers.image.source": "https://opendev.org/openstack/kolla",
"org.opencontainers.image.title": "keystone-ssh",
"org.opencontainers.image.url": "https://opendev.org/openstack/kolla",
"org.opencontainers.image.version": "master-ubuntu-noble"
}
This enhancement improves the interoperability of Kolla images with
standard container tools and registries that display OCI metadata.
Change-Id: I3451940c90180ba91759c839987434e94251e32e
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
|
|
|
|
Adds a new prometheus-valkey-exporter image to support
monitoring of Valkey instances.
Change-Id: Id0ad47301e48fc4e2cb1f93865a5c5d58f521467
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
|
|
This patch adds support for the standalone neutron-ovn-vpn-agent.
The new agent was added in the 2024.1 and is required for vpnaas
when using ovn.
[1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/765353
Related-Bug: #2048392
Change-Id: I552b9fbc8fa0b49d3e0e3212dd11962b02837b9f
Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net>
Signed-off-by: Pablo COLSON <colson.pablo@gmail.com>
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
|
|
|
|
|
|
This matches the version used by Ubuntu images since Flamingo [1][2].
Debian Trixie still uses 25.03 [3].
Support for 25.03 has ended on 7 March, 2026 [4] while 25.09 is
supported until 5 September, 2026 [5].
[1] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/flamingo_versions.html
[2] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/gazpacho_versions.html
[3] https://packages.debian.org/source/trixie/ovn
[4] https://www.ovn.org/en/releases/25.03/
[5] https://www.ovn.org/en/releases/25.09/
Change-Id: I323ea4e7dabecfcf20fa890e028eeb1c3766be0b
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
|
|
VAST uses NVME-over-TCP to implement Cinder volumes. When
Cinder uses VAST as a backend driver and Glance uses Cinder
as store, the nvme-cli package is needed in glance-api,
to generate NVME NQNs.
Partial-Bug: #2035975
Change-Id: If185fc29eabc831a7cc1b28b435cc5ecfd63732e
Signed-off-by: Stig Telfer <stig@stackhpc.com>
|
|
|
|
Change-Id: Id6684e4356f68e4348c0f8c1c0c1e5397553397e
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Add django-redis to the Horizon image to support Redis/Valkey
as Django cache and session backend.
Closes-Bug: #2093414
Change-Id: Ib327dfb770aea5d953baba2399f97cf3ea12defd
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
|
|
* prometheus-alertmanager: 0.28.1 -> 0.31.1
* prometheus-blackbox-exporter: 0.27.0 -> 0.28.0
* prometheus-cadvisor: 0.53.0 -> 0.56.2
* prometheus-elasticsearch-exporter: 1.9.0 -> 1.10.0
* prometheus-libvirt-exporter: 2.2.0 -> 2.3.1
* prometheus-memcached-exporter: 0.15.3 -> 0.15.5
* prometheus-mysqld-exporter: 0.17.2 -> 0.18.0
* prometheus-node-exporter: 1.9.1 -> 1.10.2
prometheus-mtail and prometheus-openstack-exporter were not updated as
there are no later stable releases.
Change-Id: If4f6bed2254f01eb7f9e3aec01cfc81c493ae787
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
|
|
Change-Id: Ic79e5385607f6241cefb5d16d6d233fde814899f
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
|
|
Change-Id: I66015b45f2c1f915e1aadc57af9c3d239e9c2472
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
|
|
|
|
It has been deprecated in June 2025.
Change-Id: I45bfed8ac7fd86dedab81533751e573272c01012
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
Closes-Bug: #2138872
Change-Id: I6e30b749488a0ef2f247adf182db40cda8fa8ca4
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
|
|
Kolla delivers InfluxDB v1, which is EOL (unless you have paid support).
There are no plans in upgrading InfluxDB to v2 - so let's drop it.
Change-Id: Id17aa4946617c851780d424e7e053dd79196be6f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
We have said for a long time that the images that the project produces
are only meant for testing purposes, amend the documentation to be more
explicit about it.
Further changes:
- Make the wording respect both Docker and Podman as container engines
- Update outdated information
- Add a release note stating the same
Signed-off-by: Dr. Jens Harbott <harbott@osism.tech>
Change-Id: Ia04afe6387f94e33ca087dcf9d369ef22b8e8f28
|
|
The move to Debian Trixie for Kolla master accidentally broke SPICE
consoles for Nova (both Horizon and spice-direct). This is because Debian
and Ubuntu now package the SPICE support in a separate package. Without
this package, an attempt to start an instance in Nova requiring SPICE will
result in messages like this in the nova-libvirt logs:
libvirt.libvirtError: unsupported configuration: spice graphics are
not supported with this QEMU
And the instance will enter an error state.
The fix is to install the `qemu-system-modules-spice` package as well in
the nova-libvirt image. This re-arrangement of packages does not affect
Debian Bookworm unless backports are explicitly enabled later.
Closes-Bug: #2138186
Change-Id: Ib4ced4a04353b9c11c6f0abb7cfa91001b239e53
Signed-off-by: Michael Still <mikal@stillhq.com>
|
|
Set inject_facts_as_vars to False to match what we do in
Kolla-Ansible (and this option will default to False in 2.24)
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/972696
Change-Id: Iae2b70ca62fd68400bde9296edcda8e53f14a896
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
According to https://www.influxdata.com/blog/package-signing-key-rotation
the preferred signing key for influxdata package repositories
changed in early 2026. Update to the new preferred key.
Closes-Bug: #2138095
Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6
Signed-off-by: Michael Still <mikal@stillhq.com>
|
|
This reverts commit ef12d96731bc82472941c81ac24e3a13736674d0.
Reason for revert: Broke community.mysql
Change-Id: Icb85112c66645d8df00eb0c40076a6bd822f6866
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I2a74d906b5239b3896fcdca015a9b37641ade833
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|