Commit graph

1259 commits

Author SHA1 Message Date
Michael Still
b852b8ce32 Update repo GPG key for influxdata.
According to https://www.influxdata.com/blog/package-signing-key-rotation
the preferred signing key for influxdata package repositories
changed in early 2026. Update to the new preferred key.

Closes-Bug: #2138095

Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6
Signed-off-by: Michael Still <mikal@stillhq.com>
2026-01-09 19:09:59 +00:00
Michal Nasiadka
cee27f6426 Switch to Debian Trixie
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-16 12:15:22 +00:00
Zuul
364807f8dd Merge "Revert "Switch to 2025.2 release"" 2025-12-05 13:53:49 +00:00
Michal Nasiadka
c30e4e524a Revert "Switch to 2025.2 release"
This reverts commit a28d2409c5.

Change-Id: I55c99ea29f20165b7853976f13312fca62e0be8f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-05 07:40:25 +00:00
Michal Nasiadka
2da1676d7a redis: Drop redis and redis-sentinel images
We switched to Valkey

Change-Id: Ic40fecb87dd3eaf67eb1d3088978d462ff5b4320
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-03 12:06:34 +01:00
Michael Still
0fc73a644b Transition to the new rabbitmq Debian package archives.
RabbitMQ announced some time ago that the package archives were moving:
https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving

The old location is no longer working, so this patch transitions to
the new one.

Closes-Bug: #2131736

Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf
Signed-off-by: Michael Still <mikal@stillhq.com>
2025-11-18 18:21:25 +00:00
Michal Nasiadka
5ad545cc72 Bump versions of packages in sources.py
Change-Id: I395cfdf22cd87a43294dbae561a8872cb0b48e1b
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-03 06:38:41 +00:00
Zuul
5a79eff427 Merge "Add Valkey" 2025-10-30 09:05:33 +00:00
Michal Nasiadka
af9dfb0dba Add Valkey
Change-Id: I02f3adf9825636e2b81c50543d6f95ea986019b6
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-29 16:32:24 +01:00
Zuul
ae3229311a Merge "Drop Venus images" 2025-10-28 19:15:39 +00:00
Michal Nasiadka
539342b730 Drop Venus images
It has been marked as inactive and venus dashboard plugin is breaking
Horizon Kolla builds.

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/964860

Change-Id: I3a04487a75c04ba989fa70f2025db33308671dfb
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-27 09:38:44 +00:00
Michal Nasiadka
c245289176 mariadb: Bump to 11.4
11.4 is the next LTS release (see [1])

New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB
client variable ``ssl-verify-server-cert`` change from ``FALSE`` to
``TRUE``. [2]
This variable can be overidden by assigning ``TRUE`` to environment
variable with the same name.

[1]: https://mariadb.org/11-4-lts/
[2]: https://jira.mariadb.org/browse/MDEV-31857

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281

Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14 16:07:46 +01:00
Zuul
f71ab2be35 Merge "Drop support for building MariaDB clustercheck" 2025-10-14 12:53:25 +00:00
Seunghun Lee
cd75df6ce0 Drop support for building MariaDB clustercheck
MariaDB clustercheck script has not been maintained and it will not work
with MariaDB 11.4 (the next LTS version).
This is because clustercheck.sh uses ``mysql*`` commands but from
MariaDB 11.4, those commands are not supported.

The health check of MariaDB server containers will be done by new script
which comes with change [1].

Without MariaDB clustercheck, MariaDB server becomes only container image in
the family, so mariadb-base and mariadb-server dockerfiles are merged.
To avoid breaking changes, the name 'mariadb-server' is retained.
Follow-up to rename references in Kolla and K-A from 'mariadb-server' to
'mariadb' would be nice.

[1] https://review.opendev.org/c/openstack/kolla/+/962657

Change-Id: I01278f76ee82b018a854b5862f3caaa8c78a9a30
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14 10:06:30 +01:00
Michal Nasiadka
4d87fecd16 repos: Deduplicate repos.yaml
Introduce rpm/deb entry in repos.yaml, create a structure

[base_package_type]:
  [base_distro]:
    [base_distro-$arch]

Allow any of these to be undefined, defaulting to empty dict

This allows to deduplicate entries between distros of the same
base_package_type (rpm/deb)

Sort repos.yaml

Change-Id: Ifc351d5d612e6c6cc82be282aed179c656ae252c
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-10 07:42:44 +00:00
Piotr Milewski
79726bd9d5 Update Fluentd from v5 LTS to v6 LTS
Fluent Package v5 LTS will reach end of support at
the end of 2025.
Fluent Package v6 LTS will be supported until at least
the end of 2027.

This change updates the apt repository configuration and package version
to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL.

No changes to existing Fluentd configuration files are required.

Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-09 11:45:48 +00:00
Zuul
ccaf00b936 Merge "debian: Use {{ openstack_release_codename }} for extrepo" 2025-10-06 14:17:59 +00:00
Zuul
1dabf1812a Merge "Add MariaDB healthcheck.sh" 2025-10-06 09:46:45 +00:00
Seunghun Lee
683ae79657 Add MariaDB healthcheck.sh
MariaDB clustercheck has not been updated for a long time.
Since the script uses ``mysql*`` commands but MariaDB 11.4 (next LTS version)
does not support them, it will not work once MariaDB gets upgraded.

Added alternative MariaDB container health check script ``healthcheck.sh``
from official MariaDB docker images. [1]
This script uses ``mariadb*`` commands, so it's prone to MariaDB
upgrade.

[1] https://mariadb.com/docs/server/server-management/install-and-upgrade-mariadb/installing-mariadb/binary-packages/automated-mariadb-deployment-and-administration/docker-and-mariadb/using-healthcheck-sh

Change-Id: I7816edb6ebd8c95412a6833ea20b32193c2d1415
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-03 14:47:05 +01:00
Michal Nasiadka
5c6ffd7457 Stop duplicating repos in repos.yaml
Change-Id: Ic8bfaedb1e94dd8b64fa8a63d9cd3b76a2b73ffb
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 12:25:07 +00:00
Michal Nasiadka
806602e488 Add support for rpm to repos.yaml
Add the ability to configure repositories in the same
way as we do Debuntu ones - via repos.yaml.

Removes .repo files from base - since these are not
needed there anymore.

gpgcheck = 1 is default in docker/base/dnf.conf

Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 14:24:31 +02:00
Michal Nasiadka
d4b777bb06 Move to Rocky Linux 10
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237

Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01 12:39:22 +00:00
Michal Nasiadka
d9a4b6cfa9 debian: Use {{ openstack_release_codename }} for extrepo
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23 12:51:50 +00:00
Zuul
ef74be174f Merge "Switch to 2025.2 release" 2025-09-22 15:17:41 +00:00
Zuul
8ef672bdd7 Merge "Drop ironic-inspector" 2025-09-19 11:58:09 +00:00
Michal Nasiadka
a28d2409c5 Switch to 2025.2 release
Change-Id: Ib73e2c47faf66ddee79d07259e75f1b1d721f0aa
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18 07:27:16 +02:00
Michal Nasiadka
4f9d8c0e1c gnocchi: Bump to 4.7.0
This is required for uwsgi module usage

Change-Id: If1a078d2704fbd0b119d6c1ffc5a10aeff0a150a
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-11 09:52:24 +02:00
Zuul
0d51f0ab03 Merge "Prometheus and core components update" 2025-09-10 08:22:53 +00:00
Michal Nasiadka
97899bce58 Drop ironic-inspector
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951864

Change-Id: Ie7e607c5a9c6f8c2e36aea5d52dc2ffbe97dddb3
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05 07:23:23 +00:00
Michal Nasiadka
5781b359ef Remove RDO/Delorean
RDO has staffing problems and has decided to only
support SLURP releases - let's drop reliance on that
repository.

Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-29 07:19:33 +00:00
Piotr Milewski
67e37b703a Prometheus and core components update
Updates a range of monitoring and core infrastructure components
to their latest stable upstream versions to leverage new
features and bug fixes.

etcd: 3.5.16 -> 3.6.4
letsencrypt-lego: 4.20.4 -> 4.25.2
prometheus-blackbox-exporter: 0.25.0 -> 0.27.0
prometheus-cadvisor: 0.49.2 -> 0.53.0
prometheus-elasticsearch-exporter: 1.8.0 -> 1.9.0
prometheus-memcached-exporter: 0.15.0 -> 0.15.3
prometheus-mysqld-exporter: 0.16.0 -> 0.17.2
prometheus-node-exporter: 1.8.2 -> 1.9.1
prometheus-server: 3.2.1 -> 3.5.0

The Prometheus-server package has also been switched to
a Long-Term Support (LTS) version, which ensures extended
stability and security support.

Change-Id: Ib9805fb6a93a0da887918174d9994caa5f1306d3
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-08-27 13:30:16 +02:00
Zuul
1c5239e193 Merge "Enable Prometheus mtail build for ARM64" 2025-08-20 13:58:48 +00:00
Zuul
ec3b0a1730 Merge "Influxdb: use stable RHEL repo" 2025-08-20 13:49:14 +00:00
Zuul
a40ad7ea0a Merge "Enable Barbican build on Ubuntu ARM64" 2025-08-19 23:23:04 +00:00
Bartosz Bezak
444a81b62b Influxdb: use stable RHEL repo
Switch the RHEL repo to the stable channel as per [1]. Use new GPG.
Telegraf arm64 builds are enabled again, as binaries exists.

[1] https://repos.influxdata.com/stable/x86_64/

Change-Id: Ie4f6f15404f6965df51f3214506ae9f8bb9b61e7
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18 20:15:13 +02:00
Bartosz Bezak
85878fe6a8 Enable Barbican build on Ubuntu ARM64
Re-enable the Ubuntu arm64 build. The previous exclusion was due to
uWSGI issue [1], which is no longer reproducible on Ubuntu Noble.

Change-Id: I400e9a9a3bf03053589835f933023eedee504f08
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18 20:05:57 +02:00
Bartosz Bezak
a7ada218cc Enable Prometheus mtail build for ARM64
arm64 binaries are available currently.

Change-Id: Iabf606848a6160eaf9e2494a2564f37c6db09882
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18 16:48:41 +02:00
Zuul
164eb7845a Merge "Revert "Switch to 2025.1 sources"" 2025-08-18 14:16:30 +00:00
Alex-Welsh
ed094e0af4
Bump libvirt exporter
Bumps libvirt exporter source from v1.6.0 to v2.2.0. This fixes some
metrics that were lost when the exporter was changed from the old
"tinkoff" source to "inovex".

See also Icc8a3651d601ab45d448c9d252ca6155219d21cf

Closes-Bug: #2120639

Change-Id: Ib738325603173157b4c482f9de6d5d9cea0b758a
Signed-off-by: Alex Welsh <alex@stackhpc.com>
2025-08-14 14:25:06 +01:00
Michal Nasiadka
e77d2ba794 Revert "mariadb: pin to 10.11.13"
This reverts commit e478adcbe6.

Reason for revert: mariabackup fixed

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087

Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12 07:18:23 +00:00
Michal Nasiadka
87678d014f Revert "Switch to 2025.1 sources"
This reverts commit 0733a13d7b.

Reason for revert: switch back to master

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/956785

Change-Id: If888500a791c66a592f17aa2be1f3784ee009a91
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12 06:23:54 +00:00
Pierre Riteau
e478adcbe6 mariadb: pin to 10.11.13
Closes-Bug: #2119954

Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-08-07 16:22:16 +02:00
Bartosz Bezak
ddac7ca1ed send empty X-Registry-Auth for anonymous pushes
Since Docker 28.3.3 the daemon rejects a push that carries no
`X-Registry-Auth` header [1]. The SDK already sets this header when it
finds credentials, so the breakage happens only on anonymous pushes.

During `PushTask.push_image()` we now check whether the SDK can resolve
credentials for the target registry; if it cannot, we inject
`auth_config={}`, causing the SDK to send the minimal "{}" header that
satisfies the daemon while leaving authenticated pushes unchanged.

Drop this addition when [2] is fixed.

[1] https://github.com/moby/moby/pull/50371
[2] https://github.com/docker/docker-py/issues/3348

Closes-Bug: #2119619

Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-06 11:50:39 +02:00
Zuul
5d2dfc0eb9 Merge "Move to CentOS Stream 10" 2025-07-17 11:54:34 +00:00
Michal Nasiadka
9e36b89766 Move to CentOS Stream 10
Known missing packages:
- mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR
- glusterfs-fuse in manila-share - built in Kolla COPR
- collectd/telegraf - no opstools repository
- redis - needs a switch to valkey
- python3-ethtool - not required for neutron-mlnx-agent since 6 years [1]

Building packages in Kolla COPR is a temporary solution until these show up
in EPEL10.

[1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751

Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-16 14:05:50 +00:00
Doug Szumski
0aaefd2dfe Remove the OVN exporter for Prometheus
Since this exporter is no longer developed, and is not used in Kolla
Ansible, remove it immediately. A replacement has been proposed in
change #951971.

Change-Id: Ie47aed221d04bbb2b50ccfbd7c398e6ab6022442
2025-06-06 17:40:23 +01:00
Zuul
a90a8893c8 Merge "Revert "[release] Use RDO's Epoxy packages"" 2025-06-05 22:28:18 +00:00
Piotr Milewski
bf86273caf Update OpenSearch and OpenSearch Dashboards to version 3.x
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478

Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30 18:07:48 +02:00
Michal Arbet
a4f68e1889 Bump proxysql to 3.0.x
This patch bump proxysql 2.7.x to 3.0.x

Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30 18:07:48 +02:00
Michal Arbet
c930c9fb9c debian: Use bookworkm suite for rabbitmq APT repo
Change-Id: Ifd664de82a81830eeda8ccc019b22ee93768635e
2025-05-30 18:07:48 +02:00