Commit graph

10848 commits

Author SHA1 Message Date
Michal Nasiadka
8f827e021b Add httpd image for OIDC/SAML frontend in uWSGI case
Change-Id: Ia85f253ecaeaef63c17e75dc4a223e030dbbc58d
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24 10:22:30 +00:00
Michal Nasiadka
c245289176 mariadb: Bump to 11.4
11.4 is the next LTS release (see [1])

New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB
client variable ``ssl-verify-server-cert`` change from ``FALSE`` to
``TRUE``. [2]
This variable can be overidden by assigning ``TRUE`` to environment
variable with the same name.

[1]: https://mariadb.org/11-4-lts/
[2]: https://jira.mariadb.org/browse/MDEV-31857

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281

Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14 16:07:46 +01:00
Zuul
f71ab2be35 Merge "Drop support for building MariaDB clustercheck" 2025-10-14 12:53:25 +00:00
Seunghun Lee
cd75df6ce0 Drop support for building MariaDB clustercheck
MariaDB clustercheck script has not been maintained and it will not work
with MariaDB 11.4 (the next LTS version).
This is because clustercheck.sh uses ``mysql*`` commands but from
MariaDB 11.4, those commands are not supported.

The health check of MariaDB server containers will be done by new script
which comes with change [1].

Without MariaDB clustercheck, MariaDB server becomes only container image in
the family, so mariadb-base and mariadb-server dockerfiles are merged.
To avoid breaking changes, the name 'mariadb-server' is retained.
Follow-up to rename references in Kolla and K-A from 'mariadb-server' to
'mariadb' would be nice.

[1] https://review.opendev.org/c/openstack/kolla/+/962657

Change-Id: I01278f76ee82b018a854b5862f3caaa8c78a9a30
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14 10:06:30 +01:00
Michal Nasiadka
4d87fecd16 repos: Deduplicate repos.yaml
Introduce rpm/deb entry in repos.yaml, create a structure

[base_package_type]:
  [base_distro]:
    [base_distro-$arch]

Allow any of these to be undefined, defaulting to empty dict

This allows to deduplicate entries between distros of the same
base_package_type (rpm/deb)

Sort repos.yaml

Change-Id: Ifc351d5d612e6c6cc82be282aed179c656ae252c
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-10 07:42:44 +00:00
Piotr Milewski
79726bd9d5 Update Fluentd from v5 LTS to v6 LTS
Fluent Package v5 LTS will reach end of support at
the end of 2025.
Fluent Package v6 LTS will be supported until at least
the end of 2027.

This change updates the apt repository configuration and package version
to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL.

No changes to existing Fluentd configuration files are required.

Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a
Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-09 11:45:48 +00:00
Michal Nasiadka
90d255daa3 neutron: keepalived wrapper script does not rm containers
keepalived wrapper script as the only one didn't have --rm
in docker/podman invocation - so these didn't get deleted
when stopped/crashed/etc.

Closes-Bug: #2127170

Change-Id: I85ae37250ac4ef629b77ade04826a363e8047a91
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09 10:46:53 +02:00
Zuul
34923a33ec Merge "ironic: Remove ipxe.efi handling for EL10" 2025-10-07 09:22:28 +00:00
Michal Nasiadka
3b80723615 ironic: Remove ipxe.efi handling for EL10
RHEL removed ipxe.efi - see [1].

[1]: https://issues.redhat.com/browse/RHEL-37610

Change-Id: I142257d6537ceeff23cb2cb34e64d93de9f19d2e
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-07 07:01:48 +00:00
Zuul
ccaf00b936 Merge "debian: Use {{ openstack_release_codename }} for extrepo" 2025-10-06 14:17:59 +00:00
Zuul
f758ac96ea Merge "CI: Update API token for fixing repo visibility" 2025-10-06 13:49:57 +00:00
Michal Nasiadka
88f6daa720 CI: Update API token for fixing repo visibility
Change-Id: Iae913ff1b917104fdbb3257c24386f22f6764a03
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-06 09:57:37 +00:00
Zuul
1dabf1812a Merge "Add MariaDB healthcheck.sh" 2025-10-06 09:46:45 +00:00
Seunghun Lee
683ae79657 Add MariaDB healthcheck.sh
MariaDB clustercheck has not been updated for a long time.
Since the script uses ``mysql*`` commands but MariaDB 11.4 (next LTS version)
does not support them, it will not work once MariaDB gets upgraded.

Added alternative MariaDB container health check script ``healthcheck.sh``
from official MariaDB docker images. [1]
This script uses ``mariadb*`` commands, so it's prone to MariaDB
upgrade.

[1] https://mariadb.com/docs/server/server-management/install-and-upgrade-mariadb/installing-mariadb/binary-packages/automated-mariadb-deployment-and-administration/docker-and-mariadb/using-healthcheck-sh

Change-Id: I7816edb6ebd8c95412a6833ea20b32193c2d1415
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-03 14:47:05 +01:00
Zuul
6c8f2b9042 Merge "Adds ironic-pxe-filter container" 2025-10-03 12:50:59 +00:00
Will Szumski
bacaf8f494 Adds ironic-pxe-filter container
Used in conjunction with the inspector implementation built into Ironic
and based on the Ironic documentation[1].

[1] https://docs.openstack.org/ironic/latest/admin/inspection/pxe_filter.html

Partial-Bug: #2094790

Depends-On: https://review.opendev.org/c/openstack/ironic/+/959850
Change-Id: I17811f2225edd64fb20cc44f0d40e14e9edb1413
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Signed-off-by: Will Szumski <will@stackhpc.com>
2025-10-03 10:00:05 +02:00
Zuul
e65d3b50b4 Merge "Stop duplicating repos in repos.yaml" 2025-10-02 16:09:45 +00:00
Zuul
57590d07af Merge "Add support for rpm to repos.yaml" 2025-10-02 16:05:25 +00:00
Zuul
5b2b5e705e Merge "CI: Improve aarch64 and vars config" 2025-10-02 15:26:16 +00:00
Michal Nasiadka
b2713797e6 CI: Improve aarch64 and vars config
Rename aarch64 to arm64 to sync with OpenDev nodeset naming
Remove base_arch/base_distro/base_distro_version and derive it
from zuul job name

Change-Id: I2f8367ae81d0972517b8712e1cb6ead1044accc4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 13:37:46 +00:00
Zuul
3c792793ee Merge "CI: Add zuul.d to irrelevant files" 2025-10-02 12:50:08 +00:00
Zuul
15c4e4d416 Merge "Move repo enablement to respective rpm blocks" 2025-10-02 12:50:04 +00:00
Michal Nasiadka
5c6ffd7457 Stop duplicating repos in repos.yaml
Change-Id: Ic8bfaedb1e94dd8b64fa8a63d9cd3b76a2b73ffb
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 12:25:07 +00:00
Michal Nasiadka
806602e488 Add support for rpm to repos.yaml
Add the ability to configure repositories in the same
way as we do Debuntu ones - via repos.yaml.

Removes .repo files from base - since these are not
needed there anymore.

gpgcheck = 1 is default in docker/base/dnf.conf

Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 14:24:31 +02:00
Michal Nasiadka
17727e1481 Move repo enablement to respective rpm blocks
Currently we are enabling repos irrespective of rpm/deb
statement blocks and not failing in the method used
if a repository is missing.

Downside is - we might be producing one more layer,
but it probably is a more logical approach.

This is required for adding rpm support in repos.yaml
that will also include failing on missing repositories.

Change-Id: I5479c5c935760f00fe4cd307366f261deee3199f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 08:37:07 +00:00
Michal Nasiadka
918018c18e CI: Add zuul.d to irrelevant files
It was ommitted in the patch that renamed it from .zuul.d

Change-Id: I8e4470185321fad1be3e2307c7578ca54d197718
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 08:16:57 +00:00
Michal Nasiadka
f17a23747f CI: Fix rocky publish jobs - version missing
podman jobs have also been omitted in the original patch

Change-Id: I1ddb4e9ead170f22b231b8595d4dbf7cb0d4fb78
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02 07:44:07 +00:00
Michal Nasiadka
d4b777bb06 Move to Rocky Linux 10
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237

Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01 12:39:22 +00:00
Pierre Riteau
8b121529cb doc: Fix Ubuntu Ceph version
Ubuntu Noble is using Ceph Squid, not Reef [1].

[1] https://packages.ubuntu.com/noble-updates/ceph

Change-Id: I11926e764909ec53bdd2a38d815a31253abd6868
Co-authored-by: Chema Peribáñez <epgboe2.tid@telefonica.com>
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-09-25 17:51:38 +02:00
Zuul
8f462c7f05 Merge "CI: Rename jobs according to changes in K-A" 2025-09-24 15:03:40 +00:00
Michal Nasiadka
1d3e70e589 CI: Rename jobs according to changes in K-A
See I1f08f9b9064d9f7e95b07944db0e7ebac3120c57

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/961226

Change-Id: I2eb93bbd7de108d6d7f3f61c932642fdf7017fd7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-24 07:44:44 +00:00
Zuul
f7db20a52d Merge "horizon: Ensure horizon owns /var/log/kolla/horizon" 2025-09-23 13:42:34 +00:00
Michal Nasiadka
d9a4b6cfa9 debian: Use {{ openstack_release_codename }} for extrepo
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23 12:51:50 +00:00
Zuul
88121bb633 Merge "openstack-base: Fix psycopg2 install on EL" 2025-09-23 10:24:48 +00:00
Zuul
ef74be174f Merge "Switch to 2025.2 release" 2025-09-22 15:17:41 +00:00
Michal Nasiadka
c35fb9ce5c openstack-base: Fix psycopg2 install on EL
pg_config has been moved to postgresql-server, postgresql-devel
only installs a link to pg_config which is unresolvable without
-server package.

Installing postgresql-server-devel to include headers which are
also required for building psycopg2.

Change-Id: I35548a02f652c035c17aabe149752322ffc869c4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-22 13:39:37 +02:00
Zuul
8ef672bdd7 Merge "Drop ironic-inspector" 2025-09-19 11:58:09 +00:00
Michal Nasiadka
74b01d6630 horizon: Ensure horizon owns /var/log/kolla/horizon
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/961614

Change-Id: I9011f9a6d065b85ff76852950e4537070a12b437
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18 16:44:29 +02:00
Michal Nasiadka
46e89ee3b4 CI: Use UCA mirror for Ubuntu
Change-Id: I80070b3c3658948c7157564fb8a79e6dd427f1d1
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18 06:19:34 +00:00
Michal Nasiadka
a28d2409c5 Switch to 2025.2 release
Change-Id: Ib73e2c47faf66ddee79d07259e75f1b1d721f0aa
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18 07:27:16 +02:00
Michal Nasiadka
baa9d4ed9c cinder: Remove wsgi script handling
Cinder removed it in I28666e63896fed0f1661b5964ec46952074f4b23

Change-Id: I69ec97fe8480d27942cc923c170ec3cd669caf06
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18 07:25:57 +02:00
Maximilian Stinsky
df4d573eb5
neutron-metadata-agent: copy wrapper script for haproxy processes
In ml2/ovn setups, the neutron-metadata-agent spawns haproxy processes
to serve metadata requests. To run these haproxy instances inside their
own containers, the wrapper script must be available in the
metadata-agent container.
This is a follow up on I679ac66186d457ae53f89469fe22c5662089019a

Change-Id: Ia47af98ff723ebe8ea8461d05a2bc3b58af845f9
Signed-off-by: Maximilian Stinsky <maximilian.stinsky-damke@wiit.cloud>
2025-09-17 09:44:05 +02:00
Michal Nasiadka
4f9d8c0e1c gnocchi: Bump to 4.7.0
This is required for uwsgi module usage

Change-Id: If1a078d2704fbd0b119d6c1ffc5a10aeff0a150a
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-11 09:52:24 +02:00
Zuul
0d51f0ab03 Merge "Prometheus and core components update" 2025-09-10 08:22:53 +00:00
Bartosz Bezak
e8d8d12ac2 CI: fix secrets for erlang COPR periodic job
It was created with extra newlines.

Change-Id: I9394e5ecf913385870396fa51401748ca0de5e22
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-09-08 18:10:18 +02:00
Michal Nasiadka
012d69d157 CI: Drop zun jobs
Similar to https://review.opendev.org/c/openstack/kolla-ansible/+/959307

Change-Id: I6033521fc1fefe55f685914f823d58c96f68611a
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05 12:55:18 +02:00
Zuul
f53d451903 Merge "docs: update main contributor guide page" 2025-09-05 09:02:52 +00:00
Michal Nasiadka
97899bce58 Drop ironic-inspector
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951864

Change-Id: Ie7e607c5a9c6f8c2e36aea5d52dc2ffbe97dddb3
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-05 07:23:23 +00:00
Bartosz Bezak
0ab1d7240e docs: update main contributor guide page
The goal is to unify common contributor information across
all kolla projects (communication, launchpad links, etc).

Change-Id: Iddcaa8723b364fe4e8619f8fc2b03c93b685db86
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-09-05 09:19:13 +02:00
Zuul
20f371e01d Merge "CI: add weekly COPR RPM build Erlang job" 2025-09-04 08:12:20 +00:00