diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index 86057d611c..52e4780629 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -4,10 +4,6 @@ # where the key is the OS distro and the value is the tag to deploy. kolla_image_tags: openstack: - rocky-9: 2025.1-rocky-9-20260707T061355 - rocky-10: 2025.1-rocky-10-20260707T061355 - ubuntu-noble: 2025.1-ubuntu-noble-20260707T061355 - blazar: - rocky-9: 2025.1-rocky-9-20260730T151535 - rocky-10: 2025.1-rocky-10-20260730T151535 - ubuntu-noble: 2025.1-ubuntu-noble-20260730T151535 + rocky-9: 2025.1-rocky-9-20260809T130341 + rocky-10: 2025.1-rocky-10-20260809T130341 + ubuntu-noble: 2025.1-ubuntu-noble-20260809T130341 diff --git a/etc/kayobe/ofed.yml b/etc/kayobe/ofed.yml index 057c4797d8..54a04036d3 100644 --- a/etc/kayobe/ofed.yml +++ b/etc/kayobe/ofed.yml @@ -19,8 +19,8 @@ stackhpc_pulp_rocky_10_doca_version: "{{ stackhpc_pulp_doca_version_matrix[doca_ stackhpc_doca_kernel_version_matrix: "9.6": 5.14.0.570.21.1.el9.6 "9.7": 5.14.0.611.55.1.el9.7 - "9.8": 5.14.0.687.30.1.el9.8 - "10.2": 6.12.0.211.39.1.el10.2 + "9.8": 5.14.0.687.36.1.el9.8 + "10.2": 6.12.0.211.43.1.el10.2 ############################################################################### # Pulp configuration for DOCA OFED diff --git a/etc/kayobe/pulp-host-image-versions.yml b/etc/kayobe/pulp-host-image-versions.yml index 624fbea894..5d50f8fe61 100644 --- a/etc/kayobe/pulp-host-image-versions.yml +++ b/etc/kayobe/pulp-host-image-versions.yml @@ -1,8 +1,8 @@ --- # Overcloud host image versioning tags # These images must be in SMS, since they are used by our AIO CI runners -stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260720T114136 -stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260720T114136 -stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260715T072311 -stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260715T072311 -stackhpc_ubuntu_noble_overcloud_host_image_version: 2025.1-20260706T191822 +stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260809T214130 +stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260809T214130 +stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260809T214130 +stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260809T214130 +stackhpc_ubuntu_noble_overcloud_host_image_version: 2025.1-20260809T214130 diff --git a/etc/kayobe/pulp-repo-versions.yml b/etc/kayobe/pulp-repo-versions.yml index 5a26a8297c..9623b14927 100644 --- a/etc/kayobe/pulp-repo-versions.yml +++ b/etc/kayobe/pulp-repo-versions.yml @@ -2,20 +2,20 @@ # This file is autogenerated by Ansible using the following workflow: # https://github.com/stackhpc/stackhpc-release-train/actions/workflows/package-update-kayobe.yml stackhpc_pulp_repo_almalinux_9_proxysql_2_7_version: 20250627T134211 -stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260716T231645 -stackhpc_pulp_repo_centos_stream_10_docker_version: 20260716T214407 -stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260603T233007 -stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260602T230909 +stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260807T001829 +stackhpc_pulp_repo_centos_stream_10_docker_version: 20260806T213958 +stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260729T102151 +stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260729T092535 stackhpc_pulp_repo_centos_stream_10_openstack_epoxy_aarch64_version: 20260227T222400 stackhpc_pulp_repo_centos_stream_10_openstack_epoxy_version: 20260227T214730 stackhpc_pulp_repo_centos_stream_10_ovn_lts_aarch64_version: 20260608T144504 stackhpc_pulp_repo_centos_stream_10_ovn_lts_version: 20260608T144504 stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260715T232156 stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260715T221325 -stackhpc_pulp_repo_centos_stream_9_docker_aarch64_version: 20260716T222443 -stackhpc_pulp_repo_centos_stream_9_docker_version: 20260716T214407 -stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_aarch64_version: 20260602T230751 -stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20260602T230909 +stackhpc_pulp_repo_centos_stream_9_docker_aarch64_version: 20260806T233247 +stackhpc_pulp_repo_centos_stream_9_docker_version: 20260806T213958 +stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_aarch64_version: 20260729T091847 +stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20260729T092535 stackhpc_pulp_repo_centos_stream_9_openstack_epoxy_aarch64_version: 20250521T015033 stackhpc_pulp_repo_centos_stream_9_openstack_epoxy_version: 20250521T021940 stackhpc_pulp_repo_centos_stream_9_opstools_aarch64_version: 20240927T073838 @@ -32,34 +32,34 @@ stackhpc_pulp_repo_doca_3_2_2_rhel9_7_modules_aarch64_version: 20260615T122946 stackhpc_pulp_repo_doca_3_2_2_rhel9_7_modules_version: 20260615T122946 stackhpc_pulp_repo_doca_3_2_2_rhel9_aarch64_version: 20260326T091359 stackhpc_pulp_repo_doca_3_2_2_rhel9_version: 20260520T124124 -stackhpc_pulp_repo_doca_3_2_3_rhel10_2_modules_aarch64_version: 20260728T112638 -stackhpc_pulp_repo_doca_3_2_3_rhel10_2_modules_version: 20260728T112638 +stackhpc_pulp_repo_doca_3_2_3_rhel10_2_modules_aarch64_version: 20260810T070154 +stackhpc_pulp_repo_doca_3_2_3_rhel10_2_modules_version: 20260810T070154 stackhpc_pulp_repo_doca_3_2_3_rhel10_aarch64_version: 20260715T143437 stackhpc_pulp_repo_doca_3_2_3_rhel10_x86_64_version: 20260715T143437 -stackhpc_pulp_repo_doca_3_2_3_rhel9_8_modules_aarch64_version: 20260728T112638 -stackhpc_pulp_repo_doca_3_2_3_rhel9_8_modules_version: 20260728T112638 +stackhpc_pulp_repo_doca_3_2_3_rhel9_8_modules_aarch64_version: 20260810T070154 +stackhpc_pulp_repo_doca_3_2_3_rhel9_8_modules_version: 20260810T070154 stackhpc_pulp_repo_doca_3_2_3_rhel9_aarch64_version: 20260715T143437 stackhpc_pulp_repo_doca_3_2_3_rhel9_version: 20260715T143437 -stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260727T204056 +stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260806T213958 stackhpc_pulp_repo_elrepo_10_aarch64_version: 20260220T152827 -stackhpc_pulp_repo_elrepo_10_version: 20260717T223545 +stackhpc_pulp_repo_elrepo_10_version: 20260807T003843 stackhpc_pulp_repo_elrepo_9_aarch64_version: 20250408T030629 -stackhpc_pulp_repo_elrepo_9_version: 20260717T214449 -stackhpc_pulp_repo_epel_10_aarch64_version: 20260727T231655 -stackhpc_pulp_repo_epel_10_version: 20260727T215111 -stackhpc_pulp_repo_epel_9_aarch64_version: 20260727T223147 -stackhpc_pulp_repo_epel_9_version: 20260727T215111 -stackhpc_pulp_repo_grafana_version: 20260725T203624 +stackhpc_pulp_repo_elrepo_9_version: 20260806T223040 +stackhpc_pulp_repo_epel_10_aarch64_version: 20260807T225634 +stackhpc_pulp_repo_epel_10_version: 20260807T205054 +stackhpc_pulp_repo_epel_9_aarch64_version: 20260806T233247 +stackhpc_pulp_repo_epel_9_version: 20260806T223040 +stackhpc_pulp_repo_grafana_version: 20260807T203214 stackhpc_pulp_repo_opensearch_2_x_version: 20260703T211022 stackhpc_pulp_repo_opensearch_dashboards_2_x_version: 20260703T211022 stackhpc_pulp_repo_rhel9_rabbitmq_erlang_26_aarch64_version: 20260724T213912 stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260724T213912 -stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260720T210122 +stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260801T204034 stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260723T204348 stackhpc_pulp_repo_rhel_10_mariadb_10_11_aarch64_version: 20260527T210633 stackhpc_pulp_repo_rhel_10_mariadb_10_11_version: 20260527T210633 stackhpc_pulp_repo_rhel_9_influxdb_aarch64_version: 20260112T224827 -stackhpc_pulp_repo_rhel_9_influxdb_version: 20260721T205558 +stackhpc_pulp_repo_rhel_9_influxdb_version: 20260807T203920 stackhpc_pulp_repo_rhel_9_mariadb_10_11_aarch64_version: 20260527T210633 stackhpc_pulp_repo_rhel_9_mariadb_10_11_version: 20260527T210633 stackhpc_pulp_repo_rhel_9_treasuredata_5_aarch64_version: 20251219T213344 @@ -82,24 +82,24 @@ stackhpc_pulp_repo_rocky_10_1_highavailability_version: 20260506T223941 stackhpc_pulp_repo_rocky_10_1_security_aarch64_version: 20260510T225242 stackhpc_pulp_repo_rocky_10_1_security_source_version: 20260510T222658 stackhpc_pulp_repo_rocky_10_1_security_version: 20260510T223302 -stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260727T231655 -stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260723T225406 -stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260727T222657 -stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260727T231655 -stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260727T225001 -stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260727T225537 -stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260727T231655 +stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260807T225634 +stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260807T222618 +stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260807T220819 +stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260807T225634 +stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260807T222618 +stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260807T223918 +stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260807T225634 stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260727T225001 -stackhpc_pulp_repo_rocky_10_2_crb_version: 20260724T095616 +stackhpc_pulp_repo_rocky_10_2_crb_version: 20260807T220819 stackhpc_pulp_repo_rocky_10_2_extras_aarch64_version: 20260602T012631 stackhpc_pulp_repo_rocky_10_2_extras_source_version: 20260602T004048 stackhpc_pulp_repo_rocky_10_2_extras_version: 20260602T001113 -stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260723T231652 -stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260715T225208 -stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260723T223343 -stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260606T230245 -stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260605T232846 -stackhpc_pulp_repo_rocky_10_2_security_version: 20260606T223509 +stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260805T000358 +stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260804T234046 +stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260804T231810 +stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260807T001829 +stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260806T234534 +stackhpc_pulp_repo_rocky_10_2_security_version: 20260807T003843 stackhpc_pulp_repo_rocky_9_1_appstream_version: 20231207T013715 stackhpc_pulp_repo_rocky_9_1_baseos_version: 20231206T014015 stackhpc_pulp_repo_rocky_9_1_crb_version: 20231211T120328 @@ -158,27 +158,27 @@ stackhpc_pulp_repo_rocky_9_7_highavailability_version: 20260514T220209 stackhpc_pulp_repo_rocky_9_7_security_aarch64_version: 20260519T222921 stackhpc_pulp_repo_rocky_9_7_security_source_version: 20260520T222157 stackhpc_pulp_repo_rocky_9_7_security_version: 20260520T215442 -stackhpc_pulp_repo_rocky_9_8_appstream_aarch64_version: 20260727T223147 -stackhpc_pulp_repo_rocky_9_8_appstream_source_version: 20260727T215716 -stackhpc_pulp_repo_rocky_9_8_appstream_version: 20260723T212946 -stackhpc_pulp_repo_rocky_9_8_baseos_aarch64_version: 20260727T223147 -stackhpc_pulp_repo_rocky_9_8_baseos_source_version: 20260727T215716 -stackhpc_pulp_repo_rocky_9_8_baseos_version: 20260724T095616 -stackhpc_pulp_repo_rocky_9_8_crb_aarch64_version: 20260727T223147 +stackhpc_pulp_repo_rocky_9_8_appstream_aarch64_version: 20260807T213610 +stackhpc_pulp_repo_rocky_9_8_appstream_source_version: 20260806T230448 +stackhpc_pulp_repo_rocky_9_8_appstream_version: 20260807T212535 +stackhpc_pulp_repo_rocky_9_8_baseos_aarch64_version: 20260807T213610 +stackhpc_pulp_repo_rocky_9_8_baseos_source_version: 20260807T213226 +stackhpc_pulp_repo_rocky_9_8_baseos_version: 20260807T215905 +stackhpc_pulp_repo_rocky_9_8_crb_aarch64_version: 20260807T213610 stackhpc_pulp_repo_rocky_9_8_crb_source_version: 20260727T215716 -stackhpc_pulp_repo_rocky_9_8_crb_version: 20260727T212744 +stackhpc_pulp_repo_rocky_9_8_crb_version: 20260807T212535 stackhpc_pulp_repo_rocky_9_8_extras_aarch64_version: 20260528T223707 stackhpc_pulp_repo_rocky_9_8_extras_source_version: 20260528T220844 stackhpc_pulp_repo_rocky_9_8_extras_version: 20260528T220059 stackhpc_pulp_repo_rocky_9_8_highavailability_aarch64_version: 20260723T222833 stackhpc_pulp_repo_rocky_9_8_highavailability_source_version: 20260723T215614 stackhpc_pulp_repo_rocky_9_8_highavailability_version: 20260723T212946 -stackhpc_pulp_repo_rocky_9_8_security_aarch64_version: 20260605T230645 -stackhpc_pulp_repo_rocky_9_8_security_source_version: 20260605T225017 -stackhpc_pulp_repo_rocky_9_8_security_version: 20260606T214954 +stackhpc_pulp_repo_rocky_9_8_security_aarch64_version: 20260807T213610 +stackhpc_pulp_repo_rocky_9_8_security_source_version: 20260807T213226 +stackhpc_pulp_repo_rocky_9_8_security_version: 20260807T212535 stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20260714T221521 stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20260714T215809 stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20260714T213458 -stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260727T225859 -stackhpc_pulp_repo_ubuntu_noble_security_version: 20260728T011141 -stackhpc_pulp_repo_ubuntu_noble_version: 20260728T011141 +stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260807T225115 +stackhpc_pulp_repo_ubuntu_noble_security_version: 20260808T005048 +stackhpc_pulp_repo_ubuntu_noble_version: 20260808T005048 diff --git a/etc/kayobe/trivy/allowed-vulnerabilities.yml b/etc/kayobe/trivy/allowed-vulnerabilities.yml index 13f637d14a..7290bc46bb 100644 --- a/etc/kayobe/trivy/allowed-vulnerabilities.yml +++ b/etc/kayobe/trivy/allowed-vulnerabilities.yml @@ -24,6 +24,7 @@ grafana_allowed_vulnerabilities: - CVE-2025-68121 # the opensearch datasource plugin is still vulnerable - CVE-2026-33815 - CVE-2026-33816 + - GHSA-r277-6w6q-xmqw influxdb_allowed_vulnerabilities: - CVE-2024-45337 - CVE-2025-68121 @@ -65,6 +66,7 @@ opensearch_dashboards_allowed_vulnerabilities: - CVE-2026-27699 - CVE-2026-31938 - CVE-2026-33937 + - CVE-2026-59873 prometheus_alertmanager_allowed_vulnerabilities: - CVE-2025-68121 prometheus_blackbox_exporter_allowed_vulnerabilities: diff --git a/releasenotes/notes/repo-bump-20260808-c75da1bda2befae7.yaml b/releasenotes/notes/repo-bump-20260808-c75da1bda2befae7.yaml new file mode 100644 index 0000000000..88c8389afa --- /dev/null +++ b/releasenotes/notes/repo-bump-20260808-c75da1bda2befae7.yaml @@ -0,0 +1,9 @@ +--- +features: + - | + Updated OFED kernel modules have been built for the latest Rocky Linux 9.8 + (``5.14.0.687.36.1.el9.8``) and 10.2 kernels (``6.12.0.211.43.1.el10.2``). +security: + - | + The latest Rocky Linux 9.8 kernel (``5.14.0.687.36.1.el9.8``) is now + available, which addresses various vulnerabilities.