diff --git a/.automation.conf/tempest/tempest-aio.overrides.conf b/.automation.conf/tempest/tempest-aio.overrides.conf index 16a1b891d2..4e9299a676 100644 --- a/.automation.conf/tempest/tempest-aio.overrides.conf +++ b/.automation.conf/tempest/tempest-aio.overrides.conf @@ -1,2 +1 @@ [volume] -catalog_type = volumev3 diff --git a/.automation.conf/tempest/tempest-ci-multinode.overrides.conf b/.automation.conf/tempest/tempest-ci-multinode.overrides.conf index 12cb9f6925..36b6db7530 100644 --- a/.automation.conf/tempest/tempest-ci-multinode.overrides.conf +++ b/.automation.conf/tempest/tempest-ci-multinode.overrides.conf @@ -23,7 +23,6 @@ volume_backed_live_migration = true console_output = true [volume] -catalog_type = volumev3 storage_protocol = ceph build_timeout = 600 min_microversion = 3.0 diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index 36f06145d4..1d053c1658 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -4,25 +4,22 @@ # where the key is the OS distro and the value is the tag to deploy. kolla_image_tags: openstack: - rocky-10: 2026.1-rocky-10-20260701T090934 + rocky-10: 2026.1-rocky-10-20260811T155719 ubuntu-noble: 2026.1-ubuntu-noble-20260701T090934 + bifrost_deploy: + rocky-10: 2026.1-rocky-10-20260813T100543 + ubuntu-noble: 2026.1-ubuntu-noble-20260813T100543 bifrost: - rocky-10: 2026.1-rocky-10-20260625T132007 ubuntu-noble: 2026.1-ubuntu-noble-20260625T132007 ironic_http: - rocky-10: 2026.1-rocky-10-20260724T130738 - ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738 + ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354 keystone_httpd: - rocky-10: 2026.1-rocky-10-20260724T130738 - ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738 + ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354 letsencrypt_webserver: - rocky-10: 2026.1-rocky-10-20260724T130738 - ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738 + ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354 nova: - rocky-10: 2026.1-rocky-10-20260702T080453 ubuntu-noble: 2026.1-ubuntu-noble-20260702T080453 prometheus: - rocky-10: 2026.1-rocky-10-20260702T080453 ubuntu-noble: 2026.1-ubuntu-noble-20260702T080453 valkey: ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738 diff --git a/etc/kayobe/kolla/repos.yaml b/etc/kayobe/kolla/repos.yaml index 9273b7bc27..74b9011328 100644 --- a/etc/kayobe/kolla/repos.yaml +++ b/etc/kayobe/kolla/repos.yaml @@ -5,100 +5,122 @@ ubuntu: suite: "noble noble-updates noble-backports" component: "main universe" gpg_key: "/usr/share/keyrings/ubuntu-archive-keyring.gpg" - trusted: True + trusted: true + build_only: true ubuntu-security: url: "{{ stackhpc_repo_ubuntu_noble_security_url }}" suite: "noble-security" component: "main universe" gpg_key: "/usr/share/keyrings/ubuntu-archive-keyring.gpg" - trusted: True + trusted: true + build_only: true ubuntu-cloud-archive: url: "{{ stackhpc_repo_ubuntu_cloud_archive_url }}" component: "main" gpg_key: "/usr/share/keyrings/ubuntu-cloud-keyring.gpg" suite: "noble-updates/{{ openstack_release_codename }}" - trusted: True + trusted: true + build_only: true rpm: appstream: baseurl: "{{ stackhpc_repo_rocky_10_appstream_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "appstream" + build_only: true baseos: baseurl: "{{ stackhpc_repo_rocky_10_baseos_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "baseos" + build_only: true ceph: baseurl: "{{ stackhpc_repo_centos_stream_10_storage_ceph_squid_url }}" gpgkey: "https://www.centos.org/keys/RPM-GPG-KEY-CentOS-SIG-Storage" name: "centos-ceph-squid" + build_only: true crb: baseurl: "{{ stackhpc_repo_rocky_10_crb_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "crb" + build_only: true docker-ce: baseurl: "{{ stackhpc_repo_centos_stream_10_docker_url }}" gpgkey: "https://download.docker.com/linux/centos/gpg" name: "docker-ce" + build_only: true epel: baseurl: "{{ stackhpc_repo_epel_10_url }}" gpgkey: "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-$releasever" name: "epel" + build_only: true erlang: baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_erlang_url }}" gpgkey: "https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key" name: "rabbitmq_rabbitmq-erlang" + build_only: true extras: baseurl: "{{ stackhpc_repo_rocky_10_extras_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "extras" + build_only: true fluentd: baseurl: "{{ stackhpc_repo_rhel_10_fluent_6_url }}" gpgkey: "https://fluentd.cdn.cncf.io/GPG-KEY-fluent-package" name: "fluent-package-lts" + build_only: true grafana: baseurl: "{{ stackhpc_repo_grafana_url }}" gpgkey: "https://rpm.grafana.com/gpg.key" name: "grafana" + build_only: true hacluster: baseurl: "{{ stackhpc_repo_rocky_10_highavailability_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "highavailability" + build_only: true mariadb: baseurl: "{{ stackhpc_repo_rhel_10_mariadb_11_4_url }}" gpgkey: "https://downloads.mariadb.com/MariaDB/RPM-GPG-KEY-MariaDB" name: "mariadb" + build_only: true opensearch: baseurl: "{{ stackhpc_repo_opensearch_3_x_yum_url }}" gpgkey: "https://artifacts.opensearch.org/publickeys/opensearch-release.pgp" repo_gpgcheck: 1 name: "opensearch-3.x" + build_only: true opensearch-dashboards: baseurl: "{{ stackhpc_repo_opensearch_dashboards_3_x_yum_url }}" gpgkey: "https://artifacts.opensearch.org/publickeys/opensearch-release.pgp" repo_gpgcheck: 1 name: "opensearch-dashboards-3.x" + build_only: true openvswitch: baseurl: "{{ stackhpc_repo_centos_stream_10_nfv_openvswitch_url }}" gpgkey: "https://www.centos.org/keys/RPM-GPG-KEY-CentOS-SIG-NFV" name: "centos-nfv-openvswitch" + build_only: true proxysql: baseurl: "{{ stackhpc_repo_almalinux_10_proxysql_3_0_url }}" gpgkey: "https://repo.proxysql.com/ProxySQL/proxysql-3.0.x/repo_pub_key" name: "proxysql" + build_only: true rabbitmq: baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_server_url }}" gpgkey: | https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc name: "rabbitmq_rabbitmq-server" + build_only: true security: baseurl: "{{ stackhpc_repo_rocky_10_security_url }}" gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10" name: "security" + build_only: true rocky-aarch64: erlang: baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_erlang_27_url }}" gpgkey: "https://download.copr.fedorainfracloud.org/results/@openstack-kolla/rabbitmq-erlang-27/pubkey.gpg" name: "copr-rabbitmq-erlang" + build_only: true diff --git a/etc/kayobe/pulp-repo-versions.yml b/etc/kayobe/pulp-repo-versions.yml index 84770cc558..bc44b88500 100644 --- a/etc/kayobe/pulp-repo-versions.yml +++ b/etc/kayobe/pulp-repo-versions.yml @@ -1,49 +1,49 @@ --- # This file is autogenerated by Ansible using the following workflow: # https://github.com/stackhpc/stackhpc-release-train/actions/workflows/package-update-kayobe.yml -stackhpc_pulp_repo_almalinux_10_proxysql_3_0_version: 20260605T211649 -stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260620T010620 -stackhpc_pulp_repo_centos_stream_10_docker_version: 20260619T215327 -stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260603T233007 -stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260602T230909 -stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260603T233007 -stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260602T230909 +stackhpc_pulp_repo_almalinux_10_proxysql_3_0_version: 20260731T220708 +stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260807T001829 +stackhpc_pulp_repo_centos_stream_10_docker_version: 20260806T213958 +stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260729T102151 +stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260729T092535 +stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260715T232156 +stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260715T221325 stackhpc_pulp_repo_doca_3_2_2_rhel10_aarch64_version: 20260326T091359 stackhpc_pulp_repo_doca_3_2_2_rhel10_x86_64_version: 20260326T091359 -stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260622T222357 +stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260806T213958 stackhpc_pulp_repo_elrepo_10_aarch64_version: 20260220T152827 -stackhpc_pulp_repo_elrepo_10_version: 20260620T002710 -stackhpc_pulp_repo_epel_10_aarch64_version: 20260624T000231 -stackhpc_pulp_repo_epel_10_version: 20260623T220913 -stackhpc_pulp_repo_ubuntu_noble_fluent_6_version: 20260615T110539 -stackhpc_pulp_repo_rhel_10_fluent_6_version: 20260327T202539 -stackhpc_pulp_repo_grafana_version: 20260623T210745 +stackhpc_pulp_repo_elrepo_10_version: 20260808T215227 +stackhpc_pulp_repo_epel_10_aarch64_version: 20260809T222153 +stackhpc_pulp_repo_epel_10_version: 20260809T213002 stackhpc_pulp_repo_grafana_apt_version: 20260622T222446 +stackhpc_pulp_repo_grafana_version: 20260808T202551 stackhpc_pulp_repo_opensearch_3_x_yum_version: 20260610T213138 stackhpc_pulp_repo_opensearch_dashboards_3_x_yum_version: 20260610T213138 -stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260112T224827 -stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260616T214234 -stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260616T214234 +stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260724T213912 +stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260801T204034 +stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260723T204348 +stackhpc_pulp_repo_rhel_10_fluent_6_version: 20260713T205137 stackhpc_pulp_repo_rhel_10_mariadb_11_4_aarch64_version: 20260527T210633 stackhpc_pulp_repo_rhel_10_mariadb_11_4_version: 20260527T210633 -stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260620T010620 -stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260620T003535 -stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260620T002710 -stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260620T010620 -stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260620T003535 -stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260620T003803 -stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260620T010620 -stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260602T004048 -stackhpc_pulp_repo_rocky_10_2_crb_version: 20260620T002710 +stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260808T223703 +stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260807T222618 +stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260809T215710 +stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260808T223703 +stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260808T220410 +stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260808T222350 +stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260808T223703 +stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260727T225001 +stackhpc_pulp_repo_rocky_10_2_crb_version: 20260809T215710 stackhpc_pulp_repo_rocky_10_2_extras_aarch64_version: 20260602T012631 stackhpc_pulp_repo_rocky_10_2_extras_source_version: 20260602T004048 stackhpc_pulp_repo_rocky_10_2_extras_version: 20260602T001113 -stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260602T012631 -stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260602T004048 -stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260602T001113 -stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260606T230245 -stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260605T232846 -stackhpc_pulp_repo_rocky_10_2_security_version: 20260606T223509 -stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260621T235438 -stackhpc_pulp_repo_ubuntu_noble_security_version: 20260622T030723 -stackhpc_pulp_repo_ubuntu_noble_version: 20260622T030723 +stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260805T000358 +stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260804T234046 +stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260804T231810 +stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260808T223703 +stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260808T220410 +stackhpc_pulp_repo_rocky_10_2_security_version: 20260809T215710 +stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260809T222411 +stackhpc_pulp_repo_ubuntu_noble_fluent_6_version: 20260615T110539 +stackhpc_pulp_repo_ubuntu_noble_security_version: 20260810T002626 +stackhpc_pulp_repo_ubuntu_noble_version: 20260810T002626 diff --git a/etc/kayobe/trivy/allowed-vulnerabilities.yml b/etc/kayobe/trivy/allowed-vulnerabilities.yml index b2304bff0e..8e4240bf36 100644 --- a/etc/kayobe/trivy/allowed-vulnerabilities.yml +++ b/etc/kayobe/trivy/allowed-vulnerabilities.yml @@ -27,10 +27,17 @@ fluentd_allowed_vulnerabilities: - CVE-2026-42257 - CVE-2026-42258 +# Should be fixed once Grafana 13.1.2 RPM is released +grafana_allowed_vulnerabilities: + - GHSA-r277-6w6q-xmqw + letsencrypt_lego_allowed_vulnerabilities: - CVE-2025-68121 - CVE-2026-33186 +opensearch_dashboards_allowed_vulnerabilities: + - CVE-2026-59873 + prometheus_alertmanager_allowed_vulnerabilities: - CVE-2026-33186 diff --git a/requirements.txt b/requirements.txt index 8a317bd1aa..e1bf309263 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -kayobe@git+https://github.com/stackhpc/kayobe@7862ee3f5a859970a2b810a0388019950e9d48b0 +kayobe@git+https://github.com/stackhpc/kayobe@58a9d1dbb3337d152136e32a3c2be1555ee55fa9 ansible-modules-hashivault>=5.3.0 pulp-glue==0.33.* pulp-glue-deb==0.3.*