Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .automation.conf/tempest/tempest-aio.overrides.conf
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
[volume]
catalog_type = volumev3
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,6 @@ volume_backed_live_migration = true
console_output = true

[volume]
catalog_type = volumev3
storage_protocol = ceph
build_timeout = 600
min_microversion = 3.0
Expand Down
20 changes: 10 additions & 10 deletions etc/kayobe/kolla-image-tags.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,25 +4,25 @@
# where the key is the OS distro and the value is the tag to deploy.
kolla_image_tags:
openstack:
rocky-10: 2026.1-rocky-10-20260701T090934
rocky-10: 2026.1-rocky-10-20260811T155719
ubuntu-noble: 2026.1-ubuntu-noble-20260701T090934
bifrost_deploy:
rocky-10: 2026.1-rocky-10-20260813T100543
ubuntu-noble: 2026.1-ubuntu-noble-20260813T100543
bifrost:
rocky-10: 2026.1-rocky-10-20260625T132007
ubuntu-noble: 2026.1-ubuntu-noble-20260625T132007
ironic_http:
rocky-10: 2026.1-rocky-10-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354
keystone_httpd:
rocky-10: 2026.1-rocky-10-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354
kolla_toolbox:
ubuntu-noble: 2026.1-ubuntu-noble-20260813T131516
rocky-10: 2026.1-rocky-10-20260813T131516
letsencrypt_webserver:
rocky-10: 2026.1-rocky-10-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738
ubuntu-noble: 2026.1-ubuntu-noble-20260813T105354
nova:
rocky-10: 2026.1-rocky-10-20260702T080453
ubuntu-noble: 2026.1-ubuntu-noble-20260702T080453
prometheus:
rocky-10: 2026.1-rocky-10-20260702T080453
ubuntu-noble: 2026.1-ubuntu-noble-20260702T080453
valkey:
ubuntu-noble: 2026.1-ubuntu-noble-20260724T130738
28 changes: 25 additions & 3 deletions etc/kayobe/kolla/repos.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,100 +5,122 @@ ubuntu:
suite: "noble noble-updates noble-backports"
component: "main universe"
gpg_key: "/usr/share/keyrings/ubuntu-archive-keyring.gpg"
trusted: True
trusted: true
build_only: true
ubuntu-security:
url: "{{ stackhpc_repo_ubuntu_noble_security_url }}"
suite: "noble-security"
component: "main universe"
gpg_key: "/usr/share/keyrings/ubuntu-archive-keyring.gpg"
trusted: True
trusted: true
build_only: true
ubuntu-cloud-archive:
url: "{{ stackhpc_repo_ubuntu_cloud_archive_url }}"
component: "main"
gpg_key: "/usr/share/keyrings/ubuntu-cloud-keyring.gpg"
suite: "noble-updates/{{ openstack_release_codename }}"
trusted: True
trusted: true
build_only: true
Comment thread
Alex-Welsh marked this conversation as resolved.

rpm:
appstream:
baseurl: "{{ stackhpc_repo_rocky_10_appstream_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "appstream"
build_only: true
baseos:
baseurl: "{{ stackhpc_repo_rocky_10_baseos_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "baseos"
build_only: true
ceph:
baseurl: "{{ stackhpc_repo_centos_stream_10_storage_ceph_squid_url }}"
gpgkey: "https://www.centos.org/keys/RPM-GPG-KEY-CentOS-SIG-Storage"
name: "centos-ceph-squid"
build_only: true
crb:
baseurl: "{{ stackhpc_repo_rocky_10_crb_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "crb"
build_only: true
docker-ce:
baseurl: "{{ stackhpc_repo_centos_stream_10_docker_url }}"
gpgkey: "https://download.docker.com/linux/centos/gpg"
name: "docker-ce"
build_only: true
epel:
baseurl: "{{ stackhpc_repo_epel_10_url }}"
gpgkey: "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-$releasever"
name: "epel"
build_only: true
erlang:
baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_erlang_url }}"
gpgkey: "https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key"
name: "rabbitmq_rabbitmq-erlang"
build_only: true
extras:
baseurl: "{{ stackhpc_repo_rocky_10_extras_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "extras"
build_only: true
fluentd:
baseurl: "{{ stackhpc_repo_rhel_10_fluent_6_url }}"
gpgkey: "https://fluentd.cdn.cncf.io/GPG-KEY-fluent-package"
name: "fluent-package-lts"
build_only: true
grafana:
baseurl: "{{ stackhpc_repo_grafana_url }}"
gpgkey: "https://rpm.grafana.com/gpg.key"
name: "grafana"
build_only: true
hacluster:
baseurl: "{{ stackhpc_repo_rocky_10_highavailability_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "highavailability"
build_only: true
mariadb:
baseurl: "{{ stackhpc_repo_rhel_10_mariadb_11_4_url }}"
gpgkey: "https://downloads.mariadb.com/MariaDB/RPM-GPG-KEY-MariaDB"
name: "mariadb"
build_only: true
opensearch:
baseurl: "{{ stackhpc_repo_opensearch_3_x_yum_url }}"
gpgkey: "https://artifacts.opensearch.org/publickeys/opensearch-release.pgp"
repo_gpgcheck: 1
name: "opensearch-3.x"
build_only: true
opensearch-dashboards:
baseurl: "{{ stackhpc_repo_opensearch_dashboards_3_x_yum_url }}"
gpgkey: "https://artifacts.opensearch.org/publickeys/opensearch-release.pgp"
repo_gpgcheck: 1
name: "opensearch-dashboards-3.x"
build_only: true
openvswitch:
baseurl: "{{ stackhpc_repo_centos_stream_10_nfv_openvswitch_url }}"
gpgkey: "https://www.centos.org/keys/RPM-GPG-KEY-CentOS-SIG-NFV"
name: "centos-nfv-openvswitch"
build_only: true
proxysql:
baseurl: "{{ stackhpc_repo_almalinux_10_proxysql_3_0_url }}"
gpgkey: "https://repo.proxysql.com/ProxySQL/proxysql-3.0.x/repo_pub_key"
name: "proxysql"
build_only: true
rabbitmq:
baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_server_url }}"
gpgkey: |
https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key
https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc
name: "rabbitmq_rabbitmq-server"
build_only: true
security:
baseurl: "{{ stackhpc_repo_rocky_10_security_url }}"
gpgkey: "https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10"
name: "security"
build_only: true

rocky-aarch64:
erlang:
baseurl: "{{ stackhpc_repo_rhel9_rabbitmq_erlang_27_url }}"
gpgkey: "https://download.copr.fedorainfracloud.org/results/@openstack-kolla/rabbitmq-erlang-27/pubkey.gpg"
name: "copr-rabbitmq-erlang"
build_only: true
70 changes: 35 additions & 35 deletions etc/kayobe/pulp-repo-versions.yml
Original file line number Diff line number Diff line change
@@ -1,49 +1,49 @@
---
# This file is autogenerated by Ansible using the following workflow:
# https://github.com/stackhpc/stackhpc-release-train/actions/workflows/package-update-kayobe.yml
stackhpc_pulp_repo_almalinux_10_proxysql_3_0_version: 20260605T211649
stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260620T010620
stackhpc_pulp_repo_centos_stream_10_docker_version: 20260619T215327
stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260603T233007
stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260602T230909
stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260603T233007
stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260602T230909
stackhpc_pulp_repo_almalinux_10_proxysql_3_0_version: 20260731T220708
stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260807T001829
stackhpc_pulp_repo_centos_stream_10_docker_version: 20260806T213958
stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260729T102151
stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260729T092535
Comment on lines +7 to +8

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

# Find OVN LTS version definitions and consumers.
rg -n --glob '*.yml' --glob '*.yaml' \
  'stackhpc_(pulp_)?repo_(multiarch_)?centos_stream_10_ovn_lts(_aarch64)?_version' .

Repository: stackhpc/stackhpc-kayobe-config

Length of output: 874


🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- OVN references across tracked files ---'
rg -n --hidden --glob '!*.pyc' \
  'centos_stream_10_ovn_lts|ovn_lts_version|nfv_openvswitch' .

printf '%s\n' '--- Relevant pulp configuration ---'
sed -n '225,265p' etc/kayobe/pulp.yml

printf '%s\n' '--- Pulp repository version entries ---'
rg -n -C 3 \
  'stackhpc_pulp_repo_(centos_stream_10|multiarch_centos_stream_10)_' \
  etc/kayobe/pulp-repo-versions.yml

printf '%s\n' '--- Version-file and variable-loading references ---'
rg -n --glob '*.yml' --glob '*.yaml' \
  'pulp-repo-versions|repo-versions|vars_files|include_vars|pulp_repo_' \
  etc/kayobe | head -250

Repository: stackhpc/stackhpc-kayobe-config

Length of output: 41822


🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- All OVN-related configuration ---'
rg -n -i --hidden --glob '!*.pyc' '\bovn\b|openvswitch' etc/kayobe

printf '%s\n' '--- Pulp configuration loading ---'
rg -n --hidden --glob '*.yml' --glob '*.yaml' \
  'pulp\.yml|pulp-repo-versions\.yml|stackhpc_pulp_repo_multiarch_centos_stream_10_ovn_lts_version' \
  etc

printf '%s\n' '--- Static variable-resolution check ---'
python3 - <<'PY'
from pathlib import Path
import re

root = Path(".")
versions = root / "etc/kayobe/pulp-repo-versions.yml"
pulp = root / "etc/kayobe/pulp.yml"
ci_files = [
    root / "etc/kayobe/environments/ci-builder/stackhpc-ci.yml",
    root / "etc/kayobe/environments/ci-multinode/stackhpc-ci.yml",
    root / "etc/kayobe/environments/aio/release-train.yml",
]

text = versions.read_text()
defined = set(re.findall(r"^([A-Za-z0-9_]+):", text, re.M))
pulp_text = pulp.read_text()
lookup_names = re.findall(
    r"lookup\('vars',\s*'([^']*?)'\s*~\s*arch_suffix\s*~\s*'([^']*)'",
    pulp_text,
)
for prefix, suffix in lookup_names:
    if "ovn_lts" in prefix:
        print("OVN lookup template:", prefix + "<arch_suffix>" + suffix)
        for arch_suffix in ("", "_aarch64"):
            name = prefix + arch_suffix + suffix
            print(f"{name}: {'DEFINED' if name in defined else 'MISSING'}")

for path in ci_files:
    matches = [
        line.strip()
        for line in path.read_text().splitlines()
        if "ovn_lts_version" in line
    ]
    print(path, "OVN consumers:", matches)
PY

Repository: stackhpc/stackhpc-kayobe-config

Length of output: 13458


Define the OVN LTS repository pins.

The OVN LTS lookup resolves neither architecture-specific variable. Add both generated entries to etc/kayobe/pulp-repo-versions.yml, or remove the stale OVN consumers.

stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260715T232156
stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260715T221325
stackhpc_pulp_repo_doca_3_2_2_rhel10_aarch64_version: 20260326T091359
stackhpc_pulp_repo_doca_3_2_2_rhel10_x86_64_version: 20260326T091359
stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260622T222357
stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260806T213958
stackhpc_pulp_repo_elrepo_10_aarch64_version: 20260220T152827
stackhpc_pulp_repo_elrepo_10_version: 20260620T002710
stackhpc_pulp_repo_epel_10_aarch64_version: 20260624T000231
stackhpc_pulp_repo_epel_10_version: 20260623T220913
stackhpc_pulp_repo_ubuntu_noble_fluent_6_version: 20260615T110539
stackhpc_pulp_repo_rhel_10_fluent_6_version: 20260327T202539
stackhpc_pulp_repo_grafana_version: 20260623T210745
stackhpc_pulp_repo_elrepo_10_version: 20260808T215227
stackhpc_pulp_repo_epel_10_aarch64_version: 20260809T222153
stackhpc_pulp_repo_epel_10_version: 20260809T213002
stackhpc_pulp_repo_grafana_apt_version: 20260622T222446
stackhpc_pulp_repo_grafana_version: 20260808T202551
stackhpc_pulp_repo_opensearch_3_x_yum_version: 20260610T213138
stackhpc_pulp_repo_opensearch_dashboards_3_x_yum_version: 20260610T213138
stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260112T224827
stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260616T214234
stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260616T214234
stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260724T213912
stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260801T204034
stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260723T204348
stackhpc_pulp_repo_rhel_10_fluent_6_version: 20260713T205137
stackhpc_pulp_repo_rhel_10_mariadb_11_4_aarch64_version: 20260527T210633
stackhpc_pulp_repo_rhel_10_mariadb_11_4_version: 20260527T210633
stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260620T010620
stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260620T003535
stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260620T002710
stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260620T010620
stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260620T003535
stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260620T003803
stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260620T010620
stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260602T004048
stackhpc_pulp_repo_rocky_10_2_crb_version: 20260620T002710
stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260808T223703
stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260807T222618
stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260809T215710
stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260808T223703
stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260808T220410
stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260808T222350
stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260808T223703
stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260727T225001
stackhpc_pulp_repo_rocky_10_2_crb_version: 20260809T215710
stackhpc_pulp_repo_rocky_10_2_extras_aarch64_version: 20260602T012631
stackhpc_pulp_repo_rocky_10_2_extras_source_version: 20260602T004048
stackhpc_pulp_repo_rocky_10_2_extras_version: 20260602T001113
stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260602T012631
stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260602T004048
stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260602T001113
stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260606T230245
stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260605T232846
stackhpc_pulp_repo_rocky_10_2_security_version: 20260606T223509
stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260621T235438
stackhpc_pulp_repo_ubuntu_noble_security_version: 20260622T030723
stackhpc_pulp_repo_ubuntu_noble_version: 20260622T030723
stackhpc_pulp_repo_rocky_10_2_highavailability_aarch64_version: 20260805T000358
stackhpc_pulp_repo_rocky_10_2_highavailability_source_version: 20260804T234046
stackhpc_pulp_repo_rocky_10_2_highavailability_version: 20260804T231810
stackhpc_pulp_repo_rocky_10_2_security_aarch64_version: 20260808T223703
stackhpc_pulp_repo_rocky_10_2_security_source_version: 20260808T220410
stackhpc_pulp_repo_rocky_10_2_security_version: 20260809T215710
stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260809T222411
stackhpc_pulp_repo_ubuntu_noble_fluent_6_version: 20260615T110539
stackhpc_pulp_repo_ubuntu_noble_security_version: 20260810T002626
stackhpc_pulp_repo_ubuntu_noble_version: 20260810T002626
7 changes: 7 additions & 0 deletions etc/kayobe/trivy/allowed-vulnerabilities.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,17 @@ fluentd_allowed_vulnerabilities:
- CVE-2026-42257
- CVE-2026-42258

# Should be fixed once Grafana 13.1.2 RPM is released
grafana_allowed_vulnerabilities:
- GHSA-r277-6w6q-xmqw

letsencrypt_lego_allowed_vulnerabilities:
- CVE-2025-68121
- CVE-2026-33186

opensearch_dashboards_allowed_vulnerabilities:
- CVE-2026-59873

prometheus_alertmanager_allowed_vulnerabilities:
- CVE-2026-33186

Expand Down
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
kayobe@git+https://github.com/stackhpc/kayobe@7862ee3f5a859970a2b810a0388019950e9d48b0
kayobe@git+https://github.com/stackhpc/kayobe@58a9d1dbb3337d152136e32a3c2be1555ee55fa9
Comment thread
coderabbitai[bot] marked this conversation as resolved.
ansible-modules-hashivault>=5.3.0
pulp-glue==0.33.*
pulp-glue-deb==0.3.*
Expand Down
Loading