From 510962d42d2c9a73c20ef3a4c1f0316fd16377bd Mon Sep 17 00:00:00 2001 From: Michal Nasiadka Date: Fri, 19 Jul 2024 09:16:11 +0200 Subject: [PATCH 01/19] rocky: update ovn to 24.03 (LTS) and OVS to 3.3 This patch updates: - OVN to 24.03 (latest LTS) - OpenvSwitch to 3.3 (since 3.2 is officially EOL upstream) on Rocky Linux 9 --- etc/kayobe/kolla.yml | 38 ++++++++++++++++--- etc/kayobe/pulp-repo-versions.yml | 2 +- .../notes/ovn-24-03-47c1eb9846f261b0.yaml | 5 +++ 3 files changed, 39 insertions(+), 6 deletions(-) create mode 100644 releasenotes/notes/ovn-24-03-47c1eb9846f261b0.yaml diff --git a/etc/kayobe/kolla.yml b/etc/kayobe/kolla.yml index 5d9670def..45570193c 100644 --- a/etc/kayobe/kolla.yml +++ b/etc/kayobe/kolla.yml @@ -433,16 +433,44 @@ kolla_build_customizations_common: - /additions/* kolla_build_customizations_rocky: + kolla_toolbox_packages_remove: + - openvswitch + kolla_toolbox_packages_append: + - openvswitch3.3 + manila_base_packages_remove: + - openvswitch + manila_base_packages_append: + - openvswitch3.3 + neutron_base_packages_remove: + - openvswitch + - python3-openvswitch + neutron_base_packages_append: + - openvswitch3.3 + - python3-openvswitch3.3 + nova_base_packages_remove: + - openvswitch + - python3-openvswitch + nova_base_packages_append: + - openvswitch3.3 + - python3-openvswitch3.3 + octavia_base_packages_remove: + - python3-openvswitch + openvswitch_base_packages_remove: + - openvswitch + - python3-openvswitch + openvswitch_base_packages_append: + - openvswitch3.3 + - python3-openvswitch3.3 ovn_base_packages_override: - - ovn23.03 + - ovn24.03 ovn_controller_packages_override: - - ovn23.03-host + - ovn24.03-host ovn_nb_db_server_packages_override: - - ovn23.03-central + - ovn24.03-central ovn_northd_packages_override: - - ovn23.03-central + - ovn24.03-central ovn_sb_db_server_packages_override: - - ovn23.03-central + - ovn24.03-central kolla_build_customizations_ubuntu: {} diff --git a/etc/kayobe/pulp-repo-versions.yml b/etc/kayobe/pulp-repo-versions.yml index 5d9f8325f..547ad5579 100644 --- a/etc/kayobe/pulp-repo-versions.yml +++ b/etc/kayobe/pulp-repo-versions.yml @@ -1,7 +1,7 @@ --- # Do not edit! This file is autogenerated by Ansible. stackhpc_pulp_repo_centos_stream_9_docker_version: 20240412T001239 -stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20240406T233848 +stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20240712T235515 stackhpc_pulp_repo_centos_stream_9_openstack_antelope_version: 20240417T235558 stackhpc_pulp_repo_centos_stream_9_opstools_version: 20231213T031318 stackhpc_pulp_repo_centos_stream_9_storage_ceph_quincy_version: 20231104T015751 diff --git a/releasenotes/notes/ovn-24-03-47c1eb9846f261b0.yaml b/releasenotes/notes/ovn-24-03-47c1eb9846f261b0.yaml new file mode 100644 index 000000000..bb75e9984 --- /dev/null +++ b/releasenotes/notes/ovn-24-03-47c1eb9846f261b0.yaml @@ -0,0 +1,5 @@ +--- +features: + - | + ``OVN`` version in Rocky Linux 9 container images has been updated to + ``24.03`` (latest LTS). From e9582c1b71bf213d99f7e14922d56b5a98dfc5d9 Mon Sep 17 00:00:00 2001 From: Michal Nasiadka Date: Fri, 19 Jul 2024 14:23:22 +0200 Subject: [PATCH 02/19] Bump kolla-image-tags --- etc/kayobe/kolla-image-tags.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index 5278636b1..d5ecf0a89 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -18,11 +18,23 @@ kolla_image_tags: haproxy_ssh: rocky-9: 2023.1-rocky-9-20240509T102329 ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329 + kolla_toolbox: + rocky-9: 2023.1-rocky-9-20240719T082723 letsencrypt: rocky-9: 2023.1-rocky-9-20240509T102329 ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329 + manila: + rocky-9: 2023.1-rocky-9-20240719T082723 + neutron: + rocky-9: 2023.1-rocky-9-20240719T082723 nova: - rocky-9: 2023.1-rocky-9-20240702T082319 + rocky-9: 2023.1-rocky-9-20240719T082723 ubuntu-jammy: 2023.1-ubuntu-jammy-20240702T082319 + octavia: + rocky-9: 2023.1-rocky-9-20240719T082723 opensearch: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T094444 + openvswitch: + rocky-9: 2023.1-rocky-9-20240719T082723 + ovn: + rocky-9: 2023.1-rocky-9-20240719T082723 From 9f637ea4cee7e29f01e214728048476b625a5e44 Mon Sep 17 00:00:00 2001 From: Mark Goddard Date: Thu, 11 Jul 2024 12:39:16 +0100 Subject: [PATCH 03/19] ci-multinode: Change storage-mgmt subnet to avoid collision The .42 subnet was in use in some of our infrastructure and resulted in weird behaviour. --- etc/kayobe/environments/ci-multinode/networks.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/etc/kayobe/environments/ci-multinode/networks.yml b/etc/kayobe/environments/ci-multinode/networks.yml index ca7c4daaf..c0a7ff69e 100644 --- a/etc/kayobe/environments/ci-multinode/networks.yml +++ b/etc/kayobe/environments/ci-multinode/networks.yml @@ -107,10 +107,11 @@ storage_allocation_pool_end: 192.168.41.254 storage_vlan: 105 # Storage management network -storage_mgmt_cidr: 192.168.42.0/24 +# NOTE: Skipping the .42 subnet to avoid a collision with a popular number. +storage_mgmt_cidr: 192.168.43.0/24 storage_mgmt_mtu: "{{ ansible_facts.default_ipv4.mtu - 50 }}" -storage_mgmt_allocation_pool_start: 192.168.42.3 -storage_mgmt_allocation_pool_end: 192.168.42.254 +storage_mgmt_allocation_pool_start: 192.168.43.3 +storage_mgmt_allocation_pool_end: 192.168.43.254 storage_mgmt_vlan: 106 # Provision overcloud network From 450fd35eb3b6b6f1a10c8fad9c6d3ff70210be61 Mon Sep 17 00:00:00 2001 From: Seunghun Lee Date: Tue, 23 Jul 2024 15:36:37 +0100 Subject: [PATCH 04/19] Fix CVE-2024-40767 Fixes CVE-2024-40767 [1] with updated container images for Nova services. [1] https://security.openstack.org/ossa/OSSA-2024-002.html --- etc/kayobe/kolla-image-tags.yml | 3 ++- releasenotes/notes/fix-cve-2024-40767-24b9b3c35f61a0c8.yaml | 6 ++++++ 2 files changed, 8 insertions(+), 1 deletion(-) create mode 100644 releasenotes/notes/fix-cve-2024-40767-24b9b3c35f61a0c8.yaml diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index df6cea9b6..41e15d775 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -17,6 +17,7 @@ kolla_image_tags: letsencrypt: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329 nova: - ubuntu-jammy: 2023.1-ubuntu-jammy-20240702T082319 + rocky-9: 2023.1-rocky-9-20240723T140948 + ubuntu-jammy: 2023.1-ubuntu-jammy-20240723T140948 opensearch: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T094444 diff --git a/releasenotes/notes/fix-cve-2024-40767-24b9b3c35f61a0c8.yaml b/releasenotes/notes/fix-cve-2024-40767-24b9b3c35f61a0c8.yaml new file mode 100644 index 000000000..d272329ea --- /dev/null +++ b/releasenotes/notes/fix-cve-2024-40767-24b9b3c35f61a0c8.yaml @@ -0,0 +1,6 @@ +--- +critical: + - | + Fixes `CVE-2024-40767 + `_ with updated + container images for Nova services. From 1ebac90ce549e080d241f67ea74b665b705da2de Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Tue, 23 Jul 2024 21:51:23 +0200 Subject: [PATCH 05/19] Add missing newline characters at end of file --- etc/kayobe/ansible/scripts/aio-init.sh | 2 +- etc/kayobe/environments/aufn-ceph/configure-openstack.sh | 2 +- etc/kayobe/environments/aufn-ceph/inventory/groups | 2 +- etc/kayobe/inventory/group_vars/all/stackhpc | 2 +- .../grafana/dashboards/openstack/grafana_cloud_dashboard.json | 2 +- .../grafana/dashboards/openstack/grafana_project_dashboard.json | 2 +- .../kolla/config/grafana/dashboards/openstack/openstack.json | 2 +- .../grafana/dashboards/openstack/prometheus_benchmark.json | 2 +- .../kolla/config/prometheus/prometheus-alertmanager.yml.example | 2 +- 9 files changed, 9 insertions(+), 9 deletions(-) diff --git a/etc/kayobe/ansible/scripts/aio-init.sh b/etc/kayobe/ansible/scripts/aio-init.sh index 817225dd2..cc96ddc04 100644 --- a/etc/kayobe/ansible/scripts/aio-init.sh +++ b/etc/kayobe/ansible/scripts/aio-init.sh @@ -142,4 +142,4 @@ if ! $KOLLA_OPENSTACK_COMMAND flavor list | grep -q m1.tiny; then $KOLLA_OPENSTACK_COMMAND flavor create --id 5 --ram 16384 --disk 160 --vcpus 8 m1.xlarge fi -touch /tmp/.init-runonce \ No newline at end of file +touch /tmp/.init-runonce diff --git a/etc/kayobe/environments/aufn-ceph/configure-openstack.sh b/etc/kayobe/environments/aufn-ceph/configure-openstack.sh index 2129bc122..1c7433e8a 100755 --- a/etc/kayobe/environments/aufn-ceph/configure-openstack.sh +++ b/etc/kayobe/environments/aufn-ceph/configure-openstack.sh @@ -25,4 +25,4 @@ ansible-galaxy collection install -p ansible/collections -r requirements.yml source $BASE_PATH/src/kayobe-config/etc/kolla/public-openrc.sh # Run script to configure openstack cloud -tools/openstack-config \ No newline at end of file +tools/openstack-config diff --git a/etc/kayobe/environments/aufn-ceph/inventory/groups b/etc/kayobe/environments/aufn-ceph/inventory/groups index 6f1833029..71b723a91 100644 --- a/etc/kayobe/environments/aufn-ceph/inventory/groups +++ b/etc/kayobe/environments/aufn-ceph/inventory/groups @@ -26,4 +26,4 @@ storage-ceph # Monitoring groups [monitoring:children] -controllers \ No newline at end of file +controllers diff --git a/etc/kayobe/inventory/group_vars/all/stackhpc b/etc/kayobe/inventory/group_vars/all/stackhpc index 528733ebc..427bb0201 100644 --- a/etc/kayobe/inventory/group_vars/all/stackhpc +++ b/etc/kayobe/inventory/group_vars/all/stackhpc @@ -3,4 +3,4 @@ # Feature flags # Whether or not to run CIS benchmark hardening playbooks. Default is false. -stackhpc_enable_cis_benchmark_hardening_hook: false \ No newline at end of file +stackhpc_enable_cis_benchmark_hardening_hook: false diff --git a/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_cloud_dashboard.json b/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_cloud_dashboard.json index 7bdbdee9f..eed9b1e3a 100644 --- a/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_cloud_dashboard.json +++ b/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_cloud_dashboard.json @@ -902,4 +902,4 @@ "version": 1, "weekStart": "" } -{% endraw %} \ No newline at end of file +{% endraw %} diff --git a/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_project_dashboard.json b/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_project_dashboard.json index acb37f195..2602a0c68 100644 --- a/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_project_dashboard.json +++ b/etc/kayobe/kolla/config/grafana/dashboards/openstack/grafana_project_dashboard.json @@ -1138,4 +1138,4 @@ "version": 1, "weekStart": "" } -{% endraw %} \ No newline at end of file +{% endraw %} diff --git a/etc/kayobe/kolla/config/grafana/dashboards/openstack/openstack.json b/etc/kayobe/kolla/config/grafana/dashboards/openstack/openstack.json index 15ea378a3..6841ad19f 100644 --- a/etc/kayobe/kolla/config/grafana/dashboards/openstack/openstack.json +++ b/etc/kayobe/kolla/config/grafana/dashboards/openstack/openstack.json @@ -2531,4 +2531,4 @@ "version": 2, "weekStart": "" } -{% endraw %} \ No newline at end of file +{% endraw %} diff --git a/etc/kayobe/kolla/config/grafana/dashboards/openstack/prometheus_benchmark.json b/etc/kayobe/kolla/config/grafana/dashboards/openstack/prometheus_benchmark.json index 68ee2d0ab..09fb38fa0 100644 --- a/etc/kayobe/kolla/config/grafana/dashboards/openstack/prometheus_benchmark.json +++ b/etc/kayobe/kolla/config/grafana/dashboards/openstack/prometheus_benchmark.json @@ -5353,4 +5353,4 @@ "version": 8, "weekStart": "" } -{% endraw %} \ No newline at end of file +{% endraw %} diff --git a/etc/kayobe/kolla/config/prometheus/prometheus-alertmanager.yml.example b/etc/kayobe/kolla/config/prometheus/prometheus-alertmanager.yml.example index 435d63c09..4a3501474 100644 --- a/etc/kayobe/kolla/config/prometheus/prometheus-alertmanager.yml.example +++ b/etc/kayobe/kolla/config/prometheus/prometheus-alertmanager.yml.example @@ -44,4 +44,4 @@ receivers: templates: - - '/etc/prometheus/*.tmpl' \ No newline at end of file + - '/etc/prometheus/*.tmpl' From 42d348bb969baef468ca62f0706f0a65b3798562 Mon Sep 17 00:00:00 2001 From: Alex-Welsh Date: Wed, 24 Jul 2024 11:52:43 +0100 Subject: [PATCH 06/19] Add unified stackhpc_repos_enabled group var --- etc/kayobe/apt.yml | 6 +++--- etc/kayobe/dnf.yml | 4 ++-- etc/kayobe/inventory/group_vars/all/stackhpc-repos | 6 ++++++ etc/kayobe/inventory/group_vars/overcloud/stackhpc-repos | 4 ++-- .../notes/stackhpc-repos-enabled-10c8a698991e53c2.yaml | 7 +++++++ 5 files changed, 20 insertions(+), 7 deletions(-) create mode 100644 etc/kayobe/inventory/group_vars/all/stackhpc-repos create mode 100644 releasenotes/notes/stackhpc-repos-enabled-10c8a698991e53c2.yaml diff --git a/etc/kayobe/apt.yml b/etc/kayobe/apt.yml index 51cd154c9..5361c84c3 100644 --- a/etc/kayobe/apt.yml +++ b/etc/kayobe/apt.yml @@ -74,7 +74,7 @@ stackhpc_apt_repositories: # Do not replace apt configuration for non-overcloud hosts. This can result in # errors if apt reconfiguration is performed before local repository mirrors # are deployed. -apt_repositories: "{{ stackhpc_apt_repositories | selectattr('required') | list if 'overcloud' in group_names else [] }}" +apt_repositories: "{{ stackhpc_apt_repositories | selectattr('required') | list if stackhpc_repos_enabled | bool else [] }}" # Whether to disable repositories in /etc/apt/sources.list. This may be used # when replacing the distribution repositories via apt_repositories. @@ -82,7 +82,7 @@ apt_repositories: "{{ stackhpc_apt_repositories | selectattr('required') | list # Do not disable the default apt configuration for non-overcloud hosts. This # can result in errors if apt reconfiguration is performed before local # repository mirrors are deployed. -apt_disable_sources_list: "{{ 'overcloud' in group_names }}" +apt_disable_sources_list: "{{ stackhpc_repos_enabled | bool }}" # Apt auth configuration for accessing the package repository mirror. stackhpc_apt_auth: @@ -98,7 +98,7 @@ stackhpc_apt_auth: # * filename: Name of a file in which to store the auth configuration. The # extension should be '.conf'. # Default is an empty list. -apt_auth: "{{ stackhpc_apt_auth if 'overcloud' in group_names and stackhpc_repo_mirror_username is truthy else [] }}" +apt_auth: "{{ stackhpc_apt_auth if stackhpc_repos_enabled | bool and stackhpc_repo_mirror_username is truthy else [] }}" ############################################################################### # Dummy variable to allow Ansible to accept this file. diff --git a/etc/kayobe/dnf.yml b/etc/kayobe/dnf.yml index e7dcf1c65..916ffe5a1 100644 --- a/etc/kayobe/dnf.yml +++ b/etc/kayobe/dnf.yml @@ -41,10 +41,10 @@ # file: myrepo # gpgkey: http://gpgkey # gpgcheck: yes -#dnf_custom_repos: +dnf_custom_repos: "{{ stackhpc_dnf_repos if stackhpc_repos_enabled | bool else [] }}" # A dict of custom repositories that point to the local Pulp server. -# To use these repos, set dnf_custom_repos to the value of stackhpc_dnf_repos. +# To use these repos, set stackhpc_repos_enabled to true. # This is done by default for hosts in the overcloud group via a group_vars # file. stackhpc_dnf_repos: "{{ dnf_custom_repos_el9 | combine(dnf_custom_repos_rocky_9) | combine(dnf_custom_repos_elrepo_9 if dnf_install_elrepo_9 | bool else {}) }}" diff --git a/etc/kayobe/inventory/group_vars/all/stackhpc-repos b/etc/kayobe/inventory/group_vars/all/stackhpc-repos new file mode 100644 index 000000000..6273f2b4a --- /dev/null +++ b/etc/kayobe/inventory/group_vars/all/stackhpc-repos @@ -0,0 +1,6 @@ +--- +# Use upstream package repos by default to avoid situations where the +# seed-hypervisor tries to use a local pulp repo on the seed VM before the seed +# vm has been provisioned +# This behaviour is overriden for Overcloud hosts. +stackhpc_repos_enabled: false diff --git a/etc/kayobe/inventory/group_vars/overcloud/stackhpc-repos b/etc/kayobe/inventory/group_vars/overcloud/stackhpc-repos index 1789a49d5..442a9e068 100644 --- a/etc/kayobe/inventory/group_vars/overcloud/stackhpc-repos +++ b/etc/kayobe/inventory/group_vars/overcloud/stackhpc-repos @@ -1,7 +1,7 @@ +--- # Only use local pulp mirrors for overcloud hosts # to avoid situations where the seed-hypervisor # tries to use a local pulp repo on the seed VM # before the seed vm has been provisioned -dnf_custom_repos: "{{ stackhpc_dnf_repos }}" - +stackhpc_repos_enabled: true enable_docker_repo: false diff --git a/releasenotes/notes/stackhpc-repos-enabled-10c8a698991e53c2.yaml b/releasenotes/notes/stackhpc-repos-enabled-10c8a698991e53c2.yaml new file mode 100644 index 000000000..fe21296c9 --- /dev/null +++ b/releasenotes/notes/stackhpc-repos-enabled-10c8a698991e53c2.yaml @@ -0,0 +1,7 @@ +--- +features: + - | + Added a new group variable - ``stackhpc_repos_enabled`` - for unified + control over usage of StackHPC Release Train package repositories. This + makes it easier to set which hosts do or do not pull packages from release + train. From b03b549c5364db4f571c7f7c7791f815289d6db6 Mon Sep 17 00:00:00 2001 From: Tom Clark <161027899+tomclark0@users.noreply.github.com> Date: Thu, 25 Jul 2024 15:46:08 +0200 Subject: [PATCH 07/19] docs: Update release train image --- doc/source/_static/images/release-train.svg | 475 +++++++++++++++++++- 1 file changed, 474 insertions(+), 1 deletion(-) diff --git a/doc/source/_static/images/release-train.svg b/doc/source/_static/images/release-train.svg index aaf2f2303..16e2c0263 100644 --- a/doc/source/_static/images/release-train.svg +++ b/doc/source/_static/images/release-train.svg @@ -1 +1,474 @@ - \ No newline at end of file + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + From aadd084f668e2a7a573531bc0b8e8a0edf7aaa45 Mon Sep 17 00:00:00 2001 From: Tom Clark <161027899+tomclark0@users.noreply.github.com> Date: Thu, 25 Jul 2024 18:25:17 +0200 Subject: [PATCH 08/19] docs: Update release train image Previous image had some artefacts introduced from the export. This addresses that. --- doc/source/_static/images/release-train.svg | 475 +------------------- 1 file changed, 1 insertion(+), 474 deletions(-) diff --git a/doc/source/_static/images/release-train.svg b/doc/source/_static/images/release-train.svg index 16e2c0263..e270699d6 100644 --- a/doc/source/_static/images/release-train.svg +++ b/doc/source/_static/images/release-train.svg @@ -1,474 +1 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + \ No newline at end of file From c3e661fee6d10d92398de8f9c2ddee454b608b44 Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Fri, 26 Jul 2024 10:51:55 +0200 Subject: [PATCH 09/19] Support Nova images built from Rocky Linux 9.3 Set the stackhpc_pulp_repo_rocky_9_minor_version variable to 3 or lower to use these images. --- etc/kayobe/kolla/globals.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/etc/kayobe/kolla/globals.yml b/etc/kayobe/kolla/globals.yml index 05ec0ab29..c858f9202 100644 --- a/etc/kayobe/kolla/globals.yml +++ b/etc/kayobe/kolla/globals.yml @@ -22,6 +22,12 @@ kolla_image_tags: # Variables defining which tag to use for each container's image. {{ lookup('pipe', 'python3 ' ~ kayobe_config_path ~ '/../../tools/kolla-images.py list-tag-vars') }} +# NOTE(priteau): Nova container images can use Rocky Linux 9.3 to avoid +# Libvirt/QEMU version bump. +{% if stackhpc_pulp_repo_rocky_9_minor_version < 4 %} +nova_tag: 2023.1-rocky-9-20240725T200915 +{% endif %} + ############################################################################# # RabbitMQ From 9bc36f526294b872b4df1f2d79d72a11d0b8243b Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Tue, 30 Jul 2024 11:36:58 +0200 Subject: [PATCH 10/19] Rebuild Octavia images from our fork This resolves a bug breaking OVN IPv4 load balancers with health monitors [1]. [1] https://bugs.launchpad.net/neutron/+bug/2072754 --- etc/kayobe/kolla-image-tags.yml | 3 +++ etc/kayobe/kolla.yml | 8 ++++++++ ...ovn-octavia-provider-bug-2072754-5cbd7dc9c366668d.yaml | 6 ++++++ 3 files changed, 17 insertions(+) create mode 100644 releasenotes/notes/ovn-octavia-provider-bug-2072754-5cbd7dc9c366668d.yaml diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index 41e15d775..56adbb8a6 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -19,5 +19,8 @@ kolla_image_tags: nova: rocky-9: 2023.1-rocky-9-20240723T140948 ubuntu-jammy: 2023.1-ubuntu-jammy-20240723T140948 + octavia: + rocky-9: 2023.1-rocky-9-20240730T090421 + ubuntu-jammy: 2023.1-ubuntu-jammy-20240730T090421 opensearch: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T094444 diff --git a/etc/kayobe/kolla.yml b/etc/kayobe/kolla.yml index 5d9670def..57ffb8aaa 100644 --- a/etc/kayobe/kolla.yml +++ b/etc/kayobe/kolla.yml @@ -147,6 +147,14 @@ kolla_sources: type: git location: https://github.com/stackhpc/networking-generic-switch.git reference: stackhpc/{{ openstack_release }} + octavia-api-plugin-ovn-octavia-provider: + type: git + location: https://github.com/stackhpc/ovn-octavia-provider.git + reference: stackhpc/{{ openstack_release }} + octavia-driver-agent-plugin-ovn-octavia-provider: + type: git + location: https://github.com/stackhpc/ovn-octavia-provider.git + reference: stackhpc/{{ openstack_release }} ############################################################################### # Kolla image build configuration. diff --git a/releasenotes/notes/ovn-octavia-provider-bug-2072754-5cbd7dc9c366668d.yaml b/releasenotes/notes/ovn-octavia-provider-bug-2072754-5cbd7dc9c366668d.yaml new file mode 100644 index 000000000..dc290a9ea --- /dev/null +++ b/releasenotes/notes/ovn-octavia-provider-bug-2072754-5cbd7dc9c366668d.yaml @@ -0,0 +1,6 @@ +--- +fixes: + - | + Updates Octavia container images to fix a maintenance task that was + breaking OVN IPv4 load balancers with health monitors. + `LP#2072754 `__. From 95a432e37da2eba2220e71de993daf764dc83aa2 Mon Sep 17 00:00:00 2001 From: Jakub Darmach Date: Thu, 1 Aug 2024 14:43:16 +0200 Subject: [PATCH 11/19] Magnum CAPI docs update Corrected commands sequence in the capi mgmt cluster deploy section. --- doc/source/configuration/magnum-capi.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/source/configuration/magnum-capi.rst b/doc/source/configuration/magnum-capi.rst index c05a80bcf..cbe9ec5a1 100644 --- a/doc/source/configuration/magnum-capi.rst +++ b/doc/source/configuration/magnum-capi.rst @@ -60,12 +60,12 @@ To deploy the CAPI management cluster using this site-specific environment, run .. code-block:: bash - # Activate the environment - ./bin/activate - # Install or update the local Ansible Python venv ./bin/ensure-venv + # Activate the environment + source bin/activate + # Install or update Ansible dependencies ansible-galaxy install -f -r ./requirements.yml From 9e3e39ec571529c6830828aee5b58d89d4938e21 Mon Sep 17 00:00:00 2001 From: sd109 Date: Thu, 1 Aug 2024 15:14:13 +0100 Subject: [PATCH 12/19] Remove reference to unused KA variable --- doc/source/configuration/magnum-capi.rst | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/doc/source/configuration/magnum-capi.rst b/doc/source/configuration/magnum-capi.rst index cbe9ec5a1..016aaeabb 100644 --- a/doc/source/configuration/magnum-capi.rst +++ b/doc/source/configuration/magnum-capi.rst @@ -103,12 +103,7 @@ To configure the Magnum service with the Cluster API driver enabled, first ensur Next, copy the CAPI management cluster's kubeconfig file into your stackhpc-kayobe-config environment (e.g. ``/kolla/config/magnum/kubeconfig``). This file must be Ansible vault encrypted. -The following config should also be set in your stackhpc-kayobe-config environment: - -.. code-block:: yaml - :caption: kolla/globals.yml - - magnum_capi_helm_driver_enabled: true +The presence of a kubeconfig file in the Magnum config directory is used by Kolla to determine whether the CAPI Helm driver should be enabled. To apply the configuration, run ``kayobe overcloud service reconfigure -kt magnum``. From 02b9ed3d11f6bee2d1047869f65f3e43008af666 Mon Sep 17 00:00:00 2001 From: technowhizz <7688823+technowhizz@users.noreply.github.com> Date: Tue, 30 Jul 2024 20:06:19 +0100 Subject: [PATCH 13/19] Fix issue with prometheus and hyphens Fixes an issue where prometheus wasn't happy with hyphens in the names of targets --- .../kolla/inventory/group_vars/prometheus-blackbox-exporter | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter b/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter index dac54db63..53180cc96 100644 --- a/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter +++ b/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter @@ -104,7 +104,7 @@ prometheus_blackbox_exporter_endpoints_default: - "{{ ('swift_internal:os_endpoint:' + swift_internal_base_endpoint) if not kolla_same_external_internal_vip | bool }}" enabled: "{{ enable_swift | bool }}" # Additional service endpoints - - endpoints: "{% set etcd_endpoints = [] %}{% for host in groups.get('etcd', []) %}{{ etcd_endpoints.append('etcd_' + host + ':http_2xx:' + hostvars[host]['etcd_protocol'] + '://' + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['etcd_client_port'] + '/metrics')}}{% endfor %}{{ etcd_endpoints }}" + - endpoints: "{% set etcd_endpoints = [] %}{% for host in groups.get('etcd', []) %}{{ etcd_endpoints.append('etcd_' + host.replace('-', '') + ':http_2xx:' + hostvars[host]['etcd_protocol'] + '://' + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['etcd_client_port'] + '/metrics')}}{% endfor %}{{ etcd_endpoints }}" enabled: "{{ enable_etcd | bool }}" - endpoints: - "grafana:http_2xx:{{ grafana_public_endpoint }}" @@ -125,9 +125,9 @@ prometheus_blackbox_exporter_endpoints_default: - endpoints: - "prometheus_alertmanager:http_2xx_alertmanager:{{ prometheus_alertmanager_public_endpoint if enable_prometheus_alertmanager_external else prometheus_alertmanager_internal_endpoint }}" enabled: "{{ enable_prometheus_alertmanager | bool }}" - - endpoints: "{% set rabbitmq_endpoints = [] %}{% for host in groups.get('rabbitmq', []) %}{{ rabbitmq_endpoints.append('rabbitmq_' + host + (':tls_connect:' if rabbitmq_enable_tls else ':tcp_connect:') + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['rabbitmq_port'] ) }}{% endfor %}{{ rabbitmq_endpoints }}" + - endpoints: "{% set rabbitmq_endpoints = [] %}{% for host in groups.get('rabbitmq', []) %}{{ rabbitmq_endpoints.append('rabbitmq_' + host.replace('-', '') + (':tls_connect:' if rabbitmq_enable_tls else ':tcp_connect:') + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['rabbitmq_port'] ) }}{% endfor %}{{ rabbitmq_endpoints }}" enabled: "{{ enable_rabbitmq | bool }}" - - endpoints: "{% set redis_endpoints = [] %}{% for host in groups.get('redis', []) %}{{ redis_endpoints.append('redis_' + host + ':tcp_connect:' + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['redis_port']) }}{% endfor %}{{ redis_endpoints }}" + - endpoints: "{% set redis_endpoints = [] %}{% for host in groups.get('redis', []) %}{{ redis_endpoints.append('redis_' + host.replace('-', '') + ':tcp_connect:' + ('api' | kolla_address(host) | put_address_in_context('url')) + ':' + hostvars[host]['redis_port']) }}{% endfor %}{{ redis_endpoints }}" enabled: "{{ enable_redis | bool }}" # Ensure service endpoints are defined From accc4816f7dfaac74b573cc59a107be76297211e Mon Sep 17 00:00:00 2001 From: Jack Hodgkiss Date: Fri, 2 Aug 2024 14:59:08 +0100 Subject: [PATCH 14/19] fix: add missing endpoints for `Grafana` and `Horizon` In deployments which use single frontend both `Grafana` and `Horizon` would default to `Keystone` and therefore fail the probe check. This commit fixes this by defining endpoints that observe the use of single frontend. Also taken the opportunity to list service endpoints in order. --- .../group_vars/prometheus-blackbox-exporter | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter b/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter index 53180cc96..4e95d64bd 100644 --- a/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter +++ b/etc/kayobe/kolla/inventory/group_vars/prometheus-blackbox-exporter @@ -141,10 +141,12 @@ cloudkitty_internal_endpoint: "{{ cloudkitty_internal_fqdn | kolla_url(internal_ cloudkitty_public_endpoint: "{{ cloudkitty_external_fqdn | kolla_url(public_protocol, cloudkitty_api_public_port) }}" gnocchi_internal_endpoint: "{{ gnocchi_internal_fqdn | kolla_url(internal_protocol, gnocchi_api_port) }}" gnocchi_public_endpoint: "{{ gnocchi_external_fqdn | kolla_url(public_protocol, gnocchi_api_public_port) }}" -heat_internal_base_endpoint: "{{ heat_internal_fqdn | kolla_url(internal_protocol, heat_api_port) }}" -heat_public_base_endpoint: "{{ heat_external_fqdn | kolla_url(public_protocol, heat_api_public_port) }}" +grafana_public_endpoint: "{{ grafana_external_fqdn | kolla_url(public_protocol, grafana_server_public_port) }}" heat_cfn_internal_base_endpoint: "{{ heat_cfn_internal_fqdn | kolla_url(internal_protocol, heat_api_cfn_port) }}" heat_cfn_public_base_endpoint: "{{ heat_cfn_external_fqdn | kolla_url(public_protocol, heat_api_cfn_public_port) }}" +heat_internal_base_endpoint: "{{ heat_internal_fqdn | kolla_url(internal_protocol, heat_api_port) }}" +heat_public_base_endpoint: "{{ heat_external_fqdn | kolla_url(public_protocol, heat_api_public_port) }}" +horizon_public_endpoint: "{{ horizon_external_fqdn | kolla_url(public_protocol, horizon_listen_port) }}" ironic_inspector_internal_endpoint: "{{ ironic_inspector_internal_fqdn | kolla_url(internal_protocol, ironic_inspector_port) }}" ironic_inspector_public_endpoint: "{{ ironic_inspector_external_fqdn | kolla_url(public_protocol, ironic_inspector_public_port) }}" magnum_internal_base_endpoint: "{{ magnum_internal_fqdn | kolla_url(internal_protocol, magnum_api_port) }}" @@ -153,12 +155,12 @@ manila_internal_base_endpoint: "{{ manila_internal_fqdn | kolla_url(internal_pro manila_public_base_endpoint: "{{ manila_external_fqdn | kolla_url(public_protocol, manila_api_public_port) }}" nova_internal_base_endpoint: "{{ nova_internal_fqdn | kolla_url(internal_protocol, nova_api_port) }}" nova_public_base_endpoint: "{{ nova_external_fqdn | kolla_url(public_protocol, nova_api_public_port) }}" +opensearch_dashboards_external_endpoint: "{{ opensearch_dashboards_external_fqdn | default(kolla_external_fqdn) | kolla_url(public_protocol, opensearch_dashboards_port_external) }}" +opensearch_dashboards_internal_endpoint: "{{ opensearch_dashboards_internal_fqdn | default(kolla_internal_fqdn) | kolla_url(internal_protocol, opensearch_dashboards_port) }}" placement_internal_endpoint: "{{ placement_internal_fqdn | kolla_url(internal_protocol, placement_api_port) }}" placement_public_endpoint: "{{ placement_external_fqdn | kolla_url(public_protocol, placement_api_public_port) }}" -swift_public_base_endpoint: "{{ swift_external_fqdn | kolla_url(public_protocol, swift_proxy_server_port) }}" -opensearch_dashboards_internal_endpoint: "{{ opensearch_dashboards_internal_fqdn | default(kolla_internal_fqdn) | kolla_url(internal_protocol, opensearch_dashboards_port) }}" -opensearch_dashboards_external_endpoint: "{{ opensearch_dashboards_external_fqdn | default(kolla_external_fqdn) | kolla_url(public_protocol, opensearch_dashboards_port_external) }}" -prometheus_internal_endpoint: "{{ prometheus_internal_fqdn | kolla_url(internal_protocol, prometheus_port) }}" -prometheus_public_endpoint: "{{ prometheus_external_fqdn | kolla_url(public_protocol, prometheus_public_port) }}" prometheus_alertmanager_internal_endpoint: "{{ prometheus_alertmanager_internal_fqdn | kolla_url(internal_protocol, prometheus_alertmanager_port) }}" prometheus_alertmanager_public_endpoint: "{{ prometheus_alertmanager_external_fqdn | kolla_url(public_protocol, prometheus_alertmanager_public_port) }}" +prometheus_internal_endpoint: "{{ prometheus_internal_fqdn | kolla_url(internal_protocol, prometheus_port) }}" +prometheus_public_endpoint: "{{ prometheus_external_fqdn | kolla_url(public_protocol, prometheus_public_port) }}" +swift_public_base_endpoint: "{{ swift_external_fqdn | kolla_url(public_protocol, swift_proxy_server_port) }}" From 09863454a139602e9785e15c1c8329606652a376 Mon Sep 17 00:00:00 2001 From: Mark Goddard Date: Mon, 5 Aug 2024 13:09:36 +0100 Subject: [PATCH 15/19] docs: Remove legacy Member and _member_ roles from Ceph RADOS Gateway config These roles should no longer be used, in favour of the standard member role. --- doc/source/configuration/cephadm.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/source/configuration/cephadm.rst b/doc/source/configuration/cephadm.rst index a259b42bc..f0ab88929 100644 --- a/doc/source/configuration/cephadm.rst +++ b/doc/source/configuration/cephadm.rst @@ -377,7 +377,7 @@ The set of commands below configure all of these. - "config set client.rgw rgw_enable_apis 's3, swift, swift_auth, admin'" - "config set client.rgw rgw_enforce_swift_acls true" - "config set client.rgw rgw_keystone_accepted_admin_roles 'admin'" - - "config set client.rgw rgw_keystone_accepted_roles 'member, Member, _member_, admin'" + - "config set client.rgw rgw_keystone_accepted_roles 'member, admin'" - "config set client.rgw rgw_keystone_admin_domain Default" - "config set client.rgw rgw_keystone_admin_password {{ secrets_ceph_rgw_keystone_password }}" - "config set client.rgw rgw_keystone_admin_project service" From 96f5c8f3e4a17d0af68faba1c4b81275c3bd6609 Mon Sep 17 00:00:00 2001 From: Mark Goddard Date: Mon, 5 Aug 2024 14:00:51 +0100 Subject: [PATCH 16/19] docs: Improve Ceph RGW docs - Link to Kolla Ansible RGW integration docs - Include KA enable flag - List LB options --- doc/source/configuration/cephadm.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/doc/source/configuration/cephadm.rst b/doc/source/configuration/cephadm.rst index f0ab88929..9c839b42e 100644 --- a/doc/source/configuration/cephadm.rst +++ b/doc/source/configuration/cephadm.rst @@ -347,6 +347,10 @@ should be used in the Kolla Manila configuration e.g.: RADOS Gateways -------------- +RADOS Gateway integration is described in the :kolla-ansible-doc:`Kolla Ansible +documentation +`. + RADOS Gateways (RGWs) are defined with the following: .. code:: yaml @@ -393,6 +397,12 @@ The set of commands below configure all of these. - "config set client.rgw rgw_swift_account_in_url true" - "config set client.rgw rgw_swift_versioning_enabled true" +Enable the Kolla Ansible RADOS Gateway integration in ``kolla.yml``: + +.. code:: yaml + + kolla_enable_ceph_rgw: true + As we have configured Ceph to respond to Swift APIs, you will need to tell Kolla to account for this when registering Swift endpoints with Keystone. Also, when ``rgw_swift_account_in_url`` is set, the equivalent Kolla variable should @@ -414,6 +424,11 @@ before deploying the RADOS gateways. If you are using the Kolla load balancer kayobe overcloud service deploy -kt ceph-rgw,keystone,haproxy,loadbalancer +There are two options for load balancing RADOS Gateway: + +1. HA with Ceph Ingress services +2. RGWs with hyper-converged Ceph (using the Kolla Ansible deployed HAProxy + load balancer) .. _RGWs-with-hyper-converged-Ceph: From 5003bad05acbc7456fe8c249875c74877ae0fb65 Mon Sep 17 00:00:00 2001 From: Matt Crees Date: Tue, 6 Aug 2024 12:31:46 +0100 Subject: [PATCH 17/19] Remove docs to encrypt wazuh secrets They're encrypted automatically now: https://github.com/stackhpc/stackhpc-kayobe-config/pull/1171 --- doc/source/configuration/wazuh.rst | 2 -- 1 file changed, 2 deletions(-) diff --git a/doc/source/configuration/wazuh.rst b/doc/source/configuration/wazuh.rst index 13c65ac2b..cd57716d3 100644 --- a/doc/source/configuration/wazuh.rst +++ b/doc/source/configuration/wazuh.rst @@ -12,7 +12,6 @@ The short version particular the defaults assume that the ``provision_oc_net`` network will be used. #. Generate secrets: ``kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/wazuh-secrets.yml`` -#. Encrypt the secrets: ``ansible-vault encrypt --vault-password-file ~/vault.password $KAYOBE_CONFIG_PATH/environments/ci-multinode/wazuh-secrets.yml`` #. Deploy the Wazuh manager: ``kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/wazuh-manager.yml`` #. Deploy the Wazuh agents: ``kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/wazuh-agent.yml`` @@ -250,7 +249,6 @@ It will be used by wazuh secrets playbook to generate wazuh secrets vault file. .. code-block:: console kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/wazuh-secrets.yml - ansible-vault encrypt --vault-password-file ~/vault.pass $KAYOBE_CONFIG_PATH/wazuh-secrets.yml Configure Wazuh Dashboard's Server Host --------------------------------------- From fb5dbf0e36b4a0ae25ffb675c9def13839903f04 Mon Sep 17 00:00:00 2001 From: Piotr Parczewski Date: Wed, 7 Aug 2024 12:49:37 +0200 Subject: [PATCH 18/19] Bump up Hashicorp collection version --- etc/kayobe/ansible/requirements.yml | 2 +- .../notes/update-hcp-collection-39acaafe76c95b3f.yaml | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 releasenotes/notes/update-hcp-collection-39acaafe76c95b3f.yaml diff --git a/etc/kayobe/ansible/requirements.yml b/etc/kayobe/ansible/requirements.yml index 7f41756a7..90e653ab2 100644 --- a/etc/kayobe/ansible/requirements.yml +++ b/etc/kayobe/ansible/requirements.yml @@ -9,7 +9,7 @@ collections: - name: stackhpc.pulp version: 0.5.5 - name: stackhpc.hashicorp - version: 2.5.0 + version: 2.5.1 - name: stackhpc.kayobe_workflows version: 1.0.3 roles: diff --git a/releasenotes/notes/update-hcp-collection-39acaafe76c95b3f.yaml b/releasenotes/notes/update-hcp-collection-39acaafe76c95b3f.yaml new file mode 100644 index 000000000..9a561a3f7 --- /dev/null +++ b/releasenotes/notes/update-hcp-collection-39acaafe76c95b3f.yaml @@ -0,0 +1,4 @@ +--- +fixes: + - | + Fixes the issue with interface names containing dashes in Hashicorp collection. From 3f1e6223523035ef1532a0a34f145526d40b4fef Mon Sep 17 00:00:00 2001 From: Bartosz Bezak Date: Fri, 9 Aug 2024 14:44:50 +0200 Subject: [PATCH 19/19] bump rocky9 ovs/ovn images build from R9.4 --- etc/kayobe/kolla-image-tags.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml index 75aa46a11..4b0143c2e 100644 --- a/etc/kayobe/kolla-image-tags.yml +++ b/etc/kayobe/kolla-image-tags.yml @@ -15,13 +15,13 @@ kolla_image_tags: haproxy_ssh: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329 kolla_toolbox: - rocky-9: 2023.1-rocky-9-20240719T082723 + rocky-9: 2023.1-rocky-9-20240809T102431 letsencrypt: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T102329 manila: - rocky-9: 2023.1-rocky-9-20240719T082723 + rocky-9: 2023.1-rocky-9-20240809T102431 neutron: - rocky-9: 2023.1-rocky-9-20240719T082723 + rocky-9: 2023.1-rocky-9-20240809T102431 nova: rocky-9: 2023.1-rocky-9-20240723T140948 ubuntu-jammy: 2023.1-ubuntu-jammy-20240723T140948 @@ -31,6 +31,6 @@ kolla_image_tags: opensearch: ubuntu-jammy: 2023.1-ubuntu-jammy-20240509T094444 openvswitch: - rocky-9: 2023.1-rocky-9-20240719T082723 + rocky-9: 2023.1-rocky-9-20240809T102431 ovn: - rocky-9: 2023.1-rocky-9-20240719T082723 + rocky-9: 2023.1-rocky-9-20240809T102431