Zuul [Tue, 23 Dec 2025 23:19:45 +0000 (23:19 +0000)]
Update git submodules
* Update openstack-helm from branch 'master'
to 9cc7c1ea96a014bdeab44bb64e785e76a61a187a
- Merge "fix(neutron): OVN fails to start by default"
- fix(neutron): OVN fails to start by default
In Iffb1b6bb6724c5e9e3310338f88ce3624e32fe21 the ability was added to
specify a different OVN NB and SB connection string but if you wanted to
use the defaults the chart would fail without an ovn section in
ml2_conf.ini.
Zuul [Tue, 23 Dec 2025 22:10:58 +0000 (22:10 +0000)]
Update git submodules
* Update ovsdbapp from branch 'master'
to e1941ec9a257b6533589c09c0367d88a7943bb61
- Merge "Drop workaround for Python < 2.7.4"
- Drop workaround for Python < 2.7.4
Also setup.py is no longer managed by the global tool.
Ivan Anfimov [Tue, 23 Dec 2025 22:02:14 +0000 (22:02 +0000)]
Update git submodules
* Update openstack-ansible-os_blazar from branch 'master'
to 66bffce262fb44f20e356b6a004eb6504c9e0329
- Remove outdate code in task - Including osa.service_setup role
Change-Id: If6e796e099ca9b9aac245c3021d588930b0c3319 Signed-off-by: Ivan Anfimov <lazekteam@gmail.com>
pip 23.1 removed the "setup.py install" fallback for projects
that do not have pyproject.toml and now uses a pyproject.toml
which is vendored in pip.
To address that, this change adds the minimal pyproject.toml
to enable pbr to be properly used to build editable wheels.
See https://pip.pypa.io/en/stable/news/#v23-1
and https://github.com/pypa/pip/issues/8368 for more
details on the removal of the fallback support.
Co-Authored-By: Sean Mooney <work@seanmooney.info>
Change-Id: I0548bcdaf48b65a854b615ade0e07acbbc12ec55 Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
For backward compatibility we build two sets of images
1) We don't change the way how we build images using PIP.
This assumes having so called requirements image
that contains all the necessary wheels and then we
build all other project images using these wheels
from the requirements image.
2) Also we add another set of images that we build
using the two stage Dockerfile. On the first stage
we build venv using UV and then we just copy the
venv as is to the project image.
Depends-On: Id6412055f742990f08aa1befa7a41f1670414d4c
Change-Id: I0726c1b7d9f9bee3097c4891248f41169fe6ac46 Signed-off-by: Vladimir Kozhukalov <kozhukalov@gmail.com>
While disconnecting the volume, we flush the multipath device,
execute ``multipath del path`` and remove the individual
devices before finishing the operation.
There is an issue with the said order as removing individual
devices already triggers the uevent for multipathd to remove
the paths but it doesn't happen immediately.
With change[1], we tried to mitigate the issue by executing
``multipath del path`` manually but this also generates
another uevent for multipathd and doesn't guarantee that the
devices are removed synchronously from multipathd monitoring.
Overall, we are just increasing the number of uevents and
not guaranteeing that the paths are removed before we
return the call to caller (nova or cinder or glance).
This patch addresses the issue by waiting for the paths to
be removed from multipathd monitoring by introducing a
call to ``multipathd show paths raw format "%d" `` with an
exponential backoff. This ensures that the paths are not
monitored anymore before os-brick claims the removal of
devices and returns the call.
As a last mechanism, if the devices are still monitored
by multipathd, we execute the ``multipath del path``
command manually to make sure we tried our best to
remove the devices from multipathd monitoring.
use the same dependencies in both unit and lint tests,
newer versions of dependencies may bring things like
new flake8 extensions (example - neutron-lib).
Zuul [Tue, 23 Dec 2025 13:47:09 +0000 (13:47 +0000)]
Update git submodules
* Update releases from branch 'master'
to b6318616052ba83de896d441396fc7c717b72411
- Merge "[tool] Do not add reviewer to patch for unmaintained"
- [tool] Do not add reviewer to patch for unmaintained
Unmainained branches are not maintained by project teams, thus,
they don't need PTL or release liaison approval. So let's not
spam them.
These patches are usually the patches where we move an unmaintained
branch to End of Life. As we don't release anything out of a branch
in unmaintained state.
Zuul [Tue, 23 Dec 2025 11:18:11 +0000 (11:18 +0000)]
Update git submodules
* Update neutron from branch 'master'
to 0ba83a9c07758f8fc36219422a669ef109e97733
- Merge "Change some functional test code to use project_id"
- Change some functional test code to use project_id
Started initial change to start using project_id
in the functional test tree:
- Updated strings
- Changed local variable names
- Changed some function arguments
Zuul [Tue, 23 Dec 2025 11:05:33 +0000 (11:05 +0000)]
Update git submodules
* Update ovn-octavia-provider from branch 'master'
to 8fd9860fce0f72ad93098a04fe6a9f66c7b27296
- Merge "Drop workaround for Python < 2.7.4"
- Drop workaround for Python < 2.7.4
Also setup.py is no longer managed by the global tool.
Zuul [Tue, 23 Dec 2025 10:54:29 +0000 (10:54 +0000)]
Update git submodules
* Update openstack-ansible from branch 'master'
to 48c523645fd4d40e2349100a091c3d4d2101dead
- Merge "Ensure bash-completion also search for .yaml"
- Ensure bash-completion also search for .yaml
Auto-complete ignores playbooks having .yaml
extension, which might be a good chunk of third-party playbooks.
Zuul [Tue, 23 Dec 2025 09:09:07 +0000 (09:09 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 54796bb4b06f6f102779318b8e784a1182b24a65
- Merge "Fixed kolla_externally_managed_cert behaviour"
- Fixed kolla_externally_managed_cert behaviour
With ``kolla_externally_managed_cert`` enabled, certificates and keys
shouldn't be managed by kolla, but ProxySQL is copied over currently.
This change fixes that.
Zuul [Tue, 23 Dec 2025 09:08:56 +0000 (09:08 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 4da849def43c5763ec48886d94f33b4fe1af7948
- Merge "Add support for libvirt swtpm (vTPM) configuration."
- Add support for libvirt swtpm (vTPM) configuration.
Since both nova-compute and nova-libvirt Kolla images have swtpm
packages installed [1], it is possible to configure vTPM for libvirt
instances. This patch adds support for such configuration in
kolla-ansible.
Zuul [Tue, 23 Dec 2025 02:39:43 +0000 (02:39 +0000)]
Update git submodules
* Update openstack-helm from branch 'master'
to 65cabec5a8b4526335b102e9227316e044ba45f3
- Merge "Add overrides and test jobs for UV images"
- Add overrides and test jobs for UV images
We build two sets of images in Loci.
1) For legacy images we first build so called
requirements image that contains all the necessary
wheels and then we build all other project images
using these wheels from the requirements image.
2) Also recently we added another set of images
that we build using the two stage Dockerfile.
On the first stage we build venv using UV and
then we just copy the venv as is to the project
image.
We are going to support two sets of images for two
release cycles before we decide how to continue.
Change-Id: Id6412055f742990f08aa1befa7a41f1670414d4c Signed-off-by: Vladimir Kozhukalov <kozhukalov@gmail.com>
Zuul [Tue, 23 Dec 2025 02:14:09 +0000 (02:14 +0000)]
Update git submodules
* Update masakari-monitors from branch 'master'
to df7ed7b178c811a761bf9c793f928f9ed30ebd90
- Merge "Host-Monitor kubernetes_check host-status missing"
- Host-Monitor kubernetes_check host-status missing
Payload data from masakari-host-monitor process was missing the
host_status parameter to allow the masakari-engine to initiate
the recovery workflow message to the API server. Previous payload
would be ignored by masakari-engine workflow driver.
Zuul [Mon, 22 Dec 2025 21:02:59 +0000 (21:02 +0000)]
Update git submodules
* Update ironic from branch 'master'
to 6a18c386a6830fb6c3abffaa2cf5b577090ed15b
- Merge "Use oslo.config to split [console] port_range"
- Use oslo.config to split [console] port_range
Zuul [Mon, 22 Dec 2025 16:30:06 +0000 (16:30 +0000)]
Update git submodules
* Update openstacksdk from branch 'master'
to 12f9b903de8804494bb93f772350a9d4a429c8ef
- Merge "Add secure hash validation for image downloads"
- Add secure hash validation for image downloads
Add support for validating image downloads using secure hash algorithms
(SHA256, SHA512, etc.) via the ``os_hash_algo`` and ``os_hash_value``
metadata fields. This addresses the limitation of MD5-only validation
and improves data integrity verification.
Zuul [Mon, 22 Dec 2025 15:49:58 +0000 (15:49 +0000)]
Update git submodules
* Update ironic-python-agent-builder from branch 'master'
to c82015b70f582526071f1bc0e598ef4da3ffcb75
- Merge "Make multiple integration jobs voting"
- Make multiple integration jobs voting
A risk exists that we just sort of ingore an integration job
failure with an IPA change which might be a legitimate issue.
The key is that we really need to just fix the jobs when they
fail, and not leave jobs in non-voting status for long periods
of times.
So this, in order to help head off merging breaking changes
which might break a non-voting job, elevates those non-voting
jobs to voting.
Change-Id: I77249daf4bebeaead25ea87757de38b272e6ac7a Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com>
pip 23.1 removed the "setup.py install" fallback for projects
that do not have pyproject.toml and now uses a pyproject.toml
which is vendored in pip.
To address that, this change adds the minimal pyproject.toml
to enable pbr to be properly used to build editable wheels.
See https://pip.pypa.io/en/stable/news/#v23-1
and https://github.com/pypa/pip/issues/8368 for more
details on the removal of the fallback support.
Co-Authored-By: Sean Mooney <work@seanmooney.info>
Change-Id: I08e1ff67febd4cf518e8a8c75621224bbd816ab0 Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
Zuul [Mon, 22 Dec 2025 15:13:13 +0000 (15:13 +0000)]
Update git submodules
* Update openstack-ansible from branch 'master'
to 4c6664210068b66cb32268f65b5f20eaf7cadd64
- Merge "Do not define openstack_pki_san in integrated repo"
- Do not define openstack_pki_san in integrated repo
Explicit definition of `openstack_pki_san` in integrated repository is
reduntant because all service roles using PKI role already have a
`default()` filter applied that matches the value of `openstack_pki_san`
in integrated repo.
It's not necessary to define `openstack_pki_san` in integrated repo.
This patch removes it. However, it still can be used by the users to
override cert SAN globally for all openstack services.
Zuul [Mon, 22 Dec 2025 15:01:31 +0000 (15:01 +0000)]
Update git submodules
* Update python-masakariclient from branch 'master'
to fff1bc7376ff1e5c1ee7dd3aeb58b6896541530a
- Merge "add pyproject.toml to support pip 23.1"
- add pyproject.toml to support pip 23.1
pip 23.1 removed the "setup.py install" fallback for projects
that do not have pyproject.toml and now uses a pyproject.toml
which is vendored in pip.
To address that, this change adds the minimal pyproject.toml
to enable pbr to be properly used to build editable wheels.
See https://pip.pypa.io/en/stable/news/#v23-1
and https://github.com/pypa/pip/issues/8368 for more
details on the removal of the fallback support.
Co-Authored-By: Sean Mooney <work@seanmooney.info>
Change-Id: I16cd156ea443041b93aeffa8364a48fa4bcc62be Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
Zuul [Mon, 22 Dec 2025 14:33:47 +0000 (14:33 +0000)]
Update git submodules
* Update cloudkitty from branch 'master'
to f524e9261f0da9b1a48a210a53b63c27a68b9374
- Merge "Check that the limit is never over 5000 in Loki queries"
- Check that the limit is never over 5000 in Loki queries
Loki has hard limit of 5000 rows it can return at once, and if the user
tries to bring more, it will just deny the request. Instead of
delegating the request denial to Loki, we add the proper checks before
the queries are done, so we can properly inform the user that more than
5000 rows is not acceptable.
Change-Id: I9b98bb7d0c51724b1a63e2ecbf01ffe4a4f1c8e6 Signed-off-by: Juan Larriba <jlarriba@redhat.com>
Zuul [Mon, 22 Dec 2025 12:31:53 +0000 (12:31 +0000)]
Update git submodules
* Update python-masakariclient from branch 'master'
to 916f5dcd332ff6e954ea38fbfecffb2d3028922b
- Merge "Remove unnecessary hacking from test reqs"
- Remove unnecessary hacking from test reqs
It is used in only pep8 target which does not actually use
the requirements files.
Also remove the outdated note about pip's dependency resolver and adds
the note about lower bounds (which are no longer tested).
Zuul [Mon, 22 Dec 2025 12:26:33 +0000 (12:26 +0000)]
Update git submodules
* Update python-masakariclient from branch 'master'
to 1d0a9ba6dcfbb9d140c141b5862e53825e17510f
- Merge "Remove support for Python 3.8 and 3.9"
- Remove support for Python 3.8 and 3.9
These two old versions are no longer tested due to their EOL.
Zuul [Mon, 22 Dec 2025 12:17:45 +0000 (12:17 +0000)]
Update git submodules
* Update ironic-python-agent-builder from branch 'master'
to 40b946c1c10fe86b8f6f5b321f6329e75b9970b3
- Merge "Lockout configdrive reads on network boots"
- Lockout configdrive reads on network boots
We discovered it was possible, when the agent was network
booted, due to the model of "don't break existing users"
coding, that it was possible for the script to consider
a standing config drive as valid. This could result in
configuration getting loaded from the configuration drive
which is a security issue, but only for the networking portion
of the configuration due to the use of glean instead of
cloud-init.
We since reverted out the default to have simple-init enabled,
and this change fixes the load logic so we prevent these possible
cases considering that ironic deployments using virtual media
should now all be on code bases with the publisher ID value set.
Change-Id: If2a63fd16d8ae8e71b61b39f7c0c87ff45a81cf0 Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com>
Zuul [Sat, 20 Dec 2025 08:01:02 +0000 (08:01 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 07b261bb86381f0c736289f31593d542e6238310
- Merge "Add support for Debian Trixie (13)"
- Add support for Debian Trixie (13)
Remove /etc/timezone bind mount since Debian does not provide
that file anymore.
Zuul [Fri, 19 Dec 2025 22:30:31 +0000 (22:30 +0000)]
Update git submodules
* Update openstack-ansible-plugins from branch 'master'
to e1cc9bc28e6b2968af6a517bd680f1d5d7288029
- Merge "Check for a supported Operating System - add information about AlmaLinux"
- Check for a supported Operating System - add information about AlmaLinux
Change-Id: I797c4cf0ffe88154b808a26fafd257c0e5bff016 Signed-off-by: Ivan Anfimov <lazekteam@gmail.com>
Zuul [Fri, 19 Dec 2025 22:20:08 +0000 (22:20 +0000)]
Update git submodules
* Update cinder from branch 'master'
to 2bdc892a023d2bbdf8e66e0e9645a86b776fcf61
- Merge "NFS driver: Fix driver fails to verify virtual size for Glance with Cinder/NFS"
- NFS driver: Fix driver fails to verify virtual size for Glance with Cinder/NFS
Glance images stored in Cinder with NFS as backend are sized in
the Cinder database to match the data size of the Image-volume
instead of the virtual_size. This prevents storage
resource to be unnecessarily allocated, but may also results into
errors in operations that requires checking for volume size
consistency.
Such checks aims to prevent users from extending NFS volumes
from within the virtual machine and outside of Cinder scope, by
comparing the virtual size of the NFS image with its size stored
in Cinder's database.
This patch changes how volume size is verified to fail only when
a volume virtual size has been extended in size instead of trying
to verify the exact size in bytes.
Closes-Bug: #2073146
Change-Id: I5c2216b72dda6bb3316ef30b352a6a8efe3a0429 Signed-off-by: Fernando Ferraz Silva <fesilva@redhat.com>
Zuul [Fri, 19 Dec 2025 22:19:52 +0000 (22:19 +0000)]
Update git submodules
* Update cinder from branch 'master'
to bb3895590cc58e238a6a9a67d8829484aded04f5
- Merge "NFS driver: Use database format in initialize_connection"
- NFS driver: Use database format in initialize_connection
The `qemu_img_info` operation in initialize_connection may not be
able to determine whether the volume format is `raw` or `qcow2`,
when an inner qcow2 image is writen into a volume. This issue
commonly happens when Glance is configured with Cinder/NFS as
image store.
This patch explicitily tells `qemu_img_info` operation to use
the database format stored in admin_metadata `format` field instead
of trying a autodiscover, to ensure volume metadata such as the
virtual_size will be gathered correctly.
Partial-Bug: #2073146
Change-Id: I28df6ddfa4f62b440e01918958352ab186234f87 Signed-off-by: Fernando Ferraz Silva <fesilva@redhat.com>
Zuul [Fri, 19 Dec 2025 20:39:25 +0000 (20:39 +0000)]
Update git submodules
* Update openstack-helm from branch 'master'
to bc23f506ac88880c4db46dd7e154efa7a58a00b7
- Merge "[ceph-rook] Update Rook to version 1.18.8"
- [ceph-rook] Update Rook to version 1.18.8
Update Rook to version 1.18.8 in the deployment tools.
Change-Id: Ie83ccb22bb6306e8d22faea3eb97622d09bfe4ff Signed-off-by: Stephen Taylor <stephen.taylor.1@att.com>
Zuul [Fri, 19 Dec 2025 20:06:24 +0000 (20:06 +0000)]
Update git submodules
* Update openstack-helm from branch 'master'
to e61f0342c0c0e1903f7f0d96afd961a3f5812070
- Merge "ironic: drop the retrieve-cleaning-network init container"
- ironic: drop the retrieve-cleaning-network init container
It was only setting a deprecated option and the script it ran gave less
feedback to the user than the built in check inside of Ironic. With the
future of Ironic standalone networking this option will make even less
sense so allow the default behavior of looking up the name in Ironic.
Zuul [Fri, 19 Dec 2025 19:38:24 +0000 (19:38 +0000)]
Update git submodules
* Update python-openstackclient from branch 'master'
to d1a0ede7dbf84b66bd4620857683f81808cff8a5
- Merge "zuul: Make openstackclient-check-plugins voting"
- zuul: Make openstackclient-check-plugins voting
This will ensure we do not forget to ignore a module when migrating
plugins in-tree.
Change-Id: Id4dd657746f7c5f8ebf5ef55964593123303b996 Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
Depends-on: https://review.opendev.org/c/openstack/openstackclient/+/970618
Zuul [Fri, 19 Dec 2025 19:32:20 +0000 (19:32 +0000)]
Update git submodules
* Update manila-tempest-plugin from branch 'master'
to 93319df40995334ec44062e307cc45457088f8e4
- Merge "Drop python 3.9 and support python 3.13"
- Drop python 3.9 and support python 3.13
Due to requirements repo dropped the constraints for
python3.9[1], Tempest needs to drop the python 3.9
support[2]. Because Tempest master cannot support
py3.9 anymore, it needs to be dropped from tempest
plugins also.
Also, add python 3.13 support which is tested as mandatory
in 2026.2 cycle.
The NetApp driver records info [original_name] and
[original_junction_path] when a share is managed.This data
is not removed during share deletion and is stored in
private_storage and never cleaned up
This change ensures that when a NetApp share is managed, the
associated private storage entry is deleted via
private_storage.delete(share['id'])
If the share does not exist, no deletion of private storage is done
so that diagnosis is possible if necessary.
private_storage.delete(share['id]) also removed from
_update_create_from_snapshot_status as it now introduces redundancy for
the deletion there, since the _delete_share function is already being
called before that.
Test Plan:
test_delete_share_clears_private_storage
- Verifies private storage is deleted when the share exists.
This is when _share_exists() is True
test_delete_share_nonexistent_does_not_delete_private_storage
- Verifies that when _share_exixts() returns False,
private_storage.delete is not called, preserving any metadata.
Closes-Bug: #2084666
Change-Id: I0b3613e1ea1f54471b1f9cc73fec0761f3639b26 Signed-off-by: Rose Kimondo <rosewairimu1@gmail.com>
Zuul [Fri, 19 Dec 2025 18:01:29 +0000 (18:01 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 3439c6b8e812550cf9afba9b7a35878dd1697935
- Merge "tempest: Rework regex to a list"
- tempest: Rework regex to a list
Change-Id: I7505f8feeb85f606df92a20bf4a4700d5ea36a51 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Zuul [Fri, 19 Dec 2025 17:26:35 +0000 (17:26 +0000)]
Update git submodules
* Update cinder from branch 'master'
to ffc441fe5531a27bbc72d9eacb40c3d255f70102
- Merge "NFS driver: Set volume format for snapshot operations"
- NFS driver: Set volume format for snapshot operations
On snapshot operations, the NFS driver does not properly update
the volume format in admin_metadata to correspond to the format
of the active snaphot, as in the case of offline snapshot
creation, in which the driver does update the format to match
the newly created qcow2 snapshot, resulting in the resizing
operation to fail due to the format mismatch in the
`qemu-img resize` command.
This patch fixes such behavior by updating the volume format
in volume_admin_metadata whenever the active snapshot is replaced.
Change-Id: I7cacdd9b78820d272058e9c35f926e23b4c87ba4 Signed-off-by: Fernando Ferraz Silva <fesilva@redhat.com>
Zuul [Fri, 19 Dec 2025 16:51:37 +0000 (16:51 +0000)]
Update git submodules
* Update ironic from branch 'master'
to 534e9ff6b833a006e3995cf8d5f7d80d1587c681
- Merge "Support filtering portgroups by shard"
- Support filtering portgroups by shard
This was somehow missed during initial implementation. Adding ability to
filter portgroup by shard. This was mostly vibe coded with claude, with
me interupting to suggest better implementations when it did something
silly. Tested manually by a human using fake drivers :).
Closes-bug: #2134566 Generated-by: Claude code (claude) Signed-off-by: Jay Faulkner <jay@jvf.cc>
Change-Id: Ic67c02763c2d832f616dc4526e4be891d639b976
Zuul [Fri, 19 Dec 2025 16:06:55 +0000 (16:06 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to d41e90abc783788168884abb273c63333ae65152
- Merge "haproxy: skip redundant backend configuration for memcached"
- haproxy: skip redundant backend configuration for memcached
Previously, Kolla-Ansible generated unnecessary HAProxy backend
configuration entries for the memcached service. These backend entries
were redundant since memcached is not accessed through HAProxy by any
OpenStack service. This patch removes the redundant configuration,
keeping the HAProxy configuration minimal and consistent with actual
service usage.
Closes-Bug: #2130641
Change-Id: I62f40d48a7f2d58b3a3b9ac6d5827a721e02c545 Signed-off-by: Piotr Milewski <vurmil@gmail.com>
Zuul [Fri, 19 Dec 2025 16:06:49 +0000 (16:06 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to b00675bec03c2e4ec5473306a5040a17d33356c0
- Merge "certificates: rework to use Ansible modules"
- certificates: rework to use Ansible modules
Add keyCertSign and digitalSignature key_usage required by Python 3.13 [1]
The member_create, member_delete and handle_member_dvr helper
methods expect lists but _ensure_loadbalancer was passing single
dictionaries, causing sync operations to fail.
This patch fixes regression introduced when [1] was merged
Zuul [Fri, 19 Dec 2025 15:11:34 +0000 (15:11 +0000)]
Update git submodules
* Update cinder from branch 'master'
to 616f134ba98adbd46277334b2d6361a522662f77
- Merge "Doc: Improve docs for Glance Cinder Store"
- Doc: Improve docs for Glance Cinder Store
This patch improves the documentation for Cinder as a backend for
Glance by including:
1. Configuration changes with the New location API
2. Details about how the optimizations are performed vs the generic path
3. Pre-conditions for the optimizations to work
4. Recommendations regarding the internal/service project while uploading volume
Change-Id: I6f3035178b2b43145b34fbeb14bac22d0b52bc27 Signed-off-by: Rajat Dhasmana <rajatdhasmana@gmail.com>
Zuul [Fri, 19 Dec 2025 15:01:17 +0000 (15:01 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 62a27c792dc878c9367b5db2d911318507877134
- Merge "ironic: Make inspector related volume removal optional"
- ironic: Make inspector related volume removal optional
Since we need to keep the upgrade steps for 2025.1->2026.1
and 2025.2->2026.1 upgrade currently fails on missing
inspector-related container volume - we need to adapt
the logic to check if that volume migration and removal
needs to be done.
Change-Id: If15a43733117ff48f107614589347b992ed1baa4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
$ git log --oneline --no-merges 3.22.0..67854d12 67854d12 Add "both" direction to tap mirror definition 28a37284 Fix tap_mirror extension name in KNOWN_EXTENSIONS 62a07e9a Adding new base class 'BaseOvnDbSynchronizer' 15d8373e Service role is now considered as the one who can change project_id b5272aab Deprecate "is_advsvc" attribute in the Context object 39527e93 Rehome PortHardwareOffloadTypeEnumField 20ab081c Fix assertion in unit test b7dd86ea Add information to network ip availabilities dde9ccfe Add "can_set_project_id" attribute to the context object b116c74e Replace deprecated warn_on_missing_entrypoint 2feaec5a Fix documentation for maximum tag length 7f4285b9 Remove ACCESS_READONLY RBAC constant. ba498831 reno: Update master for unmaintained/2024.1 7d8fcafa Start running pylint on the test tree 7b3be70b Fix duplicate registration for resource_extend dbf206fe Add the localhost IPv4 and IPv6 addresses constant
Signed-off-by: Rodolfo Alonso Hernandez <ralonsoh@redhat.com>
Change-Id: Ic2d13f300264cbd3dac6fbd426b917ae44852b78
Zuul [Fri, 19 Dec 2025 13:36:14 +0000 (13:36 +0000)]
Update git submodules
* Update releases from branch 'master'
to 51ca1cf9dac1282aeb63fdb94baaa05a4a76086a
- Merge "Move unmaintained/wallaby to EOL"
- Move unmaintained/wallaby to EOL
As announced on mailing list [1], this patch moves unmaintained/wallaby
to End of Life.
Zuul [Fri, 19 Dec 2025 13:33:13 +0000 (13:33 +0000)]
Update git submodules
* Update releases from branch 'master'
to 51a6b59706eb902eef38d81a1b126d43440d7318
- Merge "Move unmaintained/victoria to EOL"
- Move unmaintained/victoria to EOL
As announced on mailing list [1], this patch moves
unmaintained/victoria to End of Life.
The file should be owned by the user(STACK_USER) to run the process.
Note that STACK_USER may not match the current user in case stack.sh is
run by root.
Also we should not assume that the group name always matches the user
name.
Provider networks (VLANs and flat) with localnet ports cause
datapath confusion when Load Balancers are associated to them.
When traffic arrives via Floating IPs, this results in SYN
packet drops and high latency issues.
This patch adds detection of localnet ports in logical switches
and skips LB association when a provider network is detected.
This prevents the datapath issues while still allowing normal
LB operation on tenant networks.
Closes-Bug: #2130211
Change-Id: Ie86d088514bfc491f58069c2f4987672a32b8314 Signed-off-by: Fernando Royo <froyo@redhat.com>
Zuul [Fri, 19 Dec 2025 04:15:12 +0000 (04:15 +0000)]
Update git submodules
* Update swift from branch 'master'
to 8bf6e090f4753f7e9d1df1ef2bea46aad9c6e088
- Merge "test_diskfile.py: fix failing test if O_TMPFILE unsupported"
- test_diskfile.py: fix failing test if O_TMPFILE unsupported
Previously test_commit_overwritten_before_ppi_rename would fail when
O_TMPFILE is not supported (e.g macos) because an extra, unexpected,
rename call is made to rename a temporary file to a data file.
Change-Id: I30f4dcee50e30e3c501b302e2242dc1abe9b6b62 Signed-off-by: Alistair Coles <alistairncoles@gmail.com>
Zuul [Fri, 19 Dec 2025 01:26:53 +0000 (01:26 +0000)]
Update git submodules
* Update tempest from branch 'master'
to 0a40adcd71db3e057d9da0ddadb01660dfc8b86e
- Merge "Use reader role in test_list_servers_negative"
- Use reader role in test_list_servers_negative
Update test_list_servers_negative.py to use the reader role for all
GET requests (list operations) following the pattern in
test_list_server_filters.py. This ensures proper RBAC testing by
using the project_reader credentials for read operations while
maintaining the primary credentials for write operations.
Partial-Implements: blueprint test-nova-with-srbac-defaults
Change-Id: I4be4395a538c59b3faca4abbf5baaf546accbd00 Signed-off-by: Jason Paroly <jparoly@redhat.com>
As discussed during the PTG, VTEP support for OVN is being
removed in order to eliminate confusion and also the Ironic
community is working on a suitable solution to these problems
which integrates with Neutron.
Closes-Bug: 2106460
Change-Id: I4147371c28cf786edb6f29ea83e3b7103f268347 Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com> Signed-off-by: Jay Faulkner <jay@jvf.cc>
In order to support the deployment of OCI images utilizing bifrost,
we also need to explicitly support basic authentication.
This has been extended to support inclusion of the authentication
credentials into the pull secret string, and fallback on the deploy
interface settings for static configuration. While this will likely
never be perfect, it is at least a forward step to better supporting
a variety of use cases.
Additionally, doing some of this highlighted some extraneous guard
rail style checks which exist elsewhere in the overall image handling
flow. A exeception check was added to prevent tag based deployments
from failing because the existing code structure of the guard rail
checks cannot gain the context around basic auth.
In part becasue the check directly uses the image_source as well,
as opposed to any other state data which is presently available
in deploy_utils when the image information is identified.
That situation highlights why additional fixes are needed,
but bug 2133885 was opened for that separately.
Claude also helped me out with the unit tests.
Assisted-By: Claude Code - Claude Sonnet 4.5
Change-Id: I13f4d5cd8b98ad88e7b6088c79c7b014b6461668 Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com>
Zuul [Thu, 18 Dec 2025 22:39:53 +0000 (22:39 +0000)]
Update git submodules
* Update nova from branch 'master'
to 4b71dab239b4f82d50297ec5bd887c207b43b7ea
- Merge "Remove tpool_execute as it is unused"
- Remove tpool_execute as it is unused
The previous commits removed all the users for nova.utils.tpool_execute
so this patch removes that utility.
This also allows us to inline the _pass_context helper as now it is only
used by spawn_on.
Zuul [Thu, 18 Dec 2025 21:01:37 +0000 (21:01 +0000)]
Update git submodules
* Update ironic from branch 'master'
to d069f2a886f5be30e987ce0f668170eec6383a13
- Merge "fix redfish inspect system product name"
- fix redfish inspect system product name
The intention of this code is to read the system product name which is
stored in the model field per the Redfish spec and not in the name field
which will always store the name of the object we are working with. This
results in the value always being 'System'.
Zuul [Thu, 18 Dec 2025 20:37:46 +0000 (20:37 +0000)]
Update git submodules
* Update horizon from branch 'master'
to 7ff84aac8f2632e7c4691ef5d3b4040e6b0046cc
- Merge "feat(dashboard): add microversion support for Nova live migration"
- feat(dashboard): add microversion support for Nova live migration
- Include "live_migrate" in MICROVERSION_FEATURES with minimum version 2.30.
- Update `server_live_migrate` to use the appropriate microversion when calling
Nova's live_migrate API.
Change-Id: Ief547b55f90ff2bfd9f97ea859b4511c631676ef
Closes-Bug: 1788367 Signed-off-by: Dong Ma <dong.ma@vexxhost.com>
Zuul [Thu, 18 Dec 2025 19:34:56 +0000 (19:34 +0000)]
Update git submodules
* Update watcher-specs from branch 'master'
to ea5d9742bd929399bc3dc11839c835cf0d73b711
- Merge "Add specification for migrating Watcher to OpenStackSDK"
- Add specification for migrating Watcher to OpenStackSDK
This specification proposes a phased migration from individual
Python client libraries to OpenStackSDK for inter-service
communication. The individual client libraries (python-novaclient,
python-cinderclient, etc.) are deprecated and scheduled for
removal from future OpenStack releases.
Phase 1 (2026.1) focuses on:
- Establishing OpenStackSDK infrastructure
- Migrating Nova client to SDK compute proxy
- Creating migration patterns for subsequent phases
Future phases will migrate remaining clients (Cinder, Keystone,
Placement, Ironic) and eventually integrate Watcher itself into
OpenStackSDK as an infra_optim service.
The neutron network interface's add_ports_to_network() function only
checked for 'pxe_boot' capability when determining PXE capability,
but iPXE is also a form of PXE booting and should be treated the
same way. This caused inconsistent behavior for boot interfaces like
'http-ipxe' that have 'ipxe_boot' capability but not 'pxe_boot'
capability.
Without this fix, iPXE boot interfaces were incorrectly treated as
non-PXE capable, causing the neutron interface to create ports for
all baremetal ports with local_link_connection info during cleaning
operations, regardless of their pxe_enabled setting.
This change adds 'pxe_boot' capability to both iPXEBoot and
iPXEHttpBoot classes, ensuring that iPXE boot interfaces are
correctly recognized as PXE-capable.
Additionally, this adds the missing pxe_boot capability check to
the remove_ports_from_network() function, which was previously
missing this logic entirely. This ensures consistent port creation
and deletion behavior, preventing orphaned neutron ports after
cleaning operations.
Change-Id: I7721f917fb723e8a4cef69e0f7be1ece0238d7ed Signed-off-by: Milan Fencik <milan.fencik@rackspace.co.uk>
Zuul [Thu, 18 Dec 2025 17:35:59 +0000 (17:35 +0000)]
Update git submodules
* Update openstack-ansible-ops from branch 'master'
to c1b95130ad7b8d96d3d8dd517aec8dfcc9d99d1f
- Merge "Update mcapi to test against latest versions"
- Update mcapi to test against latest versions
* Removes workarounds for venv support in Noble
* Updates docs
* Updates functional test image versions
* Updates CI testing versions
* Moves minimal config to main OSA repo to match latest AIO expectations
* Add minimal role to install rust/cargo and configure as required
There were libvirt disk attach / detach unit test cases that mocked
threading.Event.wait to speed up the test execution as the libvirt event
based device detach has a 20 seconds timeout.
However this mock is very wide. It effects all the threading.Event usage
during the test case. As we are switched to the native threaded backed
of oslo.service we got an LoopingCall implementation that relies on
threading.Event to signal when the call is finished. In these test cases
the wide mock broke this logic and the LoopingCall signalled "done" while
the actual call in the background was still running making that call
leaking out from the test case and therefore under the fixtures the test
case tore down after the test case finished. This caused that later the
call hit non mocked code paths like importing the real libvirt lib
instead of using our libvirt fixture causing late failures.
The fix is to remove the wide mock and instead change the detach timeout
in these test cases.
Later follow ups will check put protection in place to avoid
re-introducing this wide mock.
Abhishek Kekane [Thu, 18 Dec 2025 16:36:47 +0000 (16:36 +0000)]
Update git submodules
* Update python-openstackclient from branch 'master'
to ed2dc692ddaf0b5b7fd62d2c7e0eb03c2e4b1287
- Fix image owner change when accepting membership with --project
When using 'openstack image set --project <project> --accept <image>',
the command incorrectly changed the image owner. The --project parameter
when used with membership flags should only identify which member's
status to update, not change ownership.
Zuul [Thu, 18 Dec 2025 16:31:46 +0000 (16:31 +0000)]
Update git submodules
* Update ironic from branch 'master'
to 50aa083013a102540a2b583972549ce224b05962
- Merge "OCI: Add an option to fallback to HTTP"
- OCI: Add an option to fallback to HTTP
While working on trying to get OCI support in CI, I realized that the
default pattern setup with Bifrost was to setup a registry *without*
HTTPS.
This is different from the common practice and expectation of operational
OCI registries always utilizing HTTPS as the underlying transport mechanism.
The net result is an idea of offering the ability to "fall back" to HTTP
automatically, and make it a configuration option which needs to be
chosen by an operator.
The code pattern is such that the invocation of the client code paths
automatically identify the SSLError, and then attempt to fallback
to HTTP, while also saving the fallback on the class instance so the
additional URL generation calls for the underlying HTTP(S) client
gets an appropriate URL.
By default, this new option is disabled.
Claude helped with the tests, which was nice of it.
Assisted-By: Claude Code - Claude Sonnet 4.5
Change-Id: I3f28c8d6debe25b63ca836d488bc9fd8541b04d9 Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com>
Zuul [Thu, 18 Dec 2025 16:14:39 +0000 (16:14 +0000)]
Update git submodules
* Update kolla-ansible from branch 'master'
to 2d7728ff321f9c9a6223f906d42288fd3668f9be
- Merge "Make generation of prometheus.yml idempotent when using custom override files"
- Make generation of prometheus.yml idempotent when using custom override files
As the result from the find is not always sorted the same way, consecutive deployments would have a configuration file change, while it actually is not.
Also, diffs are really hard to interpret, when some config parts have been moved up or down.
Change-Id: I6f724de6ec46e0691639f0a64de5af9e248a27ff
Resolves-bug: #2126635 Signed-off-by: Michel Nederlof <michel.nederlof@nl.team.blue>
projects / 0xmirror / openstack.git / log