Skip to content

Synchronise 2025.1 with upstream#855

Merged
Alex-Welsh merged 10 commits intostackhpc/2025.1from
upstream/2025.1-2026-03-23
Mar 23, 2026
Merged

Synchronise 2025.1 with upstream#855
Alex-Welsh merged 10 commits intostackhpc/2025.1from
upstream/2025.1-2026-03-23

Conversation

@github-actions
Copy link
Copy Markdown

This PR contains a snapshot of 2025.1 from upstream stable/2025.1.

bbezak and others added 10 commits February 16, 2026 18:49
Ensure each relay pre-creates its own log file, fixing fluentd
permission denied errors on ovn-sb-relay-<id>.log.

Closes-Bug: #2141909

Change-Id: Icd7bbda54c0112d1aafe636df0e4219ab06d914b
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
(cherry picked from commit 142584d)
Compare ovn_sb_db_relay_<id> containers, not base ovn_sb_db_relay.
Fix relay config ownership mismatch (root vs openvswitch).

Co-Authored-By: Bertrand Lanson <bertrand.lanson@infomaniak.com>
Co-Authored-By: Doug Szumski <doug@stackhpc.com>

Closes-Bug: #2141573

Change-Id: I85420a7b2213d9a72ae3b2ef5de75bbaef04308c
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
(cherry picked from commit be29193)
When the upstream endpoint uses HTTPS, TLS errors were observed.
This fix checks if the upstream endpoint is HTTPS and ensures
TLSv1.2 and TLSv1.3 are enabled in the nginx configuration.

References:

* https://review.opendev.org/c/openstack/skyline-apiserver/+/941715

Closes-Bug: #2091935
Related-Bug: #1951437
Change-Id: I597c8f1f609580cfc8c29efbc79ada312e667441
Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
(cherry picked from commit edfe281)
Fix a scheduling issue in the multinode and all-in-one inventory files,
that would cause cyborg api and conductor service to also be scheduled
on compute nodes rather then exclusively staying on the control plane.

Closes-Bug: #2087552
Change-Id: I69d9a44db037fce42cb5a25b5688313eece15484
(cherry picked from commit 568e186)
Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
cAdvisor was listening on all interfaces, which would potentially
expose information about running containers on public networks.
Change the cAdvisor startup invocation to bind only to the internal
API interface.

Closes-Bug: #2144659
Change-Id: Ica0d5e727467988fab3d4eb532caa7226556e714
Signed-off-by: Stig Telfer <stig@stackhpc.com>
(cherry picked from commit 735f126)
The previous code used `run_once`, `delegate_to`, and `loop`, so one
host ran `kolla_container_facts` and `libvirtd --version` for every
compute host in sequence. This is slow on large deployments.

Run these checks on the compute hosts directly so Ansible can use normal
per-host concurrency.

Set `any_errors_fatal: true` on the libvirt version-check tasks so a
failure on one host fails the play.

Closes-bug: #2144664

Change-Id: Ic9564c84c0a6c1cef1f77ed115d860f819eec67b
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
(cherry picked from commit cd7e865)
@github-actions github-actions bot requested a review from a team as a code owner March 23, 2026 06:41
@github-actions github-actions bot added automated Automated action performed by GitHub Actions synchronisation labels Mar 23, 2026
@Alex-Welsh Alex-Welsh closed this Mar 23, 2026
@Alex-Welsh Alex-Welsh reopened this Mar 23, 2026
@Alex-Welsh Alex-Welsh merged commit b5288bb into stackhpc/2025.1 Mar 23, 2026
4 checks passed
@Alex-Welsh Alex-Welsh deleted the upstream/2025.1-2026-03-23 branch March 23, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated action performed by GitHub Actions synchronisation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants