stackhpc/14.0.0.0rc1.4

b50a4e0 Merge pull request #1198 from stackhpc/sync-antelope-to-caracal
97259fc Merge branch 'stackhpc/2023.1' into sync-antelope-to-caracal
b5e3554 Merge pull request #1164 from stackhpc/rocky-linux9.4-support
e5969e8 Merge pull request #1184 from stackhpc/reno-url-fixes
e8f7cdb Fix hyperlink syntax in release notes
e09e317 Merge pull request #1183 from stackhpc/2023.1-zed-merge
1323a47 Merge stackhpc/zed into stackhpc/2023.1
ec61049 Merge stackhpc/yoga into stackhpc/zed
68f518d Revert Rocky 9.3 snapshot updates
cc577cc Merge pull request #1181 from stackhpc/yoga-multinode-lvm
db315d3 Merge pull request #1178 from stackhpc/2023.1-zed-merge
9363a40 Merge pull request #1177 from stackhpc/zed-yoga-merge
3b7e2f8 ci-multinode: Further reduce LVM volumes
f16bca5 Changing LVM layout for controllers. We've been running out of space when testing upgrades in Multinode.
7c3a09f Revert "ci-multinode: Add failing refstack tests to skip list"
e4d6584 Merge stackhpc/zed into stackhpc/2023.1
735c266 Merge stackhpc/yoga into stackhpc/zed
66b75bf Merge pull request #1174 from stackhpc/yoga-vault-bits
2245821 Merge pull request #1175 from stackhpc/2023.1-cis-no-world
ef96aa2 Stop changing permissions on files on Rocky 9
cc35b09 Merge pull request #1169 from stackhpc/loadbalancer-dashboard-angular
3d6ac12 Bump stackhpc.hashicorp role to 2.5.0
ab2a532 ci-multinode: Add failing refstack tests to skip list
02d06fd Merge pull request #1173 from stackhpc/ping-alerts
97cc295 Merge pull request #1138 from stackhpc/INFRA-629
19e96f1 Merge branch 'stackhpc/2023.1' into loadbalancer-dashboard-angular
ac0f360 Make packet drop/error alerts configurable
27d0c68 Upgrade loadbalancer dashboard to move away from angular
d3e36dc Merge pull request #1171 from stackhpc/Hide-Wazuh-Secrets
4b84af2 Merge branch 'stackhpc/2023.1' into Hide-Wazuh-Secrets
76b384d Merge pull request #1170 from stackhpc/wazuh-password-update
7956e5d proper version
e4e119f remove explict names
6bfd69b fix merge conflicts
0d10560 Update password generation method.
0f01703 Changed password generation method.
65029a2 Generate Wazuh password and encrypt the file at the end.
0276fc9 Update the password generator to be neater and work with the auto encryption in another PR.
e3a6ef4 Change the way the Wazuh admin password is generated to always be valid
e57e5dc Merge pull request #1167 from stackhpc/2023.1-ceph-upgrade-docs
95fcfa5 docs: Add a page on upgrading Ceph
fd5b8ac Merge pull request #1168 from stackhpc/fix-amphora-build-script
8a5e333 Fix falsy in octavia-amphora-image-build.yml
8e0f2f2 Reverting Ubuntu updates
35b903c Merge pull request #1165 from stackhpc/2023.1_shrinked_multinode
bc9da2a Merge pull request #1166 from stackhpc/documentation_update
bc4ba00 Clarifying from where to run the OFED script from.
49c8eaf Fixing title underline.
92a4c6d Removing kolla-tags, no longer available in 2023.1.
531a1c8 Updating docs. Build should be done on overcloud hosts as seed is pointing to internet repositories.
3413960 Changing LVM layout for controllers. We've been running out of space when testing upgrades in Multinode.
2a09fd4 Re-adding ubuntu-jammy container overrides.
37d3b0b Added release notes.
bcf467a Updating kolla container tags
77172be Adding CVE-2024-27280 to list of allowed-vulnerabilities in Trivy
7cb7751 Updating to RL9.4
addefc2 docs: Rename upgrading page
d102d18 Merge pull request #1163 from stackhpc/cis-docs
a671306 Merge pull request #1162 from stackhpc/2023.1-fix-rl-upgrade
84033d0 Reference CIS hardening as a security baseline
1df10c3 Merge pull request #501 from stackhpc/feature/yoga/redfish-exporter
55b3443 CI: Increase upgrade job volume size to 55GB
3aa6637 Merge pull request #1161 from stackhpc/ubuntu-jammy-fixes
bac0dc7 Add release note for Redfish exporter
c252097 Merge branch 'stackhpc/2023.1' into feature/yoga/redfish-exporter
7511f66 Minimum 120s scrape interval for Redfish exporter
033a7a9 Only enable Apt CVE-2024-6387 repo on Jammy hosts
ce12cc0 Make reboot timeout configurable in Ubuntu Jammy upgrade
bde1427 Remove Kolla Ansible docker repo file on Jammy upgrade
d6b1b3a Merge pull request #1104 from stackhpc/feature/2023.1/cis
a2c1d8e Merge pull request #1158 from stackhpc/sync-zed-2023.1
3763af7 Update docs for group_vars change of location
70fad7b Move CIS group_vars to cis-hardening group
3346b3e Merge branch 'stackhpc/2023.1' into feature/2023.1/cis
0d1dfe2 Stop changing permissions on files (#1119)
6a5920c Disables password expiration and inactivity policies (#1106)
02a1c66 Merge pull request #1157 from stackhpc/fix-docker-yoga-package
771b736 Split Ubuntu Docker CE package into Focal/Jammy
d63623b Merge pull request #1159 from stackhpc/reno-fix-zed
5140e56 Merge pull request #1160 from stackhpc/reno-fix-yoga
23b0771 Correct cve-2024-6387 reno
ac221ad Correct cve-2024-6387 reno
2d0fcf6 Correct cve-2024-6387 reno
3dee8f7 Merge branch 'stackhpc/zed' into sync-zed-2023.1
90ead6b Merge pull request #1156 from stackhpc/sync-yoga-zed
417fb35 Merge branch 'stackhpc/yoga' into sync-yoga-zed
40cf24a Merge pull request #1147 from stackhpc/2023.1-cve-2024-6387
85ef912 CVE-2024-6387 use custom apt repo
d21fbb8 Merge pull request #1121 from stackhpc/cis/2023.1/ipv6
6fccd86 Merge pull request #1152 from stackhpc/zed-cve-2024-32498
425a0ac Only run configure-aio-resources again on upgrade
bd622dd zed: Fix CVE-2024-32498
b3fd63a zed: Build Glance from StackHPC fork
8530b24 Merge pull request #1155 from stackhpc/2023.1-zed-merge
8beaadd Merge pull request #1154 from stackhpc/zed-yoga-merge
c184be5 Merge stackhpc/zed into stackhpc/2023.1
8e1ecc0 Revert "yoga: Build Cinder and Glance from StackHPC forks"
9ddf39a Merge stackhpc/yoga into stackhpc/zed
a30ef85 Merge pull request #1153 from stackhpc/yoga-build-condition
06f8ba5 Fix failure condition for container image builds when all images are dirty (again)
d21a3ae Merge pull request #1151 from stackhpc/yoga-build-condition
43d7323 CI: Fix failure condition for container image builds when all images are dirty
6308f6c Ensure we have an IP on breth1
189da89 Merge pull request #1148 from stackhpc/2023.1-tempest-docs
10cca92 Add cis tag
1f7d8d7 Merge pull request #1139 from stackhpc/yoga-cve-2024-32498
36e485e docs: Use host networking for building a kayobe image for tempest
4558162 docs: Fix dnf config-manager command
5a97741 Merge pull request #1146 from stackhpc/yoga-cve-2024-6409
4bfa617 Add note about needing to reboot
ee35591 Update name of variable
754282b Merge pull request #1140 from stackhpc/fluentd-buffer
2ceb95d Update security-common for OpenSSH CVE-2024-6409
4c7b7c9 Merge pull request #1145 from stackhpc/cve-2024-6409
4550dc9 Update security-common for OpenSSH CVE-2024-6409
22dbab3 Merge pull request #1141 from stackhpc/opensearch-dashboards-blackbox-fix
1eac468 Merge branch 'stackhpc/yoga' into yoga-cve-2024-32498
c737e57 Merge pull request #1142 from stackhpc/fix-sql
f690c1e Merge pull request #1143 from stackhpc/yoga-cve-2024-ssh
8ac9a45 Merge branch 'stackhpc/2023.1' into opensearch-dashboards-blackbox-fix
d78fe65 fix blackbox exporter config for opensearch dashboards
56e4175 Merge pull request #1123 from stackhpc/pulp-auth-proxy-fixes
905f487 Restrict security-common to OpenSSH packages
b9af1ad Add Rocky 9 SIG Security Common repo
e5a6d23 Fix SQL query to enable updating trusts
bbe240a Fix fluentd getting 413 errors from OpenSearch
dc6e023 Merge pull request #1048 from stackhpc/fluentd-alerts
1e7527e yoga: Build Cinder and Glance from StackHPC forks
329a943 Add alert when fluentd queue buffers grow too large
ac8d884 Merge branch 'stackhpc/2023.1' into feature/2023.1/cis
d0ad042 Merge pull request #1134 from stackhpc/security-common-openssh
91db1ae Merge pull request #1112 from stackhpc/bugfix/amphora
767ce13 Restrict security-common to OpenSSH packages
a8475a0 Merge pull request #1127 from stackhpc/rocky9-sig-security
4282971 Merge pull request #1115 from stackhpc/security/CVE-2024-36039
15f9e46 Add Rocky 9 SIG Security Common repo
122a5f1 CI: Increase volume size to 40GB
4c47daf Merge pull request #1131 from stackhpc/zed-backport-upgrade-disk
c4496fd CI: Increase aio volume size to 50GB in upgrade jobs
1e00166 Merge pull request #1130 from stackhpc/2023.1-zed-merge
9daad4d Merge pull request #1129 from stackhpc/zed-yoga-merge
2b191ab Merge stackhpc/zed into stackhpc/2023.1
f097e0c Merge stackhpc/yoga into stackhpc/zed
e829797 Merge pull request #1128 from stackhpc/keystone_admin_note
0c07da3 Merge pull request #1080 from stackhpc/fail-kolla-image-build-when-critical-cve
5ff3894 Add a note on the Keystone admin endpoint for upgrading
9e79b8f Bump Kolla images for CVE-2024-36039
928f96c Merge pull request #1124 from stackhpc/yoga-bumps
2e40537 Merge pull request #1114 from stackhpc/2023.1-bumps
d840821 CI: Reorder growroot after minimal host configure on CentOS Stream 8
b6394b0 Revert "Remove CentOS AIO CI tests"
36abb41 Fix CVE-2024-32498
dd68ebe Fix CVE-2024-32498
f20d6c6 Merge pull request #1126 from stackhpc/yoga-fix-cs8-builds
9be0f1e Merge pull request #1125 from stackhpc/doc-link-fix
3683d2e Fix CentOS Stream 8 container image builds
36596aa docs: fix link
84e7994 Merge pull request #1028 from stackhpc/generic-blackbox
51ac287 Merge pull request #1069 from stackhpc/conf/INFRA-629
3a6d2c2 Merge pull request #1120 from stackhpc/infra629-pt3
f9a9586 Merge pull request #1068 from stackhpc/bugfix/INFRA-629-2
35db133 Merge branch 'stackhpc/2023.1' into bugfix/INFRA-629-2
bc5d90b Do not disable IPV6 by default
c838db7 Update fluentd dashboard to deprecate angular
44dad2b Remove '-preview' from version
e3ade14 Merge pull request #1040 from stackhpc/ceph-dashboard-osd-usage
785eb88 Whitespace fix
a794842 Merge pull request #989 from stackhpc/trivy-allow-lists
42d2bf4 Merge pull request #1118 from stackhpc/2023.1-inc-aio-upgrade-disk
26990d9 Merge pull request #1117 from stackhpc/2023.1-diagnostics
ff4e493 Only install epel-release if not using custom repos
34f4124 Move precheck to the top
699769c Add workaround for rc: -13 (#1108)
8ed7e8a Remove CVE-2024-36039 from whitelist
344e7fb Merge pull request #1116 from stackhpc/docs/amphora
006931e CI: Increase aio volume size to 50GB in upgrade jobs
834110b CI: Collect diagnostic information at end of aio jobs
03bf7f0 Add diagnostics.yml playbook
36dc6d1 Add diagnostics.sh
d18dbe4 Merge pull request #1092 from stackhpc/2023.1-ceph-docs
7dbec39 Merge pull request #1074 from stackhpc/stackhpc-openstack-tests
ff5d320 Refer to internal docs for building amphora images
68e992c Further fixups for register playbook
915658a Merge pull request #1113 from stackhpc/2023.1-builder-aio-docs-refresh
1086e6f docs: Various improvements to the ci-aio and ci-builder docs
df5481e Fix build and rotation of amphora images on Rocky 9
03ef6bb pulp_auth_proxy: Wait for container to become accessible
e01f23e pulp_auth_proxy: Support deploying on hosts without Docker bridge networking
08087a0 pulp_auth_proxy: Use stackhpc_release_pulp_url for Ark URL
54042e6 pulp_auth_proxy: Fix variable name in README
56879bc Merge pull request #1008 from stackhpc/jammy-issues
5cabb61 Update ubuntu-jammy.rst
3ac0eb9 Merge branch 'stackhpc/2023.1' into conf/INFRA-629
4f7e364 Fix decimals field which breaks plots
bc83165 Merge pull request #1090 from stackhpc/2023.1-vault-without-haproxy
fd2efb3 Fix hook
4ded47e Support extending default hardening group
1c3090f Enable CIS benchmark hardening in AIO and Multinode
762101f Upgrade some dashboards using Grafana 11 autoconversion
ee06232 Merge pull request #1100 from stackhpc/upgrade-amphora-image
f65f55b Various Trivy whitelist fixes
5714737 Support allow lists in Trivy
821fcd8 Merge pull request #1101 from stackhpc/remove-centos-aios
f4d30a9 Merge pull request #1098 from stackhpc/spell-check
14d7479 Merge pull request #1099 from stackhpc/fix-zero-denominator
824b1fe Correct spelling in swap space release note
a7187f9 Remove CentOS AIO CI tests
c133035 Add instruction to update Octavia amphora image
9c4c16e Fix image push condition
40a1526 Merge pull request #1095 from stackhpc/2023.1-zed-merge
9549f1b Merge pull request #1096 from stackhpc/2023.1-cis-ed25519
3a4bd49 CIS: Add a check for ed25519 SSH keys on RHEL family systems
5e821f3 Merge pull request #1094 from stackhpc/zed-yoga-merge
a826dca Merge stackhpc/zed into stackhpc/2023.1
7e96cb3 Merge stackhpc/yoga into stackhpc/zed
e035fa7 Merge pull request #1091 from stackhpc/update/magnum-capi-helm-version
3746fa9 Update Magnum image tags
595e916 multinode: Revert to default Ceph release & tag
fe09a6e docs: Add an example of Ceph messenger v2 encryption at rest
3340b41 docs: Include encryption at rest in Ceph OSD example
82bc63d docs: Minor Ceph changes
334b663 vault: Use internal FQDN for barbican -> Vault communication
738a9c5 vault: Define CA certificate path for public/admin-openrc.sh
7d362bf vault: Fix HAProxy backend healthchecks for standbys
f593df7 vault: Remove dependency on HAProxy in HCP Vault playbooks
eb94f50 Add release note
6aa9ad0 Fix typo
afb42ae Update Magnum CAPI Helm driver to version 1.0.0
bf535c6 Bump stackhpc.hashicorp role to 2.5.0
e7b97b2 Add condition to ensure swap is not zero
9a5cc9e Merge pull request #1086 from stackhpc/yoga-ci-rl9-base-image
40b00d7 CI: Fix default kayobe base image when built on push
76b181a Use Rocky Linux 9 as base for kayobe-automation
fc278ab Merge pull request #1084 from stackhpc/docker-requests
f23d52c Merge pull request #1075 from stackhpc/monitor-swap-usage
2884d3c Merge pull request #1076 from stackhpc/pulp-container-extra
a3211ef CI: Pin requests below 2.32.0
4b0dc54 Support synchronising custom container images
6c46bce docs: Fix link in secret rotation page
12815dd Add generic blackbox monitoring configuration
643aa78 Add releasenote for swap space monitoring
c507c73 Add new step to fail job on critical CVE detection
bf4ad82 Add image to list on critical CVE detection
e54a5f4 Merge pull request #1066 from stackhpc/zed-yoga-merge
b45b8b9 Merge pull request #1079 from stackhpc/os-capacity-cacert
afd30cc Merge pull request #1078 from stackhpc/aio-improvements
a0331ca OS Capacity: Support providing a CA certificate
3aab17c Add Tempest option to AIO script and improve docs
b0a6305 CI: Fix name of non-upgrade test artifacts
0375c6c Run StackHPC OpenStack tests in aio CI
b83e6c6 Remove AIO docs warning
a16a5c2 Add option to pause AIO deployment and edit config
8a64c5c Add alerts for low available swap space
6e71ff1 Update Wazuh docs (#1058)
4d63427 Merge pull request #1072 from stackhpc/q2-2024-zed-security-patch
6458834 Merge pull request #1070 from stackhpc/horizon-fork
08e9d23 Add releasenote for q2 2024 security patch for zed
249e60b Bump prometheus-msteams to fix CVE-2021-4238 and CVE-2022-40083
9c8439f Bump grafana to fix CVE-2023-49569
689e533 Bump horizon to fix CVE-2023-31047
1d2946a Merge pull request #1071 from stackhpc/q2-yoga-security-patch
645b179 Add releasenote for yoga security patch q2 2024
76c3d69 Bump prometheus-msteams to fix CVE-2022-40083 and CVE-2021-4238
67440ee Bump grafana to fix CVE-2023-49569
24bf2b8 Bump horizon to fix CVE-2023-31047
735e849 Merge pull request #1067 from stackhpc/2023.1-zed-merge
47fa179 Build Horizon from stackhpc fork
9cc9eb1 Add node exporter full dashboard
0d6f779 Merge stackhpc/zed into stackhpc/2023.1
99f9d4c Merge stackhpc/yoga into stackhpc/zed
9c07a7c Merge pull request #1018 from stackhpc/conf/INFRA-629
c1849ae Merge pull request #1036 from stackhpc/document-cloudkitty
c4345e4 Merge pull request #1023 from stackhpc/yoga-multinode-docs
b356c49 Merge pull request #1039 from stackhpc/2023.1-wazuh-docs
a94ebf6 Drop yaml highlighting on raw tags
8635612 Merge pull request #1060 from stackhpc/zed-cloudkitty-opensearch-fix
49eb2d3 Merge pull request #1059 from stackhpc/yoga-cloudkitty-opensearch-fix
e27cf91 Update Ceph Pools Dashboard
fd00ced Update ceph overview dashboard
449c0ae Update OSD dashboard
e09beae Update Ceph MDS Dashboard
7fc7f9e Merge pull request #1041 from stackhpc/feature/2023.1/friendly-interface-names
98cb4f4 Merge pull request #1063 from stackhpc/antelope_trust_docs
8dfbdb6 Merge pull request #1064 from stackhpc/container-image-build-command-not-found
2db308a fix: conditional missing brackets
178c8b3 Merge pull request #1062 from stackhpc/q2-package-container-update-2023.1
b3bfbc9 Merge branch 'stackhpc/2023.1' into conf/INFRA-629
b055171 Update doc/source/operations/upgrading.rst
956b655 fix typo
c01eca4 Add release note for Q2 2024 update
f2ba3cc Add command for adding member role to trusts
67a41de Add missing kolla image tags
d77a5c0 Bump prometheus services
cbab775 Make kolla-toolbox and bifrost to use stackhpc/requirments
12721b7 Add kolla docs, update cafile handling
57be0da Merge pull request #1061 from stackhpc/ceph-pgs-unclean
b3a01c1 Prevent Ceph PgsUnclean alert because of backfill
5ffa455 Update ubuntu jammy overcloud host image
1c35293 Fix CloudKitty OpenSearch backend
04d8c7b Fix CloudKitty OpenSearch backend
5165e09 Q2 packages and containers update
4578dad INFRA-629: Update Prometheus Benchmark dashboard
477b501 INFRA-629: Update Prometheus Alertmanager dashboard
8be796a INFRA-629: Update Prometheus overview dashboard
e75f136 INFRA-629: Update Memcached dashboard
470a47f INFRA-629: Update OpenStack dashboard
646a60f Add release note
f2f6d57 Add new panel for Per OSD Usage in OSD dashboard
705ebf5 Merge branch 'stackhpc/2023.1' into feature/2023.1/friendly-interface-names
9d85426 Merge pull request #1032 from stackhpc/2023.1-multinode-public-tls
b2be632 Merge pull request #1056 from stackhpc/backend-tls-network
af0d013 Generate backend TLS files for network hosts
c76c1ce docs: leading whitespace
4bc8fd2 docs: Clarity on subinterfaces
13d4948 change credentials for immi
75bae3b Merge pull request #1055 from stackhpc/2023.1-cloudkitty-opensearch-fix
f4f30e4 Merge pull request #1054 from stackhpc/rabbitmq-playbook-run
284e431 Merge pull request #1045 from stackhpc/barbican-template
1c2a2a5 Merge pull request #1053 from stackhpc/rl9-also-delete-configdrive
c3a7071 Fix CloudKitty OpenSearch backend
2c1461e Fix Barbican templating
1ab574f Update docs for limitations and considerations
a6f14ce Use $KAYOBE_CONFIG_PATH for kayobe playbook run
a3f600f Merge pull request #1051 from stackhpc/2023.1-zed-merge
57601f8 RL9: delete configdrive for seed during migration
25749d3 Merge pull request #1050 from stackhpc/zed-yoga-merge
6417784 Update doc/source/configuration/monitoring.rst
587da59 Update doc/source/configuration/monitoring.rst
80fd8c5 docs: Remove mention of undercloud network in wazuh
1c6db3a Cleanup testing delegation
c35bede Add reno + docs
f5c9e41 Correct indentation
367d2a1 Note on ex-Monasca systems
51a2b84 Change woridng to clarify OpenSearch support
68052b2 Update collection period explanation
0ec6d22 Split config
1a4d6c4 Merge branch 'document-cloudkitty' of https://github.com/stackhpc/stackhpc-kayobe-config into document-cloudkitty
3fdc75b Further changes from review
552caf8 Update doc/source/operations/cloudkitty.rst
75d0b2d Apply suggestions from code review
1d20fdc [prometheus] Rename network interfaces to network names
49c27c7 docs: Improvements & fixes for Wazuh
73a7fbd Update doc/source/operations/cloudkitty.rst
fa04ccb Update doc/source/operations/cloudkitty.rst
c707389 Update doc/source/operations/cloudkitty.rst
8101668 Add docs for configuring CloudKitty
4e6769a Merge branch 'stackhpc/2023.1' into feature/yoga/redfish-exporter
cd9ec7b Update .automation submodule for Tempest CA cert support
88f83b9 ci-multinode: Update configuration for external TLS using Vault CA
22eded5 vault: Support generating external TLS certificates for testing
9bb6ad2 add missing varaiable declaration
6f5e3c3 add lint ignore
1a20d47 Update etc/kayobe/kolla/config/prometheus/prometheus.yml.d/60-redfish.yml
11ab0e2 Revert change to automation
4919161 Fix broken datasource
4b64c45 Updated dashboard and added flag to match capacity exporter
0cc8912 Bump scrape timeout
02b1807 Bump tag
489ccd3 Fixups for redfish exporter
fa18a4a Adds seed_redfish_exporter_container
e22afca docs: Update ci-multinode docs to refer to terraform-kayobe-multinode
9367f36 INFRA-629: Update OpenSearch dashboard
31b13a2 INFRA-629: Update database dashboard
bc62dfd INFRA-629: Update cAdvisor dashboard
a42b23c docs: Add note about pyroute2 bug in Jammy upgrade