This removes publication of centos 7 build artifacts (like those for
openafs packages) from our centos artifacts publication job. We split
this into a separate change because centos 7 got a new kernel recently
and our existing dib images hadn't refreshed to pull that in yet which
is required for successful package updates on centos 8 and 9 stream.
Now the kernel should be updated and everything should work.
Change-Id: I369ceb1dda81f698d8b591b5f2991f99a7a823af
We are starting work to remove CentOS 7 from Zuul and Nodepool. The
first step there is to delete everything that appears to be unused. We
do that here cleaning up nodesets and jobs that should be unused at this
point in time.
Note we keep the wheel cache/mirror build and publication jobs around
for just a bit longer. We will clean those up when we are closer to
being able to remove everything CentOS 7 related.
Depends-On: https://review.opendev.org/c/openstack/project-config/+/910978
Change-Id: I984c494afc5ba58b50350bc9eae58260cc66f2ee
As we EOL queens, rocky and stein for networking stadium projects some
legacy jobs can be removed:
- legacy-tempest-dsvm-networking-bagpipe
- legacy-tempest-dsvm-networking-bgpvpn-bagpipe
- legacy-networking-bagpipe-dsvm-fullstack
Change-Id: I5782410fc0303599e101912719c7b630908921e5
Depends-On: https://review.opendev.org/c/openstack/releases/+/846188
These jobs were used only in nova's stable/train, but that went to EOL,
so job definitions can be removed from here.
Change-Id: Ib6005dcd7eefbe693a400ef016103ed1df064d83
Projects ocata branches have transitioned to End of Life, which means
that all ocata related branch filters and unnecessary definitions can
be removed.
Change-Id: I6bae6ce07c58855379db7afd9394b94de3781fee
The grafyaml image has moved to quay.io. Ensure we are pulling it from
that new maintained location.
Depends-On: https://review.opendev.org/c/opendev/grafyaml/+/882493
Change-Id: I4b2dfc8436d4238470af31f5a8d7a881fe254558
As noted inline, we dropped the install from the base images. This
should pre-install python2/-dev to return us to about the same state,
but just for the legacy jobs.
Change-Id: Ia8cf6911cb48dfbef59fcf890d4b29d162dc11ad
There are two problems we need to solve when enabling FIPS for
multinode Ubuntu jobs.
1. Ubuntu nodes require a subscription to be activated with a
subscription key that is stored as a secret in project-config.
2. Because enabling FIPS requires a reboot, we need to execute the
enable-fips playbook before the multinode playbook. If not,
resources set up by the multinode playbook may not survive the
reboot.
To solve these problems, we have created a new base job for
OpenStack multinode jobs. (openstack-multinode-fips). We expect
to use this job as the base job for OpenStack multinode jobs
instead of the multinode job in zuul-jobs.
The openstack-multinode-fips inherits from openstack-fips, which
is a job defined in project-config that access the UA subscription
key and activates the UA subscription. This solves problem #1.
It then executes the enable-fips and multinode playbooks
(FIPS first!), which in turn, invoke the enable-fips and multinode
roles in zuul-jobs. This solves problem #2.
This has the unfortunate result of having to duplicate the logic
of the multinode/pre.yaml playbook in zuul-jobs here in
openstack-zuul-jobs instead, but I can't see a way around that.
Note that unless the variable enable_fips is defined to be true
in the job, all the FIPS logic is essentially a no-op.
If enable_fips is set to True, then jobs will also need to specify
nslookup_target for the post-reboot-tasks role invoked by the
enable_fips role.
Depends-On: I8a88d6a9bcf5725986b00b063e03686d3225b48e
Change-Id: I080df90af850088893976c8649aa528638c6f373
The bindep install causes problem for announce-release and it seems
unnecessary for this job, so let's get rid of it.
Change-Id: Id3eeb168dd72e379fd8bf3fba0407ce1c1314ecb
Since ocata and pike have transitioned to EOL, these filters are not
needed anymore and can be deleted.
This patch also removes some job definition which were only used for
ocata and pike branches.
Change-Id: I69ebf0ae122220ae8c88310094468aedb3f4a660
This is a job that imports the graphs we have defined in
project-config/grafana to a testing grafana instance, then takes some
screenshots to validate the layout and aid review.
Operation is fairly straight-forward; a grafana container is setup
(see related work in Ibbc2b116d0c496655a7ce6bb6971e8270ac32647) and
grafyaml is used to import the dashboards from project-config. We
query the grafana instance to find the dashboards, then use selenium
and a small helper to take screenshots of each.
It pulls graphyaml from the buildset registry as a soft dependency, so
we can also add it as an extra test to the grafyaml repo.
Change-Id: Ice0863d5a180738119d572df1871093a292126be
As we EOL queens, rocky and stein for networking stadium projects some
legacy jobs can be removed:
- legacy-neutron-fwaas-dsvm-fullstack
- legacy-neutron-fwaas-dsvm-functional
- legacy-neutron-fwaas-v1-dsvm-tempest
- legacy-neutron-fwaas-v1-dsvm-tempest-multinode
- legacy-neutron-fwaas-v2-dsvm-tempest
- legacy-neutron-fwaas-v2-dsvm-tempest-multinode
Depends-On: https://review.opendev.org/c/openstack/releases/+/846196
Change-Id: Iab4b7801735fdcbcf8fd9ed46907bf457c2e4bfd
As we EOL pike for networking projects some legacy jobs can be removed:
- legacy-tempest-dsvm-neutron-scenario-linuxbridge
- legacy-tempest-dsvm-neutron-dvr-multinode-scenario
- legacy-tempest-dsvm-networking-ovn-ovs-release-ovsdbapp-src
Change-Id: Ifdf942f311b06182f1ba623c9a20d67cccaf019b
Depends-On: https://review.opendev.org/c/openstack/releases/+/841086
Use the generic role from I11e2bdcbf2894d86105d75c3d3580aefb6aa18fc
and make a generic publishing role too.
Remove the openafs specific bits that are no longer used. Move the
description of the OpenAFS jobs above the job definition.
Change-Id: Ie61b82903644605d07f510ad1071fa551e7086c9
This is step 1 in promoting the openafs deb packages to the
openstack-ci PPA. It should grab the debs from the gate build and
sign the .changes file with our key.
This is intentionally not uploading yet as we just want to test the
secret import and signing path before we add the key and permissions
to the upstream PPA.
Change-Id: Idd91818093588113b84c1d91b4895df589aa7912
This imports the latest debian/* from the upstream openafs packages,
and builds source packages meant for upload to the PPA we use for
openafs.
Over the years we have found that maintaining our own PPA for this is
useful. We have hit bugs that require immediate patches to be applied
and rolled out to production, and having a private build facilitates
this. Generally we hope to have no delta to the upstream packaging,
which is currently the case.
Currently we have a fairly manual process to produce and upload these
debs (once there, the source is obviously available). This allows us
to keep a little clearer view of what we've changed or are working on.
This doesn't publish anything, yet. We'll work on that after this;
the idea is that the publishing job will consume the artifacts this
returns.
Change-Id: I07780595331da29af9f72185cbb3499210e89c19
The promote job is failing with "... openafs/centos8-stream' must be
an existing dir". We probably don't need both 8 and 8-stream now, but
let's just get this working first.
Change-Id: I142786153efb37b19e9994c49f16636bd26c4376
We had to workaround this repo not existing when we first spun up wheel
builds for centos 9 stream. But the repo appears to exist now so use the
official production stuff rather than the test builds.
Change-Id: I85cf1c29d501817254ddc54ef02bd75b848ed942
This old openstack package brings in centos-release-ceph-nautilus
which actually has an incorrect mirrorlist entry in it's .repo file
that tries to point it at the centos-8 repos [1]. When upstream
retired CentOS 8 this stopped responding. Update to Xena (we don't
rely on any of these bits, it's just one or two packages we need
bindep to install for the wheel builds).
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2051792
Change-Id: Ice106cfee23c514a5e5716d4368af9f62360e2f7
This patch removes legacy-neutron-dsvm-api job definition
It seems that this job was used only in the Neutron stable/Ocata branch
which is going to be EOL with [1].
In the stable/Pike branch Neutron is using only
"legacy-neutron-dsvm-api-pecan" job which isn't removed by that patch.
It also removes networking-midonet jobs:
* periodic-tempest-dsvm-networking-midonet-aio-ml2-full-ocata
* periodic-tempest-dsvm-networking-midonet-aio-v2-full-ocata
As those jobs were also used only in Ocata branch which is EOL in
networking-midonet already.
[1] https://review.opendev.org/c/openstack/releases/+/790904
Change-Id: I7b9e6cb20d7b8d8d1dff9b8bee2c652df743b2ba
Remove jobs and playbooks for x/gearman-plugin which is being retired:
- legacy-gearman-plugin-maven-build
- legacy-gearman-plugin-hpi-artifact
- legacy-gearman-plugin-jenkinsci-upload
Depends-On: Ib6010d7ce85a934501c50a53e9ac78dcf74bc403
Change-Id: I5e35464c6b63f97770835d2adb927cb08c40e952