In downstream periodic minor update job we should use
update-promotion-testing-hash-* release config file. The file defines all
required variables to run rhos job including release related vars.
Emit_release should be skipped as it is not not used in downstream job.
This change introduces also override_docker_image_tag variable. This
variable defines if container images should be overridden during minor
update to pull from registry already created container images.
Change-Id: I22803fdac815338943cc1c24cf9d87c4ad7f7d98
The c9s image currently used no longer exists in the repository. Let's
switch to the latest to avoid updating the image name when old images
are purged.
Related-Bug: #2025224
Change-Id: Iea1167424dea0fb36862ae7ad73c5b1d8de54a88
Add content provider job, which builds containers using `current` dlrn
tag on same release branch as regular content-provider job.
Apart from new content provider job, the change adds new variable called
`minor_update`, which enables to consume containers created by new
content provider job in depended multinode-oooq-container-updates job.
minor_update variable is used in featureset068.
The featureset is activated in jobs for wallaby branch and onwards.
Train job uses featureset038 as previously.
Related-Bug: #2015993
Change-Id: I7a7713be0cd15321d5b16f6b8ca85f06d296219f
Previous image was old and it is no longer available, updating to latest
image.
Closes-Bug: #2016284
Change-Id: I0d26f2e2b337d230d26d619f03d762a71efde2c2
"include" is mostly deprecated - and the "static" parameter is dead in
newer ansible.
It's better to call "include_tasks" instead, since it will dynamically
load the task. In the loop context, it will act the right way. It's also
backward compatible with older ansible versions, at least the ones we're
using in CI env.
This patch also replace the two "with_items" by "loop" parameter.
Change-Id: Id7fc8eb6c24c9671835dd217d834ae462e483da7
openstacksdk and openstackclient violate upper-constraints for Wallaby.
venv install versions are violating upper-constraints. This patch forces downstream image builds to rpms and source packages.
Related-bug: BZ2161262
Change-Id: I207403264bc59db286d4e501c3a8042f9b093991
- created Zed upgrade zuul template between
Wallaby and Zed releases.
- created undercloud-upgrade job
Change-Id: I63fa6b0699450d9a4439d31db190d1d01cbc71d5
trunk.registry.rdoproject.org going to decomission
soon. This patch remove trunk.registry from
tripleo-ci repo.
This patch also removes Dockerfile_rhui.j2 template,
which is used internally. No need to keep it in the
upstream.
Signed-off-by: Amol Kahat <amolkahat@gmail.com>
Change-Id: I11bc7cc37af6271fac7c651c8598a741cf0af783
CentOS 9 nodes are startng with selinux in
Enforcing mode. This is not the expected
configuration to run RDO/CentOS tests.
This patch sets selinux to permissive in pre
when running on CentOS.
Change-Id: I14dff0c0bb2d793ef4cd52ddcc2ff5ca4f870b97
Related-Bug: #1998954
rhos-18 containers are bring added.
This patch adds the 18 relevant settings for
skipping conatiners that are not needed.
Change-Id: I0d83b2c72e19084fb7ef14234c425d987f997a90
Since Ansible was bumped to 2.14, we've observed the container image
build process gets stuck in the middle of ansible tasks to generate
Docker/Buildah files, because of a bug[1] with ansible-runner.
This removes --debug option from the build command to avoid -vvv option
in the ansible command, to workaround the above bug.
Same workaround is added for content-provider already[2], adding same
workaround for build-containers role.
[1] https://github.com/ansible/ansible-runner/issues/1164
[2] https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/864838
Related-Bug: #1996612
Change-Id: I498c9cac7815d3d0682835d2bf943594dad2203c
The test of this patch can be seen at:
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/861363
Co-authored-by: Jose Luis Franco
Co-authored-by: Daniel Bengtsson
Depends-On: Idd922d921fe52e9ca88ed84177d2eb81285bafae
Change-Id: I867febeb9b694401c0cfeb7931864a2291f87b99
We added emit release support with [1] but forgot this case.
It is the cause of related-bug. We also fix the master upgrade
template since we now have zed as the previous release so
replace wallaby with zed content provider in dependencies.
[1] https://review.opendev.org/c/openstack/tripleo-ci/+/860586
Related-Bug: 1992560
Change-Id: I70a4ce03b950038dd0a9b383313bc7b505644329
Ping test is no longer being used in the last 5 years and was replaced
by tempest. However there are still pieces of code being executed, and
replacing some files, for example the testrepository.subunit file that
tempest generate and it is being used by the ci logging scrapper to
collect data about tempest.
Change-Id: Ia2b18f88652f144d5b593c5d209a9acf2d0374c8
tcib_extra_config features does not work in RHOS-16.2 and
the fix[1] needs to be promoted to downstream to fix it.
In order to unblock the container-build job downstream, we
are disabling this feature for train.
Note: We have not added code comment in the template change as it
breaks the CLI.
[1]. https://review.opendev.org/c/openstack/tripleo-ansible/+/857777
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
Change-Id: I0cde6daed826f08d8cc4b51f2b3350bd303ffdb6
Includes changes to pass the registry_distro var through to the toci
playbook executions. Also adds the registry_ip_address_distro and
_hash_distro into the content provider return data for use by the
mixed-os-job. See topic at [1] for related reviews.
The new job is in the tripleo-multinode-container-minimal-pipeline
layout so it will run across the tripleo repos (wallaby only).
[1] https://review.opendev.org/q/topic:oooci_mixed_rhel
Change-Id: I1690fbece3ef8d40cef01ef0d10f5f5edbfe2747
rhos-17.1 containers are bring added.
This patch adds the 17.1 relevant settings for
skipping conatiners that are not needed.
Change-Id: If66cdd8c57b20b1e6035990ef1d087abcfd4cc79
This patch adds a new non-voting centos-9 standalone jobs with
FIPS enabled to the check pipeline. In order to have FIPS enabled,
the base-upstream job need to inherit from multinode-fips job, which
runs enable-fips role on a pre-playbook. When running enable-fips
role, the node will need to reboot in order to enable fips flag as
kerner parameter. When enabling fips mode, a post reboot task checks
if DNS is up by running nslookup against a provided target.
In order to check if FIPS is enabled, search for "crypto.fips_enabled =
1" on node's "var/log/extra/sysctl.txt" or search for "fips=1" in
kernel boot command line in "var/log/extra/dmesg.txt"
Co-Authored-By: Ade Lee <alee@redhat.com>
Co-Authored-By: Jiri Podivin <jpodivin@redhat.com>
Change-Id: I5972a41e0ffec818742a67d4e73c9fdea82ee2f6
Signed-off-by: Douglas Viroel <dviroel@redhat.com>
Since RHEL-9 is released now and
registry.access.redhat.com/ubi9 is also available.
Let's use the same in content provider and build-containers job.
Depends-On: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/846166
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
Change-Id: Ieb275fd0f4f9df2251465a8fffe2a962d53b1ce9