Xena package refresh

.github/workflows/stackhpc-all-in-one.yml

@@ -64,12 +64,12 @@ jobs:
       KAYOBE_VAULT_PASSWORD: ${{ secrets.KAYOBE_VAULT_PASSWORD }}
       KAYOBE_IMAGE: ${{ inputs.kayobe_image }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
            submodules: true
 
       - name: Install terraform
-        uses: hashicorp/setup-terraform@v1
+        uses: hashicorp/setup-terraform@v2
 
       - name: Initialise terraform
         run: terraform init
@@ -167,16 +167,14 @@ jobs:
           ENABLE_OVN: ${{ inputs.neutron_plugin == 'ovn' }}
           OS_DISTRIBUTION: ${{ inputs.os_distribution }}
 
-      # https://renehernandez.io/snippets/multiline-strings-as-a-job-output-in-github-actions/
+      # Use a heredoc to define a multiline string output
+      # https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#multiline-strings
       - name: Set SSH key output
         id: ssh_key
         run: |
-          ssh_key="$(cat terraform/aio/id_rsa)"
-          ssh_key="${ssh_key//'%'/'%25'}"
-          ssh_key="${ssh_key//$'\n'/'%0A'}"
-          ssh_key="${ssh_key//$'\r'/'%0D'}"
-          echo "::add-mask::$ssh_key"
-          echo "::set-output name=ssh_key::$ssh_key"
+          echo "ssh_key<<EOF" >> $GITHUB_OUTPUT
+          cat terraform/aio/id_rsa >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
 
       # The same tag may be reused (e.g. pr-123), so ensure we have the latest image.
       - name: Pull latest Kayobe image

.github/workflows/stackhpc-build-kayobe-image.yml

@@ -37,20 +37,20 @@ jobs:
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Checkout kayobe config
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
            submodules: true
 
       - name: Log in to the Container registry
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        uses: docker/login-action@v2
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        uses: docker/metadata-action@v4
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 

.github/workflows/stackhpc-container-image-build.yml

@@ -167,10 +167,15 @@ jobs:
       # stackhpc-release-train repository.
       - name: Trigger container image repository sync
         run: |
+          filter='${{ inputs.regexes }}'
+          if [[ -n $filter ]] && [[ ${{ github.event.inputs.seed }} == 'true' ]]; then
+            filter="$filter bifrost"
+          fi
           gh workflow run \
           container-sync.yml \
           --repo stackhpc/stackhpc-release-train \
-          --ref main
+          --ref main \
+          -f filter="$filter"
         env:
           GITHUB_TOKEN: ${{ secrets.STACKHPC_RELEASE_TRAIN_TOKEN }}
 

.github/workflows/stackhpc-pull-request.yml

@@ -28,7 +28,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup Python ${{ matrix.python-version }} 🐍
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install Tox 📦

etc/kayobe/containers/pulp/post.yml

@@ -17,3 +17,13 @@
   register: pulp_manager_result
   failed_when:
     - "'Successfully set password' not in pulp_manager_result.stdout"
+
+- name: Manage Pulp content checksums
+  become: true
+  command: >-
+    docker exec -u root pulp
+    bash -c
+      'pulpcore-manager handle-artifact-checksums'
+  when:
+    - stackhpc_pulp_sync_for_local_container_build | bool
+    - pulp_settings.changed

etc/kayobe/containers/pulp/pre.yml

@@ -19,6 +19,7 @@
     dest: /opt/kayobe/containers/pulp/settings.py
     mode: 0644
   become: true
+  register: pulp_settings
 
 - name: Configure TLS for local Pulp
   when: pulp_enable_tls | bool

etc/kayobe/containers/pulp/settings.py

@@ -2,3 +2,7 @@
 ANSIBLE_API_HOSTNAME='{{ pulp_url }}'
 ANSIBLE_CONTENT_HOSTNAME='{{ pulp_url }}/pulp/content'
 TOKEN_AUTH_DISABLED=True
+{% if stackhpc_pulp_sync_for_local_container_build | bool %}
+ALLOWED_CONTENT_CHECKSUMS = ["sha1", "sha224", "sha256", "sha384", "sha512"]
+{% endif %}
+

etc/kayobe/kolla.yml

@@ -96,7 +96,7 @@ kolla_docker_registry_password: "{{ stackhpc_docker_registry_password }}"
 
 # Kolla OpenStack release version. This should be a Docker image tag.
 # Default is {{ openstack_release }}.
-kolla_openstack_release: "{% if kolla_base_distro == 'centos' %}xena-20221010T103511{% else %}xena-20221213T204703{% endif %}"
+kolla_openstack_release: "{% if kolla_base_distro == 'centos' %}xena-20230214T150257{% else %}xena-20221213T204703{% endif %}"
 
 # Docker tag applied to built container images. Default is
 # {{ kolla_openstack_release }}.

etc/kayobe/kolla/globals.yml

@@ -8,32 +8,25 @@ enable_docker_repo: {% raw %}"{{ 'overcloud' not in group_names or ansible_facts
 
 
 {% if kolla_base_distro == 'centos' %}
-bifrost_tag: xena-20221128T101757
-cinder_tag: xena-20230206T165215
-etcd_tag: xena-20230201T095253
-glance_tag: xena-20230206T165215
-glance_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
-magnum_tag: xena-20230131T144233
-neutron_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
-nova_tag: xena-20230206T165215
-rabbitmq_tag: xena-20230105T141714
+bifrost_tag: xena-20230214T165534
 {% else %}
 bifrost_tag: xena-20221213T224057
 cinder_tag: xena-20230206T165220
 etcd_tag: xena-20230201T131415
 glance_tag: xena-20230206T165220
-glance_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
 kolla_toolbox_tag: xena-20230104T145414
 magnum_tag: xena-20230131T151601
 neutron_tag: xena-20230104T145414
-neutron_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
 nova_tag: xena-20230206T165220
 octavia_tag: xena-20230104T145414
 openvswitch_tag: xena-20230104T145414
 ovn_tag: xena-20230104T145414
 rabbitmq_tag: xena-20230105T145825
 {% endif %}
 
+glance_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
+neutron_tls_proxy_tag: "{% raw %}{{ haproxy_tag | default(openstack_tag) }}{% endraw %}"
+
 om_enable_rabbitmq_high_availability: true
 
 #############################################################################

etc/kayobe/pulp-repo-versions.yml

@@ -1,25 +1,25 @@
 ---
 # Do not edit! This file is autogenerated by Ansible.
 stackhpc_pulp_repo_centos_stream_8_advanced_virtualization_version: 20211122T102435
-stackhpc_pulp_repo_centos_stream_8_appstream_version: 20220817T082321
-stackhpc_pulp_repo_centos_stream_8_baseos_version: 20220817T082321
+stackhpc_pulp_repo_centos_stream_8_appstream_version: 20230201T025809
+stackhpc_pulp_repo_centos_stream_8_baseos_version: 20230201T025809
 stackhpc_pulp_repo_centos_stream_8_extras_version: 20220401T032901
 stackhpc_pulp_repo_centos_stream_8_nfv_extras_version: 20220609T110556
-stackhpc_pulp_repo_centos_stream_8_nfv_openvswitch_version: 20220824T113700
-stackhpc_pulp_repo_centos_stream_8_openstack_xena_version: 20220823T042339
+stackhpc_pulp_repo_centos_stream_8_nfv_openvswitch_version: 20230203T025251
+stackhpc_pulp_repo_centos_stream_8_openstack_xena_version: 20230209T034107
 stackhpc_pulp_repo_centos_stream_8_opstools_version: 20220617T100837
-stackhpc_pulp_repo_centos_stream_8_powertools_version: 20220817T082321
-stackhpc_pulp_repo_centos_stream_8_storage_ceph_pacific_version: 20220803T043053
+stackhpc_pulp_repo_centos_stream_8_powertools_version: 20230201T025809
+stackhpc_pulp_repo_centos_stream_8_storage_ceph_pacific_version: 20230201T025809
 stackhpc_pulp_repo_docker_ce_ubuntu_version: 20220708T132615
-stackhpc_pulp_repo_docker_version: 20220828T050510
-stackhpc_pulp_repo_elasticsearch_logstash_kibana_7_x_version: 20220825T041159
-stackhpc_pulp_repo_epel_modular_version: 20220828T050510
-stackhpc_pulp_repo_epel_version: 20220830T054227
-stackhpc_pulp_repo_grafana_version: 20220831T050502
-stackhpc_pulp_repo_mariadb_10_5_centos8_version: 20220817T082321
-stackhpc_pulp_repo_rabbitmq_erlang_version: 20220828T050510
-stackhpc_pulp_repo_rabbitmq_server_version: 20220803T043053
-stackhpc_pulp_repo_treasuredata_4_version: 20220823T042339
+stackhpc_pulp_repo_docker_version: 20230203T025251
+stackhpc_pulp_repo_elasticsearch_logstash_kibana_7_x_version: 20230203T025251
+stackhpc_pulp_repo_epel_modular_version: 20220913T043117
+stackhpc_pulp_repo_epel_version: 20230206T150339
+stackhpc_pulp_repo_grafana_version: 20230207T024123
+stackhpc_pulp_repo_mariadb_10_5_centos8_version: 20230206T150339
+stackhpc_pulp_repo_rabbitmq_erlang_version: 20221229T025716
+stackhpc_pulp_repo_rabbitmq_server_version: 20230201T025809
+stackhpc_pulp_repo_treasuredata_4_version: 20221105T035018
 stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20220804T040153
 stackhpc_pulp_repo_ubuntu_focal_security_version: 20220804T040153
 stackhpc_pulp_repo_ubuntu_focal_version: 20220804T040153