From 76e3b077a44249f9072b4a653b1b6f2476aa775f Mon Sep 17 00:00:00 2001 From: Jake Hutchinson Date: Fri, 22 Dec 2023 12:45:26 +0000 Subject: [PATCH 1/4] Change workflow interface to enp3s0 --- .github/workflows/stackhpc-all-in-one.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/stackhpc-all-in-one.yml b/.github/workflows/stackhpc-all-in-one.yml index 1bf238ac0..7a0102ef3 100644 --- a/.github/workflows/stackhpc-all-in-one.yml +++ b/.github/workflows/stackhpc-all-in-one.yml @@ -34,7 +34,7 @@ on: vm_interface: description: Default network interface name type: string - default: ens3 + default: enp3s0 vm_flavor: description: Flavor for the all-in-one VM type: string From f77c1f72a375e37e1f5c0ab88c4fce55b07b9f71 Mon Sep 17 00:00:00 2001 From: Alex-Welsh Date: Tue, 12 Dec 2023 16:54:04 +0000 Subject: [PATCH 2/4] Set selinux disabled in RL9 AIOs --- .../ci-aio/inventory/group_vars/controllers/selinux | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux diff --git a/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux new file mode 100644 index 000000000..97bfb5bb0 --- /dev/null +++ b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux @@ -0,0 +1,4 @@ +--- +# Configure SELinux to be disabled in all cases. This is a short term fix, we +# want RL9 hosts to be be permissive but our host images need to be rebuilt. +selinux_state: "disabled" From 766dba9ac1a96c27d28e8eadfe7c429b0247fdd9 Mon Sep 17 00:00:00 2001 From: Matt Crees Date: Tue, 2 Jan 2024 16:24:50 +0000 Subject: [PATCH 3/4] Correct comment for seed/infra_vm_root_image --- etc/kayobe/infra-vms.yml | 6 ++++-- etc/kayobe/seed-vm.yml | 4 ++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/etc/kayobe/infra-vms.yml b/etc/kayobe/infra-vms.yml index a802f5acc..0c8156adb 100644 --- a/etc/kayobe/infra-vms.yml +++ b/etc/kayobe/infra-vms.yml @@ -32,8 +32,10 @@ # Base image for the infra VM root volume. Default is # "https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img" # when os_distribution is "ubuntu", or -# https://dl.rockylinux.org/pub/rocky/8/images/Rocky-8-GenericCloud.latest.x86_64.qcow2 -# when os_distribution is "rocky", +# https://dl.rockylinux.org/pub/rocky/8/images/x86_64/Rocky-8-GenericCloud.latest.x86_64.qcow2 +# when os_distribution is "rocky" and os_release is "8" +# https://dl.rockylinux.org/pub/rocky/9/images/x86_64/Rocky-9-GenericCloud.latest.x86_64.qcow2 +# when os_distribution is "rocky" and os_release is "9", # or # "https://cloud.centos.org/centos/8-stream/x86_64/images/CentOS-Stream-GenericCloud-8-20220913.0.x86_64.qcow2" # otherwise. diff --git a/etc/kayobe/seed-vm.yml b/etc/kayobe/seed-vm.yml index 572518da4..f55c798ef 100644 --- a/etc/kayobe/seed-vm.yml +++ b/etc/kayobe/seed-vm.yml @@ -26,9 +26,9 @@ # Base image for the seed VM root volume. Default is # "https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img" # when os_distribution is "ubuntu", -# https://dl.rockylinux.org/pub/rocky/8/images/Rocky-8-GenericCloud.latest.x86_64.qcow2 +# https://dl.rockylinux.org/pub/rocky/8/images/x86_64/Rocky-8-GenericCloud.latest.x86_64.qcow2 # when os_distribution is "rocky" and os_release is "8", -# https://dl.rockylinux.org/pub/rocky/9/images/Rocky-9-GenericCloud.latest.x86_64.qcow2 +# https://dl.rockylinux.org/pub/rocky/9/images/x86_64/Rocky-9-GenericCloud.latest.x86_64.qcow2 # when os_distribution is "rocky" and os_release is "9", # or # "https://cloud.centos.org/centos/8-stream/x86_64/images/CentOS-Stream-GenericCloud-8-20220913.0.x86_64.qcow2" From 32b1fb681ba8b7079113c6b81115d04867985d2a Mon Sep 17 00:00:00 2001 From: Alex-Welsh Date: Thu, 21 Dec 2023 16:30:38 +0000 Subject: [PATCH 4/4] Rotation docs for heat_domain_admin_password --- doc/source/operations/secret-rotation.rst | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/doc/source/operations/secret-rotation.rst b/doc/source/operations/secret-rotation.rst index 7912530fb..f3213da37 100644 --- a/doc/source/operations/secret-rotation.rst +++ b/doc/source/operations/secret-rotation.rst @@ -370,10 +370,12 @@ Full method kayobe overcloud service deploy -20. Manually update ``heat_domain_admin_password`` +20. Manually update ``heat_domain_admin_password``, using the newly generated + OpenStack Admin credentials. - #. TODO: Instructions - This has not been tested yet + .. code:: bash + + openstack user set --domain heat_user_domain --password heat_domain_admin 21. Re-run Tempest to make sure everything has come back