This commit updates the image to include distributedcloud-client
changes.
Story: 2010852
Task: 49727
Change-Id: I2d25d590caf8209ceaf088920b7e77d81f9f4af7
Signed-off-by: Gustavo Herzmann <gustavo.herzmann@windriver.com>
app-node-interface-metrics-exporter image is updated.
This is considered a major release as the app version is also
bumped up to v1.0.0
Story: 2010918
Task: 49487
Change-Id: I4250d5e64703fcd369a9488a15c3135d85920a78
Signed-off-by: Aman Pandae <amanpandae.mothukuri@windriver.com>
tzdata expires every 6-12 months.
Update to the latest txdata, valid until Dec 2024
The new tzdata is supplied by upstream, we no longer need
to build it ourselves. We just need to be sure it is included
in the iso.
Partial-Bug: 2054466
Change-Id: Ibf676fa64dd51a9e7c9882426c57017dd7ed47b8
Signed-off-by: Scott Little <scott.little@windriver.com>
This will update the initContainer image used by
the kubevirt-application. The container is
responsible for installing virtctl on the system
controller.
The version of the image corresponds to the
version of virtctl that is installed.
Task: 49635
Story: 2010931
Change-Id: Ib2f1ce431ce9574e23b128b6f35b54ca381fe108
Signed-off-by: Aronsky, Gleb <Gleb.Aronsky@windriver.com>
"-e" option of build-pkgs means exiting on any package
build failure instead of continuing to run. This feature
was broken during the code merging, now brings the feature
back.
Test Plan:
Pass: For monolithic build, package build failure should
result in a safe exit with '-e' option:
build-pkgs -e
Pass: For single build with '-p', package build failure
should result in a safe exit with '-e' option:
build-pkgs -e -p <packages>
Closes-bug: 2054720
Change-Id: I5bf2089aa3559a8131f0e238a75edea87733dea6
Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com>
Aptly repos are signed with a GPG key embedded in environment
containers. That key expired today (2024-02-23).
Key was replaced with a new one [1]; update key fingerprint in this repo
to match.
[1] https://review.opendev.org/c/starlingx/tools/+/910036
Depends-On: https://review.opendev.org/c/starlingx/tools/+/910036
Partial-Bug: 2054862
Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I7d20a1e7276796e694f837f004b8133e28ae5de4
The master branch build of the stx-neutron container is failing on a
dependency python issue. The neutron 22.1.1.dev85 version modified the
minimum required version for the neutron-lib package, and that is
causing the build of the stx-neutron image to fail.
This change updates the wheels of the neutron-lib package to version
3.4.2, in order to fix the build for this image.
Test plan:
PASS: Build wheels
PASS: Build stx-neutron image
PASS: Build all images
Closes-Bug: 2052644
Change-Id: I9ef49300898b6697852e9f3aa6163b6b684d2803
Signed-off-by: Lucas de Ataides <lucas.deataidesbarreto@windriver.com>
This commit changes the patch_builder.py to
rename the scripts files to a known pattern that
will be use to check the signature of the patch.
Test plan:
PASS: Build patch with all scripts with different
names, try to upload using software without any errors.
PASS: Build patch without scripts and uploading, try
software upload without errors.
Depends-On: https://review.opendev.org/c/starlingx/update/+/908860
Story: 2010676
Task: 49563
Change-Id: I783556df84231dcad04e11260583ffa83b8ce446
Signed-off-by: Dostoievski Batista <dostoievski.albinobatista@windriver.com>
Updating the list of installed kubectl versions within the vault manager
docker image, to support the correct list of version for the master
branch. New tag name is based on the latest kubectl version installed.
Test Plan:
PASS Vault sanity
PASS Test rekey with the created docker image
Story: 2010930
Task: 49526
Change-Id: Id77360f6bdba4cc6d6b5287d6410d9a8c1d78971
Signed-off-by: Tae Park <tae.park@windriver.com>
The ndisc6 package has useful diagnostic tools for IPv6 networks. It is
being added to allow for duplicate address and gateway reachability
detection by the scripts from the ifupdown-extra package. This change
is intended to work in conjunction with
https://review.opendev.org/c/starlingx/integ/+/908172.
Test Plan
[PASS] downloader
[PASS] build-pkgs --clean --all
[PASS] build-image
[PASS] Run full build, system install, bootstrap and unlock SX system
[PASS] Run command "dpkg --list | grep ndisc6"
[PASS] Run command "ndisc6 --help"
Depends-On: https://review.opendev.org/c/starlingx/tools/+/908174
Closes-Bug: #2052534
Change-Id: Idc9fc352a3d3b0e2e1c3cb370c5a826cc7d33670
Signed-off-by: Lucas Ratusznei Fonseca <lucas.ratuszneifonseca@windriver.com>
This commits change metadata.py to correctly
read the values set on recipe's fields "reboot_required"
and "unremovable" when creating a patch.
Test Plan:
PASS: Generate patch with "reboot_required" and
"unremovable" set as "N".
PASS: Generate patch with "reboot_required" and
"unremovable" set as "Y".
Closes-bug: 2052458
Change-Id: I9ba5058b296a63d98685882cee66ef6aa21c4f02
Signed-off-by: Dostoievski Batista <dostoievski.albinobatista@windriver.com>
Includes support of kubectl version 1.21 and 1.22.
Test Plan:
PASS Vault sanity
Story: 2010930
Task: 49453
Change-Id: I4ad239f7d37ec0f62243f1b88e537c4511d48b03
Signed-off-by: Tae Park <tae.park@windriver.com>
Historically, this build-helm-charts.sh script would rely on its
APP_NAME and APP_VERSION variables to write in the application
metadata.yaml. The APP_NAME would be used to override in build-time the
application final name [1] and the APP_VERSION would be initialized by
the internal "get_app_version" functional.
Now, after the AppFwk update on all applications Zuul jobs, the
metadata.yaml can no longer be missing neither the "app_name" or the
"app_version" keys/values [2].
So, the build-helm-charts.sh needs to be updated as follows:
1) Stop the blind write of APP_VERSION on metadata and use this
variable to override the metadata default value instead
2) Use APP_NAME (cli parsed argument) to override the default metadata
app_name, instead of only using it when the metadata is missing the
key/value.
NOTE: Since this script is currently always used with the "--app"
argument, this change should be safe. But if "--app" is not used, the
app_name will always fallback to "stx-openstack"
[1] 31aea8e88b
[2] https://review.opendev.org/c/starlingx/openstack-armada-app/+/903781
Closes-Bug: 2050825
TEST PLAN:
PASS - Build stx-openstack helm-charts tarball
PASS - system application-upload stx-openstack.tgz
PASS - system application-apply stx-openstack
Change-Id: Ibc37e1306ba93b911a66993f5e56c8e609291c2c
Signed-off-by: Thales Elero Cervi <thaleselero.cervi@windriver.com>
Package added:
-> inotifytools 3.14-7
-> libinotifytools0 3.14-7
This package will be used by luks-fs-mgr service to detect
file change and creation recursively, so that those files can be rsynced
with the standby controller.
Test Plan:
PASSED: downloader && build-image successfull
PASSED: Deployed image successfully on AIO-DX
Both controllers in available and online state
inotifytools package successfully installed on controllers
Able to execute inotifywait command
Depends-On: https://review.opendev.org/c/starlingx/tools/+/904556
Story: 2010873
Task: 49372
Change-Id: Icfd33c7702ed3174c7c580199edcfa7d760e1345
Signed-off-by: Harshad sonde <harshad.sonde@windriver.com>
This commit provides security updates on the stx-snmp container
to cover vulnerabilities found at CVE scanning.
Test Plan:
- CVE Scanning (PASS)
Story: 2010710
Task: 49300
Signed-off-by: Enzo Candotti <enzo.candotti@windriver.com>
Change-Id: I24f2cdc9fc656d9b2c999617e1b68187afd22f36
This commit change the patch-iso-debian script to pull only the latest
ostree commit from the repository used to create it. This make the iso
not increase in size exponentially.
Test plan:
PASS: Create ISO using the script.
PASS: Check if ostree_repo/ contains only the latest commit.
PASS: Install AIO-SX system.
Closes-Bug: 2046811
Change-Id: I96ef803e3b93535cdd2b9e077ab94df98164cdfa
Signed-off-by: Dostoievski Batista <dostoievski.albinobatista@windriver.com>
Update the tag for stx-kubevirt-app to v0.59.0.
This will update the initContainer image used by
the kubevirt-application. The container is
responsible for installing virtctl on the system
controller.
The version of the image corresponds to the
version of virtctl that is installed.
Task: 49202
Story: 2010931
Change-Id: Ifadb170946e7f118ceb2935bd3380d1a58952425
Signed-off-by: Gleb Aronsky <gleb.aronsky@windriver.com>
Includes the addition of uuidgen binary, multiple versions of kubectl as
well as the latest packages for debian stable.
Test Plan:
PASS vault application sanity
Story: 2010930
Task: 49195
Change-Id: I03e37af31514c3fa3b95e0560a6d6f83879ec9de
Signed-off-by: Michel Thebeau <Michel.Thebeau@windriver.com>
The StarlingX mirror now uses https. Fix the port number to match.
Partial-Bug: 2033555
Signed-off-by: Scott Little <scott.little@windriver.com>
Change-Id: I9176a1e2d3f34e8e3d44d368676597db2328d554
mirror.starlingx.cengn.ca no longer exists. CENGN is kindly forwarding
requests to the new location mirror.starlingx.windriver.com for now, but
that will only last a few months. We need to replace all the references
with the new URL.
I will also remove as many 'cengn' references as possible, replacing them
with 'stx_mirror'
TESTS
=====
downloader -s -b -B std,rt
build-pkgs -a
Partial-Bug: 2033555
Signed-off-by: Scott Little <scott.little@windriver.com>
Change-Id: I26ade4650b4d6d1879175578055f3b53c6aa75d1
mirror.starlingx.cengn.ca no longer exists. CENGN is kindly forwarding
requests to the new location mirror.starlingx.windriver.com for now, but
that will only last a few months. We need to replace all the references
with the new URL.
I will also remove as many 'cengn' references as possible, replacing them
with 'stx_mirror'
Partial-Bug: 2033555
Signed-off-by: Scott Little <scott.little@windriver.com>
Change-Id: I0b7d408358a977501d5ef430317a023d5a7eab0d
This commit provides security updates on the fm-rest-api container
to cover vulnerabilities found at CVE scanning.
Test Plan:
- CVE Scanning (PASS)
Story: 2010710
Task: 49138
Signed-off-by: Enzo Candotti <enzo.candotti@windriver.com>
Change-Id: I6197f39fedb714c6ad12754191f1d8b718127a74
Test Plan:
PASS - On IPv6 AIO-SX and on IPv4 AIO-DX + 1 worker, applied OIDC app
and executed a functional test, getting a token through "oidc-auth". Pod
restart triggered by secret-observer was also tested.
Story: 2010703
Task: 49083
Change-Id: I4faac92505119d77ce1d5e2fcebc063268aebd88
Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
mirror.starlingx.cengn.ca no longer exists. CENGN is kindly forwarding
requests to the new location mirror.starlingx.windriver.com for now, but
that will only last a few months. We need to replace all the references
with the new URL.
I will also remove as many 'cengn' references as possible, replacing them
with 'stx_mirror'
Partial-Bug: 2033555
Signed-off-by: Scott Little <scott.little@windriver.com>
Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I9d1396d603dcd3fc54bd4496fd332de278aa70da
Builds fail for reasons of a circular dependency loop, but
fail to list the members of that loop.
This update logs the members of the loop.
Closes-bug: 2040003
Signed-off-by: Scott Little <scott.little@windriver.com>
Change-Id: Ia6c9707ef0e2a9162fd77bbcdd747c5d69e9d055
Successful compilation of systemd does not require the tzdata fix.
It is required at run time.
Partial-Bug: 2039739
Signed-off-by: Scott Little <scott.little@windriver.com>
Change-Id: I93315345d81cd844111fd28f0272448e1a26c72a
This commit add the deploy_precheck element to XML, allowing the
patch writer to add script used on the pre-check process of the deploy.
Test Plan:
- Enter the builder container
$ stx shell
$ cd $MY_REPO/build-tools/stx/patch
- Build patch
$ ./patch_builder.py --recipe EXAMPLES/patch-recipe-sample.xml
- Verify if file has been added to .patch
Story: 2010676
Task: 49013
Change-Id: I18ae7fcbf046362d53a67bc290ffc9b1a0b888ad
Signed-off-by: Dostoievski Batista <dostoievski.albinobatista@windriver.com>