Prelude
- Gerrit is upgraded to the version 3.4.3
- Zuul and Nodepool are upgraded to 5.2.3 and 5.0.0
- Gerrit, Zuul, Nodepool, Etherpad, OpenSearch services are now containerized
Doc
Here is the documentation of the 3.7 release.
Release Notes (2022-06-28)
- Install specific podman package
- sf-zuul: Add option to configure executor zone
- sf-gateway: fix Alias for acme-challenge
- Update 'restart a config-update job' section with zuul-client
Package update
- sf-config-3.7.9-4.el7-> sf-config-3.7.10-4.el7
- sf-docs-3.7.1-1.el7 -> sf-docs-3.7.2-1.el7
Release Notes (2022-05-12)
sf-config-3.7.9
- Add a zuul-client wrapper, config generator utility
- Bump nodepool container image
- Fix when conditions and timeout for ensure_zuul_running
- sf-zuul: remove useless step on update.yml
- upgrade: recreate the container when needed
- Check if Zuul is running before generate tenant update secret task
- Allow to provide 'log_gearmman_ca_certs'
- Rename roles//tasks/update.yml roles//tasks/config_update.yml
- sf-base: exec seboolean only when selinux is enforcing
- Update zuul container
- nodepool: set --env HOME=/var/lib/nodepool for nodepool-builder container
- Allow Kibana viewer role to get content from global tenant
- Create commands for zuul and nodepool, delete aliases
- sf-zuul: add export-keys and import-keys for backup and restore
- Fix httpd Alias for sf docs
- Remove task "Ensure local directory exists"
- inventory: setup zuul-executor and merger using group
- bump zuul and nodepool containers versions
- config: refactor the zuul restart logic to only restart it once
- sf-nodepool: Remove usage of 'recurse' for file module
- Bump zuul version 5.2.2-1
- zuul: force zk data cleaning when fqdn change
- Bump zuul container version to 5.2.0-2
- Use Zuul containers 5.2.0-1
- log-classify: disable package installation
- bump zuul and nodepool containers version
- opensearch-dashboard: check elastic url only during postconf
- Change curator container execution
- ManageSF commit
- update zuul container version to 5
- sf-zuul: avoid overlap between sf-elasticsearch and sf-zuul
- nodepool: run the nodepool builder service as root
- gerrit: add service timeout to avoid issue when re-indexing
- zuul: use the latest image to include gear and logreduce
- Update and contenerize Etherpad service
- Change image repository for logstash and curator
- Bump Opensearch to 1.2.4
- containers: revert to local users, then use uidmap with podman
- Add no log when copying k1s configuration
- Disable ara integration for sf-config
- sf-gateway: redirect from gitweb to gitiles
- Use uidmap and unprivileged user for zuul
- Configure gitiles for zuul
- Use sf-curator container
- containers: Remove duplicate or unused field
- Add bash aliases for zuul and nodepool
- sf-zuul: set webclient in zuul.conf
- sf-nodepool: improvments and fixes for nodepool-ubi-5.0.0
- Use sf-logstash container
- Fix errors in testing third party authenticator
- Remove patch_container_command and command for sf-container
- sf-container: remove 'copy from zuul-web' on template
- zuul: Add optional third party authenticators
- logstash: delete old zuul indices
- Use zuul-ubi 5.0.0-0
- Use nodepool 5.0.0-1
- Use gerrit 3.4.3-0
- Remove sf-dlrn from sf-config
- Use nodepool 4.3.0-3
- Bump to nodepool 4.3.0 ubi container
- Increase graph_render.py http timeout to request zuul-web
- zk-cleanup-queue.py added and called from zuul_restart.yml playbook
- Add support for AWS Cloud credentials files
- bump zuul version to 4.12.0 and nodepool to 4.3.0
- Add support for IBM Cloud credentials files
- Enable using patched code in containers
- zuul-ui: Use the UI from zuul-web container
- Set default linters for linters job according to available tools
- gerrit: upgrade to version 3.4.0
- Remove unknown options from sf-container service.j2
- Add Chacha20 and Poly1305 Cipher
- Add logger event to help diagnose CI issue
- Move Opendistro to Opensearch
- sf-base: Disable subscription-manager on CentOS
- sf-container: remove needs_self_signed_ca params
- Change Logstash container image to patched version
- sf-container: mount tls-ca-bundle.pem from host instead using update-ca-trust
- sf-zookeeper: Add zookeeper_purgeInterval variable
- Move logstash and curator to container base service
- Change Gerrit plugins url path
- zuul: use zuul-$service-ubi images
- sf-zuul: use ubi zuul containers
- Fix for multinode deployment
- Improve container creation plays and templates, remove zuul package
- keycloak: add roles handling
- keycloak: update clients when the FQDN changes
- keycloak: fix set_fact variable name, ensure gerrit container run
- Set ca-bundle cert for job-logs-gearman-worker
- sf-gerrit: use container instead package
- Fix typo when setting up SSL cert config
- Remove include kibana autologin configuration in apache config
- sf-zuul: Add ansible_setup_timeout parameter
- sf-ssh: use hostnamectl instead hostname command
- Set default value for readonly_user_autologin to Basic
- Setup external Logstash service
- Autologin as kibana_viewer read only user
- Change file mode from integer to string
- containers: use quay.io containers for zuul and nodepool services
- Pin influxdb version to 1.8.6
- sf-telegraf: fix issues for telegraf-1.19.1-1.x86_64
- sf-nodepool: use upstream containers instead packages
- sf-zuul: use upstream containers instead packages
- Configure external Elasticsearch host
- Allow kibana user make query for checking index stats
- Fix arch order error
- Bump Opendistro components to 1.13.2
- base: use the logserver hostname directly in the post playbook
- Fix podman image prune for CentOS 7 host
- gerrit: Ensure package can be upgraded
- zuul: remove the wait for gearman server task
- sf-grafana: force grafana to 7.5.7
- gerrit: prioritize custom commentlinks
- sf-repos: Add local gear module for submit-log-processor-jobs
- Remove repoxplorer
- config-check: add new zuul.conf required options and force restart
- [zookeeper] Add whitelist commands required by zookeeper-explorer
- Integrate Opendistro with Keycloak
- provision-demo: make gerrit user pre-provisioning idempotent with keycloak
- k1s: add cron job to prune old podman images
- logserver: move generic FilesMatch for .gz to the top
- cgit: set the Access-Control-Allow-Origin header
- Fix base directory for dhall config check
- Support last package of lodgeit
- Added support for external Elasticsearch connection for Zuul
- Fix integration problems with keycloak
- zuul: add keystore secret
- Do not restore Kiban objects on setup
- Change Java OpenJDK to 11
- managesf: ensure the service is restarted on upgrade
- Improve kibana backup and restore process
managesf-0.27.6
- Resources: Support Zuul's admin-rules
- Replace gitweb base_url by gitiles
- Remove deprecated RepoXplorer class and tests
- Resources: convert gerrit ACLs into Zuul admin rules
- gerrit: Add support for gerrit 3.4
- Add required fields for pypi upload
- Add upload-pypi job, update nodeset
- gerrit: fix keycloak scheme external id
- hound: add pagure and gitlab connection support
Package diff
Updated
- cauth.el7: 0.19.1-2 -> 0.20.0-2
- gerritbot.el7: 0.5.1-1 -> 0.5.1-4
- lodgeit.el7: 0.2-2 -> 0.3-1
- managesf.el7: 0.26.1-11 -> 0.27.6-11
- pynotedb.el7: 0.2.1-1 -> 0.2.2-1
- python-sfmanager.el7: 0.8.0-1 -> 0.8.4-1
- python3-pillow.el7: 4.3.0-1 -> 8.2.0-2
- sf-config.el7: 3.6.7-3 -> 3.7.9-4
- sf-docs.el7: 3.6.1-1 -> 3.7.1-1
- sf-elements.el7: 0.6.2-2 -> 0.7.0-2
- sf-release.el7: 3.6.0-1 -> 3.7-1
- sf-ui.el7: 0.2.3-1 -> 0.2.7-1
- zuul-jobs.el7: 0.1-0.25.20210225gita31d70e -> 0.1-0.26.20220221gite160f59
Removed
- bubblewrap-0.3.3-1.el7
- diskimage-builder-3.12.0-1.el7
- elasticsearch-curator-5.8.1-1.el7
- etherpad-1.7.5-3.el7
- gerrit-3.2.6-6.el7
- gitweb-theme-kogakure-1.8.3.1-120170220git4305b35.el7
- logreduce-0.6.1-1.el7
- nodepool-4.1.0-1.el7
- python3-adal-1.2.6-2.el7
- python3-aniso8601-8.1.0-2.el7
- python3-azure-common-1.1.26-1.el7
- python3-azure-core-1.11.0-1.el7
- python3-azure-mgmt-compute-18.2.0-1.el7
- python3-azure-mgmt-core-1.2.2-1.el7
- python3-azure-mgmt-network-17.1.0-1.el7
- python3-azure-mgmt-resource-15.0.0-1.el7
- python3-distlib-0.3.1-5.el7
- python3-filelock-3.0.12-1.el7
- python3-google-api-core-1.26.0-1.el7
- python3-googleapis-common-protos-1.52.0-1.el7
- python3-graphene-3.0b7-1.el7
- python3-graphql-core-3.1.2-1.el7
- python3-graphql-relay-3.0.0-1.el7
- python3-isodate-0.6.0-1.el7
- python3-jenkinsapi-0.3.10-1.el7
- python3-msrest-0.6.21-1.el7
- python3-msrestazure-0.6.4-1.el7
- python3-protobuf-3.14.0-1.el7
- python3-rehash-1.0.0-1.el7
- python3-ruamel-yaml-clib-0.2.2-1.el7
- python3-virtualenv-20.4.2-1.el7
- repoxplorer-1.6.0-5.20200811.59bbf6f.el7
- zuul-4.6.0-3.el7
- zuul-executor-ansible-25-2.5.15-3.el7
- zuul-executor-ansible-26-2.6.20-2.el7
- zuul-executor-ansible-27-2.7.18-1.el7
- zuul-executor-ansible-28-2.8.13-1.el7
- zuul-executor-ansible-29-2.9.27-1.el7
- zuul-results-gerrit-plugin-0.2.0-1.el7
Summary
Updated: 13 Downgraded: 0 Added: 0 Deleted: 39 Arch changed: 0 Total packages: 360 -> 321
Digest
The packages are signed with this key: E46E04A2344803E5A808BDD7E8C203A71C3BAE4B - release@softwarefactory-project.io
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 334fb22614e58a1011744db721ef993c7d48ed1f3f1f177470ac4305033e7f23 /mnt/koji/repos/sf-3.7-el7-release/Mash/sf-release-3.7-1.el7.noarch.rpm -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJifNaaAAoJEOjCA6ccO65LtjUP/1eBcL4TKS6Bdasmbpx/QoGD VUKsIe4wM760hGUNv2sGpru2pomjCiiTYZv4Bajq4f5SVjH5uNN2adh9FlwZSiDM zUvUS75Kdb5lMaIUDHCNgGMlwMNA/oev1cy8I/UTDzsOhenXbipAFIx51RCRKU8S Bg5DMZCrLD6F8C1EOR5s7UsBGnntqNHdMf/u3nB9STinECnbXZi4vGlPkBLvK2Ef FaPipVe4Pg4HDZ+3OcRv2D2MFrpIxZRYzaVMUisYzYGpM8EVItzN1HBJsav/khoR 5uCan8xqoOnlU+9trbrCg2cou/6cdrVJM46+pEEkpY6BJ7PfPOH4bFiixVwRWMzQ ELBasUGWwZ/lZ5FMKd1/HMOMmJ5QPoOmVcy9dWIjlaWqjwVv2X1G3shX7YrfO7Co s50wiVYJCXnv/1hFudnh2Qb+kY9rJz9+cIzlzhov3L/onhEDAPXg1IhyZW2CZDxU 5jH/o6WnLJE1Fmy0hUISDgE0FO/GzOaK2KipfgLbn4IuSBoHs5qHUHbCeFnKcZeP qn7TuX9YpGmtX+YdQp5TPONFlomf64bdyFtylN8Uq3yfG2rgvVPH8lLUt/1vkx8v ekUsnQ6gXcooOOtmTJz/Yx0tOmAYMgG9uCmtGGcMEzIIflZjbwCPZGjIVqShn9oc 7K5MAwCjq7QisaVtcxUq =TItc -----END PGP SIGNATURE-----