Enable FreeIPA for OSP 17.1 adoption CI by ciecierski · Pull Request #3614 · openstack-k8s-operators/ci-framework

ciecierski · 2026-01-21T15:19:27Z

This commit introduces support for deploying a FreeIPA server within the OSP 17.1 adoption CI.

The following has been added:

Tasks for the initial setup and configuration of a FreeIPA server.
DNS configuration for the undercloud, followed by the execution of undercloud-ipa-install.yaml.
DNS configuration for the overcloud to use the new FreeIPA instance.

Following code has been modified:

hci adoption scenario is updated to include the creation of the FreeIPA vm
do not add the unique ID to osp-underclud name. Predicted hostname of undercloud
is required for ipa installer playbook

Closes: OSPRH-23046

Signed-off-by: Mikolaj Ciecierski mciecier@redhat.com

softwarefactory-project-zuul · 2026-01-21T19:19:16Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b2d7d2aa37dd41da982f20d422be64a9

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 26m 59s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 29m 22s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 50m 40s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 12m 49s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 22s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 03s
❌ cifmw-pod-pre-commit FAILURE in 7m 53s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 31s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 40m 35s
✔️ cifmw-molecule-reproducer SUCCESS in 30m 42s

softwarefactory-project-zuul · 2026-01-22T13:28:59Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/62f44cd4bd794064b5094fd395dc974e

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 33m 06s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 29m 47s
❌ cifmw-crc-podified-edpm-baremetal RETRY_LIMIT in 27m 42s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 1h 47m 05s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 39s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 50s
✔️ cifmw-pod-pre-commit SUCCESS in 8m 19s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 32s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 40m 55s
✔️ cifmw-molecule-reproducer SUCCESS in 14m 47s

jistr · 2026-01-23T16:03:34Z

LGTM

softwarefactory-project-zuul · 2026-01-27T19:50:36Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/eaf4e0e7abc246bda9803bf9e97b9b14

✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 39m 40s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 24m 35s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 23m 35s
❌ cifmw-crc-podified-edpm-baremetal-minor-update RETRY_LIMIT in 28m 45s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 36s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 08s
✔️ cifmw-pod-pre-commit SUCCESS in 8m 23s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 39s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 39m 20s
✔️ cifmw-molecule-reproducer SUCCESS in 13m 51s

softwarefactory-project-zuul · 2026-01-29T11:24:08Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/9d4726e92be54c768e6040ef38aa7aa9

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 01m 05s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 27m 38s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 26m 53s
❌ cifmw-crc-podified-edpm-baremetal-minor-update FAILURE in 1h 46m 46s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 37s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 32s
✔️ cifmw-pod-pre-commit SUCCESS in 9m 26s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 40s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 39m 45s
✔️ cifmw-molecule-reproducer SUCCESS in 14m 56s

softwarefactory-project-zuul · 2026-01-29T21:04:35Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/bfa98e20e83b451fb7d085e92c58c2c9

❌ openstack-k8s-operators-content-provider FAILURE in 6m 29s
⚠️ podified-multinode-edpm-deployment-crc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal-minor-update SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
✔️ cifmw-pod-zuul-files SUCCESS in 4m 33s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 35s
✔️ cifmw-pod-pre-commit SUCCESS in 7m 56s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 39s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 40m 23s
✔️ cifmw-molecule-reproducer SUCCESS in 15m 28s

softwarefactory-project-zuul · 2026-02-03T14:59:35Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/93f85a7df78446549b0b23e4698775e4

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 15m 20s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 17m 45s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 41m 47s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 00m 29s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 56s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 20s
❌ cifmw-pod-pre-commit FAILURE in 8m 07s
✔️ cifmw-molecule-adoption_osp_deploy SUCCESS in 3m 45s
✔️ cifmw-molecule-libvirt_manager SUCCESS in 40m 13s
✔️ cifmw-molecule-reproducer SUCCESS in 15m 27s

Related: OSPRH-23047 Depends-On: openstack-k8s-operators/ci-framework#3614

roles/adoption_osp_deploy/tasks/main.yml

roles/adoption_osp_deploy/tasks/prepare_freeipa.yml

This commit introduces support for deploying a FreeIPA server within the OSP 17.1 adoption CI. The following has been added: - Tasks for the initial setup and configuration of a FreeIPA server. - DNS configuration for the undercloud, followed by the execution of `undercloud-ipa-install.yaml`. - DNS configuration for the overcloud to use the new FreeIPA instance. Following code has been modified: - hci adoption scenario is updated to include the creation of the FreeIPA vm - do not add the unique ID to osp-underclud name. Predicted hostname of undercloud is required for ipa installer playbook Signed-off-by: Mikolaj Ciecierski <mciecier@redhat.com>

amartyasinha · 2026-02-17T12:11:50Z

/lgtm
/approve

openshift-ci · 2026-02-17T12:11:58Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: amartyasinha

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [amartyasinha]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

ciecierski requested a review from vakwetu January 21, 2026 15:19

ciecierski mentioned this pull request Jan 21, 2026

Modify hci scenario to use tls-e for OSP17.1 deployment openstack-k8s-operators/data-plane-adoption#1203

Open

ciecierski force-pushed the tlse-osp-deploy branch from a987909 to e862c6e Compare January 21, 2026 16:50

ciecierski force-pushed the tlse-osp-deploy branch from e862c6e to bf4a409 Compare January 22, 2026 10:54

ciecierski force-pushed the tlse-osp-deploy branch from bf4a409 to 0e7f737 Compare January 23, 2026 14:00

ciecierski added the do-not-merge/hold label Jan 23, 2026

github-actions bot added the Ready For Review label Jan 23, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 0e7f737 to 811d1f7 Compare January 26, 2026 11:37

github-actions bot removed the Ready For Review label Jan 26, 2026

ciecierski force-pushed the tlse-osp-deploy branch 2 times, most recently from 6f609ed to 1b6779e Compare January 26, 2026 11:52

github-actions bot added the Ready For Review label Jan 26, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 1b6779e to 5eb1b76 Compare January 26, 2026 18:07

github-actions bot added Ready For Review and removed Ready For Review labels Jan 26, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 5eb1b76 to 2306e30 Compare January 27, 2026 18:09

github-actions bot removed the Ready For Review label Jan 27, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 2306e30 to 73ce576 Compare January 28, 2026 08:19

github-actions bot added the Ready For Review label Jan 28, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 73ce576 to 582298f Compare January 29, 2026 08:42

github-actions bot removed the Ready For Review label Jan 29, 2026

ciecierski force-pushed the tlse-osp-deploy branch from 582298f to e53bdc1 Compare January 29, 2026 20:23

ciecierski force-pushed the tlse-osp-deploy branch from e53bdc1 to d72f3f6 Compare February 3, 2026 12:43

jbadiapa added a commit to jbadiapa/data-plane-adoption that referenced this pull request Feb 9, 2026

Modify uni01alpha to use tls-e for osp17.1

402596d

Related: OSPRH-23047 Depends-On: openstack-k8s-operators/ci-framework#3614

ciecierski requested a review from jistr February 10, 2026 12:09

jistr previously approved these changes Feb 10, 2026

View reviewed changes