Change-Id: Id292915fc4c4fefd86a6da431b35daf5faf45523
(cherry picked from commit eacbe8a0)

If ironic-python-agent is not installed in the IPA image using
upper-constraints, the ironic-lib selected by pip for installation may
be newer than ipa.

Use upper-constraints for the same version as ironic-python-agent when
installing it, by passing the DIB_REPOREF_requirements environment
variable to ironic-python-agent-builder.

Closes-Bug: #2089263
Change-Id: I6e33f9897dc7efc57987872ffccdfbe0fc78cc52
(cherry picked from commit 89849c1c)

Change-Id: Ib972ff0395c338344e9d95fd588dc46d98db96d6

This avoids leaking repository credentials by suppressing the dict
output to only print the key.

Change-Id: Ic7aa0e4c4f625908aeb30de65edac8bce96af761
Related-Bug: #2087938

When using the custom playbook feature, it is possible to affect the
behaviour of internal kayobe playbooks by installing newer versions of
roles, collections, or plugins. This is almost always undesirable. It
occurs because ansible extensions in kayobe config currently have
precedence over the kayobe internal variants. We can prevent users
accidentally breaking kayobe internal playbooks by searching for
extensions in paths in the kayobe install first, followed by kayobe
config (but only when running internal playbooks). The behaviour when
running external playbooks is unchanged. This method still allows you to
install additional plugins, which can be useful in kayobe config e.g
processing a variable with a custom filter plugin.

Change-Id: I34f0351dbcb50104c9a4d6706d94a349c3ea3b9f
Closes-Bug: #2056473
Co-Authored-By: Matt Crees <mattc@stackhpc.com>

This brings in improvements like --check --diff support

Change-Id: I3a07902d5bd92d0e0178d93e2a0994a19b376884

Change-Id: I7a9aa9abf611cdaa47cc91f40a6753f23a7f187e
Closes-Bug: #2087556

TrivialFix

Change-Id: Ia56d98d5ad335de7b32261aa3617aee4780a1e70

The Zed release which introduced support for Rocky Linux 9 is now
unmaintained, let's remove this upgrade note.

Change-Id: I19263f7c1b8ed130fd41a78aab6574fb629f4cb7

This change bumps up the maximum supported Ansible version to 10.x
(ansible-core 2.17.x) and minimum to 9.x. This synchronises Kayobe with
Kolla Ansible.

Change-Id: Idfbf0eed0b2333d550f822e40a0d96ae227f6159

The allowlist_externals alias was added in 3.18.0 [1].

[1] https://tox.wiki/en/3.18.0/changelog.html

Change-Id: I95d0ab47444cd7b39a228b7a60d078d8f6589a0f

Change-Id: Ifcf827b33b6d8f7df7490bca753e098e3073ab22

Change-Id: I4b3e4630942d860c8c4b8e85a794ba6ae920e6e0

Change-Id: If0f3ab6f26aa774cf6176d992ec1180f2c0d7838

Change-Id: I5165ab758d2a7040d22b139813f0dce45fa0d59e

These commands were renamed in the kolla-ansible CLI rewrite [1].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/923110

Change-Id: Ife01620ec75bce441004562865a321721491be5d

Switch all dependencies to use the OpenStack 2024.2 release.

This commit should be reverted on the master branch once the Kayobe
stable/2024.2 branch has been cut and RC1 released.

Change-Id: I5419cdb9638c0a9f9b8f7ebf3b551dc2f490d884

Change-Id: I55ce4e2bebfeb5d82480a4f0d902a0f2a04fb1ae

This test often fails on Ubuntu 24.04 [1], making it difficult to merge
patches. Skip this test until we force time synchronisation.

[1] https://zuul.opendev.org/t/openstack/builds?job_name=kayobe-overcloud-host-configure-ubuntu-noble&project=openstack/kayobe

Change-Id: I222ad8e7ed66cde1f3fb225fa5cdc30c7ed80c99

This synchronises this code with kolla-ansible [1], preemptively fixing
issues with Python 3.12.

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/933633

Change-Id: I027c48d7ff6fe06e1898720273fef3da571aabe4

The --key argument of kolla-ansible was removed in the rewrite [1].
Replace its use by --vault-password-file introduced ages ago [2].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/923110
[2] https://review.opendev.org/c/openstack/kolla-ansible/+/504480

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933633
Change-Id: I8b0882b5c807665ae27550ff6d2ffaf488323f08

This matches a recent change in kolla-ansible [1].

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/913724

Change-Id: I8a7a84025e93c4dcb1285bc28f3bd481bbdfff32

This should have been added when proxysql was added to kolla [1] and
kolla-ansible [2].

ProxySQL is disabled by default in this change to allow backports. It
will be enabled in a follow-up patch only for the master branch.

[1] https://review.opendev.org/c/openstack/kolla/+/769385
[2] https://review.opendev.org/c/openstack/kolla-ansible/+/770215

Change-Id: I683b685bf4e2f625144e4656bcd69c03eda7aa51