2026.1: remove references to RL9 from etc/kayobe/

[Alex-Welsh]

Removing RL9 references from the etc/kayobe/ directory
This should be everything except the ipa image config, which we're waiting on some fixes for right now. It'll be forward-ported from Epoxy once it merges there

Summary by CodeRabbit

• Configuration Updates

  • Standardized supported deployments on Rocky Linux 10 and Ubuntu Noble, removing Rocky Linux 9 options and upgrade workflows.
  • Updated repository selections to OpenSearch 3.x and MariaDB 11.4.
  • Updated NVIDIA DOCA/OFED support for Rocky Linux 10.
  • Retained Valkey support while removing legacy Redis configuration.

• Security

  • Updated CIS hardening and vulnerability detection settings for RHEL 10.
  • Enabled audit template updates.

• Maintenance

  • Updated automated image builds and removed obsolete Rocky Linux 9 GRUB fixes.

[coderabbitai]

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d5fd55f5-50b8-43fe-a1b8-368fc2654907

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Changes

The configuration removes Rocky Linux 9 and RHEL 9 support from repositories, hardening, images, DOCA, and environment settings. Remaining operating-system settings target Rocky Linux 10 or RHEL 10. Selected MariaDB and OpenSearch versions were updated.

Rocky Linux 10 transition

Layer / File(s)	Summary
Repository and package configuration etc/kayobe/dnf.yml, etc/kayobe/ofed.yml, etc/kayobe/kolla.yml, etc/kayobe/stackhpc.yml	Repository and DOCA settings no longer define Rocky Linux 9 or RHEL 9 streams.
Host image and provisioning targets etc/kayobe/environments/aio/automated-setup.sh, etc/kayobe/environments/aio/globals.yml, etc/kayobe/pulp-host-image-versions.yml, etc/kayobe/pulp-ipa-image-versions.yml, etc/kayobe/stackhpc-overcloud-dib.yml	Automation images, host image variables, DIB options, and release documentation reference Rocky Linux 10.
CIS hardening configuration etc/kayobe/ansible/maintenance/cis.yml, etc/kayobe/ansible/requirements.yml	RHEL 9 CIS role dependencies and execution settings were removed. RHEL 10 checks remain.
Environment and runtime integration etc/kayobe/environments/aio/release-train.yml, etc/kayobe/environments/ci-builder/stackhpc-ci.yml, etc/kayobe/environments/ci-multinode/stackhpc-ci.yml, etc/kayobe/environments/aio/kolla/config/nova/nova-compute.conf, etc/kayobe/inventory/group_vars/wazuh-manager/wazuh-manager	Repository mappings, MariaDB and OpenSearch versions, libvirt CPU settings, and vulnerability detector OS lists were updated.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

• stackhpc/stackhpc-kayobe-config#2452: Updates overlapping RHEL 10 CIS configuration.
• stackhpc/stackhpc-kayobe-config#2457: Updates overlapping Rocky Linux and OFED configuration.
• stackhpc/stackhpc-kayobe-config#2466: Updates the DOCA kernel version mapping.

Suggested reviewers: bbezak

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely summarizes the main change: removing RL9 references from the etc/kayobe/ configuration for 2026.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 2026.1-config-purge-rl9

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@etc/kayobe/environments/ci-tenks/automated-deployment.sh`:
- Around line 13-14: Update the existing checkout handling in
automated-deployment.sh so reruns synchronize $HOME/src/kayobe-config with
KAYOBE_CONFIG_REF and $HOME/src/kayobe with KAYOBE_BRANCH, rather than skipping
fetch/checkout when directories already exist. Fetch the requested refs and
check them out, or fail fast if the existing clones cannot match the requested
refs.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 628a279a-1512-4476-9795-d344321c4930

📥 Commits

Reviewing files that changed from the base of the PR and between b9da43f and e957ac9.

📒 Files selected for processing (23)

• etc/kayobe/ansible/fixes/fix-grub-rl9.yml
• etc/kayobe/ansible/maintenance/cis.yml
• etc/kayobe/ansible/maintenance/rocky-97-ofed-upgrade.yml
• etc/kayobe/ansible/requirements.yml
• etc/kayobe/dnf.yml
• etc/kayobe/environments/aio/automated-setup.sh
• etc/kayobe/environments/aio/globals.yml
• etc/kayobe/environments/aio/inventory/group_vars/cis-hardening/cis
• etc/kayobe/environments/aio/kolla/config/nova/nova-compute.conf
• etc/kayobe/environments/aio/release-train.yml
• etc/kayobe/environments/ci-builder/stackhpc-ci.yml
• etc/kayobe/environments/ci-multinode/inventory/group_vars/cis-hardening/cis
• etc/kayobe/environments/ci-multinode/stackhpc-ci.yml
• etc/kayobe/environments/ci-tenks/automated-deployment.sh
• etc/kayobe/inventory/group_vars/cis-hardening/cis
• etc/kayobe/inventory/group_vars/controllers/cis
• etc/kayobe/inventory/group_vars/wazuh-manager/wazuh-manager
• etc/kayobe/kolla.yml
• etc/kayobe/ofed.yml
• etc/kayobe/pulp-host-image-versions.yml
• etc/kayobe/pulp-ipa-image-versions.yml
• etc/kayobe/stackhpc-overcloud-dib.yml
• etc/kayobe/stackhpc.yml

💤 Files with no reviewable changes (13)

• etc/kayobe/ansible/fixes/fix-grub-rl9.yml
• etc/kayobe/inventory/group_vars/controllers/cis
• etc/kayobe/ansible/maintenance/rocky-97-ofed-upgrade.yml
• etc/kayobe/environments/ci-multinode/inventory/group_vars/cis-hardening/cis
• etc/kayobe/stackhpc.yml
• etc/kayobe/ansible/requirements.yml
• etc/kayobe/kolla.yml
• etc/kayobe/pulp-host-image-versions.yml
• etc/kayobe/environments/aio/inventory/group_vars/cis-hardening/cis
• etc/kayobe/ofed.yml
• etc/kayobe/inventory/group_vars/cis-hardening/cis
• etc/kayobe/environments/ci-builder/stackhpc-ci.yml
• etc/kayobe/environments/aio/release-train.yml

[priteau]

Aren't we going to have lots of merge conflicts once we merge this? Should we wait until we stop making so many changes to stackhpc/2025.1?

[Alex-Welsh]

Aren't we going to have lots of merge conflicts once we merge this? Should we wait until we stop making so many changes to stackhpc/2025.1?

I'd say we should make 2026.1 the new main branch and start pushing features to it rather than 2025.1 now

[github-actions]

Happy Friday @Alex-Welsh, this is a friendly reminder that this PR is waiting for your changes or response. Please take a look when you have a moment!

Note: Once your changes are ready, remove the waiting-author-response label and add the waiting-review label.