Switch to CentOS Stream 10 IPA images on Rocky 10

[owenjones]

CentOS Stream 10 IPA images are now working - image building workflow has been updated to enable building images and pulp tags and IPA pulp tag selection updated to make use of these new images rather than CentOS Stream 9 images as are currently used.

IPA images built on Rocky 10 are still a WIP - ironic-python-agent-builder doesn't support yet.

Summary by CodeRabbit

• New Features
  • Added support for Rocky Linux 10 IPA image builds and promotion for both x86_64 and aarch64.
  • Added version tracking for Rocky Linux 10 images.
• Bug Fixes
  • Rocky 10 image selection now uses the correct release and architecture-specific versions.
  • Resolved known CentOS Stream 10 IPA image issues, enabling use with Rocky 10 hosts.
• Chores
  • Updated build and promotion checks to better validate selected image options.

[coderabbitai]

📝 Walkthrough

Walkthrough

Changes

Rocky Linux 10 IPA images

Layer / File(s)	Summary
Image metadata and selection etc/kayobe/pulp-ipa-image-versions.yml, etc/kayobe/stackhpc-ipa-images.yml, releasenotes/notes/...	Adds Rocky Linux 10 image versions, direct release URL selection, architecture-specific version selection, and a compatibility release note.
Rocky Linux 10 image builds .github/workflows/ipa-image-build.yml	Adds validated Rocky Linux 10 inputs, fixed Ubuntu 24.04 builders, container tooling, and x86_64 and aarch64 build, upload, logging, and failure handling.
Rocky Linux 10 image promotion .github/workflows/ipa-image-promote.yml	Adds Rocky Linux 10 promotion inputs, validation, and Kayobe promotion steps for both architectures.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Operator
  participant BuildWorkflow as ipa-image-build.yml
  participant Builder as Terraform builder VM
  participant Pulp
  participant PromoteWorkflow as ipa-image-promote.yml
  participant Kayobe as pulp-artifact-promote.yml
  Operator->>BuildWorkflow: Select Rocky Linux 10 architecture
  BuildWorkflow->>Builder: Create fixed Ubuntu 24.04 builder
  Builder->>Builder: Install Docker, containerd, and Buildx
  BuildWorkflow->>Builder: Build Rocky Linux 10 IPA image
  Builder->>Pulp: Upload image artifacts and logs
  Operator->>PromoteWorkflow: Select Rocky Linux 10 architecture
  PromoteWorkflow->>Kayobe: Promote the Rocky Linux 10 artifact

Loading

Possibly related PRs

• stackhpc/stackhpc-kayobe-config#2458: Modifies the same Rocky Linux 10 build and promotion workflows.
• stackhpc/stackhpc-kayobe-config#2468: Modifies Rocky IPA image version configuration.
• stackhpc/stackhpc-kayobe-config#2486: Contains the same Rocky Linux 10 workflow and Kayobe configuration changes.

Suggested reviewers: bbezak, dougszumski

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: switching Rocky 10 to use CentOS Stream 10 IPA images instead of Stream 9 images, which is reflected throughout the changeset including workflow updates, image version configuration, and release notes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 2026.1/update-ipa

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@etc/kayobe/pulp-ipa-image-versions.yml`:
- Around line 5-6: Disable Rocky 10 IPA artifacts until
ironic-python-agent-builder supports them: remove or unset the Rocky 10 usable
version tags in etc/kayobe/pulp-ipa-image-versions.yml (lines 5-6), retain the
Rocky 10-to-9 fallback in etc/kayobe/stackhpc-ipa-images.yml (lines 19-27),
update the release note in
releasenotes/notes/centos-stream-10-ipa-dde5cf23f432b541.yaml (lines 4-6) to
state the upstream limitation, and default the Rocky 10 build and promotion
inputs to false in .github/workflows/ipa-image-build.yml (lines 14-21) and
.github/workflows/ipa-image-promote.yml (lines 14-21).

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: c472c071-62ce-4c91-b511-11e38b2a9084

📥 Commits

Reviewing files that changed from the base of the PR and between 625c066 and 819f677.

📒 Files selected for processing (5)

• .github/workflows/ipa-image-build.yml
• .github/workflows/ipa-image-promote.yml
• etc/kayobe/pulp-ipa-image-versions.yml
• etc/kayobe/stackhpc-ipa-images.yml
• releasenotes/notes/centos-stream-10-ipa-dde5cf23f432b541.yaml