From bcb87d3be78cb02e3d98d491a9bf47e8c044a02a Mon Sep 17 00:00:00 2001
From: Pierre Riteau <pierre@stackhpc.com>
Date: Wed, 17 Jan 2024 17:46:06 +0100
Subject: [PATCH] Switch IPA builds to CentOS Stream 9 for yoga

Latest Python 3.6 packages in CentOS Stream 8 break TLS in eventlet,
which affects IPA. See [1] for context.

[1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/NMCPYYHUPG766V5MGUUEKNIDEV6RCELC/

Change-Id: Ib6421e09dd1e8077397433b51a4a707d34b9a2a6
---
 ansible/group_vars/all/ipa                                | 2 +-
 .../notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml   | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml

diff --git a/ansible/group_vars/all/ipa b/ansible/group_vars/all/ipa
index 0d88e4dfe..b7d589208 100644
--- a/ansible/group_vars/all/ipa
+++ b/ansible/group_vars/all/ipa
@@ -44,7 +44,7 @@ ipa_build_dib_elements: >
 ipa_build_dib_env_default:
   # TODO(mgoddard): Use {{ os_release }} here when we use os_distribution
   # above.
-  DIB_RELEASE: "8-stream"
+  DIB_RELEASE: "9-stream"
   DIB_REPOLOCATION_ironic_python_agent: "{{ ipa_build_source_url }}"
   DIB_REPOREF_ironic_python_agent: "{{ ipa_build_source_version }}"
   DIB_REPOREF_requirements: "{{ openstack_branch }}"
diff --git a/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml b/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml
new file mode 100644
index 000000000..1a8c39176
--- /dev/null
+++ b/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml
@@ -0,0 +1,8 @@
+---
+upgrade:
+  - |
+    Ironic Python Agent images are now built using CentOS Stream 9 by default.
+fixes:
+  - |
+    Fixes issues with TLS and eventlet affecting Ironic Python Agent. IPA
+    images should be rebuilt for affected deployments.