RockyLinux 9.7 containers

[elelaysh]

This PR builds upon #2025.

• it provides an updated overcloud host image and containers based on RockyLinux 9.7;
• cadvisor is updated to 0.54.1 to fix vulnerabitilities;
• opensearch-dashboards is updated to 2.19.4 to fix vulnerabilities.

[gemini-code-assist]

Code Review

This pull request updates the overcloud host image and containers to use RockyLinux 9.7. The changes primarily involve updating version tags and repository configurations. I've identified a few areas for improvement. There's some duplicated logic for determining DOCA distribution strings across configuration files, which I've suggested refactoring for better maintainability. Additionally, I've flagged a potentially invalid CVE identifier in the Trivy allow-list which could impact security scanning.

[gemini-code-assist]

To avoid duplicating logic for determining the DOCA distribution string in etc/kayobe/stackhpc.yml, you could define a reusable variable here and use it in both places. This improves maintainability by having a single source of truth.

I'll add another comment in etc/kayobe/stackhpc.yml showing how to use the new variable.

doca_distribution_path_part: "{% if stackhpc_pulp_doca_version is version('3.2.0', '>=') %}rhel9{% else %}rhel9.{{ stackhpc_pulp_repo_rocky_9_minor_version }}{% endif %}"
doca_distribution: "{{ doca_distribution_path_part | replace('.', '_') }}"
doca_version_lookup_var: "stackhpc_pulp_repo_doca_{{ stackhpc_pulp_doca_version | replace('.', '_') }}_{{ doca_distribution }}_version"

[elelaysh]

Containers built in https://github.com/stackhpc/stackhpc-kayobe-config/actions/runs/20756793939/job/59600968744

[elelaysh]

Successful tempest OVS after upgrade

Ran: 334 tests in 1306.978 sec.
 - Success: 258
 - Skipped: 76
 - Expected failures: 0
 - Unexpected success: 0
 - Failures: 0

Manual inspection : ok

[Alex-Welsh]

Undoing accidental approval, apologies

Alex still can't read the GitHub interface after 7 years

[elelaysh]

All checks passed except zuul.