Pin confluent-kafka

Building this wheel is failing in opendev.

Disable the upgrade job because we currently can't install the
old-side deps.  It will be re-enabled in the next commit.

Increase the delay when waiting for certs in the quickstart.  Not
strictly related to this change, but recent external factors have
caused increased delays at the same time we're tring to get this
merged.

Change-Id: I8c9315827e79d8a913b8c59889a18394e1671d33

.zuul.yaml

@@ -391,7 +391,7 @@
         - zuul-nox-py311
         - zuul-nox-py311-multi-scheduler
         - zuul-nox-py312
-        - zuul-nox-upgrade
+        # - zuul-nox-upgrade
         - zuul-build-dashboard-openstack-whitelabel
         - zuul-build-dashboard-software-factory
         - zuul-build-dashboard-opendev
@@ -423,7 +423,7 @@
             nodeset: ubuntu-jammy
         - zuul-nox-py311
         - zuul-nox-py312
-        - zuul-nox-upgrade
+        # - zuul-nox-upgrade
         - zuul-build-dashboard
         - nodejs-run-lint:
             vars:

doc/source/examples/playbooks/wait-to-start-certs.sh

@@ -5,7 +5,7 @@
 
 wait_for_certs() {
     echo `date -Iseconds` "Wait for certs to be present"
-    for i in $(seq 1 120); do
+    for i in $(seq 1 300); do
         # Introduced for 3.7.0: zookeeper shall wait for certificates to be available
         # examples_zk_1.examples_default.pem is the last file created by ./tools/zk-ca.sh
         [ -f /var/certs/keystores/examples_zk_1.examples_default.pem ] && return

requirements.txt

@@ -42,7 +42,8 @@ opentelemetry-sdk>=1.25.0
 grpcio==1.69.0
 opentelemetry-exporter-otlp-proto-grpc>=1.25.0
 opentelemetry-exporter-otlp-proto-http>=1.25.0
-confluent-kafka
+# TODO: remove version pin; 2.8.1 cannot build wheel in opendev
+confluent-kafka<2.8.1
 google-cloud-pubsub
 # For openstack driver
 openstacksdk>=0.103.0,!=2.0.0