November 2023 - Release-announce - lists.openstack.org

puppet-openstack-extras 21.0.1 (zed)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are jazzed to announce the release of: puppet-openstack-extras 21.0.1: Puppet module for OpenStack Openstack_extras This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack-extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ For more details, please see below. 21.0.1 ^^^^^^ Bug Fixes * Now the Zed release is used by default. Changes in puppet-openstack-extras 21.0.0..21.0.1 ------------------------------------------------- 60324f2 Prepare new release 3665415 Fix wrong release fac5ca4 Add .pdkignore to exclude some files from tar ball c99d897 Update TOX_CONSTRAINTS_FILE for stable/zed 53a437c Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- .../notes/fix-zed-release-99f23a977cc90e0c.yaml | 4 ++ .../openstack_extras_repo_debian_debian_spec.rb | 14 +++--- .../openstack_extras_repo_debian_ubuntu_spec.rb | 6 +-- .../openstack_extras_repo_redhat_redhat_spec.rb | 6 +-- tox.ini | 2 +- 10 files changed, 73 insertions(+), 17 deletions(-)

1 0

ironic 23.1.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are jazzed to announce the release of: ironic 23.1.0: OpenStack Bare Metal Provisioning This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 23.1.0 ^^^^^^ New Features ************ * Sending signal "SIGUSR2" to a conductor process will now trigger a drain shutdown. This is similar to a "SIGTERM" graceful shutdown but the timeout is determined by "[DEFAULT]drain_shutdown_timeout" which defaults to "1800" seconds. This is enough time for running tasks on existing reserved nodes to either complete or reach their own failure timeout. During the drain period the conductor will be removed from the hash ring to prevent new tasks from starting. Other conductors will no longer fail reserved nodes on the draining conductor, which previously appeared to be orphaned. This is achieved by running the conductor keepalive heartbeat for this period, but setting the "online" state to "False". * While Ironic has not explicitly added support for OVN, because that is in theory a Neutron implementation detail, we have added some basic testing and are pleased to announce that you can use OVN's DHCP service for IPv4 based provisioning with OVN v23.06.00 and beyond. This is not without issues, and we've added ovn documentation (https://docs.openstack.org/ironic/latest/admin/ovn- networking.html) as a result to help provide as much Ironic operator clarity as possible. Known Issues ************ * Use of OVN may require disabling SNAT for provisioning with IPv4 when using TFTP. This is due to the Linux Kernel, and how IP packet handling occurs with OVN. No solution is known to this issue, and use of provisioning technologies which do *not* use TFTP is also advisable. * Use of OVN may require careful attention to the MTUs of networks. Oversized packets and networking may be dropped. That being said this is more likely an issue for testing than with actual physical baremetal in a production deployment. * Use of OVN for IPv6 based PXE/iPXE is not supported by Neutron. The Ironic project expects this to be addressed during the Caracal (2024.1) development cycle. * When configuring a single-conductor environment, make sure the number of worker pools ("[conductor]worker_pool_size") is larger than the maximum parallel deployments ("[conductor]max_concurrent_deploy"). This was not the case by default previously (the options used to be set to 100 and 250 accordingly). Upgrade Notes ************* * Because of a fix in the internal worker pool handling, you may now start seeing requests rejected with HTTP 503 under a very high load earlier than before. In this case, try increasing the "[conductor]worker_pool_size" option or consider adding more conductors. * The default worker pool size (the "[conductor]worker_pool_size" option) has been increased from 100 to 300. You may want to consider increasing it even further if your environment allows that. Bug Fixes ********* * The "parent_node" field, a newly added API field, has been constrained to store UUIDs over the names of nodes. When names are used, the value is changed to the UUID of the node. * Properly eject the virtual media from a DVD device in case this is the only MediaType available from the Hardware, and Ironic requested CD as the device to be used. See bug 2039042 (https://bugs.launchpad.net/ironic/+bug/2039042) for details. * When Ironic hits the limit on the number of the concurrent deploys (specified in the "[conductor]max_concurrent_deploy" option), the resulting HTTP code is now 503 instead of the more generic 500. * The per-node "external_http_url" setting in the driver info is now used for a boot ISO. Previously this setting was only used for a config floppy. * Fixes issue of changing or getting state of indicator LED of attached disk caused by misunderstanding SimpleStorage provides this functionality but actually Storage resource does. * Fixes handling new requests when the maximum number of internal workers is reached. Previously, after reaching the maximum number of workers (100 by default), we would queue the same number of requests (100 again). This was not intentional, and now Ironic no longer queues requests if there are no free threads to run them. Changes in ironic 23.0.0..23.1.0 -------------------------------- 0d59e25cf Use per-node external_http_url for boot ISO 81acd5df2 Implement drain shutdown support f42b359bd Make sqlalchemy-2x job voting again fa8df6919 Fix unit tests broken by olso.utils 1b55e4b4d Document new bug deputy role for Ironic b9baf7dbc eventlet monkey patch in unit tests earlier 43ccb17e1 [api-ref] Add firmware fields to driver API 7639268e7 [api-ref] Complete port name and shard documentation f6b4ad833 Remove outdated pysnmp reference 8154c0a9f Update devstack guide for image id; network always needed c3ee90dda Add inspection hooks 679176ab5 Add the setting of memcached servers to keystone_authtoken 766d2804a Make sure we eject media from DVD when CD is requested 2124d101d Extract generic image publishing code from image_utils d1ca14289 Reset parent_node values to uuids instead of names 124f6425e Refactor publishing images into a new module 40e825ba9 CI: Fix our internal MTU settings 9bd1e033f grenade: convert neutron cli commands to openstack 3f9151163 Introduce conductor touch while offline 224cdd726 Bump workers_pool_size to 300 and remove queueing of tasks 3f77091c6 Enable OVN CI cba10669f Fix the HTTP code for reaching max_concurrent_deploy: 503 instead of 500 6c8a04e8f api-ref for nodes/{node_ident}/firmware 56cbe2569 Do not store ramdisk logs as part of the inventory db549850e Imported Translations from Zanata bbc82fa14 Kickstart: Don't error unit tests ksvalidate is present a31bf57cb Add inspection hooks 7f053dc70 Add inspection hooks 609ccc903 Add inspection hooks 7b91f67df Update master for stable/2023.2 8db7220ba Support port name: API ca5be6338 [DOC] Add a little more clarity regarding parent/child nodes ffde150aa Transiton to Storage resource from SimpleStorage 9516c67b6 DB: Load only one instance for RPC interactions 8c93d7df8 Cleanup if images.fetch fails ad651b328 Remove traces of Docker from devstack dependencies Diffstat (except docs and test files) ------------------------------------- api-ref/source/baremetal-api-v1-drivers.inc | 12 + api-ref/source/baremetal-api-v1-ports.inc | 23 ++ api-ref/source/index.rst | 1 + api-ref/source/parameters.yaml | 59 ++- api-ref/source/samples/driver-get-response.json | 4 + .../samples/drivers-list-detail-response.json | 8 + api-ref/source/samples/port-create-request.json | 1 + api-ref/source/samples/port-create-response.json | 1 + .../source/samples/port-list-detail-response.json | 1 + api-ref/source/samples/port-update-response.json | 1 + bindep.txt | 3 - devstack/files/bindep.txt | 3 - devstack/lib/ironic | 108 +++++- devstack/plugin.sh | 20 +- devstack/settings | 14 + devstack/upgrade/resources.sh | 20 +- .../install/include/configure-ironic-api.inc | 10 +- ironic/api/controllers/v1/node.py | 26 +- ironic/api/controllers/v1/port.py | 27 +- ironic/api/controllers/v1/utils.py | 11 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/common/exception.py | 2 +- ironic/common/image_publisher.py | 187 +++++++++ ironic/common/release_mappings.py | 2 +- ironic/common/rpc_service.py | 46 ++- ironic/conductor/base_manager.py | 20 +- ironic/conductor/inspection.py | 3 + ironic/conductor/rpcapi.py | 4 +- ironic/conf/conductor.py | 2 +- ironic/conf/default.py | 8 + ironic/conf/inspector.py | 55 ++- ironic/db/api.py | 8 +- ironic/db/sqlalchemy/api.py | 4 +- ironic/drivers/modules/image_cache.py | 3 + ironic/drivers/modules/image_utils.py | 304 ++++++--------- .../modules/inspector/hooks/accelerators.py | 80 ++++ .../drivers/modules/inspector/hooks/boot_mode.py | 42 ++ .../modules/inspector/hooks/cpu_capabilities.py | 47 +++ .../modules/inspector/hooks/extra_hardware.py | 83 ++++ .../inspector/hooks/known_accelerators.yaml | 9 + .../inspector/hooks/local_link_connection.py | 123 ++++++ ironic/drivers/modules/inspector/hooks/memory.py | 41 ++ .../drivers/modules/inspector/hooks/parse_lldp.py | 87 +++++ .../drivers/modules/inspector/hooks/pci_devices.py | 84 ++++ .../modules/inspector/hooks/physical_network.py | 99 +++++ .../drivers/modules/inspector/hooks/raid_device.py | 84 ++++ .../drivers/modules/inspector/hooks/root_device.py | 109 ++++++ ironic/drivers/modules/inspector/lldp_parsers.py | 364 ++++++++++++++++++ ironic/drivers/modules/inspector/lldp_tlvs.py | 365 ++++++++++++++++++ ironic/drivers/modules/redfish/boot.py | 19 +- ironic/drivers/modules/redfish/inspect.py | 14 +- ironic/drivers/modules/redfish/management.py | 58 +-- ironic/objects/conductor.py | 4 +- ironic/objects/port.py | 12 + .../modules/inspector/hooks/test_accelerators.py | 80 ++++ .../modules/inspector/hooks/test_boot_mode.py | 37 ++ .../inspector/hooks/test_cpu_capabilities.py | 37 ++ .../modules/inspector/hooks/test_extra_hardware.py | 165 ++++++++ .../inspector/hooks/test_local_link_connection.py | 178 +++++++++ .../drivers/modules/inspector/hooks/test_memory.py | 38 ++ .../modules/inspector/hooks/test_parse_lldp.py | 422 +++++++++++++++++++++ .../modules/inspector/hooks/test_pci_devices.py | 73 ++++ .../inspector/hooks/test_physical_network.py | 86 +++++ .../modules/inspector/hooks/test_raid_device.py | 107 ++++++ .../modules/inspector/hooks/test_root_device.py | 178 +++++++++ .../unit/drivers/modules/redfish/test_boot.py | 44 ++- .../unit/drivers/modules/redfish/test_inspect.py | 63 ++- .../drivers/modules/redfish/test_management.py | 141 ++++++- playbooks/ci-workarounds/get_extra_logging.yaml | 11 + ...rain-parent-node-to-uuids-51642cacfea0714d.yaml | 6 + releasenotes/notes/drain-5eafd17e0868e21a.yaml | 14 + .../fix-eject-media-dvd-b1994446ea71be9c.yaml | 8 + .../max_concurrent_deploy-7a31ba142bf5ad5c.yaml | 6 + ...ode-iso-external_http_url-c5e3fa9ae4960dd6.yaml | 5 + .../notes/ovn-support-6666dfa2e99e7ad4.yaml | 25 ++ ...torage-over-simplestorage-ccb3e0e38bfe8712.yaml | 6 + releasenotes/notes/workers-20ca5c225c1474e0.yaml | 25 ++ releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 26 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ++++++++ requirements.txt | 2 + setup.cfg | 11 + zuul.d/ironic-jobs.yaml | 51 ++- 107 files changed, 5167 insertions(+), 633 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e57c72049..aa0e212b3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -50,0 +51,2 @@ sushy>=4.3.0 +construct>=2.9.39 # MIT +netaddr>=0.9.0 # BSD

1 0

ironic-python-agent 9.8.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are pumped to announce the release of: ironic-python-agent 9.8.0: Ironic Python Agent Ramdisk This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.8.0 ^^^^^ New Features ************ * Introducing basic authentication and configurable authentication strategy support for image and image checksum download processes. This feature introduces 3 new variables that could be set (either via oslo.config or image_info) to select the authentication strategy an provide credentials for HTTP(S) basic authentication. The 3 variables are structured in way that 1 of them 'image_server_auth_strategy' (string) provides the ability to select between authentication strategies by specifying the name of the strategy. Currently the only supported authentication strategy is the 'http-basic' which will make IPA use HTTP(S) basic authentication also known as the 'RFC 7617' standard. The other 2 variables 'image_server_password' and 'image_server_user' provide username and password credentials for image download processes. The 'image_server_password' and 'image_server_user' are not strategy specific and could be reused for any username + password based authentication strategy, but for the moment these 2 variables are only used for the 'http-basic' strategy. 'image_server_basic_auth' not just enables the feature but enforces checks on the values of the 2 related credentials. When the 'http-basic' strategy is enabled for image server download workflow the download logic will make sure to raise an exception in case any of the credentials are None or an empty string. Values coming from 'image_info' are prioritized over values coming from the 'oslo.config' framework and the 2 different credential source can't be mixed. Passing 1 or 2 out of the 3 from and source and the remaining values from an other source will result in a exception. * Adds numa_node id when collecting pci device info during inspection. * The Nvidia Mellanox "clean steps" to facilitate firmware updates of their network devices, are now available as deploy steps and service steps as well. Deprecation Notes ***************** * Removed the partial-implementation of image caching. This method was never used by Ironic, and was a vestige of a feature which was never completed. Image caching, if it were to be implemented today, would not use this method anyway. Bug Fixes ********* * Fixes a failure case where downloads would not be retried when the checksum fails verification. the agent now includes the checksum activity as part of the file download operation, and will automatically retry downloads when the checksum fails in accordance with the existing download retry logic. This is largely in response to what appears to be intermittent transport failures at lower levels which we cannot otherwise detect. * The default timeout value for the agent to lookup itself in an Ironic deployment has been extended to 600 seconds from 300 seconds. This is to provide better stability for Ironic deployments under heavy load which may be unable to service new requests. This is particularly true when the backing database is SQLite for Ironic due to the limited write concurrency of the database. * Fix the logic to detect the right parent device for a given multipath device. * Fixes the error handling of multipathd service startup/discovery process. IPA handles both scenario when the multipathd service is already started and the scenario when the service has not been started and in the second scenario IPA will try to start the service. IPA is not checking whether multipathd is running already and not, it will start the multipathd service even it is already running and expects 0 error code even if the service is already running. It has been noticed that with certain combinations of distros and multipathd versions the error code is not 0 when IPA tries to start multipathd when an instance of multipathd is already running. When the expected return code is not 0 that causes an exception and that will cause the multipath device discovery to terminate prematurely and if the selected root device is a multipath device then IPA won't be able to provision. This fix discards the exception that is caused by the non 0 error code returned by the multipathd startup process. In case there is a genuine issue with the multipath service, that would be caught when the actual multipath device listing command is executed (multipath -ll). * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. Changes in ironic-python-agent 9.7.0..9.8.0 ------------------------------------------- 0a29206 Handle different device outputs for multipath 7a52314 fix multipathd error handling release notes 26be55f Test coverage for efi_utils.get_boot_record 3d42298 Remove standby.cache_image support 76ad062 Get numa_node info when collecting pci devices info 13537db improve multipathd error handling dbf3e54 Replace shlex module with helper function cb61a8d Retry on checksum failures 7096178 implement basic-auth support for user-image download process 25704d2 Add additional mock tests to unit tests for read only devices. Change ordering to ensure mock tests work correctly. db9545e Update master for stable/2023.2 f86975d Add mlnx deploy_step entry to enable deploy time firmware 4efcce5 Extend the lookup timeout to 600 seconds 286d667 Conditional creation of RAIDed ESP for UEFI Software RAID Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/config.py | 27 +- ironic_python_agent/extensions/standby.py | 163 ++++++++--- ironic_python_agent/hardware.py | 23 +- ironic_python_agent/hardware_managers/mlnx.py | 5 +- ironic_python_agent/inspector.py | 14 +- ironic_python_agent/partition_utils.py | 132 ++++----- ironic_python_agent/raid_utils.py | 112 ++++--- ...uth-for-user-image-server-150835e7567444da.yaml | 27 ++ .../cache-image-removal-3b5a80a6038a320b.yaml | 5 + ...dering-download-completed-91cca9fef34d8cf5.yaml | 11 + ...extend-ipa-lookup-timeout-05ee5b1372792dbe.yaml | 9 + ...x-multipath-parent-device-e85afad63159250c.yaml | 5 + .../notes/get_numa_node-eeab34a92739b6f6.yaml | 3 + ...-now-available-for-deploy-4a4226ffaae888f3.yaml | 6 + ...rror_handling_improvement-1669d0de4bfdbe95.yaml | 19 ++ .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + 26 files changed, 952 insertions(+), 363 deletions(-)

1 0

cinderlib 5.2.0 (bobcat)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are satisfied to announce the release of: cinderlib 5.2.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. Changes in cinderlib 5.1.0..5.2.0 --------------------------------- ab28330 Continue 2023.2 (Bobcat) development f1af46d persistence: Handle switch to alembic 98fc4b6 Add sqlalchemy-migrate dependency 6bb58dd Use openstack-tox-py311 fb61781 Add tooz to test-requirements 496ef8d Open cinderlib for 2023.2 (Bobcat) development b66c34f Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 67 +++++++++++++++------------ cinderlib/persistence/dbms.py | 17 ++++--- releasenotes/source/2023.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 6 +-- test-requirements.txt | 1 + tox.ini | 10 ++-- 8 files changed, 68 insertions(+), 48 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e4fb968..4567e27 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1,2 @@ -# restrict cinder to the 2023.1 series only -cinder>=22.0.0,<23.0.0 # Apache-2.0 +# restrict cinder to the 2023.2 series only +cinder>=23.0.0,<24.0.0 # Apache-2.0 @@ -4 +4 @@ cinder>=22.0.0,<23.0.0 # Apache-2.0 -os-brick>=6.2.0 # Apache-2.0 +os-brick>=6.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 97d223b..f2b2a57 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testtools>=2.4.0 # MIT +tooz[etcd3gw]>=2.8.0 # Apache-2.0

1 0

ironic-inspector 11.8.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are amped to announce the release of: ironic-inspector 11.8.0: Hardware introspection for OpenStack Bare Metal This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. Changes in ironic-inspector 11.7.0..11.8.0 ------------------------------------------ ad4664b Drop before_first_request usage of Flask app da6a446 [CI] Add sqlalchemy 2.0 unit testing 24733d0 SQLAlchemy 2.0 - Fix items lost in migration 1d2a6d7 Fix python shebang fbfe131 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- ironic_inspector/db/__init__.py | 2 - .../882b2d84cb1b_attribute_constraints_relaxing.py | 4 +- ...d00d6e3f38c4_change_created_finished_at_type.py | 8 +-- ironic_inspector/main.py | 7 ++- ironic_inspector/test/unit/db/test_migrations.py | 64 +++++++++++++--------- releasenotes/source/2023.2.rst | 6 ++ releasenotes/source/index.rst | 1 + tools/states_to_dot.py | 2 +- zuul.d/ironic-inspector-jobs.yaml | 18 ++++++ zuul.d/project.yaml | 2 + 10 files changed, 77 insertions(+), 37 deletions(-)

1 0

os-refresh-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are jazzed to announce the release of: os-refresh-config 13.2.0: Refresh system configuration The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 13.1.0..13.2.0 ------------------------------------------- 812905b Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 7 +++++-- zuul.d/layout.yaml | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-)

1 0

os-apply-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are delighted to announce the release of: os-apply-config 13.2.0: Config files from cloud metadata The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 13.1.0..13.2.0 ----------------------------------------- 3c7f9b9 Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 5 +++++ tox.ini | 4 ++-- zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-)

1 0

os-collect-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are glad to announce the release of: os-collect-config 13.2.0: Collect and cache metadata, run hooks on changes. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 13.1.0..13.2.0 ------------------------------------------- 76173d8 Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 5 +++++ tox.ini | 4 ++-- zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-)

1 0

openstack-ansible 26.4.0 (zed)
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are pumped to announce the release of: openstack-ansible 26.4.0: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.4.0 ^^^^^^ Upgrade Notes ************* * Keystone OIDC parameter 'oidc_redirect_uri' is replaced with 'oidc_redirect_path'. This parameter no longer needs to be set explicitly unless you run additional services which may collide with the default on the same port as Keystone. Your OIDC provider may need to be updated to reflect this change in redirect URI which defaults to the Keystone public URL plus the path /oidc_redirect. Bug Fixes ********* * Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc if >= v2.4.9 including on Ubuntu Jammy. Other Notes *********** * The "localhost" target was explicitly added to OSA inventory due to bug #2041717. As a result, the 'all' group now contains localhost, and custom playbooks targeting 'all' may need adjustment, e.g.: "hosts: all:!localhost" Changes in openstack-ansible 26.3.0..26.4.0 ------------------------------------------- 95f72b617 Fix incorrect release name c76fccc78 Bump SHAs for Zed 9ee288c6e Apply rate limit for journald in AIO builds 6288a73eb Explicitly add localhost to inventory.ini 49677812a Define install_method default when hosts resolution depend on it Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 ++ ansible-role-requirements.yml | 32 +++++++++++----------- deploy-guide/source/targethosts-prepare.rst | 2 +- inventory/inventory.ini | 3 ++ playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 +-- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +-- .../defaults/repo_packages/openstack_services.yml | 16 +++++------ playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- ...licit-localhost-inventory-96c5b0b28e23a066.yaml | 7 +++++ .../oidc-fix-redirect-uri-5909172a1db5457f.yaml | 13 +++++++++ scripts/gate-check-commit.sh | 2 +- .../templates/user_variables.aio.yml.j2 | 9 ++++++ 14 files changed, 68 insertions(+), 33 deletions(-)

1 0

openstack-ansible 25.6.0 (yoga)
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are thrilled to announce the release of: openstack-ansible 25.6.0: Ansible playbooks for deploying OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.6.0 ^^^^^^ Upgrade Notes ************* * Keystone OIDC parameter 'oidc_redirect_uri' is replaced with 'oidc_redirect_path'. This parameter no longer needs to be set explicitly unless you run additional services which may collide with the default on the same port as Keystone. Your OIDC provider may need to be updated to reflect this change in redirect URI which defaults to the Keystone public URL plus the path /oidc_redirect. Bug Fixes ********* * Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new OIDCXForwardedHeaders configuration option is required. * Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc if >= v2.4.9 including on Ubuntu Jammy. Other Notes *********** * The "localhost" target was explicitly added to OSA inventory due to bug #2041717. As a result, the 'all' group now contains localhost, and custom playbooks targeting 'all' may need adjustment, e.g.: "hosts: all:!localhost" Changes in openstack-ansible 25.5.0..25.6.0 ------------------------------------------- 7047d7f71 Fix incorrect release name 16d513883 Bump SHAs for Yoga 302842f88 Explicitly add localhost to inventory.ini e0c3efb14 Define install_method default when hosts resolution depend on it Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 +++ ansible-role-requirements.yml | 24 +++++++++++----------- deploy-guide/source/targethosts-prepare.rst | 2 +- inventory/inventory.ini | 3 +++ playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 ++-- playbooks/defaults/repo_packages/nova_consoles.yml | 4 ++-- .../defaults/repo_packages/openstack_services.yml | 20 +++++++++--------- playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- ...licit-localhost-inventory-96c5b0b28e23a066.yaml | 7 +++++++ ...tone-oidc-forwarded-proto-92471121e3949428.yaml | 5 +++++ .../oidc-fix-redirect-uri-5909172a1db5457f.yaml | 13 ++++++++++++ scripts/gate-check-commit.sh | 2 +- 14 files changed, 62 insertions(+), 31 deletions(-)

1 0