January 2024 - Release-announce - lists.openstack.org

kolla 15.4.0 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are amped to announce the release of: kolla 15.4.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 15.4.0 ^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 15.3.0..15.4.0 ------------------------------- 2e68a0f1a rabbitmq: Use timeout in healthcheck script 9dc637d47 Sync only local cell in nova bootstrap & upgrade 1369c7f44 Pin docker.py to <7 aa68a99c2 Swift: Remove unused rootwrap ddfa9a6de Add rsync to nova-compute 2fc3c9350 Adding db sync script for venus Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 1 - .../nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 ++++++ requirements.txt | 2 +- 13 files changed, 29 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e949f8f5a..6a56bcb1e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=3.0.0 # Apache-2.0 +docker>=3.0.0,<7.0.0 # Apache-2.0

1 0

kayobe 12.10.0 (yoga)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We enthusiastically announce the release of: kayobe 12.10.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.10.0 ^^^^^^^ Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Adds missing "disable-selinux" element when building Rocky Linux overcloud host disk images. * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". * Deploys "prometheus-elasticsearch-exporter" on hosts of the "opensearch" group, resolving failures to connect to OpenSearch when the "elasticsearch" and "opensearch" groups are different. Changes in kayobe 12.9.0..12.10.0 --------------------------------- 69ba8785 Ensure git is present before checkout tasks b9cea681 Stop NetworkManager from overriding resolv.conf 2c625dd5 Fix gateway assignment when seed SNAT is disabled aa7f7f36 Clean up release notes 1c45e8b1 Sync Kolla Ansible feature flags for stable/yoga 192e08da docs: add information about enabling TLS to automated guide afd9dec5 docs: the page 'Editable installs' has moved 2e309ef0 Remove kolla_enable_host_ntp variable 17f6b866 CI: Run configuration dump against localhost b2dd82da Use latest published CentOS Stream 8 image 27114922 Fix configuration dump with inline encrypted variables a14d05d5 Honor custom ssh args in kayobe-ansible-user.yml 0bb3ad8a kolla-bifrost: Add precheck for inspection allocation pool 698c281a Improve neutron images regex 4f41f170 Run elasticsearch exporter on opensearch hosts too f2f85fa7 Generate local Kolla Ansible config in check mode 89994fe7 dev: Improve error checking for config check functions cad48d1d Fix setting kolla_admin_openrc_cacert f14f10d5 Fix an issue when user forgot combine custom passwords 9b8ed55a Add retries to get_url and uri tasks 18627811 Add seed_deploy_containers_registry_attempt_login 0f8b8d08 Allow overriding earlier use of NetworkManager a25dd224 Fix Launchpad bug URL 8a1aa4dc Resolve slow fact gathering when seed SNAT is off cf78d2e7 Fix last return value in _get_base_path d2f84443 Fix condition for enabling disable-selinux element Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/infra-vms | 4 +- ansible/group_vars/all/kolla | 18 ++++-- ansible/group_vars/all/overcloud-dib | 2 +- ansible/group_vars/all/seed | 4 ++ ansible/group_vars/all/seed-vm | 4 +- ansible/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 1 - ansible/kolla-bifrost-hostvars.yml | 8 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 10 +--- .../kolla-ansible/templates/kolla/globals.yml | 7 +-- .../kolla-ansible/templates/overcloud-services.j2 | 1 + ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 6 ++ ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- ansible/roles/veth/defaults/main.yml | 2 + ansible/roles/veth/tasks/RedHat.yml | 4 +- dev/functions | 22 ++++---- .../configuration/reference/kolla-ansible.rst | 56 ++++++++++-------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/infra-vms.yml | 2 +- etc/kayobe/kolla.yml | 14 ++++- etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 19 ++++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ ...linux-overcloud-dib-rocky-7c381912c3dfbc09.yaml | 5 ++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ ...earch-exporter-opensearch-cb7791220be58055.yaml | 6 ++ ...centos-cloud-image-latest-b967c585a23d1615.yaml | 5 ++ 53 files changed, 483 insertions(+), 98 deletions(-)

1 0

kolla-ansible 17.1.0 (bobcat)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are stoked to announce the release of: kolla-ansible 17.1.0: Ansible Deployment of Kolla containers This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.1.0 ^^^^^^ New Features ************ * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fixes non-persistent Neutron agent state data. LP2009884 * Fixes long service restarts while using systemd LP#2048130. * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes Nova operations using the "scp" command, such as cold migration or resize, on Debian Bookworm. LP#2048700 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * A precheck has been added to catch when "om_enable_rabbitmq_quorum_queues" is set to "True", but quorum queues have not been configured on all appropriate queues. A manual migration is required, see here for details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability LP#2045887 Changes in kolla-ansible 17.0.0..17.1.0 --------------------------------------- 5fbd9b8f0 CI: test job definitions when zuul files change 1f0a7bc30 CI: Drop duplicated variables in base.yaml 33b352c33 [2023.2 only] Switch openstack.kolla to correct branch 77e44b25d CI: Test Nova server resize functionality 5aaac1a5a Fix Nova scp failures on Debian Bookworm 131296825 Enable glance proxying behaviour 5f35f1784 cadvisor: Set housekeeping interval to Prometheus scrape interval 51ca1bc69 Fix long service restarts while using systemd 84c32a3f1 Use service-images-pull role for letsencrypt and venus cb99c1f26 Remove nova cell sync comment 47618e680 Make designate bind9 cmdline configurable 74637fed2 haproxy: Fix single frontend after LE cert path change bf9ed4073 Persist Neutron agent state files in volume 8a11ab6d9 magnum: Disable CAPI driver when kubeconfig missing 3aa199cb4 Fix wsrep sync status task while switched to TCP/IP e5750d0e9 Set a log retention policy for OpenSearch 4da7f9bc1 fluentd: Fix LE pos_file path after version bump bc3238bb1 CI: Pin docker to <7 in setup_gate.sh 7d40850ca Add nova conf for cyborg 23abf354c CI: fix two ansible-lint warnings 42d4e10a5 CI: treat ansible-lint warnings as errors dc613a556 quorum: add missing octavia and masakari 458eafab8 Add precheck for RabbitMQ quorum queues c2a40b89b Fix Docker health check for sahara_engine 52ff80d8d RabbitMQ: correct docs on Quorum Queue migrations a346bf90e CI: Add SCENARIO env var to upgrade.sh Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 1 + ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/roles/cinder/tasks/precheck.yml | 2 +- .../templates/conf/input/11-letsencrypt.conf.j2 | 2 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/tasks/precheck.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/letsencrypt/tasks/pull.yml | 12 +--- .../haproxy/haproxy_external_frontend.cfg.j2 | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 5 ++ ansible/roles/mariadb/tasks/restart_services.yml | 3 +- ansible/roles/masakari/templates/masakari.conf.j2 | 3 + ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/nova-cell/templates/sshd_config.j2 | 2 + ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 +++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/prometheus/defaults/main.yml | 2 +- ansible/roles/rabbitmq/tasks/precheck.yml | 30 ++++++++++ ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/venus/tasks/pull.yml | 12 +--- .../central-logging-guide.rst | 44 ++++++++++++++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 2 +- .../notes/bug-2048130-23b8174396bd3c69.yaml | 5 ++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ .../notes/bug-2048700-98eb939b72079173.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ ...recheck-for-quorum-queues-ba10f58538959112.yaml | 9 +++ requirements.yml | 2 +- tools/init-runonce | 1 + zuul.d/base.yaml | 67 ++++++++-------------- 44 files changed, 379 insertions(+), 88 deletions(-)

1 0

kolla-ansible 15.4.0 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We exuberantly announce the release of: kolla-ansible 15.4.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features ************ * The new command "kolla-ansible rabbitmq-reset-state" has been added. It force-resets the state of RabbitMQ. This is primarily designed to be used when enabling HA queues, see docs: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability * Updates apache grok pattern to match the size of response in bytes, time taken to serve the request and user agent. * Masakari coordination backend can now be configured via masakari_coordination_backend variable. Coordination is optional and can now be set to either redis or etcd. * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. * Adds the ability to configure rabbitmq via "rabbitmq_extra_config" which can be overriden in globals.yml. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fix MariaDB backup if enable_proxysql is enable * Fixes keystone's task which is connecting via ssh instead locally. LP#2004224 * Fixes 504 timeout when scraping openstack exporter. Ensures that HAProxy server timeout is the same as the scrape timeout for the openstack exporter backend. LP#2006051 * Fixes non-persistent Neutron agent state data. LP2009884 * Fix issue with octavia security group rules creation when using IPv6 configuration for octavia management network. See LP#2023502 for more details. * Fixes glance-api failed to start privsep daemon when cinder_backend_ceph is set to true. See LP#2024541 for more details. * Fixes 2024554. Adds host and "mariadb_port" to the wsrep sync status check. This is so none standard ports can be used for mariadb deployments. LP#2024554 * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes an issue where Prometheus would fail to scrape the OpenStack exporter when using internal TLS with an FQDN. LP#2008208 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Fixes an issue where Fluentd was parsing Horizon WSGI application logs incorrectly. Horizon error logs are now written to "horizon- error.log" instead of "horizon.log". See LP#1898174 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * Fixes an issue where Prometheus scraping of Etcd metrics would fail if Etcd TLS is enabled. LP#2036950 Changes in kolla-ansible 15.3.0..15.4.0 --------------------------------------- 668834785 CI: Test Nova server resize functionality fd42b9795 Enable glance proxying behaviour 5f148b83f cadvisor: Set housekeeping interval to Prometheus scrape interval 285c71a33 Remove nova cell sync comment 03d61a2cc Make designate bind9 cmdline configurable 1eae44d10 Persist Neutron agent state files in volume 8dee91bd2 Fix wsrep sync status task while switched to TCP/IP 897d6fbf7 Set a log retention policy for OpenSearch 3e598dfc6 Add nova conf for cyborg 5972fcaf8 Fix Docker health check for sahara_engine 011fe5e28 Adding mariadb_port to wsrep sync status so alterative ports can be used 04695d49d Fix Horizon WSGI application log parsing 8782e73c7 Remove Glance and Neutron TLS proxies from fluentd input config 69fd0f538 keystone: do not report changed on tasks that list df1972ee7 Fix proxysql get mariadb_backup_database_password e4bd422d4 Change regex for the multiline parser at the fluentd rabbitmq input d3773f8ae Fix glance-api failed to start privsep daemon 39144fc8b Set HAProxy server timeout for openstack exporter c4018cc44 Add command to force reset the state of RabbitMQ e81d9f992 ovn: Fix wording in limit check 78c25aaba Fix OpenStack exporter scrape with internal TLS & FQDN ee54b5f17 Adds condition to handle QoS extension in sriov_agent.ini template 1b18ecf88 Improve grok pattern matching for apache logs bd23f26d4 prometheus: Fix etcd scrape when etcd uses TLS 71a562339 Configure coordination in default for masakari-api 6097da0fa Fix issue with octavia security group rules creation 8ee98726c Trivial: Add connection: local for keystone-fernet cron generate task bde24a756 Add ability to configure rabbitmq ee9be687b kolla_address: check correct error return value a5d696a8d senlin: add missing cafile parameter f72b4955b Add check_mode: false to Nova upgrade checks Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 1 + ansible/rabbitmq-reset-state.yml | 10 ++++ ansible/roles/common/defaults/main.yml | 4 -- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/horizon/templates/horizon.conf.j2 | 3 +- ansible/roles/keystone/tasks/config.yml | 1 + .../keystone/tasks/register_identity_providers.yml | 2 + ansible/roles/mariadb/tasks/precheck.yml | 2 +- ansible/roles/mariadb/tasks/restart_services.yml | 1 + ansible/roles/masakari/templates/masakari.conf.j2 | 9 +++ ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 5 ++ ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/nova/tasks/upgrade.yml | 1 + ansible/roles/octavia/defaults/main.yml | 6 +- ansible/roles/octavia/tasks/prepare.yml | 18 ++++++ ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/ovn-db/tasks/lookup_cluster.yml | 14 +++-- ansible/roles/prometheus/defaults/main.yml | 6 +- .../roles/prometheus/templates/prometheus.yml.j2 | 5 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/reset-state.yml | 16 ++++++ ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 + ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../central-logging-guide.rst | 44 +++++++++++++++ kolla_ansible/database_shards.py | 1 + kolla_ansible/kolla_address.py | 2 +- ...-backup-database-password-54f43ecf102fb897.yaml | 4 ++ .../notes/bug-2004224-0e600c99f8e5b83f.yaml | 6 ++ .../notes/bug-2006051-135bd20d5c465517.yaml | 7 +++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2023502-68acc8637510cb22.yaml | 7 +++ .../notes/bug-2024541-98c2864f16f8eb59.yaml | 7 +++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 7 +++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ ...orce-reset-rabbitmq-state-7ec4414fd2a63d16.yaml | 7 +++ .../fix-prom-os-exp-fqdn-efb67c364b653bd9.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../notes/horizon-log-bugfix-b89f502c2f3ccaf9.yaml | 8 +++ ...prove-apache-grok-pattern-47b0bcd90f464d60.yaml | 5 ++ ...kari-coordination-backend-d3b742315a07aabc.yaml | 6 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ .../prometheus-etcd-tls-313e7cf454f6763a.yaml | 6 ++ .../rabbitmq-configuration-6b100a390734dc29.yaml | 5 ++ ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 +++ tools/init-runonce | 1 + tools/kolla-ansible | 6 ++ 61 files changed, 488 insertions(+), 42 deletions(-)

1 0

kolla 17.1.0 (bobcat)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We contentedly announce the release of: kolla 17.1.0: Kolla OpenStack Deployment This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.1.0 ^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 17.0.0..17.1.0 ------------------------------- 4640d1be8 rabbitmq: Use timeout in healthcheck script efb32d62f CI: Use newer podman/buildah on Ubuntu Jammy 841288749 Sync only local cell in nova bootstrap & upgrade Diffstat (except docs and test files) ------------------------------------- .../notes/nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 +++++++ 4 files changed, 23 insertions(+), 8 deletions(-)

1 0

kayobe 15.1.0 (bobcat)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are satisfied to announce the release of: kayobe 15.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.1.0 ^^^^^^ Bug Fixes * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 Changes in kayobe 15.0.0..15.1.0 -------------------------------- 3c759868 Ensure git is present before checkout tasks 45c0b186 Stop NetworkManager from overriding resolv.conf 56e592b6 Fix gateway assignment when seed SNAT is disabled c318ffec Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ansible/kolla-bifrost-hostvars.yml | 2 +- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++++++++++++ .../notes/fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++++++ .../fix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++++++ 9 files changed, 34 insertions(+), 1 deletion(-)

1 0

kolla 14.12.0 (yoga)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are chuffed to announce the release of: kolla 14.12.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.12.0 ^^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 14.11.0..14.12.0 --------------------------------- 63031520e [yoga-only]: Use pyroute2 from distro vendors 1eb0f2bf5 rabbitmq: Use timeout in healthcheck script 82fe25505 Sync only local cell in nova bootstrap & upgrade 009cbb376 Pin docker.py to <7 3a484edcd Swift: Remove unused rootwrap be43974c5 Add rsync to nova-compute Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 1 - .../nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 ++++++ requirements.txt | 2 +- 11 files changed, 23 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7d1c0d9db..6b9078a32 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=2.4.2 # Apache-2.0 +docker>=2.4.2,<7.0.0 # Apache-2.0

1 0

kolla-ansible 14.11.0 (yoga)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are happy to announce the release of: kolla-ansible 14.11.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.11.0 ^^^^^^^ New Features ************ * Adds warning and support for automatic pruning of stale Kibana indices during OpenSearch migration by running "kolla-ansible opensearch-migration" with "--prune-kibana-indices" parameter. * The new command "kolla-ansible rabbitmq-reset-state" has been added. It force-resets the state of RabbitMQ. This is primarily designed to be used when enabling HA queues, see docs: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability * Updates apache grok pattern to match the size of response in bytes, time taken to serve the request and user agent. * Masakari coordination backend can now be configured via masakari_coordination_backend variable. Coordination is optional and can now be set to either redis or etcd. * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. * Adds the ability to configure rabbitmq via "rabbitmq_extra_config" which can be overriden in globals.yml. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fixes 504 timeout when scraping openstack exporter. Ensures that HAProxy server timeout is the same as the scrape timeout for the openstack exporter backend. LP#2006051 * Fixes non-persistent Neutron agent state data. LP2009884 * Fixes glance-api failed to start privsep daemon when cinder_backend_ceph is set to true. See LP#2024541 for more details. * Fixes 2024554. Adds mariadb_port to the wsrep sync status check. This is so none standard ports can be used for mariadb deployments. LP#2024554 * Fixes glance image import LP#2048525. * Fixes an issue where Prometheus would fail to scrape the OpenStack exporter when using internal TLS with an FQDN. LP#2008208 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Fixes an issue where Fluentd was parsing Horizon WSGI application logs incorrectly. Horizon error logs are now written to "horizon- error.log" instead of "horizon.log". See LP#1898174 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * Fixes an issue where Prometheus scraping of Etcd metrics would fail if Etcd TLS is enabled. LP#2036950 Changes in kolla-ansible 14.10.0..14.11.0 ----------------------------------------- 738f7761a CI: Test Nova server resize functionality d56f46874 Enable glance proxying behaviour 46b1d5771 fluentd: remove deprecated parameter ff13ac6fc Remove nova cell sync comment 1636e432e Make designate bind9 cmdline configurable 83ad92727 [yoga-only] opensearch: remove kolla_container_engine 3e2f6b856 Persist Neutron agent state files in volume 0a7ad80a0 Set a log retention policy for OpenSearch f1e57644d Add nova conf for cyborg 77d4a4060 CI: treat ansible-lint warnings as errors 8c9cc9696 Fix Docker health check for sahara_engine 69e8f94a7 Adding mariadb_port to wsrep sync status so alterative ports can be used f03d2bc04 Change regex for the multiline parser at the fluentd rabbitmq input da5d7c4b4 Fix Horizon WSGI application log parsing 0cedba519 Remove Glance and Neutron TLS proxies from fluentd input config 6d645a5a9 keystone: do not report changed on tasks that list fd3299b9b Fix kolla_container_engine since not exist in Yoga 64ef9451f Fix glance-api failed to start privsep daemon e0434021e doc: Add Jammy to Yoga docs a552843f6 Set HAProxy server timeout for openstack exporter f4422e58f Configure coordination in default for masakari-api 689a7c7f0 Add ability to configure rabbitmq c33f8defb Add command to force reset the state of RabbitMQ eaaa30ee5 Fix OpenStack exporter scrape with internal TLS & FQDN 8408abf3e ovn: Fix wording in limit check b05d7780a Adds condition to handle QoS extension in sriov_agent.ini template 2a21ff6f3 Improve grok pattern matching for apache logs 4c41d32c8 OpenSearch migration - prune old Kibana indices 52d2c9ea0 opensearch migration: run common role 12979e7df prometheus: Fix etcd scrape when etcd uses TLS 4ff451d6b senlin: add missing cafile parameter Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 1 + ansible/group_vars/all.yml | 1 + ansible/opensearch-migration.yml | 75 ++++++++++++++++++++-- ansible/rabbitmq-reset-state.yml | 10 +++ ansible/roles/common/defaults/main.yml | 4 -- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 14 ++-- .../common/templates/conf/input/01-syslog.conf.j2 | 5 +- .../common/templates/conf/input/02-mariadb.conf.j2 | 22 ++++--- .../templates/conf/input/03-rabbitmq.conf.j2 | 8 ++- .../templates/conf/input/04-openstack-wsgi.conf.j2 | 5 +- .../common/templates/conf/input/05-libvirt.conf.j2 | 9 ++- .../templates/conf/input/06-zookeeper.conf.j2 | 10 +-- .../common/templates/conf/input/07-kafka.conf.j2 | 10 +-- .../common/templates/conf/input/09-monasca.conf.j2 | 10 +-- .../templates/conf/input/10-openvswitch.conf.j2 | 24 ++++--- .../common/templates/conf/output/00-local.conf.j2 | 2 +- .../common/templates/conf/output/01-es.conf.j2 | 2 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/horizon/templates/horizon.conf.j2 | 3 +- .../keystone/tasks/register_identity_providers.yml | 2 + ansible/roles/mariadb/tasks/precheck.yml | 2 +- ansible/roles/mariadb/tasks/restart_services.yml | 2 +- ansible/roles/masakari/templates/masakari.conf.j2 | 9 +++ ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 5 ++ ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 61 ++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/ovn-db/tasks/lookup_cluster.yml | 14 ++-- ansible/roles/prometheus/defaults/main.yml | 2 + .../roles/prometheus/templates/prometheus.yml.j2 | 5 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/reset-state.yml | 16 +++++ ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 + ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../central-logging-guide-opensearch.rst | 55 +++++++++++++++- ...nsearch-migration-reindex-f2679bd4dd8dfb18.yaml | 7 ++ .../notes/bug-2006051-135bd20d5c465517.yaml | 7 ++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2024541-98c2864f16f8eb59.yaml | 7 ++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 7 ++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ ...orce-reset-rabbitmq-state-7ec4414fd2a63d16.yaml | 7 ++ .../fix-prom-os-exp-fqdn-efb67c364b653bd9.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../notes/horizon-log-bugfix-b89f502c2f3ccaf9.yaml | 8 +++ ...prove-apache-grok-pattern-47b0bcd90f464d60.yaml | 5 ++ ...kari-coordination-backend-d3b742315a07aabc.yaml | 6 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 ++++++ .../prometheus-etcd-tls-313e7cf454f6763a.yaml | 6 ++ .../rabbitmq-configuration-6b100a390734dc29.yaml | 5 ++ ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 ++ tools/init-runonce | 1 + tools/kolla-ansible | 15 ++++- 66 files changed, 595 insertions(+), 91 deletions(-)

1 0

kolla 16.3.0 (antelope)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We contentedly announce the release of: kolla 16.3.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.3.0 ^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 16.2.0..16.3.0 ------------------------------- f3b9afdab rabbitmq: Use timeout in healthcheck script 48031708d Sync only local cell in nova bootstrap & upgrade acf23fa83 Pin docker.py to <7 9befcd697 Swift: Remove unused rootwrap 47a20d3d7 Add rsync to nova-compute 933c3a946 Adding db sync script for venus d6731028b Fix an issue with zun-cni-daemon building images in aarch64 Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 1 - .../nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 ++++++ requirements.txt | 2 +- 14 files changed, 30 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e949f8f5a..6a56bcb1e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=3.0.0 # Apache-2.0 +docker>=3.0.0,<7.0.0 # Apache-2.0

1 0

kayobe 13.4.0 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are thrilled to announce the release of: kayobe 13.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.4.0 ^^^^^^ Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Disables configuration of SELinux by Kolla Ansible, which could revert configuration set by Kayobe. * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". Changes in kayobe 13.3.0..13.4.0 -------------------------------- f6cabd01 Ensure git is present before checkout tasks fde242b8 Stop NetworkManager from overriding resolv.conf aefef5df Fix gateway assignment when seed SNAT is disabled eb8ff22f Clean up release notes d648f9d2 docs: add information about enabling TLS to automated guide d03c7c31 docs: the page 'Editable installs' has moved e2594741 Remove kolla_enable_host_ntp variable 2b9b57ea CI: Run configuration dump against localhost d0ac7776 Fix configuration dump with inline encrypted variables bb5cf010 Honor custom ssh args in kayobe-ansible-user.yml 68ac618d kolla-bifrost: Add precheck for inspection allocation pool 0f599416 CI: Test SELinux configuration 22307eb7 Disable configuration of SELinux by Kolla Ansible c903d93d Generate local Kolla Ansible config in check mode 960086f7 Improve neutron images regex c33dcfbe dev: Improve error checking for config check functions 5bb5d076 Fix setting kolla_admin_openrc_cacert 0e6fe122 Fix an issue when user forgot combine custom passwords ec101a96 Add retries to get_url and uri tasks e8e3935d Add seed_deploy_containers_registry_attempt_login 63cc3ba6 Fix Launchpad bug URL e5876e38 Resolve slow fact gathering when seed SNAT is off 785d64f7 Fix last return value in _get_base_path Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/kolla | 18 ++++-- ansible/inventory/group_vars/all/seed | 4 ++ ansible/inventory/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 8 --- ansible/kolla-bifrost-hostvars.yml | 8 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 16 +----- .../kolla-ansible/templates/kolla/globals.yml | 13 ++--- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- dev/functions | 22 ++++---- .../configuration/reference/kolla-ansible.rst | 56 ++++++++++-------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/kolla.yml | 8 ++- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 18 +++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ .../disable-kolla-selinux-71f76e63776e0aed.yaml | 5 ++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ 43 files changed, 463 insertions(+), 105 deletions(-)

1 0