Open Stack

We are satisfied to announce the release of:

openstack-ansible 15.1.2: Ansible playbooks for deploying OpenStack

This release is part of the ocata stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

15.1.2
^^^^^^


New Features
************

* A variable named "bootstrap_user_variables_template" has been
  added to the bootstrap-host role so the user can define the user
  variable template filename for AIO deployments

* Implements SSL connection ability to MySQL. "galera_use_ssl"
  option has to be set to "true" (default), in this case playbooks
  create self-signed SSL bundle and sets up MySQL configs to use it or
  distributes user-provided bundle throughout Galera nodes.

* Removed dependency for "cinder_backends_rbd_inuse" in nova.conf
  when setting "rbd_user" and "rbd_secret_uuid" variables. Cinder
  delivers all necessary values via RPC when attaching the volume, so
  those variables are only necessary for ephemeral disks stored in
  Ceph. These variables are required to be set up on cinder-volume
  side under backend section.


Critical Issues
***************

* A bug that caused the Keystone credential keys to be lost when the
  playbook is run during a rebuild of the first Keystone container has
  been fixed. Please see launchpad bug 1667960 for more details.


Bug Fixes
*********

* Nova features that use libguestfs (libvirt password/key injection)
  now work on compute hosts running Ubuntu. When Nova is deployed to
  Ubuntu compute hosts and either "nova_libvirt_inject_key" or
  "nova_libvirt_inject_password" are set to True, then kernels stored
  in /boot/vmlinuz-* will be made readable to nova user. See launchpad
  bug 1507915.

Changes in openstack-ansible 15.1.1..15.1.2
-------------------------------------------

147844c Update galera repo url variables during upgrades
89ead8d SHA Bump for Keystone CVE-2017-2673
625415a Add variable for template filename
7c140da Unset bootstrap-ansible variables between upgrades
72e5b3a Only bind haproxy to internal IP, repo and galera
f220c28 Add trove RPC encryption  keys
25a6a28 Update all SHAs for 15.1.2
e2a1c1a Fix ceph installation on CentOS


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      | 20 +++----
etc/openstack_deploy/user_secrets.yml              |  2 +
playbooks/ceph-install.yml                         | 62 ++++++++++++++++++++++
playbooks/defaults/repo_packages/gnocchi.yml       |  2 +-
.../defaults/repo_packages/openstack_services.yml  | 60 ++++++++++-----------
playbooks/inventory/group_vars/all.yml             |  2 +-
playbooks/vars/configs/haproxy_config.yml          |  7 +--
.../add-template-file-var-cac35a99a3faf563.yaml    |  6 +++
.../fix-libguestfs-ubuntu-a1436d2724c9189a.yaml    |  6 +++
.../notes/implement-ssl-dd42ad2ff91af0bd.yaml      |  6 +++
.../libvirt-rbd-independent-5876349073463cc3.yaml  |  8 +++
...primary-container-rebuild-a2f4d7f33d66c843.yaml |  5 ++
scripts/gate-check-commit.sh                       |  6 +++
.../playbooks/deploy-config-changes.yml            | 20 ++++++-
.../bootstrap-host/tasks/prepare_aio_config.yml    |  2 +-
16 files changed, 169 insertions(+), 48 deletions(-)