Open Stack

We are satisfied to announce the release of:

openstack-ansible 17.0.3: Ansible playbooks for deploying OpenStack

This release is part of the queens stable release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

17.0.3
^^^^^^


New Features
************

* When *venvwithindex=True* and *ignorerequirements=True* are both
  specified in *tempest_git_install_fragments* (as was previously the
  default), this results in tempest being installed from PyPI without
  any constraints being applied. This could result in the version of
  tempest being installed in the integrated build being different than
  the version being installed in the independent role tests. Going
  forward, we remove the *tempest_git_** overrides in
  playbooks/defaults/repo_packages/openstack_testing.yml so that the
  integrated build installs tempest from PyPI, but with appropriate
  constraints applied.

* This consolidates the amphora image tasks in a common file and
  adds a way to download an amphora image from an artefact storage
  over http(s). With the Octavia team providing test images the tests
  were modified to not build images any longer but download them.


Security Issues
***************

* It is commonly considered bad practice to downlaod random images
  from the Internet expecially the test images the Octavia team
  provides which could potentially include unpatched operating system
  packages - so for any production deploy adjust the download url to
  an artifact storage your organization controls. The system also does
  not authenticate the image (e.g. with an md5) so should only be used
  on networks your organization controls.


Other Notes
***********

* The internal variable "python_ceph_package" has been renamed to
  "python_ceph_packages" and is now a list instead of a string. If you
  are using gnocchi with ceph and are using this internal variable in
  your "ceph_extra_components" overrides, please update it to
  "python_ceph_packages".

Changes in openstack-ansible 17.0.2..17.0.3
-------------------------------------------

72c8be4 Update role SHA's to resolve pip/python venv issues
64bf9d9 Update Ansible to 2.4.4.0
9ebb91b Enable horizon fwaas panels when firewall_v2 driver is enabled
4c9bcae log_hosts should be optional
0f5a23e bootstrap-host: Set repo build pip default mirror when in openstack-ci
ba9d62c Add shade library to openstack-ansible venv
16e8ffb Remove tempest_git_* overrides
782285b Add IP addresses to infra node br-vxlan in the examples
8b846bb [DOC] rectify galera recovery for systemd
3c777c5 Do not log passwords
bbdfbb8 Do not log passwords
95ff8c4 Update all SHAs for 17.0.3
0810950 Remove spurious VxLAN bridge IP from ceph osd hosts
190c16c Use a sensible vlan range in the example configs
2fd5a4b Add nova/ironic/glance cross-service vars to group_vars/all


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      | 62 ++++++++--------
.../openstack_interface.cfg.pod.example            | 20 ++----
.../openstack_interface.cfg.prod.example           | 21 ++----
.../openstack_interface.cfg.test.example           | 22 ++----
etc/openstack_deploy/openstack_user_config.yml.aio |  2 +-
.../openstack_user_config.yml.aio.j2               |  2 +-
.../openstack_user_config.yml.example              |  2 +-
.../openstack_user_config.yml.pod.example          |  2 +-
.../openstack_user_config.yml.prod-ceph.example    |  2 +-
.../openstack_user_config.yml.prod.example         |  2 +-
.../openstack_user_config.yml.test.example         |  2 +-
inventory/group_vars/all/all.yml                   |  2 +-
inventory/group_vars/all/glance.yml                |  3 +
inventory/group_vars/all/ironic.yml                | 24 +++++++
inventory/group_vars/glance_all.yml                |  5 --
inventory/group_vars/horizon_all.yml               |  2 +-
inventory/group_vars/ironic_all.yml                |  8 ---
playbooks/common-tasks/mysql-db-user.yml           |  2 +
playbooks/common-tasks/rabbitmq-vhost-user.yml     |  1 +
.../defaults/repo_packages/openstack_services.yml  | 82 +++++++++++-----------
.../defaults/repo_packages/openstack_testing.yml   |  7 --
playbooks/healthcheck-infrastructure.yml           |  1 +
playbooks/rabbitmq-install.yml                     |  1 +
...-tempest-with-constraints-409eab81862db701.yaml | 11 +++
.../notes/image_download-754d13e7df9b7891.yaml     | 16 +++++
...iable_python_ceph_package-9575466eb146e500.yaml |  8 +++
requirements.txt                                   |  1 +
scripts/bootstrap-ansible.sh                       |  2 +-
.../bootstrap-host/tasks/prepare_aio_config.yml    |  1 +
34 files changed, 184 insertions(+), 163 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 54d032a..a589187 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,0 +12 @@ virtualenv>=14.0.6 # MIT
+shade>=1.17.0 # Apache-2.0