Open Stack

We are gleeful to announce the release of:

openstack-ansible 17.0.5: Ansible playbooks for deploying OpenStack

This release is part of the queens stable release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

17.0.5
^^^^^^


New Features
************

* Octavia requires SSL certificates for communication with the
  amphora. This adds the automatic creation of self signed
  certificates for this purpose. It uses different certificate
  authorities for amphora and control plane thus insuring maximum
  security.


Known Issues
************

* All OSA releases earlier than 17.0.5, 16.0.4, and 15.1.22 will
  fail to build the rally venv due to the release of the new
  cmd2-0.9.0 python library. Deployers are encouraged to update to the
  latest OSA release which pins to an appropriate version which is
  compatible with python2.

* Recently the spice-html5 git repository was entirely moved from
  "https://github.com/SPICE/spice-html5" to
  "https://gitlab.freedesktop.org/spice/spice-html5". This results in
  a failure in the git clone stage of the "repo-build.yml" playbook
  for OSA queens releases earlier than "17.0.5". To fix the issue,
  deployers may upgrade to the most recent release, or may implement
  the following override in "user_variables.yml".

     nova_spicehtml5_git_repo: https://gitlab.freedesktop.org/spice/spice-html5.git


Upgrade Notes
*************

* The distribution package lookup and data output has been removed
  from the py_pkgs lookup so that the repo-build use of py_pkgs has
  reduced output and the lookup is purpose specific for python
  packages only.


Security Issues
***************

* It is recommended that the certificate generation is always
  reviewed by security professionals since algorithms and key-lengths
  considered secure change all the time.


Bug Fixes
*********

* Newer releases of CentOS ship a version of libnss that depends on
  the existance of /dev/random and /dev/urandom in the operating
  system in order to run.  This causes a problem during the cache
  preparation process which runs inside chroot that does not contain
  this, resulting in errors with the following message:

  error: Failed to initialize NSS library

  This has been resolved by introducing a /dev/random and /dev/urandom
  inside the chroot-ed environment.

Changes in openstack-ansible 17.0.4..17.0.5
-------------------------------------------

b6d44cf Update repo_build role SHA for custom PyPi indexes fix
4662c7d Update os_tempest role SHA pin for cmd2 pin
c963790 Add release note with workaround for spice-html5 repo change
94b745a Fix Git URL for SPICE to work with CentOS
5dbc4c5 Updated spice-html5 git repository URL
7f8caa1 Add more meaningful/user readable failure
22db155 Add some troubleshooting informations
e28f00a Adds the certificate client key password to user_secrets
33dcfa0 Pin ARA for Queens
2100356 Use upper constraints when installing ARA
4b53dbe Update lxc_hosts role SHA for cache resolver fix
c038e8d Ensure facts are updated for new containers
2c831b0 Improve the limited connectivity documentation
5ea58f5 Adjust inside/outside openstack-ci bootstrap-host tasks
f6defdb Update docs to reflect release of Queens
69015c0 Run inventory-manage.py from the ansible-runtime venv
0633521 Update all SHAs for 17.0.5
e5d8c23 [Docs] Clarify the testing page
5487401 Configure cors for glance for additional usability
933dabb Be clear about python3: Remove its support


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      |  70 +++----
bindep.txt                                         |   3 -
etc/openstack_deploy/user_secrets.yml              |   1 +
inventory/group_vars/all/all.yml                   |   2 +-
inventory/group_vars/all/glance.yml                |  19 ++
inventory/group_vars/all/horizon.yml               |  16 ++
playbooks/containers-lxc-create.yml                |  14 +-
playbooks/defaults/repo_packages/nova_consoles.yml |   3 +-
.../defaults/repo_packages/openstack_services.yml  |  82 ++++-----
.../notes/add-random-devices-38671b23cb1319b8.yaml |  12 ++
.../certificate_generation-a9cdcc8e3b1e186f.yaml   |  14 ++
.../notes/cmd2-0.9.0-838765e91d9be69e.yaml         |   7 +
...ove-distro-package-lookup-340b0fedb25a7c4b.yaml |   8 +
.../spice-html5-repo-change-b4ad1c25ec94ee99.yaml  |  14 ++
scripts/bootstrap-ansible.sh                       |   8 +-
scripts/gate-check-commit.sh                       |   8 +-
scripts/inventory-manage.py                        |   2 +-
.../bootstrap-host/tasks/check-requirements.yml    |  10 +
.../bootstrap-host/tasks/prepare_aio_config.yml    | 180 +++++++-----------
tox.ini                                            |   9 -
24 files changed, 543 insertions(+), 364 deletions(-)