Open Stack

We are tickled pink to announce the release of:

openstack-ansible 18.1.0: Ansible playbooks for deploying OpenStack

This release is part of the rocky stable release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

18.1.0
^^^^^^


New Features
************

* Horizon has, since OSA's inception, been deployed with HTTPS
  access enabled, and has had no way to turn it off. Some use-cases
  may want to access via HTTP instead, so this patch enables the
  following.

  * Listen via HTTPS on a load balancer, but via HTTP on the horizon
    host and have the load balancer forward the correct headers. It
    will do this by default in the integrated build due to the
    presence of the load balancer, so the current behaviour is
    retained.

  * Enable HTTPS on the horizon host without a load balancer. This
    is the role's default behaviour which matches what it always has
    been.

  * Disable HTTPS entirely by setting "haproxy_ssl: no" (which will
    also disable https on haproxy. This setting is inherited by the
    new "horizon_enable_ssl" variable by default. This is a new
    option.


Known Issues
************

* The original "stable/rocky" release (18.0.x) contained a reference
  to a pre-release state of the ceph-ansible role (its 3.2.0beta1
  release). That role --- and hence, any OpenStack-Ansible
  "stable/rocky" release prior to 18.1.0 --- should not be used to
  deploy production Ceph clusters. As of this release, "stable/rocky"
  tracks the ceph-ansible role's "stable-3.1" branch.


Upgrade Notes
*************

* Configurations using the "ceph-ansible" role (that is, those
  applying the "ceph-install.yml" or "ceph-rgw-install.yml" playbooks)
  should be very carefully reviewed if you are upgrading from prior
  "stable/rocky" releases. Those releases shipped a pre-release
  version of "ceph-ansible" that was unintentionally included in
  "ansible-role-requirements.yml".

* The variables "ceilometer_oslomsg_rpc_servers" and
  "ceilometer_oslomsg_notify_servers" have been removed in favour of
  using "ceilometer_oslomsg_rpc_host_group" and
  "ceilometer_oslomsg_notify_host_group" instead.


Deprecation Notes
*****************

* The package cache on the repo server has been removed. If caching
  of packages is desired, it should be setup outside of OpenStack-
  Ansible and the variable "lxc_container_cache_files" (for LXC
  containers) or "nspawn_container_cache_files_from_host" (for nspawn
  containers) can be used to copy the appropriate host configuration
  from the host into the containers on creation. Alternatively,
  environment variables can be set to use the cache in the host
  /etc/environment file prior to container creation, or the
  "deployment_environment_variables" can have the right variables set
  to use it. The following variables have been removed.

  * "repo_pkg_cache_enabled"

  * "repo_pkg_cache_port"

  * "repo_pkg_cache_bind"

  * "repo_pkg_cache_dirname"

  * "repo_pkg_cache_dir"

  * "repo_pkg_cache_owner"

  * "repo_pkg_cache_group"


Bug Fixes
*********

* The "ansible-role-requirements.yml" reference to the "ceph-
  ansible" role has been fixed to refer to the current "HEAD" of that
  role's "stable-3.1" branch. It previously pointed to the pre-release
  3.2.0beta1 version.

* The quota for security group rules was erroneously set to 100 with
  the aim to have 100 security group rules per security group instead
  of to 100*#security group rules. This patch fixes this discrepancy.

Changes in openstack-ansible 18.0.0..18.1.0
-------------------------------------------

cc9e999 Reset ceph-ansible to the current HEAD of stable-3.1
8c8950e Provides group_names for use with provider_network plugin
799309d Restart cinder-scheduler instead of reloading
0a19200 Adds option to enable ARA plugin install
3a76f07 Ensure ceph server apt pinning is well defined
f273369 zuul: Make openSUSE distro jobs voting
99526d9 Ensure pip/setuptools/wheel are up to date in the utility venv
fa2497f Update rocky index with release date
a6f7933 Update all SHAs for 18.0.1
e77ef14 scripts: sources-branch-updater: Make regexp for master branch stricter
758edb7 Update Ansible to 2.5.10
ebeffb4 Restore OpenSUSE voting jobs
9b7ad5e zuul: SUSE: Fix scenario for ceph jobs
e4ba166 Make system_crontab_coordination idempotent
01bf4d3 Set an upper pin for Cython to please gnocchi
22ef7ec Fix rgw playbook pre_tasks
f0c7528 Use the compute kit + horizon for all distros
4d675ce fix typo in releasenotes
149e5d9 releasenotes: oslo-messaging-separate-backends add project name


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      |  86 +++++------
global-requirement-pins.txt                        |   5 +
inventory/group_vars/all/all.yml                   |   2 +-
playbooks/ceph-install.yml                         |  22 +++
playbooks/ceph-rgw-install.yml                     |  14 +-
playbooks/common-playbooks/neutron.yml             |   1 +
playbooks/defaults/repo_packages/gnocchi.yml       |   2 +-
.../defaults/repo_packages/openstack_services.yml  |  74 ++++-----
playbooks/os-cinder-install.yml                    |  10 +-
.../templates/crontab.j2                           |   2 +-
playbooks/utility-install.yml                      |  17 +++
.../notes/ceph-stable-3.1-12985e1446665872.yaml    |  21 +++
.../fixes_sec_grp_rule_quota-2755da6c2c2ab434.yaml |   8 +
.../http-access-horizon-94c27a0aadb9f1b4.yaml      |  22 +++
.../notes/journal-log-ccbb504642b49611.yaml        |   2 +-
.../notes/journal-log-ccbb504642b49614.yaml        |   2 +-
.../notes/journal-log-cxcb512642b49617.yaml        |   2 +-
.../notes/journal-log-ycba504642b47619.yaml        |   2 +-
.../oslo-messaging-backends-65287400dba86fce.yaml  |   3 +-
...ssaging-separate-backends-06a1b30ffb228f22.yaml |   3 +-
...ssaging-separate-backends-1fbdb77e93e29542.yaml |   3 +-
...ssaging-separate-backends-3b2dac9462595b31.yaml |   3 +-
...ssaging-separate-backends-401c97b4c48a9b31.yaml |   3 +-
...ssaging-separate-backends-4491e7c099bee4f5.yaml |   3 +-
...ssaging-separate-backends-60f81dae397b1c96.yaml |   3 +-
...ssaging-separate-backends-61d279ded1bc999e.yaml |   3 +-
...ssaging-separate-backends-652f63d5c21b1884.yaml |   3 +-
...ssaging-separate-backends-702d7b33fda7a9f5.yaml |   3 +-
...ssaging-separate-backends-87f2d1a15c202f73.yaml |   3 +-
...ssaging-separate-backends-9b3fcaaa21a0d9f4.yaml |   3 +-
...ssaging-separate-backends-a3af6957a984ac51.yaml |   3 +-
...ssaging-separate-backends-e68c98d4f9d9a79c.yaml |   3 +-
...ssaging-separate-backends-e82ea3162d2d383f.yaml |   3 +-
...ssaging-separate-backends-e8a0b6857f2a9749.yaml |   3 +-
.../notes/remove-pkg-cache-afba3577138dc0a0.yaml   |  22 +++
.../remove_oslomsg_server-6b5c19e03a001e85.yaml    |   6 +
scripts/bootstrap-ansible.sh                       |   9 +-
scripts/gate-check-commit.sh                       |   6 +-
scripts/sources-branch-updater-lib.sh              |   2 +-
zuul.d/jobs.yaml                                   | 168 +++++++++++----------
zuul.d/project-templates.yaml                      | 108 ++++---------
zuul.d/project.yaml                                |   4 -
44 files changed, 401 insertions(+), 305 deletions(-)