Open Stack

We joyfully announce the release of:

kolla-ansible 6.2.2: Ansible Deployment of Kolla containers

This release is part of the queens stable release series.

The source is available from:

    https://opendev.org/openstack/kolla-ansible

Download the package from:

    https://tarballs.openstack.org/kolla-ansible/

Please report issues through:

    https://bugs.launchpad.net/kolla-ansible/+bugs

For more details, please see below.

6.2.2
^^^^^


New Features
************

* Docker logs are no longer allowed to grow unbounded and have been
  limited to a fixed size per container. Two new variables have been
  added, *docker_log_max_file* and *docker_log_max_size* which default
  to 5 and 50MB respectively. This means that for each container,
  there should be no more than 250MB of Docker logs.


Upgrade Notes
*************

* The Keystone fernet key rotation scheduling algorithm has been
  modified to avoid issues with over-rotation of keys.

  The variables "fernet_token_expiry",
  "fernet_token_allow_expired_window" and
  "fernet_key_rotation_interval" may be set to configure the token
  expiry and key rotation schedule.

  By default, "fernet_token_expiry" is 86400,
  "fernet_token_allow_expired_window" is 172800, and
  "fernet_key_rotation_interval" is the sum of these two variables.
  This allows for the minimum number of active keys - 3.

  See bug 1809469 for details.


Bug Fixes
*********

* Adds system hostnames to "/etc/hosts", if different from short
  hostnames. This can fix live migration of Nova instances in some
  contexts. See bug 1830023 for details.


Other Notes
***********

* While Kolla Ansible now avoids duplicating Nova cells when
  messaging or database connection information are changed, operators
  of existing deployments should perform a manual cleanup of duplicate
  cells using the "nova-manage cell_v2" command from a container
  running the "nova_api" image, leaving only two cells, one named
  "cell0" and another one with the right connection information.

Changes in kolla-ansible 6.2.1..6.2.2
-------------------------------------

403cc371c Constrain the size of Docker logs
7c575f46f Add 'allow *' to getting ceph mds keyring
da171abc2 openvswitch: always run handler to to ensure OVS bridges are up
849d613ce Add Region and Multiples into default globals.yml
8e219a917 During deploy, always sync DB
65bae5a73 Language tweaks in multi-region docs for clarity
c68cc2c66 Don't rotate keystone fernet keys during deploy
aa4424500 Wait for all compute services before cell discovery
9ec00c24e Fixes for MariaDB bootstrap and recovery
621a4d6fd Restart all nova services after upgrade
20b40798d (Rocky and Queens only) CI: Fix ceph jobs for kolla
73747860d Avoid parallel discover_hosts (nova-related race condition)
20782235c Remove zuul-cloner usage
01654d83e Add blazar to fluentd aggregation
22c012c96 [heat] Multi-region support for bootstrap
489a0a31a Fix Blazar Nova aggregate in multi-region setup
554187c9b Hide logs when looping over passwords
18d8960e4 Support multi-region discovery of Nova cells
d6bac914d Add ansible_nodename (system hostname) to /etc/hosts
11b9eba2a nova: Fix DBNotAllowed during compute startup
d5cef35a7 Fix keystone fernet key rotation scheduling
ec2aa48c1 Add unit test for keystone fernet cron generator
f6cfee320 Stop duplicating Nova cells


Diffstat (except docs and test files)
-------------------------------------

ansible/group_vars/all.yml                         |  12 ++
ansible/roles/aodh/tasks/bootstrap.yml             |   2 -
ansible/roles/barbican/tasks/bootstrap.yml         |   2 -
ansible/roles/baremetal/tasks/pre-install.yml      |   3 +-
.../baremetal/templates/docker_systemd_service.j2  |   2 +-
ansible/roles/blazar/tasks/bootstrap.yml           |   3 +-
ansible/roles/ceph/defaults/main.yml               |   2 +-
ansible/roles/cinder/tasks/bootstrap.yml           |   2 -
ansible/roles/cloudkitty/tasks/bootstrap.yml       |   2 -
.../common/templates/conf/input/00-global.conf.j2  |   1 +
ansible/roles/congress/tasks/bootstrap.yml         |   2 -
ansible/roles/designate/tasks/bootstrap.yml        |   2 -
ansible/roles/glance/tasks/bootstrap.yml           |   2 -
ansible/roles/gnocchi/tasks/bootstrap.yml          |   2 -
ansible/roles/heat/tasks/bootstrap.yml             |   2 -
ansible/roles/heat/tasks/bootstrap_service.yml     |   1 +
ansible/roles/horizon/tasks/bootstrap.yml          |   2 -
ansible/roles/ironic/tasks/bootstrap.yml           |   4 +-
ansible/roles/karbor/tasks/bootstrap.yml           |   2 -
.../keystone/files/fernet_rotate_cron_generator.py |  83 +++++----
ansible/roles/keystone/tasks/bootstrap.yml         |   2 -
ansible/roles/keystone/tasks/config.yml            |   8 +-
ansible/roles/keystone/tasks/init_fernet.yml       |   2 +-
ansible/roles/keystone/templates/fernet-push.sh.j2 |   7 +
.../roles/keystone/templates/fernet-rotate.sh.j2   |   6 +-
.../keystone/templates/keystone-fernet.json.j2     |   6 +
ansible/roles/keystone/templates/keystone.conf.j2  |  12 +-
ansible/roles/magnum/tasks/bootstrap.yml           |   2 -
ansible/roles/manila/tasks/bootstrap.yml           |   2 -
ansible/roles/mariadb/handlers/main.yml            |  22 +++
ansible/roles/mariadb/tasks/recover_cluster.yml    | 146 ++++++++-------
ansible/roles/mistral/tasks/bootstrap.yml          |   2 -
ansible/roles/murano/tasks/bootstrap.yml           |   2 -
ansible/roles/neutron/tasks/bootstrap.yml          |   2 -
ansible/roles/nova/defaults/main.yml               |   9 +
ansible/roles/nova/handlers/main.yml               |  51 ++++++
ansible/roles/nova/tasks/bootstrap.yml             |   7 +-
ansible/roles/nova/tasks/create_cells.yml          |  77 ++++++++
ansible/roles/nova/tasks/discover_computes.yml     |  52 +++++-
ansible/roles/nova/tasks/reload.yml                |  40 -----
ansible/roles/nova/tasks/upgrade.yml               |   2 -
ansible/roles/nova/templates/nova.conf.j2          |   7 +-
ansible/roles/octavia/tasks/bootstrap.yml          |   2 -
ansible/roles/openvswitch/handlers/main.yml        |  12 --
ansible/roles/openvswitch/tasks/deploy.yml         |   2 +
.../roles/openvswitch/tasks/ensure-ovs-bridge.yml  |  11 ++
ansible/roles/openvswitch/tasks/upgrade.yml        |   2 +
ansible/roles/panko/tasks/bootstrap.yml            |   4 -
ansible/roles/rally/tasks/bootstrap.yml            |   2 -
ansible/roles/sahara/tasks/bootstrap.yml           |   2 -
ansible/roles/senlin/tasks/bootstrap.yml           |   2 -
ansible/roles/solum/tasks/bootstrap.yml            |   2 -
ansible/roles/tacker/tasks/bootstrap.yml           |   2 -
ansible/roles/trove/tasks/bootstrap.yml            |   2 -
ansible/roles/vitrage/tasks/bootstrap.yml          |   2 -
ansible/roles/watcher/tasks/bootstrap.yml          |   2 -
ansible/roles/zun/tasks/bootstrap.yml              |   2 -
etc/kolla/globals.yml                              |   9 +
...add-nodename-to-etc-hosts-6360acc642ee3d49.yaml |   7 +
.../fernet-key-rotation-8d40041d7d783dc7.yaml      |  16 ++
.../limit-docker-log-size-33133da03b232ece.yaml    |   8 +
...op-duplicating-nova-cells-670211557fe2cda3.yaml |   9 +
tools/setup_gate.sh                                |  15 --
68 files changed, 719 insertions(+), 257 deletions(-)