Open Stack

We are happy to announce the release of:

kolla-ansible 10.0.0: Ansible Deployment of Kolla containers

This release is part of the ussuri release series.

The source is available from:

    https://opendev.org/openstack/kolla-ansible

Download the package from:

    https://tarballs.openstack.org/kolla-ansible/

Please report issues through:

    https://bugs.launchpad.net/kolla-ansible/+bugs

For more details, please see below.

10.0.0
^^^^^^


New Features
************

* Kolla Ansible checks now that the local Ansible Python environment
  is coherent, i.e. used Ansible can see Kolla Ansible. LP#1856346

* Self-signed TLS certificates can be used to test TLS in a
  development OpenStack environment. The "kolla-ansible certificates"
  command will generate the required self-signed TLS certificates.
  This command has been updated to first create a self-signed root
  certificate authority. The command then generates the internal and
  external facing certificates and signs them using the root CA. If
  backend TLS is enabled, the command will generate the backend
  certificate and sign it with the root CA.

* Enable Galera node state checking by using "clustercheck" script
  that is used by HAProxy to define node up/down state.


Upgrade Notes
*************

* The default "migration_interface" is moved from
  "network_interface" to "api_interface", which is treaded as internal
  and security network plane in most case.

* Replaced "kolla_external_fqdn_cacert" and
  "kolla_internal_fqdn_cacert" with "kolla_admin_openrc_cacert", which
  by default is not set. "OS_CACERT" is now set to the value of
  "kolla_admin_openrc_cacert" in the generated "admin-openrc.sh" file.

* The Monasca Log API has been removed. All logs now go to the
  unified Monasca API when Monasca is enabled. Any custom Fluentd
  configuration and inventory files will need to be updated. Any
  monasca_log_api containers will be removed automatically.


Deprecation Notes
*****************

* The "congress" project is no longer maintained. This has been
  retired since Victoria and has not been used by other OpenStack
  services since.

   (http://lists.openstack.org/pipermail/openstack-
  discuss/2020-April/014292.html)


Bug Fixes
*********

* Fixes Kibana deployment with the new E*K stack (6+). LP#1799689

* Fix prometheus-openstack-exporter to use CA certificate.

* Fixes Grafana datasource update. LP#1881890

* Removing chrony package and AppArmor profile from docker host if
  containerized chrony is enabled. LP#1882513

* Add missing "become: true" on some VMWare related tasks. Fixed on
  "Copying VMware vCenter CA file" and "Copying over nsx.ini".

* fix deploy nova failed when use kolla_dev_mod.

* Fixes an issue with Cinder upgrades that would cause online schema
  migration to fail. LP#1880753

Changes in kolla-ansible 10.0.0.0rc1..10.0.0
--------------------------------------------

7d0946352 Fix prometheus-elasticsearch-exporter flags
af6114da8 Revert rename of Monasca API config file
35ef89ae6 Fix STATIC_ROOT for Debian, Ubuntu
851180d26 Remove max count from Cinder online schema migration
f81dcc8e9 Switch octavia to use service project in service_auth
6f1bd3e35 Fix issues with Prometheus config generation
540eb9a01 Replace internal and external VIP CA with root CA
edb1077ee Generate Root CA for Self-Signed Certificates
2dcfdb77a fix deploy nova failed when use kolla_dev_mod
87dedced7 Do not ask for a SSH key password
59b8b07e5 Remove chrony package if containerized chrony is enabled
b8c142f60 Fix Grafana datasource update
dd8e55274 Remove nova-consoleauth task in U cycle
f6d48b035 Fix group_vars and cinder template per documentation
8e45849d5 CI: Move NFV reqs installation to where it belongs
546f5e890 Add missing become to some VMWare tasks
915860dc5 Add 'ovn' to list of valid values of neutron_plugin_agent
61e051c9b Fix handler notification for mariadb-clustercheck
bbb033dda Fix bug in deploying monasca_agent_forwarder
4f1d3e9e8 barbican: Use python3 plugin in uwsgi config
01f5b5b18 Use api_interface as migration_interface default value
6d6c369f9 Add EL8 packages.
d92123e59 Custom haproxy script for monitoring galera
3d355eaf4 Switch to Monasca API for logs
262cd0f4a Fix glance backend TLS configuration task
b70a50226 [Community goal] Update the contributor guide
7ebb0cddd Victoria: Add releasenote for remove congress role
cd6d4bbd9 Remove confusing docs
cc99af6ae Fix kolla_source_version for stable
1f16c04a5 Check that used Ansible can see Kolla Ansible
d71bbefc7 Use Ussuri images in Ussuri deployments
aea9b4d23 Remove post_config from the Kibana role
2f44ffad6 Add First login steps back into Kibana doc
d875c710e enable prometheus-openstack-exporter to use ca cert
cfc572ac3 Update TOX_CONSTRAINTS_FILE for stable/ussuri
3fc878956 Update .gitreview for stable/ussuri


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
CONTRIBUTING.rst                                   |  19 ++
ansible/group_vars/all.yml                         |  18 +-
ansible/inventory/all-in-one                       |   3 -
ansible/inventory/multinode                        |   3 -
.../roles/barbican/templates/barbican-api.ini.j2   |   2 +-
ansible/roles/baremetal/defaults/main.yml          |   2 +
ansible/roles/baremetal/tasks/post-install.yml     |  16 ++
ansible/roles/ceilometer/tasks/config.yml          |   1 +
ansible/roles/certificates/defaults/main.yml       |   5 +
.../roles/certificates/tasks/generate-backend.yml  |  64 +++++++
ansible/roles/certificates/tasks/generate-root.yml |  45 +++++
ansible/roles/certificates/tasks/generate.yml      | 191 ++++++++-------------
ansible/roles/certificates/tasks/main.yml          |   4 +
ansible/roles/cinder/defaults/main.yml             |   4 -
ansible/roles/cinder/tasks/upgrade.yml             |   1 -
ansible/roles/cinder/templates/cinder.conf.j2      |   2 +-
ansible/roles/common/templates/admin-openrc.sh.j2  |   6 +-
.../templates/conf/filter/01-rewrite-0.12.conf.j2  |   2 +-
.../templates/conf/filter/01-rewrite-0.14.conf.j2  |   2 +-
.../common/templates/conf/input/00-global.conf.j2  |   2 +-
.../common/templates/conf/input/02-mariadb.conf.j2 |  14 ++
.../common/templates/conf/output/00-local.conf.j2  |  12 +-
.../templates/conf/output/02-monasca.conf.j2       |   4 +-
ansible/roles/glance/tasks/config.yml              |   5 +-
ansible/roles/grafana/tasks/post_config.yml        |   2 +-
ansible/roles/haproxy/tasks/precheck.yml           |   2 +
ansible/roles/horizon/templates/local_settings.j2  |   3 +
ansible/roles/kibana/defaults/main.yml             |  10 --
ansible/roles/kibana/tasks/deploy.yml              |   2 -
ansible/roles/kibana/tasks/post_config.yml         |  89 ----------
ansible/roles/mariadb/defaults/main.yml            |  37 +++-
ansible/roles/mariadb/handlers/main.yml            |  16 ++
ansible/roles/mariadb/tasks/check-containers.yml   |   2 +-
ansible/roles/mariadb/tasks/config.yml             |  29 +++-
ansible/roles/mariadb/tasks/recover_cluster.yml    |  24 +--
.../mariadb/templates/mariadb-clustercheck.json.j2 |  18 ++
.../roles/mariadb/templates/xinetd-clustercheck.j2 |  16 ++
ansible/roles/monasca/defaults/main.yml            |  28 ---
ansible/roles/monasca/handlers/main.yml            |  15 --
ansible/roles/monasca/tasks/config.yml             |  34 ----
ansible/roles/monasca/tasks/deploy.yml             |   5 +-
ansible/roles/monasca/tasks/post_config.yml        |   2 +-
ansible/roles/monasca/tasks/precheck.yml           |  11 --
ansible/roles/monasca/tasks/upgrade.yml            |  12 ++
.../monasca-agent-forwarder/agent-forwarder.yml.j2 |   2 +-
.../monasca/templates/monasca-api/api.conf.j2      |   7 +
.../templates/monasca-api/monasca-api.json.j2      |   2 +-
.../templates/monasca-log-api/log-api-paste.ini.j2 |  65 -------
.../templates/monasca-log-api/log-api.conf.j2      |  43 -----
.../monasca-log-api/monasca-log-api.json.j2        |  32 ----
.../templates/monasca-log-api/wsgi-log-api.conf.j2 |  34 ----
ansible/roles/neutron/tasks/config.yml             |   1 +
ansible/roles/nova/tasks/bootstrap.yml             |   3 +
ansible/roles/nova/tasks/deploy.yml                |   3 -
ansible/roles/nova/tasks/upgrade.yml               |   7 -
ansible/roles/octavia/defaults/main.yml            |   4 +
ansible/roles/octavia/tasks/register.yml           |  14 ++
ansible/roles/octavia/templates/octavia.conf.j2    |   2 +-
ansible/roles/prometheus/tasks/config.yml          |  21 ++-
ansible/roles/prometheus/templates/clouds.yml.j2   |   1 +
.../prometheus-elasticsearch-exporter.json.j2      |   2 +-
ansible/site.yml                                   |   1 -
.../central-logging-guide.rst                      |  15 ++
etc/kolla/globals.yml                              |   9 +-
.../notes/bug-1799689-c8612c73649ac483.yaml        |   5 +
.../notes/bug-1850812-e840453d44e17d34.yaml        |   4 +
.../notes/bug-1856346-59d0f01005d56e81.yaml        |   6 +
.../notes/bug-1881890-72c76f5fc065588b.yaml        |   5 +
...-chrony-permission-denied-917b3bffc5cdb38d.yaml |   6 +
...-become-attributes-vmware-9ae97e49b4d7dc0d.yaml |   5 +
.../bug-nova-dev-mod-failed-ad4e64f5a5bc2a6a.yaml  |   4 +
...fault-migration-interface-3cdf30eed98553fd.yaml |   6 +
...-cinder-upgrade-max-count-ab928f85f224c63d.yaml |   5 +
...erate-self-signed-root-ca-bc523acab7290cfe.yaml |  17 ++
.../mariadb-clustercheck-39b5837c09868f1e.yaml     |   5 +
.../remove-congress-role-0f6a327de69e2173.yaml     |   8 +
...r-in-admin-project-action-95c87ca45a1188d6.yaml |  19 +-
...fied-monasca-api-for-logs-8c6829e7fb1ccf8b.yaml |   7 +
tools/init-runonce                                 |   2 +-
tools/kolla-ansible                                |  74 ++++++--
tools/setup_gate.sh                                |   3 +
tox.ini                                            |  12 +-
93 files changed, 931 insertions(+), 814 deletions(-)