[release-announce] bifrost 8.3.1 (8.3)

no-reply at openstack.org no-reply at openstack.org
Mon Sep 14 18:33:46 UTC 2020


We are overjoyed to announce the release of:

bifrost 8.3.1: Deployment of physical machines using OpenStack Ironic
and Ansible

This release is part of the 8.3 release series.

The source is available from:

    https://opendev.org/openstack/bifrost

Download the package from:

    https://pypi.org/project/bifrost

For more details, please see below.

8.3.1
^^^^^


Upgrade Notes
*************

* Bifrost no longer adds ironic and ironic-inspector endpoints to
  the public firewalld zone, the operator has to do it explicitly if
  external access is expected.

* Adds the explicit setting of file access permissions to get_url
  calls in bifrost ansible playbooks to ensure that the contents of
  "/httpboot" are world-readable independently of which Ansible
  version is in use.


Bug Fixes
*********

* Automatically enables DHCP and TFTP services in firewalld on
  CentOS/RHEL.

* Instead of modifying the "public" firewalld zone, creates a new
  zone "bifrost" and puts the "network_interface" in it. Set
  "firewalld_internal_zone=public" to revert to the previous behavior.

* Makes "/var/lib/ironic" and its images subdirectories readable by
  nginx. This is required for using the images cache.

* Fixes ACL of PXE and iPXE boot files to make sure they are world-
  readable.

* Resolves the issue with ansible versions 2.9.12 and 2.8.14 where
  implicit setting of file permissions on files downloaded with
  get_url calls results in overly restrictive permissions. This leads
  to access denied while attempting to read the contents of
  "/httpboot" and results in failed deployments.

* Adds correct SELinux context for "/tftpboot".







More information about the Release-announce mailing list