[release-announce] kolla-ansible 10.2.0 (ussuri)

no-reply at openstack.org no-reply at openstack.org
Thu Jan 7 17:30:09 UTC 2021


We are psyched to announce the release of:

kolla-ansible 10.2.0: Ansible Deployment of Kolla containers

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/kolla-ansible

Download the package from:

    https://tarballs.openstack.org/kolla-ansible/

Please report issues through:

    https://bugs.launchpad.net/kolla-ansible/+bugs

For more details, please see below.

10.2.0
^^^^^^


New Features
************

* Adds a new flag, "docker_disable_default_iptables_rules", which
  defaults to "no". Docker is manipulating iptables rules by default
  to provide network isolation, and this might cause problems if the
  host already has an iptables based firewall. A common problem is
  that Docker sets the default policy of the "FORWARD" chain in the
  "filter" to "DROP". Setting "docker_disable_default_iptables_rules"
  to "yes" will disable Docker's iptables manipulation. This feature
  will be enabled by default from the Victoria 11.0.0 release.

* Improves performance of the "common" role by generating all
  fluentd configuration in a single file.

* Improves performance of the "common" role by generating all
  logrotate configuration in a single file.


Known Issues
************

* Since Ussuri, there is a bug in how Ceph (RBD) is handled with
  Cinder: the "backend_host" option is missing from the generated
  configuration for external Ceph. The symptoms are that volumes
  become unmanageable until extra admin action is taken. This does
  *not* affect the data plane - running virtual machines are *not*
  affected.

  There is a related issue regarding active-active "cinder-volume"
  services (single-host "cinder-volume" *not* affected), which is that
  they should not have been configured with "backend_host" in the
  first place but with "cluster" and proper coordination instead. Some
  users might have customised their config already to address this
  issue.

  The Kolla team is investigating the best way to address this for all
  its users. In the meantime, please ensure that, before upgrading to
  Ussuri, the "backend_host" option is set to its previous value (the
  default was "rbd:volumes") via a config override.

  For more details please refer to the referenced bug. Do note this
  issue affects both new deployments and upgrades. LP#1904062


Upgrade Notes
*************

* When deploying Monasca with Logstash 6, any custom Logstash 2
  configuration for Monasca will need to be updated to work with
  Logstash 6. Please consult the documentation.

* "baremetal" role now uses CentOS "8" package repository for Docker
  CE (compared to "7" previously).

* The Prometheus OpenStack exporter now uses internal endpoints to
  communicate with OpenStack services, to match the configuration of
  other services deployed by Kolla Ansible. Using public endpoints can
  be retained by setting the
  "prometheus_openstack_exporter_endpoint_type" variable to "public".

* The  default value of "REST_API_REQUIRED_SETTINGS" was
  synchronized with Horizon. You may want to review settings exposed
  by the updated configuration.


Security Issues
***************

* The "admin-openrc.sh" file generated by "kolla-ansible post-
  deploy" was previously created with "root:root" ownership and "644"
  permissions. This would allow anyone with access to the same
  directory to read the file, including the admin credentials. The
  ownership of "admin-openrc.sh" is now set to the user executing
  "kolla-ansible", and the file is assigned a mode of "600". This
  change can be applied by running "kolla-ansible post-deploy".


Bug Fixes
*********

* Add support to use bifrost-deploy behind proxy. It uses existing
  container_proxy variable.

* Fixes handling of */dev/kvm* permissions to be more robust against
  host-level actions. LP#1681461

* IPv6 fully-routed topology (/128 addressing) is now allowed (where
  applicable). LP#1848941

* When deploying Elasticsearch 6, Logstash 2 was deployed by default
  which is not compatible with Elasticsearch 6. Logstash 6 is now
  deployed by default.

* Fix Castellan (Barbican client) when used with enabled TLS.
  LP#1886615

* Fixes "--configdir" parameter to apply to default "passwords.yml"
  location. LP#1887180

* "fluentd" is now logging to "/var/log/kolla/fluentd/fluentd.log"
  instead of "stdout". LP#1888852

* Fixes "deploy-containers" action missing for the Masakari role.
  LP#1889611

* An issue has been fixed when "keystone" container would be stuck
  in restart loop with a message that fernet key is stale. LP#1895723

* Fixes "haproxy_single_service_split" template to work with default
  for "mode" ("http"). LP#1896591

* Fixed invalid fernet cron file path on Debian/Ubuntu from
  "/var/spool/cron/crontabs/root/fernet-cron" to
  "/var/spool/cron/crontabs/root". LP#1898765

* Add with_first_found on placement for placement-api wsgi
  configuration to allow overwrite from users. LP#1898766

* OVN will no longer schedule SNAT routers on compute nodes when
  "neutron_ovn_distributed_fip" is enabled. LP#1901960

* RabbitMQ services are now restarted serially to avoid a split
  brain. LP#1904702

* Fixes LP#1906796 by adding notice and note loglevels to monasca
  log- metrics drop configuration

* Fixes Swift's stop action. It will no longer try to start "swift-
  object-updater" container again. LP#1906944

* Fixes an issue with the "kolla-ansible prechecks" command with
  Docker 20.10. LP#1907436

* Fixes an issue with "kolla-ansible mariadb_recovery" when the
  "mariadb" container does not exist on one or more hosts. LP#1907658

* fix deploy freezer failed when use kolla_dev_mod LP#1888242

* Fixes issues with some CloudKitty commands trying to connect to an
  external TLS endpoint using HTTP. LP#1888544

* Fixes an issue where Docker may fail to start if "iptables" is not
  installed. LP#1899060

* The "admin-openrc.sh" file generated by "kolla-ansible post-
  deploy" was previously created with "root:root" ownership and "644"
  permissions. This would allow anyone with access to the same
  directory to read the file, including the admin credentials. The
  ownership of "admin-openrc.sh" is now set to the user executing
  "kolla-ansible", and the file is assigned a mode of "600". This
  change can be applied by running "kolla-ansible post-deploy".

* Fixes an issue during deleting evacuated instances with encrypted
  block devices. LP#1891462

* Fixes an issue where Keystone Fernet key rotation may fail due to
  permission denied error if the Keystone rotation happens before the
  Keystone container starts. LP#1888512

* Fixes an issue with Keystone startup when Fernet key rotation does
  not occur within the configured interval. This may happen due to one
  of the Keystone hosts being down at the scheduled time of rotation,
  or due to uneven intervals between cron jobs. LP#1895723

* Fixes an issue with Kibana upgrade on Debian/Ubuntu systems.
  LP#1901614

* Reverts the arp_responder option setting to the default ('False')
  for the LinuxBridge agent, as this is known to cause problems with
  l2_population as well as other issues such as not being fully
  compatible with the allowed-address-pairs extension. LP#1892776

* Fixes an issue with the Neutron Linux bridge ML2 driver where the
  firewall driver configuration was not applied. LP#1889455

* Fixes an issue with Masakari and internal TLS where CA
  certificates were not copied into containers, and the path to the CA
  file was not configured. Depends on masakari bug 1873736 being
  fixed. LP#1888655

* Fixes an issue where Grafana instances would race to bootstrap the
  Grafana DB. See LP#1888681.

* Fixes LP#1892210 where the number of open connections to Memcached
  from "neutron-server" would grow over time until reaching the
  maximum set by "memcached_connection_limit" (5000 by default), at
  which point the Memcached instance would stop working.

* An issue where when Kafka default topic creation was used to
  create a Kafka topic, no redundant replicas were created in a multi-
  node cluster. LP#1888522. This affects Monasca which uses Kafka, and
  was previously masked by the legacy Kafka client used by Monasca
  which has since been upgraded in Ussuri. Monasca users with multi-
  node Kafka clusters should consultant the Kafka documentation to
  increase the number of replicas.

* Fixes an issue where the "br_netfilter" kernel module was not
  loaded on compute hosts. LP#1886796

* The Prometheus OpenStack exporter now uses internal endpoints to
  communicate with OpenStack services, to match the configuration of
  other services deployed by Kolla Ansible.

* Prevents adding a new Keystone host to an existing cluster when
  not targeting all Keystone hosts (e.g. due to "--limit" or "--
  serial" arguments), to avoid overwriting existing Fernet keys.
  LP#1891364

* Reduce the use of SQLAlchemy connection pooling, to improve
  service reliability during a failover of the controller with the
  internal VIP. LP#1896635

* No longer configures the Prometheus OpenStack exporter to use the
  "prometheus" Docker volume, which was never required.

* Updates the default value of "REST_API_REQUIRED_SETTINGS" in
  Horizon "local_settings", which enables some features such as
  selecting the default boot source for instances. LP#1891024


Other Notes
***********

* Add trove-guestagent.conf for trove

Changes in kolla-ansible 10.1.0..10.2.0
---------------------------------------

e1380e259 Add `issue` reno for bug #1904062
90d7cc481 docs: add info on adding and removing hosts
ca2654740 Use ansible_distribution_release instead of ansible_lsb.codename
a90871d8e Fix mariadb_recovery when mariadb container is missing
b2c2aea0b Backport ignore_missing support for kolla_docker
356405a7b Edit ironic inspector pxe filter driver name none to noop
39ffceae8 CI: test elasticsearch & kibana 6.x migration (Ussuri)
81dc651c1 Do not start swift-object-updater on stop
ece790946 docs: Add magnum guide
efac50bac Revert "Performance: Use import_tasks in the main plays"
0cc64d8e2 Fix an Ansible warning
33a844f07 Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default
8f0b88e15 [docs] Add python3-venv package to quickstart.rst
5d066b0cc [CI] Drop periodics
16670ed70 Fix prechecks with Docker 20.10.0
aa3fa8d82 RabbitMQ handler refactored to restart services in serial
c8a1cd98f Do not set 'always' tag where unnecessary
57a2a2019 Performance: Use import_tasks in the main plays
1f83249ef Fix stop containers task in Swift rolling restart
f9a45abfb Fix kolla-ansible to work with pyenv-virtualenv
2a7197a6a [baremetal]: Use $releasever in docker-ce repo
b03dc2c3d CI: add missing --fail argument to curl
4ad4429f2 [CI] Set 0 swap size
88a840fb9 ovn: Do not schedule SNAT routers on computes
7db8c7df3 Fix permission denied during Fernet key rotation
e33c4a7e0 kibana: Fix kibana 6.x migration
724e1f9b6 CI: prometheus-efk: add tests/test-prometheus-efk.sh to files
8e56a1a79 Fix keystone-startup.sh - remove Fernet key age check
b0d71d0fd follow up: Fix the centos8 default path error in the quickstart.rst document
952bf2536 Fix the centos8 default path error in the quickstart.rst document
5d2c8d5a1 Fix fernet cron path on Ubuntu/Debian
2008668ae docs: Add link back to Train CentOS 8 migration page
a9af6cebf baremetal: Install iptables for Docker if enabled
1ab5d5081 replace internal with openstack_interface
24c1450de Fix glance-tls-proxy logrotate and fluentd log permissions
43842a8c8 Delete the /var/log/kolla directory should use sudo
c66f6a135 Performance: use a single config file for fluentd
2946e458f Performance: optimize genconfig
c55f7f3a2 Apply bool filter to all enable_prometheus_* variables
0597bc581 Performance: use import_tasks for register and bootstrap
0528e5435 Fix haproxy bundle generation
a80240c69 Allow overwrite of placement-api wsgi config
fe2146020 Make no_proxy handling more robust
1d4fd52e4 Reduce the use of SQLAlchemy connection pooling
7e3d3d8bc Fix keystone-startup.sh
96462c42a Fix default mode in haproxy_single_service_split
9464bd11c Pin Ansible in test-reqs (<2.10)
64747162f Performance: use a single config file for logrotate
1739d667a Remove unused configuration for prometheus-openstack-exporter
566547dee Performance: remove one include_tasks in nova-cell
326bfaa92 Performance: replace unconditional include_tasks with import_tasks
fd998d071 Fix test-ironic.sh not catching errors
a9c227cca Set neutron-ovn-metadata-agent metadata_workers to 2
d8dfe5367 Synchronize REST_API_REQUIRED_SETTINGS with Horizon
0e9287fe0 Add default value for kolla_internal_address variable
bfbc8e867 Fix external mariadb documentation for database_user
744ff2277 Update trove config file
e3a92a5e2 add region name for tasks
3b197af49 Disable arp_responder option for LinuxBridge agent
772171306 Fix fernet bootstrap and key distribution - follow up
15d689044 Prevent overwriting existing Keystone Fernet keys
c30eb14af change the timezone precheck task's condition
5d09ab684 Add workaround for keystonemiddleware/neutron memcached issue
e71cc0d40 Add the missing hosts for vitrage
75f8ce358 Fix kolla-ansible not reflect environment changed
652d3eeb5 Add cinder auth config to nova-cell nova.conf.j2
d87217ec2 CI: enable Ansible SSH pipelining
57536ed6f Pin ansible-lint to 4.2.0
54a223b67 Add trove-guestagent.conf
295742718 Fix ownership and permissions of admin-openrc.sh
a229bbd22 Mount /etc/timezone based on host OS
e74782af4 Skip broken ansible-lint
6f81454f5 Add support to use bifrost-deploy behind proxy
cb6eaa204 Add missing mistral services log files
b2a30ab50 [CI] Temporarily block new Ansible
ed6c6babf Fix Barbican client (Castellan) with TLS (part 2)
f27c8489f Update TLS documentation
10f3a99b4 Move TLS documentation to its own page
12a0acfe3 [docker] Added a new flag to disable default iptables rules
73e4ff71d Fix actions for Aodh and Swift
95068764c Fix play hosts for ironic, monasca, neutron, nova
8d2ecde25 prometheus-openstack-exporter config service filtering
362b79728 linuxbridge: Fix name of securitygroup section
16aae4737 Configure prometheus-openstack-exporter to use internal endpoints
8a770bbdb Fix kolla_address in IPv6 fully-routed topo case
dee49c7ed Fix Masakari role missing deploy-containers
ae3374961 Performance: use import_tasks for check-containers.yml
9a38592eb fluentd: log to a file instead of stdout
4d9650ab2 Improve Grafana DB bootstrap
a82e23370 Set Kafka default replication factor
b973ff7d8 Fix some CloudKitty API responses when behind SSL
8366f22ac Performance: remove unnecessary conditions from includes
26f6db900 Masakari: copy TLS certificates into containers
3c33cd6a3 Update glance configuration file for backend
b4e22abff fix deploy freezer failed when kolla_dev_mod enabled
6a6ee3df2 Make /dev/kvm permissions handling more robust
8fa0af6b5 Fix fluentd warnings caused by "type copy"
aca3736e7 Fix Barbican client (Castellan) with TLS
f7b86b8ae CI: add prometheus-efk scenario
97d153bff Support editable virtualenv installation for development
d2be30095 Manila - adjust logic for Open vSwitch configuration generation
4b7ac2c00 Logstash 6 support
6d6d3c043 Evaluate PASSWORDS_FILE later
d986ba05d Load br_netfilter module in nova-cell role


Diffstat (except docs and test files)
-------------------------------------

ansible/action_plugins/merge_yaml.py               |   4 +-
ansible/group_vars/all.yml                         |  17 +-
ansible/library/kolla_docker.py                    |   7 +-
ansible/nova.yml                                   |   2 +
ansible/post-deploy.yml                            |   6 +-
ansible/roles/aodh/defaults/main.yml               |   8 +-
ansible/roles/aodh/tasks/bootstrap.yml             |   2 +-
ansible/roles/aodh/tasks/config.yml                |   3 -
ansible/roles/aodh/tasks/deploy.yml                |  14 +-
ansible/roles/aodh/tasks/reconfigure.yml           |   2 +-
ansible/roles/aodh/tasks/register.yml              |   1 -
ansible/roles/aodh/tasks/stop.yml                  |   6 +
ansible/roles/aodh/tasks/upgrade.yml               |   6 +-
ansible/roles/aodh/templates/aodh.conf.j2          |   2 +
ansible/roles/barbican/defaults/main.yml           |   6 +-
ansible/roles/barbican/tasks/bootstrap.yml         |   2 +-
ansible/roles/barbican/tasks/config.yml            |   3 -
ansible/roles/barbican/tasks/deploy.yml            |  13 +-
ansible/roles/barbican/tasks/reconfigure.yml       |   2 +-
ansible/roles/barbican/tasks/register.yml          |   1 -
ansible/roles/barbican/tasks/upgrade.yml           |   6 +-
ansible/roles/baremetal/defaults/main.yml          |   7 +-
.../roles/baremetal/tasks/bootstrap-servers.yml    |   6 +-
ansible/roles/baremetal/tasks/post-install.yml     |  13 +
ansible/roles/bifrost/tasks/deploy.yml             |   6 +-
ansible/roles/bifrost/tasks/reconfigure.yml        |   2 +-
ansible/roles/bifrost/tasks/start.yml              |   1 +
ansible/roles/bifrost/tasks/upgrade.yml            |   4 +-
ansible/roles/blazar/defaults/main.yml             |   4 +-
ansible/roles/blazar/tasks/bootstrap.yml           |   2 +-
ansible/roles/blazar/tasks/config.yml              |   3 -
ansible/roles/blazar/tasks/deploy.yml              |  12 +-
ansible/roles/blazar/tasks/reconfigure.yml         |   2 +-
ansible/roles/blazar/tasks/register.yml            |   1 -
ansible/roles/blazar/tasks/upgrade.yml             |   6 +-
ansible/roles/blazar/templates/blazar.conf.j2      |   2 +
ansible/roles/ceilometer/defaults/main.yml         |   8 +-
ansible/roles/ceilometer/tasks/bootstrap.yml       |   2 +-
ansible/roles/ceilometer/tasks/config.yml          |   3 -
ansible/roles/ceilometer/tasks/deploy.yml          |  12 +-
ansible/roles/ceilometer/tasks/reconfigure.yml     |   2 +-
ansible/roles/ceilometer/tasks/register.yml        |   1 -
ansible/roles/ceilometer/tasks/upgrade.yml         |   6 +-
ansible/roles/certificates/tasks/generate.yml      |   4 +-
ansible/roles/chrony/defaults/main.yml             |   2 +-
ansible/roles/chrony/tasks/config.yml              |   3 -
ansible/roles/chrony/tasks/deploy.yml              |   4 +-
ansible/roles/chrony/tasks/reconfigure.yml         |   2 +-
ansible/roles/chrony/tasks/upgrade.yml             |   2 +-
ansible/roles/cinder/defaults/main.yml             |   8 +-
ansible/roles/cinder/tasks/bootstrap.yml           |   2 +-
ansible/roles/cinder/tasks/config.yml              |   3 -
ansible/roles/cinder/tasks/deploy.yml              |  20 +-
ansible/roles/cinder/tasks/reconfigure.yml         |   2 +-
ansible/roles/cinder/tasks/register.yml            |   1 -
ansible/roles/cinder/tasks/upgrade.yml             |   6 +-
ansible/roles/cinder/templates/cinder.conf.j2      |   4 +
ansible/roles/cloudkitty/defaults/main.yml         |   4 +-
ansible/roles/cloudkitty/tasks/bootstrap.yml       |   4 +-
ansible/roles/cloudkitty/tasks/config.yml          |   3 -
ansible/roles/cloudkitty/tasks/deploy.yml          |  12 +-
ansible/roles/cloudkitty/tasks/reconfigure.yml     |   2 +-
ansible/roles/cloudkitty/tasks/register.yml        |   1 -
ansible/roles/cloudkitty/tasks/upgrade.yml         |   6 +-
.../roles/cloudkitty/templates/cloudkitty.conf.j2  |   5 +
ansible/roles/collectd/defaults/main.yml           |   2 +-
ansible/roles/collectd/tasks/config.yml            |   3 -
ansible/roles/collectd/tasks/deploy.yml            |   4 +-
ansible/roles/collectd/tasks/reconfigure.yml       |   2 +-
ansible/roles/collectd/tasks/upgrade.yml           |   4 +-
ansible/roles/common/defaults/main.yml             |   6 +-
ansible/roles/common/filter_plugins/filters.py     |  22 ++
ansible/roles/common/tasks/config.yml              | 405 ++++++++-------------
ansible/roles/common/tasks/deploy.yml              |   6 +-
ansible/roles/common/tasks/reconfigure.yml         |   2 +-
ansible/roles/common/tasks/upgrade.yml             |   4 +-
.../templates/conf/filter/01-rewrite-0.12.conf.j2  |   2 +-
.../templates/conf/filter/01-rewrite-0.14.conf.j2  |   2 +-
.../common/templates/conf/output/00-local.conf.j2  | 113 +++---
.../templates/cron-logrotate-fluentd.conf.j2       |   3 +
.../common/templates/cron-logrotate-global.conf.j2 |   5 +-
ansible/roles/common/templates/cron.json.j2        |  77 +---
ansible/roles/common/templates/fluentd.json.j2     |  45 +--
ansible/roles/common/templates/td-agent.conf.j2    |  49 ++-
ansible/roles/congress/defaults/main.yml           |   6 +-
ansible/roles/cyborg/defaults/main.yml             |   6 +-
ansible/roles/cyborg/tasks/bootstrap.yml           |   2 +-
ansible/roles/cyborg/tasks/config.yml              |   3 -
ansible/roles/cyborg/tasks/deploy.yml              |  13 +-
ansible/roles/cyborg/tasks/reconfigure.yml         |   2 +-
ansible/roles/cyborg/tasks/register.yml            |   1 -
ansible/roles/cyborg/tasks/upgrade.yml             |   6 +-
ansible/roles/cyborg/templates/cyborg.conf.j2      |   2 +
ansible/roles/designate/defaults/main.yml          |  14 +-
ansible/roles/designate/tasks/bootstrap.yml        |   2 +-
ansible/roles/designate/tasks/config.yml           |   3 -
ansible/roles/designate/tasks/deploy.yml           |  20 +-
ansible/roles/designate/tasks/reconfigure.yml      |   2 +-
ansible/roles/designate/tasks/register.yml         |   1 -
ansible/roles/designate/tasks/update_pools.yml     |   3 +-
ansible/roles/designate/tasks/upgrade.yml          |   8 +-
ansible/roles/elasticsearch/defaults/main.yml      |   4 +-
ansible/roles/elasticsearch/tasks/config.yml       |   3 -
ansible/roles/elasticsearch/tasks/deploy.yml       |   6 +-
ansible/roles/elasticsearch/tasks/reconfigure.yml  |   2 +-
ansible/roles/elasticsearch/tasks/upgrade.yml      |   6 +-
ansible/roles/etcd/defaults/main.yml               |   2 +-
ansible/roles/etcd/tasks/config.yml                |   3 -
ansible/roles/etcd/tasks/deploy.yml                |   4 +-
ansible/roles/etcd/tasks/reconfigure.yml           |   2 +-
ansible/roles/etcd/tasks/upgrade.yml               |   4 +-
ansible/roles/freezer/defaults/main.yml            |   4 +-
ansible/roles/freezer/tasks/bootstrap.yml          |   4 +-
ansible/roles/freezer/tasks/config.yml             |   3 -
ansible/roles/freezer/tasks/deploy.yml             |  15 +-
ansible/roles/freezer/tasks/reconfigure.yml        |   2 +-
ansible/roles/freezer/tasks/register.yml           |   1 -
ansible/roles/freezer/tasks/upgrade.yml            |   6 +-
ansible/roles/freezer/templates/freezer.conf.j2    |   2 +
ansible/roles/glance/defaults/main.yml             |  11 +-
ansible/roles/glance/tasks/bootstrap.yml           |   2 +-
ansible/roles/glance/tasks/config.yml              |   3 -
ansible/roles/glance/tasks/deploy.yml              |  14 +-
ansible/roles/glance/tasks/legacy_upgrade.yml      |   6 +-
ansible/roles/glance/tasks/reconfigure.yml         |   2 +-
ansible/roles/glance/tasks/register.yml            |   1 -
ansible/roles/glance/tasks/rolling_upgrade.yml     |   2 +
ansible/roles/glance/templates/glance-api.conf.j2  |  11 +
ansible/roles/gnocchi/defaults/main.yml            |   6 +-
ansible/roles/gnocchi/tasks/bootstrap.yml          |   2 +-
ansible/roles/gnocchi/tasks/config.yml             |   3 -
ansible/roles/gnocchi/tasks/deploy.yml             |  13 +-
ansible/roles/gnocchi/tasks/reconfigure.yml        |   2 +-
ansible/roles/gnocchi/tasks/register.yml           |   1 -
ansible/roles/gnocchi/tasks/upgrade.yml            |   6 +-
ansible/roles/gnocchi/templates/gnocchi.conf.j2    |   3 +-
ansible/roles/grafana/defaults/main.yml            |   2 +-
ansible/roles/grafana/handlers/main.yml            |  39 +-
ansible/roles/grafana/tasks/config.yml             |   3 -
ansible/roles/grafana/tasks/deploy.yml             |   8 +-
ansible/roles/grafana/tasks/reconfigure.yml        |   2 +-
ansible/roles/grafana/tasks/upgrade.yml            |  30 +-
.../templates/haproxy_single_service_split.cfg.j2  |   2 +-
ansible/roles/haproxy/defaults/main.yml            |   4 +-
ansible/roles/haproxy/tasks/config.yml             |   3 -
ansible/roles/haproxy/tasks/deploy.yml             |   6 +-
ansible/roles/haproxy/tasks/reconfigure.yml        |   2 +-
ansible/roles/haproxy/tasks/upgrade.yml            |   4 +-
ansible/roles/heat/defaults/main.yml               |   6 +-
ansible/roles/heat/tasks/bootstrap.yml             |   2 +-
ansible/roles/heat/tasks/config.yml                |   3 -
ansible/roles/heat/tasks/deploy.yml                |  16 +-
ansible/roles/heat/tasks/reconfigure.yml           |   2 +-
ansible/roles/heat/tasks/register.yml              |   1 -
ansible/roles/heat/tasks/upgrade.yml               |   6 +-
ansible/roles/heat/templates/heat.conf.j2          |   2 +
ansible/roles/horizon/defaults/main.yml            |   2 +-
ansible/roles/horizon/tasks/bootstrap.yml          |   2 +-
ansible/roles/horizon/tasks/config.yml             |   3 -
ansible/roles/horizon/tasks/deploy.yml             |   4 +-
ansible/roles/horizon/tasks/reconfigure.yml        |   2 +-
ansible/roles/horizon/tasks/upgrade.yml            |   4 +-
ansible/roles/horizon/templates/local_settings.j2  |  13 +-
ansible/roles/influxdb/defaults/main.yml           |   2 +-
ansible/roles/influxdb/tasks/config.yml            |   3 -
ansible/roles/influxdb/tasks/deploy.yml            |   4 +-
ansible/roles/influxdb/tasks/reconfigure.yml       |   2 +-
ansible/roles/influxdb/tasks/upgrade.yml           |   4 +-
ansible/roles/ironic/defaults/main.yml             |  14 +-
ansible/roles/ironic/tasks/bootstrap.yml           |   2 +-
ansible/roles/ironic/tasks/config.yml              |   3 -
ansible/roles/ironic/tasks/deploy.yml              |  22 +-
ansible/roles/ironic/tasks/legacy_upgrade.yml      |   8 +-
ansible/roles/ironic/tasks/reconfigure.yml         |   2 +-
ansible/roles/ironic/tasks/register.yml            |   1 -
ansible/roles/ironic/tasks/rolling_upgrade.yml     |  12 +-
.../ironic/templates/ironic-inspector.conf.j2      |   2 +
ansible/roles/ironic/templates/ironic.conf.j2      |   2 +
ansible/roles/iscsi/defaults/main.yml              |   4 +-
ansible/roles/iscsi/tasks/config.yml               |   3 -
ansible/roles/iscsi/tasks/deploy.yml               |   6 +-
ansible/roles/iscsi/tasks/reconfigure.yml          |   2 +-
ansible/roles/iscsi/tasks/upgrade.yml              |   2 +-
ansible/roles/kafka/defaults/main.yml              |   2 +-
ansible/roles/kafka/tasks/config.yml               |   3 -
ansible/roles/kafka/tasks/deploy.yml               |   4 +-
ansible/roles/kafka/tasks/reconfigure.yml          |   2 +-
ansible/roles/kafka/tasks/upgrade.yml              |   4 +-
.../kafka/templates/kafka.server.properties.j2     |   1 +
ansible/roles/karbor/defaults/main.yml             |   6 +-
ansible/roles/karbor/tasks/bootstrap.yml           |   2 +-
ansible/roles/karbor/tasks/config.yml              |   3 -
ansible/roles/karbor/tasks/deploy.yml              |  13 +-
ansible/roles/karbor/tasks/reconfigure.yml         |   2 +-
ansible/roles/karbor/tasks/register.yml            |   1 -
ansible/roles/karbor/tasks/upgrade.yml             |   6 +-
ansible/roles/karbor/templates/karbor.conf.j2      |   2 +
ansible/roles/keystone/defaults/main.yml           |   6 +-
ansible/roles/keystone/handlers/main.yml           |  12 +-
ansible/roles/keystone/tasks/bootstrap.yml         |   2 +-
ansible/roles/keystone/tasks/bootstrap_service.yml |  22 +-
ansible/roles/keystone/tasks/config.yml            |  17 +-
ansible/roles/keystone/tasks/deploy.yml            |  10 +-
ansible/roles/keystone/tasks/reconfigure.yml       |   2 +-
ansible/roles/keystone/tasks/register.yml          |   2 +-
ansible/roles/keystone/tasks/upgrade.yml           |   4 +-
.../keystone/templates/fernet-node-sync.sh.j2      |  20 +-
.../keystone/templates/keystone-fernet.json.j2     |   9 +-
.../roles/keystone/templates/keystone-ssh.json.j2  |   7 +
.../keystone/templates/keystone-startup.sh.j2      |  24 ++
ansible/roles/keystone/templates/keystone.conf.j2  |   2 +
ansible/roles/keystone/templates/keystone.json.j2  |   9 +-
ansible/roles/kibana/defaults/main.yml             |   2 +-
ansible/roles/kibana/tasks/config.yml              |   3 -
ansible/roles/kibana/tasks/deploy.yml              |   4 +-
.../roles/kibana/tasks/migrate-kibana-index.yml    |   2 +-
ansible/roles/kibana/tasks/reconfigure.yml         |   2 +-
ansible/roles/kibana/tasks/upgrade.yml             |   6 +-
ansible/roles/kuryr/defaults/main.yml              |   2 +-
ansible/roles/kuryr/tasks/config.yml               |   3 -
ansible/roles/kuryr/tasks/deploy.yml               |   6 +-
ansible/roles/kuryr/tasks/reconfigure.yml          |   2 +-
ansible/roles/kuryr/tasks/register.yml             |   1 -
ansible/roles/kuryr/tasks/upgrade.yml              |   4 +-
ansible/roles/magnum/defaults/main.yml             |   4 +-
ansible/roles/magnum/tasks/bootstrap.yml           |   2 +-
ansible/roles/magnum/tasks/config.yml              |   3 -
ansible/roles/magnum/tasks/deploy.yml              |  12 +-
ansible/roles/magnum/tasks/reconfigure.yml         |   2 +-
ansible/roles/magnum/tasks/register.yml            |   4 +-
ansible/roles/magnum/tasks/upgrade.yml             |   6 +-
ansible/roles/magnum/templates/magnum.conf.j2      |   2 +
ansible/roles/manila/defaults/main.yml             |   8 +-
ansible/roles/manila/tasks/bootstrap.yml           |   2 +-
ansible/roles/manila/tasks/config.yml              |   3 -
ansible/roles/manila/tasks/deploy.yml              |  14 +-
ansible/roles/manila/tasks/reconfigure.yml         |   2 +-
ansible/roles/manila/tasks/register.yml            |   1 -
ansible/roles/manila/tasks/upgrade.yml             |   6 +-
ansible/roles/manila/templates/manila.conf.j2      |   2 +
ansible/roles/mariadb/defaults/main.yml            |   4 +-
ansible/roles/mariadb/tasks/bootstrap.yml          |   2 +-
ansible/roles/mariadb/tasks/config.yml             |   3 -
ansible/roles/mariadb/tasks/deploy.yml             |  10 +-
ansible/roles/mariadb/tasks/reconfigure.yml        |   2 +-
ansible/roles/mariadb/tasks/recover_cluster.yml    |  21 +-
ansible/roles/mariadb/tasks/upgrade.yml            |   2 +-
ansible/roles/masakari/defaults/main.yml           |   6 +-
ansible/roles/masakari/tasks/bootstrap.yml         |   2 +-
ansible/roles/masakari/tasks/check-containers.yml  |  17 +
ansible/roles/masakari/tasks/config.yml            |  22 +-
ansible/roles/masakari/tasks/copy-certs.yml        |   6 +
ansible/roles/masakari/tasks/deploy-containers.yml |   2 +
ansible/roles/masakari/tasks/deploy.yml            |  13 +-
ansible/roles/masakari/tasks/reconfigure.yml       |   2 +-
ansible/roles/masakari/tasks/register.yml          |   1 -
ansible/roles/masakari/tasks/upgrade.yml           |   6 +-
ansible/roles/masakari/templates/masakari.conf.j2  |   3 +
ansible/roles/memcached/defaults/main.yml          |   2 +-
ansible/roles/memcached/tasks/config.yml           |   3 -
ansible/roles/memcached/tasks/deploy.yml           |   4 +-
ansible/roles/memcached/tasks/reconfigure.yml      |   2 +-
ansible/roles/memcached/tasks/upgrade.yml          |   4 +-
ansible/roles/mistral/defaults/main.yml            |   8 +-
ansible/roles/mistral/tasks/bootstrap.yml          |   2 +-
ansible/roles/mistral/tasks/config.yml             |   3 -
ansible/roles/mistral/tasks/deploy.yml             |  14 +-
ansible/roles/mistral/tasks/reconfigure.yml        |   2 +-
ansible/roles/mistral/tasks/register.yml           |   1 -
ansible/roles/mistral/tasks/upgrade.yml            |   6 +-
ansible/roles/mistral/templates/mistral.conf.j2    |   2 +
ansible/roles/monasca/defaults/main.yml            |  25 +-
ansible/roles/monasca/handlers/main.yml            |  39 +-
ansible/roles/monasca/tasks/bootstrap.yml          |   2 +-
ansible/roles/monasca/tasks/config.yml             |   3 -
ansible/roles/monasca/tasks/deploy.yml             |  34 +-
ansible/roles/monasca/tasks/reconfigure.yml        |   2 +-
ansible/roles/monasca/tasks/register.yml           |   1 -
ansible/roles/monasca/tasks/upgrade.yml            |  38 +-
.../monasca/templates/monasca-api/api.conf.j2      |   2 +
.../monasca-log-metrics/log-metrics.conf.j2        |  13 +-
.../monasca-log-metrics.json.j2                    |   2 +-
.../monasca-log-persister/log-persister.conf.j2    |   6 +-
.../monasca-log-persister.json.j2                  |   2 +-
.../log-transformer.conf.j2                        |   9 +-
.../monasca-log-transformer.json.j2                |   2 +-
ansible/roles/mongodb/defaults/main.yml            |   2 +-
ansible/roles/multipathd/defaults/main.yml         |   2 +-
ansible/roles/multipathd/tasks/config.yml          |   3 -
ansible/roles/multipathd/tasks/deploy.yml          |   6 +-
ansible/roles/multipathd/tasks/reconfigure.yml     |   2 +-
ansible/roles/multipathd/tasks/upgrade.yml         |   6 +-
ansible/roles/murano/defaults/main.yml             |   4 +-
ansible/roles/murano/tasks/bootstrap.yml           |   2 +-
ansible/roles/murano/tasks/config.yml              |   3 -
ansible/roles/murano/tasks/deploy.yml              |  16 +-
ansible/roles/murano/tasks/reconfigure.yml         |   2 +-
ansible/roles/murano/tasks/register.yml            |   1 -
ansible/roles/murano/tasks/upgrade.yml             |   8 +-
ansible/roles/murano/templates/murano.conf.j2      |   2 +
ansible/roles/neutron/defaults/main.yml            |  24 +-
ansible/roles/neutron/tasks/bootstrap.yml          |   2 +-
ansible/roles/neutron/tasks/check-containers.yml   |   1 +
ansible/roles/neutron/tasks/config.yml             |   3 -
ansible/roles/neutron/tasks/deploy.yml             |  12 +-
ansible/roles/neutron/tasks/legacy_upgrade.yml     |   8 +-
ansible/roles/neutron/tasks/reconfigure.yml        |   2 +-
ansible/roles/neutron/tasks/register.yml           |   1 -
ansible/roles/neutron/tasks/rolling_upgrade.yml    |   6 +-
.../neutron/templates/linuxbridge_agent.ini.j2     |   3 +-
ansible/roles/neutron/templates/neutron.conf.j2    |   5 +
.../templates/neutron_ovn_metadata_agent.ini.j2    |   1 +
ansible/roles/nova-cell/defaults/main.yml          |  23 +-
ansible/roles/nova-cell/tasks/config-host.yml      |  36 ++
.../roles/nova-cell/tasks/config-libvirt-tls.yml   |  48 ++-
ansible/roles/nova-cell/tasks/config.yml           |  35 +-
ansible/roles/nova-cell/tasks/deploy.yml           |   6 +-
.../roles/nova-cell/tasks/discover_computes.yml    |   2 +-
ansible/roles/nova-cell/tasks/rabbitmq.yml         |   1 -
ansible/roles/nova-cell/tasks/reconfigure.yml      |   2 +-
ansible/roles/nova-cell/tasks/rolling_upgrade.yml  |   6 +-
ansible/roles/nova-cell/tasks/upgrade.yml          |   2 +-
.../nova-cell/templates/99-kolla-kvm.rules.j2      |   4 +
ansible/roles/nova-cell/templates/nova.conf.j2     |  15 +-
ansible/roles/nova/defaults/main.yml               |   8 +-
ansible/roles/nova/tasks/config.yml                |   3 -
ansible/roles/nova/tasks/deploy.yml                |   7 +-
ansible/roles/nova/tasks/reconfigure.yml           |   2 +-
ansible/roles/nova/tasks/register.yml              |   1 -
ansible/roles/nova/tasks/rolling_upgrade.yml       |   4 +-
ansible/roles/nova/tasks/upgrade.yml               |   2 +-
ansible/roles/nova/templates/nova.conf.j2          |   8 +-
ansible/roles/octavia/defaults/main.yml            |   8 +-
ansible/roles/octavia/tasks/bootstrap.yml          |   2 +-
ansible/roles/octavia/tasks/config.yml             |   3 -
ansible/roles/octavia/tasks/deploy.yml             |  14 +-
ansible/roles/octavia/tasks/reconfigure.yml        |   2 +-
ansible/roles/octavia/tasks/register.yml           |   3 +-
ansible/roles/octavia/tasks/upgrade.yml            |   6 +-
ansible/roles/octavia/templates/octavia.conf.j2    |   2 +
ansible/roles/openvswitch/defaults/main.yml        |   4 +-
ansible/roles/openvswitch/tasks/config.yml         |   7 +-
ansible/roles/openvswitch/tasks/deploy.yml         |   8 +-
ansible/roles/openvswitch/tasks/reconfigure.yml    |   2 +-
ansible/roles/openvswitch/tasks/upgrade.yml        |   8 +-
ansible/roles/ovn/tasks/bootstrap.yml              |   9 +-
ansible/roles/ovn/tasks/config.yml                 |   3 -
ansible/roles/ovn/tasks/deploy.yml                 |   6 +-
ansible/roles/ovn/tasks/reconfigure.yml            |   2 +-
ansible/roles/ovn/tasks/upgrade.yml                |   6 +-
ansible/roles/ovs-dpdk/defaults/main.yml           |   4 +-
ansible/roles/ovs-dpdk/tasks/config.yml            |   3 -
ansible/roles/ovs-dpdk/tasks/deploy.yml            |   4 +-
ansible/roles/ovs-dpdk/tasks/reconfigure.yml       |   2 +-
ansible/roles/ovs-dpdk/tasks/upgrade.yml           |   2 +-
ansible/roles/panko/defaults/main.yml              |   2 +-
ansible/roles/panko/tasks/bootstrap.yml            |   2 +-
ansible/roles/panko/tasks/config.yml               |   3 -
ansible/roles/panko/tasks/deploy.yml               |   8 +-
ansible/roles/panko/tasks/reconfigure.yml          |   2 +-
ansible/roles/panko/tasks/register.yml             |   1 -
ansible/roles/panko/tasks/upgrade.yml              |   6 +-
ansible/roles/panko/templates/panko.conf.j2        |   2 +
ansible/roles/placement/defaults/main.yml          |   2 +-
ansible/roles/placement/tasks/bootstrap.yml        |   2 +-
ansible/roles/placement/tasks/config.yml           |   9 +-
ansible/roles/placement/tasks/deploy.yml           |  10 +-
ansible/roles/placement/tasks/reconfigure.yml      |   2 +-
ansible/roles/placement/tasks/register.yml         |   1 -
ansible/roles/placement/tasks/upgrade.yml          |  10 +-
.../roles/placement/templates/placement.conf.j2    |   3 +-
ansible/roles/prechecks/tasks/datetime_checks.yml  |   2 +-
ansible/roles/prechecks/tasks/main.yml             |  10 +-
ansible/roles/prechecks/tasks/service_checks.yml   |   2 +-
ansible/roles/prometheus/defaults/main.yml         |  35 +-
ansible/roles/prometheus/tasks/config.yml          |   3 -
ansible/roles/prometheus/tasks/deploy.yml          |   6 +-
ansible/roles/prometheus/tasks/reconfigure.yml     |   2 +-
ansible/roles/prometheus/tasks/upgrade.yml         |   4 +-
.../prometheus-openstack-exporter.json.j2          |   7 +-
.../prometheus/templates/prometheus-server.json.j2 |   2 +-
ansible/roles/prune-images/tasks/main.yml          |   4 +-
ansible/roles/qdrouterd/defaults/main.yml          |   2 +-
ansible/roles/qdrouterd/tasks/config.yml           |   3 -
ansible/roles/qdrouterd/tasks/deploy.yml           |   6 +-
ansible/roles/qdrouterd/tasks/reconfigure.yml      |   2 +-
ansible/roles/qdrouterd/tasks/upgrade.yml          |   4 +-
ansible/roles/qinling/defaults/main.yml            |   4 +-
ansible/roles/qinling/tasks/bootstrap.yml          |   2 +-
ansible/roles/qinling/tasks/config.yml             |   3 -
ansible/roles/qinling/tasks/deploy.yml             |  12 +-
ansible/roles/qinling/tasks/reconfigure.yml        |   2 +-
ansible/roles/qinling/tasks/register.yml           |   1 -
ansible/roles/qinling/tasks/upgrade.yml            |   6 +-
ansible/roles/qinling/templates/qinling.conf.j2    |   2 +
ansible/roles/rabbitmq/defaults/main.yml           |   2 +-
ansible/roles/rabbitmq/handlers/main.yml           |  43 +--
ansible/roles/rabbitmq/tasks/check-containers.yml  |   3 +-
ansible/roles/rabbitmq/tasks/config.yml            |  18 +-
ansible/roles/rabbitmq/tasks/deploy.yml            |   6 +-
ansible/roles/rabbitmq/tasks/reconfigure.yml       |   2 +-
ansible/roles/rabbitmq/tasks/restart_services.yml  |  21 ++
ansible/roles/rabbitmq/tasks/upgrade.yml           |   4 +-
ansible/roles/rally/defaults/main.yml              |   2 +-
ansible/roles/rally/tasks/bootstrap.yml            |   2 +-
ansible/roles/rally/tasks/config.yml               |   3 -
ansible/roles/rally/tasks/deploy.yml               |   6 +-
ansible/roles/rally/tasks/reconfigure.yml          |   2 +-
ansible/roles/rally/tasks/upgrade.yml              |   6 +-
ansible/roles/rally/templates/rally.conf.j2        |   2 +
ansible/roles/redis/defaults/main.yml              |   4 +-
ansible/roles/redis/tasks/config.yml               |   3 -
ansible/roles/redis/tasks/deploy.yml               |   4 +-
ansible/roles/redis/tasks/reconfigure.yml          |   2 +-
ansible/roles/redis/tasks/upgrade.yml              |   4 +-
ansible/roles/sahara/defaults/main.yml             |   4 +-
ansible/roles/sahara/tasks/bootstrap.yml           |   2 +-
ansible/roles/sahara/tasks/config.yml              |   3 -
ansible/roles/sahara/tasks/deploy.yml              |  12 +-
ansible/roles/sahara/tasks/reconfigure.yml         |   2 +-
ansible/roles/sahara/tasks/register.yml            |   1 -
ansible/roles/sahara/tasks/upgrade.yml             |   6 +-
ansible/roles/sahara/templates/sahara.conf.j2      |   2 +
ansible/roles/searchlight/defaults/main.yml        |   4 +-
ansible/roles/searchlight/tasks/bootstrap.yml      |   2 +-
ansible/roles/searchlight/tasks/config.yml         |   3 -
ansible/roles/searchlight/tasks/deploy.yml         |   8 +-
ansible/roles/searchlight/tasks/reconfigure.yml    |   2 +-
ansible/roles/searchlight/tasks/register.yml       |   1 -
ansible/roles/searchlight/tasks/upgrade.yml        |   6 +-
ansible/roles/senlin/defaults/main.yml             |   8 +-
ansible/roles/senlin/tasks/bootstrap.yml           |   2 +-
ansible/roles/senlin/tasks/config.yml              |   3 -
ansible/roles/senlin/tasks/deploy.yml              |  14 +-
ansible/roles/senlin/tasks/reconfigure.yml         |   2 +-
ansible/roles/senlin/tasks/register.yml            |   1 -
ansible/roles/senlin/tasks/upgrade.yml             |   6 +-
ansible/roles/senlin/templates/senlin.conf.j2      |   2 +
ansible/roles/skydive/defaults/main.yml            |   4 +-
ansible/roles/skydive/tasks/config.yml             |   3 -
ansible/roles/skydive/tasks/deploy.yml             |   6 +-
ansible/roles/skydive/tasks/reconfigure.yml        |   2 +-
ansible/roles/skydive/tasks/upgrade.yml            |   4 +-
ansible/roles/solum/defaults/main.yml              |   8 +-
ansible/roles/solum/tasks/bootstrap.yml            |   2 +-
ansible/roles/solum/tasks/config.yml               |   3 -
ansible/roles/solum/tasks/deploy.yml               |  14 +-
ansible/roles/solum/tasks/reconfigure.yml          |   2 +-
ansible/roles/solum/tasks/register.yml             |   1 -
ansible/roles/solum/tasks/upgrade.yml              |   6 +-
ansible/roles/solum/templates/solum.conf.j2        |   2 +
ansible/roles/storm/defaults/main.yml              |   4 +-
ansible/roles/storm/tasks/config.yml               |   3 -
ansible/roles/storm/tasks/deploy.yml               |   4 +-
ansible/roles/storm/tasks/reconfigure.yml          |   2 +-
ansible/roles/storm/tasks/upgrade.yml              |   2 +-
ansible/roles/swift/tasks/deploy-containers.yml    |   2 +
ansible/roles/swift/tasks/deploy.yml               |   8 +-
ansible/roles/swift/tasks/legacy_upgrade.yml       |   4 +-
ansible/roles/swift/tasks/reconfigure.yml          |   2 +-
ansible/roles/swift/tasks/register.yml             |   1 -
ansible/roles/swift/tasks/rolling_upgrade.yml      |  43 ++-
ansible/roles/swift/tasks/stop.yml                 |   2 +-
ansible/roles/tacker/defaults/main.yml             |   4 +-
ansible/roles/tacker/tasks/bootstrap.yml           |   2 +-
ansible/roles/tacker/tasks/config.yml              |   3 -
ansible/roles/tacker/tasks/deploy.yml              |  14 +-
ansible/roles/tacker/tasks/reconfigure.yml         |   2 +-
ansible/roles/tacker/tasks/register.yml            |   1 -
ansible/roles/tacker/tasks/upgrade.yml             |   6 +-
ansible/roles/tacker/templates/tacker.conf.j2      |   2 +
ansible/roles/telegraf/defaults/main.yml           |   2 +-
ansible/roles/telegraf/tasks/config.yml            |   3 -
ansible/roles/telegraf/tasks/deploy.yml            |   4 +-
ansible/roles/telegraf/tasks/reconfigure.yml       |   2 +-
ansible/roles/telegraf/tasks/upgrade.yml           |   4 +-
ansible/roles/tempest/defaults/main.yml            |   2 +-
ansible/roles/tempest/tasks/config.yml             |   3 -
ansible/roles/tempest/tasks/deploy.yml             |   4 +-
ansible/roles/tempest/tasks/reconfigure.yml        |   2 +-
ansible/roles/tempest/tasks/upgrade.yml            |   4 +-
ansible/roles/trove/defaults/main.yml              |   6 +-
ansible/roles/trove/tasks/bootstrap.yml            |   2 +-
ansible/roles/trove/tasks/config.yml               |  24 +-
ansible/roles/trove/tasks/deploy.yml               |  13 +-
ansible/roles/trove/tasks/reconfigure.yml          |   2 +-
ansible/roles/trove/tasks/register.yml             |   1 -
ansible/roles/trove/tasks/upgrade.yml              |   6 +-
.../roles/trove/templates/trove-conductor.conf.j2  |  12 +-
.../roles/trove/templates/trove-guestagent.conf.j2 |   6 +
.../trove/templates/trove-taskmanager.conf.j2      |  15 +-
.../trove/templates/trove-taskmanager.json.j2      |   8 +-
ansible/roles/trove/templates/trove.conf.j2        |  15 +-
ansible/roles/vitrage/defaults/main.yml            |  10 +-
ansible/roles/vitrage/tasks/bootstrap.yml          |   2 +-
ansible/roles/vitrage/tasks/config.yml             |   3 -
ansible/roles/vitrage/tasks/deploy.yml             |  15 +-
ansible/roles/vitrage/tasks/reconfigure.yml        |   2 +-
ansible/roles/vitrage/tasks/register.yml           |   2 +-
ansible/roles/vitrage/tasks/upgrade.yml            |   6 +-
ansible/roles/vitrage/templates/vitrage.conf.j2    |   2 +
ansible/roles/vmtp/defaults/main.yml               |   2 +-
ansible/roles/vmtp/tasks/config.yml                |   3 -
ansible/roles/vmtp/tasks/deploy.yml                |   5 +-
ansible/roles/vmtp/tasks/reconfigure.yml           |   2 +-
ansible/roles/vmtp/tasks/upgrade.yml               |   4 +-
ansible/roles/watcher/defaults/main.yml            |   6 +-
ansible/roles/watcher/tasks/bootstrap.yml          |   2 +-
ansible/roles/watcher/tasks/config.yml             |   3 -
ansible/roles/watcher/tasks/deploy.yml             |  13 +-
ansible/roles/watcher/tasks/reconfigure.yml        |   2 +-
ansible/roles/watcher/tasks/register.yml           |   1 -
ansible/roles/watcher/tasks/upgrade.yml            |   6 +-
ansible/roles/watcher/templates/watcher.conf.j2    |   2 +
ansible/roles/zookeeper/defaults/main.yml          |   2 +-
ansible/roles/zookeeper/tasks/config.yml           |   3 -
ansible/roles/zookeeper/tasks/deploy.yml           |   4 +-
ansible/roles/zookeeper/tasks/reconfigure.yml      |   2 +-
ansible/roles/zookeeper/tasks/upgrade.yml          |   4 +-
ansible/roles/zun/defaults/main.yml                |   8 +-
ansible/roles/zun/tasks/bootstrap.yml              |   2 +-
ansible/roles/zun/tasks/config.yml                 |   3 -
ansible/roles/zun/tasks/deploy.yml                 |  13 +-
ansible/roles/zun/tasks/reconfigure.yml            |   2 +-
ansible/roles/zun/tasks/register.yml               |   1 -
ansible/roles/zun/tasks/upgrade.yml                |   6 +-
ansible/roles/zun/templates/zun.conf.j2            |   2 +
ansible/site.yml                                   |   9 +-
.../reference/databases/external-mariadb-guide.rst |   4 +-
kolla_ansible/filters.py                           |  11 +-
kolla_ansible/fluentd_filters.py                   |  44 +++
kolla_ansible/helpers.py                           |  21 ++
kolla_ansible/kolla_address.py                     |  30 +-
.../add-trove-guestagent-5482833a0c99033a.yaml     |   4 +
...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml |   5 +
.../notes/bug-1681461-761f0cdf71bcb962.yaml        |   6 +
.../notes/bug-1848941-7e192be1885af513.yaml        |   6 +
.../notes/bug-1884090-c40ff140d5514108.yaml        |  12 +
.../notes/bug-1886615-640e817dfdb93b8a.yaml        |   5 +
.../notes/bug-1887180-89450a4185c7449d.yaml        |   6 +
.../notes/bug-1888852-8735ee29f69f77b5.yaml        |   5 +
.../notes/bug-1889611-f08c228fca884bf2.yaml        |   5 +
.../notes/bug-1895723-910de90908de260a.yaml        |   6 +
.../notes/bug-1896591-47c829f8b72d567a.yaml        |   6 +
.../notes/bug-1898765-73881932a2ef1d32.yaml        |   7 +
.../notes/bug-1898766-ffc55c97230d8221.yaml        |   6 +
.../notes/bug-1901960-363503e11449b53c.yaml        |   6 +
.../notes/bug-1904702-7451dd8c4caa309b.yaml        |   5 +
.../notes/bug-1906796-e52b9e113f36ceed.yaml        |   6 +
.../notes/bug-1906944-38798e1348ff9c97.yaml        |   6 +
.../notes/bug-1907436-2da50ed38d107127.yaml        |   6 +
.../notes/bug-1907658-a24ddc45f63893b5.yaml        |   6 +
...ug-freezer-dev-mod-failed-af5bebb6c3eaabad.yaml |   5 +
.../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml |   5 +
.../docker-disable-iptables-e9a248a0515f30a6.yaml  |  12 +
.../docker-install-iptables-f24fef8ce2418963.yaml  |   6 +
.../docker-repo-centos-8-edc2412c57a2762c.yaml     |   5 +
...min-openrc-ownership-mode-310d89a6f50a9640.yaml |  19 +
...vacuate-cinder-encryption-489f8cf6a340e7be.yaml |   6 +
...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml |   7 +
.../fix-keystone-startup-66c5aa11a464a562.yaml     |   8 +
.../fix-kibana-6-migration-0e1aa94040fd53c5.yaml   |   5 +
...linuxbridge-arp_responder-28068f7fe41e4e4d.yaml |   8 +
...fix-linuxbridge-secgroups-7e5cae9d630e3db9.yaml |   6 +
.../notes/fix-masakari-tls-64f010c037e95bea.yaml   |   8 +
...ance-grafana-db-bootstrap-298feba3e1750aca.yaml |   5 +
...emcached-connection-issue-84f5affa217b4612.yaml |   8 +
.../fluentd-single-config-d5ae95fecbfb6e3e.yaml    |   5 +
...default-topic-replication-0debd5eb89f0c50d.yaml |  11 +
.../notes/issue-bug-1904062-ef446343323c8452.yaml  |  23 ++
.../notes/load-br-netfilter-4ce9facd93e96af7.yaml  |   6 +
.../logrotate-single-config-663d6bf154218380.yaml  |   5 +
...ck-exporter-endpoint-type-7c687da172986fb3.yaml |  13 +
...-keystone-bootstrap-limit-f0250725633c16de.yaml |   7 +
...uce-db-connection-pooling-b44da77eaa390f22.yaml |   6 +
...e-from-openstack-exporter-f6bb5da3093abef8.yaml |   5 +
...est-api-required-settings-099875e53248b62c.yaml |  14 +
test-requirements.txt                              |   4 +-
tools/cleanup-containers                           |   2 +-
tools/init-runonce                                 |   2 +-
tools/kolla-ansible                                |  17 +-
tools/setup_gate.sh                                |   4 +
zuul.d/base.yaml                                   |  11 +
zuul.d/jobs.yaml                                   |  16 +
zuul.d/project.yaml                                |  14 +-
606 files changed, 3430 insertions(+), 1944 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index ee9d561e3..fb40592ed 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -2 +2 @@
-ansible-lint>=4.2.0 # MIT
+ansible-lint==4.2.0 # MIT
@@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0
-ansible>=2.8.0 # GPLv3
+ansible>=2.8.0,<2.10 # GPLv3






More information about the Release-announce mailing list