[release-announce] openstack-ansible 23.0.0 (wallaby)

no-reply at openstack.org no-reply at openstack.org
Mon Jul 5 15:02:23 UTC 2021


We contentedly announce the release of:

openstack-ansible 23.0.0: Ansible playbooks for deploying OpenStack

This release is part of the wallaby release series.

The source is available from:

    https://opendev.org/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

Please report issues through:

    https://bugs.launchpad.net/openstack-ansible/+bugs

For more details, please see below.

23.0.0
^^^^^^


New Features
************

* Added variable "galera_init_overrides" that can be leveraged to
  override default set of systemd unit file for mariadb. This also
  brings requirement of systemd_service (https://opendev.org/openstack
  /ansible-role-systemd_service) role.

* New variable "openstack_ca_bundle_path" has been added which
  defines the path to the ca-bundle certificate which contains all
  system- trusted CA and will be used by the Python Requests module.

* Added variable "openstack_systemd_global_overrides" that defines
  some defaults for all systemd services. It will be deployed to all
  hosts and containers, but can be controlled with group_vars or
  host_vars as well if needed.

* Added new variable haproxy_stick_table_enabled to
  haproxy_service_configs, that allows you to conditionally enable or
  disable the default stick-table.


Upgrade Notes
*************

* HAProxy "haproxy_whitelist_networks" key inside
  "haproxy_service_configs" dictionary has been replaced with
  "haproxy_allowlist_networks".


Deprecation Notes
*****************

* The following variables have been deprecated and will have no
  effect:

     * "haproxy_ssl_cert_path"

     * "haproxy_ssl_key"

     * "haproxy_ssl_pem"

     * "haproxy_ssl_ca_cert"

  These variables were responsible for the path haproxy looked for
  certificates on the destination hosts.

  Variables were replaced in favor of "haproxy_ssl_cert_path" since
  the exact path to certificates will be dynamically set based on the
  VIP that is used for the frontend

* Renamed "tempest_test_whitelist" to "tempest_test_includelist" and
  "tempest_test_blacklist" to "tempest_test_excludelist" Dependant
  projects should update to use the new variables

* Since certificates and CA distribution are now handled with PKI
  role, variable "openstack_host_ca_location" has been deprecated and
  removed.

Changes in openstack-ansible 23.0.0.0rc1..23.0.0
------------------------------------------------

ad4c96096 Bump roles for W release
dc682790e Update TOX_CONSTRAINTS_FILE for stable/wallaby
50fa944da Update .gitreview for stable/wallaby


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   2 +-
ansible-role-requirements.yml                      |  20 ++--
playbooks/defaults/repo_packages/gnocchi.yml       |   2 +-
playbooks/defaults/repo_packages/nova_consoles.yml |   4 +-
.../defaults/repo_packages/openstack_services.yml  | 112 ++++++++++-----------
tox.ini                                            |   2 +-
6 files changed, 71 insertions(+), 71 deletions(-)







More information about the Release-announce mailing list