Open Stack

We are chuffed to announce the release of:

kolla-ansible 12.1.0: Ansible Deployment of Kolla containers

This release is part of the wallaby stable release series.

The source is available from:

    https://opendev.org/openstack/kolla-ansible

Download the package from:

    https://tarballs.openstack.org/kolla-ansible/

Please report issues through:

    https://bugs.launchpad.net/kolla-ansible/+bugs

For more details, please see below.

12.1.0
^^^^^^


New Features
************

* Added a new haproxy configuration variable,
  "haproxy_host_ipv4_tcp_retries2", which allows users to modify this
  kernel option. This option sets maximum number of times a TCP packet
  is retransmitted in established state before giving up. The default
  kernel value is 15, which corresponds to a duration of approximately
  between 13 to 30 minutes, depending on the retransmission timeout.
  This variable can be used to mitigate an issue with stuck
  connections in case of VIP failover, see bug 1917068 for details.

* Adds the ability to override the automatic detection of
  *fluentd_version* and *fluentd_binary*. These can now be defined as
  extra variables. This removes the dependency of having docker
  configured for config generation.


Bug Fixes
*********

* Fixes missing region_name in keystone_auth sections. See bug
  1933025 for details.

* Fixes default Masakari host monitor config to work with other
  config that Kolla Ansible sets. This sets "disable_ipmi_check" due
  to "restrict_to_remotes" being set. It prevents the "TypeError" that
  happened when host monitor had to take action. This does not affect
  any functionality so far as Kolla Ansible does not manage IPMI
  credentials in Pacemaker. LP#1933209

* Fixes an issue where "kolla-ansible" exits with a zero exit code
  when executed with a bogus command name. LP#1929397

* Fixes the container health check for the "ironic_ipxe" container
  on Debian and Ubuntu systems. LP#1937037

* Fixes an issue with Magnum when TLS is enabled. LP#781062


Other Notes
***********

* Following Cinder upstream, support for using ZFSSA with Cinder has
  been removed. ZFSSA was unsupported in Train and later removed in
  Ussuri.

Changes in kolla-ansible 12.0.0..12.1.0
---------------------------------------

8c68ced1a Fix exit code with bogus command name
9f13719b2 Fix ironic_ipxe healthcheck on Debian/Ubuntu
38748d2aa Fix Masakari host monitor default config
0f46987d5 Fix typos in release note
198c2c613 docs: Add note about internal VIP when HAProxy is disabled
acf08e289 CI: only run cells job on changes to nova role
47f768d68 CI: fix backups Ceph pool name
270b237b3 magnum: Add CA certificate configuration for internal TLS
9bf681dd9 Make it possible to override automatic fluentd version detection
6d3ebe147 CI: Avoid generating a nova key in cephadm scenario
bd0bcd75a [CI] Do not set ansible_python_interpreter for Zuul
8521ddca2 Allow user to set sysctl_net_ipv4_tcp_retries2
0e0f9693a Make rabbitmq cluster_partition_handling configurable
24d3228d0 Add missing region_name in keystoneauth sections
86bf12d2f Drop support for Cinder ZFSSA backend


Diffstat (except docs and test files)
-------------------------------------

ansible/group_vars/all.yml                         |  3 +-
ansible/roles/aodh/templates/aodh.conf.j2          |  1 +
ansible/roles/barbican/templates/barbican.conf.j2  |  1 +
ansible/roles/blazar/templates/blazar.conf.j2      |  1 +
ansible/roles/cinder/defaults/main.yml             | 14 -------
ansible/roles/cinder/tasks/precheck.yml            |  1 -
ansible/roles/cinder/templates/cinder.conf.j2      | 15 +------
ansible/roles/common/tasks/config.yml              | 12 ++++--
ansible/roles/cyborg/templates/cyborg.conf.j2      |  1 +
.../roles/designate/templates/designate.conf.j2    |  1 +
ansible/roles/freezer/templates/freezer.conf.j2    |  1 +
ansible/roles/glance/templates/glance-api.conf.j2  |  1 +
ansible/roles/gnocchi/templates/gnocchi.conf.j2    |  1 +
ansible/roles/haproxy/defaults/main.yml            |  4 ++
ansible/roles/haproxy/tasks/config-host.yml        |  7 ++--
ansible/roles/heat/templates/heat.conf.j2          |  1 +
ansible/roles/ironic/defaults/main.yml             |  2 +-
.../ironic/templates/ironic-inspector.conf.j2      |  2 +
ansible/roles/magnum/templates/magnum.conf.j2      | 10 +++++
ansible/roles/manila/templates/manila.conf.j2      |  1 +
.../masakari/templates/masakari-monitors.conf.j2   |  6 +++
ansible/roles/mistral/templates/mistral.conf.j2    |  1 +
.../monasca/templates/monasca-api/api.conf.j2      |  1 +
ansible/roles/murano/templates/murano.conf.j2      |  3 ++
ansible/roles/neutron/templates/neutron.conf.j2    |  3 ++
ansible/roles/nova/templates/nova.conf.j2          |  1 +
ansible/roles/octavia/templates/octavia.conf.j2    |  1 +
.../roles/placement/templates/placement.conf.j2    |  1 +
ansible/roles/rabbitmq/defaults/main.yml           |  2 +
ansible/roles/rabbitmq/templates/rabbitmq.conf.j2  |  3 +-
ansible/roles/sahara/templates/sahara.conf.j2      |  1 +
ansible/roles/senlin/templates/senlin.conf.j2      |  1 +
ansible/roles/solum/templates/solum.conf.j2        |  1 +
ansible/roles/tacker/templates/tacker.conf.j2      |  1 +
ansible/roles/trove/templates/trove.conf.j2        |  1 +
ansible/roles/vitrage/templates/vitrage.conf.j2    |  1 +
ansible/roles/watcher/templates/watcher.conf.j2    |  1 +
.../reference/high-availability/haproxy-guide.rst  | 47 ++++++++++++++++++++++
etc/kolla/globals.yml                              |  3 +-
etc/kolla/passwords.yml                            |  5 ---
.../notes/bug-1933025-1cb5d64d20d57be7.yaml        |  6 +++
.../notes/bug-1933209-73e78353cb5c3266.yaml        | 11 +++++
...fault-migration-interface-3cdf30eed98553fd.yaml |  4 +-
.../notes/cli-exit-code-1e6278f803dbf8e2.yaml      |  6 +++
.../notes/drop-zfssa-2708a8c0b0eb5f43.yaml         |  5 +++
...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++++++
...eb-ironic-ipxe-heathcheck-2ae5fd0537c056ce.yaml |  6 +++
.../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml    |  5 +++
...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml |  6 +++
roles/cephadm/defaults/main.yml                    |  3 +-
tools/kolla-ansible                                |  2 +-
zuul.d/base.yaml                                   |  6 +--
56 files changed, 209 insertions(+), 71 deletions(-)