October 2016 - OpenStack-announce

[new][openstackansible] openstack-ansible 12.2.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are gleeful to announce the release of: openstack-ansible 12.2.6: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. Changes in openstack-ansible 12.2.5..12.2.6 ------------------------------------------- 9282ffb Update signing key for percona packages 0193c0d Update signing key for percona packages 4263a26 Update all SHAs for 12.2.6 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 2 +- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 26 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- playbooks/roles/galera_client/defaults/main.yml | 2 +- playbooks/roles/galera_server/defaults/main.yml | 2 +- scripts/scripts-library.sh | 2 +- 8 files changed, 20 insertions(+), 20 deletions(-)

1 0

[new][openstackansible] openstack-ansible-security 12.2.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are exuberant to announce the release of: openstack-ansible-security 12.2.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 12.2.5..12.2.6 ---------------------------------------------------- 44c1bc9 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_glance 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are grateful to announce the release of: openstack-ansible-os_glance 13.3.6: os_glance for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 13.3.1..13.3.6 ----------------------------------------------------- ec9ae09 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/glance-api.conf.j2 | 2 ++ templates/glance-cache.conf.j2 | 2 ++ templates/glance-manage.conf.j2 | 2 ++ templates/glance-registry.conf.j2 | 2 ++ templates/glance-scrubber.conf.j2 | 2 ++ 5 files changed, 10 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_cinder 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: openstack-ansible-os_cinder 13.3.6: os_cinder role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 13.3.1..13.3.6 ----------------------------------------------------- de29bf7 Fix cinder role condition when no cinder_volumes 77f138e Disable stderr logging c4eae35 Update paste, policy and rootwrap configurations 2016-08-01 Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 15 +++++++++------ templates/api-paste.ini.j2 | 23 +++++++++++++---------- templates/cinder.conf.j2 | 2 ++ 3 files changed, 24 insertions(+), 16 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_neutron 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are pumped to announce the release of: openstack-ansible-os_neutron 13.3.6: os_neutron role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 13.3.4..13.3.6 ------------------------------------------------------ ae7af49 Add conditional around the pid clean up process Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-plugins 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are thrilled to announce the release of: openstack-ansible-plugins 13.3.6: plugins for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 13.3.5..13.3.6 --------------------------------------------------- 6fd7a88 Support more than one flat network 70214c4 Add dummy functional test tox target Diffstat (except docs and test files) ------------------------------------- library/provider_networks | 6 +++--- tox.ini | 7 +++++++ 2 files changed, 10 insertions(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_swift 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are psyched to announce the release of: openstack-ansible-os_swift 13.3.6: os_swift for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 13.3.5..13.3.6 ---------------------------------------------------- 5fbb25e Always setup ResellerAdmin role in keystone Diffstat (except docs and test files) ------------------------------------- tasks/swift_service_setup.yml | 3 +-- 2 files changed, 1 insertion(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are joyful to announce the release of: openstack-ansible-os_aodh 13.3.6: os_aodh for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 13.3.1..13.3.6 --------------------------------------------------- 0c80b7c Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/aodh.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glad to announce the release of: openstack-ansible-rsyslog_server 13.3.6: rsyslog_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. 13.3.6 ^^^^^^ Upgrade Notes * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Changes in openstack-ansible-rsyslog_server 13.3.4..13.3.6 ---------------------------------------------------------- 74cf6cd Separate remote log stream from local Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 7 +++ ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 +++ templates/os_aggregate_storage.j2 | 2 +- templates/rsyslog.conf.j2 | 59 ++++++++++------------ 5 files changed, 45 insertions(+), 33 deletions(-)

1 0

[new][openstackansible] openstack-ansible 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are psyched to announce the release of: openstack-ansible 13.3.6: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 13.3.6 ^^^^^^ Upgrade Notes * When migrating from Liberty to Mitaka neutron does not automatically set or migrate networks MTU settings. Neutron has no migration to correctly set the MTU on existing networks so we've created an OSA MTU migration playbook to work-around this issue. The playbook will set the MTU on networks created before the upgrade by iterating on known values from the user_variables and facts. Should any known network name be encountered the MTU will be set to the known value. If no MTU and no global override is present the playbook will fall back to using 1500 for vlan/flat networks and 1450 for vxlan networks. Changes in openstack-ansible 13.3.5..13.3.6 ------------------------------------------- 2c2cfbb Update role SHAs for 13.3.6 08ceafa Update the neutron MTU settings on upgrade c5a5604 Update all SHAs for 13.3.6 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 16 ++--- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 32 ++++----- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- .../neutron-mtu-migration-47bb099191d8c0e3.yaml | 12 ++++ scripts/run-upgrade.sh | 1 + scripts/scripts-library.sh | 2 +- .../playbooks/neutron-mtu-migration.yml | 79 ++++++++++++++++++++++ 11 files changed, 146 insertions(+), 33 deletions(-)

1 0

[new][openstackansible] openstack-ansible-ironic 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glad to announce the release of: openstack-ansible-ironic 13.3.6: Ironic Role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-ironic/ For more details, please see below. Changes in openstack-ansible-ironic 13.3.5..13.3.6 -------------------------------------------------- d347cb1 Configure ironic to use keystone v2 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 5 ----- templates/ironic.conf.j2 | 13 +++++-------- 2 files changed, 5 insertions(+), 13 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_nova 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jubilant to announce the release of: openstack-ansible-os_nova 13.3.6: os_nova for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 13.3.6 ^^^^^^ New Features * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". Changes in openstack-ansible-os_nova 13.3.4..13.3.6 --------------------------------------------------- fda8770 Nova role should not default vars outside the nova namespace 26c3e8a Add config template for qemu.conf Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 ++++++++- releasenotes/notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 ++++ tasks/nova_compute_kvm.yml | 13 +++++++++++++ templates/nova.conf.j2 | 2 +- templates/qemu.conf.j2 | 4 ++++ 6 files changed, 31 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are delighted to announce the release of: openstack-ansible-rabbitmq_server 13.3.6: rabbitmq_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 13.3.3..13.3.6 ----------------------------------------------------------- 7ac8e58 Add collect_statistics_interval, rates_mode in rabbitmq.config template Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 ++++++ templates/rabbitmq.config.j2 | 4 +++- 2 files changed, 9 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-security 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are joyful to announce the release of: openstack-ansible-security 13.3.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.6 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_horizon 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: openstack-ansible-os_horizon 13.3.6: OpenStack Horizon role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 13.3.3..13.3.6 ------------------------------------------------------ b585f3e Simplify bool check for LBaaSv2/Horizon Diffstat (except docs and test files) ------------------------------------- tasks/horizon_post_install.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_heat 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are stoked to announce the release of: openstack-ansible-os_heat 13.3.6: os_heat for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 13.3.1..13.3.6 --------------------------------------------------- dcff3d0 Disable stderr logging f102338 Use keystone library for heat_stack_domain_admin Diffstat (except docs and test files) ------------------------------------- tasks/heat_domain_setup.yml | 63 +++++++++++++++++++++------------------------ templates/heat.conf.j2 | 2 ++ 2 files changed, 31 insertions(+), 34 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are stoked to announce the release of: openstack-ansible-os_ceilometer 13.3.6: os_ceilometer role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.3.1..13.3.6 --------------------------------------------------------- 3a24b01 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/ceilometer.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_keystone 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_keystone 13.3.6: os_keystone for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 13.3.1..13.3.6 ------------------------------------------------------- 4f30d3a Force a restart of all the apache nodes during upgrade 1432dea Disable stderr logging Diffstat (except docs and test files) ------------------------------------- tasks/keystone_service_setup.yml | 9 --------- tasks/main.yml | 3 +++ templates/keystone.conf.j2 | 2 ++ 3 files changed, 5 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are gleeful to announce the release of: openstack-ansible-memcached_server 13.3.6: memcached_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 13.2.0..13.3.6 ------------------------------------------------------------ 99e5aee Ensure that gate test does not remove ~/.ansible/tmp 681b84f Update tox configuration Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 - tox.ini | 121 +++++++++++++++++++++++++++++++++++--------------- 2 files changed, 86 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a45faa5..22c7bbe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +0,0 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0,!=1.9.6

1 0

[new][openstackansible] openstack-ansible-galera_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are tickled pink to announce the release of: openstack-ansible-galera_server 13.3.6: Galera Server role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 13.3.5..13.3.6 --------------------------------------------------------- 10ca998 Update signing key for percona packages Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

OpenStack Newton cycle-trailing projects are officially released!
by Doug Hellmann 20 Oct '16

20 Oct '16

Hello OpenStack community, I'm very pleased to announce the final releases for the cycle-trailing components of OpenStack Newton. These are projects that rely on having all of the other components completed and stable before they can be released. You will find a complete list of the cycle-trailing components, their latest versions, and links to individual project release notes documents listed on the new release site. https://releases.openstack.org/newton/index.html#projects-trailing-the-rele… Congratulations to all of the teams who have contributed to this release! Doug

1 0

[new][tripleo] instack-undercloud 5.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are high-spirited to announce the release of: instack-undercloud 5.0.0: instack-undercloud This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in instack-undercloud 4.0.0..5.0.0 ------------------------------------------ c11da8e Fix default Swift ring partition power ddb5bb5 Make the snmpd_readonly_user_password available to Mistral f8dda14 Enable validations by default f044a47 start ironic-(api|inspector) after Keystone_endpoint e5f60c6 Pin beaker due to ruby requirement 9d2a655 Update .gitreview for stable/newton 56e65af Use kwargs when creating mistralclient 0c86110 Double the maximum waiting time for default plan creation 55ccd0e Increase Heat yaql limits b344e92 Increase timeout for Deployment Plan creation 59300e8 Revert "Deploy Monitoring on the undercloud with Puppet" cea03d4 Update default VM memory 873d17c Ensure that the default plan was created successfully b6b2b56 Verify that the Deployment Plan creation was successful f033029 Make puppet-stack-config.pp Puppet 4 compliant ff32601 Use correct password for keystone bootstrap f623801 Work around deletion of _member_ role assignments on upgrade 0492b90 Enable TLS for Zaqar's websocket endpoint b3bfa7b Add sysctl preflight install check 5902936 Catch runtime exceptions during validation 94530da Enable introspection of UEFI nodes by default 4c59cff Update undercloud.conf.sample 164d3ff Fix nova-related deprecation warnings 0c33e8b Save console logs from all vms to files 3431bde Deploy validations SSH key in post config bf0f777 Introduce 'enable_validations' option 80dbe73 Raise zaqar max message size cf80817 Disable unsupported drivers and fix DRAC dependency 5c138c9 Setup CORS settings for tripleo-ui 39ae820 Introduce 'enable_ui' option e6c8fed keystone: configure credentials e0a5293 Use ironic::pxe class to setup PXE aaaf055 Enable modern authtoken for Neutron and Glance 8efa887 configure heat with new authtoken parameters 5617d17 Unit tests for _create_default_plan() e51304f Stop using deprecated ironic::drivers::deploy 541523b Handling defaults for pxe_bootfile_name and pxe_config_template moved to puppet ab17800 galera and rabbit do not need to be accessible over the network cccaf48 Fix outdated help text from undercloud VIPs 4c51d6c Modify improper augeas set command e42b80e Update authtoken parameters to match recent changes bb3deb3 Revert "Pin puppetlabs_spec_helper to 1.1.1" 4e2fc40 Pin puppetlabs_spec_helper to 1.1.1 bd4c166 Enable TLS for Zaqar API cd4e9a4 Refactor endpoint env variable population 7eee8c8 Enable SSL for ironic inspector c2c1183 Mistral db-populate depends on inspector's endpoint 6a1a179 Add default plan creation 41ef775 Use http for Ironic deployments fd167c1 Enable sysctl nonlocal_bind 7566c7c Add constraints needed for ironic and inspector 3552a14 Update hieradata parameters to match recent changes 9cf83c5 Remove deprecated neutron auth options b4fa8fb Revert "glance: disable swift backend" 51563c5 Ironic: Configure iPXE to work with UEFI b85f72c Call systemctl-daemon-reload only if necessary becbcde Add enable_proxy_headers_parsing option for keystone and glance 62b3b28 Update help text for certificate generation options ad36fe4 Use ensure_resource instead of package 62bf441 Add tripleo deployment config file paths to hiera faeed24 Use certmonger for automatic cert generation b487f96 Revert "Deploy and Upgrade Ironic to run in mod_wsgi" 1dd619c Fix Aodh httpd binding f94f6d6 Revert "Explicitly set $FACTER_fqdn" fb9f677 Default to Ironic API v1.15 on undercloud 2fc7497 Allow to configure Ironic [ssh] section da71717 Enable Aodh SSL binding in HAproxy 6058e39 Explicitly set $FACTER_fqdn 7aefae4 Deploy and Upgrade Ironic to run in mod_wsgi bc58595 Drop broken keystone pki setup 37a67a1 Remove unused Swift tempauth config 2ee1550 Run OpenStack db_sync commands at every puppet run 716e3f6 Remove nova-compute restart at end of uc install 14b78a4 Increase the max zaqar messages size to 2^19 9e1142e Deploy undercloud in 1 step instead of 2 e54221f Flush puppet output piped to awk 21171ca Remove discover from test-requirements fe121a9 Remove "OK_FILE" from undercloud-install element 27116f0 Deploy MySQL using composable role 2d76a8d Remove ipxe selinux policy 33e9d78 Fix wrong template in puppet-stack-config.yaml.template d4aab47 Fix ceilometer auth url on undercloud 622511d Allow customization of undercloud disk size 3138475 Modify LVM filter fix to blacklist iSCSI fde0c90 Enable SSL for Mistral dbe6575 Always configure inspector to use the same HTTP port as Ironic 8eeed36 Remove hardcoded endpoints in hiera 85becee Enable LLDP collection during introspection if inspection_extras is on 3f17a67 ironic: turn on ipxe timeout 7a0d831 Generate TLS endpoints if autogenerate cert is set 93a6af6 Enable processing of X-Forwarded-Proto if TLS enabled 97b476b Ensure /etc/puppet/hieradata exists 3ee3bf4 Make Ironic httpd port configurable via hiera 0e9f682 Create a Keystone endpoint for Zaqar websockets 53718cc Properly set undercloud_service_certificate when file exists 0b42b6d Add a second proxy-logging middleware entry to swift-proxy c4bc3ba Use the print function to fix the tests on Python 3 ad294f4 Correct the path to the tripleo-common workbooks 358edf9 Use Openstack CLI for setting undercloud quota b8c5ac7 glance: disable swift backend 2dee8ce Aodh should use service tenant on undercloud c6ba5c8 Revert "Pin puppet-lint-absolute_classname-check to 0.1.3" 01bbfca Switch to nova v2.1 and remove v3 46e3aff Pin puppet-lint-absolute_classname-check to 0.1.3 f52a3af Add net config override 6c342e3 Increase swift-proxy node_timeout 139f1f3 Deprecate default 192.0.2.0/24 CIDR c6adebe Add value format validations 1d729d7 Drop deprecated nova network options baf0a96 Update tripleo-common package name 3354bb5 Move class options to hiera 43c6b9d Set Neutron notification project correctly c6f1714 Fix inspection_enable_uefi description bb622b0 Take transport_url and rpc_reponse_timeout into use f7c7d30 Disable Heat convergence pending further testing 8bbcce7 Update hiera parameter to use tripleo::haproxy cb69c9e loadbalancer: explode hieradata to separate HAproxy & keepalived 167ebe4 Only validate SSL VIPs if SSL is enabled d5b7645 Only run mistral commands if mistral is enabled f4a6f7d Ensure systemd-journald is running 4572b3c Restore pip-and-virtualenv-override 4bd2544 Enable Mistral execution cleanup ce1c5f5 Wait for all interfaces to get IP addresses during inspection with extras 4338198 Cleanup hieradata to reduce Puppet warnings dfa0754 Add timestamps to puppet apply output 7301b39 Minimize element usage b16d78c Add option to enable introspection of UEFI nodes 6119cc5 Revert "mistral: deploy API in WSGI with apache" 478f09b Remove truncate nova config workaround a1a1520 Consolidate undercloud* elements e779c6d Don't use os-net-config element b35b6ee Move 02-undercloud-stack-heat-metadata to python module cb8e671 puppet-stack-config: notify swift-proxy when ring is ready c03d2cc Generate most of the pystache context automatically f599fde Cleanup Puppet code that deploys Ironic 7ea7d61 Don't use ironic-conductor element dd69fd6 Move parts of undercloud-install to puppet f439300 Use tripleo::selinux b1c3b30 Move persistent journal to puppet 90bbff7 Don't use os-cloud-config/common-venv elements 06f9810 Create firewall rules with puppet ab4fa10 Load Mistral 'workbooks' (not 'workflows'). 057b369 Set Zaqar storage/message_pipeline correctly b0ccd80 TripleO common for custom Mistral actions 3083c86 Use enable-packages-install element 0be2088 Add dib-lint to pep8 tox job 4700960 Use keystone_admin_uri to make Neutron auth against Nova dde13f2 Add token flushing for Keystone and rows archiving for Nova b44cafb Configure ironic rpc_response_timeout the new way 661b97e Load Mistral workbooks from tripleo-common 3211260 Use entrypoint for ironic_host_manager scheduler 99ad2f9 run nova-api with mod_proxy_uwsgi httpd module f6ce775 Make undercloud telemetry services optional and disabled e9119ea Add a reload of keepalived f1e9fb6 Truncate nova.conf (temporarily) 0500308 Add hieradata override file b37e0e3 Use a new 'automated_clean' option from puppet-ironic b41a7a3 Add ability to auto-generate self-signed certificates 9f0462b Remove centos-cloud-repo element ea05040 Default to Ironic API v1.11 on undercloud dfcd5e9 Set mariadb open_files_limit to -1 (unlimited) 67a9afa Switch glance/swift auth to use keystone v3 cc41b7a Temporarily set +e on systemd-journald restart for +bug/1564471 7e883ba Add aodh as part of endpoints generation 2dec7d7 Overcloud is not able to deploy with the default 4GB of RAM using instack-undercloud a4e59c7 Force rebuild of ramdisk as part of overcloud-full abbbc10 Enable Zaqar by default. 26b04b7 Enable Mistral by default. e64fb25 Add missing zaqar password and horizon key c9b3f2a Add validation of network configuration opts cdbe6d7 Switch to package-installs 8187dca Set glance::registry::auth_uri f75f591 add INTERFACE_MTU parameter 6c9576f Add an option to enable cleaning 5dbe3ee Delete default flavors in Python Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 42 +- .../pre-install.d/00-centos-cloud-repo | 5 - elements/instack-vm/element-deps | 3 +- elements/instack-vm/install.d/51-instack-files | 2 - elements/instack-vm/package-installs.yaml | 3 + .../configure.d/00-apply-selinux-policy | 7 - .../configure.d/88-httpd-vhost-port | 23 - .../configure.d/ipxe-vhost.template | 16 - elements/ipxe/package-installs.yaml | 2 - elements/ipxe/post-install.d/86-selinux | 12 - elements/ipxe/post-install.d/88-setup-ipxe | 9 - elements/ipxe/selinux/ipxe.te | 11 - elements/ipxe/svc-map | 3 - .../post-install.d/90-rebuild-ramdisk | 6 + .../install.d/02-puppet-stack-config | 70 +-- .../puppet-stack-config/install.d/20-ironic-user | 12 - .../etc/puppet/hieradata/CentOS.yaml | 1 + .../etc/puppet/hieradata/RedHat.yaml | 1 + .../configure.d/50-puppet-stack-config | 20 +- .../os-refresh-config/post-configure.d/10-iptables | 28 - .../puppet-stack-config/puppet-stack-config.pp | 424 +++++++------- .../puppet-stack-config.yaml.template | 524 ++++++++++++----- .../pre-install.d/00-setenforce-0 | 5 - elements/undercloud-install/bin/dib-init-system | 5 - .../environment.d/00-distro-name | 11 - .../extra-data.d/01-create-tmp-for-svc-map | 7 - .../undercloud-install/extra-data.d/01-install-bin | 5 - .../os-apply-config/etc/os-net-config/config.json | 3 + .../os-apply-config/root/stackrc | 16 + .../os-apply-config/root/stackrc.oac | 1 + .../root/tripleo-undercloud-passwords | 23 + .../root/tripleo-undercloud-passwords.oac | 1 + .../var/opt/undercloud-stack/masquerade | 24 + .../configure.d/30-reload-keepalived | 11 + .../post-configure.d/80-seedstack-masquerade | 8 + .../post-configure.d/98-undercloud-setup | 116 ++++ elements/undercloud-install/package-installs.yaml | 1 - .../undercloud-install/pre-install.d/01-iptables | 12 - .../pre-install.d/01-persistent-journal | 10 - .../pre-install.d/01-usr-local-bin-secure-path | 10 - elements/undercloud-install/pre-install.d/04-sshd | 7 - .../environment.d/00-package-install | 51 -- .../post-configure.d/98-undercloud-setup | 120 ---- elements/undercloud-stack-config/README.md | 2 - .../undercloud-stack-config/config.json.template | 55 -- elements/undercloud-stack-config/element-deps | 1 - .../install.d/01-install-pystache | 5 - .../install.d/02-undercloud-stack-heat-metadata | 50 -- .../os-apply-config/root/stackrc | 15 - .../os-apply-config/root/stackrc.oac | 1 - .../root/tripleo-undercloud-passwords | 24 - .../root/tripleo-undercloud-passwords.oac | 1 - .../var/opt/undercloud-stack/masquerade | 24 - .../post-configure.d/80-seedstack-masquerade | 8 - instack_undercloud/undercloud.py | 634 ++++++++++++++++----- instack_undercloud/validator.py | 120 ++++ json-files/centos-7-undercloud-packages.json | 45 +- json-files/rhel-7-undercloud-packages.json | 40 +- requirements.txt | 7 + scripts/instack-haproxy-cert-update | 16 + scripts/instack-virt-setup | 15 +- setup.cfg | 2 + templates/config.json.template | 39 ++ templates/net-config.json.template | 23 + test-requirements.txt | 1 - tox.ini | 12 +- undercloud.conf.sample | 90 ++- 70 files changed, 2014 insertions(+), 1200 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0dcbf9b..afb8e35 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,0 +2 @@ six>=1.9.0 +python-keystoneclient>=2.0.0,!=2.1.0 # Apache-2.0 @@ -2,0 +4 @@ python-novaclient +python-mistralclient>=2.0.0 # Apache-2.0 @@ -4,0 +7,5 @@ psutil>=1.1.1,<2.0.0 +netaddr>=0.7.12,!=0.7.16 +pystache +os-cloud-config +os-refresh-config +os-apply-config diff --git a/test-requirements.txt b/test-requirements.txt index 3ddc209..8d61c44 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ coverage>=3.6 -discover

1 0

[new][kolla] kolla 3.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are delighted to announce the release of: kolla 3.0.0: Kolla OpenStack Deployment This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/kolla/ For more details, please see below. 3.0.0 ^^^^^ There any multiple options available to an operator with regards to how they wish to provision devices for use with Ceph OSDs. One of those is to co-locate the data and journal on a disk, which is done by marking a partition on that disk with *KOLLA_CEPH_OSD[_CACHE]_BOOTSTRAP*. If an unwitting user happened to confuse this with the partition based approach, they could wipe out their entire disk, resulting in data loss. Infra team will start running python35 jobs target to replace current python34 jobs This is due to the change from Ubuntu Trusty to Xenial, where python3.5 will be available. During the Newton cycle support for baremetal provisioning with bifrost was added to kolla. Bifrost is a collection of ansible roles and playbooks to deploy a standalone instance of ironic. In Newton cycle we included means to change various things in Kolla images using override file. Full customization guide can be found here http://docs.openstack.org/developer/kolla/image-building.html #dockerfile-customisation * In the Newton cycle a new kolla-host playbook was introduced. The kolla-host playbook is intended to prepare servers for use as kolla deployment hosts. The kolla-host playbook requires the nodes to have an os installed and be reachable via ssh. Currently the kolla-host playbook supports ubuntu 14.04, ubuntu 16.04 and centos 7.2 as target servers. See features section for more details. Added performance monitoring stack based on InfluxDB, Telegraf and Grafana. In most of case, the disks used by ceph have different size. Use the default value 1 may block the ceph when one disk is full. Use the disk size as osd weight will more reasonally. New Features ************ * Implement Aodh ansible role * To produce a secret storage and generation system capable of providing key management for services wishing to enable encryption features. * Add ceilometer ansible role * The Ceph bootstrap will now pause requesting confirmation from the operator if it detects a bootstrap label on a disk with more than one partition. An operator may override this behaviour by setting the Ansible variable 'ceph_osd_wipe_disk' to 'yes-i-really-really- mean-it'. * When Cinder, iSCSI and the LVM driver are enabled, check that the appropriate volume group exists on the target nodes. * Add cloudkitty, the Rating as a Service component. * Add collectd ansible role * Add ansible role for openstack congress project which provide policy as a service across any collection of cloud services in order to offer governance and compliance for dynamic infrastructures. * use dumb-init to manage the pid 1 process * Add full support for fernet with distributed token node syncing * Implement Gnocchi ansible role * Add jinja2 header blocks to each Dockerfile. * Add multipathing support to docker container. * Allow mysql to be used as a database for Ceilometer. * Add some extra prechecks to ensure a sane NIC config. * Add neutron Service Function Chaining (sfc) support. Service Function Chaining is a mechanism for overriding the basic destination based forwarding that is typical of IP networks * Introduce a new property "enable_neutron_dvr". Set to "yes" to deploy Neutron with DVR. * Add support for LBaaSv2 with HAproxy container. * Add neutron-vpnass role * Add Python 3.5 classifier and venv * Implement rally ansible role * Start using reno. * Implement Sahara ansible role * Add vmtp support to docker container. * Introduce OpenStack Infrastructure Optimization service, also known as Watcher. This project makes use of Ceilometer data to rebalance the cloud to meet declared goals and strategies. * Implement Ansible Tempest role * A new deploy-bifrost command was added to kolla-ansible. The deploy- bifrost command will deploy and bootstrap a standalone instance of ironic in a single container. * A new deploy-server command was added to kolla-ansible. The deploy- server command uses a locally deployed instance of bifrost to enrole servers with ironic and provision their os. * New option enable_neutron_agent_ha added to enable/disable dhcp/l3 agent high availability, dhcp_agents_per_network is default to 2 and it's configurable for user. * Add support for CADF event notifications. This standard provides auditing capabilities for compliance with security, operational, and business processes and supports normalized and categorized event data for federation and aggregation. * Change Ceph version to Jewel * Docker image for CloudKitty, the rating as a service component of OpenStack. * Allow the use of a database backend for Horizon sessions. * deprecated --include-header and --include-footer parameter * Customization mechanism for dockerfile * Customization implemented in most of OpenStack services * Ability to modify repositories, packages installed and keys installed * Ability to inject or override code in certain placess across dockerfiles * Enable the nova microversion api * Add etcd ansible role * Add etcd docker container * Implement MongoDB replicate set cluster * Import Murano core libary during install required for Murano operation. * support use gnocchi collector in cloudkitty * The kolla-host playbook supports bootrapping clean os installations to enable them to be used as kolla hosts. When the playbook completes the bootstraped systems should pass the kolla prechecks. * The kolla-host playbook will install docker 1.11 and docker-py on all baremetal nodes. * The kolla-host playbook will configure /etc/host with the hostname and ip address of all nodes in the kolla inventroy if customize_etc_host set to its default value of True. * Add kuryr ansible role * Support for Influxdb v1.0.0 * Support for Telegraf v0.10.1 * Support for Grafana v3.1.1 * Fix the implementation of Neutron physical network provisioning, operators can now configure multiple physical networks using augmentation files. * Pin the base distro release version. * Implement Senlin Container * Use [oslo_messaging_notifications]/driver option in cinder.conf to enable block storage meters. * support using the disk size as the osd weight when osd_initial_weight is auto * LDAP & AD support has been added to the base images, and support for Keystone multidomains config files. * Upgrade Ubuntu base image to Xenial Known Issues ************ * The performance monitoring stack currently in use in Kolla is experimental. The components used to compose the performance monitoring stack may change in Ocata, and the implementation will certainly be far improved in Ocata. * Ubuntu 14.04 is eol. We should move to Ubuntu 16.04 in Newton cycle. Upgrade Notes ************* * Version of Ceph has been changed from Hammer to Jewel * should move use header and footer block in template overrides file * Kibana version changed from 4.4 to 4.6. * The wrong service type of the Mistral keystone endpoint was fixed. Prior to a upgrade manually change the service type of an existing Mistral keystone endpoint from 'application_catalog' to 'workflowv2'. * RabbitMQ version was increased to 3.6.2 * the os_initial_weight still has the default value 1, it will not break cluster when upgrading. Deprecation Notes ***************** * Fedora based Docker images are deprecated as of the Newton release and will be removed during the Ocata cycle. Further details below the following URL http://lists.openstack.org/pipermail/openstack- dev/2016-September/104011.html * Nova network was deprecated in the Nova project in April 2016. The nova-network container is deprecated as of the Newton release and will be removed in the future. * Heka is deprecated and will be replaced in Ocata cycle Security Issues *************** * The kolla-host playbook will create a kolla user on all nodes using the ssh-key specified in the passwords.yml. The kolla user will be granted passwordless sudo privalages on the host. this behavior can be disabled by setting create_kolla_user=False Bug Fixes ********* * The wrong urls of Cinder Service endpoints was fixed. * Integrates gnocchi with ceph to resolve the the lack of HA. Other Notes *********** * Congress doesn't work correctly out of the box and will not deploy. See Bug * Reducing disk footprint for Ubuntu/Debian images by only installing English locales and no documentation files. Changes in kolla 2.0.0.0rc1..3.0.0 ---------------------------------- 03d86d5 Fix mariadb build issue bb665cc Congress doesn't deploy release note 5c9c786 Fix wrong log permission for services collected through syslog 154be9b Bump retries in starting nova-libvirt to 5 9cc3795 Fix keystone fernet file exchange via ssh 3bc9d06 Add missing closing brace in grafana configuration file 6537d8e Fix ironic upgrade permission issue d308bb2 Fix syntax error in sahara permissions 8af8e7d Fix gnocchi upgrade permission issue dcefb6f Fix wrong magnum volume path in json file 9089e58 Fix for cinder not working with permissions changes e3b60a6 Fix neutron upgrade permission issue 3389a72 Fix grafana upgrade permission issue 859b95e Fix nova upgrade permission issue 97e13cb Fix influxdb upgrade permission issue f6e6e17 Fix congress upgrade permission issue aee86c1 Fix mistral upgrade permission issue fa459a6 Fix heat upgrade permission issue bcd918d Fix cinder upgrade permission issue c29d1c9 Fix murano upgrade permission issue 9576b1c Fix common role upgrade permission issue ff9ffb8 move sys.exit out of try finally block in set_config.py file c559295 set basic kolla structures for iscsid d261393 copy ldlinux.c32 to /tftpboot in ironic_pxe 3f55dd5 copy iscsid logrotate config 2e00d14 Fix log directory of Elasticsearch d7c3df4 Fix mongodb upgrade permission issue 5d88536 Fix telegraf upgrade permission issue ca959cf Fix magnum upgrade permission issue ce0e27c Fix sahara upgrade permission issue d4db3da Remove ceph repo for Ubuntu install 2c22589 Fix stale namespace removal issue d0993c9 Fix manila upgrade permission issue fe05203 Fix senlin upgrade permission issue 6220b9d Fix watcher upgrade permission issue 25184b4 Fix rally upgrade permission issue dc003b9 Fix elasticsearch upgrade permission issue 511fdcb Fix mariadb upgrade permission issue b2a661a fix cron logrotate for sahara cb1d1fc Cinder endpoint wrong fix c6cd09b OpenStack Services Should Use keystone_internal_url for auth c2751c4 Fix glance upgrade permission issue 0a95100 Fix keystone upgrade permission issue 0fbfde0 ansible: swift: Fix swift-object-expirer restart loop f7f36c8 Fix wrong mongodb address variable in ceilomter bootstrap f182dc6 Fix rabbitmq upgrade permission issue d2f9f4b Mount host localtime for containers c7ac38c Update .gitreview for stable/newton ae7d9e3 Add register to upgrade.yml to create correct endpoint 255198e Fix the failure to launch instance when enabled Ceph 86fe4c9 Make Kuryr upgrade not crater the upgrade 626967c Enable keystone authentication for Barbican cd03366 Fix 'Address already in use' for barbican-api bf62341 Add missing uwsgi for barbican-api Dockerfile 9685eca Added missing cleanup-images in setup.cfg 852329f remove extra blank lines 0c15da0 Fix the wrong setting for Grafana session a286be1 Add netaddr to requirements file 2bc6f65 Add upgrade tasks for Kibana 9de0894 Make sahara api worker configurable e7df182 integrate gnocchi with cloudkitty d1b95be Use rootwrap in sahara config 0a9e1f2 Mark performance monitoring stack experimental 1bcb139 Choose node with largest seqno number for mariadb recovery 18fa72c integrate gnocchi with ceilometer 96bfb59 fix mistral requires auth_uri to point to v3 explicitly 7fa1a08 Remove unneeded Heka bootstrapping code e1ca39d Build source from Newton rather then Master b46d625 add sahara log in heka aeb86de Move RDO to Newton branches e4e842b fix can't collect horizon log in heka 4fa2508 Fix genconfig and reconfigure for magnum 6f1c15d Install python-mysqldb for Ubuntu in openstack-base container dcd8dda Heka template missing optional params 1932552 Updated from global requirements 792f16c Fix horizon to use cache 1a79fb6 Create /var/log/kolla/rally before running rally-manage db create/upgrade cc07097 Fix l3_agent.ini rendering error when DVR fb915b5 Add hexdump package for ironic-conductor container dbcf605 Heka deprecation 06422a2 install pxelinux for ironic_pxe 1901449 Revert "Fix pycparser wheel package issue" 7370e01 Fix sahara endpoint url cfff7b0 Change mysql-check in HAProxy to post MySQL 4.1 9d8fe89 Handle z stream change for rabbitmq-server 74c85cf Iscsid container fails to start on storage node when cinder is enabled ffa6c11 fixed kestone fernet prechecks for multinode deployments e8e1ad7 Handle the KeyboardInterrunpt properly for build.py script 903b0ff Fix ironic failed 0226cca Download the rabbitmq_clusterer plugins to the correct path 195bcd0 Fix pycparser wheel package issue bfd032a Add CADF event configurations in Keystone when enabled 4963898 Remove redundant common play and add haproxy hosts 96318fe Integrate gnocchi with ceph 89d3877 Fix error in Gnocchi service d5ae21a iscsi role misses 'storage' group febc13e Deprecate Fedora based Docker images 54f255f Fix typo in start.yml 87d582b Fix a typo in bifrost.rst ca26f55 Mount host localtime for ceilometer a71874f Fix mistral service 3c45625 Fix Magnum trustee issues 57ba2cd Fix wrong heat trustee configuration bcf7afb add congress api to haproxy 87f0194 Rename the gnocchi api-paste filename c4fa051 Use merge_configs for gnocchi-api-paste.ini file 55f0642 Add a note for how to get prior release kolla doc b1a91dc Update manila-share.conf 01db7b7 change CollectD to collectd in collectd role 566c19c Fix a docstring typo in build.py aa436c5 Add aodh checking to port_checks.yml 01d16a8 add sahara port prechecks 6b32105 change perm and user wsgi file permission f9fcc19 remove bootstrap.yml in grafana role upgrade.yml ec2f8af Add bootstrap_service.yml to upgrade.yml 53451df add aodh gnocchi barbican in heka.json.j2 45ef861 Add newline in grafana template 45f696c Use keystone-paste.ini template for keystone ccbb5db change perm 0644 to 0600 in congress role 9a02511 add reconfigure.yml in congress role cbfc70d add upgrade.yml in congress role cfe9391 Fix the url of Cinder endpoints 3f134d0 Changed docker_restart_policy to unless-stopped c1d686f add cloudkitty port prechecks ffbd2c0 Remove clients from test-requirements already installed by python-openstackclient 5cb0e00 Fix merge_configs.py file when not provide vars parameter 40ed2c4 install iptables in ironic-inspector container 326327a fix ironic-inspector setup 7555054 Fix the failure of ceilometer-api container b515039 Change "Virtualhost" to "VirtualHost" in horizon.conf.j2 7155305 Revert "Add enable_elasticsearch option" 127ffc9 Delete tempest.yml playbook 7608f1e Revert "Bind EPMD to api interface address" 23aae45 Add aodh-api to haproxy.cfg file 911dfe4 ES and Kibana config modification for Kube d01c97d add upgrade.yml content for gnocchi role 36f400b Fix heat role creation bcbf22c Add Using a different base image to image-building doc d64fc35 Clean up TODOs from live documentation 582a17a remove not use wsgi other service in aodh 364c980 add upgrade.yml to aodh 7bd9e44 Add more packages in bindep.txt 44bcd66 Add upgrade.yml to sahara f581c81 Add enable_elasticsearch option e757eff Install the required packages for ceph-base image 0af4dc8 Fix idempotent for initializing toolbox container task b5d1b3a Document bug triage b2ad476 Update the order of release note page f13b267 add etcd reconfigure content and do_reconfigure file 73a39db Fix permission for /var/log/kolla folder 419454c missing space breaks haproxy from starting cd59e92 Document that YAML data files should start with three dashes ae54ae8 Mark include-footer and include-header deprecated for removal fa2b962 Point to boostrap-servers playbook in quickstart 4330790 Add architecture guide back to index.rst d5e5700 Remove ansible serial: option for haproxy and rabbitmq. b1f986c Cinder cannot use external non-LVM iSCSI storage a071bce Add "---" into some files of yaml 1baffca Updated from global requirements d1673ad Allow operators to provision multiple physical networks 9e32426 Fix senlin api bind host 3bf571d Add support to use pdb with tox ef401e3 Delete the unnecessary space 6f58b12 Fix tempest missing spaces 1116ae3 Add fwaas_driver.ini file to neutron-vpnaas-agent container 4e30d0f Allow a custom keepalived configuration file 19ed74d Allow a custom haproxy configuration file 2075176 Fix base CentOS repository keys 2d634e5 Fix murano auth issue 92c828b Remove all bytcode & objectcode before running tox 156abd6 Remove no-cache option in build.py 2d97299 Delete extra spaces in baremetal install.yml 2042ad2 Deprecate old auth parameters of ironic in nova.conf 08146dc Allow genconfig to work with kolla-kubernetes and ceph ccc68d7 Update EPEL version in base ea0e854 Fix Keystone CADF notifications c3f2be5 fix horizon fernet container 8735510 Add pulling ceilometer-collector image c28a0cf run_once Checking mongodb backend for ceilometer 6bc976a Set ownership of barbican configuration files to barbican 2762135 Repair swift reconfiguration e775958 Use ansible_version when available for precheck 10bfda6 Checking valid fernet expiry only need to run once 879b446 Fix using rhel as a base build image d9c29c1 Install cinder related package for glance a05a50e Install extra packages for gnocchi using setuptools extra feature 1b04a23 Remove duplicate lbaas provider config 1908825 Document that new services have to be listed in the README file fec6382 Fix ironic Dockerfile 4e9d5b9 Added Barbican in the list of services deployed by kolla aa5f743 Added enable_option for some services 8d2af5f Delete extra spaces in gnocchi config.yml a95a037 Add "---" into ceilometer/tasks 2414670 Deprecate nova-network container bcff0f8 Create the heat_stack_user/owner role in the heat role 0a024d9 Fix vpnaas for neutron da4cf7b Add "---" into tempest.yml 3bd180f Only enabled services log files 734f881 fix config file permission to ironic instead of root 2d6a9ec corrected error in multinode.rst e328ada Optimized the serial upgrade and reconfigure 897fb08 Fix reconfiguration issue for Keystone role 37cef10 Remove the unnecessary space 3b8209c Fix up aodh config templates 76e3821 add reno note monitoring 6664a8d install ironic-inspector during image build e1e8a5b align ceph with other svc patterns in inventory files 8f6bd4e Enable CADF events in Keystone and introduce enable_cadf_notifications 1b8c4ff Update "which" command to "type" 4b7b4c4 Add "python-openstackclient" to test-requirements.txt 893f148 Allow operators to customise keystone source install ef9d6ea Add networking guide for Neutron extensions 75bbfa7 kolla config file path corrected for ubuntu d48cc50 Use "type" to take place of "which" and update the output 0d28b31 Add Kuryr ansible role d7aee11 Revert 'Add neutron-lbaas-agent to exlude image for Ubuntu binary' dc85fda Add a tip at the end of tools/init-runonce 2e29f4b Modify collectd permissions 1be0523 Remove public_router_id from tempest configuration template ddbbd05 Document how to add logging for a service e771404 Add cloudkitty to heka-openstack.toml.j2 e3f4d45 User os_keystone_role to create cloudkitty rating role b76a613 Fix ceilometer.conf template da3156f Bump version of Kibana from 4.4 to 4.6 be0fcb5 Integrate neutron-vpnaas-agent into the neutron Ansible role 01d2e2e Generate full /etc/hosts on every node a5b53f3 Add etcd ansible role 4fabd37 Add kuryr-libnetwork Dockerfile 9f16111 Switch arguments to usermod cafdbb3 Mariadb bootstrap - no need to check for cluster ready in Kube 7306b25 Add upgrade file to barbican role 56af4ef Added telegraf role aa2fcc0 Non-default database port documentation. 4b3d811 Add ansible role for vmtp container ce2a00a Add neutron-vpnaas-agent container 8604881 Minor fix in manila guide 95c916a Allow Neutron to be run in DVR mode 8f5a42c Add extras and pytz>=2013.6 into test requirements fe61591 Added grafana role 0f30134 Set owner of rally.conf to rally 8a01ed3 Add Networking-SFC role 44ce626 Add nova-serialproxy container abf8365 Add Senlin Ansible role a14d8e6 Fix missing cloudkitty config file for cron container 5480bd9 Bind EPMD to api interface address de0c780 Change Mariadb default character set to utf8 bd08f55 fix the common upgrade 2660bbe Call filter_images before save dependencies 36794a6 Remove the useless host in site.yml dd57e1d Add iter function to change list into iterator 5e3f392 Fix transport for kolla-kubernetes 3eff4bc Allow customizations of pip packages 36c0501 Fix formatting in CONTRIBUTING.rst 7fb2d38 Use "node" take place of "nodes" b41247c Add header blocks to all Dockerfiles 2330903 Check volume group exists for Cinder in prechecks a62aaaf Add logrotate configuration for cloudkitty 924fbb6 Fix permissions of tmp files e6d3885 Copy mongodb_bootstrap_replication_set.js to /tmp on the deployment host 4c1482b Added serial option to site.yml. cf0c25c Add common role to Ansible site file 80bdb45 Build process outputs each line twice c7c8790 Fix mariadb bootstrap error 388eee2 add telegraf log directory /var/log/kolla/telegraf e053738 Add Barbican ansible role 6860106 Fix wrong release name in a comment in sources.list.ubuntu bdb25ed Add missing apt-get clean in Ubuntu base image 1ab59dc Install apt-utils in Ubuntu base image f0aa137 move ovs cleanup to tools/cleanup-host 134089d Adding required check for Orchestration Kubernetes 28b80a0 Revert "Build a more organized doc structure" 3091f94 Fix manila_share container isn't up after deploy 419e560 Check if libvirtd apparmor profiles exists before removal 82f6d3f Allow mysql to be used as a database for Ceilometer 99f355e Use delorean rabbitmq 2536926 Clean imports in code 6417595 Added grafana container 25f0794 Improve README file cae4d36 Add ara to collect ansible playbook running statics 79e8586 Change with_ loop variables syntax to ansible 2 f59ddb3 Add neutron-lbaas-agent to exlude image for Ubuntu binary 8cd59db Remove novncproxy and spice from reload e31dede Fix generated sahara conf 52b5254 Use ``tgtd`` to take place of tgtd 0ca1956 Remove the duplicate word to improve the clarity of the sentence 0a50cb8 Change ceph version to Jewel 4bdf43c Move transport_url parameter before service_providers section 6f3d8aa Updated from global requirements 4af9bbe Ansible roles for collectd Container d8c70ec Adding manila endpoints to HAProxy d1d2e8e Fix manila-api binds to :: 7b5d5ce Update the command to restart the docker ffe56f8 Add Checking free port for Manila API 442daf7 loc fails with recent removal of heat dev env d3f65a8 Allow use of database for Horizon sessions 92eb565 Correct Ironic keystone_authtoken option name 95798a1 Add empty upgrade file to gnocchi role b364c67 add CentOS's docker config file in multinode.rst 363fa65 Remove the deprecated kolla-build group name 77f565e Fix keytone options in all.yml/globals.yml 0c9debe Add sahara ansible role 504fc35 Cinder-backup misses client part for NFS backend 5f62c22 Add cloudkitty ansible role 754a0ce Add extra methods in template when using template override b6de8fd Keepalived leaves VIP on the host in case of accidental removal. b51d107 Turn off bindep d3d3472 Implement Ansible rally role da8ce56 Cinder-backup fails while backing up iSCSI volumes 89392f4 Add gnocchi ansible role 9e8f7ef Comment some lines in globals.yml 663cbfb Correct Murano keystone_authtoken option name cf2ff03 TrivialFix: Delete virtual bridge artifacts when cleaning hosts 8bc778e Fix lost parameter --remote in generated start_ovsdb_server.sh 4b69671 Improve script to check used source versions cb51a44 Replace deprecated rabbitmq parametrs aa4b49a Add cloudkitty containers for type source 73dd4f6 Fix Typo in quickstart 93bff1c Add missing Docker images of OpenStack services to README file 97ca36c Add Barbican container dockerfile a89c9ff Init group owner of /etc/kolla to kolla 23921f1 Ensure doesn't use LOG.warn cd9774b Update destroy include images arg to LONGOPT bc1a468 Remove dev/heat note from READE file 49f7359 Added influxdb role 7f8b405 Use the standard start method for kolla-toolbox container c6dd714 Add precheck for ceilometer backend db65389 add iproute package in base image. a912b79 Use a local docker image namespace in gate 2bf3ce5 Updating ironic configurations in nova.conf 8229baf Add guidelines on adding a new service 55b184a repair gnocchi dockerfile cda6fb0 Update doc for congress 4b39d05 Added Ansible playbook for congress deploy 69af208 Release notes for customization 7f10848 replace baremetal_nic with api_interface 7bba25a Allow operators to override use of get-pip.py e4f3e34 Allow operators to customise rabbitmq plugins 96bf1cf Add warning to kolla-ansible destroy action 19c5e97 Allow operators to override versionlock for redhat in base f6e8430 Add a block around oraclelinux base package install 64c40e2 add deploy-servers command 538dbac adds bifrost ssh key generation 96b3f0a add bifrost deploy ansible support d7dfae7 generate bifrost yaml configs e821f58 Install neutron-lbaas-dashboard from source in horizon container ce92b49 Fix service_type of mistral endpoint 9688f95 Customizations for Neutron a9e16c8 introduce bifrost-deploy container c5668bd Add option to support dhcp/l3 agent ha 143f1c2 Add ansible raw task note, add apt-get update 62781f4 repair rally dockerfile c4be56c Fix nova_ssh container shell to allow instance resizes. 7ce05f9 Add aodh role 6841276 Removing development packages from Baremetal install defaults 7d0a2aa Limit hostfile generation to control nodes 906c074 Architecture guide doc f34d0b0 Customization for base ec40ed3 Add a check before wiping Ceph disks in bootstrap bf61489 Customizations for dind c12230a Fix using filter() to meet python2,3 c59b2cc Dockerfiles for collectd Container 9092f4a Fix removing nova_libvirt container issue 92b2fd9 Fix Kibana image build error 56838a3 repair aodh image dockerfile 17d36b7 Chage with_ loop variables syntax to ansible 2 2aac59a Updated from global requirements 8e98e5f Change source with dot at extend_start files 46e8196 Use six.StringIO 2973bc7 Add missing container image names to build config file fc30d58 Fix bandit gate jobs a05d4d7 Customizations for MariaDB 42bd520 Changed admin-openrc from DOMAIN_ID to DOMAIN_NAME 6c238ca Move rabbitmq precheck from start 54be45e Fix toolbox permission issue when enabling ceph 9f5efc5 Import the Murano core libary as part of setup d3c60d0 Customizations for Nova b597c90 Customizations for Ironic 3d4ebd6 Customizations for RabbitMQ 524868c Add dockerfiles for keystone fernet 1c68ae3 Add full support for fernet 3d12b6c Set 'balance source' for Horizon in haproxy d255743 Move to transport_url for rabbitmq configuration 1e22227 Updated from global requirements c096825 Add etcd container 158a852 Add defaults for interfaces to all.yml 1d56fcb Fix bug in Elasticsearch role 2a1c25d Fix Ubuntu binary build and deploy gate 598b718 Add missing \n at end of file 29c5421 Add mariadb client binaries to kolla-toolbox c3410a9 Fix some minor errors in the doc 2fb98a6 py3:Remove six.iterXXX 02da8e5 Fix typo in iscsi pull playbook 61e74c9 Vagrant doc updates 860e341 fix sahara dockerfile 1a7af3e Pin Ansible version to 2.1.1.0 in kolla-toolbox 9946b56 Remove log propagate configuration 08f1dda Updated from global requirements 254f7cc Sync the local_settings.j2 with horizon 066173b Implement mongodb replication set cluster 2b741eb Create the nova instances directory when need during starting 6710bbe Use dumb-init to manage the pid 1 process 755d517 Make tox -e docs work 04d6736 Pin to Ubuntu 16.04 2e0c5ec Fix Ubuntu source gate deployment 423e3f3 Remove unnecessary host at haproxy in site.yml f2a2b69 Remove the RUN directive for macros.install_packages in the Dockerfile e0a9347 Remove Kazoo dependency and Kolla Zookeeper helper 0002898 Fix the location of Kolla configurations in the evaluation workflow a9d0872 Handle empty package list for install_packages a01b803 Add basic checking for network_interface to prechecks 69bbb75 Updated from global requirements e70f8e1 Add Dockerfile for congress d96464e Improve rabbitmq-clusterer template code format 2e0571a Customizations for Multipathd ba4ef6b Update openvswitch base Dockerfile to include footers 1370909 Update heat base Dockerfile to include footers 8cd0d2a Simplify install process for faster quickstart execution 1116953 Add pull.yml file for tempest 26d8d6c Fix murano notification driver 9ac7f96 Create the _member_ role in the horizon role efd9065 Customizations for zaqar 5e35fc5 Port with_ loop variable syntax to Ansbile 2 (finish) d4373ed Update kubectl version at magnum-conductor container 40a0cb9 Update cirros image visibility in init-runonce b9465f8 Customizations for aodh 0ec7218 Customizations for murano 3f20f25 Customizations for sahara d03f1bb Customizations for trove b092f98 Updated from global requirements 4c7e0c2 Remove duplicate items 348dc0f Customizations for heka df40ff8 Fix Kolla home-page URL 4d6afc6 Start using orchestration_engine variable 53cb9f7 Add crudini b2a7905 Fix guide formating errors 731f0bb Add force flag to cleanup-images aa517c4 Build a more organized doc structure 3d6344d Move the keystone_*_url variable from common role to group vars bd3b79a Add guide to auto mount /run as shared 7b63d46 ironic.conf file missing enabled_drivers info 3486d5b Fix tar command path for magnum conductor using ubuntu f4f95e6 Fix neutron-server section in AIO sample inventory b234976 Add jq 4218a3b Add support for building vmtp container 5bb5899 Add a note about the sandbox environment to the CONTRIBUTING doc 4d6840c Customizations for Senlin dbc50ab Skips a debug log during image build 856d0a8 Minor formatting change to CONTRIBUTING.rst 29fcb04 enhancements to install_packages macro 316f0a7 Document the Dockerfile customisation mechanism 5878757 Fix the Ubuntu Xenial build gate 05ed43e Fix the memcache location value in horizon local settings 93d91cd Minor doc fix fdf9dd5 Customizations for Manila 0faf91c Fix LVM2 in Ubuntu section in Cinder guide 6d84d86 Customizations for Tgtd de7e8bc Updated from global requirements d2215ea Customizations for Designate cecfaaf Customizations for Elasticsearch c2f6cb1 Customizations for Kuryr 9b265dd Customizations for OpenStack Base 5031206 Customizations for Swift 43d2a0b Customizations for Tempest 99cf946 Customizations for Cinder b9a2839 Customizations for Watcher 8306864 Customizations for Glance 37b3c8c Keystone interface address and memcached override 99a1662 Fix interface address for Neutron-server b8de1f8 Added Test case for env and volume comp e4259f8 Fix designate bootstrap. c14636c Add --user-domain when adding heat role admin 3e8f998 add baremetal role to install kolla deps. 19a4096 iscsi initiator names must be unique among hosts cc41502 Fix intf address for RabbitMQ and disable cluster for Kube 495a905 Revert "Remove files from /var/lib/apt/lists when cleaning up on Ubuntu/Debian" 41ec75b Introduce a script to launch ovsdb-server process 34975e2 Port with_ loop variable syntax to Ansbile 2 057c92f Document the use of external Ceph journal drives 608f6c7 Remove heat dev environment 8078273 Cinder-backup requires iscsid running on the same host fc91ce7 Change Quickstart to follow code conventions ed1b3dc Optimize horizon cache and compress for http response 173d254 Add heka custom config to define user's log pipline 2187125 Customizations for kibana d707c59 Replace horizon default config with custom config 1bbd6b2 Fix typo in doc 6d45786 Change cleanup to destroy as cleanup is a misnomer 304c69a Customizations for Ceph 4e8887c Updated from global requirements 9c69d4b Fix prechecks of a vip address 823cb33 Remove unused project_yaml parameter from role metadata files 4e8bf3f Remove files from /var/lib/apt/lists when cleaning up on Ubuntu/Debian 1ce1cd1 Enable the nova microversion api cae30a9 Make the kolla_keystone_service can update fields a7c41a8 Fix inconsistencies in git url eb41179 Dockerfiles for Networking-SFC Container 464542b Customizations for kolla-toolbox 28f5722 Reducing disk footprint for Ubuntu/Debian images bb2397d Add Watcher default settings 59b887d Fix the evaluating conditional for enable es and kibana 5b45d47 Customizations for magnum c5ce1aa Customizations for keepalived edcb218 Add customizations for keystone 73dd761 Added influxdb container e418a04 Customizations for iscsid 391b069 Volume specification for ironic-api was invalid. c3d8262 Add doc8 test and improve rst syntax 1f0afeb Added neutron-metering-agent 1c0ba85 Replace keystone's wsgi config with custom config b8657a8 Add upgrade tasks for Ceilometer 76aeb50 Correct mistral-executor image name dee6f4f Updated from global requirements 9fd70b4 Modify some spelling mistakes 4cd95db Enable central logging without deploying elasticsearch/kibana 4f4ebb2 Customizations for Horizon 810b7e4 Cleanup images as part of kolla-ansible cleanup 29d9d66 Correct permissions to /etc/keystone/domains 046f739 Change workers to be static when using kubernates 85db94e Glance interface address, memcached override, and glance override. a6d89f4 Horizon interface address and memcached override 492411f Fix interface address for memcached atop kubernetes c91724b Fix the variable name mismatch 0c638e5 Added Test case for attribute comp 684b483 Using sys.exit(main()) instead of main() ae34973 Fix the kolla_docker issue with docker 1.12 fc97ff1 Change config for lbaas service_plugins ae3d381 Fix undefined error for cinder template 18fb1b2 Add "Programming Language :: Python :: 3" to setup config file e5ca547 Added telegraf container 08985a0 Use /etc file to overwrite the docker.service file 37cf84a Doc wording update 5838bd0 Enable kolla k8s to override bind api bind address in genconfig b1ba77b Customizations for mongodb 3eb8294 Customizations for haproxy 2df3d25 Fixing crond crashing with centos/source e504dad Updated from global requirements ffafebf External Ceph - Implementation Nova 3c3b028 Use a lower number of the workers 843f934 Make kolla-build list-dependencies option work 9f596ff Fix dict.values() PY3 compatible 512be70 Fix the neutron-lbaas-agent container issues 615b0ec Make the enable_isolated_metadata and force_metadata to yes in default f96458f Customizations for openvswitch 5fe1676 Use the node_custom_config variable in the config.yml file 4f3efd7 Clean up Glance image after sanity check 489bcd3 Implement customizations for heat-api-cfn container cd8f68b Vagrant plugin check 1bddef9 Python 3: dict.iteritems() 9cbceda Fixes Dockerfile for neutron-lbaas-agent cfa5b36 Customizations for ceilometer ba62df4 Minor Readability Adjustments to Operating Kolla c4f825f Fix Wording and Typos in Deployment Philosophy c5149a0 Customizations for rally 9ad412a Customizations for cron 8cfd14d Fix typo in cinder guide a7c3851 Customizations for mistral 1b0e701 Simplify the Cinder LVM backend 618d5d2 Pull tgtd image when need 2730005 Add empty upgrade.yml file to ceilometer role a66f007 Consistent external Ceph configuration for Glance f7e18ca Customizations for gnocchi 1a549d0 Allow custom configurations for ceilometer a7ac467 Ensure apt-transport-https is available. c3a6aa6 Add Watcher ansible roles and templates ba42fb6 Use lbaas alias instead of the class name 3a51aad Bind the ceilometer-api process to the api_interface only 76f0f9a Added ceilometer decision in neutron.conf for event notifications 2102631 implement Ansible Tempest role 101856b Fix the failure to create instance snapshot e5788a0 Customizations for heat b693638 Configurable policy.json for keystone 3894883 External Ceph - Implementation Cinder 30e3d90 Add missing configuration files for ceilometer a3b043a Add Cinder-Volume Package for Ubuntu binary install 94410d2 Change rgw frontend interface e61f13d Fix 'reconfigure' command of kolla 823ab3f Remove notification_driver option 72d13a3 fix small documentation error 4cd8ee4 Add pull.yml to the ceilometer 5d5b209 Add 'optional' param for mariadb heka conf 9aa385a TrivialFix:modify the spelling mistakes 1bfc817 Removing .erlang.cookie before rabbitmq bootstrap recreates it e7251f1 Improve glance sanity check f16a451 External Ceph support - Implementation Glance 51504c3 Keystones openstack_auth was undefined ef37687 Added unit test for volume operations bcebc7c Add Python 3.5 classifier and venv a5e402f Support Keystone Domain specific files 416028c Remove [neutron]/auth_strategy option in nova.conf 4ece523 Use local mirror of ceph and uca b34ede3 Enable Block Storage meters fbfab6a corrected documentation for registry version 39875a5 updated insecure docker-registry configuration 115c55e Add multipathing support to docker container 37b95f2 Add LDAP support to keystone Dockerfile a479afa Use inventory_hostname for Ceph bootstrap d4c0eec Updated from global requirements a109c74 Underline should match the title length in docs 77296eb Build docker images for OpenStack Watcher 9bd7136 Fix magnum default service type 998f8f7 Fix the memcached config in horizon local_settings 138c642 Add enable_iscsi option to etc/kolla/globals.yml cadf8af Read GPT label using sgdisk rather than udev 2d4161d Improve task names for Ceph 3f79e37 Fix the overwrite sudoers file issue 10258f1 Fix the native ovsdb_interace failed 379de15 Updated from global requirements fd64138 Fix the upgrade haproxy failed b8ea999 Fixed typo in all.yml 1d39946 Add Senlin Docker container 43a38c1 Fix broken save,list images/dependencies options 4c1913e Add releasenotes for ceilometer 186271d Fix publicURL endpoint not found issue in CI d426933 Use the disk size as the osd weight when osd_initial_weight is auto 2592a46 Copy lbaas-haproxy.filters file to /etc/neutron/rootwrap.d 727173f Cleanup RUN commands in base Dockerfile 5c1ca9e neutron-lbaas TO neutron-lbaas-agent f5b04c9 Added unit test for image operation 3bd1f14 Be smarter about what to do when making a docker client 31e5f67 Add test for remove container, get state and get env e26751b Remove MariaDB warning from HAproxy 993b827 Trivial fixes to correct couple of typos. 49f32cd Document a common Ceph bootstrap failure scenario 02e060e Add unit test for stop and restart container 54919dc Enable openvswitch container logs in host volumes 3321049 Fix container stop exeption bed6d14 Fix minor typo in security guide. 2a2a86a glance-*, fix rabbit config with ceilometer d5d0458 Revert "Fix radosgw 'rgw frontends' param" 5e90e90 Set the privsep_osbrick.helper_command in nova and cinder b6e51e9 Updated from global requirements dfb0e55 Customizations continued 3af14c3 Update urls for Delorean repo files fd5c3c7 Add upgrade pip command to QuickStart Doc 8940898 Add the verification of required images step before the deployment. a43a8d7 Fix docker daemon proxy support in vagrant aa9245f Remove deprecated package python-tuskarclient 480c479 Add Kuryr Docker container 929d84b Stop using a global logger for all the things ed02ccc Updated from global requirements 2d37c4c Notify operators that cinder + LVM doesn't work 9895e98 Use MAC address for looking for DHCP leases for Vagrant 24b90f1 Add customizations for apt keys and packages a013550 Add named volume for nova-libvirt b9e6848 Spec: Deploy Kolla images using Kubernetes bdaef30 Add reconfigure tasks for ceilometer ansible role a7f93b0 Make Neutron QoS service plugin configurable 748eef0 Remove mesos artifacts aba8add Connect to remote hosts as root 5f79732 Only keep localhost for 127.0.0.1 cbd67d3 Remove unused SUPPORT_NODE variable 5718356 Set internal vip to vagrant private network acfe3b7 Refer to operator VM as primary VM 4aa0951 TrivialFix: A typo fix in the globals.yml 4108c6c Implement ceilometer ansible role 0e459bb Added unit test for start container 7e00288 Properly fail precheck for internal VIP's network c073b2d Remove EC2 API related configurations and tasks bb6a4be Format commands to the code block e299720 Fix ownership of nova-novncproxy-source directory f1c3422 Macro install packages 4cc256d Remove the pull action in the deploy_aio CI d7b6659 Revert "Added precheck to check kernel version 4.2 on Ubuntu 14.04." 4579969 Added unit test for start container f76e9a1 Make cleanup remove restarting/exited containers 977a46c Makes ml2_conf.ini configuration consistent 3afe149 Implement Rally Dockerfile 8acc177 Remove verbose parameter from lbaas_agent.ini file 3f06362 Update kollaglue repo on docker to kolla 76f97b4 Create ansible home directory in kolla-toolbox container c37d1d2 Load the metadata definitions during Glance bootstrap 700d5d7 Remove Heat CLI deprecated commands b6ae413 The quickstart guide still says to use Anisble 1.9.4 66b6ecc Added test document d360d4e Change the search path to look locally 3772ac0 Fix typos in Kolla fa12f27 Fix the openstack_release variable in all.yml 2634a94 Added unit test for kolla_docker 0c71f2d Fix missing ceilometer user in the sudoers list for binary type 775a4c2 Remove liberty warning f43820d Revert "Changed namespace from kolla to kollaglue in oslo" 869e117 Add non-intrusive ctrl-c handling a45dc94 Use 'image' not 'item' 9803b45 Changed namespace from kolla to kollaglue in oslo 3b1b6ab Fix the prechecks for the ansible version b1f4c4e Run more kolla-ansible task in the gate 51074b0 Mechanism for Dockerfile customization c31688b Make build.py importable lib 334ef7d setup_{RedHat,Debian}.sh, make more idempotent a070739 Fix the neutron reconfigure issue 4d1fa3c Bump the ansible version to >2 in the kolla-toolbox 9585c1b Remove the deprecated kolla-build section 1d74db7 Config files having underscores breaks Kolla-Kubernetes. 442b4b6 Cleanup help string of install_type parameter e26e278 Add kolla-kubernetes bootstap logic endpoint script 2b87c88 Add kolla-kubernetes bootstrap capability to Keystone 994d1e5 Add kolla-kubernetes bootstrap capability to mariadb 2de2cf6 Fix URL to Heka documentation in README file 10f2b59 make rabbitmq container build with debian 547a7cf Make nova-libvirt container build with debian 4ca6e98 Make heka container build with debian 190ae59 Make container dind unpin old docker relase ccca2e5 Make swift-base container build with debian 5df0903 Make container kolla-toolbox build with debian 5fdd2b1 adding else statement with empty string starting ansible 2.X it require a else statement. 6994bb9 Updated from global requirements d511ee3 Install keepalived in neutron_l3_agent container c66eae3 Add vars to the merge_config task in config-neutron-fake.yml aab9e50 Document upgrading for operators b4759b2 Enable HAProxy consider MariaDB wsrep_local_state 30c8055 Use debian repos for debian base docker image 7c6990c Use an image object, recorder object and status constants e78ae9b Use a task model and dumb workers 80d2edb add curlrc file to base image fca876c Add .vimrc to .gitignore e31d85e adding Note for ubuntu 16.04 42d3e77 Update Cinder guide 5026e97 Updated Gnocchi binary containers 739d657 Add support for mistral ubuntu binary containers d1ec048 Add passwords parameter to LONG_OPTS in kolla-ansible script b3e8ac8 Don't always unpack image build results tuple, as it may be None e73bb5e Manila driver session is needed only in manila-share c45099d Retitle quick start to make it more obvious in index 340326f Move developer related docs into their own section b90ecae Fix the cinder backup permission issue when enable ceph 6c4c240 change keyfile to key d47f6bc Install missing package in spiceproxy container 4044a34 Pin the base distro release version 476da0f Log the traceback in the kolla libraries acb9eb7 Updated from global requirements 95c7d83 Use --subproject instead of deprecated --service option 3545e6d Fix the incompatibility for ansible 2.1.0 5b871d1 Do not use AUFS for centos/fedora/oraclelinux container images on ubuntu host 377264a Document using a custom config directory ba30579 Adds Neutron LBaaS Support 52d7daa Use file module instead of running rm to remove a directory 2726f6e Do not use bare variables in the ceph role be2724a Update Documentation 18ae114 Fix kolla-build return codes d1b170d Set ServerTokens parameter to 'Prod' for Ubuntu Apache config c51e315 Install correct version of arping eb1bfc2 Add support to lint the install commands in Dockerfiles 353d077 Add sahara containers 435b21b Update ubuntu dockerfiles for formatting a7433cd Add title to index page of developer documentation 9774ca9 Add support for murano binary containers for rpm based distros 3c3b0b8 Add ubuntu binary container for zaqar b60d8bc Add support for magnum ubuntu binary containers 07631a7 Update the image-building documentation ca1a055 Update quickstart guide for formatting ca942df Simplify image building information in quickstart 776d941 Specify registry volume location 491822c Bump the ansible to 2 f5e0a39 Change ansible image to kolla_toolbox a0a5a63 Fix syntax issue in advanced-configuration.rst 2da010a Make configurable the location where config files are merged c5f686a Generate configuration using ansible for any project 669d735 Compile the messages in the horizon e7441a4 Configure the rabbitmq ha policy in config file c98e9c4 Fix the rabbitmq crash on CentOS binary and source deploy 82316a7 Updated from global requirements e1b5b14 Make passwords.yml file generation configurable 410866f Add generate-config option to kolla-ansible f93739f Update the horizon dockerfile for formatting 47d7ed2 Change the SELinux doc to a security doc d2a62c9 Improve Vagrants bootstrap.sh proxy support a7d330d Fixed typos in Ansible files ec36e4f Updated from global requirements 43abb15 Collect more info from the gate for debug a627681 Stop configuring neutron to enforce DHCP MTU option 2b24807 Remove unwanted test dependency zake b071bb2 Add a cluster_network interface when we use ceph 163a250 Update advanced configuration d87b4f6 Structuring the documentation d958e24 Fix build for oraclelinux base ad573a5 Update doc about how to install python-docker-py on centos 1c29522 Doc rework for quickstart, multinode, and image-building 2758005 Updated from global requirements a2c2eba add support for non-default database_port in kolla/ansible 48b4b15 Avoid _ in rabbitmq_clusterer.config 1e6c033 Fix the virt_type in the gate f6e1786 Update liberty deployment warning 4150df4 Adding variables for Cinder iSCSI backend configuration 214117c Adding Upgrade to iscsid/tgtd container 2a12fbf Revert "Install master's version of an RDO keystone" 070bf25 Support a custom base image cafd89c Add docs about config overrides 63145ab Fix the copy docker log typo 75492cf Implement non-default signal handler for SIGINT e390744 Add extension to file 7bce099 Make "cleanup-containers" script works dynamically 7323eca Diagnostics for Environment a5c1aa0 Run HAProxy in a chroot jail 6654cb1 Add images from profile as matched only if no regex is used 1a2fe93 Make Heka collect Ceph logs 9024564 Deleting only images from kolla build 0fda8ba Deletes fake containers on cleanup 696f0b9 Generate image dependencies on CLI 6dfc1ef Add a CONTRIBUTING.rst for Kolla fa88ce2 Cleanup Mesos/Marathon related work 0a53d16 Use updated wsgi file for Keystone 9.0.0 release a08a762 Adding ability to specify capabilities and security e4505aa Updated from global requirements 8065a79 Update kolla irc channel cc33c10 Adding a few #nosec tags to prepare for Bandit usage 0fcee87 map the host localtime to the container a933ceb Add python-memcache package openstack base 025d57f Remove dependencies on kazoo and friends 2c34214 Remove unecessary blank lines 819ae24 Fix radosgw 'rgw frontends' param 420f874 Yum install Ansible 1.9 specified 7a0a598 Updated from global requirements 1c85dc1 Re-order the when condition in the cinder reconfigure 9318b93 Remove the useless nova_ssh configure in the passwords.yml d9fc4c6 Update murano service name 6ffe08d Fix the gate lying 00720db Handle multi Ethernets case in the gate e043fab Catch all the exception in the push thread e2fa75f Override default latest tag on ubuntu 9fce1ac Document custom-repos d0a8579 Update Vagrant docs to ensure libvirt is installed f21485f Remove the eth1 up and down manually in the rax-ord node 22a0707 Robustify of rabbitmq upgrade 2fdd7e4 Update designate dockerfile for formatting d553514 Configures swift-rsyncd to use non-default port fc8d716 Update remaining files for formatting 74601e3 Update openvswitch dockerfile for formatting db12b0c Update ceilometer dockerfile for formatting ccba149 Update chronos dockerfile for formatting 63c5e77 Update zookeeper dockerfile for formatting a861450 Fix failure to deploy with qemu.conf 47894bb Remove check for config files to verify MountFlags 3238373 Revert "check /e/s/s/docker.service in ubuntu" f442319 Workaround broken nodepool to unblock gate a0ce360 Fix iscsid & tgtd sections in inventory samples e245290 Disable tty for keystone register script 8588bd6 Add a role to cleanup containers after deployment 8c81888 Fix typo in kolla-ansible usage message a703469 Add missing extend_start files for ceilometer container 0786e6b Change Jinja2 rquirements to match globals 7962731 Use proper protocol scheme with nova aebb199 Make Cinder access glance in round robin fashion 4c8227e Add TLS to Kibana Web Interface 732ef0e Add Kibana quick start guide 53b609d Update base dockerfile for formatting e37fa65 Use proper CentOS repositories for ceph and qemu b700fc4 Enable unbuffered output for ansible 352df06 Updated from global requirements 3a6b65f Remove node_templates_directory in ansbile variable file 240ba96 Add Mistral Binary Containers 5b4057b Added help documentation for kolla-ansible upgrade 9c8f3ff Fixes kolla_toolbox failure due to missing pytz module 9575417 Fix the upgrade issue when image id is the same 6b6c984 Update haproxy dockerfile for formatting 343f70e Update Nova dockerfiles for formatting 11e5b7d Make Heat bootstrapping idempotent 22c9cb3 Update Neutron dockerfiles for formatting 57616d0 Update tgtd & iscsid dockerfiles for formatting 62bffa7 Update Cinder dockerfiles for formatting 5c5e903 check /e/s/s/docker.service in ubuntu c2ccf57 Remove Disable HAProxy option from Quick Start Guide c605d6c Add iscsid/tgtd specific parameters to Kolla infrastructure 6c2d7c7 Adds ansible code for iscsid and tgtd containers 480d94e Update Zaqar dockerfile for formatting 0efd4e2 Update Trove dockerfiles for formatting 7959c9f Update Swift dockerfiles for formatting ddf3282 Update OpenVSwitch dockerfile for formatting 3d1e4f4 Update Mongodb dockerfile for formatting 349d32f Update Mesos dockerfiles for formatting 7b3bfc4 Update Memcached dockerfile for formatting 7294ed9 Update Mariadb dockerfile for formatting 84acecc Update Manila dockerfile for formatting b028831 Update Marathon dockerfile for formatting 2a19d8e Update Magnum dockerfiles for formatting e561ce2 Update Ironic dockerfile for formatting b1f3aa0 Update Heka dockerfile for formatting d206bd1 Update Heat dockerfiles for formatting 9fe4d35 Update Gnocchi dockerfiles for formatting 2075d27 Update Aodh dockerfiles for formatting 970075d Update Ceilometer dockerfiles for formatting 11c6457 Add missing base os values to kolla-build.conf 15444da cleanup-host should not remove kolla-build.conf 3f85c54 Create /var/cache/swift in source installation 2069d75 Create and chown /etc/heka directory 4417571 Fix the wrong package name in Ubuntu binary build 7595dfc Drop root for swift 08b08c7 Identify container through PS1 shell variable 84a0f2d Make sure /etc/hostname is valid for SELinux f93ed9a Use a random virtual_router_id in the keepalived 67333e4 Set db connection retry to infinity a090039 Revert "Spec: Deploy Kolla images using Kubernetes" ed1c718 Clarify comment about binding erlang to IPv4 9119e2e Add note about heat being busted for development 915d3f1 Fix rabbitmq crash in centos gate df53d92 Revert "Add general_log to mariadb container and make heka collect it" 1c0dcd8 Add prechecks to validate kolla_internal_vip_address and kolla_external_vip_address d73ee4a Rabbitmq Upgrade restarts container only when image was changed. 184f01a Adds iscsid and tgtd docker containers e8800f9 Fix missing libvirt python module in ceilometer-compute f5c88ef Fix the neutron reconfigure issue when enable linuxbridge-agent 4ce1367 Remove /etc/kolla configuration folders e114bd8 Put the variables in alphabetical order in all.yml 07a5bd9 Add LVM2/iSCSI documentation eec0948 Fix launch vm failed in neutron-linuxbridge-agent env ad1461f Fix the qemu has nova permission in nova instances folder 7829aa2 Add quotes for RBMQ nodes definition fda9444 Add default flavors during init-runonce 316eee3 Increase max pool size so conductor doesn't implode 976a385 Update vagrant-dev-env.rst 99761c5 Spec: Deploy Kolla images using Kubernetes c71eed1 Updated from global requirements 404dd84 Add mongodb in cleanup containers script afc2bd8 Configure Neutron to use internalURL for contacting Nova 0e6fcdb Added Kibana instructions to quickstart.rst 8cdd8c4 Increase max scheduling attempts to 10 ba4bcdb Change waiting on mariadb.pid 76ec9cb Fix manila keystone v3 issues for all clients 64ab5b0 Fix the Neutron reconfigure cfd806a Log the SHA of the Git ref for source builds f0ad131 Add nova_ssh in cleanup containers script 7676b07 Adds migration step from nova to nova_api database bf6cae2 Add remove apparmor reminder to the quickstart 8595707 Check empty passwords in $CONFIG_DIR/passwords.yml 1dc48d7 Updated from global requirements 5095731 Add comments on site.yml neutron hosts reordering 2a182ac Correct typo c7e261c Check empty passwords in /etc/kolla/passwords.yml in prechecks 86bafee Add general_log to mariadb container and make heka collect it 1e8abe3 Make Heka write Keepalived logs to dedicated directory 4242083 Implement nova-ssh container 2e396fe Restoring openstack_release option 7ab705c Add Ubuntu binary build and deploy gate 9bde623 Remove the tempest version constrains in tempest container 676998a Make keepalived virtual_router_id param configurable 7f2dd73 Add a step to clean all ceph references in fstab 0bba5fe Workaround ansible bug related to delegate_to bbbe846 When two interfaces are used for two VIPs, tie them together 5aa2dcc Fix IP resolve check for RabbitMQ on AIO f0be9c7 Update Quickstart with example for distro and install type 5680bf0 Enable the kibana access from the external network 1fac190 Increase database connections to 10000 47a6d10 Update swift name de66508 Start the haproxy by using haproxy-system-wrapper 792e2c1 Fix the nova reconfigure in the multinode env 833c126 Added precheck to check kernel version 4.2 on Ubuntu 14.04. e1b9b8e Add optional services option in globals.yml 25393eb Pass extra variables through kolla-ansible to ansible-playbook 9a910d6 Starting heka bootstrap container failed in deployment 5f381df Fix gate by adding MariaDB-shared dependnecy 584690a Fixing permission for libvirtd.log f7066db Fix the Ceph reconfigure 3f707d7 Revert "Fix consistently failing CentOS gate" b9603d3 Remove bootstrap_mariadb with cleanup-containers 493650a Change keystone log dir 0a6cff4 Refactor the glance service group mapping 9523fd0 Only copy the necessary config files for Glance 0ae14eb Restrict the rabbitmq only start on rabbitmq group 0dcb830 Use packaged pip instead of easy_install a789346 Fix gate to use world writeable docker socket 1fc0003 Fix the wrong refer self in kolla_docker.py 328a7e8 Fix typos in Kolla d2ad5f2 Remove meaningless char in regexp of find_disks.py file 5b18913 Change heat domain to heat_user_domain 1c177f3 Revert "Make heat work" ba62740 Add kibana authentication using HAproxy 7bcf58c Upgrade elasticsearch 674ff43 Change CentOS in documentation 17e0de6 Fix consistently failing CentOS gate 4d58ef5 Include docker python install 7524b37 Make heat work 4e60b99 Revert libvirt change in heka-openstack.toml.j2 in master 0d2591d Reduce log errors from heka b188d3a Re-set external_network_bridge for l3 agent 801ef2e Add reno support 8d96d63 Add creation of new log folder for Horizon 27975f8 Add conntrack-tools fea486a MariaDB is not copied if enable_rabitmq is disabled 8307b06 Swift busted with Heka 31634c4 Add PBR generation of version information 8ec7811 Changes horizon log location to kolla_logs volume 1ef3dd1 Enable horizon domain logins 77c657b Remove ironic images from excluded list c25002c Check relevant logging mechanism in the gate 8e2423a Added note about nested environment 7af0ab9 Make heka collect libvirtd.log in nova_libvirt container d686443 Disable deprecated heat plugins. 1d31b79 Remove static password 7936b18 Enabled spice c135dcb Fix rax-ord commands dcc15b9 Wrong variable name for spicehtml5proxy 28cc39e Fix bad apache2 close 7a9d1a3 Fix problem where ipv6 address causes failure f03e06e Add generate_passwords.py to generate passwords a8f3da2 Improve openstack-base image for centos binary 3e7be65 Split versions onto new line 7982ff0 Dynamically pull list of projects and versions afce10d Fix mysql bootstrap b13c18a Install neutron in manila-share group only when enable_manila is true 052b01c Fix rax-ord gate 5929833 Fix heat endpoint registration 76e0c09 Allow version_check to work on local git repo 66f3944 Fix Linux bridge reconfig issue 3b12b7b Attach external NIC to a NAT-Network if on Wi-Fi d7495b1 Fix the prechecks role idempotent 127bd6f Ceilometer needs pymongo to start d786ac9 Move manila variable 56fd071 Change deprecated options throughout Kolla f4175f0 Fix 'optional' config.json values 0a1486a Rework heka log copying 5250a00 Allow external ceph journals and fix bootstrap 6d0cd53 Allow user to choose filesystem for osd d4535b6 Add memcached_servers to keystone_auth section 0da2541 Increase usefulness of openstack-base 45aafc7 Fix linuxbridge driver e9b9a84 Fix permissions for log extraction in gate b920539 Update quickstart doc to use drop-in unit files d2f828a Add check if all the hostnames are resolvable 50c5208 Explain how to use kolla-ansible pull 05b6995 Fixes incorrect swift service endpoints de695f0 Fix inconsistancy in globals.yml 9fbcd6c Enabled nova->glance snapshots 23e7f6c Playbook for rabbitmq upgrade bb342b0 Correct var name in globals.yml ec3baf0 Install Elasticsearch and Kibana packages using yum/apt-get ef0a135 Add unmap to cinder for ceph a577634 Reorder operations of mkdir and useradd in toolbox c2f2be4 Changing Swift option section in globals.yml 1f371e2 Allow per node configuration with augments ff91d53 Refactor glance config tasks b160a78 Add cron to pull playbooks f096cdc After refactor, the upgrade code was missing task 264e908 Update README for heka image a41ab6f Reconfigure for haproxy d4a5c75 Manila ubuntu binary container f111123 Fix race condition in haproxy e0688a7 Increase the docker parition for rht bases in gate b98bc3a Change libvirt volume name to libvirtd 768c7d7 Adds genisoimage package dependency to nova-compute 997fc3b Customizations for memcached Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 102 +- ansible/action_plugins/merge_configs.py | 112 ++- ansible/action_plugins/merge_yaml.py | 96 ++ ansible/bifrost.yml | 5 + ansible/destroy.yml | 4 + ansible/group_vars/all.yml | 214 +++- ansible/inventory/all-in-one | 181 +++- ansible/inventory/multinode | 185 +++- ansible/kolla-host.yml | 7 + ansible/library/bslurp.py | 13 +- ansible/library/kolla_docker.py | 139 ++- ansible/library/merge_yaml.py | 51 + ansible/roles/aodh/defaults/main.yml | 43 + ansible/roles/aodh/meta/main.yml | 3 + ansible/roles/aodh/tasks/bootstrap.yml | 41 + ansible/roles/aodh/tasks/bootstrap_service.yml | 21 + ansible/roles/aodh/tasks/config.yml | 47 + ansible/roles/aodh/tasks/deploy.yml | 18 + ansible/roles/aodh/tasks/do_reconfigure.yml | 79 ++ ansible/roles/aodh/tasks/main.yml | 2 + ansible/roles/aodh/tasks/pull.yml | 28 + ansible/roles/aodh/tasks/reconfigure.yml | 6 + ansible/roles/aodh/tasks/register.yml | 40 + ansible/roles/aodh/tasks/start.yml | 49 + ansible/roles/aodh/tasks/upgrade.yml | 6 + ansible/roles/aodh/templates/aodh-api.json.j2 | 19 + .../roles/aodh/templates/aodh-evaluator.json.j2 | 11 + ansible/roles/aodh/templates/aodh-listener.json.j2 | 11 + ansible/roles/aodh/templates/aodh-notifier.json.j2 | 11 + ansible/roles/aodh/templates/aodh.conf.j2 | 40 + ansible/roles/aodh/templates/wsgi-aodh.conf.j2 | 25 + ansible/roles/barbican/defaults/main.yml | 40 + ansible/roles/barbican/meta/main.yml | 3 + ansible/roles/barbican/tasks/bootstrap.yml | 41 + ansible/roles/barbican/tasks/bootstrap_service.yml | 21 + ansible/roles/barbican/tasks/config.yml | 53 + ansible/roles/barbican/tasks/deploy.yml | 16 + ansible/roles/barbican/tasks/do_reconfigure.yml | 74 ++ ansible/roles/barbican/tasks/main.yml | 2 + ansible/roles/barbican/tasks/pull.yml | 21 + ansible/roles/barbican/tasks/reconfigure.yml | 5 + ansible/roles/barbican/tasks/register.yml | 40 + ansible/roles/barbican/tasks/start.yml | 37 + ansible/roles/barbican/tasks/upgrade.yml | 6 + .../barbican/templates/barbican-api-paste.ini.j2 | 60 ++ .../roles/barbican/templates/barbican-api.ini.j2 | 11 + .../roles/barbican/templates/barbican-api.json.j2 | 23 + .../templates/barbican-keystone-listener.json.j2 | 11 + .../barbican/templates/barbican-worker.json.j2 | 11 + ansible/roles/barbican/templates/barbican.conf.j2 | 55 ++ ansible/roles/baremetal/defaults/main.yml | 33 + .../roles/baremetal/tasks/bootstrap-servers.yml | 4 + ansible/roles/baremetal/tasks/install.yml | 59 ++ ansible/roles/baremetal/tasks/main.yml | 2 + ansible/roles/baremetal/tasks/post-install.yml | 86 ++ ansible/roles/baremetal/tasks/pre-install.yml | 140 +++ .../roles/baremetal/templates/docker_apt_repo.j2 | 2 + .../roles/baremetal/templates/docker_defaults.j2 | 26 + .../baremetal/templates/docker_systemd_service.j2 | 11 + .../roles/baremetal/templates/docker_yum_repo.j2 | 6 + ansible/roles/bifrost/defaults/main.yml | 7 + ansible/roles/bifrost/tasks/bootstrap.yml | 28 + ansible/roles/bifrost/tasks/config.yml | 30 + ansible/roles/bifrost/tasks/deploy-servers.yml | 21 + ansible/roles/bifrost/tasks/deploy.yml | 5 + ansible/roles/bifrost/tasks/main.yml | 2 + ansible/roles/bifrost/tasks/reconfigure.yml | 1 + ansible/roles/bifrost/tasks/start.yml | 13 + ansible/roles/bifrost/tasks/upgrade.yml | 1 + ansible/roles/bifrost/templates/bifrost.yml.j2 | 3 + ansible/roles/bifrost/templates/dib.yml.j2 | 2 + ansible/roles/bifrost/templates/id_rsa | 1 + ansible/roles/bifrost/templates/id_rsa.pub | 1 + ansible/roles/bifrost/templates/servers.yml.j2 | 1 + ansible/roles/bifrost/templates/ssh_config | 3 + ansible/roles/ceilometer/defaults/main.yml | 50 + ansible/roles/ceilometer/meta/main.yml | 3 + ansible/roles/ceilometer/tasks/bootstrap.yml | 51 + .../roles/ceilometer/tasks/bootstrap_service.yml | 22 + ansible/roles/ceilometer/tasks/config.yml | 62 ++ ansible/roles/ceilometer/tasks/deploy.yml | 14 + ansible/roles/ceilometer/tasks/do_reconfigure.yml | 84 ++ ansible/roles/ceilometer/tasks/main.yml | 2 + ansible/roles/ceilometer/tasks/pull.yml | 35 + ansible/roles/ceilometer/tasks/reconfigure.yml | 7 + ansible/roles/ceilometer/tasks/register.yml | 40 + ansible/roles/ceilometer/tasks/start.yml | 67 ++ ansible/roles/ceilometer/tasks/upgrade.yml | 6 + .../ceilometer/templates/ceilometer-api.json.j2 | 20 + .../templates/ceilometer-central.json.j2 | 11 + .../templates/ceilometer-collector.json.j2 | 11 + .../templates/ceilometer-compute.json.j2 | 11 + .../templates/ceilometer-notification.json.j2 | 29 + .../roles/ceilometer/templates/ceilometer.conf.j2 | 57 ++ .../ceilometer/templates/event_definitions.yaml.j2 | 553 +++++++++++ .../ceilometer/templates/event_pipeline.yaml.j2 | 13 + .../roles/ceilometer/templates/pipeline.yaml.j2 | 92 ++ .../templates/wsgi-ceilometer-api.conf.j2 | 24 + ansible/roles/ceph/tasks/bootstrap_mons.yml | 6 +- ansible/roles/ceph/tasks/bootstrap_osds.yml | 68 +- ansible/roles/ceph/tasks/config.yml | 3 +- ansible/roles/ceph/tasks/do_reconfigure.yml | 187 ++-- ansible/roles/ceph/tasks/generate_cluster.yml | 4 +- ansible/roles/ceph/tasks/reconfigure.yml | 1 - ansible/roles/ceph/tasks/start_mons.yml | 2 + ansible/roles/ceph/tasks/start_osds.yml | 21 +- ansible/roles/ceph/tasks/start_rgws.yml | 5 +- ansible/roles/ceph/tasks/upgrade.yml | 3 - ansible/roles/ceph/templates/ceph-mon.json.j2 | 12 +- ansible/roles/ceph/templates/ceph-osd.json.j2 | 6 +- ansible/roles/ceph/templates/ceph-rgw.json.j2 | 6 +- ansible/roles/ceph/templates/ceph.conf.j2 | 18 +- ansible/roles/cinder/defaults/main.yml | 27 +- ansible/roles/cinder/meta/main.yml | 2 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 + ansible/roles/cinder/tasks/bootstrap_service.yml | 1 + ansible/roles/cinder/tasks/ceph.yml | 1 + ansible/roles/cinder/tasks/check.yml | 1 - ansible/roles/cinder/tasks/config.yml | 11 +- ansible/roles/cinder/tasks/deploy.yml | 8 +- ansible/roles/cinder/tasks/do_reconfigure.yml | 12 +- ansible/roles/cinder/tasks/external_ceph.yml | 36 + ansible/roles/cinder/tasks/reconfigure.yml | 1 - ansible/roles/cinder/tasks/register.yml | 6 +- ansible/roles/cinder/tasks/start.yml | 34 +- ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/cinder/templates/cinder-api.json.j2 | 12 + .../roles/cinder/templates/cinder-backup.json.j2 | 25 +- .../cinder/templates/cinder-scheduler.json.j2 | 12 + .../roles/cinder/templates/cinder-volume.json.j2 | 24 +- ansible/roles/cinder/templates/cinder.conf.j2 | 62 +- ansible/roles/cloudkitty/defaults/main.yml | 39 + ansible/roles/cloudkitty/meta/main.yml | 3 + ansible/roles/cloudkitty/tasks/bootstrap.yml | 41 + .../roles/cloudkitty/tasks/bootstrap_service.yml | 20 + ansible/roles/cloudkitty/tasks/config.yml | 34 + ansible/roles/cloudkitty/tasks/deploy.yml | 14 + ansible/roles/cloudkitty/tasks/do_reconfigure.yml | 66 ++ ansible/roles/cloudkitty/tasks/main.yml | 2 + ansible/roles/cloudkitty/tasks/pull.yml | 14 + ansible/roles/cloudkitty/tasks/reconfigure.yml | 4 + ansible/roles/cloudkitty/tasks/register.yml | 53 + ansible/roles/cloudkitty/tasks/start.yml | 24 + ansible/roles/cloudkitty/tasks/upgrade.yml | 6 + .../cloudkitty/templates/cloudkitty-api.json.j2 | 11 + .../templates/cloudkitty-processor.json.j2 | 11 + .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 51 + ansible/roles/collectd/defaults/main.yml | 12 + ansible/roles/collectd/meta/main.yml | 3 + ansible/roles/collectd/tasks/config.yml | 23 + ansible/roles/collectd/tasks/deploy.yml | 4 + ansible/roles/collectd/tasks/do_reconfigure.yml | 61 ++ ansible/roles/collectd/tasks/main.yml | 2 + ansible/roles/collectd/tasks/pull.yml | 6 + ansible/roles/collectd/tasks/reconfigure.yml | 3 + ansible/roles/collectd/tasks/start.yml | 15 + ansible/roles/collectd/tasks/upgrade.yml | 4 + ansible/roles/collectd/templates/collectd.json.j2 | 3 + ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/tasks/bootstrap.yml | 18 - ansible/roles/common/tasks/config.yml | 121 +-- ansible/roles/common/tasks/main.yml | 2 + ansible/roles/common/tasks/pull.yml | 8 +- ansible/roles/common/tasks/reconfigure.yml | 1 - ansible/roles/common/tasks/start.yml | 12 +- ansible/roles/common/tasks/upgrade.yml | 5 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 4 +- .../common/templates/cron-logrotate-aodh.conf.j2 | 3 + .../templates/cron-logrotate-barbican.conf.j2 | 3 + .../templates/cron-logrotate-cloudkitty.conf.j2 | 3 + .../templates/cron-logrotate-gnocchi.conf.j2 | 3 + .../common/templates/cron-logrotate-iscsid.conf.j2 | 3 + .../templates/cron-logrotate-keepalived.conf.j2 | 2 +- .../templates/cron-logrotate-keystone.conf.j2 | 2 - .../common/templates/cron-logrotate-sahara.conf.j2 | 3 + .../common/templates/cron-logrotate-senlin.conf.j2 | 3 + .../templates/cron-logrotate-watcher.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 30 +- ansible/roles/common/templates/heka-aodh.toml.j2 | 13 + .../roles/common/templates/heka-barbican.toml.j2 | 13 + .../common/templates/heka-elasticsearch.toml.j2 | 2 +- .../roles/common/templates/heka-gnocchi.toml.j2 | 13 + .../roles/common/templates/heka-haproxy.toml.j2 | 9 +- .../roles/common/templates/heka-horizon.toml.j2 | 13 + .../roles/common/templates/heka-keepalived.toml.j2 | 9 + .../roles/common/templates/heka-keystone.toml.j2 | 3 +- .../roles/common/templates/heka-openstack.toml.j2 | 2 +- ansible/roles/common/templates/heka-swift.toml.j2 | 6 +- ansible/roles/common/templates/heka.json.j2 | 86 +- .../roles/common/templates/kolla-toolbox.json.j2 | 10 + ansible/roles/congress/defaults/main.yml | 39 + ansible/roles/congress/meta/main.yml | 3 + ansible/roles/congress/tasks/bootstrap.yml | 41 + ansible/roles/congress/tasks/bootstrap_service.yml | 20 + ansible/roles/congress/tasks/config.yml | 37 + ansible/roles/congress/tasks/deploy.yml | 16 + ansible/roles/congress/tasks/main.yml | 2 + ansible/roles/congress/tasks/pull.yml | 21 + ansible/roles/congress/tasks/reconfigure.yml | 74 ++ ansible/roles/congress/tasks/register.yml | 40 + ansible/roles/congress/tasks/start.yml | 36 + ansible/roles/congress/tasks/upgrade.yml | 6 + .../roles/congress/templates/congress-api.json.j2 | 18 + .../congress/templates/congress-datasource.json.j2 | 18 + .../templates/congress-policy-engine.json.j2 | 18 + ansible/roles/congress/templates/congress.conf.j2 | 49 + ansible/roles/destroy/defaults/main.yml | 2 + ansible/roles/destroy/tasks/cleanup_containers.yml | 3 + ansible/roles/destroy/tasks/cleanup_host.yml | 12 + ansible/roles/destroy/tasks/cleanup_images.yml | 5 + ansible/roles/destroy/tasks/copy_tools.yml | 31 + ansible/roles/destroy/tasks/main.yml | 8 + .../roles/elasticsearch/tasks/do_reconfigure.yml | 64 ++ ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 + ansible/roles/elasticsearch/tasks/start.yml | 2 + ansible/roles/elasticsearch/tasks/upgrade.yml | 3 + .../elasticsearch/templates/elasticsearch.json.j2 | 12 + .../elasticsearch/templates/elasticsearch.yml.j2 | 11 +- ansible/roles/etcd/defaults/main.yml | 10 + ansible/roles/etcd/meta/main.yml | 3 + ansible/roles/etcd/tasks/bootstrap.yml | 19 + ansible/roles/etcd/tasks/config.yml | 15 + ansible/roles/etcd/tasks/deploy.yml | 6 + ansible/roles/etcd/tasks/do_reconfigure.yml | 64 ++ ansible/roles/etcd/tasks/main.yml | 2 + ansible/roles/etcd/tasks/pull.yml | 6 + ansible/roles/etcd/tasks/reconfigure.yml | 3 + ansible/roles/etcd/tasks/start.yml | 24 + ansible/roles/etcd/tasks/upgrade.yml | 4 + ansible/roles/etcd/templates/etcd.json.j2 | 3 + ansible/roles/glance/defaults/main.yml | 6 +- ansible/roles/glance/meta/main.yml | 2 +- ansible/roles/glance/tasks/bootstrap.yml | 3 +- ansible/roles/glance/tasks/bootstrap_service.yml | 2 + ansible/roles/glance/tasks/check.yml | 1 - ansible/roles/glance/tasks/config.yml | 54 +- ansible/roles/glance/tasks/deploy.yml | 12 +- ansible/roles/glance/tasks/do_reconfigure.yml | 32 +- ansible/roles/glance/tasks/external_ceph.yml | 13 + ansible/roles/glance/tasks/reconfigure.yml | 1 - ansible/roles/glance/tasks/start.yml | 2 + ansible/roles/glance/tasks/upgrade.yml | 1 - ansible/roles/glance/templates/glance-api.conf.j2 | 34 +- ansible/roles/glance/templates/glance-api.json.j2 | 26 +- .../roles/glance/templates/glance-registry.conf.j2 | 26 +- .../roles/glance/templates/glance-registry.json.j2 | 7 + ansible/roles/gnocchi/defaults/main.yml | 52 + ansible/roles/gnocchi/meta/main.yml | 3 + ansible/roles/gnocchi/tasks/bootstrap.yml | 41 + ansible/roles/gnocchi/tasks/bootstrap_service.yml | 21 + ansible/roles/gnocchi/tasks/ceph.yml | 45 + ansible/roles/gnocchi/tasks/config.yml | 52 + ansible/roles/gnocchi/tasks/deploy.yml | 26 + ansible/roles/gnocchi/tasks/do_reconfigure.yml | 74 ++ ansible/roles/gnocchi/tasks/external_ceph.yml | 30 + ansible/roles/gnocchi/tasks/main.yml | 2 + ansible/roles/gnocchi/tasks/pull.yml | 21 + ansible/roles/gnocchi/tasks/reconfigure.yml | 5 + ansible/roles/gnocchi/tasks/register.yml | 40 + ansible/roles/gnocchi/tasks/start.yml | 39 + ansible/roles/gnocchi/tasks/upgrade.yml | 6 + ansible/roles/gnocchi/templates/api-paste.ini.j2 | 38 + .../roles/gnocchi/templates/gnocchi-api.json.j2 | 49 + .../gnocchi/templates/gnocchi-metricd.json.j2 | 38 + .../roles/gnocchi/templates/gnocchi-statsd.json.j2 | 38 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 56 ++ .../roles/gnocchi/templates/wsgi-gnocchi.conf.j2 | 17 + ansible/roles/grafana/defaults/main.yml | 16 + ansible/roles/grafana/meta/main.yml | 3 + ansible/roles/grafana/tasks/bootstrap.yml | 38 + ansible/roles/grafana/tasks/config.yml | 27 + ansible/roles/grafana/tasks/deploy.yml | 9 + ansible/roles/grafana/tasks/do_reconfigure.yml | 47 + ansible/roles/grafana/tasks/main.yml | 2 + ansible/roles/grafana/tasks/pull.yml | 7 + ansible/roles/grafana/tasks/reconfigure.yml | 3 + ansible/roles/grafana/tasks/start.yml | 13 + ansible/roles/grafana/tasks/upgrade.yml | 4 + ansible/roles/grafana/templates/grafana.ini.j2 | 39 + ansible/roles/grafana/templates/grafana.json.j2 | 23 + ansible/roles/haproxy/tasks/config.yml | 20 +- ansible/roles/haproxy/tasks/do_reconfigure.yml | 74 ++ ansible/roles/haproxy/tasks/main.yml | 1 + ansible/roles/haproxy/tasks/reconfigure.yml | 2 + ansible/roles/haproxy/tasks/start.yml | 4 +- ansible/roles/haproxy/templates/haproxy.cfg.j2 | 268 +++++- ansible/roles/haproxy/templates/haproxy.json.j2 | 4 +- ansible/roles/haproxy/templates/keepalived.conf.j2 | 33 +- ansible/roles/heat/defaults/main.yml | 4 +- ansible/roles/heat/tasks/bootstrap.yml | 3 +- ansible/roles/heat/tasks/bootstrap_service.yml | 2 + ansible/roles/heat/tasks/config.yml | 18 +- ansible/roles/heat/tasks/do_reconfigure.yml | 12 +- ansible/roles/heat/tasks/reconfigure.yml | 1 - ansible/roles/heat/tasks/register.yml | 42 +- ansible/roles/heat/tasks/start.yml | 3 + ansible/roles/heat/tasks/upgrade.yml | 1 - ansible/roles/heat/templates/_deprecated.yaml | 4 + ansible/roles/heat/templates/heat-api-cfn.json.j2 | 7 + ansible/roles/heat/templates/heat-api.json.j2 | 9 +- ansible/roles/heat/templates/heat-engine.json.j2 | 13 + ansible/roles/heat/templates/heat.conf.j2 | 43 +- ansible/roles/horizon/defaults/main.yml | 19 + ansible/roles/horizon/tasks/bootstrap.yml | 41 + ansible/roles/horizon/tasks/bootstrap_service.yml | 19 + ansible/roles/horizon/tasks/config.yml | 17 +- ansible/roles/horizon/tasks/deploy.yml | 5 + ansible/roles/horizon/tasks/do_reconfigure.yml | 8 +- ansible/roles/horizon/tasks/reconfigure.yml | 1 - ansible/roles/horizon/tasks/register.yml | 13 + ansible/roles/horizon/tasks/start.yml | 5 +- ansible/roles/horizon/tasks/upgrade.yml | 1 - ansible/roles/horizon/templates/horizon.conf.j2 | 53 +- ansible/roles/horizon/templates/local_settings.j2 | 292 ++++-- ansible/roles/influxdb/defaults/main.yml | 9 + ansible/roles/influxdb/meta/main.yml | 3 + ansible/roles/influxdb/tasks/config.yml | 23 + ansible/roles/influxdb/tasks/deploy.yml | 4 + ansible/roles/influxdb/tasks/do_reconfigure.yml | 47 + ansible/roles/influxdb/tasks/main.yml | 2 + ansible/roles/influxdb/tasks/pull.yml | 7 + ansible/roles/influxdb/tasks/reconfigure.yml | 3 + ansible/roles/influxdb/tasks/start.yml | 13 + ansible/roles/influxdb/tasks/upgrade.yml | 4 + ansible/roles/influxdb/templates/influxdb.conf.j2 | 57 ++ ansible/roles/influxdb/templates/influxdb.json.j2 | 23 + ansible/roles/ironic/defaults/main.yml | 2 +- ansible/roles/ironic/tasks/bootstrap.yml | 5 +- ansible/roles/ironic/tasks/bootstrap_service.yml | 5 +- ansible/roles/ironic/tasks/config.yml | 11 +- ansible/roles/ironic/tasks/do_reconfigure.yml | 12 +- ansible/roles/ironic/tasks/reconfigure.yml | 1 - ansible/roles/ironic/tasks/start.yml | 17 +- ansible/roles/ironic/tasks/upgrade.yml | 1 - ansible/roles/ironic/templates/ironic-api.json.j2 | 7 + .../ironic/templates/ironic-conductor.json.j2 | 17 + .../ironic/templates/ironic-inspector.json.j2 | 6 +- ansible/roles/ironic/templates/ironic.conf.j2 | 20 +- ansible/roles/iscsi/defaults/main.yml | 13 + ansible/roles/iscsi/meta/main.yml | 3 + ansible/roles/iscsi/tasks/config.yml | 36 + ansible/roles/iscsi/tasks/deploy.yml | 4 + ansible/roles/iscsi/tasks/main.yml | 2 + ansible/roles/iscsi/tasks/pull.yml | 14 + ansible/roles/iscsi/tasks/reconfigure.yml | 1 + ansible/roles/iscsi/tasks/start.yml | 45 + ansible/roles/iscsi/tasks/upgrade.yml | 4 + ansible/roles/iscsi/templates/iscsid.json.j2 | 4 + ansible/roles/iscsi/templates/tgtd.json.j2 | 4 + ansible/roles/keystone/defaults/main.yml | 23 +- .../keystone/files/fernet_rotate_cron_generator.py | 107 ++ ansible/roles/keystone/tasks/bootstrap.yml | 4 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/check.yml | 3 +- ansible/roles/keystone/tasks/config.yml | 91 +- ansible/roles/keystone/tasks/deploy.yml | 5 + ansible/roles/keystone/tasks/do_reconfigure.yml | 35 +- ansible/roles/keystone/tasks/init_fernet.yml | 15 + ansible/roles/keystone/tasks/pull.yml | 18 + ansible/roles/keystone/tasks/reconfigure.yml | 1 - ansible/roles/keystone/tasks/register.yml | 2 +- ansible/roles/keystone/tasks/start.yml | 42 +- ansible/roles/keystone/tasks/upgrade.yml | 1 - ansible/roles/keystone/templates/crontab.j2 | 3 + .../keystone/templates/fernet-node-sync.sh.j2 | 16 + .../roles/keystone/templates/fernet-rotate.sh.j2 | 9 + ansible/roles/keystone/templates/id_rsa | 1 + ansible/roles/keystone/templates/id_rsa.pub | 1 + .../keystone/templates/keystone-fernet.json.j2 | 41 + .../roles/keystone/templates/keystone-paste.ini.j2 | 83 ++ .../roles/keystone/templates/keystone-ssh.json.j2 | 17 + ansible/roles/keystone/templates/keystone.conf.j2 | 40 + ansible/roles/keystone/templates/keystone.json.j2 | 30 + ansible/roles/keystone/templates/ssh_config.j2 | 4 + ansible/roles/keystone/templates/sshd_config.j2 | 5 + .../roles/keystone/templates/wsgi-keystone.conf.j2 | 14 +- ansible/roles/kibana/tasks/pull.yml | 1 + ansible/roles/kibana/tasks/start.yml | 1 + ansible/roles/kibana/tasks/upgrade.yml | 3 + ansible/roles/kibana/templates/kibana.yml.j2 | 4 +- ansible/roles/kuryr/defaults/main.yml | 20 + ansible/roles/kuryr/tasks/bootstrap.yml | 19 + ansible/roles/kuryr/tasks/config.yml | 25 + ansible/roles/kuryr/tasks/deploy.yml | 8 + ansible/roles/kuryr/tasks/main.yml | 2 + ansible/roles/kuryr/tasks/pull.yml | 6 + ansible/roles/kuryr/tasks/register.yml | 17 + ansible/roles/kuryr/tasks/start.yml | 19 + ansible/roles/kuryr/tasks/upgrade.yml | 4 + ansible/roles/kuryr/templates/kuryr.conf.j2 | 17 + ansible/roles/kuryr/templates/kuryr.json.j2 | 17 + ansible/roles/kuryr/templates/kuryr.spec.j2 | 1 + ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 + ansible/roles/magnum/tasks/bootstrap_service.yml | 1 + ansible/roles/magnum/tasks/config.yml | 11 +- ansible/roles/magnum/tasks/do_reconfigure.yml | 12 +- ansible/roles/magnum/tasks/reconfigure.yml | 1 - ansible/roles/magnum/tasks/register.yml | 50 +- ansible/roles/magnum/tasks/start.yml | 3 + ansible/roles/magnum/tasks/upgrade.yml | 1 - ansible/roles/magnum/templates/magnum-api.json.j2 | 7 + .../magnum/templates/magnum-conductor.json.j2 | 12 + ansible/roles/magnum/templates/magnum.conf.j2 | 50 +- ansible/roles/manila/defaults/main.yml | 6 +- ansible/roles/manila/tasks/bootstrap.yml | 2 + ansible/roles/manila/tasks/bootstrap_service.yml | 1 + ansible/roles/manila/tasks/config.yml | 28 +- ansible/roles/manila/tasks/do_reconfigure.yml | 12 +- ansible/roles/manila/tasks/reconfigure.yml | 1 - ansible/roles/manila/tasks/start.yml | 5 +- ansible/roles/manila/tasks/upgrade.yml | 1 - ansible/roles/manila/templates/manila-api.json.j2 | 7 + .../manila/templates/manila-scheduler.json.j2 | 7 + .../roles/manila/templates/manila-share.conf.j2 | 76 ++ .../roles/manila/templates/manila-share.json.j2 | 7 + ansible/roles/manila/templates/manila.conf.j2 | 77 +- ansible/roles/mariadb/tasks/bootstrap_cluster.yml | 34 +- ansible/roles/mariadb/tasks/check.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 10 +- ansible/roles/mariadb/tasks/do_reconfigure.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 4 +- ansible/roles/mariadb/tasks/reconfigure.yml | 1 - ansible/roles/mariadb/tasks/recover_cluster.yml | 57 +- ansible/roles/mariadb/tasks/start.yml | 26 +- ansible/roles/mariadb/tasks/upgrade.yml | 3 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 28 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 18 + ansible/roles/mariadb/templates/wsrep-notify.sh.j2 | 75 ++ ansible/roles/memcached/tasks/do_reconfigure.yml | 8 +- ansible/roles/memcached/tasks/reconfigure.yml | 1 - ansible/roles/memcached/tasks/start.yml | 4 +- ansible/roles/memcached/tasks/upgrade.yml | 1 - .../roles/memcached/templates/memcached.json.j2 | 2 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/bootstrap.yml | 3 +- ansible/roles/mistral/tasks/bootstrap_service.yml | 1 + ansible/roles/mistral/tasks/config.yml | 11 +- ansible/roles/mistral/tasks/do_reconfigure.yml | 12 +- ansible/roles/mistral/tasks/pull.yml | 2 +- ansible/roles/mistral/tasks/reconfigure.yml | 1 - ansible/roles/mistral/tasks/register.yml | 4 +- ansible/roles/mistral/tasks/start.yml | 3 + ansible/roles/mistral/tasks/upgrade.yml | 1 - .../roles/mistral/templates/mistral-api.json.j2 | 7 + .../roles/mistral/templates/mistral-engine.json.j2 | 7 + .../mistral/templates/mistral-executor.json.j2 | 7 + ansible/roles/mistral/templates/mistral.conf.j2 | 23 +- ansible/roles/mongodb/defaults/main.yml | 2 + ansible/roles/mongodb/tasks/bootstrap.yml | 1 + ansible/roles/mongodb/tasks/bootstrap_cluster.yml | 17 + ansible/roles/mongodb/tasks/config.yml | 1 - ansible/roles/mongodb/tasks/do_reconfigure.yml | 8 +- ansible/roles/mongodb/tasks/reconfigure.yml | 1 - ansible/roles/mongodb/tasks/start.yml | 14 + .../mongodb/templates/bootstrap_cluster.js.j2 | 14 + ansible/roles/mongodb/templates/mongodb.conf.j2 | 26 +- ansible/roles/mongodb/templates/mongodb.json.j2 | 12 + ansible/roles/multipathd/defaults/main.yml | 9 + ansible/roles/multipathd/tasks/config.yml | 24 + ansible/roles/multipathd/tasks/deploy.yml | 4 + ansible/roles/multipathd/tasks/main.yml | 2 + ansible/roles/multipathd/tasks/pull.yml | 7 + ansible/roles/multipathd/tasks/reconfigure.yml | 1 + ansible/roles/multipathd/tasks/start.yml | 21 + ansible/roles/multipathd/tasks/upgrade.yml | 4 + .../roles/multipathd/templates/multipath.conf.j2 | 11 + .../roles/multipathd/templates/multipathd.json.j2 | 11 + ansible/roles/murano/defaults/main.yml | 2 +- ansible/roles/murano/tasks/bootstrap.yml | 3 +- ansible/roles/murano/tasks/bootstrap_service.yml | 1 + ansible/roles/murano/tasks/config.yml | 11 +- ansible/roles/murano/tasks/do_reconfigure.yml | 12 +- ansible/roles/murano/tasks/reconfigure.yml | 1 - ansible/roles/murano/tasks/register.yml | 2 +- ansible/roles/murano/tasks/start.yml | 41 + ansible/roles/murano/tasks/upgrade.yml | 3 +- ansible/roles/murano/templates/murano-api.json.j2 | 7 + .../roles/murano/templates/murano-engine.json.j2 | 7 + ansible/roles/murano/templates/murano.conf.j2 | 34 +- ansible/roles/neutron/defaults/main.yml | 18 +- ansible/roles/neutron/tasks/bootstrap.yml | 2 + ansible/roles/neutron/tasks/bootstrap_service.yml | 47 + .../roles/neutron/tasks/config-neutron-fake.yml | 18 +- ansible/roles/neutron/tasks/config.yml | 79 +- ansible/roles/neutron/tasks/deploy.yml | 10 +- ansible/roles/neutron/tasks/do_reconfigure.yml | 206 ++-- ansible/roles/neutron/tasks/pull.yml | 20 +- ansible/roles/neutron/tasks/reconfigure.yml | 7 +- ansible/roles/neutron/tasks/start.yml | 153 ++- ansible/roles/neutron/tasks/upgrade.yml | 5 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/dnsmasq.conf.j2 | 1 - ansible/roles/neutron/templates/l3_agent.ini.j2 | 10 +- ansible/roles/neutron/templates/lbaas_agent.ini.j2 | 6 + .../roles/neutron/templates/metadata_agent.ini.j2 | 3 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 11 +- .../neutron/templates/neutron-dhcp-agent.json.j2 | 14 +- .../neutron/templates/neutron-l3-agent.json.j2 | 12 + .../neutron/templates/neutron-lbaas-agent.json.j2 | 35 + .../templates/neutron-linuxbridge-agent.json.j2 | 7 + .../templates/neutron-metadata-agent.json.j2 | 12 + .../templates/neutron-openvswitch-agent.json.j2 | 7 + .../roles/neutron/templates/neutron-server.json.j2 | 21 +- .../neutron/templates/neutron-vpnaas-agent.json.j2 | 47 + ansible/roles/neutron/templates/neutron.conf.j2 | 54 +- .../roles/neutron/templates/neutron_lbaas.conf.j2 | 4 + .../roles/neutron/templates/neutron_vpnaas.conf.j2 | 4 + .../templates/openvswitch-db-server.json.j2 | 2 +- .../neutron/templates/openvswitch-vswitchd.json.j2 | 2 +- .../roles/neutron/templates/vpnaas_agent.ini.j2 | 11 + ansible/roles/nova/defaults/main.yml | 20 +- ansible/roles/nova/meta/main.yml | 2 +- ansible/roles/nova/tasks/bootstrap.yml | 4 + ansible/roles/nova/tasks/bootstrap_service.yml | 33 +- ansible/roles/nova/tasks/ceph.yml | 2 +- ansible/roles/nova/tasks/config-nova-fake.yml | 11 +- ansible/roles/nova/tasks/config.yml | 32 +- ansible/roles/nova/tasks/deploy.yml | 7 +- ansible/roles/nova/tasks/do_reconfigure.yml | 61 +- ansible/roles/nova/tasks/external-ceph.yml | 49 + ansible/roles/nova/tasks/pull.yml | 8 +- ansible/roles/nova/tasks/reconfigure.yml | 1 - ansible/roles/nova/tasks/register.yml | 15 +- ansible/roles/nova/tasks/reload.yml | 12 - ansible/roles/nova/tasks/start_compute.yml | 55 +- ansible/roles/nova/tasks/start_conductors.yml | 1 + ansible/roles/nova/tasks/start_controllers.yml | 5 + ansible/roles/nova/tasks/upgrade.yml | 5 +- ansible/roles/nova/templates/id_rsa | 1 + ansible/roles/nova/templates/id_rsa.pub | 1 + ansible/roles/nova/templates/libvirtd.conf.j2 | 4 +- ansible/roles/nova/templates/nova-api.json.j2 | 7 + .../nova/templates/nova-compute-ironic.json.j2 | 8 +- ansible/roles/nova/templates/nova-compute.json.j2 | 24 +- .../roles/nova/templates/nova-conductor.json.j2 | 7 + .../roles/nova/templates/nova-consoleauth.json.j2 | 7 + ansible/roles/nova/templates/nova-libvirt.json.j2 | 8 +- .../roles/nova/templates/nova-novncproxy.json.j2 | 7 + .../roles/nova/templates/nova-scheduler.json.j2 | 7 + .../nova/templates/nova-spicehtml5proxy.json.j2 | 7 + ansible/roles/nova/templates/nova-ssh.json.j2 | 29 + ansible/roles/nova/templates/nova.conf.j2 | 128 ++- ansible/roles/nova/templates/qemu.conf.j2 | 1 + ansible/roles/nova/templates/ssh_config.j2 | 4 + ansible/roles/nova/templates/sshd_config.j2 | 5 + ansible/roles/prechecks/tasks/package_checks.yml | 7 +- ansible/roles/prechecks/tasks/port_checks.yml | 208 +++- ansible/roles/prechecks/tasks/service_checks.yml | 51 +- ansible/roles/prechecks/vars/main.yml | 3 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/bootstrap.yml | 1 + ansible/roles/rabbitmq/tasks/config.yml | 5 +- ansible/roles/rabbitmq/tasks/do_reconfigure.yml | 8 +- ansible/roles/rabbitmq/tasks/main.yml | 1 + ansible/roles/rabbitmq/tasks/reconfigure.yml | 1 - ansible/roles/rabbitmq/tasks/start.yml | 1 + ansible/roles/rabbitmq/tasks/upgrade.yml | 36 + .../roles/rabbitmq/templates/definitions.json.j2 | 14 + .../templates/rabbitmq-clusterer.config.j2 | 11 + .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 19 +- .../roles/rabbitmq/templates/rabbitmq.config.j2 | 19 +- ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 22 +- .../templates/rabbitmq_clusterer.config.j2 | 9 - ansible/roles/rally/defaults/main.yml | 18 + ansible/roles/rally/meta/main.yml | 3 + ansible/roles/rally/tasks/bootstrap.yml | 41 + ansible/roles/rally/tasks/bootstrap_service.yml | 20 + ansible/roles/rally/tasks/config.yml | 26 + ansible/roles/rally/tasks/deploy.yml | 4 + ansible/roles/rally/tasks/do_reconfigure.yml | 64 ++ ansible/roles/rally/tasks/main.yml | 2 + ansible/roles/rally/tasks/pull.yml | 6 + ansible/roles/rally/tasks/reconfigure.yml | 2 + ansible/roles/rally/tasks/start.yml | 11 + ansible/roles/rally/tasks/upgrade.yml | 6 + ansible/roles/rally/templates/rally.conf.j2 | 9 + ansible/roles/rally/templates/rally.json.j2 | 18 + ansible/roles/sahara/defaults/main.yml | 36 + ansible/roles/sahara/meta/main.yml | 3 + ansible/roles/sahara/tasks/bootstrap.yml | 41 + ansible/roles/sahara/tasks/bootstrap_service.yml | 21 + ansible/roles/sahara/tasks/config.yml | 34 + ansible/roles/sahara/tasks/deploy.yml | 14 + ansible/roles/sahara/tasks/do_reconfigure.yml | 69 ++ ansible/roles/sahara/tasks/main.yml | 2 + ansible/roles/sahara/tasks/pull.yml | 14 + ansible/roles/sahara/tasks/reconfigure.yml | 4 + ansible/roles/sahara/tasks/register.yml | 40 + ansible/roles/sahara/tasks/start.yml | 26 + ansible/roles/sahara/tasks/upgrade.yml | 6 + ansible/roles/sahara/templates/sahara-api.json.j2 | 23 + .../roles/sahara/templates/sahara-engine.json.j2 | 23 + ansible/roles/sahara/templates/sahara.conf.j2 | 47 + ansible/roles/senlin/defaults/main.yml | 35 + ansible/roles/senlin/meta/main.yml | 3 + ansible/roles/senlin/tasks/bootstrap.yml | 41 + ansible/roles/senlin/tasks/bootstrap_service.yml | 20 + ansible/roles/senlin/tasks/config.yml | 34 + ansible/roles/senlin/tasks/deploy.yml | 14 + ansible/roles/senlin/tasks/do_reconfigure.yml | 66 ++ ansible/roles/senlin/tasks/main.yml | 2 + ansible/roles/senlin/tasks/pull.yml | 14 + ansible/roles/senlin/tasks/reconfigure.yml | 4 + ansible/roles/senlin/tasks/register.yml | 40 + ansible/roles/senlin/tasks/start.yml | 24 + ansible/roles/senlin/tasks/upgrade.yml | 6 + ansible/roles/senlin/templates/senlin-api.json.j2 | 18 + .../roles/senlin/templates/senlin-engine.json.j2 | 18 + ansible/roles/senlin/templates/senlin.conf.j2 | 41 + ansible/roles/swift/defaults/main.yml | 10 +- ansible/roles/swift/tasks/config.yml | 35 +- ansible/roles/swift/tasks/do_reconfigure.yml | 12 +- ansible/roles/swift/tasks/reconfigure.yml | 1 - ansible/roles/swift/tasks/start.yml | 21 +- ansible/roles/swift/tasks/upgrade.yml | 1 - ansible/roles/swift/templates/account.conf.j2 | 1 + ansible/roles/swift/templates/container.conf.j2 | 1 + ansible/roles/swift/templates/object.conf.j2 | 1 + ansible/roles/swift/templates/proxy-server.conf.j2 | 5 + ansible/roles/swift/templates/swift-rsyncd.json.j2 | 2 +- ansible/roles/telegraf/defaults/main.yml | 18 + ansible/roles/telegraf/meta/main.yml | 3 + ansible/roles/telegraf/tasks/config.yml | 26 + ansible/roles/telegraf/tasks/deploy.yml | 4 + ansible/roles/telegraf/tasks/do_reconfigure.yml | 42 + ansible/roles/telegraf/tasks/main.yml | 2 + ansible/roles/telegraf/tasks/pull.yml | 6 + ansible/roles/telegraf/tasks/reconfigure.yml | 2 + ansible/roles/telegraf/tasks/start.yml | 19 + ansible/roles/telegraf/tasks/upgrade.yml | 4 + ansible/roles/telegraf/templates/telegraf.conf.j2 | 55 ++ ansible/roles/telegraf/templates/telegraf.json.j2 | 24 + ansible/roles/tempest/defaults/main.yml | 23 + ansible/roles/tempest/meta/main.yml | 3 + ansible/roles/tempest/tasks/config.yml | 26 + ansible/roles/tempest/tasks/deploy.yml | 4 + ansible/roles/tempest/tasks/do_reconfigure.yml | 64 ++ ansible/roles/tempest/tasks/main.yml | 2 + ansible/roles/tempest/tasks/pull.yml | 6 + ansible/roles/tempest/tasks/reconfigure.yml | 2 + ansible/roles/tempest/tasks/start.yml | 11 + ansible/roles/tempest/tasks/upgrade.yml | 4 + ansible/roles/tempest/templates/tempest.conf.j2 | 73 ++ ansible/roles/tempest/templates/tempest.json.j2 | 11 + ansible/roles/vmtp/defaults/main.yml | 25 + ansible/roles/vmtp/meta/main.yml | 3 + ansible/roles/vmtp/tasks/config.yml | 26 + ansible/roles/vmtp/tasks/deploy.yml | 6 + ansible/roles/vmtp/tasks/do_reconfigure.yml | 58 ++ ansible/roles/vmtp/tasks/main.yml | 2 + ansible/roles/vmtp/tasks/pull.yml | 7 + ansible/roles/vmtp/tasks/reconfigure.yml | 3 + ansible/roles/vmtp/tasks/start.yml | 11 + ansible/roles/vmtp/tasks/upgrade.yml | 4 + ansible/roles/vmtp/templates/cfg.default.yaml.j2 | 41 + ansible/roles/watcher/defaults/main.yml | 38 + ansible/roles/watcher/meta/main.yml | 3 + ansible/roles/watcher/tasks/bootstrap.yml | 41 + ansible/roles/watcher/tasks/bootstrap_service.yml | 20 + ansible/roles/watcher/tasks/config.yml | 37 + ansible/roles/watcher/tasks/deploy.yml | 16 + ansible/roles/watcher/tasks/do_reconfigure.yml | 71 ++ ansible/roles/watcher/tasks/main.yml | 2 + ansible/roles/watcher/tasks/pull.yml | 21 + ansible/roles/watcher/tasks/reconfigure.yml | 5 + ansible/roles/watcher/tasks/register.yml | 40 + ansible/roles/watcher/tasks/start.yml | 36 + ansible/roles/watcher/tasks/upgrade.yml | 6 + .../roles/watcher/templates/watcher-api.json.j2 | 18 + .../watcher/templates/watcher-applier.json.j2 | 18 + .../roles/watcher/templates/watcher-engine.json.j2 | 18 + ansible/roles/watcher/templates/watcher.conf.j2 | 43 + ansible/site.yml | 252 ++++- bindep.txt | 8 + dev/heat/get-image.sh | 41 - dev/heat/kollacluster.yaml | 120 --- dev/heat/kollanode.yaml | 251 ----- dev/heat/local.yaml.example | 5 - dev/vagrant/Vagrantfile | 56 +- dev/vagrant/Vagrantfile.custom.example | 6 + dev/vagrant/bootstrap.sh | 51 +- dev/vagrant/newest_dhcp_lease.py | 7 +- .../barbican-keystone-listener/Dockerfile.j2 | 22 + .../ceilometer/ceilometer-base/ceilometer_sudoers | 1 + .../ceilometer/ceilometer-collector/Dockerfile.j2 | 18 +- .../ceilometer-notification/Dockerfile.j2 | 18 +- .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 19 + .../congress/congress-policy-engine/Dockerfile.j2 | 10 + .../designate-backend-bind9/Dockerfile.j2 | 17 +- .../designate/designate-pool-manager/Dockerfile.j2 | 28 + .../designate/designate-poolmanager/Dockerfile.j2 | 25 - .../plugins/decoders/os_horizon_apache_log.lua | 72 ++ .../keystone-fernet/fetch_fernet_tokens.py | 84 ++ .../keystone/keystone-fernet/keystone_bootstrap.sh | 43 + .../neutron-linuxbridge-agent/Dockerfile.j2 | 35 +- .../neutron/neutron-metadata-agent/Dockerfile.j2 | 14 +- .../neutron/neutron-metering-agent/Dockerfile.j2 | 25 + .../neutron-openvswitch-agent/Dockerfile.j2 | 26 +- .../neutron/neutron-vpnaas-agent/extend_start.sh | 8 + .../openvswitch/openvswitch-base/extend_start.sh | 10 + .../openvswitch-db-server/Dockerfile.j2 | 11 +- .../openvswitch-db-server/start_ovsdb_server.sh | 30 + .../openvswitch/openvswitch-vswitchd/Dockerfile.j2 | 8 +- etc/kolla/globals.yml | 181 +++- etc/kolla/passwords.yml | 155 ++- kolla/cmd/build.py | 720 +------------- kolla/cmd/genpwd.py | 87 ++ kolla/common/config.py | 213 ++-- kolla/common/task.py | 42 + kolla/hacking/checks.py | 14 + kolla/image/__init__.py | 0 kolla/image/build.py | 1017 ++++++++++++++++++++ kolla/template/__init__.py | 0 kolla/template/filters.py | 29 + kolla/template/methods.py | 63 ++ loc | 2 - releasenotes/notes/add-aodh-a5de8a339f25c1a2.yaml | 3 + .../notes/add-barbican-8f0636668001de73.yaml | 4 + .../notes/add-ceilometer-a4759f21564de7eb.yaml | 3 + ...ceph-disk-init-protection-5b38ce8f1502ff69.yaml | 20 + .../add-cinder-vg-check-c70d9f79d8cfd09b.yaml | 4 + .../notes/add-cloudkitty-10eb09a96de60144.yaml | 3 + .../notes/add-collectd-6e3387dfff75040a.yaml | 3 + .../notes/add-congress-877644b4b0e2ed0a.yaml | 5 + ...-init-manage-root-process-e25a529b322d4fac.yaml | 3 + .../notes/add-fernet-support-54ccb88b901d8d8b.yaml | 3 + .../notes/add-gnocchi-94296c3ed6e979a8.yaml | 3 + .../notes/add-header-blocks-9ac76254e5f5ab20.yaml | 3 + .../notes/add-multipath-9ee29be1fcea6d94.yaml | 3 + ...-mysql-ceilometer-backend-9ffdc4c0495fb801.yaml | 3 + ...-network-interface-checks-0e789f3f93cbdb09.yaml | 3 + .../notes/add-networking-sfc-62ae433ed7aa4e33.yaml | 5 + .../notes/add-neutron-dvr-f1b3541e22c0fbc3.yaml | 4 + .../notes/add-neutron-lbaas-dbb92dada9d34ceb.yaml | 3 + .../notes/add-neutron-vpnaas-88e0780326100e36.yaml | 3 + releasenotes/notes/add-py35-f0ddb519029f5ee3.yaml | 8 + releasenotes/notes/add-rally-c6d1468accfb1da6.yaml | 3 + releasenotes/notes/add-reno-f5e9ff4d9ccfa785.yaml | 3 + .../notes/add-sahara-f2be7bf79935792e.yaml | 3 + releasenotes/notes/add-vmtp-7d6aef3125a38dbe.yaml | 3 + .../notes/add-watcher-a97995ace827cf71.yaml | 6 + .../notes/ansible-tempest-44edbca4436f3c19.yaml | 3 + releasenotes/notes/bifrost-f080de99005ad38e.yaml | 17 + .../bp-support-network-ha-1a771d735a268219.yaml | 5 + .../notes/cadf-notifications-6c102c16090688d5.yaml | 6 + .../notes/ceph-jewel-33caab815946cb4c.yaml | 5 + .../notes/cloudkitty-docker-fb6b3d7e006a0697.yaml | 4 + ...igurable-horizon-sessions-1dd22eae714a7001.yaml | 4 + .../notes/congress-broken-cbf8ca59d90a85cb.yaml | 3 + .../notes/deprecate-fedora-97f8f963a410eb44.yaml | 6 + .../deprecate-nova-network-76e5c7b61a3add5b.yaml | 5 + ...include-header-and-footer-71f16045920b0100.yaml | 5 + ...dockerfile-customizations-26981ebefe3b710b.yaml | 10 + ...g-reducing-disk-footprint-2a6b0056d57bd1de.yaml | 5 + .../enable-nova-microversion-b445f22548b41c2a.yaml | 3 + .../etcd-docker-ansible-51baaa1322a0c5a8.yaml | 3 + .../notes/etcd-dockerfile-69b8bfc1df4bb2ab.yaml | 3 + ...fix-cinder-endpoints-urls-22746b1524accbbf.yaml | 3 + .../notes/heka-deprecation-d53e757470b3f7b4.yaml | 3 + ...ngo-replicate-set-cluster-0d3f140f7116c3ba.yaml | 3 + ...mport-murano-core-library-86f00abaa21cfb94.yaml | 4 + ...egrate-gnocchi-cloudkitty-4b2fcfe8ce9d520e.yaml | 3 + ...tegrate-gnocchi-with-ceph-a6d5f81f4d8b0391.yaml | 3 + .../notes/kibana-4-6-7765f556efba2724.yaml | 3 + .../notes/kolla-host-584270e3aee6dfd6.yaml | 29 + .../notes/kuryr-libnetwork-1e6ab1916a8a0d10.yaml | 3 + ...al-fix-wrong-service-type-72ff772fc7cf0b82.yaml | 5 + .../notes/monitoring-ad566513454614db.yaml | 7 + ...ultiple-physical-networks-f2de7444f7e2d145.yaml | 5 + ...e-monitoring-experimental-f9ceaacd4d5cb71a.yaml | 7 + .../notes/pin-distro-version-4d835846a1ab5283.yaml | 6 + .../notes/rabbit-3.6.2-accdb2d3ecd493cc.yaml | 3 + .../notes/senlin-container-e1ae6aa932097e51.yaml | 3 + ...port-ceilometer-in-cinder-4386a3e5d134d84f.yaml | 4 + ...sk-size-as-weight-in-ceph-9d6353f1d3f03199.yaml | 11 + .../notes/support-ldap-e678ce5b0a7eaedb.yaml | 4 + .../upgade-to-ubuntu-xenial-93e68d2330e9bd84.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 251 +++++ releasenotes/source/index.rst | 19 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 11 +- setup.cfg | 18 +- specs/ansible-multi.rst | 2 +- specs/high-availability.rst | 2 +- specs/kubernetes-deployment.rst | 352 +++++++ specs/mesos-deployment.rst | 188 ---- test-requirements.txt | 30 +- tools/cleanup-containers | 55 +- tools/cleanup-host | 37 + tools/cleanup-images | 8 +- tools/deploy_aio.sh | 70 +- tools/diag | 29 + tools/generate_passwords.py | 1 + tools/init-runonce | 39 +- tools/kolla-ansible | 105 +- tools/pre-commit-hook | 4 +- tools/setup_Debian.sh | 44 +- tools/setup_RedHat.sh | 36 +- tools/setup_gate.sh | 72 +- tools/setup_nodes.yml | 7 + tools/validate-all-dockerfiles.sh | 11 + tools/validate-all-json.sh | 1 - tools/validate-all-maintainer.sh | 7 - tools/validate-all-yaml.sh | 1 - tools/validate-install-command.sh | 12 + tools/validate-maintainer.sh | 1 - tools/validate-yaml.py | 2 +- tools/version-check.py | 161 ++++ tools/version_check.py | 129 --- tox.ini | 73 +- 1126 files changed, 25483 insertions(+), 6271 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7995bf1..0b5a62d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr>=1.6 # Apache-2.0 -docker-py>=1.6.0 # Apache-2.0 +docker-py<1.8.0,>=1.6.0 # Apache-2.0 @@ -10,4 +10,5 @@ six>=1.9.0 # MIT -oslo.config>=3.7.0 # Apache-2.0 -graphviz>=0.4.0 # MIT License -beautifulsoup4 # MIT -setuptools>=16.0 # PSF/ZPL +oslo.config>=3.14.0 # Apache-2.0 +graphviz!=0.5.0,>=0.4.0 # MIT License +setuptools!=24.0.0,>=16.0 # PSF/ZPL +pycrypto>=2.6 # Public Domain +netaddr>=0.7.13,!=0.7.16 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 19037e4..883a801 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bandit>=0.17.3 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0 @@ -5,0 +6,3 @@ bashate>=0.2 # Apache-2.0 +beautifulsoup4 # MIT +doc8 # Apache-2.0 +extras # MIT @@ -7 +10 @@ hacking>=0.10.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -9,10 +12,9 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -PyYAML>=3.1.0 # MIT -python-barbicanclient>=3.3.0 # Apache-2.0 -python-ceilometerclient>=2.2.1 # Apache-2.0 -python-cinderclient>=1.3.1 # Apache-2.0 -python-glanceclient>=2.0.0 # Apache-2.0 -python-heatclient>=0.6.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 -python-neutronclient!=4.1.0,>=2.6.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache2 +PrettyTable<0.8,>=0.7.1 # BSD +PyYAML>=3.10.0 # MIT +python-barbicanclient>=4.0.0 # Apache-2.0 +python-ceilometerclient>=2.5.0 # Apache-2.0 +python-heatclient>=1.5.0 # Apache-2.0 +python-neutronclient>=5.1.0 # Apache-2.0 +python-openstackclient>=2.1.0 # Apache-2.0 @@ -20 +22,2 @@ python-swiftclient>=2.2.0 # Apache-2.0 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +pytz>=2013.6 # MIT +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -24 +26,0 @@ testtools>=1.4.0 # MIT -zake>=0.1.6 # Apache-2.0

1 0

[new][tripleo] tripleo-puppet-elements 5.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are satisfied to announce the release of: tripleo-puppet-elements 5.0.0: Puppet building rules for OpenStack images. This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 2.0.0..5.0.0 ----------------------------------------------- 8ee01a5 Midonet element now complies with version 5.2 01fb147 Install python-dracclient and python-proliantutils on controllers b067cc8 Add mod_auth_mellon to overcloud-controller element 8b4ad07 Add mod_ssl to overcloud-controller element 5db42bb Install ipxe-bootimgs and tftp-server on controller 20fd074 Add openstack-selinux to the overcloud-base image 343f93f Ceph Jewel repos split packages into ceph-{mon,osd,radosgw} f5a195c Install OpenStack Manila UI eb28192 Install osops-tools-monitoring-oschecks package 9fa6ff1 Revert "bump puppet-ceph to stable/hammer" 00ed205 Installing openstack-sahara-ui 093c466 Add packages required for dpdk in compute node ea61150 Install crudini in overcloud again bce9583 Add puppet-ec2api module 38b51ab Support for the OpenvSwitch OVN Controller 36e8ce1 Fix typo in package name python-cradox 870f63d Add zaqar package to controller image 659c2e2 Add python-cardox package to controllers 452271c Add mistral packages to controller image bee7e8b Add new puppet-certmonger reference fb7ddee Add openstack-neutron-sriov-nic-agent package in overcloud image 09527d7 Remove puppet-certmonger 83d4282 Modify the midonet repositories to Mitaka c9f3548 Add certmonger package to controllers 9be05cd Fix puppet modules in mixed src/pkg environments 3ddcfc4 Use package-installs in puppet-modules element fe50711 Remove puppet-qpid from module list 125e279 Add Ironic packages to overcloud controller 3b52cd4 Honor $DIB_DEFAULT_INSTALLTYPE in puppet-modules 95542a0 bump puppet-ceph to stable/hammer 943af4f Install Ceph RGW package in the overcloud 277b671 Truncate nova.conf (temporarily) f31f41e Gnocchi Integration ee1b25f Remove tuskar from puppet-modules 54ab484 Add rubygems-deep_merge to package list eb4bd78 Add puppet-barbican to puppet-modules. 8ffce98 Add puppet-oslo to modules elements c6b3f08 Add barbican-api-package to the overcloud. 566c231 Use package-installs for puppet installation Diffstat (except docs and test files) ------------------------------------- elements/hiera/install.d/package-installs-hiera | 1 + .../configure.d/40-truncate-nova-config | 14 ++++ elements/hiera/pkg-map | 5 ++ .../install.d/package-installs-overcloud-base | 2 + elements/overcloud-base/pkg-map | 4 +- .../package-installs-overcloud-ceph-storage | 1 + elements/overcloud-ceph-storage/pkg-map | 8 +-- .../package-installs-overcloud-cinder-volume | 1 + elements/overcloud-cinder-volume/pkg-map | 1 + .../install.d/package-installs-overcloud-compute | 5 ++ elements/overcloud-compute/pkg-map | 5 ++ .../package-installs-overcloud-contrail-controller | 1 + elements/overcloud-contrail-controller/pkg-map | 1 + .../package-installs-overcloud-controller | 27 ++++++++ elements/overcloud-controller/pkg-map | 38 +++++++++-- elements/overcloud-network-midonet/README.md | 44 ++++++++++-- .../environment.d/02-midonet-envs.bash | 52 ++++++++++---- .../extra-data.d/60-create-midonet-repositories | 2 +- .../extra-data.d/midonet-mem | 22 +++--- .../extra-data.d/midonet-oss | 22 +++--- .../package-installs-overcloud-network-midonet | 19 +++--- elements/overcloud-network-midonet/pkg-map | 8 +-- .../source-repository-overcloud-network-midonet | 21 ++++-- elements/puppet-modules/element-deps | 1 + .../01-puppet-modules-install-types.sh | 75 -------------------- .../02-puppet-modules-install-types.sh | 79 ++++++++++++++++++++++ .../75-puppet-modules-package | 7 +- .../75-puppet-modules-source | 5 ++ elements/puppet-modules/package-installs.yaml | 2 + .../source-repository-puppet-modules | 9 ++- elements/puppet/element-deps | 1 + elements/puppet/install.d/74-puppet | 4 -- elements/puppet/package-installs.yaml | 1 + 33 files changed, 328 insertions(+), 160 deletions(-)

1 0

[new][tripleo] tripleo-heat-templates 5.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are high-spirited to announce the release of: tripleo-heat-templates 5.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in tripleo-heat-templates 2.0.0..5.0.0 ---------------------------------------------- d324c05 Enable proxy headers parsing for Ceilometer 2a633a6 Enable proxy headers parsing for Gnocchi 1f2f986 Enable proxy headers parsing for Aodh 45924eb Enable Glance multiple locations when using Ceph b5d94be Disable IPv6 RAs & Autoconf For All (Not Just Default) 754fc4e Special case non-matching ObjectStorage role port names bc669cd Allow Glance API and Registry to be split 7fe61c9 Set the notification driver for glance 7445049 Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration c1eedd1 Actually start the systemd services in step3 of the major-upgrade step ea2f03d Fixed NoneType issue when logging-environment.yaml is used ef5855f Add cloud names to hosts output 4b470e0 Ceilometer Wsgi Mitaka->Newton upgrades 370e2c8 Serialize AllNodesDeployment and UpdateWorkflow fd9f35e Specify the Ceph packages to be installed db82aed Add Select per-network hostnames for service_node_names to role.role.j2.yaml dc5158e Enable firewalling by default on compute nodes 2064ab8 Re-enable ManageFirewall by default. e5cbfc0 restore missing fluentd client functionality 88423d4 Fix OpendaylightApiNetwork key naming 7a66d85 Select per-network hostnames for service_node_names f959b98 Set proper ceph config path for manila 6d17088 Adds Environment File for Removing Sahara during M/N upgrade 936f4c8 Add generic template for custom roles. f475815 Fixing resources path in OpenDaylight 3a3f27a j2 template role config templates a06c548 j2 template per-role ServiceNetMapDefaults 465dcdf Move the main template files for defalut services to new syntax generation 766d9ad Replace per role manifests with a common role manifest 61f77f1 Make keystone api network hiera composable c79aacc Use netapp_host_type instead of netapp_eseries_host_type c470329 Set ceph osd max object name and namespace len on upgrade when on ext4 bb555cf reload HAProxy config in HA setups when certificate is updated 4f133fe Update $service to $resource this variable does not exist in the context 582bb8a Cinder volume service is not managed by Pacemaker on BlockStorage a4e53b8 telemetry: remove coordination_url hiera settings 252b594 Balance Rabbitmq Queue Master Location on queue declaration with min-masters strategy cd133a0 Telemetry: add redis_password hiera parameter d636e3a Move the rest of static roles resource registry entries to j2 45a7fbb Use -L with chown and set crush map tunables when upgrading Ceph 4d71bc2 Fix typo in fixing gnocchi upgrade. de5aabe Add gateway_ip in OS::Neutron::Subnet 9614b85 Update .gitreview for stable/newton 7e9fd59 j2 template per-role things in default registry 32c5430 Relax pre-upgrade check for failed actions ad07a29 Fix races in major-upgrade-pacemaker Step2 89efa79 Update gnocchi database during M/N upgrade. 7ba5525 Move db::mysql into service_config_settings 35da6af Full HA->HA NG migration might fail setting maintenance-mode da53e9c Fix "Not all flavors have been migrated to the API database" 8b38376 Fix NTP servers hieradata 5630226 Set manila::keystone::auth::tenant 3d05733 Fix predictable placement indexing def3801 Fix ignore warning on ceph major upgrade. 99449a3 Use parameter name to configure gmcast_listen_addr a52a151 Remove double definition of config_settings key in keystone a387c11 Bind MySQL address to hostname appropriate to its network 3e0694e Add metricd workers support in gnocchi 9393a3e get_param calls with multiple arguments need brackets around them f9e6a26 A few major-upgrade issues b70d6e6 Disable openstack-cinder-volume in step1 and reenable it in step2 9593981 Start mongod before calling ceilometer-dbsync 16aba8f Remove deprecated scheduler_driver settings 24a73ef Reinstantiate parts of code that were accidentally removed 0de495b Add FixedIPs parameter to from_service.yaml 0eb5de0 Add integration with Manila CephFS Native driver 9d67d7b Move keystone::auth into service_config_settings 7d75b58 Activate StorageMgmtPort on computes in HCI environment d5a25f9 Remove hard-coded roles in EnabledServices output 313b920 Neutron metadata agent worker count fix 947d5e6 explicitly set fluentd service_provider 7ca7757 Deprecate the NeutronL3HA parameter a99c06a Tolerate missing keys from role_data in service templates 4422fb9 No-op Puppet for upgrades/migrations according to composable roles 18313fe Define step input as a Number type e6ecdb8 Glance worker count fix b524c09 Provide for RAM-constrained environments 1e72333 Make defaults from roles_data.yaml more robust 2fc2770 Make apache-based services use network-dependent servername bc7f6ab Make sure major upgrade script fails. 0fcd1a7 Set Neutron's metadata_ip to the nova metadata VIP 124aa4f Add nova-metadata template 859d748 RabbitMQ threads should be configured dynamically 2548f7d Enable L3 HA when multiple controllers and no DVR 63421ca Add a function to upgrade from full HA to NG HA 2f664a1 Use osd_pool_default_* puppet parameters when creating the pools 0a3cd4d M/N upgrade sahara-api fails to restart. 67ae241 Set VNC URL parameters for nova-compute fb25385 Rework the pacemaker_common_functions for M..N upgrades 0d9298b Add fluentd client service a1dcc16 Move rabbit's clustering port away from the ephemeral port range 5842625 Add mongo config settings in collector service templates 8988890 Fix _from_pool_v6.yaml str_split d13d0f3 Fix use of batch_create in CephMon major upgrade template 7ead5cc Add CephRgw to roles_data.yaml b3635f8 Fixes the Ceph upgrade scripts b738e9c Convert AllNodesExtraConfig to support composable roles 3a8d20a Convert UpdateWorkflow to support composable roles da283a7 Convert deploy steps to jinja2 loop af5f892 Set client protocol for glance registry client 3d58b8c Expose parameter to enable combination alarms fa6bafa Convert allNodesConfig properties to composable jinja2 e851007 Move role ResourceGroups inside the jinja2 loop 98b4776 Add NetApp Manila driver integration and tidy up generic 09f569b Unset Keystone public_endpoint 57898b4 De-bracket vncproxy_host in compute profile 8ce3d64 Configure Keystone credentials 6c4654b Add explicit entry for ctlplane IP in /etc/hosts 575e42b Refactor upgrade checks. 4138b26 Enable proxy header parsing for Manila d05a2b3 Move per-role NetIpListMap's into jinja template loop 51dd6ad Add support for deploying Ceph RGW role 18a6292 Add Heat's Cfn and Cloudwatch networks to ServiceNetMap b1c3224 Make Nova VNC Proxy service name match service net map 4223b88 Adjust MTU to compensate for VLAN tag issue 2611582 Move AllNodesValidationDeployments into jinja template loop d914f9c Move AllNodesDeployments into jinja template loop 0a9b02b Convert overcloud.yaml to support jinja2 templating 4b55a18 Remove *ExtraConfig parameters from overcloud.yaml 54a0286 Move role deployment steps into puppet/post.yaml 975fbb4 Generate VIP info for ctlplane VIP, not management bedf3dc Convert SwiftDevicesAndProxyConfig to composable format 66b5c5d Populate vnc_api_lib.ini on compute nodes with OpenContrail 866ed11 Add support for configuring the OVS firewall driver 4a95c03 Update capabilities-map.yaml 50b5f6a Add keystone networks for the different endpoints 85df73d Fix service config files having wrong map_merge format c497031 Add base neutron service configuration 8073fff Create entries for overcloud VIPs in /etc/hosts 2932988 Add VIP names to allNodesConfig 87f1f7d Add bootstrap_node and vip_data to hierarchy for all roles 00180e8 Update OpenContrail loadbalancer plugin value f34bd73 Fix aodh auth url to remove suffix 9d07e18 Use Redis VIP when deploying with keepalived 280a70b Set Redis VIP on all nodes 393c155 Add service networks to hieradata 9efa05a add composable services for Contrail ddfbf35 Move VIP-related data to AllNodesConfig 4c325d7 Ironic: update default enabled drivers b8f154b Remove mangling swift memcached list (now in puppet-tripleo) 8a02eeb Composable per-service VIP hieradata 71b2167 Create NetIpListMap for all roles 24c5964 Remove hard-coded per-service rabbitmq hieradata 827d110 Mv pacemaker and firewall out of controller 7ab48cc Drop overcloud-without-mergepy.yaml (again!) bf3bc0d Generate composable service node_names lists 5bacfe1 Move snmp settings into composable services e2d5bbc Ironic: configure disk erasing during cleaning c5a609e Ironic: enable iPXE by default and make it configurable 2bd58de Ironic: enabled_services moved from ironic to ironic::conductor manifest d42c83a OVN heat templates 959e872 Change NeutronWorkers default to result in previous behavior 9579bbf Add default for DeployIdentifier in nested templates 9706ac8 Ironic: service catalog entries should not have a suffix 79f5c8c Added environment file for SR-IOV deployment 37401cf Pass cinder_iscsi_address without brackets d892301 Add missing reference to ExternalPort for DVR 98c6bda Last round of modern authtoken update 3d2d682 Remove repeated apache-related hieradata 1590edb Restart only services that need it 25ad7b8 Availability monitoring agents support 6c37e1e apache: Remove product informations 288088a Add trunking plugin to list of default ML2 service plugins 4ea34ed Add Ceph cluster health validation on upgrade e5a627e Upgrade ceph-osd 825c42d Add NeutronGlobalPhysnetMtu to neutron-base.yaml a938883 configure Heat with new authtoken parameters e3cb92a Mv Nova, Neutron, Horizon out of controller.yaml aa7e939 Change CloudName default value to include domain db419ec Cleanup haproxy service from explicit services enablement 10a24b2 Move ceph cluster config out of allNodesConfig 1b604a9 Added DPDK environment file and nic configs samples 09a5ff6 Customize the reservation of memory for host processes cb2570c Fix Ironic service bind IPs f0302ca Upgrade ceph-mon dff4f6c Add hyperconverged-ceph environment to include CephOSD on computes 628be72 Conditionally expose haproxy endpoints f34c6a6 Add flag to assert that puppet manages the keystone endpoints 2291cdd Create composable mapping between enabled services and role ips 49b7064 Rename opendaylight service to opendaylight_api 753131d Create hiera service_enabled keys for enabled services 67d3a77 Configure the pci_passthrough_whitelist via THT 38bbf11 Fix debug parameter in gnocchi-base.yaml 562cac8 Modify sriov_numvfs config from puppet-neutron to tripleo 514a81e M/N upgrade fix galera restart. a6962e7 Fix check of rpm-python. 1e8d7f9 M/N upgrade set scheduler_host_manager right. dd05114 Skip warning for required parameters 783975c Adds OpenDaylight composable service 241b88c Move ceilometer api to run under apache wsgi 1087a8b Customize vcpu_pin_set in nova.conf 7aeb416 Add global_config_settings to services' output c667ce6 Customize scheduler_default_filters (nova.conf) ff39249 Move Redis, Memcached, Sahara, OVS agent out of role templates 6298b7c Add constraint to prohibit balance-tcp from BondInterfaceOvsOptions dd9c8d6 Mv ceilo, aodh, and gnocchi out of controller.yaml cf8e3f5 Mv keystone, mongo, manila out of controller.yaml a356bb6 Move Swift hiera settings into composable services a30d174 Fix base service type inheriting gnocchi service templates aae669a Fix base service type inheriting ceilometer service pcmk templates 43476e2 Move glance/heat hiera settings to services fc614ec Ironic: add missing haproxy and firewall configuration 301314e Added a new composable service for enabling DPDK on compute nodes. b5a54bf Update authtoken parameters to match recent changes 0224b18 Fixes Neutron metadata parameters in THT 47bdf44 Make OVS ARP responder feature configurable 780750e Set the default gnocchi driver to swift b31d80f Move network bind IPs out of compute.yaml 34c8a8c Clean up old functions ce39dba Set NeutronL3HA to false when deploying DVR cb894b4 M/N upgrade fail to restart nova-scheduler. 5c1b986 Fix Flavor get_param for Block Storage. f9dadca Enable usage of FQDNs for the endpoints db4d11f Move Keepalived/HAproxy settings out of controller f45897e Fix check for MariaDB upgrade manual switch off d90363b Move out of roles any Ceph setting 92f2cfb Move RabbitMQ settings out of controller.yaml 58bf393 Move MySQL settings out of puppet/controller.yaml 2dd1167 Revert "Pin puppetlabs_spec_helper to 1.1.1" 59e3f2c Pin puppetlabs_spec_helper to 1.1.1 b542ce7 Permit usage of raw disks as backends for Swift storage b31116a Move resource registry override to enable-tls.yaml 072404b Don't trigger mariadb upgrade dump/restore when not needed 0d79742 Set cinder::api::bind_host within service template 9a6f712 Add deployment of CAs via hieradata 59e2713 Fix path to sahara templates d6adc05 Add sriov_numvfs in THT fc0c699 SR-IOV nic agent changes in line with composable roles. d8df132 Disable Sahara by default 9b73901 Disable cinder-backup by default fbbd134 Enable gnocchi systemd services 3b62761 Add DefaultPasswords to composable services 885b37c Pass ServiceNetMap to services 6842f18 Allow scheduler_available_filter to be customizable ccc0079 Remove OS::Tripleo::Services::ManilaShare: from puppet-pacemaker.yaml d923556 Make sahara run via systemd a058bee Use modulepath for Puppet 420f786 Upgrade scripts to migrate aodh alarm data 9b18594 Add tripleo-firewall composable service 0df577c Add tripleo-packages composable service a19da8e gnocchi: use new authtoken parameters cca5693 Update pacemaker_resource_restart.sh for new HA arch 9a6c24b Remove unneeded net_ip_map dump into hieradata 80e82be Remove deprecated net_ip_uri_map output 248068b Remove deprecated net_ip_subnet_map output 34c220d Move neutron settings out of puppet/compute.yaml 0ec58cf Mv Ceilometer settings out of puppet/compute.yaml 4e05d13 Move Nova settings out of puppet/compute.yaml ed6409f Remove NeutronEnableTunnelling from templates 2470cf8 Rename NeutronServer to NeutronApi to align with ServiceNetMap 6561984 Remove deprecated node_ips hiera keys ac8d591 Convert ServiceNetMap to a nested template 8cd7861 Decouple EndpointMap from SSL certificate params c93fb4f Set coordination url for gnocchi storage 71dc47e Update Ironic composable services 44b67eb Reinstate CloudDomain properties for Controller/Compute roles 450be22 Convert EndpointMap to not require per-service VIP parameters e8683a8 Align node_ips hiera keys with the service name. f634cd1 Add hieradata for Manila v1 and v2 endpoints 1e7bab9 Add support for cinder v3 endpoint 75110de Add cinder-backup service as role f7f514c Add parameter for enabling purging configuration files 1d83f18 Allow map_replace substitution of network names 9097810 Remove KeystoneRegion from controller.yaml ba1fb56 Move gnocchi's kestone::auth parameters to API profile b5fa4a4 Remove Compute role parameters from overcloud.yaml 0caf0a0 Move neutron-related options for nova to base profile 69ea053 Move nova's kestone::auth parameters to API profile 49ded98 Remove deprecated hdp plugin and add ambari 5aabce1 Updates and fixes to NIC config template routes cf5fd01 Remove static hieradata c21545a Support arbitrary attributes for the Ceph pools 219acaa Move setting of Glance's keystone region to API profile c892df4 Configure project name for keystone::auth resource in heat 5df8e60 Move cinder's kestone::auth parameters to API profile b2ea349 Move neutron's kestone::auth parameters to server profile c4f8659 Remove outdated Neutron auth options 70fc539 Allow a fixed IP to be allocated to RedisVirtualIP 9450cc2 Make deployed-server OS::Neutron::Port optional 0327fc2 Add Sahara services to ControllerServices list 2f52658 Disable mistral services by default. bd695c5 Update cinder-api with new authtoken parameters 7c502ce Add Aodh composable roles f8e4070 Disable the Mon/OSD/Client resources in puppet-ceph-external 12b356b Remove keystone PKI related parameters 4638c80 Adding optional aci-opflex hiera data c6165ec Set Coordination url for central agent deb098c Add environment file to enable DVR 81de065 Next generation HA architecture work 12aeac7 Add management network to list of networks to ping 9b36f36 Replace hard-coded regionOne with parameter references b99733d Enable Manila integration - as a composable controller service b9d062c Remove usage of ::nova class in THT c2c8f0f Enable glance to use the SSL middleware f99294c Enable keystone to use the SSL middleware f67c4f7 move hieradata/ceph into ceph-base service 7879f9d Convert AllNodesConfig hosts config to a map 0cb33ba Add EnabledServices output to overcloud.yaml 89870f1 Update heat-agents setup files 271aebf Add default value for `RoleData` 37b5df4 Move constraints to their respective services a2b64eb We don't need to set a default for the CephX keys and cluster FSID 7df649f Convert service_name to underscore syntax d85d068 Move nova constraints from controller manifest to each service b0e5399 Create role for the fake openstack-core resource 315fa31 Migrate Puppet Hieradata to composable services 1c5a7c3 Move *Flavor parameters into per-role templates 80a1acb Move *Image parameters into role templates fecd61e Remove KeyName parameter from overcloud template 466274e Move per-role *SchedulerHints parameters into role templates 918b668 Remove some properties from overcloud.yaml Controller group 23e13cc Filter null/None service names fc93cf3 Force a tty for sudo in get-occ-config.sh c14d4a9 Set MDS/OSD firewall ports from ceph-osd template 5195d7f Composable firewall rules 2720b5d Cleanup templates from the shared CephCluster config 1f1489b Convert Swift ringbuilder to composable services format 55e84b6 Move nova::db data within service template 6b30ff1 Add 'service_name' to composable services 8d0497d Fixes type and description for NeutronL3HA 056ce23 Explicitly set nova and neutron host on controllers 248390b Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal 1d38b75 Deploy Horizon with composable apache service 8e0a4df Remove unused redis_vip parameter 279a2a0 Include new apache pacemaker profile da41957 Fix KeystoneWorkers default value 7d64828 Fix ceilometer auth url for compute ac1a10e Remove the ControllerCount contraint 47fe749 Remove ::nova::cron::archive_deleted_rows 35aceb0 Fix gnocchi::storage::ceph::ceph_keyring 95dd1ba gnocchi: configure db_sync command in the profile 17fb4db Remove enable_load_balancer on nonha manifest eb8ab61 Remove useless mongodb variables in ha manifest 9a36561 Don't collect gnocchi-service tag in THT 1a3b3fc overcloud_compute.pp: remove nova_config params 62d6d5d Add MysqlNoBracketsInternal to enable-tls.yaml 6a629a4 Move MySQL Galera within composable services d91bb38 Composable Pacemaker service 856a990 Ceilometer Compute Agent composable service f12f7f3 Remove ceilometer mysql db hieradata bf41f8f Fix network-isolation.yaml to stop clobbering Management net b510cab Composable OpenContrail compute plugin 613e009 Composable Plumgrid compute plugin bf76cf6 Composable Midonet compute plugin e8e7c42 Composable Nuage Compute Plugin 2a6ae1b Composable Neutron Core Compute Plugin a9c3b92 compute: moving out iscsi bits, now in puppet-tripleo 0415a2a Gnocchi composable roles c4f2725 Composable Horizon service - tripleo-heat-templates c3d595c Use already Deployed/Installed servers 0ac53f5 Missing CephClientKey parameter in puppet-ceph-devel and storage-environment 81863d1 Re-enable Ceilometer composable roles for controller 286b8e6 Add a second proxy-logging middleware entry to swift-proxy dd41e05 Repurpose KeystoneWorkers add keystone::wsgi::apache::threads 5f6f897 Move ironic::db data within service template 6f31c67 Move neutron::db data within service template 135fb67 Move sahara::db data within service template 43cd92a Move heat::db data within service template bbe7203 Move cinder::db data within service template dd38017 Move glance::db data within service template 800ee92 Composable Midonet for Neutron e231c9e Include bulk in swift proxy pipeline aabde9a Move keystone::db data within service template cf42408 Pass MysqlVirtualIP without brackets to EndpointMap 88f83fe Add StepConfig to docker compute-post.yaml 3b9544b Merge pacemaker_master/sync_db conditionals c825170 Restore the NtpServer parameter name fe1f8a8 Convert AllNodesExtraConfig to OS::Heat::None 7ff66b9 Remove config_identifier from all_nodes extraconfig examples 2a64b67 neutron: remove tenant MTU configuration options 631b30d Add kernel service b345dbe Combine BootstrapNodeDeployment with AllNodesDeployment 69d9171 Customize "supported_pci_vendor_devs" for SR-IOV 301560b Set os-refresh-config timeout to 4 hours 072b067 Template param for what command occ runs 9f8e168 Remove depends_on: Networks from ControllerServiceChain 59b6afc Replace NodeConfigIdentifiers with DeployIdentifier 1222eb7 overcloud_volume: cleanup unused Puppet code 1006cbb volume: deploy snmp using composable role 794fece Switch Ceph Monitor/OSD/Client/External to composable roles bacd786 pacemaker: don't override Service resource for Nova & Neutron c0b15ba Remove NFS bits from overcloud_compute manifest 8a0f5ef Add example of creating per-node os-net-config mappings 3dde231 Stop no-opping PackageUpdate on upgrade 337d2c6 Pass RoleData into -post.yaml stacks 68562d0 Output generic role_data in services.yaml c163585 Add Rabbit/epmd port to firewall 67cb6c7 Use create-legacy-resource-types during gnocchi-upgrade 9f1b58e First iteration of libvirt and nova-compute as a composable services 30a11c8 Wire NTP and Timezone services into BlockStorage nodes 6fab74a Composable Timezone service - ObjectStorage c5ea6e6 Composable Timezone service - CephStorage 2cc01b9 Composable Timezone service - Compute 6837278 Composable Timezone service - Controller fa08aaf Configure BlockStorage services via resource chains 292fdf8 Dump and restore galera db during major upgrades 017334b Increase cluster sync timeout for M->N major upgrades f444f18 Drop unused VIP params to controller.yaml b578117 Convert SNMP configuration to composable services format dfbc938 Basic support for deploying Ironic in overcloud a8c8235 Don't set selinux in 'permissive' mode on CephStorage nodes 8a584a7 Add Management net to ips-from-pool-all example 50ee410 Convert swift storage to composable services da308a2 Convert noop NetworkExtraConfig to OS::Heat::None 2578550 Disable stonith temporarily during upgrades 09944ed Fix ceilometer auth url 7319406 Increase RabbitMQ maximum file descriptors. c93ba28 Revert "Ceilometer composable roles for controller" 5e1229c Allow neutron_options customization for dashboard a778a97 Revert "Pin puppet-lint-absolute_classname-check to 0.1.3" c48410a Ceilometer composable roles for controller 61f3183 Pin puppet-lint-absolute_classname-check to 0.1.3 f498ff2 Update neutron ml2 class 5921122 Split Heat pacemaker roles into separate services d97a76f Heat upstream default policy.json works in devstack 1bab553 Composable roles within services - NTP - ObjectStorage 94166fb Composable roles within services - NTP - CephStorage 5210355 Composable roles within services - NTP - Compute 296bffd Composable roles within services - NTP 26e639f Parametrize and increase default of swift-proxy node_timeout 8ac333b Change Aodh to use own backend 73c76b8 Enable firewall by default on the overcloud dc0562c Allow sahara ports in firewall a4c9e1b Allow pacemaker ports in firewall cca0212 Remove nova::db classes, moved to puppet-tripleo ca11c3d Remove ::nova::network::neutron, now in puppet-tripleo 3717794 Create Cinder backup pool in Ceph 68bdb72 Add IPv6 support for the management network b2eba85 Stop using deprecated port param in firewall rules e21c741 Drop extraconfig for neutron-opencontrail.yaml 37bb689 Composable opencontrail plugin 29e04f6 Drop extraconfig for neutron-nuage.yaml 9e502fc Composable neutron nuage plugin 7b22f2d Colocation make a group for pcmk nova resources. fa87546 Stop passing charset=utf8 for neutron database connection option f918bdb Allow to manually disable post-puppet restarts 708bf15 Enable nova-compute as a composable service 16d0489 Enable nova-vncproxy as a composable service 80ad670 Enable nova-consoleauth as a composable service 94bf2d5 Enable nova-scheduler as a composable service 27ee21d Enable nova-api as a composable service 5f21481 Drop extraconfig for neutron-plumgrid.yaml cf04308 Composable Neutron Plumgrid plugin dea033b Move Neutron core and service plugin to base 11074fb Composable roles within services - MongoDB e1238aa neutron: stop include ::neutron & ::neutron::config dc63eb1 Remove unused Neutron parameters from roles 89fbd07 composable neutron ml2 and ovs agent 08a201e composable neutron server 20c1b99 Replace no-op TLS stacks with OS::Heat::None f3e004c set aodh auth_url explicitly 8027ae2 Remove nova-cert from TripleO 3d01f65 Enable nova-conductor as a composable service 244dcc4 Explode Loadbalancer role into HAproxy + keepalived 27e457e Switch Cinder Api/Scheduler/Volume to composable roles 31c4167 Composable roles within services - Redis d9409b4 Composable Sahara services c79c261 Enable proxy header handling for nova 70ded53 Take 'host' parameter from neutron manifest into use fcbb6f5 Take 'host' parameter from nova manifest into use 655fd04 Cleanup hieradata to reduce Puppet warnings 43a358c Adjust UpgradeLevelNovaCompute rpc messaging pin to mitaka 815ef99 Don't overwrite ceph osd_journal_size be1b311 Configure ObjectStorage services via resource chains e3cc445 Fix inconsistency with ringbuilder/storage steps d372a3b Convert Swift proxy to composable services format 4087aff loadbalancer: update hiera parameters for HAproxy/keepalived split d1c21c6 compute: use new param for live_migration_tunnelled a6438a2 Pass MysqlVirtualIP via EndpointMap f4e5895 Configure ComputeServices via resource chains 9036e73 Remove custom SSL-related resource for cinder 29d4de9 Enable proxy header handling for cinder 5a9ea97 Enable proxy header parsing for heat 894453f Remove the delay resource and its constraints 0e6e864 Set rabbitmq loopback_users explicitely ddd2eb9 Configure CephStorage services via resource chains 9e21e49 Fix ceph keyring setting for gnocchi 6a962c5 Update management_from_pool template version to 2015-10-15 565f0c5 Adds memcached as a composable service d18f218 composable heat services 40ad289 Deploy Loadbalancer as a composable role e734d75 Tighten the access rules for galera 5b95df3 Deploy RabbitMQ as a composable role 947f47c Dump IPs configuration as hieradata 3fc7da4 Pass enabled and manage_service to Neutron/L3 when Pacemaker 22c44a9 Add step to ObjectStorage RingBuilder deployment 168bc2f composable neutron metadata service 59e2f29 composable neutron l3 service 9223f5d Move dhcp agent maps to OS::Heat::None to resource_registry 32d2934 Remove ControllerClusterConfig from overcloud.yaml 6c2dea4 Remove tenant_id from nova v2.1 endpoint e148af8 Remove Nova EC2 deployment a3bae06 Ensure manage_service and enabled are false for Pacemaker be24147 add heat-api-cfn to endpoint map 27f7d22 composable neutron dhcp service c2cd6f0 deployment: drop step6 ff7c5c7 deployment: remove Step7 d76f70e Set nova neutron auth back to 'v3password'. 099ac31 Change ping wait flag 3261997 Use docker-cmd hook. c777279 Combine parameter_default fields 995ad9c Pass parameters to manage endpoints via puppet 609b7ec Leave start/stop/restart for Keystone and Glance in charge to the role afc4915 Remove calls to ::mysql from the manifests 69ff93f Optimize Nova disk_cachemodes and hw_disk_discard options for RBD 6e65c8f Disable VIPs before stopping cluster during version upgrade b9bb263 Use str_split to compute netmask in _v6 port templates 7e08362 Wire missing RabbitClientPort into Glance API role 1f29747 Additional parameters for Nuage Neutron plugin integration 75f6628 Fixes ovs bonding option b0b56a1 Fix the Sahara public endpoint and make it point to the Public VIP efadbd8 Run sync in step 3 when $sync_db 26d8931 Fix the ManagementNetValueSpecs param type 6d27813 Fix controller-no-external.yaml in bonded configs. 55cd264 The Sahara SSL endpoint was announced on the wrong port 34b4954 Use 'deeper' hiera_hash merge behavior for all roles 7588f74 composable glance services dbd8834 Fix ControllerExtraConfig parameter name ddecbab Enable client address in Horizon's logs. 9052c8b Make HeatWorkers param affect the engine workers 887f35b Fix Neutron enable_*_agent* Hiera parameters 11079d6 Retain existing ComputeHostnameFormat when upgrading older envs c717a4d Add GlanceRegistry to the endpoint map 2b15978 Keep setting backend_host to 'hostgroup' for rbd backends 1c8ad9f Add ping_retry function abbc6b1 Refactor HAproxy and VIP creation. f5d96bb Make sure openstack services are dependent on openstack-core dec8a0f Add net-config-static.yaml aa0fa9d Add missing ManagementIpSubnet 80be9ef Document IPv6 syntax for GlanceFilePcmkDevice a120877 Always use parameter_defaults in environment files 0970068 Deploy Gnocchi as a Ceilometer metrics storage backend aa0bd9e Fix distinguishing between stack-create and stack-update 2d92911 Update .sh references from openstack-keystone to openstack-core d773227 Don't have separate protocols/ports for Keystone v3 de0ac7b composable keystone services ec78afd Replace extraconfig/tasks/noop.yaml w/ Heat::None c8ccfa2 Remove network/noop.yaml, use OS::Heat::None 128026e ha/glance-fs: avoid a race condition 706c2fe Add removal of the /etc/resolv.conf.save file for +bug/1567004 8557ab7 Revert "Ping retry" d3b841c Use a different ceph key for admin/client user 4c7d873 Add network ExtraConfig hook 0a53ba4 Increase corosync token timeout 55af726 Reload haproxy after injecting certs w/o pcmk too 6d8eb35 Change /etc/hosts format and add domain e4578fe Nova needs the proper volumes to use Cinder 05b2a20 Filter for local nodes in check_resource function 4f373ea Restart haproxy after configuring SSL certs b239b62 Disable Nova v3 API 0bcf693 Configure ControllerServices via resource chains 321cee7 Add EndpointMap as output b903114 Updates ControlPlaneSubnetCidr to be a string 98f19c1 Remove hack the pulls latest docker d2710b8 Centos gives /dev/pts/ptmx the wrong perms df343c3 Enable galera replication for Mariadb 10.1 570c690 Ping retry bc00cf7 compute: restart OVS agent on neutron.conf changes d2566e5 change the default satellite tools rpm repo. 7b2e560 Don't restart Pacemaker-managed services from Puppet 9988bd2 Increment step count to include ringbuilder 6e56f87 Set UpdateIdentifier for upgrade converge, to prevent services down 2493de2 Remove password default for AodhPassword 992f85b Add quotes around the cinder_iscsi_ip_address value 8c0ba4c Add ExtraConfig example that always runs on update ee2c9ea PLUMgrid Neutron integration a340ea6 Add database directory mount for openvswitchdb e4fb068 Increase galera sync timeout in yum_update.sh Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + capabilities-map.yaml | 324 +- default_passwords.yaml | 25 + deployed-server/README.rst | 129 + deployed-server/ctlplane-port.yaml | 23 + deployed-server/deployed-server-config.yaml | 22 + deployed-server/deployed-server.yaml | 115 + deployed-server/scripts/get-occ-config.sh | 113 + environments/ceph-radosgw.yaml | 5 + environments/cinder-backup.yaml | 4 + environments/cinder-netapp-config.yaml | 2 +- environments/deployed-server-environment.yaml | 4 + environments/deployed-server-noop-ctlplane.yaml | 4 + environments/docker.yaml | 4 +- environments/enable-tls.yaml | 44 +- environments/hyperconverged-ceph.yaml | 11 + environments/inject-trust-anchor-hiera.yaml | 8 + environments/ips-from-pool-all.yaml | 16 + environments/logging-environment.yaml | 29 + environments/low-memory-usage.yaml | 15 + environments/major-upgrade-aodh-migration.yaml | 6 + ...ajor-upgrade-ceilometer-wsgi-mitaka-newton.yaml | 7 + environments/major-upgrade-pacemaker-converge.yaml | 4 + environments/major-upgrade-pacemaker-init.yaml | 9 +- environments/major-upgrade-pacemaker.yaml | 9 +- environments/major-upgrade-remove-sahara.yaml | 6 + environments/manage-firewall.yaml | 2 - environments/manila-cephfsnative-config.yaml | 18 + environments/manila-generic-config.yaml | 25 + environments/manila-netapp-config.yaml | 30 + environments/mongodb-nojournal.yaml | 2 +- environments/monitoring-environment.yaml | 30 + environments/net-bond-with-vlans-no-external.yaml | 2 +- .../net-single-nic-with-vlans-no-external.yaml | 2 +- environments/network-environment.yaml | 32 +- environments/network-isolation.yaml | 21 +- environments/network-management-v6.yaml | 25 + environments/network-management.yaml | 3 +- environments/neutron-midonet.yaml | 8 +- environments/neutron-ml2-ovn.yaml | 18 + environments/neutron-nuage-config.yaml | 14 +- environments/neutron-opencontrail.yaml | 17 +- environments/neutron-opendaylight-l3.yaml | 14 + environments/neutron-opendaylight.yaml | 11 + environments/neutron-ovs-dpdk.yaml | 18 + environments/neutron-ovs-dvr.yaml | 39 + environments/neutron-plumgrid.yaml | 31 + environments/neutron-sriov.yaml | 22 + environments/puppet-ceph-devel.yaml | 13 +- environments/puppet-ceph-external.yaml | 15 +- environments/puppet-pacemaker-no-restart.yaml | 3 + environments/puppet-pacemaker.yaml | 12 + environments/puppet-tenant-vlan.yaml | 6 +- environments/services/ironic.yaml | 4 + environments/services/mistral.yaml | 4 + environments/services/sahara.yaml | 3 + environments/storage-environment.yaml | 17 +- environments/tls-endpoints-public-dns.yaml | 55 + environments/tls-endpoints-public-ip.yaml | 55 + .../update-from-keystone-admin-internal-api.yaml | 8 +- .../update-from-overcloud-compute-hostnames.yaml | 2 + environments/use-dns-for-vips.yaml | 5 + extraconfig/all_nodes/default.yaml | 27 - extraconfig/all_nodes/mac_hostname.j2.yaml | 77 + extraconfig/all_nodes/mac_hostname.yaml | 122 - extraconfig/all_nodes/random_string.j2.yaml | 51 + extraconfig/all_nodes/random_string.yaml | 65 - extraconfig/all_nodes/swap-partition.j2.yaml | 44 + extraconfig/all_nodes/swap-partition.yaml | 90 - extraconfig/all_nodes/swap.j2.yaml | 58 + extraconfig/all_nodes/swap.yaml | 108 - extraconfig/post_deploy/example_run_on_update.yaml | 39 + .../environment-rhel-registration.yaml | 1 + .../rhel-registration/rhel-registration.yaml | 4 + .../rhel-registration/scripts/rhel-registration | 2 +- extraconfig/tasks/aodh_data_migration.sh | 19 + ...ajor_upgrade_ceilometer_wsgi_mitaka_newton.yaml | 62 + extraconfig/tasks/major_upgrade_ceph_mon.sh | 82 + extraconfig/tasks/major_upgrade_ceph_storage.sh | 87 +- extraconfig/tasks/major_upgrade_check.sh | 104 + extraconfig/tasks/major_upgrade_compute.sh | 2 + .../tasks/major_upgrade_controller_pacemaker_1.sh | 161 +- .../tasks/major_upgrade_controller_pacemaker_2.sh | 46 +- .../tasks/major_upgrade_controller_pacemaker_3.sh | 26 + extraconfig/tasks/major_upgrade_object_storage.sh | 1 + extraconfig/tasks/major_upgrade_pacemaker.yaml | 93 +- .../tasks/major_upgrade_pacemaker_init.j2.yaml | 87 + .../tasks/major_upgrade_pacemaker_init.yaml | 128 - .../tasks/major_upgrade_pacemaker_migrations.sh | 180 +- .../mitaka_to_newton_aodh_data_migration.yaml | 25 + .../mitaka_to_newton_ceilometer_wsgi_upgrade.pp | 97 + extraconfig/tasks/noop.yaml | 26 - extraconfig/tasks/pacemaker_common_functions.sh | 282 +- extraconfig/tasks/pacemaker_maintenance_mode.sh | 19 + extraconfig/tasks/pacemaker_resource_restart.sh | 55 +- extraconfig/tasks/post_puppet_pacemaker.yaml | 15 +- .../tasks/post_puppet_pacemaker_restart.yaml | 28 + extraconfig/tasks/pre_puppet_pacemaker.yaml | 9 +- extraconfig/tasks/yum_update.sh | 105 +- firstboot/os-net-config-mappings.yaml | 65 + j2_excludes.yaml | 10 + net-config-bond.yaml | 12 +- net-config-static-bridge-with-external-dhcp.yaml | 99 + net-config-static-bridge.yaml | 4 + net-config-static.yaml | 82 + network/config/bond-with-vlans/ceph-storage.yaml | 31 + network/config/bond-with-vlans/cinder-storage.yaml | 27 + network/config/bond-with-vlans/compute-dpdk.yaml | 192 + network/config/bond-with-vlans/compute.yaml | 27 + .../bond-with-vlans/controller-no-external.yaml | 52 + network/config/bond-with-vlans/controller-v6.yaml | 26 +- network/config/bond-with-vlans/controller.yaml | 19 + network/config/bond-with-vlans/swift-storage.yaml | 27 + network/config/multiple-nics/ceph-storage.yaml | 18 +- network/config/multiple-nics/cinder-storage.yaml | 18 +- network/config/multiple-nics/compute.yaml | 18 +- network/config/multiple-nics/controller-v6.yaml | 21 +- network/config/multiple-nics/controller.yaml | 19 +- network/config/multiple-nics/swift-storage.yaml | 18 +- .../ceph-storage.yaml | 42 + .../cinder-storage.yaml | 38 + .../single-nic-linux-bridge-vlans/compute.yaml | 39 +- .../controller-v6.yaml | 178 + .../single-nic-linux-bridge-vlans/controller.yaml | 37 +- .../swift-storage.yaml | 38 + network/config/single-nic-vlans/ceph-storage.yaml | 14 + .../config/single-nic-vlans/cinder-storage.yaml | 14 + network/config/single-nic-vlans/compute.yaml | 14 + .../single-nic-vlans/controller-no-external.yaml | 45 +- network/config/single-nic-vlans/controller-v6.yaml | 28 +- network/config/single-nic-vlans/controller.yaml | 17 +- network/config/single-nic-vlans/swift-storage.yaml | 14 + network/endpoints/build_endpoint_map.py | 65 +- network/endpoints/endpoint_data.yaml | 187 +- network/endpoints/endpoint_map.yaml | 4526 +++++++++++++++++--- network/external.yaml | 5 + network/external_v6.yaml | 5 + network/internal_api.yaml | 1 + network/internal_api_v6.yaml | 1 + network/management.yaml | 7 +- network/management_v6.yaml | 69 + network/networks.yaml | 3 + network/noop.yaml | 3 - network/ports/external_from_pool_v6.yaml | 6 +- network/ports/external_v6.yaml | 6 +- network/ports/from_service.yaml | 6 + network/ports/from_service_v6.yaml | 6 + network/ports/internal_api_from_pool_v6.yaml | 6 +- network/ports/internal_api_v6.yaml | 6 +- network/ports/management_from_pool.yaml | 2 +- network/ports/management_from_pool_v6.yaml | 52 + network/ports/net_ip_list_map.yaml | 104 +- network/ports/net_ip_map.yaml | 53 +- network/ports/net_ip_subnet_map.yaml | 47 - network/ports/net_vip_map_external.yaml | 21 +- network/ports/net_vip_map_external_v6.yaml | 21 +- network/ports/storage_from_pool_v6.yaml | 6 +- network/ports/storage_mgmt_from_pool_v6.yaml | 6 +- network/ports/storage_mgmt_v6.yaml | 6 +- network/ports/storage_v6.yaml | 6 +- network/ports/tenant_from_pool_v6.yaml | 6 +- network/ports/tenant_v6.yaml | 6 +- network/ports/vip_v6.yaml | 6 +- network/service_net_map.j2.yaml | 109 + network/storage.yaml | 1 + network/storage_mgmt.yaml | 1 + network/storage_mgmt_v6.yaml | 1 + network/storage_v6.yaml | 1 + network/tenant.yaml | 1 + network/tenant_v6.yaml | 1 + overcloud-resource-registry-puppet.j2.yaml | 206 + overcloud-resource-registry-puppet.yaml | 127 - overcloud-without-mergepy.yaml | 1 - overcloud.j2.yaml | 634 +++ overcloud.yaml | 1701 -------- puppet/all-nodes-config.yaml | 424 +- puppet/blockstorage-role.yaml | 434 ++ puppet/bootstrap-config.yaml | 28 - puppet/ceph-cluster-config.yaml | 126 - puppet/ceph-storage-post.yaml | 58 - puppet/ceph-storage.yaml | 392 -- puppet/cephstorage-role.yaml | 444 ++ puppet/cinder-storage-post.yaml | 53 - puppet/cinder-storage.yaml | 453 -- puppet/compute-post.yaml | 59 - puppet/compute-role.yaml | 471 ++ puppet/compute.yaml | 821 ---- puppet/config.role.j2.yaml | 44 + puppet/controller-config-pacemaker.yaml | 10 +- puppet/controller-config.yaml | 30 - puppet/controller-post.yaml | 138 - puppet/controller-role.yaml | 520 +++ puppet/controller.yaml | 1830 -------- .../all_nodes/neutron-midonet-all-nodes.yaml | 24 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 34 +- puppet/extraconfig/ceph/ceph-external-config.yaml | 101 - .../pre_deploy/compute/neutron-opencontrail.yaml | 12 + .../pre_deploy/controller/cinder-dellsc.yaml | 2 +- .../pre_deploy/controller/cinder-eqlx.yaml | 2 +- .../pre_deploy/controller/cinder-netapp.yaml | 20 +- .../pre_deploy/controller/neutron-nuage.yaml | 91 - .../controller/neutron-opencontrail.yaml | 62 - puppet/extraconfig/tls/no-ca.yaml | 17 - puppet/extraconfig/tls/no-tls.yaml | 34 - puppet/extraconfig/tls/tls-cert-inject.yaml | 6 + puppet/hieradata/RedHat.yaml | 9 - puppet/hieradata/ceph.yaml | 12 - puppet/hieradata/common.yaml | 47 - puppet/hieradata/compute.yaml | 23 - puppet/hieradata/controller.yaml | 269 -- puppet/hieradata/database.yaml | 69 - puppet/hieradata/object.yaml | 21 - puppet/hieradata/volume.yaml | 14 - puppet/manifests/overcloud_cephstorage.pp | 56 - puppet/manifests/overcloud_compute.pp | 192 - puppet/manifests/overcloud_controller.pp | 716 ---- puppet/manifests/overcloud_controller_pacemaker.pp | 1945 +-------- puppet/manifests/overcloud_object.pp | 57 - puppet/manifests/overcloud_role.pp | 26 + puppet/manifests/overcloud_volume.pp | 61 - puppet/manifests/ringbuilder.pp | 96 - puppet/objectstorage-role.yaml | 433 ++ puppet/post.j2.yaml | 139 + puppet/role.role.j2.yaml | 452 ++ puppet/services/README.rst | 56 + puppet/services/aodh-api.yaml | 81 + puppet/services/aodh-base.yaml | 100 + puppet/services/aodh-evaluator.yaml | 42 + puppet/services/aodh-listener.yaml | 42 + puppet/services/aodh-notifier.yaml | 42 + puppet/services/apache.yaml | 52 + puppet/services/ca-certs.yaml | 35 + puppet/services/ceilometer-agent-central.yaml | 56 + puppet/services/ceilometer-agent-compute.yaml | 42 + puppet/services/ceilometer-agent-notification.yaml | 51 + puppet/services/ceilometer-api.yaml | 84 + puppet/services/ceilometer-base.yaml | 132 + puppet/services/ceilometer-collector.yaml | 61 + puppet/services/ceilometer-expirer.yaml | 42 + puppet/services/ceph-base.yaml | 154 + puppet/services/ceph-client.yaml | 42 + puppet/services/ceph-external.yaml | 84 + puppet/services/ceph-mon.yaml | 107 + puppet/services/ceph-osd.yaml | 47 + puppet/services/ceph-rgw.yaml | 79 + puppet/services/cinder-api.yaml | 111 + puppet/services/cinder-backup.yaml | 62 + puppet/services/cinder-base.yaml | 71 + puppet/services/cinder-scheduler.yaml | 53 + puppet/services/cinder-volume.yaml | 112 + puppet/services/database/mongodb-base.yaml | 46 + puppet/services/database/mongodb.yaml | 68 + puppet/services/database/mysql.yaml | 84 + puppet/services/database/redis-base.yaml | 44 + puppet/services/database/redis.yaml | 44 + puppet/services/glance-api.yaml | 109 + puppet/services/glance-base.yaml | 110 + puppet/services/glance-registry.yaml | 100 + puppet/services/gnocchi-api.yaml | 123 + puppet/services/gnocchi-base.yaml | 88 + puppet/services/gnocchi-metricd.yaml | 48 + puppet/services/gnocchi-statsd.yaml | 43 + puppet/services/haproxy.yaml | 68 + puppet/services/heat-api-cfn.yaml | 84 + puppet/services/heat-api-cloudwatch.yaml | 68 + puppet/services/heat-api.yaml | 84 + puppet/services/heat-base.yaml | 79 + puppet/services/heat-engine.yaml | 105 + puppet/services/horizon.yaml | 83 + puppet/services/ironic-api.yaml | 83 + puppet/services/ironic-base.yaml | 69 + puppet/services/ironic-conductor.yaml | 100 + puppet/services/keepalived.yaml | 48 + puppet/services/kernel.yaml | 53 + puppet/services/keystone.yaml | 212 + puppet/services/logging/fluentd-base.yaml | 37 + puppet/services/logging/fluentd-client.yaml | 64 + puppet/services/logging/fluentd-config.yaml | 154 + puppet/services/manila-api.yaml | 82 + puppet/services/manila-backend-cephfs.yaml | 61 + puppet/services/manila-backend-generic.yaml | 93 + puppet/services/manila-backend-netapp.yaml | 112 + puppet/services/manila-base.yaml | 56 + puppet/services/manila-scheduler.yaml | 70 + puppet/services/manila-share.yaml | 44 + puppet/services/memcached.yaml | 42 + puppet/services/monitoring/sensu-base.yaml | 68 + puppet/services/monitoring/sensu-client.yaml | 49 + puppet/services/network/contrail-analytics.yaml | 90 + puppet/services/network/contrail-base.yaml | 100 + puppet/services/network/contrail-config.yaml | 72 + puppet/services/network/contrail-control.yaml | 54 + puppet/services/network/contrail-database.yaml | 51 + puppet/services/network/contrail-webui.yaml | 69 + puppet/services/neutron-api.yaml | 177 + puppet/services/neutron-base.yaml | 102 + .../services/neutron-compute-plugin-midonet.yaml | 29 + puppet/services/neutron-compute-plugin-nuage.yaml | 36 + .../neutron-compute-plugin-opencontrail.yaml | 29 + puppet/services/neutron-compute-plugin-ovn.yaml | 45 + .../services/neutron-compute-plugin-plumgrid.yaml | 29 + puppet/services/neutron-dhcp.yaml | 76 + puppet/services/neutron-l3-compute-dvr.yaml | 62 + puppet/services/neutron-l3.yaml | 74 + puppet/services/neutron-metadata.yaml | 77 + puppet/services/neutron-midonet.yaml | 62 + puppet/services/neutron-ovs-agent.yaml | 127 + puppet/services/neutron-ovs-dpdk-agent.yaml | 75 + puppet/services/neutron-plugin-ml2-ovn.yaml | 79 + puppet/services/neutron-plugin-ml2.yaml | 129 + puppet/services/neutron-plugin-nuage.yaml | 89 + puppet/services/neutron-plugin-opencontrail.yaml | 74 + puppet/services/neutron-plugin-plumgrid.yaml | 121 + puppet/services/neutron-sriov-agent.yaml | 69 + puppet/services/nova-api.yaml | 132 + puppet/services/nova-base.yaml | 117 + puppet/services/nova-compute.yaml | 147 + puppet/services/nova-conductor.yaml | 56 + puppet/services/nova-consoleauth.yaml | 50 + puppet/services/nova-ironic.yaml | 53 + puppet/services/nova-libvirt.yaml | 55 + puppet/services/nova-metadata.yaml | 34 + puppet/services/nova-scheduler.yaml | 65 + puppet/services/nova-vnc-proxy.yaml | 61 + puppet/services/opendaylight-api.yaml | 69 + puppet/services/opendaylight-ovs.yaml | 47 + puppet/services/pacemaker.yaml | 116 + .../pacemaker/ceilometer-agent-central.yaml | 45 + .../pacemaker/ceilometer-agent-notification.yaml | 45 + puppet/services/pacemaker/ceilometer-api.yaml | 45 + .../services/pacemaker/ceilometer-collector.yaml | 45 + puppet/services/pacemaker/cinder-api.yaml | 45 + puppet/services/pacemaker/cinder-backup.yaml | 61 + puppet/services/pacemaker/cinder-scheduler.yaml | 45 + puppet/services/pacemaker/cinder-volume.yaml | 46 + puppet/services/pacemaker/core.yaml | 29 + puppet/services/pacemaker/database/mongodb.yaml | 42 + puppet/services/pacemaker/database/mysql.yaml | 55 + puppet/services/pacemaker/database/redis.yaml | 41 + puppet/services/pacemaker/glance-api.yaml | 74 + puppet/services/pacemaker/glance-registry.yaml | 47 + puppet/services/pacemaker/gnocchi-api.yaml | 45 + puppet/services/pacemaker/gnocchi-metricd.yaml | 47 + puppet/services/pacemaker/gnocchi-statsd.yaml | 46 + puppet/services/pacemaker/haproxy.yaml | 44 + puppet/services/pacemaker/heat-api-cfn.yaml | 44 + puppet/services/pacemaker/heat-api-cloudwatch.yaml | 44 + puppet/services/pacemaker/heat-api.yaml | 44 + puppet/services/pacemaker/heat-engine.yaml | 45 + puppet/services/pacemaker/horizon.yaml | 41 + puppet/services/pacemaker/keystone.yaml | 45 + puppet/services/pacemaker/manila-share.yaml | 41 + puppet/services/pacemaker/memcached.yaml | 42 + puppet/services/pacemaker/neutron-dhcp.yaml | 46 + puppet/services/pacemaker/neutron-l3.yaml | 46 + puppet/services/pacemaker/neutron-metadata.yaml | 44 + puppet/services/pacemaker/neutron-midonet.yaml | 41 + puppet/services/pacemaker/neutron-ovs-agent.yaml | 42 + puppet/services/pacemaker/neutron-plugin-ml2.yaml | 42 + .../services/pacemaker/neutron-plugin-nuage.yaml | 40 + .../pacemaker/neutron-plugin-opencontrail.yaml | 40 + .../pacemaker/neutron-plugin-plumgrid.yaml | 40 + puppet/services/pacemaker/neutron-server.yaml | 48 + puppet/services/pacemaker/nova-api.yaml | 45 + puppet/services/pacemaker/nova-conductor.yaml | 45 + puppet/services/pacemaker/nova-consoleauth.yaml | 45 + puppet/services/pacemaker/nova-scheduler.yaml | 45 + puppet/services/pacemaker/nova-vnc-proxy.yaml | 45 + puppet/services/pacemaker/rabbitmq.yaml | 41 + puppet/services/pacemaker/sahara-api.yaml | 45 + puppet/services/pacemaker/sahara-engine.yaml | 45 + puppet/services/rabbitmq.yaml | 93 + puppet/services/sahara-api.yaml | 92 + puppet/services/sahara-base.yaml | 82 + puppet/services/sahara-engine.yaml | 51 + puppet/services/services.yaml | 109 + puppet/services/snmp.yaml | 45 + puppet/services/swift-base.yaml | 33 + puppet/services/swift-proxy.yaml | 117 + puppet/services/swift-ringbuilder.yaml | 65 + puppet/services/swift-storage.yaml | 92 + puppet/services/time/ntp.yaml | 41 + puppet/services/time/timezone.yaml | 34 + puppet/services/tripleo-firewall.yaml | 39 + puppet/services/tripleo-packages.yaml | 34 + puppet/services/vip-hosts.yaml | 56 + puppet/swift-devices-and-proxy-config.yaml | 45 - puppet/swift-storage-post.yaml | 77 - puppet/swift-storage.yaml | 422 -- puppet/vip-config.yaml | 45 - roles_data.yaml | 165 + tools/yaml-validate.py | 56 +- validation-scripts/all-nodes.sh | 27 +- 396 files changed, 23981 insertions(+), 12405 deletions(-)

1 0

[new][openstackansible] openstack-ansible-plugins 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are pumped to announce the release of: openstack-ansible-plugins 14.0.0: plugins for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "py_pkgs" lookup plugin now has strict ordering for requirement files discovered. These files are used to add additional requirements to the python packages discovered. The order is defined by the constant, "REQUIREMENTS_FILE_TYPES" which contains the following entries, 'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt', 'global-requirements.txt', 'global-requirement- pins.txt'. The items in this list are arranged from least to most priority. * The ability to support login user domain and login project domain has been added to the keystone module. # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * The config_template action plugin now has a new option to toggle list extension for JSON or YAML formats. The new option is "list_extend" and is a boolean. The default is True which maintains the existing API. * An opportunistic Ansible execution strategy has been implemented. This allows the Ansible linear strategy to skip tasks with conditionals faster by never queuing the task when the conditional is evaluated to be false. * The Ansible SSH plugin has been modified to support running commands within containers without having to directly ssh into them. The change will detect presence of a container. If a container is found the physical host will be used as the SSH target and commands will be run directly. This will improve system reliability and speed while also opening up the possibility for SSH to be disabled from within the container itself. Bug Fixes ********* * The ability to support login user domain and login project domain has been added to the keystone module. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1574000 # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom Changes in openstack-ansible-plugins 13.0.0..14.0.0 --------------------------------------------------- 54270a0 Accept ansible_host in linear strategy ebbea84 Use centralised test scripts c9bcca3 Support more than one flat network a7825ec Update .gitreview for stable/newton 544adfe Update testing bits for consistency f25bf23 Human readable logs should be removed 5e0fd58 Update homepage with developer documentation page 7af6721 Fix regression for proprietary packages 65390c6 Implement distro package lookups and index 80beba8 Add option to toggle list extensions f974f7a Deserialize glance image_properties ffb02cf Fix assumption that the main OSA inventory will be used cb01efe Implement an opportunistic strategy and connection plugin 7e931aa Added SNI support for ansible_plugins via OS packages accc469 Add indexing of individual package keys 7a88090 Account for the move of other-requirements.txt to bindep.txt 29668ca Adding Vagrantfile for local testing d801f78 Ansible 2.1.1 role testing fb67f22 Move other-requirements.txt to bindep.txt 388dfe1 [DOCS] Updating plugin role docs 0464815 Add test playbook for filters 3ec922c Update py_pkgs to set options group membership and itemise global pins 523afbd Fix py_pkgs lookup to not include optional packages bc73b33 Remove dev-requirements.txt c8e25f5 Updated py_pkgs to index requirement files c7b7169 Update dist-sort module for better effectiveness 9913803 Omit the "other-requirements.txt" 7f50658 Update the lookup plugin to force dep ordering 54ce4ce Updated from global requirements aa69b10 Add the Ansible human_log call back plugin c44f2b1 Pin test-requirements to match OpenStack requirements 7d059fd Optionally include image properties 7d534a4 Adding ability to set 'properties' via Glance a72d40e Provide type for boolean module parameters 58d9d83 Bring delete and update functions to keystone module 07d600d Support users without projects in keystone library f975da2 Revert "Support users without projects in keystone library" 2e1492a Support users without projects in keystone library 627b70b Add .swp files to .gitignore e20add1 Add dependencies for paramiko 2.0 dce1b35 Add user and project login domains to keystone 79f3735 Adjust release note for config template 4a70773 Add reno scaffolding for release notes management f946160 Added option to support case-insensitive keys cd47eda Update the config_template plugin 41778e3 Fix NoneType with no subnet allocation ranges 4cd932a Add allocation pool support to neutron module c962fd2 Add logic to NOT build "proprietary" packages 5d610fd Update py_pkgs.py to support ansible v2.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 16 +- .gitreview | 2 +- README.rst | 77 +--- Vagrantfile | 13 + action/_v1_config_template.py | 26 +- action/_v2_config_template.py | 47 +- bindep.txt | 38 ++ connection/ssh.py | 127 ++++++ dev-requirements.txt | 6 - examples/example.ini | 5 + examples/playbook.yml | 4 + library/config_template | 10 + library/dist_sort | 27 +- library/glance | 15 +- library/keystone | 164 +++++-- library/neutron | 25 +- library/provider_networks | 19 +- lookup/py_pkgs.py | 477 ++++++++++++++------- manual-test.rc | 33 ++ other-requirements.txt | 16 - ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 +- .../notes/force-dep-order-2c529683509e45da.yaml | 9 + ..._user_and_project_support-e35b0b335b6522e9.yaml | 42 ++ .../notes/list-extend-toggle-46a75ded97b7ce02.yaml | 6 + ...egy-and-connection-plugin-bc476fa3607dcc4a.yaml | 11 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 274 ++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- strategy/linear.py | 156 +++++++ test-requirements.txt | 18 +- tox.ini | 139 ++++-- 46 files changed, 1833 insertions(+), 403 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ce31268..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +1,9 @@ -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -5,3 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_heat 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are amped to announce the release of: openstack-ansible-os_heat 14.0.0: os_heat for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_heat role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "heat_package_state" to "present". Upgrade Notes ************* * Installation of heat and its dependent pip packages will now only occur within a Python virtual environment. The "heat_venv_bin" and "heat_venv_enabled" variables have been removed. * The variable "heat_apt_packages" has been renamed to "heat_distro_packages". * The os_heat role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "heat_package_state" should be set to "present". * The database create and user creates have been removed from the "os_heat" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_heat 13.0.0..14.0.0 --------------------------------------------------- 9c5c0f1 Remove 'ignore_errors: true' in favor of 'failed_when: false' ea449fa Use dictionary for service group mappings dd6f8a9 Add os_heat role functional tests for gate 84fd16c Update tox.ini tests target for stable/newton 695cdca Update ansible-role-requirements to stable/newton 691b3aa Update default git branch to stable/newton 555ea3f Use centralised test scripts 3d22327 Update UPPER_CONSTRAINTS_FILE for stable/newton 74d89d5 Update .gitreview for stable/newton f71a7a8 Revert dynamic includes for inventory-based conditionals 93f9664 Force Ansible to use dynamic includes e7e8c34 Update homepage with developer documentation page 4b4403c Ansible 2.1.1 role testing 3668e42 Compress test execution logs 7164ef4 Update paste, policy and rootwrap configurations 2016-09-08 8878e8c Rename package lists (and related vars) appropriately 159a3de Enable log collection after functional testing e21acdf Make all linting tests use upper-constraints 8c72db4 Added SNI support for os_heat via OS packages 173cc07 Remove apt update from Vagrantfile 4f76e2c Add apt-get update to run_tests 99e431d Updated from global requirements e40a508 Add python packages for SNI support in tests 6043546 [DOCS] Use new documenation tree structure f679c8b Update paste, policy and rootwrap configurations 2016-08-15 87ee222 Move other-requirements.txt to bindep.txt 269d4fd Include ansible commands for ansible linting ffce76c Disable stderr logging c5bd643 Add project group to role cb04138 Add ability to change apt/yum package state fe2bc8d Ensure that mode is a string 6e50817 Fix ansible performance issue f0a8f2e Fix bug in RPC config that broke Rabbit SSL support 4a4fe13 Ensure that doc linting is included in the linters test a8a3d6a Define default region name. 87b4cea Provide default for rabbitmq telemetry password 683b096 Support service-specific rabbitmq clusters ebb8de7 Remove openstack_hosts from test requirements f90415f Optimise pip install tasks ece0354 Use plugins repo version of the human_log callback plugin 11adb31 Updated from global requirements d682195 Remove duplicates from .gitignore 8f7aa61 Update paste, policy and rootwrap configurations 2016-07-14 bb5f060 Implement doc8 checks for docs cacb9c1 Cleanup/standardize usage of tags 22955b6 Update sphinx configuration 2766daf Update tox configuration 7b3cca8 Only install to virtual environment ba9c72a Fix ansible-lint complaint about directory permissions 0933020 Update paste, policy and rootwrap configurations 2016-07-01 69023f3 Remove references to unused vars 3081ee7 Fail fast when required secrets are not present 0dbbcd5 DOC - Adopting the common role documentation pattern 962df05 Update paste, policy and rootwrap configurations 2016-06-17 78ad51e Pin test-requirements to match OpenStack requirements f659c82 Implement Xenial Support aa04e70 Remove pip_lock_down dependency 3383a91 Consistency for multi-os in the includes 42c11cb Remove unnecessary overrides of service variables b2f96d7 Verbose option has been deprecated from oslo.log 47702db Removed the db create tasks b45b74e Use keystone library for heat_stack_domain_admin 91ef9aa Add .swp files to .gitignore 9f04244 Change pip install task state to 'latest' 75c2484 Remove py_from_git role 3aabf5b Add dependencies for paramiko 2.0 c057041 Multi-distro pattern for os_heat role 78500be Update paste, policy and rootwrap configurations 2016-04-22 7085e74 Ansible 2.x - Address deprecation warning of bare variables d891809 Remove Liberty releasenote index eb43bc1 blacklist Ansible 1.9.6 b0a78fd Update min_ansible_version to 1.9 bba7cb1 Add reno scaffolding for release notes management b388875 Fix heat trustee configuration e6112a8 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 19 +- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 85 ++++--- examples/playbook.yml | 11 + handlers/main.yml | 23 +- manual-test.rc | 33 +++ meta/main.yml | 12 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-7c24aa813289aa40.yaml | 3 + ...os-heat-only-install-venv-e3e8e466dd67c2bc.yaml | 5 + ...package-list-name-changes-b484be7645bbe66a.yaml | 4 + .../notes/package-state-441864557ee5d75b.yaml | 13 + .../removed-db-create-tasks-276095a2293ed4ee.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/heat_db_setup.yml | 30 --- tasks/heat_domain_setup.yml | 86 +++---- tasks/heat_init_common.yml | 29 +++ tasks/heat_init_systemd.yml | 56 ++++ tasks/heat_init_upstart.yml | 26 ++ tasks/heat_install.yml | 138 ++-------- tasks/heat_post_install.yml | 18 -- tasks/heat_pre_install.yml | 29 +-- tasks/heat_service_add.yml | 28 +- tasks/heat_service_setup.yml | 19 -- tasks/heat_upstart_common_init.yml | 46 ---- tasks/heat_upstart_init.yml | 54 ---- tasks/install-apt.yml | 37 +++ tasks/main.yml | 61 ++++- templates/environment.d/default.yaml.j2 | 7 +- templates/heat-systemd-init.j2 | 25 ++ templates/heat-systemd-tempfiles.j2 | 4 + templates/heat-upstart-init.j2 | 28 +- templates/heat.conf.j2 | 18 +- templates/policy.json.j2 | 15 +- templates/templates/AWS_CloudWatch_Alarm.yaml.j2 | 26 +- templates/templates/AWS_RDS_DBInstance.yaml.j2 | 6 +- test-requirements.txt | 19 +- tox.ini | 162 ++++++------ vars/ubuntu-14.04.yml | 21 ++ vars/ubuntu-16.04.yml | 21 ++ 64 files changed, 1350 insertions(+), 955 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_horizon 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are exuberant to announce the release of: openstack-ansible-os_horizon 14.0.0: OpenStack Horizon role for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_horizon role now has support for the horizon ironic-ui dashboard. The dashboard may be enabled by setting "horizon_enable_ironic_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * The os_horizon role now has support for the horizon magnum-ui dashboard. The dashboard may be enabled by setting "horizon_enable_magnum_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * The "horizon_keystone_admin_roles" variable is added to support the "OPENSTACK_KEYSTONE_ADMIN_ROLES" list in the horizon_local_settings.py file. * Deployers can now blacklist certain Nova extensions by providing a list of such extensions in "horizon_nova_extensions_blacklist" variable, for example: horizon_nova_extensions_blacklist: - "SimpleTenantUsage" * Horizon now has the ability to set arbitrary configuration options using global option "horizon_config_overrides" in YAML format. The overrides follow the same pattern found within the other OpenStack service overrides. General documentation on overrides can be found here (http://docs.openstack.org/developer/openstack-ansible/install- guide/configure-openstack.html#overriding-openstack-configuration- defaults). * The "os_horizon" role now supports configuration of custom themes. Deployers can use the new "horizon_custom_themes" and "horizon_default_theme" variables to configure the dashboard with custom themes and default to a specific theme respectively. * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True * Horizon now has a boolean variable named "horizon_enable_ha_router" to enable Neutron HA router management. * Horizon's IPv6 support is now enabled by default. This allows users to manage subnets with IPv6 addresses within the Horizon interface. Deployers can disable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: False Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * The horizon next generation instance management panels have been enabled by default. This changes horizon to use the upstream defaults instead of the legacy panels. Documentation can be found here (http://docs.openstack.org/developer/horizon/topics/settings.html #launch-instance-ng-enabled). * Added "horizon_apache_custom_log_format" tunable to the os-horizon role for changing CustomLog format. Default is "combined". * The os_horizon role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "horizon_package_state" to "present". * The Sahara dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_sahara_ui: True Upgrade Notes ************* * The default horizon instance launch panels have been changed to the next generation panels. To enable legacy functionality set the following options accordingly: horizon_launch_instance_legacy: True horizon_launch_instance_ng: False * Installation of horizon and its dependent pip packages will now only occur within a Python virtual environment. The "horizon_venv_bin", "horizon_venv_enabled", "horizon_venv_lib_dir", and "horizon_non_venv_lib_dir" variables have been removed. * The variable "horizon_apt_packages" has been renamed to "horizon_distro_packages". * The os_horizon role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "horizon_package_state" should be set to "present". * The database and user creates have been removed from the "os_horizon" role. These tasks have been relocated to the playbooks. Security Issues *************** * Horizon disables password autocompletion in the browser by default, but deployers can now enable autocompletion by setting "horizon_enable_password_autocomplete" to "True". Bug Fixes ********* * The standard collectstatic and compression process in the os_horizon role now happens after horizon customizations are installed, so that all static resources will be collected and compressed. Changes in openstack-ansible-os_horizon 13.0.0..14.0.0 ------------------------------------------------------ 0001ead Add conditional for multi-domain support 2b0d10a magnum_ui filename changes 04a0e09 Update tox.ini tests target for stable/newton 1ab7462 Update ansible-role-requirements to stable/newton 1958d83 Update default git branch to stable/newton beb356f Use centralised test scripts 691cbf8 Update UPPER_CONSTRAINTS_FILE for stable/newton c7c490c Update .gitreview for stable/newton 020676b Revert dynamic includes for inventory-based conditionals e2f240b Add xenial support to the Vagrantfile 09185c5 Ansible 2.1.1 role testing 1f682b0 Force Ansible to use dynamic includes 988006d Update homepage with developer documentation page f327437 Compress test execution logs 0b6085c Rename package lists (and related vars) appropriately df0293c Enable log collection after functional testing 02b0439 Enable Sahara panel in Horizon a555868 Make all linting tests use upper-constraints 51cb64f Remove apt update from Vagrantfile 0afea1f Added SNI support for os_horizon role via OS packages c991bcc Updated from global requirements c7ebd28 Add variable override for OPENSTACK_KEYSTONE_ADMIN_ROLES f370ce6 [DOCS] Add project links to README; fix typos c9d245b Add python packages for SNI support in tests f40f7d1 [DOCS] Move horizon docs to roles cc1d885 Move other-requirements.txt to bindep.txt 0883726 Include ansible commands for ansible linting d1dd1aa Add required gettext package for compilemessages 387abfa Compile locale to be able to change language 0b98489 Add Magnum-UI plugin support to Horizon 78215c0 Add project group to role 05daa35 Add ability to change apt/yum package state 961d117 Create nova endpoints for tempest test 4dbde0e Ensure that doc linting is included in the linters test 097c01f Enable Horizon Ironic dashboard plugin ee4d926 Removing unused test playbook 7f7ad45 Remove openstack_hosts from test requirements 9b4c1cc Optimise pip install tasks e241c37 Use plugins repo version of the human_log callback plugin b4cb4aa Updated from global requirements 984fae7 Remove duplicates from .gitignore ad77b18 Implement doc8 checks for docs 87b7057 Update sphinx configuration cc71003 Updated tests and role for Xenial support 605f176 Cleanup/standardize usage of tags 4937692 Add support for custom Horizon themes 9a104b5 Update tox configuration 4559edf Only install to virtual environment 3983911 Added variable to allow for arbitrary HORIZON_CONFIG dfda6bc Compress static files after customizations 6a84a06 Add enable_lb option back to horizon 16b8d25 Clean up container cache prep in tests 4dcf0fa Pin test-requirements to match OpenStack requirements 583c370 Add support for CustomLog format modification cec81d7 Remove pip_lock_down dependency 2c67361 Consistency for multi-os in the includes e0d3d44 Add Nova extensions blacklisting 7232b74 Use tempest-horizon plugin c82ef96 Updating os_horizon to use the Multi-Distro framework 42e77ea Removed the db create tasks 4f891b5 Removing unused verbose variable e66542c Use tempest for role testing 7610572 Enable ha router support in Horizon f0dc519 Enable next gneration instance launch in Horizon 1111f3d Enable IPv6 support in Horizon 568debe Enable new LBaaS panel in Horizon 2fe3566 Add .swp files to .gitignore bc92d06 Change pip install task state to 'latest' f30714d Remove py_from_git role 30138c2 Add dependencies for paramiko 2.0 126a7c1 Ansible 2.x - Address deprecation warning of bare variables 62f3f37 Remove Liberty releasenote index deec1c9 Fix server/hostname for RFC 1034/1035 76e009d blacklist Ansible 1.9.6 8667dce Optionally allow autocomplete in Horizon f210743 Add option to enable from VPNaaS in Horizon 5838bfd Update SSL key / cert distribution for Horizon 298f728 Update min_ansible_version to 1.9 afcf852 Add reno scaffolding for release notes management 125f1b0 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + README.rst | 68 +---- Vagrantfile | 29 ++- bindep.txt | 43 ++++ defaults/main.yml | 134 +++++++--- examples/playbook.yml | 32 +++ handlers/main.yml | 2 +- manual-test.rc | 33 +++ meta/main.yml | 12 +- other-requirements.txt | 17 -- releasenotes/notes/.placeholder | 0 ...-ironic-dashboard-support-3eb5168d71e4dddd.yaml | 5 + ...-magnum-dashboard-support-4fcddedffb83bc28.yaml | 5 + ...stone-admin-roles-setting-83198a721c64ee3c.yaml | 5 + ...nova-extensions-blacklist-8ed18f45aba6a7fb.yaml | 11 + .../compress-customization-a7d03162d837085f.yaml | 5 + .../horizon-arbitrary-config-8a36e4bd6818afe1.yaml | 6 + ...ble-password-autocomplete-5f8f78a6c8f1edb3.yaml | 5 + .../horizon_custom_themes-4ee1fd9444b8a5ae.yaml | 6 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 9 + .../make-ha-router-a-toggle-eefd61fc7978240d.yaml | 4 + .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 + .../ng-instance-management-f9134fc283aa289c.yaml | 16 ++ ...apache-log-format-support-34c9ef74b3bcce31.yaml | 5 + ...horizon-only-install-venv-0fd3292d2b61e840.yaml | 6 + ...package-list-name-changes-4a42f561dac5754e.yaml | 4 + .../notes/package-state-fda322f5e667bbec.yaml | 13 + .../removed-db-create-tasks-8ae301041fe46cfb.yaml | 5 + .../sahara-horizon-panel-d80d17da528b4c07.yaml | 9 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/horizon_apache.yml | 16 -- tasks/horizon_db_setup.yml | 33 --- tasks/horizon_install.yml | 147 ++--------- tasks/horizon_post_install.yml | 106 +++++--- tasks/horizon_pre_install.yml | 24 -- tasks/horizon_service_setup.yml | 2 - tasks/horizon_ssl_key_create.yml | 4 - tasks/horizon_ssl_key_distribute.yml | 34 ++- tasks/horizon_ssl_key_store.yml | 32 +-- tasks/horizon_ssl_self_signed.yml | 9 +- tasks/horizon_ssl_user_provided.yml | 9 - tasks/install-apt.yml | 37 +++ tasks/main.yml | 43 +++- templates/horizon-manage.py.j2 | 2 +- templates/horizon_local_settings.py.j2 | 42 ++- templates/openstack_dashboard.conf.j2 | 4 +- test-requirements.txt | 19 +- tox.ini | 166 ++++++------ vars/debian.yml | 29 +++ 71 files changed, 1504 insertions(+), 854 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7f0134b..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 \ No newline at end of file +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_nova 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_nova 14.0.0: os_nova for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_nova role can now deploy the nova-lxd hypervisor. This can be achieved by setting "nova_virt_type" to "lxd" on a per-host basis in "openstack_user_config.yml" or on a global basis in "user_variables.yml". * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". * The os_nova role can now detect a PowerNV environment and set the virtualization type to 'kvm'. * The nova SSH public key distribution has been made a lot faster especially when deploying against very large clusters. To support larger clusters the role has moved away from the "authorized_key" module and is now generating a script to insert keys that may be missing from the authorized keys file. The script is saved on all nova compute nodes and can be found at "/usr/local/bin/openstack- nova-key.sh". If ever there is a need to reinsert keys or fix issues on a given compute node the script can be executed at any time without directly running the ansible playbooks or roles. * The os_nova role can now detect and support basic deployment of a PowerVM environment. This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink package and nova-powervm driver. * Nova UCA repository support is implemented by default. This will allow the users to benefit from the updated packages for KVM. The "nova_uca_enable" variable controls the install source for the KVM packages. By default this value is set to "True" to make use of UCA repository. User can set to "False" to disable. * The os_nova role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "nova_package_state" to "present". Upgrade Notes ************* * Adding a new nova.conf entry, live_migration_uri. This entry will default to a "qemu-ssh://" uri, which uses the ssh keys that have already been distributed between all of the compute hosts. * Cleanup tasks are added to remove the nova console git directories "/usr/share/novnc" and "/usr/share/spice-html5", prior to cloning these inside the nova vnc and spice console playbooks. This is necessary to guarantee that local modifications do not break git clone operations, especially during upgrades. * Installation of nova and its dependent pip packages will now only occur within a Python virtual environment. The "nova_venv_enabled", "nova_venv_bin" variables have been removed. * The os_nova role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "nova_package_state" should be set to "present". * The database create and user creates have been removed from the "os_nova" role. These tasks have been relocated to the playbooks. * The following variables have been renamed in order to make the variable names neutral for multiple operating systems. * nova_apt_packages -> nova_distro_packages * nova_spice_apt_packages -> nova_spice_distro_packages * nova_novnc_apt_packages -> nova_novnc_distro_packages * nova_compute_kvm_apt_packages -> nova_compute_kvm_distro_packages Bug Fixes ********* * The "/var/lib/libvirt/qemu/save" directory is now a symlink to "{{ nova_system_home_folder }}/save" to resolve an issue where the default location used by the libvirt managed save command can result with the root partitions on compute nodes becoming full when "nova image-create" is run on large instances. Other Notes *********** * "nova_libvirt_live_migration_flag" is now phased out. Please create a nova configuration override with "live_migration_tunnelled: True" if you want to force the flag "VIR_MIGRATE_TUNNELLED" to libvirt. Nova "chooses a sensible default" otherwise. * "nova_compute_manager" is now phased out. Changes in openstack-ansible-os_nova 13.0.0..14.0.0 --------------------------------------------------- 6071131 Move ironic pip install into it's own path be0f8ed Remove 'ignore_errors: true' in favor of 'failed_when: false' f313b34 Use dictionary for service group mappings 4813e76 Delegate from first available compute host a085e42 Fix ironic compute_driver 27d42de Ensure that novnc/spice consoles use the public endpoint protocol 38f9ed3 Remove dynamic inclusion from inventory-based service setup 312044e Move "--no-binary libvirt-python" to ansible-tests 77cc5ed Update default git branch to stable/newton 672d398 Run tempest tests a0c1160 Update ansible-role-requirements to stable/newton 3b17a51 Update tox.ini tests target for stable/newton d375b07 Update UPPER_CONSTRAINTS_FILE for stable/newton f79a037 Use centralised test scripts e7bfdb4 Update ironic auth options for Keystone v3 auth ede0832 Update .gitreview for stable/newton 43485ee Revert dynamic includes for inventory-based conditionals bdd4513 Force Ansible to use dynamic includes 35d85e9 Use openstack-ansible-tests for os-nova role dd90521 modify the home-page info with the developer documentation ce6a6eb Remove baremetal rootwrap filters 9e998b5 Fix novnc console include positioning 70d72d6 Force tempest to run serial and retry tests 17f0fa2 [DOCS] Update docs for mixed lxd hypervisors ec5b10f Compress test execution logs f784539 [DOCS] Update PowerVM driver documentation 7862503 Configure qemu when Calico network type is set a8b3c81 Add config template for qemu.conf 1d1c294 Update librabbit package for novnc in 16.04 283fb73 Add pyasn1-modules to powervm pip packages 57cc173 Rename package lists (and related vars) appropriately f6f6299 Enable log collection after functional testing c3c0813 Rename lxc to lxd in various tasks 41c1dbc Change nova_virt_type from lxc to lxd 522ce07 Ensure nova home dir is completely overridable 9581259 Fix linters failure due to etcd role 354147b Clean final newline when distributing SSH keys e13a00c Add project group to role aeeb50a Make all linting tests use upper-constraints 6f3d71b Adopt oslo_cache.memcache_pool as cache backend 33199fb Remove apt update from Vagrantfile 90ace8c Add SNI support via OS packages for os_nova 97f7e37 [DOC] Add clarifying statement on CPU type ac859ec Add apt-get update to run_tests 3e0ec52 [DOCS] Fix link to nova 75d82b6 [DOCS] Moving networking content to nova role docs c970a58 Updated from global requirements 2c641ba Fix race condition when configuring the qemu save directory 7777d81 [DOCS] Refactor of nova role docs f4798ed Add python packages for SNI support in tests 455055a Move other-requirements.txt to bindep.txt 1765c97 Add networking-calico configuration for nova-api-metadata c7a9a1c Fix interface configuration for nova gate 443f1b0 Include ansible commands for ansible linting ec0670b Implement tests for nova-lxd hypervisor d0b3dac Update PowerVM compute driver path 06081df Implement nova-lxd driver ba9b97e Disable stderr logging 3ffa999 Fix bug in RPC config that broke Rabbit SSL support 2529e2a Add ability to change apt/yum package state c0b9e2f Ensure that mode is a string 7872bd7 Fix ansible performance issue ba39ab4 Remove openstack_hosts from test requirements 7598609 If /var/lib/libvirt/qemu/save exists, move it to nova_libvirt_save_path d85ab72 Write script to /var/tmp instead of /usr/local/bin fed503c Set cinder service region. 64e6772 Ensure that doc linting is included in the linters test 8e82812 Allow configuration of multiple rabbit clusters b9d50ce Optimise pip install tasks 7f69cdd Only install to virtual environment e732f40 Updated from global requirements 2974df5 Define keystone region name. 451cd16 Remove Mitaka Deprecated items bda35e7 Improve deployment performance on large clusters 4edfa46 Fix notification_driver option bd0246c Use plugins repo version of the human_log callback plugin 92fac4e Adding a Vagrantfile for local testing 4596234 Update paste, policy and rootwrap configurations 2016-07-14 92aecc5 Move UCA enable and repo URL var to role defaults dc472f3 Update tox configuration 1f7819c Nova role should not default vars outside the nova namespace 9a1486b Make role functional testing more idempotent c41f492 Remove duplicates from .gitignore 3a428e7 Do not install libvirt-python wheel when testing 601c49b Update sphinx configuration dcbc394 Turn SSH auth into the default for live migration e077f1b Filter libvirt in nova.conf. Add nova_powervm module in nova.virt 3991883 Fix ansible-lint complaint about directory permissions bbce047 Update paste, policy and rootwrap configurations 2016-07-01 f7b96c0 Update role to use the Multi-Distro framework bc124ef DOC - Adopting the common role documentation pattern 692821e Remove tags from functional testing playbooks 0b5b8dd Add missing xenial to meta.yml bf12ab4 Replace network_api_class with use_neutron 842a5b4 Clean up container cache prep in tests 4734969 Fix shell command usage fc526ec Pin test-requirements to match OpenStack requirements ff43ff3 Update paste, policy and rootwrap configurations 2016-06-17 2701d29 Address Ansible bare variable usage d69f560 Implement Xenial Support 87c29e0 Remove pip_lock_down dependency a92777f Implement Nova PowerVM Virt Driver 3ad2855 Fix nova_system_group_uid variable name 3a683a0 [GATE UNBLOCKER] Fix virsh default network removal a8d1e41 Always execute Nova virt type detection 14c3be0 Update paste, policy and rootwrap configurations 2016-06-02 e37a680 UCA support for nova compute 2599006 Create symlink for libvirt save directory dd6d11a Remove unnecessary overrides of service variables c6a6672 Detect PowerNV environment 0661aff Add wget to whitelist_externals for tox 9ef8c43 Cleanup Nova console proxy git repos before updating it 0101460 Allow metadata_host to be different to LB VIP 8600a80 Skip unavailable hosts when distributing keys 7e6fa1c Remove python-cephlibs 1a40c1c Removed the db create tasks bfde23d Update paste, policy and rootwrap configurations 2016-05-19 f56180c Verbose option has been deprecated from oslo.log 451fb1c fixing the network issues of nova testing b6371a2 Update tempest test vars 18141c0 Accept host keys for console git tasks 2c1c2f4 Add .swp files to .gitignore 4c2b4b8 Change pip install task state to 'latest' 85b92f8 Add dependencies for paramiko 2.0 5cc44e0 Remove py_from_git role f6f5bed Run specific tempest tests d77ccfa Update paste, policy and rootwrap configurations 2016-04-22 96a443f Use tempest for testing 69974b5 Remove Liberty releasenote index a902528 Fix scheduler_host_manager regression 9aebefb Enabled debug logging functionality for libvirt 9b98745 blacklist Ansible 1.9.6 9d6a212 Nuage nova configuration ansible changes 53486a9 Update min_ansible_version to 1.9 e2fc4b7 Add Nova config for os_ironic role 8f3acb9 Add reno scaffolding for release notes management d15102c Add missing DB configuration for nova-cert and nova-consoleauth aec9d14 Perform online data migrations d10448c Switch defaults/tests to use master branch d84cd55 Update paste, policy and rootwrap configurations 2016-04-03 703402a Update test dependencies Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 27 +- Vagrantfile | 12 + bindep.txt | 41 ++ defaults/main.yml | 270 ++++++++---- examples/playbook.yml | 9 + files/rootwrap.d/baremetal-compute-ipmi.filters | 9 - files/rootwrap.d/baremetal-deploy-helper.filters | 11 - files/rootwrap.d/compute.filters | 12 +- handlers/main.yml | 25 +- manual-test.rc | 33 ++ meta/main.yml | 10 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-nova-lxd-f094438e4bf36d52.yaml | 6 + .../notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 + .../notes/add-xenial-support-3dc3711e5b1bdc34.yaml | 4 + .../notes/detect_power-a6a679c8c3dd3262.yaml | 4 + ...ration-default-set-to-ssh-6add1dbdeea43509.yaml | 5 + .../mitaka-deprecations-72bec69c1395261d.yaml | 10 + ...console-proxy-git-cleanup-cdeffd3f0d040275.yaml | 8 + ...-largecluster-key-inserts-afc8cac63af41087.yaml | 12 + .../notes/nova-powervm-b4eddae30abbd08e.yaml | 5 + .../notes/nova-uca-support-409b2e6afbce47b1.yaml | 10 + .../os_nova-install-venv-6c6c2ba28f67a891.yaml | 5 + .../notes/package-state-38187ec5242a005b.yaml | 13 + .../removed-db-create-tasks-3deea562441871c6.yaml | 5 + ...virt_save_dir_to_nova_dir-3b1b278cb7e5831f.yaml | 8 + .../notes/var-deprecations-417d87b9d386466a.yaml | 11 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/main.yml | 44 +- tasks/nova_compute.yml | 9 + tasks/nova_compute_ironic.yml | 29 ++ tasks/nova_compute_key_distribute.yml | 42 +- tasks/nova_compute_key_populate.yml | 2 +- tasks/nova_compute_kvm.yml | 15 + tasks/nova_compute_kvm_install.yml | 85 ++-- tasks/nova_compute_kvm_virsh_net_remove.yml | 1 + tasks/nova_compute_lxd.yml | 41 ++ tasks/nova_compute_lxd_install.yml | 29 ++ tasks/nova_compute_powervm.yml | 29 ++ tasks/nova_compute_powervm_install.yml | 101 +++++ tasks/nova_console_install.yml | 28 -- tasks/nova_console_novnc_install.yml | 71 +-- tasks/nova_console_spice_install.yml | 36 +- tasks/nova_db_setup.yml | 61 +-- tasks/nova_init_common.yml | 29 ++ tasks/nova_init_systemd.yml | 56 +++ tasks/nova_init_upstart.yml | 26 ++ tasks/nova_install.yml | 108 ++--- tasks/nova_install_apt.yml | 134 ++++++ tasks/nova_post_install.yml | 40 +- tasks/nova_pre_install.yml | 14 +- tasks/nova_service_add.yml | 107 ----- tasks/nova_service_setup.yml | 100 ++++- tasks/nova_upstart_common_init.yml | 46 -- tasks/nova_upstart_init.yml | 102 ----- tasks/nova_virt_detect.yml | 32 +- templates/api-paste.ini.j2 | 35 +- templates/libvirtd.conf.j2 | 6 + templates/lxd-init.sh.j2 | 12 + templates/nova-key-insert.sh.j2 | 31 ++ templates/nova-systemd-init.j2 | 25 ++ templates/nova-systemd-tempfiles.j2 | 4 + templates/nova-upstart-init.j2 | 28 +- templates/nova.conf.j2 | 67 ++- templates/policy.json.j2 | 489 --------------------- templates/qemu.conf.j2 | 20 + test-requirements.txt | 18 +- tox.ini | 170 ++++--- vars/ubuntu-14.04.yml | 100 +++++ vars/ubuntu-16.04.yml | 96 ++++ 104 files changed, 2654 insertions(+), 2136 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..0e69546 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,3 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_cinder 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are overjoyed to announce the release of: openstack-ansible-os_cinder 14.0.0: os_cinder role for OpenStack- Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_cinder" role now supports Ubuntu 16.04. * CentOS7/RHEL support has been added to the os_cinder role. * The os_cinder role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "cinder_package_state" to "present". Upgrade Notes ************* * Installation of cinder and its dependent pip packages will now only occur within a Python virtual environment. The "cinder_venv_enabled" and "cinder_venv_bin" variables have been removed. * The variable "cinder_apt_packages" has been renamed to "cinder_distro_packages". * The variable "cinder_volume_apt_packages" has been renamed to "cinder_volume_distro_packages". * The variable "cinder_lvm_volume_apt_packages" has been renamed to "cinder_lvm_volume_distro_packages". * The os_cinder role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "cinder_package_state" should be set to "present". * The database create and user creates have been removed from the "os_cinder" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_cinder 13.0.0..14.0.0 ----------------------------------------------------- fe3d148 Remove 'ignore_errors: true' in favor of 'failed_when: false' c918fdc Use dictionary for service group mappings 8364cf8 Standardize the testing for Cinder 785d682 Update paste, policy and rootwrap configurations 2016-10-05 e3dcdf1 Update tox.ini tests target for stable/newton ff393a3 Remove duplicate delegate_to 0602cfa Update ansible-role-requirements to stable/newton a55aa0e Remove dynamic inclusion from inventory-based service setup 4ccdc1a Revert dynamic include for inventory-based conditionals cfcfc64 Update default git branch to stable/newton 2439883 Ansible 2.1.1 update 3732ce0 Update UPPER_CONSTRAINTS_FILE for stable/newton a129650 Update .gitreview for stable/newton ac5913b Revert dynamic includes for inventory-based conditionals f420900 Add centos support for os_cinder role e30cc10 Force Ansible to use dynamic includes 1e2d1c0 Update rootwrap filter copy for easier maintenance 640b768 Remove orphan bracket generated when no lvm devices are present 5653c11 use 2 spaces instead of 1 for pkg list. e304504 Correctly namespace the storage_address variable b5ce16c Compress test execution logs 38eecf7 Update paste, policy and rootwrap configurations 2016-09-08 d8daff7 [DOCS] Clarify is_metal is required if using iSCSI 8bc6f64 Rename package lists (and related vars) appropriately 8dbc811 Enable log collection after functional testing 7989209 Allow LVM to scan all loop devices 86fd687 Make all linting tests use upper-constraints 60bac9e Remove apt update from Vagrantfile b8eaf4f Add SNI support via OS packages for os_cinder ca4c887 Add apt-get update to run_tests dc8c4dd Updated from global requirements 88416a9 [DOCS] - Clean up role docs ba067d4 Add python packages for SNI support in tests 6f47415 Update paste, policy and rootwrap configurations 2016-08-15 c1dbc8a [DOCS] Move cinder role docs ce70cc4 Move other-requirements.txt to bindep.txt 74fd1d8 Include ansible commands for ansible linting 33b95d2 Add project group to role 532025c Disable stderr logging 24da899 Define cinder_default_volume_type for gating. c2584fe Drop H303 in flake8 ignore list 03faa40 Add ability to change apt/yum package state eb4a836 Ensure that mode is a string 761e18d Fix ansible performance issue f50100e Update paste, policy and rootwrap configurations 2016-08-01 432948d Fix bug in RPC config that broke Rabbit SSL support e92944b Update paste, policy and rootwrap configurations 2016-07-27 c8262ab Ensure that doc linting is included in the linters test 721e102 Provide default for rabbitmq telemetry password 230a0d6 Allow configuration of multiple rabbit clusters cbb61c0 Remove openstack_hosts from test requirements 47c293e Define keystone region name. 064a42c Optimise pip install tasks 1333fab Support service-specific rabbitmq clusters 0cad7a4 Use plugins repo version of the human_log callback plugin b694b84 Updated from global requirements afecd81 Remove duplicates from .gitignore c6ef839 Implement doc8 checks for docs 62c3a80 Fix cinder role condition when no cinder_volumes 49ca0de Cleanup/standardize usage of tags 27de52f Update sphinx configuration a39d151 Update the virtualenv paths only when we have a new venv 95a0f72 Update tox configuration 7ff7f1c Clean up 16.04 release note df3b479 Only install to virtual environment 920a269 Fix ansible-lint complaint about directory permissions 426ccb9 Update paste, policy and rootwrap configurations 2016-07-01 1afdb43 Simplify cinder.conf logic around cinder_glance_api_servers var ab33572 Update the cinder role to support Ubuntu 16.04 and Systemd ba9ae56 Clean up container cache prep in tests 3aa9aa5 Pin test-requirements to match OpenStack requirements 93e9e08 Update paste, policy and rootwrap configurations 2016-06-17 27a895c Cinder volume type creation race condition 868a6d3 Remove pip_lock_down dependency c72d133 Update paste, policy and rootwrap configurations 2016-06-02 b854bee Consistency for multi-os in the includes 95276fb Remove unnecessary overrides of service variables e3b11b5 Remove python-cephlibs f406aa7 Update paste, policy and rootwrap configurations 2016-05-19 26a236c Verbose option has been deprecated from oslo.log 956683b Added task to install apt packages idependent of the cinder-volume backend 257b7ad Removed the db create tasks c94e356 Update tempest test vars b9559cd Add .swp files to .gitignore c763bac Change pip install task state to 'latest' e944669 Remove py_from_git role 936baf8 Add dependencies for paramiko 2.0 38e3c46 Use tempest for functional testing 563dc74 Update paste, policy and rootwrap configurations 2016-04-22 3d54095 Remove Liberty releasenote index 3e0214f Ansible 2.x - Address deprecation warning of bare variables e2e9eb4 updated cinder.conf for backup catalog info 0478561 blacklist Ansible 1.9.6 f6d4d7a Update min_ansible_version to 1.9 b9b1298 Add reno scaffolding for release notes management 19bc27e Updated role using Multi-Distro framework bd2e947 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 57 +-- Vagrantfile | 7 +- bindep.txt | 43 ++ defaults/main.yml | 68 +-- examples/playbook.yml | 8 + files/rootwrap.d/volume.filters | 29 +- handlers/main.yml | 23 +- manual-test.rc | 33 ++ meta/main.yml | 15 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 releasenotes/notes/os_cinder-1604-support.yaml | 3 + ...os_cinder-centos7-support-732f8feac7241e2a.yaml | 4 + ..._cinder-only-install-venv-914d5655dd645213.yaml | 5 + ...package-list-name-changes-6f74fbf336030242.yaml | 8 + .../notes/package-state-7caea8f1db708a2e.yaml | 13 + .../removed-db-create-tasks-8d931286d6347bc6.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/cinder_backends.yml | 7 +- tasks/cinder_db_setup.yml | 30 -- tasks/cinder_init_common.yml | 32 ++ tasks/cinder_init_systemd.yml | 65 +++ tasks/cinder_init_upstart.yml | 28 ++ tasks/cinder_install.yml | 110 +---- tasks/cinder_install_apt.yml | 32 +- tasks/cinder_install_yum.yml | 50 +++ tasks/cinder_lvm_config.yml | 6 - tasks/cinder_post_install.yml | 35 +- tasks/cinder_pre_install.yml | 23 - tasks/cinder_service_add.yml | 28 +- tasks/cinder_service_setup.yml | 12 - tasks/cinder_upstart_common_init.yml | 46 -- tasks/cinder_upstart_init.yml | 63 --- tasks/main.yml | 57 ++- templates/api-paste.ini.j2 | 25 +- templates/cinder-systemd-init.j2 | 25 ++ templates/cinder-systemd-tempfiles.j2 | 4 + templates/cinder-upstart-init.j2 | 26 +- templates/cinder.conf.j2 | 34 +- templates/lvm.conf.j2 | 4 + templates/policy.json.j2 | 44 +- test-requirements.txt | 19 +- tox.ini | 155 ++++--- vars/redhat-7.yml | 36 ++ vars/ubuntu-14.04.yml | 14 +- vars/ubuntu-16.04.yml | 44 ++ 78 files changed, 1876 insertions(+), 1075 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are glowing to announce the release of: openstack-ansible-rsyslog_server 14.0.0: rsyslog_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "rsyslog_server" role now has support for CentOS 7. * The rsyslog_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_server_package_state" to "present". Upgrade Notes ************* * The rsyslog_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_server_package_state" should be set to "present". * The variable "rsyslog_server_packages" has been replaced by "rsyslog_server_distro_packages". * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Changes in openstack-ansible-rsyslog_server 13.0.0..14.0.0 ---------------------------------------------------------- 792d39c Update tox.ini tests target for stable/newton 1d52620 Update ansible-role-requirements to stable/newton b1d6876 Use centralised test scripts d40c9f6 Update UPPER_CONSTRAINTS_FILE for stable/newton b13723d Update .gitreview for stable/newton 2d196fb update homepage with developer documentation page e005804 Update testing bits for consistency ba7b4b4 Compress test execution logs 2e9a460 Separate remote log stream from local 3271242 Yum: Add retry to comply with the until loop 02eebf7 Enable log collection after functional testing d46d7ea Rename package lists (and related vars) appropriately 37ba469 Make all linting tests use upper-constraints 870726a Add SNI support to rsyslog_server role via OS packages 6445c24 Add apt-get update to run_tests 2bf6a91 Updated from global requirements 78aa1d1 Add python packages for SNI support in tests e9a93e9 Move other-requirements.txt to bindep.txt 8d41188 [DOCS] Refactor rsyslog_server Docs 40cb670 Include ansible commands for ansible linting b4430a1 Add ability to change apt/yum package state c56338a Ensure that doc linting is included in the linters test cd16029 Use plugins repo version of the human_log callback plugin 4d62800 Updated from global requirements ed1cf68 Remove duplicates from .gitignore 118fb2d Implement doc8 checks for docs 05e89a7 Update sphinx configuration 6f7ffc4 Update tox configuration 59fe3f3 Skip lint check for yum clean task 480fa37 Add CentOS 7 support b89144d Pin test-requirements to match OpenStack requirements b1e2bb0 Address Ansible bare variable usage 12ec710 Consistency for multi-os in the includes 7aa50b6 Update role metadata 5a6cbec Add .swp files to .gitignore 70903b6 Add dependencies for paramiko 2.0 34ce58b Remove Liberty releasenote index 7016f43 blacklist Ansible 1.9.6 4904568 Add reno scaffolding for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + README.rst | 21 +- bindep.txt | 41 +++ defaults/main.yml | 11 + examples/playbook.yml | 6 + manual-test.rc | 33 +++ meta/main.yml | 5 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../notes/centos-7-support-d96233f41f63cfb8.yaml | 3 + .../notes/package-state-48e933a395bbdc0c.yaml | 13 + .../notes/package_var_rename-9a55f7030595fdef.yaml | 4 + ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install-apt.yml | 4 +- tasks/install-yum.yml | 7 +- tasks/main.yml | 2 + templates/os_aggregate_storage.j2 | 2 +- templates/rsyslog.conf.j2 | 59 ++--- test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 2 +- vars/redhat.yml | 2 +- 37 files changed, 707 insertions(+), 188 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are enthusiastic to announce the release of: openstack-ansible-rabbitmq_server 14.0.0: rabbitmq_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "rabbitmq_server" now supports a configurable inventory host group. Deployers can override the "rabbitmq_host_group" variable if they wish to use the role to create additional RabbitMQ clusters on a custom host group. * The "rabbitmq_server" role now supports configuring HiPE compilation of the RabbitMQ server Erlang code. This configuration option may improve server performance for some workloads and hardware. Deployers can override the "rabbitmq_hipe_compile" variable, setting a value of "True" if they wish to enable this feature. * The rabbitmq_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rabbitmq_package_state" to "present". * The "rabbitmq_server" role now supports deployer override of the RabbitMQ policies applied to the cluster. Deployers can override the "rabbitmq_policies" variable, providing a list of desired policies. Upgrade Notes ************* * The rabbitmq_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rabbitmq_package_state" should be set to "present". Deprecation Notes ***************** * The "rabbitmq_apt_packages" variable has been deprecated. "rabbitmq_dependencies" should be used instead to override additional packages to install alongside rabbitmq-server. Changes in openstack-ansible-rabbitmq_server 13.0.0..14.0.0 ----------------------------------------------------------- a3bcb49 Remove 'ignore_errors: true' in favor of 'failed_when: false' fc1790a Update tox.ini tests target for stable/newton 4e9aa5d Update ansible-role-requirements to stable/newton 474d201 Use centralised test scripts 62a0490 Update UPPER_CONSTRAINTS_FILE for stable/newton 1e54c81 Update .gitreview for stable/newton 811173b Revert dynamic includes for inventory-based conditionals 17ba3ef Force Ansible to use dynamic includes 9d389bb Remove test-install-openstack-hosts ba5687c modify the home-page info with the developer documentation 2d251cf Ansible 2.1.1 role testing cff36f6 Clarify task name d2dc31b delete python bytecode including pyo before every test run 716494e Adjust file descriptor limit when systemd is used e533c25 Compress test execution logs 75d8dac Rabbit policies now overrideable by deployers 37c741e Enable HiPE compile configuration 9596eb5 Adding Vagrantfile for local testing c1a97ab Allow configuration of rabbitmq plugins dbcd098 Enable log collection after functional testing 9ccc0ee Add collect_statistics_interval, rates_mode in rabbitmq.config template 478cc72 Upgrade RabbitMQ Server to 3.6.5 46950a6 Make all linting tests use upper-constraints d01e58a Updated from global requirements 9db4526 Added SNI support for rabbitmq_server role via OS packages e79d8b2 Add python packages for SNI support in tests 5d47675 Include ansible commands for ansible linting 4f8b096 Move other-requirements.txt to bindep.txt 7d3cce0 [DOCS] Move RabbitMQ role docs 231331b Add pip_install meta-dep to solve SNI issues 35b4ae0 Update the rabbitmq modules to use the node name 8adfab5 Add ability to change apt/yum package state 01d6210 Updated from global requirements 4c14f1e Fix get_url SNI issues in CentOS 7 7f3acaf Ensure that doc linting is included in the linters test bb1fd16 Really fix localhost line in /etc/hosts 67360bb Write localhost line in /etc/hosts when testing e0f20a5 Fix D005 error b1ea2ce Fix deprecation warning for undefined variables 91494d6 Remove pip_install meta-dependency 32d01ca Remove unnecessary package installation 33479f1 Use plugins repo version of the human_log callback plugin 580b998 Remove duplicates from .gitignore 343f4dc Updated from global requirements e4644a1 Make rabbitmq inventory group configurable 423347c Implement doc8 checks for docs cfaf4f8 Update sphinx configuration b42372b Upgrade RabbitMQ Server to 3.6.3 eb495e4 Update tox configuration 66d0530 Reload systemd after installing rabbitmq 16aee69 Clean up container cache prep in tasks 5bca9cb Pin test-requirements to match OpenStack requirements 0a48c46 Address Ansible bare variable usage 1994d6b Consistency for multi-os in the includes 0b1c38a Upgrade RabbitMQ Server to 3.6.2 0f06112 Add skip_ansible_lint tags for error ANSIBLE0006 d6a1f3d Multi-distro framework for rabbitmq_server role 5dc6795 install rabbitmq-server in serial d036e44 remove unused test-upgrade.yml 4da96df Add .swp files to .gitignore cf71022 Change pip install task state to 'latest' 1b9035a Reorganize test playbooks a9d5e06 Add dependencies for paramiko 2.0 6806e7c Add executable bit to run_tests.sh f171869 Remove Liberty releasenote index 0679db0 Fix server/hostname for RFC 1034/1035 c76ce3f blacklist Ansible 1.9.6 51639e8 Add reno scaffolding for release notes management 8a60b53 Remove nova mentions from tasks and tags Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 + .gitreview | 1 + README.rst | 38 +-- Vagrantfile | 24 ++ bindep.txt | 41 +++ defaults/main.yml | 66 ++++- examples/playbook.yml | 7 + manual-test.rc | 33 +++ meta/main.yml | 10 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...figurable_inventory_group-9f5b193221b7006d.yaml | 7 + ...ate-rabbitmq_apt_packages-b85ea1b449dc136e.yaml | 5 + .../hipe-compile-option-c100e8676a806950.yaml | 7 + .../notes/package-state-bb93a1d4b272425d.yaml | 13 + .../notes/policy-override-522df5699f09c417.yaml | 6 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install_apt.yml | 51 ++++ tasks/install_yum.yml | 43 ++++ tasks/main.yml | 24 ++ tasks/rabbitmq_cluster.yml | 8 +- tasks/rabbitmq_install.yml | 54 +--- tasks/rabbitmq_post_install.yml | 56 +++- tasks/rabbitmq_pre_install.yml | 17 +- tasks/rabbitmq_set_cookie.yml | 2 + tasks/rabbitmq_ssl_key_distribute.yml | 4 +- tasks/rabbitmq_ssl_key_store.yml | 5 +- tasks/rabbitmq_ssl_self_signed.yml | 9 +- tasks/rabbitmq_ssl_user_provided.yml | 25 +- tasks/rabbitmq_started.yml | 6 +- tasks/rabbitmq_stopped.yml | 4 +- tasks/rabbitmq_upgrade_check.yml | 43 +++- tasks/rabbitmq_upgrade_prep.yml | 2 +- templates/limits.conf.j2 | 4 + templates/rabbitmq.config.j2 | 9 +- test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 25 ++ vars/redhat.yml | 25 ++ 62 files changed, 1307 insertions(+), 516 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_swift 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are satisfied to announce the release of: openstack-ansible-os_swift 14.0.0: os_swift for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_swift role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "swift_package_state" to "present". * The "fallocate_reserve` option can now be set (in bytes or as a percentage) for swift by using the ``swift_fallocate_reserve" variable in "/etc/openstack_deploy/user_variables.yml". This value is the amount of space to reserve on a disk to prevent a situation where swift is unable to remove objects due to a lack of available disk space to work with. The default value is 1% of the total disk size. * The "openstack-ansible-os_swift" role will now prevent deployers from changing the "swift_hash_path_prefix" and "swift_hash_path_suffix" variables on clusters that already have a value set in "/etc/swift/swift.conf". You can set the new "swift_force_change_hashes" variable to "True" to force the "swift_hash_path_" variables to be changed. We recommend setting this by running the os-swift.yml playbook with "-e swift_force_change_hashes=True", to avoid changing the "swift_hash_path_" variables unintentionally. Use with caution, changing the "swift_hash_path_" values causes end-user impact. * The "os_swift" role has 3 new variables that will allow a deployer to change the hard, soft and fs.file-max limits. the hard and soft limits are being added to the limits.conf file for the swift system user. The fs.file-max settings are added to storage hosts via kernel tuning. The new options are "swift_hard_open_file_limits" with a default of 10240 "swift_soft_open_file_limits" with a default of 4096 "swift_max_file_limits" with a default of 24 times the value of "swift_hard_open_file_limits". * The "pretend_min_part_hours_passed" option can now be passed to swift-ring-builder prior to performing a rebalance. This is set by the "swift_pretend_min_part_hours_passed" boolean variable. The default for this variable is False. We recommend setting this by running the os-swift.yml playbook with "-e swift_pretend_min_part_hours_passed=True", to avoid resetting "min_part_hours" unintentionally on every run. Setting "swift_pretend_min_part_hours_passed" to True will reset the clock on the last time a rebalance happened, thus circumventing the min_part_hours check. This should only be used with extreme caution. If you run this command and deploy rebalanced rings before a replication pass completes, you may introduce unavailability in your cluster. This has an end-user imapct. * While default python interpreter for swift is cpython, pypy is now an option. This change adds the ability to greatly improve swift performance without the core code modifications. These changes have been implemented using the documentation provided by Intel and Swiftstack. Notes about the performance increase can be seen here (https://software.intel.com/en-us/blogs/2016/05/06/doubling-the- performance-of-openstack-swift-with-no-code-changes). * Change the port for devices in the ring by adjusting the port value for services, hosts, or devices. This will not involve a rebalance of the ring. * Changing the port for a device, or group of devices, carries a brief period of downtime to the swift storage services for those devices. The devices will be unavailable during period between when the storage service restarts after the port update, and the ring updates to match the new port. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. * The "os_swift" role will now include the swift "staticweb" middleware by default. * The os_swift role now allows the permissions for the log files created by the swift account, container and object servers to be set. The variable is "swift_syslog_log_perms" and is set to "0644" by default. Upgrade Notes ************* * Installation of swift and its dependent pip packages will now only occur within a Python virtual environment. The "swift_venv_enabled", "swift_venv_bin" variables have been removed. * The variable "swift_apt_packages" has been renamed to "swift_distro_packages". * The os_swift role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "swift_package_state" should be set to "present". * The "swift_fallocate_reserve" default value has changed from 10737418240 (10GB) to 1% in order to match the OpenStack swift default setting. * A new option *swift_pypy_enabled* has been added to enable or disable the pypy interpreter for swift. The default is "false". * A new option *swift_pypy_archive* has been added to allow a pre- built pypy archive to be downloaded and moved into place to support swift running under pypy. This option is a dictionary and contains the URL and SHA256 as keys. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. * When upgrading a Swift deployment from Mitaka to Newton it should be noted that the enabled middleware list has changed. In Newton the "staticweb" middleware will be loaded by default. While the change adds a feature it is non-disruptive in upgrades. Bug Fixes ********* * Previously, the "ansible_managed" var was being used to insert a header into the "swift.conf" that contained date/time information. This meant that swift.conf across different nodes did not have the same MD5SUM, causing "swift-recon --md5" to break. We now insert a piece of static text instead to resolve this issue. * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. Changes in openstack-ansible-os_swift 13.0.0..14.0.0 ---------------------------------------------------- 0e7a7a3 Always setup ResellerAdmin role in keystone 9c7c821 Use dictionary for service mappings 0acc370 Update tox.ini tests target for stable/newton c7c2b44 Update ansible-role-requirements to stable/newton 3893207 Update default git branch to stable/newton 27e8a5c Test address setting code paths c3e89df Use centralised test scripts 097eefb Update UPPER_CONSTRAINTS_FILE for stable/newton bc551d3 Update .gitreview for stable/newton 2a3b184 Fix bool evaluation for dedicated repl network ba28ffd Fix variable for replicator config options 768b47a Force Ansible to use dynamic includes a894972 Type min_part_hours,part_power,repl_number as int 9578aa5 Ensure storage/replication_ip are uniform df4d7ec Simplify networking for MR swift 2257044 Use openstack-ansible-tests repository for Swift 98cb749 Store dedicated replication conditions in var 4ea2993 Fix typo in ceilometer ignore_projects filter 05d6c6f Lookup Gnocchi service before proxy is configured 620edb7 Require lookup of Gnocchi identity when needed 0737337 Add "ansible_host" to each host 10d3ee9 Add check for swift_hash_path_ variables 7adb8b2 Fix missing newline in ceilometermiddleware config 1690a5d Compress test execution logs 1d55c37 Filter Gnocchi traffic optionally 80d2d96 Add Multi Region Swift gate scenario 750ccaa Refactor and improve swift-rings.py 599232a Point auditor service at the replicator config 71122a3 Namespace the telemetry vars for swift 702026d remove the path from the auth_url be77d23 Fix gate replication_network setting e31bec0 Rename package lists (and related vars) appropriately 43a6244 Enable log collection after functional testing aad88fd Make all linting tests use upper-constraints a9d1b9e Remove apt update from Vagrantfile b85cd52 Add SNI support via OS packages for os_swift 6fb5535 Updated from global requirements 49a472e Remove requirements.txt install for testing 388a831 Cleanup/standardize usage of tags eca8876 Add python packages for SNI support in tests d3305e4 Relocate Swift configuration docs to os_swift role 17da038 Move other-requirements.txt to bindep.txt 0b5919e Include ansible commands for ansible linting c926f33 Add pypy test Scenario for Swift 10b0fc1 Disable stderr logging dcb2a2a Properly default pretend_min_part_hours_passed 8256654 Allow swift log file permissions to be set 85a657d Add project group to role ae8ca49 Add package requirements for encryption 9790f9e Add ability to change apt/yum package state c9ea779 Ensure that mode is a string 99bfe27 Fixed simple performance issue and deprecations cce137c Ensure that doc linting is included in the linters test 5afbf0c Define region name. 850b60a Remove openstack_hosts from test requirements b51eb2a Optimise pip install tasks 582175d Support service-specific rabbitmq clusters 6753152 Use plugins repo version of the human_log callback plugin a7fb587 Updated from global requirements da2cd24 Remove duplicates from .gitignore 5e3a46a Implement doc8 checks for docs cce0410 Add pretend_min_part_hours_passed to ring build 5f9c83a Update sphinx configuration 022b62f Add options for configuring file limits in swift 5140ede Address Ansible bare variable usage efd2960 Update tox configuration eb04bf1 Refactor Swift ring build & check tasks 9d30bb3 Only install to virtual environment 7657961 Fix ansible-lint complaint about directory permissions 2ba929f Fix swift ring distribute 203743e add bool to var: swift_ceilometer_enabled d0c001c Implement Xenial Support bb17313 Updated swift + pypy 288500c Skip unavailable hosts when distributing keys 5a39413 Clean up container cache prep in tasks d142d36 Pin test-requirements to match OpenStack requirements 2dc3514 Make ansible managed line in swift.conf static 1dcc63d Adding missing / to swift rabbit connection string 6169255 Remove pip_lock_down dependency 9380862 Consistency for multi-os in the includes 38b510c Add staticweb to the default middleware list 69759b2 Updating os_swift to use the Multi-Distro framework daeea3c Set functional-test directory based on var 97a5b6d Verbose option has been deprecated from oslo.log 60b7b83 Enable pypy to be used with swift 53027de Setup rsync module per object server drive 292c443 Set fallocate_reserve to match upstream default be739c5 Refactor os_swift testing 03a5640 Add .swp files to .gitignore cf882fe Change pip install task state to 'latest' 167bf69 Add dependencies for paramiko 2.0 db4ad90 Remove XFS filesystem from the daily mlocate cron job 2c9e0d2 Add fucntional tests for swift c749241 Remove Liberty releasenote index 1a12be6 blacklist Ansible 1.9.6 81aecda Expose and set a default fallocate_reserve value e53ac82 Resolve issues with swift tests fd3aeae Add reno scaffolding for release notes management 0b43cdf Switch defaults/tests to use master branch 462d526 Add ceilometer middleware when ceilometer enabled 1e15882 Clean up deprecation warning in swift proxy 486adbe Include reseller admin role correctly cc81926 Adding Vagrantfile for local developer testing Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + CONTRIBUTING.rst | 49 ++- README.rst | 25 +- Vagrantfile | 8 + bindep.txt | 41 +++ defaults/main.yml | 233 +++++++++----- examples/playbook.yml | 8 + handlers/main.yml | 55 +--- manual-test.rc | 33 ++ meta/main.yml | 11 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-e285a643a39f0438.yaml | 4 + ...s_swift-only-install-venv-fdd5d41759433cf8.yaml | 5 + ...package-list-name-changes-e6f88d12f3bd9fa0.yaml | 4 + .../notes/package-state-f2309b07440d0ae8.yaml | 13 + .../notes/swift-conf-b8dd5e1199f8e4a8.yaml | 9 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 11 + .../swift-force-hash-change-45b09eeb8b0368a6.yaml | 14 + .../swift-fs-file-limits-a57ab8b4c3c944e4.yaml | 11 + .../swift-pretend-mph-passed-7e5c15eeb35861c3.yaml | 17 ++ .../notes/swift-pypy-support-9706519c4b88a571.yaml | 15 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + .../swift-rings-port-change-4a95bbd9b63fb201.yaml | 11 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + .../swift-staticweb-support-b280fbebf271820b.yaml | 9 + .../swift-syslog-log-perms-5a116171a1adeae3.yaml | 6 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.py | 11 +- tasks/install-apt.yml | 37 +++ tasks/main.yml | 104 +++++-- tasks/swift_calculate_addresses.yml | 131 ++++++++ tasks/swift_check_hashes.yml | 55 ++++ tasks/swift_command_check.yml | 30 -- tasks/swift_init_common.yml | 33 ++ tasks/swift_init_systemd.yml | 56 ++++ tasks/swift_init_upstart.yml | 26 ++ tasks/swift_install.yml | 162 ++-------- tasks/swift_key_distribute.yml | 9 +- tasks/swift_key_populate.yml | 6 - tasks/swift_key_setup.yml | 7 - tasks/swift_post_install.yml | 39 +-- tasks/swift_pre_install.yml | 53 ++-- tasks/swift_proxy_hosts.yml | 38 ++- tasks/swift_pypy_setup.yml | 74 +++++ tasks/swift_rings.yml | 9 +- tasks/swift_rings_build.yml | 50 +-- tasks/swift_rings_check.yml | 16 +- tasks/swift_rings_distribute.yml | 28 +- tasks/swift_rings_md5sum.yml | 4 - tasks/swift_rings_post_distribution_check.yml | 50 +-- tasks/swift_service_setup.yml | 32 +- tasks/swift_storage_hosts_account.yml | 78 +---- tasks/swift_storage_hosts_container.yml | 102 +------ tasks/swift_storage_hosts_object.yml | 93 +----- tasks/swift_storage_hosts_setup.yml | 24 +- tasks/swift_sync_post_install.yml | 21 +- tasks/swift_upstart_common_init.yml | 44 --- templates/account-server-replicator.conf.j2 | 8 +- templates/account-server.conf.j2 | 9 +- templates/container-reconciler.conf.j2 | 2 + templates/container-server-replicator.conf.j2 | 8 +- templates/container-server.conf.j2 | 13 +- templates/mlocate-crond-daily.sh.j2 | 21 ++ templates/object-expirer.conf.j2 | 2 + templates/object-server-replicator.conf.j2 | 11 +- templates/object-server.conf.j2 | 16 +- templates/proxy-server.conf.j2 | 26 +- templates/ring.contents.j2 | 39 +-- templates/rsyncd.conf.j2 | 38 +++ templates/swift-dispersion.conf.j2 | 1 + templates/swift-rsyslog.conf.j2 | 2 + templates/swift-systemd-init.j2 | 24 ++ templates/swift-systemd-tempfiles.j2 | 4 + templates/swift-upstart-init.j2 | 31 +- templates/swift.conf.j2 | 2 +- templates/swift_rings.py.j2 | 74 ++--- templates/swift_rings_check.py.j2 | 25 +- test-requirements.txt | 19 +- tox.ini | 236 ++++++++++----- vars/debian.yml | 28 ++ 120 files changed, 3537 insertions(+), 1510 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_neutron 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_neutron 14.0.0: os_neutron role for OpenStack- Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_neutron" role now determines the default configuration for openvswitch-agent "tunnel_types" and the presence or absence of "local_ip" configuration based on the value of "neutron_ml2_drivers_type". Deployers may directly control this configuration by overriding the "neutron_tunnel_types" variable . * The "os_neutron" role now configures neutron ml2 to load the "l2_population" mechanism driver by default based on the value of "neutron_l2_population". Deployers may directly control the neutron ml2 mechanism drivers list by overriding the "mechanisms" variable in the "neutron_plugins" dictionary. * The LBaaSv2 service provider configuration can now be adjusted with the "neutron_lbaasv2_service_provider" variable. This allows a deployer to choose to deploy LBaaSv2 with Octavia in a future version. * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Neutron BGP dynamic routing plugin can now optionally be deployed and configured. Please see OpenStack Networking Guide: BGP dynamic routing (http://docs.openstack.org/networking-guide/config-bgp- dynamic-routing.html) for details about what the service is and what it provides. * The Project Calico Neutron networking plugin is now integrated into the "os_neutron" role. This can be activated using the instructions located in the role documentation. * The "os_neutron" role will now default to the OVS firewall driver when "neutron_plugin_type" is "ml2.ovs" and the host is running Ubuntu 16.04 on PowerVM. To override this default behavior, deployers should define "neutron_ml2_conf_ini_overrides" and 'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example below neutron_ml2_conf_ini_overrides: securitygroup: firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver neutron_openvswitch_agent_ini_overrides: securitygroup: firewall_driver: iptables_hybrid * Neutron VPN as a Service (VPNaaS) can now optionally be deployed and configured. Please see the OpenStack Networking Guide (http://docs.openstack.org/mitaka/networking-guide/) for details about the what the service is and what it provides. See the VPNaaS Install Guide (http://docs.openstack.org/developer/openstack-ansible /install-guide/configure-network-services.html#virtual-private- network-service-optional) for implementation details. * Support for Neutron distributed virtual routing has been added to the "os_neutron" role. This includes the implementation of Networking Guide's suggested agent configuration. This feature may be activated by setting "neutron_plugin_type: ml2.ovs.dvr" in "/etc/openstack_deploy/user_variables.yml". * Open vSwitch driver support has been implemented. This includes the implementation of the appropriate Neutron configuration and package installation. This feature may be activated by setting "neutron_plugin_type: ml2.ovs" in "/etc/openstack_deploy/user_variables.yml". * The os_neutron role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "neutron_package_state" to "present". * The LBaaSv2 device driver is now set by the Ansible variable "neutron_lbaasv2_device_driver". The default is set to use the "HaproxyNSDriver", which allows for agent-based load balancers. * A new variable is supported in the "neutron_services" dictionary called "service_conf_path". This variable enables services to deploy their config templates to paths outside of /etc/neutron by specifying a directory using the new variable. Upgrade Notes ************* * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Database migration tasks have been added for the dynamic routing neutron plugin. * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * The variable "neutron_agent_mode" has been removed from the "os_neutron" role. The appropriate value for "l3_agent.ini" is now determined based on the "neutron_plugin_type" and host group membership. * The variable "neutron_linuxbridge" has been removed as it is no longer used. * The variable "neutron_driver_interface" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_driver_firewall" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_ml2_mechanism_drivers" has been removed. The appropriate value for ml2_conf.ini is now determined based on the "neutron_plugin_type". * The Neutron L3 Agent configuration for the handle_internal_only_routers variable is removed in order to use the Neutron upstream default setting. The current default for handle_internal_only_routers is True, which does allow Neutron L3 router without external networks attached (as discussed per https://bugs.launchpad.net/neutron/+bug/1572390) * Installation of neutron and its dependent pip packages will now only occur within a Python virtual environment. The "neutron_venv_enabled", "neutron_venv_bin", "neutron_non_venv_lib_dir" and "neutron_venv_lib_dir" variables have been removed. * The variable "neutron_apt_packages" has been renamed to "neutron_distro_packages". * The variable "neutron_lbaas_apt_packages" has been renamed to "neutron_lbaas_distro_packages". * The variable "neutron_vpnaas_apt_packages" has been renamed to "neutron_vpnaas_distro_packages". * The variable "neutron_apt_remove_packages" has been renamed to "neutron_remove_distro_packages". * The os_neutron role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "neutron_package_state" should be set to "present". * LBaaSv1 has been removed from the "neutron-lbaas" project in the Newton release and it has been removed from OpenStack-Ansible as well. * The database create and user creates have been removed from the "os_neutron" role. These tasks have been relocated to the playbooks. * The Neutron HA tool written by AT&T is no longer enabled by default. This tool was providing HA capabilities for networks and routers that were not using the native Neutron L3HA. Because native Neutron L3HA is stable, compatible with the Linux Bridge Agent, and is a better means of enabling HA within a deployment this tool is no longer being setup by default. If legacy L3HA is needed within a deployment the deployer can set *neutron_legacy_ha_tool_enabled* to **true** to enable the legacy tooling. * Neutron now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "neutron_uca_enable" to "False". Deprecation Notes ***************** * The Neutron HA tool written by AT&T has been deprecated and will be removed in the Ocata release. Bug Fixes ********* * When upgrading it is possible for an old "neutron-ns-metadata- proxy" process to remain running in memory. If this happens the old version of the process can cause unexpected issues in a production environment. To fix this a task has been added to the os_neutron role that will execute a process lookup and kill any "neutron-ns- metadata-proxy" processes that are not running the current release tag. Once the old processes are removed the metadata agent running will respawn everything needed within 60 seconds. Changes in openstack-ansible-os_neutron 13.0.0..14.0.0 ------------------------------------------------------ 9852008 Remove 'ignore_errors: true' in favor of 'failed_when: false' 259423e Set calico wheel name for py_pkgs lookup a9aeb12 Calico is now Felix... who knew?! 8cc4b94 Update tox.ini tests target for stable/newton 81a1613 Revert dynamic include for inventory-based conditionals b16c56a Fix dhcp-agent-list-hosting-net race condition 9588492 Update UPPER_CONSTRAINTS_FILE for stable/newton 4f8d226 Update ansible-role-requirements to stable/newton 2fbe6e7 Fix race condition on starting services e45f77a Use centralised test scripts 3562b0c Update default git branch to stable/newton be35547 Add conditional around the pid clean up process 2848049 Update .gitreview for stable/newton 58bf83c Use openstack-ansible-tests and ansible 2.1.1 370989b Force Ansible to use dynamic includes f6457c3 Update paste, policy and rootwrap configurations 2016-09-20 8bd11ef Update home page link in cfg file f95ff25 Use common log commands for calico tox config 74f2f98 Update paste, policy and rootwrap configurations 2016-09-16 090ab22 Wait for net to be fully instantiated 085713a Add functional testing for Calico 7fdd2a2 Add container logs to the build 4843684 Remove Calico qemu configuration b88e2de Update paste, policy and rootwrap configurations 2016-09-08 3a8b9ff Ensure the nets, subnets and ports are present 52b66dd Compress test execution logs baf636e [DOC] Fix the OVS config file in docs 760dab2 [Docs] Update LBaaSv2 docs for horizon 91a5eff Update paste, policy and rootwrap configurations 2016-08-25 72eea60 Rename package lists (and related vars) appropriately 132402f Enable log collection after functional testing ea0b035 Open vSwitch documentation in Neutron Role 03993a6 Rename remaining references to the neutron_lbaasv2_agent group f9975ac Add the BGP dynamic routing neutron plugin a0b5c6b Project Calico integration b94bd9a Update plumgrid plugin installation from pip to deb ed0836f Make all linting tests use upper-constraints 0c7fad3 Add SNI support via OS packages for os_neutron 8f9b32e [DOCS] Moving networking content to neutron role docs 0db3471 Updated from global requirements 5772632 [DOCS] Add links to README; minor restructure ba878cc Add python packages for SNI support in tests 92bc3ba Move other-requirements.txt to bindep.txt b1674b6 [DOCS] Move over the Neutron Plugins docs 1b8ad7b Update paste, policy and rootwrap configurations 2016-08-15 31a0386 Revert "Add missing packages required for online DB migrations" 4e5dc52 Add missing packages required for online DB migrations 5250cd4 Consolidate Neutron config path in to a single var e604e86 Include ansible commands for ansible linting 67bd7bb Ignore the .vagrant directory f9d40a5 Allow Neutron services to specify config path f02f040 Fix oslo messaging deprecation a597bf0 Disable stderr logging a3a7992 Add project group to role a8f6cf9 Add ability to change apt/yum package state 2b305ed Ensure that mode is a string 5bbf93c Fix ansible performance issue e70cd91 Fix bug in RPC config that broke Rabbit SSL support b86d292 Configure qos extension in openvswitch_agent.ini a70051a Ensure that doc linting is included in the linters test a867d0e Provide default for rabbitmq telemetry password 5b44c5b Make LBaaSv2 service_provider configurable dd64d9e Reduce tox.ini config duplication 1ecde3e Allow configuration of multiple rabbit clusters 13b41a3 Remove LBaaSv1 461788f Enable higher performance I/O through 0bc2e4f Define keystone region name. eb0bb51 Adding func_ovs tox environment for neutron ovs testing ec9d44a Optimise pip install tasks 0bdaa8c Support for Open vSwitch Distributed Virtual Routing 1240dd0 Move UCA repo URL var to role defaults 30899b8 Fix handler case where no old process is found d599df2 Use plugins repo version of the human_log callback plugin 4d26e4a Check host group_names for group membership 7a3bb12 Updated from global requirements 813fe65 Remove duplicates from .gitignore 46474f2 Update paste, policy and rootwrap configurations 2016-07-14 667f746 Remove duplicate task for sudoers template c24f01f Implement doc8 checks for docs 7c275ee Update sphinx configuration 744270e Cleanup/standardize usage of tags 4918c7f Deprecate the deployment of the AT&T neutron HA tool 9a34f27 Remove static log-file parameter from init c2f9590 Rely on namespaced vars for rabbitmq 163a8ea Update the virtualenv paths only when we have a new venv c447d00 Switch to backticks in release note 0b87211 Use UCA for non-OVS neutron c357ce1 Update tox configuration e5a67a7 Only install to virtual environment 86fc72b Cleanup metadata-proxy when old versions are present 0035646 Fix ansible-lint complaint about directory permissions 1708097 Remove service_group entry from all neutron_services dicts f9267ff Remove neutron_overlay_network var from os_neutron role 9dc2f14 Remove is_metal var from os_neutron role 4575b8e Removed unused variable 1f29cdc Implement standardised Ubuntu Cloud Archive repo vars 18a9491 Clarify the default for neutron_vxlan_group 3344d75 Add missing xenial to meta.yml 30439c2 Dynamic Neutron OVS agent tunnel_types and local_ip config a34729a Adding Vagrantfile for local development/testing a246b5c Configure ml2 firewall driver "iptables_hybrid" for OVS 38f5ea9 Fix executor_thread_pool_size typo e349ad0 Remove enable_tunneling config from openvswitch_agent.ini 147c7f0 Correct Openvswitch bridge_mappings configuration 387c46e Clean up container cache prep in tests f35213b Pin test-requirements to match OpenStack requirements b3fa6b4 Address Ansible bare variable usage 357e543 Use default metadata_backlog value from Neutron 063824e Remove pip_lock_down dependency e572680 Add metadata checksum fix for AIO-type networks configs 3794674 Updated multi-distro setup for isolation 9654663 Update paste, policy and rootwrap configurations 2016-06-02 dcb0fff Consistency for multi-os in the includes 8e461be Neutron 16.04 support 0795d6d Update plumlib template to support python-keystoneclient v1.7.0 and above cf5a0f2 Remove unnecessary overrides of service variables 68ea882 Update classpath for FWaaS driver 7bb0a5a Update paste, policy and rootwrap configurations 2016-05-19 c44b0b1 More MTU cleanups for Neutron 2629d0b Updated role using the Multi-Distro framework e3e2f63 Verbose option has been deprecated from oslo.log 273cef6 Stop configuring neutron to enforce DHCP MTU option 656a976 Implementing neutron_openvswitch_agent 34ed097 Removed the db create tasks 1e397c3 Remove task to cleanup checksum rules script 018d336 Add .swp files to .gitignore 5ce4d64 Change pip install task state to 'latest' 7ffbc5a Remove py_from_git role c15dcba Use upstream neutron default for handle_internal_only_routers d13c448 Add dependencies for paramiko 2.0 9a3022d Missing init script of VPNaaS d9477c5 Update paste, policy and rootwrap configurations 2016-04-22 61e6192 Ansible 2.x - Address deprecation warning of bare variables f7a7e14 removed duplicate key 218563e Remove Liberty releasenote index a277ebd Update os_neutron to handle newton migrations e4ba265 Correct Neutron VPNaaS service_provider config entry 56cff84 Dynamically determine whether Neutron Agents should be enabled 94994ef Add options to auto enable VPNaaS 8416a65 blacklist Ansible 1.9.6 239f58d Fix missing 'qos' in extension drivers 0203066 Fix neutron lbaasv2 upstart init scrtipt placement b28687f Update min_ansible_version to 1.9 8a9719d Add reno scaffolding for release notes management 759d043 Nuage neutron plugin ansible changes 7b7820f Update paste, policy and rootwrap configurations 2016-04-03 3bc4de9 Switch defaults/tests to use master branch 30bc02a Neutron test cleanup 4eee5af Remove iptables checksum rule script Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 25 +- Vagrantfile | 31 ++ bindep.txt | 41 +++ defaults/main.yml | 333 ++++++++++++++------- examples/playbook.yml | 7 + files/post-up-checksum-rules | 42 --- files/post-up-metadata-checksum | 37 +++ files/rootwrap.d/dhcp.filters | 1 + files/rootwrap.d/functional-testing.filters | 35 --- files/rootwrap.d/linuxbridge-plugin.filters | 7 +- files/rootwrap.d/vpnaas.filters | 2 + handlers/main.yml | 22 +- library/neutron_migrations_facts | 19 +- manual-test.rc | 33 ++ meta/main.yml | 17 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml | 12 + ...2-service-provider-config-57d394bdc64f632e.yaml | 5 + .../metadata-proxy-cleanup-eed6ff482035dc83.yaml | 10 + ...tron-agent-dynamic-enable-47f0c709ef0dfe55.yaml | 15 + .../notes/neutron-bgp-552e6e1f6d37f38d.yaml | 9 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + ...neutron-networking-calico-b05b08f989f768ee.yaml | 5 + .../neutron-ovs-powervm-116662f169e17175.yaml | 18 ++ .../notes/neutron-vpnaas-5c7c6508f2cc05c5.yaml | 8 + .../notes/neutron_ovs_dvr-7fca77cac0545441.yaml | 11 + .../openvswitch-support-1b71ae52dde81403.yaml | 14 + ...dle_internal_only_routers-e46092d6f1f7c4b0.yaml | 7 + ...neutron-only-install-venv-ca3bf63ed0507e4b.yaml | 6 + ...package-list-name-changes-a86f7e7c805c2d81.yaml | 10 + .../notes/package-state-fb7d26a4b7c41a77.yaml | 13 + .../notes/remove-lbaasv1-26044c48b5d3b508.yaml | 8 + .../removed-db-create-tasks-eed527e915f23ee0.yaml | 5 + .../removed-neutron-ha-tool-dd7a4717e03163f9.yaml | 13 + .../notes/service-conf-path-b27cab31dbc72ad4.yaml | 6 + .../notes/use-uca-by-default-070751b0b388fcbe.yaml | 4 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/calico_config.yml | 47 +++ tasks/calico_init.yml | 42 +++ tasks/main.yml | 92 +++++- tasks/neutron_check.yml | 23 -- tasks/neutron_db_setup.yml | 69 +---- tasks/neutron_init.yml | 134 +++++++++ tasks/neutron_init_common.yml | 27 ++ tasks/neutron_init_systemd.yml | 53 ++++ tasks/neutron_init_upstart.yml | 28 ++ tasks/neutron_install-apt.yml | 114 +++++++ tasks/neutron_install.yml | 163 ++-------- tasks/neutron_l3_ha.yml | 20 -- tasks/neutron_lbaas.yml | 49 --- tasks/neutron_ml2_ovs_powervm.yml | 26 ++ tasks/neutron_post_install.yml | 121 +++----- tasks/neutron_pre_install.yml | 34 +-- tasks/neutron_service_add.yml | 107 ------- tasks/neutron_service_setup.yml | 86 +++++- tasks/neutron_upstart_common_init.yml | 46 --- tasks/neutron_upstart_init.yml | 126 -------- tasks/nuage_neutron_config.yml | 24 ++ tasks/plumgrid_config.yml | 91 ++---- templates/api-paste.ini.j2 | 10 +- templates/bgp_dragent.ini.j2 | 9 + templates/dhcp_agent.ini.j2 | 5 +- templates/felix.cfg.j2 | 4 + templates/l3_agent.ini.j2 | 7 +- templates/lbaas_agent.ini.j2 | 15 +- templates/metadata_agent.ini.j2 | 1 - templates/metering_agent.ini.j2 | 3 +- templates/neutron-ha-tool.py.j2 | 2 +- templates/neutron-systemd-init.j2 | 25 ++ templates/neutron-systemd-tempfiles.j2 | 4 + templates/neutron-upstart-init.j2 | 8 +- templates/neutron.conf.j2 | 61 ++-- templates/plugins/ml2/linuxbridge_agent.ini.j2 | 4 +- templates/plugins/ml2/ml2_conf.ini.j2 | 13 +- templates/plugins/ml2/openvswitch_agent.ini.j2 | 23 ++ templates/plugins/nuage/nuage.ini.j2 | 19 ++ templates/plugins/plumgrid/plumlib.ini | 5 +- templates/policy.json.j2 | 66 ++-- templates/rootwrap.conf.j2 | 2 +- templates/vpnaas_agent.ini.j2 | 9 + test-requirements.txt | 19 +- tox.ini | 197 +++++++----- vars/ubuntu-14.04.yml | 54 ++++ vars/ubuntu-16.04.yml | 52 ++++ 123 files changed, 3606 insertions(+), 1746 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-ironic 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are exuberant to announce the release of: openstack-ansible-ironic 14.0.0: Ironic Role for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-ironic/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "ironic" role now supports Ubuntu 16.04 and SystemD. * The os_ironic role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ironic_package_state" to "present". Upgrade Notes ************* * Installation of ironic and its dependent pip packages will now only occur within a Python virtual environment. The "ironic_venv_bin" and "ironic_venv_enabled" variables have been removed. * The variable "ironic_api_apt_packages" has been renamed to "ironic_api_distro_packages". * The variable "ironic_conductor_apt_packages" has been renamed to "ironic_conductor_distro_packages". * The variable "ironic_conductor_standalone_apt_packages" has been renamed to "ironic_conductor_standalone_distro_packages". * The os_ironic role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ironic_package_state" should be set to "present". Changes in openstack-ansible-ironic 13.0.0..14.0.0 -------------------------------------------------- 235754a Remove 'ignore_errors: true' in favor of 'failed_when: false' 5493e4f Move to non stand-alone ironic 3d39b1c Update tox.ini tests target for stable/newton 78c9ae5 Update ansible-role-requirements to stable/newton 95d0480 Update default git branch to stable/newton ae36c7d Turn on debug output from IPA by default ba3a7a5 Use centralised test scripts e6d2fbd Update UPPER_CONSTRAINTS_FILE for stable/newton 362f0d9 Update .gitreview for stable/newton b0fa2aa Revert dynamic includes for inventory-based conditionals 7ad3392 Update paste, policy and rootwrap configurations 2016-09-23 b857429 Force Ansible to use dynamic includes a6b6f3d Update rootwrap filter copy for easier maintenance f24f266 os_ironic mysql password variable not updated 5ee8b16 Ansible 2.1.1 role testing 8cf2501 Compress test execution logs 581ce20 Rename package lists (and related vars) appropriately 794974c Enable log collection after functional testing 9e8d2e2 Add SNI support to ironic role via OS packages ca416a4 [DOCS] Syntax updates to the docs d9e9eed Make all linting tests use upper-constraints d18c5d9 Add apt-get update to run_tests 5fc7c53 Updated from global requirements 4cbd207 Add python packages for SNI support in tests ed37a1b Update paste, policy and rootwrap configurations 2016-08-15 c541ffe Move other-requirements.txt to bindep.txt 92aacee Cleanup/standardize usage of tags d96baff [DOCS] Move ironic docs to roles bc2da2a Include ansible commands for ansible linting e8b360f Disable stderr logging 1d60329 Add project group to role 2a28918 Add ability to change apt/yum package state c88ecfa Fix ansible performance issue 3f96ca8 Ensure that doc linting is included in the linters test f75d719 Define keystone region name. 6de135b Remove openstack_hosts from test requirements 3a6717a Optimise pip install tasks ebbc044 Support service-specific rabbitmq clusters 515bed2 Use plugins repo version of the human_log callback plugin c976a15 Updated from global requirements 46f1e9e Implement doc8 checks for docs ad97cae Update sphinx configuration e3004cc Only install to virtual environment ff280f7 Update tox configuration 8b3f346 Fix ansible-lint complaint about directory permissions 2b7f402 Clean up container cache prep in tests b0b43ce Pin test-requirements to match OpenStack requirements f736ebb Remove pip_lock_down dependency a22c7d6 Update .gitreview for project rename 1e51088 Add 16.04 support 3113ef6 Fix Ironic gating 46f7a95 Add .swp files to .gitignore 7823efb Change pip install task state to 'latest' 9594c66 Remove py_from_git role c42d884 Add dependencies for paramiko 2.0 fa0234c Remove Liberty releasenote index b32b092 Ansible 2.x - Address deprecation warning of bare variables 26a603f Changed the swift storage URL retrieval command 9b268e9 Switch defaults/tests to use master branch e3d39b7 blacklist Ansible 1.9.6 Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 4 +- CONTRIBUTING.rst | 76 ++++--- README.rst | 15 +- Vagrantfile | 12 ++ bindep.txt | 41 ++++ defaults/main.yml | 53 ++--- examples/playbook.yml | 5 + files/rootwrap.d/ironic-lib.filters | 2 + handlers/main.yml | 2 +- local_install.sh | 2 +- manual-test.rc | 33 +++ meta/main.yml | 10 +- other-requirements.txt | 16 -- .../ironic-1604-support-b9ebb12ee4d78275.yaml | 3 + ...-ironic-only-install-venv-0da32fc36bfeae2b.yaml | 5 + ...package-list-name-changes-7c8a6dd652b271cf.yaml | 8 + .../notes/package-state-2e8e2eb4b24475c4.yaml | 13 ++ releasenotes/source/conf.py | 43 ++-- releasenotes/source/index.rst | 1 - releasenotes/source/liberty.rst | 6 - setup.cfg | 2 +- setup.py | 11 +- tasks/ironic_api_install.yml | 19 +- tasks/ironic_api_post_install.yml | 10 - tasks/ironic_conductor_install.yml | 40 ++-- tasks/ironic_conductor_post_install.yml | 16 +- tasks/ironic_db_setup.yml | 3 - tasks/ironic_init.yml | 23 ++ tasks/ironic_init_common.yml | 29 +++ tasks/ironic_init_systemd.yml | 53 +++++ tasks/ironic_init_upstart.yml | 32 +++ tasks/ironic_install.yml | 113 +++------- tasks/ironic_install_apt.yml | 34 +++ tasks/ironic_post_install.yml | 48 +---- tasks/ironic_pre_install.yml | 30 --- tasks/ironic_service_setup.yml | 16 -- tasks/ironic_upstart_common_init.yml | 46 ---- tasks/ironic_upstart_init.yml | 23 -- tasks/main.yml | 83 +++++-- templates/ironic-systemd-init.j2 | 25 +++ templates/ironic-systemd-tempfiles.j2 | 4 + templates/ironic-upstart-init.j2 | 4 +- templates/ironic-wsgi.py.j2 | 4 +- templates/ironic.conf.j2 | 10 +- templates/policy.json.j2 | 6 +- test-requirements.txt | 20 +- tox.ini | 164 ++++++++------ vars/ubuntu-14.04.yml | 42 ++++ vars/ubuntu-16.04.yml | 44 ++++ 73 files changed, 1572 insertions(+), 1170 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a7c89ef..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,3 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_glance 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_glance 14.0.0: os_glance for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_glance" role now supports Ubuntu 16.04 and SystemD. * CentOS7/RHEL support has been added to the os_glance role. * The os_glance role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "glance_package_state" to "present". Upgrade Notes ************* * The "glance_apt_packages" variable has been renamed to "glance_distro_packages" so that it applies to multiple operating systems. * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "glance_venv_bin", "glance_venv_enabled", "glance_venv_etc_dir", and "glance_non_venv_etc_dir" variables have been removed. * The variable "glance_apt_packages" has been renamed to "glance_distro_packages". * The os_glance role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "glance_package_state" should be set to "present". * The database create and user creates have been removed from the "os_glance" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_glance 13.0.0..14.0.0 ----------------------------------------------------- 46bb95d Use dictionary for service group mappings 4d725ac Remove 'ignore_errors: true' in favor of 'failed_when: false' 19554ff Update tox.ini tests target for stable/newton da00142 Update UPPER_CONSTRAINTS_FILE for stable/newton e1403a2 Update ansible-role-requirements to stable/newton c132db3 Update default git branch to stable/newton 5c000a5 Use centralised test scripts 9242f46 Update .gitreview for stable/newton 8e58d1a Revert dynamic includes for inventory-based conditionals 25e6d88 Revert dynamic includes for inventory-based conditionals 5974ede Force Ansible to use dynamic includes a6c27d7 Update homepage with developer documentation page 30aa5c1 Ansible 2.1.1 role testing ffacc20 Implement CentOS 7 support in os_glance 482a976 Compress test execution logs 7ee073d Fix os_glance role functional testing 66e8dc3 Rename package lists (and related vars) appropriately dac0c09 Enable log collection after functional testing faf311c Make all linting tests use upper-constraints 4606257 Added SNI support for os_glance package f6567be Remove apt update from Vagrantfile b59dcf5 Add apt-get update to run_tests 2635157 [DOCS] - Removing tags: and category: 4d4e3e6 Updated from global requirements 8b5bd16 Add python packages for SNI support in tests 12176ec [DOCS] Add project links; fix indents; wording 46483d1 Move other-requirements.txt to bindep.txt 25f8bf7 [DOCS] Move glance role docs cd42133 Include ansible commands for ansible linting 7f4c2ac Disable stderr logging 3075789 Add project group to role 57b7a3f Add ability to change apt/yum package state eff32c1 Ensure that mode is a string f3b3169 Fix ansible performance issue 3bc9562 Fix bug in RPC config that broke Rabbit SSL support 57c330f Ensure that doc linting is included in the linters test ef55a34 Provide default for rabbitmq telemetry password 679fac1 Remove openstack_hosts from test requirements 3188747 Allow configuration of multiple rabbit clusters bc860bf Define keystone region name. c61739d Optimise pip install tasks 2ad00bc Support service-specific rabbitmq clusters 7c96594 Use plugins repo version of the human_log callback plugin feeb70e Updated from global requirements 64be2b4 Remove duplicates from .gitignore 23d854a Update paste, policy and rootwrap configurations 2016-07-14 0da9bd3 Implement doc8 checks for docs 87e5442 Cleanup/standardize usage of tags d465552 Update sphinx configuration 1d851dc Fix notification_driver 374ace6 Update the virtualenv paths only when we have a new venv 2201cf8 Update tox configuration e03b37d Only install to virtual environment 03a1def Fix ansible-lint complaint about directory permissions c7027c1 Update paste, policy and rootwrap configurations 2016-06-17 b05dc73 Clean up container cache prep in tests 6203479 Pin test-requirements to match OpenStack requirements 3dabe29 Remove pip_lock_down dependency 28c573b Consistency for multi-os in the includes 24c3d70 Implement Ubuntu 16.04 support with SystemD 8d3334a Remove python-cephlibs 72ec082 Verbose option has been deprecated from oslo.log a5ed9f4 Removed the db create tasks 2aed857 Add .swp files to .gitignore fc63481 Change pip install task state to 'latest' 4076a83 Remove py_from_git role 1e3bed6 Add dependencies for paramiko 2.0 6964147 Ansible 2.x - Address deprecation warning of bare variables 55dd09a Remove Liberty releasenote index 3bc69fd blacklist Ansible 1.9.6 9c5c088 Update min_ansible_version to 1.9 b0b1002 Add reno scaffolding for release notes management 101d2ae Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 29 +-- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 67 +++-- examples/playbook.yml | 9 + handlers/main.yml | 28 +- manual-test.rc | 33 +++ meta/main.yml | 13 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../glance-1604-support-e65870170a925bfe.yaml | 3 + .../glance-packages-rename-abd348b0725e4b7b.yaml | 4 + ...-glance-only-install-venv-0271d3238c0d561c.yaml | 6 + ...os_glance-centos7-support-21cb81e361831c9f.yaml | 4 + ...package-list-name-changes-38f1554097b6bbe9.yaml | 4 + .../notes/package-state-646b25638f523411.yaml | 13 + .../removed-db-create-tasks-4560d4b960383c4e.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/glance_db_setup.yml | 34 --- tasks/glance_init_common.yml | 29 +++ tasks/glance_init_systemd.yml | 56 ++++ tasks/glance_init_upstart.yml | 26 ++ tasks/glance_install.yml | 116 ++------- tasks/glance_install_apt.yml | 4 +- tasks/glance_install_yum.yml | 24 ++ tasks/glance_post_install.yml | 37 +-- tasks/glance_pre_install.yml | 23 -- tasks/glance_service_setup.yml | 16 -- tasks/glance_upstart_common_init.yml | 46 ---- tasks/glance_upstart_init.yml | 30 --- tasks/main.yml | 39 ++- templates/glance-api-paste.ini.j2 | 19 +- templates/glance-api.conf.j2 | 22 +- templates/glance-cache.conf.j2 | 3 +- templates/glance-manage.conf.j2 | 3 +- templates/glance-registry.conf.j2 | 24 +- templates/glance-scrubber.conf.j2 | 3 +- templates/glance-systemd-init.j2 | 25 ++ templates/glance-systemd-tempfiles.j2 | 4 + templates/glance-upstart-init.j2 | 28 +- templates/policy.json.j2 | 2 +- test-requirements.txt | 19 +- tox.ini | 154 ++++++----- vars/redhat-7.yml | 21 ++ vars/ubuntu-14.04.yml | 4 +- vars/ubuntu-16.04.yml | 23 ++ 72 files changed, 1313 insertions(+), 946 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_aodh 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are enthusiastic to announce the release of: openstack-ansible-os_aodh 14.0.0: os_aodh for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_aodh role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "aodh_package_state" to "present". Upgrade Notes ************* * Installation of aodh and its dependent pip packages will now only occur within a Python virtual environment. The "aodh_venv_enabled" and "aodh_venv_bin" variables have been removed. * The variable "aodh_apt_packages" has been renamed to "aodh_distro_packages". * The os_aodh role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "aodh_package_state" should be set to "present". * The aodh-api init service is removed since aodh-api is deployed as an apache mod_wsgi service. * The Aodh data migration script should be run to migrate alarm data from MongoDB storage to Galera due to the pending removal of MongoDB support. Bug Fixes ********* * Aodh has deprecated support for NoSQL storage (MongoDB and Cassandra) in Mitaka with removal scheduled for the O* release. This causes warnings in the logs. The default of using MongoDB storage for Aodh is replaced with the use of Galera. Continued use of MongoDB will require the use of vars to specify a correct "aodh_connection_string" and add pymongo to the "aodh_pip_packages" list. Changes in openstack-ansible-os_aodh 13.0.0..14.0.0 --------------------------------------------------- 9f398e0 Remove 'ignore_errors: true' in favor of 'failed_when: false' 5c64fd0 Use dictionary for service group mappings dda7abd Update tox.ini tests target for stable/newton ff3a346 Update ansible-role-requirements to stable/newton 37d88bc Update default git branch to stable/newton 30f4658 Use centralised test scripts 4a37aca Update UPPER_CONSTRAINTS_FILE for stable/newton 987d696 Update .gitreview for stable/newton 5845161 Revert dynamic includes for inventory-based conditionals 260c8db Force Ansible to use dynamic includes f1e930d Update homepage with developer documentation page ed2ddcd Update testing bits for consistency 33b71ba Ansible 2.1.1 role testing f02ee50 Compress test execution logs 52b7dd4 Rename package lists (and related vars) appropriately 636a14d Enable log collection after functional testing 52df852 Work around Ansible vcpu fact bug on ppc64le a6fcaa9 Add SNI support via OS packages for os_aodh role 7d9061e Make all linting tests use upper-constraints 9940f7b Add apt-get update to run_tests 39a5500 Update extra required system packages for Centos bfc3fe0 [DOCS] - Removing tags: and category: 57137cb Updated from global requirements 9fce7bb [DOCS] - Remove overview from TOC f62a6ca Add python packages for SNI support in tests 8f95f03 [DOCS] - Adding doc comments to defaults file 67ac051 Remove aodh-api init setup 12da326 Move other-requirements.txt to bindep.txt fd4346e [DOCS] Move aodh configs from developer docs 3fe0992 Allow Aodh to use Gnocchi as a source for alarms 54919fe Update required system packages for Xenial eed6692 Include ansible commands for ansible linting b54031a Disable stderr logging 62bec21 Add project group to role 212ced7 Fix runlevel typo in upstart template 7a0841f Add ability to change apt/yum package state 6939484 Ensure that mode is a string 2eabf74 Fix ansible performance issue 87cde1d Fix bug in RPC config that broke Rabbit SSL support c3b7030 Support Vagrant testing with Xenial b4c3dab Update testing script for xenial d5eeadc Test aodh role using the aodh tempest plugin a205887 Ensure that doc linting is included in the linters test 267081c Update aodh.conf template to account for deprecations ac2ee29 Re-add oslo_messaging_rabbit configuration 50b7224 Ensure that Apache is installed 442fcb0 Define keystone region name. 4f04932 Optimise pip install tasks e25e511 Support service-specific rabbitmq clusters 1cd9e6e Remove openstack_hosts from test requirements dd4a642 Serve the aodh-api using mod_wsgi d95c404 Remove unnecessary overrides of service variables 2c8717b Use plugins repo version of the human_log callback plugin 3c558c2 Updated from global requirements 8381818 Remove duplicates from .gitignore ffdca6b Implement doc8 checks for docs a4cdbf5 Update sphinx configuration 53a0426 Cleanup/standardize usage of tags 4d5b233 Removing unused tasks file 4a3b4d7 Update the virtualenv paths only when we have a new venv be9271b Update tox configuration 30da818 Only install to virtual environment 9fb5cf4 Fix ansible-lint complaint about directory permissions c897e48 Remove mongodb vars from the aodh func tests b7f6326 Remove duplicate usage of the galera role in aodh func test dc1e3df DOC - Adding details on required variables for the role cc92c92 Add release note for Mongo to Galera changes be90607 Implement Ubuntu 16.04 support with SystemD f249d7e Clean up container cache prep in tests 783512f Pin test-requirements to match OpenStack requirements 6ebc7b4 Address Ansible bare variable usage ae2e55b Convert default from MongoDB to MySQL storage 25db7ac Remove pip_lock_down dependency e9cf8b4 Consistency for multi-os in the includes c3a216c Verbose option has been deprecated from oslo.log 77e621a Add .swp files to .gitignore c2603d8 Change pip install task state to 'latest' d674996 Remove py_from_git role fd5991d Add dependencies for paramiko 2.0 b4e3f82 Remove Liberty releasenote index 16b8407 Fail fast when required secrets are not present c032ce4 Clarify role documentation and remove duplication d0d97ce blacklist Ansible 1.9.6 ca5020c Updated role using the Multi-Distro framework 84553c6 Add reno scaffolding for release notes management a7630cb Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + CONTRIBUTING.rst | 2 - README.rst | 51 ++- Vagrantfile | 26 +- bindep.txt | 41 +++ defaults/main.yml | 93 +++--- examples/playbook.yml | 28 ++ handlers/main.yml | 45 ++- manual-test.rc | 33 ++ meta/main.yml | 11 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-5c117335b7b7b407.yaml | 3 + ...os_aodh-only-install-venv-3c80a0a66824fcd7.yaml | 5 + ...package-list-name-changes-4d5ad2e6ff5ecae2.yaml | 4 + .../notes/package-state-b032231a3cc99ee0.yaml | 13 + .../removed-aodh-api-init-9e2406629196efff.yaml | 4 + .../notes/use-galera-storage-d1a51c051d2740ad.yaml | 14 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/aodh_apache.yml | 65 ++++ tasks/aodh_db_setup.yml | 19 ++ tasks/aodh_init_common.yml | 29 ++ tasks/aodh_init_systemd.yml | 56 ++++ tasks/aodh_init_upstart.yml | 26 ++ tasks/aodh_install.yml | 136 ++------ tasks/aodh_install_apt.yml | 48 +++ tasks/aodh_post_install.yml | 33 +- tasks/aodh_pre_install.yml | 24 +- tasks/aodh_service_add.yml | 103 ------- tasks/aodh_service_setup.yml | 84 ++++- tasks/aodh_upstart_common_init.yml | 46 --- tasks/aodh_upstart_init.yml | 58 ---- tasks/main.yml | 60 +++- templates/aodh-api-wsgi.py.j2 | 22 ++ templates/aodh-httpd.conf.j2 | 16 + templates/aodh-ports.conf.j2 | 3 + templates/aodh-systemd-init.j2 | 25 ++ templates/aodh-systemd-tempfiles.j2 | 4 + templates/aodh-upstart-init.j2 | 26 +- templates/aodh.conf.j2 | 18 +- test-requirements.txt | 19 +- tox.ini | 158 ++++++---- vars/debian.yml | 31 ++ 63 files changed, 1681 insertions(+), 975 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_keystone 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are jubilant to announce the release of: openstack-ansible-os_keystone 14.0.0: os_keystone for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Added keystone_apache_custom_log_format tunable for changing CustomLog format. Default is "combined". * Apache MPM tunable support has been added to the os-keystone role in order to allow MPM thread tuning. Default values reflect the current Ubuntu default settings: keystone_httpd_mpm_backend: event keystone_httpd_mpm_start_servers: 2 keystone_httpd_mpm_min_spare_threads: 25 keystone_httpd_mpm_max_spare_threads: 75 keystone_httpd_mpm_thread_limit: 64 keystone_httpd_mpm_thread_child: 25 keystone_httpd_mpm_max_requests: 150 keystone_httpd_mpm_max_conn_child: 0 * Introduced option to deploy Keystone under Uwsgi. A new variable "keystone_mod_wsgi_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with mod_wsgi for Apache. The ports used by Uwsgi for socket and http connection for both public and admin Keystone services are configurable (see also the "keystone_uwsgi_ports" dictionary variable). Other Uwsgi configuration can be overridden by using the "keystone_uwsgi_ini_overrides" variable as documented under "Overriding OpenStack configuration defaults" in the OpenStack- Ansible Install Guide. Federation features should be considered _experimental_ with this configuration at this time. * Introduced option to deploy Keystone behind Nginx. A new variable "keystone_apache_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with Apache. Additional configuration can be delivered to Nginx through the use of the "keystone_nginx_extra_conf" list variable. Federation features are not supported with this configuration at this time. Use of this option requires "keystone_mod_wsgi_enabled" to be set to "false" which will deploy Keystone under Uwsgi. * CentOS7/RHEL support has been added to the os_keystone role. * The os_keystone role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "keystone_package_state" to "present". Upgrade Notes ************* * Installation of keystone and its dependent pip packages will now only occur within a Python virtual environment. The "keystone_venv_enabled" variable has been removed. * The variable "keystone_apt_packages" has been renamed to "keystone_distro_packages". * The variable "keystone_idp_apt_packages" has been renamed to "keystone_idp_distro_packages". * The variable "keystone_sp_apt_packages" has been renamed to "keystone_sp_distro_packages". * The variable "keystone_developer_apt_packages" has been renamed to "keystone_developer_mode_distro_packages". * The os_keystone role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "keystone_package_state" should be set to "present". Security Issues *************** * The admin_token_auth middleware presents a potential security risk and will be removed in a future release of keystone. Its use can be removed by setting the "keystone_keystone_paste_ini_overrides" variable. keystone_keystone_paste_ini_overrides: pipeline:public_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service pipeline:admin_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service pipeline:api_v3: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3 Changes in openstack-ansible-os_keystone 13.0.0..14.0.0 ------------------------------------------------------- ceabcef Remove 'ignore_errors: true' in favor of 'failed_when: false' c71a7bc Fix bare variable in handler 34bc598 Update tox.ini tests target for stable/newton 449e3a1 Update UPPER_CONSTRAINTS_FILE for stable/newton a2adb12 Update .gitreview for stable/newton 4d77b28 Update default git branch to stable/newton 40ea292 Update ansible-role-requirements to stable/newton fa5b5f9 Use centralised test scripts 0bbacf6 Revert dynamic includes for inventory-based conditionals 7872b49 Force Ansible to use dynamic includes e21be41 Update home page link in cfg file 8d836da Remove testing vars present in test repo a74af47 Address ansible_ssh_* var deprecation 3614448 Update testing bits for consistency 01e1299 Remove unrequired messaging setup task file 1bfcd10 Add role linking to tox tests 05892b5 Ansible 2.1.1 role testing 9411414 Fix depreciation "Using bare variables" 0750972 Compress test execution logs 2fd095b Update paste, policy and rootwrap configurations 2016-09-08 f0ed20d Re-activate service catalog caching fbd9535 Add credential_setup for keystone a0d71d6 Add tempest to keystone role tests 42cef50 Fix nginx SCRIPT_NAME uwsgi_param d0e5097 Use the central test repository for Keystone 38dbd42 Fix apache + uwsgi for keystone 15733bb Fix nginx to work with RedHat/CentOS b6f914a Shorten tox target names 3b47fc7 Allow Uwsgi configuration overrides 52b1a71 Configure Apache to proxy for Uwsgi db7248b Isolate mod_wsgi from Apache install 30bd479 Correct developer mode package var name 2b8aa07 Rename package lists (and related vars) appropriately 4edb378 Install and configure Nginx 0de819e Implement CentOS 7 support in os_keystone 61759e7 Work around Ansible vcpu fact bug on ppc64le 7e5548e Add a test Scenario for uwsgi & nginx 9082c79 Install and configure uWSGI b1c2f9c Isolate Apache components 39faeb0 Make all linting tests use upper-constraints 9fd8ff0 Adding Vagrantfile for local testing/dev 3122ff6 Add SNI support via OS packages for os_keystone 50730da Add apt-get update to run_tests b9e799b Force a restart of all the apache nodes during upgrade e047979 Updated from global requirements 8d046aa Update the keystone WSGI application locations 53e3df2 Add python packages for SNI support in tests c0fa231 [DOCS] Move keystone federation role docs 2cb8866 Move other-requirements.txt to bindep.txt 0a51854 Include ansible commands for ansible linting 866c153 Disable stderr logging 5637fec Add project group to role 9bd40cc Add ability to change apt/yum package state 2d8fa3d Fix bug in RPC config that broke Rabbit SSL support 418ebd6 Ensure that doc linting is included in the linters test 61848d3 Provide default for rabbitmq telemetry password 7bb3cd0 Allow configuration of multiple rabbit clusters aced6b5 Remove openstack_hosts from test requirements 0425d1c Optimise pip install tasks 986d1d8 Use keystone_system_user_name in fernet rotation cron entry. 22afe01 Use plugins repo version of the human_log callback plugin 98b19d8 Updated from global requirements 4d983d8 Remove duplicates from .gitignore ca10c41 Implement doc8 checks for docs ad7919e Update sphinx configuration d208029 Ansible 2.x - Address deprecation warning of bare variables 86a545d Update the virtualenv paths only when we have a new venv b786654 Update tox configuration 44d053c Only install to virtual environment 6c8a9b9 Update paste, policy and rootwrap configurations 2016-07-01 325db1a Clean up container cache prep in tests d8802f3 Pin test-requirements to match OpenStack requirements 1396dda Update paste, policy and rootwrap configurations 2016-06-17 d27d055 Add note on admin_token_auth deprecation 85a9202 Minimum example playbook could let suppose db creation c82a089 Add support for CustomLog format modification f244e1c Remove pip_lock_down dependency bbc645c Consistency for multi-os in the includes b6fbd99 Skip unavailable hosts when distributing keys cdb5259 Grammar: requires -> required 8797fc7 Cleanup/standardize usage of tags ebdcb34 Implement 16.04 support in Keystone 06d7fb5 Use ansible-lint 2.7.0 4f9caaa Verbose option has been deprecated from oslo.log 994bb0f Fix keystone tests 7704d94 Add support to tune the keystone apache MPM settings 57e3390 Add .swp files to .gitignore b3cca27 Change pip install task state to 'latest' 78e6744 Remove py_from_git role cc29aa4 Add dependencies for paramiko 2.0 20db79e Update paste, policy and rootwrap configurations 2016-04-22 3695699 Remove Liberty releasenote index 1635737 Change pip install task state to 'latest' eb3ce0f Fail fast when required secrets are not present dfd80ea Fix server/hostname for RFC 1034/1035 59ffe5e blacklist Ansible 1.9.6 36486b1 Remove venv activation code 7e14932 Use ansible facts for distributing SSL certs/keys 7b1543d Update min_ansible_version to 1.9 df164fb Add reno scaffolding for release notes management 0a6737c Switch defaults/tests to use master branch 42998df removed duplicate key Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + README.rst | 68 +---- Vagrantfile | 12 + bindep.txt | 41 +++ defaults/main.yml | 99 ++++++-- examples/playbook.yml | 48 ++++ handlers/main.yml | 32 ++- manual-test.rc | 33 +++ meta/main.yml | 13 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...in-token-auth-deprecation-24e84a18f8a56814.yaml | 17 ++ ...apache-log-format-support-7232177f835222ee.yaml | 4 + ...pache-mpm-tunable-support-1c72f2f99cd502bc.yaml | 17 ++ ...eystone-only-install-venv-b766568ee8d40354.yaml | 5 + ...e-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml | 22 ++ ..._keystone-centos7-support-0a5d97f81ac42e44.yaml | 4 + ...package-list-name-changes-007cacee4faf8ee6.yaml | 10 + .../notes/package-state-711a1eb4814311cc.yaml | 13 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/keystone_apache.yml | 104 +++++--- tasks/keystone_credential.yml | 22 ++ tasks/keystone_credential_autorotate.yml | 47 ++++ tasks/keystone_credential_create.yml | 46 ++++ tasks/keystone_credential_distribute.yml | 25 ++ tasks/keystone_db_setup.yml | 5 - tasks/keystone_federation_sp_idp_setup.yml | 38 +-- tasks/keystone_federation_sp_setup.yml | 21 +- tasks/keystone_fernet.yml | 6 +- tasks/keystone_fernet_keys_autorotate.yml | 10 +- tasks/keystone_fernet_keys_create.yml | 9 - tasks/keystone_fernet_keys_distribute.yml | 6 +- tasks/keystone_idp_metadata.yml | 8 +- tasks/keystone_idp_self_signed_create.yml | 6 +- tasks/keystone_idp_self_signed_distribute.yml | 5 +- tasks/keystone_idp_self_signed_store.yml | 2 - tasks/keystone_idp_setup.yml | 13 +- tasks/keystone_idp_sp_setup.yml | 4 +- tasks/keystone_init_common.yml | 27 ++ tasks/keystone_init_systemd.yml | 48 ++++ tasks/keystone_init_upstart.yml | 31 +++ tasks/keystone_install.yml | 134 +++------- tasks/keystone_install_apt.yml | 86 +++++-- tasks/keystone_install_yum.yml | 154 +++++++++++ tasks/keystone_key_distribute.yml | 6 +- tasks/keystone_key_populate.yml | 6 - tasks/keystone_key_setup.yml | 6 - tasks/keystone_ldap_setup.yml | 16 +- tasks/keystone_messaging_setup.yml | 37 --- tasks/keystone_nginx.yml | 51 ++++ tasks/keystone_post_install.yml | 40 +-- tasks/keystone_pre_install.yml | 32 +-- tasks/keystone_service_setup.yml | 41 +-- tasks/keystone_ssl.yml | 11 +- tasks/keystone_ssl_key_create.yml | 20 +- tasks/keystone_ssl_key_distribute.yml | 42 +-- tasks/keystone_ssl_key_store.yml | 32 +-- tasks/keystone_ssl_self_signed.yml | 9 +- tasks/keystone_ssl_user_provided.yml | 18 +- tasks/keystone_token_cleanup.yml | 2 - tasks/keystone_uwsgi.yml | 58 +++++ tasks/main.yml | 116 ++++++++- templates/keystone-credential-rotate.sh.j2 | 67 +++++ templates/keystone-fernet-rotate.sh.j2 | 2 +- templates/keystone-httpd-mpm.conf.j2 | 9 + templates/keystone-httpd.conf.j2 | 38 ++- templates/keystone-paste.ini.j2 | 16 +- templates/keystone-systemd-tempfiles.j2 | 4 + templates/keystone-uwsgi.ini.j2 | 20 ++ templates/keystone-uwsgi_systemd-init.j2 | 25 ++ templates/keystone-uwsgi_upstart.conf.j2 | 44 ++++ templates/keystone-wsgi.py.j2 | 48 ---- templates/keystone.conf.j2 | 40 ++- templates/keystone_nginx.conf.j2 | 34 +++ templates/policy.json.j2 | 8 +- test-requirements.txt | 19 +- tox.ini | 197 ++++++++++----- vars/redhat-7.yml | 77 ++++++ vars/ubuntu-14.04.yml | 45 +++- vars/ubuntu-16.04.yml | 70 +++++ 110 files changed, 3044 insertions(+), 1156 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-memcached_server 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are delighted to announce the release of: openstack-ansible-memcached_server 14.0.0: memcached_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The openstack-ansible-memcached_server role includes a new override, "memcached_connections" which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * The memcached_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "memcached_package_state" to "present". Upgrade Notes ************* * The variable "memcached_apt_packages" has been renamed to "memcached_distro_packages". * The memcached_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "memcached_package_state" should be set to "present". * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of memcached logging. Changes in openstack-ansible-memcached_server 13.0.0..14.0.0 ------------------------------------------------------------ 7e4ceb2 Changed the home-page link 2419086 Update tox.ini tests target for stable/newton d0bbf60 Update ansible-role-requirements to stable/newton 0b00da4 Use centralised test scripts ce5a44f Update UPPER_CONSTRAINTS_FILE for stable/newton 6b3332f Update .gitreview for stable/newton e16ddfd Force Ansible to use dynamic includes 6e4b41c Update testing bits for consistency 0494149 Adjust file descriptor limit when systemd is used 815bc8a Add role linking to tox tests 88c6712 Lower verbosity on memcached server 3b32f51 Compress test execution logs 5009956 Add retry to comply with the until loop ad21ba6 Ansible 2.1.1 role testing 736969d Rename package lists (and related vars) appropriately 3cfa722 Enable log collection after functional testing f449954 Add SNI support to memcached_server role via OS packages 0b1d2e0 Make all linting tests use upper-constraints 741902e Make all linting tests use upper-constraints 0061c77 Remove apt update from Vagrantfile 8b47adf Add apt-get update to run_tests adc12c3 [DOCS] - Removing tags: and category: eff7c7b Updated from global requirements 96e5914 Add python packages for SNI support in tests 52bbe88 [DOCS] Add project links to README 2aa7e61 Move other-requirements.txt to bindep.txt 23cfc19 [DOCS] Move example playbook to separate file dcf127d Include ansible commands for ansible linting 3ab920c Implement log directory link checking ee6ff9a Adding Vagrantfile for developer testing 68e7e05 Add ability to change apt/yum package state db40d59 Ensure that doc linting is included in the linters test 2af529a Use plugins repo version of the human_log callback plugin fa7ff41 Remove duplicates from .gitignore 36f8038 Implement doc8 checks for docs 16d5197 Updated from global requirements 7abca60 Update sphinx configuration 2858aa0 Ensure that gate test does not remove ~/.ansible/tmp a96fa0b Move ansible test requirements into tox.ini e171e23 Add human readable logging callback plugin for func testing 7b71f3d Update tox configuration 5e4e0f0 Pin test-requirements to match OpenStack requirements e97c1f2 Fix spacing and markup in release note 8495251 Update meta to show support for Xenial and CentOS 08fa22c DOC - Adopting the common role documentation pattern 76f4d7d Cleanup/standardize usage of tags d76fb52 Consistency for multi-os in the includes 421a504 Use ansible-lint 2.7.0 0032faf install_test_packages isn't set in memcached role 42e2291 Include empty default vars for package lists f0185d9 Updated role using the Multi-Distro framework c99d1de Removing the `verbose` variable 5c2d8c5 Configure nofile OS limit for memcached server role 17e0ea1 Add .swp files to .gitignore 9e229be Add dependencies for paramiko 2.0 809a27f Remove Liberty releasenote index 3bebceb Ansible 2.x - Address deprecation warning of bare variables 9388606 blacklist Ansible 1.9.6 2d93751 Improved logging for memcached 0cc10c5 Add reno scaffolding for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + CONTRIBUTING.rst | 6 +- README.rst | 21 +- Vagrantfile | 8 + bindep.txt | 41 +++ defaults/main.yml | 16 +- examples/playbook.yml | 5 + handlers/main.yml | 5 + manual-test.rc | 33 +++ meta/main.yml | 8 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + ...package-list-name-changes-a5571c0b72faadf2.yaml | 4 + .../notes/package-state-3bf07796262fc9b9.yaml | 13 + .../notes/remove_verbose_var-c22f4946eedbc5f2.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install-apt.yml | 48 ++++ tasks/install-yum.yml | 44 ++++ tasks/main.yml | 28 +- tasks/memcached_config.yml | 76 +++++- tasks/memcached_install.yml | 35 +-- tasks/memcached_pre_install.yml | 24 -- templates/limits.conf.j2 | 4 + templates/memcached.conf | 10 - templates/memcached.conf.debian.j2 | 15 ++ templates/memcached.debian.j2 | 6 + templates/memcached.j2 | 6 - templates/memcached.redhat.j2 | 13 + test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 26 ++ vars/redhat.yml | 26 ++ 46 files changed, 953 insertions(+), 245 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are gleeful to announce the release of: openstack-ansible-os_ceilometer 14.0.0: os_ceilometer role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Ceilometer can now use Gnocchi for storage. By default this is disabled. To enable the service, set "ceilometer_gnocchi_enabled: yes". See the Gnocchi role documentation for more details. * Yaml files used for ceilometer configuration will now allow a deployer to override a given list. If an override is provided that matches an already defined list in one of the ceilometer default yaml files the entire list will be replaced by the provided override. Previously, a nested lists of lists within the default ceilometer configration files would extend should a deployer provide an override matching an existing pipeline. The extension of the defaults had a high probability to cause undesirable outcomes and was very unpredictable. * The os_ceilometer role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceilometer_package_state" to "present". Upgrade Notes ************* * The default value of "service_credentials/os_endpoint_type" within ceilometer's configuration file has been changed to **internalURL**. This may be overridden through the use of the "ceilometer_ceilometer_conf_overrides" variable. * Installation of ceilometer and its dependent pip packages will now only occur within a Python virtual environment. The "ceilometer_venv_enabled" and "ceilometer_venv_bin" variables have been removed. * The variable "ceilometer_apt_packages" has been renamed to "ceilometer_distro_packages". * The variable "ceilometer_developer_mode_apt_packages" has been renamed to "ceilometer_developer_mode_distro_packages". * The os_ceilometer role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceilometer_package_state" should be set to "present". * The "ceilometer-api" init service is removed since "ceilometer- api" is deployed as an apache "mod_wsgi" service. * Ceilometer no longer manages alarm storage when Aodh is enabled. It now redirects alarm-related requests to the Aodh API. This is now auto-enabled when Aodh is deployed. * Overrides for ceilometer "aodh_connection_string" will no longer work. Specifying an Aodh connection string in Ceilometer was deprecated within Ceilometer in a prior release so this option has been removed. Changes in openstack-ansible-os_ceilometer 13.0.0..14.0.0 --------------------------------------------------------- ba55f1d Update tox.ini tests target for stable/newton 7c57171 Update ansible-role-requirements to stable/newton 4d4c7c1 Update default git branch to stable/newton bb753c3 Use centralised test scripts 1588f5d Update UPPER_CONSTRAINTS_FILE for stable/newton 87700d3 Update .gitreview for stable/newton 8818c7a Work around Ansible vcpu fact bug on ppc64le bf9f0a3 Revert dynamic includes for inventory-based conditionals ae8f455 Force Ansible to use dynamic includes f257d2e Ansible 2.1.1 role testing 0bd1e4a Update rootwrap filter copy for easier maintenance 8608b4c Add Swift telemetry notification consumer to Ceilometer e0c1459 Filter Gnocchi Swift activity in the Ceilometer dispatcher 0d4b961 Disable list_extend in config_template 2296771 [Trival Update] Organize the packages lists ea89da7 Add OSLO DB the ceilometer requirements f2365ec Limit where Apache is installed for Ceilometer 31cddcd Serve the ceilometer-api using mod_wsgi 40850a7 Compress test execution logs de037c4 Rename package lists (and related vars) appropriately 94c5551 Enable log collection after functional testing 8707550 Support for Sahara notifications 07c3ea9 Revert "Revert "RabbitMQ config rework"" 6ee67fe Make all linting tests use upper-constraints 5076014 Added SNI support for os_ceilometer package via OS packages 757d7b1 Remove apt update from Vagrantfile d78484a Add apt-get update to run_tests 0e50d15 Test os_ceilometer role using tempest scenarios acf2d36 Updated from global requirements 5714ad8 [DOCS] - Remove overview from TOC b8e8804 Add python packages for SNI support in tests d602bf3 Update paste, policy and rootwrap configurations 2016-08-15 713b099 [DOCS] - Adding doc comments to defaults file c7277a5 Move other-requirements.txt to bindep.txt 6d7679d [DOCS] Move ceilometer configs from developer docs 2f94423 Include ansible commands for ansible linting cb2139b DOCS - Documenting the role tags 56f2ee4 Revert "RabbitMQ config rework" 1d64ed8 Disable stderr logging 2b2ea34 Add project group to role 1432954 RabbitMQ config rework 1d01cc7 Fix runlevel typo in upstart template f32fdb9 Add ability to change apt/yum package state d208512 Ensure that mode is a string b5bd3c0 Fix ansible performance issue c0e7fe3 Update paste, policy and rootwrap configurations 2016-07-27 1a46237 Ensure that doc linting is included in the linters test 42e3f06 Remove openstack_hosts from test requirements b3e5fbb Optimise pip install tasks f3aeb95 Support service-specific rabbitmq clusters a2d5242 Use plugins repo version of the human_log callback plugin 3ebac92 Updated from global requirements f9e0973 Remove duplicates from .gitignore 5b2e9b9 Implement doc8 checks for docs 5b0dfd8 Update sphinx configuration 449b72b Only install to virtual environment 3baeefc Update tox configuration b621e90 Fix ansible-lint complaint about directory permissions 941e757 Add Gnocchi Support 040cb0f Update Aodh integration 91c70e1 Clean up container cache prep in tests 3dbf9b7 Pin test-requirements to match OpenStack requirements acc08c1 Address Ansible bare variable usage 0b0f0de Implement Ubuntu 16.04 support with SystemD 915480e Cleanup/standardize usage of tags 3255e4e Remove pip_lock_down dependency 28ec620 Consistency for multi-os in the includes 0419277 Remove unnecessary overrides of service variables 2fbe09d Use internal endpoints to communicate b119b67 Removing unused verbose variable from the role bd53b77 Add .swp files to .gitignore dee286c Change pip install task state to 'latest' 85409c6 Remove py_from_git role 4165913 Add dependencies for paramiko 2.0 04194d1 Multi-distro pattern for os_ceilometer role ccf1e36 Update paste, policy and rootwrap configurations 2016-04-22 2162fcb Remove Liberty releasenote index 091850c Clarify role documentation and remove duplication 65d8a90 blacklist Ansible 1.9.6 99d12a8 Fail fast when required secrets are not present 39126f6 Add reno scaffolding for release notes management e8c101d Switch defaults/tests to use master branch 2b893ce Update paste, policy and rootwrap configurations 2016-04-03 060d477 Switch ceilometer to use keystone v3 Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + README.rst | 31 +- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 89 ++++-- examples/playbook.yml | 8 + handlers/main.yml | 21 +- manual-test.rc | 33 ++ meta/main.yml | 12 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../add-gnocchi-integrations-40eef52bf255ab0b.yaml | 7 + ...-default-os-endpoint-type-3adf9db32764ddf3.yaml | 6 + .../disable-list-extend-3a9547de9034f9ba.yaml | 10 + ...lometer-only-install-venv-f3cd57b4a1d025c5.yaml | 5 + ...package-list-name-changes-e351db8b482f1326.yaml | 6 + .../notes/package-state-ed22b9a6683690b3.yaml | 13 + ...moved-ceilometer-api-init-a4bfc4cbabcbcb16.yaml | 4 + .../support-ubuntu-xenial-958e8128ed6578cd.yaml | 3 + .../update-aodh-integration-fd2a27e8864bd8ff.yaml | 10 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.py | 11 +- tasks/ceilometer_apache.yml | 63 ++++ tasks/ceilometer_init.yml | 52 +++ tasks/ceilometer_init_common.yml | 29 ++ tasks/ceilometer_init_systemd.yml | 53 +++ tasks/ceilometer_init_upstart.yml | 39 +++ tasks/ceilometer_install.yml | 148 ++------- tasks/ceilometer_post_install.yml | 50 +-- tasks/ceilometer_pre_install.yml | 27 +- tasks/ceilometer_service_add.yml | 103 ------ tasks/ceilometer_service_setup.yml | 84 ++++- tasks/ceilometer_upstart_common_init.yml | 46 --- tasks/ceilometer_upstart_init.yml | 71 ----- tasks/install-apt.yml | 61 ++++ tasks/main.yml | 57 +++- templates/ceilometer-api-wsgi.py.j2 | 22 ++ templates/ceilometer-httpd.conf.j2 | 16 + templates/ceilometer-ports.conf.j2 | 3 + templates/ceilometer-systemd-init.j2 | 25 ++ templates/ceilometer-systemd-tempfiles.j2 | 4 + templates/ceilometer-upstart-init.j2 | 6 +- templates/ceilometer.conf.j2 | 109 +++++-- templates/event_definitions.yaml.j2 | 45 ++- templates/event_pipeline.yaml.j2 | 1 - templates/gnocchi_resources.yaml.j2 | 13 + test-requirements.txt | 19 +- tox.ini | 160 ++++++---- vars/ubuntu-14.04.yml | 32 ++ vars/ubuntu-16.04.yml | 33 ++ 69 files changed, 2056 insertions(+), 1025 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-security 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are joyful to announce the release of: openstack-ansible-security 14.0.0: OpenStack-Ansible: Host security hardening This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The role now enables auditing during early boot to comply with the requirements in V-38438. By default, the GRUB configuration variables in "/etc/default/grub.d/" will be updated and the active "grub.cfg" will be updated. Deployers can opt-out of the change entirely by setting a variable: security_enable_audit_during_boot: no Deployers may opt-in for the change without automatically updating the active "grub.cfg" file by setting the following Ansible variables: security_enable_audit_during_boot: yes security_enable_grub_update: no * A task was added to disable secure ICMP redirects per the requirements in V-38526. This change can cause problems in some environments, so it is disabled by default. Deployers can enable the task (which disables secure ICMP redirects) by setting "security_disable_icmpv4_redirects_secure" to "yes". * A new task was added to disable ICMPv6 redirects per the requirements in V-38548. However, since this change can cause problems in running OpenStack environments, it is disabled by default. Deployers who wish to enable this task (and disable ICMPv6 redirects) should set "security_disable_icmpv6_redirects" to "yes". * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * The auditd rules template included a rule that audited changes to the AppArmor policies, but the SELinux policy changes were not being audited. Any changes to SELinux policies in "/etc/selinux" are now being logged by auditd. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes * The security role now has tasks that will disable the graphical interface on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7). These changes take effect after a reboot. Deployers that need a graphical interface will need to set the following Ansible variable: security_disable_x_windows: no * An Ansible was added to disable the "rdisc" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_rdisc" to "no". * The Linux Security Module (LSM) that is appropriate for the Linux distribution in use will be automatically enabled by the security role by default. Deployers can opt out of this change by setting the following Ansible variable: security_enable_linux_security_module: False The documentation for STIG V-51337 has more information about how each LSM is enabled along with special notes for SELinux. * A task was added that restricts ICMPv4 redirects to meet the requirements of V-38524 in the STIG. This configuration is disabled by default since it could cause issues with LXC in some environments. Deployers can enable this configuration by setting an Ansible variable: security_disable_icmpv4_redirects: yes * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. * A new configuration parameter "security_ntp_bind_local_interfaces" was added to the security role to restrict the network interface to which chronyd will listen for NTP requests. * The security role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "security_package_state" to "present". * The GPG key checks for package verification in V-38476 are now working for Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for GPG keys from Red Hat and any other GPG keys, such as ones imported from the EPEL repository, are skipped. * Tasks were added to search for any device files without a proper SELinux label on CentOS systems. If any of these device labels are found, the playbook execution will stop with an error message. * The openstack-ansible-security role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. Upgrade Notes ************* * The variable "security_audit_apparmor_changes" is now renamed to "security_audit_mac_changes" and is enabled by default. Setting "security_audit_mac_changes" to "no" will disable syscall auditing for any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS). * The variable "security_sysctl_enable_tcp_syncookies" has replaced "security_sysctl_tcp_syncookies" and it is now a boolean instead of an integer. It is still enabled by default, but deployers can disable TCP syncookies by setting the following Ansible variable: security_sysctl_enable_tcp_syncookies: no * The security role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "security_package_state" should be set to "present". * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no * All variables in the security role are now prepended with "security_" to avoid collisions with variables in other roles. All deployers who have used the security role in previous releases will need to prepend all security role variables with "security_". For example, a deployer could have disabled direct root ssh logins with the following variable: ssh_permit_root_login: yes That variable would become: security_ssh_permit_root_login: yes Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "security_initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * An Ansible task was added to disable the "netconsole" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_netconsole" to "no". * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 13.0.0..14.0.0 ---------------------------------------------------- 72ef48f Update tox.ini tests target for stable/newton 5ee9ead Skip V-38620 (chrony) in gate 5f263af Use centralised test scripts 081e46e Update UPPER_CONSTRAINTS_FILE for stable/newton 888fd8e Update .gitreview for stable/newton f460a97 [Docs] Fix sphinx pickling error 481ad31 Force Ansible to use dynamic includes bb37cfd Fix a minor typo in documentation e5a346f Update testing bits for consistency 4cdf533 [Docs] More cleanup c93b167 Add network conf auditing on CentOS 3d6cac0 [Docs] Update configuration/controls docs 3c19f00 [Docs] Metadata cleanup 4b6cbd5 [Docs] Update dev guide for metadata docs 79eeaa4 Updated from global requirements e57593d Automate the STIG documentation 28c73b4 Use command to avoid alias execution for log compression in CI 6d67b6a Rename collected logs for easier CI viewing 98fdd52 Disable DAC change auditing 1889953 Collect compressed logs after functional test execution 2aca828 Adding V-38438 (auditd during boot) e58ae24 Disable martian logging by default 83dd342 Add additional nullok check 427cd00 Enable log collection after functional testing 1fdd5b4 Remove extra AIDE tasks 129e629 Exclude /run from AIDE checks 4525cae Updated from global requirements 87e2190 Disable automatic ToC generation 578ce32 Ensure AIDE initializes on subsequent runs 31823b7 Implemented: V-38548. a189e05 Fix numbering on V-38583 fb33be7 Update to Ansible 2.1.1 8945ecb Restore logrotate cron job in CI 9ea5033 Fix AIDE cron job creation 862b713 Make all linting tests use upper-constraints 2c4393f Added SNI support for os_security role via OS packages 822ffad Add AIDE cron job in CentOS 7 704e1c8 Implemented: V-38526. 36e7d54 Updated from global requirements f85e9e4 Skip SNMPv1/2 (V-38660) checks in gate 06997d1 Add python packages for SNI support in tests f1acb0f Move other-requirements.txt to bindep.txt 1625f2a Add workaround for CVE-2016-5696 675c9e8 Show idempotency check output a715acf Fix auditd rpmverify check 8d2cde7 Add python-apt for check mode c458db6 Include ansible commands for ansible linting 43c81eb Adjust TCP syncookes variable to bool 08bd55d Correct tags attribute typo 70d9224 Add ability to change apt/yum package state 088884c Ensure that doc linting is included in the linters test 5e70944 Add audit rules to support ppc64le architecture. fa11dd4 Add idempotency check 983f20a Updated from global requirements 20b8d9a Fix duplicated config options in auditd.conf 7f7098c Restore check/audit test in tox.ini b5b92c1 Fix chrony daemon name for rh derivatives cc01563 Use plugins repo version of the human_log callback plugin 7eeaf92 Updated from global requirements e75613e Resolve 'E501 line too long' linters error 7003129 Remove doc8 check ignores 7751415 Update sphinx configuration 65293e8 Update tox configuration e831f70 Docs: Add note about RHEL 7 testing 432a9eb Switch to openstackdocs theme 5f8a93c Ignore ansible-lint warnings about rpm command usage 076be96 Docs: Fix rendering of :orphan: a95aeaa Pin test-requirements to match OpenStack requirements ff07803 Add support for Xenial and CentOS 7 to the Vagrantfile 2538d3c Fix documentation warnings from sphinx 6a9230c Ensure aide-common package is installed ba25681 Use standard check for systemd b937e5b Docs: Specify supported distributions 809b6cb Restart auditd after running augenrules 44e6056 Add key fields to audit rules ef69ba2 Add initial support for Red Hat Enterprise Linux 7 24f3f73 Add release note for V-38524 implementation d56468f Docs: Add developer guide for security role 03d436f Fix grub configuration file path in RHEL/CentOS 7 d8ae1e3 Set check_mode variable every time ee00627 Add check/audit to gate testing 5112569 Implemented: V-38524. 2683e56 Fix broken check mode for CentOS 7 45330fe Don't start LSM in check mode ecb0329 Consistency for multi-os in the includes bf28fdf Search for unlabeled device files 42deedc Remove one more "FAILED" from a custom fail message 40634db Add /etc/apparmor.d/ for auditing 6476ef7 Ensure V-38574 works reliably on CentOS 65a7bc4 Setting default runlevel/target to non-graphical 9fbe88a Fix unlocked account check on Ansible 2.2 09a60bf Remove "FAILED" from custom fail messages 7d2964a Add a note to the README file where to report bugs 7b313ee Adding audit rule for SELinux policy modifications 3114703 Add new parameter 'security_ntp_bind_local_interfaces_only' 31424a4 Enable LSM instead of checking status a841e18 Docs: Update dev notes for Cat 2 controls 32ce224 Docs: Update dev notes for Cat 3 controls e954ff5 Docs: Update dev notes for Cat 1 controls a972b4f Fix null password auth in CentOS 490d2f4 Fix auditd log permission bug 5cd0192 Fixing the "dry-run" errors. 2459cb4 Disable the rdisc service (if present) 3107e7c Disable the netconsole service (if present) 750260d Use ansible_managed variable in templates 05e3a1f Do not use bare variables with with_items b562271 Use fail module instead of debug module with failed_when 8a3a83a Add multi-release docs index 22c4c21 Add CentOS 7 and Ubuntu 16.04 support fa28004 Migrate to unique variable names 54de1b5 Handle Match properly in sshd_config 6f8b686 Removing equal signs in docs f5061fd Switch from dict to individual variables c7d2d84 Add .swp files to .gitignore e57f251 Fix verbiage in docs on auditd rule 19999b4 Add dependencies for paramiko 2.0 77b8b45 Disable failed access auditd logging 8389ec0 Add reno scaffolding for release notes management 5b5eabd blacklist Ansible 1.9.6 d1ca8db Add ability to enable unattended upgrades e44efd0 Doc updates 72cbd94 Fix flake8 violation in conf.py 9058a3f Improved search for unlocked system accounts Diffstat (except docs and test files) ------------------------------------- .gitignore | 19 +- .gitreview | 1 + README.md | 50 +- README.rst | 26 +- Vagrantfile | 59 +- bindep.txt | 44 + defaults/main.yml | 237 +- files/20auto-upgrades | 2 + handlers/main.yml | 23 +- manual-test.rc | 33 + meta/main.yml | 4 + other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-v38438-3f7e905892be4b4f.yaml | 21 + .../notes/adding-v38526-381a407caa566b14.yaml | 8 + .../notes/adding-v38548-9c51b30bf9780ff3.yaml | 8 + .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 + .../aide-initialization-fix-16ab0223747d7719.yaml | 17 + ...diting-mac-policy-changes-fb83e0260a6431ed.yaml | 15 + .../notes/augenrules-restart-39fe3e1e2de3eaba.yaml | 5 + ...figurable-martian-logging-370ede40b036db0b.yaml | 13 + ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...sable-graphical-interface-5db89cd1bef7e12d.yaml | 13 + ...isable-netconsole-service-915bb33449b4012c.yaml | 7 + .../disabling-rdisc-centos-75115b3509941bfa.yaml | 8 + .../notes/enable-lsm-bae903e463079a3f.yaml | 14 + ...ble-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml | 11 + ...-audit-log-permission-bug-81a772e2e6d0a5b3.yaml | 10 + .../fix-check-mode-with-tags-bf798856a27c53eb.yaml | 7 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../notes/implemented-v38524-b357edec95128307.yaml | 12 + .../improved-audit-rule-keys-9fa85f758386446c.yaml | 5 + ...ind-local-interfaces-only-05f03de632e81097.yaml | 5 + .../notes/package-state-6684c5634bdf127a.yaml | 13 + .../reduce-auditd-logging-633677a74aee5481.yaml | 25 + .../notes/rhel-gpg-check-0b483a824314d1b3.yaml | 7 + ...rch-for-unlabeled-devices-cb047c5f767e93ce.yaml | 6 + ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 5 + ...unique-variable-migration-c0639030b495438f.yaml | 20 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++ releasenotes/source/index.rst | 10 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/aide.yml | 115 + tasks/apt.yml | 60 +- tasks/auditd.yml | 97 +- tasks/auth.yml | 167 +- tasks/boot.yml | 32 +- tasks/console.yml | 27 +- tasks/file_perms.yml | 18 +- tasks/kernel.yml | 67 +- tasks/lsm.yml | 83 + tasks/mail.yml | 27 +- tasks/main.yml | 56 +- tasks/misc.yml | 218 +- tasks/nfsd.yml | 24 +- tasks/rpm.yml | 109 + tasks/services.yml | 191 +- tasks/sshd.yml | 82 +- templates/ZZ_aide_exclusions.j2 | 5 +- templates/chrony.conf.j2 | 14 +- templates/jail.local.j2 | 6 +- templates/osas-auditd.j2 | 346 +- test-requirements.txt | 22 +- tox.ini | 172 +- vars/redhat.yml | 38 + vars/ubuntu.yml | 41 + 889 files changed, 10206 insertions(+), 10525 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..73b06a3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,7 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2 +Jinja2>=2.8 # BSD License (3 clause) +lxml>=2.3 # BSD

1 0

[new][openstackansible] openstack-ansible-galera_server 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are high-spirited to announce the release of: openstack-ansible-galera_server 14.0.0: Galera Server role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. * CentOS 7 support has been added to the "galera_server" role. * Implemented support for Ubuntu 16.04 Xenial. percona-xtrabackup packages will be installed from distro repositories, instead of upstream percona repositories due to lack of available packages upstream at the time of implementing this feature. * The galera_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_server_package_state" to "present". Known Issues ************ * Deployments on ppc64le are limited to Ubuntu 16.04 for the Newton release of OpenStack-Ansible. Upgrade Notes ************* * The default database collation has changed from *utf8_unicode_ci* to *utf8_general_ci*. Existing databases and tables will need to be converted. * The MariaDB wait_timeout setting is decreased to 1h to match the SQL Alchemy pool recycle timeout, in order to prevent unnecessary database session buildups. * The variable "galera_pre_packages" has been renamed to "galera_server_required_distro_packages". * The variable "galera_packages" has been renamed to "galera_server_mariadb_distro_packages". * The galera_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_server_package_state" should be set to "present". Deprecation Notes ***************** * galera_package_url changed to percona_package_url for clarity * galera_package_sha256 changed to percona_package_sha256 for clarity * galera_package_path changed to percona_package_path for clarity * galera_package_download_validate_certs changed to percona_package_download_validate_certs for clarity Bug Fixes ********* * Add architecture-specific locations for percona-xtrabackup and qpress, with alternate locations provided for ppc64el due to package inavailability from the current provider. * The "--compact" flag has been removed from xtrabackup options. This had been shown to cause crashes in some SST situations Other Notes *********** * Mariadb version upgrade gate checks removed. Changes in openstack-ansible-galera_server 13.0.0..14.0.0 --------------------------------------------------------- 636d7d9 Update signing key for percona packages c5e81bf Do not ignore_errors for fallback keyserver bd6271c Add tests/common to .gitignore db312c5 Remove 'ignore_errors: true' in favor of 'failed_when: false' 09276e4 Move systemd handler above restart handler 7632420 Allow mysql users to create triggers 3cc340c Set default for physical_host if it's undefined 91ab40e On single nodes use an empty cluster address 94dd58c Update tox.ini tests target for stable/newton 8575139 Update ansible-role-requirements to stable/newton df1bf84 Use centralised test scripts 7bd1175 Update UPPER_CONSTRAINTS_FILE for stable/newton 062f8c3 Update .gitreview for stable/newton 74ac0dc Force Ansible to use dynamic includes 7359513 Update homepage with developer documentation page 6c1422c Address ansible_ssh_* var deprecation 6029354 Update testing bits for consistency 21aaa7c Adjust file descriptor limit when systemd is used 8a9127e Prevent galera_cluster_name from changing. 23098ba Ansible 2.1.1 role testing 45f9c76 Compress test execution logs 352cbd1 Allow galera to listen on v4/v6 b1ed69f Fix arch-specific percona-xtrabackup and qpress a3bb3b7 Enable log collection after functional testing ece430a Work around Ansible vcpu fact bug on ppc64le 45a7ed4 Update qpress to use Xenial package 3df31ce Rename package lists (and related vars) appropriately 885aefa Remove apt update from Vagrantfile 1ac2047 Make all linting tests use upper-constraints 658c848 Added SNI support for galera_server role via OS packages 2e1cf58 Updated from global requirements ff22a68 Add apt-get update to run_tests 3eb2a89 [DOCS] - Removing tags: and category: 49006d7 Add python packages for SNI support in tests 1f0cfa2 remove compact option from xtrabackup a04ca29 Adding Vagrantfile for local testing f18654f Move other-requirements.txt to bindep.txt 50bcea1 [DOCS] Move example playbook to separate file 15310f1 Include ansible commands for ansible linting 54ca3be Add ability to change apt/yum package state 727189f Ensure that doc linting is included in the linters test a69a34f Change the repos to use upstream default 9f47da6 Use plugins repo version of the human_log callback plugin 1763be7 Updated from global requirements 35b1668 Remove duplicates from .gitignore bcd2b9d Implement doc8 checks for docs 4a8707f Update sphinx configuration 8e48a2e Update tox configuration ac3942d Change default collation to utf8_general_ci 4d25aeb Clean up container cache prep in tests 08ce66f Pin test-requirements to match OpenStack requirements 63e1d9f DOC - Adopting the common role documentation pattern db39fee Consistency for multi-os in the includes 5b23837 Add CentOS7 support to Galera Server 5136160 Implement Xenial Support 7bec84f Remove Mariadb Upgrade Check 090240e Use the apt_package_pinning role 05cdf7c Add .swp files to .gitignore ac3bbca Change pip install task state to 'latest' cca71a5 Add dependencies for paramiko 2.0 36c5d83 Ansible 2.x - Address deprecation warning of bare variables b8c1195 Remove Liberty releasenote index a1636b3 Decrease MariaDB wait timeout c8b8902 blacklist Ansible 1.9.6 b9a7361 ensure mysql defaults file is sourced 83556a7 Update min_ansible_version to 1.9 4cff43f Add reno scaffolding for release notes management 3aa680f Add executable bit to run_tests.sh a37735c Reorganize test playbooks a94f88d Fix handlers fac557b Remove dependency on python2_lxc git source 8245978 Add retry logic to mysql_upgrade ff665af removed duplicate key Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + CONTRIBUTING.rst | 2 - README.rst | 23 +- Vagrantfile | 12 + bindep.txt | 41 +++ defaults/main.yml | 57 ++--- examples/playbook.yml | 7 + files/policy-rc.d | 3 +- handlers/main.yml | 16 +- library/mysql_status_facts | 12 +- manual-test.rc | 33 +++ meta/main.yml | 8 +- other-requirements.txt | 17 -- releasenotes/notes/.placeholder | 0 ...pecific-package-locations-e76512288aaf6fa0.yaml | 8 + .../change-default-collation-260d932780ef4553.yaml | 5 + ...riadb-waittimeout-setting-ddaae0f2e1d31ee1.yaml | 5 + ...force-cluster-name-change-b4ce1e225daa840c.yaml | 15 ++ ...implement-centos7-support-cf6b6ee0d606223f.yaml | 3 + .../implement-xenial-support-0de6444c53337d46.yaml | 12 + ...package-list-name-changes-7fcd5583f0db0eb6.yaml | 6 + .../notes/package-state-b7a3d3c242e2c3aa.yaml | 13 + ...emove-upgrade-gate-checks-3fbe339e06094681.yaml | 3 + ...trabackup-compact-disable-8ae9215207147ebc.yaml | 4 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/galera_bootstrap.yml | 10 + tasks/galera_cluster_state.yml | 20 +- tasks/galera_install.yml | 17 +- tasks/galera_install_apt.yml | 144 +++++++++-- tasks/galera_install_yum.yml | 161 ++++++++++++ tasks/galera_post_install.yml | 67 ++++- tasks/galera_pre_install.yml | 124 ++------- tasks/galera_running_check.yml | 16 +- tasks/galera_setup.yml | 7 + tasks/galera_upgrade_check.yml | 38 +-- tasks/galera_upgrade_check_apt.yml | 51 ++++ tasks/galera_upgrade_check_yum.yml | 51 ++++ tasks/galera_upgrade_post.yml | 6 +- tasks/galera_upgrade_pre.yml | 4 +- tasks/main.yml | 14 + templates/cluster.cnf.j2 | 1 - templates/galera_pin.pref.j2 | 5 - templates/limits.conf.j2 | 4 - templates/my.cnf.j2 | 6 +- templates/mysql_defaults.j2 | 2 +- templates/systemd.limits.conf.j2 | 12 + templates/upstart.limits.conf.j2 | 4 + test-requirements.txt | 22 +- tox.ini | 153 ++++++----- vars/redhat-7.yml | 84 ++++++ vars/ubuntu-14.04.yml | 76 +++++- vars/ubuntu-16.04.yml | 113 +++++++++ 72 files changed, 1715 insertions(+), 750 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a9a3fcc..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,5 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 - -# required by Ansible uri module -httplib2 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible 14.0.0 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are eager to announce the release of: openstack-ansible 14.0.0: Ansible playbooks for deploying OpenStack This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * LXC containers will now have a proper RFC1034/5 hostname set during post build tasks. A localhost entry for 127.0.1.1 will be created by converting all of the "_" in the "inventory_hostname" to "-". Containers will be created with a default domain of *openstack.local*. This domain name can be customized to meet your deployment needs by setting the option "lxc_container_domain". * The option "openstack_domain" has been added to the **openstack_hosts** role. This option is used to setup proper hostname entries for all hosts within a given OpenStack deployment. * The **openstack_hosts** role will setup an RFC1034/5 hostname and create an alias for all hosts in inventory. * Added new parameter "`cirros_img_disk_format" to support disk formats other than qcow2. * Ceilometer can now use Gnocchi for storage. By default this is disabled. To enable the service, set "ceilometer_gnocchi_enabled: yes". See the Gnocchi role documentation for more details. * The os_horizon role now has support for the horizon ironic-ui dashboard. The dashboard may be enabled by setting "horizon_enable_ironic_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * Adds support for the horizon ironic-ui dashboard. The dashboard will be automatically enabled if any ironic hosts are defined. * The os_horizon role now has support for the horizon magnum-ui dashboard. The dashboard may be enabled by setting "horizon_enable_magnum_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * Adds support for the horizon magnum-ui dashboard. The dashboard will be automatically enabled if any magnum hosts are defined. * The "horizon_keystone_admin_roles" variable is added to support the "OPENSTACK_KEYSTONE_ADMIN_ROLES" list in the horizon_local_settings.py file. * A new variable has been added to allow a deployer to control the restart of containers via the handler. This new option is "lxc_container_allow_restarts" and has a default of "yes". If a deployer wishes to disable the auto-restart functionality they can set this value to "no" and automatic container restarts that are not absolutely required will be disabled. * Experimental support has been added to allow the deployment of the OpenStack Magnum service when hosts are present in the host group "magnum-infra_hosts". * Deployers can now blacklist certain Nova extensions by providing a list of such extensions in "horizon_nova_extensions_blacklist" variable, for example: horizon_nova_extensions_blacklist: - "SimpleTenantUsage" * The os_nova role can now deploy the nova-lxd hypervisor. This can be achieved by setting "nova_virt_type" to "lxd" on a per-host basis in "openstack_user_config.yml" or on a global basis in "user_variables.yml". * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". * The role now enables auditing during early boot to comply with the requirements in V-38438. By default, the GRUB configuration variables in "/etc/default/grub.d/" will be updated and the active "grub.cfg" will be updated. Deployers can opt-out of the change entirely by setting a variable: security_enable_audit_during_boot: no Deployers may opt-in for the change without automatically updating the active "grub.cfg" file by setting the following Ansible variables: security_enable_audit_during_boot: yes security_enable_grub_update: no * A task was added to disable secure ICMP redirects per the requirements in V-38526. This change can cause problems in some environments, so it is disabled by default. Deployers can enable the task (which disables secure ICMP redirects) by setting "security_disable_icmpv4_redirects_secure" to "yes". * A new task was added to disable ICMPv6 redirects per the requirements in V-38548. However, since this change can cause problems in running OpenStack environments, it is disabled by default. Deployers who wish to enable this task (and disable ICMPv6 redirects) should set "security_disable_icmpv6_redirects" to "yes". * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * In order to reduce the time taken for fact gathering, the default subset gathered has been reduced to a smaller set than the Ansible default. This may be changed by the deployer by setting the "ANSIBLE_GATHER_SUBSET" variable in the bash environment prior to executing any ansible commands. * A new option has been added to "bootstrap-ansible.sh" to set the role fetch mode. The environment variable "ANSIBLE_ROLE_FETCH_MODE" sets how role dependencies are resolved. * The auditd rules template included a rule that audited changes to the AppArmor policies, but the SELinux policy changes were not being audited. Any changes to SELinux policies in "/etc/selinux" are now being logged by auditd. * The container cache preparation process now allows "copy-on-write" to be set as the "lxc_container_backing_method" when the "lxc_container_backing_store" is set to "lvm". When this is set a base container will be created using a name of the form *<linux- distribution>*-*distribution-release>*-*<host-cpu-architecture>*. The container will be stopped as it is not used for anything except to be a backing store for all other containers which will be based on a snapshot of the base container. * When using copy-on-write backing stores for containers, the base container name may be set using the variable "lxc_container_base_name" which defaults to *<linux-distribution >*-*distribution-release>*-*<host-cpu-architecture>*. * The container cache preparation process now allows "overlayfs" to be set as the "lxc_container_backing_store". When this is set a base container will be created using a name of the form *<linux- distribution>*-*distribution-release>*-*<host-cpu-architecture>*. The container will be stopped as it is not used for anything except to be a backing store for all other containers which will be based on a snapshot of the base container. The "overlayfs" backing store is not recommended to be used for production unless the host kernel version is 3.18 or higher. * Containers will now bind mount all logs to the physical host machine in the "/openstack/log/{{ inventory_hostname }}" location. This change will ensure containers using a block backed file system (lvm, zfs, bfrfs) do not run into issues with full file systems due to logging. * Added new variable "tempest_img_name". * Added new variable "tempest_img_url". This variable replaces "cirros_tgz_url" and "cirros_img_url". * Added new variable "tempest_image_file". This variable replaces the hard-coded value for the "img_file" setting in tempest.conf.j2. This will allow users to specify images other than cirros. * Added new variable "tempest_img_disk_format". This variable replaces "cirros_img_disk_format". * The "rsyslog_server" role now has support for CentOS 7. * Support had been added to install the ceph_client packages and dependencies from Ceph.com, Ubuntu Cloud Archive (UCA), or the operating system's default repository. The "ceph_pkg_source" variable controls the install source for the Ceph packages. Valid values include: * "ceph": This option installs Ceph from a ceph.com repo. Additional variables to adjust items such as Ceph release and regional download mirror can be found in the variables files. * "uca": This option installs Ceph from the Ubuntu Cloud Archive. Additional variables to adjust items such as the OpenStack/Ceph release can be found in the variables files. * "distro": This options installs Ceph from the operating system's default repository and unlike the other options does not attempt to manage package keys or add additional package repositories. * The pip_install role can now configure pip to be locked down to the repository built by OpenStack-Ansible. To enable the lockdown configuration, deployers may set "pip_lock_to_internal_repo" to "true" in "/etc/openstack_deploy/user_variables.yml". * The *dynamic_inventory.py* file now takes a new argument, "-- check", which will run the inventory build without writing any files to the file system. This is useful for checking to make sure your configuration does not contain known errors prior to running Ansible commands. * The ability to support MultiStrOps has been added to the config_template action plugin. This change updates the parser to use the "set()" type to determine if values within a given key are to be rendered as "MultiStrOps". If an override is used in an INI config file the set type is defined using the standard yaml construct of "?" as the item marker. # Example Override Entries Section: typical_list_things: - 1 - 2 multistrops_things: ? a ? b # Example Rendered Config: [Section] typical_list_things = 1,2 multistrops_things = a multistrops_things = b * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes * The "rabbitmq_server" now supports a configurable inventory host group. Deployers can override the "rabbitmq_host_group" variable if they wish to use the role to create additional RabbitMQ clusters on a custom host group. * The "lxc-container-create" role now consumes the variable "lxc_container_bind_mounts" which should contain a list of bind mounts to apply to a newly created container. The appropriate host and container directory will be created and the configuration applied to the container config. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The "lxc-container-create" role now consumes the variable "lxc_container_config_list" which should contain a list of the entries which should be added to the LXC container config file when the container is created. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The "lxc-container-create" role now consumes the variable "lxc_container_commands" which should contain any shell commands that should be executed in a newly created container. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The container creation process now allows "copy-on-write" to be set as the "lxc_container_backing_method" when the "lxc_container_backing_store" is set to "lvm". When this is set it will use a snapshot of the base container to build the containers. * The container creation process now allows "overlayfs" to be set as the "lxc_container_backing_store". When this is set it will use a snapshot of the base container to build the containers. The "overlayfs" backing store is not recommended to be used for production unless the host kernel version is 3.18 or higher. * LXC containers will now generate a fixed mac address on all network interfaces when the option *lxc_container_fixed_mac* is set to **true**. This feature was implemented to resolve issues with dynamic mac addresses in containers generally experienced at scale with network intensive services. * All of the database and database user creates have been removed from the roles into the playbooks. This allows the roles to be tested independently of the deployed database and also allows the roles to be used independently of infrastructure choices made by the integrated OSA project. * Host security hardening is now applied by default using the "openstack-ansible-security" role. Developers can opt out by setting the "apply_security_hardening" Ansible variable to "false". For more information about the role and the changes it makes, refer to the openstack-ansible-security documentation (http://docs.openstack.org/developer/openstack-ansible-security/) * If there are swift hosts in the environment, then the value for "cinder_service_backup_program_enabled" will automatically be set to "True". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * If there are swift hosts in the environment, then the value for "glance_default_store" will automatically be set to "swift". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * The os_nova role can now detect a PowerNV environment and set the virtualization type to 'kvm'. * The security role now has tasks that will disable the graphical interface on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7). These changes take effect after a reboot. Deployers that need a graphical interface will need to set the following Ansible variable: security_disable_x_windows: no * Yaml files used for ceilometer configuration will now allow a deployer to override a given list. If an override is provided that matches an already defined list in one of the ceilometer default yaml files the entire list will be replaced by the provided override. Previously, a nested lists of lists within the default ceilometer configration files would extend should a deployer provide an override matching an existing pipeline. The extension of the defaults had a high probability to cause undesirable outcomes and was very unpredictable. * An Ansible was added to disable the "rdisc" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_rdisc" to "no". * Whether ceilometer should be enabled by default for each service is now dynamically determined based on whether there are any ceilometer hosts/containers deployed. This behaviour can still be overridden by toggling "<service>_ceilometer_enabled" in "/etc/openstack_deploy/user_variables.yml". * The "os_neutron" role now determines the default configuration for openvswitch-agent "tunnel_types" and the presence or absence of "local_ip" configuration based on the value of "neutron_ml2_drivers_type". Deployers may directly control this configuration by overriding the "neutron_tunnel_types" variable . * The "os_neutron" role now configures neutron ml2 to load the "l2_population" mechanism driver by default based on the value of "neutron_l2_population". Deployers may directly control the neutron ml2 mechanism drivers list by overriding the "mechanisms" variable in the "neutron_plugins" dictionary. * LBaaSv2 is now enabled by default in all-in-one (AIO) deployments. * The Linux Security Module (LSM) that is appropriate for the Linux distribution in use will be automatically enabled by the security role by default. Deployers can opt out of this change by setting the following Ansible variable: security_enable_linux_security_module: False The documentation for STIG V-51337 has more information about how each LSM is enabled along with special notes for SELinux. * An export flag has been added to the "inventory-manage.py" script. This flag allows exporting of host and network information from an OpenStack-Ansible inventory for import into another system, or an alternate view of the existing data. See the developer docs for more details. * Variable "ceph_extra_confs" has been expanded to support retrieving additional ceph.conf and keyrings from multiple ceph clusters automatically. * Additional libvirt ceph client secrets can be defined to support attaching volumes from different ceph clusters. * New variable "ceph_extra_confs" may be defined to support deployment of extra Ceph config files. This is useful for cinder deployments that utilize multiple Ceph clusters as cinder backends. * The "py_pkgs" lookup plugin now has strict ordering for requirement files discovered. These files are used to add additional requirements to the python packages discovered. The order is defined by the constant, "REQUIREMENTS_FILE_TYPES" which contains the following entries, 'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt', 'global-requirements.txt', 'global-requirement- pins.txt'. The items in this list are arranged from least to most priority. * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. * The repo build process is now able to make use of a pre-staged git cache. If the "/var/www/repo/openstackgit" folder on the repo server is found to contain existing git clones then they will be updated if they do not already contain the required SHA for the build. * The repo build process is now able to synchronize a git cache from the deployment node to the repo server. The git cache path on the deployment node is set using the variable "repo_build_git_cache". If the deployment node hosts the repo container, then the folder will be symlinked into the bind mount for the repo container. If the deployment node does not host the repo container, then the contents of the folder will be synchronised into the repo container. * The "os_glance" role now supports Ubuntu 16.04 and SystemD. * Gnocchi is available for deploy as a metrics storage service. At this time it does not integrate with Aodh or Ceilometer. To deploy Aodh or Ceilometer to use Gnocchi as a storage / query API, each must be configured appropriately with the use of overrides as described in the configuration guides for each of these services. * CentOS 7 and Ubuntu 16.04 support have been added to the "haproxy" role. * The "haproxy" role installs *hatop* from source to ensure that the same operator tooling is available across all supported distributions. The download URL for the source can be set using the variable "haproxy_hatop_download_url". * Added a boolean var *haproxy_service_enabled* to the *haproxy_service_configs* dict to support toggling haproxy endpoints on/off. * Added a new "haproxy_extra_services" var which will allow extra haproxy endpoint additions. * The repo server will now be used as a package manager cache. * The HAProxy role provided by OpenStack-Ansible now terminates SSL using a self-signed certificate by default. While this can be disabled the inclusion of SSL services on all public endpoints as a default will help make deployments more secure without any additional user interaction. More information on SSL and certificate generation can be found here (http://docs.openstack.org/developer /openstack-ansible/install-guide/configure-haproxy.html#securing- haproxy-communication-with-ssl-certificates). * The "rabbitmq_server" role now supports configuring HiPE compilation of the RabbitMQ server Erlang code. This configuration option may improve server performance for some workloads and hardware. Deployers can override the "rabbitmq_hipe_compile" variable, setting a value of "True" if they wish to enable this feature. * Horizon now has the ability to set arbitrary configuration options using global option "horizon_config_overrides" in YAML format. The overrides follow the same pattern found within the other OpenStack service overrides. General documentation on overrides can be found here (http://docs.openstack.org/developer/openstack-ansible/install- guide/configure-openstack.html#overriding-openstack-configuration- defaults). * The "os_horizon" role now supports configuration of custom themes. Deployers can use the new "horizon_custom_themes" and "horizon_default_theme" variables to configure the dashboard with custom themes and default to a specific theme respectively. * CentOS 7 support has been added to the "galera_server" role. * Implemented support for Ubuntu 16.04 Xenial. percona-xtrabackup packages will be installed from distro repositories, instead of upstream percona repositories due to lack of available packages upstream at the time of implementing this feature. * A task was added that restricts ICMPv4 redirects to meet the requirements of V-38524 in the STIG. This configuration is disabled by default since it could cause issues with LXC in some environments. Deployers can enable this configuration by setting an Ansible variable: security_disable_icmpv4_redirects: yes * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. * pip can be installed via the deployment host using the new variable "pip_offline_install". This can be useful in environments where the containers lack internet connectivity. Please refer to the limited connectivity installation guide (http://docs.openstack.org/developer /openstack-ansible/install- guide/app-no-internet-connectivity.html #install-pip-through- deployment-host) for more information. * The env.d directory included with OpenStack-Ansible is now used as the first source for the environment skeleton, and "/etc/openstack_deploy/env.d" will be used only to override values. Deployers without customizations will no longer need to copy the env.d directory to /etc/openstack_deploy. As a result, the env.d copy operation has been removed from the node bootstrap role. * A new debug flag has been added to "dynamic_inventory.py". This should make it easier to understand what's happening with the inventory script, and provide a way to gather output for more detailed bug reports. See the developer docs for more details. * The "ironic" role now supports Ubuntu 16.04 and SystemD. * Experimental support has been added to allow the deployment of the OpenStack Bare Metal Service (Ironic). Details for how to set it up are available in the OpenStack-Ansible Install Guide for Ironic (http://docs.openstack.org/developer/openstack-ansible/install-guide /configure-ironic.html). * To ensure the deployment system remains clean the Ansible execution environment is contained within a virtual environment. The virtual environment is created at "/opt/ansible-runtime" and the "ansible.*" CLI commands are linked within /usr/local/bin to ensure there is no interruption in the deployer workflow. * There is a new default configuration for keepalived, supporting more than 2 nodes. * In order to make use of the latest stable keepalived version, the variable "keepalived_use_latest_stable" must be set to "True" * The ability to support login user domain and login project domain has been added to the keystone module. # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True * The LBaaSv2 service provider configuration can now be adjusted with the "neutron_lbaasv2_service_provider" variable. This allows a deployer to choose to deploy LBaaSv2 with Octavia in a future version. * The config_template action plugin now has a new option to toggle list extension for JSON or YAML formats. The new option is "list_extend" and is a boolean. The default is True which maintains the existing API. * The lxc_hosts role can now make use of a primary and secondary gpg keyserver for gpg validation of the downloaded cache. Setting the servers to use can be done using the "lxc_image_cache_primary_keyserver" and "lxc_image_cache_secondary_keyserver" variables. * The "lxc_container_create" role will now build a container based on the distro of the host OS. * The "lxc_container_create" role now supports Ubuntu 14.04, 16.04, and RHEL/CentOS 7 * The LXC container creation process now has a configurable delay for the task which waits for the container to start. The variable "lxc_container_ssh_delay" can be set to change the default delay of five seconds. * The "lxc_host" cache prep has been updated to use the LXC download template. This removes the last remaining dependency the project has on the rpc-trusty-container.tgz image (http://rpc- repo.rackspace.com/container_images/rpc-trusty-container.tgz) * The "lxc_host" role will build lxc cache using the download template built from images found here (https://images.linuxcontainers.org) These images are upstream builds from the greater LXC/D community. * The "lxc_host" role introduces support for CentOS 7 and Ubuntu 16.04 container types. * The inventory script will now dynamically populate the "lxc_hosts" group dynamically based on which machines have container affinities defined. This group is not allowed in user-defined configuration. * Neutron HA router capabilities in Horizon will be enabled automatically if the neutron plugin type is ML2 and environment has >=2 L3 agent nodes. * Horizon now has a boolean variable named "horizon_enable_ha_router" to enable Neutron HA router management. * Horizon's IPv6 support is now enabled by default. This allows users to manage subnets with IPv6 addresses within the Horizon interface. Deployers can disable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: False Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * memcached now logs with multiple levels of verbosity, depending on the user variables. Setting "debug: True" enables maximum verbosity while setting "verbose: True" logs with an intermediate level. * The openstack-ansible-memcached_server role includes a new override, "memcached_connections" which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * The repo build process is now able to support building and synchronizing artifacts for multiple CPU architectures. Build artifacts are now tagged with the appropriate CPU architecture by default, and synchronization of build artifacts from secondary, architecture-specific repo servers back to the primary repo server is supported. * The repo install process is now able to support building and synchronizing artifacts for multiple CPU architectures. To support multiple architectures, one or more repo servers must be created for each CPU architecture in the deployment. When multiple CPU architectures are detected among the repo servers, the repo- discovery process will automatically assign a repo master to perform the build process for each architecture. * CentOS 7 support has been added to the "galera_client" role. * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Neutron BGP dynamic routing plugin can now optionally be deployed and configured. Please see OpenStack Networking Guide: BGP dynamic routing (http://docs.openstack.org/networking-guide/config-bgp- dynamic-routing.html) for details about what the service is and what it provides. * The Project Calico Neutron networking plugin is now integrated into the deployment. For setup instructions please see "os_neutron" role documentation. * A conditional has been added to the "_local_ip" settings used in the "neutron_local_ip" which removes the hard requirement for an overlay network to be set within a deployment. If no overlay network is set within the deployment the "local_ip" will be set to the value of "ansible_ssh_host". * Deployers can now configure tempest public and private networks by setting the following variables, 'tempest_private_net_provider_type' to either vxlan or vlan and 'tempest_public_net_provider_type' to flat or vlan. Depending on what the deployer sets these variables to, they may also need to update other variables accordingly, this mainly involves 'tempest_public_net_physical_type' and 'tempest_public_net_seg_id'. Please refer to http://docs.openstack.org/mitaka/networking-guide/intro-basic- networking.html for more neutron networking information. * The Project Calico Neutron networking plugin is now integrated into the "os_neutron" role. This can be activated using the instructions located in the role documentation. * The "os_neutron" role will now default to the OVS firewall driver when "neutron_plugin_type" is "ml2.ovs" and the host is running Ubuntu 16.04 on PowerVM. To override this default behavior, deployers should define "neutron_ml2_conf_ini_overrides" and 'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example below neutron_ml2_conf_ini_overrides: securitygroup: firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver neutron_openvswitch_agent_ini_overrides: securitygroup: firewall_driver: iptables_hybrid * Neutron VPN as a Service (VPNaaS) can now optionally be deployed and configured. Please see the OpenStack Networking Guide (http://docs.openstack.org/mitaka/networking-guide/) for details about the what the service is and what it provides. See the VPNaaS Install Guide (http://docs.openstack.org/developer/openstack-ansible /install-guide/configure-network-services.html#virtual-private- network-service-optional) for implementation details. * Support for Neutron distributed virtual routing has been added to the "os_neutron" role. This includes the implementation of Networking Guide's suggested agent configuration. This feature may be activated by setting "neutron_plugin_type: ml2.ovs.dvr" in "/etc/openstack_deploy/user_variables.yml". * The horizon next generation instance management panels have been enabled by default. This changes horizon to use the upstream defaults instead of the legacy panels. Documentation can be found here (http://docs.openstack.org/developer/horizon/topics/settings.html #launch-instance-ng-enabled). * The nova SSH public key distribution has been made a lot faster especially when deploying against very large clusters. To support larger clusters the role has moved away from the "authorized_key" module and is now generating a script to insert keys that may be missing from the authorized keys file. The script is saved on all nova compute nodes and can be found at "/usr/local/bin/openstack- nova-key.sh". If ever there is a need to reinsert keys or fix issues on a given compute node the script can be executed at any time without directly running the ansible playbooks or roles. * The os_nova role can now detect and support basic deployment of a PowerVM environment. This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink package and nova-powervm driver. * Nova UCA repository support is implemented by default. This will allow the users to benefit from the updated packages for KVM. The "nova_uca_enable" variable controls the install source for the KVM packages. By default this value is set to "True" to make use of UCA repository. User can set to "False" to disable. * A new configuration parameter "security_ntp_bind_local_interfaces" was added to the security role to restrict the network interface to which chronyd will listen for NTP requests. * The LXC container creation and modification process now supports online network additions. This ensures a container remains online when additional networks are added to a system. * Open vSwitch driver support has been implemented. This includes the implementation of the appropriate Neutron configuration and package installation. This feature may be activated by setting "neutron_plugin_type: ml2.ovs" in "/etc/openstack_deploy/user_variables.yml". * An opportunistic Ansible execution strategy has been implemented. This allows the Ansible linear strategy to skip tasks with conditionals faster by never queuing the task when the conditional is evaluated to be false. * The Ansible SSH plugin has been modified to support running commands within containers without having to directly ssh into them. The change will detect presence of a container. If a container is found the physical host will be used as the SSH target and commands will be run directly. This will improve system reliability and speed while also opening up the possibility for SSH to be disabled from within the container itself. * Added "horizon_apache_custom_log_format" tunable to the os-horizon role for changing CustomLog format. Default is "combined". * Added keystone_apache_custom_log_format tunable for changing CustomLog format. Default is "combined". * Apache MPM tunable support has been added to the os-keystone role in order to allow MPM thread tuning. Default values reflect the current Ubuntu default settings: keystone_httpd_mpm_backend: event keystone_httpd_mpm_start_servers: 2 keystone_httpd_mpm_min_spare_threads: 25 keystone_httpd_mpm_max_spare_threads: 75 keystone_httpd_mpm_thread_limit: 64 keystone_httpd_mpm_thread_child: 25 keystone_httpd_mpm_max_requests: 150 keystone_httpd_mpm_max_conn_child: 0 * Introduced option to deploy Keystone under Uwsgi. A new variable "keystone_mod_wsgi_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with mod_wsgi for Apache. The ports used by Uwsgi for socket and http connection for both public and admin Keystone services are configurable (see also the "keystone_uwsgi_ports" dictionary variable). Other Uwsgi configuration can be overridden by using the "keystone_uwsgi_ini_overrides" variable as documented under "Overriding OpenStack configuration defaults" in the OpenStack- Ansible Install Guide. Federation features should be considered _experimental_ with this configuration at this time. * Introduced option to deploy Keystone behind Nginx. A new variable "keystone_apache_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with Apache. Additional configuration can be delivered to Nginx through the use of the "keystone_nginx_extra_conf" list variable. Federation features are not supported with this configuration at this time. Use of this option requires "keystone_mod_wsgi_enabled" to be set to "false" which will deploy Keystone under Uwsgi. * The "os_cinder" role now supports Ubuntu 16.04. * CentOS7/RHEL support has been added to the os_cinder role. * CentOS7/RHEL support has been added to the os_glance role. * CentOS7/RHEL support has been added to the os_keystone role. * The "os_magnum" role now supports deployment on Ubuntu 16.04 using systemd. * The galera_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_client_package_state" to "present". * The ceph_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceph_client_package_state" to "present". * The os_ironic role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ironic_package_state" to "present". * The os_nova role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "nova_package_state" to "present". * The memcached_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "memcached_package_state" to "present". * The os_heat role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "heat_package_state" to "present". * The rsyslog_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_server_package_state" to "present". * The pip_install role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "pip_install_package_state" to "present". * The repo_build role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "repo_build_package_state" to "present". * The os_rally role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rally_package_state" to "present". * The os_glance role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "glance_package_state" to "present". * The security role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "security_package_state" to "present". * A new global option to control all package install states has been implemented. The default action for all distribution package installations is to ensure that the latest package is installed. This may be changed to only verify if the package is present by setting "package_state" to "present". * The os_keystone role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "keystone_package_state" to "present". * The os_cinder role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "cinder_package_state" to "present". * The os_gnocchi role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "gnocchi_package_state" to "present". * The os_magnum role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "magnum_package_state" to "present". * The rsyslog_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_client_package_state" to "present". * The os_sahara role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "sahara_package_state" to "present". * The repo_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "repo_server_package_state" to "present". * The haproxy_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "haproxy_package_state" to "present". * The os_aodh role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "aodh_package_state" to "present". * The openstack_hosts role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "openstack_hosts_package_state" to "present". * The galera_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_server_package_state" to "present". * The rabbitmq_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rabbitmq_package_state" to "present". * The lxc_hosts role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "lxc_hosts_package_state" to "present". * The os_ceilometer role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceilometer_package_state" to "present". * The os_swift role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "swift_package_state" to "present". * The os_neutron role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "neutron_package_state" to "present". * The os_horizon role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "horizon_package_state" to "present". * The PATH environment variable that is configured on the remote system can now be set using the "openstack_host_environment_path" list variable. * The repo build process now has the ability to store the pip sources within the build archive. This ability is useful when deploying environments that are "multi-architecture", "multi- distro", or "multi-interpreter" where specific pre-build wheels may not be enough to support all of the deployment. To enable the ability to store the python source code within a given release, set the new option "repo_build_store_pip_sources" to "true". * The repo server now has a Package Cache service for distribution packages. To leverage the cache, deployers will need to configure the package manager on all hosts to use the cache as a proxy. If a deployer would prefer to disable this service, the variable "repo_pkg_cache_enabled" should be set to "false". * The "rabbitmq_server" role now supports deployer override of the RabbitMQ policies applied to the cluster. Deployers can override the "rabbitmq_policies" variable, providing a list of desired policies. * The RabbitMQ Management UI is now available through HAProxy on port 15672. The default userid is "monitoring". This user can be modified by changing the parameter "rabbitmq_monitoring_userid" in the file "user_variables.yml". Please note that ACLs have been added to this HAProxy service by default, such that it may only be accessed by common internal clients. Reference "playbooks/vars/configs/haproxy_config.yml" * Added playbook for deploying Rally in the utility containers * Our general config options are now stored in an "/usr/local/bin /openstack-ansible.rc" file and will be sourced when the "openstack- ansible" wrapper is invoked. The RC file will read in BASH environment variables and should any Ansible option be set that overlaps with our defaults the provided value will be used. * The LBaaSv2 device driver is now set by the Ansible variable "neutron_lbaasv2_device_driver". The default is set to use the "HaproxyNSDriver", which allows for agent-based load balancers. * The GPG key checks for package verification in V-38476 are now working for Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for GPG keys from Red Hat and any other GPG keys, such as ones imported from the EPEL repository, are skipped. * CentOS7 support has been added to the "rsyslog_client" role. * The options of application logrotate configuration files are now configurable. "rsyslog_client_log_rotate_options" can be used to provide a list of directives, and "rsyslog_client_log_rotate_scripts" can be used to provide a list of postrotate, prerotate, firstaction, or lastaction scripts. * Experimental support has been added to allow the deployment of the Sahara data-processing service. To deploy sahara hosts should be present in the host group "sahara-infra_hosts". * The Sahara dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_sahara_ui: True * Tasks were added to search for any device files without a proper SELinux label on CentOS systems. If any of these device labels are found, the playbook execution will stop with an error message. * The repo build process now selectively clones git repositories based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the git repo for the service will not be cloned. This behaviour can be optionally changed to force all git repositories to be cloned by setting "repo_build_git_selective" to "no". * The repo build process now selectively builds venvs based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the venv will not be built. This behaviour can be optionally changed to force all venvs to be built by setting "repo_build_venv_selective" to "yes". * The repo build process now selectively builds python packages based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the list of python packages for the service will not be built. This behaviour can be optionally changed to force all python packages to be built by setting "repo_build_wheel_selective" to "no". * A new variable is supported in the "neutron_services" dictionary called "service_conf_path". This variable enables services to deploy their config templates to paths outside of /etc/neutron by specifying a directory using the new variable. * The openstack-ansible-security role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. * The "fallocate_reserve` option can now be set (in bytes or as a percentage) for swift by using the ``swift_fallocate_reserve" variable in "/etc/openstack_deploy/user_variables.yml". This value is the amount of space to reserve on a disk to prevent a situation where swift is unable to remove objects due to a lack of available disk space to work with. The default value is 1% of the total disk size. * The "openstack-ansible-os_swift" role will now prevent deployers from changing the "swift_hash_path_prefix" and "swift_hash_path_suffix" variables on clusters that already have a value set in "/etc/swift/swift.conf". You can set the new "swift_force_change_hashes" variable to "True" to force the "swift_hash_path_" variables to be changed. We recommend setting this by running the os-swift.yml playbook with "-e swift_force_change_hashes=True", to avoid changing the "swift_hash_path_" variables unintentionally. Use with caution, changing the "swift_hash_path_" values causes end-user impact. * The "os_swift" role has 3 new variables that will allow a deployer to change the hard, soft and fs.file-max limits. the hard and soft limits are being added to the limits.conf file for the swift system user. The fs.file-max settings are added to storage hosts via kernel tuning. The new options are "swift_hard_open_file_limits" with a default of 10240 "swift_soft_open_file_limits" with a default of 4096 "swift_max_file_limits" with a default of 24 times the value of "swift_hard_open_file_limits". * The "pretend_min_part_hours_passed" option can now be passed to swift-ring-builder prior to performing a rebalance. This is set by the "swift_pretend_min_part_hours_passed" boolean variable. The default for this variable is False. We recommend setting this by running the os-swift.yml playbook with "-e swift_pretend_min_part_hours_passed=True", to avoid resetting "min_part_hours" unintentionally on every run. Setting "swift_pretend_min_part_hours_passed" to True will reset the clock on the last time a rebalance happened, thus circumventing the min_part_hours check. This should only be used with extreme caution. If you run this command and deploy rebalanced rings before a replication pass completes, you may introduce unavailability in your cluster. This has an end-user imapct. * While default python interpreter for swift is cpython, pypy is now an option. This change adds the ability to greatly improve swift performance without the core code modifications. These changes have been implemented using the documentation provided by Intel and Swiftstack. Notes about the performance increase can be seen here (https://software.intel.com/en-us/blogs/2016/05/06/doubling-the- performance-of-openstack-swift-with-no-code-changes). * Change the port for devices in the ring by adjusting the port value for services, hosts, or devices. This will not involve a rebalance of the ring. * Changing the port for a device, or group of devices, carries a brief period of downtime to the swift storage services for those devices. The devices will be unavailable during period between when the storage service restarts after the port update, and the ring updates to match the new port. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. * The "os_swift" role will now include the swift "staticweb" middleware by default. * The os_swift role now allows the permissions for the log files created by the swift account, container and object servers to be set. The variable is "swift_syslog_log_perms" and is set to "0644" by default. * Support added to allow deploying on ppc64le architecture using the Ubuntu distributions. * Support had been added to allow the functional tests to pass when deploying on ppc64le architecture using the Ubuntu distributions. * Support for the deployment of Unbound caching DNS resolvers has been added as an optional replacement for /etc/hosts management across all hosts in the environment. To enable the Unbound DNS containers, add "unbound_hosts" entries to the environment. * The "repo_build" role now provides the ability to override the upper-constraints applied which are sourced from OpenStack and from the global-requirements-pins.txt file. The variable "repo_build_upper_constraints_overrides" can be populated with a list of upper constraints. This list will take the highest precedence in the constraints process, with the exception of the pins set in the git source SHAs. Known Issues ************ * Deployments on ppc64le are limited to Ubuntu 16.04 for the Newton release of OpenStack-Ansible. * The variables "haproxy_keepalived_(internal|external)_cidr" now has a default set to "169.254.(2|1).1/24". This is to prevent Ansible undefined variable warnings. Deployers must set values for these variables for a working haproxy with keepalived environment when using more than one haproxy node. * In the latest stable version of keepalived there is a problem with the priority calculation when a deployer has more than five keepalived nodes. The problem causes the whole keepalived cluster to fail to work. To work around this issue it is recommended that deployers limit the number of keepalived nodes to no more than five or that the priority for each node is set as part of the configuration (cf. "haproxy_keepalived_vars_file" variable). * Paramiko version 2.0 Python requires the Python cryptography library. New system packages must be installed for this library. For OpenStack-Ansible versions <12.0.12, <11.2.15, <13.0.2 the system packages must be installed on the **deployment host** manually by executing "apt-get install -y build-essential libssl-dev libffi- dev". Upgrade Notes ************* * LXC containers will now have a proper RFC1034/5 hostname set during post build tasks. A localhost entry for 127.0.1.1 will be created by converting all of the "_" in the "inventory_hostname" to "-". Containers will be created with a default domain of *openstack.local*. This domain name can be customized to meet your deployment needs by setting the option "lxc_container_domain". * A new global variable has been created named "openstack_domain". This variable has a default value of "openstack.local". * The "ca-certificates" package has been included in the LXC container build process in order to prevent issues related to trying to connect to public websites which make use of newer certificates than exist in the base CA certificate store. * In order to reduce the time taken for fact gathering, the default subset gathered has been reduced to a smaller set than the Ansible default. This may be changed by the deployer by setting the "ANSIBLE_GATHER_SUBSET" variable in the bash environment prior to executing any ansible commands. * The environment variable "FORKS" is no longer used. The standard Ansible environment variable "ANSIBLE_FORKS" should be used instead. * The Galera client role now has a dependency on the apt package pinning role. * The variable "security_audit_apparmor_changes" is now renamed to "security_audit_mac_changes" and is enabled by default. Setting "security_audit_mac_changes" to "no" will disable syscall auditing for any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS). * When upgrading deployers will need to ensure they have a backup of all logging from within the container prior to running the playbooks. If the logging node is present within the deployment all logs should already be sync'd with the logging server and no action is required. As a pre-step it's recommended that deployers clean up logging directories from within containers prior to running the playbooks. After the playbooks have run the bind mount will be in effect at "/var/log" which will mount over all previous log files and directories. * Due to a new bind mount at "/var/log" all containers will be restarted. This is a required restart. It is recommended that deployers run the container restarts in serial to not impact production workloads. * The default value of "service_credentials/os_endpoint_type" within ceilometer's configuration file has been changed to **internalURL**. This may be overridden through the use of the "ceilometer_ceilometer_conf_overrides" variable. * The default database collation has changed from *utf8_unicode_ci* to *utf8_general_ci*. Existing databases and tables will need to be converted. * The LXC container cache preparation process now copies package repository configuration from the host instead of implementing its own configuration. The following variables are therefore unnecessary and have been removed: * "lxc_container_template_main_apt_repo" * "lxc_container_template_security_apt_repo" * "lxc_container_template_apt_components" * The LXC container cache preparation process now copies DNS resolution configuration from the host instead of implementing its own configuration. The "lxc_cache_resolvers" variable is therefore unnecessary and has been removed. * The MariaDB wait_timeout setting is decreased to 1h to match the SQL Alchemy pool recycle timeout, in order to prevent unnecessary database session buildups. * The variable "repo_server_packages" that defines the list of packages required to install a repo server has been replaced by "repo_server_distro_packages". * If there are swift hosts in the environment, then the value for "cinder_service_backup_program_enabled" will automatically be set to "True". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * If there are swift hosts in the environment, then the value for "glance_default_store" will automatically be set to "swift". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * The variable "security_sysctl_enable_tcp_syncookies" has replaced "security_sysctl_tcp_syncookies" and it is now a boolean instead of an integer. It is still enabled by default, but deployers can disable TCP syncookies by setting the following Ansible variable: security_sysctl_enable_tcp_syncookies: no * The "glance_apt_packages" variable has been renamed to "glance_distro_packages" so that it applies to multiple operating systems. * Within the "haproxy" role *hatop* has been changed from a package installation to a source-based installation. This has been done to ensure that the same operator tooling is available across all supported distributions. The download URL for the source can be set using the variable "haproxy_hatop_download_url". * Haproxy has a new backend to support using the repo server nodes as a git server. The new backend is called "repo_git" and uses port "9418". Default ACLs have been created to lock down the port's availability to only internal networks originating from an RFC1918 address. * Haproxy has a new backend to support using the repo server nodes as a package manager cache. The new backend is called "repo_cache" and uses port "3142" and a single active node. All other nodes within the pool are backups and will be promoted if the active node goes down. Default ACLs have been created to lock down the port's availability to only internal networks originating from an RFC1918 address. * SSL termination is assumed enabled for all public endpoints by default. If this is not needed it can be disabled by setting the "openstack_external_ssl" option to **false** and the "openstack_service_publicuri_proto" to **http**. * If HAProxy is used as the loadbalancer for a deployment it will generate a self-signed certificate by default. If HAProxy is NOT used, an SSL certificate should be installed on the external loadbalancer. The installation of an SSL certificate on an external load balancer is not covered by the deployment tooling. * In previous releases connections to Horizon originally terminated SSL at the Horizon container. While that is still an option, SSL is now assumed to be terminated at the load balancer. If you wish to terminate SSL at the horizon node change the "horizon_external_ssl" option to **false**. * Public endpoints will need to be updated using the Keystone admin API to support secure endpoints. The Keystone ansible module will not recreate the endpoints automatically. Documentation on the Keystone service catalog can be found here (http://docs.openstack.org/developer/keystone/configuration.html #service-catalog). * Upgrades will not replace entries in the /etc/openstack_deploy/env.d directory, though new versions of OpenStack-Ansible will now use the shipped env.d as a base, which may alter existing deployments. * The variable used to store the mysql password used by the ironic service account has been changed. The following variable: ironic_galera_password: secrete has been changed to: ironic_container_mysql_password: secrete * There is a new default configuration for keepalived. When running the haproxy playbook, the configuration change will cause a keepalived restart unless the deployer has used a custom configuration file. The restart will cause the virtual IP addresses managed by keepalived to be briefly unconfigured, then reconfigured. * A new version of keepalived will be installed on the haproxy nodes if the variable "keepalived_use_latest_stable" is set to "True" and more than one haproxy node is configured. The update of the package will cause keepalived to restart and therefore will cause the virtual IP addresses managed by keepalived to be briefly unconfigured, then reconfigured. * Adding a new nova.conf entry, live_migration_uri. This entry will default to a "qemu-ssh://" uri, which uses the ssh keys that have already been distributed between all of the compute hosts. * The "lxc_container_create" role no longer uses the distro specific lxc container create template. * The following variable changes have been made in the "lxc_host" role: * **lxc_container_template**: Removed because the template option is now contained within the operating system specific variable file loaded at runtime. * **lxc_container_template_options**: This option was renamed to *lxc_container_download_template_options*. The deprecation filter was not used because the values provided from this option have been fundamentally changed and old overrides will cause problems. * **lxc_container_release**: Removed because image is now tied with the host operating system. * **lxc_container_user_name**: Removed because the default users are no longer created when the cached image is created. * **lxc_container_user_password**: Removed because the default users are no longer created when the cached image is created. * **lxc_container_template_main_apt_repo**: Removed because this option is now being set within the cache creation process and is no longer needed here. * **lxc_container_template_security_apt_repo**: Removed because this option is now being set within the cache creation process and is no longer needed here. * The "lxc_host" role no longer uses the distro specific lxc container create template. * The following variable changes have been made in the "lxc_host" role: * **lxc_container_user_password**: Removed because the default lxc container user is no longer created by the lxc container template. * **lxc_container_template_options**: This option was renamed to *lxc_cache_download_template_options*. The deprecation filter was not used because the values provided from this option have been fundamentally changed and potentially old overrides will cause problems. * **lxc_container_base_delete**: Removed because the cache will be refreshed upon role execution. * **lxc_cache_validate_certs**: Removed because the Ansible "get_url" module is no longer used. * **lxc_container_caches**: Removed because the container create process will build a cached image based on the host OS. * LXC package installation and cache preparation will now occur by default only on hosts which will actually implement containers. * The dynamic_inventory script previously set the provider network attributes "is_container_address" and "is_ssh_address" to True for the management network regardless of whether a deployer had them configured this way or not. Now, these attributes must be configured by deployers and the dynamic_inventory script will fail if they are missing or not True. * During upgrades, container and service restarts for the mariadb/galera cluster were being triggered multiple times and causing the cluster to become unstable and often unrecoverable. This situation has been improved immensely, and we now have tight control such that restarts of the galera containers only need to happen once, and are done so in a controlled, predictable and repeatable way. * The memcached log is removed from /var/log/memcached.log and is now stored in the /var/log/memcached folder. * The variable "galera_client_apt_packages" has been replaced by "galera_client_distro_packages". * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Database migration tasks have been added for the dynamic routing neutron plugin. * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * The new host group "neutron_openvswitch_agent" has been added to the "env.d/neutron.yml" and "env.d/nova.yml" environment configuration files in order to support the implementation of Open vSwitch. Deployers must ensure that their environment configuration files are updated to include the above group name. Please see the example implementations in env.d/neutron.yml (https://github.com/openstack /openstack- ansible/blob/stable/newton/etc/openstack_deploy/env.d/neutron.yml) and env.d/nova.yml (https://github.com/openstack/openstack- ansible/blob/stable/newton/etc/openstack_deploy/env.d/nova.yml). * The variable "neutron_agent_mode" has been removed from the "os_neutron" role. The appropriate value for "l3_agent.ini" is now determined based on the "neutron_plugin_type" and host group membership. * The default horizon instance launch panels have been changed to the next generation panels. To enable legacy functionality set the following options accordingly: horizon_launch_instance_legacy: True horizon_launch_instance_ng: False * A new nova admin endpoint will be registered with the suffix "/v2.1/%(tenant_id)s". The nova admin endpoint with the suffix "/v2/%(tenant_id)s" may be manually removed. * Cleanup tasks are added to remove the nova console git directories "/usr/share/novnc" and "/usr/share/spice-html5", prior to cloning these inside the nova vnc and spice console playbooks. This is necessary to guarantee that local modifications do not break git clone operations, especially during upgrades. * The variable "neutron_linuxbridge" has been removed as it is no longer used. * The variable "neutron_driver_interface" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_driver_firewall" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_ml2_mechanism_drivers" has been removed. The appropriate value for ml2_conf.ini is now determined based on the "neutron_plugin_type". * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "glance_venv_bin", "glance_venv_enabled", "glance_venv_etc_dir", and "glance_non_venv_etc_dir" variables have been removed. * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "gnocchi_venv_bin", "gnocchi_venv_enabled", "gnocchi_venv_etc_dir", and "gnocchi_non_venv_etc_dir" variables have been removed. * Installation of heat and its dependent pip packages will now only occur within a Python virtual environment. The "heat_venv_bin" and "heat_venv_enabled" variables have been removed. * Installation of horizon and its dependent pip packages will now only occur within a Python virtual environment. The "horizon_venv_bin", "horizon_venv_enabled", "horizon_venv_lib_dir", and "horizon_non_venv_lib_dir" variables have been removed. * Installation of ironic and its dependent pip packages will now only occur within a Python virtual environment. The "ironic_venv_bin" and "ironic_venv_enabled" variables have been removed. * Installation of keystone and its dependent pip packages will now only occur within a Python virtual environment. The "keystone_venv_enabled" variable has been removed. * The Neutron L3 Agent configuration for the handle_internal_only_routers variable is removed in order to use the Neutron upstream default setting. The current default for handle_internal_only_routers is True, which does allow Neutron L3 router without external networks attached (as discussed per https://bugs.launchpad.net/neutron/+bug/1572390) * Installation of aodh and its dependent pip packages will now only occur within a Python virtual environment. The "aodh_venv_enabled" and "aodh_venv_bin" variables have been removed. * Installation of ceilometer and its dependent pip packages will now only occur within a Python virtual environment. The "ceilometer_venv_enabled" and "ceilometer_venv_bin" variables have been removed. * Installation of cinder and its dependent pip packages will now only occur within a Python virtual environment. The "cinder_venv_enabled" and "cinder_venv_bin" variables have been removed. * Installation of magnum and its dependent pip packages will now only occur within a Python virtual environment. The "magnum_venv_bin", "magnum_venv_enabled" variables have been removed. * Installation of neutron and its dependent pip packages will now only occur within a Python virtual environment. The "neutron_venv_enabled", "neutron_venv_bin", "neutron_non_venv_lib_dir" and "neutron_venv_lib_dir" variables have been removed. * Installation of nova and its dependent pip packages will now only occur within a Python virtual environment. The "nova_venv_enabled", "nova_venv_bin" variables have been removed. * Installation of rally and its dependent pip packages will now only occur within a Python virtual environment. The "rally_venv_bin", "rally_venv_enabled" variables have been removed. * Installation of sahara and its dependent pip packages will now only occur within a Python virtual environment. The "sahara_venv_bin", "sahara_venv_enabled", "sahara_venv_etc_dir", and "sahara_non_venv_etc_dir" variables have been removed. * Installation of swift and its dependent pip packages will now only occur within a Python virtual environment. The "swift_venv_enabled", "swift_venv_bin" variables have been removed. * The variable "keystone_apt_packages" has been renamed to "keystone_distro_packages". * The variable "keystone_idp_apt_packages" has been renamed to "keystone_idp_distro_packages". * The variable "keystone_sp_apt_packages" has been renamed to "keystone_sp_distro_packages". * The variable "keystone_developer_apt_packages" has been renamed to "keystone_developer_mode_distro_packages". * The variable "glance_apt_packages" has been renamed to "glance_distro_packages". * The variable "horizon_apt_packages" has been renamed to "horizon_distro_packages". * The variable "aodh_apt_packages" has been renamed to "aodh_distro_packages". * The variable "cinder_apt_packages" has been renamed to "cinder_distro_packages". * The variable "cinder_volume_apt_packages" has been renamed to "cinder_volume_distro_packages". * The variable "cinder_lvm_volume_apt_packages" has been renamed to "cinder_lvm_volume_distro_packages". * The variable "ironic_api_apt_packages" has been renamed to "ironic_api_distro_packages". * The variable "ironic_conductor_apt_packages" has been renamed to "ironic_conductor_distro_packages". * The variable "ironic_conductor_standalone_apt_packages" has been renamed to "ironic_conductor_standalone_distro_packages". * The variable "galera_pre_packages" has been renamed to "galera_server_required_distro_packages". * The variable "galera_packages" has been renamed to "galera_server_mariadb_distro_packages". * The variable "haproxy_pre_packages" has been renamed to "haproxy_required_distro_packages". * The variable "haproxy_packages" has been renamed to "haproxy_distro_packages". * The variable "memcached_apt_packages" has been renamed to "memcached_distro_packages". * The variable "neutron_apt_packages" has been renamed to "neutron_distro_packages". * The variable "neutron_lbaas_apt_packages" has been renamed to "neutron_lbaas_distro_packages". * The variable "neutron_vpnaas_apt_packages" has been renamed to "neutron_vpnaas_distro_packages". * The variable "neutron_apt_remove_packages" has been renamed to "neutron_remove_distro_packages". * The variable "heat_apt_packages" has been renamed to "heat_distro_packages". * The variable "ceilometer_apt_packages" has been renamed to "ceilometer_distro_packages". * The variable "ceilometer_developer_mode_apt_packages" has been renamed to "ceilometer_developer_mode_distro_packages". * The variable "swift_apt_packages" has been renamed to "swift_distro_packages". * The variable "lxc_apt_packages" has been renamed to "lxc_hosts_distro_packages". * The variable "openstack_host_apt_packages" has been renamed to "openstack_host_distro_packages". * The galera_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_client_package_state" should be set to "present". * The ceph_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceph_client_package_state" should be set to "present". * The os_ironic role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ironic_package_state" should be set to "present". * The os_nova role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "nova_package_state" should be set to "present". * The memcached_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "memcached_package_state" should be set to "present". * The os_heat role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "heat_package_state" should be set to "present". * The rsyslog_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_server_package_state" should be set to "present". * The pip_install role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "pip_install_package_state" should be set to "present". * The repo_build role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "repo_build_package_state" should be set to "present". * The os_rally role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rally_package_state" should be set to "present". * The os_glance role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "glance_package_state" should be set to "present". * The security role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "security_package_state" should be set to "present". * All roles always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "package_state" should be set to "present". * The os_keystone role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "keystone_package_state" should be set to "present". * The os_cinder role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "cinder_package_state" should be set to "present". * The os_gnocchi role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "gnocchi_package_state" should be set to "present". * The os_magnum role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "magnum_package_state" should be set to "present". * The rsyslog_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_client_package_state" should be set to "present". * The os_sahara role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "sahara_package_state" should be set to "present". * The repo_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "repo_server_package_state" should be set to "present". * The haproxy_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "haproxy_package_state" should be set to "present". * The os_aodh role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "aodh_package_state" should be set to "present". * The openstack_hosts role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "openstack_hosts_package_state" should be set to "present". * The galera_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_server_package_state" should be set to "present". * The rabbitmq_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rabbitmq_package_state" should be set to "present". * The lxc_hosts role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "lxc_hosts_package_state" should be set to "present". * The os_ceilometer role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceilometer_package_state" should be set to "present". * The os_swift role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "swift_package_state" should be set to "present". * The os_neutron role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "neutron_package_state" should be set to "present". * The os_horizon role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "horizon_package_state" should be set to "present". * The variable "rsyslog_client_packages" has been replaced by "rsyslog_client_distro_packages". * The variable "rsyslog_server_packages" has been replaced by "rsyslog_server_distro_packages". * The variable "rabbitmq_monitoring_password" has been added to "user_secrets.yml". If this variable does not exist, the RabbitMQ monitoring user will not be created. * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no * The container property "container_release" has been removed as this is automatically set to the same version as the host in the container creation process. * The variable "lxc_container_release" has been removed from the "lxc- container-create.yml" playbook as it is no longer consumed by the container creation process. * LBaaSv1 has been removed from the "neutron-lbaas" project in the Newton release and it has been removed from OpenStack-Ansible as well. * The LVM configuration tasks and "lvm.conf" template have been removed from the "openstack_hosts" role since they are no longer needed. All of the LVM configuration is properly handled in the "os_cinder" role. * In the "rsyslog_client" role, the variable "rsyslog_client_repos" has been removed as it is no longer used. * Percona Xtrabackup has been removed from the Galera client role. * The "infra_hosts" and "infra_containers" inventory groups have been removed. No containers or services were assigned to these groups exclusively, and the usage of the groups has been supplanted by the "shared-infra_*" and "os-infra_*" groups for some time. Deployers who were using the groups should adjust any custom configuration in the "env.d" directory to assign containers and/or services to other groups. * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of memcached logging. * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of logging. * The aodh-api init service is removed since aodh-api is deployed as an apache mod_wsgi service. * The "ceilometer-api" init service is removed since "ceilometer- api" is deployed as an apache "mod_wsgi" service. * The database create and user creates have been removed from the "os_heat" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_nova" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_glance" role. These tasks have been relocated to the playbooks. * The database and user creates have been removed from the "os_horizon" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_cinder" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_neutron" role. These tasks have been relocated to the playbooks. * The Neutron HA tool written by AT&T is no longer enabled by default. This tool was providing HA capabilities for networks and routers that were not using the native Neutron L3HA. Because native Neutron L3HA is stable, compatible with the Linux Bridge Agent, and is a better means of enabling HA within a deployment this tool is no longer being setup by default. If legacy L3HA is needed within a deployment the deployer can set *neutron_legacy_ha_tool_enabled* to **true** to enable the legacy tooling. * The "repo_build_apt_packages" variable has been renamed. "repo_build_distro_packages" should be used instead to override packages required to build Python wheels and venvs. * The "repo_build" role now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "repo_build_uca_enable" to "False". * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings * The "swift_fallocate_reserve" default value has changed from 10737418240 (10GB) to 1% in order to match the OpenStack swift default setting. * A new option *swift_pypy_enabled* has been added to enable or disable the pypy interpreter for swift. The default is "false". * A new option *swift_pypy_archive* has been added to allow a pre- built pypy archive to be downloaded and moved into place to support swift running under pypy. This option is a dictionary and contains the URL and SHA256 as keys. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. * When upgrading a Swift deployment from Mitaka to Newton it should be noted that the enabled middleware list has changed. In Newton the "staticweb" middleware will be loaded by default. While the change adds a feature it is non-disruptive in upgrades. * All variables in the security role are now prepended with "security_" to avoid collisions with variables in other roles. All deployers who have used the security role in previous releases will need to prepend all security role variables with "security_". For example, a deployer could have disabled direct root ssh logins with the following variable: ssh_permit_root_login: yes That variable would become: security_ssh_permit_root_login: yes * Ceilometer no longer manages alarm storage when Aodh is enabled. It now redirects alarm-related requests to the Aodh API. This is now auto-enabled when Aodh is deployed. * Overrides for ceilometer "aodh_connection_string" will no longer work. Specifying an Aodh connection string in Ceilometer was deprecated within Ceilometer in a prior release so this option has been removed. * Hosts running LXC on Ubuntu 14.04 will now need to enable the "trusty-backports" repository. The backports repo on Ubuntu 14.04 is now required to ensure LXC is updated to the latest stable version. * The Aodh data migration script should be run to migrate alarm data from MongoDB storage to Galera due to the pending removal of MongoDB support. * Neutron now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "neutron_uca_enable" to "False". * The "utility-all.yml" playbook will no longer distribute the deployment host's root user's private ssh key to all utility containers. Deployers who desire this behavior should set the "utility_ssh_private_key" variable. * The following variables have been renamed in order to make the variable names neutral for multiple operating systems. * nova_apt_packages -> nova_distro_packages * nova_spice_apt_packages -> nova_spice_distro_packages * nova_novnc_apt_packages -> nova_novnc_distro_packages * nova_compute_kvm_apt_packages -> nova_compute_kvm_distro_packages Deprecation Notes ***************** * Removed "cirros_tgz_url" and in most places replaced with "tempest_img_url". * Removed "cirros_img_url" and in most places replaced with "tempest_img_url". * Removed deprecated variable "tempest_compute_image_alt_ssh_user" * Removed deprecated variable "tempest_compute_image_ssh_password" * Removed deprecated variable "tempest_compute_image_alt_ssh_password" * Renamed "cirros_img_disk_format" to "tempest_img_disk_format" * Downloading and unarchiving a .tar.gz has been removed. The related tempest options "ami_img_file", "aki_img_file", and "ari_img_file" have been removed from tempest.conf.j2. * The "[boto]" section of tempest.conf.j2 has been removed. These tests have been completely removed from tempest for some time. * The "openstack_host_apt_packages" variable has been deprecated. "openstack_host_packages" should be used instead to override packages required to install on all OpenStack hosts. * The "rabbitmq_apt_packages" variable has been deprecated. "rabbitmq_dependencies" should be used instead to override additional packages to install alongside rabbitmq-server. * Moved "haproxy_service_configs" var to "haproxy_default_service_configs" so that "haproxy_service_configs" can be modified and added to without overriding the entire default service dict. * galera_package_url changed to percona_package_url for clarity * galera_package_sha256 changed to percona_package_sha256 for clarity * galera_package_path changed to percona_package_path for clarity * galera_package_download_validate_certs changed to percona_package_download_validate_certs for clarity * The "main" function in "dynamic_inventory.py" now takes named arguments instead of dictionary. This is to support future code changes that will move construction logic into separate files. * Installation of Ansible on the root system, outside of a virtual environment, will no longer be supported. * The variables "`galera_client_package_*`" and "`galera_client_apt_percona_xtrabackup_*`" have been removed from the role as Xtrabackup is no longer deployed. * The Neutron HA tool written by AT&T has been deprecated and will be removed in the Ocata release. Security Issues *************** * A sudoers entry has been added to the repo_servers in order to allow the nginx user to stop and start nginx via the init script. This is implemented in order to ensure that the repo sync process can shut off nginx while synchronising data from the master to the slaves. * A self-signed certificate will now be generated by default when HAproxy is used as a load balancer. This certificate is used to terminate the public endpoint for Horizon and all OpenStack API services. * Horizon disables password autocompletion in the browser by default, but deployers can now enable autocompletion by setting "horizon_enable_password_autocomplete" to "True". * The admin_token_auth middleware presents a potential security risk and will be removed in a future release of keystone. Its use can be removed by setting the "keystone_keystone_paste_ini_overrides" variable. keystone_keystone_paste_ini_overrides: pipeline:public_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service pipeline:admin_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service pipeline:api_v3: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3 Bug Fixes ********* * This role assumes that there is a network named "public|private" and a subnet named "public|private-subnet". These names are made configurable by the addition of two sets of variables; "tempest_public_net_name" and "tempest_public_subnet_name" for public networks and "tempest_private_net_name" and "tempest_private_subnet_name" for private networks This addresses bug 1588818 (https://bugs.launchpad.net/openstack- ansible/+bug/1588818) * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "security_initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * Add architecture-specific locations for percona-xtrabackup and qpress, with alternate locations provided for ppc64el due to package inavailability from the current provider. * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * Logging within the container has been bind mounted to the hosts this reslves issue *1588051 <https://bugs.launchpad.net/openstack- ansible/+bug/1588051>_* * Removed various deprecated / no longer supported features from tempest.conf.j2. Some variables have been moved to their new sections in the config. * The standard collectstatic and compression process in the os_horizon role now happens after horizon customizations are installed, so that all static resources will be collected and compressed. * LXC containers will now have the ability to use a fixed mac address on all network interfaces when the option *lxc_container_fixed_mac* is set **true**. This change will assist in resolving a long standing issue where network intensive services, such as neutron and rabbitmq, can enter a confused state for long periods of time and require rolling restarts or internal system resets to recover. * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * An Ansible task was added to disable the "netconsole" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_netconsole" to "no". * In order to ensure that the appropriate data is delivered to requesters from the repo servers, the slave repo_server web servers are taken offline during the synchronisation process. This ensures that the right data is always delivered to the requesters through the load balancer. * The pip_install_options variable is now honored during repo building. This variable allows deployers to specify trusted CA certificates by setting the variable to "--cert /etc/ssl/certs/ca- certificates.crt" * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * Horizon deployments were broken due to an incorrect hostname setting being placed in the apache ServerName configuration. This caused Horizon startup failure any time debug was disabled. * Changed the way we name host containers groups in dynamic_inventory.py for a hostname from hostname_containers to hostname-host_containers to prevent failing in the case where containers groups have the same name as host containers when choosing hostnames inspired from containers group names. This change fixes the following bugs https://bugs.launchpad.net/openstack- ansible/+bug/1512883 and https://bugs.launchpad.net/openstack- ansible/+bug/1528953. * The ability to support login user domain and login project domain has been added to the keystone module. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1574000 # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * LXC package installation and cache preparation will now occur by default only on hosts which will actually implement containers. * When upgrading it is possible for an old "neutron-ns-metadata- proxy" process to remain running in memory. If this happens the old version of the process can cause unexpected issues in a production environment. To fix this a task has been added to the os_neutron role that will execute a process lookup and kill any "neutron-ns- metadata-proxy" processes that are not running the current release tag. Once the old processes are removed the metadata agent running will respawn everything needed within 60 seconds. * Assigning multiple IP addresses to the same host name will now result in an inventory error before running any playbooks. * The nova admin endpoint is now correctly registered as "/v2.1/%(tenant_id)s" instead of "/v2/%(tenant_id)s". * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". * Deleting variable entries from the "global_overrides" dictionary in "openstack_user_config.yml" now properly removes those variables from the "openstack_inventory.json" file. See Bug * The "pip_packages_tmp" variable has been renamed "pip_tmp_packages" to avoid unintended processing by the py_pkgs lookup plugin. * The "repo_build" role now correctly applies OpenStack requirements upper-constraints when building Python wheels. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1605846 * The check to validate whether an appropriate ssh public key is available to copy into the container cache has been corrected to check the deployment host, not the LXC host. * Static route information for provider networks now *must* include the *cidr* and *gateway* information. If either key is missing, an error will be raised and the dynamic_inventory.py script will halt before any Ansible action is taken. Previously, if either key was missing, the inventory script would continue silently without adding the static route information to the networks. Note that this check does not validate the CIDR or gateway values, just just that the values are present. * The repo_build play now correctly evaluates environment variables configured in /etc/environment. This enables deployments in an environment with http proxies. * Previously, the "ansible_managed" var was being used to insert a header into the "swift.conf" that contained date/time information. This meant that swift.conf across different nodes did not have the same MD5SUM, causing "swift-recon --md5" to break. We now insert a piece of static text instead to resolve this issue. * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. * The "/var/lib/libvirt/qemu/save" directory is now a symlink to "{{ nova_system_home_folder }}/save" to resolve an issue where the default location used by the libvirt managed save command can result with the root partitions on compute nodes becoming full when "nova image-create" is run on large instances. * Aodh has deprecated support for NoSQL storage (MongoDB and Cassandra) in Mitaka with removal scheduled for the O* release. This causes warnings in the logs. The default of using MongoDB storage for Aodh is replaced with the use of Galera. Continued use of MongoDB will require the use of vars to specify a correct "aodh_connection_string" and add pymongo to the "aodh_pip_packages" list. * The "--compact" flag has been removed from xtrabackup options. This had been shown to cause crashes in some SST situations Other Notes *********** * "nova_libvirt_live_migration_flag" is now phased out. Please create a nova configuration override with "live_migration_tunnelled: True" if you want to force the flag "VIR_MIGRATE_TUNNELLED" to libvirt. Nova "chooses a sensible default" otherwise. * "nova_compute_manager" is now phased out. * The in tree "ansible.cfg" file in the playbooks directory has been removed. This file was making compatibility difficult for deployers who need to change these values. Additionally this files very existance forced Ansible to ignore any other config file in either a users home directory or in the default "/etc/ansible" directory. * Mariadb version upgrade gate checks removed. * The "run-playbooks.sh" script has been refactored to run all playbooks using our core tool set and run order. The refactor work updates the old special case script to a tool that simply runs the integrated playbooks as they've been designed. Changes in openstack-ansible 13.0.0..14.0.0 ------------------------------------------- 98303ce Update role SHAs for 14.0.0 2016-10-19 c8e38f0 [Docs] Fix the alignment f1e2070 Update role SHAs for 14.0.0 2016-10-18 e8aa2d2 Enable fixed mac address generation a40428a Add full path to inventory dffd265 updated Appendix H to C 97aa8ed Remove 'ignore_errors: true' in favor of 'failed_when: false' b973a7d [docs] Clarify the 'Network configuration' section fa21e2b Remove the rabbitmq deterministic sort f7adda9 Create log aggregation parent directory 93a7aa6 Add support for the Ceph storage driver in Gnocchi 9572ffd [docs] Provide example configurations 6bbb3d5 Prevent overlayfs use in test when kernel < 3.18 or release == trusty a0bfb6c [docs] Add network config example for test and prod a87ab1a Fix container log bind mount regression 2d558be Change the common proxy cache manage tasks to be stateful d5eb321 Configure Calico specific BIRD settings in OSA d2b7195 [DOCS] Update manual upgrade guide 9ef988a Set default keepalived cidr if none is provided 18de1b4 [Docs] Removed extra grave accent(`) 0d824ce Update role SHAs for 14.0.0 2016-10-12 8668096 Fix value for openstack_host_manage_hosts_file 83dc13e Use UCA for keepalived by default f3965d0 Add missing double quote 4664922 [DOCS] Edits to the target hosts chaps b021ad2 [docs] Add Introduction heading to Appendix B 04605ca [Docs] There was typo mistake dbef51e [docs] Alignment gets corrected d30a5e3 Ensure that repo_server/repo_build use same user:group 5aee4a3 Rename ironic database password during upgrades cfbd4f4 Set calico wheel name for py_pkgs lookup 7052150 [DOCS] Edits to installation chapter b268540 [Docs] RabbitMQ is an AMQP server ff436eb [Docs] Make the security note readable. a3dd33a Update role SHAs for 14.0.0 2016-10-07 410d915 [Docs] Fix space typo with effect on rendered page 36ab2b3 [Docs] Fix Ansible link 5d151d6 Update all SHAs for 14.0.0 2016-10-06 1375f8c [DOCS] Applies edits to the OSA install guide appendix C e6094c8 [DOCS] Applying edits to the OSA install guide: deployment host d02fd99 [DOCS] Applying edits to the OSA install guide: configure 786b31e [DOCS] Applies edits to the OSA install guide appendix D b638321 [DOCS] Edits to appendix E abc1526 [DOCS] Adjust watermark color 4928c37 [DOCS] Edits to appendix F 8d9601b [DOCS] Edits to appendix G 34efaf9 Update all SHAs for 14.0.0 2016-10-05 fe99dad [DOCS] Applies edits to the OSA install guide appendix B ca727cc [docs] Applying edits to the OSA install guide: overview 3c9d3d1 [DOCS] Applies edits to the OSA install guide appendix A bc3c32c Fix a few grammatical errors 539f8fc Checksum all traffic traveling though the bridges 8f4c0c4 [docs] Update Newton doc index 342e147 Revises yaml to YAML ad7231b [install-guide] Aligned properly at Test environment ac14d06 Update UPPER_CONSTRAINTS_FILE for stable/newton f709469 Update .gitreview for stable/newton 57fef57 Move base environment directory to an argument 1443268 Mock file system when testing duplicate IPs ca7df2f Use detailed arguments for main function 62028d0 [DOCS] Added release-name as a watermark to Docs. d98eb49 Change default log bind mount to be optional ee40a8a Fix CentOS Ansible bootstrap 195b505 Update all SHAs for 14.0.0 2016-09-27 1604bba Add sshd_config to the bootstrap AIO process b5806d7 Remove swift_repl|storage_address calculation b091fff Update the order of release note page 2d1ebb3 Add ironic_rabbitmq settings to group_vars/all.yml 41f42be Filter pre_release versions of packages 6a8a41c Log the ansible runtime report to a file 57baef2 Remove the redundant exit tasks from the gate 671a092 Reduce config file IO and date coupling in tests f94b2d4 Create complete AIO inventory config for tests 99b2747 Use lineinfile to add missing user secrets 0c8bd97 Update run-playbooks to support playbook logic e857c43 Add Ironic service info to group_vars/all.yml 83ce564 [docs] Minor edit to the install guide 51a134d Remove use of venv_enabled variables 8d711ae Add debug logging to dynamic inventory e279676 Force Ansible to use dynamic includes a981b31 Add files to .gitignore bd6a0d8 Add curl to utility distro packages 7ac2dd6 [DOC] Better clarification for container_interface in user_config. 350c061 Fix br-vlan port in multi-node bootstrap-host 18c9e1f Add export host option for inventory-manage script 773dc54 Fix deprecation warning for undefined variables f40ecde Update all SHAs for 14.0.0 5098998 Update AIO script to support ubuntu-ports 1b0f020 [docs] Add links to example configuration files 6e50d69 os_ironic mysql password variable not updated 504bffa Add Swift telemetry notification consumer to Ceilometer 10a7d80 [docs] Resolve errors and simplify sphinx config d980d26 Update testing bits for consistency 55de3ed [DOCS] Update to installation guide 5e3f0ba Remove search_regex from mariadb port check f904d75 Fix bootstrap-host authorized_key transfer for multi-nodes 1926e6e Run haproxy playbook earlier within upgrade script c8791e0 Move inventory management code to enable imports ce26d14 Remove repo-server-pip-conf-removal from upgrade script 51f4dec Define networking for Multi-node environments 7a70d25 Remove existing MariaDB HTTPS repos during upgrade 39280be [DOCS] Added dynamic content to Upgrade guide from conf.py 6496c66 Retain apt sources options during host bootstrap 3917510 [install-guide] remove redundant part for security hardening 2e7a2b8 [install-guide] complete commands in prepare target hosts bc8b321 Update all SHAs for Newton 2016-09-16 0bbf801 Modify use of assertTrue(A in B) 518fb38 Add lxc_host dynamic group to inventory. 867bf11 [DOCS] Added missing level info for haproxy_hosts ec2656e Aodh should inherit service_region 2c2fe6c Updated from global requirements 2ec74e9 load variables as a simple var for upgrades ecd81b9 Cleanup/standardize usage of tags in plays e7f37f9 Remove assumption that the neutron_lbaas var is set 27a41d1 [DOCS] Added HAProxy example to Production environment document. eff7914 Gnocchi identities created before Swift playbook f7a50a2 Implement scenario capability for AIO a29d5df Configure Ceilometer middleware for Gnocchi-Swift 968d893 [docs] Merge install guide configure content into a single page cc250b7 Ensure that gnocchi uses keystone authentication ab80b0a Fix log path option 863bedb [Docs] Add explanations about our bug triage process e588a52 Enable the opportunistic strategy eb55da0 Update all SHAs for Newton 2016-09-12 bceb1e1 Make the file name for user_secrets a variable 527e22f Correct Magnum issues found in AIO testing 5a878af Added the option to copy changes between stock env.d and repo env.d[M->N] 084fc69 Ensure file modes are 644 for inventory and group_vars for Magnum 1da4f02 [DOCS] Reorders ToC for upgrade guide cbc9234 Properly namespace cinder_storage_address 5be187d Add ansible_host to dynamic inventory 3978647 Enabled conversion of existing db and tables to utf8_general_ci [M->N] 64708ec Compress all gathered logs for CI 1083dc9 bump the keystone sha for changes to keystone 8cc0125 [docs] added a necessary arg for ansible command after removal of ansible.cfg d0448be [docs] Move all example configurations to Appendix 7c5f177 Add a doc example for yaml file overrides 3b6895b Move network_entry function to top level 0ba4f8b [docs] Minor edits to the overview chapter 128242a Derive the OpenStack service list from the service file eeaa433 Reduce the default fact gather subset e14d359 [docs] Replace 'Host Layout' with 'Service Architecture' 5cc5277 [docs] Split Network Architecture page 4f94bf7 Set file mode to 644 on os-magnum-install.yml a5a5bf8 Skip V-38471 for CI execution f4290c0 [Docs] Update security appendix 4f07ac6 [DOC]Added Xenial support in install guide 2d2b732 [docs] Revise Storage Architecture Overview 55b62e8 [DOCS] Renaming sections for install guide 28544d6 [DOCS] IA movement of the install guide 6b7e646 Ensure that repo build arch grouping always runs 4c18f3d Fixed assumed utility pip install for specific clients a06d93d [DOCS] Clarify is_metal is required if using iSCSI 3210274 Revert "Disable SSL use for RabbitMQ" c496fc5 Move storage diagrams 2e355b3 [DOCS] Rename upgrade documentation to upgrade guide 02ca69a [DOC]Added missing yml file and example for test and production environments. e2341fc Optimize and fix known container hosts group abec787 Move pip_lock_to_internal_repo to group_vars cf52fa7 Ensure tempest always has an Ansible config export 752c9c9 Revert role SHA pins for Newton RC prep 6bd8f3c Add vars for Swift telemetry settings 9096b0d Disable SSL use for RabbitMQ 8d3b3e2 [docs] Add storage diagrams 91032ef Enable Gnocchi and Aodh when inv groups non-empty 73ee3eb Address missing variable in common tasks 46b662d [DOCS] Moving the draft install guide to the install-guide folder 851ac18 Fix role SHA's for Newton-3 release 7669501 Fixed hosts inclusion when requiring the lxc_hosts role 5ee185e Ensure that the filters_path is correctly updated 992e616 Implement container bind mount for all logs 58e9c8d Fix deprecation warning for undefined variables a648951 Add RC source to scripts library 943676b Adding a playbook for deploying Sahara d651ed7 Unbound DNS resolution containers 981db90 Remove pip.conf during upgrade on all hosts c51fe9b Updated from global requirements 192efa5 [DOCS} Further edits, corrects to draft install 8be9f55 Update all SHAs for Newton 2016-08-25 29f29e6 Add Magnum deployment to setup-openstack playbook a889885 Updated from global requirements 75b3628 Support multiple rabbitmq clusters fe55aa2 DOC - note that stable/mitaka on Ubuntu works at most with 14.04 9767d12 Add the BGP dynamic routing neutron plugin 423c409 Remove the ansible.cfg file c89f277 Add play to deploy Rally to the utility containers cebce0c Project Calico integration 16bccd9 [DOCS] Add interface configuration content df49eeb [DOCS] Correcting the appendix letters 92ad610 Tell existing shell about upgraded pip f37351d DOC - remove quotation for code-blocks 6bcfc47 Removed variable changes table from the doc. 6f028ff Fix error when repo_build_git_cache is undefined 382f4be Set default/fix version numbers in upgrade script 8b2cdb3 Automatically detect whether to test all integrated roles 07123eb Fix wrong version of pip used in bootstrap b1483c8 Automatically detect whether to test ceilometer/aodh 5ec339c Automatically enable the cinder backup service ea7e218 Allow the repo-build to index utility pip packages 6a647d5 Remove security hardening toggle from AIO user_variables.yml 64c6307 Automatically set swift as the glance default store 704246d DOC - use 'shell-session' to render root user commands c4efadd [DOCS] Clean up of draft install guide adebdb8 Allow the use of a pre-staged git cache ac35c1d [DOCS] Remove ceph and HAProxy from dev docs ecf73b3 Move ceph_client and haproxy_server to IRR 31280a3 Make all linting tests use upper-constraints 5f396dd Loopback cinder image must insert before exit 0 2683082 Updated from global requirements f7babef Implement inventory API docs 0103e0d Set a long package cache timeout for OpenStack-CI 89f088e Add aodh-api init removal upgrade docs and script d68e65b Add an inventory config check option 9d8177f Update all SHAs for Newton 2016-08-15 b32b5d5 Support pulling architecture-tagged venv artifacts ebc9af1 Remove old inventory conditional support 4049357 Reduce minimum data disk size for the AIO to 50GB 8d2caac Restrict Ansible fact gathering to base subset 45b9642 Limit LXC hosts playbook to container hosts only 2f87f8c Robust base dir support for bootstrapping 49c303a Create config test base class 619b40c Print remaining tasks on failed upgrade correctly abc1663 Add ability to change apt/yum package state globally 07ef158 [docs] fix invalid hyperlink in overview-security.rst 36cd1de [DOC] Add cinder service when cleaning up aio host 28b1fc7 [docs] fix a link in overview-host-layout.rst 199e33c [DOCS] Updates to deploy config f87b141 [DOCS] Update gate job names d493444 [DOCS]Edited the path to installation workflow diagram in install-guide-draft b5dc44c [DOCS] Removing and moving nova and neutron docs ab887ee Include python requirements to resolve SNI issue for Ansible venv b6d9220 Remove "optional" in the o_u_c example for repos 0d1c6ec Fix deprecation warning for ceph_client role. 12d4c7e Do not discard when creating XFS loopback 0461d79 Adding Magnum-UI Horizon support 55de7dd Move package cache configuration to common tasks 627429b [DOCS] Add storage architecture information 7146e82 Relocate Swift configuration docs to os_swift role e9dd96e [DOC] Added automatic fetched latest tags. 57ea99a [DOCS] Ensuring deploy-config accurately reflects changes c278267 [DOCS] Delete horizon docs 085e57d Enable Gnocchi by default 412b863 [DOCS] Delete ceilometer and aodh dev docs 6e432e8 Fix keepalived sync groups var name 19d9064 Remove SSL protocol/cipher from AIO user_variables.yml 5aa7998 Add haproxy_service_enabled boolean 162f530 Add ability to change apt/yum package state for the ceph_client role 62bcac9 Add ability to change apt/yum package state for the haproxy_server role e18c636 Split package update/install commands ab3a192 [DOCS] Remove apt proxy when rebuilding AIO 9b314bf Move other-requirements.txt to bindep.txt e9e79a6 Manual upgrade doc fix 108ea96 Add discovery and build for multiple CPU architectures b921676 [DOC] Modified conf.py to fetch the latest tag automatically 32b0b54 [DOCS] Remove ops-logging Doc 343d9d6 [DOCS] Remove and move keystone federation documentation bc7b0a7 [DOCS] Move RabbitMQ configuration info 2e53019 [DOCS] Fix the appendix order 656543d Ensure that the LXC container log is also destroyed b19f783 [Docs] Remove and move cinder config docs 783ad41 [DOCS] Remove and move ironic role docs 90884cd [DOCS] Remove and move glance documentation 37e7700 Adding support for Magnum c69c031 [docs] Revise deployment host and target hosts chapter d95eaf5 Add test for setting existing used IPs. 6535ec3 Disable V-38660 for OpenStack-CI 233eb80 Refactor "get_instance_info" gathering d3e5487 Fix incorrect operations link in run-playbooks.sh 5dc89d8 Do not override Horizon ServerName in playbook 6cb3b1e Updated from global requirements fd690e1 Better control of mariadb restarts in upgrades 6ae2266 Docs: Minor security overview update 85fde9f [DOCS] - Cleanup Telemetry docs c69a07c [docs] Move ops content and fix build errors 5bf8c53 Update all SHAs for Newton 2016-08-01 b2629de Define retries on ceph keyring fetch task 6c7c870 Remove return_netmask function c790092 Docs: Enabling LBaaSv2 horizon panel 5cc9d0b [docs] Revise deployment configuration chapter a2ed5c3 [docs] Edit the installation chapter 59bdfb9 Add options to allow for selective git clone 17db059 Add SNI support via OS/python packages cf875c8 Update Ansible pin to v2.1.1.0 f2f280b Update the home-page info with the developer documentation d3f240e [docs] Modify host layout diagrams 48ed46e Add Horizon Ironic dashboard plugin 24403e7 Add openrc_region_name to define the service region for openrc files. ccb1036 Added docs for removing compute host 2d965dc Add SNI support via OS packages b52c21e [docs] Remove duplicated content 2c20e5f Revert role SHA pin for Newton-3 development 4cbd2f4 Restore telemetry service deployment d2a2b72 Confirm container data destroys 767662b Fix get_url SNI issues in CentOS 7 9137874 Allow empty container dicts in env overrides 30c0ca3 Add nova-lxd virt driver git repo c9925be Enable the use of a package manager cache a4c836c Fix override of ANSIBLE_PACKAGE variable b3def9d Update all SHAs for Newton 2016-07-27 dcfdc93 Fix role SHA's for Newton-2 release b8b1491 If /var/log/lxc exists, move it to the log aggregation parent 99ffcf3 Implement git server HAP backend 2b422db [DOCS] Fix up validation failures e3526a8 Fix distribution detection in bootstrap e481744 Remove pip_install role execution from RabbitMQ playbook 9812d6d Fix deprecation warning for undefined variables ae8bc70 Address Ansible bare variable usage a7884ba Move UCA repo URL var to role defaults 95adb62 Optimise pip install tasks 413151f Change pip install task state to 'latest' 3fa780d Move LXC AppArmor profile setting to the inventory ade366a Disable ansible retry files 48eedc7 Remove callback plugins 8f1b33d Update the sources-branch-updater 993515c Fix 'D000: Check RST validity' documentation lint failures 30dacdf Dynamically determine whether ceilometer should be enabled c54736f Removing the infra_hosts and infra_containers groups e2663c6 Support other architectures in apt sources.list 6bf159f Move LXC logs to /openstack/log ed4bc6b Add CentOS7 support to the utility playbook 7b75c22 Updated from global requirements 91deb13 Cleanup/standardize common tasks 5455543 Moving neutron play vars to the group_vars for neutron e37f524 Test LBaaSv2 in AIO 43f585a Support for Open vSwitch Distributed Virtual Routing e6ad4cf Update all SHAs for Newton 2016-07-20 5510103 Implement overlayfs as the backing store for the AIO 88ae508 Install Ansible from pypi instead of from a git clone 5c4d8b2 [DOCS] Update 'Practice B' with note e9f6acc Fix 'D001 Line too long' documentation lint failures a982e3a [DOCS] Adding storage arch to install guide draft 8af2c12 Add other-requirements.txt 60bad86 Change requirements pin method 47bd970 Updated from global requirements 7836911 Resolve 'E501 line too long' linters error 4709455 Ensure that gate test does not remove ~/.ansible/tmp 439831f [DOCS] Adding in note for pretend_min_part_hours_passed 9427a99 [DOCS] Clarify variable usage in global_overrides 24e63ab Fix 'D001 Line too long' documentation lint failures 3ef1297 Fix tox functional test 68d68c2 Remove os-detection script 63b4989 Update mongodb bootstrap tasks d312147 Removed the default pip install options from upgrade.sh 63012f0 Add upgrade playbook to update database collations 8e9b800 Added git package to the utility container 98e77ca Remove excessive tags 7518743 Adding requests to bootstrap ansible 57fa0b9 Decouple galera client role from OSA inventory groups 0304137 Docs: Implement Manuals Theme and doc8 checks 89d82b0 Fix 'D002 Trailing whitespace' doc errors 14f6650 Introduce a playbook for deploying Gnocchi 31e6cd0 Remove pip_lock_down requirement 430cb36 [DOCS] PIP install via deployment host 8fb6a3b Fix skipping Ceph client linking a146b7a Document env.d changes in install guide 35c4b55 Fix Neutron local_ip fallback 08beb6f glance_api_servers must contain a valid url with protocol 8d73290 Fail Fast when trying to upgrade with LBaaS v1 enabled bb2d4ad [docs] Remove duplicated content in the current install guide f870707 Doc: Update documentation for lxc_net_mtu config 255de98 Update tox configuration cba8bd5 Document swift in the host layout section 8a49b0c Remove aodh vars present in group_vars 3403f05 Remove duplicate exit_early execution 693911d HAProxy extra endpoints b511791 HAProxy: configure either novnc or spice 7b288ea Use in-tree env.d files, provide override support 523822b Fix memcached flush if -l is in hostname 976d62f Remove cinder vars present in group_vars 5c31795 Remove ceilometer vars present in group_vars a4053a9 [docs] Revise overview chapter in OSA install guide 2a03ba0 Enable OpenStack-Infra Ubuntu Cloud Archive mirror 59e5a7c Define galera_address in the all group_vars 8972dec [docs] Address tox errors dff646c Remove _net_address_search from dynamic inventory 3b51d07 Fix HAProxy config and install version when ssl is disabled d524386 Flush memcached on first listen IP only 4a7e954 Confirm container destroys 912de0f Make pip_lock_to_internal_repo a playbook var 42f1e4b DOC - Fix YAML format in cidr_networks example e84cc94 Remove references to unused heat vars fe9fc36 Trivial typo fixes to dynamic_inventory.py 9be0662 Refactor run-playbooks 23708a6 Docs: Enable LBaaS v2 Horizon panel a471cbc Removing duplicate gather_facts in playbooks e46c1c5 Enable human readable logging fbac5f8 [docs] Fix build errors cc7bd49 Change USED_IPS variable to a Python set 2321424 Address Ansible bare variable usage 97eb3b3 Remove remaining container_release properties 6ac4aa1 Ignore Ansible .retry files 4aa13d4 DOC - Remove instructions to run haproxy-install.yml play 5f06376 Fix typos in openstack-ansible/doc ad69389 Update lists of skipped security role tasks a232676 Gate: Restrict Ansible fact gathering to base subset 2a5a2a1 Add an easy way to run cmds in utility container 7b2a995 Disable root private key distribution by the utility playbook d3f7e80 Remove libvirt bootstrapping from AIO b8802f5 Add conditional for overlay network settings f68bebd Auto-enable Ceilometer + Aodh integration bdb856c [docs] Migrate ops and appendix content effa83d Fix keystone DB Access variable f426eb9 Remove deleted override vars from inventory 53bb55d Ensure that AIO extra indexes config is well formed 875c5e4 [docs] Revise upgrade guide structure 19ac766 Address Ansible bare variable usage f5b39a0 Docs: Fix missing instructions for newton manual upgrades ade33a3 Temporarily disable UCA usage in OpenStack-CI fe60f1e Add release file prep script e5622ad Speed up gate: avoid gathering facts more than necessary 238257b [docs] Migrate deployment configuration options 5db330d Configuring AODH DB now that it uses MySQL. 4402fd3 Docs: Add role development maturity guidelines e679951 Actually remove Ironic container creation from AIO preparation 3fafd24 DOC - fix links in upgrade-playbooks 49c5d1d [docs] Add draft install guide directory d59a2ff Reduce and organize group vars 1133ea8 Remove the AIO metadata checksum fix from run-playbooks 4970801 DOC - Adjust tag usage instructions for VPNaaS 18d4350 Switch Ironic role repo to use git.o.o 07357dd Remove Ironic container creation from AIO preparation 12ba130 Extract and test inventory and backup I/O 7c8533a DOC add note about building AIO more than once f479a21 Do not use cpu_map_update.py anymore 16c0193 change host_containers group names in inventory 06e5aba Revert to test role master branches for Newton-2 development bb69b66 Update all SHAs for Newton-1 2016-06-02 810e0a7 Use combined pip_install role dbdc1c7 Update ansible to version 2.1 3d62933 Consistency for multi-os in the includes d790aa8 DOC New Appendix - custom component layouts 1d29082 RFC1034/5 hostname upgrade e31dee1 Remove AIO cache resolver configuration b5b2bb9 Add RabbitMQ mgmt UI through HAProxy b3683de Remove unneeded playbook vars bd33008 Clarify static route requirements check 729c06c Correct nova admin endpoint version e32d850 Note to deployers overriding MTUs 246d10e DOCS: Clarify guidance for deploy hosts 4303174 Cleanup horizon vars in hosts.yml 8ae5127 Update HAProxy for multi-OS support f7369d9 lxc_cache_resolvers [u'nameserver1',u'nameserver2'] fixing 1211668 [DOCS] Adding missing kernel modules for VPNaaS c904de2 Isolate Ansible from the deployment host 3bb1c40 DOCS: Clean up of the Newton upgrade guide 7f70ca7 Set AIO to use an OpenStack-Infra wheel mirror 4b051d7 Test _ensure_inventory_uptodate function 7ebe085 Reduce reliance on global state for testing 5a1bf48 Ensure all role dependencies are consistently specified 96443f5 Automatically enable neutron ha router capabilities b4f5e13 Expose upgrade guide in base index 86fbc79 Add tests for the _net_address_search function 894e0c4 Test static route settings 213d028 Create ceph python library symlinks 30c59b2 Updates all SHAs for Newton 2016-05-19 96d0dd0 Added option to set the role fetch mode d49494b Add nova-powervm repo for initial PowerVM support b15363c Remove paramiko restriction 69f60a8 Remove AIO container cache apt configuration edee94d Change to using ANSIBLE_FORKS and update related tip 25bb84a Ignore the .coverage temp file 085c31d Bump swift SHA c52755e Docs: Add note about slow galera recovery 59694c7 Network service docs cleanup 6a61321 Add docs for LBaaSv2 Horizon panels 0cdaa5c Various fixes to the proxy default conf and doc 2f81ec1 Updated the link as per comments 6e9db90 Verbose option has been deprecated from oslo.log 0984490 Fix install guide link in contributor guide a372277 Docs: Add note about releasenotes local build fbd1f3f Docs: Troubleshooting info for 3.13 kernel upgrade 602ddac DOC - AIO build expected to be performed as root user 3e4c9df Docs: Cross ref local tests on contribution guide f0c46ca Docs: Document SSH key exchange for Ceph client a44d075 Docs: Fix bulleted lists and spacing 3a0523a DOC: Change swift mountpoint to /srv/node 12d9ef2 Docs: Update Liberty & Mitaka release status a88778f Initial commit to enable mitaka>newton upgrades 601487b Add documentation guidance to the contributor guide 45d5ee5 Refactor ceph_client for multi-OS and ceph 0d3b531 Document the Release Notes build 28340ab DOCS: Deployment host section - cleanup 71554ca DOCS: Configuration section - cleanup cff6ea0 Added the DB and DB user create to the plays 1124a5e Test inventory backup file creation bb5b306 Doc: Correct the note about the LXC host ssh key check e78c9e3 DOCS: Configuration section - cleanup 02f8d3d Test and refactor argument parsing 8b6fb77 DOC - Removing incorrect doc about installation workflow 8399965 Check for two IP addresses assigned to same host dfc642c Docs: Mandatory ssh public key 6be15b8 Isolate Ansible bootstrap from repo servers 60247f2 Add group vars to prep for os_tempest role changes 8e663d7 Add neutron_openvswitch_agent to env.d files 2f45772 Revert "Fix container hostname for RFC 1034/1035" 21c2478 install rabbitmq-server in serial 349e134 DOCS - Installation with limited network connectivity 9a2df7c Mention of the supported locales in the documentation 4b84a8c Use task state instead of output to create haproxy log directory 87e32dc Automatically increment the patch ver with sources-branch-updater 7e8d629 Doc: Configuring the network refactor 55155f3 DOCS: Configuration section - cleanup 0086227 Doc: Configuring the network on target refactor c441849 Ensure that the sources-branch-updater updates the Ironic role 32fd0e7 Fix dynamic_inventory.py test bug a0bceb9 Removed container_release property from environment files 12f0c68 Doc: Notice to disable security hardening role during minor upgrades 4330b4c DOC - Adding footer to Nuage Appendix doc 18ddf7b Add .swp files to .gitignore d80d6f9 Make tox use python2.7 more specifically eee35cc Build wheel for neutron-lbaas-dashboard e971e15 Integrated updates after the multi-distro changes 6bcb3d1 Add release note for paramiko issue workaround afc9ec9 Docs: Appendix section - cleanup 7a82904 Docs: Ops section - cleanup 89963f6 Docs: Installation section - cleanup 2703e4b Docs: Target hosts section - cleanup 3a5672b Check for IP addresses assigned to multiple hosts 5443833 Docs: Overview section - cleanup 51441fe Disable security role during major upgrades 1b4550b Add dependencies for paramiko 2.0 2c5edcf Docs: Clean up multiple make html warnings ef347ab Remove unused var pip_no_index 5a931c7 Add error test coverage and adjust test setup 0cf2c9b Fix typo in overview-hostlayout.rst 2a2ad3a Remove teardown.sh and update related docs 92eb98e Enable SSL termination for all services c361fae Improved logging for memcached (OSA calling part) dbcfdec Add docs for limiting access to services 34ddd52 Fix LBaaSv2 neutron_plugin_base entry in docs e22641a Execute rabbitmq sorts for config tags 909bf76 Set test python executable to python2 644c57b Docs: Update PLUMgrid neutron services dict override 3107fdd Docs: Cleanup page to configure to docs standards 43ff983 [User Guides] Link Updates - openstack-ansible 2fc728d Update Newton SHA's 2016-04-22 72c593c Add docs for HAProxy ping checks 8387b68 Change keystone admin/internal insecure flags e8ae4cb Update sources-branch-updater to handle release note copying 608640c Add missing line number report, fix coverage dep ebdff9e DOCS: Update aio docs for Mitaka edda55e Docs: Split Network Services section into multiple files 7280c90 Docs: Add pip configuration removal to AIO re-deployment process aa1f09f [DOCS] Adding Ironic configuration docs to Ansible install guide b50a190 Nuage Neutron Plugin OSA Install guide 2ffb776 Change keystone admin/internal insecure flags 928e907 Refactor main inventory function for testability 559d2dc Add coverage reporting to inventory testing 9a737ad Fix container hostname for RFC 1034/1035 27e65b2 DOC - Adding warning about changing passwords/secrets ca73998 Add option to auto enable from VPNaaS in Horizon dfe4f10 Docs: Change invalid reference to FWaaS in VPNaaS documentation ae99efd Adding modularity to keepalived configuration 5fceb78 Added horizon documentation section for cinder bb1db35 Doc: Improved documentation about LVM overwrite behaviour f8c30f0 make hostname,network and ip-address on all examples consistent 4604950 blacklist Ansible 1.9.6 0d9530c Add `ironic_swift_temp_url_secret_key` the secrets 60603c3 Adjust ansible-role-requirements-editor file open options 12555d7 ceph configuration for nova glance and cinder 2d82d41 Move inventory environment loading to function fac5030 Update source-branch-updater to work with IRR's 35ed804 Add installation support for os_ironic 12a3fba Fixing keepalived bug when 2+ backup nodes have the same priority fa7218d Minor fix to correct passive to active voice 13de5ff Fix idempotency bug in AIO bootstrap a2c1d8c Fix configuration string for haproxy 4f3b266 Refactor user config loading into function f56c9c6 Modify the haproxy play for ansible2 compat 6d3eea3 Add project scoped token when obtaning token 2288151 Add convenience links for install workflow doc dde53b1 Add tempest_log_dir variable b6a5c9a Apply host security hardening by default d87fdf2 Specify allocation pool for public subnet cc416a1 Doc index update bb61cc0 Add debug and verbose to user variables 6485728 Add trusty_backports note to requirements beafa5b Add Ceilometer instructions to new compute node instructions 36a8151 Update documentation index page 1cc4c11 Set SHA's for master to OpenStack master SHA's 4317c3e Update reno for stable/mitaka 4e5e52a set up the unreleased page for reno d72e3a6 Fix typo in swift.yml.example file 6eb3c34 Ensure the OpenStack gate has access to the logs 797dbb6 Remove hard-coded pip indexes from repo-build playbook fa063b9 removed duplicate key 6f9ef5f Set lxc_container_caches not to use repo_pip_default_index 496bc49 Removing unneeded is_metal param from user_defined_setup 00207d3 Include security role in setup-hosts.yml Diffstat (except docs and test files) ------------------------------------- .gitignore | 16 +- .gitreview | 2 +- ansible-role-requirements.yml | 154 ++-- bindep.txt | 23 + .../installation-hosts-limited-connectivity.rst | 182 ++++ .../developer-docs/ops-remove-computehost.rst | 51 ++ .../install-guide/app-advanced-config-affinity.rst | 50 ++ .../install-guide/app-advanced-config-options.rst | 15 + .../install-guide/app-advanced-config-override.rst | 267 ++++++ .../install-guide/app-advanced-config-security.rst | 39 + .../app-advanced-config-sslcertificates.rst | 141 +++ .../install-guide/app-advanced-role-docs.rst | 92 ++ .../install-guide/configure-cinder-backup.rst | 79 -- .../configure-configurationintegrity.rst | 29 - .../configure-federation-idp-adfs.rst | 42 - .../install-guide/configure-federation-idp.rst | 77 -- .../install-guide/configure-federation-mapping.rst | 168 ---- .../configure-federation-sp-overview.rst | 60 -- .../install-guide/configure-federation-sp.rst | 124 --- .../configure-federation-use-case.rst | 298 ------- .../install-guide/configure-federation-wrapper.rst | 78 -- .../install-guide/configure-network-services.rst | 191 ----- .../install-guide/configure-sslcertificates.rst | 137 --- .../install-guide/configure-swift-config.rst | 328 ------- .../install-guide/configure-swift-devices.rst | 106 --- .../install-guide/configure-swift-glance.rst | 70 -- .../install-guide/configure-swift-overview.rst | 23 - .../install-guide/configure-swift-policies.rst | 51 -- .../figures/arch-layout-production.png | Bin 0 -> 217767 bytes .../figures/arch-layout-production.svg | 3 + .../install-guide/figures/arch-layout-test.png | Bin 0 -> 220515 bytes .../install-guide/figures/arch-layout-test.svg | 3 + .../install-guide/figures/arch-layout.graffle | Bin 0 -> 6161 bytes .../install-guide/figures/environment-overview.png | Bin 72806 -> 0 bytes .../installation-workflow-configure-deployment.png | Bin 0 -> 49639 bytes .../installation-workflow-deploymenthost.png | Bin 0 -> 48857 bytes .../figures/installation-workflow-overview.png | Bin 0 -> 46557 bytes .../installation-workflow-run-playbooks.png | Bin 0 -> 48037 bytes .../figures/installation-workflow-targethosts.png | Bin 0 -> 48201 bytes .../installation-workflow-verify-openstack.png | Bin 0 -> 50368 bytes .../figures/installation-workflow.graffle | Bin 0 -> 2583 bytes .../figures/production-storage-cinder.png | Bin 0 -> 102217 bytes .../production-storage-cinder.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-cinder.svg | 3 + .../figures/production-storage-glance.png | Bin 0 -> 87006 bytes .../production-storage-glance.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-glance.svg | 3 + .../figures/production-storage-nova.png | Bin 0 -> 84263 bytes .../figures/production-storage-nova.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-nova.svg | 3 + .../figures/production-storage-swift.png | Bin 0 -> 108150 bytes .../figures/production-storage-swift.svg | 3 + .../figures/production-storage.graffle/data.plist | Bin 0 -> 8497 bytes .../figures/production-storage.graffle/image3.wmf | Bin 0 -> 19378 bytes .../install-guide/figures/production-storage.svg | 3 + .../figures/workflow-configdeployment.png | Bin 29232 -> 0 bytes .../figures/workflow-deploymenthost.png | Bin 28635 -> 0 bytes .../figures/workflow-foundationplaybooks.png | Bin 29126 -> 0 bytes .../figures/workflow-infraplaybooks.png | Bin 29198 -> 0 bytes .../figures/workflow-openstackplaybooks.png | Bin 28949 -> 0 bytes .../install-guide/figures/workflow-overview.png | Bin 26878 -> 0 bytes .../install-guide/figures/workflow-targethosts.png | Bin 28892 -> 0 bytes .../install-guide/install-infrastructure.rst | 96 --- .../overview-service-architecture.rst | 122 +++ .../install-guide/targethosts-networkconfig.rst | 26 + .../install-guide/targethosts-networkexample.rst | 166 ---- .../install-guide/targethosts-networkrefarch.rst | 140 --- .../upgrade-guide/reference-upgrade-playbooks.rst | 125 +++ .../interfaces.d/openstack_interface.cfg.example | 123 --- .../openstack_interface.cfg.prod.example | 132 +++ .../openstack_interface.cfg.test.example | 94 ++ etc/openstack_deploy/conf.d/ceilometer.yml.example | 7 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 16 + etc/openstack_deploy/conf.d/glance.yml.aio | 4 + etc/openstack_deploy/conf.d/gnocchi.yml.aio | 19 + etc/openstack_deploy/conf.d/heat.yml.aio | 4 + etc/openstack_deploy/conf.d/horizon.yml.aio | 4 + etc/openstack_deploy/conf.d/ironic.yml.aio | 4 + etc/openstack_deploy/conf.d/keystone.yml.aio | 4 + etc/openstack_deploy/conf.d/magnum.yml.aio | 3 + etc/openstack_deploy/conf.d/magnum.yml.example | 8 + etc/openstack_deploy/conf.d/neutron.yml.aio | 5 + etc/openstack_deploy/conf.d/nova.yml.aio | 8 + etc/openstack_deploy/conf.d/sahara.yml.aio | 16 + etc/openstack_deploy/conf.d/swift.yml.example | 8 +- etc/openstack_deploy/conf.d/unbound.conf.aio | 3 + etc/openstack_deploy/conf.d/unbound.conf.example | 8 + etc/openstack_deploy/env.d/aodh.yml | 35 - etc/openstack_deploy/env.d/ceilometer.yml | 60 -- .../env.d/cinder-volume.yml.container.example | 12 + etc/openstack_deploy/env.d/cinder.yml | 79 -- .../env.d/extra_container.yml.example | 2 - etc/openstack_deploy/env.d/galera.yml | 32 - etc/openstack_deploy/env.d/glance.yml | 36 - etc/openstack_deploy/env.d/haproxy.yml | 39 - etc/openstack_deploy/env.d/heat.yml | 51 -- etc/openstack_deploy/env.d/horizon.yml | 31 - etc/openstack_deploy/env.d/infra.yml | 22 - etc/openstack_deploy/env.d/keystone.yml | 40 - etc/openstack_deploy/env.d/memcache.yml | 31 - etc/openstack_deploy/env.d/neutron.yml | 74 -- etc/openstack_deploy/env.d/nova.yml | 113 --- etc/openstack_deploy/env.d/os-infra.yml | 22 - etc/openstack_deploy/env.d/pkg_repo.yml | 39 - etc/openstack_deploy/env.d/rabbitmq.yml | 31 - etc/openstack_deploy/env.d/rsyslog.yml | 39 - etc/openstack_deploy/env.d/shared-infra.yml | 22 - etc/openstack_deploy/env.d/swift-remote.yml | 40 - etc/openstack_deploy/env.d/swift.yml | 81 -- etc/openstack_deploy/env.d/utility.yml | 31 - etc/openstack_deploy/openstack_user_config.yml.aio | 46 +- .../openstack_user_config.yml.example | 86 +- .../openstack_user_config.yml.prod.example | 282 ++++++ .../openstack_user_config.yml.test.example | 144 ++++ etc/openstack_deploy/user_secrets.yml | 35 +- etc/openstack_deploy/user_variables.yml | 40 +- .../user_variables.yml.prod.example | 9 + global-requirement-pins.txt | 16 +- playbooks/ansible.cfg | 24 - playbooks/common-tasks/mysql-db-user.yml | 36 + playbooks/common-tasks/os-log-dir-setup.yml | 42 + playbooks/common-tasks/os-lxc-container-setup.yml | 128 +++ playbooks/common-tasks/package-cache-proxy.yml | 49 ++ playbooks/common-tasks/rabbitmq-vhost-user.yml | 36 + playbooks/defaults/repo_packages/gnocchi.yml | 38 + playbooks/defaults/repo_packages/nova_consoles.yml | 39 + .../defaults/repo_packages/openstack_other.yml | 43 - .../defaults/repo_packages/openstack_services.yml | 104 ++- .../defaults/repo_packages/openstack_testing.yml | 39 + playbooks/defaults/repo_packages/projectcalico.yml | 23 + playbooks/etcd-install.yml | 31 + playbooks/galera-install.yml | 65 +- playbooks/haproxy-install.yml | 119 +-- playbooks/inventory/dynamic_inventory.py | 601 +++++++++---- playbooks/inventory/env.d/aodh.yml | 34 + playbooks/inventory/env.d/ceilometer.yml | 57 ++ playbooks/inventory/env.d/cinder.yml | 75 ++ playbooks/inventory/env.d/galera.yml | 40 + playbooks/inventory/env.d/glance.yml | 44 + playbooks/inventory/env.d/gnocchi.yml | 41 + playbooks/inventory/env.d/haproxy.yml | 38 + playbooks/inventory/env.d/heat.yml | 58 ++ playbooks/inventory/env.d/horizon.yml | 39 + playbooks/inventory/env.d/ironic.yml | 64 ++ playbooks/inventory/env.d/keystone.yml | 38 + playbooks/inventory/env.d/magnum.yml | 39 + playbooks/inventory/env.d/memcache.yml | 39 + playbooks/inventory/env.d/neutron.yml | 80 ++ playbooks/inventory/env.d/nova.yml | 115 +++ playbooks/inventory/env.d/os-infra.yml | 22 + playbooks/inventory/env.d/pkg_repo.yml | 38 + playbooks/inventory/env.d/rabbitmq.yml | 39 + playbooks/inventory/env.d/rsyslog.yml | 38 + playbooks/inventory/env.d/sahara.yml | 38 + playbooks/inventory/env.d/shared-infra.yml | 22 + playbooks/inventory/env.d/swift-remote.yml | 39 + playbooks/inventory/env.d/swift.yml | 77 ++ playbooks/inventory/env.d/unbound.yml | 36 + playbooks/inventory/env.d/utility.yml | 39 + playbooks/inventory/group_vars/all.yml | 425 ++++++++- playbooks/inventory/group_vars/all_containers.yml | 24 +- playbooks/inventory/group_vars/aodh_all.yml | 20 + playbooks/inventory/group_vars/ceilometer_all.yml | 29 + playbooks/inventory/group_vars/cinder_all.yml | 28 + playbooks/inventory/group_vars/cinder_volume.yml | 17 + playbooks/inventory/group_vars/galera_all.yml | 19 + playbooks/inventory/group_vars/glance_all.yml | 23 + playbooks/inventory/group_vars/gnocchi_all.yml | 29 + playbooks/inventory/group_vars/haproxy_all.yml | 20 + playbooks/inventory/group_vars/heat_all.yml | 20 + playbooks/inventory/group_vars/horizon_all.yml | 34 + playbooks/inventory/group_vars/hosts.yml | 279 +----- playbooks/inventory/group_vars/ironic_all.yml | 21 + playbooks/inventory/group_vars/keystone_all.yml | 23 + playbooks/inventory/group_vars/magnum_all.yml | 28 + playbooks/inventory/group_vars/memcached.yml | 19 + playbooks/inventory/group_vars/neutron_agent.yml | 20 + playbooks/inventory/group_vars/neutron_all.yml | 24 + .../group_vars/neutron_calico_dhcp_agent.yml | 99 +++ playbooks/inventory/group_vars/nova_all.yml | 23 + playbooks/inventory/group_vars/rabbitmq_all.yml | 22 + playbooks/inventory/group_vars/repo_all.yml | 47 + playbooks/inventory/group_vars/rsyslog.yml | 19 + playbooks/inventory/group_vars/sahara_all.yml | 17 + playbooks/inventory/group_vars/swift_all.yml | 27 + playbooks/inventory/group_vars/utility_all.yml | 54 ++ playbooks/lxc-containers-create.yml | 9 +- playbooks/lxc-containers-destroy.yml | 39 +- playbooks/lxc-hosts-setup.yml | 35 +- playbooks/memcached-install.yml | 44 +- playbooks/openstack-hosts-setup.yml | 5 +- playbooks/os-aodh-install.yml | 95 +- playbooks/os-ceilometer-install.yml | 103 +-- playbooks/os-cinder-install.yml | 201 ++--- playbooks/os-glance-install.yml | 162 ++-- playbooks/os-gnocchi-install.yml | 70 ++ playbooks/os-heat-install.yml | 134 +-- playbooks/os-horizon-install.yml | 86 +- playbooks/os-ironic-install.yml | 63 ++ playbooks/os-keystone-install.yml | 172 ++-- playbooks/os-magnum-install.yml | 64 ++ playbooks/os-neutron-install.yml | 187 ++-- playbooks/os-nova-install.yml | 181 ++-- playbooks/os-rally-install.yml | 34 + playbooks/os-sahara-install.yml | 74 ++ playbooks/os-swift-install.yml | 164 +--- playbooks/os-swift-setup.yml | 156 ---- playbooks/os-swift-sync.yml | 5 +- playbooks/os-tempest-install.yml | 16 +- playbooks/rabbitmq-install.yml | 73 +- playbooks/repo-build.yml | 102 ++- playbooks/repo-server.yml | 87 +- playbooks/roles/ceph_client/defaults/main.yml | 89 -- playbooks/roles/ceph_client/handlers/main.yml | 25 - playbooks/roles/ceph_client/meta/main.yml | 6 - playbooks/roles/ceph_client/tasks/ceph_all.yml | 43 - playbooks/roles/ceph_client/tasks/ceph_auth.yml | 151 ---- playbooks/roles/ceph_client/tasks/ceph_config.yml | 61 -- .../roles/ceph_client/tasks/ceph_get_mon_host.yml | 40 - playbooks/roles/ceph_client/tasks/ceph_install.yml | 47 - .../roles/ceph_client/tasks/ceph_preinstall.yml | 77 -- playbooks/roles/ceph_client/tasks/main.yml | 29 - .../ceph_client/templates/ceph.client.keyring.j2 | 2 - playbooks/roles/ceph_client/templates/ceph.conf.j2 | 7 - .../roles/ceph_client/templates/ceph_pin.pref.j2 | 5 - .../roles/ceph_client/templates/secret.xml.j2 | 7 - playbooks/roles/ceph_client/vars/main.yml | 51 -- playbooks/roles/haproxy_server/CONTRIBUTING.rst | 85 -- playbooks/roles/haproxy_server/LICENSE | 202 ----- playbooks/roles/haproxy_server/README.rst | 26 - playbooks/roles/haproxy_server/defaults/main.yml | 86 -- .../roles/haproxy_server/files/haproxy-logging.cfg | 6 - .../roles/haproxy_server/files/haproxy.default | 8 - playbooks/roles/haproxy_server/files/haproxy.sh | 171 ---- playbooks/roles/haproxy_server/handlers/main.yml | 33 - playbooks/roles/haproxy_server/meta/main.yml | 32 - .../haproxy_server/tasks/haproxy_add_ppa_repo.yml | 103 --- .../roles/haproxy_server/tasks/haproxy_install.yml | 66 -- .../haproxy_server/tasks/haproxy_post_install.yml | 44 - .../haproxy_server/tasks/haproxy_pre_install.yml | 41 - .../tasks/haproxy_service_config.yml | 23 - .../tasks/haproxy_ssl_configuration.yml | 69 -- playbooks/roles/haproxy_server/tasks/main.yml | 26 - .../roles/haproxy_server/templates/haproxy.cfg.j2 | 36 - .../haproxy_server/templates/haproxy_pin.pref.j2 | 5 - .../roles/haproxy_server/templates/service.j2 | 56 -- playbooks/rsyslog-install.yml | 62 +- playbooks/security-hardening.yml | 10 +- playbooks/setup-hosts.yml | 1 + playbooks/setup-infrastructure.yml | 4 +- playbooks/setup-openstack.yml | 11 + playbooks/unbound-install.yml | 94 ++ playbooks/utility-install.yml | 129 ++- playbooks/vars/configs/haproxy_config.yml | 219 +++-- playbooks/vars/configs/keepalived_haproxy.yml | 70 +- ...and-1035-container-update-6e880e4b45e11cf0.yaml | 15 + .../notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml | 8 + ...FC1034-5_hostname_upgrade-677da788600edbca.yaml | 5 + .../notes/add-ca-certs-2398cb4856356028.yaml | 6 + .../add-disk-image-type-932898aca944f14a.yaml | 4 + .../add-gnocchi-integrations-40eef52bf255ab0b.yaml | 7 + ...-ironic-dashboard-support-3eb5168d71e4dddd.yaml | 5 + ...-ironic-dashboard-support-769d60881f0e12d9.yaml | 5 + ...-magnum-dashboard-support-4fcddedffb83bc28.yaml | 5 + ...-magnum-dashboard-support-e41ac6fb6bc14946.yaml | 5 + ...stone-admin-roles-setting-83198a721c64ee3c.yaml | 5 + ...-container-restart-option-8c7f5b20b9414ead.yaml | 8 + .../notes/add-magnum-to-repo-548f243b3a253b04.yaml | 5 + ...dd-network-name-variables-d658745d7113110e.yaml | 8 + ...nova-extensions-blacklist-8ed18f45aba6a7fb.yaml | 11 + .../notes/add-nova-lxd-f094438e4bf36d52.yaml | 6 + .../notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 + .../notes/add-v38438-3f7e905892be4b4f.yaml | 21 + .../notes/add-xenial-support-3dc3711e5b1bdc34.yaml | 4 + .../notes/add-xenial-support-5c117335b7b7b407.yaml | 3 + .../notes/add-xenial-support-7c24aa813289aa40.yaml | 3 + .../notes/add-xenial-support-e285a643a39f0438.yaml | 4 + .../notes/adding-v38526-381a407caa566b14.yaml | 8 + .../notes/adding-v38548-9c51b30bf9780ff3.yaml | 8 + .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 + .../aide-initialization-fix-16ab0223747d7719.yaml | 17 + .../ansible-fact-subset-08e582fcf7ba4e4e.yaml | 13 + .../notes/ansible-forks-fa70caf5155c5d25.yaml | 4 + .../ansible-role-fetch-mode-cd163877e96d504a.yaml | 5 + ...ackage-pinning-dependency-6e2e94d829508859.yaml | 4 + ...pecific-package-locations-e76512288aaf6fa0.yaml | 8 + ...diting-mac-policy-changes-fb83e0260a6431ed.yaml | 15 + .../notes/augenrules-restart-39fe3e1e2de3eaba.yaml | 5 + .../base-container-lvm-cow-2faa824f6cd4b083.yaml | 14 + .../base-container-overlayfs-ec7eeda2f5807e96.yaml | 11 + .../notes/bindmount-logs-3c23aab5b5ed3440.yaml | 25 + .../broader-image-support-69241983e5a36018.yaml | 30 + ...-default-os-endpoint-type-3adf9db32764ddf3.yaml | 6 + .../notes/centos-7-support-d96233f41f63cfb8.yaml | 3 + .../ceph-from-uca-and-distro-2fa04e03c39a61bc.yaml | 21 + .../change-default-collation-260d932780ef4553.yaml | 5 + .../notes/combine_pip_roles-ba524dbaa601e1a1.yaml | 6 + .../compress-customization-a7d03162d837085f.yaml | 5 + .../config_check_argument-5a1126c779e3e8f5.yaml | 7 + ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 29 + ...figurable-martian-logging-370ede40b036db0b.yaml | 13 + ...figurable_inventory_group-9f5b193221b7006d.yaml | 7 + .../container-bind-mounts-1a3a763178255841.yaml | 12 + .../container-config-list-a98937ae0ff94cf0.yaml | 10 + ...container-create-commands-b3aa578309fa665b.yaml | 8 + .../container-create-lvm-cow-77c049188b8a2676.yaml | 6 + ...ontainer-create-overlayfs-46f3c4c0ecacaadf.yaml | 7 + ...container-repo-host-match-2be99b14642e0591.yaml | 12 + ...ntainer-resolv-host-match-c6e3760cf4a8e5cd.yaml | 6 + ...iner-static-mac-addresses-9aae098fdc8a57cc.yaml | 15 + .../db-create-in-playbooks-6fb8232da53fe1e1.yaml | 8 + ...riadb-waittimeout-setting-ddaae0f2e1d31ee1.yaml | 5 + ...e-host-security-hardening-eb73923218abbc2c.yaml | 7 + ...enstack-host-apt-packages-b4d7af53d55d980d.yaml | 5 + ...ate-rabbitmq_apt_packages-b85ea1b449dc136e.yaml | 5 + ...precate-repo-apt-packages-f8c4a22fc60828bf.yaml | 5 + ...ect-cinder-backup-service-7dc68f532741be87.yaml | 13 + ...lance-default-store-swift-b9c36f4a2fe05ec4.yaml | 11 + .../notes/detect_power-a6a679c8c3dd3262.yaml | 4 + ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...sable-graphical-interface-5db89cd1bef7e12d.yaml | 13 + .../disable-list-extend-3a9547de9034f9ba.yaml | 10 + ...isable-netconsole-service-915bb33449b4012c.yaml | 7 + ...le_slave_repo_during_sync-2aaabf90698221e3.yaml | 9 + .../disabling-rdisc-centos-75115b3509941bfa.yaml | 8 + ...mic-ceilometer-enablement-18be0bb994ede62a.yaml | 7 + .../dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml | 12 + .../notes/enable-lbaas-aio-9a428c459a10aeda.yaml | 3 + .../notes/enable-lsm-bae903e463079a3f.yaml | 14 + ...ble-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml | 11 + ...nable_pip_install_options-7c2131c89f90b2c6.yaml | 6 + .../notes/export-hosts-flag-9c9f170eb89798ea.yaml | 6 + .../extra-ceph-clusters-00ad154ffb0589a6.yaml | 7 + .../notes/extra-ceph-conf-337b9371b49219ff.yaml | 5 + ...-audit-log-permission-bug-81a772e2e6d0a5b3.yaml | 10 + .../fix-check-mode-with-tags-bf798856a27c53eb.yaml | 7 + .../notes/force-dep-order-2c529683509e45da.yaml | 9 + ...force-cluster-name-change-b4ce1e225daa840c.yaml | 15 + releasenotes/notes/git-cache-df0afe90d4029f68.yaml | 6 + .../notes/git-cache-staged-b9cb0e277478b19a.yaml | 9 + .../glance-1604-support-e65870170a925bfe.yaml | 3 + .../glance-packages-rename-abd348b0725e4b7b.yaml | 4 + .../gnocchi-metrics-service-6a7bdda8e7e71dda.yaml | 9 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../haproxy-centos-support-de39c19d6a89b6a5.yaml | 11 + .../haproxy-endpoint-toggle-aa9e7e3efc4d6861.yaml | 4 + .../haproxy-extra-configs-67a77803494d3e97.yaml | 8 + ...aproxy-git-server-backend-862e004e61a43292.yaml | 8 + ...oxy-package-cache-backend-da096228387bc1f4.yaml | 13 + .../haproxy_ssl_terminiation-cdf0092a5bfa34b5.yaml | 31 + .../hipe-compile-option-c100e8676a806950.yaml | 7 + .../horizon-arbitrary-config-8a36e4bd6818afe1.yaml | 6 + ...ble-password-autocomplete-5f8f78a6c8f1edb3.yaml | 5 + .../horizon-servername-fix-1ac632f205c45ee9.yaml | 5 + .../horizon_custom_themes-4ee1fd9444b8a5ae.yaml | 6 + ...implement-centos7-support-cf6b6ee0d606223f.yaml | 3 + .../implement-xenial-support-0de6444c53337d46.yaml | 12 + .../notes/implemented-v38524-b357edec95128307.yaml | 12 + .../improved-audit-rule-keys-9fa85f758386446c.yaml | 5 + .../notes/install-local-019edab04ffc8347.yaml | 8 + .../intree-and-override-envd-371cf9a809b51fe0.yaml | 14 + .../inventory-debug-flag-ead0ae2a2a1d7b90.yaml | 6 + ...y-main-function-arguments-8c43e4c7175937d3.yaml | 6 + ...ry_host_containers_naming-d1f42a0c91d68154.yaml | 11 + .../ironic-1604-support-b9ebb12ee4d78275.yaml | 3 + .../notes/ironic-integration-264c4ed622a3a04e.yaml | 6 + ...e-mysql-password-variable-ec33f37ba6c4fac1.yaml | 16 + .../notes/isolate-ansible-3e8fcfdff9962a9b.yaml | 9 + ...d-default-cidr-workaround-8f2b5a0b074898e1.yaml | 9 + .../notes/keepalived-upgrade-e63a11b7d4dcba20.yaml | 22 + ..._user_and_project_support-e35b0b335b6522e9.yaml | 42 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 9 + ...2-service-provider-config-57d394bdc64f632e.yaml | 5 + .../notes/list-extend-toggle-46a75ded97b7ce02.yaml | 6 + ...ration-default-set-to-ssh-6add1dbdeea43509.yaml | 5 + .../notes/lxc-cache-gpg-156169a867d4653f.yaml | 7 + ...xc-container-multi-distro-f495f73951fafd1a.yaml | 29 + ...lxc-container-start-delay-d7917f69d9469316.yaml | 6 + .../lxc-host-setup-refactor-e43559764af67fea.yaml | 29 + .../notes/lxc-hosts-limit-9784050b888ea7c8.yaml | 7 + .../notes/lxc_hosts-group-a5643e7010d6b151.yaml | 6 + .../make-ha-router-a-toggle-9d87d688e8d506c9.yaml | 4 + .../make-ha-router-a-toggle-eefd61fc7978240d.yaml | 4 + .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 + ...ment_network_config_check-66778387f38b9e0c.yaml | 8 + .../mariadb-rolling-upgrades-323510425c3c7751.yaml | 8 + .../memcached-logging-change-8825c2bdbcf824b9.yaml | 10 + ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + .../metadata-proxy-cleanup-eed6ff482035dc83.yaml | 10 + .../mitaka-deprecations-72bec69c1395261d.yaml | 10 + .../notes/multi-arch-build-1ad512acdf6cabb9.yaml | 7 + .../notes/multi-arch-support-a8762f6ea7fdbcef.yaml | 8 + .../notes/multi-distro-add-0e53560f66394691.yaml | 6 + .../multiple-ips-for-host-f27cb1f1e878640d.yaml | 4 + ...tron-agent-dynamic-enable-47f0c709ef0dfe55.yaml | 15 + .../notes/neutron-bgp-552e6e1f6d37f38d.yaml | 9 + .../notes/neutron-calico-2332b0972708af8a.yaml | 5 + ...n-conditional-overlay-net-eeb6ffefbe01c188.yaml | 7 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + ...neutron-network-variables-ff6d2c7f8c7c3ccd.yaml | 10 + ...neutron-networking-calico-b05b08f989f768ee.yaml | 5 + ...n-openvswitch-agent-group-a63da4af11202790.yaml | 9 + .../neutron-ovs-powervm-116662f169e17175.yaml | 18 + .../notes/neutron-vpnaas-5c7c6508f2cc05c5.yaml | 8 + .../notes/neutron_ovs_dvr-7fca77cac0545441.yaml | 11 + .../ng-instance-management-f9134fc283aa289c.yaml | 16 + .../nova-admin-endpoint-fix-d52cc00caa5ab5dd.yaml | 6 + ...console-proxy-git-cleanup-cdeffd3f0d040275.yaml | 8 + ...-largecluster-key-inserts-afc8cac63af41087.yaml | 12 + .../notes/nova-powervm-b4eddae30abbd08e.yaml | 5 + .../notes/nova-uca-support-409b2e6afbce47b1.yaml | 10 + ...ind-local-interfaces-only-05f03de632e81097.yaml | 5 + .../online-lxc-network-add-3cfc84ea28e5eab0.yaml | 5 + .../openvswitch-support-1b71ae52dde81403.yaml | 14 + ...egy-and-connection-plugin-bc476fa3607dcc4a.yaml | 11 + ...-glance-only-install-venv-0271d3238c0d561c.yaml | 6 + ...gnocchi-only-install-venv-4e532f44fcf5cda5.yaml | 6 + ...os-heat-only-install-venv-e3e8e466dd67c2bc.yaml | 5 + ...apache-log-format-support-34c9ef74b3bcce31.yaml | 5 + ...horizon-only-install-venv-0fd3292d2b61e840.yaml | 6 + ...-ironic-only-install-venv-0da32fc36bfeae2b.yaml | 5 + ...in-token-auth-deprecation-24e84a18f8a56814.yaml | 17 + ...apache-log-format-support-7232177f835222ee.yaml | 4 + ...pache-mpm-tunable-support-1c72f2f99cd502bc.yaml | 17 + ...eystone-only-install-venv-b766568ee8d40354.yaml | 5 + ...e-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml | 22 + ...dle_internal_only_routers-e46092d6f1f7c4b0.yaml | 7 + ...os_aodh-only-install-venv-3c80a0a66824fcd7.yaml | 5 + ...lometer-only-install-venv-f3cd57b4a1d025c5.yaml | 5 + releasenotes/notes/os_cinder-1604-support.yaml | 3 + ...os_cinder-centos7-support-732f8feac7241e2a.yaml | 4 + ..._cinder-only-install-venv-914d5655dd645213.yaml | 5 + ...os_glance-centos7-support-21cb81e361831c9f.yaml | 4 + ..._keystone-centos7-support-0a5d97f81ac42e44.yaml | 4 + .../os_magnum-install-venv-30263e29e51a2610.yaml | 5 + ...um-xenial-systemd-support-2e1ee4253dff2b5c.yaml | 4 + ...neutron-only-install-venv-ca3bf63ed0507e4b.yaml | 6 + .../os_nova-install-venv-6c6c2ba28f67a891.yaml | 5 + .../os_rally-install-venv-71cbd1f6ce4fd983.yaml | 5 + ..._sahara-only-install-venv-8ead48687897ce0b.yaml | 6 + ...s_swift-only-install-venv-fdd5d41759433cf8.yaml | 5 + ...package-list-name-changes-007cacee4faf8ee6.yaml | 10 + ...package-list-name-changes-38f1554097b6bbe9.yaml | 4 + ...package-list-name-changes-4a42f561dac5754e.yaml | 4 + ...package-list-name-changes-4d5ad2e6ff5ecae2.yaml | 4 + ...package-list-name-changes-6f74fbf336030242.yaml | 8 + ...package-list-name-changes-7c8a6dd652b271cf.yaml | 8 + ...package-list-name-changes-7fcd5583f0db0eb6.yaml | 6 + ...package-list-name-changes-a26d94a44c24de2f.yaml | 6 + ...package-list-name-changes-a5571c0b72faadf2.yaml | 4 + ...package-list-name-changes-a86f7e7c805c2d81.yaml | 10 + ...package-list-name-changes-b484be7645bbe66a.yaml | 4 + ...package-list-name-changes-e351db8b482f1326.yaml | 6 + ...package-list-name-changes-e6f88d12f3bd9fa0.yaml | 4 + ...package-list-name-changes-e7a3fc551d742d23.yaml | 4 + ...package-list-name-changes-fdf9c6573bfa1083.yaml | 4 + .../notes/package-state-003ff33c557af3b5.yaml | 13 + .../notes/package-state-1d27f4c7f8618cef.yaml | 13 + .../notes/package-state-2e8e2eb4b24475c4.yaml | 13 + .../notes/package-state-38187ec5242a005b.yaml | 13 + .../notes/package-state-3bf07796262fc9b9.yaml | 13 + .../notes/package-state-441864557ee5d75b.yaml | 13 + .../notes/package-state-48e933a395bbdc0c.yaml | 13 + .../notes/package-state-505f9772bb0d668e.yaml | 14 + .../notes/package-state-55fceaf0cd23147e.yaml | 13 + .../notes/package-state-63a870de53dd5cd8.yaml | 13 + .../notes/package-state-646b25638f523411.yaml | 13 + .../notes/package-state-6684c5634bdf127a.yaml | 13 + .../notes/package-state-6f5ce66be8ddf119.yaml | 12 + .../notes/package-state-711a1eb4814311cc.yaml | 13 + .../notes/package-state-7caea8f1db708a2e.yaml | 13 + .../notes/package-state-7cbc7179b51ecdde.yaml | 13 + .../notes/package-state-7d62ea1e50ad391b.yaml | 13 + .../notes/package-state-8b0189f8824b7568.yaml | 13 + .../notes/package-state-979c963fb18f7a25.yaml | 13 + .../notes/package-state-9a2f60adb4ab68cd.yaml | 13 + .../notes/package-state-ab251d8987422f59.yaml | 13 + .../notes/package-state-b032231a3cc99ee0.yaml | 13 + .../notes/package-state-b41a0e911ad95d1c.yaml | 13 + .../notes/package-state-b7a3d3c242e2c3aa.yaml | 13 + .../notes/package-state-bb93a1d4b272425d.yaml | 13 + .../notes/package-state-c9c7e01e77b596d0.yaml | 14 + .../notes/package-state-ed22b9a6683690b3.yaml | 13 + .../notes/package-state-f2309b07440d0ae8.yaml | 13 + .../notes/package-state-fb7d26a4b7c41a77.yaml | 13 + .../notes/package-state-fda322f5e667bbec.yaml | 13 + .../notes/package-var-rename-6ec3af6242073a2e.yaml | 4 + .../notes/package_var_rename-9a55f7030595fdef.yaml | 4 + ...paramiko-2-0-dependencies-9a7c7fe9aeb394e4.yaml | 6 + .../notes/path-customization-e7e0ae0f93e5283b.yaml | 4 + .../notes/pip-source-store-d94ff2b68a99481a.yaml | 10 + .../notes/pkg-cacher-cfeae8fb990904a4.yaml | 6 + .../notes/policy-override-522df5699f09c417.yaml | 6 + ...tmw-management-ui-haproxy-e9f9ec0343484f2d.yaml | 17 + .../notes/rally_play-82fa27d8ba2ce22d.yaml | 3 + .../reduce-auditd-logging-633677a74aee5481.yaml | 25 + .../notes/remove-ansible.cfg-e65e4f17bc30cce7.yaml | 17 + .../remove-container-release-fa49ff23ca8c1324.yaml | 6 + .../notes/remove-lbaasv1-26044c48b5d3b508.yaml | 8 + ...nfig-from-openstack-hosts-efb7d0b3a22d49df.yaml | 6 + .../notes/remove-overrides-17ef7d0496f6a6c7.yaml | 5 + ...move-rsyslog_client_repos-055ce574bee8bd14.yaml | 4 + ...emove-upgrade-gate-checks-3fbe339e06094681.yaml | 3 + .../notes/remove-xtrabackup-0513a40593f2d0e3.yaml | 7 + .../notes/remove_infra_group-45e7747e341d97cf.yaml | 9 + .../notes/remove_verbose_var-c22f4946eedbc5f2.yaml | 5 + .../notes/remove_verbose_var-e88f65e0c7c440f4.yaml | 4 + .../removed-aodh-api-init-9e2406629196efff.yaml | 4 + ...moved-ceilometer-api-init-a4bfc4cbabcbcb16.yaml | 4 + .../removed-db-create-tasks-276095a2293ed4ee.yaml | 5 + .../removed-db-create-tasks-3deea562441871c6.yaml | 5 + .../removed-db-create-tasks-4560d4b960383c4e.yaml | 5 + .../removed-db-create-tasks-8ae301041fe46cfb.yaml | 5 + .../removed-db-create-tasks-8d931286d6347bc6.yaml | 5 + .../removed-db-create-tasks-eed527e915f23ee0.yaml | 5 + .../removed-neutron-ha-tool-dd7a4717e03163f9.yaml | 13 + .../rename-pip-packages-tmp-f40dc7599684466a.yaml | 5 + ...e-repo-build-apt-packages-df1ca334b857787a.yaml | 5 + ...ild-fix-upper-constraints-9e24c56520538df2.yaml | 5 + ...-build-use-uca-by-default-bde8ded7d72cd42c.yaml | 4 + .../notes/rhel-gpg-check-0b483a824314d1b3.yaml | 7 + ...og-client-centos7-support-bf5dd55ef6488a20.yaml | 4 + ...-client-logrotate-options-02dde942779493bb.yaml | 6 + ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 + .../run-playbooks-refactor-c89400feb692cd91.yaml | 6 + ...a-data-processing-service-8e63ebed6baf08bc.yaml | 5 + .../sahara-horizon-panel-d80d17da528b4c07.yaml | 9 + ...rch-for-unlabeled-devices-cb047c5f767e93ce.yaml | 6 + .../selective-git-clone-77d766cc0eaa2175.yaml | 8 + .../selective-venv-build-dd9f0e40cd1cc076.yaml | 8 + .../selective-wheel-build-34b1c154bb548ed7.yaml | 8 + .../notes/service-conf-path-b27cab31dbc72ad4.yaml | 6 + .../notes/ssh-pub-key-check-c42309653dbe3493.yaml | 5 + .../static_route_error_check-5e7ed6ddf9eb1d1f.yaml | 11 + ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 5 + ...bal_environment_variables-46cd4d90279fd0e9.yaml | 5 + .../support-ubuntu-xenial-958e8128ed6578cd.yaml | 3 + .../notes/swift-conf-b8dd5e1199f8e4a8.yaml | 9 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 11 + .../swift-force-hash-change-45b09eeb8b0368a6.yaml | 14 + .../swift-fs-file-limits-a57ab8b4c3c944e4.yaml | 11 + .../swift-pretend-mph-passed-7e5c15eeb35861c3.yaml | 17 + .../notes/swift-pypy-support-9706519c4b88a571.yaml | 15 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + .../swift-rings-port-change-4a95bbd9b63fb201.yaml | 11 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + .../swift-staticweb-support-b280fbebf271820b.yaml | 9 + .../swift-syslog-log-perms-5a116171a1adeae3.yaml | 6 + ...virt_save_dir_to_nova_dir-3b1b278cb7e5831f.yaml | 8 + .../notes/ubuntu-ppc64le-cab45e63dca77017.yaml | 4 + .../notes/ubuntu_ppc64le-581e5fcd5950186e.yaml | 6 + .../notes/unbound-dns-e0b591be4fa2b050.yaml | 6 + ...unique-variable-migration-c0639030b495438f.yaml | 20 + .../update-aodh-integration-fd2a27e8864bd8ff.yaml | 10 + ...dated-neutron-plugin_base-25b5dcacc87acd0f.yaml | 2 +- .../notes/upgrade-lxc-4750ba9aea7b5cd1.yaml | 6 + ...pper-constraints-override-6853ffec6c07d7f5.yaml | 9 + .../notes/use-galera-storage-d1a51c051d2740ad.yaml | 14 + .../notes/use-uca-by-default-070751b0b388fcbe.yaml | 4 + ...utility_container_ssh_key-44b1d15a1c06395e.yaml | 6 + .../notes/var-deprecations-417d87b9d386466a.yaml | 11 + ...trabackup-compact-disable-8ae9215207147ebc.yaml | 4 + releasenotes/source/conf.py | 42 +- releasenotes/source/index.rst | 3 +- releasenotes/source/mitaka.rst | 7 +- releasenotes/source/unreleased.rst | 5 + requirements.txt | 29 +- scripts/ansible-role-requirements-editor.py | 104 +++ scripts/bootstrap-aio.sh | 2 +- scripts/bootstrap-ansible.sh | 110 ++- scripts/fastest-infra-wheel-mirror.py | 170 ++++ scripts/federated-login.sh | 2 +- scripts/gate-check-commit.sh | 52 +- scripts/get-pypi-pkg-version.py | 8 +- scripts/inventory-manage.py | 309 +------ scripts/manage_inventory.py | 370 ++++++++ scripts/openstack-ansible.rc | 49 ++ scripts/os-cmd | 56 ++ scripts/os-detection.py | 25 - scripts/release-yaml-file-prep.py | 133 +++ scripts/run-playbooks.sh | 222 ++--- scripts/run-tempest.sh | 8 +- scripts/run-upgrade.sh | 130 ++- scripts/scripts-library.sh | 189 ++-- scripts/sources-branch-updater.sh | 260 ++++-- scripts/teardown.sh | 282 ------ .../playbooks/ansible_fact_cleanup.yml | 25 + .../playbooks/aodh-api-init-delete.yml | 47 + .../playbooks/db-collation-alter.yml | 57 ++ .../playbooks/deploy-config-changes.yml | 64 ++ .../playbooks/galera-cluster-rolling-restart.yml | 58 ++ .../playbooks/lbaas-version-check.yml | 27 + .../playbooks/mariadb-apt-cleanup.yml | 24 + .../playbooks/memcached-flush.yml | 23 + .../playbooks/old-hostname-compatibility.yml | 145 ++++ .../playbooks/pip-conf-removal.yml | 24 + .../playbooks/user-secrets-adjustment.yml | 45 + .../scripts/ansible_fact_cleanup.sh | 18 + .../upgrade-utilities/scripts/make_rst_table.py | 45 + .../scripts/migrate_openstack_vars.py | 70 ++ .../scripts/test_migrate_openstack_vars.py | 86 ++ setup.cfg | 2 +- setup.py | 11 +- test-requirements.txt | 28 +- .../bootstrap-host/tasks/check-requirements.yml | 16 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 144 ++-- .../bootstrap-host/tasks/prepare_data_disk.yml | 10 +- .../tasks/prepare_libvirt_service.yml | 53 -- .../tasks/prepare_loopback_cinder.yml | 1 + .../tasks/prepare_loopback_swift.yml | 1 + .../tasks/prepare_mongodb_service.yml | 61 -- .../bootstrap-host/tasks/prepare_mongodb_users.yml | 41 - .../bootstrap-host/tasks/prepare_networking.yml | 38 +- .../bootstrap-host/tasks/prepare_ssh_keys.yml | 14 +- .../templates/osa_interfaces_multinode.cfg.j2 | 28 + .../templates/user_variables.aio.yml.j2 | 75 +- tox.ini | 186 ++-- 721 files changed, 17195 insertions(+), 13538 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0d5fad6..2938075 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,13 +1,16 @@ -Jinja2>=2.6 # ansible -netaddr>=0.7.12 # playbooks/inventory/dynamic_inventory.py -paramiko>=1.13.0 # ansible -PrettyTable>=0.7,<0.8 # scripts/inventory-manage.py -pycrypto>=2.6 # ansible -PyYAML>=3.1.0 # ansible -### -### These are pinned to ensure exactly the same behaviour forever! ### -### These pins are updated through the sources-branch-updater script ### -### -pip==8.1.1 -setuptools==20.6.7 -wheel==0.29.0 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +pip>=6.0 # MIT +setuptools!=24.0.0,>=16.0 # PSF/ZPL +wheel # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD +netaddr!=0.7.16,>=0.7.13 # BSD +PrettyTable<0.8,>=0.7 # BSD +pycrypto>=2.6 # Public Domain +python-memcached>=1.56 # PSF +PyYAML>=3.1.0 # MIT +virtualenv # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 1e3f8b5..86fae7a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,8 +1,12 @@ -ansible>1.9,<2.0 -ansible-lint>=2.0.3,<=2.3.6 -bashate==0.5.0 # Apache-2.0 -flake8==2.2.4 -hacking>=0.10.0,<0.11 -mccabe==0.2.1 # capped for flake8 -pep8==1.5.7 -pyflakes==0.8.1 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +coverage>=3.6 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +hacking<0.11,>=0.10.0 +mccabe==0.2.1 # MIT License +mock>=2.0 # BSD +pep8==1.5.7 # MIT +pyflakes==0.8.1 # MIT +virtualenv # MIT @@ -11,3 +15,5 @@ pyflakes==0.8.1 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][magnum] python-magnumclient 2.3.1 release (newton)
by no-reply＠openstack.org 20 Oct '16

20 Oct '16

We are glad to announce the release of: python-magnumclient 2.3.1: Client library for Magnum API This release is part of the newton stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-magnumclient Download the package from: https://pypi.python.org/pypi/python-magnumclient Please report issues through launchpad: https://bugs.launchpad.net/python-magnumclient For more details, please see below. Changes in python-magnumclient 2.3.0..2.3.1 ------------------------------------------- 14dfc7d Add missing options for HTTPClient if auth_token given. db98410 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + magnumclient/v1/client.py | 2 ++ 3 files changed, 9 insertions(+)

1 0

[new][telemetry] gnocchi 3.0.1 release
by no-reply＠openstack.org 19 Oct '16

19 Oct '16

We are glowing to announce the release of: gnocchi 3.0.1: Metric as a Service Download the package from: https://tarballs.openstack.org/gnocchi/ For more details, please see below. Changes in gnocchi 3.0.0..3.0.1 ------------------------------- a44d88f Fix incorrect EXTRA_FLAVOR in plugin.sh 175d8bd carbonara: fix SplitKey with datetime greater than 32bits value 67cdbb7 Add http_proxy_to_wsgi to api-paste bc6a61d doc,tests: fix reaggregate/reaggregation mispelling 35e22d1 Fix some gabbi tests afdb605 Fix oslo.log minimum requirement c6b2c51 Update .gitreview for stable/3.0 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 2 +- etc/gnocchi/api-paste.ini | 15 +++++-- gnocchi/carbonara.py | 67 +++++++++++++++++----------- gnocchi/storage/_carbonara.py | 8 ++-- requirements.txt | 2 +- 13 files changed, 90 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 23cf70d..818c2e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.config>=2.6.0 -oslo.log>=1.0.0 +oslo.log>=2.3.0

1 0

[new][tripleo] python-tripleoclient 5.3.0 release (newton)
by no-reply＠openstack.org 18 Oct '16

18 Oct '16

We are overjoyed to announce the release of: python-tripleoclient 5.3.0: TripleO client This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. Changes in python-tripleoclient 5.2.0..5.3.0 -------------------------------------------- 2ee369f Fix get_file in out-of-tree templates 3650d94 Downloads templates from swift before processing update c1868d2 Allow referencing rendered yaml files in resource_registry e5701d0 Download templates from swift before processing with heatclient 34590cc Remove auth_required=False from upload image command 0ccf0fd Add optional overcloud deploy roles_data.yaml override abfa019 Remove another openstackclient import Diffstat (except docs and test files) ------------------------------------- tripleoclient/constants.py | 1 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 215 +++++++++++++-------- .../v1/overcloud_update/test_overcloud_update.py | 54 ++---- tripleoclient/utils.py | 66 +++++++ tripleoclient/v1/overcloud_deploy.py | 186 +++++++++++++++--- tripleoclient/v1/overcloud_image.py | 1 - tripleoclient/v1/overcloud_update.py | 46 ++--- tripleoclient/workflows/plan_management.py | 18 +- tripleoclient/workflows/templates.py | 17 ++ 13 files changed, 557 insertions(+), 181 deletions(-)

1 0

[new][tripleo] tripleo-common 5.3.0 release (newton)
by no-reply＠openstack.org 18 Oct '16

18 Oct '16

We are chuffed to announce the release of: tripleo-common 5.3.0: A common library for TripleO workflows. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 5.2.0..5.3.0 -------------------------------------- 3163e51 Centos images no longer require epel element a006d97 Default the J2 excludes files to safe values. cb737d1 Make UpdateManager use a passed-in stack setup cc19d04 Add the KeystoneCredential0 and KeystoneCredential1 parameters d617470 Add the J2 exclude file exception (When file not found) c1efe44 Support node untagging fe308c8 Add support to create role main template file based in role.role.j2.yaml f61b8cf Remove references to overcloud-without-mergepy 0e529ba Modify j2 templating to allow role files generation 848ec90 Don't set node state during node registration ffeef5c Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + image-yaml/overcloud-images-centos7.yaml | 4 +- tripleo_common/actions/baremetal.py | 5 +- tripleo_common/actions/templates.py | 101 +++++++++++++++++++------ tripleo_common/constants.py | 22 +++--- tripleo_common/scale.py | 3 +- tripleo_common/update.py | 40 +++++----- tripleo_common/utils/nodes.py | 6 +- tripleo_common/utils/parameters.py | 17 +++-- tripleo_common/utils/passwords.py | 6 ++ workbooks/baremetal.yaml | 16 +++- 13 files changed, 245 insertions(+), 83 deletions(-)

1 0

[new][kolla] kolla-kubernetes 0.3.0 release
by no-reply＠openstack.org 18 Oct '16

18 Oct '16

We are amped to announce the release of: kolla-kubernetes 0.3.0: Kubernetes deployment of the Kolla containers The source is available from: http://git.openstack.org/cgit/openstack/kolla-kubernetes Download the package from: https://tarballs.openstack.org/kolla-kubernetes/ Please report issues through launchpad: http://bugs.launchpad.net/kolla-kubernetes For more details, please see below. Changes in kolla-kubernetes 0.2.0..0.3.0 ---------------------------------------- 7e25ecd Adding custom api interface for keepalived 8b4ef92 Fixing cinder v1 and v2 endpoints fb4f564 Fix minor ceph transition state issue with the gate 739646c External Ceph Tools, Tests, and Docs f2ab15f Enable release notes translation 185909c Split endpoint jobs and start testing the deployments e314fa9 literal block in quickstart are messed up so, blank lines added in literal block and some Inline Markup added 9762782 Adding kubectl commands to setup default namespace e921596 Fixing TUNNEL_INTERFACE in neutron dhcp agent pod a2c925e Replace LOG.warn with LOG.warning 75683c3 A fix of tunnel_interface in neutron-openvswitch-agent 2da15fb Fixing neutron-openvswitch missing mount and variable b8054c6 Kolla Kubernetes Gate Test faafb50 Adding keepalived functionality to kolla-kubernetes 271d3c6 common_volume_mounts and common_containers macros a7d46dd Introducing common-lib and common_volumes macro 86d3160 Use kubectl to watch for pod status 32ba63d Fixing keystone logging related issue 2e1e999 Adding resolv.conf workaround to logging containers aca4f50 Adding missing localtime mounts and volumes 8804160 Misc fixes 6059577 Adding logging to kolla-kubernetes services 3ee29c2 Documentation rework 04bb274 Adds sidecar logging container to common-deployment pod a4d268e Basic ceph backend support 30109cc More deployments merged b7a6b1b Update homepage with developer documentation page b2969b4 Added guide for running test 654cc09 Introducing generic deployment template 73f1d70 Adding ElasticSearch and Kibana pods/services 6b48695 CLI rework. 09515e7 Add container debug feature 170e030 More services to deployments 7e34c46 Document more stuff 7d19065 Fixing cinder/iscsi/tgtd issues ad44f6e The configmaps of iscsid and tgtd are error. 60cd299 Fix NoVNC health check. b67e6d2 Switching rabbitmq to petset for name persistency 1dcf856 Fixing hypervisor's IP for nova compute process 30bbf0c Fixing incorrect name for nova-novncproxy-haproxy configmap 414dd80 Fixes for things against recent kolla trunk 53ed8ec Fixes to get Nova to work 654470c Additional nova changes required to launch vm in all-in-one 1b4f90b Fix svc to point to nova-api pod housing the metadata server a1d89c2 ovs setup bridge, fix /run, add missing hostipc f3c99f8 Changing keystone-public service to use generic service d518ff3 First stab at minikube doc 51c8b7d net=host + resolv.conf workaround. e746510 Make the kolla-k8s quickstart similar to kolla 7c41dc8 Remove nova compute bootstrap 5a44ff5 Fix dhcp agent's volumes 7cccff1 Splitting Keystone bootstrap into three steps 865245b Support nova_consoleauth and nova_novncproxy 3370294 Fix some openvswitch issues cd67ada Fix selector issue with neutron-server service c63932f Fix a few neutron issues e2ac17d fix rabbitmq, glance-api, and haproxy 4939818 Splitting into 3 steps Kube's neutron bootstrap 8cc659e This patch fixes the naming convention of configmaps as follows. https://review.openstack.org/#/c/368460/ 2835128 Fix rabbitmq bootstrap pvc 4afc8bb Modifying horizon pod for deployment type 3d61d23 Fix glance pvc name dcd6931 Fix mariadb pvc name de44204 Remove 'MANIFEST.in' d16ee6b Use resource_name instead of service_name f839e5f remove redundant -configmap from names cc5ced6 l3/metadata DaemonSets + DVR, & labels bae09a4 Add the ability to create services from the CLI fec0ff5 Check for service name in resource name 8ffcff8 Fix all name in template metadata issues d0df66a Cleanup container names a418140 More Resource Cleanup da92570 Resource type configmap b1ec1d1 More Tests 76a9662 Force hostlabels to yaml strings. 6be50b1 Kube Glance bootstrap cleanup 599ed8f resource-map output formatters 8216c27 Move iscsi stuff to match kolla 376341b Change true to yes in default host labels 9e440e8 Add more nodeSelectors 893344a Cleanup resource and resource-template e99d2d5 Cleanup patch 6248205 Add cinder volume with iscsi and lvm backend to Kube d34cee0 Fix missing Exception around exception string 49645c5 Add namespace and test 78d74e0 Checks to start reducing Technical Debt e7c2b7a Host Labels 2f816dd Neutron endpoint are wrong value.. 6c8c231 Template validation/gating d5366b6 Docker systemd fix 2f7d12b Fail nova-compute init container always 945683b Extra space in generate-passwords.py c5ba68d Add Cinder api and scheduler components Diffstat (except docs and test files) ------------------------------------- .testr.conf | 2 +- MANIFEST.in | 6 - bindep.txt | 27 + etc/kolla-kubernetes/kolla-kubernetes.yml | 152 +++- etc/kolla-kubernetes/service_resources.yml | 874 +++++++++++++++++++-- kolla_kubernetes/app.py | 26 +- kolla_kubernetes/commands/cmd_resource.py | 355 +++++++-- kolla_kubernetes/kube_service_status.py | 10 +- kolla_kubernetes/service_resources.py | 56 +- kolla_kubernetes/utils.py | 22 +- releasenotes/source/conf.py | 3 + services/ceph/ceph-admin-pod.yml.j2 | 56 ++ services/ceph/ceph-bootstrap-initial-mon.yml.j2 | 85 ++ services/ceph/ceph-bootstrap-osd.yml.j2 | 114 +++ services/ceph/ceph-mon-pod.yml.j2 | 123 +++ services/ceph/ceph-osd-pod.yml.j2 | 104 +++ services/ceph/ceph-rbd-pod.yml.j2 | 82 ++ services/ceph/ceph-secret.yml.j2 | 2 +- services/cinder/cinder-backup-pod.yml.j2 | 83 ++ .../cinder/cinder-bootstrap-job-create-db.yml.j2 | 76 ++ .../cinder/cinder-bootstrap-job-manage-db.yml.j2 | 35 + services/cinder/cinder-scheduler-pod.yml.j2 | 43 + services/cinder/cinder-volume-ceph-pod.yml.j2 | 103 +++ services/cinder/cinder-volume-lvm-pod.yml.j2 | 137 ++++ services/common/api-haproxy-configmap.yml.j2 | 7 +- .../common/common-create-keystone-endpoint.yml.j2 | 53 ++ services/common/common-create-keystone-user.yml.j2 | 54 ++ services/common/common-deployment.yml.j2 | 173 ++++ services/common/common-disk.sh.j2 | 2 +- services/common/common-lib.yml.j2 | 61 ++ services/common/common-pv.yml.j2 | 8 +- services/common/common-pvc.yml.j2 | 3 +- services/common/generic-service.yml.j2 | 1 + services/common/logging-configmap.yml.j2 | 66 ++ services/elasticsearch/elasticsearch-pod.yml.j2 | 73 ++ services/glance/glance-api-pod.yml.j2 | 84 +- services/glance/glance-api-service.yml.j2 | 13 - .../glance/glance-bootstrap-job-create-db.yml.j2 | 73 ++ .../glance/glance-bootstrap-job-manage-db.yml.j2 | 63 ++ services/glance/glance-bootstrap-job.yml.j2 | 234 ------ services/glance/glance-registry-pod.yml.j2 | 128 --- services/glance/glance-registry-service.yml.j2 | 13 - services/horizon/horizon-pod.yml.j2 | 59 +- services/horizon/horizon-service.yml.j2 | 23 +- services/iscsi/iscsi-iscsid-daemonset.yml.j2 | 93 +++ services/iscsi/iscsi-tgtd-daemonset.yml.j2 | 107 +++ services/keepalived/keepalived-configmap.yml.j2 | 34 + services/keepalived/keepalived-daemonset.yml.j2 | 87 ++ .../keystone-bootstrap-job-create-db.yml.j2 | 71 ++ .../keystone-bootstrap-job-endpoints.yml.j2 | 47 ++ .../keystone-bootstrap-job-manage-db.yml.j2 | 35 + services/keystone/keystone-bootstrap-job.yml.j2 | 133 ---- services/keystone/keystone-pod.yml.j2 | 40 +- services/keystone/keystone-service-admin.yml.j2 | 4 +- services/keystone/keystone-service-public.yml.j2 | 10 - services/mariadb/mariadb-bootstrap-job.yml.j2 | 23 +- services/mariadb/mariadb-pod.yml.j2 | 22 +- services/mariadb/mariadb-service.yml.j2 | 3 +- services/memcached/memcached-pod.yml.j2 | 16 +- services/memcached/memcached-service.yml.j2 | 3 +- .../neutron/neutron-bootstrap-job-create-db.yml.j2 | 71 ++ .../neutron/neutron-bootstrap-job-manage-db.yml.j2 | 44 ++ services/neutron/neutron-bootstrap-job.yml.j2 | 222 ------ services/neutron/neutron-control-pod.yml.j2 | 48 -- .../neutron/neutron-dhcp-agent-daemonset.yml.j2 | 125 +++ services/neutron/neutron-dhcp-agent-pod.yml.j2 | 59 -- services/neutron/neutron-l3-agent-daemonset.yml.j2 | 143 ++++ services/neutron/neutron-l3-agent-pod.yml.j2 | 58 -- .../neutron-metadata-agent-daemonset.yml.j2 | 74 ++ services/neutron/neutron-metadata-agent-pod.yml.j2 | 55 -- .../neutron-openvswitch-agent-daemonset.yml.j2 | 54 +- services/neutron/neutron-server-service.yml.j2 | 12 - services/nova/nova-compute-bootstrap-job.yml.j2 | 64 -- services/nova/nova-compute-pod.yml.j2 | 88 ++- services/nova/nova-control-api-pod.yml.j2 | 80 -- ...control-bootstrap-job-create-nova-api-db.yml.j2 | 26 +- ...ova-control-bootstrap-job-create-nova-db.yml.j2 | 24 +- ...trol-bootstrap-job-create-nova-endpoints.yml.j2 | 86 -- services/nova/nova-control-conductor-pod.yml.j2 | 35 +- services/nova/nova-control-consoleauth-pod.yml.j2 | 60 ++ services/nova/nova-control-scheduler-pod.yml.j2 | 35 +- services/nova/nova-libvirt-pod.yml.j2 | 74 +- services/nova/nova-libvirt-secret.yml.j2 | 16 + .../openvswitch/openvswitch-ovsdb-daemonset.yml.j2 | 99 +++ .../openvswitch-set-external-ip-job.yml.j2 | 26 + .../openvswitch-vswitchd-daemonset.yml.j2 | 105 +++ services/openvswitch/ovsdb-daemonset.yml.j2 | 93 --- services/openvswitch/vswitchd-daemonset.yml.j2 | 95 --- services/rabbitmq/rabbitmq-bootstrap-job.yml.j2 | 22 +- services/rabbitmq/rabbitmq-pod.yml.j2 | 59 +- .../rabbitmq/rabbitmq-service-management.yml.j2 | 8 + services/rabbitmq/rabbitmq-service.yml.j2 | 1 + services/skydns/skydns-pod.yml.j2 | 9 +- services/skydns/skydns-service.yml.j2 | 2 +- services/swift/swift-account-pod.yml.j2 | 69 +- services/swift/swift-account-service.yml.j2 | 5 +- services/swift/swift-container-pod.yml.j2 | 72 +- services/swift/swift-container-service.yml.j2 | 5 +- services/swift/swift-object-pod.yml.j2 | 81 +- services/swift/swift-object-service.yml.j2 | 5 +- services/swift/swift-proxy-pod.yml.j2 | 32 +- services/swift/swift-proxy-service.yml.j2 | 5 +- services/swift/swift-rsync-service.yml.j2 | 1 + setup.cfg | 10 +- test-requirements.txt | 1 + tools/fix-mitaka-config.py | 45 ++ tools/kolla-kubernetes | 1 + tools/kolla_kubernetes.py | 1 - tools/secret-generator.py | 14 +- tools/setup-ceph-secrets.sh | 14 + tools/setup-resolv-conf.sh | 15 + tools/setup_gate.sh | 719 +++++++++++++++++ tools/test.sh | 5 + tox.ini | 18 +- 127 files changed, 7037 insertions(+), 2315 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fd57cd3..93f9f1a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16 @@ testtools>=1.4.0 +bashate>=0.2 # Apache-2.0

1 0

[new][openstackansible] openstack-ansible 12.2.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are gleeful to announce the release of: openstack-ansible 12.2.5: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 12.2.5 ^^^^^^ Bug Fixes * Fix run-upgrade.sh so that it correctly calls nova-flavor- migration.yml and no longer fails due to the non-existent playbook nova-extra-migrations.yml. Changes in openstack-ansible 12.2.4..12.2.5 ------------------------------------------- 2821da8 Fix name of nova flavour migration playbook e83cb8c Update all SHAs for 12.2.5 Diffstat (except docs and test files) ------------------------------------- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 26 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- ...flavour-migration-upgrade-9b3dfbfbb05010de.yaml | 4 ++++ scripts/run-upgrade.sh | 2 +- scripts/scripts-library.sh | 2 +- 7 files changed, 22 insertions(+), 18 deletions(-)

1 0

[new][openstackansible] openstack-ansible-security 12.2.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are chuffed to announce the release of: openstack-ansible-security 12.2.5: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. 12.2.5 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 12.2.3..12.2.5 ---------------------------------------------------- 77eaaf2 Disable DAC change auditing 31a8ff5 Disable martian logging by default e7373c4 Exclude /run from AIDE checks 6c9eb50 Ensure AIDE initializes on subsequent runs 23fe90b Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0

[new][packaging-rpm] pymod2pkg 0.6.1 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are stoked to announce the release of: pymod2pkg 0.6.1: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.6.0..0.6.1 --------------------------------- 17cb2c5 Fix k8sclient to k8s ba1b731 More exceptions for python-*client naming on SUSE 0b85f9a Add additional mapping for cueclient Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are ecstatic to announce the release of: openstack-ansible-rsyslog_server 13.3.5: rsyslog_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. 13.3.5 ^^^^^^ Upgrade Notes * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Changes in openstack-ansible-rsyslog_server 13.3.4..13.3.5 ---------------------------------------------------------- 74cf6cd Separate remote log stream from local Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 7 +++ ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 +++ templates/os_aggregate_storage.j2 | 2 +- templates/rsyslog.conf.j2 | 59 ++++++++++------------ 5 files changed, 45 insertions(+), 33 deletions(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are grateful to announce the release of: openstack-ansible-memcached_server 13.3.5: memcached_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 13.2.0..13.3.5 ------------------------------------------------------------ 99e5aee Ensure that gate test does not remove ~/.ansible/tmp 681b84f Update tox configuration Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 - tox.ini | 121 +++++++++++++++++++++++++++++++++++--------------- 2 files changed, 86 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a45faa5..22c7bbe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +0,0 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0,!=1.9.6

1 0

[new][openstackansible] openstack-ansible-os_keystone 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are psyched to announce the release of: openstack-ansible-os_keystone 13.3.5: os_keystone for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 13.3.1..13.3.5 ------------------------------------------------------- 4f30d3a Force a restart of all the apache nodes during upgrade 1432dea Disable stderr logging Diffstat (except docs and test files) ------------------------------------- tasks/keystone_service_setup.yml | 9 --------- tasks/main.yml | 3 +++ templates/keystone.conf.j2 | 2 ++ 3 files changed, 5 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_swift 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are overjoyed to announce the release of: openstack-ansible-os_swift 13.3.5: os_swift for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 13.3.3..13.3.5 ---------------------------------------------------- c4c8a9c Point auditor service at the replicator config Diffstat (except docs and test files) ------------------------------------- tasks/swift_storage_hosts_account.yml | 29 ++++++++++++++++++----- tasks/swift_storage_hosts_container.yml | 33 ++++++++++++++++++++------- tasks/swift_storage_hosts_object.yml | 29 ++++++++++++++++++----- templates/account-server-replicator.conf.j2 | 3 +++ templates/account-server.conf.j2 | 2 +- templates/container-server-replicator.conf.j2 | 3 +++ templates/container-server.conf.j2 | 6 ++--- templates/object-server-replicator.conf.j2 | 3 +++ templates/object-server.conf.j2 | 6 ++--- 9 files changed, 87 insertions(+), 27 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_cinder 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are happy to announce the release of: openstack-ansible-os_cinder 13.3.5: os_cinder role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 13.3.1..13.3.5 ----------------------------------------------------- de29bf7 Fix cinder role condition when no cinder_volumes 77f138e Disable stderr logging c4eae35 Update paste, policy and rootwrap configurations 2016-08-01 Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 15 +++++++++------ templates/api-paste.ini.j2 | 23 +++++++++++++---------- templates/cinder.conf.j2 | 2 ++ 3 files changed, 24 insertions(+), 16 deletions(-)

1 0

[new][openstackansible] openstack-ansible 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are jubilant to announce the release of: openstack-ansible 13.3.5: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 13.3.5 ^^^^^^ New Features ************ * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. * The LXC container creation process now has a configurable delay for the task which waits for the container to start. The variable "lxc_container_ssh_delay" can be set to change the default delay of five seconds. Known Issues ************ * It is not possible to override the ceph client credential for nova and cinder with ansible 1.9.4. See bug 1605302 (https://launchpad.net/bugs/1605302) for more details. Upgrade Notes ************* * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Bug Fixes ********* * The pip_install_options variable is now honored during repo building. This variable allows deployers to specify trusted CA certificates by setting the variable to "--cert /etc/ssl/certs/ca- certificates.crt" * The repo_build play now correctly evaluates environment variables configured in /etc/environment. This enables deployments in an environment with http proxies. Changes in openstack-ansible 13.3.4..13.3.5 ------------------------------------------- 9489c8f Add documentation for known-issue with ceph client. be71f0f Loopback cinder image must insert before exit 0 a489036 Update all SHAs for 13.3.5 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 20 +++++++------- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 32 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- .../notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 +++ .../ceph-var-override-issue-89ddd88804e88187.yaml | 7 +++++ ...nable_pip_install_options-7c2131c89f90b2c6.yaml | 6 ++++ ...force-cluster-name-change-b4ce1e225daa840c.yaml | 15 ++++++++++ ...lxc-container-start-delay-cd71a9957696d302.yaml | 6 ++++ ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 ++++++ ...bal_environment_variables-46cd4d90279fd0e9.yaml | 5 ++++ scripts/scripts-library.sh | 2 +- .../tasks/prepare_loopback_cinder.yml | 1 + 14 files changed, 82 insertions(+), 30 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_horizon 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are mirthful to announce the release of: openstack-ansible-os_horizon 13.3.5: OpenStack Horizon role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 13.3.3..13.3.5 ------------------------------------------------------ b585f3e Simplify bool check for LBaaSv2/Horizon Diffstat (except docs and test files) ------------------------------------- tasks/horizon_post_install.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are stoked to announce the release of: openstack-ansible-rabbitmq_server 13.3.5: rabbitmq_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 13.3.3..13.3.5 ----------------------------------------------------------- 7ac8e58 Add collect_statistics_interval, rates_mode in rabbitmq.config template Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 ++++++ templates/rabbitmq.config.j2 | 4 +++- 2 files changed, 9 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_nova 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are amped to announce the release of: openstack-ansible-os_nova 13.3.5: os_nova for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 13.3.5 ^^^^^^ New Features * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". Changes in openstack-ansible-os_nova 13.3.4..13.3.5 --------------------------------------------------- fda8770 Nova role should not default vars outside the nova namespace 26c3e8a Add config template for qemu.conf Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 ++++++++- releasenotes/notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 ++++ tasks/nova_compute_kvm.yml | 13 +++++++++++++ templates/nova.conf.j2 | 2 +- templates/qemu.conf.j2 | 4 ++++ 6 files changed, 31 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_neutron 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are jubilant to announce the release of: openstack-ansible-os_neutron 13.3.5: os_neutron role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 13.3.4..13.3.5 ------------------------------------------------------ ae7af49 Add conditional around the pid clean up process Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-plugins 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are tickled pink to announce the release of: openstack-ansible-plugins 13.3.5: plugins for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 13.3.4..13.3.5 --------------------------------------------------- 2fc5ceb Fix proprietary regression in py_pkgs.py Diffstat (except docs and test files) ------------------------------------- lookup/py_pkgs.py | 179 +++++++++++++++++++++++++++++++++++++++++------------- 1 file changed, 138 insertions(+), 41 deletions(-)

1 0

[new][openstackansible] openstack-ansible-ironic 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are high-spirited to announce the release of: openstack-ansible-ironic 13.3.5: Ironic Role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-ironic/ For more details, please see below. Changes in openstack-ansible-ironic 13.3.4..13.3.5 -------------------------------------------------- 3c1cd47 Update rootwrap filter copy for easier maintenance Diffstat (except docs and test files) ------------------------------------- tasks/ironic_post_install.yml | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_glance 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are glowing to announce the release of: openstack-ansible-os_glance 13.3.5: os_glance for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 13.3.1..13.3.5 ----------------------------------------------------- ec9ae09 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/glance-api.conf.j2 | 2 ++ templates/glance-cache.conf.j2 | 2 ++ templates/glance-manage.conf.j2 | 2 ++ templates/glance-registry.conf.j2 | 2 ++ templates/glance-scrubber.conf.j2 | 2 ++ 5 files changed, 10 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_heat 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are joyful to announce the release of: openstack-ansible-os_heat 13.3.5: os_heat for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 13.3.1..13.3.5 --------------------------------------------------- dcff3d0 Disable stderr logging f102338 Use keystone library for heat_stack_domain_admin Diffstat (except docs and test files) ------------------------------------- tasks/heat_domain_setup.yml | 63 +++++++++++++++++++++------------------------ templates/heat.conf.j2 | 2 ++ 2 files changed, 31 insertions(+), 34 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are joyful to announce the release of: openstack-ansible-os_ceilometer 13.3.5: os_ceilometer role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.3.1..13.3.5 --------------------------------------------------------- 3a24b01 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/ceilometer.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are pumped to announce the release of: openstack-ansible-os_aodh 13.3.5: os_aodh for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 13.3.1..13.3.5 --------------------------------------------------- 0c80b7c Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/aodh.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-security 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are gleeful to announce the release of: openstack-ansible-security 13.3.5: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 13.3.4..13.3.5 ---------------------------------------------------- 1446cc3 Fix a minor documentation typo. Diffstat (except docs and test files) ------------------------------------- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-galera_server 13.3.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are satisfied to announce the release of: openstack-ansible-galera_server 13.3.5: Galera Server role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 13.3.5 ^^^^^^ New Features * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. Changes in openstack-ansible-galera_server 13.3.4..13.3.5 --------------------------------------------------------- bf3480a Prevent galera_cluster_name from changing. Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 ++++ library/mysql_status_facts | 12 ++++++++---- ...alera-force-cluster-name-change-b4ce1e225daa840c.yaml | 15 +++++++++++++++ tasks/galera_cluster_state.yml | 16 ++++++++++++++++ 4 files changed, 43 insertions(+), 4 deletions(-)

1 0

[charms] OpenStack Charms 16.10 release
by James Page 17 Oct '16

17 Oct '16

Hi All, We are pleased to announce the 16.10 release of the OpenStack Charms. Highlights include: * OpenStack Newton support * Ubuntu 16.10 support * Juju 2.0 application version support * AppArmor support For more details please see the full release notes here: http://docs.openstack.org/developer/charm-guide/1610.html A big thank you to the many people who contributed to the OpenStack charms over the last cycle and if you'd like to contribute during the next development cycle our charm development guide is here: http://docs.openstack.org/developer/charm-guide/ Regards The OpenStack Charm Team

1 0

[new][mistral] mistral-dashboard 3.0.2 release (newton)
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are grateful to announce the release of: mistral-dashboard 3.0.2: Mistral dashboard This release is part of the newton stable release series. Download the package from: https://pypi.python.org/pypi/mistral-dashboard For more details, please see below. Changes in mistral-dashboard 3.0.0.0rc1..3.0.2 ---------------------------------------------- 2c959e0 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0

[new][mistral] mistral 3.0.2 release (newton)
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are jubilant to announce the release of: mistral 3.0.2: Mistral Project This release is part of the newton stable release series. Download the package from: https://pypi.python.org/pypi/mistral For more details, please see below. Changes in mistral 3.0.0..3.0.2 ------------------------------- 6356bce Add a way to save action executions that run synchronously Diffstat (except docs and test files) ------------------------------------- mistral/api/controllers/v2/resources.py | 2 +- mistral/engine/default_engine.py | 44 ++++++++++++++++------ 4 files changed, 71 insertions(+), 15 deletions(-)

1 0

[new][heat] heat 5.0.3 release (liberty)
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are glowing to announce the release of: heat 5.0.3: OpenStack Orchestration This release is part of the liberty stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. Changes in heat 5.0.2..5.0.3 ---------------------------- 797c253 Updated from global requirements 35e87b1 Allow update inplace for allowed_address_pairs cd4ab44 Increase the timeout for the stop_stack message 9a2c7ec Don't use cast() to do StackResource delete d83ab28 Fix prepare_for_replace/restore_prev_rsrc handing for server c6d1848 Handling concurrent transactions in metadata_set method 12caf71 Make ConcurrentTransaction exception common Diffstat (except docs and test files) ------------------------------------- heat/common/exception.py | 14 +- heat/engine/clients/client_plugin.py | 4 + heat/engine/clients/os/nova.py | 25 +++ heat/engine/resource.py | 23 ++- heat/engine/resources/openstack/neutron/port.py | 3 +- .../openstack/nova/server_network_mixin.py | 91 ++++++--- heat/engine/resources/stack_resource.py | 5 +- heat/engine/service.py | 13 +- heat/engine/service_software_config.py | 9 +- heat/objects/resource.py | 20 ++ test-requirements.txt | 2 +- 19 files changed, 335 insertions(+), 157 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 443625f..9168753 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ mox3>=0.7.0 -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License

1 0

[new][puppet] puppet-swift 9.4.2 release (newton)
by no-reply＠openstack.org 14 Oct '16

14 Oct '16

We are amped to announce the release of: puppet-swift 9.4.2: Puppet module for OpenStack Swift This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/puppet-swift/ For more details, please see below. Changes in puppet-swift 9.4.1..9.4.2 ------------------------------------ 5b9f67d Set concurrency to 1 for auditor/replicator/updater 3345e0d Release 9.4.2 8a4c17e proxy/ceilometer: deploy middleware before starting service Diffstat (except docs and test files) ------------------------------------- manifests/proxy/ceilometer.pp | 5 +++-- manifests/storage/server.pp | 12 ++++++------ metadata.json | 2 +- releasenotes/source/conf.py | 4 ++-- spec/defines/swift_storage_node_spec.rb | 1 - spec/defines/swift_storage_server_spec.rb | 1 - 6 files changed, 12 insertions(+), 13 deletions(-)

1 0

[new][neutron] networking-bgpvpn 5.0.0 release
by no-reply＠openstack.org 13 Oct '16

13 Oct '16

We are psyched to announce the release of: networking-bgpvpn 5.0.0: API and Framework to interconnect bgpvpn to neutron networks The source is available from: http://git.openstack.org/cgit/openstack/networking-bgpvpn Download the package from: https://tarballs.openstack.org/networking-bgpvpn/ Please report issues through launchpad: http://bugs.launchpad.net/bgpvpn For more details, please see below. 5.0.0 ^^^^^ The ovs/bagpipe driver now let you use both a Neutron router and a BGPVPN association simultaneously on a given Port. New Horizon panels for BGPVPN resources, allowing you to create a bgpvpn and to associate related resources such as a network or a router. New Features ************ * The bagpipe driver now let happily coexist a BGPVPN association and a Neutron router. Traffic that does not match any VPN route will be handled by the Neutron router. This evolution depends on corresponding evolutions in networking-bagpipe and bagpipe-bgp. (see bug 1627645 (https://bugs.launchpad.net/networking- bgpvpn/+bug/1627645)) * Horizon: * a view of all the existing BGPVPNs. * ability to view details of a BGPVPN. * ability to create, update and delete BGPVPN resources for an admin user. * ability to update BGPVPN resources for a tenant user. (with restrictions, compared to what an admin user can change) * abiity to associate/disassociate BGPVPN to/from networks and routers (for both tenant and admin users) Changes in networking-bgpvpn 4.0.0..5.0.0 ----------------------------------------- 5165dc7 undo some of the incorrect changes for prepping Newton d088925 prepare Newton release 3ee534f Stop adding ServiceAvailable group option f40b3da Pin ODL's dependency to a working commit 17875b8 bagpipe: compatibility with Neutron routers 712c1a0 opencontrail: not check tenant existence on update 82a445e import validate_regex from neutron_lib ddd47b4 Enable release notes translation 616dff8 devstack: fix to load bagpipe l2 agent extension 9073ba0 bagpipe: rely on Port AFTER_DELETE callbacks 1671101 bagpipe: port+orig_port are in Port AFTER_UPDATE callbacks 9a3c45b Prevent mixing bgpvpn associations fb35aab Fix a typo in documentation 02f7de8 Remove python 3 from setup.cfg classifiers 8d3cd42 Import DB model_base from neutron-lib bca7d4b Use os-testr instead of testr 8b615a4 TrivialFix: Remove logging import unused 006d882 devstack, bagpipe driver: properly set the l2 agent extension a9d9288 Horizon plugin patch to let user handle BGPVPN resources 273f9af Add doc for devstack configuration 0508a0e Use horizon UT framework ff62fbd Use more permissive UTs 9002df0 Enable L2 BGPVPN to be passed to OpenDaylight 396aee4 Add tempest tests for router association b5279bf Add more tempest tests for read permissions 4bff8dd Raise NotImplementedError instead of NotImplemented 5aa1598 Use constrained pip install for all jobs a547da2 Remove windows-style line breaks be7dff1 Import _ explicitly from ._i18n c0eefd7 Add error management regarding malformed UUID 304a7da Add a tempest test on read permission with bgpvpn_list c1ab126 Added the negative cases 28dcfbe Add tempest tests on route-target update cc4c52a import api validators/converters from neutron_lib c27b90c enable tempest tests for bgpvpn 50188f2 unit test fix: specify the tenand_id at Port/Net/Subnet creation 1ea3c8d Bad parameter name in disassociate_network_from_bgpvpn fcfdd83 Add a tenant ID check to create a bgpvpn resource 415740e Remove temporary local HasProject a044cf7 Enable DeprecationWarning in test environments e2f276a Add tempest test associate_disassociate_network 67e6e9f Delete execute permission of two files bd538d5 Add Python 3.5 classifier and venv 595db5a Updated from global requirements 70b68d2 Updated from global requirements 8eea958 Remove discover from test-requirements c358054 Add test delete_bgpvpn_as_non_admin_fail 00b9c11 Rename DB columns: tenant -> project cc1cf23 Bring models in sync with migrations, add test b0d07e1 Fix the permission of file -rwxr-xr-x ca7f0b3 Update API usage with Python and a sample code 8136b71 Remove useless/broken call in a bagpipe driver test a9d1094 Remove unused LOG to keep code clean cc8d478 Improve bagpipe unittest involving OVS bridges 76e70d4 Fix tox unit test issue 7f17824 Initialize the routers key in make_bgpvpn_dict cc28754 minor doc layout improvement c93da24 Horizon plugin to let the admin handle BGPVPN 7b3a06e Fix RD regex to match RFC 4364, chapter 4.2 06592f5 Move from neutron.i18n to oslo.i18n 2c27794 Update OpenContrail driver documentation 15bfd4f README cleanup 605e193 Update bagpipe driver documentation e8c379e Make test jobs constrained 0d8a7c3 Import neutron exceptions from neutron_lib 0cd20d7 bagpipe driver: add a unit test for agent extension eba2f98 Import constants from neutron_lib d8fa960 bagpipe: improve unit test d5b7703 bagpipe driver: enable a previously disabled unit test 167ecb1 Fix typos in bgpvpn installation manual ccc13f7 bagpipe: really use the extension-specific cookie 38fc3e7 bagpipe: update unit tests to follow a Neutron ML2 change d0fcacb Typo in OpenContrail driver documentation manual b5202df Add info on Nuage Networks driver 3279727 Improve installation documentation c31b679 devstack: fix OVS compilation hook c1cec62 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + README.rst | 35 +- bgpvpn_dashboard/__init__.py | 0 bgpvpn_dashboard/api/__init__.py | 0 bgpvpn_dashboard/api/bgpvpn.py | 116 +++++ bgpvpn_dashboard/common/__init__.py | 0 bgpvpn_dashboard/common/bgpvpn.py | 31 ++ bgpvpn_dashboard/dashboards/__init__.py | 0 bgpvpn_dashboard/dashboards/admin/__init__.py | 0 .../dashboards/admin/bgpvpn/__init__.py | 0 bgpvpn_dashboard/dashboards/admin/bgpvpn/forms.py | 99 ++++ bgpvpn_dashboard/dashboards/admin/bgpvpn/panel.py | 23 + bgpvpn_dashboard/dashboards/admin/bgpvpn/tables.py | 125 +++++ .../admin/bgpvpn/templates/bgpvpn/_create.html | 26 + .../bgpvpn/templates/bgpvpn/_detail_overview.html | 34 ++ .../admin/bgpvpn/templates/bgpvpn/create.html | 7 + .../admin/bgpvpn/templates/bgpvpn/detail.html | 16 + bgpvpn_dashboard/dashboards/admin/bgpvpn/urls.py | 33 ++ bgpvpn_dashboard/dashboards/admin/bgpvpn/views.py | 72 +++ .../dashboards/admin/bgpvpn/workflows.py | 41 ++ bgpvpn_dashboard/dashboards/project/__init__.py | 0 .../dashboards/project/bgpvpn/__init__.py | 0 .../dashboards/project/bgpvpn/forms.py | 136 +++++ .../dashboards/project/bgpvpn/panel.py | 23 + .../dashboards/project/bgpvpn/tables.py | 97 ++++ .../templates/bgpvpn/_associated_networks.html | 15 + .../templates/bgpvpn/_associated_routers.html | 15 + .../bgpvpn/templates/bgpvpn/_detail_overview.html | 14 + .../project/bgpvpn/templates/bgpvpn/_modify.html | 7 + .../project/bgpvpn/templates/bgpvpn/detail.html | 16 + .../project/bgpvpn/templates/bgpvpn/index.html | 7 + .../project/bgpvpn/templates/bgpvpn/modify.html | 7 + bgpvpn_dashboard/dashboards/project/bgpvpn/urls.py | 32 ++ .../dashboards/project/bgpvpn/views.py | 139 +++++ .../dashboards/project/bgpvpn/workflows.py | 241 +++++++++ .../enabled/_1495_project_bgpvpn_panel.py | 10 + .../enabled/_2115_admin_bgpvpn_panel.py | 10 + bgpvpn_dashboard/enabled/__init__.py | 0 bgpvpn_dashboard/test/__init__.py | 0 bgpvpn_dashboard/test/helpers.py | 36 ++ bgpvpn_dashboard/test/settings.py | 38 ++ bgpvpn_dashboard/test/test.py | 20 + bgpvpn_dashboard/test/test_data/__init__.py | 0 bgpvpn_dashboard/test/test_data/bgpvpn_data.py | 51 ++ bgpvpn_dashboard/test/test_data/utils.py | 34 ++ bgpvpn_dashboard/test/urls.py | 18 + devstack/devstack-gate-bagpipe-rc | 13 +- devstack/devstack-gate-rc | 4 - devstack/gate_hook.sh | 19 - devstack/plugin.sh | 11 +- devstack/settings | 1 + networking_bgpvpn/_i18n.py | 42 ++ networking_bgpvpn/neutron/db/bgpvpn_db.py | 78 ++- networking_bgpvpn/neutron/db/head.py | 20 + .../alembic_migrations/versions/CONTRACT_HEAD | 1 + .../alembic_migrations/versions/EXPAND_HEAD | 1 + .../db/migration/alembic_migrations/versions/HEADS | 2 - .../alembic_migrations/versions/__init__.py | 0 .../versions/liberty/__init__.py | 0 .../versions/liberty/contract/__init__.py | 0 .../liberty/expand/17d9fd4fddee_initial.py | 2 +- .../versions/liberty/expand/__init__.py | 0 .../23ce05e0a19f_rename_tenant_to_project.py | 135 +++++ .../0ab4049986b8_add_indexes_to_tenant_id.py | 35 ++ networking_bgpvpn/neutron/extensions/bgpvpn.py | 38 +- .../neutron/services/common/constants.py | 19 + networking_bgpvpn/neutron/services/common/utils.py | 1 + networking_bgpvpn/neutron/services/plugin.py | 56 +- .../service_drivers/bagpipe/agent_extension.py | 83 ++- .../services/service_drivers/bagpipe/bagpipe.py | 313 ++++++----- .../neutron/services/service_drivers/driver_api.py | 15 + .../service_drivers/opencontrail/exceptions.py | 8 +- .../service_drivers/opencontrail/opencontrail.py | 32 +- .../opencontrail/opencontrail_client.py | 1 + .../services/service_drivers/opendaylight/odl.py | 6 +- .../neutronclient/neutron/v2_0/bgpvpn/bgpvpn.py | 3 +- networking_bgpvpn_heat/bgpvpnservice.py | 6 +- networking_bgpvpn_tempest/config.py | 11 +- networking_bgpvpn_tempest/plugin.py | 14 +- .../services/bgpvpn/bgpvpn_client.py | 33 ++ .../bagpipe-router-compat-b53b6f3799cd23db.yaml | 13 + .../notes/horizon-support-06a7b21286002949.yaml | 17 + releasenotes/source/conf.py | 3 + requirements.txt | 4 +- setup.cfg | 4 +- test-requirements.txt | 14 +- tools/django-manage.py | 23 + tools/ostestr_compat_shim.sh | 8 + tools/tox_install.sh | 64 ++- tox.ini | 15 +- 110 files changed, 3904 insertions(+), 733 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fff2a24..2605a3d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=1.6 -Babel>=1.3 +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 @@ -8,0 +9 @@ oslo.db>=2.4.1 # Apache-2.0 +oslo.i18n>=2.1.0 # Apache-2.0 @@ -12,0 +14 @@ sphinxcontrib-seqdiag +neutron-lib>=0.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3d218f2..7024cdd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ coverage>=3.6 -discover +django-nose>=1.4.4 # BSD @@ -11 +11,3 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +psycopg2>=2.5 # LGPL/ZPL +PyMySQL>=0.6.2 # MIT License @@ -15 +17,2 @@ oslotest>=1.10.0 # Apache-2.0 -testrepository>=0.0.18 +os-testr>=0.7.0 # Apache-2.0 +testresources>=0.2.4 # Apache-2.0/BSD @@ -18,0 +22,2 @@ reno>=0.1.1 # Apache2 +pylint===1.4.5 +networking-bagpipe>=5.0.0 @@ -20,2 +25 @@ reno>=0.1.1 # Apache2 --e git+https://git.openstack.org/openstack/networking-bagpipe#egg=networking-b… --e git+https://git.openstack.org/openstack/networking-odl#egg=networking-odl +-e git+https://git.openstack.org/openstack/networking-odl@c62edca4437a0fb82403…

1 0

[new][solum] python-solumclient 2.1.1 release (newton)
by no-reply＠openstack.org 13 Oct '16

13 Oct '16

We are eager to announce the release of: python-solumclient 2.1.1: Client library for Solum API This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/python-solumclient/ For more details, please see below. Changes in python-solumclient 2.1.0..2.1.1 ------------------------------------------ e691947 Updated from global requirements 0329a2b Updated from global requirements c0b24e3 Updated from global requirements 1ba5ad1 Updated from global requirements 8c4e7d6 Add oslo.i18n to requirements b189434 Updated from global requirements 606792a Fix translation setup 5182d73 Switch to oslo_i18n a8843f9 Remove openstack/common/uuidutils.py 13724a3 Remove openstack/common/strutils.py fb7fca6 Remove openstack/common/importutils.py 776470d Switch to oslo_log Diffstat (except docs and test files) ------------------------------------- requirements.txt | 9 +- setup.cfg | 8 +- solumclient/common/cli_utils.py | 3 +- solumclient/common/client.py | 3 +- solumclient/i18n.py | 34 ++ solumclient/openstack/common/apiclient/base.py | 5 +- solumclient/openstack/common/apiclient/client.py | 7 +- .../openstack/common/apiclient/exceptions.py | 2 +- solumclient/openstack/common/cliutils.py | 16 +- solumclient/openstack/common/gettextutils.py | 479 --------------------- solumclient/openstack/common/importutils.py | 73 ---- solumclient/openstack/common/strutils.py | 311 ------------- solumclient/openstack/common/uuidutils.py | 37 -- solumclient/v1/app.py | 3 +- solumclient/v1/component.py | 3 +- solumclient/v1/pipeline.py | 3 +- solumclient/v1/plan.py | 3 +- solumclient/v1/workflow.py | 5 +- test-requirements.txt | 4 +- 19 files changed, 78 insertions(+), 930 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e29a9c0..4691ee6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ Babel>=2.3.4 # BSD +oslo.i18n>=2.1.0 # Apache-2.0 @@ -6,0 +8,2 @@ oslo.config>=3.14.0 # Apache-2.0 +oslo.utils>=3.16.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -12,2 +15,2 @@ python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 -PyYAML>=3.1.0 # MIT -stevedore>=1.16.0 # Apache-2.0 +PyYAML>=3.10.0 # MIT +stevedore>=1.17.1 # Apache-2.0 @@ -15 +18 @@ six>=1.9.0 # MIT -PrettyTable<0.8,>=0.7 # BSD +PrettyTable<0.8,>=0.7.1 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 127769a..1b18a06 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0

1 0

[new][solum] solum-dashboard 1.1.1 release (newton)
by no-reply＠openstack.org 13 Oct '16

13 Oct '16

We are thrilled to announce the release of: solum-dashboard 1.1.1: Solum Dashboard This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/solum-dashboard/ For more details, please see below. Changes in solum-dashboard 1.1.0..1.1.1 --------------------------------------- 5033382 Refactor the DeleteAssembly action dbefee0 Add the missing page_title for detail page 2235058 Fix the solum-dashboard ImportError 44829ec Updated from global requirements 2f55be0 Add page title for all panel table ae5f9e4 Updated from global requirements 0155f63 Updated from global requirements 0f4b2f5 Delete the unused url fdb49c4 Add the application update functionality to the dashboard 7e68366 Add the application scale functionality to the dashboard ba702db Fix the applications deploy functionality in the dashboard 9ef1598 Add the application log functionality to the dashboard c5ac8c0 Fix the applications create functionality in the dashboard da99b19 Fix the applications delete functionality in the dashboard 8e04eba Fix the applications show functionality in the dashboard b916e20 Adds i18n machinery for solum-dashboard Diffstat (except docs and test files) ------------------------------------- babel-django.cfg | 5 + babel-djangojs.cfg | 14 ++ requirements.txt | 6 +- solumdashboard/applications/forms.py | 197 ++++++++++++++++++ solumdashboard/applications/tables.py | 68 +++++-- solumdashboard/applications/tabs.py | 50 ++++- solumdashboard/applications/urls.py | 10 +- solumdashboard/applications/views.py | 87 ++++++-- solumdashboard/applications/workflows/__init__.py | 3 + solumdashboard/applications/workflows/create.py | 72 ------- solumdashboard/applications/workflows/launch.py | 67 ------- solumdashboard/applications/workflows/update.py | 70 +++++++ solumdashboard/assemblies/tables.py | 25 ++- solumdashboard/assemblies/views.py | 12 +- solumdashboard/languagepacks/views.py | 1 + solumdashboard/locale/django.pot | 219 +++++++++++++++++++++ solumdashboard/locale/djangojs.pot | 19 ++ solumdashboard/templates/applications/_create.html | 12 ++ .../applications/_create_general_help.html | 3 - solumdashboard/templates/applications/_detail.html | 58 ++++-- solumdashboard/templates/applications/_launch.html | 8 + .../applications/_launch_configure_help.html | 5 - solumdashboard/templates/applications/_log.html | 37 ++++ solumdashboard/templates/applications/_scale.html | 8 + solumdashboard/templates/applications/create.html | 7 + solumdashboard/templates/applications/detail.html | 6 +- solumdashboard/templates/applications/launch.html | 8 +- solumdashboard/templates/applications/scale.html | 11 ++ test-requirements.txt | 4 +- tox.ini | 5 + 30 files changed, 870 insertions(+), 227 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ba701ae..feaba1a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ iso8601>=0.1.11 # MIT -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -16,0 +17,4 @@ oslo.utils>=3.16.0 # Apache-2.0 + +# message extraction +Babel>=2.3.4 # BSD +django-babel>=0.5.1 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 5dcabd5..131be14 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,2 +17,2 @@ unittest2 # BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0

1 0

[new][solum] solum 5.0.1 release (newton)
by no-reply＠openstack.org 13 Oct '16

13 Oct '16

We are enthusiastic to announce the release of: solum 5.0.1: Application Lifecycle Management for OpenStack This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/solum/ Please report issues through launchpad: https://bugs.launchpad.net/solum For more details, please see below. Changes in solum 5.0.0..5.0.1 ----------------------------- 726a789 Fix the wrong '--plan-file' flag in quick start doc 582dfc7 Enable release notes translation 6c9a3ea Updated from global requirements a49a38a Updated from global requirements 300bfe0 Remove solum-builder-api from setup.cfg 9763b11 Updated from global requirements 391191e Bump devstack version fd6c52d Using sys.exit(main()) instead of main() f44eae1 Updated from global requirements 7ef0292 Don't pass argument sqlite_db in method set_defaults f7a1379 Replace assertEqual(None, *) with assertIsNone in tests 606c8af Updated from global requirements 7d8e265 Let solum api/conductor/deployer/worker work with logging 71b7557 Fix tempest error 03cc9e6 Let solum conductor/deployer/worker work without logging b70bf05 Updated from global requirements f35e792 [workaround]Let solum work without logging 7eb5162 Updated from global requirements c200166 Coreos uses the stable version 2ecfb75 Modify use of assertTrue(A in B) e8f9d04 Remove all the openstack directory fcaf835 Switch to oslo_i18n 1142b30 Using oslo_utils instead of excutils.py 9225f11 Switch to oslo_utils 0fab078 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- contrib/add-ons/lib/solum | 2 +- contrib/lp-cedarish/docker/swift-handler.py | 2 +- devstack/devstack-provenance | 439 ++++++++++--------- devstack/plugin.sh | 6 +- releasenotes/source/conf.py | 3 + requirements.txt | 14 +- setup.cfg | 1 - solum/api/auth.py | 4 +- solum/api/controllers/camp/v1_1/plans.py | 2 +- solum/api/controllers/v1/assembly.py | 2 +- .../api/controllers/v1/datamodel/language_pack.py | 2 +- solum/api/controllers/v1/datamodel/sensor.py | 2 +- solum/api/controllers/v1/datamodel/types.py | 2 +- solum/api/controllers/v1/pipeline.py | 2 +- solum/cmd/api.py | 2 +- solum/cmd/conductor.py | 2 +- solum/cmd/deployer.py | 2 +- solum/cmd/worker.py | 2 +- solum/common/clients.py | 2 +- solum/common/exception.py | 4 +- solum/common/service.py | 5 +- solum/common/solum_barbicanclient.py | 3 +- solum/common/solum_keystoneclient.py | 4 +- solum/common/urlfetch.py | 2 +- solum/i18n.py | 35 ++ solum/openstack/__init__.py | 0 solum/openstack/common/__init__.py | 17 - solum/openstack/common/excutils.py | 101 ----- solum/openstack/common/fixture/__init__.py | 0 solum/openstack/common/fixture/config.py | 85 ---- solum/openstack/common/gettextutils.py | 479 --------------------- solum/openstack/common/importutils.py | 73 ---- solum/openstack/common/local.py | 45 -- solum/openstack/common/strutils.py | 295 ------------- solum/worker/handlers/shell.py | 2 +- test-requirements.txt | 8 +- tox.ini | 2 +- 51 files changed, 319 insertions(+), 1390 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 54b5fb0..43baf8d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ kombu>=3.0.25 # BSD -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -14 +14 @@ oslo.context>=2.9.0 # Apache-2.0 -oslo.db>=4.10.0 # Apache-2.0 +oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 @@ -19 +19 @@ oslo.utils>=3.16.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -21 +21 @@ pbr>=1.6 # Apache-2.0 -pecan!=1.0.2,!=1.0.3,!=1.0.4,>=1.0.0 # BSD +pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD @@ -24,2 +24,2 @@ python-barbicanclient>=4.0.0 # Apache-2.0 -python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 -python-heatclient>=1.4.0 # Apache-2.0 +python-glanceclient>=2.5.0 # Apache-2.0 +python-heatclient>=1.5.0 # Apache-2.0 @@ -34 +34 @@ python-mistralclient>=2.0.0 # Apache-2.0 -keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 +keystonemiddleware!=4.5.0,>=4.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 220549c..f0b5d94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,2 +11,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -16 +16 @@ sphinxcontrib-httpdomain # BSD -stevedore>=1.16.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 @@ -24 +24 @@ reno>=1.8.0 # Apache2 -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License

1 0

[new][nova] nova 14.0.1 release (newton)
by no-reply＠openstack.org 12 Oct '16

12 Oct '16

We are frolicsome to announce the release of: nova 14.0.1: Cloud computing fabric controller This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 14.0.1 ^^^^^^ Nova 14.0.0 release is including a lot of new features and bugfixes. It can be extremely hard to mention all the changes we introduced during that release but we beg you to read at least the upgrade section which describes the required modifications that you need to do for upgrading your cloud from 13.0.0 (Mitaka) to 14.0.0 (Newton). That said, a few major changes are worth to notice here. This is not an exhaustive list of things to notice, rather just important things you need to know : * Latest API microversion supported for Newton is v2.38 * Nova now provides a new placement RESTful API endpoint that is for the moment optional where Nova compute nodes use it for providing resources. For the moment, the nova-scheduler is not using it but we plan to check the placement resources for Ocata. In case you plan to rolling-upgrade the compute nodes between Newton and Ocata, please look in the notes below how to use the new placement API. * Cells V2 now supports booting instances for one cell v2 only. We plan to add a multi-cell support for Ocata. You can prepare for Ocata now by creating a cellv2 now using the nova-manage related commands, but configuring Cells V2 is still fully optional for this cycle. * Nova is now using Glance v2 API for getting image resources. * API microversions 2.36 and above now deprecate the REST resources in Nova used to proxy calls to other service type APIs (eg. /os- volumes). We'll still supporting those until we raise our minimum API version to 2.36 which is not planned yet (we're supporting v2.1 as of now) but you're encouraged to stop using those resources and rather calling the other services that provide those natively. Changes in nova 14.0.0..14.0.1 ------------------------------ 2089838 Add error handling for delete-volume API da6cb54 libvirt: fix DiskSmallerThanImage when block migrate ephemerals fb17be1 Fix binary name used in the pci device online migration check ec78fc2 Fix error status code on update-volume API f7d6197 refresh instances_path when shared storage used c7a9998 libvirt: ignore conflict when defining network filters 0c6c2dd Add a prelude section for Newton f15561b Archive instance-related rows when the parent instance is deleted 464d3b8 Add missing slash to dir path a4a834f Fix require thread policy for multi-NUMA computes 2dcf8c2 Allow linear packing of cores Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/volumes.py | 18 ++++++-- nova/db/sqlalchemy/api.py | 53 +++++++++++++++++++++- nova/objects/pci_device.py | 2 +- nova/pci/utils.py | 2 +- nova/scheduler/filters/numa_topology_filter.py | 18 ++++---- .../unit/api/openstack/compute/test_volumes.py | 20 +++++++- .../filters/test_numa_topology_filters.py | 6 +-- nova/virt/hardware.py | 13 +++++- nova/virt/libvirt/driver.py | 27 ++++++++--- nova/virt/libvirt/firewall.py | 16 ++++++- .../notes/newton_prelude-6a6566c8753d147c.yaml | 30 ++++++++++++ 18 files changed, 335 insertions(+), 44 deletions(-)

1 0

[new][neutron] neutron-lbaas 8.3.0 release (mitaka)
by no-reply＠openstack.org 11 Oct '16

11 Oct '16

We are stoked to announce the release of: neutron-lbaas 8.3.0: OpenStack Networking Load Balancing as a Service This release is part of the mitaka stable release series. Download the package from: https://tarballs.openstack.org/neutron-lbaas/ For more details, please see below. Changes in neutron-lbaas 8.2.0..8.3.0 ------------------------------------- a610227 Fixed lbaasv2 service plugin alias definition 4d331d4 Updated from global requirements 3cf4a7c Set HTTP status code to 409 for LBs in PENDING* 32e2ad9 Allow setting "insecure" in neutron_lbaas.conf 680998e Allow tox to be run with python 3 Diffstat (except docs and test files) ------------------------------------- neutron_lbaas/common/keystone.py | 8 +++++++- neutron_lbaas/extensions/loadbalancerv2.py | 2 +- setup.cfg | 2 +- test-requirements.txt | 2 +- tox.ini | 2 +- 6 files changed, 26 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f9aef24..7848bcb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24 +24 @@ reno>=0.1.1 # Apache2 -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License

1 0

[new][neutron] neutron 8.3.0 release (mitaka)
by no-reply＠openstack.org 11 Oct '16

11 Oct '16

We are glad to announce the release of: neutron 8.3.0: OpenStack Networking This release is part of the mitaka stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 8.3.0 ^^^^^ The Neutron server no longer needs to be configured with a firewall driver and it can support mixed environments of hybrid iptables firewalls and the pure OVS firewall. By default, the QoS driver for the Open vSwitch and Linuxbridge agents calculates the burst value as 80% of the available bandwidth. New Features ************ * The Neutron server now learns the appropriate firewall wiring behavior from each OVS agent so it no longer needs to be configured with the firewall_driver. This means it also supports multiple agents with different types of firewalls. Upgrade Notes ************* * A new option "ha_keepalived_state_change_server_threads" has been added to configure the number of concurrent threads spawned for keepalived server connection requests. Higher values increase the CPU load on the agent nodes. The default value is half of the number of CPUs present on the node. This allows operators to tune the number of threads to suit their environment. With more threads, simultaneous requests for multiple HA routers state change can be handled faster. Bug Fixes ********* * Fixes bug 1572670 * Allow SR-IOV agent to run with 0 vfs Changes in neutron 8.2.0..8.3.0 ------------------------------- 411a126 ml2 lb: do not program arp responder when unused 039ab16 New option for num_threads for state change server fcb12b5 DVR: Pings to floatingip returns with fixed-ip on same network 2a08263 Install dibbler.filters rootwrap file 6a02881 ml2: allow retry on retriabable db error by precommit 0b2b1ec Check for StaleData errors in retry decorator 046f529 Support for MultipleExceptions in db_api decorators 02c1bad Convert multiple exception types in the API 788d889 Fixes KeyError while updating bgp peer bb01912 fix port address allocation for auto-addr subnet 207cd3a Pass not IPDevice but port_name into OVSBridge's add_port() fdaef35 Fix wrong HA router state 9054009 Imported Translations from Zanata 5124652 Allow SR-IOV agent to start when number of vf is 0 2d1da35 Implement check_vlan_transparency to return True in SR-IOV mech driver f004b76 Updated from global requirements 17b8d9e Check target_tenant when create rbac policy e5fb8e9 DVR: Cleanup the stale snat redirect rules in router namespace c4041da Add flush command to iproute in ip_lib af52a3d3 DVR: SNAT redirect rules should be removed only on Gateway clear 010559c Fix internal server error during updating QoS rule 51ebedb Fixes port device_id/device_owner change in failed operation f451c6c Refer to correct global_physnet_mtu option instead of segment_mtu d560164 L3 DVR: use fanout when sending dvr arp table update c8d5562 Suppresses a warning when no agents are configured cf3009a Allow auto-addressed ips deletion on port update a08fecc Set secure fail mode for physical bridges 212f09f Imported Translations from Zanata dcea3f3 Pass timeout in milliseconds to timer_wait 1845a1e Fix code that's trying to read from a stale DB object 06bfaed Handle deleted ports when creating a list of fdb entries 3f02209 L3 agent: check router namespace existence before delete b1f3da7 BGP: exclude legacy fip in DVR fip host routes query 6e5892d DVR: Clean stale snat-ns by checking its existence when agent restarts 035be79 Partial revert "DVR: Fix issue of SNAT rule for DVR with floating ip" bebb891 Restore old assert_ping behavior d57fd0a Fix for check_vlan_transparency on mech drivers not called 1053240 DVR: Fix issue of SNAT rule for DVR with floating ip a98b6eb Wait for vswitchd to add interfaces in native ovsdb f49a25c ovsdb: Don't let block() wait indefinitely 55a3519 Filter HA router without HA port bindings after race conditions e0f46f1 Don't load DNS integration in l3_router_plugin 43ac3a1 Added test cases for DVR L3 schedulers. bf5b8ca Don't use exponential back-off for report_state ae6a2ec Move state reporting initialization to after worker forking 505c58d Fix broken URL in Mitaka Neutron release note 7238c8e Avoid duplicate ipset processing for security groups 65e3639 Fix update of shared QoS policy 8b5d04f Add setting default max_burst value if not given by user e448b7e Check compatibility when auto schedule ha routers 7a969d4 OVS Mech: Set hybrid plug based on agent config 3ce3053 Fix help message for external_network_bridge 1d714c3 Change get_root_helper_child_pid to stop when it finds cmd Diffstat (except docs and test files) ------------------------------------- neutron/agent/common/config.py | 3 +- neutron/agent/common/ovs_lib.py | 9 +- neutron/agent/l2/extensions/qos.py | 10 + neutron/agent/l3/agent.py | 4 + neutron/agent/l3/dvr_edge_ha_router.py | 6 - neutron/agent/l3/dvr_edge_router.py | 38 +-- neutron/agent/l3/dvr_fip_ns.py | 17 +- neutron/agent/l3/dvr_local_router.py | 133 ++++++++-- neutron/agent/l3/dvr_router_base.py | 1 + neutron/agent/l3/dvr_snat_ns.py | 1 + neutron/agent/l3/ha.py | 10 +- neutron/agent/l3/namespace_manager.py | 4 + neutron/agent/l3/namespaces.py | 28 +- neutron/agent/l3/router_info.py | 25 +- neutron/agent/linux/async_process.py | 1 + neutron/agent/linux/interface.py | 6 +- neutron/agent/linux/ip_lib.py | 7 + neutron/agent/linux/iptables_firewall.py | 14 +- neutron/agent/linux/tc_lib.py | 24 +- neutron/agent/linux/utils.py | 21 +- neutron/agent/metadata/agent.py | 2 +- neutron/agent/ovsdb/api.py | 4 + neutron/agent/ovsdb/impl_idl.py | 110 ++++++-- neutron/agent/ovsdb/native/commands.py | 4 + neutron/agent/ovsdb/native/connection.py | 3 + neutron/agent/rpc.py | 3 +- neutron/api/rpc/agentnotifiers/l3_rpc_agent_api.py | 21 +- neutron/api/v2/base.py | 6 +- neutron/callbacks/exceptions.py | 14 +- neutron/common/exceptions.py | 13 + neutron/db/agentschedulers_db.py | 3 + neutron/db/api.py | 23 +- neutron/db/bgp_db.py | 7 +- neutron/db/dns_db.py | 12 +- neutron/db/ipam_backend_mixin.py | 25 +- neutron/db/ipam_pluggable_backend.py | 11 +- neutron/db/l3_db.py | 38 ++- neutron/db/l3_hamode_db.py | 12 +- neutron/db/quota/driver.py | 2 +- neutron/extensions/rbac.py | 11 +- neutron/locale/de/LC_MESSAGES/neutron.po | 25 +- neutron/locale/es/LC_MESSAGES/neutron.po | 24 +- neutron/locale/fr/LC_MESSAGES/neutron.po | 24 +- neutron/locale/it/LC_MESSAGES/neutron.po | 24 +- neutron/locale/ja/LC_MESSAGES/neutron.po | 24 +- .../locale/ko_KR/LC_MESSAGES/neutron-log-error.po | 18 +- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 42 +-- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 24 +- neutron/locale/ru/LC_MESSAGES/neutron.po | 23 +- .../locale/tr_TR/LC_MESSAGES/neutron-log-error.po | 8 +- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 57 ++-- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 22 +- neutron/objects/rbac_db.py | 10 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 4 + .../agent/extension_drivers/qos_driver.py | 4 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 6 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 4 - .../drivers/mech_sriov/mech_driver/mech_driver.py | 4 + .../agent/extension_drivers/qos_driver.py | 5 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 60 +++-- .../openvswitch/mech_driver/mech_openvswitch.py | 14 +- neutron/plugins/ml2/drivers/type_tunnel.py | 2 +- neutron/plugins/ml2/managers.py | 81 ++++-- neutron/plugins/ml2/plugin.py | 36 ++- neutron/policy.py | 9 +- neutron/scheduler/l3_agent_scheduler.py | 24 +- neutron/services/l3_router/l3_router_plugin.py | 3 +- neutron/services/qos/qos_consts.py | 6 + .../api/admin/test_shared_network_extension.py | 15 ++ .../scheduler/test_l3_agent_scheduler.py | 293 ++++++++++++++++++++- .../unit/agent/linux/test_iptables_firewall.py | 60 +---- .../rpc/agentnotifiers/test_l3_rpc_agent_api.py | 47 ++++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 35 ++- .../agent/test_linuxbridge_neutron_agent.py | 45 +++- .../mech_sriov/agent/test_eswitch_manager.py | 10 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 43 ++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 6 +- .../mech_driver/test_mech_openvswitch.py | 44 ++++ .../unit/scheduler/test_l3_agent_scheduler.py | 28 ++ .../add-availability-zone-4440cf00be7c54ba.yaml | 2 +- ...iver_not_needed_on_server-4159669ad834dea6.yaml | 12 + ...ate-change-server-threads-9ed775e7533dd1a0.yaml | 10 + ...f-default-qos-burst-value-0790773703fa08fc.yaml | 7 + .../sriov-agent-num-vf-0-0c06424247e7efe0.yaml | 3 + setup.cfg | 1 + test-requirements.txt | 2 +- 116 files changed, 2438 insertions(+), 727 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f0273cd..0551622 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -25 +25 @@ reno>=0.1.1 # Apache2 -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License

1 0

[new][neutron] neutron-vpnaas 7.2.0 release (liberty)
by no-reply＠openstack.org 11 Oct '16

11 Oct '16

We are eager to announce the release of: neutron-vpnaas 7.2.0: OpenStack Networking VPN as a Service This release is part of the liberty stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. Changes in neutron-vpnaas 7.1.2..7.2.0 -------------------------------------- be66028 Ensure that PK values don't default to NULL 015d580 Remove Foreign Key constraint during ALTER Diffstat (except docs and test files) ------------------------------------- .../liberty/contract/56893333aa52_fix_identifier_map_fk.py | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-)

1 0

[new][neutron] neutron-lbaas 7.2.0 release (liberty)
by no-reply＠openstack.org 11 Oct '16

11 Oct '16

We are joyful to announce the release of: neutron-lbaas 7.2.0: OpenStack Networking Load Balancing as a Service This release is part of the liberty stable release series. Download the package from: https://tarballs.openstack.org/neutron-lbaas/ For more details, please see below. Changes in neutron-lbaas 7.1.2..7.2.0 ------------------------------------- d42ad18 Fixed lbaasv2 service plugin alias definition 01a9d03 Allow tox to be run with python 3 Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 +- tox.ini | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

[new][neutron] neutron 7.2.0 release (liberty)
by no-reply＠openstack.org 11 Oct '16

11 Oct '16

We are jazzed to announce the release of: neutron 7.2.0: OpenStack Networking This release is part of the liberty stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 7.2.0 ^^^^^ Upgrade Notes * A new option "ha_keepalived_state_change_server_threads" has been added to configure the number of concurrent threads spawned for keepalived server connection requests. Higher values increase the CPU load on the agent nodes. The default value is half of the number of CPUs present on the node. This allows operators to tune the number of threads to suit their environment. With more threads, simultaneous requests for multiple HA routers state change can be handled faster. Changes in neutron 7.1.2..7.2.0 ------------------------------- 4387d4a New option for num_threads for state change server ed12d71 Install dibbler.filters rootwrap file 29b047a DVR: SNAT redirect rules should be removed only on Gateway clear bce58c6 DVR: Cleanup the stale snat redirect rules in router namespace 9cd2dfc Add flush command to iproute in ip_lib e069872 Allow auto-addressed ips deletion on port update c1755c5 Suppresses a warning when no agents are configured cdbb26e Set secure fail mode for physical bridges a587dec Fix code that's trying to read from a stale DB object affccd1 L3 agent: check router namespace existence before delete 2e1fcc0 Handle deleted ports when creating a list of fdb entries c334eb2 DVR: Clean stale snat-ns by checking its existence when agent restarts 395f34d Restore old assert_ping behavior 1287e86 Don't use exponential back-off for report_state d7c8e53 Change get_root_helper_child_pid to stop when it finds cmd Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/agent.py | 4 ++ neutron/agent/l3/dvr_edge_router.py | 34 +++++----- neutron/agent/l3/dvr_fip_ns.py | 6 +- neutron/agent/l3/dvr_local_router.py | 43 +++++++++++-- neutron/agent/l3/dvr_router_base.py | 1 + neutron/agent/l3/dvr_snat_ns.py | 1 + neutron/agent/l3/ha.py | 10 ++- neutron/agent/l3/namespace_manager.py | 4 ++ neutron/agent/l3/namespaces.py | 28 ++++++++- neutron/agent/l3/router_info.py | 17 ++++- neutron/agent/linux/async_process.py | 1 + neutron/agent/linux/ip_lib.py | 7 +++ neutron/agent/linux/utils.py | 21 ++++--- neutron/agent/rpc.py | 3 +- neutron/db/agentschedulers_db.py | 3 + neutron/db/ipam_backend_mixin.py | 25 +++++--- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 4 ++ .../drivers/openvswitch/agent/ovs_neutron_agent.py | 1 + neutron/plugins/ml2/plugin.py | 25 +++++--- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 35 +++++++++-- .../openvswitch/agent/test_ovs_neutron_agent.py | 2 + .../drivers/openvswitch/agent/test_ovs_tunnel.py | 2 + ...ate-change-server-threads-9ed775e7533dd1a0.yaml | 10 +++ setup.cfg | 1 + 36 files changed, 586 insertions(+), 76 deletions(-)

1 0

[new][packaging-rpm] renderspec 1.1.0 release
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are tickled pink to announce the release of: renderspec 1.1.0: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.0.0..1.1.0 ---------------------------------- e2a38af Updated from global requirements f8b6f38 Updated from global requirements e96e65c Updated from global requirements c9f1ab2 Update homepage with developer documentation page 2379e1f Add req_cleanup block for Fedora templates 9f2cf42 Updated from global requirements 563ba57 Support distro specific child templates b008780 Updated from global requirements 9e4acce Fail if specified file doesn't exist cbe6134 Add support to CentOS c9cf0fd Updated from global requirements Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 48 +++++++++++++------- renderspec/dist-templates/fedora.spec.j2 | 8 ++++ renderspec/dist-templates/suse.spec.j2 | 4 ++ renderspec/distloader.py | 76 ++++++++++++++++++++++++++++++++ requirements.txt | 6 +-- setup.cfg | 4 +- test-requirements.txt | 5 ++- 9 files changed, 224 insertions(+), 23 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d4deb47..2830289 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,3 +5,3 @@ Jinja2>=2.8 # BSD License (3 clause) -pymod2pkg>=0.3 # Apache-2.0 -PyYAML>=3.1.0 # MIT -packaging>=15.2 # Apache-2.0 +pymod2pkg>=0.5.4 # Apache-2.0 +PyYAML>=3.10.0 # MIT +packaging>=16.5 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6dace1b..6323f28 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,0 +9 @@ ddt>=1.0.1 # MIT +mock>=2.0 # BSD @@ -10,2 +11,2 @@ ddt>=1.0.1 # MIT -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0

1 0

[new][neutron] networking-bgpvpn 4.0.2 release
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are chuffed to announce the release of: networking-bgpvpn 4.0.2: API and Framework to interconnect bgpvpn to neutron networks The source is available from: http://git.openstack.org/cgit/openstack/networking-bgpvpn Download the package from: https://tarballs.openstack.org/networking-bgpvpn/ Please report issues through launchpad: http://bugs.launchpad.net/bgpvpn For more details, please see below. Changes in networking-bgpvpn 4.0.1..4.0.2 ----------------------------------------- 482de4f opencontrail: not check tenant existence on update 38c56ba Refer to odl and bagpipe stable/mitaka branches 70e80ae Add tempest tests for router association dbddaf6 Add more tempest tests for read permissions df4e526 Add a tempest test on read permission with bgpvpn_list b2897ae Added the negative cases 77f061b Add tempest tests on route-target update 9a89c87 Bad parameter name in disassociate_network_from_bgpvpn f6841b9 Add tempest test associate_disassociate_network 3e7f1fe Add test delete_bgpvpn_as_non_admin_fail 37bb73a enable tempest tests for bgpvpn c25a340 Add error management regarding malformed UUID a9d4479 Add a tenant ID check to create a bgpvpn resource 98d0380 Make test jobs constrained f975736 Initialize the routers key in make_bgpvpn_dict 4b92d0c Update OpenContrail driver documentation Diffstat (except docs and test files) ------------------------------------- .pylintrc | 3 +- devstack/devstack-gate-bagpipe-rc | 12 +- devstack/devstack-gate-rc | 4 - networking_bgpvpn/neutron/services/common/utils.py | 1 + .../service_drivers/opencontrail/exceptions.py | 4 + .../service_drivers/opencontrail/opencontrail.py | 17 +- .../opencontrail/opencontrail_client.py | 1 + .../services/bgpvpn/bgpvpn_client.py | 33 +++ test-requirements.txt | 5 +- tools/tox_install.sh | 25 ++- tox.ini | 10 +- 14 files changed, 416 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3d218f2..883d659 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19 @@ reno>=0.1.1 # Apache2 +pylint===1.4.5 @@ -20,2 +21,2 @@ reno>=0.1.1 # Apache2 --e git+https://git.openstack.org/openstack/networking-bagpipe#egg=networking-b… --e git+https://git.openstack.org/openstack/networking-odl#egg=networking-odl +-e git+https://git.openstack.org/openstack/networking-bagpipe@stable/mitaka#eg… +-e git+https://git.openstack.org/openstack/networking-odl@stable/mitaka#egg=ne…

1 0

[new][neutron] networking-calico 1.3.1 release
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are psyched to announce the release of: networking-calico 1.3.1: This project contains documentation and code for integrating Project Calico networking into OpenStack/Neutron. The source is available from: http://git.openstack.org/cgit/openstack/networking-calico Download the package from: https://tarballs.openstack.org/networking-calico/ Please report issues through launchpad: http://bugs.launchpad.net/networking-calico For more details, please see below. Changes in networking-calico 1.3.0..1.3.1 ----------------------------------------- fc7f8e8 Version 1.3.1 f93201f Restore RPM dependency on python-etcd 29dc32e Correctly handle etcd being stopped 287a146 Import needed code from core Calico repo 663aa83 Fix multiple interface prefixes support Diffstat (except docs and test files) ------------------------------------- CHANGES.md | 8 + _test-requirements.txt | 1 - debian/changelog | 22 + debian/control | 1 - debian/rules | 2 +- devstack/auto-bird-conf.sh | 6 +- devstack/plugin.sh | 10 +- devstack/settings | 8 +- networking_calico/agent/dhcp_agent.py | 12 +- networking_calico/common/__init__.py | 343 ++++++++++++++ networking_calico/datamodel_v1.py | 199 +++++++++ networking_calico/etcdutils.py | 491 ++++++++++++++++++++ networking_calico/logutils.py | 26 ++ networking_calico/monotonic.py | 55 +++ .../plugins/ml2/drivers/calico/election.py | 14 + .../plugins/ml2/drivers/calico/mech_calico.py | 6 +- .../plugins/ml2/drivers/calico/t_etcd.py | 15 +- .../plugins/ml2/drivers/calico/test/lib.py | 7 + .../ml2/drivers/calico/test/test_election.py | 4 + .../ml2/drivers/calico/test/test_plugin_etcd.py | 8 +- rpm/networking-calico.spec | 20 +- tox.ini | 1 + 27 files changed, 2249 insertions(+), 41 deletions(-) Requirements updates -------------------- diff --git a/_test-requirements.txt b/_test-requirements.txt index 359a4ab..86db8ba 100644 --- a/_test-requirements.txt +++ b/_test-requirements.txt @@ -21 +20,0 @@ testtools>=0.9.36,!=1.2.0 --e git+https://github.com/projectcalico/calico.git#egg=calico-git

1 0

[new][neutron] networking-bagpipe 5.0.0 release
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are jubilant to announce the release of: networking-bagpipe 5.0.0: Mechanism driver for Neutron ML2 plugin using BGP E-VPNs/IP VPNs as a backend The source is available from: http://git.openstack.org/cgit/openstack/networking-bagpipe Download the package from: https://tarballs.openstack.org/networking-bagpipe/ Please report issues through launchpad: http://bugs.launchpad.net/bagpipe For more details, please see below. Changes in networking-bagpipe 4.0.0..5.0.0 ------------------------------------------ 4b66732 Router fallback feature 651ab21 devstack fix for bagpipe ml2 d16e1d9 devstack: fix to load bagpipe l2 agent extension e577e14 Remove python 3 from setup.cfg classifiers 8b0d513 Update homepage with developer documentation page 1e523da Modify use of assertTrue(A in B) ed923fe Import DB model base from neutron_lib 013c154 devstack: properly set the l2 agent extension aebe171 Update flake8 ignore list fe47dfe Updated from global requirements 43d8788 Use upper constraints for test jobs c7b28ca Update deprecated i18n an neutron const imports 68962b8 Updated from global requirements 0de951f Updated from global requirements 4a925af Enable DeprecationWarning in test environments 9e4409a Updated from global requirements 4bc7315 Add Python 3.5 classifier and venv 6e4dc2d Remove discover from test-requirements afe4f82 Add test dependency on testresources 66fc7ac Updated from global requirements 54c5149 Updated from global requirements 28e3735 Updated from global requirements 780df34 Move from neutron.i18n to oslo.i18n a5b2d5d Update README Diffstat (except docs and test files) ------------------------------------- README.rst | 25 +- bagpipe-bgp | 2 +- devstack/plugin.sh | 4 +- networking_bagpipe/_i18n.py | 42 ++ networking_bagpipe/agent/bagpipe_bgp_agent.py | 394 ++++++++++++++----- .../agent/bagpipe_linuxbridge_neutron_agent.py | 7 +- networking_bagpipe/driver/mech_bagpipe.py | 13 +- networking_bagpipe/driver/type_route_target.py | 11 +- .../unit/agent/test_linuxbridge_agent_extension.py | 5 +- requirements.txt | 14 +- setup.cfg | 5 +- test-requirements.txt | 4 +- tools/tox_install.sh | 9 +- tox.ini | 8 +- 16 files changed, 765 insertions(+), 215 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4eb251..c3abbcf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,4 +7,5 @@ Babel>=2.3.4 # BSD -neutron-lib>=0.1.0 # Apache-2.0 -oslo.db>=4.1.0 # Apache-2.0 -oslo.config>=3.9.0 # Apache-2.0 -oslo.concurrency>=3.5.0 # Apache-2.0 +neutron-lib>=0.4.0 # Apache-2.0 +oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.config>=3.14.0 # Apache-2.0 +oslo.concurrency>=3.8.0 # Apache-2.0 +oslo.i18n>=2.1.0 # Apache-2.0 @@ -12,3 +13,2 @@ oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=4.5.0 # Apache-2.0 -oslo.service>=1.0.0 # Apache-2.0 - +oslo.messaging>=5.2.0 # Apache-2.0 +oslo.service>=1.10.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 8bd244e..268a97b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ coverage>=3.6 # Apache-2.0 -discover # BSD @@ -10 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD @@ -13,0 +13 @@ testrepository>=0.0.18 # Apache-2.0/BSD +testresources>=0.2.4 # Apache-2.0/BSD

1 0

[new][openstackclient] python-openstackclient 3.3.0 release (ocata)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are content to announce the release of: python-openstackclient 3.3.0: OpenStack Command-line Client This release is part of the ocata release series. The source is available from: https://git.openstack.org/cgit/openstack/python-openstackclient Download the package from: https://pypi.python.org/pypi/python-openstackclient Please report issues through launchpad: https://bugs.launchpad.net/python-openstackclient For more details, please see below. 3.3.0 ^^^^^ New Features ************ * Ports can now be listed as per the networks they are connected to by using the "--network" option with the "port list" CLI. [ Blueprint network-commands-options (https://blueprints.launchpad.net/python- openstackclient/+spec /network-commands-options)] * Allow "--no-fixed-ip" and "--no-binding-profile" options to "port set" command to be specified when "--fixed-ip" and "--binding- profile" are present. This allows the list of fixed IPs and binding profiles to be cleared and replaced with new values in a single command. [Blueprint allow-overwrite-set-options (https://blueprints.launchpad.net/python-openstackclient/+spec /allow-overwrite-set-options)] * Add "--no-allocation-pool" and "--no-host-route" options to "subnet set" command that clears the respective values in the specified subnet. This allows new values to replace the entire list of existing values in a single command for allocation pools and host routes. [Blueprint allow-overwrite-set-options (https://blueprints.launchpad.net/python-openstackclient/+spec /allow-overwrite-set-options)] * Add "volume transfer request create", "volume transfer request delete", "volume transfer request show" and "volume transfer request accept" commands in volume v1 and v2. [Blueprint cinder-command- support (https://blueprints.launchpad.net/python- openstackclient/+spec/cinder-command-support)] * Add "--description" option to "network create" and "network set" commands. [Blueprint network-commands-options (https://blueprints.launchpad.net/python-openstackclient/+spec /network-commands-options)] * Add "--description" option to "floating ip create" command. [Blueprint :oscbp:`neutron-client-descriptions`] * Add "--description" option to "router set" and "router create" commands. [Blueprint :oscbp:`network-commands-options`] * Add "network segment create", "network segment delete" and "network segment set" commands. In addition, the "network segment list" and "network segment show" commands are no longer beta commands and the "--network-segment" option on the "subnet create" command is no longer a beta command option. [Blueprint routed- networks (https://blueprints.launchpad.net/neutron/+spec/routed- networks)] * Add "--no-property" option to "aggregate set" command. This allows the property list to be cleared and replaced with new values in a single command. [Blueprint support-no-property-in-aggregate (https://blueprints.launchpad.net/python-openstackclient/+spec /support-no-property-in-aggregate)] * Supported to fetch network project default quota with command "quota show --default". [Bug 1204956 (https://bugs.launchpad.net/neutron/+bug/1204956) * Add "--internal", "--name", "--project" and "--project-domain", "-- enable" and "--disable", "--share" and "--no share", "--status" options to the "network list" command. [Bug 1578819 (https://bugs.launchpad.net/bugs/1578819) * Add "--name" option to command "object create" for uploading a file and renaming it. [Bug 1607972 (https://bugs.launchpad.net/bugs/1607972) * Support to update "per_volume_gigabytes", "backup_gigabytes" and "backups" quota in "quota set" command. [Bug 1609767 (https://bugs.launchpad.net/python-openstackclient/+bug/1609767) * Add "--ha" option to "router create" command. [Bug 1610161 (https://bugs.launchpad.net/bugs/1610161) * Add "--project", "--project-domain", "--network", "--gateway", "-- name" and "--subnet-range" options to the "subnet list" command. [Bug 1610883 (https://bugs.launchpad.net/bugs/1610883) * Add "--limit" option to "volume list" command in volume v1, add "-- limit" and "--marker" options to "volume list" command in volume v2. [Bug 1612484 (https://bugs.launchpad.net/bugs/1612484) * Add "volume backup set" commands in volume v2. [Bug 1613261 (https://bugs.launchpad.net/python-openstackclient/+bug/1613261) * Add "volume service set" commands in volume v1 and v2. [Bug 1613597 (https://bugs.launchpad.net/python- openstackclient/+bug/1613597)] * Add "--share", "--no-share", "--project", "--project-domain", "-- default", "--no-default", "--name" and "--address-scope" options to the "subnet pool list" command. [Bug 1613926 (https://bugs.launchpad.net/bugs/1613926) * Add "consistency group list" command in volume v2. [Bug 1613964 (https://bugs.launchpad.net/python-openstackclient/+bug/1613964) * Support listing the specified server's ports by new option "-- server" of "port list" command. [Bug 1614385 (https://bugs.launchpad.net/python-openstackclient/+bug/1614385) * Adds "--description" option to "subnet create" and "subnet set" commands. [Bug 1614458 (https://bugs.launchpad.net/bugs/1614458) * Adds "--description" option to "subnet pool create" and "subnet pool set" commands. [Bug 1614823 (https://bugs.launchpad.net/bugs/1614823) * Add "--source-replicated", "--consistency-group", "--hint" and "-- multi-attach" options to "volume create" command in volume v2. Make "--size" optional when "--snapshot", "--source" or "source- replicated" options are present. [Bug 1627913 (https://bugs.launchpad.net/python-openstackclient/+bug/1627913) * Add "--service-type" option to the "subnet create", "subnet set", "subnet unset", and "subnet list" commands. [ Blueprint service- subnets (https://blueprints.launchpad.net/neutron/+spec/service- subnets)] Security Issues *************** * Mask passwords when "--debug" or "-vv" options are used. [Bug 1630822 (https://bugs.launchpad.net/python- openstackclient/+bug/1630822)] Bug Fixes ********* * Add "--bootable" and "--non-bootable" options to "os volume set" command to mark volume as bootable or non-bootable. [Bug 1535704 (https://bugs.launchpad.net/bugs/1535704) * Update novaclient "DEFAULT_API_VERSION" from 2.0 to 2.1 [Bug 1588171 (https://bugs.launchpad.net/bugs/1588171) * Fix the "--class" option in "quota set" and "quota show" commands to not perform a project lookup in Identity. [Bug 1609233 (https://bugs.launchpad.net/bugs/1609233) * Do not show "os-volume-type-access:is_public" property which is the same as "is_public" property of volume type object. [Bug 1620922 (https://bugs.launchpad.net/python-openstackclient/+bug/1620922) * Fix "--long" option in "router list" command for deployments without the "router_availability_zone" extension is not enabled. [Bug 1622565 (https://bugs.launchpad.net/bugs/1622565) * Fix missing "_username" attribute error in "server ssh" command. [Bug 1624085 (https://bugs.launchpad.net/python- openstackclient/+bug/1624085)] Changes in python-openstackclient 3.2.0..3.3.0 ---------------------------------------------- 762f2f2 More 3.3.0 release notes 42f9317 Improve output of supported API versions d695e3b Enable release notes translation 55c4290 Updated from global requirements cd1a412 Mask passwords in debug logs for auth_config_hook bfeecd5 Updated from global requirements ea7f28f Refactor qos spec unit test in volume v1 e2fc436 Add --ha option to os router create command eadbeb3 Updated from global requirements d0a0ff7 Document `openstack complete` help and usage 0ae68f5 Add example in the doc when using Identity v3 f41e27e Updated from global requirements c9fd35a Update default nova api version to 2.1 256ec66 Remove beta label for network segment resource c9e0c01 Add and modify options for "volume create" command 8d63b8b Implement "consistency group list" command 7d2d9fd Updated from global requirements 3e97491 Replace 'MagicMock' with 'Mock' 78312ca Add option "--name" to command "openstack object create" 9912fdd Add default limit for container/object 34eba23 Add command option parameter in console-url.rst 5cc3efb Updated from global requirements 3ebc752 Add warning message for --state option of set command in volume 4fd00f0 Align '=' for developing.rst and newton.rst 567ba7b Updated from global requirements f2f12d9 remove square backet to required parameter 50ad04d Remove reference to CLI Ref in osc doc 084e4fb Add option markup in osc doc 02b6d32 Fix typo in osc doc 52eaec1 Add functional test for snapshot in volume v1 6371556 Support "--no" option in aggregate set 2731fc3 Updated from global requirements 0981931 Add --description to Neutron commands df8ef60 Add unit tests for backup commands in volume v1 2e5d6a6 Use assertGreater replace assertTrue fd876e4 Fix unset commands to pass normally when nothing specified 07dfd05 Add square bracket to option parameter 41f7de2 Updated from global requirements 3ef7e29 Implement "volume transfer request show/accept" command 1d5297c Align '=' for image.rst ddf8442 Add "volume backup set" command in volume v2 9c473f4 Add filtering options to os network list command 274e400 Updated from global requirements bba5c90 Fix "volume unset" command pass normally when nothing specified 47b7826 Use correct router add/remove interface methods 4a8b802 Refactor volume unit test with FakeVolume class in volume v1 b30a7b7 replace metavar "volume-id" with "volume" to avoid ambiguity 7f12b74 Overwrite/Clear support for subnets b38be94 Introduce overwrite functionality in ``osc port set`` 6f04627 Remove unnecessary setUp 4265002 Add 'description' option to os subnet (pool) create/set cmd 88be7dd Add --description to Create/Set Network 5ec435e Clean up docs and notes for 3.3.0 release 554607e Provide support to list ports by network 1a6ae06 Add filtering options to os subnet pool list command d44782b Add filtering options to os subnet list command 91c4509 Fix quota-update issue in LBaaS d3e9361 Fix Quota Support for HMs e6b09ee Correct login name deduction in SshServer e04e389 router list if availability_zone ext not enabled 6a914d0 Support mark volume as bootable in volume set 7cba0ed Doc, help and message updates for port unset bc222e9 Replace 'MagicMock' with 'Mock' 96a8ed4 Support listing specified server's ports 2a01ede Fix openstack quota set/show --class not work 6f326ac Support fetching network project default quota 8d59b31 Add functional tests for unset multiple volume type props 6fba716 Set quota "per_volume_gigabytes", "backup_gigabytes" and "backups" 4e71e9d Unit tests of quota command refactor 1a78c76 Trivial: Rename ListTransferRequests to ListTransferRequest 98bafda Display hypervisor information without uptime d6f99b7 Fix regular expression for uptime in hypervisor show 9966412 Add unit test for volume type in volume v1 d2273ec Implement "volume transfer request delete" command 6f4acc4 Implement "volume transfer request create" command 10e665a Error handling of multi REST API calls for "snapshot set" command 6986a32 Add "--limit" and "--marker" options to "volume list" command af81a92 Support error handling for delete commands in volume v1 cb6c11b Multi REST API calls error handling of "volume unset" command 6adea68 remove the old post_test_hook 60e815a remove duplicate unit test 676a0e9 unwedge the gate 4f23a77 Add network segment create, delete and set support c14d3ef move all functional tests to tests module 39839de move unit tests to new "unit" test module 14dbfe4 Defer auth prompting until it is actually needed d1de0ba standardize release note page ordering 5231ade Do not show "os-volume-type-access:is_public" property of volume type eba1bc0 better functional test collection 24c8b94 format token expires time to prevent json loading datetime data 3b75c9a Update reno for stable/newton 1626b63 Use assertIn(A, B) instead of assertTrue(A in B ) 45d3e67 Updated from global requirements ca15cd4 Rearrange integration tests a24d6ba Updated from global requirements 110a62f Add importing file to import warnings 8f07fec Clean up FakeClient classes in volume fakes cf9ad08 Add Subnet service-types to subnets 81431d2 Add "volume service set" command Diffstat (except docs and test files) ------------------------------------- .testr.conf | 2 +- .../command-objects/volume-transfer-request.rst | 76 +- functional/__init__.py | 0 functional/common/__init__.py | 0 functional/common/test.py | 120 -- openstackclient/api/auth.py | 5 +- openstackclient/api/object_store_v1.py | 11 +- openstackclient/common/client_config.py | 34 +- openstackclient/common/clientmanager.py | 20 + openstackclient/common/command.py | 5 +- openstackclient/common/exceptions.py | 5 +- openstackclient/common/logs.py | 5 +- openstackclient/common/parseractions.py | 5 +- openstackclient/common/quota.py | 57 +- openstackclient/common/timing.py | 5 +- openstackclient/common/utils.py | 5 +- openstackclient/compute/client.py | 3 +- openstackclient/compute/v2/aggregate.py | 33 +- openstackclient/compute/v2/hypervisor.py | 28 +- openstackclient/compute/v2/server.py | 2 +- openstackclient/identity/v2_0/token.py | 4 +- openstackclient/identity/v3/token.py | 4 +- openstackclient/network/v2/floating_ip.py | 8 + openstackclient/network/v2/network.py | 97 +- openstackclient/network/v2/network_segment.py | 161 +- openstackclient/network/v2/port.py | 56 +- openstackclient/network/v2/router.py | 40 +- openstackclient/network/v2/subnet.py | 203 ++- openstackclient/network/v2/subnet_pool.py | 116 +- openstackclient/object/v1/container.py | 11 + openstackclient/object/v1/object.py | 24 +- openstackclient/shell.py | 44 +- .../functional/common/test_availability_zone.py | 25 + .../functional/compute/v2/test_server_group.py | 46 + .../functional/identity/v2/test_ec2_credentials.py | 48 + .../identity/v3/test_service_provider.py | 61 + .../functional/network/v2/test_address_scope.py | 49 + .../functional/network/v2/test_floating_ip.py | 58 + .../functional/network/v2/test_ip_availability.py | 53 + .../functional/network/v2/test_network_agent.py | 41 + .../functional/network/v2/test_network_rbac.py | 69 + .../functional/network/v2/test_network_segment.py | 97 + .../functional/network/v2/test_security_group.py | 60 + .../network/v2/test_security_group_rule.py | 67 + .../functional/network/v2/test_subnet_pool.py | 55 + .../functional/volume/v1/test_transfer_request.py | 91 + .../functional/volume/v2/test_transfer_request.py | 91 + .../unit/identity/v2_0/test_role_assignment.py | 271 +++ .../unit/identity/v3/test_identity_provider.py | 593 +++++++ .../unit/identity/v3/test_service_provider.py | 408 +++++ .../unit/network/v2/test_security_group_rule.py | 1177 +++++++++++++ openstackclient/volume/v1/backup.py | 26 +- openstackclient/volume/v1/qos_specs.py | 27 +- openstackclient/volume/v1/service.py | 56 + openstackclient/volume/v1/snapshot.py | 49 +- openstackclient/volume/v1/volume.py | 91 +- .../volume/v1/volume_transfer_request.py | 126 +- openstackclient/volume/v1/volume_type.py | 8 +- openstackclient/volume/v2/backup.py | 62 + openstackclient/volume/v2/consistency_group.py | 57 + openstackclient/volume/v2/service.py | 56 + openstackclient/volume/v2/snapshot.py | 42 +- openstackclient/volume/v2/volume.py | 132 +- .../volume/v2/volume_transfer_request.py | 124 +- openstackclient/volume/v2/volume_type.py | 2 + post_test_hook.sh | 20 - ...work-list-option-to-ports-9d101344ddeb3e64.yaml | 7 + ...low-overwrite-set-options-190a9c6904d53dab.yaml | 16 + ...bp-cinder-command-support-cc8708c4395ce467.yaml | 6 + ...network-command-options-2-e7b13a6a09f5d21e.yaml | 6 + ...utron-client-descriptions-a80902b4295843cf.yaml | 9 + .../notes/bp-routed-networks-3b502faa5cd96807.yaml | 8 + ...-no-property-in-aggregate-b74a42e00a65d14a.yaml | 7 + .../notes/bug-1204956-af47c7f34ecc19c3.yaml | 5 + .../notes/bug-1535704-d6f013bfa22ab668.yaml | 6 + .../notes/bug-1578819-d1efccfefb18356d.yaml | 7 + .../notes/bug-1588171-61214d0ea482988c.yaml | 5 + .../notes/bug-1602073-5deb58deeafbc8be.yaml | 4 + .../notes/bug-1607972-a910a9fbdb81da57.yaml | 5 + .../notes/bug-1609233-90b2ddf8d941050e.yaml | 6 + .../notes/bug-1609767-0602edc4408c2dc6.yaml | 5 + .../notes/bug-1610161-7c34c7b735701bd4.yaml | 5 + .../notes/bug-1610883-38929f6fc2eefc9a.yaml | 6 + .../notes/bug-1612484-e8605ad8966a455e.yaml | 7 + .../notes/bug-1613261-290a64080fead6c0.yaml | 4 + .../notes/bug-1613597-b1545148b0755e6f.yaml | 4 + .../notes/bug-1613926-2d0e405831c0b5a9.yaml | 7 + .../notes/bug-1613964-e5760f4825f1e043.yaml | 4 + .../notes/bug-1614385-460b5034ba372463.yaml | 5 + .../notes/bug-1614458-c42be5738f447db8.yaml | 6 + .../notes/bug-1614823-e89080342f25f2c0.yaml | 6 + .../notes/bug-1620922-7f27942dc00f7108.yaml | 5 + .../notes/bug-1622565-2e715aff8b054401.yaml | 6 + .../notes/bug-1624085-7cf296649277f405.yaml | 4 + .../notes/bug-1627913-2adf4182977e5926.yaml | 8 + ...22-mask-password-on-debug-20dcdf1c54e84fa1.yaml | 5 + .../notes/bug_1602073-5deb58deeafbc8be.yaml | 4 - .../subnet-service-type-8d9c414732e474a4.yaml | 6 + releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 2 + releasenotes/source/newton.rst | 6 + requirements.txt | 6 +- setup.cfg | 20 +- test-requirements.txt | 16 +- tox.ini | 2 +- 520 files changed, 56093 insertions(+), 48682 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f065346..ac7323f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ Babel>=2.3.4 # BSD -cliff!=1.16.0,!=1.17.0,>=1.15.0 # Apache-2.0 +cliff>=2.2.0 # Apache-2.0 @@ -10 +10 @@ keystoneauth1>=2.10.0 # Apache-2.0 -openstacksdk>=0.9.4 # Apache-2.0 +openstacksdk>=0.9.7 # Apache-2.0 @@ -14 +14 @@ oslo.utils>=3.16.0 # Apache-2.0 -python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 +python-glanceclient>=2.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0ff0e22..d799f5a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ mock>=2.0 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,3 +13,3 @@ requests>=2.10.0 # Apache-2.0 -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -stevedore>=1.16.0 # Apache-2.0 +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +stevedore>=1.17.1 # Apache-2.0 @@ -17 +17 @@ os-client-config!=1.19.0,!=1.19.1,!=1.20.0,!=1.20.1,!=1.21.0,>=1.13.1 # Apache-2 -os-testr>=0.7.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -30 +30 @@ python-designateclient>=1.5.0 # Apache-2.0 -python-heatclient>=1.4.0 # Apache-2.0 +python-heatclient>=1.5.0 # Apache-2.0 @@ -36,2 +36,2 @@ python-neutronclient>=5.1.0 # Apache-2.0 -python-saharaclient>=0.16.0 # Apache-2.0 -python-searchlightclient>=0.2.0 #Apache-2.0 +python-saharaclient>=0.18.0 # Apache-2.0 +python-searchlightclient>=1.0.0 #Apache-2.0

1 0

[new][keystone] python-keystoneclient 3.6.0 release (ocata)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are psyched to announce the release of: python-keystoneclient 3.6.0: Client Library for OpenStack Identity This release is part of the ocata release series. The source is available from: https://git.openstack.org/cgit/openstack/python-keystoneclient Download the package from: https://pypi.python.org/pypi/python-keystoneclient Please report issues through launchpad: https://bugs.launchpad.net/python-keystoneclient For more details, please see below. 3.6.0 ^^^^^ The "data" argument for creating and updating credentials has been removed. Other Notes *********** * The "data" argument for creating and updating credentials was deprecated in the 1.7.0 release. It has been replaced by the "blob" argument. Changes in python-keystoneclient 3.5.0..3.6.0 --------------------------------------------- 77e963d Updated from global requirements a8086f3 Updated from global requirements 630ef12 Updated from global requirements 3675e9e TrivialFix: Fixed typo in some files 4aa20fc Import module instead of object 050617e Updated from global requirements dc9e449 Fix non-ascii attributes 659ee35 Updated from global requirements 8b07996 Correct output for Implied Roles ca66970 Revert "Add auth functional tests" be48540 Import module instead of object 71af540 standardize release note page ordering c58ccf6 Update reno for stable/newton f557170 Use AUTH_INTERFACE object from keystoneauth 4b8158f Use fixtures from keystoneauth 0c8e5cd Minor docstring fix in mappings.py 15869f4 Remove deprecated 'data' credential argument Diffstat (except docs and test files) ------------------------------------- keystoneclient/auth/cli.py | 2 +- keystoneclient/auth/conf.py | 2 +- keystoneclient/auth/identity/generic/base.py | 2 +- keystoneclient/base.py | 13 ++++++-- keystoneclient/discover.py | 4 +-- keystoneclient/v2_0/tenants.py | 4 +-- keystoneclient/v2_0/tokens.py | 4 +-- keystoneclient/v3/auth.py | 7 ++-- keystoneclient/v3/contrib/federation/base.py | 4 +-- keystoneclient/v3/contrib/federation/mappings.py | 2 +- keystoneclient/v3/contrib/oauth1/access_tokens.py | 5 +-- keystoneclient/v3/contrib/oauth1/request_tokens.py | 4 +-- keystoneclient/v3/credentials.py | 32 +++--------------- keystoneclient/v3/roles.py | 3 +- .../remove-credentials-data-46ab3c3c248047cf.yaml | 8 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 ++++ requirements.txt | 4 +-- test-requirements.txt | 6 ++-- 43 files changed, 135 insertions(+), 153 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8b7b592..35d2d65 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ oslo.utils>=3.16.0 # Apache-2.0 -positional>=1.0.1 # Apache-2.0 +positional>=1.1.1 # Apache-2.0 @@ -16 +16 @@ six>=1.9.0 # MIT -stevedore>=1.16.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 1aa11fd..e91a96f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ oauthlib>=0.6 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 @@ -17,2 +17,2 @@ reno>=1.8.0 # Apache2 -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD

1 0

[new][nova] nova 13.1.2 release (mitaka)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are jubilant to announce the release of: nova 13.1.2: Cloud computing fabric controller This release is part of the mitaka stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 13.1.2 ^^^^^^ Bug Fixes * Fixed bug #1579706: "Listing nova instances with invalid status raises 500 InternalServerError for admin user". Now passing an invalid status as a filter will return an empty list. A subsequent patch will then correct this to raise a 400 Bad Request when an invalid status is received. Changes in nova 13.1.1..13.1.2 ------------------------------ f044f44 Fix service version to update the DB 2150d5d pci: eliminate DB lookup PCI requests during claim 257cfb7 pci: pass in instance PCI requests to claim 388e5db claims: Do not assume image-meta is a dict 50f508a Remove network information from IOVisor vif 76d1b24 Archive instance-related rows when the parent instance is deleted 50cff0d Nova shelve creates duplicated images in cells 76f1d60 compute: Skip driver detach calls for non local instances 056ab12 Default image.size to 0 when extracting v1 image attributes f60a6d1 VMware: Refactor the image transfer 53a5d12 virt: handle unicode when logging LifecycleEvents 9146f9d Fix resizing in imagebackend.cache() fdfab99 db: retry on deadlocks while adding an instance 13513e6 ironic_host_manager: fix population of instances info on start 6f11513 ironic_host_manager: fix population of instances info on schedule 0ecdbb4 Imported Translations from Zanata a832e6b Refresh info_cache after deleting floating IP b66941f Updated from global requirements 48d30c1 [libvirt] Live migration fails when config_drive_format=iso9660 e2b2f6e rbd_utils: wrap blocking calls in tpool.Proxy() bd743da Add networks to quota's update json-schema when network quota enabled 20ba099 ironic: Cleanup instance information when spawn fails daf281f Return None in get_instance_id_by_floating_address c7b2664 Run shelve/shelve_offload_instance in a semaphore 8f20e70 HyperV: remove instance snapshot lock fe21d29 Properly quote IPv6 address in RsyncDriver a0762fd Ensures that progress_watermark and progress_time are updated 5d7a23e List instances for secgroup without joining on rules 8825efa Set migration status to 'error' on live-migration failure 2df5ef7 Use stashed volume connector in _local_cleanup_bdm_volumes 676732b VMware: enable a resize of instance with no root disk d2d4b65 Fixed clean up process in confirm_resize() after resize/cold migration c455c82 Don't immediately null host/node when shelving 2703a3d Evaluate 'task_state' in resource (de)allocation 9a97047 Return HTTP 200 on list for invalid status 4bc5193 libvirt: Prevent block live migration with tunnelled flag 4a9c434 libvirt: Fix ssh driver to to prevent prompting ac04b08 VMware: Use Port Group and Key in binding details Diffstat (except docs and test files) ------------------------------------- .../compute/extended_server_attributes.py | 25 +-- nova/api/openstack/compute/quota_sets.py | 11 ++ nova/api/openstack/compute/schemas/quota_sets.py | 1 + nova/compute/api.py | 56 ++++-- nova/compute/cells_api.py | 8 +- nova/compute/claims.py | 32 ++-- nova/compute/manager.py | 63 ++++-- nova/compute/resource_tracker.py | 33 ++-- nova/conductor/manager.py | 2 +- nova/db/sqlalchemy/api.py | 66 ++++++- nova/image/glance.py | 4 +- nova/locale/cs/LC_MESSAGES/nova.po | 8 +- nova/locale/de/LC_MESSAGES/nova.po | 16 +- nova/locale/es/LC_MESSAGES/nova.po | 8 +- nova/locale/fr/LC_MESSAGES/nova.po | 8 +- nova/locale/it/LC_MESSAGES/nova.po | 8 +- nova/locale/ja/LC_MESSAGES/nova.po | 10 +- nova/locale/ko_KR/LC_MESSAGES/nova.po | 8 +- nova/locale/pt_BR/LC_MESSAGES/nova.po | 8 +- nova/locale/ru/LC_MESSAGES/nova.po | 8 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 13 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 8 +- nova/network/neutronv2/api.py | 29 ++- nova/objects/pci_device.py | 4 +- nova/objects/service.py | 5 - nova/pci/manager.py | 30 +-- nova/scheduler/host_manager.py | 21 +- nova/scheduler/ironic_host_manager.py | 26 ++- nova/service.py | 25 +-- .../openstack/compute/legacy_v2/test_servers.py | 3 +- .../compute/test_extended_server_attributes.py | 12 ++ .../unit/api/openstack/compute/test_quotas.py | 28 +++ .../api/openstack/compute/test_security_groups.py | 13 +- .../unit/scheduler/test_ironic_host_manager.py | 76 +++++++- .../unit/virt/libvirt/volume/test_remotefs.py | 82 ++++++-- nova/utils.py | 14 ++ nova/virt/driver.py | 5 +- nova/virt/hyperv/snapshotops.py | 16 -- nova/virt/ironic/driver.py | 14 ++ nova/virt/libvirt/driver.py | 63 ++++-- nova/virt/libvirt/imagebackend.py | 4 +- nova/virt/libvirt/storage/rbd_utils.py | 51 +++-- nova/virt/libvirt/vif.py | 12 +- nova/virt/libvirt/volume/remotefs.py | 24 +-- nova/virt/vmwareapi/images.py | 100 +++------- nova/virt/vmwareapi/io_util.py | 195 ------------------- nova/virt/vmwareapi/vif.py | 10 +- nova/virt/vmwareapi/vm_util.py | 2 + nova/virt/vmwareapi/vmops.py | 54 ++++-- ...ist-server-bad-status-fix-7db504b38c8d732f.yaml | 7 + test-requirements.txt | 2 +- 84 files changed, 1664 insertions(+), 810 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6c6d430..aa4e233 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ psycopg2>=2.5 # LGPL/ZPL -PyMySQL>=0.6.2 # MIT License +PyMySQL!=0.7.7,>=0.6.2 # MIT License

1 0

[new][murano] python-muranoclient 0.11.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are joyful to announce the release of: python-muranoclient 0.11.1: python-muranoclient This release is part of the newton stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-muranoclient Download the package from: https://pypi.python.org/pypi/python-muranoclient Please report issues through launchpad: https://bugs.launchpad.net/python-muranoclient For more details, please see below. 0.11.1 ^^^^^^ Bug Fixes * It was possible to import the same murano package from the CLI into the same project multiple times if glare was used and the package was imported as a private one. The issue is now fixed. Changes in python-muranoclient 0.11.0..0.11.1 --------------------------------------------- 2600d96 Populate tenant information in client 0531b86 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + muranoclient/shell.py | 20 +++++++++++++++++--- ...multiple-packages-glare-fix-b82a473ad976028f.yaml | 5 +++++ 3 files changed, 23 insertions(+), 3 deletions(-)

1 0

[new][mistral] mistral-dashboard 3.0.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are excited to announce the release of: mistral-dashboard 3.0.1: Mistral dashboard This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/mistral-dashboard/ For more details, please see below. Changes in mistral-dashboard 3.0.0.0rc1..3.0.1 ---------------------------------------------- 2c959e0 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0

[new][mistral] mistral 3.0.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are pumped to announce the release of: mistral 3.0.1: Mistral Project This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/mistral/ For more details, please see below. Changes in mistral 3.0.0..3.0.1 ------------------------------- 6356bce Add a way to save action executions that run synchronously Diffstat (except docs and test files) ------------------------------------- mistral/api/controllers/v2/resources.py | 2 +- mistral/engine/default_engine.py | 44 ++++++++++++++++------ 4 files changed, 71 insertions(+), 15 deletions(-)

1 0

[new][monasca] monasca-ui 1.2.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are pumped to announce the release of: monasca-ui 1.2.1: Monasca Plugin for Horizon This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/monasca-ui/ For more details, please see below. Changes in monasca-ui 1.2.0..1.2.1 ---------------------------------- a50a5e5 Fix alarm list if dimensions contain spaces Diffstat (except docs and test files) ------------------------------------- monitoring/api/monitor.py | 1 - monitoring/test/settings.py | 3 ++- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

[new][monasca] monasca-api 1.3.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are ecstatic to announce the release of: monasca-api 1.3.1: OpenStack Monitoring as a Service This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/monasca-api/ For more details, please see below. Changes in monasca-api 1.3.0..1.3.1 ----------------------------------- 08920cd Fix grafana build steps Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-)

1 0

[new][monasca] monasca-statsd 1.2.0 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are tickled pink to announce the release of: monasca-statsd 1.2.0: UNKNOWN This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/monasca-statsd/ For more details, please see below. Changes in monasca-statsd 1.1.0..1.2.0 -------------------------------------- 15b50d5 Remove python-statsd from requirements.txt 254a9b2 Removing statsd-generator 8ac98fc Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 3 +- setup.cfg | 1 - statsd-generator/README.md | 20 ------- statsd-generator/__init__.py | 0 statsd-generator/generator.conf | 5 -- statsd-generator/generator.py | 116 ---------------------------------------- 7 files changed, 2 insertions(+), 144 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7cbcac0..8b13789 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1 @@ -ConfigParser -python-statsd +

1 0

[new][puppet] puppet-ceph 2.2.1 release (newton)
by no-reply＠openstack.org 10 Oct '16

10 Oct '16

We are jubilant to announce the release of: puppet-ceph 2.2.1: Puppet module for Ceph This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/puppet-ceph/ For more details, please see below. Changes in puppet-ceph 2.2.0..2.2.1 ----------------------------------- 806513c Release 2.2.1 3e8ebf5 Ensure list of packages to install is user customizable ad02bd9 Changed the home-page to point Openstack Puppet Homepage Diffstat (except docs and test files) ------------------------------------- manifests/key.pp | 6 +++--- manifests/params.pp | 6 +++--- metadata.json | 2 +- releasenotes/source/conf.py | 4 ++-- setup.cfg | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-)

1 0

[OSSA 2016-012] Malicious qemu-img input may exhaust resources in Cinder, Glance, Nova (CVE-2015-5162)
by Jeremy Stanley 06 Oct '16

06 Oct '16

================================================================ OSSA-2016-012: Malicious qemu-img input may exhaust resources in Cinder, Glance, Nova ================================================================ :Date: October 06, 2016 :CVE: CVE-2015-5162 Affects ~~~~~~~ - Cinder: <=7.0.2, >=8.0.0 <=8.1.1 - Glance: <=11.0.1, ==12.0.0 - Nova: <=12.0.4, ==13.0.0 Description ~~~~~~~~~~~ Richard W.M. Jones of Red Hat reported a vulnerability that affects OpenStack Cinder, Glance and Nova. By providing a maliciously crafted disk image an attacker can consume considerable amounts of RAM and CPU time resulting in a denial of service via resource exhaustion. Any project which makes calls to qemu-img without appropriate ulimit restrictions in place is affected by this flaw. Patches ~~~~~~~ - https://review.openstack.org/382573 (cinder) (Liberty) - https://review.openstack.org/378012 (glance) (Liberty) - https://review.openstack.org/327624 (nova) (Liberty) - https://review.openstack.org/375625 (cinder) (Mitaka) - https://review.openstack.org/377736 (glance) (Mitaka) - https://review.openstack.org/326327 (nova) (Mitaka) - https://review.openstack.org/375102 (cinder) (Newton) - https://review.openstack.org/377734 (glance) (Newton) - https://review.openstack.org/307663 (nova) (Newton) - https://review.openstack.org/375099 (cinder) (Ocata) - https://review.openstack.org/375526 (glance) (Ocata) Credits ~~~~~~~ - Richard W.M. Jones from Red Hat (CVE-2015-5162) References ~~~~~~~~~~ - https://launchpad.net/bugs/1449062 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5162 Notes ~~~~~ - Separate Ocata patches are listed for Cinder and Glance, as they were fixed during the Newton release freeze after it branched from master. -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

Re: [openstack-announce] [new][nova] nova 14.0.0 release (newton)
by Doug Hellmann 06 Oct '16

06 Oct '16

The original version of the nova 14.0.0 release announcement failed to include the release notes due to human error. My apologies to the nova team for the oversight. -- Doug We are stoked to announce the release of: nova 14.0.0: Cloud computing fabric controller This release is part of the newton release series. For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Add perf event support for libvirt driver. This can be done by adding new configure option 'enabled_perf_events' in libvirt section of nova.conf. This feature requires libvirt>=2.0.0. * Starting from REST API microversion 2.34 pre-live-migration checks are performed asynchronously. "instance-actions" should be used for getting information about the checks results. New approach allows to reduce rpc timeouts amount, as previous workflow was fully blocking and checks before live-migration make blocking rpc request to both source and destination compute node. * New configuration option live_migration_permit_auto_converge has been added to allow hypervisor to throttle down CPU of an instance during live migration in case of a slow progress due to high ratio of dirty pages. Requires libvirt>=1.2.3 and QEMU>=1.6.0. * New configuration option live_migration_permit_post_copy has been added to start live migrations in a way that allows nova to switch an on-going live migration to post-copy mode. Requires libvirt>=1.3.3 and QEMU>=2.5.0. If post copy is permitted and version requirements are met it also changes behaviour of 'live_migration_force_complete', so that it switches on-going live migration to post-copy mode instead of pausing an instance during live migration. * Fix os-console-auth-tokens API to return connection info for all types of tokens, not just RDP. * Hyper-V RemoteFX feature. Microsoft RemoteFX enhances the visual experience in RDP connections, including providing access to virtualized instances of a physical GPU to multiple guests running on Hyper-V. In order to use RemoteFX in Hyper-V 2012 R2, one or more DirectX 11 capable display adapters must be present and the RDS-Virtualization server feature must be installed. To enable this feature, the following config option must be set in the Hyper-V compute node's 'nova.conf' file: [hyperv] enable_remotefx = True To create instances with RemoteFX capabilities, the following flavor extra specs must be used: **os:resolution**. Guest VM screen resolution size. Acceptable values: 1024x768, 1280x1024, 1600x1200, 1920x1200, 2560x1600, 3840x2160 '3840x2160' is only available on Windows / Hyper-V Server 2016. **os:monitors**. Guest VM number of monitors. Acceptable values: [1, 4] - Windows / Hyper-V Server 2012 R2 [1, 8] - Windows / Hyper-V Server 2016 **os:vram**. Guest VM VRAM amount. Only available on Windows / Hyper-V Server 2016. Acceptable values: 64, 128, 256, 512, 1024 There are a few considerations that needs to be kept in mind: * Not all guests support RemoteFX capabilities. * Windows / Hyper-V Server 2012 R2 does not support Generation 2 VMs with RemoteFX capabilities. * Per resolution, there is a maximum amount of monitors that can be added. The limits are as follows: For Windows / Hyper-V Server 2012 R2: 1024x768: 4 1280x1024: 4 1600x1200: 3 1920x1200: 2 2560x1600: 1 For Windows / Hyper-V Server 2016: 1024x768: 8 1280x1024: 8 1600x1200: 4 1920x1200: 4 2560x1600: 2 3840x2160: 1 * Added microversion v2.35 that adds pagination support for keypairs with the help of new optional parameters 'limit' and 'marker' which were added to GET /os-keypairs request. * Added microversion v2.28 from which hypervisor's 'cpu_info' field returned as JSON object by sending GET /v2.1/os- hypervisors/{hypervisor_id} request. * Virtuozzo Storage is available as a volume backend in libvirt virtualization driver. Note: Only qcow2/raw volume format supported, but not ploop. * Virtuozzo ploop disks can be resized now during "nova resize". * Virtuozzo instances with ploop disks now support the rescue operation * A new nova-manage command has been added to discover any new hosts that are added to a cell. If a deployment has migrated to cellsv2 using either the simple_cell_setup or the map_cell0/map_cell_and_hosts/map_instances combo then anytime a new host is added to a cell this new "nova-manage cell_v2 discover_hosts" needs to be run before instances can be booted on that host. If multiple hosts are added at one time the command only needs to be run one time to discover all of them. This command should be run from an API host, or a host that is configured to use the nova_api database. Please note that adding a host to a cell and not running this command could lead to build failures/reschedules if that host is selected by the scheduler. The discover_hosts command is necessary to route requests to the host but is not necessary in order for the scheduler to be aware of the host. It is advised that nova-compute hosts are configured with "enable_new_services=False" in order to avoid failures before the hosts have been discovered. * On evacuate actions, the default behaviour when providing a host in the request body changed. Now, instead of bypassing the scheduler when asking for a destination, it will instead call it with the requested destination to make sure the proposed host is accepted by all the filters and the original request. In case the administrator doesn't want to call the scheduler when providing a destination, a new request body field called "force" (defaulted to False) will modify that new behaviour by forcing the evacuate operation to the destination without verifying the scheduler. * On live-migrate actions, the default behaviour when providing a host in the request body changed. Now, instead of bypassing the scheduler when asking for a destination, it will instead call it with the requested destination to make sure the proposed host is accepted by all the filters and the original request. In case the administrator doesn't want to call the scheduler when providing a destination, a new request body field called "force" (defaulted to False) will modify that new behaviour by forcing the live-migrate operation to the destination without verifying the scheduler. * The 2.37 microversion adds support for automatic allocation of network resources for a project when "networks: auto" is specified in a server create request. If the project does not have any networks available to it and the "auto-allocated-topology" API is available in the Neutron networking service, Nova will call that API to allocate resources for the project. There is some setup required in the deployment for the "auto-allocated-topology" API to work in Neutron. See the Additional features section of the OpenStack Networking Guide for more details for setting up this feature in Neutron. Note: The API does not default to 'auto'. However, python- novaclient will default to passing 'auto' for this microversion if no specific network values are provided to the CLI. Note: This feature is not available until all of the compute services in the deployment are running Newton code. This is to avoid sending a server create request to a Mitaka compute that can not understand a network ID of 'auto' or 'none'. If this is the case, the API will treat the request as if "networks" was not in the server create request body. Once all computes are upgraded to Newton, a restart of the nova-api service will be required to use this new feature. (http://docs.openstack.org/networking-guide/intro-os-networking- features.html) * Nova now defaults to using the glance version 2 protocol for all backend operations for all virt drivers. A "use_glance_v1" config option exists to revert to glance version 1 protocol if issues are seen, however that will be removed early in Ocata, and only glance version 2 protocol will be used going forward. * Adds a new feature to the ironic virt driver, which allows multiple nova-compute services to be run simultaneously. This uses consistent hashing to divide the ironic nodes between the nova- compute services, with the hash ring being refreshed each time the resource tracker runs. Note that instances will still be owned by the same nova-compute service for the entire life of the instance, and so the ironic node that instance is on will also be managed by the same nova-compute service until the node is deleted. This also means that removing a nova-compute service will leave instances managed by that service orphaned, and as such most instance actions will not work until a nova-compute service with the same hostname is brought (back) online. When nova-compute services are brought up or down, the ring will eventually re-balance (when the resource tracker runs on each compute). This may result in duplicate compute_node entries for ironic nodes while the nova-compute service pool is re-balancing. However, because any nova-compute service running the ironic virt driver can manage any ironic node, if a build request goes to the compute service not currently managing the node the build request is for, it will still succeed. There is no configuration to do to enable this feature; it is always enabled. There are no major changes when only one compute service is running. If more compute services are brought online, the bigger changes come into play. Note that this is tested when running with only one nova-compute service, but not more than one. As such, this should be used with caution for multiple compute hosts until it is properly tested in CI. * Multitenant networking for the ironic compute driver is now supported. To enable this feature, ironic nodes must be using the 'neutron' network_interface. * The Libvirt driver now uses os-vif plugins for handling plug/unplug actions for the Linux Bridge and OpenVSwitch VIF types. Each os-vif plugin will have its own group in nova.conf for configuration parameters it needs. These plugins will be installed by default as part of the os-vif module installation so no special action is required. * Added hugepage support for POWER architectures. * Microversions may now (with microversion 2.27) be requested with the "OpenStack-API-Version: compute 2.27" header, in alignment with OpenStack-wide standards. The original format, "X-OpenStack-Nova- API-Version: 2.27", may still be used. * Nova has been enabled for mutable config. Certain options may be reloaded by sending SIGHUP to the correct process. Live migration options will apply to live migrations currently in progress. Please refer to the configuration manual. * DEFAULT.debug * libvirt.live_migration_completion_timeout * libvirt.live_migration_progress_timeout * The following legacy notifications have been been transformed to a new versioned payload: * instance.delete * instance.pause * instance.power_on * instance.shelve * instance.suspend * instance.restore * instance.resize * instance.update * compute.exception Every versioned notification has a sample file stored under doc/notification_samples directory. Consult http://docs.openstack.org/developer/nova/notifications.html for more information. * Nova is now configured to work with two oslo.policy CLI scripts that have been added. The first of these can be called like "oslopolicy- list-redundant --namespace nova" and will output a list of policy rules in policy.[json|yaml] that match the project defaults. These rules can be removed from the policy file as they have no effect there. The second script can be called like "oslopolicy-policy- generator --namespace nova --output-file policy- merged.yaml" and will populate the policy-merged.yaml file with the effective policy. This is the merged results of project defaults and config file overrides. * Added microversion v2.33 which adds paging support for hypervisors, the admin is able to perform paginate query by using limit and marker to get a list of hypervisors. The result will be sorted by hypervisor id. * The nova-compute worker now communicates with the new placement API service. Nova determines the placement API service by querying the OpenStack service catalog for the service with a service type of 'placement'. If there is no placement entry in the service catalog, nova-compute will log a warning and no longer try to reconnect to the placement API until the nova-worker process is restarted. * A new [placement] section is added to the nova.conf configuration file for configuration options affecting how Nova interacts with the new placement API service. This contains the usual keystone auth and session options. * The pointer_model configuration option and hw_pointer_model image property was added to specify different pointer models for input devices. This replaces the now deprecated use_usb_tablet option. * The nova-policy command line is implemented as a tool to experience the under-development feature policy discovery. User can input the credentials infomation and the instance info, the tool will return a list of API which can be allowed to invoke. There isn't any contract for the interface of the tool due to the feature still under- development. * Add a nova-manage command to refresh the quota usages for a project or user. This can be used when the usages in the quota- usages database table are out-of-sync with the actual usages. For example, if a resource usage is at the limit in the quota_usages table, but the actual usage is less, then nova will not allow VMs to be created for that project or user. The nova-manage command can be used to re- sync the quota_usages table with the actual usage. * Libvirt driver will attempt to update the time of a suspended and/or a migrated guest in order to keep the guest clock in sync. This operation will require the guest agent to be configured and running in order to be able to run. However, this operation will not be disruptive. * This release includes a new implementation of the vendordata metadata system. Please see the blueprint at http://specs.openstack.org/openstack/nova- specs/specs/newton/approved/vendordata-reboot.html for a detailed description. There is also documentation in the Nova source tree in vendordata.rst. * The 2.32 microversion adds support for virtual device role tagging. Device role tagging is an answer to the question 'Which device is which, inside the guest?' When booting an instance, an optional arbitrary 'tag' parameter can be set on virtual network interfaces and/or block device mappings. This tag is exposed to the instance through the metadata API and on the config drive. Each tagged virtual network interface is listed along with information about the virtual hardware, such as bus type (ex: PCI), bus address (ex: 0000:00:02.0), and MAC address. For tagged block devices, the exposed hardware metadata includes the bus (ex: SCSI), bus address (ex: 1:0:2:0) and serial number. The 2.32 microversion also adds the 2016-06-30 version to the metadata API. Starting with 2016-06-30, the metadata contains a 'devices' sections which lists any devices that are tagged as described in the previous paragraph, along with their hardware metadata. Known Issues ************ * If a deployer has updated their deployment to using cellsv2 using either the simple_cell_setup or the map_cell0/map_cell_and_hosts/map_instances combo and they add a new host into the cell it may cause build failures or reschedules until they run the "nova-manage cell_v2 discover_hosts" command. This is because the scheduler will quickly become aware of the host but nova-api will not know how to route the request to that host until it has been "discovered". In order to avoid that it is advised that new computes are disabled until the discover command has been run. * When using Neutron extension 'port_security' and booting an instance on a network with 'port_security_enabled=False' the Nova API response says there is a 'default' security group attached to the instance which is incorrect. However when listing security groups for the instance there are none listed, which is correct. The API response will be fixed separately with a microversion. * When running Nova Compute and Cinder Volume or Backup services on the same host they must use a shared lock directory to avoid rare race conditions that can cause volume operation failures (primarily attach/detach of volumes). This is done by setting the "lock_path" to the same directory in the "oslo_concurrency" section of nova.conf and cinder.conf. This issue affects all previous releases utilizing os-brick and shared operations on hosts between Nova Compute and Cinder data services. * When using virtual device role tagging, the metadata on the config drive lags behind the metadata obtained from the metadata API. For example, if a tagged virtual network interface is detached from the instance, its tag remains in the metadata on the config drive. This is due to the nature of the config drive, which, once written, cannot be easily updated by Nova. Upgrade Notes ************* * All cloudpipe configuration options have been added to the 'cloudpipe' group. They should no longer be included in the 'DEFAULT' group. * All crypto configuration options have been added to the 'crypto' group. They should no longer be included in the 'DEFAULT' group. * Aggregates are being moved to the API database for CellsV2. In this release, the online data migrations will move any aggregates you have in your main database to the API database, retaining all attributes. Until this is complete, new attempts to create aggregates will return an HTTP 409 to avoid creating aggregates in one place that may conflict with aggregates you already have and are yet to be migrated. * Note that aggregates can no longer be soft-deleted as the API database does not replicate the legacy soft-delete functionality from the main database. As such, deleted aggregates are not migrated and the behavior users will experience will be the same as if a purge of deleted records was performed. * The nova-manage db online_data_migrations command will now migrate server groups to the API database. New server groups will be automatically created in the API database but existing server groups must be manually migrated using the nova-manage command. * The get_metrics API has been replaced by populate_metrics in nova.compute.monitors.base module. This change is introduced to allow each monitor plugin to have the flexibility of setting it's own metric value types. The in-tree metrics plugins are modified as a part of this change. However, the out-of-tree plugins would have to adapt to the new API in order to work with nova. * For the Virtuozzo Storage driver to work with os-brick <1.4.0, you need to allow "pstorage-mount" in rootwrap filters for nova-compute. * You must update the rootwrap configuration for the compute service if you use ploop images, so that "ploop grow" filter is changed to "prl_disk_tool resize". * 'nova-manage db sync' can now sync the cell0 database. The cell0 db is required to store instances that cannot be scheduled to any cell. Before the 'db sync' command is called a cell mapping for cell0 must have been created using 'nova-manage cell_v2 map_cell0'. This command only needs to be called when upgrading to CellsV2. * A new nova-manage command has been added which will upgrade a deployment to cells v2. Running the command will setup a single cell containing the existing hosts and instances. No data or instances will be moved during this operation, but new data will be added to the nova_api database. New instances booted after this point will be placed into the cell. Please note that this does not mean that cells v2 is fully functional at this time, but this is a significant part of the effort to get there. The new command is "nova-manage cell_v2 simple_cell_setup --transport_url <transport_url>" where transport_url is the connection information for the current message queue used by Nova. * The deprecated configuration option "client_log_level" of the section "[ironic]" has been deleted. Please use the config options "log_config_append" or "default_log_levels" of the "[DEFAULT]" section. * A new nova-manage command 'nova-manage cell_v2 map_cell0' is now available. Creates a cell mapping for cell0, which is used for storing instances that cannot be scheduled to any cell. This command only needs to be called when upgrading to CellsV2. * The default value of the "pointer_model" configuration option has been set to 'usbtablet'. * The following policy enforcement points have been removed as part of the restructuring of the Nova API code. The attributes that could have been hidden with these policy points will now always be shown / accepted. * os_compute_api:os-disk-config - show / accept "OS- DCF:diskConfig" parameter on servers * os-access-ips - show / accept "accessIPv4" and "accessIPv6" parameters on servers The following entry points have been removed * nova.api.v21.extensions.server.resize - allowed accepting additional parameters on server resize requests. * nova.api.v21.extensions.server.update - allowed accepting additional parameters on server update requests. * nova.api.v21.extensions.server.rebuild - allowed accepting additional parameters on server rebuild requests. * The 2.37 microversion enforces the following: * "networks" is required in the server create request body for the API. Specifying "networks: auto" is similar to not requesting specific networks when creating a server before 2.37. * The "uuid" field in the "networks" object of a server create request is now required to be in UUID format, it cannot be a random string. More specifically, the API used to support a nic uuid with a "br-" prefix but that is a legacy artifact which is no longer supported. * It is now required that the glance environment used by Nova exposes the version 2 REST API. This API has been available for many years, but previously Nova only used the version 1 API. * imageRef input to the REST API is now restricted to be UUID or an empty string only. imageRef input while create, rebuild and rescue server etc must be a valid UUID now. Previously, a random image ref url containing image UUID was accepted. But now all the reference of imageRef must be a valid UUID (with below exception) otherwise API will return 400. Exception- In case boot server from volume. Previously empty string was allowed in imageRef and which is ok in case of boot from volume. Nova will keep the same behavior and allow empty string in case of boot from volume only and 400 in all other case. * Prior to Grizzly release default instance directory names were based on instance.id field, for example directory for instance could be named "instance-00000008". In Grizzly this mechanism was changed, instance.uuid is used as an instance directory name, e.g. path to instance: "/opt/stack/data/nova/instances/34198248-5541-4d52-a0b4-a6635a7802d d/". In Newton backward compatibility is dropped. For instances that haven't been restarted since Folsom and earlier maintanance should be scheduled before upgrade(stop, rename directory to instance.uuid, then start) so Nova will start using new paths for instances. * The ironic driver now requires python-ironicclient>=1.5.0 (previously >=1.1.0), and requires the ironic service to support API version 1.20 or higher. As usual, ironic should be upgraded before nova for a smooth upgrade process. * The ironic driver now requires python-ironicclient>=1.6.0, and requires the ironic service to support API version 1.21. * Keypairs have been moved to the API database, using an online data migration. During the first phase of the migration, instances will be given local storage of their key, after which keypairs will be moved to the API database. * Default value of live_migration_tunnelled config option in libvirt section has been changed to False. After upgrading nova to Newton all live migrations will be non-tunnelled unless live_migration_tunnelled is explicitly set to True. It means that, by default, the migration traffic will not go through libvirt and therefore will no longer be encrypted. * With the introduction of os-vif, some networking related configuration options have moved, and users will need to update their "nova.conf". For OpenVSwitch users the following options have moved from "[DEFAULT]" to "[vif_plug_ovs]" - network_device_mtu - ovs_vsctl_timeout For Linux Bridge users the following options have moved from "[DEFAULT]" to "[vif_plug_linux_bridge]" - use_ipv6 - iptables_top_regex - iptables_bottom_regex - iptables_drop_action - forward_bridge_interface - vlan_interface - flat_interface - network_device_mtu For backwards compatibility, and ease of upgrade, these options will continue to work from "[DEFAULT]" during the Newton release. However they will not in future releases. * The minimum required version of libvirt has been increased to 1.2.1 * The minimum required QEMU version is now checked and has been set to 1.5.3 * The network_api_class option was deprecated in Mitaka and is removed in Newton. The use_neutron option replaces this functionality. * The newton release has a lot of online migrations that must be performed before you will be able to upgrade to ocata. Please take extra note of this fact and budget time to run these online migrations before you plan to upgrade to ocata. These migrations can be run without downtime with *nova-manage db online_data_migrations*. * The deprecated auth parameter *admin_auth_token* was removed from the [ironic] config option group. The use of *admin_auth_token* is insecure compared to the use of a proper username/password. * The previously deprecated config option "listen```of the group ``serial_console" has been removed, as it was never used in the code. * The 'manager' option in [cells] group was deprecated in Mitaka and now it is removed completely in newton. There is no impact. * The following deprecated configuration options have been removed from the "cinder" section of nova.conf: * ca_certificates_file * api_insecure * http_timeout * The config options 'osapi_compute_ext_list' and 'osapi_compute_extension' were deprecated in mitaka. Hence these options were completely removed in newton, as v2 API is removed and v2.1 API doesn't provide the option of configuring extensions. * The deprecated config option "remove_unused_kernels" has been removed from the "[libvirt]" config section. No replacement is required, as this behaviour is no longer relevant. * The legacy v2 API code was deprecated since Liberty release. The legacy v2 API code was removed in Newton release. We suggest that users should move to v2.1 API which compatible v2 API with more restrict input validation and microversions support. If users are still looking for v2 compatible API before switch to v2.1 API, users can use v2.1 API code as v2 API compatible mode. That compatible mode is closer to v2 API behaviour which is v2 API compatible without restrict input validation and microversions support. So if using openstack_compute_api_legacy_v2 in /etc/nova/api-paste.ini for the API endpoint /v2, users need to switch the endpoint to openstack_compute_api_v21_legacy_v2_compatible instead. * The 'live_migration_flag' and 'block_migration_flag' options in libvirt section that were deprecated in Mitaka have been completely removed in Newton, because nova automatically sets correct migration flags. New config options has been added to retain possibility to turn tunnelling, auto-converge and post-copy on/off, respectively named *live_migration_tunnelled*, *live_migration_permit_auto_converge* and *live_migration_permit_post_copy*. * The 'memcached_server' option in DEFAULT section which was deprecated in Mitaka has been completely removed in Newton. This has been replaced by options from oslo cache section. * The service subcommand of nova-manage was deprecated in 13.0. Now in 14.0 the service subcommand is removed. Use service-* commands from python-novaclient or the os-services REST resource instead. * The network_device_mtu option in Nova is deprecated for removal in 13.0.0 since network MTU should be specified when creating the network. * Legacy v2 API code is already removed. A set of policy rules in the policy.json, which are only used by legacy v2 API, are removed. Both v2.1 API and v2.1 compatible mode API are using same set of new policy rules which are with prefix *os_compute_api*. * Removed the "security_group_api" configuration option that was deprecated in Mitaka. The correct security_group_api option will be chosen based on the value of "use_neutron" which provides a more coherent user experience. * The deprecated "volume_api_class" config option has been removed. We only have one sensible backend for it, so don't need it anymore. * The libvirt option 'iscsi_use_multipath' has been renamed to 'volume_use_multipath'. * The following deprecated configuration options have been removed from the "neutron" section of nova.conf: * ca_certificates_file * api_insecure * url_timeout * The ability to load a custom scheduler host manager via the "scheduler_host_manager" configuration option was deprecated in the 13.0.0 Mitaka release and is now removed in the 14.0.0 Newton release. * DB2 database support was removed from tree. This is a non open source database that had no 3rd party CI, and a set of constraints that meant we had to keep special casing it in code. It also made the online data migrations needed for cells v2 and placement engine much more difficult. With 0% of OpenStack survey users reporting usage we decided it was time to remove this to focus on features needed by the larger community. * Only virt drivers in the nova.virt namespace may be loaded. This has been the case according to nova docs for several releases, but a quirk in some library code meant that loading things outside the namespace continued to work unintentionally. That has been fixed, which means "compute_driver = nova.virt.foo" is invalid (and now enforced as such), and should be "compute_driver = foo" instead. * The default policy for updating volume attachments, commonly referred to as swap volume, has been changed from "rule:admin_or_owner" to "rule:admin_api". This is because it is called from the volume service when migrating volumes, which is an admin-only operation by default, and requires calling an admin-only API in the volume service upon completion. So by default it would not work for non-admins. * Now VMwareVCDriver will set disk.EnableUUID=True by default in all guest VM configuration file. To enable udev to generate /dev/disk /by-id Deprecation Notes ***************** * All barbican config options in Nova are now deprecated and may be removed as early as 15.0.0 release. All of these options are moved to the Castellan library. * The cells.driver configuration option is now deprecated and will be removed at Ocata cycle. * The feature to download *Glance* images via file transfer instead of HTTP is now deprecated and may be removed as early as the 15.0.0 release. The config options "filesystems" in the section "image_file_url" are affected as well as the derived sections "image_file_url:<list entry name>" and their config options "id" and "mountpoint". * As mentioned in the release notes of the Mitaka release (version 13.0.0), the EC2API support was fully removed. The *s3* image service related config options were still there but weren't used anywhere in the code since Mitaka. These are now deprecated and may be removed as early as the 15.0.0 release. This affects "image_decryption_dir", "s3_host", "s3_port", "s3_access_key", "s3_secret_key", "s3_use_ssl", "s3_affix_tenant". * The "default_flavor" config option is now deprecated and may be removed as early as the 15.0.0 release. It is an option which was only relevant for the deprecated EC2 API and is not used in the Nova API. * The "fatal_exception_format_errors" config option is now deprecated and may be removed as early as the 15.0.0 release. It is an option which was only relevant for Nova internal testing purposes to ensure that errors in formatted exception messages got detected. * The "image_info_filename_pattern", "checksum_base_images", and "checksum_interval_seconds" options have been deprecated in the "[libvirt]" config section. They are no longer used. Any value given will be ignored. * The following nova-manage commands are deprecated for removal in the Nova 15.0.0 Ocata release: * nova-maange account scrub * nova-manage fixed * * nova-manage floating * * nova-manage network * * nova-manage project scrub * nova-manage vpn * These commands only work with nova-network which is itself deprecated in favor of Neutron. * The "nova-manage vm list" command is deprecated and will be removed in the 15.0.0 Ocata release. Use the "nova list" command from python-novaclient instead. * The auth parameters *admin_username*, *admin_password*, *admin_tenant_name* and *admin_url* of the [ironic] config option group are now deprecated and will be removed in a future release. Using these parameters will log a warning. Please use *username*, *password*, *project_id* (or *project_name*) and *auth_url* instead. If you are using Keystone v3 API, please note that the name uniqueness for project and user only holds inside the same hierarchy level, so you must also specify domain information for user (i.e. *user_domain_id* or *user_domain_name*) and for project, if you are using *project_name* (i.e. *project_domain_id* or *project_domain_name*). * The config option "snapshot_name_template" in the "DEFAULT" group is now deprecated and may be removed as early as the 15.0.0 release. The code which used this option isn't used anymore since late 2012. * The "nova-all" binary is deprecated. This was an all in one binary for nova services used for testing in the early days of OpenStack, but was never intended for real use. * Nova network is now deprecated. Based on the results of the current OpenStack User Survey less than 10% of our users remain on Nova network. This is the signal that it is time migrate to Neutron. No new features will be added to Nova network, and bugs will only be fixed on a case by case basis. * The "/os-certificates" API is deprecated, as well as the "nova- cert" service which powers it. The related config option "cert_topic" is also now marked for deprecation and may be removed as early as 15.0.0 Ocata release. This is a vestigial part of the Nova API that existed only for EC2 support, which is now maintained out of tree. It does not interact with any of the rest of nova, and should not just be used as a certificates as a service, which is all it is currently good for. * All the APIs which proxy to other services were deprecated in this API version. Those APIs will return 404 on Microversion 2.36 or higher. The API user should use native API as instead of using those pure proxy for other REST APIs. The quotas and limits related to network resources 'fixed_ips', 'floating ips', 'security_groups', 'security_group_rules', 'networks' are filtered out of os-quotas and limit APIs respectively and those quotas should be managed through OpenStack network service. For using nova-network, you only can use API and manage quotas under Microversion '2.36'. The 'os-fping' API was deprecated also, this API is only related to nova-network and depend on the deployment. The deprecated APIs are as below: * /images * /os-networks * /os-fixed-ips * /os-floating-ips * /os-floating-ips-bulk * /os-floating-ip-pools * /os-floating-ip-dns * /os-security-groups * /os-security-group-rules * /os-security-group-default-rules * /os-volumes * /os-snapshots * /os-baremetal-nodes * /os-fping * Nova option 'use_usb_tablet' will be deprecated in favor of the global 'pointer_model'. * The quota_driver configuration option is now deprecated and will be removed in a subsequent release. Security Issues *************** * The qemu-img tool now has resource limits applied which prevent it from using more than 1GB of address space or more than 2 seconds of CPU time. This provides protection against denial of service attacks from maliciously crafted or corrupted disk images. Bug Fixes ********* * Corrected response for the case where an invalid status value is passed as a filter to the list servers API call. As there are sufficient statuses defined already, any invalid status should not be accepted. As of microversion 2.38, the API will return 400 HTTPBadRequest if an invalid status is passed to list servers API for both admin as well as non admin user. * Fixed bug #1579706: "Listing nova instances with invalid status raises 500 InternalServerError for admin user". Now passing an invalid status as a filter will return an empty list. A subsequent patch will then correct this to raise a 400 Bad Request when an invalid status is received. * When instantiating an instance based on an image with the metadata hw_vif_multiqueue_enabled=true, if flavor.vcpus is less than the limit of the number of queues on a tap interface in the kernel, nova uses flavor.vcpus as the number of queues. if not, nova uses the limit. The limits are as follows: * kernels prior to 3.0: 1 * kernels 3.x: 8 * kernels 4.x: 256 * To make live-migration consistent with resize, confirm-resize and revert-resize operations, the migration status is changed to 'error' instead of 'failed' in case of live-migration failure. With this change the periodic task '_cleanup_incomplete_migrations' is now able to remove orphaned instance files from compute nodes in case of live-migration failures. There is no impact since migration status 'error' and 'failed' refer to the same failed state. Other Notes *********** * The API policy defaults are now defined in code like configuration options. Because of this, the sample policy.json file that is shipped with Nova is empty and should only be necessary if you want to override the API policy from the defaults in the code. To generate the policy file you can run: oslopolicy-sample-generator --config-file=etc/nova/nova-policy-generator.conf * network_allocate_retries config param now allows only positive integer values or 0. * The "api_rate_limit" configuration option has been removed. The option was disabled by default back in the Havana release since it's effectively broken for more than one API worker. It has been removed because the legacy v2 API code that was using it has also been removed. * The network configuration option 'fake_call' has been removed. It hasn't been used for several cycles, and has no effect on any code, so there should be no impact. * The XenServer configuration option 'iqn_prefix' has been removed. It was not used anywhere and has no effect on any code, so there should be no impact. * Virt drivers are no longer loaded with the import_object_ns function, which means that only virt drivers in the nova.virt namespace can be loaded. * New configuration option sync_power_state_pool_size has been added to set the number of greenthreads available for use to sync power states. Default value (1000) matches the previous implicit default value provided by Greenpool. This option can be used to reduce the number of concurrent requests made to the hypervisor or system with real instance power states for performance reasons. Changes in nova 13.0.0.0rc1..14.0.0 ----------------------------------- d81fcf8 Ignore BuildRequest during an instance reschedule 35f7942 Stop overwriting thread local context in ClientRouter d83c277 Add extra release note material about online migrations 625f203 Update newton release notes for default API policy ceb8525 Imported Translations from Zanata 7c4a5b1 Determine disk_format for volume-backed snapshot from schema e2d2d42 Imported Translations from Zanata 8647d91 Updated from global requirements eae8775 Revert "Set 'serial' to new volume ID in swap volumes" 0b04df1 Imported Translations from Zanata b49fa82 Use tempest tox with regex first 6641852 Add a new release note dbca6ef Stop ovn networking failing on mtu a45082e Update UPPER_CONSTRAINTS_FILE for stable/newton f9e4701 Update .gitreview for stable/newton 77f5466 Override MTU for os_vif attachments 30a85c8 Fix object assumption in remove_deleted_instances() 71d6333 Set a bigger TIMEOUT_SCALING_FACTOR value for migration tests bad2497 Update minimum requirement for netaddr 1dfd794 Fix an error in archiving 'migrations' table 9374566 Clean up allocation when update available resources a4b5b0c [placement] Mark HTTP error responses for translation 281a78e [placement] prevent a KeyError in webob.dec.wsgify f04dd04 libvirt: add ps2mouse in choice for pointer_model 2331606 Revert "tox: Don't create '.pyc' files" 485ae14 Correct image.inc for heading 3309ad7 Complete verification for os-cloudpipe.inc 8211d3f Fix typo of stevedore b922af9 [placement] functional test for report client 9b9bc0a Add regression test for immediate server name update d9c1d8b libvirt: Rewrite test_rescue and test_rescue_config_drive 84defc2 Guard against failed cache refresh during inventory 99929b6 More conservative allocation updates b221f11 [placement] Correct serialization of inventory collections d794838 Correct sort_key and sort_dir parameter for flavor b343e96 Correct address, version parameter in ips.inc d5e03de More conservative inventory updates 99e0122 Fix server group name on api-ref 723ee01 Update BuildRequest if instance currently being scheduled 0fca575 Fix reno for removal of nova-manage service command 762e3d5 Add note about display_name in _populate_instance_names 328d8a1 Extended description for sync_power_state_pool_size option 61235cb Use recursive obj_reset_changes in BuildRequest 09db0ba [placement] make PUT inventory consistent with GET 2ba8fd4 Revert "libvirt: move graphic/serial consoles check to pre_live_migration" c651572 Fix MonitorMetric obj_make_compatible 73c4c00 [api-ref] fix availability_zone for server create be553fb Set 'serial' to new volume ID in swap volumes 110c12b Fix policy tests for project_id enforcement 6a2691c neutron: don't trace on port not found when unbinding ports 386812e Add sync_power_state_pool_size option e92d753 Additional logging for placement API d0775c5 Fix resizing in imagebackend.cache() 8e33d7a [placement] cleanup some incorrect comments 9a19dda Updated from global requirements 97ce9e5 Compute: ensure that InvalidDiskFormat is handled correctly 47d8aa5 Throw exception if numa_nodes is not set to integer greater than 0 691eb01 libvirt: inject files when config drive is not requested fc9a540 Fix api-ref doc for server-rebuild 59dd4a4 fix broken link in api-ref 80795f2 Increase BDM column in build_requests table 2df83ab VMware: Refactor the image transfer 43b36a4 Pass GENERATE_HASHES to the tox test environment eab8100 [placement] add two ways to GET allocations 193e71b Handle ObjectActionError during cells instance delete 2e45b95 [placement] Add some tests ensuring unicode resource provider info f0bcc0d cleanup: separate the creation of a local root to it's own method b63d6f9 standardize release note page ordering 99d692d Remove misleading warning message dd6c1c2 Add deprecated_reason for use_usb_tablet option df15e46 db: retry on deadlocks while adding an instance 2b57b3d virt: handle unicode when logging LifecycleEvents b6edbce Ensure ResourceProvider/Inventory created before add Allocations record a2d0b8d Libvirt: Correct PERF_EVENTS_CPU_FLAG_MAPPING 55f3d47 Implement setup_networks_on_host for Neutron networks 92f3bfc Add tests for safe_connect decorator 93419de libvirt: improve logging for shared storage check cc18f7d Cleanup allocation todo items 09627f2 [placement] Allow inventory to violate allocations cdb9b68 Refresh info_cache after deleting floating IP 14da85a Remove deprecated configuration option network_device_mtu f5b7a33 Example & Parameter verification of os-security-group-default-rules.inc e84396b correctly join the usage to inventory for capacity accounting 60fa308 Annotate db models that have moved to the nova_api db c2cc950 [api-ref]: Correcting server_groups_list parameter's type. 6b20239 Fix race condition bug during live_snapshot 59fff83 [placement] Fix misleading comment in wsgi loader 2ad6aa9 fixing block_device_mapping_v2 data_type abc24ac libvirt: add hugepages support for Power 0d4ad97 incorrect description in nova-api.log about quota check 7e435fa Removed enum duplication from nova.compute fb15c00 Remove deprecated cinder options 96926a8 Simple instance allocations from resource tracker f441ee5 Add support for allocations in placement API 8ed5120 Add create_all and delete_all for AllocationList f8ced1f Pull from cell0 and build_requests for instance list e8f8971 Remove hacked test that fails with latest os-brick 3a56da1 Report compute node inventories through placement 0ba1d41 Delete BuildRequest regardless of service_version 5196b9c Fix service version lookups f577f65 Remove BuildRequest when scheduling fails edf0468 Run cell0 db migrations during nova-manage simple_cell_setup 4df0869 Move cell message queue switching and add caching 344705f Add basic logging to placement api 65b72f2 Fixed indentation a6ad102 Update placement config reno be68e3c Ignore generated merged policy files d805875 Register keystone opts for placement sample config efe193c Remove deprecated neutron options cc64a45 ironic_host_manager: fix population of instances info on start 7a391e4 Eliminate additional DB queries in nova lists 02b3259 Remove the incomplete wsgi script placement-api.py af218ca ironic_host_manager: fix population of instances info on schedule 5fb6f8f rt: ensure resource provider records exist from RT 86bce56 Return 400 error for non-existing snapshot_id d957bfb create placement API wsgi entry point 9df0c5e Fix qemu version check. 2c49b1e Documentation for the vendordata reboot. 7586561 Add more vd2 unit tests 3eb4d1f Add a TODO and add info to a releasenote 476f126 Make api-ref bug link point to nova d6d41bf Api-ref: Improve os-migrateLive input parameters c032792 New discover command to add new hosts to a cell d250aae Clean up instance mappings, build requests on quota failure 719b5ab Updated from global requirements aeb1537 Use StableObjectJsonFixture from o.vo 260bb7c test_keypairs_list_for_different_users for v2.10 3d9de24 Fix using filter() to meet python2,3 9d9bfea Emit warning when use 'user_id' in policy rule 9864801 Adds nova-policy-check cmd 003aa06 Reduce code complexity - api.py 39fb302 Revert "Optional separate database for placement API" 2a70e96 Changed exception catching order 5ba1ff9 Add BuildRequestList object 2bb527b In InventoryList.find() raise NotFound if invalid resource class 3b95a3d Updated from global requirements 4885d59 Imported Translations from Zanata 83bab97 Add oslopolicy script runs to the docs tox target 3b609a5 Add entry_point for oslo policy scripts d995e2e Tests: use fakes.HTTPRequest in compute tests ee9f631 Remove conversion from dict to object from xenapi live_migration 5ee7f3b Hyper-V: properly handle shared storage during migrations 5db92a2 TrivialFix: Remove logging import unused b48ed52 Hyper-V: properly handle UNC instance paths 389ded4 Get ready for os-api-ref sphinx theme change 7cdd5da List system dependencies for running common tests b5073eb [api-ref]: Update link reference f5b512c Abort on HostNotCompatibleWithFixedIpsClient c56f6ef devspec: remove unused dev_count in devspec 0cfc126 [api-guide]: Update reference links 4caabaf Provide more duplicate VLAN network error info a4d1bf1 Correct microversions URL in api_plugins.rst a0594c6 Create Instance from BuildRequest if not in a cell 899ff72 Added todo for deletion LiveMigrateData.detect_implementation usage 824c8a3 driver.pre_live_migration migrate_data is always an object 24f0c5b Manage db sync command for cell0 2132cfa Updated common create server sample request because of microversion 2.37 a7fafdb Remove TODO for service version caching 51575f8 removed db_exc.DBDuplicateEntry in bw_usage_update d35e157 Add online migration to move instance groups to API database b9610fb Remove locals() for formatting strings. a4d2327 Hyper-V: update live migrate data object ab741d7 Config options consistency of notifications.py 767b3db Add networks to quota's update json-schema when network quota enabled dd2b388 rt: isolate report and query sched client tests 9dcf023 rt: remove ComputeNode.create_inventory ba4ff10 rt: rename test_tracker -> test_resource_tracker 0685b23 rt: remove old test_resource_tracker.py 1285a02 Updated from global requirements 34eed4a Remove deprecated security_group_api config option e0d6e46 Added min_version field to 'host_status' in 'api-ref' c5c4f71 Make InstanceGroup object favor the API database a4f030c Doc: Update PCI configuration options 6376bd2 Don't maintain user_id and project_id in context 8aa87b3 Add support for usages in the placement API 51afe54 Add a Usage and UsageList object 83d2eef Add support for inventories to placement API cee4348 Check capacity and allocations when changing Inventory 6597858 Add release note to warn about os-brick lock dir 9fd1507 config options: improve help netconf 12cf567 Config options consistency for consoleauth.py 2ea2399 Support Identity v3 when connecting to Ironic 7ab6397 Copy edit feature classification 4461cdf don't report network limits after 2.35 f34c91a Adding details in general purpose feature matrix [1] d3bc56f Improve placement API 404 and 405 response tests a76954b Config options: improve libvirt help text (1) b49cd77 Dump json for nova.network.model.Model objects cdb9a84 Improve error message for empty cached_nwinfo 984d009 Return HTTP 400 on list for invalid status d177395 Fix 'No data to report' error 7957b91 Change api-site to v2.1 format e3386a5 Refuse to run simple_cell_setup on CellsV1 2f71097 In placement API send microversion header when error 32be7a4 libvirt: Improve mocking of imagebackend disks 309ea53 Updated flags for XVP config options 37d1acd Add unit tests for nova.virt.firewall.IpTablesFirewallDriver (Part 4) a48b614 [libvirt] Remove live_migration_flag & block_migration_flag b838f22 placement: add filtering by attrs to resource_providers 125cfc9 Add support for resource_providers urls 4fb6c10 Remove nova/api/validator.py bae943b Updated from global requirements 61f1226 Change default value of live_migration_tunnelled to False 279ae6a Remove code duplication in enums e728261 Return None in get_instance_id_by_floating_address 630eed5 Make simple_cell_setup work when multiple nodes are present d727795 Add REST API support for get me a network ac9b37e plugins/xenserver: Resolve PEP8 issues 00e46a3 Fix migration list + MigrationList operation c02fa16 rt: Create multiple resize claim unit test c000c45 rt: Refactor unit test for trackable migrations be72923 Fix neutron security group tests for 5.1.0 neutronclient 1d57c1f os-vif: do not set Route.interface if None d8dca9e Check opt consistency for neutron.py 1178029 Improve help text for compute manager options 9747bc4 Make simple_cell_setup idempotent 442077d Add cell_v2 verify_instance command bcf4c51 Replace mox with mock in test_validate_bdm 0f078a2 Replace mox with mock in test_cinder 434d7d9 Allow Nova Quotas to be Disabled fe3550f Allow authorization by user_id for server evacuate ab0a30e Allow authorization by user_id for server update c80cc93 Allow authorization by user_id for server delete c2e0c69 Allow authorization by user_id for server changePassword action d31a576 Update binding:profile for SR-IOV ports on resize-revert cd3b57d Verified deprecation status for vnc options b0570a2 Add tests for user_id policy enforcement on trigger_crash_dump af4552c Allow authorization by user_id for server shelve action 54235cb Allow authorization by user_id for force_delete server d779dbe Allow authorization by user_id for server resize action 0fa8234 Allow authorization by user_id for server pause action feb84af Add tests for user_id policy enforcement on stop 526c998 Fix consistency in crypto conf 4e923eb Add placement API web utility methods 21d7382 Improve help text for XenServer Options b3ad315 Improve help text for xenapi_vm_utils_opts 26399c7 network: fix handling of linux-bridge in os-vif conversion f50f498 Fix consistency in API conf b3ab394 Improve consistency in WSGI opts 07b8a35 Add unit tests for nova.virt.firewall.IpTablesFirewallDriver (Part 3) 0047a76 Improve help text for xenapi_opts 46a6be4 Maintain backwards compat for listen opts 2e530e7 Allow authorization by user_id for server rescue action 7878588 Allow authorization by user_id for server rebuild 90f0e3d Allow authorization by user_id for server suspend action 19edf68 Allow authorization by user_id for server lock action 1b5f9f8 Optional separate database for placement API 242674b virt/image: between two words without a space in output message c5b0242 config options: improve help text of database (related) options (2/2) aeee454 config options: improve help text of database (related) options (1/2) 0b0e7da Remove hacking check [N347] for config options. 2f68cd3 Skipping test_volume_backed_live_migration for live_migration job 9fff828 rt: New unit test for rebuild_claim() e70468e List instances for secgroup without joining on rules 37bd630 Improve help text for vmwareapi_opts 6e508da Updated from global requirements 9289e62 vnc host options need to support hostnames 319a62a Removed flag "check_opt_group_and_type" from pci.py abf24b6 Removed flag "check_opt_group_and_type" 745f5fb libvirt: convert over to use os-vif for Linux Bridge & OVS 584b090 Remove left over conf placeholders a059c84 libvirt: Rename import of nova.virt.disk.api in driver 16a3856 Fix server operations' policies to admin only 64cbd7c Add support for vd2 user context to other drivers 51073b3 api-ref: Example verification for os-simple-tenant-usage.inc 3bc9c91 Remove unused exception: ImageNotFoundEC2 98dd53b Fix opt description for s3.py ad0047e virt/hardware: Check for threads when "required" 6091de7 Improve consistency in VNC opts 1af54f2 Improve help text for compute_opts 8bbb3fc Config options: Improve help text for console options 1b7b8fe Config options: Consistency check for remote_debug options 616102a Add separate create/delete policies to attach_interface 3623aba Fix handling of status in placement API json_error_formatter af13871 Use constraints for all tox environments 190081c Move JSON linting to pep8 c7af24c HyperV: remove instance snapshot lock cde31df rt: Move monitor unit tests into test_tracker 1c27f0c rt: Move unit tests for update usage for instance 8c74a4b rt: Move unit tests for update mig usage 040f68b rt: Remove useless unit test in resource tracker 53304fd rt: Remove dup tests in test_resource_tracker 0ebd87a rt: Remove incorrect unit test of resize revert 074f126 rt: Refactor test_dupe_filter unit test 15184ed rt: Remove duplicate unit test for missing mig ctx a04db0f rt: Refactor resize claim abort unit test f0cc967 rt: Refactor resize_claim unit test e6a0538 Set enforce_type=True in method flags 52f03d9 Use constraints for releasenotes c1bc469 Add some logging and a comment for shelve/unshelve operations e285eb1 Run shelve/shelve_offload_instance in a semaphore 1894130 Check opt consistency for api.py 72fb672 Allow empty CPU info of hypervisors in API response 8412c81 Config options consistency of rdp.py 94a33a3 Improve consistency in workarounds opts ddeb0e8 Refresh README and its docs links 5bba451 Correct InventoryList model references 4e85f1d instance.name should be blank if instance.id is not set 3207626 Cells: Handle delete with BuildRequest b284af8 Add NoopConductorFixture ec56270 Make notification objects use flavor capacity attributes 1e0b2b5 Fix busted release notes b382c09 config options: Improve help for conductor c73d5a9 Config options: base path configuration 9a6fd30 PCI: Fix network calls order on finish_revert_resize() c05d08b Remove deprecated legacy_api config options 07f7aa3 Config Options: Improve help text for Ipv6 options 4cbfed4 Update tags for Image file url from filesystems config option 80c0d07 Check options consistency in hyperv.py c7242b6 Improve help text for floating ips options. ce27150 config options: Improve help for base 6a6db22 Improve consistency in API 685aaab cleanup: some update xml cases in test_migration 33510d4 Use stashed volume connector in _local_cleanup_bdm_volumes 6047d79 Ironic: allow multiple compute services 8e0b98f api-ref: Parameter verification for os-simple-tenant-usage.inc 7b8195a Ironic: report node.resource_class a8a0d89 network: introduce helper APIs for dealing with os-vif objects 0e24e9e ironic: Cleanup instance information when spawn fails 98ad916 update wording around pep8 exceptions 5ce0dbd Remove backward compatibility with pre-grizzly releases 332a67a Replace functions 'Dict.get' and 'del' with 'Dict.pop' 37835ab Updated from global requirements cbd3ec4 Strict ImageRef validation to UUID only eb5dc52 Add the ability to configure glanceclient debug logging 5afc8e5 Deprecate cert option b30b16d Merged barbican and key_manager conf files into one. aedbc88 Config options consistency of pci.py 720e5af config option: rename libvirt iscsi_use_multipath 5129f48 Allocate PCI devices on migration 318fc82 TrivialFix: Fixed a typo in nova/test.py 74526f8 Updated from global requirements 8cb80c4 Improve help text of image_file_url e55cf73 Ironic: enable multitenant networking c5ddf7f libvirt: Remove some unnecessary mocking in test_driver 19f5ba9 libvirt: Pass object to _create_images_and_backing in test b9122df libvirt: Reset can_fallocate in test setUp() ec6ed24 libvirt: Create console.log consistently 6c8d882 Fixed invalid UUIDs in unit tests 28803fa Remove deprecated manager option in cells.py 00ebb72 Refactor deallocate_fixed tests to use one mock approach instead of three 1f528e3 Improve consistency in virt opts affde84 Updated header flag in SSL opts fd1e672 Updated from global requirements dc6b3ab Don't cache RPC pin when service_version is 0 b68ac0b Imported Translations from Zanata c97f3ee Remove white space between print and () 2de2c99 Flavor: correct confusing error message about flavorRef a5b0646 Consistency changes for osapi config options 777977e Fixed typos in nova: compute, console and conf dir 45317d6 Add objects.ServiceList.get_all_computes_by_hv_type 8d007b4 Add InstanceList.get_uuids_by_host() call 0045817 Conf options: updated flags for novnc 3b8bd65 Address feedback on cell-aggregate-api-db patches 2182d2f Updated from global requirements d55ffba Add data migration methods for Aggregate. 63261cb Config options: Consistency check for quota options d016958 Add server name verification in instance search 47d1c07 Fix typo in DeviceDetachFailed exception message a280d2e Straddle python-neutronclient 5.0 for testing 4a8f2b0 Initialise oslo.privsep early in main a86d78f Cells: Simple setup/migration command 7f82c5e Aggregate create and destroy work against API db ffe8b92 Make Aggregate.save work with the API db cb4bb82 Improve help text for vmware 2488fbd Config options consistency of exceptions.py 2f374ff Help text for the mks options c4e7a04 Trivial option fixes 270be69 Properly quote IPv6 address in RsyncDriver 3405a28 rbd_utils: wrap blocking calls in tpool.Proxy() 433fe51 Resolve PCI devices on the host during Guest boot-up. 5ef2f3c Fixed typos in nova, nova/api, nova/cells directory 9561d47 Fix misspellings 60935aa Trivial: add 'DEPRECATED' for os-certificates API ref b4d0b9a Mention proxy API deprecation microversion in api-ref 17ed8bf xenserver: fix an output format error in cleanup_smp_locks 9361b48 Add log for instance without host field set 281fb2b Improve consistency in crypto 899a140 Deprecate barbican options 9c0454a Improve consistency in flavors 9b15e56 Improve the help text for the guestfs options 5ee95b3 Reminder that release notes are built from commits 2ae10ce Add initial framing of placement API 89bf802 Add missing ComputeHostNotFound exception in live-migration 3ca3a2d Free new pci_devices on revert-resize f574b29 Use oslo_config new type PortOpt for port options ac409b8 Updated from global requirements ecbce6d Remove unused imports in api/openstack/fakes.py 45b21e4 Add docs about microversion testing in Tempest 7596c1f Remove leftover list_opts entry points 5c08552 Remove nova.cache_utils oslo.config.opts entrypoint a2219b8 Remove nova.network namespace from nova-config-generator.conf 760826f Remove neutronv2.api oslo.config.opt entry point 3db49d3 Follow up on Update binding:profile for SR-IOV ports 138037c Improve consistency in servicegroup opts 850874c Improve help text for cloudpipe 8639559 Remove the useless version calculation for proxy api deprecated version a7e7be2 numa: remove the redundant check for hw_cpu/hw_mem list 80738df Add support for oslo.context 2.6.0 48f9b32 Update tags for Cache config option 5e3a9fb Remove unused validation code for quota_sets 66127c5 Revert "Don't assert exact to_dict output" a774399 cleanup_live_migration_destination_check spacing 7a16c75 Default image.size to 0 when extracting v1 image attributes efc713c Add details to general purpose feature matrix 47b19ff Adding functional tests for 2.3 microversion fdf3328 compute: Skip driver detach calls for non local instances 8e13a00 libvirt: Fix invalid test data 0b4b2cf libvirt: Fix fake _disk_info data in LibvirtDriverTestCase 2f2b0e9 Don't set empty kernel_id and ramdisk_id to glance image 1169756 Config options consistency for cell.py c3e9870 Refuse to have negative console ttls b790332 Option Consistency for availability_zone.py dd9a002 Add a small debug line to show selection location 30c3667 Fix wrong override value of config option vswitch_name cb8b206 Fix wrong override value of config option proxyclient_address f9e9b30 Call release_dhcp via RPC to ensure correct host 5a173eb Adjust MySQL access with eventlet ca36040 Improve consistency in cert 0c3f0d9 Updated from global requirements 0f79018 rt: don't log pci_devices twice when updating resources 355f360 Config options consistency for configdrive.py a764d7d Remove deprecated ironic.api_version config option d67ea6e Improve the help text for compute timeout_opts b82b987 Deprecate the nova-manage commands that rely on nova-network 6b7a07c Improve consistency in xenserver ada4298 Add the 'min' param to IntOpts where applicable b8fea03 Remove unused config option 'fake_call' 93b44ff Make Aggregate metadata functions work with API db 6dafc66 Use deprecated_reason for network quota options 50c4033 "nova list-extensions" not showing summary for all 4a7deee Fix typos in deprecates-proxy-apis release note 54b8d77 Enable deferred IP on Neutron ports 541c272 Improve help text for XenServer pool opts 9c238c1 remove config option iqn_prefix 789edad Deprecate os-certificates 74ab427 Update RequestSpec nested flavor when a resize comes in 34b5ea5 New style vendordata support. 9326c1e Add metadata server fixture 2eebb5e Improve help text for quota options 38da9f7 Improve help text for consoleauth config options 1794fae Bump Microversion to 2.36 for Proxy API deprecation 1b715cf api: use 'if else' instead of 'try exception' to get password value 180011b Add better help to rdp options f2be1f8 Adding details in general purpose feature matrix ec2301e Enables Py34 tests for unit.api.openstack.compute.test_server_actions 62d57e5 Filter network related limits from limits API 603859e Filter network related quotas out of quotas API b6f2d83 Deprecate Baremetal and fping API 83bd45b Deprecate volumes related APIs 53fffba Deprecate SecurityGroup related proxy API 5044db5 Deprecated floating ip related proxy APIs 974535b Complete verification of os-instance-actions.inc 38c094b Check opt group and type for nova.conf.service.py d2bd83b Fix links to network APIs from api-ref 4b73cd9 Add comment about how status field changed d0b8fec Deprecate network quota configuration f277d64 Verify os-aggregates.inc on sample files 883bae3 Cleanup: validate option at config read level 987decc :Add missing %s in print message f27a0e7 api-ref: unify the no response output in delete operation dba6713 Return 400 when SecurityGroupCannotBeApplied is raised ead6597 network: handle forbidden exception from neutron 6f72b75 Config Option consistency for crypto.py 2e99598 Don't check cinder volume states during attach 3ab5b00 Clean up test_check_attach_availability_zone_differs 5c15ee8 Fix opt description and indentation for flavors.py 2f7e45b Remove redundant flag value check. c8c2d28 Improve help context of ironic options 79a7e33 Remove unneeded bounds-checking code 8ebd58f Improve the help text for the linuxnet options (4) 9f99f6c Don't assert exact to_dict output c78759c config options: help text for enable_guestfs_debug_opts 16d8b55 Improve help text of s3 options 6af8d2c Remove deprecated config option volume_api_class 19cc6e2 Fix inappropriate notification send 6617932 libvirt: Fix signature and behaviour of fake get_disk_backing_file ca6dbaa libvirt: Pass path to Image base class cc2ae75 Remove max_size argument to images.fetch and fetch_to_raw 064c4db Update tox.ini: Constraints are possible for api* jobs bceeecc Separate api-ref for list security groups by server d9a01d9 Deprecate FixedIP related proxy APIs f419c7b Deprecated networks related proxy APIs 13991c9 Check option descriptions and indentations for configdriver.py c601bb03 Make Aggregate host operations work against API db f281950 libvirt: open RBD in read-only mode for read-only operations cbc34d7 Remove unnecessary code added for ec2 deprecation e5798f9 Enhance notification doc generation with samples ea0befc Depracate Images Proxy APIs f97ddf0 Correct the network config option help text 6467abf config options: improve help for noVNC ecb24c5 Replace deprecated LOG.warn with LOG.warning 2a1aad9 Fixed typos in api-ref and releasenotes directory 7c28d7d Improve the help text for the network options (4) a7f83fc Add async param to local conductor live_migrate_instance 0376da0 libvirt: update guest time after suspend a221eb4 libvirt: Modify the interface address object assignment dfdae01 Update binding:profile for SR-IOV ports a5fa543 Port nova test_serversV21.Base64ValidationTest to Python 3 d14fc79 Refactor instance action notification sample test de2df72 Config option update tasks for availability_zone 3ccba23 Expand initial feature classification lists 027b92d Add prototype feature classification matrix bc4b998 [libvirt] Live migration fails when config_drive_format=iso9660 81310c5 Modify docstring of numa_get_reserved_huge_pages method 1a95ac4 Use constraints for coverage job 1abac25 Remove compute host from all host aggregates when compute service is deleted b327006 Fix incorrect cellid numbering for NUMA memnode dd2f156 Fix opt descripton for cells.py daad6c2 Fix host mapping saving 3919110 Example and body verification of os-quota-sets.inc d82db52 Remove deprecated network_api_class option 7a8f136 neutron: destroy VIFs if allocating ports fails 3a61ae3 Validate pci_passthrough_whitelist when starting n-cpu 27b1551 Rename compute manager _check_dev_name to _add_missing_dev_names 8d9cf4e Remove unused context argument to _default_block_device_names() 400cc5c Fix typo in AdminPasswordController 13b5ab2 Use from_environ when creating a context 2a61074 Pass kwargs through to base context ceed7ae Fix opt description and check deprecate status for hyperv.py 2a6bdf8 VMware: Enable disk.EnableUUID=True in vmx d47b5f9 hyper-v: device tagging 6a2a1a7 Add release notes for notification transformation 08d66e2e Assert reservation_id in notification sample test d4bbabf Remove redundant DEPRECATED tag from help messages b644a0d Fix PUT server tag 201 to return empty content 0709f65 Clean up helper methods in ResourceProvider bd0ba82 Transform instance.restore notifications 92a388a neutron: delete VIFs when deallocating networking ae9c587 Add VirtualInterface.destroy() c521ba7 Make notifications module use flavor capacity attributes 3b80ed8 Make ironic driver use flavor fields instead of legacy ones 0353b43 Make xenapi driver use flavor fields instead of legacy ones bb7e7ec Make libvirt driver use flavor fields instead of legacy ones a25e0b3 Make hyperv driver use flavor fields instead of legacy ones 7a4356c Make vmware driver use flavor fields instead of legacy ones 916f01e Bump service version for BuildRequest deletion 6ce01a6 Stop instance build if BuildRequest deleted d9d3b16 Add block_device_mappings to BuildRequest ae00ce6 Improve help text of flavors config options 614d8b4 Improve help text for cinder config options 4735844 Microversion 2.35 adds keypairs pagination support b52876f Fix up legacy resource fields in simple-tenant-usage af11fb4 Use flavor attributes instead of deprecated instance resources 5af5d05 Typo fix: remove multiple whitespace 80d39a6 network: handle unauthorized exception from neutron a5581d8 Fix the broken links 777386b 'limit' and 'marker' support for db_api and keypair_obj 9117ec4 Improve help text for exceptions 87de7dd Improve help text for compute running_deleted_opts 452be38 rest api version bumped for async pre live migration checks 05c7b6f Add user_id request parameter in os-keypairs list c1a83a3 Revert "Detach volume after deleting instance with no host" 146876c Don't overwrite MarkerNotFound error message 17630d3 tox: Use conditional targets 0d6d161 tox: Don't create '.pyc' files ff10a41 Improve help text for allocation_ratio_opts e58e111 Release note for vzstorage volume driver 8911559 Fix typo in _update_usage_from_migrations 029f92d Transform instance.resize notifications a049967 Refactors nova.cmd utils 9fafcc7 Replace DOS line ending with UNIX ab1d401 migration volume failed for invalid type f860cb5 api-ref: fix wrong description about response example in os-hypervisor 04de167 api-ref: body verification of os-agents 31ad01f Fix wrong JSON format in API samples 83bf4bb Implement ResourceProvider.destroy() eb7cdb0 Add Allocation and AllocationList objects 5a5b06f Deprecate nova-manage vm list command c1d7fc7 Remove live-migration from nova-manage man page 4306388 Deprecate the quota_driver config option 83b59ea Allow irrelevant,self-defined specs in ComputeCapacityFilter 5bd8e2d Transform instance.pause notifications c2aabe7 Fix opt description for scheduler.py 3495330 Verify "needs:check_deprecation_status" for serial_console.py 16b092d API: catch InstanceNotReady exception. 1d0326c Transform instance.shelve notifications 926776f Replace unicode with six.text_type 76c6359 Added support for new block device format in vmops 377948b api-ref: unify the delete response infomation 8d25383 Add nova-manage quota_usage_refresh command c2dd3cd Quota changes for the nova-manage quota_usage_refresh command ec03633 Remove DictCompat from SecurityGroup 9955d16 Replace use of eval with ast.literal_eval dc393ef libvirt: fix missed test in migration 645d6c6 Improve the help text for the network options (3) 2648cf2 Correct reraising of exception 4315838 api-ref: Parameter verification for servers-actions.inc Part 1 61e5232 Body verification of os-interface.inc f6ef9b4 Parameter verification of os-instance-actions.inc 46b3a3c xvp: change the default xvp conf path to CONF.xvp group 9ce8d44 libvirt:code flow problem in wait_for_job 84473e5 Clean up service version history comments 4a44027 Add a ResourceProviderList object dc6a3f4 Refactor block_device_mapping handling during boot 45c84fd Remove spaces around keyword argument e36bc6e Use ovo in test_obj_make_compatible() ac3341a Improve the help text for the network options (2) 49f547b Update mutable-config reno with LM timeout params b109489 Added better error messages during (un)pinning CPUs 9a7384c Remove duplicate policy test e551452 api-ref: os-volumes.inc a24f5b3 Enable python34 tests for nova.tests.unit.pci.test_manager and test_stats 039d062 api-ref: merge multiple create to servers.inc 7451862 Improve the help text for configdrive options d4e6bd8 Revert "Remove manual creation of console.log" 046f342 Fix invalid import order 051f6f4 Fix invalid import order df2b338 Fix invalid import order 9d64952 config options: improve help for notifications 80e61c2 Fix invalid import order 4c3b9c7 Fix invalid import order 5ad9808 Remove unused itype parameter from get migration context 5ce74fa Detach volume after deleting instance with no host db064bb Transform instance.suspend notifications 219d970 Hacking check for _ENFORCER.enforce() 7ee75f6 Remove final use of _ENFORCER.enforce f8f83b4 Hacking check for policy registration 9480ffc Extract _update_ports_for_instance 9c45d6d Extract port create from allocate_for_instance a9263cc Improve help text for resource tracker options 2a99eb1 Transform instance.power_on notifications df0aa8a Add a py35 environment to tox c43e8bd api-ref: add note about os-certificates API fc0dfb3 XenAPI: UT: Always mock logging configuration b703327 Fix api_validation for Python 3 26d4c05 api-ref: verify assisted-volume-snapshots.inc 0b74a1f Delete reduplicate code in test_compute_mgr.py c0cf1f3 Port test_hacking to Python 3 9dc6945 Fix comment for version 1.15 ComputeNodeList ec53c6c Microversion 2.33 adds pagination support for hypervisors 29dd421 VMware: create vif with resource limitations 7d01bce policy: clean-up a739ca9 Make VIF.address unique with port id for neutron 33c8729 Device tagging metadata API support cdc938f trivial: remove unnecessary mock from servers API test ee4d69e Return HTTP 200 on list for invalid status bc6c343 Complete verification for os-floating-ips-bulk 87e1311 Transform instance.update notification 084478d Pre-add instance actions to avoid merge conflicts 998235d Transform instance.delete notifications 5f58754 XenAPI: Add UT for independent compute option 2d6a4fe Log DB exception if VIF creation fails c2241b6 Fixes compute API unit tests for python3 40267b7 Reduce complexity in _stub_allocate_for_instance c185e60 Reorder allocate_for_instance preamble ed22ec2 Make _validate_requested_network_ids return a dict 911c02d Extract _validate_requested_network_ids 408c4a6 Create _validate_requested_port_ids e320abc Extract _filter_hypervisor_macs 15c583c Always call port_update in allocate_for_instance e83e114 Device tagging API support 4e750df Mapping power_state from integer to string e2eb665 Compute manager device tagging support 101def2 trivial: comment about vif object address field 9c34101 Example verification for os-fixed-ips.inc 80e56ad Revert "Detach volume after deleting instance with no host" 955c921 policy: Replaces 'authorize' in nova-api (part 5) faf50a7 libvirt: add todo about bdms in _build_device_metadata d60d705 libvirt: virtuozzo instance rescue mode support 7010aad api-ref: os-certificates.inc 8d16b1f policy: Replaces 'authorize' in nova-api (part 4) d2a89a8 Make LM timeout params mutable e1f29a7 Help text for the ephemeral storage options e6d0cc5 Config Options: Improve help text for debugger 92a796c Make Ironic options definitions consistent 28ecb88 Fix some typos cf83ecc Add namespace oslo.db.concurrency in nova-config-generator.conf 2f5c65b Remove mox in tests/unit/objects/test_quotas 5dc7bce Remove network information from IOVisor vif 1651850 Add automatic switching to postcopy mode when migration is not progressing 2de3879 Extend live-migration-force-complete to use postcopy if available ba7077b Add a test utility for checking mock calls with objects 135df11 Remove invalid test for config option scheduler_host_manager 09701be Complete verification for api-ref os-flavor-extra-specs a46e3c8 policy: Replaces 'authorize' in nova-api (part 3) 3b9e7c5 libvirt: Add migration support for perf event support b466c38 Libvirt driver implementation of device tagging 5e38fa3 Add policy sample generation d4aa455 libvirt: virtuozzo instance resize support 4647f41 Fix test_ipv6 and simplify to_global() 9102e10 Remove russian from unit/image/test_glance.py e641e5c Py3: fix serial console output 5336e60 _security_group_get_by_names cleanup 659e0a1 Add reminder comments for compute rpcapi version bump aeebd66 Update get_instance_diagnostics for instance objects 6fb35d6 Improve help text for wsgi options 59f55a1 Don't immediately null host/node when shelving f1320a7 Evaluate 'task_state' in resource (de)allocation 0c0f600 Add new configuration option to turn auto converge on/off 3d83c46 Add new configuration option to turn postcopy on/off 5b27592 Improve nova.rpc conf options documentation 2054082 Fix spelling mistake 0196f46 Add ability to select specific tests for py34 7fb8971 Remove mox from unit/compute/test_compute.py (4) 4904cbe Remove mox from unit/compute/test_compute.py (end) a5f9e96 Remove mox from unit/compute/test_compute.py (11) 0df82b7 Remove mox from unit/compute/test_compute.py (10) 02e966a Remove mox from unit/compute/test_compute.py (9) eb5d799 Remove mox from unit/compute/test_compute.py (8) 419fd05 Remove mox from unit/compute/test_compute.py (7) a3211be Remove mox from unit/compute/test_compute.py (6) 5e1626e Remove mox from unit/compute/test_compute.py (5) c880a7e UT: cleanup typo in libvirt test_config f7a1b92 Remove mox from unit/compute/test_compute.py (3) c3a28cf Remove mox from unit/compute/test_compute.py (2) 6b1363a Remove mox from unit/compute/test_compute.py (1) f39e660 Improve image signature verification failure notification c5c2671 libvirt: attach configdrive after instance XML b71a594 libvirt: add nova volume driver for vzstorage b19e377 Moving test helpers to a common place c634f78 On port update check port binding worked 8665873 Refactor to create _ensure_no_port_binding_failure 93cc5e3 policy: Replaces 'authorize' in nova-api (part 2) eac75d4 XenAPI: Add option for running nova independently from hypervisor 5915da7 XenAPI: Stream config drive to XAPI 3e85b80 XenAPI: Perform disk operations in dom0 3204a46 Port test_ipv6 to py3 and simplify to_global() ba71b8d api-ref: Example verification for os-agents.inc 2a53063 Allow monitor plugins to set own metric object ae0116c api-ref: correct the order of APIs in server-tags 99c11e5 Remove unused LOG 7940258 Remove unnecessary __init__ 31547f5 Release notes: fix typos a0f5a56 Make print py3 compatible b1753b0 libvirt: fix disk size calculation for VZ container instances 01917d6 Fix error message for VirtualInterfaceUnplugException 3bc7a6a libvirt: Add boot ordering to individual disks fb01c84 image_meta: Add hw_rescue_device and hw_rescue_bus 36daca0 collapse servers.ViewBuilderV21 into servers.ViewBuilder 76b58b8 remove personality extension f267393 remove preserve-ephemeral rebuild extension 600480e remove access_ips extension df0a4e0 Bump the service version for get-me-a-network support d7320be neutron: handle 'auto' network request in allocate_for_instance 1729f26 Add unit tests for nova.virt.firewall.IpTablesFirewallDriver (Part 2) e1e68eb libvirt: split out code for recovering after migration tasks b26852d libvirt: split out code for processing migration tasks 44d0acb libvirt: split off code for updating migration stats in the DB 471736c libvirt: split off code for updating live migration downtime a41d396 api-ref: verify images.inc ab90751 libvirt: split out code for determining if migration should abort 66b7771 libvirt: split out code for detecting live migration job type 8473204 policy: Replaces 'authorize' in nova-api (part 1) b9303e6 Check if flavor.vcpus is more than MAX_TAP_QUEUES 89a3cd8 policy: Add defaults in code (part 6) 1aa4941 objects: Add devices_metadata to instance object 885cf20 objects: new InstanceDeviceMetadata object cf6cde9 db: add a device_metadata column to instance_extra 71f24df libvirt: add perf event support when create instance 43bffb0 Improve help text of crypto.py 6b989db objects: adding an update method to virtual_interface 3b62698 Rename driver method check_can_live_migrate_destination_cleanup 5417d83 api-ref: added docs for microversion 2.26 f6e81bf policy: Add defaults in code (part 5) f13a933 policy: Add defaults in code (part 4) ba24210 policy: Add defaults in code (part 3) 51b3fef policy: Add defaults in code (part 2) 728559a add ploop support into qemu-img info eacdbc3 policy: Add defaults in code (part 1) e4dc81f Handle UnableToAutoAllocateNetwork in _build_and_run_instance aa0d318 Add note about preserve_ephemeral limitations 0c5ff50 Add console auth tokens db api methods 60a9169 Remove mox from unit/virt/libvirt/volume/*.py ff8d607 Port cinder unit tests to Python 3 3542060 Port test_pipelib and test_policy to Python 3 d58d786 Adding missing log translation hints 0263e9b Add instance groups tables to the API database 15f5aa0 Make live migration checks async d4c3687 Check for None max_count for Python 3 compat baaeec1 Updated from global requirements c9f7b84 fix developer docs on API 03eca41 libvirt: virtlogd: use "log" element in char devices 3c3925e Fix ConsoleAuthTokens to work for all console types 525285e remove os-disk-config part 4 fbc3c5a remove os-disk-config part 3 4acfd82 remove load_standard_extensions method f967d5c Modify "policy.conf" to "policy.json" 6283b16 Ensures that progress_watermark and progress_time are updated 2066e43 Add a note for policy enforcement by user_id bebc0a4 XenAPI: Support neutron security group 51fdeaf Added instance actions for conductor 8f613e7 Stop using mox stubs in nova/tests/unit/test_metadata.py f50d48a remove support for legacy v2 generator extensions 4f34294 Remove duplicate unit test resource tracker 3cafa7f Prevent instance disk overcommit against itself 0d450c4 api-ref: parameter verification os-agents 574a9a3 make failures on api_samples more clear 3cdb385 api-ref, os-services.inc ebe8fd9 api-ref: docs for microversion v2.28 5643d03 Update dhcp_opts on both create and update a7cbc90 api-ref: Improve os-instance_usage_audit_log samples e0bda50 Add ironic mac address when updating and creating 3ea6f08 pci: Deprecate is_new from pci requests 2b47c83 Enhance notification sample test base 8279b1e Handle multiple samples per versioned notification 6329d72 Transform wrap_exception notification to versioned format 97745f2 XenAPI: OVS agent updates the wrong port with Neutron ababf73 Stop using mox from unit/fake_server_actions.py 6e8c84d objects: you want'em ed6a82e libvirt: enhance method to return pointer_model from image prop d5c00fe Improve help text for service group options. 12692e6 Updated from global requirements 2a0ed44 Skip network allocation if 'none' is requested 5cb46ed Separete notification object version test fd0442a [typo] replaced comupte to compute in test a7fa4f4 api-ref, os-availability-zone.inc b424ee6 Config: no need to set default=None 7402d13 Add delete_, update_ and add_ inventory to ResourceProvider 38d4b53 libvirt: fix typos in comments 81540d1 Remove the nova.compute.resources entrypoint 6e81fa4 Re-deprecate use_usb_tablet config option 2ce5c8c Log the network when neutron won't apply security groups 37376b9 api-ref: parameter verification os-fixed-ips 34834d8 Add CellMappingList object 718fca9 Add console auth tokens table and model c2f57a1 live migration check source failed caused bdm.device_path lost a83ab0a Use is_valid_ipv4 from oslo.utils e825ef7 Include exception in _try_deallocate_network error log b726a12 Remove mox from tests/unit/virt/test_imagecache.py 98e27fe Fix docstring nits from ResourceProvider.set_inventory() review ce01ef3 fix errors in revert resize api docs 3e4497d Add set_inventory() method on ResourceProvider 579c98a Improve the help text for cells options (8) 621191f VMware: Fix bug of TypeError when getting reference of VCenter cluster is None. 111b365 XenAPI: Integers returned from XAPI are actually strings ada6afb Remove virt.block_device._NoLegacy exception b05e098 rename libvirt has_default_ephemeral 8255567 Remove ec2_code from exception e992972 Add specific lazy-load method for instance.tags e74b5b7 Don't attempt to lazy-load tags on a deleted instance ffe2487 Pre-load tags when showing server details 19f9a4b Policy-in-code servers rules 3f8076a Fix image meta which is sent to glance v2 ea377ab Extract update_port call into method d4e2752 Refactor to create _populate_mac_address 63ed965 Rename _populate_mac_address adding pci 3508110 Rename created_port to created_port_id dad8ed8 Flip allocate_for_instance create or update if ef92e3f libvirt: cleanup baselineCPU return value checking 662995f Updated from global requirements bd0c7bc Remove mox from tests/unit/objects/test_aggregate.py 4317166 Handle keypair not found from metadata server 11bd005 Skip network validation if explicitly requesting no networks 2d8ae09 nova-net: handle 'auto' network request in allocate_for_instance 9e176a6 neutron: validate auto-allocate is available 6fe1359 Add helpers to NetworkRequest(List) objects for auto/none cases 3dd9d05 Remove api_rate_limit config option 56dce76 Tear down of os-disk-config part 2 2c437c0 Tear down os-disk-config part 1 4cb366f Disallow instance tag set for invalid instance states 9b9e3bc Make instance as second arg in compute api calls a7aafd9 TrivialFix: Remove extra comma from json 6976033 Skip NFS and Ceph in live migration job test run 15a9458 Added missed response to test_server_tags 32d45f1 api-ref: console types. 036833d api-ref: add version 2.3 parameters to servers f5b8319 Remove extra expected error code (413) from image metadata 29ec93d Use instance object instead of db record 40ea165 Publish proxy APIs deprecation in api ref doc cdcf9ac Fix outdated parameter network_info description in virt/driver 58785c4 api-ref: Fix parameters in os-instance-usage-audit-log 36ce472 Remove python code validation specific to legacy_v2 a586083 Remove DictCompat from instance_info_cache 12a2358 Remove redundant test in test_resource_tracker 05b7f63 nova shared storage: rbd is always shared storage 0337014 Modify the disk bus and device name for Aarch64 d87377a Remove mox from unit/compute/test_compute_mgr.py (end) cb5f7de Remove mox in tests/unit/objects/test_instance_faults 4be2d9c Remove mox from unit/compute/test_compute_mgr.py (6) 19fc11e Remove mox from unit/compute/test_compute_mgr.py (8) 4f125c3 Remove mox from unit/compute/test_compute_mgr.py (7) 9ebf9a5 Trivial-Fix: Fix typos 9fd3e02 Fix some typos df9c973 Remove mox from unit/compute/test_compute_mgr.py (5) ed58c78 Remove mox from unit/compute/test_compute_mgr.py (4) 192fda1 Remove mox from unit/compute/test_compute_mgr.py (3) 09306db Remove mox from unit/compute/test_compute_mgr.py (2) 62a9d38 Updated from global requirements 59f4394 Make Aggregate.get_by_uuid use the API db. 2057ed7 api-ref: parameter verification for os-aggregates b985208 Improve help text for neutron_opts d8673cb remove processing of blacklist/whitelist/corelist extensions 43f6904 fix OS-SCH-HNT:scheduler_hints location in sample 2d94ae5 Fix reno from hyper-v-remotefx a40f4be Yield the thread when verifying image's signature 0a471bb Remove invalid test methods for config option port_range 1885a39 libvirt: Prevent block live migration with tunnelled flag 458ddde Trivial: remove none existing py3 test from tests-py3.txt 19b3ef2 Make host as second arg in compute api calls 55469df Stop using mox stubs in tests/unit/fake_notifier dd7015c Remove unused _get_flags method from integrated_helpers f44d1af Enable all extension for all remaining sample tests c30562f tox.ini: Remove unnecessary comments in api-ref target c0b8177 Stop using mox stubs in nova/tests/unit 3c29c1a Updated from global requirements 47d70de Raise exception if BuildRequest deleted twice 4e5015f Replace mox with mock for xenapi vm_utils.lookup b7f8333 Detach volume after deleting instance with no host 6d4403c pci: Allow updating pci_requests in instance_extra 5240396 Change default fake_ server status to ACTIVE 824569a Fix update inventory for multiple providers f71cd2c Default to using glance v2 08f1850 Enable all extension for remaining server API tests f26f18e Enable all extension for server API tests part-1 b9f64e2 Remove mox from unit/compute/test_compute_mgr.py (1) a95aef8 Fixes py3 unit tests for nova.tests.unit.test_block_device.* 1978c41 Reno for mutable-config ff46efb Remove invalid test of config option default_notification_level d7d67e4 Improve the help text for cells options (7) 6962cad test: pass enable_pass as kwarg in test_evacuate 436563f Remove config option config_drive_format's invalid value test 4d53736 test: remove invalid test method in libvirt/test_imagebackend dea38f8 xenapi: Remove invalid values for config option image_compression_level d78e06e Remove mox from api/openstack/compute/test_pci.py 6f434cb Stop using mox from openstack/compute/test_cells.py 30cfa1d Enable all extension for server actions sample tests 8291e5e Enable all extension for Flavor API sample tests f2706b2 Fix resource tracking for instances with no numa topology 58bac47 Clarified "user" to plural type adcc0e4 Revert "Optimize _cleanup_incomplete_migrations periodic task" c5b8b3b Remove unused authorizer methods 1fba0bc Remove legacy v2 policy rules 76f80ba Add unit tests for nova.virt.firewall.IpTablesFirewallDriver (Part 1) 8da53e9 Make create_inventory() handle name change fbf87c4 Add ResourceProvider.save() 6d2470a Remove the skip_policy_check flags f06a126 api-ref: verify keypairs 78fbb47 Make Xenplugin to work with glance v2 api fa5f6ee Trival: version history 2.30 is not indented as others 520ee65 Do not register notification objects cdfecc6 Move notification objects to a separate package 5e074a5 Move notification related code to separate package b2ecdcf Adjust field types and defaults on Inventory 56d41ae Add InventoryList.find() method a85c8f5 Add a get_by_uuid for aggregates ab43963 Imported Translations from Zanata 0a533df get rid of the old _vhd methods 70cd68a Make Hyper-V to work with glance v2 api b5f8cee Stop using mox stubs in stub_out_key_pair_funcs 00b29d8 Remove v2 extension setting from functional tests 063b5e4 Add name and generation to ResourceProvider object c0cbea9 Remove duplicate test of DELETED instances ea4ac44 Added support for new block device format in Hyper-V 48aa5f2 Enable mutable config in Nova 732fdf8 Improve help text for availability zones options e421ea4 tests: make XMLMatches work with Python3 a182120 Catch PciRequestAliasNotDefined exception 126400a api-ref: parameter verification for os-hypervisors 4d72060 xen: skip two more racey mox py34 test classes fc96434 libvirt: handle reserved pages size 8093b76 Fix nova-compute start failed when reserved_huge_pages has value. eed2243 Make the base options definitions consistent 068d851 virt: set address space & CPU time limits when running qemu-img ea3904b Remove manual creation of console.log 6044c6d Fix imagecache.get_cache_fname() to work in python3 0cb9182 Remove policy checkpoints for SecurityGroupAPI and NetworkAPI 54a5e73 Remove policy checkpoints from ComputeAPI 18051b5 Stop using mox from objects/test_instance.py (3) fa10167 Stop using mox from objects/test_instance.py (2) 3f4fed9 Stop using mox from objects/test_instance.py (1) 78941dc Fix wrong patch of unittest in unit/test_metadata.py 3988911 Remove code referencing inventory table in cell DB c6ffec0 Handle SetAdminPasswdNotSupported raised by libvirt driver c7de854 Prevent boot if ephemeral disk size > flavor value 0a6985a [libvirt] Incorrect parameters passed to migrateToURI3 ea4754b Revert inventory/allocation child DB linkage f1adea0 Only chown console log in rescue 8cda74d Don't chown a config disk which already exists 0cbfaae Don't overwrite config disk when using Rbd 383a0c9 Add 'update' method to GlanceImageServiceV2 4a39b8b Add 'create' method to GlanceImageServiceV2 8eca306 Add 'detail' method to GlanceImageServiceV2 6276ffc Add 'delete' method to GlanceImageServiceV2 f6b2eda Add 'download' method to GlanceImageServiceV2 b1a3ee1 Add 'show' method to GlanceImageServiceV2 fc33c4b Split the glance API path based on config ec18b52 Remove image_meta 08f7f7a add "needs:*" tags to the config option modules cc47aca api-ref method verification for os-cells 7aa2285 API change for verifying the scheduler when live migrating 24e2ab2 Stop using mox stubs in volume/encryptors/test_base.py 16dd86f Introduce a CONF flag to determine glance client version 7f5be3f fix a typo in comment 9d41696 Fix white spaces in api-ref 597f079 Updated from global requirements 3422f6f virt/hardware: Add diagnostic logs for scheduling a87a7a8 Use assertNotIn instead of assertTrue(all(A != B)) 5a27cb7 Use assert(Not)Equal instead of assertTrue(A == X) 6debcf4 Use assertLess(Equal) instead of assertTrue(A > X) e34fd54 Use assertGreater(A, X) instead of assertTrue(A > X) f5c9ebd Fall back to flat config drive if not found in rbd 216e1c1 libvirt: Fix the content of "disk.config" lost after migrate/resize c9f5ad3 remove /v2.1/{tenant_id} from all urls 6213f0f Remove "or 'reserved'" from _create_volume_bdm c2c3b97 pci: Move PCI devices and PCI requests into migration context 11e2334 Updated from global requirements ca8f4d9 Fixes invalid uuid usages in test_neutronv2 5a911ae Clarify message for Invalid/Bad Request exception 58cb7e5 Cancelled live migration are not in progress 11ed7bd set wrap_width for config generator to 80 8670678 API change for verifying the scheduler when evacuating 7c10322 Fix invalid uuid warnings in virt testcases 89a61ab Fix multipath iSCSI encrypted volume attach failure beea9b4 libvirt: add "get_job_info" to Guest's object 52aea25 Modify 'an network' to 'a network' a31d917 Remove legacy v2 API code completely e1e5f67 Remove the usage of RateLimitingMiddleware 8922a29 Remove unused inner_app_v21 and ext_mgr 337cfe7 Remove legacy API code from sample tests 84d03e9 Remove InstanceUsageAuditLogTest for legacy API 6445cac Change instance_claim parameter from instance_ref to instance dd3078e Make AggregateList.get_ return API & cell db items 41b658d Make Aggregate.get operation favor the API db 35748e7 Add aggregates tables to the API db. 228e916 Microversion 2.28 changes cpu_info string to JSON object afa31e6 libvirt: Skip CPU compatibility check for emulated guests 36998c0 Specify the default cdrom type "scsi" for AARCH64. bd37ab2 Remove mox from nova/tests/unit/test_iptables_network.py 7e0f846 Updated from global requirements b9858b2 pci: Make sure PF is 'available' when last VF is freed 0b85bb4 pci: related updates are done without DB lookups c469b84 pci: make sure device relationships are kept in memory d3bbd77 Remove mox from nova/tests/unit/virt/libvirt/test_vif.py a7dde84 verify api-ref os-migrations.inc be62910 Nova UTs broken due to modifying loopingcall global var 09e3d13 Remove mox from unit/api/openstack/compute/test_consoles.py 484fffe Stop using mox from virt/libvirt/storage/test_lvm.py b8b70e2 Update functional tests for fixtures 3 cfc6429 Add tests to attach/detach vols for shelved server 4d48247 Remove unused _vlan_is_disabled test flag 7b6f7ec libvirt: New configuration classes to parse device address element d7b8d99 Fixed clean up process in confirm_resize() after resize/cold migration f9daab6 VMware: remove dead code in test_get_vm_create_spec() ea20915 Remove mox from compute/test_scheduler_hints.py 028091d Updated from global requirements f24e580 Remove normal API operation logs from API layer bcb0662 Remove unused LOG from v2.1 API code a397102 Adds RemoteFX support to the Hyper-V driver fcdec6c libvirt: fix serial ports lost after hard-reboot 7edc030 Stop using mox stubs in test_server_usage.py 85bf38c Remove mox from compute/test_instance_usage_audit_log.py a29c263 api-ref: os-consoles.inc 6051f30 Add proxy middleware to application pipeline fc529de api-ref: Example verification for os-interface.inc b02e37a Remove redundant orphan instances unit test da5d638 Remove duplicate migration RT unit tests 05f4559 Redundant test of CPU resources in test_tracker 7eb33b5 Remove duplicate test of RT.stats.current_workload c563446 Remove duplicate test of claim context manager 2ca4cbd Remove pointless "additive claims" unit test 838b322 Remove oversubscribe test in test_resource_tracker 0aca2d7 api: Improve the _check_multiple* function names readability 7038391 api-ref verify servers-action-deferred-delete.inc 494f6ec Fix the order of expected error codes 12ff592 Remove DictCompat from NetworkRequest 3838f9c api-ref: Add a sample test for os-interface 6df3276 Use oslo_log instead of logging 7755b75 Verify requested_destination in the scheduler 2358eba Add requested_destination field to RequestSpec d53cd53 Remove mox from compute/test_extended_ips_mac.py ffe3093 Ironic nodes with instance_uuid are not available 3e2d0c3 Updated from global requirements 47d0e14 Fixes python 3 urllib quote / unquote usage ae7a4d5 Make compute nodes update their own inventory records 5aa2d48 Remove unused WsgiLimiter 4e04de0 Remove unused args from RateLimitingMiddleware 8175017 Remove unused use_no_auth from wsgi_app_v21() 7e06ffe Fix incorrectly named vmwareapi test 280685c Make Inventory and ResourceProvider objects use the API DB instead cb15d34 Rename ImageCacheManager._list_base_images to _scan_base_images d661db6 Remove all references to image_popularity from image cache 2c389cc Remove image cache image verification f124b85 Fix test_age_and_verify_swap_images ac3d221 api and availablity_zone opt definition consistent c859509 Rename Image.check_image_exists to Image.exists() 4f50c41 Remomve mox from api/openstack/compute/test_console_output.py a54f546 Remove mox from api/openstack/compute/test_config_drive.py bd508a5 VMware: set service status based on vc connection 9e00323 Return 400 HTTP error for invalid flavor attributes d9f2a82 Get transport_url from config in Cells v2 cell map utility bd199e3 Support for both microversion headers d76e865 Fix unit test after the replace of key manager 6a42282 Fix "KeyError: u'instance_id'" in string format operation e75e918 Save all instance extras in a single db call 120d77e Remove APIRouter of legacy v2 API code b4c1c9f Remove legacy v2 API tests which use wsgi_app() 09875f6 limits.inc example verification 9d99081 Remove duplicate unit test in test_tracker 0de190b Remove delete stubs in test_resource_tracker 3e7e8cc Remove service crud from test_resource_tracker 0510f1d Remove conductor from test_resource_tracker 96e7773 Remove StatsDicTestCase from test_resource_tracker 9aef61c rt-unit: Replace hard-coded strings with constants e05944d Remove useless test of incorrect stats value cad010b Remove RT duplicate unit test for PCI stats 5d9ced6 Remove more duplicate RT unit tests 1f84ab0 Removes test_claim_saves_numa_topology() 3b0c9a3 objects: added 'os_secure_boot' property to ImageMetaProps object 9fb086a Trivial: Fixes serial console minor nits c90c38d Revert "glance:add helper method to get client version" b1973fc Add length check in comparing object lists 74d6c42 Update Support Matrix 7f860b2 Improve the help text for the rdp options 4eb95a1 No disable reason defined for new services 8e0d8b7 api-ref: limits.inc validate parameters 9053a46 Make available to build docs with python3 da61fec Updated from global requirements cdf74c5 remove db2 support from tree df499b5 Adds Hyper-V imagecache cleanup c824982 raise exception ComputeHostNotFound if host is not found 00dc082 Skip instance name templating in API cell b609a3b Add http_proxy_to_wsgi to api-paste 32ca314 Stop using mox stubs in test_pipelib.py 0c18394 api-ref: Parameter verification for os-interface.inc 7d26e73 devspec: remove unused VIRTFN_RE and re dc5ed96 Remove duplicate test of set inst host/node 68b171b Remove SchedulerClientTrackerTestCase e9e5597 Move unit tests of set_instance_host_and_name() addc133 Remove MissingComputeNodeTestCase for res tracker d3f99a1 Remove tests for missing get_available_resource() 1f33455 api-ref, os-fping.inc c19dd49 Pass OS_DEBUG to the tox test environment 3f96f30 Hyper-V: Implement nova rescue 007a3a3 Add resource provider tables to the api database e215e6c HyperV: Nova serial console access support ece7b8f Let setup.py compile_catalog process all language files d8474e0 use_neutron_default_nets: StrOpt ->BoolOpt 4f3d13c api-ref: Add fault parameter details ca4ec76 be more explicit that rate limits are gone in v2.1 59192cf Warn when using null cache backend 22c87390 Enable 'null' value for user_data in V2.1 API cc980b1 Updated from global requirements d3c9778 fix Quota related error return incorrect problem b8aac79 Add online migration to move keypairs from main to API database e5b8060 Completed migrations are not "in progress" 43e6a06 Make flavor-manage api call destroy with Flavor object d6210a4 Move is_volume_backed_instance to compute.utils 008727c Updated from global requirements e268827 api-ref: verify flavors.inc 942eca9 Fix use of invalid assert calls 9363f52 Config options: remove import_opts from cloudpipe section e78b39b Enables Py34 tests for unit.api.openstack.compute.test_server_tags 8811989 Fix the versions API for api-ref cd52935 Update link for hypervisor support matrix message 0e5aa68 api-ref: complete verification of baremetal api 9fe1559 Keep BuildRequest db entry around longer 98a05bc Drop fields from BuildRequest object and model 8c8b63b Resize API operation passing down original RequestSpec ed308b9 Augment release note for import_object_ns removal 7268006 pci: add safe-guard to __eq__ of PciDevice 6919b25 deprecate config option "fatal_exception_format_errors" a31505f config options: centralize exception options c8ceeb4 libvirt: Add serial ports to the migration data object f3ad794 Hyper-V: Fixes disk overhead claim issue f86a3a4 Config options: move set default opt of db section to centralized place 51bddcc [Trivial] Fix a grammar error in comments 03c1161 api-ref: Example verification for servers-action-shelve.inc 5baca35 [Ironic] Correct check for ready to deploy 7d56f89 api-ref: Fix parameters in servers-action-shelve.inc e7d2a1d api-ref: parameter verification for os-server-groups 39fc07b api-ref: servers-action-evacuate.inc c414b71 remove FlavorCreateFailed exception 11433ca Add tests for floating_ip private functions 775bda6 Trivial: remove os-security-groups needs:method_verification line 0bffed5 Add RC file for excluding tempest tests for LVM job b6dd96c Move config options from nova/api directory (5) 4107bb5 libvirt: add method to configure max downtime when migrating 4258577 libvirt: add "abort_job" to Guest's object 33d77b8 libvirt: add method "migrate" to Guest's object eb42295 Only attempt to inject files if the injection disk exists 547dc45 Remove deprecated option libvirt.remove_unused_kernels cff4d78 Rename Raw backend to Flat be86b27 deprecate s3 image service config options 76dfb4b Cold migrate using the RequestSpec object 09f2d4d Add a RequestSpec generation migration script a6bc68a Enables Py34 tests for unit.compute.test_compute e0f61db Fixes invalid uuid usages in functional tests a0bedb3 Make neutronapi get_floating*() methods return objects 6a09c00 Switch api unit tests to use v2.1 API 56ac441 Remove mox used in tests/unit/api/openstack/compute/test_server_start_stop 4679f18 Remove marker from nova-manage cells_v2 map_instances UI 9bc797c api-ref: complete verification for os-flavor-access 4a02f34 Make some build_requests columns nullable bdf984a Add message queue switching through RequestContext 50e2792 trivial: remove unused argument from a method 77f9958 baseproxy: stop requiring CONF.verbose 5657dc5 Cleanup validation logic in _get_requested_networks d790fe0 api-ref: complete verification of servers-action-crash-dump.inc 2b7d5de migrate to os-api-ref cf69f5c api-ref: image.inc - Update method validation 2811ff4 config options: centralize section "database" + "api_database" 2813c83 api-ref: parameter verification for os-quota-sets 37f26ad Fix network mtu in network_metadata 31e798d Add a note about egress rules to os-security-group-rules api-ref d2875b7 ironic: fix call to _cleanup_deploy on config drive failure af36b0d Follow-up for the API config option patch 94010b5 api-ref: reorder parameters.yaml 4d2327a Network: fix typo 119f2c5 Add online migration to store keypairs with instances f3a6a46 Make Keypair object favor the API database 22a7d30 api-ref: ips.inc example verification 563f6dc Fix spelling mistake in libvirt 1031db1 Body Verification of os-aggregates.inc 345febe Move placement api request logging to middleware 7f69d0d Updated from global requirements 512fb41 conf: Move cloudpipe options to a group 8224be1 conf: Address nits in I92a03cb f0dd4d6 Fix corrupt "host_aggregates_map" in host_manager 8da225a Fix spelling mistake 79f030f api-ref: Example verification for os-volume_attachments.inc 05b0da8 api-ref: Parameter verification for os-volume_attachments.inc 93a475c Remove fake_imagebackend.Raw and cleanup dependent tests 0590215 Remove unused arguments to images.fetch and images.fetch_to_raw 36c688f api-ref: finish validation for os-server-external-events.inc 1f67ab3 report info if parameters are out of order 3b0f95e Method verification of os-floating-ips-bulk.inc 032395c api-ref: os-volumes.inc method verification d3a1fd5 config options: move s3 related options b7660e0 deprecate "default_flavor" config option 88703e1 config options: centralize default flavor option 26dcd06 Return HTTP 400 on boot for invalid availability zone 5252f33 Config options: remove import_opts from completed section 11babbb Fix migration query with unicode status 466bce5 Config options: centralize cache options 7db39b1 Change 5 space indent to 4 spaces 505bc44 Remove deprecated "memcached_server" in Default section 12385e1 Updated from global requirements 1083a51 Add a functional test for instance fault message with retry 04f8612 api-ref: complete verification for extensions resource 9572066 live-migration ceph: fix typo in ruleset parsing 6987a1f api-ref: os-floating-ip-dns.inc method verification 1f4515d api-ref: Method verification for servers-actions fa3453f Eager load keypairs in instance metadata dfaf614 Complete method verification of os-networks 05af505 Method verification of os-security-group-default-rules d52ceaf virt: reserved number of mempages on compute host 9931ef9 deprecate "file transfer" feature for Glance images 32b510a centralized conf: nova/network/rpcapi.py 7ee0046 Config options: centralize remotefs libvirt options (end) e50afe1 Config options: centralize smbfs libvirt options (16) 671bb26 imagebackend: Check that the RBD image exists before trying to cleanup 84e1213 Rewrite _cleanup_resize and finish_migration unit tests to use mock instead of mox 4e5d645 Remove mox in test_volume_snapshot_create_outer_success 8bb1081 api-ref: Method verification for os-volume_attachments.inc 5b9929d Improve the help text for the API options (4) e2f7bed Improve the help text for the API options (3) f7e4018 api-ref: ips.inc parameter verification e2c7643 Add Keypairs to the API database 9880a16 Create Instances with keypairs d4aeb86 Method verification for server-action-deferred-delete d68e80c method verification for server-action-remote-consoles 671ad71 method verification of os-server-external-events 8d68435 method verification of os-instance-usage-audit-log e83842b Add keypairs to Instance object ab58788 Complete method verification of os-baremetal-nodes.inc ad739f8 api-ref: parameter validation for os-security-group-rules d95a972 Fixed missing variable 247cb29 api-ref: Method verification for os-floating-ips 86a8006 force_live_migration remove redundant check d7cc32b pci: create PCI tracker in RT._init_compute_node 2194b10 Fix race condition for live-migration-force-complete 0d4127a api-ref: servers-action-shelve.inc 54dfffb Added fault response parameter to Show Server Details API. a198da0 pci: Remove unused 'all_devs' method 3300cdf Corrected the typo. 31976c4 Denormalize personality extension fcce678 method verification of os-assisted-volume-snapshots 8b1298f api-ref: os-certificates.inc method verification a7b1d22 Complete method verification of os-cloudpipe.inc 854c39e Fix service version to update the DB f6ac9f3 method verification for servers-action-fixed-ip 2c52aca Added new exception to handle CinderClientException 6b1293f Drop paramiko < 2 compat code 960363f Config options: centralize scality libvirt options (15) 5c2f95a Compute: Adds driver disk_gb instance overhead estimation 9f6bb41 config options: move image_file_url download options c05b338 crypto: Add support for Paramiko 2.x 20e1d6c Denormalize extensions for clarity d8d8adf Complete method verification of os-fping 3860d7e Complete method verification of os-security-group-rules b1d9c3e Fix invalid uuid warnings 84f09c6 Correct some misspell words in nova 1fce522 Remove 404 for list and details actions of servers 15e643e Improve the help text for the API options (2) 9766a79 Improve the help text for the API options (1) f8870c6 Complete method verification of os-migrations 82b0129 Move config options from nova/api directory (4) 549fe62 api-ref: perform all 4 phases of verification for action console output 534320c api-ref: add url parameter to expand all sections 8f4e803 api-ref: complete verification for diagnostics.inc e131317 api-ref: update parameter validation on servers 68e7462 Complete method verification of os-tenant-networks 67af54d trivial: removed unused networks var from os-tenant-networks:create ca69025 Complete method verification of os-security-groups a74fd10 Move config options from nova/api directory (3) 39e2bc9 Move config options from nova/api directory (2) 515eacc Move config options from nova/api directory (1) daad02b api-ref: method verification and fixes for servers.inc 649774e Instance mapping save, properly load cell mapping a924b1d config: remove deprecated ironic.client_log_level e7bf2d7 Complete method verification of os-quotas e3b0edb Compelete method verification of os-servers-admin 6939da3 Complete method verification of os-shevle 2f4f098 Add api-sample test for showing quota detail 9fbcc50 Remove legacy v2 tests which use APIRouter 1f259e2 pci: eliminate DB lookup PCI requests during claim 74fbff8 pci: pass in instance PCI requests to claim f3b1103 Remove rate_limit param in builder 3860954 Remove comment on v3 API a90488e Not talking about V2 API code in review doc guide 51a60d3 Add keypairs to instance_extra 8a0cc0d Trivial: No need to exclude TestMoveClaim from py34 tests 012bc7e Remove 400 as expected error 64cbefb Cleaned up request and response formats page a91d24e Complete method verification of os-agents 92a73de update servers policy in code to use formats 04fb00d Complete method verification of os-fixed-ips 938b71c Consolidate image_href to image uuid validation code 94b40cf Fix TestNeutronv2.test_deallocate_for_instance_2* race failures 61eb338 Centralize config option for nova/network/driver.py 85a307d Don't raise error when filtering on custom metadata 16ea2ca Config options: centralize quobyte libvirt options (14) 8778a9e Config options: centralize volume nfs libvirt options (13) 643aed6 Config options: centralize volume net libvirt options (12) f25512a Config options: centralize iser libvirt options (11) 00eccf5 Config options: centralize iscsi libvirt options (10) 463f854 Config options: centralize glusterfs libvirt options (9) e691edf Config options: centralize aoe vol libvirt options (8) 43caf37 Config options: centralize volume libvirt options (7) 15abb39 Config options: centralize vif libvirt options (6) 27fcf2a Config options: centralize utils libvirt options (5) 51ab83c Config options: centralize lvm libvirt options (4) de67ca5 Remove legacy v2 unit tests[q-v] 7eb7a3d Remove legacy v2 unit tests[f-n] a2e6a55 Remove Limits dependency of legacy v2 API code 5eef706 Remove mox in unit/virt/xenapi/test_agent.py d61e158 Set migration status to 'error' on live-migration failure 82b525f Add pycrypto explicitly fadde1d Centralize vif,xenpool & vol_utils config options 1ad0ab6 Config options: centralize imagecache libvirt options (3) d39778d Config options: centralize imagebackend libvirt options (2) 5a64f57 Remove the legacy v2 API entry from api-paste.ini 20cbfa0 Update stable API doc to indicate code removal dda676c Config options: centralize driver libvirt options (1) 647a022 UEFI - instance terminates after boot 852c9df Fix unit tests for v2.1 API b5ec25d Remove legacy v2 unit tests[a-e] 31276a4 Config options: Centralize servicegroup options 95da4e8 libvirt: release serial console ports when destroying guests 452d409 Remove mox from tests/unit/network/test_api.py e229835 Remove legacy v2 API functional tests 91bef29 fix wrong key name in test code 73eda1c Remove the legacy v2 API test scenarios from API sample tests 169498a Remove 413 expect in servers.py 38e2c9c Remove core extension list a992da7 rt: remove unused image_meta parameter 9b2329d Fail to start nova-api if no APIs were able to be started 8182a55 Test that nova-api ignores paste failures, but continues on 2319130 libvirt: introduces module to handle domain xml migration 07e84b2 Trivial: dead code cf9713f Fix database poison warnings, part 8 409085a docs: link to Laski's cells talk from the Austin summit 82098d0 compute: Retain instance metadata for 'evacuate' on shared storage 5943905 Archive instance_actions and instance_actions_event 9df2e7a Add os-interface functional negative tests 1e9d82a api-ref: verify os-server-groups.inc 6211543 Avoid unnessary _get_power_state call fc93aea Remove mox in test_certificates.py ebfe33f api-ref: verfiy limits body cdd5d44 api-ref: body verification of ips.inc 35903eb Change message format of Forbidden 5bafd5f Updated from global requirements 49c9947 api-ref verify of servers-admin-action.inc fd3be6e pci: Allow to assign pci devices in pci device list 9077837 Fix typo in support-matrix.ini: re(set)=>(re)set 62bcfc5 Add ability to filter migrations by instance uuid faf18d8 Wrong mocks, wrong mock order 6a06c62 verify api-ref metadata.inc f49e053 verify api-ref os-server-password.inc 87e22e6 Updated from global requirements a44d999 Fix database poison warnings, part 7 2b65c79 Declare nova.virt namespace 340b7e9 [doc] fix 5 typos 34b8336 Make compute rpcapi 'live_migration' backward compatible f006ff4 Replace key manager with Castellan 7d5fc48 Deprecate Nova Network 57ab504 verify api-ref os-instance-usage-audit-log.inc b256cae Only reset dns_name when unbinding port if DNS is integrated 4c5ba52 Changed the storage size from GB to GiB. 13ef510 Remove unused FAKE_UUID variables 75280e5 Deprecated the concept of extensions in v2.1. c263995 Fix database poison warnings, part 6 5e4c9de Fix database poison warnings, part 5 dcd14ad Avoid unconditional warnings in nova-consoleauth 54ca7aa libvirt: remove version checks for hyperv PV features bdc1533 libvirt: remove version checks for libvirt disk discard feature 42f972e libvirt: remove version checks for block job handling 36814a3 libvirt: remove version checks for PCI device detach ca770a1 libvirt: remove version checks for live snapshot feature 07e4a90 libvirt: add explicit check for min required QEMU version 6b2cad6 libvirt: increase min required libvirt to 1.2.1 93fde49 network: Fix nova boot with multiple security-groups bc71e9a Updated config description on live snapshot 2647f91 Fix NoSuchOptError when referring to conf.neutron.auth_plugin 4f716d9 api-ref host verification (os-hosts.inc) 797e709 api-ref verify os-floating-ip-pools.inc b6fed91 Complete Verification of server-metadata 5b9a51a Complete method Verification of os-hypervisors 09b7c7b Fix invalid uuid warnings in compute api testcases 60aa0a1 Fix invalid uuid warnings 47ef16d complete Method Verification of aggregates 96e9d88 Complete Method Verification of ips 609adcd Fix resize to same host failed using anti-affinity group 205a91a Complete method Verification of consoles d619ad6 Config options: Centralize netconf options 53a5739 Remove 413 as expected error code fa89d6b Complete Verification of os-server-password c2b45cd Complete Verification of os-hosts 9f6b96e Add links to API guide to describe links 0e50008 Complete Method Verification of os-interface ccfadb0 Complet Method Verification of flavor-access ff00644 Complete Verification of os-virtual-interfaces 896062a Complet Method Verification of os-instance-actions 4f4841d Complete Verification of os-flavor-extra-specs b554a8c Fix database poison warnings, part 4 479df53 Complet Method Verification of flavor 5ead139 Complet Method Verification of server group 6bdd1bb Trivial: fix mock decorator order 54c5f4f Add test for nova-compute and nova-network main database blocks 533bd81 Prevent nova-api from dying if enabled_apis is wrong d963a27 Complet Method Verification of keypair ffee1b3 Complet Method Verification of availability-zone 35b0a12 Complet Method Verification of simple tenant usage 8eb03de remove the use of import_object_ns 24d49c6 Fixed typo in word "were" ef2dfbf Complet Method Verification of os-services 4478ce8 Complet Method Verification of server diag 6a90b7a Remove mox in tests/unit/compute/test_host_api.py 1b8b083 Config options: completing centralize neutron options e7390c1 Add instances into dict when handle exception 9185603 Complet Method Verification of limits 8f91309 Improve the help text for the compute rpcapi option a6425fa Move config options from nova/compute/rpcapi.py file 53e31a8 Updated from global requirements 5f996d4 deprecate nova-all 6f2a46f Remove unused base_options param from _get_image_defined_bdms a5d3b57 Change BuildRequest to contain a serialized instance 64f5f99 Split out part of map_cell_and_hosts to return a uuid 17b5725 Add manage command for cell0. 574e093 Config options: centralize section "ssl" cdf5c60 config options: centralize security_group_api opt 6c46f2d Imported Translations from Zanata 1276053 Stop using mox stubs in test_multinic.py 73d5d1f libvirt: deprecate use_usb_tablet in favor of pointer_model eae20ff Config options: Centralize neutron metadata options d929b9f add tags to files for the content verification phase 8fc7d30 Config options: Centralize compute options e781103 Add 415 to list of exceptions for microversions devref 988668e Added validation for rescue image ref 1555736 Final warnings removals for api-ref fc66e7e Clean port dns_name in case of port detach f208917 Fix remaining json reference warnings 9ad3dad Add validations for volume_size and destination_type d0eb858 Remove duplicate api ref for os-networks/actions 24d380b Fix all remaining sample file path e2fb033 Stop using mox stubs in test_access_ips.py 150c30b Stop using mox stubs in test_admin_password.py 92ae0f1 libvirt - Add log if libguestfs can't read host kernel 4d421c7 Fix sample file path for 4 files 6970059 Fix invalid uuid warnings in objects testcases 5035496 Fix invalid uuid warnings in server-group unit tests cf82f52 Create image for suspended instance booted from volume 1d6cd12 Fix content and sample file for keypair, migration, networks aa0bb59 Fix sample file path for os-i* API 469771a Fix the parameters for os-agents API ca65bf4 Fix sample file path for fixed, floating ips API 90d64f2 Fix sample path for aggregate, certificate, console 27778e5 Add remaining image API ref 4ad8a86 Fix the schema of assisted_volume_snapshots fd7bc95 config options: conductor live migrate options fd9bedb xenapi: Fix xmlrpclib marshalling error c52b7c6 fix samples references in security group files 4e41527 fix samples references in os-services 516bd07 Fix api samples references in 3 more files a46e847 Fix reverse_upsize_quota_delta attempt to look up deleted flavors b9a89c9 Fix api ref for os-hosts, os-quota-sets and os-fping f774d03 Fix api ref for os-cells, os-cloudpipe and server-action-shelve f6592c9 Fix api sample references in 2 more files. adf7601 Updated from global requirements 2499734 hardware: thread policy default value applied even if specified d8f9d23 Fix api ref for ips, limits, metdata and agent f09e198 virt: use more realistic fake network / VIF data 6f8cda2 Fix json response example heading in api ref 70de70c Fix database poison warnings, part 3 05e9f0a Remove 40X and 50X from Normal response codes cf2fb50 Specify normal status code on os-baremetal-nodes b758cc3 Remove unused rotation param from _do_snapshot_instance 7f1ff4b Remove unused filter_class_names kwarg from get_filtered_hosts 7e2f5c7 Remove deprecated ability to load scheduler_host_manager from path b3e1afd Fix "Creates an aggregate" parameters 016b810 Unavailable hosts have no resources for use f554c3f HyperV: Add SerialConsoleOps class f98af85 HyperV: Add serial console handler class cae5cdd HyperV: Add serial console proxy afe8c1b fix samples references for 2 files 46a1fd1 Update servers.inc to be as accurate as api-site 2acc896 Fix database poison warnings, part 2 93e3784 Fix "Creates an agent build" parameters a746412 Update get_by_project_id on InstanceMappingList 9780800 Clean up cell handling in nova-manage cell_v2 map_instances 5674e76 Properly clean up BDMs when _provision_instances fails 138a3ea clean up versions.inc reference document 40630d7 Collection of CSS fixes 72a0a7c Fixes unexpectedly passing functional test. 9526462 move sphinx h3 to '-' instead of '^' ccee8b3 fix blockquote font size e51b8f4 Add 'Show All' / 'Hide All' toggle 19712dc use 'required' instead of 'optional' for parameters 5bc00aa Fix css references to the glyphicons font 815a60e Initial use of microversion_parse a7019a8 Changed an HTTP exception to return proper code 8cfc8a8 Compute API: omit disk/container formats when creating images of snapshots aa9a270 Fix formatting of rst in parameters.yaml d789f6e Add instance/instance_uuid to build_requests table ee7a019 network: make nova to handle port_security_enabled=False d03182d BaseCoreFilter docstring and formating improved d4e4479 Fix NoMoreNetworks functional test traces 4355198 Fix typo in nova release notes 7823730 Updated from global requirements acbf057 Fix generation of Guru Meditation Report 54aaa82 Fix invalid uuid warnings in cell api testcases 9e305c2 cleanup some issues in parameters.yaml d4e2771 Import RST files for documentation f1fa7eb add combined parameters.yaml file b01187e claims: Do not assume image-meta is a dict 2e79b44 Fix nova opts help info 82a23c6 Fix doc build if git is absent 4ad414f Add checks for driver attach_interfaces capability 44db7db Updated from global requirements 0b4422b Add AllServicesCurrent fixture 0e6db5f Improve the help text for the linuxnet options (3) 3fe5810 Improve the help text for the linuxnet options (2) aa87a0c Fix signature of copy_image 4697d78 libvirt: remove live migrate workaround for an unsupported ver 917afd2 libvirt: move graphic/serial consoles check to pre_live_migration 3e52726 Fix invalid uuid warnings in api testcases 4994b41 Minor updates to the how_to_get_involved docs df488c8 Put more into compute.api._populate_instance_for_create 566bdf1 Remove unused parameter from _get_requested_instance_group b556c48 Improved test coverage 0d5fee4 Check API versions intersects 0b2e34f virt/hardware: Fix 'isolate' case on non-SMT hosts f9b62df Migrate compute node resource information to Inventory objects 5826a13 Drop compute node uuid online migration code 10a422a increase error handling for dirty files dc2e313 config options: centralize 'spice' options 9989a75 Fix max concurrent builds's unlimited semaphore bc10d29 XenAPI: specify block size for writing config drive. f64237d Fix database poison warnings f738483 Make swap-volume an admin-only API by default 2b079fa Updated from global requirements 178b459 Improve the help text for the linuxnet options (1) 747d6bd Config options: Centralize network options c47b429 Config options: centralize base path configuration 5cc4c07 Add new NeutronFloatingIP object e42ff5e Add "__repr__" method to class "Service" d509152 remove alembic from requirements.txt e845e04 Config options: centralize section "xvp" d7a7e6d Imported Translations from Zanata e2140d2 Updated from global requirements 7830764 allow samples testing for PUT to not have a body ea42c34 libvirt: delete the last file link in _supports_direct_io() 51d46d3 db: retry instance_info_cache_update() on deadlock f05bbb1 Moved tags filtering tests to TestInstanceTagsFiltering test case 6f85b0f Move config options from nova/network/linux_net.py de4043d Remove nova-manage service subcommand 68a4b47 config options: centralize quota options 4a95c1c DB API changes for the nova-manage quota_usage_refresh command 97ce111 Improve the help text for the network options (1) 4f44011 Fix typo in compute node mega join comments 44f74f5 Add api-ref/build/* to .gitignore 65534c6 Improve help text for the network object options 341df63 Config options: Centralize console options 169c979 Config options: Centralize notification options cc1e0fe Remove mox from tests/unit/network/security_group/test_neutron_driver.py 537df23 Added server tags support in nova-api bfe8e74 Added server tags controller 0a14f0b Added db API layer to add instance tag-list filtering support 2c3136d Improve 'workarounds' conf options documentation eaeab5e Config options: centralize "configdrive" options 0bc0fed config options: centralize baseproxy cli options 2135a3f Check if a exception has a code on it before read the code e5e54cd Fix import statement order in nova/rpc.py a612197 Document our policy on fixing v2.0 API bugs f698948 Config options: Centralize neutron options ffd14af Remove mox from tests/unit/compute/test_compute_xen.py 9c66338 Fix typo in comments of affinity and anti-affinity 41fc5c5 Fix up online_data_migrations manage command to be consistent e6612df Adds missing discoverable rules in policy.json 8407f33 Config options: Centralize ipv6 options 54923b3 config options: centralize xenserver vmops opts 424ab49 Config options: Centralize xenapi driver options 8caaf35 config options: centralize xenserver vm_utils opts 1a1a41b Remove flavor seeding from the base migration 696ed21 Rely on devstack to skip rescue tests for cells v1 a726162 Replace topic with topics for messaging.Notifier a957e1e Updated from global requirements 138fefa Fix test for empty policy rules c8c696d Improve 'monkey_patch' conf options documentation 50b1f1f conf: Remove 'destroy_after_evacuate' e301ed2 config options: Move crypto options into a group ac0fee5 config options: centralize section: "crypto" 9f92a6a config options: Centralise 'monkeypatch' options f3a90a9 config options: Centralise 'utils' options 0334456 doc: clean up oslo-incubator related stuff ee53631 config option generation doesn't work with a generator 488bb69 Add link to the latest nova.conf example b113cb1 Change the nova tempest blacklist to use to idempotent ids d9c3e17 HyperV: Refactor livemigr, avoiding getting disk paths remotely a5cfde4 Remove DictCompat from mapping objects 5f4dcdc Enhance value check for option notify_on_state_change 466eda5 Fix flavor migration tests and edge case found bcd5402 config options: Centralize upgrade_levels section 1284e2a config options: Centralize mks options c5626a2 Remove DictCompat from S3 object cf1e169 config options: Centralize vmware section 185e00e config options: centralize section "service" 666a05c Define context.roles using base class fb22f71 TrivialFix: removed unnecessary cycle in servicegroup/test_api.py 6653b75 Handle pre-migration flavor creation failures in the crusty old API 4f79501 config options: centralize section "guestfs" 9c1df17 config options: centralize section "workarounds" f850661 config options: Centralize 'nova.rpc' options a5851f9 Cleanup NovaObjectDictCompat from BandwidthUsage 2fe96e8 config options: fix the missed cli options of novncproxy 0c8f01d Add metadata objects for device tagging b1871e5 Nuke cliutils from oslo-incubator 871368b libvirt: pci detach devices should use dev.address f7cbccc Fix stale file handle error in resource tracker 3261300 Updated from global requirements e76c0ce config options: Centralize xenapi torrent options 27e869b Fix: unable to delete instance when cinder is down 17a8e8a Block flavor creation until main database is empty 74767a7 Further hack up the n.t.unit.db.fakes module of horribleness e05acd2 Add flavor migration routine e11b6c0 Make Flavor create() and destroy() work against API DB 11a8c5a Move config options from nova/objects/network.py 9ba07fd Add tag column to vifs and bdm 49d9433 Remove extensible resource tracking f7a46c8 Fix error message of nova baremetal-node-delete cbf49a3 Enhanced error handling for rest_parameters parser ab1ec3f Fix not supported error message 8798a47 config options: Centralise 'image_file_url' options ca9f12a neutron: Update the port with a MAC address for PFs 4bb8cd2 Remove mox from tests/unit/network/test_rpcapi.py d07a129 Remove mox from tests/unit/objects/test_migration.py c531143 The 'record' option of the WebSocketProxy should be string 178a5cb config options: centralize section: "glance" d1a8ffc Move resource provider staticmethods to proxies 11cb56a Add Service.get_minimum_version_multi() for multiple binaries e65557c remove the ability to disable v2.1 afd977c Make git clean actually remove covhtml 107ae91 Set 'libvirt.sysinfo_serial' to 'none' in RealTimeServersTest 8941b45 Make compute_node_statistics() use new schema b90f2bb remove glance deprecated config d05a7dd Config options: Centralize consoleauth options 4c08d37 config options: centralize section "cloudpipe" 43d00cb After migrate in-use volume the BDM information lost 2005b47 Allow to update resource per single node. b2385fb pci: Add utility method for getting the MAC addr 7105f88 Imported Translations from Zanata e964b47 VMware: Use Port Group and Key in binding details 8aba6d9 Config options: Centralize resource tracker options 1c62a0f Fixed incorrect behavior of xenapi driver 8806ac9 Remove DictCompat from ComputeNode 1154923 config options: Centralise 'virt.imagecache' options 969a0c5 neutron: pci_request logic considers 'direct-physical' vnic type b6b3f0d config options: remove the scheduler import_opt()s a23698c Improve the help text for hyperv options (3) 1f16560 Improve the help text for hyperv options (2) a0ddfc8 Improve the help text for hyperv options (1) 5de98cb Imported Translations from Zanata df0fd8b Remove a redundant 'that' 602d1a9 Cleanup NovaObjectDictCompat from NumaTopology a9d5542 Fix detach SR-IOV when using LibvirtConfigGuestHostdevPCI 5867d40 Stop using mox in test_security_groups c52442a Cleanup the exception LiveMigrationWithOldNovaNotSafe 329898f Add sample API content 68ec070 Create api-ref docs site 888be36 Config options: Centralize debugger options 8b0b54b config options: centralize section: "keymgr" 1ca37c4 libvirt: fix ivs test to use the ivs vif object 7193ff5 libvirt: pass a real instance object into vif plug/unplug methods 32069c8 Add a vnic type for PF passthrough and a new libvirt vif driver 443441a libvirt: live_migration_flags/block_migration_flags default to 0 5b6ee70 Imported Translations from Zanata 0695918 config options: Centralize xenapi options af7e83f Populate instance_mappings during boot 6896e72 libvirt: exercise vif driver 'plug' method in tests 1e7a379 config options: centralize xenserver options f15d9a9 Fix detach SR-IOV when using LibvirtConfigGuestHostdevPCI 990eafe Reduce number of db calls during image cache manager periodic task 29042e0 Imported Translations from Zanata 3e9819d Update cells blacklist regex for test_server_basic_ops e86b7fb Update cells blacklist regex for test_server_basic_ops dcb625e Remove mox from tests/functional/api_sample_tests/test_cells.py 3de377b Remove mox from tests/unit/api/openstack/compute/test_baremetal_nodes.py fc9b005 Config options: Centralize ldapdns options fe649a2 Add NetworkRequestList.from_tuples helper c71c4e0 Stop providing force_hosts to the scheduler for move ops c27a9c0 Enforce migration tests for api database e991ca1 Objectify test_flavors and test_flavors_extra_specs 0230edd Allow ironic driver to specify cafile 62158db trivial: Fix alignment of wsgi options 2358640 config options: Remove 'wsgi_' prefix from opts 589660a VMware: Always update image size for sparse image 9f60d9b VMware: create temp parent directory when booting sparse image 4404bab VMware: Use datastore copy when the image is already in vSphere 82f3dcf Imported Translations from Zanata 467953b Fix typos in document a2d0d65 Removes some redundant words 446d155 Stop providing force_hosts to the scheduler for move ops cabe2df Include CellMapping in InstanceMapping object 3f3a886 Make flavor extra_specs operations work against the API DB f092207 Make Flavor access routines work against API database b631774 Clarify the ``use_neutron`` option upgrade notes. 73e4fb1 Imported Translations from Zanata ad3c069 Try to repopulate instance_group if it is None 00efcf3 Try to repopulate instance_group if it is None 11a7960 modify duplicate // to / in doc dfcd3a3 change host to host_migration c96e709 Fixup test_connection_switch functional test 1ae065a Fix SAWarning in _flavor_get_by_flavor_id_from_db f03a3a5 Update 'os-hypervisors.inc' in api-ref 356aa08 Fix os-server-groups.inc a45f5dd cinder: accommodate v1 cinder client in detach call 620949f Move config options from nova/network/manager.py a248e6c Change adminPass for several server actions 6bc51e4 Fix os-virtual-interfaces and flavors api-ref 69cd268 Make FlavorList.get_all() return results from the API and main DBs 720596a Objectify some tests in test_compute and test_flavors dbbcf38 Objectify test_instance_type_extra_specs 1906aa4 Add a DatabasePoisonFixture 919acff config options: Use OptGroup for listing options f2a1f00 Live migration failure in API leaves VM in MIGRATING state a26f6b4 Fix flavor-access and flavor-extras api-ref 17c0956 Fix diagnostics, extensions api ref 08fd092 Fix typo 'mappgins' to 'mappings' 9b98668 Imported Translations from Zanata fb7b7e7 Fix hosts and az api samples 2e39d64 Change "libvirt.xml" back to the original after doing unrescue e9cb0aa Fix os-service related reference missing d761ba3 Add 'binary' and 'disable-reason' into os-service d2f67e8 Remove unused argument v3mode 726943f Clean up the TestGlanceClientWrapper retry tests c7eb823 stop setting mtu when plugging vhost-user ports 0b9e378 config options: Move wsgi options into a group ba2dbe2 Rewrite 'test_filter_schedule_skipping' method using Mock 3d0272f Remove stub_compute config options 25d21f7 Added missing "=" in debug message b67614f libvirt: serial console ports count upper limit needs to be checked a598793 Imported Translations from Zanata 52b165b Return 400 on boot for invalid image metadata 6ee7d44 Fix JSON format of server_concepts e5b0b06 Remove /v1.1 endpoint from api-guide c5c539e config options: centralize section: "rdp" c514065 Fixes hex decoding related unit tests 23a202e Fix conversion of config disks to qcow2 during resize/migration f0dc7db xenapi: Fix when auto block_migration in the API adaa9de xenapi: Fix up passing of sr_uuid_map 15372ef xenapi: Fix the live-migrate aggregate check 23d8dff Add rebuild action descriptions in support-matrix 828fd83 Config options: centralize section "hyperv" e30c75b Removal of unnecessary `import_opt`s for centralized config options 61b4dcc Imported Translations from Zanata f8faf00 Fixes bug with notify_decorator bad getattr default value 1f432af config options: centralize section "monitors" f8916b4 config options: Centralise floating ip options 7b272b3 Fix API Error on hypervisor-uptime API 9ca37ab VMware: make the opaque network attachment more robust fc164e3 Add functional test for v2.7 181cab5 avoid microversion header in functional test d3fe322 Add backrefs to api db models 610f0fb Update reno for stable/mitaka adf7ba6 stop setting mtu when plugging vhost-user ports a9c22ea Removes redundant object fields f6b11c5 Blacklist TestOSAPIFixture.test_responds_to_version in python3 29fb0ac Fix conversion of config disks to qcow2 during resize/migration 92a1509 Remove auto generated module api documentation e9804f5 Imported Translations from Zanata 9264c0e Mark 2.25 as Mitaka maxmium API version f6e4713 Add a hacking check for test method closures 07da1d8 Make Flavor.get operations prefer the API database 762605c xenapi: Fix when auto block_migration in the API 8e5188a xenapi: Fix up passing of sr_uuid_map 51819c6 Update to openSUSE versions. 38738d7 xenapi: Fix the live-migrate aggregate check f25648a Error on API Guide warnings 4d09155 Add Newton sanity check migration 10b50d5 Add placeholder migrations for Mitaka backports a970127 Update .gitreview for stable/mitaka 1969d89 Set RPC version aliases for Mitaka 2c1b197 Wait for device to be mapped b274a85 libvirt: Fix ssh driver to to prevent prompting def7105 Support-matrix of vmware for chap is wrong cde4be6 Imported Translations from Zanata b36da5d <VMWare> Allocate free bus for new SCSI controller 0264687 config options: centralize cinder options 1812987 Add os-brick rootwrap filter for privsep ae6d868 Fix retry mechanism for generator results a023c32 Replace deprecated LOG.warn with LOG.warning 2318323 libvirt: Allow use of live snapshots with RBD snapshot/clone b7cc9e3 Trivial: Use exact docstring for quota module 95ef7ac Replace deprecated LOG.warn with LOG.warning 0bb080b xenapi: Image cache cannot be disabled 54afe44 VMware: enable a resize of instance with no root disk 5546df0 Add functional test for OverQuota 99de5fd Translate OverLimit exceptions in Cinder calls 50f4f95 Add regression test for Cinder 403 forwarding c8472c8 VMware: use datacenter path to fetch image e3843d2 fixed log warning in sqlalchemy/api.py 4be8f84 pci: avoid parsing whitelist repeatedly a9716c8 Rework 'limited' and 'get_limit_and_marker' e2f4370 Soft delete instance group member when delete instance e930f00 VMware: Refactor the formatting instance metadata 1c3108d Remove sizelimit.py in favor of oslo_middleware.sizelimit 83574aa Add ppc64le architecture to some libvirt unit tests 54d2300 Remove duplicated oslo.log configuration setup 282a815 Don't use locals() and globals(), use a dict instead a572359 Style improvements 5c01141 test_fields: Remove all 'Enum' subclass tests db702ea Ironic: Use ironicclient native retries for connection errors 955ae42 VMware: Remove VMwareHTTPReadFile b5e3d21 add checking for new image metadata property 'hw_cpu_realtime_mask' 0cd0c1d Move logging outside of LibvirtConfigObject.to_xml 07ba58c Remove duplicate test case flavor_create Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 +- .gitreview | 1 + .testr.conf | 10 + HACKING.rst | 9 +- README.rst | 66 +- api-guide/source/conf.py | 2 +- api-guide/source/faults.rst | 2 +- api-guide/source/general_info.rst | 5 +- api-guide/source/index.rst | 14 +- api-guide/source/limits.rst | 6 +- api-guide/source/links_and_references.rst | 8 +- api-guide/source/microversions.rst | 44 +- api-guide/source/paginated_collections.rst | 12 +- .../source/polling_changes-since_parameter.rst | 2 +- api-guide/source/request_and_response_formats.rst | 18 +- api-guide/source/server_concepts.rst | 251 +- api-guide/source/versions.rst | 2 +- api-ref/source/conf.py | 234 + api-ref/source/diagnostics.inc | 44 + api-ref/source/extensions.inc | 94 + api-ref/source/flavors.inc | 229 + api-ref/source/images.inc | 379 ++ api-ref/source/index.rst | 67 + api-ref/source/ips.inc | 83 + api-ref/source/limits.inc | 45 + api-ref/source/metadata.inc | 231 + api-ref/source/os-agents.inc | 166 + api-ref/source/os-aggregates.inc | 345 + api-ref/source/os-assisted-volume-snapshots.inc | 91 + api-ref/source/os-availability-zone.inc | 74 + api-ref/source/os-baremetal-nodes.inc | 87 + api-ref/source/os-cells.inc | 189 + api-ref/source/os-certificates.inc | 68 + api-ref/source/os-cloudpipe.inc | 109 + api-ref/source/os-consoles.inc | 182 + api-ref/source/os-fixed-ips.inc | 83 + api-ref/source/os-flavor-access.inc | 131 + api-ref/source/os-flavor-extra-specs.inc | 185 + api-ref/source/os-floating-ip-dns.inc | 203 + api-ref/source/os-floating-ip-pools.inc | 44 + api-ref/source/os-floating-ips-bulk.inc | 163 + api-ref/source/os-floating-ips.inc | 161 + api-ref/source/os-fping.inc | 108 + api-ref/source/os-hosts.inc | 211 + api-ref/source/os-hypervisors.inc | 330 + api-ref/source/os-instance-actions.inc | 107 + api-ref/source/os-instance-usage-audit-log.inc | 92 + api-ref/source/os-interface.inc | 169 + api-ref/source/os-keypairs.inc | 158 + api-ref/source/os-migrations.inc | 47 + api-ref/source/os-networks.inc | 319 + api-ref/source/os-quota-sets.inc | 258 + api-ref/source/os-security-group-default-rules.inc | 149 + api-ref/source/os-security-group-rules.inc | 104 + api-ref/source/os-security-groups.inc | 192 + api-ref/source/os-server-external-events.inc | 73 + api-ref/source/os-server-groups.inc | 149 + api-ref/source/os-server-password.inc | 82 + api-ref/source/os-server-tags.inc | 187 + api-ref/source/os-services.inc | 241 + api-ref/source/os-simple-tenant-usage.inc | 122 + api-ref/source/os-tenant-network.inc | 127 + api-ref/source/os-virtual-interfaces.inc | 46 + api-ref/source/os-volume-attachments.inc | 181 + api-ref/source/os-volumes.inc | 402 ++ api-ref/source/parameters.yaml | 4561 ++++++++++++++ api-ref/source/server-security-groups.inc | 43 + api-ref/source/servers-action-console-output.inc | 46 + api-ref/source/servers-action-crash-dump.inc | 51 + api-ref/source/servers-action-deferred-delete.inc | 76 + api-ref/source/servers-action-evacuate.inc | 52 + api-ref/source/servers-action-fixed-ip.inc | 75 + api-ref/source/servers-action-remote-consoles.inc | 152 + api-ref/source/servers-action-shelve.inc | 164 + api-ref/source/servers-actions.inc | 941 +++ api-ref/source/servers-admin-action.inc | 268 + api-ref/source/servers.inc | 773 +++ api-ref/source/urls.inc | 26 + api-ref/source/versions.inc | 109 + bindep.txt | 34 + devstack/tempest-dsvm-cells-rc | 73 +- devstack/tempest-dsvm-lvm-rc | 55 + .../all_extensions/extensions-list-resp-v2.json | 724 --- .../extensions-list-resp-v21-compatible.json | 804 --- .../all_extensions/extensions-list-resp.json | 796 --- .../all_extensions/flavor-get-resp.json | 24 - .../all_extensions/flavors-detail-resp.json | 114 - .../all_extensions/flavors-list-resp.json | 74 - .../server-action-confirm-resize.json | 3 - .../all_extensions/server-action-create-image.json | 8 - .../all_extensions/server-action-reboot.json | 5 - .../all_extensions/server-action-rebuild-resp.json | 56 - .../all_extensions/server-action-rebuild.json | 18 - .../all_extensions/server-action-resize.json | 5 - .../server-action-revert-resize.json | 3 - .../all_extensions/server-create-req.json | 10 - .../all_extensions/server-create-resp.json | 22 - .../all_extensions/server-get-resp.json | 74 - .../all_extensions/servers-details-resp.json | 76 - .../all_extensions/servers-list-resp.json | 18 - .../extension-info/extensions-get-resp-v2.json | 10 - .../extensions-list-resp-v21-compatible.json | 804 +++ .../extension-info/extensions-list-resp.json | 796 +++ .../flavor-access/flavor-access-create-resp.json | 23 - .../flavor-access/flavor-access-detail-resp.json | 109 - .../flavor-access/flavor-access-show-resp.json | 23 - ...cess-create-req.json => flavor-create-req.json} | 0 .../v2.7/flavor-access-add-tenant-req.json | 5 + .../flavor-access/v2.7/flavor-create-req.json | 10 + .../flavor-manage/flavor-create-post-req.json | 3 +- .../flavor-manage/flavor-create-post-resp.json | 1 + .../keypairs/v2.35/keypairs-list-resp.json | 18 + .../keypairs/v2.35/keypairs-list-user1-resp.json | 12 + .../keypairs/v2.35/keypairs-list-user2-resp.json | 18 + .../keypairs/v2.35/keypairs-post-req.json | 7 + .../keypairs/v2.35/keypairs-post-resp.json | 10 + .../os-access-ips/server-action-rebuild-resp.json | 55 - .../os-access-ips/server-action-rebuild.json | 11 - .../os-access-ips/server-post-resp.json | 16 - .../os-access-ips/servers-details-resp.json | 59 - .../os-aggregates/aggregates-list-get-resp.json | 2 +- .../snapshot-create-assisted-req.json | 3 +- .../snapshot-create-assisted-resp.json | 2 +- .../attach-interfaces-create-net_id-req.json | 10 + .../availability-zone-post-resp.json | 6 + .../server-config-drive-get-resp.json | 58 - .../os-config-drive/server-post-req.json | 12 - .../os-config-drive/server-post-resp.json | 16 - .../servers-config-drive-details-resp.json | 60 - .../os-disk-config/list-servers-detail-get.json | 60 - .../os-disk-config/server-action-rebuild-req.json | 6 - .../os-disk-config/server-action-rebuild-resp.json | 56 - .../os-disk-config/server-get-resp.json | 58 - .../os-disk-config/server-post-req.json | 10 - .../os-disk-config/server-post-resp.json | 17 - .../os-disk-config/server-resize-post-req.json | 6 - .../os-evacuate/v2.29/server-evacuate-req.json | 7 + .../server-get-resp.json | 58 - .../servers-detail-resp.json | 60 - .../server-get-resp.json | 60 - .../server-post-resp.json | 16 - .../servers-detail-resp.json | 62 - .../v2.16/server-get-resp.json | 69 - .../v2.16/servers-detail-resp.json | 71 - .../v2.3/server-get-resp.json | 65 - .../v2.3/servers-detail-resp.json | 67 - .../os-extended-status/server-get-resp.json | 60 - .../os-extended-status/servers-detail-resp.json | 62 - .../os-extended-volumes/server-get-resp.json | 65 - .../os-extended-volumes/servers-detail-resp.json | 67 - .../os-extended-volumes/v2.3/server-get-resp.json | 65 - .../v2.3/servers-detail-resp.json | 67 - .../os-flavor-rxtx/flavor-rxtx-get-resp.json | 24 - .../os-flavor-rxtx/flavor-rxtx-list-resp.json | 114 - .../os-flavor-rxtx/flavor-rxtx-post-req.json | 10 - .../os-flavor-rxtx/flavor-rxtx-post-resp.json | 24 - .../os-hide-server-addresses/server-get-resp.json | 20 + .../servers-details-resp.json | 20 + .../v2.28/hypervisors-detail-resp.json | 43 + .../v2.28/hypervisors-list-resp.json | 10 + .../v2.28/hypervisors-search-resp.json | 10 + .../v2.28/hypervisors-show-resp.json | 41 + .../v2.28/hypervisors-statistics-resp.json | 16 + .../v2.28/hypervisors-uptime-resp.json | 9 + .../v2.28/hypervisors-with-servers-resp.json | 20 + .../v2.28/hypervisors-without-servers-resp.json | 10 + .../v2.33/hypervisors-detail-resp.json | 49 + .../v2.33/hypervisors-list-resp.json | 16 + .../inst-usage-audit-log-index-get-resp.json | 39 +- .../inst-usage-audit-log-show-get-resp.json | 35 +- .../v2.30/live-migrate-server.json | 7 + .../multiple-create-no-resv-post-resp.json | 6 + .../os-networks/networks-disassociate-req.json | 3 - .../os-networks/networks-list-resp.json | 2 +- .../os-personality/server-action-rebuild-req.json | 17 - .../os-personality/server-action-rebuild-resp.json | 55 - .../os-personality/server-post-req.json | 16 - .../os-personality/server-post-resp.json | 16 - ...ver-action-rebuild-preserve-ephemeral-resp.json | 1 + .../os-quota-sets/quotas-show-detail-get-resp.json | 75 + .../os-rescue/server-get-resp-rescue.json | 19 +- .../os-rescue/server-get-resp-unrescue.json | 20 +- .../scheduler-hints-post-req.json | 10 - .../scheduler-hints-post-resp.json | 16 - .../os-security-groups/server-get-resp.json | 62 - .../os-security-groups/server-post-req.json | 13 - .../os-security-groups/server-post-resp.json | 21 - .../os-security-groups/servers-detail-resp.json | 64 - .../v2.26/server-tags-index-resp.json | 3 + .../v2.26/server-tags-put-all-req.json | 3 + .../v2.26/server-tags-put-all-resp.json | 3 + .../v2.26/server-tags-show-details-resp.json | 86 + .../v2.26/servers-tags-details-resp.json | 88 + .../os-server-usage/server-get-resp.json | 59 - .../os-server-usage/servers-detail-resp.json | 61 - .../simple-tenant-usage-get-detail.json | 29 + .../os-used-limits/usedlimits-get-resp.json | 26 - .../os-used-limits/v2-usedlimits-get-resp.json | 93 - .../os-user-data/userdata-post-req.json | 11 - .../os-user-data/userdata-post-resp.json | 16 - .../servers/server-action-rebuild-resp.json | 1 + .../servers/server-create-req-v237.json | 30 + .../servers/v2.16/servers-details-resp.json | 50 +- .../servers/v2.16/servers-list-resp.json | 18 + .../servers/v2.19/server-action-rebuild-resp.json | 1 + .../servers/v2.19/server-create-req.json | 13 + .../servers/v2.19/server-create-resp.json | 22 + .../servers/v2.19/server-post-resp.json | 16 - .../servers/v2.19/servers-details-resp.json | 34 + .../servers/v2.3/servers-details-resp.json | 92 + .../servers/v2.3/servers-list-resp.json | 18 + .../servers/v2.32/server-create-req.json | 18 + .../servers/v2.32/server-create-resp.json | 22 + .../servers/v2.37/server-create-req.json | 8 + .../servers/v2.37/server-create-resp.json | 22 + .../servers/v2.9/servers-details-resp.json | 33 + .../instance-delete-start.json | 62 + .../instance-power_on-end.json | 62 + .../instance-power_on-start.json | 62 + .../instance-resize-start.json | 62 + .../instance-restore-start.json | 62 + .../instance-shelve-start.json | 62 + .../instance-suspend-start.json | 62 + etc/nova/README-nova.conf.txt | 10 +- etc/nova/api-paste.ini | 35 +- etc/nova/nova-config-generator.conf | 11 +- etc/nova/nova-policy-generator.conf | 3 + etc/nova/policy.json | 489 -- etc/nova/rootwrap.d/compute.filters | 12 +- nova/api/auth.py | 88 +- nova/api/ec2/__init__.py | 85 - nova/api/metadata/base.py | 220 +- nova/api/metadata/handler.py | 36 +- nova/api/metadata/vendordata.py | 30 + nova/api/metadata/vendordata_dynamic.py | 122 + nova/api/metadata/vendordata_json.py | 16 +- nova/api/openstack/__init__.py | 211 +- nova/api/openstack/api_version_request.py | 32 +- nova/api/openstack/auth.py | 5 +- nova/api/openstack/common.py | 46 +- nova/api/openstack/compute/__init__.py | 125 +- nova/api/openstack/compute/access_ips.py | 105 - nova/api/openstack/compute/admin_actions.py | 11 +- nova/api/openstack/compute/admin_password.py | 18 +- nova/api/openstack/compute/agents.py | 10 +- nova/api/openstack/compute/aggregates.py | 25 +- .../openstack/compute/assisted_volume_snapshots.py | 15 +- nova/api/openstack/compute/attach_interfaces.py | 22 +- nova/api/openstack/compute/availability_zone.py | 6 +- nova/api/openstack/compute/baremetal_nodes.py | 39 +- nova/api/openstack/compute/block_device_mapping.py | 5 +- nova/api/openstack/compute/cells.py | 23 +- nova/api/openstack/compute/certificates.py | 6 +- nova/api/openstack/compute/cloudpipe.py | 24 +- nova/api/openstack/compute/config_drive.py | 7 +- nova/api/openstack/compute/console_auth_tokens.py | 21 +- nova/api/openstack/compute/console_output.py | 6 +- nova/api/openstack/compute/consoles.py | 10 +- nova/api/openstack/compute/create_backup.py | 6 +- nova/api/openstack/compute/deferred_delete.py | 12 +- nova/api/openstack/compute/disk_config.py | 154 - nova/api/openstack/compute/evacuate.py | 28 +- .../compute/extended_availability_zone.py | 6 +- .../compute/extended_server_attributes.py | 43 +- nova/api/openstack/compute/extended_status.py | 9 +- nova/api/openstack/compute/extended_volumes.py | 9 +- nova/api/openstack/compute/extension_info.py | 159 +- nova/api/openstack/compute/fixed_ips.py | 13 +- nova/api/openstack/compute/flavor_access.py | 20 +- nova/api/openstack/compute/flavor_manage.py | 23 +- nova/api/openstack/compute/flavor_rxtx.py | 8 +- nova/api/openstack/compute/flavors_extraspecs.py | 16 +- nova/api/openstack/compute/floating_ip_dns.py | 31 +- nova/api/openstack/compute/floating_ip_pools.py | 9 +- nova/api/openstack/compute/floating_ips.py | 59 +- nova/api/openstack/compute/floating_ips_bulk.py | 22 +- nova/api/openstack/compute/fping.py | 23 +- nova/api/openstack/compute/helpers.py | 116 + .../api/openstack/compute/hide_server_addresses.py | 20 +- nova/api/openstack/compute/hosts.py | 24 +- nova/api/openstack/compute/hypervisors.py | 122 +- nova/api/openstack/compute/image_metadata.py | 6 +- nova/api/openstack/compute/image_size.py | 7 +- nova/api/openstack/compute/images.py | 6 + nova/api/openstack/compute/instance_actions.py | 9 +- .../openstack/compute/instance_usage_audit_log.py | 14 +- nova/api/openstack/compute/ips.py | 8 +- nova/api/openstack/compute/keypairs.py | 78 +- nova/api/openstack/compute/legacy_v2/consoles.py | 92 - .../compute/legacy_v2/contrib/__init__.py | 49 - .../compute/legacy_v2/contrib/admin_actions.py | 403 -- .../openstack/compute/legacy_v2/contrib/agents.py | 193 - .../compute/legacy_v2/contrib/aggregates.py | 308 - .../legacy_v2/contrib/assisted_volume_snapshots.py | 97 - .../compute/legacy_v2/contrib/attach_interfaces.py | 211 - .../compute/legacy_v2/contrib/availability_zone.py | 144 - .../legacy_v2/contrib/baremetal_ext_status.py | 25 - .../compute/legacy_v2/contrib/baremetal_nodes.py | 178 - .../contrib/block_device_mapping_v2_boot.py | 23 - .../compute/legacy_v2/contrib/cell_capacities.py | 25 - .../openstack/compute/legacy_v2/contrib/cells.py | 370 -- .../compute/legacy_v2/contrib/certificates.py | 79 - .../compute/legacy_v2/contrib/cloudpipe.py | 161 - .../compute/legacy_v2/contrib/cloudpipe_update.py | 74 - .../compute/legacy_v2/contrib/config_drive.py | 64 - .../legacy_v2/contrib/console_auth_tokens.py | 68 - .../compute/legacy_v2/contrib/console_output.py | 95 - .../compute/legacy_v2/contrib/consoles.py | 157 - .../compute/legacy_v2/contrib/createserverext.py | 30 - .../compute/legacy_v2/contrib/deferred_delete.py | 77 - .../compute/legacy_v2/contrib/disk_config.py | 151 - .../compute/legacy_v2/contrib/evacuate.py | 120 - .../contrib/extended_availability_zone.py | 62 - .../contrib/extended_evacuate_find_host.py | 26 - .../legacy_v2/contrib/extended_floating_ips.py | 25 - .../legacy_v2/contrib/extended_hypervisors.py | 25 - .../compute/legacy_v2/contrib/extended_ips.py | 78 - .../compute/legacy_v2/contrib/extended_ips_mac.py | 76 - .../compute/legacy_v2/contrib/extended_networks.py | 26 - .../compute/legacy_v2/contrib/extended_quotas.py | 28 - .../contrib/extended_rescue_with_image.py | 25 - .../contrib/extended_server_attributes.py | 71 - .../compute/legacy_v2/contrib/extended_services.py | 23 - .../legacy_v2/contrib/extended_services_delete.py | 23 - .../compute/legacy_v2/contrib/extended_status.py | 66 - .../contrib/extended_virtual_interfaces_net.py | 53 - .../compute/legacy_v2/contrib/extended_volumes.py | 78 - .../compute/legacy_v2/contrib/fixed_ips.py | 99 - .../compute/legacy_v2/contrib/flavor_access.py | 177 - .../compute/legacy_v2/contrib/flavor_disabled.py | 64 - .../compute/legacy_v2/contrib/flavor_rxtx.py | 64 - .../compute/legacy_v2/contrib/flavor_swap.py | 64 - .../compute/legacy_v2/contrib/flavorextradata.py | 72 - .../compute/legacy_v2/contrib/flavorextraspecs.py | 166 - .../compute/legacy_v2/contrib/flavormanage.py | 112 - .../compute/legacy_v2/contrib/floating_ip_dns.py | 280 - .../compute/legacy_v2/contrib/floating_ip_pools.py | 67 - .../compute/legacy_v2/contrib/floating_ips.py | 314 - .../compute/legacy_v2/contrib/floating_ips_bulk.py | 173 - .../openstack/compute/legacy_v2/contrib/fping.py | 153 - .../legacy_v2/contrib/hide_server_addresses.py | 82 - .../openstack/compute/legacy_v2/contrib/hosts.py | 335 - .../compute/legacy_v2/contrib/hypervisor_status.py | 25 - .../compute/legacy_v2/contrib/hypervisors.py | 230 - .../compute/legacy_v2/contrib/image_size.py | 62 - .../compute/legacy_v2/contrib/instance_actions.py | 95 - .../legacy_v2/contrib/instance_usage_audit_log.py | 140 - .../compute/legacy_v2/contrib/keypairs.py | 181 - .../compute/legacy_v2/contrib/migrations.py | 80 - .../compute/legacy_v2/contrib/multinic.py | 97 - .../compute/legacy_v2/contrib/multiple_create.py | 25 - .../legacy_v2/contrib/networks_associate.py | 106 - .../compute/legacy_v2/contrib/os_networks.py | 231 - .../legacy_v2/contrib/os_tenant_networks.py | 232 - .../contrib/preserve_ephemeral_rebuild.py | 23 - .../compute/legacy_v2/contrib/quota_classes.py | 139 - .../openstack/compute/legacy_v2/contrib/quotas.py | 272 - .../openstack/compute/legacy_v2/contrib/rescue.py | 98 - .../compute/legacy_v2/contrib/scheduler_hints.py | 63 - .../contrib/security_group_default_rules.py | 150 - .../compute/legacy_v2/contrib/security_groups.py | 506 -- .../legacy_v2/contrib/server_diagnostics.py | 63 - .../legacy_v2/contrib/server_external_events.py | 149 - .../legacy_v2/contrib/server_group_quotas.py | 50 - .../compute/legacy_v2/contrib/server_groups.py | 243 - .../legacy_v2/contrib/server_list_multi_status.py | 25 - .../compute/legacy_v2/contrib/server_password.py | 70 - .../compute/legacy_v2/contrib/server_sort_keys.py | 25 - .../compute/legacy_v2/contrib/server_start_stop.py | 84 - .../compute/legacy_v2/contrib/server_usage.py | 71 - .../compute/legacy_v2/contrib/services.py | 199 - .../openstack/compute/legacy_v2/contrib/shelve.py | 100 - .../legacy_v2/contrib/simple_tenant_usage.py | 284 - .../compute/legacy_v2/contrib/used_limits.py | 93 - .../legacy_v2/contrib/used_limits_for_admin.py | 25 - .../compute/legacy_v2/contrib/user_data.py | 25 - .../compute/legacy_v2/contrib/user_quotas.py | 26 - .../legacy_v2/contrib/virtual_interfaces.py | 87 - .../legacy_v2/contrib/volume_attachment_update.py | 26 - .../openstack/compute/legacy_v2/contrib/volumes.py | 613 -- nova/api/openstack/compute/legacy_v2/extensions.py | 49 - nova/api/openstack/compute/legacy_v2/flavors.py | 112 - .../openstack/compute/legacy_v2/image_metadata.py | 126 - nova/api/openstack/compute/legacy_v2/images.py | 150 - nova/api/openstack/compute/legacy_v2/ips.py | 52 - nova/api/openstack/compute/legacy_v2/limits.py | 457 -- .../openstack/compute/legacy_v2/server_metadata.py | 189 - nova/api/openstack/compute/legacy_v2/servers.py | 1171 ---- nova/api/openstack/compute/legacy_v2/versions.py | 28 - nova/api/openstack/compute/limits.py | 28 +- nova/api/openstack/compute/lock_server.py | 15 +- nova/api/openstack/compute/migrate_server.py | 43 +- nova/api/openstack/compute/migrations.py | 7 +- nova/api/openstack/compute/multinic.py | 8 +- nova/api/openstack/compute/networks.py | 27 +- nova/api/openstack/compute/networks_associate.py | 16 +- nova/api/openstack/compute/pause_server.py | 11 +- nova/api/openstack/compute/pci.py | 13 +- nova/api/openstack/compute/personality.py | 64 - .../compute/preserve_ephemeral_rebuild.py | 44 - nova/api/openstack/compute/quota_classes.py | 8 +- nova/api/openstack/compute/quota_sets.py | 97 +- nova/api/openstack/compute/remote_consoles.py | 14 +- nova/api/openstack/compute/rescue.py | 21 +- nova/api/openstack/compute/schemas/access_ips.py | 24 - .../compute/schemas/assisted_volume_snapshots.py | 6 +- .../compute/schemas/block_device_mapping.py | 20 +- .../compute/schemas/block_device_mapping_v1.py | 2 +- nova/api/openstack/compute/schemas/cells.py | 2 +- nova/api/openstack/compute/schemas/disk_config.py | 20 - nova/api/openstack/compute/schemas/evacuate.py | 4 + .../api/openstack/compute/schemas/flavor_manage.py | 14 +- .../openstack/compute/schemas/migrate_server.py | 4 + nova/api/openstack/compute/schemas/personality.py | 30 - .../compute/schemas/preserve_ephemeral_rebuild.py | 21 - nova/api/openstack/compute/schemas/quota_sets.py | 11 + nova/api/openstack/compute/schemas/rescue.py | 2 +- nova/api/openstack/compute/schemas/server_tags.py | 43 + nova/api/openstack/compute/schemas/servers.py | 56 +- nova/api/openstack/compute/schemas/user_data.py | 10 + .../compute/security_group_default_rules.py | 22 +- nova/api/openstack/compute/security_groups.py | 44 +- nova/api/openstack/compute/server_diagnostics.py | 10 +- .../openstack/compute/server_external_events.py | 4 +- nova/api/openstack/compute/server_groups.py | 6 +- nova/api/openstack/compute/server_metadata.py | 24 +- nova/api/openstack/compute/server_migrations.py | 12 +- nova/api/openstack/compute/server_password.py | 8 +- nova/api/openstack/compute/server_tags.py | 223 + nova/api/openstack/compute/server_usage.py | 6 +- nova/api/openstack/compute/servers.py | 479 +- nova/api/openstack/compute/services.py | 19 +- nova/api/openstack/compute/shelve.py | 12 +- nova/api/openstack/compute/simple_tenant_usage.py | 14 +- nova/api/openstack/compute/suspend_server.py | 12 +- nova/api/openstack/compute/tenant_networks.py | 46 +- nova/api/openstack/compute/used_limits.py | 33 +- nova/api/openstack/compute/user_data.py | 2 + nova/api/openstack/compute/versions.py | 3 - nova/api/openstack/compute/views/hypervisors.py | 26 + nova/api/openstack/compute/views/images.py | 8 + nova/api/openstack/compute/views/keypairs.py | 25 + nova/api/openstack/compute/views/limits.py | 60 +- nova/api/openstack/compute/views/server_tags.py | 30 + nova/api/openstack/compute/views/servers.py | 89 +- nova/api/openstack/compute/virtual_interfaces.py | 8 +- nova/api/openstack/compute/volumes.py | 75 +- nova/api/openstack/extensions.py | 150 +- .../{compute/legacy_v2 => placement}/__init__.py | 0 nova/api/openstack/placement/auth.py | 79 + nova/api/openstack/placement/deploy.py | 66 + nova/api/openstack/placement/handler.py | 183 + .../openstack/placement/handlers}/__init__.py | 0 .../api/openstack/placement/handlers/allocation.py | 299 + nova/api/openstack/placement/handlers/inventory.py | 419 ++ .../placement/handlers/resource_provider.py | 248 + nova/api/openstack/placement/handlers/root.py | 36 + nova/api/openstack/placement/handlers/usage.py | 55 + nova/api/openstack/placement/microversion.py | 156 + nova/api/openstack/placement/requestlog.py | 82 + nova/api/openstack/placement/util.py | 143 + nova/api/openstack/placement/wsgi.py | 65 + nova/api/openstack/rest_api_version_history.rst | 201 +- nova/api/openstack/wsgi.py | 223 +- nova/api/opts.py | 140 - nova/api/sizelimit.py | 24 - nova/api/validation/parameter_types.py | 58 +- nova/api/validation/validators.py | 6 + nova/api/validator.py | 120 - nova/baserpc.py | 8 +- nova/block_device.py | 2 +- nova/cache_utils.py | 82 +- nova/cells/filters/__init__.py | 5 +- nova/cells/manager.py | 6 +- nova/cells/messaging.py | 2 +- nova/cells/opts.py | 4 - nova/cells/rpcapi.py | 15 +- nova/cells/scheduler.py | 7 + nova/cells/state.py | 12 +- nova/cert/rpcapi.py | 3 +- nova/cloudpipe/pipelib.py | 65 +- nova/cmd/all.py | 7 +- nova/cmd/api.py | 32 +- nova/cmd/api_metadata.py | 1 - nova/cmd/api_os_compute.py | 10 +- nova/cmd/baseproxy.py | 16 +- nova/cmd/cells.py | 2 +- nova/cmd/cert.py | 7 + nova/cmd/common.py | 161 + nova/cmd/compute.py | 26 +- nova/cmd/console.py | 1 - nova/cmd/consoleauth.py | 6 +- nova/cmd/dhcpbridge.py | 31 +- nova/cmd/idmapshift.py | 3 +- nova/cmd/manage.py | 750 +-- nova/cmd/network.py | 25 +- nova/cmd/novnc.py | 41 - nova/cmd/novncproxy.py | 2 + nova/cmd/policy_check.py | 174 + nova/cmd/spicehtml5proxy.py | 19 +- nova/compute/api.py | 1042 ++-- nova/compute/cells_api.py | 48 +- nova/compute/claims.py | 89 +- nova/compute/flavors.py | 41 +- nova/compute/manager.py | 727 ++- nova/compute/monitors/__init__.py | 25 +- nova/compute/monitors/base.py | 29 +- nova/compute/monitors/cpu/virt_driver.py | 12 +- nova/compute/opts.py | 42 - nova/compute/power_state.py | 27 +- nova/compute/resource_tracker.py | 338 +- nova/compute/resources/__init__.py | 142 - nova/compute/resources/base.py | 93 - nova/compute/rpcapi.py | 396 +- nova/compute/task_states.py | 88 +- nova/compute/utils.py | 113 +- nova/compute/vm_states.py | 68 +- nova/conductor/api.py | 36 +- nova/conductor/manager.py | 165 +- nova/conductor/rpcapi.py | 22 +- nova/conductor/tasks/live_migrate.py | 37 +- nova/conductor/tasks/migrate.py | 54 +- nova/conf/__init__.py | 175 +- nova/conf/api.py | 356 ++ nova/conf/availability_zone.py | 43 +- nova/conf/base.py | 101 + nova/conf/cache.py | 26 + nova/conf/cells.py | 334 +- nova/conf/cert.py | 54 +- nova/conf/cinder.py | 104 + nova/conf/cloudpipe.py | 121 + nova/conf/compute.py | 716 ++- nova/conf/conductor.py | 96 +- nova/conf/configdrive.py | 111 + nova/conf/console.py | 83 + nova/conf/consoleauth.py | 54 + nova/conf/crypto.py | 111 + nova/conf/database.py | 200 + nova/conf/ephemeral_storage.py | 40 +- nova/conf/exceptions.py | 39 + nova/conf/flavors.py | 37 + nova/conf/floating_ips.py | 97 + nova/conf/glance.py | 91 + nova/conf/guestfs.py | 56 + nova/conf/hyperv.py | 334 + nova/conf/image_file_url.py | 81 + nova/conf/ipv6.py | 45 + nova/conf/ironic.py | 154 +- nova/conf/key_manager.py | 97 + nova/conf/libvirt.py | 828 +++ nova/conf/mks.py | 60 + nova/conf/netconf.py | 80 + nova/conf/network.py | 774 +++ nova/conf/neutron.py | 122 + nova/conf/notifications.py | 77 + nova/conf/novnc.py | 56 + nova/conf/osapi_v21.py | 88 + nova/conf/paths.py | 97 + nova/conf/pci.py | 73 +- nova/conf/placement.py | 50 + nova/conf/quota.py | 252 + nova/conf/rdp.py | 93 + nova/conf/remote_debug.py | 70 + nova/conf/rpc.py | 56 + nova/conf/s3.py | 73 + nova/conf/scheduler.py | 167 +- nova/conf/serial_console.py | 26 +- nova/conf/service.py | 105 + nova/conf/servicegroup.py | 50 + nova/conf/spice.py | 109 + nova/conf/ssl.py | 24 + nova/conf/upgrade_levels.py | 165 + nova/conf/virt.py | 338 +- nova/conf/vmware.py | 291 + nova/conf/vnc.py | 315 +- nova/conf/workarounds.py | 136 + nova/conf/wsgi.py | 252 +- nova/conf/xenserver.py | 535 ++ nova/conf/xvp.py | 63 + nova/config.py | 38 +- nova/console/api.py | 9 +- nova/console/fake.py | 4 +- nova/console/manager.py | 39 +- nova/console/rpcapi.py | 18 +- nova/console/serial.py | 15 +- nova/console/websocketproxy.py | 11 +- nova/console/xvp.py | 45 +- nova/consoleauth/__init__.py | 10 - nova/consoleauth/manager.py | 24 +- nova/consoleauth/rpcapi.py | 11 +- nova/context.py | 153 +- nova/crypto.py | 84 +- nova/db/api.py | 137 +- nova/db/base.py | 14 +- nova/db/migration.py | 8 +- nova/db/sqlalchemy/api.py | 738 +-- .../migrate_repo/versions/001_cell_mapping.py | 7 +- .../migrate_repo/versions/002_instance_mapping.py | 7 +- .../migrate_repo/versions/003_host_mapping.py | 7 +- .../migrate_repo/versions/004_add_request_spec.py | 7 +- .../migrate_repo/versions/005_flavors.py | 8 +- .../migrate_repo/versions/008_placeholder.py | 23 + .../migrate_repo/versions/009_placeholder.py | 23 + .../migrate_repo/versions/010_placeholder.py | 23 + .../migrate_repo/versions/011_placeholder.py | 23 + .../migrate_repo/versions/012_placeholder.py | 23 + .../versions/013_build_request_extended_attrs.py | 52 + .../migrate_repo/versions/014_keypairs.py | 48 + .../versions/015_build_request_nullable_columns.py | 48 + .../versions/016_resource_providers.py | 110 + .../migrate_repo/versions/017_aggregates.py | 73 + .../migrate_repo/versions/018_instance_groups.py | 71 + .../019_build_request_add_block_device_mapping.py | 26 + .../020_block_device_mappings_mediumtext.py | 24 + nova/db/sqlalchemy/api_models.py | 283 +- .../sqlalchemy/migrate_repo/versions/216_havana.py | 128 +- .../migrate_repo/versions/247_nullable_mismatch.py | 11 +- .../versions/252_add_instance_extra_table.py | 6 +- .../versions/267_instance_uuid_non_nullable.py | 3 - .../versions/271_sqlite_postgresql_indexes.py | 2 +- .../versions/296_add_missing_db2_fkeys.py | 80 +- .../versions/314_add_resource_provider_tables.py | 7 +- .../318_resource_provider_name_aggregates.py | 17 +- .../migrate_repo/versions/320_placeholder.py | 23 + .../migrate_repo/versions/321_placeholder.py | 23 + .../migrate_repo/versions/322_placeholder.py | 23 + .../migrate_repo/versions/323_placeholder.py | 23 + .../migrate_repo/versions/324_placeholder.py | 23 + .../migrate_repo/versions/325_placeholder.py | 23 + .../migrate_repo/versions/326_placeholder.py | 23 + .../migrate_repo/versions/327_placeholder.py | 23 + .../migrate_repo/versions/328_placeholder.py | 23 + .../migrate_repo/versions/329_placeholder.py | 23 + .../330_enforce_mitaka_online_migrations.py | 47 + .../versions/331_add_tag_to_vifs_and_bdm.py | 47 + .../migrate_repo/versions/332_keypair_in_extra.py | 28 + .../versions/333_add_console_auth_tokens_table.py | 50 + .../versions/334_device_metadata_in_extra.py | 28 + nova/db/sqlalchemy/migration.py | 36 +- nova/db/sqlalchemy/models.py | 66 +- nova/debugger.py | 31 +- nova/exception.py | 254 +- nova/exception_wrapper.py | 94 + nova/hacking/checks.py | 228 +- nova/hash_ring.py | 134 + nova/image/download/file.py | 33 +- nova/image/glance.py | 629 +- nova/image/s3.py | 37 +- nova/ipv6/account_identifier.py | 24 +- nova/ipv6/api.py | 9 +- nova/ipv6/rfc2462.py | 14 +- nova/keymgr/__init__.py | 62 +- nova/keymgr/barbican.py | 357 -- nova/keymgr/conf_key_mgr.py | 100 +- nova/keymgr/key.py | 90 - nova/keymgr/key_mgr.py | 102 - nova/keymgr/mock_key_mgr.py | 131 - nova/keymgr/not_implemented_key_mgr.py | 41 - nova/keymgr/single_key_mgr.py | 72 - nova/locale/cs/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/cs/LC_MESSAGES/nova-log-error.po | 143 +- nova/locale/cs/LC_MESSAGES/nova-log-info.po | 77 +- nova/locale/cs/LC_MESSAGES/nova-log-warning.po | 153 +- nova/locale/cs/LC_MESSAGES/nova.po | 779 +-- nova/locale/de/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/de/LC_MESSAGES/nova-log-error.po | 134 +- nova/locale/de/LC_MESSAGES/nova-log-info.po | 78 +- nova/locale/de/LC_MESSAGES/nova.po | 1152 ++-- nova/locale/es/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/es/LC_MESSAGES/nova-log-error.po | 131 +- nova/locale/es/LC_MESSAGES/nova-log-info.po | 75 +- nova/locale/es/LC_MESSAGES/nova-log-warning.po | 90 +- nova/locale/es/LC_MESSAGES/nova.po | 1383 ++--- nova/locale/es_MX/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/fr/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/fr/LC_MESSAGES/nova-log-error.po | 140 +- nova/locale/fr/LC_MESSAGES/nova-log-info.po | 68 +- nova/locale/fr/LC_MESSAGES/nova-log-warning.po | 86 +- nova/locale/fr/LC_MESSAGES/nova.po | 1226 ++-- nova/locale/it/LC_MESSAGES/nova-log-error.po | 93 +- nova/locale/it/LC_MESSAGES/nova-log-info.po | 63 +- nova/locale/it/LC_MESSAGES/nova.po | 1370 ++-- nova/locale/ja/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/ja/LC_MESSAGES/nova.po | 1910 +++--- nova/locale/ko_KR/LC_MESSAGES/nova-log-critical.po | 19 + nova/locale/ko_KR/LC_MESSAGES/nova-log-error.po | 1156 ++++ nova/locale/ko_KR/LC_MESSAGES/nova-log-info.po | 1195 ++++ nova/locale/ko_KR/LC_MESSAGES/nova-log-warning.po | 1667 +++++ nova/locale/ko_KR/LC_MESSAGES/nova.po | 1309 ++-- nova/locale/nova-log-critical.pot | 24 - nova/locale/nova-log-error.pot | 1541 ----- nova/locale/nova-log-info.pot | 1458 ----- nova/locale/nova-log-warning.pot | 1987 ------ nova/locale/nova.pot | 6560 -------------------- nova/locale/pa_IN/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/pt_BR/LC_MESSAGES/nova-log-critical.po | 19 + nova/locale/pt_BR/LC_MESSAGES/nova-log-error.po | 1187 ++++ nova/locale/pt_BR/LC_MESSAGES/nova-log-info.po | 1246 ++++ nova/locale/pt_BR/LC_MESSAGES/nova.po | 1222 ++-- nova/locale/ru/LC_MESSAGES/nova.po | 1341 ++-- nova/locale/tr_TR/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-error.po | 130 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-info.po | 72 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-warning.po | 84 +- nova/locale/tr_TR/LC_MESSAGES/nova.po | 740 +-- nova/locale/zh_CN/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-error.po | 139 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-info.po | 73 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-warning.po | 126 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 814 +-- nova/locale/zh_TW/LC_MESSAGES/nova-log-critical.po | 8 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 787 +-- nova/manager.py | 5 +- nova/mks/__init__.py | 31 - nova/netconf.py | 45 - nova/network/__init__.py | 51 +- nova/network/api.py | 112 +- nova/network/base_api.py | 6 +- nova/network/driver.py | 10 +- nova/network/floating_ips.py | 34 +- nova/network/ldapdns.py | 44 +- nova/network/linux_net.py | 155 +- nova/network/manager.py | 174 +- nova/network/model.py | 12 +- nova/network/neutronv2/api.py | 1154 +++- nova/network/neutronv2/constants.py | 1 + nova/network/opts.py | 44 - nova/network/os_vif_util.py | 379 ++ nova/network/rpcapi.py | 34 +- nova/network/security_group/neutron_driver.py | 6 +- nova/network/security_group/openstack_driver.py | 33 +- nova/network/security_group/security_group_base.py | 7 +- nova/notifications.py | 465 -- nova/notifications/__init__.py | 27 + nova/notifications/base.py | 504 ++ .../common => notifications/objects}/__init__.py | 0 nova/notifications/objects/base.py | 171 + nova/notifications/objects/exception.py | 52 + nova/notifications/objects/instance.py | 270 + nova/notifications/objects/service.py | 63 + nova/objects/__init__.py | 2 +- nova/objects/aggregate.py | 425 +- nova/objects/bandwidth_usage.py | 8 +- nova/objects/base.py | 21 + nova/objects/block_device.py | 10 +- nova/objects/build_request.py | 359 +- nova/objects/cell_mapping.py | 22 + nova/objects/compute_node.py | 152 +- nova/objects/ec2.py | 6 +- nova/objects/fields.py | 550 +- nova/objects/flavor.py | 529 +- nova/objects/floating_ip.py | 13 + nova/objects/host_mapping.py | 37 +- nova/objects/image_meta.py | 32 +- nova/objects/instance.py | 253 +- nova/objects/instance_group.py | 353 +- nova/objects/instance_info_cache.py | 11 +- nova/objects/instance_mapping.py | 53 +- nova/objects/instance_numa_topology.py | 15 - nova/objects/instance_pci_requests.py | 22 +- nova/objects/keypair.py | 206 +- nova/objects/migrate_data.py | 39 +- nova/objects/migration_context.py | 35 +- nova/objects/monitor_metric.py | 2 +- nova/objects/network.py | 22 +- nova/objects/network_request.py | 51 +- nova/objects/notification.py | 150 - nova/objects/numa.py | 35 +- nova/objects/pci_device.py | 85 +- nova/objects/request_spec.py | 149 +- nova/objects/resource_provider.py | 789 ++- nova/objects/security_group.py | 6 +- nova/objects/service.py | 144 +- nova/objects/tag.py | 2 + nova/objects/virt_device_metadata.py | 118 + nova/objects/virtual_interface.py | 41 +- nova/openstack/common/README | 16 - nova/openstack/common/_i18n.py | 45 - nova/openstack/common/cliutils.py | 272 - nova/opts.py | 109 - nova/paths.py | 67 - nova/pci/devspec.py | 33 +- nova/pci/manager.py | 124 +- nova/pci/request.py | 7 + nova/pci/stats.py | 25 +- nova/pci/utils.py | 39 +- nova/policies/__init__.py | 192 + nova/policies/admin_actions.py | 45 + nova/policies/admin_password.py | 36 + nova/policies/agents.py | 36 + nova/policies/aggregates.py | 56 + nova/policies/assisted_volume_snapshots.py | 38 + nova/policies/attach_interfaces.py | 44 + nova/policies/availability_zone.py | 38 + nova/policies/baremetal_nodes.py | 36 + nova/policies/base.py | 32 + nova/policies/block_device_mapping.py | 32 + nova/policies/block_device_mapping_v1.py | 32 + nova/policies/cells.py | 48 + nova/policies/cells_scheduler.py | 33 + nova/policies/certificates.py | 38 + nova/policies/cloudpipe.py | 36 + nova/policies/config_drive.py | 36 + nova/policies/console_auth_tokens.py | 36 + nova/policies/console_output.py | 36 + nova/policies/consoles.py | 44 + nova/policies/create_backup.py | 36 + nova/policies/deferred_delete.py | 36 + nova/policies/evacuate.py | 36 + nova/policies/extended_availability_zone.py | 36 + nova/policies/extended_server_attributes.py | 36 + nova/policies/extended_status.py | 36 + nova/policies/extended_volumes.py | 36 + nova/policies/extension_info.py | 32 + nova/policies/extensions.py | 36 + nova/policies/fixed_ips.py | 36 + nova/policies/flavor_access.py | 42 + nova/policies/flavor_extra_specs.py | 47 + nova/policies/flavor_manage.py | 36 + nova/policies/flavor_rxtx.py | 36 + nova/policies/flavors.py | 36 + nova/policies/floating_ip_dns.py | 42 + nova/policies/floating_ip_pools.py | 36 + nova/policies/floating_ips.py | 36 + nova/policies/floating_ips_bulk.py | 36 + nova/policies/fping.py | 39 + nova/policies/hide_server_addresses.py | 36 + nova/policies/hosts.py | 36 + nova/policies/hypervisors.py | 36 + nova/policies/image_metadata.py | 32 + nova/policies/image_size.py | 36 + nova/policies/images.py | 32 + nova/policies/instance_actions.py | 39 + nova/policies/instance_usage_audit_log.py | 36 + nova/policies/ips.py | 38 + nova/policies/keypairs.py | 48 + nova/policies/limits.py | 36 + nova/policies/lock_server.py | 41 + nova/policies/migrate_server.py | 38 + nova/policies/migrations.py | 35 + nova/policies/multinic.py | 36 + nova/policies/multiple_create.py | 32 + nova/policies/networks.py | 39 + nova/policies/networks_associate.py | 36 + nova/policies/pause_server.py | 38 + nova/policies/pci.py | 44 + nova/policies/quota_class_sets.py | 38 + nova/policies/quota_sets.py | 47 + nova/policies/remote_consoles.py | 36 + nova/policies/rescue.py | 36 + nova/policies/scheduler_hints.py | 32 + nova/policies/security_group_default_rules.py | 36 + nova/policies/security_groups.py | 36 + nova/policies/server_diagnostics.py | 36 + nova/policies/server_external_events.py | 35 + nova/policies/server_groups.py | 36 + nova/policies/server_metadata.py | 50 + nova/policies/server_password.py | 36 + nova/policies/server_tags.py | 50 + nova/policies/server_usage.py | 36 + nova/policies/servers.py | 53 + nova/policies/servers_migrations.py | 44 + nova/policies/services.py | 36 + nova/policies/shelve.py | 41 + nova/policies/simple_tenant_usage.py | 38 + nova/policies/suspend_server.py | 38 + nova/policies/tenant_networks.py | 36 + nova/policies/used_limits.py | 36 + nova/policies/user_data.py | 32 + nova/policies/versions.py | 32 + nova/policies/virtual_interfaces.py | 36 + nova/policies/volumes.py | 36 + nova/policies/volumes_attachments.py | 47 + nova/policy.py | 100 +- nova/quota.py | 200 +- nova/rdp/__init__.py | 31 - nova/rpc.py | 125 +- nova/scheduler/chance.py | 6 +- nova/scheduler/client/report.py | 427 ++ nova/scheduler/driver.py | 32 +- nova/scheduler/filters/affinity_filter.py | 29 +- .../aggregate_image_properties_isolation.py | 11 +- .../filters/compute_capabilities_filter.py | 17 +- nova/scheduler/filters/core_filter.py | 15 +- nova/scheduler/filters/disk_filter.py | 13 + nova/scheduler/filters/metrics_filter.py | 7 +- nova/scheduler/host_manager.py | 55 +- nova/scheduler/ironic_host_manager.py | 26 +- nova/scheduler/rpcapi.py | 5 + nova/scheduler/utils.py | 2 - nova/scheduler/weights/affinity.py | 16 +- nova/service.py | 124 +- nova/servicegroup/api.py | 14 +- nova/servicegroup/drivers/db.py | 7 +- nova/servicegroup/drivers/mc.py | 7 +- nova/signature_utils.py | 2 +- nova/spice/__init__.py | 45 - nova/test.py | 51 +- .../functional/api/openstack/placement/__init__.py | 0 .../functional/api/openstack/placement/fixtures.py | 98 + .../openstack/placement/gabbits/allocations.yaml | 343 + .../openstack/placement/gabbits/basic-http.yaml | 137 + .../openstack/placement/gabbits/confirm-auth.yaml | 22 + .../api/openstack/placement/gabbits/inventory.yaml | 319 + .../openstack/placement/gabbits/microversion.yaml | 82 + .../placement/gabbits/resource-provider.yaml | 244 + .../api/openstack/placement/gabbits/unicode.yaml | 72 + .../api/openstack/placement/gabbits/usage.yaml | 34 + .../placement/gabbits/with-allocations.yaml | 25 + .../api/openstack/placement/test_placement_api.py | 27 + .../api/openstack/placement/test_report_client.py | 142 + .../extensions-list-resp-v2.json.tpl | 724 --- .../extensions-list-resp-v21-compatible.json.tpl | 804 --- .../all_extensions/extensions-list-resp.json.tpl | 796 --- .../all_extensions/flavor-get-resp.json.tpl | 24 - .../all_extensions/flavors-detail-resp.json.tpl | 114 - .../all_extensions/flavors-list-resp.json.tpl | 74 - .../server-action-confirm-resize.json.tpl | 3 - .../server-action-create-image.json.tpl | 9 - .../all_extensions/server-action-reboot.json.tpl | 5 - .../server-action-rebuild-resp.json.tpl | 56 - .../all_extensions/server-action-rebuild.json.tpl | 18 - .../all_extensions/server-action-resize.json.tpl | 5 - .../server-action-revert-resize.json.tpl | 3 - .../all_extensions/server-create-req.json.tpl | 10 - .../all_extensions/server-get-resp.json.tpl | 74 - .../all_extensions/servers-details-resp.json.tpl | 76 - .../all_extensions/servers-list-resp.json.tpl | 18 - .../extension-info/extensions-get-resp-v2.json.tpl | 10 - .../extensions-list-resp-v21-compatible.json.tpl | 804 +++ .../extension-info/extensions-list-resp.json.tpl | 796 +++ .../extensions-list-resp-v21-compatible.json.tpl | 804 +++ .../api_samples/extensions-list-resp.json.tpl | 796 +++ .../flavor-access-create-resp.json.tpl | 23 - .../flavor-access-detail-resp.json.tpl | 109 - .../flavor-access/flavor-access-show-resp.json.tpl | 23 - ...ate-req.json.tpl => flavor-create-req.json.tpl} | 0 .../v2.7/flavor-access-add-tenant-req.json.tpl | 5 + .../flavor-access/v2.7/flavor-create-req.json.tpl | 10 + .../flavor-manage/flavor-create-post-req.json.tpl | 3 +- .../flavor-manage/flavor-create-post-resp.json.tpl | 3 +- .../api_samples/flavors/flavor-get-resp.json.tpl | 3 +- .../flavors/flavors-detail-resp.json.tpl | 15 +- .../keypairs/v2.35/keypairs-list-resp.json.tpl | 18 + .../v2.35/keypairs-list-user1-resp.json.tpl | 12 + .../v2.35/keypairs-list-user2-resp.json.tpl | 18 + .../keypairs/v2.35/keypairs-post-req.json.tpl | 7 + .../keypairs/v2.35/keypairs-post-resp.json.tpl | 10 + .../api_samples/limits/limit-get-resp.json.tpl | 8 +- .../api_samples/limits/v2-limit-get-resp.json.tpl | 87 - .../limits/v2.36/limit-get-resp.json.tpl | 21 + .../server-action-rebuild-resp.json.tpl | 55 - .../os-access-ips/server-action-rebuild.json.tpl | 11 - .../os-access-ips/server-get-resp.json.tpl | 57 - .../os-access-ips/server-post-req.json.tpl | 12 - .../os-access-ips/server-post-resp.json.tpl | 16 - .../os-access-ips/servers-details-resp.json.tpl | 59 - .../api_samples/os-agents/agent-post-resp.json.tpl | 2 +- .../api_samples/os-agents/agents-get-resp.json.tpl | 2 +- .../aggregates-list-get-resp.json.tpl | 4 +- .../snapshot-create-assisted-req.json.tpl | 3 +- .../snapshot-create-assisted-resp.json.tpl | 2 +- .../attach-interfaces-create-net_id-req.json.tpl | 10 + .../availability-zone-post-resp.json.tpl | 6 + .../server-config-drive-get-resp.json.tpl | 58 - .../os-config-drive/server-post-req.json.tpl | 12 - .../os-config-drive/server-post-resp.json.tpl | 16 - .../servers-config-drive-details-resp.json.tpl | 60 - .../list-servers-detail-get.json.tpl | 60 - .../server-action-rebuild-req.json.tpl | 6 - .../server-action-rebuild-resp.json.tpl | 56 - .../os-disk-config/server-get-resp.json.tpl | 58 - .../os-disk-config/server-post-req.json.tpl | 11 - .../os-disk-config/server-post-resp.json.tpl | 17 - .../os-disk-config/server-resize-post-req.json.tpl | 6 - .../v2.29/server-evacuate-find-host-req.json.tpl | 5 + .../os-evacuate/v2.29/server-evacuate-req.json.tpl | 7 + .../server-get-resp.json.tpl | 58 - .../servers-detail-resp.json.tpl | 60 - .../server-get-resp.json.tpl | 60 - .../servers-detail-resp.json.tpl | 62 - .../v2.16/server-get-resp.json.tpl | 69 - .../v2.16/servers-detail-resp.json.tpl | 71 - .../os-extended-status/server-get-resp.json.tpl | 61 - .../servers-detail-resp.json.tpl | 61 - .../os-extended-volumes/server-get-resp.json.tpl | 61 - .../servers-detail-resp.json.tpl | 62 - .../os-flavor-rxtx/flavor-rxtx-get-resp.json.tpl | 24 - .../os-flavor-rxtx/flavor-rxtx-list-resp.json.tpl | 114 - .../os-flavor-rxtx/flavor-rxtx-post-req.json.tpl | 10 - .../os-flavor-rxtx/flavor-rxtx-post-resp.json.tpl | 24 - .../server-get-resp.json.tpl | 20 + .../servers-details-resp.json.tpl | 20 + .../v2.28/hypervisors-detail-resp.json.tpl | 43 + .../v2.28/hypervisors-list-resp.json.tpl | 10 + .../v2.28/hypervisors-search-resp.json.tpl | 10 + .../v2.28/hypervisors-show-resp.json.tpl | 41 + .../v2.28/hypervisors-statistics-resp.json.tpl | 16 + .../v2.28/hypervisors-uptime-resp.json.tpl | 9 + .../v2.28/hypervisors-with-servers-resp.json.tpl | 20 + .../hypervisors-without-servers-resp.json.tpl | 10 + .../v2.33/hypervisors-detail-resp.json.tpl | 49 + .../v2.33/hypervisors-list-resp.json.tpl | 16 + .../inst-usage-audit-log-index-get-resp.json.tpl | 37 +- .../inst-usage-audit-log-show-get-resp.json.tpl | 37 +- .../v2.30/live-migrate-server.json.tpl | 7 + .../multiple-create-no-resv-post-resp.json.tpl | 6 + .../os-networks/network-show-resp.json.tpl | 2 +- .../os-networks/networks-disassociate-req.json.tpl | 3 - .../os-networks/networks-list-resp.json.tpl | 2 +- .../server-action-rebuild-req.json.tpl | 17 - .../server-action-rebuild-resp.json.tpl | 55 - .../os-personality/server-post-req.json.tpl | 16 - .../os-personality/server-post-resp.json.tpl | 16 - ...action-rebuild-preserve-ephemeral-resp.json.tpl | 1 + .../quotas-show-detail-get-resp.json.tpl | 75 + .../os-rescue/server-get-resp-rescue.json.tpl | 19 +- .../os-rescue/server-get-resp-unrescue.json.tpl | 20 +- .../scheduler-hints-post-req.json.tpl | 10 - .../scheduler-hints-post-resp.json.tpl | 16 - .../os-security-groups/server-get-resp.json.tpl | 58 - .../os-security-groups/server-post-req.json.tpl | 13 - .../os-security-groups/server-post-resp.json.tpl | 17 - .../servers-detail-resp.json.tpl | 59 - .../v2.26/server-tags-index-resp.json.tpl | 3 + .../v2.26/server-tags-put-all-req.json.tpl | 3 + .../v2.26/server-tags-put-all-resp.json.tpl | 3 + .../v2.26/server-tags-show-details-resp.json.tpl | 86 + .../v2.26/servers-tags-details-resp.json.tpl | 88 + .../os-server-usage/server-get-resp.json.tpl | 59 - .../os-server-usage/servers-detail-resp.json.tpl | 60 - .../simple-tenant-usage-get-detail.json.tpl | 29 + .../os-used-limits/usedlimits-get-resp.json.tpl | 26 - .../os-used-limits/v2-usedlimits-get-resp.json.tpl | 93 - .../os-user-data/userdata-post-req.json.tpl | 11 - .../os-user-data/userdata-post-resp.json.tpl | 16 - .../servers/attach-interfaces-list-resp.json.tpl | 16 + .../servers/attach-interfaces-show-resp.json.tpl | 14 + .../servers/availability-zone-detail-resp.json.tpl | 55 + .../servers/server-action-rebuild-resp.json.tpl | 1 + .../servers/server-action-rebuild.json.tpl | 9 +- .../servers/server-action-resize.json.tpl | 3 +- .../servers/server-create-req-v237.json.tpl | 30 + .../api_samples/servers/server-create-req.json.tpl | 19 +- .../api_samples/servers/server-get-resp.json.tpl | 20 + .../api_samples/servers/server-post-req.json.tpl | 12 - .../api_samples/servers/server-post-resp.json.tpl | 16 - .../servers/servers-details-resp.json.tpl | 20 + .../servers/v2.16/server-get-resp.json.tpl | 86 + .../servers/v2.16/servers-details-resp.json.tpl | 88 + .../v2.16}/servers-list-resp.json.tpl | 0 .../v2.19/server-action-rebuild-resp.json.tpl | 1 + .../servers/v2.19/server-create-req.json.tpl | 13 + .../v2.19}/server-create-resp.json.tpl | 0 .../servers/v2.19/server-get-resp.json.tpl | 28 + .../servers/v2.19/server-post-req.json.tpl | 13 - .../servers/v2.19/server-post-resp.json.tpl | 16 - .../servers/v2.19/server-put-resp.json.tpl | 1 + .../servers/v2.19/servers-details-resp.json.tpl | 28 + .../servers/v2.3/server-get-resp.json.tpl | 84 + .../servers/v2.3/servers-details-resp.json.tpl | 86 + .../servers/v2.3/servers-list-resp.json.tpl | 18 + .../servers/v2.32/server-create-req.json.tpl | 18 + .../servers/v2.32/server-create-resp.json.tpl | 22 + .../servers/v2.37/server-create-req.json.tpl | 8 + .../servers/v2.37/server-create-resp.json.tpl | 22 + .../servers/v2.9/server-get-resp.json.tpl | 27 + .../servers/v2.9/servers-details-resp.json.tpl | 27 + .../test_assisted_volume_snapshots.py | 16 +- .../test_block_device_mapping_boot.py | 18 +- .../test_extended_availability_zone.py | 59 - .../test_extended_server_attributes.py | 98 - .../test_instance_usage_audit_log.py | 58 +- .../test_preserve_ephemeral_rebuild.py | 16 +- .../test_security_group_default_rules.py | 16 +- .../test_server_external_events.py | 16 +- .../functional/db/test_instance_group_model.py | 59 + .../notification_sample_base.py | 123 +- .../test_exception_notification.py | 37 + .../functional/regressions/test_bug_1541691.py | 20 +- .../functional/regressions/test_bug_1552888.py | 2 +- .../functional/regressions/test_bug_1554631.py | 112 + .../functional/regressions/test_bug_1558866.py | 75 + .../functional/regressions/test_bug_1568208.py | 34 + .../functional/regressions/test_bug_1620248.py | 55 + .../functional/regressions/test_bug_1627838.py | 32 + .../test_legacy_v2_compatible_wrapper.py | 14 +- .../functional/wsgi/test_attach_interfaces.py | 95 + .../openstack/compute/admin_only_action_common.py | 8 +- .../api/openstack/compute/legacy_v2/test_auth.py | 59 - .../openstack/compute/legacy_v2/test_extensions.py | 630 -- .../openstack/compute/legacy_v2/test_servers.py | 3321 ---------- .../unit/api/openstack/compute/test_access_ips.py | 325 +- .../api/openstack/compute/test_admin_actions.py | 7 - .../api/openstack/compute/test_admin_password.py | 126 +- .../unit/api/openstack/compute/test_agents.py | 29 - .../unit/api/openstack/compute/test_aggregates.py | 90 +- .../openstack/compute/test_attach_interfaces.py | 74 +- .../openstack/compute/test_availability_zone.py | 44 +- .../api/openstack/compute/test_baremetal_nodes.py | 39 +- .../openstack/compute/test_block_device_mapping.py | 85 +- .../compute/test_block_device_mapping_v1.py | 123 +- .../api/openstack/compute/test_certificates.py | 40 +- .../unit/api/openstack/compute/test_cloudpipe.py | 22 +- .../api/openstack/compute/test_cloudpipe_update.py | 16 +- .../api/openstack/compute/test_config_drive.py | 52 +- .../openstack/compute/test_console_auth_tokens.py | 24 +- .../api/openstack/compute/test_console_output.py | 39 +- .../unit/api/openstack/compute/test_consoles.py | 38 +- .../api/openstack/compute/test_create_backup.py | 48 - .../api/openstack/compute/test_createserverext.py | 265 - .../api/openstack/compute/test_deferred_delete.py | 82 +- .../unit/api/openstack/compute/test_disk_config.py | 51 +- .../unit/api/openstack/compute/test_evacuate.py | 154 +- .../compute/test_extended_availability_zone.py | 20 +- .../openstack/compute/test_extended_hypervisors.py | 24 +- .../api/openstack/compute/test_extended_ips.py | 19 +- .../api/openstack/compute/test_extended_ips_mac.py | 33 +- .../compute/test_extended_rescue_with_image.py | 62 - .../compute/test_extended_server_attributes.py | 31 +- .../api/openstack/compute/test_extended_status.py | 18 +- .../test_extended_virtual_interfaces_net.py | 110 - .../api/openstack/compute/test_extended_volumes.py | 17 +- .../api/openstack/compute/test_extension_info.py | 89 +- .../unit/api/openstack/compute/test_extensions.py | 120 - .../unit/api/openstack/compute/test_fixed_ips.py | 39 +- .../api/openstack/compute/test_flavor_access.py | 101 +- .../api/openstack/compute/test_flavor_disabled.py | 25 +- .../api/openstack/compute/test_flavor_manage.py | 161 +- .../unit/api/openstack/compute/test_flavor_rxtx.py | 14 +- .../unit/api/openstack/compute/test_flavor_swap.py | 19 +- .../api/openstack/compute/test_flavorextradata.py | 21 +- .../unit/api/openstack/compute/test_flavors.py | 57 +- .../openstack/compute/test_flavors_extra_specs.py | 139 +- .../api/openstack/compute/test_floating_ip_dns.py | 88 +- .../openstack/compute/test_floating_ip_pools.py | 18 +- .../api/openstack/compute/test_floating_ips.py | 177 +- .../openstack/compute/test_floating_ips_bulk.py | 57 +- .../compute/test_hide_server_addresses.py | 13 +- .../openstack/compute/test_hypervisor_status.py | 32 +- .../unit/api/openstack/compute/test_hypervisors.py | 271 +- .../api/openstack/compute/test_image_metadata.py | 21 - .../unit/api/openstack/compute/test_image_size.py | 14 +- .../unit/api/openstack/compute/test_images.py | 30 +- .../api/openstack/compute/test_instance_actions.py | 76 +- .../compute/test_instance_usage_audit_log.py | 26 +- .../unit/api/openstack/compute/test_keypairs.py | 137 +- .../unit/api/openstack/compute/test_limits.py | 744 +-- .../unit/api/openstack/compute/test_lock_server.py | 70 +- .../api/openstack/compute/test_microversions.py | 76 +- .../api/openstack/compute/test_migrate_server.py | 166 +- .../unit/api/openstack/compute/test_migrations.py | 26 +- .../unit/api/openstack/compute/test_multinic.py | 26 +- .../api/openstack/compute/test_multiple_create.py | 90 +- .../unit/api/openstack/compute/test_networks.py | 286 +- .../compute/test_neutron_security_groups.py | 83 +- .../api/openstack/compute/test_pause_server.py | 62 +- .../api/openstack/compute/test_quota_classes.py | 22 - .../unit/api/openstack/compute/test_quotas.py | 311 +- .../api/openstack/compute/test_remote_consoles.py | 22 +- .../unit/api/openstack/compute/test_rescue.py | 127 +- .../api/openstack/compute/test_scheduler_hints.py | 57 +- .../compute/test_security_group_default_rules.py | 52 +- .../api/openstack/compute/test_security_groups.py | 119 +- .../api/openstack/compute/test_server_actions.py | 223 +- .../openstack/compute/test_server_diagnostics.py | 23 +- .../compute/test_server_external_events.py | 10 +- .../openstack/compute/test_server_group_quotas.py | 23 +- .../api/openstack/compute/test_server_groups.py | 64 +- .../api/openstack/compute/test_server_metadata.py | 29 +- .../openstack/compute/test_server_migrations.py | 22 +- .../api/openstack/compute/test_server_password.py | 14 - .../openstack/compute/test_server_reset_state.py | 15 +- .../openstack/compute/test_server_start_stop.py | 251 +- .../unit/api/openstack/compute/test_server_tags.py | 315 + .../api/openstack/compute/test_server_usage.py | 24 +- .../unit/api/openstack/compute/test_serversV21.py | 1140 ++-- .../unit/api/openstack/compute/test_services.py | 65 +- .../unit/api/openstack/compute/test_shelve.py | 177 +- .../openstack/compute/test_simple_tenant_usage.py | 101 +- .../unit/api/openstack/compute/test_snapshots.py | 28 +- .../api/openstack/compute/test_suspend_server.py | 53 +- .../api/openstack/compute/test_tenant_networks.py | 63 +- .../unit/api/openstack/compute/test_urlmap.py | 33 +- .../unit/api/openstack/compute/test_used_limits.py | 39 +- .../unit/api/openstack/compute/test_user_data.py | 20 +- .../unit/api/openstack/compute/test_versions.py | 53 +- .../openstack/compute/test_virtual_interfaces.py | 27 +- .../unit/api/openstack/compute/test_volumes.py | 183 +- .../unit/api/openstack/placement/test_handler.py | 99 + .../api/openstack/placement/test_requestlog.py | 63 + .../unit/api/openstack/placement/test_util.py | 220 + .../unit/api/openstack/test_api_version_request.py | 24 +- .../openstack/test_legacy_v2_compatible_wrapper.py | 14 +- .../api_samples_test_base/test_compare_result.py | 1 + .../unit/compute/monitors/cpu/test_virt_driver.py | 6 +- .../unit/conductor/tasks/test_live_migrate.py | 45 +- .../unit/keymgr/test_not_implemented_key_mgr.py | 47 - .../network/security_group/test_neutron_driver.py | 182 +- .../notifications/objects/test_notification.py | 365 ++ .../unit/notifications/objects/test_service.py | 77 + .../unit/objects/test_instance_device_metadata.py | 91 + .../unit/objects/test_instance_numa_topology.py | 7 - .../unit/objects/test_instance_pci_requests.py | 31 +- .../scheduler/filters/test_affinity_filters.py | 45 +- ...aggregate_image_properties_isolation_filters.py | 30 + .../filters/test_compute_capabilities_filters.py | 71 +- .../unit/scheduler/filters/test_disk_filters.py | 24 +- .../filters/test_isolated_hosts_filter.py | 7 +- .../unit/scheduler/filters/test_type_filters.py | 7 +- .../unit/scheduler/test_ironic_host_manager.py | 132 +- .../scheduler/weights/test_weights_affinity.py | 4 +- .../unit/servicegroup/test_mc_servicegroup.py | 3 +- .../unit/virt/hyperv/test_block_device_manager.py | 362 ++ .../unit/virt/hyperv/test_livemigrationops.py | 163 +- .../unit/virt/hyperv/test_serialconsolehandler.py | 249 + .../unit/virt/hyperv/test_serialconsoleops.py | 116 + .../unit/virt/libvirt/volume/test_glusterfs.py | 15 +- .../unit/virt/libvirt/volume/test_remotefs.py | 88 +- .../unit/virt/libvirt/volume/test_vzstorage.py | 109 + .../unit/virt/vmwareapi/test_read_write_util.py | 44 - .../unit/virt/xenapi/image/test_bittorrent.py | 2 +- .../unit/virt/xenapi/image/test_vdi_through_dev.py | 2 +- .../virt/xenapi/plugins/test_partition_utils.py | 108 + .../unit/volume/encryptors/test_cryptsetup.py | 48 +- nova/utils.py | 199 +- nova/version.py | 2 +- nova/virt/__init__.py | 18 + nova/virt/block_device.py | 29 +- nova/virt/configdrive.py | 19 +- nova/virt/disk/api.py | 33 +- nova/virt/disk/mount/api.py | 20 +- nova/virt/disk/vfs/guestfs.py | 15 +- nova/virt/driver.py | 49 +- nova/virt/fake.py | 17 +- nova/virt/firewall.py | 3 +- nova/virt/hardware.py | 140 +- nova/virt/hyperv/block_device_manager.py | 225 + nova/virt/hyperv/constants.py | 17 + nova/virt/hyperv/driver.py | 53 +- nova/virt/hyperv/eventhandler.py | 71 +- nova/virt/hyperv/hostops.py | 34 +- nova/virt/hyperv/imagecache.py | 131 +- nova/virt/hyperv/livemigrationops.py | 70 +- nova/virt/hyperv/migrationops.py | 144 +- nova/virt/hyperv/pathutils.py | 112 +- nova/virt/hyperv/serialconsolehandler.py | 163 + nova/virt/hyperv/serialconsoleops.py | 114 + nova/virt/hyperv/serialproxy.py | 129 + nova/virt/hyperv/snapshotops.py | 22 +- nova/virt/hyperv/vif.py | 11 +- nova/virt/hyperv/vmops.py | 512 +- nova/virt/hyperv/volumeops.py | 60 +- nova/virt/image/model.py | 2 + nova/virt/imagecache.py | 51 +- nova/virt/images.py | 46 +- nova/virt/ironic/client_wrapper.py | 110 +- nova/virt/ironic/driver.py | 129 +- nova/virt/ironic/patcher.py | 10 +- nova/virt/libvirt/blockinfo.py | 10 +- nova/virt/libvirt/compat.py | 2 +- nova/virt/libvirt/config.py | 126 +- nova/virt/libvirt/designer.py | 20 +- nova/virt/libvirt/driver.py | 1957 +++--- nova/virt/libvirt/firewall.py | 8 +- nova/virt/libvirt/guest.py | 244 +- nova/virt/libvirt/host.py | 146 +- nova/virt/libvirt/imagebackend.py | 180 +- nova/virt/libvirt/imagecache.py | 329 +- nova/virt/libvirt/instancejobtracker.py | 2 +- nova/virt/libvirt/migration.py | 454 ++ nova/virt/libvirt/storage/lvm.py | 21 +- nova/virt/libvirt/storage/rbd_utils.py | 65 +- nova/virt/libvirt/utils.py | 40 +- nova/virt/libvirt/vif.py | 336 +- nova/virt/libvirt/volume/aoe.py | 11 +- nova/virt/libvirt/volume/disco.py | 10 +- nova/virt/libvirt/volume/fibrechannel.py | 8 +- nova/virt/libvirt/volume/glusterfs.py | 19 +- nova/virt/libvirt/volume/hgst.py | 6 +- nova/virt/libvirt/volume/iscsi.py | 29 +- nova/virt/libvirt/volume/iser.py | 15 +- nova/virt/libvirt/volume/net.py | 13 +- nova/virt/libvirt/volume/nfs.py | 18 +- nova/virt/libvirt/volume/quobyte.py | 15 +- nova/virt/libvirt/volume/remotefs.py | 45 +- nova/virt/libvirt/volume/scaleio.py | 6 +- nova/virt/libvirt/volume/scality.py | 23 +- nova/virt/libvirt/volume/smbfs.py | 19 +- nova/virt/libvirt/volume/volume.py | 25 +- nova/virt/libvirt/volume/vzstorage.py | 127 + nova/virt/netutils.py | 3 +- nova/virt/opts.py | 115 - nova/virt/osinfo.py | 6 +- nova/virt/vmwareapi/constants.py | 8 +- nova/virt/vmwareapi/driver.py | 69 +- nova/virt/vmwareapi/ds_util.py | 8 + nova/virt/vmwareapi/host.py | 43 +- nova/virt/vmwareapi/imagecache.py | 2 - nova/virt/vmwareapi/images.py | 123 +- nova/virt/vmwareapi/io_util.py | 195 - nova/virt/vmwareapi/read_write_util.py | 55 - nova/virt/vmwareapi/vif.py | 43 +- nova/virt/vmwareapi/vim_util.py | 18 +- nova/virt/vmwareapi/vm_util.py | 71 +- nova/virt/vmwareapi/vmops.py | 217 +- nova/virt/vmwareapi/volumeops.py | 6 +- nova/virt/xenapi/agent.py | 42 +- nova/virt/xenapi/client/objects.py | 6 + nova/virt/xenapi/client/session.py | 66 +- nova/virt/xenapi/driver.py | 101 +- nova/virt/xenapi/fake.py | 62 +- nova/virt/xenapi/image/bittorrent.py | 44 +- nova/virt/xenapi/image/glance.py | 6 +- nova/virt/xenapi/image/utils.py | 2 + nova/virt/xenapi/image/vdi_through_dev.py | 4 +- nova/virt/xenapi/pool.py | 21 +- nova/virt/xenapi/vif.py | 315 +- nova/virt/xenapi/vm_utils.py | 247 +- nova/virt/xenapi/vmops.py | 124 +- nova/virt/xenapi/volume_utils.py | 61 +- nova/volume/__init__.py | 34 - nova/volume/cinder.py | 149 +- nova/volume/encryptors/__init__.py | 5 +- nova/volume/encryptors/base.py | 2 +- nova/volume/encryptors/cryptsetup.py | 42 +- nova/volume/encryptors/luks.py | 3 - nova/volume/encryptors/nop.py | 3 - nova/wsgi.py | 26 +- openstack-common.conf | 7 - plugins/xenserver/doc/networking.rst | 59 +- .../xensource/scripts/ovs_configure_vif_flows.py | 4 +- .../networking/etc/xensource/scripts/vif_rules.py | 4 +- plugins/xenserver/xenapi/etc/xapi.d/plugins/agent | 2 +- plugins/xenserver/xenapi/etc/xapi.d/plugins/glance | 326 +- .../xenapi/etc/xapi.d/plugins/nova_plugin_version | 6 +- .../xenapi/etc/xapi.d/plugins/partition_utils.py | 87 + .../xenserver/xenapi/etc/xapi.d/plugins/utils.py | 15 + .../xenserver/xenapi/etc/xapi.d/plugins/xenhost | 159 +- ...config-to-cloudpipe-group-ab96ebcb3ffc5d82.yaml | 4 + ...to-config-to-crypto-group-ac6c75ccf3c815f1.yaml | 4 + .../notes/add-perf-event-e1385b6b6346fbda.yaml | 6 + ...wsgi-config-to-wsgi-group-712b8cd9ada65b2e.yaml | 4 + ...tes-moved-to-api-database-e1bd30909aaf79d3.yaml | 14 + .../apply-limits-to-qemu-img-8813f7a333ebdf69.yaml | 7 + ...live-migration-rest-check-675ec309a9ccc28e.yaml | 8 + ...-completion-auto-converge-3ddd3a40eaf3ef5b.yaml | 7 + ...tion-completion-post-copy-a7a3a986961c93d8.yaml | 10 + ...ls-instance-groups-api-db-910a44ef5f2f7769.yaml | 6 + ...p-fix-console-auth-tokens-16b1b1b402dca362.yaml | 4 + .../bp-hyper-v-remotefx-1474ef1a082ad1b0.yaml | 63 + .../notes/bp-instance-tags-3acb227083320796.yaml | 4 + .../bp-keypairs-pagination-634c46aaa1058161.yaml | 5 + .../notes/bp-memory-bw-4ceb971cfe1a2fd0.yaml | 10 + ...va-api-hypervsor-cpu-info-b84cddf8b70b88d2.yaml | 4 + ...zzo-cloud-storage-support-4f4cda52ca41538e.yaml | 12 + ...o-instance-resize-support-b523e6e8a0de0fbc.yaml | 7 + ...-virtuozzo-rescue-support-a0f69357a93e5e92.yaml | 3 + .../notes/bug-1559026-47c3fa3468d66b07.yaml | 6 + ...ll-id-db-sync-nova-manage-8504b54dd115a2e9.yaml | 8 + .../cells-discover-hosts-06a3079ba687e092.yaml | 28 + ...-single-migration-command-0e98d66e31e02a50.yaml | 13 + ...stination_when_evacuating-37b52ebe8b5b086c.yaml | 11 + ..._destination_when_livemig-e69d32e02d7a18c9.yaml | 11 + ...g-ironic-client_log_level-2bb84f12154417ca.yaml | 6 + .../create-cell0-mapping-60a9229c223a7516.yaml | 7 + ...fault-value-pointer-model-cb3d9a3e9c51e503.yaml | 4 + ...e-barbican-config-options-68ae65643ac41e2f.yaml | 6 + ...cate-cells-driver-options-473893e4e87f95c2.yaml | 5 + ...ate-config-image-file-url-46c20999756afce0.yaml | 8 + ...deprecate-config-s3-image-adb7c86c9b9220a5.yaml | 9 + .../deprecate-default-flavor-6c144f67f8032dfa.yaml | 5 + ...l-exception-format-errors-a5d2bf64e3404c39.yaml | 6 + ...-image-cache-checksumming-80e52279881ebc71.yaml | 6 + ...a-manage-network-commands-212726e67bffdfc4.yaml | 15 + ...ecate-nova-manage-vm-list-571162f55173cccc.yaml | 5 + ...ecate-old-auth-parameters-948d70045335b312.yaml | 15 + ...te-snapshot-name-template-46966b0f5e6cabeb.yaml | 6 + ...ecate_compute_stats_class-229abfcb8816bdbd.yaml | 2 +- .../notes/deprecate_nova_all-eee03c2b0e944699.yaml | 6 + .../deprecate_nova_network-093e937dcdb7fc57.yaml | 8 + .../notes/deprecate_os_cert-f0aa07bab1a229aa.yaml | 11 + ...precate_vendordata_driver-eefc745365a881c3.yaml | 2 +- .../deprecates-proxy-apis-5e11d7c4ae5227d2.yaml | 29 + .../empty-sample-policy-abfb7d467d2ebd4c.yaml | 9 + .../notes/extensions_remove-37e9d4092981abbe.yaml | 25 + ...ors-moved-to-api-database-b33489ed3b1b246b.yaml | 14 + .../notes/get-me-a-network-992eabc81b5e5347.yaml | 38 + releasenotes/notes/glance_v2-15b080e361804976.yaml | 14 + .../imageRef-as-uuid-only-0164c04206a42683.yaml | 17 + ...o-populate-ports-dns-name-08341ec73dc076c0.yaml | 2 +- .../notes/instance-path-2efca507456d8a70.yaml | 14 + .../ironic-driver-hash-ring-7d763d87b9236e5d.yaml | 33 + ...ic-multitenant-networking-6f124964831d4a6c.yaml | 10 + .../ironic-resource-class-6496fed067df629f.yaml | 4 + .../keypairs-moved-to-api-9cde30acac6f76b6.yaml | 6 + .../notes/known-issue-on-api-1efca45440136f3e.yaml | 8 + ...-live-migration-tunnelled-4248cf76df605fdf.yaml | 8 + ...bvirt-uses-os-vif-plugins-31a0617de0c248b9.yaml | 35 + ..._ppc64le_hugepage_support-b9fd39cf20c8e91d.yaml | 3 + .../list-invalid-status-af07af378728bc57.yaml | 9 + ...ist-server-bad-status-fix-7db504b38c8d732f.yaml | 7 + .../min-required-libvirt-b948948949669b02.yaml | 4 + .../notes/min-required-qemu-c987a8a5c6c4fee0.yaml | 4 + .../modern-microversions-964ae9a17df8c4b3.yaml | 7 + ...ltiqueue-on-tap-interface-2c9e1504fa4590f4.yaml | 12 + .../notes/mutable-config-e7e82b3d7c38f3a5.yaml | 11 + ...work-allocate-retries-min-a5288476b11bfe55.yaml | 5 + ...network-api-class-removed-a4a754ca24c02bde.yaml | 4 + ...as-many-online-migrations-38066facfe197382.yaml | 7 + ...ion-transformation-newton-29a9324d1428b7d3.yaml | 20 + ...otify_on_state_change_opt-e3c6f6664e143993.yaml | 7 + .../notes/os-brick-lock-dir-c659089679aac50f.yaml | 9 + .../notes/oslopolicy-scripts-957b364b8ffd7c3f.yaml | 14 + ...pagination-for-hypervisor-9c3393cd58149791.yaml | 5 + ...arallels_support_snapshot-29b4ffae300c1f05.yaml | 2 +- .../placement-config-section-59891ba38e0749e7.yaml | 11 + .../notes/pointer-model-b4a1828c43e8d523.yaml | 9 + .../policy-discover-cli-a14a115cacbdc9c6.yaml | 7 + ...y-sample-defaults-changed-b5eea1daeb305251.yaml | 6 +- ...uota-driver-is-deprecated-a915edf8777f3ddb.yaml | 4 + .../refresh-quotas-usage-362b239171c75f5f.yaml | 11 + ...ove-api-rate-limit-option-91a17e057081381a.yaml | 6 + ...-auth-admin-token-support-1b59ae7739b06bc2.yaml | 6 + ...move-config-serial-listen-2660be1c0863ea5a.yaml | 6 + .../remove-default-flavors-5238c2d9673c61e2.yaml | 5 + ...ated-cells-manager-option-d9d20691c08d2752.yaml | 4 + ...ted-cinder-options-newton-fc3dce6856101ef8.yaml | 9 + ...roy_after_evacuate-option-2557d0634e78abd1.yaml | 4 + ...legacy_api-config-options-f3f096df3a03d956.yaml | 6 + ...ted-remove_unused_kernels-b663aa6829761f1e.yaml | 5 + ...tensible-resource-tracker-37e8fdac46ec6eba.yaml | 6 + .../remove-legacy-v2-api-7ac6d74edaedf011.yaml | 12 + ...rt-migration-flags-config-8bf909c1295cc53f.yaml | 9 + ...-memcached-default-option-e0e50d54cef17ac4.yaml | 5 + ...manage-service-subcommand-2a11ed662864341c.yaml | 5 + ...used-config-opt-fake-call-37a56f6ec15f7d90.yaml | 4 + ...sed-config-opt-iqn_prefix-defb44120dae93e3.yaml | 5 + ...config_network_device_mtu-75780f727c322ff3.yaml | 5 + ...egacy_v2_api_policy_rules-033fa77420ed6362.yaml | 6 + ...remove_security_group_api-6fefb1a355876e83.yaml | 5 + .../remove_volume_api_class-a3c618228c89f57b.yaml | 5 + ...ename-iscsi-multipath-opt-eabbafccd2b74a0a.yaml | 4 + ...rename-wsgi-prefixed-opts-9075ff9c2215e61c.yaml | 4 + ...erved-hugepages-per-nodes-f36225d5fca807e4.yaml | 5 +- ...cated-neutron-opts-newton-a09ecfb0775339e6.yaml | 9 + ...sched-host-mgr-class-load-2a86749a38f0688d.yaml | 6 + releasenotes/notes/rm_db2-926e38cbda44a55f.yaml | 9 + .../notes/rm_glance_opts-360c94ac27328dc9.yaml | 7 + .../rm_import_object_ns-5344a390b0af465e.yaml | 14 + .../notes/rm_volume_manager-78fed5be43d285b3.yaml | 15 +- .../notes/set_guest_time-736939fe725cbdab.yaml | 7 + ...on_live-migration_failure-d1f6f29ceafdd598.yaml | 9 + ...affinity-for-server-group-f45e191bd8cdbd15.yaml | 2 +- .../notes/swap-volume-policy-9464e97aba12d1e0.yaml | 8 + .../switch-to-oslo-cache-7114a0ab2dea52df.yaml | 5 +- ...ync_power_state_pool_size-81d2d142bffa055b.yaml | 10 + releasenotes/notes/v21enable-8454d6eca3ec604f.yaml | 6 + .../notes/vendordata-reboot-ad1130444a63f2d0.yaml | 8 + .../notes/vhost-user-mtu-23d0af36a8adfa56.yaml | 7 + ...rtual-device-role-tagging-ec0c36226a3f2e4d.yaml | 30 + ...ware_disk_enableuuid_true-99b88e00fc168dd3.yaml | 4 + ...rvicegroup-driver-removed-c3bcaa6f9fe976ed.yaml | 2 +- releasenotes/source/index.rst | 4 +- releasenotes/source/mitaka.rst | 6 + requirements.txt | 63 +- setup.cfg | 53 +- test-requirements.txt | 26 +- tools/db/schema_diff.py | 25 - tools/pretty_tox3.sh | 9 + tools/regression_tester.py | 4 +- tools/releasenotes_tox.sh | 28 + tools/xenserver/cleanup_sm_locks.py | 20 +- tools/xenserver/destroy_cached_images.py | 15 +- tools/xenserver/populate_other_config.py | 13 +- tools/xenserver/stress_test.py | 37 +- tools/xenserver/vdi_chain_cleanup.py | 6 +- tools/xenserver/vm_vdi_cleaner.py | 30 +- tox.ini | 100 +- 1897 files changed, 118772 insertions(+), 93991 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c03c8fe..4dbe720 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ Jinja2>=2.8 # BSD License (3 clause) -keystonemiddleware!=4.1.0,>=4.0.0 # Apache-2.0 +keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 @@ -13,3 +13,3 @@ lxml>=2.3 # BSD -Routes!=2.0,!=2.1,>=1.12.3;python_version=='2.7' # MIT -Routes!=2.0,>=1.12.3;python_version!='2.7' # MIT -cryptography>=1.0 # BSD/Apache-2.0 +Routes!=2.0,!=2.1,!=2.3.0,>=1.12.3;python_version=='2.7' # MIT +Routes!=2.0,!=2.3.0,>=1.12.3;python_version!='2.7' # MIT +cryptography!=1.3.0,>=1.0 # BSD/Apache-2.0 @@ -22 +22 @@ sqlalchemy-migrate>=0.9.6 # Apache-2.0 -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -24,3 +24,3 @@ netifaces>=0.10.4 # MIT -paramiko>=1.16.0 # LGPL -Babel>=1.3 # BSD -iso8601>=0.1.9 # MIT +paramiko>=2.0 # LGPLv2.1+ +Babel>=2.3.4 # BSD +iso8601>=0.1.11 # MIT @@ -28,5 +28,5 @@ jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT -python-cinderclient>=1.3.1 # Apache-2.0 -keystoneauth1>=2.1.0 # Apache-2.0 -python-neutronclient!=4.1.0,>=2.6.0 # Apache-2.0 -python-glanceclient>=2.0.0 # Apache-2.0 -requests!=2.9.0,>=2.8.1 # Apache-2.0 +python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0 +keystoneauth1>=2.10.0 # Apache-2.0 +python-neutronclient>=5.1.0 # Apache-2.0 +python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 @@ -34,3 +34,3 @@ six>=1.9.0 # MIT -stevedore>=1.5.0 # Apache-2.0 -setuptools>=16.0 # PSF/ZPL -websockify>=0.6.1 # LGPLv3 +stevedore>=1.16.0 # Apache-2.0 +setuptools!=24.0.0,>=16.0 # PSF/ZPL +websockify>=0.8.0 # LGPLv3 @@ -38,3 +38,3 @@ oslo.cache>=1.5.0 # Apache-2.0 -oslo.concurrency>=3.5.0 # Apache-2.0 -oslo.config>=3.7.0 # Apache-2.0 -oslo.context>=0.2.0 # Apache-2.0 +oslo.concurrency>=3.8.0 # Apache-2.0 +oslo.config>=3.14.0 # Apache-2.0 +oslo.context>=2.9.0 # Apache-2.0 @@ -44,5 +44,6 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=3.5.0 # Apache-2.0 -oslo.db>=4.1.0 # Apache-2.0 -oslo.rootwrap>=2.0.0 # Apache-2.0 -oslo.messaging>=4.0.0 # Apache-2.0 -oslo.policy>=0.5.0 # Apache-2.0 +oslo.utils>=3.16.0 # Apache-2.0 +oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.rootwrap>=5.0.0 # Apache-2.0 +oslo.messaging>=5.2.0 # Apache-2.0 +oslo.policy>=1.9.0 # Apache-2.0 +oslo.privsep>=1.9.0 # Apache-2.0 @@ -50,2 +51,2 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.service>=1.0.0 # Apache-2.0 -rfc3986>=0.2.0 # Apache-2.0 +oslo.service>=1.10.0 # Apache-2.0 +rfc3986>=0.2.2 # Apache-2.0 @@ -54,3 +55,3 @@ psutil<2.0.0,>=1.1.1 # BSD -oslo.versionedobjects>=1.5.0 # Apache-2.0 -alembic>=0.8.0 # MIT -os-brick>=1.0.0 # Apache-2.0 +oslo.versionedobjects>=1.13.0 # Apache-2.0 +os-brick>=1.6.1 # Apache-2.0 +os-vif>=1.1.0 # Apache-2.0 @@ -58 +59,3 @@ os-win>=0.2.3 # Apache-2.0 -castellan>=0.3.1 # Apache-2.0 +castellan>=0.4.0 # Apache-2.0 +microversion-parse>=0.1.2 # Apache-2.0 +wsgi-intercept>=0.6.1 # MIT License diff --git a/test-requirements.txt b/test-requirements.txt index 49f7fc2..249bca6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,2 +7,2 @@ coverage>=3.6 # Apache-2.0 -fixtures>=1.3.1 # Apache-2.0/BSD -mock>=1.2 # BSD +fixtures>=3.0.0 # Apache-2.0/BSD +mock>=2.0 # BSD @@ -11,3 +11,3 @@ psycopg2>=2.5 # LGPL/ZPL -PyMySQL>=0.6.2 # MIT License -python-barbicanclient>=3.3.0 # Apache-2.0 -python-ironicclient>=1.1.0 # Apache-2.0 +PyMySQL!=0.7.7,>=0.6.2 # MIT License +python-barbicanclient>=4.0.0 # Apache-2.0 +python-ironicclient>=1.6.0 # Apache-2.0 @@ -15,2 +15,3 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=0.7.0 # Apache-2.0 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +requests-mock>=1.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +os-api-ref>=1.0.0 # Apache-2.0 @@ -19 +20 @@ oslotest>=1.10.0 # Apache-2.0 -os-testr>=0.4.1 # Apache-2.0 +os-testr>=0.7.0 # Apache-2.0 @@ -24,2 +25,3 @@ tempest-lib>=0.14.0 # Apache-2.0 -bandit>=0.17.3 # Apache-2.0 -openstackdocstheme>=1.0.3 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +gabbi>=1.24.0 # Apache-2.0 @@ -28 +30 @@ openstackdocstheme>=1.0.3 # Apache-2.0 -oslo.vmware>=1.16.0 # Apache-2.0 +oslo.vmware>=2.11.0 # Apache-2.0 @@ -31 +33 @@ oslo.vmware>=1.16.0 # Apache-2.0 -reno>=0.1.1 # Apache2 +reno>=1.8.0 # Apache2

1 0