October 2016 - OpenStack-announce

[new][openstackansible] openstack-ansible 12.2.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are gleeful to announce the release of: openstack-ansible 12.2.6: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. Changes in openstack-ansible 12.2.5..12.2.6 ------------------------------------------- 9282ffb Update signing key for percona packages 0193c0d Update signing key for percona packages 4263a26 Update all SHAs for 12.2.6 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 2 +- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 26 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- playbooks/roles/galera_client/defaults/main.yml | 2 +- playbooks/roles/galera_server/defaults/main.yml | 2 +- scripts/scripts-library.sh | 2 +- 8 files changed, 20 insertions(+), 20 deletions(-)

1 0

[new][openstackansible] openstack-ansible-security 12.2.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are exuberant to announce the release of: openstack-ansible-security 12.2.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 12.2.5..12.2.6 ---------------------------------------------------- 44c1bc9 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_glance 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are grateful to announce the release of: openstack-ansible-os_glance 13.3.6: os_glance for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 13.3.1..13.3.6 ----------------------------------------------------- ec9ae09 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/glance-api.conf.j2 | 2 ++ templates/glance-cache.conf.j2 | 2 ++ templates/glance-manage.conf.j2 | 2 ++ templates/glance-registry.conf.j2 | 2 ++ templates/glance-scrubber.conf.j2 | 2 ++ 5 files changed, 10 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_cinder 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: openstack-ansible-os_cinder 13.3.6: os_cinder role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 13.3.1..13.3.6 ----------------------------------------------------- de29bf7 Fix cinder role condition when no cinder_volumes 77f138e Disable stderr logging c4eae35 Update paste, policy and rootwrap configurations 2016-08-01 Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 15 +++++++++------ templates/api-paste.ini.j2 | 23 +++++++++++++---------- templates/cinder.conf.j2 | 2 ++ 3 files changed, 24 insertions(+), 16 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_neutron 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are pumped to announce the release of: openstack-ansible-os_neutron 13.3.6: os_neutron role for OpenStack- Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 13.3.4..13.3.6 ------------------------------------------------------ ae7af49 Add conditional around the pid clean up process Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-plugins 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are thrilled to announce the release of: openstack-ansible-plugins 13.3.6: plugins for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 13.3.5..13.3.6 --------------------------------------------------- 6fd7a88 Support more than one flat network 70214c4 Add dummy functional test tox target Diffstat (except docs and test files) ------------------------------------- library/provider_networks | 6 +++--- tox.ini | 7 +++++++ 2 files changed, 10 insertions(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_swift 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are psyched to announce the release of: openstack-ansible-os_swift 13.3.6: os_swift for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 13.3.5..13.3.6 ---------------------------------------------------- 5fbb25e Always setup ResellerAdmin role in keystone Diffstat (except docs and test files) ------------------------------------- tasks/swift_service_setup.yml | 3 +-- 2 files changed, 1 insertion(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are joyful to announce the release of: openstack-ansible-os_aodh 13.3.6: os_aodh for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 13.3.1..13.3.6 --------------------------------------------------- 0c80b7c Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/aodh.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glad to announce the release of: openstack-ansible-rsyslog_server 13.3.6: rsyslog_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. 13.3.6 ^^^^^^ Upgrade Notes * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Changes in openstack-ansible-rsyslog_server 13.3.4..13.3.6 ---------------------------------------------------------- 74cf6cd Separate remote log stream from local Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 7 +++ ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 +++ templates/os_aggregate_storage.j2 | 2 +- templates/rsyslog.conf.j2 | 59 ++++++++++------------ 5 files changed, 45 insertions(+), 33 deletions(-)

1 0

[new][openstackansible] openstack-ansible 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are psyched to announce the release of: openstack-ansible 13.3.6: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 13.3.6 ^^^^^^ Upgrade Notes * When migrating from Liberty to Mitaka neutron does not automatically set or migrate networks MTU settings. Neutron has no migration to correctly set the MTU on existing networks so we've created an OSA MTU migration playbook to work-around this issue. The playbook will set the MTU on networks created before the upgrade by iterating on known values from the user_variables and facts. Should any known network name be encountered the MTU will be set to the known value. If no MTU and no global override is present the playbook will fall back to using 1500 for vlan/flat networks and 1450 for vxlan networks. Changes in openstack-ansible 13.3.5..13.3.6 ------------------------------------------- 2c2cfbb Update role SHAs for 13.3.6 08ceafa Update the neutron MTU settings on upgrade c5a5604 Update all SHAs for 13.3.6 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 16 ++--- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 32 ++++----- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- .../neutron-mtu-migration-47bb099191d8c0e3.yaml | 12 ++++ scripts/run-upgrade.sh | 1 + scripts/scripts-library.sh | 2 +- .../playbooks/neutron-mtu-migration.yml | 79 ++++++++++++++++++++++ 11 files changed, 146 insertions(+), 33 deletions(-)

1 0

[new][openstackansible] openstack-ansible-ironic 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glad to announce the release of: openstack-ansible-ironic 13.3.6: Ironic Role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-ironic/ For more details, please see below. Changes in openstack-ansible-ironic 13.3.5..13.3.6 -------------------------------------------------- d347cb1 Configure ironic to use keystone v2 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 5 ----- templates/ironic.conf.j2 | 13 +++++-------- 2 files changed, 5 insertions(+), 13 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_nova 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jubilant to announce the release of: openstack-ansible-os_nova 13.3.6: os_nova for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 13.3.6 ^^^^^^ New Features * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". Changes in openstack-ansible-os_nova 13.3.4..13.3.6 --------------------------------------------------- fda8770 Nova role should not default vars outside the nova namespace 26c3e8a Add config template for qemu.conf Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 ++++++++- releasenotes/notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 ++++ tasks/nova_compute_kvm.yml | 13 +++++++++++++ templates/nova.conf.j2 | 2 +- templates/qemu.conf.j2 | 4 ++++ 6 files changed, 31 insertions(+), 2 deletions(-)

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are delighted to announce the release of: openstack-ansible-rabbitmq_server 13.3.6: rabbitmq_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 13.3.3..13.3.6 ----------------------------------------------------------- 7ac8e58 Add collect_statistics_interval, rates_mode in rabbitmq.config template Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 ++++++ templates/rabbitmq.config.j2 | 4 +++- 2 files changed, 9 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-security 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are joyful to announce the release of: openstack-ansible-security 13.3.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.6 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_horizon 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: openstack-ansible-os_horizon 13.3.6: OpenStack Horizon role for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 13.3.3..13.3.6 ------------------------------------------------------ b585f3e Simplify bool check for LBaaSv2/Horizon Diffstat (except docs and test files) ------------------------------------- tasks/horizon_post_install.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-os_heat 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are stoked to announce the release of: openstack-ansible-os_heat 13.3.6: os_heat for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 13.3.1..13.3.6 --------------------------------------------------- dcff3d0 Disable stderr logging f102338 Use keystone library for heat_stack_domain_admin Diffstat (except docs and test files) ------------------------------------- tasks/heat_domain_setup.yml | 63 +++++++++++++++++++++------------------------ templates/heat.conf.j2 | 2 ++ 2 files changed, 31 insertions(+), 34 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are stoked to announce the release of: openstack-ansible-os_ceilometer 13.3.6: os_ceilometer role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.3.1..13.3.6 --------------------------------------------------------- 3a24b01 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/ceilometer.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_keystone 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_keystone 13.3.6: os_keystone for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 13.3.1..13.3.6 ------------------------------------------------------- 4f30d3a Force a restart of all the apache nodes during upgrade 1432dea Disable stderr logging Diffstat (except docs and test files) ------------------------------------- tasks/keystone_service_setup.yml | 9 --------- tasks/main.yml | 3 +++ templates/keystone.conf.j2 | 2 ++ 3 files changed, 5 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are gleeful to announce the release of: openstack-ansible-memcached_server 13.3.6: memcached_server for OpenStack Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 13.2.0..13.3.6 ------------------------------------------------------------ 99e5aee Ensure that gate test does not remove ~/.ansible/tmp 681b84f Update tox configuration Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 - tox.ini | 121 +++++++++++++++++++++++++++++++++++--------------- 2 files changed, 86 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a45faa5..22c7bbe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +0,0 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0,!=1.9.6

1 0

[new][openstackansible] openstack-ansible-galera_server 13.3.6 release
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are tickled pink to announce the release of: openstack-ansible-galera_server 13.3.6: Galera Server role for OpenStack-Ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 13.3.5..13.3.6 --------------------------------------------------------- 10ca998 Update signing key for percona packages Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

OpenStack Newton cycle-trailing projects are officially released!
by Doug Hellmann 21 Oct '16

21 Oct '16

Hello OpenStack community, I'm very pleased to announce the final releases for the cycle-trailing components of OpenStack Newton. These are projects that rely on having all of the other components completed and stable before they can be released. You will find a complete list of the cycle-trailing components, their latest versions, and links to individual project release notes documents listed on the new release site. https://releases.openstack.org/newton/index.html#projects-trailing-the-rele… Congratulations to all of the teams who have contributed to this release! Doug

1 0

[new][tripleo] instack-undercloud 5.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: instack-undercloud 5.0.0: instack-undercloud This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in instack-undercloud 4.0.0..5.0.0 ------------------------------------------ c11da8e Fix default Swift ring partition power ddb5bb5 Make the snmpd_readonly_user_password available to Mistral f8dda14 Enable validations by default f044a47 start ironic-(api|inspector) after Keystone_endpoint e5f60c6 Pin beaker due to ruby requirement 9d2a655 Update .gitreview for stable/newton 56e65af Use kwargs when creating mistralclient 0c86110 Double the maximum waiting time for default plan creation 55ccd0e Increase Heat yaql limits b344e92 Increase timeout for Deployment Plan creation 59300e8 Revert "Deploy Monitoring on the undercloud with Puppet" cea03d4 Update default VM memory 873d17c Ensure that the default plan was created successfully b6b2b56 Verify that the Deployment Plan creation was successful f033029 Make puppet-stack-config.pp Puppet 4 compliant ff32601 Use correct password for keystone bootstrap f623801 Work around deletion of _member_ role assignments on upgrade 0492b90 Enable TLS for Zaqar's websocket endpoint b3bfa7b Add sysctl preflight install check 5902936 Catch runtime exceptions during validation 94530da Enable introspection of UEFI nodes by default 4c59cff Update undercloud.conf.sample 164d3ff Fix nova-related deprecation warnings 0c33e8b Save console logs from all vms to files 3431bde Deploy validations SSH key in post config bf0f777 Introduce 'enable_validations' option 80dbe73 Raise zaqar max message size cf80817 Disable unsupported drivers and fix DRAC dependency 5c138c9 Setup CORS settings for tripleo-ui 39ae820 Introduce 'enable_ui' option e6c8fed keystone: configure credentials e0a5293 Use ironic::pxe class to setup PXE aaaf055 Enable modern authtoken for Neutron and Glance 8efa887 configure heat with new authtoken parameters 5617d17 Unit tests for _create_default_plan() e51304f Stop using deprecated ironic::drivers::deploy 541523b Handling defaults for pxe_bootfile_name and pxe_config_template moved to puppet ab17800 galera and rabbit do not need to be accessible over the network cccaf48 Fix outdated help text from undercloud VIPs 4c51d6c Modify improper augeas set command e42b80e Update authtoken parameters to match recent changes bb3deb3 Revert "Pin puppetlabs_spec_helper to 1.1.1" 4e2fc40 Pin puppetlabs_spec_helper to 1.1.1 bd4c166 Enable TLS for Zaqar API cd4e9a4 Refactor endpoint env variable population 7eee8c8 Enable SSL for ironic inspector c2c1183 Mistral db-populate depends on inspector's endpoint 6a1a179 Add default plan creation 41ef775 Use http for Ironic deployments fd167c1 Enable sysctl nonlocal_bind 7566c7c Add constraints needed for ironic and inspector 3552a14 Update hieradata parameters to match recent changes 9cf83c5 Remove deprecated neutron auth options b4fa8fb Revert "glance: disable swift backend" 51563c5 Ironic: Configure iPXE to work with UEFI b85f72c Call systemctl-daemon-reload only if necessary becbcde Add enable_proxy_headers_parsing option for keystone and glance 62b3b28 Update help text for certificate generation options ad36fe4 Use ensure_resource instead of package 62bf441 Add tripleo deployment config file paths to hiera faeed24 Use certmonger for automatic cert generation b487f96 Revert "Deploy and Upgrade Ironic to run in mod_wsgi" 1dd619c Fix Aodh httpd binding f94f6d6 Revert "Explicitly set $FACTER_fqdn" fb9f677 Default to Ironic API v1.15 on undercloud 2fc7497 Allow to configure Ironic [ssh] section da71717 Enable Aodh SSL binding in HAproxy 6058e39 Explicitly set $FACTER_fqdn 7aefae4 Deploy and Upgrade Ironic to run in mod_wsgi bc58595 Drop broken keystone pki setup 37a67a1 Remove unused Swift tempauth config 2ee1550 Run OpenStack db_sync commands at every puppet run 716e3f6 Remove nova-compute restart at end of uc install 14b78a4 Increase the max zaqar messages size to 2^19 9e1142e Deploy undercloud in 1 step instead of 2 e54221f Flush puppet output piped to awk 21171ca Remove discover from test-requirements fe121a9 Remove "OK_FILE" from undercloud-install element 27116f0 Deploy MySQL using composable role 2d76a8d Remove ipxe selinux policy 33e9d78 Fix wrong template in puppet-stack-config.yaml.template d4aab47 Fix ceilometer auth url on undercloud 622511d Allow customization of undercloud disk size 3138475 Modify LVM filter fix to blacklist iSCSI fde0c90 Enable SSL for Mistral dbe6575 Always configure inspector to use the same HTTP port as Ironic 8eeed36 Remove hardcoded endpoints in hiera 85becee Enable LLDP collection during introspection if inspection_extras is on 3f17a67 ironic: turn on ipxe timeout 7a0d831 Generate TLS endpoints if autogenerate cert is set 93a6af6 Enable processing of X-Forwarded-Proto if TLS enabled 97b476b Ensure /etc/puppet/hieradata exists 3ee3bf4 Make Ironic httpd port configurable via hiera 0e9f682 Create a Keystone endpoint for Zaqar websockets 53718cc Properly set undercloud_service_certificate when file exists 0b42b6d Add a second proxy-logging middleware entry to swift-proxy c4bc3ba Use the print function to fix the tests on Python 3 ad294f4 Correct the path to the tripleo-common workbooks 358edf9 Use Openstack CLI for setting undercloud quota b8c5ac7 glance: disable swift backend 2dee8ce Aodh should use service tenant on undercloud c6ba5c8 Revert "Pin puppet-lint-absolute_classname-check to 0.1.3" 01bbfca Switch to nova v2.1 and remove v3 46e3aff Pin puppet-lint-absolute_classname-check to 0.1.3 f52a3af Add net config override 6c342e3 Increase swift-proxy node_timeout 139f1f3 Deprecate default 192.0.2.0/24 CIDR c6adebe Add value format validations 1d729d7 Drop deprecated nova network options baf0a96 Update tripleo-common package name 3354bb5 Move class options to hiera 43c6b9d Set Neutron notification project correctly c6f1714 Fix inspection_enable_uefi description bb622b0 Take transport_url and rpc_reponse_timeout into use f7c7d30 Disable Heat convergence pending further testing 8bbcce7 Update hiera parameter to use tripleo::haproxy cb69c9e loadbalancer: explode hieradata to separate HAproxy & keepalived 167ebe4 Only validate SSL VIPs if SSL is enabled d5b7645 Only run mistral commands if mistral is enabled f4a6f7d Ensure systemd-journald is running 4572b3c Restore pip-and-virtualenv-override 4bd2544 Enable Mistral execution cleanup ce1c5f5 Wait for all interfaces to get IP addresses during inspection with extras 4338198 Cleanup hieradata to reduce Puppet warnings dfa0754 Add timestamps to puppet apply output 7301b39 Minimize element usage b16d78c Add option to enable introspection of UEFI nodes 6119cc5 Revert "mistral: deploy API in WSGI with apache" 478f09b Remove truncate nova config workaround a1a1520 Consolidate undercloud* elements e779c6d Don't use os-net-config element b35b6ee Move 02-undercloud-stack-heat-metadata to python module cb8e671 puppet-stack-config: notify swift-proxy when ring is ready c03d2cc Generate most of the pystache context automatically f599fde Cleanup Puppet code that deploys Ironic 7ea7d61 Don't use ironic-conductor element dd69fd6 Move parts of undercloud-install to puppet f439300 Use tripleo::selinux b1c3b30 Move persistent journal to puppet 90bbff7 Don't use os-cloud-config/common-venv elements 06f9810 Create firewall rules with puppet ab4fa10 Load Mistral 'workbooks' (not 'workflows'). 057b369 Set Zaqar storage/message_pipeline correctly b0ccd80 TripleO common for custom Mistral actions 3083c86 Use enable-packages-install element 0be2088 Add dib-lint to pep8 tox job 4700960 Use keystone_admin_uri to make Neutron auth against Nova dde13f2 Add token flushing for Keystone and rows archiving for Nova b44cafb Configure ironic rpc_response_timeout the new way 661b97e Load Mistral workbooks from tripleo-common 3211260 Use entrypoint for ironic_host_manager scheduler 99ad2f9 run nova-api with mod_proxy_uwsgi httpd module f6ce775 Make undercloud telemetry services optional and disabled e9119ea Add a reload of keepalived f1e9fb6 Truncate nova.conf (temporarily) 0500308 Add hieradata override file b37e0e3 Use a new 'automated_clean' option from puppet-ironic b41a7a3 Add ability to auto-generate self-signed certificates 9f0462b Remove centos-cloud-repo element ea05040 Default to Ironic API v1.11 on undercloud dfcd5e9 Set mariadb open_files_limit to -1 (unlimited) 67a9afa Switch glance/swift auth to use keystone v3 cc41b7a Temporarily set +e on systemd-journald restart for +bug/1564471 7e883ba Add aodh as part of endpoints generation 2dec7d7 Overcloud is not able to deploy with the default 4GB of RAM using instack-undercloud a4e59c7 Force rebuild of ramdisk as part of overcloud-full abbbc10 Enable Zaqar by default. 26b04b7 Enable Mistral by default. e64fb25 Add missing zaqar password and horizon key c9b3f2a Add validation of network configuration opts cdbe6d7 Switch to package-installs 8187dca Set glance::registry::auth_uri f75f591 add INTERFACE_MTU parameter 6c9576f Add an option to enable cleaning 5dbe3ee Delete default flavors in Python Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 42 +- .../pre-install.d/00-centos-cloud-repo | 5 - elements/instack-vm/element-deps | 3 +- elements/instack-vm/install.d/51-instack-files | 2 - elements/instack-vm/package-installs.yaml | 3 + .../configure.d/00-apply-selinux-policy | 7 - .../configure.d/88-httpd-vhost-port | 23 - .../configure.d/ipxe-vhost.template | 16 - elements/ipxe/package-installs.yaml | 2 - elements/ipxe/post-install.d/86-selinux | 12 - elements/ipxe/post-install.d/88-setup-ipxe | 9 - elements/ipxe/selinux/ipxe.te | 11 - elements/ipxe/svc-map | 3 - .../post-install.d/90-rebuild-ramdisk | 6 + .../install.d/02-puppet-stack-config | 70 +-- .../puppet-stack-config/install.d/20-ironic-user | 12 - .../etc/puppet/hieradata/CentOS.yaml | 1 + .../etc/puppet/hieradata/RedHat.yaml | 1 + .../configure.d/50-puppet-stack-config | 20 +- .../os-refresh-config/post-configure.d/10-iptables | 28 - .../puppet-stack-config/puppet-stack-config.pp | 424 +++++++------- .../puppet-stack-config.yaml.template | 524 ++++++++++++----- .../pre-install.d/00-setenforce-0 | 5 - elements/undercloud-install/bin/dib-init-system | 5 - .../environment.d/00-distro-name | 11 - .../extra-data.d/01-create-tmp-for-svc-map | 7 - .../undercloud-install/extra-data.d/01-install-bin | 5 - .../os-apply-config/etc/os-net-config/config.json | 3 + .../os-apply-config/root/stackrc | 16 + .../os-apply-config/root/stackrc.oac | 1 + .../root/tripleo-undercloud-passwords | 23 + .../root/tripleo-undercloud-passwords.oac | 1 + .../var/opt/undercloud-stack/masquerade | 24 + .../configure.d/30-reload-keepalived | 11 + .../post-configure.d/80-seedstack-masquerade | 8 + .../post-configure.d/98-undercloud-setup | 116 ++++ elements/undercloud-install/package-installs.yaml | 1 - .../undercloud-install/pre-install.d/01-iptables | 12 - .../pre-install.d/01-persistent-journal | 10 - .../pre-install.d/01-usr-local-bin-secure-path | 10 - elements/undercloud-install/pre-install.d/04-sshd | 7 - .../environment.d/00-package-install | 51 -- .../post-configure.d/98-undercloud-setup | 120 ---- elements/undercloud-stack-config/README.md | 2 - .../undercloud-stack-config/config.json.template | 55 -- elements/undercloud-stack-config/element-deps | 1 - .../install.d/01-install-pystache | 5 - .../install.d/02-undercloud-stack-heat-metadata | 50 -- .../os-apply-config/root/stackrc | 15 - .../os-apply-config/root/stackrc.oac | 1 - .../root/tripleo-undercloud-passwords | 24 - .../root/tripleo-undercloud-passwords.oac | 1 - .../var/opt/undercloud-stack/masquerade | 24 - .../post-configure.d/80-seedstack-masquerade | 8 - instack_undercloud/undercloud.py | 634 ++++++++++++++++----- instack_undercloud/validator.py | 120 ++++ json-files/centos-7-undercloud-packages.json | 45 +- json-files/rhel-7-undercloud-packages.json | 40 +- requirements.txt | 7 + scripts/instack-haproxy-cert-update | 16 + scripts/instack-virt-setup | 15 +- setup.cfg | 2 + templates/config.json.template | 39 ++ templates/net-config.json.template | 23 + test-requirements.txt | 1 - tox.ini | 12 +- undercloud.conf.sample | 90 ++- 70 files changed, 2014 insertions(+), 1200 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0dcbf9b..afb8e35 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,0 +2 @@ six>=1.9.0 +python-keystoneclient>=2.0.0,!=2.1.0 # Apache-2.0 @@ -2,0 +4 @@ python-novaclient +python-mistralclient>=2.0.0 # Apache-2.0 @@ -4,0 +7,5 @@ psutil>=1.1.1,<2.0.0 +netaddr>=0.7.12,!=0.7.16 +pystache +os-cloud-config +os-refresh-config +os-apply-config diff --git a/test-requirements.txt b/test-requirements.txt index 3ddc209..8d61c44 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ coverage>=3.6 -discover

1 0

[new][kolla] kolla 3.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are delighted to announce the release of: kolla 3.0.0: Kolla OpenStack Deployment This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/kolla/ For more details, please see below. 3.0.0 ^^^^^ There any multiple options available to an operator with regards to how they wish to provision devices for use with Ceph OSDs. One of those is to co-locate the data and journal on a disk, which is done by marking a partition on that disk with *KOLLA_CEPH_OSD[_CACHE]_BOOTSTRAP*. If an unwitting user happened to confuse this with the partition based approach, they could wipe out their entire disk, resulting in data loss. Infra team will start running python35 jobs target to replace current python34 jobs This is due to the change from Ubuntu Trusty to Xenial, where python3.5 will be available. During the Newton cycle support for baremetal provisioning with bifrost was added to kolla. Bifrost is a collection of ansible roles and playbooks to deploy a standalone instance of ironic. In Newton cycle we included means to change various things in Kolla images using override file. Full customization guide can be found here http://docs.openstack.org/developer/kolla/image-building.html #dockerfile-customisation * In the Newton cycle a new kolla-host playbook was introduced. The kolla-host playbook is intended to prepare servers for use as kolla deployment hosts. The kolla-host playbook requires the nodes to have an os installed and be reachable via ssh. Currently the kolla-host playbook supports ubuntu 14.04, ubuntu 16.04 and centos 7.2 as target servers. See features section for more details. Added performance monitoring stack based on InfluxDB, Telegraf and Grafana. In most of case, the disks used by ceph have different size. Use the default value 1 may block the ceph when one disk is full. Use the disk size as osd weight will more reasonally. New Features ************ * Implement Aodh ansible role * To produce a secret storage and generation system capable of providing key management for services wishing to enable encryption features. * Add ceilometer ansible role * The Ceph bootstrap will now pause requesting confirmation from the operator if it detects a bootstrap label on a disk with more than one partition. An operator may override this behaviour by setting the Ansible variable 'ceph_osd_wipe_disk' to 'yes-i-really-really- mean-it'. * When Cinder, iSCSI and the LVM driver are enabled, check that the appropriate volume group exists on the target nodes. * Add cloudkitty, the Rating as a Service component. * Add collectd ansible role * Add ansible role for openstack congress project which provide policy as a service across any collection of cloud services in order to offer governance and compliance for dynamic infrastructures. * use dumb-init to manage the pid 1 process * Add full support for fernet with distributed token node syncing * Implement Gnocchi ansible role * Add jinja2 header blocks to each Dockerfile. * Add multipathing support to docker container. * Allow mysql to be used as a database for Ceilometer. * Add some extra prechecks to ensure a sane NIC config. * Add neutron Service Function Chaining (sfc) support. Service Function Chaining is a mechanism for overriding the basic destination based forwarding that is typical of IP networks * Introduce a new property "enable_neutron_dvr". Set to "yes" to deploy Neutron with DVR. * Add support for LBaaSv2 with HAproxy container. * Add neutron-vpnass role * Add Python 3.5 classifier and venv * Implement rally ansible role * Start using reno. * Implement Sahara ansible role * Add vmtp support to docker container. * Introduce OpenStack Infrastructure Optimization service, also known as Watcher. This project makes use of Ceilometer data to rebalance the cloud to meet declared goals and strategies. * Implement Ansible Tempest role * A new deploy-bifrost command was added to kolla-ansible. The deploy- bifrost command will deploy and bootstrap a standalone instance of ironic in a single container. * A new deploy-server command was added to kolla-ansible. The deploy- server command uses a locally deployed instance of bifrost to enrole servers with ironic and provision their os. * New option enable_neutron_agent_ha added to enable/disable dhcp/l3 agent high availability, dhcp_agents_per_network is default to 2 and it's configurable for user. * Add support for CADF event notifications. This standard provides auditing capabilities for compliance with security, operational, and business processes and supports normalized and categorized event data for federation and aggregation. * Change Ceph version to Jewel * Docker image for CloudKitty, the rating as a service component of OpenStack. * Allow the use of a database backend for Horizon sessions. * deprecated --include-header and --include-footer parameter * Customization mechanism for dockerfile * Customization implemented in most of OpenStack services * Ability to modify repositories, packages installed and keys installed * Ability to inject or override code in certain placess across dockerfiles * Enable the nova microversion api * Add etcd ansible role * Add etcd docker container * Implement MongoDB replicate set cluster * Import Murano core libary during install required for Murano operation. * support use gnocchi collector in cloudkitty * The kolla-host playbook supports bootrapping clean os installations to enable them to be used as kolla hosts. When the playbook completes the bootstraped systems should pass the kolla prechecks. * The kolla-host playbook will install docker 1.11 and docker-py on all baremetal nodes. * The kolla-host playbook will configure /etc/host with the hostname and ip address of all nodes in the kolla inventroy if customize_etc_host set to its default value of True. * Add kuryr ansible role * Support for Influxdb v1.0.0 * Support for Telegraf v0.10.1 * Support for Grafana v3.1.1 * Fix the implementation of Neutron physical network provisioning, operators can now configure multiple physical networks using augmentation files. * Pin the base distro release version. * Implement Senlin Container * Use [oslo_messaging_notifications]/driver option in cinder.conf to enable block storage meters. * support using the disk size as the osd weight when osd_initial_weight is auto * LDAP & AD support has been added to the base images, and support for Keystone multidomains config files. * Upgrade Ubuntu base image to Xenial Known Issues ************ * The performance monitoring stack currently in use in Kolla is experimental. The components used to compose the performance monitoring stack may change in Ocata, and the implementation will certainly be far improved in Ocata. * Ubuntu 14.04 is eol. We should move to Ubuntu 16.04 in Newton cycle. Upgrade Notes ************* * Version of Ceph has been changed from Hammer to Jewel * should move use header and footer block in template overrides file * Kibana version changed from 4.4 to 4.6. * The wrong service type of the Mistral keystone endpoint was fixed. Prior to a upgrade manually change the service type of an existing Mistral keystone endpoint from 'application_catalog' to 'workflowv2'. * RabbitMQ version was increased to 3.6.2 * the os_initial_weight still has the default value 1, it will not break cluster when upgrading. Deprecation Notes ***************** * Fedora based Docker images are deprecated as of the Newton release and will be removed during the Ocata cycle. Further details below the following URL http://lists.openstack.org/pipermail/openstack- dev/2016-September/104011.html * Nova network was deprecated in the Nova project in April 2016. The nova-network container is deprecated as of the Newton release and will be removed in the future. * Heka is deprecated and will be replaced in Ocata cycle Security Issues *************** * The kolla-host playbook will create a kolla user on all nodes using the ssh-key specified in the passwords.yml. The kolla user will be granted passwordless sudo privalages on the host. this behavior can be disabled by setting create_kolla_user=False Bug Fixes ********* * The wrong urls of Cinder Service endpoints was fixed. * Integrates gnocchi with ceph to resolve the the lack of HA. Other Notes *********** * Congress doesn't work correctly out of the box and will not deploy. See Bug * Reducing disk footprint for Ubuntu/Debian images by only installing English locales and no documentation files. Changes in kolla 2.0.0.0rc1..3.0.0 ---------------------------------- 03d86d5 Fix mariadb build issue bb665cc Congress doesn't deploy release note 5c9c786 Fix wrong log permission for services collected through syslog 154be9b Bump retries in starting nova-libvirt to 5 9cc3795 Fix keystone fernet file exchange via ssh 3bc9d06 Add missing closing brace in grafana configuration file 6537d8e Fix ironic upgrade permission issue d308bb2 Fix syntax error in sahara permissions 8af8e7d Fix gnocchi upgrade permission issue dcefb6f Fix wrong magnum volume path in json file 9089e58 Fix for cinder not working with permissions changes e3b60a6 Fix neutron upgrade permission issue 3389a72 Fix grafana upgrade permission issue 859b95e Fix nova upgrade permission issue 97e13cb Fix influxdb upgrade permission issue f6e6e17 Fix congress upgrade permission issue aee86c1 Fix mistral upgrade permission issue fa459a6 Fix heat upgrade permission issue bcd918d Fix cinder upgrade permission issue c29d1c9 Fix murano upgrade permission issue 9576b1c Fix common role upgrade permission issue ff9ffb8 move sys.exit out of try finally block in set_config.py file c559295 set basic kolla structures for iscsid d261393 copy ldlinux.c32 to /tftpboot in ironic_pxe 3f55dd5 copy iscsid logrotate config 2e00d14 Fix log directory of Elasticsearch d7c3df4 Fix mongodb upgrade permission issue 5d88536 Fix telegraf upgrade permission issue ca959cf Fix magnum upgrade permission issue ce0e27c Fix sahara upgrade permission issue d4db3da Remove ceph repo for Ubuntu install 2c22589 Fix stale namespace removal issue d0993c9 Fix manila upgrade permission issue fe05203 Fix senlin upgrade permission issue 6220b9d Fix watcher upgrade permission issue 25184b4 Fix rally upgrade permission issue dc003b9 Fix elasticsearch upgrade permission issue 511fdcb Fix mariadb upgrade permission issue b2a661a fix cron logrotate for sahara cb1d1fc Cinder endpoint wrong fix c6cd09b OpenStack Services Should Use keystone_internal_url for auth c2751c4 Fix glance upgrade permission issue 0a95100 Fix keystone upgrade permission issue 0fbfde0 ansible: swift: Fix swift-object-expirer restart loop f7f36c8 Fix wrong mongodb address variable in ceilomter bootstrap f182dc6 Fix rabbitmq upgrade permission issue d2f9f4b Mount host localtime for containers c7ac38c Update .gitreview for stable/newton ae7d9e3 Add register to upgrade.yml to create correct endpoint 255198e Fix the failure to launch instance when enabled Ceph 86fe4c9 Make Kuryr upgrade not crater the upgrade 626967c Enable keystone authentication for Barbican cd03366 Fix 'Address already in use' for barbican-api bf62341 Add missing uwsgi for barbican-api Dockerfile 9685eca Added missing cleanup-images in setup.cfg 852329f remove extra blank lines 0c15da0 Fix the wrong setting for Grafana session a286be1 Add netaddr to requirements file 2bc6f65 Add upgrade tasks for Kibana 9de0894 Make sahara api worker configurable e7df182 integrate gnocchi with cloudkitty d1b95be Use rootwrap in sahara config 0a9e1f2 Mark performance monitoring stack experimental 1bcb139 Choose node with largest seqno number for mariadb recovery 18fa72c integrate gnocchi with ceilometer 96bfb59 fix mistral requires auth_uri to point to v3 explicitly 7fa1a08 Remove unneeded Heka bootstrapping code e1ca39d Build source from Newton rather then Master b46d625 add sahara log in heka aeb86de Move RDO to Newton branches e4e842b fix can't collect horizon log in heka 4fa2508 Fix genconfig and reconfigure for magnum 6f1c15d Install python-mysqldb for Ubuntu in openstack-base container dcd8dda Heka template missing optional params 1932552 Updated from global requirements 792f16c Fix horizon to use cache 1a79fb6 Create /var/log/kolla/rally before running rally-manage db create/upgrade cc07097 Fix l3_agent.ini rendering error when DVR fb915b5 Add hexdump package for ironic-conductor container dbcf605 Heka deprecation 06422a2 install pxelinux for ironic_pxe 1901449 Revert "Fix pycparser wheel package issue" 7370e01 Fix sahara endpoint url cfff7b0 Change mysql-check in HAProxy to post MySQL 4.1 9d8fe89 Handle z stream change for rabbitmq-server 74c85cf Iscsid container fails to start on storage node when cinder is enabled ffa6c11 fixed kestone fernet prechecks for multinode deployments e8e1ad7 Handle the KeyboardInterrunpt properly for build.py script 903b0ff Fix ironic failed 0226cca Download the rabbitmq_clusterer plugins to the correct path 195bcd0 Fix pycparser wheel package issue bfd032a Add CADF event configurations in Keystone when enabled 4963898 Remove redundant common play and add haproxy hosts 96318fe Integrate gnocchi with ceph 89d3877 Fix error in Gnocchi service d5ae21a iscsi role misses 'storage' group febc13e Deprecate Fedora based Docker images 54f255f Fix typo in start.yml 87d582b Fix a typo in bifrost.rst ca26f55 Mount host localtime for ceilometer a71874f Fix mistral service 3c45625 Fix Magnum trustee issues 57ba2cd Fix wrong heat trustee configuration bcf7afb add congress api to haproxy 87f0194 Rename the gnocchi api-paste filename c4fa051 Use merge_configs for gnocchi-api-paste.ini file 55f0642 Add a note for how to get prior release kolla doc b1a91dc Update manila-share.conf 01db7b7 change CollectD to collectd in collectd role 566c19c Fix a docstring typo in build.py aa436c5 Add aodh checking to port_checks.yml 01d16a8 add sahara port prechecks 6b32105 change perm and user wsgi file permission f9fcc19 remove bootstrap.yml in grafana role upgrade.yml ec2f8af Add bootstrap_service.yml to upgrade.yml 53451df add aodh gnocchi barbican in heka.json.j2 45ef861 Add newline in grafana template 45f696c Use keystone-paste.ini template for keystone ccbb5db change perm 0644 to 0600 in congress role 9a02511 add reconfigure.yml in congress role cbfc70d add upgrade.yml in congress role cfe9391 Fix the url of Cinder endpoints 3f134d0 Changed docker_restart_policy to unless-stopped c1d686f add cloudkitty port prechecks ffbd2c0 Remove clients from test-requirements already installed by python-openstackclient 5cb0e00 Fix merge_configs.py file when not provide vars parameter 40ed2c4 install iptables in ironic-inspector container 326327a fix ironic-inspector setup 7555054 Fix the failure of ceilometer-api container b515039 Change "Virtualhost" to "VirtualHost" in horizon.conf.j2 7155305 Revert "Add enable_elasticsearch option" 127ffc9 Delete tempest.yml playbook 7608f1e Revert "Bind EPMD to api interface address" 23aae45 Add aodh-api to haproxy.cfg file 911dfe4 ES and Kibana config modification for Kube d01c97d add upgrade.yml content for gnocchi role 36f400b Fix heat role creation bcbf22c Add Using a different base image to image-building doc d64fc35 Clean up TODOs from live documentation 582a17a remove not use wsgi other service in aodh 364c980 add upgrade.yml to aodh 7bd9e44 Add more packages in bindep.txt 44bcd66 Add upgrade.yml to sahara f581c81 Add enable_elasticsearch option e757eff Install the required packages for ceph-base image 0af4dc8 Fix idempotent for initializing toolbox container task b5d1b3a Document bug triage b2ad476 Update the order of release note page f13b267 add etcd reconfigure content and do_reconfigure file 73a39db Fix permission for /var/log/kolla folder 419454c missing space breaks haproxy from starting cd59e92 Document that YAML data files should start with three dashes ae54ae8 Mark include-footer and include-header deprecated for removal fa2b962 Point to boostrap-servers playbook in quickstart 4330790 Add architecture guide back to index.rst d5e5700 Remove ansible serial: option for haproxy and rabbitmq. b1f986c Cinder cannot use external non-LVM iSCSI storage a071bce Add "---" into some files of yaml 1baffca Updated from global requirements d1673ad Allow operators to provision multiple physical networks 9e32426 Fix senlin api bind host 3bf571d Add support to use pdb with tox ef401e3 Delete the unnecessary space 6f58b12 Fix tempest missing spaces 1116ae3 Add fwaas_driver.ini file to neutron-vpnaas-agent container 4e30d0f Allow a custom keepalived configuration file 19ed74d Allow a custom haproxy configuration file 2075176 Fix base CentOS repository keys 2d634e5 Fix murano auth issue 92c828b Remove all bytcode & objectcode before running tox 156abd6 Remove no-cache option in build.py 2d97299 Delete extra spaces in baremetal install.yml 2042ad2 Deprecate old auth parameters of ironic in nova.conf 08146dc Allow genconfig to work with kolla-kubernetes and ceph ccc68d7 Update EPEL version in base ea0e854 Fix Keystone CADF notifications c3f2be5 fix horizon fernet container 8735510 Add pulling ceilometer-collector image c28a0cf run_once Checking mongodb backend for ceilometer 6bc976a Set ownership of barbican configuration files to barbican 2762135 Repair swift reconfiguration e775958 Use ansible_version when available for precheck 10bfda6 Checking valid fernet expiry only need to run once 879b446 Fix using rhel as a base build image d9c29c1 Install cinder related package for glance a05a50e Install extra packages for gnocchi using setuptools extra feature 1b04a23 Remove duplicate lbaas provider config 1908825 Document that new services have to be listed in the README file fec6382 Fix ironic Dockerfile 4e9d5b9 Added Barbican in the list of services deployed by kolla aa5f743 Added enable_option for some services 8d2af5f Delete extra spaces in gnocchi config.yml a95a037 Add "---" into ceilometer/tasks 2414670 Deprecate nova-network container bcff0f8 Create the heat_stack_user/owner role in the heat role 0a024d9 Fix vpnaas for neutron da4cf7b Add "---" into tempest.yml 3bd180f Only enabled services log files 734f881 fix config file permission to ironic instead of root 2d6a9ec corrected error in multinode.rst e328ada Optimized the serial upgrade and reconfigure 897fb08 Fix reconfiguration issue for Keystone role 37cef10 Remove the unnecessary space 3b8209c Fix up aodh config templates 76e3821 add reno note monitoring 6664a8d install ironic-inspector during image build e1e8a5b align ceph with other svc patterns in inventory files 8f6bd4e Enable CADF events in Keystone and introduce enable_cadf_notifications 1b8c4ff Update "which" command to "type" 4b7b4c4 Add "python-openstackclient" to test-requirements.txt 893f148 Allow operators to customise keystone source install ef9d6ea Add networking guide for Neutron extensions 75bbfa7 kolla config file path corrected for ubuntu d48cc50 Use "type" to take place of "which" and update the output 0d28b31 Add Kuryr ansible role d7aee11 Revert 'Add neutron-lbaas-agent to exlude image for Ubuntu binary' dc85fda Add a tip at the end of tools/init-runonce 2e29f4b Modify collectd permissions 1be0523 Remove public_router_id from tempest configuration template ddbbd05 Document how to add logging for a service e771404 Add cloudkitty to heka-openstack.toml.j2 e3f4d45 User os_keystone_role to create cloudkitty rating role b76a613 Fix ceilometer.conf template da3156f Bump version of Kibana from 4.4 to 4.6 be0fcb5 Integrate neutron-vpnaas-agent into the neutron Ansible role 01d2e2e Generate full /etc/hosts on every node a5b53f3 Add etcd ansible role 4fabd37 Add kuryr-libnetwork Dockerfile 9f16111 Switch arguments to usermod cafdbb3 Mariadb bootstrap - no need to check for cluster ready in Kube 7306b25 Add upgrade file to barbican role 56af4ef Added telegraf role aa2fcc0 Non-default database port documentation. 4b3d811 Add ansible role for vmtp container ce2a00a Add neutron-vpnaas-agent container 8604881 Minor fix in manila guide 95c916a Allow Neutron to be run in DVR mode 8f5a42c Add extras and pytz>=2013.6 into test requirements fe61591 Added grafana role 0f30134 Set owner of rally.conf to rally 8a01ed3 Add Networking-SFC role 44ce626 Add nova-serialproxy container abf8365 Add Senlin Ansible role a14d8e6 Fix missing cloudkitty config file for cron container 5480bd9 Bind EPMD to api interface address de0c780 Change Mariadb default character set to utf8 bd08f55 fix the common upgrade 2660bbe Call filter_images before save dependencies 36794a6 Remove the useless host in site.yml dd57e1d Add iter function to change list into iterator 5e3f392 Fix transport for kolla-kubernetes 3eff4bc Allow customizations of pip packages 36c0501 Fix formatting in CONTRIBUTING.rst 7fb2d38 Use "node" take place of "nodes" b41247c Add header blocks to all Dockerfiles 2330903 Check volume group exists for Cinder in prechecks a62aaaf Add logrotate configuration for cloudkitty 924fbb6 Fix permissions of tmp files e6d3885 Copy mongodb_bootstrap_replication_set.js to /tmp on the deployment host 4c1482b Added serial option to site.yml. cf0c25c Add common role to Ansible site file 80bdb45 Build process outputs each line twice c7c8790 Fix mariadb bootstrap error 388eee2 add telegraf log directory /var/log/kolla/telegraf e053738 Add Barbican ansible role 6860106 Fix wrong release name in a comment in sources.list.ubuntu bdb25ed Add missing apt-get clean in Ubuntu base image 1ab59dc Install apt-utils in Ubuntu base image f0aa137 move ovs cleanup to tools/cleanup-host 134089d Adding required check for Orchestration Kubernetes 28b80a0 Revert "Build a more organized doc structure" 3091f94 Fix manila_share container isn't up after deploy 419e560 Check if libvirtd apparmor profiles exists before removal 82f6d3f Allow mysql to be used as a database for Ceilometer 99f355e Use delorean rabbitmq 2536926 Clean imports in code 6417595 Added grafana container 25f0794 Improve README file cae4d36 Add ara to collect ansible playbook running statics 79e8586 Change with_ loop variables syntax to ansible 2 f59ddb3 Add neutron-lbaas-agent to exlude image for Ubuntu binary 8cd59db Remove novncproxy and spice from reload e31dede Fix generated sahara conf 52b5254 Use ``tgtd`` to take place of tgtd 0ca1956 Remove the duplicate word to improve the clarity of the sentence 0a50cb8 Change ceph version to Jewel 4bdf43c Move transport_url parameter before service_providers section 6f3d8aa Updated from global requirements 4af9bbe Ansible roles for collectd Container d8c70ec Adding manila endpoints to HAProxy d1d2e8e Fix manila-api binds to :: 7b5d5ce Update the command to restart the docker ffe56f8 Add Checking free port for Manila API 442daf7 loc fails with recent removal of heat dev env d3f65a8 Allow use of database for Horizon sessions 92eb565 Correct Ironic keystone_authtoken option name 95798a1 Add empty upgrade file to gnocchi role b364c67 add CentOS's docker config file in multinode.rst 363fa65 Remove the deprecated kolla-build group name 77f565e Fix keytone options in all.yml/globals.yml 0c9debe Add sahara ansible role 504fc35 Cinder-backup misses client part for NFS backend 5f62c22 Add cloudkitty ansible role 754a0ce Add extra methods in template when using template override b6de8fd Keepalived leaves VIP on the host in case of accidental removal. b51d107 Turn off bindep d3d3472 Implement Ansible rally role da8ce56 Cinder-backup fails while backing up iSCSI volumes 89392f4 Add gnocchi ansible role 9e8f7ef Comment some lines in globals.yml 663cbfb Correct Murano keystone_authtoken option name cf2ff03 TrivialFix: Delete virtual bridge artifacts when cleaning hosts 8bc778e Fix lost parameter --remote in generated start_ovsdb_server.sh 4b69671 Improve script to check used source versions cb51a44 Replace deprecated rabbitmq parametrs aa4b49a Add cloudkitty containers for type source 73dd4f6 Fix Typo in quickstart 93bff1c Add missing Docker images of OpenStack services to README file 97ca36c Add Barbican container dockerfile a89c9ff Init group owner of /etc/kolla to kolla 23921f1 Ensure doesn't use LOG.warn cd9774b Update destroy include images arg to LONGOPT bc1a468 Remove dev/heat note from READE file 49f7359 Added influxdb role 7f8b405 Use the standard start method for kolla-toolbox container c6dd714 Add precheck for ceilometer backend db65389 add iproute package in base image. a912b79 Use a local docker image namespace in gate 2bf3ce5 Updating ironic configurations in nova.conf 8229baf Add guidelines on adding a new service 55b184a repair gnocchi dockerfile cda6fb0 Update doc for congress 4b39d05 Added Ansible playbook for congress deploy 69af208 Release notes for customization 7f10848 replace baremetal_nic with api_interface 7bba25a Allow operators to override use of get-pip.py e4f3e34 Allow operators to customise rabbitmq plugins 96bf1cf Add warning to kolla-ansible destroy action 19c5e97 Allow operators to override versionlock for redhat in base f6e8430 Add a block around oraclelinux base package install 64c40e2 add deploy-servers command 538dbac adds bifrost ssh key generation 96b3f0a add bifrost deploy ansible support d7dfae7 generate bifrost yaml configs e821f58 Install neutron-lbaas-dashboard from source in horizon container ce92b49 Fix service_type of mistral endpoint 9688f95 Customizations for Neutron a9e16c8 introduce bifrost-deploy container c5668bd Add option to support dhcp/l3 agent ha 143f1c2 Add ansible raw task note, add apt-get update 62781f4 repair rally dockerfile c4be56c Fix nova_ssh container shell to allow instance resizes. 7ce05f9 Add aodh role 6841276 Removing development packages from Baremetal install defaults 7d0a2aa Limit hostfile generation to control nodes 906c074 Architecture guide doc f34d0b0 Customization for base ec40ed3 Add a check before wiping Ceph disks in bootstrap bf61489 Customizations for dind c12230a Fix using filter() to meet python2,3 c59b2cc Dockerfiles for collectd Container 9092f4a Fix removing nova_libvirt container issue 92b2fd9 Fix Kibana image build error 56838a3 repair aodh image dockerfile 17d36b7 Chage with_ loop variables syntax to ansible 2 2aac59a Updated from global requirements 8e98e5f Change source with dot at extend_start files 46e8196 Use six.StringIO 2973bc7 Add missing container image names to build config file fc30d58 Fix bandit gate jobs a05d4d7 Customizations for MariaDB 42bd520 Changed admin-openrc from DOMAIN_ID to DOMAIN_NAME 6c238ca Move rabbitmq precheck from start 54be45e Fix toolbox permission issue when enabling ceph 9f5efc5 Import the Murano core libary as part of setup d3c60d0 Customizations for Nova b597c90 Customizations for Ironic 3d4ebd6 Customizations for RabbitMQ 524868c Add dockerfiles for keystone fernet 1c68ae3 Add full support for fernet 3d12b6c Set 'balance source' for Horizon in haproxy d255743 Move to transport_url for rabbitmq configuration 1e22227 Updated from global requirements c096825 Add etcd container 158a852 Add defaults for interfaces to all.yml 1d56fcb Fix bug in Elasticsearch role 2a1c25d Fix Ubuntu binary build and deploy gate 598b718 Add missing \n at end of file 29c5421 Add mariadb client binaries to kolla-toolbox c3410a9 Fix some minor errors in the doc 2fb98a6 py3:Remove six.iterXXX 02da8e5 Fix typo in iscsi pull playbook 61e74c9 Vagrant doc updates 860e341 fix sahara dockerfile 1a7af3e Pin Ansible version to 2.1.1.0 in kolla-toolbox 9946b56 Remove log propagate configuration 08f1dda Updated from global requirements 254f7cc Sync the local_settings.j2 with horizon 066173b Implement mongodb replication set cluster 2b741eb Create the nova instances directory when need during starting 6710bbe Use dumb-init to manage the pid 1 process 755d517 Make tox -e docs work 04d6736 Pin to Ubuntu 16.04 2e0c5ec Fix Ubuntu source gate deployment 423e3f3 Remove unnecessary host at haproxy in site.yml f2a2b69 Remove the RUN directive for macros.install_packages in the Dockerfile e0a9347 Remove Kazoo dependency and Kolla Zookeeper helper 0002898 Fix the location of Kolla configurations in the evaluation workflow a9d0872 Handle empty package list for install_packages a01b803 Add basic checking for network_interface to prechecks 69bbb75 Updated from global requirements e70f8e1 Add Dockerfile for congress d96464e Improve rabbitmq-clusterer template code format 2e0571a Customizations for Multipathd ba4ef6b Update openvswitch base Dockerfile to include footers 1370909 Update heat base Dockerfile to include footers 8cd0d2a Simplify install process for faster quickstart execution 1116953 Add pull.yml file for tempest 26d8d6c Fix murano notification driver 9ac7f96 Create the _member_ role in the horizon role efd9065 Customizations for zaqar 5e35fc5 Port with_ loop variable syntax to Ansbile 2 (finish) d4373ed Update kubectl version at magnum-conductor container 40a0cb9 Update cirros image visibility in init-runonce b9465f8 Customizations for aodh 0ec7218 Customizations for murano 3f20f25 Customizations for sahara d03f1bb Customizations for trove b092f98 Updated from global requirements 4c7e0c2 Remove duplicate items 348dc0f Customizations for heka df40ff8 Fix Kolla home-page URL 4d6afc6 Start using orchestration_engine variable 53cb9f7 Add crudini b2a7905 Fix guide formating errors 731f0bb Add force flag to cleanup-images aa517c4 Build a more organized doc structure 3d6344d Move the keystone_*_url variable from common role to group vars bd3b79a Add guide to auto mount /run as shared 7b63d46 ironic.conf file missing enabled_drivers info 3486d5b Fix tar command path for magnum conductor using ubuntu f4f95e6 Fix neutron-server section in AIO sample inventory b234976 Add jq 4218a3b Add support for building vmtp container 5bb5899 Add a note about the sandbox environment to the CONTRIBUTING doc 4d6840c Customizations for Senlin dbc50ab Skips a debug log during image build 856d0a8 Minor formatting change to CONTRIBUTING.rst 29fcb04 enhancements to install_packages macro 316f0a7 Document the Dockerfile customisation mechanism 5878757 Fix the Ubuntu Xenial build gate 05ed43e Fix the memcache location value in horizon local settings 93d91cd Minor doc fix fdf9dd5 Customizations for Manila 0faf91c Fix LVM2 in Ubuntu section in Cinder guide 6d84d86 Customizations for Tgtd de7e8bc Updated from global requirements d2215ea Customizations for Designate cecfaaf Customizations for Elasticsearch c2f6cb1 Customizations for Kuryr 9b265dd Customizations for OpenStack Base 5031206 Customizations for Swift 43d2a0b Customizations for Tempest 99cf946 Customizations for Cinder b9a2839 Customizations for Watcher 8306864 Customizations for Glance 37b3c8c Keystone interface address and memcached override 99a1662 Fix interface address for Neutron-server b8de1f8 Added Test case for env and volume comp e4259f8 Fix designate bootstrap. c14636c Add --user-domain when adding heat role admin 3e8f998 add baremetal role to install kolla deps. 19a4096 iscsi initiator names must be unique among hosts cc41502 Fix intf address for RabbitMQ and disable cluster for Kube 495a905 Revert "Remove files from /var/lib/apt/lists when cleaning up on Ubuntu/Debian" 41ec75b Introduce a script to launch ovsdb-server process 34975e2 Port with_ loop variable syntax to Ansbile 2 057c92f Document the use of external Ceph journal drives 608f6c7 Remove heat dev environment 8078273 Cinder-backup requires iscsid running on the same host fc91ce7 Change Quickstart to follow code conventions ed1b3dc Optimize horizon cache and compress for http response 173d254 Add heka custom config to define user's log pipline 2187125 Customizations for kibana d707c59 Replace horizon default config with custom config 1bbd6b2 Fix typo in doc 6d45786 Change cleanup to destroy as cleanup is a misnomer 304c69a Customizations for Ceph 4e8887c Updated from global requirements 9c69d4b Fix prechecks of a vip address 823cb33 Remove unused project_yaml parameter from role metadata files 4e8bf3f Remove files from /var/lib/apt/lists when cleaning up on Ubuntu/Debian 1ce1cd1 Enable the nova microversion api cae30a9 Make the kolla_keystone_service can update fields a7c41a8 Fix inconsistencies in git url eb41179 Dockerfiles for Networking-SFC Container 464542b Customizations for kolla-toolbox 28f5722 Reducing disk footprint for Ubuntu/Debian images bb2397d Add Watcher default settings 59b887d Fix the evaluating conditional for enable es and kibana 5b45d47 Customizations for magnum c5ce1aa Customizations for keepalived edcb218 Add customizations for keystone 73dd761 Added influxdb container e418a04 Customizations for iscsid 391b069 Volume specification for ironic-api was invalid. c3d8262 Add doc8 test and improve rst syntax 1f0afeb Added neutron-metering-agent 1c0ba85 Replace keystone's wsgi config with custom config b8657a8 Add upgrade tasks for Ceilometer 76aeb50 Correct mistral-executor image name dee6f4f Updated from global requirements 9fd70b4 Modify some spelling mistakes 4cd95db Enable central logging without deploying elasticsearch/kibana 4f4ebb2 Customizations for Horizon 810b7e4 Cleanup images as part of kolla-ansible cleanup 29d9d66 Correct permissions to /etc/keystone/domains 046f739 Change workers to be static when using kubernates 85db94e Glance interface address, memcached override, and glance override. a6d89f4 Horizon interface address and memcached override 492411f Fix interface address for memcached atop kubernetes c91724b Fix the variable name mismatch 0c638e5 Added Test case for attribute comp 684b483 Using sys.exit(main()) instead of main() ae34973 Fix the kolla_docker issue with docker 1.12 fc97ff1 Change config for lbaas service_plugins ae3d381 Fix undefined error for cinder template 18fb1b2 Add "Programming Language :: Python :: 3" to setup config file e5ca547 Added telegraf container 08985a0 Use /etc file to overwrite the docker.service file 37cf84a Doc wording update 5838bd0 Enable kolla k8s to override bind api bind address in genconfig b1ba77b Customizations for mongodb 3eb8294 Customizations for haproxy 2df3d25 Fixing crond crashing with centos/source e504dad Updated from global requirements ffafebf External Ceph - Implementation Nova 3c3b028 Use a lower number of the workers 843f934 Make kolla-build list-dependencies option work 9f596ff Fix dict.values() PY3 compatible 512be70 Fix the neutron-lbaas-agent container issues 615b0ec Make the enable_isolated_metadata and force_metadata to yes in default f96458f Customizations for openvswitch 5fe1676 Use the node_custom_config variable in the config.yml file 4f3efd7 Clean up Glance image after sanity check 489bcd3 Implement customizations for heat-api-cfn container cd8f68b Vagrant plugin check 1bddef9 Python 3: dict.iteritems() 9cbceda Fixes Dockerfile for neutron-lbaas-agent cfa5b36 Customizations for ceilometer ba62df4 Minor Readability Adjustments to Operating Kolla c4f825f Fix Wording and Typos in Deployment Philosophy c5149a0 Customizations for rally 9ad412a Customizations for cron 8cfd14d Fix typo in cinder guide a7c3851 Customizations for mistral 1b0e701 Simplify the Cinder LVM backend 618d5d2 Pull tgtd image when need 2730005 Add empty upgrade.yml file to ceilometer role a66f007 Consistent external Ceph configuration for Glance f7e18ca Customizations for gnocchi 1a549d0 Allow custom configurations for ceilometer a7ac467 Ensure apt-transport-https is available. c3a6aa6 Add Watcher ansible roles and templates ba42fb6 Use lbaas alias instead of the class name 3a51aad Bind the ceilometer-api process to the api_interface only 76f0f9a Added ceilometer decision in neutron.conf for event notifications 2102631 implement Ansible Tempest role 101856b Fix the failure to create instance snapshot e5788a0 Customizations for heat b693638 Configurable policy.json for keystone 3894883 External Ceph - Implementation Cinder 30e3d90 Add missing configuration files for ceilometer a3b043a Add Cinder-Volume Package for Ubuntu binary install 94410d2 Change rgw frontend interface e61f13d Fix 'reconfigure' command of kolla 823ab3f Remove notification_driver option 72d13a3 fix small documentation error 4cd8ee4 Add pull.yml to the ceilometer 5d5b209 Add 'optional' param for mariadb heka conf 9aa385a TrivialFix:modify the spelling mistakes 1bfc817 Removing .erlang.cookie before rabbitmq bootstrap recreates it e7251f1 Improve glance sanity check f16a451 External Ceph support - Implementation Glance 51504c3 Keystones openstack_auth was undefined ef37687 Added unit test for volume operations bcebc7c Add Python 3.5 classifier and venv a5e402f Support Keystone Domain specific files 416028c Remove [neutron]/auth_strategy option in nova.conf 4ece523 Use local mirror of ceph and uca b34ede3 Enable Block Storage meters fbfab6a corrected documentation for registry version 39875a5 updated insecure docker-registry configuration 115c55e Add multipathing support to docker container 37b95f2 Add LDAP support to keystone Dockerfile a479afa Use inventory_hostname for Ceph bootstrap d4c0eec Updated from global requirements a109c74 Underline should match the title length in docs 77296eb Build docker images for OpenStack Watcher 9bd7136 Fix magnum default service type 998f8f7 Fix the memcached config in horizon local_settings 138c642 Add enable_iscsi option to etc/kolla/globals.yml cadf8af Read GPT label using sgdisk rather than udev 2d4161d Improve task names for Ceph 3f79e37 Fix the overwrite sudoers file issue 10258f1 Fix the native ovsdb_interace failed 379de15 Updated from global requirements fd64138 Fix the upgrade haproxy failed b8ea999 Fixed typo in all.yml 1d39946 Add Senlin Docker container 43a38c1 Fix broken save,list images/dependencies options 4c1913e Add releasenotes for ceilometer 186271d Fix publicURL endpoint not found issue in CI d426933 Use the disk size as the osd weight when osd_initial_weight is auto 2592a46 Copy lbaas-haproxy.filters file to /etc/neutron/rootwrap.d 727173f Cleanup RUN commands in base Dockerfile 5c1ca9e neutron-lbaas TO neutron-lbaas-agent f5b04c9 Added unit test for image operation 3bd1f14 Be smarter about what to do when making a docker client 31e5f67 Add test for remove container, get state and get env e26751b Remove MariaDB warning from HAproxy 993b827 Trivial fixes to correct couple of typos. 49f32cd Document a common Ceph bootstrap failure scenario 02e060e Add unit test for stop and restart container 54919dc Enable openvswitch container logs in host volumes 3321049 Fix container stop exeption bed6d14 Fix minor typo in security guide. 2a2a86a glance-*, fix rabbit config with ceilometer d5d0458 Revert "Fix radosgw 'rgw frontends' param" 5e90e90 Set the privsep_osbrick.helper_command in nova and cinder b6e51e9 Updated from global requirements dfb0e55 Customizations continued 3af14c3 Update urls for Delorean repo files fd5c3c7 Add upgrade pip command to QuickStart Doc 8940898 Add the verification of required images step before the deployment. a43a8d7 Fix docker daemon proxy support in vagrant aa9245f Remove deprecated package python-tuskarclient 480c479 Add Kuryr Docker container 929d84b Stop using a global logger for all the things ed02ccc Updated from global requirements 2d37c4c Notify operators that cinder + LVM doesn't work 9895e98 Use MAC address for looking for DHCP leases for Vagrant 24b90f1 Add customizations for apt keys and packages a013550 Add named volume for nova-libvirt b9e6848 Spec: Deploy Kolla images using Kubernetes bdaef30 Add reconfigure tasks for ceilometer ansible role a7f93b0 Make Neutron QoS service plugin configurable 748eef0 Remove mesos artifacts aba8add Connect to remote hosts as root 5f79732 Only keep localhost for 127.0.0.1 cbd67d3 Remove unused SUPPORT_NODE variable 5718356 Set internal vip to vagrant private network acfe3b7 Refer to operator VM as primary VM 4aa0951 TrivialFix: A typo fix in the globals.yml 4108c6c Implement ceilometer ansible role 0e459bb Added unit test for start container 7e00288 Properly fail precheck for internal VIP's network c073b2d Remove EC2 API related configurations and tasks bb6a4be Format commands to the code block e299720 Fix ownership of nova-novncproxy-source directory f1c3422 Macro install packages 4cc256d Remove the pull action in the deploy_aio CI d7b6659 Revert "Added precheck to check kernel version 4.2 on Ubuntu 14.04." 4579969 Added unit test for start container f76e9a1 Make cleanup remove restarting/exited containers 977a46c Makes ml2_conf.ini configuration consistent 3afe149 Implement Rally Dockerfile 8acc177 Remove verbose parameter from lbaas_agent.ini file 3f06362 Update kollaglue repo on docker to kolla 76f97b4 Create ansible home directory in kolla-toolbox container c37d1d2 Load the metadata definitions during Glance bootstrap 700d5d7 Remove Heat CLI deprecated commands b6ae413 The quickstart guide still says to use Anisble 1.9.4 66b6ecc Added test document d360d4e Change the search path to look locally 3772ac0 Fix typos in Kolla fa12f27 Fix the openstack_release variable in all.yml 2634a94 Added unit test for kolla_docker 0c71f2d Fix missing ceilometer user in the sudoers list for binary type 775a4c2 Remove liberty warning f43820d Revert "Changed namespace from kolla to kollaglue in oslo" 869e117 Add non-intrusive ctrl-c handling a45dc94 Use 'image' not 'item' 9803b45 Changed namespace from kolla to kollaglue in oslo 3b1b6ab Fix the prechecks for the ansible version b1f4c4e Run more kolla-ansible task in the gate 51074b0 Mechanism for Dockerfile customization c31688b Make build.py importable lib 334ef7d setup_{RedHat,Debian}.sh, make more idempotent a070739 Fix the neutron reconfigure issue 4d1fa3c Bump the ansible version to >2 in the kolla-toolbox 9585c1b Remove the deprecated kolla-build section 1d74db7 Config files having underscores breaks Kolla-Kubernetes. 442b4b6 Cleanup help string of install_type parameter e26e278 Add kolla-kubernetes bootstap logic endpoint script 2b87c88 Add kolla-kubernetes bootstrap capability to Keystone 994d1e5 Add kolla-kubernetes bootstrap capability to mariadb 2de2cf6 Fix URL to Heka documentation in README file 10f2b59 make rabbitmq container build with debian 547a7cf Make nova-libvirt container build with debian 4ca6e98 Make heka container build with debian 190ae59 Make container dind unpin old docker relase ccca2e5 Make swift-base container build with debian 5df0903 Make container kolla-toolbox build with debian 5fdd2b1 adding else statement with empty string starting ansible 2.X it require a else statement. 6994bb9 Updated from global requirements d511ee3 Install keepalived in neutron_l3_agent container c66eae3 Add vars to the merge_config task in config-neutron-fake.yml aab9e50 Document upgrading for operators b4759b2 Enable HAProxy consider MariaDB wsrep_local_state 30c8055 Use debian repos for debian base docker image 7c6990c Use an image object, recorder object and status constants e78ae9b Use a task model and dumb workers 80d2edb add curlrc file to base image fca876c Add .vimrc to .gitignore e31d85e adding Note for ubuntu 16.04 42d3e77 Update Cinder guide 5026e97 Updated Gnocchi binary containers 739d657 Add support for mistral ubuntu binary containers d1ec048 Add passwords parameter to LONG_OPTS in kolla-ansible script b3e8ac8 Don't always unpack image build results tuple, as it may be None e73bb5e Manila driver session is needed only in manila-share c45099d Retitle quick start to make it more obvious in index 340326f Move developer related docs into their own section b90ecae Fix the cinder backup permission issue when enable ceph 6c4c240 change keyfile to key d47f6bc Install missing package in spiceproxy container 4044a34 Pin the base distro release version 476da0f Log the traceback in the kolla libraries acb9eb7 Updated from global requirements 95c7d83 Use --subproject instead of deprecated --service option 3545e6d Fix the incompatibility for ansible 2.1.0 5b871d1 Do not use AUFS for centos/fedora/oraclelinux container images on ubuntu host 377264a Document using a custom config directory ba30579 Adds Neutron LBaaS Support 52d7daa Use file module instead of running rm to remove a directory 2726f6e Do not use bare variables in the ceph role be2724a Update Documentation 18ae114 Fix kolla-build return codes d1b170d Set ServerTokens parameter to 'Prod' for Ubuntu Apache config c51e315 Install correct version of arping eb1bfc2 Add support to lint the install commands in Dockerfiles 353d077 Add sahara containers 435b21b Update ubuntu dockerfiles for formatting a7433cd Add title to index page of developer documentation 9774ca9 Add support for murano binary containers for rpm based distros 3c3b0b8 Add ubuntu binary container for zaqar b60d8bc Add support for magnum ubuntu binary containers 07631a7 Update the image-building documentation ca1a055 Update quickstart guide for formatting ca942df Simplify image building information in quickstart 776d941 Specify registry volume location 491822c Bump the ansible to 2 f5e0a39 Change ansible image to kolla_toolbox a0a5a63 Fix syntax issue in advanced-configuration.rst 2da010a Make configurable the location where config files are merged c5f686a Generate configuration using ansible for any project 669d735 Compile the messages in the horizon e7441a4 Configure the rabbitmq ha policy in config file c98e9c4 Fix the rabbitmq crash on CentOS binary and source deploy 82316a7 Updated from global requirements e1b5b14 Make passwords.yml file generation configurable 410866f Add generate-config option to kolla-ansible f93739f Update the horizon dockerfile for formatting 47d7ed2 Change the SELinux doc to a security doc d2a62c9 Improve Vagrants bootstrap.sh proxy support a7d330d Fixed typos in Ansible files ec36e4f Updated from global requirements 43abb15 Collect more info from the gate for debug a627681 Stop configuring neutron to enforce DHCP MTU option 2b24807 Remove unwanted test dependency zake b071bb2 Add a cluster_network interface when we use ceph 163a250 Update advanced configuration d87b4f6 Structuring the documentation d958e24 Fix build for oraclelinux base ad573a5 Update doc about how to install python-docker-py on centos 1c29522 Doc rework for quickstart, multinode, and image-building 2758005 Updated from global requirements a2c2eba add support for non-default database_port in kolla/ansible 48b4b15 Avoid _ in rabbitmq_clusterer.config 1e6c033 Fix the virt_type in the gate f6e1786 Update liberty deployment warning 4150df4 Adding variables for Cinder iSCSI backend configuration 214117c Adding Upgrade to iscsid/tgtd container 2a12fbf Revert "Install master's version of an RDO keystone" 070bf25 Support a custom base image cafd89c Add docs about config overrides 63145ab Fix the copy docker log typo 75492cf Implement non-default signal handler for SIGINT e390744 Add extension to file 7bce099 Make "cleanup-containers" script works dynamically 7323eca Diagnostics for Environment a5c1aa0 Run HAProxy in a chroot jail 6654cb1 Add images from profile as matched only if no regex is used 1a2fe93 Make Heka collect Ceph logs 9024564 Deleting only images from kolla build 0fda8ba Deletes fake containers on cleanup 696f0b9 Generate image dependencies on CLI 6dfc1ef Add a CONTRIBUTING.rst for Kolla fa88ce2 Cleanup Mesos/Marathon related work 0a53d16 Use updated wsgi file for Keystone 9.0.0 release a08a762 Adding ability to specify capabilities and security e4505aa Updated from global requirements 8065a79 Update kolla irc channel cc33c10 Adding a few #nosec tags to prepare for Bandit usage 0fcee87 map the host localtime to the container a933ceb Add python-memcache package openstack base 025d57f Remove dependencies on kazoo and friends 2c34214 Remove unecessary blank lines 819ae24 Fix radosgw 'rgw frontends' param 420f874 Yum install Ansible 1.9 specified 7a0a598 Updated from global requirements 1c85dc1 Re-order the when condition in the cinder reconfigure 9318b93 Remove the useless nova_ssh configure in the passwords.yml d9fc4c6 Update murano service name 6ffe08d Fix the gate lying 00720db Handle multi Ethernets case in the gate e043fab Catch all the exception in the push thread e2fa75f Override default latest tag on ubuntu 9fce1ac Document custom-repos d0a8579 Update Vagrant docs to ensure libvirt is installed f21485f Remove the eth1 up and down manually in the rax-ord node 22a0707 Robustify of rabbitmq upgrade 2fdd7e4 Update designate dockerfile for formatting d553514 Configures swift-rsyncd to use non-default port fc8d716 Update remaining files for formatting 74601e3 Update openvswitch dockerfile for formatting db12b0c Update ceilometer dockerfile for formatting ccba149 Update chronos dockerfile for formatting 63c5e77 Update zookeeper dockerfile for formatting a861450 Fix failure to deploy with qemu.conf 47894bb Remove check for config files to verify MountFlags 3238373 Revert "check /e/s/s/docker.service in ubuntu" f442319 Workaround broken nodepool to unblock gate a0ce360 Fix iscsid & tgtd sections in inventory samples e245290 Disable tty for keystone register script 8588bd6 Add a role to cleanup containers after deployment 8c81888 Fix typo in kolla-ansible usage message a703469 Add missing extend_start files for ceilometer container 0786e6b Change Jinja2 rquirements to match globals 7962731 Use proper protocol scheme with nova aebb199 Make Cinder access glance in round robin fashion 4c8227e Add TLS to Kibana Web Interface 732ef0e Add Kibana quick start guide 53b609d Update base dockerfile for formatting e37fa65 Use proper CentOS repositories for ceph and qemu b700fc4 Enable unbuffered output for ansible 352df06 Updated from global requirements 3a6b65f Remove node_templates_directory in ansbile variable file 240ba96 Add Mistral Binary Containers 5b4057b Added help documentation for kolla-ansible upgrade 9c8f3ff Fixes kolla_toolbox failure due to missing pytz module 9575417 Fix the upgrade issue when image id is the same 6b6c984 Update haproxy dockerfile for formatting 343f70e Update Nova dockerfiles for formatting 11e5b7d Make Heat bootstrapping idempotent 22c9cb3 Update Neutron dockerfiles for formatting 57616d0 Update tgtd & iscsid dockerfiles for formatting 62bffa7 Update Cinder dockerfiles for formatting 5c5e903 check /e/s/s/docker.service in ubuntu c2ccf57 Remove Disable HAProxy option from Quick Start Guide c605d6c Add iscsid/tgtd specific parameters to Kolla infrastructure 6c2d7c7 Adds ansible code for iscsid and tgtd containers 480d94e Update Zaqar dockerfile for formatting 0efd4e2 Update Trove dockerfiles for formatting 7959c9f Update Swift dockerfiles for formatting ddf3282 Update OpenVSwitch dockerfile for formatting 3d1e4f4 Update Mongodb dockerfile for formatting 349d32f Update Mesos dockerfiles for formatting 7b3bfc4 Update Memcached dockerfile for formatting 7294ed9 Update Mariadb dockerfile for formatting 84acecc Update Manila dockerfile for formatting b028831 Update Marathon dockerfile for formatting 2a19d8e Update Magnum dockerfiles for formatting e561ce2 Update Ironic dockerfile for formatting b1f3aa0 Update Heka dockerfile for formatting d206bd1 Update Heat dockerfiles for formatting 9fe4d35 Update Gnocchi dockerfiles for formatting 2075d27 Update Aodh dockerfiles for formatting 970075d Update Ceilometer dockerfiles for formatting 11c6457 Add missing base os values to kolla-build.conf 15444da cleanup-host should not remove kolla-build.conf 3f85c54 Create /var/cache/swift in source installation 2069d75 Create and chown /etc/heka directory 4417571 Fix the wrong package name in Ubuntu binary build 7595dfc Drop root for swift 08b08c7 Identify container through PS1 shell variable 84a0f2d Make sure /etc/hostname is valid for SELinux f93ed9a Use a random virtual_router_id in the keepalived 67333e4 Set db connection retry to infinity a090039 Revert "Spec: Deploy Kolla images using Kubernetes" ed1c718 Clarify comment about binding erlang to IPv4 9119e2e Add note about heat being busted for development 915d3f1 Fix rabbitmq crash in centos gate df53d92 Revert "Add general_log to mariadb container and make heka collect it" 1c0dcd8 Add prechecks to validate kolla_internal_vip_address and kolla_external_vip_address d73ee4a Rabbitmq Upgrade restarts container only when image was changed. 184f01a Adds iscsid and tgtd docker containers e8800f9 Fix missing libvirt python module in ceilometer-compute f5c88ef Fix the neutron reconfigure issue when enable linuxbridge-agent 4ce1367 Remove /etc/kolla configuration folders e114bd8 Put the variables in alphabetical order in all.yml 07a5bd9 Add LVM2/iSCSI documentation eec0948 Fix launch vm failed in neutron-linuxbridge-agent env ad1461f Fix the qemu has nova permission in nova instances folder 7829aa2 Add quotes for RBMQ nodes definition fda9444 Add default flavors during init-runonce 316eee3 Increase max pool size so conductor doesn't implode 976a385 Update vagrant-dev-env.rst 99761c5 Spec: Deploy Kolla images using Kubernetes c71eed1 Updated from global requirements 404dd84 Add mongodb in cleanup containers script afc2bd8 Configure Neutron to use internalURL for contacting Nova 0e6fcdb Added Kibana instructions to quickstart.rst 8cdd8c4 Increase max scheduling attempts to 10 ba4bcdb Change waiting on mariadb.pid 76ec9cb Fix manila keystone v3 issues for all clients 64ab5b0 Fix the Neutron reconfigure cfd806a Log the SHA of the Git ref for source builds f0ad131 Add nova_ssh in cleanup containers script 7676b07 Adds migration step from nova to nova_api database bf6cae2 Add remove apparmor reminder to the quickstart 8595707 Check empty passwords in $CONFIG_DIR/passwords.yml 1dc48d7 Updated from global requirements 5095731 Add comments on site.yml neutron hosts reordering 2a182ac Correct typo c7e261c Check empty passwords in /etc/kolla/passwords.yml in prechecks 86bafee Add general_log to mariadb container and make heka collect it 1e8abe3 Make Heka write Keepalived logs to dedicated directory 4242083 Implement nova-ssh container 2e396fe Restoring openstack_release option 7ab705c Add Ubuntu binary build and deploy gate 9bde623 Remove the tempest version constrains in tempest container 676998a Make keepalived virtual_router_id param configurable 7f2dd73 Add a step to clean all ceph references in fstab 0bba5fe Workaround ansible bug related to delegate_to bbbe846 When two interfaces are used for two VIPs, tie them together 5aa2dcc Fix IP resolve check for RabbitMQ on AIO f0be9c7 Update Quickstart with example for distro and install type 5680bf0 Enable the kibana access from the external network 1fac190 Increase database connections to 10000 47a6d10 Update swift name de66508 Start the haproxy by using haproxy-system-wrapper 792e2c1 Fix the nova reconfigure in the multinode env 833c126 Added precheck to check kernel version 4.2 on Ubuntu 14.04. e1b9b8e Add optional services option in globals.yml 25393eb Pass extra variables through kolla-ansible to ansible-playbook 9a910d6 Starting heka bootstrap container failed in deployment 5f381df Fix gate by adding MariaDB-shared dependnecy 584690a Fixing permission for libvirtd.log f7066db Fix the Ceph reconfigure 3f707d7 Revert "Fix consistently failing CentOS gate" b9603d3 Remove bootstrap_mariadb with cleanup-containers 493650a Change keystone log dir 0a6cff4 Refactor the glance service group mapping 9523fd0 Only copy the necessary config files for Glance 0ae14eb Restrict the rabbitmq only start on rabbitmq group 0dcb830 Use packaged pip instead of easy_install a789346 Fix gate to use world writeable docker socket 1fc0003 Fix the wrong refer self in kolla_docker.py 328a7e8 Fix typos in Kolla d2ad5f2 Remove meaningless char in regexp of find_disks.py file 5b18913 Change heat domain to heat_user_domain 1c177f3 Revert "Make heat work" ba62740 Add kibana authentication using HAproxy 7bcf58c Upgrade elasticsearch 674ff43 Change CentOS in documentation 17e0de6 Fix consistently failing CentOS gate 4d58ef5 Include docker python install 7524b37 Make heat work 4e60b99 Revert libvirt change in heka-openstack.toml.j2 in master 0d2591d Reduce log errors from heka b188d3a Re-set external_network_bridge for l3 agent 801ef2e Add reno support 8d96d63 Add creation of new log folder for Horizon 27975f8 Add conntrack-tools fea486a MariaDB is not copied if enable_rabitmq is disabled 8307b06 Swift busted with Heka 31634c4 Add PBR generation of version information 8ec7811 Changes horizon log location to kolla_logs volume 1ef3dd1 Enable horizon domain logins 77c657b Remove ironic images from excluded list c25002c Check relevant logging mechanism in the gate 8e2423a Added note about nested environment 7af0ab9 Make heka collect libvirtd.log in nova_libvirt container d686443 Disable deprecated heat plugins. 1d31b79 Remove static password 7936b18 Enabled spice c135dcb Fix rax-ord commands dcc15b9 Wrong variable name for spicehtml5proxy 28cc39e Fix bad apache2 close 7a9d1a3 Fix problem where ipv6 address causes failure f03e06e Add generate_passwords.py to generate passwords a8f3da2 Improve openstack-base image for centos binary 3e7be65 Split versions onto new line 7982ff0 Dynamically pull list of projects and versions afce10d Fix mysql bootstrap b13c18a Install neutron in manila-share group only when enable_manila is true 052b01c Fix rax-ord gate 5929833 Fix heat endpoint registration 76e0c09 Allow version_check to work on local git repo 66f3944 Fix Linux bridge reconfig issue 3b12b7b Attach external NIC to a NAT-Network if on Wi-Fi d7495b1 Fix the prechecks role idempotent 127bd6f Ceilometer needs pymongo to start d786ac9 Move manila variable 56fd071 Change deprecated options throughout Kolla f4175f0 Fix 'optional' config.json values 0a1486a Rework heka log copying 5250a00 Allow external ceph journals and fix bootstrap 6d0cd53 Allow user to choose filesystem for osd d4535b6 Add memcached_servers to keystone_auth section 0da2541 Increase usefulness of openstack-base 45aafc7 Fix linuxbridge driver e9b9a84 Fix permissions for log extraction in gate b920539 Update quickstart doc to use drop-in unit files d2f828a Add check if all the hostnames are resolvable 50c5208 Explain how to use kolla-ansible pull 05b6995 Fixes incorrect swift service endpoints de695f0 Fix inconsistancy in globals.yml 9fbcd6c Enabled nova->glance snapshots 23e7f6c Playbook for rabbitmq upgrade bb342b0 Correct var name in globals.yml ec3baf0 Install Elasticsearch and Kibana packages using yum/apt-get ef0a135 Add unmap to cinder for ceph a577634 Reorder operations of mkdir and useradd in toolbox c2f2be4 Changing Swift option section in globals.yml 1f371e2 Allow per node configuration with augments ff91d53 Refactor glance config tasks b160a78 Add cron to pull playbooks f096cdc After refactor, the upgrade code was missing task 264e908 Update README for heka image a41ab6f Reconfigure for haproxy d4a5c75 Manila ubuntu binary container f111123 Fix race condition in haproxy e0688a7 Increase the docker parition for rht bases in gate b98bc3a Change libvirt volume name to libvirtd 768c7d7 Adds genisoimage package dependency to nova-compute 997fc3b Customizations for memcached Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 102 +- ansible/action_plugins/merge_configs.py | 112 ++- ansible/action_plugins/merge_yaml.py | 96 ++ ansible/bifrost.yml | 5 + ansible/destroy.yml | 4 + ansible/group_vars/all.yml | 214 +++- ansible/inventory/all-in-one | 181 +++- ansible/inventory/multinode | 185 +++- ansible/kolla-host.yml | 7 + ansible/library/bslurp.py | 13 +- ansible/library/kolla_docker.py | 139 ++- ansible/library/merge_yaml.py | 51 + ansible/roles/aodh/defaults/main.yml | 43 + ansible/roles/aodh/meta/main.yml | 3 + ansible/roles/aodh/tasks/bootstrap.yml | 41 + ansible/roles/aodh/tasks/bootstrap_service.yml | 21 + ansible/roles/aodh/tasks/config.yml | 47 + ansible/roles/aodh/tasks/deploy.yml | 18 + ansible/roles/aodh/tasks/do_reconfigure.yml | 79 ++ ansible/roles/aodh/tasks/main.yml | 2 + ansible/roles/aodh/tasks/pull.yml | 28 + ansible/roles/aodh/tasks/reconfigure.yml | 6 + ansible/roles/aodh/tasks/register.yml | 40 + ansible/roles/aodh/tasks/start.yml | 49 + ansible/roles/aodh/tasks/upgrade.yml | 6 + ansible/roles/aodh/templates/aodh-api.json.j2 | 19 + .../roles/aodh/templates/aodh-evaluator.json.j2 | 11 + ansible/roles/aodh/templates/aodh-listener.json.j2 | 11 + ansible/roles/aodh/templates/aodh-notifier.json.j2 | 11 + ansible/roles/aodh/templates/aodh.conf.j2 | 40 + ansible/roles/aodh/templates/wsgi-aodh.conf.j2 | 25 + ansible/roles/barbican/defaults/main.yml | 40 + ansible/roles/barbican/meta/main.yml | 3 + ansible/roles/barbican/tasks/bootstrap.yml | 41 + ansible/roles/barbican/tasks/bootstrap_service.yml | 21 + ansible/roles/barbican/tasks/config.yml | 53 + ansible/roles/barbican/tasks/deploy.yml | 16 + ansible/roles/barbican/tasks/do_reconfigure.yml | 74 ++ ansible/roles/barbican/tasks/main.yml | 2 + ansible/roles/barbican/tasks/pull.yml | 21 + ansible/roles/barbican/tasks/reconfigure.yml | 5 + ansible/roles/barbican/tasks/register.yml | 40 + ansible/roles/barbican/tasks/start.yml | 37 + ansible/roles/barbican/tasks/upgrade.yml | 6 + .../barbican/templates/barbican-api-paste.ini.j2 | 60 ++ .../roles/barbican/templates/barbican-api.ini.j2 | 11 + .../roles/barbican/templates/barbican-api.json.j2 | 23 + .../templates/barbican-keystone-listener.json.j2 | 11 + .../barbican/templates/barbican-worker.json.j2 | 11 + ansible/roles/barbican/templates/barbican.conf.j2 | 55 ++ ansible/roles/baremetal/defaults/main.yml | 33 + .../roles/baremetal/tasks/bootstrap-servers.yml | 4 + ansible/roles/baremetal/tasks/install.yml | 59 ++ ansible/roles/baremetal/tasks/main.yml | 2 + ansible/roles/baremetal/tasks/post-install.yml | 86 ++ ansible/roles/baremetal/tasks/pre-install.yml | 140 +++ .../roles/baremetal/templates/docker_apt_repo.j2 | 2 + .../roles/baremetal/templates/docker_defaults.j2 | 26 + .../baremetal/templates/docker_systemd_service.j2 | 11 + .../roles/baremetal/templates/docker_yum_repo.j2 | 6 + ansible/roles/bifrost/defaults/main.yml | 7 + ansible/roles/bifrost/tasks/bootstrap.yml | 28 + ansible/roles/bifrost/tasks/config.yml | 30 + ansible/roles/bifrost/tasks/deploy-servers.yml | 21 + ansible/roles/bifrost/tasks/deploy.yml | 5 + ansible/roles/bifrost/tasks/main.yml | 2 + ansible/roles/bifrost/tasks/reconfigure.yml | 1 + ansible/roles/bifrost/tasks/start.yml | 13 + ansible/roles/bifrost/tasks/upgrade.yml | 1 + ansible/roles/bifrost/templates/bifrost.yml.j2 | 3 + ansible/roles/bifrost/templates/dib.yml.j2 | 2 + ansible/roles/bifrost/templates/id_rsa | 1 + ansible/roles/bifrost/templates/id_rsa.pub | 1 + ansible/roles/bifrost/templates/servers.yml.j2 | 1 + ansible/roles/bifrost/templates/ssh_config | 3 + ansible/roles/ceilometer/defaults/main.yml | 50 + ansible/roles/ceilometer/meta/main.yml | 3 + ansible/roles/ceilometer/tasks/bootstrap.yml | 51 + .../roles/ceilometer/tasks/bootstrap_service.yml | 22 + ansible/roles/ceilometer/tasks/config.yml | 62 ++ ansible/roles/ceilometer/tasks/deploy.yml | 14 + ansible/roles/ceilometer/tasks/do_reconfigure.yml | 84 ++ ansible/roles/ceilometer/tasks/main.yml | 2 + ansible/roles/ceilometer/tasks/pull.yml | 35 + ansible/roles/ceilometer/tasks/reconfigure.yml | 7 + ansible/roles/ceilometer/tasks/register.yml | 40 + ansible/roles/ceilometer/tasks/start.yml | 67 ++ ansible/roles/ceilometer/tasks/upgrade.yml | 6 + .../ceilometer/templates/ceilometer-api.json.j2 | 20 + .../templates/ceilometer-central.json.j2 | 11 + .../templates/ceilometer-collector.json.j2 | 11 + .../templates/ceilometer-compute.json.j2 | 11 + .../templates/ceilometer-notification.json.j2 | 29 + .../roles/ceilometer/templates/ceilometer.conf.j2 | 57 ++ .../ceilometer/templates/event_definitions.yaml.j2 | 553 +++++++++++ .../ceilometer/templates/event_pipeline.yaml.j2 | 13 + .../roles/ceilometer/templates/pipeline.yaml.j2 | 92 ++ .../templates/wsgi-ceilometer-api.conf.j2 | 24 + ansible/roles/ceph/tasks/bootstrap_mons.yml | 6 +- ansible/roles/ceph/tasks/bootstrap_osds.yml | 68 +- ansible/roles/ceph/tasks/config.yml | 3 +- ansible/roles/ceph/tasks/do_reconfigure.yml | 187 ++-- ansible/roles/ceph/tasks/generate_cluster.yml | 4 +- ansible/roles/ceph/tasks/reconfigure.yml | 1 - ansible/roles/ceph/tasks/start_mons.yml | 2 + ansible/roles/ceph/tasks/start_osds.yml | 21 +- ansible/roles/ceph/tasks/start_rgws.yml | 5 +- ansible/roles/ceph/tasks/upgrade.yml | 3 - ansible/roles/ceph/templates/ceph-mon.json.j2 | 12 +- ansible/roles/ceph/templates/ceph-osd.json.j2 | 6 +- ansible/roles/ceph/templates/ceph-rgw.json.j2 | 6 +- ansible/roles/ceph/templates/ceph.conf.j2 | 18 +- ansible/roles/cinder/defaults/main.yml | 27 +- ansible/roles/cinder/meta/main.yml | 2 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 + ansible/roles/cinder/tasks/bootstrap_service.yml | 1 + ansible/roles/cinder/tasks/ceph.yml | 1 + ansible/roles/cinder/tasks/check.yml | 1 - ansible/roles/cinder/tasks/config.yml | 11 +- ansible/roles/cinder/tasks/deploy.yml | 8 +- ansible/roles/cinder/tasks/do_reconfigure.yml | 12 +- ansible/roles/cinder/tasks/external_ceph.yml | 36 + ansible/roles/cinder/tasks/reconfigure.yml | 1 - ansible/roles/cinder/tasks/register.yml | 6 +- ansible/roles/cinder/tasks/start.yml | 34 +- ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/cinder/templates/cinder-api.json.j2 | 12 + .../roles/cinder/templates/cinder-backup.json.j2 | 25 +- .../cinder/templates/cinder-scheduler.json.j2 | 12 + .../roles/cinder/templates/cinder-volume.json.j2 | 24 +- ansible/roles/cinder/templates/cinder.conf.j2 | 62 +- ansible/roles/cloudkitty/defaults/main.yml | 39 + ansible/roles/cloudkitty/meta/main.yml | 3 + ansible/roles/cloudkitty/tasks/bootstrap.yml | 41 + .../roles/cloudkitty/tasks/bootstrap_service.yml | 20 + ansible/roles/cloudkitty/tasks/config.yml | 34 + ansible/roles/cloudkitty/tasks/deploy.yml | 14 + ansible/roles/cloudkitty/tasks/do_reconfigure.yml | 66 ++ ansible/roles/cloudkitty/tasks/main.yml | 2 + ansible/roles/cloudkitty/tasks/pull.yml | 14 + ansible/roles/cloudkitty/tasks/reconfigure.yml | 4 + ansible/roles/cloudkitty/tasks/register.yml | 53 + ansible/roles/cloudkitty/tasks/start.yml | 24 + ansible/roles/cloudkitty/tasks/upgrade.yml | 6 + .../cloudkitty/templates/cloudkitty-api.json.j2 | 11 + .../templates/cloudkitty-processor.json.j2 | 11 + .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 51 + ansible/roles/collectd/defaults/main.yml | 12 + ansible/roles/collectd/meta/main.yml | 3 + ansible/roles/collectd/tasks/config.yml | 23 + ansible/roles/collectd/tasks/deploy.yml | 4 + ansible/roles/collectd/tasks/do_reconfigure.yml | 61 ++ ansible/roles/collectd/tasks/main.yml | 2 + ansible/roles/collectd/tasks/pull.yml | 6 + ansible/roles/collectd/tasks/reconfigure.yml | 3 + ansible/roles/collectd/tasks/start.yml | 15 + ansible/roles/collectd/tasks/upgrade.yml | 4 + ansible/roles/collectd/templates/collectd.json.j2 | 3 + ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/tasks/bootstrap.yml | 18 - ansible/roles/common/tasks/config.yml | 121 +-- ansible/roles/common/tasks/main.yml | 2 + ansible/roles/common/tasks/pull.yml | 8 +- ansible/roles/common/tasks/reconfigure.yml | 1 - ansible/roles/common/tasks/start.yml | 12 +- ansible/roles/common/tasks/upgrade.yml | 5 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 4 +- .../common/templates/cron-logrotate-aodh.conf.j2 | 3 + .../templates/cron-logrotate-barbican.conf.j2 | 3 + .../templates/cron-logrotate-cloudkitty.conf.j2 | 3 + .../templates/cron-logrotate-gnocchi.conf.j2 | 3 + .../common/templates/cron-logrotate-iscsid.conf.j2 | 3 + .../templates/cron-logrotate-keepalived.conf.j2 | 2 +- .../templates/cron-logrotate-keystone.conf.j2 | 2 - .../common/templates/cron-logrotate-sahara.conf.j2 | 3 + .../common/templates/cron-logrotate-senlin.conf.j2 | 3 + .../templates/cron-logrotate-watcher.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 30 +- ansible/roles/common/templates/heka-aodh.toml.j2 | 13 + .../roles/common/templates/heka-barbican.toml.j2 | 13 + .../common/templates/heka-elasticsearch.toml.j2 | 2 +- .../roles/common/templates/heka-gnocchi.toml.j2 | 13 + .../roles/common/templates/heka-haproxy.toml.j2 | 9 +- .../roles/common/templates/heka-horizon.toml.j2 | 13 + .../roles/common/templates/heka-keepalived.toml.j2 | 9 + .../roles/common/templates/heka-keystone.toml.j2 | 3 +- .../roles/common/templates/heka-openstack.toml.j2 | 2 +- ansible/roles/common/templates/heka-swift.toml.j2 | 6 +- ansible/roles/common/templates/heka.json.j2 | 86 +- .../roles/common/templates/kolla-toolbox.json.j2 | 10 + ansible/roles/congress/defaults/main.yml | 39 + ansible/roles/congress/meta/main.yml | 3 + ansible/roles/congress/tasks/bootstrap.yml | 41 + ansible/roles/congress/tasks/bootstrap_service.yml | 20 + ansible/roles/congress/tasks/config.yml | 37 + ansible/roles/congress/tasks/deploy.yml | 16 + ansible/roles/congress/tasks/main.yml | 2 + ansible/roles/congress/tasks/pull.yml | 21 + ansible/roles/congress/tasks/reconfigure.yml | 74 ++ ansible/roles/congress/tasks/register.yml | 40 + ansible/roles/congress/tasks/start.yml | 36 + ansible/roles/congress/tasks/upgrade.yml | 6 + .../roles/congress/templates/congress-api.json.j2 | 18 + .../congress/templates/congress-datasource.json.j2 | 18 + .../templates/congress-policy-engine.json.j2 | 18 + ansible/roles/congress/templates/congress.conf.j2 | 49 + ansible/roles/destroy/defaults/main.yml | 2 + ansible/roles/destroy/tasks/cleanup_containers.yml | 3 + ansible/roles/destroy/tasks/cleanup_host.yml | 12 + ansible/roles/destroy/tasks/cleanup_images.yml | 5 + ansible/roles/destroy/tasks/copy_tools.yml | 31 + ansible/roles/destroy/tasks/main.yml | 8 + .../roles/elasticsearch/tasks/do_reconfigure.yml | 64 ++ ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 + ansible/roles/elasticsearch/tasks/start.yml | 2 + ansible/roles/elasticsearch/tasks/upgrade.yml | 3 + .../elasticsearch/templates/elasticsearch.json.j2 | 12 + .../elasticsearch/templates/elasticsearch.yml.j2 | 11 +- ansible/roles/etcd/defaults/main.yml | 10 + ansible/roles/etcd/meta/main.yml | 3 + ansible/roles/etcd/tasks/bootstrap.yml | 19 + ansible/roles/etcd/tasks/config.yml | 15 + ansible/roles/etcd/tasks/deploy.yml | 6 + ansible/roles/etcd/tasks/do_reconfigure.yml | 64 ++ ansible/roles/etcd/tasks/main.yml | 2 + ansible/roles/etcd/tasks/pull.yml | 6 + ansible/roles/etcd/tasks/reconfigure.yml | 3 + ansible/roles/etcd/tasks/start.yml | 24 + ansible/roles/etcd/tasks/upgrade.yml | 4 + ansible/roles/etcd/templates/etcd.json.j2 | 3 + ansible/roles/glance/defaults/main.yml | 6 +- ansible/roles/glance/meta/main.yml | 2 +- ansible/roles/glance/tasks/bootstrap.yml | 3 +- ansible/roles/glance/tasks/bootstrap_service.yml | 2 + ansible/roles/glance/tasks/check.yml | 1 - ansible/roles/glance/tasks/config.yml | 54 +- ansible/roles/glance/tasks/deploy.yml | 12 +- ansible/roles/glance/tasks/do_reconfigure.yml | 32 +- ansible/roles/glance/tasks/external_ceph.yml | 13 + ansible/roles/glance/tasks/reconfigure.yml | 1 - ansible/roles/glance/tasks/start.yml | 2 + ansible/roles/glance/tasks/upgrade.yml | 1 - ansible/roles/glance/templates/glance-api.conf.j2 | 34 +- ansible/roles/glance/templates/glance-api.json.j2 | 26 +- .../roles/glance/templates/glance-registry.conf.j2 | 26 +- .../roles/glance/templates/glance-registry.json.j2 | 7 + ansible/roles/gnocchi/defaults/main.yml | 52 + ansible/roles/gnocchi/meta/main.yml | 3 + ansible/roles/gnocchi/tasks/bootstrap.yml | 41 + ansible/roles/gnocchi/tasks/bootstrap_service.yml | 21 + ansible/roles/gnocchi/tasks/ceph.yml | 45 + ansible/roles/gnocchi/tasks/config.yml | 52 + ansible/roles/gnocchi/tasks/deploy.yml | 26 + ansible/roles/gnocchi/tasks/do_reconfigure.yml | 74 ++ ansible/roles/gnocchi/tasks/external_ceph.yml | 30 + ansible/roles/gnocchi/tasks/main.yml | 2 + ansible/roles/gnocchi/tasks/pull.yml | 21 + ansible/roles/gnocchi/tasks/reconfigure.yml | 5 + ansible/roles/gnocchi/tasks/register.yml | 40 + ansible/roles/gnocchi/tasks/start.yml | 39 + ansible/roles/gnocchi/tasks/upgrade.yml | 6 + ansible/roles/gnocchi/templates/api-paste.ini.j2 | 38 + .../roles/gnocchi/templates/gnocchi-api.json.j2 | 49 + .../gnocchi/templates/gnocchi-metricd.json.j2 | 38 + .../roles/gnocchi/templates/gnocchi-statsd.json.j2 | 38 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 56 ++ .../roles/gnocchi/templates/wsgi-gnocchi.conf.j2 | 17 + ansible/roles/grafana/defaults/main.yml | 16 + ansible/roles/grafana/meta/main.yml | 3 + ansible/roles/grafana/tasks/bootstrap.yml | 38 + ansible/roles/grafana/tasks/config.yml | 27 + ansible/roles/grafana/tasks/deploy.yml | 9 + ansible/roles/grafana/tasks/do_reconfigure.yml | 47 + ansible/roles/grafana/tasks/main.yml | 2 + ansible/roles/grafana/tasks/pull.yml | 7 + ansible/roles/grafana/tasks/reconfigure.yml | 3 + ansible/roles/grafana/tasks/start.yml | 13 + ansible/roles/grafana/tasks/upgrade.yml | 4 + ansible/roles/grafana/templates/grafana.ini.j2 | 39 + ansible/roles/grafana/templates/grafana.json.j2 | 23 + ansible/roles/haproxy/tasks/config.yml | 20 +- ansible/roles/haproxy/tasks/do_reconfigure.yml | 74 ++ ansible/roles/haproxy/tasks/main.yml | 1 + ansible/roles/haproxy/tasks/reconfigure.yml | 2 + ansible/roles/haproxy/tasks/start.yml | 4 +- ansible/roles/haproxy/templates/haproxy.cfg.j2 | 268 +++++- ansible/roles/haproxy/templates/haproxy.json.j2 | 4 +- ansible/roles/haproxy/templates/keepalived.conf.j2 | 33 +- ansible/roles/heat/defaults/main.yml | 4 +- ansible/roles/heat/tasks/bootstrap.yml | 3 +- ansible/roles/heat/tasks/bootstrap_service.yml | 2 + ansible/roles/heat/tasks/config.yml | 18 +- ansible/roles/heat/tasks/do_reconfigure.yml | 12 +- ansible/roles/heat/tasks/reconfigure.yml | 1 - ansible/roles/heat/tasks/register.yml | 42 +- ansible/roles/heat/tasks/start.yml | 3 + ansible/roles/heat/tasks/upgrade.yml | 1 - ansible/roles/heat/templates/_deprecated.yaml | 4 + ansible/roles/heat/templates/heat-api-cfn.json.j2 | 7 + ansible/roles/heat/templates/heat-api.json.j2 | 9 +- ansible/roles/heat/templates/heat-engine.json.j2 | 13 + ansible/roles/heat/templates/heat.conf.j2 | 43 +- ansible/roles/horizon/defaults/main.yml | 19 + ansible/roles/horizon/tasks/bootstrap.yml | 41 + ansible/roles/horizon/tasks/bootstrap_service.yml | 19 + ansible/roles/horizon/tasks/config.yml | 17 +- ansible/roles/horizon/tasks/deploy.yml | 5 + ansible/roles/horizon/tasks/do_reconfigure.yml | 8 +- ansible/roles/horizon/tasks/reconfigure.yml | 1 - ansible/roles/horizon/tasks/register.yml | 13 + ansible/roles/horizon/tasks/start.yml | 5 +- ansible/roles/horizon/tasks/upgrade.yml | 1 - ansible/roles/horizon/templates/horizon.conf.j2 | 53 +- ansible/roles/horizon/templates/local_settings.j2 | 292 ++++-- ansible/roles/influxdb/defaults/main.yml | 9 + ansible/roles/influxdb/meta/main.yml | 3 + ansible/roles/influxdb/tasks/config.yml | 23 + ansible/roles/influxdb/tasks/deploy.yml | 4 + ansible/roles/influxdb/tasks/do_reconfigure.yml | 47 + ansible/roles/influxdb/tasks/main.yml | 2 + ansible/roles/influxdb/tasks/pull.yml | 7 + ansible/roles/influxdb/tasks/reconfigure.yml | 3 + ansible/roles/influxdb/tasks/start.yml | 13 + ansible/roles/influxdb/tasks/upgrade.yml | 4 + ansible/roles/influxdb/templates/influxdb.conf.j2 | 57 ++ ansible/roles/influxdb/templates/influxdb.json.j2 | 23 + ansible/roles/ironic/defaults/main.yml | 2 +- ansible/roles/ironic/tasks/bootstrap.yml | 5 +- ansible/roles/ironic/tasks/bootstrap_service.yml | 5 +- ansible/roles/ironic/tasks/config.yml | 11 +- ansible/roles/ironic/tasks/do_reconfigure.yml | 12 +- ansible/roles/ironic/tasks/reconfigure.yml | 1 - ansible/roles/ironic/tasks/start.yml | 17 +- ansible/roles/ironic/tasks/upgrade.yml | 1 - ansible/roles/ironic/templates/ironic-api.json.j2 | 7 + .../ironic/templates/ironic-conductor.json.j2 | 17 + .../ironic/templates/ironic-inspector.json.j2 | 6 +- ansible/roles/ironic/templates/ironic.conf.j2 | 20 +- ansible/roles/iscsi/defaults/main.yml | 13 + ansible/roles/iscsi/meta/main.yml | 3 + ansible/roles/iscsi/tasks/config.yml | 36 + ansible/roles/iscsi/tasks/deploy.yml | 4 + ansible/roles/iscsi/tasks/main.yml | 2 + ansible/roles/iscsi/tasks/pull.yml | 14 + ansible/roles/iscsi/tasks/reconfigure.yml | 1 + ansible/roles/iscsi/tasks/start.yml | 45 + ansible/roles/iscsi/tasks/upgrade.yml | 4 + ansible/roles/iscsi/templates/iscsid.json.j2 | 4 + ansible/roles/iscsi/templates/tgtd.json.j2 | 4 + ansible/roles/keystone/defaults/main.yml | 23 +- .../keystone/files/fernet_rotate_cron_generator.py | 107 ++ ansible/roles/keystone/tasks/bootstrap.yml | 4 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/check.yml | 3 +- ansible/roles/keystone/tasks/config.yml | 91 +- ansible/roles/keystone/tasks/deploy.yml | 5 + ansible/roles/keystone/tasks/do_reconfigure.yml | 35 +- ansible/roles/keystone/tasks/init_fernet.yml | 15 + ansible/roles/keystone/tasks/pull.yml | 18 + ansible/roles/keystone/tasks/reconfigure.yml | 1 - ansible/roles/keystone/tasks/register.yml | 2 +- ansible/roles/keystone/tasks/start.yml | 42 +- ansible/roles/keystone/tasks/upgrade.yml | 1 - ansible/roles/keystone/templates/crontab.j2 | 3 + .../keystone/templates/fernet-node-sync.sh.j2 | 16 + .../roles/keystone/templates/fernet-rotate.sh.j2 | 9 + ansible/roles/keystone/templates/id_rsa | 1 + ansible/roles/keystone/templates/id_rsa.pub | 1 + .../keystone/templates/keystone-fernet.json.j2 | 41 + .../roles/keystone/templates/keystone-paste.ini.j2 | 83 ++ .../roles/keystone/templates/keystone-ssh.json.j2 | 17 + ansible/roles/keystone/templates/keystone.conf.j2 | 40 + ansible/roles/keystone/templates/keystone.json.j2 | 30 + ansible/roles/keystone/templates/ssh_config.j2 | 4 + ansible/roles/keystone/templates/sshd_config.j2 | 5 + .../roles/keystone/templates/wsgi-keystone.conf.j2 | 14 +- ansible/roles/kibana/tasks/pull.yml | 1 + ansible/roles/kibana/tasks/start.yml | 1 + ansible/roles/kibana/tasks/upgrade.yml | 3 + ansible/roles/kibana/templates/kibana.yml.j2 | 4 +- ansible/roles/kuryr/defaults/main.yml | 20 + ansible/roles/kuryr/tasks/bootstrap.yml | 19 + ansible/roles/kuryr/tasks/config.yml | 25 + ansible/roles/kuryr/tasks/deploy.yml | 8 + ansible/roles/kuryr/tasks/main.yml | 2 + ansible/roles/kuryr/tasks/pull.yml | 6 + ansible/roles/kuryr/tasks/register.yml | 17 + ansible/roles/kuryr/tasks/start.yml | 19 + ansible/roles/kuryr/tasks/upgrade.yml | 4 + ansible/roles/kuryr/templates/kuryr.conf.j2 | 17 + ansible/roles/kuryr/templates/kuryr.json.j2 | 17 + ansible/roles/kuryr/templates/kuryr.spec.j2 | 1 + ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 + ansible/roles/magnum/tasks/bootstrap_service.yml | 1 + ansible/roles/magnum/tasks/config.yml | 11 +- ansible/roles/magnum/tasks/do_reconfigure.yml | 12 +- ansible/roles/magnum/tasks/reconfigure.yml | 1 - ansible/roles/magnum/tasks/register.yml | 50 +- ansible/roles/magnum/tasks/start.yml | 3 + ansible/roles/magnum/tasks/upgrade.yml | 1 - ansible/roles/magnum/templates/magnum-api.json.j2 | 7 + .../magnum/templates/magnum-conductor.json.j2 | 12 + ansible/roles/magnum/templates/magnum.conf.j2 | 50 +- ansible/roles/manila/defaults/main.yml | 6 +- ansible/roles/manila/tasks/bootstrap.yml | 2 + ansible/roles/manila/tasks/bootstrap_service.yml | 1 + ansible/roles/manila/tasks/config.yml | 28 +- ansible/roles/manila/tasks/do_reconfigure.yml | 12 +- ansible/roles/manila/tasks/reconfigure.yml | 1 - ansible/roles/manila/tasks/start.yml | 5 +- ansible/roles/manila/tasks/upgrade.yml | 1 - ansible/roles/manila/templates/manila-api.json.j2 | 7 + .../manila/templates/manila-scheduler.json.j2 | 7 + .../roles/manila/templates/manila-share.conf.j2 | 76 ++ .../roles/manila/templates/manila-share.json.j2 | 7 + ansible/roles/manila/templates/manila.conf.j2 | 77 +- ansible/roles/mariadb/tasks/bootstrap_cluster.yml | 34 +- ansible/roles/mariadb/tasks/check.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 10 +- ansible/roles/mariadb/tasks/do_reconfigure.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 4 +- ansible/roles/mariadb/tasks/reconfigure.yml | 1 - ansible/roles/mariadb/tasks/recover_cluster.yml | 57 +- ansible/roles/mariadb/tasks/start.yml | 26 +- ansible/roles/mariadb/tasks/upgrade.yml | 3 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 28 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 18 + ansible/roles/mariadb/templates/wsrep-notify.sh.j2 | 75 ++ ansible/roles/memcached/tasks/do_reconfigure.yml | 8 +- ansible/roles/memcached/tasks/reconfigure.yml | 1 - ansible/roles/memcached/tasks/start.yml | 4 +- ansible/roles/memcached/tasks/upgrade.yml | 1 - .../roles/memcached/templates/memcached.json.j2 | 2 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/bootstrap.yml | 3 +- ansible/roles/mistral/tasks/bootstrap_service.yml | 1 + ansible/roles/mistral/tasks/config.yml | 11 +- ansible/roles/mistral/tasks/do_reconfigure.yml | 12 +- ansible/roles/mistral/tasks/pull.yml | 2 +- ansible/roles/mistral/tasks/reconfigure.yml | 1 - ansible/roles/mistral/tasks/register.yml | 4 +- ansible/roles/mistral/tasks/start.yml | 3 + ansible/roles/mistral/tasks/upgrade.yml | 1 - .../roles/mistral/templates/mistral-api.json.j2 | 7 + .../roles/mistral/templates/mistral-engine.json.j2 | 7 + .../mistral/templates/mistral-executor.json.j2 | 7 + ansible/roles/mistral/templates/mistral.conf.j2 | 23 +- ansible/roles/mongodb/defaults/main.yml | 2 + ansible/roles/mongodb/tasks/bootstrap.yml | 1 + ansible/roles/mongodb/tasks/bootstrap_cluster.yml | 17 + ansible/roles/mongodb/tasks/config.yml | 1 - ansible/roles/mongodb/tasks/do_reconfigure.yml | 8 +- ansible/roles/mongodb/tasks/reconfigure.yml | 1 - ansible/roles/mongodb/tasks/start.yml | 14 + .../mongodb/templates/bootstrap_cluster.js.j2 | 14 + ansible/roles/mongodb/templates/mongodb.conf.j2 | 26 +- ansible/roles/mongodb/templates/mongodb.json.j2 | 12 + ansible/roles/multipathd/defaults/main.yml | 9 + ansible/roles/multipathd/tasks/config.yml | 24 + ansible/roles/multipathd/tasks/deploy.yml | 4 + ansible/roles/multipathd/tasks/main.yml | 2 + ansible/roles/multipathd/tasks/pull.yml | 7 + ansible/roles/multipathd/tasks/reconfigure.yml | 1 + ansible/roles/multipathd/tasks/start.yml | 21 + ansible/roles/multipathd/tasks/upgrade.yml | 4 + .../roles/multipathd/templates/multipath.conf.j2 | 11 + .../roles/multipathd/templates/multipathd.json.j2 | 11 + ansible/roles/murano/defaults/main.yml | 2 +- ansible/roles/murano/tasks/bootstrap.yml | 3 +- ansible/roles/murano/tasks/bootstrap_service.yml | 1 + ansible/roles/murano/tasks/config.yml | 11 +- ansible/roles/murano/tasks/do_reconfigure.yml | 12 +- ansible/roles/murano/tasks/reconfigure.yml | 1 - ansible/roles/murano/tasks/register.yml | 2 +- ansible/roles/murano/tasks/start.yml | 41 + ansible/roles/murano/tasks/upgrade.yml | 3 +- ansible/roles/murano/templates/murano-api.json.j2 | 7 + .../roles/murano/templates/murano-engine.json.j2 | 7 + ansible/roles/murano/templates/murano.conf.j2 | 34 +- ansible/roles/neutron/defaults/main.yml | 18 +- ansible/roles/neutron/tasks/bootstrap.yml | 2 + ansible/roles/neutron/tasks/bootstrap_service.yml | 47 + .../roles/neutron/tasks/config-neutron-fake.yml | 18 +- ansible/roles/neutron/tasks/config.yml | 79 +- ansible/roles/neutron/tasks/deploy.yml | 10 +- ansible/roles/neutron/tasks/do_reconfigure.yml | 206 ++-- ansible/roles/neutron/tasks/pull.yml | 20 +- ansible/roles/neutron/tasks/reconfigure.yml | 7 +- ansible/roles/neutron/tasks/start.yml | 153 ++- ansible/roles/neutron/tasks/upgrade.yml | 5 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/dnsmasq.conf.j2 | 1 - ansible/roles/neutron/templates/l3_agent.ini.j2 | 10 +- ansible/roles/neutron/templates/lbaas_agent.ini.j2 | 6 + .../roles/neutron/templates/metadata_agent.ini.j2 | 3 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 11 +- .../neutron/templates/neutron-dhcp-agent.json.j2 | 14 +- .../neutron/templates/neutron-l3-agent.json.j2 | 12 + .../neutron/templates/neutron-lbaas-agent.json.j2 | 35 + .../templates/neutron-linuxbridge-agent.json.j2 | 7 + .../templates/neutron-metadata-agent.json.j2 | 12 + .../templates/neutron-openvswitch-agent.json.j2 | 7 + .../roles/neutron/templates/neutron-server.json.j2 | 21 +- .../neutron/templates/neutron-vpnaas-agent.json.j2 | 47 + ansible/roles/neutron/templates/neutron.conf.j2 | 54 +- .../roles/neutron/templates/neutron_lbaas.conf.j2 | 4 + .../roles/neutron/templates/neutron_vpnaas.conf.j2 | 4 + .../templates/openvswitch-db-server.json.j2 | 2 +- .../neutron/templates/openvswitch-vswitchd.json.j2 | 2 +- .../roles/neutron/templates/vpnaas_agent.ini.j2 | 11 + ansible/roles/nova/defaults/main.yml | 20 +- ansible/roles/nova/meta/main.yml | 2 +- ansible/roles/nova/tasks/bootstrap.yml | 4 + ansible/roles/nova/tasks/bootstrap_service.yml | 33 +- ansible/roles/nova/tasks/ceph.yml | 2 +- ansible/roles/nova/tasks/config-nova-fake.yml | 11 +- ansible/roles/nova/tasks/config.yml | 32 +- ansible/roles/nova/tasks/deploy.yml | 7 +- ansible/roles/nova/tasks/do_reconfigure.yml | 61 +- ansible/roles/nova/tasks/external-ceph.yml | 49 + ansible/roles/nova/tasks/pull.yml | 8 +- ansible/roles/nova/tasks/reconfigure.yml | 1 - ansible/roles/nova/tasks/register.yml | 15 +- ansible/roles/nova/tasks/reload.yml | 12 - ansible/roles/nova/tasks/start_compute.yml | 55 +- ansible/roles/nova/tasks/start_conductors.yml | 1 + ansible/roles/nova/tasks/start_controllers.yml | 5 + ansible/roles/nova/tasks/upgrade.yml | 5 +- ansible/roles/nova/templates/id_rsa | 1 + ansible/roles/nova/templates/id_rsa.pub | 1 + ansible/roles/nova/templates/libvirtd.conf.j2 | 4 +- ansible/roles/nova/templates/nova-api.json.j2 | 7 + .../nova/templates/nova-compute-ironic.json.j2 | 8 +- ansible/roles/nova/templates/nova-compute.json.j2 | 24 +- .../roles/nova/templates/nova-conductor.json.j2 | 7 + .../roles/nova/templates/nova-consoleauth.json.j2 | 7 + ansible/roles/nova/templates/nova-libvirt.json.j2 | 8 +- .../roles/nova/templates/nova-novncproxy.json.j2 | 7 + .../roles/nova/templates/nova-scheduler.json.j2 | 7 + .../nova/templates/nova-spicehtml5proxy.json.j2 | 7 + ansible/roles/nova/templates/nova-ssh.json.j2 | 29 + ansible/roles/nova/templates/nova.conf.j2 | 128 ++- ansible/roles/nova/templates/qemu.conf.j2 | 1 + ansible/roles/nova/templates/ssh_config.j2 | 4 + ansible/roles/nova/templates/sshd_config.j2 | 5 + ansible/roles/prechecks/tasks/package_checks.yml | 7 +- ansible/roles/prechecks/tasks/port_checks.yml | 208 +++- ansible/roles/prechecks/tasks/service_checks.yml | 51 +- ansible/roles/prechecks/vars/main.yml | 3 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/bootstrap.yml | 1 + ansible/roles/rabbitmq/tasks/config.yml | 5 +- ansible/roles/rabbitmq/tasks/do_reconfigure.yml | 8 +- ansible/roles/rabbitmq/tasks/main.yml | 1 + ansible/roles/rabbitmq/tasks/reconfigure.yml | 1 - ansible/roles/rabbitmq/tasks/start.yml | 1 + ansible/roles/rabbitmq/tasks/upgrade.yml | 36 + .../roles/rabbitmq/templates/definitions.json.j2 | 14 + .../templates/rabbitmq-clusterer.config.j2 | 11 + .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 19 +- .../roles/rabbitmq/templates/rabbitmq.config.j2 | 19 +- ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 22 +- .../templates/rabbitmq_clusterer.config.j2 | 9 - ansible/roles/rally/defaults/main.yml | 18 + ansible/roles/rally/meta/main.yml | 3 + ansible/roles/rally/tasks/bootstrap.yml | 41 + ansible/roles/rally/tasks/bootstrap_service.yml | 20 + ansible/roles/rally/tasks/config.yml | 26 + ansible/roles/rally/tasks/deploy.yml | 4 + ansible/roles/rally/tasks/do_reconfigure.yml | 64 ++ ansible/roles/rally/tasks/main.yml | 2 + ansible/roles/rally/tasks/pull.yml | 6 + ansible/roles/rally/tasks/reconfigure.yml | 2 + ansible/roles/rally/tasks/start.yml | 11 + ansible/roles/rally/tasks/upgrade.yml | 6 + ansible/roles/rally/templates/rally.conf.j2 | 9 + ansible/roles/rally/templates/rally.json.j2 | 18 + ansible/roles/sahara/defaults/main.yml | 36 + ansible/roles/sahara/meta/main.yml | 3 + ansible/roles/sahara/tasks/bootstrap.yml | 41 + ansible/roles/sahara/tasks/bootstrap_service.yml | 21 + ansible/roles/sahara/tasks/config.yml | 34 + ansible/roles/sahara/tasks/deploy.yml | 14 + ansible/roles/sahara/tasks/do_reconfigure.yml | 69 ++ ansible/roles/sahara/tasks/main.yml | 2 + ansible/roles/sahara/tasks/pull.yml | 14 + ansible/roles/sahara/tasks/reconfigure.yml | 4 + ansible/roles/sahara/tasks/register.yml | 40 + ansible/roles/sahara/tasks/start.yml | 26 + ansible/roles/sahara/tasks/upgrade.yml | 6 + ansible/roles/sahara/templates/sahara-api.json.j2 | 23 + .../roles/sahara/templates/sahara-engine.json.j2 | 23 + ansible/roles/sahara/templates/sahara.conf.j2 | 47 + ansible/roles/senlin/defaults/main.yml | 35 + ansible/roles/senlin/meta/main.yml | 3 + ansible/roles/senlin/tasks/bootstrap.yml | 41 + ansible/roles/senlin/tasks/bootstrap_service.yml | 20 + ansible/roles/senlin/tasks/config.yml | 34 + ansible/roles/senlin/tasks/deploy.yml | 14 + ansible/roles/senlin/tasks/do_reconfigure.yml | 66 ++ ansible/roles/senlin/tasks/main.yml | 2 + ansible/roles/senlin/tasks/pull.yml | 14 + ansible/roles/senlin/tasks/reconfigure.yml | 4 + ansible/roles/senlin/tasks/register.yml | 40 + ansible/roles/senlin/tasks/start.yml | 24 + ansible/roles/senlin/tasks/upgrade.yml | 6 + ansible/roles/senlin/templates/senlin-api.json.j2 | 18 + .../roles/senlin/templates/senlin-engine.json.j2 | 18 + ansible/roles/senlin/templates/senlin.conf.j2 | 41 + ansible/roles/swift/defaults/main.yml | 10 +- ansible/roles/swift/tasks/config.yml | 35 +- ansible/roles/swift/tasks/do_reconfigure.yml | 12 +- ansible/roles/swift/tasks/reconfigure.yml | 1 - ansible/roles/swift/tasks/start.yml | 21 +- ansible/roles/swift/tasks/upgrade.yml | 1 - ansible/roles/swift/templates/account.conf.j2 | 1 + ansible/roles/swift/templates/container.conf.j2 | 1 + ansible/roles/swift/templates/object.conf.j2 | 1 + ansible/roles/swift/templates/proxy-server.conf.j2 | 5 + ansible/roles/swift/templates/swift-rsyncd.json.j2 | 2 +- ansible/roles/telegraf/defaults/main.yml | 18 + ansible/roles/telegraf/meta/main.yml | 3 + ansible/roles/telegraf/tasks/config.yml | 26 + ansible/roles/telegraf/tasks/deploy.yml | 4 + ansible/roles/telegraf/tasks/do_reconfigure.yml | 42 + ansible/roles/telegraf/tasks/main.yml | 2 + ansible/roles/telegraf/tasks/pull.yml | 6 + ansible/roles/telegraf/tasks/reconfigure.yml | 2 + ansible/roles/telegraf/tasks/start.yml | 19 + ansible/roles/telegraf/tasks/upgrade.yml | 4 + ansible/roles/telegraf/templates/telegraf.conf.j2 | 55 ++ ansible/roles/telegraf/templates/telegraf.json.j2 | 24 + ansible/roles/tempest/defaults/main.yml | 23 + ansible/roles/tempest/meta/main.yml | 3 + ansible/roles/tempest/tasks/config.yml | 26 + ansible/roles/tempest/tasks/deploy.yml | 4 + ansible/roles/tempest/tasks/do_reconfigure.yml | 64 ++ ansible/roles/tempest/tasks/main.yml | 2 + ansible/roles/tempest/tasks/pull.yml | 6 + ansible/roles/tempest/tasks/reconfigure.yml | 2 + ansible/roles/tempest/tasks/start.yml | 11 + ansible/roles/tempest/tasks/upgrade.yml | 4 + ansible/roles/tempest/templates/tempest.conf.j2 | 73 ++ ansible/roles/tempest/templates/tempest.json.j2 | 11 + ansible/roles/vmtp/defaults/main.yml | 25 + ansible/roles/vmtp/meta/main.yml | 3 + ansible/roles/vmtp/tasks/config.yml | 26 + ansible/roles/vmtp/tasks/deploy.yml | 6 + ansible/roles/vmtp/tasks/do_reconfigure.yml | 58 ++ ansible/roles/vmtp/tasks/main.yml | 2 + ansible/roles/vmtp/tasks/pull.yml | 7 + ansible/roles/vmtp/tasks/reconfigure.yml | 3 + ansible/roles/vmtp/tasks/start.yml | 11 + ansible/roles/vmtp/tasks/upgrade.yml | 4 + ansible/roles/vmtp/templates/cfg.default.yaml.j2 | 41 + ansible/roles/watcher/defaults/main.yml | 38 + ansible/roles/watcher/meta/main.yml | 3 + ansible/roles/watcher/tasks/bootstrap.yml | 41 + ansible/roles/watcher/tasks/bootstrap_service.yml | 20 + ansible/roles/watcher/tasks/config.yml | 37 + ansible/roles/watcher/tasks/deploy.yml | 16 + ansible/roles/watcher/tasks/do_reconfigure.yml | 71 ++ ansible/roles/watcher/tasks/main.yml | 2 + ansible/roles/watcher/tasks/pull.yml | 21 + ansible/roles/watcher/tasks/reconfigure.yml | 5 + ansible/roles/watcher/tasks/register.yml | 40 + ansible/roles/watcher/tasks/start.yml | 36 + ansible/roles/watcher/tasks/upgrade.yml | 6 + .../roles/watcher/templates/watcher-api.json.j2 | 18 + .../watcher/templates/watcher-applier.json.j2 | 18 + .../roles/watcher/templates/watcher-engine.json.j2 | 18 + ansible/roles/watcher/templates/watcher.conf.j2 | 43 + ansible/site.yml | 252 ++++- bindep.txt | 8 + dev/heat/get-image.sh | 41 - dev/heat/kollacluster.yaml | 120 --- dev/heat/kollanode.yaml | 251 ----- dev/heat/local.yaml.example | 5 - dev/vagrant/Vagrantfile | 56 +- dev/vagrant/Vagrantfile.custom.example | 6 + dev/vagrant/bootstrap.sh | 51 +- dev/vagrant/newest_dhcp_lease.py | 7 +- .../barbican-keystone-listener/Dockerfile.j2 | 22 + .../ceilometer/ceilometer-base/ceilometer_sudoers | 1 + .../ceilometer/ceilometer-collector/Dockerfile.j2 | 18 +- .../ceilometer-notification/Dockerfile.j2 | 18 +- .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 19 + .../congress/congress-policy-engine/Dockerfile.j2 | 10 + .../designate-backend-bind9/Dockerfile.j2 | 17 +- .../designate/designate-pool-manager/Dockerfile.j2 | 28 + .../designate/designate-poolmanager/Dockerfile.j2 | 25 - .../plugins/decoders/os_horizon_apache_log.lua | 72 ++ .../keystone-fernet/fetch_fernet_tokens.py | 84 ++ .../keystone/keystone-fernet/keystone_bootstrap.sh | 43 + .../neutron-linuxbridge-agent/Dockerfile.j2 | 35 +- .../neutron/neutron-metadata-agent/Dockerfile.j2 | 14 +- .../neutron/neutron-metering-agent/Dockerfile.j2 | 25 + .../neutron-openvswitch-agent/Dockerfile.j2 | 26 +- .../neutron/neutron-vpnaas-agent/extend_start.sh | 8 + .../openvswitch/openvswitch-base/extend_start.sh | 10 + .../openvswitch-db-server/Dockerfile.j2 | 11 +- .../openvswitch-db-server/start_ovsdb_server.sh | 30 + .../openvswitch/openvswitch-vswitchd/Dockerfile.j2 | 8 +- etc/kolla/globals.yml | 181 +++- etc/kolla/passwords.yml | 155 ++- kolla/cmd/build.py | 720 +------------- kolla/cmd/genpwd.py | 87 ++ kolla/common/config.py | 213 ++-- kolla/common/task.py | 42 + kolla/hacking/checks.py | 14 + kolla/image/__init__.py | 0 kolla/image/build.py | 1017 ++++++++++++++++++++ kolla/template/__init__.py | 0 kolla/template/filters.py | 29 + kolla/template/methods.py | 63 ++ loc | 2 - releasenotes/notes/add-aodh-a5de8a339f25c1a2.yaml | 3 + .../notes/add-barbican-8f0636668001de73.yaml | 4 + .../notes/add-ceilometer-a4759f21564de7eb.yaml | 3 + ...ceph-disk-init-protection-5b38ce8f1502ff69.yaml | 20 + .../add-cinder-vg-check-c70d9f79d8cfd09b.yaml | 4 + .../notes/add-cloudkitty-10eb09a96de60144.yaml | 3 + .../notes/add-collectd-6e3387dfff75040a.yaml | 3 + .../notes/add-congress-877644b4b0e2ed0a.yaml | 5 + ...-init-manage-root-process-e25a529b322d4fac.yaml | 3 + .../notes/add-fernet-support-54ccb88b901d8d8b.yaml | 3 + .../notes/add-gnocchi-94296c3ed6e979a8.yaml | 3 + .../notes/add-header-blocks-9ac76254e5f5ab20.yaml | 3 + .../notes/add-multipath-9ee29be1fcea6d94.yaml | 3 + ...-mysql-ceilometer-backend-9ffdc4c0495fb801.yaml | 3 + ...-network-interface-checks-0e789f3f93cbdb09.yaml | 3 + .../notes/add-networking-sfc-62ae433ed7aa4e33.yaml | 5 + .../notes/add-neutron-dvr-f1b3541e22c0fbc3.yaml | 4 + .../notes/add-neutron-lbaas-dbb92dada9d34ceb.yaml | 3 + .../notes/add-neutron-vpnaas-88e0780326100e36.yaml | 3 + releasenotes/notes/add-py35-f0ddb519029f5ee3.yaml | 8 + releasenotes/notes/add-rally-c6d1468accfb1da6.yaml | 3 + releasenotes/notes/add-reno-f5e9ff4d9ccfa785.yaml | 3 + .../notes/add-sahara-f2be7bf79935792e.yaml | 3 + releasenotes/notes/add-vmtp-7d6aef3125a38dbe.yaml | 3 + .../notes/add-watcher-a97995ace827cf71.yaml | 6 + .../notes/ansible-tempest-44edbca4436f3c19.yaml | 3 + releasenotes/notes/bifrost-f080de99005ad38e.yaml | 17 + .../bp-support-network-ha-1a771d735a268219.yaml | 5 + .../notes/cadf-notifications-6c102c16090688d5.yaml | 6 + .../notes/ceph-jewel-33caab815946cb4c.yaml | 5 + .../notes/cloudkitty-docker-fb6b3d7e006a0697.yaml | 4 + ...igurable-horizon-sessions-1dd22eae714a7001.yaml | 4 + .../notes/congress-broken-cbf8ca59d90a85cb.yaml | 3 + .../notes/deprecate-fedora-97f8f963a410eb44.yaml | 6 + .../deprecate-nova-network-76e5c7b61a3add5b.yaml | 5 + ...include-header-and-footer-71f16045920b0100.yaml | 5 + ...dockerfile-customizations-26981ebefe3b710b.yaml | 10 + ...g-reducing-disk-footprint-2a6b0056d57bd1de.yaml | 5 + .../enable-nova-microversion-b445f22548b41c2a.yaml | 3 + .../etcd-docker-ansible-51baaa1322a0c5a8.yaml | 3 + .../notes/etcd-dockerfile-69b8bfc1df4bb2ab.yaml | 3 + ...fix-cinder-endpoints-urls-22746b1524accbbf.yaml | 3 + .../notes/heka-deprecation-d53e757470b3f7b4.yaml | 3 + ...ngo-replicate-set-cluster-0d3f140f7116c3ba.yaml | 3 + ...mport-murano-core-library-86f00abaa21cfb94.yaml | 4 + ...egrate-gnocchi-cloudkitty-4b2fcfe8ce9d520e.yaml | 3 + ...tegrate-gnocchi-with-ceph-a6d5f81f4d8b0391.yaml | 3 + .../notes/kibana-4-6-7765f556efba2724.yaml | 3 + .../notes/kolla-host-584270e3aee6dfd6.yaml | 29 + .../notes/kuryr-libnetwork-1e6ab1916a8a0d10.yaml | 3 + ...al-fix-wrong-service-type-72ff772fc7cf0b82.yaml | 5 + .../notes/monitoring-ad566513454614db.yaml | 7 + ...ultiple-physical-networks-f2de7444f7e2d145.yaml | 5 + ...e-monitoring-experimental-f9ceaacd4d5cb71a.yaml | 7 + .../notes/pin-distro-version-4d835846a1ab5283.yaml | 6 + .../notes/rabbit-3.6.2-accdb2d3ecd493cc.yaml | 3 + .../notes/senlin-container-e1ae6aa932097e51.yaml | 3 + ...port-ceilometer-in-cinder-4386a3e5d134d84f.yaml | 4 + ...sk-size-as-weight-in-ceph-9d6353f1d3f03199.yaml | 11 + .../notes/support-ldap-e678ce5b0a7eaedb.yaml | 4 + .../upgade-to-ubuntu-xenial-93e68d2330e9bd84.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 251 +++++ releasenotes/source/index.rst | 19 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 11 +- setup.cfg | 18 +- specs/ansible-multi.rst | 2 +- specs/high-availability.rst | 2 +- specs/kubernetes-deployment.rst | 352 +++++++ specs/mesos-deployment.rst | 188 ---- test-requirements.txt | 30 +- tools/cleanup-containers | 55 +- tools/cleanup-host | 37 + tools/cleanup-images | 8 +- tools/deploy_aio.sh | 70 +- tools/diag | 29 + tools/generate_passwords.py | 1 + tools/init-runonce | 39 +- tools/kolla-ansible | 105 +- tools/pre-commit-hook | 4 +- tools/setup_Debian.sh | 44 +- tools/setup_RedHat.sh | 36 +- tools/setup_gate.sh | 72 +- tools/setup_nodes.yml | 7 + tools/validate-all-dockerfiles.sh | 11 + tools/validate-all-json.sh | 1 - tools/validate-all-maintainer.sh | 7 - tools/validate-all-yaml.sh | 1 - tools/validate-install-command.sh | 12 + tools/validate-maintainer.sh | 1 - tools/validate-yaml.py | 2 +- tools/version-check.py | 161 ++++ tools/version_check.py | 129 --- tox.ini | 73 +- 1126 files changed, 25483 insertions(+), 6271 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7995bf1..0b5a62d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr>=1.6 # Apache-2.0 -docker-py>=1.6.0 # Apache-2.0 +docker-py<1.8.0,>=1.6.0 # Apache-2.0 @@ -10,4 +10,5 @@ six>=1.9.0 # MIT -oslo.config>=3.7.0 # Apache-2.0 -graphviz>=0.4.0 # MIT License -beautifulsoup4 # MIT -setuptools>=16.0 # PSF/ZPL +oslo.config>=3.14.0 # Apache-2.0 +graphviz!=0.5.0,>=0.4.0 # MIT License +setuptools!=24.0.0,>=16.0 # PSF/ZPL +pycrypto>=2.6 # Public Domain +netaddr>=0.7.13,!=0.7.16 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 19037e4..883a801 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bandit>=0.17.3 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0 @@ -5,0 +6,3 @@ bashate>=0.2 # Apache-2.0 +beautifulsoup4 # MIT +doc8 # Apache-2.0 +extras # MIT @@ -7 +10 @@ hacking>=0.10.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -9,10 +12,9 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -PyYAML>=3.1.0 # MIT -python-barbicanclient>=3.3.0 # Apache-2.0 -python-ceilometerclient>=2.2.1 # Apache-2.0 -python-cinderclient>=1.3.1 # Apache-2.0 -python-glanceclient>=2.0.0 # Apache-2.0 -python-heatclient>=0.6.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 -python-neutronclient!=4.1.0,>=2.6.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache2 +PrettyTable<0.8,>=0.7.1 # BSD +PyYAML>=3.10.0 # MIT +python-barbicanclient>=4.0.0 # Apache-2.0 +python-ceilometerclient>=2.5.0 # Apache-2.0 +python-heatclient>=1.5.0 # Apache-2.0 +python-neutronclient>=5.1.0 # Apache-2.0 +python-openstackclient>=2.1.0 # Apache-2.0 @@ -20 +22,2 @@ python-swiftclient>=2.2.0 # Apache-2.0 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +pytz>=2013.6 # MIT +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -24 +26,0 @@ testtools>=1.4.0 # MIT -zake>=0.1.6 # Apache-2.0

1 0

[new][tripleo] tripleo-puppet-elements 5.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are satisfied to announce the release of: tripleo-puppet-elements 5.0.0: Puppet building rules for OpenStack images. This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 2.0.0..5.0.0 ----------------------------------------------- 8ee01a5 Midonet element now complies with version 5.2 01fb147 Install python-dracclient and python-proliantutils on controllers b067cc8 Add mod_auth_mellon to overcloud-controller element 8b4ad07 Add mod_ssl to overcloud-controller element 5db42bb Install ipxe-bootimgs and tftp-server on controller 20fd074 Add openstack-selinux to the overcloud-base image 343f93f Ceph Jewel repos split packages into ceph-{mon,osd,radosgw} f5a195c Install OpenStack Manila UI eb28192 Install osops-tools-monitoring-oschecks package 9fa6ff1 Revert "bump puppet-ceph to stable/hammer" 00ed205 Installing openstack-sahara-ui 093c466 Add packages required for dpdk in compute node ea61150 Install crudini in overcloud again bce9583 Add puppet-ec2api module 38b51ab Support for the OpenvSwitch OVN Controller 36e8ce1 Fix typo in package name python-cradox 870f63d Add zaqar package to controller image 659c2e2 Add python-cardox package to controllers 452271c Add mistral packages to controller image bee7e8b Add new puppet-certmonger reference fb7ddee Add openstack-neutron-sriov-nic-agent package in overcloud image 09527d7 Remove puppet-certmonger 83d4282 Modify the midonet repositories to Mitaka c9f3548 Add certmonger package to controllers 9be05cd Fix puppet modules in mixed src/pkg environments 3ddcfc4 Use package-installs in puppet-modules element fe50711 Remove puppet-qpid from module list 125e279 Add Ironic packages to overcloud controller 3b52cd4 Honor $DIB_DEFAULT_INSTALLTYPE in puppet-modules 95542a0 bump puppet-ceph to stable/hammer 943af4f Install Ceph RGW package in the overcloud 277b671 Truncate nova.conf (temporarily) f31f41e Gnocchi Integration ee1b25f Remove tuskar from puppet-modules 54ab484 Add rubygems-deep_merge to package list eb4bd78 Add puppet-barbican to puppet-modules. 8ffce98 Add puppet-oslo to modules elements c6b3f08 Add barbican-api-package to the overcloud. 566c231 Use package-installs for puppet installation Diffstat (except docs and test files) ------------------------------------- elements/hiera/install.d/package-installs-hiera | 1 + .../configure.d/40-truncate-nova-config | 14 ++++ elements/hiera/pkg-map | 5 ++ .../install.d/package-installs-overcloud-base | 2 + elements/overcloud-base/pkg-map | 4 +- .../package-installs-overcloud-ceph-storage | 1 + elements/overcloud-ceph-storage/pkg-map | 8 +-- .../package-installs-overcloud-cinder-volume | 1 + elements/overcloud-cinder-volume/pkg-map | 1 + .../install.d/package-installs-overcloud-compute | 5 ++ elements/overcloud-compute/pkg-map | 5 ++ .../package-installs-overcloud-contrail-controller | 1 + elements/overcloud-contrail-controller/pkg-map | 1 + .../package-installs-overcloud-controller | 27 ++++++++ elements/overcloud-controller/pkg-map | 38 +++++++++-- elements/overcloud-network-midonet/README.md | 44 ++++++++++-- .../environment.d/02-midonet-envs.bash | 52 ++++++++++---- .../extra-data.d/60-create-midonet-repositories | 2 +- .../extra-data.d/midonet-mem | 22 +++--- .../extra-data.d/midonet-oss | 22 +++--- .../package-installs-overcloud-network-midonet | 19 +++--- elements/overcloud-network-midonet/pkg-map | 8 +-- .../source-repository-overcloud-network-midonet | 21 ++++-- elements/puppet-modules/element-deps | 1 + .../01-puppet-modules-install-types.sh | 75 -------------------- .../02-puppet-modules-install-types.sh | 79 ++++++++++++++++++++++ .../75-puppet-modules-package | 7 +- .../75-puppet-modules-source | 5 ++ elements/puppet-modules/package-installs.yaml | 2 + .../source-repository-puppet-modules | 9 ++- elements/puppet/element-deps | 1 + elements/puppet/install.d/74-puppet | 4 -- elements/puppet/package-installs.yaml | 1 + 33 files changed, 328 insertions(+), 160 deletions(-)

1 0

[new][tripleo] tripleo-heat-templates 5.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: tripleo-heat-templates 5.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in tripleo-heat-templates 2.0.0..5.0.0 ---------------------------------------------- d324c05 Enable proxy headers parsing for Ceilometer 2a633a6 Enable proxy headers parsing for Gnocchi 1f2f986 Enable proxy headers parsing for Aodh 45924eb Enable Glance multiple locations when using Ceph b5d94be Disable IPv6 RAs & Autoconf For All (Not Just Default) 754fc4e Special case non-matching ObjectStorage role port names bc669cd Allow Glance API and Registry to be split 7fe61c9 Set the notification driver for glance 7445049 Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration c1eedd1 Actually start the systemd services in step3 of the major-upgrade step ea2f03d Fixed NoneType issue when logging-environment.yaml is used ef5855f Add cloud names to hosts output 4b470e0 Ceilometer Wsgi Mitaka->Newton upgrades 370e2c8 Serialize AllNodesDeployment and UpdateWorkflow fd9f35e Specify the Ceph packages to be installed db82aed Add Select per-network hostnames for service_node_names to role.role.j2.yaml dc5158e Enable firewalling by default on compute nodes 2064ab8 Re-enable ManageFirewall by default. e5cbfc0 restore missing fluentd client functionality 88423d4 Fix OpendaylightApiNetwork key naming 7a66d85 Select per-network hostnames for service_node_names f959b98 Set proper ceph config path for manila 6d17088 Adds Environment File for Removing Sahara during M/N upgrade 936f4c8 Add generic template for custom roles. f475815 Fixing resources path in OpenDaylight 3a3f27a j2 template role config templates a06c548 j2 template per-role ServiceNetMapDefaults 465dcdf Move the main template files for defalut services to new syntax generation 766d9ad Replace per role manifests with a common role manifest 61f77f1 Make keystone api network hiera composable c79aacc Use netapp_host_type instead of netapp_eseries_host_type c470329 Set ceph osd max object name and namespace len on upgrade when on ext4 bb555cf reload HAProxy config in HA setups when certificate is updated 4f133fe Update $service to $resource this variable does not exist in the context 582bb8a Cinder volume service is not managed by Pacemaker on BlockStorage a4e53b8 telemetry: remove coordination_url hiera settings 252b594 Balance Rabbitmq Queue Master Location on queue declaration with min-masters strategy cd133a0 Telemetry: add redis_password hiera parameter d636e3a Move the rest of static roles resource registry entries to j2 45a7fbb Use -L with chown and set crush map tunables when upgrading Ceph 4d71bc2 Fix typo in fixing gnocchi upgrade. de5aabe Add gateway_ip in OS::Neutron::Subnet 9614b85 Update .gitreview for stable/newton 7e9fd59 j2 template per-role things in default registry 32c5430 Relax pre-upgrade check for failed actions ad07a29 Fix races in major-upgrade-pacemaker Step2 89efa79 Update gnocchi database during M/N upgrade. 7ba5525 Move db::mysql into service_config_settings 35da6af Full HA->HA NG migration might fail setting maintenance-mode da53e9c Fix "Not all flavors have been migrated to the API database" 8b38376 Fix NTP servers hieradata 5630226 Set manila::keystone::auth::tenant 3d05733 Fix predictable placement indexing def3801 Fix ignore warning on ceph major upgrade. 99449a3 Use parameter name to configure gmcast_listen_addr a52a151 Remove double definition of config_settings key in keystone a387c11 Bind MySQL address to hostname appropriate to its network 3e0694e Add metricd workers support in gnocchi 9393a3e get_param calls with multiple arguments need brackets around them f9e6a26 A few major-upgrade issues b70d6e6 Disable openstack-cinder-volume in step1 and reenable it in step2 9593981 Start mongod before calling ceilometer-dbsync 16aba8f Remove deprecated scheduler_driver settings 24a73ef Reinstantiate parts of code that were accidentally removed 0de495b Add FixedIPs parameter to from_service.yaml 0eb5de0 Add integration with Manila CephFS Native driver 9d67d7b Move keystone::auth into service_config_settings 7d75b58 Activate StorageMgmtPort on computes in HCI environment d5a25f9 Remove hard-coded roles in EnabledServices output 313b920 Neutron metadata agent worker count fix 947d5e6 explicitly set fluentd service_provider 7ca7757 Deprecate the NeutronL3HA parameter a99c06a Tolerate missing keys from role_data in service templates 4422fb9 No-op Puppet for upgrades/migrations according to composable roles 18313fe Define step input as a Number type e6ecdb8 Glance worker count fix b524c09 Provide for RAM-constrained environments 1e72333 Make defaults from roles_data.yaml more robust 2fc2770 Make apache-based services use network-dependent servername bc7f6ab Make sure major upgrade script fails. 0fcd1a7 Set Neutron's metadata_ip to the nova metadata VIP 124aa4f Add nova-metadata template 859d748 RabbitMQ threads should be configured dynamically 2548f7d Enable L3 HA when multiple controllers and no DVR 63421ca Add a function to upgrade from full HA to NG HA 2f664a1 Use osd_pool_default_* puppet parameters when creating the pools 0a3cd4d M/N upgrade sahara-api fails to restart. 67ae241 Set VNC URL parameters for nova-compute fb25385 Rework the pacemaker_common_functions for M..N upgrades 0d9298b Add fluentd client service a1dcc16 Move rabbit's clustering port away from the ephemeral port range 5842625 Add mongo config settings in collector service templates 8988890 Fix _from_pool_v6.yaml str_split d13d0f3 Fix use of batch_create in CephMon major upgrade template 7ead5cc Add CephRgw to roles_data.yaml b3635f8 Fixes the Ceph upgrade scripts b738e9c Convert AllNodesExtraConfig to support composable roles 3a8d20a Convert UpdateWorkflow to support composable roles da283a7 Convert deploy steps to jinja2 loop af5f892 Set client protocol for glance registry client 3d58b8c Expose parameter to enable combination alarms fa6bafa Convert allNodesConfig properties to composable jinja2 e851007 Move role ResourceGroups inside the jinja2 loop 98b4776 Add NetApp Manila driver integration and tidy up generic 09f569b Unset Keystone public_endpoint 57898b4 De-bracket vncproxy_host in compute profile 8ce3d64 Configure Keystone credentials 6c4654b Add explicit entry for ctlplane IP in /etc/hosts 575e42b Refactor upgrade checks. 4138b26 Enable proxy header parsing for Manila d05a2b3 Move per-role NetIpListMap's into jinja template loop 51dd6ad Add support for deploying Ceph RGW role 18a6292 Add Heat's Cfn and Cloudwatch networks to ServiceNetMap b1c3224 Make Nova VNC Proxy service name match service net map 4223b88 Adjust MTU to compensate for VLAN tag issue 2611582 Move AllNodesValidationDeployments into jinja template loop d914f9c Move AllNodesDeployments into jinja template loop 0a9b02b Convert overcloud.yaml to support jinja2 templating 4b55a18 Remove *ExtraConfig parameters from overcloud.yaml 54a0286 Move role deployment steps into puppet/post.yaml 975fbb4 Generate VIP info for ctlplane VIP, not management bedf3dc Convert SwiftDevicesAndProxyConfig to composable format 66b5c5d Populate vnc_api_lib.ini on compute nodes with OpenContrail 866ed11 Add support for configuring the OVS firewall driver 4a95c03 Update capabilities-map.yaml 50b5f6a Add keystone networks for the different endpoints 85df73d Fix service config files having wrong map_merge format c497031 Add base neutron service configuration 8073fff Create entries for overcloud VIPs in /etc/hosts 2932988 Add VIP names to allNodesConfig 87f1f7d Add bootstrap_node and vip_data to hierarchy for all roles 00180e8 Update OpenContrail loadbalancer plugin value f34bd73 Fix aodh auth url to remove suffix 9d07e18 Use Redis VIP when deploying with keepalived 280a70b Set Redis VIP on all nodes 393c155 Add service networks to hieradata 9efa05a add composable services for Contrail ddfbf35 Move VIP-related data to AllNodesConfig 4c325d7 Ironic: update default enabled drivers b8f154b Remove mangling swift memcached list (now in puppet-tripleo) 8a02eeb Composable per-service VIP hieradata 71b2167 Create NetIpListMap for all roles 24c5964 Remove hard-coded per-service rabbitmq hieradata 827d110 Mv pacemaker and firewall out of controller 7ab48cc Drop overcloud-without-mergepy.yaml (again!) bf3bc0d Generate composable service node_names lists 5bacfe1 Move snmp settings into composable services e2d5bbc Ironic: configure disk erasing during cleaning c5a609e Ironic: enable iPXE by default and make it configurable 2bd58de Ironic: enabled_services moved from ironic to ironic::conductor manifest d42c83a OVN heat templates 959e872 Change NeutronWorkers default to result in previous behavior 9579bbf Add default for DeployIdentifier in nested templates 9706ac8 Ironic: service catalog entries should not have a suffix 79f5c8c Added environment file for SR-IOV deployment 37401cf Pass cinder_iscsi_address without brackets d892301 Add missing reference to ExternalPort for DVR 98c6bda Last round of modern authtoken update 3d2d682 Remove repeated apache-related hieradata 1590edb Restart only services that need it 25ad7b8 Availability monitoring agents support 6c37e1e apache: Remove product informations 288088a Add trunking plugin to list of default ML2 service plugins 4ea34ed Add Ceph cluster health validation on upgrade e5a627e Upgrade ceph-osd 825c42d Add NeutronGlobalPhysnetMtu to neutron-base.yaml a938883 configure Heat with new authtoken parameters e3cb92a Mv Nova, Neutron, Horizon out of controller.yaml aa7e939 Change CloudName default value to include domain db419ec Cleanup haproxy service from explicit services enablement 10a24b2 Move ceph cluster config out of allNodesConfig 1b604a9 Added DPDK environment file and nic configs samples 09a5ff6 Customize the reservation of memory for host processes cb2570c Fix Ironic service bind IPs f0302ca Upgrade ceph-mon dff4f6c Add hyperconverged-ceph environment to include CephOSD on computes 628be72 Conditionally expose haproxy endpoints f34c6a6 Add flag to assert that puppet manages the keystone endpoints 2291cdd Create composable mapping between enabled services and role ips 49b7064 Rename opendaylight service to opendaylight_api 753131d Create hiera service_enabled keys for enabled services 67d3a77 Configure the pci_passthrough_whitelist via THT 38bbf11 Fix debug parameter in gnocchi-base.yaml 562cac8 Modify sriov_numvfs config from puppet-neutron to tripleo 514a81e M/N upgrade fix galera restart. a6962e7 Fix check of rpm-python. 1e8d7f9 M/N upgrade set scheduler_host_manager right. dd05114 Skip warning for required parameters 783975c Adds OpenDaylight composable service 241b88c Move ceilometer api to run under apache wsgi 1087a8b Customize vcpu_pin_set in nova.conf 7aeb416 Add global_config_settings to services' output c667ce6 Customize scheduler_default_filters (nova.conf) ff39249 Move Redis, Memcached, Sahara, OVS agent out of role templates 6298b7c Add constraint to prohibit balance-tcp from BondInterfaceOvsOptions dd9c8d6 Mv ceilo, aodh, and gnocchi out of controller.yaml cf8e3f5 Mv keystone, mongo, manila out of controller.yaml a356bb6 Move Swift hiera settings into composable services a30d174 Fix base service type inheriting gnocchi service templates aae669a Fix base service type inheriting ceilometer service pcmk templates 43476e2 Move glance/heat hiera settings to services fc614ec Ironic: add missing haproxy and firewall configuration 301314e Added a new composable service for enabling DPDK on compute nodes. b5a54bf Update authtoken parameters to match recent changes 0224b18 Fixes Neutron metadata parameters in THT 47bdf44 Make OVS ARP responder feature configurable 780750e Set the default gnocchi driver to swift b31d80f Move network bind IPs out of compute.yaml 34c8a8c Clean up old functions ce39dba Set NeutronL3HA to false when deploying DVR cb894b4 M/N upgrade fail to restart nova-scheduler. 5c1b986 Fix Flavor get_param for Block Storage. f9dadca Enable usage of FQDNs for the endpoints db4d11f Move Keepalived/HAproxy settings out of controller f45897e Fix check for MariaDB upgrade manual switch off d90363b Move out of roles any Ceph setting 92f2cfb Move RabbitMQ settings out of controller.yaml 58bf393 Move MySQL settings out of puppet/controller.yaml 2dd1167 Revert "Pin puppetlabs_spec_helper to 1.1.1" 59e3f2c Pin puppetlabs_spec_helper to 1.1.1 b542ce7 Permit usage of raw disks as backends for Swift storage b31116a Move resource registry override to enable-tls.yaml 072404b Don't trigger mariadb upgrade dump/restore when not needed 0d79742 Set cinder::api::bind_host within service template 9a6f712 Add deployment of CAs via hieradata 59e2713 Fix path to sahara templates d6adc05 Add sriov_numvfs in THT fc0c699 SR-IOV nic agent changes in line with composable roles. d8df132 Disable Sahara by default 9b73901 Disable cinder-backup by default fbbd134 Enable gnocchi systemd services 3b62761 Add DefaultPasswords to composable services 885b37c Pass ServiceNetMap to services 6842f18 Allow scheduler_available_filter to be customizable ccc0079 Remove OS::Tripleo::Services::ManilaShare: from puppet-pacemaker.yaml d923556 Make sahara run via systemd a058bee Use modulepath for Puppet 420f786 Upgrade scripts to migrate aodh alarm data 9b18594 Add tripleo-firewall composable service 0df577c Add tripleo-packages composable service a19da8e gnocchi: use new authtoken parameters cca5693 Update pacemaker_resource_restart.sh for new HA arch 9a6c24b Remove unneeded net_ip_map dump into hieradata 80e82be Remove deprecated net_ip_uri_map output 248068b Remove deprecated net_ip_subnet_map output 34c220d Move neutron settings out of puppet/compute.yaml 0ec58cf Mv Ceilometer settings out of puppet/compute.yaml 4e05d13 Move Nova settings out of puppet/compute.yaml ed6409f Remove NeutronEnableTunnelling from templates 2470cf8 Rename NeutronServer to NeutronApi to align with ServiceNetMap 6561984 Remove deprecated node_ips hiera keys ac8d591 Convert ServiceNetMap to a nested template 8cd7861 Decouple EndpointMap from SSL certificate params c93fb4f Set coordination url for gnocchi storage 71dc47e Update Ironic composable services 44b67eb Reinstate CloudDomain properties for Controller/Compute roles 450be22 Convert EndpointMap to not require per-service VIP parameters e8683a8 Align node_ips hiera keys with the service name. f634cd1 Add hieradata for Manila v1 and v2 endpoints 1e7bab9 Add support for cinder v3 endpoint 75110de Add cinder-backup service as role f7f514c Add parameter for enabling purging configuration files 1d83f18 Allow map_replace substitution of network names 9097810 Remove KeystoneRegion from controller.yaml ba1fb56 Move gnocchi's kestone::auth parameters to API profile b5fa4a4 Remove Compute role parameters from overcloud.yaml 0caf0a0 Move neutron-related options for nova to base profile 69ea053 Move nova's kestone::auth parameters to API profile 49ded98 Remove deprecated hdp plugin and add ambari 5aabce1 Updates and fixes to NIC config template routes cf5fd01 Remove static hieradata c21545a Support arbitrary attributes for the Ceph pools 219acaa Move setting of Glance's keystone region to API profile c892df4 Configure project name for keystone::auth resource in heat 5df8e60 Move cinder's kestone::auth parameters to API profile b2ea349 Move neutron's kestone::auth parameters to server profile c4f8659 Remove outdated Neutron auth options 70fc539 Allow a fixed IP to be allocated to RedisVirtualIP 9450cc2 Make deployed-server OS::Neutron::Port optional 0327fc2 Add Sahara services to ControllerServices list 2f52658 Disable mistral services by default. bd695c5 Update cinder-api with new authtoken parameters 7c502ce Add Aodh composable roles f8e4070 Disable the Mon/OSD/Client resources in puppet-ceph-external 12b356b Remove keystone PKI related parameters 4638c80 Adding optional aci-opflex hiera data c6165ec Set Coordination url for central agent deb098c Add environment file to enable DVR 81de065 Next generation HA architecture work 12aeac7 Add management network to list of networks to ping 9b36f36 Replace hard-coded regionOne with parameter references b99733d Enable Manila integration - as a composable controller service b9d062c Remove usage of ::nova class in THT c2c8f0f Enable glance to use the SSL middleware f99294c Enable keystone to use the SSL middleware f67c4f7 move hieradata/ceph into ceph-base service 7879f9d Convert AllNodesConfig hosts config to a map 0cb33ba Add EnabledServices output to overcloud.yaml 89870f1 Update heat-agents setup files 271aebf Add default value for `RoleData` 37b5df4 Move constraints to their respective services a2b64eb We don't need to set a default for the CephX keys and cluster FSID 7df649f Convert service_name to underscore syntax d85d068 Move nova constraints from controller manifest to each service b0e5399 Create role for the fake openstack-core resource 315fa31 Migrate Puppet Hieradata to composable services 1c5a7c3 Move *Flavor parameters into per-role templates 80a1acb Move *Image parameters into role templates fecd61e Remove KeyName parameter from overcloud template 466274e Move per-role *SchedulerHints parameters into role templates 918b668 Remove some properties from overcloud.yaml Controller group 23e13cc Filter null/None service names fc93cf3 Force a tty for sudo in get-occ-config.sh c14d4a9 Set MDS/OSD firewall ports from ceph-osd template 5195d7f Composable firewall rules 2720b5d Cleanup templates from the shared CephCluster config 1f1489b Convert Swift ringbuilder to composable services format 55e84b6 Move nova::db data within service template 6b30ff1 Add 'service_name' to composable services 8d0497d Fixes type and description for NeutronL3HA 056ce23 Explicitly set nova and neutron host on controllers 248390b Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal 1d38b75 Deploy Horizon with composable apache service 8e0a4df Remove unused redis_vip parameter 279a2a0 Include new apache pacemaker profile da41957 Fix KeystoneWorkers default value 7d64828 Fix ceilometer auth url for compute ac1a10e Remove the ControllerCount contraint 47fe749 Remove ::nova::cron::archive_deleted_rows 35aceb0 Fix gnocchi::storage::ceph::ceph_keyring 95dd1ba gnocchi: configure db_sync command in the profile 17fb4db Remove enable_load_balancer on nonha manifest eb8ab61 Remove useless mongodb variables in ha manifest 9a36561 Don't collect gnocchi-service tag in THT 1a3b3fc overcloud_compute.pp: remove nova_config params 62d6d5d Add MysqlNoBracketsInternal to enable-tls.yaml 6a629a4 Move MySQL Galera within composable services d91bb38 Composable Pacemaker service 856a990 Ceilometer Compute Agent composable service f12f7f3 Remove ceilometer mysql db hieradata bf41f8f Fix network-isolation.yaml to stop clobbering Management net b510cab Composable OpenContrail compute plugin 613e009 Composable Plumgrid compute plugin bf76cf6 Composable Midonet compute plugin e8e7c42 Composable Nuage Compute Plugin 2a6ae1b Composable Neutron Core Compute Plugin a9c3b92 compute: moving out iscsi bits, now in puppet-tripleo 0415a2a Gnocchi composable roles c4f2725 Composable Horizon service - tripleo-heat-templates c3d595c Use already Deployed/Installed servers 0ac53f5 Missing CephClientKey parameter in puppet-ceph-devel and storage-environment 81863d1 Re-enable Ceilometer composable roles for controller 286b8e6 Add a second proxy-logging middleware entry to swift-proxy dd41e05 Repurpose KeystoneWorkers add keystone::wsgi::apache::threads 5f6f897 Move ironic::db data within service template 6f31c67 Move neutron::db data within service template 135fb67 Move sahara::db data within service template 43cd92a Move heat::db data within service template bbe7203 Move cinder::db data within service template dd38017 Move glance::db data within service template 800ee92 Composable Midonet for Neutron e231c9e Include bulk in swift proxy pipeline aabde9a Move keystone::db data within service template cf42408 Pass MysqlVirtualIP without brackets to EndpointMap 88f83fe Add StepConfig to docker compute-post.yaml 3b9544b Merge pacemaker_master/sync_db conditionals c825170 Restore the NtpServer parameter name fe1f8a8 Convert AllNodesExtraConfig to OS::Heat::None 7ff66b9 Remove config_identifier from all_nodes extraconfig examples 2a64b67 neutron: remove tenant MTU configuration options 631b30d Add kernel service b345dbe Combine BootstrapNodeDeployment with AllNodesDeployment 69d9171 Customize "supported_pci_vendor_devs" for SR-IOV 301560b Set os-refresh-config timeout to 4 hours 072b067 Template param for what command occ runs 9f8e168 Remove depends_on: Networks from ControllerServiceChain 59b6afc Replace NodeConfigIdentifiers with DeployIdentifier 1222eb7 overcloud_volume: cleanup unused Puppet code 1006cbb volume: deploy snmp using composable role 794fece Switch Ceph Monitor/OSD/Client/External to composable roles bacd786 pacemaker: don't override Service resource for Nova & Neutron c0b15ba Remove NFS bits from overcloud_compute manifest 8a0f5ef Add example of creating per-node os-net-config mappings 3dde231 Stop no-opping PackageUpdate on upgrade 337d2c6 Pass RoleData into -post.yaml stacks 68562d0 Output generic role_data in services.yaml c163585 Add Rabbit/epmd port to firewall 67cb6c7 Use create-legacy-resource-types during gnocchi-upgrade 9f1b58e First iteration of libvirt and nova-compute as a composable services 30a11c8 Wire NTP and Timezone services into BlockStorage nodes 6fab74a Composable Timezone service - ObjectStorage c5ea6e6 Composable Timezone service - CephStorage 2cc01b9 Composable Timezone service - Compute 6837278 Composable Timezone service - Controller fa08aaf Configure BlockStorage services via resource chains 292fdf8 Dump and restore galera db during major upgrades 017334b Increase cluster sync timeout for M->N major upgrades f444f18 Drop unused VIP params to controller.yaml b578117 Convert SNMP configuration to composable services format dfbc938 Basic support for deploying Ironic in overcloud a8c8235 Don't set selinux in 'permissive' mode on CephStorage nodes 8a584a7 Add Management net to ips-from-pool-all example 50ee410 Convert swift storage to composable services da308a2 Convert noop NetworkExtraConfig to OS::Heat::None 2578550 Disable stonith temporarily during upgrades 09944ed Fix ceilometer auth url 7319406 Increase RabbitMQ maximum file descriptors. c93ba28 Revert "Ceilometer composable roles for controller" 5e1229c Allow neutron_options customization for dashboard a778a97 Revert "Pin puppet-lint-absolute_classname-check to 0.1.3" c48410a Ceilometer composable roles for controller 61f3183 Pin puppet-lint-absolute_classname-check to 0.1.3 f498ff2 Update neutron ml2 class 5921122 Split Heat pacemaker roles into separate services d97a76f Heat upstream default policy.json works in devstack 1bab553 Composable roles within services - NTP - ObjectStorage 94166fb Composable roles within services - NTP - CephStorage 5210355 Composable roles within services - NTP - Compute 296bffd Composable roles within services - NTP 26e639f Parametrize and increase default of swift-proxy node_timeout 8ac333b Change Aodh to use own backend 73c76b8 Enable firewall by default on the overcloud dc0562c Allow sahara ports in firewall a4c9e1b Allow pacemaker ports in firewall cca0212 Remove nova::db classes, moved to puppet-tripleo ca11c3d Remove ::nova::network::neutron, now in puppet-tripleo 3717794 Create Cinder backup pool in Ceph 68bdb72 Add IPv6 support for the management network b2eba85 Stop using deprecated port param in firewall rules e21c741 Drop extraconfig for neutron-opencontrail.yaml 37bb689 Composable opencontrail plugin 29e04f6 Drop extraconfig for neutron-nuage.yaml 9e502fc Composable neutron nuage plugin 7b22f2d Colocation make a group for pcmk nova resources. fa87546 Stop passing charset=utf8 for neutron database connection option f918bdb Allow to manually disable post-puppet restarts 708bf15 Enable nova-compute as a composable service 16d0489 Enable nova-vncproxy as a composable service 80ad670 Enable nova-consoleauth as a composable service 94bf2d5 Enable nova-scheduler as a composable service 27ee21d Enable nova-api as a composable service 5f21481 Drop extraconfig for neutron-plumgrid.yaml cf04308 Composable Neutron Plumgrid plugin dea033b Move Neutron core and service plugin to base 11074fb Composable roles within services - MongoDB e1238aa neutron: stop include ::neutron & ::neutron::config dc63eb1 Remove unused Neutron parameters from roles 89fbd07 composable neutron ml2 and ovs agent 08a201e composable neutron server 20c1b99 Replace no-op TLS stacks with OS::Heat::None f3e004c set aodh auth_url explicitly 8027ae2 Remove nova-cert from TripleO 3d01f65 Enable nova-conductor as a composable service 244dcc4 Explode Loadbalancer role into HAproxy + keepalived 27e457e Switch Cinder Api/Scheduler/Volume to composable roles 31c4167 Composable roles within services - Redis d9409b4 Composable Sahara services c79c261 Enable proxy header handling for nova 70ded53 Take 'host' parameter from neutron manifest into use fcbb6f5 Take 'host' parameter from nova manifest into use 655fd04 Cleanup hieradata to reduce Puppet warnings 43a358c Adjust UpgradeLevelNovaCompute rpc messaging pin to mitaka 815ef99 Don't overwrite ceph osd_journal_size be1b311 Configure ObjectStorage services via resource chains e3cc445 Fix inconsistency with ringbuilder/storage steps d372a3b Convert Swift proxy to composable services format 4087aff loadbalancer: update hiera parameters for HAproxy/keepalived split d1c21c6 compute: use new param for live_migration_tunnelled a6438a2 Pass MysqlVirtualIP via EndpointMap f4e5895 Configure ComputeServices via resource chains 9036e73 Remove custom SSL-related resource for cinder 29d4de9 Enable proxy header handling for cinder 5a9ea97 Enable proxy header parsing for heat 894453f Remove the delay resource and its constraints 0e6e864 Set rabbitmq loopback_users explicitely ddd2eb9 Configure CephStorage services via resource chains 9e21e49 Fix ceph keyring setting for gnocchi 6a962c5 Update management_from_pool template version to 2015-10-15 565f0c5 Adds memcached as a composable service d18f218 composable heat services 40ad289 Deploy Loadbalancer as a composable role e734d75 Tighten the access rules for galera 5b95df3 Deploy RabbitMQ as a composable role 947f47c Dump IPs configuration as hieradata 3fc7da4 Pass enabled and manage_service to Neutron/L3 when Pacemaker 22c44a9 Add step to ObjectStorage RingBuilder deployment 168bc2f composable neutron metadata service 59e2f29 composable neutron l3 service 9223f5d Move dhcp agent maps to OS::Heat::None to resource_registry 32d2934 Remove ControllerClusterConfig from overcloud.yaml 6c2dea4 Remove tenant_id from nova v2.1 endpoint e148af8 Remove Nova EC2 deployment a3bae06 Ensure manage_service and enabled are false for Pacemaker be24147 add heat-api-cfn to endpoint map 27f7d22 composable neutron dhcp service c2cd6f0 deployment: drop step6 ff7c5c7 deployment: remove Step7 d76f70e Set nova neutron auth back to 'v3password'. 099ac31 Change ping wait flag 3261997 Use docker-cmd hook. c777279 Combine parameter_default fields 995ad9c Pass parameters to manage endpoints via puppet 609b7ec Leave start/stop/restart for Keystone and Glance in charge to the role afc4915 Remove calls to ::mysql from the manifests 69ff93f Optimize Nova disk_cachemodes and hw_disk_discard options for RBD 6e65c8f Disable VIPs before stopping cluster during version upgrade b9bb263 Use str_split to compute netmask in _v6 port templates 7e08362 Wire missing RabbitClientPort into Glance API role 1f29747 Additional parameters for Nuage Neutron plugin integration 75f6628 Fixes ovs bonding option b0b56a1 Fix the Sahara public endpoint and make it point to the Public VIP efadbd8 Run sync in step 3 when $sync_db 26d8931 Fix the ManagementNetValueSpecs param type 6d27813 Fix controller-no-external.yaml in bonded configs. 55cd264 The Sahara SSL endpoint was announced on the wrong port 34b4954 Use 'deeper' hiera_hash merge behavior for all roles 7588f74 composable glance services dbd8834 Fix ControllerExtraConfig parameter name ddecbab Enable client address in Horizon's logs. 9052c8b Make HeatWorkers param affect the engine workers 887f35b Fix Neutron enable_*_agent* Hiera parameters 11079d6 Retain existing ComputeHostnameFormat when upgrading older envs c717a4d Add GlanceRegistry to the endpoint map 2b15978 Keep setting backend_host to 'hostgroup' for rbd backends 1c8ad9f Add ping_retry function abbc6b1 Refactor HAproxy and VIP creation. f5d96bb Make sure openstack services are dependent on openstack-core dec8a0f Add net-config-static.yaml aa0fa9d Add missing ManagementIpSubnet 80be9ef Document IPv6 syntax for GlanceFilePcmkDevice a120877 Always use parameter_defaults in environment files 0970068 Deploy Gnocchi as a Ceilometer metrics storage backend aa0bd9e Fix distinguishing between stack-create and stack-update 2d92911 Update .sh references from openstack-keystone to openstack-core d773227 Don't have separate protocols/ports for Keystone v3 de0ac7b composable keystone services ec78afd Replace extraconfig/tasks/noop.yaml w/ Heat::None c8ccfa2 Remove network/noop.yaml, use OS::Heat::None 128026e ha/glance-fs: avoid a race condition 706c2fe Add removal of the /etc/resolv.conf.save file for +bug/1567004 8557ab7 Revert "Ping retry" d3b841c Use a different ceph key for admin/client user 4c7d873 Add network ExtraConfig hook 0a53ba4 Increase corosync token timeout 55af726 Reload haproxy after injecting certs w/o pcmk too 6d8eb35 Change /etc/hosts format and add domain e4578fe Nova needs the proper volumes to use Cinder 05b2a20 Filter for local nodes in check_resource function 4f373ea Restart haproxy after configuring SSL certs b239b62 Disable Nova v3 API 0bcf693 Configure ControllerServices via resource chains 321cee7 Add EndpointMap as output b903114 Updates ControlPlaneSubnetCidr to be a string 98f19c1 Remove hack the pulls latest docker d2710b8 Centos gives /dev/pts/ptmx the wrong perms df343c3 Enable galera replication for Mariadb 10.1 570c690 Ping retry bc00cf7 compute: restart OVS agent on neutron.conf changes d2566e5 change the default satellite tools rpm repo. 7b2e560 Don't restart Pacemaker-managed services from Puppet 9988bd2 Increment step count to include ringbuilder 6e56f87 Set UpdateIdentifier for upgrade converge, to prevent services down 2493de2 Remove password default for AodhPassword 992f85b Add quotes around the cinder_iscsi_ip_address value 8c0ba4c Add ExtraConfig example that always runs on update ee2c9ea PLUMgrid Neutron integration a340ea6 Add database directory mount for openvswitchdb e4fb068 Increase galera sync timeout in yum_update.sh Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + capabilities-map.yaml | 324 +- default_passwords.yaml | 25 + deployed-server/README.rst | 129 + deployed-server/ctlplane-port.yaml | 23 + deployed-server/deployed-server-config.yaml | 22 + deployed-server/deployed-server.yaml | 115 + deployed-server/scripts/get-occ-config.sh | 113 + environments/ceph-radosgw.yaml | 5 + environments/cinder-backup.yaml | 4 + environments/cinder-netapp-config.yaml | 2 +- environments/deployed-server-environment.yaml | 4 + environments/deployed-server-noop-ctlplane.yaml | 4 + environments/docker.yaml | 4 +- environments/enable-tls.yaml | 44 +- environments/hyperconverged-ceph.yaml | 11 + environments/inject-trust-anchor-hiera.yaml | 8 + environments/ips-from-pool-all.yaml | 16 + environments/logging-environment.yaml | 29 + environments/low-memory-usage.yaml | 15 + environments/major-upgrade-aodh-migration.yaml | 6 + ...ajor-upgrade-ceilometer-wsgi-mitaka-newton.yaml | 7 + environments/major-upgrade-pacemaker-converge.yaml | 4 + environments/major-upgrade-pacemaker-init.yaml | 9 +- environments/major-upgrade-pacemaker.yaml | 9 +- environments/major-upgrade-remove-sahara.yaml | 6 + environments/manage-firewall.yaml | 2 - environments/manila-cephfsnative-config.yaml | 18 + environments/manila-generic-config.yaml | 25 + environments/manila-netapp-config.yaml | 30 + environments/mongodb-nojournal.yaml | 2 +- environments/monitoring-environment.yaml | 30 + environments/net-bond-with-vlans-no-external.yaml | 2 +- .../net-single-nic-with-vlans-no-external.yaml | 2 +- environments/network-environment.yaml | 32 +- environments/network-isolation.yaml | 21 +- environments/network-management-v6.yaml | 25 + environments/network-management.yaml | 3 +- environments/neutron-midonet.yaml | 8 +- environments/neutron-ml2-ovn.yaml | 18 + environments/neutron-nuage-config.yaml | 14 +- environments/neutron-opencontrail.yaml | 17 +- environments/neutron-opendaylight-l3.yaml | 14 + environments/neutron-opendaylight.yaml | 11 + environments/neutron-ovs-dpdk.yaml | 18 + environments/neutron-ovs-dvr.yaml | 39 + environments/neutron-plumgrid.yaml | 31 + environments/neutron-sriov.yaml | 22 + environments/puppet-ceph-devel.yaml | 13 +- environments/puppet-ceph-external.yaml | 15 +- environments/puppet-pacemaker-no-restart.yaml | 3 + environments/puppet-pacemaker.yaml | 12 + environments/puppet-tenant-vlan.yaml | 6 +- environments/services/ironic.yaml | 4 + environments/services/mistral.yaml | 4 + environments/services/sahara.yaml | 3 + environments/storage-environment.yaml | 17 +- environments/tls-endpoints-public-dns.yaml | 55 + environments/tls-endpoints-public-ip.yaml | 55 + .../update-from-keystone-admin-internal-api.yaml | 8 +- .../update-from-overcloud-compute-hostnames.yaml | 2 + environments/use-dns-for-vips.yaml | 5 + extraconfig/all_nodes/default.yaml | 27 - extraconfig/all_nodes/mac_hostname.j2.yaml | 77 + extraconfig/all_nodes/mac_hostname.yaml | 122 - extraconfig/all_nodes/random_string.j2.yaml | 51 + extraconfig/all_nodes/random_string.yaml | 65 - extraconfig/all_nodes/swap-partition.j2.yaml | 44 + extraconfig/all_nodes/swap-partition.yaml | 90 - extraconfig/all_nodes/swap.j2.yaml | 58 + extraconfig/all_nodes/swap.yaml | 108 - extraconfig/post_deploy/example_run_on_update.yaml | 39 + .../environment-rhel-registration.yaml | 1 + .../rhel-registration/rhel-registration.yaml | 4 + .../rhel-registration/scripts/rhel-registration | 2 +- extraconfig/tasks/aodh_data_migration.sh | 19 + ...ajor_upgrade_ceilometer_wsgi_mitaka_newton.yaml | 62 + extraconfig/tasks/major_upgrade_ceph_mon.sh | 82 + extraconfig/tasks/major_upgrade_ceph_storage.sh | 87 +- extraconfig/tasks/major_upgrade_check.sh | 104 + extraconfig/tasks/major_upgrade_compute.sh | 2 + .../tasks/major_upgrade_controller_pacemaker_1.sh | 161 +- .../tasks/major_upgrade_controller_pacemaker_2.sh | 46 +- .../tasks/major_upgrade_controller_pacemaker_3.sh | 26 + extraconfig/tasks/major_upgrade_object_storage.sh | 1 + extraconfig/tasks/major_upgrade_pacemaker.yaml | 93 +- .../tasks/major_upgrade_pacemaker_init.j2.yaml | 87 + .../tasks/major_upgrade_pacemaker_init.yaml | 128 - .../tasks/major_upgrade_pacemaker_migrations.sh | 180 +- .../mitaka_to_newton_aodh_data_migration.yaml | 25 + .../mitaka_to_newton_ceilometer_wsgi_upgrade.pp | 97 + extraconfig/tasks/noop.yaml | 26 - extraconfig/tasks/pacemaker_common_functions.sh | 282 +- extraconfig/tasks/pacemaker_maintenance_mode.sh | 19 + extraconfig/tasks/pacemaker_resource_restart.sh | 55 +- extraconfig/tasks/post_puppet_pacemaker.yaml | 15 +- .../tasks/post_puppet_pacemaker_restart.yaml | 28 + extraconfig/tasks/pre_puppet_pacemaker.yaml | 9 +- extraconfig/tasks/yum_update.sh | 105 +- firstboot/os-net-config-mappings.yaml | 65 + j2_excludes.yaml | 10 + net-config-bond.yaml | 12 +- net-config-static-bridge-with-external-dhcp.yaml | 99 + net-config-static-bridge.yaml | 4 + net-config-static.yaml | 82 + network/config/bond-with-vlans/ceph-storage.yaml | 31 + network/config/bond-with-vlans/cinder-storage.yaml | 27 + network/config/bond-with-vlans/compute-dpdk.yaml | 192 + network/config/bond-with-vlans/compute.yaml | 27 + .../bond-with-vlans/controller-no-external.yaml | 52 + network/config/bond-with-vlans/controller-v6.yaml | 26 +- network/config/bond-with-vlans/controller.yaml | 19 + network/config/bond-with-vlans/swift-storage.yaml | 27 + network/config/multiple-nics/ceph-storage.yaml | 18 +- network/config/multiple-nics/cinder-storage.yaml | 18 +- network/config/multiple-nics/compute.yaml | 18 +- network/config/multiple-nics/controller-v6.yaml | 21 +- network/config/multiple-nics/controller.yaml | 19 +- network/config/multiple-nics/swift-storage.yaml | 18 +- .../ceph-storage.yaml | 42 + .../cinder-storage.yaml | 38 + .../single-nic-linux-bridge-vlans/compute.yaml | 39 +- .../controller-v6.yaml | 178 + .../single-nic-linux-bridge-vlans/controller.yaml | 37 +- .../swift-storage.yaml | 38 + network/config/single-nic-vlans/ceph-storage.yaml | 14 + .../config/single-nic-vlans/cinder-storage.yaml | 14 + network/config/single-nic-vlans/compute.yaml | 14 + .../single-nic-vlans/controller-no-external.yaml | 45 +- network/config/single-nic-vlans/controller-v6.yaml | 28 +- network/config/single-nic-vlans/controller.yaml | 17 +- network/config/single-nic-vlans/swift-storage.yaml | 14 + network/endpoints/build_endpoint_map.py | 65 +- network/endpoints/endpoint_data.yaml | 187 +- network/endpoints/endpoint_map.yaml | 4526 +++++++++++++++++--- network/external.yaml | 5 + network/external_v6.yaml | 5 + network/internal_api.yaml | 1 + network/internal_api_v6.yaml | 1 + network/management.yaml | 7 +- network/management_v6.yaml | 69 + network/networks.yaml | 3 + network/noop.yaml | 3 - network/ports/external_from_pool_v6.yaml | 6 +- network/ports/external_v6.yaml | 6 +- network/ports/from_service.yaml | 6 + network/ports/from_service_v6.yaml | 6 + network/ports/internal_api_from_pool_v6.yaml | 6 +- network/ports/internal_api_v6.yaml | 6 +- network/ports/management_from_pool.yaml | 2 +- network/ports/management_from_pool_v6.yaml | 52 + network/ports/net_ip_list_map.yaml | 104 +- network/ports/net_ip_map.yaml | 53 +- network/ports/net_ip_subnet_map.yaml | 47 - network/ports/net_vip_map_external.yaml | 21 +- network/ports/net_vip_map_external_v6.yaml | 21 +- network/ports/storage_from_pool_v6.yaml | 6 +- network/ports/storage_mgmt_from_pool_v6.yaml | 6 +- network/ports/storage_mgmt_v6.yaml | 6 +- network/ports/storage_v6.yaml | 6 +- network/ports/tenant_from_pool_v6.yaml | 6 +- network/ports/tenant_v6.yaml | 6 +- network/ports/vip_v6.yaml | 6 +- network/service_net_map.j2.yaml | 109 + network/storage.yaml | 1 + network/storage_mgmt.yaml | 1 + network/storage_mgmt_v6.yaml | 1 + network/storage_v6.yaml | 1 + network/tenant.yaml | 1 + network/tenant_v6.yaml | 1 + overcloud-resource-registry-puppet.j2.yaml | 206 + overcloud-resource-registry-puppet.yaml | 127 - overcloud-without-mergepy.yaml | 1 - overcloud.j2.yaml | 634 +++ overcloud.yaml | 1701 -------- puppet/all-nodes-config.yaml | 424 +- puppet/blockstorage-role.yaml | 434 ++ puppet/bootstrap-config.yaml | 28 - puppet/ceph-cluster-config.yaml | 126 - puppet/ceph-storage-post.yaml | 58 - puppet/ceph-storage.yaml | 392 -- puppet/cephstorage-role.yaml | 444 ++ puppet/cinder-storage-post.yaml | 53 - puppet/cinder-storage.yaml | 453 -- puppet/compute-post.yaml | 59 - puppet/compute-role.yaml | 471 ++ puppet/compute.yaml | 821 ---- puppet/config.role.j2.yaml | 44 + puppet/controller-config-pacemaker.yaml | 10 +- puppet/controller-config.yaml | 30 - puppet/controller-post.yaml | 138 - puppet/controller-role.yaml | 520 +++ puppet/controller.yaml | 1830 -------- .../all_nodes/neutron-midonet-all-nodes.yaml | 24 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 34 +- puppet/extraconfig/ceph/ceph-external-config.yaml | 101 - .../pre_deploy/compute/neutron-opencontrail.yaml | 12 + .../pre_deploy/controller/cinder-dellsc.yaml | 2 +- .../pre_deploy/controller/cinder-eqlx.yaml | 2 +- .../pre_deploy/controller/cinder-netapp.yaml | 20 +- .../pre_deploy/controller/neutron-nuage.yaml | 91 - .../controller/neutron-opencontrail.yaml | 62 - puppet/extraconfig/tls/no-ca.yaml | 17 - puppet/extraconfig/tls/no-tls.yaml | 34 - puppet/extraconfig/tls/tls-cert-inject.yaml | 6 + puppet/hieradata/RedHat.yaml | 9 - puppet/hieradata/ceph.yaml | 12 - puppet/hieradata/common.yaml | 47 - puppet/hieradata/compute.yaml | 23 - puppet/hieradata/controller.yaml | 269 -- puppet/hieradata/database.yaml | 69 - puppet/hieradata/object.yaml | 21 - puppet/hieradata/volume.yaml | 14 - puppet/manifests/overcloud_cephstorage.pp | 56 - puppet/manifests/overcloud_compute.pp | 192 - puppet/manifests/overcloud_controller.pp | 716 ---- puppet/manifests/overcloud_controller_pacemaker.pp | 1945 +-------- puppet/manifests/overcloud_object.pp | 57 - puppet/manifests/overcloud_role.pp | 26 + puppet/manifests/overcloud_volume.pp | 61 - puppet/manifests/ringbuilder.pp | 96 - puppet/objectstorage-role.yaml | 433 ++ puppet/post.j2.yaml | 139 + puppet/role.role.j2.yaml | 452 ++ puppet/services/README.rst | 56 + puppet/services/aodh-api.yaml | 81 + puppet/services/aodh-base.yaml | 100 + puppet/services/aodh-evaluator.yaml | 42 + puppet/services/aodh-listener.yaml | 42 + puppet/services/aodh-notifier.yaml | 42 + puppet/services/apache.yaml | 52 + puppet/services/ca-certs.yaml | 35 + puppet/services/ceilometer-agent-central.yaml | 56 + puppet/services/ceilometer-agent-compute.yaml | 42 + puppet/services/ceilometer-agent-notification.yaml | 51 + puppet/services/ceilometer-api.yaml | 84 + puppet/services/ceilometer-base.yaml | 132 + puppet/services/ceilometer-collector.yaml | 61 + puppet/services/ceilometer-expirer.yaml | 42 + puppet/services/ceph-base.yaml | 154 + puppet/services/ceph-client.yaml | 42 + puppet/services/ceph-external.yaml | 84 + puppet/services/ceph-mon.yaml | 107 + puppet/services/ceph-osd.yaml | 47 + puppet/services/ceph-rgw.yaml | 79 + puppet/services/cinder-api.yaml | 111 + puppet/services/cinder-backup.yaml | 62 + puppet/services/cinder-base.yaml | 71 + puppet/services/cinder-scheduler.yaml | 53 + puppet/services/cinder-volume.yaml | 112 + puppet/services/database/mongodb-base.yaml | 46 + puppet/services/database/mongodb.yaml | 68 + puppet/services/database/mysql.yaml | 84 + puppet/services/database/redis-base.yaml | 44 + puppet/services/database/redis.yaml | 44 + puppet/services/glance-api.yaml | 109 + puppet/services/glance-base.yaml | 110 + puppet/services/glance-registry.yaml | 100 + puppet/services/gnocchi-api.yaml | 123 + puppet/services/gnocchi-base.yaml | 88 + puppet/services/gnocchi-metricd.yaml | 48 + puppet/services/gnocchi-statsd.yaml | 43 + puppet/services/haproxy.yaml | 68 + puppet/services/heat-api-cfn.yaml | 84 + puppet/services/heat-api-cloudwatch.yaml | 68 + puppet/services/heat-api.yaml | 84 + puppet/services/heat-base.yaml | 79 + puppet/services/heat-engine.yaml | 105 + puppet/services/horizon.yaml | 83 + puppet/services/ironic-api.yaml | 83 + puppet/services/ironic-base.yaml | 69 + puppet/services/ironic-conductor.yaml | 100 + puppet/services/keepalived.yaml | 48 + puppet/services/kernel.yaml | 53 + puppet/services/keystone.yaml | 212 + puppet/services/logging/fluentd-base.yaml | 37 + puppet/services/logging/fluentd-client.yaml | 64 + puppet/services/logging/fluentd-config.yaml | 154 + puppet/services/manila-api.yaml | 82 + puppet/services/manila-backend-cephfs.yaml | 61 + puppet/services/manila-backend-generic.yaml | 93 + puppet/services/manila-backend-netapp.yaml | 112 + puppet/services/manila-base.yaml | 56 + puppet/services/manila-scheduler.yaml | 70 + puppet/services/manila-share.yaml | 44 + puppet/services/memcached.yaml | 42 + puppet/services/monitoring/sensu-base.yaml | 68 + puppet/services/monitoring/sensu-client.yaml | 49 + puppet/services/network/contrail-analytics.yaml | 90 + puppet/services/network/contrail-base.yaml | 100 + puppet/services/network/contrail-config.yaml | 72 + puppet/services/network/contrail-control.yaml | 54 + puppet/services/network/contrail-database.yaml | 51 + puppet/services/network/contrail-webui.yaml | 69 + puppet/services/neutron-api.yaml | 177 + puppet/services/neutron-base.yaml | 102 + .../services/neutron-compute-plugin-midonet.yaml | 29 + puppet/services/neutron-compute-plugin-nuage.yaml | 36 + .../neutron-compute-plugin-opencontrail.yaml | 29 + puppet/services/neutron-compute-plugin-ovn.yaml | 45 + .../services/neutron-compute-plugin-plumgrid.yaml | 29 + puppet/services/neutron-dhcp.yaml | 76 + puppet/services/neutron-l3-compute-dvr.yaml | 62 + puppet/services/neutron-l3.yaml | 74 + puppet/services/neutron-metadata.yaml | 77 + puppet/services/neutron-midonet.yaml | 62 + puppet/services/neutron-ovs-agent.yaml | 127 + puppet/services/neutron-ovs-dpdk-agent.yaml | 75 + puppet/services/neutron-plugin-ml2-ovn.yaml | 79 + puppet/services/neutron-plugin-ml2.yaml | 129 + puppet/services/neutron-plugin-nuage.yaml | 89 + puppet/services/neutron-plugin-opencontrail.yaml | 74 + puppet/services/neutron-plugin-plumgrid.yaml | 121 + puppet/services/neutron-sriov-agent.yaml | 69 + puppet/services/nova-api.yaml | 132 + puppet/services/nova-base.yaml | 117 + puppet/services/nova-compute.yaml | 147 + puppet/services/nova-conductor.yaml | 56 + puppet/services/nova-consoleauth.yaml | 50 + puppet/services/nova-ironic.yaml | 53 + puppet/services/nova-libvirt.yaml | 55 + puppet/services/nova-metadata.yaml | 34 + puppet/services/nova-scheduler.yaml | 65 + puppet/services/nova-vnc-proxy.yaml | 61 + puppet/services/opendaylight-api.yaml | 69 + puppet/services/opendaylight-ovs.yaml | 47 + puppet/services/pacemaker.yaml | 116 + .../pacemaker/ceilometer-agent-central.yaml | 45 + .../pacemaker/ceilometer-agent-notification.yaml | 45 + puppet/services/pacemaker/ceilometer-api.yaml | 45 + .../services/pacemaker/ceilometer-collector.yaml | 45 + puppet/services/pacemaker/cinder-api.yaml | 45 + puppet/services/pacemaker/cinder-backup.yaml | 61 + puppet/services/pacemaker/cinder-scheduler.yaml | 45 + puppet/services/pacemaker/cinder-volume.yaml | 46 + puppet/services/pacemaker/core.yaml | 29 + puppet/services/pacemaker/database/mongodb.yaml | 42 + puppet/services/pacemaker/database/mysql.yaml | 55 + puppet/services/pacemaker/database/redis.yaml | 41 + puppet/services/pacemaker/glance-api.yaml | 74 + puppet/services/pacemaker/glance-registry.yaml | 47 + puppet/services/pacemaker/gnocchi-api.yaml | 45 + puppet/services/pacemaker/gnocchi-metricd.yaml | 47 + puppet/services/pacemaker/gnocchi-statsd.yaml | 46 + puppet/services/pacemaker/haproxy.yaml | 44 + puppet/services/pacemaker/heat-api-cfn.yaml | 44 + puppet/services/pacemaker/heat-api-cloudwatch.yaml | 44 + puppet/services/pacemaker/heat-api.yaml | 44 + puppet/services/pacemaker/heat-engine.yaml | 45 + puppet/services/pacemaker/horizon.yaml | 41 + puppet/services/pacemaker/keystone.yaml | 45 + puppet/services/pacemaker/manila-share.yaml | 41 + puppet/services/pacemaker/memcached.yaml | 42 + puppet/services/pacemaker/neutron-dhcp.yaml | 46 + puppet/services/pacemaker/neutron-l3.yaml | 46 + puppet/services/pacemaker/neutron-metadata.yaml | 44 + puppet/services/pacemaker/neutron-midonet.yaml | 41 + puppet/services/pacemaker/neutron-ovs-agent.yaml | 42 + puppet/services/pacemaker/neutron-plugin-ml2.yaml | 42 + .../services/pacemaker/neutron-plugin-nuage.yaml | 40 + .../pacemaker/neutron-plugin-opencontrail.yaml | 40 + .../pacemaker/neutron-plugin-plumgrid.yaml | 40 + puppet/services/pacemaker/neutron-server.yaml | 48 + puppet/services/pacemaker/nova-api.yaml | 45 + puppet/services/pacemaker/nova-conductor.yaml | 45 + puppet/services/pacemaker/nova-consoleauth.yaml | 45 + puppet/services/pacemaker/nova-scheduler.yaml | 45 + puppet/services/pacemaker/nova-vnc-proxy.yaml | 45 + puppet/services/pacemaker/rabbitmq.yaml | 41 + puppet/services/pacemaker/sahara-api.yaml | 45 + puppet/services/pacemaker/sahara-engine.yaml | 45 + puppet/services/rabbitmq.yaml | 93 + puppet/services/sahara-api.yaml | 92 + puppet/services/sahara-base.yaml | 82 + puppet/services/sahara-engine.yaml | 51 + puppet/services/services.yaml | 109 + puppet/services/snmp.yaml | 45 + puppet/services/swift-base.yaml | 33 + puppet/services/swift-proxy.yaml | 117 + puppet/services/swift-ringbuilder.yaml | 65 + puppet/services/swift-storage.yaml | 92 + puppet/services/time/ntp.yaml | 41 + puppet/services/time/timezone.yaml | 34 + puppet/services/tripleo-firewall.yaml | 39 + puppet/services/tripleo-packages.yaml | 34 + puppet/services/vip-hosts.yaml | 56 + puppet/swift-devices-and-proxy-config.yaml | 45 - puppet/swift-storage-post.yaml | 77 - puppet/swift-storage.yaml | 422 -- puppet/vip-config.yaml | 45 - roles_data.yaml | 165 + tools/yaml-validate.py | 56 +- validation-scripts/all-nodes.sh | 27 +- 396 files changed, 23981 insertions(+), 12405 deletions(-)

1 0

[new][openstackansible] openstack-ansible-plugins 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are pumped to announce the release of: openstack-ansible-plugins 14.0.0: plugins for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "py_pkgs" lookup plugin now has strict ordering for requirement files discovered. These files are used to add additional requirements to the python packages discovered. The order is defined by the constant, "REQUIREMENTS_FILE_TYPES" which contains the following entries, 'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt', 'global-requirements.txt', 'global-requirement- pins.txt'. The items in this list are arranged from least to most priority. * The ability to support login user domain and login project domain has been added to the keystone module. # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * The config_template action plugin now has a new option to toggle list extension for JSON or YAML formats. The new option is "list_extend" and is a boolean. The default is True which maintains the existing API. * An opportunistic Ansible execution strategy has been implemented. This allows the Ansible linear strategy to skip tasks with conditionals faster by never queuing the task when the conditional is evaluated to be false. * The Ansible SSH plugin has been modified to support running commands within containers without having to directly ssh into them. The change will detect presence of a container. If a container is found the physical host will be used as the SSH target and commands will be run directly. This will improve system reliability and speed while also opening up the possibility for SSH to be disabled from within the container itself. Bug Fixes ********* * The ability to support login user domain and login project domain has been added to the keystone module. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1574000 # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom Changes in openstack-ansible-plugins 13.0.0..14.0.0 --------------------------------------------------- 54270a0 Accept ansible_host in linear strategy ebbea84 Use centralised test scripts c9bcca3 Support more than one flat network a7825ec Update .gitreview for stable/newton 544adfe Update testing bits for consistency f25bf23 Human readable logs should be removed 5e0fd58 Update homepage with developer documentation page 7af6721 Fix regression for proprietary packages 65390c6 Implement distro package lookups and index 80beba8 Add option to toggle list extensions f974f7a Deserialize glance image_properties ffb02cf Fix assumption that the main OSA inventory will be used cb01efe Implement an opportunistic strategy and connection plugin 7e931aa Added SNI support for ansible_plugins via OS packages accc469 Add indexing of individual package keys 7a88090 Account for the move of other-requirements.txt to bindep.txt 29668ca Adding Vagrantfile for local testing d801f78 Ansible 2.1.1 role testing fb67f22 Move other-requirements.txt to bindep.txt 388dfe1 [DOCS] Updating plugin role docs 0464815 Add test playbook for filters 3ec922c Update py_pkgs to set options group membership and itemise global pins 523afbd Fix py_pkgs lookup to not include optional packages bc73b33 Remove dev-requirements.txt c8e25f5 Updated py_pkgs to index requirement files c7b7169 Update dist-sort module for better effectiveness 9913803 Omit the "other-requirements.txt" 7f50658 Update the lookup plugin to force dep ordering 54ce4ce Updated from global requirements aa69b10 Add the Ansible human_log call back plugin c44f2b1 Pin test-requirements to match OpenStack requirements 7d059fd Optionally include image properties 7d534a4 Adding ability to set 'properties' via Glance a72d40e Provide type for boolean module parameters 58d9d83 Bring delete and update functions to keystone module 07d600d Support users without projects in keystone library f975da2 Revert "Support users without projects in keystone library" 2e1492a Support users without projects in keystone library 627b70b Add .swp files to .gitignore e20add1 Add dependencies for paramiko 2.0 dce1b35 Add user and project login domains to keystone 79f3735 Adjust release note for config template 4a70773 Add reno scaffolding for release notes management f946160 Added option to support case-insensitive keys cd47eda Update the config_template plugin 41778e3 Fix NoneType with no subnet allocation ranges 4cd932a Add allocation pool support to neutron module c962fd2 Add logic to NOT build "proprietary" packages 5d610fd Update py_pkgs.py to support ansible v2.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 16 +- .gitreview | 2 +- README.rst | 77 +--- Vagrantfile | 13 + action/_v1_config_template.py | 26 +- action/_v2_config_template.py | 47 +- bindep.txt | 38 ++ connection/ssh.py | 127 ++++++ dev-requirements.txt | 6 - examples/example.ini | 5 + examples/playbook.yml | 4 + library/config_template | 10 + library/dist_sort | 27 +- library/glance | 15 +- library/keystone | 164 +++++-- library/neutron | 25 +- library/provider_networks | 19 +- lookup/py_pkgs.py | 477 ++++++++++++++------- manual-test.rc | 33 ++ other-requirements.txt | 16 - ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 +- .../notes/force-dep-order-2c529683509e45da.yaml | 9 + ..._user_and_project_support-e35b0b335b6522e9.yaml | 42 ++ .../notes/list-extend-toggle-46a75ded97b7ce02.yaml | 6 + ...egy-and-connection-plugin-bc476fa3607dcc4a.yaml | 11 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 274 ++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- strategy/linear.py | 156 +++++++ test-requirements.txt | 18 +- tox.ini | 139 ++++-- 46 files changed, 1833 insertions(+), 403 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ce31268..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +1,9 @@ -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -5,3 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_heat 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are amped to announce the release of: openstack-ansible-os_heat 14.0.0: os_heat for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_heat role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "heat_package_state" to "present". Upgrade Notes ************* * Installation of heat and its dependent pip packages will now only occur within a Python virtual environment. The "heat_venv_bin" and "heat_venv_enabled" variables have been removed. * The variable "heat_apt_packages" has been renamed to "heat_distro_packages". * The os_heat role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "heat_package_state" should be set to "present". * The database create and user creates have been removed from the "os_heat" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_heat 13.0.0..14.0.0 --------------------------------------------------- 9c5c0f1 Remove 'ignore_errors: true' in favor of 'failed_when: false' ea449fa Use dictionary for service group mappings dd6f8a9 Add os_heat role functional tests for gate 84fd16c Update tox.ini tests target for stable/newton 695cdca Update ansible-role-requirements to stable/newton 691b3aa Update default git branch to stable/newton 555ea3f Use centralised test scripts 3d22327 Update UPPER_CONSTRAINTS_FILE for stable/newton 74d89d5 Update .gitreview for stable/newton f71a7a8 Revert dynamic includes for inventory-based conditionals 93f9664 Force Ansible to use dynamic includes e7e8c34 Update homepage with developer documentation page 4b4403c Ansible 2.1.1 role testing 3668e42 Compress test execution logs 7164ef4 Update paste, policy and rootwrap configurations 2016-09-08 8878e8c Rename package lists (and related vars) appropriately 159a3de Enable log collection after functional testing e21acdf Make all linting tests use upper-constraints 8c72db4 Added SNI support for os_heat via OS packages 173cc07 Remove apt update from Vagrantfile 4f76e2c Add apt-get update to run_tests 99e431d Updated from global requirements e40a508 Add python packages for SNI support in tests 6043546 [DOCS] Use new documenation tree structure f679c8b Update paste, policy and rootwrap configurations 2016-08-15 87ee222 Move other-requirements.txt to bindep.txt 269d4fd Include ansible commands for ansible linting ffce76c Disable stderr logging c5bd643 Add project group to role cb04138 Add ability to change apt/yum package state fe2bc8d Ensure that mode is a string 6e50817 Fix ansible performance issue f0a8f2e Fix bug in RPC config that broke Rabbit SSL support 4a4fe13 Ensure that doc linting is included in the linters test a8a3d6a Define default region name. 87b4cea Provide default for rabbitmq telemetry password 683b096 Support service-specific rabbitmq clusters ebb8de7 Remove openstack_hosts from test requirements f90415f Optimise pip install tasks ece0354 Use plugins repo version of the human_log callback plugin 11adb31 Updated from global requirements d682195 Remove duplicates from .gitignore 8f7aa61 Update paste, policy and rootwrap configurations 2016-07-14 bb5f060 Implement doc8 checks for docs cacb9c1 Cleanup/standardize usage of tags 22955b6 Update sphinx configuration 2766daf Update tox configuration 7b3cca8 Only install to virtual environment ba9c72a Fix ansible-lint complaint about directory permissions 0933020 Update paste, policy and rootwrap configurations 2016-07-01 69023f3 Remove references to unused vars 3081ee7 Fail fast when required secrets are not present 0dbbcd5 DOC - Adopting the common role documentation pattern 962df05 Update paste, policy and rootwrap configurations 2016-06-17 78ad51e Pin test-requirements to match OpenStack requirements f659c82 Implement Xenial Support aa04e70 Remove pip_lock_down dependency 3383a91 Consistency for multi-os in the includes 42c11cb Remove unnecessary overrides of service variables b2f96d7 Verbose option has been deprecated from oslo.log 47702db Removed the db create tasks b45b74e Use keystone library for heat_stack_domain_admin 91ef9aa Add .swp files to .gitignore 9f04244 Change pip install task state to 'latest' 75c2484 Remove py_from_git role 3aabf5b Add dependencies for paramiko 2.0 c057041 Multi-distro pattern for os_heat role 78500be Update paste, policy and rootwrap configurations 2016-04-22 7085e74 Ansible 2.x - Address deprecation warning of bare variables d891809 Remove Liberty releasenote index eb43bc1 blacklist Ansible 1.9.6 b0a78fd Update min_ansible_version to 1.9 bba7cb1 Add reno scaffolding for release notes management b388875 Fix heat trustee configuration e6112a8 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 19 +- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 85 ++++--- examples/playbook.yml | 11 + handlers/main.yml | 23 +- manual-test.rc | 33 +++ meta/main.yml | 12 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-7c24aa813289aa40.yaml | 3 + ...os-heat-only-install-venv-e3e8e466dd67c2bc.yaml | 5 + ...package-list-name-changes-b484be7645bbe66a.yaml | 4 + .../notes/package-state-441864557ee5d75b.yaml | 13 + .../removed-db-create-tasks-276095a2293ed4ee.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/heat_db_setup.yml | 30 --- tasks/heat_domain_setup.yml | 86 +++---- tasks/heat_init_common.yml | 29 +++ tasks/heat_init_systemd.yml | 56 ++++ tasks/heat_init_upstart.yml | 26 ++ tasks/heat_install.yml | 138 ++-------- tasks/heat_post_install.yml | 18 -- tasks/heat_pre_install.yml | 29 +-- tasks/heat_service_add.yml | 28 +- tasks/heat_service_setup.yml | 19 -- tasks/heat_upstart_common_init.yml | 46 ---- tasks/heat_upstart_init.yml | 54 ---- tasks/install-apt.yml | 37 +++ tasks/main.yml | 61 ++++- templates/environment.d/default.yaml.j2 | 7 +- templates/heat-systemd-init.j2 | 25 ++ templates/heat-systemd-tempfiles.j2 | 4 + templates/heat-upstart-init.j2 | 28 +- templates/heat.conf.j2 | 18 +- templates/policy.json.j2 | 15 +- templates/templates/AWS_CloudWatch_Alarm.yaml.j2 | 26 +- templates/templates/AWS_RDS_DBInstance.yaml.j2 | 6 +- test-requirements.txt | 19 +- tox.ini | 162 ++++++------ vars/ubuntu-14.04.yml | 21 ++ vars/ubuntu-16.04.yml | 21 ++ 64 files changed, 1350 insertions(+), 955 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_horizon 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are exuberant to announce the release of: openstack-ansible-os_horizon 14.0.0: OpenStack Horizon role for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_horizon role now has support for the horizon ironic-ui dashboard. The dashboard may be enabled by setting "horizon_enable_ironic_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * The os_horizon role now has support for the horizon magnum-ui dashboard. The dashboard may be enabled by setting "horizon_enable_magnum_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * The "horizon_keystone_admin_roles" variable is added to support the "OPENSTACK_KEYSTONE_ADMIN_ROLES" list in the horizon_local_settings.py file. * Deployers can now blacklist certain Nova extensions by providing a list of such extensions in "horizon_nova_extensions_blacklist" variable, for example: horizon_nova_extensions_blacklist: - "SimpleTenantUsage" * Horizon now has the ability to set arbitrary configuration options using global option "horizon_config_overrides" in YAML format. The overrides follow the same pattern found within the other OpenStack service overrides. General documentation on overrides can be found here (http://docs.openstack.org/developer/openstack-ansible/install- guide/configure-openstack.html#overriding-openstack-configuration- defaults). * The "os_horizon" role now supports configuration of custom themes. Deployers can use the new "horizon_custom_themes" and "horizon_default_theme" variables to configure the dashboard with custom themes and default to a specific theme respectively. * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True * Horizon now has a boolean variable named "horizon_enable_ha_router" to enable Neutron HA router management. * Horizon's IPv6 support is now enabled by default. This allows users to manage subnets with IPv6 addresses within the Horizon interface. Deployers can disable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: False Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * The horizon next generation instance management panels have been enabled by default. This changes horizon to use the upstream defaults instead of the legacy panels. Documentation can be found here (http://docs.openstack.org/developer/horizon/topics/settings.html #launch-instance-ng-enabled). * Added "horizon_apache_custom_log_format" tunable to the os-horizon role for changing CustomLog format. Default is "combined". * The os_horizon role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "horizon_package_state" to "present". * The Sahara dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_sahara_ui: True Upgrade Notes ************* * The default horizon instance launch panels have been changed to the next generation panels. To enable legacy functionality set the following options accordingly: horizon_launch_instance_legacy: True horizon_launch_instance_ng: False * Installation of horizon and its dependent pip packages will now only occur within a Python virtual environment. The "horizon_venv_bin", "horizon_venv_enabled", "horizon_venv_lib_dir", and "horizon_non_venv_lib_dir" variables have been removed. * The variable "horizon_apt_packages" has been renamed to "horizon_distro_packages". * The os_horizon role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "horizon_package_state" should be set to "present". * The database and user creates have been removed from the "os_horizon" role. These tasks have been relocated to the playbooks. Security Issues *************** * Horizon disables password autocompletion in the browser by default, but deployers can now enable autocompletion by setting "horizon_enable_password_autocomplete" to "True". Bug Fixes ********* * The standard collectstatic and compression process in the os_horizon role now happens after horizon customizations are installed, so that all static resources will be collected and compressed. Changes in openstack-ansible-os_horizon 13.0.0..14.0.0 ------------------------------------------------------ 0001ead Add conditional for multi-domain support 2b0d10a magnum_ui filename changes 04a0e09 Update tox.ini tests target for stable/newton 1ab7462 Update ansible-role-requirements to stable/newton 1958d83 Update default git branch to stable/newton beb356f Use centralised test scripts 691cbf8 Update UPPER_CONSTRAINTS_FILE for stable/newton c7c490c Update .gitreview for stable/newton 020676b Revert dynamic includes for inventory-based conditionals e2f240b Add xenial support to the Vagrantfile 09185c5 Ansible 2.1.1 role testing 1f682b0 Force Ansible to use dynamic includes 988006d Update homepage with developer documentation page f327437 Compress test execution logs 0b6085c Rename package lists (and related vars) appropriately df0293c Enable log collection after functional testing 02b0439 Enable Sahara panel in Horizon a555868 Make all linting tests use upper-constraints 51cb64f Remove apt update from Vagrantfile 0afea1f Added SNI support for os_horizon role via OS packages c991bcc Updated from global requirements c7ebd28 Add variable override for OPENSTACK_KEYSTONE_ADMIN_ROLES f370ce6 [DOCS] Add project links to README; fix typos c9d245b Add python packages for SNI support in tests f40f7d1 [DOCS] Move horizon docs to roles cc1d885 Move other-requirements.txt to bindep.txt 0883726 Include ansible commands for ansible linting d1dd1aa Add required gettext package for compilemessages 387abfa Compile locale to be able to change language 0b98489 Add Magnum-UI plugin support to Horizon 78215c0 Add project group to role 05daa35 Add ability to change apt/yum package state 961d117 Create nova endpoints for tempest test 4dbde0e Ensure that doc linting is included in the linters test 097c01f Enable Horizon Ironic dashboard plugin ee4d926 Removing unused test playbook 7f7ad45 Remove openstack_hosts from test requirements 9b4c1cc Optimise pip install tasks e241c37 Use plugins repo version of the human_log callback plugin b4cb4aa Updated from global requirements 984fae7 Remove duplicates from .gitignore ad77b18 Implement doc8 checks for docs 87b7057 Update sphinx configuration cc71003 Updated tests and role for Xenial support 605f176 Cleanup/standardize usage of tags 4937692 Add support for custom Horizon themes 9a104b5 Update tox configuration 4559edf Only install to virtual environment 3983911 Added variable to allow for arbitrary HORIZON_CONFIG dfda6bc Compress static files after customizations 6a84a06 Add enable_lb option back to horizon 16b8d25 Clean up container cache prep in tests 4dcf0fa Pin test-requirements to match OpenStack requirements 583c370 Add support for CustomLog format modification cec81d7 Remove pip_lock_down dependency 2c67361 Consistency for multi-os in the includes e0d3d44 Add Nova extensions blacklisting 7232b74 Use tempest-horizon plugin c82ef96 Updating os_horizon to use the Multi-Distro framework 42e77ea Removed the db create tasks 4f891b5 Removing unused verbose variable e66542c Use tempest for role testing 7610572 Enable ha router support in Horizon f0dc519 Enable next gneration instance launch in Horizon 1111f3d Enable IPv6 support in Horizon 568debe Enable new LBaaS panel in Horizon 2fe3566 Add .swp files to .gitignore bc92d06 Change pip install task state to 'latest' f30714d Remove py_from_git role 30138c2 Add dependencies for paramiko 2.0 126a7c1 Ansible 2.x - Address deprecation warning of bare variables 62f3f37 Remove Liberty releasenote index deec1c9 Fix server/hostname for RFC 1034/1035 76e009d blacklist Ansible 1.9.6 8667dce Optionally allow autocomplete in Horizon f210743 Add option to enable from VPNaaS in Horizon 5838bfd Update SSL key / cert distribution for Horizon 298f728 Update min_ansible_version to 1.9 afcf852 Add reno scaffolding for release notes management 125f1b0 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + README.rst | 68 +---- Vagrantfile | 29 ++- bindep.txt | 43 ++++ defaults/main.yml | 134 +++++++--- examples/playbook.yml | 32 +++ handlers/main.yml | 2 +- manual-test.rc | 33 +++ meta/main.yml | 12 +- other-requirements.txt | 17 -- releasenotes/notes/.placeholder | 0 ...-ironic-dashboard-support-3eb5168d71e4dddd.yaml | 5 + ...-magnum-dashboard-support-4fcddedffb83bc28.yaml | 5 + ...stone-admin-roles-setting-83198a721c64ee3c.yaml | 5 + ...nova-extensions-blacklist-8ed18f45aba6a7fb.yaml | 11 + .../compress-customization-a7d03162d837085f.yaml | 5 + .../horizon-arbitrary-config-8a36e4bd6818afe1.yaml | 6 + ...ble-password-autocomplete-5f8f78a6c8f1edb3.yaml | 5 + .../horizon_custom_themes-4ee1fd9444b8a5ae.yaml | 6 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 9 + .../make-ha-router-a-toggle-eefd61fc7978240d.yaml | 4 + .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 + .../ng-instance-management-f9134fc283aa289c.yaml | 16 ++ ...apache-log-format-support-34c9ef74b3bcce31.yaml | 5 + ...horizon-only-install-venv-0fd3292d2b61e840.yaml | 6 + ...package-list-name-changes-4a42f561dac5754e.yaml | 4 + .../notes/package-state-fda322f5e667bbec.yaml | 13 + .../removed-db-create-tasks-8ae301041fe46cfb.yaml | 5 + .../sahara-horizon-panel-d80d17da528b4c07.yaml | 9 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/horizon_apache.yml | 16 -- tasks/horizon_db_setup.yml | 33 --- tasks/horizon_install.yml | 147 ++--------- tasks/horizon_post_install.yml | 106 +++++--- tasks/horizon_pre_install.yml | 24 -- tasks/horizon_service_setup.yml | 2 - tasks/horizon_ssl_key_create.yml | 4 - tasks/horizon_ssl_key_distribute.yml | 34 ++- tasks/horizon_ssl_key_store.yml | 32 +-- tasks/horizon_ssl_self_signed.yml | 9 +- tasks/horizon_ssl_user_provided.yml | 9 - tasks/install-apt.yml | 37 +++ tasks/main.yml | 43 +++- templates/horizon-manage.py.j2 | 2 +- templates/horizon_local_settings.py.j2 | 42 ++- templates/openstack_dashboard.conf.j2 | 4 +- test-requirements.txt | 19 +- tox.ini | 166 ++++++------ vars/debian.yml | 29 +++ 71 files changed, 1504 insertions(+), 854 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7f0134b..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 \ No newline at end of file +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_nova 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_nova 14.0.0: os_nova for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_nova role can now deploy the nova-lxd hypervisor. This can be achieved by setting "nova_virt_type" to "lxd" on a per-host basis in "openstack_user_config.yml" or on a global basis in "user_variables.yml". * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". * The os_nova role can now detect a PowerNV environment and set the virtualization type to 'kvm'. * The nova SSH public key distribution has been made a lot faster especially when deploying against very large clusters. To support larger clusters the role has moved away from the "authorized_key" module and is now generating a script to insert keys that may be missing from the authorized keys file. The script is saved on all nova compute nodes and can be found at "/usr/local/bin/openstack- nova-key.sh". If ever there is a need to reinsert keys or fix issues on a given compute node the script can be executed at any time without directly running the ansible playbooks or roles. * The os_nova role can now detect and support basic deployment of a PowerVM environment. This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink package and nova-powervm driver. * Nova UCA repository support is implemented by default. This will allow the users to benefit from the updated packages for KVM. The "nova_uca_enable" variable controls the install source for the KVM packages. By default this value is set to "True" to make use of UCA repository. User can set to "False" to disable. * The os_nova role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "nova_package_state" to "present". Upgrade Notes ************* * Adding a new nova.conf entry, live_migration_uri. This entry will default to a "qemu-ssh://" uri, which uses the ssh keys that have already been distributed between all of the compute hosts. * Cleanup tasks are added to remove the nova console git directories "/usr/share/novnc" and "/usr/share/spice-html5", prior to cloning these inside the nova vnc and spice console playbooks. This is necessary to guarantee that local modifications do not break git clone operations, especially during upgrades. * Installation of nova and its dependent pip packages will now only occur within a Python virtual environment. The "nova_venv_enabled", "nova_venv_bin" variables have been removed. * The os_nova role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "nova_package_state" should be set to "present". * The database create and user creates have been removed from the "os_nova" role. These tasks have been relocated to the playbooks. * The following variables have been renamed in order to make the variable names neutral for multiple operating systems. * nova_apt_packages -> nova_distro_packages * nova_spice_apt_packages -> nova_spice_distro_packages * nova_novnc_apt_packages -> nova_novnc_distro_packages * nova_compute_kvm_apt_packages -> nova_compute_kvm_distro_packages Bug Fixes ********* * The "/var/lib/libvirt/qemu/save" directory is now a symlink to "{{ nova_system_home_folder }}/save" to resolve an issue where the default location used by the libvirt managed save command can result with the root partitions on compute nodes becoming full when "nova image-create" is run on large instances. Other Notes *********** * "nova_libvirt_live_migration_flag" is now phased out. Please create a nova configuration override with "live_migration_tunnelled: True" if you want to force the flag "VIR_MIGRATE_TUNNELLED" to libvirt. Nova "chooses a sensible default" otherwise. * "nova_compute_manager" is now phased out. Changes in openstack-ansible-os_nova 13.0.0..14.0.0 --------------------------------------------------- 6071131 Move ironic pip install into it's own path be0f8ed Remove 'ignore_errors: true' in favor of 'failed_when: false' f313b34 Use dictionary for service group mappings 4813e76 Delegate from first available compute host a085e42 Fix ironic compute_driver 27d42de Ensure that novnc/spice consoles use the public endpoint protocol 38f9ed3 Remove dynamic inclusion from inventory-based service setup 312044e Move "--no-binary libvirt-python" to ansible-tests 77cc5ed Update default git branch to stable/newton 672d398 Run tempest tests a0c1160 Update ansible-role-requirements to stable/newton 3b17a51 Update tox.ini tests target for stable/newton d375b07 Update UPPER_CONSTRAINTS_FILE for stable/newton f79a037 Use centralised test scripts e7bfdb4 Update ironic auth options for Keystone v3 auth ede0832 Update .gitreview for stable/newton 43485ee Revert dynamic includes for inventory-based conditionals bdd4513 Force Ansible to use dynamic includes 35d85e9 Use openstack-ansible-tests for os-nova role dd90521 modify the home-page info with the developer documentation ce6a6eb Remove baremetal rootwrap filters 9e998b5 Fix novnc console include positioning 70d72d6 Force tempest to run serial and retry tests 17f0fa2 [DOCS] Update docs for mixed lxd hypervisors ec5b10f Compress test execution logs f784539 [DOCS] Update PowerVM driver documentation 7862503 Configure qemu when Calico network type is set a8b3c81 Add config template for qemu.conf 1d1c294 Update librabbit package for novnc in 16.04 283fb73 Add pyasn1-modules to powervm pip packages 57cc173 Rename package lists (and related vars) appropriately f6f6299 Enable log collection after functional testing c3c0813 Rename lxc to lxd in various tasks 41c1dbc Change nova_virt_type from lxc to lxd 522ce07 Ensure nova home dir is completely overridable 9581259 Fix linters failure due to etcd role 354147b Clean final newline when distributing SSH keys e13a00c Add project group to role aeeb50a Make all linting tests use upper-constraints 6f3d71b Adopt oslo_cache.memcache_pool as cache backend 33199fb Remove apt update from Vagrantfile 90ace8c Add SNI support via OS packages for os_nova 97f7e37 [DOC] Add clarifying statement on CPU type ac859ec Add apt-get update to run_tests 3e0ec52 [DOCS] Fix link to nova 75d82b6 [DOCS] Moving networking content to nova role docs c970a58 Updated from global requirements 2c641ba Fix race condition when configuring the qemu save directory 7777d81 [DOCS] Refactor of nova role docs f4798ed Add python packages for SNI support in tests 455055a Move other-requirements.txt to bindep.txt 1765c97 Add networking-calico configuration for nova-api-metadata c7a9a1c Fix interface configuration for nova gate 443f1b0 Include ansible commands for ansible linting ec0670b Implement tests for nova-lxd hypervisor d0b3dac Update PowerVM compute driver path 06081df Implement nova-lxd driver ba9b97e Disable stderr logging 3ffa999 Fix bug in RPC config that broke Rabbit SSL support 2529e2a Add ability to change apt/yum package state c0b9e2f Ensure that mode is a string 7872bd7 Fix ansible performance issue ba39ab4 Remove openstack_hosts from test requirements 7598609 If /var/lib/libvirt/qemu/save exists, move it to nova_libvirt_save_path d85ab72 Write script to /var/tmp instead of /usr/local/bin fed503c Set cinder service region. 64e6772 Ensure that doc linting is included in the linters test 8e82812 Allow configuration of multiple rabbit clusters b9d50ce Optimise pip install tasks 7f69cdd Only install to virtual environment e732f40 Updated from global requirements 2974df5 Define keystone region name. 451cd16 Remove Mitaka Deprecated items bda35e7 Improve deployment performance on large clusters 4edfa46 Fix notification_driver option bd0246c Use plugins repo version of the human_log callback plugin 92fac4e Adding a Vagrantfile for local testing 4596234 Update paste, policy and rootwrap configurations 2016-07-14 92aecc5 Move UCA enable and repo URL var to role defaults dc472f3 Update tox configuration 1f7819c Nova role should not default vars outside the nova namespace 9a1486b Make role functional testing more idempotent c41f492 Remove duplicates from .gitignore 3a428e7 Do not install libvirt-python wheel when testing 601c49b Update sphinx configuration dcbc394 Turn SSH auth into the default for live migration e077f1b Filter libvirt in nova.conf. Add nova_powervm module in nova.virt 3991883 Fix ansible-lint complaint about directory permissions bbce047 Update paste, policy and rootwrap configurations 2016-07-01 f7b96c0 Update role to use the Multi-Distro framework bc124ef DOC - Adopting the common role documentation pattern 692821e Remove tags from functional testing playbooks 0b5b8dd Add missing xenial to meta.yml bf12ab4 Replace network_api_class with use_neutron 842a5b4 Clean up container cache prep in tests 4734969 Fix shell command usage fc526ec Pin test-requirements to match OpenStack requirements ff43ff3 Update paste, policy and rootwrap configurations 2016-06-17 2701d29 Address Ansible bare variable usage d69f560 Implement Xenial Support 87c29e0 Remove pip_lock_down dependency a92777f Implement Nova PowerVM Virt Driver 3ad2855 Fix nova_system_group_uid variable name 3a683a0 [GATE UNBLOCKER] Fix virsh default network removal a8d1e41 Always execute Nova virt type detection 14c3be0 Update paste, policy and rootwrap configurations 2016-06-02 e37a680 UCA support for nova compute 2599006 Create symlink for libvirt save directory dd6d11a Remove unnecessary overrides of service variables c6a6672 Detect PowerNV environment 0661aff Add wget to whitelist_externals for tox 9ef8c43 Cleanup Nova console proxy git repos before updating it 0101460 Allow metadata_host to be different to LB VIP 8600a80 Skip unavailable hosts when distributing keys 7e6fa1c Remove python-cephlibs 1a40c1c Removed the db create tasks bfde23d Update paste, policy and rootwrap configurations 2016-05-19 f56180c Verbose option has been deprecated from oslo.log 451fb1c fixing the network issues of nova testing b6371a2 Update tempest test vars 18141c0 Accept host keys for console git tasks 2c1c2f4 Add .swp files to .gitignore 4c2b4b8 Change pip install task state to 'latest' 85b92f8 Add dependencies for paramiko 2.0 5cc44e0 Remove py_from_git role f6f5bed Run specific tempest tests d77ccfa Update paste, policy and rootwrap configurations 2016-04-22 96a443f Use tempest for testing 69974b5 Remove Liberty releasenote index a902528 Fix scheduler_host_manager regression 9aebefb Enabled debug logging functionality for libvirt 9b98745 blacklist Ansible 1.9.6 9d6a212 Nuage nova configuration ansible changes 53486a9 Update min_ansible_version to 1.9 e2fc4b7 Add Nova config for os_ironic role 8f3acb9 Add reno scaffolding for release notes management d15102c Add missing DB configuration for nova-cert and nova-consoleauth aec9d14 Perform online data migrations d10448c Switch defaults/tests to use master branch d84cd55 Update paste, policy and rootwrap configurations 2016-04-03 703402a Update test dependencies Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 27 +- Vagrantfile | 12 + bindep.txt | 41 ++ defaults/main.yml | 270 ++++++++---- examples/playbook.yml | 9 + files/rootwrap.d/baremetal-compute-ipmi.filters | 9 - files/rootwrap.d/baremetal-deploy-helper.filters | 11 - files/rootwrap.d/compute.filters | 12 +- handlers/main.yml | 25 +- manual-test.rc | 33 ++ meta/main.yml | 10 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-nova-lxd-f094438e4bf36d52.yaml | 6 + .../notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 + .../notes/add-xenial-support-3dc3711e5b1bdc34.yaml | 4 + .../notes/detect_power-a6a679c8c3dd3262.yaml | 4 + ...ration-default-set-to-ssh-6add1dbdeea43509.yaml | 5 + .../mitaka-deprecations-72bec69c1395261d.yaml | 10 + ...console-proxy-git-cleanup-cdeffd3f0d040275.yaml | 8 + ...-largecluster-key-inserts-afc8cac63af41087.yaml | 12 + .../notes/nova-powervm-b4eddae30abbd08e.yaml | 5 + .../notes/nova-uca-support-409b2e6afbce47b1.yaml | 10 + .../os_nova-install-venv-6c6c2ba28f67a891.yaml | 5 + .../notes/package-state-38187ec5242a005b.yaml | 13 + .../removed-db-create-tasks-3deea562441871c6.yaml | 5 + ...virt_save_dir_to_nova_dir-3b1b278cb7e5831f.yaml | 8 + .../notes/var-deprecations-417d87b9d386466a.yaml | 11 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/main.yml | 44 +- tasks/nova_compute.yml | 9 + tasks/nova_compute_ironic.yml | 29 ++ tasks/nova_compute_key_distribute.yml | 42 +- tasks/nova_compute_key_populate.yml | 2 +- tasks/nova_compute_kvm.yml | 15 + tasks/nova_compute_kvm_install.yml | 85 ++-- tasks/nova_compute_kvm_virsh_net_remove.yml | 1 + tasks/nova_compute_lxd.yml | 41 ++ tasks/nova_compute_lxd_install.yml | 29 ++ tasks/nova_compute_powervm.yml | 29 ++ tasks/nova_compute_powervm_install.yml | 101 +++++ tasks/nova_console_install.yml | 28 -- tasks/nova_console_novnc_install.yml | 71 +-- tasks/nova_console_spice_install.yml | 36 +- tasks/nova_db_setup.yml | 61 +-- tasks/nova_init_common.yml | 29 ++ tasks/nova_init_systemd.yml | 56 +++ tasks/nova_init_upstart.yml | 26 ++ tasks/nova_install.yml | 108 ++--- tasks/nova_install_apt.yml | 134 ++++++ tasks/nova_post_install.yml | 40 +- tasks/nova_pre_install.yml | 14 +- tasks/nova_service_add.yml | 107 ----- tasks/nova_service_setup.yml | 100 ++++- tasks/nova_upstart_common_init.yml | 46 -- tasks/nova_upstart_init.yml | 102 ----- tasks/nova_virt_detect.yml | 32 +- templates/api-paste.ini.j2 | 35 +- templates/libvirtd.conf.j2 | 6 + templates/lxd-init.sh.j2 | 12 + templates/nova-key-insert.sh.j2 | 31 ++ templates/nova-systemd-init.j2 | 25 ++ templates/nova-systemd-tempfiles.j2 | 4 + templates/nova-upstart-init.j2 | 28 +- templates/nova.conf.j2 | 67 ++- templates/policy.json.j2 | 489 --------------------- templates/qemu.conf.j2 | 20 + test-requirements.txt | 18 +- tox.ini | 170 ++++--- vars/ubuntu-14.04.yml | 100 +++++ vars/ubuntu-16.04.yml | 96 ++++ 104 files changed, 2654 insertions(+), 2136 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..0e69546 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,3 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_cinder 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are overjoyed to announce the release of: openstack-ansible-os_cinder 14.0.0: os_cinder role for OpenStack- Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_cinder" role now supports Ubuntu 16.04. * CentOS7/RHEL support has been added to the os_cinder role. * The os_cinder role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "cinder_package_state" to "present". Upgrade Notes ************* * Installation of cinder and its dependent pip packages will now only occur within a Python virtual environment. The "cinder_venv_enabled" and "cinder_venv_bin" variables have been removed. * The variable "cinder_apt_packages" has been renamed to "cinder_distro_packages". * The variable "cinder_volume_apt_packages" has been renamed to "cinder_volume_distro_packages". * The variable "cinder_lvm_volume_apt_packages" has been renamed to "cinder_lvm_volume_distro_packages". * The os_cinder role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "cinder_package_state" should be set to "present". * The database create and user creates have been removed from the "os_cinder" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_cinder 13.0.0..14.0.0 ----------------------------------------------------- fe3d148 Remove 'ignore_errors: true' in favor of 'failed_when: false' c918fdc Use dictionary for service group mappings 8364cf8 Standardize the testing for Cinder 785d682 Update paste, policy and rootwrap configurations 2016-10-05 e3dcdf1 Update tox.ini tests target for stable/newton ff393a3 Remove duplicate delegate_to 0602cfa Update ansible-role-requirements to stable/newton a55aa0e Remove dynamic inclusion from inventory-based service setup 4ccdc1a Revert dynamic include for inventory-based conditionals cfcfc64 Update default git branch to stable/newton 2439883 Ansible 2.1.1 update 3732ce0 Update UPPER_CONSTRAINTS_FILE for stable/newton a129650 Update .gitreview for stable/newton ac5913b Revert dynamic includes for inventory-based conditionals f420900 Add centos support for os_cinder role e30cc10 Force Ansible to use dynamic includes 1e2d1c0 Update rootwrap filter copy for easier maintenance 640b768 Remove orphan bracket generated when no lvm devices are present 5653c11 use 2 spaces instead of 1 for pkg list. e304504 Correctly namespace the storage_address variable b5ce16c Compress test execution logs 38eecf7 Update paste, policy and rootwrap configurations 2016-09-08 d8daff7 [DOCS] Clarify is_metal is required if using iSCSI 8bc6f64 Rename package lists (and related vars) appropriately 8dbc811 Enable log collection after functional testing 7989209 Allow LVM to scan all loop devices 86fd687 Make all linting tests use upper-constraints 60bac9e Remove apt update from Vagrantfile b8eaf4f Add SNI support via OS packages for os_cinder ca4c887 Add apt-get update to run_tests dc8c4dd Updated from global requirements 88416a9 [DOCS] - Clean up role docs ba067d4 Add python packages for SNI support in tests 6f47415 Update paste, policy and rootwrap configurations 2016-08-15 c1dbc8a [DOCS] Move cinder role docs ce70cc4 Move other-requirements.txt to bindep.txt 74fd1d8 Include ansible commands for ansible linting 33b95d2 Add project group to role 532025c Disable stderr logging 24da899 Define cinder_default_volume_type for gating. c2584fe Drop H303 in flake8 ignore list 03faa40 Add ability to change apt/yum package state eb4a836 Ensure that mode is a string 761e18d Fix ansible performance issue f50100e Update paste, policy and rootwrap configurations 2016-08-01 432948d Fix bug in RPC config that broke Rabbit SSL support e92944b Update paste, policy and rootwrap configurations 2016-07-27 c8262ab Ensure that doc linting is included in the linters test 721e102 Provide default for rabbitmq telemetry password 230a0d6 Allow configuration of multiple rabbit clusters cbb61c0 Remove openstack_hosts from test requirements 47c293e Define keystone region name. 064a42c Optimise pip install tasks 1333fab Support service-specific rabbitmq clusters 0cad7a4 Use plugins repo version of the human_log callback plugin b694b84 Updated from global requirements afecd81 Remove duplicates from .gitignore c6ef839 Implement doc8 checks for docs 62c3a80 Fix cinder role condition when no cinder_volumes 49ca0de Cleanup/standardize usage of tags 27de52f Update sphinx configuration a39d151 Update the virtualenv paths only when we have a new venv 95a0f72 Update tox configuration 7ff7f1c Clean up 16.04 release note df3b479 Only install to virtual environment 920a269 Fix ansible-lint complaint about directory permissions 426ccb9 Update paste, policy and rootwrap configurations 2016-07-01 1afdb43 Simplify cinder.conf logic around cinder_glance_api_servers var ab33572 Update the cinder role to support Ubuntu 16.04 and Systemd ba9ae56 Clean up container cache prep in tests 3aa9aa5 Pin test-requirements to match OpenStack requirements 93e9e08 Update paste, policy and rootwrap configurations 2016-06-17 27a895c Cinder volume type creation race condition 868a6d3 Remove pip_lock_down dependency c72d133 Update paste, policy and rootwrap configurations 2016-06-02 b854bee Consistency for multi-os in the includes 95276fb Remove unnecessary overrides of service variables e3b11b5 Remove python-cephlibs f406aa7 Update paste, policy and rootwrap configurations 2016-05-19 26a236c Verbose option has been deprecated from oslo.log 956683b Added task to install apt packages idependent of the cinder-volume backend 257b7ad Removed the db create tasks c94e356 Update tempest test vars b9559cd Add .swp files to .gitignore c763bac Change pip install task state to 'latest' e944669 Remove py_from_git role 936baf8 Add dependencies for paramiko 2.0 38e3c46 Use tempest for functional testing 563dc74 Update paste, policy and rootwrap configurations 2016-04-22 3d54095 Remove Liberty releasenote index 3e0214f Ansible 2.x - Address deprecation warning of bare variables e2e9eb4 updated cinder.conf for backup catalog info 0478561 blacklist Ansible 1.9.6 f6d4d7a Update min_ansible_version to 1.9 b9b1298 Add reno scaffolding for release notes management 19bc27e Updated role using Multi-Distro framework bd2e947 Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 57 +-- Vagrantfile | 7 +- bindep.txt | 43 ++ defaults/main.yml | 68 +-- examples/playbook.yml | 8 + files/rootwrap.d/volume.filters | 29 +- handlers/main.yml | 23 +- manual-test.rc | 33 ++ meta/main.yml | 15 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 releasenotes/notes/os_cinder-1604-support.yaml | 3 + ...os_cinder-centos7-support-732f8feac7241e2a.yaml | 4 + ..._cinder-only-install-venv-914d5655dd645213.yaml | 5 + ...package-list-name-changes-6f74fbf336030242.yaml | 8 + .../notes/package-state-7caea8f1db708a2e.yaml | 13 + .../removed-db-create-tasks-8d931286d6347bc6.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/cinder_backends.yml | 7 +- tasks/cinder_db_setup.yml | 30 -- tasks/cinder_init_common.yml | 32 ++ tasks/cinder_init_systemd.yml | 65 +++ tasks/cinder_init_upstart.yml | 28 ++ tasks/cinder_install.yml | 110 +---- tasks/cinder_install_apt.yml | 32 +- tasks/cinder_install_yum.yml | 50 +++ tasks/cinder_lvm_config.yml | 6 - tasks/cinder_post_install.yml | 35 +- tasks/cinder_pre_install.yml | 23 - tasks/cinder_service_add.yml | 28 +- tasks/cinder_service_setup.yml | 12 - tasks/cinder_upstart_common_init.yml | 46 -- tasks/cinder_upstart_init.yml | 63 --- tasks/main.yml | 57 ++- templates/api-paste.ini.j2 | 25 +- templates/cinder-systemd-init.j2 | 25 ++ templates/cinder-systemd-tempfiles.j2 | 4 + templates/cinder-upstart-init.j2 | 26 +- templates/cinder.conf.j2 | 34 +- templates/lvm.conf.j2 | 4 + templates/policy.json.j2 | 44 +- test-requirements.txt | 19 +- tox.ini | 155 ++++--- vars/redhat-7.yml | 36 ++ vars/ubuntu-14.04.yml | 14 +- vars/ubuntu-16.04.yml | 44 ++ 78 files changed, 1876 insertions(+), 1075 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-rsyslog_server 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glowing to announce the release of: openstack-ansible-rsyslog_server 14.0.0: rsyslog_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "rsyslog_server" role now has support for CentOS 7. * The rsyslog_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_server_package_state" to "present". Upgrade Notes ************* * The rsyslog_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_server_package_state" should be set to "present". * The variable "rsyslog_server_packages" has been replaced by "rsyslog_server_distro_packages". * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings Changes in openstack-ansible-rsyslog_server 13.0.0..14.0.0 ---------------------------------------------------------- 792d39c Update tox.ini tests target for stable/newton 1d52620 Update ansible-role-requirements to stable/newton b1d6876 Use centralised test scripts d40c9f6 Update UPPER_CONSTRAINTS_FILE for stable/newton b13723d Update .gitreview for stable/newton 2d196fb update homepage with developer documentation page e005804 Update testing bits for consistency ba7b4b4 Compress test execution logs 2e9a460 Separate remote log stream from local 3271242 Yum: Add retry to comply with the until loop 02eebf7 Enable log collection after functional testing d46d7ea Rename package lists (and related vars) appropriately 37ba469 Make all linting tests use upper-constraints 870726a Add SNI support to rsyslog_server role via OS packages 6445c24 Add apt-get update to run_tests 2bf6a91 Updated from global requirements 78aa1d1 Add python packages for SNI support in tests e9a93e9 Move other-requirements.txt to bindep.txt 8d41188 [DOCS] Refactor rsyslog_server Docs 40cb670 Include ansible commands for ansible linting b4430a1 Add ability to change apt/yum package state c56338a Ensure that doc linting is included in the linters test cd16029 Use plugins repo version of the human_log callback plugin 4d62800 Updated from global requirements ed1cf68 Remove duplicates from .gitignore 118fb2d Implement doc8 checks for docs 05e89a7 Update sphinx configuration 6f7ffc4 Update tox configuration 59fe3f3 Skip lint check for yum clean task 480fa37 Add CentOS 7 support b89144d Pin test-requirements to match OpenStack requirements b1e2bb0 Address Ansible bare variable usage 12ec710 Consistency for multi-os in the includes 7aa50b6 Update role metadata 5a6cbec Add .swp files to .gitignore 70903b6 Add dependencies for paramiko 2.0 34ce58b Remove Liberty releasenote index 7016f43 blacklist Ansible 1.9.6 4904568 Add reno scaffolding for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + README.rst | 21 +- bindep.txt | 41 +++ defaults/main.yml | 11 + examples/playbook.yml | 6 + manual-test.rc | 33 +++ meta/main.yml | 5 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../notes/centos-7-support-d96233f41f63cfb8.yaml | 3 + .../notes/package-state-48e933a395bbdc0c.yaml | 13 + .../notes/package_var_rename-9a55f7030595fdef.yaml | 4 + ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install-apt.yml | 4 +- tasks/install-yum.yml | 7 +- tasks/main.yml | 2 + templates/os_aggregate_storage.j2 | 2 +- templates/rsyslog.conf.j2 | 59 ++--- test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 2 +- vars/redhat.yml | 2 +- 37 files changed, 707 insertions(+), 188 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are enthusiastic to announce the release of: openstack-ansible-rabbitmq_server 14.0.0: rabbitmq_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "rabbitmq_server" now supports a configurable inventory host group. Deployers can override the "rabbitmq_host_group" variable if they wish to use the role to create additional RabbitMQ clusters on a custom host group. * The "rabbitmq_server" role now supports configuring HiPE compilation of the RabbitMQ server Erlang code. This configuration option may improve server performance for some workloads and hardware. Deployers can override the "rabbitmq_hipe_compile" variable, setting a value of "True" if they wish to enable this feature. * The rabbitmq_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rabbitmq_package_state" to "present". * The "rabbitmq_server" role now supports deployer override of the RabbitMQ policies applied to the cluster. Deployers can override the "rabbitmq_policies" variable, providing a list of desired policies. Upgrade Notes ************* * The rabbitmq_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rabbitmq_package_state" should be set to "present". Deprecation Notes ***************** * The "rabbitmq_apt_packages" variable has been deprecated. "rabbitmq_dependencies" should be used instead to override additional packages to install alongside rabbitmq-server. Changes in openstack-ansible-rabbitmq_server 13.0.0..14.0.0 ----------------------------------------------------------- a3bcb49 Remove 'ignore_errors: true' in favor of 'failed_when: false' fc1790a Update tox.ini tests target for stable/newton 4e9aa5d Update ansible-role-requirements to stable/newton 474d201 Use centralised test scripts 62a0490 Update UPPER_CONSTRAINTS_FILE for stable/newton 1e54c81 Update .gitreview for stable/newton 811173b Revert dynamic includes for inventory-based conditionals 17ba3ef Force Ansible to use dynamic includes 9d389bb Remove test-install-openstack-hosts ba5687c modify the home-page info with the developer documentation 2d251cf Ansible 2.1.1 role testing cff36f6 Clarify task name d2dc31b delete python bytecode including pyo before every test run 716494e Adjust file descriptor limit when systemd is used e533c25 Compress test execution logs 75d8dac Rabbit policies now overrideable by deployers 37c741e Enable HiPE compile configuration 9596eb5 Adding Vagrantfile for local testing c1a97ab Allow configuration of rabbitmq plugins dbcd098 Enable log collection after functional testing 9ccc0ee Add collect_statistics_interval, rates_mode in rabbitmq.config template 478cc72 Upgrade RabbitMQ Server to 3.6.5 46950a6 Make all linting tests use upper-constraints d01e58a Updated from global requirements 9db4526 Added SNI support for rabbitmq_server role via OS packages e79d8b2 Add python packages for SNI support in tests 5d47675 Include ansible commands for ansible linting 4f8b096 Move other-requirements.txt to bindep.txt 7d3cce0 [DOCS] Move RabbitMQ role docs 231331b Add pip_install meta-dep to solve SNI issues 35b4ae0 Update the rabbitmq modules to use the node name 8adfab5 Add ability to change apt/yum package state 01d6210 Updated from global requirements 4c14f1e Fix get_url SNI issues in CentOS 7 7f3acaf Ensure that doc linting is included in the linters test bb1fd16 Really fix localhost line in /etc/hosts 67360bb Write localhost line in /etc/hosts when testing e0f20a5 Fix D005 error b1ea2ce Fix deprecation warning for undefined variables 91494d6 Remove pip_install meta-dependency 32d01ca Remove unnecessary package installation 33479f1 Use plugins repo version of the human_log callback plugin 580b998 Remove duplicates from .gitignore 343f4dc Updated from global requirements e4644a1 Make rabbitmq inventory group configurable 423347c Implement doc8 checks for docs cfaf4f8 Update sphinx configuration b42372b Upgrade RabbitMQ Server to 3.6.3 eb495e4 Update tox configuration 66d0530 Reload systemd after installing rabbitmq 16aee69 Clean up container cache prep in tasks 5bca9cb Pin test-requirements to match OpenStack requirements 0a48c46 Address Ansible bare variable usage 1994d6b Consistency for multi-os in the includes 0b1c38a Upgrade RabbitMQ Server to 3.6.2 0f06112 Add skip_ansible_lint tags for error ANSIBLE0006 d6a1f3d Multi-distro framework for rabbitmq_server role 5dc6795 install rabbitmq-server in serial d036e44 remove unused test-upgrade.yml 4da96df Add .swp files to .gitignore cf71022 Change pip install task state to 'latest' 1b9035a Reorganize test playbooks a9d5e06 Add dependencies for paramiko 2.0 6806e7c Add executable bit to run_tests.sh f171869 Remove Liberty releasenote index 0679db0 Fix server/hostname for RFC 1034/1035 c76ce3f blacklist Ansible 1.9.6 51639e8 Add reno scaffolding for release notes management 8a60b53 Remove nova mentions from tasks and tags Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 + .gitreview | 1 + README.rst | 38 +-- Vagrantfile | 24 ++ bindep.txt | 41 +++ defaults/main.yml | 66 ++++- examples/playbook.yml | 7 + manual-test.rc | 33 +++ meta/main.yml | 10 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...figurable_inventory_group-9f5b193221b7006d.yaml | 7 + ...ate-rabbitmq_apt_packages-b85ea1b449dc136e.yaml | 5 + .../hipe-compile-option-c100e8676a806950.yaml | 7 + .../notes/package-state-bb93a1d4b272425d.yaml | 13 + .../notes/policy-override-522df5699f09c417.yaml | 6 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install_apt.yml | 51 ++++ tasks/install_yum.yml | 43 ++++ tasks/main.yml | 24 ++ tasks/rabbitmq_cluster.yml | 8 +- tasks/rabbitmq_install.yml | 54 +--- tasks/rabbitmq_post_install.yml | 56 +++- tasks/rabbitmq_pre_install.yml | 17 +- tasks/rabbitmq_set_cookie.yml | 2 + tasks/rabbitmq_ssl_key_distribute.yml | 4 +- tasks/rabbitmq_ssl_key_store.yml | 5 +- tasks/rabbitmq_ssl_self_signed.yml | 9 +- tasks/rabbitmq_ssl_user_provided.yml | 25 +- tasks/rabbitmq_started.yml | 6 +- tasks/rabbitmq_stopped.yml | 4 +- tasks/rabbitmq_upgrade_check.yml | 43 +++- tasks/rabbitmq_upgrade_prep.yml | 2 +- templates/limits.conf.j2 | 4 + templates/rabbitmq.config.j2 | 9 +- test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 25 ++ vars/redhat.yml | 25 ++ 62 files changed, 1307 insertions(+), 516 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_swift 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are satisfied to announce the release of: openstack-ansible-os_swift 14.0.0: os_swift for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_swift role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "swift_package_state" to "present". * The "fallocate_reserve` option can now be set (in bytes or as a percentage) for swift by using the ``swift_fallocate_reserve" variable in "/etc/openstack_deploy/user_variables.yml". This value is the amount of space to reserve on a disk to prevent a situation where swift is unable to remove objects due to a lack of available disk space to work with. The default value is 1% of the total disk size. * The "openstack-ansible-os_swift" role will now prevent deployers from changing the "swift_hash_path_prefix" and "swift_hash_path_suffix" variables on clusters that already have a value set in "/etc/swift/swift.conf". You can set the new "swift_force_change_hashes" variable to "True" to force the "swift_hash_path_" variables to be changed. We recommend setting this by running the os-swift.yml playbook with "-e swift_force_change_hashes=True", to avoid changing the "swift_hash_path_" variables unintentionally. Use with caution, changing the "swift_hash_path_" values causes end-user impact. * The "os_swift" role has 3 new variables that will allow a deployer to change the hard, soft and fs.file-max limits. the hard and soft limits are being added to the limits.conf file for the swift system user. The fs.file-max settings are added to storage hosts via kernel tuning. The new options are "swift_hard_open_file_limits" with a default of 10240 "swift_soft_open_file_limits" with a default of 4096 "swift_max_file_limits" with a default of 24 times the value of "swift_hard_open_file_limits". * The "pretend_min_part_hours_passed" option can now be passed to swift-ring-builder prior to performing a rebalance. This is set by the "swift_pretend_min_part_hours_passed" boolean variable. The default for this variable is False. We recommend setting this by running the os-swift.yml playbook with "-e swift_pretend_min_part_hours_passed=True", to avoid resetting "min_part_hours" unintentionally on every run. Setting "swift_pretend_min_part_hours_passed" to True will reset the clock on the last time a rebalance happened, thus circumventing the min_part_hours check. This should only be used with extreme caution. If you run this command and deploy rebalanced rings before a replication pass completes, you may introduce unavailability in your cluster. This has an end-user imapct. * While default python interpreter for swift is cpython, pypy is now an option. This change adds the ability to greatly improve swift performance without the core code modifications. These changes have been implemented using the documentation provided by Intel and Swiftstack. Notes about the performance increase can be seen here (https://software.intel.com/en-us/blogs/2016/05/06/doubling-the- performance-of-openstack-swift-with-no-code-changes). * Change the port for devices in the ring by adjusting the port value for services, hosts, or devices. This will not involve a rebalance of the ring. * Changing the port for a device, or group of devices, carries a brief period of downtime to the swift storage services for those devices. The devices will be unavailable during period between when the storage service restarts after the port update, and the ring updates to match the new port. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. * The "os_swift" role will now include the swift "staticweb" middleware by default. * The os_swift role now allows the permissions for the log files created by the swift account, container and object servers to be set. The variable is "swift_syslog_log_perms" and is set to "0644" by default. Upgrade Notes ************* * Installation of swift and its dependent pip packages will now only occur within a Python virtual environment. The "swift_venv_enabled", "swift_venv_bin" variables have been removed. * The variable "swift_apt_packages" has been renamed to "swift_distro_packages". * The os_swift role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "swift_package_state" should be set to "present". * The "swift_fallocate_reserve" default value has changed from 10737418240 (10GB) to 1% in order to match the OpenStack swift default setting. * A new option *swift_pypy_enabled* has been added to enable or disable the pypy interpreter for swift. The default is "false". * A new option *swift_pypy_archive* has been added to allow a pre- built pypy archive to be downloaded and moved into place to support swift running under pypy. This option is a dictionary and contains the URL and SHA256 as keys. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. * When upgrading a Swift deployment from Mitaka to Newton it should be noted that the enabled middleware list has changed. In Newton the "staticweb" middleware will be loaded by default. While the change adds a feature it is non-disruptive in upgrades. Bug Fixes ********* * Previously, the "ansible_managed" var was being used to insert a header into the "swift.conf" that contained date/time information. This meant that swift.conf across different nodes did not have the same MD5SUM, causing "swift-recon --md5" to break. We now insert a piece of static text instead to resolve this issue. * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. Changes in openstack-ansible-os_swift 13.0.0..14.0.0 ---------------------------------------------------- 0e7a7a3 Always setup ResellerAdmin role in keystone 9c7c821 Use dictionary for service mappings 0acc370 Update tox.ini tests target for stable/newton c7c2b44 Update ansible-role-requirements to stable/newton 3893207 Update default git branch to stable/newton 27e8a5c Test address setting code paths c3e89df Use centralised test scripts 097eefb Update UPPER_CONSTRAINTS_FILE for stable/newton bc551d3 Update .gitreview for stable/newton 2a3b184 Fix bool evaluation for dedicated repl network ba28ffd Fix variable for replicator config options 768b47a Force Ansible to use dynamic includes a894972 Type min_part_hours,part_power,repl_number as int 9578aa5 Ensure storage/replication_ip are uniform df4d7ec Simplify networking for MR swift 2257044 Use openstack-ansible-tests repository for Swift 98cb749 Store dedicated replication conditions in var 4ea2993 Fix typo in ceilometer ignore_projects filter 05d6c6f Lookup Gnocchi service before proxy is configured 620edb7 Require lookup of Gnocchi identity when needed 0737337 Add "ansible_host" to each host 10d3ee9 Add check for swift_hash_path_ variables 7adb8b2 Fix missing newline in ceilometermiddleware config 1690a5d Compress test execution logs 1d55c37 Filter Gnocchi traffic optionally 80d2d96 Add Multi Region Swift gate scenario 750ccaa Refactor and improve swift-rings.py 599232a Point auditor service at the replicator config 71122a3 Namespace the telemetry vars for swift 702026d remove the path from the auth_url be77d23 Fix gate replication_network setting e31bec0 Rename package lists (and related vars) appropriately 43a6244 Enable log collection after functional testing aad88fd Make all linting tests use upper-constraints a9d1b9e Remove apt update from Vagrantfile b85cd52 Add SNI support via OS packages for os_swift 6fb5535 Updated from global requirements 49a472e Remove requirements.txt install for testing 388a831 Cleanup/standardize usage of tags eca8876 Add python packages for SNI support in tests d3305e4 Relocate Swift configuration docs to os_swift role 17da038 Move other-requirements.txt to bindep.txt 0b5919e Include ansible commands for ansible linting c926f33 Add pypy test Scenario for Swift 10b0fc1 Disable stderr logging dcb2a2a Properly default pretend_min_part_hours_passed 8256654 Allow swift log file permissions to be set 85a657d Add project group to role ae8ca49 Add package requirements for encryption 9790f9e Add ability to change apt/yum package state c9ea779 Ensure that mode is a string 99bfe27 Fixed simple performance issue and deprecations cce137c Ensure that doc linting is included in the linters test 5afbf0c Define region name. 850b60a Remove openstack_hosts from test requirements b51eb2a Optimise pip install tasks 582175d Support service-specific rabbitmq clusters 6753152 Use plugins repo version of the human_log callback plugin a7fb587 Updated from global requirements da2cd24 Remove duplicates from .gitignore 5e3a46a Implement doc8 checks for docs cce0410 Add pretend_min_part_hours_passed to ring build 5f9c83a Update sphinx configuration 022b62f Add options for configuring file limits in swift 5140ede Address Ansible bare variable usage efd2960 Update tox configuration eb04bf1 Refactor Swift ring build & check tasks 9d30bb3 Only install to virtual environment 7657961 Fix ansible-lint complaint about directory permissions 2ba929f Fix swift ring distribute 203743e add bool to var: swift_ceilometer_enabled d0c001c Implement Xenial Support bb17313 Updated swift + pypy 288500c Skip unavailable hosts when distributing keys 5a39413 Clean up container cache prep in tasks d142d36 Pin test-requirements to match OpenStack requirements 2dc3514 Make ansible managed line in swift.conf static 1dcc63d Adding missing / to swift rabbit connection string 6169255 Remove pip_lock_down dependency 9380862 Consistency for multi-os in the includes 38b510c Add staticweb to the default middleware list 69759b2 Updating os_swift to use the Multi-Distro framework daeea3c Set functional-test directory based on var 97a5b6d Verbose option has been deprecated from oslo.log 60b7b83 Enable pypy to be used with swift 53027de Setup rsync module per object server drive 292c443 Set fallocate_reserve to match upstream default be739c5 Refactor os_swift testing 03a5640 Add .swp files to .gitignore cf882fe Change pip install task state to 'latest' 167bf69 Add dependencies for paramiko 2.0 db4ad90 Remove XFS filesystem from the daily mlocate cron job 2c9e0d2 Add fucntional tests for swift c749241 Remove Liberty releasenote index 1a12be6 blacklist Ansible 1.9.6 81aecda Expose and set a default fallocate_reserve value e53ac82 Resolve issues with swift tests fd3aeae Add reno scaffolding for release notes management 0b43cdf Switch defaults/tests to use master branch 462d526 Add ceilometer middleware when ceilometer enabled 1e15882 Clean up deprecation warning in swift proxy 486adbe Include reseller admin role correctly cc81926 Adding Vagrantfile for local developer testing Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + CONTRIBUTING.rst | 49 ++- README.rst | 25 +- Vagrantfile | 8 + bindep.txt | 41 +++ defaults/main.yml | 233 +++++++++----- examples/playbook.yml | 8 + handlers/main.yml | 55 +--- manual-test.rc | 33 ++ meta/main.yml | 11 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-e285a643a39f0438.yaml | 4 + ...s_swift-only-install-venv-fdd5d41759433cf8.yaml | 5 + ...package-list-name-changes-e6f88d12f3bd9fa0.yaml | 4 + .../notes/package-state-f2309b07440d0ae8.yaml | 13 + .../notes/swift-conf-b8dd5e1199f8e4a8.yaml | 9 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 11 + .../swift-force-hash-change-45b09eeb8b0368a6.yaml | 14 + .../swift-fs-file-limits-a57ab8b4c3c944e4.yaml | 11 + .../swift-pretend-mph-passed-7e5c15eeb35861c3.yaml | 17 ++ .../notes/swift-pypy-support-9706519c4b88a571.yaml | 15 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + .../swift-rings-port-change-4a95bbd9b63fb201.yaml | 11 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + .../swift-staticweb-support-b280fbebf271820b.yaml | 9 + .../swift-syslog-log-perms-5a116171a1adeae3.yaml | 6 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.py | 11 +- tasks/install-apt.yml | 37 +++ tasks/main.yml | 104 +++++-- tasks/swift_calculate_addresses.yml | 131 ++++++++ tasks/swift_check_hashes.yml | 55 ++++ tasks/swift_command_check.yml | 30 -- tasks/swift_init_common.yml | 33 ++ tasks/swift_init_systemd.yml | 56 ++++ tasks/swift_init_upstart.yml | 26 ++ tasks/swift_install.yml | 162 ++-------- tasks/swift_key_distribute.yml | 9 +- tasks/swift_key_populate.yml | 6 - tasks/swift_key_setup.yml | 7 - tasks/swift_post_install.yml | 39 +-- tasks/swift_pre_install.yml | 53 ++-- tasks/swift_proxy_hosts.yml | 38 ++- tasks/swift_pypy_setup.yml | 74 +++++ tasks/swift_rings.yml | 9 +- tasks/swift_rings_build.yml | 50 +-- tasks/swift_rings_check.yml | 16 +- tasks/swift_rings_distribute.yml | 28 +- tasks/swift_rings_md5sum.yml | 4 - tasks/swift_rings_post_distribution_check.yml | 50 +-- tasks/swift_service_setup.yml | 32 +- tasks/swift_storage_hosts_account.yml | 78 +---- tasks/swift_storage_hosts_container.yml | 102 +------ tasks/swift_storage_hosts_object.yml | 93 +----- tasks/swift_storage_hosts_setup.yml | 24 +- tasks/swift_sync_post_install.yml | 21 +- tasks/swift_upstart_common_init.yml | 44 --- templates/account-server-replicator.conf.j2 | 8 +- templates/account-server.conf.j2 | 9 +- templates/container-reconciler.conf.j2 | 2 + templates/container-server-replicator.conf.j2 | 8 +- templates/container-server.conf.j2 | 13 +- templates/mlocate-crond-daily.sh.j2 | 21 ++ templates/object-expirer.conf.j2 | 2 + templates/object-server-replicator.conf.j2 | 11 +- templates/object-server.conf.j2 | 16 +- templates/proxy-server.conf.j2 | 26 +- templates/ring.contents.j2 | 39 +-- templates/rsyncd.conf.j2 | 38 +++ templates/swift-dispersion.conf.j2 | 1 + templates/swift-rsyslog.conf.j2 | 2 + templates/swift-systemd-init.j2 | 24 ++ templates/swift-systemd-tempfiles.j2 | 4 + templates/swift-upstart-init.j2 | 31 +- templates/swift.conf.j2 | 2 +- templates/swift_rings.py.j2 | 74 ++--- templates/swift_rings_check.py.j2 | 25 +- test-requirements.txt | 19 +- tox.ini | 236 ++++++++++----- vars/debian.yml | 28 ++ 120 files changed, 3537 insertions(+), 1510 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_neutron 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_neutron 14.0.0: os_neutron role for OpenStack- Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_neutron" role now determines the default configuration for openvswitch-agent "tunnel_types" and the presence or absence of "local_ip" configuration based on the value of "neutron_ml2_drivers_type". Deployers may directly control this configuration by overriding the "neutron_tunnel_types" variable . * The "os_neutron" role now configures neutron ml2 to load the "l2_population" mechanism driver by default based on the value of "neutron_l2_population". Deployers may directly control the neutron ml2 mechanism drivers list by overriding the "mechanisms" variable in the "neutron_plugins" dictionary. * The LBaaSv2 service provider configuration can now be adjusted with the "neutron_lbaasv2_service_provider" variable. This allows a deployer to choose to deploy LBaaSv2 with Octavia in a future version. * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Neutron BGP dynamic routing plugin can now optionally be deployed and configured. Please see OpenStack Networking Guide: BGP dynamic routing (http://docs.openstack.org/networking-guide/config-bgp- dynamic-routing.html) for details about what the service is and what it provides. * The Project Calico Neutron networking plugin is now integrated into the "os_neutron" role. This can be activated using the instructions located in the role documentation. * The "os_neutron" role will now default to the OVS firewall driver when "neutron_plugin_type" is "ml2.ovs" and the host is running Ubuntu 16.04 on PowerVM. To override this default behavior, deployers should define "neutron_ml2_conf_ini_overrides" and 'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example below neutron_ml2_conf_ini_overrides: securitygroup: firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver neutron_openvswitch_agent_ini_overrides: securitygroup: firewall_driver: iptables_hybrid * Neutron VPN as a Service (VPNaaS) can now optionally be deployed and configured. Please see the OpenStack Networking Guide (http://docs.openstack.org/mitaka/networking-guide/) for details about the what the service is and what it provides. See the VPNaaS Install Guide (http://docs.openstack.org/developer/openstack-ansible /install-guide/configure-network-services.html#virtual-private- network-service-optional) for implementation details. * Support for Neutron distributed virtual routing has been added to the "os_neutron" role. This includes the implementation of Networking Guide's suggested agent configuration. This feature may be activated by setting "neutron_plugin_type: ml2.ovs.dvr" in "/etc/openstack_deploy/user_variables.yml". * Open vSwitch driver support has been implemented. This includes the implementation of the appropriate Neutron configuration and package installation. This feature may be activated by setting "neutron_plugin_type: ml2.ovs" in "/etc/openstack_deploy/user_variables.yml". * The os_neutron role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "neutron_package_state" to "present". * The LBaaSv2 device driver is now set by the Ansible variable "neutron_lbaasv2_device_driver". The default is set to use the "HaproxyNSDriver", which allows for agent-based load balancers. * A new variable is supported in the "neutron_services" dictionary called "service_conf_path". This variable enables services to deploy their config templates to paths outside of /etc/neutron by specifying a directory using the new variable. Upgrade Notes ************* * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Database migration tasks have been added for the dynamic routing neutron plugin. * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * The variable "neutron_agent_mode" has been removed from the "os_neutron" role. The appropriate value for "l3_agent.ini" is now determined based on the "neutron_plugin_type" and host group membership. * The variable "neutron_linuxbridge" has been removed as it is no longer used. * The variable "neutron_driver_interface" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_driver_firewall" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_ml2_mechanism_drivers" has been removed. The appropriate value for ml2_conf.ini is now determined based on the "neutron_plugin_type". * The Neutron L3 Agent configuration for the handle_internal_only_routers variable is removed in order to use the Neutron upstream default setting. The current default for handle_internal_only_routers is True, which does allow Neutron L3 router without external networks attached (as discussed per https://bugs.launchpad.net/neutron/+bug/1572390) * Installation of neutron and its dependent pip packages will now only occur within a Python virtual environment. The "neutron_venv_enabled", "neutron_venv_bin", "neutron_non_venv_lib_dir" and "neutron_venv_lib_dir" variables have been removed. * The variable "neutron_apt_packages" has been renamed to "neutron_distro_packages". * The variable "neutron_lbaas_apt_packages" has been renamed to "neutron_lbaas_distro_packages". * The variable "neutron_vpnaas_apt_packages" has been renamed to "neutron_vpnaas_distro_packages". * The variable "neutron_apt_remove_packages" has been renamed to "neutron_remove_distro_packages". * The os_neutron role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "neutron_package_state" should be set to "present". * LBaaSv1 has been removed from the "neutron-lbaas" project in the Newton release and it has been removed from OpenStack-Ansible as well. * The database create and user creates have been removed from the "os_neutron" role. These tasks have been relocated to the playbooks. * The Neutron HA tool written by AT&T is no longer enabled by default. This tool was providing HA capabilities for networks and routers that were not using the native Neutron L3HA. Because native Neutron L3HA is stable, compatible with the Linux Bridge Agent, and is a better means of enabling HA within a deployment this tool is no longer being setup by default. If legacy L3HA is needed within a deployment the deployer can set *neutron_legacy_ha_tool_enabled* to **true** to enable the legacy tooling. * Neutron now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "neutron_uca_enable" to "False". Deprecation Notes ***************** * The Neutron HA tool written by AT&T has been deprecated and will be removed in the Ocata release. Bug Fixes ********* * When upgrading it is possible for an old "neutron-ns-metadata- proxy" process to remain running in memory. If this happens the old version of the process can cause unexpected issues in a production environment. To fix this a task has been added to the os_neutron role that will execute a process lookup and kill any "neutron-ns- metadata-proxy" processes that are not running the current release tag. Once the old processes are removed the metadata agent running will respawn everything needed within 60 seconds. Changes in openstack-ansible-os_neutron 13.0.0..14.0.0 ------------------------------------------------------ 9852008 Remove 'ignore_errors: true' in favor of 'failed_when: false' 259423e Set calico wheel name for py_pkgs lookup a9aeb12 Calico is now Felix... who knew?! 8cc4b94 Update tox.ini tests target for stable/newton 81a1613 Revert dynamic include for inventory-based conditionals b16c56a Fix dhcp-agent-list-hosting-net race condition 9588492 Update UPPER_CONSTRAINTS_FILE for stable/newton 4f8d226 Update ansible-role-requirements to stable/newton 2fbe6e7 Fix race condition on starting services e45f77a Use centralised test scripts 3562b0c Update default git branch to stable/newton be35547 Add conditional around the pid clean up process 2848049 Update .gitreview for stable/newton 58bf83c Use openstack-ansible-tests and ansible 2.1.1 370989b Force Ansible to use dynamic includes f6457c3 Update paste, policy and rootwrap configurations 2016-09-20 8bd11ef Update home page link in cfg file f95ff25 Use common log commands for calico tox config 74f2f98 Update paste, policy and rootwrap configurations 2016-09-16 090ab22 Wait for net to be fully instantiated 085713a Add functional testing for Calico 7fdd2a2 Add container logs to the build 4843684 Remove Calico qemu configuration b88e2de Update paste, policy and rootwrap configurations 2016-09-08 3a8b9ff Ensure the nets, subnets and ports are present 52b66dd Compress test execution logs baf636e [DOC] Fix the OVS config file in docs 760dab2 [Docs] Update LBaaSv2 docs for horizon 91a5eff Update paste, policy and rootwrap configurations 2016-08-25 72eea60 Rename package lists (and related vars) appropriately 132402f Enable log collection after functional testing ea0b035 Open vSwitch documentation in Neutron Role 03993a6 Rename remaining references to the neutron_lbaasv2_agent group f9975ac Add the BGP dynamic routing neutron plugin a0b5c6b Project Calico integration b94bd9a Update plumgrid plugin installation from pip to deb ed0836f Make all linting tests use upper-constraints 0c7fad3 Add SNI support via OS packages for os_neutron 8f9b32e [DOCS] Moving networking content to neutron role docs 0db3471 Updated from global requirements 5772632 [DOCS] Add links to README; minor restructure ba878cc Add python packages for SNI support in tests 92bc3ba Move other-requirements.txt to bindep.txt b1674b6 [DOCS] Move over the Neutron Plugins docs 1b8ad7b Update paste, policy and rootwrap configurations 2016-08-15 31a0386 Revert "Add missing packages required for online DB migrations" 4e5dc52 Add missing packages required for online DB migrations 5250cd4 Consolidate Neutron config path in to a single var e604e86 Include ansible commands for ansible linting 67bd7bb Ignore the .vagrant directory f9d40a5 Allow Neutron services to specify config path f02f040 Fix oslo messaging deprecation a597bf0 Disable stderr logging a3a7992 Add project group to role a8f6cf9 Add ability to change apt/yum package state 2b305ed Ensure that mode is a string 5bbf93c Fix ansible performance issue e70cd91 Fix bug in RPC config that broke Rabbit SSL support b86d292 Configure qos extension in openvswitch_agent.ini a70051a Ensure that doc linting is included in the linters test a867d0e Provide default for rabbitmq telemetry password 5b44c5b Make LBaaSv2 service_provider configurable dd64d9e Reduce tox.ini config duplication 1ecde3e Allow configuration of multiple rabbit clusters 13b41a3 Remove LBaaSv1 461788f Enable higher performance I/O through 0bc2e4f Define keystone region name. eb0bb51 Adding func_ovs tox environment for neutron ovs testing ec9d44a Optimise pip install tasks 0bdaa8c Support for Open vSwitch Distributed Virtual Routing 1240dd0 Move UCA repo URL var to role defaults 30899b8 Fix handler case where no old process is found d599df2 Use plugins repo version of the human_log callback plugin 4d26e4a Check host group_names for group membership 7a3bb12 Updated from global requirements 813fe65 Remove duplicates from .gitignore 46474f2 Update paste, policy and rootwrap configurations 2016-07-14 667f746 Remove duplicate task for sudoers template c24f01f Implement doc8 checks for docs 7c275ee Update sphinx configuration 744270e Cleanup/standardize usage of tags 4918c7f Deprecate the deployment of the AT&T neutron HA tool 9a34f27 Remove static log-file parameter from init c2f9590 Rely on namespaced vars for rabbitmq 163a8ea Update the virtualenv paths only when we have a new venv c447d00 Switch to backticks in release note 0b87211 Use UCA for non-OVS neutron c357ce1 Update tox configuration e5a67a7 Only install to virtual environment 86fc72b Cleanup metadata-proxy when old versions are present 0035646 Fix ansible-lint complaint about directory permissions 1708097 Remove service_group entry from all neutron_services dicts f9267ff Remove neutron_overlay_network var from os_neutron role 9dc2f14 Remove is_metal var from os_neutron role 4575b8e Removed unused variable 1f29cdc Implement standardised Ubuntu Cloud Archive repo vars 18a9491 Clarify the default for neutron_vxlan_group 3344d75 Add missing xenial to meta.yml 30439c2 Dynamic Neutron OVS agent tunnel_types and local_ip config a34729a Adding Vagrantfile for local development/testing a246b5c Configure ml2 firewall driver "iptables_hybrid" for OVS 38f5ea9 Fix executor_thread_pool_size typo e349ad0 Remove enable_tunneling config from openvswitch_agent.ini 147c7f0 Correct Openvswitch bridge_mappings configuration 387c46e Clean up container cache prep in tests f35213b Pin test-requirements to match OpenStack requirements b3fa6b4 Address Ansible bare variable usage 357e543 Use default metadata_backlog value from Neutron 063824e Remove pip_lock_down dependency e572680 Add metadata checksum fix for AIO-type networks configs 3794674 Updated multi-distro setup for isolation 9654663 Update paste, policy and rootwrap configurations 2016-06-02 dcb0fff Consistency for multi-os in the includes 8e461be Neutron 16.04 support 0795d6d Update plumlib template to support python-keystoneclient v1.7.0 and above cf5a0f2 Remove unnecessary overrides of service variables 68ea882 Update classpath for FWaaS driver 7bb0a5a Update paste, policy and rootwrap configurations 2016-05-19 c44b0b1 More MTU cleanups for Neutron 2629d0b Updated role using the Multi-Distro framework e3e2f63 Verbose option has been deprecated from oslo.log 273cef6 Stop configuring neutron to enforce DHCP MTU option 656a976 Implementing neutron_openvswitch_agent 34ed097 Removed the db create tasks 1e397c3 Remove task to cleanup checksum rules script 018d336 Add .swp files to .gitignore 5ce4d64 Change pip install task state to 'latest' 7ffbc5a Remove py_from_git role c15dcba Use upstream neutron default for handle_internal_only_routers d13c448 Add dependencies for paramiko 2.0 9a3022d Missing init script of VPNaaS d9477c5 Update paste, policy and rootwrap configurations 2016-04-22 61e6192 Ansible 2.x - Address deprecation warning of bare variables f7a7e14 removed duplicate key 218563e Remove Liberty releasenote index a277ebd Update os_neutron to handle newton migrations e4ba265 Correct Neutron VPNaaS service_provider config entry 56cff84 Dynamically determine whether Neutron Agents should be enabled 94994ef Add options to auto enable VPNaaS 8416a65 blacklist Ansible 1.9.6 239f58d Fix missing 'qos' in extension drivers 0203066 Fix neutron lbaasv2 upstart init scrtipt placement b28687f Update min_ansible_version to 1.9 8a9719d Add reno scaffolding for release notes management 759d043 Nuage neutron plugin ansible changes 7b7820f Update paste, policy and rootwrap configurations 2016-04-03 3bc4de9 Switch defaults/tests to use master branch 30bc02a Neutron test cleanup 4eee5af Remove iptables checksum rule script Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 + .gitreview | 1 + README.rst | 25 +- Vagrantfile | 31 ++ bindep.txt | 41 +++ defaults/main.yml | 333 ++++++++++++++------- examples/playbook.yml | 7 + files/post-up-checksum-rules | 42 --- files/post-up-metadata-checksum | 37 +++ files/rootwrap.d/dhcp.filters | 1 + files/rootwrap.d/functional-testing.filters | 35 --- files/rootwrap.d/linuxbridge-plugin.filters | 7 +- files/rootwrap.d/vpnaas.filters | 2 + handlers/main.yml | 22 +- library/neutron_migrations_facts | 19 +- manual-test.rc | 33 ++ meta/main.yml | 17 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml | 12 + ...2-service-provider-config-57d394bdc64f632e.yaml | 5 + .../metadata-proxy-cleanup-eed6ff482035dc83.yaml | 10 + ...tron-agent-dynamic-enable-47f0c709ef0dfe55.yaml | 15 + .../notes/neutron-bgp-552e6e1f6d37f38d.yaml | 9 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + ...neutron-networking-calico-b05b08f989f768ee.yaml | 5 + .../neutron-ovs-powervm-116662f169e17175.yaml | 18 ++ .../notes/neutron-vpnaas-5c7c6508f2cc05c5.yaml | 8 + .../notes/neutron_ovs_dvr-7fca77cac0545441.yaml | 11 + .../openvswitch-support-1b71ae52dde81403.yaml | 14 + ...dle_internal_only_routers-e46092d6f1f7c4b0.yaml | 7 + ...neutron-only-install-venv-ca3bf63ed0507e4b.yaml | 6 + ...package-list-name-changes-a86f7e7c805c2d81.yaml | 10 + .../notes/package-state-fb7d26a4b7c41a77.yaml | 13 + .../notes/remove-lbaasv1-26044c48b5d3b508.yaml | 8 + .../removed-db-create-tasks-eed527e915f23ee0.yaml | 5 + .../removed-neutron-ha-tool-dd7a4717e03163f9.yaml | 13 + .../notes/service-conf-path-b27cab31dbc72ad4.yaml | 6 + .../notes/use-uca-by-default-070751b0b388fcbe.yaml | 4 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/calico_config.yml | 47 +++ tasks/calico_init.yml | 42 +++ tasks/main.yml | 92 +++++- tasks/neutron_check.yml | 23 -- tasks/neutron_db_setup.yml | 69 +---- tasks/neutron_init.yml | 134 +++++++++ tasks/neutron_init_common.yml | 27 ++ tasks/neutron_init_systemd.yml | 53 ++++ tasks/neutron_init_upstart.yml | 28 ++ tasks/neutron_install-apt.yml | 114 +++++++ tasks/neutron_install.yml | 163 ++-------- tasks/neutron_l3_ha.yml | 20 -- tasks/neutron_lbaas.yml | 49 --- tasks/neutron_ml2_ovs_powervm.yml | 26 ++ tasks/neutron_post_install.yml | 121 +++----- tasks/neutron_pre_install.yml | 34 +-- tasks/neutron_service_add.yml | 107 ------- tasks/neutron_service_setup.yml | 86 +++++- tasks/neutron_upstart_common_init.yml | 46 --- tasks/neutron_upstart_init.yml | 126 -------- tasks/nuage_neutron_config.yml | 24 ++ tasks/plumgrid_config.yml | 91 ++---- templates/api-paste.ini.j2 | 10 +- templates/bgp_dragent.ini.j2 | 9 + templates/dhcp_agent.ini.j2 | 5 +- templates/felix.cfg.j2 | 4 + templates/l3_agent.ini.j2 | 7 +- templates/lbaas_agent.ini.j2 | 15 +- templates/metadata_agent.ini.j2 | 1 - templates/metering_agent.ini.j2 | 3 +- templates/neutron-ha-tool.py.j2 | 2 +- templates/neutron-systemd-init.j2 | 25 ++ templates/neutron-systemd-tempfiles.j2 | 4 + templates/neutron-upstart-init.j2 | 8 +- templates/neutron.conf.j2 | 61 ++-- templates/plugins/ml2/linuxbridge_agent.ini.j2 | 4 +- templates/plugins/ml2/ml2_conf.ini.j2 | 13 +- templates/plugins/ml2/openvswitch_agent.ini.j2 | 23 ++ templates/plugins/nuage/nuage.ini.j2 | 19 ++ templates/plugins/plumgrid/plumlib.ini | 5 +- templates/policy.json.j2 | 66 ++-- templates/rootwrap.conf.j2 | 2 +- templates/vpnaas_agent.ini.j2 | 9 + test-requirements.txt | 19 +- tox.ini | 197 +++++++----- vars/ubuntu-14.04.yml | 54 ++++ vars/ubuntu-16.04.yml | 52 ++++ 123 files changed, 3606 insertions(+), 1746 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-ironic 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are exuberant to announce the release of: openstack-ansible-ironic 14.0.0: Ironic Role for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-ironic/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "ironic" role now supports Ubuntu 16.04 and SystemD. * The os_ironic role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ironic_package_state" to "present". Upgrade Notes ************* * Installation of ironic and its dependent pip packages will now only occur within a Python virtual environment. The "ironic_venv_bin" and "ironic_venv_enabled" variables have been removed. * The variable "ironic_api_apt_packages" has been renamed to "ironic_api_distro_packages". * The variable "ironic_conductor_apt_packages" has been renamed to "ironic_conductor_distro_packages". * The variable "ironic_conductor_standalone_apt_packages" has been renamed to "ironic_conductor_standalone_distro_packages". * The os_ironic role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ironic_package_state" should be set to "present". Changes in openstack-ansible-ironic 13.0.0..14.0.0 -------------------------------------------------- 235754a Remove 'ignore_errors: true' in favor of 'failed_when: false' 5493e4f Move to non stand-alone ironic 3d39b1c Update tox.ini tests target for stable/newton 78c9ae5 Update ansible-role-requirements to stable/newton 95d0480 Update default git branch to stable/newton ae36c7d Turn on debug output from IPA by default ba3a7a5 Use centralised test scripts e6d2fbd Update UPPER_CONSTRAINTS_FILE for stable/newton 362f0d9 Update .gitreview for stable/newton b0fa2aa Revert dynamic includes for inventory-based conditionals 7ad3392 Update paste, policy and rootwrap configurations 2016-09-23 b857429 Force Ansible to use dynamic includes a6b6f3d Update rootwrap filter copy for easier maintenance f24f266 os_ironic mysql password variable not updated 5ee8b16 Ansible 2.1.1 role testing 8cf2501 Compress test execution logs 581ce20 Rename package lists (and related vars) appropriately 794974c Enable log collection after functional testing 9e8d2e2 Add SNI support to ironic role via OS packages ca416a4 [DOCS] Syntax updates to the docs d9e9eed Make all linting tests use upper-constraints d18c5d9 Add apt-get update to run_tests 5fc7c53 Updated from global requirements 4cbd207 Add python packages for SNI support in tests ed37a1b Update paste, policy and rootwrap configurations 2016-08-15 c541ffe Move other-requirements.txt to bindep.txt 92aacee Cleanup/standardize usage of tags d96baff [DOCS] Move ironic docs to roles bc2da2a Include ansible commands for ansible linting e8b360f Disable stderr logging 1d60329 Add project group to role 2a28918 Add ability to change apt/yum package state c88ecfa Fix ansible performance issue 3f96ca8 Ensure that doc linting is included in the linters test f75d719 Define keystone region name. 6de135b Remove openstack_hosts from test requirements 3a6717a Optimise pip install tasks ebbc044 Support service-specific rabbitmq clusters 515bed2 Use plugins repo version of the human_log callback plugin c976a15 Updated from global requirements 46f1e9e Implement doc8 checks for docs ad97cae Update sphinx configuration e3004cc Only install to virtual environment ff280f7 Update tox configuration 8b3f346 Fix ansible-lint complaint about directory permissions 2b7f402 Clean up container cache prep in tests b0b43ce Pin test-requirements to match OpenStack requirements f736ebb Remove pip_lock_down dependency a22c7d6 Update .gitreview for project rename 1e51088 Add 16.04 support 3113ef6 Fix Ironic gating 46f7a95 Add .swp files to .gitignore 7823efb Change pip install task state to 'latest' 9594c66 Remove py_from_git role c42d884 Add dependencies for paramiko 2.0 fa0234c Remove Liberty releasenote index b32b092 Ansible 2.x - Address deprecation warning of bare variables 26a603f Changed the swift storage URL retrieval command 9b268e9 Switch defaults/tests to use master branch e3d39b7 blacklist Ansible 1.9.6 Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 4 +- CONTRIBUTING.rst | 76 ++++--- README.rst | 15 +- Vagrantfile | 12 ++ bindep.txt | 41 ++++ defaults/main.yml | 53 ++--- examples/playbook.yml | 5 + files/rootwrap.d/ironic-lib.filters | 2 + handlers/main.yml | 2 +- local_install.sh | 2 +- manual-test.rc | 33 +++ meta/main.yml | 10 +- other-requirements.txt | 16 -- .../ironic-1604-support-b9ebb12ee4d78275.yaml | 3 + ...-ironic-only-install-venv-0da32fc36bfeae2b.yaml | 5 + ...package-list-name-changes-7c8a6dd652b271cf.yaml | 8 + .../notes/package-state-2e8e2eb4b24475c4.yaml | 13 ++ releasenotes/source/conf.py | 43 ++-- releasenotes/source/index.rst | 1 - releasenotes/source/liberty.rst | 6 - setup.cfg | 2 +- setup.py | 11 +- tasks/ironic_api_install.yml | 19 +- tasks/ironic_api_post_install.yml | 10 - tasks/ironic_conductor_install.yml | 40 ++-- tasks/ironic_conductor_post_install.yml | 16 +- tasks/ironic_db_setup.yml | 3 - tasks/ironic_init.yml | 23 ++ tasks/ironic_init_common.yml | 29 +++ tasks/ironic_init_systemd.yml | 53 +++++ tasks/ironic_init_upstart.yml | 32 +++ tasks/ironic_install.yml | 113 +++------- tasks/ironic_install_apt.yml | 34 +++ tasks/ironic_post_install.yml | 48 +---- tasks/ironic_pre_install.yml | 30 --- tasks/ironic_service_setup.yml | 16 -- tasks/ironic_upstart_common_init.yml | 46 ---- tasks/ironic_upstart_init.yml | 23 -- tasks/main.yml | 83 +++++-- templates/ironic-systemd-init.j2 | 25 +++ templates/ironic-systemd-tempfiles.j2 | 4 + templates/ironic-upstart-init.j2 | 4 +- templates/ironic-wsgi.py.j2 | 4 +- templates/ironic.conf.j2 | 10 +- templates/policy.json.j2 | 6 +- test-requirements.txt | 20 +- tox.ini | 164 ++++++++------ vars/ubuntu-14.04.yml | 42 ++++ vars/ubuntu-16.04.yml | 44 ++++ 73 files changed, 1572 insertions(+), 1170 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a7c89ef..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,3 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_glance 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jazzed to announce the release of: openstack-ansible-os_glance 14.0.0: os_glance for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "os_glance" role now supports Ubuntu 16.04 and SystemD. * CentOS7/RHEL support has been added to the os_glance role. * The os_glance role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "glance_package_state" to "present". Upgrade Notes ************* * The "glance_apt_packages" variable has been renamed to "glance_distro_packages" so that it applies to multiple operating systems. * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "glance_venv_bin", "glance_venv_enabled", "glance_venv_etc_dir", and "glance_non_venv_etc_dir" variables have been removed. * The variable "glance_apt_packages" has been renamed to "glance_distro_packages". * The os_glance role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "glance_package_state" should be set to "present". * The database create and user creates have been removed from the "os_glance" role. These tasks have been relocated to the playbooks. Changes in openstack-ansible-os_glance 13.0.0..14.0.0 ----------------------------------------------------- 46bb95d Use dictionary for service group mappings 4d725ac Remove 'ignore_errors: true' in favor of 'failed_when: false' 19554ff Update tox.ini tests target for stable/newton da00142 Update UPPER_CONSTRAINTS_FILE for stable/newton e1403a2 Update ansible-role-requirements to stable/newton c132db3 Update default git branch to stable/newton 5c000a5 Use centralised test scripts 9242f46 Update .gitreview for stable/newton 8e58d1a Revert dynamic includes for inventory-based conditionals 25e6d88 Revert dynamic includes for inventory-based conditionals 5974ede Force Ansible to use dynamic includes a6c27d7 Update homepage with developer documentation page 30aa5c1 Ansible 2.1.1 role testing ffacc20 Implement CentOS 7 support in os_glance 482a976 Compress test execution logs 7ee073d Fix os_glance role functional testing 66e8dc3 Rename package lists (and related vars) appropriately dac0c09 Enable log collection after functional testing faf311c Make all linting tests use upper-constraints 4606257 Added SNI support for os_glance package f6567be Remove apt update from Vagrantfile b59dcf5 Add apt-get update to run_tests 2635157 [DOCS] - Removing tags: and category: 4d4e3e6 Updated from global requirements 8b5bd16 Add python packages for SNI support in tests 12176ec [DOCS] Add project links; fix indents; wording 46483d1 Move other-requirements.txt to bindep.txt 25f8bf7 [DOCS] Move glance role docs cd42133 Include ansible commands for ansible linting 7f4c2ac Disable stderr logging 3075789 Add project group to role 57b7a3f Add ability to change apt/yum package state eff32c1 Ensure that mode is a string f3b3169 Fix ansible performance issue 3bc9562 Fix bug in RPC config that broke Rabbit SSL support 57c330f Ensure that doc linting is included in the linters test ef55a34 Provide default for rabbitmq telemetry password 679fac1 Remove openstack_hosts from test requirements 3188747 Allow configuration of multiple rabbit clusters bc860bf Define keystone region name. c61739d Optimise pip install tasks 2ad00bc Support service-specific rabbitmq clusters 7c96594 Use plugins repo version of the human_log callback plugin feeb70e Updated from global requirements 64be2b4 Remove duplicates from .gitignore 23d854a Update paste, policy and rootwrap configurations 2016-07-14 0da9bd3 Implement doc8 checks for docs 87e5442 Cleanup/standardize usage of tags d465552 Update sphinx configuration 1d851dc Fix notification_driver 374ace6 Update the virtualenv paths only when we have a new venv 2201cf8 Update tox configuration e03b37d Only install to virtual environment 03a1def Fix ansible-lint complaint about directory permissions c7027c1 Update paste, policy and rootwrap configurations 2016-06-17 b05dc73 Clean up container cache prep in tests 6203479 Pin test-requirements to match OpenStack requirements 3dabe29 Remove pip_lock_down dependency 28c573b Consistency for multi-os in the includes 24c3d70 Implement Ubuntu 16.04 support with SystemD 8d3334a Remove python-cephlibs 72ec082 Verbose option has been deprecated from oslo.log a5ed9f4 Removed the db create tasks 2aed857 Add .swp files to .gitignore fc63481 Change pip install task state to 'latest' 4076a83 Remove py_from_git role 1e3bed6 Add dependencies for paramiko 2.0 6964147 Ansible 2.x - Address deprecation warning of bare variables 55dd09a Remove Liberty releasenote index 3bc69fd blacklist Ansible 1.9.6 9c5c088 Update min_ansible_version to 1.9 b0b1002 Add reno scaffolding for release notes management 101d2ae Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 29 +-- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 67 +++-- examples/playbook.yml | 9 + handlers/main.yml | 28 +- manual-test.rc | 33 +++ meta/main.yml | 13 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 .../glance-1604-support-e65870170a925bfe.yaml | 3 + .../glance-packages-rename-abd348b0725e4b7b.yaml | 4 + ...-glance-only-install-venv-0271d3238c0d561c.yaml | 6 + ...os_glance-centos7-support-21cb81e361831c9f.yaml | 4 + ...package-list-name-changes-38f1554097b6bbe9.yaml | 4 + .../notes/package-state-646b25638f523411.yaml | 13 + .../removed-db-create-tasks-4560d4b960383c4e.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/glance_db_setup.yml | 34 --- tasks/glance_init_common.yml | 29 +++ tasks/glance_init_systemd.yml | 56 ++++ tasks/glance_init_upstart.yml | 26 ++ tasks/glance_install.yml | 116 ++------- tasks/glance_install_apt.yml | 4 +- tasks/glance_install_yum.yml | 24 ++ tasks/glance_post_install.yml | 37 +-- tasks/glance_pre_install.yml | 23 -- tasks/glance_service_setup.yml | 16 -- tasks/glance_upstart_common_init.yml | 46 ---- tasks/glance_upstart_init.yml | 30 --- tasks/main.yml | 39 ++- templates/glance-api-paste.ini.j2 | 19 +- templates/glance-api.conf.j2 | 22 +- templates/glance-cache.conf.j2 | 3 +- templates/glance-manage.conf.j2 | 3 +- templates/glance-registry.conf.j2 | 24 +- templates/glance-scrubber.conf.j2 | 3 +- templates/glance-systemd-init.j2 | 25 ++ templates/glance-systemd-tempfiles.j2 | 4 + templates/glance-upstart-init.j2 | 28 +- templates/policy.json.j2 | 2 +- test-requirements.txt | 19 +- tox.ini | 154 ++++++----- vars/redhat-7.yml | 21 ++ vars/ubuntu-14.04.yml | 4 +- vars/ubuntu-16.04.yml | 23 ++ 72 files changed, 1313 insertions(+), 946 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_aodh 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are enthusiastic to announce the release of: openstack-ansible-os_aodh 14.0.0: os_aodh for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The os_aodh role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "aodh_package_state" to "present". Upgrade Notes ************* * Installation of aodh and its dependent pip packages will now only occur within a Python virtual environment. The "aodh_venv_enabled" and "aodh_venv_bin" variables have been removed. * The variable "aodh_apt_packages" has been renamed to "aodh_distro_packages". * The os_aodh role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "aodh_package_state" should be set to "present". * The aodh-api init service is removed since aodh-api is deployed as an apache mod_wsgi service. * The Aodh data migration script should be run to migrate alarm data from MongoDB storage to Galera due to the pending removal of MongoDB support. Bug Fixes ********* * Aodh has deprecated support for NoSQL storage (MongoDB and Cassandra) in Mitaka with removal scheduled for the O* release. This causes warnings in the logs. The default of using MongoDB storage for Aodh is replaced with the use of Galera. Continued use of MongoDB will require the use of vars to specify a correct "aodh_connection_string" and add pymongo to the "aodh_pip_packages" list. Changes in openstack-ansible-os_aodh 13.0.0..14.0.0 --------------------------------------------------- 9f398e0 Remove 'ignore_errors: true' in favor of 'failed_when: false' 5c64fd0 Use dictionary for service group mappings dda7abd Update tox.ini tests target for stable/newton ff3a346 Update ansible-role-requirements to stable/newton 37d88bc Update default git branch to stable/newton 30f4658 Use centralised test scripts 4a37aca Update UPPER_CONSTRAINTS_FILE for stable/newton 987d696 Update .gitreview for stable/newton 5845161 Revert dynamic includes for inventory-based conditionals 260c8db Force Ansible to use dynamic includes f1e930d Update homepage with developer documentation page ed2ddcd Update testing bits for consistency 33b71ba Ansible 2.1.1 role testing f02ee50 Compress test execution logs 52b7dd4 Rename package lists (and related vars) appropriately 636a14d Enable log collection after functional testing 52df852 Work around Ansible vcpu fact bug on ppc64le a6fcaa9 Add SNI support via OS packages for os_aodh role 7d9061e Make all linting tests use upper-constraints 9940f7b Add apt-get update to run_tests 39a5500 Update extra required system packages for Centos bfc3fe0 [DOCS] - Removing tags: and category: 57137cb Updated from global requirements 9fce7bb [DOCS] - Remove overview from TOC f62a6ca Add python packages for SNI support in tests 8f95f03 [DOCS] - Adding doc comments to defaults file 67ac051 Remove aodh-api init setup 12da326 Move other-requirements.txt to bindep.txt fd4346e [DOCS] Move aodh configs from developer docs 3fe0992 Allow Aodh to use Gnocchi as a source for alarms 54919fe Update required system packages for Xenial eed6692 Include ansible commands for ansible linting b54031a Disable stderr logging 62bec21 Add project group to role 212ced7 Fix runlevel typo in upstart template 7a0841f Add ability to change apt/yum package state 6939484 Ensure that mode is a string 2eabf74 Fix ansible performance issue 87cde1d Fix bug in RPC config that broke Rabbit SSL support c3b7030 Support Vagrant testing with Xenial b4c3dab Update testing script for xenial d5eeadc Test aodh role using the aodh tempest plugin a205887 Ensure that doc linting is included in the linters test 267081c Update aodh.conf template to account for deprecations ac2ee29 Re-add oslo_messaging_rabbit configuration 50b7224 Ensure that Apache is installed 442fcb0 Define keystone region name. 4f04932 Optimise pip install tasks e25e511 Support service-specific rabbitmq clusters 1cd9e6e Remove openstack_hosts from test requirements dd4a642 Serve the aodh-api using mod_wsgi d95c404 Remove unnecessary overrides of service variables 2c8717b Use plugins repo version of the human_log callback plugin 3c558c2 Updated from global requirements 8381818 Remove duplicates from .gitignore ffdca6b Implement doc8 checks for docs a4cdbf5 Update sphinx configuration 53a0426 Cleanup/standardize usage of tags 4d5b233 Removing unused tasks file 4a3b4d7 Update the virtualenv paths only when we have a new venv be9271b Update tox configuration 30da818 Only install to virtual environment 9fb5cf4 Fix ansible-lint complaint about directory permissions c897e48 Remove mongodb vars from the aodh func tests b7f6326 Remove duplicate usage of the galera role in aodh func test dc1e3df DOC - Adding details on required variables for the role cc92c92 Add release note for Mongo to Galera changes be90607 Implement Ubuntu 16.04 support with SystemD f249d7e Clean up container cache prep in tests 783512f Pin test-requirements to match OpenStack requirements 6ebc7b4 Address Ansible bare variable usage ae2e55b Convert default from MongoDB to MySQL storage 25db7ac Remove pip_lock_down dependency e9cf8b4 Consistency for multi-os in the includes c3a216c Verbose option has been deprecated from oslo.log 77e621a Add .swp files to .gitignore c2603d8 Change pip install task state to 'latest' d674996 Remove py_from_git role fd5991d Add dependencies for paramiko 2.0 b4e3f82 Remove Liberty releasenote index 16b8407 Fail fast when required secrets are not present c032ce4 Clarify role documentation and remove duplication d0d97ce blacklist Ansible 1.9.6 ca5020c Updated role using the Multi-Distro framework 84553c6 Add reno scaffolding for release notes management a7630cb Switch defaults/tests to use master branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + CONTRIBUTING.rst | 2 - README.rst | 51 ++- Vagrantfile | 26 +- bindep.txt | 41 +++ defaults/main.yml | 93 +++--- examples/playbook.yml | 28 ++ handlers/main.yml | 45 ++- manual-test.rc | 33 ++ meta/main.yml | 11 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-xenial-support-5c117335b7b7b407.yaml | 3 + ...os_aodh-only-install-venv-3c80a0a66824fcd7.yaml | 5 + ...package-list-name-changes-4d5ad2e6ff5ecae2.yaml | 4 + .../notes/package-state-b032231a3cc99ee0.yaml | 13 + .../removed-aodh-api-init-9e2406629196efff.yaml | 4 + .../notes/use-galera-storage-d1a51c051d2740ad.yaml | 14 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/aodh_apache.yml | 65 ++++ tasks/aodh_db_setup.yml | 19 ++ tasks/aodh_init_common.yml | 29 ++ tasks/aodh_init_systemd.yml | 56 ++++ tasks/aodh_init_upstart.yml | 26 ++ tasks/aodh_install.yml | 136 ++------ tasks/aodh_install_apt.yml | 48 +++ tasks/aodh_post_install.yml | 33 +- tasks/aodh_pre_install.yml | 24 +- tasks/aodh_service_add.yml | 103 ------- tasks/aodh_service_setup.yml | 84 ++++- tasks/aodh_upstart_common_init.yml | 46 --- tasks/aodh_upstart_init.yml | 58 ---- tasks/main.yml | 60 +++- templates/aodh-api-wsgi.py.j2 | 22 ++ templates/aodh-httpd.conf.j2 | 16 + templates/aodh-ports.conf.j2 | 3 + templates/aodh-systemd-init.j2 | 25 ++ templates/aodh-systemd-tempfiles.j2 | 4 + templates/aodh-upstart-init.j2 | 26 +- templates/aodh.conf.j2 | 18 +- test-requirements.txt | 19 +- tox.ini | 158 ++++++---- vars/debian.yml | 31 ++ 63 files changed, 1681 insertions(+), 975 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_keystone 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are jubilant to announce the release of: openstack-ansible-os_keystone 14.0.0: os_keystone for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Added keystone_apache_custom_log_format tunable for changing CustomLog format. Default is "combined". * Apache MPM tunable support has been added to the os-keystone role in order to allow MPM thread tuning. Default values reflect the current Ubuntu default settings: keystone_httpd_mpm_backend: event keystone_httpd_mpm_start_servers: 2 keystone_httpd_mpm_min_spare_threads: 25 keystone_httpd_mpm_max_spare_threads: 75 keystone_httpd_mpm_thread_limit: 64 keystone_httpd_mpm_thread_child: 25 keystone_httpd_mpm_max_requests: 150 keystone_httpd_mpm_max_conn_child: 0 * Introduced option to deploy Keystone under Uwsgi. A new variable "keystone_mod_wsgi_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with mod_wsgi for Apache. The ports used by Uwsgi for socket and http connection for both public and admin Keystone services are configurable (see also the "keystone_uwsgi_ports" dictionary variable). Other Uwsgi configuration can be overridden by using the "keystone_uwsgi_ini_overrides" variable as documented under "Overriding OpenStack configuration defaults" in the OpenStack- Ansible Install Guide. Federation features should be considered _experimental_ with this configuration at this time. * Introduced option to deploy Keystone behind Nginx. A new variable "keystone_apache_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with Apache. Additional configuration can be delivered to Nginx through the use of the "keystone_nginx_extra_conf" list variable. Federation features are not supported with this configuration at this time. Use of this option requires "keystone_mod_wsgi_enabled" to be set to "false" which will deploy Keystone under Uwsgi. * CentOS7/RHEL support has been added to the os_keystone role. * The os_keystone role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "keystone_package_state" to "present". Upgrade Notes ************* * Installation of keystone and its dependent pip packages will now only occur within a Python virtual environment. The "keystone_venv_enabled" variable has been removed. * The variable "keystone_apt_packages" has been renamed to "keystone_distro_packages". * The variable "keystone_idp_apt_packages" has been renamed to "keystone_idp_distro_packages". * The variable "keystone_sp_apt_packages" has been renamed to "keystone_sp_distro_packages". * The variable "keystone_developer_apt_packages" has been renamed to "keystone_developer_mode_distro_packages". * The os_keystone role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "keystone_package_state" should be set to "present". Security Issues *************** * The admin_token_auth middleware presents a potential security risk and will be removed in a future release of keystone. Its use can be removed by setting the "keystone_keystone_paste_ini_overrides" variable. keystone_keystone_paste_ini_overrides: pipeline:public_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service pipeline:admin_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service pipeline:api_v3: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3 Changes in openstack-ansible-os_keystone 13.0.0..14.0.0 ------------------------------------------------------- ceabcef Remove 'ignore_errors: true' in favor of 'failed_when: false' c71a7bc Fix bare variable in handler 34bc598 Update tox.ini tests target for stable/newton 449e3a1 Update UPPER_CONSTRAINTS_FILE for stable/newton a2adb12 Update .gitreview for stable/newton 4d77b28 Update default git branch to stable/newton 40ea292 Update ansible-role-requirements to stable/newton fa5b5f9 Use centralised test scripts 0bbacf6 Revert dynamic includes for inventory-based conditionals 7872b49 Force Ansible to use dynamic includes e21be41 Update home page link in cfg file 8d836da Remove testing vars present in test repo a74af47 Address ansible_ssh_* var deprecation 3614448 Update testing bits for consistency 01e1299 Remove unrequired messaging setup task file 1bfcd10 Add role linking to tox tests 05892b5 Ansible 2.1.1 role testing 9411414 Fix depreciation "Using bare variables" 0750972 Compress test execution logs 2fd095b Update paste, policy and rootwrap configurations 2016-09-08 f0ed20d Re-activate service catalog caching fbd9535 Add credential_setup for keystone a0d71d6 Add tempest to keystone role tests 42cef50 Fix nginx SCRIPT_NAME uwsgi_param d0e5097 Use the central test repository for Keystone 38dbd42 Fix apache + uwsgi for keystone 15733bb Fix nginx to work with RedHat/CentOS b6f914a Shorten tox target names 3b47fc7 Allow Uwsgi configuration overrides 52b1a71 Configure Apache to proxy for Uwsgi db7248b Isolate mod_wsgi from Apache install 30bd479 Correct developer mode package var name 2b8aa07 Rename package lists (and related vars) appropriately 4edb378 Install and configure Nginx 0de819e Implement CentOS 7 support in os_keystone 61759e7 Work around Ansible vcpu fact bug on ppc64le 7e5548e Add a test Scenario for uwsgi & nginx 9082c79 Install and configure uWSGI b1c2f9c Isolate Apache components 39faeb0 Make all linting tests use upper-constraints 9fd8ff0 Adding Vagrantfile for local testing/dev 3122ff6 Add SNI support via OS packages for os_keystone 50730da Add apt-get update to run_tests b9e799b Force a restart of all the apache nodes during upgrade e047979 Updated from global requirements 8d046aa Update the keystone WSGI application locations 53e3df2 Add python packages for SNI support in tests c0fa231 [DOCS] Move keystone federation role docs 2cb8866 Move other-requirements.txt to bindep.txt 0a51854 Include ansible commands for ansible linting 866c153 Disable stderr logging 5637fec Add project group to role 9bd40cc Add ability to change apt/yum package state 2d8fa3d Fix bug in RPC config that broke Rabbit SSL support 418ebd6 Ensure that doc linting is included in the linters test 61848d3 Provide default for rabbitmq telemetry password 7bb3cd0 Allow configuration of multiple rabbit clusters aced6b5 Remove openstack_hosts from test requirements 0425d1c Optimise pip install tasks 986d1d8 Use keystone_system_user_name in fernet rotation cron entry. 22afe01 Use plugins repo version of the human_log callback plugin 98b19d8 Updated from global requirements 4d983d8 Remove duplicates from .gitignore ca10c41 Implement doc8 checks for docs ad7919e Update sphinx configuration d208029 Ansible 2.x - Address deprecation warning of bare variables 86a545d Update the virtualenv paths only when we have a new venv b786654 Update tox configuration 44d053c Only install to virtual environment 6c8a9b9 Update paste, policy and rootwrap configurations 2016-07-01 325db1a Clean up container cache prep in tests d8802f3 Pin test-requirements to match OpenStack requirements 1396dda Update paste, policy and rootwrap configurations 2016-06-17 d27d055 Add note on admin_token_auth deprecation 85a9202 Minimum example playbook could let suppose db creation c82a089 Add support for CustomLog format modification f244e1c Remove pip_lock_down dependency bbc645c Consistency for multi-os in the includes b6fbd99 Skip unavailable hosts when distributing keys cdb5259 Grammar: requires -> required 8797fc7 Cleanup/standardize usage of tags ebdcb34 Implement 16.04 support in Keystone 06d7fb5 Use ansible-lint 2.7.0 4f9caaa Verbose option has been deprecated from oslo.log 994bb0f Fix keystone tests 7704d94 Add support to tune the keystone apache MPM settings 57e3390 Add .swp files to .gitignore b3cca27 Change pip install task state to 'latest' 78e6744 Remove py_from_git role cc29aa4 Add dependencies for paramiko 2.0 20db79e Update paste, policy and rootwrap configurations 2016-04-22 3695699 Remove Liberty releasenote index 1635737 Change pip install task state to 'latest' eb3ce0f Fail fast when required secrets are not present dfd80ea Fix server/hostname for RFC 1034/1035 59ffe5e blacklist Ansible 1.9.6 36486b1 Remove venv activation code 7e14932 Use ansible facts for distributing SSL certs/keys 7b1543d Update min_ansible_version to 1.9 df164fb Add reno scaffolding for release notes management 0a6737c Switch defaults/tests to use master branch 42998df removed duplicate key Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + README.rst | 68 +---- Vagrantfile | 12 + bindep.txt | 41 +++ defaults/main.yml | 99 ++++++-- examples/playbook.yml | 48 ++++ handlers/main.yml | 32 ++- manual-test.rc | 33 +++ meta/main.yml | 13 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...in-token-auth-deprecation-24e84a18f8a56814.yaml | 17 ++ ...apache-log-format-support-7232177f835222ee.yaml | 4 + ...pache-mpm-tunable-support-1c72f2f99cd502bc.yaml | 17 ++ ...eystone-only-install-venv-b766568ee8d40354.yaml | 5 + ...e-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml | 22 ++ ..._keystone-centos7-support-0a5d97f81ac42e44.yaml | 4 + ...package-list-name-changes-007cacee4faf8ee6.yaml | 10 + .../notes/package-state-711a1eb4814311cc.yaml | 13 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/keystone_apache.yml | 104 +++++--- tasks/keystone_credential.yml | 22 ++ tasks/keystone_credential_autorotate.yml | 47 ++++ tasks/keystone_credential_create.yml | 46 ++++ tasks/keystone_credential_distribute.yml | 25 ++ tasks/keystone_db_setup.yml | 5 - tasks/keystone_federation_sp_idp_setup.yml | 38 +-- tasks/keystone_federation_sp_setup.yml | 21 +- tasks/keystone_fernet.yml | 6 +- tasks/keystone_fernet_keys_autorotate.yml | 10 +- tasks/keystone_fernet_keys_create.yml | 9 - tasks/keystone_fernet_keys_distribute.yml | 6 +- tasks/keystone_idp_metadata.yml | 8 +- tasks/keystone_idp_self_signed_create.yml | 6 +- tasks/keystone_idp_self_signed_distribute.yml | 5 +- tasks/keystone_idp_self_signed_store.yml | 2 - tasks/keystone_idp_setup.yml | 13 +- tasks/keystone_idp_sp_setup.yml | 4 +- tasks/keystone_init_common.yml | 27 ++ tasks/keystone_init_systemd.yml | 48 ++++ tasks/keystone_init_upstart.yml | 31 +++ tasks/keystone_install.yml | 134 +++------- tasks/keystone_install_apt.yml | 86 +++++-- tasks/keystone_install_yum.yml | 154 +++++++++++ tasks/keystone_key_distribute.yml | 6 +- tasks/keystone_key_populate.yml | 6 - tasks/keystone_key_setup.yml | 6 - tasks/keystone_ldap_setup.yml | 16 +- tasks/keystone_messaging_setup.yml | 37 --- tasks/keystone_nginx.yml | 51 ++++ tasks/keystone_post_install.yml | 40 +-- tasks/keystone_pre_install.yml | 32 +-- tasks/keystone_service_setup.yml | 41 +-- tasks/keystone_ssl.yml | 11 +- tasks/keystone_ssl_key_create.yml | 20 +- tasks/keystone_ssl_key_distribute.yml | 42 +-- tasks/keystone_ssl_key_store.yml | 32 +-- tasks/keystone_ssl_self_signed.yml | 9 +- tasks/keystone_ssl_user_provided.yml | 18 +- tasks/keystone_token_cleanup.yml | 2 - tasks/keystone_uwsgi.yml | 58 +++++ tasks/main.yml | 116 ++++++++- templates/keystone-credential-rotate.sh.j2 | 67 +++++ templates/keystone-fernet-rotate.sh.j2 | 2 +- templates/keystone-httpd-mpm.conf.j2 | 9 + templates/keystone-httpd.conf.j2 | 38 ++- templates/keystone-paste.ini.j2 | 16 +- templates/keystone-systemd-tempfiles.j2 | 4 + templates/keystone-uwsgi.ini.j2 | 20 ++ templates/keystone-uwsgi_systemd-init.j2 | 25 ++ templates/keystone-uwsgi_upstart.conf.j2 | 44 ++++ templates/keystone-wsgi.py.j2 | 48 ---- templates/keystone.conf.j2 | 40 ++- templates/keystone_nginx.conf.j2 | 34 +++ templates/policy.json.j2 | 8 +- test-requirements.txt | 19 +- tox.ini | 197 ++++++++++----- vars/redhat-7.yml | 77 ++++++ vars/ubuntu-14.04.yml | 45 +++- vars/ubuntu-16.04.yml | 70 +++++ 110 files changed, 3044 insertions(+), 1156 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-memcached_server 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are delighted to announce the release of: openstack-ansible-memcached_server 14.0.0: memcached_server for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The openstack-ansible-memcached_server role includes a new override, "memcached_connections" which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * The memcached_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "memcached_package_state" to "present". Upgrade Notes ************* * The variable "memcached_apt_packages" has been renamed to "memcached_distro_packages". * The memcached_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "memcached_package_state" should be set to "present". * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of memcached logging. Changes in openstack-ansible-memcached_server 13.0.0..14.0.0 ------------------------------------------------------------ 7e4ceb2 Changed the home-page link 2419086 Update tox.ini tests target for stable/newton d0bbf60 Update ansible-role-requirements to stable/newton 0b00da4 Use centralised test scripts ce5a44f Update UPPER_CONSTRAINTS_FILE for stable/newton 6b3332f Update .gitreview for stable/newton e16ddfd Force Ansible to use dynamic includes 6e4b41c Update testing bits for consistency 0494149 Adjust file descriptor limit when systemd is used 815bc8a Add role linking to tox tests 88c6712 Lower verbosity on memcached server 3b32f51 Compress test execution logs 5009956 Add retry to comply with the until loop ad21ba6 Ansible 2.1.1 role testing 736969d Rename package lists (and related vars) appropriately 3cfa722 Enable log collection after functional testing f449954 Add SNI support to memcached_server role via OS packages 0b1d2e0 Make all linting tests use upper-constraints 741902e Make all linting tests use upper-constraints 0061c77 Remove apt update from Vagrantfile 8b47adf Add apt-get update to run_tests adc12c3 [DOCS] - Removing tags: and category: eff7c7b Updated from global requirements 96e5914 Add python packages for SNI support in tests 52bbe88 [DOCS] Add project links to README 2aa7e61 Move other-requirements.txt to bindep.txt 23cfc19 [DOCS] Move example playbook to separate file dcf127d Include ansible commands for ansible linting 3ab920c Implement log directory link checking ee6ff9a Adding Vagrantfile for developer testing 68e7e05 Add ability to change apt/yum package state db40d59 Ensure that doc linting is included in the linters test 2af529a Use plugins repo version of the human_log callback plugin fa7ff41 Remove duplicates from .gitignore 36f8038 Implement doc8 checks for docs 16d5197 Updated from global requirements 7abca60 Update sphinx configuration 2858aa0 Ensure that gate test does not remove ~/.ansible/tmp a96fa0b Move ansible test requirements into tox.ini e171e23 Add human readable logging callback plugin for func testing 7b71f3d Update tox configuration 5e4e0f0 Pin test-requirements to match OpenStack requirements e97c1f2 Fix spacing and markup in release note 8495251 Update meta to show support for Xenial and CentOS 08fa22c DOC - Adopting the common role documentation pattern 76f4d7d Cleanup/standardize usage of tags d76fb52 Consistency for multi-os in the includes 421a504 Use ansible-lint 2.7.0 0032faf install_test_packages isn't set in memcached role 42e2291 Include empty default vars for package lists f0185d9 Updated role using the Multi-Distro framework c99d1de Removing the `verbose` variable 5c2d8c5 Configure nofile OS limit for memcached server role 17e0ea1 Add .swp files to .gitignore 9e229be Add dependencies for paramiko 2.0 809a27f Remove Liberty releasenote index 3bebceb Ansible 2.x - Address deprecation warning of bare variables 9388606 blacklist Ansible 1.9.6 2d93751 Improved logging for memcached 0cc10c5 Add reno scaffolding for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 + .gitreview | 1 + CONTRIBUTING.rst | 6 +- README.rst | 21 +- Vagrantfile | 8 + bindep.txt | 41 +++ defaults/main.yml | 16 +- examples/playbook.yml | 5 + handlers/main.yml | 5 + manual-test.rc | 33 +++ meta/main.yml | 8 +- other-requirements.txt | 16 -- releasenotes/notes/.placeholder | 0 ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + ...package-list-name-changes-a5571c0b72faadf2.yaml | 4 + .../notes/package-state-3bf07796262fc9b9.yaml | 13 + .../notes/remove_verbose_var-c22f4946eedbc5f2.yaml | 5 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/install-apt.yml | 48 ++++ tasks/install-yum.yml | 44 ++++ tasks/main.yml | 28 +- tasks/memcached_config.yml | 76 +++++- tasks/memcached_install.yml | 35 +-- tasks/memcached_pre_install.yml | 24 -- templates/limits.conf.j2 | 4 + templates/memcached.conf | 10 - templates/memcached.conf.debian.j2 | 15 ++ templates/memcached.debian.j2 | 6 + templates/memcached.j2 | 6 - templates/memcached.redhat.j2 | 13 + test-requirements.txt | 19 +- tox.ini | 153 ++++++----- vars/debian.yml | 26 ++ vars/redhat.yml | 26 ++ 46 files changed, 953 insertions(+), 245 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are gleeful to announce the release of: openstack-ansible-os_ceilometer 14.0.0: os_ceilometer role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Ceilometer can now use Gnocchi for storage. By default this is disabled. To enable the service, set "ceilometer_gnocchi_enabled: yes". See the Gnocchi role documentation for more details. * Yaml files used for ceilometer configuration will now allow a deployer to override a given list. If an override is provided that matches an already defined list in one of the ceilometer default yaml files the entire list will be replaced by the provided override. Previously, a nested lists of lists within the default ceilometer configration files would extend should a deployer provide an override matching an existing pipeline. The extension of the defaults had a high probability to cause undesirable outcomes and was very unpredictable. * The os_ceilometer role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceilometer_package_state" to "present". Upgrade Notes ************* * The default value of "service_credentials/os_endpoint_type" within ceilometer's configuration file has been changed to **internalURL**. This may be overridden through the use of the "ceilometer_ceilometer_conf_overrides" variable. * Installation of ceilometer and its dependent pip packages will now only occur within a Python virtual environment. The "ceilometer_venv_enabled" and "ceilometer_venv_bin" variables have been removed. * The variable "ceilometer_apt_packages" has been renamed to "ceilometer_distro_packages". * The variable "ceilometer_developer_mode_apt_packages" has been renamed to "ceilometer_developer_mode_distro_packages". * The os_ceilometer role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceilometer_package_state" should be set to "present". * The "ceilometer-api" init service is removed since "ceilometer- api" is deployed as an apache "mod_wsgi" service. * Ceilometer no longer manages alarm storage when Aodh is enabled. It now redirects alarm-related requests to the Aodh API. This is now auto-enabled when Aodh is deployed. * Overrides for ceilometer "aodh_connection_string" will no longer work. Specifying an Aodh connection string in Ceilometer was deprecated within Ceilometer in a prior release so this option has been removed. Changes in openstack-ansible-os_ceilometer 13.0.0..14.0.0 --------------------------------------------------------- ba55f1d Update tox.ini tests target for stable/newton 7c57171 Update ansible-role-requirements to stable/newton 4d4c7c1 Update default git branch to stable/newton bb753c3 Use centralised test scripts 1588f5d Update UPPER_CONSTRAINTS_FILE for stable/newton 87700d3 Update .gitreview for stable/newton 8818c7a Work around Ansible vcpu fact bug on ppc64le bf9f0a3 Revert dynamic includes for inventory-based conditionals ae8f455 Force Ansible to use dynamic includes f257d2e Ansible 2.1.1 role testing 0bd1e4a Update rootwrap filter copy for easier maintenance 8608b4c Add Swift telemetry notification consumer to Ceilometer e0c1459 Filter Gnocchi Swift activity in the Ceilometer dispatcher 0d4b961 Disable list_extend in config_template 2296771 [Trival Update] Organize the packages lists ea89da7 Add OSLO DB the ceilometer requirements f2365ec Limit where Apache is installed for Ceilometer 31cddcd Serve the ceilometer-api using mod_wsgi 40850a7 Compress test execution logs de037c4 Rename package lists (and related vars) appropriately 94c5551 Enable log collection after functional testing 8707550 Support for Sahara notifications 07c3ea9 Revert "Revert "RabbitMQ config rework"" 6ee67fe Make all linting tests use upper-constraints 5076014 Added SNI support for os_ceilometer package via OS packages 757d7b1 Remove apt update from Vagrantfile d78484a Add apt-get update to run_tests 0e50d15 Test os_ceilometer role using tempest scenarios acf2d36 Updated from global requirements 5714ad8 [DOCS] - Remove overview from TOC b8e8804 Add python packages for SNI support in tests d602bf3 Update paste, policy and rootwrap configurations 2016-08-15 713b099 [DOCS] - Adding doc comments to defaults file c7277a5 Move other-requirements.txt to bindep.txt 6d7679d [DOCS] Move ceilometer configs from developer docs 2f94423 Include ansible commands for ansible linting cb2139b DOCS - Documenting the role tags 56f2ee4 Revert "RabbitMQ config rework" 1d64ed8 Disable stderr logging 2b2ea34 Add project group to role 1432954 RabbitMQ config rework 1d01cc7 Fix runlevel typo in upstart template f32fdb9 Add ability to change apt/yum package state d208512 Ensure that mode is a string b5bd3c0 Fix ansible performance issue c0e7fe3 Update paste, policy and rootwrap configurations 2016-07-27 1a46237 Ensure that doc linting is included in the linters test 42e3f06 Remove openstack_hosts from test requirements b3e5fbb Optimise pip install tasks f3aeb95 Support service-specific rabbitmq clusters a2d5242 Use plugins repo version of the human_log callback plugin 3ebac92 Updated from global requirements f9e0973 Remove duplicates from .gitignore 5b2e9b9 Implement doc8 checks for docs 5b0dfd8 Update sphinx configuration 449b72b Only install to virtual environment 3baeefc Update tox configuration b621e90 Fix ansible-lint complaint about directory permissions 941e757 Add Gnocchi Support 040cb0f Update Aodh integration 91c70e1 Clean up container cache prep in tests 3dbf9b7 Pin test-requirements to match OpenStack requirements acc08c1 Address Ansible bare variable usage 0b0f0de Implement Ubuntu 16.04 support with SystemD 915480e Cleanup/standardize usage of tags 3255e4e Remove pip_lock_down dependency 28ec620 Consistency for multi-os in the includes 0419277 Remove unnecessary overrides of service variables 2fbe09d Use internal endpoints to communicate b119b67 Removing unused verbose variable from the role bd53b77 Add .swp files to .gitignore dee286c Change pip install task state to 'latest' 85409c6 Remove py_from_git role 4165913 Add dependencies for paramiko 2.0 04194d1 Multi-distro pattern for os_ceilometer role ccf1e36 Update paste, policy and rootwrap configurations 2016-04-22 2162fcb Remove Liberty releasenote index 091850c Clarify role documentation and remove duplication 65d8a90 blacklist Ansible 1.9.6 99d12a8 Fail fast when required secrets are not present 39126f6 Add reno scaffolding for release notes management e8c101d Switch defaults/tests to use master branch 2b893ce Update paste, policy and rootwrap configurations 2016-04-03 060d477 Switch ceilometer to use keystone v3 Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + README.rst | 31 +- Vagrantfile | 3 +- bindep.txt | 41 +++ defaults/main.yml | 89 ++++-- examples/playbook.yml | 8 + handlers/main.yml | 21 +- manual-test.rc | 33 ++ meta/main.yml | 12 +- other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../add-gnocchi-integrations-40eef52bf255ab0b.yaml | 7 + ...-default-os-endpoint-type-3adf9db32764ddf3.yaml | 6 + .../disable-list-extend-3a9547de9034f9ba.yaml | 10 + ...lometer-only-install-venv-f3cd57b4a1d025c5.yaml | 5 + ...package-list-name-changes-e351db8b482f1326.yaml | 6 + .../notes/package-state-ed22b9a6683690b3.yaml | 13 + ...moved-ceilometer-api-init-a4bfc4cbabcbcb16.yaml | 4 + .../support-ubuntu-xenial-958e8128ed6578cd.yaml | 3 + .../update-aodh-integration-fd2a27e8864bd8ff.yaml | 10 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.py | 11 +- tasks/ceilometer_apache.yml | 63 ++++ tasks/ceilometer_init.yml | 52 +++ tasks/ceilometer_init_common.yml | 29 ++ tasks/ceilometer_init_systemd.yml | 53 +++ tasks/ceilometer_init_upstart.yml | 39 +++ tasks/ceilometer_install.yml | 148 ++------- tasks/ceilometer_post_install.yml | 50 +-- tasks/ceilometer_pre_install.yml | 27 +- tasks/ceilometer_service_add.yml | 103 ------ tasks/ceilometer_service_setup.yml | 84 ++++- tasks/ceilometer_upstart_common_init.yml | 46 --- tasks/ceilometer_upstart_init.yml | 71 ----- tasks/install-apt.yml | 61 ++++ tasks/main.yml | 57 +++- templates/ceilometer-api-wsgi.py.j2 | 22 ++ templates/ceilometer-httpd.conf.j2 | 16 + templates/ceilometer-ports.conf.j2 | 3 + templates/ceilometer-systemd-init.j2 | 25 ++ templates/ceilometer-systemd-tempfiles.j2 | 4 + templates/ceilometer-upstart-init.j2 | 6 +- templates/ceilometer.conf.j2 | 109 +++++-- templates/event_definitions.yaml.j2 | 45 ++- templates/event_pipeline.yaml.j2 | 1 - templates/gnocchi_resources.yaml.j2 | 13 + test-requirements.txt | 19 +- tox.ini | 160 ++++++---- vars/ubuntu-14.04.yml | 32 ++ vars/ubuntu-16.04.yml | 33 ++ 69 files changed, 2056 insertions(+), 1025 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible-security 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are joyful to announce the release of: openstack-ansible-security 14.0.0: OpenStack-Ansible: Host security hardening This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The role now enables auditing during early boot to comply with the requirements in V-38438. By default, the GRUB configuration variables in "/etc/default/grub.d/" will be updated and the active "grub.cfg" will be updated. Deployers can opt-out of the change entirely by setting a variable: security_enable_audit_during_boot: no Deployers may opt-in for the change without automatically updating the active "grub.cfg" file by setting the following Ansible variables: security_enable_audit_during_boot: yes security_enable_grub_update: no * A task was added to disable secure ICMP redirects per the requirements in V-38526. This change can cause problems in some environments, so it is disabled by default. Deployers can enable the task (which disables secure ICMP redirects) by setting "security_disable_icmpv4_redirects_secure" to "yes". * A new task was added to disable ICMPv6 redirects per the requirements in V-38548. However, since this change can cause problems in running OpenStack environments, it is disabled by default. Deployers who wish to enable this task (and disable ICMPv6 redirects) should set "security_disable_icmpv6_redirects" to "yes". * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * The auditd rules template included a rule that audited changes to the AppArmor policies, but the SELinux policy changes were not being audited. Any changes to SELinux policies in "/etc/selinux" are now being logged by auditd. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes * The security role now has tasks that will disable the graphical interface on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7). These changes take effect after a reboot. Deployers that need a graphical interface will need to set the following Ansible variable: security_disable_x_windows: no * An Ansible was added to disable the "rdisc" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_rdisc" to "no". * The Linux Security Module (LSM) that is appropriate for the Linux distribution in use will be automatically enabled by the security role by default. Deployers can opt out of this change by setting the following Ansible variable: security_enable_linux_security_module: False The documentation for STIG V-51337 has more information about how each LSM is enabled along with special notes for SELinux. * A task was added that restricts ICMPv4 redirects to meet the requirements of V-38524 in the STIG. This configuration is disabled by default since it could cause issues with LXC in some environments. Deployers can enable this configuration by setting an Ansible variable: security_disable_icmpv4_redirects: yes * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. * A new configuration parameter "security_ntp_bind_local_interfaces" was added to the security role to restrict the network interface to which chronyd will listen for NTP requests. * The security role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "security_package_state" to "present". * The GPG key checks for package verification in V-38476 are now working for Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for GPG keys from Red Hat and any other GPG keys, such as ones imported from the EPEL repository, are skipped. * Tasks were added to search for any device files without a proper SELinux label on CentOS systems. If any of these device labels are found, the playbook execution will stop with an error message. * The openstack-ansible-security role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. Upgrade Notes ************* * The variable "security_audit_apparmor_changes" is now renamed to "security_audit_mac_changes" and is enabled by default. Setting "security_audit_mac_changes" to "no" will disable syscall auditing for any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS). * The variable "security_sysctl_enable_tcp_syncookies" has replaced "security_sysctl_tcp_syncookies" and it is now a boolean instead of an integer. It is still enabled by default, but deployers can disable TCP syncookies by setting the following Ansible variable: security_sysctl_enable_tcp_syncookies: no * The security role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "security_package_state" should be set to "present". * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no * All variables in the security role are now prepended with "security_" to avoid collisions with variables in other roles. All deployers who have used the security role in previous releases will need to prepend all security role variables with "security_". For example, a deployer could have disabled direct root ssh logins with the following variable: ssh_permit_root_login: yes That variable would become: security_ssh_permit_root_login: yes Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "security_initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * An Ansible task was added to disable the "netconsole" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_netconsole" to "no". * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 13.0.0..14.0.0 ---------------------------------------------------- 72ef48f Update tox.ini tests target for stable/newton 5ee9ead Skip V-38620 (chrony) in gate 5f263af Use centralised test scripts 081e46e Update UPPER_CONSTRAINTS_FILE for stable/newton 888fd8e Update .gitreview for stable/newton f460a97 [Docs] Fix sphinx pickling error 481ad31 Force Ansible to use dynamic includes bb37cfd Fix a minor typo in documentation e5a346f Update testing bits for consistency 4cdf533 [Docs] More cleanup c93b167 Add network conf auditing on CentOS 3d6cac0 [Docs] Update configuration/controls docs 3c19f00 [Docs] Metadata cleanup 4b6cbd5 [Docs] Update dev guide for metadata docs 79eeaa4 Updated from global requirements e57593d Automate the STIG documentation 28c73b4 Use command to avoid alias execution for log compression in CI 6d67b6a Rename collected logs for easier CI viewing 98fdd52 Disable DAC change auditing 1889953 Collect compressed logs after functional test execution 2aca828 Adding V-38438 (auditd during boot) e58ae24 Disable martian logging by default 83dd342 Add additional nullok check 427cd00 Enable log collection after functional testing 1fdd5b4 Remove extra AIDE tasks 129e629 Exclude /run from AIDE checks 4525cae Updated from global requirements 87e2190 Disable automatic ToC generation 578ce32 Ensure AIDE initializes on subsequent runs 31823b7 Implemented: V-38548. a189e05 Fix numbering on V-38583 fb33be7 Update to Ansible 2.1.1 8945ecb Restore logrotate cron job in CI 9ea5033 Fix AIDE cron job creation 862b713 Make all linting tests use upper-constraints 2c4393f Added SNI support for os_security role via OS packages 822ffad Add AIDE cron job in CentOS 7 704e1c8 Implemented: V-38526. 36e7d54 Updated from global requirements f85e9e4 Skip SNMPv1/2 (V-38660) checks in gate 06997d1 Add python packages for SNI support in tests f1acb0f Move other-requirements.txt to bindep.txt 1625f2a Add workaround for CVE-2016-5696 675c9e8 Show idempotency check output a715acf Fix auditd rpmverify check 8d2cde7 Add python-apt for check mode c458db6 Include ansible commands for ansible linting 43c81eb Adjust TCP syncookes variable to bool 08bd55d Correct tags attribute typo 70d9224 Add ability to change apt/yum package state 088884c Ensure that doc linting is included in the linters test 5e70944 Add audit rules to support ppc64le architecture. fa11dd4 Add idempotency check 983f20a Updated from global requirements 20b8d9a Fix duplicated config options in auditd.conf 7f7098c Restore check/audit test in tox.ini b5b92c1 Fix chrony daemon name for rh derivatives cc01563 Use plugins repo version of the human_log callback plugin 7eeaf92 Updated from global requirements e75613e Resolve 'E501 line too long' linters error 7003129 Remove doc8 check ignores 7751415 Update sphinx configuration 65293e8 Update tox configuration e831f70 Docs: Add note about RHEL 7 testing 432a9eb Switch to openstackdocs theme 5f8a93c Ignore ansible-lint warnings about rpm command usage 076be96 Docs: Fix rendering of :orphan: a95aeaa Pin test-requirements to match OpenStack requirements ff07803 Add support for Xenial and CentOS 7 to the Vagrantfile 2538d3c Fix documentation warnings from sphinx 6a9230c Ensure aide-common package is installed ba25681 Use standard check for systemd b937e5b Docs: Specify supported distributions 809b6cb Restart auditd after running augenrules 44e6056 Add key fields to audit rules ef69ba2 Add initial support for Red Hat Enterprise Linux 7 24f3f73 Add release note for V-38524 implementation d56468f Docs: Add developer guide for security role 03d436f Fix grub configuration file path in RHEL/CentOS 7 d8ae1e3 Set check_mode variable every time ee00627 Add check/audit to gate testing 5112569 Implemented: V-38524. 2683e56 Fix broken check mode for CentOS 7 45330fe Don't start LSM in check mode ecb0329 Consistency for multi-os in the includes bf28fdf Search for unlabeled device files 42deedc Remove one more "FAILED" from a custom fail message 40634db Add /etc/apparmor.d/ for auditing 6476ef7 Ensure V-38574 works reliably on CentOS 65a7bc4 Setting default runlevel/target to non-graphical 9fbe88a Fix unlocked account check on Ansible 2.2 09a60bf Remove "FAILED" from custom fail messages 7d2964a Add a note to the README file where to report bugs 7b313ee Adding audit rule for SELinux policy modifications 3114703 Add new parameter 'security_ntp_bind_local_interfaces_only' 31424a4 Enable LSM instead of checking status a841e18 Docs: Update dev notes for Cat 2 controls 32ce224 Docs: Update dev notes for Cat 3 controls e954ff5 Docs: Update dev notes for Cat 1 controls a972b4f Fix null password auth in CentOS 490d2f4 Fix auditd log permission bug 5cd0192 Fixing the "dry-run" errors. 2459cb4 Disable the rdisc service (if present) 3107e7c Disable the netconsole service (if present) 750260d Use ansible_managed variable in templates 05e3a1f Do not use bare variables with with_items b562271 Use fail module instead of debug module with failed_when 8a3a83a Add multi-release docs index 22c4c21 Add CentOS 7 and Ubuntu 16.04 support fa28004 Migrate to unique variable names 54de1b5 Handle Match properly in sshd_config 6f8b686 Removing equal signs in docs f5061fd Switch from dict to individual variables c7d2d84 Add .swp files to .gitignore e57f251 Fix verbiage in docs on auditd rule 19999b4 Add dependencies for paramiko 2.0 77b8b45 Disable failed access auditd logging 8389ec0 Add reno scaffolding for release notes management 5b5eabd blacklist Ansible 1.9.6 d1ca8db Add ability to enable unattended upgrades e44efd0 Doc updates 72cbd94 Fix flake8 violation in conf.py 9058a3f Improved search for unlocked system accounts Diffstat (except docs and test files) ------------------------------------- .gitignore | 19 +- .gitreview | 1 + README.md | 50 +- README.rst | 26 +- Vagrantfile | 59 +- bindep.txt | 44 + defaults/main.yml | 237 +- files/20auto-upgrades | 2 + handlers/main.yml | 23 +- manual-test.rc | 33 + meta/main.yml | 4 + other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-v38438-3f7e905892be4b4f.yaml | 21 + .../notes/adding-v38526-381a407caa566b14.yaml | 8 + .../notes/adding-v38548-9c51b30bf9780ff3.yaml | 8 + .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 + .../aide-initialization-fix-16ab0223747d7719.yaml | 17 + ...diting-mac-policy-changes-fb83e0260a6431ed.yaml | 15 + .../notes/augenrules-restart-39fe3e1e2de3eaba.yaml | 5 + ...figurable-martian-logging-370ede40b036db0b.yaml | 13 + ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...sable-graphical-interface-5db89cd1bef7e12d.yaml | 13 + ...isable-netconsole-service-915bb33449b4012c.yaml | 7 + .../disabling-rdisc-centos-75115b3509941bfa.yaml | 8 + .../notes/enable-lsm-bae903e463079a3f.yaml | 14 + ...ble-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml | 11 + ...-audit-log-permission-bug-81a772e2e6d0a5b3.yaml | 10 + .../fix-check-mode-with-tags-bf798856a27c53eb.yaml | 7 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../notes/implemented-v38524-b357edec95128307.yaml | 12 + .../improved-audit-rule-keys-9fa85f758386446c.yaml | 5 + ...ind-local-interfaces-only-05f03de632e81097.yaml | 5 + .../notes/package-state-6684c5634bdf127a.yaml | 13 + .../reduce-auditd-logging-633677a74aee5481.yaml | 25 + .../notes/rhel-gpg-check-0b483a824314d1b3.yaml | 7 + ...rch-for-unlabeled-devices-cb047c5f767e93ce.yaml | 6 + ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 5 + ...unique-variable-migration-c0639030b495438f.yaml | 20 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++ releasenotes/source/index.rst | 10 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/aide.yml | 115 + tasks/apt.yml | 60 +- tasks/auditd.yml | 97 +- tasks/auth.yml | 167 +- tasks/boot.yml | 32 +- tasks/console.yml | 27 +- tasks/file_perms.yml | 18 +- tasks/kernel.yml | 67 +- tasks/lsm.yml | 83 + tasks/mail.yml | 27 +- tasks/main.yml | 56 +- tasks/misc.yml | 218 +- tasks/nfsd.yml | 24 +- tasks/rpm.yml | 109 + tasks/services.yml | 191 +- tasks/sshd.yml | 82 +- templates/ZZ_aide_exclusions.j2 | 5 +- templates/chrony.conf.j2 | 14 +- templates/jail.local.j2 | 6 +- templates/osas-auditd.j2 | 346 +- test-requirements.txt | 22 +- tox.ini | 172 +- vars/redhat.yml | 38 + vars/ubuntu.yml | 41 + 889 files changed, 10206 insertions(+), 10525 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..73b06a3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,7 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2 +Jinja2>=2.8 # BSD License (3 clause) +lxml>=2.3 # BSD

1 0

[new][openstackansible] openstack-ansible-galera_server 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are high-spirited to announce the release of: openstack-ansible-galera_server 14.0.0: Galera Server role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. * CentOS 7 support has been added to the "galera_server" role. * Implemented support for Ubuntu 16.04 Xenial. percona-xtrabackup packages will be installed from distro repositories, instead of upstream percona repositories due to lack of available packages upstream at the time of implementing this feature. * The galera_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_server_package_state" to "present". Known Issues ************ * Deployments on ppc64le are limited to Ubuntu 16.04 for the Newton release of OpenStack-Ansible. Upgrade Notes ************* * The default database collation has changed from *utf8_unicode_ci* to *utf8_general_ci*. Existing databases and tables will need to be converted. * The MariaDB wait_timeout setting is decreased to 1h to match the SQL Alchemy pool recycle timeout, in order to prevent unnecessary database session buildups. * The variable "galera_pre_packages" has been renamed to "galera_server_required_distro_packages". * The variable "galera_packages" has been renamed to "galera_server_mariadb_distro_packages". * The galera_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_server_package_state" should be set to "present". Deprecation Notes ***************** * galera_package_url changed to percona_package_url for clarity * galera_package_sha256 changed to percona_package_sha256 for clarity * galera_package_path changed to percona_package_path for clarity * galera_package_download_validate_certs changed to percona_package_download_validate_certs for clarity Bug Fixes ********* * Add architecture-specific locations for percona-xtrabackup and qpress, with alternate locations provided for ppc64el due to package inavailability from the current provider. * The "--compact" flag has been removed from xtrabackup options. This had been shown to cause crashes in some SST situations Other Notes *********** * Mariadb version upgrade gate checks removed. Changes in openstack-ansible-galera_server 13.0.0..14.0.0 --------------------------------------------------------- 636d7d9 Update signing key for percona packages c5e81bf Do not ignore_errors for fallback keyserver bd6271c Add tests/common to .gitignore db312c5 Remove 'ignore_errors: true' in favor of 'failed_when: false' 09276e4 Move systemd handler above restart handler 7632420 Allow mysql users to create triggers 3cc340c Set default for physical_host if it's undefined 91ab40e On single nodes use an empty cluster address 94dd58c Update tox.ini tests target for stable/newton 8575139 Update ansible-role-requirements to stable/newton df1bf84 Use centralised test scripts 7bd1175 Update UPPER_CONSTRAINTS_FILE for stable/newton 062f8c3 Update .gitreview for stable/newton 74ac0dc Force Ansible to use dynamic includes 7359513 Update homepage with developer documentation page 6c1422c Address ansible_ssh_* var deprecation 6029354 Update testing bits for consistency 21aaa7c Adjust file descriptor limit when systemd is used 8a9127e Prevent galera_cluster_name from changing. 23098ba Ansible 2.1.1 role testing 45f9c76 Compress test execution logs 352cbd1 Allow galera to listen on v4/v6 b1ed69f Fix arch-specific percona-xtrabackup and qpress a3bb3b7 Enable log collection after functional testing ece430a Work around Ansible vcpu fact bug on ppc64le 45a7ed4 Update qpress to use Xenial package 3df31ce Rename package lists (and related vars) appropriately 885aefa Remove apt update from Vagrantfile 1ac2047 Make all linting tests use upper-constraints 658c848 Added SNI support for galera_server role via OS packages 2e1cf58 Updated from global requirements ff22a68 Add apt-get update to run_tests 3eb2a89 [DOCS] - Removing tags: and category: 49006d7 Add python packages for SNI support in tests 1f0cfa2 remove compact option from xtrabackup a04ca29 Adding Vagrantfile for local testing f18654f Move other-requirements.txt to bindep.txt 50bcea1 [DOCS] Move example playbook to separate file 15310f1 Include ansible commands for ansible linting 54ca3be Add ability to change apt/yum package state 727189f Ensure that doc linting is included in the linters test a69a34f Change the repos to use upstream default 9f47da6 Use plugins repo version of the human_log callback plugin 1763be7 Updated from global requirements 35b1668 Remove duplicates from .gitignore bcd2b9d Implement doc8 checks for docs 4a8707f Update sphinx configuration 8e48a2e Update tox configuration ac3942d Change default collation to utf8_general_ci 4d25aeb Clean up container cache prep in tests 08ce66f Pin test-requirements to match OpenStack requirements 63e1d9f DOC - Adopting the common role documentation pattern db39fee Consistency for multi-os in the includes 5b23837 Add CentOS7 support to Galera Server 5136160 Implement Xenial Support 7bec84f Remove Mariadb Upgrade Check 090240e Use the apt_package_pinning role 05cdf7c Add .swp files to .gitignore ac3bbca Change pip install task state to 'latest' cca71a5 Add dependencies for paramiko 2.0 36c5d83 Ansible 2.x - Address deprecation warning of bare variables b8c1195 Remove Liberty releasenote index a1636b3 Decrease MariaDB wait timeout c8b8902 blacklist Ansible 1.9.6 b9a7361 ensure mysql defaults file is sourced 83556a7 Update min_ansible_version to 1.9 4cff43f Add reno scaffolding for release notes management 3aa680f Add executable bit to run_tests.sh a37735c Reorganize test playbooks a94f88d Fix handlers fac557b Remove dependency on python2_lxc git source 8245978 Add retry logic to mysql_upgrade ff665af removed duplicate key Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 1 + CONTRIBUTING.rst | 2 - README.rst | 23 +- Vagrantfile | 12 + bindep.txt | 41 +++ defaults/main.yml | 57 ++--- examples/playbook.yml | 7 + files/policy-rc.d | 3 +- handlers/main.yml | 16 +- library/mysql_status_facts | 12 +- manual-test.rc | 33 +++ meta/main.yml | 8 +- other-requirements.txt | 17 -- releasenotes/notes/.placeholder | 0 ...pecific-package-locations-e76512288aaf6fa0.yaml | 8 + .../change-default-collation-260d932780ef4553.yaml | 5 + ...riadb-waittimeout-setting-ddaae0f2e1d31ee1.yaml | 5 + ...force-cluster-name-change-b4ce1e225daa840c.yaml | 15 ++ ...implement-centos7-support-cf6b6ee0d606223f.yaml | 3 + .../implement-xenial-support-0de6444c53337d46.yaml | 12 + ...package-list-name-changes-7fcd5583f0db0eb6.yaml | 6 + .../notes/package-state-b7a3d3c242e2c3aa.yaml | 13 + ...emove-upgrade-gate-checks-3fbe339e06094681.yaml | 3 + ...trabackup-compact-disable-8ae9215207147ebc.yaml | 4 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/galera_bootstrap.yml | 10 + tasks/galera_cluster_state.yml | 20 +- tasks/galera_install.yml | 17 +- tasks/galera_install_apt.yml | 144 +++++++++-- tasks/galera_install_yum.yml | 161 ++++++++++++ tasks/galera_post_install.yml | 67 ++++- tasks/galera_pre_install.yml | 124 ++------- tasks/galera_running_check.yml | 16 +- tasks/galera_setup.yml | 7 + tasks/galera_upgrade_check.yml | 38 +-- tasks/galera_upgrade_check_apt.yml | 51 ++++ tasks/galera_upgrade_check_yum.yml | 51 ++++ tasks/galera_upgrade_post.yml | 6 +- tasks/galera_upgrade_pre.yml | 4 +- tasks/main.yml | 14 + templates/cluster.cnf.j2 | 1 - templates/galera_pin.pref.j2 | 5 - templates/limits.conf.j2 | 4 - templates/my.cnf.j2 | 6 +- templates/mysql_defaults.j2 | 2 +- templates/systemd.limits.conf.j2 | 12 + templates/upstart.limits.conf.j2 | 4 + test-requirements.txt | 22 +- tox.ini | 153 ++++++----- vars/redhat-7.yml | 84 ++++++ vars/ubuntu-14.04.yml | 76 +++++- vars/ubuntu-16.04.yml | 113 +++++++++ 72 files changed, 1715 insertions(+), 750 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a9a3fcc..8fdd8d8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,5 +12,4 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 - -# required by Ansible uri module -httplib2 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][openstackansible] openstack-ansible 14.0.0 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are eager to announce the release of: openstack-ansible 14.0.0: Ansible playbooks for deploying OpenStack This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * LXC containers will now have a proper RFC1034/5 hostname set during post build tasks. A localhost entry for 127.0.1.1 will be created by converting all of the "_" in the "inventory_hostname" to "-". Containers will be created with a default domain of *openstack.local*. This domain name can be customized to meet your deployment needs by setting the option "lxc_container_domain". * The option "openstack_domain" has been added to the **openstack_hosts** role. This option is used to setup proper hostname entries for all hosts within a given OpenStack deployment. * The **openstack_hosts** role will setup an RFC1034/5 hostname and create an alias for all hosts in inventory. * Added new parameter "`cirros_img_disk_format" to support disk formats other than qcow2. * Ceilometer can now use Gnocchi for storage. By default this is disabled. To enable the service, set "ceilometer_gnocchi_enabled: yes". See the Gnocchi role documentation for more details. * The os_horizon role now has support for the horizon ironic-ui dashboard. The dashboard may be enabled by setting "horizon_enable_ironic_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * Adds support for the horizon ironic-ui dashboard. The dashboard will be automatically enabled if any ironic hosts are defined. * The os_horizon role now has support for the horizon magnum-ui dashboard. The dashboard may be enabled by setting "horizon_enable_magnum_ui" to "True" in "/etc/openstack_deploy/user_variables.yml". * Adds support for the horizon magnum-ui dashboard. The dashboard will be automatically enabled if any magnum hosts are defined. * The "horizon_keystone_admin_roles" variable is added to support the "OPENSTACK_KEYSTONE_ADMIN_ROLES" list in the horizon_local_settings.py file. * A new variable has been added to allow a deployer to control the restart of containers via the handler. This new option is "lxc_container_allow_restarts" and has a default of "yes". If a deployer wishes to disable the auto-restart functionality they can set this value to "no" and automatic container restarts that are not absolutely required will be disabled. * Experimental support has been added to allow the deployment of the OpenStack Magnum service when hosts are present in the host group "magnum-infra_hosts". * Deployers can now blacklist certain Nova extensions by providing a list of such extensions in "horizon_nova_extensions_blacklist" variable, for example: horizon_nova_extensions_blacklist: - "SimpleTenantUsage" * The os_nova role can now deploy the nova-lxd hypervisor. This can be achieved by setting "nova_virt_type" to "lxd" on a per-host basis in "openstack_user_config.yml" or on a global basis in "user_variables.yml". * The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by defining "qemu_conf_dict". * The role now enables auditing during early boot to comply with the requirements in V-38438. By default, the GRUB configuration variables in "/etc/default/grub.d/" will be updated and the active "grub.cfg" will be updated. Deployers can opt-out of the change entirely by setting a variable: security_enable_audit_during_boot: no Deployers may opt-in for the change without automatically updating the active "grub.cfg" file by setting the following Ansible variables: security_enable_audit_during_boot: yes security_enable_grub_update: no * A task was added to disable secure ICMP redirects per the requirements in V-38526. This change can cause problems in some environments, so it is disabled by default. Deployers can enable the task (which disables secure ICMP redirects) by setting "security_disable_icmpv4_redirects_secure" to "yes". * A new task was added to disable ICMPv6 redirects per the requirements in V-38548. However, since this change can cause problems in running OpenStack environments, it is disabled by default. Deployers who wish to enable this task (and disable ICMPv6 redirects) should set "security_disable_icmpv6_redirects" to "yes". * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * In order to reduce the time taken for fact gathering, the default subset gathered has been reduced to a smaller set than the Ansible default. This may be changed by the deployer by setting the "ANSIBLE_GATHER_SUBSET" variable in the bash environment prior to executing any ansible commands. * A new option has been added to "bootstrap-ansible.sh" to set the role fetch mode. The environment variable "ANSIBLE_ROLE_FETCH_MODE" sets how role dependencies are resolved. * The auditd rules template included a rule that audited changes to the AppArmor policies, but the SELinux policy changes were not being audited. Any changes to SELinux policies in "/etc/selinux" are now being logged by auditd. * The container cache preparation process now allows "copy-on-write" to be set as the "lxc_container_backing_method" when the "lxc_container_backing_store" is set to "lvm". When this is set a base container will be created using a name of the form *<linux- distribution>*-*distribution-release>*-*<host-cpu-architecture>*. The container will be stopped as it is not used for anything except to be a backing store for all other containers which will be based on a snapshot of the base container. * When using copy-on-write backing stores for containers, the base container name may be set using the variable "lxc_container_base_name" which defaults to *<linux-distribution >*-*distribution-release>*-*<host-cpu-architecture>*. * The container cache preparation process now allows "overlayfs" to be set as the "lxc_container_backing_store". When this is set a base container will be created using a name of the form *<linux- distribution>*-*distribution-release>*-*<host-cpu-architecture>*. The container will be stopped as it is not used for anything except to be a backing store for all other containers which will be based on a snapshot of the base container. The "overlayfs" backing store is not recommended to be used for production unless the host kernel version is 3.18 or higher. * Containers will now bind mount all logs to the physical host machine in the "/openstack/log/{{ inventory_hostname }}" location. This change will ensure containers using a block backed file system (lvm, zfs, bfrfs) do not run into issues with full file systems due to logging. * Added new variable "tempest_img_name". * Added new variable "tempest_img_url". This variable replaces "cirros_tgz_url" and "cirros_img_url". * Added new variable "tempest_image_file". This variable replaces the hard-coded value for the "img_file" setting in tempest.conf.j2. This will allow users to specify images other than cirros. * Added new variable "tempest_img_disk_format". This variable replaces "cirros_img_disk_format". * The "rsyslog_server" role now has support for CentOS 7. * Support had been added to install the ceph_client packages and dependencies from Ceph.com, Ubuntu Cloud Archive (UCA), or the operating system's default repository. The "ceph_pkg_source" variable controls the install source for the Ceph packages. Valid values include: * "ceph": This option installs Ceph from a ceph.com repo. Additional variables to adjust items such as Ceph release and regional download mirror can be found in the variables files. * "uca": This option installs Ceph from the Ubuntu Cloud Archive. Additional variables to adjust items such as the OpenStack/Ceph release can be found in the variables files. * "distro": This options installs Ceph from the operating system's default repository and unlike the other options does not attempt to manage package keys or add additional package repositories. * The pip_install role can now configure pip to be locked down to the repository built by OpenStack-Ansible. To enable the lockdown configuration, deployers may set "pip_lock_to_internal_repo" to "true" in "/etc/openstack_deploy/user_variables.yml". * The *dynamic_inventory.py* file now takes a new argument, "-- check", which will run the inventory build without writing any files to the file system. This is useful for checking to make sure your configuration does not contain known errors prior to running Ansible commands. * The ability to support MultiStrOps has been added to the config_template action plugin. This change updates the parser to use the "set()" type to determine if values within a given key are to be rendered as "MultiStrOps". If an override is used in an INI config file the set type is defined using the standard yaml construct of "?" as the item marker. # Example Override Entries Section: typical_list_things: - 1 - 2 multistrops_things: ? a ? b # Example Rendered Config: [Section] typical_list_things = 1,2 multistrops_things = a multistrops_things = b * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes * The "rabbitmq_server" now supports a configurable inventory host group. Deployers can override the "rabbitmq_host_group" variable if they wish to use the role to create additional RabbitMQ clusters on a custom host group. * The "lxc-container-create" role now consumes the variable "lxc_container_bind_mounts" which should contain a list of bind mounts to apply to a newly created container. The appropriate host and container directory will be created and the configuration applied to the container config. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The "lxc-container-create" role now consumes the variable "lxc_container_config_list" which should contain a list of the entries which should be added to the LXC container config file when the container is created. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The "lxc-container-create" role now consumes the variable "lxc_container_commands" which should contain any shell commands that should be executed in a newly created container. This feature is designed to be used in group_vars to ensure that containers are fully prepared at the time they are created, thus cutting down the number of times containers are restarted during deployments and upgrades. * The container creation process now allows "copy-on-write" to be set as the "lxc_container_backing_method" when the "lxc_container_backing_store" is set to "lvm". When this is set it will use a snapshot of the base container to build the containers. * The container creation process now allows "overlayfs" to be set as the "lxc_container_backing_store". When this is set it will use a snapshot of the base container to build the containers. The "overlayfs" backing store is not recommended to be used for production unless the host kernel version is 3.18 or higher. * LXC containers will now generate a fixed mac address on all network interfaces when the option *lxc_container_fixed_mac* is set to **true**. This feature was implemented to resolve issues with dynamic mac addresses in containers generally experienced at scale with network intensive services. * All of the database and database user creates have been removed from the roles into the playbooks. This allows the roles to be tested independently of the deployed database and also allows the roles to be used independently of infrastructure choices made by the integrated OSA project. * Host security hardening is now applied by default using the "openstack-ansible-security" role. Developers can opt out by setting the "apply_security_hardening" Ansible variable to "false". For more information about the role and the changes it makes, refer to the openstack-ansible-security documentation (http://docs.openstack.org/developer/openstack-ansible-security/) * If there are swift hosts in the environment, then the value for "cinder_service_backup_program_enabled" will automatically be set to "True". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * If there are swift hosts in the environment, then the value for "glance_default_store" will automatically be set to "swift". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * The os_nova role can now detect a PowerNV environment and set the virtualization type to 'kvm'. * The security role now has tasks that will disable the graphical interface on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7). These changes take effect after a reboot. Deployers that need a graphical interface will need to set the following Ansible variable: security_disable_x_windows: no * Yaml files used for ceilometer configuration will now allow a deployer to override a given list. If an override is provided that matches an already defined list in one of the ceilometer default yaml files the entire list will be replaced by the provided override. Previously, a nested lists of lists within the default ceilometer configration files would extend should a deployer provide an override matching an existing pipeline. The extension of the defaults had a high probability to cause undesirable outcomes and was very unpredictable. * An Ansible was added to disable the "rdisc" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_rdisc" to "no". * Whether ceilometer should be enabled by default for each service is now dynamically determined based on whether there are any ceilometer hosts/containers deployed. This behaviour can still be overridden by toggling "<service>_ceilometer_enabled" in "/etc/openstack_deploy/user_variables.yml". * The "os_neutron" role now determines the default configuration for openvswitch-agent "tunnel_types" and the presence or absence of "local_ip" configuration based on the value of "neutron_ml2_drivers_type". Deployers may directly control this configuration by overriding the "neutron_tunnel_types" variable . * The "os_neutron" role now configures neutron ml2 to load the "l2_population" mechanism driver by default based on the value of "neutron_l2_population". Deployers may directly control the neutron ml2 mechanism drivers list by overriding the "mechanisms" variable in the "neutron_plugins" dictionary. * LBaaSv2 is now enabled by default in all-in-one (AIO) deployments. * The Linux Security Module (LSM) that is appropriate for the Linux distribution in use will be automatically enabled by the security role by default. Deployers can opt out of this change by setting the following Ansible variable: security_enable_linux_security_module: False The documentation for STIG V-51337 has more information about how each LSM is enabled along with special notes for SELinux. * An export flag has been added to the "inventory-manage.py" script. This flag allows exporting of host and network information from an OpenStack-Ansible inventory for import into another system, or an alternate view of the existing data. See the developer docs for more details. * Variable "ceph_extra_confs" has been expanded to support retrieving additional ceph.conf and keyrings from multiple ceph clusters automatically. * Additional libvirt ceph client secrets can be defined to support attaching volumes from different ceph clusters. * New variable "ceph_extra_confs" may be defined to support deployment of extra Ceph config files. This is useful for cinder deployments that utilize multiple Ceph clusters as cinder backends. * The "py_pkgs" lookup plugin now has strict ordering for requirement files discovered. These files are used to add additional requirements to the python packages discovered. The order is defined by the constant, "REQUIREMENTS_FILE_TYPES" which contains the following entries, 'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt', 'global-requirements.txt', 'global-requirement- pins.txt'. The items in this list are arranged from least to most priority. * The "openstack-ansible-galera_server" role will now prevent deployers from changing the "galera_cluster_name" variable on clusters that already have a value set in a running galera cluster. You can set the new "galera_force_change_cluster_name" variable to "True" to force the "galera_cluster_name" variable to be changed. We recommend setting this by running the galera-install.yml playbook with "-e galera_force_change_cluster_name=True", to avoid changing the "galera_cluster_name" variable unintentionally. Use with caution, changing the "galera_cluster_name" value can cause your cluster to fail, as the nodes won't join if restarted sequentially. * The repo build process is now able to make use of a pre-staged git cache. If the "/var/www/repo/openstackgit" folder on the repo server is found to contain existing git clones then they will be updated if they do not already contain the required SHA for the build. * The repo build process is now able to synchronize a git cache from the deployment node to the repo server. The git cache path on the deployment node is set using the variable "repo_build_git_cache". If the deployment node hosts the repo container, then the folder will be symlinked into the bind mount for the repo container. If the deployment node does not host the repo container, then the contents of the folder will be synchronised into the repo container. * The "os_glance" role now supports Ubuntu 16.04 and SystemD. * Gnocchi is available for deploy as a metrics storage service. At this time it does not integrate with Aodh or Ceilometer. To deploy Aodh or Ceilometer to use Gnocchi as a storage / query API, each must be configured appropriately with the use of overrides as described in the configuration guides for each of these services. * CentOS 7 and Ubuntu 16.04 support have been added to the "haproxy" role. * The "haproxy" role installs *hatop* from source to ensure that the same operator tooling is available across all supported distributions. The download URL for the source can be set using the variable "haproxy_hatop_download_url". * Added a boolean var *haproxy_service_enabled* to the *haproxy_service_configs* dict to support toggling haproxy endpoints on/off. * Added a new "haproxy_extra_services" var which will allow extra haproxy endpoint additions. * The repo server will now be used as a package manager cache. * The HAProxy role provided by OpenStack-Ansible now terminates SSL using a self-signed certificate by default. While this can be disabled the inclusion of SSL services on all public endpoints as a default will help make deployments more secure without any additional user interaction. More information on SSL and certificate generation can be found here (http://docs.openstack.org/developer /openstack-ansible/install-guide/configure-haproxy.html#securing- haproxy-communication-with-ssl-certificates). * The "rabbitmq_server" role now supports configuring HiPE compilation of the RabbitMQ server Erlang code. This configuration option may improve server performance for some workloads and hardware. Deployers can override the "rabbitmq_hipe_compile" variable, setting a value of "True" if they wish to enable this feature. * Horizon now has the ability to set arbitrary configuration options using global option "horizon_config_overrides" in YAML format. The overrides follow the same pattern found within the other OpenStack service overrides. General documentation on overrides can be found here (http://docs.openstack.org/developer/openstack-ansible/install- guide/configure-openstack.html#overriding-openstack-configuration- defaults). * The "os_horizon" role now supports configuration of custom themes. Deployers can use the new "horizon_custom_themes" and "horizon_default_theme" variables to configure the dashboard with custom themes and default to a specific theme respectively. * CentOS 7 support has been added to the "galera_server" role. * Implemented support for Ubuntu 16.04 Xenial. percona-xtrabackup packages will be installed from distro repositories, instead of upstream percona repositories due to lack of available packages upstream at the time of implementing this feature. * A task was added that restricts ICMPv4 redirects to meet the requirements of V-38524 in the STIG. This configuration is disabled by default since it could cause issues with LXC in some environments. Deployers can enable this configuration by setting an Ansible variable: security_disable_icmpv4_redirects: yes * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. * pip can be installed via the deployment host using the new variable "pip_offline_install". This can be useful in environments where the containers lack internet connectivity. Please refer to the limited connectivity installation guide (http://docs.openstack.org/developer /openstack-ansible/install- guide/app-no-internet-connectivity.html #install-pip-through- deployment-host) for more information. * The env.d directory included with OpenStack-Ansible is now used as the first source for the environment skeleton, and "/etc/openstack_deploy/env.d" will be used only to override values. Deployers without customizations will no longer need to copy the env.d directory to /etc/openstack_deploy. As a result, the env.d copy operation has been removed from the node bootstrap role. * A new debug flag has been added to "dynamic_inventory.py". This should make it easier to understand what's happening with the inventory script, and provide a way to gather output for more detailed bug reports. See the developer docs for more details. * The "ironic" role now supports Ubuntu 16.04 and SystemD. * Experimental support has been added to allow the deployment of the OpenStack Bare Metal Service (Ironic). Details for how to set it up are available in the OpenStack-Ansible Install Guide for Ironic (http://docs.openstack.org/developer/openstack-ansible/install-guide /configure-ironic.html). * To ensure the deployment system remains clean the Ansible execution environment is contained within a virtual environment. The virtual environment is created at "/opt/ansible-runtime" and the "ansible.*" CLI commands are linked within /usr/local/bin to ensure there is no interruption in the deployer workflow. * There is a new default configuration for keepalived, supporting more than 2 nodes. * In order to make use of the latest stable keepalived version, the variable "keepalived_use_latest_stable" must be set to "True" * The ability to support login user domain and login project domain has been added to the keystone module. # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True * The LBaaSv2 service provider configuration can now be adjusted with the "neutron_lbaasv2_service_provider" variable. This allows a deployer to choose to deploy LBaaSv2 with Octavia in a future version. * The config_template action plugin now has a new option to toggle list extension for JSON or YAML formats. The new option is "list_extend" and is a boolean. The default is True which maintains the existing API. * The lxc_hosts role can now make use of a primary and secondary gpg keyserver for gpg validation of the downloaded cache. Setting the servers to use can be done using the "lxc_image_cache_primary_keyserver" and "lxc_image_cache_secondary_keyserver" variables. * The "lxc_container_create" role will now build a container based on the distro of the host OS. * The "lxc_container_create" role now supports Ubuntu 14.04, 16.04, and RHEL/CentOS 7 * The LXC container creation process now has a configurable delay for the task which waits for the container to start. The variable "lxc_container_ssh_delay" can be set to change the default delay of five seconds. * The "lxc_host" cache prep has been updated to use the LXC download template. This removes the last remaining dependency the project has on the rpc-trusty-container.tgz image (http://rpc- repo.rackspace.com/container_images/rpc-trusty-container.tgz) * The "lxc_host" role will build lxc cache using the download template built from images found here (https://images.linuxcontainers.org) These images are upstream builds from the greater LXC/D community. * The "lxc_host" role introduces support for CentOS 7 and Ubuntu 16.04 container types. * The inventory script will now dynamically populate the "lxc_hosts" group dynamically based on which machines have container affinities defined. This group is not allowed in user-defined configuration. * Neutron HA router capabilities in Horizon will be enabled automatically if the neutron plugin type is ML2 and environment has >=2 L3 agent nodes. * Horizon now has a boolean variable named "horizon_enable_ha_router" to enable Neutron HA router management. * Horizon's IPv6 support is now enabled by default. This allows users to manage subnets with IPv6 addresses within the Horizon interface. Deployers can disable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: False Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. * memcached now logs with multiple levels of verbosity, depending on the user variables. Setting "debug: True" enables maximum verbosity while setting "verbose: True" logs with an intermediate level. * The openstack-ansible-memcached_server role includes a new override, "memcached_connections" which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit configuration, memcached will crash in order to support higher parallel connection TCP/Memcache counts. * The repo build process is now able to support building and synchronizing artifacts for multiple CPU architectures. Build artifacts are now tagged with the appropriate CPU architecture by default, and synchronization of build artifacts from secondary, architecture-specific repo servers back to the primary repo server is supported. * The repo install process is now able to support building and synchronizing artifacts for multiple CPU architectures. To support multiple architectures, one or more repo servers must be created for each CPU architecture in the deployment. When multiple CPU architectures are detected among the repo servers, the repo- discovery process will automatically assign a repo master to perform the build process for each architecture. * CentOS 7 support has been added to the "galera_client" role. * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Neutron BGP dynamic routing plugin can now optionally be deployed and configured. Please see OpenStack Networking Guide: BGP dynamic routing (http://docs.openstack.org/networking-guide/config-bgp- dynamic-routing.html) for details about what the service is and what it provides. * The Project Calico Neutron networking plugin is now integrated into the deployment. For setup instructions please see "os_neutron" role documentation. * A conditional has been added to the "_local_ip" settings used in the "neutron_local_ip" which removes the hard requirement for an overlay network to be set within a deployment. If no overlay network is set within the deployment the "local_ip" will be set to the value of "ansible_ssh_host". * Deployers can now configure tempest public and private networks by setting the following variables, 'tempest_private_net_provider_type' to either vxlan or vlan and 'tempest_public_net_provider_type' to flat or vlan. Depending on what the deployer sets these variables to, they may also need to update other variables accordingly, this mainly involves 'tempest_public_net_physical_type' and 'tempest_public_net_seg_id'. Please refer to http://docs.openstack.org/mitaka/networking-guide/intro-basic- networking.html for more neutron networking information. * The Project Calico Neutron networking plugin is now integrated into the "os_neutron" role. This can be activated using the instructions located in the role documentation. * The "os_neutron" role will now default to the OVS firewall driver when "neutron_plugin_type" is "ml2.ovs" and the host is running Ubuntu 16.04 on PowerVM. To override this default behavior, deployers should define "neutron_ml2_conf_ini_overrides" and 'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example below neutron_ml2_conf_ini_overrides: securitygroup: firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver neutron_openvswitch_agent_ini_overrides: securitygroup: firewall_driver: iptables_hybrid * Neutron VPN as a Service (VPNaaS) can now optionally be deployed and configured. Please see the OpenStack Networking Guide (http://docs.openstack.org/mitaka/networking-guide/) for details about the what the service is and what it provides. See the VPNaaS Install Guide (http://docs.openstack.org/developer/openstack-ansible /install-guide/configure-network-services.html#virtual-private- network-service-optional) for implementation details. * Support for Neutron distributed virtual routing has been added to the "os_neutron" role. This includes the implementation of Networking Guide's suggested agent configuration. This feature may be activated by setting "neutron_plugin_type: ml2.ovs.dvr" in "/etc/openstack_deploy/user_variables.yml". * The horizon next generation instance management panels have been enabled by default. This changes horizon to use the upstream defaults instead of the legacy panels. Documentation can be found here (http://docs.openstack.org/developer/horizon/topics/settings.html #launch-instance-ng-enabled). * The nova SSH public key distribution has been made a lot faster especially when deploying against very large clusters. To support larger clusters the role has moved away from the "authorized_key" module and is now generating a script to insert keys that may be missing from the authorized keys file. The script is saved on all nova compute nodes and can be found at "/usr/local/bin/openstack- nova-key.sh". If ever there is a need to reinsert keys or fix issues on a given compute node the script can be executed at any time without directly running the ansible playbooks or roles. * The os_nova role can now detect and support basic deployment of a PowerVM environment. This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink package and nova-powervm driver. * Nova UCA repository support is implemented by default. This will allow the users to benefit from the updated packages for KVM. The "nova_uca_enable" variable controls the install source for the KVM packages. By default this value is set to "True" to make use of UCA repository. User can set to "False" to disable. * A new configuration parameter "security_ntp_bind_local_interfaces" was added to the security role to restrict the network interface to which chronyd will listen for NTP requests. * The LXC container creation and modification process now supports online network additions. This ensures a container remains online when additional networks are added to a system. * Open vSwitch driver support has been implemented. This includes the implementation of the appropriate Neutron configuration and package installation. This feature may be activated by setting "neutron_plugin_type: ml2.ovs" in "/etc/openstack_deploy/user_variables.yml". * An opportunistic Ansible execution strategy has been implemented. This allows the Ansible linear strategy to skip tasks with conditionals faster by never queuing the task when the conditional is evaluated to be false. * The Ansible SSH plugin has been modified to support running commands within containers without having to directly ssh into them. The change will detect presence of a container. If a container is found the physical host will be used as the SSH target and commands will be run directly. This will improve system reliability and speed while also opening up the possibility for SSH to be disabled from within the container itself. * Added "horizon_apache_custom_log_format" tunable to the os-horizon role for changing CustomLog format. Default is "combined". * Added keystone_apache_custom_log_format tunable for changing CustomLog format. Default is "combined". * Apache MPM tunable support has been added to the os-keystone role in order to allow MPM thread tuning. Default values reflect the current Ubuntu default settings: keystone_httpd_mpm_backend: event keystone_httpd_mpm_start_servers: 2 keystone_httpd_mpm_min_spare_threads: 25 keystone_httpd_mpm_max_spare_threads: 75 keystone_httpd_mpm_thread_limit: 64 keystone_httpd_mpm_thread_child: 25 keystone_httpd_mpm_max_requests: 150 keystone_httpd_mpm_max_conn_child: 0 * Introduced option to deploy Keystone under Uwsgi. A new variable "keystone_mod_wsgi_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with mod_wsgi for Apache. The ports used by Uwsgi for socket and http connection for both public and admin Keystone services are configurable (see also the "keystone_uwsgi_ports" dictionary variable). Other Uwsgi configuration can be overridden by using the "keystone_uwsgi_ini_overrides" variable as documented under "Overriding OpenStack configuration defaults" in the OpenStack- Ansible Install Guide. Federation features should be considered _experimental_ with this configuration at this time. * Introduced option to deploy Keystone behind Nginx. A new variable "keystone_apache_enabled" is introduced to toggle this behavior. The default is "true" which continues to deploy with Apache. Additional configuration can be delivered to Nginx through the use of the "keystone_nginx_extra_conf" list variable. Federation features are not supported with this configuration at this time. Use of this option requires "keystone_mod_wsgi_enabled" to be set to "false" which will deploy Keystone under Uwsgi. * The "os_cinder" role now supports Ubuntu 16.04. * CentOS7/RHEL support has been added to the os_cinder role. * CentOS7/RHEL support has been added to the os_glance role. * CentOS7/RHEL support has been added to the os_keystone role. * The "os_magnum" role now supports deployment on Ubuntu 16.04 using systemd. * The galera_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_client_package_state" to "present". * The ceph_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceph_client_package_state" to "present". * The os_ironic role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ironic_package_state" to "present". * The os_nova role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "nova_package_state" to "present". * The memcached_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "memcached_package_state" to "present". * The os_heat role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "heat_package_state" to "present". * The rsyslog_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_server_package_state" to "present". * The pip_install role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "pip_install_package_state" to "present". * The repo_build role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "repo_build_package_state" to "present". * The os_rally role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rally_package_state" to "present". * The os_glance role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "glance_package_state" to "present". * The security role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "security_package_state" to "present". * A new global option to control all package install states has been implemented. The default action for all distribution package installations is to ensure that the latest package is installed. This may be changed to only verify if the package is present by setting "package_state" to "present". * The os_keystone role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "keystone_package_state" to "present". * The os_cinder role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "cinder_package_state" to "present". * The os_gnocchi role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "gnocchi_package_state" to "present". * The os_magnum role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "magnum_package_state" to "present". * The rsyslog_client role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rsyslog_client_package_state" to "present". * The os_sahara role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "sahara_package_state" to "present". * The repo_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "repo_server_package_state" to "present". * The haproxy_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "haproxy_package_state" to "present". * The os_aodh role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "aodh_package_state" to "present". * The openstack_hosts role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "openstack_hosts_package_state" to "present". * The galera_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "galera_server_package_state" to "present". * The rabbitmq_server role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "rabbitmq_package_state" to "present". * The lxc_hosts role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "lxc_hosts_package_state" to "present". * The os_ceilometer role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "ceilometer_package_state" to "present". * The os_swift role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "swift_package_state" to "present". * The os_neutron role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "neutron_package_state" to "present". * The os_horizon role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "horizon_package_state" to "present". * The PATH environment variable that is configured on the remote system can now be set using the "openstack_host_environment_path" list variable. * The repo build process now has the ability to store the pip sources within the build archive. This ability is useful when deploying environments that are "multi-architecture", "multi- distro", or "multi-interpreter" where specific pre-build wheels may not be enough to support all of the deployment. To enable the ability to store the python source code within a given release, set the new option "repo_build_store_pip_sources" to "true". * The repo server now has a Package Cache service for distribution packages. To leverage the cache, deployers will need to configure the package manager on all hosts to use the cache as a proxy. If a deployer would prefer to disable this service, the variable "repo_pkg_cache_enabled" should be set to "false". * The "rabbitmq_server" role now supports deployer override of the RabbitMQ policies applied to the cluster. Deployers can override the "rabbitmq_policies" variable, providing a list of desired policies. * The RabbitMQ Management UI is now available through HAProxy on port 15672. The default userid is "monitoring". This user can be modified by changing the parameter "rabbitmq_monitoring_userid" in the file "user_variables.yml". Please note that ACLs have been added to this HAProxy service by default, such that it may only be accessed by common internal clients. Reference "playbooks/vars/configs/haproxy_config.yml" * Added playbook for deploying Rally in the utility containers * Our general config options are now stored in an "/usr/local/bin /openstack-ansible.rc" file and will be sourced when the "openstack- ansible" wrapper is invoked. The RC file will read in BASH environment variables and should any Ansible option be set that overlaps with our defaults the provided value will be used. * The LBaaSv2 device driver is now set by the Ansible variable "neutron_lbaasv2_device_driver". The default is set to use the "HaproxyNSDriver", which allows for agent-based load balancers. * The GPG key checks for package verification in V-38476 are now working for Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for GPG keys from Red Hat and any other GPG keys, such as ones imported from the EPEL repository, are skipped. * CentOS7 support has been added to the "rsyslog_client" role. * The options of application logrotate configuration files are now configurable. "rsyslog_client_log_rotate_options" can be used to provide a list of directives, and "rsyslog_client_log_rotate_scripts" can be used to provide a list of postrotate, prerotate, firstaction, or lastaction scripts. * Experimental support has been added to allow the deployment of the Sahara data-processing service. To deploy sahara hosts should be present in the host group "sahara-infra_hosts". * The Sahara dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_sahara_ui: True * Tasks were added to search for any device files without a proper SELinux label on CentOS systems. If any of these device labels are found, the playbook execution will stop with an error message. * The repo build process now selectively clones git repositories based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the git repo for the service will not be cloned. This behaviour can be optionally changed to force all git repositories to be cloned by setting "repo_build_git_selective" to "no". * The repo build process now selectively builds venvs based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the venv will not be built. This behaviour can be optionally changed to force all venvs to be built by setting "repo_build_venv_selective" to "yes". * The repo build process now selectively builds python packages based on whether each OpenStack service group has any hosts in it. If there are no hosts in the group, the list of python packages for the service will not be built. This behaviour can be optionally changed to force all python packages to be built by setting "repo_build_wheel_selective" to "no". * A new variable is supported in the "neutron_services" dictionary called "service_conf_path". This variable enables services to deploy their config templates to paths outside of /etc/neutron by specifying a directory using the new variable. * The openstack-ansible-security role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. * The "fallocate_reserve` option can now be set (in bytes or as a percentage) for swift by using the ``swift_fallocate_reserve" variable in "/etc/openstack_deploy/user_variables.yml". This value is the amount of space to reserve on a disk to prevent a situation where swift is unable to remove objects due to a lack of available disk space to work with. The default value is 1% of the total disk size. * The "openstack-ansible-os_swift" role will now prevent deployers from changing the "swift_hash_path_prefix" and "swift_hash_path_suffix" variables on clusters that already have a value set in "/etc/swift/swift.conf". You can set the new "swift_force_change_hashes" variable to "True" to force the "swift_hash_path_" variables to be changed. We recommend setting this by running the os-swift.yml playbook with "-e swift_force_change_hashes=True", to avoid changing the "swift_hash_path_" variables unintentionally. Use with caution, changing the "swift_hash_path_" values causes end-user impact. * The "os_swift" role has 3 new variables that will allow a deployer to change the hard, soft and fs.file-max limits. the hard and soft limits are being added to the limits.conf file for the swift system user. The fs.file-max settings are added to storage hosts via kernel tuning. The new options are "swift_hard_open_file_limits" with a default of 10240 "swift_soft_open_file_limits" with a default of 4096 "swift_max_file_limits" with a default of 24 times the value of "swift_hard_open_file_limits". * The "pretend_min_part_hours_passed" option can now be passed to swift-ring-builder prior to performing a rebalance. This is set by the "swift_pretend_min_part_hours_passed" boolean variable. The default for this variable is False. We recommend setting this by running the os-swift.yml playbook with "-e swift_pretend_min_part_hours_passed=True", to avoid resetting "min_part_hours" unintentionally on every run. Setting "swift_pretend_min_part_hours_passed" to True will reset the clock on the last time a rebalance happened, thus circumventing the min_part_hours check. This should only be used with extreme caution. If you run this command and deploy rebalanced rings before a replication pass completes, you may introduce unavailability in your cluster. This has an end-user imapct. * While default python interpreter for swift is cpython, pypy is now an option. This change adds the ability to greatly improve swift performance without the core code modifications. These changes have been implemented using the documentation provided by Intel and Swiftstack. Notes about the performance increase can be seen here (https://software.intel.com/en-us/blogs/2016/05/06/doubling-the- performance-of-openstack-swift-with-no-code-changes). * Change the port for devices in the ring by adjusting the port value for services, hosts, or devices. This will not involve a rebalance of the ring. * Changing the port for a device, or group of devices, carries a brief period of downtime to the swift storage services for those devices. The devices will be unavailable during period between when the storage service restarts after the port update, and the ring updates to match the new port. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. * The "os_swift" role will now include the swift "staticweb" middleware by default. * The os_swift role now allows the permissions for the log files created by the swift account, container and object servers to be set. The variable is "swift_syslog_log_perms" and is set to "0644" by default. * Support added to allow deploying on ppc64le architecture using the Ubuntu distributions. * Support had been added to allow the functional tests to pass when deploying on ppc64le architecture using the Ubuntu distributions. * Support for the deployment of Unbound caching DNS resolvers has been added as an optional replacement for /etc/hosts management across all hosts in the environment. To enable the Unbound DNS containers, add "unbound_hosts" entries to the environment. * The "repo_build" role now provides the ability to override the upper-constraints applied which are sourced from OpenStack and from the global-requirements-pins.txt file. The variable "repo_build_upper_constraints_overrides" can be populated with a list of upper constraints. This list will take the highest precedence in the constraints process, with the exception of the pins set in the git source SHAs. Known Issues ************ * Deployments on ppc64le are limited to Ubuntu 16.04 for the Newton release of OpenStack-Ansible. * The variables "haproxy_keepalived_(internal|external)_cidr" now has a default set to "169.254.(2|1).1/24". This is to prevent Ansible undefined variable warnings. Deployers must set values for these variables for a working haproxy with keepalived environment when using more than one haproxy node. * In the latest stable version of keepalived there is a problem with the priority calculation when a deployer has more than five keepalived nodes. The problem causes the whole keepalived cluster to fail to work. To work around this issue it is recommended that deployers limit the number of keepalived nodes to no more than five or that the priority for each node is set as part of the configuration (cf. "haproxy_keepalived_vars_file" variable). * Paramiko version 2.0 Python requires the Python cryptography library. New system packages must be installed for this library. For OpenStack-Ansible versions <12.0.12, <11.2.15, <13.0.2 the system packages must be installed on the **deployment host** manually by executing "apt-get install -y build-essential libssl-dev libffi- dev". Upgrade Notes ************* * LXC containers will now have a proper RFC1034/5 hostname set during post build tasks. A localhost entry for 127.0.1.1 will be created by converting all of the "_" in the "inventory_hostname" to "-". Containers will be created with a default domain of *openstack.local*. This domain name can be customized to meet your deployment needs by setting the option "lxc_container_domain". * A new global variable has been created named "openstack_domain". This variable has a default value of "openstack.local". * The "ca-certificates" package has been included in the LXC container build process in order to prevent issues related to trying to connect to public websites which make use of newer certificates than exist in the base CA certificate store. * In order to reduce the time taken for fact gathering, the default subset gathered has been reduced to a smaller set than the Ansible default. This may be changed by the deployer by setting the "ANSIBLE_GATHER_SUBSET" variable in the bash environment prior to executing any ansible commands. * The environment variable "FORKS" is no longer used. The standard Ansible environment variable "ANSIBLE_FORKS" should be used instead. * The Galera client role now has a dependency on the apt package pinning role. * The variable "security_audit_apparmor_changes" is now renamed to "security_audit_mac_changes" and is enabled by default. Setting "security_audit_mac_changes" to "no" will disable syscall auditing for any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS). * When upgrading deployers will need to ensure they have a backup of all logging from within the container prior to running the playbooks. If the logging node is present within the deployment all logs should already be sync'd with the logging server and no action is required. As a pre-step it's recommended that deployers clean up logging directories from within containers prior to running the playbooks. After the playbooks have run the bind mount will be in effect at "/var/log" which will mount over all previous log files and directories. * Due to a new bind mount at "/var/log" all containers will be restarted. This is a required restart. It is recommended that deployers run the container restarts in serial to not impact production workloads. * The default value of "service_credentials/os_endpoint_type" within ceilometer's configuration file has been changed to **internalURL**. This may be overridden through the use of the "ceilometer_ceilometer_conf_overrides" variable. * The default database collation has changed from *utf8_unicode_ci* to *utf8_general_ci*. Existing databases and tables will need to be converted. * The LXC container cache preparation process now copies package repository configuration from the host instead of implementing its own configuration. The following variables are therefore unnecessary and have been removed: * "lxc_container_template_main_apt_repo" * "lxc_container_template_security_apt_repo" * "lxc_container_template_apt_components" * The LXC container cache preparation process now copies DNS resolution configuration from the host instead of implementing its own configuration. The "lxc_cache_resolvers" variable is therefore unnecessary and has been removed. * The MariaDB wait_timeout setting is decreased to 1h to match the SQL Alchemy pool recycle timeout, in order to prevent unnecessary database session buildups. * The variable "repo_server_packages" that defines the list of packages required to install a repo server has been replaced by "repo_server_distro_packages". * If there are swift hosts in the environment, then the value for "cinder_service_backup_program_enabled" will automatically be set to "True". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * If there are swift hosts in the environment, then the value for "glance_default_store" will automatically be set to "swift". This negates the need to set this variable in "user_variables.yml", but the value may still be overridden at the deployer discretion. * The variable "security_sysctl_enable_tcp_syncookies" has replaced "security_sysctl_tcp_syncookies" and it is now a boolean instead of an integer. It is still enabled by default, but deployers can disable TCP syncookies by setting the following Ansible variable: security_sysctl_enable_tcp_syncookies: no * The "glance_apt_packages" variable has been renamed to "glance_distro_packages" so that it applies to multiple operating systems. * Within the "haproxy" role *hatop* has been changed from a package installation to a source-based installation. This has been done to ensure that the same operator tooling is available across all supported distributions. The download URL for the source can be set using the variable "haproxy_hatop_download_url". * Haproxy has a new backend to support using the repo server nodes as a git server. The new backend is called "repo_git" and uses port "9418". Default ACLs have been created to lock down the port's availability to only internal networks originating from an RFC1918 address. * Haproxy has a new backend to support using the repo server nodes as a package manager cache. The new backend is called "repo_cache" and uses port "3142" and a single active node. All other nodes within the pool are backups and will be promoted if the active node goes down. Default ACLs have been created to lock down the port's availability to only internal networks originating from an RFC1918 address. * SSL termination is assumed enabled for all public endpoints by default. If this is not needed it can be disabled by setting the "openstack_external_ssl" option to **false** and the "openstack_service_publicuri_proto" to **http**. * If HAProxy is used as the loadbalancer for a deployment it will generate a self-signed certificate by default. If HAProxy is NOT used, an SSL certificate should be installed on the external loadbalancer. The installation of an SSL certificate on an external load balancer is not covered by the deployment tooling. * In previous releases connections to Horizon originally terminated SSL at the Horizon container. While that is still an option, SSL is now assumed to be terminated at the load balancer. If you wish to terminate SSL at the horizon node change the "horizon_external_ssl" option to **false**. * Public endpoints will need to be updated using the Keystone admin API to support secure endpoints. The Keystone ansible module will not recreate the endpoints automatically. Documentation on the Keystone service catalog can be found here (http://docs.openstack.org/developer/keystone/configuration.html #service-catalog). * Upgrades will not replace entries in the /etc/openstack_deploy/env.d directory, though new versions of OpenStack-Ansible will now use the shipped env.d as a base, which may alter existing deployments. * The variable used to store the mysql password used by the ironic service account has been changed. The following variable: ironic_galera_password: secrete has been changed to: ironic_container_mysql_password: secrete * There is a new default configuration for keepalived. When running the haproxy playbook, the configuration change will cause a keepalived restart unless the deployer has used a custom configuration file. The restart will cause the virtual IP addresses managed by keepalived to be briefly unconfigured, then reconfigured. * A new version of keepalived will be installed on the haproxy nodes if the variable "keepalived_use_latest_stable" is set to "True" and more than one haproxy node is configured. The update of the package will cause keepalived to restart and therefore will cause the virtual IP addresses managed by keepalived to be briefly unconfigured, then reconfigured. * Adding a new nova.conf entry, live_migration_uri. This entry will default to a "qemu-ssh://" uri, which uses the ssh keys that have already been distributed between all of the compute hosts. * The "lxc_container_create" role no longer uses the distro specific lxc container create template. * The following variable changes have been made in the "lxc_host" role: * **lxc_container_template**: Removed because the template option is now contained within the operating system specific variable file loaded at runtime. * **lxc_container_template_options**: This option was renamed to *lxc_container_download_template_options*. The deprecation filter was not used because the values provided from this option have been fundamentally changed and old overrides will cause problems. * **lxc_container_release**: Removed because image is now tied with the host operating system. * **lxc_container_user_name**: Removed because the default users are no longer created when the cached image is created. * **lxc_container_user_password**: Removed because the default users are no longer created when the cached image is created. * **lxc_container_template_main_apt_repo**: Removed because this option is now being set within the cache creation process and is no longer needed here. * **lxc_container_template_security_apt_repo**: Removed because this option is now being set within the cache creation process and is no longer needed here. * The "lxc_host" role no longer uses the distro specific lxc container create template. * The following variable changes have been made in the "lxc_host" role: * **lxc_container_user_password**: Removed because the default lxc container user is no longer created by the lxc container template. * **lxc_container_template_options**: This option was renamed to *lxc_cache_download_template_options*. The deprecation filter was not used because the values provided from this option have been fundamentally changed and potentially old overrides will cause problems. * **lxc_container_base_delete**: Removed because the cache will be refreshed upon role execution. * **lxc_cache_validate_certs**: Removed because the Ansible "get_url" module is no longer used. * **lxc_container_caches**: Removed because the container create process will build a cached image based on the host OS. * LXC package installation and cache preparation will now occur by default only on hosts which will actually implement containers. * The dynamic_inventory script previously set the provider network attributes "is_container_address" and "is_ssh_address" to True for the management network regardless of whether a deployer had them configured this way or not. Now, these attributes must be configured by deployers and the dynamic_inventory script will fail if they are missing or not True. * During upgrades, container and service restarts for the mariadb/galera cluster were being triggered multiple times and causing the cluster to become unstable and often unrecoverable. This situation has been improved immensely, and we now have tight control such that restarts of the galera containers only need to happen once, and are done so in a controlled, predictable and repeatable way. * The memcached log is removed from /var/log/memcached.log and is now stored in the /var/log/memcached folder. * The variable "galera_client_apt_packages" has been replaced by "galera_client_distro_packages". * Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should be enabled is now dynamically determined based on the "neutron_plugin_type" and the "neutron_ml2_mechanism_drivers" that are set. This aims to simplify the configuration of Neutron services and eliminate the need for deployers to override the entire "neutron_services" dict variable to disable these services. * Database migration tasks have been added for the dynamic routing neutron plugin. * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. * The new host group "neutron_openvswitch_agent" has been added to the "env.d/neutron.yml" and "env.d/nova.yml" environment configuration files in order to support the implementation of Open vSwitch. Deployers must ensure that their environment configuration files are updated to include the above group name. Please see the example implementations in env.d/neutron.yml (https://github.com/openstack /openstack- ansible/blob/stable/newton/etc/openstack_deploy/env.d/neutron.yml) and env.d/nova.yml (https://github.com/openstack/openstack- ansible/blob/stable/newton/etc/openstack_deploy/env.d/nova.yml). * The variable "neutron_agent_mode" has been removed from the "os_neutron" role. The appropriate value for "l3_agent.ini" is now determined based on the "neutron_plugin_type" and host group membership. * The default horizon instance launch panels have been changed to the next generation panels. To enable legacy functionality set the following options accordingly: horizon_launch_instance_legacy: True horizon_launch_instance_ng: False * A new nova admin endpoint will be registered with the suffix "/v2.1/%(tenant_id)s". The nova admin endpoint with the suffix "/v2/%(tenant_id)s" may be manually removed. * Cleanup tasks are added to remove the nova console git directories "/usr/share/novnc" and "/usr/share/spice-html5", prior to cloning these inside the nova vnc and spice console playbooks. This is necessary to guarantee that local modifications do not break git clone operations, especially during upgrades. * The variable "neutron_linuxbridge" has been removed as it is no longer used. * The variable "neutron_driver_interface" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_driver_firewall" has been removed. The appropriate value for "neutron.conf" is now determined based on the "neutron_plugin_type". * The variable "neutron_ml2_mechanism_drivers" has been removed. The appropriate value for ml2_conf.ini is now determined based on the "neutron_plugin_type". * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "glance_venv_bin", "glance_venv_enabled", "glance_venv_etc_dir", and "glance_non_venv_etc_dir" variables have been removed. * Installation of glance and its dependent pip packages will now only occur within a Python virtual environment. The "gnocchi_venv_bin", "gnocchi_venv_enabled", "gnocchi_venv_etc_dir", and "gnocchi_non_venv_etc_dir" variables have been removed. * Installation of heat and its dependent pip packages will now only occur within a Python virtual environment. The "heat_venv_bin" and "heat_venv_enabled" variables have been removed. * Installation of horizon and its dependent pip packages will now only occur within a Python virtual environment. The "horizon_venv_bin", "horizon_venv_enabled", "horizon_venv_lib_dir", and "horizon_non_venv_lib_dir" variables have been removed. * Installation of ironic and its dependent pip packages will now only occur within a Python virtual environment. The "ironic_venv_bin" and "ironic_venv_enabled" variables have been removed. * Installation of keystone and its dependent pip packages will now only occur within a Python virtual environment. The "keystone_venv_enabled" variable has been removed. * The Neutron L3 Agent configuration for the handle_internal_only_routers variable is removed in order to use the Neutron upstream default setting. The current default for handle_internal_only_routers is True, which does allow Neutron L3 router without external networks attached (as discussed per https://bugs.launchpad.net/neutron/+bug/1572390) * Installation of aodh and its dependent pip packages will now only occur within a Python virtual environment. The "aodh_venv_enabled" and "aodh_venv_bin" variables have been removed. * Installation of ceilometer and its dependent pip packages will now only occur within a Python virtual environment. The "ceilometer_venv_enabled" and "ceilometer_venv_bin" variables have been removed. * Installation of cinder and its dependent pip packages will now only occur within a Python virtual environment. The "cinder_venv_enabled" and "cinder_venv_bin" variables have been removed. * Installation of magnum and its dependent pip packages will now only occur within a Python virtual environment. The "magnum_venv_bin", "magnum_venv_enabled" variables have been removed. * Installation of neutron and its dependent pip packages will now only occur within a Python virtual environment. The "neutron_venv_enabled", "neutron_venv_bin", "neutron_non_venv_lib_dir" and "neutron_venv_lib_dir" variables have been removed. * Installation of nova and its dependent pip packages will now only occur within a Python virtual environment. The "nova_venv_enabled", "nova_venv_bin" variables have been removed. * Installation of rally and its dependent pip packages will now only occur within a Python virtual environment. The "rally_venv_bin", "rally_venv_enabled" variables have been removed. * Installation of sahara and its dependent pip packages will now only occur within a Python virtual environment. The "sahara_venv_bin", "sahara_venv_enabled", "sahara_venv_etc_dir", and "sahara_non_venv_etc_dir" variables have been removed. * Installation of swift and its dependent pip packages will now only occur within a Python virtual environment. The "swift_venv_enabled", "swift_venv_bin" variables have been removed. * The variable "keystone_apt_packages" has been renamed to "keystone_distro_packages". * The variable "keystone_idp_apt_packages" has been renamed to "keystone_idp_distro_packages". * The variable "keystone_sp_apt_packages" has been renamed to "keystone_sp_distro_packages". * The variable "keystone_developer_apt_packages" has been renamed to "keystone_developer_mode_distro_packages". * The variable "glance_apt_packages" has been renamed to "glance_distro_packages". * The variable "horizon_apt_packages" has been renamed to "horizon_distro_packages". * The variable "aodh_apt_packages" has been renamed to "aodh_distro_packages". * The variable "cinder_apt_packages" has been renamed to "cinder_distro_packages". * The variable "cinder_volume_apt_packages" has been renamed to "cinder_volume_distro_packages". * The variable "cinder_lvm_volume_apt_packages" has been renamed to "cinder_lvm_volume_distro_packages". * The variable "ironic_api_apt_packages" has been renamed to "ironic_api_distro_packages". * The variable "ironic_conductor_apt_packages" has been renamed to "ironic_conductor_distro_packages". * The variable "ironic_conductor_standalone_apt_packages" has been renamed to "ironic_conductor_standalone_distro_packages". * The variable "galera_pre_packages" has been renamed to "galera_server_required_distro_packages". * The variable "galera_packages" has been renamed to "galera_server_mariadb_distro_packages". * The variable "haproxy_pre_packages" has been renamed to "haproxy_required_distro_packages". * The variable "haproxy_packages" has been renamed to "haproxy_distro_packages". * The variable "memcached_apt_packages" has been renamed to "memcached_distro_packages". * The variable "neutron_apt_packages" has been renamed to "neutron_distro_packages". * The variable "neutron_lbaas_apt_packages" has been renamed to "neutron_lbaas_distro_packages". * The variable "neutron_vpnaas_apt_packages" has been renamed to "neutron_vpnaas_distro_packages". * The variable "neutron_apt_remove_packages" has been renamed to "neutron_remove_distro_packages". * The variable "heat_apt_packages" has been renamed to "heat_distro_packages". * The variable "ceilometer_apt_packages" has been renamed to "ceilometer_distro_packages". * The variable "ceilometer_developer_mode_apt_packages" has been renamed to "ceilometer_developer_mode_distro_packages". * The variable "swift_apt_packages" has been renamed to "swift_distro_packages". * The variable "lxc_apt_packages" has been renamed to "lxc_hosts_distro_packages". * The variable "openstack_host_apt_packages" has been renamed to "openstack_host_distro_packages". * The galera_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_client_package_state" should be set to "present". * The ceph_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceph_client_package_state" should be set to "present". * The os_ironic role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ironic_package_state" should be set to "present". * The os_nova role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "nova_package_state" should be set to "present". * The memcached_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "memcached_package_state" should be set to "present". * The os_heat role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "heat_package_state" should be set to "present". * The rsyslog_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_server_package_state" should be set to "present". * The pip_install role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "pip_install_package_state" should be set to "present". * The repo_build role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "repo_build_package_state" should be set to "present". * The os_rally role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rally_package_state" should be set to "present". * The os_glance role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "glance_package_state" should be set to "present". * The security role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "security_package_state" should be set to "present". * All roles always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "package_state" should be set to "present". * The os_keystone role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "keystone_package_state" should be set to "present". * The os_cinder role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "cinder_package_state" should be set to "present". * The os_gnocchi role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "gnocchi_package_state" should be set to "present". * The os_magnum role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "magnum_package_state" should be set to "present". * The rsyslog_client role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rsyslog_client_package_state" should be set to "present". * The os_sahara role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "sahara_package_state" should be set to "present". * The repo_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "repo_server_package_state" should be set to "present". * The haproxy_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "haproxy_package_state" should be set to "present". * The os_aodh role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "aodh_package_state" should be set to "present". * The openstack_hosts role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "openstack_hosts_package_state" should be set to "present". * The galera_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "galera_server_package_state" should be set to "present". * The rabbitmq_server role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "rabbitmq_package_state" should be set to "present". * The lxc_hosts role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "lxc_hosts_package_state" should be set to "present". * The os_ceilometer role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "ceilometer_package_state" should be set to "present". * The os_swift role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "swift_package_state" should be set to "present". * The os_neutron role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "neutron_package_state" should be set to "present". * The os_horizon role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "horizon_package_state" should be set to "present". * The variable "rsyslog_client_packages" has been replaced by "rsyslog_client_distro_packages". * The variable "rsyslog_server_packages" has been replaced by "rsyslog_server_distro_packages". * The variable "rabbitmq_monitoring_password" has been added to "user_secrets.yml". If this variable does not exist, the RabbitMQ monitoring user will not be created. * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no * The container property "container_release" has been removed as this is automatically set to the same version as the host in the container creation process. * The variable "lxc_container_release" has been removed from the "lxc- container-create.yml" playbook as it is no longer consumed by the container creation process. * LBaaSv1 has been removed from the "neutron-lbaas" project in the Newton release and it has been removed from OpenStack-Ansible as well. * The LVM configuration tasks and "lvm.conf" template have been removed from the "openstack_hosts" role since they are no longer needed. All of the LVM configuration is properly handled in the "os_cinder" role. * In the "rsyslog_client" role, the variable "rsyslog_client_repos" has been removed as it is no longer used. * Percona Xtrabackup has been removed from the Galera client role. * The "infra_hosts" and "infra_containers" inventory groups have been removed. No containers or services were assigned to these groups exclusively, and the usage of the groups has been supplanted by the "shared-infra_*" and "os-infra_*" groups for some time. Deployers who were using the groups should adjust any custom configuration in the "env.d" directory to assign containers and/or services to other groups. * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of memcached logging. * The variable "verbose" has been removed. Deployers should rely on the "debug" var to enable higher levels of logging. * The aodh-api init service is removed since aodh-api is deployed as an apache mod_wsgi service. * The "ceilometer-api" init service is removed since "ceilometer- api" is deployed as an apache "mod_wsgi" service. * The database create and user creates have been removed from the "os_heat" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_nova" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_glance" role. These tasks have been relocated to the playbooks. * The database and user creates have been removed from the "os_horizon" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_cinder" role. These tasks have been relocated to the playbooks. * The database create and user creates have been removed from the "os_neutron" role. These tasks have been relocated to the playbooks. * The Neutron HA tool written by AT&T is no longer enabled by default. This tool was providing HA capabilities for networks and routers that were not using the native Neutron L3HA. Because native Neutron L3HA is stable, compatible with the Linux Bridge Agent, and is a better means of enabling HA within a deployment this tool is no longer being setup by default. If legacy L3HA is needed within a deployment the deployer can set *neutron_legacy_ha_tool_enabled* to **true** to enable the legacy tooling. * The "repo_build_apt_packages" variable has been renamed. "repo_build_distro_packages" should be used instead to override packages required to build Python wheels and venvs. * The "repo_build" role now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "repo_build_uca_enable" to "False". * New overrides are provided to allow for better customization around logfile retention and rate limiting for UDP/TCP sockets. "rsyslog_server_logrotation_window" defaults to 14 days "rsyslog_server_ratelimit_interval" defaults to 0 seconds "rsyslog_server_ratelimit_burst" defaults to 10000 * The rsyslog.conf is now using v7+ style configuration settings * The "swift_fallocate_reserve" default value has changed from 10737418240 (10GB) to 1% in order to match the OpenStack swift default setting. * A new option *swift_pypy_enabled* has been added to enable or disable the pypy interpreter for swift. The default is "false". * A new option *swift_pypy_archive* has been added to allow a pre- built pypy archive to be downloaded and moved into place to support swift running under pypy. This option is a dictionary and contains the URL and SHA256 as keys. * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. * When upgrading a Swift deployment from Mitaka to Newton it should be noted that the enabled middleware list has changed. In Newton the "staticweb" middleware will be loaded by default. While the change adds a feature it is non-disruptive in upgrades. * All variables in the security role are now prepended with "security_" to avoid collisions with variables in other roles. All deployers who have used the security role in previous releases will need to prepend all security role variables with "security_". For example, a deployer could have disabled direct root ssh logins with the following variable: ssh_permit_root_login: yes That variable would become: security_ssh_permit_root_login: yes * Ceilometer no longer manages alarm storage when Aodh is enabled. It now redirects alarm-related requests to the Aodh API. This is now auto-enabled when Aodh is deployed. * Overrides for ceilometer "aodh_connection_string" will no longer work. Specifying an Aodh connection string in Ceilometer was deprecated within Ceilometer in a prior release so this option has been removed. * Hosts running LXC on Ubuntu 14.04 will now need to enable the "trusty-backports" repository. The backports repo on Ubuntu 14.04 is now required to ensure LXC is updated to the latest stable version. * The Aodh data migration script should be run to migrate alarm data from MongoDB storage to Galera due to the pending removal of MongoDB support. * Neutron now makes use of Ubuntu Cloud Archive by default. This can be disabled by setting "neutron_uca_enable" to "False". * The "utility-all.yml" playbook will no longer distribute the deployment host's root user's private ssh key to all utility containers. Deployers who desire this behavior should set the "utility_ssh_private_key" variable. * The following variables have been renamed in order to make the variable names neutral for multiple operating systems. * nova_apt_packages -> nova_distro_packages * nova_spice_apt_packages -> nova_spice_distro_packages * nova_novnc_apt_packages -> nova_novnc_distro_packages * nova_compute_kvm_apt_packages -> nova_compute_kvm_distro_packages Deprecation Notes ***************** * Removed "cirros_tgz_url" and in most places replaced with "tempest_img_url". * Removed "cirros_img_url" and in most places replaced with "tempest_img_url". * Removed deprecated variable "tempest_compute_image_alt_ssh_user" * Removed deprecated variable "tempest_compute_image_ssh_password" * Removed deprecated variable "tempest_compute_image_alt_ssh_password" * Renamed "cirros_img_disk_format" to "tempest_img_disk_format" * Downloading and unarchiving a .tar.gz has been removed. The related tempest options "ami_img_file", "aki_img_file", and "ari_img_file" have been removed from tempest.conf.j2. * The "[boto]" section of tempest.conf.j2 has been removed. These tests have been completely removed from tempest for some time. * The "openstack_host_apt_packages" variable has been deprecated. "openstack_host_packages" should be used instead to override packages required to install on all OpenStack hosts. * The "rabbitmq_apt_packages" variable has been deprecated. "rabbitmq_dependencies" should be used instead to override additional packages to install alongside rabbitmq-server. * Moved "haproxy_service_configs" var to "haproxy_default_service_configs" so that "haproxy_service_configs" can be modified and added to without overriding the entire default service dict. * galera_package_url changed to percona_package_url for clarity * galera_package_sha256 changed to percona_package_sha256 for clarity * galera_package_path changed to percona_package_path for clarity * galera_package_download_validate_certs changed to percona_package_download_validate_certs for clarity * The "main" function in "dynamic_inventory.py" now takes named arguments instead of dictionary. This is to support future code changes that will move construction logic into separate files. * Installation of Ansible on the root system, outside of a virtual environment, will no longer be supported. * The variables "`galera_client_package_*`" and "`galera_client_apt_percona_xtrabackup_*`" have been removed from the role as Xtrabackup is no longer deployed. * The Neutron HA tool written by AT&T has been deprecated and will be removed in the Ocata release. Security Issues *************** * A sudoers entry has been added to the repo_servers in order to allow the nginx user to stop and start nginx via the init script. This is implemented in order to ensure that the repo sync process can shut off nginx while synchronising data from the master to the slaves. * A self-signed certificate will now be generated by default when HAproxy is used as a load balancer. This certificate is used to terminate the public endpoint for Horizon and all OpenStack API services. * Horizon disables password autocompletion in the browser by default, but deployers can now enable autocompletion by setting "horizon_enable_password_autocomplete" to "True". * The admin_token_auth middleware presents a potential security risk and will be removed in a future release of keystone. Its use can be removed by setting the "keystone_keystone_paste_ini_overrides" variable. keystone_keystone_paste_ini_overrides: pipeline:public_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service pipeline:admin_api: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service pipeline:api_v3: pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3 Bug Fixes ********* * This role assumes that there is a network named "public|private" and a subnet named "public|private-subnet". These names are made configurable by the addition of two sets of variables; "tempest_public_net_name" and "tempest_public_subnet_name" for public networks and "tempest_private_net_name" and "tempest_private_subnet_name" for private networks This addresses bug 1588818 (https://bugs.launchpad.net/openstack- ansible/+bug/1588818) * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "security_initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * Add architecture-specific locations for percona-xtrabackup and qpress, with alternate locations provided for ppc64el due to package inavailability from the current provider. * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * Logging within the container has been bind mounted to the hosts this reslves issue *1588051 <https://bugs.launchpad.net/openstack- ansible/+bug/1588051>_* * Removed various deprecated / no longer supported features from tempest.conf.j2. Some variables have been moved to their new sections in the config. * The standard collectstatic and compression process in the os_horizon role now happens after horizon customizations are installed, so that all static resources will be collected and compressed. * LXC containers will now have the ability to use a fixed mac address on all network interfaces when the option *lxc_container_fixed_mac* is set **true**. This change will assist in resolving a long standing issue where network intensive services, such as neutron and rabbitmq, can enter a confused state for long periods of time and require rolling restarts or internal system resets to recover. * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * An Ansible task was added to disable the "netconsole" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_netconsole" to "no". * In order to ensure that the appropriate data is delivered to requesters from the repo servers, the slave repo_server web servers are taken offline during the synchronisation process. This ensures that the right data is always delivered to the requesters through the load balancer. * The pip_install_options variable is now honored during repo building. This variable allows deployers to specify trusted CA certificates by setting the variable to "--cert /etc/ssl/certs/ca- certificates.crt" * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * Horizon deployments were broken due to an incorrect hostname setting being placed in the apache ServerName configuration. This caused Horizon startup failure any time debug was disabled. * Changed the way we name host containers groups in dynamic_inventory.py for a hostname from hostname_containers to hostname-host_containers to prevent failing in the case where containers groups have the same name as host containers when choosing hostnames inspired from containers group names. This change fixes the following bugs https://bugs.launchpad.net/openstack- ansible/+bug/1512883 and https://bugs.launchpad.net/openstack- ansible/+bug/1528953. * The ability to support login user domain and login project domain has been added to the keystone module. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1574000 # Example usage - keystone: command: ensure_user endpoint: "{{ keystone_admin_endpoint }}" login_user: admin login_password: admin login_project_name: admin login_user_domain_name: custom login_project_domain_name: custom user_name: demo password: demo project_name: demo domain_name: custom * LXC package installation and cache preparation will now occur by default only on hosts which will actually implement containers. * When upgrading it is possible for an old "neutron-ns-metadata- proxy" process to remain running in memory. If this happens the old version of the process can cause unexpected issues in a production environment. To fix this a task has been added to the os_neutron role that will execute a process lookup and kill any "neutron-ns- metadata-proxy" processes that are not running the current release tag. Once the old processes are removed the metadata agent running will respawn everything needed within 60 seconds. * Assigning multiple IP addresses to the same host name will now result in an inventory error before running any playbooks. * The nova admin endpoint is now correctly registered as "/v2.1/%(tenant_id)s" instead of "/v2/%(tenant_id)s". * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". * Deleting variable entries from the "global_overrides" dictionary in "openstack_user_config.yml" now properly removes those variables from the "openstack_inventory.json" file. See Bug * The "pip_packages_tmp" variable has been renamed "pip_tmp_packages" to avoid unintended processing by the py_pkgs lookup plugin. * The "repo_build" role now correctly applies OpenStack requirements upper-constraints when building Python wheels. This resolves https://bugs.launchpad.net/openstack-ansible/+bug/1605846 * The check to validate whether an appropriate ssh public key is available to copy into the container cache has been corrected to check the deployment host, not the LXC host. * Static route information for provider networks now *must* include the *cidr* and *gateway* information. If either key is missing, an error will be raised and the dynamic_inventory.py script will halt before any Ansible action is taken. Previously, if either key was missing, the inventory script would continue silently without adding the static route information to the networks. Note that this check does not validate the CIDR or gateway values, just just that the values are present. * The repo_build play now correctly evaluates environment variables configured in /etc/environment. This enables deployments in an environment with http proxies. * Previously, the "ansible_managed" var was being used to insert a header into the "swift.conf" that contained date/time information. This meant that swift.conf across different nodes did not have the same MD5SUM, causing "swift-recon --md5" to break. We now insert a piece of static text instead to resolve this issue. * The XFS filesystem is excluded from the daily mlocate crond job in order to conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing. * The "/var/lib/libvirt/qemu/save" directory is now a symlink to "{{ nova_system_home_folder }}/save" to resolve an issue where the default location used by the libvirt managed save command can result with the root partitions on compute nodes becoming full when "nova image-create" is run on large instances. * Aodh has deprecated support for NoSQL storage (MongoDB and Cassandra) in Mitaka with removal scheduled for the O* release. This causes warnings in the logs. The default of using MongoDB storage for Aodh is replaced with the use of Galera. Continued use of MongoDB will require the use of vars to specify a correct "aodh_connection_string" and add pymongo to the "aodh_pip_packages" list. * The "--compact" flag has been removed from xtrabackup options. This had been shown to cause crashes in some SST situations Other Notes *********** * "nova_libvirt_live_migration_flag" is now phased out. Please create a nova configuration override with "live_migration_tunnelled: True" if you want to force the flag "VIR_MIGRATE_TUNNELLED" to libvirt. Nova "chooses a sensible default" otherwise. * "nova_compute_manager" is now phased out. * The in tree "ansible.cfg" file in the playbooks directory has been removed. This file was making compatibility difficult for deployers who need to change these values. Additionally this files very existance forced Ansible to ignore any other config file in either a users home directory or in the default "/etc/ansible" directory. * Mariadb version upgrade gate checks removed. * The "run-playbooks.sh" script has been refactored to run all playbooks using our core tool set and run order. The refactor work updates the old special case script to a tool that simply runs the integrated playbooks as they've been designed. Changes in openstack-ansible 13.0.0..14.0.0 ------------------------------------------- 98303ce Update role SHAs for 14.0.0 2016-10-19 c8e38f0 [Docs] Fix the alignment f1e2070 Update role SHAs for 14.0.0 2016-10-18 e8aa2d2 Enable fixed mac address generation a40428a Add full path to inventory dffd265 updated Appendix H to C 97aa8ed Remove 'ignore_errors: true' in favor of 'failed_when: false' b973a7d [docs] Clarify the 'Network configuration' section fa21e2b Remove the rabbitmq deterministic sort f7adda9 Create log aggregation parent directory 93a7aa6 Add support for the Ceph storage driver in Gnocchi 9572ffd [docs] Provide example configurations 6bbb3d5 Prevent overlayfs use in test when kernel < 3.18 or release == trusty a0bfb6c [docs] Add network config example for test and prod a87ab1a Fix container log bind mount regression 2d558be Change the common proxy cache manage tasks to be stateful d5eb321 Configure Calico specific BIRD settings in OSA d2b7195 [DOCS] Update manual upgrade guide 9ef988a Set default keepalived cidr if none is provided 18de1b4 [Docs] Removed extra grave accent(`) 0d824ce Update role SHAs for 14.0.0 2016-10-12 8668096 Fix value for openstack_host_manage_hosts_file 83dc13e Use UCA for keepalived by default f3965d0 Add missing double quote 4664922 [DOCS] Edits to the target hosts chaps b021ad2 [docs] Add Introduction heading to Appendix B 04605ca [Docs] There was typo mistake dbef51e [docs] Alignment gets corrected d30a5e3 Ensure that repo_server/repo_build use same user:group 5aee4a3 Rename ironic database password during upgrades cfbd4f4 Set calico wheel name for py_pkgs lookup 7052150 [DOCS] Edits to installation chapter b268540 [Docs] RabbitMQ is an AMQP server ff436eb [Docs] Make the security note readable. a3dd33a Update role SHAs for 14.0.0 2016-10-07 410d915 [Docs] Fix space typo with effect on rendered page 36ab2b3 [Docs] Fix Ansible link 5d151d6 Update all SHAs for 14.0.0 2016-10-06 1375f8c [DOCS] Applies edits to the OSA install guide appendix C e6094c8 [DOCS] Applying edits to the OSA install guide: deployment host d02fd99 [DOCS] Applying edits to the OSA install guide: configure 786b31e [DOCS] Applies edits to the OSA install guide appendix D b638321 [DOCS] Edits to appendix E abc1526 [DOCS] Adjust watermark color 4928c37 [DOCS] Edits to appendix F 8d9601b [DOCS] Edits to appendix G 34efaf9 Update all SHAs for 14.0.0 2016-10-05 fe99dad [DOCS] Applies edits to the OSA install guide appendix B ca727cc [docs] Applying edits to the OSA install guide: overview 3c9d3d1 [DOCS] Applies edits to the OSA install guide appendix A bc3c32c Fix a few grammatical errors 539f8fc Checksum all traffic traveling though the bridges 8f4c0c4 [docs] Update Newton doc index 342e147 Revises yaml to YAML ad7231b [install-guide] Aligned properly at Test environment ac14d06 Update UPPER_CONSTRAINTS_FILE for stable/newton f709469 Update .gitreview for stable/newton 57fef57 Move base environment directory to an argument 1443268 Mock file system when testing duplicate IPs ca7df2f Use detailed arguments for main function 62028d0 [DOCS] Added release-name as a watermark to Docs. d98eb49 Change default log bind mount to be optional ee40a8a Fix CentOS Ansible bootstrap 195b505 Update all SHAs for 14.0.0 2016-09-27 1604bba Add sshd_config to the bootstrap AIO process b5806d7 Remove swift_repl|storage_address calculation b091fff Update the order of release note page 2d1ebb3 Add ironic_rabbitmq settings to group_vars/all.yml 41f42be Filter pre_release versions of packages 6a8a41c Log the ansible runtime report to a file 57baef2 Remove the redundant exit tasks from the gate 671a092 Reduce config file IO and date coupling in tests f94b2d4 Create complete AIO inventory config for tests 99b2747 Use lineinfile to add missing user secrets 0c8bd97 Update run-playbooks to support playbook logic e857c43 Add Ironic service info to group_vars/all.yml 83ce564 [docs] Minor edit to the install guide 51a134d Remove use of venv_enabled variables 8d711ae Add debug logging to dynamic inventory e279676 Force Ansible to use dynamic includes a981b31 Add files to .gitignore bd6a0d8 Add curl to utility distro packages 7ac2dd6 [DOC] Better clarification for container_interface in user_config. 350c061 Fix br-vlan port in multi-node bootstrap-host 18c9e1f Add export host option for inventory-manage script 773dc54 Fix deprecation warning for undefined variables f40ecde Update all SHAs for 14.0.0 5098998 Update AIO script to support ubuntu-ports 1b0f020 [docs] Add links to example configuration files 6e50d69 os_ironic mysql password variable not updated 504bffa Add Swift telemetry notification consumer to Ceilometer 10a7d80 [docs] Resolve errors and simplify sphinx config d980d26 Update testing bits for consistency 55de3ed [DOCS] Update to installation guide 5e3f0ba Remove search_regex from mariadb port check f904d75 Fix bootstrap-host authorized_key transfer for multi-nodes 1926e6e Run haproxy playbook earlier within upgrade script c8791e0 Move inventory management code to enable imports ce26d14 Remove repo-server-pip-conf-removal from upgrade script 51f4dec Define networking for Multi-node environments 7a70d25 Remove existing MariaDB HTTPS repos during upgrade 39280be [DOCS] Added dynamic content to Upgrade guide from conf.py 6496c66 Retain apt sources options during host bootstrap 3917510 [install-guide] remove redundant part for security hardening 2e7a2b8 [install-guide] complete commands in prepare target hosts bc8b321 Update all SHAs for Newton 2016-09-16 0bbf801 Modify use of assertTrue(A in B) 518fb38 Add lxc_host dynamic group to inventory. 867bf11 [DOCS] Added missing level info for haproxy_hosts ec2656e Aodh should inherit service_region 2c2fe6c Updated from global requirements 2ec74e9 load variables as a simple var for upgrades ecd81b9 Cleanup/standardize usage of tags in plays e7f37f9 Remove assumption that the neutron_lbaas var is set 27a41d1 [DOCS] Added HAProxy example to Production environment document. eff7914 Gnocchi identities created before Swift playbook f7a50a2 Implement scenario capability for AIO a29d5df Configure Ceilometer middleware for Gnocchi-Swift 968d893 [docs] Merge install guide configure content into a single page cc250b7 Ensure that gnocchi uses keystone authentication ab80b0a Fix log path option 863bedb [Docs] Add explanations about our bug triage process e588a52 Enable the opportunistic strategy eb55da0 Update all SHAs for Newton 2016-09-12 bceb1e1 Make the file name for user_secrets a variable 527e22f Correct Magnum issues found in AIO testing 5a878af Added the option to copy changes between stock env.d and repo env.d[M->N] 084fc69 Ensure file modes are 644 for inventory and group_vars for Magnum 1da4f02 [DOCS] Reorders ToC for upgrade guide cbc9234 Properly namespace cinder_storage_address 5be187d Add ansible_host to dynamic inventory 3978647 Enabled conversion of existing db and tables to utf8_general_ci [M->N] 64708ec Compress all gathered logs for CI 1083dc9 bump the keystone sha for changes to keystone 8cc0125 [docs] added a necessary arg for ansible command after removal of ansible.cfg d0448be [docs] Move all example configurations to Appendix 7c5f177 Add a doc example for yaml file overrides 3b6895b Move network_entry function to top level 0ba4f8b [docs] Minor edits to the overview chapter 128242a Derive the OpenStack service list from the service file eeaa433 Reduce the default fact gather subset e14d359 [docs] Replace 'Host Layout' with 'Service Architecture' 5cc5277 [docs] Split Network Architecture page 4f94bf7 Set file mode to 644 on os-magnum-install.yml a5a5bf8 Skip V-38471 for CI execution f4290c0 [Docs] Update security appendix 4f07ac6 [DOC]Added Xenial support in install guide 2d2b732 [docs] Revise Storage Architecture Overview 55b62e8 [DOCS] Renaming sections for install guide 28544d6 [DOCS] IA movement of the install guide 6b7e646 Ensure that repo build arch grouping always runs 4c18f3d Fixed assumed utility pip install for specific clients a06d93d [DOCS] Clarify is_metal is required if using iSCSI 3210274 Revert "Disable SSL use for RabbitMQ" c496fc5 Move storage diagrams 2e355b3 [DOCS] Rename upgrade documentation to upgrade guide 02ca69a [DOC]Added missing yml file and example for test and production environments. e2341fc Optimize and fix known container hosts group abec787 Move pip_lock_to_internal_repo to group_vars cf52fa7 Ensure tempest always has an Ansible config export 752c9c9 Revert role SHA pins for Newton RC prep 6bd8f3c Add vars for Swift telemetry settings 9096b0d Disable SSL use for RabbitMQ 8d3b3e2 [docs] Add storage diagrams 91032ef Enable Gnocchi and Aodh when inv groups non-empty 73ee3eb Address missing variable in common tasks 46b662d [DOCS] Moving the draft install guide to the install-guide folder 851ac18 Fix role SHA's for Newton-3 release 7669501 Fixed hosts inclusion when requiring the lxc_hosts role 5ee185e Ensure that the filters_path is correctly updated 992e616 Implement container bind mount for all logs 58e9c8d Fix deprecation warning for undefined variables a648951 Add RC source to scripts library 943676b Adding a playbook for deploying Sahara d651ed7 Unbound DNS resolution containers 981db90 Remove pip.conf during upgrade on all hosts c51fe9b Updated from global requirements 192efa5 [DOCS} Further edits, corrects to draft install 8be9f55 Update all SHAs for Newton 2016-08-25 29f29e6 Add Magnum deployment to setup-openstack playbook a889885 Updated from global requirements 75b3628 Support multiple rabbitmq clusters fe55aa2 DOC - note that stable/mitaka on Ubuntu works at most with 14.04 9767d12 Add the BGP dynamic routing neutron plugin 423c409 Remove the ansible.cfg file c89f277 Add play to deploy Rally to the utility containers cebce0c Project Calico integration 16bccd9 [DOCS] Add interface configuration content df49eeb [DOCS] Correcting the appendix letters 92ad610 Tell existing shell about upgraded pip f37351d DOC - remove quotation for code-blocks 6bcfc47 Removed variable changes table from the doc. 6f028ff Fix error when repo_build_git_cache is undefined 382f4be Set default/fix version numbers in upgrade script 8b2cdb3 Automatically detect whether to test all integrated roles 07123eb Fix wrong version of pip used in bootstrap b1483c8 Automatically detect whether to test ceilometer/aodh 5ec339c Automatically enable the cinder backup service ea7e218 Allow the repo-build to index utility pip packages 6a647d5 Remove security hardening toggle from AIO user_variables.yml 64c6307 Automatically set swift as the glance default store 704246d DOC - use 'shell-session' to render root user commands c4efadd [DOCS] Clean up of draft install guide adebdb8 Allow the use of a pre-staged git cache ac35c1d [DOCS] Remove ceph and HAProxy from dev docs ecf73b3 Move ceph_client and haproxy_server to IRR 31280a3 Make all linting tests use upper-constraints 5f396dd Loopback cinder image must insert before exit 0 2683082 Updated from global requirements f7babef Implement inventory API docs 0103e0d Set a long package cache timeout for OpenStack-CI 89f088e Add aodh-api init removal upgrade docs and script d68e65b Add an inventory config check option 9d8177f Update all SHAs for Newton 2016-08-15 b32b5d5 Support pulling architecture-tagged venv artifacts ebc9af1 Remove old inventory conditional support 4049357 Reduce minimum data disk size for the AIO to 50GB 8d2caac Restrict Ansible fact gathering to base subset 45b9642 Limit LXC hosts playbook to container hosts only 2f87f8c Robust base dir support for bootstrapping 49c303a Create config test base class 619b40c Print remaining tasks on failed upgrade correctly abc1663 Add ability to change apt/yum package state globally 07ef158 [docs] fix invalid hyperlink in overview-security.rst 36cd1de [DOC] Add cinder service when cleaning up aio host 28b1fc7 [docs] fix a link in overview-host-layout.rst 199e33c [DOCS] Updates to deploy config f87b141 [DOCS] Update gate job names d493444 [DOCS]Edited the path to installation workflow diagram in install-guide-draft b5dc44c [DOCS] Removing and moving nova and neutron docs ab887ee Include python requirements to resolve SNI issue for Ansible venv b6d9220 Remove "optional" in the o_u_c example for repos 0d1c6ec Fix deprecation warning for ceph_client role. 12d4c7e Do not discard when creating XFS loopback 0461d79 Adding Magnum-UI Horizon support 55de7dd Move package cache configuration to common tasks 627429b [DOCS] Add storage architecture information 7146e82 Relocate Swift configuration docs to os_swift role e9dd96e [DOC] Added automatic fetched latest tags. 57ea99a [DOCS] Ensuring deploy-config accurately reflects changes c278267 [DOCS] Delete horizon docs 085e57d Enable Gnocchi by default 412b863 [DOCS] Delete ceilometer and aodh dev docs 6e432e8 Fix keepalived sync groups var name 19d9064 Remove SSL protocol/cipher from AIO user_variables.yml 5aa7998 Add haproxy_service_enabled boolean 162f530 Add ability to change apt/yum package state for the ceph_client role 62bcac9 Add ability to change apt/yum package state for the haproxy_server role e18c636 Split package update/install commands ab3a192 [DOCS] Remove apt proxy when rebuilding AIO 9b314bf Move other-requirements.txt to bindep.txt e9e79a6 Manual upgrade doc fix 108ea96 Add discovery and build for multiple CPU architectures b921676 [DOC] Modified conf.py to fetch the latest tag automatically 32b0b54 [DOCS] Remove ops-logging Doc 343d9d6 [DOCS] Remove and move keystone federation documentation bc7b0a7 [DOCS] Move RabbitMQ configuration info 2e53019 [DOCS] Fix the appendix order 656543d Ensure that the LXC container log is also destroyed b19f783 [Docs] Remove and move cinder config docs 783ad41 [DOCS] Remove and move ironic role docs 90884cd [DOCS] Remove and move glance documentation 37e7700 Adding support for Magnum c69c031 [docs] Revise deployment host and target hosts chapter d95eaf5 Add test for setting existing used IPs. 6535ec3 Disable V-38660 for OpenStack-CI 233eb80 Refactor "get_instance_info" gathering d3e5487 Fix incorrect operations link in run-playbooks.sh 5dc89d8 Do not override Horizon ServerName in playbook 6cb3b1e Updated from global requirements fd690e1 Better control of mariadb restarts in upgrades 6ae2266 Docs: Minor security overview update 85fde9f [DOCS] - Cleanup Telemetry docs c69a07c [docs] Move ops content and fix build errors 5bf8c53 Update all SHAs for Newton 2016-08-01 b2629de Define retries on ceph keyring fetch task 6c7c870 Remove return_netmask function c790092 Docs: Enabling LBaaSv2 horizon panel 5cc9d0b [docs] Revise deployment configuration chapter a2ed5c3 [docs] Edit the installation chapter 59bdfb9 Add options to allow for selective git clone 17db059 Add SNI support via OS/python packages cf875c8 Update Ansible pin to v2.1.1.0 f2f280b Update the home-page info with the developer documentation d3f240e [docs] Modify host layout diagrams 48ed46e Add Horizon Ironic dashboard plugin 24403e7 Add openrc_region_name to define the service region for openrc files. ccb1036 Added docs for removing compute host 2d965dc Add SNI support via OS packages b52c21e [docs] Remove duplicated content 2c20e5f Revert role SHA pin for Newton-3 development 4cbd2f4 Restore telemetry service deployment d2a2b72 Confirm container data destroys 767662b Fix get_url SNI issues in CentOS 7 9137874 Allow empty container dicts in env overrides 30c0ca3 Add nova-lxd virt driver git repo c9925be Enable the use of a package manager cache a4c836c Fix override of ANSIBLE_PACKAGE variable b3def9d Update all SHAs for Newton 2016-07-27 dcfdc93 Fix role SHA's for Newton-2 release b8b1491 If /var/log/lxc exists, move it to the log aggregation parent 99ffcf3 Implement git server HAP backend 2b422db [DOCS] Fix up validation failures e3526a8 Fix distribution detection in bootstrap e481744 Remove pip_install role execution from RabbitMQ playbook 9812d6d Fix deprecation warning for undefined variables ae8bc70 Address Ansible bare variable usage a7884ba Move UCA repo URL var to role defaults 95adb62 Optimise pip install tasks 413151f Change pip install task state to 'latest' 3fa780d Move LXC AppArmor profile setting to the inventory ade366a Disable ansible retry files 48eedc7 Remove callback plugins 8f1b33d Update the sources-branch-updater 993515c Fix 'D000: Check RST validity' documentation lint failures 30dacdf Dynamically determine whether ceilometer should be enabled c54736f Removing the infra_hosts and infra_containers groups e2663c6 Support other architectures in apt sources.list 6bf159f Move LXC logs to /openstack/log ed4bc6b Add CentOS7 support to the utility playbook 7b75c22 Updated from global requirements 91deb13 Cleanup/standardize common tasks 5455543 Moving neutron play vars to the group_vars for neutron e37f524 Test LBaaSv2 in AIO 43f585a Support for Open vSwitch Distributed Virtual Routing e6ad4cf Update all SHAs for Newton 2016-07-20 5510103 Implement overlayfs as the backing store for the AIO 88ae508 Install Ansible from pypi instead of from a git clone 5c4d8b2 [DOCS] Update 'Practice B' with note e9f6acc Fix 'D001 Line too long' documentation lint failures a982e3a [DOCS] Adding storage arch to install guide draft 8af2c12 Add other-requirements.txt 60bad86 Change requirements pin method 47bd970 Updated from global requirements 7836911 Resolve 'E501 line too long' linters error 4709455 Ensure that gate test does not remove ~/.ansible/tmp 439831f [DOCS] Adding in note for pretend_min_part_hours_passed 9427a99 [DOCS] Clarify variable usage in global_overrides 24e63ab Fix 'D001 Line too long' documentation lint failures 3ef1297 Fix tox functional test 68d68c2 Remove os-detection script 63b4989 Update mongodb bootstrap tasks d312147 Removed the default pip install options from upgrade.sh 63012f0 Add upgrade playbook to update database collations 8e9b800 Added git package to the utility container 98e77ca Remove excessive tags 7518743 Adding requests to bootstrap ansible 57fa0b9 Decouple galera client role from OSA inventory groups 0304137 Docs: Implement Manuals Theme and doc8 checks 89d82b0 Fix 'D002 Trailing whitespace' doc errors 14f6650 Introduce a playbook for deploying Gnocchi 31e6cd0 Remove pip_lock_down requirement 430cb36 [DOCS] PIP install via deployment host 8fb6a3b Fix skipping Ceph client linking a146b7a Document env.d changes in install guide 35c4b55 Fix Neutron local_ip fallback 08beb6f glance_api_servers must contain a valid url with protocol 8d73290 Fail Fast when trying to upgrade with LBaaS v1 enabled bb2d4ad [docs] Remove duplicated content in the current install guide f870707 Doc: Update documentation for lxc_net_mtu config 255de98 Update tox configuration cba8bd5 Document swift in the host layout section 8a49b0c Remove aodh vars present in group_vars 3403f05 Remove duplicate exit_early execution 693911d HAProxy extra endpoints b511791 HAProxy: configure either novnc or spice 7b288ea Use in-tree env.d files, provide override support 523822b Fix memcached flush if -l is in hostname 976d62f Remove cinder vars present in group_vars 5c31795 Remove ceilometer vars present in group_vars a4053a9 [docs] Revise overview chapter in OSA install guide 2a03ba0 Enable OpenStack-Infra Ubuntu Cloud Archive mirror 59e5a7c Define galera_address in the all group_vars 8972dec [docs] Address tox errors dff646c Remove _net_address_search from dynamic inventory 3b51d07 Fix HAProxy config and install version when ssl is disabled d524386 Flush memcached on first listen IP only 4a7e954 Confirm container destroys 912de0f Make pip_lock_to_internal_repo a playbook var 42f1e4b DOC - Fix YAML format in cidr_networks example e84cc94 Remove references to unused heat vars fe9fc36 Trivial typo fixes to dynamic_inventory.py 9be0662 Refactor run-playbooks 23708a6 Docs: Enable LBaaS v2 Horizon panel a471cbc Removing duplicate gather_facts in playbooks e46c1c5 Enable human readable logging fbac5f8 [docs] Fix build errors cc7bd49 Change USED_IPS variable to a Python set 2321424 Address Ansible bare variable usage 97eb3b3 Remove remaining container_release properties 6ac4aa1 Ignore Ansible .retry files 4aa13d4 DOC - Remove instructions to run haproxy-install.yml play 5f06376 Fix typos in openstack-ansible/doc ad69389 Update lists of skipped security role tasks a232676 Gate: Restrict Ansible fact gathering to base subset 2a5a2a1 Add an easy way to run cmds in utility container 7b2a995 Disable root private key distribution by the utility playbook d3f7e80 Remove libvirt bootstrapping from AIO b8802f5 Add conditional for overlay network settings f68bebd Auto-enable Ceilometer + Aodh integration bdb856c [docs] Migrate ops and appendix content effa83d Fix keystone DB Access variable f426eb9 Remove deleted override vars from inventory 53bb55d Ensure that AIO extra indexes config is well formed 875c5e4 [docs] Revise upgrade guide structure 19ac766 Address Ansible bare variable usage f5b39a0 Docs: Fix missing instructions for newton manual upgrades ade33a3 Temporarily disable UCA usage in OpenStack-CI fe60f1e Add release file prep script e5622ad Speed up gate: avoid gathering facts more than necessary 238257b [docs] Migrate deployment configuration options 5db330d Configuring AODH DB now that it uses MySQL. 4402fd3 Docs: Add role development maturity guidelines e679951 Actually remove Ironic container creation from AIO preparation 3fafd24 DOC - fix links in upgrade-playbooks 49c5d1d [docs] Add draft install guide directory d59a2ff Reduce and organize group vars 1133ea8 Remove the AIO metadata checksum fix from run-playbooks 4970801 DOC - Adjust tag usage instructions for VPNaaS 18d4350 Switch Ironic role repo to use git.o.o 07357dd Remove Ironic container creation from AIO preparation 12ba130 Extract and test inventory and backup I/O 7c8533a DOC add note about building AIO more than once f479a21 Do not use cpu_map_update.py anymore 16c0193 change host_containers group names in inventory 06e5aba Revert to test role master branches for Newton-2 development bb69b66 Update all SHAs for Newton-1 2016-06-02 810e0a7 Use combined pip_install role dbdc1c7 Update ansible to version 2.1 3d62933 Consistency for multi-os in the includes d790aa8 DOC New Appendix - custom component layouts 1d29082 RFC1034/5 hostname upgrade e31dee1 Remove AIO cache resolver configuration b5b2bb9 Add RabbitMQ mgmt UI through HAProxy b3683de Remove unneeded playbook vars bd33008 Clarify static route requirements check 729c06c Correct nova admin endpoint version e32d850 Note to deployers overriding MTUs 246d10e DOCS: Clarify guidance for deploy hosts 4303174 Cleanup horizon vars in hosts.yml 8ae5127 Update HAProxy for multi-OS support f7369d9 lxc_cache_resolvers [u'nameserver1',u'nameserver2'] fixing 1211668 [DOCS] Adding missing kernel modules for VPNaaS c904de2 Isolate Ansible from the deployment host 3bb1c40 DOCS: Clean up of the Newton upgrade guide 7f70ca7 Set AIO to use an OpenStack-Infra wheel mirror 4b051d7 Test _ensure_inventory_uptodate function 7ebe085 Reduce reliance on global state for testing 5a1bf48 Ensure all role dependencies are consistently specified 96443f5 Automatically enable neutron ha router capabilities b4f5e13 Expose upgrade guide in base index 86fbc79 Add tests for the _net_address_search function 894e0c4 Test static route settings 213d028 Create ceph python library symlinks 30c59b2 Updates all SHAs for Newton 2016-05-19 96d0dd0 Added option to set the role fetch mode d49494b Add nova-powervm repo for initial PowerVM support b15363c Remove paramiko restriction 69f60a8 Remove AIO container cache apt configuration edee94d Change to using ANSIBLE_FORKS and update related tip 25bb84a Ignore the .coverage temp file 085c31d Bump swift SHA c52755e Docs: Add note about slow galera recovery 59694c7 Network service docs cleanup 6a61321 Add docs for LBaaSv2 Horizon panels 0cdaa5c Various fixes to the proxy default conf and doc 2f81ec1 Updated the link as per comments 6e9db90 Verbose option has been deprecated from oslo.log 0984490 Fix install guide link in contributor guide a372277 Docs: Add note about releasenotes local build fbd1f3f Docs: Troubleshooting info for 3.13 kernel upgrade 602ddac DOC - AIO build expected to be performed as root user 3e4c9df Docs: Cross ref local tests on contribution guide f0c46ca Docs: Document SSH key exchange for Ceph client a44d075 Docs: Fix bulleted lists and spacing 3a0523a DOC: Change swift mountpoint to /srv/node 12d9ef2 Docs: Update Liberty & Mitaka release status a88778f Initial commit to enable mitaka>newton upgrades 601487b Add documentation guidance to the contributor guide 45d5ee5 Refactor ceph_client for multi-OS and ceph 0d3b531 Document the Release Notes build 28340ab DOCS: Deployment host section - cleanup 71554ca DOCS: Configuration section - cleanup cff6ea0 Added the DB and DB user create to the plays 1124a5e Test inventory backup file creation bb5b306 Doc: Correct the note about the LXC host ssh key check e78c9e3 DOCS: Configuration section - cleanup 02f8d3d Test and refactor argument parsing 8b6fb77 DOC - Removing incorrect doc about installation workflow 8399965 Check for two IP addresses assigned to same host dfc642c Docs: Mandatory ssh public key 6be15b8 Isolate Ansible bootstrap from repo servers 60247f2 Add group vars to prep for os_tempest role changes 8e663d7 Add neutron_openvswitch_agent to env.d files 2f45772 Revert "Fix container hostname for RFC 1034/1035" 21c2478 install rabbitmq-server in serial 349e134 DOCS - Installation with limited network connectivity 9a2df7c Mention of the supported locales in the documentation 4b84a8c Use task state instead of output to create haproxy log directory 87e32dc Automatically increment the patch ver with sources-branch-updater 7e8d629 Doc: Configuring the network refactor 55155f3 DOCS: Configuration section - cleanup 0086227 Doc: Configuring the network on target refactor c441849 Ensure that the sources-branch-updater updates the Ironic role 32fd0e7 Fix dynamic_inventory.py test bug a0bceb9 Removed container_release property from environment files 12f0c68 Doc: Notice to disable security hardening role during minor upgrades 4330b4c DOC - Adding footer to Nuage Appendix doc 18ddf7b Add .swp files to .gitignore d80d6f9 Make tox use python2.7 more specifically eee35cc Build wheel for neutron-lbaas-dashboard e971e15 Integrated updates after the multi-distro changes 6bcb3d1 Add release note for paramiko issue workaround afc9ec9 Docs: Appendix section - cleanup 7a82904 Docs: Ops section - cleanup 89963f6 Docs: Installation section - cleanup 2703e4b Docs: Target hosts section - cleanup 3a5672b Check for IP addresses assigned to multiple hosts 5443833 Docs: Overview section - cleanup 51441fe Disable security role during major upgrades 1b4550b Add dependencies for paramiko 2.0 2c5edcf Docs: Clean up multiple make html warnings ef347ab Remove unused var pip_no_index 5a931c7 Add error test coverage and adjust test setup 0cf2c9b Fix typo in overview-hostlayout.rst 2a2ad3a Remove teardown.sh and update related docs 92eb98e Enable SSL termination for all services c361fae Improved logging for memcached (OSA calling part) dbcfdec Add docs for limiting access to services 34ddd52 Fix LBaaSv2 neutron_plugin_base entry in docs e22641a Execute rabbitmq sorts for config tags 909bf76 Set test python executable to python2 644c57b Docs: Update PLUMgrid neutron services dict override 3107fdd Docs: Cleanup page to configure to docs standards 43ff983 [User Guides] Link Updates - openstack-ansible 2fc728d Update Newton SHA's 2016-04-22 72c593c Add docs for HAProxy ping checks 8387b68 Change keystone admin/internal insecure flags e8ae4cb Update sources-branch-updater to handle release note copying 608640c Add missing line number report, fix coverage dep ebdff9e DOCS: Update aio docs for Mitaka edda55e Docs: Split Network Services section into multiple files 7280c90 Docs: Add pip configuration removal to AIO re-deployment process aa1f09f [DOCS] Adding Ironic configuration docs to Ansible install guide b50a190 Nuage Neutron Plugin OSA Install guide 2ffb776 Change keystone admin/internal insecure flags 928e907 Refactor main inventory function for testability 559d2dc Add coverage reporting to inventory testing 9a737ad Fix container hostname for RFC 1034/1035 27e65b2 DOC - Adding warning about changing passwords/secrets ca73998 Add option to auto enable from VPNaaS in Horizon dfe4f10 Docs: Change invalid reference to FWaaS in VPNaaS documentation ae99efd Adding modularity to keepalived configuration 5fceb78 Added horizon documentation section for cinder bb1db35 Doc: Improved documentation about LVM overwrite behaviour f8c30f0 make hostname,network and ip-address on all examples consistent 4604950 blacklist Ansible 1.9.6 0d9530c Add `ironic_swift_temp_url_secret_key` the secrets 60603c3 Adjust ansible-role-requirements-editor file open options 12555d7 ceph configuration for nova glance and cinder 2d82d41 Move inventory environment loading to function fac5030 Update source-branch-updater to work with IRR's 35ed804 Add installation support for os_ironic 12a3fba Fixing keepalived bug when 2+ backup nodes have the same priority fa7218d Minor fix to correct passive to active voice 13de5ff Fix idempotency bug in AIO bootstrap a2c1d8c Fix configuration string for haproxy 4f3b266 Refactor user config loading into function f56c9c6 Modify the haproxy play for ansible2 compat 6d3eea3 Add project scoped token when obtaning token 2288151 Add convenience links for install workflow doc dde53b1 Add tempest_log_dir variable b6a5c9a Apply host security hardening by default d87fdf2 Specify allocation pool for public subnet cc416a1 Doc index update bb61cc0 Add debug and verbose to user variables 6485728 Add trusty_backports note to requirements beafa5b Add Ceilometer instructions to new compute node instructions 36a8151 Update documentation index page 1cc4c11 Set SHA's for master to OpenStack master SHA's 4317c3e Update reno for stable/mitaka 4e5e52a set up the unreleased page for reno d72e3a6 Fix typo in swift.yml.example file 6eb3c34 Ensure the OpenStack gate has access to the logs 797dbb6 Remove hard-coded pip indexes from repo-build playbook fa063b9 removed duplicate key 6f9ef5f Set lxc_container_caches not to use repo_pip_default_index 496bc49 Removing unneeded is_metal param from user_defined_setup 00207d3 Include security role in setup-hosts.yml Diffstat (except docs and test files) ------------------------------------- .gitignore | 16 +- .gitreview | 2 +- ansible-role-requirements.yml | 154 ++-- bindep.txt | 23 + .../installation-hosts-limited-connectivity.rst | 182 ++++ .../developer-docs/ops-remove-computehost.rst | 51 ++ .../install-guide/app-advanced-config-affinity.rst | 50 ++ .../install-guide/app-advanced-config-options.rst | 15 + .../install-guide/app-advanced-config-override.rst | 267 ++++++ .../install-guide/app-advanced-config-security.rst | 39 + .../app-advanced-config-sslcertificates.rst | 141 +++ .../install-guide/app-advanced-role-docs.rst | 92 ++ .../install-guide/configure-cinder-backup.rst | 79 -- .../configure-configurationintegrity.rst | 29 - .../configure-federation-idp-adfs.rst | 42 - .../install-guide/configure-federation-idp.rst | 77 -- .../install-guide/configure-federation-mapping.rst | 168 ---- .../configure-federation-sp-overview.rst | 60 -- .../install-guide/configure-federation-sp.rst | 124 --- .../configure-federation-use-case.rst | 298 ------- .../install-guide/configure-federation-wrapper.rst | 78 -- .../install-guide/configure-network-services.rst | 191 ----- .../install-guide/configure-sslcertificates.rst | 137 --- .../install-guide/configure-swift-config.rst | 328 ------- .../install-guide/configure-swift-devices.rst | 106 --- .../install-guide/configure-swift-glance.rst | 70 -- .../install-guide/configure-swift-overview.rst | 23 - .../install-guide/configure-swift-policies.rst | 51 -- .../figures/arch-layout-production.png | Bin 0 -> 217767 bytes .../figures/arch-layout-production.svg | 3 + .../install-guide/figures/arch-layout-test.png | Bin 0 -> 220515 bytes .../install-guide/figures/arch-layout-test.svg | 3 + .../install-guide/figures/arch-layout.graffle | Bin 0 -> 6161 bytes .../install-guide/figures/environment-overview.png | Bin 72806 -> 0 bytes .../installation-workflow-configure-deployment.png | Bin 0 -> 49639 bytes .../installation-workflow-deploymenthost.png | Bin 0 -> 48857 bytes .../figures/installation-workflow-overview.png | Bin 0 -> 46557 bytes .../installation-workflow-run-playbooks.png | Bin 0 -> 48037 bytes .../figures/installation-workflow-targethosts.png | Bin 0 -> 48201 bytes .../installation-workflow-verify-openstack.png | Bin 0 -> 50368 bytes .../figures/installation-workflow.graffle | Bin 0 -> 2583 bytes .../figures/production-storage-cinder.png | Bin 0 -> 102217 bytes .../production-storage-cinder.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-cinder.svg | 3 + .../figures/production-storage-glance.png | Bin 0 -> 87006 bytes .../production-storage-glance.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-glance.svg | 3 + .../figures/production-storage-nova.png | Bin 0 -> 84263 bytes .../figures/production-storage-nova.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-nova.svg | 3 + .../figures/production-storage-swift.png | Bin 0 -> 108150 bytes .../figures/production-storage-swift.svg | 3 + .../figures/production-storage.graffle/data.plist | Bin 0 -> 8497 bytes .../figures/production-storage.graffle/image3.wmf | Bin 0 -> 19378 bytes .../install-guide/figures/production-storage.svg | 3 + .../figures/workflow-configdeployment.png | Bin 29232 -> 0 bytes .../figures/workflow-deploymenthost.png | Bin 28635 -> 0 bytes .../figures/workflow-foundationplaybooks.png | Bin 29126 -> 0 bytes .../figures/workflow-infraplaybooks.png | Bin 29198 -> 0 bytes .../figures/workflow-openstackplaybooks.png | Bin 28949 -> 0 bytes .../install-guide/figures/workflow-overview.png | Bin 26878 -> 0 bytes .../install-guide/figures/workflow-targethosts.png | Bin 28892 -> 0 bytes .../install-guide/install-infrastructure.rst | 96 --- .../overview-service-architecture.rst | 122 +++ .../install-guide/targethosts-networkconfig.rst | 26 + .../install-guide/targethosts-networkexample.rst | 166 ---- .../install-guide/targethosts-networkrefarch.rst | 140 --- .../upgrade-guide/reference-upgrade-playbooks.rst | 125 +++ .../interfaces.d/openstack_interface.cfg.example | 123 --- .../openstack_interface.cfg.prod.example | 132 +++ .../openstack_interface.cfg.test.example | 94 ++ etc/openstack_deploy/conf.d/ceilometer.yml.example | 7 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 16 + etc/openstack_deploy/conf.d/glance.yml.aio | 4 + etc/openstack_deploy/conf.d/gnocchi.yml.aio | 19 + etc/openstack_deploy/conf.d/heat.yml.aio | 4 + etc/openstack_deploy/conf.d/horizon.yml.aio | 4 + etc/openstack_deploy/conf.d/ironic.yml.aio | 4 + etc/openstack_deploy/conf.d/keystone.yml.aio | 4 + etc/openstack_deploy/conf.d/magnum.yml.aio | 3 + etc/openstack_deploy/conf.d/magnum.yml.example | 8 + etc/openstack_deploy/conf.d/neutron.yml.aio | 5 + etc/openstack_deploy/conf.d/nova.yml.aio | 8 + etc/openstack_deploy/conf.d/sahara.yml.aio | 16 + etc/openstack_deploy/conf.d/swift.yml.example | 8 +- etc/openstack_deploy/conf.d/unbound.conf.aio | 3 + etc/openstack_deploy/conf.d/unbound.conf.example | 8 + etc/openstack_deploy/env.d/aodh.yml | 35 - etc/openstack_deploy/env.d/ceilometer.yml | 60 -- .../env.d/cinder-volume.yml.container.example | 12 + etc/openstack_deploy/env.d/cinder.yml | 79 -- .../env.d/extra_container.yml.example | 2 - etc/openstack_deploy/env.d/galera.yml | 32 - etc/openstack_deploy/env.d/glance.yml | 36 - etc/openstack_deploy/env.d/haproxy.yml | 39 - etc/openstack_deploy/env.d/heat.yml | 51 -- etc/openstack_deploy/env.d/horizon.yml | 31 - etc/openstack_deploy/env.d/infra.yml | 22 - etc/openstack_deploy/env.d/keystone.yml | 40 - etc/openstack_deploy/env.d/memcache.yml | 31 - etc/openstack_deploy/env.d/neutron.yml | 74 -- etc/openstack_deploy/env.d/nova.yml | 113 --- etc/openstack_deploy/env.d/os-infra.yml | 22 - etc/openstack_deploy/env.d/pkg_repo.yml | 39 - etc/openstack_deploy/env.d/rabbitmq.yml | 31 - etc/openstack_deploy/env.d/rsyslog.yml | 39 - etc/openstack_deploy/env.d/shared-infra.yml | 22 - etc/openstack_deploy/env.d/swift-remote.yml | 40 - etc/openstack_deploy/env.d/swift.yml | 81 -- etc/openstack_deploy/env.d/utility.yml | 31 - etc/openstack_deploy/openstack_user_config.yml.aio | 46 +- .../openstack_user_config.yml.example | 86 +- .../openstack_user_config.yml.prod.example | 282 ++++++ .../openstack_user_config.yml.test.example | 144 ++++ etc/openstack_deploy/user_secrets.yml | 35 +- etc/openstack_deploy/user_variables.yml | 40 +- .../user_variables.yml.prod.example | 9 + global-requirement-pins.txt | 16 +- playbooks/ansible.cfg | 24 - playbooks/common-tasks/mysql-db-user.yml | 36 + playbooks/common-tasks/os-log-dir-setup.yml | 42 + playbooks/common-tasks/os-lxc-container-setup.yml | 128 +++ playbooks/common-tasks/package-cache-proxy.yml | 49 ++ playbooks/common-tasks/rabbitmq-vhost-user.yml | 36 + playbooks/defaults/repo_packages/gnocchi.yml | 38 + playbooks/defaults/repo_packages/nova_consoles.yml | 39 + .../defaults/repo_packages/openstack_other.yml | 43 - .../defaults/repo_packages/openstack_services.yml | 104 ++- .../defaults/repo_packages/openstack_testing.yml | 39 + playbooks/defaults/repo_packages/projectcalico.yml | 23 + playbooks/etcd-install.yml | 31 + playbooks/galera-install.yml | 65 +- playbooks/haproxy-install.yml | 119 +-- playbooks/inventory/dynamic_inventory.py | 601 +++++++++---- playbooks/inventory/env.d/aodh.yml | 34 + playbooks/inventory/env.d/ceilometer.yml | 57 ++ playbooks/inventory/env.d/cinder.yml | 75 ++ playbooks/inventory/env.d/galera.yml | 40 + playbooks/inventory/env.d/glance.yml | 44 + playbooks/inventory/env.d/gnocchi.yml | 41 + playbooks/inventory/env.d/haproxy.yml | 38 + playbooks/inventory/env.d/heat.yml | 58 ++ playbooks/inventory/env.d/horizon.yml | 39 + playbooks/inventory/env.d/ironic.yml | 64 ++ playbooks/inventory/env.d/keystone.yml | 38 + playbooks/inventory/env.d/magnum.yml | 39 + playbooks/inventory/env.d/memcache.yml | 39 + playbooks/inventory/env.d/neutron.yml | 80 ++ playbooks/inventory/env.d/nova.yml | 115 +++ playbooks/inventory/env.d/os-infra.yml | 22 + playbooks/inventory/env.d/pkg_repo.yml | 38 + playbooks/inventory/env.d/rabbitmq.yml | 39 + playbooks/inventory/env.d/rsyslog.yml | 38 + playbooks/inventory/env.d/sahara.yml | 38 + playbooks/inventory/env.d/shared-infra.yml | 22 + playbooks/inventory/env.d/swift-remote.yml | 39 + playbooks/inventory/env.d/swift.yml | 77 ++ playbooks/inventory/env.d/unbound.yml | 36 + playbooks/inventory/env.d/utility.yml | 39 + playbooks/inventory/group_vars/all.yml | 425 ++++++++- playbooks/inventory/group_vars/all_containers.yml | 24 +- playbooks/inventory/group_vars/aodh_all.yml | 20 + playbooks/inventory/group_vars/ceilometer_all.yml | 29 + playbooks/inventory/group_vars/cinder_all.yml | 28 + playbooks/inventory/group_vars/cinder_volume.yml | 17 + playbooks/inventory/group_vars/galera_all.yml | 19 + playbooks/inventory/group_vars/glance_all.yml | 23 + playbooks/inventory/group_vars/gnocchi_all.yml | 29 + playbooks/inventory/group_vars/haproxy_all.yml | 20 + playbooks/inventory/group_vars/heat_all.yml | 20 + playbooks/inventory/group_vars/horizon_all.yml | 34 + playbooks/inventory/group_vars/hosts.yml | 279 +----- playbooks/inventory/group_vars/ironic_all.yml | 21 + playbooks/inventory/group_vars/keystone_all.yml | 23 + playbooks/inventory/group_vars/magnum_all.yml | 28 + playbooks/inventory/group_vars/memcached.yml | 19 + playbooks/inventory/group_vars/neutron_agent.yml | 20 + playbooks/inventory/group_vars/neutron_all.yml | 24 + .../group_vars/neutron_calico_dhcp_agent.yml | 99 +++ playbooks/inventory/group_vars/nova_all.yml | 23 + playbooks/inventory/group_vars/rabbitmq_all.yml | 22 + playbooks/inventory/group_vars/repo_all.yml | 47 + playbooks/inventory/group_vars/rsyslog.yml | 19 + playbooks/inventory/group_vars/sahara_all.yml | 17 + playbooks/inventory/group_vars/swift_all.yml | 27 + playbooks/inventory/group_vars/utility_all.yml | 54 ++ playbooks/lxc-containers-create.yml | 9 +- playbooks/lxc-containers-destroy.yml | 39 +- playbooks/lxc-hosts-setup.yml | 35 +- playbooks/memcached-install.yml | 44 +- playbooks/openstack-hosts-setup.yml | 5 +- playbooks/os-aodh-install.yml | 95 +- playbooks/os-ceilometer-install.yml | 103 +-- playbooks/os-cinder-install.yml | 201 ++--- playbooks/os-glance-install.yml | 162 ++-- playbooks/os-gnocchi-install.yml | 70 ++ playbooks/os-heat-install.yml | 134 +-- playbooks/os-horizon-install.yml | 86 +- playbooks/os-ironic-install.yml | 63 ++ playbooks/os-keystone-install.yml | 172 ++-- playbooks/os-magnum-install.yml | 64 ++ playbooks/os-neutron-install.yml | 187 ++-- playbooks/os-nova-install.yml | 181 ++-- playbooks/os-rally-install.yml | 34 + playbooks/os-sahara-install.yml | 74 ++ playbooks/os-swift-install.yml | 164 +--- playbooks/os-swift-setup.yml | 156 ---- playbooks/os-swift-sync.yml | 5 +- playbooks/os-tempest-install.yml | 16 +- playbooks/rabbitmq-install.yml | 73 +- playbooks/repo-build.yml | 102 ++- playbooks/repo-server.yml | 87 +- playbooks/roles/ceph_client/defaults/main.yml | 89 -- playbooks/roles/ceph_client/handlers/main.yml | 25 - playbooks/roles/ceph_client/meta/main.yml | 6 - playbooks/roles/ceph_client/tasks/ceph_all.yml | 43 - playbooks/roles/ceph_client/tasks/ceph_auth.yml | 151 ---- playbooks/roles/ceph_client/tasks/ceph_config.yml | 61 -- .../roles/ceph_client/tasks/ceph_get_mon_host.yml | 40 - playbooks/roles/ceph_client/tasks/ceph_install.yml | 47 - .../roles/ceph_client/tasks/ceph_preinstall.yml | 77 -- playbooks/roles/ceph_client/tasks/main.yml | 29 - .../ceph_client/templates/ceph.client.keyring.j2 | 2 - playbooks/roles/ceph_client/templates/ceph.conf.j2 | 7 - .../roles/ceph_client/templates/ceph_pin.pref.j2 | 5 - .../roles/ceph_client/templates/secret.xml.j2 | 7 - playbooks/roles/ceph_client/vars/main.yml | 51 -- playbooks/roles/haproxy_server/CONTRIBUTING.rst | 85 -- playbooks/roles/haproxy_server/LICENSE | 202 ----- playbooks/roles/haproxy_server/README.rst | 26 - playbooks/roles/haproxy_server/defaults/main.yml | 86 -- .../roles/haproxy_server/files/haproxy-logging.cfg | 6 - .../roles/haproxy_server/files/haproxy.default | 8 - playbooks/roles/haproxy_server/files/haproxy.sh | 171 ---- playbooks/roles/haproxy_server/handlers/main.yml | 33 - playbooks/roles/haproxy_server/meta/main.yml | 32 - .../haproxy_server/tasks/haproxy_add_ppa_repo.yml | 103 --- .../roles/haproxy_server/tasks/haproxy_install.yml | 66 -- .../haproxy_server/tasks/haproxy_post_install.yml | 44 - .../haproxy_server/tasks/haproxy_pre_install.yml | 41 - .../tasks/haproxy_service_config.yml | 23 - .../tasks/haproxy_ssl_configuration.yml | 69 -- playbooks/roles/haproxy_server/tasks/main.yml | 26 - .../roles/haproxy_server/templates/haproxy.cfg.j2 | 36 - .../haproxy_server/templates/haproxy_pin.pref.j2 | 5 - .../roles/haproxy_server/templates/service.j2 | 56 -- playbooks/rsyslog-install.yml | 62 +- playbooks/security-hardening.yml | 10 +- playbooks/setup-hosts.yml | 1 + playbooks/setup-infrastructure.yml | 4 +- playbooks/setup-openstack.yml | 11 + playbooks/unbound-install.yml | 94 ++ playbooks/utility-install.yml | 129 ++- playbooks/vars/configs/haproxy_config.yml | 219 +++-- playbooks/vars/configs/keepalived_haproxy.yml | 70 +- ...and-1035-container-update-6e880e4b45e11cf0.yaml | 15 + .../notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml | 8 + ...FC1034-5_hostname_upgrade-677da788600edbca.yaml | 5 + .../notes/add-ca-certs-2398cb4856356028.yaml | 6 + .../add-disk-image-type-932898aca944f14a.yaml | 4 + .../add-gnocchi-integrations-40eef52bf255ab0b.yaml | 7 + ...-ironic-dashboard-support-3eb5168d71e4dddd.yaml | 5 + ...-ironic-dashboard-support-769d60881f0e12d9.yaml | 5 + ...-magnum-dashboard-support-4fcddedffb83bc28.yaml | 5 + ...-magnum-dashboard-support-e41ac6fb6bc14946.yaml | 5 + ...stone-admin-roles-setting-83198a721c64ee3c.yaml | 5 + ...-container-restart-option-8c7f5b20b9414ead.yaml | 8 + .../notes/add-magnum-to-repo-548f243b3a253b04.yaml | 5 + ...dd-network-name-variables-d658745d7113110e.yaml | 8 + ...nova-extensions-blacklist-8ed18f45aba6a7fb.yaml | 11 + .../notes/add-nova-lxd-f094438e4bf36d52.yaml | 6 + .../notes/add-qemu-conf-d42337dfd42bac6f.yaml | 4 + .../notes/add-v38438-3f7e905892be4b4f.yaml | 21 + .../notes/add-xenial-support-3dc3711e5b1bdc34.yaml | 4 + .../notes/add-xenial-support-5c117335b7b7b407.yaml | 3 + .../notes/add-xenial-support-7c24aa813289aa40.yaml | 3 + .../notes/add-xenial-support-e285a643a39f0438.yaml | 4 + .../notes/adding-v38526-381a407caa566b14.yaml | 8 + .../notes/adding-v38548-9c51b30bf9780ff3.yaml | 8 + .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 + .../aide-initialization-fix-16ab0223747d7719.yaml | 17 + .../ansible-fact-subset-08e582fcf7ba4e4e.yaml | 13 + .../notes/ansible-forks-fa70caf5155c5d25.yaml | 4 + .../ansible-role-fetch-mode-cd163877e96d504a.yaml | 5 + ...ackage-pinning-dependency-6e2e94d829508859.yaml | 4 + ...pecific-package-locations-e76512288aaf6fa0.yaml | 8 + ...diting-mac-policy-changes-fb83e0260a6431ed.yaml | 15 + .../notes/augenrules-restart-39fe3e1e2de3eaba.yaml | 5 + .../base-container-lvm-cow-2faa824f6cd4b083.yaml | 14 + .../base-container-overlayfs-ec7eeda2f5807e96.yaml | 11 + .../notes/bindmount-logs-3c23aab5b5ed3440.yaml | 25 + .../broader-image-support-69241983e5a36018.yaml | 30 + ...-default-os-endpoint-type-3adf9db32764ddf3.yaml | 6 + .../notes/centos-7-support-d96233f41f63cfb8.yaml | 3 + .../ceph-from-uca-and-distro-2fa04e03c39a61bc.yaml | 21 + .../change-default-collation-260d932780ef4553.yaml | 5 + .../notes/combine_pip_roles-ba524dbaa601e1a1.yaml | 6 + .../compress-customization-a7d03162d837085f.yaml | 5 + .../config_check_argument-5a1126c779e3e8f5.yaml | 7 + ...plate-MultiStrOps-support-c28e33fd5044e14d.yaml | 29 + ...figurable-martian-logging-370ede40b036db0b.yaml | 13 + ...figurable_inventory_group-9f5b193221b7006d.yaml | 7 + .../container-bind-mounts-1a3a763178255841.yaml | 12 + .../container-config-list-a98937ae0ff94cf0.yaml | 10 + ...container-create-commands-b3aa578309fa665b.yaml | 8 + .../container-create-lvm-cow-77c049188b8a2676.yaml | 6 + ...ontainer-create-overlayfs-46f3c4c0ecacaadf.yaml | 7 + ...container-repo-host-match-2be99b14642e0591.yaml | 12 + ...ntainer-resolv-host-match-c6e3760cf4a8e5cd.yaml | 6 + ...iner-static-mac-addresses-9aae098fdc8a57cc.yaml | 15 + .../db-create-in-playbooks-6fb8232da53fe1e1.yaml | 8 + ...riadb-waittimeout-setting-ddaae0f2e1d31ee1.yaml | 5 + ...e-host-security-hardening-eb73923218abbc2c.yaml | 7 + ...enstack-host-apt-packages-b4d7af53d55d980d.yaml | 5 + ...ate-rabbitmq_apt_packages-b85ea1b449dc136e.yaml | 5 + ...precate-repo-apt-packages-f8c4a22fc60828bf.yaml | 5 + ...ect-cinder-backup-service-7dc68f532741be87.yaml | 13 + ...lance-default-store-swift-b9c36f4a2fe05ec4.yaml | 11 + .../notes/detect_power-a6a679c8c3dd3262.yaml | 4 + ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...sable-graphical-interface-5db89cd1bef7e12d.yaml | 13 + .../disable-list-extend-3a9547de9034f9ba.yaml | 10 + ...isable-netconsole-service-915bb33449b4012c.yaml | 7 + ...le_slave_repo_during_sync-2aaabf90698221e3.yaml | 9 + .../disabling-rdisc-centos-75115b3509941bfa.yaml | 8 + ...mic-ceilometer-enablement-18be0bb994ede62a.yaml | 7 + .../dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml | 12 + .../notes/enable-lbaas-aio-9a428c459a10aeda.yaml | 3 + .../notes/enable-lsm-bae903e463079a3f.yaml | 14 + ...ble-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml | 11 + ...nable_pip_install_options-7c2131c89f90b2c6.yaml | 6 + .../notes/export-hosts-flag-9c9f170eb89798ea.yaml | 6 + .../extra-ceph-clusters-00ad154ffb0589a6.yaml | 7 + .../notes/extra-ceph-conf-337b9371b49219ff.yaml | 5 + ...-audit-log-permission-bug-81a772e2e6d0a5b3.yaml | 10 + .../fix-check-mode-with-tags-bf798856a27c53eb.yaml | 7 + .../notes/force-dep-order-2c529683509e45da.yaml | 9 + ...force-cluster-name-change-b4ce1e225daa840c.yaml | 15 + releasenotes/notes/git-cache-df0afe90d4029f68.yaml | 6 + .../notes/git-cache-staged-b9cb0e277478b19a.yaml | 9 + .../glance-1604-support-e65870170a925bfe.yaml | 3 + .../glance-packages-rename-abd348b0725e4b7b.yaml | 4 + .../gnocchi-metrics-service-6a7bdda8e7e71dda.yaml | 9 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../haproxy-centos-support-de39c19d6a89b6a5.yaml | 11 + .../haproxy-endpoint-toggle-aa9e7e3efc4d6861.yaml | 4 + .../haproxy-extra-configs-67a77803494d3e97.yaml | 8 + ...aproxy-git-server-backend-862e004e61a43292.yaml | 8 + ...oxy-package-cache-backend-da096228387bc1f4.yaml | 13 + .../haproxy_ssl_terminiation-cdf0092a5bfa34b5.yaml | 31 + .../hipe-compile-option-c100e8676a806950.yaml | 7 + .../horizon-arbitrary-config-8a36e4bd6818afe1.yaml | 6 + ...ble-password-autocomplete-5f8f78a6c8f1edb3.yaml | 5 + .../horizon-servername-fix-1ac632f205c45ee9.yaml | 5 + .../horizon_custom_themes-4ee1fd9444b8a5ae.yaml | 6 + ...implement-centos7-support-cf6b6ee0d606223f.yaml | 3 + .../implement-xenial-support-0de6444c53337d46.yaml | 12 + .../notes/implemented-v38524-b357edec95128307.yaml | 12 + .../improved-audit-rule-keys-9fa85f758386446c.yaml | 5 + .../notes/install-local-019edab04ffc8347.yaml | 8 + .../intree-and-override-envd-371cf9a809b51fe0.yaml | 14 + .../inventory-debug-flag-ead0ae2a2a1d7b90.yaml | 6 + ...y-main-function-arguments-8c43e4c7175937d3.yaml | 6 + ...ry_host_containers_naming-d1f42a0c91d68154.yaml | 11 + .../ironic-1604-support-b9ebb12ee4d78275.yaml | 3 + .../notes/ironic-integration-264c4ed622a3a04e.yaml | 6 + ...e-mysql-password-variable-ec33f37ba6c4fac1.yaml | 16 + .../notes/isolate-ansible-3e8fcfdff9962a9b.yaml | 9 + ...d-default-cidr-workaround-8f2b5a0b074898e1.yaml | 9 + .../notes/keepalived-upgrade-e63a11b7d4dcba20.yaml | 22 + ..._user_and_project_support-e35b0b335b6522e9.yaml | 42 + .../lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 9 + ...2-service-provider-config-57d394bdc64f632e.yaml | 5 + .../notes/list-extend-toggle-46a75ded97b7ce02.yaml | 6 + ...ration-default-set-to-ssh-6add1dbdeea43509.yaml | 5 + .../notes/lxc-cache-gpg-156169a867d4653f.yaml | 7 + ...xc-container-multi-distro-f495f73951fafd1a.yaml | 29 + ...lxc-container-start-delay-d7917f69d9469316.yaml | 6 + .../lxc-host-setup-refactor-e43559764af67fea.yaml | 29 + .../notes/lxc-hosts-limit-9784050b888ea7c8.yaml | 7 + .../notes/lxc_hosts-group-a5643e7010d6b151.yaml | 6 + .../make-ha-router-a-toggle-9d87d688e8d506c9.yaml | 4 + .../make-ha-router-a-toggle-eefd61fc7978240d.yaml | 4 + .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 + ...ment_network_config_check-66778387f38b9e0c.yaml | 8 + .../mariadb-rolling-upgrades-323510425c3c7751.yaml | 8 + .../memcached-logging-change-8825c2bdbcf824b9.yaml | 10 + ...server-add-nofile-setting-504e0c50e10a4ea6.yaml | 9 + .../metadata-proxy-cleanup-eed6ff482035dc83.yaml | 10 + .../mitaka-deprecations-72bec69c1395261d.yaml | 10 + .../notes/multi-arch-build-1ad512acdf6cabb9.yaml | 7 + .../notes/multi-arch-support-a8762f6ea7fdbcef.yaml | 8 + .../notes/multi-distro-add-0e53560f66394691.yaml | 6 + .../multiple-ips-for-host-f27cb1f1e878640d.yaml | 4 + ...tron-agent-dynamic-enable-47f0c709ef0dfe55.yaml | 15 + .../notes/neutron-bgp-552e6e1f6d37f38d.yaml | 9 + .../notes/neutron-calico-2332b0972708af8a.yaml | 5 + ...n-conditional-overlay-net-eeb6ffefbe01c188.yaml | 7 + .../notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 + .../neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 + ...neutron-network-variables-ff6d2c7f8c7c3ccd.yaml | 10 + ...neutron-networking-calico-b05b08f989f768ee.yaml | 5 + ...n-openvswitch-agent-group-a63da4af11202790.yaml | 9 + .../neutron-ovs-powervm-116662f169e17175.yaml | 18 + .../notes/neutron-vpnaas-5c7c6508f2cc05c5.yaml | 8 + .../notes/neutron_ovs_dvr-7fca77cac0545441.yaml | 11 + .../ng-instance-management-f9134fc283aa289c.yaml | 16 + .../nova-admin-endpoint-fix-d52cc00caa5ab5dd.yaml | 6 + ...console-proxy-git-cleanup-cdeffd3f0d040275.yaml | 8 + ...-largecluster-key-inserts-afc8cac63af41087.yaml | 12 + .../notes/nova-powervm-b4eddae30abbd08e.yaml | 5 + .../notes/nova-uca-support-409b2e6afbce47b1.yaml | 10 + ...ind-local-interfaces-only-05f03de632e81097.yaml | 5 + .../online-lxc-network-add-3cfc84ea28e5eab0.yaml | 5 + .../openvswitch-support-1b71ae52dde81403.yaml | 14 + ...egy-and-connection-plugin-bc476fa3607dcc4a.yaml | 11 + ...-glance-only-install-venv-0271d3238c0d561c.yaml | 6 + ...gnocchi-only-install-venv-4e532f44fcf5cda5.yaml | 6 + ...os-heat-only-install-venv-e3e8e466dd67c2bc.yaml | 5 + ...apache-log-format-support-34c9ef74b3bcce31.yaml | 5 + ...horizon-only-install-venv-0fd3292d2b61e840.yaml | 6 + ...-ironic-only-install-venv-0da32fc36bfeae2b.yaml | 5 + ...in-token-auth-deprecation-24e84a18f8a56814.yaml | 17 + ...apache-log-format-support-7232177f835222ee.yaml | 4 + ...pache-mpm-tunable-support-1c72f2f99cd502bc.yaml | 17 + ...eystone-only-install-venv-b766568ee8d40354.yaml | 5 + ...e-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml | 22 + ...dle_internal_only_routers-e46092d6f1f7c4b0.yaml | 7 + ...os_aodh-only-install-venv-3c80a0a66824fcd7.yaml | 5 + ...lometer-only-install-venv-f3cd57b4a1d025c5.yaml | 5 + releasenotes/notes/os_cinder-1604-support.yaml | 3 + ...os_cinder-centos7-support-732f8feac7241e2a.yaml | 4 + ..._cinder-only-install-venv-914d5655dd645213.yaml | 5 + ...os_glance-centos7-support-21cb81e361831c9f.yaml | 4 + ..._keystone-centos7-support-0a5d97f81ac42e44.yaml | 4 + .../os_magnum-install-venv-30263e29e51a2610.yaml | 5 + ...um-xenial-systemd-support-2e1ee4253dff2b5c.yaml | 4 + ...neutron-only-install-venv-ca3bf63ed0507e4b.yaml | 6 + .../os_nova-install-venv-6c6c2ba28f67a891.yaml | 5 + .../os_rally-install-venv-71cbd1f6ce4fd983.yaml | 5 + ..._sahara-only-install-venv-8ead48687897ce0b.yaml | 6 + ...s_swift-only-install-venv-fdd5d41759433cf8.yaml | 5 + ...package-list-name-changes-007cacee4faf8ee6.yaml | 10 + ...package-list-name-changes-38f1554097b6bbe9.yaml | 4 + ...package-list-name-changes-4a42f561dac5754e.yaml | 4 + ...package-list-name-changes-4d5ad2e6ff5ecae2.yaml | 4 + ...package-list-name-changes-6f74fbf336030242.yaml | 8 + ...package-list-name-changes-7c8a6dd652b271cf.yaml | 8 + ...package-list-name-changes-7fcd5583f0db0eb6.yaml | 6 + ...package-list-name-changes-a26d94a44c24de2f.yaml | 6 + ...package-list-name-changes-a5571c0b72faadf2.yaml | 4 + ...package-list-name-changes-a86f7e7c805c2d81.yaml | 10 + ...package-list-name-changes-b484be7645bbe66a.yaml | 4 + ...package-list-name-changes-e351db8b482f1326.yaml | 6 + ...package-list-name-changes-e6f88d12f3bd9fa0.yaml | 4 + ...package-list-name-changes-e7a3fc551d742d23.yaml | 4 + ...package-list-name-changes-fdf9c6573bfa1083.yaml | 4 + .../notes/package-state-003ff33c557af3b5.yaml | 13 + .../notes/package-state-1d27f4c7f8618cef.yaml | 13 + .../notes/package-state-2e8e2eb4b24475c4.yaml | 13 + .../notes/package-state-38187ec5242a005b.yaml | 13 + .../notes/package-state-3bf07796262fc9b9.yaml | 13 + .../notes/package-state-441864557ee5d75b.yaml | 13 + .../notes/package-state-48e933a395bbdc0c.yaml | 13 + .../notes/package-state-505f9772bb0d668e.yaml | 14 + .../notes/package-state-55fceaf0cd23147e.yaml | 13 + .../notes/package-state-63a870de53dd5cd8.yaml | 13 + .../notes/package-state-646b25638f523411.yaml | 13 + .../notes/package-state-6684c5634bdf127a.yaml | 13 + .../notes/package-state-6f5ce66be8ddf119.yaml | 12 + .../notes/package-state-711a1eb4814311cc.yaml | 13 + .../notes/package-state-7caea8f1db708a2e.yaml | 13 + .../notes/package-state-7cbc7179b51ecdde.yaml | 13 + .../notes/package-state-7d62ea1e50ad391b.yaml | 13 + .../notes/package-state-8b0189f8824b7568.yaml | 13 + .../notes/package-state-979c963fb18f7a25.yaml | 13 + .../notes/package-state-9a2f60adb4ab68cd.yaml | 13 + .../notes/package-state-ab251d8987422f59.yaml | 13 + .../notes/package-state-b032231a3cc99ee0.yaml | 13 + .../notes/package-state-b41a0e911ad95d1c.yaml | 13 + .../notes/package-state-b7a3d3c242e2c3aa.yaml | 13 + .../notes/package-state-bb93a1d4b272425d.yaml | 13 + .../notes/package-state-c9c7e01e77b596d0.yaml | 14 + .../notes/package-state-ed22b9a6683690b3.yaml | 13 + .../notes/package-state-f2309b07440d0ae8.yaml | 13 + .../notes/package-state-fb7d26a4b7c41a77.yaml | 13 + .../notes/package-state-fda322f5e667bbec.yaml | 13 + .../notes/package-var-rename-6ec3af6242073a2e.yaml | 4 + .../notes/package_var_rename-9a55f7030595fdef.yaml | 4 + ...paramiko-2-0-dependencies-9a7c7fe9aeb394e4.yaml | 6 + .../notes/path-customization-e7e0ae0f93e5283b.yaml | 4 + .../notes/pip-source-store-d94ff2b68a99481a.yaml | 10 + .../notes/pkg-cacher-cfeae8fb990904a4.yaml | 6 + .../notes/policy-override-522df5699f09c417.yaml | 6 + ...tmw-management-ui-haproxy-e9f9ec0343484f2d.yaml | 17 + .../notes/rally_play-82fa27d8ba2ce22d.yaml | 3 + .../reduce-auditd-logging-633677a74aee5481.yaml | 25 + .../notes/remove-ansible.cfg-e65e4f17bc30cce7.yaml | 17 + .../remove-container-release-fa49ff23ca8c1324.yaml | 6 + .../notes/remove-lbaasv1-26044c48b5d3b508.yaml | 8 + ...nfig-from-openstack-hosts-efb7d0b3a22d49df.yaml | 6 + .../notes/remove-overrides-17ef7d0496f6a6c7.yaml | 5 + ...move-rsyslog_client_repos-055ce574bee8bd14.yaml | 4 + ...emove-upgrade-gate-checks-3fbe339e06094681.yaml | 3 + .../notes/remove-xtrabackup-0513a40593f2d0e3.yaml | 7 + .../notes/remove_infra_group-45e7747e341d97cf.yaml | 9 + .../notes/remove_verbose_var-c22f4946eedbc5f2.yaml | 5 + .../notes/remove_verbose_var-e88f65e0c7c440f4.yaml | 4 + .../removed-aodh-api-init-9e2406629196efff.yaml | 4 + ...moved-ceilometer-api-init-a4bfc4cbabcbcb16.yaml | 4 + .../removed-db-create-tasks-276095a2293ed4ee.yaml | 5 + .../removed-db-create-tasks-3deea562441871c6.yaml | 5 + .../removed-db-create-tasks-4560d4b960383c4e.yaml | 5 + .../removed-db-create-tasks-8ae301041fe46cfb.yaml | 5 + .../removed-db-create-tasks-8d931286d6347bc6.yaml | 5 + .../removed-db-create-tasks-eed527e915f23ee0.yaml | 5 + .../removed-neutron-ha-tool-dd7a4717e03163f9.yaml | 13 + .../rename-pip-packages-tmp-f40dc7599684466a.yaml | 5 + ...e-repo-build-apt-packages-df1ca334b857787a.yaml | 5 + ...ild-fix-upper-constraints-9e24c56520538df2.yaml | 5 + ...-build-use-uca-by-default-bde8ded7d72cd42c.yaml | 4 + .../notes/rhel-gpg-check-0b483a824314d1b3.yaml | 7 + ...og-client-centos7-support-bf5dd55ef6488a20.yaml | 4 + ...-client-logrotate-options-02dde942779493bb.yaml | 6 + ...log-remote-log-separation-76de4b64f0c18edb.yaml | 8 + .../run-playbooks-refactor-c89400feb692cd91.yaml | 6 + ...a-data-processing-service-8e63ebed6baf08bc.yaml | 5 + .../sahara-horizon-panel-d80d17da528b4c07.yaml | 9 + ...rch-for-unlabeled-devices-cb047c5f767e93ce.yaml | 6 + .../selective-git-clone-77d766cc0eaa2175.yaml | 8 + .../selective-venv-build-dd9f0e40cd1cc076.yaml | 8 + .../selective-wheel-build-34b1c154bb548ed7.yaml | 8 + .../notes/service-conf-path-b27cab31dbc72ad4.yaml | 6 + .../notes/ssh-pub-key-check-c42309653dbe3493.yaml | 5 + .../static_route_error_check-5e7ed6ddf9eb1d1f.yaml | 11 + ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 5 + ...bal_environment_variables-46cd4d90279fd0e9.yaml | 5 + .../support-ubuntu-xenial-958e8128ed6578cd.yaml | 3 + .../notes/swift-conf-b8dd5e1199f8e4a8.yaml | 9 + .../swift-fallocate-reserve-ff513025da68bfed.yaml | 11 + .../swift-force-hash-change-45b09eeb8b0368a6.yaml | 14 + .../swift-fs-file-limits-a57ab8b4c3c944e4.yaml | 11 + .../swift-pretend-mph-passed-7e5c15eeb35861c3.yaml | 17 + .../notes/swift-pypy-support-9706519c4b88a571.yaml | 15 + ...onfigure-xfs-from-mlocate-e4844e6c0469afd6.yaml | 5 + .../swift-rings-port-change-4a95bbd9b63fb201.yaml | 11 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + .../swift-staticweb-support-b280fbebf271820b.yaml | 9 + .../swift-syslog-log-perms-5a116171a1adeae3.yaml | 6 + ...virt_save_dir_to_nova_dir-3b1b278cb7e5831f.yaml | 8 + .../notes/ubuntu-ppc64le-cab45e63dca77017.yaml | 4 + .../notes/ubuntu_ppc64le-581e5fcd5950186e.yaml | 6 + .../notes/unbound-dns-e0b591be4fa2b050.yaml | 6 + ...unique-variable-migration-c0639030b495438f.yaml | 20 + .../update-aodh-integration-fd2a27e8864bd8ff.yaml | 10 + ...dated-neutron-plugin_base-25b5dcacc87acd0f.yaml | 2 +- .../notes/upgrade-lxc-4750ba9aea7b5cd1.yaml | 6 + ...pper-constraints-override-6853ffec6c07d7f5.yaml | 9 + .../notes/use-galera-storage-d1a51c051d2740ad.yaml | 14 + .../notes/use-uca-by-default-070751b0b388fcbe.yaml | 4 + ...utility_container_ssh_key-44b1d15a1c06395e.yaml | 6 + .../notes/var-deprecations-417d87b9d386466a.yaml | 11 + ...trabackup-compact-disable-8ae9215207147ebc.yaml | 4 + releasenotes/source/conf.py | 42 +- releasenotes/source/index.rst | 3 +- releasenotes/source/mitaka.rst | 7 +- releasenotes/source/unreleased.rst | 5 + requirements.txt | 29 +- scripts/ansible-role-requirements-editor.py | 104 +++ scripts/bootstrap-aio.sh | 2 +- scripts/bootstrap-ansible.sh | 110 ++- scripts/fastest-infra-wheel-mirror.py | 170 ++++ scripts/federated-login.sh | 2 +- scripts/gate-check-commit.sh | 52 +- scripts/get-pypi-pkg-version.py | 8 +- scripts/inventory-manage.py | 309 +------ scripts/manage_inventory.py | 370 ++++++++ scripts/openstack-ansible.rc | 49 ++ scripts/os-cmd | 56 ++ scripts/os-detection.py | 25 - scripts/release-yaml-file-prep.py | 133 +++ scripts/run-playbooks.sh | 222 ++--- scripts/run-tempest.sh | 8 +- scripts/run-upgrade.sh | 130 ++- scripts/scripts-library.sh | 189 ++-- scripts/sources-branch-updater.sh | 260 ++++-- scripts/teardown.sh | 282 ------ .../playbooks/ansible_fact_cleanup.yml | 25 + .../playbooks/aodh-api-init-delete.yml | 47 + .../playbooks/db-collation-alter.yml | 57 ++ .../playbooks/deploy-config-changes.yml | 64 ++ .../playbooks/galera-cluster-rolling-restart.yml | 58 ++ .../playbooks/lbaas-version-check.yml | 27 + .../playbooks/mariadb-apt-cleanup.yml | 24 + .../playbooks/memcached-flush.yml | 23 + .../playbooks/old-hostname-compatibility.yml | 145 ++++ .../playbooks/pip-conf-removal.yml | 24 + .../playbooks/user-secrets-adjustment.yml | 45 + .../scripts/ansible_fact_cleanup.sh | 18 + .../upgrade-utilities/scripts/make_rst_table.py | 45 + .../scripts/migrate_openstack_vars.py | 70 ++ .../scripts/test_migrate_openstack_vars.py | 86 ++ setup.cfg | 2 +- setup.py | 11 +- test-requirements.txt | 28 +- .../bootstrap-host/tasks/check-requirements.yml | 16 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 144 ++-- .../bootstrap-host/tasks/prepare_data_disk.yml | 10 +- .../tasks/prepare_libvirt_service.yml | 53 -- .../tasks/prepare_loopback_cinder.yml | 1 + .../tasks/prepare_loopback_swift.yml | 1 + .../tasks/prepare_mongodb_service.yml | 61 -- .../bootstrap-host/tasks/prepare_mongodb_users.yml | 41 - .../bootstrap-host/tasks/prepare_networking.yml | 38 +- .../bootstrap-host/tasks/prepare_ssh_keys.yml | 14 +- .../templates/osa_interfaces_multinode.cfg.j2 | 28 + .../templates/user_variables.aio.yml.j2 | 75 +- tox.ini | 186 ++-- 721 files changed, 17195 insertions(+), 13538 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0d5fad6..2938075 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,13 +1,16 @@ -Jinja2>=2.6 # ansible -netaddr>=0.7.12 # playbooks/inventory/dynamic_inventory.py -paramiko>=1.13.0 # ansible -PrettyTable>=0.7,<0.8 # scripts/inventory-manage.py -pycrypto>=2.6 # ansible -PyYAML>=3.1.0 # ansible -### -### These are pinned to ensure exactly the same behaviour forever! ### -### These pins are updated through the sources-branch-updater script ### -### -pip==8.1.1 -setuptools==20.6.7 -wheel==0.29.0 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +pip>=6.0 # MIT +setuptools!=24.0.0,>=16.0 # PSF/ZPL +wheel # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD +netaddr!=0.7.16,>=0.7.13 # BSD +PrettyTable<0.8,>=0.7 # BSD +pycrypto>=2.6 # Public Domain +python-memcached>=1.56 # PSF +PyYAML>=3.1.0 # MIT +virtualenv # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 1e3f8b5..86fae7a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,8 +1,12 @@ -ansible>1.9,<2.0 -ansible-lint>=2.0.3,<=2.3.6 -bashate==0.5.0 # Apache-2.0 -flake8==2.2.4 -hacking>=0.10.0,<0.11 -mccabe==0.2.1 # capped for flake8 -pep8==1.5.7 -pyflakes==0.8.1 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +coverage>=3.6 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +hacking<0.11,>=0.10.0 +mccabe==0.2.1 # MIT License +mock>=2.0 # BSD +pep8==1.5.7 # MIT +pyflakes==0.8.1 # MIT +virtualenv # MIT @@ -11,3 +15,5 @@ pyflakes==0.8.1 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2

1 0

[new][magnum] python-magnumclient 2.3.1 release (newton)
by no-reply＠openstack.org 21 Oct '16

21 Oct '16

We are glad to announce the release of: python-magnumclient 2.3.1: Client library for Magnum API This release is part of the newton stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-magnumclient Download the package from: https://pypi.python.org/pypi/python-magnumclient Please report issues through launchpad: https://bugs.launchpad.net/python-magnumclient For more details, please see below. Changes in python-magnumclient 2.3.0..2.3.1 ------------------------------------------- 14dfc7d Add missing options for HTTPClient if auth_token given. db98410 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + magnumclient/v1/client.py | 2 ++ 3 files changed, 9 insertions(+)

1 0

[new][telemetry] gnocchi 3.0.1 release
by no-reply＠openstack.org 19 Oct '16

19 Oct '16

We are glowing to announce the release of: gnocchi 3.0.1: Metric as a Service Download the package from: https://tarballs.openstack.org/gnocchi/ For more details, please see below. Changes in gnocchi 3.0.0..3.0.1 ------------------------------- a44d88f Fix incorrect EXTRA_FLAVOR in plugin.sh 175d8bd carbonara: fix SplitKey with datetime greater than 32bits value 67cdbb7 Add http_proxy_to_wsgi to api-paste bc6a61d doc,tests: fix reaggregate/reaggregation mispelling 35e22d1 Fix some gabbi tests afdb605 Fix oslo.log minimum requirement c6b2c51 Update .gitreview for stable/3.0 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 2 +- etc/gnocchi/api-paste.ini | 15 +++++-- gnocchi/carbonara.py | 67 +++++++++++++++++----------- gnocchi/storage/_carbonara.py | 8 ++-- requirements.txt | 2 +- 13 files changed, 90 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 23cf70d..818c2e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.config>=2.6.0 -oslo.log>=1.0.0 +oslo.log>=2.3.0

1 0

[new][tripleo] python-tripleoclient 5.3.0 release (newton)
by no-reply＠openstack.org 19 Oct '16

19 Oct '16

We are overjoyed to announce the release of: python-tripleoclient 5.3.0: TripleO client This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. Changes in python-tripleoclient 5.2.0..5.3.0 -------------------------------------------- 2ee369f Fix get_file in out-of-tree templates 3650d94 Downloads templates from swift before processing update c1868d2 Allow referencing rendered yaml files in resource_registry e5701d0 Download templates from swift before processing with heatclient 34590cc Remove auth_required=False from upload image command 0ccf0fd Add optional overcloud deploy roles_data.yaml override abfa019 Remove another openstackclient import Diffstat (except docs and test files) ------------------------------------- tripleoclient/constants.py | 1 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 215 +++++++++++++-------- .../v1/overcloud_update/test_overcloud_update.py | 54 ++---- tripleoclient/utils.py | 66 +++++++ tripleoclient/v1/overcloud_deploy.py | 186 +++++++++++++++--- tripleoclient/v1/overcloud_image.py | 1 - tripleoclient/v1/overcloud_update.py | 46 ++--- tripleoclient/workflows/plan_management.py | 18 +- tripleoclient/workflows/templates.py | 17 ++ 13 files changed, 557 insertions(+), 181 deletions(-)

1 0

[new][tripleo] tripleo-common 5.3.0 release (newton)
by no-reply＠openstack.org 19 Oct '16

19 Oct '16

We are chuffed to announce the release of: tripleo-common 5.3.0: A common library for TripleO workflows. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 5.2.0..5.3.0 -------------------------------------- 3163e51 Centos images no longer require epel element a006d97 Default the J2 excludes files to safe values. cb737d1 Make UpdateManager use a passed-in stack setup cc19d04 Add the KeystoneCredential0 and KeystoneCredential1 parameters d617470 Add the J2 exclude file exception (When file not found) c1efe44 Support node untagging fe308c8 Add support to create role main template file based in role.role.j2.yaml f61b8cf Remove references to overcloud-without-mergepy 0e529ba Modify j2 templating to allow role files generation 848ec90 Don't set node state during node registration ffeef5c Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + image-yaml/overcloud-images-centos7.yaml | 4 +- tripleo_common/actions/baremetal.py | 5 +- tripleo_common/actions/templates.py | 101 +++++++++++++++++++------ tripleo_common/constants.py | 22 +++--- tripleo_common/scale.py | 3 +- tripleo_common/update.py | 40 +++++----- tripleo_common/utils/nodes.py | 6 +- tripleo_common/utils/parameters.py | 17 +++-- tripleo_common/utils/passwords.py | 6 ++ workbooks/baremetal.yaml | 16 +++- 13 files changed, 245 insertions(+), 83 deletions(-)

1 0

[new][kolla] kolla-kubernetes 0.3.0 release
by no-reply＠openstack.org 18 Oct '16

18 Oct '16

We are amped to announce the release of: kolla-kubernetes 0.3.0: Kubernetes deployment of the Kolla containers The source is available from: http://git.openstack.org/cgit/openstack/kolla-kubernetes Download the package from: https://tarballs.openstack.org/kolla-kubernetes/ Please report issues through launchpad: http://bugs.launchpad.net/kolla-kubernetes For more details, please see below. Changes in kolla-kubernetes 0.2.0..0.3.0 ---------------------------------------- 7e25ecd Adding custom api interface for keepalived 8b4ef92 Fixing cinder v1 and v2 endpoints fb4f564 Fix minor ceph transition state issue with the gate 739646c External Ceph Tools, Tests, and Docs f2ab15f Enable release notes translation 185909c Split endpoint jobs and start testing the deployments e314fa9 literal block in quickstart are messed up so, blank lines added in literal block and some Inline Markup added 9762782 Adding kubectl commands to setup default namespace e921596 Fixing TUNNEL_INTERFACE in neutron dhcp agent pod a2c925e Replace LOG.warn with LOG.warning 75683c3 A fix of tunnel_interface in neutron-openvswitch-agent 2da15fb Fixing neutron-openvswitch missing mount and variable b8054c6 Kolla Kubernetes Gate Test faafb50 Adding keepalived functionality to kolla-kubernetes 271d3c6 common_volume_mounts and common_containers macros a7d46dd Introducing common-lib and common_volumes macro 86d3160 Use kubectl to watch for pod status 32ba63d Fixing keystone logging related issue 2e1e999 Adding resolv.conf workaround to logging containers aca4f50 Adding missing localtime mounts and volumes 8804160 Misc fixes 6059577 Adding logging to kolla-kubernetes services 3ee29c2 Documentation rework 04bb274 Adds sidecar logging container to common-deployment pod a4d268e Basic ceph backend support 30109cc More deployments merged b7a6b1b Update homepage with developer documentation page b2969b4 Added guide for running test 654cc09 Introducing generic deployment template 73f1d70 Adding ElasticSearch and Kibana pods/services 6b48695 CLI rework. 09515e7 Add container debug feature 170e030 More services to deployments 7e34c46 Document more stuff 7d19065 Fixing cinder/iscsi/tgtd issues ad44f6e The configmaps of iscsid and tgtd are error. 60cd299 Fix NoVNC health check. b67e6d2 Switching rabbitmq to petset for name persistency 1dcf856 Fixing hypervisor's IP for nova compute process 30bbf0c Fixing incorrect name for nova-novncproxy-haproxy configmap 414dd80 Fixes for things against recent kolla trunk 53ed8ec Fixes to get Nova to work 654470c Additional nova changes required to launch vm in all-in-one 1b4f90b Fix svc to point to nova-api pod housing the metadata server a1d89c2 ovs setup bridge, fix /run, add missing hostipc f3c99f8 Changing keystone-public service to use generic service d518ff3 First stab at minikube doc 51c8b7d net=host + resolv.conf workaround. e746510 Make the kolla-k8s quickstart similar to kolla 7c41dc8 Remove nova compute bootstrap 5a44ff5 Fix dhcp agent's volumes 7cccff1 Splitting Keystone bootstrap into three steps 865245b Support nova_consoleauth and nova_novncproxy 3370294 Fix some openvswitch issues cd67ada Fix selector issue with neutron-server service c63932f Fix a few neutron issues e2ac17d fix rabbitmq, glance-api, and haproxy 4939818 Splitting into 3 steps Kube's neutron bootstrap 8cc659e This patch fixes the naming convention of configmaps as follows. https://review.openstack.org/#/c/368460/ 2835128 Fix rabbitmq bootstrap pvc 4afc8bb Modifying horizon pod for deployment type 3d61d23 Fix glance pvc name dcd6931 Fix mariadb pvc name de44204 Remove 'MANIFEST.in' d16ee6b Use resource_name instead of service_name f839e5f remove redundant -configmap from names cc5ced6 l3/metadata DaemonSets + DVR, & labels bae09a4 Add the ability to create services from the CLI fec0ff5 Check for service name in resource name 8ffcff8 Fix all name in template metadata issues d0df66a Cleanup container names a418140 More Resource Cleanup da92570 Resource type configmap b1ec1d1 More Tests 76a9662 Force hostlabels to yaml strings. 6be50b1 Kube Glance bootstrap cleanup 599ed8f resource-map output formatters 8216c27 Move iscsi stuff to match kolla 376341b Change true to yes in default host labels 9e440e8 Add more nodeSelectors 893344a Cleanup resource and resource-template e99d2d5 Cleanup patch 6248205 Add cinder volume with iscsi and lvm backend to Kube d34cee0 Fix missing Exception around exception string 49645c5 Add namespace and test 78d74e0 Checks to start reducing Technical Debt e7c2b7a Host Labels 2f816dd Neutron endpoint are wrong value.. 6c8c231 Template validation/gating d5366b6 Docker systemd fix 2f7d12b Fail nova-compute init container always 945683b Extra space in generate-passwords.py c5ba68d Add Cinder api and scheduler components Diffstat (except docs and test files) ------------------------------------- .testr.conf | 2 +- MANIFEST.in | 6 - bindep.txt | 27 + etc/kolla-kubernetes/kolla-kubernetes.yml | 152 +++- etc/kolla-kubernetes/service_resources.yml | 874 +++++++++++++++++++-- kolla_kubernetes/app.py | 26 +- kolla_kubernetes/commands/cmd_resource.py | 355 +++++++-- kolla_kubernetes/kube_service_status.py | 10 +- kolla_kubernetes/service_resources.py | 56 +- kolla_kubernetes/utils.py | 22 +- releasenotes/source/conf.py | 3 + services/ceph/ceph-admin-pod.yml.j2 | 56 ++ services/ceph/ceph-bootstrap-initial-mon.yml.j2 | 85 ++ services/ceph/ceph-bootstrap-osd.yml.j2 | 114 +++ services/ceph/ceph-mon-pod.yml.j2 | 123 +++ services/ceph/ceph-osd-pod.yml.j2 | 104 +++ services/ceph/ceph-rbd-pod.yml.j2 | 82 ++ services/ceph/ceph-secret.yml.j2 | 2 +- services/cinder/cinder-backup-pod.yml.j2 | 83 ++ .../cinder/cinder-bootstrap-job-create-db.yml.j2 | 76 ++ .../cinder/cinder-bootstrap-job-manage-db.yml.j2 | 35 + services/cinder/cinder-scheduler-pod.yml.j2 | 43 + services/cinder/cinder-volume-ceph-pod.yml.j2 | 103 +++ services/cinder/cinder-volume-lvm-pod.yml.j2 | 137 ++++ services/common/api-haproxy-configmap.yml.j2 | 7 +- .../common/common-create-keystone-endpoint.yml.j2 | 53 ++ services/common/common-create-keystone-user.yml.j2 | 54 ++ services/common/common-deployment.yml.j2 | 173 ++++ services/common/common-disk.sh.j2 | 2 +- services/common/common-lib.yml.j2 | 61 ++ services/common/common-pv.yml.j2 | 8 +- services/common/common-pvc.yml.j2 | 3 +- services/common/generic-service.yml.j2 | 1 + services/common/logging-configmap.yml.j2 | 66 ++ services/elasticsearch/elasticsearch-pod.yml.j2 | 73 ++ services/glance/glance-api-pod.yml.j2 | 84 +- services/glance/glance-api-service.yml.j2 | 13 - .../glance/glance-bootstrap-job-create-db.yml.j2 | 73 ++ .../glance/glance-bootstrap-job-manage-db.yml.j2 | 63 ++ services/glance/glance-bootstrap-job.yml.j2 | 234 ------ services/glance/glance-registry-pod.yml.j2 | 128 --- services/glance/glance-registry-service.yml.j2 | 13 - services/horizon/horizon-pod.yml.j2 | 59 +- services/horizon/horizon-service.yml.j2 | 23 +- services/iscsi/iscsi-iscsid-daemonset.yml.j2 | 93 +++ services/iscsi/iscsi-tgtd-daemonset.yml.j2 | 107 +++ services/keepalived/keepalived-configmap.yml.j2 | 34 + services/keepalived/keepalived-daemonset.yml.j2 | 87 ++ .../keystone-bootstrap-job-create-db.yml.j2 | 71 ++ .../keystone-bootstrap-job-endpoints.yml.j2 | 47 ++ .../keystone-bootstrap-job-manage-db.yml.j2 | 35 + services/keystone/keystone-bootstrap-job.yml.j2 | 133 ---- services/keystone/keystone-pod.yml.j2 | 40 +- services/keystone/keystone-service-admin.yml.j2 | 4 +- services/keystone/keystone-service-public.yml.j2 | 10 - services/mariadb/mariadb-bootstrap-job.yml.j2 | 23 +- services/mariadb/mariadb-pod.yml.j2 | 22 +- services/mariadb/mariadb-service.yml.j2 | 3 +- services/memcached/memcached-pod.yml.j2 | 16 +- services/memcached/memcached-service.yml.j2 | 3 +- .../neutron/neutron-bootstrap-job-create-db.yml.j2 | 71 ++ .../neutron/neutron-bootstrap-job-manage-db.yml.j2 | 44 ++ services/neutron/neutron-bootstrap-job.yml.j2 | 222 ------ services/neutron/neutron-control-pod.yml.j2 | 48 -- .../neutron/neutron-dhcp-agent-daemonset.yml.j2 | 125 +++ services/neutron/neutron-dhcp-agent-pod.yml.j2 | 59 -- services/neutron/neutron-l3-agent-daemonset.yml.j2 | 143 ++++ services/neutron/neutron-l3-agent-pod.yml.j2 | 58 -- .../neutron-metadata-agent-daemonset.yml.j2 | 74 ++ services/neutron/neutron-metadata-agent-pod.yml.j2 | 55 -- .../neutron-openvswitch-agent-daemonset.yml.j2 | 54 +- services/neutron/neutron-server-service.yml.j2 | 12 - services/nova/nova-compute-bootstrap-job.yml.j2 | 64 -- services/nova/nova-compute-pod.yml.j2 | 88 ++- services/nova/nova-control-api-pod.yml.j2 | 80 -- ...control-bootstrap-job-create-nova-api-db.yml.j2 | 26 +- ...ova-control-bootstrap-job-create-nova-db.yml.j2 | 24 +- ...trol-bootstrap-job-create-nova-endpoints.yml.j2 | 86 -- services/nova/nova-control-conductor-pod.yml.j2 | 35 +- services/nova/nova-control-consoleauth-pod.yml.j2 | 60 ++ services/nova/nova-control-scheduler-pod.yml.j2 | 35 +- services/nova/nova-libvirt-pod.yml.j2 | 74 +- services/nova/nova-libvirt-secret.yml.j2 | 16 + .../openvswitch/openvswitch-ovsdb-daemonset.yml.j2 | 99 +++ .../openvswitch-set-external-ip-job.yml.j2 | 26 + .../openvswitch-vswitchd-daemonset.yml.j2 | 105 +++ services/openvswitch/ovsdb-daemonset.yml.j2 | 93 --- services/openvswitch/vswitchd-daemonset.yml.j2 | 95 --- services/rabbitmq/rabbitmq-bootstrap-job.yml.j2 | 22 +- services/rabbitmq/rabbitmq-pod.yml.j2 | 59 +- .../rabbitmq/rabbitmq-service-management.yml.j2 | 8 + services/rabbitmq/rabbitmq-service.yml.j2 | 1 + services/skydns/skydns-pod.yml.j2 | 9 +- services/skydns/skydns-service.yml.j2 | 2 +- services/swift/swift-account-pod.yml.j2 | 69 +- services/swift/swift-account-service.yml.j2 | 5 +- services/swift/swift-container-pod.yml.j2 | 72 +- services/swift/swift-container-service.yml.j2 | 5 +- services/swift/swift-object-pod.yml.j2 | 81 +- services/swift/swift-object-service.yml.j2 | 5 +- services/swift/swift-proxy-pod.yml.j2 | 32 +- services/swift/swift-proxy-service.yml.j2 | 5 +- services/swift/swift-rsync-service.yml.j2 | 1 + setup.cfg | 10 +- test-requirements.txt | 1 + tools/fix-mitaka-config.py | 45 ++ tools/kolla-kubernetes | 1 + tools/kolla_kubernetes.py | 1 - tools/secret-generator.py | 14 +- tools/setup-ceph-secrets.sh | 14 + tools/setup-resolv-conf.sh | 15 + tools/setup_gate.sh | 719 +++++++++++++++++ tools/test.sh | 5 + tox.ini | 18 +- 127 files changed, 7037 insertions(+), 2315 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fd57cd3..93f9f1a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16 @@ testtools>=1.4.0 +bashate>=0.2 # Apache-2.0

1 0

[new][openstackansible] openstack-ansible 12.2.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are gleeful to announce the release of: openstack-ansible 12.2.5: Ansible playbooks for deploying OpenStack The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 12.2.5 ^^^^^^ Bug Fixes * Fix run-upgrade.sh so that it correctly calls nova-flavor- migration.yml and no longer fails due to the non-existent playbook nova-extra-migrations.yml. Changes in openstack-ansible 12.2.4..12.2.5 ------------------------------------------- 2821da8 Fix name of nova flavour migration playbook e83cb8c Update all SHAs for 12.2.5 Diffstat (except docs and test files) ------------------------------------- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 26 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 2 +- ...flavour-migration-upgrade-9b3dfbfbb05010de.yaml | 4 ++++ scripts/run-upgrade.sh | 2 +- scripts/scripts-library.sh | 2 +- 7 files changed, 22 insertions(+), 18 deletions(-)

1 0

[new][openstackansible] openstack-ansible-security 12.2.5 release
by no-reply＠openstack.org 17 Oct '16

17 Oct '16

We are chuffed to announce the release of: openstack-ansible-security 12.2.5: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. 12.2.5 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 12.2.3..12.2.5 ---------------------------------------------------- 77eaaf2 Disable DAC change auditing 31a8ff5 Disable martian logging by default e7373c4 Exclude /run from AIDE checks 6c9eb50 Ensure AIDE initializes on subsequent runs 23fe90b Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0