- OpenStack-announce - lists.openstack.org

[new][openstackansible] openstack-ansible-security 12.0.14 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are excited to announce the release of: openstack-ansible-security 12.0.14: Security hardening role for openstack-ansible For more details, please see below. 12.0.14 ^^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. Changes in openstack-ansible-security 12.0.0..12.0.14 ----------------------------------------------------- d90908f Handle Match properly in sshd_config d31fe31 Removing equal signs in docs b5cdff7 Switch from dict to individual variables 5c6317b Adding release note that should have backported 437aa54 Doc updates 3bf6b32 Add dependencies for paramiko 2.0 61506eb Add .swp files to .gitignore 8db2a82 Disable failed access auditd logging 556de08 Fix flake8 violation in conf.py 1300199 Update .gitreview for Liberty Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 + .gitreview | 1 + defaults/main.yml | 103 ++++---- other-requirements.txt | 4 + releasenotes/notes/.placeholder | 0 ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 274 +++++++++++++++++++++ releasenotes/source/index.rst | 10 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + tasks/auth.yml | 4 +- tasks/kernel.yml | 14 +- tasks/services.yml | 26 +- tasks/sshd.yml | 74 +++++- templates/osas-auditd.j2 | 50 ++-- test-requirements.txt | 1 + tox.ini | 3 + 57 files changed, 615 insertions(+), 179 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..a7c89ef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,0 +9 @@ oslosphinx>=2.5.0 # Apache-2.0 +reno>=0.1.1 # Apache-2.0

1 0

[new][openstackansible] openstack-ansible-rabbitmq_server 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are tickled pink to announce the release of: openstack-ansible-rabbitmq_server 13.1.2: rabbitmq_server for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-rabbitmq_server 13.1.0..13.1.2 ----------------------------------------------------------- b989aad Role tests should test against the same branch bcd0cbe Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 9 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_swift 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are jazzed to announce the release of: openstack-ansible-os_swift 13.1.2: os_swift for OpenStack Ansible For more details, please see below. 13.1.2 ^^^^^^ New Features ************ * Allow the fallocate_reserve option to be set (in bytes) for Swift, to help prevent disks from filling up and prevent a situation where Swift is unable to remove objects due to a lack of disk space. The fallocate_reserve value to is set to a default of 10GB. * Enable rsync module per object server drive by setting the "swift_rsync_module_per_drive" setting to "True". Set this to configure rsync and swift to utilise individual configuration per drive. This is required when disabling rsyncs to individual disks. For example, in a disk full scenario. Upgrade Notes ************* * The "swift_max_rsync_connections" default value has changed from 2 to 4 in order to match the OpenStack swift documented value. Changes in openstack-ansible-os_swift 13.1.1..13.1.2 ---------------------------------------------------- fa0fa62 Add functional testing to stable/mitaka branch 507495d Setup rsync module per object server drive ca1d2fe Expose and set a default fallocate_reserve value Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 19 +- .../swift-fallocate-reserve-ff513025da68bfed.yaml | 8 + ...ft-rsync-module-per-drive-79b05af8276e7d6e.yaml | 12 + tasks/swift_pre_install.yml | 1 + templates/account-server.conf.j2 | 3 + templates/container-server.conf.j2 | 3 + templates/object-server-replicator.conf.j2 | 3 + templates/object-server.conf.j2 | 6 + templates/rsyncd.conf.j2 | 38 +++ 28 files changed, 1049 insertions(+), 329 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_nova 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are jazzed to announce the release of: openstack-ansible-os_nova 13.1.2: os_nova for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_nova 13.1.0..13.1.2 --------------------------------------------------- bc56eac Add dependencies for paramiko 2.0 48ad25f Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 20 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-ironic 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are delighted to announce the release of: openstack-ansible-ironic 13.1.2: Ironic Role for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-ironic 13.1.0..13.1.2 -------------------------------------------------- 9f17867 Role tests should test against the same branch b7de257 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 17 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-plugins 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are eager to announce the release of: openstack-ansible-plugins 13.1.2: plugins for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-plugins 13.1.1..13.1.2 --------------------------------------------------- d1f38d5 Adjust release note for config template Diffstat (except docs and test files) ------------------------------------- ...fig_template-MultiStrOps-support-c28e33fd5044e14d.yaml | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_heat 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are chuffed to announce the release of: openstack-ansible-os_heat 13.1.2: os_heat for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_heat 13.1.0..13.1.2 --------------------------------------------------- c1d1216 Role tests should test against the same branch ce33461 Add dependencies for paramiko 2.0 Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 4 files changed, 17 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index a39d560..1b11d03 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ apt-transport-https + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0

[new][openstackansible] openstack-ansible-os_neutron 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are overjoyed to announce the release of: openstack-ansible-os_neutron 13.1.2: os_neutron role for OpenStack- Ansible For more details, please see below. 13.1.2 ^^^^^^ Upgrade Notes * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. The default DHCP configuration to advertise an MTU to instances has therefore been removed from the variable "neutron_dhcp_config". * As described in the Mitaka release notes (http://docs.openstack.org/releasenotes/neutron/mitaka.html) Neutron now correctly calculates for and advertises the MTU to instances. As such the "neutron_network_device_mtu" variable has been removed and the hard-coded values in the templates for "advertise_mtu", "path_mtu", and "segment_mtu" have been removed to allow upstream defaults to operate as intended. Changes in openstack-ansible-os_neutron 13.1.1..13.1.2 ------------------------------------------------------ d39b160 Update classpath for FWaaS driver abbaaac More MTU cleanups for Neutron 5083902 Update paste, policy and rootwrap configurations 2016-05-19 5ba0998 Stop configuring neutron to enforce DHCP MTU option 3fdfa35 removed duplicate key Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 -- files/rootwrap.d/linuxbridge-plugin.filters | 7 +++++-- releasenotes/notes/neutron-dhcp-mtu-8767de6f541b04c1.yaml | 8 ++++++++ releasenotes/notes/neutron-mtu-cleanup-ce73693b4f7aef0d.yaml | 9 +++++++++ tasks/plumgrid_config.yml | 4 ++-- templates/neutron.conf.j2 | 4 +--- templates/plugins/ml2/ml2_conf.ini.j2 | 3 --- 7 files changed, 25 insertions(+), 12 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_horizon 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are pleased to announce the release of: openstack-ansible-os_horizon 13.1.2: OpenStack Horizon role for OpenStack Ansible For more details, please see below. 13.1.2 ^^^^^^ New Features * The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the panel by setting the following Ansible variable: horizon_enable_neutron_lbaas: True The tasks in the os_horizon role will determine which LBaaS version is in use (via "neutron_plugin_base") and activate the correct panel for LBaaS v1 or v2. * Horizon's IPv6 support is now configurable with Ansible variables. Deployers can enable IPv6 support in Horizon by setting the following variable: horizon_enable_ipv6: True Please note: Horizon will still display IPv6 addresses in various panels with IPv6 support disabled. However, it will not allow any direct management of IPv6 configuration. Changes in openstack-ansible-os_horizon 13.1.1..13.1.2 ------------------------------------------------------ 452e4e2 Enable new LBaaS panel in Horizon 3e867f8 Enable IPv6 support in Horizon Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 5 ++++- .../notes/lbaasv2-horizon-panel-8f99026b025ca2fd.yaml | 13 +++++++++++++ .../notes/make-ipv6-a-toggle-63d9c839e204cdda.yaml | 14 ++++++++++++++ tasks/horizon_post_install.yml | 9 +++++++++ templates/horizon_local_settings.py.j2 | 4 ++-- 5 files changed, 42 insertions(+), 3 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_glance 13.1.2 release
by no-reply＠openstack.org 02 Jun '16

02 Jun '16

We are jubilant to announce the release of: openstack-ansible-os_glance 13.1.2: os_glance for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_glance 13.1.0..13.1.2 ----------------------------------------------------- 835aef8 Add dependencies for paramiko 2.0 ceb4dee Role tests should test against the same branch Diffstat (except docs and test files) ------------------------------------- other-requirements.txt | 4 ++++ 3 files changed, 18 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/other-requirements.txt b/other-requirements.txt index 6eac5c2..67cd643 100644 --- a/other-requirements.txt +++ b/other-requirements.txt @@ -16,0 +17,4 @@ curl + +# Requirements for Paramiko 2.0 +libssl-dev +libffi-dev

1 0