- OpenStack-announce - lists.openstack.org

[new][openstackansible] openstack-ansible-os_keystone 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are exuberant to announce the release of: openstack-ansible-os_keystone 13.3.4: os_keystone for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_keystone 13.3.1..13.3.4 ------------------------------------------------------- 4f30d3a Force a restart of all the apache nodes during upgrade 1432dea Disable stderr logging Diffstat (except docs and test files) ------------------------------------- tasks/keystone_service_setup.yml | 9 --------- tasks/main.yml | 3 +++ templates/keystone.conf.j2 | 2 ++ 3 files changed, 5 insertions(+), 9 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_cinder 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are ecstatic to announce the release of: openstack-ansible-os_cinder 13.3.4: os_cinder role for OpenStack- Ansible For more details, please see below. Changes in openstack-ansible-os_cinder 13.3.1..13.3.4 ----------------------------------------------------- de29bf7 Fix cinder role condition when no cinder_volumes 77f138e Disable stderr logging c4eae35 Update paste, policy and rootwrap configurations 2016-08-01 Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 15 +++++++++------ templates/api-paste.ini.j2 | 23 +++++++++++++---------- templates/cinder.conf.j2 | 2 ++ 3 files changed, 24 insertions(+), 16 deletions(-)

1 0

[new][openstackansible] openstack-ansible 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are happy to announce the release of: openstack-ansible 13.3.4: Ansible playbooks for deploying OpenStack With source available at: http://git.openstack.org/cgit/openstack/openstack-ansible For more details, please see below. 13.3.4 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible 13.3.3..13.3.4 ------------------------------------------- e3e60b1 Fix link for lxc-openstack.apparmor.j2 d97b0d1 Docs: Fixed double "that" in docs ac86e5b Retain apt sources options during host bootstrap 42b2a79 load variables as a simple var for upgrades 731164f Restart OS services when symlinks are created 98eef32 Update SHA for openstack_openrc role c665a0e Reduce minimum data disk size for the AIO to 55GB 622fc94 Use correct version when creating backup dir de1a22b Make the file name for user_secrets a variable 777d5bf Update all SHAs for 13.3.4 98c7625 glance_api_servers must contain a valid url with protocol d3262bb Fix ml2 ports after an upgrade Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +++---- global-requirement-pins.txt | 2 +- .../defaults/repo_packages/openstack_services.yml | 32 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/hosts.yml | 6 ++-- .../ceph_client/tasks/ceph_install_python_libs.yml | 4 +++ .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 ++++++++++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 +++++++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++++++++++++ scripts/scripts-library.sh | 2 +- .../playbooks/deploy-config-changes.yml | 4 +-- .../playbooks/rfc1034_1035-cleanup.yml | 20 ++++++++++++++ .../playbooks/user-secrets-adjustment.yml | 9 +++--- .../scripts/migrate_openstack_vars.py | 2 +- .../templates/user_variables.aio.yml.j2 | 4 +-- 22 files changed, 132 insertions(+), 44 deletions(-)

1 0

[new][openstackansible] openstack-ansible-security 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are exuberant to announce the release of: openstack-ansible-security 13.3.4: Security hardening role for openstack-ansible For more details, please see below. 13.3.4 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 13.3.3..13.3.4 ---------------------------------------------------- ca9b7de Disable DAC change auditing 775f641 Disable martian logging by default a329034 Exclude /run from AIDE checks c16d117 Ensure AIDE initializes on subsequent runs e0d0e36 Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0

[new][openstackansible] openstack-ansible-os_aodh 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are chuffed to announce the release of: openstack-ansible-os_aodh 13.3.4: os_aodh for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-os_aodh 13.3.1..13.3.4 --------------------------------------------------- 0c80b7c Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/aodh.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-os_ceilometer 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are pumped to announce the release of: openstack-ansible-os_ceilometer 13.3.4: os_ceilometer role for OpenStack-Ansible For more details, please see below. Changes in openstack-ansible-os_ceilometer 13.3.1..13.3.4 --------------------------------------------------------- 3a24b01 Disable stderr logging Diffstat (except docs and test files) ------------------------------------- templates/ceilometer.conf.j2 | 2 ++ 1 file changed, 2 insertions(+)

1 0

[new][openstackansible] openstack-ansible-galera_server 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are exuberant to announce the release of: openstack-ansible-galera_server 13.3.4: Galera Server role for OpenStack-Ansible For more details, please see below. 13.3.4 ^^^^^^ Bug Fixes * The "--compact" flag has been removed from xtrabackup options. This had been shown to cause crashes in some SST situations Changes in openstack-ansible-galera_server 13.3.1..13.3.4 --------------------------------------------------------- af8e44d remove compact option from xtrabackup Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/xtrabackup-compact-disable-8ae9215207147ebc.yaml | 4 ++++ templates/cluster.cnf.j2 | 1 - 2 files changed, 4 insertions(+), 1 deletion(-)

1 0

[new][openstackansible] openstack-ansible-memcached_server 13.3.4 release
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are overjoyed to announce the release of: openstack-ansible-memcached_server 13.3.4: memcached_server for OpenStack Ansible For more details, please see below. Changes in openstack-ansible-memcached_server 13.2.0..13.3.4 ------------------------------------------------------------ 99e5aee Ensure that gate test does not remove ~/.ansible/tmp 681b84f Update tox configuration Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 - tox.ini | 121 +++++++++++++++++++++++++++++++++++--------------- 2 files changed, 86 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a45faa5..22c7bbe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +0,0 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0,!=1.9.6

1 0

[new][tripleo] tripleo-common 5.2.0 release (newton)
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are enthusiastic to announce the release of: tripleo-common 5.2.0: A common library for TripleO workflows. This release is part of the newton release series. With source available at: http://git.openstack.org/cgit/openstack/tripleo-common Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 5.1.0..5.2.0 -------------------------------------- 36b31c1 Fix upload-swift-artifacts for old OSclient 7ee6612 Retry sending messages to Zaqar if it fails 49a7b8e Port password generation from tripleoclient to tripleo-common 7d8c9ac Remove the unused service_host arg from node registration cfed296 Remove the old, deprecated Mistral action names f3400c5 Updated from global requirements d593024 Return the result of create_plan in create_deployment_plan workflow f768bb8 Fix the default plan creation 2d87e96 Add template processing to the update plan workflow. 18bd19a Revert "Upgrades: Add StackUpgradeManager" ef60b1a Revert "Upgrades: Add post-upgrade stack update" 15222a6 Revert "Upgrades: Add initialization to StackUpgradeManager" 341f5d8 Provide: return task result in case of failure cd9a49a Check the result of the parent action when subclassing a3182e7 Add FS_TYPE xfs to RHEL and CentOS images 8ff8e56 Handle missing mistral environment 69f3e6e Clean up messages in the 'configure' workflow 960dd97 Fix upload-swift-artifacts work new OSclient eaf0051 Ignore changes to images in nova servers Diffstat (except docs and test files) ------------------------------------- image-yaml/overcloud-images-centos7.yaml | 2 + image-yaml/overcloud-images-rhel7.yaml | 2 + requirements.txt | 5 +- scripts/upload-swift-artifacts | 6 +- setup.cfg | 24 +---- tripleo_common/actions/baremetal.py | 1 - tripleo_common/actions/deployment.py | 6 ++ tripleo_common/actions/parameters.py | 51 +++++++++ tripleo_common/actions/templates.py | 17 ++- tripleo_common/actions/validations.py | 4 + tripleo_common/constants.py | 35 ++++++ tripleo_common/upgrade.py | 83 -------------- tripleo_common/utils/nodes.py | 30 ++---- tripleo_common/utils/passwords.py | 75 +++++++++++++ undercloud_heat_plugins/server_update_allowed.py | 6 ++ workbooks/baremetal.yaml | 18 ++-- workbooks/deployment.yaml | 9 +- workbooks/plan_management.yaml | 131 ++++++++++++++++++++--- workbooks/validations.yaml | 6 ++ 24 files changed, 501 insertions(+), 288 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0b0d0ba..d4b8849 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ oslo.config>=3.14.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -12 +12 @@ oslo.utils>=3.16.0 # Apache-2.0 -python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 +python-glanceclient>=2.5.0 # Apache-2.0 @@ -18,0 +19 @@ python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 +passlib>=1.6 # BSD

1 0

[new][tripleo] python-tripleoclient 5.2.0 release (newton)
by no-reply＠openstack.org 29 Sep '16

29 Sep '16

We are overjoyed to announce the release of: python-tripleoclient 5.2.0: TripleO client This release is part of the newton stable release series. For more details, please see below. Changes in python-tripleoclient 5.1.0..5.2.0 -------------------------------------------- 1b7b731 Deprecate a number of CLI args that map directly to Heat params d6cbbdb Stop logging swiftclient errors 5f4866d Remove deprecation warning for bulk introspection 702551f Remove the reference to overcloud-without-mergepy file 203c6dd Keystone credentials needs to be set with the overcloud password 6365c76 Stop plan creation when container exists b248497 Remove the get_hiera_key function 141615b Change the level of mocking for the wait_for_stack_ready test 322ccb7 Provide more information when 'node provide' fails 03916f2 Display error message when socket is closed b270ec9 Use the passed in workflow when creating or updating a plan 3c48c30 Revert "Upgrades: Add 'stack upgrade' command" c5dc912 Revert "Upgrades: Add finish stage to 'overcloud upgrade'" 2440f50 Revert "Upgrades: Add initialization stage to 'overcloud upgrade'" 3f2a8be Update the Mistral action names 3b31ea1 Always use absolute path for tht_root da83891 Tripleoclient leaks temporary files c1619c3 Remove one last reference to openstackclient.tests ed61580 Updated from global requirements a18ab1f Use a released version of tripleo-common 1748a85 Remove the environments from Mistral when removing from Swift dbe335b Print the execution ID when starting Mistral workflows 5ecac48 Use the hexdigest of the path to make the filename unique in swift 3e8d9df Pass the timeout to the deploy workflow 6466317 Add `openstack overcloud plan deploy` 22bdf82 Remove openstackclient imports in the new parameters command 313b730 Remove excessive output when configuring nodes 19eaf84 Throw an error/exception when interactive overcloud update fails Diffstat (except docs and test files) ------------------------------------- requirements.txt | 6 +- setup.cfg | 2 +- tripleoclient/constants.py | 2 +- tripleoclient/exceptions.py | 4 + tripleoclient/plugin.py | 11 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 97 +++++-------- .../v1/overcloud_update/test_overcloud_update.py | 19 ++- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 156 --------------------- tripleoclient/utils.py | 80 +++++++---- tripleoclient/v1/baremetal.py | 8 +- tripleoclient/v1/overcloud_deploy.py | 152 ++++++++------------ tripleoclient/v1/overcloud_parameters.py | 4 +- tripleoclient/v1/overcloud_plan.py | 32 ++++- tripleoclient/v1/overcloud_update.py | 4 + tripleoclient/v1/overcloud_upgrade.py | 102 -------------- tripleoclient/workflows/baremetal.py | 52 +++++-- tripleoclient/workflows/base.py | 13 ++ tripleoclient/workflows/deployment.py | 54 ++++++- tripleoclient/workflows/parameters.py | 2 +- tripleoclient/workflows/plan_management.py | 34 +++-- 29 files changed, 561 insertions(+), 561 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b51193f..a1bba27 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ os-cloud-config # Apache-2.0 -osc-lib>=1.0.2 # Apache-2.0 +osc-lib>=1.0.2 # Apache-2.0 @@ -18,3 +18 @@ websocket-client>=0.32.0 # LGPLv2+ - -# tripleoclient is tied to tripleo-common and expects to use the latest code. --e git://github.com/openstack/tripleo-common.git#egg=tripleo_common +tripleo-common>=5.0.0 # Apache-2.0

1 0