October 2017 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-os_sahara 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-os_sahara 15.1.9: os_sahara for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_sahara/ For more details, please see below. Changes in openstack-ansible-os_sahara 15.1.4..15.1.9 ----------------------------------------------------- 4a224f8 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/sahara_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are glad to announce the release of: openstack-ansible-rabbitmq_server 15.1.9: rabbitmq_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 15.1.8..15.1.9 ----------------------------------------------------------- d075b30 Remove update_cache for yum 6701fba Add automatic restart for RabbitMQ 8aadc97 Allow RabbitMQ/Erlang repo overrides without extra-vars 2f1cbee Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 34 ++++++++++++++++++++-------- defaults/main.yml | 10 ++++++++ tasks/install_yum.yml | 1 - tasks/rabbitmq_post_install.yml | 15 ++++++++++-- templates/systemd-restart-on-failure.conf.j2 | 4 ++++ vars/debian.yml | 4 ++-- vars/redhat.yml | 4 ++-- 7 files changed, 56 insertions(+), 16 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are psyched to announce the release of: openstack-ansible-plugins 15.1.9: plugins for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. 15.1.9 ^^^^^^ New Features * The config_template template module now supports writing out valueless INI options without suffixing them with '=' or ':'. This is done via the 'ignore_none_type' attribute. If ignore_none_type is set to true, these key/value entries will be ignored, if it's set to false, then ConfigTemplateParser will write out only the option name without the '=' or ':' suffix. The default is true. Changes in openstack-ansible-plugins 15.1.8..15.1.9 --------------------------------------------------- b4a5996 Add ignore_none_type to config template aa0e9aa Backport pyOpenSSL bindep change from master Diffstat (except docs and test files) ------------------------------------- action/_v2_config_template.py | 53 ++++++++++++++++++---- bindep.txt | 2 +- library/config_template | 10 ++++ ...template-ignore-none-type-9387c236853f061b.yaml | 9 ++++ 6 files changed, 92 insertions(+), 11 deletions(-)

1 0

[openstackansible] openstack-ansible-os_swift 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are thrilled to announce the release of: openstack-ansible-os_swift 15.1.9: os_swift for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 15.1.8..15.1.9 ---------------------------------------------------- 0946e99 Fix ordering of swift3 in middleware pipeline f558191 Updated from OpenStack Ansible Tests 8107f5f Optimize swift gate Diffstat (except docs and test files) ------------------------------------- bindep.txt | 34 +++++++++++++++++++++++++--------- defaults/main.yml | 4 ++-- tasks/swift_install.yml | 3 +-- 11 files changed, 46 insertions(+), 27 deletions(-)

1 0

[openstackansible] openstack-ansible-os_trove 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are happy to announce the release of: openstack-ansible-os_trove 15.1.9: os_trove role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_trove/ For more details, please see below. Changes in openstack-ansible-os_trove 15.1.4..15.1.9 ---------------------------------------------------- 93913b6 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/trove_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-os_neutron 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are stoked to announce the release of: openstack-ansible-os_neutron 15.1.9: os_neutron role for OpenStack- Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 15.1.8..15.1.9 ------------------------------------------------------ 1608c0a Simplify the string check for offline db migrations af945d5 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 50 +++++++++++++------------- bindep.txt | 36 +++++++++++++------ tasks/neutron_db_setup.yml | 4 +-- 4 files changed, 98 insertions(+), 79 deletions(-)

1 0

[openstackansible] openstack-ansible-os_horizon 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-os_horizon 15.1.9: OpenStack Horizon role for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 15.1.7..15.1.9 ------------------------------------------------------ e4ff13c Optimise the role execution Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 2 ++ tasks/horizon_apache.yml | 14 ++++---------- tasks/main.yml | 9 +++++---- 3 files changed, 11 insertions(+), 14 deletions(-)

1 0

[openstackansible] openstack-ansible-os_glance 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-os_glance 15.1.9: os_glance for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 15.1.6..15.1.9 ----------------------------------------------------- 802c3dc Include ceph_client role if needed 5368d71 Revert "Only sync glance database on major versions" d98041c Switch from run_once back to inventory scoping 20f7450 Hedge upgrade process against no software change 8426b52 Use listen instead of chained notifiers 6e2d506 Ensure that services restart in a particular order 8a5fb5d Only sync glance database on major versions 13cdc93 Pass packages to install as a list Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 ++ handlers/main.yml | 20 +++++++------------- tasks/glance_init_systemd.yml | 27 +++++++++++---------------- tasks/glance_install.yml | 17 +++++++++++++++-- tasks/main.yml | 22 ++++++++++++++++++++-- templates/glance-systemd-init.j2 | 4 ++-- templates/glance-systemd-tmpfiles.j2 | 4 ++-- vars/main.yml | 31 +++++++++++++++++++++++++++++++ 9 files changed, 94 insertions(+), 37 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-ironic 15.1.9: Ironic Role for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. Changes in openstack-ansible-ironic 15.1.4..15.1.9 -------------------------------------------------- b217195 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/ironic_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-os_magnum 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are happy to announce the release of: openstack-ansible-os_magnum 15.1.9: os_magnum for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. 15.1.9 ^^^^^^ Upgrade Notes ************* * The magnum client interaction will now make use of the public endpoints by default. Previously this was set to use internal endpoints. * The keystone endpoints for instances spawned by magnum will now be provided with the public endpoints by default. Previously this was set to use internal endpoints. Security Issues *************** * The magnum client interaction will now make use of the public endpoints by default. Previously this was set to use internal endpoints. * The keystone endpoints for instances spawned by magnum will now be provided with the public endpoints by default. Previously this was set to use internal endpoints. Changes in openstack-ansible-os_magnum 15.1.4..15.1.9 ----------------------------------------------------- dfb3838 Add venv_tag local fact 9aea803 Enable custom keystone endpoint_type in templates 0bed75d Update paste, policy and rootwrap configurations 2017-05-15 Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/magnum-client-urls-64af5efc9ece6680.yaml | 13 +++++++++++++ tasks/magnum_install.yml | 7 +++++++ templates/magnum.conf.j2 | 3 ++- templates/policy.json.j2 | 4 ++-- 4 files changed, 24 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-os_cinder 15.1.9: os_cinder role for OpenStack- Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 15.1.8..15.1.9 ----------------------------------------------------- efda077 Correct cinder online migrations command dda49aa Ensure online migrations can run 9f775c1 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 - Vagrantfile | 31 +++++++++++++---- bindep.txt | 38 ++++++++++++++------- tasks/cinder_db_setup.yml | 3 +- 5 files changed, 98 insertions(+), 62 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-os_heat 15.1.9: os_heat for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 15.1.7..15.1.9 --------------------------------------------------- 87582ad Optimise role execution Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 ++++ handlers/main.yml | 9 +++++---- tasks/heat_init_common.yml | 27 --------------------------- tasks/heat_init_systemd.yml | 29 +++++++++++++---------------- tasks/main.yml | 14 ++++++++++---- templates/heat-systemd-init.j2 | 4 ++-- templates/heat-systemd-tmpfiles.j2 | 4 ++-- vars/main.yml | 31 +++++++++++++++++++++++++++++++ 8 files changed, 67 insertions(+), 55 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-os_ceilometer 15.1.9: os_ceilometer role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. 15.1.9 ^^^^^^ New Features * The "os_ceilometer" role now includes a facility where you can place your own templates in "/etc/openstack_deploy/ceilometer" (by default) and it will be deployed to the target host after being interpreted by the template engine. If no file is found there, the fallback of the git sourced template is used. Changes in openstack-ansible-os_ceilometer 15.1.3..15.1.9 --------------------------------------------------------- b4fa7cf Source template files from git or deploy host 983f2fa Add venv_tag local fact 9641155 Fix for lookup and get_url occuring in different places 7c9ab5d Perform an atomic policy file change Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 42 ++++++++-- handlers/main.yml | 57 +++++++++++-- .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 7 ++ tasks/ceilometer_apache.yml | 14 ++-- tasks/ceilometer_init_common.yml | 29 ------- tasks/ceilometer_init_systemd.yml | 2 + tasks/ceilometer_install.yml | 16 +++- tasks/ceilometer_post_install.yml | 93 +++++++++++----------- tasks/main.yml | 2 +- templates/rootwrap.conf.j2 | 27 +++++++ vars/main.yml | 42 ++++++++++ 11 files changed, 232 insertions(+), 99 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-os_gnocchi 15.1.9: os_gnocchi for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. Changes in openstack-ansible-os_gnocchi 15.1.5..15.1.9 ------------------------------------------------------ 715d2bd Ensure that policy file has correct group/mode Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 3 +++ 1 file changed, 3 insertions(+)

1 0

[openstackansible] openstack-ansible-os_barbican 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are psyched to announce the release of: openstack-ansible-os_barbican 15.1.9: os_barbican for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_barbican/ For more details, please see below. Changes in openstack-ansible-os_barbican 15.1.4..15.1.9 ------------------------------------------------------- 91c62d5 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/barbican_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-os_aodh 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are psyched to announce the release of: openstack-ansible-os_aodh 15.1.9: os_aodh for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 15.1.5..15.1.9 --------------------------------------------------- 96b86fa Ensure that policy file has correct group/mode Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 3 +++ 1 file changed, 3 insertions(+)

1 0

[openstackansible] openstack-ansible-memcached_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are happy to announce the release of: openstack-ansible-memcached_server 15.1.9: memcached_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 15.1.8..15.1.9 ------------------------------------------------------------ 53e845e Add automatic restart for memcached 8a644cd Backport pyOpenSSL bindep change Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- tasks/memcached_config.yml | 8 ++++++++ templates/systemd-restart-on-failure.conf.j2 | 4 ++++ 3 files changed, 13 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_keystone 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-os_keystone 15.1.9: os_keystone for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 15.1.8..15.1.9 ------------------------------------------------------- dfb6fa3 Ensure online migrations can run ba3e033 Updated from OpenStack Ansible Tests cffbd21 Update paste, policy and rootwrap configurations 2017-07-27 Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 -- Vagrantfile | 31 ++++++++++++---- bindep.txt | 36 +++++++++++++------ tasks/keystone_db_setup.yml | 12 +++++-- templates/policy.json.j2 | 2 +- 6 files changed, 106 insertions(+), 64 deletions(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are chuffed to announce the release of: openstack-ansible-rabbitmq_server 14.2.9: rabbitmq_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. 14.2.9 ^^^^^^ New Features ************ * A new repository for installing modern erlang from ESL (erlang solutions) has been added giving us the ability to install and support modern stable erlang over numerous operating systems. * The ability to set the RabbitMQ repo URL for both erlang and RabbitMQ itself has been added. This has been done to allow deployers to define the location of a given repo without having to fully redefine the entire set of definitions for a specific repository. The default variables *rabbitmq_gpg_keys*, *rabbitmq_repo_url*, and *rabbitmq_erlang_repo_url* have been created to facilitate this capability. * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Upgrade Notes ************* * Changing to the ESL repos has no upgrade impact. The version of erlang provided by ESL is newer than that what is found in the distro repos. Furthermore, a pin has been added to ensure that APT always uses the ESL repos as it's preferred source which has been done to simply ensure APT is always pointed at ESL. Bug Fixes ********* * Based on documentation from RabbitMQ [ https://www.rabbitmq.com /which-erlang.html ] this change ensures the version of erlang we're using across distros is consistent and supported by RabbitMQ. Changes in openstack-ansible-rabbitmq_server 14.2.8..14.2.9 ----------------------------------------------------------- f2d110a Add release note for RabbitMQ ulimit 8cb5624 Increase RabbitMQ's ulimit to 65536 b8f4fe9 Pin erlang packages to version 19.3 4eb83b1 Install specific version of Erlang from ESL fd17f99 Updated from OpenStack Ansible Tests c64f313 Updated from OpenStack Ansible Tests 2a3d2fe Remove update_cache for yum 2e3d34b Add automatic restart for RabbitMQ 6546786 Allow RabbitMQ/Erlang repo overrides without extra-vars Diffstat (except docs and test files) ------------------------------------- .gitignore | 6 +- Vagrantfile | 34 ++++-- bindep.txt | 15 ++- defaults/main.yml | 16 ++- meta/main.yml | 8 ++ releasenotes/notes/esl-repo-6ff0c7f24ad2a043.yaml | 25 ++++ .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 + tasks/install_apt.yml | 119 ++++++++++--------- tasks/install_yum.yml | 126 +++++++++++++-------- tasks/rabbitmq_post_install.yml | 15 ++- templates/systemd-restart-on-failure.conf.j2 | 4 + vars/debian.yml | 34 ++++-- vars/redhat.yml | 42 ++++--- 14 files changed, 356 insertions(+), 184 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We high-spiritedly announce the release of: openstack-ansible-rsyslog_server 14.2.9: rsyslog_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 14.1.1..14.2.9 ---------------------------------------------------------- 27e47df Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-haproxy_server 15.1.9: haproxy_server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. 15.1.9 ^^^^^^ Upgrade Notes * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Changes in openstack-ansible-haproxy_server 15.1.8..15.1.9 ---------------------------------------------------------- 749d22f Remove unused/unnecessary haproxy_server vars/files 0942aab Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 35 +++++++++++++++------- defaults/main.yml | 6 ---- meta/main.yml | 9 +----- .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 +++++ tasks/haproxy_pre_install.yml | 9 ++++++ vars/ubuntu-16.04.yml | 19 ++++++++---- 6 files changed, 57 insertions(+), 29 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-galera_server 15.1.9: Galera Server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 15.1.9 ^^^^^^ Bug Fixes * Mysql cnf files can now be properly overridden. The config_template module has been extended to support valueless options, such as those that are found in the my.cnf file(i.e. *quick* under the *mysqldump* section). To use valueless options, use the *ignore_none_type* attribute of the config_template module. Changes in openstack-ansible-galera_server 15.1.8..15.1.9 --------------------------------------------------------- 21aed2d Fix MariaDB apt package pinning 0211193 Add ignore_none_type to config_template b043c21 Toggle percona repo without extra-vars 5b84291 Use block/rescue for error handling 8f5a4d0 Allow MariaDB repo overrides without extra-vars a3c9610 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 46 +++++++++++------ defaults/main.yml | 19 +++++++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 +++ tasks/galera_install_apt.yml | 60 +++++++++++----------- tasks/galera_install_yum.yml | 49 +++++++++--------- tasks/galera_post_install.yml | 1 + vars/redhat-7.yml | 8 +-- vars/ubuntu-16.04.yml | 12 ++--- 9 files changed, 128 insertions(+), 80 deletions(-)

1 0

[openstackansible] ansible-hardening 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: ansible-hardening 15.1.9: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.9 ^^^^^^ Security Issues * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Changes in ansible-hardening 15.1.3..15.1.9 ------------------------------------------- 957c0bc Change default prohibit root sshd password auth 2802c55 Backport bindep change from master 4638a9e Add equalto Jinja2 test for EL7 a2782dd tasks: rhel7stig: aide: Fix conditionals for Ubuntu exclusions 248640b tasks: rhel7stig: aide: Use 'aide -i' if 'aideinit' is not available f9299c5 tasks: rhel7stig: sshd: Avoid using with_fileglob for remote hosts dfaf108 [Docs] Replace security role references d2de624 Fix ansible-hardening references in tox/playbook 49ab633 Remove 'physical_host' from inventory f215c22 Fix .gitreview for older branches 4b6a43d Don't install python-ndg_httpsclient 1dd16ea [Docs] Fix deprecation docs for RHEL 6 content 7db180f Configure AIDE before initial run 1260f81 Check for grub2 defaults file 3a2486f Fix security role gate ae2ea66 Do not update grub if grub not used Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.md | 23 +++++----- README.rst | 6 +-- bindep.txt | 4 +- defaults/main.yml | 20 ++++---- files/V-38682-modprobe.conf | 2 +- files/aide_extra.conf | 14 ------ handlers/main.yml | 2 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 +++ setup.cfg | 2 +- tasks/main.yml | 9 +++- tasks/rhel6stig/sshd.yml | 28 ++++++------ tasks/rhel7stig/aide.yml | 53 ++++++++++++++-------- tasks/rhel7stig/auth.yml | 15 +++++- tasks/rhel7stig/kernel.yml | 2 +- tasks/rhel7stig/misc.yml | 3 +- tasks/rhel7stig/sshd.yml | 24 ++++++++-- templates/osas-auditd-rhel7.j2 | 4 +- tox.ini | 15 +----- vars/redhat.yml | 2 +- vars/ubuntu.yml | 2 +- 34 files changed, 212 insertions(+), 168 deletions(-)

1 0

[openstackansible] openstack-ansible 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible 15.1.9: Ansible playbooks for deploying OpenStack This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.9 ^^^^^^ New Features ************ * The config_template template module now supports writing out valueless INI options without suffixing them with '=' or ':'. This is done via the 'ignore_none_type' attribute. If ignore_none_type is set to true, these key/value entries will be ignored, if it's set to false, then ConfigTemplateParser will write out only the option name without the '=' or ':' suffix. The default is true. Upgrade Notes ************* * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. * Mysql cnf files can now be properly overridden. The config_template module has been extended to support valueless options, such as those that are found in the my.cnf file(i.e. *quick* under the *mysqldump* section). To use valueless options, use the *ignore_none_type* attribute of the config_template module. Changes in openstack-ansible 15.1.8..15.1.9 ------------------------------------------- 031317a Fix Barbican's health checks 27fbd63 Include db migration fix for next release c6fa7d8 Remove urllib3/requests from requirements 417406b Suppress curl warning w/shell module a996464 Pin Shade to last known version 1c580c3 Bump ceph-ansible to 2.2.11 tag bc2b1eb Fix LXC container start order aac4e02 Update role SHA's for online migration fixes d5048ca Correct cinder online migrations command 9cb4ecc Update documentation redirects f2c5e89 Remove global pin for ldappool d27e24c Set serial to 100% for nova_compute add34f5 Update all SHAs for 15.1.9 4d3ea00 Improve proxy vars in user_variables.yml Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 42 +++++++-------- deploy-guide/source/conf.py | 4 +- etc/openstack_deploy/user_variables.yml | 10 ++-- global-requirement-pins.txt | 9 +--- playbooks/common-playbooks/cinder.yml | 2 +- playbooks/common-playbooks/neutron.yml | 2 +- playbooks/common-playbooks/nova.yml | 2 +- playbooks/common-tasks/os-lxc-container-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 60 +++++++++++----------- playbooks/galera-install.yml | 2 +- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/os-cinder-install.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- playbooks/os-nova-install.yml | 2 +- playbooks/os-swift-install.yml | 2 +- playbooks/rabbitmq-install.yml | 2 +- playbooks/rsyslog-install.yml | 2 +- playbooks/utility-install.yml | 2 + playbooks/vars/configs/haproxy_config.yml | 4 +- ...template-ignore-none-type-9387c236853f061b.yaml | 9 ++++ .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 ++++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 +++ releasenotes/notes/ldappool-65dcc48c12d28d07.yaml | 4 +- .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 +++ ...ot-login-without-password-948ec79c6508c19b.yaml | 6 +++ requirements.txt | 2 - 27 files changed, 119 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c6fb0f1..d98ec30 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -16 +14,0 @@ PyYAML>=3.10.0 # MIT -urllib3>=1.15.1 # MIT

1 0

[openstackansible] openstack-ansible-os_swift 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are excited to announce the release of: openstack-ansible-os_swift 14.2.9: os_swift for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 14.2.7..14.2.9 ---------------------------------------------------- ff2c096 Optimise the execution of the role 3921327 Filter services dictionary per host Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 6 ++-- tasks/main.yml | 66 ++++++++++++++++----------------------- tasks/swift_init_common.yml | 35 --------------------- tasks/swift_init_systemd.yml | 12 +++---- tasks/swift_init_upstart.yml | 3 +- tasks/swift_sync_post_install.yml | 24 -------------- vars/main.yml | 24 ++++++++++++++ 7 files changed, 58 insertions(+), 112 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-os_heat 14.2.9: os_heat for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 14.2.6..14.2.9 --------------------------------------------------- 6054607 Add missing functional test script to tox b554bfe Correct heat developer mode constraint Diffstat (except docs and test files) ------------------------------------- tasks/heat_install.yml | 2 +- tox.ini | 1 + 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_nova 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_nova 14.2.9: os_nova for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 14.2.8..14.2.9 --------------------------------------------------- 9167787 Ensure online migrations can run ba256e3 Updated from OpenStack Ansible Tests 2091c57 Updated from OpenStack Ansible Tests 688aa8b Fail if TLS + TCP are enabled for libvirtd Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 ++- Vagrantfile | 36 +++++++++++++++---- bindep.txt | 15 +++++++- tasks/main.yml | 20 +++++++++++ tasks/nova_db_setup.yml | 1 + 6 files changed, 119 insertions(+), 49 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-ironic 14.2.9: Ironic Role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. Changes in openstack-ansible-ironic 14.2.8..14.2.9 -------------------------------------------------- 8b1e856 Fix typo in timeout 7d81c6b Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +--- Vagrantfile | 36 +++++++++++++--- bindep.txt | 12 ++++++ templates/ironic-upstart-init.j2 | 2 +- 5 files changed, 97 insertions(+), 51 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are overjoyed to announce the release of: openstack-ansible-plugins 14.2.9: plugins for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 14.2.8..14.2.9 --------------------------------------------------- d966941 Revert unicode parsing changes to config-template Diffstat (except docs and test files) ------------------------------------- action/_v2_config_template.py | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_cinder 14.2.9: os_cinder role for OpenStack- Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 14.2.8..14.2.9 ----------------------------------------------------- 480bc09 Remove online_data_migrations-related tasks 7a2ecc0 Ensure online migrations can run ab9e791 Updated from OpenStack Ansible Tests fdd6fa7 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +-- Vagrantfile | 36 ++++++++++++--- bindep.txt | 17 +++++-- tasks/cinder_cleanup_old_facts.yml | 7 ++- tasks/cinder_db_setup.yml | 19 -------- tasks/cinder_install.yml | 6 +-- tasks/main.yml | 3 +- 8 files changed, 106 insertions(+), 80 deletions(-)

1 0

[openstackansible] openstack-ansible-os_magnum 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: openstack-ansible-os_magnum 14.2.9: os_magnum for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. Changes in openstack-ansible-os_magnum 14.2.4..14.2.9 ----------------------------------------------------- 8acd821 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-os_sahara 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_sahara 14.2.9: os_sahara for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_sahara/ For more details, please see below. Changes in openstack-ansible-os_sahara 14.1.1..14.2.9 ----------------------------------------------------- aeb5cdc Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_glance 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_glance 14.2.9: os_glance for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 14.2.6..14.2.9 ----------------------------------------------------- 849f8df Revert "Only sync glance database on major versions" fa093ba Switch from run_once back to inventory scoping 8abdf4d Hedge upgrade process against no software change cbe355d Ensure that services restart in a particular order 5568c4d Perform an atomic policy file change 86ad493 Only sync glance database on major versions Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 ++ handlers/main.yml | 48 ++++++++++++++++++++++++++++++++---- tasks/glance_init_common.yml | 31 ----------------------- tasks/glance_init_systemd.yml | 33 +++++++++++++++---------- tasks/glance_init_upstart.yml | 5 ++-- tasks/glance_install.yml | 14 +++++++++++ tasks/glance_post_install.yml | 2 +- tasks/main.yml | 10 +++++--- templates/glance-systemd-init.j2 | 4 +-- templates/glance-systemd-tmpfiles.j2 | 4 +-- templates/glance-upstart-init.j2 | 18 +++++++------- vars/main.yml | 31 +++++++++++++++++++++++ 12 files changed, 133 insertions(+), 69 deletions(-)

1 0

[openstackansible] openstack-ansible-os_rally 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-os_rally 14.2.9: os_rally for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 14.2.8..14.2.9 ---------------------------------------------------- b6377ae Correct the search message in Create/upgrade Rally DB schema task Diffstat (except docs and test files) ------------------------------------- tasks/database-setup.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_neutron 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are glad to announce the release of: openstack-ansible-os_neutron 14.2.9: os_neutron role for OpenStack- Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 14.2.8..14.2.9 ------------------------------------------------------ b15cc7f Simplify the string check for offline db migrations Diffstat (except docs and test files) ------------------------------------- tasks/neutron_db_setup.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_horizon 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-os_horizon 14.2.9: OpenStack Horizon role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. 14.2.9 ^^^^^^ New Features * It's now possible to disable heat stack password field in horizon. "horizon_enable_heatstack_user_pass" variable has been added and default to True. Changes in openstack-ansible-os_horizon 14.2.6..14.2.9 ------------------------------------------------------ 36a1acb Allow possibility to disable heatstack password Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 1 + releasenotes/notes/heatstack_password-25956b6143577735.yaml | 5 +++++ templates/horizon_local_settings.py.j2 | 2 +- 3 files changed, 7 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are chuffed to announce the release of: openstack-ansible-os_gnocchi 14.2.9: os_gnocchi for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. Changes in openstack-ansible-os_gnocchi 14.2.4..14.2.9 ------------------------------------------------------ 4372bcf Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/gnocchi_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-os_ceilometer 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We high-spiritedly announce the release of: openstack-ansible-os_ceilometer 14.2.9: os_ceilometer role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 14.2.4..14.2.9 --------------------------------------------------------- ee6257f Add venv_tag local fact 0034239 Revert "Pin gnocchiclient to comply with optional deps" Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 +----- tasks/ceilometer_install.yml | 7 +++++++ 2 files changed, 8 insertions(+), 5 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: openstack-ansible-os_keystone 14.2.9: os_keystone for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 14.2.9 ^^^^^^ New Features * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" Changes in openstack-ansible-os_keystone 14.2.8..14.2.9 ------------------------------------------------------- 566c3e8 Ensure online migrations can run c0fb47b Updated from OpenStack Ansible Tests 953e3cc Remove Developer Tools package group d4f547e Add extra headers for Keystone 8ab5dec Update paste, policy and rootwrap configurations 2017-07-27 Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +- Vagrantfile | 36 +++++++-- bindep.txt | 15 +++- defaults/main.yml | 14 ++++ .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 ++++ tasks/keystone_db_setup.yml | 12 ++- templates/keystone_nginx.conf.j2 | 3 + templates/policy.json.j2 | 2 +- vars/redhat-7.yml | 2 +- 10 files changed, 141 insertions(+), 56 deletions(-)

1 0

[openstackansible] openstack-ansible-os_aodh 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: openstack-ansible-os_aodh 14.2.9: os_aodh for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 14.2.4..14.2.9 --------------------------------------------------- ac0a498 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/aodh_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-memcached_server 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pumped to announce the release of: openstack-ansible-memcached_server 14.2.9: memcached_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 14.2.8..14.2.9 ------------------------------------------------------------ 0afdcad Add automatic restart for memcached Diffstat (except docs and test files) ------------------------------------- tasks/memcached_config.yml | 8 ++++++++ templates/systemd-restart-on-failure.conf.j2 | 4 ++++ 2 files changed, 12 insertions(+)

1 0

[openstackansible] openstack-ansible-haproxy_server 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pumped to announce the release of: openstack-ansible-haproxy_server 14.2.9: haproxy_server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 14.2.8..14.2.9 ---------------------------------------------------------- 179975e Optimise task execution 7bffdd5 Allow HAproxy repo/gpg overrides without extra-vars Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +-- tasks/haproxy_add_ppa_repo.yml | 80 +++++++++++++++++++++++++++--------------- tasks/haproxy_install.yml | 7 +--- vars/ubuntu-14.04.yml | 5 +-- 4 files changed, 57 insertions(+), 39 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pleased to announce the release of: openstack-ansible-galera_server 14.2.9: Galera Server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 14.2.9 ^^^^^^ Bug Fixes * MariaDB 10.0.32 released on Aug 17 which, when configured to use xtrabackup for the SST, requires percona xtrabackup version 2.3.5 or higher. As xtrabackup is the default SST mechanism in the "galera_server" role, the version used has been updated from 2.2.13 to 2.3.5 for the x86_64 hardware architecture. See the percona release notes for 2.3.2 (https://www.percona.com/doc/percona- xtrabackup/LATEST/release-notes/2.3/2.3.2.html#new-features) for more details of what was included in the fix. Changes in openstack-ansible-galera_server 14.2.7..14.2.9 --------------------------------------------------------- 8bb3464 Fix MariaDB apt package pinning 3ed010a Update percona xtrabackup to 2.3.5 2a14d3b Toggle percona repo without extra-vars 9106e4f Use block/rescue for error handling d9f8113 Allow MariaDB repo overrides without extra-vars Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 20 ++++++++ .../notes/xtrabackup-update-0aedcb9baa88ce35.yaml | 10 ++++ tasks/galera_install_apt.yml | 60 +++++++++++----------- tasks/galera_install_yum.yml | 49 +++++++++--------- vars/redhat-7.yml | 16 +++--- vars/ubuntu-14.04.yml | 20 ++++---- vars/ubuntu-16.04.yml | 20 ++++---- 7 files changed, 112 insertions(+), 83 deletions(-)

1 0

[openstackansible] ansible-hardening 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are ecstatic to announce the release of: ansible-hardening 14.2.9: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 14.2.9 ^^^^^^ Security Issues * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Changes in ansible-hardening 14.2.3..14.2.9 ------------------------------------------- 31bfec7 Change default prohibit root sshd password auth d12b33b Updated from OpenStack Ansible Tests 436b6b6 [Docs] Replace security role references 62d5932 Fix ansible-hardening references in tox/playbook 6bbc4e9 Do not update grub if grub not used c339fcf Fix .gitreview for older branches 5ee3c4e Don't install python-ndg_httpsclient Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +- .gitreview | 2 +- README.md | 6 +- README.rst | 4 +- Vagrantfile | 72 ++++++----------- bindep.txt | 22 ++++-- defaults/main.yml | 16 ++-- files/V-38682-modprobe.conf | 2 +- handlers/main.yml | 4 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 ++ ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 2 +- setup.cfg | 2 +- tasks/main.yml | 7 ++ tasks/sshd.yml | 28 +++---- tox.ini | 2 +- vars/main.yml | 2 +- vars/redhat.yml | 2 +- vars/ubuntu.yml | 2 +- 29 files changed, 174 insertions(+), 163 deletions(-)

1 0

[openstackansible] openstack-ansible 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pleased to announce the release of: openstack-ansible 14.2.9: Ansible playbooks for deploying OpenStack This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.2.9 ^^^^^^ New Features ************ * Tags have been added to all of the common tags with the prefix "common-". This has been done to allow a deployer to rapidly run any of the common on a need basis without having to rerun an entire playbook. * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" Upgrade Notes ************* * The openstack-ansible-security role is now retired and the ansible- hardening role replaces it. The ansible-hardening role provides the same functionality and will be the maintained hardening role going forward. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. Changes in openstack-ansible 14.2.8..14.2.9 ------------------------------------------- b057986 Update SHA for os_ironic 0d16b03 Update rabbitmq_server role SHA 9b8f3ff Update SHA for os_tempest dff42ad Switch to use ansible-hardening c351cdb Suppress curl warning w/shell module 6d10e57 Fix LXC container start order fb05ea0 Update role SHA's for online migration fixes 2ac2b48 Added a common tag to the common tasks 01b0f6b Remove cinder online_data_migrations-related play 47ec935 migrate_openstack_vars.py: Correct folder name 566bdb5 Set serial to 100% for nova_compute 71f2a24 Remove global pin for ldappool 838771f Update all SHAs for 14.2.9 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 36 ++++++++--------- .../source/app-advanced-config-security.rst | 6 +-- deploy-guide/source/app-security.rst | 2 +- global-requirement-pins.txt | 6 --- playbooks/common-playbooks/cinder.yml | 2 +- playbooks/common-playbooks/neutron.yml | 2 +- playbooks/common-playbooks/nova.yml | 2 +- playbooks/common-tasks/dynamic-address-fact.yml | 2 + playbooks/common-tasks/dynamic-grouping.yml | 2 + playbooks/common-tasks/mysql-db-user.yml | 4 ++ playbooks/common-tasks/os-log-dir-setup.yml | 4 ++ playbooks/common-tasks/os-lxc-container-setup.yml | 18 ++++++++- playbooks/common-tasks/package-cache-proxy.yml | 11 +++++- playbooks/common-tasks/rabbitmq-vhost-user.yml | 5 +++ playbooks/common-tasks/set-pip-upstream-url.yml | 4 ++ playbooks/common-tasks/set-upper-constraints.yml | 10 +++++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 46 +++++++++++----------- playbooks/galera-install.yml | 2 +- playbooks/inventory/group_vars/all.yml | 6 +-- playbooks/inventory/group_vars/nova_all.yml | 1 + playbooks/os-cinder-install.yml | 30 -------------- playbooks/os-keystone-install.yml | 2 +- playbooks/os-nova-install.yml | 2 +- playbooks/os-swift-install.yml | 2 +- playbooks/rabbitmq-install.yml | 2 +- playbooks/rsyslog-install.yml | 2 +- playbooks/security-hardening.yml | 2 +- playbooks/utility-install.yml | 2 + .../notes/common-tags-9763f578ea5fe5b6.yaml | 5 +++ .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 +++++ .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 +++++++ releasenotes/notes/ldappool-e79455337a02b05d.yaml | 4 +- ...itch-to-ansible-hardening-2e59a2ce26db7bbb.yaml | 7 ++++ .../scripts/migrate_openstack_vars.py | 2 +- 35 files changed, 159 insertions(+), 101 deletions(-)

1 0

[tripleo] tripleo-ui 3.2.2 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: tripleo-ui 3.2.2: tripleo-ui This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. Changes in tripleo-ui 3.2.1..3.2.2 ---------------------------------- 0bc29b0 Release 3.2.2 Diffstat (except docs and test files) ------------------------------------- npm-shrinkwrap.json | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

[tripleo] tripleo-ui 1.2.1 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pleased to announce the release of: tripleo-ui 1.2.1 This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. Changes in tripleo-ui 1.2.0..1.2.1 ---------------------------------- 468faee Release 1.2.1 Diffstat (except docs and test files) ------------------------------------- npm-shrinkwrap.json | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

[tripleo] tripleo-common 6.1.2 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are ecstatic to announce the release of: tripleo-common 6.1.2: A common library for TripleO workflows. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 6.1.1..6.1.2 -------------------------------------- a96721a Remove machine-id from image Diffstat (except docs and test files) ------------------------------------- image-yaml/overcloud-images.yaml | 1 + 1 file changed, 1 insertion(+)

1 0

[tripleo] tripleo-puppet-elements 6.2.2 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: tripleo-puppet-elements 6.2.2: Puppet building rules for OpenStack images. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 6.2.1..6.2.2 ----------------------------------------------- c95399a Add remove-machine-id element Diffstat (except docs and test files) ------------------------------------- elements/remove-machine-id/README.md | 9 +++++++++ elements/remove-machine-id/post-install.d/70-remove-machine-id | 8 ++++++++ 2 files changed, 17 insertions(+)

1 0

[tripleo] puppet-tripleo 6.5.2 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are thrilled to announce the release of: puppet-tripleo 6.5.2: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.2 ^^^^^ New Features ************ * Enable innodb_flush_log_at_trx_commit configuration for Galera only. Upgrade Notes ************* * Setting the innodb_flush_log_at_trx_commit flag to the value of "2" instead of its default value of "1" means that the underlying MySQL/MariaDB engine will no longer flush transactions to disk on a per-transaction basis; instead, flushes occur once per second. This leads to far fewer disk writes and can dramatically improve write performance, at the cost of durability (e.g. will lose the last second's worth of transactions) if the database engine is ungracefully shut down. The clustered nature of Galera mitigates this risk in that transactions are replicated to other nodes before completion, and the setting of "2" is considered to be generally safe for a Galera cluster, with the exception case of simultaneous power loss for all nodes. Changes in puppet-tripleo 6.5.1..6.5.2 -------------------------------------- 3ecd35c Release 6.5.2 05d31f7 Add option for innodb_flush_log_at_trx_commit = 2 for Galera only 0848990 firewall: generally accept "jump" param and use tripleo:firewall for log rule 0694a3d Use resource collector for the fencing -> stonith ordering Diffstat (except docs and test files) ------------------------------------- manifests/firewall/post.pp | 2 +- manifests/firewall/rule.pp | 16 ++++- manifests/profile/base/pacemaker.pp | 2 +- manifests/profile/pacemaker/database/mysql.pp | 73 ++++++++++++---------- metadata.json | 2 +- ...b_flush_log_at_trx_commit-eb7d99749ca3c911.yaml | 17 +++++ 6 files changed, 76 insertions(+), 36 deletions(-)

1 0

[tripleo] tripleo-heat-templates 6.2.2 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are ecstatic to announce the release of: tripleo-heat-templates 6.2.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.2.2 ^^^^^ Bug Fixes * The "neutron_admin_auth_url" is now properly set using KeystoneInternal rather than using the NeutronAdmin endpoint. Changes in tripleo-heat-templates 6.2.1..6.2.2 ---------------------------------------------- 1897de9 manila: set "neutron_admin_auth_url" correctly 5c3cbe7 Make cinder-manage db sync run on only one controller during upgrade Diffstat (except docs and test files) ------------------------------------- puppet/services/manila-scheduler.yaml | 2 +- puppet/services/pacemaker/cinder-volume.yaml | 20 +++++++++++++------- .../fix-neutron_admin_auth_url-c88224251d8eb807.yaml | 4 ++++ 3 files changed, 18 insertions(+), 8 deletions(-)

1 0

[tripleo] tripleo-heat-templates 5.3.2 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: tripleo-heat-templates 5.3.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.2 ^^^^^ New Features ************ * Added ability to manage MOTD Banner Enabled SSHD composible service by default. Puppet-ssh manages the sshd config. Bug Fixes ********* * The "neutron_admin_auth_url" is now properly set using KeystoneInternal rather than using the NeutronAdmin endpoint. Changes in tripleo-heat-templates 5.3.1..5.3.2 ---------------------------------------------- 4cacd8f manila: set "neutron_admin_auth_url" correctly 1542f51 SSHD Service extensions 1e2200d Addition of Nuage as mechanism driver for ML2 Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-3nodes.yaml | 2 + ci/environments/multinode.yaml | 1 + ci/environments/multinode_major_upgrade.yaml | 1 + ci/environments/scenario002-multinode.yaml | 1 + ci/environments/scenario003-multinode.yaml | 1 + ci/environments/scenario004-multinode.yaml | 1 + environments/neutron-nuage-config.yaml | 23 ++++-- environments/nova-nuage-config.yaml | 6 ++ environments/sshd-banner.yaml | 6 +- overcloud-resource-registry-puppet.j2.yaml | 3 +- puppet/services/manila-scheduler.yaml | 2 +- puppet/services/neutron-base.yaml | 7 ++ puppet/services/neutron-plugin-ml2-nuage.yaml | 84 ++++++++++++++++++++++ puppet/services/neutron-plugin-ml2.yaml | 6 ++ puppet/services/sshd.yaml | 33 ++++++++- ...ix-neutron_admin_auth_url-c88224251d8eb807.yaml | 4 ++ .../sshd-service-extensions-0c4d0879942a2052.yaml | 5 ++ 17 files changed, 172 insertions(+), 14 deletions(-)

1 0

[tripleo] puppet-tripleo 5.6.3 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are happy to announce the release of: puppet-tripleo 5.6.3 This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 5.6.3 ^^^^^ New Features ************ * Enable innodb_flush_log_at_trx_commit configuration for Galera only. Upgrade Notes ************* * Setting the innodb_flush_log_at_trx_commit flag to the value of "2" instead of its default value of "1" means that the underlying MySQL/MariaDB engine will no longer flush transactions to disk on a per-transaction basis; instead, flushes occur once per second. This leads to far fewer disk writes and can dramatically improve write performance, at the cost of durability (e.g. will lose the last second's worth of transactions) if the database engine is ungracefully shut down. The clustered nature of Galera mitigates this risk in that transactions are replicated to other nodes before completion, and the setting of "2" is considered to be generally safe for a Galera cluster, with the exception case of simultaneous power loss for all nodes. Changes in puppet-tripleo 5.6.2..5.6.3 -------------------------------------- 6838726 Release 5.6.3 f34138d Migrate Swift ring handling from tripleo-heat-templates to puppet-tripleo 72fb76c firewall: generally accept "jump" param and use tripleo:firewall for log rule ac3741d Repair immediate VF configuration for PCI SR-IOV 38da59b Add option for innodb_flush_log_at_trx_commit = 2 for Galera only Diffstat (except docs and test files) ------------------------------------- manifests/firewall/post.pp | 2 +- manifests/firewall/rule.pp | 16 +++++- manifests/host/sriov.pp | 2 +- manifests/profile/base/swift/ringbuilder.pp | 36 ++++++++++++ manifests/profile/pacemaker/database/mysql.pp | 67 ++++++++++++---------- metadata.json | 2 +- ...b_flush_log_at_trx_commit-eb7d99749ca3c911.yaml | 17 ++++++ spec/classes/tripleo_host_sriov_spec.rb | 4 +- .../tripleo_profile_base_swift_ringbuilder.rb | 65 +++++++++++++++++++++ 9 files changed, 176 insertions(+), 35 deletions(-)

1 0

[tripleo] instack-undercloud 5.3.2 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are glad to announce the release of: instack-undercloud 5.3.2: instack-undercloud This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. Changes in instack-undercloud 5.3.1..5.3.2 ------------------------------------------ 808c89b Remove isolated-build element Diffstat (except docs and test files) ------------------------------------- elements/isolated-build/README.md | 13 ------------- .../environment.d/no-source-repositories.bash | 1 - .../pre-install.d/00-disable-external-installs | 10 ---------- 3 files changed, 24 deletions(-)

1 0

[nova] python-novaclient 6.0.2 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are stoked to announce the release of: python-novaclient 6.0.2: Client library for OpenStack Compute API This release is part of the newton stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-novaclient Download the package from: https://pypi.python.org/pypi/python-novaclient Please report issues through launchpad: https://bugs.launchpad.net/python-novaclient For more details, please see below. Changes in python-novaclient 6.0.1..6.0.2 ----------------------------------------- 41aeb89 Fix aggregate_update name and availability_zone clash 5620beb fix formatting of release note Diffstat (except docs and test files) ------------------------------------- novaclient/v2/shell.py | 14 +++-- ...eprecated-option-in-3.3.0-82a413157838570d.yaml | 31 ++++++++++- 4 files changed, 101 insertions(+), 32 deletions(-)

1 0

[neutron] networking-bgpvpn 6.0.1
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: networking-bgpvpn 6.0.1: API and Framework to interconnect bgpvpn to neutron networks The source is available from: http://git.openstack.org/cgit/openstack/networking-bgpvpn Download the package from: https://tarballs.openstack.org/networking-bgpvpn/ Please report issues through launchpad: http://bugs.launchpad.net/bgpvpn For more details, please see below. Changes in networking-bgpvpn 6.0.0..6.0.1 ----------------------------------------- 28ee4b7 Switch to use stable data_utils 7b53c22 Updated from global requirements 09902d6 Introduce precommit hooks for delete_bgpvpn_xxx 6239051 Updated from global requirements aa8a1fc tox_install will follow stable/ocata 1065b35 Update UPPER_CONSTRAINTS_FILE for stable/ocata e90e6b4 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + networking_bgpvpn/neutron/db/bgpvpn_db.py | 4 +- .../neutron/services/service_drivers/driver_api.py | 29 +++++++--- tools/tox_install.sh | 2 +- tox.ini | 2 +- 9 files changed, 91 insertions(+), 14 deletions(-)

1 0

[tripleo] tripleo-common 7.6.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We high-spiritedly announce the release of: tripleo-common 7.6.1: A common library for TripleO workflows. This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 7.6.0..7.6.1 -------------------------------------- c340840 Add ODL repo to override template 9666d7c Always use docker.io for ceph_namespace cb1c8bc Add ODL container images to TripleO-common. 05d61f5 Fix the path to HEALTHCHECK_SCRIPTS in healthcheck/ironic-api 6df04e8 Add health check command for ironic-pxe image d15286a Add selinux policy rpms to base container image 33d95b3 Discover a versioned container image tag 2a4b7b1 Add SRIOV container image parameter generation 1119f35 Added a kolla config file for building contaner images with qemu uid a9335b2 Add clustercheck healthcheck Diffstat (except docs and test files) ------------------------------------- container-images/overcloud_containers.yaml | 4 +- container-images/overcloud_containers.yaml.j2 | 33 ++++++++- .../tripleo_kolla_config_overrides.conf | 6 ++ .../tripleo_kolla_template_overrides.j2 | 11 ++- healthcheck/ironic-api | 2 +- healthcheck/ironic-pxe | 16 +++++ healthcheck/mariadb | 15 +++- tripleo_common/image/image_uploader.py | 56 ++++++++++++++- 10 files changed, 256 insertions(+), 8 deletions(-)

1 0

[tripleo] tripleo-ui 7.4.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are delighted to announce the release of: tripleo-ui 7.4.1: tripleo-ui This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. Changes in tripleo-ui 7.4.0..7.4.1 ---------------------------------- 2bb5965 Release 7.4.1 1031ea6 Imported Translations from Zanata 16684db Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- i18n/locales/fr.json | 1 + i18n/locales/ko-KR.json | 4 ++-- i18n/locales/zh-CN.json | 2 +- npm-shrinkwrap.json | 2 +- package.json | 2 +- 5 files changed, 6 insertions(+), 5 deletions(-)

1 0

[tripleo] instack 7.0.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We contentedly announce the release of: instack 7.0.1: instack This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/instack/ For more details, please see below. Changes in instack 7.0.0..7.0.1 ------------------------------- d0b15e2 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 61417b6..664dfde 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD

1 0

[tripleo] tripleo-heat-templates 7.0.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are amped to announce the release of: tripleo-heat-templates 7.0.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.1 ^^^^^ Upgrade Notes ************* * This adds post_upgrade_tasks, ansible tasks that can be added to any service manifest (currently, pacemaker/cinder-volume for bug 1706951). These are similar to the existing upgrade_tasks in their format, however they will be executed *after* the docker/puppet config. So the order is upgrade_tasks, deployment steps (docker/puppet), then post_upgrade_tasks. Also like the upgrade_tasks these are serialised and you can use 'tags' with 'step0' to 'step6' (more can be added if needed). * Containerized services logs can be found under updated paths. Pacemaker-managed resources write logs to */var/log/pacemaker/bundles/**. Docker-daemon managed openstack services bind-mount their log files to the */var/log/containers/<foo>/** sub-directories. Services running under Apache2 WSGI use the */var/log/containers/httpd/<foo-api>/** destinations. Additional tools or commands that log to syslog, end up placing log records into the hosts journalctl and */var/log/messages*. Bug Fixes ********* * Fixes bug where neutron port status was not updated with OpenDaylight deployments due to firewall blocking the websocket port used to send the update (port 8185). * Disables QoS with OpenDaylight until officially supported. Changes in tripleo-heat-templates 7.0.0..7.0.1 ---------------------------------------------- ef39ff8 Fix issue where 2 Redis VIPs are assigned, but only one used. 7c08561 Fixed resource registry path in neutron-lbaasv2.yaml a2c999c Move neutron api services to ControllerOpenstack a3bb7a5 Set Ceph pgp_num after pg_num c0cefc0 Create network-isolation-no-tunneling.yaml using jinja2 3bb6ab3 Remove deploy_steps_tasks.yaml from upgrade_steps_playbook 8a66131 Use haproxy-systemd-wrapper as pid1 in containerized Haproxy ae45255 Disable all uses of wsrep-provider in mysql_bootstrap container 10eed9c Adds post_upgrade_tasks for any service post-upgrade ansible tasks 2ddbb7d Run gnocchi statsd and metrcd at step 5 5a7472c Change to boolean for boolean type params dc9d989 One time delete pacemaker resources during upgrade to containers 32f2aa7 Make nova patching parameters configurable in Nuage c7691a1 Rename service_workflow_tasks into workflow_tasks 2ada42c Retry if the pacemaker_resource commands failed 5624e75 Add RoleConfig output to major_upgrade_steps.j2.yaml 643c414 Add CephConfigOverrides to allow arbitrary configs in ceph.conf 1850712 Enable selinux in containers acaf980 Add verbose output to containerized cell_v2 host discovery 6c34197 Add panko config to ceilometer notification agent container 1fee3d6 Enable redis TLS proxy in HA deployments 036ee9f Add DhcpAgentNotification param to neutron base f171eca Persist containerized services httpd logs 9a10155 Add a docker pull retry to docker-puppet.py 1dd48af Enable Ceilometer agent logging for containers 485fc6d Add defaults for ceilometer-agent-compute upgrade tasks f166254 Move the clustercheck service to the DB role 3b6b741 Disables QoS with OpenDaylight deployments 2e5d85a Fixes OpenDaylight updating port status 260648f Mount vhost_sockets directory for vhost-user socket creation 5d977e5 Add Neutron SR-IOV agent container Diffstat (except docs and test files) ------------------------------------- .../scenario001-multinode-containers.yaml | 1 + common/deploy-steps.j2 | 54 +++++----- common/major_upgrade_steps.j2.yaml | 41 ++++++++ common/post-upgrade.j2.yaml | 2 +- common/services.yaml | 17 +++- deployed-server/deployed-server-roles-data.yaml | 1 + environments/docker.yaml | 4 + environments/hyperconverged-ceph.yaml | 1 + .../network-isolation-no-tunneling.j2.yaml | 34 +++++++ environments/network-isolation-no-tunneling.yaml | 61 ----------- environments/network-isolation.j2.yaml | 3 - environments/neutron-nuage-config.yaml | 2 + environments/neutron-opendaylight-dpdk.yaml | 3 +- environments/neutron-opendaylight-sriov.yaml | 1 + environments/neutron-opendaylight.yaml | 1 + environments/neutron-sriov.yaml | 15 +-- .../services-docker/neutron-opendaylight.yaml | 1 + environments/services-docker/neutron-sriov.yaml | 12 +++ environments/services/neutron-lbaasv2.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 1 + puppet/services/README.rst | 4 +- puppet/services/neutron-base.yaml | 5 + puppet/services/neutron-plugin-ml2-nuage.yaml | 12 +++ puppet/services/neutron-plugin-nsx.yaml | 2 +- puppet/services/neutron-sriov-agent.yaml | 14 +++ puppet/services/neutron-sriov-host-config.yaml | 78 +++++++++++++++ puppet/services/opendaylight-api.yaml | 1 + puppet/services/pacemaker/cinder-volume.yaml | 20 ++-- .../adds-post_upgrade_tasks-eba0656012c861a1.yaml | 12 +++ ...ntainerized-services-logs-0dc652513870f46d.yaml | 11 ++ ...ix-odl-websocket-firewall-9e2f78ebaa39313f.yaml | 6 ++ releasenotes/notes/odl-qos-48b70c804755e3a5.yaml | 4 + .../service_workflow_tasks-4da5830821b7154b.yaml | 8 -- .../notes/workflow_tasks-4da5830821b7154b.yaml | 8 ++ roles/Compute.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ControllerOpenstack.yaml | 5 +- roles/Database.yaml | 1 + roles/Networker.yaml | 7 +- roles_data.yaml | 1 + tools/yaml-validate.py | 7 +- 82 files changed, 807 insertions(+), 238 deletions(-)

1 0

[tripleo] instack-undercloud 7.4.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are delighted to announce the release of: instack-undercloud 7.4.1: instack-undercloud This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 7.4.1 ^^^^^ New Features * Implements websocket-logging Add an hourly cron trigger for tripleo- ui logging Changes in instack-undercloud 7.4.0..7.4.1 ------------------------------------------ c97752b Increase the size of the Mistral output limit 1f77afc Revert "Revert "Adds execution of post-upgrade validations on undercloud upgrade"" b33950f Add an hourly cron trigger for tripleo-ui logging f35493f Updated from global requirements 4e2e990 Protect against plan migration failing Diffstat (except docs and test files) ------------------------------------- .../puppet-stack-config.yaml.template | 2 +- instack_undercloud/undercloud.py | 150 +++++++++++++++------ .../notes/logging-cron-291af6500bf05143.yaml | 5 + ...s-undercloud-upgrade.yaml-244b86a00b260888.yaml | 9 ++ requirements.txt | 2 +- 6 files changed, 219 insertions(+), 48 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f111bad..0a5f6c9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ netaddr!=0.7.16,>=0.7.13 # BSD -netifaces>=0.10.4 # MIT +netifaces>=0.10.4 # MIT

1 0

[tripleo] puppet-tripleo 7.4.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are jazzed to announce the release of: puppet-tripleo 7.4.1: Puppet module for OpenStack TripleO This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.1 ^^^^^ New Features * Provides a way to set HAProxy socket access level. This will allow people to manage HAProxy directly through command-line, for example in order to temporarly disable backends. Changes in puppet-tripleo 7.4.0..7.4.1 -------------------------------------- bc3dfc5 Release 7.4.1 68c6f28 Support for Ocata-Pike live-migration over ssh ff5a573 added release note for new haproxy_socket_access 4e484c4 Added new parameter for HAProxy configuration 0ebd574 Move manila backend configuration from pacemaker to base Diffstat (except docs and test files) ------------------------------------- manifests/haproxy.pp | 8 +- manifests/profile/base/manila/share.pp | 187 +++++++++++++++++++++ manifests/profile/base/nova/migration/proxy.pp | 78 +++++++++ manifests/profile/base/nova/migration/target.pp | 7 +- manifests/profile/base/sshd.pp | 17 +- manifests/profile/pacemaker/manila.pp | 187 --------------------- metadata.json | 2 +- .../haproxy_socket_access-ba72ad281ca64287.yaml | 7 + ...ipleo_profile_base_nova_migration_proxy_spec.rb | 103 ++++++++++++ ...pleo_profile_base_nova_migration_target_spec.rb | 45 +++++ spec/classes/tripleo_profile_base_sshd_spec.rb | 52 +++++- 11 files changed, 498 insertions(+), 195 deletions(-)

1 0

[tripleo] python-tripleoclient 7.3.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We high-spiritedly announce the release of: python-tripleoclient 7.3.1: TripleO client This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 7.3.1 ^^^^^ New Features * A new -n/--networks-data option has been added. This allows overriding the default network_data.yaml, similar to the existing interface for roles_data.yaml. Changes in python-tripleoclient 7.3.0..7.3.1 -------------------------------------------- 6f150ff Increase timeout in get_deprecated_parameters workflow 4d7a2df Update openstackclient required version. 47c1e3b Add --set argument to prepare command fd4664e Add -n/--networks-data option 150a5c6 Add neutron_driver value to prepare command e786a13 Handle when lists not only string in config download 6092eee Remove printing the introspection status Diffstat (except docs and test files) ------------------------------------- .../networks_data_option-6c613c0d118ccfc8.yaml | 6 + requirements.txt | 2 +- tripleoclient/constants.py | 1 + .../v1/overcloud_config/test_overcloud_config.py | 64 +++--- .../v1/overcloud_image/test_container_image.py | 221 ++++++++++++++++++++- tripleoclient/v1/container_image.py | 36 +++- tripleoclient/v1/overcloud_config.py | 20 +- tripleoclient/v1/overcloud_deploy.py | 11 +- tripleoclient/workflows/baremetal.py | 11 +- tripleoclient/workflows/parameters.py | 2 +- tripleoclient/workflows/plan_management.py | 22 +- 12 files changed, 338 insertions(+), 64 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bbaff35..79fe063 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ python-mistralclient>=3.1.0 # Apache-2.0 -python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0 +python-openstackclient>=3.11.0 # Apache-2.0

1 0

[oslo] oslo.policy 1.28.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are delighted to announce the release of: oslo.policy 1.28.1: Oslo Policy library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.policy Download the package from: https://pypi.python.org/pypi/oslo.policy Please report issues through launchpad: https://bugs.launchpad.net/oslo.policy For more details, please see below. Changes in oslo.policy 1.28.0..1.28.1 ------------------------------------- 70ba1be Modification to add additional information in the HTTPCheck request. Diffstat (except docs and test files) ------------------------------------- oslo_policy/_checks.py | 81 ++++++++++++--- oslo_policy/policy.py | 21 +++- 3 files changed, 269 insertions(+), 47 deletions(-)

1 0

[oslo] oslo.middleware 3.32.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are gleeful to announce the release of: oslo.middleware 3.32.1: Oslo Middleware library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.middleware Download the package from: https://pypi.python.org/pypi/oslo.middleware Please report issues through launchpad: https://bugs.launchpad.net/oslo.middleware For more details, please see below. Changes in oslo.middleware 3.32.0..3.32.1 ----------------------------------------- 2b8db6d Remove method set_latent Diffstat (except docs and test files) ------------------------------------- oslo_middleware/cors.py | 61 +---------------- 2 files changed, 3 insertions(+), 190 deletions(-)

1 0

[oslo] oslosphinx 4.17.0 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are stoked to announce the release of: oslosphinx 4.17.0: OpenStack Sphinx Extensions and Theme This release is part of the queens release series. Download the package from: https://pypi.python.org/pypi/oslosphinx For more details, please see below. 4.17.0 ^^^^^^ Prelude oslosphinx is obsolete. The openstackdocstheme package should be used instead. oslosphinx will be maintained for the pike, ocata, and newton release series and completely remove after that pike is marked end-of- life. Changes in oslosphinx 4.16.0..4.17.0 ------------------------------------ 007da6c mark oslosphinx as obsolete Diffstat (except docs and test files) ------------------------------------- README.rst | 40 +++++++---------------- releasenotes/notes/obsolete-3da30e6cd2867d0e.yaml | 6 ++++ 2 files changed, 17 insertions(+), 29 deletions(-)

1 0

[oslo] oslo.versionedobjects 1.28.0 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We exuberantly announce the release of: oslo.versionedobjects 1.28.0: Oslo Versioned Objects library This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.versionedobjects Download the package from: https://pypi.python.org/pypi/oslo.versionedobjects Please report issues through launchpad: http://bugs.launchpad.net/oslo.versionedobjects For more details, please see below. Changes in oslo.versionedobjects 1.27.0..1.28.0 ----------------------------------------------- 93bd87e Updated from global requirements 934fb45 iso8601.is8601.Utc No Longer Exists 8e5deeb Add a TimestampedObject mixin Diffstat (except docs and test files) ------------------------------------- oslo_versionedobjects/base.py | 12 +++++++++ oslo_versionedobjects/fields.py | 2 +- test-requirements.txt | 2 +- 4 files changed, 54 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 116bbb4..30e2b6d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=1.16.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0

1 0

[oslo] oslo.context 2.19.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We exuberantly announce the release of: oslo.context 2.19.1: Oslo Context library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.context Download the package from: https://pypi.python.org/pypi/oslo.context Please report issues through launchpad: https://bugs.launchpad.net/oslo.context For more details, please see below. Changes in oslo.context 2.19.0..2.19.1 -------------------------------------- 936ce1a Output 'project' key in context's to_dict function d78cf59 Rename deprecated context params Diffstat (except docs and test files) ------------------------------------- oslo_context/context.py | 70 +++++++++++++++++++++++++------------- 2 files changed, 68 insertions(+), 44 deletions(-)

1 0

[oslo] oslo.serialization 2.21.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are jazzed to announce the release of: oslo.serialization 2.21.1: Oslo Serialization library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.serialization Download the package from: https://pypi.python.org/pypi/oslo.serialization Please report issues through launchpad: https://docs.openstack.org/oslo.serialization/latest/ For more details, please see below. Changes in oslo.serialization 2.21.0..2.21.1 -------------------------------------------- cdb2f60 jsonutils.to_primitive(): add fallback parameter Diffstat (except docs and test files) ------------------------------------- oslo_serialization/jsonutils.py | 25 +++++++++--- 2 files changed, 83 insertions(+), 5 deletions(-)

1 0

[oslo] stevedore 1.27.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are pleased to announce the release of: stevedore 1.27.1: Manage dynamic plugins for Python applications This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/stevedore Download the package from: https://pypi.python.org/pypi/stevedore Please report issues through launchpad: https://bugs.launchpad.net/python-stevedore For more details, please see below. Changes in stevedore 1.27.0..1.27.1 ----------------------------------- 6720cf7 Move reno to optional docs requirements 9a05c1c Remove duplicate optional requirement Diffstat (except docs and test files) ------------------------------------- setup.cfg | 6 +----- test-requirements.txt | 1 - 2 files changed, 1 insertion(+), 6 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1d9f1d6..2118422 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ testrepository>=0.0.18 # Apache-2.0/BSD -reno>=2.5.0 # Apache-2.0

1 0

[oslo] oslo.messaging 5.33.0 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are thrilled to announce the release of: oslo.messaging 5.33.0: Oslo Messaging API This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.python.org/pypi/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. 5.33.0 ^^^^^^ Upgrade Notes * Change the default value of RPC dispatcher access_policy to DefaultRPCAccessPolicy. Changes in oslo.messaging 5.32.0..5.33.0 ---------------------------------------- 3a9c01f Fix default value of RPC dispatcher access_policy 6efa86a Fix wrong transport warnings in functional tests c2338ee Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_messaging/rpc/dispatcher.py | 4 +--- oslo_messaging/rpc/server.py | 13 +--------- ...fix-access_policy-deafult-a6954a147cb002b0.yaml | 5 ++++ requirements.txt | 2 +- test-requirements.txt | 2 +- 8 files changed, 37 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6f55190..44630ab 100644 --- a/requirements.txt +++ b/requirements.txt @@ -39 +39 @@ tenacity>=3.2.1 # Apache-2.0 -oslo.middleware>=3.30.0 # Apache-2.0 +oslo.middleware>=3.31.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f135481..8d1dba0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -32 +32 @@ sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0

1 0

[oslo] oslo.config 4.13.1 (queens)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are satisfied to announce the release of: oslo.config 4.13.1: Oslo Configuration API This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.config Download the package from: https://pypi.python.org/pypi/oslo.config Please report issues through launchpad: https://bugs.launchpad.net/oslo.config For more details, please see below. Changes in oslo.config 4.13.0..4.13.1 ------------------------------------- 0cce0be Implement OptGroup.__str__ for log messages Diffstat (except docs and test files) ------------------------------------- oslo_config/cfg.py | 3 +++ 2 files changed, 4 insertions(+)

1 0

[documentation] whereto 0.2.0
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We enthusiastically announce the release of: whereto 0.2.0: Test Apache redirect rules. The source is available from: http://git.openstack.org/cgit/openstack/whereto Download the package from: https://tarballs.openstack.org/whereto/ Please report issues through launchpad: http://bugs.launchpad.net/whereto For more details, please see below. 0.2.0 ^^^^^ New Features * Add support for redirect responses that indicate that a path is not going to be valid again in the future and return a 410 response. * Add detection of redirection cycles or loops. If a path redirects back to itself when all of the rules are evaluated, report it as an error. * Add detection of multiple redirection hops. If a path redirects to another path that also redirects, repeatedly for too many steps, report an error. Changes in whereto 0.1.0..0.2.0 ------------------------------- 5e8fd69 add release notes for new features in the upcoming release e255ef4 use logging to control output verbosity e942ec9 improve readability of error reporting output eee0d41 report incorrect matches for tests 20c4e3d fix formatting of final error report f985ba4 handle an incorrect match as a failure 39c71e7 be more verbose ab9a38e support 410 rules d9ec206 add --max-hops option 6edcbe4 add cycle detection 1b843c2 test for no rules matching a test case c323784 fix CI configuration issues Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/410-rules-9db72f7f10961d9b.yaml | 5 + .../notes/cycle-detection-dff48a3706f459d8.yaml | 6 + releasenotes/notes/max-hops-1e9fa3c27d7406db.yaml | 6 + tools/tox_install.sh | 30 ++++ tox.ini | 7 +- whereto/app.py | 175 +++++++++++++++++---- whereto/rules.py | 36 ++++- 11 files changed, 339 insertions(+), 45 deletions(-)

1 0

[horizon] horizon 11.0.4 (ocata)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We eagerly announce the release of: horizon 11.0.4: OpenStack Dashboard This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/horizon/ For more details, please see below. Changes in horizon 11.0.3..11.0.4 --------------------------------- 4892f35 Imported Translations from Zanata d4f4c17 Imported Translations from Zanata 379a0b6 Allow dropdowns to be in front of div.modal-footer b0aa25f Imported Translations from Zanata 059da85 Imported Translations from Zanata 0885389 Add correct policy for some actions 352be50 There is problem in UpdateRow of Horizon page. 37b949b Imported Translations from Zanata a9e6895 Attribute "isServer" of images visibility filter should be true. 9aa0915 Fix an incorrect policy rule in Admin > Instances 56810d3 Imported Translations from Zanata cde6575 Use request.COOKIES to activate the timezone b8b1826 Remove the extra Networks url in ports details page's breadcrumb 21ce07a Only show the image visibility option if it's allowed 784f080 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- horizon/middleware/base.py | 2 +- horizon/static/horizon/js/horizon.tables.js | 4 +- .../dashboards/admin/instances/panel.py | 2 +- .../dashboards/admin/networks/ports/views.py | 1 - .../extensions/allowed_address_pairs/tables.py | 10 +- .../locale/de/LC_MESSAGES/django.po | 36 +- .../locale/de/LC_MESSAGES/djangojs.po | 8 +- .../locale/es/LC_MESSAGES/django.po | 18 +- .../locale/id/LC_MESSAGES/django.po | 33 +- .../locale/id/LC_MESSAGES/djangojs.po | 11 +- .../locale/ja/LC_MESSAGES/django.po | 32 +- .../locale/ko_KR/LC_MESSAGES/django.po | 25 +- .../locale/ko_KR/LC_MESSAGES/djangojs.po | 14 +- .../locale/pt_BR/LC_MESSAGES/django.po | 72 ++- .../locale/zh_CN/LC_MESSAGES/django.po | 30 +- .../locale/zh_TW/LC_MESSAGES/django.po | 563 ++++++++++++++++++++- .../static/app/core/images/images.module.js | 2 +- .../steps/create-image/create-image.controller.js | 14 +- .../create-image/create-image.controller.spec.js | 13 +- .../images/steps/create-image/create-image.html | 2 +- .../steps/edit-image/edit-image.controller.js | 1 + .../core/images/steps/edit-image/edit-image.html | 2 +- .../static/dashboard/scss/components/_modals.scss | 3 - 23 files changed, 830 insertions(+), 68 deletions(-)

1 0

[oslo] tooz 1.43.2 (newton)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We high-spiritedly announce the release of: tooz 1.43.2: Coordination library for distributed systems. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tooz Download the package from: https://pypi.python.org/pypi/tooz Please report issues through launchpad: http://bugs.launchpad.net/python-tooz/ For more details, please see below. Changes in tooz 1.43.1..1.43.2 ------------------------------ 5a6294d Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- setup.cfg | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0513da4..a8ccc1f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ futurist!=0.15.0,>=0.11.0 # Apache-2.0 -oslo.utils>=3.15.0 # Apache-2.0 +oslo.utils>=3.16.0 # Apache-2.0

1 0

[cinder] os-brick 1.15.3 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are tickled pink to announce the release of: os-brick 1.15.3: OpenStack Cinder brick library for managing local volume attaches This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.python.org/pypi/os-brick Please report issues through launchpad: http://bugs.launchpad.net/os-brick For more details, please see below. Changes in os-brick 1.15.2..1.15.3 ---------------------------------- c092604 rescan fails for hba missing target wwn 064e85f FC PPC64 device discovery issue f1a8346 Fix iSCSI volume attachment over RDMA transport 2c474b7 Updated from global requirements eeceae2 Get the right portal from output of iscsiadm command 4abf375 Update UPPER_CONSTRAINTS_FILE for stable/pike Diffstat (except docs and test files) ------------------------------------- .../initiator/connectors/fibre_channel_ppc64.py | 6 +- os_brick/initiator/connectors/iscsi.py | 9 ++- os_brick/initiator/linuxfc.py | 7 +- .../connectors/test_fibre_channel_ppc64.py | 13 +++- requirements.txt | 2 +- tox.ini | 2 +- 8 files changed, 112 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 95ae4c2..4c5ec28 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ oslo.log>=3.22.0 # Apache-2.0 -oslo.serialization>=1.10.0 # Apache-2.0 +oslo.serialization!=2.19.1,>=1.10.0 # Apache-2.0

1 0

[release] reno 2.5.1
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are thrilled to announce the release of: reno 2.5.1: RElease NOtes manager The source is available from: https://git.openstack.org/cgit/openstack/reno Download the package from: https://pypi.python.org/pypi/reno Please report issues through launchpad: https://bugs.launchpad.net/reno For more details, please see below. 2.5.1 ^^^^^ New Features * The automatic branch name handling is updated so that if the reference points explicitly to the origin remote, but that remote isn't present (as it won't be when zuul configures the repo in CI), then the shortened form of the reference without the prefix is used instead. This allows explicit references to "origin/stable/name" to be translated to "stable/name" and find the expected branch. Changes in reno 2.5.0..2.5.1 ---------------------------- bbe3543 release note for zuulv3 fix 4ce1630 update ref search logic for zuulv3 CI layout c29aef5 requirements: Stop requiring a specific pbr version 05ada00 Add user details for editing stable branch notes Diffstat (except docs and test files) ------------------------------------- .../reference-name-mangling-3c845ebf88af6944.yaml | 10 +++++++ reno/scanner.py | 12 ++++++++ requirements.txt | 2 +- 5 files changed, 78 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2f2a16e..2cc558f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=1.4 +pbr

1 0

[nova] python-novaclient 9.1.1 (pike)
by no-reply＠openstack.org 04 Oct '17

04 Oct '17

We are delighted to announce the release of: python-novaclient 9.1.1: Client library for OpenStack Compute API This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-novaclient Download the package from: https://pypi.python.org/pypi/python-novaclient Please report issues through launchpad: https://bugs.launchpad.net/python-novaclient For more details, please see below. 9.1.1 ^^^^^ Bug Fixes * Fix an ability to boot server with multiple nics which was broken with microversion 2.42 (fix tag attribute disappearing). Changes in python-novaclient 9.1.0..9.1.1 ----------------------------------------- a1c0074 Allow boot server with multiple nics fc68de0 Update UPPER_CONSTRAINTS_FILE for stable/pike b467e61 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + novaclient/v2/shell.py | 18 ++++++++--------- ...ooting-with-multiple-nics-c6e5885b948d35ba.yaml | 4 ++++ tox.ini | 2 +- 5 files changed, 38 insertions(+), 10 deletions(-)

1 0