October 2017 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-haproxy_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-haproxy_server 15.1.9: haproxy_server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. 15.1.9 ^^^^^^ Upgrade Notes * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Changes in openstack-ansible-haproxy_server 15.1.8..15.1.9 ---------------------------------------------------------- 749d22f Remove unused/unnecessary haproxy_server vars/files 0942aab Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 35 +++++++++++++++------- defaults/main.yml | 6 ---- meta/main.yml | 9 +----- .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 +++++ tasks/haproxy_pre_install.yml | 9 ++++++ vars/ubuntu-16.04.yml | 19 ++++++++---- 6 files changed, 57 insertions(+), 29 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-galera_server 15.1.9: Galera Server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 15.1.9 ^^^^^^ Bug Fixes * Mysql cnf files can now be properly overridden. The config_template module has been extended to support valueless options, such as those that are found in the my.cnf file(i.e. *quick* under the *mysqldump* section). To use valueless options, use the *ignore_none_type* attribute of the config_template module. Changes in openstack-ansible-galera_server 15.1.8..15.1.9 --------------------------------------------------------- 21aed2d Fix MariaDB apt package pinning 0211193 Add ignore_none_type to config_template b043c21 Toggle percona repo without extra-vars 5b84291 Use block/rescue for error handling 8f5a4d0 Allow MariaDB repo overrides without extra-vars a3c9610 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 46 +++++++++++------ defaults/main.yml | 19 +++++++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 +++ tasks/galera_install_apt.yml | 60 +++++++++++----------- tasks/galera_install_yum.yml | 49 +++++++++--------- tasks/galera_post_install.yml | 1 + vars/redhat-7.yml | 8 +-- vars/ubuntu-16.04.yml | 12 ++--- 9 files changed, 128 insertions(+), 80 deletions(-)

1 0

[openstackansible] ansible-hardening 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: ansible-hardening 15.1.9: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.9 ^^^^^^ Security Issues * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Changes in ansible-hardening 15.1.3..15.1.9 ------------------------------------------- 957c0bc Change default prohibit root sshd password auth 2802c55 Backport bindep change from master 4638a9e Add equalto Jinja2 test for EL7 a2782dd tasks: rhel7stig: aide: Fix conditionals for Ubuntu exclusions 248640b tasks: rhel7stig: aide: Use 'aide -i' if 'aideinit' is not available f9299c5 tasks: rhel7stig: sshd: Avoid using with_fileglob for remote hosts dfaf108 [Docs] Replace security role references d2de624 Fix ansible-hardening references in tox/playbook 49ab633 Remove 'physical_host' from inventory f215c22 Fix .gitreview for older branches 4b6a43d Don't install python-ndg_httpsclient 1dd16ea [Docs] Fix deprecation docs for RHEL 6 content 7db180f Configure AIDE before initial run 1260f81 Check for grub2 defaults file 3a2486f Fix security role gate ae2ea66 Do not update grub if grub not used Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.md | 23 +++++----- README.rst | 6 +-- bindep.txt | 4 +- defaults/main.yml | 20 ++++---- files/V-38682-modprobe.conf | 2 +- files/aide_extra.conf | 14 ------ handlers/main.yml | 2 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 +++ setup.cfg | 2 +- tasks/main.yml | 9 +++- tasks/rhel6stig/sshd.yml | 28 ++++++------ tasks/rhel7stig/aide.yml | 53 ++++++++++++++-------- tasks/rhel7stig/auth.yml | 15 +++++- tasks/rhel7stig/kernel.yml | 2 +- tasks/rhel7stig/misc.yml | 3 +- tasks/rhel7stig/sshd.yml | 24 ++++++++-- templates/osas-auditd-rhel7.j2 | 4 +- tox.ini | 15 +----- vars/redhat.yml | 2 +- vars/ubuntu.yml | 2 +- 34 files changed, 212 insertions(+), 168 deletions(-)

1 0

[openstackansible] openstack-ansible 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible 15.1.9: Ansible playbooks for deploying OpenStack This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.9 ^^^^^^ New Features ************ * The config_template template module now supports writing out valueless INI options without suffixing them with '=' or ':'. This is done via the 'ignore_none_type' attribute. If ignore_none_type is set to true, these key/value entries will be ignored, if it's set to false, then ConfigTemplateParser will write out only the option name without the '=' or ':' suffix. The default is true. Upgrade Notes ************* * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. * Mysql cnf files can now be properly overridden. The config_template module has been extended to support valueless options, such as those that are found in the my.cnf file(i.e. *quick* under the *mysqldump* section). To use valueless options, use the *ignore_none_type* attribute of the config_template module. Changes in openstack-ansible 15.1.8..15.1.9 ------------------------------------------- 031317a Fix Barbican's health checks 27fbd63 Include db migration fix for next release c6fa7d8 Remove urllib3/requests from requirements 417406b Suppress curl warning w/shell module a996464 Pin Shade to last known version 1c580c3 Bump ceph-ansible to 2.2.11 tag bc2b1eb Fix LXC container start order aac4e02 Update role SHA's for online migration fixes d5048ca Correct cinder online migrations command 9cb4ecc Update documentation redirects f2c5e89 Remove global pin for ldappool d27e24c Set serial to 100% for nova_compute add34f5 Update all SHAs for 15.1.9 4d3ea00 Improve proxy vars in user_variables.yml Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 42 +++++++-------- deploy-guide/source/conf.py | 4 +- etc/openstack_deploy/user_variables.yml | 10 ++-- global-requirement-pins.txt | 9 +--- playbooks/common-playbooks/cinder.yml | 2 +- playbooks/common-playbooks/neutron.yml | 2 +- playbooks/common-playbooks/nova.yml | 2 +- playbooks/common-tasks/os-lxc-container-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 60 +++++++++++----------- playbooks/galera-install.yml | 2 +- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/os-cinder-install.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- playbooks/os-nova-install.yml | 2 +- playbooks/os-swift-install.yml | 2 +- playbooks/rabbitmq-install.yml | 2 +- playbooks/rsyslog-install.yml | 2 +- playbooks/utility-install.yml | 2 + playbooks/vars/configs/haproxy_config.yml | 4 +- ...template-ignore-none-type-9387c236853f061b.yaml | 9 ++++ .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 ++++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 +++ releasenotes/notes/ldappool-65dcc48c12d28d07.yaml | 4 +- .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 +++ ...ot-login-without-password-948ec79c6508c19b.yaml | 6 +++ requirements.txt | 2 - 27 files changed, 119 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c6fb0f1..d98ec30 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -16 +14,0 @@ PyYAML>=3.10.0 # MIT -urllib3>=1.15.1 # MIT

1 0

[openstackansible] openstack-ansible-os_swift 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are excited to announce the release of: openstack-ansible-os_swift 14.2.9: os_swift for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 14.2.7..14.2.9 ---------------------------------------------------- ff2c096 Optimise the execution of the role 3921327 Filter services dictionary per host Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 6 ++-- tasks/main.yml | 66 ++++++++++++++++----------------------- tasks/swift_init_common.yml | 35 --------------------- tasks/swift_init_systemd.yml | 12 +++---- tasks/swift_init_upstart.yml | 3 +- tasks/swift_sync_post_install.yml | 24 -------------- vars/main.yml | 24 ++++++++++++++ 7 files changed, 58 insertions(+), 112 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We enthusiastically announce the release of: openstack-ansible-os_heat 14.2.9: os_heat for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 14.2.6..14.2.9 --------------------------------------------------- 6054607 Add missing functional test script to tox b554bfe Correct heat developer mode constraint Diffstat (except docs and test files) ------------------------------------- tasks/heat_install.yml | 2 +- tox.ini | 1 + 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_nova 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_nova 14.2.9: os_nova for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 14.2.8..14.2.9 --------------------------------------------------- 9167787 Ensure online migrations can run ba256e3 Updated from OpenStack Ansible Tests 2091c57 Updated from OpenStack Ansible Tests 688aa8b Fail if TLS + TCP are enabled for libvirtd Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 ++- Vagrantfile | 36 +++++++++++++++---- bindep.txt | 15 +++++++- tasks/main.yml | 20 +++++++++++ tasks/nova_db_setup.yml | 1 + 6 files changed, 119 insertions(+), 49 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-ironic 14.2.9: Ironic Role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. Changes in openstack-ansible-ironic 14.2.8..14.2.9 -------------------------------------------------- 8b1e856 Fix typo in timeout 7d81c6b Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +--- Vagrantfile | 36 +++++++++++++--- bindep.txt | 12 ++++++ templates/ironic-upstart-init.j2 | 2 +- 5 files changed, 97 insertions(+), 51 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are overjoyed to announce the release of: openstack-ansible-plugins 14.2.9: plugins for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 14.2.8..14.2.9 --------------------------------------------------- d966941 Revert unicode parsing changes to config-template Diffstat (except docs and test files) ------------------------------------- action/_v2_config_template.py | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 14.2.9 (newton)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_cinder 14.2.9: os_cinder role for OpenStack- Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 14.2.8..14.2.9 ----------------------------------------------------- 480bc09 Remove online_data_migrations-related tasks 7a2ecc0 Ensure online migrations can run ab9e791 Updated from OpenStack Ansible Tests fdd6fa7 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +-- Vagrantfile | 36 ++++++++++++--- bindep.txt | 17 +++++-- tasks/cinder_cleanup_old_facts.yml | 7 ++- tasks/cinder_db_setup.yml | 19 -------- tasks/cinder_install.yml | 6 +-- tasks/main.yml | 3 +- 8 files changed, 106 insertions(+), 80 deletions(-)

1 0