October 2017 - Release-announce - lists.openstack.org

[tripleo] tripleo-puppet-elements 6.2.3 (ocata)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We are thrilled to announce the release of: tripleo-puppet-elements 6.2.3: Puppet building rules for OpenStack images. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 6.2.2..6.2.3 ----------------------------------------------- 1eeaf43 Set remove-machine-id to executable Diffstat (except docs and test files) ------------------------------------- elements/remove-machine-id/post-install.d/70-remove-machine-id | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)

1 0

[tripleo] python-tripleoclient 7.3.2 (pike)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We are stoked to announce the release of: python-tripleoclient 7.3.2: TripleO client This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 7.3.2 ^^^^^ New Features * The "openstack overcloud container image tag discover" command is provided to discover the version-based tag by inspecting the image from a stable tag like 'current-tripleo-rdo'. Stable tags like 'latest' or 'pike' can't be used for container updates because something needs to change to trigger the new containers being pulled. Without this command it would be up to the user to find out what versioned tag to specify when calling prepare. Changes in python-tripleoclient 7.3.1..7.3.2 -------------------------------------------- 456a1f3 Fix error handling for actions f114a61 Command to discover the versioned tag from latest Diffstat (except docs and test files) ------------------------------------- .../notes/discover-tag-3b0b073a95178e82.yaml | 9 ++++++ setup.cfg | 1 + tripleoclient/exceptions.py | 4 +-- tripleoclient/v1/container_image.py | 35 ++++++++++++++++++++++ 4 files changed, 47 insertions(+), 2 deletions(-)

1 0

[tripleo] tripleo-heat-templates 7.0.2 (pike)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We are amped to announce the release of: tripleo-heat-templates 7.0.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.2 ^^^^^ Upgrade Notes ************* * Adds a new UpgradeRemoveUnusedPackages parameter (default False) and some service upgrade_tasks that use this parameter to remove any unused packages. "Unused" is those services that are being stopped and disabled from starting on boot (because they are being containerized). Note that ignore_errors is set on all the package removal ansible tasks so any issues removing a given package will not fail the upgrade workflow. For clarity, setting UpgradeRemoveUnusedPackages to True in your deployment environment file(s) will result in the REMOVAL of packages for stopped and disabled services, during the upgrade. Bug Fixes ********* * Fixes heat resource OS::TripleO::Network::Internal to be renamed back to OS::TripleO::Network::InternalApi for backwards compatibility with previous versions. * Fixes missing Keystone authtoken password for Tacker. * Removes hardcoded network names. The networks are now defined dynamically by network_data.yaml. Changes in tripleo-heat-templates 7.0.1..7.0.2 ---------------------------------------------- 791fbe5 Add IronicPxe to the default controller 6d150b0 Remove package if service stopped and disabled 911edab Adds pacemaker update_tasks for Pike minor update workflow d76998f Special treatment for os-net-config upgrade. b56bad2 List all unhealthy containers 4815762 Create mysql user for non-ha deployments 167e3d4 Fix cold/live migration network config 404c14e docker: add logging(source & groups) d4efa0c Containerized Fluentd client 63daa82 Make containerized galera use mysql_network everywhere 4e700bc Remove extra noop.yaml ports from network-isolation files. 35d0e2d Support for Ocata-Pike live-migration over ssh 6faca15 Default Ceph pg_num and pgp_num to 128 1b43d71 Use sub_nodes_private instead of node_private 8ad7508 Fixes missing type for heat param TenantNetName 37d9ab4 Pin scenario001-multinode-containers to earlier ceph docker container 520be6b Fixes heat resource name for Internal API Network 6a74288 Bump fs.inotify.max_user_instances for scale a2ab218 Disable role host_prep_tasks on controlplane upgrade f2d8fa7 Make CephConfigOverrides append to ceph.conf[global] 682686e Stop mapping docker to OS::Heat::None in scenarios 72e5ec2 Add all services to scenario004-containers a58332e Fixes missing keystone authtoken pw for Tacker 5a94449 Fix upgrades that use Management network 3492d09 Update panko port in env ssl yaml files to correct one c0444b9 Drop extraconfig for nova-nuage fe5f329 Add a lightweight UC template/role data for deployed-servers Diffstat (except docs and test files) ------------------------------------- ci/common/net-config-multinode-os-net-config.yaml | 4 +- ci/environments/multinode-containers.yaml | 9 +- ci/environments/multinode.yaml | 3 + .../scenario001-multinode-containers.yaml | 12 +- ci/environments/scenario001-multinode.yaml | 3 + .../scenario002-multinode-containers.yaml | 6 - .../scenario003-multinode-containers.yaml | 6 - .../scenario004-multinode-containers.yaml | 42 +++++-- ci/environments/scenario004-multinode.yaml | 3 + .../scenario006-multinode-containers.yaml | 1 - .../scenario007-multinode-containers.yaml | 6 - common/deploy-steps.j2 | 7 ++ environments/docker-services-tls-everywhere.yaml | 1 + environments/docker-uc-light.yaml | 29 +++++ environments/docker.yaml | 1 + .../major-upgrade-composable-steps-docker.yaml | 2 + environments/major-upgrade-composable-steps.yaml | 2 + environments/major-upgrade-converge-docker.yaml | 1 + environments/major-upgrade-converge.yaml | 1 + environments/network-isolation-v6.j2.yaml | 5 +- environments/network-isolation.j2.yaml | 5 +- environments/nova-nuage-config.yaml | 3 +- environments/services-docker/fluentd-client.yaml | 2 + environments/ssl/tls-endpoints-public-dns.yaml | 6 +- environments/ssl/tls-endpoints-public-ip.yaml | 6 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 6 +- network/management_v6.yaml | 71 ------------ network/networks.j2.yaml | 6 +- network/ports/net_ip_list_map.j2.yaml | 24 ---- network/service_net_map.j2.yaml | 1 - network_data.yaml | 6 +- overcloud-resource-registry-puppet.j2.yaml | 2 + .../extraconfig/pre_deploy/compute/nova-nuage.yaml | 92 ---------------- puppet/services/ceph-mon.yaml | 4 +- puppet/services/kernel.yaml | 9 ++ puppet/services/neutron-compute-plugin-nuage.yaml | 43 ++++++++ puppet/services/nova-base.yaml | 3 +- puppet/services/nova-compute.yaml | 2 +- puppet/services/nova-libvirt.yaml | 2 +- puppet/services/nova-migration-target.yaml | 21 +++- puppet/services/pacemaker.yaml | 12 ++ puppet/services/tacker.yaml | 1 + puppet/services/tripleo-packages.yaml | 18 ++- ...nused-packages-on-upgrade-5a469428a6948148.yaml | 12 ++ ...internal-api-network-name-282bfda2cdb406aa.yaml | 6 + ...x-missing-tacker-password-c2ce555cdd52c102.yaml | 4 + .../fix-tenant-net-name-type-94a9c50c86529001.yaml | 5 + roles/Controller.yaml | 1 + roles/ControllerOpenstack.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/UndercloudLight.yaml | 34 ++++++ roles_data.yaml | 1 + sample-env-generator/ssl.yaml | 18 +-- tools/yaml-validate.py | 33 +++++- 141 files changed, 1269 insertions(+), 310 deletions(-)

1 0

[tripleo] puppet-tripleo 7.4.2 (pike)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We eagerly announce the release of: puppet-tripleo 7.4.2: Puppet module for OpenStack TripleO This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.2 ^^^^^ New Features ************ * This new parameter allows to set/override HAProxy global options in a convenient way. * Expose a new Puppet parameter to snmp profile, "snmpd_config" which is an array definded to undef by default. It can be used to override all snmpd configuration for advanced deployments. If used, all parameters have to be configured included users and passwords, which should be the same as given to snmpd_password and snmpd_user. There is no logic that will verify the content of "snmpd_config". Bug Fixes ********* * Disables port status feature with OpenDaylight when deployed as HA until it can be properly supported in an HA environment. Changes in puppet-tripleo 7.4.1..7.4.2 -------------------------------------- cb32fd0 Release 7.4.2 3d06318 Allow to override HAProxy global options. 7f1a21a Allow to configure snmpd_config fb0f290 Add a new configuration option for GUI loggers 67e1e60 Disables port status updates with ODL in HA 265a13a Allow log path transformation in fluentd glue Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 5 ++ manifests/haproxy.pp | 7 +- manifests/profile/base/logging/fluentd.pp | 29 +++++++- .../base/neutron/plugins/ml2/opendaylight.pp | 21 +++++- manifests/profile/base/snmp.pp | 44 +++++++++--- manifests/ui.pp | 5 ++ metadata.json | 2 +- ...endaylight-ha-port-status-0a97e10e6456661c.yaml | 5 ++ .../haproxy_globals_override-7a573da1c8633f01.yaml | 5 ++ .../notes/snmdd_config-db21f3175967be4a.yaml | 11 +++ spec/classes/tripleo_profile_base_snmp_spec.rb | 83 ++++++++++++++++++++++ templates/ui/tripleo_ui_config.js.erb | 3 +- 12 files changed, 202 insertions(+), 18 deletions(-)

1 0

[tripleo] instack-undercloud 7.4.2 (pike)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We high-spiritedly announce the release of: instack-undercloud 7.4.2: instack-undercloud This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 7.4.2 ^^^^^ Bug Fixes * Explicitly set event pipeline publishers to panko and gnocchi to sent the events to both endpoints. * When the hostname was written to /etc/hosts, it resulted in an invalid /etc/hosts file due to 127.0.0.1 being specified twice on different lines. That issue is now corrected such that the hostnames will be added to the existing line for 127.0.0.1, which results in valid syntax for /etc/hosts. See https://bugs.launchpad.net/tripleo/+bug/1709460 Changes in instack-undercloud 7.4.1..7.4.2 ------------------------------------------ 0c36405 Fix invalid /etc/hosts edit daf2d83 Explicitly set event publishers to panko and gnocchi Diffstat (except docs and test files) ------------------------------------- elements/puppet-stack-config/puppet-stack-config.yaml.template | 2 ++ instack_undercloud/undercloud.py | 7 ++++--- releasenotes/notes/set-event-publishers-6d687ba1c4235a21.yaml | 5 +++++ releasenotes/notes/set-valid-hosts-file-49d6aa96365908a7.yaml | 7 +++++++ 5 files changed, 25 insertions(+), 6 deletions(-)

1 0

[tripleo] tripleo-heat-templates 6.2.3 (ocata)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We are pumped to announce the release of: tripleo-heat-templates 6.2.3: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.2.3 ^^^^^ New Features ************ * Adding a new parameter to SNMP profile, SnmpdBindHost so users can change the binding addresses on SNMP daemon. The parameter is an array and takes the default value that were previously hardcoded in puppet-tripleo. Bug Fixes ********* * Set "host" parameter in manila.conf to 'hostgroup' when running manila share service under pacemaker. This labels instances of the service on different nodes with the same "host" as cinder does in this circumstance so that the instances are considered by OpenStack to provide the same service and manila share is able to maintain management of shares on the backend after failover and failback. Changes in tripleo-heat-templates 6.2.2..6.2.3 ---------------------------------------------- 8ccfee3 Fix cold/live migration network config 0139f1e Use conditional to set heat workers 69b03c4 snmp: add SnmpdBindHost parameter 1db252b Bump fs.inotify.max_user_instances for scale 12d5692 Fix Tenant network declaration 87d4bdf manila: set "host" to "hostgroup" Diffstat (except docs and test files) ------------------------------------- environments/network-isolation-no-tunneling.yaml | 2 +- network/service_net_map.j2.yaml | 1 - puppet/services/heat-api.yaml | 11 +++++++++-- puppet/services/kernel.yaml | 7 +++++++ puppet/services/nova-base.yaml | 3 ++- puppet/services/nova-compute.yaml | 4 ++-- puppet/services/pacemaker/manila-share.yaml | 3 +++ puppet/services/snmp.yaml | 5 +++++ ...hostgroup-default-for-host-parameter-02e3d48de1f69765.yaml | 9 +++++++++ releasenotes/notes/snmp_listen-2364188f73d43b14.yaml | 7 +++++++ 10 files changed, 45 insertions(+), 7 deletions(-)

1 0

[tripleo] puppet-tripleo 6.5.3 (ocata)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We jubilantly announce the release of: puppet-tripleo 6.5.3: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.3 ^^^^^ New Features * Expose a new Puppet parameter to snmp profile, "snmpd_config" which is an array definded to undef by default. It can be used to override all snmpd configuration for advanced deployments. If used, all parameters have to be configured included users and passwords, which should be the same as given to snmpd_password and snmpd_user. There is no logic that will verify the content of "snmpd_config". Changes in puppet-tripleo 6.5.2..6.5.3 -------------------------------------- 5aac822 Release 6.5.3 adf9471 Repair immediate VF configuration for PCI SR-IOV b187de3 Allow to configure snmpd_config 673c45e Remove extra keystone admin haproxy listen and allow TLS Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 5 ++ manifests/haproxy.pp | 20 +++--- manifests/haproxy/endpoint.pp | 25 +++++-- manifests/host/sriov.pp | 2 +- manifests/profile/base/snmp.pp | 45 ++++++++---- metadata.json | 2 +- .../notes/snmdd_config-db21f3175967be4a.yaml | 11 +++ spec/classes/tripleo_host_sriov_spec.rb | 4 +- spec/classes/tripleo_profile_base_snmp_spec.rb | 83 ++++++++++++++++++++++ 9 files changed, 163 insertions(+), 34 deletions(-)

1 0

[packaging-rpm] renderspec 1.9.1
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We enthusiastically announce the release of: renderspec 1.9.1: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.9.0..1.9.1 ---------------------------------- eb3ea10 Remove python_module definition from suse template Diffstat (except docs and test files) ------------------------------------- renderspec/dist-templates/suse.spec.j2 | 1 - 1 file changed, 1 deletion(-)

1 0

[octavia] octavia 0.9.2 (newton)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We are glad to announce the release of: octavia 0.9.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the newton stable release series. Download the package from: https://pypi.python.org/pypi/octavia For more details, please see below. Changes in octavia 0.9.1..0.9.2 ------------------------------- a74008c Switch to use stable data_utils 1e0bd24 tempest: Switch to local copy of tempset/scenario/manager.py 58836c2 Don't use Tempest internal methods d4c3607 Change bind_host IP address c912815 Explicitly list neutron api extensions for tests e9cd757 Updated from global requirements 072b373 Look for diskimage-builder not dib-utils when building amps bb79b3d Switch HAProxy health check timeout to seconds a73ba7a Look for all qemu-img/kvm package names in rhel-based distros db6c906 gate_hook: Stop writing local.conf directly c4f0002 Remove outdated kernel tuning for haproxy Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 6 +- diskimage-create/README.rst | 16 +- diskimage-create/diskimage-create.sh | 36 +- diskimage-create/requirements.txt | 2 +- .../post-install.d/20-haproxy-tune-kernel | 4 - .../post-install.d/20-haproxy-tune-kernel | 4 - octavia/common/jinja/haproxy/templates/macros.j2 | 2 +- .../unit/common/jinja/haproxy/test_jinja_cfg.py | 20 +- requirements.txt | 1 + tox.ini | 2 +- 17 files changed, 1423 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fcb5dd5..d457d0d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -35,0 +36 @@ taskflow>=1.26.0 # Apache-2.0 +diskimage-builder!=1.6.0,!=1.7.0,!=1.7.1,>=1.1.2 # Apache-2.0

1 0

[octavia] neutron-lbaas 9.2.2 (newton)
by no-reply＠openstack.org 10 Oct '17

10 Oct '17

We jubilantly announce the release of: neutron-lbaas 9.2.2: OpenStack Networking Load Balancing as a Service This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/neutron-lbaas/ For more details, please see below. Changes in neutron-lbaas 9.2.1..9.2.2 ------------------------------------- 0c24aaf Don't forget to call the super's resource_cleanup b15c93c tempest: healthmonitor is deleted via resource_cleanup ac34007 fixed statuses, as it was using an undefined variable 800102c fixed health monitor setting during tempest test, ec8d129 Switch to use stable data_utils 7a589a4 Fix exception about loadbalancer_stats 0b02584 Plugin to run neutron-lbaas tests with tempest d2d5359 Use Tempest TimeoutException from tempest.lib Diffstat (except docs and test files) ------------------------------------- neutron_lbaas/drivers/driver_base.py | 7 +++-- neutron_lbaas/services/loadbalancer/constants.py | 1 + neutron_lbaas/services/loadbalancer/plugin.py | 2 +- .../tempest/v2/api/test_load_balancers_admin.py | 1 + .../v2/ddt/test_health_monitor_admin_state_up.py | 3 +- .../octavia/test_octavia_messaging_consumer.py | 15 ++++++++++ setup.cfg | 2 ++ 11 files changed, 66 insertions(+), 11 deletions(-)

1 0

[oslo] oslo.serialization 2.13.2 (newton)
by no-reply＠openstack.org 09 Oct '17

09 Oct '17

We are thrilled to announce the release of: oslo.serialization 2.13.2: Oslo Serialization library This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.serialization Download the package from: https://pypi.python.org/pypi/oslo.serialization Please report issues through launchpad: http://bugs.launchpad.net/oslo.serialization For more details, please see below. Changes in oslo.serialization 2.13.1..2.13.2 -------------------------------------------- e85a670 Don't iterate through addresses in netaddr.IPNetwork Diffstat (except docs and test files) ------------------------------------- oslo_serialization/jsonutils.py | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tripleo] tripleo-common 8.0.0 (queens)
by no-reply＠openstack.org 09 Oct '17

09 Oct '17

We enthusiastically announce the release of: tripleo-common 8.0.0: A common library for TripleO workflows. This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. 8.0.0 ^^^^^ New Features ************ * The default architecure for image builds now defaults to the cpu of the host instead of x86_64/amd64. This allows for a single package of tripleo-common to be used across multiple architectures to generate images. * A new minor update workflow has been added, which implemented all the steps in Mistral. It include the following, setup the Heat outputs of the Overcloud, pushed the configuration files of the deployment into swift, including Ansible playbook and tasks, the Puppet files, and run the ansible update playbook via the Ansible action. * The config download code has been moved from python-tripleoclient to a dedicated library in order to be consumed by other APIs or tools. A mistral action has been added to handle this library Deprecation Notes ***************** * The old minor update workflow is now deprecated, the code for the action ClearBreakpointsAction has been removed Bug Fixes ********* * Add an error message if there are no bare metal nodes available in an available or active state and with maintenance mode off. Previously, the message was misleading about missing control or compute flavor having no profile associated. * Fixes bug 1691740 * The keystone utils in tripleo-common had gotten out of sync with the way Mistral was using authentication. This patch aligns the two so that they are closer to equivalent. Changes in tripleo-common 7.5.0..8.0.0 -------------------------------------- 214bf63 Add module_path as option for ansible-playbook action 984487a Updated from global requirements 7fa4d9d Bring the keystone utils up-to-date with Mistral c17b560 Add release note for minor update workflow bfb9f29 Fixup upgrade-non-controller to also accept IP address e9a4156 Execute minor update via ansible on mistral 2ba3656 Handle nodes that failed to start introspection 0460c80 Fix healthchecks permissions 2ff0842 Add retry loop for docker pull c4af83e Add OVN container images to TripleO-common 69265fc Fix running complex command lines via bootstrap_host_exec 57c9bda Fix chown command in sudoers file e5d1615 Add logging to capabilities filter 83eeb18 Add healthcheck for ODL container 7c3bbdf Add ODL repo to override template df9a0eb Format and send the retry-limit reached message 90e9ef9 Always use docker.io for ceph_namespace 064ae01 Always finish by sending a Zaqar message on error da67c50 Add the Node UUID to the failure messages from the _introspect workflow b1dc704 Add ODL container images to TripleO-common. b46a35a Updated from global requirements f817b3c Remove healthcheck command. 020103b Define ceph image in overcloud_containers.yaml.j2 e043435 Add "tripleo-common-managed" to all workflows in tripleo_common 978c648 Add selinux policy rpms to base container image cc17a07 Fix the path to HEALTHCHECK_SCRIPTS in healthcheck/ironic-api 30f3c02 Add health check command for ironic-pxe image fcdca87 Added a kolla config file for building contaner images with qemu uid 2edc35c Don't mock mkdtemp in test_plan.py either e325fff Parse ceph_client_ansible_vars in ceph-ansible workbook 3ea3cbd Derive params network config stack exists fix 1444c1d Derive params support for ODL DPDK feature 096c61a Run fluentd container 4296e7d Add SRIOV container image parameter generation 9e24924 Add missing BarbicanApi service 0be202d Don't mock mkdtemp 28cd0e4 Add less verbosity for fernet keys ansible playbook f2bad7d Ensure that GetHostCpusListAction.run() returns a deterministic result 6adb3f1 Add missing OVN container service entries 8da3897 Use Python to compute release notes version 9671a1d Fix port health check false negatives 0b80b1b Support fernet key rotation with containers 0389eec Make curl healthchecks work with internal TLS aada665 Derive Params OvsPmdCoreList compute issue 08d6641 Add clustercheck healthcheck 39f5716 Discover a versioned container image tag c58ac82 Upload remove default for pull_source fef8db1 Use CephAnsibleDisksConfig when deriving HCI parameters 67c8d99 Updated from global requirements c080439 Add stunnel to redis image for tls 1644068 Update reno for stable/pike 813e12a Use NovaVcpuPinSet when deriving HCI parameters cb3a932 CPU threads range format for derive parameters fba2902 Default to host CPU architecture if none is supplied 95b38ab Update .gitignore 6d3ce63 Add error message if no bare metal nodes available 8620eaa Drop MANIFEST.in - it's not needed by pbr Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- MANIFEST.in | 6 - container-images/overcloud_containers.yaml | 4 + container-images/overcloud_containers.yaml.j2 | 86 +++++++++-- .../tripleo_kolla_config_overrides.conf | 6 + .../tripleo_kolla_template_overrides.j2 | 145 ++++++++----------- healthcheck/common.sh | 29 +++- healthcheck/glance-api | 1 + healthcheck/heat-api | 5 +- healthcheck/heat-api-cfn | 5 +- healthcheck/ironic-api | 7 +- healthcheck/ironic-pxe | 16 ++ healthcheck/keystone-admin | 5 +- healthcheck/keystone-public | 5 +- healthcheck/mariadb | 15 +- healthcheck/nova-api | 5 +- healthcheck/opendaylight-api | 11 ++ healthcheck/swift-account-server | 1 + healthcheck/swift-container-server | 1 + healthcheck/swift-object-server | 1 + healthcheck/swift-proxy | 1 + image-yaml/overcloud-hardened-images-centos7.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 2 - image-yaml/overcloud-images-rhel7.yaml | 2 - image-yaml/overcloud-images.yaml | 2 - image-yaml/overcloud-odl-rhel7.yaml | 1 - playbooks/rotate-keys.yaml | 63 ++++++-- .../default-arch-selection-d5fd2fcdba725dd4.yaml | 6 + .../error-msg-no-baremetal-a583117ecd9836dc.yaml | 7 + .../minor-update-workflow-6106c1a91cb6d029.yaml | 19 +++ .../update-keystone-utils-bfd14da957d34ec5.yaml | 6 + releasenotes/source/conf.py | 5 +- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 + requirements.txt | 20 +-- scripts/bootstrap_host_only_eval | 19 +++ scripts/bootstrap_host_only_exec | 19 +++ scripts/upgrade-non-controller.sh | 133 +++++++++-------- setup.cfg | 8 +- sudoers | 1 + test-requirements.txt | 6 +- tripleo_common/actions/ansible.py | 4 + tripleo_common/actions/config.py | 79 ++++++++++ tripleo_common/actions/derive_params.py | 128 +++++++++++++++- tripleo_common/actions/package_update.py | 77 ++++------ tripleo_common/actions/parameters.py | 7 +- tripleo_common/actions/plan.py | 59 ++++++++ tripleo_common/actions/validations.py | 10 ++ tripleo_common/arch.py | 34 +++++ tripleo_common/constants.py | 3 + tripleo_common/filters/capabilities_filter.py | 14 +- tripleo_common/image/build.py | 3 +- tripleo_common/image/image_uploader.py | 79 +++++++++- tripleo_common/utils/config.py | 142 ++++++++++++++++++ tripleo_common/utils/keystone.py | 89 +++++++++++- workbooks/access.yaml | 6 + workbooks/baremetal.yaml | 89 +++++++++++- workbooks/ceph-ansible.yaml | 13 +- workbooks/deployment.yaml | 9 ++ workbooks/derive_params.yaml | 18 ++- workbooks/derive_params_formulas.yaml | 161 ++++++++++++++++++++- workbooks/fernet-key-rotate.yaml | 4 + workbooks/package_update.yaml | 96 +++++++++--- workbooks/plan_management.yaml | 22 +++ workbooks/scale.yaml | 3 + workbooks/stack.yaml | 12 ++ workbooks/support.yaml | 15 ++ workbooks/swift_rings_backup.yaml | 2 + workbooks/validations.yaml | 34 +++++ 84 files changed, 2341 insertions(+), 437 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0cfc7e5..68af13a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ Babel!=2.4.0,>=2.3.4 # BSD -docker>=2.0.0 # Apache-2.0 +docker>=2.4.2 # Apache-2.0 @@ -10,5 +10,5 @@ GitPython>=1.0.1 # BSD License (3 clause) -python-heatclient>=1.6.1 # Apache-2.0 -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.log>=3.22.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 -python-glanceclient>=2.7.0 # Apache-2.0 +python-heatclient>=1.10.0 # Apache-2.0 +oslo.config>=4.6.0 # Apache-2.0 +oslo.log>=3.30.0 # Apache-2.0 +oslo.utils>=3.28.0 # Apache-2.0 +python-glanceclient>=2.8.0 # Apache-2.0 @@ -18 +18 @@ mistral-lib>=0.2.0 # Apache-2.0 -oslo.concurrency>=3.8.0 # Apache-2.0 +oslo.concurrency>=3.20.0 # Apache-2.0 @@ -22 +22 @@ Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) -python-novaclient>=9.0.0 # Apache-2.0 +python-novaclient>=9.1.0 # Apache-2.0 @@ -25,2 +25,2 @@ netifaces>=0.10.4 # MIT -paramiko>=2.0 # LGPLv2.1+ -netaddr>=0.7.13,!=0.7.16 # BSD +paramiko>=2.0.0 # LGPLv2.1+ +netaddr>=0.7.18 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 8ed486e..4b4cec4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 @@ -17,2 +17,2 @@ testtools>=1.4.0 # MIT -PyYAML>=3.10.0 # MIT -reno!=2.3.1,>=1.8.0 # Apache-2.0 +PyYAML>=3.10 # MIT +reno>=2.5.0 # Apache-2.0

1 0

[packaging-rpm] renderspec 1.9.0
by no-reply＠openstack.org 09 Oct '17

09 Oct '17

We are amped to announce the release of: renderspec 1.9.0: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.8.0..1.9.0 ---------------------------------- 2d0afbf Add option to skip certain python version Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 28 +++++++++++---- renderspec/contextfuncs.py | 16 +++++---- renderspec/dist-templates/fedora.spec.j2 | 6 ++++ renderspec/dist-templates/suse.spec.j2 | 1 + 6 files changed, 89 insertions(+), 34 deletions(-)

1 0

[openstackclient] cliff 2.9.1 (queens)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are tickled pink to announce the release of: cliff 2.9.1: Command Line Interface Formulation Framework This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/cliff Download the package from: https://pypi.python.org/pypi/cliff Please report issues through launchpad: https://bugs.launchpad.net/python-cliff For more details, please see below. Changes in cliff 2.9.0..2.9.1 ----------------------------- a9719bc handle more varied top_level.txt files in distributions Diffstat (except docs and test files) ------------------------------------- cliff/command.py | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-)

1 0

[mistral] mistral-lib 0.3.0 (pike)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are gleeful to announce the release of: mistral-lib 0.3.0: Mistral shared routings and utilities (Actions API, YAQL functions API, data types etc.) This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/mistral-lib Download the package from: https://pypi.python.org/pypi/mistral-lib Please report issues through launchpad: http://bugs.launchpad.net/mistral For more details, please see below. Changes in mistral-lib 0.2.0..0.3.0 ----------------------------------- 9c2d6d9 Add a representation of the ActionContext in mistral-lib d8483fa Updated from global requirements 8bb6bbc Update UPPER_CONSTRAINTS_FILE for stable/pike 3b8692a Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistral_lib/actions/context.py | 85 ++++++++++++++++++++++++++++++++++++++++++ requirements.txt | 2 +- test-requirements.txt | 4 +- tox.ini | 2 +- 5 files changed, 90 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7f4089a..b3db22f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -oslo.serialization>=1.10.0 # Apache-2.0 +oslo.serialization!=2.19.1,>=1.10.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fd918c2..114a6a7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD @@ -14 +14 @@ testrepository>=0.0.18 # Apache-2.0/BSD -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[puppet] puppet-nova 11.4.0 (pike)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are gleeful to announce the release of: puppet-nova 11.4.0: Puppet module for OpenStack Nova This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/puppet-nova/ For more details, please see below. 11.4.0 ^^^^^^ New Features ************ * Added nova patching configuration parameters. These parameters are available in nova.conf, but are not configurable using puppet-nova. The monkey patching parameters allow patching a decorator for all functions in specified modules. This change create patch/config.pp file to make these parameters configurable. * * Add ability to configure compute/consecutive_build_service_disable_threshold on the compute notes. * Add parameter to apacher_wsgi to allow overwrite and/or add additional wsgi process options. Deprecation Notes ***************** * nova::api::pci_alias is deprecated by nova::pci::aliases nova::compute::pci_passthrough is deprecated by nova::compute::pci::passthrough Bug Fixes ********* * [pci]/alias option is now required in the nova configuration file on compute nodes too. This requires refactoring of the manifests as the parameter is common to nova::compute and nova::api. Common pci configuration is now done by the nova::pci class while compute specific configuration is done now by the nova::compute::pci class. Changes in puppet-nova 11.3.0..11.4.0 ------------------------------------- a8fc794 Prepare new release 11.4.0 16e88fc Add pci/alias to compute manifest fd7985d add parameter to overwrite/add wsgi process options 9d78c9e Pass arguments as array for nova-manage provider 56c70f3 Sanitize nova_manage output in provider 048b327 change libvirt package name on debian stretch and up a4a6ca8 Ensure novajoin's log directory ownership is correct 2b19b83 Added nova patching configuration parameters 48d6fd2 Update Gemfile to pull spec_helper from stable/pike cf8fbfa Add support for consecutive_build_service_disable_threshold 782d7c9 Update UPPER_CONSTRAINTS_FILE for stable/pike 08f5377 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 5 +- lib/puppet/provider/nova.rb | 18 ++++ lib/puppet/provider/nova_cell_v2/nova_manage.rb | 12 ++- lib/puppet/provider/nova_cells/nova_manage.rb | 17 ++-- manifests/api.pp | 27 +++--- manifests/compute.pp | 99 ++++++++++++---------- manifests/compute/pci.pp | 31 +++++++ manifests/metadata/novajoin/api.pp | 7 ++ manifests/params.pp | 6 +- manifests/patch/config.pp | 28 ++++++ manifests/pci.pp | 31 +++++++ manifests/wsgi/apache_api.pp | 88 ++++++++++--------- manifests/wsgi/apache_placement.pp | 90 +++++++++++--------- metadata.json | 4 +- .../notes/add-patch-config-407a53a9bb59e86c.yaml | 6 ++ .../add_pci_alias_compute-a7780fa3181e7749.yaml | 13 +++ ...e-build-disable-threshold-41d0ba2f8259d467.yaml | 4 + .../wsgi_process_options-f8e93a0bb83e0bc8.yaml | 4 + releasenotes/source/conf.py | 4 +- spec/classes/nova_api_spec.rb | 15 +++- spec/classes/nova_compute_pci_spec.rb | 85 +++++++++++++++++++ spec/classes/nova_compute_spec.rb | 25 ++++-- spec/classes/nova_metadata_novajoin_api_spec.rb | 7 ++ spec/classes/nova_patch_config_spec.rb | 53 ++++++++++++ spec/classes/nova_pci_spec.rb | 84 ++++++++++++++++++ spec/classes/nova_serial_proxy_spec.rb | 5 +- spec/classes/nova_spicehtml5_proxy_spec.rb | 7 +- spec/classes/nova_vnc_proxy_spec.rb | 7 +- spec/classes/nova_wsgi_apache_api_spec.rb | 75 ++++++++-------- spec/classes/nova_wsgi_apache_placement_spec.rb | 63 ++++++++------ tox.ini | 2 +- 32 files changed, 683 insertions(+), 240 deletions(-)

1 0

[puppet] puppet-murano 11.3.1 (pike)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are jazzed to announce the release of: puppet-murano 11.3.1: Puppet module for OpenStack Murano This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/puppet-murano/ For more details, please see below. Changes in puppet-murano 11.3.0..11.3.1 --------------------------------------- af37d22 Prepare new release 11.3.1 ccb6949 Properly sanitize murano package-list output before using it 840be65 Update Gemfile to pull spec_helper from stable/pike b394b7a Update UPPER_CONSTRAINTS_FILE for stable/pike cc33b79 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 5 ++++- lib/puppet/provider/murano_application/murano.rb | 15 +++++++++++++-- metadata.json | 4 ++-- releasenotes/source/conf.py | 4 ++-- tox.ini | 2 +- 6 files changed, 23 insertions(+), 8 deletions(-)

1 0

[puppet] puppet-magnum 11.3.1 (pike)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are thrilled to announce the release of: puppet-magnum 11.3.1: Puppet module for Magnum This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/puppet-magnum/ For more details, please see below. Changes in puppet-magnum 11.3.0..11.3.1 --------------------------------------- 0112f1b Prepare new bug-fix release in pike 4e8d282 Fix magnum cluster TLS cert generation 888be89 Revert "Use UCA newton-proposed packages" 955e927 Update Gemfile to pull spec_helper from stable/pike e81808c Update UPPER_CONSTRAINTS_FILE for stable/pike 4031750 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 5 ++++- manifests/keystone/authtoken.pp | 6 ++++++ metadata.json | 4 ++-- releasenotes/source/conf.py | 4 ++-- spec/acceptance/basic_magnum_spec.rb | 6 ------ spec/classes/magnum_keystone_authtoken_spec.rb | 6 ++++++ tox.ini | 2 +- 8 files changed, 22 insertions(+), 12 deletions(-)

1 0

[puppet] puppet-magnum 10.4.0 (ocata)
by no-reply＠openstack.org 08 Oct '17

08 Oct '17

We are ecstatic to announce the release of: puppet-magnum 10.4.0: Puppet module for Magnum This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-magnum/ For more details, please see below. 10.4.0 ^^^^^^ New Features * Added configuration option to allow configuring a user trust for clusters which can be accessed at magnum::keystone::domain::cluster_user_trust Changes in puppet-magnum 10.3.1..10.4.0 --------------------------------------- 7d14333 Prepare new minor release 10.4.0 7884e8e Fix magnum cluster TLS cert generation 448f8a1 Revert "Use UCA newton-proposed packages" f05fae4 Allow cluster user trusts to be configured Diffstat (except docs and test files) ------------------------------------- manifests/keystone/authtoken.pp | 6 ++++++ manifests/keystone/domain.pp | 5 +++++ metadata.json | 4 ++-- .../notes/allow-enable-cluster-user-trust-49bc0abdc8504532.yaml | 4 ++++ releasenotes/source/conf.py | 4 ++-- spec/acceptance/basic_magnum_spec.rb | 6 ------ spec/classes/magnum_keystone_authtoken_spec.rb | 6 ++++++ spec/classes/magnum_keystone_domain_spec.rb | 2 ++ 8 files changed, 27 insertions(+), 10 deletions(-)

1 0

[packaging-rpm] renderspec 1.8.0
by no-reply＠openstack.org 06 Oct '17

06 Oct '17

We jubilantly announce the release of: renderspec 1.8.0: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.7.0..1.8.0 ---------------------------------- f646eea Fix SUSE detection on Tumbleweed and SLE15 Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_trove 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_trove 16.0.1: os_trove role for OpenStack-Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_trove/ For more details, please see below. Changes in openstack-ansible-os_trove 16.0.0.0rc1..16.0.1 --------------------------------------------------------- a34541f Updated from OpenStack Ansible Tests 626ac41 Updated from OpenStack Ansible Tests 0c134dc Update vars and test tooling for Pike 8511ec4 Update UPPER_CONSTRAINTS_FILE for stable/pike f45f76c Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 22 insertions(+), 21 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are pumped to announce the release of: openstack-ansible-os_nova 16.0.1: os_nova for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 16.0.0.0rc1..16.0.1 -------------------------------------------------------- 1c125da Ensure online migrations can run bed3511 Update vars and test tooling for Pike d7537e4 Correct nova virt type detection 2a95366 Correct Ansible deprecation warning 72a059b Fail if TLS + TCP are enabled for libvirtd 3b8b29f Update UPPER_CONSTRAINTS_FILE for stable/pike 7a7c839 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + defaults/main.yml | 2 +- tasks/main.yml | 22 ++++++++++++++++++++-- tasks/nova_db_setup.yml | 1 + tasks/nova_install.yml | 1 + tasks/nova_virt_detect.yml | 22 ++++++++++------------ tox.ini | 6 +++--- 8 files changed, 53 insertions(+), 34 deletions(-)

1 0

[openstackansible] openstack-ansible-os_designate 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_designate 16.0.1: os_designate for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_designate/ For more details, please see below. Changes in openstack-ansible-os_designate 16.0.0.0rc1..16.0.1 ------------------------------------------------------------- 56cf5e2 Updated from OpenStack Ansible Tests 7e4e4b2 Updated from OpenStack Ansible Tests d73624d Update vars and test tooling for Pike c49d5be Update UPPER_CONSTRAINTS_FILE for stable/pike afc8d58 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 21 insertions(+), 20 deletions(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are delighted to announce the release of: openstack-ansible-rabbitmq_server 16.0.1: rabbitmq_server for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. 16.0.1 ^^^^^^ New Features * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Changes in openstack-ansible-rabbitmq_server 16.0.0.0rc1..16.0.1 ---------------------------------------------------------------- e148ca4 Add release note for RabbitMQ ulimit 8f32eda Increase RabbitMQ's ulimit to 65536 6e5c3c4 Updated from OpenStack Ansible Tests bb0051a Updated from OpenStack Ansible Tests dc40e93 Update vars and test tooling for Pike 11ff715 Remove update_cache for yum fc28b46 Add automatic restart for RabbitMQ 620cad0 Update UPPER_CONSTRAINTS_FILE for stable/pike 5cf07a1 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- .../notes/ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 +++++ tasks/install_yum.yml | 1 - tasks/rabbitmq_post_install.yml | 15 +++++++++++++-- templates/systemd-restart-on-failure.conf.j2 | 4 ++++ tox.ini | 6 +++--- 11 files changed, 36 insertions(+), 16 deletions(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-haproxy_server 16.0.1: haproxy_server role for OpenStack-Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 16.0.0.0rc1..16.0.1 --------------------------------------------------------------- 6ff6aa6 Updated from OpenStack Ansible Tests 8bd6741 Updated from OpenStack Ansible Tests 8c024c4 Update vars and test tooling for Pike da562f3 Remove unused/unnecessary haproxy_server vars/files d328a11 Update UPPER_CONSTRAINTS_FILE for stable/pike c39e13c Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 6 ------ meta/main.yml | 9 +-------- .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 ++++++++ tasks/haproxy_pre_install.yml | 9 +++++++++ tox.ini | 6 +++--- vars/ubuntu-16.04.yml | 19 ++++++++++++++----- 11 files changed, 41 insertions(+), 27 deletions(-)

1 0

[openstackansible] openstack-ansible-os_aodh 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-os_aodh 16.0.1: os_aodh for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 16.0.0.0rc1..16.0.1 -------------------------------------------------------- 4cd19b1 Updated from OpenStack Ansible Tests 5182dfa Updated from OpenStack Ansible Tests 8f7df08 Update vars and test tooling for Pike 70de61e Update UPPER_CONSTRAINTS_FILE for stable/pike 3fc2ec1 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 21 insertions(+), 20 deletions(-)

1 0

[openstackansible] openstack-ansible-os_sahara 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_sahara 16.0.1: os_sahara for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_sahara/ For more details, please see below. Changes in openstack-ansible-os_sahara 16.0.0.0rc1..16.0.1 ---------------------------------------------------------- 5904bdb Updated from OpenStack Ansible Tests d527078 Updated from OpenStack Ansible Tests 35919b7 Update vars and test tooling for Pike 7e2527e Update UPPER_CONSTRAINTS_FILE for stable/pike 5a32d97 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 23 insertions(+), 22 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are excited to announce the release of: openstack-ansible-rsyslog_server 16.0.1: rsyslog_server for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 16.0.0.0rc1..16.0.1 --------------------------------------------------------------- 0645a90 Updated from OpenStack Ansible Tests 6f108c2 Updated from OpenStack Ansible Tests b5b3131 Update vars and test tooling for Pike f532e87 Update UPPER_CONSTRAINTS_FILE for stable/pike a113719 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- tox.ini | 6 +++--- 6 files changed, 9 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_magnum 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-os_magnum 16.0.1: os_magnum for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. Changes in openstack-ansible-os_magnum 16.0.0.0rc1..16.0.1 ---------------------------------------------------------- 57d2552 Update vars and test tooling for Pike 80555b3 Updated from OpenStack Ansible Tests cbfd875 Update Fedora test image sha1sum to latest 3ec50f7 Update UPPER_CONSTRAINTS_FILE for stable/pike b3f7b31 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 5 ++--- defaults/main.yml | 2 +- tox.ini | 6 +++--- 8 files changed, 35 insertions(+), 32 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are excited to announce the release of: openstack-ansible-os_keystone 16.0.1: os_keystone for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 16.0.0.0rc1..16.0.1 ------------------------------------------------------------ ede6478 Updated from OpenStack Ansible Tests bd2bb46 Update vars and test tooling for Pike 95710fc Remove Developer Tools package group ce3ab6e tasks: keystone_install: Fix virtualenv-tools issue on openSUSE 8fd7b16 Add extra headers for Keystone 094bcf9 Update UPPER_CONSTRAINTS_FILE for stable/pike e003be1 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + defaults/main.yml | 16 ++++++++++++++- .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 ++++++++++++++ tasks/keystone_install.yml | 4 ++-- templates/keystone_nginx.conf.j2 | 3 +++ tox.ini | 6 +++--- vars/redhat-7.yml | 2 +- 10 files changed, 55 insertions(+), 22 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We high-spiritedly announce the release of: openstack-ansible-os_gnocchi 16.0.1: os_gnocchi for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. Changes in openstack-ansible-os_gnocchi 16.0.0.0rc1..16.0.1 ----------------------------------------------------------- b6647a1 Updated from OpenStack Ansible Tests 62605ce Updated from OpenStack Ansible Tests 1c01714 Update vars and test tooling for Pike cc3c72d Update UPPER_CONSTRAINTS_FILE for stable/pike c2c85b6 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 22 insertions(+), 21 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are chuffed to announce the release of: openstack-ansible-plugins 16.0.1: plugins for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 16.0.0.0rc1..16.0.1 -------------------------------------------------------- bc8fa68 Updated from OpenStack Ansible Tests c9656dd Updated from OpenStack Ansible Tests 2ba5aaa Update vars and test tooling for Pike 8c83876 Update UPPER_CONSTRAINTS_FILE for stable/pike df02fab Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- bindep.txt | 2 +- tox.ini | 6 +++--- 5 files changed, 8 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_swift 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are stoked to announce the release of: openstack-ansible-os_swift 16.0.1: os_swift for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 16.0.0.0rc1..16.0.1 --------------------------------------------------------- d4ae912 Update vars and test tooling for Pike a9aedda Update UPPER_CONSTRAINTS_FILE for stable/pike 6eb05b0 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + defaults/main.yml | 2 +- tox.ini | 6 +++--- 4 files changed, 17 insertions(+), 16 deletions(-)

1 0

[openstackansible] openstack-ansible-os_horizon 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are chuffed to announce the release of: openstack-ansible-os_horizon 16.0.1: OpenStack Horizon role for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 16.0.0.0rc1..16.0.1 ----------------------------------------------------------- 2ff8d91 Updated from OpenStack Ansible Tests d061c15 Updated from OpenStack Ansible Tests bbbc9b1 Update vars and test tooling for Pike c7e1c7c tasks: horizon_install: Fix virtualenv-tools issue on openSUSE 7151b5a Update UPPER_CONSTRAINTS_FILE for stable/pike 07fba43 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 8 ++++---- tasks/horizon_install.yml | 4 ++-- tox.ini | 6 +++--- 8 files changed, 26 insertions(+), 25 deletions(-)

1 0

[openstackansible] openstack-ansible-os_barbican 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_barbican 16.0.1: os_barbican for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_barbican/ For more details, please see below. Changes in openstack-ansible-os_barbican 16.0.0.0rc1..16.0.1 ------------------------------------------------------------ d16e85f Updated from OpenStack Ansible Tests e3a2aca Updated from OpenStack Ansible Tests 47b7ed9 Update vars and test tooling for Pike 25f47d4 Update UPPER_CONSTRAINTS_FILE for stable/pike 56e5f1a Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 20 insertions(+), 19 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are excited to announce the release of: openstack-ansible-galera_server 16.0.1: Galera Server role for OpenStack-Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 16.0.0.0rc1..16.0.1 -------------------------------------------------------------- 860028f Remove duplicate package pinning variable 605a04a Updated from OpenStack Ansible Tests 2d6253e Separate greenfield and upgrade tests 9de7579 Updated from OpenStack Ansible Tests c90dfd9 Fix MariaDB apt package pinning 64f2612 Update vars and test tooling for Pike 7ba7918 Toggle percona repo without extra-vars 0ecf042 Update UPPER_CONSTRAINTS_FILE for stable/pike bb785c4 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 7 ++- tox.ini | 17 +++++-- vars/redhat-7.yml | 2 +- vars/suse-42.yml | 2 +- vars/ubuntu-16.04.yml | 4 +- 16 files changed, 187 insertions(+), 69 deletions(-)

1 0

[openstackansible] openstack-ansible-memcached_server 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We exuberantly announce the release of: openstack-ansible-memcached_server 16.0.1: memcached_server for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 16.0.0.0rc1..16.0.1 ----------------------------------------------------------------- 72d5481 Updated from OpenStack Ansible Tests 1a5f2be Updated from OpenStack Ansible Tests 95ca854 Update vars and test tooling for Pike d69c942 Add automatic restart for memcached dee2891 Update UPPER_CONSTRAINTS_FILE for stable/pike edd7b67 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- tasks/memcached_config.yml | 8 ++++++++ templates/systemd-restart-on-failure.conf.j2 | 4 ++++ tox.ini | 6 +++--- 8 files changed, 21 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We jubilantly announce the release of: openstack-ansible-ironic 16.0.1: Ironic Role for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. Changes in openstack-ansible-ironic 16.0.0.0rc1..16.0.1 ------------------------------------------------------- b1b50a0 Add libxml2-dev on ironic api distro packages 1acbf06 Updated from OpenStack Ansible Tests ada7d70 Update vars and test tooling for Pike 8f0f4b6 Updated from OpenStack Ansible Tests a9d46a7 Update UPPER_CONSTRAINTS_FILE for stable/pike 4f8624b Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- vars/ubuntu-16.04.yml | 3 ++- 8 files changed, 29 insertions(+), 27 deletions(-)

1 0

[openstackansible] openstack-ansible-os_rally 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We contentedly announce the release of: openstack-ansible-os_rally 16.0.1: os_rally for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 16.0.0.0rc1..16.0.1 --------------------------------------------------------- e57e9c2 Updated from OpenStack Ansible Tests 64dc7f3 Updated from OpenStack Ansible Tests ace2e7b Update vars and test tooling for Pike 8202950 Update UPPER_CONSTRAINTS_FILE for stable/pike f1ed443 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 20 insertions(+), 19 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are stoked to announce the release of: openstack-ansible-os_cinder 16.0.1: os_cinder role for OpenStack- Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 16.0.0.0rc1..16.0.1 ---------------------------------------------------------- b3f53ea Correct cinder online migrations command ab5b6d7 Ensure online migrations can run a5f39a0 Update paste, policy and rootwrap configurations 2017-08-25 00ac49c Updated from OpenStack Ansible Tests 4095460 Updated from OpenStack Ansible Tests 6761caf Update vars and test tooling for Pike eeb849e tasks: cinder_install: Fix virtualenv-tools issue on openSUSE 4d0f5e8 Update UPPER_CONSTRAINTS_FILE for stable/pike d14dfe7 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tasks/cinder_db_setup.yml | 3 ++- tasks/cinder_install.yml | 4 ++-- templates/policy.json.j2 | 19 ++++++++++++++++++- tox.ini | 6 +++--- 10 files changed, 44 insertions(+), 25 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are jazzed to announce the release of: openstack-ansible-os_heat 16.0.1: os_heat for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 16.0.0.0rc1..16.0.1 -------------------------------------------------------- 949f26d Updated from OpenStack Ansible Tests ad59562 Updated from OpenStack Ansible Tests 5033ad5 Update vars and test tooling for Pike e85e2cf tasks: heat_install: Fix virtualenv-tools issue on openSUSE 525d787 Update UPPER_CONSTRAINTS_FILE for stable/pike a498f01 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tasks/heat_install.yml | 4 ++-- tox.ini | 6 +++--- 8 files changed, 22 insertions(+), 21 deletions(-)

1 0

[openstackansible] openstack-ansible-os_neutron 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We joyfully announce the release of: openstack-ansible-os_neutron 16.0.1: os_neutron role for OpenStack- Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 16.0.0.0rc1..16.0.1 ----------------------------------------------------------- dd658f9 Updated from OpenStack Ansible Tests c1a2ff5 Update paste, policy and rootwrap configurations 2017-08-25 8c76ea7 Simplify the string check for offline db migrations 4af7f63 tasks: neutron_install: Fix virtualenv-tools issue on openSUSE 8268951 Updated from OpenStack Ansible Tests 8db15a4 Update UPPER_CONSTRAINTS_FILE for stable/pike bcf568e Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 5 ++--- tasks/neutron_db_setup.yml | 4 ++-- tasks/neutron_install.yml | 4 ++-- templates/policy.json.j2 | 12 ++++++++---- tox.ini | 2 +- 8 files changed, 23 insertions(+), 16 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are ecstatic to announce the release of: openstack-ansible-os_ceilometer 16.0.1: os_ceilometer role for OpenStack-Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 16.0.0.0rc1..16.0.1 -------------------------------------------------------------- 4d3c565 Updated from OpenStack Ansible Tests 2604412 Updated from OpenStack Ansible Tests d633332 Update vars and test tooling for Pike 1bdf1d6 Update UPPER_CONSTRAINTS_FILE for stable/pike 49ca936 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 7 files changed, 24 insertions(+), 23 deletions(-)

1 0

[openstackansible] openstack-ansible 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are tickled pink to announce the release of: openstack-ansible 16.0.1: Ansible playbooks for deploying OpenStack This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.1 ^^^^^^ New Features ************ * The Ceph stable release used by openstack-ansible and its ceph- ansible integration has been changed to the recent Ceph LTS (http://ceph.com/releases/v12-2-0-luminous-released/) Luminous release. Upgrade Notes ************* * The Ceph stable release used by openstack-ansible and its ceph- ansible integration has been changed to the recent Ceph LTS (http://ceph.com/releases/v12-2-0-luminous-released/) Luminous release. Changes in openstack-ansible 16.0.0..16.0.1 ------------------------------------------- 9331e74 Update version of this dev cycle 797e372 Correct Pike release date in doc index aa6e522 Fix variable def. f01ce98 Upgrade ceph release to Luminous 78200e1 Set the LXC download mirror properly 4a90bef Remove urllib3/requests from requirements c7e9e16 Use RDO Pike repository Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +++++++--- deploy-guide/source/deploymenthost.rst | 2 +- group_vars/all/all.yml | 2 +- group_vars/all/ceph.yml | 3 ++- playbooks/ceph-install.yml | 3 +++ releasenotes/notes/ceph-luminous-d1ff5c08452a9887.yaml | 9 +++++++++ requirements.txt | 2 -- 12 files changed, 29 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ed8d1a9..8636907 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests>=2.14.2 # Apache-2.0 @@ -13 +11,0 @@ PyYAML>=3.10.0 # MIT -urllib3>=1.21.1 # MIT

1 0

[openstackansible] openstack-ansible-os_glance 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are gleeful to announce the release of: openstack-ansible-os_glance 16.0.1: os_glance for OpenStack Ansible This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 16.0.0.0rc1..16.0.1 ---------------------------------------------------------- 6101997 Update paste, policy and rootwrap configurations 2017-09-04 727ba1d Updated from OpenStack Ansible Tests 695977e Updated from OpenStack Ansible Tests a153287 Update vars and test tooling for Pike 74a8261 Remove glare-paste.ini template af22504 tasks: glance_install: Fix virtualenv-tools issue on openSUSE 92f4391 Update UPPER_CONSTRAINTS_FILE for stable/pike 54dc895 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tasks/glance_install.yml | 4 +-- templates/glance-glare-paste.ini.j2 | 60 ------------------------------------- templates/policy.json.j2 | 9 +++--- tox.ini | 6 ++-- 10 files changed, 28 insertions(+), 86 deletions(-)

1 0

[openstackansible] ansible-hardening 16.0.1 (pike)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We contentedly announce the release of: ansible-hardening 16.0.1: OpenStack-Ansible: Host security hardening This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 16.0.1 ^^^^^^ New Features ************ * Deployers can now specify a custom package name or URL for an EPEL release package. CentOS systems use "epel-release" by default, but some deployers have a customized package that redirects servers to internal mirrors. * Fedora 26 is now supported. * The password minimum and maximum lifetimes are now opt-in changes that can take action against user accounts instead of printing debug warnings. Refer to the documentation for STIG requirements V-71927 and V-71931 to review the opt-in process and warnings. Upgrade Notes ************* * The EPEL repository is only installed and configured when the deployer sets "security_enable_virus_scanner" to "yes". This allows the ClamAV packages to be installed. If "security_enable_virus_scanner" is set to "no" (the default), the EPEL repository will not be added. See Bug 1702167 (https://bugs.launchpad.net/openstack- ansible/+bug/1702167) for more details. * Deployers now have the option to prevent the EPEL repository from being installed by the role. Setting "security_epel_install_repository" to "no" prevents EPEL from being installed. This setting may prevent certain packages from installing, such as ClamAV. Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Changes in ansible-hardening 16.0.0.0b1..16.0.1 ----------------------------------------------- ebf3331 Final docs updates for Pike 8fa95bf Add release note for F26 support 24abca2 Check apparmor_status output 429906a Fix AppArmor idempotency 3e84ecd Updated from OpenStack Ansible Tests 53b578d Update vars and test tooling for Pike 619c22a Fedora 26 support f576f24 Skip sysctl configs when enabled: no ca9b2e2 Updated from global requirements 3c63217 Change default prohibit root sshd password auth 78d37af Manually check apparmor_status 5d11c8c Updated from global requirements 758eab9 Fix auditd remote conf check 458e0e4 Install libpam-pwquality on Ubuntu f900089 Updated from OpenStack Ansible Tests 36b36b3 Re-organize defaults/main.yml bcce655 Allow epel-release package name customization a64c833 Conditionally install EPEL if needed 4449474 [Docs] Make install/usage docs more clear e112b92 Fix grep for sudoers w/o password d031846 Skip shadow checks for users w/o shadow data 923e219 [Docs] Adjust hardening domains page 6ae8823 Split long running tasks 4dd5e37 Avoid skipped package-related tasks 72afbcf Doc migration fixes 5ce112c Add equalto Jinja2 test for EL7 d2ab68b Correct the list of supported OS versions f422da8 Add support for the openSUSE Leap distributions 93d05c5 tasks: rhel7stig: aide: Fix conditionals for Ubuntu exclusions d996c60 tasks: rhel7stig: aide: Use 'aide -i' if 'aideinit' is not available 1a02653 Sync test files with the openstack-ansible-tests repository 90b1317 Trivial spelling fix d3c74ec tasks: rhel7stig: sshd: Avoid using with_fileglob for remote hosts 76b51e3 Doc updates 2b14fca Ensure that role tests pin pip/setuptools/wheel 875f635 [Docs] Overhaul STIG by tag docs 75b29b6 Add release note for password lifetime patches 3699f90 Actually set min/max password lifetime for account 6c9c7fa Get a list of all users + interactive users 38270e7 [Docs] Replace security role references 68ecd21 Fix ansible-hardening references in tox/playbook 3633d35 Remove 'physical_host' from inventory 97186f8 Initial Fedora 25 support 25acbff Fix incorrect tag for V-71895 d2617c7 Fix incorrect tag for V-71899 33d1b71 Fix incorrect tag for V-72267 cbf46a1 Fix .gitreview 5743ea8 Fix AppArmor dmesg grep task 61516fb Don't install python-ndg_httpsclient 40c744c Add more test coverage d7600f1 Fix bare jinja variable pam_password_file 4e9a8a1 Initial Debian 8 support 6e761ef Move tasks to 'accounts' file ed8364e [Docs] Put FAQ after getting started docs b83eb43 [Docs] Fix missing hyphen in status 5eb302c Fix numbering in AIDE config block 6ca676b Updated from global requirements 1525402 Enable auto-upgrade in the gate 45fd0a2 Check for grub2 defaults file 38255a8 Use zuul-cloner for tests repo in OpenStack-CI 1819c42 Configure AIDE before initial run 6a4f806 Remove test_plugins directory 5ef94bf Fix security role gate d4daf7e Update docs for Pike a547739 Cleanup tox.ini d833671 Fix warnings about jinja2 in when 5a4efe7 Maintain default ansible parameters ab9357d Skip ClamAV db update in gate c09763e Adjust readme/meta for Ansible 2.3 9361a14 Do not update grub if grub not used Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 3 +- README.md | 34 +- README.rst | 6 +- Vagrantfile | 82 +- bindep.txt | 49 +- defaults/main.yml | 876 +++++++++++---------- files/V-38682-modprobe.conf | 2 +- files/aide_extra.conf | 14 - files/zypper-autoupdates | 3 + handlers/main.yml | 2 + meta/main.yml | 19 +- ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + releasenotes/source/conf.py | 13 +- setup.cfg | 2 +- tasks/main.yml | 14 +- tasks/rhel6stig/main.yml | 7 + tasks/rhel6stig/sshd.yml | 28 +- tasks/rhel7stig/accounts.yml | 249 ++++++ tasks/rhel7stig/aide.yml | 92 ++- tasks/rhel7stig/apt.yml | 27 + tasks/rhel7stig/async_tasks.yml | 45 ++ tasks/rhel7stig/auditd.yml | 4 +- tasks/rhel7stig/auth.yml | 315 ++------ tasks/rhel7stig/dnf.yml | 93 +++ tasks/rhel7stig/file_perms.yml | 4 +- tasks/rhel7stig/kernel.yml | 8 +- tasks/rhel7stig/lsm.yml | 49 +- tasks/rhel7stig/main.yml | 52 +- tasks/rhel7stig/misc.yml | 11 +- tasks/rhel7stig/packages.yml | 55 -- tasks/rhel7stig/rpm.yml | 16 +- tasks/rhel7stig/sshd.yml | 24 +- tasks/rhel7stig/yum.yml | 41 + tasks/rhel7stig/zypper.yml | 101 +++ templates/osas-auditd-rhel7.j2 | 4 +- test-requirements.txt | 11 +- tox.ini | 41 +- vars/debian.yml | 169 ++++ vars/main.yml | 4 +- vars/redhat.yml | 15 +- vars/suse.yml | 102 +++ vars/ubuntu.yml | 160 ---- 140 files changed, 2667 insertions(+), 1613 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2e28ed2..6c9394a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx>=1.5.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_designate 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are overjoyed to announce the release of: openstack-ansible-os_designate 15.1.9: os_designate for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_designate/ For more details, please see below. Changes in openstack-ansible-os_designate 15.1.6..15.1.9 -------------------------------------------------------- 2d1d0a7 Use the correct _developer_mode variable Diffstat (except docs and test files) ------------------------------------- tasks/designate_install.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_rally 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are glad to announce the release of: openstack-ansible-os_rally 15.1.9: os_rally for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 15.1.4..15.1.9 ---------------------------------------------------- 1905221 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/rally_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-rsyslog_server 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-rsyslog_server 15.1.9: rsyslog_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 15.0.0.0rc1..15.1.9 --------------------------------------------------------------- a7d4b0d Install python2-pyOpenSSL package on CentOS d82b673 Fix inconsistency for tag 7c9c6de Update repo for stable/ocata 1df82d0 Update UPPER_CONSTRAINTS_FILE for stable/ocata 526768e Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- tasks/main.yml | 4 ++-- tasks/rsyslog_server_post_install.yml | 2 +- tox.ini | 6 +++--- 6 files changed, 9 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 15.1.9 (ocata)
by no-reply＠openstack.org 05 Oct '17

05 Oct '17

We are satisfied to announce the release of: openstack-ansible-os_nova 15.1.9: os_nova for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 15.1.8..15.1.9 --------------------------------------------------- e6f2295 Ensure online migrations can run 36974c4 Updated from OpenStack Ansible Tests 7ea00df Correct nova virt type detection 1d98cf1 Fail if TLS + TCP are enabled for libvirtd 176f4dd Correct Ansible deprecation warning 4db7eb1 Reorder the placement service setup Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 31 +++++++++++++---- bindep.txt | 36 +++++++++++++------ tasks/main.yml | 38 ++++++++++++++------ tasks/nova_db_setup.yml | 1 + tasks/nova_install.yml | 1 + tasks/nova_virt_detect.yml | 22 ++++++------ 7 files changed, 136 insertions(+), 80 deletions(-)

1 0