November 2017 - Release-announce - lists.openstack.org

[openstackansible] ansible-hardening 15.1.11 (ocata)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are jazzed to announce the release of: ansible-hardening 15.1.11: OpenStack-Ansible: Host security hardening This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.11 ^^^^^^^ Bug Fixes * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Changes in ansible-hardening 15.1.9..15.1.11 -------------------------------------------- 6e82b64 Cast security_shadow_utils_fail_delay as int d0ec2e8 Configure pam_faildelay on Ubuntu 46ff2e5 Updated from OpenStack Ansible Tests 10672ae Skip sysctl configs when enabled: no Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 +-- Vagrantfile | 62 ++++++--------- bindep.txt | 37 ++++++--- ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 +++ tasks/rhel7stig/auth.yml | 18 +++++ tasks/rhel7stig/kernel.yml | 2 + vars/main.yml | 10 ++- 8 files changed, 132 insertions(+), 103 deletions(-)

1 0

[openstackansible] openstack-ansible 15.1.11 (ocata)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We enthusiastically announce the release of: openstack-ansible 15.1.11: Ansible playbooks for deploying OpenStack This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.11 ^^^^^^^ Bug Fixes * The "sysstat" package was installed on all distributions, but it was only configured to run on Ubuntu and OpenSUSE. It would not run on CentOS due to bad SELinux contexts and file permissions on "/etc/cron.d/sysstat". This has been fixed and "sysstat" now runs properly on CentOS. Changes in openstack-ansible 15.1.10..15.1.11 --------------------------------------------- 42545f1 Properly detect RBD in use on Cinder backends 39c73a8 PermitRootLogin for hosts group 187ce9d Zuul: add file extension to playbook path f7f555a Initial integrated zuulv3 jobs 96767a3 Disable ceph-ansible NFS gateway by default d68c34e Update all SHAs for 15.1.11 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 14 ++--- playbooks/common-playbooks/cinder.yml | 12 ++++ playbooks/common-playbooks/nova.yml | 15 ++++- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 64 ++++++++++---------- playbooks/inventory/group_vars/all.yml | 6 +- playbooks/inventory/group_vars/hosts.yml | 3 + playbooks/inventory/host_vars/localhost.yml | 4 -- ...t-centos-opensuse-running-0be396c60a513562.yaml | 8 +++ zuul.d/jobs.yaml | 70 ++++++++++++++++++++++ zuul.d/playbooks/run.yml | 12 ++++ zuul.d/project.yaml | 36 +++++++++++ 12 files changed, 200 insertions(+), 46 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 15.1.11 (ocata)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are psyched to announce the release of: openstack-ansible-galera_server 15.1.11: Galera Server role for OpenStack-Ansible This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 15.1.9..15.1.11 ---------------------------------------------------------- 341592d Implement apt pin to avoid MariaDB 10.1.27 0b4c0f4 Set a var for the MariaDB major version 9a33c61 Remove duplicate package pinning variable 55712ca Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +-- Vagrantfile | 31 ++++++++++++++---- bindep.txt | 2 +- defaults/main.yml | 14 +++++++-- vars/redhat-7.yml | 2 +- vars/ubuntu-16.04.yml | 4 +-- 7 files changed, 87 insertions(+), 57 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 14.2.11 (newton)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are amped to announce the release of: openstack-ansible-os_ceilometer 14.2.11: os_ceilometer role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 14.2.4..14.2.11 ---------------------------------------------------------- ee6257f Add venv_tag local fact 0034239 Revert "Pin gnocchiclient to comply with optional deps" Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 +----- tasks/ceilometer_install.yml | 7 +++++++ 2 files changed, 8 insertions(+), 5 deletions(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 15.1.11 (ocata)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are tickled pink to announce the release of: openstack-ansible-haproxy_server 15.1.11: haproxy_server role for OpenStack-Ansible This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 15.1.9..15.1.11 ----------------------------------------------------------- 0a81aac Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +-- Vagrantfile | 28 ++++++++++++++----- bindep.txt | 2 +- 4 files changed, 75 insertions(+), 50 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 14.2.11 (newton)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are delighted to announce the release of: openstack-ansible-galera_server 14.2.11: Galera Server role for OpenStack-Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 14.2.9..14.2.11 ---------------------------------------------------------- 75c71d5 Remove duplicate package pinning variable 58054f9 Updated from OpenStack Ansible Tests a7e7fa8 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +-- Vagrantfile | 36 ++++++++++++++++++---- bindep.txt | 15 ++++++++- defaults/main.yml | 1 - 5 files changed, 97 insertions(+), 50 deletions(-)

1 0

[openstackansible] openstack-ansible 14.2.11 (newton)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are chuffed to announce the release of: openstack-ansible 14.2.11: Ansible playbooks for deploying OpenStack This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.2.11 ^^^^^^^ Bug Fixes * The "sysstat" package was installed on all distributions, but it was only configured to run on Ubuntu and OpenSUSE. It would not run on CentOS due to bad SELinux contexts and file permissions on "/etc/cron.d/sysstat". This has been fixed and "sysstat" now runs properly on CentOS. Changes in openstack-ansible 14.2.10..14.2.11 --------------------------------------------- 0c2a7eb Add missing zuul v3 job definition a6c1452 Update os_nova role SHA for qemu package fix 7c9232b Update aio job to use become and fix environment 14d0504 Initial Zuulv3 jobs for Newton 0513d1c Update haproxy check script in keepalived. 3c28439 Update all SHAs for 14.2.11 4815269 Update number of workers to optimize gate memory Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 6 +-- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 46 ++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/vars/configs/keepalived_haproxy.yml | 2 +- ...t-centos-opensuse-running-0be396c60a513562.yaml | 8 ++++ .../templates/user_variables.aio.yml.j2 | 47 ++++++++++++---------- zuul.d/jobs.yaml | 47 ++++++++++++++++++++++ zuul.d/playbooks/run.yml | 12 ++++++ zuul.d/project.yaml | 30 ++++++++++++++ 10 files changed, 151 insertions(+), 51 deletions(-)

1 0

[tripleo] tripleo-common 7.6.4 (pike)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are gleeful to announce the release of: tripleo-common 7.6.4: A common library for TripleO workflows. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 7.6.3..7.6.4 -------------------------------------- 643fa47 Healthcheck for nova_migration_target container c6a9866 Fix typos in container_images_prepare failure task names b9fd639 Add retry loop for docker pull ae128f4 Action to always populate container image parameters 957b40e Get a static inventory for upgrade-non-controller ansible runs 35b8c2f Derive params support for ODL DPDK feature Diffstat (except docs and test files) ------------------------------------- healthcheck/common.sh | 15 +++ healthcheck/nova-compute | 18 +++- scripts/upgrade-non-controller.sh | 52 +++++++-- setup.cfg | 1 + tripleo_common/actions/container_images.py | 83 +++++++++++++++ tripleo_common/constants.py | 4 + tripleo_common/image/image_uploader.py | 24 ++++- workbooks/derive_params.yaml | 6 +- workbooks/plan_management.yaml | 34 +++++- 11 files changed, 358 insertions(+), 42 deletions(-)

1 0

[tripleo] tripleo-heat-templates 7.0.4 (pike)
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We enthusiastically announce the release of: tripleo-heat-templates 7.0.4: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.4 ^^^^^ New Features ************ * When using RHSM proxy, TripleO will now verify that the proxy can be reached otherwise we'll stop early and not try to subscribe nodes. Upgrade Notes ************* * The format to use for the CephPools parameter needs to be updated into the form expected by ceph-ansible. For example, for a new pool named *mypool* it should change from: { "mypool": { "size": 3, "pg_num": 128, "pgp_num": 128 } } into: [ { "name": "mypool", "pg_num": 128, "rule_name": "" } ] The first is a map where each key is a pool name and its value the pool properties, the second is a list where each item describes all properties of a pool, including its name. * Changed default address of docker0 bridge to be in the last class B private network -- 172.31.0.1/24 -- to stop conflicting with the default network range for InternalApiNetCidr. The docker0 bridge is normally unused in TripleO deployment. * When deploying with RHSM, sat-tools 6.2 will be installed instead of 6.1. The new version is supported by RHEL 7.4 and provides katello- agent package. Security Issues *************** * Live migration over TLS has been disabled since the settings it was using don't meet the required security standards. It is currently not possible to enable it via t-h-t. Other Notes *********** * With the migration from puppet-ceph to ceph-ansible for the deployment of Ceph, the format of CephPools parameter changes because the two tools use a different format to represent the list of additional pools to create. Changes in tripleo-heat-templates 7.0.3..7.0.4 ---------------------------------------------- 994922a Disable live migration over TLS 3205096 Update default cell_v2 cell when it already exists 4217767 Refactor cellv2 host discovery logic to avoid races fe9b223 Fix cinder-{backup,volume} container with pacemaker 2623100 Configure docker0 bridge address b48c114 Re-enable containerized fluentd c95a8a5 Env files for ODL deployments efcd879 Fix rights to local_settings.d for dockerized Horizon bcea7e7 Do not set cluster in maintenance mode during split stack upgrade 0ae06e1 Add --detailed-exitcodes when running puppet via ansible 2e286ec Temporarily disable fluentd from scenario001-multinode-containers 8484676 Set bind mount propegatation to shared for /var/lib/nova. 211149c Fix wrong permission on database during mysql_init tasks. 0c44d5a Set metric procssing delay for metricd 7d8b3c4 cinder: switch CinderCronDbPurgeUser to 'cinder' ba80b2b Fix iptables rules override bug in clustercheck docker service ce4bce4 mysql: Only set certificate specs if TLS everywhere is enabled 4d5686b Set ipc=host for services attaching encrypted volumes 1b1739c RHSM: when using proxy, test its connectivity first b9a04a7 Upgrade rhel_reg_sat_repo to 6.2 c1e7ff1 Add all services to container scenarios 4a08ce6 Fix nova-cpu/collectd hieradata 7779bc8 Add NetIpMap to hieradata for *ExtraConfig overrides 8f0ae91 RHSM: do not use retry to deploy katello-agent b3277ed Only mount selinux sysfs in nova_libvirt container a73cfc0 added level of indirection causes incorrect hiera config 3ac5cce Add tags to baremetal cron removal tasks 39d4fa3 Force memcached container log to file 0ec618e Fix standalone ControllerOpenstack vars f0bd09d Update CephPools format in the docker templates to fit ceph-ansible 505cecb Switch scenario004-containers to use ceph-ansible 94c624c Enable Cinder as a backend for Glance 6a7c88f Disable MongoDB in scenario002 bfbef94 Enable neutron-lbaasv2 UI in Horizon 8dff0be Run containerized mistral-api eventlet e3e0f84 Fix /etc/openstack-dashboard/ permissions for access to *policy.json 9326e34 nova-placement: switch auth_uri to keystone versionless endpoint 7e3f35d Switch RabbitFDLimit to a Puppet integer 34c286a mysql: expose IPv6 configuration to mysql puppet modules f42b2b8 Providing required priviledges to the mounted NFS volume Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-containers.yaml | 23 ++++-- .../scenario001-multinode-containers.yaml | 48 ++++++----- .../scenario002-multinode-containers.yaml | 38 +++++++-- ci/environments/scenario002-multinode.yaml | 4 +- .../scenario003-multinode-containers.yaml | 17 ++-- .../scenario004-multinode-containers.yaml | 36 ++++---- common/deploy-steps-tasks.yaml | 5 +- common/deploy-steps.j2 | 6 ++ common/services.yaml | 27 ++++++ environments/composable-roles/standalone.yaml | 12 +-- .../deployed-server-pacemaker-environment.yaml | 4 +- environments/network-isolation-v6.j2.yaml | 2 + environments/neutron-opendaylight-dpdk.yaml | 12 +-- environments/neutron-opendaylight-sriov.yaml | 9 -- .../services-docker/neutron-opendaylight-dpdk.yaml | 37 +++++++++ .../neutron-opendaylight-sriov.yaml | 22 +++++ environments/storage/enable-ceph.yaml | 2 +- environments/storage/external-ceph.yaml | 2 +- environments/storage/glance-nfs.yaml | 2 +- .../environment-rhel-registration.yaml | 2 +- .../rhel-registration/scripts/rhel-registration | 40 +++++++-- overcloud.j2.yaml | 15 ++++ puppet/all-nodes-config.j2.yaml | 6 ++ .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 21 +++-- .../controller/neutron-ml2-bigswitch.yaml | 19 ++--- puppet/role.role.j2.yaml | 12 +++ puppet/services/cinder-base.yaml | 2 +- puppet/services/database/mysql.yaml | 50 ++++++----- puppet/services/docker.yaml | 12 ++- puppet/services/glance-api.yaml | 4 +- puppet/services/gnocchi-metricd.yaml | 5 ++ puppet/services/neutron-lbaas.yaml | 3 + puppet/services/nova-compute.yaml | 2 +- puppet/services/nova-libvirt.yaml | 19 +++-- puppet/services/nova-placement.yaml | 2 +- puppet/services/rabbitmq.yaml | 2 +- ...h-pools-with-ceph-ansible-f82425e585f90ef6.yaml | 17 ++++ ...e_default_docker0_address-6a017b7078825996.yaml | 7 ++ .../notes/libvirtd-tls-6de6fb35e0ac0ab1.yaml | 6 ++ .../notes/rhsm_proxy_verify-548f104c97cf5f90.yaml | 5 ++ releasenotes/notes/sat-tools-0d0f0c53de9d34a5.yaml | 5 ++ sample-env-generator/composable-roles.yaml | 25 ++++-- tools/yaml-validate.py | 10 ++- 63 files changed, 702 insertions(+), 235 deletions(-)

1 0

[neutron] networking-midonet 4.1.0
by no-reply＠openstack.org 15 Nov '17

15 Nov '17

We are amped to announce the release of: networking-midonet 4.1.0: OpenStack MidoNet Neutron Plugin Download the package from: https://tarballs.openstack.org/networking-midonet/ For more details, please see below. Changes in networking-midonet 4.0.0..4.1.0 ------------------------------------------ 2a4f619 v2 plugin: Relax the validation for binding:profile c4b3286 gate_hook: Add "grenade-ml2" alias for grenade job 87fb09f devstack: Support CentOS 59c9e67 tempest: Update after recent removal of cred manager aliases b6200bd Revert "Revert "devstack: Switch to MidoNet 5.4"" 02eae74 devstack: Fix typos in variable names 0ea497c devstack: Propagate MIDONET_USE_CASSANDRA a7203bc devstack: Stop using devmido a497bf6 v2: Refresh network relationship a7f8f2c v2 plugin: Return {} when no port binding efedc9e v2: Replace security group implementation with ML2 version 76e932c Disable custom plugin scenarios in rally 859578d Remove duplicate in rally task definition 616b1ab devstack: Use devstack-tools 9799521 DB migration milestone for ocata 71e8cc5 test_midonet_plugin_v2: Skip a few tests 9bfd907 fwaas: Add "host" argument for agent_rpc methods 90b5bbe gate_hook: Stop writing local.conf directly 3818c77 Updated from global requirements 5b9b5d0 Update tox_install for stable/ocata 4617658 Update UPPER_CONSTRAINTS_FILE for stable/ocata 82049df Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/ci/gate_hook.sh | 21 ++- .../midonet-pkg/configure_and_start_midonet.sh | 12 +- devstack/midonet-pkg/configure_repo.sh | 1 + devstack/midonet-pkg/configure_repo_centos.sh | 53 ++++++ devstack/midonet-pkg/install_pkgs.sh | 2 + devstack/midonet-pkg/install_pkgs_centos.sh | 44 +++++ devstack/plugin.sh | 120 ++++++------- devstack/settings | 16 +- .../expand/9f3992811410_add_logging_resource.py | 2 +- .../1612b5389e6e_remove_agent_membership.py | 8 +- midonet/neutron/db/port_binding_db.py | 6 +- midonet/neutron/plugin_v2.py | 136 ++------------- midonet/neutron/services/firewall/plugin.py | 6 +- rally-jobs/networking-midonet.yaml | 189 --------------------- test-requirements.txt | 2 +- tools/tox_install_project.sh | 2 +- tox.ini | 2 +- 20 files changed, 245 insertions(+), 413 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index db93c5f..37c1dbc 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD

1 0