July 2017 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are psyched to announce the release of: openstack-ansible 15.1.6: Ansible playbooks for deploying OpenStack This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.6 ^^^^^^ New Features ************ * The "os-cinder-install.yml" playbook will now execute a rolling upgrade of cinder including database migrations (both schema and online) as per the procedure described in the cinder documentation (https://docs.openstack.org/developer/cinder/upgrade.html) When haproxy is used as the load balancer, the backend being changed will be drained before changes are made, then added back to the pool once the changes are complete. * The "horizon_images_allow_location" variable is added to support the "IMAGES_ALLOW_LOCATION" setting in the horizon_local_settings.py file to allow to specify and external location during the image creation. * The "os-neutron-install.yml" playbook will now execute a rolling upgrade of neutron including database migrations (both expand and contract) as per the procedure described in the neutron documentation (https://docs.openstack.org/developer/neutron/devref/upgrade.html) Known Issues ************ * OpenStack-Ansible sets a new variable, *galera_disable_privatedevices*, that controls whether the *PrivateDevices* configuration in MariaDB's systemd unit file is enabled. If the *galera_server* role is deployed on a bare metal host, the MariaDB default is maintained (*PrivateDevices=true*). If the *galera_server* role is deployed within a container, the *PrivateDevices* configuration is set to *true* to work around a systemd bug with a bind mounted */dev/ptmx*. See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack- ansible/+bug/1697531) for more details. * OpenStack-Ansible sets a new variable, *memcached_disable_privatedevices*, that controls whether the *PrivateDevices* configuration in MemcacheD's systemd unit file is enabled. If the *memcached_server* role is deployed on a bare metal host, the default is maintained (*PrivateDevices=true*). If the role is deployed within a container, the *PrivateDevices* configuration is set to *true* to work around a systemd bug with a bind mounted */dev/ptmx*. See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack- ansible/+bug/1697531) for more details. Changes in openstack-ansible 15.1.5..15.1.6 ------------------------------------------- a578762 Allow keystone playbook to work with limits 674c64a Override keepalived uca repo with common variable 15edf1f Ensure that role path is absolute 67c8437 Implement rolling upgrades for keystone be87a8a Add haproxy-endpoint-manage common task 3cebcf1 Implement rolling upgrades for neutron 8a71c35 Remove Ceph warning. 4af5c14 Work around bad DNS resolution cb87202 Avoid renaming tempest result files adce4e0 Implement rolling upgrades for cinder fbd1d78 Bump plugins SHA to HEAD 8c26e45 Use distro specific netcat package names 03a6436 Bump lxc_container_create SHA 8b6cc5f Use new ansible-hardening role c663916 Set PrivateDevices=false for MemcacheD 500c25d Set PrivateDevices=false for Galera 60d3545 Fix race condition regression fd6f756 Include strategy/connection plugin fix 2b31509 If repo build fails, force all hosts to fail 250b93d Add additional role path for lint testing a4ffa2b Use the same version of ansible as tests repo 3462c75 [Docs] Update ansible version d98c598 Update all SHAs for 15.1.6 5c6eb06 Avoid retrieving IP from a bridge without IP 6d87aa8 Add var for environment used only inside playbooks Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 40 +-- .../source/app-advanced-config-security.rst | 6 +- deploy-guide/source/app-ceph.rst | 5 - deploy-guide/source/app-security.rst | 2 +- etc/openstack_deploy/user_variables.yml | 7 + playbooks/ceph-install.yml | 2 + playbooks/common-playbooks/cinder.yml | 130 ++++++++++ playbooks/common-playbooks/neutron.yml | 120 +++++++++ playbooks/common-tasks/dynamic-address-fact.yml | 2 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 30 +++ playbooks/common-tasks/restart-service.yml | 45 ++++ playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 60 ++--- playbooks/etcd-install.yml | 2 + playbooks/galera-install.yml | 2 + playbooks/haproxy-install.yml | 2 + playbooks/inventory/group_vars/all.yml | 5 +- playbooks/inventory/group_vars/cinder_all.yml | 10 + playbooks/inventory/group_vars/galera_all.yml | 4 + playbooks/inventory/group_vars/hosts.yml | 2 +- playbooks/inventory/group_vars/keystone_all.yml | 9 + playbooks/inventory/group_vars/memcached.yml | 4 + playbooks/lxc-containers-create.yml | 1 + playbooks/lxc-hosts-setup.yml | 1 + playbooks/memcached-install.yml | 1 + playbooks/openstack-hosts-setup.yml | 1 + playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-ceilometer-install.yml | 1 + playbooks/os-cinder-install.yml | 280 ++++++++++++++------- playbooks/os-designate-install.yml | 1 + playbooks/os-glance-install.yml | 1 + playbooks/os-gnocchi-install.yml | 1 + playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-keystone-install.yml | 186 +++++++++++--- playbooks/os-magnum-install.yml | 1 + playbooks/os-neutron-install.yml | 150 ++++------- playbooks/os-nova-install.yml | 1 + playbooks/os-rally-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-swift-install.yml | 2 + playbooks/os-swift-sync.yml | 1 + playbooks/os-tempest-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/rabbitmq-install.yml | 3 + playbooks/repo-build.yml | 26 +- playbooks/repo-server.yml | 1 + playbooks/rsyslog-install.yml | 1 + playbooks/security-hardening.yml | 3 +- playbooks/unbound-install.yml | 1 + playbooks/utility-install.yml | 1 + playbooks/vars/configs/keepalived_haproxy.yml | 1 + ...tos-galera-privatedevices-4958f0be6cffa466.yaml | 14 ++ ...-memcached-privatedevices-d3be3acb19ed71d6.yaml | 14 ++ .../cinder-rolling-upgrades-f069187fc9139276.yaml | 10 + .../image-allow-location-58212b8e506639f2.yaml | 5 + .../neutron-rolling-upgrades-5269b62ea216df5e.yaml | 7 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 10 + scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-ansible.sh | 2 + scripts/get-pypi-pkg-version.py | 2 +- scripts/openstack-ansible.rc | 2 +- scripts/release-yaml-file-prep.py | 2 +- scripts/scripts-library.sh | 3 +- .../playbooks/memcached-flush.yml | 9 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 13 + tox.ini | 6 +- 70 files changed, 960 insertions(+), 311 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are psyched to announce the release of: openstack-ansible-os_nova 15.1.6: os_nova for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 15.1.6 ^^^^^^ Deprecation Notes ***************** * The upstream noVNC developers recommend that the keymap be automatically detected for virtual machine consoles. The defaults for three Ansible variables have been removed: * nova_console_keymap * nova_novncproxy_vnc_keymap * nova_spice_console_keymap The "nova.conf" template still includes these variables and it sets the keymap configuration option. Deployers who have customized this setting will not see a change in their "nova.conf". Bug Fixes ********* * Upgrading from Newton to Ocata will now correctly add existing Nova instances to the "nova_cell1_name" cell. For more information see bug 1682169 (https://bugs.launchpad.net/openstack- ansible/+bug/1682169). Changes in openstack-ansible-os_nova 15.1.3..15.1.6 --------------------------------------------------- 17dd2dd Get Cell UUID based on Cell name variable b3e55c7 Add release note for cell_V2 upgrade fix 5223270 Fix upgrades to map existing nova instances to cell1 5339cc3 Add venv_tag local fact f46544a Remove default for nova_console_keymap c4352a8 Enable using btrfs as a backend 13e78ec Remove trailing slash in nginx config 8aacdd0 Fix for lookup and get_url occuring in different places e29980d Cleanup CentOS pkg Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 +++++---- .../cell_v2_map_instances-dfa21951a3dcd2f5.yaml | 5 +++++ .../remove-console-keymap-ae255da81979a3a5.yaml | 14 +++++++++++++ tasks/nova_db_post_setup.yml | 23 ++++++++++++++++++++++ tasks/nova_install.yml | 18 ++++++++++++++++- templates/lxd-init.sh.j2 | 13 ++++++++++++ templates/nova-placement-nginx.conf.j2 | 2 +- templates/nova.conf.j2 | 8 ++++++-- vars/redhat-7.yml | 2 +- 9 files changed, 85 insertions(+), 9 deletions(-)

1 0

[openstackansible] openstack-ansible-os_trove 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We high-spiritedly announce the release of: openstack-ansible-os_trove 15.1.6: os_trove role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_trove/ For more details, please see below. Changes in openstack-ansible-os_trove 15.1.4..15.1.6 ---------------------------------------------------- 93913b6 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/trove_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

[openstackansible] openstack-ansible-haproxy_server 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are thrilled to announce the release of: openstack-ansible-haproxy_server 15.1.6: haproxy_server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 15.1.5..15.1.6 ---------------------------------------------------------- 4874ef7 Add netcat to distro packages Diffstat (except docs and test files) ------------------------------------- vars/redhat-7.yml | 1 + vars/ubuntu-16.04.yml | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-galera_server 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are tickled pink to announce the release of: openstack-ansible-galera_server 15.1.6: Galera Server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 15.1.6 ^^^^^^ Known Issues * MariaDB 10.1+ includes *PrivateDevices=true* in its systemd unit files to add extra security around mount namespaces for MariaDB. While this is useful when running MariaDB on a bare metal host with other services, it is less useful when MariaDB is already in a container with its own namespaces. In addition, LXC 2.0.8 presents */dev/ptmx* as a bind mount within the container and systemd 219 (on CentOS 7) cannot make an additional bind mount of */dev/ptmx* when *PrivateDevices* is enabled. Deployers can *galera_disable_privatedevices* to *yes* to set *PrivateDevices=false* in the systemd unit file for MariaDB on CentOS 7. The default is *no*, which keeps the default systemd unit file settings from the MariaDB package. For additional information, refer to the following bugs: * https://bugs.launchpad.net/openstack-ansible/+bug/1697531 * https://github.com/lxc/lxc/issues/1623 * https://github.com/systemd/systemd/issues/6121 Changes in openstack-ansible-galera_server 15.1.5..15.1.6 --------------------------------------------------------- c6d3668 Move PrivateDevices before mysql password set a8c14f4 Dynamically include upgrade_check task files 26d7409 Disable PrivateDevices for Galera on CentOS 7 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 16 +++++++++++ ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 ++++++++++++++ tasks/galera_install_yum.yml | 32 ++++++++++++++++++++++ tasks/galera_upgrade_check.yml | 11 +------- templates/without-privatedevices.conf.j2 | 2 ++ 6 files changed, 73 insertions(+), 10 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are happy to announce the release of: openstack-ansible-os_keystone 15.1.6: os_keystone for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 15.1.5..15.1.6 ------------------------------------------------------- d3d7898 Use run_once instead of inventory scoping e5894cb Implement serialisable rolling upgrade c370910 Fix rolling upgrade test da72027 Split user create and ssh key generation 7769107 Optimise the distro package installation c2d8ca5 Use command instead of debug for handlers Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 79 ++---------------- tasks/keystone_apache.yml | 27 +++---- tasks/keystone_cleanup_old_facts.yml | 14 ++-- tasks/keystone_db_setup.yml | 57 +++++++++++-- tasks/keystone_federation_sp_setup.yml | 12 +-- tasks/keystone_idp_metadata.yml | 5 +- tasks/keystone_idp_self_signed_create.yml | 3 +- tasks/keystone_idp_self_signed_distribute.yml | 3 +- tasks/keystone_init_systemd.yml | 12 +-- tasks/keystone_install.yml | 110 ++++---------------------- tasks/keystone_key_distribute.yml | 7 +- tasks/keystone_ldap_setup.yml | 12 +-- tasks/keystone_nginx.yml | 12 +-- tasks/keystone_post_install.yml | 26 +++--- tasks/keystone_pre_install.yml | 59 +++++++++----- tasks/keystone_ssl_key_create.yml | 6 +- tasks/keystone_ssl_key_distribute.yml | 9 +-- tasks/keystone_ssl_user_provided.yml | 9 +-- tasks/keystone_uwsgi.yml | 3 +- tasks/main.yml | 22 ++---- vars/main.yml | 42 ++++++++++ 26 files changed, 229 insertions(+), 334 deletions(-)

1 0

[openstackansible] openstack-ansible-memcached_server 15.1.6 (ocata)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We exuberantly announce the release of: openstack-ansible-memcached_server 15.1.6: memcached_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. 15.1.6 ^^^^^^ Known Issues * MemcacheD sets *PrivateDevices=true* in its systemd unit file to add extra security around mount namespaces. While this is useful when running MemcacheD on a bare metal host with other services, it is less useful when MemcacheD is already in a container with its own namespaces. In addition, LXC 2.0.8 presents */dev/ptmx* as a bind mount within the container and systemd 219 (on CentOS 7) cannot make an additional bind mount of */dev/ptmx* when *PrivateDevices* is enabled. Deployers can *memcached_disable_privatedevices* to *yes* to set *PrivateDevices=false* in the systemd unit file for MariaDB on CentOS 7. The default is *no*, which keeps the default systemd unit file settings from the MemcacheD package. For additional information, refer to the following bugs: * https://bugs.launchpad.net/openstack-ansible/+bug/1697531 * https://github.com/lxc/lxc/issues/1623 * https://github.com/systemd/systemd/issues/6121 Changes in openstack-ansible-memcached_server 15.1.5..15.1.6 ------------------------------------------------------------ 5363432 Disable PrivateDevices for MemcacheD on CentOS 7 0ca5e02 Optimise the distro package installation Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 19 ++++++++-- meta/main.yml | 2 +- ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 +++++++++++ tasks/install-apt.yml | 37 ------------------ tasks/install-yum.yml | 44 ---------------------- tasks/memcached_config.yml | 11 ++++++ tasks/memcached_install.yml | 19 +++++----- templates/without-privatedevices.conf.j2 | 2 + vars/main.yml | 26 +++++++++++++ 9 files changed, 86 insertions(+), 95 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 14.2.6 (newton)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We eagerly announce the release of: openstack-ansible-rsyslog_server 14.2.6: rsyslog_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 14.1.1..14.2.6 ---------------------------------------------------------- 27e47df Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 14.2.6 (newton)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We joyfully announce the release of: openstack-ansible-rabbitmq_server 14.2.6: rabbitmq_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 14.2.2..14.2.6 ----------------------------------------------------------- 6009b65 Use checksum option when downloading RabbitMQ 8ee6a30 Update RabbitMQ to v3.6.9-1 f080ccb RabbitMQ Upgrade Testing Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/rabbitmq_pre_install.yml | 13 +---------- vars/debian.yml | 4 ++-- vars/redhat.yml | 4 ++-- 8 files changed, 39 insertions(+), 63 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 14.2.6 (newton)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are delighted to announce the release of: openstack-ansible-os_nova 14.2.6: os_nova for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 14.2.4..14.2.6 --------------------------------------------------- c4468e6 Add venv_tag local fact Diffstat (except docs and test files) ------------------------------------- tasks/nova_install.yml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0