September 2017 - Release-announce

[openstackansible] openstack-ansible-memcached_server 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are pumped to announce the release of: openstack-ansible-memcached_server 16.0.0: memcached_server for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 15.0.0.0rc1..16.0.0 ----------------------------------------------------------------- 72d5481 Updated from OpenStack Ansible Tests 1a5f2be Updated from OpenStack Ansible Tests 95ca854 Update vars and test tooling for Pike d69c942 Add automatic restart for memcached dee2891 Update UPPER_CONSTRAINTS_FILE for stable/pike edd7b67 Update .gitreview for stable/pike f55f307 Updated from OpenStack Ansible Tests 7a814f4 Updated from OpenStack Ansible Tests 1c36a74 Updated from OpenStack Ansible Tests 755c01f Updated from OpenStack Ansible Tests 30bf944 Updated from global requirements 3dce073 Updated from OpenStack Ansible Tests 6924e7d Updated from global requirements a9acd22 Disable PrivateDevices for MemcacheD on CentOS 7 3f822ea Updated from global requirements 72d357e Updated from global requirements d90f57a Optimise the distro package installation fb7ba01 Ensure that role tests pin pip/setuptools/wheel f8ba8e0 Updated from global requirements a25aa31 Updated from global requirements c6c2dbd Use zuul-cloner for tests repo in OpenStack-CI 0fad8a2 enable memcached for CentOS 114a632 Fix role gate tests for Ansible 2.3 b259318 Optimise apt cache update task d7e47fa Use package module to install distro packages 58e17aa Add SUSE support c06fd15 Install python2-pyOpenSSL package on CentOS 82189c9 Updated from global requirements 20d5364 Updated from global requirements 13e01de Updated from global requirements 59f157f Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant ffce210 Use https instead of http for git.openstack.org 234d211 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + Vagrantfile | 51 +++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 19 ++++- files/memcached.service.suse | 10 +++ handlers/main.yml | 1 + meta/main.yml | 5 +- ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 +++++ releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.py | 2 +- tasks/install-apt.yml | 37 -------- tasks/install-yum.yml | 44 ---------- tasks/memcached_config.yml | 29 +++++++ tasks/memcached_install.yml | 19 +++-- templates/memcached.suse.j2 | 29 +++++++ templates/systemd-restart-on-failure.conf.j2 | 4 + templates/without-privatedevices.conf.j2 | 2 + test-requirements.txt | 10 +-- tox.ini | 22 ++--- vars/main.yml | 26 ++++++ vars/suse.yml | 28 ++++++ 31 files changed, 440 insertions(+), 184 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..443d1e1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12 +12 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +sphinx>=1.6.2 # BSD @@ -14 +14 @@ oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +16 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_glance 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are overjoyed to announce the release of: openstack-ansible-os_glance 16.0.0: os_glance for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 15.0.0.0rc1..16.0.0 ---------------------------------------------------------- 6101997 Update paste, policy and rootwrap configurations 2017-09-04 727ba1d Updated from OpenStack Ansible Tests 695977e Updated from OpenStack Ansible Tests a153287 Update vars and test tooling for Pike 74a8261 Remove glare-paste.ini template af22504 tasks: glance_install: Fix virtualenv-tools issue on openSUSE 92f4391 Update UPPER_CONSTRAINTS_FILE for stable/pike 54dc895 Update .gitreview for stable/pike 01cbd08 Updated from OpenStack Ansible Tests dd0ecc0 Updated from OpenStack Ansible Tests fbeca2d Add dnf support d097e5f Updated from OpenStack Ansible Tests f006b20 Updated from OpenStack Ansible Tests e16c521 Updated from global requirements 8c2f4b0 Implement uWSGI for glance-api c2e384e Update URLs in documents according to document migration 3bbd8d1 Include ceph_client role if needed 9a8481b Revert "Only sync glance database on major versions" f006470 Cast the resulting intersect set into a list a95b64f Updated from OpenStack Ansible Tests 1335990 Improve inventory scoping for limited play execution b0a81bd Updated from OpenStack Ansible Tests e9ae99e Add support for the openSUSE Leap distributions 6e74637 Switch from run_once back to inventory scoping 4268636 Hedge upgrade process against no software change 599fb64 Fix openstackdocstheme settings af9142e Use listen instead of chained notifiers 545e362 Ensure that services restart in a particular order 181c1f5 Flag glance service for restart after updates c5d7434 Updated from global requirements 647c4e3 Only sync glance database on major versions ec8a57a Switch from oslosphinx to openstackdocstheme 3f5e8a7 Updated from OpenStack Ansible Tests eea85d2 Pass packages to install as a list c82d7f8 Deprecate rpc_backend option 10fc37d Switch to Cryptography over pycrypto d319fd2 Install openstacksdk for rolling upgrade test da64415 Updated from global requirements 2d1ae83 Updated from global requirements 15dc3e3 Ensure that role tests pin pip/setuptools/wheel 9092d1d Updated from global requirements 3d3917f Run service test during glance upgrade 5e6440c Allow the developer constraints to be adjusted aa4910a Use command instead of debug for handlers 4d6e4d8 Ensure that policy file has correct group/mode fc3c42c Correct name of service in test script 48d8f26 Deprecate rabbit_use_ssl option ba38eeb Add venv_tag local fact 300b1ad Updated from global requirements 306c783 Fix for lookup and get_url occuring in different places 7727f7d Use zuul-cloner for tests repo in OpenStack-CI 22f93d5 Remove duplicate Release note. fe45a9c Rename release note to unique hash 9aa3e00 Reduce init restart time 1e9e5a6 Optimise apt cache update task cadb6bd Perform an atomic policy file change 2a200d7 Standardize test vars fe6e32e Default to "omit" mode from directory creation f7497ca Rename reno to avoid conflict on integrated repo 3a1dfa5 Rename reno to avoid conflict on integrated repo bababac Enable proxy headers parsing f39ef21 [Trivial] Fix init unit file comment 96576b8 Ensure the components are isolated from the system 78b7d8a Install python2-pyOpenSSL package on CentOS 665ce96 Updated from global requirements ca39632 Update test role to use stable/ocata in master c18d970 Cap the number of worker threads 8a29cb3 Split upgrade testing into it's own shell script 0f88dc6 Updated from global requirements 03b4f6b Updated from global requirements 9814664 Update upgrade test to use stable/ocata 8117a82 Implementing stricter permissions on config files 3bf6db5 Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant b1ef3f7 Use https instead of http for git.openstack.org feb724b Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 37 +++++++- handlers/main.yml | 51 +++++++++-- meta/main.yml | 7 +- .../capping_glance_workers-54afc20c20baa14e.yaml | 6 ++ ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 10 ++ ...glance_init_time_settings-d3cc064fd8acf107.yaml | 15 +++ .../notes/glance_uwsgi-dd5fe62e6f85ecd2.yaml | 12 +++ .../notes/remove_rpc_backend-a37345891a987f21.yaml | 5 + releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/glance_init_common.yml | 27 ------ tasks/glance_init_systemd.yml | 31 +++---- tasks/glance_install.yml | 49 +++++++--- tasks/glance_post_install.yml | 6 +- tasks/glance_pre_install.yml | 4 +- tasks/glance_uwsgi.yml | 32 +++++++ tasks/main.yml | 28 +++++- templates/glance-api.conf.j2 | 13 +-- templates/glance-glare-paste.ini.j2 | 60 ------------ templates/glance-registry.conf.j2 | 7 +- templates/glance-systemd-init.j2 | 15 ++- templates/glance-systemd-tmpfiles.j2 | 4 +- templates/glance-uwsgi.ini.j2 | 19 ++++ templates/policy.json.j2 | 9 +- test-requirements.txt | 11 +-- tox.ini | 31 +++---- vars/main.yml | 31 +++++++ vars/redhat-7.yml | 1 + vars/suse-42.yml | 24 +++++ vars/ubuntu-16.04.yml | 1 + 51 files changed, 866 insertions(+), 291 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_aodh 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We contentedly announce the release of: openstack-ansible-os_aodh 16.0.0: os_aodh for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 15.0.0.0rc1..16.0.0 -------------------------------------------------------- 4cd19b1 Updated from OpenStack Ansible Tests 5182dfa Updated from OpenStack Ansible Tests 8f7df08 Update vars and test tooling for Pike 70de61e Update UPPER_CONSTRAINTS_FILE for stable/pike 3fc2ec1 Update .gitreview for stable/pike 597fe05 Updated from OpenStack Ansible Tests 07326b7 Updated from OpenStack Ansible Tests f6e1155 Add dnf support ca816d6 Updated from OpenStack Ansible Tests 8ba5ee9 Updated from OpenStack Ansible Tests fa08186 Updated from global requirements cec27ed Fixes incorrect title 2fe71f8 Update URLs in documents according to document migration be3b221 Add support for the openSUSE Leap distributions 72d8f43 templates: aodh-httpd: Ensure proper user control in aodh root d930b0a Updated from OpenStack Ansible Tests b85f8b7 Updated from OpenStack Ansible Tests 8bce3c2 Fix openstackdocstheme settings 5bebd5a Updated from global requirements 3ad189c Switch from oslosphinx to openstackdocstheme 2d01e5f Updated from OpenStack Ansible Tests ff3b17d Updated from global requirements 44700f3 Updated from global requirements 50dfb48 Switch to Cryptography over pycrypto d6277e2 Ensure that role tests pin pip/setuptools/wheel deb4680 Updated from global requirements 8c72de8 Allow the developer constraints to be adjusted 1112796 Use command instead of debug for handlers 20e5a6a Ensure that policy file has correct group/mode c5766be deprecate rabbit_use_ssl option 9af2829 Add venv_tag local fact 8e0197e Updated from global requirements 62a98b3 Fix for lookup and get_url occuring in different places 416fadc Use zuul-cloner for tests repo in OpenStack-CI 109ad46 Update sqlalchemy constraints to match upstream eb76491 Perform an atomic policy file change 38a4453 Rename release note to unique hash 8a07de2 Reduce init restart/kill times 68a7905 Optimise apt cache update task 45087bb Enumerate aodh[mysql] extra deps and constraints 8c93d59 Standardize test vars db3f26f Rename reno to avoid conflict on integrated repo 9dcacb8 Ensure the components are isolated from the system e7c4553 Add a release note 393cfa9 Deprecate auth_plugin option bb726c1 Install python2-pyOpenSSL package on CentOS 5d40a06 Cap the number of worker processes c78a912 Updated from global requirements d077f21 [DOC] Remove confusing sentence f631776 Updated from global requirements 5ab0e32 Updated from global requirements b0de88a Use https instead of http for git.openstack.org cbe3c34 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + Vagrantfile | 45 ++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 32 +++++-- handlers/main.yml | 57 +++++++++++-- meta/main.yml | 2 +- ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 +++ .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 +++++ ...pping_aodh_wsgi_processes-6db6da9ba36c8851.yaml | 6 ++ .../deprecate_auth_plugin-71a83567d996752e.yaml | 5 ++ releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/aodh_apache.yml | 35 +++++--- tasks/aodh_init_common.yml | 27 ------ tasks/aodh_init_systemd.yml | 6 +- tasks/aodh_install.yml | 32 ++++--- tasks/aodh_post_install.yml | 6 +- tasks/main.yml | 2 +- templates/aodh-httpd.conf.j2 | 12 +++ templates/aodh-systemd-init.j2 | 13 ++- templates/aodh.conf.j2 | 4 +- test-requirements.txt | 11 ++- tox.ini | 22 ++--- vars/suse-42.yml | 50 +++++++++++ 37 files changed, 564 insertions(+), 199 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are pumped to announce the release of: openstack-ansible 16.0.0: Ansible playbooks for deploying OpenStack This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * OpenStack-Ansible now supports the openSUSE Leap 42.X distributions mainly targeting the latest 42.3 release. * Deployers can set "pip_install_centos_mirror_url" to use their preferred mirror for the RDO repositories. * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" * Fedora 26 is now supported. * The variable "lxc_image_cache_server_mirrors" has been added to the "lxc_hosts" role. This is a list type variable and gives deployers the ability to specify multiple lxc-image mirrors at the same time. * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Known Issues ************ * Ceph storage backend is known not to work on openSUSE Leap 42.X yet. This is due to missing openSUSE support in the upstream Ceph Ansible playbooks. Upgrade Notes ************* * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. * The variable "lxc_image_cache_server" has been deprecated in the "lxc_hosts" role. By default this value will pull the first item out of "lxc_image_cache_server_mirrors" list which is only done for compatibility (legacy) purposes. The default string type variable, "lxc_image_cache_server", will be removed from the "lxc_hosts" role in the in "R" release. Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Other Notes *********** * openSUSE Leap 42.X support is still work in progress and not fully tested besides basic coverange in the OpenStack CI and individual manual testing. Even though backporting fixes to the Pike release will be done on best effort basis, it's advised to use the master branch when working on openSUSE hosts. Changes in openstack-ansible 15.0.0.0rc1..16.0.0 ------------------------------------------------ 8fbe91d Final SHA Bump for stable/pike pre release 63ea1ca Suppress curl warning w/shell module 6b94a6c Bump SHA's prior to releasing 16.0.0 dd4d91b scripts: scripts-library.sh: Fix tracepath logging ecd269f roles: bootstrap-host: Remove useless 'break' command from case statement 82ec7f8 roles: bootstrap-host: Fix typo in postup/postdown options for SUSE c8494e6 Pin Dragonflow in stable/pike 8f8abbf [DOC] Add openSUSE Leap references dbdfbec [DOC} Add openSUSE to Software requirements c74c9eb Fix LXC container start order 1ec85b2 Revert "Modify unbound to JIT install clients" c148398 Declare openSUSE Leap 42.X support as WIP df2e43b tests: bootstrap-host: Add SUSE support in the RedHat network scripts 4e6e87a playbooks: os-lxc-container-setup: Force kill a container on openSUSE if it takes too long to stop 275b5e8 playbooks: os-swift-install: Use correct group name on openSUSE 524c3d1 playbooks: utility-install.yml: Update package cache on openSUSE 9587f07 group_vars: all: Replace spaces with underscores in distro repository 85fc159 tests: bootstrap-host: Refresh repositories on SUSE d93bab3 tests: bootstrap-aio: Add sftp subsystem option for SUSE 3b69bbc tests: bootstrap-host: Add ability to configure networking on SUSE 394cbd3 tests: bootstrap-host: Add SUSE variables file e2a8a7b tests: bootstrap-host: Use btrfs tools to determine available disk space 0c99bf0 scripts: bootstrap-ansible: Add required packages on openSUSE Leap 67e1a0e scripts: scripts-library.sh: Add support for openSUSE 4688f77 scripts: scripts-library.sh: Do not use the '-m' option on tracepath ac5c320 scripts: scripts-library.sh: Hide 'which' command output 2f02fd9 Vagrantfile: Add openSUSE support bc1717c Vagrantfile: Increase VM memory size to 12G b2597fd Update role SHA's for online migration fixes 3407125 Enable verbose logging when fetching roles via git-clone 5255170 Correct zuul-cloner cloning of pinned SHA's 5b21a8b Correct cinder online migrations command ce43b73 Update documentation redirects b15efc2 Remove python3 usage in bootstrap-ansible.sh 7737930 ansible-role-requirements: Bump version for the 'bird' role 1c0302f Set serial to 100% for nova_compute 52b1cb4 scripts: scripts-library.sh: Fix location for log directory f2ce540 Bump SHAs for Pike final rc 6c8e2b4 Bump ansible-keepalived to 3.0.3 bd2f417 Update docs/tooling for Pike 9a539c3 Test containerised cinder-volume eef6a62 Pin ARA for Pike a9cfb2b Revert "Reduce container counts for cinder, ironic and trove" f09b7e6 Reduce CentOS AIO bootstrap pkg list ef7bc41 Fix import of osa_toolkit in inventory-manage.py b013dec Fix Barbican's health checks 11aa1a2 Update the playbook serial settings e567837 Bootstrap Ansible fails if partial keypair exists 0146e3e Remove repeated pip_install role execution f783831 Update UPPER_CONSTRAINTS_FILE for stable/pike ffdc7bc Update .gitreview for stable/pike 2bf2d65 Allow Keepalived to read haproxy pid file f63db53 Add subunit output to ARA reporting b7a0ded Use correct dnf.conf path for proxy c410546 Pin SHA's for stable/pike rc1 2b2bd4d Use LXC reverse proxy in OpenStack-CI 7b39cba Remove the reload from the cinder playbook cbe43d5 Clarification of the openstack_user_config.yml.example 7fa186b Remove extra horizon_wsgi_threads variable da5759d Update Ansible to 2.3.2.0 f47ec3e Update fastest-infra-wheel-mirror 56a388e Fix python prereq install task 55e084b Run resolvconf role on hosts only after unbound is deployed 1b7628b Improve proxy vars in user_variables.yml e22ce54 Update worker threads to better optimize gate memory 686c9f3 Add dnf support to ceph playbook 4e24b58 Add a switch for the gate job exit tasks bbbd367 Add dnf support b3c670f Modify unbound to JIT install clients 64f942b remove the use of iteritems 7ac103e Octavia scenario e32deaa Temporarily pin all ceph roles d7a9d83 Dynamically retrieve the location of ARA to work on both py2 & py3 b3cd95f Use ansible-runtime python for internal scripts 9cd4292 Support cidr_networks in L3 network environments 09249d0 Lists of user variables files in bootstrap-host role 3e8489c Allow PYTHON_EXEC_PATH in bootstrap-ansible 6ccf4c1 Update and replace http with https for doc links in OpenStack-Ansible f10c80d [Trivialfix]Fix typos 808b2ee Run the common setup tasks on Unbound DNS containers fb5856c Create env.d overrides directory during bootstrap 01878ae Fix the unbound resolver conf.d filenames faa5fdd Updated from global requirements ea6954f Use python import machinery for inventory code 55f0c1f Remove trove_regular_user 05f3601 Add etcd environment definition 9220732 group_vars: repo_all: Always build cryptography from source a28beed Prefilter the list of groups for repo_masters 1c3a57a Unpin SHA's post Pike-3 release 009a37e Fix SHAs for Pike milestone-3 af5c873 [DOCS] Update of SSL Config to include HAProxy ece5067 Move Upgrade branch change above initial library source 2e8e68e Provide default python path 7499771 Add python2 headers for the host package install eb05d83 Revert "Update setuptools to 36.2.0" 5f7000e Improve ansible host & venv bootstrap 1c9ff37 Fix double conditional bug 6e894ee Make master repos contain all distros bb9beeb Fix variable names in sripts-library.sh 1f80d9c Add python package for ansible bootstrap fefcbcb Restart nova-placement service only when necessary bbea424 Remove stray VIRTUALENV_OPTIONS 4514082 Bump Ansible version to include include_role fix 82da9b6 Reduce ansible bootstrap packages 60a1673 Fixes deploy-guide links 27accd6 Simplify nova_cinder_rbd_inuse set fact d4ae086 Update setuptools to 36.2.0 1aeed9b Optimize execution of RBD set fact 33d8122 Update URL home-page in documents according to document migration be1419d Remove ceph_client role execution from playbooks 6519bd6 Only gather facts when necessary 022ec0e Remove run-playbooks 5c918b4 Idempotent nova db privilege grants 79021ad Restart glance services only when necessary f0e6184 Cleanly catch keyboard interrupts during tests e115d4d Set python interpreter for connection:local plays 2213cf9 py35: Set virtualenv options for CentOS 4d4d1be Tidy up keystone need_db_sync fact 08885fe Optimize the link address 8ad53fb Add debug data to data-plane-test 05f7979 Correct swift3 repo variable names 78179e9 Ensure ansible bootstrap works properly with py35 4cef8b6 Implement rolling upgrades for nova 87dcb17 Add translations test-site deployment option 4c6f4d2 Set PrivateDevices=false for CentOS7 Ceph deploys e3524ec Correctly map nova git sources b0ff0fd Fix openstackdocstheme settings 315780f March to the beat of the new docs drum 1c59857 Fixes Ocata doc link 6777032 Fix localhost python interpreter. d175e09 Use env var for the clone root 255c489 Update all SHA's for Master (Pike) as of 30.06.2017 27298a7 Implement rolling upgrades for glance b158b90 Update Calico repo build information 2ba9800 Consolidate final two keystone plays 5b9d96e Bootstrap Ansible with Python3 on Ubuntu 3feeb57 Updated from global requirements 7691623 Ensure that role path is absolute 4f6e339 Switch from oslosphinx to openstackdocstheme 7c642cc Change the variable name play_hosts to ansible_play_hosts 1e7085a Allow keystone playbook to work with limits 14793d7 Implement rolling upgrades for neutron 8243a80 Remove Ceph warning. 46ccb91 [Docs] Recommendations for firewalld 5b433aa Avoid renaming tempest result files 002c35f scripts: sources-branch-updater: Allow role requirements updates on master b55fc72 Work around bad DNS resolution ecf32e2 Implement rolling upgrades for keystone ef12bf0 Implement rolling upgrades for cinder 324857e Block comment should start with '# ' 275f3da Override keepalived uca repo with common variable 3b910f1 Use distro specific netcat package names b9c839f Move unsetting of group and host env vars 14ae2dd Set PrivateDevices=false for MemcacheD 5640b27 Implement a data plane down time test for upgrades 5f30197 scripts: sources-branch-updater-lib.sh: Avoid using 'dirname $0' c43f0bd Remove localhost host_vars file ebdf81b scripts: sources-branch-updater-lib.sh: Fix typos d10f52b Set PrivateDevices=false for Galera e9ef150 scripts: Introduce sources-branch-updater-lib library 28b646e Fix race condition regression 7e4d83e Add API availability tests to upgrade 4ecc7c3 Add additional role path for lint testing 6963b8e Switch to Cryptography over pycrypto 2798cf4 Use new ansible-hardening role abb3349 Use the same version of ansible as tests repo a1c1e6f Set python2 for SHA updating scripts 90016a2 Updated from global requirements 4e074e8 Updated from global requirements 7f5e85b Vagrant: Implement plugin check and simpler config e2f56ec Fix Python 3 bytes vs strings differences fa5336c Fix Python 3 dictionary incompatibilities 693c4b6 If repo build fails, force all hosts to fail ed7032f Revert role pin for further Pike development ed4ccd5 Add support for python 3 inventory tests 4237287 Avoid retrieving IP from a bridge without IP a1d51d5 Improve compatibiliity with Python 3 952fad5 Update vars to match latest keepalived role f9f5f00 SHA Pin for OSA Pike-2 e7800ce Simplify multi arch repo build 09b9641 Updated from global requirements 165e92c Update Ansible to 2.3.1.0 1986b06 Unset group and host vars variables during upgrade a8aba56 docs: Remove all the unnecessary blockquotes ff85023 Remove cinder_glance_api_version option 43dd3cb Add license boilerplate to Vagrantfile f7bb1e9 Add nc to the packages to install during upgrade 407002f Vagrantfile resize handling 58b4f6d Use root folder group_vars f02b548 SHA Bump for Pike as of 26.05.2017 39900e1 Remove snowflaked keepalived config cb3847c Move to a all/ group var folder 8d8e76c Avoid jinja2 templating in when warnings 62f05f7 Remove when {{ ca6d36f Ceilometer: Update URL used to source default configs e138a5e [ops-guide] Adds links to networking info in ops and networking guide 77ac881 Add var for environment used only inside playbooks b379bcf [ops-guide] Adding live migration section to ops-guide e868073 Updated from global requirements 03cdc4f Pass package list as a list 46acf2d Fix CentOS swap creation 1612733 Fix os_cmd script for tty bfa4e97 Update all SHAs for Pike 2017-05-15 129ee2a Gnocchi: Update URL used to source default configs e32cfea Updated from global requirements 3bec543 Isolate ansible-runtime venv site packages a966862 scripts: sources-branch-update.sh: Remove double 'sed' 7d0b033 Update sources-branch-updater to cater for git sourced config e56dc09 Change swap creation command for CentOS a293d10 [DOCS] Fix typos in index links for documentation 63302c6 [Docs] Cleanup developer section bf0fdb5 Adjust typesetting of disk requirements 119002a Adjust indent of inventory-manage.py 4a35fe9 Remove unused properties from environment files 95b7157 Do not use those commands when they are not exist. 8ebd4b6 Fix mysql check for galera for CentOS 2a0766b [Docs] Describe variable files locations c57ae01 [ops-guide] Removing 'draft' from operations-guide 52fe77b Fix cinder backends detection for nova ceph deploy 37e78b6 Enable ARA cross-repo testing bddcfb8 [DOCS] dded Instance Connectivity + Network Troubleshooting 8f0ff13 Bump ceilometer SHA 23a7eb6 Use package module to install distro packages 43d664b [ops-guide] Add live migration content 8a4729d SHA Bump for Pike 28/04/2016 62bc0d7 Enable cross-repo testing for OSA integrated tests 06269c1 Use wait_for_connection instead of wait_for to check container c294599 Add designate public and internal URL config f5c72e5 Bugfix for wait_for_ssh for waiting for connectivity d872a07 Update galera repo url variables during upgrades adcdb7e Add variable for template filename 4279629 Unset bootstrap-ansible variables between upgrades a05bf7c [DOCS] Internal/External VIP should be different IPs 13a8c27 Only bind haproxy to internal IP, repo and galera 36843ee Adding contributing guide to tests/ structure 5afc0aa [DOCS] Have different release/git branch name 13f8256 Update ansible-lint to 3.4.12 3320471 [DOCS] Fix link to individual role docs 0c94344 Add keystone public endpoint ce05985 Update Ansible to 2.3.0.0 b3e7a79 Enable SSL termination for octavia 7b0fd88 [docs] Redirecting deploy guide link e7263ad Move included vars to vars section d04647a Deploy package cache proxy on unbound 8033841 [DOC] Fix ntp service doc for CentOS 5c048b9 Unpin Roles for Pike-2 release 26b1fb9 Role Pin for Pike OSA Milestone-1 ce64ef4 Add group vars to prep for os_neutron role changes af28828 [DOC] use 127.0.0.1 for mysql connection 11f7da6 [DOCS] Fix the dead link 936610a [docs] Add backup information to the OSA Ops Guide b769a6e Reduce container counts for cinder, ironic and trove 89cd5c8 Set a sane default haproxy_bind_on_non_local 3a1418a Ensure proxy check is short circuit 2dd0756 Configurable haproxy network whitelists a163614 Fix a typo 35411cd Fix a typo 2e9e369 Fix ceph installation on CentOS aa459b3 [Docs] Firewall guide 0a01e1e Fix rally installation inside utility container d9e1330 SHA Bump as of 04 April 2017 a3a1535 [ops-guide] Add network maintenace content 20a4340 update package locations path in repo-build play 45d778e [docs] Update Ocata release status in heading 95b51a8 Implement http-check on haproxy services e380357 Add trove RPC encryption keys 6d757ca Update haproxy check script in keepalived. 2be3319 Restructure lib directory to install via pip 9603b8a deploy-guide: fix small rst format issues 1059b19 Keystone: Source template files from git or deploy host a74b741 Update Ansible to 2.2.2.0 57178f7 [DOCS] Add checklist item for ceph_stable_release f9061c0 Remove Ceilometer API Service 05b935b Fix pip_links for LB terminated SSL environments baba7b3 SHA Bump on Master as at 22 March 2017 bb7c067 Add support to install a molteniron server 24d52d5 Update Vagrantfile to include CentOS7 2feef33 Updated from global requirements cacf410 Add better support for multi-OS deployments 83a6b09 Implement fix for Octavia host group name 27d2754 Remove "tenant_id" from the nova endpoint a988176 [DOCS] Fixes broken link 2377479 Introduce userspace group_vars and host_vars a44e418 Remove git_dest variables daf20d0 Additions to install OpenStack Octavia 8152a15 Provide example of using veth pairs for br-vlan 1c0da7e Add Swift3 middleware to openstack_services daca930 Use OpenStack-Infra MariaDB mirror in OpenStack-CI 894e219 [docs] Updated restarting services section 3f6d625 [docs] Reorders ToC to avoid gap 9220d52 Tidy up upgrade scripts 1ed6d9f Remove epel form bootstrap-host installation. fe84f80 Updated from global requirements 6dcb678 Remove unused confusing data in example 47c684d [DOC] Fix doc about EPEL ef70b6f [docs] Update doc references for Ocata/Pike e2f62f9 Check if env.d folder exists for upgrades 51689d2 Answer the upgrade no-going-back prompt 6d6f34c [docs] Add scenario customisation information to AIO quick start guide 39d1f38 DOC - Add note regarding Ansible hostname bug b251aef [docs] Update developer docs script reference 722b5ff Ensure that the terminal type is set 8de5d4f Check for rbd as a default & optional glance back-end 20b068d Fix upgrade script-library check 27b5c8e Bump the Aodh SHA ae6a005 AIO: Provide facility to exclude apt distributions f63701a [docs] Add http public endpoint example 2759d7f [docs] Add content to the troubleshooting chapter beafe30 [docs] Fix formatting for Core Reviewers page f899ee2 Add openstack_user_config reference to Networking Appendix 9df34f6 Add rsyslog_client configuration for Calico a39837a Remove with_items from utility pip install 1e4d474 Serialize RabbitMQ container prep 56f31c2 Add ceph container bind mounts to group_vars e992ff0 Move glance container bind mount dirs to group_vars 2aa4a3f Adjust gate-check-commit for deploy/upgrade testing 8721437 Update all SHAs for Pike 2017-03-03 1053adf Implement ARA logging and reporting for openstack-ansible gate jobs d7c5711 Added a common tag to the common tasks 2b3ad52 Updated from global requirements f517b14 Move ceph client role to playbooks for faster run time cf6600d Updated from global requirements e74eca2 Install rdo package 59aaac0 Only insert container hosts into lxc_hosts 448b9ce Update keystone SHA to support db_sync check be08a06 Use an explicit version of urrlib3 ca2fecc update galera cluster database bind mount dirs 67f2db5 Place gnocchi database bind mount dirs to be in group_vars 5094011 Remove ceilometer from the gate 4c04c68 unify interface lookups 9aeea15 Updated from global requirements dfdda46 Add vagrantfile for AIO testing f438c65 Move upper constraint logic to after python is installed ce14919 Disable haproxy endpoint drain wait 3a08bb7 Fix error during 'inventory-manage.py -r' calls 0463862 Update thread/worker settings for optimal memory usage 41cf2f5 Updated from global requirements e0f219a Update doc index for Pike d427a7f [Doc] fix small typo 6a8f21d Use setuptools 33.1.1 53d6e17 [docs] Update troubleshooting chapter in ops guide 42292e1 Deprecate ceilometer-collector 4f1010d [Docs] Remove infra references from refinfo 7544ea9 [Docs] Scratch the content of backup and restore fc49b7d [Docs] Refactor galera ops page a930912 [Docs] Integration of role maturity matrix f09e0a2 Fix fastest-infra-wheel-mirror.py for CentOS. 3bdf5aa Add in ironic_service_user_name group_vars/all.yml cd267f1 Fix ceph AIO bootstrap for CentOS f5ed8d4 [DOCS] Fix ansible fact caching information 03a6b40 [Docs] Cleanup Container mgmt 349ba40 [Docs] Fix block storage refs in scale-environment 19a1a32 [Docs] Small fixes on swift Multi-Region guide ca98a28 [DOCS] Updated network services config references f064940 [DOCS] Update image management 5c4c6bc [DOCS] Use openstack commands 8c8f62e [DOCS] Remove redundant limit command 9583bdd [DOCS] Updated CLI examples 5ac874d [Docs] Clarify user_*.yml precedence 0feeb44 [DOCS] Correct CLI Operations examples 5e2322c [Docs] Add note to run ad-hoc commands from playbooks dir 8782f11 [Docs] Fix advanced config OSA integration section e7e0c95 Add "at least" in reference to Ethernet int 4c8db04 [Docs] Small cleanups to advanced config 257b602 Serialize Keystone and manage haproxy endpoints 9037c53 Fix broken install guide link 259992d Rename neutron_dhcp_domain to neutron_dns_domain 8057996 Make Magnum proto use openstack_service_proto e44a7f1 Add CentOS support for AIO setup 3ddf708 Remove security role from user_variables.yml 6bc3bf9 Cinder use correct glance API when RBD enabled 9ea99be Set upgrade test to test ocata->master f5d6475 Integration of dragonflow in integrated gate ab5c6ce Removing openrc download docs 2b21dc2 SHA Bump for master 15-02-2017 2de2c01 [Docs] Complete the example file c0dfe2a [Docs] Remove Kilo 339f12a [ops-guide] Add rabbitmq content e4551ef [DOCS] Move limited connectivity section to Deploy Guide 9c94a5b [DOCS] Fix link to plugins docs a9b8752 [DOC] Fix release name in quickstart doc 92ccc1b [DOCS] Include branch in links to role docs cb750e5 [Docs] Fix documentation for Cinder NFS backend 7659b63 [DOCS] Move links to role docs to deploy guide 2ce6356 Updated from global requirements 06cd163 Get conf files from local git server rather than upstream 96c7660 Ensures the host IP isn't used for containers 9831ad8 Updated from global requirements 0495961 Remove 3DES from ssl_cipher_suite 56f72ac Fixed typo causing bug in openstack-hosts-setup 59b3495 Target unbound component group instead of _all 541f04e Bring idempotency to swapon d263099 Add tracepath commands to the AIO 248caaf Revert role pins in master branch 60351bc Add group vars to enable integration with barbican 5f3cad6 Using yaml.safe_load instead of yaml.load 6b7147e Move scenario variables under vars 99c163f Use upstream profile_tasks callback 6680528 Fix typo in ip.py a687052 Use https instead of http for git.openstack.org ccea3dd Replace 'assertTrue(a in b)' with 'assertIn(a, b)' 7299336 Docstrings should not start with a space 75371dd Configurable haproxy network whitelists e572694 Update reno for stable/ocata ccabfa0 Fix haproxy playbook group target 3c8548b Work on starting the upgrade job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 28 +- Vagrantfile | 99 ++ ansible-role-requirements.yml | 106 +- .../source/app-advanced-config-options.rst | 7 +- .../source/app-advanced-config-override.rst | 3 +- .../source/app-advanced-config-security.rst | 7 +- .../source/app-advanced-config-sslcertificates.rst | 46 +- deploy-guide/source/app-advanced-role-docs.rst | 11 - deploy-guide/source/app-ceph.rst | 7 +- deploy-guide/source/app-config-pod.rst | 159 +++ deploy-guide/source/app-config-prod.rst | 2 +- deploy-guide/source/app-config-test.rst | 14 +- deploy-guide/source/app-custom-layouts.rst | 8 +- deploy-guide/source/app-limited-connectivity.rst | 152 +++ deploy-guide/source/app-networking.rst | 35 +- deploy-guide/source/app-resources.rst | 6 +- deploy-guide/source/app-security.rst | 12 +- deploy-guide/source/app.rst | 2 + deploy-guide/source/conf.py | 37 +- deploy-guide/source/configure.rst | 114 +- deploy-guide/source/deploymenthost.rst | 80 +- deploy-guide/source/overview-requirements.rst | 43 +- deploy-guide/source/targethosts-networkconfig.rst | 3 + deploy-guide/source/targethosts-prepare.rst | 92 +- .../admin/maintenance-tasks/ansible-modules.rst | 136 +++ .../admin/maintenance-tasks/managing-swift.rst | 80 ++ .../admin/maintenance-tasks/network-maintain.rst | 196 ++++ .../admin/maintenance-tasks/rabbitmq-maintain.rst | 220 ++++ .../admin/maintenance-tasks/scale-environment.rst | 364 ++++++ .../monitor-environment/monitoring-systems.rst | 11 + .../admin/openstack-operations/cli-operations.rst | 121 ++ .../admin/openstack-operations/managing-images.rst | 62 ++ .../openstack-operations/managing-instances.rst | 386 +++++++ .../admin/openstack-operations/network-service.rst | 39 + .../admin/openstack-operations/verify-deploy.rst | 112 ++ .../installation-hosts-limited-connectivity.rst | 177 --- .../draft-operations-guide/advanced-config.rst | 337 ------ .../draft-operations-guide/maintenance-tasks.rst | 19 - .../maintenance-tasks/ansible-modules.rst | 131 --- .../maintenance-tasks/backups.rst | 37 - .../maintenance-tasks/containers.rst | 194 ---- .../maintenance-tasks/firewalls.rst | 14 - .../maintenance-tasks/galera.rst | 430 ------- .../maintenance-tasks/managing-swift.rst | 78 -- .../maintenance-tasks/network-maintain.rst | 27 - .../maintenance-tasks/rabbitmq-maintain.rst | 24 - .../maintenance-tasks/scale-environment.rst | 366 ------ .../draft-operations-guide/monitor-environment.rst | 11 - .../monitor-environment/monitoring-systems.rst | 11 - .../openstack-operations.rst | 15 - .../openstack-operations/access-environment.rst | 272 ----- .../openstack-operations/managing-images.rst | 125 --- .../openstack-operations/managing-instances.rst | 220 ---- .../openstack-operations/network-service.rst | 41 - .../openstack-operations/verify-deploy.rst | 61 - .../ref-info/ansible-scripts.rst | 21 - .../ref-info/lxc-commands.rst | 37 - .../draft-operations-guide/troubleshooting.rst | 223 ---- .../upgrade-guide/reference-upgrade-playbooks.rst | 90 -- .../openstack_interface.cfg.pod.example | 157 +++ .../openstack_interface.cfg.prod.example | 26 +- .../openstack_interface.cfg.test.example | 32 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 1 + etc/openstack_deploy/conf.d/etcd.conf.example | 9 + etc/openstack_deploy/conf.d/molteniron.yml.aio | 4 + etc/openstack_deploy/conf.d/octavia.yml.aio | 4 + etc/openstack_deploy/conf.d/unbound.conf.aio | 3 - etc/openstack_deploy/conf.d/unbound.conf.example | 8 - etc/openstack_deploy/conf.d/unbound.yml.aio | 3 + etc/openstack_deploy/conf.d/unbound.yml.example | 8 + etc/openstack_deploy/openstack_user_config.yml.aio | 34 + .../openstack_user_config.yml.aio.j2 | 134 +++ .../openstack_user_config.yml.example | 75 +- .../openstack_user_config.yml.pod.example | 511 +++++++++ .../openstack_user_config.yml.prod.example | 25 +- .../openstack_user_config.yml.test.example | 4 +- etc/openstack_deploy/user_secrets.yml | 13 +- etc/openstack_deploy/user_variables.yml | 27 +- .../user_variables.yml.test.example | 6 + global-requirement-pins.txt | 2 +- group_vars/all/all.yml | 122 ++ group_vars/all/aodh.yml | 21 + group_vars/all/ceilometer.yml | 26 + group_vars/all/ceph.yml | 30 + group_vars/all/cinder.yml | 43 + group_vars/all/glance.yml | 51 + group_vars/all/haproxy.yml | 276 +++++ group_vars/all/heat.yml | 34 + group_vars/all/infra.yml | 31 + group_vars/all/ironic.yml | 29 + group_vars/all/keepalived.yml | 69 ++ group_vars/all/keystone.yml | 59 + group_vars/all/magnum.yml | 23 + group_vars/all/neutron.yml | 50 + group_vars/all/nova.yml | 60 + group_vars/all/octavia.yml | 31 + group_vars/all/pip.yml | 26 + group_vars/all/sahara.yml | 34 + group_vars/all/ssl.yml | 21 + group_vars/all/swift.yml | 29 + group_vars/all_containers.yml | 31 + group_vars/aodh_all.yml | 24 + group_vars/barbican_all.yml | 33 + group_vars/ceilometer_all.yml | 36 + group_vars/ceph_all.yml | 19 + group_vars/cinder_all.yml | 50 + group_vars/cinder_volume.yml | 22 + group_vars/designate_all.yml | 59 + group_vars/galera_all.yml | 28 + group_vars/glance_all.yml | 38 + group_vars/gnocchi_all.yml | 40 + group_vars/haproxy_all.yml | 37 + group_vars/heat_all.yml | 28 + group_vars/horizon_all.yml | 41 + group_vars/hosts.yml | 29 + group_vars/ironic_all.yml | 25 + group_vars/ironic_compute.yml | 16 + group_vars/keystone_all.yml | 39 + group_vars/magnum_all.yml | 32 + group_vars/memcached.yml | 23 + group_vars/neutron_agent.yml | 28 + group_vars/neutron_all.yml | 30 + group_vars/neutron_calico_dhcp_agent.yml | 107 ++ group_vars/nova_all.yml | 46 + group_vars/octavia_all.yml | 19 + group_vars/rabbitmq_all.yml | 22 + group_vars/repo_all.yml | 68 ++ group_vars/rsyslog.yml | 19 + group_vars/sahara_all.yml | 21 + group_vars/swift_all.yml | 31 + group_vars/trove_all.yml | 46 + group_vars/utility_all.yml | 71 ++ host_vars/.placeholder | 0 lib/__init__.py | 0 lib/dictutils.py | 92 -- lib/filesystem.py | 310 ------ lib/generate.py | 1096 ------------------ lib/ip.py | 322 ------ lib/manage.py | 339 ------ lib/tools.py | 53 - osa_toolkit/__init__.py | 0 osa_toolkit/dictutils.py | 92 ++ osa_toolkit/filesystem.py | 315 ++++++ osa_toolkit/generate.py | 1170 ++++++++++++++++++++ osa_toolkit/ip.py | 325 ++++++ osa_toolkit/manage.py | 356 ++++++ osa_toolkit/tools.py | 53 + playbooks/ceph-install.yml | 93 +- playbooks/common-playbooks/cinder.yml | 121 ++ playbooks/common-playbooks/glance.yml | 89 ++ playbooks/common-playbooks/neutron.yml | 120 ++ playbooks/common-playbooks/nova.yml | 171 +++ playbooks/common-tasks/dynamic-address-fact.yml | 51 + playbooks/common-tasks/dynamic-grouping.yml | 4 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 30 + playbooks/common-tasks/mysql-db-user.yml | 4 + playbooks/common-tasks/os-log-dir-setup.yml | 4 + playbooks/common-tasks/os-lxc-container-setup.yml | 39 +- playbooks/common-tasks/package-cache-proxy.yml | 31 +- playbooks/common-tasks/rabbitmq-vhost-user.yml | 5 + playbooks/common-tasks/restart-service.yml | 45 + playbooks/common-tasks/set-pip-upstream-url.yml | 4 + playbooks/common-tasks/set-upper-constraints.yml | 10 + playbooks/defaults/repo_packages/gnocchi.yml | 5 +- playbooks/defaults/repo_packages/nova_consoles.yml | 8 +- .../defaults/repo_packages/openstack_services.yml | 117 +- .../defaults/repo_packages/openstack_testing.yml | 6 +- playbooks/defaults/repo_packages/projectcalico.yml | 22 - playbooks/defaults/repo_packages/readme.rst | 1 - playbooks/etcd-install.yml | 2 + playbooks/galera-install.yml | 11 +- playbooks/haproxy-install.yml | 8 +- playbooks/inventory/dynamic_inventory.py | 14 +- playbooks/inventory/env.d/aodh.yml | 2 - playbooks/inventory/env.d/barbican.yml | 2 - playbooks/inventory/env.d/ceilometer.yml | 19 +- playbooks/inventory/env.d/ceph.yml | 3 - playbooks/inventory/env.d/cinder.yml | 3 - playbooks/inventory/env.d/designate.yml | 10 +- playbooks/inventory/env.d/etcd.yml | 34 + playbooks/inventory/env.d/galera.yml | 3 - playbooks/inventory/env.d/glance.yml | 1 - playbooks/inventory/env.d/gnocchi.yml | 2 - playbooks/inventory/env.d/haproxy.yml | 1 - playbooks/inventory/env.d/heat.yml | 4 - playbooks/inventory/env.d/horizon.yml | 2 - playbooks/inventory/env.d/ironic.yml | 6 - playbooks/inventory/env.d/keystone.yml | 2 - playbooks/inventory/env.d/magnum.yml | 2 - playbooks/inventory/env.d/memcache.yml | 2 - playbooks/inventory/env.d/molteniron.yml | 35 + playbooks/inventory/env.d/neutron.yml | 4 - playbooks/inventory/env.d/nova.yml | 13 - playbooks/inventory/env.d/octavia.yml | 47 + playbooks/inventory/env.d/pkg_repo.yml | 2 - playbooks/inventory/env.d/rabbitmq.yml | 2 - playbooks/inventory/env.d/rsyslog.yml | 2 - playbooks/inventory/env.d/sahara.yml | 2 - playbooks/inventory/env.d/swift-remote.yml | 1 - playbooks/inventory/env.d/swift.yml | 5 - playbooks/inventory/env.d/trove.yml | 2 - playbooks/inventory/env.d/unbound.yml | 2 - playbooks/inventory/env.d/utility.yml | 2 - playbooks/inventory/group_vars/all.yml | 468 -------- playbooks/inventory/group_vars/all_containers.yml | 23 - playbooks/inventory/group_vars/aodh_all.yml | 24 - playbooks/inventory/group_vars/barbican_all.yml | 33 - playbooks/inventory/group_vars/ceilometer_all.yml | 33 - playbooks/inventory/group_vars/cinder_all.yml | 38 - playbooks/inventory/group_vars/cinder_volume.yml | 17 - playbooks/inventory/group_vars/designate_all.yml | 56 - playbooks/inventory/group_vars/galera_all.yml | 19 - playbooks/inventory/group_vars/glance_all.yml | 28 - playbooks/inventory/group_vars/gnocchi_all.yml | 32 - playbooks/inventory/group_vars/haproxy_all.yml | 20 - playbooks/inventory/group_vars/heat_all.yml | 28 - playbooks/inventory/group_vars/horizon_all.yml | 41 - playbooks/inventory/group_vars/hosts.yml | 29 - playbooks/inventory/group_vars/ironic_all.yml | 25 - playbooks/inventory/group_vars/ironic_compute.yml | 16 - playbooks/inventory/group_vars/keystone_all.yml | 27 - playbooks/inventory/group_vars/magnum_all.yml | 32 - playbooks/inventory/group_vars/memcached.yml | 19 - playbooks/inventory/group_vars/neutron_agent.yml | 28 - playbooks/inventory/group_vars/neutron_all.yml | 28 - .../group_vars/neutron_calico_dhcp_agent.yml | 107 -- playbooks/inventory/group_vars/nova_all.yml | 31 - playbooks/inventory/group_vars/rabbitmq_all.yml | 22 - playbooks/inventory/group_vars/rally_all.yml | 18 - playbooks/inventory/group_vars/repo_all.yml | 56 - playbooks/inventory/group_vars/rsyslog.yml | 19 - playbooks/inventory/group_vars/sahara_all.yml | 21 - playbooks/inventory/group_vars/swift_all.yml | 31 - playbooks/inventory/group_vars/trove_all.yml | 46 - playbooks/inventory/group_vars/utility_all.yml | 69 -- playbooks/lxc-containers-create.yml | 14 +- playbooks/lxc-hosts-setup.yml | 1 + playbooks/memcached-install.yml | 1 + playbooks/openstack-hosts-setup.yml | 48 +- playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-ceilometer-install.yml | 3 +- playbooks/os-cinder-install.yml | 302 +++-- playbooks/os-designate-install.yml | 9 +- playbooks/os-glance-install.yml | 173 ++- playbooks/os-gnocchi-install.yml | 8 +- playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-keystone-install.yml | 175 ++- playbooks/os-magnum-install.yml | 1 + playbooks/os-molteniron-install.yml | 52 + playbooks/os-neutron-install.yml | 158 +-- playbooks/os-nova-install.yml | 338 +++--- playbooks/os-octavia-install.yml | 69 ++ playbooks/os-rally-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-swift-install.yml | 8 +- playbooks/os-swift-sync.yml | 1 + playbooks/os-tempest-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/rabbitmq-install.yml | 9 +- playbooks/repo-build.yml | 48 +- playbooks/repo-server.yml | 1 + .../templates/crontab.j2 | 10 +- playbooks/rsyslog-install.yml | 3 +- playbooks/security-hardening.yml | 3 +- playbooks/setup-openstack.yml | 2 + playbooks/unbound-install.yml | 11 +- playbooks/utility-install.yml | 35 +- playbooks/vars/configs/haproxy_config.yml | 289 ----- playbooks/vars/configs/keepalived_haproxy.yml | 68 -- .../configs/keepalived_haproxy_notifications.sh | 34 - .../notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml | 4 + .../notes/Add-CentOS-support-9a63262163dfb678.yaml | 4 + .../notes/add-iptables-5ff8c4317e2e8498.yaml | 8 + .../add-octavia-to-repo-f9d0fd8cee969181.yaml | 5 + .../add-opensuse-support-a8ec3f54188e5f01.yaml | 14 + .../notes/add-swift3-support-a3f1a5d866fd8883.yaml | 5 + .../add-template-file-var-cac35a99a3faf563.yaml | 6 + ...d_and_network_preparation-a414d45b624652a3.yaml | 11 + ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...ble-hostname-bug-rabbitmq-7919f9311d61dcd6.yaml | 9 + ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 + .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 + ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...rbican_init_time_settings-d7510910912fa061.yaml | 23 + .../notes/cap-workers-fc70b4f8586ba1a5.yaml | 6 + ...pping_aodh_wsgi_processes-6db6da9ba36c8851.yaml | 6 + ...nder_osapi_volume_workers-db32afcf7615b05b.yaml | 5 + .../capping_glance_workers-54afc20c20baa14e.yaml | 6 + ...ng_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml | 6 + .../capping_heat_workers-13791c456e59277d.yaml | 6 + .../capping_horizon_workers-29ecc4893bcc3a4b.yaml | 6 + ...ing_ironic_wsgi_processes-6fa7306fc3c29de7.yaml | 6 + .../capping_keystone_workers-e284a47fc4dcea38.yaml | 6 + .../capping_neutron_workers-d97a5d50ca996af5.yaml | 6 + .../capping_nova_workers-349f0f4d3fd50b37.yaml | 7 + ...apping_repo_nginx_workers-ddbc355855f8fe43.yaml | 5 + ...apping_sahara_api_workers-d95bdf63093ce893.yaml | 6 + ...ng_swift_services_workers-5ac9ecb28f56469f.yaml | 8 + ...ter-init-config-overrides-8ac1b94bd70c9c09.yaml | 10 + ...ter-init-config-overrides-bfce7e419061c4da.yaml | 10 + ...ometer_init_time_settings-2eebfa58227ae31a.yaml | 23 + ...er_upstream_file_retrieve-bbbf147cdeacb8f2.yaml | 10 + ...tos-galera-privatedevices-4958f0be6cffa466.yaml | 14 + ...-memcached-privatedevices-d3be3acb19ed71d6.yaml | 14 + ...entos-mirror-url-variable-eea9f226b5611b40.yaml | 5 + ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 + ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 + .../ceph-extra-components-71f1c130b9b47ba5.yaml | 6 + .../cinder-auth-stragety-02ca99f48ad7739b.yaml | 5 + .../cinder-data-migrations-ce31707c078b335c.yaml | 9 + ...der-init-config-overrides-9e495aee023deed6.yaml | 10 + .../cinder-rolling-upgrades-f069187fc9139276.yaml | 10 + .../notes/cinder_api_v3-cc53677ce77d97c3.yaml | 5 + ...cinder_init_time_settings-1ef46f6b9d4fc1df.yaml | 18 + .../notes/cinder_uwsgi-c6a1651a4c54a8cc.yaml | 15 + .../notes/common-tags-9763f578ea5fe5b6.yaml | 5 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + ...template-ignore-none-type-9387c236853f061b.yaml | 9 + .../notes/copr-repo-priority-60b3603b0c1ff2f7.yaml | 6 + ...zable-login-banner-string-d8d5ae874e8e49f3.yaml | 6 + .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 13 + .../deprecate_auth_plugin-1a78326719d67f23.yaml | 5 + .../deprecate_auth_plugin-347b326919d67a18.yaml | 5 + .../deprecate_auth_plugin-397a32171826ef78.yaml | 5 + .../deprecate_auth_plugin-451832a71b967e27.yaml | 5 + .../deprecate_auth_plugin-71a83567d996752e.yaml | 5 + .../deprecate_auth_plugin-781a536e19d674e8.yaml | 5 + .../deprecate_auth_plugin-819233a76d4523e8.yaml | 5 + .../deprecate_auth_plugin-a391325719b67612.yaml | 5 + ...ignate-pools-yaml-support-d693dc2471642167.yaml | 11 + ...ignate_init_time_settings-6efb66b0d17d4c04.yaml | 23 + ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 + ...int-change-to-internalurl-3da6bb4bd4972bea.yaml | 7 + releasenotes/notes/esl-repo-6ff0c7f24ad2a043.yaml | 25 + .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 + .../fix_lxc_hosts_membership-1f73f3114638c09e.yaml | 7 + ...-client-url-var-deprecate-9ced45ea374c3c7d.yaml | 9 + .../notes/get_nested_filter-b89828586d7e2520.yaml | 7 + ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 10 + ...glance_init_time_settings-d3cc064fd8acf107.yaml | 15 + .../notes/glance_uwsgi-dd5fe62e6f85ecd2.yaml | 12 + ...nocchi-deploy-config-file-afba6c2a8edac025.yaml | 7 + ...chi-init-config-overrides-4fc9ec27ea1bd090.yaml | 10 + ...nocchi_init_time_settings-ba554f29fc7fd351.yaml | 23 + ...hi_upstream_file_retrieve-e2a056bfc532d761.yaml | 10 + .../notes/group_vars_move-2e8f3c45935e98d8.yaml | 9 + ...haproxy-backend-arguments-3b1dca299c7a8296.yaml | 4 + ...eat-init-config-overrides-004872081661a34c.yaml | 10 + .../heat_init_time_settings-5f9f7cd4326ded97.yaml | 23 + .../notes/heat_uwsgi-11d691aa4d47c35d.yaml | 20 + .../notes/heatstack_password-25956b6143577735.yaml | 5 + .../idempotent-wheel-build-4c527045bec09fd5.yaml | 22 + .../image-allow-location-58212b8e506639f2.yaml | 5 + .../notes/implement-ssl-48a82cf611db0eb6.yaml | 5 + .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 + .../implement_tuning_params-e627c774c0d0c9d2.yaml | 10 + .../inventory-python-imports-c967b20e64b43758.yaml | 6 + ...nic-init-config-overrides-e73d9fd46a69afcf.yaml | 10 + .../ironic_init_time_settings-b8ab3c3c4d733dc.yaml | 23 + .../notes/keepalived-cleanup-d25a27752c0432bc.yaml | 9 + .../keepalived_new_vars-a3b2f0d334f79e10.yaml | 15 + .../keystone-endpoints-urls-679748dec6ee6dd7.yaml | 4 + ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 10 + .../keystone-nginx-default-e9d91affd646f379.yaml | 10 + ...one-upstream-config-files-d16f27fc1332ed83.yaml | 9 + ...ystone_init_time_settings-62a1aab4bcfc9779.yaml | 23 + ...one_plugin_default_update-c025bd5508069df3.yaml | 12 + ...instance-defaults-support-533844543082b2f4.yaml | 6 + .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 + ...c-install-from-pkg-centos-e38d351a3a9ac67e.yaml | 5 + .../lxc-interface-scripts-78e9021cf2ed0c97.yaml | 7 + .../lxc-ssh-wait-deprecation-fe3eda58fc9d318e.yaml | 12 + .../lxc_image_cache_server-f14701a7f8f4b8ca.yaml | 14 + .../lxc_net_manage_iptables-95e52387dcef0015.yaml | 5 + .../notes/magnum-client-urls-64af5efc9ece6680.yaml | 13 + ...num-init-config-overrides-aec21cbbd9da8e4e.yaml | 9 + .../magnum_init_time_settings-6ecc4ff27d7dca1.yaml | 23 + .../move-gnocchi-component-118ae07fce3562e1.yaml | 6 + .../multi-os-wheel-repos-7910b13547ea59ad.yaml | 9 + ...eutron-dragonflow-support-fce23f85c6a0bebd.yaml | 7 + ...ron-init-config-overrides-9d1d2b3b908705ed.yaml | 10 + .../neutron-rolling-upgrades-5269b62ea216df5e.yaml | 7 + ...eutron_init_time_settings-66ad8a3d9eb951b0.yaml | 23 + .../nova-data-migrations-f6c2bc0f9e7b1908.yaml | 9 + ...ova-init-config-overrides-7221a8f9d5be9291.yaml | 9 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...a-ocata-conf-deprecations-0a99d13c97424c51.yaml | 13 + .../notes/nova-placement-api-07ce03fdceb95c6d.yaml | 12 + .../nova-rolling-upgrades-5a3927330c6be5fd.yaml | 7 + .../notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml | 9 + .../nova_init_time_settings-cef7e89ab41da256.yaml | 23 + .../nova_use_cinder_v3_api-ce5f9c030591c404.yaml | 6 + .../notes/nova_uwsgi-af062fa20317d41c.yaml | 23 + ...via-init-config-overrides-554491baa2e97102.yaml | 10 + ...octavia_init_time_settings-4e66767550df88d.yaml | 23 + .../notes/octavia_uwsgi-f5d10fec3c1950bf.yaml | 15 + ...ron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml | 4 + ...octavia-haproxy-templates-18561d31bcd7151e.yaml | 7 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + .../pip-extra-index-remove-db32c770a70c8faa.yaml | 5 + .../plugins-remove-neutron-cbea1235e030e4f5.yaml | 5 + ...primary-container-rebuild-a2f4d7f33d66c843.yaml | 5 + .../notes/public-uri-proto-a1f05edd1a594f7f.yaml | 5 + .../notes/rabbimq-ssl-611102b1525ba5c2.yaml | 6 +- .../notes/recreate-option-d78bae1fd922a84d.yaml | 6 + .../remove-ceilometer-api-2bada67ecc58e18b.yaml | 11 + ...move-ceilometer-collector-aeaf6e9e1d3eb345.yaml | 9 + .../remove-console-keymap-ae255da81979a3a5.yaml | 13 + .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 + .../notes/remove-plumgrid-8c86d99999a2ca48.yaml | 5 + .../notes/remove-uca-rdo-8c625c61eeb9a771.yaml | 5 + ...glance_api_version_option-2d5508ed5deaba58.yaml | 6 + ...glance_api_version_option-5dc1d316c979e940.yaml | 5 + ...move_nova_cpu_mode_option-e9fcfc97aa13a29a.yaml | 9 + .../notes/remove_rpc_backend-1163da2fe9418315.yaml | 5 + .../notes/remove_rpc_backend-1729234e23895f18.yaml | 5 + .../notes/remove_rpc_backend-187132a35223d295.yaml | 5 + .../notes/remove_rpc_backend-7123da9fe3419215.yaml | 5 + .../notes/remove_rpc_backend-78139a469235891f.yaml | 5 + .../notes/remove_rpc_backend-8134a355d9864e12.yaml | 5 + .../notes/remove_rpc_backend-89135235e3513394.yaml | 5 + .../notes/remove_rpc_backend-9813a3455f234521.yaml | 5 + .../notes/remove_rpc_backend-a37345891a987f21.yaml | 5 + .../notes/remove_rpc_backend-a9832d7699ef1245.yaml | 5 + .../notes/replace-epel-df390980c03bbaa8.yaml | 9 + .../notes/rpc-encryption-b75fb0d08579a7dd.yaml | 7 + ...log_server_storage_policy-1dcdd5630acdeb79.yaml | 5 + ...ara-init-config-overrides-4c35b88618b0d0b4.yaml | 10 + ...sahara_init_time_settings-5ed44feb1285b867.yaml | 23 + .../notes/sahara_uwsgi-41e7e0a91a3f8c33.yaml | 15 + .../notes/save-mac-addresses-8b1e6e6301d99a37.yaml | 7 + ...service_net_endpoint_type-60dbb87c4f68403c.yaml | 7 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + ...sion-1-renumbering-fiesta-aa047fea3ea35e74.yaml | 20 + ...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml | 11 + .../notes/suse-support-7919a5e43ebdd793.yaml | 4 + .../notes/suse-support-f50df7e6b27e3e15.yaml | 4 + ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 10 + .../notes/swift-pypy-support-9706519c4b88a571.yaml | 4 +- .../swift_init_time_settings-20ea7817cbd2dca9.yaml | 23 + .../swift_internal_client-7c497400d7a8b4a2.yaml | 7 + ...est-remove-old-run-script-4365fa3b091169d8.yaml | 10 + ...ove-init-config-overrides-a78ed428a32adef8.yaml | 10 + .../trove_init_time_settings-dd293238c53c517.yaml | 23 + .../notes/ubuntu-s390x-0a561bc69354d48a.yaml | 3 + .../notes/ubuntu-s390x-c8dcc05e32e1d9eb.yaml | 3 + .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 + ...ate-multi-backend-options-4eb27290058401d3.yaml | 9 + .../update_translations-f950283d821bba05.yaml | 8 + ...space_group_and_host_vars-14f77b5eb518e32d.yaml | 22 + ...-rename-gnocchi-endpoints-87626018773f77e0.yaml | 5 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + requirements.txt | 8 +- scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-aio.sh | 8 +- scripts/bootstrap-ansible.sh | 130 ++- scripts/fastest-infra-wheel-mirror.py | 30 +- scripts/gate-check-commit.sh | 194 +++- scripts/gen-config.py | 7 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/inventory-manage.py | 19 +- scripts/keepalived_haproxy_notifications.sh | 34 + scripts/openstack-ansible.rc | 10 +- scripts/os-cmd | 2 +- scripts/pw-token-gen.py | 4 +- scripts/release-yaml-file-prep.py | 2 +- scripts/run-playbooks.sh | 132 --- scripts/run-upgrade.sh | 44 +- scripts/scripts-library.sh | 198 ++-- scripts/sources-branch-updater-lib.sh | 291 +++++ scripts/sources-branch-updater.sh | 260 +---- scripts/update-revision.sh | 3 +- .../playbooks/ansible_fact_cleanup.yml | 1 + .../playbooks/deploy-config-changes.yml | 73 +- .../playbooks/galera-cluster-rolling-restart.yml | 2 +- .../playbooks/memcached-flush.yml | 15 +- .../playbooks/user-secrets-adjustment.yml | 3 +- .../scripts/migrate_openstack_vars.py | 4 +- setup.cfg | 5 +- setup.py | 2 +- test-requirements.txt | 9 +- .../bootstrap-host/tasks/check-requirements.yml | 15 +- .../bootstrap-host/tasks/install_packages.yml | 109 ++ .../bootstrap-host/tasks/prepare_aio_config.yml | 52 +- .../tasks/prepare_loopback_cinder.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 72 +- .../bootstrap-host/tasks/prepare_networking.yml | 139 ++- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 79 ++ .../bootstrap-host/templates/apt-sources.list.j2 | 18 +- .../bootstrap-host/templates/osa_interfaces.cfg.j2 | 39 + .../templates/osa_interfaces_multinode.cfg.j2 | 6 +- .../templates/redhat_interface_alias.cfg.j2 | 5 + .../templates/redhat_interface_default.cfg.j2 | 11 + .../templates/rpm_interface_ifdown-post.cfg.j2 | 29 + .../templates/rpm_interface_ifup-post.cfg.j2 | 35 + .../templates/suse_interface_default.cfg.j2 | 8 + .../templates/user_variables.aio.yml.j2 | 151 ++- .../templates/user_variables.ceph.yml.j2 | 16 - .../templates/user_variables_ceph.yml.j2 | 29 + .../templates/user_variables_octavia.yml.j2 | 25 + .../templates/user_variables_translations.yml.j2 | 22 + tox.ini | 26 +- 592 files changed, 18710 insertions(+), 11783 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cbbac23..ed8d1a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +4 @@ -pip>=7.1.0 # MIT -setuptools!=24.0.0,>=16.0 # PSF/ZPL -wheel # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -9 +6 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -15,0 +13 @@ PyYAML>=3.10.0 # MIT +urllib3>=1.21.1 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7c6cede..78145f7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ bashate>=0.2 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -15,3 +15,2 @@ virtualenv>=13.1.0 # MIT -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -19 +18 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] ansible-hardening 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are psyched to announce the release of: ansible-hardening 16.0.0: OpenStack-Ansible: Host security hardening This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 16.0.0 ^^^^^^ Prelude ******* The first release of the Red Hat Enterprise Linux 7 STIG was entirely renumbered from the pre-release versions. Many of the STIG configurations simply changed numbers, but some were removed or changed. A few new configurations were added as well. New Features ************ * Deployers can now specify a custom package name or URL for an EPEL release package. CentOS systems use "epel-release" by default, but some deployers have a customized package that redirects servers to internal mirrors. * Deployers can provide a customized login banner via a new Ansible variable: "security_login_banner_text". This banner text is used for non-graphical logins, which includes console and ssh logins. * Fedora 26 is now supported. * The password minimum and maximum lifetimes are now opt-in changes that can take action against user accounts instead of printing debug warnings. Refer to the documentation for STIG requirements V-71927 and V-71931 to review the opt-in process and warnings. Upgrade Notes ************* * The EPEL repository is only installed and configured when the deployer sets "security_enable_virus_scanner" to "yes". This allows the ClamAV packages to be installed. If "security_enable_virus_scanner" is set to "no" (the default), the EPEL repository will not be added. See Bug 1702167 (https://bugs.launchpad.net/openstack- ansible/+bug/1702167) for more details. * Deployers now have the option to prevent the EPEL repository from being installed by the role. Setting "security_epel_install_repository" to "no" prevents EPEL from being installed. This setting may prevent certain packages from installing, such as ClamAV. Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. Security Issues *************** * The security role will no longer fix file permissions and ownership based on the contents of the RPM database by default. Deployers can opt in for these changes by setting "security_reset_perm_ownership" to "yes". * The tasks that search for ".shosts" and "shosts.equiv" files (STIG ID: RHEL-07-040330) are now skipped by default. The search takes a long time to complete on systems with lots of files and it also causes a significant amount of disk I/O while it runs. * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. * The latest version of the RHEL 7 STIG requires that a standard login banner is presented to users when they log into the system (V-71863). The security role now deploys a login banner that is used for console and ssh sessions. * The "cn_map" permissions and ownership adjustments included as part of RHEL-07-040070 and RHEL-07-040080 has been removed. This STIG configuration was removed in the most recent release of the RHEL 7 STIG. * The PKI-based authentication checks for RHEL-07-040030, RHEL-07-040040, and RHEL-07-040050 are no longer included in the RHEL 7 STIG. The tasks and documentation for these outdated configurations are removed. Bug Fixes ********* * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Changes in ansible-hardening 15.0.0.0rc1..16.0.0 ------------------------------------------------ ebf3331 Final docs updates for Pike 8fa95bf Add release note for F26 support 24abca2 Check apparmor_status output 429906a Fix AppArmor idempotency 3e84ecd Updated from OpenStack Ansible Tests 53b578d Update vars and test tooling for Pike 619c22a Fedora 26 support f576f24 Skip sysctl configs when enabled: no ca9b2e2 Updated from global requirements 3c63217 Change default prohibit root sshd password auth 78d37af Manually check apparmor_status 5d11c8c Updated from global requirements 758eab9 Fix auditd remote conf check 458e0e4 Install libpam-pwquality on Ubuntu f900089 Updated from OpenStack Ansible Tests 36b36b3 Re-organize defaults/main.yml bcce655 Allow epel-release package name customization a64c833 Conditionally install EPEL if needed 4449474 [Docs] Make install/usage docs more clear e112b92 Fix grep for sudoers w/o password d031846 Skip shadow checks for users w/o shadow data 923e219 [Docs] Adjust hardening domains page 6ae8823 Split long running tasks 4dd5e37 Avoid skipped package-related tasks 72afbcf Doc migration fixes 5ce112c Add equalto Jinja2 test for EL7 d2ab68b Correct the list of supported OS versions f422da8 Add support for the openSUSE Leap distributions 93d05c5 tasks: rhel7stig: aide: Fix conditionals for Ubuntu exclusions d996c60 tasks: rhel7stig: aide: Use 'aide -i' if 'aideinit' is not available 1a02653 Sync test files with the openstack-ansible-tests repository 90b1317 Trivial spelling fix d3c74ec tasks: rhel7stig: sshd: Avoid using with_fileglob for remote hosts 76b51e3 Doc updates 2b14fca Ensure that role tests pin pip/setuptools/wheel 875f635 [Docs] Overhaul STIG by tag docs 75b29b6 Add release note for password lifetime patches 3699f90 Actually set min/max password lifetime for account 6c9c7fa Get a list of all users + interactive users 38270e7 [Docs] Replace security role references 68ecd21 Fix ansible-hardening references in tox/playbook 3633d35 Remove 'physical_host' from inventory 97186f8 Initial Fedora 25 support 25acbff Fix incorrect tag for V-71895 d2617c7 Fix incorrect tag for V-71899 33d1b71 Fix incorrect tag for V-72267 cbf46a1 Fix .gitreview 5743ea8 Fix AppArmor dmesg grep task 61516fb Don't install python-ndg_httpsclient 40c744c Add more test coverage d7600f1 Fix bare jinja variable pam_password_file 4e9a8a1 Initial Debian 8 support 6e761ef Move tasks to 'accounts' file ed8364e [Docs] Put FAQ after getting started docs b83eb43 [Docs] Fix missing hyphen in status 5eb302c Fix numbering in AIDE config block 6ca676b Updated from global requirements 1525402 Enable auto-upgrade in the gate 45fd0a2 Check for grub2 defaults file 38255a8 Use zuul-cloner for tests repo in OpenStack-CI 1819c42 Configure AIDE before initial run 6a4f806 Remove test_plugins directory 5ef94bf Fix security role gate d4daf7e Update docs for Pike a547739 Cleanup tox.ini d833671 Fix warnings about jinja2 in when 5a4efe7 Maintain default ansible parameters ab9357d Skip ClamAV db update in gate c09763e Adjust readme/meta for Ansible 2.3 9361a14 Do not update grub if grub not used 005fa52 Make login banner customizable 1a1bc2b [Docs] Fix docs for V-72055 701c0b1 Fix path to daemon init params file 9d745ec Remove end spaces in STIG XML dccce1d Handle RHEL 7 STIG renumbering c1780c7 Change PASS_WARN_DAYS --> PASS_WARN_AGE 78d844a Rename vars/common.yml to vars/main.yml 12dd05b Install EPEL for security role 9efb815 Make .shosts search/removal opt in 8f7d132 Fix selinux check when disabled 209ce55 Add missing STIG ID tags 7caec98 Disable file perm/ownership reset 58038d4 Install python2-pyOpenSSL package on CentOS 13ef9cf Replace always_run with check_mode c7d9a79 Updated from global requirements 4cb2fa4 Enable ntp client functionality with chronyd 2e5fe3b Only enable ssh, not start 4a23bc8 Use async for RPM verification a2b3fe1 Use async for updating ClamAV DB 9af2e9e Use async for file perms corrections 389cccf Updated from global requirements b840612 Fix the regex a7c9d27 Updated from global requirements 1bd5dcc Correct minimum Ansible version in readme 455243c Typo fix: unneccessary => unnecessary 215fb08 Use https instead of http for git.openstack.org 600e5ab Replaces yaml.load() with yaml.safe_load() 78f0c9b Update reno for stable/ocata c15d75e Configure pam_faildelay on Ubuntu Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 3 +- README.md | 34 +- README.rst | 6 +- Vagrantfile | 82 +- bindep.txt | 49 +- defaults/main.yml | 617 +- ...Enterprise_Linux_7_STIG_V1R0-2_Manual-xccdf.xml | 10364 ---------------- ...t_Enterprise_Linux_7_STIG_V1R1_Manual-xccdf.xml | 12082 +++++++++++++++++++ files/V-38682-modprobe.conf | 2 +- files/aide_extra.conf | 14 - files/zypper-autoupdates | 3 + handlers/main.yml | 2 + meta/main.yml | 19 +- ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + ...zable-login-banner-string-d8d5ae874e8e49f3.yaml | 6 + ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + ...sion-1-renumbering-fiesta-aa047fea3ea35e74.yaml | 20 + releasenotes/source/conf.py | 15 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/main.yml | 14 +- tasks/rhel6stig/apt.yml | 2 +- tasks/rhel6stig/auth.yml | 4 +- tasks/rhel6stig/file_perms.yml | 4 +- tasks/rhel6stig/main.yml | 7 + tasks/rhel6stig/misc.yml | 8 + tasks/rhel6stig/sshd.yml | 28 +- tasks/rhel7stig/accounts.yml | 249 + tasks/rhel7stig/aide.yml | 100 +- tasks/rhel7stig/apt.yml | 67 +- tasks/rhel7stig/async_tasks.yml | 45 + tasks/rhel7stig/auditd.yml | 132 +- tasks/rhel7stig/auth.yml | 427 +- tasks/rhel7stig/dnf.yml | 93 + tasks/rhel7stig/file_perms.yml | 71 +- tasks/rhel7stig/graphical.yml | 55 +- tasks/rhel7stig/kernel.yml | 37 +- tasks/rhel7stig/lsm.yml | 66 +- tasks/rhel7stig/main.yml | 42 +- tasks/rhel7stig/misc.yml | 79 +- tasks/rhel7stig/packages.yml | 73 +- tasks/rhel7stig/rpm.yml | 58 +- tasks/rhel7stig/sshd.yml | 78 +- tasks/rhel7stig/yum.yml | 41 + tasks/rhel7stig/zypper.yml | 101 + templates/chrony.conf.j2 | 5 +- templates/dconf-screensaver-lock.j2 | 8 +- templates/dconf-session-user-config-lockout.j2 | 2 +- templates/osas-auditd-rhel7.j2 | 46 +- templates/pam_faillock.j2 | 2 +- templates/sshd_config_block.j2 | 36 +- test-requirements.txt | 11 +- tox.ini | 41 +- vars/common.yml | 337 - vars/debian.yml | 169 + vars/main.yml | 342 +- vars/redhat.yml | 22 +- vars/suse.yml | 102 + vars/ubuntu.yml | 159 - 576 files changed, 19001 insertions(+), 16214 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 326f6eb..6c9394a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-galera_server 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are gleeful to announce the release of: openstack-ansible-galera_server 16.0.0: Galera Server role for OpenStack-Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 15.0.0.0rc1..16.0.0 -------------------------------------------------------------- 860028f Remove duplicate package pinning variable 605a04a Updated from OpenStack Ansible Tests 2d6253e Separate greenfield and upgrade tests 9de7579 Updated from OpenStack Ansible Tests c90dfd9 Fix MariaDB apt package pinning 64f2612 Update vars and test tooling for Pike 7ba7918 Toggle percona repo without extra-vars 0ecf042 Update UPPER_CONSTRAINTS_FILE for stable/pike bb785c4 Update .gitreview for stable/pike 3ebde68 Use block/rescue for error handling fdb6506 Add upgrade check for dnf 96021e8 Allow MariaDB repo overrides without extra-vars f876cf2 Allow external restart handler orchestration 475d2d8 Pass packages as a list e01ccd2 Updated from OpenStack Ansible Tests 994b96c Updated from OpenStack Ansible Tests fe365f1 Add dnf support afa4dc0 Updated from OpenStack Ansible Tests 5a4918b Updated from OpenStack Ansible Tests 7c08b6c Updated from global requirements 2e47ac7 Update URLs in documents according to document migration 9c15057 tasks: galera_install_zypper: Drop zypper workaround for Ansible < 2.2 5960d0e Updated from OpenStack Ansible Tests 0697020 vars: suse-42: Drop libgcc_s1 dependency 5c5108a Updated from OpenStack Ansible Tests 37645e5 Fix openstackdocstheme settings 34f52a6 Add ignore_none_type to config_template eabe8bf Updated from global requirements d4a2f20 Switch from oslosphinx to openstackdocstheme 3881511 Updated from OpenStack Ansible Tests 34d3b00 Add support for the openSUSE Leap distributions 588b9ce Move PrivateDevices before mysql password set bc96381 Dynamically include upgrade_check task files bea68f1 tasks: Set Restart option for systemd service file 0b06c16 Sync test files with the openstack-ansible-tests repository 531bf8e tasks: galera_upgrade_post: Retry if starting the MariaDB service failed 22a87dd vars: main: Split percona packages from the galera server ones. f46e152 Disable PrivateDevices for Galera on CentOS 7 6ac83ba Updated from global requirements aabfe39 Updated from global requirements f272754 Ensure that role tests pin pip/setuptools/wheel 2aaedec Updated from global requirements e05b6a8 Updated from global requirements 0581614 Use zuul-cloner for tests repo in OpenStack-CI 8cc1118 Use the correct cluster addresses for node list 963d7a0 Add fallback fetch for xtrabackup and qpress 6b5813b Standardize test vars 61609d8 Fix conditional check error when run galera-bootstrap tag eb5fc9c Added Galera SSL support db64210 Fix upgrades for multinode galera f939bf1 Upgrade: Make removal list distribution-specific 03b702b Rename vars/common.yml to vars/main.yml 1da7340 Force clean yum metadata when repo config changes cf1f8f3 Install python2-pyOpenSSL package on CentOS 2559482 Updated from global requirements 5b9ce0b Cap the number of worker threads 2f68dee Fix fact set using ternary filter 777641e Install packages in one step c277ab8 tasks: galera_upgrade_check: Fix yum tag 841ac16 Retry galera_running_check after systemctl daemon-reload e605fa9 Updated from global requirements 2a2062c Updated from global requirements 144216b Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant b8acdcf Use https instead of http for git.openstack.org 931b358 Update reno for stable/ocata d898abf Update galera running check for CentOS Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 +- .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++++- bindep.txt | 58 +++++--- defaults/main.yml | 82 ++++++++++- handlers/main.yml | 47 +++++++ ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 +++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 ++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/galera_bootstrap.yml | 50 +++++-- tasks/galera_install.yml | 16 +-- tasks/galera_install_apt.yml | 115 ++++++--------- tasks/galera_install_dnf.yml | 1 + tasks/galera_install_yum.yml | 156 ++++++++++----------- tasks/galera_install_zypper.yml | 40 ++++++ tasks/galera_post_install.yml | 25 +++- tasks/galera_pre_install.yml | 85 +++++++---- tasks/galera_running_check.yml | 11 +- tasks/galera_secure_mysql.yml | 43 ++++++ tasks/galera_ssl.yml | 54 +++++++ tasks/galera_ssl_key_create.yml | 65 +++++++++ tasks/galera_upgrade_check.yml | 14 +- tasks/galera_upgrade_check_dnf.yml | 1 + tasks/galera_upgrade_check_yum.yml | 8 +- tasks/galera_upgrade_check_zypper.yml | 1 + tasks/galera_upgrade_post.yml | 7 + tasks/galera_upgrade_pre.yml | 8 +- tasks/main.yml | 10 ++ templates/cluster.cnf.j2 | 2 +- templates/my.cnf.j2 | 22 ++- templates/mysql_defaults.j2 | 2 +- templates/systemd.restart.conf.j2 | 9 ++ templates/without-privatedevices.conf.j2 | 2 + test-requirements.txt | 11 +- tox.ini | 42 ++++-- vars/main.yml | 33 +++++ vars/redhat-7.yml | 24 +++- vars/suse-42.yml | 56 ++++++++ vars/ubuntu-16.04.yml | 28 +++- 59 files changed, 1264 insertions(+), 400 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[packaging-rpm] pymod2pkg 0.10.1
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are amped to announce the release of: pymod2pkg 0.10.1: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.10.0..0.10.1 ----------------------------------- 4460124 Fix mappings for os-brick and mock 2a14645 Add tripleo-common for RDO openstack- packages d213083 add a number of simple mappings for RDO Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-)

1 0

[packaging-rpm] renderspec 1.7.0
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are gleeful to announce the release of: renderspec 1.7.0: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.6.2..1.7.0 ---------------------------------- 2a0409a Support different py versions in py2name() and py2pkg() 031789f Updated from global requirements 31a160e Fix rc version handling on SUSE 3904731 Updated from global requirements 4ffe07d Introduce a new --input-template-format switch 9dcd623 Move context related functions to extra file bd6d9d4 Clarify variable name b784190 Updated from global requirements 05a24be Add context function `url_pypi` e7e683d Updated from global requirements Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 282 ++++------------------------------------ renderspec/contextfuncs.py | 314 +++++++++++++++++++++++++++++++++++++++++++++ requirements.txt | 4 +- test-requirements.txt | 6 +- 6 files changed, 459 insertions(+), 287 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e2e6611..498f6a7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) -pymod2pkg>=0.7.0 # Apache-2.0 -PyYAML>=3.10.0 # MIT +pymod2pkg!=0.8.0,>=0.7.0 # Apache-2.0 +PyYAML>=3.10 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 702d9ee..9dd2f8e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ testrepository>=0.0.18 # Apache-2.0/BSD -testresources>=0.2.4 # Apache-2.0/BSD +testresources>=2.0.0 # Apache-2.0/BSD @@ -9 +9 @@ ddt>=1.0.1 # MIT -mock>=2.0 # BSD +mock>=2.0.0 # BSD @@ -11 +11 @@ mock>=2.0 # BSD -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD

1 0

[manila] manila 5.0.1 (pike)
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We are overjoyed to announce the release of: manila 5.0.1: Shared Storage for OpenStack This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/manila/ For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixed the NetApp ONTAP driver to handle reverting to replicated and migrated snapshots. Changes in manila 5.0.0..5.0.1 ------------------------------ b30851f Fix incorrect literal_block error when build docs 038eb7b NetApp ONTAP: Fix revert-to-snapshot 4118997 Fix man page build 2eca946 doc migration: configuration reference 56bcb28 doc migration: cli reference 081251d doc migration: user-guide 6a1612f doc migration: install guide b251790 doc migration: admin guide 8554022 doc migration: new directory layout 6b4b365 doc migration: openstackdocstheme completion e391476 Update UPPER_CONSTRAINTS_FILE for stable/pike 28c1620 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../admin/shared-file-systems-crud-share.rst | 771 +++++ .../admin/shared-file-systems-key-concepts.rst | 119 + ...ared-file-systems-manage-and-unmanage-share.rst | 162 + ...d-file-systems-manage-and-unmanage-snapshot.rst | 107 + .../admin/shared-file-systems-multi-backend.rst | 59 + .../admin/shared-file-systems-network-plugins.rst | 88 + .../admin/shared-file-systems-networking.rst | 17 + .../admin/shared-file-systems-scheduling.rst | 33 + .../shared-file-systems-security-services.rst | 186 + .../admin/shared-file-systems-services-manage.rst | 16 + .../admin/shared-file-systems-share-management.rst | 33 + .../admin/shared-file-systems-share-migration.rst | 306 ++ .../admin/shared-file-systems-share-networks.rst | 151 + .../shared-file-systems-share-replication.rst | 601 ++++ .../admin/shared-file-systems-share-resize.rst | 111 + .../admin/shared-file-systems-share-types.rst | 179 + .../admin/shared-file-systems-troubleshoot.rst | 107 + .../figures/openstack-spectrumscale-setup.JPG | Bin 0 -> 77400 bytes .../configuration/shared-file-systems/api.rst | 11 + .../shared-file-systems/config-options.rst | 18 + .../configuration/shared-file-systems/drivers.rst | 67 + .../drivers/cephfs-native-driver.rst | 294 ++ .../drivers/dell-emc-vmax-driver.rst | 309 ++ .../drivers/emc-isilon-driver.rst | 80 + .../drivers/emc-unity-driver.rst | 265 ++ .../shared-file-systems/drivers/emc-vnx-driver.rst | 296 ++ .../shared-file-systems/drivers/generic-driver.rst | 110 + .../drivers/glusterfs-driver.rst | 92 + .../drivers/glusterfs-native-driver.rst | 123 + .../drivers/hdfs-native-driver.rst | 85 + .../drivers/hitachi-hnas-driver.rst | 482 +++ .../drivers/hitachi-hsp-driver.rst | 212 ++ .../drivers/hpe-3par-share-driver.rst | 643 ++++ .../drivers/huawei-nas-driver.rst | 132 + .../drivers/ibm-spectrumscale-driver.rst | 177 + .../shared-file-systems/drivers/lvm-driver.rst | 89 + .../drivers/maprfs-native-driver.rst | 137 + .../drivers/netapp-cluster-mode-driver.rst | 87 + .../shared-file-systems/drivers/quobyte-driver.rst | 79 + .../drivers/zfs-on-linux-driver.rst | 190 ++ .../drivers/zfssa-manila-driver.rst | 123 + .../shared-file-systems/log-files.rst | 30 + .../configuration/shared-file-systems/overview.rst | 92 + .../shared-file-systems/samples/api-paste.ini.rst | 9 + .../shared-file-systems/samples/index.rst | 12 + .../shared-file-systems/samples/manila.conf.rst | 13 + .../shared-file-systems/samples/policy.json.rst | 9 + .../shared-file-systems/samples/rootwrap.conf.rst | 10 + .../configuration/tables/manila-glusterfs.inc | 42 + .../configuration/tables/manila-hds_hnas.inc | 50 + .../configuration/tables/manila-scheduler.inc | 40 + .../tables/manila-spectrumscale_ces.inc | 57 + .../tables/manila-spectrumscale_knfs.inc | 61 + .../contributor/api_microversion_history.rst | 1 + .../contributor/capabilities_and_extra_specs.rst | 294 ++ .../development-environment-devstack.rst | 106 + .../contributor/driver_filter_goodness_weigher.rst | 360 ++ .../contributor/export_location_metadata.rst | 33 + .../contributor/netapp_cluster_mode_driver.rst | 120 + .../contributor/pool-aware-manila-scheduler.rst | 223 ++ .../share_back_ends_feature_support_mapping.rst | 275 ++ .../devref/development-environment-devstack.rst | 106 - .../devref/driver_filter_goodness_weigher.rst | 360 -- .../share_back_ends_feature_support_mapping.rst | 275 -- .../controller-node-common-configuration.rst | 76 + .../common/controller-node-prerequisites.rst | 208 ++ .../common/dhss-false-mode-configuration.rst | 98 + .../install/common/dhss-false-mode-intro.rst | 8 + .../dhss-false-mode-using-shared-file-systems.rst | 176 + .../common/dhss-true-mode-configuration.rst | 94 + .../dhss-true-mode-using-shared-file-systems.rst | 269 ++ .../common/share-node-common-configuration.rst | 81 + .../common/share-node-share-server-modes.rst | 42 + .../get-started-with-shared-file-systems.rst | 40 + .../netapp/dataontap/cluster_mode/lib_base.py | 9 +- .../netapp/dataontap/cluster_mode/test_lib_base.py | 26 +- ...p-cdot-revert-to-snapshot-5e1be65260454988.yaml | 4 + releasenotes/source/conf.py | 14 +- test-requirements.txt | 1 - tox.ini | 2 +- 257 files changed, 27839 insertions(+), 9943 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7ef57e2..756fe17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +14,0 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx>=4.7.0 # Apache-2.0

1 0

[manila] manila-ui 2.10.2 (pike)
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We are pumped to announce the release of: manila-ui 2.10.2: Manila Management Dashboard This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through launchpad: https://bugs.launchpad.net/manila-ui For more details, please see below. Changes in manila-ui 2.10.1..2.10.2 ----------------------------------- e5e8628 Manila-UI breaks Horizon's "Network" panel group 56a41b4 doc migration: warning-is-error bea1efa doc migration: new directory layout e6c2eb8 doc migration: openstackdocstheme 9886487 Update UPPER_CONSTRAINTS_FILE for stable/pike b1605a4 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + README.rst | 2 +- manila_ui/dashboards/project/shares/__init__.py | 4 ++-- releasenotes/source/conf.py | 14 +++++++++++--- setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 2 +- 17 files changed, 59 insertions(+), 40 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 39f886c..8fdb26e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +15 @@ sphinx>=1.6.2 # BSD -oslosphinx>=4.7.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0

1 0