September 2017 - Release-announce

[openstackansible] openstack-ansible-os_trove 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are delighted to announce the release of: openstack-ansible-os_trove 16.0.0: os_trove role for OpenStack-Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_trove/ For more details, please see below. Changes in openstack-ansible-os_trove 15.0.0.0rc1..16.0.0 --------------------------------------------------------- a34541f Updated from OpenStack Ansible Tests 626ac41 Updated from OpenStack Ansible Tests 0c134dc Update vars and test tooling for Pike 8511ec4 Update UPPER_CONSTRAINTS_FILE for stable/pike f45f76c Update .gitreview for stable/pike 2d343e8 Updated from OpenStack Ansible Tests 6399dd5 Updated from OpenStack Ansible Tests 383b262 Updated from OpenStack Ansible Tests 3ca3760 Updated from OpenStack Ansible Tests 149f85e Updated from global requirements 69f47bc Remove trove_regular_user 0157445 Fix notification configuration 59a8ec8 Enable some off-by-default checks b316e40 Update URLs in documents according to document migration 052bb63 Updated from OpenStack Ansible Tests df3000e Updated from OpenStack Ansible Tests 5e97b2b Fix openstackdocstheme settings 0cf74c1 Updated from global requirements 5bfd8ab Switch from oslosphinx to openstackdocstheme b339792 Updated from OpenStack Ansible Tests ded58bf Updated from global requirements 7583728 Updated from global requirements 58f6bc8 Switch to Cryptography over pycrypto 7bfa684 Allow the endpoint_type for service net creation to be specified. a3d0f65 Ensure that role tests pin pip/setuptools/wheel dcc56d9 Updated from global requirements 4d3ae78 Deprecate rpc_backend option 9855742 Allow the developer constraints to be adjusted 10ff5cb Deprecate rabbit_use_ssl option cec3b71 Add venv_tag local fact 1de5237 Fix trove network related deployment issue 29c33a1 Updated from global requirements ffdd1b3 Fix for lookup and get_url occuring in different places 46459fd Use zuul-cloner for tests repo in OpenStack-CI b99c251 Rename release note to prevent duplicates 8c1b179 Rename release note to unique hash 4d82413 Reduce init restart/kill times ad42e4d Add redis cluster port 27545d2 Optimise apt cache update task 92c1a50 Standardize test vars 9d8a934 Implement trove networking 086bd30 Add taskmanager encryption key to api b948402 Add RPC encryption key support b6efe32 Ensure the components are isolated from the system 277c454 Fix Trove URIs 6a55fcc Deprecate auth_plugin option 6bb0c94 Install python2-pyOpenSSL package on CentOS de0a999 Update paste, policy and rootwrap configurations 2017-03-03 ceda2aa Updated from global requirements fdd59ff Configure trove_conductor_workers in os_trove 82eddc3 Updated from global requirements 3fd7540 Updated from global requirements b66094e Remove 3DES from trove_ssl_cipher_suite 8575a5f Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant 02e130c Use https instead of http for git.openstack.org 2ec3e0b Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + Vagrantfile | 44 +++++++-- bindep.txt | 46 ++++++--- defaults/main.yml | 103 ++++++++++++++++---- extras/user_secrets.yml | 13 +-- meta/main.yml | 2 +- .../deprecate_auth_plugin-451832a71b967e27.yaml | 5 + .../notes/public-uri-proto-a1f05edd1a594f7f.yaml | 5 + .../notes/remove_rpc_backend-78139a469235891f.yaml | 5 + .../notes/rpc-encryption-b75fb0d08579a7dd.yaml | 7 ++ ...service_net_endpoint_type-60dbb87c4f68403c.yaml | 7 ++ ...ove-init-config-overrides-a78ed428a32adef8.yaml | 10 ++ .../trove_init_time_settings-dd293238c53c517.yaml | 23 +++++ releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/main.yml | 13 +++ tasks/trove_init.yml | 3 + tasks/trove_init_systemd.yml | 4 +- tasks/trove_install.yml | 28 ++++-- tasks/trove_service_network.yml | 90 ++++++++++++++++++ tasks/trove_service_setup.yml | 24 +---- templates/include_db.j2 | 41 ++++++++ templates/policy.json.j2 | 3 +- templates/trove-conductor.conf.j2 | 6 +- templates/trove-guestagent.conf.j2 | 35 ++----- templates/trove-systemd-init.j2 | 13 ++- templates/trove-taskmanager.conf.j2 | 103 ++++++++------------ templates/trove.conf.j2 | 65 +++---------- test-requirements.txt | 11 +-- tox.ini | 24 ++--- 44 files changed, 844 insertions(+), 328 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_keystone 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are overjoyed to announce the release of: openstack-ansible-os_keystone 16.0.0: os_keystone for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 16.0.0 ^^^^^^ New Features * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" Changes in openstack-ansible-os_keystone 15.0.0.0rc1..16.0.0 ------------------------------------------------------------ ede6478 Updated from OpenStack Ansible Tests bd2bb46 Update vars and test tooling for Pike 95710fc Remove Developer Tools package group ce3ab6e tasks: keystone_install: Fix virtualenv-tools issue on openSUSE 8fd7b16 Add extra headers for Keystone 094bcf9 Update UPPER_CONSTRAINTS_FILE for stable/pike e003be1 Update .gitreview for stable/pike b1ab60a Updated from OpenStack Ansible Tests 31db740 Add dnf support bd6fd7a Updated from OpenStack Ansible Tests 0ac4f11 Updated from OpenStack Ansible Tests f57f8ce Updated from global requirements a9658c2 Update URLs in documents according to document migration 917f2b8 Update URL home-page in documents according to document migration 7fa98de Ensure that keystone restarts after db sync 02b785f Updated from OpenStack Ansible Tests 2bc2986 Updated from OpenStack Ansible Tests 1b8a085 Include init_systemd taskfile once 8c1ebb0 Add support for the openSUSE Leap distributions f375cac tasks: keystone_apache: Use the apache2_module Ansible module 2276c3f Hedge upgrade process against no software change 6241f5e Fix openstackdocstheme settings 84af640 Switch to using Nginx/uWSGI by default ce02e0a Use keystone-tempest-plugin repo 0cafcc1 Updated from global requirements 40c91b5 Switch from oslosphinx to openstackdocstheme 2076de5 Use run_once instead of inventory scoping 1b61771 Updated from OpenStack Ansible Tests 43d03a0 Split user create and ssh key generation aad8144 Implement serialisable rolling upgrade 0b24181 Deprecate rpc_backend option ed136ef Fix rolling upgrade test a66bc38 Optimise the distro package installation 2813f42 Updated from global requirements 5342829 Updated from global requirements 04c48b0 Switch to Cryptography over pycrypto 8139c9a Ensure that role tests pin pip/setuptools/wheel 5314dbb Updated from global requirements 93b21c4 Convert old fact format to the new format 559e5a1 Remove {{ in when 64b90c3 Allow the developer constraints to be adjusted 4b6eb7c Revert "Use a custom git checkout in developer mode" 64a01c5 Use command instead of debug for handlers 2a08919 Deprecate rabbit_use_ssl option 359cd83 Add venv_tag local fact c593873 Use uri module for git sourced configs d192ebf Updated from global requirements c0b5e8c Bootstrap Keystone with versionless endpoints 49b1626 Fix for lookup and get_url occuring in different places 2ffe5db Ensure that ansible facts folder exists 05d206f Ensure that policy file has correct group/mode 511d607 Use zuul-cloner for tests repo in OpenStack-CI 16e93ac Rename release note to unique hash d13e2eb Bypass LB for service setup fc0ae60 Reduce init restart/kill times 0b11c78 Optimise apt cache update task 4dc9dc2 Standardize test vars b64ea17 Fix the dead link 43e9c9e Rename reno to avoid conflict on integrated repo c863134 Use a custom git checkout in developer mode ffcdaf0 Source template files from git or deploy host 94293c8 Perform an atomic policy file change cee7a02 Allow the split of install and config 329a781 Ensure the components are isolated from the system fc214d6 Diagnose common problems with keystone deployments 33e5ca3 Fix double when statements 1b74c30 Fix CentOS pkg for keystone sasl lib. 6e361c7 Revert "Install EPEL for keystone role" 86c42e0 Allow role to run in a serial playbook 15725b7 Ensure the log folder exists 1897a67 Install EPEL for keystone role b342578 Rebuild credential-key repo during keystone[0] rebuild 19ef4c9 Install python2-pyOpenSSL package on CentOS eb2354a Updated from global requirements d2e0001 Conditionally run appropriate db_sync commands f5adedd Split out Keystone upgrade into it's own script 4253b61 Cap the number of worker threads aa80b55 Only run token_flush on 1 host cf72bd0 Update paste, policy and rootwrap configurations 2017-02-13 120172d Updated from global requirements a65e11e Allow locust benchmarks to use zeromq 1123a9b Add failure condition to upgrade test d9220c2 Use registered variables for locust commands 9c39427 Reduce number of locust clients da78b92 Updated from global requirements 509fca6 Remove 3DES from keystone_ssl_cipher_suite 52506b8 Benchmark requests during upgrade testing d7141ee Work around Trusty CI bindep issue 1e08688 Update upgrade test to use stable/ocata a4c5811 Implementing stricter permissions on config files a6ee610 Resolved Keystone Federation bugs ce733db Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant bdf659d Use https instead of http for git.openstack.org fbd7b20 Update reno for stable/ocata 10204a0 Fix erroneous release note Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +- .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++- bindep.txt | 44 ++++- defaults/main.yml | 71 +++++-- files/sso_callback_template.html | 22 --- handlers/main.yml | 153 ++++++--------- library/keystone_sp | 6 +- meta/main.yml | 7 +- .../capping_keystone_workers-e284a47fc4dcea38.yaml | 6 + .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 ++ .../keystone-endpoints-urls-679748dec6ee6dd7.yaml | 4 + ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 10 + .../keystone-nginx-default-e9d91affd646f379.yaml | 10 + ...one-upstream-config-files-d16f27fc1332ed83.yaml | 9 + ...ystone_init_time_settings-62a1aab4bcfc9779.yaml | 23 +++ ...one-zero-downtime-upgrade-5f19ab84183490b9.yaml | 4 +- ...primary-container-rebuild-a2f4d7f33d66c843.yaml | 5 + .../notes/remove_rpc_backend-187132a35223d295.yaml | 5 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/keystone_apache.yml | 70 +++---- tasks/keystone_cleanup_old_facts.yml | 34 ++++ tasks/keystone_credential_create.yml | 61 +++++- tasks/keystone_db_setup.yml | 76 ++++++-- tasks/keystone_federation_sp_setup.yml | 76 ++++---- tasks/keystone_idp_metadata.yml | 5 +- tasks/keystone_idp_self_signed_create.yml | 3 +- tasks/keystone_idp_self_signed_distribute.yml | 3 +- tasks/keystone_init_common.yml | 24 --- tasks/keystone_init_systemd.yml | 42 +++-- tasks/keystone_install.yml | 208 +++++++++------------ tasks/keystone_key_distribute.yml | 7 +- tasks/keystone_ldap_setup.yml | 16 +- tasks/keystone_nginx.yml | 21 ++- tasks/keystone_post_install.yml | 54 +++--- tasks/keystone_pre_install.yml | 63 ++++--- tasks/keystone_service_setup.yml | 74 +++++--- tasks/keystone_ssl_key_create.yml | 6 +- tasks/keystone_ssl_key_distribute.yml | 6 + tasks/keystone_ssl_user_provided.yml | 9 +- tasks/keystone_token_cleanup.yml | 1 + tasks/keystone_uwsgi.yml | 36 +--- tasks/main.yml | 55 +++--- templates/keystone-httpd.conf.j2 | 27 +-- templates/keystone-paste.ini.j2 | 97 ---------- templates/keystone-systemd-tempfiles.j2 | 6 +- templates/keystone-uwsgi_systemd-init.j2 | 21 ++- templates/keystone.conf.j2 | 3 +- templates/keystone_nginx.conf.j2 | 3 + templates/policy.json.j2 | 199 -------------------- test-requirements.txt | 11 +- tox.ini | 40 ++-- vars/main.yml | 49 +++++ vars/redhat-7.yml | 15 +- vars/suse-42.yml | 93 +++++++++ vars/ubuntu-16.04.yml | 19 +- 82 files changed, 1648 insertions(+), 1066 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_neutron 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are glad to announce the release of: openstack-ansible-os_neutron 16.0.0: os_neutron role for OpenStack- Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 15.0.0.0rc1..16.0.0 ----------------------------------------------------------- dd658f9 Updated from OpenStack Ansible Tests c1a2ff5 Update paste, policy and rootwrap configurations 2017-08-25 8c76ea7 Simplify the string check for offline db migrations 4af7f63 tasks: neutron_install: Fix virtualenv-tools issue on openSUSE 8268951 Updated from OpenStack Ansible Tests 8db15a4 Update UPPER_CONSTRAINTS_FILE for stable/pike bcf568e Update .gitreview for stable/pike 3b39c58 Updated from OpenStack Ansible Tests a02c583 [DOCS] Use upstream etcd environment definition b96cc3d Updated from OpenStack Ansible Tests d24da34 Updated from global requirements 46a22cc Allow only vxlan networks to be created in Neutron. b25a6fb Update URLs in documents according to document migration dad6827 Add support for the openSUSE Leap distributions 862390a Updated from OpenStack Ansible Tests cb8eb31 Cast the resulting intersect set into a list 0524fa6 Improve inventory scoping for limited play execution 93ba9f9 Updated from OpenStack Ansible Tests 1bcd6d5 Switch from run_once back to inventory scoping 25854d2 Hedge upgrade process against no software change 9ef1b61 Fix openstackdocstheme settings 5a23b5b Move Calico Felix upstream to defaults 552d119 Update Calico Felix agent to 2.3 5d3f059 Run agent config tasks before post_install 280788b Updated from global requirements 8672ce2 Switch from oslosphinx to openstackdocstheme afe63f6 Resolve migration issues 1be4415 Updated from OpenStack Ansible Tests 2f10f75 Ensure that services restart in a particular order f027faf Simplify database migrations fa848c6 Normalise distro package installation 2d815fd Updated from global requirements 90e4f3d Updated from global requirements 1695d7f Add Neutron API availability test during upgrade 40a1a9d Switch to Cryptography over pycrypto 621cafa Ensure that role tests pin pip/setuptools/wheel 19c7e5c Updated from global requirements d1f8cd2 Deprecate rpc_backend option fcc1aa8 Fix Neutron plugin name wrong for nuage deployment ffcdc13 Allow the developer constraints to be adjusted 8b09798 Use command instead of debug for handlers c60fe36 Ensure that policy file has correct group/mode 7fb7b9a Remove when {{ 38e99b1 Deprecate rabbit_use_ssl option c93100a Add venv_tag local fact ac71bb4 Improve the execution time 477fae8 Remove plumgrid network provider type 4fd6cf8 Updated from global requirements 3ed3dfe Move static defaults to vars 2817b2e Fix for lookup and get_url occuring in different places 6dc4ecc Use zuul-cloner for tests repo in OpenStack-CI 643342f More flexible neutron_package_list ccbe248 Clean up cron if l3ha legacy tool is not enabled 272da3a Use package module to install distro packages 45c7e49 Only use handler on filtered services e890698 Gather neutron facts for Pike 8e6326a Rename release note to unique hash 6a485cd Update paste, policy and rootwrap configurations 2017-04-28 29e09d6 Perform an atomic policy file change 9aa3761 Reduce init restart/kill times 9d43b6f Optimise apt cache update task f939caf Make nova metadata protocol configurable 5666b10 Move filtered_neutron_services to vars c8fa212 Fix role gate tests for Ansible 2.3 0a0f082 Filter services dictionary per host baed879 Fix OVS functional gate test 3e5122d Rename reno to avoid conflict on integrated repo f4b17af Remove lxc_container_bind_mounts in test group_vars 2a92a4e Update paste, policy and rootwrap configurations 2017-04-04 6c2b614 Cleanup plugin loaded_base 32891e5 Ensure the components are isolated from the system ff8e42c Remove min_l3_agents_per_router option 253158c Deprecate auth_plugin option a7e0a3f Fix upgrade jobs for os_neutron role. 4351dee Implements internal-dns support 39d5293 Add haproxy to neutron distro packages 4783d52 Update paste, policy and rootwrap configurations 2017-03-16 847ffa8 Rename vars/common.yml to vars/main.yml f15d66e Fixes the error seen in the Openstack-ansible test 4eb8a56 Update test set and use test plugins 55204c8 Adds Octavia to Neutron c7e76d0 Install python2-pyOpenSSL package on CentOS 47201e8 Updated from global requirements 84dac0b Set previous role to stable/ocata for master bf6e06e Cap the number of worker threads f281a48 Add program name to neutron init tasks 4871399 Install packages in one step d9cc60b Rename neutron_dhcp_domain to neutron_dns_domain 0543bfd Update paste, policy and rootwrap configurations 2017-02-15 5ed3713 Include l3-ha for openvswitch based deployments 6ad5f1a Remove UCA/RDO in role 192a213 Updated from global requirements fd47dda Updated from global requirements 9eef229 Implement Dragonflow deployment 4d8032a Cap the number of worker threads 228158e Work around Trusty CI bindep issue 2c08043 Update upgrade test to use stable/ocata f927760 Implementing stricter permissions on config files 40ff795 Use ocata component for UCA cbb2e6e Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant 915606b Remove nova_url config setting b38033d Use https instead of http for git.openstack.org ff8d4eb Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + README.rst | 2 +- Vagrantfile | 66 +- bindep.txt | 46 +- defaults/main.yml | 698 +++++++-------------- files/rootwrap.d/dhcp.filters | 8 +- files/rootwrap.d/dibbler.filters | 1 + files/rootwrap.d/dragonflow-controller.filters | 11 + files/rootwrap.d/iptables-firewall.filters | 3 - files/rootwrap.d/l3.filters | 8 +- files/rootwrap.d/linuxbridge-plugin.filters | 13 +- files/rootwrap.d/openvswitch-plugin.filters | 1 - handlers/main.yml | 64 +- library/neutron_migrations_facts | 289 --------- meta/main.yml | 22 +- .../notes/cap-workers-fc70b4f8586ba1a5.yaml | 6 + .../capping_neutron_workers-d97a5d50ca996af5.yaml | 6 + .../deprecate_auth_plugin-347b326919d67a18.yaml | 5 + ...eutron-dragonflow-support-fce23f85c6a0bebd.yaml | 7 + ...ron-init-config-overrides-9d1d2b3b908705ed.yaml | 10 + ...eutron_init_time_settings-66ad8a3d9eb951b0.yaml | 23 + ...ron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml | 4 + .../notes/remove-plumgrid-8c86d99999a2ca48.yaml | 5 + .../notes/remove_rpc_backend-8134a355d9864e12.yaml | 5 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/calico_config.yml | 49 -- tasks/calico_init.yml | 38 -- tasks/main.yml | 36 +- tasks/neutron_db_setup.yml | 85 +-- tasks/neutron_init.yml | 147 ----- tasks/neutron_init_common.yml | 26 - tasks/neutron_init_systemd.yml | 34 +- tasks/neutron_install.yml | 161 ++--- tasks/neutron_l3_ha.yml | 20 +- tasks/neutron_post_install.yml | 73 +-- tasks/neutron_pre_install.yml | 4 +- tasks/nuage_neutron_config.yml | 24 - tasks/plumgrid_config.yml | 62 -- tasks/providers/calico_config.yml | 66 ++ tasks/providers/dragonflow_config.yml | 77 +++ tasks/providers/nuage_config.yml | 24 + templates/dhcp_agent.ini.j2 | 8 +- templates/dragonflow.ini.j2 | 58 ++ templates/metadata_agent.ini.j2 | 9 +- templates/neutron-systemd-init.j2 | 23 +- templates/neutron-systemd-tmpfiles.j2 | 6 +- templates/neutron.conf.j2 | 77 ++- templates/plugins/ml2/linuxbridge_agent.ini.j2 | 2 +- templates/plugins/ml2/ml2_conf.ini.j2 | 2 +- templates/plugins/ml2/openvswitch_agent.ini.j2 | 2 +- templates/plugins/plumgrid/pgrc | 9 - templates/plugins/plumgrid/plumgrid.ini.j2 | 19 - templates/plugins/plumgrid/plumlib.ini | 57 -- templates/policy.json.j2 | 27 +- test-requirements.txt | 11 +- tox.ini | 44 +- vars/main.yml | 540 ++++++++++++++++ vars/redhat-7.yml | 3 +- vars/suse-42.yml | 47 ++ vars/ubuntu-16.04.yml | 6 +- 97 files changed, 2310 insertions(+), 1878 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_cinder 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are stoked to announce the release of: openstack-ansible-os_cinder 16.0.0: os_cinder role for OpenStack- Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 15.0.0.0rc1..16.0.0 ---------------------------------------------------------- b3f53ea Correct cinder online migrations command ab5b6d7 Ensure online migrations can run a5f39a0 Update paste, policy and rootwrap configurations 2017-08-25 00ac49c Updated from OpenStack Ansible Tests 4095460 Updated from OpenStack Ansible Tests 6761caf Update vars and test tooling for Pike eeb849e tasks: cinder_install: Fix virtualenv-tools issue on openSUSE 4d0f5e8 Update UPPER_CONSTRAINTS_FILE for stable/pike d14dfe7 Update .gitreview for stable/pike 009fff5 Fix reloads for uWSGI efacb02 Updated from OpenStack Ansible Tests 3202eb1 remove the use of iteritems 037b9fe Add dnf support bffc93a Updated from OpenStack Ansible Tests c090809 Updated from OpenStack Ansible Tests 8515cee Updated from global requirements f7f45e1 Implement uWSGI for cinder-api 3602554 Update URLs in documents according to document migration 60e0628 Include ceph_client role if needed 849677b Sort key-value pairs in backend dictionaries d6e9276 Add support for the openSUSE Leap distributions c28a287 Updated from OpenStack Ansible Tests 09cb727 Cast the resulting intersect set into a list 823ced9 Improve inventory scoping for limited play execution 00c9a60 Updated from OpenStack Ansible Tests 22f81ad Fix double conditional bug 8f1781a Simplify and optimise cinder tasks 6315211 Fix openstackdocstheme settings d0c46f2 Updated from global requirements c64ac5e Switch from oslosphinx to openstackdocstheme d569419 Updated from OpenStack Ansible Tests bca5c32 Implement data migrations for rolling upgrades 1bbe80e Install lvm2 for cinder-volume LVM hosts 84072c2 Deprecate rpc_backend option 72b3fdc Add reload support to init file b98100f Ensure that services restart in a particular order f8f7fa0 Add thinprovisioning tools for Ubuntu 0acb1cc Updated from global requirements e400f33 Updated from global requirements 22a5146 Switch to Cryptography over pycrypto d630fbc Add availability benchmark test to Cinder upgrade 6ba2290 Optimise the distro package installation f80cb68 Ensure that role tests pin pip/setuptools/wheel d513189 Updated from global requirements f2ed992 Filter services dictionary per host be3ae4c Update paste, policy and rootwrap configurations 2017-06-02 a1b75d3 Deprecate profiler_enabled option 49435e2 Remove deprecated glance_api_version option de17bd6 Update paste, policy and rootwrap configurations 2017-05-26 0187cc5 Allow the developer constraints to be adjusted fb807f2 Perform an atomic policy file change 4a4cdf7 Deprecate rabbit_use_ssl option e96e202 Add venv_tag local fact e16641e Updated from global requirements 8b7fc59 Support no validation of internal SSL endpoints a8c05c8 Fix for lookup and get_url occuring in different places 942ec4d Cleanup CentOS pkg dd95023 Use zuul-cloner for tests repo in OpenStack-CI 69af8fb Update paste, policy and rootwrap configurations 2017-04-28 b620dc0 Replace var approach with config_template approach e5e98de Optimise apt cache update task fe32f9f Make Cinder Auth Strategy configurable 5c72bbb Fix role gate tests for Ansible 2.3 00d97e5 Rename reno to avoid conflict on integrated repo 278cfa1 Added open-iscsi package to Cinder container. 1321fd3 Update paste, policy and rootwrap configurations 2017-03-31 40d2147 [Trivial] Fix init unit file comment c2d4045 Ensure the components are isolated from the system 2991a99 Adjust cinder init restart times, provide variable 28f537a Only install git when developer_mode is enabled b0e5eb6 Deprecate auth_plugin option acb1a9a Do a whole word grep a88589b Fix Cinder upgrade jobs b7bb1d8 Add support for cinder v3 api daab279 [DOCS] Update volume_driver of Dell EqualLogic 02715dd Install python2-pyOpenSSL package on CentOS 265da9b Update paste, policy and rootwrap configurations 2017-03-03 8ed8841 Updated from global requirements e4be065 Provide empty default for cinder_backends 70ededd Fix "previous role" branch to stable/ocata ea00eb2 Cap the number of worker threads beba041 Split out cinder upgrade into it's own script. b865149 Update paste, policy and rootwrap configurations 2017-02-13 3b26f98 Updated from global requirements bd9b210 Updated from global requirements cf27e9e Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant e9cf96f Implementing stricter permissions on config files 544f5f2 Use https instead of http for git.openstack.org 4a362dc Update reno for stable/ocata 8a896b1 NFS backend option "shares" should not be templated cd683ac [DOCS] Adding missing config parameter of Dell EQLX in cinder b1de1e0 Update paste, policy and rootwrap configurations 2017-02-02 21f9bc0 [DOCS] Adding configuration for use Dell EQLX in cinder 1f787a0 Add variable to enable integration with barbican Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++++++-- bindep.txt | 48 +++++++--- defaults/main.yml | 70 ++++++++++++--- files/rootwrap.d/volume.filters | 41 +++++---- handlers/main.yml | 56 ++++++++++-- meta/main.yml | 7 +- ...nder_osapi_volume_workers-db32afcf7615b05b.yaml | 5 ++ .../cinder-auth-stragety-02ca99f48ad7739b.yaml | 5 ++ .../cinder-data-migrations-ce31707c078b335c.yaml | 9 ++ ...der-init-config-overrides-9e495aee023deed6.yaml | 10 +++ .../notes/cinder_api_v3-cc53677ce77d97c3.yaml | 5 ++ ...cinder_init_time_settings-1ef46f6b9d4fc1df.yaml | 18 ++++ .../notes/cinder_uwsgi-c6a1651a4c54a8cc.yaml | 15 ++++ .../deprecate_auth_plugin-1a78326719d67f23.yaml | 5 ++ ...glance_api_version_option-5dc1d316c979e940.yaml | 5 ++ .../notes/remove_rpc_backend-7123da9fe3419215.yaml | 5 ++ ...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml | 11 +++ releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/cinder_backends.yml | 21 +++-- tasks/cinder_cleanup_old_facts.yml | 29 ++++++ tasks/cinder_db_setup.yml | 20 +++++ tasks/cinder_init_common.yml | 30 ------- tasks/cinder_init_systemd.yml | 41 ++++----- tasks/cinder_install.yml | 80 +++++++++-------- tasks/cinder_post_install.yml | 10 +-- tasks/cinder_pre_install.yml | 2 +- tasks/cinder_qos.yml | 8 +- tasks/cinder_service_setup.yml | 9 ++ tasks/cinder_uwsgi.yml | 32 +++++++ tasks/main.yml | 53 +++++++++-- templates/cinder-systemd-init.j2 | 22 +++-- templates/cinder-systemd-tmpfiles.j2 | 4 +- templates/cinder-uwsgi.ini.j2 | 20 +++++ templates/cinder.conf.j2 | 27 +++--- templates/policy.json.j2 | 27 +++++- templates/rootwrap.conf.j2 | 2 +- test-requirements.txt | 11 ++- tox.ini | 35 +++----- vars/main.yml | 49 ++++++++++ vars/redhat-7.yml | 10 ++- vars/suse-42.yml | 42 +++++++++ vars/ubuntu-16.04.yml | 19 ++-- 61 files changed, 1198 insertions(+), 328 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_barbican 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are gleeful to announce the release of: openstack-ansible-os_barbican 16.0.0: os_barbican for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_barbican/ For more details, please see below. Changes in openstack-ansible-os_barbican 15.0.0.0rc1..16.0.0 ------------------------------------------------------------ d16e85f Updated from OpenStack Ansible Tests e3a2aca Updated from OpenStack Ansible Tests 47b7ed9 Update vars and test tooling for Pike 25f47d4 Update UPPER_CONSTRAINTS_FILE for stable/pike 56e5f1a Update .gitreview for stable/pike 8900c7f Updated from OpenStack Ansible Tests d909550 Updated from OpenStack Ansible Tests 6d9bfa5 Updated from OpenStack Ansible Tests 6f2a3a5 Updated from OpenStack Ansible Tests ffdead8 Updated from global requirements f677468 Update URLs in documents according to document migration 22c3a1a Updated from OpenStack Ansible Tests 3f1da40 Updated from OpenStack Ansible Tests f40722c Fix openstackdocstheme settings fc95936 Updated from global requirements 45f7b8d Switch from oslosphinx to openstackdocstheme 14a682a Updated from OpenStack Ansible Tests a4ff601 Updated from global requirements bcfc9ac Updated from global requirements bc8f5ea Ensure that role tests pin pip/setuptools/wheel 729e13e Updated from global requirements cc366f2 Deprecate rpc_backend option ed8e52b Allow the developer constraints to be adjusted 54865e7 Add venv_tag local fact dc9d092 Updated from global requirements 68f7283 Fix for lookup and get_url occuring in different places 50d98d8 Use zuul-cloner for tests repo in OpenStack-CI 7f399d3 Use package module to install distro packages 0045da5 Rename release note to unique hash c091e28 Reduce init restart/kill times a7a8eba Standardize test vars bb3f39c Ensure the components are isolated from the system 99b7e4a Remove git_dest var and extras folder 60919e2 Install python2-pyOpenSSL package on CentOS 6b4c055 Updated from global requirements f5a5bdf Updated from global requirements 304fd41 Updated from global requirements 6e11d8c Provide default barbican_ssl variables d0d2acb Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant bdc8f5e Use https instead of http for git.openstack.org 2d9e079 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + .travis.yml | 29 ---- README.rst | 2 +- Vagrantfile | 50 +++++- bindep.txt | 46 +++-- defaults/main.yml | 10 +- extras/env.d/barbican.yml | 16 -- extras/haproxy_barbican.yml | 10 -- extras/os-barbican-install.yml | 185 --------------------- extras/user_secrets_barbican.yml | 3 - meta/main.yml | 17 +- ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 ++ ...rbican_init_time_settings-d7510910912fa061.yaml | 23 +++ releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/barbican_init_systemd.yml | 4 +- tasks/barbican_install.yml | 33 +++- tasks/barbican_install_apt.yml | 32 ---- templates/barbican-systemd-init.j2 | 13 +- test-requirements.txt | 11 +- tox.ini | 22 +-- 36 files changed, 436 insertions(+), 416 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-memcached_server 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are pumped to announce the release of: openstack-ansible-memcached_server 16.0.0: memcached_server for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 15.0.0.0rc1..16.0.0 ----------------------------------------------------------------- 72d5481 Updated from OpenStack Ansible Tests 1a5f2be Updated from OpenStack Ansible Tests 95ca854 Update vars and test tooling for Pike d69c942 Add automatic restart for memcached dee2891 Update UPPER_CONSTRAINTS_FILE for stable/pike edd7b67 Update .gitreview for stable/pike f55f307 Updated from OpenStack Ansible Tests 7a814f4 Updated from OpenStack Ansible Tests 1c36a74 Updated from OpenStack Ansible Tests 755c01f Updated from OpenStack Ansible Tests 30bf944 Updated from global requirements 3dce073 Updated from OpenStack Ansible Tests 6924e7d Updated from global requirements a9acd22 Disable PrivateDevices for MemcacheD on CentOS 7 3f822ea Updated from global requirements 72d357e Updated from global requirements d90f57a Optimise the distro package installation fb7ba01 Ensure that role tests pin pip/setuptools/wheel f8ba8e0 Updated from global requirements a25aa31 Updated from global requirements c6c2dbd Use zuul-cloner for tests repo in OpenStack-CI 0fad8a2 enable memcached for CentOS 114a632 Fix role gate tests for Ansible 2.3 b259318 Optimise apt cache update task d7e47fa Use package module to install distro packages 58e17aa Add SUSE support c06fd15 Install python2-pyOpenSSL package on CentOS 82189c9 Updated from global requirements 20d5364 Updated from global requirements 13e01de Updated from global requirements 59f157f Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant ffce210 Use https instead of http for git.openstack.org 234d211 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + Vagrantfile | 51 +++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 19 ++++- files/memcached.service.suse | 10 +++ handlers/main.yml | 1 + meta/main.yml | 5 +- ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 +++++ releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.py | 2 +- tasks/install-apt.yml | 37 -------- tasks/install-yum.yml | 44 ---------- tasks/memcached_config.yml | 29 +++++++ tasks/memcached_install.yml | 19 +++-- templates/memcached.suse.j2 | 29 +++++++ templates/systemd-restart-on-failure.conf.j2 | 4 + templates/without-privatedevices.conf.j2 | 2 + test-requirements.txt | 10 +-- tox.ini | 22 ++--- vars/main.yml | 26 ++++++ vars/suse.yml | 28 ++++++ 31 files changed, 440 insertions(+), 184 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..443d1e1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12 +12 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +sphinx>=1.6.2 # BSD @@ -14 +14 @@ oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +16 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_glance 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are overjoyed to announce the release of: openstack-ansible-os_glance 16.0.0: os_glance for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 15.0.0.0rc1..16.0.0 ---------------------------------------------------------- 6101997 Update paste, policy and rootwrap configurations 2017-09-04 727ba1d Updated from OpenStack Ansible Tests 695977e Updated from OpenStack Ansible Tests a153287 Update vars and test tooling for Pike 74a8261 Remove glare-paste.ini template af22504 tasks: glance_install: Fix virtualenv-tools issue on openSUSE 92f4391 Update UPPER_CONSTRAINTS_FILE for stable/pike 54dc895 Update .gitreview for stable/pike 01cbd08 Updated from OpenStack Ansible Tests dd0ecc0 Updated from OpenStack Ansible Tests fbeca2d Add dnf support d097e5f Updated from OpenStack Ansible Tests f006b20 Updated from OpenStack Ansible Tests e16c521 Updated from global requirements 8c2f4b0 Implement uWSGI for glance-api c2e384e Update URLs in documents according to document migration 3bbd8d1 Include ceph_client role if needed 9a8481b Revert "Only sync glance database on major versions" f006470 Cast the resulting intersect set into a list a95b64f Updated from OpenStack Ansible Tests 1335990 Improve inventory scoping for limited play execution b0a81bd Updated from OpenStack Ansible Tests e9ae99e Add support for the openSUSE Leap distributions 6e74637 Switch from run_once back to inventory scoping 4268636 Hedge upgrade process against no software change 599fb64 Fix openstackdocstheme settings af9142e Use listen instead of chained notifiers 545e362 Ensure that services restart in a particular order 181c1f5 Flag glance service for restart after updates c5d7434 Updated from global requirements 647c4e3 Only sync glance database on major versions ec8a57a Switch from oslosphinx to openstackdocstheme 3f5e8a7 Updated from OpenStack Ansible Tests eea85d2 Pass packages to install as a list c82d7f8 Deprecate rpc_backend option 10fc37d Switch to Cryptography over pycrypto d319fd2 Install openstacksdk for rolling upgrade test da64415 Updated from global requirements 2d1ae83 Updated from global requirements 15dc3e3 Ensure that role tests pin pip/setuptools/wheel 9092d1d Updated from global requirements 3d3917f Run service test during glance upgrade 5e6440c Allow the developer constraints to be adjusted aa4910a Use command instead of debug for handlers 4d6e4d8 Ensure that policy file has correct group/mode fc3c42c Correct name of service in test script 48d8f26 Deprecate rabbit_use_ssl option ba38eeb Add venv_tag local fact 300b1ad Updated from global requirements 306c783 Fix for lookup and get_url occuring in different places 7727f7d Use zuul-cloner for tests repo in OpenStack-CI 22f93d5 Remove duplicate Release note. fe45a9c Rename release note to unique hash 9aa3e00 Reduce init restart time 1e9e5a6 Optimise apt cache update task cadb6bd Perform an atomic policy file change 2a200d7 Standardize test vars fe6e32e Default to "omit" mode from directory creation f7497ca Rename reno to avoid conflict on integrated repo 3a1dfa5 Rename reno to avoid conflict on integrated repo bababac Enable proxy headers parsing f39ef21 [Trivial] Fix init unit file comment 96576b8 Ensure the components are isolated from the system 78b7d8a Install python2-pyOpenSSL package on CentOS 665ce96 Updated from global requirements ca39632 Update test role to use stable/ocata in master c18d970 Cap the number of worker threads 8a29cb3 Split upgrade testing into it's own shell script 0f88dc6 Updated from global requirements 03b4f6b Updated from global requirements 9814664 Update upgrade test to use stable/ocata 8117a82 Implementing stricter permissions on config files 3bf6db5 Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant b1ef3f7 Use https instead of http for git.openstack.org feb724b Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 37 +++++++- handlers/main.yml | 51 +++++++++-- meta/main.yml | 7 +- .../capping_glance_workers-54afc20c20baa14e.yaml | 6 ++ ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 10 ++ ...glance_init_time_settings-d3cc064fd8acf107.yaml | 15 +++ .../notes/glance_uwsgi-dd5fe62e6f85ecd2.yaml | 12 +++ .../notes/remove_rpc_backend-a37345891a987f21.yaml | 5 + releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/glance_init_common.yml | 27 ------ tasks/glance_init_systemd.yml | 31 +++---- tasks/glance_install.yml | 49 +++++++--- tasks/glance_post_install.yml | 6 +- tasks/glance_pre_install.yml | 4 +- tasks/glance_uwsgi.yml | 32 +++++++ tasks/main.yml | 28 +++++- templates/glance-api.conf.j2 | 13 +-- templates/glance-glare-paste.ini.j2 | 60 ------------ templates/glance-registry.conf.j2 | 7 +- templates/glance-systemd-init.j2 | 15 ++- templates/glance-systemd-tmpfiles.j2 | 4 +- templates/glance-uwsgi.ini.j2 | 19 ++++ templates/policy.json.j2 | 9 +- test-requirements.txt | 11 +-- tox.ini | 31 +++---- vars/main.yml | 31 +++++++ vars/redhat-7.yml | 1 + vars/suse-42.yml | 24 +++++ vars/ubuntu-16.04.yml | 1 + 51 files changed, 866 insertions(+), 291 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_aodh 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We contentedly announce the release of: openstack-ansible-os_aodh 16.0.0: os_aodh for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 15.0.0.0rc1..16.0.0 -------------------------------------------------------- 4cd19b1 Updated from OpenStack Ansible Tests 5182dfa Updated from OpenStack Ansible Tests 8f7df08 Update vars and test tooling for Pike 70de61e Update UPPER_CONSTRAINTS_FILE for stable/pike 3fc2ec1 Update .gitreview for stable/pike 597fe05 Updated from OpenStack Ansible Tests 07326b7 Updated from OpenStack Ansible Tests f6e1155 Add dnf support ca816d6 Updated from OpenStack Ansible Tests 8ba5ee9 Updated from OpenStack Ansible Tests fa08186 Updated from global requirements cec27ed Fixes incorrect title 2fe71f8 Update URLs in documents according to document migration be3b221 Add support for the openSUSE Leap distributions 72d8f43 templates: aodh-httpd: Ensure proper user control in aodh root d930b0a Updated from OpenStack Ansible Tests b85f8b7 Updated from OpenStack Ansible Tests 8bce3c2 Fix openstackdocstheme settings 5bebd5a Updated from global requirements 3ad189c Switch from oslosphinx to openstackdocstheme 2d01e5f Updated from OpenStack Ansible Tests ff3b17d Updated from global requirements 44700f3 Updated from global requirements 50dfb48 Switch to Cryptography over pycrypto d6277e2 Ensure that role tests pin pip/setuptools/wheel deb4680 Updated from global requirements 8c72de8 Allow the developer constraints to be adjusted 1112796 Use command instead of debug for handlers 20e5a6a Ensure that policy file has correct group/mode c5766be deprecate rabbit_use_ssl option 9af2829 Add venv_tag local fact 8e0197e Updated from global requirements 62a98b3 Fix for lookup and get_url occuring in different places 416fadc Use zuul-cloner for tests repo in OpenStack-CI 109ad46 Update sqlalchemy constraints to match upstream eb76491 Perform an atomic policy file change 38a4453 Rename release note to unique hash 8a07de2 Reduce init restart/kill times 68a7905 Optimise apt cache update task 45087bb Enumerate aodh[mysql] extra deps and constraints 8c93d59 Standardize test vars db3f26f Rename reno to avoid conflict on integrated repo 9dcacb8 Ensure the components are isolated from the system e7c4553 Add a release note 393cfa9 Deprecate auth_plugin option bb726c1 Install python2-pyOpenSSL package on CentOS 5d40a06 Cap the number of worker processes c78a912 Updated from global requirements d077f21 [DOC] Remove confusing sentence f631776 Updated from global requirements 5ab0e32 Updated from global requirements b0de88a Use https instead of http for git.openstack.org cbe3c34 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + Vagrantfile | 45 ++++++++-- bindep.txt | 46 +++++++--- defaults/main.yml | 32 +++++-- handlers/main.yml | 57 +++++++++++-- meta/main.yml | 2 +- ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 +++ .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 +++++ ...pping_aodh_wsgi_processes-6db6da9ba36c8851.yaml | 6 ++ .../deprecate_auth_plugin-71a83567d996752e.yaml | 5 ++ releasenotes/source/conf.py | 11 ++- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++ setup.cfg | 2 +- setup.py | 2 +- tasks/aodh_apache.yml | 35 +++++--- tasks/aodh_init_common.yml | 27 ------ tasks/aodh_init_systemd.yml | 6 +- tasks/aodh_install.yml | 32 ++++--- tasks/aodh_post_install.yml | 6 +- tasks/main.yml | 2 +- templates/aodh-httpd.conf.j2 | 12 +++ templates/aodh-systemd-init.j2 | 13 ++- templates/aodh.conf.j2 | 4 +- test-requirements.txt | 11 ++- tox.ini | 22 ++--- vars/suse-42.yml | 50 +++++++++++ 37 files changed, 564 insertions(+), 199 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are pumped to announce the release of: openstack-ansible 16.0.0: Ansible playbooks for deploying OpenStack This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * OpenStack-Ansible now supports the openSUSE Leap 42.X distributions mainly targeting the latest 42.3 release. * Deployers can set "pip_install_centos_mirror_url" to use their preferred mirror for the RDO repositories. * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" * Fedora 26 is now supported. * The variable "lxc_image_cache_server_mirrors" has been added to the "lxc_hosts" role. This is a list type variable and gives deployers the ability to specify multiple lxc-image mirrors at the same time. * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Known Issues ************ * Ceph storage backend is known not to work on openSUSE Leap 42.X yet. This is due to missing openSUSE support in the upstream Ceph Ansible playbooks. Upgrade Notes ************* * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. * The variable "lxc_image_cache_server" has been deprecated in the "lxc_hosts" role. By default this value will pull the first item out of "lxc_image_cache_server_mirrors" list which is only done for compatibility (legacy) purposes. The default string type variable, "lxc_image_cache_server", will be removed from the "lxc_hosts" role in the in "R" release. Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Other Notes *********** * openSUSE Leap 42.X support is still work in progress and not fully tested besides basic coverange in the OpenStack CI and individual manual testing. Even though backporting fixes to the Pike release will be done on best effort basis, it's advised to use the master branch when working on openSUSE hosts. Changes in openstack-ansible 15.0.0.0rc1..16.0.0 ------------------------------------------------ 8fbe91d Final SHA Bump for stable/pike pre release 63ea1ca Suppress curl warning w/shell module 6b94a6c Bump SHA's prior to releasing 16.0.0 dd4d91b scripts: scripts-library.sh: Fix tracepath logging ecd269f roles: bootstrap-host: Remove useless 'break' command from case statement 82ec7f8 roles: bootstrap-host: Fix typo in postup/postdown options for SUSE c8494e6 Pin Dragonflow in stable/pike 8f8abbf [DOC] Add openSUSE Leap references dbdfbec [DOC} Add openSUSE to Software requirements c74c9eb Fix LXC container start order 1ec85b2 Revert "Modify unbound to JIT install clients" c148398 Declare openSUSE Leap 42.X support as WIP df2e43b tests: bootstrap-host: Add SUSE support in the RedHat network scripts 4e6e87a playbooks: os-lxc-container-setup: Force kill a container on openSUSE if it takes too long to stop 275b5e8 playbooks: os-swift-install: Use correct group name on openSUSE 524c3d1 playbooks: utility-install.yml: Update package cache on openSUSE 9587f07 group_vars: all: Replace spaces with underscores in distro repository 85fc159 tests: bootstrap-host: Refresh repositories on SUSE d93bab3 tests: bootstrap-aio: Add sftp subsystem option for SUSE 3b69bbc tests: bootstrap-host: Add ability to configure networking on SUSE 394cbd3 tests: bootstrap-host: Add SUSE variables file e2a8a7b tests: bootstrap-host: Use btrfs tools to determine available disk space 0c99bf0 scripts: bootstrap-ansible: Add required packages on openSUSE Leap 67e1a0e scripts: scripts-library.sh: Add support for openSUSE 4688f77 scripts: scripts-library.sh: Do not use the '-m' option on tracepath ac5c320 scripts: scripts-library.sh: Hide 'which' command output 2f02fd9 Vagrantfile: Add openSUSE support bc1717c Vagrantfile: Increase VM memory size to 12G b2597fd Update role SHA's for online migration fixes 3407125 Enable verbose logging when fetching roles via git-clone 5255170 Correct zuul-cloner cloning of pinned SHA's 5b21a8b Correct cinder online migrations command ce43b73 Update documentation redirects b15efc2 Remove python3 usage in bootstrap-ansible.sh 7737930 ansible-role-requirements: Bump version for the 'bird' role 1c0302f Set serial to 100% for nova_compute 52b1cb4 scripts: scripts-library.sh: Fix location for log directory f2ce540 Bump SHAs for Pike final rc 6c8e2b4 Bump ansible-keepalived to 3.0.3 bd2f417 Update docs/tooling for Pike 9a539c3 Test containerised cinder-volume eef6a62 Pin ARA for Pike a9cfb2b Revert "Reduce container counts for cinder, ironic and trove" f09b7e6 Reduce CentOS AIO bootstrap pkg list ef7bc41 Fix import of osa_toolkit in inventory-manage.py b013dec Fix Barbican's health checks 11aa1a2 Update the playbook serial settings e567837 Bootstrap Ansible fails if partial keypair exists 0146e3e Remove repeated pip_install role execution f783831 Update UPPER_CONSTRAINTS_FILE for stable/pike ffdc7bc Update .gitreview for stable/pike 2bf2d65 Allow Keepalived to read haproxy pid file f63db53 Add subunit output to ARA reporting b7a0ded Use correct dnf.conf path for proxy c410546 Pin SHA's for stable/pike rc1 2b2bd4d Use LXC reverse proxy in OpenStack-CI 7b39cba Remove the reload from the cinder playbook cbe43d5 Clarification of the openstack_user_config.yml.example 7fa186b Remove extra horizon_wsgi_threads variable da5759d Update Ansible to 2.3.2.0 f47ec3e Update fastest-infra-wheel-mirror 56a388e Fix python prereq install task 55e084b Run resolvconf role on hosts only after unbound is deployed 1b7628b Improve proxy vars in user_variables.yml e22ce54 Update worker threads to better optimize gate memory 686c9f3 Add dnf support to ceph playbook 4e24b58 Add a switch for the gate job exit tasks bbbd367 Add dnf support b3c670f Modify unbound to JIT install clients 64f942b remove the use of iteritems 7ac103e Octavia scenario e32deaa Temporarily pin all ceph roles d7a9d83 Dynamically retrieve the location of ARA to work on both py2 & py3 b3cd95f Use ansible-runtime python for internal scripts 9cd4292 Support cidr_networks in L3 network environments 09249d0 Lists of user variables files in bootstrap-host role 3e8489c Allow PYTHON_EXEC_PATH in bootstrap-ansible 6ccf4c1 Update and replace http with https for doc links in OpenStack-Ansible f10c80d [Trivialfix]Fix typos 808b2ee Run the common setup tasks on Unbound DNS containers fb5856c Create env.d overrides directory during bootstrap 01878ae Fix the unbound resolver conf.d filenames faa5fdd Updated from global requirements ea6954f Use python import machinery for inventory code 55f0c1f Remove trove_regular_user 05f3601 Add etcd environment definition 9220732 group_vars: repo_all: Always build cryptography from source a28beed Prefilter the list of groups for repo_masters 1c3a57a Unpin SHA's post Pike-3 release 009a37e Fix SHAs for Pike milestone-3 af5c873 [DOCS] Update of SSL Config to include HAProxy ece5067 Move Upgrade branch change above initial library source 2e8e68e Provide default python path 7499771 Add python2 headers for the host package install eb05d83 Revert "Update setuptools to 36.2.0" 5f7000e Improve ansible host & venv bootstrap 1c9ff37 Fix double conditional bug 6e894ee Make master repos contain all distros bb9beeb Fix variable names in sripts-library.sh 1f80d9c Add python package for ansible bootstrap fefcbcb Restart nova-placement service only when necessary bbea424 Remove stray VIRTUALENV_OPTIONS 4514082 Bump Ansible version to include include_role fix 82da9b6 Reduce ansible bootstrap packages 60a1673 Fixes deploy-guide links 27accd6 Simplify nova_cinder_rbd_inuse set fact d4ae086 Update setuptools to 36.2.0 1aeed9b Optimize execution of RBD set fact 33d8122 Update URL home-page in documents according to document migration be1419d Remove ceph_client role execution from playbooks 6519bd6 Only gather facts when necessary 022ec0e Remove run-playbooks 5c918b4 Idempotent nova db privilege grants 79021ad Restart glance services only when necessary f0e6184 Cleanly catch keyboard interrupts during tests e115d4d Set python interpreter for connection:local plays 2213cf9 py35: Set virtualenv options for CentOS 4d4d1be Tidy up keystone need_db_sync fact 08885fe Optimize the link address 8ad53fb Add debug data to data-plane-test 05f7979 Correct swift3 repo variable names 78179e9 Ensure ansible bootstrap works properly with py35 4cef8b6 Implement rolling upgrades for nova 87dcb17 Add translations test-site deployment option 4c6f4d2 Set PrivateDevices=false for CentOS7 Ceph deploys e3524ec Correctly map nova git sources b0ff0fd Fix openstackdocstheme settings 315780f March to the beat of the new docs drum 1c59857 Fixes Ocata doc link 6777032 Fix localhost python interpreter. d175e09 Use env var for the clone root 255c489 Update all SHA's for Master (Pike) as of 30.06.2017 27298a7 Implement rolling upgrades for glance b158b90 Update Calico repo build information 2ba9800 Consolidate final two keystone plays 5b9d96e Bootstrap Ansible with Python3 on Ubuntu 3feeb57 Updated from global requirements 7691623 Ensure that role path is absolute 4f6e339 Switch from oslosphinx to openstackdocstheme 7c642cc Change the variable name play_hosts to ansible_play_hosts 1e7085a Allow keystone playbook to work with limits 14793d7 Implement rolling upgrades for neutron 8243a80 Remove Ceph warning. 46ccb91 [Docs] Recommendations for firewalld 5b433aa Avoid renaming tempest result files 002c35f scripts: sources-branch-updater: Allow role requirements updates on master b55fc72 Work around bad DNS resolution ecf32e2 Implement rolling upgrades for keystone ef12bf0 Implement rolling upgrades for cinder 324857e Block comment should start with '# ' 275f3da Override keepalived uca repo with common variable 3b910f1 Use distro specific netcat package names b9c839f Move unsetting of group and host env vars 14ae2dd Set PrivateDevices=false for MemcacheD 5640b27 Implement a data plane down time test for upgrades 5f30197 scripts: sources-branch-updater-lib.sh: Avoid using 'dirname $0' c43f0bd Remove localhost host_vars file ebdf81b scripts: sources-branch-updater-lib.sh: Fix typos d10f52b Set PrivateDevices=false for Galera e9ef150 scripts: Introduce sources-branch-updater-lib library 28b646e Fix race condition regression 7e4d83e Add API availability tests to upgrade 4ecc7c3 Add additional role path for lint testing 6963b8e Switch to Cryptography over pycrypto 2798cf4 Use new ansible-hardening role abb3349 Use the same version of ansible as tests repo a1c1e6f Set python2 for SHA updating scripts 90016a2 Updated from global requirements 4e074e8 Updated from global requirements 7f5e85b Vagrant: Implement plugin check and simpler config e2f56ec Fix Python 3 bytes vs strings differences fa5336c Fix Python 3 dictionary incompatibilities 693c4b6 If repo build fails, force all hosts to fail ed7032f Revert role pin for further Pike development ed4ccd5 Add support for python 3 inventory tests 4237287 Avoid retrieving IP from a bridge without IP a1d51d5 Improve compatibiliity with Python 3 952fad5 Update vars to match latest keepalived role f9f5f00 SHA Pin for OSA Pike-2 e7800ce Simplify multi arch repo build 09b9641 Updated from global requirements 165e92c Update Ansible to 2.3.1.0 1986b06 Unset group and host vars variables during upgrade a8aba56 docs: Remove all the unnecessary blockquotes ff85023 Remove cinder_glance_api_version option 43dd3cb Add license boilerplate to Vagrantfile f7bb1e9 Add nc to the packages to install during upgrade 407002f Vagrantfile resize handling 58b4f6d Use root folder group_vars f02b548 SHA Bump for Pike as of 26.05.2017 39900e1 Remove snowflaked keepalived config cb3847c Move to a all/ group var folder 8d8e76c Avoid jinja2 templating in when warnings 62f05f7 Remove when {{ ca6d36f Ceilometer: Update URL used to source default configs e138a5e [ops-guide] Adds links to networking info in ops and networking guide 77ac881 Add var for environment used only inside playbooks b379bcf [ops-guide] Adding live migration section to ops-guide e868073 Updated from global requirements 03cdc4f Pass package list as a list 46acf2d Fix CentOS swap creation 1612733 Fix os_cmd script for tty bfa4e97 Update all SHAs for Pike 2017-05-15 129ee2a Gnocchi: Update URL used to source default configs e32cfea Updated from global requirements 3bec543 Isolate ansible-runtime venv site packages a966862 scripts: sources-branch-update.sh: Remove double 'sed' 7d0b033 Update sources-branch-updater to cater for git sourced config e56dc09 Change swap creation command for CentOS a293d10 [DOCS] Fix typos in index links for documentation 63302c6 [Docs] Cleanup developer section bf0fdb5 Adjust typesetting of disk requirements 119002a Adjust indent of inventory-manage.py 4a35fe9 Remove unused properties from environment files 95b7157 Do not use those commands when they are not exist. 8ebd4b6 Fix mysql check for galera for CentOS 2a0766b [Docs] Describe variable files locations c57ae01 [ops-guide] Removing 'draft' from operations-guide 52fe77b Fix cinder backends detection for nova ceph deploy 37e78b6 Enable ARA cross-repo testing bddcfb8 [DOCS] dded Instance Connectivity + Network Troubleshooting 8f0ff13 Bump ceilometer SHA 23a7eb6 Use package module to install distro packages 43d664b [ops-guide] Add live migration content 8a4729d SHA Bump for Pike 28/04/2016 62bc0d7 Enable cross-repo testing for OSA integrated tests 06269c1 Use wait_for_connection instead of wait_for to check container c294599 Add designate public and internal URL config f5c72e5 Bugfix for wait_for_ssh for waiting for connectivity d872a07 Update galera repo url variables during upgrades adcdb7e Add variable for template filename 4279629 Unset bootstrap-ansible variables between upgrades a05bf7c [DOCS] Internal/External VIP should be different IPs 13a8c27 Only bind haproxy to internal IP, repo and galera 36843ee Adding contributing guide to tests/ structure 5afc0aa [DOCS] Have different release/git branch name 13f8256 Update ansible-lint to 3.4.12 3320471 [DOCS] Fix link to individual role docs 0c94344 Add keystone public endpoint ce05985 Update Ansible to 2.3.0.0 b3e7a79 Enable SSL termination for octavia 7b0fd88 [docs] Redirecting deploy guide link e7263ad Move included vars to vars section d04647a Deploy package cache proxy on unbound 8033841 [DOC] Fix ntp service doc for CentOS 5c048b9 Unpin Roles for Pike-2 release 26b1fb9 Role Pin for Pike OSA Milestone-1 ce64ef4 Add group vars to prep for os_neutron role changes af28828 [DOC] use 127.0.0.1 for mysql connection 11f7da6 [DOCS] Fix the dead link 936610a [docs] Add backup information to the OSA Ops Guide b769a6e Reduce container counts for cinder, ironic and trove 89cd5c8 Set a sane default haproxy_bind_on_non_local 3a1418a Ensure proxy check is short circuit 2dd0756 Configurable haproxy network whitelists a163614 Fix a typo 35411cd Fix a typo 2e9e369 Fix ceph installation on CentOS aa459b3 [Docs] Firewall guide 0a01e1e Fix rally installation inside utility container d9e1330 SHA Bump as of 04 April 2017 a3a1535 [ops-guide] Add network maintenace content 20a4340 update package locations path in repo-build play 45d778e [docs] Update Ocata release status in heading 95b51a8 Implement http-check on haproxy services e380357 Add trove RPC encryption keys 6d757ca Update haproxy check script in keepalived. 2be3319 Restructure lib directory to install via pip 9603b8a deploy-guide: fix small rst format issues 1059b19 Keystone: Source template files from git or deploy host a74b741 Update Ansible to 2.2.2.0 57178f7 [DOCS] Add checklist item for ceph_stable_release f9061c0 Remove Ceilometer API Service 05b935b Fix pip_links for LB terminated SSL environments baba7b3 SHA Bump on Master as at 22 March 2017 bb7c067 Add support to install a molteniron server 24d52d5 Update Vagrantfile to include CentOS7 2feef33 Updated from global requirements cacf410 Add better support for multi-OS deployments 83a6b09 Implement fix for Octavia host group name 27d2754 Remove "tenant_id" from the nova endpoint a988176 [DOCS] Fixes broken link 2377479 Introduce userspace group_vars and host_vars a44e418 Remove git_dest variables daf20d0 Additions to install OpenStack Octavia 8152a15 Provide example of using veth pairs for br-vlan 1c0da7e Add Swift3 middleware to openstack_services daca930 Use OpenStack-Infra MariaDB mirror in OpenStack-CI 894e219 [docs] Updated restarting services section 3f6d625 [docs] Reorders ToC to avoid gap 9220d52 Tidy up upgrade scripts 1ed6d9f Remove epel form bootstrap-host installation. fe84f80 Updated from global requirements 6dcb678 Remove unused confusing data in example 47c684d [DOC] Fix doc about EPEL ef70b6f [docs] Update doc references for Ocata/Pike e2f62f9 Check if env.d folder exists for upgrades 51689d2 Answer the upgrade no-going-back prompt 6d6f34c [docs] Add scenario customisation information to AIO quick start guide 39d1f38 DOC - Add note regarding Ansible hostname bug b251aef [docs] Update developer docs script reference 722b5ff Ensure that the terminal type is set 8de5d4f Check for rbd as a default & optional glance back-end 20b068d Fix upgrade script-library check 27b5c8e Bump the Aodh SHA ae6a005 AIO: Provide facility to exclude apt distributions f63701a [docs] Add http public endpoint example 2759d7f [docs] Add content to the troubleshooting chapter beafe30 [docs] Fix formatting for Core Reviewers page f899ee2 Add openstack_user_config reference to Networking Appendix 9df34f6 Add rsyslog_client configuration for Calico a39837a Remove with_items from utility pip install 1e4d474 Serialize RabbitMQ container prep 56f31c2 Add ceph container bind mounts to group_vars e992ff0 Move glance container bind mount dirs to group_vars 2aa4a3f Adjust gate-check-commit for deploy/upgrade testing 8721437 Update all SHAs for Pike 2017-03-03 1053adf Implement ARA logging and reporting for openstack-ansible gate jobs d7c5711 Added a common tag to the common tasks 2b3ad52 Updated from global requirements f517b14 Move ceph client role to playbooks for faster run time cf6600d Updated from global requirements e74eca2 Install rdo package 59aaac0 Only insert container hosts into lxc_hosts 448b9ce Update keystone SHA to support db_sync check be08a06 Use an explicit version of urrlib3 ca2fecc update galera cluster database bind mount dirs 67f2db5 Place gnocchi database bind mount dirs to be in group_vars 5094011 Remove ceilometer from the gate 4c04c68 unify interface lookups 9aeea15 Updated from global requirements dfdda46 Add vagrantfile for AIO testing f438c65 Move upper constraint logic to after python is installed ce14919 Disable haproxy endpoint drain wait 3a08bb7 Fix error during 'inventory-manage.py -r' calls 0463862 Update thread/worker settings for optimal memory usage 41cf2f5 Updated from global requirements e0f219a Update doc index for Pike d427a7f [Doc] fix small typo 6a8f21d Use setuptools 33.1.1 53d6e17 [docs] Update troubleshooting chapter in ops guide 42292e1 Deprecate ceilometer-collector 4f1010d [Docs] Remove infra references from refinfo 7544ea9 [Docs] Scratch the content of backup and restore fc49b7d [Docs] Refactor galera ops page a930912 [Docs] Integration of role maturity matrix f09e0a2 Fix fastest-infra-wheel-mirror.py for CentOS. 3bdf5aa Add in ironic_service_user_name group_vars/all.yml cd267f1 Fix ceph AIO bootstrap for CentOS f5ed8d4 [DOCS] Fix ansible fact caching information 03a6b40 [Docs] Cleanup Container mgmt 349ba40 [Docs] Fix block storage refs in scale-environment 19a1a32 [Docs] Small fixes on swift Multi-Region guide ca98a28 [DOCS] Updated network services config references f064940 [DOCS] Update image management 5c4c6bc [DOCS] Use openstack commands 8c8f62e [DOCS] Remove redundant limit command 9583bdd [DOCS] Updated CLI examples 5ac874d [Docs] Clarify user_*.yml precedence 0feeb44 [DOCS] Correct CLI Operations examples 5e2322c [Docs] Add note to run ad-hoc commands from playbooks dir 8782f11 [Docs] Fix advanced config OSA integration section e7e0c95 Add "at least" in reference to Ethernet int 4c8db04 [Docs] Small cleanups to advanced config 257b602 Serialize Keystone and manage haproxy endpoints 9037c53 Fix broken install guide link 259992d Rename neutron_dhcp_domain to neutron_dns_domain 8057996 Make Magnum proto use openstack_service_proto e44a7f1 Add CentOS support for AIO setup 3ddf708 Remove security role from user_variables.yml 6bc3bf9 Cinder use correct glance API when RBD enabled 9ea99be Set upgrade test to test ocata->master f5d6475 Integration of dragonflow in integrated gate ab5c6ce Removing openrc download docs 2b21dc2 SHA Bump for master 15-02-2017 2de2c01 [Docs] Complete the example file c0dfe2a [Docs] Remove Kilo 339f12a [ops-guide] Add rabbitmq content e4551ef [DOCS] Move limited connectivity section to Deploy Guide 9c94a5b [DOCS] Fix link to plugins docs a9b8752 [DOC] Fix release name in quickstart doc 92ccc1b [DOCS] Include branch in links to role docs cb750e5 [Docs] Fix documentation for Cinder NFS backend 7659b63 [DOCS] Move links to role docs to deploy guide 2ce6356 Updated from global requirements 06cd163 Get conf files from local git server rather than upstream 96c7660 Ensures the host IP isn't used for containers 9831ad8 Updated from global requirements 0495961 Remove 3DES from ssl_cipher_suite 56f72ac Fixed typo causing bug in openstack-hosts-setup 59b3495 Target unbound component group instead of _all 541f04e Bring idempotency to swapon d263099 Add tracepath commands to the AIO 248caaf Revert role pins in master branch 60351bc Add group vars to enable integration with barbican 5f3cad6 Using yaml.safe_load instead of yaml.load 6b7147e Move scenario variables under vars 99c163f Use upstream profile_tasks callback 6680528 Fix typo in ip.py a687052 Use https instead of http for git.openstack.org ccea3dd Replace 'assertTrue(a in b)' with 'assertIn(a, b)' 7299336 Docstrings should not start with a space 75371dd Configurable haproxy network whitelists e572694 Update reno for stable/ocata ccabfa0 Fix haproxy playbook group target 3c8548b Work on starting the upgrade job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 28 +- Vagrantfile | 99 ++ ansible-role-requirements.yml | 106 +- .../source/app-advanced-config-options.rst | 7 +- .../source/app-advanced-config-override.rst | 3 +- .../source/app-advanced-config-security.rst | 7 +- .../source/app-advanced-config-sslcertificates.rst | 46 +- deploy-guide/source/app-advanced-role-docs.rst | 11 - deploy-guide/source/app-ceph.rst | 7 +- deploy-guide/source/app-config-pod.rst | 159 +++ deploy-guide/source/app-config-prod.rst | 2 +- deploy-guide/source/app-config-test.rst | 14 +- deploy-guide/source/app-custom-layouts.rst | 8 +- deploy-guide/source/app-limited-connectivity.rst | 152 +++ deploy-guide/source/app-networking.rst | 35 +- deploy-guide/source/app-resources.rst | 6 +- deploy-guide/source/app-security.rst | 12 +- deploy-guide/source/app.rst | 2 + deploy-guide/source/conf.py | 37 +- deploy-guide/source/configure.rst | 114 +- deploy-guide/source/deploymenthost.rst | 80 +- deploy-guide/source/overview-requirements.rst | 43 +- deploy-guide/source/targethosts-networkconfig.rst | 3 + deploy-guide/source/targethosts-prepare.rst | 92 +- .../admin/maintenance-tasks/ansible-modules.rst | 136 +++ .../admin/maintenance-tasks/managing-swift.rst | 80 ++ .../admin/maintenance-tasks/network-maintain.rst | 196 ++++ .../admin/maintenance-tasks/rabbitmq-maintain.rst | 220 ++++ .../admin/maintenance-tasks/scale-environment.rst | 364 ++++++ .../monitor-environment/monitoring-systems.rst | 11 + .../admin/openstack-operations/cli-operations.rst | 121 ++ .../admin/openstack-operations/managing-images.rst | 62 ++ .../openstack-operations/managing-instances.rst | 386 +++++++ .../admin/openstack-operations/network-service.rst | 39 + .../admin/openstack-operations/verify-deploy.rst | 112 ++ .../installation-hosts-limited-connectivity.rst | 177 --- .../draft-operations-guide/advanced-config.rst | 337 ------ .../draft-operations-guide/maintenance-tasks.rst | 19 - .../maintenance-tasks/ansible-modules.rst | 131 --- .../maintenance-tasks/backups.rst | 37 - .../maintenance-tasks/containers.rst | 194 ---- .../maintenance-tasks/firewalls.rst | 14 - .../maintenance-tasks/galera.rst | 430 ------- .../maintenance-tasks/managing-swift.rst | 78 -- .../maintenance-tasks/network-maintain.rst | 27 - .../maintenance-tasks/rabbitmq-maintain.rst | 24 - .../maintenance-tasks/scale-environment.rst | 366 ------ .../draft-operations-guide/monitor-environment.rst | 11 - .../monitor-environment/monitoring-systems.rst | 11 - .../openstack-operations.rst | 15 - .../openstack-operations/access-environment.rst | 272 ----- .../openstack-operations/managing-images.rst | 125 --- .../openstack-operations/managing-instances.rst | 220 ---- .../openstack-operations/network-service.rst | 41 - .../openstack-operations/verify-deploy.rst | 61 - .../ref-info/ansible-scripts.rst | 21 - .../ref-info/lxc-commands.rst | 37 - .../draft-operations-guide/troubleshooting.rst | 223 ---- .../upgrade-guide/reference-upgrade-playbooks.rst | 90 -- .../openstack_interface.cfg.pod.example | 157 +++ .../openstack_interface.cfg.prod.example | 26 +- .../openstack_interface.cfg.test.example | 32 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 1 + etc/openstack_deploy/conf.d/etcd.conf.example | 9 + etc/openstack_deploy/conf.d/molteniron.yml.aio | 4 + etc/openstack_deploy/conf.d/octavia.yml.aio | 4 + etc/openstack_deploy/conf.d/unbound.conf.aio | 3 - etc/openstack_deploy/conf.d/unbound.conf.example | 8 - etc/openstack_deploy/conf.d/unbound.yml.aio | 3 + etc/openstack_deploy/conf.d/unbound.yml.example | 8 + etc/openstack_deploy/openstack_user_config.yml.aio | 34 + .../openstack_user_config.yml.aio.j2 | 134 +++ .../openstack_user_config.yml.example | 75 +- .../openstack_user_config.yml.pod.example | 511 +++++++++ .../openstack_user_config.yml.prod.example | 25 +- .../openstack_user_config.yml.test.example | 4 +- etc/openstack_deploy/user_secrets.yml | 13 +- etc/openstack_deploy/user_variables.yml | 27 +- .../user_variables.yml.test.example | 6 + global-requirement-pins.txt | 2 +- group_vars/all/all.yml | 122 ++ group_vars/all/aodh.yml | 21 + group_vars/all/ceilometer.yml | 26 + group_vars/all/ceph.yml | 30 + group_vars/all/cinder.yml | 43 + group_vars/all/glance.yml | 51 + group_vars/all/haproxy.yml | 276 +++++ group_vars/all/heat.yml | 34 + group_vars/all/infra.yml | 31 + group_vars/all/ironic.yml | 29 + group_vars/all/keepalived.yml | 69 ++ group_vars/all/keystone.yml | 59 + group_vars/all/magnum.yml | 23 + group_vars/all/neutron.yml | 50 + group_vars/all/nova.yml | 60 + group_vars/all/octavia.yml | 31 + group_vars/all/pip.yml | 26 + group_vars/all/sahara.yml | 34 + group_vars/all/ssl.yml | 21 + group_vars/all/swift.yml | 29 + group_vars/all_containers.yml | 31 + group_vars/aodh_all.yml | 24 + group_vars/barbican_all.yml | 33 + group_vars/ceilometer_all.yml | 36 + group_vars/ceph_all.yml | 19 + group_vars/cinder_all.yml | 50 + group_vars/cinder_volume.yml | 22 + group_vars/designate_all.yml | 59 + group_vars/galera_all.yml | 28 + group_vars/glance_all.yml | 38 + group_vars/gnocchi_all.yml | 40 + group_vars/haproxy_all.yml | 37 + group_vars/heat_all.yml | 28 + group_vars/horizon_all.yml | 41 + group_vars/hosts.yml | 29 + group_vars/ironic_all.yml | 25 + group_vars/ironic_compute.yml | 16 + group_vars/keystone_all.yml | 39 + group_vars/magnum_all.yml | 32 + group_vars/memcached.yml | 23 + group_vars/neutron_agent.yml | 28 + group_vars/neutron_all.yml | 30 + group_vars/neutron_calico_dhcp_agent.yml | 107 ++ group_vars/nova_all.yml | 46 + group_vars/octavia_all.yml | 19 + group_vars/rabbitmq_all.yml | 22 + group_vars/repo_all.yml | 68 ++ group_vars/rsyslog.yml | 19 + group_vars/sahara_all.yml | 21 + group_vars/swift_all.yml | 31 + group_vars/trove_all.yml | 46 + group_vars/utility_all.yml | 71 ++ host_vars/.placeholder | 0 lib/__init__.py | 0 lib/dictutils.py | 92 -- lib/filesystem.py | 310 ------ lib/generate.py | 1096 ------------------ lib/ip.py | 322 ------ lib/manage.py | 339 ------ lib/tools.py | 53 - osa_toolkit/__init__.py | 0 osa_toolkit/dictutils.py | 92 ++ osa_toolkit/filesystem.py | 315 ++++++ osa_toolkit/generate.py | 1170 ++++++++++++++++++++ osa_toolkit/ip.py | 325 ++++++ osa_toolkit/manage.py | 356 ++++++ osa_toolkit/tools.py | 53 + playbooks/ceph-install.yml | 93 +- playbooks/common-playbooks/cinder.yml | 121 ++ playbooks/common-playbooks/glance.yml | 89 ++ playbooks/common-playbooks/neutron.yml | 120 ++ playbooks/common-playbooks/nova.yml | 171 +++ playbooks/common-tasks/dynamic-address-fact.yml | 51 + playbooks/common-tasks/dynamic-grouping.yml | 4 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 30 + playbooks/common-tasks/mysql-db-user.yml | 4 + playbooks/common-tasks/os-log-dir-setup.yml | 4 + playbooks/common-tasks/os-lxc-container-setup.yml | 39 +- playbooks/common-tasks/package-cache-proxy.yml | 31 +- playbooks/common-tasks/rabbitmq-vhost-user.yml | 5 + playbooks/common-tasks/restart-service.yml | 45 + playbooks/common-tasks/set-pip-upstream-url.yml | 4 + playbooks/common-tasks/set-upper-constraints.yml | 10 + playbooks/defaults/repo_packages/gnocchi.yml | 5 +- playbooks/defaults/repo_packages/nova_consoles.yml | 8 +- .../defaults/repo_packages/openstack_services.yml | 117 +- .../defaults/repo_packages/openstack_testing.yml | 6 +- playbooks/defaults/repo_packages/projectcalico.yml | 22 - playbooks/defaults/repo_packages/readme.rst | 1 - playbooks/etcd-install.yml | 2 + playbooks/galera-install.yml | 11 +- playbooks/haproxy-install.yml | 8 +- playbooks/inventory/dynamic_inventory.py | 14 +- playbooks/inventory/env.d/aodh.yml | 2 - playbooks/inventory/env.d/barbican.yml | 2 - playbooks/inventory/env.d/ceilometer.yml | 19 +- playbooks/inventory/env.d/ceph.yml | 3 - playbooks/inventory/env.d/cinder.yml | 3 - playbooks/inventory/env.d/designate.yml | 10 +- playbooks/inventory/env.d/etcd.yml | 34 + playbooks/inventory/env.d/galera.yml | 3 - playbooks/inventory/env.d/glance.yml | 1 - playbooks/inventory/env.d/gnocchi.yml | 2 - playbooks/inventory/env.d/haproxy.yml | 1 - playbooks/inventory/env.d/heat.yml | 4 - playbooks/inventory/env.d/horizon.yml | 2 - playbooks/inventory/env.d/ironic.yml | 6 - playbooks/inventory/env.d/keystone.yml | 2 - playbooks/inventory/env.d/magnum.yml | 2 - playbooks/inventory/env.d/memcache.yml | 2 - playbooks/inventory/env.d/molteniron.yml | 35 + playbooks/inventory/env.d/neutron.yml | 4 - playbooks/inventory/env.d/nova.yml | 13 - playbooks/inventory/env.d/octavia.yml | 47 + playbooks/inventory/env.d/pkg_repo.yml | 2 - playbooks/inventory/env.d/rabbitmq.yml | 2 - playbooks/inventory/env.d/rsyslog.yml | 2 - playbooks/inventory/env.d/sahara.yml | 2 - playbooks/inventory/env.d/swift-remote.yml | 1 - playbooks/inventory/env.d/swift.yml | 5 - playbooks/inventory/env.d/trove.yml | 2 - playbooks/inventory/env.d/unbound.yml | 2 - playbooks/inventory/env.d/utility.yml | 2 - playbooks/inventory/group_vars/all.yml | 468 -------- playbooks/inventory/group_vars/all_containers.yml | 23 - playbooks/inventory/group_vars/aodh_all.yml | 24 - playbooks/inventory/group_vars/barbican_all.yml | 33 - playbooks/inventory/group_vars/ceilometer_all.yml | 33 - playbooks/inventory/group_vars/cinder_all.yml | 38 - playbooks/inventory/group_vars/cinder_volume.yml | 17 - playbooks/inventory/group_vars/designate_all.yml | 56 - playbooks/inventory/group_vars/galera_all.yml | 19 - playbooks/inventory/group_vars/glance_all.yml | 28 - playbooks/inventory/group_vars/gnocchi_all.yml | 32 - playbooks/inventory/group_vars/haproxy_all.yml | 20 - playbooks/inventory/group_vars/heat_all.yml | 28 - playbooks/inventory/group_vars/horizon_all.yml | 41 - playbooks/inventory/group_vars/hosts.yml | 29 - playbooks/inventory/group_vars/ironic_all.yml | 25 - playbooks/inventory/group_vars/ironic_compute.yml | 16 - playbooks/inventory/group_vars/keystone_all.yml | 27 - playbooks/inventory/group_vars/magnum_all.yml | 32 - playbooks/inventory/group_vars/memcached.yml | 19 - playbooks/inventory/group_vars/neutron_agent.yml | 28 - playbooks/inventory/group_vars/neutron_all.yml | 28 - .../group_vars/neutron_calico_dhcp_agent.yml | 107 -- playbooks/inventory/group_vars/nova_all.yml | 31 - playbooks/inventory/group_vars/rabbitmq_all.yml | 22 - playbooks/inventory/group_vars/rally_all.yml | 18 - playbooks/inventory/group_vars/repo_all.yml | 56 - playbooks/inventory/group_vars/rsyslog.yml | 19 - playbooks/inventory/group_vars/sahara_all.yml | 21 - playbooks/inventory/group_vars/swift_all.yml | 31 - playbooks/inventory/group_vars/trove_all.yml | 46 - playbooks/inventory/group_vars/utility_all.yml | 69 -- playbooks/lxc-containers-create.yml | 14 +- playbooks/lxc-hosts-setup.yml | 1 + playbooks/memcached-install.yml | 1 + playbooks/openstack-hosts-setup.yml | 48 +- playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-ceilometer-install.yml | 3 +- playbooks/os-cinder-install.yml | 302 +++-- playbooks/os-designate-install.yml | 9 +- playbooks/os-glance-install.yml | 173 ++- playbooks/os-gnocchi-install.yml | 8 +- playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-keystone-install.yml | 175 ++- playbooks/os-magnum-install.yml | 1 + playbooks/os-molteniron-install.yml | 52 + playbooks/os-neutron-install.yml | 158 +-- playbooks/os-nova-install.yml | 338 +++--- playbooks/os-octavia-install.yml | 69 ++ playbooks/os-rally-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-swift-install.yml | 8 +- playbooks/os-swift-sync.yml | 1 + playbooks/os-tempest-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/rabbitmq-install.yml | 9 +- playbooks/repo-build.yml | 48 +- playbooks/repo-server.yml | 1 + .../templates/crontab.j2 | 10 +- playbooks/rsyslog-install.yml | 3 +- playbooks/security-hardening.yml | 3 +- playbooks/setup-openstack.yml | 2 + playbooks/unbound-install.yml | 11 +- playbooks/utility-install.yml | 35 +- playbooks/vars/configs/haproxy_config.yml | 289 ----- playbooks/vars/configs/keepalived_haproxy.yml | 68 -- .../configs/keepalived_haproxy_notifications.sh | 34 - .../notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml | 4 + .../notes/Add-CentOS-support-9a63262163dfb678.yaml | 4 + .../notes/add-iptables-5ff8c4317e2e8498.yaml | 8 + .../add-octavia-to-repo-f9d0fd8cee969181.yaml | 5 + .../add-opensuse-support-a8ec3f54188e5f01.yaml | 14 + .../notes/add-swift3-support-a3f1a5d866fd8883.yaml | 5 + .../add-template-file-var-cac35a99a3faf563.yaml | 6 + ...d_and_network_preparation-a414d45b624652a3.yaml | 11 + ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...ble-hostname-bug-rabbitmq-7919f9311d61dcd6.yaml | 9 + ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 + .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 + ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...rbican_init_time_settings-d7510910912fa061.yaml | 23 + .../notes/cap-workers-fc70b4f8586ba1a5.yaml | 6 + ...pping_aodh_wsgi_processes-6db6da9ba36c8851.yaml | 6 + ...nder_osapi_volume_workers-db32afcf7615b05b.yaml | 5 + .../capping_glance_workers-54afc20c20baa14e.yaml | 6 + ...ng_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml | 6 + .../capping_heat_workers-13791c456e59277d.yaml | 6 + .../capping_horizon_workers-29ecc4893bcc3a4b.yaml | 6 + ...ing_ironic_wsgi_processes-6fa7306fc3c29de7.yaml | 6 + .../capping_keystone_workers-e284a47fc4dcea38.yaml | 6 + .../capping_neutron_workers-d97a5d50ca996af5.yaml | 6 + .../capping_nova_workers-349f0f4d3fd50b37.yaml | 7 + ...apping_repo_nginx_workers-ddbc355855f8fe43.yaml | 5 + ...apping_sahara_api_workers-d95bdf63093ce893.yaml | 6 + ...ng_swift_services_workers-5ac9ecb28f56469f.yaml | 8 + ...ter-init-config-overrides-8ac1b94bd70c9c09.yaml | 10 + ...ter-init-config-overrides-bfce7e419061c4da.yaml | 10 + ...ometer_init_time_settings-2eebfa58227ae31a.yaml | 23 + ...er_upstream_file_retrieve-bbbf147cdeacb8f2.yaml | 10 + ...tos-galera-privatedevices-4958f0be6cffa466.yaml | 14 + ...-memcached-privatedevices-d3be3acb19ed71d6.yaml | 14 + ...entos-mirror-url-variable-eea9f226b5611b40.yaml | 5 + ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 + ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 + .../ceph-extra-components-71f1c130b9b47ba5.yaml | 6 + .../cinder-auth-stragety-02ca99f48ad7739b.yaml | 5 + .../cinder-data-migrations-ce31707c078b335c.yaml | 9 + ...der-init-config-overrides-9e495aee023deed6.yaml | 10 + .../cinder-rolling-upgrades-f069187fc9139276.yaml | 10 + .../notes/cinder_api_v3-cc53677ce77d97c3.yaml | 5 + ...cinder_init_time_settings-1ef46f6b9d4fc1df.yaml | 18 + .../notes/cinder_uwsgi-c6a1651a4c54a8cc.yaml | 15 + .../notes/common-tags-9763f578ea5fe5b6.yaml | 5 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + ...template-ignore-none-type-9387c236853f061b.yaml | 9 + .../notes/copr-repo-priority-60b3603b0c1ff2f7.yaml | 6 + ...zable-login-banner-string-d8d5ae874e8e49f3.yaml | 6 + .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 13 + .../deprecate_auth_plugin-1a78326719d67f23.yaml | 5 + .../deprecate_auth_plugin-347b326919d67a18.yaml | 5 + .../deprecate_auth_plugin-397a32171826ef78.yaml | 5 + .../deprecate_auth_plugin-451832a71b967e27.yaml | 5 + .../deprecate_auth_plugin-71a83567d996752e.yaml | 5 + .../deprecate_auth_plugin-781a536e19d674e8.yaml | 5 + .../deprecate_auth_plugin-819233a76d4523e8.yaml | 5 + .../deprecate_auth_plugin-a391325719b67612.yaml | 5 + ...ignate-pools-yaml-support-d693dc2471642167.yaml | 11 + ...ignate_init_time_settings-6efb66b0d17d4c04.yaml | 23 + ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 + ...int-change-to-internalurl-3da6bb4bd4972bea.yaml | 7 + releasenotes/notes/esl-repo-6ff0c7f24ad2a043.yaml | 25 + .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 + .../fix_lxc_hosts_membership-1f73f3114638c09e.yaml | 7 + ...-client-url-var-deprecate-9ced45ea374c3c7d.yaml | 9 + .../notes/get_nested_filter-b89828586d7e2520.yaml | 7 + ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 10 + ...glance_init_time_settings-d3cc064fd8acf107.yaml | 15 + .../notes/glance_uwsgi-dd5fe62e6f85ecd2.yaml | 12 + ...nocchi-deploy-config-file-afba6c2a8edac025.yaml | 7 + ...chi-init-config-overrides-4fc9ec27ea1bd090.yaml | 10 + ...nocchi_init_time_settings-ba554f29fc7fd351.yaml | 23 + ...hi_upstream_file_retrieve-e2a056bfc532d761.yaml | 10 + .../notes/group_vars_move-2e8f3c45935e98d8.yaml | 9 + ...haproxy-backend-arguments-3b1dca299c7a8296.yaml | 4 + ...eat-init-config-overrides-004872081661a34c.yaml | 10 + .../heat_init_time_settings-5f9f7cd4326ded97.yaml | 23 + .../notes/heat_uwsgi-11d691aa4d47c35d.yaml | 20 + .../notes/heatstack_password-25956b6143577735.yaml | 5 + .../idempotent-wheel-build-4c527045bec09fd5.yaml | 22 + .../image-allow-location-58212b8e506639f2.yaml | 5 + .../notes/implement-ssl-48a82cf611db0eb6.yaml | 5 + .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 + .../implement_tuning_params-e627c774c0d0c9d2.yaml | 10 + .../inventory-python-imports-c967b20e64b43758.yaml | 6 + ...nic-init-config-overrides-e73d9fd46a69afcf.yaml | 10 + .../ironic_init_time_settings-b8ab3c3c4d733dc.yaml | 23 + .../notes/keepalived-cleanup-d25a27752c0432bc.yaml | 9 + .../keepalived_new_vars-a3b2f0d334f79e10.yaml | 15 + .../keystone-endpoints-urls-679748dec6ee6dd7.yaml | 4 + ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 10 + .../keystone-nginx-default-e9d91affd646f379.yaml | 10 + ...one-upstream-config-files-d16f27fc1332ed83.yaml | 9 + ...ystone_init_time_settings-62a1aab4bcfc9779.yaml | 23 + ...one_plugin_default_update-c025bd5508069df3.yaml | 12 + ...instance-defaults-support-533844543082b2f4.yaml | 6 + .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 + ...c-install-from-pkg-centos-e38d351a3a9ac67e.yaml | 5 + .../lxc-interface-scripts-78e9021cf2ed0c97.yaml | 7 + .../lxc-ssh-wait-deprecation-fe3eda58fc9d318e.yaml | 12 + .../lxc_image_cache_server-f14701a7f8f4b8ca.yaml | 14 + .../lxc_net_manage_iptables-95e52387dcef0015.yaml | 5 + .../notes/magnum-client-urls-64af5efc9ece6680.yaml | 13 + ...num-init-config-overrides-aec21cbbd9da8e4e.yaml | 9 + .../magnum_init_time_settings-6ecc4ff27d7dca1.yaml | 23 + .../move-gnocchi-component-118ae07fce3562e1.yaml | 6 + .../multi-os-wheel-repos-7910b13547ea59ad.yaml | 9 + ...eutron-dragonflow-support-fce23f85c6a0bebd.yaml | 7 + ...ron-init-config-overrides-9d1d2b3b908705ed.yaml | 10 + .../neutron-rolling-upgrades-5269b62ea216df5e.yaml | 7 + ...eutron_init_time_settings-66ad8a3d9eb951b0.yaml | 23 + .../nova-data-migrations-f6c2bc0f9e7b1908.yaml | 9 + ...ova-init-config-overrides-7221a8f9d5be9291.yaml | 9 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...a-ocata-conf-deprecations-0a99d13c97424c51.yaml | 13 + .../notes/nova-placement-api-07ce03fdceb95c6d.yaml | 12 + .../nova-rolling-upgrades-5a3927330c6be5fd.yaml | 7 + .../notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml | 9 + .../nova_init_time_settings-cef7e89ab41da256.yaml | 23 + .../nova_use_cinder_v3_api-ce5f9c030591c404.yaml | 6 + .../notes/nova_uwsgi-af062fa20317d41c.yaml | 23 + ...via-init-config-overrides-554491baa2e97102.yaml | 10 + ...octavia_init_time_settings-4e66767550df88d.yaml | 23 + .../notes/octavia_uwsgi-f5d10fec3c1950bf.yaml | 15 + ...ron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml | 4 + ...octavia-haproxy-templates-18561d31bcd7151e.yaml | 7 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + .../pip-extra-index-remove-db32c770a70c8faa.yaml | 5 + .../plugins-remove-neutron-cbea1235e030e4f5.yaml | 5 + ...primary-container-rebuild-a2f4d7f33d66c843.yaml | 5 + .../notes/public-uri-proto-a1f05edd1a594f7f.yaml | 5 + .../notes/rabbimq-ssl-611102b1525ba5c2.yaml | 6 +- .../notes/recreate-option-d78bae1fd922a84d.yaml | 6 + .../remove-ceilometer-api-2bada67ecc58e18b.yaml | 11 + ...move-ceilometer-collector-aeaf6e9e1d3eb345.yaml | 9 + .../remove-console-keymap-ae255da81979a3a5.yaml | 13 + .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 + .../notes/remove-plumgrid-8c86d99999a2ca48.yaml | 5 + .../notes/remove-uca-rdo-8c625c61eeb9a771.yaml | 5 + ...glance_api_version_option-2d5508ed5deaba58.yaml | 6 + ...glance_api_version_option-5dc1d316c979e940.yaml | 5 + ...move_nova_cpu_mode_option-e9fcfc97aa13a29a.yaml | 9 + .../notes/remove_rpc_backend-1163da2fe9418315.yaml | 5 + .../notes/remove_rpc_backend-1729234e23895f18.yaml | 5 + .../notes/remove_rpc_backend-187132a35223d295.yaml | 5 + .../notes/remove_rpc_backend-7123da9fe3419215.yaml | 5 + .../notes/remove_rpc_backend-78139a469235891f.yaml | 5 + .../notes/remove_rpc_backend-8134a355d9864e12.yaml | 5 + .../notes/remove_rpc_backend-89135235e3513394.yaml | 5 + .../notes/remove_rpc_backend-9813a3455f234521.yaml | 5 + .../notes/remove_rpc_backend-a37345891a987f21.yaml | 5 + .../notes/remove_rpc_backend-a9832d7699ef1245.yaml | 5 + .../notes/replace-epel-df390980c03bbaa8.yaml | 9 + .../notes/rpc-encryption-b75fb0d08579a7dd.yaml | 7 + ...log_server_storage_policy-1dcdd5630acdeb79.yaml | 5 + ...ara-init-config-overrides-4c35b88618b0d0b4.yaml | 10 + ...sahara_init_time_settings-5ed44feb1285b867.yaml | 23 + .../notes/sahara_uwsgi-41e7e0a91a3f8c33.yaml | 15 + .../notes/save-mac-addresses-8b1e6e6301d99a37.yaml | 7 + ...service_net_endpoint_type-60dbb87c4f68403c.yaml | 7 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + ...sion-1-renumbering-fiesta-aa047fea3ea35e74.yaml | 20 + ...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml | 11 + .../notes/suse-support-7919a5e43ebdd793.yaml | 4 + .../notes/suse-support-f50df7e6b27e3e15.yaml | 4 + ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 10 + .../notes/swift-pypy-support-9706519c4b88a571.yaml | 4 +- .../swift_init_time_settings-20ea7817cbd2dca9.yaml | 23 + .../swift_internal_client-7c497400d7a8b4a2.yaml | 7 + ...est-remove-old-run-script-4365fa3b091169d8.yaml | 10 + ...ove-init-config-overrides-a78ed428a32adef8.yaml | 10 + .../trove_init_time_settings-dd293238c53c517.yaml | 23 + .../notes/ubuntu-s390x-0a561bc69354d48a.yaml | 3 + .../notes/ubuntu-s390x-c8dcc05e32e1d9eb.yaml | 3 + .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 + ...ate-multi-backend-options-4eb27290058401d3.yaml | 9 + .../update_translations-f950283d821bba05.yaml | 8 + ...space_group_and_host_vars-14f77b5eb518e32d.yaml | 22 + ...-rename-gnocchi-endpoints-87626018773f77e0.yaml | 5 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + requirements.txt | 8 +- scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-aio.sh | 8 +- scripts/bootstrap-ansible.sh | 130 ++- scripts/fastest-infra-wheel-mirror.py | 30 +- scripts/gate-check-commit.sh | 194 +++- scripts/gen-config.py | 7 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/inventory-manage.py | 19 +- scripts/keepalived_haproxy_notifications.sh | 34 + scripts/openstack-ansible.rc | 10 +- scripts/os-cmd | 2 +- scripts/pw-token-gen.py | 4 +- scripts/release-yaml-file-prep.py | 2 +- scripts/run-playbooks.sh | 132 --- scripts/run-upgrade.sh | 44 +- scripts/scripts-library.sh | 198 ++-- scripts/sources-branch-updater-lib.sh | 291 +++++ scripts/sources-branch-updater.sh | 260 +---- scripts/update-revision.sh | 3 +- .../playbooks/ansible_fact_cleanup.yml | 1 + .../playbooks/deploy-config-changes.yml | 73 +- .../playbooks/galera-cluster-rolling-restart.yml | 2 +- .../playbooks/memcached-flush.yml | 15 +- .../playbooks/user-secrets-adjustment.yml | 3 +- .../scripts/migrate_openstack_vars.py | 4 +- setup.cfg | 5 +- setup.py | 2 +- test-requirements.txt | 9 +- .../bootstrap-host/tasks/check-requirements.yml | 15 +- .../bootstrap-host/tasks/install_packages.yml | 109 ++ .../bootstrap-host/tasks/prepare_aio_config.yml | 52 +- .../tasks/prepare_loopback_cinder.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 72 +- .../bootstrap-host/tasks/prepare_networking.yml | 139 ++- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 79 ++ .../bootstrap-host/templates/apt-sources.list.j2 | 18 +- .../bootstrap-host/templates/osa_interfaces.cfg.j2 | 39 + .../templates/osa_interfaces_multinode.cfg.j2 | 6 +- .../templates/redhat_interface_alias.cfg.j2 | 5 + .../templates/redhat_interface_default.cfg.j2 | 11 + .../templates/rpm_interface_ifdown-post.cfg.j2 | 29 + .../templates/rpm_interface_ifup-post.cfg.j2 | 35 + .../templates/suse_interface_default.cfg.j2 | 8 + .../templates/user_variables.aio.yml.j2 | 151 ++- .../templates/user_variables.ceph.yml.j2 | 16 - .../templates/user_variables_ceph.yml.j2 | 29 + .../templates/user_variables_octavia.yml.j2 | 25 + .../templates/user_variables_translations.yml.j2 | 22 + tox.ini | 26 +- 592 files changed, 18710 insertions(+), 11783 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cbbac23..ed8d1a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +4 @@ -pip>=7.1.0 # MIT -setuptools!=24.0.0,>=16.0 # PSF/ZPL -wheel # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -9 +6 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -15,0 +13 @@ PyYAML>=3.10.0 # MIT +urllib3>=1.21.1 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7c6cede..78145f7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ bashate>=0.2 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -15,3 +15,2 @@ virtualenv>=13.1.0 # MIT -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -19 +18 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] ansible-hardening 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are psyched to announce the release of: ansible-hardening 16.0.0: OpenStack-Ansible: Host security hardening This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 16.0.0 ^^^^^^ Prelude ******* The first release of the Red Hat Enterprise Linux 7 STIG was entirely renumbered from the pre-release versions. Many of the STIG configurations simply changed numbers, but some were removed or changed. A few new configurations were added as well. New Features ************ * Deployers can now specify a custom package name or URL for an EPEL release package. CentOS systems use "epel-release" by default, but some deployers have a customized package that redirects servers to internal mirrors. * Deployers can provide a customized login banner via a new Ansible variable: "security_login_banner_text". This banner text is used for non-graphical logins, which includes console and ssh logins. * Fedora 26 is now supported. * The password minimum and maximum lifetimes are now opt-in changes that can take action against user accounts instead of printing debug warnings. Refer to the documentation for STIG requirements V-71927 and V-71931 to review the opt-in process and warnings. Upgrade Notes ************* * The EPEL repository is only installed and configured when the deployer sets "security_enable_virus_scanner" to "yes". This allows the ClamAV packages to be installed. If "security_enable_virus_scanner" is set to "no" (the default), the EPEL repository will not be added. See Bug 1702167 (https://bugs.launchpad.net/openstack- ansible/+bug/1702167) for more details. * Deployers now have the option to prevent the EPEL repository from being installed by the role. Setting "security_epel_install_repository" to "no" prevents EPEL from being installed. This setting may prevent certain packages from installing, such as ClamAV. Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. Security Issues *************** * The security role will no longer fix file permissions and ownership based on the contents of the RPM database by default. Deployers can opt in for these changes by setting "security_reset_perm_ownership" to "yes". * The tasks that search for ".shosts" and "shosts.equiv" files (STIG ID: RHEL-07-040330) are now skipped by default. The search takes a long time to complete on systems with lots of files and it also causes a significant amount of disk I/O while it runs. * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. * The latest version of the RHEL 7 STIG requires that a standard login banner is presented to users when they log into the system (V-71863). The security role now deploys a login banner that is used for console and ssh sessions. * The "cn_map" permissions and ownership adjustments included as part of RHEL-07-040070 and RHEL-07-040080 has been removed. This STIG configuration was removed in the most recent release of the RHEL 7 STIG. * The PKI-based authentication checks for RHEL-07-040030, RHEL-07-040040, and RHEL-07-040050 are no longer included in the RHEL 7 STIG. The tasks and documentation for these outdated configurations are removed. Bug Fixes ********* * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Changes in ansible-hardening 15.0.0.0rc1..16.0.0 ------------------------------------------------ ebf3331 Final docs updates for Pike 8fa95bf Add release note for F26 support 24abca2 Check apparmor_status output 429906a Fix AppArmor idempotency 3e84ecd Updated from OpenStack Ansible Tests 53b578d Update vars and test tooling for Pike 619c22a Fedora 26 support f576f24 Skip sysctl configs when enabled: no ca9b2e2 Updated from global requirements 3c63217 Change default prohibit root sshd password auth 78d37af Manually check apparmor_status 5d11c8c Updated from global requirements 758eab9 Fix auditd remote conf check 458e0e4 Install libpam-pwquality on Ubuntu f900089 Updated from OpenStack Ansible Tests 36b36b3 Re-organize defaults/main.yml bcce655 Allow epel-release package name customization a64c833 Conditionally install EPEL if needed 4449474 [Docs] Make install/usage docs more clear e112b92 Fix grep for sudoers w/o password d031846 Skip shadow checks for users w/o shadow data 923e219 [Docs] Adjust hardening domains page 6ae8823 Split long running tasks 4dd5e37 Avoid skipped package-related tasks 72afbcf Doc migration fixes 5ce112c Add equalto Jinja2 test for EL7 d2ab68b Correct the list of supported OS versions f422da8 Add support for the openSUSE Leap distributions 93d05c5 tasks: rhel7stig: aide: Fix conditionals for Ubuntu exclusions d996c60 tasks: rhel7stig: aide: Use 'aide -i' if 'aideinit' is not available 1a02653 Sync test files with the openstack-ansible-tests repository 90b1317 Trivial spelling fix d3c74ec tasks: rhel7stig: sshd: Avoid using with_fileglob for remote hosts 76b51e3 Doc updates 2b14fca Ensure that role tests pin pip/setuptools/wheel 875f635 [Docs] Overhaul STIG by tag docs 75b29b6 Add release note for password lifetime patches 3699f90 Actually set min/max password lifetime for account 6c9c7fa Get a list of all users + interactive users 38270e7 [Docs] Replace security role references 68ecd21 Fix ansible-hardening references in tox/playbook 3633d35 Remove 'physical_host' from inventory 97186f8 Initial Fedora 25 support 25acbff Fix incorrect tag for V-71895 d2617c7 Fix incorrect tag for V-71899 33d1b71 Fix incorrect tag for V-72267 cbf46a1 Fix .gitreview 5743ea8 Fix AppArmor dmesg grep task 61516fb Don't install python-ndg_httpsclient 40c744c Add more test coverage d7600f1 Fix bare jinja variable pam_password_file 4e9a8a1 Initial Debian 8 support 6e761ef Move tasks to 'accounts' file ed8364e [Docs] Put FAQ after getting started docs b83eb43 [Docs] Fix missing hyphen in status 5eb302c Fix numbering in AIDE config block 6ca676b Updated from global requirements 1525402 Enable auto-upgrade in the gate 45fd0a2 Check for grub2 defaults file 38255a8 Use zuul-cloner for tests repo in OpenStack-CI 1819c42 Configure AIDE before initial run 6a4f806 Remove test_plugins directory 5ef94bf Fix security role gate d4daf7e Update docs for Pike a547739 Cleanup tox.ini d833671 Fix warnings about jinja2 in when 5a4efe7 Maintain default ansible parameters ab9357d Skip ClamAV db update in gate c09763e Adjust readme/meta for Ansible 2.3 9361a14 Do not update grub if grub not used 005fa52 Make login banner customizable 1a1bc2b [Docs] Fix docs for V-72055 701c0b1 Fix path to daemon init params file 9d745ec Remove end spaces in STIG XML dccce1d Handle RHEL 7 STIG renumbering c1780c7 Change PASS_WARN_DAYS --> PASS_WARN_AGE 78d844a Rename vars/common.yml to vars/main.yml 12dd05b Install EPEL for security role 9efb815 Make .shosts search/removal opt in 8f7d132 Fix selinux check when disabled 209ce55 Add missing STIG ID tags 7caec98 Disable file perm/ownership reset 58038d4 Install python2-pyOpenSSL package on CentOS 13ef9cf Replace always_run with check_mode c7d9a79 Updated from global requirements 4cb2fa4 Enable ntp client functionality with chronyd 2e5fe3b Only enable ssh, not start 4a23bc8 Use async for RPM verification a2b3fe1 Use async for updating ClamAV DB 9af2e9e Use async for file perms corrections 389cccf Updated from global requirements b840612 Fix the regex a7c9d27 Updated from global requirements 1bd5dcc Correct minimum Ansible version in readme 455243c Typo fix: unneccessary => unnecessary 215fb08 Use https instead of http for git.openstack.org 600e5ab Replaces yaml.load() with yaml.safe_load() 78f0c9b Update reno for stable/ocata c15d75e Configure pam_faildelay on Ubuntu Diffstat (except docs and test files) ------------------------------------- .gitignore | 10 +- .gitreview | 3 +- README.md | 34 +- README.rst | 6 +- Vagrantfile | 82 +- bindep.txt | 49 +- defaults/main.yml | 617 +- ...Enterprise_Linux_7_STIG_V1R0-2_Manual-xccdf.xml | 10364 ---------------- ...t_Enterprise_Linux_7_STIG_V1R1_Manual-xccdf.xml | 12082 +++++++++++++++++++ files/V-38682-modprobe.conf | 2 +- files/aide_extra.conf | 14 - files/zypper-autoupdates | 3 + handlers/main.yml | 2 + meta/main.yml | 19 +- ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + ...zable-login-banner-string-d8d5ae874e8e49f3.yaml | 6 + ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + ...sion-1-renumbering-fiesta-aa047fea3ea35e74.yaml | 20 + releasenotes/source/conf.py | 15 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/main.yml | 14 +- tasks/rhel6stig/apt.yml | 2 +- tasks/rhel6stig/auth.yml | 4 +- tasks/rhel6stig/file_perms.yml | 4 +- tasks/rhel6stig/main.yml | 7 + tasks/rhel6stig/misc.yml | 8 + tasks/rhel6stig/sshd.yml | 28 +- tasks/rhel7stig/accounts.yml | 249 + tasks/rhel7stig/aide.yml | 100 +- tasks/rhel7stig/apt.yml | 67 +- tasks/rhel7stig/async_tasks.yml | 45 + tasks/rhel7stig/auditd.yml | 132 +- tasks/rhel7stig/auth.yml | 427 +- tasks/rhel7stig/dnf.yml | 93 + tasks/rhel7stig/file_perms.yml | 71 +- tasks/rhel7stig/graphical.yml | 55 +- tasks/rhel7stig/kernel.yml | 37 +- tasks/rhel7stig/lsm.yml | 66 +- tasks/rhel7stig/main.yml | 42 +- tasks/rhel7stig/misc.yml | 79 +- tasks/rhel7stig/packages.yml | 73 +- tasks/rhel7stig/rpm.yml | 58 +- tasks/rhel7stig/sshd.yml | 78 +- tasks/rhel7stig/yum.yml | 41 + tasks/rhel7stig/zypper.yml | 101 + templates/chrony.conf.j2 | 5 +- templates/dconf-screensaver-lock.j2 | 8 +- templates/dconf-session-user-config-lockout.j2 | 2 +- templates/osas-auditd-rhel7.j2 | 46 +- templates/pam_faillock.j2 | 2 +- templates/sshd_config_block.j2 | 36 +- test-requirements.txt | 11 +- tox.ini | 41 +- vars/common.yml | 337 - vars/debian.yml | 169 + vars/main.yml | 342 +- vars/redhat.yml | 22 +- vars/suse.yml | 102 + vars/ubuntu.yml | 159 - 576 files changed, 19001 insertions(+), 16214 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 326f6eb..6c9394a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-galera_server 16.0.0 (pike)
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are gleeful to announce the release of: openstack-ansible-galera_server 16.0.0: Galera Server role for OpenStack-Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 15.0.0.0rc1..16.0.0 -------------------------------------------------------------- 860028f Remove duplicate package pinning variable 605a04a Updated from OpenStack Ansible Tests 2d6253e Separate greenfield and upgrade tests 9de7579 Updated from OpenStack Ansible Tests c90dfd9 Fix MariaDB apt package pinning 64f2612 Update vars and test tooling for Pike 7ba7918 Toggle percona repo without extra-vars 0ecf042 Update UPPER_CONSTRAINTS_FILE for stable/pike bb785c4 Update .gitreview for stable/pike 3ebde68 Use block/rescue for error handling fdb6506 Add upgrade check for dnf 96021e8 Allow MariaDB repo overrides without extra-vars f876cf2 Allow external restart handler orchestration 475d2d8 Pass packages as a list e01ccd2 Updated from OpenStack Ansible Tests 994b96c Updated from OpenStack Ansible Tests fe365f1 Add dnf support afa4dc0 Updated from OpenStack Ansible Tests 5a4918b Updated from OpenStack Ansible Tests 7c08b6c Updated from global requirements 2e47ac7 Update URLs in documents according to document migration 9c15057 tasks: galera_install_zypper: Drop zypper workaround for Ansible < 2.2 5960d0e Updated from OpenStack Ansible Tests 0697020 vars: suse-42: Drop libgcc_s1 dependency 5c5108a Updated from OpenStack Ansible Tests 37645e5 Fix openstackdocstheme settings 34f52a6 Add ignore_none_type to config_template eabe8bf Updated from global requirements d4a2f20 Switch from oslosphinx to openstackdocstheme 3881511 Updated from OpenStack Ansible Tests 34d3b00 Add support for the openSUSE Leap distributions 588b9ce Move PrivateDevices before mysql password set bc96381 Dynamically include upgrade_check task files bea68f1 tasks: Set Restart option for systemd service file 0b06c16 Sync test files with the openstack-ansible-tests repository 531bf8e tasks: galera_upgrade_post: Retry if starting the MariaDB service failed 22a87dd vars: main: Split percona packages from the galera server ones. f46e152 Disable PrivateDevices for Galera on CentOS 7 6ac83ba Updated from global requirements aabfe39 Updated from global requirements f272754 Ensure that role tests pin pip/setuptools/wheel 2aaedec Updated from global requirements e05b6a8 Updated from global requirements 0581614 Use zuul-cloner for tests repo in OpenStack-CI 8cc1118 Use the correct cluster addresses for node list 963d7a0 Add fallback fetch for xtrabackup and qpress 6b5813b Standardize test vars 61609d8 Fix conditional check error when run galera-bootstrap tag eb5fc9c Added Galera SSL support db64210 Fix upgrades for multinode galera f939bf1 Upgrade: Make removal list distribution-specific 03b702b Rename vars/common.yml to vars/main.yml 1da7340 Force clean yum metadata when repo config changes cf1f8f3 Install python2-pyOpenSSL package on CentOS 2559482 Updated from global requirements 5b9ce0b Cap the number of worker threads 2f68dee Fix fact set using ternary filter 777641e Install packages in one step c277ab8 tasks: galera_upgrade_check: Fix yum tag 841ac16 Retry galera_running_check after systemctl daemon-reload e605fa9 Updated from global requirements 2a2062c Updated from global requirements 144216b Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant b8acdcf Use https instead of http for git.openstack.org 931b358 Update reno for stable/ocata d898abf Update galera running check for CentOS Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 +- .gitreview | 1 + README.rst | 2 +- Vagrantfile | 49 ++++++- bindep.txt | 58 +++++--- defaults/main.yml | 82 ++++++++++- handlers/main.yml | 47 +++++++ ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 +++ .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 ++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + setup.cfg | 2 +- setup.py | 2 +- tasks/galera_bootstrap.yml | 50 +++++-- tasks/galera_install.yml | 16 +-- tasks/galera_install_apt.yml | 115 ++++++--------- tasks/galera_install_dnf.yml | 1 + tasks/galera_install_yum.yml | 156 ++++++++++----------- tasks/galera_install_zypper.yml | 40 ++++++ tasks/galera_post_install.yml | 25 +++- tasks/galera_pre_install.yml | 85 +++++++---- tasks/galera_running_check.yml | 11 +- tasks/galera_secure_mysql.yml | 43 ++++++ tasks/galera_ssl.yml | 54 +++++++ tasks/galera_ssl_key_create.yml | 65 +++++++++ tasks/galera_upgrade_check.yml | 14 +- tasks/galera_upgrade_check_dnf.yml | 1 + tasks/galera_upgrade_check_yum.yml | 8 +- tasks/galera_upgrade_check_zypper.yml | 1 + tasks/galera_upgrade_post.yml | 7 + tasks/galera_upgrade_pre.yml | 8 +- tasks/main.yml | 10 ++ templates/cluster.cnf.j2 | 2 +- templates/my.cnf.j2 | 22 ++- templates/mysql_defaults.j2 | 2 +- templates/systemd.restart.conf.j2 | 9 ++ templates/without-privatedevices.conf.j2 | 2 + test-requirements.txt | 11 +- tox.ini | 42 ++++-- vars/main.yml | 33 +++++ vars/redhat-7.yml | 24 +++- vars/suse-42.yml | 56 ++++++++ vars/ubuntu-16.04.yml | 28 +++- 59 files changed, 1264 insertions(+), 400 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a5433f9..ae8c323 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -12,3 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -16 +15 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[packaging-rpm] pymod2pkg 0.10.1
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are amped to announce the release of: pymod2pkg 0.10.1: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.10.0..0.10.1 ----------------------------------- 4460124 Fix mappings for os-brick and mock 2a14645 Add tripleo-common for RDO openstack- packages d213083 add a number of simple mappings for RDO Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-)

1 0

[packaging-rpm] renderspec 1.7.0
by no-reply＠openstack.org 14 Sep '17

14 Sep '17

We are gleeful to announce the release of: renderspec 1.7.0: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.6.2..1.7.0 ---------------------------------- 2a0409a Support different py versions in py2name() and py2pkg() 031789f Updated from global requirements 31a160e Fix rc version handling on SUSE 3904731 Updated from global requirements 4ffe07d Introduce a new --input-template-format switch 9dcd623 Move context related functions to extra file bd6d9d4 Clarify variable name b784190 Updated from global requirements 05a24be Add context function `url_pypi` e7e683d Updated from global requirements Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 282 ++++------------------------------------ renderspec/contextfuncs.py | 314 +++++++++++++++++++++++++++++++++++++++++++++ requirements.txt | 4 +- test-requirements.txt | 6 +- 6 files changed, 459 insertions(+), 287 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e2e6611..498f6a7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) -pymod2pkg>=0.7.0 # Apache-2.0 -PyYAML>=3.10.0 # MIT +pymod2pkg!=0.8.0,>=0.7.0 # Apache-2.0 +PyYAML>=3.10 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 702d9ee..9dd2f8e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ testrepository>=0.0.18 # Apache-2.0/BSD -testresources>=0.2.4 # Apache-2.0/BSD +testresources>=2.0.0 # Apache-2.0/BSD @@ -9 +9 @@ ddt>=1.0.1 # MIT -mock>=2.0 # BSD +mock>=2.0.0 # BSD @@ -11 +11 @@ mock>=2.0 # BSD -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD

1 0

[manila] manila 5.0.1 (pike)
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We are overjoyed to announce the release of: manila 5.0.1: Shared Storage for OpenStack This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/manila/ For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixed the NetApp ONTAP driver to handle reverting to replicated and migrated snapshots. Changes in manila 5.0.0..5.0.1 ------------------------------ b30851f Fix incorrect literal_block error when build docs 038eb7b NetApp ONTAP: Fix revert-to-snapshot 4118997 Fix man page build 2eca946 doc migration: configuration reference 56bcb28 doc migration: cli reference 081251d doc migration: user-guide 6a1612f doc migration: install guide b251790 doc migration: admin guide 8554022 doc migration: new directory layout 6b4b365 doc migration: openstackdocstheme completion e391476 Update UPPER_CONSTRAINTS_FILE for stable/pike 28c1620 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../admin/shared-file-systems-crud-share.rst | 771 +++++ .../admin/shared-file-systems-key-concepts.rst | 119 + ...ared-file-systems-manage-and-unmanage-share.rst | 162 + ...d-file-systems-manage-and-unmanage-snapshot.rst | 107 + .../admin/shared-file-systems-multi-backend.rst | 59 + .../admin/shared-file-systems-network-plugins.rst | 88 + .../admin/shared-file-systems-networking.rst | 17 + .../admin/shared-file-systems-scheduling.rst | 33 + .../shared-file-systems-security-services.rst | 186 + .../admin/shared-file-systems-services-manage.rst | 16 + .../admin/shared-file-systems-share-management.rst | 33 + .../admin/shared-file-systems-share-migration.rst | 306 ++ .../admin/shared-file-systems-share-networks.rst | 151 + .../shared-file-systems-share-replication.rst | 601 ++++ .../admin/shared-file-systems-share-resize.rst | 111 + .../admin/shared-file-systems-share-types.rst | 179 + .../admin/shared-file-systems-troubleshoot.rst | 107 + .../figures/openstack-spectrumscale-setup.JPG | Bin 0 -> 77400 bytes .../configuration/shared-file-systems/api.rst | 11 + .../shared-file-systems/config-options.rst | 18 + .../configuration/shared-file-systems/drivers.rst | 67 + .../drivers/cephfs-native-driver.rst | 294 ++ .../drivers/dell-emc-vmax-driver.rst | 309 ++ .../drivers/emc-isilon-driver.rst | 80 + .../drivers/emc-unity-driver.rst | 265 ++ .../shared-file-systems/drivers/emc-vnx-driver.rst | 296 ++ .../shared-file-systems/drivers/generic-driver.rst | 110 + .../drivers/glusterfs-driver.rst | 92 + .../drivers/glusterfs-native-driver.rst | 123 + .../drivers/hdfs-native-driver.rst | 85 + .../drivers/hitachi-hnas-driver.rst | 482 +++ .../drivers/hitachi-hsp-driver.rst | 212 ++ .../drivers/hpe-3par-share-driver.rst | 643 ++++ .../drivers/huawei-nas-driver.rst | 132 + .../drivers/ibm-spectrumscale-driver.rst | 177 + .../shared-file-systems/drivers/lvm-driver.rst | 89 + .../drivers/maprfs-native-driver.rst | 137 + .../drivers/netapp-cluster-mode-driver.rst | 87 + .../shared-file-systems/drivers/quobyte-driver.rst | 79 + .../drivers/zfs-on-linux-driver.rst | 190 ++ .../drivers/zfssa-manila-driver.rst | 123 + .../shared-file-systems/log-files.rst | 30 + .../configuration/shared-file-systems/overview.rst | 92 + .../shared-file-systems/samples/api-paste.ini.rst | 9 + .../shared-file-systems/samples/index.rst | 12 + .../shared-file-systems/samples/manila.conf.rst | 13 + .../shared-file-systems/samples/policy.json.rst | 9 + .../shared-file-systems/samples/rootwrap.conf.rst | 10 + .../configuration/tables/manila-glusterfs.inc | 42 + .../configuration/tables/manila-hds_hnas.inc | 50 + .../configuration/tables/manila-scheduler.inc | 40 + .../tables/manila-spectrumscale_ces.inc | 57 + .../tables/manila-spectrumscale_knfs.inc | 61 + .../contributor/api_microversion_history.rst | 1 + .../contributor/capabilities_and_extra_specs.rst | 294 ++ .../development-environment-devstack.rst | 106 + .../contributor/driver_filter_goodness_weigher.rst | 360 ++ .../contributor/export_location_metadata.rst | 33 + .../contributor/netapp_cluster_mode_driver.rst | 120 + .../contributor/pool-aware-manila-scheduler.rst | 223 ++ .../share_back_ends_feature_support_mapping.rst | 275 ++ .../devref/development-environment-devstack.rst | 106 - .../devref/driver_filter_goodness_weigher.rst | 360 -- .../share_back_ends_feature_support_mapping.rst | 275 -- .../controller-node-common-configuration.rst | 76 + .../common/controller-node-prerequisites.rst | 208 ++ .../common/dhss-false-mode-configuration.rst | 98 + .../install/common/dhss-false-mode-intro.rst | 8 + .../dhss-false-mode-using-shared-file-systems.rst | 176 + .../common/dhss-true-mode-configuration.rst | 94 + .../dhss-true-mode-using-shared-file-systems.rst | 269 ++ .../common/share-node-common-configuration.rst | 81 + .../common/share-node-share-server-modes.rst | 42 + .../get-started-with-shared-file-systems.rst | 40 + .../netapp/dataontap/cluster_mode/lib_base.py | 9 +- .../netapp/dataontap/cluster_mode/test_lib_base.py | 26 +- ...p-cdot-revert-to-snapshot-5e1be65260454988.yaml | 4 + releasenotes/source/conf.py | 14 +- test-requirements.txt | 1 - tox.ini | 2 +- 257 files changed, 27839 insertions(+), 9943 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7ef57e2..756fe17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +14,0 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx>=4.7.0 # Apache-2.0

1 0

[manila] manila-ui 2.10.2 (pike)
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We are pumped to announce the release of: manila-ui 2.10.2: Manila Management Dashboard This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through launchpad: https://bugs.launchpad.net/manila-ui For more details, please see below. Changes in manila-ui 2.10.1..2.10.2 ----------------------------------- e5e8628 Manila-UI breaks Horizon's "Network" panel group 56a41b4 doc migration: warning-is-error bea1efa doc migration: new directory layout e6c2eb8 doc migration: openstackdocstheme 9886487 Update UPPER_CONSTRAINTS_FILE for stable/pike b1605a4 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + README.rst | 2 +- manila_ui/dashboards/project/shares/__init__.py | 4 ++-- releasenotes/source/conf.py | 14 +++++++++++--- setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 2 +- 17 files changed, 59 insertions(+), 40 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 39f886c..8fdb26e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +15 @@ sphinx>=1.6.2 # BSD -oslosphinx>=4.7.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0

1 0

[manila] python-manilaclient 1.17.2 (pike)
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We are ecstatic to announce the release of: python-manilaclient 1.17.2: Client library for OpenStack Manila API. This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-manilaclient Download the package from: https://pypi.python.org/pypi/python-manilaclient Please report issues through launchpad: https://bugs.launchpad.net/python-manilaclient For more details, please see below. 1.17.2 ^^^^^^ Bug Fixes * The list command for --os-share-api-version <=2.34 has been fixed to not error out in case there are no search options/filters specified. Changes in python-manilaclient 1.17.1..1.17.2 --------------------------------------------- e53d06f doc-migration: new directory layout 2183b59 doc migration: openstackdocstheme completion bb6b736 Add rally job manifests b866d39 Updated from global requirements 0fa1a03 Fix list command when not given search_opts 1c88b52 Update UPPER_CONSTRAINTS_FILE for stable/pike abcdd29 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manilaclient/v2/shares.py | 1 + rally-jobs/rally-manila-no-ss.yaml | 93 ++++++++++ rally-jobs/rally-manila.yaml | 199 +++++++++++++++++++++ ...hen-not-given-search-opts-c06af7b344e9cb91.yaml | 4 + releasenotes/source/conf.py | 6 +- requirements.txt | 2 +- tox.ini | 2 +- 17 files changed, 455 insertions(+), 144 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e60a41d..d201afa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -ipaddress>=1.0.7;python_version<'3.3' # PSF +ipaddress>=1.0.7;python_version<'3.3' # PSF

1 0

[packaging-rpm] pymod2pkg 0.10.0
by no-reply＠openstack.org 13 Sep '17

13 Sep '17

We exuberantly announce the release of: pymod2pkg 0.10.0: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.9.0..0.10.0 ---------------------------------- b06c67d Add mapping for unversioned names 115f0a2 Add SUSE exception for python-devel Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 196 ++++++++++++++++++++++++++++++-------------------- 2 files changed, 142 insertions(+), 91 deletions(-)

1 0

[telemetry] ceilometer 7.1.1 (newton)
by no-reply＠openstack.org 12 Sep '17

12 Sep '17

We are delighted to announce the release of: ceilometer 7.1.1: OpenStack Telemetry This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ceilometer/ For more details, please see below. Changes in ceilometer 7.1.0..7.1.1 ---------------------------------- a5e6a08 keystone: pass region name to keystone client 39196af snmp: Fix discovery when total memory is missing 00d2f6f Fixed ceilometer arithmetic transformer bug 18f2b02 Fixed error use retry_on_disconnect decorator Diffstat (except docs and test files) ------------------------------------- ceilometer/compute/virt/libvirt/inspector.py | 4 ++++ ceilometer/hardware/inspector/snmp.py | 8 ++++++-- ceilometer/keystone_client.py | 4 +++- ceilometer/transformer/arithmetic.py | 13 ++++++++----- 4 files changed, 21 insertions(+), 8 deletions(-)

1 0

[telemetry] ceilometer 9.0.1 (pike)
by no-reply＠openstack.org 12 Sep '17

12 Sep '17

We are gleeful to announce the release of: ceilometer 9.0.1: OpenStack Telemetry This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/ceilometer/ For more details, please see below. Changes in ceilometer 9.0.0..9.0.1 ---------------------------------- 11be2c8 keystone: pass region name to keystone client ef3cff8 support new gnocchiclient interface d17d437 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ceilometer/gnocchi_client.py | 8 ++++---- ceilometer/keystone_client.py | 6 ++++-- 3 files changed, 9 insertions(+), 6 deletions(-)

1 0

[telemetry] ceilometer 8.1.1 (ocata)
by no-reply＠openstack.org 12 Sep '17

12 Sep '17

We jubilantly announce the release of: ceilometer 8.1.1: OpenStack Telemetry This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ceilometer/ For more details, please see below. Changes in ceilometer 8.1.0..8.1.1 ---------------------------------- d930f08 keystone: pass region name to keystone client e357fca Imported Translations from Zanata c154bef Imported Translations from Zanata c0dabd1 snmp: Fix discovery when total memory is missing 40b36e0 Fixed ceilometer arithmetic transformer bug 9c88880 Fix inspect_vnics error for libvirt 73bd95d Switch to use stable data_utils Diffstat (except docs and test files) ------------------------------------- ceilometer/compute/virt/libvirt/inspector.py | 8 +- ceilometer/hardware/inspector/snmp.py | 8 +- ceilometer/keystone_client.py | 6 +- ceilometer/locale/ko_KR/LC_MESSAGES/ceilometer.po | 117 +++++++++++++++++++-- ceilometer/locale/pt_BR/LC_MESSAGES/ceilometer.po | 26 ++++- .../tempest/api/test_telemetry_notification_api.py | 2 +- .../test_object_storage_telemetry_middleware.py | 2 +- .../unit/compute/virt/libvirt/test_inspector.py | 18 +++- ceilometer/transformer/arithmetic.py | 13 ++- 10 files changed, 171 insertions(+), 31 deletions(-)

1 0

[packaging-rpm] pymod2pkg 0.9.0
by no-reply＠openstack.org 12 Sep '17

12 Sep '17

We are chuffed to announce the release of: pymod2pkg 0.9.0: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.8.4..0.9.0 --------------------------------- 3e85d93 Add mapping of tempest-horizon for RDO 2f6b986 Add support for python3 packages c05fc63 Updated from global requirements e4e6fa1 Added name conversion support for tempest-plugin 689922d Support FWaaS/VPNaaS horizon ui/dashboard plugins on SUSE Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 176 ++++++++++++++++++++++++++++++++++---------------- test-requirements.txt | 2 +- 3 files changed, 191 insertions(+), 66 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cf3e149..27581c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ testrepository>=0.0.18 # Apache-2.0/BSD -testresources>=0.2.4 # Apache-2.0/BSD +testresources>=2.0.0 # Apache-2.0/BSD

1 0

[documentation] openstackdocstheme 1.17.0
by no-reply＠openstack.org 12 Sep '17

12 Sep '17

We are satisfied to announce the release of: openstackdocstheme 1.17.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. 1.17.0 ^^^^^^ Prelude ******* Adds scoped search so that readers can search within project documentation only. New Features ************ * Adds ability to use the Sphinx search implementation only for the content for the project, such as nova or keystone. The default settings set the search scope to within the built version and only for .html files. * Readers access the search functionality through a link to Search from the top-most landing page for the project documentation. Changes in openstackdocstheme 1.16.1..1.17.0 -------------------------------------------- 1eaa00b Updated from global requirements f708d19 Fix link to openstackdays d83f82d [www] Fix link to COA a17640a Add support for sphinx sidebar role 5c1714c Remove stray characters from demo af471ca Update the configuration of generating a PDF document dddd24c Updated from global requirements c020af8 Sync language list with openstack-manuals repo a5ceb6f Bring back local search 8b21fea Cleanup setup.cfg 1c5afab Updated from global requirements 6fbcadb Break cycle dependency with reno a25417c Updated from global requirements 8454efe Break cycle dependency with os-api-ref b080d0d Remove navigation.html 0e38191 Update links in README 9b52870 Updated from global requirements de9b589 Documents how to set conf.py for PDF generation 2e8624f show release series names not version tags e07ef49 Link to latest version Diffstat (except docs and test files) ------------------------------------- README.rst | 6 +-- openstackdocstheme/__init__.py | 59 ++++++++++++++-------- openstackdocstheme/theme/openstackdocs/header.html | 4 +- openstackdocstheme/theme/openstackdocs/layout.html | 3 +- .../theme/openstackdocs/navigation.html | 29 ----------- .../theme/openstackdocs/script_footer.html | 17 +++++++ openstackdocstheme/theme/openstackdocs/search.html | 19 ++++++- .../theme/openstackdocs/sidebartoc_menu.html | 6 ++- .../theme/openstackdocs/static/css/combined.css | 20 +++++++- openstackdocstheme/theme/openstackdocs/theme.conf | 1 + .../local-project-search-e6f00a84f2eed0a6.yaml | 12 +++++ requirements.txt | 1 + setup.cfg | 9 ++++ test-requirements.txt | 4 -- tox.ini | 1 + 18 files changed, 174 insertions(+), 77 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6de9f4e..f2932ea 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 +dulwich>=0.15.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index db88cd8..dfaad59 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,4 +8,0 @@ sphinx>=1.6.2 # BSD - -reno!=2.3.1,>=1.8.0 # Apache-2.0 - -os-api-ref>=1.0.0 # Apache-2.0

1 0

[zun] zun 0.2.1 (pike)
by no-reply＠openstack.org 10 Sep '17

10 Sep '17

We are jazzed to announce the release of: zun 0.2.1: Container Management service for OpenStack This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through launchpad: https://bugs.launchpad.net/zun For more details, please see below. Changes in zun 0.2.0..0.2.1 --------------------------- ee96844 Keep the trace when reraising docker error 494d954 Fix the wrong parameter in wsgi script baca2a0 Fix the undefined NetworkNotFound exception ff4eff4 Fix the undefined InvalidInput exception 146ddc8 Fix error in api-ref about host dbfabab Update UPPER_CONSTRAINTS_FILE for stable/pike f8c8ac8 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/hosts.inc | 6 ------ api-ref/source/parameters.yaml | 13 +++++++++++++ tox.ini | 2 +- zun/api/app.wsgi | 2 +- zun/api/controllers/v1/containers.py | 2 +- zun/common/exception.py | 4 ++++ zun/container/docker/utils.py | 4 +++- 8 files changed, 24 insertions(+), 10 deletions(-)

1 0

[tripleo] tripleo-ui 7.4.0 (pike)
by no-reply＠openstack.org 10 Sep '17

10 Sep '17

We enthusiastically announce the release of: tripleo-ui 7.4.0: tripleo-ui This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. Changes in tripleo-ui 7.3.0..7.4.0 ---------------------------------- 4fab899 Imported Translations from Zanata 16f738e Imported Translations from Zanata 27285c3 Prepare 7.4.0 (pike-rc2) 4c8df4f Use Python to compute release notes version 00379e6 Imported Translations from Zanata f61181a Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + i18n/locales/es.json | 11 +++++++ i18n/locales/ja.json | 74 ++++++++++++++++++++++++++++++++++++++++++++- i18n/locales/zh-CN.json | 17 +++++++++++ npm-shrinkwrap.json | 2 +- package.json | 2 +- releasenotes/source/conf.py | 4 +-- 7 files changed, 106 insertions(+), 5 deletions(-)

1 0

[tripleo] tripleo-validations 7.4.0 (pike)
by no-reply＠openstack.org 10 Sep '17

10 Sep '17

We are chuffed to announce the release of: tripleo-validations 7.4.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo/+bugs?field.tag=validations For more details, please see below. Changes in tripleo-validations 7.3.0..7.4.0 ------------------------------------------- efe8a72 Lazy load the entire stack instead of single outputs dc67bc6 Updated from global requirements 847fb3d Update UPPER_CONSTRAINTS_FILE for stable/pike a2b4f22 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + test-requirements.txt | 2 +- tox.ini | 2 +- tripleo_validations/inventory.py | 41 ++++++++++++++++++----------- 5 files changed, 36 insertions(+), 29 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ee1419a..6fd0c5c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -21 +21 @@ testtools>=1.4.0 # MIT -reno>=2.5.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0