January 2018 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-os_keystone 16.0.6 (pike)
by no-reply＠openstack.org 22 Jan '18

22 Jan '18

We joyfully announce the release of: openstack-ansible-os_keystone 16.0.6: os_keystone for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 16.0.4..16.0.6 ------------------------------------------------------- ffc9c9b Remove python-ldap and add pyldap ef9fc8f Remove keystone_token_driver variable 6d131ca Remove uw_nginx jobs Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +--- meta/main.yml | 4 ---- tasks/main.yml | 2 +- templates/keystone.conf.j2 | 9 --------- tox.ini | 10 ---------- zuul.d/jobs.yaml | 17 ----------------- zuul.d/project.yaml | 3 --- 7 files changed, 2 insertions(+), 47 deletions(-)

1 0

[openstackansible] openstack-ansible 16.0.6 (pike)
by no-reply＠openstack.org 22 Jan '18

22 Jan '18

We are pumped to announce the release of: openstack-ansible 16.0.6: Ansible playbooks for deploying OpenStack This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.6 ^^^^^^ New Features ************ * A new variable has been added to allow a deployer to control the restart of containers from common-tasks/os-lxc-container-setup.yml. This new option is "lxc_container_allow_restarts" and has a default of "true". If a deployer wishes to disable the auto-restart functionality they can set this value to "false" and automatic container restarts will be disabled. This is a complement to the same option already present in the lxc_container_create role. This option is useful to avoid uncoordinated restarts of galera or rabbitmq containers if the LXC container configuration changes in a way that requires a restart. * The galera cluster now supports cluster health checks over HTTP using port 9200. The new cluster check ensures a node is healthy by running a simple query against the wsrep sync status using monitoring user. This change will provide for a more robust cluster check ensuring we have the most fault tolerant galera cluster possible. * Galera healthcheck has been improved, and relies on an xinetd service. By default, the service is unaccessible (filtered with the no_access directive). You can override the directive by setting any xinetd valid value to "galera_monitoring_allowed_source". Other Notes *********** * CentOS deployments require a special COPR repository for modern LXC packages. The COPR repository is not mirrored at this time and this causes failed gate tests and production deployments. The role now syncs the LXC packages down from COPR to each host and builds a local LXC package repository in */opt/thm-lxc2.0*. This greatly reduces the amount of times that packages must be downloaded from the COPR server during deployments, which will reduce failures until the packages can be hosted with a more reliable source. In addition, this should speed up playbook runs since "yum" can check a locally-hosted repository instead of a remote repository with availability and performance challenges. Changes in openstack-ansible 16.0.5..16.0.6 ------------------------------------------- 9b85747 Fix sources-branch-updater and add docs ddd7fc8 Define GATE_EXIT_RUN_DSTAT before use efa3bf7 Update all SHAs for Pike 2017-12-20 bfbd7b3 Fix Aodh's health checks (pike backport) f458161 Update repo_build role SHA for manifest fix bf18e00 designate variables for neutron integration dd7d7fd Avoid using gather_facts as a variable 9f9cddd Fix release-yaml-file-prep.py to include ansible-hardening 43ae60f Fix automatic log copying in Zuul runs 0c911ed Reduce console output in gate jobs 074aaa0 Skip ansible-lint test against roles 8c0ce1c Change the galera health check for better cluster health e73d9b5 Only build ARA report when test fails 19107d0 Allow disabling container restarts 7a2e036 Avoid using 'roles' reserved variable 96781c5 Update all SHAs for 16.0.6 b3d5ad8 Fix crontab errors on CentOS/SUSE 1132463 Disable offloading in test by default bc1fd85 Run ARA only if enabled Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 24 ++--- global-requirement-pins.txt | 4 +- group_vars/all/all.yml | 2 +- group_vars/all/designate.yml | 29 ++++++ group_vars/all/haproxy.yml | 5 +- group_vars/designate_all.yml | 6 -- group_vars/galera_all.yml | 5 + playbooks/common-playbooks/cinder.yml | 2 +- playbooks/common-playbooks/glance.yml | 2 +- playbooks/common-playbooks/neutron.yml | 2 +- playbooks/common-playbooks/nova.yml | 2 +- playbooks/common-tasks/os-lxc-container-setup.yml | 1 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 66 ++++++------- playbooks/etcd-install.yml | 2 +- playbooks/galera-install.yml | 4 +- playbooks/haproxy-install.yml | 4 +- playbooks/lxc-containers-create.yml | 2 +- playbooks/lxc-hosts-setup.yml | 2 +- playbooks/memcached-install.yml | 2 +- playbooks/openstack-hosts-setup.yml | 2 +- playbooks/os-aodh-install.yml | 2 +- playbooks/os-barbican-install.yml | 2 +- playbooks/os-ceilometer-install.yml | 2 +- playbooks/os-designate-install.yml | 2 +- playbooks/os-heat-install.yml | 2 +- playbooks/os-horizon-install.yml | 2 +- playbooks/os-ironic-install.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- playbooks/os-molteniron-install.yml | 2 +- playbooks/os-octavia-install.yml | 2 +- playbooks/os-rally-install.yml | 2 +- playbooks/os-sahara-install.yml | 2 +- playbooks/os-swift-install.yml | 2 +- playbooks/os-swift-sync.yml | 2 +- playbooks/os-tempest-install.yml | 2 +- playbooks/os-trove-install.yml | 2 +- playbooks/rabbitmq-install.yml | 2 +- playbooks/repo-build.yml | 2 +- playbooks/repo-server.yml | 2 +- .../system_crontab_coordination/tasks/main.yml | 2 + playbooks/rsyslog-install.yml | 2 +- playbooks/security-hardening.yml | 2 +- playbooks/unbound-install.yml | 2 +- ...-container-restart-option-acf4cd9a20ef61e4.yaml | 15 +++ ...-local-lxc-package-mirror-843e1ceac2469547.yaml | 16 ++++ .../notes/clustecheck-9311d05fb32f13b3.yaml | 7 ++ .../notes/new_healthcheck-9e559565745defd0.yaml | 7 ++ scripts/ansible-role-requirements-editor.py | 2 +- scripts/gate-check-commit.sh | 10 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/release-yaml-file-prep.py | 4 +- scripts/scripts-library.sh | 40 ++++++-- scripts/sources-branch-updater-lib.sh | 103 ++++++++++++--------- scripts/sources-branch-updater.sh | 43 ++++++++- scripts/test-log-collect.sh | 26 ++++++ .../templates/redhat_interface_default.cfg.j2 | 1 + .../templates/suse_interface_default.cfg.j2 | 1 + tox.ini | 1 + zuul.d/jobs.yaml | 1 + zuul.d/playbooks/post.yml | 32 +++++++ 64 files changed, 435 insertions(+), 160 deletions(-)

1 0

[keystone] keystoneauth1 3.4.0 (queens)
by no-reply＠openstack.org 21 Jan '18

21 Jan '18

We are gleeful to announce the release of: keystoneauth1 3.4.0: Authentication Library for OpenStack Identity This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/keystoneauth Download the package from: https://pypi.python.org/pypi/keystoneauth1 Please report issues through launchpad: https://bugs.launchpad.net/keystoneauth For more details, please see below. 3.4.0 ^^^^^ New Features * [blueprint application-credentials (https://blueprints.launchpad.net/keystone/+spec/application- credentials)] Support for authentication via an application credential has been added. Keystoneauth can now be used to authenticate to Identity servers that support application credentials. * [blueprint system-scope (https://blueprints.launchpad.net/keystone/+spec/system-scope) Keystoneauth now has the ability to authenticate for system-scoped tokens, which were implemented during the Queens development cycle. System-scoped tokens will eventually be required to separate system- level APIs from project-level APIs, allowing for better security via scoped RBAC. Changes in keystoneauth1 3.3.0..3.4.0 ------------------------------------- 3bd74f2 Add documentation and release note for app creds c2ae9e2 Add support for application credentials ff44f4f Updated from global requirements f9ab615 Implement system scope 8026c96 Use stestr in tox.ini 4699dac Updated from global requirements dc667f7 Fix masked variable name c56f4f7 Shift additional_user_agent in the stack e1243d9 Updated from global requirements 4882913 Fix docs builds 7fc8518 Add osc, shade and sdk tips jobs f166819 Mark SAML loader properties as required 8e7cfab Make none auth usable in CLI Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 ++ keystoneauth1/access/access.py | 22 +++++- keystoneauth1/access/service_catalog.py | 6 +- keystoneauth1/extras/_saml2/_loading.py | 18 ++++- keystoneauth1/fixture/v3.py | 18 ++++- keystoneauth1/identity/__init__.py | 6 +- keystoneauth1/identity/generic/base.py | 3 + keystoneauth1/identity/v3/__init__.py | 6 +- .../identity/v3/application_credential.py | 89 ++++++++++++++++++++++ keystoneauth1/identity/v3/base.py | 14 +++- keystoneauth1/identity/v3/password.py | 1 + keystoneauth1/loading/_plugins/identity/v3.py | 40 ++++++++++ keystoneauth1/loading/_plugins/noauth.py | 16 +++- keystoneauth1/loading/identity.py | 2 + keystoneauth1/noauth.py | 15 +++- keystoneauth1/session.py | 6 +- .../unit/extras/kerberos/test_fedkerb_loading.py | 3 +- .../unit/extras/kerberos/test_kerberos_loading.py | 3 +- ...p-application-credentials-416a1f8bb2311e04.yaml | 7 ++ .../notes/bp-system-scope-29e9c597039ddb1e.yaml | 8 ++ setup.cfg | 1 + test-requirements.txt | 8 +- tox.ini | 4 +- 31 files changed, 496 insertions(+), 29 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a203c5d..bcc0348 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ mock>=2.0.0 # BSD -oslo.config>=4.6.0 # Apache-2.0 +oslo.config>=5.1.0 # Apache-2.0 @@ -14,2 +14,2 @@ openstackdocstheme>=1.17.0 # Apache-2.0 -oslo.utils>=3.31.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -20 +20 @@ requests-mock>=1.1.0 # Apache-2.0 -sphinx>=1.6.2 # BSD +sphinx!=1.6.6,>=1.6.2 # BSD

1 0

[puppet] puppet-vitrage 1.1.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We are amped to announce the release of: puppet-vitrage 1.1.0: Puppet module for OpenStack Vitrage This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-vitrage/ For more details, please see below. 1.1.0 ^^^^^ Known Issues * Keystone v2.0 API was removed so we need to set a default value for user_domain_name and project_domain name, which will be Default as it is already in some other classes in modules. Changes in puppet-vitrage 1.0.0..1.1.0 -------------------------------------- 981f01d Prepare for Pike post release c786a46 Prepare for post-Pike updates e0c3145 [pike] Add Puppet package to bindep, for module build 7c26516 Configure *_domain_name to Default by default 96ec982 Switch to Zuul v3 testing ef4eb45 Switch to use keystone v3 c6b17c7 Update UPPER_CONSTRAINTS_FILE for stable/pike 43ec785 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 ++ bindep.txt | 1 + manifests/auth.pp | 4 +- manifests/keystone/authtoken.pp | 8 +- metadata.json | 113 +++++++++++++-------- .../notes/default_domain-8403fba2483f6a63.yaml | 6 ++ spec/acceptance/vitrage_wsgi_apache_spec.rb | 2 +- spec/classes/vitrage_auth_spec.rb | 4 +- spec/classes/vitrage_keystone_authtoken_spec.rb | 4 +- tox.ini | 2 +- 11 files changed, 95 insertions(+), 56 deletions(-)

1 0

[puppet] puppet-trove 11.4.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We enthusiastically announce the release of: puppet-trove 11.4.0: Puppet module for OpenStack Trove This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-trove/ For more details, please see below. Changes in puppet-trove 11.3.1..11.4.0 -------------------------------------- c18a5bf Prepare for Pike post release dd6f333 Run puppet-openstack-beaker-jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metadata.json | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-)

1 0

[puppet] puppet-tempest 11.5.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We are delighted to announce the release of: puppet-tempest 11.5.0: Puppet module for OpenStack Tempest This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-tempest/ For more details, please see below. Changes in puppet-tempest 11.4.0..11.5.0 ---------------------------------------- f44fb1f Prepare for Pike post release 4ec572a Run puppet-openstack-beaker-jobs 8b05e2a Switch to Zuul v3 testing Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +++++++ metadata.json | 6 +++--- 2 files changed, 10 insertions(+), 3 deletions(-)

1 0

[puppet] puppet-vswitch 7.4.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We exuberantly announce the release of: puppet-vswitch 7.4.0: Puppet module for OpenStack Vswitch This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-vswitch/ For more details, please see below. Changes in puppet-vswitch 7.3.1..7.4.0 -------------------------------------- aeaef73 Prepare for Pike post release 69c6181 Run puppet-openstack-beaker-jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metadata.json | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

[puppet] puppet-zaqar 11.4.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We are stoked to announce the release of: puppet-zaqar 11.4.0: Puppet module for OpenStack Zaqar This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-zaqar/ For more details, please see below. Changes in puppet-zaqar 11.3.1..11.4.0 -------------------------------------- b938300 Release Pike 6319472 Run puppet-openstack-beaker-jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metadata.json | 10 +++++----- 2 files changed, 6 insertions(+), 5 deletions(-)

1 0

[puppet] puppet-tacker 11.4.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We are jazzed to announce the release of: puppet-tacker 11.4.0: Puppet module for OpenStack Tacker This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-tacker/ For more details, please see below. Changes in puppet-tacker 11.3.1..11.4.0 --------------------------------------- d896981 Prepare for Pike post release 45c3193 Run puppet-openstack-beaker-jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metadata.json | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-)

1 0

[puppet] puppet-mistral 11.4.0 (pike)
by no-reply＠openstack.org 19 Jan '18

19 Jan '18

We are ecstatic to announce the release of: puppet-mistral 11.4.0: Puppet module for OpenStack Mistral This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/puppet-mistral/ For more details, please see below. Changes in puppet-mistral 11.3.1..11.4.0 ---------------------------------------- b454433 Prepare for Pike post release 7298ce3 Run puppet-openstack-beaker-jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metadata.json | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-)

1 0