October 2018 - Release-announce - lists.openstack.org

kolla-ansible 7.0.0 (rocky)
by no-reply＠openstack.org 24 Oct '18

24 Oct '18

We enthusiastically announce the release of: kolla-ansible 7.0.0: Ansible Deployment of Kolla containers This release is part of the rocky release series. Download the package from: https://tarballs.openstack.org/kolla-ansible/ For more details, please see below. 7.0.0 ^^^^^ New Features * "opendaylight_release" variable is removed, version is discovered automatically while booting features. Changes in kolla-ansible 6.0.0.0rc1..7.0.0 ------------------------------------------ 6b372d3 [nova] Fix missing blacklist permission. c77adad Allow fluentd to read barbican-api.log 00996b6 Fix non-root reconfiguration with ceph enabled 6de877f Add become for Cinder configuration tasks fa7fbc1 Fix missing slash at mount volumes for prometheus-cadvisor 6a5a00e Increase CI job timeout to 2 hours e63c636 Fix the syntax issues of ovs-dpdk bc70d01 Fix bluestore disk naming format in kolla-ansible 45e83da Add check.yml for prometheus and vitrage d62264e fix condition of kibana pull action 337334d Improve ODL configuration dba14e0 Fix Copying 10-rest-connector.xml task 5f6dced Update UPPER_CONSTRAINTS_FILE for stable/rocky dc35bb0 Update .gitreview for stable/rocky 7f1f017 Remove the unncessary register variable defined e4a9d48 Remove usage of nova's RamFilter b7ea7f5 add python 3.6 unit test job f326f6f switch documentation job to new PTI d272aa1 import zuul job settings from project-config 735d085 Fix redis sentinel change myid every time when it restarted 69bc7b4 add trove policy file customization ea5a7dd Explicitly specify endpoint type during Monasca registration f5e83ce Temporary ignore B303 in bandit tests 9322db0 Make source jobs voting and gating e1c5bbd Include default_docker_volume_type for magnum.conf 9ae2ca6 Fix cloudkitty mispelling fae046e Fixes bind9 restarting when no designate_forwarders_addresses 12f4554 Support checkout dedicated version from git with dev mode 438ae3b Use lbproxy instead of lbagent in neutron when deploy Octavia 471985d Update usage of "|" to "is" 3fe57ab fix sahara_api is always restarting bdaa202 Monasca API uses new config file name 7d263e2 Remove keystone version in tacker.conf 2e7da7a Fix kolla_docker ansible-doc examples 19ec401 [prometheus-alertmanager] use template/first_found instead of merge_yaml. 353230a Clear all l3 related namespace before starting neutron-l3-agent only when l3_ha is enable 943e41d Add ResellerAdmin role for ceph-rgw 9b05c94 Split zuul.yaml into multiple files ae24694 Deprecate auth_uri option ea2cda2 Fix ironic inspector dnsmasq listening interface 76c83a4 Allow 400 response when creating kibana ES index c408afb Update elasticsearch and kibana version to 5.x 9500783 Add Cinder credentials to ironic.conf 4297cc3 Added kolla_inspector_extra_kernel_options 747e8f2 Disable the ntp service when bootstrap-servers adc55af Add elasticsearch port 0e66e81 Remove the outdated note information c71de0e Fix the name of the CI log for reconfigure 33598f5 Extract cinder_iscsi_helper default from role e13815c Stabilise Bifrost CI job 6fad16e Stop reporting changed in prechecks 815c6b7 Enable rgw_swift_enforce_content_length 0011124 fix aodh warning 96d2c8b Bump ansible_version_min to 2.4 8998877 Fix ceph gates 34b6a9c zun: set docker api version to 1.24 cc5cdba Fix depends on kolla changes ffe388b Fix ceilometer bootstrap 5d25f77 Fix magnum api dimensions d37d050 Allow object versioning for ceph-rgw 2914252 Add enable_monasca in global vars 0dd487f Bump ansible_version_min to 2.4 da9ff22 Use include_tasks instead of include b9208cd Fix etcd when Kuryr is disabled 380647f Update the help text of init-runonce b80a63f Use fernet for barbican crypto key ce2a508 Update Ubuntu dependencies of VagrantUp in docs de94eff Minor corrections in cinder-guide documentation. 14bf524 Apply Resource Constraints to Services. 0415943 Fix monasca auth variable d95c87c Fix action -> kolla_action for ironic-neutron-agent 07b64de Fix ceph role with ansible < 2.4 69c1bf2 Allow configuring a gateway for the inspection network 76210a2 Apply Resource Constraints to Openstack Services b51eeed Use include_tasks instead of include acaebf8 Save targetcli configuration to a volume for container upgrades d6f8f69 Add check to ansible argument_spec 2ce46e4 Improve ceph-rgw compatibility with Swift API in Kolla-ansible f9209e1 Add when condition to freezer role 6a9a0e9 Fix prechecks for adding a new haproxy node c752d66 Update tacker CLI to openstack CLI in tacker demo 5dd080a Add networking-baremetal configuration 9f0db30 Apply Resource-Constraints to all services. 83595f7 Fix typo in nova rp_filter sysctl d648be0 Add safe shutdown systemd jobs to tools 264866c Support setting rp_filter mode 16df54e Disable TLS 1.1 on haproxy 07dfc20 Allow externally managed swift as glance backend 54a98c1 Fix monasca use of "action" -> "kolla_action" 8cc97c6 Fix glance config copy when a service is disabled ecc1e4a remove uid, gid from rsyncd.conf for swift user 5f3cbd8 Add support for onos 0152e51 Apply Ironic rolling upgrade logic 6781c18 Allow disabling nova-ssh 7321fe7 Allow passing forks to kolla-ansible script bc65fa5 Enable chrony container by default 297eb5e Add resource Constraints to Nova containers. 5441963 Support deploying Monasca Log Persister 4157f30 Extending designate named template to include "forwarders" parameter 1596475 [prometheus] Initial implementation of prometheus-alertmanager 90b886e Keep timestamp field e78f823 Bifrost: set TFTP cache master path properly 8e4838d Trigger bifrost CI job on changes and periodically 0cc2daa Fix sudoers in bootstrap-servers when user != group 8ec92df Make sudoers config optional in bootstrap-servers 2a69050 Append to kolla user groups in bootstrap-servers 4283dff Fix ownership of virtualenv in bootstrap-servers 6dd45f6 update ansible command usage at user document 9c88262 Support deploying Monasca Log Transformer e01f511 Update the min version for ansible f7e64be Add enable_ironic_ipxe option to globals.yml 420b523 Added delay_auth_decision config option for swift acccec7 Fix missed notify for zun-wsproxy container. f692b4c Make nova nova_instance_datadir_volume configurable. b54ceef Standardise Monasca Kafka variable name 4968508 Upgrade identity v2 to identity v3 API d0f85e3 Skydive: Update Keystone and Neutron configuration 8233bc7 Update docker config docs for insecure registry c4b8bed Remove trusts_delegated_roles 8397d3a Add kuryr prechecks for zun 6a331d4 Create and use keystone_admin[project|user] acfc4fd Option for enable SSL verification on docker registry 8f15669 fixed destroy confirmation no properly evaluated 3397668 Migrate ceph keyring creation to kolla_ceph_keyring module 4423f25 Only start tgtd when cinder_iscsi_helper=tgtadm 1b2bb2e Add zun-wsproxy into kolla-ansible 47e2b62 Update using openstack section of quickstart 2b3a046 Add the role enabled check for some projects f450dd9 Expire mysql binary logs out of the box fbddccd Revert "Remove keystone_authtoken section for aodh" b698435 Stop enabling the ironic's pxe_ipmitool driver ec0c645 Fix the task about --limit does not perform 8da9379 dev mode: Add support for blazar 1842ce9 Drop python-cinderclient usage af6306a Fix cinder volume issue with multipathd 9ff5d54 Add sudo package for bootstrap-servers 85e4ce8 dev mode: Add support for trove 3a34dfa Provide support for cloudkitty dev mode in kolla bf71e33 Provide support for ceilometer dev mode in kolla a71e905 Provide support for solum dev mode in kolla be3dc2f Provide support for manila dev mode in kolla 87043bc config proxy settings inside glance_api container b42508f fix freezer prechecks 3566dae Enable yamllint strict mode 6531dc9 Fix pre-commit-hook can't work 2363a8d Use full path for globals.yml 0c54521 Doc: update ceph-guide in kolla-ansible 19b1e9c Allow nova to use cephfs cinder volumes without nova cephfs backend cebb77d Make Swift log_level changeable 695d44f Enable neutron vpnaas dashboard dynamically fe70df3 Add possibility to increase Murano agent timeout 9cdd59e Optimse the external ceph configure action 3591d0f Allow Kolla Ceph to deploy bluestore OSDs in Kolla-ansible 59a0ddc dev mode: Add support for designate c94a358 Add endpoint_type for vitrage 45a4f9c Add a job for testing deployment of bifrost 8fd7162 dev mode: Add support for Watcher 389e6fc dev mode: Add support for vitrage b76f401 Supporting configuring Monasca Kafka topics fd6c9f3 Enable ceph dashboard by default 625406e dev mode: Add support for congress c8bb9bc dev mode: Add support for cinder 60a1127 Remove ceilometer collector for cloudkitty-processor 28c8e29 Document kolla-ansible stop command dd11db0 Added dependency package for kolla-ansible deploy 9bc12e6 fix tox python3 overrides dfb5dda Fix copy external ceph files from custome/gnocchi in gnocchi 1db352f Support check and diff mode for merge_config and merge_yaml module d9183e7 Add driver into oslo_messaging_notifications section 9ad2786 Make neutron vpnaas dashboard configurable f832efa Correct path to use for development e7c104e Fix the /etc/kolla copy path c08ee00 Fix typo in docs 5f19844 Add NUMBER_OF_MONITOR_NODES for bootstrap 24f1ae8 Fix the MongoDB description be693c3 Add the missing group for kolla-cli ebd353e fix ansible warning about blazar 83b8a71 Delete the unused openrc-example c4b9e60 Remove unnecessary period for operating-kolla.rst 18998f2 Fix enabled state for some prometheus services 680c288 Set up the kolla-cli and inventory for the vagrant dev environment d59e61a update sahara.conf file for kolla 30be04e Specify 'become' for all tasks that use kolla_docker module 67675a5 Remove openstackdocstheme from test-requirements.txt file 31a6de0 dev mode: Add support for sahara c7c61fc Avoid removing kolla-cli directories on destroy 7f11d35 Fix the pep8 warning 6e5bab3 Update the description for Heat 01be6a3 remove unused template file in baremetal role 640dd55 Fix usage of openstack_ceph_rgw_auth d2f4055 Add support for Ceilometer custom polling.yaml 176a72e fix sahara service-type 6017d11 Document the China registry mirror ab79c3e Fix the ceph warning after upgrade to luminous 59460c9 Make it possible to override chrony bindaddress 7c16c1b Rename wrong ovsdpdk precheck file 291c04c dev mode: Add support for ironic 0ef27dd Add support for NSXV3 ddc564d Rabbitmq bootstrap enhancement 894d825 Use its own host gruop for ceilometer ce809ae osprofiler support redis b6bab5b Add custom option for docker 6e033e6 Add freezer-scheduler hosts into site.yml 4ab76ed Put upper limit on cmd2 in kolla-toolbox bee02d3 Mariadb bootstrap_cluster enhancement 2e123ae check cron container error 41254b6 Add cAdvisor for Prometheus monitoring f8fd060 Remove keystone_authtoken section for aodh b3b0d28 To avoid creating empty volume for heat 0a1ccc2 Add support for enabling ipxe boot with ironic 38d5ee6 Remove duplicated content 3b61cc7 [prometheus] Add memcached_exporter. 418a6c8 Adds parameter to configure HAProxy defaults balance 16c4ccc fix a typo 8af7372 Fix Nova authentication in Cinder configuration file 317a107 [kibana] enforce index creation for ELK > 5 (debian) b830fa1 Cinder fails to run because snapshots are not compatible with secure NAS e180a98 Remove keystone_authtoken section for vitrage f1768ef Updated genpwd to work with python35 3734166 fix blazar error in deployment a9693b8 [elasticsearch] Change ES_HEAP_SIZE to ES_JAVA_OPTS. eab66ab Support deploying the Monasca Log API dbf7546 Following the new PTI for document build c11f9f5 Support deploying the Monasca API 4eaf397 Adding ironic_dnsmasq_boot_file parameter to globals.yml d516ad7 horizon: allow to configure by custom_local_settings.j2 81eb90a Remove the unnecessary register.yml for upgrade 3d63ae6 Optimise the tag for common role f3a609e Use multipathd hostgroup in the multipathd role ad9dc76 nova: make libvirt port configurable and check if the port is free 7215a53 dev mode: Add support for barbican 5c1f022 Fix missed kolla_action for murano 1d249ca Fix Grafana config for extra conf 2e19059 Fix missed kolla_action and kolla_serial 3093f44 Optimize reconfiguration for murano be6798f Compatible with ubuntu 18.04 1da05bd Update the deprecated vnc options 895f202 Fix the freezer-scheduler start failed 5c26ccf Delete the null notify 5da1cb0 Fix the permissions of mgr and mds keyring 05f81ec Update the freezer services link c56765b Update the supermark for Kolla-ansible link 96d2749 Remove keystone_authtoken section for ceilometer 0dbd8af Remove old upgrade task from Ceilometer 87d1276 Fix create Magnum trustee user role failed c3c7b48 dev mode: Add support for mistral 6f398ce ovs-dpdkctl.sh syntax error a0f43fd optimize the freezer tag 8bfb789 Fix default value logic of 'glance_backend_file' variable 48231e1 [haproxy] Enable global optimization options c567055 Fix ansible warning 558bf6b Fix nova_proxy_admin_tenant_name typo 3991ebc Make generated private key files not world readable 365e3d3 Apply Glance database migration c65861c Update "ceph -s" command output bd708d9 Make the workers configurable for gnocchi metricd b0ba58d List and map compute hosts by service instead of by compute node. f7d995d Update the cirros default password af9203c Reinstate testing of changes to requirements.txt 9ac94cc Avoid running kolla source jobs for unnecessary files ccd542f Gate fix: Cap hacking to avoid gate failure a155e79 Disable glance-registry 6c5a6c6 Enforce removal of container network namespace. bb1da00 Allow setting computes_need_external_bridge. 6397c2a Extra fix for removed module_extra_vars bf0f155 Make sure aodh/service_credentials wotks with internalURL fdb325a add the environment attribute to etcd deploy c20c69e kolla-ansible fix to correct magnum k8s deployment 80ec86f Remove kubetoolbox image from common role 7c046ee Only copy custom fluentd filters when fluentd is enabled 998b9fb Remove "keystone_token_provider==uuid" from keystone.conf 6bda3fe Fix "tox -e pep8" warning 84aeff4 Remove uuid as keystone_token_provider 6777c90 Automatically add Prometheus as a Grafana datasource 585f028 Update the Blazar link bb9f24e Config typo in external Ceph guide bb61590 Remove ironic_host_manager usage ecfc28d Add endpoint type specifications to murano config 8cf67e9 Fix the ceph-mgr connect to cluster failed 9fe70f4 Restructure the vpnaas roles abf8a3b Add node state management to ironic guide 585efc2 Update the Ceph pgs value for tests c96fe41 Add cap NET_ADMIN for ironic_dnsmasq 3f4bc1c Make DNS resolvers configurable. 2b3de16 Ironic dnsmasq should not use VIP for TFTP server cac5c89 Update swift_devices_mount_point propagation settings d069491 Update the Bugs link for triage bca297b Fix the prechecks action for prometheus_server 44b49ad Add test for credentials set 1279173 Correct the description for Ironic 044e82c Increase timeout for kolla_toolbox module. 36f33f0 Reduce the default values for Ceph pgs 4a502e8 Fix the magnum description f947823 Fix the profile missing when run bootstrap.sh 746a2e0 Fix rabbitmq-env.conf ownership in bifrost 265046b Trivial: Update pypi url to new url fb41199 Fix etcd container check failed 61a353c Update the database connection for keystone 1822d48 Avoid creating an empty volume d6a6486 Add owner and group when create directories ecafeb6 Add precheck for haproxy certificate file 4b42434 Add congress-dashboard into Horizon e751a7c Added support for kolla-cli development 0460663 Add blazar-dashboard into Horizon 4d1f373 Add role to deploy prometheus ad03b3a Update the Ironic documentation a2125fd Fix version name in quickstart guide a81a5d5 Fix SSL api for multiple services 95ad305 Fix Congress Service Type e6849f4 Update upgrade information in operating-kolla.rst 027a2b1 dev mode: Add support for Zun cc37ad1 Delete the unused policy file check cb03e96 dev mode: Add support for senlin 3d9826e Remove the duplicated condition check for iscsi 2f69b3c Configure Infoblox as an IPAM driver for neutron 6647ed8 Add support for deploying Kafka 6bfc6d4 Add task to create volumes path in cephfs e1dd643 Add the manila-data service into manila guide ad3b0cf Add the missing mds and mgr groups into site.yml 84ade4e Remove useless module_extra_vars in registry.yml 654196d Make dev mode available to glance-registry e5a8481 Simplify init-runonce boot command 965669b Custom configuration for grafana 0025aac dev mode: Add support for aodh 67d4fdd Do not create nova db user if database unchanged 189c89c Update lower-constraints to match local requirements 0779959 Add the Manila for external ceph guide 418cb52 Support extra ml2 plugins in neutron cbd6480 Remove the unnecessary "'" 8a63c80 Fix mariadb recover seqnum regex ed115a4 Reset multipath.conf 5c133c6 Correct the path of configure file b9bc5a4 Add the inventory when use ansible command e57b4e8 Quickstart rewrite 3088bf5 Use the pbr generated wsgi binary file located in binary folder 4c39ea7 Update the cirros to 0.4.0 for tempest 79374fb Update doc with new option b81442a Add freezer-scheduler role b0b51e8 Refresh nova cell cache in nova-scheduler process a13b478 Deprecate os_region_name option 0adee7b When copying glance-swift.conf ensure mode and become used b865bad Support accessing InfluxDB via HAProxy 193ce72 Fix ipc_mode comparison in the latest docker c0f44cd Followed the become: true ordering ecadff2 Improvement in code-base 42deff5 Escalate privileges when copy fluentd custom config 5d5ae08 Modify permissions on ceph file in manila 24f4fcd Add Octavia Horizon plugin 1c1d6e2 Introduce variable to allow different DVR modes 5577392 [HAProxy] Allow extra options to be specified per listener fd186a2 [Horizon] Allow configuration of Keystone's URL 72c77f9 Update listener config file entry c5ee751 fixing wrong designate producer image used in deploy def7d35 Implement ARA sqlite databases over http feature 58dbe2e Set glance to alphabetically in globals.yml 20c5e8f Update ceph client.admin caps during upgrade 735012c Add common_options to keystone container check 6f932f4 Specification for additions for Prometheus monitoring 7aeb682 Use a large number for haproxy timeout tunnel a490650 Verify external VIP set when TLS enabled. a486364 Fix panko database creation 5493594 Error path of WSGIScriptAlias of panko for ubuntu e82fb95 Make it possible to not haproxy memcached fca5725 Use redis as gnocchi incoming storage and tooz backend when enabled ea1a1de Verify YAML syntax in gates 0135ea0 Run database migrate for horizon during upgrade 8e897bc Designate: Fix neutron handler 2ad8776 Use the pbr generated wsgi binary file located in binary folder 5c9fe81 XenAPI: Add guide document for XenServer 3993369 Add cpu_mode into deployment-philosophy.rst 0e453c1 Use higher max memory for items in memcached f87b238 Add support for deploying ZooKeeper 40a62bf fix typos in the documentation 33a3dfa fix word in the documentation 247da46 Fix the novnc valid options for all.yml 6e9d77d add lower-constraints job 39cb42e Glance policy copy is not using correct name 6e37762 Configure application for ceph pool 06a353c cloudkitty-processor service error when using ceilometer collector 5fc656e Fix wrong panko mysql connection string 5e440d7 Remove the duplicate "become" for config-nova-fake.yml 98d1e45 Have glance notifications work like the other projects 04fa7c0 Add documentation for Ansible become feature d5fd744 Swift configuration misses quotas to pass DefCore e7da510 Support custom config for InfluxDB 9d5bafa Use the pbr generated wsgi binary file located in binary folder d6549a7 Remove the duplicate dict key (become) 522f136 Remove the duplicate when condition check 82725de Make the certificates role just run on deploy node 3b89a7d XenAPI: use dom0's hostname for nova-compute 5190481 Support custom_config for trove-taskmanager/conductor 3a77dba Upgrade the rst convention of the User Guide 046b4df Optimize reconfiguration for ironic 1b3b073 Upgrade the rst convention of the Reference Guide [4] 2c13a5f s/openstack_version/openstack_release/g 0002de1 Upgrade the rst convention of the Reference Guide [3] c2d54b9 Upgrade the rst convention of the Reference Guide [2] 421f060 Updated from global requirements d32c708 Support parsing ini files with no sections cd2ccfc Fix wrong register variable name in ceilometer 62db01c New murano_auth section in Murano config 76f1ad4 Updated from global requirements f8cb527 Security reinforce for apache server b066eb9 Updated from global requirements 542e1f8 Specify 'become' for only necessary tasks (Queens roles) ed583e1 murano internal authentication needs /v3 9965cc4 Specify 'become' for only neccesary tasks (all other roles) 27b4ce4 Updated from global requirements 2c8160b Skydive: Fix endpoint for keystone (analyser) af87ad7 Duplicated [oslo_policy] 0b58fb5 Remove policy.json 404d4d0 Use zuul firewall rules in gate 862f7b2 Detect openstack_release in kolla-ansible deploy-bifrost 06e7334 Revert "Revert "Use fernet in gates"" 8f2256d Optimise the destroy role by script module fcf755c Handle external ceph configs as templates 2f8c9f8 Use www-data user for bifrost nginx log directory 1429ddb Updated from global requirements 7764ed9 Fix telegraf output for influxdb 376c607 Workaround for Bifrost being unable to write to /etc/hosts 6b1ef3f Don't set mysql_service_name for bifrost 65fa37f XenAPI: centralize the facts files 87036f3 Security memcached: disable UDP a4ac90d Fix disable haproxy causes the neutron service connection error e2d3119 Update reno for stable/queens 6832e0a keepalived: ability to use unicast instead of multicast 83fe717 Use kolla_user variable to setting kolla user name e3fa6d5 Use Elasticsearch via HAProxy in Kibana 442631b Add the missing ceph_mon host groups for Manila 42f7e25 Retry glance API sanity checks e471549 Upgrade the rst convention of the Contributor Guide c5b3037 Missing configuration for Trove single tenant eddaa31 Add the missing serial for roll upgrade 47eeacd Upgrade the rst convention of the Reference Guide [1] 98b06a0 Let haproxy to be ODL websocket's frontend fb50892 Add gather_facts to ovs roles e5edf98 Add the ironic_dnsmasq_dhcp_range prechecks for Ironic Dnsmasq 40b635b Optimize reconfiguration for mongodb 73f2bce Upgrade the rst convention of the Admin Guide 67cde8a Update kolla_internal_vip_address to kolla_internal_fqdn 69979ef Support virtualenv installation in baremetal role 1bcdf39 Add config necessary to use Barbican with Murano f3e19ec Add a configuration about docker runtime directory b84bee7 Homogenize the topics conf variable on templates 93fcfe7 FIX inject password error 6f8e354 Use internal interface to connect with keystone_ssh Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .yamllint | 15 + .zuul.yaml | 157 ------ README.rst | 12 +- ansible/action_plugins/merge_configs.py | 49 +- ansible/action_plugins/merge_yaml.py | 43 +- ansible/bifrost.yml | 16 + ansible/certificates.yml | 2 +- ansible/group_vars/all.yml | 185 +++++-- ansible/inventory/all-in-one | 77 ++- ansible/inventory/multinode | 77 ++- ansible/kolla-host.yml | 5 +- ansible/library/kolla_ceph_keyring.py | 153 ++++++ ansible/library/kolla_docker.py | 59 ++- ansible/library/kolla_toolbox.py | 14 +- ansible/roles/aodh/defaults/main.yml | 21 + ansible/roles/aodh/handlers/main.yml | 24 +- ansible/roles/aodh/tasks/bootstrap.yml | 2 +- ansible/roles/aodh/tasks/bootstrap_service.yml | 3 +- ansible/roles/aodh/tasks/clone.yml | 7 + ansible/roles/aodh/tasks/config.yml | 19 +- ansible/roles/aodh/tasks/deploy.yml | 9 +- ansible/roles/aodh/tasks/main.yml | 2 +- ansible/roles/aodh/tasks/pull.yml | 1 + ansible/roles/aodh/tasks/reconfigure.yml | 2 +- ansible/roles/aodh/tasks/register.yml | 8 +- ansible/roles/aodh/tasks/upgrade.yml | 4 +- ansible/roles/aodh/templates/aodh.conf.j2 | 8 +- ansible/roles/aodh/templates/wsgi-aodh.conf.j2 | 25 +- ansible/roles/barbican/defaults/main.yml | 19 + ansible/roles/barbican/handlers/main.yml | 18 +- ansible/roles/barbican/tasks/bootstrap.yml | 2 +- ansible/roles/barbican/tasks/bootstrap_service.yml | 3 +- ansible/roles/barbican/tasks/clone.yml | 7 + ansible/roles/barbican/tasks/config.yml | 21 +- ansible/roles/barbican/tasks/deploy.yml | 9 +- ansible/roles/barbican/tasks/main.yml | 2 +- ansible/roles/barbican/tasks/pull.yml | 1 + ansible/roles/barbican/tasks/reconfigure.yml | 2 +- ansible/roles/barbican/tasks/register.yml | 12 +- ansible/roles/barbican/tasks/upgrade.yml | 4 +- .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 5 +- ansible/roles/baremetal/defaults/main.yml | 20 +- .../roles/baremetal/tasks/bootstrap-servers.yml | 6 +- ansible/roles/baremetal/tasks/install.yml | 20 + ansible/roles/baremetal/tasks/main.yml | 2 +- ansible/roles/baremetal/tasks/post-install.yml | 67 ++- ansible/roles/baremetal/tasks/pre-install.yml | 47 +- .../roles/baremetal/templates/docker_defaults.j2 | 26 - .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/bifrost/tasks/bootstrap.yml | 22 +- ansible/roles/bifrost/tasks/config.yml | 38 +- ansible/roles/bifrost/tasks/deploy-servers.yml | 6 +- ansible/roles/bifrost/tasks/deploy.yml | 6 +- ansible/roles/bifrost/tasks/main.yml | 2 +- ansible/roles/bifrost/tasks/reconfigure.yml | 8 +- ansible/roles/bifrost/tasks/start.yml | 1 + ansible/roles/bifrost/tasks/upgrade.yml | 4 +- ansible/roles/bifrost/templates/bifrost.yml.j2 | 8 +- ansible/roles/blazar/defaults/main.yml | 16 + ansible/roles/blazar/handlers/main.yml | 20 +- ansible/roles/blazar/tasks/bootstrap.yml | 6 +- ansible/roles/blazar/tasks/bootstrap_service.yml | 3 +- ansible/roles/blazar/tasks/clone.yml | 7 + ansible/roles/blazar/tasks/config.yml | 17 +- ansible/roles/blazar/tasks/deploy.yml | 9 +- ansible/roles/blazar/tasks/main.yml | 2 +- ansible/roles/blazar/tasks/pull.yml | 1 + ansible/roles/blazar/tasks/reconfigure.yml | 2 +- ansible/roles/blazar/tasks/register.yml | 8 +- ansible/roles/blazar/tasks/upgrade.yml | 4 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 +- ansible/roles/ceilometer/defaults/main.yml | 18 + ansible/roles/ceilometer/handlers/main.yml | 21 +- ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +- .../roles/ceilometer/tasks/bootstrap_service.yml | 3 +- ansible/roles/ceilometer/tasks/clone.yml | 7 + ansible/roles/ceilometer/tasks/config.yml | 49 +- ansible/roles/ceilometer/tasks/deploy.yml | 9 +- ansible/roles/ceilometer/tasks/main.yml | 2 +- ansible/roles/ceilometer/tasks/pull.yml | 1 + ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +- ansible/roles/ceilometer/tasks/register.yml | 8 +- ansible/roles/ceilometer/tasks/upgrade.yml | 16 +- .../ceilometer/templates/ceilometer-api.json.j2 | 21 - .../templates/ceilometer-central.json.j2 | 8 +- .../templates/ceilometer-compute.json.j2 | 8 +- .../templates/ceilometer-notification.json.j2 | 8 +- .../roles/ceilometer/templates/ceilometer.conf.j2 | 15 - ansible/roles/ceph/defaults/main.yml | 27 +- ansible/roles/ceph/tasks/bootstrap_mons.yml | 3 +- ansible/roles/ceph/tasks/bootstrap_osds.yml | 32 +- ansible/roles/ceph/tasks/config.yml | 9 +- ansible/roles/ceph/tasks/deploy.yml | 34 +- ansible/roles/ceph/tasks/distribute_keyrings.yml | 20 +- ansible/roles/ceph/tasks/generate_cluster.yml | 3 +- ansible/roles/ceph/tasks/main.yml | 2 +- ansible/roles/ceph/tasks/pull.yml | 6 + ansible/roles/ceph/tasks/reconfigure.yml | 27 +- ansible/roles/ceph/tasks/start_ceph_dashboard.yml | 5 + ansible/roles/ceph/tasks/start_mdss.yml | 15 +- ansible/roles/ceph/tasks/start_mgrs.yml | 12 +- ansible/roles/ceph/tasks/start_mons.yml | 1 + ansible/roles/ceph/tasks/start_nfss.yml | 1 + ansible/roles/ceph/tasks/start_osds.yml | 8 +- ansible/roles/ceph/tasks/start_rgw_keystone.yml | 18 +- ansible/roles/ceph/tasks/start_rgws.yml | 1 + ansible/roles/ceph/tasks/upgrade.yml | 31 +- ansible/roles/ceph/templates/ceph-mgr.json.j2 | 6 + ansible/roles/ceph/templates/ceph.conf.j2 | 7 + ansible/roles/ceph_pools.yml | 6 + ansible/roles/certificates/tasks/generate.yml | 8 + ansible/roles/certificates/tasks/main.yml | 2 +- ansible/roles/chrony/defaults/main.yml | 4 + ansible/roles/chrony/handlers/main.yml | 4 +- ansible/roles/chrony/tasks/config.yml | 14 +- ansible/roles/chrony/tasks/deploy.yml | 2 +- ansible/roles/chrony/tasks/main.yml | 2 +- ansible/roles/chrony/tasks/pull.yml | 1 + ansible/roles/chrony/tasks/reconfigure.yml | 2 +- ansible/roles/chrony/tasks/upgrade.yml | 2 +- ansible/roles/chrony/templates/chrony.conf.j2 | 2 +- ansible/roles/cinder/defaults/main.yml | 41 +- ansible/roles/cinder/handlers/main.yml | 16 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 +- ansible/roles/cinder/tasks/bootstrap_service.yml | 3 +- ansible/roles/cinder/tasks/ceph.yml | 35 +- ansible/roles/cinder/tasks/clone.yml | 7 + ansible/roles/cinder/tasks/config.yml | 18 +- ansible/roles/cinder/tasks/deploy.yml | 15 +- ansible/roles/cinder/tasks/external_ceph.yml | 10 + ansible/roles/cinder/tasks/main.yml | 2 +- ansible/roles/cinder/tasks/pull.yml | 1 + ansible/roles/cinder/tasks/reconfigure.yml | 2 +- ansible/roles/cinder/tasks/register.yml | 8 +- ansible/roles/cinder/tasks/upgrade.yml | 11 +- ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 + ansible/roles/cinder/templates/cinder.conf.j2 | 21 +- ansible/roles/cloudkitty/defaults/main.yml | 17 + ansible/roles/cloudkitty/handlers/main.yml | 12 +- ansible/roles/cloudkitty/tasks/bootstrap.yml | 2 +- .../roles/cloudkitty/tasks/bootstrap_service.yml | 3 +- ansible/roles/cloudkitty/tasks/clone.yml | 7 + ansible/roles/cloudkitty/tasks/config.yml | 19 +- ansible/roles/cloudkitty/tasks/deploy.yml | 9 +- ansible/roles/cloudkitty/tasks/main.yml | 2 +- ansible/roles/cloudkitty/tasks/pull.yml | 1 + ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +- ansible/roles/cloudkitty/tasks/register.yml | 12 +- ansible/roles/cloudkitty/tasks/upgrade.yml | 4 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 +- .../cloudkitty/templates/wsgi-cloudkitty.conf.j2 | 11 +- ansible/roles/collectd/defaults/main.yml | 3 + ansible/roles/collectd/handlers/main.yml | 4 +- ansible/roles/collectd/tasks/config.yml | 18 +- ansible/roles/collectd/tasks/deploy.yml | 2 +- ansible/roles/collectd/tasks/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 1 + ansible/roles/collectd/tasks/reconfigure.yml | 2 +- ansible/roles/collectd/tasks/upgrade.yml | 2 +- ansible/roles/common/defaults/main.yml | 28 +- ansible/roles/common/handlers/main.yml | 14 +- ansible/roles/common/tasks/bootstrap.yml | 1 + ansible/roles/common/tasks/config.yml | 22 +- ansible/roles/common/tasks/deploy.yml | 4 +- ansible/roles/common/tasks/main.yml | 2 +- ansible/roles/common/tasks/pull.yml | 1 + ansible/roles/common/tasks/reconfigure.yml | 2 +- ansible/roles/common/tasks/upgrade.yml | 2 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 6 +- .../conf/filter/00-record_transformer.conf.j2 | 7 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 2 + .../templates/conf/input/06-zookeeper.conf.j2 | 11 + .../common/templates/conf/input/07-kafka.conf.j2 | 11 + .../common/templates/cron-logrotate-kafka.conf.j2 | 3 + .../templates/cron-logrotate-monasca.conf.j2 | 3 + .../templates/cron-logrotate-zookeeper.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 12 + ansible/roles/congress/defaults/main.yml | 18 + ansible/roles/congress/handlers/main.yml | 18 +- ansible/roles/congress/tasks/bootstrap.yml | 2 +- ansible/roles/congress/tasks/bootstrap_service.yml | 3 +- ansible/roles/congress/tasks/clone.yml | 7 + ansible/roles/congress/tasks/config.yml | 26 +- ansible/roles/congress/tasks/deploy.yml | 9 +- ansible/roles/congress/tasks/main.yml | 2 +- ansible/roles/congress/tasks/pull.yml | 1 + ansible/roles/congress/tasks/reconfigure.yml | 2 +- ansible/roles/congress/tasks/register.yml | 12 +- ansible/roles/congress/tasks/upgrade.yml | 4 +- ansible/roles/congress/templates/congress.conf.j2 | 5 +- ansible/roles/designate/defaults/main.yml | 40 +- ansible/roles/designate/handlers/main.yml | 42 +- ansible/roles/designate/tasks/bootstrap.yml | 2 +- .../roles/designate/tasks/bootstrap_service.yml | 3 +- ansible/roles/designate/tasks/clone.yml | 7 + ansible/roles/designate/tasks/config.yml | 29 +- ansible/roles/designate/tasks/deploy.yml | 11 +- ansible/roles/designate/tasks/main.yml | 2 +- ansible/roles/designate/tasks/pull.yml | 1 + ansible/roles/designate/tasks/reconfigure.yml | 2 +- ansible/roles/designate/tasks/register.yml | 8 +- ansible/roles/designate/tasks/upgrade.yml | 6 +- .../roles/designate/templates/designate.conf.j2 | 10 +- ansible/roles/designate/templates/named.conf.j2 | 8 +- ansible/roles/destroy/tasks/cleanup_containers.yml | 2 +- ansible/roles/destroy/tasks/cleanup_host.yml | 24 +- ansible/roles/destroy/tasks/cleanup_images.yml | 2 +- ansible/roles/destroy/tasks/copy_tools.yml | 31 -- ansible/roles/destroy/tasks/main.yml | 10 +- .../destroy/tasks/validate_docker_execute.yml | 2 +- ansible/roles/elasticsearch/defaults/main.yml | 6 +- ansible/roles/elasticsearch/handlers/main.yml | 4 +- ansible/roles/elasticsearch/tasks/config.yml | 13 +- ansible/roles/elasticsearch/tasks/deploy.yml | 2 +- ansible/roles/elasticsearch/tasks/main.yml | 2 +- ansible/roles/elasticsearch/tasks/pull.yml | 1 + ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 41 +- .../elasticsearch/templates/elasticsearch.yml.j2 | 2 + ansible/roles/etcd/defaults/main.yml | 13 +- ansible/roles/etcd/handlers/main.yml | 4 +- ansible/roles/etcd/tasks/config.yml | 12 +- ansible/roles/etcd/tasks/deploy.yml | 2 +- ansible/roles/etcd/tasks/main.yml | 2 +- ansible/roles/etcd/tasks/pull.yml | 1 + ansible/roles/etcd/tasks/reconfigure.yml | 2 +- ansible/roles/etcd/tasks/upgrade.yml | 2 +- ansible/roles/freezer/defaults/main.yml | 25 +- ansible/roles/freezer/handlers/main.yml | 29 +- ansible/roles/freezer/tasks/bootstrap_service.yml | 1 + ansible/roles/freezer/tasks/config.yml | 40 +- ansible/roles/freezer/tasks/deploy.yml | 10 +- ansible/roles/freezer/tasks/main.yml | 2 +- ansible/roles/freezer/tasks/precheck.yml | 3 +- ansible/roles/freezer/tasks/pull.yml | 3 +- ansible/roles/freezer/tasks/reconfigure.yml | 2 +- ansible/roles/freezer/tasks/register.yml | 8 +- ansible/roles/freezer/tasks/upgrade.yml | 4 +- .../roles/freezer/templates/freezer-api.conf.j2 | 40 -- .../roles/freezer/templates/freezer-api.json.j2 | 2 +- .../freezer/templates/freezer-scheduler.json.j2 | 24 + ansible/roles/freezer/templates/freezer.conf.j2 | 57 +++ .../freezer/templates/wsgi-freezer-api.conf.j2 | 2 + ansible/roles/glance/defaults/main.yml | 28 +- ansible/roles/glance/handlers/main.yml | 15 +- ansible/roles/glance/tasks/bootstrap.yml | 2 +- ansible/roles/glance/tasks/bootstrap_service.yml | 3 +- ansible/roles/glance/tasks/ceph.yml | 16 +- ansible/roles/glance/tasks/check.yml | 4 + ansible/roles/glance/tasks/clone.yml | 1 + ansible/roles/glance/tasks/config.yml | 17 +- ansible/roles/glance/tasks/deploy.yml | 10 +- ansible/roles/glance/tasks/external_ceph.yml | 4 +- ansible/roles/glance/tasks/legacy_upgrade.yml | 7 + ansible/roles/glance/tasks/main.yml | 2 +- ansible/roles/glance/tasks/pull.yml | 1 + ansible/roles/glance/tasks/reconfigure.yml | 2 +- ansible/roles/glance/tasks/register.yml | 8 +- ansible/roles/glance/tasks/rolling_upgrade.yml | 125 +++++ ansible/roles/glance/tasks/stop_service.yml | 9 + ansible/roles/glance/tasks/upgrade.yml | 9 +- ansible/roles/glance/templates/glance-api.conf.j2 | 16 +- .../roles/glance/templates/glance-registry.conf.j2 | 9 +- ansible/roles/gnocchi/defaults/main.yml | 16 + ansible/roles/gnocchi/handlers/main.yml | 12 +- ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +- ansible/roles/gnocchi/tasks/bootstrap_service.yml | 1 + ansible/roles/gnocchi/tasks/ceph.yml | 16 +- ansible/roles/gnocchi/tasks/config.yml | 15 +- ansible/roles/gnocchi/tasks/deploy.yml | 10 +- ansible/roles/gnocchi/tasks/external_ceph.yml | 9 +- ansible/roles/gnocchi/tasks/main.yml | 2 +- ansible/roles/gnocchi/tasks/pull.yml | 1 + ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +- ansible/roles/gnocchi/tasks/register.yml | 8 +- ansible/roles/gnocchi/tasks/upgrade.yml | 4 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 16 +- .../roles/gnocchi/templates/wsgi-gnocchi.conf.j2 | 2 + ansible/roles/grafana/defaults/main.yml | 5 +- ansible/roles/grafana/handlers/main.yml | 5 +- ansible/roles/grafana/tasks/config.yml | 52 +- ansible/roles/grafana/tasks/deploy.yml | 6 +- ansible/roles/grafana/tasks/main.yml | 2 +- ansible/roles/grafana/tasks/pull.yml | 1 + ansible/roles/grafana/tasks/reconfigure.yml | 2 +- ansible/roles/grafana/tasks/upgrade.yml | 2 +- ansible/roles/grafana/templates/grafana.ini.j2 | 1 + ansible/roles/grafana/templates/grafana.json.j2 | 15 + ansible/roles/grafana/templates/prometheus.yaml.j2 | 9 + ansible/roles/haproxy/defaults/main.yml | 22 + ansible/roles/haproxy/handlers/main.yml | 10 +- ansible/roles/haproxy/tasks/config.yml | 5 +- ansible/roles/haproxy/tasks/deploy.yml | 2 +- ansible/roles/haproxy/tasks/main.yml | 2 +- ansible/roles/haproxy/tasks/precheck.yml | 97 ++++ ansible/roles/haproxy/tasks/pull.yml | 1 + ansible/roles/haproxy/tasks/reconfigure.yml | 2 +- ansible/roles/haproxy/tasks/upgrade.yml | 3 +- ansible/roles/haproxy/templates/haproxy.cfg.j2 | 552 +++++++++++++++++++-- ansible/roles/haproxy/templates/haproxy.json.j2 | 3 +- ansible/roles/haproxy/templates/keepalived.conf.j2 | 15 +- ansible/roles/heat/defaults/main.yml | 8 + ansible/roles/heat/handlers/main.yml | 12 +- ansible/roles/heat/tasks/bootstrap.yml | 2 +- ansible/roles/heat/tasks/bootstrap_service.yml | 3 +- ansible/roles/heat/tasks/clone.yml | 1 + ansible/roles/heat/tasks/config.yml | 6 +- ansible/roles/heat/tasks/deploy.yml | 8 +- ansible/roles/heat/tasks/main.yml | 2 +- ansible/roles/heat/tasks/pull.yml | 1 + ansible/roles/heat/tasks/reconfigure.yml | 2 +- ansible/roles/heat/tasks/register.yml | 32 +- ansible/roles/heat/tasks/upgrade.yml | 4 +- ansible/roles/heat/templates/heat.conf.j2 | 13 +- ansible/roles/horizon/defaults/main.yml | 9 + ansible/roles/horizon/handlers/main.yml | 5 +- ansible/roles/horizon/tasks/bootstrap.yml | 2 +- ansible/roles/horizon/tasks/bootstrap_service.yml | 1 + ansible/roles/horizon/tasks/clone.yml | 2 + ansible/roles/horizon/tasks/config.yml | 28 +- ansible/roles/horizon/tasks/deploy.yml | 6 +- ansible/roles/horizon/tasks/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 1 + ansible/roles/horizon/tasks/reconfigure.yml | 2 +- ansible/roles/horizon/tasks/upgrade.yml | 12 +- .../horizon/templates/custom_local_settings.j2 | 0 ansible/roles/horizon/templates/horizon.conf.j2 | 2 + ansible/roles/horizon/templates/horizon.json.j2 | 6 + ansible/roles/horizon/templates/local_settings.j2 | 16 +- ansible/roles/influxdb/defaults/main.yml | 2 + ansible/roles/influxdb/handlers/main.yml | 4 +- ansible/roles/influxdb/tasks/config.yml | 21 +- ansible/roles/influxdb/tasks/deploy.yml | 2 +- ansible/roles/influxdb/tasks/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 1 + ansible/roles/influxdb/tasks/reconfigure.yml | 2 +- ansible/roles/influxdb/tasks/upgrade.yml | 2 +- ansible/roles/ironic/defaults/main.yml | 99 ++++ ansible/roles/ironic/handlers/main.yml | 146 ++++++ ansible/roles/ironic/tasks/bootstrap.yml | 14 +- ansible/roles/ironic/tasks/bootstrap_service.yml | 36 +- ansible/roles/ironic/tasks/clone.yml | 14 + ansible/roles/ironic/tasks/config.yml | 212 ++++++-- ansible/roles/ironic/tasks/deploy.yml | 18 +- ansible/roles/ironic/tasks/legacy_upgrade.yml | 7 + ansible/roles/ironic/tasks/main.yml | 2 +- ansible/roles/ironic/tasks/precheck.yml | 25 +- ansible/roles/ironic/tasks/pull.yml | 38 +- ansible/roles/ironic/tasks/reconfigure.yml | 86 +--- ansible/roles/ironic/tasks/register.yml | 18 +- ansible/roles/ironic/tasks/rolling_upgrade.yml | 44 ++ ansible/roles/ironic/tasks/start.yml | 67 --- ansible/roles/ironic/tasks/upgrade.yml | 13 +- ansible/roles/ironic/templates/inspector.ipxe.j2 | 10 + .../ironic/templates/ironic-conductor.json.j2 | 5 + .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 22 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 +- .../ironic/templates/ironic-ipxe-httpd.conf.j2 | 16 + ansible/roles/ironic/templates/ironic-ipxe.json.j2 | 33 ++ ansible/roles/ironic/templates/ironic-pxe.json.j2 | 2 +- ansible/roles/ironic/templates/ironic.conf.j2 | 36 +- ansible/roles/ironic/templates/pxelinux.default.j2 | 2 +- ansible/roles/iscsi/tasks/config.yml | 14 +- ansible/roles/iscsi/tasks/deploy.yml | 4 +- ansible/roles/iscsi/tasks/main.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 2 + ansible/roles/iscsi/tasks/start.yml | 3 + ansible/roles/iscsi/tasks/upgrade.yml | 4 +- ansible/roles/kafka/defaults/main.yml | 33 ++ ansible/roles/kafka/handlers/main.yml | 24 + ansible/roles/kafka/meta/main.yml | 3 + ansible/roles/kafka/tasks/check.yml | 1 + ansible/roles/kafka/tasks/config.yml | 64 +++ ansible/roles/kafka/tasks/deploy.yml | 5 + ansible/roles/kafka/tasks/main.yml | 2 + ansible/roles/kafka/tasks/precheck.yml | 17 + ansible/roles/kafka/tasks/pull.yml | 11 + ansible/roles/kafka/tasks/reconfigure.yml | 2 + ansible/roles/kafka/tasks/upgrade.yml | 5 + ansible/roles/kafka/templates/kafka.json.j2 | 23 + .../kafka/templates/kafka.server.properties.j2 | 17 + ansible/roles/karbor/defaults/main.yml | 7 + ansible/roles/karbor/handlers/main.yml | 12 +- ansible/roles/karbor/tasks/bootstrap.yml | 2 +- ansible/roles/karbor/tasks/bootstrap_service.yml | 1 + ansible/roles/karbor/tasks/config.yml | 16 +- ansible/roles/karbor/tasks/deploy.yml | 6 +- ansible/roles/karbor/tasks/main.yml | 2 +- ansible/roles/karbor/tasks/pull.yml | 1 + ansible/roles/karbor/tasks/reconfigure.yml | 2 +- ansible/roles/karbor/tasks/register.yml | 8 +- ansible/roles/karbor/tasks/upgrade.yml | 4 +- ansible/roles/karbor/templates/karbor.conf.j2 | 5 +- .../templates/providers.d/openstack-infra.conf.j2 | 7 +- ansible/roles/keystone/defaults/main.yml | 7 + ansible/roles/keystone/handlers/main.yml | 20 +- ansible/roles/keystone/tasks/bootstrap.yml | 2 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/clone.yml | 1 + ansible/roles/keystone/tasks/config.yml | 33 +- ansible/roles/keystone/tasks/deploy.yml | 12 +- ansible/roles/keystone/tasks/init_fernet.yml | 2 +- ansible/roles/keystone/tasks/main.yml | 2 +- ansible/roles/keystone/tasks/pull.yml | 1 + ansible/roles/keystone/tasks/reconfigure.yml | 2 +- ansible/roles/keystone/tasks/register.yml | 8 +- ansible/roles/keystone/tasks/upgrade.yml | 2 +- .../keystone/templates/fernet-node-sync.sh.j2 | 2 +- .../roles/keystone/templates/fernet-rotate.sh.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 8 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 16 +- ansible/roles/kibana/defaults/main.yml | 5 +- ansible/roles/kibana/handlers/main.yml | 4 +- ansible/roles/kibana/tasks/config.yml | 13 +- ansible/roles/kibana/tasks/deploy.yml | 4 +- ansible/roles/kibana/tasks/main.yml | 2 +- ansible/roles/kibana/tasks/post_config.yml | 58 +-- ansible/roles/kibana/tasks/pull.yml | 1 + ansible/roles/kibana/tasks/reconfigure.yml | 2 +- ansible/roles/kibana/tasks/upgrade.yml | 2 +- ansible/roles/kibana/templates/kibana.json.j2 | 4 +- ansible/roles/kibana/templates/kibana.yml.j2 | 15 +- ansible/roles/kuryr/defaults/main.yml | 3 + ansible/roles/kuryr/handlers/main.yml | 4 +- ansible/roles/kuryr/tasks/clone.yml | 2 + ansible/roles/kuryr/tasks/config.yml | 17 +- ansible/roles/kuryr/tasks/deploy.yml | 6 +- ansible/roles/kuryr/tasks/main.yml | 2 +- ansible/roles/kuryr/tasks/pull.yml | 1 + ansible/roles/kuryr/tasks/reconfigure.yml | 2 +- ansible/roles/kuryr/tasks/register.yml | 4 +- ansible/roles/kuryr/tasks/upgrade.yml | 2 +- ansible/roles/magnum/defaults/main.yml | 9 + ansible/roles/magnum/handlers/main.yml | 8 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 +- ansible/roles/magnum/tasks/bootstrap_service.yml | 1 + ansible/roles/magnum/tasks/clone.yml | 1 + ansible/roles/magnum/tasks/config.yml | 15 +- ansible/roles/magnum/tasks/deploy.yml | 8 +- ansible/roles/magnum/tasks/main.yml | 2 +- ansible/roles/magnum/tasks/pull.yml | 1 + ansible/roles/magnum/tasks/reconfigure.yml | 2 +- ansible/roles/magnum/tasks/register.yml | 22 +- ansible/roles/magnum/tasks/upgrade.yml | 4 +- ansible/roles/magnum/templates/magnum.conf.j2 | 19 +- ansible/roles/manila/defaults/main.yml | 37 ++ ansible/roles/manila/handlers/main.yml | 16 +- ansible/roles/manila/tasks/bootstrap.yml | 2 +- ansible/roles/manila/tasks/bootstrap_service.yml | 3 +- ansible/roles/manila/tasks/ceph.yml | 13 +- ansible/roles/manila/tasks/clone.yml | 7 + ansible/roles/manila/tasks/config.yml | 15 +- ansible/roles/manila/tasks/deploy.yml | 19 +- ansible/roles/manila/tasks/external_ceph.yml | 14 +- ansible/roles/manila/tasks/fix_cephfs_owner.yml | 62 +++ ansible/roles/manila/tasks/main.yml | 2 +- ansible/roles/manila/tasks/pull.yml | 1 + ansible/roles/manila/tasks/reconfigure.yml | 2 +- ansible/roles/manila/tasks/register.yml | 8 +- ansible/roles/manila/tasks/upgrade.yml | 4 +- ansible/roles/manila/templates/manila.conf.j2 | 5 +- ansible/roles/mariadb/defaults/main.yml | 2 + ansible/roles/mariadb/handlers/main.yml | 20 +- ansible/roles/mariadb/tasks/bootstrap.yml | 6 +- ansible/roles/mariadb/tasks/bootstrap_cluster.yml | 12 +- ansible/roles/mariadb/tasks/check.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 5 +- ansible/roles/mariadb/tasks/deploy.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 1 + ansible/roles/mariadb/tasks/main.yml | 2 +- ansible/roles/mariadb/tasks/pull.yml | 1 + ansible/roles/mariadb/tasks/reconfigure.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 131 ++--- ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 1 + ansible/roles/memcached/defaults/main.yml | 5 + ansible/roles/memcached/handlers/main.yml | 4 +- ansible/roles/memcached/tasks/config.yml | 6 +- ansible/roles/memcached/tasks/deploy.yml | 2 +- ansible/roles/memcached/tasks/main.yml | 2 +- ansible/roles/memcached/tasks/pull.yml | 1 + ansible/roles/memcached/tasks/reconfigure.yml | 2 +- ansible/roles/memcached/tasks/upgrade.yml | 2 +- .../roles/memcached/templates/memcached.json.j2 | 2 +- ansible/roles/mistral/defaults/main.yml | 18 + ansible/roles/mistral/handlers/main.yml | 18 +- ansible/roles/mistral/tasks/bootstrap.yml | 2 +- ansible/roles/mistral/tasks/bootstrap_service.yml | 3 +- ansible/roles/mistral/tasks/clone.yml | 7 + ansible/roles/mistral/tasks/config.yml | 19 +- ansible/roles/mistral/tasks/deploy.yml | 9 +- ansible/roles/mistral/tasks/main.yml | 2 +- ansible/roles/mistral/tasks/pull.yml | 1 + ansible/roles/mistral/tasks/reconfigure.yml | 2 +- ansible/roles/mistral/tasks/register.yml | 8 +- ansible/roles/mistral/tasks/upgrade.yml | 4 +- ansible/roles/mistral/templates/mistral.conf.j2 | 6 +- ansible/roles/monasca/defaults/main.yml | 114 +++++ ansible/roles/monasca/handlers/main.yml | 89 ++++ ansible/roles/monasca/meta/main.yml | 3 + ansible/roles/monasca/tasks/bootstrap.yml | 51 ++ ansible/roles/monasca/tasks/bootstrap_service.yml | 25 + ansible/roles/monasca/tasks/check.yml | 1 + ansible/roles/monasca/tasks/config.yml | 176 +++++++ ansible/roles/monasca/tasks/deploy.yml | 22 + ansible/roles/monasca/tasks/main.yml | 2 + ansible/roles/monasca/tasks/precheck.yml | 27 + ansible/roles/monasca/tasks/pull.yml | 11 + ansible/roles/monasca/tasks/reconfigure.yml | 2 + ansible/roles/monasca/tasks/register.yml | 66 +++ ansible/roles/monasca/tasks/upgrade.yml | 5 + .../templates/monasca-api/api-config.ini.j2 | 14 + .../monasca/templates/monasca-api/api.conf.j2 | 60 +++ .../templates/monasca-api/monasca-api.json.j2 | 32 ++ .../monasca/templates/monasca-api/wsgi-api.conf.j2 | 24 + .../templates/monasca-log-api/log-api-paste.ini.j2 | 65 +++ .../templates/monasca-log-api/log-api.conf.j2 | 37 ++ .../monasca-log-api/monasca-log-api.json.j2 | 32 ++ .../templates/monasca-log-api/wsgi-log-api.conf.j2 | 24 + .../elasticsearch-template.json | 56 +++ .../monasca-log-persister/log-persister.conf.j2 | 19 + .../monasca-log-persister.json.j2 | 24 + .../log-transformer.conf.j2 | 25 + .../monasca-log-transformer.json.j2 | 18 + ansible/roles/mongodb/defaults/main.yml | 16 +- ansible/roles/mongodb/handlers/main.yml | 40 ++ ansible/roles/mongodb/tasks/bootstrap.yml | 1 + ansible/roles/mongodb/tasks/config.yml | 62 ++- ansible/roles/mongodb/tasks/deploy.yml | 7 +- ansible/roles/mongodb/tasks/main.yml | 2 +- ansible/roles/mongodb/tasks/pull.yml | 8 +- ansible/roles/mongodb/tasks/reconfigure.yml | 64 +-- ansible/roles/mongodb/tasks/start.yml | 26 - ansible/roles/mongodb/tasks/upgrade.yml | 5 +- ansible/roles/multipathd/tasks/config.yml | 13 +- ansible/roles/multipathd/tasks/deploy.yml | 4 +- ansible/roles/multipathd/tasks/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 1 + ansible/roles/multipathd/tasks/start.yml | 3 +- ansible/roles/multipathd/tasks/upgrade.yml | 4 +- .../roles/multipathd/templates/multipath.conf.j2 | 8 +- ansible/roles/murano/defaults/main.yml | 38 +- ansible/roles/murano/handlers/main.yml | 51 ++ ansible/roles/murano/tasks/bootstrap.yml | 2 +- ansible/roles/murano/tasks/bootstrap_service.yml | 1 + ansible/roles/murano/tasks/clone.yml | 1 + ansible/roles/murano/tasks/config.yml | 77 ++- ansible/roles/murano/tasks/deploy.yml | 15 +- .../roles/murano/tasks/import_library_packages.yml | 55 ++ ansible/roles/murano/tasks/main.yml | 2 +- ansible/roles/murano/tasks/pull.yml | 17 +- ansible/roles/murano/tasks/reconfigure.yml | 66 +-- ansible/roles/murano/tasks/register.yml | 8 +- ansible/roles/murano/tasks/start.yml | 81 --- ansible/roles/murano/tasks/upgrade.yml | 9 +- ansible/roles/murano/templates/murano.conf.j2 | 37 +- ansible/roles/neutron/defaults/main.yml | 129 +++-- ansible/roles/neutron/handlers/main.yml | 104 ++-- ansible/roles/neutron/tasks/bootstrap.yml | 2 +- ansible/roles/neutron/tasks/bootstrap_service.yml | 25 +- .../roles/neutron/tasks/config-neutron-fake.yml | 4 +- ansible/roles/neutron/tasks/config.yml | 75 +-- ansible/roles/neutron/tasks/deploy.yml | 11 +- ansible/roles/neutron/tasks/ironic-check.yml | 7 +- ansible/roles/neutron/tasks/main.yml | 2 +- ansible/roles/neutron/tasks/precheck.yml | 10 + ansible/roles/neutron/tasks/pull.yml | 1 + ansible/roles/neutron/tasks/reconfigure.yml | 2 +- ansible/roles/neutron/tasks/register.yml | 8 +- ansible/roles/neutron/tasks/upgrade.yml | 6 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 +- .../neutron/templates/ironic-neutron-agent.json.j2 | 29 ++ .../neutron/templates/ironic_neutron_agent.ini.j2 | 9 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 11 + ansible/roles/neutron/templates/ml2_conf.ini.j2 | 17 +- .../roles/neutron/templates/ml2_conf_xenapi.ini.j2 | 2 +- .../templates/neutron-infoblox-ipam-agent.json.j2 | 29 ++ .../templates/neutron-l3-agent-wrapper.sh.j2 | 3 + .../neutron/templates/neutron-l3-agent.json.j2 | 6 + .../templates/neutron-linuxbridge-agent.json.j2 | 8 + .../templates/neutron-openvswitch-agent.json.j2 | 8 + .../roles/neutron/templates/neutron-server.json.j2 | 14 +- .../templates/neutron-vpnaas-agent-wrapper.sh.j2 | 17 - .../neutron/templates/neutron-vpnaas-agent.json.j2 | 60 --- ansible/roles/neutron/templates/neutron.conf.j2 | 36 +- .../roles/neutron/templates/neutron_lbaas.conf.j2 | 7 +- ansible/roles/neutron/templates/nsx.ini.j2 | 11 + .../roles/neutron/templates/vpnaas_agent.ini.j2 | 8 - ansible/roles/nova-hyperv/tasks/deploy.yml | 4 +- ansible/roles/nova-hyperv/tasks/main.yml | 2 +- ansible/roles/nova-hyperv/tasks/reconfigure.yml | 2 +- ansible/roles/nova/defaults/main.yml | 51 +- ansible/roles/nova/handlers/main.yml | 54 +- ansible/roles/nova/tasks/bootstrap.yml | 12 +- ansible/roles/nova/tasks/bootstrap_service.yml | 1 + ansible/roles/nova/tasks/bootstrap_xenapi.yml | 19 +- ansible/roles/nova/tasks/ceph.yml | 30 +- ansible/roles/nova/tasks/config-nova-fake.yml | 5 +- ansible/roles/nova/tasks/config.yml | 16 +- ansible/roles/nova/tasks/deploy.yml | 21 +- ansible/roles/nova/tasks/external_ceph.yml | 30 +- ansible/roles/nova/tasks/main.yml | 2 +- ansible/roles/nova/tasks/precheck.yml | 14 + ansible/roles/nova/tasks/pull.yml | 1 + ansible/roles/nova/tasks/reconfigure.yml | 2 +- ansible/roles/nova/tasks/register.yml | 16 +- ansible/roles/nova/tasks/simple_cell_setup.yml | 16 +- ansible/roles/nova/tasks/upgrade.yml | 8 +- ansible/roles/nova/templates/libvirtd.conf.j2 | 1 + ansible/roles/nova/templates/nova-libvirt.json.j2 | 4 +- ansible/roles/nova/templates/nova.conf.j2 | 30 +- .../nova/templates/placement-api-wsgi.conf.j2 | 2 + ansible/roles/octavia/defaults/main.yml | 9 + ansible/roles/octavia/handlers/main.yml | 16 +- ansible/roles/octavia/tasks/bootstrap.yml | 2 +- ansible/roles/octavia/tasks/bootstrap_service.yml | 1 + ansible/roles/octavia/tasks/config.yml | 15 +- ansible/roles/octavia/tasks/deploy.yml | 6 +- ansible/roles/octavia/tasks/main.yml | 2 +- ansible/roles/octavia/tasks/pull.yml | 1 + ansible/roles/octavia/tasks/reconfigure.yml | 2 +- ansible/roles/octavia/tasks/register.yml | 16 +- ansible/roles/octavia/tasks/upgrade.yml | 4 +- ansible/roles/octavia/templates/octavia.conf.j2 | 2 +- ansible/roles/opendaylight/defaults/main.yml | 2 + ansible/roles/opendaylight/handlers/main.yml | 5 +- ansible/roles/opendaylight/tasks/config.yml | 51 +- ansible/roles/opendaylight/tasks/deploy.yml | 2 +- ansible/roles/opendaylight/tasks/main.yml | 2 +- ansible/roles/opendaylight/tasks/pull.yml | 1 + ansible/roles/opendaylight/tasks/reconfigure.yml | 2 +- ansible/roles/opendaylight/tasks/upgrade.yml | 2 +- .../templates/10-rest-connector.xml.j2 | 42 ++ .../opendaylight/templates/opendaylight.json.j2 | 6 + .../templates/org.apache.karaf.features.cfg.j2 | 6 +- ansible/roles/openvswitch/defaults/main.yml | 7 +- ansible/roles/openvswitch/handlers/main.yml | 15 +- ansible/roles/openvswitch/tasks/config.yml | 5 +- ansible/roles/openvswitch/tasks/deploy.yml | 5 +- ansible/roles/openvswitch/tasks/ironic-check.yml | 6 - ansible/roles/openvswitch/tasks/main.yml | 2 +- ansible/roles/openvswitch/tasks/pull.yml | 1 + ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +- ansible/roles/openvswitch/tasks/upgrade.yml | 2 +- .../templates/openvswitch-db-server.json.j2 | 2 +- ansible/roles/ovs-dpdk/defaults/main.yml | 8 +- ansible/roles/ovs-dpdk/handlers/main.yml | 23 +- ansible/roles/ovs-dpdk/tasks/config.yml | 10 +- ansible/roles/ovs-dpdk/tasks/deploy.yml | 2 +- ansible/roles/ovs-dpdk/tasks/main.yml | 2 +- ansible/roles/ovs-dpdk/tasks/precheck.yml | 1 + ansible/roles/ovs-dpdk/tasks/prechecks.yml | 1 - ansible/roles/ovs-dpdk/tasks/pull.yml | 2 +- ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +- ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +- ansible/roles/panko/defaults/main.yml | 2 + ansible/roles/panko/handlers/main.yml | 4 +- ansible/roles/panko/tasks/bootstrap.yml | 10 +- ansible/roles/panko/tasks/bootstrap_service.yml | 1 + ansible/roles/panko/tasks/config.yml | 17 +- ansible/roles/panko/tasks/deploy.yml | 6 +- ansible/roles/panko/tasks/main.yml | 2 +- ansible/roles/panko/tasks/pull.yml | 1 + ansible/roles/panko/tasks/reconfigure.yml | 2 +- ansible/roles/panko/tasks/register.yml | 8 +- ansible/roles/panko/tasks/upgrade.yml | 4 +- ansible/roles/panko/templates/panko.conf.j2 | 9 +- ansible/roles/panko/templates/wsgi-panko.conf.j2 | 15 +- ansible/roles/prechecks/tasks/database_checks.yml | 10 +- ansible/roles/prechecks/tasks/main.yml | 10 +- ansible/roles/prechecks/tasks/service_checks.yml | 8 + ansible/roles/prechecks/tasks/user_checks.yml | 8 +- ansible/roles/prechecks/vars/main.yml | 2 +- ansible/roles/prometheus/defaults/main.yml | 132 +++++ ansible/roles/prometheus/handlers/main.yml | 148 ++++++ ansible/roles/prometheus/meta/main.yml | 3 + ansible/roles/prometheus/tasks/bootstrap.yml | 19 + ansible/roles/prometheus/tasks/check.yml | 1 + ansible/roles/prometheus/tasks/config.yml | 93 ++++ ansible/roles/prometheus/tasks/deploy.yml | 7 + ansible/roles/prometheus/tasks/main.yml | 2 + ansible/roles/prometheus/tasks/precheck.yml | 97 ++++ ansible/roles/prometheus/tasks/pull.yml | 11 + ansible/roles/prometheus/tasks/reconfigure.yml | 2 + ansible/roles/prometheus/tasks/upgrade.yml | 5 + ansible/roles/prometheus/templates/my.cnf.j2 | 5 + .../templates/prometheus-alertmanager.json.j2 | 23 + .../templates/prometheus-alertmanager.yml.j2 | 11 + .../templates/prometheus-cadvisor.json.j2 | 11 + .../templates/prometheus-haproxy-exporter.json.j2 | 11 + .../prometheus-memcached-exporter.json.j2 | 11 + .../templates/prometheus-mysqld-exporter.json.j2 | 18 + .../templates/prometheus-node-exporter.json.j2 | 11 + .../prometheus/templates/prometheus-server.json.j2 | 23 + .../roles/prometheus/templates/prometheus.yml.j2 | 69 +++ ansible/roles/qdrouterd/defaults/main.yml | 3 +- ansible/roles/qdrouterd/handlers/main.yml | 4 +- ansible/roles/qdrouterd/tasks/add_sasl_user.yml | 4 +- ansible/roles/qdrouterd/tasks/config.yml | 15 +- ansible/roles/qdrouterd/tasks/deploy.yml | 4 +- ansible/roles/qdrouterd/tasks/main.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 1 + ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +- ansible/roles/qdrouterd/tasks/upgrade.yml | 2 +- .../roles/qdrouterd/templates/qdrouterd.conf.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 7 + ansible/roles/rabbitmq/handlers/main.yml | 4 +- ansible/roles/rabbitmq/tasks/bootstrap.yml | 18 +- ansible/roles/rabbitmq/tasks/config.yml | 12 +- ansible/roles/rabbitmq/tasks/deploy.yml | 4 +- ansible/roles/rabbitmq/tasks/main.yml | 2 +- ansible/roles/rabbitmq/tasks/pull.yml | 1 + ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +- ansible/roles/rabbitmq/tasks/upgrade.yml | 8 +- ansible/roles/rally/defaults/main.yml | 2 + ansible/roles/rally/handlers/main.yml | 4 +- ansible/roles/rally/tasks/bootstrap.yml | 2 +- ansible/roles/rally/tasks/bootstrap_service.yml | 1 + ansible/roles/rally/tasks/config.yml | 15 +- ansible/roles/rally/tasks/deploy.yml | 4 +- ansible/roles/rally/tasks/main.yml | 2 +- ansible/roles/rally/tasks/pull.yml | 1 + ansible/roles/rally/tasks/reconfigure.yml | 2 +- ansible/roles/rally/tasks/upgrade.yml | 4 +- ansible/roles/redis/defaults/main.yml | 4 + ansible/roles/redis/handlers/main.yml | 8 +- ansible/roles/redis/tasks/config.yml | 13 +- ansible/roles/redis/tasks/deploy.yml | 2 +- ansible/roles/redis/tasks/main.yml | 2 +- ansible/roles/redis/tasks/pull.yml | 1 + ansible/roles/redis/tasks/reconfigure.yml | 2 +- ansible/roles/redis/tasks/upgrade.yml | 2 +- .../roles/redis/templates/redis-sentinel.conf.j2 | 1 + ansible/roles/sahara/defaults/main.yml | 15 + ansible/roles/sahara/handlers/main.yml | 12 +- ansible/roles/sahara/tasks/bootstrap.yml | 2 +- ansible/roles/sahara/tasks/bootstrap_service.yml | 3 +- ansible/roles/sahara/tasks/clone.yml | 7 + ansible/roles/sahara/tasks/config.yml | 17 +- ansible/roles/sahara/tasks/deploy.yml | 9 +- ansible/roles/sahara/tasks/main.yml | 2 +- ansible/roles/sahara/tasks/pull.yml | 1 + ansible/roles/sahara/tasks/reconfigure.yml | 2 +- ansible/roles/sahara/tasks/register.yml | 10 +- ansible/roles/sahara/tasks/upgrade.yml | 4 +- ansible/roles/sahara/templates/sahara.conf.j2 | 17 +- ansible/roles/searchlight/defaults/main.yml | 5 + ansible/roles/searchlight/handlers/main.yml | 8 +- ansible/roles/searchlight/tasks/bootstrap.yml | 2 +- .../roles/searchlight/tasks/bootstrap_service.yml | 1 + ansible/roles/searchlight/tasks/config.yml | 15 +- ansible/roles/searchlight/tasks/deploy.yml | 6 +- ansible/roles/searchlight/tasks/main.yml | 2 +- ansible/roles/searchlight/tasks/pull.yml | 1 + ansible/roles/searchlight/tasks/reconfigure.yml | 2 +- ansible/roles/searchlight/tasks/register.yml | 8 +- ansible/roles/searchlight/tasks/upgrade.yml | 4 +- .../searchlight/templates/searchlight.conf.j2 | 7 +- ansible/roles/senlin/defaults/main.yml | 16 + ansible/roles/senlin/handlers/main.yml | 12 +- ansible/roles/senlin/tasks/bootstrap.yml | 2 +- ansible/roles/senlin/tasks/bootstrap_service.yml | 3 +- ansible/roles/senlin/tasks/clone.yml | 7 + ansible/roles/senlin/tasks/config.yml | 17 +- ansible/roles/senlin/tasks/deploy.yml | 9 +- ansible/roles/senlin/tasks/main.yml | 2 +- ansible/roles/senlin/tasks/pull.yml | 1 + ansible/roles/senlin/tasks/reconfigure.yml | 2 +- ansible/roles/senlin/tasks/register.yml | 8 +- ansible/roles/senlin/tasks/upgrade.yml | 4 +- ansible/roles/senlin/templates/senlin.conf.j2 | 8 +- ansible/roles/skydive/defaults/main.yml | 5 +- ansible/roles/skydive/handlers/main.yml | 9 +- ansible/roles/skydive/tasks/config.yml | 13 +- ansible/roles/skydive/tasks/deploy.yml | 2 +- ansible/roles/skydive/tasks/main.yml | 2 +- ansible/roles/skydive/tasks/precheck.yml | 1 - ansible/roles/skydive/tasks/pull.yml | 1 + ansible/roles/skydive/tasks/reconfigure.yml | 2 +- ansible/roles/skydive/tasks/upgrade.yml | 2 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 19 +- .../skydive/templates/skydive-analyzer.conf.j2 | 12 +- ansible/roles/solum/defaults/main.yml | 21 + ansible/roles/solum/handlers/main.yml | 24 +- ansible/roles/solum/tasks/bootstrap.yml | 2 +- ansible/roles/solum/tasks/bootstrap_service.yml | 3 +- ansible/roles/solum/tasks/clone.yml | 7 + ansible/roles/solum/tasks/config.yml | 15 +- ansible/roles/solum/tasks/deploy.yml | 9 +- ansible/roles/solum/tasks/main.yml | 2 +- ansible/roles/solum/tasks/pull.yml | 1 + ansible/roles/solum/tasks/reconfigure.yml | 2 +- ansible/roles/solum/tasks/register.yml | 12 +- ansible/roles/solum/tasks/upgrade.yml | 4 +- ansible/roles/solum/templates/solum.conf.j2 | 2 +- ansible/roles/stop/tasks/main.yml | 4 +- ansible/roles/stop/tasks/stop_containers.yml | 1 - ansible/roles/swift/defaults/main.yml | 3 + ansible/roles/swift/tasks/config.yml | 21 +- ansible/roles/swift/tasks/deploy.yml | 8 +- ansible/roles/swift/tasks/main.yml | 2 +- ansible/roles/swift/tasks/pull.yml | 6 + ansible/roles/swift/tasks/reconfigure.yml | 8 +- ansible/roles/swift/tasks/register.yml | 12 +- ansible/roles/swift/tasks/start.yml | 44 +- ansible/roles/swift/tasks/stop_and_start.yml | 3 +- ansible/roles/swift/tasks/upgrade.yml | 4 +- ansible/roles/swift/templates/account.conf.j2 | 2 +- ansible/roles/swift/templates/container.conf.j2 | 2 +- ansible/roles/swift/templates/object.conf.j2 | 2 +- ansible/roles/swift/templates/proxy-server.conf.j2 | 11 +- ansible/roles/swift/templates/rsyncd.conf.j2 | 2 - ansible/roles/tacker/defaults/main.yml | 6 + ansible/roles/tacker/handlers/main.yml | 8 +- ansible/roles/tacker/tasks/bootstrap.yml | 2 +- ansible/roles/tacker/tasks/bootstrap_service.yml | 1 + ansible/roles/tacker/tasks/clone.yml | 1 + ansible/roles/tacker/tasks/config.yml | 17 +- ansible/roles/tacker/tasks/deploy.yml | 8 +- ansible/roles/tacker/tasks/main.yml | 2 +- ansible/roles/tacker/tasks/pull.yml | 1 + ansible/roles/tacker/tasks/reconfigure.yml | 2 +- ansible/roles/tacker/tasks/register.yml | 8 +- ansible/roles/tacker/tasks/upgrade.yml | 4 +- ansible/roles/tacker/templates/tacker.conf.j2 | 4 +- ansible/roles/telegraf/defaults/main.yml | 4 +- ansible/roles/telegraf/handlers/main.yml | 4 +- ansible/roles/telegraf/tasks/config.yml | 15 +- ansible/roles/telegraf/tasks/deploy.yml | 2 +- ansible/roles/telegraf/tasks/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 1 + ansible/roles/telegraf/tasks/reconfigure.yml | 2 +- ansible/roles/telegraf/tasks/upgrade.yml | 2 +- ansible/roles/telegraf/templates/telegraf.conf.j2 | 4 +- ansible/roles/tempest/defaults/main.yml | 7 +- ansible/roles/tempest/handlers/main.yml | 4 +- ansible/roles/tempest/tasks/config.yml | 13 +- ansible/roles/tempest/tasks/deploy.yml | 2 +- ansible/roles/tempest/tasks/main.yml | 2 +- ansible/roles/tempest/tasks/pull.yml | 1 + ansible/roles/tempest/tasks/reconfigure.yml | 2 +- ansible/roles/tempest/tasks/upgrade.yml | 2 +- ansible/roles/trove/defaults/main.yml | 18 + ansible/roles/trove/handlers/main.yml | 32 +- ansible/roles/trove/tasks/bootstrap.yml | 2 +- ansible/roles/trove/tasks/bootstrap_service.yml | 3 +- ansible/roles/trove/tasks/clone.yml | 6 + ansible/roles/trove/tasks/config.yml | 68 ++- ansible/roles/trove/tasks/deploy.yml | 9 +- ansible/roles/trove/tasks/main.yml | 2 +- ansible/roles/trove/tasks/pull.yml | 1 + ansible/roles/trove/tasks/reconfigure.yml | 2 +- ansible/roles/trove/tasks/register.yml | 8 +- ansible/roles/trove/tasks/upgrade.yml | 4 +- ansible/roles/trove/templates/trove-api.json.j2 | 8 +- .../roles/trove/templates/trove-conductor.conf.j2 | 4 +- .../roles/trove/templates/trove-conductor.json.j2 | 8 +- .../trove/templates/trove-taskmanager.conf.j2 | 13 +- .../trove/templates/trove-taskmanager.json.j2 | 8 +- ansible/roles/trove/templates/trove.conf.j2 | 11 +- ansible/roles/vitrage/defaults/main.yml | 29 +- ansible/roles/vitrage/handlers/main.yml | 30 +- ansible/roles/vitrage/tasks/bootstrap.yml | 2 +- ansible/roles/vitrage/tasks/bootstrap_service.yml | 3 +- ansible/roles/vitrage/tasks/check.yml | 1 + ansible/roles/vitrage/tasks/clone.yml | 7 + ansible/roles/vitrage/tasks/config.yml | 19 +- ansible/roles/vitrage/tasks/deploy.yml | 9 +- ansible/roles/vitrage/tasks/main.yml | 2 +- ansible/roles/vitrage/tasks/pull.yml | 1 + ansible/roles/vitrage/tasks/reconfigure.yml | 2 +- ansible/roles/vitrage/tasks/register.yml | 18 +- ansible/roles/vitrage/tasks/upgrade.yml | 4 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 25 +- .../roles/vitrage/templates/wsgi-vitrage.conf.j2 | 4 + ansible/roles/vmtp/defaults/main.yml | 2 + ansible/roles/vmtp/handlers/main.yml | 4 +- ansible/roles/vmtp/tasks/config.yml | 11 +- ansible/roles/vmtp/tasks/deploy.yml | 2 +- ansible/roles/vmtp/tasks/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 1 + ansible/roles/vmtp/tasks/reconfigure.yml | 2 +- ansible/roles/vmtp/tasks/upgrade.yml | 2 +- ansible/roles/watcher/defaults/main.yml | 19 + ansible/roles/watcher/handlers/main.yml | 18 +- ansible/roles/watcher/tasks/bootstrap.yml | 2 +- ansible/roles/watcher/tasks/bootstrap_service.yml | 3 +- ansible/roles/watcher/tasks/clone.yml | 7 + ansible/roles/watcher/tasks/config.yml | 13 +- ansible/roles/watcher/tasks/deploy.yml | 9 +- ansible/roles/watcher/tasks/main.yml | 2 +- ansible/roles/watcher/tasks/pull.yml | 1 + ansible/roles/watcher/tasks/reconfigure.yml | 2 +- ansible/roles/watcher/tasks/register.yml | 8 +- ansible/roles/watcher/tasks/upgrade.yml | 4 +- ansible/roles/watcher/templates/watcher.conf.j2 | 2 +- ansible/roles/zookeeper/defaults/main.yml | 30 ++ ansible/roles/zookeeper/handlers/main.yml | 26 + ansible/roles/zookeeper/meta/main.yml | 3 + ansible/roles/zookeeper/tasks/check.yml | 1 + ansible/roles/zookeeper/tasks/config.yml | 78 +++ ansible/roles/zookeeper/tasks/deploy.yml | 5 + ansible/roles/zookeeper/tasks/main.yml | 2 + ansible/roles/zookeeper/tasks/precheck.yml | 21 + ansible/roles/zookeeper/tasks/pull.yml | 11 + ansible/roles/zookeeper/tasks/reconfigure.yml | 2 + ansible/roles/zookeeper/tasks/upgrade.yml | 5 + ansible/roles/zookeeper/templates/myid.j2 | 5 + ansible/roles/zookeeper/templates/zookeeper.cfg.j2 | 8 + .../roles/zookeeper/templates/zookeeper.json.j2 | 29 ++ ansible/roles/zun/defaults/main.yml | 38 +- ansible/roles/zun/handlers/main.yml | 37 +- ansible/roles/zun/tasks/bootstrap.yml | 2 +- ansible/roles/zun/tasks/bootstrap_service.yml | 3 +- ansible/roles/zun/tasks/clone.yml | 7 + ansible/roles/zun/tasks/config.yml | 27 +- ansible/roles/zun/tasks/deploy.yml | 9 +- ansible/roles/zun/tasks/main.yml | 2 +- ansible/roles/zun/tasks/precheck.yml | 20 + ansible/roles/zun/tasks/pull.yml | 1 + ansible/roles/zun/tasks/reconfigure.yml | 2 +- ansible/roles/zun/tasks/register.yml | 8 +- ansible/roles/zun/tasks/upgrade.yml | 4 +- ansible/roles/zun/templates/wsgi-zun.conf.j2 | 2 + ansible/roles/zun/templates/zun-wsproxy.json.j2 | 24 + ansible/roles/zun/templates/zun.conf.j2 | 15 +- ansible/site.yml | 175 ++++--- .../demos/magnum/redis-kube/redis-controller.yaml | 28 +- contrib/demos/magnum/redis-kube/redis-proxy.yaml | 10 +- .../redis-kube/redis-sentinel-controller.yaml | 16 +- contrib/demos/tacker/deploy-tacker-demo | 8 +- contrib/demos/tacker/deploy-tacker-demo-sfc | 4 +- contrib/dev/vagrant/Vagrantfile | 14 +- contrib/dev/vagrant/Vagrantfile.custom.example | 5 + contrib/dev/vagrant/bootstrap.sh | 69 ++- .../kolla-for-openstack-development.rst | 52 +- etc/kolla/globals.yml | 100 +++- etc/kolla/passwords.yml | 22 +- kolla_ansible/cmd/genpwd.py | 20 +- lower-constraints.txt | 104 ++++ .../add-blazar-dashboard-g6595d27c034f8xc.yaml | 3 + .../notes/add-congress-877644b4b0e2ed0a.yaml | 6 +- .../add-congress-dashboard-q65x5d27c034f8xc.yaml | 3 + .../add-designate-producer-b6e94153ff9bc45c.yaml | 2 +- .../notes/add-forks-flag-faf0d27618265bd4.yaml | 5 + .../add-freezer-sceduler-b646fba6666889a1.yaml | 4 + ...izon-custom-settings-file-d5dfab8a1a3b4ee7.yaml | 5 + .../notes/add-kafka-role-ec7a9def49e06e51.yaml | 5 + .../notes/add-monasca-api-eb536dd5a6d77563.yaml | 5 + .../add-monasca-log-api-d47662a4e643cd7f.yaml | 5 + ...add-monasca-log-persister-f4da4370a0c5777e.yaml | 6 + ...d-monasca-log-transformer-80d985fc77603478.yaml | 5 + ...tron-ipam-driver-infoblox-3621f44bb0017e91.yaml | 8 + .../add-octavia-dashboard-f6595d27c034f89c.yaml | 3 + .../add-trove-singletenant-dd02a7b7cc1a4f99.yaml | 6 + .../notes/add-watcher-a97995ace827cf71.yaml | 10 +- .../notes/add-zookeeper-role-9eb474f26035ec77.yaml | 5 + .../allow-disabling-nova-ssh-51028805f163e5a2.yaml | 6 + ...l-swift-as-glance-backend-242a6dbf7c830d7a.yaml | 7 + ...tstrap-servers-virtualenv-723a0e80942604bd.yaml | 23 + .../notes/congress-broken-cbf8ca59d90a85cb.yaml | 2 +- .../custom_option_docker-f5b810a8edce06fa.yaml | 5 + ...efault_docker_volume_type-251636f92cb73aee.yaml | 7 + ...precate-some-config-files-0ed8c75f6bb4aa26.yaml | 1 - .../disable-glance-registry-fdbba9daa5169b06.yaml | 4 + .../disable-ntp-service-fdcaj9daa5169b06.yaml | 4 + .../notes/disable_tlsv11-51d6be67d593f7ab.yaml | 5 + .../docker_insecure_registry-857bfb9c760aa3bf.yaml | 6 + .../notes/dvr-mode-property-13b3699f9a9c4359.yaml | 23 + .../enable-chrony-default-g6595d27c034f8cc.yaml | 3 + ...able-nfs-volume-snapshots-a0347a31662b1109.yaml | 2 +- .../expire-mariadb-bin-logs-c3df2b87460ca807.yaml | 3 + .../notes/extra-ml2-plugins-817d0b392c06ffc7.yaml | 7 + ...ters-for-ironic-inspector-0b4ad3b4de47129b.yaml | 5 + .../fix-ansible-warning-f9b382a13446f625.yaml | 5 + ...hi-external-ceph-filepath-672ea7ac3c325ec2.yaml | 5 + .../haproxy-listen-options-ef1dc74a239f6f9d.yaml | 5 + .../horizon-keystone-url-97dcc26389f6d025.yaml | 6 + ...izon_keystone_multidomain-c7a80d670f3654d8.yaml | 2 +- ...nce-zero-downtime-upgrade-822fea4739beda62.yaml | 4 + ...nt-ironic-rolling-upgrade-c45536fe4814212e.yaml | 5 + .../ironic-dnsmasq-gateway-5a887a0a2f946bd5.yaml | 6 + .../kolla-ceph-bluestore-b48673a85dda06d1.yaml | 6 + ...dap-grafana-configuration-0112d84771addbe7.yaml | 4 + ...ole-with-neutron-l3-agent-90b91725344dda76.yaml | 12 + .../notes/nsxv3-support-0bd45afcb7e71cc5.yaml | 3 + .../notes/onos-support-2ea385cceb8104d6.yaml | 5 + .../notes/opendaylight-role-b1787bc458da5bc4.yaml | 2 +- ...ndaylight_release-removal-5077cd473bee6dbd.yaml | 5 + .../notes/optional-sudoers-f5ea08d6f7cbed2b.yaml | 7 + .../prometheus-alertmanager-dd6d38da2357b917.yaml | 5 + .../notes/prometheus-dbb1aee8c88943c4.yaml | 6 + .../notes/reduce-ceph-pgs-27e88e3b6e3b809c.yaml | 13 + .../remove-nova-network-76e1c9b51a4acd5f.yaml | 1 - ...d-keystone-token-provider-c3a3ba2da5fd417d.yaml | 5 + .../specify-task-become-84f83707f612bcf3.yaml | 4 +- .../support-ceph-dashboard-3ee5e489ea16ea25.yaml | 5 + ...d-diff-mode-for-genconfig-97703a2ed13ab9ec.yaml | 6 + ...ker-runtime-directory-set-da7e77a70626c0d1.yaml | 5 + .../support-ironic-ipxe-boot-2ea7f598748403bd.yaml | 5 + ...port_ironic_neutron_agent-3eac1e71069ea845.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/queens.rst | 6 + requirements.txt | 10 +- setup.cfg | 9 - specs/ansible-multi.rst | 2 +- specs/prometheus.rst | 382 ++++++++++++++ test-requirements.txt | 9 +- tools/cleanup-containers | 5 + tools/cleanup-host | 9 +- tools/init-runonce | 6 +- tools/init-vpn | 6 + tools/kolla-ansible | 38 +- tools/kolla-libvirt-guests.service | 19 + tools/ovs-dpdkctl.sh | 10 +- tools/playbook-setup-nodes.yml | 10 +- tools/pre-commit-hook | 8 - tools/setup-compute-libvirt.yml | 24 + tools/setup_gate.sh | 119 +++-- tools/virt-guest-shutdown.target | 5 + tox.ini | 57 ++- zuul.d/base.yaml | 27 + zuul.d/jobs.yaml | 90 ++++ zuul.d/nodesets.yaml | 48 ++ zuul.d/project.yaml | 29 ++ 1082 files changed, 15322 insertions(+), 5749 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4f880bb..d7f8067 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ docker>=2.4.2 # Apache-2.0 -Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) +Jinja2>=2.10 # BSD License (3 clause) @@ -8 +8 @@ six>=1.10.0 # MIT -oslo.config>=5.1.0 # Apache-2.0 +oslo.config>=5.2.0 # Apache-2.0 @@ -10,2 +10,2 @@ oslo.utils>=3.33.0 # Apache-2.0 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=16.0 # PSF/ZPL -PyYAML>=3.10 # MIT +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL +PyYAML>=3.12 # MIT @@ -13 +13 @@ netaddr>=0.7.18 # BSD -cryptography!=2.0,>=1.9 # BSD/Apache-2.0 +cryptography>=2.1 # BSD/Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index d7d44b5..9782665 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,2 +10 @@ extras>=1.0.0 # MIT -hacking>=0.10.0 -openstackdocstheme>=1.18.1 # Apache-2.0 +hacking>=0.10.0,<1.1.0 @@ -14 +12,0 @@ oslotest>=3.2.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 @@ -16 +14 @@ PrettyTable<0.8,>=0.7.1 # BSD -PyYAML>=3.10 # MIT +PyYAML>=3.12 # MIT @@ -18 +16 @@ python-ceilometerclient>=2.5.0 # Apache-2.0 -python-neutronclient>=6.3.0 # Apache-2.0 +python-neutronclient>=6.7.0 # Apache-2.0 @@ -21 +18,0 @@ pytz>=2013.6 # MIT -sphinx!=1.6.6,>=1.6.2 # BSD

1 0

oslo.config 6.6.2 (stein)
by no-reply＠openstack.org 24 Oct '18

24 Oct '18

We are ecstatic to announce the release of: oslo.config 6.6.2: Oslo Configuration API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through launchpad: https://bugs.launchpad.net/oslo.config For more details, please see below. Changes in oslo.config 6.6.1..6.6.2 ----------------------------------- c09b804 Update sphinx extension logging 2298afe Clean up .gitignore references to personal tools Diffstat (except docs and test files) ------------------------------------- .gitignore | 15 +++++++++++---- oslo_config/sphinxconfiggen.py | 10 +++++++--- 2 files changed, 18 insertions(+), 7 deletions(-)

1 0

oslo.messaging 9.1.1 (stein)
by no-reply＠openstack.org 24 Oct '18

24 Oct '18

We are pleased to announce the release of: oslo.messaging 9.1.1: Oslo Messaging API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. Changes in oslo.messaging 9.1.0..9.1.1 -------------------------------------- 92b4080 Use '/' for the vhost if the transport_url has no trailing '/' b868aeb Clean up .gitignore references to personal tools Diffstat (except docs and test files) ------------------------------------- .gitignore | 13 +++++++++++-- oslo_messaging/_drivers/impl_rabbit.py | 2 +- 2 files changed, 12 insertions(+), 3 deletions(-)

1 0

openstackdocstheme 1.27.1
by no-reply＠openstack.org 23 Oct '18

23 Oct '18

We jubilantly announce the release of: openstackdocstheme 1.27.1: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. Changes in openstackdocstheme 1.27.0..1.27.1 -------------------------------------------- a23e1c4 The theme is openstackdocs Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/paths.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

openstacksdk 0.18.1 (stein)
by no-reply＠openstack.org 22 Oct '18

22 Oct '18

We are excited to announce the release of: openstacksdk 0.18.1: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.18.1 ^^^^^^ Bug Fixes * Fixed a regression in the new *TaskManager* code which caused programs that were passing in a *TaskManager* that they had been running *start* on to fail due to a double call. Changes in openstacksdk 0.18.0..0.18.1 -------------------------------------- 448cda9 Don't start task managers passed in to Connection Diffstat (except docs and test files) ------------------------------------- openstack/connection.py | 11 ++++++++--- .../notes/no-start-task-manager-56773f3ea5eb3a59.yaml | 6 ++++++ 2 files changed, 14 insertions(+), 3 deletions(-)

1 0

openstackdocstheme 1.27.0
by no-reply＠openstack.org 22 Oct '18

22 Oct '18

We are gleeful to announce the release of: openstackdocstheme 1.27.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. 1.27.0 ^^^^^^ Bug Fixes * Fix API breakages in 1.26.0: Readd "get_openstack_logo_path", add default parameter to "get_pdf_theme_path". Changes in openstackdocstheme 1.26.0..1.27.0 -------------------------------------------- 47908ab Readd get_openstack_logo_path 7ca59c8 Set default paths for OpenStack Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/paths.py | 10 ++++++++-- .../notes/get_openstack_logo_path-6cdb6538bc5893c3.yaml | 5 +++++ 2 files changed, 13 insertions(+), 2 deletions(-)

1 0

python-zunclient 3.1.0 (stein)
by no-reply＠openstack.org 22 Oct '18

22 Oct '18

We are tickled pink to announce the release of: python-zunclient 3.1.0: Client Library for Zun This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-zunclient Download the package from: https://pypi.org/project/python-zunclient Please report issues through launchpad: https://bugs.launchpad.net/python-zunclient For more details, please see below. Changes in python-zunclient 3.0.0..3.1.0 ---------------------------------------- 5b9b737 Disable devstack gate tempest in zunclient job 0905c41 Support API version discovery ae8339e Remove an empty line in .zuul.yaml 3d0457e Encode injected file data in containers module Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - zunclient/api_versions.py | 59 +++++++++++++++++- zunclient/client.py | 5 -- zunclient/common/utils.py | 2 +- zunclient/osc/plugin.py | 52 +++++++++++----- zunclient/shell.py | 42 ++++++++++++- zunclient/v1/containers.py | 9 +++ zunclient/v1/versions.py | 6 ++ 13 files changed, 267 insertions(+), 39 deletions(-)

1 0

horizon 14.0.1 (rocky)
by no-reply＠openstack.org 22 Oct '18

22 Oct '18

We eagerly announce the release of: horizon 14.0.1: OpenStack Dashboard This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/horizon/ For more details, please see below. Changes in horizon 14.0.0..14.0.1 --------------------------------- 19865ee Add enabled check in Backups panel 7cda4df Imported Translations from Zanata dc99354 Imported Translations from Zanata c4ced59 Imported Translations from Zanata a1d8c00 Imported Translations from Zanata d6c6b79 Imported Translations from Zanata e975afd Imported Translations from Zanata 4a7f086 Imported Translations from Zanata 03ce318 Imported Translations from Zanata 2719b5c import zuul job settings from project-config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 9 + .../locale/id/LC_MESSAGES/doc-configuration.po | 4272 ++++++++++++++++++++ openstack_auth/locale/ru/LC_MESSAGES/django.po | 14 +- .../dashboards/project/backups/panel.py | 6 + .../locale/fr/LC_MESSAGES/django.po | 66 +- .../locale/fr/LC_MESSAGES/djangojs.po | 64 +- .../locale/ko_KR/LC_MESSAGES/django.po | 17 +- .../locale/ru/LC_MESSAGES/django.po | 51 +- 17 files changed, 13649 insertions(+), 16 deletions(-)

1 0

openstacksdk 0.18.0 (stein)
by no-reply＠openstack.org 19 Oct '18

19 Oct '18

We are jazzed to announce the release of: openstacksdk 0.18.0: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.18.0 ^^^^^^ New Features ************ * The networking API v2 specification, which is implemented by OpenStack Neutron, features an optional routes parameter - when updating a router (PUT requests). Static routes are crucial for routers to handle traffic from subnets not directly connected to a router. The routes parameter has now been added to the OpenStackCloud.update_router method as a list of dictionaries with destination and nexthop parameters. * The "OpenStackCloud" bare metal NIC calls now support all microversions supported by the SDK. Previously version 1.6 was hardcoded. * Added "wait_for_node_reservation" to the baremetal proxy. * The bare metal operations now retry HTTP 409 and 503 by default. The number of retries can be changes via the "baremetal_status_code_retries" configuration option (defaulting to 5). * Adds support for bare metal node validation to the bare metal proxy. * Implements VIF attach/detach API for bare metal nodes. * Containers are now searchable both with a JMESPath expression or a dict of container attributes via the "openstack.connection.Connection.search_containers" function. * Implement fwaas v2 resources for managing firewall groups, rules and policies. * Added "get_object_raw" method for downloading an object from swift and returning a raw requests Response object. * The "get_machine", "update_machine" and "patch_machine" calls now support all Bare Metal API microversions supported by the SDK. Previously they used 1.6 unconditionally. * create_network now exposes the mtu api option in accordance to network v2 api. This allows the operator to adjust the given MTU value which is needed in various complex network deployments. * Add support for networks being configured as the primary nat_source in clouds.yaml. * Objects are now searchable both with a JMESPath expression or a dict of object attributes via the "openstack.connection.Connection.search_object" function. * Added "stream_object" method for getting object content in an iterator. * Added a new property, 'port_security_enabled' which is a boolean to enable or disable port_secuirty during network creation. The default behavior will enable port security, security group and anti spoofing will act as before. When the attribute is set to False, security group and anti spoofing are disabled on the ports created on this network. Upgrade Notes ************* * When using the Image API, it is no longer possible to set arbitrary properties, not known to the SDK, via "image.update_image" API. * The baremetal API now returns "available" as provision state for nodes available for deployment. Previously, "None" could be returned for API version 1.1 (early Kilo) and older. * "openstack.connection.Connection.create_object" no longer creates a container if one doesn't exist. It is the user's responsibility to create a container before using it. * In anticipation of the upcoming 1.0 release, all the things that have been marked as deprecated have been removed. * "openstack.profile.Profile" has been removed. "openstack.config" should be used directly instead. * "openstack.resource.Resource.get" has been renamed to "openstack.resource.Resource.fetch" to prevent conflicting with a "dict" method of the same name. While most consumer code is unlikely to call this method directly, this is a breaking change. * "openstack.resource.Resource.update" has been renamed to "openstack.resource.Resource.commit" to prevent conflicting with a "dict" method of the same name. While most consumer code is unlikely to call this method directly, this is a breaking change. * The base "Resource" field "location" is no longer drawn from the "Location" HTTP header, but is instead a dict containing information about cloud, domain and project. The location dict is a feature of shade objects and is being added to all objects as part of the alignment of shade and sdk. Deprecation Notes ***************** * The *OpenStackCloud* "wait_for_baremetal_node_lock" call is deprecated. Generally, users should not have to call it. The new "wait_for_node_reservation" from the baremetal proxy can be used when needed. * The "OpenStackCloud.validate_node" call was deprecated in favor of "OpenStackCloud.validate_machine". Bug Fixes ********* * Adds support for error messages from the bare metal service. * Correct updating bare metal resources. Previously an incorrect body used to be sent. * Fixed an issue where passing an iterator to the "data" parameter of "create_object" for chunked uploads failed due to attempting to calculate the length of the data. * Re-added support for *v4-fixed-ip* and *v6-fixed-ip* in the *nics* parameter to *create_server*. These are aliaes for *fixed_ip* provided by novaclient which shade used to use. The switch to REST didn't include support for these aliases, resulting in a behavior regression. Changes in openstacksdk 0.17.0..0.18.0 -------------------------------------- d91723d Support v4-fixed-ip and v6-fixed-ip in create_server a7dce7b Update sphinx extension logging d36e835 Add stackviz processing to functional tests 17230af Move wait_for_baremetal_node_lock to the baremetal proxy 41e0c46 Convert inspect_machine to use the baremetal proxy 38f6050 Adding two new regions and dynamic auth_url based on region name. 0646a73 Update ElastX cloud profile beedbcc Update Auro cloud profile c07c39b Rearrange shade image code c9e3374 Revert the Proxy metaclass 1370553 Make it clear that OpenStackCloud is a mixin 877326a Start shifting cloud object-store methods to proxy 603ba0d Remove all the deprecated stuff 25f74eb Switch bare metal NIC actions in OpenStackCloud to baremetal Proxy calls d75056a Use network proxy in openstack.cloud 5a4845c Remove duplicate code 7b8a2e0 cloud: rename with deprecation validate_node -> validate_machine af3a8f4 Wire in retries for all baremetal actions 0962342 Correct updating baremetal nodes by name or ID 3ce157c Add some warnings and clarifications for discovery 9db8bae Make RateLimitingTaskManager the TaskManager 348c9e8 Import rate limiting TaskManager from nodepool 20199e8 Remove api version default values 071e567 Use discovery instead of config to create proxies a70c291 Set endpoint_override from endpoint with noauth a030d82 Remove profile 5a99852 Support firewall service for SDK 6befbbe Clean up python3 test and split networking into a job 6b27429 Add functional tests for clustering 7721af1 Clarify error message is from nova 3f49aa3 Format URL when updating image props in Glance v1 70d665b Add compute API info and fix provider names 23c6f3a Update vendor support info for vexxhost 12a4679 Update vendor support info for switchengines 97bd7e4 Update vendor support info for ecs 943f606 Update vendor support info for catalyst b5c96c5 Restore timeout_scaling_factor d70bdeb Fix location region field in docs 1e46a95 Run all tasks through the threadpool e4ef460 Update the URL in doc fb74c7d Turn down stevedore and urllib logging f0138e4 Update .zuul.yaml 2ea35b2 Update baremetal objects with fields added up to Rocky 19124c9 Add sjc1 to vexxhost profile 595f4ca Add support for configured NAT source variable 4cdf15c Explicitly set logging levels for external libs c3e5eeb Implement network update d7470b5 Normalize security groups when using Neutron e080148 Normalize image when using PUT on Glance v2 a4f1f2f Fix typo eb92849 Consolidate cloud/base.py into functional/base.py e0c7d24 Implement volume update e40ccf7 Allow JMESPath on searching networking resources f96b132 Allow search on objects c340e20 Listing objects to return Munch objects a967956 Allow search on containers 782919e Change the method of role update cb2f9de Fix list_recordsets to deal with top-level key a748910 baremetal: implement validate_node 4dd309f Support bare metal service error messages 7488588 baremetal: support newer microversions in {get,update,patch}_machine 5abdc60 Run bifrost integration test jobs 8c2646e Listing containers to return Munch objects 46763e1 Invalidate cache upon container deletion d445987 Handle missing endpoint_data in maximum_supported_microversions edbcb6c switch documentation job to new PTI d92678a import zuul job settings from project-config 4a34f8c Alias NotFoundException to ResourceNotFound 934725d Remove the duplicated word d876240 baremetal: add support for VIF attach/detach API 04f7af7 Use the base Resource's JSON patch support in Image 14b4609 Correct update operations for baremetal ac8df03 Add simple create/show/delete functional tests for all baremetal resources 5d440e0 Fix the heat template resource more cleaner 2f97394 Make resource a dict subclass usable by shade layer d4db52f Remove special handling of stacks e3e9a9d Add computed attribute type and location to base resource 2d472ae Rename Resource get and update to not clash with dict 7590bea Add more options to enable ansible testing feature 8c2eac3 Stop using the -consumer devstack jobs 17c7a29 Fix to_dict recursion issues with circular aliases 23ace6b Stop calling get_all_types when service-type is None 75eaaab Don't wait for task in submit_task 5b8ef64 Update storyboard links to use name 3280198 fix 2 typos in documentation 6464422 Pass microversion info through from Profile a1fc820 python-shade expose MTU setting. 8eb788af Adds toggle port security on network create 7fd4c33 Add a simple baremetal functional job 4c49acd Add support for static routes f213de3 Handle image and object key metadata for shade transition 1cd992c Update config doc url to point to openstacksdk 8ccece3 Remove the auto-creation of containers in create_object 96eac6a Add support for streaming object responses de981a3 Add method for returning a raw response for an object 94b2bf0 Update create_object to handled chunked data 100fd90 Support for microversions in baremetal resources a3c1690 Support for microversions in base Resource 9281c5b Update reno for stable/rocky 73ab97c Support passing profile to get_one 71067ce Send disk_over_commit if nova api < 2.25 d9f648d Docs: Remove duplicate content in connection page 66ebf04 Docs: Include CloudRegion class 031acd9 baremetal: correct the default timeout in Node.set_provision_state 722d813 Run ansible tests against specific public cloud 850b99b Add some backoff to find_best_address 05a340d Fix filter style consistency for keystone assignment API 9b188ba Fix wait for futures append 'result' error Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 204 +++- CONTRIBUTING.rst | 2 +- HACKING.rst | 2 +- README.rst | 2 +- SHADE-MERGE-TODO.rst | 4 +- .../contributor/create/examples/resource/fake.py | 6 +- .../create/examples/resource/fake_service.py | 13 +- examples/clustering/cluster.py | 34 +- examples/connect.py | 3 +- lower-constraints.txt | 5 +- openstack/_adapter.py | 9 +- openstack/_log.py | 17 +- openstack/_meta/_proxy_templates.py | 150 --- openstack/_meta/connection.py | 53 +- openstack/_meta/proxy.py | 124 -- openstack/baremetal/baremetal_service.py | 14 +- openstack/baremetal/v1/_common.py | 9 + openstack/baremetal/v1/_proxy.py | 247 ++-- openstack/baremetal/v1/chassis.py | 13 +- openstack/baremetal/v1/driver.py | 94 +- openstack/baremetal/v1/node.py | 345 +++++- openstack/baremetal/v1/port.py | 23 +- openstack/baremetal/v1/port_group.py | 20 +- openstack/baremetal/version.py | 4 - openstack/block_storage/block_storage_service.py | 15 +- openstack/block_storage/v2/_proxy.py | 42 + openstack/block_storage/v2/snapshot.py | 6 +- openstack/block_storage/v2/stats.py | 4 +- openstack/block_storage/v2/type.py | 4 +- openstack/block_storage/v2/volume.py | 6 +- openstack/cloud/__init__.py | 39 - openstack/cloud/_utils.py | 2 +- openstack/cloud/meta.py | 35 +- openstack/cloud/openstackcloud.py | 1287 ++++++++++++-------- openstack/clustering/clustering_service.py | 17 +- openstack/clustering/v1/_proxy.py | 151 --- openstack/clustering/v1/action.py | 4 +- openstack/clustering/v1/build_info.py | 4 +- openstack/clustering/v1/cluster.py | 8 +- openstack/clustering/v1/cluster_attr.py | 2 - openstack/clustering/v1/cluster_policy.py | 4 +- openstack/clustering/v1/event.py | 4 +- openstack/clustering/v1/node.py | 12 +- openstack/clustering/v1/policy.py | 14 +- openstack/clustering/v1/policy_type.py | 4 +- openstack/clustering/v1/profile.py | 14 +- openstack/clustering/v1/profile_type.py | 4 +- openstack/clustering/v1/receiver.py | 8 +- openstack/clustering/v1/service.py | 2 - openstack/clustering/version.py | 4 - openstack/compute/compute_service.py | 14 +- openstack/compute/v2/_proxy.py | 177 ++- openstack/compute/v2/availability_zone.py | 3 - openstack/compute/v2/extension.py | 4 +- openstack/compute/v2/flavor.py | 10 +- openstack/compute/v2/hypervisor.py | 7 +- openstack/compute/v2/image.py | 6 +- openstack/compute/v2/keypair.py | 4 +- openstack/compute/v2/limits.py | 8 +- openstack/compute/v2/server.py | 27 +- openstack/compute/v2/server_group.py | 4 +- openstack/compute/v2/server_interface.py | 6 +- openstack/compute/v2/server_ip.py | 2 - openstack/compute/v2/service.py | 5 +- openstack/compute/v2/volume_attachment.py | 6 +- openstack/compute/version.py | 4 - openstack/config/cloud_region.py | 41 +- openstack/config/defaults.json | 18 +- openstack/config/loader.py | 7 +- openstack/config/schema.json | 9 - openstack/config/vendors/auro.json | 8 +- openstack/config/vendors/citycloud.json | 6 +- openstack/config/vendors/dreamhost.json | 13 - openstack/config/vendors/elastx.json | 2 +- openstack/config/vendors/vexxhost.json | 3 +- openstack/connection.py | 32 +- openstack/database/database_service.py | 14 +- openstack/database/v1/database.py | 2 - openstack/database/v1/flavor.py | 4 +- openstack/database/v1/instance.py | 6 +- openstack/database/v1/user.py | 2 - openstack/exceptions.py | 55 +- openstack/identity/identity_service.py | 26 +- openstack/identity/v2/extension.py | 4 +- openstack/identity/v2/role.py | 6 +- openstack/identity/v2/tenant.py | 6 +- openstack/identity/v2/user.py | 6 +- openstack/identity/v3/credential.py | 8 +- openstack/identity/v3/domain.py | 8 +- openstack/identity/v3/endpoint.py | 8 +- openstack/identity/v3/group.py | 8 +- openstack/identity/v3/policy.py | 8 +- openstack/identity/v3/project.py | 13 +- openstack/identity/v3/region.py | 8 +- openstack/identity/v3/role.py | 7 +- openstack/identity/v3/role_assignment.py | 5 +- .../identity/v3/role_domain_group_assignment.py | 2 - .../identity/v3/role_domain_user_assignment.py | 2 - .../identity/v3/role_project_group_assignment.py | 2 - .../identity/v3/role_project_user_assignment.py | 2 - openstack/identity/v3/service.py | 8 +- openstack/identity/v3/trust.py | 7 +- openstack/identity/v3/user.py | 8 +- openstack/identity/version.py | 4 - openstack/image/image_service.py | 19 +- openstack/image/v1/image.py | 6 +- openstack/image/v2/_proxy.py | 3 +- openstack/image/v2/image.py | 54 +- openstack/image/v2/member.py | 6 +- openstack/instance_ha/instance_ha_service.py | 14 +- openstack/instance_ha/v1/host.py | 6 +- openstack/instance_ha/v1/notification.py | 6 +- openstack/instance_ha/v1/segment.py | 6 +- openstack/key_manager/key_manager_service.py | 14 +- openstack/key_manager/v1/container.py | 6 +- openstack/key_manager/v1/order.py | 6 +- openstack/key_manager/v1/secret.py | 8 +- openstack/load_balancer/load_balancer_service.py | 16 +- openstack/load_balancer/v2/health_monitor.py | 8 +- openstack/load_balancer/v2/l7_policy.py | 8 +- openstack/load_balancer/v2/l7_rule.py | 8 +- openstack/load_balancer/v2/listener.py | 8 +- openstack/load_balancer/v2/load_balancer.py | 8 +- openstack/load_balancer/v2/member.py | 8 +- openstack/load_balancer/v2/pool.py | 8 +- openstack/load_balancer/version.py | 4 - openstack/message/message_service.py | 16 +- openstack/message/v2/claim.py | 12 +- openstack/message/v2/message.py | 6 +- openstack/message/v2/queue.py | 6 +- openstack/message/v2/subscription.py | 6 +- openstack/message/version.py | 4 - openstack/network/network_service.py | 14 +- openstack/network/v2/_proxy.py | 376 +++++- openstack/network/v2/address_scope.py | 6 +- openstack/network/v2/agent.py | 14 +- openstack/network/v2/auto_allocated_topology.py | 6 +- openstack/network/v2/availability_zone.py | 6 +- openstack/network/v2/extension.py | 4 +- openstack/network/v2/firewall_group.py | 58 + openstack/network/v2/firewall_policy.py | 95 ++ openstack/network/v2/firewall_rule.py | 66 + openstack/network/v2/flavor.py | 6 +- openstack/network/v2/floating_ip.py | 6 +- openstack/network/v2/health_monitor.py | 6 +- openstack/network/v2/listener.py | 6 +- openstack/network/v2/load_balancer.py | 6 +- openstack/network/v2/metering_label.py | 6 +- openstack/network/v2/metering_label_rule.py | 6 +- openstack/network/v2/network.py | 11 +- openstack/network/v2/network_ip_availability.py | 6 +- openstack/network/v2/pool.py | 6 +- openstack/network/v2/pool_member.py | 6 +- openstack/network/v2/port.py | 6 +- openstack/network/v2/qos_bandwidth_limit_rule.py | 6 +- openstack/network/v2/qos_dscp_marking_rule.py | 6 +- openstack/network/v2/qos_minimum_bandwidth_rule.py | 6 +- openstack/network/v2/qos_policy.py | 6 +- openstack/network/v2/qos_rule_type.py | 6 +- openstack/network/v2/quota.py | 10 +- openstack/network/v2/rbac_policy.py | 6 +- openstack/network/v2/router.py | 9 +- openstack/network/v2/security_group.py | 6 +- openstack/network/v2/security_group_rule.py | 6 +- openstack/network/v2/segment.py | 6 +- openstack/network/v2/service_profile.py | 6 +- openstack/network/v2/service_provider.py | 6 +- openstack/network/v2/subnet.py | 6 +- openstack/network/v2/subnet_pool.py | 6 +- openstack/network/v2/trunk.py | 6 +- openstack/network/v2/vpn_service.py | 6 +- openstack/network/version.py | 4 - openstack/object_store/object_store_service.py | 14 +- openstack/object_store/v1/_base.py | 4 +- openstack/object_store/v1/_proxy.py | 2 + openstack/object_store/v1/account.py | 4 +- openstack/object_store/v1/container.py | 4 +- openstack/object_store/v1/obj.py | 6 +- openstack/orchestration/orchestration_service.py | 17 +- openstack/orchestration/v1/_proxy.py | 2 +- openstack/orchestration/v1/resource.py | 4 +- openstack/orchestration/v1/software_config.py | 6 +- openstack/orchestration/v1/software_deployment.py | 10 +- openstack/orchestration/v1/stack.py | 24 +- openstack/orchestration/v1/stack_environment.py | 14 +- openstack/orchestration/v1/stack_files.py | 16 +- openstack/orchestration/v1/stack_template.py | 23 +- openstack/orchestration/v1/template.py | 6 +- openstack/orchestration/version.py | 4 - openstack/profile.py | 201 --- openstack/proxy.py | 91 +- openstack/proxy2.py | 23 - openstack/resource.py | 521 ++++++-- openstack/resource2.py | 23 - openstack/service_description.py | 200 ++- openstack/service_filter.py | 199 --- openstack/task_manager.py | 103 +- .../functional/baremetal/test_baremetal_chassis.py | 51 + .../functional/baremetal/test_baremetal_driver.py | 55 + .../functional/baremetal/test_baremetal_node.py | 159 +++ .../functional/baremetal/test_baremetal_port.py | 83 ++ .../baremetal/test_baremetal_port_group.py | 75 ++ .../functional/cloud/test_cluster_templates.py | 4 +- .../functional/cloud/test_floating_ip_pool.py | 4 +- .../cloud/test_qos_bandwidth_limit_rule.py | 4 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 4 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 4 +- .../functional/network/v2/test_firewall_group.py | 52 + .../functional/network/v2/test_firewall_policy.py | 52 + .../functional/network/v2/test_firewall_rule.py | 69 ++ .../v2/test_firewall_rule_insert_remove_policy.py | 91 ++ .../functional/network/v2/test_floating_ip.py | 2 + .../functional/orchestration/v1/test_stack.py | 2 +- .../block_storage/test_block_storage_service.py | 28 - .../unit/clustering/v1/test_cluster_policy.py | 3 +- .../unit/compute/v2/test_availability_zone.py | 2 - .../unit/compute/v2/test_volume_attachment.py | 5 +- .../v3/test_role_domain_group_assignment.py | 1 - .../v3/test_role_domain_user_assignment.py | 1 - .../v3/test_role_project_group_assignment.py | 1 - .../v3/test_role_project_user_assignment.py | 1 - .../unit/instance_ha/test_instance_ha_service.py | 30 - .../key_manager/test_key_management_service.py | 28 - .../unit/load_balancer/test_health_monitor.py | 7 +- .../load_balancer/test_load_balancer_service.py | 28 - .../network/v2/test_auto_allocated_topology.py | 4 +- .../unit/network/v2/test_availability_zone.py | 5 +- .../unit/network/v2/test_metering_label_rule.py | 5 +- .../network/v2/test_network_ip_availability.py | 5 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 5 +- .../unit/network/v2/test_qos_dscp_marking_rule.py | 5 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 5 +- .../unit/network/v2/test_security_group_rule.py | 5 +- .../unit/object_store/test_object_store_service.py | 28 - .../orchestration/test_orchestration_service.py | 29 - .../unit/orchestration/v1/test_software_config.py | 5 +- .../orchestration/v1/test_software_deployment.py | 5 +- .../orchestration/v1/test_stack_environment.py | 5 +- .../unit/orchestration/v1/test_stack_files.py | 8 +- .../unit/orchestration/v1/test_stack_template.py | 22 +- openstack/utils.py | 85 +- openstack/workflow/v2/execution.py | 4 +- openstack/workflow/v2/workflow.py | 4 +- openstack/workflow/version.py | 4 - openstack/workflow/workflow_service.py | 16 +- playbooks/devstack/post.yaml | 1 + ...for-setting-static-routes-b3ce6cac2c5e9e51.yaml | 9 + .../notes/baremetal-errors-5cc871e8df4c9d95.yaml | 4 + .../notes/baremetal-ports-cc0f56ae0d192aba.yaml | 5 + .../baremetal-reservation-40327923092e9647.yaml | 10 + .../notes/baremetal-retries-ff8aa8f73fb97415.yaml | 6 + .../notes/baremetal-update-80effb38aae8e02d.yaml | 5 + .../notes/baremetal-validate-ccce2a37d2a20d96.yaml | 4 + .../notes/baremetal-vif-122457118c722a9b.yaml | 4 + .../notes/container-search-b0f4253ce2deeda5.yaml | 6 + .../notes/firewall-resources-c7589d288dd57e35.yaml | 5 + .../notes/get-object-raw-e58284e59c81c8ef.yaml | 5 + .../notes/image-update-76bd3bf24c1c1380.yaml | 5 + ...-get-update-microversions-4b910e63cebd65e2.yaml | 11 + .../notes/mtu-settings-8ce8b54d096580a2.yaml | 6 + .../notes/nat-source-support-92aaf6b336d0b848.yaml | 4 + .../object-chunked-data-ee619b7d4759b8d2.yaml | 6 + .../notes/object-search-a5f5ec4b2df3e045.yaml | 6 + .../remove-auto-container-527f1807605b42c0.yaml | 6 + ...removed-deprecated-things-8700fe3592c3bf18.yaml | 5 + .../notes/removed-profile-b033d870937868a1.yaml | 5 + .../rename-resource-methods-5f2a716b08156765.yaml | 12 + .../notes/shade-location-b0d2e5cae743b738.yaml | 8 + .../notes/stream-object-6ecd43511dca726b.yaml | 4 + .../toggle-port-security-f5bc606e82141feb.yaml | 9 + .../notes/v4-fixed-ip-325740fdae85ffa9.yaml | 7 + .../notes/validate-machine-dcf528b8f587e3f0.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 3 +- tox.ini | 16 +- 501 files changed, 7474 insertions(+), 5239 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8eb788aa..78f7585 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,2 +11 @@ os-service-types>=1.2.0 # Apache-2.0 -keystoneauth1>=3.8.0 # Apache-2.0 -deprecation>=1.0 # Apache-2.0 +keystoneauth1>=3.11.0 # Apache-2.0

1 0

openstackdocstheme 1.26.0
by no-reply＠openstack.org 19 Oct '18

19 Oct '18

We are psyched to announce the release of: openstackdocstheme 1.26.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. 1.26.0 ^^^^^^ New Features * Add support for including additional themes in the package, starting with "starlingxdocs". The initial implementation sets up the new theme to inherit from "openstackdocs" and updates some of the "openstackdocs" bits that are hard coded in the Python. For example: html_theme = 'starlingxdocs' Changes in openstackdocstheme 1.25.1..1.26.0 -------------------------------------------- 4ed01cd Make a bare-bones starlingxdocs theme 3c5947d Add scripts to the head section 4878259 Remove example of deprecated app.info b016626 Add starlingxdocs theme support 7e4bc8c Import build-openstack-api-ref Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 36 +- README.rst | 23 +- openstackdocstheme/ext.py | 12 +- openstackdocstheme/paths.py | 10 +- openstackdocstheme/theme/openstackdocs/layout.html | 3 + .../openstackdocs/static/images/logo-full.png | 1 + .../openstackdocs/static/images/logo-vert.png | 1 + .../theme/openstackdocs_pdf/logo-full.png | 1 + .../openstackdocs_pdf/openstack-logo-full.png | 1 - openstackdocstheme/theme/starlingxdocs/footer.html | 41 + openstackdocstheme/theme/starlingxdocs/header.html | 52 + .../theme/starlingxdocs/sidebartoc_menu.html | 6 + .../starlingxdocs/sidebartoc_menu_apiref.html | 11 + .../theme/starlingxdocs/static/css/combined.css | 4502 ++++++++++++++++++++ .../StarlingX_Logo_RGB_Horizontal_2color.png | Bin 0 -> 7853 bytes .../StarlingX_Logo_RGB_Horizontal_2color.svg | 1 + .../images/StarlingX_Logo_RGB_Stacked_2color.png | Bin 0 -> 15123 bytes .../images/StarlingX_Logo_RGB_Stacked_2color.svg | 1 + .../starlingxdocs/static/images/logo-full.png | 1 + .../starlingxdocs/static/images/logo-full.svg | 1 + .../starlingxdocs/static/images/logo-vert.png | 1 + .../starlingxdocs/static/images/logo-vert.svg | 1 + openstackdocstheme/theme/starlingxdocs/theme.conf | 14 + .../theme/starlingxdocs/titlerow.html | 20 + .../theme/starlingxdocs_pdf/logo-full.png | 1 + .../theme/starlingxdocs_pdf/logo-full.svg | 1 + .../theme/starlingxdocs_pdf/pdftheme.sty | 67 + .../notes/add-starlingxdocs-10a33318f8630486.yaml | 11 + tox.ini | 30 + 31 files changed, 4851 insertions(+), 21 deletions(-)

1 0

masakari-monitors 5.1.0
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We are happy to announce the release of: masakari-monitors 5.1.0: Monitors for Masakari The source is available from: http://git.openstack.org/cgit/openstack/masakari-monitors Download the package from: https://tarballs.openstack.org/masakari-monitors/ Please report issues through launchpad: http://bugs.launchpad.net/masakari-monitors For more details, please see below. Changes in masakari-monitors 5.0.0..5.1.0 ----------------------------------------- 3ffd576 Fix masakari-monitor connection issue da40a2f import zuul job settings from project-config e6ecb56 Update UPPER_CONSTRAINTS_FILE for stable/queens a44bbb2 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 14 +++ masakarimonitors/cmd/__init__.py | 47 ++++++++++ masakarimonitors/cmd/hostmonitor.py | 16 ++++ masakarimonitors/cmd/instancemonitor.py | 16 ++++ masakarimonitors/cmd/processmonitor.py | 16 ++++ masakarimonitors/ha/masakari.py | 38 +++++---- masakarimonitors/utils.py | 23 +++-- requirements.txt | 1 + tox.ini | 2 +- 11 files changed, 175 insertions(+), 108 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5e40cea..25f31cd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ libvirt-python>=1.2.5 # LGPLv2+ +openstacksdk>=0.11.0 # Apache-2.0

1 0

puppet-ceph 2.5.2
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We joyfully announce the release of: puppet-ceph 2.5.2: Puppet module for Ceph Download the package from: https://tarballs.openstack.org/puppet-ceph/ For more details, please see below. Changes in puppet-ceph 2.5.1..2.5.2 ----------------------------------- f8d3fd2 Release 2.5.2 9334bf4 Dissuade .gitignore references to personal tools cc5989c Fix the wrong link URL 4dd6436 switch documentation job to new PTI 6e53b93 import zuul job settings from project-config aa2e3e6 Remove PE requirement from metadata.json 471b6f3 Add "Development" in README 5f57d43 Add the project source code repository in README fa52a16 Fix OS versions in metadata 0c2624e Fix inifile version in metadata 7749664 Fix apache version in metadata 2b25cbf Update reno for stable/luminous fd64982 Do not enable Epel repo in case of Fedora 72235f1 Fix lspool issues on Mimic c65d73d Add Mimic support Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 ++++- .zuul.yaml | 1 + README.md | 15 ++++++- examples/common.yaml | 2 +- manifests/osds.pp | 2 +- manifests/params.pp | 4 +- manifests/pool.pp | 4 +- manifests/profile/params.pp | 2 +- manifests/repo.pp | 11 +++-- metadata.json | 19 +++----- releasenotes/source/index.rst | 1 + releasenotes/source/luminous.rst | 6 +++ spec/classes/ceph_repo_spec.rb | 90 +++++++++++++++++++------------------ spec/fixtures/hieradata/common.yaml | 2 +- 14 files changed, 101 insertions(+), 70 deletions(-)

1 0

oslo.messaging 9.1.0 (stein)
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We are tickled pink to announce the release of: oslo.messaging 9.1.0: Oslo Messaging API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. Changes in oslo.messaging 9.0.1..9.1.0 -------------------------------------- 0410bcb Using pip as a python module 9ca7359 Allow transport_url initialization in ConfFixture constructor Diffstat (except docs and test files) ------------------------------------- oslo_messaging/conffixture.py | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-)

1 0

pbr 5.0.0
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We are delighted to announce the release of: pbr 5.0.0: Python Build Reasonableness The source is available from: https://git.openstack.org/cgit/openstack-dev/pbr Download the package from: https://pypi.org/project/pbr Please report issues through launchpad: https://bugs.launchpad.net/pbr For more details, please see below. 5.0.0 ^^^^^ Bug Fixes * The "description-content-type" was not being set correctly. It will now be correctly populated when using "setuptools" 39.2.0 and beyond. Changes in pbr 4.3.0..5.0.0 --------------------------- 58cccf0 Use templates for cover and lower-constraints 77e75e2 Special case long_description_content_type ed77ce8 tox: Suppress output f14a3b2 Support wheel 0.32.0+ dac6f82 docs: Add docs for reno integration a4f27ca Skip test for testr hook being installed when testr is not available 8ea9d92 packaging: Remove support for pyN requirement files Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 ++++----- lower-constraints.txt | 2 +- pbr/core.py | 12 +++++++++ pbr/packaging.py | 4 ++- .../long-descr-content-type-f9a1003acbb8740f.yaml | 6 +++++ setup.cfg | 2 +- test-requirements.txt | 4 ++- tox.ini | 8 ++++-- 13 files changed, 76 insertions(+), 53 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8fdcb83..70e4ca0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ +wheel>=0.32.0 # MIT @@ -8 +9 @@ six>=1.10.0 # MIT -stestr>=2.0.0 # Apache-2.0 +stestr>=2.1.0 # Apache-2.0 @@ -12,0 +14 @@ virtualenv>=14.0.6 # MIT +coverage!=4.4,>=4.0 # Apache-2.0

1 0

oslo.config 6.6.1 (stein)
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We are happy to announce the release of: oslo.config 6.6.1: Oslo Configuration API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through launchpad: https://bugs.launchpad.net/oslo.config For more details, please see below. Changes in oslo.config 6.6.0..6.6.1 ----------------------------------- aa195b8 Close a previously opened file in config generator 4b4c3ca avoid trailing space in sphinxext log output b5f76a2 Unit tests to illustrate positional argument bug Diffstat (except docs and test files) ------------------------------------- oslo_config/generator.py | 12 +++- oslo_config/sphinxext.py | 2 +- 4 files changed, 157 insertions(+), 4 deletions(-)

1 0

openstack-ansible 18.0.0 (rocky)
by no-reply＠openstack.org 17 Oct '18

17 Oct '18

We are overjoyed to announce the release of: openstack-ansible 18.0.0: Ansible playbooks for deploying OpenStack This release is part of the rocky release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 18.0.0 ^^^^^^ New Features ************ * Support has been added for deploying on Ubuntu 18.04 LTS hosts. The most significant change is a major version increment of LXC from 2.x to 3.x which deprecates some previously used elements of the container configuration file. * It is possible to configure Glance to allow cross origin requests by specifying the allowed origin address using the "glance_cors_allowed_origin" variable. By default, this will be the load balancer address. * The service setup in keystone for aodh will now be executed through delegation to the "aodh_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". aodh_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for barbican will now be executed through delegation to the "barbican_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". barbican_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for ceilometer will now be executed through delegation to the "ceilometer_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". ceilometer_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for cinder will now be executed through delegation to the "cinder_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". cinder_service_setup_host: "{{ groups['utility_all'][0] }}" * The option "repo_venv_default_pip_packages" has been added which will allow deployers to insert any packages into a service venv as needed. The option expects a list of strings which are valid python package names as found on PYPI. * The service setup in keystone for designate will now be executed through delegation to the "designate_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". designate_service_setup_host: "{{ groups['utility_all'][0] }}" * The "os_horizon" role now supports distribution of user custom themes. Deployers can use the new key "theme_src_archive" of "horizon_custom_themes" dictionary to provide absolute path to the archived theme. Only .tar.gz, .tgz, .zip, .tar.bz, .tar.bz2, .tbz, .tbz2 archives are supported. Structure inside archive should be as a standard theme, without any leading folders. * Octavia is creating vms, securitygroups, and other things in its project. In most cases the default quotas are not big enough. This will adjust them to (configurable) reasonable values. * The service setup in keystone for glance will now be executed through delegation to the "glance_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". glance_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for gnocchi will now be executed through delegation to the "gnocchi_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". gnocchi_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for heat will now be executed through delegation to the "heat_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". heat_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for horizon will now be executed through delegation to the "horizon_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". horizon_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for ironic will now be executed through delegation to the "ironic_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". ironic_service_setup_host: "{{ groups['utility_all'][0] }}" * The service updates for keystone will now be executed through delegation to the "keystone_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". keystone_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for magnum will now be executed through delegation to the "magnum_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". magnum_service_setup_host: "{{ groups['utility_all'][0] }}" * Instead of downloading images to the magnum API servers, the images will now download to the "magnum_service_setup_host" to the folder set in "magnum_image_path" owned by "magnum_image_path_owner". * The service setup in keystone for neutron will now be executed through delegation to the "neutron_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". neutron_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for nova will now be executed through delegation to the "nova_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". nova_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for octavia will now be executed through delegation to the "octavia_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". octavia_service_setup_host: "{{ groups['utility_all'][0] }}" * The role now supports using the distribution packages for the OpenStack services instead of the pip ones. This feature is disabled by default and can be enabled by simply setting the "nova_install_method" variable to "distro". * The role now supports using the distribution packages for the OpenStack services instead of the pip ones. This feature is disabled by default and can be enabled by simply setting the "neutron_install_method" variable to "distro". * The role now supports using the distribution packages for the OpenStack services instead of the pip ones. This feature is disabled by default and can be enabled by simply setting the "nova_install_method" variable to "distro". * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers. * The service setup in keystone for sahara will now be executed through delegation to the "sahara_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". sahara_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for swift will now be executed through delegation to the "swift_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". swift_service_setup_host: "{{ groups['utility_all'][0] }}" * The service setup in keystone for tempest will now be executed through delegation to the "tempest_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". tempest_service_setup_host: "{{ groups['utility_all'][0] }}" * Rather than a hard-coded set of projects and users, tempest can now be configured with a custom list with the variables "tempest_projects" and "tempest_users". * It is now possible to specify a list of tests for tempest to blacklist when executing using the "tempest_test_blacklist" list variable. * The trove service setup in keystone will now be executed through delegation to the "trove_service_setup_host" which, by default, is "localhost" (the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override in "user_variables.yml". trove_service_setup_host: "{{ groups['utility_all'][0] }}" Upgrade Notes ************* * The supported upgrade path from Xenial to Bionic is via re- installation of the host OS across all nodes and redeployment of the required services. The Rocky branch of OSA is intended as the transition point for such upgrades from Xenial to Bionic. At this time there is no support for in-place operating system upgrades (typically via "do-release-upgrade"). * The variable *cinder_iscsi_helper* has been replaced by the new variable which is *cinder_target_helper* due to the fact that iscsi_helper has been deprecated in Cinder. * The glance v1 API is now removed upstream and the deployment code is now removed from this glance ansible role. The variable "glance_enable_v1_api" is removed. Deprecation Notes ***************** * The variable "aodh_requires_pip_packages" is no longer required and has therefore been removed. * The variable "barbican_requires_pip_packages" is no longer required and has therefore been removed. * The following variables are no longer used and have therefore been removed. * "ceilometer_requires_pip_packages" * "ceilometer_service_name" * "ceilometer_service_port" * "ceilometer_service_proto" * "ceilometer_service_type" * "ceilometer_service_description" * The variable "cinder_requires_pip_packages" is no longer required and has therefore been removed. * The variable "designate_requires_pip_packages" is no longer required and has therefore been removed. * The "get_gested" filter has been removed, as it is not used by any roles/plays. * The variable "glance_requires_pip_packages" is no longer required and has therefore been removed. * The variable "gnocchi_requires_pip_packages" is no longer required and has therefore been removed. * The variable "heat_requires_pip_packages" is no longer required and has therefore been removed. * The variable "horizon_requires_pip_packages" is no longer required and has therefore been removed. * The variable "ironic_requires_pip_packages" is no longer required and has therefore been removed. * The log path, "/var/log/barbican" is no longer used to capture service logs. All logging for the barbican service will now be sent directly to the systemd journal. * The log path, "/var/log/keystone" is no longer used to capture service logs. All logging for the Keystone service will now be sent directly to the systmed journal. * The log path, "/var/log/congress" is no longer used to capture service logs. All logging for the congress service will now be sent directly to the systmed journal. * The log path, "/var/log/cinder" is no longer used to capture service logs. All logging for the cinder service will now be sent directly to the systemd journal. * The log path, "/var/log/aodh" is no longer used to capture service logs. All logging for the aodh service will now be sent directly to the systmed journal. * The log path, "/var/log/ceilometer" is no longer used to capture service logs. All logging for the ceilometer service will now be sent directly to the systemd journal. * The log path, "/var/log/designate" is no longer used to capture service logs. All logging for the designate service will now be sent directly to the systmed journal. * The variable "keystone_requires_pip_packages" is no longer required and has therefore been removed. * The variable "magnum_requires_pip_packages" is no longer required and has therefore been removed. * The variable "neutron_requires_pip_packages" is no longer required and has therefore been removed. * The variable "nova_requires_pip_packages" is no longer required and has therefore been removed. * The variable "octavia_requires_pip_packages" is no longer required and has therefore been removed. * The variable "octavia_image_downloader" has been removed. The image download now uses the same host designated by the "octavia_service_setup_host" for the image download. * The variable "octavia_ansible_endpoint_type" has been removed. The endpoint used for ansible tasks has been hard set to the 'admin' endpoint as is commonly used across all OSA roles. * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - trove_oslomsg_rpc_servers replaces trove_rabbitmq_servers - trove_oslomsg_rpc_port replaces trove_rabbitmq_port - trove_oslomsg_rpc_use_ssl replaces trove_rabbitmq_use_ssl - trove_oslomsg_rpc_userid replaces trove_rabbitmq_userid - trove_oslomsg_rpc_vhost replaces trove_rabbitmq_vhost - added trove_oslomsg_notify_servers - added trove_oslomsg_notify_port - added trove_oslomsg_notify_use_ssl - added trove_oslomsg_notify_userid - added trove_oslomsg_notify_vhost - added trove_oslomsg_notify_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - barbican_oslomsg_rpc_servers replaces rabbitmq_servers - barbican_oslomsg_rpc_port replaces rabbitmq_port - barbican_oslomsg_rpc_userid replaces barbican_rabbitmq_userid - barbican_oslomsg_rpc_vhost replaces barbican_rabbitmq_vhost - added barbican_oslomsg_rpc_use_ssl - added barbican_oslomsg_notify_servers - added barbican_oslomsg_notify_port - added barbican_oslomsg_notify_use_ssl - added barbican_oslomsg_notify_userid - added barbican_oslomsg_notify_vhost - added barbican_oslomsg_notify_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - aodh_oslomsg_rpc_servers replaces aodh_rabbitmq_servers - aodh_oslomsg_rpc_port replaces aodh_rabbitmq_port - aodh_oslomsg_rpc_use_ssl replaces aodh_rabbitmq_use_ssl - aodh_oslomsg_rpc_userid replaces aodh_rabbitmq_userid - aodh_oslomsg_rpc_vhost replaces aodh_rabbitmq_vhost - aodh_oslomsg_rpc_password replaces aodh_rabbitmq_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - ceilometer_oslomsg_rpc_servers replaces rabbitmq_servers - ceilometer_oslomsg_rpc_port replaces rabbitmq_port - ceilometer_oslomsg_rpc_userid replaces ceilometer_rabbitmq_userid - ceilometer_oslomsg_rpc_vhost replaces ceilometer_rabbitmq_vhost - added ceilometer_oslomsg_rpc_use_ssl - added ceilometer_oslomsg_notify_servers - added ceilometer_oslomsg_notify_port - added ceilometer_oslomsg_notify_use_ssl - added ceilometer_oslomsg_notify_userid - added ceilometer_oslomsg_notify_vhost - added ceilometer_oslomsg_notify_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - designate_oslomsg_rpc_servers replaces designate_rabbitmq_servers - designate_oslomsg_rpc_port replaces designate_rabbitmq_port - designate_oslomsg_rpc_use_ssl replaces designate_rabbitmq_use_ssl - designate_oslomsg_rpc_userid replaces designate_rabbitmq_userid - designate_oslomsg_rpc_vhost replaces designate_rabbitmq_vhost - designate_oslomsg_notify_servers replaces designate_rabbitmq_telemetry_servers - designate_oslomsg_notify_port replaces designate_rabbitmq_telemetry_port - designate_oslomsg_notify_use_ssl replaces designate_rabbitmq_telemetry_use_ssl - designate_oslomsg_notify_userid replaces designate_rabbitmq_telemetry_userid - designate_oslomsg_notify_vhost replaces designate_rabbitmq_telemetry_vhost - designate_oslomsg_notify_password replaces designate_rabbitmq_telemetry_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - magnum_oslomsg_rpc_servers replaces rabbitmq_servers - magnum_oslomsg_rpc_port replaces rabbitmq_port - magnum_oslomsg_rpc_userid replaces magnum_rabbitmq_userid - magnum_oslomsg_rpc_vhost replaces magnum_rabbitmq_vhost - added magnum_oslomsg_rpc_use_ssl - added magnum_oslomsg_notify_servers - added magnum_oslomsg_notify_port - added magnum_oslomsg_notify_use_ssl - added magnum_oslomsg_notify_userid - added magnum_oslomsg_notify_vhost - added magnum_oslomsg_notify_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging Notify parameters in order to abstract the messaging service from the actual backend server deployment. - swift_oslomsg_notify_servers replaces swift_rabbitmq_telemetry_servers - swift_oslomsg_notify_port replaces swift_rabbitmq_telemetry_port - swift_oslomsg_notify_use_ssl replaces swift_rabbitmq_telemetry_use_ssl - swift_oslomsg_notify_userid replaces swift_rabbitmq_telemetry_userid - swift_oslomsg_notify_vhost replaces swift_rabbitmq_telemetry_vhost - swift_oslomsg_notify_password replaces swift_rabbitmq_telemetry_password * The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - octavia_oslomsg_rpc_servers replaces octavia_rabbitmq_servers - octavia_oslomsg_rpc_port replaces octavia_rabbitmq_port - octavia_oslomsg_rpc_use_ssl replaces octavia_rabbitmq_use_ssl - octavia_oslomsg_rpc_userid replaces octavia_rabbitmq_userid - octavia_oslomsg_rpc_vhost replaces octavia_rabbitmq_vhost - octavia_oslomsg_notify_servers replaces octavia_rabbitmq_telemetry_servers - octavia_oslomsg_notify_port replaces octavia_rabbitmq_telemetry_port - octavia_oslomsg_notify_use_ssl replaces octavia_rabbitmq_telemetry_use_ssl - octavia_oslomsg_notify_userid replaces octavia_rabbitmq_telemetry_userid - octavia_oslomsg_notify_vhost replaces octavia_rabbitmq_telemetry_vhost - octavia_oslomsg_notify_password replaces octavia_rabbitmq_telemetry_password * The repo server's reverse proxy for pypi has now been removed, leaving only the pypiserver to serve packages already on the repo server. The attempt to reverse proxy upstream pypi turned out to be very unstable with increased complexity for deployers using proxies or offline installs. With this, the variables "repo_nginx_pypi_upstream" and "repo_nginx_proxy_cache_path" have also been removed. * The variable "repo_requires_pip_packages" is no longer required and has therefore been removed. * The variable "sahara_requires_pip_packages" is no longer required and has therefore been removed. * The variable "swift_requires_pip_packages" is no longer required and has therefore been removed. * The variable "tempest_requires_pip_packages" is no longer required and has therefore been removed. * The variable "tempest_image_downloader" has been removed. The image download now uses the same host designated by the "tempest_service_setup_host" for the image download. * The variable "trove_requires_pip_packages" is no longer required and has therefore been removed. Security Issues *************** * Avoid setting the quotas too high for your cloud since this can impact the performance of other servcies and lead to a potential Denial-of-Service attack if Loadbalancer quotas are not set properly or RBAC is not properly set up. Bug Fixes ********* * Fixes bug https://bugs.launchpad.net/openstack- ansible/+bug/1778098 where playbook failed, if "horizon_custom_themes" is specified, and directory for theme is not provided * The conditional that determines whether the "sso_callback_template.html" file is deployed for federated deployments has been fixed. Other Notes *********** * When running keystone with apache(httpd) all apache logs will be stored in the standard apache log directory which is controlled by the distro specific variable "keystone_apache_default_log_folder". * When running aodh with apache(httpd) all apache logs will be stored in the standard apache log directory which is controlled by the distro specific variable "aodh_apache_default_log_folder". Changes in openstack-ansible 17.0.0.0rc1..18.0.0 ------------------------------------------------ 055fef2 Update all SHAs for final RC 215fd62 Remove glance CORS overrides 738c944 Enable CentOS 7 basekit jobs 62491a9 Fix nspawn bind mount register process 226053e Update variable migration script for Rocky f4e72d6 Ensure ceilometer repo gets installed with neutron 599ef0e Rollback tempest master for Rocky 4552eb4 Fix healthcheck-hosts to work when behind a proxy e94c56e Automate the removal of the molteniron role 207fc63 Disable nested virt aa100d4 Remove apt-cacher-ng cf2b7ba Fix for proper package name depending on base OS distribution 8d8755b Use loop_control for haproxy keystone back-end enablement dc943b9 Remove broken uptime tests during upgrade b48e295 Update all SHAs for 18.0.0 91a4906 Minimal(ist) network config for nspawn gating 32107c7 Ensure package cache is updated for nspawn containers aeea60a Revert "Add lxc3 compatibility" b899d13 Pin ARA to the current version f5c4d4f Use latest tag for ansible-resolvconf role 7e0d675 Move ara to scripts-library 96a4401 Add xinetd config to make an AIO survive a reboot 6745b37 Avoid using loop_var in endpoint manage f83c539 Add LXC COPR cache 6a9ad9b Add nspawn to experimental jobs bec1cc6 playbooks: healthcheck-infrastructure: Ensure netcat is installed 53bbb6d Bump requirement SHA ca14270 Bump plugins SHA to include recent bugfixes ccfd944 Implement haproxy frontend for old keystone admin backend 95ff0dd Remove obsolete instruction ee5d526 zuul: Add ceph jobs for distribution installations 8535a81 ansible-role-requirements: Bump ceph-ansible SHA to include SUSE fixes db730cf Bootstrap ansible virtualenv with --never-download a80b896 Bump os_neutron to remove SELinux support 1cf17ea Add aio host conf for barbican role de6e139 Move bionic jobs to voting, add release note. 2a24d81 scripts: Fix getting external role SHA when working on master 3c3da91 Refactor jobs to use project-templates c5dee01 Update os_octavia SHA for stable/rocky 8524b67 Update docs & upgrade scripts for Rocky ecc4d4e Introduce OpenStack Healthchecks 54c2151 Update Rocky doc index ffbad92 Gather facts for host healthcheck 444ffe3 Fix issues with infrastructure healthcheck 1f78c93 Remove molteniron playbook mistakenly left behind 66a95e5 Update ansible to 2.5.8 f06c4a1 docs: Add links to very useful Galera recovery docs 72b2070 Add missing congress_oslomsg_rpc_password 184c889 Make sure the branch to track is in YAML 97dd766 Update VNC path to correct one bdb265f Bump upstream Rocky repos 6c99540 Bump ceph_client 90e059d Bump openstack_hosts 4b6c38e Add pinned SHA for networking-ovn repo 75e34dd Add octavia_service_region to octavia_all vars 2395b9f Disable verbose output of log collection d8428cb Add test for Ubuntu Bionic 61280f4 Remove bonds from AIO network config 1054b0b Ensure that tests fail early if network interfaces are down 762463f Add lxc3 compatibility 741128f Remove the last remnants of get-pip.py b697c55 Use operating system specific IP utilities f1fc26e Remove un-used bootstrap variables c98c41d import zuul job settings from project-config c537df7 Gather facts for openstack_openrc role 333fece Bump SHAs for rocky release 450cd1e Drop non-voting jobs and increase timeout by 20 minutes c3ec490 Remove checksum checks/fill, they are not needed any longer 9a0a07d Revert "Revert "Work around nested virt issues on OVH test nodes"" 455b8dd Freeze all SHAs for RC1 5a46d6b AIO: Tune down the glance uwsgi processes b5d7e07 AIO: Tune the nova scheduler workers down 359d67a Revert "Revert "Update UPPER_CONSTRAINTS_FILE for stable/rocky"" 25a2753 Eliminate installing pip on host/containers 5c12f15 Temporarily use tempest master for all builds 5ede592 Revert "Update UPPER_CONSTRAINTS_FILE for stable/rocky" 70e655b Update UPPER_CONSTRAINTS_FILE for stable/rocky 73eee7b Update .gitreview for stable/rocky 47eddb9 Use ZUUL_SRC_PATH to pass the path to Zuul git sources 8c80ed8 Only test for repo availability once c11ccb3 Bump global requirement pins 2da59ee [docs] Add documentation for 'install_method' variable 4470490 Set kernel logging to 'quiet' in AIOs 7e10e23 Fix log compression aa53755 Revert "Work around nested virt issues on OVH test nodes" 2d88a3c zuul: Add aio_lxc jobs for distribution installations 5d26f75 Use an absolute path for the role requirements file df5f973 Move get-ansible-role-requirements to scripts 5889e13 Cleanup duplicate 'when' 98d7740 Fix Bootstrap AIO Passing Multiple BOOTSTRAP_OPTS cf10787 Use repo_build_pip_default_index for the pypi fallback b46f428 Replace default pip index check with upper constraints check 550b978 Remove unused variables c5e9787 Fix gate log collection b12e120 Change command for shell de8a2e9 Use ansible module instead of command 41191f4 Remove the molteniron service from the integrated build 9b13d41 Remove all MQ vhost/user and DB create tasks 6d3091b Add more systematic healthchecks 570b47a Collect the generated repo_build files a75af3e Add jmespath to requirements.txt 8711b9d Normalise containers-lxc-* playbook structure d2c30df Use a static inventory skeleton 8913620 Do not install linux-image-extra by default 6348813 Allow AIO to automatically use an http proxy 84fc667 Preparing group of host is not a "change" 925273f Use upstream pypi before the repo is built 4603188 Add support for using distribution packages for OpenStack services abe0b22 Update all SHAs for milestone 3 01a5c89 Simplify bootstrap-ansible.sh 7e21b7c Remove useless group var 184dbb8 Update get-pip to version 3.3 2de7b49 Fix haproxy checks f2a3c8e Prevent incorrect credentials 90cd65e Remove the unnecessary space 2b2447e Change the osa wrapper from a heredoc to a file c8d1f02 Add openstack client to Ansible venv 0afba09 Use --version-sort instead of -n for role version bump 9186a60 Fix usage of "|" for tests ea915b3 Fix memcached_servers content ccff525 [doc] Clarify attendance of Core Reviewers at PTG & Summit 4b1aee4 Skip provider_networks module if possible af63bc0 On container destroy remove container journal 6d9f7f2 Fix IP lookup when no container_networks 6c19798 [trivial] Fix some wrong spellings in RabbitMQ maintenance doc ad98515 Do not run tasks for containers when on metal 1e4121f Allow inventories with no "properties" 7d98b2c Correct E408 pep8 lint errors b939b03 Ensure python2 is used in the ansible venv 8aa5234 Fix the reno usage c0906e5 Fix the default-variables line for firewalls 15c876b Be consistent with memcached group name 153831d Disable keepalived ping tests by default 15c1243 Pin get-pip.py to 3.2 1d9ad7d Ensure container name doesn't need to be defined e84ada6 Be consistent with haproxy group name e79314e Pin get-pip.py to 3.2 bd64bf7 Move MQ vhost/user creation into role (glance) 1e9c7b0 Add option to change fs type on bootstrap device 5ad3c76 Allow flexible tag for Rabbit monitoring user 6343df9 Do not build cryptography 1325449 Ensure python-keystoneclient has a lower bound 1ca4c0c Add link to "The OpenStack Way" of reviewing d3a0bfb Remove inline jinja case statements where possible a28b419 Test the main repo with next version of ansible 8c8e4be Unpin ceph-ansible and add ceph-ansible library path 1b58c9d Move database creation into role (trove) d2d2155 Move database creation into role (tacker) 6352555 Move database creation into role (rally) eeef4da Move database creation into role (octavia) f407d7f Move database creation into role (magnum) 300a076 Move database creation into role (designate) a63e4a3 Move database creation into role (congress) fe1519e Remove special extra repo setup from AIO bootstrap 90f1ed7 Set cache_timeout when creating nspawn containers 498b7da Update HAP check for nova console a39e53b Correct data disk format when using nspawn ebd7638 Stop setting a user to the symbolic link e31bb3a remove yum priority cf01f78 Revert "Add LXC and PIP mirrors" af14e9a Set force=true when creating the RPC users a6742a4 Update Ansible to 2.5.5 708b51d Add example host confd file for barbican 94edc07 Trivial: Update pypi url to new url 9a76790 Install gnocchi before ceilometer f55c977 Add LXC and PIP mirrors 332a0be Move database creation into role (nova) 8a18a23 Switch lxc_container_backing_store to default "dir" c9c3c87 Add RDO mirror e72136e Remove IP range 1.2.3.4 from doc examples c300748 Add mirrors for EPEL and Percona 27ac812 Use `member` instead of `Member` c21a2c0 Bump setuptool to 39.2.0 f8406a8 Set the BTRFS mixed flag when creating the BTRFS volumes 5791c51 Allow a bypass of operating system c79b782 Do not install tmux e8c3084 Bind internal services to internal IPs only e158262 Move database creation into role (barbican) 8b8db07 Remove rabbitmq vars from aodh playbook 6b1575c Move database creation into role (aodh) f592ed2 Use production like interfaces in the gate ad2f2e0 Set format options when prepairing filesystems 24c45ee Move database creation into role (ironic) 303608f Move database creation into role (heat) e2e4c45 Move database creation into role (sahara) 0ccc2be Begin testing opensuse and centos with nspawn c755401 Allow integration of externally deployed RadosGW f253b6c Unfreeze master 144b850 Fix loop variable name for nested loop 38b333b Freeze roles for Milestone 2 release 899bc74 Replace rabbitmq references with oslo messaging 52684ba playbooks: default: Remove double backslash in repo URL 2da56fb Disable LBaaS v2 on the aio 19fde37 Move database creation into role (cinder) 6c17930 Update Ansible to 2.5.4 b44b828 Move database creation into role (neutron) af6f38f Move database creation into role (keystone) 41f371d Fixed variable name notify_vhost 46e908d Move database creation into role (horizon) 855c096 Move database creation into role (gnocchi) 6dca33a [docs] Add reference page with release information fde6809 [docs] Replace bug classification with the project team guide reference 5811dc6 Replace 35357 with 5000 for Keystone Admin Port 3ba5809 scripts: bootstrap-ansible.sh: Bump SHA for Ansible 2.4 65b47eb tests: bootstrap-host: Set openSUSE OBS mirror for OpenStack CI fd2d680 Fixed typo in variable oslomsg_notify_transport 13ce4e0 Adds the certificate client key password to user_secrets 26c2c6f Remove rally_git_* overrides c8ac2d8 Use ARA instead of profile_tasks callback 17036d7 releasenotes: Declare openSUSE Leap 42.3 as supported distribution 9c3ed0d Add extra process documentation f4e8e7f Use upper constraints when installing ARA f6a6190 Remove not needed glance variables 999f843 scripts: bootstrap-ansible: Install python-pip on SUSE and Ubuntu abc2379 Add utility playbook to report all listening ports e69b530 Restore namespace per service for oslo.messaging update 986e35a Add mount options whenever formatting disks 0706b7e Remove non used variables 65e322c Remove default pip_links value 40771a0 Replace deprecated library function os.popen() with subprocess 03956a9 Convert rsyslog to an include_task c340a6e infra-journal-remote: Skip playbook on empty emtpy log_hosts group 8a1c8e5 Fix broken ceilometer variables ffad8eb zuul: Make openSUSE metal jobs voting bd185e2 Move database creation into role (glance) 8e11e64 Update docs to reflect release of Queens 4e9c15a Correct galera cluster maintainance example wording 79f745c Move radosgw keystone config tasks to their own playbook df70cdb Remove unused radosgw_ssl variable d8fcd1a Only implement openrc/clouds.yaml on a designated host 8530dcc Add python-keystoneclient to the ansible-runtime venv 6f7fce4 Improve the limited connectivity documentation 6677e1e Ensure that the repo servers also use the pypi cache f4e74ea Ensure facts are updated for new containers 52a1183 [docs] Fix lint failures a892f11 Fix spelling error and hypen 8797b7a Add information about restoring inventory from backup e44dc66 [Docs] Fix links to figures 3c50f79 Adjust inside/outside openstack-ci bootstrap-host tasks f711e0f Fix the incorrect cirros default password a57ac42 Provide an example for switch port configurations ba78028 Add more meaningful/user readable failure 9afb93f [Docs] Clarify the testing page 01d3912 Configure cors for glance for additional usability d743dbf Update the output for "openstack floating" command a182c4b Tidy registered variable names in rgw install c0b691e Run inventory-manage.py from the ansible-runtime venv 929aaf1 Support oslo.messaging services for separate RPC and Notification 2539195 Revert role freeze and update openstack_release for Rocky m2 8d2bb4c Add mount options for better machinectl performance a51d18c Add metal to gates 224fb46 Add metal jobs for SUSE/CentOS ec5b3a7 Freeze roles for Milestone 1 da956a0 Fix the credentials file name 0aaeffe Fix the appropriate kernel modules path 58f0017 Add missing static argument value bead62e log_hosts should be optional 9211ea4 Improve Congress scenario testing 816f65b Only run zfs command if command is present 6dfc33a Update Ansible to 2.4.4.0 792c753 Ensure that repo checks use the right values c514090 Enable horizon fwaas panels when firewall_v2 driver is enabled e60cbcd fix typos in documentation f19778e Configure Keystone to get a list of all HAproxy instances aac7e8c bootstrap-host: Set repo build pip default mirror when in openstack-ci d2e1065 Freeze the networking-odl repo from SHA bumps 115e1d6 Remove Octavia from translations scenario 61e8553 Remove tempest_git_* overrides 0b80488 Do not log passwords 82d618d Remove double warning from run-upgrade 0eb50f8 Update all SHAs for master e49bb6d Do not log passwords 2a80a32 Do not log passwords 563a488 Fix osa_toolkit dictutils import 3b325b7 Add nova/ironic/glance cross-service vars to group_vars/all 942eeb6 Remove spurious VxLAN bridge IP from ceph osd hosts 55e8240 Add IP addresses to infra node br-vxlan in the examples 1b39f3b Use a sensible vlan range in the example configs ff6e0ad remove unused tunnel_bridge from all example configs d03d4d5 Make the on metal job voting 06abce7 Fix parameter name for removing compute host 68e3f20 [Docs] Restructure inventory documentation 7868be4 [DOC] Update for Newton EOL e9eca74 Add default value for log_dirs in os-log-dir-setup.yml eda4ad6 Add periodic work for release preparations 7174629 Add playbook to ship journals from hosts 1dba8b6 Converge distro interfaces to systemd-networkd 45cebe8 Added monitoring tag to monitoring user creation task. cc98ed8 Work around nested virt issues on OVH test nodes 95f8c7c Reinstate SUSE testing in periodics a2a37e2 Fix onboarding link 3a4ca09 Developer docs refactor ca49f41 Ensure that RDO/SUSE series repo instructions stay up to date 08dccca bootstrap-host: Correct SuSE repo name e7b21c8 Do not generate the html ARA report any more 8662acf Update run_tests.sh and remove tests-repo-clone.sh a3fafc9 Run the on metal job 5a8e199 [Docs] Simplify docs configuration 90eb562 [Docs] Fix docs for latest openstackdocstheme 3999020 Add shade library to openstack-ansible venv 0e5b6cb Add missing service URLs for AODH 4ff9f15 Fixes typo to enable log rotate for Octavia b19cccc ansible-role-requirements: Add common python_venv_build role ca8e8fc Apply haproxy vars to haproxy group instead of haproxy_all 7402726 Convert role to use a common systemd role(s) e634df7 Ensure doc8 is run 55ce380 Fix Doc8 issue d99c1d3 [Docs] Include OpenStack-Ansible Manifesto 62bbe0f [Docs] Adapt the wording for disk requirements 9be2fe7 [Docs] Uniform image on top c49b5ef [Docs] Change heading in target hosts 9a66df1 Adds variables to ceilometer, because it fails when run playbook with telemetry enabled. 72a244d Disable ceph-ansible NTP installation 65f09e1 Add support for Horizon Octavia Dashboard b6119e6 common-tasks: Container Start/Stop conditions 9604e65 Re-add ceph NFS gateway disable settings b319899 zuul: Make openSUSE a voting job 0bfa253 [DOC] contributor: Add initial documentation for distribution support 8bfc323 [Docs] Simplify overview page eee6c77 Integrate Congress with OSA. dc890ee Add more infos into error message 97267d9 Do not collect physical host facts in playbook 84b669c Normalise the nspawn_hosts role name ff85f54 Increase DIB disk space to 3GB b72b3ad Stop inventory constantly giving containers new IP 0595e23 Correct is_container when deploying containers 8841cf3 repo-use.yml: Scope host groups properly 1d731cd Ensure package cache is updated appropriately 8c94cf5 [Docs] Fix doc building idempotency 6442320 [Docs] Simplify and fix docs configuration a56def6 Add some troubleshooting informations 8355505 Add missing Ubuntu packages 41433a9 Updated from global requirements beb36b8 Remove the "is_ssh_address" option from inventory a8b7f7c inventory: all: Switch package state to 'present' on openSUSE 758cd74 Stop running get-ansible-role-requirements with -vvv 882d98c bootstrap-host: Prepare disk for machinectl storage 20fdfb9 Update all references from the deprecated tenant_id to project_id. 58f49a8 Avoid putting rgw conf on ALL hosts 1c5b1ef scripts: scripts-library.sh: Fix typo 12c31c7 [docs] Remove mistaken static content in scenario table 886deb4 Updated from global requirements 581e6e5 Fix typo and misleading task name for nova-consoleauth c9eb144 Follow the new PTI for document build 270e77c Archive ARA report on successful jobs 337a376 tests: bootstrap-host: Switch to Queens repo for SUSE and Red Hat 6255727 Simplify SELinux check 90c1305 Clean-up gate code to use mirror_info and pin ceph-ansible SHA 07817a4 Fix BOOTSTRAP_OPTS ec2a865 Remove meta job map for aio->aio_lxc dc5c383 Set timeouts on uri tasks d94584b [Docs] Update troubleshooting 8602507 [Docs] Update scale environment c222b0d [Docs] Updating managing networks documentation 2941bd1 Merge haproxy plays af13971 Serialize haproxy plays 4aee350 Remove non used variables 57c9731 Update links in README f6deb4f scripts: scripts-library.sh: Fix dstat background process command c068952 Switch openstack_version back to 'master' 9f36b2d Use aio_basekit scenario for OpenSUSE 828613c tests: roles: bootstrap-host: SUSE: fix dbus package name c700fdb Ceph RadosGW integration 7b4989d Point to Queens as previous branch d080a61 Add a warning in openstack_hostnames_ips.yml 17c1439 Improve healthchecks 6b94b21 Isolate the Ansible bootstrap 41bd983 [Docs] Add explicit warnings on common mistake 99f4f17 [Docs] Guide users more 620ae77 Switch to using the imported nspawn roles cfae99d Replace http with https in app-resources.rst and delete useless url c2743f5 Remove the "max_fail_percentage" option f1a7525 [Docs] Migrate security into user guide f4bc81c CentOS 7 integrated gate optimization 72f46e7 Add base kit scenario b6eb92b [Docs] Move limited connectivity to user guide eb89fa5 [Docs] Centralize Inventory documentation 5d61ed4 Update documentation index to include Queens 99ca16e [Docs] Move network architecture into reference d27e329 [Docs] Move Ceph example to user guides 73c45a8 [Docs] Move more examples to user guide 1d47028 [Docs] Fix references 3d76d5e [Docs] Include test scenario as a new user story 14d4da7 Remove cloudwatch haproxy configuration dc8d625 [Docs] Move AIO to first scenario 134ec81 [Docs] Uniform landing text ba7e064 [Docs] Merge advanced configuration into reference 6435ec7 [Docs] Simplify advanced config 4db3962 [Docs] Migrate CLI reference to reference guide 56194bc [Docs] Move upgrade guides into ops 8e8fa3b [Docs] Flatten out maintenance task 87bb9bc [Docs] Promote Backup and Restore 14ae5a8 [Docs] Promote scale the environment c056d18 Normalize package installs and networking for AIO d5937a5 [Docs] Move the upgrade reference into reference 83a8f00 Go back to assuming volume size in GB 852a43f Increase Ansible SSH connection retries 415bdd2 [Docs] Add haproxy verification 2b88712 Remove pip_lock_to_internal_repo variable bc4f6ea Replace host_need_pip with standard override mechanism eb7661d Ensure that constraints are used for AIO bootstrap ebdd575 [Docs] Flatten out monitoring 8ce75ac [Docs] Update manage networks location c4d221e [Docs] Simplify structure of operations guide 148cc97 Have zuul check out ansible for devel AIO job bd72c2e Sort the RPM package list 73dfdab Unfreeze Rocky 152da42 [Docs] Unhide the ssl user story 7ec02ac Fix LXC volume size 9b86311 Fix ARA/log data collection and reporting c834eb9 Remove pycrypto from requirements.txt 074dd25 Update reno for stable/queens 29cefd5 [Docs] Remove duplicate hardening content b83ffe3 [Docs] Introduce next steps cc9bb3e [Docs] Less scary landing page 25407b3 [Docs] Link to the AIO 342f48c Whitelist Octavia API fd9cda8 Add nspawn container driver 1fd26bc Run openstack_openrc before Magnum installation 01de317 [DOC] rectify galera recovery for systemd 6a4c1bd Install mon servers in parallel. Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 + .gitreview | 2 +- README.rst | 10 +- ansible-role-requirements.yml | 126 +++-- deploy-guide/source/app-aboutosa.rst | 52 ++ .../source/app-advanced-config-affinity.rst | 50 -- .../source/app-advanced-config-options.rst | 14 - .../source/app-advanced-config-override.rst | 270 ---------- .../source/app-advanced-config-security.rst | 38 -- .../source/app-advanced-config-sslcertificates.rst | 139 ------ deploy-guide/source/app-ceph.rst | 13 - deploy-guide/source/app-config-pod.rst | 159 ------ deploy-guide/source/app-config-prod-ceph.rst | 133 ----- deploy-guide/source/app-config-prod.rst | 126 ----- deploy-guide/source/app-config-test.rst | 112 ----- deploy-guide/source/app-custom-layouts.rst | 190 ------- deploy-guide/source/app-limited-connectivity.rst | 152 ------ deploy-guide/source/app-networking.rst | 118 ----- deploy-guide/source/app-resources.rst | 15 +- deploy-guide/source/app-security.rst | 161 ------ deploy-guide/source/app.rst | 11 +- deploy-guide/source/conf.py | 128 +++-- deploy-guide/source/configure.rst | 50 +- deploy-guide/source/deploymenthost.rst | 67 +-- .../source/figures/arch-layout-production-ceph.png | Bin 167033 -> 0 bytes .../source/figures/arch-layout-production-ceph.svg | 3 - .../source/figures/arch-layout-production.png | Bin 217767 -> 0 bytes .../source/figures/arch-layout-production.svg | 3 - deploy-guide/source/figures/arch-layout-test.png | Bin 220515 -> 0 bytes deploy-guide/source/figures/arch-layout-test.svg | 3 - deploy-guide/source/figures/arch-layout.graffle | Bin 8655 -> 0 bytes .../figures/networkarch-bare-external-example.png | Bin 107053 -> 0 bytes .../source/figures/networkarch-bare-external.png | Bin 109645 -> 0 bytes .../networkarch-container-external-example.png | Bin 178387 -> 0 bytes .../figures/networkarch-container-external.png | Bin 183958 -> 0 bytes deploy-guide/source/figures/networkcomponents.png | Bin 38304 -> 0 bytes deploy-guide/source/figures/networking-compute.png | Bin 116754 -> 0 bytes .../source/figures/networking-neutronagents.png | Bin 136895 -> 0 bytes .../source/figures/production-storage-cinder.png | Bin 102217 -> 0 bytes .../production-storage-cinder.svg/image3.wmf | Bin 19378 -> 0 bytes .../production-storage-cinder.svg | 3 - .../source/figures/production-storage-glance.png | Bin 87006 -> 0 bytes .../production-storage-glance.svg/image3.wmf | Bin 19378 -> 0 bytes .../production-storage-glance.svg | 3 - .../source/figures/production-storage-nova.png | Bin 84263 -> 0 bytes .../figures/production-storage-nova.svg/image3.wmf | Bin 19378 -> 0 bytes .../production-storage-nova.svg | 3 - .../source/figures/production-storage-swift.png | Bin 108150 -> 0 bytes .../source/figures/production-storage-swift.svg | 3 - .../figures/production-storage.graffle/data.plist | Bin 8497 -> 0 bytes .../figures/production-storage.graffle/image3.wmf | Bin 19378 -> 0 bytes deploy-guide/source/figures/production-storage.svg | 3 - deploy-guide/source/index.rst | 14 +- deploy-guide/source/next-steps.rst | 18 + deploy-guide/source/overview-network-arch.rst | 85 ---- deploy-guide/source/overview-osa.rst | 98 ---- deploy-guide/source/overview-requirements.rst | 92 ++-- .../source/overview-service-architecture.rst | 122 ----- deploy-guide/source/overview-storage-arch.rst | 167 ------- deploy-guide/source/overview.rst | 34 +- deploy-guide/source/run-playbooks.rst | 10 +- deploy-guide/source/targethosts-networkconfig.rst | 84 +++- deploy-guide/source/targethosts-prepare.rst | 54 +- deploy-guide/source/targethosts.rst | 9 +- deploy-guide/source/verify-operation.rst | 12 +- .../admin/maintenance-tasks/ansible-modules.rst | 42 +- .../admin/maintenance-tasks/inventory-backups.rst | 41 ++ .../admin/maintenance-tasks/managing-swift.rst | 80 --- .../admin/maintenance-tasks/network-maintain.rst | 196 -------- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 21 +- .../admin/maintenance-tasks/scale-environment.rst | 402 --------------- .../monitor-environment/monitoring-systems.rst | 11 - .../admin/openstack-operations/cli-operations.rst | 74 +-- .../admin/openstack-operations/managing-images.rst | 1 - .../openstack-operations/managing-instances.rst | 1 - .../openstack-operations/managing-networks.rst | 192 +++++++ .../admin/openstack-operations/network-service.rst | 44 +- .../admin/openstack-operations/verify-deploy.rst | 170 +++++-- .../upgrades/major-upgrades-manual-upgrade.rst | 276 +++++++++++ .../admin/upgrades/major-upgrades-with-script.rst | 29 ++ .../architecture/container-networking.rst | 106 ++++ .../reference/configuration/advanced-config.rst | 18 + .../reference/configuration/extending-osa.rst | 83 ++++ .../configuration/extra-python-software.rst | 37 ++ .../reference/configuration/using-overrides.rst | 459 +++++++++++++++++ .../figures/networkarch-bare-external-example.png | Bin 0 -> 107053 bytes .../figures/networkarch-bare-external.png | Bin 0 -> 109645 bytes .../networkarch-container-external-example.png | Bin 0 -> 178387 bytes .../figures/networkarch-container-external.png | Bin 0 -> 183958 bytes .../reference/figures/networking-compute.png | Bin 0 -> 116754 bytes .../reference/figures/networking-neutronagents.png | Bin 0 -> 136895 bytes .../figures/production-storage-cinder.png | Bin 0 -> 102217 bytes .../production-storage-cinder.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-cinder.svg | 3 + .../figures/production-storage-glance.png | Bin 0 -> 87006 bytes .../production-storage-glance.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-glance.svg | 3 + .../reference/figures/production-storage-nova.png | Bin 0 -> 84263 bytes .../figures/production-storage-nova.svg/image3.wmf | Bin 0 -> 19378 bytes .../production-storage-nova.svg | 3 + .../reference/figures/production-storage-swift.png | Bin 0 -> 108150 bytes .../reference/figures/production-storage-swift.svg | 3 + .../figures/production-storage.graffle/data.plist | Bin 0 -> 8497 bytes .../figures/production-storage.graffle/image3.wmf | Bin 0 -> 19378 bytes .../reference/figures/production-storage.svg | 3 + .../reference/inventory/configure-inventory.rst | 237 +++++++++ .../reference/inventory/generate-inventory.rst | 127 +++++ .../reference/inventory/manage-inventory.rst | 70 +++ .../inventory/openstack-user-config-reference.rst | 12 + .../inventory/understanding-inventory.rst | 99 ++++ .../reference/upgrades/reference-scripts.rst | 45 ++ .../upgrades/reference-upgrade-playbooks.rst | 113 +++++ .../user/figures/arch-layout-production-ceph.png | Bin 0 -> 167033 bytes .../user/figures/arch-layout-production-ceph.svg | 3 + .../example-switchport-config-and-cabling.png | Bin 0 -> 245571 bytes etc/network/interfaces.d/aio_interfaces.cfg | 7 +- .../openstack_interface.cfg.pod.example | 20 +- .../openstack_interface.cfg.prod.example | 21 +- .../openstack_interface.cfg.test.example | 22 +- etc/openstack_deploy/conf.d/barbican.yml.aio | 4 + etc/openstack_deploy/conf.d/barbican.yml.example | 8 + etc/openstack_deploy/conf.d/ceph.yml.aio | 5 + etc/openstack_deploy/conf.d/congress.yml.aio | 4 + etc/openstack_deploy/conf.d/molteniron.yml.aio | 4 - etc/openstack_deploy/conf.d/swift.yml.aio | 4 +- etc/openstack_deploy/env.d/aio_metal.yml.example | 3 - etc/openstack_deploy/openstack_user_config.yml.aio | 4 +- .../openstack_user_config.yml.aio-nspawn.j2 | 137 +++++ .../openstack_user_config.yml.aio.j2 | 15 +- .../openstack_user_config.yml.example | 47 +- .../openstack_user_config.yml.pod.example | 7 +- .../openstack_user_config.yml.prod-ceph.example | 4 +- .../openstack_user_config.yml.prod.example | 10 +- .../openstack_user_config.yml.test.example | 4 +- etc/openstack_deploy/user_secrets.yml | 132 ++++- etc/openstack_deploy/user_variables.yml | 6 + .../user_variables.yml.prod-ceph.example | 2 +- .../user_variables.yml.prod.example | 2 +- global-requirement-pins.txt | 8 +- inventory/env.d/ceph.yml | 14 + inventory/env.d/congress.yml | 36 ++ inventory/env.d/molteniron.yml | 35 -- inventory/group_vars/all/all.yml | 46 +- inventory/group_vars/all/ceph-rgw.yml | 20 + inventory/group_vars/all/ceph.yml | 8 + inventory/group_vars/all/designate.yml | 6 +- inventory/group_vars/all/glance.yml | 23 +- inventory/group_vars/all/horizon.yml | 16 + inventory/group_vars/all/infra.yml | 15 +- inventory/group_vars/all/ironic.yml | 24 + inventory/group_vars/all/keystone.yml | 38 +- inventory/group_vars/all/neutron.yml | 8 - inventory/group_vars/all/octavia.yml | 9 +- inventory/group_vars/all/oslo-messaging.yml | 28 ++ inventory/group_vars/all/pip.yml | 12 - inventory/group_vars/all_containers.yml | 1 - inventory/group_vars/aodh_all.yml | 7 +- inventory/group_vars/barbican_all.yml | 11 - inventory/group_vars/ceilometer_all.yml | 19 +- inventory/group_vars/ceph-rgw.yml | 13 + inventory/group_vars/ceph_all.yml | 9 + inventory/group_vars/cinder_all.yml | 25 - inventory/group_vars/congress_all.yml | 24 + inventory/group_vars/designate_all.yml | 22 - inventory/group_vars/galera_all.yml | 10 +- inventory/group_vars/glance_all.yml | 28 -- inventory/group_vars/gnocchi_all.yml | 3 - inventory/group_vars/haproxy/haproxy.yml | 360 ++++++++++++++ inventory/group_vars/haproxy/keepalived.yml | 71 +++ inventory/group_vars/haproxy_all/haproxy.yml | 357 ------------- inventory/group_vars/haproxy_all/keepalived.yml | 71 --- inventory/group_vars/heat_all.yml | 17 - inventory/group_vars/horizon_all.yml | 5 +- inventory/group_vars/ironic_all.yml | 17 - inventory/group_vars/keystone_all.yml | 32 +- inventory/group_vars/magnum_all.yml | 11 - inventory/group_vars/memcached.yml | 2 +- inventory/group_vars/neutron_all.yml | 16 - inventory/group_vars/nova_all.yml | 42 +- inventory/group_vars/octavia_all.yml | 12 +- inventory/group_vars/physical_hosts.yml | 2 + inventory/group_vars/repo_all.yml | 14 +- inventory/group_vars/sahara_all.yml | 19 - inventory/group_vars/swift_all.yml | 10 - inventory/group_vars/tacker_all.yml | 14 - inventory/group_vars/trove_all.yml | 20 - inventory/group_vars/utility_all.yml | 20 +- inventory/inventory.ini | 197 ++++++++ osa_toolkit/filesystem.py | 5 +- osa_toolkit/generate.py | 78 +-- osa_toolkit/manage.py | 4 +- playbooks/ceph-install.yml | 53 +- playbooks/ceph-rgw-install.yml | 72 +++ playbooks/ceph-rgw-keystone-setup.yml | 108 ++++ playbooks/common-playbooks/cinder.yml | 21 +- playbooks/common-playbooks/glance.yml | 30 +- playbooks/common-playbooks/neutron.yml | 50 +- playbooks/common-playbooks/nova.yml | 65 ++- playbooks/common-tasks/dynamic-address-fact.yml | 40 +- playbooks/common-tasks/mysql-db-user.yml | 41 -- playbooks/common-tasks/os-log-dir-setup.yml | 6 +- playbooks/common-tasks/os-lxc-container-setup.yml | 20 +- .../common-tasks/os-nspawn-container-setup.yml | 129 +++++ playbooks/common-tasks/package-cache-proxy.yml | 54 +- playbooks/common-tasks/rabbitmq-vhost-user.yml | 41 -- .../common-tasks/remove_container_journal.yml | 23 + playbooks/common-tasks/rsyslog-client.yml | 23 + playbooks/common-tasks/set-pip-upstream-url.yml | 40 -- playbooks/common-tasks/set-pip-vars.yml | 83 ++++ playbooks/common-tasks/set-upper-constraints.yml | 78 --- playbooks/containers-deploy.yml | 6 +- playbooks/containers-lxc-create.yml | 68 ++- playbooks/containers-lxc-destroy.yml | 31 +- playbooks/containers-lxc-host.yml | 31 +- playbooks/containers-nspawn-create.yml | 119 +++++ playbooks/containers-nspawn-destroy.yml | 112 +++++ playbooks/containers-nspawn-host.yml | 26 + playbooks/defaults/distro_install.yml | 72 +++ playbooks/defaults/healthchecks-vars.yml | 107 ++++ playbooks/defaults/repo_packages/gnocchi.yml | 3 +- playbooks/defaults/repo_packages/nova_consoles.yml | 9 +- .../defaults/repo_packages/openstack_services.yml | 150 ++++-- .../defaults/repo_packages/openstack_testing.yml | 39 -- playbooks/defaults/source_install.yml | 43 ++ playbooks/etcd-install.yml | 4 +- playbooks/galera-install.yml | 27 +- playbooks/haproxy-install.yml | 48 +- playbooks/healthcheck-hosts.yml | 94 ++++ playbooks/healthcheck-infrastructure.yml | 220 ++++---- playbooks/healthcheck-openstack.yml | 552 +++++++++++++++++++++ playbooks/infra-journal-remote.yml | 109 ++++ playbooks/listening-port-report.yml | 36 ++ playbooks/memcached-install.yml | 18 +- playbooks/openstack-hosts-setup.yml | 12 +- playbooks/os-aodh-install.yml | 53 +- playbooks/os-barbican-install.yml | 46 +- playbooks/os-ceilometer-install.yml | 32 +- playbooks/os-cinder-install.yml | 56 +-- playbooks/os-congress-install.yml | 58 +++ playbooks/os-designate-install.yml | 58 +-- playbooks/os-glance-install.yml | 49 +- playbooks/os-gnocchi-install.yml | 49 +- playbooks/os-heat-install.yml | 63 +-- playbooks/os-horizon-install.yml | 38 +- playbooks/os-ironic-install.yml | 48 +- playbooks/os-keystone-install.yml | 88 ++-- playbooks/os-magnum-install.yml | 48 +- playbooks/os-molteniron-install.yml | 54 -- playbooks/os-neutron-install.yml | 45 -- playbooks/os-nova-install.yml | 82 +-- playbooks/os-octavia-install.yml | 51 +- playbooks/os-rally-install.yml | 14 +- playbooks/os-sahara-install.yml | 58 +-- playbooks/os-swift-install.yml | 43 +- playbooks/os-swift-sync.yml | 3 +- playbooks/os-tacker-install.yml | 47 +- playbooks/os-tempest-install.yml | 19 +- playbooks/os-trove-install.yml | 58 +-- playbooks/rabbitmq-install.yml | 24 +- playbooks/repo-build.yml | 5 +- playbooks/repo-server.yml | 49 +- playbooks/repo-use.yml | 23 +- playbooks/rsyslog-install.yml | 11 +- playbooks/setup-infrastructure.yml | 3 + playbooks/setup-openstack.yml | 10 +- playbooks/unbound-install.yml | 3 +- playbooks/utility-install.yml | 98 ++-- .../notes/add-bionic-support-999217a9f7f213cc.yaml | 13 + .../notes/add-cors-config-6326223fe7fa7423.yaml | 5 + ...octavia-dashboard-support-faed0fd8e11e8f50.yaml | 7 + .../notes/add-nspawn-driver-ac2aa38f04a7505a.yaml | 16 + .../add-opensuse-support-a8ec3f54188e5f01.yaml | 14 +- .../notes/add-random-devices-38671b23cb1319b8.yaml | 14 + .../notes/added-vendor-data-c35cb7735b1ee9c7.yaml | 4 + .../aodh-service-setup-host-d28f6974160fd939.yaml | 17 + ...rbican-service-setup-host-a5da4ed51d164fb5.yaml | 17 + ...ld-rally-with-constraints-60e12254103018c4.yaml | 11 + ...-tempest-with-constraints-409eab81862db701.yaml | 11 + ...ometer-service-setup-host-18179a1f9b71fb14.yaml | 25 + .../notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml | 11 + .../certificate_generation-a9cdcc8e3b1e186f.yaml | 14 + ...cinder-service-setup-host-712ca5e7b7b9d578.yaml | 17 + .../notes/cmd2-0.9.0-838765e91d9be69e.yaml | 7 + .../container-extra-networks-c74119ba6a559a59.yaml | 8 + ...atic-mac-addresses-always-8d3843e436ad046c.yaml | 5 + .../container_namespaces-8a0b9af1ec09060f.yaml | 6 + .../custom-pip-package-add-4c17638c6e5b3373.yaml | 6 + .../deprecated-iscsi_helper-98fd2aebfd72fdf6.yaml | 5 + .../designate-1604-support-d397681dd302eda9.yaml | 1 + ...ignate-service-setup-host-78466665a752dadd.yaml | 17 + .../notes/drop-custom-themes-724c40e5cd69b8e2.yaml | 10 + .../notes/elang-version-2c1135466ef94032.yaml | 9 + ...astestmirror-configurable-08e075f8602164e5.yaml | 7 + .../notes/fedora-27-support-a1e0c670e4fc5626.yaml | 5 + releasenotes/notes/fix_quota-e3d4bf0b896dc393.yaml | 12 + .../notes/get-nested-removed-779b8d2648d2e8b4.yaml | 5 + ...git-sourced-config-change-5b445d3ce26d29c1.yaml | 17 + ...glance-service-setup-host-b0e71be408de074b.yaml | 17 + ...nocchi-service-setup-host-ef418b0e709ae796.yaml | 17 + .../heat-service-setup-host-e15eb9aa40414697.yaml | 17 + ...orizon-service-setup-host-9728b772d2514dd9.yaml | 17 + .../notes/image_download-754d13e7df9b7891.yaml | 16 + ...ironic-service-setup-host-658842e1875ea7bf.yaml | 17 + .../notes/journal-link-3c23aab5b5ed3441.yaml | 14 + .../notes/journal-log-ccba504642b49612.yaml | 5 + .../notes/journal-log-ccbb504642b49611.yaml | 9 + .../notes/journal-log-ccbb504642b49614.yaml | 5 + .../notes/journal-log-cwbr504hd9b59612.yaml | 5 + .../notes/journal-log-cxcb512642b49617.yaml | 9 + .../notes/journal-log-xcba504642b49619.yaml | 6 + .../notes/journal-log-ycba504642b47619.yaml | 5 + ...ystone-service-setup-host-cd3ee3346af823e6.yaml | 17 + ...tworking-convert-networkd-5b514e604df7c429.yaml | 9 + .../libvirt-python-symlink-e892dd3536c02179.yaml | 19 + .../notes/lxc_image_cache-f14701a7qw90al21.yaml | 27 + ...magnum-service-setup-host-ea285f161e625980.yaml | 22 + .../molteniron-deprecation-87ee6f12a3dcb1e8.yaml | 7 + ...endaylight-bgpvpn-support-3e44e278a53deeac.yaml | 8 + ...tron-opendaylight-support-453dc9324eafaae7.yaml | 1 + ...eutron-service-setup-host-895ececec99d7a51.yaml | 17 + .../notes/no-is_ssh_address-ee424e66b8895a07.yaml | 10 + .../nova-service-setup-host-f62d2eaede77d23c.yaml | 17 + ...ctavia-service-setup-host-d57533fdea394394.yaml | 25 + ...ack-distribution-packages-176e5d8a5ef3ad4b.yaml | 8 + ...ack-distribution-packages-1f8b8dd56b58180f.yaml | 7 + ...ack-distribution-packages-292a6cb46e3adc32.yaml | 7 + ...ack-distribution-packages-2f041fb59bfbb7ef.yaml | 7 + ...ack-distribution-packages-416a67fc03d79dc9.yaml | 7 + ...ack-distribution-packages-9fa11225b7f06125.yaml | 7 + ...ack-distribution-packages-b1c9e1f488e53872.yaml | 7 + ...ack-distribution-packages-bbec587237b8bc80.yaml | 7 + ...ack-distribution-packages-c6dc58c949068713.yaml | 7 + ...ack-distribution-packages-ca14e38bbea872b2.yaml | 7 + ...ack-distribution-packages-d42a426bb57f76b1.yaml | 7 + ...ack-distribution-packages-f5d3174b96fc2372.yaml | 7 + ...ack-distribution-packages-fcb6220fdeb3668c.yaml | 7 + ...nstack-service-setup-host-f38d655eed285f57.yaml | 13 + .../optional-schedule-zone-12479db3ba0e9267.yaml | 8 + .../os_cinder-remove-v1-api-71b2f265936e89b2.yaml | 8 + .../oslo-messaging-backends-65287400dba86fce.yaml | 20 + ...ssaging-separate-backends-06a1b30ffb228f22.yaml | 19 + ...ssaging-separate-backends-1fbdb77e93e29542.yaml | 20 + ...ssaging-separate-backends-3b2dac9462595b31.yaml | 14 + ...ssaging-separate-backends-401c97b4c48a9b31.yaml | 20 + ...ssaging-separate-backends-4491e7c099bee4f5.yaml | 21 + ...ssaging-separate-backends-60f81dae397b1c96.yaml | 15 + ...ssaging-separate-backends-61d279ded1bc999e.yaml | 20 + ...ssaging-separate-backends-652f63d5c21b1884.yaml | 20 + ...ssaging-separate-backends-702d7b33fda7a9f5.yaml | 19 + ...ssaging-separate-backends-87f2d1a15c202f73.yaml | 20 + ...ssaging-separate-backends-9b3fcaaa21a0d9f4.yaml | 19 + ...ssaging-separate-backends-a3af6957a984ac51.yaml | 20 + ...ssaging-separate-backends-e68c98d4f9d9a79c.yaml | 19 + ...ssaging-separate-backends-e82ea3162d2d383f.yaml | 15 + ...ssaging-separate-backends-e8a0b6857f2a9749.yaml | 20 + ...-control-upgrade-strategy-2807e228d529c389.yaml | 15 + .../ppc64le-var-changes-84aa4f3f9bb0ef52.yaml | 31 ++ .../notes/pypi-cache-removed-c03a9a0658c9d89f.yaml | 10 + .../python2-lxc-git-removal-5d20c07d80aaa75b.yaml | 2 +- ...ove-distro-package-lookup-340b0fedb25a7c4b.yaml | 8 + .../notes/remove-fax-fail-5038b4b6eb4951b3.yaml | 21 + ...ve-ping-checks-by-default-f86fc237e779b80e.yaml | 6 + ...ove-required-pip-packages-49a4215bdddea189.yaml | 5 + .../notes/remove-v1-api-4c66f43c4f8404b6.yaml | 6 + .../notes/remove-v1-api-4fda1ee243203fe5.yaml | 5 + ...iable_python_ceph_package-9575466eb146e500.yaml | 8 + ...-server-required-packages-9a5b1a5c1236030f.yaml | 5 + .../notes/rsyslog-disable-ffc4ebf27cc77330.yaml | 6 + ...sahara-service-setup-host-18f57fbc1671adfc.yaml | 17 + .../notes/separate-host-vars-0f4d4bd76124ae68.yaml | 8 + .../notes/set-limit-disabled-25998f1f12987c12.yaml | 20 + .../notes/set-limit-enabled-25998f1f12987c12.yaml | 13 + ...l_modules_with_group_vars-8d169f564ffd450c.yaml | 2 +- .../sso-callback-template-cf720ab7f6fc2461.yaml | 5 + .../swift-service-setup-host-b3d0aca53522a887.yaml | 17 + .../systemd-journal-remote-25248628390b46d9.yaml | 9 + ...empest-service-setup-host-da08c1d4775ea0d1.yaml | 25 + .../tempest-test-blacklist-4ec6cc32798874ce.yaml | 6 + .../notes/template-setup-70a3daadc2a9d93b.yaml | 10 + .../trove-service-setup-host-5bb64b2356ca81e2.yaml | 17 + .../use-pip-distro-packages-2505f6e630a94850.yaml | 6 + .../notes/user-containers-1daed001ee6b88ae.yaml | 9 + ...space_group_and_host_vars-14f77b5eb518e32d.yaml | 4 +- releasenotes/source/index.rst | 1 + releasenotes/source/queens.rst | 6 + requirements.txt | 23 +- scripts/bootstrap-aio.sh | 32 +- scripts/bootstrap-ansible.sh | 186 ++----- scripts/gate-check-commit.sh | 88 +--- scripts/get-ansible-role-requirements.yml | 91 ++++ scripts/inventory-manage.py | 2 +- scripts/openstack-ansible.rc | 16 +- scripts/openstack-ansible.sh | 79 +++ scripts/rabbitmq-test.py | 2 +- scripts/run-upgrade.sh | 32 +- scripts/scripts-library.sh | 203 +++++--- scripts/sources-branch-updater-lib.sh | 8 +- scripts/test-log-collect.sh | 26 - .../playbooks/deploy-config-changes.yml | 2 +- .../playbooks/memcached-flush.yml | 2 +- .../playbooks/molteniron-role-removal.yml | 29 ++ .../playbooks/user-secrets-adjustment.yml | 39 +- .../scripts/migrate_openstack_vars.py | 2 +- test-requirements.txt | 7 - .../bootstrap-host/files/user_variables_proxy.yml | 11 + .../bootstrap-host/tasks/check-requirements.yml | 66 ++- .../bootstrap-host/tasks/install_packages.yml | 99 +--- .../bootstrap-host/tasks/prepare_aio_config.yml | 185 ++++--- .../bootstrap-host/tasks/prepare_data_disk.yml | 131 ++++- .../tasks/prepare_loopback_btrfs.yml | 40 ++ .../tasks/prepare_loopback_cinder.yml | 73 +-- .../tasks/prepare_loopback_machines.yml | 44 ++ .../bootstrap-host/tasks/prepare_loopback_nova.yml | 25 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 54 +- .../tasks/prepare_loopback_swift.yml | 43 +- .../bootstrap-host/tasks/prepare_loopback_zfs.yml | 37 ++ .../bootstrap-host/tasks/prepare_networking.yml | 347 ++++++------- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 6 +- .../bootstrap-host/templates/apt-sources.list.j2 | 16 - .../bootstrap-host/templates/osa_interfaces.cfg.j2 | 107 ---- .../templates/osa_interfaces_multinode.cfg.j2 | 28 -- .../templates/redhat_interface_alias.cfg.j2 | 5 - .../templates/redhat_interface_default.cfg.j2 | 12 - .../templates/rpm_interface_ifdown-post.cfg.j2 | 29 -- .../templates/rpm_interface_ifup-post.cfg.j2 | 35 -- .../templates/suse_interface_default.cfg.j2 | 9 - .../templates/user_variables.aio.yml.j2 | 56 +-- .../templates/user_variables_barbican.yml.j2 | 22 + .../templates/user_variables_ceph.yml.j2 | 2 +- .../templates/user_variables_congress.yml.j2 | 21 + .../templates/user_variables_octavia.yml.j2 | 2 +- .../templates/user_variables_translations.yml.j2 | 7 + tox.ini | 12 +- zuul.d/jobs.yaml | 187 +++++-- zuul.d/playbooks/post.yml | 28 +- zuul.d/playbooks/run.yml | 12 +- zuul.d/project-templates.yaml | 162 ++++++ zuul.d/project.yaml | 49 +- 537 files changed, 14583 insertions(+), 10940 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d76e954..0787567 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pyasn1!=0.2.3,>=0.1.8 # BSD -pyOpenSSL>=16.2.0 # Apache-2.0 +pyOpenSSL>=17.1.0 # Apache-2.0 @@ -9 +8,0 @@ PrettyTable<0.8,>=0.7.1 # BSD -pycrypto>=2.6 # Public Domain @@ -11 +10 @@ python-memcached>=1.56 # PSF -PyYAML>=3.10 # MIT +PyYAML>=3.12 # MIT @@ -12,0 +12,18 @@ virtualenv>=14.0.6 # MIT + +# We use this for our own keystone module. +# TODO(odyssey4me): Remove this once we no +# longer use our own keystone module. +python-keystoneclient>=3.8.0 # Apache-2.0 + +# We use this for the octavia role to be able +# to upload a tagged image. +# Remove this once Ansible can do this with +# modules instead. +python-openstackclient>=3.14.2 + +# We use this for the Ansible openstack +# modules. +shade>=1.17.0 # Apache-2.0 + +# We use this for the json_query filter +jmespath>=0.9.3 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 3b4da26..20122f7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,7 +10,0 @@ virtualenv>=14.0.6 # MIT - -# this is required for the docs build jobs -sphinx!=1.6.6,>=1.6.2 # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 -sphinxmark>=0.1.14 # Apache-2.0

1 0

puppet-horizon 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are tickled pink to announce the release of: puppet-horizon 13.3.1: Puppet module for OpenStack Horizon This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-horizon/ For more details, please see below. 13.3.1 ^^^^^^ New Features ************ * Added a new parameter horizon::manage_memcache_package that can be used to determine if you want the python memcache library installed if the cache backend is set to using memcache. Deprecation Notes ***************** * The horizon::simple_ip_management was removed in Rocky and has no effect and will be removed from the Puppet interface in Stein. Changes in puppet-horizon 13.3.0..13.3.1 ---------------------------------------- c02fb6f Release 13.3.1 e587835 Fix "create role" button in identity/roles 4f85b68 Deprecated simple_ip_management 02f9ec4 Add manage_memcache_package parameter aba7001 import zuul job settings from project-config 67c585e Update Gemfile for stable/rocky dbc4804 Update .gitreview for stable/rocky 157d18f Update UPPER_CONSTRAINTS_FILE for stable/rocky 388290e Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + manifests/init.pp | 24 ++++++++++++++++------ metadata.json | 8 ++------ .../notes/deprecate-sim-d20cb684d2c416c8.yaml | 5 +++++ .../manage-memcache-param-4fbc465b88b062db.yaml | 6 ++++++ spec/classes/horizon_init_spec.rb | 9 ++++++++ templates/local_settings.py.erb | 3 ++- tox.ini | 2 +- 10 files changed, 46 insertions(+), 14 deletions(-)

1 0

puppet-mistral 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are chuffed to announce the release of: puppet-mistral 13.3.1: Puppet module for OpenStack Mistral This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-mistral/ For more details, please see below. Changes in puppet-mistral 13.3.0..13.3.1 ---------------------------------------- 63d2d39 Release 13.3.1 bb0e35e import zuul job settings from project-config 3d935e1 Update Gemfile for stable/rocky 499493c Update .gitreview for stable/rocky 802281f Update UPPER_CONSTRAINTS_FILE for stable/rocky ae09797 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + metadata.json | 8 ++------ tox.ini | 2 +- 5 files changed, 6 insertions(+), 7 deletions(-)

1 0

puppet-magnum 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are pleased to announce the release of: puppet-magnum 13.3.1: Puppet module for Magnum This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-magnum/ For more details, please see below. 13.3.1 ^^^^^^ New Features * Added magnum::api::workers and magnum::conductor::workers which can be used to specify the number of worker processes. * Added magnum::api::manage_service that can be used to determine if we should manage the service state or not. * Added new class magnum::wsgi::apache, you can now run the magnum API under Apache with mod_wsgi. Changes in puppet-magnum 13.3.0..13.3.1 --------------------------------------- 0661033 Release 13.3.1 88f68a5 Add Magnum API WSGI support cde66dd import zuul job settings from project-config 435dc47 Update Gemfile for stable/rocky 3d435de Add workers to magnum api and conductor ce66cb9 Update UPPER_CONSTRAINTS_FILE for stable/rocky 6be9111 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + manifests/api.pp | 61 ++++++-- manifests/conductor.pp | 6 + manifests/params.pp | 30 ++-- manifests/wsgi/apache.pp | 155 +++++++++++++++++++++ metadata.json | 4 +- .../notes/add-workers-1ae88b14d0638a82.yaml | 5 + .../notes/magnum-api-wsgi-d0740524e4232379.yaml | 8 ++ spec/classes/magnum_api_spec.rb | 53 +++++-- spec/classes/magnum_conductor_spec.rb | 13 +- tox.ini | 2 +- 13 files changed, 302 insertions(+), 38 deletions(-)

1 0

puppet-glance 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We enthusiastically announce the release of: puppet-glance 13.3.1: Puppet module for OpenStack Glance This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-glance/ For more details, please see below. Changes in puppet-glance 13.3.0..13.3.1 --------------------------------------- 9c3c2e5 Release 13.3.1 1f3497c import zuul job settings from project-config d6c7e24 Update Gemfile for stable/rocky 7de3da6 Update .gitreview for stable/rocky e8e8904 Update UPPER_CONSTRAINTS_FILE for stable/rocky 6c16f29 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + metadata.json | 8 ++------ tox.ini | 2 +- 5 files changed, 6 insertions(+), 7 deletions(-)

1 0

puppet-aodh 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are happy to announce the release of: puppet-aodh 13.3.1: Puppet module for OpenStack Aodh This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-aodh/ For more details, please see below. Changes in puppet-aodh 13.3.0..13.3.1 ------------------------------------- 013e80f Release 13.3.1 cd77187 Fix undef typo 82ed254 import zuul job settings from project-config 46a3809 Update Gemfile for stable/rocky 23dd2b9 Update UPPER_CONSTRAINTS_FILE for stable/rocky 2b63001 Update .gitreview for stable/rocky 5eca67f Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + manifests/init.pp | 2 +- metadata.json | 8 ++------ tox.ini | 2 +- 6 files changed, 7 insertions(+), 8 deletions(-)

1 0

puppet-nova 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are amped to announce the release of: puppet-nova 13.3.1: Puppet module for OpenStack Nova This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-nova/ For more details, please see below. 13.3.1 ^^^^^^ New Features ************ * Added new parameter nova::scheduler::workers which can be used to set the amount of scheduler workers. * Adding nova::compute::sync_power_state_interval parameter that configure the interval to sync power states between the database and the hypervisor. Set to -1 to disable, or to 0 to run the default rate. Defaults to $::os_service_default. Deprecation Notes ***************** * The image_service parameter is deprecated, as we are already using python-glanceclient instead of old glance client. * The "notify_on_api_faults" parameter is deprecated as it is also removed from nova config options in change "https://review.openstack.org/#/c/505164". Changes in puppet-nova 13.3.0..13.3.1 ------------------------------------- 8ab435c Release 13.3.1 890bc14 Separate placement database is not deprecated 8de0fc9 Add scheduler workers support 3ac15e5 Remove pick() for default_floating_pool 3f8c3ee Resolve duplicate declaration with split of api / metadata wsgi 561fc22 Set valid_interfaces for placement fa33284 Deprecate unused notify_on_api_faults parameter 48013f3 compute: add sync_power_state_interval parameter f6262fa Deprecate unused image_service parameter 5d9f58a Remove unused osapi_volume_listen parameter c89befb Make ironic password a secret ce0efbe import zuul job settings from project-config 3cdaab4 Update Gemfile for stable/rocky 9fb13f1 Update .gitreview for stable/rocky 3702fd4 Update UPPER_CONSTRAINTS_FILE for stable/rocky 325da04 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + README.md | 7 +- manifests/api.pp | 78 ++++++++++++---------- manifests/compute.pp | 7 ++ manifests/db.pp | 11 +-- manifests/init.pp | 46 +++++++------ manifests/ironic/common.pp | 2 +- manifests/network/neutron.pp | 5 +- manifests/placement.pp | 2 +- manifests/scheduler.pp | 6 ++ manifests/wsgi/apache_metadata.pp | 2 +- metadata.json | 8 +-- .../deprecate_image_service-3e54aa3283b3191c.yaml | 5 ++ ...cate_notify_on_api_faults-c7eb47adc3c92671.yaml | 6 ++ .../notes/scheduler-workers-13c4cdee9f6de5da.yaml | 5 ++ ...sync_power_state_interval-8dcccedd67fad69c.yaml | 7 ++ spec/classes/nova_api_spec.rb | 6 -- spec/classes/nova_compute_spec.rb | 4 ++ spec/classes/nova_init_spec.rb | 23 ++----- spec/classes/nova_ironic_common_spec.rb | 4 +- spec/classes/nova_placement_spec.rb | 4 +- spec/classes/nova_scheduler_spec.rb | 14 +++- tox.ini | 2 +- 25 files changed, 139 insertions(+), 118 deletions(-)

1 0

puppet-murano 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are happy to announce the release of: puppet-murano 13.3.1: Puppet module for OpenStack Murano This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-murano/ For more details, please see below. Changes in puppet-murano 13.3.0..13.3.1 --------------------------------------- dc93a4c Release 13.3.1 2b88f1a import zuul job settings from project-config 3d96214 Update Gemfile for stable/rocky 6e72dbd Update UPPER_CONSTRAINTS_FILE for stable/rocky c884b08 Update .gitreview for stable/rocky 97ea766 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 ++- Gemfile | 1 + metadata.json | 8 ++------ tox.ini | 2 +- 5 files changed, 7 insertions(+), 8 deletions(-)

1 0

puppet-watcher 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We high-spiritedly announce the release of: puppet-watcher 13.3.1: Puppet module for OpenStack Watcher This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-watcher/ For more details, please see below. Changes in puppet-watcher 13.3.0..13.3.1 ---------------------------------------- 76ed9b0 Release 13.3.1 2470c52 import zuul job settings from project-config c70b659 Update Gemfile for stable/rocky 8641492 Update .gitreview for stable/rocky 33eba1e Update UPPER_CONSTRAINTS_FILE for stable/rocky e88983d Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + metadata.json | 8 ++------ tox.ini | 2 +- 5 files changed, 6 insertions(+), 7 deletions(-)

1 0

puppet-oslo 13.3.1 (rocky)
by no-reply＠openstack.org 16 Oct '18

16 Oct '18

We are ecstatic to announce the release of: puppet-oslo 13.3.1: Puppet module for Oslo This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/puppet-oslo/ For more details, please see below. Changes in puppet-oslo 13.3.0..13.3.1 ------------------------------------- d7186ad Release 13.3.1 2b2071c import zuul job settings from project-config 05bc68b Update Gemfile for stable/rocky e814103 Update .gitreview for stable/rocky a709a96 Update UPPER_CONSTRAINTS_FILE for stable/rocky c452a7f Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + metadata.json | 8 ++------ tox.ini | 2 +- 5 files changed, 6 insertions(+), 7 deletions(-)

1 0