March 2018 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-os_designate 17.0.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are chuffed to announce the release of: openstack-ansible-os_designate 17.0.0: os_designate for OpenStack Ansible This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_designate/ For more details, please see below. 17.0.0 ^^^^^^ Upgrade Notes ************* * Any tooling using the Designate v1 API needs to be reworked to use the v2 API Critical Issues *************** * The Designate V1 API has been removed, and cannot be enabled. Changes in openstack-ansible-os_designate 16.0.0.0rc1..17.0.0 ------------------------------------------------------------- e9fc6c9 Updated from OpenStack Ansible Tests 84a45a1 Stop running non-voting jobs in gate 617f431 Zuul: Remove project name 50b363b Point to Queens instead of master 91f7e1d Remove v1 API configuration 35cc84a Updated from global requirements f763b50 Update UPPER_CONSTRAINTS_FILE for stable/queens 017c9fe Update .gitreview for stable/queens e9c1d19 Update paste, policy and rootwrap configurations 2018-01-30 75db7d9 Updated from OpenStack Ansible Tests e0e07a2 Reinitialize the virtualenv 8a23491 Replace virtualenv-tools by a script 270a8f8 Add MySQL connection SSL support a7e311e Allow the experimental trigger of the integrated repo a5be72a Updated from OpenStack Ansible Tests 6621c7a Remove pip_install dependency 22fa91c Handle Pike deprecations for designate 4f21a97 Use group_names to check a host belongs to group ceb12b1 Fix ansible-lint test failures 20230ca Remove setting of version/release from releasenotes 7f26efb Updated from OpenStack Ansible Tests 0b61611 Allow role defaults to determine the branch tested a508c29 Remove unified queue from gate pipeline 3b4e976 Add openstack-ansible-linters test 4fec57b Initial OSA zuul v3 role jobs 453d3e1 Add OpenStack-Ansible metadata 4b009ca Use openstack proto variable in defaults 00d1ff8 Updated from global requirements 290715a Updated from global requirements dcdcafe Remove deprecated oslo_messaging_rabbit options 8cf44f6 Updated from OpenStack Ansible Tests 949641f Updated from OpenStack Ansible Tests 207f87e Updated from OpenStack Ansible Tests fba7374 Updated from OpenStack Ansible Tests a21469c Update reno for stable/pike 8be6398 Updated from global requirements 009078f tasks: designate_install: Fix virtualenv-tools issue on openSUSE Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Vagrantfile | 2 ++ bindep.txt | 25 ++++------------ defaults/main.yml | 18 ++++++++---- handlers/main.yml | 4 +-- meta/main.yml | 1 - meta/openstack-ansible.yml | 20 +++++++++++++ .../notes/remove-v1-api-4fda1ee243203fe5.yaml | 5 ++++ releasenotes/source/conf.py | 18 +++++------- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 ++++ tasks/designate_init_systemd.yml | 8 ++--- tasks/designate_install.yml | 13 +++++---- templates/api-paste.ini.j2 | 15 ---------- templates/designate.conf.j2 | 34 +++++++++------------- test-requirements.txt | 14 ++++----- tox.ini | 17 +++++++++-- zuul.d/jobs.yaml | 21 +++++++++++++ zuul.d/project.yaml | 31 ++++++++++++++++++++ 26 files changed, 212 insertions(+), 136 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ae8c323..09d54c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -6,2 +6,2 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1!=0.2.3 # BSD -pyOpenSSL>=0.14 # Apache-2.0 +pyasn1!=0.2.3,>=0.1.8 # BSD +pyOpenSSL>=16.2.0 # Apache-2.0 @@ -12,4 +12,4 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -doc8 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_aodh 17.0.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are pumped to announce the release of: openstack-ansible-os_aodh 17.0.0: os_aodh for OpenStack Ansible This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 16.0.0.0rc1..17.0.0 -------------------------------------------------------- b8663a7 Zuul: Remove project name b9abfc7 Updated from OpenStack Ansible Tests cc1871c Updated from global requirements 82de2f6 Point to Queens instead of master d0c1ecd Update UPPER_CONSTRAINTS_FILE for stable/queens 7dae2c3 Update .gitreview for stable/queens 492ff85 Updated from OpenStack Ansible Tests 9f8713e Add MySQL connection SSL support 1daa77e Allow the experimental trigger of the integrated repo dee6d3d Updated from OpenStack Ansible Tests 86d3d2d Remove pip_install dependency d99bbee Remove setting of version/release from releasenotes eb17064 Updated from OpenStack Ansible Tests fbf0aac Allow role defaults to determine the branch tested 8e8cbcb Remove unified queue from gate pipeline f9402cf Add openstack-ansible-linters test 8faad8c Switch auth config to keystone v3 6deee77 Initial OSA zuul v3 role jobs f6faf12 Updated from OpenStack Ansible Tests d3ce7e9 Add OpenStack-Ansible metadata 28fffc9 Updated from global requirements addfb8a Updated from global requirements ab392e3 Updated from OpenStack Ansible Tests 3d8f508 Updated from OpenStack Ansible Tests 54be8ee Updated from OpenStack Ansible Tests 9dc985d Update reno for stable/pike ecf2ec7 Updated from global requirements fbff079 tasks: aodh_install.yml: Fix virtualenv-tools issue on openSUSE Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Vagrantfile | 2 ++ bindep.txt | 25 ++++++------------------- defaults/main.yml | 8 +++++--- meta/main.yml | 1 - meta/openstack-ansible.yml | 20 ++++++++++++++++++++ releasenotes/source/conf.py | 16 +++++----------- releasenotes/source/index.rst | 5 +++-- releasenotes/source/pike.rst | 6 ++++++ tasks/aodh_install.yml | 4 ++-- templates/aodh.conf.j2 | 12 ++++++++---- test-requirements.txt | 14 +++++++------- tox.ini | 17 ++++++++++++++--- zuul.d/jobs.yaml | 21 +++++++++++++++++++++ zuul.d/project.yaml | 30 ++++++++++++++++++++++++++++++ 21 files changed, 180 insertions(+), 95 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ae8c323..09d54c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -6,2 +6,2 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1!=0.2.3 # BSD -pyOpenSSL>=0.14 # Apache-2.0 +pyasn1!=0.2.3,>=0.1.8 # BSD +pyOpenSSL>=16.2.0 # Apache-2.0 @@ -12,4 +12,4 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -doc8 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-galera_server 17.0.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are satisfied to announce the release of: openstack-ansible-galera_server 17.0.0: Galera Server role for OpenStack-Ansible This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 17.0.0 ^^^^^^ New Features ************ * The extra packages percona packages used by the ppc64le are now downloaded by the Ansible deployment host by default, as opposed to the target hosts. Once downloaded the packages are pushed up to the target hosts. This behaviour may be adjusted by setting "galera_server_extra_package_downloader" to "target-host". The packages are downloaded to the path set in "galera_server_extra_package_path". Deprecation Notes ***************** * The following variables have been removed as they no longer serve any purpose. * "galera_package_arch" * "percona_package_download_validate_certs" * "percona_package_url" * "percona_package_fallback_url" * "percona_package_sha256" * "percona_package_path" * "qpress_package_download_validate_certs" * "qpress_package_url" * "qpress_package_fallback_url" * "qpress_package_sha256" * "qpress_package_path" The functionality previously using these variables has been transitioned to using a simpler data structure. Changes in openstack-ansible-galera_server 16.0.0.0rc1..17.0.0 -------------------------------------------------------------- 7c1749d Restore support for percona packages when using ppc64le 93d2777 tasks: Replace deprecated 'include' statements 462b92a tasks: Fix use_percona_upstream variable usage a3aa5e7 vars: Install qpress only when galera_xtrabackup_compression is true 8ce7d66 Allow Galera package downloads over HTTP 63b17cc Fix cache update after initial apt_repository fail e373523 Set correct group membership of /var/log/mysql_logs directory dbd3572 Point to Queens instead of master de1012a Updated from OpenStack Ansible Tests 315384b Update UPPER_CONSTRAINTS_FILE for stable/queens 8fc8f9f Update .gitreview for stable/queens dfb3d59 Set proper yum repo priority on CentOS 7 8a42fac Prevent latest mariadb version e4456ed Use a venv with previous ansible version for upgrades 6568ff2 Zuul: Remove project name 8f0ff81 Updated from global requirements a37bfcc SUSE: Switch to upstream MariaDB repository baa97f1 tasks: galera_post_install: Configure the service before securing the DB dc3d1ab Updated from OpenStack Ansible Tests 73376ad tests: test-galera-upgrades.sh: Drop Ansible verbosity f047cae vars: Drop galera_percona_xtrabackup_repo_url variable f8d80dd SUSE: Install the Percona packages. bed02bd Updated from global requirements 7205720 RedHat: Ensure that conflicting MariaDB packages are removed f2bfbd3 Fix Galera socket for RedHat 43458a8 Limit Galera SSL to TLSv1.2 ciphers e54d581 Remove the galera_ssl_address variable 6d19413 Update default paths of SSL cert files a9fa402 Further simplify the upgrade check bacb582 Allow the experimental trigger of the integrated repo a566108 Updated from OpenStack Ansible Tests ead2540 Fix the key lookup names for self-signed SSL 4a0d29c Fix galera server local db permission access 67a665e Ensure the role works when run in serial 9b0fc1f Update the basic systemd extra configs for isolation and consistency 7b92a07 Fix galera_monitoring_allowed_source a99f018 Update Percona XtraDB Backup version ca054bd Tune-up the galera role for efficiency 94821f8 Implement a proper WSREP check for galera 546c402 SUSE: Apply workaround for mariadb-10.2 e9d7ab1 Remove setting of version/release from releasenotes 6d1dd0c Updated from OpenStack Ansible Tests bc21a02 Remove unified queue from gate pipeline 3506f66 Add openstack-ansible-linters test e8b4875 Initial OSA zuul v3 role jobs 839682c Suppress command/shell warnings 54f7c16 Add OpenStack-Ansible metadata bc8a482 templates: Configure galera socket per distribution 6862062 Implement apt pin to avoid MariaDB 10.1.27 95faea4 Add option to disable xtrabackup compression 1f55ed3 Updated from global requirements 2a753e8 Update and replace http with https for doc links 039ece9 Set a var for the MariaDB major version 29ba127 Updated from global requirements c094b3f Updated from OpenStack Ansible Tests 149076c Reimplement external LB management handler hook df18e4e SUSE: Add ability to configure external mirror for openSUSE 42edfdb Updated from OpenStack Ansible Tests 3f445dd Remove duplicate package pinning variable f9a00b5 Updated from OpenStack Ansible Tests 4fd2e32 Update source role to Pike c24d590 Fix MariaDB apt package pinning 0227dbe Separate greenfield and upgrade tests 62cd6fb Update reno for stable/pike 387373f Updated from global requirements ea74967 Added log link tasks so the role can run on metal 1b5d18c Toggle percona repo without extra-vars Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + CONTRIBUTING.rst | 2 +- README.rst | 6 +- Vagrantfile | 2 + bindep.txt | 25 +-- defaults/main.yml | 111 +++++++------ files/galera_new_cluster | 72 +++++++++ handlers/main.yml | 137 ++++++++-------- library/mysql_status_facts | 74 --------- meta/openstack-ansible.yml | 20 +++ .../notes/clustecheck-9311d05fb32f13b3.yaml | 7 + ...rcona-xtrabackup-repo-url-95614d0672f4bcb0.yaml | 6 + .../notes/new_healthcheck-9e559565745defd0.yaml | 7 + .../ppc64le-var-changes-84aa4f3f9bb0ef52.yaml | 31 ++++ releasenotes/source/conf.py | 18 +-- releasenotes/source/index.rst | 5 +- releasenotes/source/pike.rst | 6 + tasks/galera_bootstrap.yml | 100 ------------ tasks/galera_cluster_state.yml | 91 ++++------- tasks/galera_install.yml | 44 +++-- tasks/galera_install_apt.yml | 53 ++---- tasks/galera_install_download_extra_packages.yml | 47 ++++++ tasks/galera_install_yum.yml | 70 ++------ tasks/galera_install_zypper.yml | 71 +++++--- tasks/galera_post_install.yml | 180 ++++++++++++++------- tasks/galera_pre_install.yml | 74 --------- tasks/galera_running_check.yml | 55 ------- tasks/galera_secure_mysql.yml | 43 ----- tasks/galera_setup.yml | 19 ++- tasks/galera_ssl.yml | 32 ++-- tasks/galera_ssl_key_create.yml | 65 -------- tasks/galera_ssl_self_signed.yml | 125 ++++++++++++++ tasks/galera_upgrade.yml | 45 ++++++ tasks/galera_upgrade_check.yml | 25 --- tasks/galera_upgrade_check_apt.yml | 51 ------ tasks/galera_upgrade_check_dnf.yml | 1 - tasks/galera_upgrade_check_yum.yml | 57 ------- tasks/galera_upgrade_check_zypper.yml | 1 - tasks/galera_upgrade_post.yml | 43 ----- tasks/galera_upgrade_pre.yml | 86 ++++------ tasks/main.yml | 93 +++++++---- templates/cluster.cnf.j2 | 4 +- templates/clustercheck.j2 | 110 +++++++++++++ templates/galera_secure_node.j2 | 44 +++++ templates/my.cnf.j2 | 5 +- templates/mysqlchk.j2 | 20 +++ templates/systemd.environment.conf.j2 | 5 + templates/systemd.slice.conf.j2 | 11 ++ templates/systemd.without-privatedevices.conf.j2 | 4 + templates/without-privatedevices.conf.j2 | 2 - test-requirements.txt | 14 +- tox.ini | 20 ++- vars/main.yml | 33 ---- vars/redhat-7.yml | 42 ++--- vars/suse-42.yml | 76 ++++++--- vars/ubuntu-16.04.yml | 45 +++--- zuul.d/jobs.yaml | 21 +++ zuul.d/project.yaml | 39 +++++ 71 files changed, 1524 insertions(+), 1295 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ae8c323..09d54c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -6,2 +6,2 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1!=0.2.3 # BSD -pyOpenSSL>=0.14 # Apache-2.0 +pyasn1!=0.2.3,>=0.1.8 # BSD +pyOpenSSL>=16.2.0 # Apache-2.0 @@ -12,4 +12,4 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -doc8 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_cinder 17.0.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are tickled pink to announce the release of: openstack-ansible-os_cinder 17.0.0: os_cinder role for OpenStack- Ansible This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 16.0.0.0rc1..17.0.0 ---------------------------------------------------------- bd5d3ac Skip logging for haproxy health checks 7f90482 Replace virtualenv-tools by a script 3715575 Stop running non-voting jobs in gate 8d90135 Point to Queens instead of master 5a45b78 Updated from OpenStack Ansible Tests 51ac107 Update UPPER_CONSTRAINTS_FILE for stable/queens edf4fb4 Update .gitreview for stable/queens f1144a7 Use a venv with previous ansible version for upgrades 1acf7f9 Zuul: Remove project name 77f8c0e Updated from global requirements b0b291a Updated from global requirements 82fd8b6 Fix upgrade test 0afb4b4 Updated from OpenStack Ansible Tests 08c563e modify cinder spelling errors 4a9a00f tasks: cinder_qos: Use exact match for QoS rules 6c976e5 Configure backends from API host 198acc0 Add MySQL connection SSL support 6b739f2 tests: test-cinder-upgrades.sh: Remove the exit trap a858898 Reorder service restarts 647dbe8 Update static files b589084 Allow the experimental trigger of the integrated repo 57cfe69 Updated from OpenStack Ansible Tests 9dbda04 Remove pip_install dependency 536dd34 Use cinder_services dict to identify cinder-api service name 7a43e60 Remove setting of version/release from releasenotes 2bcf766 Use group_names to check a host belongs to group 066c95e Updated from OpenStack Ansible Tests 4e7cb34 Change ceph example backend name cff0a1d Fix indentation of container_vars for ceph doc 8d4aed3 Document reasonable radosgw timeout a7f4d98 Remove unified queue from gate pipeline 9b84691 Add openstack-ansible-linters test e350f89 Adds support for specifying GID AND UID for cinder system user aefee84 Update paste, policy and rootwrap configurations 2017-10-14 3815c5b Update upgrade role for Queens from P 8c0f9b0 Add OpenStack-Ansible metadata 9ad69a9 Workaround bad cinder defaults a1961c4 Updated from global requirements 5108e06 Add external LB management handler hook interface 1a4254c Updated from global requirements 9998b3b Update document links 2a372c9 Updated from OpenStack Ansible Tests 384e1ba Updated from OpenStack Ansible Tests 96160f0 Correct cinder online migrations command 799f2b0 Ensure online migrations can run 1a00032 Updated from OpenStack Ansible Tests 12c9c00 Update upgrade role for Pike bf85705 Update reno for stable/pike 2aabc28 Updated from global requirements 0ad45a3 Update paste, policy and rootwrap configurations 2017-08-15 e1fd2e4 tasks: cinder_install: Fix virtualenv-tools issue on openSUSE Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + CONTRIBUTING.rst | 2 +- Vagrantfile | 2 + bindep.txt | 25 +--- defaults/main.yml | 47 +++++--- files/rootwrap.d/volume.filters | 1 + handlers/main.yml | 4 + meta/main.yml | 1 - meta/openstack-ansible.yml | 20 ++++ ...inder-system-user-support-f69b87b4876c0dd8.yaml | 5 + releasenotes/source/conf.py | 18 ++- releasenotes/source/index.rst | 5 +- releasenotes/source/pike.rst | 6 + tasks/cinder_backends.yml | 2 +- tasks/cinder_db_setup.yml | 3 +- tasks/cinder_init_systemd.yml | 2 + tasks/cinder_install.yml | 22 ++-- tasks/cinder_post_install.yml | 6 +- tasks/cinder_pre_install.yml | 2 + tasks/cinder_qos.yml | 6 +- tasks/cinder_uwsgi.yml | 1 + tasks/main.yml | 14 +-- templates/api-paste.ini.j2 | 10 -- templates/cinder-systemd-init.j2 | 2 +- templates/cinder-uwsgi.ini.j2 | 3 + templates/cinder.conf.j2 | 12 +- templates/policy.json.j2 | 133 +-------------------- test-requirements.txt | 14 +-- tox.ini | 17 ++- zuul.d/jobs.yaml | 21 ++++ zuul.d/project.yaml | 33 +++++ 42 files changed, 364 insertions(+), 306 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ae8c323..09d54c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -6,2 +6,2 @@ flake8<2.6.0,>=2.5.4 # MIT -pyasn1!=0.2.3 # BSD -pyOpenSSL>=0.14 # Apache-2.0 +pyasn1!=0.2.3,>=0.1.8 # BSD +pyOpenSSL>=16.2.0 # Apache-2.0 @@ -12,4 +12,4 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -doc8 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible 17.0.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are satisfied to announce the release of: openstack-ansible 17.0.0: Ansible playbooks for deploying OpenStack This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 17.0.0 ^^^^^^ New Features ************ * Deployers of CentOS 7 environments can use the "openstack_hosts_enable_yum_fastestmirror" variable to enable or disable yum's fastestmirror plugin. The default setting of "yes" ensures that fastestmirror is enabled. * The extra packages percona packages used by the ppc64le are now downloaded by the Ansible deployment host by default, as opposed to the target hosts. Once downloaded the packages are pushed up to the target hosts. This behaviour may be adjusted by setting "galera_server_extra_package_downloader" to "target-host". The packages are downloaded to the path set in "galera_server_extra_package_path". * An option to disable the "machinectl" quota system has been added. The variable "lxc_host_machine_quota_disabled" is a Boolean with a default of **true**. When this option is set to **true** it will disable the "machinectl" quota system. Upgrade Notes ************* * Any tooling using the Designate v1 API needs to be reworked to use the v2 API * The variable "lxc_host_machine_volume_size" now accepts any valid size modifier acceptable by "truncate -s" and "machinectl set- limit". prior to this change the option assumed an integer was set for some value in gigabytes. All acceptable values can be seen within the documentation for machinectl (https://www.freedesktop.org/software/systemd/man/machinectl.html #set-limit%20%5BNAME%5D%20BYTES) Deprecation Notes ***************** * The following variables have been removed as they no longer serve any purpose. * "galera_package_arch" * "percona_package_download_validate_certs" * "percona_package_url" * "percona_package_fallback_url" * "percona_package_sha256" * "percona_package_path" * "qpress_package_download_validate_certs" * "qpress_package_url" * "qpress_package_fallback_url" * "qpress_package_sha256" * "qpress_package_path" The functionality previously using these variables has been transitioned to using a simpler data structure. Critical Issues *************** * The Designate V1 API has been removed, and cannot be enabled. Other Notes *********** * The *max_fail_percentage* playbook option has been used with the default playbooks since the first release of the playbooks back in **Icehouse**. While the intention was to allow large-scale deployments to succeed in cases where a single node fails due to transient issues, this option has produced more problems that it solves. If a failure occurs that is transient in nature but is under the set failure percentage the playbook will report a success, which can cause silent failures depending on where the failure happened. If a deployer finds themselves in this situation the problems are are then compounded because the tools will report there are no known issues. To ensure deployers have the best deployment experience and the most accurate information a change has been made to remove the *max_fail_percentage* option from all of the default playbooks. The removal of this option has the side effect of requiring the deploy to skip specific hosts should one need to be omitted from a run, but has the benefit of eliminating silent, hard to track down, failures. To skip a failing host for a given playbook run use the *--limit '!$HOSTNAME'* CLI switch for the specific run. Once the issues have been resolved for the failing host rerun the specific playbook without the *--limit* option to ensure everything is in sync. * The variable "lxc_host_machine_volume_size" is used to set the size of the default sparse file as well as define a limit within the "machinectl" quota system. When the "machinectl" quota system is enabled deployers should appropriately set this value to the size of the container volume, even when not using a sparse file. * The container image cache within machinectl has been set to "64G" by default. Changes in openstack-ansible 16.0.0.0rc1..17.0.0 ------------------------------------------------ d1b90b6 Set timeouts on uri tasks 9ad2f0e Clean-up gate code to use mirror_info 9a115b5 Bump A-R-R before first queens release 319a8fd Replace meta job map for aio->aio_lxc with simpler mechanism 28c7098 Use aio_basekit scenario for OpenSUSE 3453c64 CentOS 7 integrated gate optimization 931e8b0 Add base kit scenario 54870ed Update all SHAs for first Queens release 3e84d1e Remove the "max_fail_percentage" option 9613d6a tests: roles: bootstrap-host: SUSE: fix dbus package name 2eb32e4 Update os_neutron SHA to unblock gate c645f1f Increase Ansible SSH connection retries 06f167f Remove pip_lock_to_internal_repo variable 6c6bce5 Update Queens doc index 575db0d Remove periodic translations job b218ab9 Ensure that constraints are used for AIO bootstrap e054c44 Fix ARA/log data collection and reporting b80e361 Remove pycrypto from requirements.txt b10f825 Point to Queens instead of master e9559aa Update UPPER_CONSTRAINTS_FILE for stable/queens 9fc8ac8 Update .gitreview for stable/queens f391d52 Bump upstream SHAs e245766 Reinstate ubuntu ceph gating 68fa3f4 Update all SHAs for 17.0.0 9892a73 Allow neutron_provider_networks to be user defined aad0945 bootstrap-host: Create swap without using a failed task baceca8 l3_agent should only appear in computes when dvr e09216a Implement a scenario with no containers aec24fb Use native packages to deploy keepalived 8c09796 Move setup-utility before other plays 604e821 Remove placement_database related options/code 6c50146 Add defaults for lxc container_tech d46712b Fix ansible pipelining 34424fb Update ansible to the latest stable 3ce9383 Ensure neutron agents & rabbitmq do not restart when upgrading 0aeab78 Remove impossible tests 9685202 Update CentOS quickstart doc 785cf44 Zuul: Remove project name 7466aae Update default scenarios from aio to aio_lxc d270234 add networking-bgpvpn into openstack services b2a5482 [DOC]: admin: troubleshooting: Fix code-block statements d586000 Add scaffolding for multiple container techs 0005234 Add SELinux python support to ansible-runtime venv c776ee7 Add user agent for haproxy health checks 8f50c67 Unfreeze roles after milestone 3 e0cc078 Vagrantfile: Use rsync to copy working directory to VM ee6ff67 Update all SHAs for 17.0.0.0b3 4b93ca2 Add experimental tests of new ansible versions 21e27fd Fix keepalived warnings add6ba1 Enable Heat in Horizon if Heat is installed 2198b93 Simplify memcached servers 15e2d85 Fix logic to check for insecure Keystone 7cd9fec Remove default_bind_mount_logs from config changes. 8a3dfc0 container_host can be replaced by physical_host on is_metal 1fca341 Updated from global requirements 7f192b1 Cleanup the gate-check-commit dstat part f0d8ffd Add a return code check to the osa wrapper 81e1f8d Include P-Q changes into the upgrade script 59bc83b Updated from global requirements 03d2f66 Force ansible to ignore plugins when bootstrapping 92958b5 Only configure a service for haproxy when appropriate 7d580a1 Remove virtualenv-tools in the examples. e8abf19 Fix sources-branch-updater and add docs a9f5b9f Allow check experimental jobs to gather logs 78ed749 Stable keepalived priorities f8da4b7 Define GATE_EXIT_RUN_DSTAT before use 15754e3 [DOCS] Add limit parameter to adding a new compute section 427f974 [DOC] Update development cycle checklist 2e712b1 Update all SHAs for Queens 2017-12-19 4b75279 Reorder cinder service installs b40fddb Remove galera_address from playbook vars cf9dcbc Revert "Freeze all SHAs for 17.0.0.0b2" b654034 playbooks: inventory: ceph: Use distribution packages for SUSE c5551f2 Move inventory files to folder in root of repo 4338a64 Revert "Async clone for git roles" ef130bf Only whitelist internal network for placement api b8dfac4 designate variables for neutron integration 01501f3 ceph: Switch to central ceph-ansible repository c170e0c Add networking-sfc repo to repo_packages 3850e3d Fix automatic log copying in Zuul runs a8e99d2 make include tasks dynamic when there is rescue 3e0ef28 Remove symlinked git cache functionality 6071ae2 correct ha proxy configuration for opendaylight af0632b Workaround ansible lint failure b5079c1 Add pip config to lxc_hosts 330dcd3 Converge neutron agents onto Baremetal a591adc Fix roles variable name d98afec Skip ansible-lint test against roles 503ba6a Update test tooling for manual testing def5292 Remove is_metal from playbooks 7c46d95 Use correct name for networking-odl git group 850d8f2 Update existing container_networks ba6a3ed Use Ansible 2.4 7b3aac2 Change the galera health check for better cluster health 1034627 Do not apply varstest to all scenarios 0baa0f4 Update variable scopes 91cf1e8 Freeze all SHAs for 17.0.0.0b2 03a57d6 Set the default pip index dynamically 923f3c3 Update overview-osa for new supported Operating Systems dc78aff [DOCS] Add alternative URL for cloning repo ffbb232 [DOCS] Update links from pointing to developer-docs 98d1b58 Avoid using 'roles' reserved variable c4d12eb Fix crontab errors on CentOS/SUSE e795415 Reduce console output in gate jobs 45f9ff8 Change opendaylight default port 2a8aab4 Adapt to openstack_hosts/pip_install changes ea32c3d Avoid retrieving IP from a missing bridge 35d1415 Allow disabling container restarts 13ed290 Add the ability to trigger the integrated build 0f521b5 Override galera_monitoring_allowed_source a777dc8 Remove jinja2 delimiters in when f959acf Harden the xinetd security c2402a0 Disable offloading in test by default d5773de [Docs] Clarify ceph production example. 50595ac Update the documentation link 746330c Define swift_proxy_port for trove 6e1f3ca Extend tests vars overrides 4b63ebf Allow pip_install to run in repo-server playbook ebfd9ab Do not force using the remote "origin" when testing upgrades 2044f5b Lighter ceph gates 656fd47 Allow the haproxy configuration to run with limited groups dbe09dd Create variable override tests fe9a338 Do not implement reload for novnc/spice service 078c89b scripts: scripts-library.sh: Use pgrep -f to find the dstat process fdf3390 Add dynamic table for our tested Scenarios 33836d3 [DOCS] Correct secret uuid in Ceph example a40b253 Retry apt cache update f688775 Remove setting of version/release from releasenotes c6064d1 ansible-role-requirements: Switch ODL git repo to the github mirror e47163c zuul: project.yaml: Move openSUSE Ceph job to 'check' queue cbd552e Updated from global requirements f3dccff Use tests repo for all lint tests e9f9578 Make pw-token-gen.py more random d78e63a Use 'PermitRootLogin 'without-password'' 21ec475 Fix port config in haproxy to avoid conflict adc0b1e Fix the doc url in README 057bb30 [DOCS] Add ceph production example configuration 4c92d37 PermitRootLogin for hosts group 6f991b9 Fix cinder_backup for horizon dashboard and heat bbfb9d3 Using --option ARGUMENT ba5c17f Updated role maturity matrix edc3476 Add infra healthchecks ef3ad45 Vagrantfile: Remove openSUSE Leap 42.2 f3dc082 Zuul: add file extension to playbook path 609ea1f Update docs config for linters 4bdc86e Fix Ceilometer deployments 0405ec9 Update aio job to use become and fix environment 1c1ec38 Add Neutron variables shared with Octavia c3ce038 docs: add a decision help bf1835b [Docs] Use latest instead of draft 62545e9 [Docs] After-install network configuration 2af6d90 Use zuul v3 src location to install ARA 2a1f1cc [Docs] Fix links to inventory docs dbd96cd Update zuul jobs with the per branch data f17540a [Docs] Replace draft with latest 485fa7e Fix link to examples conf.d files 19304e8 Revert "Set OpenStack-Ansible release to 17.0.0.0b1" 08b700a Add proxy environment vars to boostrap-aio.yml a86cfab Install hacking first and let it pull in right linter versions 3ce37a3 Correct regex for disk size 184eab7 Fixes a var dependency between Neutron and Octavia 21463a3 Convert the AIO from using overlayfs to machinectl 81cfe69 Fix typo 342a090 Add python as an install step 151d8c5 Initial integrated zuulv3 jobs 1200ee1 Hyper-converge our container usage c1bcb9e Move dynamic grouping conditional bc3e2b6 Remove jinja from failed_when 0620efa Set OpenStack-Ansible release to 17.0.0.0b1 182dca9 Include the Ansible version variable when installing ara 3fcadbf Update all SHAs 2622a2c [Docs] add a refresh fact step on new compute 24b505b Shallow clone roles 7a1e46b Async clone for git roles 64608d4 Avoid using gather_facts as a variable a27be7f Do not source openstack-ansible.rc when pulling roles 67bea88 Updated repo cloner for zuulv3 1938df4 playbooks: os-lxc-container-setup: Only stop the container if it's running 03ace7a Only build ARA report when test fails 84a7f64 Disable ceph-ansible NFS gateway by default 44570a7 Fix adminurl/adminuri typo 4e58576 [Docs] Clarify role development cycle 069a39e [Docs] Add the bump of the upstream repo ce07654 Run the ceph-mons deploy in serial bbb0001 SUSE: Add OpenStack cloud repository when bootstrapping the host a955c0b SUSE: Remove lxc-1.X.X workarounds 1377af3 Fix zuul clonemap 4e7e1c5 scripts: bootstrap-ansible.sh: Do not error on 'alternatives' command 8de63d6 Fix warning in upgrade cc22dee scripts: sources-branch-updater-lib: Always fetch SHAs when working on master dd99af8 Load nova_console_port from a nova_console inventory item af28cf0 Run dstat in gate tests 74acdd5 Fix Aodh's health checks 87ffd71 Ensure container facts are set on container create 8fdf433 Fix cinder_service_region undefined a46a72a working example of QNAP cinder integration 505a54e adding opendaylight services into ha proxy 54f02e0 Closes-Bug: 1717506 85501cb Limit group_vars scoping 718f790 Move resolvconf JIT execution to common tasks cefc9e7 Gather ceph-mon facts using delegation c22850e Adds Neutron FWaaS Dashboard to Repo e524f70 Update Pike status to released in doc index f828133 Fix variable def. 0debf5b Revert "Install dnf on CentOS hosts" a53f1ae Add ceph-ansible v3 support 7ba5bed Delete not needed designate variables. 7dcc048 Updated from global requirements f4cbb21 Set ceph_mons in group_vars eea033f Fix lxc_image_cache_server_mirrors string concat 5b3e5a7 Upgrade ceph release to Luminous d03f39c Run ARA only if enabled 7967623 Update and replace http with https for doc links 7b8d650 Set the LXC download mirror properly ede56e0 Update variable migration script for Queens 9ba94a0 Updated from global requirements 3ddd01e Modify tacker port in haproxy config be2c81b Fix release-yaml-file-prep.py to include ansible-hardening 7401ddd Install dnf on CentOS hosts b95eafb Skip host pip installs for ansible bootstrap 07d1621 Use RDO Pike repository 353694a Remove urllib3/requests from requirements fc05a47 Fix tacker bug in haproxy 3c235fd Add haproxy_endpoints role to Galera 6648266 Make pkg_locations overridable easier a28026b Adding guards around tracepath/tracepath6 commands b3300e8 scripts: scripts-library.sh: Fix tracepath logging d32bb25 roles: bootstrap-host: Remove useless 'break' command from case statement 74f70c6 SHA Bump on master dbc9598 roles: bootstrap-host: Fix typo in postup/postdown options for SUSE 20a9d7a Add ansible_python_interpreter to Ceph playbook c40827d Suppress curl warning w/shell module 55c3dfb [DOC] Add openSUSE Leap references 61a7570 [DOC} Add openSUSE to Software requirements 59a062b Remove remaining service_name properties 22e5675 Enable verbose logging when fetching roles via git-clone 64bd12a Use /var/lib rather than /tmp 2f3196e Adding serial console support 38e674c Fix LXC container start order 90acf0a Correct zuul-cloner cloning of pinned SHA's 9ef8dd5 [DOC] Check Galera/Rabbitmq versions during cycle 111331c Correct cinder online migrations command ae96fb1 Update documentation redirects 2364fb1 Fix to use "." to source script files 2acccc1 Fix os-cmd cross-distro compatibility c646f17 Declare openSUSE Leap 42.X support as WIP 5eb2c00 tests: bootstrap-host: Add SUSE support in the RedHat network scripts 76e1d61 playbooks: os-lxc-container-setup: Force kill a container on openSUSE if it takes too long to stop e82f84a Set serial to 100% for nova_compute cffc9d1 SHA Bump for master upstream roles 836703a scripts: scripts-library.sh: Fix location for log directory aaf7465 playbooks: os-swift-install: Use correct group name on openSUSE f70ca23 playbooks: utility-install.yml: Update package cache on openSUSE 1a3b11f group_vars: all: Replace spaces with underscores in distro repository d224430 tests: bootstrap-host: Refresh repositories on SUSE 18374fb tests: bootstrap-aio: Add sftp subsystem option for SUSE 19d04fc tests: bootstrap-host: Add ability to configure networking on SUSE 3bb0aac tests: bootstrap-host: Add SUSE variables file 56fc048 tests: bootstrap-host: Use btrfs tools to determine available disk space 83ab078 scripts: bootstrap-ansible: Add required packages on openSUSE Leap b5441ed Adds a constraint file to the pip install for Octavia scenario 85d2427 Fixes python3 non-compatible import of urlparse 4d4482e scripts: scripts-library.sh: Add support for openSUSE 956e829 Update docs/tooling for Queens c5b317d scripts: scripts-library.sh: Do not use the '-m' option on tracepath 95f89f4 Reduce CentOS AIO bootstrap pkg list bd79f07 Add tacker installation aeb7f57 Test containerised cinder-volume 2af9fbf scripts: scripts-library.sh: Hide 'which' command output 2603e5a Vagrantfile: Add openSUSE support 15c4202 Vagrantfile: Increase VM memory size to 12G 52b1b17 Update reno for stable/pike 1450119 Add support for OpenDaylight deployment in neutron e1a997a Updated from global requirements 321dd30 [DOCS] Add reference to Tunable Overrides 303e4e8 Remove repeated pip_install role execution 9c186e2 Unpin role SHA's to move towards Queens development 9c64c2d ansible-role-requirements: Bump sha for os_neutron role 18464e4 Fix import of osa_toolkit in inventory-manage.py e2bf8b9 Add tip for destroying containers 7049ffa Bootstrap Ansible fails if partial keypair exists bb48a1a Fix Barbican's health checks eb81d64 Update the playbook serial settings 2ab98d9 trivialfix 4cba47c Revert "Reduce container counts for cinder, ironic and trove" 774f6d0 Add breakout groups for hypervisor types Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 6 +- Vagrantfile | 23 +- ansible-role-requirements.yml | 138 +++--- bindep.txt | 31 +- .../source/app-advanced-config-options.rst | 2 +- .../source/app-advanced-config-override.rst | 6 +- deploy-guide/source/app-ceph.rst | 4 +- deploy-guide/source/app-config-prod-ceph.rst | 133 ++++++ deploy-guide/source/app-custom-layouts.rst | 2 +- deploy-guide/source/app-limited-connectivity.rst | 2 +- deploy-guide/source/app-networking.rst | 2 +- deploy-guide/source/app-resources.rst | 2 +- deploy-guide/source/app-security.rst | 2 +- deploy-guide/source/app.rst | 1 + deploy-guide/source/conf.py | 12 +- deploy-guide/source/configure.rst | 10 +- deploy-guide/source/deploymenthost.rst | 36 +- .../source/figures/arch-layout-production-ceph.png | Bin 0 -> 167033 bytes .../source/figures/arch-layout-production-ceph.svg | 3 + deploy-guide/source/figures/arch-layout.graffle | Bin 6161 -> 8655 bytes deploy-guide/source/overview-osa.rst | 37 +- deploy-guide/source/overview-requirements.rst | 6 + deploy-guide/source/targethosts-prepare.rst | 48 +- .../admin/maintenance-tasks/network-maintain.rst | 4 +- .../admin/maintenance-tasks/scale-environment.rst | 44 +- .../openstack-operations/managing-instances.rst | 2 +- .../admin/openstack-operations/network-service.rst | 10 + .../admin/openstack-operations/verify-deploy.rst | 2 +- etc/openstack_deploy/conf.d/ceilometer.yml.example | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.aio | 4 + etc/openstack_deploy/conf.d/swift.yml.example | 6 +- etc/openstack_deploy/conf.d/tacker.yml.aio | 4 + etc/openstack_deploy/env.d/aio_metal.yml.example | 158 +++++++ .../env.d/extra_container.yml.example | 24 +- .../openstack_user_config.yml.aio.j2 | 4 - .../openstack_user_config.yml.example | 22 + .../openstack_user_config.yml.prod-ceph.example | 162 +++++++ etc/openstack_deploy/user_secrets.yml | 6 +- etc/openstack_deploy/user_variables.yml | 18 +- .../user_variables.yml.prod-ceph.example | 40 ++ global-requirement-pins.txt | 4 +- group_vars/all/all.yml | 119 ----- group_vars/all/aodh.yml | 21 - group_vars/all/ceilometer.yml | 26 -- group_vars/all/ceph.yml | 30 -- group_vars/all/cinder.yml | 43 -- group_vars/all/glance.yml | 51 --- group_vars/all/haproxy.yml | 278 ------------ group_vars/all/heat.yml | 34 -- group_vars/all/infra.yml | 31 -- group_vars/all/ironic.yml | 29 -- group_vars/all/keepalived.yml | 69 --- group_vars/all/keystone.yml | 59 --- group_vars/all/magnum.yml | 23 - group_vars/all/neutron.yml | 50 --- group_vars/all/nova.yml | 60 --- group_vars/all/octavia.yml | 31 -- group_vars/all/pip.yml | 26 -- group_vars/all/sahara.yml | 34 -- group_vars/all/ssl.yml | 21 - group_vars/all/swift.yml | 29 -- group_vars/all_containers.yml | 31 -- group_vars/aodh_all.yml | 24 - group_vars/barbican_all.yml | 33 -- group_vars/ceilometer_all.yml | 36 -- group_vars/ceph_all.yml | 19 - group_vars/cinder_all.yml | 50 --- group_vars/cinder_volume.yml | 22 - group_vars/designate_all.yml | 59 --- group_vars/galera_all.yml | 28 -- group_vars/glance_all.yml | 38 -- group_vars/gnocchi_all.yml | 40 -- group_vars/haproxy_all.yml | 37 -- group_vars/heat_all.yml | 28 -- group_vars/horizon_all.yml | 41 -- group_vars/hosts.yml | 29 -- group_vars/ironic_all.yml | 25 -- group_vars/ironic_compute.yml | 16 - group_vars/keystone_all.yml | 39 -- group_vars/magnum_all.yml | 32 -- group_vars/memcached.yml | 23 - group_vars/neutron_agent.yml | 28 -- group_vars/neutron_all.yml | 30 -- group_vars/neutron_calico_dhcp_agent.yml | 107 ----- group_vars/nova_all.yml | 46 -- group_vars/octavia_all.yml | 19 - group_vars/rabbitmq_all.yml | 22 - group_vars/repo_all.yml | 68 --- group_vars/rsyslog.yml | 19 - group_vars/sahara_all.yml | 21 - group_vars/swift_all.yml | 31 -- group_vars/trove_all.yml | 46 -- group_vars/utility_all.yml | 71 --- host_vars/.placeholder | 0 inventory/dynamic_inventory.py | 81 ++++ inventory/env.d/aodh.yml | 32 ++ inventory/env.d/barbican.yml | 34 ++ inventory/env.d/ceilometer.yml | 40 ++ inventory/env.d/ceph.yml | 50 +++ inventory/env.d/cinder.yml | 66 +++ inventory/env.d/designate.yml | 54 +++ inventory/env.d/etcd.yml | 34 ++ inventory/env.d/galera.yml | 37 ++ inventory/env.d/glance.yml | 43 ++ inventory/env.d/gnocchi.yml | 39 ++ inventory/env.d/haproxy.yml | 37 ++ inventory/env.d/heat.yml | 45 ++ inventory/env.d/horizon.yml | 37 ++ inventory/env.d/ironic.yml | 78 ++++ inventory/env.d/keystone.yml | 36 ++ inventory/env.d/magnum.yml | 37 ++ inventory/env.d/memcache.yml | 37 ++ inventory/env.d/molteniron.yml | 35 ++ inventory/env.d/neutron.yml | 86 ++++ inventory/env.d/nova.yml | 104 +++++ inventory/env.d/octavia.yml | 47 ++ inventory/env.d/os-infra.yml | 22 + inventory/env.d/pkg_repo.yml | 36 ++ inventory/env.d/rabbitmq.yml | 37 ++ inventory/env.d/rsyslog.yml | 36 ++ inventory/env.d/sahara.yml | 36 ++ inventory/env.d/shared-infra.yml | 22 + inventory/env.d/swift-remote.yml | 38 ++ inventory/env.d/swift.yml | 72 +++ inventory/env.d/tacker.yml | 36 ++ inventory/env.d/trove.yml | 47 ++ inventory/env.d/unbound.yml | 34 ++ inventory/env.d/utility.yml | 37 ++ inventory/group_vars/all/all.yml | 115 +++++ inventory/group_vars/all/ceph.yml | 38 ++ inventory/group_vars/all/cinder.yml | 18 + inventory/group_vars/all/designate.yml | 29 ++ inventory/group_vars/all/glance.yml | 27 ++ inventory/group_vars/all/infra.yml | 30 ++ inventory/group_vars/all/keystone.yml | 54 +++ inventory/group_vars/all/neutron.yml | 35 ++ inventory/group_vars/all/nova.yml | 24 + inventory/group_vars/all/octavia.yml | 22 + inventory/group_vars/all/pip.yml | 33 ++ inventory/group_vars/all/ssl.yml | 21 + inventory/group_vars/all_containers.yml | 31 ++ inventory/group_vars/aodh_all.yml | 31 ++ inventory/group_vars/barbican_all.yml | 33 ++ inventory/group_vars/ceilometer_all.yml | 54 +++ inventory/group_vars/ceph_all.yml | 24 + inventory/group_vars/cinder_all.yml | 77 ++++ inventory/group_vars/cinder_volume.yml | 22 + inventory/group_vars/designate_all.yml | 46 ++ inventory/group_vars/galera_all.yml | 37 ++ inventory/group_vars/glance_all.yml | 63 +++ inventory/group_vars/gnocchi_all.yml | 40 ++ inventory/group_vars/haproxy_all/haproxy.yml | 357 +++++++++++++++ inventory/group_vars/haproxy_all/keepalived.yml | 71 +++ inventory/group_vars/heat_all.yml | 48 ++ inventory/group_vars/horizon_all.yml | 42 ++ inventory/group_vars/hosts.yml | 32 ++ inventory/group_vars/ironic-compute_hosts.yml | 16 + inventory/group_vars/ironic_all.yml | 40 ++ inventory/group_vars/ironic_compute.yml | 1 + inventory/group_vars/keystone_all.yml | 61 +++ inventory/group_vars/kvm-compute_hosts.yml | 16 + inventory/group_vars/lxd-compute_hosts.yml | 16 + inventory/group_vars/magnum_all.yml | 42 ++ inventory/group_vars/memcached.yml | 23 + inventory/group_vars/network_hosts.yml | 3 + inventory/group_vars/neutron_agent.yml | 28 ++ inventory/group_vars/neutron_all.yml | 47 ++ inventory/group_vars/neutron_calico_dhcp_agent.yml | 107 +++++ inventory/group_vars/nova_all.yml | 88 ++++ inventory/group_vars/octavia_all.yml | 30 ++ inventory/group_vars/powervm-compute_hosts.yml | 16 + inventory/group_vars/qemu-compute_hosts.yml | 16 + inventory/group_vars/rabbitmq_all.yml | 22 + inventory/group_vars/repo_all.yml | 85 ++++ inventory/group_vars/rsyslog.yml | 19 + inventory/group_vars/sahara_all.yml | 41 ++ inventory/group_vars/swift_all.yml | 50 +++ inventory/group_vars/tacker_all.yml | 46 ++ inventory/group_vars/trove_all.yml | 48 ++ inventory/group_vars/utility_all.yml | 74 ++++ inventory/host_vars/localhost/ceilometer.yml | 17 + inventory/host_vars/localhost/cinder.yml | 18 + inventory/host_vars/localhost/neutron.yml | 20 + inventory/host_vars/localhost/nova.yml | 17 + inventory/host_vars/localhost/swift.yml | 20 + inventory/host_vars/localhost/unbound.yml | 22 + inventory/localhost | 2 + osa_toolkit/generate.py | 36 +- osa_toolkit/manage.py | 2 +- playbooks/ceph-install.yml | 83 ++-- playbooks/common-playbooks/cinder.yml | 14 +- playbooks/common-playbooks/glance.yml | 11 +- playbooks/common-playbooks/neutron.yml | 15 +- playbooks/common-playbooks/nova.yml | 15 +- playbooks/common-playbooks/unbound-clients.yml | 77 ---- playbooks/common-tasks/dynamic-address-fact.yml | 2 +- playbooks/common-tasks/dynamic-grouping.yml | 4 +- playbooks/common-tasks/os-lxc-container-setup.yml | 16 +- playbooks/common-tasks/restart-service.yml | 2 + playbooks/common-tasks/set-pip-upstream-url.yml | 3 + playbooks/common-tasks/set-upper-constraints.yml | 18 + playbooks/common-tasks/unbound-clients.yml | 65 +++ playbooks/containers-deploy.yml | 17 + playbooks/containers-lxc-create.yml | 53 +++ playbooks/containers-lxc-destroy.yml | 63 +++ playbooks/containers-lxc-host.yml | 57 +++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 96 ++-- .../defaults/repo_packages/openstack_testing.yml | 4 +- playbooks/etcd-install.yml | 17 +- playbooks/galera-install.yml | 35 +- playbooks/haproxy-install.yml | 21 +- playbooks/healthcheck-infrastructure.yml | 193 ++++++++ playbooks/inventory/dynamic_inventory.py | 81 ---- playbooks/inventory/env.d/aodh.yml | 32 -- playbooks/inventory/env.d/barbican.yml | 34 -- playbooks/inventory/env.d/ceilometer.yml | 40 -- playbooks/inventory/env.d/ceph.yml | 50 --- playbooks/inventory/env.d/cinder.yml | 66 --- playbooks/inventory/env.d/designate.yml | 54 --- playbooks/inventory/env.d/etcd.yml | 34 -- playbooks/inventory/env.d/galera.yml | 37 -- playbooks/inventory/env.d/glance.yml | 43 -- playbooks/inventory/env.d/gnocchi.yml | 39 -- playbooks/inventory/env.d/haproxy.yml | 37 -- playbooks/inventory/env.d/heat.yml | 54 --- playbooks/inventory/env.d/horizon.yml | 37 -- playbooks/inventory/env.d/ironic.yml | 65 --- playbooks/inventory/env.d/keystone.yml | 36 -- playbooks/inventory/env.d/magnum.yml | 37 -- playbooks/inventory/env.d/memcache.yml | 37 -- playbooks/inventory/env.d/molteniron.yml | 35 -- playbooks/inventory/env.d/neutron.yml | 79 ---- playbooks/inventory/env.d/nova.yml | 101 ----- playbooks/inventory/env.d/octavia.yml | 47 -- playbooks/inventory/env.d/os-infra.yml | 22 - playbooks/inventory/env.d/pkg_repo.yml | 36 -- playbooks/inventory/env.d/rabbitmq.yml | 37 -- playbooks/inventory/env.d/rsyslog.yml | 36 -- playbooks/inventory/env.d/sahara.yml | 36 -- playbooks/inventory/env.d/shared-infra.yml | 22 - playbooks/inventory/env.d/swift-remote.yml | 38 -- playbooks/inventory/env.d/swift.yml | 72 --- playbooks/inventory/env.d/trove.yml | 45 -- playbooks/inventory/env.d/unbound.yml | 34 -- playbooks/inventory/env.d/utility.yml | 37 -- playbooks/lxc-containers-create.yml | 39 +- playbooks/lxc-containers-destroy.yml | 65 +-- playbooks/lxc-hosts-setup.yml | 61 +-- playbooks/memcached-install.yml | 17 +- playbooks/openstack-hosts-setup.yml | 14 +- playbooks/os-aodh-install.yml | 16 +- playbooks/os-barbican-install.yml | 17 +- playbooks/os-ceilometer-install.yml | 17 +- playbooks/os-cinder-install.yml | 43 +- playbooks/os-designate-install.yml | 16 +- playbooks/os-glance-install.yml | 7 - playbooks/os-gnocchi-install.yml | 16 +- playbooks/os-heat-install.yml | 16 +- playbooks/os-horizon-install.yml | 16 +- playbooks/os-ironic-install.yml | 15 +- playbooks/os-keystone-install.yml | 23 +- playbooks/os-magnum-install.yml | 15 +- playbooks/os-molteniron-install.yml | 18 +- playbooks/os-neutron-install.yml | 15 +- playbooks/os-nova-install.yml | 43 +- playbooks/os-octavia-install.yml | 16 +- playbooks/os-rally-install.yml | 12 +- playbooks/os-sahara-install.yml | 16 +- playbooks/os-swift-install.yml | 24 +- playbooks/os-swift-sync.yml | 5 +- playbooks/os-tacker-install.yml | 61 +++ playbooks/os-tempest-install.yml | 5 +- playbooks/os-trove-install.yml | 16 +- playbooks/rabbitmq-install.yml | 24 +- playbooks/repo-build.yml | 52 +-- playbooks/repo-server.yml | 38 +- playbooks/repo-use.yml | 29 ++ .../system_crontab_coordination/tasks/main.yml | 2 + playbooks/rsyslog-install.yml | 19 +- playbooks/security-hardening.yml | 2 +- playbooks/setup-hosts.yml | 3 +- playbooks/setup-infrastructure.yml | 6 +- playbooks/setup-openstack.yml | 1 + playbooks/unbound-install.yml | 22 +- playbooks/utility-install.yml | 23 +- ...tavia-V2-(standalone)-API-d644b92ad374f2cf.yaml | 7 + .../PermitRootLogin-chages-7ce97df6d612223e.yaml | 7 + ...-container-restart-option-acf4cd9a20ef61e4.yaml | 15 + .../add-opensuse-support-a8ec3f54188e5f01.yaml | 14 + .../add-security-headers-e46c205b42b9598b.yaml | 8 + .../cache-packages-override-e89847687abddf34.yaml | 4 + ...-local-lxc-package-mirror-843e1ceac2469547.yaml | 16 + ...entos-mirror-url-variable-c072a6ab21054093.yaml | 5 + ...entos-mirror-url-variable-eea9f226b5611b40.yaml | 5 + .../notes/ceph-ansible-v3-a570cf4477c77860.yaml | 15 + .../notes/ceph-galaxy-roles-1a0a13be026e45d8.yaml | 8 + .../notes/ceph-luminous-d1ff5c08452a9887.yaml | 9 + .../notes/clustecheck-9311d05fb32f13b3.yaml | 7 + ...m_eventstreamer_queue_url-a1dcd1f6769816c5.yaml | 17 + ...rcona-xtrabackup-repo-url-95614d0672f4bcb0.yaml | 6 + ...-and-backend-caching-vars-88c48117b232b37e.yaml | 6 + ...ed-symlink-for-repo-cache-449b84e281ff9907.yaml | 12 + ...kage-checksums-by-default-3543840512c348d6.yaml | 7 + .../notes/disable-ksm-670aeb175826b7ca.yaml | 5 + .../disable-list-extend-3a9547de9034f9ba.yaml | 4 +- .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 + .../drop-ceilometer-api-b6d87ceddf34af81.yaml | 5 + ...nsuse-mirror-url-variable-fa2df9eee6399938.yaml | 5 + ...ity-groups-always-applied-eb6e3bdc7b77f022.yaml | 13 + .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 + ...astestmirror-configurable-08e075f8602164e5.yaml | 7 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../notes/fwaasv2-added-ab9ba18c8b98a83e.yaml | 4 + ...inder-system-user-support-f69b87b4876c0dd8.yaml | 5 + ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 2 +- .../notes/glance-v2-api-only-0d4a61b0d4dade18.yaml | 22 + .../notes/global-ntp-servers-155c1daef3680025.yaml | 6 + .../horizon-arbitrary-config-8a36e4bd6818afe1.yaml | 2 +- .../notes/hypervisor-groups-9c9fb1d44b602af0.yaml | 9 + ...instance-defaults-support-533844543082b2f4.yaml | 2 +- .../notes/lbaasv2-options-ae992286abfa689f.yaml | 5 + .../lxc-cache-prep-timeout-97dc18882f7b1e76.yaml | 7 + .../notes/lxc-container-tech-2a24afbef5a7bf6e.yaml | 5 + .../lxc-machinectl-template-9e65779a94cb767f.yaml | 11 + ...c_container_backing_store-e0a77c48da3a57b2.yaml | 21 + .../lxc_image_cache_server-f14701a7f8f4b8ca.yaml | 14 + ...workmanager-compatibility-87c7c1c121469714.yaml | 10 + .../neutron-agent-baremetal-c229e65c77e615fa.yaml | 16 + .../notes/neutron-bgp-552e6e1f6d37f38d.yaml | 2 +- .../notes/neutron-fwaas-5c7c6508f2cc05c3.yaml | 4 +- ...ron-init-config-overrides-9d1d2b3b908705ed.yaml | 2 +- ...tron-opendaylight-support-453dc9324eafaae7.yaml | 7 + .../notes/neutron-vpnaas-5c7c6508f2cc05c5.yaml | 4 +- .../notes/new_default_quotas-154f76dd7f2f568f.yaml | 6 + .../notes/new_healthcheck-9e559565745defd0.yaml | 7 + .../ng-instance-management-f9134fc283aa289c.yaml | 2 +- .../non_inventory_hosts-c0fa4c185a01e78b.yaml | 6 + .../nova-placement-database-a8735a1df0c4566f.yaml | 15 + ...nsuse-mirror-url-variable-6660f16c3e9bf1ff.yaml | 10 + ...nsuse-mirror-url-variable-74d22825e808211e.yaml | 10 + ...nsuse-mirror-url-variable-865a97abb4c61430.yaml | 6 + .../openvswitch-nsh-support-a9f86a929e072cea.yaml | 6 + ...ize-centos-erlang-install-bafd1c376ffca35e.yaml | 15 + .../notes/os-tempest-roles-cead45b2cd38811f.yaml | 5 + .../permitrootlogin_options-a62e33ccc4a69657.yaml | 8 + ...rsistend-systemd-journals-c1874b52ad666744.yaml | 10 + .../notes/pike_deprecations-39034d48825e8966.yaml | 8 + .../ppc64le-var-changes-84aa4f3f9bb0ef52.yaml | 31 ++ .../pypiserver-pypi-cache-216e9e087f6d3f24.yaml | 9 + ...rval-configuration-option-884d64aa259ecc3c.yaml | 6 + ...emove-duplicated-download-99a9ec5bfe4ba749.yaml | 37 ++ .../notes/remove-fax-fail-5038b4b6eb4951b3.yaml | 21 + .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 + .../notes/remove-v1-api-4fda1ee243203fe5.yaml | 5 + .../notes/remove-v72181-e29b9f5d9c971541.yaml | 6 + .../notes/remove_use_neutron-76135a385ef1345d.yaml | 3 + .../removed-vars-plugin-0f9fb96e8b2c430d.yaml | 6 + .../rhel7-stig-v1r3-update-c533ed40ba609ccf.yaml | 15 + ...elinux-neutron-bare-metal-c89174daf6f8b273.yaml | 6 + .../notes/set-limit-disabled-25998f1f12987c12.yaml | 20 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...l_modules_with_group_vars-8d169f564ffd450c.yaml | 25 ++ ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + .../static_uca_filename-849a6f491acae9c5.yaml | 11 + .../notes/support-ksm-fe6993158768a14e.yaml | 5 + ...t-centos-opensuse-running-0be396c60a513562.yaml | 8 + .../notes/systemd-nfs-setup-5c35c23eda4443be.yaml | 11 + ...ove-init-config-overrides-a78ed428a32adef8.yaml | 2 +- .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 + ...able-file-search-optional-7420269230a0e22f.yaml | 7 + releasenotes/source/conf.py | 18 +- releasenotes/source/index.rst | 7 +- releasenotes/source/pike.rst | 6 + requirements.txt | 13 +- scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-ansible.sh | 116 ++++- scripts/gate-check-commit.sh | 112 ++--- scripts/gen-config.py | 2 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/inventory-manage.py | 11 +- scripts/openstack-ansible.rc | 6 +- scripts/os-cmd | 2 +- scripts/pw-token-gen.py | 5 +- scripts/rabbitmq-test.py | 47 ++ scripts/release-yaml-file-prep.py | 11 +- scripts/run-upgrade.sh | 33 +- scripts/scripts-library.sh | 132 +++++- scripts/sources-branch-updater-lib.sh | 103 +++-- scripts/sources-branch-updater.sh | 43 +- .../playbooks/ceph-galaxy-removal.yml | 31 ++ .../playbooks/deploy-config-changes.yml | 8 +- .../playbooks/user-secrets-adjustment.yml | 3 +- .../scripts/migrate_openstack_vars.py | 2 +- test-requirements.txt | 22 +- .../bootstrap-host/tasks/check-requirements.yml | 15 +- .../bootstrap-host/tasks/install_packages.yml | 81 +--- .../bootstrap-host/tasks/prepare_aio_config.yml | 111 +++-- .../bootstrap-host/tasks/prepare_hostname.yml | 34 ++ .../bootstrap-host/tasks/prepare_loopback_swap.yml | 84 ++-- .../bootstrap-host/tasks/prepare_networking.yml | 47 +- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 19 +- .../bootstrap-host/templates/apt-sources.list.j2 | 16 - .../templates/redhat_interface_default.cfg.j2 | 1 + .../templates/redhat_interface_ifdown-post.cfg.j2 | 19 - .../templates/redhat_interface_ifup-post.cfg.j2 | 25 -- .../templates/rpm_interface_ifdown-post.cfg.j2 | 29 ++ .../templates/rpm_interface_ifup-post.cfg.j2 | 35 ++ .../templates/suse_interface_default.cfg.j2 | 9 + .../templates/user_variables.aio.yml.j2 | 38 +- .../templates/user_variables_ceph.yml.j2 | 2 +- tox.ini | 117 +++-- zuul.d/jobs.yaml | 168 +++++++ zuul.d/playbooks/post.yml | 64 +++ zuul.d/playbooks/run.yml | 25 ++ zuul.d/project.yaml | 51 +++ 453 files changed, 9354 insertions(+), 5900 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ed8d1a9..54d032a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,3 +4,2 @@ -pyasn1!=0.2.3 # BSD -pyOpenSSL>=0.14 # Apache-2.0 -requests>=2.14.2 # Apache-2.0 +pyasn1!=0.2.3,>=0.1.8 # BSD +pyOpenSSL>=16.2.0 # Apache-2.0 @@ -8 +7 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -netaddr!=0.7.16,>=0.7.13 # BSD +netaddr>=0.7.18 # BSD @@ -10 +8,0 @@ PrettyTable<0.8,>=0.7.1 # BSD -pycrypto>=2.6 # Public Domain @@ -12,3 +10,2 @@ python-memcached>=1.56 # PSF -PyYAML>=3.10.0 # MIT -urllib3>=1.21.1 # MIT -virtualenv>=13.1.0 # MIT +PyYAML>=3.10 # MIT +virtualenv>=14.0.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 78145f7..3b4da26 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,3 +4,2 @@ -bashate>=0.2 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 -flake8<2.6.0,>=2.5.4 # MIT + +# Keep hacking first, it pulls in the right versions of flake8, mccabe and pyflakes @@ -8,5 +7,4 @@ hacking<0.11,>=0.10.0 -mccabe==0.2.1 # MIT License -mock>=2.0 # BSD -pep8==1.5.7 # MIT -pyflakes==0.8.1 # MIT -virtualenv>=13.1.0 # MIT +bashate>=0.5.1 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 +mock>=2.0.0 # BSD +virtualenv>=14.0.6 # MIT @@ -15,4 +13,4 @@ virtualenv>=13.1.0 # MIT -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -doc8 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[monasca] monasca-agent 2.6.1 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We are tickled pink to announce the release of: monasca-agent 2.6.1: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/monasca-agent/ For more details, please see below. Changes in monasca-agent 2.6.0..2.6.1 ------------------------------------- e91d882 Fix error logs in prometheus w/o prometheus annotations. 84f5307 Correct detection status in congestion plugin 15dc474 Update UPPER_CONSTRAINTS_FILE for stable/queens 1de91d1 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + monasca_agent/collector/checks_d/prometheus.py | 3 ++- monasca_setup/detection/plugins/congestion.py | 2 +- tox.ini | 2 +- 4 files changed, 5 insertions(+), 3 deletions(-)

1 0

[quality] patrole 0.3.0 (queens)
by no-reply＠openstack.org 14 Mar '18

14 Mar '18

We jubilantly announce the release of: patrole 0.3.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through launchpad: https://bugs.launchpad.net/patrole For more details, please see below. 0.3.0 ^^^^^ Prelude ******* This release marks the start of Queens release support in Patrole. New Features ************ * Add RBAC test for "backup:backup_project_attribute" which verifies that the "os-backup-project-attr:project_id" attribute appears in the response body once policy enforcement succeeds. * Implemented a new method "override_role" in "rbac_utils" module, which provides the exact same functionality as the now-deprecated "switch_role" method, with one difference: "override_role" is a contextmanager which provides better policy validation granularity. This means that immediately after the contextmanager's code has executed, the role is switched back to the admin role automatically. * Add complete RBAC test coverage for the compute APIs that enforce: "os_compute_api:os-extended-server-attributes". * test_flavor_rxtx_rbac now offers complete coverage for the os- flavor-rxtx policy. * Adds tests to see if key_name is returned in server response to test_server_misc_policy_actions_rbac. * Add RBAC test for creating a server backup, providing coverage for the policy action: "os_compute_api:os-create-backup". Upgrade Notes ************* * All of the identity v2.0 API tests have been removed from Patrole because the majority of the v2.0 API has been removed from the identity project. * The "[rbac]" config group has been removed. Use the "[patrole]" group instead which contains the exact same options. Deprecation Notes ***************** * The "switch_role" method in "rbac_utils" module has been deprecated and will be removed during the Rocky release cycle. * The configuration option "[patrole] strict_policy_check" is deprecated and will be removed in the Rocky release cycle. * Removed the following deprecated Patrole configuration options: * cinder_policy_file * glance_policy_file * keystone_policy_file * neutron_policy_file * nova_policy_file To specify the location of a custom policy file, use "[patrole] custom_policy_files" instead. Other Notes *********** * The default value for "[patrole] strict_policy_check" has been changed to "True" because a Patrole test should always fail if the policy action is invalid, to avoid false positives. * OpenStack Releases supported after this release are **Queens** and **Pike**. The release under current development of this tag is Rocky, meaning that every Patrole commit is also tested against master during the Rocky cycle. However, this does not necessarily mean that using Patrole as of this tag will work against a Rocky (or future release) cloud. Changes in patrole 0.2.0..0.3.0 ------------------------------- b006983 Add releasenotes to mark the start of Queens support 938471b Remove all v2.0 identity API tests 6a8c08c RBAC tests for group type specs ac2ee13 [Gate fix] Fix attach volume create server test timeout 686e0d9 Replace curly quotes with straight quotes 2189207 RBAC tests for reset group snapshot status policy 8731f7b Zuul: Remove project name 88061b7 Add waiter to test_manage_snapshot_rbac to fix data race 795dae5 Remove unnecessary dir 'legacy' 233b943 Zuul: Remove project name 1882e9b override_role cleanup: Remove superfluous call in rbac_rule_validation ba816be Updated from global requirements 7676a21 Migrate to override_role for volume module (part 3) 398a09f Clean up exception message raised by policy authority module 50d52d7 Add tests for update group types for volume module 81a22b1 Add test coverage for volume types e7d7c22 Make create_server tests more policy-granular d67a92c Migrate to override_role for volume module (part 1) 8bd897b Optimize test_requireemtns.txt and requirements.txt f58755b Updated from global requirements 58590ee Migrate to override_role for identity v2 module e6a70a5 Updated from global requirements da5ef5b Migrate to override_role for network security group tests 6dd2b01 Add Rbac test for "group_snapshot" d1ce46a Migrate to override_role for image module (part 2) 1a7e0cf Migrate to override_role for network port tests 9da7440 Migrate to override_role for volume module (part 4) f456a38 Migrate to override_role for volume module (part 2) 0eb2220 Migrate to override_role for volume module (last) f50b461 Migrate to override_role for network test_networks_rbac 81949e6 Migrate to override_role for network metering tests 97ce5c7 Migrate to override_role for network metering_labels tests dbb0895 Migrate to override_role for network multiprovider tests 0fb59a8 Migrate to override_role for network tests-2 c1b3005 Migrate to override_role for image module (part 1) 96f23c6 Migrate to override_role for network tests 80b9aab [docs] Fix weird indentation in documentation 211d4f9 Remove 'tempest' from patrole jobs name 017664f Migrate to override_role for compute module (part 3) 41eef07 Migrate to override_role for identity module (part 1) 97a97a2 Migrate to override_role for identity module (part 2) d6f107a [Fix gate] Fix compute snapshot tests raising ServerFault 144ec1e [docs] Update rbac_utils.rst documentation d5aee6c Fix wrong exception in test_snapshot_manage_rbac e25d8a6 Add "snapshot_manage" Rbac test ad2dd79 Fix min_microversion in volume test_groups_rbac 27e0c8e "get_association_qos" test using wrong policy rule 0085d32 Adding 'reset_group_status' rbac test a8c25f0 [Gate fix] Change policy for create_port/update_port:fixed_ips b9e3fd8 Adding Missing rbac test for Volume 2e2af48 [TrivialFix] Use _override_role in rbac_rule_validation d278efe Migrate to override_role for compute module (part 2) 961212f Migrate to override_role for compute module (part 1) 07a1c17 Implement RbacUtilsMixin for base RBAC classes 9b4232a Remove unusued BaseV1ImageRbacTest class 017fcd6 Unskip volume show host test 087c010 Complete coverage for volume transfers policies 3bf15ef Updated from global requirements d69a3f7 Update patrole entry_point plugin name 10e82fd Base implementation of override_role for automatic role re-switch 5fa20f7 Switch to use stestr for unit tests directly c8ec1f6 Update documentation with rbac_utils details 25949b8 Remove dsvm prefix from in-repo zuul jobs 09a1833 Updated from global requirements 9792c16 Correct policy names for volume metadata tests a4cccae Fix volume delete_group data race in clean up b58c119 Remove deprecrated [rbac] config group cb433c0 Improve gitignore for project b3bf95e Additional volume quota set RBAC tests f89b7f2 Add get_router high availaibility test policy f14ce81 Add missing volume RBAC test 0fc826d Migrate to Zuul v3 eac9c8e Skip test_show_host volume test f71def8 Deprecate strict_policy_enforce configuration option c92846a Rename function name to avoid confusion 0cf00b4 Remove Cinder v2 RBAC tests f07edf1 Remove setting of version/release from releasenotes 7a85dfe Add Pause/Unpause policy tests c287389 Design principles README section c269b9f Updated from global requirements 7ab96ce Add RBAC test for 'get_auth_domains' d5a9ba9 Add 'fixed ips' APIs policy tests e7f4ed6 Add RBAC tests for volume limits client 4c5dbdd Add 'show_trust' Policy Test for Identity 7c3ba05 Adding missing snapshot_metadata RBAC tests bc058fc Correct policy action for backup export volume endpoint 912b9fe Add Show ' update_backup ' policy tests 1c4066a Correct policy action for reserve/unreserve volume actions 53530ad Correct policy action for attach/detach volume actions 501c828 Add Shelve/Unshelve policy tests 38f344b Fix six.reraise bug in rbac_rule_validation b987141 RBAC test for unrescue server bbd6a3c Remove deprecated custom policy file options 4bc86e8 Cover more 'floating ips' APIs for policy tests b580963 Fix TypeError being raised by json.dumps in policy_authority c6f7e22 Rename base.rebuild_server to base.recreate_server 4fb116e Add Show ' os-attach-interfaces ' policy tests d35e8ad Skip floating IPs tests with new config options 098a8cd Auto-generate sample config file d2f9f6e Use Tempest decorators in tempest.common.utils c0188ef Clean up identity base class resources via addClassResourceCleanup 2cb5da9 Clean up image resource types class resources via addClassResourceCleanup 0dd58e7 Clean up network class resources via addClassResourceCleanup e22ed5a Clean up namespace class resources via addClassResourceCleanup 21ab97e Clean up volume class resources via addClassResourceCleanup 906623e Image create v1/v2 compatible in compute test_images_rbac 1a9cd96 Clean up test_server_actions_rbac b18a3f6 [flake8] Enable extra, optional hacking checks bc6c682 Clean up compute class resources via addClassResourceCleanup 0f86ca4 RBAC tests for extended server attributes policies 1171b6f Add os-create-backup compute RBAC test a63f854 [Gate Fix] Fix AttributeError in ServerActionsRbacTest 6836b87 Updated from global requirements 2466aeb Improve test coverage for flavor_access nova policies b601740 Remove urllib3/requests from requirements b3939a8 [Gate fix] Change expected_error_code to 403 for some subnetpool tests 7243075 RBAC tests for key_name in response 5ed98d7 Clean up rbac_rule_validation unit tests 2f8c888 [TrivialFix] Remove redundant function in RbacUtils class f2b58d7 Update policy authority documentation 4af0345 Volume test for backup:backup_project_attribute bf58a7f Fix flavor_rxtx_rbac e0e2edc Remove a few tests from multinode gate 72b55d9 Add missing v3 volume tests for which v2 tests exist Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +- .mailmap | 2 + .stestr.conf | 3 + .testr.conf | 7 - .zuul.yaml | 79 +++++ README.rst | 29 ++ devstack/plugin.sh | 5 +- etc/config-generator.patrole.conf | 3 + etc/patrole.conf.sample | 114 +++++++ patrole_tempest_plugin/config.py | 72 ++--- patrole_tempest_plugin/plugin.py | 6 - patrole_tempest_plugin/policy_authority.py | 108 ++++--- patrole_tempest_plugin/rbac_rule_validation.py | 90 +++--- patrole_tempest_plugin/rbac_utils.py | 175 ++++++----- .../api/compute/test_availability_zone_rbac.py | 12 +- .../api/compute/test_flavor_extra_specs_rbac.py | 33 +- .../api/compute/test_floating_ip_pools_rbac.py | 10 +- .../api/compute/test_floating_ips_bulk_rbac.py | 10 +- .../compute/test_instance_usages_audit_log_rbac.py | 20 +- .../api/compute/test_quota_class_sets_rbac.py | 23 +- .../api/compute/test_server_migrations_rbac.py | 22 +- .../test_server_misc_policy_actions_rbac.py | 333 ++++++++++++++------- .../compute/test_server_volume_attachments_rbac.py | 26 +- .../identity/v3/test_domain_configuration_rbac.py | 75 +++-- .../api/identity/v3/test_ep_filter_groups_rbac.py | 31 +- .../identity/v3/test_ep_filter_projects_rbac.py | 28 +- .../api/identity/v3/test_oauth_consumers_rbac.py | 22 +- .../api/identity/v3/test_oauth_tokens_rbac.py | 36 +-- .../api/identity/v3/test_role_assignments_rbac.py | 13 +- .../api/identity/v3/test_tokens_negative_rbac.py | 30 +- .../api/image/test_image_namespace_objects_rbac.py | 30 +- .../image/test_image_namespace_property_rbac.py | 28 +- .../api/image/test_image_namespace_tags_rbac.py | 31 +- .../api/image/test_image_resource_types_rbac.py | 26 +- .../api/network/test_metering_label_rules_rbac.py | 28 +- .../network/test_networks_multiprovider_rbac.py | 20 +- .../api/network/test_service_providers_rbac.py | 4 +- .../api/volume/test_snapshots_actions_rbac.py | 46 ++- .../api/volume/test_snapshots_metadata_rbac.py | 62 +++- .../api/volume/test_volume_basic_crud_rbac.py | 34 +-- .../api/volume/test_volume_types_access_rbac.py | 21 +- .../volume/test_volume_types_extra_specs_rbac.py | 33 +- .../api/volume/test_volumes_snapshots_rbac.py | 47 ++- playbooks/patrole-admin/post.yaml | 80 +++++ playbooks/patrole-admin/run.yaml | 60 ++++ playbooks/patrole-member/post.yaml | 80 +++++ playbooks/patrole-member/run.yaml | 61 ++++ playbooks/patrole-multinode-admin/post.yaml | 80 +++++ playbooks/patrole-multinode-admin/run.yaml | 63 ++++ playbooks/patrole-multinode-member/post.yaml | 80 +++++ playbooks/patrole-multinode-member/run.yaml | 63 ++++ playbooks/patrole-py35-member/post.yaml | 80 +++++ playbooks/patrole-py35-member/run.yaml | 70 +++++ ...up-project-attribute-test-504f053c6ec95b85.yaml | 6 + ...te-rbac-utils-switch-role-a959f7bb3ebab353.yaml | 13 + ...ict-policy-enforce-option-e15d2be4e753608e.yaml | 10 + ...xtended-server-attributes-36623af87e714369.yaml | 5 + .../notes/flavor-rxtx-d7aadbb32a9f232c.yaml | 5 + releasenotes/notes/keypairs-c8355d9496f83f9f.yaml | 5 + .../os-create-backup-test-cd8037ea130c3d8d.yaml | 5 + ...remove-named-policy-files-134f3045502e9ce9.yaml | 13 + .../remove-rbac-config-group-097c200f3db99fad.yaml | 5 + .../start-of-queens-support-6c379f2b9cafbf31.yaml | 11 + releasenotes/source/conf.py | 12 +- requirements.txt | 10 +- setup.cfg | 4 +- test-requirements.txt | 15 +- tox.ini | 15 +- 166 files changed, 4957 insertions(+), 3384 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 00c7e64..35c6038 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +3,0 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 @@ -6,5 +5,4 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -urllib3>=1.21.1 # MIT -oslo.log>=3.30.0 # Apache-2.0 -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.policy>=1.23.0 # Apache-2.0 -tempest>=16.1.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 +oslo.config>=5.1.0 # Apache-2.0 +oslo.policy>=1.30.0 # Apache-2.0 +tempest>=17.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0657438..add2388 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.0.0 # Apache-2.0 @@ -6,2 +6,2 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 @@ -12,6 +12,3 @@ coverage!=4.4,>=4.0 # Apache-2.0 -nose # LGPL -nosexcover # BSD -oslotest>=1.10.0 # Apache-2.0 -oslo.policy>=1.23.0 # Apache-2.0 -oslo.log>=3.30.0 # Apache-2.0 -tempest>=16.1.0 # Apache-2.0 +nose>=1.3.7 # LGPL +nosexcover>=1.0.10 # BSD +oslotest>=3.2.0 # Apache-2.0

1 0

[tripleo] tripleo-image-elements 8.0.0 (queens)
by no-reply＠openstack.org 13 Mar '18

13 Mar '18

We are pleased to announce the release of: tripleo-image-elements 8.0.0: Disk image builder elements for deploying OpenStack. This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 7.0.0.0rc1..8.0.0 --------------------------------------------------- e427c90 Update .gitreview for stable/queens dc4fd49 Zuul: Remove project name 9137048 Zuul: Remove project name ebfa2e6 Remove RH1 OVB jobs from configuration 11462cc Make sure, the realtime element removes the default kernel 02d0985 Add realtime-kernel element f500b7c Adding mapping for SUSE package 6659277 Remove unused tox_install.sh 90b9a25 Migrate t-i-e to zuul v3 jobs b862cd2 Exclude 'vnet' interfaces from being candidates for running a dhcp client. 23de84f Use volumes for security hardened images 9ff2c0c Add missing target_core_mod to iscsi modules e0233d3 Change After rule from cloud-final to cloud-config 22a5e4e Update ironic-agent-multipath element 82fc1bb Use Python to compute release notes version 1135dda Update reno for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/ironic-agent-multipath/README.rst | 9 +- elements/ironic-agent-multipath/element-deps | 1 + .../environment.d/10-ironic-agent-multipath.bash | 4 - .../finalise.d/98-regenerate-initramfs | 17 --- .../static/etc/modules-load.d/iscsi.conf | 9 ++ .../10-os-collect-config | 2 +- elements/os-collect-config/pkg-map | 7 ++ .../os-refresh-config/configure.d/20-os-net-config | 2 +- .../overcloud-secure/block-device-default.yaml | 130 +++++++++++++-------- elements/realtime-kernel/README.rst | 5 + elements/realtime-kernel/element-deps | 1 + .../install.d/99-remove-default-kernel | 10 ++ elements/realtime-kernel/package-installs.yaml | 3 + releasenotes/source/conf.py | 4 +- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 + tools/tox_install.sh | 30 ----- zuul.d/layout.yaml | 5 + 19 files changed, 137 insertions(+), 110 deletions(-)

1 0

[zun] python-zunclient 1.2.0 (rocky)
by no-reply＠openstack.org 13 Mar '18

13 Mar '18

We are jazzed to announce the release of: python-zunclient 1.2.0: Client Library for Zun This release is part of the rocky release series. The source is available from: https://git.openstack.org/cgit/openstack/python-zunclient Download the package from: https://pypi.python.org/pypi/python-zunclient Please report issues through launchpad: https://bugs.launchpad.net/python-zunclient For more details, please see below. Changes in python-zunclient 1.1.0..1.2.0 ---------------------------------------- 3d23314 Updated from global requirements 4bc01df Avoid empty values in 'nets' options c860e8e Updated from global requirements 29ac0b0 Add image show for openstackclient 9e167c6 Move Capsule from Experimental API to v1 514534e Print image uuid instead of the whole dict 4ea8e7c Updated from global requirements e759493 Don't display 'Created At' for service 2b4f887 Changing logging to oslo_log 4f8a399 Update python-zunclient README.rst's url links cf365a0 Revert "Support the option volume_binds of docker run" a13e6ca Fix error about request validate for image_search eaa8811 Fix image_search request 755f0a3 Update zunclient about image_search 9a65c35 Zuul: Remove project name 7d6b869 add select.POLLNVAL event when poll register acad16d Remove unavailable exception catch when get_subcommand_parser a6f5a46 Limit the amount of disk of container b4db33d Update reno for stable/queens 6aa18d0 Updated from global requirements 7a54562 Format container addresses about openstackclient c19ffb5 Support the option volume_binds of docker run Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - README.rst | 6 +- releasenotes/source/index.rst | 1 + releasenotes/source/queens.rst | 6 + requirements.txt | 4 +- setup.cfg | 1 + zunclient/common/base.py | 6 +- zunclient/common/httpclient.py | 2 +- zunclient/common/utils.py | 14 +-- .../common/websocketclient/websocketclient.py | 8 +- zunclient/experimental/__init__.py | 0 zunclient/experimental/capsules.py | 112 ------------------- zunclient/experimental/capsules_shell.py | 121 -------------------- zunclient/experimental/client.py | 123 --------------------- zunclient/experimental/shell.py | 19 ---- zunclient/osc/plugin.py | 2 +- zunclient/osc/v1/containers.py | 25 ++++- zunclient/osc/v1/hosts.py | 2 +- zunclient/osc/v1/images.py | 30 ++++- zunclient/osc/v1/services.py | 4 +- zunclient/shell.py | 30 +---- zunclient/v1/capsules.py | 112 +++++++++++++++++++ zunclient/v1/capsules_shell.py | 112 +++++++++++++++++++ zunclient/v1/client.py | 2 + zunclient/v1/containers.py | 2 +- zunclient/v1/containers_shell.py | 14 ++- zunclient/v1/images.py | 7 +- zunclient/v1/images_shell.py | 8 +- zunclient/v1/services_shell.py | 2 +- zunclient/v1/shell.py | 2 + 34 files changed, 354 insertions(+), 454 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 566f913..7a557aa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ python-openstackclient>=3.12.0 # Apache-2.0 -keystoneauth1>=3.3.0 # Apache-2.0 +keystoneauth1>=3.4.0 # Apache-2.0 @@ -14 +14 @@ docker>=2.4.2 # Apache-2.0 -PyYAML>=3.10 # MIT +PyYAML>=3.12 # MIT

1 0

[tripleo] tripleo-puppet-elements 8.0.0 (queens)
by no-reply＠openstack.org 13 Mar '18

13 Mar '18

We contentedly announce the release of: tripleo-puppet-elements 8.0.0: Puppet building rules for OpenStack images. This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 7.0.0.0rc1..8.0.0 ---------------------------------------------------- dabb361 Update .gitreview for stable/queens c38d7ff Create element to purge resolv.conf f7b3495 Zuul: Remove project name 2f3e003 Remove RH1 OVB jobs from configuration 120eca8 Do not filter packages from RT repo 82d0a62 yum-plugin-priorities should not be enabled on RHEL 5a4f4d6 Install collectd-gnocchi plugin 8e9efd4 Add AIDE Package to overcloud images 6e36b5c add puppet-ptp into image 6a9d83d Update test-requirements to work with reno 956935d Add networking-ovn metadata agent to overcloud image 97df537 Remove unused tox_install.sh cc2c715 Add libreswan (IPSEC management) package to overcloud images dd018a8 Migrate t-p-e to zuul v3 jobs e87eaaa Include required packages for libvirt SASL auth d9d94a8 Remove unused puppet-tempest module 35305ba Do not rely on openstack-puppet-modules cc606ef Install yum-plugin-priorities in pre-install phase d1d2f53 Remove ceilometer Api package from overcloud image 77010c8 Added missing package for lbaas UI 58c758e Remove ceilometer-collector from overcloud image f23ddd8 Use Python to compute release notes version 6e00ff4 Adding Bagpipe driver to controller and compute elements 2cdb092 Update reno for stable/pike 07fe5ae Add stunnel Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../install.d/package-installs-overcloud-base | 2 ++ elements/overcloud-base/pkg-map | 5 +++- .../pre-install.d/01-install-yum-priorities | 7 +++++ .../install.d/package-installs-overcloud-compute | 4 +++ elements/overcloud-compute/pkg-map | 4 +++ .../overcloud-compute/pre-install.d/03-centos-rt | 17 ++++++++++++ .../pre-install.d/03-centos-rt-for-tuned-only | 21 --------------- .../package-installs-overcloud-controller | 5 ++-- elements/overcloud-controller/pkg-map | 5 ++-- .../install.d/package-installs-overcloud-opstools | 2 ++ elements/overcloud-opstools/pkg-map | 2 ++ .../02-puppet-modules-install-types.sh | 4 +-- elements/puppet-modules/pkg-map | 2 +- .../source-repository-puppet-modules | 2 +- elements/remove-resolvconf/README.md | 7 +++++ .../cleanup.d/90-remove-resolvconf | 14 ++++++++++ .../notes/add-bgpvpn-driver-2e73a576e8e06363.yaml | 4 +++ releasenotes/notes/add_ptp-fbb1bc4bbed15e06.yaml | 4 +++ .../notes/add_sasl_scram-94ef062b7f327d00.yaml | 4 +++ releasenotes/source/conf.py | 4 +-- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 +++++ test-requirements.txt | 9 ++++--- tools/tox_install.sh | 30 ---------------------- zuul.d/layout.yaml | 5 ++++ 26 files changed, 105 insertions(+), 66 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 189cfcd..4e15691 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +0,0 @@ -openstackdocstheme>=1.11.0 # Apache-2.0 @@ -3 +1,0 @@ hacking>=0.8.0,<0.9 - @@ -4,0 +3 @@ oslotest + @@ -6,2 +5,4 @@ sphinx>=1.6.2 # BSD -testrepository>=0.0.18 -reno>=1.8.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 + +# This is required for the releasenotes build jobs +reno>=2.5.0 # Apache-2.0

1 0