July 2020 - Release-announce - lists.openstack.org

oslo.vmware 3.5.0 (victoria)
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We are ecstatic to announce the release of: oslo.vmware 3.5.0: Oslo VMware library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. 3.5.0 ^^^^^ Upgrade Notes * "ManagedObjectReference"'s "value" and "_type" attributes must not be used anymore in depending projects. Instead, "vim_util.get_moref_value()" and "vim_util.get_moref_type()" have to be used, because with this spec (https://specs.openstack.org/openstack/oslo-specs/specs/victoria /oslo-vmware-soap-library-switch.html) we switch the backing SOAP library and different libraries have different representations of those attributes. Changes in oslo.vmware 3.4.0..3.5.0 ----------------------------------- 32c8d43 Add moref helper functions ab9ccf6 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++ oslo_vmware/api.py | 2 +- oslo_vmware/dvs_util.py | 2 +- oslo_vmware/pbm.py | 6 +-- oslo_vmware/service.py | 5 ++- oslo_vmware/vim_util.py | 40 +++++++++++++++++++- ...y-switch-helper-functions-21330be61cf7922a.yaml | 9 +++++ 13 files changed, 102 insertions(+), 46 deletions(-)

1 0

castellan 3.4.0 (victoria)
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We jubilantly announce the release of: castellan 3.4.0: Generic Key Manager interface for OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 3.4.0 ^^^^^ New Features * Historically, the vault key manager backend converts its managed objects to dictionaries in order to send them as a json object. To promote cross-backend compatibility, suck feature should be migrated to managed objects. Methods from_dict() and to_dict() added to class ManagedObject. The Method from_dict() is a class method to create instances based on a dictionary while the method to_dict() is an instance method to translate an instance to a dictionary. Changes in castellan 3.3.0..3.4.0 --------------------------------- c2a9f19 migrate testing to ubuntu focal 883e960 Add to_dict and from_dict conversions to managed objects Diffstat (except docs and test files) ------------------------------------- castellan/common/exception.py | 8 +++ castellan/common/objects/__init__.py | 49 +++++++++++++++ castellan/common/objects/key.py | 38 +++++++++++- castellan/common/objects/managed_object.py | 72 +++++++++++++++++++++- castellan/common/objects/opaque_data.py | 8 ++- castellan/common/objects/passphrase.py | 8 ++- castellan/common/objects/private_key.py | 10 +-- castellan/common/objects/public_key.py | 10 +-- castellan/common/objects/symmetric_key.py | 10 +-- castellan/common/objects/x_509.py | 8 ++- ...rsions-to-managed-objects-95a9f0fdbd371a87.yaml | 10 +++ test-requirements.txt | 4 ++ 19 files changed, 275 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fe6146b..212a0c9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5,4 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1

1 0

oslo.db 8.3.0 (victoria)
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We are happy to announce the release of: oslo.db 8.3.0: Oslo Database library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 8.2.1..8.3.0 ------------------------------- a9e6992 requirements: Drop os-testr 7af699e Make test-setup.sh compatible with mysql8 2ce2f4c Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++++ lower-constraints.txt | 1 - test-requirements.txt | 1 - tools/test-setup.sh | 4 ++-- 4 files changed, 7 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 523af12..d55902a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ testtools>=2.2.0 # MIT -os-testr>=1.0.0 # Apache-2.0

1 0

oslo.policy 3.3.1 (victoria)
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We are stoked to announce the release of: oslo.policy 3.3.1: Oslo Policy library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 3.3.0..3.3.1 ----------------------------------- 65b96ab Don't deepcopy objects before mask_dict_password d02e5cd Include example of literal comparison policy rule Diffstat (except docs and test files) ------------------------------------- oslo_policy/policy.py | 9 +++------ 2 files changed, 20 insertions(+), 6 deletions(-)

1 0

stevedore 3.2.0 (victoria)
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We exuberantly announce the release of: stevedore 3.2.0: Manage dynamic plugins for Python applications This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. 3.2.0 ^^^^^ New Features * Add *extras* and *attr* properties to the *Extension* class to make it easier for consumers to access the underlying properties, regardless of the version of *importlib.metadata* being used. Changes in stevedore 3.1.0..3.2.0 --------------------------------- e9204ee add property methods to extension for more entry point values Diffstat (except docs and test files) ------------------------------------- ...se-entry-point-properties-6f2d868d4342fc0d.yaml | 6 +++ stevedore/extension.py | 21 ++++++++++ 3 files changed, 73 insertions(+)

1 0

openstackdocstheme 2.2.5
by no-reply＠openstack.org 17 Jul '20

17 Jul '20

We contentedly announce the release of: openstackdocstheme 2.2.5: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 2.2.4..2.2.5 ------------------------------------------ 0ef4eb2 Add version dropdown on docs.starlingx.io Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/starlingxdocs/titlerow.html | 12 ++++++++++++ 1 file changed, 12 insertions(+)

1 0

kolla-ansible 10.1.0 (ussuri)
by no-reply＠openstack.org 15 Jul '20

15 Jul '20

We enthusiastically announce the release of: kolla-ansible 10.1.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Adds ability to provide a custom elasticsearch config. Upgrade Notes ************* * Changes the default value of "kibana_elasticsearch_ssl_verify" from "false" to "true". LP#1885110 * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. Bug Fixes ********* * Fixes an issue when using ip addresses instead of hostnames in Ansible inventory. OpenvSwitch role sets system-id based on inventory_hostname, which in case of ip addresses in is first ip octet. Such a deployment would result in multiple OVN chassis with duplicate name e.g. "10" connecting to OVN Southbound database - which spawns high numbers of create/delete events in Encap database table - leading to near 100% CPU usage of OVN/OVS/Neutron processes. * Fixes an issue with Manila deployment starting "openvswitch" and "neutron-openvswitch-agent" containers when "enable_manila_backend_generic" was set to "False". LP#1884939 * Fixes the Elasticsearch Curator cron schedule run. LP#1885732 * Fixes an incorrect configuration for nova-conductor when a custom Nova policy was applied, preventing the "nova_conductor" container from starting successfully. LP#1886170 * Fixes an incorrect Ceph keyring file configuration in "gnocchi.conf", which prevented Gnocchi from connecting to Ceph. LP#1886711 * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fix the configuration of the etcd service so that its protocol is independant of the value of the "internal_protocol" parameter. The etcd service is not load balanced by HAProxy, so there is no proxy layer to do TLS termination when "internal_protocol" is configured to be "https". * Fixes LP#1885885 where the default chunk size in the Monasca Fluentd output plugin increased from 8MB to 256MB for file buffering which exceeded the limit allowed by the Monasca Log / Unified API. * Adds a new variable "fluentd_elasticsearch_cacert", which defaults to the value of "openstack_cacert". If set, this will be used to set the path of the CA certificate bundle used by Fluentd when communicating with Elasticsearch. LP#1885109 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. Changes in kolla-ansible 10.0.0..10.1.0 --------------------------------------- 6bba8cc52 Manage octavia health manager worker through openstack_service worker 1636ea073 Fix incorrect value of [storage]/ceph_keyring in gnocchi.conf e0a1072b8 Use the children group for site.yml 33f186c94 Remove policy file from nova-conductor config.json template 0ae152d1d Fix Fluentd date format for MariaDB xinetd ea58710ff Set a chunk size for Fluentd bulk log upload to Monasca f6a70e666 Syntax error in Fluentd Monasca output config 6a0a4877e Use public interface for Magnum client and trustee Keystone interface acfabc77a Make ES Curator schedule multinode-friendly 3114af254 Fix the Elasticsearch Curator cron schedule run 4a5aa528b Fix Zun configuration for TLS 2f3ecdb34 [docs] Update quickstart for Ussuri+ 81e9565ed Fix etcd protocol configuration f6bd4eaa5 Support custom elasticsearch configuration files 73b6ccd1f Verify TLS by default for Kibana to Elasticsearch d3da72c2c Support CA certificate for fluentd & Elasticsearch a0a184e95 Use internalURL endpoint_type for all clients used by Magnum b0359f8a2 Fix Magnum trust operations in multi-region clouds 934cf3985 Skip storm play when not enabled c5ddd19ea openvswitch: Use ansible_hostname for system-id 58a3ba13f Change neutron-ovs-agent deploy only with manila generic backend 9b6ec38b8 octavia: Add documentation 94c7e5a96 Improve error reporting in password utilities 7f0d03183 Enable ZooKeeper when Storm is enabled 8e0c0cd8c CI: use venv only (and not virtualenv) 2ca01f25f nova-cell role clone failed Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 15 ++ .../common/templates/conf/output/01-es.conf.j2 | 3 + .../templates/conf/output/02-monasca.conf.j2 | 5 +- ansible/roles/elasticsearch/defaults/main.yml | 16 +- ansible/roles/elasticsearch/tasks/config.yml | 8 +- .../templates/elasticsearch-curator.crontab.j2 | 2 + .../templates/elasticsearch-curator.json.j2 | 5 +- ansible/roles/etcd/defaults/main.yml | 10 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 2 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 11 ++ ansible/roles/neutron/defaults/main.yml | 2 +- ansible/roles/nova-cell/defaults/main.yml | 2 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 4 +- .../skydive/templates/skydive-analyzer.conf.j2 | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 5 + ansible/site.yml | 14 +- etc/kolla/globals.yml | 2 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...custom-elasticsearch-conf-6fc34fbc3b471997.yaml | 3 + .../notes/bug-1884734-ec054799d3300778.yaml | 10 ++ .../notes/bug-1884939-7c77b8002d3ff52d.yaml | 7 + .../notes/bug-1885732-10803d46f9c73444.yaml | 5 + .../notes/bug-1886170-f76d9d3520ab86ec.yaml | 7 + .../notes/bug-1886711-a1a1fd1343f1a644.yaml | 6 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + .../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml | 8 + ...k-size-for-monasca-output-882338103d2e1f13.yaml | 8 + ...entd-elasticsearch-cacert-0e8824dd57052913.yaml | 8 + .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + .../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 ++ zuul.d/base.yaml | 2 +- 50 files changed, 442 insertions(+), 95 deletions(-)

1 0

kayobe 7.1.0 (train)
by no-reply＠openstack.org 15 Jul '20

15 Jul '20

We are excited to announce the release of: kayobe 7.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 7.1.0 ^^^^^ New Features ************ * Adds a "kayobe overcloud service stop" command. This can be used to stop containerised services running on overcloud hosts. * Adds support for CentOS 8 as a host Operating System and base container image. This is the only major version of CentOS supported from the Ussuri release. The Train release supports both CentOS 7 and 8 hosts, and provides a route for migration. * Adds support for configuration of DNF repositories on CentOS 8. Variables have been added in a new configuration file, "dnf.yml". Backwards compatibility with the Yum configuration variables is provided. * Adds support for applying regular package updates on CentOS 8 via DNF Automatic. Variables have been added in a new configuration file, "dnf.yml". Backwards compatibility with the Yum-cron configuration variables is provided. * Adds a "seed_vm_interfaces" variable which defines the network interfaces to which the seed VM is attached. * Adds a variable for controlling the tag applied to built container images - "kolla_tag". This separates the configuration of the tag for image building from that used for deployment ("kolla_openstack_release"). The default for "kolla_tag" is "kolla_openstack_release". Known Issues ************ * Fixes an issue where provisioning a seed VM would fail when the Ansible control host and the seed hypervisor are different hosts. See story 2007530 (https://storyboard.openstack.org/#!/story/2007530) for more details. Upgrade Notes ************* * Some images were supported by CentOS 7 but lack suitable packages in CentOS 8, and are no longer supported for CentOS. See Kolla release notes for details. * Support for configuring an NTP daemon on the seed and overcloud hosts is no longer present for CentOS 8, as appropriate packages are not available. Instead, Kolla Ansible is configured to deploy the "chrony" container on CentOS 8 overcloud hosts by default. Note that for CentOS 8 during the Train release, the standard "kolla_enable_chrony" variable in "${KAYOBE_CONFIG_PATH}/kolla.yml" has no effect. Instead, chrony may be disabled by setting "enable_chrony" to "false" in "${KAYOBE_CONFIG_PATH}/kolla/globals.yml". * The default order of network interfaces in the seed VM is now sorted alphabetically based on their Kayobe network name. This may require the seed's network interface names to be changed in configuration if the seed VM is recreated. See story 2007259 for details. Deprecation Notes ***************** * The Yum configuration variables in "yum.yml" are deprecated and will be removed in a future release. Adapt any configuration overrides to use the new DNF variables in "dnf.yml" instead. * The yum-cron configuration variables in "yum-cron.yml" are deprecated and will be removed in a future release. Adapt any configuration overrides to use the new DNF automatic variables in "dnf.yml". Bug Fixes ********* * Fixes an issue where chronyd would be enabled as a systemd service in addition to ntpd. This causes issues in deployments where the NTP servers have been customized, as chronyd would win the race on startup, but its configuration file would not have been configured by Kayobe. See story 2005272 (https://storyboard.openstack.org/#!/story/2005272) for more details. * Fixes an issue where it was not possible to load dashboards into the Monasca Grafana fork when the default Monasca control plane OpenStack project name is used from Kolla Ansible. * Fix an issue where the StackHPC iDRAC role would break when configuring RAID when used with a recent release of the python- dracclient module. * Fixes concurrency issues while adding SSH keys to the known hosts file by performing the action serially. See story 2007628 for details. * Fixes issues running the following commands: * "kayobe baremetal compute inspect" * "kayobe baremetal compute manage" * "kayobe baremetal compute provide" See story 2007797 for details. * Fixes a package conflict while provisioning a seed VM on a CentOS 8 seed hypervisor with "coreutils-single" already installed. See story 2007612 for details. * Fixes failure to configure Docker devicemapper storage when the default value of "docker_storage_driver" is used. * Fixes an issue where the default value of "public_net_name" included a trailing newline. See story 2007654. * Fixes an issue with idempotency of Ironic Inspector rule creation. See story 2007399 for details. * Fixes a bug where introspection data save would fail. See Story 2007326 (https://storyboard.openstack.org/#!/story/2007326) for more details. * Fixes an issue with seed VMs with multiple network interfaces where interfaces could come up in a different order if the VM is recreated. The interfaces are now created in alphabetical order of their Kayobe network name by default. See story 2007259 for details. * Fixes an issue seen when "libselinux-python" is not installed on the Ansible control host. See story 2007703 for details. * Improves error message seen when discovering SSH known hosts for a host without an IP address defined in "${KAYOBE_CONFIG_PATH }/network-allocation.yml". * Fixes an issue where "OS_CACERT" variable in "openrc" files would be set to the path of a non-existent file. New "openrc" files can be generated with the "kayobe control host bootstrap" command. See story 2007516 (https://storyboard.openstack.org/#!/story/2007516) for more details. * Fixes an issue where host configuration would fail if "ntp_service_enabled" is set to "false" or "kolla_enable_chrony" is set to "true". See story 2007384 for details. Changes in kayobe 7.0.0..7.1.0 ------------------------------ 3c32015b Use latest release of StackHPC iDRAC role 49cef61f Remove newline from default public_net_name fe6cbcfa Fix kayobe baremetal compute commands 1774d9e9 CI: Update IPA images during upgrade 31b90d51 Fix ironic inspector store endpoint configuration 35bf59f8 CI: don't run virtualenv on an existing virtualenv 62c4de41 Add missing colon 47ca2fe7 CentOS 8: add docs and release note 847bd9e9 Fix seed VM interface ordering 33724452 CentOS 8: separate kolla build tag from deploy tag 981658d5 Fix concurrency issues while adding SSH keys to known_hosts 5eb0ed6e Make the root disk image build command more visible 7bb215ea CI: mark pytest results as a Zuul artifact 7baa657f docs: fix route configuration example syntax fdaa6375 Add note about hardware package dropping python 2 support d932d435 Fix docker-devicemapper playbook c731e8e9 Bump version of os-images role 0fd6fa7d Install libselinux-python on Ansible control host f6ce46dc CI: Encrypt passwords.yml in overcloud host configure job 0c5415e9 Python 3: fix Ansible Vault password helper 6ef18d6a Install coreutils package before using configdrive role c631b6f4 CentOS 8: Fix network configuration persistence 0d699b53 Use ensure-docker role instead of install-docker eba57aff Constraint python-openstackclient install with requirements.txt 64de1b42 Fix ironic inspector rule creation idempotency 9f6e4395 Remove nameservers with any IP in overcloud resolv.conf workaround 5f836518 CI: fix kayobe-tox-molecule job c7b43e00 Improve SSH known host error messages 3a8b0585 Fix loading of Monasca Grafana dashboards dec617c3 Docs: Configure firewall to allow testing of baremetal 275bdd80 Docs: fix libvirt connection URI for tenks 0119ff58 CI: Add overcloud host configure jobs f6a24dd3 Fix passwords.yml generation with vault encryption on Python 3 41c52849 Fix seed VM provisioning on a remote seed hypervisor 773ac2e4 Add support for stopping overcloud services fb1316a5 Use upper constraints when installing Tenks fe1df0f7 Fix ntp and chrony in mixed CentOS 7 and 8 environments b5aa3938 Prevent openrc files from using wrong OS_CACERT value 359d2b0d CentOS 8: seed VM & bifrost de8f5592 CentOS 8: Enable seed job 9e5e7955 CentOS 8: Support DNF 1fa84a6f Switch to stackhpc fork of resmo.ntp 6255b382 Fix multiple CI failures 0a0d37c7 Fix Kayobe overcloud introspection data save 13f5fa48 CentOS 8: Add seed and overcloud CI jobs 047f84ad CentOS 8: Use same local python version for kolla-ansible 612575a4 CentOS 8: Disable ntpd, enable chrony container 034e7791 CentOS 8: Bump MichaelRigart.interfaces to 1.4.0 20f45f2b Make Kayobe code compatible with Python 3 2a23b89e CentOS 8: Use ansible_playbook_python for localhost dependencies d3d9dbdb Remove activate-virtualenv and deactivate-virtualenv roles a14be331 Switch from shade to openstacksdk 2f6e5344 Make local kolla-ansible Python executable configurable 1be05c17 Stop gzipping logs in get-logs.sh 369fc3a8 Skip resmo.ntp role if ntp_service_enabled is false 61690b7e Blacklist Ansible 2.8.9 0208801f [docs] Change CoreOS URLs to Centos URLs fir IPA 6f34cf12 CI: Make provision-net external Diffstat (except docs and test files) ------------------------------------- ansible/baremetal-compute-inspect.yml | 27 ++-- ansible/baremetal-compute-manage.yml | 27 ++-- ansible/baremetal-compute-provide.yml | 25 ++- ansible/baremetal-compute-serial-console.yml | 8 + ansible/disable-selinux.yml | 1 + ansible/dnf.yml | 16 ++ ansible/docker-registry.yml | 2 +- ansible/external-net.yml | 8 +- ansible/group_vars/all/dnf | 52 +++++++ ansible/group_vars/all/docker | 3 + ansible/group_vars/all/grafana | 4 +- ansible/group_vars/all/kolla | 11 +- ansible/group_vars/all/network | 2 +- ansible/group_vars/all/ntp | 6 +- ansible/group_vars/all/overcloud | 15 +- ansible/group_vars/all/seed-vm | 3 + ansible/group_vars/all/yum | 28 ++++ ansible/group_vars/all/yum-cron | 6 + ansible/inspection-store.yml | 2 +- ansible/ip-allocation.yml | 17 ++ ansible/kayobe-ansible-user.yml | 4 +- ansible/kayobe-target-venv.yml | 43 +++-- ansible/kolla-openstack.yml | 5 +- ansible/kolla-target-venv.yml | 21 ++- ansible/network.yml | 3 +- ansible/ntp.yml | 4 +- ansible/opensm.yml | 2 +- ansible/overcloud-extras.yml | 2 +- ansible/overcloud-grafana-configure.yml | 24 ++- ansible/overcloud-host-image-workaround-resolv.yml | 15 +- ansible/overcloud-introspection-data-save.yml | 3 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 6 +- ansible/overcloud-introspection-rules.yml | 6 +- ansible/overcloud-ipa-images.yml | 6 +- ansible/pip.yml | 2 + ansible/provision-net.yml | 20 +-- .../roles/activate-virtualenv/defaults/main.yml | 3 - ansible/roles/activate-virtualenv/tasks/main.yml | 10 -- .../library/console_allocation.py | 2 +- ansible/roles/console-allocation/tasks/main.yml | 53 ++++--- ansible/roles/console-allocation/vars/Debian.yml | 7 - .../roles/deactivate-virtualenv/defaults/main.yml | 5 - ansible/roles/deactivate-virtualenv/tasks/main.yml | 6 - ansible/roles/disable-selinux/tasks/main.yml | 3 +- ansible/roles/dnf-automatic/defaults/main.yml | 6 + ansible/roles/dnf-automatic/tasks/main.yml | 27 ++++ ansible/roles/dnf/defaults/main.yml | 35 +++++ ansible/roles/dnf/tasks/custom-repo.yml | 27 ++++ ansible/roles/dnf/tasks/local-mirror.yml | 46 ++++++ ansible/roles/dnf/tasks/main.yml | 14 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 +++ ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 +++ ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 +++ ansible/roles/dnf/templates/epel-modular.repo.j2 | 23 +++ ansible/roles/dnf/templates/epel.repo.j2 | 23 +++ ansible/roles/docker-registry/defaults/main.yml | 2 +- ansible/roles/docker-registry/tasks/stop.yml | 9 ++ ansible/roles/inspection-store/defaults/main.yml | 2 +- ansible/roles/inspection-store/tasks/stop.yml | 9 ++ .../roles/ip-allocation/library/ip_allocation.py | 2 +- ansible/roles/ip-allocation/tasks/main.yml | 53 ++++--- ansible/roles/ip-allocation/vars/Debian.yml | 8 - ansible/roles/ipa-images/defaults/main.yml | 2 +- ansible/roles/ipa-images/meta/main.yml | 6 +- ansible/roles/ipa-images/tasks/main.yml | 131 ++++++++-------- ansible/roles/ironic-inspector-rules/README.md | 2 +- .../library/os_ironic_inspector_rule.py | 26 +++- ansible/roles/ironic-inspector-rules/meta/main.yml | 6 +- .../roles/ironic-inspector-rules/tasks/main.yml | 12 +- ansible/roles/kolla-ansible/defaults/main.yml | 6 + .../roles/kolla-ansible/library/kolla_passwords.py | 8 +- ansible/roles/kolla-ansible/tasks/config.yml | 8 + ansible/roles/kolla-ansible/tasks/install.yml | 28 +++- .../roles/kolla-ansible/templates/globals.yml.j2 | 14 +- .../kolla-ansible/templates/overcloud-top-level.j2 | 9 ++ .../kolla-ansible/templates/requirements.txt.j2 | 5 +- ansible/roles/kolla-ansible/vars/Debian.yml | 7 +- ansible/roles/kolla-ansible/vars/RedHat.yml | 8 +- ansible/roles/kolla-ansible/vars/main.yml | 1 - ansible/roles/kolla-build/defaults/main.yml | 2 +- .../kolla-build/templates/kolla-build.conf.j2 | 2 +- ansible/roles/kolla/tasks/install.yml | 7 +- ansible/roles/opensm/defaults/main.yml | 2 +- ansible/roles/opensm/tasks/stop.yml | 9 ++ ansible/roles/pip/tasks/pip_local_mirror.yml | 20 --- ansible/roles/snat/tasks/main.yml | 5 + ansible/roles/ssh-known-host/tasks/main.yml | 24 ++- .../roles/swift-rings/files/swift-ring-builder.py | 2 +- ansible/seed-introspection-rules.yml | 6 +- ansible/seed-vm-provision.yml | 33 ++-- ansible/yum.yml | 17 +- dev/config.sh | 3 + dev/functions | 103 ++++++++++-- etc/kayobe/bifrost.yml | 24 +-- etc/kayobe/dnf.yml | 67 ++++++++ etc/kayobe/kolla.yml | 10 +- etc/kayobe/ntp.yml | 6 +- etc/kayobe/overcloud.yml | 13 +- etc/kayobe/seed-vm.yml | 19 ++- etc/kayobe/yum-cron.yml | 2 + etc/kayobe/yum.yml | 3 + kayobe/ansible.py | 5 +- kayobe/cli/commands.py | 54 ++++++- kayobe/vault.py | 5 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 7 + playbooks/kayobe-overcloud-base/pre.yml | 8 + .../overrides.yml.j2 | 128 +++++++++++++++ .../kayobe-overcloud-host-configure-base/pre.yml | 42 +++++ .../kayobe-overcloud-host-configure-base/run.yml | 41 +++++ playbooks/kayobe-seed-base/overrides.yml.j2 | 7 + playbooks/kayobe-seed-base/pre.yml | 8 + playbooks/kayobe-tox-molecule/pre.yml | 2 +- .../notes/add-stop-command-8f66235870720f31.yaml | 5 + .../notes/blacklist-chrony-019d39fad263905c.yaml | 9 ++ ...-grafana-dashboard-config-b81781cf10c2a236.yaml | 6 + .../bugfix-update-idrac-role-71ede6900dc000a7.yaml | 5 + releasenotes/notes/centos-8-12073e91a157d0a2.yaml | 12 ++ .../notes/centos-8-chrony-bec9d7bc8b346363.yaml | 11 ++ ...urrent-known-hosts-update-8dc94557e9a48021.yaml | 6 + releasenotes/notes/dnf-2071fc40b0d783b6.yaml | 20 +++ ...aremetal-compute-commands-b72862a53f88c5ef.yaml | 11 ++ ...coreutils-single-conflict-208036c66b9f7e59.yaml | 6 + ...ult-docker-storage-driver-e05832be7a4c2ab8.yaml | 5 + ...x-default-public-net-name-067338275460b50d.yaml | 7 + ...nspector-rule-idempotency-f6e5a61f7dca580f.yaml | 6 + ...x-introspection-data-save-cfc83714f66fd63c.yaml | 6 + ...mote-seed-vm-provisioning-faa8de569ca6bc89.yaml | 7 + ...ix-seed-multiple-networks-458915b085a9478c.yaml | 19 +++ ...ix-selinux-python-missing-8bae7ffce4ba460d.yaml | 6 + ...rove-ssh-known-host-error-15fbc6ae4fa3dbd6.yaml | 6 + .../kolla-tag-and-suffix-a223b0c7173a245e.yaml | 7 + ...t-wrong-oscacert-variable-9ede7f60c1562a77.yaml | 8 + .../skip-ntp-if-disabled-585c756f01b34bfa.yaml | 7 + requirements.txt | 3 +- requirements.yml | 26 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 2 - setup.cfg | 1 + test-requirements.txt | 2 + tox.ini | 3 +- zuul.d/jobs.yaml | 59 ++++++- zuul.d/nodesets.yaml | 8 +- zuul.d/project.yaml | 24 ++- 158 files changed, 2260 insertions(+), 511 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a368d266..3989ce9e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.6.0,<2.9.0 # GPLv3 +ansible>=2.6.0,<2.9.0,!=2.8.9 # GPLv3 @@ -10,0 +11 @@ setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2. +selinux;python_version>='3' # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 9b9f3d3c..26dece02 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,0 +11,2 @@ hacking>=0.12.0,<0.13 # Apache-2.0 +# sh 1.13.1 causes molecule yamllint to fail. +sh<1.13 # MIT

1 0

kolla 8.0.4 (stein)
by no-reply＠openstack.org 15 Jul '20

15 Jul '20

We jubilantly announce the release of: kolla 8.0.4: Kolla OpenStack Deployment This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 8.0.4 ^^^^^ Bug Fixes * Drop systemd support from nsswitch.conf on RHEL-based distros. This avoids unneeded systemd nss lookups inside containers and it also avoids possible selinux denials when a container bind mounts /run and makes the dbus socket available inside the container only to be denied by selinux on the host. Changes in kolla 8.0.3..8.0.4 ----------------------------- 7038e3ff0 Drop systemd support from nsswitch.conf on RHEL-based distros 37b3df146 Bump versions for Stein 6604041eb CI: use wheels from infra mirror d12137ce6 CI: Install python deps, mark oraclelinux rsyslog as skipped 8cce9293a Bump versions for Stein fca4a088a Fix multiple issues 4b7768291 CI: Ignore more 0f7cc7c95 CI: Ignore .zuul.d Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 ++ .zuul.d/base.yaml | 5 +++ .zuul.d/centos.yaml | 1 - kolla/common/config.py | 16 ++++----- kolla/image/build.py | 3 ++ ...nss-on-rhel-based-distros-5d586fcdb9a82da7.yaml | 7 ++++ 13 files changed, 83 insertions(+), 13 deletions(-)

1 0

kolla-ansible 9.2.0 (train)
by no-reply＠openstack.org 15 Jul '20

15 Jul '20

We are stoked to announce the release of: kolla-ansible 9.2.0: Ansible Deployment of Kolla containers This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Adds ability to provide a custom elasticsearch config. * Adds Elasticsearch Curator for managing aggregated log data. * Kolla Ansible checks now that the local Ansible Python environment is coherent, i.e. used Ansible can see Kolla Ansible. LP#1856346 Upgrade Notes ************* * Avoids unnecessary fact gathering using the "setup" module. This should improve the performance of environments using fact caching and the Ansible "smart" fact gathering policy. See blueprint for details. * Adds "elasticsearch_use_v6" and "kibana_use_v6" flags which can be set to "true" to deploy the "elasticsearch6" and "kibana6" images on CentOS 7 or 8. These flags are "true" by default on CentOS 8, and "false" elsewhere. The services should be upgraded from 5.x to 6.x via "kolla-ansible upgrade elasticsearch,kibana", and this can be used to provide an Elasticsearch 6.x cluster that is compatible between CentOS 7 and 8. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. There is also an issue for existing deployments in simply switching to the service project. While existing load balancers appear to continue to work, creating new load balancers fails due to the security group belonging to the admin project. For this reason, Train and Stein have been reverted to use the admin project by default, while from the Ussuri release the service project will be used by default. To provide flexibility, an "octavia_service_auth_project" variable has been added. In the Train and Stein releases this is set to "admin" by default, and from Ussuri it will be set to "service" by default. For users of Train and Stein, "octavia_service_auth_project" may be set to "service" in order to avoid a breaking change during the Ussuri upgrade. To switch an existing deployment from using the "admin" project to the "service" project, it will at least be necessary to create the required security group in the "service" project, and update "octavia_amp_secgroup_list" to this group's ID. Ideally the Amphora flavor and network would also be recreated in the "service" project, although this does not appear to be necessary for operation, and will impact existing Amphorae. See bug 1873176 for details. * Changes the default value of "kibana_elasticsearch_ssl_verify" from "false" to "true". LP#1885110 * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. * When deploying Monasca with Logstash 6 (the default for Centos 8), any custom Logstash 2 configuration for Monasca will need to be updated to work with Logstash 6. Please consult the documentation. Bug Fixes ********* * Fixes Kibana deployment with the new E*K stack (6+). LP#1799689 * Fixes Grafana datasource update. LP#1881890 * Removing chrony package and AppArmor profile from docker host if containerized chrony is enabled. LP#1882513 * Escapes table names in mariadb upgrade procedure. LP#1883141 * Fixes an issue with Manila deployment starting "openvswitch" and "neutron-openvswitch-agent" containers when "enable_manila_backend_generic" was set to "False". LP#1884939 * Fixes the Elasticsearch Curator cron schedule run. LP#1885732 * Fixes an incorrect configuration for nova-conductor when a custom Nova policy was applied, preventing the "nova_conductor" container from starting successfully. LP#1886170 * Add missing "become: true" on some VMWare related tasks. Fixed on "Copying VMware vCenter CA file" and "Copying over nsx.ini". * fix deploy nova failed when use kolla_dev_mod. * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fixes the default CloudKitty configuration, which included the "gnocchi_collector" and "keystone_fetcher" options that were deprecated in Stein and removed in Train. See bug 1876985 for details. * Fixes an issue with Cinder upgrades that would cause online schema migration to fail. LP#1880753 * Fix cyborg api container failed to load api paste file. For details please see bug 1874028. * Fix the configuration of the etcd service so that its protocol is independant of the value of the "internal_protocol" parameter. The etcd service is not load balanced by HAProxy, so there is no proxy layer to do TLS termination when "internal_protocol" is configured to be "https". * Fixes an issue where "fernet_token_expiry" would fail the pre- checks despite being set to a valid value. Please see bug 1856021 (https://bugs.launchpad.net/kolla-ansible/+bug/1856021) for more details. * The kolla_logs Docker volume is now mounted into the Elasticsearch container to expose logs which were previously written erroneously to the container filesystem (bug 1859162). It is up to the user to migrate any existing logs if they so desire and this should be done before applying this fix. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. See upgrade notes for details. LP#1873176 * Fixes an issue with RabbitMQ where tags would be removed from the "openstack" user after deploying Nova. This prevents the user from accessing the RabbitMQ management UI. LP#1875786 * Adds a new variable "fluentd_elasticsearch_cacert", which defaults to the value of "openstack_cacert". If set, this will be used to set the path of the CA certificate bundle used by Fluentd when communicating with Elasticsearch. LP#1885109 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. * When deploying Elasticsearch 6 (the default for Centos 8), Logstash 2 was deployed by default which is not compatible with Elasticsearch 6. Logstash 6 is now deployed by default when using Centos 8 containers. Changes in kolla-ansible 9.1.0..9.2.0 ------------------------------------- 1629f5fe0 Manage octavia health manager worker through openstack_service worker 0c1b326e3 Use kolla_logs volume for Elasticsearch 767f0ad06 Use the children group for site.yml bd055912d Remove policy file from nova-conductor config.json template 6cbd4c520 Syntax error in Fluentd Monasca output config 8418b5ae8 Use public interface for Magnum client and trustee Keystone interface 5011b6bd1 Make ES Curator schedule multinode-friendly f1af365da Fix the Elasticsearch Curator cron schedule run dfd867ad1 Fix Zun configuration for TLS 953702532 Fix etcd protocol configuration 4e1225b04 Support using Logstash 6 image with Centos8 ff9a54d01 Support custom elasticsearch configuration files 358887866 Support deploying Elasticsearch Curator 74be7b86a Escape table names in mariadb upgrade procedure 2918bae99 octavia: Add documentation aa2d2b534 Verify TLS by default for Kibana to Elasticsearch 20a1de4ee Support CA certificate for fluentd & Elasticsearch 0498b5c45 Fix Magnum trust operations in multi-region clouds 1aa4565ff Use internalURL endpoint_type for all clients used by Magnum 5699f5a32 Skip storm play when not enabled 05a384920 Change neutron-ovs-agent deploy only with manila generic backend d8b05f4c1 Improve error reporting in password utilities 0715d0d86 Enable ZooKeeper when Storm is enabled 4009a2a17 barbican: Use python3 plugin in uwsgi config c2de7ac4e nova-cell role clone failed eba42fa8c Run tox in venv in case of building images 1851d8812 Make octavia service_auth project configurable 6f227c2cd Remove max count from Cinder online schema migration 9528e5944 fix deploy nova failed when use kolla_dev_mod 473775f14 CI: Install python dependencies 57f6475ee Add EL8 packages. c677690f3 Do not ask for a SSH key password 910b405ce Fix file extension in MariaDB backup docs fda520f82 Remove chrony package if containerized chrony is enabled cf70176c0 Fix Grafana datasource update db8c2dcc5 CI: Fix periodics 31fb5cc67 CI: Move NFV reqs installation to where it belongs a8d760c4c [elasticsearch] Add migration for Kibana 6.x index d8880dd32 [elasticsearch] Update config for 6.x 9463a7499 Add missing become to some VMWare tasks bb9e7d0e7 CI: add missing base jobs 166eb87c3 Fix bug in deploying monasca_agent_forwarder 8cfb1d7a0 Avoid unconditional fact gathering 467e6876a CentOS 8: Support Elasticsearch & Kibana 6.x cfc1ba2c3 Check that used Ansible can see Kolla Ansible d76ddcbad Remove confusing docs 71acc3ef9 Make openstack_release more obvious eccb6806c Remove post_config from the Kibana role 1959e0fcc Add First login steps back into Kibana doc 7b851bdb1 Fix cyborg api failed to load api-paste.ini file afc5c9974 fix can not generate ovs-dpdk.conf 49b58151b Improve fernet_token_expiry precheck c31b2505c Configure RabbitMQ user tags in nova-cell role 7f52e04b8 multipath requires udev-rules in host 7b22f394f Document and test maximum supported version of Ansible 16da9a4a9 CI: Discern between Ironic client and grep failure 653c7ba09 Ignore .vscode/ in Git 9e5afdc17 dpdk-vswitchd: some ovs tools require ovs daemons pidfiles 360330adc Add release note for CloudKitty configuration fixes a673a069c Make nova perms consistent between applications 3efd5d6e1 Update Advanced Config guide to clarify paths 812eeb30c Update section names in cloudkitty config Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + ansible/gather-facts.yml | 12 +- ansible/group_vars/all.yml | 10 +- ansible/inventory/all-in-one | 4 + ansible/inventory/multinode | 4 + .../roles/barbican/templates/barbican-api.ini.j2 | 2 +- ansible/roles/baremetal/defaults/main.yml | 3 + ansible/roles/baremetal/tasks/post-install.yml | 16 ++ ansible/roles/ceilometer/tasks/config.yml | 1 + ansible/roles/cinder/defaults/main.yml | 4 - ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 4 +- ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/output/00-local.conf.j2 | 6 + .../common/templates/conf/output/01-es.conf.j2 | 3 + .../templates/conf/output/02-monasca.conf.j2 | 2 +- ansible/roles/cyborg/tasks/config.yml | 16 +- ansible/roles/elasticsearch/defaults/main.yml | 61 ++++- ansible/roles/elasticsearch/handlers/main.yml | 15 ++ .../roles/elasticsearch/tasks/check-containers.yml | 4 +- ansible/roles/elasticsearch/tasks/config.yml | 47 +++- ansible/roles/elasticsearch/tasks/pull.yml | 4 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 10 +- .../templates/elasticsearch-curator-actions.yml.j2 | 33 +++ .../templates/elasticsearch-curator.crontab.j2 | 3 + .../templates/elasticsearch-curator.json.j2 | 32 +++ .../templates/elasticsearch-curator.yml.j2 | 8 + .../elasticsearch/templates/elasticsearch.json.j2 | 2 +- .../elasticsearch/templates/elasticsearch.yml.j2 | 4 +- ansible/roles/etcd/defaults/main.yml | 10 +- ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/keystone/tasks/precheck.yml | 24 +- ansible/roles/kibana/defaults/main.yml | 18 +- ansible/roles/kibana/files/kibana-6-index.json | 264 +++++++++++++++++++++ ansible/roles/kibana/tasks/deploy.yml | 2 - .../roles/kibana/tasks/migrate-kibana-index.yml | 99 ++++++++ ansible/roles/kibana/tasks/post_config.yml | 72 ------ ansible/roles/kibana/tasks/upgrade.yml | 3 + ansible/roles/magnum/templates/magnum.conf.j2 | 11 + ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/monasca/defaults/main.yml | 6 +- ansible/roles/monasca/tasks/post_config.yml | 3 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-log-metrics/log-metrics.conf.j2 | 29 +++ .../monasca-log-metrics.json.j2 | 3 +- .../monasca-log-persister/log-persister.conf.j2 | 13 + .../monasca-log-persister.json.j2 | 3 +- .../log-transformer.conf.j2 | 24 ++ .../monasca-log-transformer.json.j2 | 3 +- ansible/roles/neutron/defaults/main.yml | 2 +- ansible/roles/neutron/tasks/config.yml | 1 + ansible/roles/nova-cell/defaults/main.yml | 7 +- .../templates/nova-cell-bootstrap.json.j2 | 3 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- ansible/roles/nova/tasks/bootstrap.yml | 3 + ansible/roles/nova/tasks/deploy.yml | 3 - .../nova/templates/nova-api-bootstrap.json.j2 | 3 +- ansible/roles/octavia/defaults/main.yml | 4 + ansible/roles/octavia/tasks/register.yml | 14 ++ ansible/roles/octavia/templates/octavia.conf.j2 | 5 +- ansible/roles/openvswitch/defaults/main.yml | 4 +- .../ovs-dpdk/templates/ovsdpdk-vswitchd.json.j2 | 2 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 +- ansible/roles/service-rabbitmq/defaults/main.yml | 1 + ansible/roles/service-rabbitmq/tasks/main.yml | 1 + .../roles/skydive/templates/skydive-agent.conf.j2 | 4 +- .../skydive/templates/skydive-analyzer.conf.j2 | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 5 + ansible/site.yml | 14 +- .../central-logging-guide.rst | 49 ++++ etc/kolla/globals.yml | 7 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...custom-elasticsearch-conf-6fc34fbc3b471997.yaml | 3 + ...add-elasticsearch-curator-88089d04f7ccd549.yaml | 4 + ...onditional-fact-gathering-94760984b2de0796.yaml | 8 + .../notes/bug-1799689-c8612c73649ac483.yaml | 5 + .../notes/bug-1856346-59d0f01005d56e81.yaml | 6 + .../notes/bug-1881890-72c76f5fc065588b.yaml | 5 + ...-chrony-permission-denied-917b3bffc5cdb38d.yaml | 6 + .../notes/bug-1883141-336fd12b89a3a5cc.yaml | 5 + .../notes/bug-1884939-7c77b8002d3ff52d.yaml | 7 + .../notes/bug-1885732-10803d46f9c73444.yaml | 5 + .../notes/bug-1886170-f76d9d3520ab86ec.yaml | 7 + ...-become-attributes-vmware-9ae97e49b4d7dc0d.yaml | 5 + .../bug-nova-dev-mod-failed-ad4e64f5a5bc2a6a.yaml | 4 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + ...ty-removed-config-options-6b656fb8bfa5431d.yaml | 7 + .../elasticsearch-kibana-6-6621548e948d9d23.yaml | 10 + ...-cinder-upgrade-max-count-ab928f85f224c63d.yaml | 5 + ...ed-to-find-api-paste-file-225cec3ec16b2265.yaml | 6 + .../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml | 8 + .../fix-fernet-pre-check-5efbdfe43a2776e3.yaml | 6 + ...-elasticsearch-kolla-logs-a0ba85d91d1a2c31.yaml | 8 + ...avia-service-auth-project-849a4e5bd852e9c7.yaml | 40 ++++ .../fix-rabbitmq-user-tags-8c9d626b28ff5d51.yaml | 7 + ...entd-elasticsearch-cacert-0e8824dd57052913.yaml | 8 + .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + .../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 + .../notes/support-logstash-6-d64bb51217b79a77.yaml | 12 + tools/init-runonce | 2 +- tools/kolla-ansible | 83 +++++-- tools/ovs-dpdkctl.sh | 6 +- tools/setup_gate.sh | 5 +- zuul.d/base.yaml | 22 ++ zuul.d/project.yaml | 3 +- 120 files changed, 1500 insertions(+), 243 deletions(-)

1 0