January 2021 - Release-announce - lists.openstack.org

puppet-openstack_extras 18.0.0 (wallaby)
by no-reply＠openstack.org 14 Jan '21

14 Jan '21

We eagerly announce the release of: puppet-openstack_extras 18.0.0: Puppet module for OpenStack Openstack_extras This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 17.4.0..18.0.0 ------------------------------------------------- cf87e27 Bump version for the start of Wallaby a70a2ff Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++++++ 3 files changed, 8 insertions(+), 1 deletion(-)

1 0

blazar_tempest_plugin 0.6.0 (wallaby)
by no-reply＠openstack.org 12 Jan '21

12 Jan '21

We are amped to announce the release of: blazar_tempest_plugin 0.6.0: Tempest plugin for Blazar Project This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/blazar_tempest_plugin Download the package from: https://tarballs.openstack.org/blazar-tempest-plugin/ For more details, please see below. Changes in blazar_tempest_plugin 0.5.0..0.6.0 --------------------------------------------- b979560 Bump py37 to py38 in tox.ini f6b619e Add doc/requirements 10ef8b7 Fix multiple CI failures Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 +++++++++++++ test-requirements.txt | 10 ++-------- tox.ini | 8 ++++++-- 5 files changed, 25 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c46ca66..a043fc9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=1.1.0,<3.0.1 # Apache-2.0 @@ -9,7 +9 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -pyflakes>=2.1.1 - -# docs -sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.2.1 # Apache-2.0 -# releasenotes -reno>=3.1.0 # Apache-2.0 +pyflakes>=2.1.1 # MIT

1 0

neutron-lib 2.8.0 (wallaby)
by no-reply＠openstack.org 12 Jan '21

12 Jan '21

We jubilantly announce the release of: neutron-lib 2.8.0: Neutron shared routines and utilities This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.8.0 ^^^^^ New Features * Add constants for RBAC sharing actions: "ACCESS_SHARED", "ACCESS_EXTERNAL", and a new action "ACCESS_READONLY". * New API definition: "port-device-profile". The new field added to "ports" API, "device_profile", represents a Cyborg device profile and is a named set of user requirements for one or more accelerators. Changes in neutron-lib 2.7.0..2.8.0 ----------------------------------- 1389b63 Add desc support to the BaseWorker initialization 67d24c6 Update TOX_CONSTRAINTS_FILE for master 3cc97ca [goal] Deprecate the JSON formatted policy file a4987c7 New api-def: port-device-profile 6e95fff Update lower-constraints for new pip resolver d80dc7f Remove "autonested_transaction" method a607f60 Add const for ports bulk resource extenders 83019b9 Add `access_as_readonly` sharing action Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/parameters.yaml | 18 +++++++++ api-ref/source/v2/ports.inc | 9 +++++ lower-constraints.txt | 16 ++++++-- neutron_lib/api/definitions/__init__.py | 2 + neutron_lib/api/definitions/port.py | 1 + neutron_lib/api/definitions/port_device_profile.py | 45 ++++++++++++++++++++++ neutron_lib/constants.py | 5 +++ neutron_lib/db/api.py | 15 -------- neutron_lib/db/model_query.py | 6 ++- neutron_lib/policy/_engine.py | 10 ++++- .../api/definitions/test_port_device_profile.py | 22 +++++++++++ neutron_lib/utils/net.py | 2 +- neutron_lib/worker.py | 6 ++- ...-actions-to-lib-constants-736d881f127c83d7.yaml | 5 +++ .../port-device-profile-ffa9628ef6395c68.yaml | 6 +++ tox.ini | 10 ++--- 21 files changed, 158 insertions(+), 42 deletions(-)

1 0

kolla 11.0.0 (victoria)
by no-reply＠openstack.org 11 Jan '21

11 Jan '21

We are excited to announce the release of: kolla 11.0.0: Kolla OpenStack Deployment This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.0.0 ^^^^^^ Upgrade Notes ************* * Kolla now no longer supports CentOS 8.2 and below. This is to support CentOS 8.3 without extra workarounds (please see the fixes section for more details). The promise is to support the latest CentOS 8 release which is 8.3 now. Bug Fixes ********* * Fixes MariaDB incremental backup failure when full backup was not created the same day. LP#1897948 * Fixes builds on CentOS 8.3 failing due to renamed repos. Notice Kolla now no longer supports CentOS 8.2 and below. LP#1907213 * nova-compute uses daxio to cleanup vpmem backend device on instance delete. If the daxio binary is missing in the nova-compute container instance delete fails. daxio is provided in centos via daxio, in ubuntu via the pmdk-tools package. Changes in kolla 11.0.0.0rc1..11.0.0 ------------------------------------ 87ce9c63d ceilometer: do not fail when using an unsupported database type 43bc9a3ad nova-compute: daxio on CentOS 8 is x86-64 only 775b65e1a Install iptables in ironic-inspector container 4a114b557 Fix build of monasca-grafana 2d18e197d mariadb: Fixes incremental backup failure when full not created today 2cf83cc82 use freezer user for freezer_scheduler container 40a1c7a6e Add daxio for nvdimm scenario 22b2dde67 elasticsearch-curator: drop botocore workaround a055d351b Publish weekly 58d6bc544 Support CentOS 8.3 2a1ea27b2 [CI] Slim down de48f1bee [CI] Stop testing lower-constraints 6c0b7159f Update the'image-building.rst' document 31a94651d base: fix QEMU dependencies for Debian/aarch64 f99c37996 Switch to centos-release-openstack-victoria package fa5b4b3e9 Use Victoria RDO 4dfdde42c neutron: Fix update-alternatives on CentOS 477e233d4 curator: Add wheel to elasticsearch-curator 68a66ead7 Update TOX_CONSTRAINTS_FILE for stable/victoria 264f12533 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/centos.yaml | 40 +++++++++--------- .zuul.d/debian.yaml | 2 +- .zuul.d/project.yaml | 1 - .zuul.d/ubuntu.yaml | 48 +++++++++++----------- .../ceilometer-notification/extend_start.sh | 3 -- .../elasticsearch-curator/Dockerfile.j2 | 5 +-- kolla/common/config.py | 2 +- kolla/template/repos.yaml | 8 ++-- .../notes/bug-1897948-a0eb6d890eea8061.yaml | 6 +++ .../notes/bug-1907213-e0cee8498d19a170.yaml | 13 ++++++ .../notes/nova_compute_daxio-b8655d31df15139a.yaml | 7 ++++ tox.ini | 6 +-- 25 files changed, 174 insertions(+), 107 deletions(-)

1 0

sushy-tools 0.14.0
by no-reply＠openstack.org 11 Jan '21

11 Jan '21

We jubilantly announce the release of: sushy-tools 0.14.0: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. 0.14.0 ^^^^^^ New Features ************ * Adds basic support for Redfish Processor schema. Bug Fixes ********* * Fixes incorrect device name and bus when attaching a virtual floppy. Changes in sushy-tools 0.13.0..0.14.0 ------------------------------------- 2cb8ca7 Add doc/requirements 80b40b5 Provide correct libvirt name/bus for virtual floppy ef0baa7 Adding basic support for processors schema 5d8bec1 Remove lower-constraints job e0d5106 Adding status to ethernet interface template Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 64 ---------------------- .../add-processor-schema-f23195a923f5830f.yaml | 4 ++ releasenotes/notes/floppy-1be04ed78708caf1.yaml | 4 ++ sushy_tools/emulator/main.py | 27 +++++++++ .../emulator/resources/systems/libvirtdriver.py | 53 ++++++++++++++++-- .../emulator/templates/ethernet_interface.json | 4 ++ sushy_tools/emulator/templates/processor.json | 21 +++++++ .../emulator/templates/processors_collection.json | 15 +++++ .../emulator/resources/systems/test_libvirt.py | 26 +++++++++ test-requirements.txt | 3 - tox.ini | 4 ++ zuul.d/project.yaml | 1 - 15 files changed, 188 insertions(+), 74 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ca147b8..7f55f67 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,2 +10,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.2.1 # Apache-2.0 @@ -20 +17,0 @@ munch>=2.1.0 # MIT -reno>=3.1.0 # Apache-2.0

1 0

ironic-python-agent-builder 2.4.0
by no-reply＠openstack.org 11 Jan '21

11 Jan '21

We are satisfied to announce the release of: ironic-python-agent-builder 2.4.0: Tools and scripts to build Ironic Python Agent The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ For more details, please see below. 2.4.0 ^^^^^ New Features ************ * Excess hardware firmware on Debian based agent ramdisks is now automatically removed. * The new element "ironic-ramdisk-base" can be used to build ramdisks without IPA itself or any of its dependencies. * The "ironic-python-agent-builder" CLI now supports "--lzma" flag to compress images with the LZMA algorithm. * Firmware for netronome, amdgpu, qcom, ti-communication, ti- keystone, ueagle-atm, rsi, mrvl, brcm, mediatek, ath10k, rtlwifi are now removed by default. Set "IPA_REMOVE_FIRMWARE" to override. Upgrade Notes ************* * Non-free firmware is now installed by default on Debian DIB builds. Change the available repositories to disable: export DIB_DEBIAN_COMPONENTS=main Bug Fixes ********* * Free firmware is now installed by default on Debian DIB builds. * No longer tries to install "biosdevname" on non Red Hat systems (dropped from Ubuntu after Bionic, never present in Debian). * The DIB-based ramdisk is now always built with SELinux set to permissive. Enabling SELinux may result in broken ramdisks and does not make much sense for IPA anyway. Changes in ironic-python-agent-builder 2.3.0..2.4.0 --------------------------------------------------- dc090b2 Add doc/requirements 1b904b5 Remove firmware from debian based systems b072c15 Fix ELEMENTS_PATH environment variable being overwritten. 6c9c505 Add additional firmware images to be excluded db238b9 Make the debian job voting and start publishing debian images 094aa37 Add ironic-ramdisk-base to build general-purpose ramdisks 0e59d16 Revert "Switch images to CentOS Stream 8" 0d16bee Switch images to CentOS Stream 8 0f62572 Support using lzma for initramfs compression 2c7f7a5 Remove netronome and amdgpu firmware by default e641593 Workaround for latest pip versions 07367ec Clean up package installation ee91153 Run check image jobs on ubuntu focal b6b818f Remove nodeset from ironic-python-agent-build-image-base based jobs 83d628c Repair the previous image name bceeea1 Use more generic TOX_CONSTRAINTS_FILE 5eebab3 Force SELinux to be in permissive mode e8dda18 Add documentation about the available Elements 36a91b7 Set safe version of hacking a97adc4 Support the configuration directory for tinyIPA 46bf9e0 Use centos element for dib on focal Diffstat (except docs and test files) ------------------------------------- dib/extra-hardware/package-installs.yaml | 4 +- dib/ironic-python-agent-ramdisk/element-deps | 3 +- .../environment.d/01-debian-ipa.bash | 8 ++ .../environment.d/10-defaults.bash | 15 +++ .../60-ironic-python-agent-ramdisk-install | 5 +- .../package-installs.yaml | 48 ++++++-- dib/ironic-python-agent-ramdisk/pkg-map | 22 +--- .../post-install.d/99-remove-extra-packages | 11 ++ dib/ironic-ramdisk-base/README.rst | 5 + .../cleanup.d/99-ramdisk-create | 0 dib/ironic-ramdisk-base/element-deps | 3 + ironic_python_agent_builder/__init__.py | 19 ++- .../notes/debian-firmware-1927601ebb779bc4.yaml | 13 +++ ...s-firmware-removal-debian-06c49a8604122b1c.yaml | 5 + .../ironic-ramdisk-base-3bfb9b90ad416891.yaml | 5 + releasenotes/notes/lzma-bf4552b98dd5824a.yaml | 5 + .../notes/no-firmware-e2cb953037a3be8f.yaml | 6 + .../notes/selinux-permissive-a059f42bb66373a1.yaml | 6 + roles/ipa-build-dib-image/tasks/main.yaml | 11 +- test-requirements.txt | 7 +- tinyipa/build-tinyipa.sh | 2 +- tinyipa/build_files/bootlocal.sh | 4 +- ..._constraints.sh => generate_tox_constraints.sh} | 20 ++-- tox.ini | 9 +- zuul.d/ironic-python-agent-builder-jobs.yaml | 26 +++-- zuul.d/project.yaml | 7 +- 28 files changed, 338 insertions(+), 62 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3e816e9..e1f5e01 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.1.0,<4.0.0 # Apache-2.0 @@ -10,4 +10 @@ doc8>=0.6.0 # Apache-2.0 -sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.2.1 # Apache-2.0 -# releasenotes -reno>=3.1.0 # Apache-2.0 +pycodestyle>=2.0.0,<2.7.0 # MIT

1 0

kolla-ansible 11.0.0 (victoria)
by no-reply＠openstack.org 11 Jan '21

11 Jan '21

We are pleased to announce the release of: kolla-ansible 11.0.0: Ansible Deployment of Kolla containers This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 11.0.0 ^^^^^^ Known Issues ************ * Since Ussuri, there is a bug in how Ceph (RBD) is handled with Cinder: the "backend_host" option is missing from the generated configuration for external Ceph. The symptoms are that volumes become unmanageable until extra admin action is taken. This does *not* affect the data plane - running virtual machines are *not* affected. There is a related issue regarding active-active "cinder-volume" services (single-host "cinder-volume" *not* affected), which is that they should not have been configured with "backend_host" in the first place but with "cluster" and proper coordination instead. Some users might have customised their config already to address this issue. The Kolla team is investigating the best way to address this for all its users. In the meantime, please ensure that, before upgrading to Ussuri, the "backend_host" option is set to its previous value (the default was "rbd:volumes") via a config override. For more details please refer to the referenced bug. Do note this issue affects both new deployments and upgrades. LP#1904062 Bug Fixes ********* * OVN will no longer schedule SNAT routers on compute nodes when "neutron_ovn_distributed_fip" is enabled. LP#1901960 * RabbitMQ services are now restarted serially to avoid a split brain. LP#1904702 * Fixes LP#1906796 by adding notice and note loglevels to monasca log- metrics drop configuration * Fixes Swift's stop action. It will no longer try to start "swift- object-updater" container again. LP#1906944 * Fixes an issue with the "kolla-ansible prechecks" command with Docker 20.10. LP#1907436 * Fixes an issue with "kolla-ansible mariadb_recovery" when the "mariadb" container does not exist on one or more hosts. LP#1907658 Changes in kolla-ansible 11.0.0.0rc1..11.0.0 -------------------------------------------- 1f11d2f01 docs: add info on adding and removing hosts 620bb29f1 Use ansible_distribution_release instead of ansible_lsb.codename 10caf4d36 Add `issue` reno for bug #1904062 9b733297f Fix mariadb_recovery when mariadb container is missing 51c14add0 Edit ironic inspector pxe filter driver name none to noop 5634440f4 Do not start swift-object-updater on stop 6bf9456bf docs: Add magnum guide 3a91159c8 Revert "Performance: Use import_tasks in the main plays" f196062d9 Fix an Ansible warning 7284c7efa Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default d0faadf27 [docs] Add python3-venv package to quickstart.rst e31c69ecf [CI] Drop periodics a59192545 Fix prechecks with Docker 20.10.0 1a7478d2f RabbitMQ handler refactored to restart services in serial bb3f62d71 Do not set 'always' tag where unnecessary d22758c37 Performance: Use import_tasks in the main plays 14e08b383 Fix stop containers task in Swift rolling restart 7df4f403f Fix kolla-ansible to work with pyenv-virtualenv e492b580a kibana: Remove 6.x migration from upgrade 0852c7735 CI: add missing --fail argument to curl ffed23d1e [CI] Set 0 swap size 09943dc6c Remove a CentOS IPv6 FIXME meant for Ussuri 1c2b5e036 ovn: Do not schedule SNAT routers on computes 2f7b2fe36 Switch to Victoria images d7ba5efab CI: Temporarily disable rabbitmq internal tls af78e6376 Update TOX_CONSTRAINTS_FILE for stable/victoria effb93ff9 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ansible/action_plugins/merge_yaml.py | 4 +- ansible/group_vars/all.yml | 2 +- ansible/roles/aodh/tasks/register.yml | 1 - ansible/roles/barbican/tasks/register.yml | 1 - ansible/roles/baremetal/defaults/main.yml | 2 +- ansible/roles/blazar/tasks/register.yml | 1 - ansible/roles/ceilometer/tasks/register.yml | 1 - ansible/roles/cinder/tasks/register.yml | 1 - ansible/roles/cloudkitty/tasks/register.yml | 1 - ansible/roles/cyborg/tasks/register.yml | 1 - ansible/roles/designate/tasks/register.yml | 1 - ansible/roles/freezer/tasks/register.yml | 1 - ansible/roles/glance/tasks/register.yml | 1 - ansible/roles/gnocchi/tasks/register.yml | 1 - ansible/roles/heat/tasks/register.yml | 1 - ansible/roles/ironic/defaults/main.yml | 2 +- ansible/roles/ironic/tasks/register.yml | 1 - ansible/roles/karbor/tasks/register.yml | 1 - ansible/roles/keystone/tasks/register.yml | 1 - .../roles/kibana/tasks/migrate-kibana-index.yml | 111 ---------- ansible/roles/kibana/tasks/upgrade.yml | 2 - ansible/roles/kuryr/tasks/register.yml | 1 - ansible/roles/magnum/tasks/register.yml | 1 - ansible/roles/manila/tasks/register.yml | 1 - ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 14 +- ansible/roles/masakari/tasks/register.yml | 1 - ansible/roles/mistral/tasks/register.yml | 1 - ansible/roles/monasca/tasks/register.yml | 1 - .../monasca-log-metrics/log-metrics.conf.j2 | 2 +- ansible/roles/murano/tasks/register.yml | 1 - ansible/roles/neutron/tasks/register.yml | 1 - ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 - ansible/roles/nova/tasks/register.yml | 1 - ansible/roles/octavia/tasks/register.yml | 1 - ansible/roles/ovn/tasks/bootstrap.yml | 9 +- ansible/roles/panko/tasks/register.yml | 1 - ansible/roles/placement/tasks/register.yml | 1 - ansible/roles/prechecks/tasks/service_checks.yml | 2 +- ansible/roles/qinling/tasks/register.yml | 1 - ansible/roles/rabbitmq/handlers/main.yml | 45 +---- ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++ ansible/roles/sahara/tasks/register.yml | 1 - ansible/roles/searchlight/tasks/register.yml | 1 - ansible/roles/senlin/tasks/register.yml | 1 - ansible/roles/solum/tasks/register.yml | 1 - ansible/roles/swift/tasks/register.yml | 1 - ansible/roles/swift/tasks/rolling_upgrade.yml | 41 ++-- ansible/roles/swift/tasks/stop.yml | 2 +- ansible/roles/tacker/tasks/register.yml | 1 - ansible/roles/trove/tasks/register.yml | 1 - ansible/roles/vitrage/tasks/register.yml | 1 - ansible/roles/watcher/tasks/register.yml | 1 - ansible/roles/zun/tasks/register.yml | 1 - etc/kolla/globals.yml | 2 +- .../notes/bug-1901960-363503e11449b53c.yaml | 6 + .../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 + .../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 + .../notes/bug-1906944-38798e1348ff9c97.yaml | 6 + .../notes/bug-1907436-2da50ed38d107127.yaml | 6 + .../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 + .../notes/issue-bug-1904062-ef446343323c8452.yaml | 23 +++ tools/init-runonce | 2 +- tools/kolla-ansible | 8 +- tox.ini | 8 +- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 8 + zuul.d/project.yaml | 13 +- 77 files changed, 448 insertions(+), 275 deletions(-)

1 0

kayobe 9.0.0 (victoria)
by no-reply＠openstack.org 11 Jan '21

11 Jan '21

We are amped to announce the release of: kayobe 9.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.0.0 ^^^^^ Bug Fixes * Fixes a number of issues with using Kayobe on CentOS 8.3. * Fixes an issue with Python setup when venv is not used. See story 2008378 for details. * Fix the implementation of the "kayobe seed hypervisor host package update" command, which was incomplete. See story 2008458 for details. Changes in kayobe 9.0.0.0rc1..9.0.0 ----------------------------------- d6669350 CI: fix race condition in kolla-ansible-host-vars role tests 01b9328d Fix Python setup when venv is not used 9eb982bb Fix overcloud provisioning dc0b8b07 Fix implementation of kayobe seed hypervisor host package update 885dd064 Fixes for CentOS 8.3 b1be865d Update TOX_CONSTRAINTS_FILE for stable/victoria b5b4f740 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ansible/host-package-update.yml | 2 +- ansible/kayobe-target-venv.yml | 2 +- ansible/overcloud-provision.yml | 2 +- dev/tenks-deploy-config-compute.yml | 20 ++++++++++++++------ playbooks/kayobe-overcloud-upgrade-base/run.yml | 14 +++++++------- playbooks/kayobe-seed-upgrade-base/overrides.yml.j2 | 8 ++++++++ playbooks/kayobe-seed-upgrade-base/pre.yml | 8 ++++++++ playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 +++++++ releasenotes/notes/centos-8.3-89d07c8f8db5b17b.yaml | 4 ++++ .../notes/fix-python-setup-5e7ff929a6cab092.yaml | 5 +++++ ...sor-host-package-update-fix-9411205aadc92b8f.yaml | 6 ++++++ requirements.yml | 4 ++-- setup.cfg | 3 +++ test-requirements.txt | 4 ++-- tox.ini | 10 +++++----- 17 files changed, 76 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ddaa6572..194c468c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ doc8 # Apache-2.0 -docker<3 # Apache-2.0 +docker # Apache-2.0 @@ -14 +14 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko<2.5.0 +paramiko

1 0

kolla-ansible 9.3.0 (train)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We are chuffed to announce the release of: kolla-ansible 9.3.0: Ansible Deployment of Kolla containers This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 9.3.0 ^^^^^ New Features ************ * Adds a new flag, "docker_disable_default_iptables_rules", which defaults to "no". Docker is manipulating iptables rules by default to provide network isolation, and this might cause problems if the host already has an iptables based firewall. A common problem is that Docker sets the default policy of the "FORWARD" chain in the "filter" to "DROP". Setting "docker_disable_default_iptables_rules" to "yes" will disable Docker's iptables manipulation. This feature will be enabled by default from the Victoria 11.0.0 release. * Improves performance of the "common" role by generating all fluentd configuration in a single file. * Improves performance of the "common" role by generating all logrotate configuration in a single file. Upgrade Notes ************* * The default value of "REST_API_REQUIRED_SETTINGS" was synchronized with Horizon. You may want to review settings exposed by the updated configuration. Security Issues *************** * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". Bug Fixes ********* * Add support to use bifrost-deploy behind proxy. It uses existing container_proxy variable. * Fixes handling of */dev/kvm* permissions to be more robust against host-level actions. LP#1681461 * Rework keystone fernet bootstrap which had tendencies to fail on multinode setups. See bug 1846789 for details. * IPv6 fully-routed topology (/128 addressing) is now allowed (where applicable). LP#1848941 * Fixes deployment of fluentd without any enabled OpenStack services. LP#1867953 * This patch adds "kolla-ansible" internal logrotate config for Logstash. Logstash 2.4 uses integrated in container logrotate configuration which tries to rotate logs in /var/log/logstash while "kolla-ansible" deployed Logstash logs are in /var/log/kolla/logstash. LP#1886787 * Fixes "--configdir" parameter to apply to default "passwords.yml" location. LP#1887180 * "fluentd" is now logging to "/var/log/kolla/fluentd/fluentd.log" instead of "stdout". LP#1888852 * Fixes "deploy-containers" action missing for the Masakari role. LP#1889611 * An issue has been fixed when "keystone" container would be stuck in restart loop with a message that fernet key is stale. LP#1895723 * Fixes "haproxy_single_service_split" template to work with default for "mode" ("http"). LP#1896591 * Fixed invalid fernet cron file path on Debian/Ubuntu from "/var/spool/cron/crontabs/root/fernet-cron" to "/var/spool/cron/crontabs/root". LP#1898765 * Add with_first_found on placement for placement-api wsgi configuration to allow overwrite from users. LP#1898766 * RabbitMQ services are now restarted serially to avoid a split brain. LP#1904702 * Fixes LP#1906796 by adding notice and note loglevels to monasca log- metrics drop configuration * Fixes Swift's stop action. It will no longer try to start "swift- object-updater" container again. LP#1906944 * Fixes an issue with the "kolla-ansible prechecks" command with Docker 20.10. LP#1907436 * Fixes an issue with "kolla-ansible mariadb_recovery" when the "mariadb" container does not exist on one or more hosts. LP#1907658 * fix deploy freezer failed when use kolla_dev_mod LP#1888242 * Fixes issues with some CloudKitty commands trying to connect to an external TLS endpoint using HTTP. LP#1888544 * Fixes an issue where Docker may fail to start if "iptables" is not installed. LP#1899060 * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". * Fixes an issue during deleting evacuated instances with encrypted block devices. LP#1891462 * Fixes an issue where Keystone Fernet key rotation may fail due to permission denied error if the Keystone rotation happens before the Keystone container starts. LP#1888512 * Fixes an issue with Keystone startup when Fernet key rotation does not occur within the configured interval. This may happen due to one of the Keystone hosts being down at the scheduled time of rotation, or due to uneven intervals between cron jobs. LP#1895723 * Fixes an issue where Grafana instances would race to bootstrap the Grafana DB. See LP#1888681. * Fixes LP#1892210 where the number of open connections to Memcached from "neutron-server" would grow over time until reaching the maximum set by "memcached_connection_limit" (5000 by default), at which point the Memcached instance would stop working. * An issue where when Kafka default topic creation was used to create a Kafka topic, no redundant replicas were created in a multi- node cluster. LP#1888522. This affects Monasca which uses Kafka, and was previously masked by the legacy Kafka client used by Monasca which has since been upgraded in Ussuri. Monasca users with multi- node Kafka clusters should consultant the Kafka documentation to increase the number of replicas. * Fixes an issue where the "br_netfilter" kernel module was not loaded on compute hosts. LP#1886796 * Prevents adding a new Keystone host to an existing cluster when not targeting all Keystone hosts (e.g. due to "--limit" or "-- serial" arguments), to avoid overwriting existing Fernet keys. LP#1891364 * Reduce the use of SQLAlchemy connection pooling, to improve service reliability during a failover of the controller with the internal VIP. LP#1896635 * No longer configures the Prometheus OpenStack exporter to use the "prometheus" Docker volume, which was never required. * Updates the default value of "REST_API_REQUIRED_SETTINGS" in Horizon "local_settings", which enables some features such as selecting the default boot source for instances. LP#1891024 Changes in kolla-ansible 9.2.0..9.3.0 ------------------------------------- 060267ec8 Use ansible_distribution_release instead of ansible_lsb.codename 0719b78dc Fix mariadb_recovery when mariadb container is missing bc6d69192 Backport ignore_missing support for kolla_docker 1c0f26818 Edit ironic inspector pxe filter driver name none to noop 7b55676f2 Do not start swift-object-updater on stop c54d34595 docs: Add magnum guide 5744a6273 Revert "Performance: Use import_tasks in the main plays" 020f9093f Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default c34bc558c CI: Avoid tox (and clean up gate setup) 190d8a17e [CI] Drop periodics and multinode gating c34bf4529 Fix prechecks with Docker 20.10.0 and py27 job 6323f8096 RabbitMQ handler refactored to restart services in serial 46f27a8dc Do not set 'always' tag where unnecessary ae2b7fa18 Performance: Use import_tasks in the main plays 492fc8f9c Fix stop containers task in Swift rolling restart 1aa3ab5e5 Fix kolla-ansible to work with pyenv-virtualenv 2418a317a [CI] Set 0 swap size 6342da230 Fix permission denied during Fernet key rotation 5ede5d9db Fix keystone-startup.sh - remove Fernet key age check dc497edc7 Fix fernet cron path on Ubuntu/Debian 70fe644bc baremetal: Install iptables for Docker if enabled 4c25aedb0 replace internal with openstack_interface dd37b867c Delete the /var/log/kolla directory should use sudo 55f2c1c34 Performance: use a single config file for fluentd 0eeff529f Performance: optimize genconfig 059bc5c27 docs: more info on migrating from CentOS 7 to 8 838af93b5 Performance: use a single config file for logrotate 55b2eee95 Apply bool filter to all enable_prometheus_* variables 8be6606de Remove duplicate groups 51b69e9b1 docs: Add information on migrating to CentOS 8 c92325d01 Performance: use import_tasks for register and bootstrap ad9e82a99 Allow overwrite of placement-api wsgi config 6d03ac94c Add 'baremetal' to mechanism_drivers when using ironic+linuxbridge 903efc5a9 Reduce the use of SQLAlchemy connection pooling ecd899c9a Fix keystone-startup.sh b04819dd9 Fix default mode in haproxy_single_service_split 475a8ff0a Remove unused configuration for prometheus-openstack-exporter d1f1c5c33 Performance: replace unconditional include_tasks with import_tasks 5a9c89479 Performance: remove one include_tasks in nova-cell 55fe8c189 Synchronize REST_API_REQUIRED_SETTINGS with Horizon b27e0741b Fix test-ironic.sh not catching errors c5e8162ff Add default value for kolla_internal_address variable 024ce8be9 Fix external mariadb documentation for database_user c0e20dfd8 [CI] Fix Bifrost CentOS 8 job 8cd7b4d1a Fix fernet bootstrap and key distribution - follow up ac38a4875 Fix keystone fernet bootstrap 1432aa007 add region name for tasks 2750a0835 Prevent overwriting existing Keystone Fernet keys 1ae811932 change the timezone precheck task's condition dcc74b45e Add workaround for keystonemiddleware/neutron memcached issue 06c6e14e5 Fix kolla-ansible not reflect environment changed ad42c70f9 Add cinder auth config to nova-cell nova.conf.j2 27919beee Fix ownership and permissions of admin-openrc.sh f22643ff5 CI: enable Ansible SSH pipelining 84ccebf16 Mount /etc/timezone based on host OS 421246a33 Add support to use bifrost-deploy behind proxy 59cd154c1 Add missing mistral services log files 97f601cbe Fix fluentd warnings caused by "type copy" cf733fdde [CI] Temporarily block new Ansible 0c3bd2532 [docker] Added a new flag to disable default iptables rules df06eab19 Fix actions for Aodh and Swift 751d51b53 Fix play hosts for ironic, monasca, neutron, nova cc2889090 Fix kolla_address in IPv6 fully-routed topo case 4d53605ac Fix Masakari role missing deploy-containers 560d27839 Performance: use import_tasks for check-containers.yml 9648a0aa4 fluentd: log to a file instead of stdout f2031fc8a Improve Grafana DB bootstrap 410e66eec Set Kafka default replication factor 5433cbd8c Fix some CloudKitty API responses when behind SSL efbcf5285 Performance: remove unnecessary conditions from includes 3525b2c36 Update glance configuration file for backend 724c1c807 CI: add prometheus-efk scenario c30ed83fb fix deploy freezer failed when kolla_dev_mod enabled 574257dc2 Make /dev/kvm permissions handling more robust 0de9de494 Fix deprecation warnings in fluentd 678e24e5a Fix deployment of fluentd without any enabled OpenStack services 94c27865c Support editable virtualenv installation for development 6b51404a9 Manila - adjust logic for Open vSwitch configuration generation 0e353d3f5 Fix Logstash 2.4 log rotation 2aba54b88 Use openstack_tag for elasticsearch-curator image 8d7cc7239 Evaluate PASSWORDS_FILE later 921585a82 Load br_netfilter module in nova-cell role Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 7 +- ansible/library/kolla_docker.py | 7 +- ansible/nova.yml | 2 + ansible/post-deploy.yml | 9 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/bootstrap.yml | 2 +- ansible/roles/aodh/tasks/config.yml | 3 - ansible/roles/aodh/tasks/deploy.yml | 14 +- ansible/roles/aodh/tasks/reconfigure.yml | 2 +- ansible/roles/aodh/tasks/register.yml | 1 - ansible/roles/aodh/tasks/stop.yml | 6 + ansible/roles/aodh/tasks/upgrade.yml | 6 +- ansible/roles/aodh/templates/aodh.conf.j2 | 2 + ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/bootstrap.yml | 2 +- ansible/roles/barbican/tasks/config.yml | 3 - ansible/roles/barbican/tasks/deploy.yml | 13 +- ansible/roles/barbican/tasks/reconfigure.yml | 2 +- ansible/roles/barbican/tasks/register.yml | 1 - ansible/roles/barbican/tasks/upgrade.yml | 6 +- ansible/roles/baremetal/defaults/main.yml | 4 +- .../roles/baremetal/tasks/bootstrap-servers.yml | 6 +- ansible/roles/baremetal/tasks/post-install.yml | 13 + ansible/roles/bifrost/tasks/deploy.yml | 6 +- ansible/roles/bifrost/tasks/reconfigure.yml | 2 +- ansible/roles/bifrost/tasks/start.yml | 1 + ansible/roles/bifrost/tasks/upgrade.yml | 4 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/bootstrap.yml | 2 +- ansible/roles/blazar/tasks/config.yml | 3 - ansible/roles/blazar/tasks/deploy.yml | 12 +- ansible/roles/blazar/tasks/reconfigure.yml | 2 +- ansible/roles/blazar/tasks/register.yml | 1 - ansible/roles/blazar/tasks/upgrade.yml | 6 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 + ansible/roles/ceilometer/defaults/main.yml | 8 +- ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +- ansible/roles/ceilometer/tasks/config.yml | 3 - ansible/roles/ceilometer/tasks/deploy.yml | 12 +- ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +- ansible/roles/ceilometer/tasks/register.yml | 1 - ansible/roles/ceilometer/tasks/upgrade.yml | 6 +- ansible/roles/chrony/defaults/main.yml | 2 +- ansible/roles/chrony/tasks/config.yml | 3 - ansible/roles/chrony/tasks/deploy.yml | 4 +- ansible/roles/chrony/tasks/reconfigure.yml | 2 +- ansible/roles/chrony/tasks/upgrade.yml | 2 +- ansible/roles/cinder/defaults/main.yml | 8 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 +- ansible/roles/cinder/tasks/config.yml | 3 - ansible/roles/cinder/tasks/deploy.yml | 21 +- ansible/roles/cinder/tasks/reconfigure.yml | 2 +- ansible/roles/cinder/tasks/register.yml | 1 - ansible/roles/cinder/tasks/upgrade.yml | 6 +- ansible/roles/cinder/templates/cinder.conf.j2 | 2 + ansible/roles/cloudkitty/defaults/main.yml | 4 +- ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +- ansible/roles/cloudkitty/tasks/config.yml | 3 - ansible/roles/cloudkitty/tasks/deploy.yml | 12 +- ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +- ansible/roles/cloudkitty/tasks/register.yml | 1 - ansible/roles/cloudkitty/tasks/upgrade.yml | 6 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 + ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/config.yml | 3 - ansible/roles/collectd/tasks/deploy.yml | 4 +- ansible/roles/collectd/tasks/reconfigure.yml | 2 +- ansible/roles/collectd/tasks/upgrade.yml | 4 +- ansible/roles/common/defaults/main.yml | 97 ++++- ansible/roles/common/filter_plugins/filters.py | 22 ++ ansible/roles/common/tasks/config.yml | 409 ++++++++------------- ansible/roles/common/tasks/deploy.yml | 6 +- ansible/roles/common/tasks/reconfigure.yml | 2 +- ansible/roles/common/tasks/upgrade.yml | 4 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 46 +-- .../common/templates/conf/input/01-syslog.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 54 +-- .../templates/cron-logrotate-fluentd.conf.j2 | 3 + .../common/templates/cron-logrotate-global.conf.j2 | 5 +- .../templates/cron-logrotate-logstash.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 78 +--- ansible/roles/common/templates/fluentd.json.j2 | 54 +-- ansible/roles/common/templates/td-agent.conf.j2 | 49 ++- ansible/roles/congress/defaults/main.yml | 6 +- ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/bootstrap.yml | 2 +- ansible/roles/cyborg/tasks/config.yml | 3 - ansible/roles/cyborg/tasks/deploy.yml | 13 +- ansible/roles/cyborg/tasks/reconfigure.yml | 2 +- ansible/roles/cyborg/tasks/register.yml | 1 - ansible/roles/cyborg/tasks/upgrade.yml | 6 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 + ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/bootstrap.yml | 2 +- ansible/roles/designate/tasks/config.yml | 3 - ansible/roles/designate/tasks/deploy.yml | 20 +- ansible/roles/designate/tasks/reconfigure.yml | 2 +- ansible/roles/designate/tasks/register.yml | 1 - ansible/roles/designate/tasks/update_pools.yml | 3 +- ansible/roles/designate/tasks/upgrade.yml | 8 +- ansible/roles/elasticsearch/defaults/main.yml | 5 +- ansible/roles/elasticsearch/tasks/config.yml | 3 - ansible/roles/elasticsearch/tasks/deploy.yml | 6 +- ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 6 +- ansible/roles/etcd/defaults/main.yml | 2 +- ansible/roles/etcd/tasks/config.yml | 3 - ansible/roles/etcd/tasks/deploy.yml | 4 +- ansible/roles/etcd/tasks/reconfigure.yml | 2 +- ansible/roles/etcd/tasks/upgrade.yml | 4 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/bootstrap.yml | 4 +- ansible/roles/freezer/tasks/config.yml | 3 - ansible/roles/freezer/tasks/deploy.yml | 15 +- ansible/roles/freezer/tasks/reconfigure.yml | 2 +- ansible/roles/freezer/tasks/register.yml | 1 - ansible/roles/freezer/tasks/upgrade.yml | 6 +- ansible/roles/freezer/templates/freezer.conf.j2 | 2 + ansible/roles/glance/defaults/main.yml | 4 +- ansible/roles/glance/tasks/bootstrap.yml | 2 +- ansible/roles/glance/tasks/config.yml | 3 - ansible/roles/glance/tasks/deploy.yml | 14 +- ansible/roles/glance/tasks/legacy_upgrade.yml | 6 +- ansible/roles/glance/tasks/reconfigure.yml | 2 +- ansible/roles/glance/tasks/register.yml | 1 - ansible/roles/glance/tasks/rolling_upgrade.yml | 2 + ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +- ansible/roles/gnocchi/tasks/config.yml | 3 - ansible/roles/gnocchi/tasks/deploy.yml | 13 +- ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +- ansible/roles/gnocchi/tasks/register.yml | 1 - ansible/roles/gnocchi/tasks/upgrade.yml | 6 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 3 +- ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/handlers/main.yml | 39 +- ansible/roles/grafana/tasks/config.yml | 3 - ansible/roles/grafana/tasks/deploy.yml | 8 +- ansible/roles/grafana/tasks/reconfigure.yml | 2 +- ansible/roles/grafana/tasks/upgrade.yml | 30 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 4 +- ansible/roles/haproxy/tasks/config.yml | 3 - ansible/roles/haproxy/tasks/deploy.yml | 6 +- ansible/roles/haproxy/tasks/reconfigure.yml | 2 +- ansible/roles/haproxy/tasks/upgrade.yml | 4 +- ansible/roles/heat/defaults/main.yml | 6 +- ansible/roles/heat/tasks/bootstrap.yml | 2 +- ansible/roles/heat/tasks/config.yml | 3 - ansible/roles/heat/tasks/deploy.yml | 16 +- ansible/roles/heat/tasks/reconfigure.yml | 2 +- ansible/roles/heat/tasks/register.yml | 1 - ansible/roles/heat/tasks/upgrade.yml | 6 +- ansible/roles/heat/templates/heat.conf.j2 | 2 + ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/bootstrap.yml | 2 +- ansible/roles/horizon/tasks/config.yml | 3 - ansible/roles/horizon/tasks/deploy.yml | 4 +- ansible/roles/horizon/tasks/reconfigure.yml | 2 +- ansible/roles/horizon/tasks/upgrade.yml | 4 +- ansible/roles/horizon/templates/local_settings.j2 | 12 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/config.yml | 3 - ansible/roles/influxdb/tasks/deploy.yml | 4 +- ansible/roles/influxdb/tasks/reconfigure.yml | 2 +- ansible/roles/influxdb/tasks/upgrade.yml | 4 +- ansible/roles/ironic/defaults/main.yml | 14 +- ansible/roles/ironic/tasks/bootstrap.yml | 2 +- ansible/roles/ironic/tasks/config.yml | 3 - ansible/roles/ironic/tasks/deploy.yml | 22 +- ansible/roles/ironic/tasks/legacy_upgrade.yml | 8 +- ansible/roles/ironic/tasks/reconfigure.yml | 2 +- ansible/roles/ironic/tasks/register.yml | 1 - ansible/roles/ironic/tasks/rolling_upgrade.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/ironic/templates/ironic.conf.j2 | 2 + ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/config.yml | 3 - ansible/roles/iscsi/tasks/deploy.yml | 6 +- ansible/roles/iscsi/tasks/reconfigure.yml | 2 +- ansible/roles/iscsi/tasks/upgrade.yml | 2 +- ansible/roles/kafka/defaults/main.yml | 2 +- ansible/roles/kafka/tasks/config.yml | 3 - ansible/roles/kafka/tasks/deploy.yml | 4 +- ansible/roles/kafka/tasks/reconfigure.yml | 2 +- ansible/roles/kafka/tasks/upgrade.yml | 4 +- .../kafka/templates/kafka.server.properties.j2 | 1 + ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/bootstrap.yml | 2 +- ansible/roles/karbor/tasks/config.yml | 3 - ansible/roles/karbor/tasks/deploy.yml | 13 +- ansible/roles/karbor/tasks/reconfigure.yml | 2 +- ansible/roles/karbor/tasks/register.yml | 1 - ansible/roles/karbor/tasks/upgrade.yml | 6 +- ansible/roles/karbor/templates/karbor.conf.j2 | 2 + ansible/roles/keystone/defaults/main.yml | 6 +- ansible/roles/keystone/handlers/main.yml | 12 +- ansible/roles/keystone/tasks/bootstrap.yml | 2 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 54 +++ ansible/roles/keystone/tasks/config.yml | 17 +- ansible/roles/keystone/tasks/deploy.yml | 12 +- ansible/roles/keystone/tasks/distribute_fernet.yml | 19 + ansible/roles/keystone/tasks/init_fernet.yml | 27 -- ansible/roles/keystone/tasks/reconfigure.yml | 2 +- ansible/roles/keystone/tasks/register.yml | 2 +- ansible/roles/keystone/tasks/upgrade.yml | 4 +- .../keystone/templates/fernet-node-sync.sh.j2 | 28 +- ansible/roles/keystone/templates/fernet-push.sh.j2 | 3 + .../roles/keystone/templates/fernet-rotate.sh.j2 | 3 + .../keystone/templates/keystone-fernet.json.j2 | 9 +- .../roles/keystone/templates/keystone-ssh.json.j2 | 7 + .../keystone/templates/keystone-startup.sh.j2 | 24 ++ ansible/roles/keystone/templates/keystone.conf.j2 | 2 + ansible/roles/keystone/templates/keystone.json.j2 | 9 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/config.yml | 3 - ansible/roles/kibana/tasks/deploy.yml | 4 +- ansible/roles/kibana/tasks/reconfigure.yml | 2 +- ansible/roles/kibana/tasks/upgrade.yml | 4 +- ansible/roles/kuryr/defaults/main.yml | 2 +- ansible/roles/kuryr/tasks/config.yml | 3 - ansible/roles/kuryr/tasks/deploy.yml | 6 +- ansible/roles/kuryr/tasks/reconfigure.yml | 2 +- ansible/roles/kuryr/tasks/register.yml | 1 - ansible/roles/kuryr/tasks/upgrade.yml | 4 +- ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 +- ansible/roles/magnum/tasks/config.yml | 3 - ansible/roles/magnum/tasks/deploy.yml | 12 +- ansible/roles/magnum/tasks/reconfigure.yml | 2 +- ansible/roles/magnum/tasks/register.yml | 4 +- ansible/roles/magnum/tasks/upgrade.yml | 6 +- ansible/roles/magnum/templates/magnum.conf.j2 | 2 + ansible/roles/manila/defaults/main.yml | 8 +- ansible/roles/manila/tasks/bootstrap.yml | 2 +- ansible/roles/manila/tasks/config.yml | 3 - ansible/roles/manila/tasks/deploy.yml | 14 +- ansible/roles/manila/tasks/reconfigure.yml | 2 +- ansible/roles/manila/tasks/register.yml | 1 - ansible/roles/manila/tasks/upgrade.yml | 6 +- ansible/roles/manila/templates/manila.conf.j2 | 2 + ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/tasks/bootstrap.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 3 - ansible/roles/mariadb/tasks/deploy.yml | 10 +- ansible/roles/mariadb/tasks/reconfigure.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +- ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/bootstrap.yml | 2 +- ansible/roles/masakari/tasks/check-containers.yml | 17 + ansible/roles/masakari/tasks/config.yml | 18 - ansible/roles/masakari/tasks/deploy-containers.yml | 2 + ansible/roles/masakari/tasks/deploy.yml | 13 +- ansible/roles/masakari/tasks/reconfigure.yml | 2 +- ansible/roles/masakari/tasks/register.yml | 1 - ansible/roles/masakari/tasks/upgrade.yml | 6 +- ansible/roles/masakari/templates/masakari.conf.j2 | 2 + ansible/roles/memcached/defaults/main.yml | 2 +- ansible/roles/memcached/tasks/config.yml | 3 - ansible/roles/memcached/tasks/deploy.yml | 4 +- ansible/roles/memcached/tasks/reconfigure.yml | 2 +- ansible/roles/memcached/tasks/upgrade.yml | 4 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/bootstrap.yml | 2 +- ansible/roles/mistral/tasks/config.yml | 3 - ansible/roles/mistral/tasks/deploy.yml | 14 +- ansible/roles/mistral/tasks/reconfigure.yml | 2 +- ansible/roles/mistral/tasks/register.yml | 1 - ansible/roles/mistral/tasks/upgrade.yml | 6 +- ansible/roles/mistral/templates/mistral.conf.j2 | 2 + ansible/roles/monasca/defaults/main.yml | 24 +- ansible/roles/monasca/handlers/main.yml | 39 +- ansible/roles/monasca/tasks/bootstrap.yml | 2 +- ansible/roles/monasca/tasks/config.yml | 3 - ansible/roles/monasca/tasks/deploy.yml | 37 +- ansible/roles/monasca/tasks/reconfigure.yml | 2 +- ansible/roles/monasca/tasks/register.yml | 1 - ansible/roles/monasca/tasks/upgrade.yml | 35 +- .../monasca/templates/monasca-api/api.conf.j2 | 2 + .../monasca-log-metrics/log-metrics.conf.j2 | 2 +- ansible/roles/mongodb/defaults/main.yml | 2 +- ansible/roles/mongodb/tasks/config.yml | 2 +- ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/config.yml | 3 - ansible/roles/multipathd/tasks/deploy.yml | 6 +- ansible/roles/multipathd/tasks/reconfigure.yml | 2 +- ansible/roles/multipathd/tasks/upgrade.yml | 6 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/bootstrap.yml | 2 +- ansible/roles/murano/tasks/config.yml | 3 - ansible/roles/murano/tasks/deploy.yml | 16 +- ansible/roles/murano/tasks/reconfigure.yml | 2 +- ansible/roles/murano/tasks/register.yml | 1 - ansible/roles/murano/tasks/upgrade.yml | 8 +- ansible/roles/murano/templates/murano.conf.j2 | 2 + ansible/roles/neutron/defaults/main.yml | 24 +- ansible/roles/neutron/tasks/bootstrap.yml | 2 +- ansible/roles/neutron/tasks/check-containers.yml | 1 + ansible/roles/neutron/tasks/config.yml | 3 - ansible/roles/neutron/tasks/deploy.yml | 12 +- ansible/roles/neutron/tasks/legacy_upgrade.yml | 8 +- ansible/roles/neutron/tasks/reconfigure.yml | 2 +- ansible/roles/neutron/tasks/register.yml | 1 - ansible/roles/neutron/tasks/rolling_upgrade.yml | 6 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 5 + ansible/roles/nova-cell/defaults/main.yml | 23 +- ansible/roles/nova-cell/tasks/config-host.yml | 36 ++ .../roles/nova-cell/tasks/config-libvirt-tls.yml | 48 ++- ansible/roles/nova-cell/tasks/config.yml | 35 +- ansible/roles/nova-cell/tasks/deploy.yml | 6 +- .../roles/nova-cell/tasks/discover_computes.yml | 2 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 - ansible/roles/nova-cell/tasks/reconfigure.yml | 2 +- ansible/roles/nova-cell/tasks/rolling_upgrade.yml | 6 +- ansible/roles/nova-cell/tasks/upgrade.yml | 2 +- .../nova-cell/templates/99-kolla-kvm.rules.j2 | 4 + ansible/roles/nova-cell/templates/nova.conf.j2 | 12 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/config.yml | 3 - ansible/roles/nova/tasks/deploy.yml | 7 +- ansible/roles/nova/tasks/reconfigure.yml | 2 +- ansible/roles/nova/tasks/register.yml | 1 - ansible/roles/nova/tasks/rolling_upgrade.yml | 4 +- ansible/roles/nova/tasks/upgrade.yml | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/defaults/main.yml | 8 +- ansible/roles/octavia/tasks/bootstrap.yml | 2 +- ansible/roles/octavia/tasks/config.yml | 3 - ansible/roles/octavia/tasks/deploy.yml | 14 +- ansible/roles/octavia/tasks/reconfigure.yml | 2 +- ansible/roles/octavia/tasks/register.yml | 3 +- ansible/roles/octavia/tasks/upgrade.yml | 6 +- ansible/roles/octavia/templates/octavia.conf.j2 | 2 + ansible/roles/opendaylight/tasks/config.yml | 3 - ansible/roles/opendaylight/tasks/deploy.yml | 6 +- ansible/roles/opendaylight/tasks/reconfigure.yml | 2 +- ansible/roles/opendaylight/tasks/upgrade.yml | 6 +- ansible/roles/openvswitch/defaults/main.yml | 4 +- ansible/roles/openvswitch/tasks/config.yml | 7 +- ansible/roles/openvswitch/tasks/deploy.yml | 8 +- ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +- ansible/roles/openvswitch/tasks/upgrade.yml | 8 +- ansible/roles/ovs-dpdk/defaults/main.yml | 4 +- ansible/roles/ovs-dpdk/tasks/config.yml | 3 - ansible/roles/ovs-dpdk/tasks/deploy.yml | 4 +- ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +- ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +- ansible/roles/panko/defaults/main.yml | 2 +- ansible/roles/panko/tasks/bootstrap.yml | 2 +- ansible/roles/panko/tasks/config.yml | 3 - ansible/roles/panko/tasks/deploy.yml | 8 +- ansible/roles/panko/tasks/reconfigure.yml | 2 +- ansible/roles/panko/tasks/register.yml | 1 - ansible/roles/panko/tasks/upgrade.yml | 6 +- ansible/roles/panko/templates/panko.conf.j2 | 2 + ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/bootstrap.yml | 2 +- ansible/roles/placement/tasks/config.yml | 9 +- ansible/roles/placement/tasks/deploy.yml | 10 +- ansible/roles/placement/tasks/reconfigure.yml | 2 +- ansible/roles/placement/tasks/register.yml | 1 - ansible/roles/placement/tasks/upgrade.yml | 10 +- .../roles/placement/templates/placement.conf.j2 | 3 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/main.yml | 10 +- ansible/roles/prechecks/tasks/service_checks.yml | 2 +- ansible/roles/prometheus/defaults/main.yml | 27 +- ansible/roles/prometheus/tasks/config.yml | 3 - ansible/roles/prometheus/tasks/deploy.yml | 6 +- ansible/roles/prometheus/tasks/reconfigure.yml | 2 +- ansible/roles/prometheus/tasks/upgrade.yml | 4 +- .../prometheus-openstack-exporter.json.j2 | 5 - .../prometheus/templates/prometheus-server.json.j2 | 2 +- ansible/roles/qdrouterd/defaults/main.yml | 2 +- ansible/roles/qdrouterd/tasks/config.yml | 3 - ansible/roles/qdrouterd/tasks/deploy.yml | 6 +- ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +- ansible/roles/qdrouterd/tasks/upgrade.yml | 4 +- ansible/roles/qinling/defaults/main.yml | 4 +- ansible/roles/qinling/tasks/bootstrap.yml | 2 +- ansible/roles/qinling/tasks/config.yml | 3 - ansible/roles/qinling/tasks/deploy.yml | 12 +- ansible/roles/qinling/tasks/reconfigure.yml | 2 +- ansible/roles/qinling/tasks/register.yml | 1 - ansible/roles/qinling/tasks/upgrade.yml | 6 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 + ansible/roles/rabbitmq/defaults/main.yml | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 43 +-- ansible/roles/rabbitmq/tasks/check-containers.yml | 3 +- ansible/roles/rabbitmq/tasks/config.yml | 18 +- ansible/roles/rabbitmq/tasks/deploy.yml | 6 +- ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +- ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++ ansible/roles/rabbitmq/tasks/upgrade.yml | 4 +- ansible/roles/rally/defaults/main.yml | 2 +- ansible/roles/rally/tasks/bootstrap.yml | 2 +- ansible/roles/rally/tasks/config.yml | 3 - ansible/roles/rally/tasks/deploy.yml | 6 +- ansible/roles/rally/tasks/reconfigure.yml | 2 +- ansible/roles/rally/tasks/upgrade.yml | 6 +- ansible/roles/rally/templates/rally.conf.j2 | 2 + ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/config.yml | 3 - ansible/roles/redis/tasks/deploy.yml | 4 +- ansible/roles/redis/tasks/reconfigure.yml | 2 +- ansible/roles/redis/tasks/upgrade.yml | 4 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/bootstrap.yml | 2 +- ansible/roles/sahara/tasks/config.yml | 3 - ansible/roles/sahara/tasks/deploy.yml | 12 +- ansible/roles/sahara/tasks/reconfigure.yml | 2 +- ansible/roles/sahara/tasks/register.yml | 1 - ansible/roles/sahara/tasks/upgrade.yml | 6 +- ansible/roles/sahara/templates/sahara.conf.j2 | 2 + ansible/roles/searchlight/defaults/main.yml | 4 +- ansible/roles/searchlight/tasks/bootstrap.yml | 2 +- ansible/roles/searchlight/tasks/config.yml | 3 - ansible/roles/searchlight/tasks/deploy.yml | 8 +- ansible/roles/searchlight/tasks/reconfigure.yml | 2 +- ansible/roles/searchlight/tasks/register.yml | 1 - ansible/roles/searchlight/tasks/upgrade.yml | 6 +- ansible/roles/senlin/defaults/main.yml | 4 +- ansible/roles/senlin/tasks/bootstrap.yml | 2 +- ansible/roles/senlin/tasks/config.yml | 3 - ansible/roles/senlin/tasks/deploy.yml | 12 +- ansible/roles/senlin/tasks/reconfigure.yml | 2 +- ansible/roles/senlin/tasks/register.yml | 1 - ansible/roles/senlin/tasks/upgrade.yml | 6 +- ansible/roles/senlin/templates/senlin.conf.j2 | 2 + ansible/roles/skydive/defaults/main.yml | 4 +- ansible/roles/skydive/tasks/config.yml | 3 - ansible/roles/skydive/tasks/deploy.yml | 6 +- ansible/roles/skydive/tasks/reconfigure.yml | 2 +- ansible/roles/skydive/tasks/upgrade.yml | 4 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/bootstrap.yml | 2 +- ansible/roles/solum/tasks/config.yml | 3 - ansible/roles/solum/tasks/deploy.yml | 14 +- ansible/roles/solum/tasks/reconfigure.yml | 2 +- ansible/roles/solum/tasks/register.yml | 1 - ansible/roles/solum/tasks/upgrade.yml | 6 +- ansible/roles/solum/templates/solum.conf.j2 | 2 + ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/config.yml | 3 - ansible/roles/storm/tasks/deploy.yml | 4 +- ansible/roles/storm/tasks/reconfigure.yml | 2 +- ansible/roles/storm/tasks/upgrade.yml | 2 +- ansible/roles/swift/tasks/deploy-containers.yml | 2 + ansible/roles/swift/tasks/deploy.yml | 8 +- ansible/roles/swift/tasks/legacy_upgrade.yml | 4 +- ansible/roles/swift/tasks/reconfigure.yml | 2 +- ansible/roles/swift/tasks/register.yml | 1 - ansible/roles/swift/tasks/rolling_upgrade.yml | 43 ++- ansible/roles/swift/tasks/stop.yml | 2 +- ansible/roles/tacker/defaults/main.yml | 4 +- ansible/roles/tacker/tasks/bootstrap.yml | 2 +- ansible/roles/tacker/tasks/config.yml | 3 - ansible/roles/tacker/tasks/deploy.yml | 14 +- ansible/roles/tacker/tasks/reconfigure.yml | 2 +- ansible/roles/tacker/tasks/register.yml | 1 - ansible/roles/tacker/tasks/upgrade.yml | 6 +- ansible/roles/tacker/templates/tacker.conf.j2 | 2 + ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/config.yml | 3 - ansible/roles/telegraf/tasks/deploy.yml | 4 +- ansible/roles/telegraf/tasks/reconfigure.yml | 2 +- ansible/roles/telegraf/tasks/upgrade.yml | 4 +- ansible/roles/tempest/defaults/main.yml | 2 +- ansible/roles/tempest/tasks/config.yml | 3 - ansible/roles/tempest/tasks/deploy.yml | 4 +- ansible/roles/tempest/tasks/reconfigure.yml | 2 +- ansible/roles/tempest/tasks/upgrade.yml | 4 +- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/bootstrap.yml | 2 +- ansible/roles/trove/tasks/config.yml | 3 - ansible/roles/trove/tasks/deploy.yml | 13 +- ansible/roles/trove/tasks/reconfigure.yml | 2 +- ansible/roles/trove/tasks/register.yml | 1 - ansible/roles/trove/tasks/upgrade.yml | 6 +- .../roles/trove/templates/trove-conductor.conf.j2 | 2 + .../trove/templates/trove-taskmanager.conf.j2 | 2 + ansible/roles/trove/templates/trove.conf.j2 | 2 + ansible/roles/vitrage/defaults/main.yml | 8 +- ansible/roles/vitrage/tasks/bootstrap.yml | 2 +- ansible/roles/vitrage/tasks/config.yml | 3 - ansible/roles/vitrage/tasks/deploy.yml | 14 +- ansible/roles/vitrage/tasks/reconfigure.yml | 2 +- ansible/roles/vitrage/tasks/register.yml | 2 +- ansible/roles/vitrage/tasks/upgrade.yml | 6 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 2 + ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/config.yml | 3 - ansible/roles/vmtp/tasks/deploy.yml | 5 +- ansible/roles/vmtp/tasks/reconfigure.yml | 2 +- ansible/roles/vmtp/tasks/upgrade.yml | 4 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/bootstrap.yml | 2 +- ansible/roles/watcher/tasks/config.yml | 3 - ansible/roles/watcher/tasks/deploy.yml | 13 +- ansible/roles/watcher/tasks/reconfigure.yml | 2 +- ansible/roles/watcher/tasks/register.yml | 1 - ansible/roles/watcher/tasks/upgrade.yml | 6 +- ansible/roles/watcher/templates/watcher.conf.j2 | 2 + ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/config.yml | 3 - ansible/roles/zookeeper/tasks/deploy.yml | 4 +- ansible/roles/zookeeper/tasks/reconfigure.yml | 2 +- ansible/roles/zookeeper/tasks/upgrade.yml | 4 +- ansible/roles/zun/defaults/main.yml | 6 +- ansible/roles/zun/tasks/bootstrap.yml | 2 +- ansible/roles/zun/tasks/config.yml | 3 - ansible/roles/zun/tasks/deploy.yml | 12 +- ansible/roles/zun/tasks/reconfigure.yml | 2 +- ansible/roles/zun/tasks/register.yml | 1 - ansible/roles/zun/tasks/upgrade.yml | 6 +- ansible/roles/zun/templates/zun.conf.j2 | 2 + ansible/site.yml | 8 +- .../reference/databases/external-mariadb-guide.rst | 4 +- kolla_ansible/filters.py | 11 +- kolla_ansible/fluentd_filters.py | 44 +++ kolla_ansible/helpers.py | 21 ++ kolla_ansible/kolla_address.py | 30 +- ...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml | 5 + .../notes/bug-1681461-761f0cdf71bcb962.yaml | 6 + ...6789-fix-fernet-bootstrap-36f87e36e4dc6ec9.yaml | 6 + .../notes/bug-1848941-7e192be1885af513.yaml | 6 + .../notes/bug-1867953-4897a2c05aba43c6.yaml | 5 + .../notes/bug-1886787-013164ffc2f67264.yaml | 9 + .../notes/bug-1887180-89450a4185c7449d.yaml | 6 + .../notes/bug-1888852-8735ee29f69f77b5.yaml | 5 + .../notes/bug-1889611-f08c228fca884bf2.yaml | 5 + .../notes/bug-1895723-910de90908de260a.yaml | 6 + .../notes/bug-1896591-47c829f8b72d567a.yaml | 6 + .../notes/bug-1898765-73881932a2ef1d32.yaml | 7 + .../notes/bug-1898766-ffc55c97230d8221.yaml | 6 + .../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 + .../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 + .../notes/bug-1906944-38798e1348ff9c97.yaml | 6 + .../notes/bug-1907436-2da50ed38d107127.yaml | 6 + .../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 + ...ug-freezer-dev-mod-failed-af5bebb6c3eaabad.yaml | 5 + .../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml | 5 + .../docker-disable-iptables-e9a248a0515f30a6.yaml | 12 + .../docker-install-iptables-f24fef8ce2418963.yaml | 6 + ...min-openrc-ownership-mode-310d89a6f50a9640.yaml | 19 + ...vacuate-cinder-encryption-489f8cf6a340e7be.yaml | 6 + ...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml | 7 + .../fix-keystone-startup-66c5aa11a464a562.yaml | 8 + ...ance-grafana-db-bootstrap-298feba3e1750aca.yaml | 5 + ...emcached-connection-issue-84f5affa217b4612.yaml | 8 + .../fluentd-single-config-d5ae95fecbfb6e3e.yaml | 5 + ...default-topic-replication-0debd5eb89f0c50d.yaml | 11 + .../notes/load-br-netfilter-4ce9facd93e96af7.yaml | 6 + .../logrotate-single-config-663d6bf154218380.yaml | 5 + ...-keystone-bootstrap-limit-f0250725633c16de.yaml | 7 + ...uce-db-connection-pooling-b44da77eaa390f22.yaml | 6 + ...e-from-openstack-exporter-f6bb5da3093abef8.yaml | 5 + ...est-api-required-settings-099875e53248b62c.yaml | 14 + test-requirements.txt | 2 +- tools/cleanup-containers | 2 +- tools/kolla-ansible | 17 +- tools/setup_gate.sh | 54 ++- zuul.d/base.yaml | 14 + zuul.d/jobs.yaml | 31 +- zuul.d/project.yaml | 39 +- 588 files changed, 3201 insertions(+), 1844 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7044225bd..899c0c6b3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bandit>=1.1.0 # Apache-2.0 +bandit<1.6.3,>=1.1.0 # Apache-2.0

1 0

kolla 11.0.0.0rc2 (victoria)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

Hello everyone, A new release candidate for kolla for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/kolla/src/branch/stable/victoria Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *victoria-rc-potential* to bring it to the kolla release crew's attention.

1 0