January 2021 - Release-announce - lists.openstack.org

kolla 10.2.0 (ussuri)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We exuberantly announce the release of: kolla 10.2.0: Kolla OpenStack Deployment This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 10.2.0 ^^^^^^ New Features ************ * Add a Monasca app plugin for the Monasca fork of Grafana. Plugin provides screens for viewing or configuring: Alarm Definitions, Alarms and Notifications Upgrade Notes ************* * Kolla now no longer supports CentOS 8.2 and below. This is to support CentOS 8.3 without extra workarounds (please see the fixes section for more details). The promise is to support the latest CentOS 8 release which is 8.3 now. * Source based builds will now install OpenStack projects code from stable tarballs, compared to versioned (released point versions) ones as before. Bug Fixes ********* * Fixes the FC Cinder backend usage in Nova. LP#1884484 * Logstash 6 introduced in Centos 8 in Train release comes with log4j2 configuration that does not remove old compressed logs after rotation https://github.com/elastic/logstash/issues/11883 Log rotation config backported from Logstash 7 - Combination of Size Based and Time Based policies. Deletion occurs after 30 days or 3000 MB log files size - whichever comes first. * Fixes MariaDB incremental backup failure when full backup was not created the same day. LP#1897948 * Fixes builds on CentOS 8.3 failing due to renamed repos. Notice Kolla now no longer supports CentOS 8.2 and below. LP#1907213 * Fixes an issue with the "kolla_set_configs --check" command when the source is a directory. LP#1890567 * Fixes an issue with the Masakari dashboard where policies were not loaded correctly. * nova-compute uses daxio to cleanup vpmem backend device on instance delete. If the daxio binary is missing in the nova-compute container instance delete fails. daxio is provided in centos via daxio, in ubuntu via the pmdk-tools package. * Added rally-openstack as plugin to rally source image * Fixes an issue which can block the Monasca Fluentd output plugin. LP#1889065 Changes in kolla 10.1.0..10.2.0 ------------------------------- e0d8772ef Fix Freezer & Cyborg API startup on CentOS 8d6f21a20 Install iptables in ironic-inspector container 67e5c68f0 Fix build of monasca-grafana 84ffe90e2 ceilometer: do not fail when using an unsupported database type 12c898e99 Add daxio for nvdimm scenario b53a93faa mariadb: Fixes incremental backup failure when full not created today c6bd759c7 use freezer user for freezer_scheduler container ed85b4053 elasticsearch-curator: drop botocore workaround 6a278f14a Publish weekly b439904d5 Support CentOS 8.3 e54f95eaa [CI] Slim down 10b267a76 [CI] Stop testing lower-constraints 09ead6310 Update the'image-building.rst' document f834290de curator: Add wheel to elasticsearch-curator 19e8efb1c rally: add rally-openstack in source - follow up bebad0409 Use upper constraints for virtualenv in openstack-base 027016e98 Checks for heat_user_domain explicitly 943c03f2e Improve pip install process for offline deployment. de7f3c259 Add sysfsutils to nova-compute ubuntu source c93162596 Release note for using stable sources 5a31aa02b Fix Masakari dashboard policy file location c191e6fbd Fix kolla_set_configs --check with a directory ce7cd4784 Add collectd-libpod-stats to image 193c766a9 Change sources to stable-ussuri ef6cfb419 Replace cradox with rados 135f01d7e version-check: handle using of stable branch tarballs aecf4c51e Install newer virtualenv with relaxed importlib 821c49600 Add glusterfs-fuse package to manila-share container 69c0ff849 Updated TGTD to N for centos8 b4faacb4e [CI] Fix wheel url for CentOS c305746b6 Install Monasca plugin for Grafana by default c941e8635 Upgrade Fluentd Monasca plugin a893e6950 copy rootwarp files form venv in ironic base 15f2af1b0 Fix Logstash 6 log rotation - Stable/Ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 34 ++-- .zuul.d/debian.yaml | 2 +- .zuul.d/project.yaml | 1 - .zuul.d/ubuntu.yaml | 26 +-- .../ceilometer-notification/extend_start.sh | 3 - .../elasticsearch-curator/Dockerfile.j2 | 3 +- .../openvswitch-netcontrold/Dockerfile.j2 | 2 +- kolla/common/config.py | 216 +++++++++++---------- kolla/template/repos.yaml | 8 +- .../add-monasca-grafana-app-ea24f8ca43fa9c7d.yaml | 5 + .../notes/bug-1884484-d26488c9c1f3977f.yaml | 5 + .../notes/bug-1886975-454ac12be3d8e1d3.yaml | 9 + .../notes/bug-1897948-a0eb6d890eea8061.yaml | 6 + .../notes/bug-1907213-e0cee8498d19a170.yaml | 13 ++ .../notes/fix-config-check-c973c462761a4fa9.yaml | 6 + ...masakari-dashboard-policy-bb8c6c2364666401.yaml | 5 + .../notes/nova_compute_daxio-b8655d31df15139a.yaml | 7 + .../rally-openstack-source-62f3ac8f156fc758.yaml | 4 + ...ntd-monasca-output-plugin-739caf0af953d533.yaml | 5 + .../ussuri-stable-sources-0b003ba0c2ede6ee.yaml | 5 + tools/version-check.py | 51 ++++- 47 files changed, 448 insertions(+), 234 deletions(-)

1 0

kolla 9.3.0 (train)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We contentedly announce the release of: kolla 9.3.0: Kolla OpenStack Deployment This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 9.3.0 ^^^^^ Upgrade Notes ************* * Kolla now no longer supports CentOS 8.2 and below. This is to support CentOS 8.3 without extra workarounds (please see the fixes section for more details). The promise is to support the latest CentOS 8 release which is 8.3 now. * Almanach and Dragonflow images are no longer available for Debian/Ubuntu. * The "networking-hyperv" package is no longer installed in the "neutron-server" source image. * The "kuryr-libnetwork" image is no longer available. * "helm-repository" image is now unbuildable due to the chart repository being gone. The image was deprecated and is not known to be used by any tooling. Bug Fixes ********* * Fixes mixed RabbitMQ and Erlang package sources on CentOS 8 (Train only). Those could lead to RabbitMQ cluster instability in certain circumstances. LP#1884034 * Fixes the FC Cinder backend usage in Nova. LP#1884484 * Logstash 6 introduced in Centos 8 in Train release comes with log4j2 configuration that does not remove old compressed logs after rotation https://github.com/elastic/logstash/issues/11883 Log rotation config backported from Logstash 7 - Combination of Size Based and Time Based policies. Deletion occurs after 30 days or 3000 MB log files size - whichever comes first. * Fixes MariaDB incremental backup failure when full backup was not created the same day. LP#1897948 * Fixes builds on CentOS 8.3 failing due to renamed repos. Notice Kolla now no longer supports CentOS 8.2 and below. LP#1907213 * Fixes an issue with the "kolla_set_configs --check" command when the source is a directory. LP#1890567 * Fixes an issue with the Masakari dashboard where policies were not loaded correctly. * Fixes the "masakari-monitors" image on CentOS 8. * nova-compute uses daxio to cleanup vpmem backend device on instance delete. If the daxio binary is missing in the nova-compute container instance delete fails. daxio is provided in centos via daxio, in ubuntu via the pmdk-tools package. * Fixes an issue which can block the Monasca Fluentd output plugin. LP#1889065 Changes in kolla 9.2.0..9.3.0 ----------------------------- 3e020fdf2 Fix Freezer & Cyborg API startup on CentOS 31ce22ee2 Mark helm-repository unbuildable d43c46def Install iptables in ironic-inspector container dfdfe86e2 Fix build of monasca-grafana 1d8af466f ceilometer: do not fail when using an unsupported database type 5c0757404 Add daxio for nvdimm scenario c213921fd mariadb: Fixes incremental backup failure when full not created today 078da7ed6 use freezer user for freezer_scheduler container 617421fb3 Support CentOS 8.3 a5a422f63 elasticsearch-curator: drop botocore workaround 13e73e983 Publish weekly ccecadfbf [CI] Slim down 576ae967e [CI] Stop testing lower-constraints and fix py27 job 2dd1027dd Bump OpenStack versions for Train b3462dee0 curator: Add wheel to elasticsearch-curator 353d7cb27 Checks for heat_user_domain explicitly b38ed5d9f Add sysfsutils to nova-compute ubuntu source 73671ed91 Bump versions for Train 0c302393d Add collectd-libpod-stats to image 08a3d4fd1 Fix Masakari dashboard policy file location 797ecd6dd Fix kolla_set_configs --check with a directory 5826e44d7 Replace cradox with rados fec2c701d Use upstream Erlang on CentOS 8 9d3bf5731 Add glusterfs-fuse package to manila-share container bfc8ce085 Upgrade Fluentd Monasca plugin 2ff242c4a Bump up versions for train a31836265 [CI] Fix wheel url for CentOS 326823c4d Revert "openstack-base: pin setuptools < 46 to get horizon working" 65d9a0417 Updated TGTD to N for centos8 e3e2da2e9 Fix masakari-monitors image on CentOS 8 102ae176b Fix Logstash 6 log rotation - Stable/Train 6e625051d Bump prometheus-openstack-exporter version to 1.1.0 Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 47 +++++++++++----------- .zuul.d/debian.yaml | 2 +- .zuul.d/project.yaml | 1 - .zuul.d/ubuntu.yaml | 22 +++++----- .../ceilometer-notification/extend_start.sh | 3 -- .../elasticsearch-curator/Dockerfile.j2 | 1 + .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/common/config.py | 40 +++++++++--------- kolla/image/build.py | 20 ++++++++- .../notes/bug-1884034-328afb8831779e02.yaml | 6 +++ .../notes/bug-1884484-d26488c9c1f3977f.yaml | 5 +++ .../notes/bug-1886975-454ac12be3d8e1d3.yaml | 9 +++++ .../notes/bug-1897948-a0eb6d890eea8061.yaml | 6 +++ .../notes/bug-1907213-e0cee8498d19a170.yaml | 21 ++++++++++ .../notes/fix-config-check-c973c462761a4fa9.yaml | 6 +++ ...masakari-dashboard-policy-bb8c6c2364666401.yaml | 5 +++ ...masakari-monitors-centos8-6b030ab9531505be.yaml | 4 ++ .../notes/nova_compute_daxio-b8655d31df15139a.yaml | 7 ++++ ...buildable-helm-repository-5e361266659b29d1.yaml | 6 +++ ...ntd-monasca-output-plugin-739caf0af953d533.yaml | 5 +++ test-requirements.txt | 2 +- 47 files changed, 305 insertions(+), 131 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 18de5acca..5b5c85cf2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,<1.6.3,>=1.1.0 # Apache-2.0

1 0

kolla-ansible 10.2.0 (ussuri)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We are psyched to announce the release of: kolla-ansible 10.2.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.2.0 ^^^^^^ New Features ************ * Adds a new flag, "docker_disable_default_iptables_rules", which defaults to "no". Docker is manipulating iptables rules by default to provide network isolation, and this might cause problems if the host already has an iptables based firewall. A common problem is that Docker sets the default policy of the "FORWARD" chain in the "filter" to "DROP". Setting "docker_disable_default_iptables_rules" to "yes" will disable Docker's iptables manipulation. This feature will be enabled by default from the Victoria 11.0.0 release. * Improves performance of the "common" role by generating all fluentd configuration in a single file. * Improves performance of the "common" role by generating all logrotate configuration in a single file. Known Issues ************ * Since Ussuri, there is a bug in how Ceph (RBD) is handled with Cinder: the "backend_host" option is missing from the generated configuration for external Ceph. The symptoms are that volumes become unmanageable until extra admin action is taken. This does *not* affect the data plane - running virtual machines are *not* affected. There is a related issue regarding active-active "cinder-volume" services (single-host "cinder-volume" *not* affected), which is that they should not have been configured with "backend_host" in the first place but with "cluster" and proper coordination instead. Some users might have customised their config already to address this issue. The Kolla team is investigating the best way to address this for all its users. In the meantime, please ensure that, before upgrading to Ussuri, the "backend_host" option is set to its previous value (the default was "rbd:volumes") via a config override. For more details please refer to the referenced bug. Do note this issue affects both new deployments and upgrades. LP#1904062 Upgrade Notes ************* * When deploying Monasca with Logstash 6, any custom Logstash 2 configuration for Monasca will need to be updated to work with Logstash 6. Please consult the documentation. * "baremetal" role now uses CentOS "8" package repository for Docker CE (compared to "7" previously). * The Prometheus OpenStack exporter now uses internal endpoints to communicate with OpenStack services, to match the configuration of other services deployed by Kolla Ansible. Using public endpoints can be retained by setting the "prometheus_openstack_exporter_endpoint_type" variable to "public". * The default value of "REST_API_REQUIRED_SETTINGS" was synchronized with Horizon. You may want to review settings exposed by the updated configuration. Security Issues *************** * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". Bug Fixes ********* * Add support to use bifrost-deploy behind proxy. It uses existing container_proxy variable. * Fixes handling of */dev/kvm* permissions to be more robust against host-level actions. LP#1681461 * IPv6 fully-routed topology (/128 addressing) is now allowed (where applicable). LP#1848941 * When deploying Elasticsearch 6, Logstash 2 was deployed by default which is not compatible with Elasticsearch 6. Logstash 6 is now deployed by default. * Fix Castellan (Barbican client) when used with enabled TLS. LP#1886615 * Fixes "--configdir" parameter to apply to default "passwords.yml" location. LP#1887180 * "fluentd" is now logging to "/var/log/kolla/fluentd/fluentd.log" instead of "stdout". LP#1888852 * Fixes "deploy-containers" action missing for the Masakari role. LP#1889611 * An issue has been fixed when "keystone" container would be stuck in restart loop with a message that fernet key is stale. LP#1895723 * Fixes "haproxy_single_service_split" template to work with default for "mode" ("http"). LP#1896591 * Fixed invalid fernet cron file path on Debian/Ubuntu from "/var/spool/cron/crontabs/root/fernet-cron" to "/var/spool/cron/crontabs/root". LP#1898765 * Add with_first_found on placement for placement-api wsgi configuration to allow overwrite from users. LP#1898766 * OVN will no longer schedule SNAT routers on compute nodes when "neutron_ovn_distributed_fip" is enabled. LP#1901960 * RabbitMQ services are now restarted serially to avoid a split brain. LP#1904702 * Fixes LP#1906796 by adding notice and note loglevels to monasca log- metrics drop configuration * Fixes Swift's stop action. It will no longer try to start "swift- object-updater" container again. LP#1906944 * Fixes an issue with the "kolla-ansible prechecks" command with Docker 20.10. LP#1907436 * Fixes an issue with "kolla-ansible mariadb_recovery" when the "mariadb" container does not exist on one or more hosts. LP#1907658 * fix deploy freezer failed when use kolla_dev_mod LP#1888242 * Fixes issues with some CloudKitty commands trying to connect to an external TLS endpoint using HTTP. LP#1888544 * Fixes an issue where Docker may fail to start if "iptables" is not installed. LP#1899060 * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". * Fixes an issue during deleting evacuated instances with encrypted block devices. LP#1891462 * Fixes an issue where Keystone Fernet key rotation may fail due to permission denied error if the Keystone rotation happens before the Keystone container starts. LP#1888512 * Fixes an issue with Keystone startup when Fernet key rotation does not occur within the configured interval. This may happen due to one of the Keystone hosts being down at the scheduled time of rotation, or due to uneven intervals between cron jobs. LP#1895723 * Fixes an issue with Kibana upgrade on Debian/Ubuntu systems. LP#1901614 * Reverts the arp_responder option setting to the default ('False') for the LinuxBridge agent, as this is known to cause problems with l2_population as well as other issues such as not being fully compatible with the allowed-address-pairs extension. LP#1892776 * Fixes an issue with the Neutron Linux bridge ML2 driver where the firewall driver configuration was not applied. LP#1889455 * Fixes an issue with Masakari and internal TLS where CA certificates were not copied into containers, and the path to the CA file was not configured. Depends on masakari bug 1873736 being fixed. LP#1888655 * Fixes an issue where Grafana instances would race to bootstrap the Grafana DB. See LP#1888681. * Fixes LP#1892210 where the number of open connections to Memcached from "neutron-server" would grow over time until reaching the maximum set by "memcached_connection_limit" (5000 by default), at which point the Memcached instance would stop working. * An issue where when Kafka default topic creation was used to create a Kafka topic, no redundant replicas were created in a multi- node cluster. LP#1888522. This affects Monasca which uses Kafka, and was previously masked by the legacy Kafka client used by Monasca which has since been upgraded in Ussuri. Monasca users with multi- node Kafka clusters should consultant the Kafka documentation to increase the number of replicas. * Fixes an issue where the "br_netfilter" kernel module was not loaded on compute hosts. LP#1886796 * The Prometheus OpenStack exporter now uses internal endpoints to communicate with OpenStack services, to match the configuration of other services deployed by Kolla Ansible. * Prevents adding a new Keystone host to an existing cluster when not targeting all Keystone hosts (e.g. due to "--limit" or "-- serial" arguments), to avoid overwriting existing Fernet keys. LP#1891364 * Reduce the use of SQLAlchemy connection pooling, to improve service reliability during a failover of the controller with the internal VIP. LP#1896635 * No longer configures the Prometheus OpenStack exporter to use the "prometheus" Docker volume, which was never required. * Updates the default value of "REST_API_REQUIRED_SETTINGS" in Horizon "local_settings", which enables some features such as selecting the default boot source for instances. LP#1891024 Other Notes *********** * Add trove-guestagent.conf for trove Changes in kolla-ansible 10.1.0..10.2.0 --------------------------------------- e1380e259 Add `issue` reno for bug #1904062 90d7cc481 docs: add info on adding and removing hosts ca2654740 Use ansible_distribution_release instead of ansible_lsb.codename a90871d8e Fix mariadb_recovery when mariadb container is missing b2c2aea0b Backport ignore_missing support for kolla_docker 356405a7b Edit ironic inspector pxe filter driver name none to noop 39ffceae8 CI: test elasticsearch & kibana 6.x migration (Ussuri) 81dc651c1 Do not start swift-object-updater on stop ece790946 docs: Add magnum guide efac50bac Revert "Performance: Use import_tasks in the main plays" 0cc64d8e2 Fix an Ansible warning 33a844f07 Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default 8f0b88e15 [docs] Add python3-venv package to quickstart.rst 5d066b0cc [CI] Drop periodics 16670ed70 Fix prechecks with Docker 20.10.0 aa3fa8d82 RabbitMQ handler refactored to restart services in serial c8a1cd98f Do not set 'always' tag where unnecessary 57a2a2019 Performance: Use import_tasks in the main plays 1f83249ef Fix stop containers task in Swift rolling restart f9a45abfb Fix kolla-ansible to work with pyenv-virtualenv 2a7197a6a [baremetal]: Use $releasever in docker-ce repo b03dc2c3d CI: add missing --fail argument to curl 4ad4429f2 [CI] Set 0 swap size 88a840fb9 ovn: Do not schedule SNAT routers on computes 7db8c7df3 Fix permission denied during Fernet key rotation e33c4a7e0 kibana: Fix kibana 6.x migration 724e1f9b6 CI: prometheus-efk: add tests/test-prometheus-efk.sh to files 8e56a1a79 Fix keystone-startup.sh - remove Fernet key age check b0d71d0fd follow up: Fix the centos8 default path error in the quickstart.rst document 952bf2536 Fix the centos8 default path error in the quickstart.rst document 5d2c8d5a1 Fix fernet cron path on Ubuntu/Debian 2008668ae docs: Add link back to Train CentOS 8 migration page a9af6cebf baremetal: Install iptables for Docker if enabled 1ab5d5081 replace internal with openstack_interface 24c1450de Fix glance-tls-proxy logrotate and fluentd log permissions 43842a8c8 Delete the /var/log/kolla directory should use sudo c66f6a135 Performance: use a single config file for fluentd 2946e458f Performance: optimize genconfig c55f7f3a2 Apply bool filter to all enable_prometheus_* variables 0597bc581 Performance: use import_tasks for register and bootstrap 0528e5435 Fix haproxy bundle generation a80240c69 Allow overwrite of placement-api wsgi config fe2146020 Make no_proxy handling more robust 1d4fd52e4 Reduce the use of SQLAlchemy connection pooling 7e3d3d8bc Fix keystone-startup.sh 96462c42a Fix default mode in haproxy_single_service_split 9464bd11c Pin Ansible in test-reqs (<2.10) 64747162f Performance: use a single config file for logrotate 1739d667a Remove unused configuration for prometheus-openstack-exporter 566547dee Performance: remove one include_tasks in nova-cell 326bfaa92 Performance: replace unconditional include_tasks with import_tasks fd998d071 Fix test-ironic.sh not catching errors a9c227cca Set neutron-ovn-metadata-agent metadata_workers to 2 d8dfe5367 Synchronize REST_API_REQUIRED_SETTINGS with Horizon 0e9287fe0 Add default value for kolla_internal_address variable bfbc8e867 Fix external mariadb documentation for database_user 744ff2277 Update trove config file e3a92a5e2 add region name for tasks 3b197af49 Disable arp_responder option for LinuxBridge agent 772171306 Fix fernet bootstrap and key distribution - follow up 15d689044 Prevent overwriting existing Keystone Fernet keys c30eb14af change the timezone precheck task's condition 5d09ab684 Add workaround for keystonemiddleware/neutron memcached issue e71cc0d40 Add the missing hosts for vitrage 75f8ce358 Fix kolla-ansible not reflect environment changed 652d3eeb5 Add cinder auth config to nova-cell nova.conf.j2 d87217ec2 CI: enable Ansible SSH pipelining 57536ed6f Pin ansible-lint to 4.2.0 54a223b67 Add trove-guestagent.conf 295742718 Fix ownership and permissions of admin-openrc.sh a229bbd22 Mount /etc/timezone based on host OS e74782af4 Skip broken ansible-lint 6f81454f5 Add support to use bifrost-deploy behind proxy cb6eaa204 Add missing mistral services log files b2a30ab50 [CI] Temporarily block new Ansible ed6c6babf Fix Barbican client (Castellan) with TLS (part 2) f27c8489f Update TLS documentation 10f3a99b4 Move TLS documentation to its own page 12a0acfe3 [docker] Added a new flag to disable default iptables rules 73e4ff71d Fix actions for Aodh and Swift 95068764c Fix play hosts for ironic, monasca, neutron, nova 8d2ecde25 prometheus-openstack-exporter config service filtering 362b79728 linuxbridge: Fix name of securitygroup section 16aae4737 Configure prometheus-openstack-exporter to use internal endpoints 8a770bbdb Fix kolla_address in IPv6 fully-routed topo case dee49c7ed Fix Masakari role missing deploy-containers ae3374961 Performance: use import_tasks for check-containers.yml 9a38592eb fluentd: log to a file instead of stdout 4d9650ab2 Improve Grafana DB bootstrap a82e23370 Set Kafka default replication factor b973ff7d8 Fix some CloudKitty API responses when behind SSL 8366f22ac Performance: remove unnecessary conditions from includes 26f6db900 Masakari: copy TLS certificates into containers 3c33cd6a3 Update glance configuration file for backend b4e22abff fix deploy freezer failed when kolla_dev_mod enabled 6a6ee3df2 Make /dev/kvm permissions handling more robust 8fa0af6b5 Fix fluentd warnings caused by "type copy" aca3736e7 Fix Barbican client (Castellan) with TLS f7b86b8ae CI: add prometheus-efk scenario 97d153bff Support editable virtualenv installation for development d2be30095 Manila - adjust logic for Open vSwitch configuration generation 4b7ac2c00 Logstash 6 support 6d6d3c043 Evaluate PASSWORDS_FILE later d986ba05d Load br_netfilter module in nova-cell role Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_yaml.py | 4 +- ansible/group_vars/all.yml | 17 +- ansible/library/kolla_docker.py | 7 +- ansible/nova.yml | 2 + ansible/post-deploy.yml | 6 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/bootstrap.yml | 2 +- ansible/roles/aodh/tasks/config.yml | 3 - ansible/roles/aodh/tasks/deploy.yml | 14 +- ansible/roles/aodh/tasks/reconfigure.yml | 2 +- ansible/roles/aodh/tasks/register.yml | 1 - ansible/roles/aodh/tasks/stop.yml | 6 + ansible/roles/aodh/tasks/upgrade.yml | 6 +- ansible/roles/aodh/templates/aodh.conf.j2 | 2 + ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/bootstrap.yml | 2 +- ansible/roles/barbican/tasks/config.yml | 3 - ansible/roles/barbican/tasks/deploy.yml | 13 +- ansible/roles/barbican/tasks/reconfigure.yml | 2 +- ansible/roles/barbican/tasks/register.yml | 1 - ansible/roles/barbican/tasks/upgrade.yml | 6 +- ansible/roles/baremetal/defaults/main.yml | 7 +- .../roles/baremetal/tasks/bootstrap-servers.yml | 6 +- ansible/roles/baremetal/tasks/post-install.yml | 13 + ansible/roles/bifrost/tasks/deploy.yml | 6 +- ansible/roles/bifrost/tasks/reconfigure.yml | 2 +- ansible/roles/bifrost/tasks/start.yml | 1 + ansible/roles/bifrost/tasks/upgrade.yml | 4 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/bootstrap.yml | 2 +- ansible/roles/blazar/tasks/config.yml | 3 - ansible/roles/blazar/tasks/deploy.yml | 12 +- ansible/roles/blazar/tasks/reconfigure.yml | 2 +- ansible/roles/blazar/tasks/register.yml | 1 - ansible/roles/blazar/tasks/upgrade.yml | 6 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 + ansible/roles/ceilometer/defaults/main.yml | 8 +- ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +- ansible/roles/ceilometer/tasks/config.yml | 3 - ansible/roles/ceilometer/tasks/deploy.yml | 12 +- ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +- ansible/roles/ceilometer/tasks/register.yml | 1 - ansible/roles/ceilometer/tasks/upgrade.yml | 6 +- ansible/roles/certificates/tasks/generate.yml | 4 +- ansible/roles/chrony/defaults/main.yml | 2 +- ansible/roles/chrony/tasks/config.yml | 3 - ansible/roles/chrony/tasks/deploy.yml | 4 +- ansible/roles/chrony/tasks/reconfigure.yml | 2 +- ansible/roles/chrony/tasks/upgrade.yml | 2 +- ansible/roles/cinder/defaults/main.yml | 8 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 +- ansible/roles/cinder/tasks/config.yml | 3 - ansible/roles/cinder/tasks/deploy.yml | 20 +- ansible/roles/cinder/tasks/reconfigure.yml | 2 +- ansible/roles/cinder/tasks/register.yml | 1 - ansible/roles/cinder/tasks/upgrade.yml | 6 +- ansible/roles/cinder/templates/cinder.conf.j2 | 4 + ansible/roles/cloudkitty/defaults/main.yml | 4 +- ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +- ansible/roles/cloudkitty/tasks/config.yml | 3 - ansible/roles/cloudkitty/tasks/deploy.yml | 12 +- ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +- ansible/roles/cloudkitty/tasks/register.yml | 1 - ansible/roles/cloudkitty/tasks/upgrade.yml | 6 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 + ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/config.yml | 3 - ansible/roles/collectd/tasks/deploy.yml | 4 +- ansible/roles/collectd/tasks/reconfigure.yml | 2 +- ansible/roles/collectd/tasks/upgrade.yml | 4 +- ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/filter_plugins/filters.py | 22 ++ ansible/roles/common/tasks/config.yml | 405 ++++++++------------- ansible/roles/common/tasks/deploy.yml | 6 +- ansible/roles/common/tasks/reconfigure.yml | 2 +- ansible/roles/common/tasks/upgrade.yml | 4 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 113 +++--- .../templates/cron-logrotate-fluentd.conf.j2 | 3 + .../common/templates/cron-logrotate-global.conf.j2 | 5 +- ansible/roles/common/templates/cron.json.j2 | 77 +--- ansible/roles/common/templates/fluentd.json.j2 | 45 +-- ansible/roles/common/templates/td-agent.conf.j2 | 49 ++- ansible/roles/congress/defaults/main.yml | 6 +- ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/bootstrap.yml | 2 +- ansible/roles/cyborg/tasks/config.yml | 3 - ansible/roles/cyborg/tasks/deploy.yml | 13 +- ansible/roles/cyborg/tasks/reconfigure.yml | 2 +- ansible/roles/cyborg/tasks/register.yml | 1 - ansible/roles/cyborg/tasks/upgrade.yml | 6 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 + ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/bootstrap.yml | 2 +- ansible/roles/designate/tasks/config.yml | 3 - ansible/roles/designate/tasks/deploy.yml | 20 +- ansible/roles/designate/tasks/reconfigure.yml | 2 +- ansible/roles/designate/tasks/register.yml | 1 - ansible/roles/designate/tasks/update_pools.yml | 3 +- ansible/roles/designate/tasks/upgrade.yml | 8 +- ansible/roles/elasticsearch/defaults/main.yml | 4 +- ansible/roles/elasticsearch/tasks/config.yml | 3 - ansible/roles/elasticsearch/tasks/deploy.yml | 6 +- ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 6 +- ansible/roles/etcd/defaults/main.yml | 2 +- ansible/roles/etcd/tasks/config.yml | 3 - ansible/roles/etcd/tasks/deploy.yml | 4 +- ansible/roles/etcd/tasks/reconfigure.yml | 2 +- ansible/roles/etcd/tasks/upgrade.yml | 4 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/bootstrap.yml | 4 +- ansible/roles/freezer/tasks/config.yml | 3 - ansible/roles/freezer/tasks/deploy.yml | 15 +- ansible/roles/freezer/tasks/reconfigure.yml | 2 +- ansible/roles/freezer/tasks/register.yml | 1 - ansible/roles/freezer/tasks/upgrade.yml | 6 +- ansible/roles/freezer/templates/freezer.conf.j2 | 2 + ansible/roles/glance/defaults/main.yml | 11 +- ansible/roles/glance/tasks/bootstrap.yml | 2 +- ansible/roles/glance/tasks/config.yml | 3 - ansible/roles/glance/tasks/deploy.yml | 14 +- ansible/roles/glance/tasks/legacy_upgrade.yml | 6 +- ansible/roles/glance/tasks/reconfigure.yml | 2 +- ansible/roles/glance/tasks/register.yml | 1 - ansible/roles/glance/tasks/rolling_upgrade.yml | 2 + ansible/roles/glance/templates/glance-api.conf.j2 | 11 + ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +- ansible/roles/gnocchi/tasks/config.yml | 3 - ansible/roles/gnocchi/tasks/deploy.yml | 13 +- ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +- ansible/roles/gnocchi/tasks/register.yml | 1 - ansible/roles/gnocchi/tasks/upgrade.yml | 6 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 3 +- ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/handlers/main.yml | 39 +- ansible/roles/grafana/tasks/config.yml | 3 - ansible/roles/grafana/tasks/deploy.yml | 8 +- ansible/roles/grafana/tasks/reconfigure.yml | 2 +- ansible/roles/grafana/tasks/upgrade.yml | 30 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 4 +- ansible/roles/haproxy/tasks/config.yml | 3 - ansible/roles/haproxy/tasks/deploy.yml | 6 +- ansible/roles/haproxy/tasks/reconfigure.yml | 2 +- ansible/roles/haproxy/tasks/upgrade.yml | 4 +- ansible/roles/heat/defaults/main.yml | 6 +- ansible/roles/heat/tasks/bootstrap.yml | 2 +- ansible/roles/heat/tasks/config.yml | 3 - ansible/roles/heat/tasks/deploy.yml | 16 +- ansible/roles/heat/tasks/reconfigure.yml | 2 +- ansible/roles/heat/tasks/register.yml | 1 - ansible/roles/heat/tasks/upgrade.yml | 6 +- ansible/roles/heat/templates/heat.conf.j2 | 2 + ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/bootstrap.yml | 2 +- ansible/roles/horizon/tasks/config.yml | 3 - ansible/roles/horizon/tasks/deploy.yml | 4 +- ansible/roles/horizon/tasks/reconfigure.yml | 2 +- ansible/roles/horizon/tasks/upgrade.yml | 4 +- ansible/roles/horizon/templates/local_settings.j2 | 13 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/config.yml | 3 - ansible/roles/influxdb/tasks/deploy.yml | 4 +- ansible/roles/influxdb/tasks/reconfigure.yml | 2 +- ansible/roles/influxdb/tasks/upgrade.yml | 4 +- ansible/roles/ironic/defaults/main.yml | 14 +- ansible/roles/ironic/tasks/bootstrap.yml | 2 +- ansible/roles/ironic/tasks/config.yml | 3 - ansible/roles/ironic/tasks/deploy.yml | 22 +- ansible/roles/ironic/tasks/legacy_upgrade.yml | 8 +- ansible/roles/ironic/tasks/reconfigure.yml | 2 +- ansible/roles/ironic/tasks/register.yml | 1 - ansible/roles/ironic/tasks/rolling_upgrade.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/ironic/templates/ironic.conf.j2 | 2 + ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/config.yml | 3 - ansible/roles/iscsi/tasks/deploy.yml | 6 +- ansible/roles/iscsi/tasks/reconfigure.yml | 2 +- ansible/roles/iscsi/tasks/upgrade.yml | 2 +- ansible/roles/kafka/defaults/main.yml | 2 +- ansible/roles/kafka/tasks/config.yml | 3 - ansible/roles/kafka/tasks/deploy.yml | 4 +- ansible/roles/kafka/tasks/reconfigure.yml | 2 +- ansible/roles/kafka/tasks/upgrade.yml | 4 +- .../kafka/templates/kafka.server.properties.j2 | 1 + ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/bootstrap.yml | 2 +- ansible/roles/karbor/tasks/config.yml | 3 - ansible/roles/karbor/tasks/deploy.yml | 13 +- ansible/roles/karbor/tasks/reconfigure.yml | 2 +- ansible/roles/karbor/tasks/register.yml | 1 - ansible/roles/karbor/tasks/upgrade.yml | 6 +- ansible/roles/karbor/templates/karbor.conf.j2 | 2 + ansible/roles/keystone/defaults/main.yml | 6 +- ansible/roles/keystone/handlers/main.yml | 12 +- ansible/roles/keystone/tasks/bootstrap.yml | 2 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 22 +- ansible/roles/keystone/tasks/config.yml | 17 +- ansible/roles/keystone/tasks/deploy.yml | 10 +- ansible/roles/keystone/tasks/reconfigure.yml | 2 +- ansible/roles/keystone/tasks/register.yml | 2 +- ansible/roles/keystone/tasks/upgrade.yml | 4 +- .../keystone/templates/fernet-node-sync.sh.j2 | 20 +- .../keystone/templates/keystone-fernet.json.j2 | 9 +- .../roles/keystone/templates/keystone-ssh.json.j2 | 7 + .../keystone/templates/keystone-startup.sh.j2 | 24 ++ ansible/roles/keystone/templates/keystone.conf.j2 | 2 + ansible/roles/keystone/templates/keystone.json.j2 | 9 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/config.yml | 3 - ansible/roles/kibana/tasks/deploy.yml | 4 +- .../roles/kibana/tasks/migrate-kibana-index.yml | 2 +- ansible/roles/kibana/tasks/reconfigure.yml | 2 +- ansible/roles/kibana/tasks/upgrade.yml | 6 +- ansible/roles/kuryr/defaults/main.yml | 2 +- ansible/roles/kuryr/tasks/config.yml | 3 - ansible/roles/kuryr/tasks/deploy.yml | 6 +- ansible/roles/kuryr/tasks/reconfigure.yml | 2 +- ansible/roles/kuryr/tasks/register.yml | 1 - ansible/roles/kuryr/tasks/upgrade.yml | 4 +- ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 +- ansible/roles/magnum/tasks/config.yml | 3 - ansible/roles/magnum/tasks/deploy.yml | 12 +- ansible/roles/magnum/tasks/reconfigure.yml | 2 +- ansible/roles/magnum/tasks/register.yml | 4 +- ansible/roles/magnum/tasks/upgrade.yml | 6 +- ansible/roles/magnum/templates/magnum.conf.j2 | 2 + ansible/roles/manila/defaults/main.yml | 8 +- ansible/roles/manila/tasks/bootstrap.yml | 2 +- ansible/roles/manila/tasks/config.yml | 3 - ansible/roles/manila/tasks/deploy.yml | 14 +- ansible/roles/manila/tasks/reconfigure.yml | 2 +- ansible/roles/manila/tasks/register.yml | 1 - ansible/roles/manila/tasks/upgrade.yml | 6 +- ansible/roles/manila/templates/manila.conf.j2 | 2 + ansible/roles/mariadb/defaults/main.yml | 4 +- ansible/roles/mariadb/tasks/bootstrap.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 3 - ansible/roles/mariadb/tasks/deploy.yml | 10 +- ansible/roles/mariadb/tasks/reconfigure.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +- ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/bootstrap.yml | 2 +- ansible/roles/masakari/tasks/check-containers.yml | 17 + ansible/roles/masakari/tasks/config.yml | 22 +- ansible/roles/masakari/tasks/copy-certs.yml | 6 + ansible/roles/masakari/tasks/deploy-containers.yml | 2 + ansible/roles/masakari/tasks/deploy.yml | 13 +- ansible/roles/masakari/tasks/reconfigure.yml | 2 +- ansible/roles/masakari/tasks/register.yml | 1 - ansible/roles/masakari/tasks/upgrade.yml | 6 +- ansible/roles/masakari/templates/masakari.conf.j2 | 3 + ansible/roles/memcached/defaults/main.yml | 2 +- ansible/roles/memcached/tasks/config.yml | 3 - ansible/roles/memcached/tasks/deploy.yml | 4 +- ansible/roles/memcached/tasks/reconfigure.yml | 2 +- ansible/roles/memcached/tasks/upgrade.yml | 4 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/bootstrap.yml | 2 +- ansible/roles/mistral/tasks/config.yml | 3 - ansible/roles/mistral/tasks/deploy.yml | 14 +- ansible/roles/mistral/tasks/reconfigure.yml | 2 +- ansible/roles/mistral/tasks/register.yml | 1 - ansible/roles/mistral/tasks/upgrade.yml | 6 +- ansible/roles/mistral/templates/mistral.conf.j2 | 2 + ansible/roles/monasca/defaults/main.yml | 25 +- ansible/roles/monasca/handlers/main.yml | 39 +- ansible/roles/monasca/tasks/bootstrap.yml | 2 +- ansible/roles/monasca/tasks/config.yml | 3 - ansible/roles/monasca/tasks/deploy.yml | 34 +- ansible/roles/monasca/tasks/reconfigure.yml | 2 +- ansible/roles/monasca/tasks/register.yml | 1 - ansible/roles/monasca/tasks/upgrade.yml | 38 +- .../monasca/templates/monasca-api/api.conf.j2 | 2 + .../monasca-log-metrics/log-metrics.conf.j2 | 13 +- .../monasca-log-metrics.json.j2 | 2 +- .../monasca-log-persister/log-persister.conf.j2 | 6 +- .../monasca-log-persister.json.j2 | 2 +- .../log-transformer.conf.j2 | 9 +- .../monasca-log-transformer.json.j2 | 2 +- ansible/roles/mongodb/defaults/main.yml | 2 +- ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/config.yml | 3 - ansible/roles/multipathd/tasks/deploy.yml | 6 +- ansible/roles/multipathd/tasks/reconfigure.yml | 2 +- ansible/roles/multipathd/tasks/upgrade.yml | 6 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/bootstrap.yml | 2 +- ansible/roles/murano/tasks/config.yml | 3 - ansible/roles/murano/tasks/deploy.yml | 16 +- ansible/roles/murano/tasks/reconfigure.yml | 2 +- ansible/roles/murano/tasks/register.yml | 1 - ansible/roles/murano/tasks/upgrade.yml | 8 +- ansible/roles/murano/templates/murano.conf.j2 | 2 + ansible/roles/neutron/defaults/main.yml | 24 +- ansible/roles/neutron/tasks/bootstrap.yml | 2 +- ansible/roles/neutron/tasks/check-containers.yml | 1 + ansible/roles/neutron/tasks/config.yml | 3 - ansible/roles/neutron/tasks/deploy.yml | 12 +- ansible/roles/neutron/tasks/legacy_upgrade.yml | 8 +- ansible/roles/neutron/tasks/reconfigure.yml | 2 +- ansible/roles/neutron/tasks/register.yml | 1 - ansible/roles/neutron/tasks/rolling_upgrade.yml | 6 +- .../neutron/templates/linuxbridge_agent.ini.j2 | 3 +- ansible/roles/neutron/templates/neutron.conf.j2 | 5 + .../templates/neutron_ovn_metadata_agent.ini.j2 | 1 + ansible/roles/nova-cell/defaults/main.yml | 23 +- ansible/roles/nova-cell/tasks/config-host.yml | 36 ++ .../roles/nova-cell/tasks/config-libvirt-tls.yml | 48 ++- ansible/roles/nova-cell/tasks/config.yml | 35 +- ansible/roles/nova-cell/tasks/deploy.yml | 6 +- .../roles/nova-cell/tasks/discover_computes.yml | 2 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 - ansible/roles/nova-cell/tasks/reconfigure.yml | 2 +- ansible/roles/nova-cell/tasks/rolling_upgrade.yml | 6 +- ansible/roles/nova-cell/tasks/upgrade.yml | 2 +- .../nova-cell/templates/99-kolla-kvm.rules.j2 | 4 + ansible/roles/nova-cell/templates/nova.conf.j2 | 15 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/config.yml | 3 - ansible/roles/nova/tasks/deploy.yml | 7 +- ansible/roles/nova/tasks/reconfigure.yml | 2 +- ansible/roles/nova/tasks/register.yml | 1 - ansible/roles/nova/tasks/rolling_upgrade.yml | 4 +- ansible/roles/nova/tasks/upgrade.yml | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 8 +- ansible/roles/octavia/defaults/main.yml | 8 +- ansible/roles/octavia/tasks/bootstrap.yml | 2 +- ansible/roles/octavia/tasks/config.yml | 3 - ansible/roles/octavia/tasks/deploy.yml | 14 +- ansible/roles/octavia/tasks/reconfigure.yml | 2 +- ansible/roles/octavia/tasks/register.yml | 3 +- ansible/roles/octavia/tasks/upgrade.yml | 6 +- ansible/roles/octavia/templates/octavia.conf.j2 | 2 + ansible/roles/openvswitch/defaults/main.yml | 4 +- ansible/roles/openvswitch/tasks/config.yml | 7 +- ansible/roles/openvswitch/tasks/deploy.yml | 8 +- ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +- ansible/roles/openvswitch/tasks/upgrade.yml | 8 +- ansible/roles/ovn/tasks/bootstrap.yml | 9 +- ansible/roles/ovn/tasks/config.yml | 3 - ansible/roles/ovn/tasks/deploy.yml | 6 +- ansible/roles/ovn/tasks/reconfigure.yml | 2 +- ansible/roles/ovn/tasks/upgrade.yml | 6 +- ansible/roles/ovs-dpdk/defaults/main.yml | 4 +- ansible/roles/ovs-dpdk/tasks/config.yml | 3 - ansible/roles/ovs-dpdk/tasks/deploy.yml | 4 +- ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +- ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +- ansible/roles/panko/defaults/main.yml | 2 +- ansible/roles/panko/tasks/bootstrap.yml | 2 +- ansible/roles/panko/tasks/config.yml | 3 - ansible/roles/panko/tasks/deploy.yml | 8 +- ansible/roles/panko/tasks/reconfigure.yml | 2 +- ansible/roles/panko/tasks/register.yml | 1 - ansible/roles/panko/tasks/upgrade.yml | 6 +- ansible/roles/panko/templates/panko.conf.j2 | 2 + ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/bootstrap.yml | 2 +- ansible/roles/placement/tasks/config.yml | 9 +- ansible/roles/placement/tasks/deploy.yml | 10 +- ansible/roles/placement/tasks/reconfigure.yml | 2 +- ansible/roles/placement/tasks/register.yml | 1 - ansible/roles/placement/tasks/upgrade.yml | 10 +- .../roles/placement/templates/placement.conf.j2 | 3 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/main.yml | 10 +- ansible/roles/prechecks/tasks/service_checks.yml | 2 +- ansible/roles/prometheus/defaults/main.yml | 35 +- ansible/roles/prometheus/tasks/config.yml | 3 - ansible/roles/prometheus/tasks/deploy.yml | 6 +- ansible/roles/prometheus/tasks/reconfigure.yml | 2 +- ansible/roles/prometheus/tasks/upgrade.yml | 4 +- .../prometheus-openstack-exporter.json.j2 | 7 +- .../prometheus/templates/prometheus-server.json.j2 | 2 +- ansible/roles/prune-images/tasks/main.yml | 4 +- ansible/roles/qdrouterd/defaults/main.yml | 2 +- ansible/roles/qdrouterd/tasks/config.yml | 3 - ansible/roles/qdrouterd/tasks/deploy.yml | 6 +- ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +- ansible/roles/qdrouterd/tasks/upgrade.yml | 4 +- ansible/roles/qinling/defaults/main.yml | 4 +- ansible/roles/qinling/tasks/bootstrap.yml | 2 +- ansible/roles/qinling/tasks/config.yml | 3 - ansible/roles/qinling/tasks/deploy.yml | 12 +- ansible/roles/qinling/tasks/reconfigure.yml | 2 +- ansible/roles/qinling/tasks/register.yml | 1 - ansible/roles/qinling/tasks/upgrade.yml | 6 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 + ansible/roles/rabbitmq/defaults/main.yml | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 43 +-- ansible/roles/rabbitmq/tasks/check-containers.yml | 3 +- ansible/roles/rabbitmq/tasks/config.yml | 18 +- ansible/roles/rabbitmq/tasks/deploy.yml | 6 +- ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +- ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++ ansible/roles/rabbitmq/tasks/upgrade.yml | 4 +- ansible/roles/rally/defaults/main.yml | 2 +- ansible/roles/rally/tasks/bootstrap.yml | 2 +- ansible/roles/rally/tasks/config.yml | 3 - ansible/roles/rally/tasks/deploy.yml | 6 +- ansible/roles/rally/tasks/reconfigure.yml | 2 +- ansible/roles/rally/tasks/upgrade.yml | 6 +- ansible/roles/rally/templates/rally.conf.j2 | 2 + ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/config.yml | 3 - ansible/roles/redis/tasks/deploy.yml | 4 +- ansible/roles/redis/tasks/reconfigure.yml | 2 +- ansible/roles/redis/tasks/upgrade.yml | 4 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/bootstrap.yml | 2 +- ansible/roles/sahara/tasks/config.yml | 3 - ansible/roles/sahara/tasks/deploy.yml | 12 +- ansible/roles/sahara/tasks/reconfigure.yml | 2 +- ansible/roles/sahara/tasks/register.yml | 1 - ansible/roles/sahara/tasks/upgrade.yml | 6 +- ansible/roles/sahara/templates/sahara.conf.j2 | 2 + ansible/roles/searchlight/defaults/main.yml | 4 +- ansible/roles/searchlight/tasks/bootstrap.yml | 2 +- ansible/roles/searchlight/tasks/config.yml | 3 - ansible/roles/searchlight/tasks/deploy.yml | 8 +- ansible/roles/searchlight/tasks/reconfigure.yml | 2 +- ansible/roles/searchlight/tasks/register.yml | 1 - ansible/roles/searchlight/tasks/upgrade.yml | 6 +- ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/bootstrap.yml | 2 +- ansible/roles/senlin/tasks/config.yml | 3 - ansible/roles/senlin/tasks/deploy.yml | 14 +- ansible/roles/senlin/tasks/reconfigure.yml | 2 +- ansible/roles/senlin/tasks/register.yml | 1 - ansible/roles/senlin/tasks/upgrade.yml | 6 +- ansible/roles/senlin/templates/senlin.conf.j2 | 2 + ansible/roles/skydive/defaults/main.yml | 4 +- ansible/roles/skydive/tasks/config.yml | 3 - ansible/roles/skydive/tasks/deploy.yml | 6 +- ansible/roles/skydive/tasks/reconfigure.yml | 2 +- ansible/roles/skydive/tasks/upgrade.yml | 4 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/bootstrap.yml | 2 +- ansible/roles/solum/tasks/config.yml | 3 - ansible/roles/solum/tasks/deploy.yml | 14 +- ansible/roles/solum/tasks/reconfigure.yml | 2 +- ansible/roles/solum/tasks/register.yml | 1 - ansible/roles/solum/tasks/upgrade.yml | 6 +- ansible/roles/solum/templates/solum.conf.j2 | 2 + ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/config.yml | 3 - ansible/roles/storm/tasks/deploy.yml | 4 +- ansible/roles/storm/tasks/reconfigure.yml | 2 +- ansible/roles/storm/tasks/upgrade.yml | 2 +- ansible/roles/swift/tasks/deploy-containers.yml | 2 + ansible/roles/swift/tasks/deploy.yml | 8 +- ansible/roles/swift/tasks/legacy_upgrade.yml | 4 +- ansible/roles/swift/tasks/reconfigure.yml | 2 +- ansible/roles/swift/tasks/register.yml | 1 - ansible/roles/swift/tasks/rolling_upgrade.yml | 43 ++- ansible/roles/swift/tasks/stop.yml | 2 +- ansible/roles/tacker/defaults/main.yml | 4 +- ansible/roles/tacker/tasks/bootstrap.yml | 2 +- ansible/roles/tacker/tasks/config.yml | 3 - ansible/roles/tacker/tasks/deploy.yml | 14 +- ansible/roles/tacker/tasks/reconfigure.yml | 2 +- ansible/roles/tacker/tasks/register.yml | 1 - ansible/roles/tacker/tasks/upgrade.yml | 6 +- ansible/roles/tacker/templates/tacker.conf.j2 | 2 + ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/config.yml | 3 - ansible/roles/telegraf/tasks/deploy.yml | 4 +- ansible/roles/telegraf/tasks/reconfigure.yml | 2 +- ansible/roles/telegraf/tasks/upgrade.yml | 4 +- ansible/roles/tempest/defaults/main.yml | 2 +- ansible/roles/tempest/tasks/config.yml | 3 - ansible/roles/tempest/tasks/deploy.yml | 4 +- ansible/roles/tempest/tasks/reconfigure.yml | 2 +- ansible/roles/tempest/tasks/upgrade.yml | 4 +- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/bootstrap.yml | 2 +- ansible/roles/trove/tasks/config.yml | 24 +- ansible/roles/trove/tasks/deploy.yml | 13 +- ansible/roles/trove/tasks/reconfigure.yml | 2 +- ansible/roles/trove/tasks/register.yml | 1 - ansible/roles/trove/tasks/upgrade.yml | 6 +- .../roles/trove/templates/trove-conductor.conf.j2 | 12 +- .../roles/trove/templates/trove-guestagent.conf.j2 | 6 + .../trove/templates/trove-taskmanager.conf.j2 | 15 +- .../trove/templates/trove-taskmanager.json.j2 | 8 +- ansible/roles/trove/templates/trove.conf.j2 | 15 +- ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/bootstrap.yml | 2 +- ansible/roles/vitrage/tasks/config.yml | 3 - ansible/roles/vitrage/tasks/deploy.yml | 15 +- ansible/roles/vitrage/tasks/reconfigure.yml | 2 +- ansible/roles/vitrage/tasks/register.yml | 2 +- ansible/roles/vitrage/tasks/upgrade.yml | 6 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 2 + ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/config.yml | 3 - ansible/roles/vmtp/tasks/deploy.yml | 5 +- ansible/roles/vmtp/tasks/reconfigure.yml | 2 +- ansible/roles/vmtp/tasks/upgrade.yml | 4 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/bootstrap.yml | 2 +- ansible/roles/watcher/tasks/config.yml | 3 - ansible/roles/watcher/tasks/deploy.yml | 13 +- ansible/roles/watcher/tasks/reconfigure.yml | 2 +- ansible/roles/watcher/tasks/register.yml | 1 - ansible/roles/watcher/tasks/upgrade.yml | 6 +- ansible/roles/watcher/templates/watcher.conf.j2 | 2 + ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/config.yml | 3 - ansible/roles/zookeeper/tasks/deploy.yml | 4 +- ansible/roles/zookeeper/tasks/reconfigure.yml | 2 +- ansible/roles/zookeeper/tasks/upgrade.yml | 4 +- ansible/roles/zun/defaults/main.yml | 8 +- ansible/roles/zun/tasks/bootstrap.yml | 2 +- ansible/roles/zun/tasks/config.yml | 3 - ansible/roles/zun/tasks/deploy.yml | 13 +- ansible/roles/zun/tasks/reconfigure.yml | 2 +- ansible/roles/zun/tasks/register.yml | 1 - ansible/roles/zun/tasks/upgrade.yml | 6 +- ansible/roles/zun/templates/zun.conf.j2 | 2 + ansible/site.yml | 9 +- .../reference/databases/external-mariadb-guide.rst | 4 +- kolla_ansible/filters.py | 11 +- kolla_ansible/fluentd_filters.py | 44 +++ kolla_ansible/helpers.py | 21 ++ kolla_ansible/kolla_address.py | 30 +- .../add-trove-guestagent-5482833a0c99033a.yaml | 4 + ...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml | 5 + .../notes/bug-1681461-761f0cdf71bcb962.yaml | 6 + .../notes/bug-1848941-7e192be1885af513.yaml | 6 + .../notes/bug-1884090-c40ff140d5514108.yaml | 12 + .../notes/bug-1886615-640e817dfdb93b8a.yaml | 5 + .../notes/bug-1887180-89450a4185c7449d.yaml | 6 + .../notes/bug-1888852-8735ee29f69f77b5.yaml | 5 + .../notes/bug-1889611-f08c228fca884bf2.yaml | 5 + .../notes/bug-1895723-910de90908de260a.yaml | 6 + .../notes/bug-1896591-47c829f8b72d567a.yaml | 6 + .../notes/bug-1898765-73881932a2ef1d32.yaml | 7 + .../notes/bug-1898766-ffc55c97230d8221.yaml | 6 + .../notes/bug-1901960-363503e11449b53c.yaml | 6 + .../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 + .../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 + .../notes/bug-1906944-38798e1348ff9c97.yaml | 6 + .../notes/bug-1907436-2da50ed38d107127.yaml | 6 + .../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 + ...ug-freezer-dev-mod-failed-af5bebb6c3eaabad.yaml | 5 + .../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml | 5 + .../docker-disable-iptables-e9a248a0515f30a6.yaml | 12 + .../docker-install-iptables-f24fef8ce2418963.yaml | 6 + .../docker-repo-centos-8-edc2412c57a2762c.yaml | 5 + ...min-openrc-ownership-mode-310d89a6f50a9640.yaml | 19 + ...vacuate-cinder-encryption-489f8cf6a340e7be.yaml | 6 + ...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml | 7 + .../fix-keystone-startup-66c5aa11a464a562.yaml | 8 + .../fix-kibana-6-migration-0e1aa94040fd53c5.yaml | 5 + ...linuxbridge-arp_responder-28068f7fe41e4e4d.yaml | 8 + ...fix-linuxbridge-secgroups-7e5cae9d630e3db9.yaml | 6 + .../notes/fix-masakari-tls-64f010c037e95bea.yaml | 8 + ...ance-grafana-db-bootstrap-298feba3e1750aca.yaml | 5 + ...emcached-connection-issue-84f5affa217b4612.yaml | 8 + .../fluentd-single-config-d5ae95fecbfb6e3e.yaml | 5 + ...default-topic-replication-0debd5eb89f0c50d.yaml | 11 + .../notes/issue-bug-1904062-ef446343323c8452.yaml | 23 ++ .../notes/load-br-netfilter-4ce9facd93e96af7.yaml | 6 + .../logrotate-single-config-663d6bf154218380.yaml | 5 + ...ck-exporter-endpoint-type-7c687da172986fb3.yaml | 13 + ...-keystone-bootstrap-limit-f0250725633c16de.yaml | 7 + ...uce-db-connection-pooling-b44da77eaa390f22.yaml | 6 + ...e-from-openstack-exporter-f6bb5da3093abef8.yaml | 5 + ...est-api-required-settings-099875e53248b62c.yaml | 14 + test-requirements.txt | 4 +- tools/cleanup-containers | 2 +- tools/init-runonce | 2 +- tools/kolla-ansible | 17 +- tools/setup_gate.sh | 4 + zuul.d/base.yaml | 11 + zuul.d/jobs.yaml | 16 + zuul.d/project.yaml | 14 +- 606 files changed, 3430 insertions(+), 1944 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ee9d561e3..fb40592ed 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +2 @@ -ansible-lint>=4.2.0 # MIT +ansible-lint==4.2.0 # MIT @@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=2.8.0 # GPLv3 +ansible>=2.8.0,<2.10 # GPLv3

1 0

kayobe 8.1.0 (ussuri)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We joyfully announce the release of: kayobe 8.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 8.1.0 ^^^^^ New Features ************ * Updates the default image for the seed VM to CentOS 8.2. Upgrade Notes ************* * Kayobe configures Bifrost to use the "trusted" zone of "firewalld", ensuring that all services running on the seed host are accessible. Deployments with stricter firewall policies can select another zone by setting the "kolla_bifrost_firewalld_internal_zone" variable in "${KAYOBE_CONFIG_PATH}/bifrost.yml". To avoid loss of connectivity to the seed host, ensure that "firewalld" is already configured on the seed host before deploying seed services. Bug Fixes ********* * Adds support for a custom Barbican configuration file ("barbican.conf"), as only extended configuration stored under a "barbican" folder was supported. * Fixes loss of connectivity to the seed host after deploying seed services, when using a shared provisioning and admin network. This was caused by Bifrost configuring "firewalld" to only allow Ironic traffic. Kayobe now configures Bifrost to use the "trusted" zone, which allows all traffic. * Fix an issue when dnf proxy is set and python3-pip package fails during host configure. * Fixes a number of issues with using Kayobe on CentOS 8.3. * Fixes issues when network interfaces are configured without IP addresses. See story 2007900 for details. * Fixes generation of pip configuration when using a pip proxy without a local mirror. * Changes the value of "OS_ENDPOINT_TYPE", "OS_MANILA_ENDPOINT_TYPE", and "OS_MISTRAL_ENDPOINT_TYPE" in "public-openrc.sh" to use "publicURL", which should fix issues with legacy CLI tools on hosts without access to the internal API. See story 2007950 for details. * Removes the "ifcfg-eth0" network interface configuration file when not required, using a new version of the "MichaelRigaert.interfaces" Ansible role. This file ships with CentOS 8 cloud images and can prevent the "network" service from starting successfully when no "eth0" interface is present or being configured. See story 2007913 for details. * Fix the implementation of the "kayobe seed hypervisor host package update" command, which was incomplete. See story 2008458 for details. * Fixes an issue with seed service deployment where modifying the overcloud image fails on a CentOS 8.1 host with a CentOS 8.2 "bifrost_deploy" container, by updating the default image for the seed VM to CentOS 8.2. See story 2007942 for details. Changes in kayobe 8.0.0..8.1.0 ------------------------------ 5871473c CI: fix race condition in kolla-ansible-host-vars role tests c08d1b14 Fix implementation of kayobe seed hypervisor host package update 5cfd2ba5 Fixes for CentOS 8.3 0bc547f7 Fix filtering of network names set to an empty string d825b16c docs: Add link back to Train CentOS 8 migration page 7136a3e8 Synchronise global extra variables file with defaults 43b7dc40 Add missing barbican.conf support 7873dd85 Performance: skip LVM configuration if no groups configured 1d65c770 Configure bifrost to use firewalld trusted zone 6b1ca248 When EPEL install flag is not set eb063dbc Performance: avoid set_fact in Kolla Ansible host vars 5a2a2446 CI: Fix kayobe-tox-molecule job 41c88924 Performance: Parallelise Kolla Ansible host vars generation d40736b7 Document that kolla_tag may need to be changed when upgrading e998b15b Avoid setting IPADDR=0.0.0.0 7f3a8d50 Update shebang for Python 3 script 504b309d Performance: refactor pip configuration 53420e06 Move dnf.yml earlier in host configure workflow 50001a10 Make pip_index_url variable conditional 9fabc914 Pin ansible-lint to 4.2.0 f82a2308 Skip broken ansible-lint d324d9a6 Set endpoint type variables to publicURL in public-openrc.sh ab86a2d7 Block Ansible 2.9.12 6c65cbbc Sync kolla-ansible inventory for Ussuri 243bfe05 Fix network configuration when no eth0 interface is present f6321c2f Update hook link instructions to use relative path 9bbea8eb Update seed VM image to CentOS 8.2 84662a9c Sync zookeeper feature flag with kolla-ansible eef94567 Fix condition of placement image build ec71150a Add seed VM provisioning CI job Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/kolla_ansible_host_vars.py | 19 + ansible/dnf.yml | 2 + ansible/filter_plugins/networks.py | 18 +- ansible/group_vars/all/bifrost | 4 + ansible/group_vars/all/compute | 4 +- ansible/group_vars/all/controllers | 6 +- ansible/group_vars/all/kolla | 61 ++- ansible/group_vars/all/monitoring | 4 +- ansible/group_vars/all/seed | 14 +- ansible/group_vars/all/seed-hypervisor | 2 +- ansible/group_vars/all/seed-vm | 2 +- ansible/group_vars/all/storage | 4 +- ansible/host-package-update.yml | 2 +- ansible/kolla-ansible.yml | 301 ++++++-------- ansible/kolla-openstack.yml | 2 + ansible/lvm.yml | 15 +- ansible/roles/dnf/tasks/local-mirror.yml | 2 + .../kolla-ansible-host-vars/defaults/main.yml | 12 + .../roles/kolla-ansible-host-vars/tasks/main.yml | 15 + .../kolla-ansible-host-vars/templates/host-vars.j2 | 7 + ansible/roles/kolla-ansible/defaults/main.yml | 57 --- ansible/roles/kolla-ansible/tasks/config.yml | 27 +- ansible/roles/kolla-ansible/tasks/install.yml | 2 +- ansible/roles/kolla-ansible/templates/host-vars.j2 | 7 - .../kolla-ansible/templates/overcloud-services.j2 | 9 +- .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 + ansible/roles/kolla-openstack/defaults/main.yml | 3 + .../molecule/enable-everything/molecule.yml | 4 + ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/barbican.conf.j2 | 9 + ansible/roles/pip/tasks/main.yml | 6 +- ansible/roles/pip/tasks/pip_conf.yml | 24 +- .../public-openrc/templates/public-openrc.sh.j2 | 6 + ansible/seed-vm-provision.yml | 3 +- bindep.txt | 2 + dev/functions | 18 +- dev/tenks-deploy-config-compute.yml | 20 +- etc/kayobe/bifrost.yml | 4 + etc/kayobe/compute.yml | 9 +- etc/kayobe/controllers.yml | 7 + etc/kayobe/kolla.yml | 22 + etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 25 +- etc/kayobe/storage.yml | 9 +- kayobe/cli/commands.py | 24 +- kayobe/plugins/__init__.py | 0 kayobe/plugins/action/__init__.py | 0 kayobe/plugins/action/kolla_ansible_host_vars.py | 161 ++++++++ .../plugins/action/test_kolla_ansible_host_vars.py | 450 +++++++++++++++++++++ .../overrides.yml.j2 | 2 - .../kayobe-seed-upgrade-base/overrides.yml.j2 | 8 + playbooks/kayobe-seed-upgrade-base/pre.yml | 8 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 51 +++ playbooks/kayobe-seed-vm-base/pre.yml | 63 +++ playbooks/kayobe-seed-vm-base/run.yml | 15 + playbooks/kayobe-seed-vm-base/seed-group-vars.j2 | 5 + ...support-for-barbican-conf-c15f0ab4294281cf.yaml | 6 + .../bifrost-firewalld-zone-09a29651a058531a.yaml | 16 + .../notes/bugfix-dnf-proxy-cd934867c3d64388.yaml | 5 + .../notes/centos-8.3-89d07c8f8db5b17b.yaml | 4 + .../fix-no-ip-addr-on-nic-38d6f8e8078f534d.yaml | 6 + ...pip-index-url-conditional-3f9c5b3c5c808500.yaml | 5 + .../public-os-endpoint-type-a678a8ddc51ce3b1.yaml | 8 + .../notes/remove-ifcfg-eth0-c179ea98fc34e164.yaml | 9 + ...r-host-package-update-fix-9411205aadc92b8f.yaml | 6 + .../notes/seed-vm-centos-8.2-36b7a480a7725da1.yaml | 11 + requirements.txt | 2 +- requirements.yml | 6 +- setup.cfg | 3 + test-requirements.txt | 8 +- tools/feature-flags.py | 2 +- tools/run-bashate.sh | 4 +- tox.ini | 1 + zuul.d/jobs.yaml | 17 + zuul.d/project.yaml | 2 + 87 files changed, 1574 insertions(+), 472 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6e2d373d..e959d990 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.8.0,<2.10.0,!=2.8.9,!=2.9.8 # GPLv3 +ansible>=2.8.0,<2.10.0,!=2.8.9,!=2.9.8,!=2.9.12 # GPLv3 diff --git a/test-requirements.txt b/test-requirements.txt index 9b9f3d3c..b7415e4a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -ansible-lint>=3.0.0 # MIT +ansible-lint==4.2.0 # MIT @@ -9,2 +9,2 @@ doc8 # Apache-2.0 -docker<3 # Apache-2.0 -hacking>=0.12.0,<0.13 # Apache-2.0 +docker # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0 @@ -14 +14 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko<2.5.0 +paramiko

1 0

kayobe 9.0.0.0rc2 (victoria)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

Hello everyone, A new release candidate for kayobe for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/victoria Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *victoria-rc-potential* to bring it to the kayobe release crew's attention.

1 0

kayobe 7.2.0 (train)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

We are amped to announce the release of: kayobe 7.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 7.2.0 ^^^^^ New Features ************ * Provides project and domain default variables for Monasca. Defaults can be overridden from the Monasca config file etc/kayobe/monasca.yml. * Updates the default image for the seed VM to CentOS 8.2. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading a deployment to the Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation Deprecation Notes ***************** * Removes support for Neutron LBaaS as Kolla Ansible dropped support in the Train release. Bug Fixes ********* * Fixes the Monasca install type causing issues pulling container images. See story 2007597 for details. * Adds support for a custom Barbican configuration file ("barbican.conf"), as only extended configuration stored under a "barbican" folder was supported. * Fix an issue when dnf proxy is set and python3-pip package fails during host configure. * Fixes a number of issues with using Kayobe on CentOS 8.3. * Fixes an issue when configuring the external API network interface on controllers without an IP address which would cause "kayobe overcloud host configure" to fail on a host with an active virtual IP address. See story 2007736 for details. * Fixes an issue where disabling SELinux would fail on systems without SELinux installed. See story 2007704. * Fixes issues when network interfaces are configured without IP addresses. See story 2007900 for details. * Fixes generation of pip configuration when using a pip proxy without a local mirror. * Changes the value of "OS_ENDPOINT_TYPE", "OS_MANILA_ENDPOINT_TYPE", and "OS_MISTRAL_ENDPOINT_TYPE" in "public-openrc.sh" to use "publicURL", which should fix issues with legacy CLI tools on hosts without access to the internal API. See story 2007950 for details. * Removes the "ifcfg-eth0" network interface configuration file when not required, using a new version of the "MichaelRigaert.interfaces" Ansible role. This file ships with CentOS 8 cloud images and can prevent the "network" service from starting successfully when no "eth0" interface is present or being configured. See story 2007913 for details. * Fix the implementation of the "kayobe seed hypervisor host package update" command, which was incomplete. See story 2008458 for details. * Fixes an issue with seed service deployment where modifying the overcloud image fails on a CentOS 8.1 host with a CentOS 8.2 "bifrost_deploy" container, by updating the default image for the seed VM to CentOS 8.2. See story 2007942 for details. Changes in kayobe 7.1.0..7.2.0 ------------------------------ c0c34596 CI: fix race condition in kolla-ansible-host-vars role tests 641772db Fix implementation of kayobe seed hypervisor host package update ac7adbb9 Fixes for CentOS 8.3 5f48f019 Fix filtering of network names set to an empty string cdaec7ab docs: Add link to Kolla Ansible CentOS 8 page 39ef7b5c Add missing barbican.conf support 5fd45d67 Performance: skip LVM configuration if no groups configured b2df95a0 Document migration of seed VM to CentOS 8 d69b959a When EPEL install flag is not set 0b209dad CI: Fix kayobe-tox-molecule job 74f56030 Performance: Parallelise Kolla Ansible host vars generation 94848eef Document that kolla_tag may need to be changed when upgrading 244bb221 Avoid setting IPADDR=0.0.0.0 afeb5d7b Performance: refactor pip configuration 739a2412 Move dnf.yml earlier in host configure workflow 9e9808a0 Make pip_index_url variable conditional 28cf998a Skip broken ansible-lint 673e1b97 Set endpoint type variables to publicURL in public-openrc.sh 00461fc4 Block Ansible 2.8.14 dc5f8e12 Fix external API interface with out an IP address 14ce936a CI: Fix overcloud host configure job due to pytest 6 780fce2b Fix network configuration when no eth0 interface is present b47a7616 Define default variables for Monasca config 0ce22986 Update seed VM image to CentOS 8.2 edd9da70 Sync zookeeper feature flag with kolla-ansible 953879cb Add elasticsearch-curator to kolla-ansible inventory template e9b2b329 Fix condition of placement image build 539a7fb5 Update image regexes a050984b Update feature flag defaults ee65b6e4 Update feature flags 36a85d7f Remove support for Neutron LBaaS fbf89c63 Don't disable SELinux if it is not installed b773708b Use Ansible connection reset support in docker role Diffstat (except docs and test files) ------------------------------------- ansible/dnf.yml | 2 + ansible/filter_plugins/networks.py | 27 +- ansible/group_vars/all/compute | 4 +- ansible/group_vars/all/controllers | 6 +- ansible/group_vars/all/grafana | 2 +- ansible/group_vars/all/kolla | 211 ++++++++++++-- ansible/group_vars/all/monasca | 12 + ansible/group_vars/all/monitoring | 4 +- ansible/group_vars/all/seed | 4 +- ansible/group_vars/all/seed-hypervisor | 2 +- ansible/group_vars/all/storage | 4 +- ansible/host-package-update.yml | 2 +- ansible/kolla-ansible.yml | 311 +++++++++++---------- ansible/kolla-openstack.yml | 2 + ansible/lvm.yml | 15 +- ansible/overcloud-grafana-configure.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 6 + ansible/roles/dnf/tasks/local-mirror.yml | 2 + ansible/roles/docker/tasks/main.yml | 29 +- .../kolla-ansible-host-vars/defaults/main.yml | 12 + .../roles/kolla-ansible-host-vars/tasks/main.yml | 15 + .../kolla-ansible-host-vars/templates/host-vars.j2 | 7 + ansible/roles/kolla-ansible/defaults/main.yml | 62 ---- ansible/roles/kolla-ansible/tasks/config.yml | 27 +- .../roles/kolla-ansible/templates/globals.yml.j2 | 6 + ansible/roles/kolla-ansible/templates/host-vars.j2 | 7 - .../kolla-ansible/templates/overcloud-services.j2 | 4 + .../kolla-ansible/templates/requirements.txt.j2 | 2 +- ansible/roles/kolla-ansible/vars/Debian.yml | 3 +- ansible/roles/kolla-ansible/vars/RedHat.yml | 2 +- ansible/roles/kolla-ansible/vars/main.yml | 32 +-- ansible/roles/kolla-openstack/defaults/main.yml | 3 + .../molecule/enable-everything/molecule.yml | 4 + ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/barbican.conf.j2 | 9 + ansible/roles/pip/tasks/main.yml | 6 +- ansible/roles/pip/tasks/pip_local_mirror.yml | 24 +- .../public-openrc/templates/public-openrc.sh.j2 | 6 + ansible/roles/yum/tasks/local-mirror.yml | 3 + ansible/yum.yml | 2 + dev/functions | 3 +- dev/tenks-deploy-config-compute.yml | 20 +- etc/kayobe/kolla.yml | 92 +++++- etc/kayobe/monasca.yml | 18 ++ kayobe/cli/commands.py | 24 +- .../overrides.yml.j2 | 2 - playbooks/kayobe-overcloud-upgrade-base/run.yml | 16 +- .../add-monasca-defaults-8486abe37ed3a13b.yaml | 9 + ...support-for-barbican-conf-c15f0ab4294281cf.yaml | 6 + .../notes/bugfix-dnf-proxy-cd934867c3d64388.yaml | 5 + .../notes/centos-8.3-89d07c8f8db5b17b.yaml | 4 + .../notes/external-api-no-ip-f04951ffc9659949.yaml | 8 + ...ble-selinux-not-installed-eff17c715efc1fdb.yaml | 6 + .../fix-no-ip-addr-on-nic-38d6f8e8078f534d.yaml | 6 + ...pip-index-url-conditional-3f9c5b3c5c808500.yaml | 5 + .../public-os-endpoint-type-a678a8ddc51ce3b1.yaml | 8 + .../notes/remove-ifcfg-eth0-c179ea98fc34e164.yaml | 9 + ...ove-neutron-lbaas-support-b4f23b542679131a.yaml | 11 + ...r-host-package-update-fix-9411205aadc92b8f.yaml | 6 + .../notes/seed-vm-centos-8.2-36b7a480a7725da1.yaml | 11 + requirements.txt | 2 +- requirements.yml | 4 +- setup.cfg | 1 + test-requirements.txt | 12 +- tools/feature-flags.py | 16 ++ tools/sphinx8 | 10 +- tox.ini | 7 +- 76 files changed, 1109 insertions(+), 519 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3989ce9e..891939f2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.6.0,<2.9.0,!=2.8.9 # GPLv3 +ansible>=2.6.0,<2.9.0,!=2.8.9,!=2.8.14 # GPLv3 diff --git a/test-requirements.txt b/test-requirements.txt index 26dece02..020031c3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -ansible-lint>=3.0.0 # MIT +ansible-lint>=3.0.0,!=4.3.0 # MIT @@ -9 +9 @@ doc8 # Apache-2.0 -docker<3 # Apache-2.0 +docker # Apache-2.0 @@ -10,0 +11 @@ hacking>=0.12.0,<0.13 # Apache-2.0 +mock # BSD @@ -13 +14,2 @@ sh<1.13 # MIT -molecule<3 # MIT +molecule<3;python_version<'3' # MIT +pytest<6 # MIT @@ -16,2 +18,2 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko<2.5.0 -stestr # Apache-2.0 +paramiko +stestr<3 # Apache-2.0

1 0

kolla-ansible 11.0.0.0rc2 (victoria)
by no-reply＠openstack.org 07 Jan '21

07 Jan '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/victoria Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *victoria-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

puppet-tripleo 13.5.0 (victoria)
by no-reply＠openstack.org 04 Jan '21

04 Jan '21

We joyfully announce the release of: puppet-tripleo 13.5.0: Puppet module for OpenStack TripleO This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 13.5.0 ^^^^^^ New Features * This change introduces two hiera keys that allow an operator to specify which NIC (or NICs) the VIPs will be bound to. One hiera key has global effect (tripleo::pacemaker::force_nic) and forces all VIPs to listen to that NIC. There is also the possibility to override that for specific VIPs with the force_vip_nic_overrides hiera hash. This change is only useful for deployments where BGP is used to advertise IP addresses from the host across multiple L3 networks. Changes in puppet-tripleo 13.4.0..13.5.0 ---------------------------------------- 4125e22d Bump metadata to 13.5.0 for new release of stable/victoria 8e4c5065 Fix nic selection when no nic is specified fd43ab9b Defauts mariadb's innodb_strict_mode to OFF 1c27dd46 Filter haproxy_certificate_specs if hostname is empty f483c91f Force MySQL / MariaDB log_warnings to 1 63b4b8c3 Allow to specify a nic for the VIPs b99c7a36 Generic cluster properties support 24d0ff54 galera: expose 2-node mode for the galera resource 8e3eac8f Make sure qemu CA has correct permissions c9c61a4c Cleanup old workaround for ipv6 VIPs ac7d415c Update TOX_CONSTRAINTS_FILE for stable/victoria 37677389 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/certmonger/qemu.pp | 20 ++++++++++ manifests/pacemaker/haproxy_with_vip.pp | 18 ++++++--- manifests/profile/base/certmonger_user.pp | 10 +++-- manifests/profile/base/database/mysql.pp | 44 +++++++++++++--------- manifests/profile/base/pacemaker.pp | 7 ++++ manifests/profile/pacemaker/database/mysql.pp | 1 + .../profile/pacemaker/database/mysql_bundle.pp | 14 ++++++- manifests/profile/pacemaker/haproxy_bundle.pp | 33 ++++++++++++++++ manifests/profile/pacemaker/ovn_dbs_bundle.pp | 29 ++++++++++++-- metadata.json | 2 +- .../notes/vip-bind-nic-11e80207fcb78a20.yaml | 10 +++++ tox.ini | 2 +- 13 files changed, 160 insertions(+), 31 deletions(-)

1 0

tripleo-common 13.1.0 (victoria)
by no-reply＠openstack.org 04 Jan '21

04 Jan '21

We are chuffed to announce the release of: tripleo-common 13.1.0: A common library for TripleO workflows. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 13.1.0 ^^^^^^ Bug Fixes * The qemu user on the host gets created using uid/gid 107. Certificates on the host, but also the vhost-user sockets created by ovs use this uid/gid. With the move to TCIB images the default kolla ids were reverted and the previous overwrite dropped. This make e.g. the qemu processes to fail to use the libvirt-vnc bind mounted certificates. This change brings back the previous overwrite of the qemu user uid/gid. Changes in tripleo-common 13.0.0..13.1.0 ---------------------------------------- 34c6c319 Add daxio package for nvdimm scenario 313639c0 TCIB: Pick not best when building on centos/ubi 663b6495 The lower constraint file has been removed 59d58fe5 Fix handling of default_tag 3ab228eb Change qemu user id to match previous releases ac0b7c3d Re-add ndctl to nova-compute image 08627f3f Add better exception logging for builds 85fee26d Fix wait condition for retry 2a7d949b Drop --layers from buildah 145b00ea Add heat-engine healthcheck 01fcd55b Refactor buildah logging 7cb0305b Add retry to build 4974508d Update TOX_CONSTRAINTS_FILE for stable/victoria 63feca91 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../container_image_prepare_defaults.yaml | 1 - container-images/kolla/base/uid_gid_manage.sh | 2 +- container-images/tcib/base/base.yaml | 1 + .../base/os/heat-base/heat-engine/heat-engine.yaml | 1 + .../os/nova-base/nova-compute/nova-compute.yaml | 2 + lower-constraints.txt | 109 --------------------- .../notes/qemu_user_id-32d8f17099a6f002.yaml | 10 ++ tox.ini | 8 +- tripleo_common/image/builder/buildah.py | 53 +++++++--- tripleo_common/image/image_uploader.py | 6 +- tripleo_common/image/kolla_builder.py | 14 +-- zuul.d/layout.yaml | 2 - 16 files changed, 177 insertions(+), 151 deletions(-)

1 0

os-net-config 13.1.0 (victoria)
by no-reply＠openstack.org 04 Jan '21

04 Jan '21

We contentedly announce the release of: os-net-config 13.1.0: OpenStack network configuration This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.0.0..13.1.0 --------------------------------------- 157df25 Support binding VFs after moving to switchdev 2490663 Fixing the dependency for sriov_config service fc70475 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_net_config/sriov_bind_config.py | 137 ++++++++++++++++++++++++++ os_net_config/sriov_config.py | 14 ++- os_net_config/utils.py | 2 +- setup.cfg | 1 + 6 files changed, 206 insertions(+), 2 deletions(-)

1 0