November 2021 - Release-announce - lists.openstack.org

metalsmith 1.6.0 (yoga)
by no-reply＠openstack.org 24 Nov '21

24 Nov '21

We are delighted to announce the release of: metalsmith 1.6.0: Deployment and Scheduling tool for Bare Metal This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 1.6.0 ^^^^^ New Features ************ * Network metadata is now created and written to the instance config in the config-drive for deployed nodes. Bug Fixes ********* * Fixed and issue where deployed nodes did not become available over the network. This happened when the first network interface was not connected to a network with a DHCP service, i.e a secondary network interface was used. The addition of network metadata in the instance config solves this problem. See bug: 2009238 (https://storyboard.openstack.org/#!/story/2009238) Changes in metalsmith 1.5.1..1.6.0 ---------------------------------- 7268987 CI: remove old centos7 job 5e5e421 Update pep8 test requirements ab69212 Set explicit boot mode to bios for legacy job f98dfa6 Write network_data.json metadata to config-dirve 56cf1fe Add Python3 yoga unit tests 9615de0 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 34 +----- metalsmith/_network_metadata.py | 93 +++++++++++++++ metalsmith/_provisioner.py | 7 +- metalsmith/exceptions.py | 4 + metalsmith/instance_config.py | 13 ++- metalsmith/test/test_instance_config.py | 15 ++- metalsmith/test/test_network_metadata.py | 130 +++++++++++++++++++++ metalsmith/test/test_provisioner.py | 24 ++-- .../notes/network-metadata-ff0c3e80e5e0f53c.yaml | 13 +++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + tox.ini | 6 +- 13 files changed, 302 insertions(+), 48 deletions(-)

1 0

ironic-lib 5.1.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are stoked to announce the release of: ironic-lib 5.1.0: Ironic common library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 5.1.0 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 5.0.0..5.1.0 ---------------------------------- 731e2f9 Restore blkid compatibility with Centos 7 b6416ee Allow qemu-img to write out zeros to disk 15f5264 Add Python3 yoga unit tests b7f1211 Avoid using blkid in favour of lsblk and parted ac95888 Drop an explicit requirement of oslo.log Diffstat (except docs and test files) ------------------------------------- ironic_lib/auth_basic.py | 4 +- ironic_lib/disk_partitioner.py | 3 +- ironic_lib/disk_utils.py | 63 +++++++++++++---- ironic_lib/exception.py | 2 +- ironic_lib/json_rpc/client.py | 5 +- ironic_lib/json_rpc/server.py | 4 +- ironic_lib/keystone.py | 2 +- ironic_lib/mdns.py | 2 +- ironic_lib/metrics_statsd.py | 4 +- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ requirements.txt | 1 - zuul.d/project.yaml | 2 +- 14 files changed, 120 insertions(+), 61 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 23e1322..c652c43 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +9,0 @@ oslo.utils>=3.34.0 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0

1 0

os_vif 2.7.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are tickled pink to announce the release of: os_vif 2.7.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. Changes in os_vif 2.6.0..2.7.0 ------------------------------ b30c7fc Add Python3 yoga unit tests 067fd6a Update master for stable/xena e4dc8b5 only register tables used by os-vif 09c0629 Use TCP keepalives for ovsdb connections Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 +++++ vif_plug_ovs/ovsdb/impl_idl.py | 50 +++++++++++++++++++++++++++++++++++++++++- 4 files changed, 57 insertions(+), 2 deletions(-)

1 0

python-neutronclient 7.7.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are tickled pink to announce the release of: python-neutronclient 7.7.0: CLI and Client Library for OpenStack Networking This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.7.0 ^^^^^ New Features * Added new client methods for QoS minimum packet rate rule: "list_minimum_packet_rate_rules", "show_minimum_packet_rate_rule", "create_minimum_packet_rate_rule", "update_minimum_packet_rate_rule", "delete_minimum_packet_rate_rule". Changes in python-neutronclient 7.6.0..7.7.0 -------------------------------------------- 3b80135 Add support for minimum packet rate rule to the client 3a65712 Fix lower-constraints and neutronclient-functional job 792ad11 Add Python3 yoga unit tests ee73a48 Update master for stable/xena cff9c26 Replace deprecated assertDictContainsSubset Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- lower-constraints.txt | 2 +- neutronclient/v2_0/client.py | 34 ++++++++++++++++++++++ .../minimum-packet-rate-34576b8fd98a3034.yaml | 7 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++ 7 files changed, 54 insertions(+), 5 deletions(-)

1 0

kolla 10.4.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are pumped to announce the release of: kolla 10.4.0: Kolla OpenStack Deployment This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 Changes in kolla 10.3.0..10.4.0 ------------------------------- 5445c1e54 cinder-volume/ubuntu: add lsscsi and nvme f179f8383 neutron: Fix update-alternatives on CentOS 23af39b04 [debian] Use upstream MariaDB cdf823440 [doc] Fix Ceph sources 2637b4328 Unify curl options 36e4f077e monasca-thresh: Allow topology check and removal in storm e0fa1aa51 masakari: Add crm_mon to masakarimonitors sudoers 2df836b0f Improve offline build scenario. 9f3660a6c Add boto3 as s3 dependency for Glance container 09cecc92e Fix missing templating block for kolla-toolbox. f28f4a942 Fix prometheus-elasticsearch-exporter container. Diffstat (except docs and test files) ------------------------------------- .../masakari-monitors/masakari_monitors_sudoers | 1 + .../monasca/monasca-thresh/topology_bootstrap.sh | 90 ++++++++++++++++++++++ .../prometheus-alertmanager/Dockerfile.j2 | 2 +- .../prometheus-blackbox-exporter/Dockerfile.j2 | 2 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 2 +- .../Dockerfile.j2 | 2 +- .../prometheus-haproxy-exporter/Dockerfile.j2 | 2 +- .../prometheus-memcached-exporter/Dockerfile.j2 | 2 +- .../prometheus-mysqld-exporter/Dockerfile.j2 | 2 +- .../prometheus-node-exporter/Dockerfile.j2 | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/template/repos.yaml | 2 + ...a-toolbox_templating_block-3d284d886816e95a.yml | 5 ++ .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 +++ .../improve_offline_support-e7b2384fb7390184.yaml | 5 ++ 38 files changed, 196 insertions(+), 41 deletions(-)

1 0

kayobe 8.2.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are thrilled to announce the release of: kayobe 8.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Removes the workaround for bogus name server entries in some CentOS 7 images, together with the "overcloud_host_image_workaround_resolv_enabled" variable. Bug Fixes ********* * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. Changes in kayobe 8.1.1..8.2.0 ------------------------------ 64275c03 Remove stale config dump from seed hypervisor host configure 976d80a3 Add the missing documentation for mariadb recovery 3dc0578e Remove CentOS 7 image resolv.conf workaround df84ff92 Fix IPA builder version typo 331b6069 Fix wrong filename in bifrost docs e74d5629 Make setup module arguments configurable b5f994d7 CI: Disable libvirt debug logs 8705e35b CI: Log disk usage details 7ae8ac85 Sync documentation with kolla_openstack_custom_config 31af98f2 Use ansible_facts to reference facts 16da52a1 Fix typo in IP allocation filename d4fd330f CI: Fix get_logs.sh docker logs output 02ea57de Add twentyFiveGigE to port descriptions in inspector rules d4445e3e dnf: add metalink argument to custom dnf repository c67473e3 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/globals | 11 ++++ ansible/group_vars/all/inspector | 4 ++ ansible/group_vars/all/overcloud | 11 ---- ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/kayobe-target-venv.yml | 18 +++--- ansible/kolla-target-venv.yml | 8 ++- ansible/network.yml | 2 + ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++++ ansible/overcloud-host-image-workaround-resolv.yml | 35 ------------ ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/roles/bootstrap/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 2 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 8 +-- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 12 ++-- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 12 ++-- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +-- ansible/snat.yml | 4 +- ansible/timezone.yml | 2 +- etc/kayobe/bifrost.yml | 2 +- etc/kayobe/globals.yml | 11 ++++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/overcloud.yml | 11 ---- kayobe/ansible.py | 1 + kayobe/cli/commands.py | 30 +++++----- playbooks/kayobe-base/pre.yml | 14 +++++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 16 ++++++ playbooks/kayobe-overcloud-upgrade-base/pre.yml | 5 ++ playbooks/kayobe-overcloud-upgrade-base/run.yml | 5 ++ playbooks/kayobe-seed-base/overrides.yml.j2 | 4 -- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 1 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++++ .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 ++ ...ve-resolv-conf-workaround-4cb484d3a66c4e58.yaml | 6 ++ .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++++ .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 ++ requirements.yml | 28 +++++----- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + 63 files changed, 368 insertions(+), 173 deletions(-)

1 0

kolla-ansible 10.4.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are delighted to announce the release of: kolla-ansible 10.4.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Add new option prometheus_openstack_exporter_timeout to override default scrape_timeout for openstack exporter job. * Adds support for elasticsearch storage backend with cloudkitty: That feature let you store cloudkitty rating documents directly within your elasticsearch cluster. If you already have an elasticsearch cluster running for logging it create a new cloudkitty specific index. That let you use kibana, grafana or any other interface to browse your rating data and create appropriate dashboard or build an appropriate billing service over it. Adds support for prometheus as a fetcher/collector for cloudkitty: That feature let you use prometheus metrics as your source of rating. Using prometheus let you rate pretty much any openstack object directly from the kolla provided exporters (Openstack_exporter) or your own customs exporters. * Adds config parameter "haproxy_nova_spicehtml5_proxy_tunnel_timeout" to configure the "Tunnel TimeOut" directive for spicehtml5proxy haproxy service. * Adds a new variable, "disable_firewall", which defaults to "true". If set to "false", then the host firewall will not be disabled during "kolla-ansible bootstrap-servers". * Adds two new variables "service_images_pull_retries" and "service_images_pull_delay" which control the behaviour of image pulling tasks. These are useful if your registry is not 100% reliable (usually due to load). The defaults have been set to 3 retries and 5 seconds delay to ensure a better default experience (these are actually Ansible defaults when task retries are enabled). * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kolla_ansible_setup_filter" and "kolla_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * New variable "ironic_enable_keystone_integration" was added. It helps to add keystone connection information into "ironic.conf" if we want to connect to existing keystone (not installing it at the same time). Upgrade Notes ************* * Updates all references to Ansible facts within Kolla Ansible from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Modifies the default value of "ceph_nova_user" from "nova" to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". Users who have overridden "ceph_nova_keyring" to use separate keyrings for Nova and Cinder should also override "ceph_nova_user" to match the Nova keyring. LP#1934145 * Modifies the default value of "rabbitmq_server_additional_erl_args" from an empty string to "+S 2:2 +sbwt none +sbwtdcpu none +sbwtdio none". Security Issues *************** * Fixes "net.ipv4.ip_forward" not to be enabled by Kolla Ansible on the default network namespace. It was enabled on hosts with Neutron L3 Agent (thus in most common setups with OVS and/or Linux Bridge, but not OVN) and allowed, unless users had extra iptables rules to avoid that, any traffic to be accepted for forwarding (as long as it was routable and passed other checks). Users of existing setups are advised to re-evaluate whether they need this sysctl enabled and disable if not necessary. Kolla Ansible will simply no longer try to set this sysctl at all. Neutron L3 Agent handles forwarding enablement per managed namespace. LP#1945453 Bug Fixes ********* * Fixes monasca-thresh to correctly submit the topology to Storm. The previous container ran the topology in local mode (within the container), and didn't use the Storm cloud. The new container handles submitting the topology to Storm and also handles killing and replaces the topology when it's configuration has changed. As a result, the monasca-thresh container is only used for submission, and exits after that's completed. The logs for the topology will now be available in the storm worker-artifact logs. LP#1808805 * Fixes an issue where configuration in containers could become stale. This prevented containers with updated configuration from being restarted, e.g., if the "kolla-ansible genconfig" and "kolla- ansible deploy-containers" commands were used together. LP#1848775 * Fixes elasticsearch fluentd output being enabled when elasticsearch is not enabled. LP#1927880 * Fixes an issue seen when customising the Docker Yum repository URL on CentOS, where the "docker_yum_gpgkey" variable is not used consistently. LP#1934913 * Fixes an issue where spice console is freezed after while, see LP#1938549. * Fixed broken "kolla-toolbox" container when RabbitMQ is disabled and IPv6 is used. LP#1939883 * Fixes "mariadb-clustercheck" not to run when there is no HAProxy. LP#1944114 * No longer creates directories for haproxy and swift logs where they are not needed. LP#1945070 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fixes an issue with Cyborg deployment. LP#1937911 * Fixes an issue with "config.json" for "neutron-server" when a VMware plugin agent is used. * Fixes an issue with Neutron "linuxbridge" ML2 agent when "neutron_external_interface" includes multiple interfaces. LP#1863935 * Fixes an issue with Manila configuration which was missing a "[glance]" section, preventing some drivers from operating. * Fixes an issue with default Nova configuration for Ceph where the RBD user is set to "nova", but only a "cinder" keyring is copied. The default value of "ceph_nova_user" is changed to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". LP#1934145 * Fixes an issue where RabbitMQ consumes a large amount of CPU, particularly on multi-core systems. The default RabbitMQ tuning assumes that RabbitMQ is running on a dedicated host, which is the opposite of a typical Kolla Ansible container setup. For more details on tuning RabbitMQ in your environment, please see: https://www.rabbitmq.com/runtime.html#busy-waiting https://www.rabbitmq.com/runtime.html#scheduling Other Notes *********** * Optimised image pulling to avoid looping over disabled services. Changes in kolla-ansible 10.3.0..10.4.0 --------------------------------------- 3c21a5391 Stop creating unused cron/logrotate directory 5253da3c0 Fix broken deploy of placement service cddc4e1f5 Fix missing Ansible version in the error message 7ddaf4550 Add support for Ironic inspection through DHCP-relay 58f7f95de Correctly create the dhcp_agent.ini and l3_agent.ini efb580ef8 Do not set net.ipv4.ip_forward sysctl d4153db70 Do not create haproxy and swift log dirs needlessly 73859a3d8 Docs: Update to opendev.org domain 7a55c46ee Do not enable mariadb-clustercheck when not needed 4d24556b9 Do not become root when searching for custom prometheus alert rules files 85e31d2b3 CI: stop setting ceph_nova_user 307ac600a Add disable_firewall variable 6c865d39e Add override timeout for openstack exporter de70a8424 Fix neutron upgrade using host limit without controllers df92cb4f6 Zun: Temporarily skip capsule test for ubuntu 36280dd5e Fix kolla-toolbox with IPv6 and disabled RabbitMQ 59df4974c Remove an unused file dd8fad8b1 Add ability to retry image pulling 313a6580c Fix regression in image pull action v2 3279637a7 Use more RMQ flags for less busy wait 16fe223bc Fix regression in image pull action 3f440ab10 Set changed_when to false for group_by tasks 97804e484 Fix the Tempest image url variable c65e1035b fluentd: Fix check for external elasticsearch a552f93cd ironic: Follow up for ironic_enable_keystone_integration ec4afcafb Refactor and optimise image pulling d79d0d3b3 monasca-thresh: Fix topology submission to storm 3bcc754fe Extra var ironic_enable_keystone_integration added. 3acfef48f baremetal: use docker_yum_gpgkey to fetch docker GPG key 998186750 Fix release note for ansible_facts 90c3cdc0a neutron: fix neutron-server config.json with VMware 8a9480661 Blazar: Fix support for external keystone in multiregion deploy fcad47657 nova: Use cinder user for Ceph 2b353889a Elevated privileges required to set owner/group/mode by ansible 70ad1ea10 Fix config action when OVN is enabled a43ca2673 Check config when checking the containers 608f92669 Fix nova deployment failure when rabbitmq is disabled a9a8f6d49 Fix freezed spice console in horizon 5e7ac8702 watcher: add missing become for copying configs f6f2c1352 Fix incorrect config of linuxbridge multiple external networks a2ac590fc Make setup module arguments configurable 80c0cee82 cyborg: add missing become for api-paste.ini ae3b709ca Add missing elasticsearch cloudkitty storage and prometheus collector backend support. 0ccd665be Use ansible_facts to reference facts da591982a docs: Add information on tuning Ansible 43c81db1c manila: add glance section in manila-share.conf 95de85025 Reduce RabbitMQ busy waiting, lowering CPU load Diffstat (except docs and test files) ------------------------------------- ansible/gather-facts.yml | 14 +- ansible/group_vars/all.yml | 27 ++- ansible/library/kolla_docker.py | 44 ++++- ansible/post-deploy.yml | 4 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/pull.yml | 12 +- ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/pull.yml | 12 +- ansible/roles/baremetal/defaults/main.yml | 11 +- ansible/roles/baremetal/tasks/install.yml | 72 ++++---- ansible/roles/baremetal/tasks/post-install.yml | 18 +- ansible/roles/baremetal/tasks/pre-install.yml | 16 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/pull.yml | 12 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 +- ansible/roles/ceilometer/defaults/main.yml | 8 +- ansible/roles/ceilometer/tasks/pull.yml | 12 +- ansible/roles/chrony/defaults/main.yml | 2 +- ansible/roles/chrony/tasks/pull.yml | 12 +- ansible/roles/cinder/defaults/main.yml | 8 +- ansible/roles/cinder/tasks/pull.yml | 12 +- ansible/roles/cloudkitty/defaults/main.yml | 47 +++++- ansible/roles/cloudkitty/tasks/bootstrap.yml | 30 ++++ ansible/roles/cloudkitty/tasks/pull.yml | 12 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 34 +++- ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 12 +- ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/tasks/config.yml | 9 +- ansible/roles/common/tasks/inspect.yml | 6 - ansible/roles/common/tasks/pull.yml | 21 ++- .../templates/conf/input/03-rabbitmq.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 4 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 4 +- ansible/roles/congress/defaults/main.yml | 6 +- ansible/roles/congress/tasks/pull.yml | 12 +- ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/config.yml | 1 + ansible/roles/cyborg/tasks/pull.yml | 12 +- ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/pull.yml | 12 +- ansible/roles/elasticsearch/defaults/main.yml | 4 +- ansible/roles/elasticsearch/tasks/pull.yml | 12 +- ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/tasks/pull.yml | 12 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/pull.yml | 12 +- ansible/roles/glance/defaults/main.yml | 8 +- ansible/roles/glance/tasks/pull.yml | 12 +- ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/pull.yml | 12 +- ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/tasks/pull.yml | 9 +- .../templates/haproxy_single_service_listen.cfg.j2 | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 4 +- ansible/roles/haproxy/tasks/precheck.yml | 6 +- ansible/roles/haproxy/tasks/pull.yml | 12 +- ansible/roles/haproxy/tasks/upgrade.yml | 2 +- ansible/roles/heat/defaults/main.yml | 6 +- ansible/roles/heat/tasks/pull.yml | 12 +- ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 12 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 9 +- ansible/roles/ironic/defaults/main.yml | 13 +- ansible/roles/ironic/tasks/deploy.yml | 2 +- ansible/roles/ironic/tasks/pull.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 4 +- ansible/roles/ironic/templates/ironic.conf.j2 | 8 +- ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 12 +- ansible/roles/kafka/defaults/main.yml | 2 +- ansible/roles/kafka/tasks/pull.yml | 12 +- ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/pull.yml | 12 +- ansible/roles/keystone/defaults/main.yml | 6 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/pull.yml | 12 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/pull.yml | 12 +- ansible/roles/kuryr/defaults/main.yml | 2 +- ansible/roles/kuryr/tasks/pull.yml | 8 +- ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/pull.yml | 12 +- ansible/roles/manila/defaults/main.yml | 8 +- ansible/roles/manila/tasks/pull.yml | 12 +- .../roles/manila/templates/manila-share.conf.j2 | 14 +- ansible/roles/mariadb/defaults/main.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 3 + ansible/roles/mariadb/tasks/pull.yml | 12 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 6 +- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/pull.yml | 12 +- ansible/roles/memcached/defaults/main.yml | 4 +- ansible/roles/memcached/tasks/pull.yml | 13 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/pull.yml | 12 +- ansible/roles/monasca/defaults/main.yml | 23 +-- ansible/roles/monasca/handlers/main.yml | 33 +++- ansible/roles/monasca/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/config.yml | 4 +- ansible/roles/monasca/tasks/pull.yml | 12 +- ansible/roles/monasca/tasks/upgrade.yml | 13 ++ .../monasca-agent-collector/agent-collector.yml.j2 | 2 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-agent-statsd/agent-statsd.yml.j2 | 2 +- .../monasca-thresh/monasca-thresh.json.j2 | 2 +- .../monasca/templates/monasca-thresh/storm.yml.j2 | 8 - ansible/roles/mongodb/defaults/main.yml | 2 +- ansible/roles/mongodb/tasks/pull.yml | 12 +- ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 12 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/pull.yml | 12 +- ansible/roles/neutron/defaults/main.yml | 24 +-- ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/pull.yml | 12 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 2 + .../neutron/templates/linuxbridge_agent.ini.j2 | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- .../roles/neutron/templates/neutron-server.json.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 2 +- ansible/roles/nova-cell/defaults/main.yml | 27 +-- ansible/roles/nova-cell/tasks/config-host.yml | 2 +- .../roles/nova-cell/tasks/discover_computes.yml | 8 +- ansible/roles/nova-cell/tasks/loadbalancer.yml | 4 + ansible/roles/nova-cell/tasks/pull.yml | 12 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 4 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 4 +- ansible/roles/nova-hyperv/templates/wsgate.ini.j2 | 4 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/pull.yml | 12 +- ansible/roles/octavia/defaults/main.yml | 8 +- ansible/roles/octavia/tasks/pull.yml | 12 +- ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/openvswitch/tasks/pull.yml | 12 +- ansible/roles/ovn/handlers/main.yml | 4 + ansible/roles/ovn/tasks/pull.yml | 12 +- ansible/roles/ovs-dpdk/defaults/main.yml | 6 +- ansible/roles/ovs-dpdk/tasks/config.yml | 1 + ansible/roles/ovs-dpdk/tasks/pull.yml | 12 +- ansible/roles/panko/defaults/main.yml | 2 +- ansible/roles/panko/tasks/pull.yml | 9 +- ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/placement/tasks/pull.yml | 12 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/host_os_checks.yml | 16 +- ansible/roles/prechecks/tasks/package_checks.yml | 2 +- ansible/roles/prechecks/tasks/port_checks.yml | 4 +- ansible/roles/prechecks/vars/main.yml | 6 +- ansible/roles/prometheus/defaults/main.yml | 20 +-- ansible/roles/prometheus/tasks/config.yml | 1 - ansible/roles/prometheus/tasks/pull.yml | 12 +- .../roles/prometheus/templates/prometheus.yml.j2 | 1 + ansible/roles/qdrouterd/defaults/main.yml | 2 +- ansible/roles/qdrouterd/tasks/precheck.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 12 +- ansible/roles/qinling/defaults/main.yml | 4 +- ansible/roles/qinling/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/defaults/main.yml | 6 +- ansible/roles/rabbitmq/tasks/precheck.yml | 4 +- ansible/roles/rabbitmq/tasks/pull.yml | 12 +- .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 2 +- ansible/roles/rally/defaults/main.yml | 2 +- ansible/roles/rally/tasks/pull.yml | 12 +- ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/pull.yml | 12 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/pull.yml | 12 +- ansible/roles/searchlight/defaults/main.yml | 4 +- ansible/roles/searchlight/tasks/pull.yml | 12 +- ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/pull.yml | 12 +- .../roles/service-images-pull/defaults/main.yml | 7 + ansible/roles/service-images-pull/tasks/main.yml | 16 ++ ansible/roles/skydive/defaults/main.yml | 4 +- ansible/roles/skydive/tasks/pull.yml | 12 +- .../skydive/templates/skydive-analyzer.conf.j2 | 2 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/pull.yml | 12 +- ansible/roles/solum/templates/solum.conf.j2 | 2 +- ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/pull.yml | 12 +- ansible/roles/swift/defaults/main.yml | 6 + ansible/roles/swift/tasks/pull.yml | 24 +++ ansible/roles/tacker/defaults/main.yml | 6 +- ansible/roles/tacker/tasks/pull.yml | 12 +- ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 12 +- ansible/roles/tempest/defaults/main.yml | 4 +- ansible/roles/tempest/tasks/pull.yml | 12 +- ansible/roles/tempest/templates/tempest.conf.j2 | 2 +- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/pull.yml | 12 +- ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/pull.yml | 12 +- ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 12 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 3 + ansible/roles/watcher/tasks/pull.yml | 12 +- ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/pull.yml | 12 +- ansible/roles/zookeeper/templates/myid.j2 | 2 +- ansible/roles/zun/defaults/main.yml | 8 +- ansible/roles/zun/tasks/pull.yml | 12 +- ansible/site.yml | 2 + .../bootstrap-servers.rst | 2 + .../message-queues/external-rabbitmq-guide.rst | 53 ++++++ .../reference/storage/external-ceph-guide.rst | 13 +- etc/kolla/globals.yml | 29 +++- kolla_ansible/kolla_address.py | 2 +- ...k-exporter-scrape-timeout-af5dcd5d988ae12b.yaml | 4 + ...eus_support_on_cloudkitty-774e13e363e15a4b.yaml | 17 ++ .../notes/ansible-facts-4279741e84c03ce0.yaml | 10 ++ .../notes/bug-1808805-3ebd9b0edceff170.yaml | 13 ++ .../notes/bug-1848775-b0625b7586adac96.yaml | 8 + .../notes/bug-1927880-cc407f18f415bbd2.yaml | 6 + .../notes/bug-1934913-a8d436e3d0b950b4.yaml | 6 + .../notes/bug-1938549-e73042a61f0a5935.yaml | 10 ++ .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 + .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 + .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 ++ .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 + .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/cyborg-become-8453d941af536e91.yaml | 5 + .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 + .../notes/fix-neutron-vmware-4a8804399d47d8d7.yaml | 5 + .../notes/image-pull-retries-75490c3e6e1e4b54.yaml | 9 + .../notes/linux-bridge-multi-fe8576616fb7d373.yaml | 6 + .../notes/manila-glance-4524ed1e9d488a60.yaml | 5 + .../notes/nova-ceph-user-53670f9ccc546225.yaml | 16 ++ ...educe-rabbit-busy-waiting-085433c822165eab.yaml | 13 ++ ...nd-optimise-image-pulling-4346d3c0840ee640.yaml | 4 + .../notes/setup-module-args-c29e1815bbbe8aca.yaml | 8 + ...nic-template-for-keystone-1ee5f80fda7a21a0.yaml | 7 + tools/kolla-ansible | 2 +- 257 files changed, 1498 insertions(+), 1163 deletions(-)

1 0

kolla-ansible 13.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are stoked to announce the release of: kolla-ansible 13.0.0: Ansible Deployment of Kolla containers This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.0.0 ^^^^^^ New Features ************ * Adds "manila_cephfs_filesystem_name" variable to support multi-fs Ceph Pacific+ deloyments. Upgrade Notes ************* * "enable_host_ntp" variable is dropped per the deprecation process. * The "wsrep-notify.sh" script has been removed (following deprecation in Wallaby). Bug Fixes ********* * Fixes an issue with multinode MariaDB deployments which could fail the playbook execution on WSREP check due to the new behaviour of Galera 4. LP#1947485. * Fixes an issue with single node MariaDB deployments with HAProxy disabled. See bug 1947534 for details. * Fixes the generation of "wsrep_cluster_address" in "galera.cnf" when "--limit" is used while deploying MariaDB nodes. LP#1947589 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fix octavia role doesn't set the amphora network's gateway_ip LP#1949260 * Removes "fix_cephfs_owner.yaml" which related to pre-wallaby Manila's use of subfolders. Post-wallaby Manila now uses cephfs volumes instead, as such this file is no longer required. LP#1938285 LP#1935784 * Removes use of "cephfs_enable_snapshots" in Manila config as this option was removed from Manila in the Wallaby release. Changes in kolla-ansible 12.0.0..13.0.0 --------------------------------------- 44c46fc80 The deprecated iscsi deploy interface has been removed since xena f9b3709ba docs: Get release name dynamically c32eecf34 docs: Parameterize kolla-ansible version and branch 768b62a8f Stop creating unused cron/logrotate directory 543096c93 docs: Fix python-openstackclient package name and init-runonce path 7659f1e32 Fix octavia doesn't set subnet gateway_ip 06218e264 mariadb: use add_host to include inactive hosts in shard grouping 3aa42733a Fix broken deploy of placement service e219faec8 Fix missing Ansible version in the error message 150e2fc98 Revert "Do not load br_netfilter" 152cd21a4 Drop enable_host_ntp 2d69bdc8a docs: Improve info about neutron external interface 0ad69fc5b Use Xena images 70087813c mariadb: Remove wsrep-notify.sh 45b0b87f8 Update Manila deploy steps for Wallaby be6fd7b7d [mariadb] Start new nodes serially 9842b3296 Update TOX_CONSTRAINTS_FILE for stable/xena c0d5c66b0 Update .gitreview for stable/xena f9204267e Tidy up renos before Xena release 37e4dba87 Add support for Ironic inspection through DHCP-relay 78260f98e Correctly create the dhcp_agent.ini and l3_agent.ini 2455a95f3 Trivial but necessary fix - loadbalancer weight f1cbff6b7 Trivial fix shebang in keystone's fernet-node-sync.sh.j2 c7c14e1c4 Fix privileges for MariaDB 10.5 62b90af55 Docs: Update to opendev.org domain 0df36ce1e Debian: apt-transport-https is transitional package d5aa73c4a Add missing CloudKitty documentation. 4f78c696c Do not become root when searching for custom prometheus alert rules files 15259002b Do not load br_netfilter 1d0171fc7 monasca: change default of monasca_ntp_server 3b22d334d CI: monasca: ignore exited monasca_thresh container 1f71df1a8 Remove chrony role from kolla 9ef6bb2d9 [CI] Stop adding the DROP workaround 8c5012e94 Add support for Ceph RadosGW integration 393dfbf65 docs: ceph: add copy-on-write for Glance 66c84843e Deploy source type images by default 1bfed045c Do not set net.ipv4.ip_forward sysctl 2e933dceb Transition Keystone admin user to system scope 2c6bc0bd1 Do not create haproxy and swift log dirs needlessly 7c2b4bead Add way to change weight of haproxy backend per service 1b650534c Bump up Ansible max supported ver to 4.x 4ff65b766 Use friendly target names in Prometheus 0e720b382 Add check and diff options to kolla-ansible 6dc8b5639 Use mariadb_tag as default for all mariadb tags 2cf9ae2cf Do not enable mariadb-clustercheck when not needed 0d9477de3 Switch default images source to quay.io f0241f807 Remove haproxy,keepalived groups ae69994db use ironic user in ironic_neutron_agent.ini file 72e067398 Fix neutron upgrade using host limit without controllers c7bec2f30 [CI] Fix upgrade with kolla-build 02e07a086 CI: Temporarily enable insecure registry 21b4dc541 Zun: Temporarily skip capsule test for ubuntu 24e6a6ced toolbox: Allow different users logging to ansible.log 11d7233cc Bump libvirtd memlock ulimit d9e0ca5b3 reno: follow up 24e48d4da [tox] Add docs-iterative command 4e473a784 [tox] Optimise docs actions daf534b4e [CI] Test instance health after upgrade 34c49b9db Restore libvirtd cgroupfs mount d8641e90c docs: Add placeholder page for CI & testing information d9a375895 Add kolla-ansible gather-facts command ca6fc69ee docs: adding and removing host: add --all-projects option 3c68e8258 Fix Masakari in multi-region deploys 802f7c621 Never make Docker registry insecure by default ffd53512a Rename role haproxy to loadbalancer cbb567cb8 Add ability to retry image pulling 16a4a9e5a Remove an unused file 0858d5487 Fix haproxy precheck when kolla_externally_managed_cert is used 90fd9152a Use Docker healthchecks for keystone-fernet container 839ec629b tools: use /usr/bin/env bash instead of /bin/bash 2b599bdb8 Use Docker healthchecks for nova-spicehtml5proxy service b7e85d528 [CI] Test Swift upgrades f8e3e169c Allow override of rabbitmq config in kolla toolbox 13200ace3 Fix kolla-toolbox with IPv6 and disabled RabbitMQ b6d9cf768 [CI] Fix Debian upgrade d56dc3403 Validate if running CentOS OS is CentOS Stream 85879afc0 Trivial fix nova's healthchecks bcfebaf87 Use api-paste.ini from /etc/neutron 9ff2ecb03 Refactor and optimise image pulling 46df30d87 ironic: Follow up for ironic_enable_keystone_integration b692ce7af Support monitoring Fluentd with Prometheus bd3ad904d CI: stop setting ceph_nova_user a08aaf7d8 Fix release note for ansible_facts 2c786a0fa neutron: fix neutron-server config.json with VMware d15d94300 Remove unused imports in merge_yaml da4fd2d6a Extra var ironic_enable_keystone_integration added. 30e0eae8b Remove deprecated Designate option 7f98238b6 Elevated privileges required to set owner/group/mode by ansible 0d79d25fe Remove support for Prometheus v1 6ac4638cf Trivial fix horizon's healthcheck when SSL turned on 281c9935d Do not run timesync checks on deployment host c281a018c Fix freezed spice console in horizon 948e9ae70 watcher: add missing become for copying configs 6c72fa811 Support multiple inventories d7cdad532 Use more RMQ flags for less busy wait fca9be380 Delete haproxy_single_service_listen.cfg.j2 template c3f9ba835 nova: Use cinder user for Ceph 004cb7540 [manila] Drop tenant_id templating from v2 endpoint 24d08142d Fix nova deployment failure when rabbitmq is disabled 24950b389 Fix incorrect config of linuxbridge multiple external networks 5cb080247 cyborg: add missing become for api-paste.ini 7dfbcc71c [CI] Slim down Masakari job 411668ea5 ironic: always enable conductor HTTP server 5e85fe2a0 Fix variable names in Octavia documentation 200e36da7 Fix deployment failure when kolla_dev_mod is enabled aa28675ca Fix ironic_ipxe healthcheck on Debian/Ubuntu 2e4f51f67 manila: add glance section in manila-share.conf cccae8a65 Fix typos in release note 220d4fbbc Fix typo in keystone role c2ae21fd9 Reduce container metrics cardinality 54737cd13 baremetal: use docker_yum_gpgkey to fetch docker GPG key f6c0474af Fix config action when OVN is enabled 526199846 Remove tempest role c454761a4 Blazar: Fix support for external keystone in multiregion deploy 15f2fdcd5 Make setup module arguments configurable 9fffc7bc5 Add disable_firewall variable f71646da1 Fix Masakari host monitor default config 6131b6856 Remove rally and panko again 6bf74aa20 Support storing passwords in Hashicorp Vault 6e1849589 CI: Avoid generating a nova key in cephadm scenario a73e89f03 [CI] Do not set ansible_python_interpreter for Zuul 531604757 reno: fix typo f3520bc1c Replace auth_uri with www_authenticate_uri 09d0409ed Allow user to set sysctl_net_ipv4_tcp_retries2 7eff49a5a CI: Don't generate certificates before upgrade ade5bfa30 Use ansible_facts to reference facts 48f0957a1 magnum: Add CA certificate configuration for internal TLS 7da770d29 Add missing region_name in keystoneauth sections 3a7440b37 Fix host bootstrap pkg removal on Debian 0158221fd Drop support for Cinder ZFSSA backend 18a0af695 Do not set pid file for iscsid 640dbb03f Revert "Reduce container metrics cardinality" 1fc58e74d Fix up 'Persist nova libvirt secrets in a Docker volume' 38ca1431d Update previous_release to Wallaby c6259158e Reduce container metrics cardinality 300910961 Remove rally deployment 286a03bad Drop /sys/fs/cgroup mounts 3f9662278 Reno follow up for docker_disable_ip_forward ccf8cc5dc Remove support for panko 0fa4ee56e Disable docker's ip-forward when iptables disabled 085a30f75 [CI] Test bifrost on Ubuntu as well 682cff7bc Revert "cephadm: Set auth_allow_insecure_global_id_reclaim to true" 0cd5b027c Fix RabbitMQ restart ordering 5c19f9a5e Add forgotten 'Restart container' handler for swift 70f6f8e4c Reduce RabbitMQ busy waiting, lowering CPU load e7ff199dc Robustify fluentd output tag matching aea9bf355 monasca-thresh: Fix topology submission to storm cccf4f777 [TrivialFix] Remove extra slash 46bd05250 baremetal: fix /etc/hosts generation when api_interface has dashes dee9d22dc Add suppress_type_name to stop warnings with ES7 7f1248fee Fix parsing of infra.mariadb.xinetd logs 0c7ba86e0 Stop fluentd deprecation warnings of type vs @type 84ac7b309 chrony: allow to remove the container e48d0a7fa [CI] Drop Zuul host groups 887bf6f1f Fix release note markup 278b63a0e docs: Update Freenode to OFTC d60c5591c [CI] Move to Debian Bullseye 9a77fb1ca Add support for Debian Bullseye (11) as host distro 4d6a79d21 Add the ansible_managed header for admin-openrc.sh 95520df09 [docker] Add support for setting CgroupnsMode a3caf8c3a Bump min Docker version bb56861cc Use mariadb-server image for mariabackup 283b0dec6 fluentd: Fix check for external elasticsearch 21efaf3f4 CI: fix backups Ceph pool name 7d1af053b Remove [octavia]/base_url option from neutron.conf 13965f40c tox: Add find command to allowlist_externals list 1ea99147c CI: Use PATH to find kolla-ansible script 86ddc94ec Fix exit code with bogus command name 337771143 CI: Configure IP on a linux bridge instead of OVS br-ex 1da715802 linters: Mock additional variables in validate-all-file.py bbc27b59f CI: add grafana to monasca image list fca2c5fe0 [CI] Fix testing in cephadm scenario c99841272 Make rabbitmq cluster_partition_handling configurable 6b61cbe6f Merge glance sections for nova.conf.j2 b053bd8ec baremetal: Install Docker SDK less than 5.0.0 9e9293c5c Indented two spaces to match the other things in this block f184f9436 Mariadb shards documentation bd496808c CI: Disable amphora in OVN jobs e8c4b2e1b [CI] Log dbus services e83b5869a CI: Wait for NTP synced status in systemd bc9617919 baremetal: Don't start Docker after install on Debian/Ubuntu d43642ac3 Trivial if conditional fix in keystone.json 6230971b9 gnocchi: fix external ceph integration when gnocchi-statsd is disabled f295b1a05 docs: update supported OS distros b300f7bc4 Disable Alertmanager's peer gossip in non-HA deployments edc918313 CI: allow Elasticsearch status to be green or yellow e92323600 Add ability to use the Neutron packet logging framework fe6647747 Use @type instead of type f94c7beab cleanup no longer needed task for cinder 41fe771bc Do not write octavia_amp_ssh_key if auto_config disabled e5ab32afa octavia: Fix duplicate api_settings aff99355d ovn: make DVR work on VLAN tenant networks 999b5cfb2 ovn: omit unnecessary bridge mappings ec36eb016 CI: Fix nfv job with kolla dependency b056f54c1 Deprecate tempest and rally 43ca9dad0 setup.cfg: Replace dashes with underscores f3314eacd Redis configuration syntax update 0b132775e Fix neutron-ovn-metadata-agent with policy.yaml c3afbd3c5 Check config when checking the containers 83f3422fb Deprecate enable_host_ntp a967b9dd6 cephadm: Set auth_allow_insecure_global_id_reclaim to true 2b3284b3f Remove redundant Monasca Kafka client option 82cf40edf Remove Monasca Grafana service 8a1e9e984 Add Monasca Grafana deprecation notice fc406d035 [doc] fix a typo 7e81e20e7 Skip setting rp_filter by default d9b21cde9 Bump up python version for Debian Bullseye f3da3d8e1 Avoid an Ansible quirk in hacluster role 51134fb31 Add Python3 xena unit tests 9cfd4f5d0 Update master for stable/wallaby d01192c16 Extend support for custom Grafana dashboards 030a9a28d docs: Improve policy documentation 1ddef8597 Use Docker healthchecks for rabbitmq services 22a6765f5 Support editable installation in all cases e548b5969 [CI] Save systemctl info fbd80bcdc octavia: Ensure service auth project exists 3c1fd4409 Use Docker healthchecks for memcached services 561be6de3 Use Docker healthchecks for mistral services db1bc8fc7 docs: Add note about internal VIP when HAProxy is disabled adf492bd9 cinder: fix condition to copy backend TLS certs aa9ac3320 Add global tag variables for Panko and Skydive 268f0e4c9 Disable usage collection in Kibana 5a6cafa21 Add Alertmanger metric target(s) 25c33f9c9 Make it possible to override automatic fluentd version detection 2d82920d8 Update blazar.conf template 48cd90a8d Use Docker healthchecks for ceilometer services d3e91045f Use Docker healthchecks for qdrouterd services 2db0a2a62 Use Docker healthchecks for kuryr services 04b970ca0 Use Docker healthchecks for zun services 72df931b5 Use Docker healthchecks for kafka services 106644e49 docs: add code reviews to contributor guide 99db669fb CI: Reduce neutron RPC service workers to 1 21ccae12f chronyd crash loop if Debian server is rebooted 2c833baa5 CI: only run cells job on changes to nova role 90435f6a9 Add a ovsdb_timeout variable for better configuration 1c63eb20d Persist nova libvirt secrets in a Docker volume ce012bcb0 Fix "Restart mariadb-clustercheck container" during config gen Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 3 - ansible/action_plugins/merge_yaml.py | 7 - ansible/chrony-cleanup.yml | 31 +++- ansible/gather-facts.yml | 13 +- ansible/group_vars/all.yml | 77 +++++---- ansible/inventory/all-in-one | 28 +-- ansible/inventory/multinode | 28 +-- ansible/library/kolla_docker.py | 44 ++++- ansible/library/kolla_toolbox.py | 8 +- ansible/post-deploy.yml | 4 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/pull.yml | 12 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/check.yml | 6 +- ansible/roles/barbican/tasks/pull.yml | 12 +- ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/baremetal/defaults/main.yml | 19 +-- ansible/roles/baremetal/tasks/install.yml | 72 ++++---- ansible/roles/baremetal/tasks/post-install.yml | 74 +------- ansible/roles/baremetal/tasks/pre-install.yml | 17 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/pull.yml | 12 +- ansible/roles/blazar/templates/blazar.conf.j2 | 3 +- ansible/roles/ceilometer/defaults/main.yml | 64 ++++++- ansible/roles/ceilometer/handlers/main.yml | 4 + .../roles/ceilometer/tasks/check-containers.yml | 1 + ansible/roles/ceilometer/tasks/config.yml | 23 --- ansible/roles/ceilometer/tasks/pull.yml | 12 +- .../templates/ceilometer-notification.json.j2 | 9 +- .../ceilometer/templates/event_pipeline.yaml.j2 | 3 - ansible/roles/ceph-rgw/defaults/main.yml | 92 ++++++++++ ansible/roles/{chrony => ceph-rgw}/tasks/check.yml | 0 .../tasks/check.yml => ceph-rgw/tasks/config.yml} | 0 .../tasks/deploy-containers.yml} | 0 ansible/roles/ceph-rgw/tasks/deploy.yml | 2 + .../{panko => ceph-rgw}/tasks/loadbalancer.yml | 4 +- ansible/roles/{panko => ceph-rgw}/tasks/main.yml | 0 ansible/roles/ceph-rgw/tasks/precheck.yml | 10 ++ .../tasks/check.yml => ceph-rgw/tasks/pull.yml} | 0 .../{chrony => ceph-rgw}/tasks/reconfigure.yml | 0 ansible/roles/ceph-rgw/tasks/register.yml | 9 + .../tasks/check.yml => ceph-rgw/tasks/stop.yml} | 0 ansible/roles/ceph-rgw/tasks/upgrade.yml | 1 + ansible/roles/chrony/defaults/main.yml | 31 ---- ansible/roles/chrony/handlers/main.yml | 16 -- ansible/roles/chrony/tasks/check-containers.yml | 17 -- ansible/roles/chrony/tasks/cleanup.yml | 12 -- ansible/roles/chrony/tasks/config.yml | 53 ------ ansible/roles/chrony/tasks/deploy.yml | 7 - ansible/roles/chrony/tasks/main.yml | 7 - ansible/roles/chrony/tasks/precheck.yml | 9 - ansible/roles/chrony/tasks/pull.yml | 11 -- ansible/roles/chrony/templates/chrony.conf.j2 | 47 ------ ansible/roles/chrony/templates/chrony.json.j2 | 23 --- ansible/roles/cinder/defaults/main.yml | 22 +-- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/tasks/pull.yml | 12 +- ansible/roles/cinder/tasks/upgrade.yml | 16 -- ansible/roles/cinder/templates/cinder.conf.j2 | 15 +- ansible/roles/cloudkitty/defaults/main.yml | 4 +- ansible/roles/cloudkitty/tasks/pull.yml | 12 +- ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 12 +- ansible/roles/common/defaults/main.yml | 10 +- ansible/roles/common/tasks/config.yml | 76 +++++---- ansible/roles/common/tasks/inspect.yml | 6 - ansible/roles/common/tasks/pull.yml | 11 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 3 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 7 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 2 +- .../templates/conf/input/08-prometheus.conf.j2 | 14 ++ .../common/templates/conf/output/00-local.conf.j2 | 8 + .../common/templates/conf/output/01-es.conf.j2 | 3 +- .../templates/conf/output/02-monasca.conf.j2 | 2 +- .../common/templates/cron-logrotate-chrony.conf.j2 | 3 - .../common/templates/cron-logrotate-panko.conf.j2 | 3 - .../common/templates/cron-logrotate-rally.conf.j2 | 3 - .../templates/cron-logrotate-tempest.conf.j2 | 3 - ansible/roles/common/templates/erl_inetrc.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 5 +- .../roles/common/templates/rabbitmq-env.conf.j2 | 2 + ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/config.yml | 1 + ansible/roles/cyborg/tasks/pull.yml | 12 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 3 +- ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/pull.yml | 12 +- .../roles/designate/templates/designate.conf.j2 | 2 +- ansible/roles/elasticsearch/defaults/main.yml | 4 +- ansible/roles/elasticsearch/tasks/pull.yml | 12 +- ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/tasks/pull.yml | 12 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/pull.yml | 12 +- ansible/roles/freezer/templates/freezer.conf.j2 | 5 +- ansible/roles/glance/defaults/main.yml | 8 +- ansible/roles/glance/tasks/pull.yml | 12 +- ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/external_ceph.yml | 37 ++-- ansible/roles/gnocchi/tasks/pull.yml | 12 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/tasks/config.yml | 20 +-- ansible/roles/grafana/tasks/pull.yml | 9 +- ansible/roles/grafana/tasks/upgrade.yml | 5 - .../roles/hacluster/tasks/bootstrap_service.yml | 8 +- ansible/roles/hacluster/tasks/pull.yml | 12 +- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/haproxy-config/defaults/main.yml | 1 - .../templates/haproxy_single_service_listen.cfg.j2 | 111 ------------ .../templates/haproxy_single_service_split.cfg.j2 | 9 +- ansible/roles/haproxy/tasks/copy-certs.yml | 6 - ansible/roles/haproxy/tasks/deploy-containers.yml | 2 - ansible/roles/haproxy/tasks/main.yml | 3 - ansible/roles/haproxy/tasks/pull.yml | 11 -- ansible/roles/haproxy/tasks/stop.yml | 6 - ansible/roles/haproxy/tasks/upgrade.yml | 2 - ansible/roles/heat/defaults/main.yml | 8 +- ansible/roles/heat/tasks/bootstrap_service.yml | 3 +- ansible/roles/heat/tasks/pull.yml | 12 +- ansible/roles/heat/templates/heat.conf.j2 | 1 + ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 12 +- ansible/roles/horizon/templates/horizon.conf.j2 | 7 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 9 +- ansible/roles/ironic/defaults/main.yml | 19 ++- ansible/roles/ironic/tasks/deploy.yml | 2 +- ansible/roles/ironic/tasks/pull.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 6 +- ansible/roles/ironic/templates/ironic.conf.j2 | 29 ++-- ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 12 +- ansible/roles/kafka/defaults/main.yml | 17 +- ansible/roles/kafka/handlers/main.yml | 1 + ansible/roles/kafka/tasks/check-containers.yml | 1 + ansible/roles/kafka/tasks/pull.yml | 12 +- ansible/roles/keystone/defaults/main.yml | 20 ++- ansible/roles/keystone/tasks/config.yml | 1 + ansible/roles/keystone/tasks/pull.yml | 12 +- ansible/roles/keystone/tasks/register.yml | 2 +- .../keystone/tasks/register_identity_providers.yml | 107 ++++++------ .../keystone/templates/fernet-healthcheck.sh.j2 | 6 + .../keystone/templates/fernet-node-sync.sh.j2 | 32 ++-- ansible/roles/keystone/templates/fernet-push.sh.j2 | 16 ++ .../keystone/templates/keystone-fernet.json.j2 | 6 + ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/pull.yml | 12 +- ansible/roles/kibana/templates/kibana.yml.j2 | 1 + ansible/roles/kuryr/defaults/main.yml | 16 +- ansible/roles/kuryr/handlers/main.yml | 1 + ansible/roles/kuryr/tasks/check-containers.yml | 1 + ansible/roles/kuryr/tasks/pull.yml | 8 +- .../{haproxy => loadbalancer}/defaults/main.yml | 16 +- .../{haproxy => loadbalancer}/handlers/main.yml | 8 +- .../tasks/check-containers.yml | 4 +- ansible/roles/loadbalancer/tasks/check.yml | 1 + .../tasks/config-host.yml | 7 +- .../{haproxy => loadbalancer}/tasks/config.yml | 28 +-- .../{panko => loadbalancer}/tasks/copy-certs.yml | 2 +- .../tasks/deploy-containers.yml | 0 .../{haproxy => loadbalancer}/tasks/deploy.yml | 0 ansible/roles/loadbalancer/tasks/main.yml | 3 + .../{haproxy => loadbalancer}/tasks/precheck.yml | 157 ++++++++--------- ansible/roles/loadbalancer/tasks/pull.yml | 3 + .../tasks/reconfigure.yml | 0 .../roles/{chrony => loadbalancer}/tasks/stop.yml | 2 +- .../{chrony => loadbalancer}/tasks/upgrade.yml | 0 .../templates/haproxy}/haproxy.json.j2 | 0 .../templates/haproxy}/haproxy_main.cfg.j2 | 0 .../templates/haproxy}/haproxy_run.sh.j2 | 0 .../templates/keepalived}/keepalived.conf.j2 | 6 +- .../templates/keepalived}/keepalived.json.j2 | 0 ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/pull.yml | 12 +- ansible/roles/magnum/templates/magnum.conf.j2 | 10 ++ ansible/roles/manila/defaults/main.yml | 21 ++- ansible/roles/manila/tasks/deploy.yml | 5 - ansible/roles/manila/tasks/fix_cephfs_owner.yml | 85 ---------- ansible/roles/manila/tasks/pull.yml | 12 +- .../roles/manila/templates/manila-share.conf.j2 | 22 ++- ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/defaults/main.yml | 19 +-- ansible/roles/mariadb/handlers/main.yml | 6 + ansible/roles/mariadb/tasks/config.yml | 20 --- ansible/roles/mariadb/tasks/main.yml | 6 +- ansible/roles/mariadb/tasks/pull.yml | 12 +- ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 7 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 8 +- ansible/roles/mariadb/templates/wsrep-notify.sh.j2 | 79 --------- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/clone.yml | 8 +- ansible/roles/masakari/tasks/pull.yml | 12 +- .../masakari/templates/masakari-monitors.conf.j2 | 6 + ansible/roles/masakari/templates/masakari.conf.j2 | 1 + ansible/roles/memcached/defaults/main.yml | 18 +- ansible/roles/memcached/handlers/main.yml | 1 + ansible/roles/memcached/tasks/check-containers.yml | 1 + ansible/roles/memcached/tasks/pull.yml | 13 +- ansible/roles/mistral/defaults/main.yml | 64 ++++++- ansible/roles/mistral/handlers/main.yml | 4 + ansible/roles/mistral/tasks/check-containers.yml | 2 +- ansible/roles/mistral/tasks/pull.yml | 12 +- ansible/roles/mistral/templates/mistral.conf.j2 | 1 + ansible/roles/monasca/defaults/main.yml | 25 +-- ansible/roles/monasca/handlers/main.yml | 33 +++- ansible/roles/monasca/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/config.yml | 4 +- ansible/roles/monasca/tasks/pull.yml | 12 +- ansible/roles/monasca/tasks/upgrade.yml | 13 ++ .../monasca-agent-collector/agent-collector.yml.j2 | 2 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-agent-statsd/agent-statsd.yml.j2 | 2 +- .../monasca/templates/monasca-api/api.conf.j2 | 4 +- .../monasca-notification/notification.conf.j2 | 3 - .../templates/monasca-persister/persister.conf.j2 | 5 - .../monasca-thresh/monasca-thresh.json.j2 | 2 +- .../monasca/templates/monasca-thresh/storm.yml.j2 | 8 - ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 12 +- ansible/roles/murano/defaults/main.yml | 4 +- .../roles/murano/tasks/import_library_packages.yml | 16 +- ansible/roles/murano/tasks/pull.yml | 12 +- ansible/roles/murano/templates/murano.conf.j2 | 3 + ansible/roles/neutron/defaults/main.yml | 34 ++-- ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/pull.yml | 12 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 3 + .../neutron/templates/ironic_neutron_agent.ini.j2 | 6 +- ansible/roles/neutron/templates/l3_agent.ini.j2 | 3 + .../neutron/templates/linuxbridge_agent.ini.j2 | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- .../roles/neutron/templates/neutron-server.json.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 7 +- .../templates/neutron_ovn_metadata_agent.ini.j2 | 3 +- .../neutron/templates/openvswitch_agent.ini.j2 | 1 + ansible/roles/nova-cell/defaults/main.yml | 57 +++++-- ansible/roles/nova-cell/tasks/config-host.yml | 2 +- .../roles/nova-cell/tasks/discover_computes.yml | 19 +-- ansible/roles/nova-cell/tasks/loadbalancer.yml | 4 + ansible/roles/nova-cell/tasks/pull.yml | 12 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 4 +- ansible/roles/nova-cell/tasks/reload.yml | 1 + .../roles/nova-cell/templates/nova-libvirt.json.j2 | 3 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 4 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/pull.yml | 12 +- ansible/roles/nova/tasks/reload_api.yml | 1 + .../roles/nova/tasks/reload_super_conductor.yml | 1 + ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/defaults/main.yml | 10 +- ansible/roles/octavia/tasks/hm-interface.yml | 6 +- ansible/roles/octavia/tasks/openrc.yml | 4 +- ansible/roles/octavia/tasks/prepare.yml | 2 +- ansible/roles/octavia/tasks/pull.yml | 12 +- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/openvswitch/tasks/pull.yml | 12 +- ansible/roles/ovn/handlers/main.yml | 4 + ansible/roles/ovn/tasks/pull.yml | 12 +- ansible/roles/ovs-dpdk/defaults/main.yml | 6 +- ansible/roles/ovs-dpdk/tasks/config.yml | 1 + ansible/roles/ovs-dpdk/tasks/pull.yml | 12 +- ansible/roles/panko/defaults/main.yml | 77 --------- ansible/roles/panko/handlers/main.yml | 15 -- ansible/roles/panko/tasks/bootstrap.yml | 36 ---- ansible/roles/panko/tasks/bootstrap_service.yml | 20 --- ansible/roles/panko/tasks/check-containers.yml | 16 -- ansible/roles/panko/tasks/config.yml | 97 ----------- ansible/roles/panko/tasks/deploy-containers.yml | 2 - ansible/roles/panko/tasks/deploy.yml | 11 -- ansible/roles/panko/tasks/precheck.yml | 24 --- ansible/roles/panko/tasks/pull.yml | 8 - ansible/roles/panko/tasks/reconfigure.yml | 2 - ansible/roles/panko/tasks/register.yml | 7 - ansible/roles/panko/tasks/stop.yml | 6 - ansible/roles/panko/tasks/upgrade.yml | 9 - ansible/roles/panko/templates/panko-api.json.j2 | 32 ---- ansible/roles/panko/templates/panko.conf.j2 | 37 ---- ansible/roles/panko/templates/wsgi-panko.conf.j2 | 36 ---- ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/placement/tasks/pull.yml | 12 +- .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/prechecks/tasks/database_checks.yml | 2 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/host_os_checks.yml | 31 +++- ansible/roles/prechecks/tasks/inventory_checks.yml | 11 ++ ansible/roles/prechecks/tasks/main.yml | 4 +- ansible/roles/prechecks/tasks/package_checks.yml | 2 +- ansible/roles/prechecks/tasks/port_checks.yml | 4 +- ansible/roles/prechecks/tasks/timesync_checks.yml | 9 +- ansible/roles/prechecks/vars/main.yml | 11 +- ansible/roles/prometheus/defaults/main.yml | 34 ++-- ansible/roles/prometheus/tasks/bootstrap.yml | 2 +- ansible/roles/prometheus/tasks/config.yml | 1 - ansible/roles/prometheus/tasks/pull.yml | 12 +- .../templates/prometheus-cadvisor.json.j2 | 2 +- .../prometheus/templates/prometheus-server.json.j2 | 4 - .../roles/prometheus/templates/prometheus.yml.j2 | 84 +++++++-- ansible/roles/qdrouterd/defaults/main.yml | 17 +- ansible/roles/qdrouterd/handlers/main.yml | 1 + ansible/roles/qdrouterd/tasks/check-containers.yml | 1 + ansible/roles/qdrouterd/tasks/precheck.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/defaults/main.yml | 22 ++- ansible/roles/rabbitmq/tasks/check-containers.yml | 1 + ansible/roles/rabbitmq/tasks/precheck.yml | 4 +- ansible/roles/rabbitmq/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/tasks/restart_services.yml | 1 + .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 5 +- ansible/roles/rally/defaults/main.yml | 36 ---- ansible/roles/rally/handlers/main.yml | 15 -- ansible/roles/rally/tasks/bootstrap.yml | 36 ---- ansible/roles/rally/tasks/bootstrap_service.yml | 20 --- ansible/roles/rally/tasks/check-containers.yml | 16 -- ansible/roles/rally/tasks/config.yml | 80 --------- ansible/roles/rally/tasks/copy-certs.yml | 6 - ansible/roles/rally/tasks/deploy-containers.yml | 2 - ansible/roles/rally/tasks/deploy.yml | 9 - ansible/roles/rally/tasks/main.yml | 7 - ansible/roles/rally/tasks/precheck.yml | 6 - ansible/roles/rally/tasks/pull.yml | 11 -- ansible/roles/rally/tasks/reconfigure.yml | 2 - ansible/roles/rally/tasks/stop.yml | 6 - ansible/roles/rally/tasks/upgrade.yml | 9 - ansible/roles/rally/templates/rally.conf.j2 | 16 -- ansible/roles/rally/templates/rally.json.j2 | 24 --- ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/pull.yml | 12 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/pull.yml | 12 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/pull.yml | 12 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../roles/service-images-pull/defaults/main.yml | 7 + ansible/roles/service-images-pull/tasks/main.yml | 16 ++ ansible/roles/skydive/defaults/main.yml | 12 +- ansible/roles/skydive/tasks/pull.yml | 12 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 3 +- .../skydive/templates/skydive-analyzer.conf.j2 | 3 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/pull.yml | 12 +- ansible/roles/solum/templates/solum.conf.j2 | 3 +- ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/pull.yml | 12 +- ansible/roles/swift/defaults/main.yml | 6 + ansible/roles/swift/tasks/pull.yml | 24 +++ ansible/roles/tacker/defaults/main.yml | 6 +- ansible/roles/tacker/tasks/pull.yml | 12 +- ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 12 +- ansible/roles/telegraf/templates/telegraf.conf.j2 | 6 +- ansible/roles/tempest/defaults/main.yml | 2 +- ansible/roles/tempest/handlers/main.yml | 15 -- ansible/roles/tempest/tasks/check-containers.yml | 16 -- ansible/roles/tempest/tasks/config.yml | 47 ------ ansible/roles/tempest/tasks/copy-certs.yml | 6 - ansible/roles/tempest/tasks/deploy-containers.yml | 2 - ansible/roles/tempest/tasks/deploy.yml | 7 - ansible/roles/tempest/tasks/main.yml | 7 - ansible/roles/tempest/tasks/precheck.yml | 6 - ansible/roles/tempest/tasks/pull.yml | 11 -- ansible/roles/tempest/tasks/reconfigure.yml | 2 - ansible/roles/tempest/tasks/stop.yml | 6 - ansible/roles/tempest/tasks/upgrade.yml | 7 - ansible/roles/tempest/templates/tempest.conf.j2 | 69 -------- ansible/roles/tempest/templates/tempest.json.j2 | 11 -- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/pull.yml | 12 +- ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/pull.yml | 12 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 3 +- ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 12 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 3 + ansible/roles/watcher/tasks/pull.yml | 12 +- ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/pull.yml | 12 +- ansible/roles/zookeeper/templates/myid.j2 | 2 +- ansible/roles/zun/defaults/main.yml | 64 ++++++- ansible/roles/zun/handlers/main.yml | 4 + ansible/roles/zun/tasks/check-containers.yml | 1 + ansible/roles/zun/tasks/pull.yml | 12 +- ansible/site.yml | 89 +++------- .../reference/databases/external-mariadb-guide.rst | 2 +- .../bootstrap-servers.rst | 28 ++- .../reference/high-availability/haproxy-guide.rst | 64 +++++++ .../logging-and-monitoring/grafana-guide.rst | 8 +- .../logging-and-monitoring/monasca-guide.rst | 2 +- .../logging-and-monitoring/prometheus-guide.rst | 24 +-- .../message-queues/external-rabbitmq-guide.rst | 53 ++++++ .../reference/networking/neutron-extensions.rst | 48 ++++++ .../reference/networking/provider-networks.rst | 21 --- .../reference/storage/external-ceph-guide.rst | 105 +++++++++++- etc/kolla/globals.yml | 75 ++++---- etc/kolla/passwords.yml | 15 +- kolla_ansible/cmd/readpwd.py | 118 +++++++++++++ kolla_ansible/cmd/writepwd.py | 120 +++++++++++++ kolla_ansible/hashi_vault.py | 64 +++++++ kolla_ansible/kolla_address.py | 2 +- .../add-alertmanager-metrics-a8d87b0793f2255a.yaml | 4 + ...port-for-fluentd-exporter-ca02ff9182039e3e.yaml | 10 ++ releasenotes/notes/ansible-4-171c8afddfc325e8.yaml | 5 + .../notes/ansible-facts-4279741e84c03ce0.yaml | 10 ++ .../notes/bug-1808805-3ebd9b0edceff170.yaml | 13 ++ .../notes/bug-1837551-4237e2df8725ffc7.yaml | 13 ++ .../notes/bug-1848775-b0625b7586adac96.yaml | 8 + .../notes/bug-1927880-cc407f18f415bbd2.yaml | 6 + .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 + .../notes/bug-1933209-73e78353cb5c3266.yaml | 11 ++ .../notes/bug-1933347-4031d94ef7decb3c.yaml | 5 + .../notes/bug-1933846-122a62e9724b638c.yaml | 5 + .../notes/bug-1934913-a8d436e3d0b950b4.yaml | 6 + .../notes/bug-1938549-e73042a61f0a5935.yaml | 10 ++ .../notes/bug-1939291-bf2e405d286e4b07.yaml | 6 + .../notes/bug-1939679-a31bc2093a4c0000.yaml | 5 + .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 + .../notes/bug-1940547-771f6affb3547748.yaml | 18 ++ .../notes/bug-1941706-a8f9e9544f1540e3.yaml | 13 ++ .../notes/bug-1941940-c63265ea6ea2f594.yaml | 11 ++ .../notes/bug-1942846-8b9edb99a7e7c24f.yaml | 5 + .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 + .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 ++ .../notes/bug-1947485-d059864252fb1813.yaml | 7 + .../notes/bug-1947534-bf3b5ed19473015f.yaml | 5 + .../notes/bug-1947589-52e7a6fa5d82e7fa.yaml | 6 + .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 + .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/bug-1949260-34d82ecd677dd8ff.yaml | 5 + releasenotes/notes/ceph-rgw-062e0544a004f7b1.yaml | 4 + ...fault-migration-interface-3cdf30eed98553fd.yaml | 4 +- .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 + .../notes/cyborg-become-8453d941af536e91.yaml | 5 + .../default-type-source-3fefd8baa3ca46ba.yaml | 8 + ...signate-deprecated-option-66e90605e592c52a.yaml | 5 + .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 + .../disable-kibana-telemetry-46de5aaf2fc7c186.yaml | 5 + .../drop-enable_host_ntp-ce6e60a46e7544ea.yaml | 4 + .../notes/drop-group-haproxy-6119957627811873.yaml | 5 + .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 + .../notes/enable-ipxe-cf461344bdb99881.yaml | 10 ++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++ ...eb-ironic-ipxe-heathcheck-2ae5fd0537c056ce.yaml | 6 + .../notes/fix-gnocchi-statsd-a56c789a3da758a6.yaml | 5 + ...h-externally-managed-cert-1c5faa980aaf8949.yaml | 4 + .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 + .../notes/fix-neutron-vmware-4a8804399d47d8d7.yaml | 5 + .../fix_supress_type_warning-59f87fe62f83bd12.yaml | 5 + .../gather-facts-command-7b62d2c3eb13ec8e.yaml | 5 + ...-default-template-upgrade-c9b88d3385a5d257.yaml | 5 + ...xy-service-backend-weight-e4a908f732a37b42.yaml | 10 ++ .../notes/image-pull-retries-75490c3e6e1e4b54.yaml | 9 + ...ealthchecks-for-memcached-807b9036c3c92596.yaml | 6 + ...healthchecks-for-rabbitmq-a596f6b063026491.yaml | 6 + ...er-healthchecks-multiple2-a85e1cea3f8e4c23.yaml | 8 + .../notes/kolla-ansible-diff-50de16722aa155dc.yaml | 5 + .../notes/linux-bridge-multi-fe8576616fb7d373.yaml | 6 + .../notes/manila-glance-4524ed1e9d488a60.yaml | 5 + .../notes/mariadb-tag-6f08b8d5874c9106.yaml | 6 + .../monasca-collector-ntp-6be55e5526438cfc.yaml | 7 + ...user-auth-to-system-scope-900db3265861ebde.yaml | 8 + ...eutron-log-service-plugin-049ce93906386435.yaml | 5 + .../notes/nova-ceph-user-53670f9ccc546225.yaml | 16 ++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 + .../override-rmq-in-ktb-86c97926db67d3c9.yaml | 5 + .../persist-libvirt-secrets-6e07ab2914f40ad3.yaml | 6 + .../prometheus-target-names-94b17f58fa7c957a.yaml | 13 ++ ...duce-cadvisor-cardinality-1213854b9fe0c828.yaml | 19 +++ ...educe-rabbit-busy-waiting-085433c822165eab.yaml | 13 ++ ...nd-optimise-image-pulling-4346d3c0840ee640.yaml | 4 + .../notes/remove-chrony-role-90f164df8090f916.yaml | 4 + ...t-dda787fca995b9b096a1446e2d2cf9dede37f358.yaml | 4 + .../remove-prometheus-v1-8fa9c74c3dda568e.yaml | 7 + .../remove-rally-tempest-782ff3770e7e3dbb.yaml | 6 + .../remove-wsrep-notify-dbb5ef5f700b06b1.yaml | 5 + .../notes/setup-module-args-c29e1815bbbe8aca.yaml | 8 + ...vault-for-kolla-passwords-76a5b4ece6a4df07.yaml | 7 + .../support-manila-wallaby-2e29e866af0d6287.yaml | 15 ++ ...port-multiple-inventories-f0b694fa4e78bb8a.yaml | 5 + .../switch-images-to-quay-d4640afca6862eee.yaml | 11 ++ ...nic-template-for-keystone-1ee5f80fda7a21a0.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 3 + roles/cephadm/defaults/main.yml | 3 +- roles/cephadm/tasks/main.yml | 11 -- setup.cfg | 2 + test-requirements.txt | 2 +- tools/cleanup-containers | 2 +- tools/cleanup-host | 16 +- tools/cleanup-images | 2 +- tools/diag | 2 +- tools/init-runonce | 3 +- tools/kolla-ansible | 45 +++-- tools/loc | 2 +- tools/ovs-dpdkctl.sh | 2 +- tools/pre-commit-hook | 2 +- tools/read_passwords.py | 1 + tools/run-bashate.sh | 2 +- tools/validate-all-file.py | 5 +- tools/validate-all-yaml.sh | 2 +- tools/validate-docker-execute.sh | 2 +- tools/write_passwords.py | 1 + tox.ini | 36 ++-- zuul.d/base.yaml | 30 +++- zuul.d/jobs.yaml | 38 ++++- zuul.d/nodesets.yaml | 12 -- zuul.d/project.yaml | 8 +- 564 files changed, 4227 insertions(+), 3706 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d38c44e6f..e85f7744c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17,0 +18,3 @@ jmespath>=0.9.3 # MIT + +# Hashicorp Vault +hvac>=0.10.1 diff --git a/test-requirements.txt b/test-requirements.txt index 8b10965c0..ef84c6b8a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=2.9.0,<3.0 # GPLv3 +ansible>=2.10.0,<5.0 # GPLv3

1 0

kolla 13.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are thrilled to announce the release of: kolla 13.0.0: Kolla OpenStack Deployment This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.0.0 ^^^^^^ New Features ************ * OVN images are now buildable for Debian on x86-64 architecture. Bug Fixes ********* * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 Changes in kolla 12.0.0..13.0.0 ------------------------------- bad1c1a47 reno: polish release notes for Xena 65346400d Debian: we want Openvswitch and ovn from backports 849da79d0 cinder-volume/ubuntu: add lsscsi and nvme e466ccbfd ovn: Add Debian x86 images a5a3395e3 monasca: enable for Debian/aarch64 698866e43 update information about unbuildable images 46f8f3f63 centos: switch to RDO final release of Xena a30c086ad openstack-base: drop anyjson 9eed029a8 Update TOX_CONSTRAINTS_FILE for stable/xena e95098364 Update .gitreview for stable/xena 0dcfa1f01 docs: Move Kayobe RC1 after Kolla & Kolla Ansible RC1 4de83a464 Revert "Add missing reno" 2008b386d gnocchi: update to 4.4.1 1b6d1bf16 Add missing reno 0194ac597 Tidy up renos before Xena release 556e8f9ee Fix GitHub tarball URL for monasca-thresh d640980e0 Use RDO's Xena Delorean packages 8cdf952c6 release: Use Xena sources by default 5a8505920 Remove neutron api-paste.ini from old location c4d227cdd [bifrost] Drop workarounds 8b106493d [placement] Stop copying unused script b32cf27cc logstash: pin to 7.9.* for Elasticsearch OSS compatibility e4f019a5d Build source type images by default 456397107 Move all distros to upstream MariaDB 10.5 6366dec51 Avoid the use of --force in groupadd 623f375b5 Debian: use Xena binary packages b5422a6bc [debian] Use upstream MariaDB f02e5af05 Fix stale commented-out repo entry febbb5b40 Add proxysql image a11815cd9 Do not use distro_python_version for interpreter 6eeb2cbdd toolbox: Move to ansible-core 2.11 and collections b4b206de4 [CI] Drop support for publishing versioned image tags 88f1e32aa toolbox: Move custom Ansible config to global location 006c19fdb debian: Change influxdb, rabbitmq and td-agent repos to bullseye 5253e031c Pin td-agent to 4.0.* also on Debian c6cba0831 ceph: Update CentOS packages to Pacific d03d5aaee [doc] Ubuntu has Ceph Pacific in Wallaby+ acc23bb60 Move clustercheck script to mariadb-base f31fbab84 Fix Elasticsearch Curator 8d67183c8 Install UCA GPG key 2168224aa haproxy: Use haproxy 2.2.x 4f07c285c Revert "Config: Set default home to /var/lib/{user}" 1327de43a docs: add feature freeze to release management 25e960284 Revert "Update code to Jinja 3.0 style" ffaf102fe Debian/Ubuntu: handle APT keys in proper way e7ecb75ec Remove chrony image from kolla f0d4daaed Add example of switching CentOS binary images to current release 72fcc0f8e Always use the distro-provided libvirt-python 11b445126 Allow build debian/ubuntu-binary cloudkitty images 22def6336 [release] Use RDO master Delorean packages 928c4648a ironic-neutron-agent: enable for Debuntu binary 17848d49a [release] Use UCA Xena 6f450a10e Fix naming of CentOS Stream in reno eedcfb515 [horizon] Copy Masakari policy in YAML format e8e8e5296 Remove Prometheus v1 image 0a410a546 monasca-thresh: Allow topology check and removal in storm 33da73666 Config: Set default home to /var/lib/{user} 079956910 Add some system users to fix user uid inconsistencies 20d8b83ec base/deb: bump 'system' groups limit beyond Kolla ones 656842501 Config: allow to set group for user d44f289c1 Upgrade prometheus elasticsearch exporter to 1.2.1 535c861d9 Fix missing pacemaker-cli-utils in Debian hacluster images f8824b60d Remove patrole from version-check 383364e67 Update code to Jinja 3.0 style 796a8ec29 test-requirements: remove not needed entries bd90b0270 drop leftovers of RHEL support 53b391d36 Add boto3 as s3 dependency for Glance container fb218ff9b Fix missing templating block for kolla-toolbox. 1f8ac2162 Fix prometheus-elasticsearch-exporter container. 4c2990a99 Add masakari-dashboard to debian binary horizon image 01d02be25 Add missing default policy files for debian-binary-horizon 76c55483b Switch OPENSTACK_RELEASE back to master acc8cb990 CI: Fix epel url override d55cd5e5c Remove last mongo refs 7344e65aa Fix build of debian images 3b5d8ccd6 Clean up extra spaces fb8217c16 [CI] Do not set ansible_python_interpreter for Zuul 2973d03ef setDaemon() is deprecated in Python 3.10 5c369c7fa Remove tempest image 2676a6616 Bump up cAdvisor's version fd49c3d6f tox: Use allowlist_externals instead of whitelist_externals e6cea7b93 Remove rally 8ec8ef3d8 Revert "libvirt: pin edk2-ovmf" 5940d1758 Improve offline build scenario. 05cf55262 docs: Update release management for Xena process 6d0882ef7 Pin td-agent to 4.0.* to fix missing logs 3110cb136 [docs] Fix Debian release name e9ec89821 Remove panko f68dfb88f horizon: Correct location of monitoring_policy file c6fa5d98d Revert "[CI] Add grafana to allowed-to-fail" d7252ba58 Change network_mode default to host 789c9c3b8 Enable Debian updates repo a6884085e [CI] Add grafana to allowed-to-fail db78657c2 Fix _get_images_dir when pip-installed with --user 77fc442a9 Horizon: Install policy files for manila-ui f9715a66e Horizon: Install required policy files for heat-dashboard 740448a65 Add missing default policy files for ubuntu-binary-horizon 5338b559e docs: Update Freenode to OFTC c82683a9e Sort the package lists in openstack-base alphabetically 1a2c33512 libvirt: pin edk2-ovmf 6035f57a3 ubuntu: unpin OVS 1e7d1f3bd Revert "CI: add monasca-grafana to allowed-to-fail images" 16b5a8c1c [Security] Fix open redirect in Prometheus 2c49046ae Drop monasca-grafana image. a93f171da centos: clean up repo enable/disable/keys ea71584c6 add openstack-python3-xena-jobs-arm64 job c29f81869 gnocchi: add python3-rados to gnocchi-base source image 0506ede84 Drop ppc64le support 9bad71d7c gnocchi-base: numpy provides aarch64 binary wheels 038074097 centos: do not install CentOS Rabbitmq repo twice on AArch64 c028639af [release] Use UCA Wallaby 68fc72cd5 base: check for compatible distro using just sh e01a490c9 Deprecate tempest and rally 8c9cfb07f setup.cfg: Replace dashes with underscores 9e4df387c Revert "CI: drop ubuntu-aarch64 job" c364c8be8 [CI] Trust only infra mirrors f0c356774 CI: drop bashism from template overrides eff3e6b9c CI: move to Debian 'bullseye' nodes bfea49246 Revert "CI: temporarily disable CentOS/AArch64 testing" 444313975 Install RabbitMQ repo key on Ubuntu and Debian b69240ca4 docs: update supported OS distros b5dbcb8dc Fix RabbitMQ and Erlang pins again 0ec6049a7 CentOS on AArch64 has only Erlang 22 84add55bf [CI] Fix Ubuntu cephadm jobs names 29b16b8a8 CI: Remove kolla_python_version from Debian/Ubuntu jobs 6e190741d Revert "deprecate use of GnuPG ids for APT keys" a4f6a8f05 neutron: Remove vmware-nsx and networking-mlx from binary e8533795d Install Monasca datasource plugin for Grafana e0f8cbc50 move to Debian 'bullseye' b54789d09 Pin erlang 407d774ff Modify healthcheck_mariadb 51c3c90af Disable trove for Debian/binary f00961da2 docs: deprecate ppc64le in Wallaby 5f2eb06b8 Add Python3 xena unit tests 7e778d659 Update master for stable/wallaby bcdec58c6 releasenotes: we move to Debian bullseye Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.d/base.yaml | 1 - .zuul.d/project.yaml | 3 +- README.rst | 5 - .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 5 +- .../elasticsearch-curator/Dockerfile.j2 | 2 + .../hacluster-pacemaker-remote/Dockerfile.j2 | 6 + .../mariadb/mariadb-server/security_reset.expect | 17 +- .../mariadb-server/security_reset.expect.debian | 67 ---- .../monasca/monasca-thresh/topology_bootstrap.sh | 90 +++++ .../ironic-neutron-agent/Dockerfile.j2 | 5 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 10 +- .../Dockerfile.j2 | 4 +- kolla/common/config.py | 168 +++------ kolla/image/build.py | 104 ++---- kolla/template/methods.py | 14 +- kolla/template/repos.yaml | 277 ++++++++++---- .../add-masakari-dashboard-eae5f216888e5fe0.yaml | 3 + ...a-toolbox_templating_block-3d284d886816e95a.yml | 5 + .../ansible-core-toolbox-e34b31422474684b.yaml | 4 + releasenotes/notes/apt-keys-bb7c8678fc6d908b.yaml | 12 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 + .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 + .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 + .../notes/bug-1933759-c03e50c243850a49.yaml | 5 + .../notes/bug-1933770-c08c6804aa5d9e61.yaml | 6 + .../notes/bug-1934753-98ec4951a0f7373b.yaml | 6 + .../notes/bug-1934788-b1fd51f443479fb6.yaml | 5 + .../notes/bug-1935015-385d6f20e32311eb.yml | 10 + .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 + .../notes/bug-1942846-1216faacacba94be.yaml | 5 + .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 2 +- .../centos-ceph-pacific-40c55be6721cb1ac.yaml | 4 + .../centos-mariadb-upstream-971216b820ee1f1a.yaml | 9 + ...cloudkitty-debuntu-binary-09b182fc672b7d77.yaml | 4 + .../notes/debian-bullseye-4fedf3b3638783de.yaml | 6 +- .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 + ...untu-ironic-neutron-agent-6534d616b37643a8.yaml | 6 + .../default-type-source-f0c5cf1d97e2f345.yaml | 8 + .../notes/deprecate-ppc64le-2b7b642e79bddd66.yaml | 2 +- ...precate-tempest-and-rally-0647efa7209cf03a.yaml | 3 +- .../drop-last-mongo-refs-c12edb066544e190.yaml | 4 + .../notes/drop-ppc64le-516442a16cc9f27c.yaml | 4 + .../notes/drop-rhel-support-03ccce1a69bd88a7.yaml | 5 + ...fix-elasticsearch-curator-7876896ebbd41ad3.yaml | 6 + .../notes/gnocchi-4.4.1-1332afc3c6fca766.yaml | 4 + .../notes/haproxy-22-aeac8a3fa330f972.yaml | 4 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 + .../notes/logstash-7.9-30fd90e921037a8a.yaml | 6 + .../notes/neutron-api-paste-2268bcb3e0156e62.yaml | 6 + .../notes/ovn-debian-x86-d584f88b9e94b226.yaml | 4 + releasenotes/notes/proxysql-001027572dcec118.yaml | 4 + .../remove-chrony-image-20a96b0ce63e2959.yaml | 4 + releasenotes/notes/remove-panko-5338b559.yaml | 3 + .../remove-prometheus-v1-3bc458bed2228a9e.yaml | 4 + .../remove-rally-tempest-249782f1a1123b71.yaml | 5 + .../notes/set-group-for-user-aa9b3eae69d8f6a0.yaml | 3 + .../ubuntu-mariadb-10.5-38631eae76f6d091.yaml | 4 + .../update-cadvisor-v0.38.7-a0ff88006b5ff3f7.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + roles/kolla-build-config/defaults/main.yml | 26 -- test-requirements.txt | 16 - tools/validate-binary-build.sh | 2 +- tools/version-check.py | 22 -- tox.ini | 14 +- 148 files changed, 1471 insertions(+), 1370 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fc20695c0..e1185df8b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. @@ -6 +2,0 @@ bashate>=0.5.1 # Apache-2.0 -beautifulsoup4>=4.6.0 # MIT @@ -9,2 +4,0 @@ ddt>=1.0.1 # MIT -extras>=1.0.0 # MIT -graphviz!=0.5.0,>=0.4 # MIT License @@ -12 +5,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 @@ -14,8 +6,0 @@ oslotest>=3.2.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.1 # BSD -PyYAML>=3.10 # MIT -python-barbicanclient>=4.0.0 # Apache-2.0 -python-heatclient>=1.10.0 # Apache-2.0 -python-neutronclient>=6.3.0 # Apache-2.0 -python-openstackclient>=3.12.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 -pytz>=2013.6 # MIT @@ -23 +7,0 @@ stestr>=2.2.0 # Apache-2.0 -testscenarios>=0.4 # Apache-2.0/BSD

1 0

kayobe 11.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are excited to announce the release of: kayobe 11.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 11.0.0 ^^^^^^ Bug Fixes * Fixes some issues seen when using the "--check" argument with "kayobe overcloud host configure". See story 2004798. * Fixes an issue where cached seed VM images are unnecessarily owned by root. See story 2009277 for details. Changes in kayobe 10.0.0..11.0.0 -------------------------------- a79601b5 Infra VMs: fix some playbook host patterns 1dbf0ba5 CI: add Infra VM jobs 98e7817e Ubuntu: add upgrade jobs to gate 3a071757 infra VMs: use wait_for rather than wait_for_connection b207c1a3 Fix --check argument for overcloud host configure 25e0ac30 Drop become in stackhpc.libvirt-vm for seed vm provision 577cd0c8 CI: Disable heat in upgrade jobs to save disk space 698d79e4 Fix link syntax in release note 9c80fa08 Update .gitreview for stable/xena 9c2565a6 Support Ansible diff mode 8710a776 Add the missing documentation for mariadb recovery 49218b34 Remove stale config dump from seed hypervisor host configure bdba7a92 Add missing hook support for environment-create 9f6c912b Prevent Bifrost from using firewalld 2e2c96e3 Allow Docker to use insecure registry when deployed by Kayobe 1af6ea5c Add reno about chrony removal c5a3efaf [release] Sync Kolla Ansible inventory for Xena e0c42ea9 Use OpenStack Xena release 8fb9f57f [release] Sync Kolla Ansible feature flags for Xena e58a1253 Add missing apt playbook for infrastructure VMs 67126eb5 CI: add host configure tests for firewalld e318cada Use merge_configs and merge_yaml to generate Kolla configs b1b6358f Update Kolla images namespace to openstack.kolla 8afd68ca Infra VMs: follow up 769c2efb Add support for configuring tuned profile 717600e1 Fix wrong filename in bifrost docs 4bfe9e27 Fix IPA builder version typo 4b31079f firewalld: support infra VMs 29d73eed Set proxy option in early dnf invocation 79be93ba Enable consistent network device naming 1b647aca Ubuntu systemd-networkd: VLAN ifname heuristics c583922c Add support for infrastructure VMs 7d15aa16 Support configuration of firewalld 69c4bd98 CI: enable DNF tests on all CentOS versions 6a69a4f4 CI: enable DNF tests on CentOS Stream 8 3b901641 Ubuntu: add upgrade jobs in CI b8abf706 Build and deploy source type images by default f50e9b02 Revert to installing Docker SDK with upper constraints 0f2b1042 Bump up Ansible supported versions 53f37da1 seed: Disable SNAT configuration by default a04b5d6a Import merge_configs and merge_yaml from Kolla Ansible f09faa43 CI: Disable libvirt debug logs 2648f487 Make setup module arguments configurable 5535832c Support Ansible collections 9dd7ed03 Remove haproxy and keepalived groups f24b3176 Add support for apt proxy setting ae853182 CI: Fix bashate ignores aecaac7b Revert to Xena IPA images 81d6fa9a CI: Avoid molecule 3.5.x 4ef6e59e CI: Remove IPA images from saved /etc/kolla 1c173aeb Add missing quotes to Docker registry TLS example 545f3610 CI: Log disk usage details cc6ccba2 Fix typo in inspector.yml 080e7203 Sync documentation with kolla_openstack_custom_config 923813ac CI: Fix get_logs.sh docker logs output 7b16300c Allow passing arguments to dev/environment-setup.sh e1ba8421 Allow to configure name of root disk image to provision e8769373 Fix typo in IP allocation filename 74eff837 CI: Fix multiple failures c2b9dd81 docs: fix heading styles in upgrading page 3947997e Fix overcloud introspection data save f639ad0b Use ansible_facts to reference facts 3c56f32f Fix configuration check without public API network 91b2dddc Add twentyFiveGigE to port descriptions in inspector rules a48cc249 dnf: add metalink argument to custom dnf repository acc8cd78 Fix documentation links for routed control plane networks 0a55c834 Add Arista switch support for the Neutron ML2 genericswitch driver 769ec55d Remove references to resolv.conf workaround 6ea22874 Update ntp role to match code style 5a0206ae Ubuntu: Set MTU for veth in the network files 5815f0ba Fix capitalisation of Ansible task name fb36029b kolla: Set neutron_plugin_agent to OVN when it's enabled b8ff8fa8 Add missing font for PDF generation cf60ba0d Use stream8 images with molecule d4bbdada Remove stale DIB_DISABLE_KERNEL_CLEANUP references f0aae6b8 Remove iscsi deploy interface d0263e65 Support setting docker registry credentials to the empty string f575f4b7 Prevent matching unrelated images bca23698 Remove outdated upgrade step 15d20154 Fix url to ansible site in kolla-ansible.rst 034d4360 docs: Stop setting os_distribution in development all-in-one c9cc6f40 docs: add variable for current branch 66e143ad Revert "CI: Fix libvirt errors caused by latest edk2-ovmf" c6c1cde3 CI: test base container image build in seed jobs 9c8f7499 Fix container image builds 1dc6d98b Revert "Use OpenStack Wallaby release" 82def9a5 Ubuntu: ensure /usr/bin/python is python3 a52b3b27 Optimise order of inspector_processing_hooks 9883726b docs: Update Freenode to OFTC 9d3045db ntp: check for ntp group in inventory d2e3f6f1 docs: improve automated seed development info 1e14fa3a CI: Fix libvirt errors caused by latest edk2-ovmf dc53d29e chrony: cleanup during overcloud host upgrade b398e28d Add kayobe overcloud service prechecks command 223e310b Remove default time sources from customisable configuration 0ce6ea2e docs: add reno and upgrade info for CentOS Stream 4a59ea48 Fix overcloud post configure Python interpreter issues ece41b7a CentOS Stream: update DNF repo file names e187ad79 Make docker registry network mode configurable c44f4815 Fixes for Ansible 2.10 93a8baca CI: Remove unused Docker images after overcloud upgrade 085cf7d1 Adds support for configuring chrony 8e825118 [release] Set previous_release to wallaby dfdff656 Ubuntu: add documentation & release note 83155423 setup.cfg: Replace dashes with underscores 1cac2ccb Add os_release variable, build CentOS stream images 7abf6360 Add Python3 xena unit tests 872d874e Update master for stable/wallaby c355935c Ubuntu: avoid shadowing of networkd config files 111375fb Ubuntu: CI: rely on os_distribution, remove interfaces pause 9033d284 Replace custom serial loop with throttle 0fad6c1e Revert to binary images for nova f2cca07c Ubuntu: install qemu-img on seed-hypervisor 4d886ff1 docs: aio: add note with link to automated setup 45a79638 Support additional pass through host variables Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible/action_plugins/merge_configs.py | 19 ++ ansible/action_plugins/merge_yaml.py | 19 ++ ansible/apt.yml | 12 + ansible/compute-node-discovery.yml | 4 +- ansible/container-image-build.yml | 9 +- ansible/dev-tools.yml | 2 +- ansible/disable-cloud-init.yml | 2 +- ansible/disable-glean.yml | 2 +- ansible/disable-selinux.yml | 6 +- ansible/dnf.yml | 4 +- ansible/firewall.yml | 12 + ansible/group_vars/all/apt | 6 + ansible/group_vars/all/bifrost | 11 + ansible/group_vars/all/compute | 28 +++ ansible/group_vars/all/controllers | 28 +++ ansible/group_vars/all/globals | 11 + ansible/group_vars/all/infra-vms | 201 ++++++++++++++++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/ironic | 3 +- ansible/group_vars/all/kolla | 143 ++++++----- ansible/group_vars/all/monitoring | 28 +++ ansible/group_vars/all/openstack | 6 +- ansible/group_vars/all/seed | 31 +++ ansible/group_vars/all/seed-hypervisor | 28 +++ ansible/group_vars/all/storage | 28 +++ ansible/group_vars/all/time | 2 +- ansible/group_vars/compute/firewall | 21 ++ ansible/group_vars/compute/tuned | 7 + ansible/group_vars/controllers/firewall | 21 ++ ansible/group_vars/controllers/tuned | 7 + ansible/group_vars/infra-vms/ansible-host | 3 + ansible/group_vars/infra-vms/ansible-user | 7 + ansible/group_vars/infra-vms/firewall | 21 ++ ansible/group_vars/infra-vms/luks | 6 + ansible/group_vars/infra-vms/lvm | 6 + ansible/group_vars/infra-vms/mdadm | 6 + ansible/group_vars/infra-vms/network | 6 + ansible/group_vars/infra-vms/sysctl | 3 + ansible/group_vars/infra-vms/tuned | 7 + ansible/group_vars/infra-vms/users | 4 + ansible/group_vars/monitoring/firewall | 33 +++ ansible/group_vars/monitoring/tuned | 10 + ansible/group_vars/seed-hypervisor/firewall | 21 ++ ansible/group_vars/seed-hypervisor/tuned | 7 + ansible/group_vars/seed/firewall | 21 ++ ansible/group_vars/seed/tuned | 7 + ansible/group_vars/storage/firewall | 21 ++ ansible/group_vars/storage/tuned | 7 + ansible/host-command-run.yml | 2 +- ansible/host-package-update.yml | 4 +- ansible/idrac-bootstrap.yml | 4 +- ansible/infra-vm-deprovision.yml | 38 +++ ansible/infra-vm-provision.yml | 40 ++++ ansible/ip-allocation.yml | 2 +- ansible/ip-routing.yml | 1 + ansible/kayobe-ansible-user.yml | 11 +- ansible/kayobe-target-venv.yml | 24 +- ansible/kolla-ansible.yml | 20 +- ansible/kolla-bifrost-hostvars.yml | 1 + ansible/kolla-bifrost.yml | 20 +- ansible/kolla-build.yml | 4 +- ansible/kolla-openstack.yml | 1 + ansible/kolla-target-venv.yml | 12 +- ansible/luks.yml | 2 +- ansible/lvm.yml | 2 +- ansible/mdadm.yml | 2 +- ansible/network-connectivity.yml | 2 +- ansible/network.yml | 4 +- ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 + ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/pip.yml | 2 +- ansible/public-openrc.yml | 2 +- ansible/roles/apt/defaults/main.yml | 12 + ansible/roles/apt/tasks/main.yml | 17 ++ ansible/roles/apt/templates/01proxy.j2 | 8 + ansible/roles/bootstrap/tasks/main.yml | 8 +- ansible/roles/dev-tools/tasks/main.yml | 4 +- ansible/roles/disable-glean/tasks/main.yml | 1 + ansible/roles/disable-selinux/tasks/main.yml | 6 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker-registry/tasks/pull.yml | 1 + ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/firewall-redhat/defaults/main.yml | 18 ++ ansible/roles/firewall-redhat/handlers/main.yml | 10 + ansible/roles/firewall-redhat/tasks/disabled.yml | 18 ++ ansible/roles/firewall-redhat/tasks/enabled.yml | 71 ++++++ ansible/roles/firewall-redhat/tasks/main.yml | 3 + ansible/roles/infra-vms/defaults/main.yml | 7 + ansible/roles/infra-vms/tasks/deploy.yml | 93 +++++++ ansible/roles/infra-vms/tasks/destroy.yml | 16 ++ ansible/roles/infra-vms/tasks/main.yml | 18 ++ ansible/roles/infra-vms/tasks/prerequisites.yml | 18 ++ ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/inspection-store/tasks/pull.yml | 1 + ansible/roles/ipa-images/tasks/main.yml | 4 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 25 +- ansible/roles/kolla-ansible/tasks/config.yml | 8 +- ansible/roles/kolla-ansible/tasks/install.yml | 48 +++- .../{globals.yml.j2 => kolla/globals.yml} | 33 +-- .../templates/overcloud-components.j2 | 22 +- .../kolla-ansible/templates/overcloud-services.j2 | 6 +- ansible/roles/kolla-ansible/vars/main.yml | 10 +- ansible/roles/kolla-bifrost/defaults/main.yml | 12 + ansible/roles/kolla-bifrost/tasks/main.yml | 12 +- .../config/bifrost/bifrost.yml} | 3 + .../{dib.yml.j2 => kolla/config/bifrost/dib.yml} | 0 .../config/bifrost/servers.yml} | 0 ansible/roles/kolla-build/defaults/main.yml | 11 +- ansible/roles/kolla-build/tasks/main.yml | 27 +-- .../kolla-build.conf} | 2 - .../kolla-openstack/molecule/default/create.yml | 11 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/create.yml | 11 +- .../molecule/enable-everything/molecule.yml | 4 +- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 18 +- ansible/roles/network-redhat/tasks/main.yml | 2 + ansible/roles/ntp/tasks/prepare.yml | 7 +- ansible/roles/opensm/tasks/pull.yml | 1 + ansible/roles/pip/tasks/pip_conf.yml | 4 +- ansible/roles/snat/tasks/main.yml | 4 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/roles/swift-block-devices/tasks/main.yml | 4 +- ansible/roles/veth/tasks/main.yml | 2 +- ansible/roles/wipe-disks/tasks/main.yml | 4 +- ansible/seed-deploy-containers.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 29 ++- ansible/snat.yml | 5 +- ansible/sysctl.yml | 2 +- ansible/time.yml | 6 +- ansible/tuned.yml | 11 + ansible/users.yml | 2 +- ansible/wipe-disks.yml | 2 +- bindep.txt | 3 + dev/environment-setup.sh | 7 +- dev/functions | 37 ++- dev/infra-vm-deploy.sh | 19 ++ dev/tenks-deploy-config-compute.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 12 +- .../reference/routed-control-plane-networks.rst | 8 +- .../scenarios/all-in-one/overcloud.rst | 6 + etc/kayobe/apt.yml | 6 + etc/kayobe/bifrost.yml | 16 +- etc/kayobe/compute.yml | 28 +++ etc/kayobe/controllers.yml | 28 +++ etc/kayobe/globals.yml | 11 + etc/kayobe/infra-vms.yml | 174 ++++++++++++++ etc/kayobe/inspector.yml | 2 +- .../infra-vms/ansible-python-interpreter | 3 + .../group_vars/infra-vms/network-interfaces | 12 + etc/kayobe/inventory/groups | 10 + etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 17 +- etc/kayobe/monitoring.yml | 28 +++ etc/kayobe/openstack.yml | 4 +- etc/kayobe/seed-hypervisor.yml | 28 +++ etc/kayobe/seed.yml | 31 +++ etc/kayobe/storage.yml | 28 +++ kayobe/ansible.py | 64 ++++- kayobe/cli/commands.py | 221 +++++++++++++++-- kayobe/kolla_ansible.py | 8 + kayobe/plugins/action/merge_configs.py | 225 +++++++++++++++++ kayobe/plugins/action/merge_yaml.py | 181 ++++++++++++++ kayobe/plugins/filter/networkd.py | 22 +- kayobe/plugins/filter/networks.py | 14 ++ kayobe/utils.py | 25 +- molecule-requirements.txt | 10 + playbooks/kayobe-base/pre.yml | 14 ++ .../kayobe-infra-vm-base/infra-vms-group-vars.j2 | 5 + playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 55 +++++ playbooks/kayobe-infra-vm-base/pre.yml | 57 +++++ playbooks/kayobe-infra-vm-base/run.yml | 17 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + playbooks/kayobe-overcloud-base/overrides.yml.j2 | 8 - .../overrides.yml.j2 | 23 ++ .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 10 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 41 +++- playbooks/kayobe-seed-base/overrides.yml.j2 | 5 +- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 7 +- playbooks/kayobe-seed-upgrade-base/run.yml | 3 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 - .../add-apt-proxy-support-f688702868095ed0.yaml | 6 + ...pport-for-custom-seed-vms-a938ffdbedcd7b14.yaml | 8 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 + .../notes/ansible-max-4-f0666c5decc440f1.yaml | 21 ++ .../notes/arista-ngs-3efc3eecb498071e.yaml | 4 + ...ost-deploy-image-filename-716c12e71c769a27.yaml | 6 + .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ .../notes/bugfix-2009080-4c3a5a8acb9de39c.yaml | 7 + .../notes/collections-b1b9a017c843dc1c.yaml | 5 + .../default-source-type-b379b0f1562537dd.yaml | 14 ++ ...ent-network-device-naming-e0edec5d5fdf83e2.yaml | 11 + releasenotes/notes/diff-mode-468e09bbb9185b50.yaml | 11 + releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + .../docker-registry-insecure-b0f529b9eb85737e.yaml | 14 ++ .../environment-create-hooks-b4850b1bd9b13c7c.yaml | 4 + releasenotes/notes/firewalld-48dd2efd52c79252.yaml | 5 + .../notes/fix-check-mode-c0f8e1fcb09f730b.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + .../fix-networkd-vlan-netdev-1668f8e0f9647ef8.yaml | 5 + ...ix-precheck-no-public-net-c0db9168063b6203.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + .../notes/merge-configs-1f8fb3672e9be404.yaml | 22 ++ .../notes/remove-chrony-b535ca7f1f4c9e57.yaml | 5 + .../remove-ironic-iscsi-cb15bec4e494b62c.yaml | 11 + .../notes/seed-disable-snat-4d1e7899456f7561.yaml | 5 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 + .../notes/story-2009072-57e5d079e182e763.yaml | 6 + .../notes/story-2009277-84c381a562244fab.yaml | 6 + releasenotes/notes/tuned-86e2a6519b644985.yaml | 5 + .../tuned-default-profiles-7c795b9599856aee.yaml | 9 + ...espace_to_openstack.kolla-fb74a8cd58942a54.yaml | 5 + .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 4 +- requirements.yml | 93 +++---- roles/kayobe-diagnostics/files/get_logs.sh | 6 +- setup.cfg | 26 ++ test-requirements.txt | 6 - tools/run-bashate.sh | 2 +- tools/test-ansible.sh | 1 + tox.ini | 14 +- zuul.d/jobs.yaml | 46 +++- zuul.d/project.yaml | 10 +- 267 files changed, 5180 insertions(+), 627 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt new file mode 100644 index 00000000..e2e59cc2 --- /dev/null +++ b/molecule-requirements.txt @@ -0,0 +1,10 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. + +docker # Apache-2.0 +molecule<3.5.0 # MIT +molecule-docker # MIT +pytest-molecule # MIT +pytest-testinfra +yamllint # GPLv3 diff --git a/requirements.txt b/requirements.txt index ed81d1d1..8cfd1a87 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.9.0,<2.11.0,!=2.9.8,!=2.9.12 # GPLv3 +ansible>=2.10.0,<5.0 # GPLv3 @@ -6,0 +7,2 @@ selinux # MIT +# INI parsing +oslo.config>=5.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f3184134..934a4b18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ doc8 # Apache-2.0 -docker # Apache-2.0 @@ -11,2 +9,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -molecule # MIT -molecule-docker # MIT @@ -14,3 +10,0 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko -pytest-molecule # MIT -pytest-testinfra

1 0

ansible-config_template 1.2.0
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We are chuffed to announce the release of: ansible-config_template 1.2.0: Config Template plugin for Ansible The source is available from: https://opendev.org/openstack/ansible-config_template Download the package from: https://tarballs.openstack.org/ansible-config_template/ For more details, please see below. Changes in ansible-config_template 1.1.1..1.2.0 ----------------------------------------------- 87410f1 Fix repository URL in galaxy.yml bb1d445 Add option to install as collection 8a9b962 Use ansible_facts[] instead of fact variables 331d893 Add PKI role to functional testing cf28065 Remove references to unsupported operating systems 62812de Run tests against localhost and container 53d5f40 Updated from OpenStack Ansible Tests a6347c3 Updated from OpenStack Ansible Tests ea07ed0 Fix section overrides when commented option persist Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 29 +++++++++------------------ action/config_template.py | 20 ++++++++---------- bindep.txt | 7 ++----- galaxy.yml | 19 ++++++++++++++++++ meta/main.yml | 10 ++++----- plugins/action | 1 + 10 files changed, 56 insertions(+), 59 deletions(-)

1 0

ironic-lib 4.6.3 (wallaby)
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We jubilantly announce the release of: ironic-lib 4.6.3: Ironic common library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 4.6.3 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 4.6.2..4.6.3 ---------------------------------- 972eda9 Restore blkid compatibility with Centos 7 3964cd7 json_rpc: setup.cfg is missing entrypoint for json_rpc's list_opts 15063ca json_rpc: list_opts() should return tuple daf3155 Avoid using blkid in favour of lsblk and parted Diffstat (except docs and test files) ------------------------------------- ironic_lib/disk_utils.py | 57 ++++++++++++++---- ironic_lib/json_rpc/__init__.py | 2 +- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ setup.cfg | 1 + 5 files changed, 94 insertions(+), 41 deletions(-)

1 0

ironic-lib 5.0.1 (xena)
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We joyfully announce the release of: ironic-lib 5.0.1: Ironic common library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 5.0.0..5.0.1 ---------------------------------- b19124e Restore blkid compatibility with Centos 7 adb9ccc Avoid using blkid in favour of lsblk and parted 63f4ce8 Update TOX_CONSTRAINTS_FILE for stable/xena 7e3ce2d Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_lib/disk_utils.py | 57 ++++++++++++++---- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ tox.ini | 4 +- 5 files changed, 95 insertions(+), 42 deletions(-)

1 0

kolla 13.0.0.0rc3 (xena)
by no-reply＠openstack.org 19 Nov '21

19 Nov '21

Hello everyone, A new release candidate for kolla for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla/src/branch/stable/xena Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *xena-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 13.0.0.0rc3 (xena)
by no-reply＠openstack.org 19 Nov '21

19 Nov '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/xena Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *xena-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

oslo.middleware 4.5.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are gleeful to announce the release of: oslo.middleware 4.5.0: Oslo Middleware library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 4.4.0..4.5.0 --------------------------------------- 8e47bfc Add paste.filter_factory entrypoint for basic auth middleware c2e6b89 Add Python3 yoga unit tests f8749d2 Update master for stable/xena b413298 Add oslo.config.opts entrypoint for basic auth middleware Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_middleware/__init__.py | 4 +++- oslo_middleware/opts.py | 27 +++++++++++++++++++++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 2 ++ 6 files changed, 40 insertions(+), 2 deletions(-)

1 0

oslo.db 11.1.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are glad to announce the release of: oslo.db 11.1.0: Oslo Database library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 11.0.0..11.1.0 --------------------------------- 8360df7 Configure driver for postgres d774201 Add Python3 yoga unit tests 4e67858 Update master for stable/xena df901a1 Replace use of 'Engine.execute()' ecb15c4 Don't call mapper() outside of declarative registry e1039e0 Don't pass kwargs to connection.execute() 62d77fc Replace use of Executable.execute method c320df4 Remove unnecessary warning filter fadc0ef Replace use of Engine.scalar() 8772fcc Don't use the 'Row.keys()' method 5544f10 Don't use dict-style attribute accesses Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_db/sqlalchemy/provision.py | 13 +- oslo_db/sqlalchemy/utils.py | 216 ++++++++++++++------------ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + 11 files changed, 333 insertions(+), 297 deletions(-)

1 0

oslo.utils 4.12.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We jubilantly announce the release of: oslo.utils 4.12.0: Oslo Utility library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.11.0..4.12.0 ------------------------------------ 3b5eebd Add backing file format to the output Diffstat (except docs and test files) ------------------------------------- oslo_utils/imageutils.py | 3 +++ 2 files changed, 19 insertions(+), 2 deletions(-)

1 0

python-novaclient 17.0.1 (ussuri)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are satisfied to announce the release of: python-novaclient 17.0.1: Client library for OpenStack Compute API This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. Changes in python-novaclient 17.0.0..17.0.1 ------------------------------------------- 437d63de Add a cleanup for a server in a functional test 25afea2a Switch legacy Zuul jobs to native Zuul v3 jobs 694b95e3 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 1d8a3753 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 17 ++--- .../legacy/novaclient-dsvm-functional/post.yaml | 80 ---------------------- .../legacy/novaclient-dsvm-functional/run.yaml | 54 --------------- playbooks/post.yaml | 6 ++ playbooks/python-novaclient-functional.yaml | 14 ++++ roles/get-os-environment/defaults/main.yaml | 2 + roles/get-os-environment/tasks/main.yaml | 12 ++++ tox.ini | 10 +-- 13 files changed, 99 insertions(+), 207 deletions(-)

1 0

tooz 2.10.0
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We eagerly announce the release of: tooz 2.10.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. 2.10.0 ^^^^^^ New Features * Redis driver retries actions for up to 15 times when met with error connecting to Redis. Changes in tooz 2.9.0..2.10.0 ----------------------------- 47c4d56 Enable retries in redis driver 0e0c11e setup.cfg: Replace dashes with underscores 0ba64e4 setup.cfg: Replace dashes with underscores 608ea79 Fix formatting of release list Diffstat (except docs and test files) ------------------------------------- .../redis-connect-retries-c9adfc81eb06a4ab.yaml | 5 ++ releasenotes/source/index.rst | 24 +++---- setup.cfg | 8 +-- tooz/drivers/redis.py | 74 +++++++++++----------- 4 files changed, 58 insertions(+), 53 deletions(-)

1 0

pbr 5.8.0
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We joyfully announce the release of: pbr 5.8.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 5.7.0..5.8.0 --------------------------- a6006f6 Add python2 testing back to PBR de0c717 Allow PEP517 without setup_requires d21c2ca Clarify the need for setup.py with PEP517 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 ++ pbr/core.py | 8 ++++++++ 4 files changed, 27 insertions(+), 7 deletions(-)

1 0

kayobe 11.0.0.0rc3 (xena)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

Hello everyone, A new release candidate for kayobe for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/xena Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *xena-rc-potential* to bring it to the kayobe release crew's attention.

1 0

oslo.policy 3.1.2 (ussuri)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We enthusiastically announce the release of: oslo.policy 3.1.2: Oslo Policy library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.1.2 ^^^^^ Bug Fixes * Fixes the mapping of 'system_scope' to 'system' when enforce is called with a 'creds' dictionary instead of a RequestContext. Changes in oslo.policy 3.1.1..3.1.2 ----------------------------------- 17c38af Map system_scope in creds dictionary 27493ae Dropping lower constraints testing Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - lower-constraints.txt | 59 ---------------------- oslo_policy/policy.py | 22 ++++---- ...stem-scope-for-creds-dict-e4cbec2f7495f22e.yaml | 5 ++ tox.ini | 7 --- 6 files changed, 30 insertions(+), 95 deletions(-)

1 0

octavia-dashboard 5.0.2 (ussuri)
by no-reply＠openstack.org 16 Nov '21

16 Nov '21

We are thrilled to announce the release of: octavia-dashboard 5.0.2: Horizon panels for Octavia This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia- dashboard For more details, please see below. 5.0.2 ^^^^^ Bug Fixes * Fixes a namespace collision with the barbican-ui dashboard. Changes in octavia-dashboard 5.0.1..5.0.2 ----------------------------------------- fd73b21 Change the Octavia Barbican namespace Diffstat (except docs and test files) ------------------------------------- octavia_dashboard/api/rest/barbican.py | 4 ++-- ...barbican.service.js => octavia-barbican.service.js} | 18 +++++++++--------- ...ervice.spec.js => octavia-barbican.service.spec.js} | 12 +++++++----- .../project/lbaasv2/workflow/model.service.js | 10 +++++----- .../project/lbaasv2/workflow/model.service.spec.js | 2 +- ...ce-collision-with-barbican-ui-267f4ba074729ea6.yaml | 4 ++++ 6 files changed, 28 insertions(+), 22 deletions(-)

1 0

octavia 6.2.2 (ussuri)
by no-reply＠openstack.org 16 Nov '21

16 Nov '21

We are stoked to announce the release of: octavia 6.2.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 6.2.2 ^^^^^ Bug Fixes * Fixes loadbalancer creation failure when one of the listener port matches with the octavia generated peer ports and the allowed_cidr is explicitly set to 0.0.0.0/0 on the listener. This is due to creation of two security group rules with remote_ip_prefix as None and remote_ip_prefix as 0.0.0.0/0 which neutron rejects the second request with security group rule already exists. * Fix a serialization error when using host_routes in VIP subnets when persistence in the amphorav2 driver is enabled. * Fixed MAX_TIMEOUT for timeout_client_data, timeout_member_connect, timeout_member_data, timeout_tcp_inspect API listener. The value was reduced from 365 days to 24 days, which now does not exceed the value of the data type in DB. * Increase the limit value for nr_open and file-max in the amphora, the new value is based on what HAProxy 2.x is expecting from the system with the greatest maxconn value that Octavia can set. Changes in octavia 6.2.1..6.2.2 ------------------------------- 0b4e05ae Fix failover of az-specific loadbalancers 19ce10f9 Fix management network selection when calculating deltas bfdc3614 Fix duplicate SG creation for listener peer port 9a25a643 Fix MAX_TIMEOUT value for listener 41b2aad6 Fix periodic image builder jobs 20c0a88b Fix amphora image build jobs 594782a5 Fix PlugVIPAmphora revert function in amphorav2 e4300558 Update nr_open limit value in the amphora 1dfa4fe2 Fix using host_routes in VIP subnet with amphorav2 d79c80c3 Fix race conditions between API and worker DB calls Diffstat (except docs and test files) ------------------------------------- .../post-install.d/20-haproxy-tune-kernel | 4 +-- .../agent/api_server/templates/systemd.conf.j2 | 2 +- octavia/common/constants.py | 4 +-- .../controller/worker/v1/tasks/network_tasks.py | 8 +++--- octavia/controller/worker/v2/controller_worker.py | 33 ++++++++++++++++++---- .../worker/v2/tasks/amphora_driver_tasks.py | 6 ++-- .../controller/worker/v2/tasks/network_tasks.py | 11 ++++---- .../drivers/neutron/allowed_address_pairs.py | 17 +++++++---- .../worker/v2/tasks/test_amphora_driver_tasks.py | 5 ++++ .../worker/v2/tasks/test_network_tasks.py | 18 ++++++++---- .../controller/worker/v2/test_controller_worker.py | 3 +- .../drivers/neutron/test_allowed_address_pairs.py | 30 ++++++++++++++++++++ playbooks/image-build/run.yaml | 32 ++++++++++++++++++--- ...fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml | 9 ++++++ ...amphorav2-and-persistence-54b99d651a4ee9c4.yaml | 5 ++++ .../fix-listener-MAX_TIMEOUT-4c4fdf804a96c34b.yaml | 7 +++++ .../fix-nr_open-limit-value-7f475c3e301a608d.yaml | 6 ++++ 18 files changed, 177 insertions(+), 47 deletions(-)

1 0

cinder 16.4.2 (ussuri)
by no-reply＠openstack.org 15 Nov '21

15 Nov '21

We are psyched to announce the release of: cinder 16.4.2: OpenStack Block Storage This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 16.4.2 ^^^^^^ Bug Fixes * RBD driver bug #1947518 (https://bugs.launchpad.net/cinder/+bug/1947518) Corrected a regression caused by the fix for Bug #1931004 (https://bugs.launchpad.net/cinder/+bug/1931004) that was attempting to access the glance images RBD pool with write privileges when creating a volume from an image. * Bug #1931004 (https://bugs.launchpad.net/cinder/+bug/1931004) Fixed use of incorrect stripe unit in RBD image clone causing volume-from- image to fail when using raw images backed by Ceph. Changes in cinder 16.4.1..16.4.2 -------------------------------- d69f30905 RBD: Open RBD images read-only where possible 18e2d0bb4 Add libcgroup related packages in bindep.txt 06b32da4b RBD: use correct stripe unit in clone operation Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 + cinder/volume/drivers/rbd.py | 37 +++++++++++++--- ...1947518-rbd-open-readonly-ba523c4b0ddbba76.yaml | 9 ++++ ...hoose-correct-stripe-unit-9d317f4717533fb4.yaml | 6 +++ 5 files changed, 80 insertions(+), 24 deletions(-)

1 0

os-brick 3.0.8 (ussuri)
by no-reply＠openstack.org 15 Nov '21

15 Nov '21

We are chuffed to announce the release of: os-brick 3.0.8: OpenStack Cinder brick library for managing local volume attaches This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 3.0.8 ^^^^^ Upgrade Notes ************* * Services using os-brick need to set the "lock_path" configuration option in their "[oslo_concurrency]" section since it doesn't have a valid default (related bug #1947370 (https://bugs.launchpad.net/cinder/+bug/1947370)) Bug Fixes ********* * Bug #1944474 (https://bugs.launchpad.net/os-brick/+bug/1944474) Fixed missing retries to reinitiate iSCSI connections with high concurrency of connections and with multipath enabled. * Bug #1947370 (https://bugs.launchpad.net/cinder/+bug/1947370) Fixed race conditions on iSCSI with shared targets and NVMe "connect_volume" and "disconnect_volume" calls. Changes in os-brick 3.0.7..3.0.8 -------------------------------- 9d3ce01 Use file locks in connectors d0eea8a multipath/iscsi: iSCSI connections are not reinitiated after reboot Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/fibre_channel.py | 6 ++-- os_brick/initiator/connectors/huawei.py | 4 +-- os_brick/initiator/connectors/iscsi.py | 39 ++++++++++++++-------- os_brick/initiator/connectors/nvmeof.py | 6 ++-- os_brick/initiator/connectors/scaleio.py | 4 +-- os_brick/initiator/utils.py | 3 +- .../notes/bug-1944474-55c5ebb3a37801aa.yaml | 6 ++++ .../notes/external-locks-9f015988ebdc37d6.yaml | 12 +++++++ 11 files changed, 98 insertions(+), 26 deletions(-)

1 0

python-cinderclient 7.0.2 (ussuri)
by no-reply＠openstack.org 15 Nov '21

15 Nov '21

We are pleased to announce the release of: python-cinderclient 7.0.2: OpenStack Block Storage API Client Library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-cinderclient Download the package from: https://pypi.org/project/python-cinderclient Please report issues through: https://bugs.launchpad.net/python-cinderclient/+bugs For more details, please see below. Changes in python-cinderclient 7.0.1..7.0.2 ------------------------------------------- d5f10f4 [stable-only] Add missing classes to cinderclient.v3 f1c1ac4 Drop lower-constraints job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinderclient/v3/quotas.py | 4 ++ cinderclient/v3/volume_transfers.py | 4 ++ 4 files changed, 54 insertions(+), 1 deletion(-)

1 0

manila 10.2.0 (ussuri)
by no-reply＠openstack.org 15 Nov '21

15 Nov '21

We are pumped to announce the release of: manila 10.2.0: Shared Storage for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 10.2.0 ^^^^^^ Bug Fixes * Resizing 0.0.0.0/24 accessible NFS shares with generic driver * Authentication errors when loading service clients of OpenStack Compute (nova), OpenStack Volume (cinder) and OpenStack Networking (neutron) services are now handled in a better manner. * Filtering shares by share-type "extra_specs" as key=value now returns the expected output. * New user message now alerts users when attempting to create a new share without identifying a share type, either through request body or by setting a default share type. See bug #1870280 (https://bugs.launchpad.net/manila/+bug/1870280) for more details. Changes in manila 10.1.0..10.2.0 -------------------------------- ad152a47 Add missing [oslo_reports] options 5f7198a0 Add missing oslo.service options c854616c Use oslo-config-generator conf to load options from libraries 10473b81 Add missing share-type user message ab230bf1 Handle service client authorization errors f79e648c TrivialFix: Fix the filter name in config helper d57958a1 Filter shares by share type "extra_specs" 0ebc6a95 fixes availability zone filter when creating a share from snapshot 18250acf Fix generic share resize with 0.0.0.0/24 access Diffstat (except docs and test files) ------------------------------------- etc/oslo-config-generator/manila.conf | 13 +++++++++--- manila/api/v1/shares.py | 11 ++++++---- manila/common/client_auth.py | 5 ++--- manila/compute/nova.py | 4 +--- manila/db/sqlalchemy/api.py | 5 +++-- manila/message/message_field.py | 5 +++++ manila/network/neutron/api.py | 4 +--- manila/opts.py | 11 ---------- manila/scheduler/drivers/filter.py | 10 +++++++++ manila/share/api.py | 2 +- manila/share/drivers/helpers.py | 5 +++-- manila/volume/cinder.py | 4 +--- ...ze-share-world-accessable-b444d88b67b05af0.yaml | 4 ++++ ...t-unauthorized-exceptions-b2ebc08a072f7e12.yaml | 6 ++++++ ...ing-shares-by-extra-specs-b79235301306bcf2.yaml | 5 +++++ ...0-share-type-user-message-902275047410bdbf.yaml | 7 +++++++ 23 files changed, 114 insertions(+), 50 deletions(-)

1 0

nova 21.2.4 (ussuri)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We are gleeful to announce the release of: nova 21.2.4: Cloud computing fabric controller This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 21.2.3..21.2.4 ------------------------------ b27f8e9adf [stable-only] Pin virtualenv and setuptools d0d7155457 Fix request path to query a resource provider by uuid 35ec9357a1 Fix error that cannot overwrite policy rule for 'forced_host' Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/servers.py | 3 ++- nova/cmd/manage.py | 2 +- tox.ini | 6 +++++- 3 files changed, 8 insertions(+), 3 deletions(-)

1 0

python-openstackclient 5.7.0 (yoga)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We are ecstatic to announce the release of: python-openstackclient 5.7.0: OpenStack Command-line Client This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.7.0 ^^^^^ New Features ************ * The "server create", "server set" and "server rebuild" commands now accept an optional "--hostname HOSTNAME" option. This can be used to configure the hostname stored in the metadata service and/or config drive. Utilities such as "cloud-init" can then consume this information to set the hostname within the guest OS. * Added "--trusted-image-cert" option for server create. It is available only when directly booting server from image (not from volume, not from snapshot and not via image converted to volume first). This option is supported for Compute API version >=2.63 * Added support for microversion 2.89. This microversion removes the "id" field while adding the "attachment_id" and "bdm_uuid" fields to the responses of "GET /servers/{server_id}/os-volume_attachments" and "GET /servers/{server_id}/os-volume_attachments/{volume_id}" with these changes reflected in novaclient under the "openstack server volume list" command. (https://docs.openstack.org/nova/latest/reference/api-microversion- history.html#microversion-2-89) * Migrate openstack server backup from novaclient to sdk. * The "server add volume" command will now return details of the created volume attachment upon successful attachment. Bug Fixes ********* * Filtering servers by tags ("server list --tag", "server list --not- tag") now works correctly. [Bug 1946816 (https://bugs.launchpad.net/bugs/1946816) Changes in python-openstackclient 5.6.0..5.7.0 ---------------------------------------------- 163cb01e compute: Return details of attached volumes 57aad018 Switch server backup to sdk. 728401bb Remove remnants of 'six' 30612bf6 Remove 'get_osc_show_columns_for_sdk_resource' duplicates a797c9d2 tox: Ignore virtualenvs for pep8 environment 53debe7f compute: Fix filtering servers by tags e06a4f1c Update the Nova CLI docoder document 70fed75c Update the Nova CLI decoder document abed9f20 Remove non-working code after method return. 28a376bf Add --trusted-image-cert option for server create c0a0f0f3 Fix that the path of functional test ff372ffd Add Python3 yoga unit tests 8ef9280a Update master for stable/xena ed5d2a37 Replace assertItemsEqual with assertCountEqual 51ee17a9 compute: Add support for microversion 2.89 8e833a3e compute: Add support for microversion 2.90 4aad7dd7 Fix typo error in listing server's column name 1f0fcbcd Fix the functional-tips tox environment Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- lower-constraints.txt | 1 - openstackclient/common/sdk_utils.py | 58 --- openstackclient/compute/v2/server.py | 136 ++++++- openstackclient/compute/v2/server_backup.py | 9 +- openstackclient/compute/v2/server_volume.py | 18 +- openstackclient/image/v1/image.py | 13 +- openstackclient/image/v2/image.py | 7 +- openstackclient/network/sdk_utils.py | 63 ---- openstackclient/network/v2/address_group.py | 4 +- openstackclient/network/v2/address_scope.py | 4 +- openstackclient/network/v2/floating_ip.py | 3 +- .../network/v2/floating_ip_port_forwarding.py | 5 +- openstackclient/network/v2/ip_availability.py | 3 +- openstackclient/network/v2/l3_conntrack_helper.py | 4 +- openstackclient/network/v2/network.py | 5 +- openstackclient/network/v2/network_agent.py | 4 +- .../network/v2/network_auto_allocated_topology.py | 3 +- openstackclient/network/v2/network_flavor.py | 4 +- .../network/v2/network_flavor_profile.py | 4 +- openstackclient/network/v2/network_meter.py | 3 +- openstackclient/network/v2/network_meter_rule.py | 3 +- openstackclient/network/v2/network_qos_policy.py | 4 +- openstackclient/network/v2/network_qos_rule.py | 4 +- .../network/v2/network_qos_rule_type.py | 3 +- openstackclient/network/v2/network_rbac.py | 4 +- openstackclient/network/v2/network_segment.py | 4 +- .../network/v2/network_segment_range.py | 3 +- openstackclient/network/v2/port.py | 4 +- openstackclient/network/v2/router.py | 4 +- openstackclient/network/v2/security_group.py | 3 +- openstackclient/network/v2/security_group_rule.py | 4 +- openstackclient/network/v2/subnet.py | 4 +- openstackclient/network/v2/subnet_pool.py | 3 +- .../add-server-hostname-opts-3cb4fd90b5bf47ca.yaml | 8 + ...erts-option-server-create-a660488407300f22.yaml | 7 + ...t_id_to_volume_attachment-cea605585db29e14.yaml | 11 + .../notes/bug-1946816-7665858605453578.yaml | 6 + ...rate-server-backup-to-sdk-0f170baf38e98b40.yaml | 4 + ...ult-for-server-add-volume-f75277ad58e31024.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + tox.ini | 4 +- 53 files changed, 812 insertions(+), 400 deletions(-)

1 0

openstack-ansible 21.2.11 (ussuri)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We contentedly announce the release of: openstack-ansible 21.2.11: Ansible playbooks for deploying OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 21.2.10..21.2.11 --------------------------------------------- 766e47796 Bump OpenStack-Ansible Ussuri bf854c242 Fetch upper constraints file with curl rather than allow pip to download it Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 96 +++++++++++----------- scripts/bootstrap-ansible.sh | 7 ++ .../templates/user_variables.aio.yml.j2 | 5 +- 6 files changed, 62 insertions(+), 58 deletions(-)

1 0

neutron-lib 2.17.0 (yoga)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We jubilantly announce the release of: neutron-lib 2.17.0: Neutron shared routines and utilities This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.17.0 ^^^^^^ New Features * Add API extension "security-groups-shared-filtering". This extension adds the "shared" field to security groups and allows users to filter security groups based on the "shared" field. * Added API definition for "qos-pps-minimum-rule-alias" extension that enables GET, PUT and DELETE operations to be performed on QoS minimum packet rate rule without specifying policy ID. Changes in neutron-lib 2.16.0..2.17.0 ------------------------------------- 1d4da16 Add Local IP constants needed for policy checks 6b2fe94 Move RULE_TYPE_MINIMUM_PACKET_RATE to neutron-lib 6386995 Move QosPlacementAllocationUpdateConflict to neutron-lib d5195d8 Addition of status and name field to bgp_associations API 44de255 Add qos-pps-minimum-rule-alias api-def and api-ref d126257 BFD validator 65e188e Add binding-profile.allocation converter e1534b6 [Doc] Update callbacks guide 916326d Add API extension "security-groups-shared-filtering" Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/parameters.yaml | 13 +++++ api-ref/source/v2/qos.inc | 35 ++++++++++++ .../security-group-create-response.json | 3 +- .../security-group-show-response.json | 3 +- .../security-group-update-response.json | 3 +- .../security-groups-list-response.json | 3 +- api-ref/source/v2/security-groups.inc | 12 ++++ neutron_lib/api/converters.py | 23 ++++++++ neutron_lib/api/definitions/__init__.py | 4 ++ neutron_lib/api/definitions/base.py | 2 + neutron_lib/api/definitions/bfd_monitor.py | 23 +++++++- neutron_lib/api/definitions/bgp_associations.py | 16 +++++- neutron_lib/api/definitions/local_ip.py | 8 ++- .../api/definitions/qos_pps_minimum_rule_alias.py | 63 +++++++++++++++++++++ .../security_groups_shared_filtering.py | 66 ++++++++++++++++++++++ neutron_lib/api/validators/bfd.py | 51 +++++++++++++++++ neutron_lib/exceptions/qos.py | 6 ++ neutron_lib/plugins/constants.py | 1 + neutron_lib/services/constants.py | 4 +- neutron_lib/services/qos/constants.py | 2 + .../definitions/test_qos_pps_minimum_rule_alias.py | 24 ++++++++ .../test_security_groups_shared_filtering.py | 23 ++++++++ ...d-filtering-api-extension-6c3628cfda6ba6ed.yaml | 6 ++ ...os-pps-minimum-rule-alias-2d0e711bde2aa1e8.yaml | 6 ++ 27 files changed, 452 insertions(+), 24 deletions(-)

1 0

tempest 29.2.0 (yoga)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We are delighted to announce the release of: tempest 29.2.0: OpenStack Integration Testing This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 29.2.0 ^^^^^^ New Features * Added QoS minimum packet rate rule client: * create_minimum_packet_rate_rule * update_minimum_packet_rate_rule * show_minimum_packet_rate_rule * list_minimum_packet_rate_rules * delete_minimum_packet_rate_rule also Changes in tempest 29.1.0..29.2.0 --------------------------------- ed89c7722 zuul: Limit tempest-integrated-compute-centos-8-stream to >= stable/wallaby efa21d3bb Add QoS minimum packet rate rule client 0dba41c17 zuul: Add a CentOS 8 stream job to integrated-gate-compute 18accdeb7 Consolidate client usage in MinBwAllocationPlacementTest bc0257c8f Refactor existing QoS min bw tests d05536b95 Reactivate image before deletion Diffstat (except docs and test files) ------------------------------------- ...inimum-packet-rule-client-c8bfe09873032d4a.yaml | 10 ++ tempest/api/volume/test_volumes_negative.py | 3 + .../qos_minimum_packet_rate_rules_client.py | 73 +++++++++++ ..._placement.py => test_network_qos_placement.py} | 81 ++++++++----- .../test_qos_minimum_packet_rate_rules_client.py | 135 +++++++++++++++++++++ zuul.d/integrated-gate.yaml | 17 +++ zuul.d/project.yaml | 4 + zuul.d/tempest-specific.yaml | 12 ++ 8 files changed, 302 insertions(+), 33 deletions(-)

1 0

neutron 16.4.2 (ussuri)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We are pleased to announce the release of: neutron 16.4.2: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 16.4.1..16.4.2 --------------------------------- 3c99c719d0 [DVR] Fix update of the MTU in the DVR HA routers f144ba95a5 Check a namespace existence by checking only its own directory 11fe2bff17 Don't setup bridge controller if it is already set a805f175ae Fix OVN migration workload creation order b767825d13 [ovn] Stop monitoring the SB MAC_Binding table to reduce mem footprint 753be029a9 [OVN Migration] Remove trunk's subports from the nodes 226367eed1 Delete log entries when SG or port is deleted 0c5a5ef921 [OVN Migration] Remove qr and dhcp ports from the nodes e814e93e8e [OVN] Tune OVN routers to reduce the mem footprint for ML2/OVN 8b7597ea9d [OVN] Update the DHCP options when the metadata port is modified 384f2bb2aa [DVR] Fix update of the MTU in the SNAT namespace 1db798fab5 [ovn] Add logs for ovs to ovn migration 5156364b68 [OVN] Allow IP allocation with different segments for OVN service ports 1cbb2d83d1 [DVR] Check if SNAT iptables manager is initialized 9cba039b32 [OVN] Set NB/SB "connection" inactivity probe ba80c87cee Fix "_sync_metadata_ports" with no DHCP subnets d0cf4638f5 [DVR] Set arp entries only for single IPs given as allowed addr pair 38dc5d3a64 Replace cirros 0.4.0 by 0.5.2 in ovn migration create-resources.sh.j2 41ed4d7f43 Remove dhcp_extra_opt name after first newline character 707afe7012 Delete SG log entries when SG is deleted d5825e2e76 [ovn] metadata functional tests don't support Chassis_Private ebdf7c9f65 [Functional] Wait for the initial state of ha router before test 7eaa84a0cd Populate self.floating_ips_dict using "ip rule" information c45f0fd4bc Revert "[L3][HA] Retry when setting HA router GW status." 1327a54337 Fix neutron_pg_drop-related startup issues 9b0f094564 VLAN "allocate_partially_specified_segment" can return any physnet 16a2fe7722 Randomize segmentation ID assignation cb28ea06d1 Make test_throttler happy 78ff22e6bb Ensure net dict has provider info on precommit delete 3ebe727ae3 Skip FIP check if VALIDATE_MIGRATION is not True 463083c713 [L3] Use processing queue for network update events 13275402ce Implement namespace creation method Diffstat (except docs and test files) ------------------------------------- neutron/agent/common/ovs_lib.py | 9 +- neutron/agent/l3/agent.py | 148 ++++++++++------- neutron/agent/l3/dvr_edge_ha_router.py | 20 +++ neutron/agent/l3/dvr_edge_router.py | 23 ++- neutron/agent/l3/dvr_local_router.py | 96 +++++++---- neutron/agent/l3/fip_rule_priority_allocator.py | 3 + neutron/agent/l3/ha_router.py | 22 +-- neutron/agent/l3/router_info.py | 13 +- neutron/agent/linux/dhcp.py | 1 + neutron/agent/linux/interface.py | 12 +- neutron/agent/linux/ip_lib.py | 13 +- neutron/common/ovn/utils.py | 20 +++ neutron/common/utils.py | 17 ++ neutron/db/ipam_pluggable_backend.py | 3 +- neutron/objects/plugins/ml2/base.py | 10 +- neutron/plugins/ml2/drivers/helpers.py | 12 +- .../agent/openflow/native/ovs_bridge.py | 10 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 49 +++++- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 15 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 26 +++ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 77 ++++++--- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 10 +- neutron/plugins/ml2/plugin.py | 8 +- neutron/privileged/agent/linux/ip_lib.py | 18 ++- neutron/privileged/agent/linux/utils.py | 10 +- neutron/services/logapi/common/db_api.py | 34 ++-- neutron/services/logapi/common/sg_callback.py | 3 +- neutron/services/logapi/logging_plugin.py | 23 +++ .../functional/agent/l3/test_legacy_router.py | 36 ++++- .../agent/ovn/metadata/test_metadata_agent.py | 27 +++- .../functional/objects/plugins/ml2/__init__.py | 0 .../functional/objects/plugins/ml2/test_base.py | 90 +++++++++++ .../objects/plugins/ml2/test_geneveallocation.py | 26 +++ .../objects/plugins/ml2/test_greallocation.py | 26 +++ .../objects/plugins/ml2/test_vlanallocation.py | 26 +++ .../objects/plugins/ml2/test_vxlanallocation.py | 26 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 68 +++++--- .../drivers/ovn/mech_driver/test_mech_driver.py | 143 ++++++++++++++++ .../agent/openflow/native/ovs_bridge_test_base.py | 33 +++- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 28 ++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 176 ++++++++++++++------ .../unit/plugins/ml2/drivers/test_type_vlan.py | 14 +- .../unit/services/logapi/common/test_db_api.py | 93 +++++++---- .../templates/create-resources.sh.j2 | 6 +- .../tripleo_environment/ovn_migration.sh | 2 + .../roles/migration/tasks/cleanup-dataplane.yml | 17 +- .../create/templates/create-resources.sh.j2 | 18 +-- 66 files changed, 1618 insertions(+), 458 deletions(-)

1 0

manila 11.1.0 (victoria)
by no-reply＠openstack.org 12 Nov '21

12 Nov '21

We joyfully announce the release of: manila 11.1.0: Shared Storage for OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 11.1.0 ^^^^^^ Upgrade Notes ************* * Added a new config option *netapp_ssl_cert_path* for NetApp driver. This option enables the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Security Issues *************** * An RBAC policy check has been enforced against the GET /share- access-rules API to ensure that users are permitted to access the share that the access rule belongs to. See bug 1917417 (https://launchpad.net/bugs/1917417) for more details. Bug Fixes ********* * Fixed an issue on ONTAP NetApp driver that was forcing the location of CA certificates for SSL verification during HTTPS requests. It adds the *netapp_ssl_cert_path* configuration, enabling the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Please refer to the Launchpad bug #1900191 (https://bugs.launchpad.net/manila/+bug/1900191) for more details. * An issue with RPC handling on service restart was addressed by ensuring proper initialization before creating the RPC consumer. See bug 1271568 (https://bugs.launchpad.net/manila/+bug/1271568) for more details. * A bug with storage protocol filtering in the scheduler has been fixed. See bug (https://launchpad.net/bugs/1783736) for more details. * Fixed bug #1883506 (https://bugs.launchpad.net/manila/+bug/18835060) that caused a quota error when delete or unmanage a share that failed to manage. * New user messages now alert users of possible remediations during access rule creation errors with CephFS shares. This includes hints to users to not use cephx client users that are prohibited by CephFS or the share driver. See CVE-2020-27781 (https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2020-27781) and bug #1904015 <https://launchpad.net/bugs/1904015>`_ for more details. * Fixed a bug that if extend a volume after shrink it under generic driver, it may have a wrong real size. Please see Launchpad bug #1909951 (https://bugs.launchpad.net/manila/+bug/1909951) for more details. * Resizing 0.0.0.0/24 accessible NFS shares with generic driver * The scheduler stats resource APIs (/scheduler-stats/pools and /scheduler-stats/pools/detail) have been fixed to not return an arbitrary traceback in the error message body to the caller when access to the resource has been denied. * Authentication errors when loading service clients of OpenStack Compute (nova), OpenStack Image (glance), OpenStack Volume (cinder) and OpenStack Networking (neutron) services are now handled in a better manner. * Fixed bug #1922075 (https://bugs.launchpad.net/manila/+bug/1922075) Fixed the problem that "gluster volume set nfs.rpc-auth-reject '*'" failed when the glusterfs driver created an instance from a snapshot. * Fixed NotFound error in share replica periodic tasks. It could happen that the parent share of the replica that was being worked on had already been deleted. * Corrected an error message for attempts to create snapshots from shares that do not support this operation. The message said that the share backend has no such support but that is not always true. The original share for the snapshot does not support snapshots because it was created with a share type without the "snapshot_support" extra-spec set, irrespective of whether the back end used can itself support snapshots or not. * Fixed an issue that made migrated shares with replication support to do not have a share instance with its *replica_state* set to active. Now, when the share supports replication, the destination share instance will have its replica state set as active right after the migration gets completed. For more details, please refer to bug 1927060 (https://bugs.launchpad.net/manila/+bug/1927060) * Filtering shares by share-type "extra_specs" as key=value now returns the expected output. * The Infinidat driver's been fixed to process single IP Addresses (/32) correctly. See bug 1934345 (https://launchpad.net/bugs/1934345) for more details. * NetApp driver: fixed an issue with the ONTAP 9.8 and older, for scoped account users, where the operation of deleting a replica was not working, but returned a message of success. For more details, please refer to launchpad bug #1934889 (https://bugs.launchpad.net/manila/+bug/1934889) * New user message now alerts users when attempting to create a new share without identifying a share type, either through request body or by setting a default share type. See bug #1870280 (https://bugs.launchpad.net/manila/+bug/1870280) for more details. Changes in manila 11.0.1..11.1.0 -------------------------------- faec95de Add missing share-type user message 4f45cd00 handle replica state on migration complete 4e7bf1c3 [NetApp] Fixed scoped account replica delete 7e91df69 Add missing [oslo_reports] options 857d01d2 Add missing oslo.service options 5187f246 Use oslo-config-generator conf to load options from libraries 9b19b17e Handle service client authorization errors d3481f5c init_host should be called before RPC consumer is created 21d5b1b2 Filter shares by share type "extra_specs" 90241eb4 fixes availability zone filter when creating a share from snapshot 28f6e02d TrivialFix: Fix the filter name in config helper 783c0777 Fix ipaddress issues in the infinidat driver 21102351 Update IRC references 1ae67eb0 Reuse _set_instances_share_data for replicas. fa9ac6d7 Fix api error message for snapshot creation failure 19767c4f fix unmange share with manage_error status will lead to quota error a04e1319 [Glusterfs] Fix create share from snapshot failed 32db6382 [stable/victoria-only] Set max api version via plugin.sh 177ce7e9 Fix traceback in scheduler-stats API 06d380c2 Filter storage protocol in the scheduler 1286806e Fix generic share resize with 0.0.0.0/24 access 3b372323 RBAC tightening for share access rule 8f969689 [Native CephFS] Add messages for async ACL ops 57edaada [NetApp] Fix hard-coded CA cert path for SSL a0f11f88 Always use new_size when extend Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 17 --- devstack/plugin.sh | 4 + etc/oslo-config-generator/manila.conf | 13 ++- manila/api/v1/scheduler_stats.py | 8 +- manila/api/v1/share_snapshots.py | 4 +- manila/api/v1/shares.py | 11 +- manila/common/client_auth.py | 5 +- manila/common/constants.py | 1 + manila/compute/nova.py | 4 +- manila/db/sqlalchemy/api.py | 26 ++--- manila/exception.py | 4 + manila/image/glance.py | 5 +- manila/manager.py | 14 ++- manila/message/message_field.py | 80 +++++++++------ manila/network/neutron/api.py | 4 +- manila/opts.py | 11 -- manila/scheduler/drivers/filter.py | 34 ++++-- manila/scheduler/filters/capabilities.py | 3 - manila/scheduler/manager.py | 11 +- manila/service.py | 4 +- manila/share/api.py | 14 ++- manila/share/drivers/cephfs/driver.py | 66 ++++++++++-- manila/share/drivers/generic.py | 2 +- manila/share/drivers/glusterfs/layout_volume.py | 33 +++++- manila/share/drivers/helpers.py | 5 +- manila/share/drivers/infinidat/infinibox.py | 2 +- .../share/drivers/netapp/dataontap/client/api.py | 11 +- .../drivers/netapp/dataontap/client/client_base.py | 1 + .../netapp/dataontap/client/client_cmode.py | 57 +++++++---- .../netapp/dataontap/cluster_mode/data_motion.py | 1 + .../netapp/dataontap/cluster_mode/lib_base.py | 1 + manila/share/drivers/netapp/options.py | 10 +- manila/share/manager.py | 94 +++++++++-------- .../share/drivers/glusterfs/test_layout_volume.py | 13 +-- .../share/drivers/netapp/dataontap/client/fakes.py | 1 + .../netapp/dataontap/client/test_client_cmode.py | 60 +++++++---- .../dataontap/cluster_mode/test_data_motion.py | 7 +- manila/volume/cinder.py | 4 +- ...-fix-ssl-cert-path-option-35354c9b7a9c37e6.yaml | 20 ++++ ...ix-rpc-init-host-with-rpc-6e76afa553b4f2af.yaml | 6 ++ ...he-capabilities-scheduler-d8391183335def9f.yaml | 5 + ...-will-lead-to-quota-error-085fd3b7d15ae109.yaml | 6 ++ ...1-cephx-asynchronous-msgs-6a683076a1fb5a54.yaml | 9 ++ ...ix-extend-have-wrong-size-7938eaa6591bd2ad.yaml | 7 ++ ...ze-share-world-accessable-b444d88b67b05af0.yaml | 4 + ...eck-on-share-access-rules-efdddaf9e6f68fdf.yaml | 7 ++ ...-user-if-action-forbidden-0da51825756fd5fc.yaml | 7 ++ ...t-unauthorized-exceptions-b2ebc08a072f7e12.yaml | 6 ++ ...hare-from-snapshot-failed-053a583522a6fc0e.yaml | 6 ++ ...ound-replica-parent-share-d8e50659c02b941a.yaml | 5 + ...hot-support-api-error-msg-eaf5fd2b1df97d15.yaml | 10 ++ ...ate-on-migration-complete-4fb4d8ba59b58505.yaml | 9 ++ ...ing-shares-by-extra-specs-b79235301306bcf2.yaml | 5 + ...paddress-hosts-invocation-80d419d7e62a5f51.yaml | 6 ++ ...delete-for-scoped-account-8fa193c0424af9b1.yaml | 7 ++ ...0-share-type-user-message-902275047410bdbf.yaml | 7 ++ 75 files changed, 858 insertions(+), 297 deletions(-)

1 0

manila-ui 4.1.0 (victoria)
by no-reply＠openstack.org 09 Nov '21

09 Nov '21

We are glad to announce the release of: manila-ui 4.1.0: Manila Management Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through: https://bugs.launchpad.net/manila-ui/+bugs For more details, please see below. 4.1.0 ^^^^^ Upgrade Notes ************* * Support for nova networking has been removed. Manila and the manilaclient sdk dropped support for nova network in the Ocata release (Feb 2017). So this should not have an impact on deployers running later releases, and this note is only informational. Bug Fixes ********* * Visibility of "switchable" fields in the share creation form involving share types that had hyphens in their names is now fixed. See Launchpad bug #1931641 (https://launchpad.net/bugs/1931641) for more details. Changes in manila-ui 4.0.0..4.1.0 --------------------------------- bf820e1 Fix share group creation with share types 6ad8fd8 Fix parsing names in switched fields c5e5999 Drop lower constraints testing 7a311ba Remove nova networking 775bc73 Update TOX_CONSTRAINTS_FILE for stable/victoria 275e726 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 134 --------------------- .../templates/share_networks/_detail.html | 3 - manila_ui/dashboards/project/share_groups/forms.py | 20 +-- .../dashboards/project/share_networks/forms.py | 31 +++-- .../dashboards/project/share_networks/tables.py | 4 - .../templates/share_networks/_detail.html | 3 - .../dashboards/project/share_networks/views.py | 7 -- manila_ui/dashboards/project/shares/forms.py | 40 +++--- manila_ui/dashboards/utils.py | 11 ++ ...re-type-name-with-hyphens-8a9f16af36da5852.yaml | 6 + .../remove-nova-net-plugin-4fdc0d944d93644f.yaml | 7 ++ tox.ini | 10 +- 17 files changed, 102 insertions(+), 212 deletions(-)

1 0

manila 12.1.0 (wallaby)
by no-reply＠openstack.org 09 Nov '21

09 Nov '21

We enthusiastically announce the release of: manila 12.1.0: Shared Storage for OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 12.1.0 ^^^^^^ Upgrade Notes ************* * MON write caps are not longer needed to interact with the backend on the Ceph drivers. The capabilities of the driver user (configured with "cephfs_auth_id") can hence be reduced. See the administrator docs (https://docs.openstack.org/manila/wallaby/admin/cephfs_driver.html #authorizing-the-driver-to-communicate-with-ceph) for the capabilities required. Bug Fixes ********* * An issue with RPC handling on service restart was addressed by ensuring proper initialization before creating the RPC consumer. See bug 1271568 (https://bugs.launchpad.net/manila/+bug/1271568) for more details. * Authentication errors when loading service clients of OpenStack Compute (nova), OpenStack Image (glance), OpenStack Volume (cinder) and OpenStack Networking (neutron) services are now handled in a better manner. * Fixed bug #1922075 (https://bugs.launchpad.net/manila/+bug/1922075) Fixed the problem that "gluster volume set nfs.rpc-auth-reject '*'" failed when the glusterfs driver created an instance from a snapshot. * mgr-commands are now directed to the mgr-daemon instead of the mon- daemon in the CephFS drivers * Fixed NotFound error in share replica periodic tasks. It could happen that the parent share of the replica that was being worked on had already been deleted. * Corrected an error message for attempts to create snapshots from shares that do not support this operation. The message said that the share backend has no such support but that is not always true. The original share for the snapshot does not support snapshots because it was created with a share type without the "snapshot_support" extra-spec set, irrespective of whether the back end used can itself support snapshots or not. * Fixed an issue that made migrated shares with replication support to do not have a share instance with its *replica_state* set to active. Now, when the share supports replication, the destination share instance will have its replica state set as active right after the migration gets completed. For more details, please refer to bug 1927060 (https://bugs.launchpad.net/manila/+bug/1927060) * Filtering shares by share-type "extra_specs" as key=value now returns the expected output. * A Ceph version check has been added as part of this change to address the absense of the mon-mgr target in Ceph Nautilus. With this change, Ceph Nautilus users can leverage their storage backend with the OpenStack manila Wallaby release. * The Infinidat driver's been fixed to process single IP Addresses (/32) correctly. See bug 1934345 (https://launchpad.net/bugs/1934345) for more details. * NetApp driver: fixed an issue with the ONTAP 9.8 and older, for scoped account users, where the operation of deleting a replica was not working, but returned a message of success. For more details, please refer to launchpad bug #1934889 (https://bugs.launchpad.net/manila/+bug/1934889) * New user message now alerts users when attempting to create a new share without identifying a share type, either through request body or by setting a default share type. See bug #1870280 (https://bugs.launchpad.net/manila/+bug/1870280) for more details. Changes in manila 12.0.0..12.1.0 -------------------------------- 7eca10bc Add missing share-type user message b7ec1f88 Add missing [oslo_reports] options 9749a0a9 handle replica state on migration complete 2e4ac3f4 Add documentation for share server limits 24545ad9 [NetApp] Fixed scoped account replica delete 92b8330f Add missing oslo.service options 5a19c632 Use oslo-config-generator conf to load options from libraries 274073fc Add documentation for per share gigabytes quotas 2433bca5 Updates CephFS drivers docs 887c4bf4 init_host should be called before RPC consumer is created 113dc287 Handle service client authorization errors 59a0c147 Filter shares by share type "extra_specs" 9c723d0e fixes availability zone filter when creating a share from snapshot 16d88864 Add Ceph version check 2a632595 Adds a clear error message to operator-set limits f1822cf4 TrivialFix: Fix the filter name in config helper d015399a Fix ipaddress issues in the infinidat driver de8b5c3d PowerMax Manila - version change for Wallaby 377fbc3a Fix PDF build 1f4214d8 Update IRC references 7116f839 Fix with_entities usage in db queries 3532f5d6 Replace deprecated SQLAlchemy "with_lockmode" 2a24b3f6 [stable/wallaby-only] Set max api version via plugin.sh fb5a4f93 Fix api error message for snapshot creation failure 3635ade6 [Glusterfs] Fix create share from snapshot failed 9a9a2c24 Direct mgr commands to the mgr daemon 5bd8e46d Reuse _set_instances_share_data for replicas. af91420c Document policy rule using the description parameter 010454e7 [doc] Annotate max api microversion in Wallaby 46c9ec69 Update TOX_CONSTRAINTS_FILE for stable/wallaby 75341113 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/parameters.yaml | 36 ++++++++++ api-ref/source/quota-classes.inc | 5 ++ api-ref/source/quota-sets.inc | 9 +++ .../samples/quota-classes-show-response.json | 3 +- .../samples/quota-classes-update-response.json | 3 +- .../source/samples/quota-show-detail-response.json | 6 +- api-ref/source/samples/quota-show-response.json | 3 +- api-ref/source/samples/quota-update-request.json | 3 +- api-ref/source/samples/quota-update-response.json | 3 +- contrib/ci/post_test_hook.sh | 17 ----- devstack/plugin.sh | 5 ++ ...ared-file-systems-manage-and-unmanage-share.rst | 2 + ...shared-file-systems-share-server-management.rst | 22 ++++++ .../configuration/shared-file-systems/overview.rst | 2 + .../shared-file-systems/samples/sample_policy.rst | 11 ++- etc/oslo-config-generator/manila.conf | 13 +++- manila/api/openstack/rest_api_version_history.rst | 4 +- manila/api/v1/share_snapshots.py | 4 +- manila/api/v1/shares.py | 11 +-- manila/common/client_auth.py | 5 +- manila/compute/nova.py | 4 +- manila/db/sqlalchemy/api.py | 57 +++++++-------- ...dd-explicit-error-message-c33c7b75a7e49257.yaml | 7 ++ manila/image/glance.py | 5 +- manila/manager.py | 14 +++- manila/message/message_field.py | 5 ++ manila/network/neutron/api.py | 4 +- manila/opts.py | 11 --- manila/policies/base.py | 32 +++++---- manila/scheduler/drivers/filter.py | 10 +++ manila/scheduler/manager.py | 2 +- manila/service.py | 4 +- manila/share/api.py | 2 +- manila/share/drivers/cephfs/driver.py | 59 +++++++++++++-- .../dell_emc/plugins/powermax/connection.py | 3 +- manila/share/drivers/glusterfs/layout_volume.py | 33 +++++++-- manila/share/drivers/infinidat/infinibox.py | 2 +- .../netapp/dataontap/client/client_cmode.py | 57 +++++++++------ manila/share/manager.py | 32 +++++---- .../share/drivers/glusterfs/test_layout_volume.py | 13 ++-- .../netapp/dataontap/client/test_client_cmode.py | 60 +++++++++++----- manila/volume/cinder.py | 4 +- ...ix-rpc-init-host-with-rpc-6e76afa553b4f2af.yaml | 6 ++ ...t-unauthorized-exceptions-b2ebc08a072f7e12.yaml | 6 ++ ...hare-from-snapshot-failed-053a583522a6fc0e.yaml | 6 ++ ...irect-mgr-commands-monmgr-5e8babb4a1067e92.yaml | 11 +++ ...ound-replica-parent-share-d8e50659c02b941a.yaml | 5 ++ ...hot-support-api-error-msg-eaf5fd2b1df97d15.yaml | 10 +++ ...ate-on-migration-complete-4fb4d8ba59b58505.yaml | 9 +++ ...ing-shares-by-extra-specs-b79235301306bcf2.yaml | 5 ++ ...59-add-ceph-version-check-88eee324bc6134ea.yaml | 7 ++ ...paddress-hosts-invocation-80d419d7e62a5f51.yaml | 6 ++ ...delete-for-scoped-account-8fa193c0424af9b1.yaml | 7 ++ ...0-share-type-user-message-902275047410bdbf.yaml | 7 ++ tox.ini | 6 +- zuul.d/project.yaml | 6 -- 72 files changed, 700 insertions(+), 240 deletions(-)

1 0

manila-ui 5.1.0 (wallaby)
by no-reply＠openstack.org 09 Nov '21

09 Nov '21

We are jazzed to announce the release of: manila-ui 5.1.0: Manila Management Dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through: https://bugs.launchpad.net/manila-ui/+bugs For more details, please see below. 5.1.0 ^^^^^ Upgrade Notes ************* * Support for nova networking has been removed. Manila and the manilaclient sdk dropped support for nova network in the Ocata release (Feb 2017). So this should not have an impact on deployers running later releases, and this note is only informational. Bug Fixes ********* * Visibility of "switchable" fields in the share creation form involving share types that had hyphens in their names is now fixed. See Launchpad bug #1931641 (https://launchpad.net/bugs/1931641) for more details. Changes in manila-ui 5.0.0..5.1.0 --------------------------------- f421aeb Fix share group creation with share types b7d87e8 Fix parsing names in switched fields 85137cf Remove nova networking Diffstat (except docs and test files) ------------------------------------- .../templates/share_networks/_detail.html | 3 -- manila_ui/dashboards/project/share_groups/forms.py | 20 +++++++---- .../dashboards/project/share_networks/forms.py | 31 ++++++++--------- .../dashboards/project/share_networks/tables.py | 4 --- .../templates/share_networks/_detail.html | 3 -- .../dashboards/project/share_networks/views.py | 7 ---- manila_ui/dashboards/project/shares/forms.py | 40 +++++++++++++--------- manila_ui/dashboards/utils.py | 11 ++++++ ...re-type-name-with-hyphens-8a9f16af36da5852.yaml | 6 ++++ .../remove-nova-net-plugin-4fdc0d944d93644f.yaml | 7 ++++ 13 files changed, 99 insertions(+), 69 deletions(-)

1 0

openstack-ansible 23.1.2 (wallaby)
by no-reply＠openstack.org 09 Nov '21

09 Nov '21

We are psyched to announce the release of: openstack-ansible 23.1.2: Ansible playbooks for deploying OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 23.1.1..23.1.2 ------------------------------------------- 1a03031f0 Bump OpenStack-Ansible Wallaby eb0292121 Fix manila haproxy manage bc1291e2e Remove unnecessary pki step in haproxy install Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 16 +-- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++++----------- playbooks/haproxy-install.yml | 6 -- playbooks/os-manila-install.yml | 4 +- 6 files changed, 69 insertions(+), 75 deletions(-)

1 0

openstack-ansible 22.3.3 (victoria)
by no-reply＠openstack.org 09 Nov '21

09 Nov '21

We are glad to announce the release of: openstack-ansible 22.3.3: Ansible playbooks for deploying OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 22.3.2..22.3.3 ------------------------------------------- f1313b551 Bump OpenStack-Ansible Victoria 5c9007aa8 Fix manila haproxy manage Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++++----------- playbooks/os-manila-install.yml | 4 +- 5 files changed, 66 insertions(+), 66 deletions(-)

1 0

oslo.context 3.0.3 (ussuri)
by no-reply＠openstack.org 08 Nov '21

08 Nov '21

We are gleeful to announce the release of: oslo.context 3.0.3: Oslo Context library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 3.0.3 ^^^^^ Bug Fixes * Fixes context from_dict() to properly handle system_scope. Changes in oslo.context 3.0.2..3.0.3 ------------------------------------ 47fcc64 Fix context from_dict() for system_scope cb55ee9 Dropping lower constraints testing c47719d Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 59ee422 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 36 ---------------------- oslo_context/context.py | 1 + ...ix-system-scope-from_dict-29615af90723ba4d.yaml | 4 +++ tox.ini | 9 ++---- 7 files changed, 11 insertions(+), 45 deletions(-)

1 0

kolla 13.0.0.0rc2 (xena)
by no-reply＠openstack.org 05 Nov '21

05 Nov '21

Hello everyone, A new release candidate for kolla for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla/src/branch/stable/xena Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *xena-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 13.0.0.0rc2 (xena)
by no-reply＠openstack.org 05 Nov '21

05 Nov '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/xena Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *xena-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kayobe 11.0.0.0rc2 (xena)
by no-reply＠openstack.org 05 Nov '21

05 Nov '21

Hello everyone, A new release candidate for kayobe for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/xena Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *xena-rc-potential* to bring it to the kayobe release crew's attention.

1 0

os-ken 2.3.0 (yoga)
by no-reply＠openstack.org 05 Nov '21

05 Nov '21

We are jazzed to announce the release of: os-ken 2.3.0: A component-based software defined networking framework for OpenStack. This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 2.2.0..2.3.0 ------------------------------ e70fe7e2 Bump min eventlet version to 0.26.1 b5104258 Add support for the MTU ND option. c21b44f7 Allow user to set cipher list. a6af9930 Bugfix now multiple switches can connect with TLS 4468605f Msgpack version upgrade to 1.0.0 8d98fb20 Choose the highest TLS version f2d4ddd2 updated jsonrpc.Session call to have correct arguments for latest version of ovs beefdb8e Update bridge.py 9aae6f02 Add support for revised RFC8227 withdraw labels dc13916b nx_action_encap and nx_action_decap classes are defined f1735c32 add ofproto 1.3 coverage, check key-error and attribute-error. 0f5a8bcf Fix major bug in child thread cleanup logic 84e8fa6e Fix bug where path.source is set to VRF_TABLE (in vrf.py) 21f18b50 Use constants imported from API base 7a5513c8 Patch to add 2 parameters for controlling specific fields in EVPN rou… f77f83c6 fix NXActionRegLoad action_to_str 4f224538 Fix convertion of ipv4 to string on i386 and arch 477acc9b mrtlib: Define JSON representation types d4fc194f mrtlib: Support RFC8050 2cd88b0b Enabled point-to-multipoint links in topology discovery. 81e375e6 Add support for Adj-RIB-Out (draft-ietf-grow-bmp-adj-rib-out-03) 4a6a0017 mrtlib: Missing subclass for SUBTYPE_RIB_*_MULTICAST Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 6 +- os_ken/controller/controller.py | 36 ++-- os_ken/controller/handler.py | 7 +- os_ken/controller/mac_to_port.py | 2 +- os_ken/controller/ofp_api.py | 4 +- os_ken/lib/hub.py | 23 ++- os_ken/lib/ip.py | 2 +- os_ken/lib/mrtlib.py | 190 +++++++++++++++++++-- os_ken/lib/ofctl_nicira_ext.py | 4 +- os_ken/lib/ovs/bridge.py | 4 +- os_ken/lib/packet/bgp.py | 17 +- os_ken/lib/packet/bmp.py | 49 ++++-- os_ken/lib/packet/icmpv6.py | 44 +++++ os_ken/lib/rpc.py | 4 +- os_ken/ofproto/nicira_ext.py | 13 ++ os_ken/ofproto/nx_actions.py | 72 ++++++++ os_ken/ofproto/ofproto_v1_3_parser.py | 80 +++++---- os_ken/services/protocols/bgp/api/base.py | 2 + os_ken/services/protocols/bgp/api/prefix.py | 5 +- os_ken/services/protocols/bgp/base.py | 2 +- os_ken/services/protocols/bgp/bgpspeaker.py | 24 ++- .../protocols/bgp/core_managers/table_manager.py | 11 +- os_ken/services/protocols/bgp/info_base/vrf.py | 16 +- os_ken/services/protocols/bgp/net_ctrl.py | 4 +- os_ken/services/protocols/bgp/processor.py | 4 +- os_ken/services/protocols/ovsdb/client.py | 2 +- os_ken/topology/switches.py | 61 +++---- requirements.txt | 4 +- tools/pip-requires | 7 +- 33 files changed, 666 insertions(+), 156 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e1f54929..a9d8a121 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6,2 @@ pbr>=2.0.0 # Apache-2.0 -eventlet>=0.22.0,!=0.23.0 # MIT -msgpack>=0.5.0 # RPC library, BGP speaker(net_cntl) +eventlet>=0.26.1 # MIT +msgpack>=1.0.0 # RPC library, BGP speaker(net_cntl)

1 0

manila 13.0.1 (xena)
by no-reply＠openstack.org 04 Nov '21

04 Nov '21

We are tickled pink to announce the release of: manila 13.0.1: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.1 ^^^^^^ Bug Fixes * NetApp cDOT driver Custom port configuration using "netapp_server_port" was accidentally ignored after a refactor. This option should now be properly read. See Launchpad bug 1945365 (https://bugs.launchpad.net/manila/+bug/1945365) for more details. * When "cephfs_ganesha_server_ip" is not set, the current hostname is used as a default for such config option. The driver was treating this value as an IP address and trying to perform validations on it. The CEPH NFS driver will no longer treat hostnames as ip addresses and try to validate them as such. Changes in manila 13.0.0..13.0.1 -------------------------------- a1f8f4b2 Adapt CephFS driver to do not try to escape export ip 5f7d557b NetApp: properly use netapp_server_port config 8cda3409 Update TOX_CONSTRAINTS_FILE for stable/xena 4a0b7d23 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manila/share/drivers/cephfs/driver.py | 11 +++++++++-- manila/share/drivers/netapp/dataontap/client/api.py | 8 ++++++-- .../bug-1945365-netapp-fix-port-conf-91552d3f61378c94.yaml | 7 +++++++ ...s-fix-export-ip-escaping-on-hostname-e2866be32a8f5e38.yaml | 8 ++++++++ tox.ini | 6 +++--- 7 files changed, 44 insertions(+), 7 deletions(-)

1 0

python-manilaclient 2.6.1 (wallaby)
by no-reply＠openstack.org 04 Nov '21

04 Nov '21

We are ecstatic to announce the release of: python-manilaclient 2.6.1: Client library for OpenStack Manila API. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.6.1 ^^^^^ Bug Fixes * Launchpad bug 1920888 (https://bugs.launchpad.net/manila/+bug/1920888) Fix the bug in CLI 'manila list' with sorting key 'availability_zone'. Changes in python-manilaclient 2.6.0..2.6.1 ------------------------------------------- c338a6c Fix error in CLI 'manila list' with sorting key 'availability_zone'. 7f8ab2a Update TOX_CONSTRAINTS_FILE for stable/wallaby f29055a Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manilaclient/common/constants.py | 2 +- manilaclient/v2/shares.py | 2 ++ ...ila-list-with-sorting-key-availabilityzone-cea5a1f5d8a38fc3.yaml | 5 +++++ tox.ini | 6 +++--- 6 files changed, 14 insertions(+), 4 deletions(-)

1 0

pbr 5.7.0
by no-reply＠openstack.org 04 Nov '21

04 Nov '21

We joyfully announce the release of: pbr 5.7.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 5.7.0 ^^^^^ New Features * PBR now includes a PEP 517 build-backend and can be used in pyproject.toml build-system configuration. Setuptools continues to be the underlying mechanism with PBR acting as a driver via PEP 517 entrypoints. Changes in pbr 5.6.0..5.7.0 --------------------------- 09ee153 Add a PEP517 interface 8c0d5c3 PBR package testing improvements 11a1438 Run python3.9 test jobs 4849d82 Retire django-openstack-auth f3b1c75 Correct comment for 'D1_D2_SETUP_ARGS' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 16 ++++-- pbr/build.py | 61 ++++++++++++++++++++++ pbr/util.py | 6 +-- pyproject.toml.future | 9 ++++ .../notes/pep517-support-89189ce0bab15845.yaml | 7 +++ 7 files changed, 158 insertions(+), 11 deletions(-)

1 0

tempest 29.1.0 (yoga)
by no-reply＠openstack.org 04 Nov '21

04 Nov '21

We are happy to announce the release of: tempest 29.1.0: OpenStack Integration Testing This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 29.1.0 ^^^^^^ Bug Fixes * Improve cleanup after Swift testing. Ensures containers are empty before deleting to prevent errors due to delayed execution. Changes in tempest 29.0.0..29.1.0 --------------------------------- 20514ef50 Prepare MinBwAllocationPlacementTest for new neutron API ext 92ca258fa Adding Bandwidth Limit QoS rule client to Manager d458bf329 Use lib.commom.api_microversion_fixture to set volume, compute API microversion in volume API testing a47c8afc0 Get rid of jsonschema.compat usage 663f4a1f2 Improve cleanup after Swift testing a7bcabc89 Mark unstable test_create_object_with_transfer_encoding 3628631fb Fix IPv6 localhost replacement in Swift container sync test eb8bd6ac8 Add Tempest gate job for stable/xena a5f523b20 Revert "Skip test_qos_min_bw_allocation_basic when not supported" a54417270 Skip snaphost tests unless snapshot feature is enabled ea3e38c2a Fix test_fix_argument_yes 17655434e [OVN] Remove OVN metadata ports from network port list 5f1dec076 object_storage: retry object creation on Conflict c16deb47a Add release notes page for version 29.0.0, 28.1.0, 28.0.0 6b841273b Use the master constraint in tox.ini again b87ef29b8 Fix unused parameters in _create_subnet method Diffstat (except docs and test files) ------------------------------------- .../swift-improve-cleanup-63cfc21ffb3aff6f.yaml | 5 ++++ releasenotes/source/index.rst | 3 +++ releasenotes/source/v28.0.0.rst | 5 ++++ releasenotes/source/v28.1.0.rst | 5 ++++ releasenotes/source/v29.0.0.rst | 5 ++++ tempest/api/compute/volumes/test_attach_volume.py | 2 ++ tempest/api/network/test_ports.py | 3 ++- tempest/api/object_storage/base.py | 25 ++++++++++-------- .../test_container_services_negative.py | 9 ++++--- tempest/api/object_storage/test_container_sync.py | 18 +++++++++---- tempest/api/object_storage/test_object_services.py | 2 +- tempest/api/object_storage/test_object_slo.py | 7 +---- tempest/api/volume/admin/test_group_snapshots.py | 8 +++--- tempest/api/volume/admin/test_group_type_specs.py | 4 +-- tempest/api/volume/admin/test_group_types.py | 4 +-- tempest/api/volume/admin/test_groups.py | 12 ++++----- tempest/api/volume/admin/test_user_messages.py | 4 +-- tempest/api/volume/admin/test_volume_retype.py | 3 +++ tempest/api/volume/base.py | 15 +++++++---- tempest/api/volume/test_volume_transfers.py | 4 +-- tempest/api/volume/test_volumes_backup.py | 4 +-- tempest/api/volume/test_volumes_extend.py | 2 +- tempest/api/volume/test_volumes_get.py | 4 +-- tempest/clients.py | 1 + tempest/lib/common/jsonschema_validator.py | 2 +- tempest/lib/services/network/__init__.py | 7 +++-- .../scenario/test_minbw_allocation_placement.py | 24 +++++++++++------ tempest/scenario/test_network_basic_ops.py | 7 +++-- tox.ini | 10 ++++---- zuul.d/integrated-gate.yaml | 30 ---------------------- zuul.d/project.yaml | 3 +++ zuul.d/stable-jobs.yaml | 5 ++++ 33 files changed, 151 insertions(+), 119 deletions(-)

1 0

tripleo-operator-ansible 0.7.1
by no-reply＠openstack.org 02 Nov '21

02 Nov '21

We are stoked to announce the release of: tripleo-operator-ansible 0.7.1: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.7.0..0.7.1 ------------------------------------------------ e9c6b40 Make temporary directory for collection more permissive 80b194a Remove --skip-nodes-and-networks b24dd92 Add network vip provision molecule tests Diffstat (except docs and test files) ------------------------------------- ci/playbooks/publish_collection.yml | 2 +- roles/tripleo_overcloud_deploy/defaults/main.yml | 1 - .../molecule/default/converge.yml | 14 -------------- roles/tripleo_overcloud_deploy/tasks/main.yml | 1 - .../molecule/default/converge.yml | 4 ++-- zuul.d/molecule.yaml | 17 +++++++++++++++++ 6 files changed, 20 insertions(+), 19 deletions(-)

1 0