November 2021 - Release-announce - lists.openstack.org

metalsmith 1.6.0 (yoga)
by no-reply＠openstack.org 24 Nov '21

24 Nov '21

We are delighted to announce the release of: metalsmith 1.6.0: Deployment and Scheduling tool for Bare Metal This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 1.6.0 ^^^^^ New Features ************ * Network metadata is now created and written to the instance config in the config-drive for deployed nodes. Bug Fixes ********* * Fixed and issue where deployed nodes did not become available over the network. This happened when the first network interface was not connected to a network with a DHCP service, i.e a secondary network interface was used. The addition of network metadata in the instance config solves this problem. See bug: 2009238 (https://storyboard.openstack.org/#!/story/2009238) Changes in metalsmith 1.5.1..1.6.0 ---------------------------------- 7268987 CI: remove old centos7 job 5e5e421 Update pep8 test requirements ab69212 Set explicit boot mode to bios for legacy job f98dfa6 Write network_data.json metadata to config-dirve 56cf1fe Add Python3 yoga unit tests 9615de0 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 34 +----- metalsmith/_network_metadata.py | 93 +++++++++++++++ metalsmith/_provisioner.py | 7 +- metalsmith/exceptions.py | 4 + metalsmith/instance_config.py | 13 ++- metalsmith/test/test_instance_config.py | 15 ++- metalsmith/test/test_network_metadata.py | 130 +++++++++++++++++++++ metalsmith/test/test_provisioner.py | 24 ++-- .../notes/network-metadata-ff0c3e80e5e0f53c.yaml | 13 +++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + tox.ini | 6 +- 13 files changed, 302 insertions(+), 48 deletions(-)

1 0

ironic-lib 5.1.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are stoked to announce the release of: ironic-lib 5.1.0: Ironic common library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 5.1.0 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 5.0.0..5.1.0 ---------------------------------- 731e2f9 Restore blkid compatibility with Centos 7 b6416ee Allow qemu-img to write out zeros to disk 15f5264 Add Python3 yoga unit tests b7f1211 Avoid using blkid in favour of lsblk and parted ac95888 Drop an explicit requirement of oslo.log Diffstat (except docs and test files) ------------------------------------- ironic_lib/auth_basic.py | 4 +- ironic_lib/disk_partitioner.py | 3 +- ironic_lib/disk_utils.py | 63 +++++++++++++---- ironic_lib/exception.py | 2 +- ironic_lib/json_rpc/client.py | 5 +- ironic_lib/json_rpc/server.py | 4 +- ironic_lib/keystone.py | 2 +- ironic_lib/mdns.py | 2 +- ironic_lib/metrics_statsd.py | 4 +- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ requirements.txt | 1 - zuul.d/project.yaml | 2 +- 14 files changed, 120 insertions(+), 61 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 23e1322..c652c43 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +9,0 @@ oslo.utils>=3.34.0 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0

1 0

os_vif 2.7.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are tickled pink to announce the release of: os_vif 2.7.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. Changes in os_vif 2.6.0..2.7.0 ------------------------------ b30c7fc Add Python3 yoga unit tests 067fd6a Update master for stable/xena e4dc8b5 only register tables used by os-vif 09c0629 Use TCP keepalives for ovsdb connections Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 +++++ vif_plug_ovs/ovsdb/impl_idl.py | 50 +++++++++++++++++++++++++++++++++++++++++- 4 files changed, 57 insertions(+), 2 deletions(-)

1 0

python-neutronclient 7.7.0 (yoga)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are tickled pink to announce the release of: python-neutronclient 7.7.0: CLI and Client Library for OpenStack Networking This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.7.0 ^^^^^ New Features * Added new client methods for QoS minimum packet rate rule: "list_minimum_packet_rate_rules", "show_minimum_packet_rate_rule", "create_minimum_packet_rate_rule", "update_minimum_packet_rate_rule", "delete_minimum_packet_rate_rule". Changes in python-neutronclient 7.6.0..7.7.0 -------------------------------------------- 3b80135 Add support for minimum packet rate rule to the client 3a65712 Fix lower-constraints and neutronclient-functional job 792ad11 Add Python3 yoga unit tests ee73a48 Update master for stable/xena cff9c26 Replace deprecated assertDictContainsSubset Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- lower-constraints.txt | 2 +- neutronclient/v2_0/client.py | 34 ++++++++++++++++++++++ .../minimum-packet-rate-34576b8fd98a3034.yaml | 7 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++ 7 files changed, 54 insertions(+), 5 deletions(-)

1 0

kolla 10.4.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are pumped to announce the release of: kolla 10.4.0: Kolla OpenStack Deployment This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 Changes in kolla 10.3.0..10.4.0 ------------------------------- 5445c1e54 cinder-volume/ubuntu: add lsscsi and nvme f179f8383 neutron: Fix update-alternatives on CentOS 23af39b04 [debian] Use upstream MariaDB cdf823440 [doc] Fix Ceph sources 2637b4328 Unify curl options 36e4f077e monasca-thresh: Allow topology check and removal in storm e0fa1aa51 masakari: Add crm_mon to masakarimonitors sudoers 2df836b0f Improve offline build scenario. 9f3660a6c Add boto3 as s3 dependency for Glance container 09cecc92e Fix missing templating block for kolla-toolbox. f28f4a942 Fix prometheus-elasticsearch-exporter container. Diffstat (except docs and test files) ------------------------------------- .../masakari-monitors/masakari_monitors_sudoers | 1 + .../monasca/monasca-thresh/topology_bootstrap.sh | 90 ++++++++++++++++++++++ .../prometheus-alertmanager/Dockerfile.j2 | 2 +- .../prometheus-blackbox-exporter/Dockerfile.j2 | 2 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 2 +- .../Dockerfile.j2 | 2 +- .../prometheus-haproxy-exporter/Dockerfile.j2 | 2 +- .../prometheus-memcached-exporter/Dockerfile.j2 | 2 +- .../prometheus-mysqld-exporter/Dockerfile.j2 | 2 +- .../prometheus-node-exporter/Dockerfile.j2 | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/template/repos.yaml | 2 + ...a-toolbox_templating_block-3d284d886816e95a.yml | 5 ++ .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 +++ .../improve_offline_support-e7b2384fb7390184.yaml | 5 ++ 38 files changed, 196 insertions(+), 41 deletions(-)

1 0

kayobe 8.2.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are thrilled to announce the release of: kayobe 8.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Removes the workaround for bogus name server entries in some CentOS 7 images, together with the "overcloud_host_image_workaround_resolv_enabled" variable. Bug Fixes ********* * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. Changes in kayobe 8.1.1..8.2.0 ------------------------------ 64275c03 Remove stale config dump from seed hypervisor host configure 976d80a3 Add the missing documentation for mariadb recovery 3dc0578e Remove CentOS 7 image resolv.conf workaround df84ff92 Fix IPA builder version typo 331b6069 Fix wrong filename in bifrost docs e74d5629 Make setup module arguments configurable b5f994d7 CI: Disable libvirt debug logs 8705e35b CI: Log disk usage details 7ae8ac85 Sync documentation with kolla_openstack_custom_config 31af98f2 Use ansible_facts to reference facts 16da52a1 Fix typo in IP allocation filename d4fd330f CI: Fix get_logs.sh docker logs output 02ea57de Add twentyFiveGigE to port descriptions in inspector rules d4445e3e dnf: add metalink argument to custom dnf repository c67473e3 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/globals | 11 ++++ ansible/group_vars/all/inspector | 4 ++ ansible/group_vars/all/overcloud | 11 ---- ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/kayobe-target-venv.yml | 18 +++--- ansible/kolla-target-venv.yml | 8 ++- ansible/network.yml | 2 + ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++++ ansible/overcloud-host-image-workaround-resolv.yml | 35 ------------ ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/roles/bootstrap/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 2 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 8 +-- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 12 ++-- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 12 ++-- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +-- ansible/snat.yml | 4 +- ansible/timezone.yml | 2 +- etc/kayobe/bifrost.yml | 2 +- etc/kayobe/globals.yml | 11 ++++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/overcloud.yml | 11 ---- kayobe/ansible.py | 1 + kayobe/cli/commands.py | 30 +++++----- playbooks/kayobe-base/pre.yml | 14 +++++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 16 ++++++ playbooks/kayobe-overcloud-upgrade-base/pre.yml | 5 ++ playbooks/kayobe-overcloud-upgrade-base/run.yml | 5 ++ playbooks/kayobe-seed-base/overrides.yml.j2 | 4 -- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 1 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++++ .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 ++ ...ve-resolv-conf-workaround-4cb484d3a66c4e58.yaml | 6 ++ .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++++ .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 ++ requirements.yml | 28 +++++----- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + 63 files changed, 368 insertions(+), 173 deletions(-)

1 0

kolla-ansible 10.4.0 (ussuri)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are delighted to announce the release of: kolla-ansible 10.4.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Add new option prometheus_openstack_exporter_timeout to override default scrape_timeout for openstack exporter job. * Adds support for elasticsearch storage backend with cloudkitty: That feature let you store cloudkitty rating documents directly within your elasticsearch cluster. If you already have an elasticsearch cluster running for logging it create a new cloudkitty specific index. That let you use kibana, grafana or any other interface to browse your rating data and create appropriate dashboard or build an appropriate billing service over it. Adds support for prometheus as a fetcher/collector for cloudkitty: That feature let you use prometheus metrics as your source of rating. Using prometheus let you rate pretty much any openstack object directly from the kolla provided exporters (Openstack_exporter) or your own customs exporters. * Adds config parameter "haproxy_nova_spicehtml5_proxy_tunnel_timeout" to configure the "Tunnel TimeOut" directive for spicehtml5proxy haproxy service. * Adds a new variable, "disable_firewall", which defaults to "true". If set to "false", then the host firewall will not be disabled during "kolla-ansible bootstrap-servers". * Adds two new variables "service_images_pull_retries" and "service_images_pull_delay" which control the behaviour of image pulling tasks. These are useful if your registry is not 100% reliable (usually due to load). The defaults have been set to 3 retries and 5 seconds delay to ensure a better default experience (these are actually Ansible defaults when task retries are enabled). * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kolla_ansible_setup_filter" and "kolla_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * New variable "ironic_enable_keystone_integration" was added. It helps to add keystone connection information into "ironic.conf" if we want to connect to existing keystone (not installing it at the same time). Upgrade Notes ************* * Updates all references to Ansible facts within Kolla Ansible from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Modifies the default value of "ceph_nova_user" from "nova" to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". Users who have overridden "ceph_nova_keyring" to use separate keyrings for Nova and Cinder should also override "ceph_nova_user" to match the Nova keyring. LP#1934145 * Modifies the default value of "rabbitmq_server_additional_erl_args" from an empty string to "+S 2:2 +sbwt none +sbwtdcpu none +sbwtdio none". Security Issues *************** * Fixes "net.ipv4.ip_forward" not to be enabled by Kolla Ansible on the default network namespace. It was enabled on hosts with Neutron L3 Agent (thus in most common setups with OVS and/or Linux Bridge, but not OVN) and allowed, unless users had extra iptables rules to avoid that, any traffic to be accepted for forwarding (as long as it was routable and passed other checks). Users of existing setups are advised to re-evaluate whether they need this sysctl enabled and disable if not necessary. Kolla Ansible will simply no longer try to set this sysctl at all. Neutron L3 Agent handles forwarding enablement per managed namespace. LP#1945453 Bug Fixes ********* * Fixes monasca-thresh to correctly submit the topology to Storm. The previous container ran the topology in local mode (within the container), and didn't use the Storm cloud. The new container handles submitting the topology to Storm and also handles killing and replaces the topology when it's configuration has changed. As a result, the monasca-thresh container is only used for submission, and exits after that's completed. The logs for the topology will now be available in the storm worker-artifact logs. LP#1808805 * Fixes an issue where configuration in containers could become stale. This prevented containers with updated configuration from being restarted, e.g., if the "kolla-ansible genconfig" and "kolla- ansible deploy-containers" commands were used together. LP#1848775 * Fixes elasticsearch fluentd output being enabled when elasticsearch is not enabled. LP#1927880 * Fixes an issue seen when customising the Docker Yum repository URL on CentOS, where the "docker_yum_gpgkey" variable is not used consistently. LP#1934913 * Fixes an issue where spice console is freezed after while, see LP#1938549. * Fixed broken "kolla-toolbox" container when RabbitMQ is disabled and IPv6 is used. LP#1939883 * Fixes "mariadb-clustercheck" not to run when there is no HAProxy. LP#1944114 * No longer creates directories for haproxy and swift logs where they are not needed. LP#1945070 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fixes an issue with Cyborg deployment. LP#1937911 * Fixes an issue with "config.json" for "neutron-server" when a VMware plugin agent is used. * Fixes an issue with Neutron "linuxbridge" ML2 agent when "neutron_external_interface" includes multiple interfaces. LP#1863935 * Fixes an issue with Manila configuration which was missing a "[glance]" section, preventing some drivers from operating. * Fixes an issue with default Nova configuration for Ceph where the RBD user is set to "nova", but only a "cinder" keyring is copied. The default value of "ceph_nova_user" is changed to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". LP#1934145 * Fixes an issue where RabbitMQ consumes a large amount of CPU, particularly on multi-core systems. The default RabbitMQ tuning assumes that RabbitMQ is running on a dedicated host, which is the opposite of a typical Kolla Ansible container setup. For more details on tuning RabbitMQ in your environment, please see: https://www.rabbitmq.com/runtime.html#busy-waiting https://www.rabbitmq.com/runtime.html#scheduling Other Notes *********** * Optimised image pulling to avoid looping over disabled services. Changes in kolla-ansible 10.3.0..10.4.0 --------------------------------------- 3c21a5391 Stop creating unused cron/logrotate directory 5253da3c0 Fix broken deploy of placement service cddc4e1f5 Fix missing Ansible version in the error message 7ddaf4550 Add support for Ironic inspection through DHCP-relay 58f7f95de Correctly create the dhcp_agent.ini and l3_agent.ini efb580ef8 Do not set net.ipv4.ip_forward sysctl d4153db70 Do not create haproxy and swift log dirs needlessly 73859a3d8 Docs: Update to opendev.org domain 7a55c46ee Do not enable mariadb-clustercheck when not needed 4d24556b9 Do not become root when searching for custom prometheus alert rules files 85e31d2b3 CI: stop setting ceph_nova_user 307ac600a Add disable_firewall variable 6c865d39e Add override timeout for openstack exporter de70a8424 Fix neutron upgrade using host limit without controllers df92cb4f6 Zun: Temporarily skip capsule test for ubuntu 36280dd5e Fix kolla-toolbox with IPv6 and disabled RabbitMQ 59df4974c Remove an unused file dd8fad8b1 Add ability to retry image pulling 313a6580c Fix regression in image pull action v2 3279637a7 Use more RMQ flags for less busy wait 16fe223bc Fix regression in image pull action 3f440ab10 Set changed_when to false for group_by tasks 97804e484 Fix the Tempest image url variable c65e1035b fluentd: Fix check for external elasticsearch a552f93cd ironic: Follow up for ironic_enable_keystone_integration ec4afcafb Refactor and optimise image pulling d79d0d3b3 monasca-thresh: Fix topology submission to storm 3bcc754fe Extra var ironic_enable_keystone_integration added. 3acfef48f baremetal: use docker_yum_gpgkey to fetch docker GPG key 998186750 Fix release note for ansible_facts 90c3cdc0a neutron: fix neutron-server config.json with VMware 8a9480661 Blazar: Fix support for external keystone in multiregion deploy fcad47657 nova: Use cinder user for Ceph 2b353889a Elevated privileges required to set owner/group/mode by ansible 70ad1ea10 Fix config action when OVN is enabled a43ca2673 Check config when checking the containers 608f92669 Fix nova deployment failure when rabbitmq is disabled a9a8f6d49 Fix freezed spice console in horizon 5e7ac8702 watcher: add missing become for copying configs f6f2c1352 Fix incorrect config of linuxbridge multiple external networks a2ac590fc Make setup module arguments configurable 80c0cee82 cyborg: add missing become for api-paste.ini ae3b709ca Add missing elasticsearch cloudkitty storage and prometheus collector backend support. 0ccd665be Use ansible_facts to reference facts da591982a docs: Add information on tuning Ansible 43c81db1c manila: add glance section in manila-share.conf 95de85025 Reduce RabbitMQ busy waiting, lowering CPU load Diffstat (except docs and test files) ------------------------------------- ansible/gather-facts.yml | 14 +- ansible/group_vars/all.yml | 27 ++- ansible/library/kolla_docker.py | 44 ++++- ansible/post-deploy.yml | 4 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/pull.yml | 12 +- ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/pull.yml | 12 +- ansible/roles/baremetal/defaults/main.yml | 11 +- ansible/roles/baremetal/tasks/install.yml | 72 ++++---- ansible/roles/baremetal/tasks/post-install.yml | 18 +- ansible/roles/baremetal/tasks/pre-install.yml | 16 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/pull.yml | 12 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 +- ansible/roles/ceilometer/defaults/main.yml | 8 +- ansible/roles/ceilometer/tasks/pull.yml | 12 +- ansible/roles/chrony/defaults/main.yml | 2 +- ansible/roles/chrony/tasks/pull.yml | 12 +- ansible/roles/cinder/defaults/main.yml | 8 +- ansible/roles/cinder/tasks/pull.yml | 12 +- ansible/roles/cloudkitty/defaults/main.yml | 47 +++++- ansible/roles/cloudkitty/tasks/bootstrap.yml | 30 ++++ ansible/roles/cloudkitty/tasks/pull.yml | 12 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 34 +++- ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 12 +- ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/tasks/config.yml | 9 +- ansible/roles/common/tasks/inspect.yml | 6 - ansible/roles/common/tasks/pull.yml | 21 ++- .../templates/conf/input/03-rabbitmq.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 4 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 4 +- ansible/roles/congress/defaults/main.yml | 6 +- ansible/roles/congress/tasks/pull.yml | 12 +- ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/config.yml | 1 + ansible/roles/cyborg/tasks/pull.yml | 12 +- ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/pull.yml | 12 +- ansible/roles/elasticsearch/defaults/main.yml | 4 +- ansible/roles/elasticsearch/tasks/pull.yml | 12 +- ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/tasks/pull.yml | 12 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/pull.yml | 12 +- ansible/roles/glance/defaults/main.yml | 8 +- ansible/roles/glance/tasks/pull.yml | 12 +- ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/pull.yml | 12 +- ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/tasks/pull.yml | 9 +- .../templates/haproxy_single_service_listen.cfg.j2 | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 4 +- ansible/roles/haproxy/tasks/precheck.yml | 6 +- ansible/roles/haproxy/tasks/pull.yml | 12 +- ansible/roles/haproxy/tasks/upgrade.yml | 2 +- ansible/roles/heat/defaults/main.yml | 6 +- ansible/roles/heat/tasks/pull.yml | 12 +- ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 12 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 9 +- ansible/roles/ironic/defaults/main.yml | 13 +- ansible/roles/ironic/tasks/deploy.yml | 2 +- ansible/roles/ironic/tasks/pull.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 4 +- ansible/roles/ironic/templates/ironic.conf.j2 | 8 +- ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 12 +- ansible/roles/kafka/defaults/main.yml | 2 +- ansible/roles/kafka/tasks/pull.yml | 12 +- ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/pull.yml | 12 +- ansible/roles/keystone/defaults/main.yml | 6 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/pull.yml | 12 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/pull.yml | 12 +- ansible/roles/kuryr/defaults/main.yml | 2 +- ansible/roles/kuryr/tasks/pull.yml | 8 +- ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/pull.yml | 12 +- ansible/roles/manila/defaults/main.yml | 8 +- ansible/roles/manila/tasks/pull.yml | 12 +- .../roles/manila/templates/manila-share.conf.j2 | 14 +- ansible/roles/mariadb/defaults/main.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 3 + ansible/roles/mariadb/tasks/pull.yml | 12 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 6 +- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/pull.yml | 12 +- ansible/roles/memcached/defaults/main.yml | 4 +- ansible/roles/memcached/tasks/pull.yml | 13 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/pull.yml | 12 +- ansible/roles/monasca/defaults/main.yml | 23 +-- ansible/roles/monasca/handlers/main.yml | 33 +++- ansible/roles/monasca/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/config.yml | 4 +- ansible/roles/monasca/tasks/pull.yml | 12 +- ansible/roles/monasca/tasks/upgrade.yml | 13 ++ .../monasca-agent-collector/agent-collector.yml.j2 | 2 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-agent-statsd/agent-statsd.yml.j2 | 2 +- .../monasca-thresh/monasca-thresh.json.j2 | 2 +- .../monasca/templates/monasca-thresh/storm.yml.j2 | 8 - ansible/roles/mongodb/defaults/main.yml | 2 +- ansible/roles/mongodb/tasks/pull.yml | 12 +- ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 12 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/pull.yml | 12 +- ansible/roles/neutron/defaults/main.yml | 24 +-- ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/pull.yml | 12 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 2 + .../neutron/templates/linuxbridge_agent.ini.j2 | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- .../roles/neutron/templates/neutron-server.json.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 2 +- ansible/roles/nova-cell/defaults/main.yml | 27 +-- ansible/roles/nova-cell/tasks/config-host.yml | 2 +- .../roles/nova-cell/tasks/discover_computes.yml | 8 +- ansible/roles/nova-cell/tasks/loadbalancer.yml | 4 + ansible/roles/nova-cell/tasks/pull.yml | 12 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 4 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 4 +- ansible/roles/nova-hyperv/templates/wsgate.ini.j2 | 4 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/pull.yml | 12 +- ansible/roles/octavia/defaults/main.yml | 8 +- ansible/roles/octavia/tasks/pull.yml | 12 +- ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/openvswitch/tasks/pull.yml | 12 +- ansible/roles/ovn/handlers/main.yml | 4 + ansible/roles/ovn/tasks/pull.yml | 12 +- ansible/roles/ovs-dpdk/defaults/main.yml | 6 +- ansible/roles/ovs-dpdk/tasks/config.yml | 1 + ansible/roles/ovs-dpdk/tasks/pull.yml | 12 +- ansible/roles/panko/defaults/main.yml | 2 +- ansible/roles/panko/tasks/pull.yml | 9 +- ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/placement/tasks/pull.yml | 12 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/host_os_checks.yml | 16 +- ansible/roles/prechecks/tasks/package_checks.yml | 2 +- ansible/roles/prechecks/tasks/port_checks.yml | 4 +- ansible/roles/prechecks/vars/main.yml | 6 +- ansible/roles/prometheus/defaults/main.yml | 20 +-- ansible/roles/prometheus/tasks/config.yml | 1 - ansible/roles/prometheus/tasks/pull.yml | 12 +- .../roles/prometheus/templates/prometheus.yml.j2 | 1 + ansible/roles/qdrouterd/defaults/main.yml | 2 +- ansible/roles/qdrouterd/tasks/precheck.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 12 +- ansible/roles/qinling/defaults/main.yml | 4 +- ansible/roles/qinling/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/defaults/main.yml | 6 +- ansible/roles/rabbitmq/tasks/precheck.yml | 4 +- ansible/roles/rabbitmq/tasks/pull.yml | 12 +- .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 2 +- ansible/roles/rally/defaults/main.yml | 2 +- ansible/roles/rally/tasks/pull.yml | 12 +- ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/pull.yml | 12 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/pull.yml | 12 +- ansible/roles/searchlight/defaults/main.yml | 4 +- ansible/roles/searchlight/tasks/pull.yml | 12 +- ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/pull.yml | 12 +- .../roles/service-images-pull/defaults/main.yml | 7 + ansible/roles/service-images-pull/tasks/main.yml | 16 ++ ansible/roles/skydive/defaults/main.yml | 4 +- ansible/roles/skydive/tasks/pull.yml | 12 +- .../skydive/templates/skydive-analyzer.conf.j2 | 2 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/pull.yml | 12 +- ansible/roles/solum/templates/solum.conf.j2 | 2 +- ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/pull.yml | 12 +- ansible/roles/swift/defaults/main.yml | 6 + ansible/roles/swift/tasks/pull.yml | 24 +++ ansible/roles/tacker/defaults/main.yml | 6 +- ansible/roles/tacker/tasks/pull.yml | 12 +- ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 12 +- ansible/roles/tempest/defaults/main.yml | 4 +- ansible/roles/tempest/tasks/pull.yml | 12 +- ansible/roles/tempest/templates/tempest.conf.j2 | 2 +- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/pull.yml | 12 +- ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/pull.yml | 12 +- ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 12 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 3 + ansible/roles/watcher/tasks/pull.yml | 12 +- ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/pull.yml | 12 +- ansible/roles/zookeeper/templates/myid.j2 | 2 +- ansible/roles/zun/defaults/main.yml | 8 +- ansible/roles/zun/tasks/pull.yml | 12 +- ansible/site.yml | 2 + .../bootstrap-servers.rst | 2 + .../message-queues/external-rabbitmq-guide.rst | 53 ++++++ .../reference/storage/external-ceph-guide.rst | 13 +- etc/kolla/globals.yml | 29 +++- kolla_ansible/kolla_address.py | 2 +- ...k-exporter-scrape-timeout-af5dcd5d988ae12b.yaml | 4 + ...eus_support_on_cloudkitty-774e13e363e15a4b.yaml | 17 ++ .../notes/ansible-facts-4279741e84c03ce0.yaml | 10 ++ .../notes/bug-1808805-3ebd9b0edceff170.yaml | 13 ++ .../notes/bug-1848775-b0625b7586adac96.yaml | 8 + .../notes/bug-1927880-cc407f18f415bbd2.yaml | 6 + .../notes/bug-1934913-a8d436e3d0b950b4.yaml | 6 + .../notes/bug-1938549-e73042a61f0a5935.yaml | 10 ++ .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 + .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 + .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 ++ .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 + .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/cyborg-become-8453d941af536e91.yaml | 5 + .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 + .../notes/fix-neutron-vmware-4a8804399d47d8d7.yaml | 5 + .../notes/image-pull-retries-75490c3e6e1e4b54.yaml | 9 + .../notes/linux-bridge-multi-fe8576616fb7d373.yaml | 6 + .../notes/manila-glance-4524ed1e9d488a60.yaml | 5 + .../notes/nova-ceph-user-53670f9ccc546225.yaml | 16 ++ ...educe-rabbit-busy-waiting-085433c822165eab.yaml | 13 ++ ...nd-optimise-image-pulling-4346d3c0840ee640.yaml | 4 + .../notes/setup-module-args-c29e1815bbbe8aca.yaml | 8 + ...nic-template-for-keystone-1ee5f80fda7a21a0.yaml | 7 + tools/kolla-ansible | 2 +- 257 files changed, 1498 insertions(+), 1163 deletions(-)

1 0

kolla-ansible 13.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are stoked to announce the release of: kolla-ansible 13.0.0: Ansible Deployment of Kolla containers This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.0.0 ^^^^^^ New Features ************ * Adds "manila_cephfs_filesystem_name" variable to support multi-fs Ceph Pacific+ deloyments. Upgrade Notes ************* * "enable_host_ntp" variable is dropped per the deprecation process. * The "wsrep-notify.sh" script has been removed (following deprecation in Wallaby). Bug Fixes ********* * Fixes an issue with multinode MariaDB deployments which could fail the playbook execution on WSREP check due to the new behaviour of Galera 4. LP#1947485. * Fixes an issue with single node MariaDB deployments with HAProxy disabled. See bug 1947534 for details. * Fixes the generation of "wsrep_cluster_address" in "galera.cnf" when "--limit" is used while deploying MariaDB nodes. LP#1947589 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fix octavia role doesn't set the amphora network's gateway_ip LP#1949260 * Removes "fix_cephfs_owner.yaml" which related to pre-wallaby Manila's use of subfolders. Post-wallaby Manila now uses cephfs volumes instead, as such this file is no longer required. LP#1938285 LP#1935784 * Removes use of "cephfs_enable_snapshots" in Manila config as this option was removed from Manila in the Wallaby release. Changes in kolla-ansible 12.0.0..13.0.0 --------------------------------------- 44c46fc80 The deprecated iscsi deploy interface has been removed since xena f9b3709ba docs: Get release name dynamically c32eecf34 docs: Parameterize kolla-ansible version and branch 768b62a8f Stop creating unused cron/logrotate directory 543096c93 docs: Fix python-openstackclient package name and init-runonce path 7659f1e32 Fix octavia doesn't set subnet gateway_ip 06218e264 mariadb: use add_host to include inactive hosts in shard grouping 3aa42733a Fix broken deploy of placement service e219faec8 Fix missing Ansible version in the error message 150e2fc98 Revert "Do not load br_netfilter" 152cd21a4 Drop enable_host_ntp 2d69bdc8a docs: Improve info about neutron external interface 0ad69fc5b Use Xena images 70087813c mariadb: Remove wsrep-notify.sh 45b0b87f8 Update Manila deploy steps for Wallaby be6fd7b7d [mariadb] Start new nodes serially 9842b3296 Update TOX_CONSTRAINTS_FILE for stable/xena c0d5c66b0 Update .gitreview for stable/xena f9204267e Tidy up renos before Xena release 37e4dba87 Add support for Ironic inspection through DHCP-relay 78260f98e Correctly create the dhcp_agent.ini and l3_agent.ini 2455a95f3 Trivial but necessary fix - loadbalancer weight f1cbff6b7 Trivial fix shebang in keystone's fernet-node-sync.sh.j2 c7c14e1c4 Fix privileges for MariaDB 10.5 62b90af55 Docs: Update to opendev.org domain 0df36ce1e Debian: apt-transport-https is transitional package d5aa73c4a Add missing CloudKitty documentation. 4f78c696c Do not become root when searching for custom prometheus alert rules files 15259002b Do not load br_netfilter 1d0171fc7 monasca: change default of monasca_ntp_server 3b22d334d CI: monasca: ignore exited monasca_thresh container 1f71df1a8 Remove chrony role from kolla 9ef6bb2d9 [CI] Stop adding the DROP workaround 8c5012e94 Add support for Ceph RadosGW integration 393dfbf65 docs: ceph: add copy-on-write for Glance 66c84843e Deploy source type images by default 1bfed045c Do not set net.ipv4.ip_forward sysctl 2e933dceb Transition Keystone admin user to system scope 2c6bc0bd1 Do not create haproxy and swift log dirs needlessly 7c2b4bead Add way to change weight of haproxy backend per service 1b650534c Bump up Ansible max supported ver to 4.x 4ff65b766 Use friendly target names in Prometheus 0e720b382 Add check and diff options to kolla-ansible 6dc8b5639 Use mariadb_tag as default for all mariadb tags 2cf9ae2cf Do not enable mariadb-clustercheck when not needed 0d9477de3 Switch default images source to quay.io f0241f807 Remove haproxy,keepalived groups ae69994db use ironic user in ironic_neutron_agent.ini file 72e067398 Fix neutron upgrade using host limit without controllers c7bec2f30 [CI] Fix upgrade with kolla-build 02e07a086 CI: Temporarily enable insecure registry 21b4dc541 Zun: Temporarily skip capsule test for ubuntu 24e6a6ced toolbox: Allow different users logging to ansible.log 11d7233cc Bump libvirtd memlock ulimit d9e0ca5b3 reno: follow up 24e48d4da [tox] Add docs-iterative command 4e473a784 [tox] Optimise docs actions daf534b4e [CI] Test instance health after upgrade 34c49b9db Restore libvirtd cgroupfs mount d8641e90c docs: Add placeholder page for CI & testing information d9a375895 Add kolla-ansible gather-facts command ca6fc69ee docs: adding and removing host: add --all-projects option 3c68e8258 Fix Masakari in multi-region deploys 802f7c621 Never make Docker registry insecure by default ffd53512a Rename role haproxy to loadbalancer cbb567cb8 Add ability to retry image pulling 16a4a9e5a Remove an unused file 0858d5487 Fix haproxy precheck when kolla_externally_managed_cert is used 90fd9152a Use Docker healthchecks for keystone-fernet container 839ec629b tools: use /usr/bin/env bash instead of /bin/bash 2b599bdb8 Use Docker healthchecks for nova-spicehtml5proxy service b7e85d528 [CI] Test Swift upgrades f8e3e169c Allow override of rabbitmq config in kolla toolbox 13200ace3 Fix kolla-toolbox with IPv6 and disabled RabbitMQ b6d9cf768 [CI] Fix Debian upgrade d56dc3403 Validate if running CentOS OS is CentOS Stream 85879afc0 Trivial fix nova's healthchecks bcfebaf87 Use api-paste.ini from /etc/neutron 9ff2ecb03 Refactor and optimise image pulling 46df30d87 ironic: Follow up for ironic_enable_keystone_integration b692ce7af Support monitoring Fluentd with Prometheus bd3ad904d CI: stop setting ceph_nova_user a08aaf7d8 Fix release note for ansible_facts 2c786a0fa neutron: fix neutron-server config.json with VMware d15d94300 Remove unused imports in merge_yaml da4fd2d6a Extra var ironic_enable_keystone_integration added. 30e0eae8b Remove deprecated Designate option 7f98238b6 Elevated privileges required to set owner/group/mode by ansible 0d79d25fe Remove support for Prometheus v1 6ac4638cf Trivial fix horizon's healthcheck when SSL turned on 281c9935d Do not run timesync checks on deployment host c281a018c Fix freezed spice console in horizon 948e9ae70 watcher: add missing become for copying configs 6c72fa811 Support multiple inventories d7cdad532 Use more RMQ flags for less busy wait fca9be380 Delete haproxy_single_service_listen.cfg.j2 template c3f9ba835 nova: Use cinder user for Ceph 004cb7540 [manila] Drop tenant_id templating from v2 endpoint 24d08142d Fix nova deployment failure when rabbitmq is disabled 24950b389 Fix incorrect config of linuxbridge multiple external networks 5cb080247 cyborg: add missing become for api-paste.ini 7dfbcc71c [CI] Slim down Masakari job 411668ea5 ironic: always enable conductor HTTP server 5e85fe2a0 Fix variable names in Octavia documentation 200e36da7 Fix deployment failure when kolla_dev_mod is enabled aa28675ca Fix ironic_ipxe healthcheck on Debian/Ubuntu 2e4f51f67 manila: add glance section in manila-share.conf cccae8a65 Fix typos in release note 220d4fbbc Fix typo in keystone role c2ae21fd9 Reduce container metrics cardinality 54737cd13 baremetal: use docker_yum_gpgkey to fetch docker GPG key f6c0474af Fix config action when OVN is enabled 526199846 Remove tempest role c454761a4 Blazar: Fix support for external keystone in multiregion deploy 15f2fdcd5 Make setup module arguments configurable 9fffc7bc5 Add disable_firewall variable f71646da1 Fix Masakari host monitor default config 6131b6856 Remove rally and panko again 6bf74aa20 Support storing passwords in Hashicorp Vault 6e1849589 CI: Avoid generating a nova key in cephadm scenario a73e89f03 [CI] Do not set ansible_python_interpreter for Zuul 531604757 reno: fix typo f3520bc1c Replace auth_uri with www_authenticate_uri 09d0409ed Allow user to set sysctl_net_ipv4_tcp_retries2 7eff49a5a CI: Don't generate certificates before upgrade ade5bfa30 Use ansible_facts to reference facts 48f0957a1 magnum: Add CA certificate configuration for internal TLS 7da770d29 Add missing region_name in keystoneauth sections 3a7440b37 Fix host bootstrap pkg removal on Debian 0158221fd Drop support for Cinder ZFSSA backend 18a0af695 Do not set pid file for iscsid 640dbb03f Revert "Reduce container metrics cardinality" 1fc58e74d Fix up 'Persist nova libvirt secrets in a Docker volume' 38ca1431d Update previous_release to Wallaby c6259158e Reduce container metrics cardinality 300910961 Remove rally deployment 286a03bad Drop /sys/fs/cgroup mounts 3f9662278 Reno follow up for docker_disable_ip_forward ccf8cc5dc Remove support for panko 0fa4ee56e Disable docker's ip-forward when iptables disabled 085a30f75 [CI] Test bifrost on Ubuntu as well 682cff7bc Revert "cephadm: Set auth_allow_insecure_global_id_reclaim to true" 0cd5b027c Fix RabbitMQ restart ordering 5c19f9a5e Add forgotten 'Restart container' handler for swift 70f6f8e4c Reduce RabbitMQ busy waiting, lowering CPU load e7ff199dc Robustify fluentd output tag matching aea9bf355 monasca-thresh: Fix topology submission to storm cccf4f777 [TrivialFix] Remove extra slash 46bd05250 baremetal: fix /etc/hosts generation when api_interface has dashes dee9d22dc Add suppress_type_name to stop warnings with ES7 7f1248fee Fix parsing of infra.mariadb.xinetd logs 0c7ba86e0 Stop fluentd deprecation warnings of type vs @type 84ac7b309 chrony: allow to remove the container e48d0a7fa [CI] Drop Zuul host groups 887bf6f1f Fix release note markup 278b63a0e docs: Update Freenode to OFTC d60c5591c [CI] Move to Debian Bullseye 9a77fb1ca Add support for Debian Bullseye (11) as host distro 4d6a79d21 Add the ansible_managed header for admin-openrc.sh 95520df09 [docker] Add support for setting CgroupnsMode a3caf8c3a Bump min Docker version bb56861cc Use mariadb-server image for mariabackup 283b0dec6 fluentd: Fix check for external elasticsearch 21efaf3f4 CI: fix backups Ceph pool name 7d1af053b Remove [octavia]/base_url option from neutron.conf 13965f40c tox: Add find command to allowlist_externals list 1ea99147c CI: Use PATH to find kolla-ansible script 86ddc94ec Fix exit code with bogus command name 337771143 CI: Configure IP on a linux bridge instead of OVS br-ex 1da715802 linters: Mock additional variables in validate-all-file.py bbc27b59f CI: add grafana to monasca image list fca2c5fe0 [CI] Fix testing in cephadm scenario c99841272 Make rabbitmq cluster_partition_handling configurable 6b61cbe6f Merge glance sections for nova.conf.j2 b053bd8ec baremetal: Install Docker SDK less than 5.0.0 9e9293c5c Indented two spaces to match the other things in this block f184f9436 Mariadb shards documentation bd496808c CI: Disable amphora in OVN jobs e8c4b2e1b [CI] Log dbus services e83b5869a CI: Wait for NTP synced status in systemd bc9617919 baremetal: Don't start Docker after install on Debian/Ubuntu d43642ac3 Trivial if conditional fix in keystone.json 6230971b9 gnocchi: fix external ceph integration when gnocchi-statsd is disabled f295b1a05 docs: update supported OS distros b300f7bc4 Disable Alertmanager's peer gossip in non-HA deployments edc918313 CI: allow Elasticsearch status to be green or yellow e92323600 Add ability to use the Neutron packet logging framework fe6647747 Use @type instead of type f94c7beab cleanup no longer needed task for cinder 41fe771bc Do not write octavia_amp_ssh_key if auto_config disabled e5ab32afa octavia: Fix duplicate api_settings aff99355d ovn: make DVR work on VLAN tenant networks 999b5cfb2 ovn: omit unnecessary bridge mappings ec36eb016 CI: Fix nfv job with kolla dependency b056f54c1 Deprecate tempest and rally 43ca9dad0 setup.cfg: Replace dashes with underscores f3314eacd Redis configuration syntax update 0b132775e Fix neutron-ovn-metadata-agent with policy.yaml c3afbd3c5 Check config when checking the containers 83f3422fb Deprecate enable_host_ntp a967b9dd6 cephadm: Set auth_allow_insecure_global_id_reclaim to true 2b3284b3f Remove redundant Monasca Kafka client option 82cf40edf Remove Monasca Grafana service 8a1e9e984 Add Monasca Grafana deprecation notice fc406d035 [doc] fix a typo 7e81e20e7 Skip setting rp_filter by default d9b21cde9 Bump up python version for Debian Bullseye f3da3d8e1 Avoid an Ansible quirk in hacluster role 51134fb31 Add Python3 xena unit tests 9cfd4f5d0 Update master for stable/wallaby d01192c16 Extend support for custom Grafana dashboards 030a9a28d docs: Improve policy documentation 1ddef8597 Use Docker healthchecks for rabbitmq services 22a6765f5 Support editable installation in all cases e548b5969 [CI] Save systemctl info fbd80bcdc octavia: Ensure service auth project exists 3c1fd4409 Use Docker healthchecks for memcached services 561be6de3 Use Docker healthchecks for mistral services db1bc8fc7 docs: Add note about internal VIP when HAProxy is disabled adf492bd9 cinder: fix condition to copy backend TLS certs aa9ac3320 Add global tag variables for Panko and Skydive 268f0e4c9 Disable usage collection in Kibana 5a6cafa21 Add Alertmanger metric target(s) 25c33f9c9 Make it possible to override automatic fluentd version detection 2d82920d8 Update blazar.conf template 48cd90a8d Use Docker healthchecks for ceilometer services d3e91045f Use Docker healthchecks for qdrouterd services 2db0a2a62 Use Docker healthchecks for kuryr services 04b970ca0 Use Docker healthchecks for zun services 72df931b5 Use Docker healthchecks for kafka services 106644e49 docs: add code reviews to contributor guide 99db669fb CI: Reduce neutron RPC service workers to 1 21ccae12f chronyd crash loop if Debian server is rebooted 2c833baa5 CI: only run cells job on changes to nova role 90435f6a9 Add a ovsdb_timeout variable for better configuration 1c63eb20d Persist nova libvirt secrets in a Docker volume ce012bcb0 Fix "Restart mariadb-clustercheck container" during config gen Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 3 - ansible/action_plugins/merge_yaml.py | 7 - ansible/chrony-cleanup.yml | 31 +++- ansible/gather-facts.yml | 13 +- ansible/group_vars/all.yml | 77 +++++---- ansible/inventory/all-in-one | 28 +-- ansible/inventory/multinode | 28 +-- ansible/library/kolla_docker.py | 44 ++++- ansible/library/kolla_toolbox.py | 8 +- ansible/post-deploy.yml | 4 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/pull.yml | 12 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/check.yml | 6 +- ansible/roles/barbican/tasks/pull.yml | 12 +- ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/baremetal/defaults/main.yml | 19 +-- ansible/roles/baremetal/tasks/install.yml | 72 ++++---- ansible/roles/baremetal/tasks/post-install.yml | 74 +------- ansible/roles/baremetal/tasks/pre-install.yml | 17 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/pull.yml | 12 +- ansible/roles/blazar/templates/blazar.conf.j2 | 3 +- ansible/roles/ceilometer/defaults/main.yml | 64 ++++++- ansible/roles/ceilometer/handlers/main.yml | 4 + .../roles/ceilometer/tasks/check-containers.yml | 1 + ansible/roles/ceilometer/tasks/config.yml | 23 --- ansible/roles/ceilometer/tasks/pull.yml | 12 +- .../templates/ceilometer-notification.json.j2 | 9 +- .../ceilometer/templates/event_pipeline.yaml.j2 | 3 - ansible/roles/ceph-rgw/defaults/main.yml | 92 ++++++++++ ansible/roles/{chrony => ceph-rgw}/tasks/check.yml | 0 .../tasks/check.yml => ceph-rgw/tasks/config.yml} | 0 .../tasks/deploy-containers.yml} | 0 ansible/roles/ceph-rgw/tasks/deploy.yml | 2 + .../{panko => ceph-rgw}/tasks/loadbalancer.yml | 4 +- ansible/roles/{panko => ceph-rgw}/tasks/main.yml | 0 ansible/roles/ceph-rgw/tasks/precheck.yml | 10 ++ .../tasks/check.yml => ceph-rgw/tasks/pull.yml} | 0 .../{chrony => ceph-rgw}/tasks/reconfigure.yml | 0 ansible/roles/ceph-rgw/tasks/register.yml | 9 + .../tasks/check.yml => ceph-rgw/tasks/stop.yml} | 0 ansible/roles/ceph-rgw/tasks/upgrade.yml | 1 + ansible/roles/chrony/defaults/main.yml | 31 ---- ansible/roles/chrony/handlers/main.yml | 16 -- ansible/roles/chrony/tasks/check-containers.yml | 17 -- ansible/roles/chrony/tasks/cleanup.yml | 12 -- ansible/roles/chrony/tasks/config.yml | 53 ------ ansible/roles/chrony/tasks/deploy.yml | 7 - ansible/roles/chrony/tasks/main.yml | 7 - ansible/roles/chrony/tasks/precheck.yml | 9 - ansible/roles/chrony/tasks/pull.yml | 11 -- ansible/roles/chrony/templates/chrony.conf.j2 | 47 ------ ansible/roles/chrony/templates/chrony.json.j2 | 23 --- ansible/roles/cinder/defaults/main.yml | 22 +-- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/tasks/pull.yml | 12 +- ansible/roles/cinder/tasks/upgrade.yml | 16 -- ansible/roles/cinder/templates/cinder.conf.j2 | 15 +- ansible/roles/cloudkitty/defaults/main.yml | 4 +- ansible/roles/cloudkitty/tasks/pull.yml | 12 +- ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 12 +- ansible/roles/common/defaults/main.yml | 10 +- ansible/roles/common/tasks/config.yml | 76 +++++---- ansible/roles/common/tasks/inspect.yml | 6 - ansible/roles/common/tasks/pull.yml | 11 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 3 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 7 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 2 +- .../templates/conf/input/08-prometheus.conf.j2 | 14 ++ .../common/templates/conf/output/00-local.conf.j2 | 8 + .../common/templates/conf/output/01-es.conf.j2 | 3 +- .../templates/conf/output/02-monasca.conf.j2 | 2 +- .../common/templates/cron-logrotate-chrony.conf.j2 | 3 - .../common/templates/cron-logrotate-panko.conf.j2 | 3 - .../common/templates/cron-logrotate-rally.conf.j2 | 3 - .../templates/cron-logrotate-tempest.conf.j2 | 3 - ansible/roles/common/templates/erl_inetrc.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 5 +- .../roles/common/templates/rabbitmq-env.conf.j2 | 2 + ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/config.yml | 1 + ansible/roles/cyborg/tasks/pull.yml | 12 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 3 +- ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/pull.yml | 12 +- .../roles/designate/templates/designate.conf.j2 | 2 +- ansible/roles/elasticsearch/defaults/main.yml | 4 +- ansible/roles/elasticsearch/tasks/pull.yml | 12 +- ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/tasks/pull.yml | 12 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/pull.yml | 12 +- ansible/roles/freezer/templates/freezer.conf.j2 | 5 +- ansible/roles/glance/defaults/main.yml | 8 +- ansible/roles/glance/tasks/pull.yml | 12 +- ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/external_ceph.yml | 37 ++-- ansible/roles/gnocchi/tasks/pull.yml | 12 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/defaults/main.yml | 2 +- ansible/roles/grafana/tasks/config.yml | 20 +-- ansible/roles/grafana/tasks/pull.yml | 9 +- ansible/roles/grafana/tasks/upgrade.yml | 5 - .../roles/hacluster/tasks/bootstrap_service.yml | 8 +- ansible/roles/hacluster/tasks/pull.yml | 12 +- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/haproxy-config/defaults/main.yml | 1 - .../templates/haproxy_single_service_listen.cfg.j2 | 111 ------------ .../templates/haproxy_single_service_split.cfg.j2 | 9 +- ansible/roles/haproxy/tasks/copy-certs.yml | 6 - ansible/roles/haproxy/tasks/deploy-containers.yml | 2 - ansible/roles/haproxy/tasks/main.yml | 3 - ansible/roles/haproxy/tasks/pull.yml | 11 -- ansible/roles/haproxy/tasks/stop.yml | 6 - ansible/roles/haproxy/tasks/upgrade.yml | 2 - ansible/roles/heat/defaults/main.yml | 8 +- ansible/roles/heat/tasks/bootstrap_service.yml | 3 +- ansible/roles/heat/tasks/pull.yml | 12 +- ansible/roles/heat/templates/heat.conf.j2 | 1 + ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 12 +- ansible/roles/horizon/templates/horizon.conf.j2 | 7 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 9 +- ansible/roles/ironic/defaults/main.yml | 19 ++- ansible/roles/ironic/tasks/deploy.yml | 2 +- ansible/roles/ironic/tasks/pull.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 6 +- ansible/roles/ironic/templates/ironic.conf.j2 | 29 ++-- ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 12 +- ansible/roles/kafka/defaults/main.yml | 17 +- ansible/roles/kafka/handlers/main.yml | 1 + ansible/roles/kafka/tasks/check-containers.yml | 1 + ansible/roles/kafka/tasks/pull.yml | 12 +- ansible/roles/keystone/defaults/main.yml | 20 ++- ansible/roles/keystone/tasks/config.yml | 1 + ansible/roles/keystone/tasks/pull.yml | 12 +- ansible/roles/keystone/tasks/register.yml | 2 +- .../keystone/tasks/register_identity_providers.yml | 107 ++++++------ .../keystone/templates/fernet-healthcheck.sh.j2 | 6 + .../keystone/templates/fernet-node-sync.sh.j2 | 32 ++-- ansible/roles/keystone/templates/fernet-push.sh.j2 | 16 ++ .../keystone/templates/keystone-fernet.json.j2 | 6 + ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/pull.yml | 12 +- ansible/roles/kibana/templates/kibana.yml.j2 | 1 + ansible/roles/kuryr/defaults/main.yml | 16 +- ansible/roles/kuryr/handlers/main.yml | 1 + ansible/roles/kuryr/tasks/check-containers.yml | 1 + ansible/roles/kuryr/tasks/pull.yml | 8 +- .../{haproxy => loadbalancer}/defaults/main.yml | 16 +- .../{haproxy => loadbalancer}/handlers/main.yml | 8 +- .../tasks/check-containers.yml | 4 +- ansible/roles/loadbalancer/tasks/check.yml | 1 + .../tasks/config-host.yml | 7 +- .../{haproxy => loadbalancer}/tasks/config.yml | 28 +-- .../{panko => loadbalancer}/tasks/copy-certs.yml | 2 +- .../tasks/deploy-containers.yml | 0 .../{haproxy => loadbalancer}/tasks/deploy.yml | 0 ansible/roles/loadbalancer/tasks/main.yml | 3 + .../{haproxy => loadbalancer}/tasks/precheck.yml | 157 ++++++++--------- ansible/roles/loadbalancer/tasks/pull.yml | 3 + .../tasks/reconfigure.yml | 0 .../roles/{chrony => loadbalancer}/tasks/stop.yml | 2 +- .../{chrony => loadbalancer}/tasks/upgrade.yml | 0 .../templates/haproxy}/haproxy.json.j2 | 0 .../templates/haproxy}/haproxy_main.cfg.j2 | 0 .../templates/haproxy}/haproxy_run.sh.j2 | 0 .../templates/keepalived}/keepalived.conf.j2 | 6 +- .../templates/keepalived}/keepalived.json.j2 | 0 ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/pull.yml | 12 +- ansible/roles/magnum/templates/magnum.conf.j2 | 10 ++ ansible/roles/manila/defaults/main.yml | 21 ++- ansible/roles/manila/tasks/deploy.yml | 5 - ansible/roles/manila/tasks/fix_cephfs_owner.yml | 85 ---------- ansible/roles/manila/tasks/pull.yml | 12 +- .../roles/manila/templates/manila-share.conf.j2 | 22 ++- ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/defaults/main.yml | 19 +-- ansible/roles/mariadb/handlers/main.yml | 6 + ansible/roles/mariadb/tasks/config.yml | 20 --- ansible/roles/mariadb/tasks/main.yml | 6 +- ansible/roles/mariadb/tasks/pull.yml | 12 +- ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 7 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 8 +- ansible/roles/mariadb/templates/wsrep-notify.sh.j2 | 79 --------- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/clone.yml | 8 +- ansible/roles/masakari/tasks/pull.yml | 12 +- .../masakari/templates/masakari-monitors.conf.j2 | 6 + ansible/roles/masakari/templates/masakari.conf.j2 | 1 + ansible/roles/memcached/defaults/main.yml | 18 +- ansible/roles/memcached/handlers/main.yml | 1 + ansible/roles/memcached/tasks/check-containers.yml | 1 + ansible/roles/memcached/tasks/pull.yml | 13 +- ansible/roles/mistral/defaults/main.yml | 64 ++++++- ansible/roles/mistral/handlers/main.yml | 4 + ansible/roles/mistral/tasks/check-containers.yml | 2 +- ansible/roles/mistral/tasks/pull.yml | 12 +- ansible/roles/mistral/templates/mistral.conf.j2 | 1 + ansible/roles/monasca/defaults/main.yml | 25 +-- ansible/roles/monasca/handlers/main.yml | 33 +++- ansible/roles/monasca/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/config.yml | 4 +- ansible/roles/monasca/tasks/pull.yml | 12 +- ansible/roles/monasca/tasks/upgrade.yml | 13 ++ .../monasca-agent-collector/agent-collector.yml.j2 | 2 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-agent-statsd/agent-statsd.yml.j2 | 2 +- .../monasca/templates/monasca-api/api.conf.j2 | 4 +- .../monasca-notification/notification.conf.j2 | 3 - .../templates/monasca-persister/persister.conf.j2 | 5 - .../monasca-thresh/monasca-thresh.json.j2 | 2 +- .../monasca/templates/monasca-thresh/storm.yml.j2 | 8 - ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 12 +- ansible/roles/murano/defaults/main.yml | 4 +- .../roles/murano/tasks/import_library_packages.yml | 16 +- ansible/roles/murano/tasks/pull.yml | 12 +- ansible/roles/murano/templates/murano.conf.j2 | 3 + ansible/roles/neutron/defaults/main.yml | 34 ++-- ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/pull.yml | 12 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 3 + .../neutron/templates/ironic_neutron_agent.ini.j2 | 6 +- ansible/roles/neutron/templates/l3_agent.ini.j2 | 3 + .../neutron/templates/linuxbridge_agent.ini.j2 | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- .../roles/neutron/templates/neutron-server.json.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 7 +- .../templates/neutron_ovn_metadata_agent.ini.j2 | 3 +- .../neutron/templates/openvswitch_agent.ini.j2 | 1 + ansible/roles/nova-cell/defaults/main.yml | 57 +++++-- ansible/roles/nova-cell/tasks/config-host.yml | 2 +- .../roles/nova-cell/tasks/discover_computes.yml | 19 +-- ansible/roles/nova-cell/tasks/loadbalancer.yml | 4 + ansible/roles/nova-cell/tasks/pull.yml | 12 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 4 +- ansible/roles/nova-cell/tasks/reload.yml | 1 + .../roles/nova-cell/templates/nova-libvirt.json.j2 | 3 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 4 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/pull.yml | 12 +- ansible/roles/nova/tasks/reload_api.yml | 1 + .../roles/nova/tasks/reload_super_conductor.yml | 1 + ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/defaults/main.yml | 10 +- ansible/roles/octavia/tasks/hm-interface.yml | 6 +- ansible/roles/octavia/tasks/openrc.yml | 4 +- ansible/roles/octavia/tasks/prepare.yml | 2 +- ansible/roles/octavia/tasks/pull.yml | 12 +- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/openvswitch/tasks/pull.yml | 12 +- ansible/roles/ovn/handlers/main.yml | 4 + ansible/roles/ovn/tasks/pull.yml | 12 +- ansible/roles/ovs-dpdk/defaults/main.yml | 6 +- ansible/roles/ovs-dpdk/tasks/config.yml | 1 + ansible/roles/ovs-dpdk/tasks/pull.yml | 12 +- ansible/roles/panko/defaults/main.yml | 77 --------- ansible/roles/panko/handlers/main.yml | 15 -- ansible/roles/panko/tasks/bootstrap.yml | 36 ---- ansible/roles/panko/tasks/bootstrap_service.yml | 20 --- ansible/roles/panko/tasks/check-containers.yml | 16 -- ansible/roles/panko/tasks/config.yml | 97 ----------- ansible/roles/panko/tasks/deploy-containers.yml | 2 - ansible/roles/panko/tasks/deploy.yml | 11 -- ansible/roles/panko/tasks/precheck.yml | 24 --- ansible/roles/panko/tasks/pull.yml | 8 - ansible/roles/panko/tasks/reconfigure.yml | 2 - ansible/roles/panko/tasks/register.yml | 7 - ansible/roles/panko/tasks/stop.yml | 6 - ansible/roles/panko/tasks/upgrade.yml | 9 - ansible/roles/panko/templates/panko-api.json.j2 | 32 ---- ansible/roles/panko/templates/panko.conf.j2 | 37 ---- ansible/roles/panko/templates/wsgi-panko.conf.j2 | 36 ---- ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/placement/tasks/pull.yml | 12 +- .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/prechecks/tasks/database_checks.yml | 2 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/host_os_checks.yml | 31 +++- ansible/roles/prechecks/tasks/inventory_checks.yml | 11 ++ ansible/roles/prechecks/tasks/main.yml | 4 +- ansible/roles/prechecks/tasks/package_checks.yml | 2 +- ansible/roles/prechecks/tasks/port_checks.yml | 4 +- ansible/roles/prechecks/tasks/timesync_checks.yml | 9 +- ansible/roles/prechecks/vars/main.yml | 11 +- ansible/roles/prometheus/defaults/main.yml | 34 ++-- ansible/roles/prometheus/tasks/bootstrap.yml | 2 +- ansible/roles/prometheus/tasks/config.yml | 1 - ansible/roles/prometheus/tasks/pull.yml | 12 +- .../templates/prometheus-cadvisor.json.j2 | 2 +- .../prometheus/templates/prometheus-server.json.j2 | 4 - .../roles/prometheus/templates/prometheus.yml.j2 | 84 +++++++-- ansible/roles/qdrouterd/defaults/main.yml | 17 +- ansible/roles/qdrouterd/handlers/main.yml | 1 + ansible/roles/qdrouterd/tasks/check-containers.yml | 1 + ansible/roles/qdrouterd/tasks/precheck.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/defaults/main.yml | 22 ++- ansible/roles/rabbitmq/tasks/check-containers.yml | 1 + ansible/roles/rabbitmq/tasks/precheck.yml | 4 +- ansible/roles/rabbitmq/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/tasks/restart_services.yml | 1 + .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 5 +- ansible/roles/rally/defaults/main.yml | 36 ---- ansible/roles/rally/handlers/main.yml | 15 -- ansible/roles/rally/tasks/bootstrap.yml | 36 ---- ansible/roles/rally/tasks/bootstrap_service.yml | 20 --- ansible/roles/rally/tasks/check-containers.yml | 16 -- ansible/roles/rally/tasks/config.yml | 80 --------- ansible/roles/rally/tasks/copy-certs.yml | 6 - ansible/roles/rally/tasks/deploy-containers.yml | 2 - ansible/roles/rally/tasks/deploy.yml | 9 - ansible/roles/rally/tasks/main.yml | 7 - ansible/roles/rally/tasks/precheck.yml | 6 - ansible/roles/rally/tasks/pull.yml | 11 -- ansible/roles/rally/tasks/reconfigure.yml | 2 - ansible/roles/rally/tasks/stop.yml | 6 - ansible/roles/rally/tasks/upgrade.yml | 9 - ansible/roles/rally/templates/rally.conf.j2 | 16 -- ansible/roles/rally/templates/rally.json.j2 | 24 --- ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/pull.yml | 12 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/pull.yml | 12 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/pull.yml | 12 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../roles/service-images-pull/defaults/main.yml | 7 + ansible/roles/service-images-pull/tasks/main.yml | 16 ++ ansible/roles/skydive/defaults/main.yml | 12 +- ansible/roles/skydive/tasks/pull.yml | 12 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 3 +- .../skydive/templates/skydive-analyzer.conf.j2 | 3 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/pull.yml | 12 +- ansible/roles/solum/templates/solum.conf.j2 | 3 +- ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/pull.yml | 12 +- ansible/roles/swift/defaults/main.yml | 6 + ansible/roles/swift/tasks/pull.yml | 24 +++ ansible/roles/tacker/defaults/main.yml | 6 +- ansible/roles/tacker/tasks/pull.yml | 12 +- ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 12 +- ansible/roles/telegraf/templates/telegraf.conf.j2 | 6 +- ansible/roles/tempest/defaults/main.yml | 2 +- ansible/roles/tempest/handlers/main.yml | 15 -- ansible/roles/tempest/tasks/check-containers.yml | 16 -- ansible/roles/tempest/tasks/config.yml | 47 ------ ansible/roles/tempest/tasks/copy-certs.yml | 6 - ansible/roles/tempest/tasks/deploy-containers.yml | 2 - ansible/roles/tempest/tasks/deploy.yml | 7 - ansible/roles/tempest/tasks/main.yml | 7 - ansible/roles/tempest/tasks/precheck.yml | 6 - ansible/roles/tempest/tasks/pull.yml | 11 -- ansible/roles/tempest/tasks/reconfigure.yml | 2 - ansible/roles/tempest/tasks/stop.yml | 6 - ansible/roles/tempest/tasks/upgrade.yml | 7 - ansible/roles/tempest/templates/tempest.conf.j2 | 69 -------- ansible/roles/tempest/templates/tempest.json.j2 | 11 -- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/pull.yml | 12 +- ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/pull.yml | 12 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 3 +- ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 12 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 3 + ansible/roles/watcher/tasks/pull.yml | 12 +- ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/pull.yml | 12 +- ansible/roles/zookeeper/templates/myid.j2 | 2 +- ansible/roles/zun/defaults/main.yml | 64 ++++++- ansible/roles/zun/handlers/main.yml | 4 + ansible/roles/zun/tasks/check-containers.yml | 1 + ansible/roles/zun/tasks/pull.yml | 12 +- ansible/site.yml | 89 +++------- .../reference/databases/external-mariadb-guide.rst | 2 +- .../bootstrap-servers.rst | 28 ++- .../reference/high-availability/haproxy-guide.rst | 64 +++++++ .../logging-and-monitoring/grafana-guide.rst | 8 +- .../logging-and-monitoring/monasca-guide.rst | 2 +- .../logging-and-monitoring/prometheus-guide.rst | 24 +-- .../message-queues/external-rabbitmq-guide.rst | 53 ++++++ .../reference/networking/neutron-extensions.rst | 48 ++++++ .../reference/networking/provider-networks.rst | 21 --- .../reference/storage/external-ceph-guide.rst | 105 +++++++++++- etc/kolla/globals.yml | 75 ++++---- etc/kolla/passwords.yml | 15 +- kolla_ansible/cmd/readpwd.py | 118 +++++++++++++ kolla_ansible/cmd/writepwd.py | 120 +++++++++++++ kolla_ansible/hashi_vault.py | 64 +++++++ kolla_ansible/kolla_address.py | 2 +- .../add-alertmanager-metrics-a8d87b0793f2255a.yaml | 4 + ...port-for-fluentd-exporter-ca02ff9182039e3e.yaml | 10 ++ releasenotes/notes/ansible-4-171c8afddfc325e8.yaml | 5 + .../notes/ansible-facts-4279741e84c03ce0.yaml | 10 ++ .../notes/bug-1808805-3ebd9b0edceff170.yaml | 13 ++ .../notes/bug-1837551-4237e2df8725ffc7.yaml | 13 ++ .../notes/bug-1848775-b0625b7586adac96.yaml | 8 + .../notes/bug-1927880-cc407f18f415bbd2.yaml | 6 + .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 + .../notes/bug-1933209-73e78353cb5c3266.yaml | 11 ++ .../notes/bug-1933347-4031d94ef7decb3c.yaml | 5 + .../notes/bug-1933846-122a62e9724b638c.yaml | 5 + .../notes/bug-1934913-a8d436e3d0b950b4.yaml | 6 + .../notes/bug-1938549-e73042a61f0a5935.yaml | 10 ++ .../notes/bug-1939291-bf2e405d286e4b07.yaml | 6 + .../notes/bug-1939679-a31bc2093a4c0000.yaml | 5 + .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 + .../notes/bug-1940547-771f6affb3547748.yaml | 18 ++ .../notes/bug-1941706-a8f9e9544f1540e3.yaml | 13 ++ .../notes/bug-1941940-c63265ea6ea2f594.yaml | 11 ++ .../notes/bug-1942846-8b9edb99a7e7c24f.yaml | 5 + .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 + .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 ++ .../notes/bug-1947485-d059864252fb1813.yaml | 7 + .../notes/bug-1947534-bf3b5ed19473015f.yaml | 5 + .../notes/bug-1947589-52e7a6fa5d82e7fa.yaml | 6 + .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 + .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/bug-1949260-34d82ecd677dd8ff.yaml | 5 + releasenotes/notes/ceph-rgw-062e0544a004f7b1.yaml | 4 + ...fault-migration-interface-3cdf30eed98553fd.yaml | 4 +- .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 + .../notes/cyborg-become-8453d941af536e91.yaml | 5 + .../default-type-source-3fefd8baa3ca46ba.yaml | 8 + ...signate-deprecated-option-66e90605e592c52a.yaml | 5 + .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 + .../disable-kibana-telemetry-46de5aaf2fc7c186.yaml | 5 + .../drop-enable_host_ntp-ce6e60a46e7544ea.yaml | 4 + .../notes/drop-group-haproxy-6119957627811873.yaml | 5 + .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 + .../notes/enable-ipxe-cf461344bdb99881.yaml | 10 ++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++ ...eb-ironic-ipxe-heathcheck-2ae5fd0537c056ce.yaml | 6 + .../notes/fix-gnocchi-statsd-a56c789a3da758a6.yaml | 5 + ...h-externally-managed-cert-1c5faa980aaf8949.yaml | 4 + .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 + .../notes/fix-neutron-vmware-4a8804399d47d8d7.yaml | 5 + .../fix_supress_type_warning-59f87fe62f83bd12.yaml | 5 + .../gather-facts-command-7b62d2c3eb13ec8e.yaml | 5 + ...-default-template-upgrade-c9b88d3385a5d257.yaml | 5 + ...xy-service-backend-weight-e4a908f732a37b42.yaml | 10 ++ .../notes/image-pull-retries-75490c3e6e1e4b54.yaml | 9 + ...ealthchecks-for-memcached-807b9036c3c92596.yaml | 6 + ...healthchecks-for-rabbitmq-a596f6b063026491.yaml | 6 + ...er-healthchecks-multiple2-a85e1cea3f8e4c23.yaml | 8 + .../notes/kolla-ansible-diff-50de16722aa155dc.yaml | 5 + .../notes/linux-bridge-multi-fe8576616fb7d373.yaml | 6 + .../notes/manila-glance-4524ed1e9d488a60.yaml | 5 + .../notes/mariadb-tag-6f08b8d5874c9106.yaml | 6 + .../monasca-collector-ntp-6be55e5526438cfc.yaml | 7 + ...user-auth-to-system-scope-900db3265861ebde.yaml | 8 + ...eutron-log-service-plugin-049ce93906386435.yaml | 5 + .../notes/nova-ceph-user-53670f9ccc546225.yaml | 16 ++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 + .../override-rmq-in-ktb-86c97926db67d3c9.yaml | 5 + .../persist-libvirt-secrets-6e07ab2914f40ad3.yaml | 6 + .../prometheus-target-names-94b17f58fa7c957a.yaml | 13 ++ ...duce-cadvisor-cardinality-1213854b9fe0c828.yaml | 19 +++ ...educe-rabbit-busy-waiting-085433c822165eab.yaml | 13 ++ ...nd-optimise-image-pulling-4346d3c0840ee640.yaml | 4 + .../notes/remove-chrony-role-90f164df8090f916.yaml | 4 + ...t-dda787fca995b9b096a1446e2d2cf9dede37f358.yaml | 4 + .../remove-prometheus-v1-8fa9c74c3dda568e.yaml | 7 + .../remove-rally-tempest-782ff3770e7e3dbb.yaml | 6 + .../remove-wsrep-notify-dbb5ef5f700b06b1.yaml | 5 + .../notes/setup-module-args-c29e1815bbbe8aca.yaml | 8 + ...vault-for-kolla-passwords-76a5b4ece6a4df07.yaml | 7 + .../support-manila-wallaby-2e29e866af0d6287.yaml | 15 ++ ...port-multiple-inventories-f0b694fa4e78bb8a.yaml | 5 + .../switch-images-to-quay-d4640afca6862eee.yaml | 11 ++ ...nic-template-for-keystone-1ee5f80fda7a21a0.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 3 + roles/cephadm/defaults/main.yml | 3 +- roles/cephadm/tasks/main.yml | 11 -- setup.cfg | 2 + test-requirements.txt | 2 +- tools/cleanup-containers | 2 +- tools/cleanup-host | 16 +- tools/cleanup-images | 2 +- tools/diag | 2 +- tools/init-runonce | 3 +- tools/kolla-ansible | 45 +++-- tools/loc | 2 +- tools/ovs-dpdkctl.sh | 2 +- tools/pre-commit-hook | 2 +- tools/read_passwords.py | 1 + tools/run-bashate.sh | 2 +- tools/validate-all-file.py | 5 +- tools/validate-all-yaml.sh | 2 +- tools/validate-docker-execute.sh | 2 +- tools/write_passwords.py | 1 + tox.ini | 36 ++-- zuul.d/base.yaml | 30 +++- zuul.d/jobs.yaml | 38 ++++- zuul.d/nodesets.yaml | 12 -- zuul.d/project.yaml | 8 +- 564 files changed, 4227 insertions(+), 3706 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d38c44e6f..e85f7744c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17,0 +18,3 @@ jmespath>=0.9.3 # MIT + +# Hashicorp Vault +hvac>=0.10.1 diff --git a/test-requirements.txt b/test-requirements.txt index 8b10965c0..ef84c6b8a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=2.9.0,<3.0 # GPLv3 +ansible>=2.10.0,<5.0 # GPLv3

1 0

kolla 13.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are thrilled to announce the release of: kolla 13.0.0: Kolla OpenStack Deployment This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.0.0 ^^^^^^ New Features ************ * OVN images are now buildable for Debian on x86-64 architecture. Bug Fixes ********* * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 Changes in kolla 12.0.0..13.0.0 ------------------------------- bad1c1a47 reno: polish release notes for Xena 65346400d Debian: we want Openvswitch and ovn from backports 849da79d0 cinder-volume/ubuntu: add lsscsi and nvme e466ccbfd ovn: Add Debian x86 images a5a3395e3 monasca: enable for Debian/aarch64 698866e43 update information about unbuildable images 46f8f3f63 centos: switch to RDO final release of Xena a30c086ad openstack-base: drop anyjson 9eed029a8 Update TOX_CONSTRAINTS_FILE for stable/xena e95098364 Update .gitreview for stable/xena 0dcfa1f01 docs: Move Kayobe RC1 after Kolla & Kolla Ansible RC1 4de83a464 Revert "Add missing reno" 2008b386d gnocchi: update to 4.4.1 1b6d1bf16 Add missing reno 0194ac597 Tidy up renos before Xena release 556e8f9ee Fix GitHub tarball URL for monasca-thresh d640980e0 Use RDO's Xena Delorean packages 8cdf952c6 release: Use Xena sources by default 5a8505920 Remove neutron api-paste.ini from old location c4d227cdd [bifrost] Drop workarounds 8b106493d [placement] Stop copying unused script b32cf27cc logstash: pin to 7.9.* for Elasticsearch OSS compatibility e4f019a5d Build source type images by default 456397107 Move all distros to upstream MariaDB 10.5 6366dec51 Avoid the use of --force in groupadd 623f375b5 Debian: use Xena binary packages b5422a6bc [debian] Use upstream MariaDB f02e5af05 Fix stale commented-out repo entry febbb5b40 Add proxysql image a11815cd9 Do not use distro_python_version for interpreter 6eeb2cbdd toolbox: Move to ansible-core 2.11 and collections b4b206de4 [CI] Drop support for publishing versioned image tags 88f1e32aa toolbox: Move custom Ansible config to global location 006c19fdb debian: Change influxdb, rabbitmq and td-agent repos to bullseye 5253e031c Pin td-agent to 4.0.* also on Debian c6cba0831 ceph: Update CentOS packages to Pacific d03d5aaee [doc] Ubuntu has Ceph Pacific in Wallaby+ acc23bb60 Move clustercheck script to mariadb-base f31fbab84 Fix Elasticsearch Curator 8d67183c8 Install UCA GPG key 2168224aa haproxy: Use haproxy 2.2.x 4f07c285c Revert "Config: Set default home to /var/lib/{user}" 1327de43a docs: add feature freeze to release management 25e960284 Revert "Update code to Jinja 3.0 style" ffaf102fe Debian/Ubuntu: handle APT keys in proper way e7ecb75ec Remove chrony image from kolla f0d4daaed Add example of switching CentOS binary images to current release 72fcc0f8e Always use the distro-provided libvirt-python 11b445126 Allow build debian/ubuntu-binary cloudkitty images 22def6336 [release] Use RDO master Delorean packages 928c4648a ironic-neutron-agent: enable for Debuntu binary 17848d49a [release] Use UCA Xena 6f450a10e Fix naming of CentOS Stream in reno eedcfb515 [horizon] Copy Masakari policy in YAML format e8e8e5296 Remove Prometheus v1 image 0a410a546 monasca-thresh: Allow topology check and removal in storm 33da73666 Config: Set default home to /var/lib/{user} 079956910 Add some system users to fix user uid inconsistencies 20d8b83ec base/deb: bump 'system' groups limit beyond Kolla ones 656842501 Config: allow to set group for user d44f289c1 Upgrade prometheus elasticsearch exporter to 1.2.1 535c861d9 Fix missing pacemaker-cli-utils in Debian hacluster images f8824b60d Remove patrole from version-check 383364e67 Update code to Jinja 3.0 style 796a8ec29 test-requirements: remove not needed entries bd90b0270 drop leftovers of RHEL support 53b391d36 Add boto3 as s3 dependency for Glance container fb218ff9b Fix missing templating block for kolla-toolbox. 1f8ac2162 Fix prometheus-elasticsearch-exporter container. 4c2990a99 Add masakari-dashboard to debian binary horizon image 01d02be25 Add missing default policy files for debian-binary-horizon 76c55483b Switch OPENSTACK_RELEASE back to master acc8cb990 CI: Fix epel url override d55cd5e5c Remove last mongo refs 7344e65aa Fix build of debian images 3b5d8ccd6 Clean up extra spaces fb8217c16 [CI] Do not set ansible_python_interpreter for Zuul 2973d03ef setDaemon() is deprecated in Python 3.10 5c369c7fa Remove tempest image 2676a6616 Bump up cAdvisor's version fd49c3d6f tox: Use allowlist_externals instead of whitelist_externals e6cea7b93 Remove rally 8ec8ef3d8 Revert "libvirt: pin edk2-ovmf" 5940d1758 Improve offline build scenario. 05cf55262 docs: Update release management for Xena process 6d0882ef7 Pin td-agent to 4.0.* to fix missing logs 3110cb136 [docs] Fix Debian release name e9ec89821 Remove panko f68dfb88f horizon: Correct location of monitoring_policy file c6fa5d98d Revert "[CI] Add grafana to allowed-to-fail" d7252ba58 Change network_mode default to host 789c9c3b8 Enable Debian updates repo a6884085e [CI] Add grafana to allowed-to-fail db78657c2 Fix _get_images_dir when pip-installed with --user 77fc442a9 Horizon: Install policy files for manila-ui f9715a66e Horizon: Install required policy files for heat-dashboard 740448a65 Add missing default policy files for ubuntu-binary-horizon 5338b559e docs: Update Freenode to OFTC c82683a9e Sort the package lists in openstack-base alphabetically 1a2c33512 libvirt: pin edk2-ovmf 6035f57a3 ubuntu: unpin OVS 1e7d1f3bd Revert "CI: add monasca-grafana to allowed-to-fail images" 16b5a8c1c [Security] Fix open redirect in Prometheus 2c49046ae Drop monasca-grafana image. a93f171da centos: clean up repo enable/disable/keys ea71584c6 add openstack-python3-xena-jobs-arm64 job c29f81869 gnocchi: add python3-rados to gnocchi-base source image 0506ede84 Drop ppc64le support 9bad71d7c gnocchi-base: numpy provides aarch64 binary wheels 038074097 centos: do not install CentOS Rabbitmq repo twice on AArch64 c028639af [release] Use UCA Wallaby 68fc72cd5 base: check for compatible distro using just sh e01a490c9 Deprecate tempest and rally 8c9cfb07f setup.cfg: Replace dashes with underscores 9e4df387c Revert "CI: drop ubuntu-aarch64 job" c364c8be8 [CI] Trust only infra mirrors f0c356774 CI: drop bashism from template overrides eff3e6b9c CI: move to Debian 'bullseye' nodes bfea49246 Revert "CI: temporarily disable CentOS/AArch64 testing" 444313975 Install RabbitMQ repo key on Ubuntu and Debian b69240ca4 docs: update supported OS distros b5dbcb8dc Fix RabbitMQ and Erlang pins again 0ec6049a7 CentOS on AArch64 has only Erlang 22 84add55bf [CI] Fix Ubuntu cephadm jobs names 29b16b8a8 CI: Remove kolla_python_version from Debian/Ubuntu jobs 6e190741d Revert "deprecate use of GnuPG ids for APT keys" a4f6a8f05 neutron: Remove vmware-nsx and networking-mlx from binary e8533795d Install Monasca datasource plugin for Grafana e0f8cbc50 move to Debian 'bullseye' b54789d09 Pin erlang 407d774ff Modify healthcheck_mariadb 51c3c90af Disable trove for Debian/binary f00961da2 docs: deprecate ppc64le in Wallaby 5f2eb06b8 Add Python3 xena unit tests 7e778d659 Update master for stable/wallaby bcdec58c6 releasenotes: we move to Debian bullseye Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.d/base.yaml | 1 - .zuul.d/project.yaml | 3 +- README.rst | 5 - .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 5 +- .../elasticsearch-curator/Dockerfile.j2 | 2 + .../hacluster-pacemaker-remote/Dockerfile.j2 | 6 + .../mariadb/mariadb-server/security_reset.expect | 17 +- .../mariadb-server/security_reset.expect.debian | 67 ---- .../monasca/monasca-thresh/topology_bootstrap.sh | 90 +++++ .../ironic-neutron-agent/Dockerfile.j2 | 5 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 10 +- .../Dockerfile.j2 | 4 +- kolla/common/config.py | 168 +++------ kolla/image/build.py | 104 ++---- kolla/template/methods.py | 14 +- kolla/template/repos.yaml | 277 ++++++++++---- .../add-masakari-dashboard-eae5f216888e5fe0.yaml | 3 + ...a-toolbox_templating_block-3d284d886816e95a.yml | 5 + .../ansible-core-toolbox-e34b31422474684b.yaml | 4 + releasenotes/notes/apt-keys-bb7c8678fc6d908b.yaml | 12 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 + .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 + .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 + .../notes/bug-1933759-c03e50c243850a49.yaml | 5 + .../notes/bug-1933770-c08c6804aa5d9e61.yaml | 6 + .../notes/bug-1934753-98ec4951a0f7373b.yaml | 6 + .../notes/bug-1934788-b1fd51f443479fb6.yaml | 5 + .../notes/bug-1935015-385d6f20e32311eb.yml | 10 + .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 + .../notes/bug-1942846-1216faacacba94be.yaml | 5 + .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 2 +- .../centos-ceph-pacific-40c55be6721cb1ac.yaml | 4 + .../centos-mariadb-upstream-971216b820ee1f1a.yaml | 9 + ...cloudkitty-debuntu-binary-09b182fc672b7d77.yaml | 4 + .../notes/debian-bullseye-4fedf3b3638783de.yaml | 6 +- .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 + ...untu-ironic-neutron-agent-6534d616b37643a8.yaml | 6 + .../default-type-source-f0c5cf1d97e2f345.yaml | 8 + .../notes/deprecate-ppc64le-2b7b642e79bddd66.yaml | 2 +- ...precate-tempest-and-rally-0647efa7209cf03a.yaml | 3 +- .../drop-last-mongo-refs-c12edb066544e190.yaml | 4 + .../notes/drop-ppc64le-516442a16cc9f27c.yaml | 4 + .../notes/drop-rhel-support-03ccce1a69bd88a7.yaml | 5 + ...fix-elasticsearch-curator-7876896ebbd41ad3.yaml | 6 + .../notes/gnocchi-4.4.1-1332afc3c6fca766.yaml | 4 + .../notes/haproxy-22-aeac8a3fa330f972.yaml | 4 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 + .../notes/logstash-7.9-30fd90e921037a8a.yaml | 6 + .../notes/neutron-api-paste-2268bcb3e0156e62.yaml | 6 + .../notes/ovn-debian-x86-d584f88b9e94b226.yaml | 4 + releasenotes/notes/proxysql-001027572dcec118.yaml | 4 + .../remove-chrony-image-20a96b0ce63e2959.yaml | 4 + releasenotes/notes/remove-panko-5338b559.yaml | 3 + .../remove-prometheus-v1-3bc458bed2228a9e.yaml | 4 + .../remove-rally-tempest-249782f1a1123b71.yaml | 5 + .../notes/set-group-for-user-aa9b3eae69d8f6a0.yaml | 3 + .../ubuntu-mariadb-10.5-38631eae76f6d091.yaml | 4 + .../update-cadvisor-v0.38.7-a0ff88006b5ff3f7.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + roles/kolla-build-config/defaults/main.yml | 26 -- test-requirements.txt | 16 - tools/validate-binary-build.sh | 2 +- tools/version-check.py | 22 -- tox.ini | 14 +- 148 files changed, 1471 insertions(+), 1370 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fc20695c0..e1185df8b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. @@ -6 +2,0 @@ bashate>=0.5.1 # Apache-2.0 -beautifulsoup4>=4.6.0 # MIT @@ -9,2 +4,0 @@ ddt>=1.0.1 # MIT -extras>=1.0.0 # MIT -graphviz!=0.5.0,>=0.4 # MIT License @@ -12 +5,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 @@ -14,8 +6,0 @@ oslotest>=3.2.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.1 # BSD -PyYAML>=3.10 # MIT -python-barbicanclient>=4.0.0 # Apache-2.0 -python-heatclient>=1.10.0 # Apache-2.0 -python-neutronclient>=6.3.0 # Apache-2.0 -python-openstackclient>=3.12.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 -pytz>=2013.6 # MIT @@ -23 +7,0 @@ stestr>=2.2.0 # Apache-2.0 -testscenarios>=0.4 # Apache-2.0/BSD

1 0

kayobe 11.0.0 (xena)
by no-reply＠openstack.org 23 Nov '21

23 Nov '21

We are excited to announce the release of: kayobe 11.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 11.0.0 ^^^^^^ Bug Fixes * Fixes some issues seen when using the "--check" argument with "kayobe overcloud host configure". See story 2004798. * Fixes an issue where cached seed VM images are unnecessarily owned by root. See story 2009277 for details. Changes in kayobe 10.0.0..11.0.0 -------------------------------- a79601b5 Infra VMs: fix some playbook host patterns 1dbf0ba5 CI: add Infra VM jobs 98e7817e Ubuntu: add upgrade jobs to gate 3a071757 infra VMs: use wait_for rather than wait_for_connection b207c1a3 Fix --check argument for overcloud host configure 25e0ac30 Drop become in stackhpc.libvirt-vm for seed vm provision 577cd0c8 CI: Disable heat in upgrade jobs to save disk space 698d79e4 Fix link syntax in release note 9c80fa08 Update .gitreview for stable/xena 9c2565a6 Support Ansible diff mode 8710a776 Add the missing documentation for mariadb recovery 49218b34 Remove stale config dump from seed hypervisor host configure bdba7a92 Add missing hook support for environment-create 9f6c912b Prevent Bifrost from using firewalld 2e2c96e3 Allow Docker to use insecure registry when deployed by Kayobe 1af6ea5c Add reno about chrony removal c5a3efaf [release] Sync Kolla Ansible inventory for Xena e0c42ea9 Use OpenStack Xena release 8fb9f57f [release] Sync Kolla Ansible feature flags for Xena e58a1253 Add missing apt playbook for infrastructure VMs 67126eb5 CI: add host configure tests for firewalld e318cada Use merge_configs and merge_yaml to generate Kolla configs b1b6358f Update Kolla images namespace to openstack.kolla 8afd68ca Infra VMs: follow up 769c2efb Add support for configuring tuned profile 717600e1 Fix wrong filename in bifrost docs 4bfe9e27 Fix IPA builder version typo 4b31079f firewalld: support infra VMs 29d73eed Set proxy option in early dnf invocation 79be93ba Enable consistent network device naming 1b647aca Ubuntu systemd-networkd: VLAN ifname heuristics c583922c Add support for infrastructure VMs 7d15aa16 Support configuration of firewalld 69c4bd98 CI: enable DNF tests on all CentOS versions 6a69a4f4 CI: enable DNF tests on CentOS Stream 8 3b901641 Ubuntu: add upgrade jobs in CI b8abf706 Build and deploy source type images by default f50e9b02 Revert to installing Docker SDK with upper constraints 0f2b1042 Bump up Ansible supported versions 53f37da1 seed: Disable SNAT configuration by default a04b5d6a Import merge_configs and merge_yaml from Kolla Ansible f09faa43 CI: Disable libvirt debug logs 2648f487 Make setup module arguments configurable 5535832c Support Ansible collections 9dd7ed03 Remove haproxy and keepalived groups f24b3176 Add support for apt proxy setting ae853182 CI: Fix bashate ignores aecaac7b Revert to Xena IPA images 81d6fa9a CI: Avoid molecule 3.5.x 4ef6e59e CI: Remove IPA images from saved /etc/kolla 1c173aeb Add missing quotes to Docker registry TLS example 545f3610 CI: Log disk usage details cc6ccba2 Fix typo in inspector.yml 080e7203 Sync documentation with kolla_openstack_custom_config 923813ac CI: Fix get_logs.sh docker logs output 7b16300c Allow passing arguments to dev/environment-setup.sh e1ba8421 Allow to configure name of root disk image to provision e8769373 Fix typo in IP allocation filename 74eff837 CI: Fix multiple failures c2b9dd81 docs: fix heading styles in upgrading page 3947997e Fix overcloud introspection data save f639ad0b Use ansible_facts to reference facts 3c56f32f Fix configuration check without public API network 91b2dddc Add twentyFiveGigE to port descriptions in inspector rules a48cc249 dnf: add metalink argument to custom dnf repository acc8cd78 Fix documentation links for routed control plane networks 0a55c834 Add Arista switch support for the Neutron ML2 genericswitch driver 769ec55d Remove references to resolv.conf workaround 6ea22874 Update ntp role to match code style 5a0206ae Ubuntu: Set MTU for veth in the network files 5815f0ba Fix capitalisation of Ansible task name fb36029b kolla: Set neutron_plugin_agent to OVN when it's enabled b8ff8fa8 Add missing font for PDF generation cf60ba0d Use stream8 images with molecule d4bbdada Remove stale DIB_DISABLE_KERNEL_CLEANUP references f0aae6b8 Remove iscsi deploy interface d0263e65 Support setting docker registry credentials to the empty string f575f4b7 Prevent matching unrelated images bca23698 Remove outdated upgrade step 15d20154 Fix url to ansible site in kolla-ansible.rst 034d4360 docs: Stop setting os_distribution in development all-in-one c9cc6f40 docs: add variable for current branch 66e143ad Revert "CI: Fix libvirt errors caused by latest edk2-ovmf" c6c1cde3 CI: test base container image build in seed jobs 9c8f7499 Fix container image builds 1dc6d98b Revert "Use OpenStack Wallaby release" 82def9a5 Ubuntu: ensure /usr/bin/python is python3 a52b3b27 Optimise order of inspector_processing_hooks 9883726b docs: Update Freenode to OFTC 9d3045db ntp: check for ntp group in inventory d2e3f6f1 docs: improve automated seed development info 1e14fa3a CI: Fix libvirt errors caused by latest edk2-ovmf dc53d29e chrony: cleanup during overcloud host upgrade b398e28d Add kayobe overcloud service prechecks command 223e310b Remove default time sources from customisable configuration 0ce6ea2e docs: add reno and upgrade info for CentOS Stream 4a59ea48 Fix overcloud post configure Python interpreter issues ece41b7a CentOS Stream: update DNF repo file names e187ad79 Make docker registry network mode configurable c44f4815 Fixes for Ansible 2.10 93a8baca CI: Remove unused Docker images after overcloud upgrade 085cf7d1 Adds support for configuring chrony 8e825118 [release] Set previous_release to wallaby dfdff656 Ubuntu: add documentation & release note 83155423 setup.cfg: Replace dashes with underscores 1cac2ccb Add os_release variable, build CentOS stream images 7abf6360 Add Python3 xena unit tests 872d874e Update master for stable/wallaby c355935c Ubuntu: avoid shadowing of networkd config files 111375fb Ubuntu: CI: rely on os_distribution, remove interfaces pause 9033d284 Replace custom serial loop with throttle 0fad6c1e Revert to binary images for nova f2cca07c Ubuntu: install qemu-img on seed-hypervisor 4d886ff1 docs: aio: add note with link to automated setup 45a79638 Support additional pass through host variables Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible/action_plugins/merge_configs.py | 19 ++ ansible/action_plugins/merge_yaml.py | 19 ++ ansible/apt.yml | 12 + ansible/compute-node-discovery.yml | 4 +- ansible/container-image-build.yml | 9 +- ansible/dev-tools.yml | 2 +- ansible/disable-cloud-init.yml | 2 +- ansible/disable-glean.yml | 2 +- ansible/disable-selinux.yml | 6 +- ansible/dnf.yml | 4 +- ansible/firewall.yml | 12 + ansible/group_vars/all/apt | 6 + ansible/group_vars/all/bifrost | 11 + ansible/group_vars/all/compute | 28 +++ ansible/group_vars/all/controllers | 28 +++ ansible/group_vars/all/globals | 11 + ansible/group_vars/all/infra-vms | 201 ++++++++++++++++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/ironic | 3 +- ansible/group_vars/all/kolla | 143 ++++++----- ansible/group_vars/all/monitoring | 28 +++ ansible/group_vars/all/openstack | 6 +- ansible/group_vars/all/seed | 31 +++ ansible/group_vars/all/seed-hypervisor | 28 +++ ansible/group_vars/all/storage | 28 +++ ansible/group_vars/all/time | 2 +- ansible/group_vars/compute/firewall | 21 ++ ansible/group_vars/compute/tuned | 7 + ansible/group_vars/controllers/firewall | 21 ++ ansible/group_vars/controllers/tuned | 7 + ansible/group_vars/infra-vms/ansible-host | 3 + ansible/group_vars/infra-vms/ansible-user | 7 + ansible/group_vars/infra-vms/firewall | 21 ++ ansible/group_vars/infra-vms/luks | 6 + ansible/group_vars/infra-vms/lvm | 6 + ansible/group_vars/infra-vms/mdadm | 6 + ansible/group_vars/infra-vms/network | 6 + ansible/group_vars/infra-vms/sysctl | 3 + ansible/group_vars/infra-vms/tuned | 7 + ansible/group_vars/infra-vms/users | 4 + ansible/group_vars/monitoring/firewall | 33 +++ ansible/group_vars/monitoring/tuned | 10 + ansible/group_vars/seed-hypervisor/firewall | 21 ++ ansible/group_vars/seed-hypervisor/tuned | 7 + ansible/group_vars/seed/firewall | 21 ++ ansible/group_vars/seed/tuned | 7 + ansible/group_vars/storage/firewall | 21 ++ ansible/group_vars/storage/tuned | 7 + ansible/host-command-run.yml | 2 +- ansible/host-package-update.yml | 4 +- ansible/idrac-bootstrap.yml | 4 +- ansible/infra-vm-deprovision.yml | 38 +++ ansible/infra-vm-provision.yml | 40 ++++ ansible/ip-allocation.yml | 2 +- ansible/ip-routing.yml | 1 + ansible/kayobe-ansible-user.yml | 11 +- ansible/kayobe-target-venv.yml | 24 +- ansible/kolla-ansible.yml | 20 +- ansible/kolla-bifrost-hostvars.yml | 1 + ansible/kolla-bifrost.yml | 20 +- ansible/kolla-build.yml | 4 +- ansible/kolla-openstack.yml | 1 + ansible/kolla-target-venv.yml | 12 +- ansible/luks.yml | 2 +- ansible/lvm.yml | 2 +- ansible/mdadm.yml | 2 +- ansible/network-connectivity.yml | 2 +- ansible/network.yml | 4 +- ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 + ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/pip.yml | 2 +- ansible/public-openrc.yml | 2 +- ansible/roles/apt/defaults/main.yml | 12 + ansible/roles/apt/tasks/main.yml | 17 ++ ansible/roles/apt/templates/01proxy.j2 | 8 + ansible/roles/bootstrap/tasks/main.yml | 8 +- ansible/roles/dev-tools/tasks/main.yml | 4 +- ansible/roles/disable-glean/tasks/main.yml | 1 + ansible/roles/disable-selinux/tasks/main.yml | 6 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker-registry/tasks/pull.yml | 1 + ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/firewall-redhat/defaults/main.yml | 18 ++ ansible/roles/firewall-redhat/handlers/main.yml | 10 + ansible/roles/firewall-redhat/tasks/disabled.yml | 18 ++ ansible/roles/firewall-redhat/tasks/enabled.yml | 71 ++++++ ansible/roles/firewall-redhat/tasks/main.yml | 3 + ansible/roles/infra-vms/defaults/main.yml | 7 + ansible/roles/infra-vms/tasks/deploy.yml | 93 +++++++ ansible/roles/infra-vms/tasks/destroy.yml | 16 ++ ansible/roles/infra-vms/tasks/main.yml | 18 ++ ansible/roles/infra-vms/tasks/prerequisites.yml | 18 ++ ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/inspection-store/tasks/pull.yml | 1 + ansible/roles/ipa-images/tasks/main.yml | 4 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 25 +- ansible/roles/kolla-ansible/tasks/config.yml | 8 +- ansible/roles/kolla-ansible/tasks/install.yml | 48 +++- .../{globals.yml.j2 => kolla/globals.yml} | 33 +-- .../templates/overcloud-components.j2 | 22 +- .../kolla-ansible/templates/overcloud-services.j2 | 6 +- ansible/roles/kolla-ansible/vars/main.yml | 10 +- ansible/roles/kolla-bifrost/defaults/main.yml | 12 + ansible/roles/kolla-bifrost/tasks/main.yml | 12 +- .../config/bifrost/bifrost.yml} | 3 + .../{dib.yml.j2 => kolla/config/bifrost/dib.yml} | 0 .../config/bifrost/servers.yml} | 0 ansible/roles/kolla-build/defaults/main.yml | 11 +- ansible/roles/kolla-build/tasks/main.yml | 27 +-- .../kolla-build.conf} | 2 - .../kolla-openstack/molecule/default/create.yml | 11 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/create.yml | 11 +- .../molecule/enable-everything/molecule.yml | 4 +- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 18 +- ansible/roles/network-redhat/tasks/main.yml | 2 + ansible/roles/ntp/tasks/prepare.yml | 7 +- ansible/roles/opensm/tasks/pull.yml | 1 + ansible/roles/pip/tasks/pip_conf.yml | 4 +- ansible/roles/snat/tasks/main.yml | 4 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/roles/swift-block-devices/tasks/main.yml | 4 +- ansible/roles/veth/tasks/main.yml | 2 +- ansible/roles/wipe-disks/tasks/main.yml | 4 +- ansible/seed-deploy-containers.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 29 ++- ansible/snat.yml | 5 +- ansible/sysctl.yml | 2 +- ansible/time.yml | 6 +- ansible/tuned.yml | 11 + ansible/users.yml | 2 +- ansible/wipe-disks.yml | 2 +- bindep.txt | 3 + dev/environment-setup.sh | 7 +- dev/functions | 37 ++- dev/infra-vm-deploy.sh | 19 ++ dev/tenks-deploy-config-compute.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 12 +- .../reference/routed-control-plane-networks.rst | 8 +- .../scenarios/all-in-one/overcloud.rst | 6 + etc/kayobe/apt.yml | 6 + etc/kayobe/bifrost.yml | 16 +- etc/kayobe/compute.yml | 28 +++ etc/kayobe/controllers.yml | 28 +++ etc/kayobe/globals.yml | 11 + etc/kayobe/infra-vms.yml | 174 ++++++++++++++ etc/kayobe/inspector.yml | 2 +- .../infra-vms/ansible-python-interpreter | 3 + .../group_vars/infra-vms/network-interfaces | 12 + etc/kayobe/inventory/groups | 10 + etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 17 +- etc/kayobe/monitoring.yml | 28 +++ etc/kayobe/openstack.yml | 4 +- etc/kayobe/seed-hypervisor.yml | 28 +++ etc/kayobe/seed.yml | 31 +++ etc/kayobe/storage.yml | 28 +++ kayobe/ansible.py | 64 ++++- kayobe/cli/commands.py | 221 +++++++++++++++-- kayobe/kolla_ansible.py | 8 + kayobe/plugins/action/merge_configs.py | 225 +++++++++++++++++ kayobe/plugins/action/merge_yaml.py | 181 ++++++++++++++ kayobe/plugins/filter/networkd.py | 22 +- kayobe/plugins/filter/networks.py | 14 ++ kayobe/utils.py | 25 +- molecule-requirements.txt | 10 + playbooks/kayobe-base/pre.yml | 14 ++ .../kayobe-infra-vm-base/infra-vms-group-vars.j2 | 5 + playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 55 +++++ playbooks/kayobe-infra-vm-base/pre.yml | 57 +++++ playbooks/kayobe-infra-vm-base/run.yml | 17 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + playbooks/kayobe-overcloud-base/overrides.yml.j2 | 8 - .../overrides.yml.j2 | 23 ++ .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 10 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 41 +++- playbooks/kayobe-seed-base/overrides.yml.j2 | 5 +- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 7 +- playbooks/kayobe-seed-upgrade-base/run.yml | 3 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 - .../add-apt-proxy-support-f688702868095ed0.yaml | 6 + ...pport-for-custom-seed-vms-a938ffdbedcd7b14.yaml | 8 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 + .../notes/ansible-max-4-f0666c5decc440f1.yaml | 21 ++ .../notes/arista-ngs-3efc3eecb498071e.yaml | 4 + ...ost-deploy-image-filename-716c12e71c769a27.yaml | 6 + .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ .../notes/bugfix-2009080-4c3a5a8acb9de39c.yaml | 7 + .../notes/collections-b1b9a017c843dc1c.yaml | 5 + .../default-source-type-b379b0f1562537dd.yaml | 14 ++ ...ent-network-device-naming-e0edec5d5fdf83e2.yaml | 11 + releasenotes/notes/diff-mode-468e09bbb9185b50.yaml | 11 + releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + .../docker-registry-insecure-b0f529b9eb85737e.yaml | 14 ++ .../environment-create-hooks-b4850b1bd9b13c7c.yaml | 4 + releasenotes/notes/firewalld-48dd2efd52c79252.yaml | 5 + .../notes/fix-check-mode-c0f8e1fcb09f730b.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + .../fix-networkd-vlan-netdev-1668f8e0f9647ef8.yaml | 5 + ...ix-precheck-no-public-net-c0db9168063b6203.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + .../notes/merge-configs-1f8fb3672e9be404.yaml | 22 ++ .../notes/remove-chrony-b535ca7f1f4c9e57.yaml | 5 + .../remove-ironic-iscsi-cb15bec4e494b62c.yaml | 11 + .../notes/seed-disable-snat-4d1e7899456f7561.yaml | 5 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 + .../notes/story-2009072-57e5d079e182e763.yaml | 6 + .../notes/story-2009277-84c381a562244fab.yaml | 6 + releasenotes/notes/tuned-86e2a6519b644985.yaml | 5 + .../tuned-default-profiles-7c795b9599856aee.yaml | 9 + ...espace_to_openstack.kolla-fb74a8cd58942a54.yaml | 5 + .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 4 +- requirements.yml | 93 +++---- roles/kayobe-diagnostics/files/get_logs.sh | 6 +- setup.cfg | 26 ++ test-requirements.txt | 6 - tools/run-bashate.sh | 2 +- tools/test-ansible.sh | 1 + tox.ini | 14 +- zuul.d/jobs.yaml | 46 +++- zuul.d/project.yaml | 10 +- 267 files changed, 5180 insertions(+), 627 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt new file mode 100644 index 00000000..e2e59cc2 --- /dev/null +++ b/molecule-requirements.txt @@ -0,0 +1,10 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. + +docker # Apache-2.0 +molecule<3.5.0 # MIT +molecule-docker # MIT +pytest-molecule # MIT +pytest-testinfra +yamllint # GPLv3 diff --git a/requirements.txt b/requirements.txt index ed81d1d1..8cfd1a87 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.9.0,<2.11.0,!=2.9.8,!=2.9.12 # GPLv3 +ansible>=2.10.0,<5.0 # GPLv3 @@ -6,0 +7,2 @@ selinux # MIT +# INI parsing +oslo.config>=5.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f3184134..934a4b18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ doc8 # Apache-2.0 -docker # Apache-2.0 @@ -11,2 +9,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -molecule # MIT -molecule-docker # MIT @@ -14,3 +10,0 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko -pytest-molecule # MIT -pytest-testinfra

1 0

ansible-config_template 1.2.0
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We are chuffed to announce the release of: ansible-config_template 1.2.0: Config Template plugin for Ansible The source is available from: https://opendev.org/openstack/ansible-config_template Download the package from: https://tarballs.openstack.org/ansible-config_template/ For more details, please see below. Changes in ansible-config_template 1.1.1..1.2.0 ----------------------------------------------- 87410f1 Fix repository URL in galaxy.yml bb1d445 Add option to install as collection 8a9b962 Use ansible_facts[] instead of fact variables 331d893 Add PKI role to functional testing cf28065 Remove references to unsupported operating systems 62812de Run tests against localhost and container 53d5f40 Updated from OpenStack Ansible Tests a6347c3 Updated from OpenStack Ansible Tests ea07ed0 Fix section overrides when commented option persist Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 29 +++++++++------------------ action/config_template.py | 20 ++++++++---------- bindep.txt | 7 ++----- galaxy.yml | 19 ++++++++++++++++++ meta/main.yml | 10 ++++----- plugins/action | 1 + 10 files changed, 56 insertions(+), 59 deletions(-)

1 0

ironic-lib 4.6.3 (wallaby)
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We jubilantly announce the release of: ironic-lib 4.6.3: Ironic common library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 4.6.3 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 4.6.2..4.6.3 ---------------------------------- 972eda9 Restore blkid compatibility with Centos 7 3964cd7 json_rpc: setup.cfg is missing entrypoint for json_rpc's list_opts 15063ca json_rpc: list_opts() should return tuple daf3155 Avoid using blkid in favour of lsblk and parted Diffstat (except docs and test files) ------------------------------------- ironic_lib/disk_utils.py | 57 ++++++++++++++---- ironic_lib/json_rpc/__init__.py | 2 +- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ setup.cfg | 1 + 5 files changed, 94 insertions(+), 41 deletions(-)

1 0

ironic-lib 5.0.1 (xena)
by no-reply＠openstack.org 22 Nov '21

22 Nov '21

We joyfully announce the release of: ironic-lib 5.0.1: Ironic common library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Restore compatibility of blkid command with CentOS 7. For more details see Story 2009328 (https://storyboard.openstack.org/#!/story/2009328) Changes in ironic-lib 5.0.0..5.0.1 ---------------------------------- b19124e Restore blkid compatibility with Centos 7 adb9ccc Avoid using blkid in favour of lsblk and parted 63f4ce8 Update TOX_CONSTRAINTS_FILE for stable/xena 7e3ce2d Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_lib/disk_utils.py | 57 ++++++++++++++---- ...ore-centos7-compatibility-bfbe2bcf1d1fb7f0.yaml | 5 ++ tox.ini | 4 +- 5 files changed, 95 insertions(+), 42 deletions(-)

1 0

kolla 13.0.0.0rc3 (xena)
by no-reply＠openstack.org 19 Nov '21

19 Nov '21

Hello everyone, A new release candidate for kolla for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla/src/branch/stable/xena Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *xena-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 13.0.0.0rc3 (xena)
by no-reply＠openstack.org 19 Nov '21

19 Nov '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/xena Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *xena-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

oslo.middleware 4.5.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are gleeful to announce the release of: oslo.middleware 4.5.0: Oslo Middleware library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 4.4.0..4.5.0 --------------------------------------- 8e47bfc Add paste.filter_factory entrypoint for basic auth middleware c2e6b89 Add Python3 yoga unit tests f8749d2 Update master for stable/xena b413298 Add oslo.config.opts entrypoint for basic auth middleware Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_middleware/__init__.py | 4 +++- oslo_middleware/opts.py | 27 +++++++++++++++++++++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 2 ++ 6 files changed, 40 insertions(+), 2 deletions(-)

1 0

oslo.db 11.1.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are glad to announce the release of: oslo.db 11.1.0: Oslo Database library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 11.0.0..11.1.0 --------------------------------- 8360df7 Configure driver for postgres d774201 Add Python3 yoga unit tests 4e67858 Update master for stable/xena df901a1 Replace use of 'Engine.execute()' ecb15c4 Don't call mapper() outside of declarative registry e1039e0 Don't pass kwargs to connection.execute() 62d77fc Replace use of Executable.execute method c320df4 Remove unnecessary warning filter fadc0ef Replace use of Engine.scalar() 8772fcc Don't use the 'Row.keys()' method 5544f10 Don't use dict-style attribute accesses Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_db/sqlalchemy/provision.py | 13 +- oslo_db/sqlalchemy/utils.py | 216 ++++++++++++++------------ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + 11 files changed, 333 insertions(+), 297 deletions(-)

1 0

oslo.utils 4.12.0 (yoga)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We jubilantly announce the release of: oslo.utils 4.12.0: Oslo Utility library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.11.0..4.12.0 ------------------------------------ 3b5eebd Add backing file format to the output Diffstat (except docs and test files) ------------------------------------- oslo_utils/imageutils.py | 3 +++ 2 files changed, 19 insertions(+), 2 deletions(-)

1 0

python-novaclient 17.0.1 (ussuri)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We are satisfied to announce the release of: python-novaclient 17.0.1: Client library for OpenStack Compute API This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. Changes in python-novaclient 17.0.0..17.0.1 ------------------------------------------- 437d63de Add a cleanup for a server in a functional test 25afea2a Switch legacy Zuul jobs to native Zuul v3 jobs 694b95e3 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 1d8a3753 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 17 ++--- .../legacy/novaclient-dsvm-functional/post.yaml | 80 ---------------------- .../legacy/novaclient-dsvm-functional/run.yaml | 54 --------------- playbooks/post.yaml | 6 ++ playbooks/python-novaclient-functional.yaml | 14 ++++ roles/get-os-environment/defaults/main.yaml | 2 + roles/get-os-environment/tasks/main.yaml | 12 ++++ tox.ini | 10 +-- 13 files changed, 99 insertions(+), 207 deletions(-)

1 0

tooz 2.10.0
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We eagerly announce the release of: tooz 2.10.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. 2.10.0 ^^^^^^ New Features * Redis driver retries actions for up to 15 times when met with error connecting to Redis. Changes in tooz 2.9.0..2.10.0 ----------------------------- 47c4d56 Enable retries in redis driver 0e0c11e setup.cfg: Replace dashes with underscores 0ba64e4 setup.cfg: Replace dashes with underscores 608ea79 Fix formatting of release list Diffstat (except docs and test files) ------------------------------------- .../redis-connect-retries-c9adfc81eb06a4ab.yaml | 5 ++ releasenotes/source/index.rst | 24 +++---- setup.cfg | 8 +-- tooz/drivers/redis.py | 74 +++++++++++----------- 4 files changed, 58 insertions(+), 53 deletions(-)

1 0

pbr 5.8.0
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We joyfully announce the release of: pbr 5.8.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 5.7.0..5.8.0 --------------------------- a6006f6 Add python2 testing back to PBR de0c717 Allow PEP517 without setup_requires d21c2ca Clarify the need for setup.py with PEP517 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 ++ pbr/core.py | 8 ++++++++ 4 files changed, 27 insertions(+), 7 deletions(-)

1 0

kayobe 11.0.0.0rc3 (xena)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

Hello everyone, A new release candidate for kayobe for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/xena Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *xena-rc-potential* to bring it to the kayobe release crew's attention.

1 0

oslo.policy 3.1.2 (ussuri)
by no-reply＠openstack.org 18 Nov '21

18 Nov '21

We enthusiastically announce the release of: oslo.policy 3.1.2: Oslo Policy library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.1.2 ^^^^^ Bug Fixes * Fixes the mapping of 'system_scope' to 'system' when enforce is called with a 'creds' dictionary instead of a RequestContext. Changes in oslo.policy 3.1.1..3.1.2 ----------------------------------- 17c38af Map system_scope in creds dictionary 27493ae Dropping lower constraints testing Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - lower-constraints.txt | 59 ---------------------- oslo_policy/policy.py | 22 ++++---- ...stem-scope-for-creds-dict-e4cbec2f7495f22e.yaml | 5 ++ tox.ini | 7 --- 6 files changed, 30 insertions(+), 95 deletions(-)

1 0

octavia-dashboard 5.0.2 (ussuri)
by no-reply＠openstack.org 16 Nov '21

16 Nov '21

We are thrilled to announce the release of: octavia-dashboard 5.0.2: Horizon panels for Octavia This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia- dashboard For more details, please see below. 5.0.2 ^^^^^ Bug Fixes * Fixes a namespace collision with the barbican-ui dashboard. Changes in octavia-dashboard 5.0.1..5.0.2 ----------------------------------------- fd73b21 Change the Octavia Barbican namespace Diffstat (except docs and test files) ------------------------------------- octavia_dashboard/api/rest/barbican.py | 4 ++-- ...barbican.service.js => octavia-barbican.service.js} | 18 +++++++++--------- ...ervice.spec.js => octavia-barbican.service.spec.js} | 12 +++++++----- .../project/lbaasv2/workflow/model.service.js | 10 +++++----- .../project/lbaasv2/workflow/model.service.spec.js | 2 +- ...ce-collision-with-barbican-ui-267f4ba074729ea6.yaml | 4 ++++ 6 files changed, 28 insertions(+), 22 deletions(-)

1 0

octavia 6.2.2 (ussuri)
by no-reply＠openstack.org 16 Nov '21

16 Nov '21

We are stoked to announce the release of: octavia 6.2.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 6.2.2 ^^^^^ Bug Fixes * Fixes loadbalancer creation failure when one of the listener port matches with the octavia generated peer ports and the allowed_cidr is explicitly set to 0.0.0.0/0 on the listener. This is due to creation of two security group rules with remote_ip_prefix as None and remote_ip_prefix as 0.0.0.0/0 which neutron rejects the second request with security group rule already exists. * Fix a serialization error when using host_routes in VIP subnets when persistence in the amphorav2 driver is enabled. * Fixed MAX_TIMEOUT for timeout_client_data, timeout_member_connect, timeout_member_data, timeout_tcp_inspect API listener. The value was reduced from 365 days to 24 days, which now does not exceed the value of the data type in DB. * Increase the limit value for nr_open and file-max in the amphora, the new value is based on what HAProxy 2.x is expecting from the system with the greatest maxconn value that Octavia can set. Changes in octavia 6.2.1..6.2.2 ------------------------------- 0b4e05ae Fix failover of az-specific loadbalancers 19ce10f9 Fix management network selection when calculating deltas bfdc3614 Fix duplicate SG creation for listener peer port 9a25a643 Fix MAX_TIMEOUT value for listener 41b2aad6 Fix periodic image builder jobs 20c0a88b Fix amphora image build jobs 594782a5 Fix PlugVIPAmphora revert function in amphorav2 e4300558 Update nr_open limit value in the amphora 1dfa4fe2 Fix using host_routes in VIP subnet with amphorav2 d79c80c3 Fix race conditions between API and worker DB calls Diffstat (except docs and test files) ------------------------------------- .../post-install.d/20-haproxy-tune-kernel | 4 +-- .../agent/api_server/templates/systemd.conf.j2 | 2 +- octavia/common/constants.py | 4 +-- .../controller/worker/v1/tasks/network_tasks.py | 8 +++--- octavia/controller/worker/v2/controller_worker.py | 33 ++++++++++++++++++---- .../worker/v2/tasks/amphora_driver_tasks.py | 6 ++-- .../controller/worker/v2/tasks/network_tasks.py | 11 ++++---- .../drivers/neutron/allowed_address_pairs.py | 17 +++++++---- .../worker/v2/tasks/test_amphora_driver_tasks.py | 5 ++++ .../worker/v2/tasks/test_network_tasks.py | 18 ++++++++---- .../controller/worker/v2/test_controller_worker.py | 3 +- .../drivers/neutron/test_allowed_address_pairs.py | 30 ++++++++++++++++++++ playbooks/image-build/run.yaml | 32 ++++++++++++++++++--- ...fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml | 9 ++++++ ...amphorav2-and-persistence-54b99d651a4ee9c4.yaml | 5 ++++ .../fix-listener-MAX_TIMEOUT-4c4fdf804a96c34b.yaml | 7 +++++ .../fix-nr_open-limit-value-7f475c3e301a608d.yaml | 6 ++++ 18 files changed, 177 insertions(+), 47 deletions(-)

1 0