January 2022 - Release-announce - lists.openstack.org

neutron-dynamic-routing 19.1.0 (xena)
by no-reply＠openstack.org 05 Jan '22

05 Jan '22

We are satisfied to announce the release of: neutron-dynamic-routing 19.1.0: Neutron Dynamic Routing This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 19.1.0 ^^^^^^ New Features * A new BGP scheduler has been added, called "StaticScheduler". It will not perform any automatic scheduling of speakers to agents, instead relying on API calls to perform explicit scheduling, fulfilling the needs of larger deployments. See also bug 1920065 (https://bugs.launchpad.net/neutron/+bug/1920065) The plan is to make the "StaticScheduler" the default option for the next release and possibly deprecate the current default, "ChanceScheduler". Changes in neutron-dynamic-routing 19.0.0..19.1.0 ------------------------------------------------- 3d5eddd Add a StaticScheduler without automatic scheduling ce8ae8b Dropping lower constraints testing (stable Xena) Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 +++++++- .../bgp/scheduler/bgp_dragent_scheduler.py | 6 ++++ .../add-static-scheduler-a3b0f54b964ae306.yaml | 10 ++++++ 7 files changed, 68 insertions(+), 9 deletions(-)

1 0

neutron-dynamic-routing 18.1.0 (wallaby)
by no-reply＠openstack.org 05 Jan '22

05 Jan '22

We are overjoyed to announce the release of: neutron-dynamic-routing 18.1.0: Neutron Dynamic Routing This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 18.1.0 ^^^^^^ New Features * A new BGP scheduler has been added, called "StaticScheduler". It will not perform any automatic scheduling of speakers to agents, instead relying on API calls to perform explicit scheduling, fulfilling the needs of larger deployments. See also bug 1920065 (https://bugs.launchpad.net/neutron/+bug/1920065) The plan is to make the "StaticScheduler" the default option for the next release and possibly deprecate the current default, "ChanceScheduler". Changes in neutron-dynamic-routing 18.0.0..18.1.0 ------------------------------------------------- c5c8612 Add a StaticScheduler without automatic scheduling 9ebce05 Dropping lower constraints testing (stable Wallaby) c10de7d Fix TypeError when formatting BGP IP address. cf256fa Switch to use neutron-tempest-plugin jobs for Wallaby branch b1e1f70 Update TOX_CONSTRAINTS_FILE for stable/wallaby b716c4f Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 18 +++++++++-- neutron_dynamic_routing/services/bgp/bgp_plugin.py | 2 +- .../bgp/scheduler/bgp_dragent_scheduler.py | 6 ++++ .../add-static-scheduler-a3b0f54b964ae306.yaml | 10 ++++++ tox.ini | 4 +-- 11 files changed, 106 insertions(+), 14 deletions(-)

1 0

ovsdbapp 1.14.0 (yoga)
by no-reply＠openstack.org 05 Jan '22

05 Jan '22

We are thrilled to announce the release of: ovsdbapp 1.14.0: A library for creating OVSDB applications This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. 1.14.0 ^^^^^^ New Features * Support the new "discard" static route nexthop type. It was added in OVN 21.06. * Added functions and commands to add, delete, list and update records of 'Address_Set' table. * Added functions and commands to add, delete and list gateway chassis of logical router port. * Added function and command to get one logical router port by name or uuid. Changes in ovsdbapp 1.13.0..1.14.0 ---------------------------------- dfc2c0e Move linters dependencies to tox.ini 8a21d5f Allow functional tests to pass on older OVN w/o IC 358d1a5 Remove ovsdb_connection singleton for tests a2d3ef2 Add cooperative_yield() to OvsdbIdl 5d269bf Check WaitEvents for match after other events c33512a Capture test run logging 641b6b8 nb: add support for set of addresses API ad9f462 nb: add support for lrp's gateway chassis API faea171 nb: provide lrp_get method ea0d335 nb: provide 'discard' value for nexthop 7c57344 Add Python3 yoga unit tests Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 3 + ovsdbapp/constants.py | 2 + ovsdbapp/event.py | 47 ++++-- ovsdbapp/schema/ovn_northbound/api.py | 108 +++++++++++++ ovsdbapp/schema/ovn_northbound/commands.py | 136 +++++++++++++++- ovsdbapp/schema/ovn_northbound/impl_idl.py | 32 ++++ .../functional/backend/ovs_idl/test_backend.py | 4 +- .../functional/backend/ovs_idl/test_indexing.py | 22 +-- .../schema/ovn_ic_northbound/fixtures.py | 5 + .../schema/ovn_ic_northbound/test_impl_idl.py | 14 +- .../functional/schema/ovn_northbound/fixtures.py | 10 ++ .../schema/ovn_northbound/test_impl_idl.py | 179 ++++++++++++++++++++- .../functional/schema/ovn_southbound/fixtures.py | 5 + .../schema/ovn_southbound/test_impl_idl.py | 13 +- ovsdbapp/venv.py | 66 ++++++-- ...n-support-discard-nexthop-cdb1d35aceaf4b63.yaml | 4 + .../provide-address-set-api-3cb387b9e571d4ea.yaml | 4 + ...e-lrp-gateway-chassis-api-14e2948183f60cfa.yaml | 4 + .../provide-lrp-get-method-a33a99a7f86b827e.yaml | 4 + test-requirements.txt | 3 - tox.ini | 8 + zuul.d/project.yaml | 2 +- 25 files changed, 709 insertions(+), 80 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 17a2b4b..749805c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -hacking>=3.0.1,<3.1.0 # Apache-2.0 - @@ -11 +8,0 @@ oslotest>=3.2.0 # Apache-2.0 -pylint==2.6.0 # GPLv2

1 0

neutron-lib 2.18.1 (yoga)
by no-reply＠openstack.org 05 Jan '22

05 Jan '22

We are satisfied to announce the release of: neutron-lib 2.18.1: Neutron shared routines and utilities This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 2.18.0..2.18.1 ------------------------------------- 76b9a09 Log resource id in the callbacks publish method cb03193 Remove import statement for six Diffstat (except docs and test files) ------------------------------------- neutron_lib/callbacks/manager.py | 5 +++-- tools/pyir.py | 4 +--- 2 files changed, 4 insertions(+), 5 deletions(-)

1 0

kolla-ansible 13.0.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are jazzed to announce the release of: kolla-ansible 13.0.1: Ansible Deployment of Kolla containers This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.0.1 ^^^^^^ Security Issues *************** * Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE) Vulnerability in Elasticsearch - CVE-2021-44228. Bug Fixes ********* * Fixes generation of "cyborg.conf". LP#1941704 * Only run "configure ovn in ovsdb" task on ovn-controller hosts The task will fail on hosts (like controller nodes) without tunnel interface LP#1953367 * Fixes an issue where the Nova API logs were written to files ending with *-wsgi.log* which affected the processing of these logs in the Fluentd pipeline. LP#1950185 * On slower nodes, the initial grafana startup could experience a timeout failure when the migrations for setting up the database took longer than expected. This has been fixed by increasing the default timeout. The timeout settings can be changed via new parameters "grafana_start_first_node_delay" and "grafana_start_first_node_retries" for the "grafana" role. LP#1769962 Other Notes *********** * The container "ironic-dnsmasq" now creates the "dnsmasq.log" just as the container "neutron-dhcp-agent". For both log files verbosity can be increased globally via "openstack_logging_debug" or per service via "ironic_logging_debug" or "neutron_logging_debug" variables. Changes in kolla-ansible 13.0.0..13.0.1 --------------------------------------- 832416e50 Added upgrade note for separate nova and cinder keys. f2c0d1ecc [docs] Mark init-runonce properly 725e2d363 ovn: configure ovn in ovsdb only on ovn-controller hosts 49850986d [Security] Add log4j vulnerability mitigation in Elasticsearch f6ff1a0a5 Bump timeout for grafana startup f51dbdede Update dnsmasq logging 4bc015a50 Finish removing Monasca Log Transformer 4d5d88597 Fix monasca-thresh upgrade 24965250e docs: stop installing kolla in quickstart 2e85dba77 Cleanup leftovers of the removed tempest role f62361371 CI: Test minimum and maximum supported ansible versions be9454ab7 Fix wrong opts in cyborg.conf d88d7b131 Specify log file name for Nova API ea04a3375 docs: Install openstack-client with upper constraints 142800014 haproxy: remove unused tls check condition in config Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 3 -- ansible/inventory/multinode | 3 -- ansible/monasca_cleanup.yml | 1 - .../common/templates/conf/input/00-global.conf.j2 | 1 + ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + ansible/roles/elasticsearch/defaults/main.yml | 2 +- ansible/roles/grafana/defaults/main.yml | 3 ++ ansible/roles/grafana/handlers/main.yml | 4 +- .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 6 +++ .../templates/haproxy/haproxy_main.cfg.j2 | 2 - ansible/roles/monasca/defaults/main.yml | 17 --------- ansible/roles/monasca/tasks/upgrade.yml | 1 + ansible/roles/neutron/templates/dnsmasq.conf.j2 | 5 +++ ansible/roles/nova/templates/nova.conf.j2 | 5 ++- ansible/roles/ovn/tasks/bootstrap.yml | 1 + ansible/roles/tempest/defaults/main.yml | 43 ---------------------- ansible/site.yml | 1 - .../reference/networking/neutron-extensions.rst | 10 +++++ .../orchestration-and-nfv/tacker-guide.rst | 27 +++++++------- .../notes/bug-1941704-d31774f4dd56374f.yaml | 5 +++ .../notes/bug-1953367-61591a7f3ecf28ce.yaml | 7 ++++ ...ix-nova-api-log-file-name-9a377525e73012de.yaml | 7 ++++ ...-start-first-node-timeout-f9a6149cc68153a5.yaml | 10 +++++ .../notes/security-log4j-1be047799f8e590a.yaml | 5 +++ .../update-dnsmasq-logging-a5d42f6180aff049.yaml | 7 ++++ 30 files changed, 115 insertions(+), 105 deletions(-)

1 0

kolla-ansible 11.2.0 (victoria)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are tickled pink to announce the release of: kolla-ansible 11.2.0: Ansible Deployment of Kolla containers This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 11.2.0 ^^^^^^ New Features ************ * Add new option prometheus_openstack_exporter_timeout to override default scrape_timeout for openstack exporter job. * Adds support for elasticsearch storage backend with cloudkitty: That feature let you store cloudkitty rating documents directly within your elasticsearch cluster. If you already have an elasticsearch cluster running for logging it create a new cloudkitty specific index. That let you use kibana, grafana or any other interface to browse your rating data and create appropriate dashboard or build an appropriate billing service over it. Adds support for prometheus as a fetcher/collector for cloudkitty: That feature let you use prometheus metrics as your source of rating. Using prometheus let you rate pretty much any openstack object directly from the kolla provided exporters (Openstack_exporter) or your own customs exporters. * Adds config parameter "haproxy_nova_spicehtml5_proxy_tunnel_timeout" to configure the "Tunnel TimeOut" directive for spicehtml5proxy haproxy service. * Adds a new variable, "disable_firewall", which defaults to "true". If set to "false", then the host firewall will not be disabled during "kolla-ansible bootstrap-servers". * Adds two new variables "service_images_pull_retries" and "service_images_pull_delay" which control the behaviour of image pulling tasks. These are useful if your registry is not 100% reliable (usually due to load). The defaults have been set to 3 retries and 5 seconds delay to ensure a better default experience (these are actually Ansible defaults when task retries are enabled). * It is now possible to use Neutron DHCP agent together with OVN networking. New variable is added to control this feature: "neutron_ovn_dhcp_agent", defaulting to "no". * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kolla_ansible_setup_filter" and "kolla_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * New variable "ironic_enable_keystone_integration" was added. It helps to add keystone connection information into "ironic.conf" if we want to connect to existing keystone (not installing it at the same time). Upgrade Notes ************* * Updates all references to Ansible facts within Kolla Ansible from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Modifies the default value of "ceph_nova_user" from "nova" to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". Users who have overridden "ceph_nova_keyring" to use separate keyrings for Nova and Cinder should also override "ceph_nova_user" to match the Nova keyring. LP#1934145 * Modifies the default value of "rabbitmq_server_additional_erl_args" from an empty string to "+S 2:2 +sbwt none +sbwtdcpu none +sbwtdio none". Security Issues *************** * Fixes "net.ipv4.ip_forward" not to be enabled by Kolla Ansible on the default network namespace. It was enabled on hosts with Neutron L3 Agent (thus in most common setups with OVS and/or Linux Bridge, but not OVN) and allowed, unless users had extra iptables rules to avoid that, any traffic to be accepted for forwarding (as long as it was routable and passed other checks). Users of existing setups are advised to re-evaluate whether they need this sysctl enabled and disable if not necessary. Kolla Ansible will simply no longer try to set this sysctl at all. Neutron L3 Agent handles forwarding enablement per managed namespace. LP#1945453 * Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE) Vulnerability in Elasticsearch - CVE-2021-44228. Bug Fixes ********* * Fixes monasca-thresh to correctly submit the topology to Storm. The previous container ran the topology in local mode (within the container), and didn't use the Storm cloud. The new container handles submitting the topology to Storm and also handles killing and replaces the topology when it's configuration has changed. As a result, the monasca-thresh container is only used for submission, and exits after that's completed. The logs for the topology will now be available in the storm worker-artifact logs. LP#1808805 * Fixes an issue where configuration in containers could become stale. This prevented containers with updated configuration from being restarted, e.g., if the "kolla-ansible genconfig" and "kolla- ansible deploy-containers" commands were used together. LP#1848775 * Fixes elasticsearch fluentd output being enabled when elasticsearch is not enabled. LP#1927880 * Fixes an issue with timesync checks on deployment host. See bug 1933347 for details. * Fixes horizon's healthcheck when SSL is turned on. LP#1933846 * Fixes an issue seen when customising the Docker Yum repository URL on CentOS, where the "docker_yum_gpgkey" variable is not used consistently. LP#1934913 * Fixes an issue where spice console is freezed after while, see LP#1938549. * Fixes Masakari in multi-region deployments to query Nova API in its own region. LP#1939291 * Fixes nova's healthchecks when upgrading from previous version. LP#1939679 * Fixed broken "kolla-toolbox" container when RabbitMQ is disabled and IPv6 is used. LP#1939883 * Fixes "mariadb-clustercheck" not to run when there is no HAProxy. LP#1944114 * No longer creates directories for haproxy and swift logs where they are not needed. LP#1945070 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fix octavia role doesn't set the amphora network's gateway_ip LP#1949260 * Fixes an issue where the Nova API logs were written to files ending with *-wsgi.log* which affected the processing of these logs in the Fluentd pipeline. LP#1950185 * Fixes an issue with Cyborg deployment. LP#1937911 * Fixes an issue with "config.json" for "neutron-server" when a VMware plugin agent is used. * On slower nodes, the initial grafana startup could experience a timeout failure when the migrations for setting up the database took longer than expected. This has been fixed by increasing the default timeout. The timeout settings can be changed via new parameters "grafana_start_first_node_delay" and "grafana_start_first_node_retries" for the "grafana" role. LP#1769962 * Fixes an issue with Neutron "linuxbridge" ML2 agent when "neutron_external_interface" includes multiple interfaces. LP#1863935 * Fixes an issue with Manila configuration which was missing a "[glance]" section, preventing some drivers from operating. * Fixes an issue with default Nova configuration for Ceph where the RBD user is set to "nova", but only a "cinder" keyring is copied. The default value of "ceph_nova_user" is changed to the value of "ceph_cinder_user", in line with the default for "ceph_nova_keyring". LP#1934145 * Fixes an issue where RabbitMQ consumes a large amount of CPU, particularly on multi-core systems. The default RabbitMQ tuning assumes that RabbitMQ is running on a dedicated host, which is the opposite of a typical Kolla Ansible container setup. For more details on tuning RabbitMQ in your environment, please see: https://www.rabbitmq.com/runtime.html#busy-waiting https://www.rabbitmq.com/runtime.html#scheduling Other Notes *********** * Optimised image pulling to avoid looping over disabled services. Changes in kolla-ansible 11.1.0..11.2.0 --------------------------------------- f022d47b9 Added upgrade note for separate nova and cinder keys. cb630cce8 [docs] Mark init-runonce properly 143cca58b [Security] Add log4j vulnerability mitigation in Elasticsearch 8c63d9360 Bump timeout for grafana startup d0fe5ab01 Fix monasca-thresh upgrade c80e021ca docs: stop installing kolla in quickstart dc779eeff Replace auth_uri with www_authenticate_uri 03438149e Specify log file name for Nova API c011a608e docs: Install openstack-client with upper constraints 36fdd6cf0 docs: Get release name dynamically 1c031910f docs: Parameterize kolla-ansible version and branch f8cf81bbb Stop creating unused cron/logrotate directory 11451cc9e docs: Fix python-openstackclient package name and init-runonce path 4305edb2f Fix octavia doesn't set subnet gateway_ip 0050062c8 Fix broken deploy of placement service 28d2efc84 Fix missing Ansible version in the error message 3c1418020 Add support for Ironic inspection through DHCP-relay 63f669ce1 Correctly create the dhcp_agent.ini and l3_agent.ini fa3c72514 Do not set net.ipv4.ip_forward sysctl 5b7b32f81 Do not create haproxy and swift log dirs needlessly 0166f707d Docs: Update to opendev.org domain 4eaeb6398 Do not enable mariadb-clustercheck when not needed 6bfa6d0c6 Do not become root when searching for custom prometheus alert rules files 04566adac CI: stop setting ceph_nova_user 4b12a9e32 Add disable_firewall variable 3d8ae1ed5 Fix neutron upgrade using host limit without controllers 744c9af7c Add override timeout for openstack exporter e33e75c06 [CI] Test instance health after upgrade f97e75201 [CI] Cinder upgrade testing 6d7c83e0c Zun: Temporarily skip capsule test for ubuntu 257e6e4a4 Fix kolla-toolbox with IPv6 and disabled RabbitMQ c7d77ff7a CentOS Stream: Use a variable for openstack_tag_suffix 30b95a516 CI: Add centos-8-stream jobs 83d300fc5 Fix Masakari in multi-region deploys fa1823f94 docs: Document CentOS 8 Stream usage 6f1a02dfd Remove an unused file bcc60136a Add ability to retry image pulling 9428e44dc Add Neutron DHCP agent to OVN networking setup d81a36215 Use more RMQ flags for less busy wait 3c3b7f307 Set changed_when to false for group_by tasks a88785236 Fix the Tempest image url variable 9b644f2e2 Fix deployment failure when kolla_dev_mod is enabled 3c6391334 Trivial fix nova's healthchecks 085a0852c fluentd: Fix check for external elasticsearch 69fde698c ironic: Follow up for ironic_enable_keystone_integration 15b8f0799 Refactor and optimise image pulling 8a9048d09 Extra var ironic_enable_keystone_integration added. 0d7f0828e monasca-thresh: Fix topology submission to storm 5e5efd804 baremetal: use docker_yum_gpgkey to fetch docker GPG key f95f846d5 Fix release note for ansible_facts 75c8f4383 neutron: fix neutron-server config.json with VMware fb8dfe4fb Blazar: Fix support for external keystone in multiregion deploy 8aa8e617d nova: Use cinder user for Ceph 913a334e0 Elevated privileges required to set owner/group/mode by ansible 1b020dd1e Fix config action when OVN is enabled 7cc41b391 Check config when checking the containers f1c1567be Fix nova deployment failure when rabbitmq is disabled 1080c8bc9 Fix freezed spice console in horizon 0a11cb0b8 Do not run timesync checks on deployment host 707f6ab6a watcher: add missing become for copying configs f06d6e3ed Trivial fix horizon's healthcheck when SSL turned on ec0687dcd Fix incorrect config of linuxbridge multiple external networks da392e58b Make setup module arguments configurable 3fdb97b94 cyborg: add missing become for api-paste.ini 1d6231069 Add missing elasticsearch cloudkitty storage and prometheus collector backend support. eb52a6f65 Use ansible_facts to reference facts b710fef04 manila: add glance section in manila-share.conf 875a29ff4 docs: Add information on tuning Ansible 6d67d9d97 Fix variable names in Octavia documentation 21cef390e Reduce RabbitMQ busy waiting, lowering CPU load Diffstat (except docs and test files) ------------------------------------- ansible/gather-facts.yml | 14 +- ansible/group_vars/all.yml | 31 ++- ansible/library/kolla_docker.py | 44 +++- ansible/post-deploy.yml | 4 +- ansible/roles/aodh/defaults/main.yml | 8 +- ansible/roles/aodh/tasks/pull.yml | 12 +- ansible/roles/barbican/defaults/main.yml | 6 +- ansible/roles/barbican/tasks/pull.yml | 12 +- ansible/roles/baremetal/defaults/main.yml | 11 +- ansible/roles/baremetal/tasks/install.yml | 72 ++++--- ansible/roles/baremetal/tasks/post-install.yml | 18 +- ansible/roles/baremetal/tasks/pre-install.yml | 16 +- ansible/roles/blazar/defaults/main.yml | 4 +- ansible/roles/blazar/tasks/pull.yml | 12 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 +- ansible/roles/ceilometer/defaults/main.yml | 8 +- ansible/roles/ceilometer/tasks/pull.yml | 12 +- ansible/roles/chrony/defaults/main.yml | 2 +- ansible/roles/chrony/tasks/pull.yml | 12 +- ansible/roles/cinder/defaults/main.yml | 8 +- ansible/roles/cinder/tasks/pull.yml | 12 +- ansible/roles/cloudkitty/defaults/main.yml | 47 +++- ansible/roles/cloudkitty/tasks/bootstrap.yml | 30 +++ ansible/roles/cloudkitty/tasks/pull.yml | 12 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 34 ++- ansible/roles/collectd/defaults/main.yml | 2 +- ansible/roles/collectd/tasks/pull.yml | 12 +- ansible/roles/common/defaults/main.yml | 6 +- ansible/roles/common/tasks/config.yml | 5 +- ansible/roles/common/tasks/inspect.yml | 6 - ansible/roles/common/tasks/pull.yml | 11 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 4 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 4 +- ansible/roles/cyborg/defaults/main.yml | 6 +- ansible/roles/cyborg/tasks/config.yml | 1 + ansible/roles/cyborg/tasks/pull.yml | 12 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- ansible/roles/designate/defaults/main.yml | 14 +- ansible/roles/designate/tasks/pull.yml | 12 +- ansible/roles/elasticsearch/defaults/main.yml | 6 +- ansible/roles/elasticsearch/tasks/pull.yml | 12 +- ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/tasks/pull.yml | 12 +- ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/tasks/pull.yml | 12 +- ansible/roles/glance/defaults/main.yml | 8 +- ansible/roles/glance/tasks/pull.yml | 12 +- ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/pull.yml | 12 +- ansible/roles/grafana/defaults/main.yml | 5 +- ansible/roles/grafana/handlers/main.yml | 4 +- ansible/roles/grafana/tasks/pull.yml | 9 +- .../templates/haproxy_single_service_listen.cfg.j2 | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 4 +- ansible/roles/haproxy/handlers/main.yml | 1 + ansible/roles/haproxy/tasks/precheck.yml | 6 +- ansible/roles/haproxy/tasks/pull.yml | 12 +- ansible/roles/heat/defaults/main.yml | 6 +- ansible/roles/heat/tasks/pull.yml | 12 +- ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/horizon/tasks/pull.yml | 12 +- ansible/roles/horizon/templates/horizon.conf.j2 | 7 +- ansible/roles/influxdb/defaults/main.yml | 2 +- ansible/roles/influxdb/tasks/pull.yml | 9 +- ansible/roles/ironic/defaults/main.yml | 13 +- ansible/roles/ironic/tasks/deploy.yml | 2 +- ansible/roles/ironic/tasks/pull.yml | 12 +- .../ironic/templates/ironic-inspector.conf.j2 | 4 +- ansible/roles/ironic/templates/ironic.conf.j2 | 8 +- ansible/roles/iscsi/defaults/main.yml | 4 +- ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/iscsi/tasks/pull.yml | 12 +- ansible/roles/kafka/defaults/main.yml | 2 +- ansible/roles/kafka/tasks/pull.yml | 12 +- ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/pull.yml | 12 +- ansible/roles/keystone/defaults/main.yml | 6 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 1 + ansible/roles/keystone/tasks/pull.yml | 12 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/kibana/tasks/pull.yml | 12 +- ansible/roles/kuryr/defaults/main.yml | 2 +- ansible/roles/kuryr/tasks/pull.yml | 8 +- ansible/roles/magnum/defaults/main.yml | 4 +- ansible/roles/magnum/tasks/pull.yml | 12 +- ansible/roles/manila/defaults/main.yml | 8 +- ansible/roles/manila/tasks/pull.yml | 12 +- .../roles/manila/templates/manila-share.conf.j2 | 14 +- ansible/roles/mariadb/defaults/main.yml | 8 +- ansible/roles/mariadb/tasks/lookup_cluster.yml | 3 + ansible/roles/mariadb/tasks/pull.yml | 12 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 4 +- ansible/roles/masakari/defaults/main.yml | 6 +- ansible/roles/masakari/tasks/clone.yml | 8 +- ansible/roles/masakari/tasks/pull.yml | 12 +- ansible/roles/masakari/templates/masakari.conf.j2 | 1 + ansible/roles/memcached/defaults/main.yml | 4 +- ansible/roles/memcached/tasks/pull.yml | 13 +- ansible/roles/mistral/defaults/main.yml | 8 +- ansible/roles/mistral/tasks/pull.yml | 12 +- ansible/roles/monasca/defaults/main.yml | 23 +- ansible/roles/monasca/handlers/main.yml | 33 ++- ansible/roles/monasca/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/config.yml | 4 +- ansible/roles/monasca/tasks/pull.yml | 12 +- ansible/roles/monasca/tasks/upgrade.yml | 14 ++ .../monasca-agent-collector/agent-collector.yml.j2 | 2 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-agent-statsd/agent-statsd.yml.j2 | 2 +- .../monasca-thresh/monasca-thresh.json.j2 | 2 +- .../monasca/templates/monasca-thresh/storm.yml.j2 | 8 - ansible/roles/multipathd/defaults/main.yml | 2 +- ansible/roles/multipathd/tasks/pull.yml | 12 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/pull.yml | 12 +- ansible/roles/neutron/defaults/main.yml | 33 +-- ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/pull.yml | 12 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 2 + .../neutron/templates/linuxbridge_agent.ini.j2 | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- .../roles/neutron/templates/neutron-server.json.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 4 +- ansible/roles/nova-cell/defaults/main.yml | 27 ++- ansible/roles/nova-cell/tasks/config-host.yml | 2 +- .../roles/nova-cell/tasks/discover_computes.yml | 8 +- ansible/roles/nova-cell/tasks/loadbalancer.yml | 4 + ansible/roles/nova-cell/tasks/pull.yml | 12 +- ansible/roles/nova-cell/tasks/rabbitmq.yml | 4 +- ansible/roles/nova-cell/tasks/reload.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 4 +- ansible/roles/nova/defaults/main.yml | 8 +- ansible/roles/nova/tasks/pull.yml | 12 +- ansible/roles/nova/tasks/reload_api.yml | 1 + .../roles/nova/tasks/reload_super_conductor.yml | 1 + ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/defaults/main.yml | 10 +- ansible/roles/octavia/tasks/openrc.yml | 4 +- ansible/roles/octavia/tasks/prepare.yml | 2 +- ansible/roles/octavia/tasks/pull.yml | 12 +- ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/openvswitch/tasks/pull.yml | 12 +- ansible/roles/ovn/handlers/main.yml | 4 + ansible/roles/ovn/tasks/pull.yml | 12 +- ansible/roles/ovs-dpdk/defaults/main.yml | 6 +- ansible/roles/ovs-dpdk/tasks/config.yml | 1 + ansible/roles/ovs-dpdk/tasks/pull.yml | 12 +- ansible/roles/panko/defaults/main.yml | 2 +- ansible/roles/panko/tasks/pull.yml | 9 +- ansible/roles/placement/defaults/main.yml | 2 +- ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/placement/tasks/pull.yml | 12 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/host_os_checks.yml | 16 +- ansible/roles/prechecks/tasks/main.yml | 1 + ansible/roles/prechecks/tasks/package_checks.yml | 2 +- ansible/roles/prechecks/tasks/port_checks.yml | 4 +- ansible/roles/prechecks/vars/main.yml | 6 +- ansible/roles/prometheus/defaults/main.yml | 20 +- ansible/roles/prometheus/tasks/config.yml | 1 - ansible/roles/prometheus/tasks/pull.yml | 12 +- .../roles/prometheus/templates/prometheus.yml.j2 | 1 + ansible/roles/qdrouterd/defaults/main.yml | 2 +- ansible/roles/qdrouterd/tasks/precheck.yml | 2 +- ansible/roles/qdrouterd/tasks/pull.yml | 12 +- ansible/roles/qinling/defaults/main.yml | 4 +- ansible/roles/qinling/tasks/pull.yml | 12 +- ansible/roles/rabbitmq/defaults/main.yml | 6 +- ansible/roles/rabbitmq/tasks/precheck.yml | 4 +- ansible/roles/rabbitmq/tasks/pull.yml | 12 +- .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 2 +- ansible/roles/rally/defaults/main.yml | 2 +- ansible/roles/rally/tasks/pull.yml | 12 +- ansible/roles/redis/defaults/main.yml | 4 +- ansible/roles/redis/tasks/pull.yml | 12 +- ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/tasks/pull.yml | 12 +- ansible/roles/searchlight/defaults/main.yml | 4 +- ansible/roles/searchlight/tasks/pull.yml | 12 +- ansible/roles/senlin/defaults/main.yml | 8 +- ansible/roles/senlin/tasks/pull.yml | 12 +- .../roles/service-images-pull/defaults/main.yml | 7 + ansible/roles/service-images-pull/tasks/main.yml | 16 ++ ansible/roles/skydive/defaults/main.yml | 4 +- ansible/roles/skydive/tasks/pull.yml | 12 +- .../skydive/templates/skydive-analyzer.conf.j2 | 2 +- ansible/roles/solum/defaults/main.yml | 8 +- ansible/roles/solum/tasks/pull.yml | 12 +- ansible/roles/solum/templates/solum.conf.j2 | 2 +- ansible/roles/storm/defaults/main.yml | 4 +- ansible/roles/storm/tasks/pull.yml | 12 +- ansible/roles/swift/defaults/main.yml | 6 + ansible/roles/swift/tasks/pull.yml | 24 +++ ansible/roles/tacker/defaults/main.yml | 6 +- ansible/roles/tacker/tasks/pull.yml | 12 +- ansible/roles/telegraf/defaults/main.yml | 2 +- ansible/roles/telegraf/tasks/pull.yml | 12 +- ansible/roles/tempest/defaults/main.yml | 4 +- ansible/roles/tempest/tasks/pull.yml | 12 +- ansible/roles/tempest/templates/tempest.conf.j2 | 2 +- ansible/roles/trove/defaults/main.yml | 6 +- ansible/roles/trove/tasks/pull.yml | 12 +- ansible/roles/vitrage/defaults/main.yml | 10 +- ansible/roles/vitrage/tasks/pull.yml | 12 +- ansible/roles/vmtp/defaults/main.yml | 2 +- ansible/roles/vmtp/tasks/pull.yml | 12 +- ansible/roles/watcher/defaults/main.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 3 + ansible/roles/watcher/tasks/pull.yml | 12 +- ansible/roles/zookeeper/defaults/main.yml | 2 +- ansible/roles/zookeeper/tasks/pull.yml | 12 +- ansible/roles/zookeeper/templates/myid.j2 | 2 +- ansible/roles/zun/defaults/main.yml | 8 +- ansible/roles/zun/tasks/pull.yml | 12 +- ansible/site.yml | 17 ++ .../bootstrap-servers.rst | 2 + .../message-queues/external-rabbitmq-guide.rst | 53 +++++ .../reference/networking/neutron-extensions.rst | 12 +- .../orchestration-and-nfv/tacker-guide.rst | 27 +-- .../reference/storage/external-ceph-guide.rst | 13 +- etc/kolla/globals.yml | 34 ++- kolla_ansible/kolla_address.py | 2 +- ...k-exporter-scrape-timeout-af5dcd5d988ae12b.yaml | 4 + ...eus_support_on_cloudkitty-774e13e363e15a4b.yaml | 17 ++ .../notes/ansible-facts-4279741e84c03ce0.yaml | 10 + .../notes/bug-1808805-3ebd9b0edceff170.yaml | 13 ++ .../notes/bug-1848775-b0625b7586adac96.yaml | 8 + .../notes/bug-1927880-cc407f18f415bbd2.yaml | 6 + .../notes/bug-1933347-4031d94ef7decb3c.yaml | 5 + .../notes/bug-1933846-122a62e9724b638c.yaml | 5 + .../notes/bug-1934913-a8d436e3d0b950b4.yaml | 6 + .../notes/bug-1938549-e73042a61f0a5935.yaml | 10 + .../notes/bug-1939291-bf2e405d286e4b07.yaml | 6 + .../notes/bug-1939679-a31bc2093a4c0000.yaml | 5 + .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 + .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 + .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 ++ .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 + .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/bug-1949260-34d82ecd677dd8ff.yaml | 5 + ...ix-nova-api-log-file-name-9a377525e73012de.yaml | 7 + .../notes/cyborg-become-8453d941af536e91.yaml | 5 + .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 + .../notes/fix-neutron-vmware-4a8804399d47d8d7.yaml | 5 + ...-start-first-node-timeout-f9a6149cc68153a5.yaml | 10 + .../notes/image-pull-retries-75490c3e6e1e4b54.yaml | 9 + .../notes/linux-bridge-multi-fe8576616fb7d373.yaml | 6 + .../notes/manila-glance-4524ed1e9d488a60.yaml | 5 + .../notes/nova-ceph-user-53670f9ccc546225.yaml | 16 ++ .../ovn-neutron-dhcp-agent-21aaafe5e1cda501.yaml | 6 + ...educe-rabbit-busy-waiting-085433c822165eab.yaml | 13 ++ ...nd-optimise-image-pulling-4346d3c0840ee640.yaml | 4 + .../notes/security-log4j-1be047799f8e590a.yaml | 5 + .../notes/setup-module-args-c29e1815bbbe8aca.yaml | 8 + ...nic-template-for-keystone-1ee5f80fda7a21a0.yaml | 7 + tools/kolla-ansible | 2 +- zuul.d/jobs.yaml | 166 +++++++++++++++ zuul.d/nodesets.yaml | 22 ++ zuul.d/project.yaml | 22 ++ 284 files changed, 2119 insertions(+), 1267 deletions(-)

1 0

kolla 11.2.0 (victoria)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are amped to announce the release of: kolla 11.2.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.2.0 ^^^^^^ New Features ************ * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.* also on Debian. LP#1930867 [Debian] * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Other Notes *********** * CentOS images are now buildable using CentOS 8 Stream as a base. Changes in kolla 11.1.0..11.2.0 ------------------------------- d034341d5 Ensure nvme-cli is present in nova-compute images 2774e59ca nova-compute: trim image a bit on CentOS 0bc8f2a33 Add Swift lock path in Swift containers 49a5b7e55 cinder-volume/ubuntu: add lsscsi and nvme 8c9bcb0e7 [debian] Use upstream MariaDB 16b501fa8 Pin td-agent to 4.0.* also on Debian d2e8ebe7f [CI] Fix periodic publish of centos8 images d483339f3 [doc] Fix Ceph sources 01f0dae4c Unify curl options 3978b25cf monasca-thresh: Allow topology check and removal in storm 47ec54f77 CentOS Stream: update kolla-ansible Zuul jobs 2877c2c40 Add support for CentOS 8 Stream 865e3f1bb Improve offline build scenario. 1aba4e72a Add boto3 as s3 dependency for Glance container Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 12 +++ .zuul.d/centos.yaml | 111 +++++++++++++++++++++ .../monasca/monasca-thresh/topology_bootstrap.sh | 90 +++++++++++++++++ .../prometheus-alertmanager/Dockerfile.j2 | 2 +- .../prometheus-blackbox-exporter/Dockerfile.j2 | 2 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 2 +- .../Dockerfile.j2 | 2 +- .../prometheus-haproxy-exporter/Dockerfile.j2 | 2 +- .../prometheus-memcached-exporter/Dockerfile.j2 | 2 +- .../prometheus-mysqld-exporter/Dockerfile.j2 | 2 +- .../prometheus-node-exporter/Dockerfile.j2 | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/template/repos.yaml | 2 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 + .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++ .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 5 + .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 ++ .../fix-lock-swift-path-9b743367e4014f92.yaml | 5 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 + .../notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 + 48 files changed, 384 insertions(+), 57 deletions(-)

1 0

kayobe 11.0.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are psyched to announce the release of: kayobe 11.0.1: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 11.0.1 ^^^^^^ Bug Fixes * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. Changes in kayobe 11.0.0..11.0.1 -------------------------------- 846e9c92 docs: Improve all-in-one scenario 94e345e4 Document seed_enable_snat fde9b65c CI: Use correct TD agent repository version b01173b1 Fix installation prefix detection 8e6a66bf CI: always return host configure test results Diffstat (except docs and test files) ------------------------------------- .../configuration/scenarios/all-in-one/index.rst | 83 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 156 +++++++++++++++++---- kayobe/utils.py | 9 +- .../overrides.yml.j2 | 2 +- .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + 8 files changed, 233 insertions(+), 61 deletions(-)

1 0

kayobe 10.1.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are jazzed to announce the release of: kayobe 10.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Adds support for configuring apt's proxy setting for Ubuntu hosts. See story 2009035 (https://storyboard.openstack.org/#!/story/2009035) for details. * Adds a new "kolla_bifrost_use_firewalld" variable used to define whether Bifrost uses firewalld, which is now disabled by default. * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Bifrost is now configured to avoid using firewalld, to prevent conflicts with firewall rules set by Kayobe on the seed host. The existing behaviour can be retained by setting "kolla_bifrost_use_firewalld" to "True" in "bifrost.yml". Bug Fixes ********* * Prevents Bifrost from using firewalld to avoid conflicts with firewall rules set by Kayobe on the seed host. See story 2009252 for more details. * Sets proxy option when using "dnf" during user bootstrapping, before "dnf.conf" is updated. This allows Kayobe to install Python 3 during host configuration when "dnf" requires a proxy to operate. * Fixes an issue bug where introspection data save would fail. See story 2009129 for more details. * Fixes an issue with configuration validation when no public API network is in use. See story 2009134 for details. * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. * Fixes an issue with systemd-networkd MTU mismatch in veth pair on Ubuntu. See story 2009072 for details. Changes in kayobe 10.0.1..10.1.0 -------------------------------- 45875477 docs: Improve all-in-one scenario bf7ef2ae Fix installation prefix detection 4a76d800 CI: always return host configure test results fb86cd16 CI: enable DNF tests on CentOS Stream 8 e0133df2 Set proxy option in early dnf invocation a5c2a24a Remove stale config dump from seed hypervisor host configure 27712155 CI: Disable heat in upgrade jobs to save disk space c24fcca8 Add the missing documentation for mariadb recovery adb52541 Prevent Bifrost from using firewalld 7fbc1a3e Fix IPA builder version typo 929ae0ab Fix wrong filename in bifrost docs 2164c6b2 Add support for apt proxy setting 0854692a CI: Fix bashate ignores 367c6bc0 Make setup module arguments configurable fc638e4e CI: Disable libvirt debug logs b6cc4c52 Add missing quotes to Docker registry TLS example 00ca1ecf CI: Log disk usage details 39381ad3 Sync documentation with kolla_openstack_custom_config 6e480612 Fix typo in IP allocation filename 0233ddb1 Use ansible_facts to reference facts a2e980d1 CI: Fix get_logs.sh docker logs output 6b6485a6 Allow passing arguments to dev/environment-setup.sh a906d26f Fix overcloud introspection data save ac094088 Fix configuration check without public API network bf470af5 docs: fix heading styles in upgrading page fb56c037 Fix documentation links for routed control plane networks 39fbb063 Add twentyFiveGigE to port descriptions in inspector rules e14231c8 dnf: add metalink argument to custom dnf repository 27ccf48f Sync Kolla Ansible feature flags af6495fa Ubuntu: Set MTU for veth in the network files 9ca07b85 Use stream8 images with molecule 69d2b648 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/apt.yml | 12 ++ ansible/compute-node-discovery.yml | 4 +- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/apt | 6 + ansible/group_vars/all/bifrost | 4 + ansible/group_vars/all/globals | 11 ++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/idrac-bootstrap.yml | 4 +- ansible/kayobe-ansible-user.yml | 6 +- ansible/kayobe-target-venv.yml | 22 +-- ansible/kolla-ansible.yml | 4 +- ansible/kolla-target-venv.yml | 12 +- ansible/network.yml | 2 +- ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/public-openrc.yml | 2 +- ansible/roles/apt/defaults/main.yml | 12 ++ ansible/roles/apt/tasks/main.yml | 17 +++ ansible/roles/apt/templates/01proxy.j2 | 8 + ansible/roles/bootstrap/tasks/main.yml | 8 +- ansible/roles/dev-tools/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 6 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 4 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 16 +- .../roles/kolla-ansible/templates/globals.yml.j2 | 4 + ansible/roles/kolla-ansible/vars/main.yml | 1 - .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 + .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/molecule.yml | 4 +- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 18 +-- ansible/roles/network-redhat/tasks/main.yml | 2 + ansible/roles/ntp/tasks/prepare.yml | 4 +- ansible/roles/pip/tasks/pip_conf.yml | 4 +- ansible/roles/snat/tasks/main.yml | 4 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/roles/swift-block-devices/tasks/main.yml | 4 +- ansible/roles/veth/tasks/main.yml | 2 +- ansible/roles/wipe-disks/tasks/main.yml | 4 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +- ansible/snat.yml | 4 +- ansible/time.yml | 2 +- dev/environment-setup.sh | 7 +- dev/functions | 2 +- dev/tenks-deploy-config-compute.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 4 +- .../reference/routed-control-plane-networks.rst | 8 +- .../configuration/scenarios/all-in-one/index.rst | 83 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 162 +++++++++++++++++---- etc/kayobe/apt.yml | 6 + etc/kayobe/bifrost.yml | 6 +- etc/kayobe/globals.yml | 11 ++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 1 - kayobe/ansible.py | 1 + kayobe/cli/commands.py | 32 ++-- kayobe/plugins/filter/networkd.py | 14 +- kayobe/utils.py | 9 +- playbooks/kayobe-base/pre.yml | 14 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + .../add-apt-proxy-support-f688702868095ed0.yaml | 6 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++ .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + ...ix-precheck-no-public-net-c0db9168063b6203.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++ .../notes/story-2009072-57e5d079e182e763.yaml | 6 + .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + requirements.yml | 30 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + tools/run-bashate.sh | 2 +- 107 files changed, 835 insertions(+), 262 deletions(-)

1 0

kolla-ansible 12.3.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are pumped to announce the release of: kolla-ansible 12.3.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.3.0 ^^^^^^ New Features ************ * Adds a new variable, "disable_firewall", which defaults to "true". If set to "false", then the host firewall will not be disabled during "kolla-ansible bootstrap-servers". * Implements container healthchecks for keystone-fernet container. See blueprint * Implements container healthchecks for memcached services. See blueprint * Implements container healthchecks for nova-spicehtml5proxy service. See blueprint * Adds two new arguments to the "kolla-ansible" command, "--check" and "--diff". They are passed through directly to "ansible- playbook". * Adds "manila_cephfs_filesystem_name" variable to support multi-fs Ceph Pacific+ deloyments. Upgrade Notes ************* * To fix LP#1941940, "nova_libvirt_dimensions" now by default combines with "nova_libvirt_default_dimensions". Please consider this when customising that variable. Security Issues *************** * Fixes "net.ipv4.ip_forward" not to be enabled by Kolla Ansible on the default network namespace. It was enabled on hosts with Neutron L3 Agent (thus in most common setups with OVS and/or Linux Bridge, but not OVN) and allowed, unless users had extra iptables rules to avoid that, any traffic to be accepted for forwarding (as long as it was routable and passed other checks). Users of existing setups are advised to re-evaluate whether they need this sysctl enabled and disable if not necessary. Kolla Ansible will simply no longer try to set this sysctl at all. Neutron L3 Agent handles forwarding enablement per managed namespace. LP#1945453 * Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE) Vulnerability in Elasticsearch - CVE-2021-44228. Bug Fixes ********* * Fixed broken "kolla-toolbox" container when RabbitMQ is disabled and IPv6 is used. LP#1939883 * Fixes inability to attach devices (e.g., volumes via iSCSI/FC) to instances on Debian Bullseye. LP#1941940 * Fixes "mariadb-clustercheck" not to run when there is no HAProxy. LP#1944114 * No longer creates directories for haproxy and swift logs where they are not needed. LP#1945070 * Fixes an issue with multinode MariaDB deployments which could fail the playbook execution on WSREP check due to the new behaviour of Galera 4. LP#1947485. * Fixes an issue on Debian with single node MariaDB deployments with HAProxy disabled. See bug 1947534 for details. * Fixes the generation of "wsrep_cluster_address" in "galera.cnf" when "--limit" is used while deploying MariaDB nodes. LP#1947589 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fix octavia role doesn't set the amphora network's gateway_ip LP#1949260 * Only run "configure ovn in ovsdb" task on ovn-controller hosts The task will fail on hosts (like controller nodes) without tunnel interface LP#1953367 * Fixes an issue where the Nova API logs were written to files ending with *-wsgi.log* which affected the processing of these logs in the Fluentd pipeline. LP#1950185 * On slower nodes, the initial grafana startup could experience a timeout failure when the migrations for setting up the database took longer than expected. This has been fixed by increasing the default timeout. The timeout settings can be changed via new parameters "grafana_start_first_node_delay" and "grafana_start_first_node_retries" for the "grafana" role. LP#1769962 * Removes "fix_cephfs_owner.yaml" which related to pre-wallaby Manila's use of subfolders. Post-wallaby Manila now uses cephfs volumes instead, as such this file is no longer required. LP#1938285 LP#1935784 * Removes use of "cephfs_enable_snapshots" in Manila config as this option was removed from Manila in the Wallaby release. Changes in kolla-ansible 12.2.0..12.3.0 --------------------------------------- 3a212faef Added upgrade note for separate nova and cinder keys. 4af71d367 [docs] Mark init-runonce properly b30b42c63 ovn: configure ovn in ovsdb only on ovn-controller hosts f35e44aaf [Security] Add log4j vulnerability mitigation in Elasticsearch d7ebe7c24 Bump timeout for grafana startup 331167403 docs: Manila CephFS Driver in Wallaby upgrade note 69810fd42 Fix monasca-thresh upgrade a4c46d86f docs: stop installing kolla in quickstart a1e7fa276 CI: Test minimum and maximum supported ansible versions bf7f20932 Specify log file name for Nova API 4e07d6cb7 Replace auth_uri with www_authenticate_uri b6f28ee2e docs: Install openstack-client with upper constraints 35d8edca0 Remove unexpected } c3c8448b7 haproxy: remove unused tls check condition in config 9a9b609a6 docs: Get release name dynamically e6827412c docs: Parameterize kolla-ansible version and branch edb88e6c3 Stop creating unused cron/logrotate directory c6a04b0f2 docs: Fix python-openstackclient package name and init-runonce path 951a25fac Fix octavia doesn't set subnet gateway_ip c6b27b2a8 mariadb: use add_host to include inactive hosts in shard grouping cea9a84cf Fix broken deploy of placement service 295e86f08 Fix missing Ansible version in the error message 1a1fb8643 mariadb: Do not use wsrep-notify.sh on Debian a61d4e721 docs: Improve info about neutron external interface 94627f1c8 Update Manila deploy steps for Wallaby 8109217a7 [mariadb] Start new nodes serially 1feabf70b Add support for Ironic inspection through DHCP-relay ee32a10a7 Trivial fix shebang in keystone's fernet-node-sync.sh.j2 b9c88463f Correctly create the dhcp_agent.ini and l3_agent.ini 9c4887ae6 Do not set net.ipv4.ip_forward sysctl 229e3f41a Add check and diff options to kolla-ansible 297d1bee2 Do not create haproxy and swift log dirs needlessly b621fd827 Docs: Update to opendev.org domain b08c32e40 Do not enable mariadb-clustercheck when not needed f0169774d Do not become root when searching for custom prometheus alert rules files 3cbb45aeb CI: monasca: ignore exited monasca_thresh container 2ca82dac6 CI: stop setting ceph_nova_user 29d11508d Add disable_firewall variable 3e954e33a Fix neutron upgrade using host limit without controllers 62328e7d8 [CI] Test instance health after upgrade 7c268ee65 Bump libvirtd memlock ulimit dbe94d5fa Zun: Temporarily skip capsule test for ubuntu a42d09d46 Fix kolla-toolbox with IPv6 and disabled RabbitMQ 3bbf1a80b Use Docker healthchecks for memcached services 61917194c Use Docker healthchecks for keystone-fernet container 7755ef65d Use Docker healthchecks for nova-spicehtml5proxy service Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 + ansible/roles/baremetal/defaults/main.yml | 3 + ansible/roles/baremetal/tasks/install.yml | 56 ++++++----- ansible/roles/common/tasks/config.yml | 3 +- .../common/templates/conf/output/00-local.conf.j2 | 4 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- ansible/roles/elasticsearch/defaults/main.yml | 2 +- ansible/roles/grafana/defaults/main.yml | 3 + ansible/roles/grafana/handlers/main.yml | 4 +- .../roles/haproxy/templates/haproxy_main.cfg.j2 | 2 - ansible/roles/keystone/defaults/main.yml | 14 +++ ansible/roles/keystone/tasks/config.yml | 1 + .../keystone/templates/fernet-healthcheck.sh.j2 | 6 ++ .../keystone/templates/fernet-node-sync.sh.j2 | 32 +++--- ansible/roles/keystone/templates/fernet-push.sh.j2 | 16 +++ .../keystone/templates/keystone-fernet.json.j2 | 6 ++ ansible/roles/manila/defaults/main.yml | 7 ++ ansible/roles/manila/tasks/deploy.yml | 5 - ansible/roles/manila/tasks/fix_cephfs_owner.yml | 85 ---------------- .../roles/manila/templates/manila-share.conf.j2 | 8 +- ansible/roles/mariadb/defaults/main.yml | 11 +-- ansible/roles/mariadb/handlers/main.yml | 6 ++ ansible/roles/mariadb/tasks/config.yml | 1 + ansible/roles/mariadb/tasks/main.yml | 6 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 2 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 2 +- ansible/roles/memcached/defaults/main.yml | 14 +++ ansible/roles/memcached/handlers/main.yml | 1 + ansible/roles/memcached/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/upgrade.yml | 1 + ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 2 + ansible/roles/nova-cell/defaults/main.yml | 26 ++++- ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/tasks/prepare.yml | 2 +- ansible/roles/ovn/tasks/bootstrap.yml | 1 + ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/prometheus/tasks/config.yml | 1 - .../bootstrap-servers.rst | 2 + .../reference/networking/neutron-extensions.rst | 10 ++ .../reference/networking/provider-networks.rst | 21 ---- .../orchestration-and-nfv/tacker-guide.rst | 27 ++--- .../reference/storage/external-ceph-guide.rst | 14 +++ etc/kolla/globals.yml | 9 +- .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 ++ .../notes/bug-1941940-c63265ea6ea2f594.yaml | 11 +++ .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 ++ .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 +++ .../notes/bug-1947485-d059864252fb1813.yaml | 7 ++ .../notes/bug-1947534-bf3b5ed19473015f.yaml | 6 ++ .../notes/bug-1947589-52e7a6fa5d82e7fa.yaml | 6 ++ .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 ++ .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/bug-1949260-34d82ecd677dd8ff.yaml | 5 + .../notes/bug-1953367-61591a7f3ecf28ce.yaml | 7 ++ ...ix-nova-api-log-file-name-9a377525e73012de.yaml | 7 ++ .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 ++ ...-start-first-node-timeout-f9a6149cc68153a5.yaml | 10 ++ ...hecks-for-keystone-fernet-a63033e2b95ecb2f.yaml | 6 ++ ...ealthchecks-for-memcached-807b9036c3c92596.yaml | 6 ++ ...-for-nova-spicehtml5proxy-a9cf93c15c0a8966.yaml | 6 ++ .../notes/kolla-ansible-diff-50de16722aa155dc.yaml | 5 + .../notes/security-log4j-1be047799f8e590a.yaml | 5 + .../support-manila-wallaby-2e29e866af0d6287.yaml | 15 +++ tools/kolla-ansible | 20 +++- 84 files changed, 691 insertions(+), 279 deletions(-)

1 0