November 2023 - Release-announce - lists.openstack.org

glance-store 4.3.2 (antelope)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We are delighted to announce the release of: glance-store 4.3.2: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance-store Download the package from: https://pypi.org/project/glance-store Please report issues through: https://bugs.launchpad.net/glance-store/+bugs For more details, please see below. 4.3.2 ^^^^^ New Features * The RBD driver now moves images to the trash if they cannot be deleted immediately due to having snapshots. This fixes the long- standing issue where base images are unable to be deleted until/unless all snapshots of it are also deleted. Moving the image to the trash allows Glance to proceed with the deletion of the image (as far as it is concerned), mark the RBD image for deletion, which will happen once the last snapshot that uses it has been deleted. Changes in glance-store 4.3.1..4.3.2 ------------------------------------ aae8199 RBD: Trash image when snapshots prevent deletion d68a842 Do not always import boto3 4f4de23 Update 'extras' for cinder driver Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/rbd.py | 21 ++++++------ glance_store/_drivers/s3.py | 21 +++++++++--- .../rbd-trash-snapshots-158a39da4248fb0c.yaml | 10 ++++++ setup.cfg | 2 +- 6 files changed, 78 insertions(+), 27 deletions(-)

1 0

kolla 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We exuberantly announce the release of: kolla 15.3.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 15.3.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 15.2.0..15.3.0 ------------------------------- 199ebafeb Fix missing grafana opensearch datasource 2b7711570 Fix an issue with zun-cni-daemon building images in aarch64 8498b43c1 ubuntu: mark collectd and telegraf as buildable d7425533c CI: Fix zuul config errors 81b9a7aab Revert "bifrost: mark unbuidable for Ubuntu" d67fd2fcb rabbitmq: Use novemberain repos for Debian/Ubuntu 8558004ab Improve kolla-toolbox offline support. 1d5e1a391 Revert "Disable build of Gnocchi containers" 81dd5d66d Add server-status handler to Rocky/Centos Apache conf 3684f67fe Add comprehensive checks for container restarts a8138eb10 docs: we moved UNBUILDABLE_IMAGES to separate file 3e2afe2f6 Add support for running Nova upgrade checks 9b612fa23 CI: Add rocky9 experimental jobs Diffstat (except docs and test files) ------------------------------------- .zuul.d/rocky.yaml | 21 +++++++ .zuul.d/ubuntu.yaml | 42 ++----------- kolla/common/sources.py | 2 +- kolla/image/unbuildable.py | 10 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 10 +-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 19 files changed, 182 insertions(+), 64 deletions(-)

1 0

kolla 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are stoked to announce the release of: kolla 16.2.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.2.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 16.1.0..16.2.0 ------------------------------- 9ee9677f9 Fix missing grafana opensearch datasource 0e6676cb0 rabbitmq: Use novemberain repos for Debian/Ubuntu bbe79d1be Fix stderr logging when image build fail 78c62dacd ubuntu: mark collectd and telegraf as buildable 47e3d894a Improve kolla-toolbox offline support. 2da6ceab7 Revert "Disable build of Gnocchi containers" 902a84693 Add server-status handler to Rocky/Centos Apache conf 288a400db Add comprehensive checks for container restarts ba8b1ff29 docs: we moved UNBUILDABLE_IMAGES to separate file cad045b26 rabbitmq: Fix repo for ubuntu aarch64 Diffstat (except docs and test files) ------------------------------------- kolla/common/sources.py | 2 +- kolla/image/tasks.py | 9 ++- kolla/image/unbuildable.py | 9 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 12 ++-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 15 files changed, 157 insertions(+), 27 deletions(-)

1 0

kolla-ansible 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are psyched to announce the release of: kolla-ansible 15.3.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.3.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Before upgrading to the Zed release of Kolla-Ansible on Ubuntu, ensure that Elasticsearch indexes created in version 6 or earlier are reindexed. OpenSearch 2.x does not support these older indexes. A precheck for this scenario has now been introduced. * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. * When upgrading Nova to a new release, we use the tool "nova-status upgrade check" to make sure that there are no "nova-compute" that are older than N-1 releases. This was performed using the current "nova-api" container, so computes which will be too old after the upgrade were not caught. Now the upgraded "nova-api" container image is used, so older computes are identified correctly. LP#1957080 Changes in kolla-ansible 15.2.0..15.3.0 --------------------------------------- 6ba7fd279 Rename per role filters files a5e1eb965 Default keystone user role changed to member e5b102696 Add ML2/OVN and ML2/OVS setting checks for neutron 741808ca6 Add option for extra kernel modules in neutron role 2f8cffee2 CI: add block support to validate-all-file.py 0fe42b26a README: link to the meetings page directly 9c5a47d5c keystone: ensure bool for two parameters 944f93a5e Configure Nova libvirt.num_pcie_ports to 16 by default 5c4c3aefc ovn: Fix broken deployment/reconfig on Ubuntu 4fb7ebdc5 CI: Remove redundant set/unset_cirros_image_q35_machine_type 1b44dde7b Prevent libvirtd reload when only generating config 3dc9fe1a8 CI: add q35 hardware machine type to tests 03db998f6 ovn: Improve clustering 48b570cb8 Fix designate-producers not running properly 139c872af Added precheck for OpenSearch migration bc9f36893 Use better default bind address for ironic-tftp 916587d6b Fix D001 Line too long in mariadb-guide 309aebc97 Fixes WEBSSO_KEYSTONE_URL Value d0c53de28 Drop useless DUMMY_ENVIRONMENT environment for cron container 4e2bebbc0 Fixes task name in notify module to the actual task name 35cabb263 Use the upgraded image to run Nova upgrade checks a73d8110e CI: Add missing Rocky9 upgrade jobs f381fb548 Deny access to public /server-status in http Openstack services 077455734 Enable nova libvirt driver skip_cpu_compare_on_dest workaround 511007f71 Fix OpenSearch Dashboards health check 993b854bb loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/nova/tasks/upgrade.yml | 55 +++++++-- ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 27 +++++ ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- .../central-logging-guide.rst | 6 + releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 11 ++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...hecks-with-upgraded-image-dca9c515bcd89ec8.yaml | 10 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ tools/validate-all-file.py | 67 +++++++---- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 31 +++++ zuul.d/project.yaml | 4 + 62 files changed, 782 insertions(+), 75 deletions(-)

1 0

kolla-ansible 14.10.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are satisfied to announce the release of: kolla-ansible 14.10.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.10.0 ^^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Influxdb variable "infuxdb_internal_endpoint" has been fixed to "influxdb_internal_endpoint". Operators might need to review the relevant variable. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. Changes in kolla-ansible 14.9.0..14.10.0 ---------------------------------------- 87449416c Default keystone user role changed to member ed95bb779 kolla_address: check correct error return value f59edacf4 Add ML2/OVN and ML2/OVS setting checks for neutron 967354e48 CI: Drop upgrade jobs since Xena is EOL b073d2038 Add option for extra kernel modules in neutron role 2ae7698dc CI: add block support to validate-all-file.py a05e5908c README: link to the meetings page directly 2f47802ae keystone: ensure bool for two parameters 401a39f52 Configure Nova libvirt.num_pcie_ports to 16 by default 5bc5fe364 ovn: Fix broken deployment/reconfig on Ubuntu 6186a0a6d CI: Remove redundant set/unset_cirros_image_q35_machine_type a71eced1d Prevent libvirtd reload when only generating config d74917e69 CI: add q35 hardware machine type to tests c3d64ce56 [yoga only] followup ovn clustering fix 2d89909d9 Fix typo in endpoint influxdb_internal_endpoint variable d626c02fb ovn: Improve clustering bc13da0f7 Fix designate-producers not running properly aa6388b36 Use better default bind address for ironic-tftp 3bcfba581 Added precheck for OpenSearch migration 3b17c915a opensearch-dashboard: fix permissions 13b4487f2 Fix D001 Line too long in mariadb-guide d75e96f92 Drop useless DUMMY_ENVIRONMENT environment for cron container 634e0304c Remove incorrect variable from OpenSearch role 893b80627 Deny access to public /server-status in http Openstack services ffdea86ee Enable nova libvirt driver skip_cpu_compare_on_dest workaround fc398d5fe Add documentation for migrating from CS8 to RL9 328f62ddd Fix OpenSearch Dashboards health check 3dc458d1f Correct [pci] syntax in Nova SRIOV documentation 3e6d412a1 opensearch: alter path after using rpm/deb packaging Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 7 +- ansible/library/kolla_container_volume_facts.py | 84 +++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/opensearch-migration.yml | 27 +++ ansible/roles/common/defaults/main.yml | 2 - .../roles/designate/templates/designate.conf.j2 | 1 - ansible/roles/grafana/defaults/main.yml | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/neutron/defaults/main.yml | 7 + ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 33 ++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 2 - .../templates/opensearch-dashboards.json.j2 | 19 +- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 ++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 130 ++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- .../central-logging-guide-opensearch.rst | 6 + kolla_ansible/kolla_address.py | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2020152-165c87048d92dedb.yaml | 5 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 + ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 ++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 5 + ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 + .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 + ...e-wrong-influxdb-variable-8a93d8fda8dce926.yaml | 6 + .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 + tools/validate-all-file.py | 67 ++++--- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 8 +- zuul.d/nodesets.yaml | 34 ++++ zuul.d/project.yaml | 13 -- 64 files changed, 921 insertions(+), 92 deletions(-)

1 0

kayobe 12.9.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kayobe 12.9.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.9.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. For CentOS Stream 8 and Rocky Linux 8 enabling STP is not supported. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 12.8.0..12.9.0 -------------------------------- 3282cda6 Fix MTU of NetworkManager bridge VLAN interfaces b0832bf1 Bump MichaelRigart.interfaces to v1.14.4 c6d08295 Add option to skip kolla docker registry login f609ae27 bifrost: Populate bifrost host vars on deprovision 8e93ecc9 Add introspection rule to update deploy kernel location 390fbf1d Fix data file path detection with new pip b0f8d4fb Remove upgrade jobs following Xena EOL 0582864d Speed up calls to Bifrost 3794929b CI: fetch systemd configuration including kolla-generated unit files 967c4bef Add STP option for bridge interfaces 4132c190 Fix for seed-containers being unable to use password protected registry b9b2e71d Fix CentOS / Rocky route options ca362a92 docs: Add a warning on creating network loops 0a284020 Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/group_vars/all/bifrost | 5 +- ansible/group_vars/all/inspector | 12 ++++ ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 + ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 +++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../reference/seed-custom-containers.rst | 23 ++++++++ etc/kayobe/bifrost.yml | 3 + kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 + kayobe/plugins/filter/networks.py | 66 +++++++++++++++++++++- kayobe/utils.py | 25 ++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 13 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 ++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 ++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 +++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 +++++++ requirements.txt | 1 + requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 38 files changed, 301 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bab4725e..c5be19e9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ cliff>=3.1.0 # Apache +importlib-metadata;python_version<'3.8' # Apache-2.0

1 0

kayobe 14.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are thrilled to announce the release of: kayobe 14.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.2.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Kolla Ansible inventories in the Kayobe configuration are now passed through without modification. Previously, only "group_vars" were passed through. When using multiple environments, the Kolla inventory from the base configuration layer **and** the Kolla inventory from the Kayobe environment layer will be passed through. The inventory from the environment takes precedence over the inventory from the base layer. This allows you to put any shared configuration in the base layer. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * As Kolla Ansible inventories are now passed through without modification, the inventory directory in Kayobe configuration ("etc/kayobe/kolla/inventory/") must be a valid Ansible inventory, although "*.j2" files used as Kolla Ansible inventory templates are ignored. For cases where only "group_vars" or "hosts_vars" are required, a blank inventory file in the same directory may be used. * It is no longer possible to create an environment named "kayobe". This is reserved for internal use. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 14.1.0..14.2.0 -------------------------------- 6e2a551f Fix MTU of NetworkManager bridge VLAN interfaces 94e79f9f Bump MichaelRigart.interfaces to v1.14.4 8b433cc0 Add option to skip kolla docker registry login 7825b287 bifrost: Populate bifrost host vars on deprovision 9a5a3b58 Add introspection rule to update deploy kernel location 16a993be Use importlib.metadata instead of importlib_metadata a44f0636 Fix data file path detection with new pip 6ec4e8a5 Complete Skydive removal and Skyline addition 5a82ecb0 Fix firewalld configuration for monitoring hosts c7aaecfc Speed up calls to Bifrost ebdf4935 CI: fetch systemd configuration including kolla-generated unit files ad4fc2a3 Fix for seed-containers being unable to use password protected registry 62481994 Fix CentOS / Rocky route options d2b1fcaf Add STP option for bridge interfaces 68bdfcec docs: Add a warning on creating network loops 4c09f11b Pass through kolla inventories as is Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/all/kolla | 8 ++-- ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/kolla-ansible.yml | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/kolla-ansible/defaults/main.yml | 8 +++- ansible/roles/kolla-ansible/tasks/config.yml | 56 ++++++++++++++++++---- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 4 ++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../configuration/reference/kolla-ansible.rst | 19 +++++++- .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/ansible.py | 5 ++ kayobe/cli/commands.py | 3 +- kayobe/kolla_ansible.py | 54 ++++++++++++++------- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 50 ++++++++++++++++++- kayobe/utils.py | 22 +++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ultiple-kolla-inventories-65fd7a4922c639c5.yaml | 21 ++++++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ 53 files changed, 578 insertions(+), 70 deletions(-)

1 0

kolla 14.11.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are happy to announce the release of: kolla 14.11.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.11.0 ^^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Fixes an issue with Elasticsearch curator not working due to too new python elasticsearch-curator library not compatible with Elasticsearch version 7. LP#2028048 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 14.10.0..14.11.0 --------------------------------- 8304b9456 Fix missing grafana opensearch datasource 83987b16a Fix an issue with zun-cni-daemon building images in aarch64 26de85f2f [yoga-only]: Fix erlang versions 06f9ddef8 rabbitmq: Use novemberain repos for Debian/Ubuntu 1f11f5c23 [yoga-only]: Fix kolla-toolbox after Galaxy migration c2be45ca1 CI: Drop upgrade jobs since Xena is EOL 0cdce9f77 Improve kolla-toolbox offline support. 0353c51c6 Add comprehensive checks for container restarts feed9d87f Revert "Disable build of Gnocchi containers" c90d4a208 Add server-status handler to Rocky/Centos Apache conf a76d93dfb Pin iptables to 1.8.4 in Centos Stream 8 aadc29061 Pin elasticsearch-curator==5.8.4 a3367db6b CI: Add rocky9 experimental jobs 7a30d4d76 opensearch-dashboards: Fix permissions 23e0819d6 opensearch: move to yum/apt repos ca472c5f7 Pin setuptools=67.2.* ce2b14e5a Use erlang-25 from copr on aarch64 9cdee8398 ovsdpdk: add libdpdk-dev d49cca549 rabbitmq: use erlang-25 ppa on Debian/Ubuntu Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 4 - .zuul.d/debian.yaml | 2 - .zuul.d/rocky.yaml | 21 ++++ .zuul.d/ubuntu.yaml | 10 +- ...rences.debian => apt_preferences.debian.x86_64} | 2 +- ...rences.ubuntu => apt_preferences.ubuntu.x86_64} | 2 +- .../elasticsearch-curator/Dockerfile.j2 | 2 +- .../opensearch/opensearch-dashboards/Dockerfile.j2 | 32 +++--- .../opensearch-dashboards/extend_start.sh | 8 +- kolla/common/config.py | 6 +- kolla/image/build.py | 2 - kolla/template/methods.py | 4 + kolla/template/repos.yaml | 110 +++++++++++++++------ .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 + ...x-elasesticsearch-curator-f2f154dc707d15bd.yaml | 7 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 + ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 35 files changed, 402 insertions(+), 104 deletions(-)

1 0

kayobe 13.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are jazzed to announce the release of: kayobe 13.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 13.2.0..13.3.0 -------------------------------- 790427f8 Fix MTU of NetworkManager bridge VLAN interfaces bacab88a Bump MichaelRigart.interfaces to v1.14.4 0638862a Add option to skip kolla docker registry login a1a1f8d3 bifrost: Populate bifrost host vars on deprovision cd0bdbdd Add introspection rule to update deploy kernel location 8b7b8e37 Revert "CI: Disable bare metal testing on RL9/c9s" a1fc1b43 CI: Enable Ubuntu jobs again d773ed56 Use importlib.metadata instead of importlib_metadata 77a0e36f Fix data file path detection with new pip 16c10d12 Fix firewalld configuration for monitoring hosts 0cb8a93e Speed up calls to Bifrost 3e3b41cc CI: fetch systemd configuration including kolla-generated unit files fbe1bd4f Fix for seed-containers being unable to use password protected registry 3abfeb27 Fix CentOS / Rocky route options b0f5e013 Add STP option for bridge interfaces e00f9cad docs: Add a warning on creating network loops abff761c Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + ...tenks-deploy-config-compute-libvirt-on-host.yml | 6 +++ dev/tenks-deploy-config-compute.yml | 6 +++ .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 60 ++++++++++++++++++++-- kayobe/utils.py | 22 ++++++++ playbooks/kayobe-overcloud-base/run.yml | 2 - .../overrides.yml.j2 | 2 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 4 -- .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 42 files changed, 296 insertions(+), 34 deletions(-)

1 0

kolla-ansible 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kolla-ansible 16.2.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Supports Debian Bookworm (12) as host distribution. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. Changes in kolla-ansible 16.1.0..16.2.0 --------------------------------------- 9f32dada6 Rename per role filters files d3bab163d Default keystone user role changed to member c40fc0dbc Add ML2/OVN and ML2/OVS setting checks for neutron 2569a69ff Add option for extra kernel modules in neutron role d40d59f3f README: link to the meetings page directly 82898bff2 keystone: ensure bool for two parameters fc7ed97d5 Configure Nova libvirt.num_pcie_ports to 16 by default 319da0050 ovn: Fix broken deployment/reconfig on Ubuntu aa6202d88 CI: Remove redundant set/unset_cirros_image_q35_machine_type 7f208d9d5 Prevent libvirtd reload when only generating config aaaeb3e90 debian: fix some debian jobs 2e6644719 CI: add q35 hardware machine type to tests f848b81c2 CI: add block support to validate-all-file.py ff1d9dd17 senlin: add missing cafile parameter fdcb72b38 ovn: Improve clustering 12cf8bd17 Fix designate-producers not running properly 9c689f21e Use better default bind address for ironic-tftp c3541ad72 Fix D001 Line too long in mariadb-guide 13b8f90be Fixes WEBSSO_KEYSTONE_URL Value 764bbf6ef Drop useless DUMMY_ENVIRONMENT environment for cron container 6955f956f Fixes task name in notify module to the actual task name 404dc0d4a debian: Add Bookworm Host OS support a5addd825 systemd: handle running container without systemd unit 68f610f8b CI: bump ansible version in linter b5b2951c2 update ansible version 817d92fa3 Deny access to public /server-status in http Openstack services 06016233c Enable nova libvirt driver skip_cpu_compare_on_dest workaround b10e7dbe8 Fix OpenSearch Dashboards health check dfa1f83c2 Fix the fluentd regexp to collect the logs 739fb69cc opensearch: alter path after using rpm/deb packaging 3aaf78659 Trivial: Add deploy-containers for skyline 8d5356268 loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/module_utils/kolla_docker_worker.py | 7 +- ansible/module_utils/kolla_systemd_worker.py | 13 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../common/templates/conf/input/00-global.conf.j2 | 4 +- .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + .../templates/opensearch-dashboards.json.j2 | 14 +-- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- ansible/roles/prechecks/vars/main.yml | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/skyline/tasks/deploy-containers.yml | 2 + lint-requirements.txt | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + .../debian-bookworm-host-08840d78c88742d3.yaml | 4 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ test-requirements.txt | 2 +- tools/validate-all-file.py | 72 ++++++----- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 51 +++++++- zuul.d/nodesets.yaml | 22 ++++ zuul.d/project.yaml | 23 ++-- 74 files changed, 784 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 0f255aa34..89cb54276 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -1 +1 @@ -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3 diff --git a/test-requirements.txt b/test-requirements.txt index 76b4eba12..c16a76461 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3

1 0