July 2023 - Release-announce - lists.openstack.org

XStatic-Angular-lrdragndrop 1.0.2.5
by no-reply＠openstack.org 18 Jul '23

18 Jul '23

We are happy to announce the release of: XStatic-Angular-lrdragndrop 1.0.2.5: Angular-lrdragndrop 1.0.2 (XStatic packaging standard) The source is available from: https://opendev.org/openstack/XStatic-Angular-lrdragndrop Download the package from: https://pypi.org/project/XStatic-Angular-lrdragndrop For more details, please see below. Changes in XStatic-Angular-lrdragndrop 1.0.2.4..1.0.2.5 ------------------------------------------------------- fbbb6e2 Update event handling code for compatibility with jQuery 3.0 and above aec8e8b OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- xstatic/pkg/angular_lrdragndrop/__init__.py | 2 +- xstatic/pkg/angular_lrdragndrop/data/lrdragndrop.js | 16 +++++++++++++--- 3 files changed, 15 insertions(+), 5 deletions(-)

1 0

kolla-ansible 15.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We enthusiastically announce the release of: kolla-ansible 15.2.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.2.0 ^^^^^^ New Features ************ * Since CVE-2022-29404 is fixed the default value for the LimitRequestBody directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1073741824 (1 GiB). This limits the size of images (for example) uploaded in Horizon. Now this limit can be configured via "horizon_httpd_limitrequestbody". LP#2012588 * etcd is now exposed internally via HAProxy on "etcd_client_port". * Added two new flags to alter behaviour in RabbitMQ: * *rabbitmq_message_ttl_ms*, which lets you set a TTL on messages. * *rabbitmq_queue_expiry_ms*, which lets you set an expiry time on queues. See https://www.rabbitmq.com/ttl.html for more information on both. * The config option *rabbitmq_ha_replica_count* is added, to allow for changing the replication factor of mirrored queues in RabbitMQ. While the flag is unset, the queues are mirrored across all nodes using "ha-mode":"all". Note that this only has an effect if the flag ` om_enable_rabbitmq_high_availability` is set to *True*, as otherwise queues are not mirrored. * The config option *rabbitmq_ha_promote_on_shutdown* has been added, which allows changing the RabbitMQ definition *ha-promote-on- shutdown*. By default *ha-promote-on-shutdown* is "when-synced". We recommend changing this to be "always". This basically means we don't mind losing some messages, instead we give priority to rabbitmq availability. This is most relevant when restarting rabbitmq, such as when upgrading. Note that setting the value of this flag, even to the default value of "when-synced", will cause RabbitMQ to be restarted on the next deploy. For more details please see: https://www.rabbitmq.com/ha.html#cluster-shutdown * Services using etcd3gw via tooz now use etcd via haproxy. This removes a single point of failure, where we hardcoded the first etcd host for backend_url. Upgrade Notes ************* * Default tags of "neutron_tls_proxy" and "glance_tls_proxy" have been changed to "haproxy_tag", as both services are using "haproxy" container image. Any custom tag overrides for those services should be altered before upgrade. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * The precheck for RabbitMQ failed incorrectly when "kolla_externally_managed_cert" was set to "true". LP#1999081 * Fixes removal of Elasicsearch and Kibana loadbalancer configs during migration to Opensearch, when those services are running on a dedicated monitoring node. * Fixes create sasl account before config file is ready. LP#2015589 * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * The flags "--db-nb-pid" and "--db-sb-pid" have been corected to be " --db-nb-pidfile" and "--db-sb-pidfile" respectively. See here for reference: https://github.com/ovn- org/ovn/blob/6c6a7ad1c64a21923dc9b5bea7069fd88bcdd6a8/utilities/ovn- ctl#L1045 LP#2018436 * Configuration of service user tokens for all Nova and Cinder services is now done automatically, to ensure security of block- storage volume data. See LP#[2004555] for more details. * Fixes deployment when using Ansible check mode. LP#2002661 * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 * Set the etcd internal hostname and cacert for tls internal enabled deployments. This allows services to work with etcd when coordination is enabled for TLS interal deployments. Without this fix, the coordination backend fails to connect to etcd and the service itself crashes. * Fixes opensearch migration process. Including case when elasticsearch is located in regular folder instead of docker volume. Furthermore it now has checks if there is data to migrate. * When upgrading or deploying RabbitMQ, the policy *ha-all* is cleared if *om_enable_rabbitmq_high_availability* is set to *false*. Changes in kolla-ansible 15.1.0..15.2.0 --------------------------------------- 073a2f7d1 opensearch-dashboard: fix permissions fc861e74a Fix Bifrost: remove an extra curly bracket 99511eede Fix the Cyborg service 635330912 Fix passwords.yml permissions fc61357af docs: Fix note block 88f80d07f docs: Remove redundant section about vagrant-vbguest aa99d2c9a Correct [pci] syntax in Nova SRIOV documentation 5ed259ec0 Fix the fluentd regexp to collect the logs a662bd896 opensearch: alter path after using rpm/deb packaging 275b9f681 Fix Bash variable expansion issues in openrc file efe6650d0 always add service_user section to nova.conf 36f35d1b2 Correct ovn-ctl --db-nb-pidfile usage in templates 1ed6464c9 Designate: provide certificates file to use for neutron client requests 5f01fa1d5 Fix faulty precheck for RabbitMQ 423a42c65 Add precheck to fail if RabbitMQ HA needs configuring 602876011 Update notes about CentOS support 4c63d0edf cli: fix find globals.d 3dfca54df Remove RabbitMQ ha-all policy when not required 228ff5744 Fix create sasl account before config file is ready c78f8569b Fix maximum width of the DIB Multiline-YAML f764be111 opensearch: default dashboards tag to opensearch_tag 89d9a0c43 Fix merge action plugins verbose output b892a569f Add note about removing leading tabs in ceph.conf files fdf471697 Add flags for RabbitMQ message TTL & queue expiry 84e783f19 Fix deploy/genconfig in check mode a73e41168 Fix elasticsearch to opensearch migration 328737a0e Fix removal of Elasicsearch and Kibana loadbalancer configs baa2076fc nova: Fix live migration on RHEL9 derivatives dceb3a5a5 Add LimitRequestBody configuration for Horizon 743d1af89 Add flag to change RabbitMQ ha-mode definition 300f58471 RabbitMQ: Support setting ha-promote-on-shutdown 033da7aa3 Pin zun jobs to Docker 20 6cea19e30 cloudkitty: set cafile for fetcher_keystone 347b27cf7 ironic: fix dev mode for inspector 887ed175a Set the etcd internal hostname and cacert for tls internal enabled deployments c0a6271e7 hacluster: Use nodename to align with nova service names cef0e0060 Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag 9e87a24f9 Use loadbalancer to connect to etcd fd4b9051b CI: Pin ansible-lint to <6.13.0 f2da37f13 Put etcd behind HTTP loadbalancer 829e83ca7 docs: fix information about libvirt SASL auth 39e178990 CI: Avoid running tgtd if BASE_DISTRO is rocky Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 10 ++- ansible/action_plugins/merge_yaml.py | 27 ++++++-- ansible/group_vars/all.yml | 1 + ansible/roles/bifrost/tasks/config.yml | 1 + ansible/roles/bifrost/tasks/deploy-servers.yml | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 8 ++- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 1 + ansible/roles/common/templates/admin-openrc.sh.j2 | 30 ++++----- .../common/templates/conf/input/00-global.conf.j2 | 4 +- ansible/roles/cyborg/defaults/main.yml | 8 +-- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/etcd/defaults/main.yml | 8 ++- ansible/roles/etcd/tasks/loadbalancer.yml | 7 ++ ansible/roles/glance/defaults/main.yml | 3 +- .../roles/hacluster/tasks/bootstrap_service.yml | 8 +-- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 3 + ansible/roles/ironic/defaults/main.yml | 4 +- ansible/roles/ironic/tasks/clone.yml | 3 +- .../ironic/templates/ironic-inspector.conf.j2 | 3 +- ansible/roles/keystone/tasks/config.yml | 1 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 1 + ansible/roles/neutron/defaults/main.yml | 3 +- ansible/roles/nova-cell/handlers/main.yml | 14 +++- .../roles/nova-cell/tasks/get_cell_settings.yml | 1 + .../nova-cell/tasks/wait_discover_computes.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 13 ++++ ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/nova/templates/nova.conf.j2 | 13 ++++ .../roles/octavia/templates/octavia-openrc.sh.j2 | 16 ++--- ansible/roles/opensearch/defaults/main.yml | 2 +- ansible/roles/opensearch/tasks/upgrade.yml | 77 +++++++++++++++++++--- .../templates/opensearch-dashboards.json.j2 | 19 ++++-- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 15 +++++ ansible/roles/rabbitmq/tasks/deploy.yml | 4 ++ ansible/roles/rabbitmq/tasks/precheck.yml | 28 ++++++++ .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 29 ++++++++ ansible/roles/rabbitmq/tasks/upgrade.yml | 4 ++ .../roles/rabbitmq/templates/definitions.json.j2 | 4 +- ansible/site.yml | 5 ++ .../reference/storage/external-ceph-guide.rst | 8 +++ kolla_ansible/cmd/genpwd.py | 19 +++++- kolla_ansible/cmd/mergepwd.py | 24 ++++++- kolla_ansible/cmd/readpwd.py | 19 +++++- kolla_ansible/cmd/writepwd.py | 10 +++ lint-requirements.txt | 2 +- ...-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml | 9 +++ .../notes/bug-1999081-769f1012263a48fd.yaml | 6 ++ .../notes/bug-2006764-0b647c45b9258542.yaml | 6 ++ .../notes/bug-2015589-94427c14cd857c98.yaml | 5 ++ .../notes/bug-2020152-165c87048d92dedb.yaml | 5 ++ ...-ctl-pid-flag-in-template-d915fe4b71548da0.yaml | 8 +++ .../notes/cve-2023-2088-51e7e050be2139bf.yaml | 9 +++ .../etcd-tcp-loadbalancer-08d9332ee3be9a8b.yaml | 4 ++ .../notes/fix-check-mode-1f37ab5507c98954.yaml | 5 ++ .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 ++ ...-etcd-coordination-config-b1c9f900ef13be13.yaml | 8 +++ .../fix-opensearch-migration-1d0ff64400a9a073.yaml | 6 ++ ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 ++ ...sage-ttl-and-queue-expiry-c163a370708f5b20.yaml | 7 ++ ...change-replication-factor-321c2f9e08e7d179.yaml | 9 +++ ...mq-ha-promote-on-shutdown-9099c6643f2d0cce.yaml | 13 ++++ ...-policy-when-not-required-81dcf64542c4805f.yaml | 5 ++ ...s-proxies-use-haproxy-tag-aa030b5e5df6fbf0.yaml | 8 +++ ...r-for-etcdgw-coordination-6704a8b1389bbabe.yaml | 6 ++ tools/kolla-ansible | 2 +- tools/validate-all-file.py | 4 ++ zuul.d/base.yaml | 2 + zuul.d/jobs.yaml | 9 +++ zuul.d/project.yaml | 1 + 86 files changed, 603 insertions(+), 110 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 1b0057f49..0f255aa34 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -2 +2 @@ ansible>=4,<6 # GPLv3 -ansible-lint>=6.0.0,<7.0.0 # MIT +ansible-lint>=6.0.0,<6.13.0 # MIT

1 0

kayobe 13.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are thrilled to announce the release of: kayobe 13.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.2.0 ^^^^^^ New Features ************ * Adds support for custom Multipathd configuration. * Since Kolla containers can built with user provided "repos.yaml" Kayobe can override the file with their own content. The override files can be "${KAYOBE_CONFIG_PATH}/kolla/repos.yaml" (default Kolla filename) or "${KAYOBE_CONFIG_PATH}/kolla/repos.yml". Multiple Environments supported. Upgrade Notes ************* * Modifies the default value of "kolla_ansible_venv_python" to "/usr/bin/python3". Using operating system python to create kolla- ansible venv fixes corner cases when using older venvs created with "virtualenv" command. Bug Fixes ********* * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Fixes an issue where generation of "passwords.yml" for Kolla Ansible could fail if the directory containing the file does not exist. This is typical in a multiple environment setup, when creating a new environment. See story 2010293 (https://storyboard.openstack.org/#!/story/2010293) for details. * Fixes an issue with systemd-networkd configuration on Ubuntu with multiple VLAN interfaces. See story 2009013 for details. * Fixes repositories files names in Rocky Linux 9. Distributions moved to lowercase names with RHEL 9 release. * Fixes various issues when applying network configuration on Rocky 9 hosts. See bugs: 2016970 (https://bugs.launchpad.net/kayobe/+bug/2016970) and 2016971 (https://bugs.launchpad.net/kayobe/+bug/2016971) * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 13.1.0..13.2.0 -------------------------------- 6accbcf6 Correct name for role mrlesmithjr.manage_lvm a9de7481 Install ncclient even in check mode 46b19742 Allow to use own repos.y[a]ml file to build containers dfa09e28 Update gitignore for .vscode/ configuration files 586d2355 Show an error when *_bridge_ports is not a list a38ff957 CI: Unbreak stable/zed with two cherry-picks 2836db5a Revert back to MichaelRigart.interfaces f36bd35d Adds support for custom Multipathd configuration. c2e80b2c Fix an issue when 'acl' package can be forgotten 59d7cdfc Fix maximum width of the DIB Multiline-YAML 4fb98861 Fix merge action plugins verbose output 6b6dede9 Fix passwords.yml generation when parent directory doesn't exist dc142067 Fix kayobe_config_path description in globals.yml 5283382e CI: Add custom routing table output to logs. 317b6120 Move to Launchpad for project management 00e17020 Fix opensearch container builds b31fac7d Fixes repositories files name in Rocky Linux 9 c9b115ac CI: get repo directories from nodes for troubleshooting 7c4307c9 use OS python to create kolla-ansible venv c53d0956 CI: Disable disk image build in seed-upgrade jobs ee33d3a4 CI: Don't run Heat and Horizon in overcloud jobs 9c4e3163 Ubuntu: Fix networkd config for multiple VLANs without MTU Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + CONTRIBUTING.rst | 4 +-- README.rst | 2 +- ansible/inventory/group_vars/all/compute | 8 ++--- ansible/inventory/group_vars/all/controllers | 8 ++--- ansible/inventory/group_vars/all/infra-vms | 8 ++--- ansible/inventory/group_vars/all/kolla | 4 +-- ansible/inventory/group_vars/all/monitoring | 6 ++-- ansible/inventory/group_vars/all/seed | 8 ++--- ansible/inventory/group_vars/all/seed-hypervisor | 4 +-- ansible/inventory/group_vars/all/storage | 8 ++--- ansible/kolla-openstack.yml | 2 ++ ansible/lvm.yml | 2 +- ansible/roles/dev-tools/defaults/main.yml | 14 +++++--- ansible/roles/dnf/tasks/local-mirror.yml | 16 +++++++-- .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 ---------- ansible/roles/dnf/templates/Rocky-BaseOS.repo.j2 | 16 --------- ...Stream-Extras.repo.j2 => centos-extras.repo.j2} | 0 ...tOS-Stream-AppStream.repo.j2 => centos.repo.j2} | 10 +++++- .../{Rocky-Extras.repo.j2 => rocky-extras.repo.j2} | 2 +- .../{Rocky-AppStream.repo.j2 => rocky.repo.j2} | 9 ++++- ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- .../roles/kolla-ansible/library/kolla_passwords.py | 3 ++ ansible/roles/kolla-bifrost/tasks/main.yml | 1 + .../templates/kolla/config/bifrost/dib.yml | 2 +- ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 33 +++++++++++++++++-- .../kolla-build/templates/kolla/kolla-build.conf | 4 +++ ansible/roles/kolla-openstack/defaults/main.yml | 9 +++++ .../molecule/enable-everything/molecule.yml | 4 +++ ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/multipath.conf.j2 | 9 +++++ .../configuration/reference/kolla-ansible.rst | 1 + etc/kayobe/compute.yml | 8 ++--- etc/kayobe/controllers.yml | 8 ++--- etc/kayobe/globals.yml | 3 +- etc/kayobe/infra-vms.yml | 8 ++--- etc/kayobe/monitoring.yml | 6 ++-- etc/kayobe/seed-hypervisor.yml | 4 +-- etc/kayobe/seed.yml | 8 ++--- etc/kayobe/storage.yml | 8 ++--- kayobe/plugins/action/merge_configs.py | 10 ++++-- kayobe/plugins/action/merge_yaml.py | 20 ++++++++++-- kayobe/plugins/filter/networkd.py | 3 +- kayobe/plugins/filter/networks.py | 6 +++- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 10 +++--- playbooks/kayobe-overcloud-base/run.yml | 2 ++ playbooks/kayobe-overcloud-upgrade-base/run.yml | 16 +++------ .../kayobe-seed-upgrade-base/overrides.yml.j2 | 4 +++ playbooks/kayobe-seed-upgrade-base/pre.yml | 3 +- playbooks/kayobe-seed-upgrade-base/run.yml | 2 +- ...d-extended-multipath-conf-a6b874fb0f43fed5.yaml | 3 ++ ...lesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++++ .../fix-kolla-passwords-f1b5d051c494b4d8.yaml | 8 +++++ .../notes/fix-networkd-vlans-8d5d85da4d2e50ae.yaml | 6 ++++ ...ix-uppercase-repo-file-r9-3ed29c34d2c945c7.yaml | 5 +++ ...work-configuration-issues-69a47b921dc40581.yaml | 6 ++++ ...la-ansible-venv-os-python-519be05aa4b07e80.yaml | 6 ++++ ...client-install-check-mode-0cfc7e846f3a978a.yaml | 5 +++ .../user-provided-repos-yaml-07e1f872225059a6.yaml | 7 ++++ releasenotes/source/conf.py | 1 - requirements.yml | 8 ++--- roles/kayobe-diagnostics/files/get_logs.sh | 16 ++++++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + zuul.d/project.yaml | 16 ++++++--- 74 files changed, 393 insertions(+), 154 deletions(-)

1 0

kayobe 12.8.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are overjoyed to announce the release of: kayobe 12.8.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.8.0 ^^^^^^ New Features ************ * Adds support for custom Multipathd configuration. * Adds support for Rocky Linux 9 as a host Operating System and base container image. * Adds support for configuring arbitrarily named VLAN interfaces using "systemd-networkd". See story 2010266 for details. * Since Kolla containers can built with user provided "repos.yaml" Kayobe can override the file with their own content. The override files can be "${KAYOBE_CONFIG_PATH}/kolla/repos.yaml" (default Kolla filename) or "${KAYOBE_CONFIG_PATH}/kolla/repos.yml". Multiple Environments supported. Upgrade Notes ************* * OpenSearch support has been added. * Modifies the default value of "kolla_ansible_venv_python" to "/usr/bin/python3". Using operating system python to create kolla- ansible venv fixes corner cases when using older venvs created with "virtualenv" command. Bug Fixes ********* * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Fixes an issue where generation of "passwords.yml" for Kolla Ansible could fail if the directory containing the file does not exist. This is typical in a multiple environment setup, when creating a new environment. See story 2010293 (https://storyboard.openstack.org/#!/story/2010293) for details. * Fixes an issue with systemd-networkd configuration on Ubuntu with multiple VLAN interfaces. See story 2009013 for details. * Fixes repositories files names in Rocky Linux 9. Distributions moved to lowercase names with RHEL 9 release. * Fixes various issues when applying network configuration on Rocky 9 hosts. See bugs: 2016970 (https://bugs.launchpad.net/kayobe/+bug/2016970) and 2016971 (https://bugs.launchpad.net/kayobe/+bug/2016971) * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 12.7.0..12.8.0 -------------------------------- c4fa262a Correct name for role mrlesmithjr.manage_lvm 8f3496cb Install ncclient even in check mode 8e26267e Allow to use own repos.y[a]ml file to build containers 64d2d6f2 Update gitignore for .vscode/ configuration files 74911c52 Show an error when *_bridge_ports is not a list eaa41315 CI: Unbreak stable/yoga with two cherry-picks fba1f964 Revert back to MichaelRigart.interfaces a7a65d36 Adds support for custom Multipathd configuration. 81e8f162 Fix an issue when 'acl' package can be forgotten b394ff39 Fix maximum width of the DIB Multiline-YAML c851c6ba Bump mrlesmithjr.lvm to skip swap resizes c0dbca2f Fix merge action plugins verbose output bbcd462d Fix passwords.yml generation when parent directory doesn't exist eb30965c Fix kayobe_config_path description in globals.yml 20d8f6c3 CI: Add custom routing table output to logs. a3ff32b7 Move to Launchpad for project management 97fb31b9 Fix inventory template for prometheus-msteams d0482b65 Support OpenSearch configuration a106e60c Rename Rocky Linux 8 templates to avoid conflicts b951fbc6 Run handlers before configuring veth interfaces only on Rocky Linux 9 883c3ca1 Run handlers before configuring veth interfaces c5be8736 Fixes repositories files name in Rocky Linux 9 5864191f CI: get repo directories from nodes for troubleshooting 5a92bd77 use OS python to create kolla-ansible venv 7ffbd4e3 CI: Disable disk image build in seed-upgrade jobs a292e4bf Add Rocky Linux 9 support 524bc87b CI: Jammy followup - move os_release 8c2dec12 Support configuring VLANs with systemd-networkd syntax 834cf25f CI: Don't run Heat and Horizon in overcloud jobs 3c0b5d31 Ubuntu: Fix networkd config for multiple VLANs without MTU Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + CONTRIBUTING.rst | 4 +- README.rst | 2 +- ansible/group_vars/all/bifrost | 4 +- ansible/group_vars/all/compute | 8 +- ansible/group_vars/all/controllers | 8 +- ansible/group_vars/all/dnf | 8 +- ansible/group_vars/all/infra-vms | 22 ++-- ansible/group_vars/all/kolla | 16 ++- ansible/group_vars/all/monitoring | 6 +- ansible/group_vars/all/overcloud-dib | 3 +- ansible/group_vars/all/seed | 8 +- ansible/group_vars/all/seed-hypervisor | 4 +- ansible/group_vars/all/seed-vm | 14 ++- ansible/group_vars/all/storage | 8 +- ansible/kayobe-target-venv.yml | 11 +- ansible/kolla-openstack.yml | 2 + ansible/kolla-target-venv.yml | 11 +- ansible/lvm.yml | 2 +- ansible/roles/dev-tools/defaults/main.yml | 14 ++- ansible/roles/dnf/defaults/main.yml | 14 ++- ansible/roles/dnf/tasks/local-mirror.yml | 55 +++++++--- ...-AppStream.repo.j2 => Rocky8-AppStream.repo.j2} | 0 ...{Rocky-BaseOS.repo.j2 => Rocky8-BaseOS.repo.j2} | 0 ...{Rocky-Extras.repo.j2 => Rocky8-Extras.repo.j2} | 0 ansible/roles/dnf/templates/centos-extras.repo.j2 | 17 +++ ansible/roles/dnf/templates/centos.repo.j2 | 25 +++++ ansible/roles/dnf/templates/rocky-extras.repo.j2 | 16 +++ ansible/roles/dnf/templates/rocky.repo.j2 | 23 ++++ ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- .../roles/kolla-ansible/library/kolla_passwords.py | 3 + ansible/roles/kolla-ansible/tasks/install.yml | 2 +- .../kolla-ansible/templates/overcloud-services.j2 | 13 ++- ansible/roles/kolla-ansible/vars/Debian.yml | 2 +- ansible/roles/kolla-ansible/vars/main.yml | 3 + ansible/roles/kolla-bifrost/tasks/main.yml | 1 + .../templates/kolla/config/bifrost/dib.yml | 2 +- ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 33 +++++- .../kolla-build/templates/kolla/kolla-build.conf | 4 + ansible/roles/kolla-openstack/defaults/main.yml | 15 +++ .../molecule/enable-everything/molecule.yml | 5 + ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/multipath.conf.j2 | 9 ++ ansible/roles/kolla-openstack/vars/main.yml | 5 + ansible/roles/kolla/tasks/install.yml | 2 +- ansible/roles/kolla/vars/Debian.yml | 1 + .../roles/network-redhat/tasks/include_flush.yml | 3 + ansible/roles/network-redhat/tasks/main.yml | 12 +++ ansible/roles/veth/tasks/RedHat.yml | 45 +------- ansible/roles/veth/tasks/network-manager.yml | 45 ++++++++ ansible/roles/veth/tasks/network-scripts.yml | 43 ++++++++ ansible/roles/veth/templates/peer-nmconnection.j2 | 21 ++++ ansible/roles/veth/templates/veth-nmconnection.j2 | 16 +++ dev/functions | 44 +++++++- .../reference/ironic-python-agent.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 2 + .../configuration/reference/os-distribution.rst | 4 +- etc/kayobe/compute.yml | 8 +- etc/kayobe/controllers.yml | 8 +- etc/kayobe/globals.yml | 5 +- etc/kayobe/infra-vms.yml | 14 +-- etc/kayobe/kolla.yml | 8 +- etc/kayobe/monitoring.yml | 6 +- etc/kayobe/seed-hypervisor.yml | 4 +- etc/kayobe/seed-vm.yml | 8 +- etc/kayobe/seed.yml | 8 +- etc/kayobe/storage.yml | 8 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 6 +- kayobe/plugins/action/merge_configs.py | 10 +- kayobe/plugins/action/merge_yaml.py | 20 +++- kayobe/plugins/filter/networkd.py | 6 +- kayobe/plugins/filter/networks.py | 44 ++++++-- .../plugins/action/test_kolla_ansible_host_vars.py | 6 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 4 - playbooks/kayobe-overcloud-base/overrides.yml.j2 | 23 +++- playbooks/kayobe-overcloud-base/run.yml | 2 + .../overrides.yml.j2 | 22 +++- .../kayobe-overcloud-host-configure-base/pre.yml | 3 +- playbooks/kayobe-overcloud-upgrade-base/run.yml | 16 +-- playbooks/kayobe-seed-base/overrides.yml.j2 | 15 +++ .../kayobe-seed-upgrade-base/overrides.yml.j2 | 4 + playbooks/kayobe-seed-upgrade-base/pre.yml | 3 +- playbooks/kayobe-seed-upgrade-base/run.yml | 2 +- ...d-extended-multipath-conf-a6b874fb0f43fed5.yaml | 3 + .../notes/add-opensearch-6bf0cd4250d5253e.yaml | 4 + ...lesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++ .../fix-kolla-passwords-f1b5d051c494b4d8.yaml | 8 ++ .../notes/fix-networkd-vlans-8d5d85da4d2e50ae.yaml | 6 ++ ...ix-uppercase-repo-file-r9-3ed29c34d2c945c7.yaml | 5 + ...work-configuration-issues-69a47b921dc40581.yaml | 6 ++ ...la-ansible-venv-os-python-519be05aa4b07e80.yaml | 6 ++ ...client-install-check-mode-0cfc7e846f3a978a.yaml | 5 + .../notes/rocky-linux-9-adccc4bb77fda197.yaml | 5 + .../systemd-networkd-vlans-5022f0d1b8214329.yaml | 6 ++ .../user-provided-repos-yaml-07e1f872225059a6.yaml | 7 ++ releasenotes/source/conf.py | 1 - requirements.yml | 14 +-- roles/kayobe-ci-prep/tasks/main.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 26 ++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + zuul.d/jobs.yaml | 78 ++++++++++++++ zuul.d/nodesets.yaml | 11 ++ zuul.d/project.yaml | 31 ++++-- 122 files changed, 1144 insertions(+), 295 deletions(-)

1 0

kolla-ansible 14.9.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We eagerly announce the release of: kolla-ansible 14.9.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.9.0 ^^^^^^ New Features ************ * Since CVE-2022-29404 is fixed the default value for the LimitRequestBody directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1073741824 (1 GiB). This limits the size of images (for example) uploaded in Horizon. Now this limit can be configured via "horizon_httpd_limitrequestbody". LP#2012588 * Adds support for deploying OpenSearch and OpenSearch dashboards. These services directly replace ElasticSearch and Kibana which are now end-of-life. Support for sending logs to a remote ElasticSearch (or OpenSearch) cluster is maintained. * Adds support for migrating from Elasticsearch to OpenSearch by running "kolla-ansible opensearch-migration" command. * etcd is now exposed internally via HAProxy on "etcd_client_port". * Added two new flags to alter behaviour in RabbitMQ: * *rabbitmq_message_ttl_ms*, which lets you set a TTL on messages. * *rabbitmq_queue_expiry_ms*, which lets you set an expiry time on queues. See https://www.rabbitmq.com/ttl.html for more information on both. * The config option *rabbitmq_ha_replica_count* is added, to allow for changing the replication factor of mirrored queues in RabbitMQ. While the flag is unset, the queues are mirrored across all nodes using "ha-mode":"all". Note that this only has an effect if the flag ` om_enable_rabbitmq_high_availability` is set to *True*, as otherwise queues are not mirrored. * The config option *rabbitmq_ha_promote_on_shutdown* has been added, which allows changing the RabbitMQ definition *ha-promote-on- shutdown*. By default *ha-promote-on-shutdown* is "when-synced". We recommend changing this to be "always". This basically means we don't mind losing some messages, instead we give priority to rabbitmq availability. This is most relevant when restarting rabbitmq, such as when upgrading. Note that setting the value of this flag, even to the default value of "when-synced", will cause RabbitMQ to be restarted on the next deploy. For more details please see: https://www.rabbitmq.com/ha.html#cluster-shutdown * Services using etcd3gw via tooz now use etcd via haproxy. This removes a single point of failure, where we hardcoded the first etcd host for backend_url. Upgrade Notes ************* * Default tags of "neutron_tls_proxy" and "glance_tls_proxy" have been changed to "haproxy_tag", as both services are using "haproxy" container image. Any custom tag overrides for those services should be altered before upgrade. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * The precheck for RabbitMQ failed incorrectly when "kolla_externally_managed_cert" was set to "true". LP#1999081 * Fixes create sasl account before config file is ready. LP#2015589 * The flags "--db-nb-pid" and "--db-sb-pid" have been corected to be " --db-nb-pidfile" and "--db-sb-pidfile" respectively. See here for reference: https://github.com/ovn- org/ovn/blob/6c6a7ad1c64a21923dc9b5bea7069fd88bcdd6a8/utilities/ovn- ctl#L1045 LP#2018436 * Configuration of service user tokens for all Nova and Cinder services is now done automatically, to ensure security of block- storage volume data. See LP#[2004555] for more details. * Adds configuration necessary for application credential access rules to properly function. LP#1965111 * Fixes deployment when using Ansible check mode. LP#2002661 * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 * Set the etcd internal hostname and cacert for tls internal enabled deployments. This allows services to work with etcd when coordination is enabled for TLS interal deployments. Without this fix, the coordination backend fails to connect to etcd and the service itself crashes. * fix missing [taskflow] section in masakari.conf.j2 LP#1966536 * Fixes opensearch migration process. Including case when elasticsearch is located in regular folder instead of docker volume. Furthermore it now has checks if there is data to migrate. * When upgrading or deploying RabbitMQ, the policy *ha-all* is cleared if *om_enable_rabbitmq_high_availability* is set to *false*. Changes in kolla-ansible 14.8.0..14.9.0 --------------------------------------- e885a17d3 Add keystone_authtoken.service_type 09a8f69ce Fix the Cyborg service 64c77ef01 Fix passwords.yml permissions f72ff9bc6 docs: Remove redundant section about vagrant-vbguest 7e13d5756 Fix Bash variable expansion issues in openrc file cb105dc29 always add service_user section to nova.conf 10a6388d0 Correct ovn-ctl --db-nb-pidfile usage in templates ed0d288c1 Designate: provide certificates file to use for neutron client requests ca25ca18e Fix faulty precheck for RabbitMQ ff1bd03ff Add precheck to fail if RabbitMQ HA needs configuring 3e14223d9 cli: fix find globals.d 458dcbfdb Remove RabbitMQ ha-all policy when not required e8f608d36 Fix create sasl account before config file is ready 486367ec6 Fix maximum width of the DIB Multiline-YAML 0b9e5cc88 opensearch: default dashboards tag to opensearch_tag c8f11df80 Fix merge action plugins verbose output 3930e70ae Add note about removing leading tabs in ceph.conf files 8affe4ed3 Add flags for RabbitMQ message TTL & queue expiry 7aae29b4d Fix deploy/genconfig in check mode 7d78a6cc3 Fix elasticsearch to opensearch migration b74d331aa nova: Fix live migration on RHEL9 derivatives 17fb40506 Add LimitRequestBody configuration for Horizon eca595c18 Add flag to change RabbitMQ ha-mode definition f01896ffd RabbitMQ: Support setting ha-promote-on-shutdown 6fab166fd Pin zun jobs to Docker 20 9b2a23824 Add OpenSearch ca0233589 CI: Drop monasca job 3d7eb1e20 ironic: fix dev mode for inspector f7364d96c Use haproxy-config instead of loadbalancer-config 9479ba016 Set the etcd internal hostname and cacert for tls internal enabled deployments b47c013cf hacluster: Use nodename to align with nova service names e21caa492 rocky: add to distro_python_version_map and update CI jobs ae8031154 CI: Always build images for centos jobs 928ef9cc5 Add [taskflow] section for masakari.conf.j2 d25e160cf Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag edd0d07e3 Use loadbalancer to connect to etcd 5388aaced Add CentOS Stream 9 / Rocky Linux 9 host support 6373d5419 Fix docker version precheck (bad backport) fb0271e39 Put etcd behind HTTP loadbalancer 29926808a docs: fix information about libvirt SASL auth 87899a2f1 rocky - add to multiple if base_distro statements Diffstat (except docs and test files) ------------------------------------- README.rst | 4 +- ansible/action_plugins/merge_configs.py | 10 +- ansible/action_plugins/merge_yaml.py | 27 ++- ansible/group_vars/all.yml | 47 +++- ansible/inventory/all-in-one | 8 + ansible/inventory/multinode | 8 + ansible/opensearch-migration.yml | 168 ++++++++++++++ ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/bifrost/tasks/config.yml | 1 + ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 9 +- ansible/roles/cloudkitty/defaults/main.yml | 2 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 1 + ansible/roles/common/defaults/main.yml | 9 + ansible/roles/common/tasks/config.yml | 6 + ansible/roles/common/templates/admin-openrc.sh.j2 | 30 +-- .../common/templates/conf/output/00-local.conf.j2 | 31 +++ .../common/templates/conf/output/01-es.conf.j2 | 2 +- .../templates/conf/output/03-opensearch.conf.j2 | 33 +++ .../templates/cron-logrotate-opensearch.conf.j2 | 3 + ansible/roles/cyborg/defaults/main.yml | 8 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 2 + ansible/roles/destroy/tasks/cleanup_host.yml | 1 + ansible/roles/etcd/defaults/main.yml | 8 +- ansible/roles/etcd/tasks/loadbalancer.yml | 7 + ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/defaults/main.yml | 3 +- ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/defaults/main.yml | 12 + .../roles/hacluster/tasks/bootstrap_service.yml | 8 +- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/heat/templates/heat.conf.j2 | 1 + .../roles/heat/templates/wsgi-heat-api-cfn.conf.j2 | 2 +- ansible/roles/heat/templates/wsgi-heat-api.conf.j2 | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 5 +- ansible/roles/ironic/defaults/main.yml | 4 +- ansible/roles/ironic/tasks/clone.yml | 3 +- .../roles/ironic/templates/ironic-api-wsgi.conf.j2 | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 11 +- ansible/roles/ironic/templates/ironic.conf.j2 | 1 + ansible/roles/keystone/tasks/config.yml | 1 + .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/tasks/precheck.yml | 26 +++ ansible/roles/magnum/templates/magnum.conf.j2 | 1 + ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 1 + ansible/roles/masakari/templates/masakari.conf.j2 | 4 + ansible/roles/mistral/templates/mistral.conf.j2 | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + ansible/roles/murano/templates/murano.conf.j2 | 1 + ansible/roles/neutron/defaults/main.yml | 3 +- ansible/roles/neutron/templates/neutron.conf.j2 | 1 + ansible/roles/nova-cell/handlers/main.yml | 14 +- .../roles/nova-cell/tasks/get_cell_settings.yml | 1 + .../nova-cell/tasks/wait_discover_computes.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 13 ++ ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/nova/templates/nova-api-wsgi.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 14 ++ .../roles/octavia/templates/octavia-openrc.sh.j2 | 16 +- .../roles/octavia/templates/octavia-wsgi.conf.j2 | 2 +- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/opensearch/defaults/main.yml | 132 +++++++++++ ansible/roles/opensearch/handlers/main.yml | 33 +++ .../roles/opensearch/tasks/check-containers.yml | 18 ++ ansible/roles/opensearch/tasks/check.yml | 1 + ansible/roles/opensearch/tasks/config-host.yml | 17 ++ ansible/roles/opensearch/tasks/config.yml | 63 +++++ ansible/roles/opensearch/tasks/config_validate.yml | 1 + ansible/roles/opensearch/tasks/copy-certs.yml | 6 + .../roles/opensearch/tasks/deploy-containers.yml | 2 + ansible/roles/opensearch/tasks/deploy.yml | 12 + ansible/roles/opensearch/tasks/loadbalancer.yml | 7 + ansible/roles/opensearch/tasks/main.yml | 2 + ansible/roles/opensearch/tasks/precheck.yml | 25 ++ ansible/roles/opensearch/tasks/pull.yml | 3 + ansible/roles/opensearch/tasks/reconfigure.yml | 2 + ansible/roles/opensearch/tasks/register.yml | 7 + ansible/roles/opensearch/tasks/stop.yml | 6 + ansible/roles/opensearch/tasks/upgrade.yml | 48 ++++ .../templates/opensearch-dashboards.json.j2 | 23 ++ .../roles/opensearch/templates/opensearch.json.j2 | 23 ++ .../roles/opensearch/templates/opensearch.yml.j2 | 21 ++ .../templates/opensearch_dashboards.yml.j2 | 12 + ansible/roles/opensearch/vars/main.yml | 2 + ansible/roles/openvswitch/defaults/main.yml | 2 +- ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- .../placement/templates/placement-api-wsgi.conf.j2 | 2 +- .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/prechecks/tasks/package_checks.yml | 1 + ansible/roles/prechecks/vars/main.yml | 3 + .../prometheus-elasticsearch-exporter.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 15 ++ ansible/roles/rabbitmq/tasks/deploy.yml | 4 + ansible/roles/rabbitmq/tasks/precheck.yml | 28 +++ .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 28 +++ ansible/roles/rabbitmq/tasks/upgrade.yml | 23 +- .../roles/rabbitmq/templates/definitions.json.j2 | 4 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 1 + ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/telegraf/defaults/main.yml | 1 + ansible/roles/telegraf/templates/telegraf.conf.j2 | 5 + ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zun/templates/zun.conf.j2 | 1 + ansible/site.yml | 23 ++ ...rst => central-logging-guide-elasticsearch.rst} | 10 +- .../central-logging-guide-opensearch.rst | 258 +++++++++++++++++++++ .../reference/logging-and-monitoring/index.rst | 3 +- .../logging-and-monitoring/monasca-guide.rst | 4 + .../reference/storage/external-ceph-guide.rst | 8 + etc/kolla/globals.yml | 3 + etc/kolla/passwords.yml | 5 + kolla_ansible/cmd/genpwd.py | 19 +- kolla_ansible/cmd/mergepwd.py | 24 +- kolla_ansible/cmd/readpwd.py | 19 +- kolla_ansible/cmd/writepwd.py | 10 + ...-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml | 9 + .../notes/add-opensearch-53ef174195acce45.yaml | 10 + .../notes/bug-1999081-769f1012263a48fd.yaml | 6 + .../notes/bug-2015589-94427c14cd857c98.yaml | 5 + ...-ctl-pid-flag-in-template-d915fe4b71548da0.yaml | 8 + .../notes/cve-2023-2088-51e7e050be2139bf.yaml | 9 + .../etcd-tcp-loadbalancer-08d9332ee3be9a8b.yaml | 4 + ...fix-app-cred-access-rules-14b5dcfcd5a5669a.yaml | 6 + .../notes/fix-check-mode-1f37ab5507c98954.yaml | 5 + .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 + ...-etcd-coordination-config-b1c9f900ef13be13.yaml | 8 + ...-missing-taskflow-section-31b6654e29bec35d.yaml | 5 + .../fix-opensearch-migration-114061f943f60b71.yaml | 6 + ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 + ...sage-ttl-and-queue-expiry-c163a370708f5b20.yaml | 7 + ...change-replication-factor-321c2f9e08e7d179.yaml | 9 + ...mq-ha-promote-on-shutdown-9099c6643f2d0cce.yaml | 13 ++ ...-policy-when-not-required-81dcf64542c4805f.yaml | 5 + ...s-proxies-use-haproxy-tag-aa030b5e5df6fbf0.yaml | 8 + ...r-for-etcdgw-coordination-6704a8b1389bbabe.yaml | 6 + roles/cephadm/defaults/main.yml | 1 + roles/cephadm/tasks/pkg_debian.yml | 1 + roles/cephadm/tasks/pkg_redhat.yml | 7 + tools/cleanup-host | 5 + tools/kolla-ansible | 8 +- tools/validate-all-file.py | 4 + zuul.d/base.yaml | 14 +- zuul.d/jobs.yaml | 212 ++++++++++++++++- zuul.d/nodesets.yaml | 52 +++-- zuul.d/project.yaml | 25 +- 170 files changed, 2262 insertions(+), 157 deletions(-)

1 0

kolla 15.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are happy to announce the release of: kolla 15.2.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 15.1.0..15.2.0 ------------------------------- c9a7f57ad rabbitmq: Fix repo for ubuntu aarch64 13aaca13e Use erlang-25 from copr on aarch64 530490a71 opensearch: drop unnecessary workarounds 0e83e2a73 rabbitmq: use erlang-25 ppa on Debian/Ubuntu 3dcfde5cc Fix cinder-volume: add missing nvme-cli rpm package 85c764a65 Disable build of Gnocchi containers 7ae289a5e Fix cinder-volume: Add forgotten lsscsi rpm package 3aecfa93a Fix Venus containers built from correct branch 1314b297f Fix rabbitmq image build fe9d33c64 mariadb-clustercheck: ensure /var/log/kolla/mariadb exists d793de2a4 opensearch-dashboards: Fix permissions aab455c5e opensearch: move to yum/apt repos 140032d6e toolbox: pin ansible.posix to <1.5.4 003fff5dc https: remove dhparams.pem before running gencerts e0c028dfa Glance-api fails due to absent multipath tools 2ed918268 ovsdpdk: add libdpdk-dev 096963aeb nova-libvirt: Fix for missing libvirt-daemon-driver-nodedev package b2296aa5c keystone: Fix for missing libldap-common package for debian 328c0c840 Fix test malicious tarball fail 2cb59e45a Replace invisible unicode chars 395e9e565 neutron-mlnx-agent: pin pyzmq at 21.* 885b27a67 Cinder backup fails due to absent multipath tools 2459c93ee base: make curl retry on all errors a8d0098bd neutron: Add iproute-tc dac11090b Test for unsafe files in tarfile.extractall 22518ed6c CI: Retry docker push on publish jobs 278167179 CI: Configure additional disk when available 47431082f bifrost: mark unbuidable for Ubuntu 23ea06f2e Pin setuptools=67.2.* Diffstat (except docs and test files) ------------------------------------- .zuul.d/debian.yaml | 4 +- .../mariadb/mariadb-clustercheck/extend_start.sh | 11 ++ .../opensearch/opensearch-dashboards/Dockerfile.j2 | 24 +---- .../opensearch-dashboards/extend_start.sh | 8 +- kolla/common/sources.py | 4 +- kolla/common/users.py | 4 + kolla/image/tasks.py | 11 +- kolla/image/unbuildable.py | 20 ++-- kolla/template/repos.yaml | 96 ++++++++++++----- specs/logging-with-heka.rst | 2 +- 32 files changed, 375 insertions(+), 95 deletions(-)

1 0

kayobe 14.1.0 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We contentedly announce the release of: kayobe 14.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.1.0 ^^^^^^ Bug Fixes * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 14.0.0..14.1.0 -------------------------------- f525c6a5 Correct name for role mrlesmithjr.manage_lvm 48cd0eb6 CI: Fix kayobe-seed-images-* jobs b460a50b Install ncclient even in check mode b84051b7 Update gitignore for .vscode/ configuration files Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + ansible/inventory/group_vars/all/compute | 8 ++++---- ansible/inventory/group_vars/all/controllers | 8 ++++---- ansible/inventory/group_vars/all/infra-vms | 8 ++++---- ansible/inventory/group_vars/all/monitoring | 6 +++--- ansible/inventory/group_vars/all/seed | 8 ++++---- ansible/inventory/group_vars/all/seed-hypervisor | 4 ++-- ansible/inventory/group_vars/all/storage | 8 ++++---- ansible/lvm.yml | 2 +- ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 15 ++++++++------- etc/kayobe/compute.yml | 8 ++++---- etc/kayobe/controllers.yml | 8 ++++---- etc/kayobe/infra-vms.yml | 8 ++++---- etc/kayobe/monitoring.yml | 6 +++--- etc/kayobe/seed-hypervisor.yml | 4 ++-- etc/kayobe/seed.yml | 8 ++++---- etc/kayobe/storage.yml | 8 ++++---- ...e-of-mrlesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++++++ .../ncclient-install-check-mode-0cfc7e846f3a978a.yaml | 5 +++++ requirements.yml | 2 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 +++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + 26 files changed, 84 insertions(+), 65 deletions(-)

1 0

kolla 14.10.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We enthusiastically announce the release of: kolla 14.10.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.10.0 ^^^^^^^ New Features * CentOS Stream 9 is now buildable in addition to CentOS Stream 8. * Adds OpenSearch and OpenSearch Dashboards images. * Adds Rocky Linux 9 support. Changes in kolla 14.9.0..14.10.0 -------------------------------- 482ebb999 Update support matrix 75f918628 Fix cinder-volume: add missing nvme-cli rpm package 44e04967a Disable build of Gnocchi containers f35699e33 Fix cinder-volume: Add forgotten lsscsi rpm package 59a5de343 fluentd: pin td-agent to 4.4.2 2a302e5b6 mariadb-clustercheck: ensure /var/log/kolla/mariadb exists 9c0a62a95 CI: Fix centos9 builds and drop unnecessary zuul vars 64ab2e983 fluentd: pin fluent-plugin-elasticsearch to <5.3.0 5a600b779 toolbox: pin ansible.posix to <1.5.4 a28b7d7a0 Support qemu block rbd in nova-compute (source) e590ec353 https: remove dhparams.pem before running gencerts 8e8ef4c38 fluentd: cap elasticsearch again 6a8e8a7fe neutron: Add iproute-tc d511369be Glance-api fails due to absent multipath tools cb22a428a nova-libvirt: Fix for missing libvirt-daemon-driver-nodedev package 08071f47d Fix test malicious tarball fail faf6ac9b7 CI: Fix rocky no infra wheels job 95e2a5e82 Support qemu block rbd in nova-compute 59dd65a99 Replace invisible unicode chars 169178c87 Cinder backup fails due to absent multipath tools d9f1a5af3 base: make curl retry on all errors 9516d00f3 Test for unsafe files in tarfile.extractall 3faff93e8 Mark Monasca and deps as unbuildable on Rocky9 c7164c8f7 Fix ironic-pxe EFI path for rocky 14589d415 CI: publish rocky images and mark c9s non voting d40f67f04 CI: Retry docker push on publish jobs 7a9ff37d0 Add RockyLinux 9 support e29437d21 CI: Configure additional disk when available 82ee1e631 Add support for CentOS Stream 9 9050b6725 Add Opensearch image(s) Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 24 ++++ .zuul.d/centos.yaml | 30 +++++ .zuul.d/rocky.yaml | 68 ++++++++++ .../mariadb/mariadb-clustercheck/extend_start.sh | 11 ++ .../opensearch/opensearch-dashboards/Dockerfile.j2 | 37 ++++++ .../opensearch-dashboards/extend_start.sh | 17 +++ .../prometheus-libvirt-exporter/Dockerfile.j2 | 2 + kolla/common/config.py | 11 +- kolla/image/build.py | 73 ++++++++++- kolla/template/methods.py | 6 + kolla/template/repos.yaml | 70 ++++++++++ .../notes/centos-stream-9-ec4591d83c22b509.yaml | 4 + .../notes/opensearch-f3a7b8bfc86a16f6.yaml | 4 + .../notes/rockylinux9-1f004ab9b3b2e096.yaml | 4 + specs/logging-with-heka.rst | 2 +- 56 files changed, 1038 insertions(+), 240 deletions(-)

1 0

metalsmith 2.0.0 (bobcat)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are overjoyed to announce the release of: metalsmith 2.0.0: Deployment and Scheduling tool for Bare Metal This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 2.0.0 ^^^^^ Upgrade Notes * During the *bobcat* development cycle, the Ironic community updated the MD5 checksum logic in the "ironic-python-agent" to be explicitly disabled, and added support for the checksums to be conveyed as a SHA256 or SHA512 checksum. With this upgrade, we have updated our references and playbooks. Changes in metalsmith 1.10.0..2.0.0 ----------------------------------- 1a8ec3d Reduce retry timeout for Metalsmith CI ba7d45a Update MD5 checksum references 255fdc7 Update to hacking v6 0e8dd58 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metalsmith/_cmd.py | 2 +- metalsmith/sources.py | 16 ++++++++-------- .../ansible_plugins/modules/metalsmith_instances.py | 2 +- .../roles/metalsmith_deployment/README.rst | 6 +++--- playbooks/integration/cirros-image.yaml | 8 ++++---- ...update-references-for-checksums-44206e710b0506fe.yaml | 8 ++++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 10 files changed, 34 insertions(+), 18 deletions(-)

1 0

kolla-ansible 16.1.0 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We contentedly announce the release of: kolla-ansible 16.1.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.1.0 ^^^^^^ Upgrade Notes ************* * Removes the restriction on the maximum supported version of 2.14.2 for "ansible-core". Any 2.14 series release is now supported. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 Other Notes *********** * Refactors the MariaDB and RabbitMQ restart procedures to be compatible with Ansible 2.14.3+. See Ansible issue 80848 for details. Changes in kolla-ansible 16.0.0..16.1.0 --------------------------------------- f7790a9a5 Refactor MariaDB and RabbitMQ restart procedure a3bbf3399 opensearch-dashboard: fix permissions 0a50e9bf3 Fix log collection b92bdb7d1 Fix Bifrost: remove an extra curly bracket a12deeb36 Fix the Cyborg service 1740c7f27 Fix passwords.yml permissions c5b6ddc51 docs: Correct indentation in quickstart (again) d31c0ac32 docs: Correct indentation in quickstart 28ba27ebf docs: Remove redundant section about vagrant-vbguest fdca13e06 Correct [pci] syntax in Nova SRIOV documentation Diffstat (except docs and test files) ------------------------------------- ansible/mariadb.yml | 72 +++++++++++++ ansible/rabbitmq.yml | 115 +++++++++++++++++++++ ansible/roles/bifrost/tasks/deploy-servers.yml | 2 +- ansible/roles/cyborg/defaults/main.yml | 8 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- ansible/roles/mariadb/handlers/main.yml | 27 ++--- ansible/roles/mariadb/tasks/deploy.yml | 7 -- ansible/roles/mariadb/tasks/post-deploy.yml | 4 + ansible/roles/mariadb/tasks/post-upgrade.yml | 24 +++++ ansible/roles/mariadb/tasks/upgrade.yml | 24 ----- .../templates/opensearch-dashboards.json.j2 | 5 + ansible/roles/prechecks/vars/main.yml | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 26 +---- ansible/roles/rabbitmq/tasks/deploy.yml | 5 - ansible/roles/rabbitmq/tasks/post-deploy.yml | 2 + ansible/roles/rabbitmq/tasks/upgrade.yml | 3 - ansible/site.yml | 50 +-------- kolla_ansible/cmd/genpwd.py | 19 +++- kolla_ansible/cmd/mergepwd.py | 24 ++++- kolla_ansible/cmd/readpwd.py | 19 +++- kolla_ansible/cmd/writepwd.py | 10 ++ .../notes/bug-2020152-165c87048d92dedb.yaml | 5 + .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 ++ ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 ++ .../mariadb-restart-refactor-529502bf5d12b0f4.yaml | 10 ++ 32 files changed, 365 insertions(+), 162 deletions(-)

1 0