January 2024 - Release-announce - lists.openstack.org

kolla-ansible 16.3.0 (antelope)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We contentedly announce the release of: kolla-ansible 16.3.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.3.0 ^^^^^^ New Features ************ * The new command "kolla-ansible rabbitmq-reset-state" has been added. It force-resets the state of RabbitMQ. This is primarily designed to be used when enabling HA queues, see docs: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability * Updates apache grok pattern to match the size of response in bytes, time taken to serve the request and user agent. * You can now enable the usage of quorum queues in RabbitMQ for all services by setting the variable "om_enable_rabbitmq_quorum_queues" to "true". Notice that you can't use quorum queues and high availability at the same time. This is caught by a precheck. * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. * Adds new "restart_policy" called "oneshot" that does not create systemd units and is used for bootstrap tasks. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. * "restart_policy: no" will now create systemd units, but with "Restart" property set to "no". Bug Fixes ********* * Fix MariaDB backup if enable_proxysql is enable * Fixes 504 timeout when scraping openstack exporter. Ensures that HAProxy server timeout is the same as the scrape timeout for the openstack exporter backend. LP#2006051 * Fixes non-persistent Neutron agent state data. LP2009884 * Fix issue with octavia security group rules creation when using IPv6 configuration for octavia management network. See LP#2023502 for more details. * Fixes glance-api failed to start privsep daemon when cinder_backend_ceph is set to true. See LP#2024541 for more details. * Fixes 2024554. Adds host and "mariadb_port" to the wsrep sync status check. This is so none standard ports can be used for mariadb deployments. LP#2024554 * Starting with ansible-core 2.13, list concatenation format is changed which resulted in inability to override horizon policy files. See LP#2045660 for more details. * Fixes long service restarts while using systemd LP#2048130. * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes an issue where Prometheus would fail to scrape the OpenStack exporter when using internal TLS with an FQDN. LP#2008208 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Fixes an issue where Fluentd was parsing Horizon WSGI application logs incorrectly. Horizon error logs are now written to "horizon- error.log" instead of "horizon.log". See LP#1898174 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * Fixes an issue where Prometheus scraping of Etcd metrics would fail if Etcd TLS is enabled. LP#2036950 Changes in kolla-ansible 16.2.0..16.3.0 --------------------------------------- c1226615c CI: Test Nova server resize functionality 106be6dff Enable glance proxying behaviour 3858e945b cadvisor: Set housekeeping interval to Prometheus scrape interval 09ca4bdcf Fix long service restarts while using systemd b52b1dc9e Remove nova cell sync comment 128d7d9c1 Make designate bind9 cmdline configurable 3ce2fa84f Persist Neutron agent state files in volume 2801ff6a1 Fix wsrep sync status task while switched to TCP/IP 2c3ece156 Set a log retention policy for OpenSearch 9beb92628 Add nova conf for cyborg 92c8ef029 quorum: add missing octavia and masakari 0b0967253 provide a flag to enable quorum queues e7dd090b9 Fix Docker health check for sahara_engine aa860978a Fix broken list concatenation in horizon role 458d285e7 CI: Fail on fluentd log parsing errors ccd04bde6 Fix Horizon WSGI application log parsing 376529124 Remove Glance and Neutron TLS proxies from fluentd input config 58c6fdf80 keystone: do not report changed on tasks that list 5bce054a6 Adding mariadb_port to wsrep sync status so alterative ports can be used 7db47c18e Move [oslo_policy] back inside Jinja if block 1b1ada1e1 Fix proxysql get mariadb_backup_database_password dbacd038f Change regex for the multiline parser at the fluentd rabbitmq input 2a516bde4 Fix glance-api failed to start privsep daemon 10e5b2900 Set HAProxy server timeout for openstack exporter d3fc4d68c Fix issue with octavia security group rules creation 035c573f9 Add command to force reset the state of RabbitMQ 785a750f0 ovn: Fix wording in limit check 8a4de2a11 Fix OpenStack exporter scrape with internal TLS & FQDN 70e75a7d0 Adds condition to handle QoS extension in sriov_agent.ini template 232ab5ad7 Introduce oneshot docker_restart_policy 6806e0bb1 Improve grok pattern matching for apache logs c1321e230 prometheus: Fix etcd scrape when etcd uses TLS 26ba31ae0 kolla_address: check correct error return value Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 2 + ansible/library/kolla_docker.py | 2 + ansible/module_utils/kolla_docker_worker.py | 6 +- ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/rabbitmq-reset-state.yml | 10 ++++ ansible/roles/aodh/tasks/bootstrap_service.yml | 2 +- ansible/roles/aodh/templates/aodh.conf.j2 | 3 + ansible/roles/barbican/tasks/bootstrap_service.yml | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 3 + ansible/roles/blazar/tasks/bootstrap_service.yml | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 3 + .../roles/ceilometer/tasks/bootstrap_service.yml | 2 +- .../roles/ceilometer/templates/ceilometer.conf.j2 | 3 + ansible/roles/cinder/tasks/bootstrap_service.yml | 2 +- ansible/roles/cinder/tasks/upgrade.yml | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 3 + .../roles/cloudkitty/tasks/bootstrap_service.yml | 2 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 3 + ansible/roles/common/defaults/main.yml | 4 -- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 4 +- ansible/roles/cyborg/tasks/bootstrap_service.yml | 2 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 15 +++++ ansible/roles/designate/defaults/main.yml | 1 + .../roles/designate/tasks/bootstrap_service.yml | 2 +- .../templates/designate-backend-bind9.json.j2 | 2 +- .../roles/designate/templates/designate.conf.j2 | 3 + ansible/roles/freezer/tasks/bootstrap_service.yml | 2 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/tasks/bootstrap_service.yml | 2 +- ansible/roles/glance/tasks/rolling_upgrade.yml | 6 +- ansible/roles/glance/templates/glance-api.conf.j2 | 5 ++ ansible/roles/gnocchi/tasks/bootstrap_service.yml | 2 +- ansible/roles/heat/tasks/bootstrap_service.yml | 2 +- ansible/roles/heat/templates/heat.conf.j2 | 3 + ansible/roles/horizon/tasks/bootstrap_service.yml | 2 +- ansible/roles/horizon/tasks/policy_item.yml | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 3 +- ansible/roles/ironic/tasks/bootstrap_service.yml | 6 +- ansible/roles/ironic/tasks/rolling_upgrade.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 3 + ansible/roles/ironic/templates/ironic.conf.j2 | 3 + ansible/roles/keystone/handlers/main.yml | 4 +- ansible/roles/keystone/tasks/bootstrap_service.yml | 4 +- .../keystone/tasks/register_identity_providers.yml | 2 + ansible/roles/keystone/templates/keystone.conf.j2 | 3 + ansible/roles/magnum/tasks/bootstrap_service.yml | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 3 + ansible/roles/manila/tasks/bootstrap_service.yml | 2 +- ansible/roles/manila/templates/manila.conf.j2 | 3 + ansible/roles/mariadb/handlers/main.yml | 2 +- ansible/roles/mariadb/tasks/backup.yml | 2 +- ansible/roles/mariadb/tasks/bootstrap_cluster.yml | 2 +- ansible/roles/mariadb/tasks/post-upgrade.yml | 2 +- ansible/roles/mariadb/tasks/precheck.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 4 +- ansible/roles/mariadb/tasks/restart_services.yml | 1 + ansible/roles/masakari/tasks/bootstrap_service.yml | 2 +- ansible/roles/masakari/templates/masakari.conf.j2 | 3 + ansible/roles/mistral/tasks/bootstrap_service.yml | 2 +- ansible/roles/mistral/templates/mistral.conf.j2 | 3 + ansible/roles/murano/tasks/bootstrap_service.yml | 2 +- ansible/roles/murano/templates/murano.conf.j2 | 3 + ansible/roles/neutron/tasks/bootstrap_service.yml | 2 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 4 +- ansible/roles/neutron/templates/neutron.conf.j2 | 8 +-- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 5 ++ .../roles/nova-cell/tasks/bootstrap_service.yml | 2 +- ansible/roles/nova-cell/tasks/create_cells.yml | 4 +- .../roles/nova-cell/tasks/get_cell_settings.yml | 2 +- .../nova-cell/tasks/online_data_migrations.yml | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 3 + ansible/roles/nova/tasks/bootstrap_service.yml | 4 +- ansible/roles/nova/tasks/map_cell0.yml | 2 +- .../roles/nova/tasks/online_data_migrations.yml | 2 +- ansible/roles/nova/tasks/upgrade.yml | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/defaults/main.yml | 6 +- ansible/roles/octavia/tasks/bootstrap_service.yml | 2 +- ansible/roles/octavia/tasks/prepare.yml | 18 ++++++ ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/ovn-db/tasks/lookup_cluster.yml | 14 +++-- .../roles/placement/tasks/bootstrap_service.yml | 2 +- ansible/roles/placement/tasks/upgrade.yml | 2 +- ansible/roles/prechecks/tasks/service_checks.yml | 8 +++ ansible/roles/prometheus/defaults/main.yml | 6 +- .../roles/prometheus/templates/prometheus.yml.j2 | 5 +- ansible/roles/rabbitmq/tasks/bootstrap.yml | 2 +- ansible/roles/rabbitmq/tasks/reset-state.yml | 16 ++++++ ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/sahara/tasks/bootstrap_service.yml | 2 +- ansible/roles/sahara/templates/sahara.conf.j2 | 3 + ansible/roles/senlin/tasks/bootstrap_service.yml | 2 +- ansible/roles/senlin/templates/senlin.conf.j2 | 3 + ansible/roles/skyline/tasks/bootstrap_service.yml | 2 +- ansible/roles/solum/tasks/bootstrap_service.yml | 2 +- ansible/roles/solum/templates/solum.conf.j2 | 3 + ansible/roles/tacker/tasks/bootstrap_service.yml | 2 +- ansible/roles/tacker/templates/tacker.conf.j2 | 3 + ansible/roles/trove/tasks/bootstrap_service.yml | 2 +- ansible/roles/trove/templates/trove.conf.j2 | 3 + ansible/roles/vitrage/tasks/bootstrap_service.yml | 2 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 3 + ansible/roles/watcher/tasks/bootstrap_service.yml | 2 +- ansible/roles/watcher/templates/watcher.conf.j2 | 3 + ansible/roles/zun/tasks/bootstrap_service.yml | 2 +- ansible/roles/zun/templates/zun.conf.j2 | 3 + .../central-logging-guide.rst | 44 +++++++++++++++ kolla_ansible/database_shards.py | 1 + kolla_ansible/kolla_address.py | 2 +- ...-backup-database-password-54f43ecf102fb897.yaml | 4 ++ .../notes/bug-2006051-135bd20d5c465517.yaml | 7 +++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2023502-68acc8637510cb22.yaml | 7 +++ .../notes/bug-2024541-98c2864f16f8eb59.yaml | 7 +++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 7 +++ ...ride-horizon-policy-files-c405906a9faf8f3b.yaml | 7 +++ .../notes/bug-2048130-23b8174396bd3c69.yaml | 5 ++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ ...orce-reset-rabbitmq-state-7ec4414fd2a63d16.yaml | 7 +++ .../fix-prom-os-exp-fqdn-efb67c364b653bd9.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../notes/horizon-log-bugfix-b89f502c2f3ccaf9.yaml | 8 +++ ...prove-apache-grok-pattern-47b0bcd90f464d60.yaml | 5 ++ ...make-quorum-queues-usable-552bfb2e8975f83f.yaml | 7 +++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ .../prometheus-etcd-tls-313e7cf454f6763a.yaml | 6 ++ .../restart-policy-oneshot-8dc9aa2f79cbfa19.yaml | 9 +++ tools/init-runonce | 1 + tools/kolla-ansible | 6 ++ 141 files changed, 679 insertions(+), 116 deletions(-)

1 0

kayobe 14.3.0 (antelope)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are ecstatic to announce the release of: kayobe 14.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.3.0 ^^^^^^ New Features ************ * Adds a new "kolla_bifrost_deploy_image_user_data_content" variable used to define custom "user_data" content used by cloud-init for overcloud provision. Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. * Removes the "kolla_docker_registry_insecure" variable from "etc/kayobe/kolla.yml" as it is not used since the 2023.1 (Antelope) release. The replacement "docker_registry_insecure" variable has been added to "etc/kayobe/docker.yml". Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". * Removes the "kolla_docker_registry_insecure" variable from "etc/kayobe/kolla.yml" as it is not used since the 2023.1 (Antelope) release. The replacement "docker_registry_insecure" variable has been added to "etc/kayobe/docker.yml". Changes in kayobe 14.2.0..14.3.0 -------------------------------- 0e1532e6 Ensure git is present before checkout tasks 7d4d9e0f Stop NetworkManager from overriding resolv.conf 1c440973 Fix gateway assignment when seed SNAT is disabled 5bff84f8 Clean up release notes 4817bfef Pin ansible-core at 2.14.11 db9817e6 docs: the page 'Editable installs' has moved 96e09e21 CI: Run configuration dump against localhost 32d48209 Remove kolla_enable_host_ntp variable a23cde01 Fix configuration dump with inline encrypted variables 8473e06d Honor custom ssh args in kayobe-ansible-user.yml 487c01a9 kolla-bifrost: Add precheck for inspection allocation pool 2cbe9b7a CI: Test SELinux configuration be19765a Improve neutron images regex f4d19f4f dev: Improve error checking for config check functions a8be8fe8 Generate local Kolla Ansible config in check mode 5f3e7262 Fix setting kolla_admin_openrc_cacert 17c0523e Fix an issue when user forgot combine custom passwords 186936af Add retries to get_url and uri tasks 5ef763fb Add seed_deploy_containers_registry_attempt_login 45854233 Remove unsupported kolla_docker_registry_insecure variable 2e3479b6 Fix Launchpad bug URL 875c94dd Add custom user_data content configuration for Bifrost af59e6d9 Resolve slow fact gathering when seed SNAT is off bfe49083 Fix last return value in _get_base_path 46d15a76 Revert "CI: Disable bare metal testing on RL9/c9s" Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/bifrost | 4 ++ ansible/inventory/group_vars/all/docker | 5 ++ ansible/inventory/group_vars/all/kolla | 23 ++++---- ansible/inventory/group_vars/all/seed | 4 ++ ansible/inventory/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 1 - ansible/kolla-bifrost-hostvars.yml | 9 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 15 +---- .../kolla-ansible/templates/kolla/globals.yml | 7 +-- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- dev/functions | 22 ++++---- ...tenks-deploy-config-compute-libvirt-on-host.yml | 6 ++ dev/tenks-deploy-config-compute.yml | 6 ++ .../configuration/reference/kolla-ansible.rst | 60 +++++++++++--------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/bifrost.yml | 4 ++ etc/kayobe/docker.yml | 5 ++ etc/kayobe/kolla.yml | 13 ++--- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 18 +++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- playbooks/kayobe-overcloud-base/run.yml | 2 - playbooks/kayobe-overcloud-upgrade-base/run.yml | 4 -- ...-custom-user-data-content-d188c7c197b50acb.yaml | 6 ++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ ...-docker-registry-insecure-9d92a2c7c8bdc99c.yaml | 13 +++++ requirements.txt | 2 + 54 files changed, 496 insertions(+), 114 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 752bc6d2..5cdda362 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,0 +4,2 @@ ansible>=6,<8.0 # GPLv3 +# NOTE(priteau): Pin due to AnsibleUnsafeText issues with new ansible-core +ansible-core<2.14.12 # GPLv3

1 0

heat 19.0.2 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are happy to announce the release of: heat 19.0.2 This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. Changes in heat 19.0.1..19.0.2 ------------------------------ d3948706a Return HTTPBadRequest from circular dependency c73cf918c Move CircularDependencyException to common a2b70a936 Skip loading auth plugin in case the property is set Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- devstack/lib/heat | 4 +-- heat/api/middleware/fault.py | 3 +- heat/common/context.py | 15 ++++++---- heat/common/exception.py | 4 +++ heat/engine/dependencies.py | 7 +---- 13 files changed, 79 insertions(+), 29 deletions(-)

1 0

heat 20.0.1 (antelope)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are satisfied to announce the release of: heat 20.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. Changes in heat 20.0.0..20.0.1 ------------------------------ 91709d220 Bump Fedora image used in CI afe3e4aa5 Skip loading auth plugin in case the property is set Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- devstack/lib/heat | 4 ++-- heat/common/context.py | 15 +++++++++------ 6 files changed, 16 insertions(+), 13 deletions(-)

1 0

nova 26.2.1 (zed)
by no-reply＠openstack.org 19 Jan '24

19 Jan '24

We jubilantly announce the release of: nova 26.2.1: Cloud computing fabric controller This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 26.2.1 ^^^^^^ Bug Fixes ********* * Previously "switchdev" capabilities should be configured manually by a user with admin privileges using port's binding profile. This blocked regular users from managing ports with Open vSwitch hardware offloading as providing write access to a port's binding profile to non-admin users introduces security risks. For example, a binding profile may contain a "pci_slot" definition, which denotes the host PCI address of the device attached to the VM. A malicious user can use this parameter to passthrough any host device to a guest, so it is impossible to provide write access to a binding profile to regular users in many scenarios. This patch fixes this situation by translating VF capabilities reported by Libvirt to Neutron port binding profiles. Other VF capabilities are translated as well for possible future use. Other Notes *********** * For networks which have any subnets with enabled DHCP, MTU value is not send in the metadata. In such case MTU is configured through the DHCP server. Changes in nova 26.2.0..26.2.1 ------------------------------ 787839f663 Allow live migrate paused instance when post copy is enabled c36e0db957 Translate VF network capabilities to port binding 1b9c4c7e64 Fix rebuild compute RPC API exception for rolling-upgrades e13c86b4f3 add a regression test for all compute RPCAPI 6.x pinnings for rebuild 53e3afe3a6 Decorate only Flavor.get_* methods that execute queries e5eb65e7a0 enable validations in nova-lvm 9e84562976 Add debug logging when Instance raises OrphanedObjectError 2f1d65774f Fix failed count for anti-affinity check 77db64237b Fix get_segments_id with subnets without segment_id 9e86be5a53 Have host look for CPU controller of cgroupsv2 location. 693318573c Save cell socket correctly when updating host NUMA topology d9dfd0e044 Reproduce bug 1995153 ec15df83d2 Don't provide MTU value in metadata service if DHCP is enabled 1e1e40433c libvirt: At start-up rework compareCPU() usage with a workaround Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 - nova/compute/build_results.py | 8 ++ nova/compute/manager.py | 37 +++-- nova/conf/workarounds.py | 7 + nova/exception.py | 9 ++ nova/network/neutron.py | 9 +- nova/objects/flavor.py | 6 +- nova/objects/instance.py | 5 + nova/objects/pci_device.py | 7 + .../functional/regressions/test_bug_1595962.py | 1 + .../functional/regressions/test_bug_1995153.py | 107 +++++++++++++++ .../functional/regressions/test_bug_2040264.py | 56 ++++++++ nova/virt/hardware.py | 1 + nova/virt/libvirt/driver.py | 58 ++++---- nova/virt/libvirt/host.py | 31 ++++- nova/virt/netutils.py | 9 +- ...etworks-with-enabled-dhcp-641506f2a13b540f.yaml | 5 + ...abilities_to_port_binding-48abbfe0ce2923cf.yaml | 16 +++ 36 files changed, 849 insertions(+), 109 deletions(-)

1 0

openstack-ansible 26.5.0 (zed)
by no-reply＠openstack.org 18 Jan '24

18 Jan '24

We contentedly announce the release of: openstack-ansible 26.5.0: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.5.0 ^^^^^^ New Features ************ * Add "rabbitmq_additional_config" to be able to add additional configuration e.g. to add configuration for plugins. Bug Fixes ********* * After adding "localhost" to inventory explicitly this resulted in potential FQDN change due to adding a record for localhost into managed block inside "/etc/hosts" file. This is now fixed and record for "127.0.0.1" will be removed from managed by Ansible blocks inside /etc/hosts file. Changes in openstack-ansible 26.4.0..26.5.0 ------------------------------------------- 68e1801e2 Bump SHAs for Zed bd6d6437f Skip installing curl for EL Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 24 ++++++++++---------- playbooks/defaults/repo_packages/nova_consoles.yml | 6 ++--- .../defaults/repo_packages/openstack_services.yml | 26 +++++++++++----------- ...ot_add_localhost_to_hosts-36e365b95dc9da42.yaml | 8 +++++++ ...abbitmq_additional_config-8d5c0c0b6fc6d750.yaml | 4 ++++ 6 files changed, 40 insertions(+), 29 deletions(-)

1 0

openstack-ansible 28.0.1 (bobcat)
by no-reply＠openstack.org 18 Jan '24

18 Jan '24

We are psyched to announce the release of: openstack-ansible 28.0.1: Ansible playbooks for deploying OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 28.0.1 ^^^^^^ Known Issues ************ * With recent changes to config_template module, it is not possible anymore to have variables as dictionary keys in overrides. Example below will not be renderred properly: config_overrides: "{{ inventory_hostname }}": cruel: world This limitation boils down to Ansible design and will be true for any other module as well. In order to overcome it, you can transform the dictionary to a Jinja2 format: config_overrides: |- {{ { inventory_hostname: { 'cruel': 'world' } } }} Deprecation Notes ***************** * Format of "client" key inside "ceph_extra_components" variable has been deprecated in favor of a mapping with one required attribute "name". Having "client" key defined as a simple list is kept for backwards compatibility but will be removed in future releases. * Variables controlling systemd-networkd default filename templating when one is not supplied were deprecated and has no effect from now on. * systemd_networkd_filename * systemd_networkd_filename_alt It is highly recommended to provide "filename" parameter explicitly whenever you define "systemd_netdevs" or "systemd_networks" structures. * Generation of SSH keypairs for Ironic users has been deprecated and removed. A variable "ironic_recreate_keys" has been removed and has no effect. Bug Fixes ********* * Backwards compatibility of "client" key inside "ceph_extra_components" variable has been fixed to support both a list and a list of mappings. * Fixes format of "ceph_conf_overrides_rgw" variable by converting override dictionary to Jinja2 format to workaround Ansible limitation on usage of variables as keys in dictionary. * After adding "localhost" to inventory explicitly this resulted in potential FQDN change due to adding a record for localhost into managed block inside "/etc/hosts" file. This is now fixed and record for "127.0.0.1" will be removed from managed by Ansible blocks inside /etc/hosts file. * Multiple routes can be supplied to the systemd network and they will be placed to a separate configuration file */etc/systemd/network/{{ filename }}.d/routes.conf* Previously defining multiple routes will result in squashing them together under same section name, while for them to work properly each descriped route must be placed in it's own section. Changes in openstack-ansible 28.0.0..28.0.1 ------------------------------------------- 436d211b4 Bump SHAs for 2023.2 (Bobcat) 6bb4c0f70 Return back /healtcheck URI verification 1d878e6c5 Modify RGW client format fda9704ce Skip installing curl for EL 8413c204d [doc] Remove references of older releases 8bcd9198f Fix http-check ordering for services f4b3d4db1 Update deploy guide copyright years to be current 0d5d80ea1 Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 38 ++-- deploy-guide/source/conf.py | 2 +- inventory/group_vars/all/source_git.yml | 4 +- .../group_vars/barbican_all/haproxy_service.yml | 2 +- inventory/group_vars/barbican_all/source_git.yml | 4 +- .../group_vars/blazar_all/haproxy_service.yml | 1 - inventory/group_vars/ceph-rgw.yml | 34 ++-- .../group_vars/cinder_all/haproxy_service.yml | 2 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- .../group_vars/cloudkitty_all/haproxy_service.yml | 2 +- .../group_vars/glance_all/haproxy_service.yml | 2 +- .../group_vars/gnocchi_all/haproxy_services.yml | 2 +- inventory/group_vars/heat_all/haproxy_service.yml | 4 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- .../group_vars/ironic_all/haproxy_service.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 6 +- .../group_vars/keystone_all/haproxy_service.yml | 2 +- .../group_vars/magnum_all/haproxy_service.yml | 2 +- .../group_vars/manila_all/haproxy_service.yml | 2 +- .../group_vars/murano_all/haproxy_service.yml | 3 +- .../group_vars/neutron_all/haproxy_service.yml | 2 +- inventory/group_vars/neutron_all/source_git.yml | 6 +- inventory/group_vars/nova_all/haproxy_service.yml | 6 +- inventory/group_vars/nova_all/source_git.yml | 8 +- .../group_vars/octavia_all/haproxy_service.yml | 2 +- inventory/group_vars/octavia_all/source_git.yml | 4 +- inventory/group_vars/swift_all/haproxy_service.yml | 2 +- inventory/group_vars/trove_all/source_git.yml | 4 +- inventory/group_vars/zun_all/haproxy_service.yml | 4 +- inventory/group_vars/zun_all/source_git.yml | 4 +- .../ceph_components_format-3a947aa47ed2ff71.yaml | 13 ++ ...g_overrides_dict_key_vars-962b4bebca02c477.yaml | 34 ++++ ...ot_add_localhost_to_hosts-36e365b95dc9da42.yaml | 8 + ...workd_filename_formatting-ce5e032876cdca09.yaml | 12 ++ .../networkd_multiple_routes-becb9e691f38987a.yaml | 11 ++ .../no_ironic_ssh_keypairs-b666bcdd67ca179b.yaml | 6 + 40 files changed, 171 insertions(+), 281 deletions(-)

1 0

openstack-ansible 27.4.0 (antelope)
by no-reply＠openstack.org 18 Jan '24

18 Jan '24

We are tickled pink to announce the release of: openstack-ansible 27.4.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.4.0 ^^^^^^ New Features ************ * Add "rabbitmq_additional_config" to be able to add additional configuration e.g. to add configuration for plugins. Known Issues ************ * With recent changes to config_template module, it is not possible anymore to have variables as dictionary keys in overrides. Example below will not be renderred properly: config_overrides: "{{ inventory_hostname }}": cruel: world This limitation boils down to Ansible design and will be true for any other module as well. In order to overcome it, you can transform the dictionary to a Jinja2 format: config_overrides: |- {{ { inventory_hostname: { 'cruel': 'world' } } }} Deprecation Notes ***************** * Variables controlling systemd-networkd default filename templating when one is not supplied were deprecated and has no effect from now on. * systemd_networkd_filename * systemd_networkd_filename_alt It is highly recommended to provide "filename" parameter explicitly whenever you define "systemd_netdevs" or "systemd_networks" structures. Bug Fixes ********* * Fixes format of "ceph_conf_overrides_rgw" variable by converting override dictionary to Jinja2 format to workaround Ansible limitation on usage of variables as keys in dictionary. * After adding "localhost" to inventory explicitly this resulted in potential FQDN change due to adding a record for localhost into managed block inside "/etc/hosts" file. This is now fixed and record for "127.0.0.1" will be removed from managed by Ansible blocks inside /etc/hosts file. * Multiple routes can be supplied to the systemd network and they will be placed to a separate configuration file */etc/systemd/network/{{ filename }}.d/routes.conf* Previously defining multiple routes will result in squashing them together under same section name, while for them to work properly each descriped route must be placed in it's own section. Changes in openstack-ansible 27.3.0..27.4.0 ------------------------------------------- 43028410f Bump SHAs for 2023.1 dbc265ce5 Modify RGW client format 6c5217aa8 Skip installing curl for EL 6567efc35 Fix shallow_since for rabbitmq_server on 2023.1 2903bfc4a bump rabbitmq-server role to resolve installation issue on Rocky Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 34 +++++++++---------- inventory/group_vars/ceilometer_all/source_git.yml | 4 +-- inventory/group_vars/ceph-rgw.yml | 38 ++++++++++++---------- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +-- inventory/group_vars/designate_all/source_git.yml | 4 +-- inventory/group_vars/ironic_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 8 ++--- inventory/group_vars/nova_all/source_git.yml | 8 ++--- inventory/group_vars/octavia_all/source_git.yml | 6 ++-- inventory/group_vars/swift_all/source_git.yml | 4 +-- inventory/group_vars/trove_all/source_git.yml | 4 +-- ...g_overrides_dict_key_vars-962b4bebca02c477.yaml | 34 +++++++++++++++++++ ...ot_add_localhost_to_hosts-36e365b95dc9da42.yaml | 8 +++++ ...workd_filename_formatting-ce5e032876cdca09.yaml | 12 +++++++ .../networkd_multiple_routes-becb9e691f38987a.yaml | 11 +++++++ ...abbitmq_additional_config-8d5c0c0b6fc6d750.yaml | 4 +++ 18 files changed, 132 insertions(+), 60 deletions(-)

1 0

oslo.utils 7.0.0 (caracal)
by no-reply＠openstack.org 18 Jan '24

18 Jan '24

We are delighted to announce the release of: oslo.utils 7.0.0: Oslo Utility library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 7.0.0 ^^^^^ Upgrade Notes * The "strict" argument has been removed from the "is_same_callback" function. The argument has had no effect in Python 3.8. Changes in oslo.utils 6.3.0..7.0.0 ---------------------------------- 701b096 Update python classifier in setup.cfg 59f3a0d Python-3.12: do not use datetime.datetime.utcnow() c4746ef Remove reference to monotonic on PyPI 2319e6d Remove strict from is_same_callback() Diffstat (except docs and test files) ------------------------------------- oslo_utils/reflection.py | 36 +++------------------- oslo_utils/timeutils.py | 12 +++----- ...ict-from-is_same_callback-cfbff2ada778987e.yaml | 5 +++ setup.cfg | 1 + 6 files changed, 18 insertions(+), 54 deletions(-)

1 0

sushy 4.8.0 (caracal)
by no-reply＠openstack.org 17 Jan '24

17 Jan '24

We are chuffed to announce the release of: sushy 4.8.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.8.0 ^^^^^ New Features ************ * Adds a "boot_progress" mapped object to the System object. Inside of this object, a "last_state" value maps to values provided by the "sushy.BootProgressState" enum. Also exposes, for information purposes, the "last_boot_seconds_count", "last_state_updated_at", and "oem_last_state" values, which map to the DMTF Redfish values "LastBootTimeSeconds", "LastStateTime", and "OemLastState" fields for the "BootProgress" object. * Adds support for virtual media via "System" resource. For more information, see bug 2039458 (https://bugs.launchpad.net/sushy/+bug/2039458) Bug Fixes ********* * Correctly handles errors on a request that is re-tried after refreshing an authentication token. Changes in sushy 4.7.0..4.8.0 ----------------------------- a9c4a8e Allows System to access VirtualMedia in Sushy e88e0d8 Add release version to release notes db87ff7 Handle exceptions after re-authentication 192d897 Remove version field from iLO error 3c49a85 Add a boot progress indicator Diffstat (except docs and test files) ------------------------------------- .../add-system-bootprogress-42ee452cfa279c63.yaml | 10 ++ releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 + ...sushy-system-virtualmedia-7a61bd77780f7b0e.yaml | 6 + releasenotes/source/2023.1.rst | 6 +- releasenotes/source/2023.2.rst | 6 +- sushy/connector.py | 28 ++-- sushy/resources/system/constants.py | 38 +++++ sushy/resources/system/system.py | 35 +++++ .../json_samples/virtual_media_collectionv1_6.json | 12 ++ 16 files changed, 558 insertions(+), 20 deletions(-)

1 0