December 2024 - Release-announce - lists.openstack.org

openstacksdk 4.2.0 (epoxy)
by no-reply＠openstack.org 16 Dec '24

16 Dec '24

We are jazzed to announce the release of: openstacksdk 4.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 4.2.0 ^^^^^ New Features ************ * Add "trunk_details" attribute to "port" resource. This attribute is a dictionary with the trunk ID and a list of subports. Each element in the subports list is a dictionary with the subport ID, the segmentation type and segmentation ID. * Add support for granting inherited roles. Roles assignments can be added to a user or group on the system, a domain, or a project. * Added a method to create (POST) tags in the network resources. This method is idempotent. Upgrade Notes ************* * IPv6 support now is detected according to the IP addresses assigned to all network interfaces, instead of presence of IPv6 default route. In case there is any IP v6 address, which is not loopback or link-local, then the host is considered to support IPv6. Changes in openstacksdk 4.1.0..4.2.0 ------------------------------------ ad6beea7 compute: Use security group name or ID 7df9a721 Replace netifaces library 85aa947e Skip disabling compute service 1c13a05e Remove reference to removed nova services 6ad5fbe1 Fix swift metadata setting documentation 85a14888 Add port bindings to SDK 1a196d9e reno: Update master for unmaintained/2023.1 c5d74ad3 identity: Add tags, options to Domain 399dfcc0 pre-commit: Migrate pyupgrade to ruff-format 33b5bfac pre-commit: Bump versions 30d41a4b Timing tests should use a threshold. b2683886 doc: Add multiple examples of authentication configuration 1453d56c block storage: Add user_id query param for Volume 30153433 compute: Add additional migration parameters 677192bf identity: Add functional tests for projects 70054827 Add method to create network resource tags 1621b490 Skip disabling compute service b07720cb Fix missing 'f' prefix in exception message aff5e358 Identity: Support assigning inherited roles 545f0af9 Add options property to User 7e592aab Add functional test for tags in Neutron resources 886fb80f Add ``trunk_details`` to ``ports`` resource f6b9a390 compute: Add locked filter for Server 0b592bce Avoid race condition between rule removal and share deletion in tearDown Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 13 +- examples/compute/create.py | 8 +- openstack/__main__.py | 5 +- openstack/accelerator/v2/deployable.py | 2 +- openstack/baremetal/configdrive.py | 9 +- openstack/baremetal/v1/_proxy.py | 9 +- openstack/baremetal/v1/allocation.py | 5 +- openstack/baremetal/v1/driver.py | 4 +- openstack/baremetal/v1/node.py | 123 +++----- openstack/baremetal/v1/port.py | 4 + .../baremetal_introspection/v1/introspection.py | 9 +- openstack/block_storage/_base_proxy.py | 4 +- openstack/block_storage/v2/backup.py | 2 +- openstack/block_storage/v3/backup.py | 2 +- openstack/block_storage/v3/volume.py | 1 + openstack/cloud/_baremetal.py | 27 +- openstack/cloud/_block_storage.py | 22 +- openstack/cloud/_coe.py | 4 +- openstack/cloud/_compute.py | 55 ++-- openstack/cloud/_dns.py | 15 +- openstack/cloud/_identity.py | 64 ++-- openstack/cloud/_image.py | 9 +- openstack/cloud/_network.py | 72 ++--- openstack/cloud/_network_common.py | 110 +++---- openstack/cloud/_object_store.py | 28 +- openstack/cloud/_utils.py | 42 +-- openstack/cloud/exc.py | 4 +- openstack/cloud/meta.py | 18 +- openstack/cloud/openstackcloud.py | 16 +- openstack/compute/v2/_proxy.py | 20 +- openstack/compute/v2/server.py | 31 +- openstack/compute/v2/server_group.py | 2 +- openstack/config/cloud_region.py | 64 ++-- openstack/config/loader.py | 49 ++-- openstack/config/vendors/__init__.py | 8 +- openstack/exceptions.py | 23 +- openstack/format.py | 4 +- openstack/identity/v3/_proxy.py | 80 +++-- openstack/identity/v3/domain.py | 47 ++- openstack/identity/v3/project.py | 41 ++- openstack/identity/v3/user.py | 2 + openstack/image/_download.py | 4 +- openstack/image/v2/_proxy.py | 24 +- openstack/key_manager/v1/_format.py | 2 +- openstack/message/v2/message.py | 2 +- openstack/network/v2/_base.py | 20 ++ openstack/network/v2/_proxy.py | 169 ++++++++++- openstack/network/v2/floating_ip.py | 6 +- openstack/network/v2/network.py | 6 +- openstack/network/v2/port.py | 5 +- openstack/network/v2/port_binding.py | 72 +++++ openstack/network/v2/router.py | 6 +- openstack/network/v2/security_group.py | 6 +- openstack/network/v2/security_group_rule.py | 6 +- openstack/network/v2/subnet.py | 6 +- openstack/network/v2/subnet_pool.py | 7 +- openstack/object_store/v1/_proxy.py | 34 +-- openstack/orchestration/util/environment_format.py | 2 +- openstack/orchestration/util/event_utils.py | 2 +- openstack/orchestration/util/template_utils.py | 9 +- openstack/orchestration/util/utils.py | 2 +- openstack/orchestration/v1/_proxy.py | 2 +- openstack/orchestration/v1/stack.py | 13 +- openstack/proxy.py | 27 +- openstack/resource.py | 73 ++--- openstack/service_description.py | 32 +- openstack/shared_file_system/v2/_proxy.py | 2 +- openstack/test/fakes.py | 10 +- .../functional/baremetal/test_baremetal_driver.py | 8 +- .../functional/cloud/test_cluster_templates.py | 4 +- .../functional/network/v2/test_floating_ip.py | 20 +- .../functional/network/v2/test_security_group.py | 19 +- .../functional/network/v2/test_subnet_pool.py | 21 +- .../shared_file_system/test_share_access_rule.py | 2 + .../unit/cloud/test_qos_bandwidth_limit_rule.py | 12 +- .../unit/cloud/test_qos_minimum_bandwidth_rule.py | 10 +- openstack/utils.py | 14 +- openstack/workflow/v2/workflow.py | 2 +- pyproject.toml | 3 + .../add-port-trunk-details-ed2d98a36ce70c0f.yaml | 7 + ...oud-mixin-inherited-roles-ed66bb78ddeca2c9.yaml | 6 + ...etwork-create-tags-method-ccb37b01ed52a58c.yaml | 5 + .../notes/replace-netifaces-632f60884fb7ae00.yaml | 7 + releasenotes/source/2023.1.rst | 2 +- requirements.txt | 2 +- tools/nova_version.py | 2 +- tools/print-services.py | 4 +- zuul.d/functional-jobs.yaml | 5 - 170 files changed, 2277 insertions(+), 2113 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ad1c7e95..1637cc40 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +7,0 @@ keystoneauth1>=3.18.0 # Apache-2.0 -netifaces>=0.10.4 # MIT @@ -11,0 +11 @@ platformdirs>=3 # MIT License +psutil>=3.2.2 # BSD

1 0

tempest 42.0.0 (epoxy)
by no-reply＠openstack.org 16 Dec '24

16 Dec '24

We are delighted to announce the release of: tempest 42.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 42.0.0 ^^^^^^ Prelude ******* Tempest dropped the Python 3.8 support. This is an intermediate release during the 2025.1 development cycle to mark the end of support for 2023.1 release in Tempest. After this release, Tempest will support below OpenStack Releases: * 2024.2 * 2024.1 * 2023.2 Current development of Tempest is for OpenStack 2025.1 development cycle. Upgrade Notes ************* * The default for "[volume] catalog_type", which is used to determine the service type to use to identify the block storage service in the service catalog, has changed from "volumev3" to "block-storage". * Python 3.8 support has been dropped. Last release of Tempest to support python 3.8 is Temepst 41.0.0. The minimum version of Python now supported by Tempest is Python 3.9. Changes in tempest 41.0.0..42.0.0 --------------------------------- c89e516e5 Pin stable/2024.2 constraint in tox to release 42.0.0 98f239364 Use stable branch upper-constraints till 2023.1 3e5592f58 End support for stable/2023.1 b530c1ffb Measure metadata downtime during live-migration 0e599c0d1 Remove python 3.8 support c887976ac Fix typo in release note 6ad37f2b2 Wait for the router port activation before deletion d8e489495 Add compute response schema for microversion 2.96 7f3030c29 Test python 3.12 6d4edfc6d Fix web-download trying to import qcow2 as raw da14e2972 Replace deprecated datetime.utcnow() 507d0dec2 Stop violating image disk_format rules 066e0bddc Update integrated template for grenade-skip-level-always job 14d7f23f3 Add Tempest gate job for stable/2024.2 50151d68d Create releasenotes page for tempest 41.0.0 1a744c804 config: Change [volume] catalog_type default 6c389b211 Switch to the master constraint in tox.ini Diffstat (except docs and test files) ------------------------------------- ...lume-catalog_type-default-fbcb2be6ebc42818.yaml | 6 ++ .../drop-python38-support-c0a696af00110602.yaml | 8 ++ .../end-of-support-of-2023-1-ddec1dac59700063.yaml | 12 +++ releasenotes/source/index.rst | 1 + releasenotes/source/v41.0.0.rst | 6 ++ requirements.txt | 2 +- roles/run-tempest/tasks/main.yaml | 4 +- setup.cfg | 3 +- .../api/compute/flavors/test_flavors_negative.py | 2 +- tempest/api/compute/servers/test_servers.py | 19 +++++ tempest/api/image/v2/admin/test_images.py | 2 +- tempest/api/image/v2/test_images.py | 15 +++- tempest/api/network/test_routers.py | 18 +++-- tempest/api/volume/test_volumes_negative.py | 2 +- tempest/common/utils/net_downtime.py | 86 ++++++++++++++++++++++ tempest/config.py | 8 +- .../api_schema/response/compute/v2_96/__init__.py | 0 .../api_schema/response/compute/v2_96/servers.py | 62 ++++++++++++++++ tempest/lib/auth.py | 7 +- tempest/lib/services/compute/servers_client.py | 4 +- .../scenario/test_network_advanced_server_ops.py | 19 +++++ zuul.d/integrated-gate.yaml | 42 +++++++++++ zuul.d/project.yaml | 15 ++-- zuul.d/stable-jobs.yaml | 26 +++---- 28 files changed, 336 insertions(+), 49 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b0df18b29..d2f13a591 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.utils>=4.7.0 # Apache-2.0 +oslo.utils>=7.0.0 # Apache-2.0

1 0

manila 16.3.0 (antelope)
by no-reply＠openstack.org 12 Dec '24

12 Dec '24

We exuberantly announce the release of: manila 16.3.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 16.3.0 ^^^^^^ Upgrade Notes ************* * Shares created using the CEPHFS Native protocol will now have a new *__mount_options* metadata containing the *cephfs_filesystem_name* to enhance usability while mounting shares. Existing shares will be updated through the ensure shares workflow. To preserve backwards compatibility, this metadata is mutable by end users. It is strongly recommended that administrators include "__mount_options" in the *[DEFAULT]/admin_only_metadata_keys* configuration option. Bug Fixes ********* * Fixed share export location update when subnet is added to a network containing shares. Please refer to the Launchpad bug #2017501 (https://bugs.launchpad.net/manila/+bug/2017501) for more details. * Fixed cleanup of share network security service associations at network delete. See *Launchpad bug 2029366 <https://bugs.launchpad.net/manila/+bug/2029366>* for more details. * The CephFS driver used to set the "preferred" export path incorrectly. It is now fixed to set it as part of export location metadata. See Launchpad bug 2053100 (https://launchpad.net/bugs/2053100) for more details. * Share manager drivers can now update export location metadata (such as the *preferred* attribute) during the *ensure_shares* routine. (Launchpad bug: 2053100 (https://launchpad.net/bugs/2053100)) * NetApp ONTAP driver will now retry the sis operation (e.g. dedupe) if sis operation is currently active. This is needed because NetApp turns on efficiency (by default) on latest hardware which causes conflicting sis operation when Manila tries to turn it off. For more details, please check Launchpad bug #2071359 (https://bugs.launchpad.net/manila/+bug/2071359) * When using Neutron networks tagged as *external* (unmanaged provider networks) as share networks, Manila now creates ports with *admin_state_up=False* (disabled). This change addresses ARP failures that can occur when using OVN as the Neutron ML2 plugin. For more information, refer to bug 2074504 (https://bugs.launchpad.net/manila/+bug/2074504) Changes in manila 16.2.1..16.3.0 -------------------------------- 6a55ee6a9 Fix share network delete procedure 0e71235ae Add cephfs filesystem to shares metadata 62eaf38da Add a new config option to specify admin metadata c5e6c5432 Fix export location metadata updates by drivers 221b560d8 Fix "preferred" export locations in the CephFS driver afb326d25 Ensure password values are not logged 2944880f0 Fix export locations update when subnet is added 58dbf997e Create ports as disabled with external networks 53eaea772 Netapp: Retry Dedupe enable/disable if busy Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_metadata.py | 11 +- manila/api/v2/share_networks.py | 13 +++ manila/api/v2/shares.py | 13 ++- manila/common/config.py | 4 + manila/common/constants.py | 6 +- manila/db/sqlalchemy/api.py | 24 ++++- manila/network/neutron/neutron_network_plugin.py | 63 ++++++++--- manila/share/driver.py | 19 ++++ manila/share/drivers/cephfs/driver.py | 35 +++++-- manila/share/drivers/dell_emc/driver.py | 1 + manila/share/drivers/hdfs/hdfs_native.py | 1 + manila/share/drivers/infortrend/driver.py | 2 - manila/share/drivers/macrosan/macrosan_nas.py | 1 - manila/share/drivers/maprfs/maprfs_native.py | 1 + .../share/drivers/netapp/dataontap/client/api.py | 1 + .../netapp/dataontap/client/client_cmode.py | 38 ++++++- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 3 +- manila/share/drivers/tegile/tegile.py | 1 + manila/share/drivers/zfssa/zfssashare.py | 1 + manila/share/manager.py | 18 ++++ .../netapp/dataontap/client/test_client_cmode.py | 42 ++++++++ ...g-2017501-fix-share-export-location-update.yaml | 7 ++ ...thout-security-associaton-ae56473f6d32c47e.yaml | 5 + ...metadata-to-cephfs-shares-5725d751980360ec.yaml | 10 ++ ...admin-and-driver-metadata-b0ede7d7cf057b5b.yaml | 8 ++ ...ver-preferred-path-update-70147668e0f19c4d.yaml | 7 ++ ...th-preferred-attr-updates-32db001aacfc8563.yaml | 6 ++ ...peratin-if-already-active-4625605175f76d07.yaml | 8 ++ ...ports-on-neutron-ext-nets-af3ff56da9a928df.yaml | 9 ++ 34 files changed, 660 insertions(+), 96 deletions(-)

1 0

neutron 25.1.0 (dalmatian)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are chuffed to announce the release of: neutron 25.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 25.0.0..25.1.0 --------------------------------- 93e86fa841 Fix the tagging policy engine fd452de1e9 [OVN] Use the MySQL backend for the ``TestOvnNbSync`` tests ad479cf827 Add policy enforcer for QoS policy "tags" service plugin 75950ca156 Filter out the floating IPs when removing a shared RBAC 94f5789118 [OVN] Add a creation wait event for the PG drop tests a70e5a4c99 Set distributed flag to NB_Global ebafc58e69 [stable-only] Change the agent AZ query by agent type a32b284789 Pass one single input parameter to ``TestCase.fail`` 1f29baf079 [Fullstack] Use only one keepalived-state-change thread in L3 agent 8e47490f7d OVN metadata agent additional_chassis detection 6a9c4c5d21 [OVN] Create the SG rules revision number registers 18be8afc00 Add logging details of the http response in the unit tests b99a9ee53e [OVN] Check LSP.up status before setting the port host info 245d8266d5 [OVN] Fix the revision number retrieval method 5d9409898f [2024.2 only] Switch to 2024.2 neutron-tempest-plugin jobs 1c6e845cdc Modify the default SG rule count logic when creating SG aff4e4e8f3 [OVN] Update lsp host id when cr port is updated with chassis d426051779 Skip LSP host info update for trunk subports 5a69d0354f "security_group_rules" is not a SG selectable field 1a8e1adcd0 Optimize the SG rule retrieval 8e3cd57eca [Fullstack] Add active waiting for one HA agent to be active for router dadd539ecf Use the declarative attribute ``standard_attr_id`` baed736fec [CI] Functional: Increase Ulimit to 4096 a7ff04edea [OVN] Check metadata HA proxy configuration before restart 2aee95548e Ensure the OVSDB and ovn-northd process stop Diffstat (except docs and test files) ------------------------------------- neutron/agent/linux/utils.py | 14 ++ neutron/agent/metadata/driver_base.py | 118 ++++++++--- neutron/agent/ovn/metadata/agent.py | 16 +- neutron/common/ovn/constants.py | 1 + neutron/common/utils.py | 13 ++ neutron/conf/policies/qos.py | 50 +++++ neutron/db/agents_db.py | 4 +- neutron/db/db_base_plugin_common.py | 6 +- neutron/db/db_base_plugin_v2.py | 4 + neutron/db/l3_db.py | 2 +- neutron/db/ovn_revision_numbers_db.py | 28 ++- neutron/db/securitygroups_db.py | 90 +++++---- neutron/extensions/tagging.py | 215 ++++++++++++++------- neutron/objects/agent.py | 17 +- neutron/objects/base.py | 6 +- neutron/objects/subnet.py | 11 -- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 5 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 15 ++ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 23 ++- neutron/privileged/agent/linux/utils.py | 16 ++ neutron/services/ovn_l3/plugin.py | 13 +- neutron/services/ovn_l3/service_providers/ovn.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 51 ++++- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 20 ++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 4 +- .../functional/services/ovn_l3/test_plugin.py | 24 ++- .../unit/extensions/test_network_segment_range.py | 18 +- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 11 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 8 +- zuul.d/base.yaml | 4 +- zuul.d/job-templates.yaml | 2 +- zuul.d/project.yaml | 2 +- 59 files changed, 1358 insertions(+), 326 deletions(-)

1 0

neutron 24.1.0 (caracal)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are chuffed to announce the release of: neutron 24.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 24.1.0 ^^^^^^ Security Issues *************** * A ML2/SR-IOV port with status=DOWN will always set the VF link state to "disable", regardless of the "propagate_uplink_status" port field value. The port disabling, to stop any transmission, has precedence over the link state "auto" value. Bug Fixes ********* * Fixes an issue when associating floating IPs to OVN load balancers. See LP#2068644 for more details. Changes in neutron 24.0.1..24.1.0 --------------------------------- 3510fc4b72 Fix the tagging policy engine c6cd5c6e87 [OVN] Use the MySQL backend for the ``TestOvnNbSync`` tests 2a637ad767 Add policy enforcer for QoS policy "tags" service plugin 3273f11115 [stable-only] Change the agent AZ query by agent type 03cc67e5e0 Filter out the floating IPs when removing a shared RBAC a792f9f7e5 OVN metadata agent additional_chassis detection 098b94906a [stable-only] Drop skip-level jobs in the CI 5c00b7975e Set distributed flag to NB_Global bcf248e6ea [Fullstack] Use only one keepalived-state-change thread in L3 agent b125cdbafb [OVN] Create the SG rules revision number registers ab92f5a014 Add logging details of the http response in the unit tests 8d6ad2f4ec [OVN] Check LSP.up status before setting the port host info 2d376a76c9 [OVN] Fix the revision number retrieval method e8ac162720 Modify the default SG rule count logic when creating SG e900e9923c [OVN] Update lsp host id when cr port is updated with chassis 796f3a6080 Skip LSP host info update for trunk subports 32ef705e5b "security_group_rules" is not a SG selectable field aa2020bc65 Optimize the SG rule retrieval 72fe3e1986 [OVN] Check metadata HA proxy configuration before restart f7ea84216d Use the declarative attribute ``standard_attr_id`` d8a6552b11 [CI] Functional: Increase Ulimit to 4096 1d68253f26 Correct logic error when associating FIP with OVN LB 04109fc522 Handle EndpointNotFound in nova notifier e387b9608d Change the load method of SG rule "default_security_group" 4fa463adf7 [Stable Only] Switch to branched linux bridge job 3a37c95075 Protect the "standardattr" retrieval from a concurrent deletion 583aed50b4 [SR-IOV] The port status=DOWN has precedence in the VF link status 03ddc0f6fd Fix port_hardware_offload_type ML2 extension b98003cf9f Fix support of IPv6 only networks in OVN metadata agent 6f77c811f7 Get ips from system dns resolver without scope 4d38321c90 Always get local vlan from port other_config d0f11ca346 Adopt to StandardAttribute load method change to "selectin" 78900c12f3 Lower spacing time of the OVN maintenance tasks which should be run once 029a62328e Fix setting correct 'reside-on-chassis-redirect' in the maintenance task 0afdfb0ad5 Fix regex lines in zuul.d/* files 59bda697ad Use has_lock_periodic decorator for the tasks which require ovn db lock d15ef79c4d Actualy set global "removal limit" options 2a09a4b802 Use oslo_service's SignalHandler for signals 41f0e9ad04 [stable/2024.1 only] Drop -master jobs 2526d0fdc7 Initialize the policy enforcer for the "tagging" service plugin 28466f849c [2024.1 only] Switch to 2024.1 neutron-tempest-plugin jobs c9b6982431 Do not release the executor inside ``_check_child_processes`` 1f761c27f2 Don't print traceback if standard attr is missing on update Diffstat (except docs and test files) ------------------------------------- .../contributor/testing/ci_scenario_jobs.rst | 15 -- neutron/agent/linux/external_process.py | 1 - .../agent/linux/openvswitch_firewall/firewall.py | 30 ++- neutron/agent/linux/utils.py | 14 ++ neutron/agent/metadata/driver_base.py | 118 ++++++--- neutron/agent/ovn/metadata/agent.py | 57 +++-- neutron/common/ipv6_utils.py | 18 ++ neutron/common/ovn/constants.py | 3 + neutron/common/ovn/utils.py | 3 + neutron/common/utils.py | 13 + neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 4 + neutron/conf/policies/qos.py | 50 ++++ neutron/db/agents_db.py | 4 +- neutron/db/db_base_plugin_common.py | 10 +- neutron/db/db_base_plugin_v2.py | 4 + neutron/db/l3_db.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/ovn_revision_numbers_db.py | 28 ++- neutron/db/port_hardware_offload_type_db.py | 2 +- neutron/db/securitygroups_db.py | 90 ++++--- neutron/extensions/tagging.py | 213 +++++++++++----- neutron/notifiers/nova.py | 3 + neutron/objects/agent.py | 17 +- neutron/objects/base.py | 6 +- neutron/objects/subnet.py | 11 - .../ml2/drivers/mech_sriov/agent/pci_lib.py | 8 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 13 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 151 +++++++++--- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 27 +- neutron/plugins/ml2/ovo_rpc.py | 7 +- neutron/plugins/ml2/plugin.py | 2 - neutron/privileged/agent/linux/utils.py | 16 ++ neutron/services/ovn_l3/plugin.py | 13 +- neutron/services/ovn_l3/service_providers/ovn.py | 4 +- neutron/services/tag/tag_plugin.py | 12 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 100 +++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 20 ++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 4 +- .../functional/services/ovn_l3/test_plugin.py | 24 +- .../linux/openvswitch_firewall/test_firewall.py | 15 ++ .../unit/extensions/test_network_segment_range.py | 18 +- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 74 +++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 11 + .../drivers/ovn/mech_driver/test_mech_driver.py | 37 ++- ...with-ovn-loadbalancer-fip-4e4bda00cf019f71.yaml | 5 + ...te-disable-has-precedence-2adecdf959dc0f9e.yaml | 7 + requirements.txt | 2 +- zuul.d/base.yaml | 113 ++------- zuul.d/grenade.yaml | 48 ++-- zuul.d/job-templates.yaml | 47 +--- zuul.d/project.yaml | 11 +- zuul.d/rally.yaml | 16 +- zuul.d/tempest-multinode.yaml | 72 ++---- zuul.d/tempest-singlenode.yaml | 274 +++------------------ 79 files changed, 1794 insertions(+), 878 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 101d4f3d57..e8d0e8ff40 100644 --- a/requirements.txt +++ b/requirements.txt @@ -41 +41 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service>=2.8.0 # Apache-2.0 +oslo.service>=3.4.1 # Apache-2.0

1 0

neutron 23.3.0 (bobcat)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are amped to announce the release of: neutron 23.3.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 23.3.0 ^^^^^^ Security Issues *************** * A ML2/SR-IOV port with status=DOWN will always set the VF link state to "disable", regardless of the "propagate_uplink_status" port field value. The port disabling, to stop any transmission, has precedence over the link state "auto" value. Bug Fixes ********* * Fixes an issue when associating floating IPs to OVN load balancers. See LP#2068644 for more details. Changes in neutron 23.2.0..23.3.0 --------------------------------- e697e1a0ea Fix the tagging policy engine 1fb5bc5779 [OVN] Use the MySQL backend for the ``TestOvnNbSync`` tests 94b58527f4 [FT] Check "Port_Binding" register exists before checking type cbc01c0637 Add policy enforcer for QoS policy "tags" service plugin 07dede24db [stable-only] Change the agent AZ query by agent type 99d4d5bffe Filter out the floating IPs when removing a shared RBAC e25dadf958 [stable-only] Remove grenade and skip-level jobs in the CI 8903642a2d Set distributed flag to NB_Global ee3dd799db [Fullstack] Use only one keepalived-state-change thread in L3 agent b20d603eee [OVN] Create the SG rules revision number registers 23508947dd Add logging details of the http response in the unit tests 99fbe0f35b [OVN] Check LSP.up status before setting the port host info de11a56f5a [OVN] Fix the revision number retrieval method 180e9bfb74 Modify the default SG rule count logic when creating SG a687142295 [OVN] Update lsp host id when cr port is updated with chassis 336a394355 Skip LSP host info update for trunk subports 47a69fb0e7 Use the declarative attribute ``standard_attr_id`` 58f052f473 [CI] Functional: Increase Ulimit to 4096 6a63596659 Correct logic error when associating FIP with OVN LB 77b553427a Handle EndpointNotFound in nova notifier c06cc4462b [Stable Only] Switch to branched linux bridge job 10b2a35231 Protect the "standardattr" retrieval from a concurrent deletion cabd8862b9 [SR-IOV] The port status=DOWN has precedence in the VF link status 15cf75b770 Get ips from system dns resolver without scope 8ecbe1e1f7 Revert "[OVN] Prevent Trunk creation/deletion with parent port bound" 2450cf6287 Always get local vlan from port other_config 30a0eb17d9 Use oslo_service's SignalHandler for signals e04c3255cd Adopt to StandardAttribute load method change to "selectin" 9108218059 Lower spacing time of the OVN maintenance tasks which should be run once f28367b02e Fix setting correct 'reside-on-chassis-redirect' in the maintenance task af8d615517 Fix regex lines in zuul.d/* files e007ea6b4c Use has_lock_periodic decorator for the tasks which require ovn db lock 35d0535e74 Add has_lock_periodic decorator for OVN Maintenance 43ff8b4cc8 Do not release the executor inside ``_check_child_processes`` 51db404eb6 Initialize the policy enforcer for the "tagging" service plugin deae6d5c51 Don't print traceback if standard attr is missing on update Diffstat (except docs and test files) ------------------------------------- .../contributor/testing/ci_scenario_jobs.rst | 17 - neutron/agent/linux/external_process.py | 1 - .../agent/linux/openvswitch_firewall/firewall.py | 30 +- neutron/common/ipv6_utils.py | 18 + neutron/common/ovn/constants.py | 3 + neutron/common/ovn/utils.py | 3 + neutron/common/utils.py | 16 - neutron/conf/policies/qos.py | 50 +++ neutron/db/agents_db.py | 4 +- neutron/db/db_base_plugin_common.py | 10 +- neutron/db/db_base_plugin_v2.py | 4 + neutron/db/l3_db.py | 2 +- neutron/db/l3_dvr_db.py | 15 +- neutron/db/ovn_revision_numbers_db.py | 28 +- neutron/db/securitygroups_db.py | 12 +- neutron/extensions/tagging.py | 213 +++++++---- neutron/notifiers/nova.py | 3 + neutron/objects/agent.py | 17 +- neutron/objects/subnet.py | 11 - .../ml2/drivers/mech_sriov/agent/pci_lib.py | 8 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 13 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 200 +++++----- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 27 +- neutron/plugins/ml2/ovo_rpc.py | 7 +- neutron/services/ovn_l3/plugin.py | 13 +- neutron/services/tag/tag_plugin.py | 12 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 19 +- neutron/services/trunk/plugin.py | 5 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 51 ++- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 20 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 4 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 2 + .../functional/services/ovn_l3/test_plugin.py | 24 +- .../trunk/drivers/ovn/test_trunk_driver.py | 33 -- .../linux/openvswitch_firewall/test_firewall.py | 15 + .../unit/extensions/test_network_segment_range.py | 18 +- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 57 +++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 11 + .../drivers/ovn/mech_driver/test_mech_driver.py | 37 +- ...with-ovn-loadbalancer-fip-4e4bda00cf019f71.yaml | 5 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 - ...te-disable-has-precedence-2adecdf959dc0f9e.yaml | 7 + requirements.txt | 2 +- zuul.d/base.yaml | 16 +- zuul.d/grenade.yaml | 402 --------------------- zuul.d/job-templates.yaml | 29 +- zuul.d/project.yaml | 13 +- zuul.d/rally.yaml | 16 +- zuul.d/tempest-multinode.yaml | 16 +- zuul.d/tempest-singlenode.yaml | 40 +- 71 files changed, 1375 insertions(+), 846 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 340d8b9d81..7a0c528e45 100644 --- a/requirements.txt +++ b/requirements.txt @@ -45 +45 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service>=2.8.0 # Apache-2.0 +oslo.service>=3.2.1 # Apache-2.0

1 0

puppet-trove 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are thrilled to announce the release of: puppet-trove 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. Changes in puppet-trove 22.0.0..22.0.1 -------------------------------------- 95078cd Prepare final stable/2023.1 release b9dd028 Add .pdkignore to exclude some files from tar ball b5c621f Add per module policy service refresh 6f12e3e Update TOX_CONSTRAINTS_FILE for stable/2023.1 6eed795 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/trove_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-octavia 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are excited to announce the release of: puppet-octavia 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. Changes in puppet-octavia 22.0.0..22.0.1 ---------------------------------------- 864a914 Prepare final stable/2023.1 release 6eb032c Use different resource name for persistence db setup 942cbc7 certificates: Passphrase parameters should be secret 844cabc Restrict access to certificate files 4109b02 Fix wrong audit class tested in unit tests b79e5a3 Add .pdkignore to exclude some files from tar ball 1faed32 Add per module policy service refresh f5b60b9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 d25a5e9 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++ manifests/certificates.pp | 12 +++--- manifests/db/sync_persistence.pp | 2 +- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/octavia_audit_spec.rb | 22 +++++----- spec/classes/octavia_certificates_spec.rb | 23 ++++++----- spec/classes/octavia_db_sync_persistence_spec.rb | 4 +- spec/classes/octavia_policy_spec.rb | 2 + tox.ini | 2 +- 12 files changed, 90 insertions(+), 34 deletions(-)

1 0

puppet-zaqar 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are happy to announce the release of: puppet-zaqar 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-zaqar Download the package from: https://tarballs.openstack.org/puppet-zaqar/ Please report issues through: https://bugs.launchpad.net/puppet-zaqar/+bugs For more details, please see below. Changes in puppet-zaqar 22.0.0..22.0.1 -------------------------------------- efd21e1 Prepare final stable/2023.1 release f1606e4 Add per module policy service refresh 5914bc8 Update TOX_CONSTRAINTS_FILE for stable/2023.1 285184e Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/zaqar_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-vitrage 12.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are psyched to announce the release of: puppet-vitrage 12.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. Changes in puppet-vitrage 12.0.0..12.0.1 ---------------------------------------- b209ed5 Prepare final stable/2023.1 release de6b951 Add .pdkignore to exclude some files from tar ball 3edb103 Add per module policy service refresh c3753b4 Update TOX_CONSTRAINTS_FILE for stable/2023.1 b315960 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/vitrage_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-magnum 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are pumped to announce the release of: puppet-magnum 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-magnum Download the package from: https://tarballs.openstack.org/puppet-magnum/ Please report issues through: https://bugs.launchpad.net/puppet-magnum/+bugs For more details, please see below. Changes in puppet-magnum 22.0.0..22.0.1 --------------------------------------- 3e96be0 Prepare final stable/2023.1 release b06fa0d Add .pdkignore to exclude some files from tar ball 93c2557 Add per module policy service refresh 75893a9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 37892fa Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/magnum_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

oslo.db 17.1.0 (epoxy)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are amped to announce the release of: oslo.db 17.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 17.0.0..17.1.0 --------------------------------- 7cfe7fc Create new asyncio version of enginefacade ac988d1 reno: Update master for unmaintained/2023.1 Diffstat (except docs and test files) ------------------------------------- oslo_db/options.py | 16 + oslo_db/sqlalchemy/asyncio_facade.py | 510 +++++++++++++++ oslo_db/sqlalchemy/enginefacade.py | 783 +++++++++++++++--------- oslo_db/sqlalchemy/engines.py | 242 +++++--- releasenotes/source/2023.1.rst | 2 +- test-requirements.txt | 1 + 9 files changed, 1231 insertions(+), 403 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6aae3ef..5df6765 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ pifpaf>=0.10.0 # Apache-2.0 +aiosqlite>=0.20.0 # MIT License

1 0

puppet-glance 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are overjoyed to announce the release of: puppet-glance 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 22.0.1 ^^^^^^ Bug Fixes * Deprecation mark has been removed from the following parameters, because these parameters are actually effective. * "glance::backend::reserved::staging::filesystem_store_file_perm" * "glance::backend::reserved::staging::filesystem_thin_provisioning" * "glance::backend::reserved::tasks::filesystem_store_file_perm" * "glance::backend::reserved::tasks::filesystem_thin_provisioning" Changes in puppet-glance 22.0.0..22.0.1 --------------------------------------- b2f7615 Prepare final stable/2023.1 release 04e7c3b Allow s3 backend 39b9064 Revert "Deprecate unused options of reserved store" fd4b7c4 Add .pdkignore to exclude some files from tar ball dcacc06 Add per module policy service refresh d8a8d5f Update TOX_CONSTRAINTS_FILE for stable/2023.1 3dd201e Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ manifests/api.pp | 2 +- manifests/backend/reserved/staging.pp | 37 +++++----------- manifests/backend/reserved/tasks.pp | 39 +++++------------ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- ...ecate-reserved-store-opts-848c70d425de01a1.yaml | 10 +++++ spec/classes/glance_policy_spec.rb | 2 + tox.ini | 2 +- 11 files changed, 90 insertions(+), 59 deletions(-)

1 0

puppet-openstack_extras 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are tickled pink to announce the release of: puppet-openstack_extras 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 22.0.0..22.0.1 ------------------------------------------------- ff57304 Prepare final stable/2023.1 release 543ef1c Dont crash when rexml is not installed 97f6f11 Add .pdkignore to exclude some files from tar ball 1ae6602 Update TOX_CONSTRAINTS_FILE for stable/2023.1 e650228 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++ lib/puppet/provider/pacemaker_common.rb | 5 +++- metadata.json | 2 +- tox.ini | 2 +- 5 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-nova 22.2.0 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We high-spiritedly announce the release of: puppet-nova 22.2.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 22.2.0 ^^^^^^ New Features ************ * Added new "nova::compute::libvirt::secret_ceph" resource definition that can be used to create a libvirt secret of type ceph. * Added new "manage_libvirt_secret" parameter defaulting to true in the "nova::compute::rbd" class. Bug Fixes ********* * Now the "nova::compute::ironic" class installs the "nova-compute- ironic" package in Debian or Ubuntu. Changes in puppet-nova 22.1.0..22.2.0 ------------------------------------- febcc4c7 Prepare final stable/2023.1 release 79ba10f6 Assume structured fact in unit tests a827cfa7 Add nova::compute::libvirt::secret_ceph resource 36951d35 Set show_diff to false for Nova SSH private key e7a09d24 nova_flavor: Fix broken idempotency with properties fb4e7883 Avoid restarting dbus service c56daf42 Debian/Ubuntu: Fix missing nova-compute-ironic 4be2d82e Add .pdkignore to exclude some files from tar ball 4a04ba26 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- .pdkignore | 51 ++++++++++++ lib/puppet/provider/nova_flavor/openstack.rb | 4 +- manifests/compute/ironic.pp | 14 +++- manifests/compute/libvirt/secret_ceph.pp | 85 ++++++++++++++++++++ manifests/compute/libvirt/services.pp | 11 ++- manifests/compute/rbd.pp | 60 ++++++++------ manifests/deps.pp | 2 +- manifests/init.pp | 11 +-- manifests/policy.pp | 1 + metadata.json | 2 +- .../notes/bug-2042383-76b5bd1579f9310d.yaml | 5 ++ .../libvirt-secret-ceph-b4b11706463f13c6.yaml | 8 ++ spec/acceptance/10_nova_wsgi_apache_spec.rb | 3 +- spec/classes/nova_compute_ironic_spec.rb | 25 +++--- spec/classes/nova_compute_libvirt_services_spec.rb | 2 +- spec/classes/nova_init_spec.rb | 5 +- spec/classes/nova_migration_libvirt_spec.rb | 4 +- spec/classes/nova_policy_spec.rb | 2 + .../nova_compute_libvirt_secret_ceph_spec.rb | 91 ++++++++++++++++++++++ spec/unit/provider/nova_flavor/openstack_spec.rb | 47 +++++++++++ templates/libvirt-secret-ceph.xml.epp | 6 ++ templates/secret.xml-compute.erb | 6 -- 22 files changed, 384 insertions(+), 61 deletions(-)

1 0

puppet-manila 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We jubilantly announce the release of: puppet-manila 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. Changes in puppet-manila 22.0.0..22.0.1 --------------------------------------- 01839d8 Prepare final stable/2023.1 release 77cf1d3 Add .pdkignore to exclude some files from tar ball 56e4f87 Add per module policy service refresh f9903e5 Update TOX_CONSTRAINTS_FILE for stable/2023.1 49de503 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/manila_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-watcher 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We jubilantly announce the release of: puppet-watcher 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. Changes in puppet-watcher 22.0.0..22.0.1 ---------------------------------------- ddfbf60 Prepare final stable/2023.1 release 89006bb Add .pdkignore to exclude some files from tar ball d661961 Add per module policy service refresh 5f03372 Update TOX_CONSTRAINTS_FILE for stable/2023.1 0c05632 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/watcher_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-oslo 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are overjoyed to announce the release of: puppet-oslo 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. Changes in puppet-oslo 22.0.0..22.0.1 ------------------------------------- 0e7c648 Prepare final stable/2023.1 release 3041590 Debian/Ubuntu: Do not install python3-pysqlite2 37c891e coordination: Use consistent tag format for package resources 4cc62f4 Add .pdkignore to exclude some files from tar ball 758f98d Update TOX_CONSTRAINTS_FILE for stable/2023.1 e31f787 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++++++++++++ manifests/coordination.pp | 8 +++--- manifests/db.pp | 2 +- manifests/params.pp | 2 -- metadata.json | 2 +- spec/defines/oslo_coordination_spec.rb | 8 +++--- spec/defines/oslo_db_spec.rb | 28 ------------------- tox.ini | 2 +- 9 files changed, 63 insertions(+), 41 deletions(-)

1 0

puppet-swift 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are excited to announce the release of: puppet-swift 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. Changes in puppet-swift 22.0.0..22.0.1 -------------------------------------- 5bb54d7 Prepare final stable/2023.1 release 3f54cf7 Define separator explicitly in set_value call 897269e ceilometer: Fix wrong rendering of ignore_projects bdb21d3 Fix constraint related to dnspython 39c9eda Add .pdkignore to exclude some files from tar ball 27b32f5 Update TOX_CONSTRAINTS_FILE for stable/2023.1 fc8d6be Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++ lib/puppet/provider/swift_storage_policy/ruby.rb | 2 +- manifests/proxy/ceilometer.pp | 2 +- manifests/proxy/cname_lookup.pp | 4 +- metadata.json | 2 +- spec/classes/swift_proxy_ceilometer_spec.rb | 4 +- tox.ini | 2 +- 8 files changed, 59 insertions(+), 9 deletions(-)

1 0

puppet-heat 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are amped to announce the release of: puppet-heat 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. Changes in puppet-heat 22.0.0..22.0.1 ------------------------------------- c889ac3 Prepare final stable/2023.1 release 7453d71 Add .pdkignore to exclude some files from tar ball a9a0182 Add per module policy service refresh dfe1e0e Update TOX_CONSTRAINTS_FILE for stable/2023.1 13dbefc Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/heat_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-horizon 22.1.0 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We joyfully announce the release of: puppet-horizon 22.1.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 22.1.0 ^^^^^^ New Features * The new "horizon::dashboards::ironic" class has been added. Changes in puppet-horizon 22.0.0..22.1.0 ---------------------------------------- 44a4357 Prepare final stable/2023.1 release 1d4360c Restart httpd after config change 0950806 Create dedicated class for ironic-ui b81713f Debian: Fix wrong wsgi script path ac5514e Add .pdkignore to exclude some files from tar ball 6baab95 Add per module policy service refresh 74b379f ENFORCE_PASSWORD_CHECK is a standalone setting 1c961e1 Fix missing comma causing syntax error 8dc50b8 Update TOX_CONSTRAINTS_FILE for stable/2023.1 17cce3c Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++ manifests/dashboard.pp | 4 +- manifests/dashboards/ironic.pp | 55 ++++++++++++++++++++++ manifests/deps.pp | 18 +++---- manifests/init.pp | 27 +++++------ manifests/params.pp | 6 ++- manifests/policy/base.pp | 3 +- manifests/wsgi/apache.pp | 3 +- metadata.json | 2 +- .../notes/ironic-dashboard-0dc5814a56121d5b.yaml | 4 ++ spec/classes/horizon_dashboards_ironic_spec.rb | 55 ++++++++++++++++++++++ spec/classes/horizon_init_spec.rb | 46 ++++++------------ spec/classes/horizon_wsgi_apache_spec.rb | 31 +++++++----- spec/defines/horizon_dashboard_spec.rb | 8 ++-- spec/defines/horizon_policy_base_spec.rb | 2 + templates/_1499_load_balancer_settings.py.erb | 4 +- templates/_2299_baremetal_settings.py.erb | 20 ++++++++ templates/local_settings.py.erb | 4 +- tox.ini | 2 +- 20 files changed, 263 insertions(+), 83 deletions(-)

1 0

puppet-keystone 22.1.0 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We enthusiastically announce the release of: puppet-keystone 22.1.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 22.1.0 ^^^^^^ New Features * Added "database_slave_connection" parameter to "keystone::db" class. Changes in puppet-keystone 22.0.0..22.1.0 ----------------------------------------- d02d94c Prepare final stable/2023.1 release 6aa6026 Add database_slave_connection to keystone::db class 295ea23 Fix invalid string concatenation 64fa2e3 Set show_diff to false when configuring Federation 1b368dd identity provider: Drop reference to removed parameters eec7bf4 Debian: Allow keystone without httpd 62fee11 Add .pdkignore to exclude some files from tar ball 74468f0 Add per module policy service refresh 1d634da Update TOX_CONSTRAINTS_FILE for stable/2023.1 6741e0d Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ manifests/db.pp | 6 +++ manifests/deps.pp | 2 +- manifests/federation/identity_provider.pp | 24 +++++----- manifests/federation/mellon.pp | 3 ++ manifests/federation/openidc.pp | 15 ++++--- manifests/federation/shibboleth.pp | 4 ++ manifests/init.pp | 5 ++- manifests/policy.pp | 1 + metadata.json | 2 +- .../keystone-db-slave-conn-4592ab5542773cb6.yaml | 4 ++ spec/classes/keystone_db_spec.rb | 3 ++ spec/classes/keystone_federation_mellon_spec.rb | 4 ++ spec/classes/keystone_federation_openidc_spec.rb | 2 + .../classes/keystone_federation_shibboleth_spec.rb | 3 ++ spec/classes/keystone_policy_spec.rb | 2 + tox.ini | 2 +- 18 files changed, 111 insertions(+), 23 deletions(-)

1 0

puppet-ceilometer 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are amped to announce the release of: puppet-ceilometer 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 22.0.1 ^^^^^^ Bug Fixes * Configure "tenant_name_discovery" parameter on all nodes where ceilometer is expected to run. This inculdes central, compute and ipmi namespaces. Changes in puppet-ceilometer 22.0.0..22.0.1 ------------------------------------------- d67268c Prepare final stable/2023.1 release 1a0803f Set 'tenant_name_discovery' parameter in 'polling' section 57a17b9 Add .pdkignore to exclude some files from tar ball 3337a80 Add "tenant_name_discovery" to all namespaces 35881a2 Update TOX_CONSTRAINTS_FILE for stable/2023.1 afad19a Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ manifests/agent/polling.pp | 16 +++---- metadata.json | 2 +- ...fix_tenant_name_discovery-838f5d64bc405eca.yaml | 6 +++ spec/classes/ceilometer_agent_polling_spec.rb | 9 ++-- tox.ini | 2 +- 7 files changed, 71 insertions(+), 16 deletions(-)

1 0

puppet-gnocchi 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are happy to announce the release of: puppet-gnocchi 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. Changes in puppet-gnocchi 22.0.0..22.0.1 ---------------------------------------- 161315f Prepare final stable/2023.1 release ea434c2 Add .pdkignore to exclude some files from tar ball 841e19d Add per module policy service refresh aa6fad7 Update TOX_CONSTRAINTS_FILE for stable/2023.1 bacd86b Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/gnocchi_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-placement 9.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We high-spiritedly announce the release of: puppet-placement 9.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 9.0.0..9.0.1 ---------------------------------------- 1fc14ce Prepare final stable/2023.1 release 29be3d8 Add .pdkignore to exclude some files from tar ball 75ed4db Add per module policy service refresh a17c28c Update TOX_CONSTRAINTS_FILE for stable/2023.1 d04bedf Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/placement_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-cinder 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We joyfully announce the release of: puppet-cinder 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. Changes in puppet-cinder 22.0.0..22.0.1 --------------------------------------- d897844 Prepare final stable/2023.1 release 733f5f0 cinder_type: Fix regex for properties to accept short value fc07d11 Add .pdkignore to exclude some files from tar ball c667fd3 Add per module policy service refresh ea76abe Fix missing inclusion of cinder::params d39c3e9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 fd75469 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ lib/puppet/type/cinder_type.rb | 4 +- manifests/backend/dellemc_powermax.pp | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/acceptance/10_basic_cinder_spec.rb | 4 ++ spec/classes/cinder_policy_spec.rb | 2 + .../cinder_backend_dellemc_powermax_spec.rb | 19 ++++++++ tox.ini | 2 +- 11 files changed, 84 insertions(+), 5 deletions(-)

1 0

puppet-ovn 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are tickled pink to announce the release of: puppet-ovn 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 22.0.0..22.0.1 ------------------------------------ 1126b57 Prepare final stable/2023.1 release c83cb1f Drop unused openstacklib dependency 2d88f63 Add .pdkignore to exclude some files from tar ball 6bdc4f1 Update TOX_CONSTRAINTS_FILE for stable/2023.1 d2197b8 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++ metadata.json | 6 +----- tox.ini | 2 +- 4 files changed, 54 insertions(+), 6 deletions(-)

1 0

puppet-vswitch 18.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are overjoyed to announce the release of: puppet-vswitch 18.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. 18.0.1 ^^^^^^ Bug Fixes * The "vs_bridge" resource now updates existing keys when external ids are set. Also, the keys not included by the given extenral ids are removed. Changes in puppet-vswitch 18.0.0..18.0.1 ---------------------------------------- 02b01b0 Prepare final stable/2023.1 release be085d0 vs_port: Avoid detecting partial name a292535 vs_bridge: Ensure existing external ids are updated e47606a Drop unused openstacklib dependency 4e322e0 Add .pdkignore to exclude some files from tar ball eadc76a Update TOX_CONSTRAINTS_FILE for stable/2023.1 bc2fd2e Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ lib/puppet/provider/vs_bridge/ovs.rb | 10 +++-- lib/puppet/provider/vs_port/ovs.rb | 2 +- metadata.json | 6 +-- .../notes/bug-2043916-069f122907b13bc8.yaml | 5 +++ tox.ini | 2 +- 7 files changed, 67 insertions(+), 10 deletions(-)

1 0

puppet-mistral 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are pleased to announce the release of: puppet-mistral 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. Changes in puppet-mistral 22.0.0..22.0.1 ---------------------------------------- 62f0917 Prepare final stable/2023.1 release dfc0e64 Add .pdkignore to exclude some files from tar ball 5dfb804 Add per module policy service refresh f9c8854 Update TOX_CONSTRAINTS_FILE for stable/2023.1 167883d Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/mistral_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-barbican 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are satisfied to announce the release of: puppet-barbican 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 22.0.0..22.0.1 ----------------------------------------- d213472 Prepare final stable/2023.1 release 8084eab [p11_crypto_plugin] login should be secret fc7aa2f Add .pdkignore to exclude some files from tar ball dbd8e47 Add per module policy service refresh 0a77550 Update TOX_CONSTRAINTS_FILE for stable/2023.1 a8f19dd Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/plugins/p11_crypto.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/barbican_plugins_p11_crypto_spec.rb | 2 +- spec/classes/barbican_policy_spec.rb | 2 + tox.ini | 2 +- 9 files changed, 60 insertions(+), 5 deletions(-)

1 0

puppet-aodh 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are pumped to announce the release of: puppet-aodh 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. Changes in puppet-aodh 22.0.0..22.0.1 ------------------------------------- 25d5af7 Prepare final stable/2023.1 release cd40180 Add .pdkignore to exclude some files from tar ball 1f21b55 Add per module policy service refresh 710b3a3 Update TOX_CONSTRAINTS_FILE for stable/2023.1 c8dd312 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/aodh_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-designate 22.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are happy to announce the release of: puppet-designate 22.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 22.0.0..22.0.1 ------------------------------------------ 37208c3 Prepare final stable/2023.1 release 1136897 Add .pdkignore to exclude some files from tar ball 90b0d06 Add per module policy service refresh 5075ca9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 069da19 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 +++++++++++++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/designate_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 58 insertions(+), 3 deletions(-)

1 0

puppet-cloudkitty 11.0.1 (antelope)
by no-reply＠openstack.org 11 Dec '24

11 Dec '24

We are psyched to announce the release of: puppet-cloudkitty 11.0.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. Changes in puppet-cloudkitty 11.0.0..11.0.1 ------------------------------------------- 597563f Prepare final stable/2023.1 release bf69e75 fetcher_keystone: Fix ignored auth_type 3093474 Add .pdkignore to exclude some files from tar ball 9ff1874 Add per module policy service refresh 203ae76 Update TOX_CONSTRAINTS_FILE for stable/2023.1 178f739 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++++ manifests/deps.pp | 2 +- manifests/fetcher/keystone.pp | 1 + manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/cloudkitty_fetcher_keystone_spec.rb | 3 ++ spec/classes/cloudkitty_policy_spec.rb | 2 + tox.ini | 2 +- 9 files changed, 62 insertions(+), 3 deletions(-)

1 0

kolla-ansible 18.3.0 (caracal)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We contentedly announce the release of: kolla-ansible 18.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 18.3.0 ^^^^^^ New Features ************ * Adds the ability to provide the NTP (time source) server for multiple DHCP ranges in the Ironic Inspector DHCP server. Upgrade Notes ************* * Support for failing execution early if fact collection fails on any of the hosts by setting "kolla_ansible_setup_any_errors_fatal" to "true" has been removed. This is due to Ansible's "any_errors_fatal" parameter not being templated, resulting in the value always being interpreted as "true", even though the default value of "kolla_ansible_setup_any_errors_fatal" is "false". Equivalent behaviour is possible by setting the maximum failure percentage to 0. This may be done specifically for fact gathering using "gather_facts_max_fail_percentage" or globally using "kolla_max_fail_percentage". Bug Fixes ********* * Fixes an issue with ironic dnsmasq failing to start in deployments using podman because it requires the NET_RAW capability. See LP#2055282. * Fixes kolla-ansible removing inventory file placed in "/etc/kolla/<inventory>". See LP#2052706 for more details. * Fixes keystone service configuration for haproxy when using federation. LP#2058656 * Fixes mariadb's backup failure due to missing *CREATE* privileges on the *mariadb_backup_history* table. LP#2061889 * Fixes the MariaDB recovery issue when kolla-ansible is running from a docker container. LP#2073370 * Fixes #2080552. "openvswitch" role will now set "external- ids:hostname" to "{{ ansible_facts.fqdn }}" instead of "{{ ansible_facts.hostname }}" due to Neutron using FQDN based hostnames in "requested-chassis" field. LP#2080552 * Fix ProxySQL unable to bind due to incorrect format of IPv6 addresses in the *mysql_ifaces* configuration. LP#2081106 * Add missing logrotate config for redis. LP#2084523 * Fixes an issue during fact gathering when using the "--limit" argument where a host that fails to gather facts could cause another host to fail during delegated fact gathering. * Add "skip_kpartx yes" to multipath.conf "defaults" section to prevent kpartx scanning multipath devices and unlock "multipathd del map" operation of os-brick for volume detaching oprtaions. *LP#2078973 <https://launchpad.net/bugs/2078973>`__* * Fixes 2067036. Added "octavia_interface_wait_timeout" to control octavia-interface.service timeout to be able wait openvswitch agent sync has been finished and octavia-lb-net is reachable from the host. Also set restart policy for this unit to on-failure LP#2067036 * Fixes Octavia service upgrade issue where it can fail when Octavia persistence database user is missing. LP#2065591 * Fixes unreliable health checks for neutron_ovn_agent and neutron_ovn_metadata_agent bug. Changed to check OVS DB connection instead of OVN southbound DB connection. LP#2084128 * Fixes an issue, when using podman, with named volumes that use a mode specifier. See LP#2054834 (https://bugs.launchpad.net/kolla- ansible/+bug/2054834) for more details. * Fixes parsing of JSON output of inner modules called by "kolla- toolbox" when data was returned on standard error. LP#2080544 * Updates "proxysql.yaml.j2" to use mariadb_port for backends. This fixes setups where "database_port" and "mariadb_port" differ. Changes in kolla-ansible 18.2.0..18.3.0 --------------------------------------- f661f6fe8 CI: Use debian/ubuntu mirrored images on build 52012101d [stable/2024.1 only] CI: remove openeuler c22e8f4d3 Change from PERCONA_SCHEMA to mysql for mariabackup 05f92c678 CI: Use libpod/registry for registry 99e14950e Fix IPv6 address format in ProxySQL configuration e3be03ac2 Updating proxysql.yaml.j2 to use mariadb_port for backends a134a721b Do not remove inventory file if placed in /etc/kolla 59c8d42b0 Add logrotate config for redis ad38aee54 Fix mariadb backup unable to create history table 8cc772c03 Fix health checks for neutron_ovn_agent and neutron_ovn_metadata_agent 865d041bc Fix Octavia service upgrade failure from 2023.1 68036c19b ovn: Fix FQDN-based deployments 27b41acb5 Add configuration for NTP server in Ironic Inspector DHCP server cb0c675de [CI] Fix OVN jobs - add required neutron_dns_domain f6a918783 Fixing typo in etc/kolla/globals.yml 05eb87dd0 Add a precheck to catch RMQ SLURP upgrades 0a070bf71 Fix octavia-interface timeout a65cdd95f Be clear that rabbitmq-upgrade is not idempotent 683ab0b70 Docs: point to RMQ SLURP handing in upgrade guide 8085144e5 Fix typo in RabbitMQ versions pinning c2fbc36c2 Fix os-brick multipathd del map fails for SAN multipath devices 30e893edb CI: Mark aarch64 non-voting c7e9dbc73 Add NET_RAW to dnsmasq container ab4829db9 systemd: Add Wants=docker.service for docker 9e8d8b6f8 Separate outputs of kolla_toolbox inner module 85a3d5c7b Revert "Allow setting any_errors_fatal true for gather-facts" 33ab87aad Fix links in docs for unmaintained releases 3a0856be2 CI: improve get_logs.sh 60b94d5b6 Avoid unnecessary secondary fact gathering failure c8c94b85c fact gathering: Group hosts before gathering facts b9f72a0a4 fact gathering: Remove gathering of package facts b0407a2ad Fix keystone configuration for haproxy. e486770b9 Fix mariadb recovery 5dae44719 Support mode in named volumes when using podman Diffstat (except docs and test files) ------------------------------------- ansible/gather-facts.yml | 35 ++++--------- ansible/group_vars/all.yml | 8 --- ansible/library/kolla_toolbox.py | 4 +- ansible/module_utils/kolla_podman_worker.py | 8 ++- ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/roles/common/tasks/config.yml | 1 + .../common/templates/cron-logrotate-redis.conf.j2 | 3 ++ ansible/roles/destroy/tasks/cleanup_host.yml | 1 + ansible/roles/ironic/defaults/main.yml | 1 + .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 5 +- ansible/roles/keystone/defaults/main.yml | 6 ++- .../templates/proxysql/proxysql.yaml.j2 | 6 +-- ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 3 ++ ansible/roles/mariadb/tasks/register.yml | 17 +------ .../roles/multipathd/templates/multipath.conf.j2 | 1 + ansible/roles/neutron/defaults/main.yml | 4 +- ansible/roles/octavia/tasks/upgrade.yml | 37 ++++++++++++++ .../octavia/templates/octavia-interface.service.j2 | 4 ++ ansible/roles/openvswitch/defaults/main.yml | 2 +- ansible/roles/rabbitmq/tasks/upgrade.yml | 2 + ansible/roles/rabbitmq/tasks/version-check.yml | 59 ++++++++++++++++++++++ etc/kolla/globals.yml | 10 +--- ...ability-to-ironic-dnsmasq-40f5894c5180b12d.yaml | 6 +++ .../notes/bug-2052706-dfbbc75fc72c74d1.yaml | 7 +++ .../notes/bug-2058656-ad68bb260327a267.yaml | 5 ++ .../notes/bug-2061889-f54e356f43c0fae3.yaml | 6 +++ .../notes/bug-2073370-268e9a76be9f2ae9.yaml | 5 ++ .../notes/bug-2080552-714078144170a5bd.yaml | 8 +++ .../notes/bug-2081106-ef0df790780c612d.yaml | 6 +++ .../notes/bug-2084523-a02f38eecf6c957a.yaml | 5 ++ ...-gathering-double-failure-4662ef2f54d58291.yaml | 6 +++ ...multipathd-kpartx-disable-44732c1378ae2291.yaml | 7 +++ ...octavia-interface-timeout-5e87ea2501d5ab3c.yaml | 10 ++++ ...x-octavia-service-upgrade-9610e35cfdd512f6.yaml | 6 +++ .../notes/fix_ovn_agents_hc-f6e4a39b9d64e9f1.yaml | 8 +++ ...me-issues-when-using-mode-36b9862321eb9e68.yaml | 6 +++ ...ector-multiple-ranges-ntp-32568dcf640a7fc1.yaml | 5 ++ .../kolla-toolbox-demux-c5e8d27bc7214069.yaml | 6 +++ ...sql-template-mariadb-port-cf8f2d88c0962b75.yaml | 5 ++ .../remove-any-errors-fatal-664fc2207074f0ef.yaml | 14 +++++ tools/cleanup-host | 17 ++++++- tools/kolla-ansible | 8 +++ zuul.d/jobs.yaml | 12 ++--- zuul.d/nodesets.yaml | 6 --- zuul.d/project.yaml | 1 - 54 files changed, 374 insertions(+), 115 deletions(-)

1 0

kayobe 17.1.0 (dalmatian)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are stoked to announce the release of: kayobe 17.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 17.1.0 ^^^^^^ Bug Fixes * Pin requirements for IPA image build to ensure that the "ironic- lib" version matches "ironic-python-agent". LP#2089263 <https://bugs.launchpad.net/kayobe/+bug/2089263>`__ Changes in kayobe 17.0.0..17.1.0 -------------------------------- 6c42631e CI: use quay.io/podman/hello due too dockerhub rate limits b4a79437 Ensure ironic-python-agent matches ironic-lib Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/ipa | 1 + .../configuration/reference/ironic-python-agent.rst | 17 ++++++++--------- .../notes/pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++++++ 4 files changed, 17 insertions(+), 11 deletions(-)

1 0

kolla-ansible 19.1.0 (dalmatian)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are satisfied to announce the release of: kolla-ansible 19.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 19.1.0 ^^^^^^ Bug Fixes * Fixes external ceph cinder keyring is not imported into libvirt if templated. Per now, ansible/roles/nova-cell/tasks/external_ceph.yml looks cinder_cephx_raw_key up as file from cinder_cephx_keyring_file.stat.path To allow templated cinderkeyrings, the lookup is changed to "template" Fixes LP#2089229 Changes in kolla-ansible 19.0.0..19.1.0 --------------------------------------- 0f2f02274 CI: skip Cinder HA precheck for zun scenario d2331b1c6 Fix hyperlink syntax in release notes ce4ff5a0b CI: Use debian/ubuntu mirrored images on build 22bfa3827 Fix external ceph cinder keyring 6986343ed update openstack_previous_release_name var to 2024.1 e39c325fd CI: Use libpod/registry for registry 74be26925 cli: Add check=True to catch Ansible failures 95166909e Add removal of --key parameter to CLI rewrite note 6c2d911fd Fix Octavia cert generation Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 2 +- ansible/roles/nova-cell/tasks/external_ceph.yml | 2 +- kolla_ansible/cli/commands.py | 3 ++- kolla_ansible/utils.py | 4 ++-- ...de-exporter-targets-extra-c037d4755d1002e8.yaml | 6 +++--- .../external-ceph-cinder_key-1a4c38fff3e2ab3c.yaml | 10 ++++++++++ .../notes/python-cli-3e568065b8706e73.yaml | 22 +++++++++++----------- ...cert-copy-without-haproxy-85d45834469aa9e8.yaml | 6 +++--- 12 files changed, 45 insertions(+), 25 deletions(-)

1 0

kayobe 15.6.0 (bobcat)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are overjoyed to announce the release of: kayobe 15.6.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.6.0 ^^^^^^ New Features ************ * Adds the internal VIP to the NOPROXY/noproxy environment variables. * Adds support for using Cumulus switches (NCLU and NVUE) with Networking Generic Switch. Security Issues *************** * When running API requests from a host configured with kayobe, traffic destined for the internal VIP is sent via the default proxy. This can be a security issue if not using TLS as the proxy will be able to intercept the traffic. If using an untrusted proxy, with TLS disabled on the internal VIP, it is recommended that you run "kayobe overcloud host configure -t proxy", "kayobe seed hypervisor host configure -t proxy", "kayobe seed host configure -t proxy", and "kayobe infra vm host configure -t proxy", to add the internal VIP to the no proxy configuration. This is considered a minor issue as traffic between containers will not use the proxy by default. LP#2087556 Bug Fixes ********* * The "proxysql" image is now built when "kolla_enable_proxysql" is set to "true". * Pin requirements for IPA image build to ensure that the "ironic- lib" version matches "ironic-python-agent". LP#2089263 <https://bugs.launchpad.net/kayobe/+bug/2089263>`__ * Changes the default cloud image for seed and infra VMs to use Rocky Linux 9.3 when using "bios" boot mode, to fix boot failures with newer cloud images. When deploying new VMs, it is recommended to set "infra_vm_boot_firmware" and "seed_vm_boot_firmware" to "efi". Changes in kayobe 15.5.0..15.6.0 -------------------------------- 40779aa4 CI: use quay.io/podman/hello due too dockerhub rate limits fb5856cd Ensure ironic-python-agent matches ironic-lib 715b4b93 Add internal VIP address to no_proxy 14259a03 CI: Replace deprecated distro.linux_distribution 9629a40e Add support for building the proxysql image e2f0f4a8 Adds support for using Cumulus switches with NGS 09063d14 Use Rocky Linux 9.3 images unless in efi boot mode Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 14 ++++++++++---- ansible/inventory/group_vars/all/ipa | 1 + ansible/inventory/group_vars/all/kolla | 3 +++ ansible/inventory/group_vars/all/proxy | 1 + ansible/inventory/group_vars/all/seed-vm | 12 +++++++++--- ansible/kolla-openstack.yml | 2 ++ .../configuration/reference/ironic-python-agent.rst | 17 ++++++++--------- etc/kayobe/infra-vms.yml | 10 ++++++---- etc/kayobe/proxy.yml | 5 +++-- etc/kayobe/seed-vm.yml | 8 +++++--- .../adds-internal-vip-to-no-proxy-cbb4db4ea3909185.yaml | 17 +++++++++++++++++ .../notes/build-proxysql-image-ec09332ef0b7dae0.yaml | 5 +++++ .../notes/cumulus-support-ngs-c4a6e6f3d45f5783.yaml | 5 +++++ .../notes/pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++++++ ...pin-rl9-vm-image-bios-firmware-b025ac853f68a91b.yaml | 7 +++++++ 16 files changed, 92 insertions(+), 29 deletions(-)

1 0

kolla 18.3.0 (caracal)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are overjoyed to announce the release of: kolla 18.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 18.3.0 ^^^^^^ Upgrade Notes ************* * "Erlang" RPMs on "aarch64" architecture are now installed from a new location - OpenStack Kolla's COPR (https://copr.fedorainfracloud.org/coprs/g/openstack-kolla/rabbitmq- erlang/) compared to Hrw's COPR (https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/) * RabbitMQ and Erlang packages are now all installed from the Cloudsmith "rabbitmq.com" mirrors since the RabbitMQ "packagecloud.io" is getting shut down August 18st, 2024: https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates #packagecloud-will-be-discontinued-on-aug-18th-2024 Bug Fixes ********* * Fixes the inconsistency issue between config.json and real state in the container. LP#2060855 * Fixes MariaDB backup failure when ProxySQL is used LP#2080818 * Fixes missing tpm user for nova-compute and nova-libvirt containers by adding tpm2-tools package to Ubuntu/Debian nova containers. LP#2067050 * Fixed ironic-conductor missing packages genisoimage and syslinux/isolinux. Changes in kolla 18.2.0..18.3.0 ------------------------------- 0a8d76e86 CI: Use debian/ubuntu images from quay mirror 68e96e72f Add way to backup from MariaDB replica server 648be98c9 Fix handling configs in base image af464eeb3 Fix missing tss user in Ubuntu/Debian nova containers 97a6d193b aarch64: Exclude syslinux from ironic conductor packages 4537f2b53 aarch64: fix name of rabbitmq copr repo 9a0914d10 erlang/aarch64: Move to openstack-kolla owned COPR d9639f05c Revert "Pin OpenSearch Dashboards to 2.15" abf7a4cf8 Add missing iso packages to ironic-conductor b9584882e Fix cinder-backup: add missing sysfsutils,lsscsi package 6f63211cf rabbitmq: Switch to Cloudsmith mirrors a58a7f88d Pin OpenSearch Dashboards to 2.15 Diffstat (except docs and test files) ------------------------------------- kolla/template/repos.yaml | 12 +- .../notes/bug-2060855-77516da722d04761.yaml | 6 + .../notes/bug-2080818-9eacce36a8c18f8f.yaml | 5 + releasenotes/notes/copr-move-5d0464c50dc85ccf.yaml | 6 + .../notes/fix_nova_tpm_user-98f56190196a00d2.yaml | 6 + .../notes/ironic-packages-009b388b10fab6f0.yaml | 4 + ...migrate-from-packagecloud-59d7e9e0a10e1da0.yaml | 7 + 23 files changed, 849 insertions(+), 37 deletions(-)

1 0

kolla 19.1.0 (dalmatian)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are gleeful to announce the release of: kolla 19.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 19.1.0 ^^^^^^ Bug Fixes * Fixes the inconsistency issue between config.json and real state in the container. LP#2060855 Changes in kolla 19.0.0..19.1.0 ------------------------------- 890568ba9 CI: Use debian/ubuntu images from quay mirror e49ba16fc Fix handling configs in base image Diffstat (except docs and test files) ------------------------------------- .../notes/bug-2060855-77516da722d04761.yaml | 6 + 4 files changed, 626 insertions(+)

1 0

kolla-ansible 17.6.0 (bobcat)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are jazzed to announce the release of: kolla-ansible 17.6.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.6.0 ^^^^^^ New Features ************ * Adds the ability to provide the NTP (time source) server for multiple DHCP ranges in the Ironic Inspector DHCP server. * Added a command to upgrade to a target version of RabbitMQ. This is required before a SLURP upgrade. See the docs for more details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#slurp Upgrade Notes ************* * Support for failing execution early if fact collection fails on any of the hosts by setting "kolla_ansible_setup_any_errors_fatal" to "true" has been removed. This is due to Ansible's "any_errors_fatal" parameter not being templated, resulting in the value always being interpreted as "true", even though the default value of "kolla_ansible_setup_any_errors_fatal" is "false". Equivalent behaviour is possible by setting the maximum failure percentage to 0. This may be done specifically for fact gathering using "gather_facts_max_fail_percentage" or globally using "kolla_max_fail_percentage". Bug Fixes ********* * Fixes an issue with ironic dnsmasq failing to start in deployments using podman because it requires the NET_RAW capability. See LP#2055282. * Fixes keystone service configuration for haproxy when using federation. LP#2058656 * Fixes mariadb's backup failure due to missing *CREATE* privileges on the *mariadb_backup_history* table. LP#2061889 * Fixes the MariaDB recovery issue when kolla-ansible is running from a docker container. LP#2073370 * Fix ProxySQL unable to bind due to incorrect format of IPv6 addresses in the *mysql_ifaces* configuration. LP#2081106 * Fixes an issue during fact gathering when using the "--limit" argument where a host that fails to gather facts could cause another host to fail during delegated fact gathering. * Add "skip_kpartx yes" to multipath.conf "defaults" section to prevent kpartx scanning multipath devices and unlock "multipathd del map" operation of os-brick for volume detaching oprtaions. *LP#2078973 <https://launchpad.net/bugs/2078973>`__* * Fixes 2067036. Added "octavia_interface_wait_timeout" to control octavia-interface.service timeout to be able wait openvswitch agent sync has been finished and octavia-lb-net is reachable from the host. Also set restart policy for this unit to on-failure LP#2067036 * Fixes Octavia service upgrade issue where it can fail when Octavia persistence database user is missing. LP#2065591 * Fixes unreliable health checks for neutron_ovn_agent and neutron_ovn_metadata_agent bug. Changed to check OVS DB connection instead of OVN southbound DB connection. LP#2084128 * Fixes an issue, when using podman, with named volumes that use a mode specifier. See LP#2054834 (https://bugs.launchpad.net/kolla- ansible/+bug/2054834) for more details. * Fixes parsing of JSON output of inner modules called by "kolla- toolbox" when data was returned on standard error. LP#2080544 Changes in kolla-ansible 17.5.0..17.6.0 --------------------------------------- f98d3d83d CI: Use debian/ubuntu mirrored images on build c8f81f122 Fix IPv6 address format in ProxySQL configuration 13427c2ee CI: Use libpod/registry for registry 8fff0b68e Change from PERCONA_SCHEMA to mysql for mariabackup a32676b06 Fix mariadb backup unable to create history table 74fdbecf1 Fix Octavia service upgrade failure from 2023.1 56ccf0119 Fix health checks for neutron_ovn_agent and neutron_ovn_metadata_agent 5dcfa09eb Add configuration for NTP server in Ironic Inspector DHCP server 8d52404ac Fixing typo in etc/kolla/globals.yml d83142fc1 Fix octavia-interface timeout bb8289fdf Be clear that rabbitmq-upgrade is not idempotent 1e3c16743 Docs: point to RMQ SLURP handing in upgrade guide 7b8944688 Fix typo in RabbitMQ versions pinning 6a4328d64 Fix os-brick multipathd del map fails for SAN multipath devices 37e9b4abc Add NET_RAW to dnsmasq container e0cc7aba1 systemd: Add Wants=docker.service for docker 20eaafccd Separate outputs of kolla_toolbox inner module bd6ccf841 Revert "Allow setting any_errors_fatal true for gather-facts" 4c4ca0d66 Fix links in docs for unmaintained releases 0a28b9469 CI: improve get_logs.sh fe27c9744 Add command to upgrade to a target version of RMQ 5863402e8 Avoid unnecessary secondary fact gathering failure d9efcbf08 fact gathering: Group hosts before gathering facts 33d8f0c1a fact gathering: Remove gathering of package facts 1350b5cfa Fix keystone configuration for haproxy. 817b14d10 Fix mariadb recovery a29656b76 Support mode in named volumes when using podman Diffstat (except docs and test files) ------------------------------------- ansible/gather-facts.yml | 35 +++++----------- ansible/group_vars/all.yml | 8 ---- ansible/library/kolla_toolbox.py | 4 +- ansible/module_utils/kolla_podman_worker.py | 8 +++- ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/rabbitmq-upgrade.yml | 21 ++++++++++ ansible/roles/ironic/defaults/main.yml | 1 + .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 5 +-- ansible/roles/keystone/defaults/main.yml | 6 ++- .../templates/proxysql/proxysql.yaml.j2 | 4 +- ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 3 ++ ansible/roles/mariadb/tasks/register.yml | 17 +------- .../roles/multipathd/templates/multipath.conf.j2 | 1 + ansible/roles/neutron/defaults/main.yml | 4 +- ansible/roles/octavia/tasks/upgrade.yml | 37 +++++++++++++++++ .../octavia/templates/octavia-interface.service.j2 | 4 ++ ansible/roles/rabbitmq/defaults/main.yml | 2 + etc/kolla/globals.yml | 10 +---- ...ability-to-ironic-dnsmasq-40f5894c5180b12d.yaml | 6 +++ .../notes/bug-2058656-ad68bb260327a267.yaml | 5 +++ .../notes/bug-2061889-f54e356f43c0fae3.yaml | 6 +++ .../notes/bug-2073370-268e9a76be9f2ae9.yaml | 5 +++ .../notes/bug-2081106-ef0df790780c612d.yaml | 6 +++ ...-gathering-double-failure-4662ef2f54d58291.yaml | 6 +++ ...multipathd-kpartx-disable-44732c1378ae2291.yaml | 7 ++++ ...octavia-interface-timeout-5e87ea2501d5ab3c.yaml | 10 +++++ ...x-octavia-service-upgrade-9610e35cfdd512f6.yaml | 6 +++ .../notes/fix_ovn_agents_hc-f6e4a39b9d64e9f1.yaml | 8 ++++ ...me-issues-when-using-mode-36b9862321eb9e68.yaml | 6 +++ ...ector-multiple-ranges-ntp-32568dcf640a7fc1.yaml | 5 +++ .../kolla-toolbox-demux-c5e8d27bc7214069.yaml | 6 +++ ...mq-target-upgrade-command-d5f9d9fc27fa28f8.yaml | 6 +++ .../remove-any-errors-fatal-664fc2207074f0ef.yaml | 14 +++++++ tools/kolla-ansible | 8 ++++ 43 files changed, 332 insertions(+), 93 deletions(-)

1 0

kayobe 16.3.0 (caracal)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are gleeful to announce the release of: kayobe 16.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 16.3.0 ^^^^^^ New Features ************ * Adds the internal VIP to the NOPROXY/noproxy environment variables. * Adds support for using Cumulus switches (NCLU and NVUE) with Networking Generic Switch. Upgrade Notes ************* * Bumps the "stackhpc.linux" collection to 1.3.0. Note this version uses systemd to activate virtual functions. This change is restricted to the "stackhpc.linux.sriov" role, which is not used by Kayobe. If a custom playbook uses this role, you can retain existing behaviour by setting "sriov_numvfs_driver" to "udev". Security Issues *************** * When running API requests from a host configured with kayobe, traffic destined for the internal VIP is sent via the default proxy. This can be a security issue if not using TLS as the proxy will be able to intercept the traffic. If using an untrusted proxy, with TLS disabled on the internal VIP, it is recommended that you run "kayobe overcloud host configure -t proxy", "kayobe seed hypervisor host configure -t proxy", "kayobe seed host configure -t proxy", and "kayobe infra vm host configure -t proxy", to add the internal VIP to the no proxy configuration. This is considered a minor issue as traffic between containers will not use the proxy by default. LP#2087556 Bug Fixes ********* * Fixes IPA and host image build failures when Git was not installed on the build host. LP#2058922 * The "proxysql" image is now built when "kolla_enable_proxysql" is set to "true". * Updates the group and mode set on the "/var/log/journal" directory to match default ownership and permissions used by "systemd- journald". LP#2083494 * Fixes generation of kernel parameters when the GRUB_CMDLINE_LINUX_DEFAULT variable is absent from "/etc/default/grub". LP#2083874. * Pin requirements for IPA image build to ensure that the "ironic- lib" version matches "ironic-python-agent". LP#2089263 <https://bugs.launchpad.net/kayobe/+bug/2089263>`__ * Changes the default cloud image for seed and infra VMs to use Rocky Linux 9.3 when using "bios" boot mode, to fix boot failures with newer cloud images. When deploying new VMs, it is recommended to set "infra_vm_boot_firmware" and "seed_vm_boot_firmware" to "efi". * Fixes an issue when using overcloud Ironic with a shared Ansible control host. The use of a shared cache directory could lead to a failure to download Ironic Python Agent (IPA) images. LP#2069845 Changes in kayobe 16.2.0..16.3.0 -------------------------------- 1ed7724d CI: use quay.io/podman/hello due too dockerhub rate limits b5719257 Ensure ironic-python-agent matches ironic-lib 4e07e042 Add internal VIP address to no_proxy f6992fdd CI: Replace deprecated distro.linux_distribution 3c1ff0c3 CI: Fix Ubuntu 24.04 version check 77c1ad12 Add support for building the proxysql image dec71144 CI: Skip test_ntp_clock_synchronized on Ubuntu 24.04 bd47742c Fix group and mode of /var/log/journal b3c03627 Bump stackhpc.openstack collection to 0.2.2 27845067 Bump stackhpc.linux to v1.3.0 6720a227 Adds support for using Cumulus switches with NGS d888e881 CI: rework RabbitMQ handling in upgrades c0cf61db Remove duplicate description of filename key 324da76e Avoid shared IPA image cache on Ansible control host 5274c4e6 Use Rocky Linux 9.3 images unless in efi boot mode Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 14 +++++--- ansible/inventory/group_vars/all/ipa | 1 + ansible/inventory/group_vars/all/kolla | 3 ++ ansible/inventory/group_vars/all/proxy | 1 + ansible/inventory/group_vars/all/seed-vm | 12 +++++-- ansible/kolla-openstack.yml | 40 ++++------------------ ansible/logging.yml | 4 +-- ansible/roles/image-download/defaults/main.yml | 4 +++ ansible/roles/image-download/tasks/main.yml | 40 ++++++++++++++-------- ansible/roles/kolla-openstack/defaults/main.yml | 5 +++ ansible/roles/kolla-openstack/tasks/config.yml | 1 + dev/functions | 24 ------------- .../reference/ironic-python-agent.rst | 17 +++++---- etc/kayobe/apt.yml | 2 -- etc/kayobe/infra-vms.yml | 10 +++--- etc/kayobe/proxy.yml | 5 +-- etc/kayobe/seed-vm.yml | 8 +++-- playbooks/kayobe-overcloud-upgrade-base/run.yml | 20 +++++++++++ ...-internal-vip-to-no-proxy-cbb4db4ea3909185.yaml | 17 +++++++++ .../notes/bug-2058922-c16426f013ddf3ca.yaml | 5 +++ .../build-proxysql-image-ec09332ef0b7dae0.yaml | 5 +++ ...bump-stackhpc-linux-1.3.0-892bc5ae7574508b.yaml | 9 +++++ .../cumulus-support-ngs-c4a6e6f3d45f5783.yaml | 5 +++ ...ar-log-journal-group-mode-3e7c4c822d050c8f.yaml | 6 ++++ ...rub-cmdline-linux-default-f4079def0b1357e7.yaml | 6 ++++ .../pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++++ ...l9-vm-image-bios-firmware-b025ac853f68a91b.yaml | 7 ++++ .../remove-local-ipa-cache-1fe125360f5d3385.yaml | 7 ++++ requirements.yml | 4 +-- 30 files changed, 199 insertions(+), 106 deletions(-)

1 0

kolla 17.6.0 (bobcat)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are jazzed to announce the release of: kolla 17.6.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.6.0 ^^^^^^ Upgrade Notes ************* * "Erlang" RPMs on "aarch64" architecture are now installed from a new location - OpenStack Kolla's COPR (https://copr.fedorainfracloud.org/coprs/g/openstack-kolla/rabbitmq- erlang/) compared to Hrw's COPR (https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/) * RabbitMQ and Erlang packages are now all installed from the Cloudsmith "rabbitmq.com" mirrors since the RabbitMQ "packagecloud.io" is getting shut down August 18st, 2024: https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates #packagecloud-will-be-discontinued-on-aug-18th-2024 Bug Fixes ********* * Fixes the inconsistency issue between config.json and real state in the container. LP#2060855 * Fixes incompatibility between "ansible.posix" 1.6.0 and "ansible- core" versions below 2.15 by capping "ansible.posix" to 1.5.x. LP#2080609 * Fixes missing tpm user for nova-compute and nova-libvirt containers by adding tpm2-tools package to Ubuntu/Debian nova containers. LP#2067050 * Fixed ironic-conductor missing packages genisoimage and syslinux/isolinux. Changes in kolla 17.5.0..17.6.0 ------------------------------- 96bf08833 CI: Use debian/ubuntu images from quay mirror b3b7db854 Fix handling configs in base image 5a2189c4e Fix missing tss user in Ubuntu/Debian nova containers fda0d0c3c aarch64: Exclude syslinux from ironic conductor packages c913df4be aarch64: fix name of rabbitmq copr repo 56e773e5c erlang/aarch64: Move to openstack-kolla owned COPR 10291ab3e Revert "Pin OpenSearch Dashboards to 2.15" 7b1fc549f Add missing iso packages to ironic-conductor daa559448 Fix cinder-backup: add missing sysfsutils,lsscsi package 73051ccde rabbitmq: Switch to Cloudsmith mirrors c1cbbd0b2 Cap ansible.posix below 1.6.0 9dc0371b5 Pin OpenSearch Dashboards to 2.15 Diffstat (except docs and test files) ------------------------------------- kolla/template/repos.yaml | 12 +- .../notes/bug-2060855-77516da722d04761.yaml | 6 + .../notes/bug-2080609-51f216ad1ba47d20.yaml | 6 + releasenotes/notes/copr-move-5d0464c50dc85ccf.yaml | 6 + .../notes/fix_nova_tpm_user-98f56190196a00d2.yaml | 6 + .../notes/ironic-packages-009b388b10fab6f0.yaml | 4 + ...migrate-from-packagecloud-59d7e9e0a10e1da0.yaml | 7 + 22 files changed, 713 insertions(+), 37 deletions(-)

1 0

openstack-ansible 30.0.0 (dalmatian)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We exuberantly announce the release of: openstack-ansible 30.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 30.0.0 ^^^^^^ Prelude ******* Behavior of "rabbitmq_upgrade" variable has changed. It no longer can be used to reset the cluster state. It now acts solely as a flag to perform a rolling-upgrade of the existing cluster. New Features ************ * Added a variable "rabbitmq_erlang_package_version" that can be used to define an erlang version being used when "external_repo" is used as package source. * The neutron firewall-as-a-servie dashboard will be automatically deployed if the FWaaS service is enabled. FWaaS is now an active deliverable again fron the Neutron project. * RabbitMQ version is upgraded to a new major version 4.0 Upgrade Notes ************* * uWSGI has been re-enabled by default for Neutron one more time. With that new services are introduced which should ensure adequate functionality of Neutron when uWSGI is being used. * "neutron-periodic-workers" service is enabled for all drivers when WSGI is being used. It runs along with previously existing "neutron-rpc-server" * "neutron-ovn-maintenance-worker" service is added only if *ml2.ovn* is being used as "neutron_plugin_type". The service will be enabled and running only when WSGI is used for Neutron "neutron_use_uwsgi" is set to *True* * If you are using Ubuntu 22.04 Jammy Jellyfish and "install_method: distro" please make sure to disable "neutron_use_uwsgi" as required binaries for this mode to work are missing from packages for this distro. * Please, make sure you are running RabbitMQ version of 3.13 before proceeding with the upgrade. In case you RabbitMQ version is lower then 3.13 upgrade to 4.0 will fail. You can run upgrade to 3.13 with same version of role by supplying variable "rabbitmq_package_version" during runtime, for example: "openstack- ansible openstack.osa.rabbitmq_server -e rabbitmq_upgrade=true -e rabbitmq_package_version=3.13.7-1" and then re-running upgrade normally to 4.0. Deprecation Notes ***************** * Following deprecated variables were removed and have no effect: * *cinder_service_v2_name* * *cinder_service_v2_port* * *cinder_service_v2_proto* * *cinder_service_v2_type* * *cinder_service_v2_description* * *cinder_service_v2_publicuri* * *cinder_service_v2_publicurl* * *cinder_service_v2_adminuri* * *cinder_service_v2_adminurl* * *cinder_service_v2_internaluri* * *cinder_service_v2_internalurl* * Following variables were deprecated and removed in favor of their analogues * *cinder_service_description* -> *cinder_service_v3_description* * *cinder_service_publicuri_proto* -> *cinder_service_v3_publicuri_proto* * *cinder_service_adminuri_proto* -> *cinder_service_v3_adminuri_proto* * *cinder_service_internaluri_proto* -> *cinder_service_v3_internaluri_proto* * *cinder_service_type* -> *cinder_service_v3_type* * *cinder_service_publicuri* -> *cinder_service_v3_publicurl* * *cinder_service_adminuri* -> *cinder_service_v3_adminurl* * *cinder_service_internaluri* -> *cinder_service_v3_internalurl* * *cinder_service_v3_port* -> *cinder_service_port* * *cinder_service_v3_proto* -> *cinder_service_proto* * Variable "rabbitmq_erlang_version_spec" has been deprecated and does not have any effect anymore. Please, use "rabbitmq_erlang_package_version" instead. * Variable "haproxy_tls_vip_binds" has been renamed to "haproxy_vip_binds" to better reflect variable purpose. Old variable name is still respected but it's usage is descouraged and old naming will be removed in the future. Bug Fixes ********* * The format of kernel and ramdisk images for Ironic is now raw in order to conform to upstream expectations. See https://bugs.launchpad.net/ironic/+bug/2074090 * Issues with uWSGI mode for Neutron has been addressed and uWSGI be used for the service. Other Notes *********** * Supplying "rabbitmq_upgrade=true" no longer re-initialize cluster and will perform regular rolling upgrade of the RabbitMQ cluster. Changes in openstack-ansible 29.0.0.0rc1..30.0.0 ------------------------------------------------ 7c3639cf0 [doc] Doc index page to contain only release-specific data d51c8dbed Switch plugins repo to 2024.2 branch 37aadd383 Update TOX_CONSTRAINTS_FILE for stable/2024.2 94b78b37a Update .gitreview for stable/2024.2 1abf903e4 Produce 2024.2 RC1 for OpenStack-Ansible 17eccd5c8 Add fwaas to neutron source_git file ef192b73d Add neutron fwaas and vpnaas git and zuul repo definitions 44ad51c2b Update step-ca version ea01c7e60 Retire murano/senlin/sahara 1a6da4268 Switch Ubuntu distro jobs to 24.04 3486f2dbf Move healthcheck playbooks to the collection 742d933dc Replace usage of mirrorlist with an official Rocky mirror 73fdd751f [doc] Document requirement for RabbitMQ upgrade 8964d4319 Fix encoded url bypass edae05a8a Add variables to control HSTS records 7603b5314 Deny access to any paths including /. for console proxies. 87cf8b64c Use mariadb-admin instead of mysqladmin fb7de5866 Remove usage of mariadb.com infra mirror 59a149ba4 Move all ancilliary zuul jobs to ubuntu noble ce98ae273 Remove HA queues defenition 71dd03dd8 Unfreeze roles after milestone release 80e6a1a44 Reference keepalived scripts through integrated repo path 4115c6ac2 [reno] Add a release note for haproxy_limit_hosts key implementation aecaefa15 Freeze roles for 30.0.0.0b1 release 0461ec98c Add autocomplete script for playbooks a18973964 Ensure that the inventory tox job runs on an ubuntu-jammy node 3c9465d19 Bump ansible version to 2.17.5 700e59186 Fix upgrade job on master to upgrade from 2024.1 to master 71bc8edf8 Update docs for playbooks collectification 394c840dc Move OpenStack playbooks to collection e1e1b861b Bump SHAs and pinned versions 08a722730 Add Ceph test for Rocky Linux 367fe8eb8 Convert Skyline HAProxy httpcheck 59ec4725d Increase MPM thread limits for Apache d70218855 Use node FQDN for nova-restore-compute-id e16d741a7 Add global release note for Apache MPM alignment ce0c26bd8 Use mariadb client instead of mysql for healthcheck 09d805bc2 Use hosts setup playbooks from openstack-ansible-plugins repo ff7b294b9 Use infrastructure playbooks from openstack-ansible-plugins repo 50f16d1e1 Remove ceph-server common tasks 1b470d16c [doc] Add support for Ubuntu 24.04 to docs 1c5e45648 Test on Ubuntu Noble 62d53b971 Add Ubuntu Noble to the list of supported LXC operating systems a9a8718b7 Verify OS for containers installation e175b4aa6 Use haproxy_install playbook from openstack-ansible-plugins repo af8adb377 Remove extra slash character from horizon haproxy healthcheck url. a0714bf9a Simplify handling of 'telemetry' scenario in CI tests e1964865e Do not install Skyline with os-infra_hosts 120c942fd Enchance reference_group logic for inventory 055e69eef [doc] Add documentation on spawning HAProxy inside LXC e97192fc3 Bump SHAs for master f55df9f33 Use the 'generated' apparmor profile for all containers ad73fda3b Permit Ubuntu Noble for deploy host and targets in requirements checks b30628cd4 Remove the get_md5 parameter from ansible stat tasks fc558a06f Use unbound_clients role from plugins collection efbea346b Delete glusterd data along with container data 0053e7c38 Properly apply `always` tag to install_defaults 8147225bd Rename Container Network to Management cdcb7240f [doc] Fix Typo 099ac08a9 Skip repo verification for distro install c5fbcbfbb Rename haproxy_hosts to load_balancer_hosts 0877eaf8a Skip importing haproxy_service_config with no haproxy hosts dec6ed220 Properly apply `always` tag to haproxy_endpoint_manage 6f32d3562 Update ssh service name for modern debian based systems. 64fb3b0b9 Improve regex matching for infra_lxc_validate job fec9108ed Update repo server service user ae0450b26 Remove incorrect ' releasenotes' directory 9eea5ec38 reno: Update master for unmaintained/zed 827a7e340 Use haproxy_endpoint_manage role from osa collection rather than common-tasks eccd6c50e Remove dynamic-grouping common task file 4c40bcb9d Remove remove_container_journal common task file 792f1c6a4 Use openstack.osa.install_defaults role instead of vars_files 18cb6d1ea Bump ansible collection versions d21b0fbbc Collect letsencrypt logs 87a051e24 Collect step-ca logs 47c57267e Use UCA mirror in CI for ubuntu 120d6be99 Switch to ceph-ansible stable-8.0 9a37e1fd0 Use gather_extra_facts role from plugins collection 5bb361685 [doc] Add Code Review policies to contributor documentation d8097f08c [doc] Update role maturity matrix a1eca36d9 Update SHAs for master 4d1ce1b31 Use dynamic_address_fact role from plugins collection df8f3af39 Remove os-log-dir-setup common playbook fbc66e909 Add nfs server exports file to log collection 348f776bd Remove use of deprecated ANSIBLE_COLLECTIONS_PATHS 736d43270 Update pip/wheel/setuptools/uwsgi versions to latest 808301144 Update ansible to 2.17.1 a9ec85685 [doc] Override pdf filename for the deploy guide c8c33b211 Collect iscsid config for CI jobs a769a7356 Grammar and OS corrections a6c488c82 Revert "Enable oslomsg_rabbit_queue_manager by default" 6254dff44 Ensure link to PDF appears for deploy guide 7808a2c0b Drop support for Debian 11 (bullseye) 73cdcc65b Switch services SHAs to track master 4e6c09fbe Start 2024.2 (Dalmatian) development 31e2e91a3 Update master for stable/2024.1 1285a5ab9 [doc] Remove empty pages around ToC in PDF 30b43800c [doc] Properly promote deploy guide Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 16 +- ansible-role-requirements.yml | 320 ++++++------- deploy-guide/source/conf.py | 6 +- deploy-guide/source/deploymenthost.rst | 2 +- deploy-guide/source/index.rst | 6 +- deploy-guide/source/overview-requirements.rst | 7 +- deploy-guide/source/run-playbooks.rst | 26 +- deploy-guide/source/targethosts-prepare.rst | 2 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 4 +- .../admin/upgrades/distribution-upgrades.rst | 34 +- .../admin/upgrades/os-compatibility-matrix.html | 32 +- .../inventory/understanding-inventory.rst | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.aio | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.example | 2 +- etc/openstack_deploy/openstack_user_config.yml.aio | 2 +- .../openstack_user_config.yml.example | 8 +- .../openstack_user_config.yml.multibond.example | 2 +- .../openstack_user_config.yml.pod.example | 2 +- .../openstack_user_config.yml.prod-ceph.example | 2 +- .../openstack_user_config.yml.prod.example | 2 +- ...openstack_user_config.yml.provnet-group.example | 2 +- .../openstack_user_config.yml.singlebond.example | 2 +- .../openstack_user_config.yml.test.example | 2 +- global-requirement-pins.txt | 8 +- inventory/env.d/haproxy.yml | 7 + inventory/env.d/skyline.yml | 1 - inventory/group_vars/adjutant_all/source_git.yml | 6 +- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/all/infra.yml | 8 +- inventory/group_vars/all/oslo-messaging.yml | 3 + inventory/group_vars/all/source_git.yml | 6 +- inventory/group_vars/all_containers.yml | 5 - inventory/group_vars/aodh_all/source_git.yml | 6 +- inventory/group_vars/barbican_all/source_git.yml | 6 +- inventory/group_vars/blazar_all/source_git.yml | 10 +- inventory/group_vars/ceilometer_all/source_git.yml | 6 +- inventory/group_vars/ceph-rgw.yml | 3 +- inventory/group_vars/ceph_all.yml | 30 ++ inventory/group_vars/cinder_all/source_git.yml | 6 +- inventory/group_vars/cloudkitty_all/source_git.yml | 6 +- inventory/group_vars/designate_all/source_git.yml | 6 +- inventory/group_vars/glance_all/source_git.yml | 6 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/haproxy/haproxy.yml | 17 +- inventory/group_vars/haproxy/keepalived.yml | 6 +- inventory/group_vars/heat_all/source_git.yml | 6 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 62 +-- inventory/group_vars/ironic_all/source_git.yml | 10 +- inventory/group_vars/keystone_all/source_git.yml | 6 +- inventory/group_vars/magnum_all/source_git.yml | 6 +- inventory/group_vars/manila_all/source_git.yml | 6 +- inventory/group_vars/masakari_all/source_git.yml | 10 +- inventory/group_vars/mistral_all/source_git.yml | 10 +- inventory/group_vars/neutron_all/source_git.yml | 40 +- inventory/group_vars/nova_all/haproxy_service.yml | 6 + inventory/group_vars/nova_all/source_git.yml | 8 +- inventory/group_vars/octavia_all/source_git.yml | 10 +- inventory/group_vars/placement_all/source_git.yml | 6 +- .../group_vars/skyline_all/haproxy_service.yml | 4 +- inventory/group_vars/skyline_all/source_git.yml | 8 +- inventory/group_vars/swift_all/source_git.yml | 6 +- inventory/group_vars/tacker_all/source_git.yml | 6 +- inventory/group_vars/trove_all/source_git.yml | 6 +- inventory/group_vars/utility_all/source_git.yml | 44 +- inventory/group_vars/zun_all/source_git.yml | 14 +- osa_toolkit/generate.py | 18 +- playbooks/ceph-install.yml | 217 +-------- playbooks/ceph-nfs-install.yml | 53 +-- .../gather-hardware-facts.yml => ceph-pools.yml} | 8 +- playbooks/ceph-rgw-install.yml | 82 +--- playbooks/ceph-rgw-keystone-setup.yml | 97 +--- playbooks/certificate-authority.yml | 17 +- playbooks/certificate-generate.yml | 20 +- playbooks/certificate-ssh-authority.yml | 18 +- playbooks/common-playbooks/cinder.yml | 122 ----- playbooks/common-playbooks/neutron.yml | 95 ---- playbooks/common-tasks/ceph-server.yml | 49 -- playbooks/common-tasks/dynamic-address-fact.yml | 38 -- playbooks/common-tasks/dynamic-grouping.yml | 24 - playbooks/common-tasks/haproxy-endpoint-manage.yml | 31 -- playbooks/common-tasks/os-log-dir-setup.yml | 44 -- .../common-tasks/remove_container_journal.yml | 23 - playbooks/common-tasks/unbound-clients.yml | 65 --- playbooks/containers-deploy.yml | 6 +- playbooks/containers-lxc-create.yml | 64 +-- playbooks/containers-lxc-destroy.yml | 76 +-- playbooks/containers-lxc-host.yml | 45 +- playbooks/defaults/distro_install.yml | 37 -- playbooks/defaults/source_install.yml | 38 -- playbooks/galera-install.yml | 68 +-- playbooks/haproxy-install.yml | 53 +-- playbooks/healthcheck-hosts.yml | 115 +---- playbooks/healthcheck-infrastructure.yml | 395 +--------------- playbooks/healthcheck-openstack.yml | 516 +-------------------- playbooks/memcached-install.yml | 30 +- playbooks/openstack-hosts-setup.yml | 59 +-- playbooks/openstack-resources.yml | 13 +- playbooks/os-adjutant-install.yml | 67 +-- playbooks/os-aodh-install.yml | 72 +-- playbooks/os-barbican-install.yml | 71 +-- playbooks/os-blazar-install.yml | 75 +-- playbooks/os-ceilometer-install.yml | 33 +- playbooks/os-cinder-install.yml | 53 +-- playbooks/os-cloudkitty-install.yml | 68 +-- playbooks/os-designate-install.yml | 71 +-- playbooks/os-glance-install.yml | 87 +--- playbooks/os-gnocchi-install.yml | 75 +-- playbooks/os-heat-install.yml | 74 +-- playbooks/os-horizon-install.yml | 73 +-- playbooks/os-ironic-install.yml | 74 +-- playbooks/os-keystone-install.yml | 186 +------- playbooks/os-magnum-install.yml | 72 +-- playbooks/os-manila-install.yml | 92 +--- playbooks/os-masakari-install.yml | 103 +--- playbooks/os-mistral-install.yml | 75 +-- playbooks/os-neutron-install.yml | 58 +-- playbooks/os-nova-install.yml | 236 +--------- playbooks/os-octavia-install.yml | 74 +-- playbooks/os-placement-install.yml | 74 +-- playbooks/os-rally-install.yml | 26 +- playbooks/os-skyline-install.yml | 45 +- playbooks/os-swift-install.yml | 56 +-- playbooks/os-swift-sync.yml | 13 +- playbooks/os-tacker-install.yml | 63 +-- playbooks/os-tempest-install.yml | 31 +- playbooks/os-trove-install.yml | 71 +-- playbooks/os-zun-install.yml | 90 +--- playbooks/qdrouterd-install.yml | 3 +- playbooks/rabbitmq-install.yml | 95 +--- playbooks/repo-install.yml | 68 +-- playbooks/security-hardening.yml | 32 +- playbooks/setup-hosts.yml | 27 +- playbooks/setup-infrastructure.yml | 47 +- playbooks/setup-openstack.yml | 99 +--- playbooks/unbound-install.yml | 39 +- playbooks/utility-install.yml | 161 +------ playbooks/zookeeper-install.yml | 32 +- ...urity-group-rules-support-99470d209ffa97c4.yaml | 5 + .../add-magnum-integration-a7a21c4feae9cbeb.yaml | 6 + .../align_ceph_repo_vars-222f6af6a7d349a2.yaml | 18 + .../notes/amphora_bfv_quota-8adc0a3c886921ba.yaml | 17 + .../apache_mpm_alignment-41063895f0f9c024.yaml | 11 + .../bash_autocompletion-f44059352827c3a6.yaml | 10 + .../notes/ceph-ansible-8-3923428844537c1b.yaml | 19 + ...r_v2_endpoint_deprecation-869f74090121154e.yaml | 31 ++ ...cloudkitty_storage_config-48e154cc2b549238.yaml | 5 + .../notes/custom_ssh_config-46c443e077b3386b.yaml | 7 + ...ble_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 + .../drop_debian_bullseye-c93d0e7e52170780.yaml | 4 + .../erlang_version_spec-ee21ffe0a1d34576.yaml | 12 + .../federated_domain_names-4e169b8b9a947940.yaml | 13 + .../notes/fwaas-dashboard-4bc47b7c284dad68.yaml | 6 + .../notes/ha_queues_removed-4e4d3fe5ed74a242.yaml | 16 + ...aproxy_hosts_envd_renamed-56edb1aa3f56539b.yaml | 16 + .../haproxy_limit_hosts-0f529297c9748eb7.yaml | 20 + ...tbeat_in_pthread_to_false-4bde8fca9a332805.yaml | 8 + .../notes/horizon_apache_mpm-2a34436635f1bef9.yaml | 8 + ...zon_extend_local_settings-9e062b515de94b24.yaml | 7 + ...rnel-ramdisk-image-format-3edd5c7479ebd32a.yaml | 7 + ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 + .../l3_agent_extensions_var-79150960642ce551.yaml | 5 + ...akari_service_type_rename-4a86255372f8a3b5.yaml | 5 + .../notes/neutron_default_az-51715b4d836b5802.yaml | 8 + .../neutron_uwsgi_re-enabled-d75d0362aaf32278.yaml | 24 + .../octavia-dhcp-disable-d575d932a1959652.yaml | 6 + ...tavia_ssh_keypair_options-a6f9cfeb51bdfefa.yaml | 16 + .../playbooks_to_collections-c252770d24be9bb7.yaml | 26 ++ .../quorum_queues_default-2f633cd0d5ee2037.yaml | 5 +- .../notes/rabbitmq_4-0d92471180caa8ea.yaml | 16 + .../rabbitmq_repo_deb822-b47ef07ff462193f.yaml | 16 + ...rabbitmq_upgrade_refactor-4dfd860f76610a28.yaml | 9 + .../rename_haproxy_vip_binds-dda8197aaf607b53.yaml | 7 + .../replace_nginx_apache-f62e453f44acf790.yaml | 8 + .../return_amphora_provider-05deae1d173dbb1f.yaml | 5 + .../skyline_not_infra_hosts-58190dad1c43ed9a.yaml | 11 + .../switch-to-rabbitmq-ppa-671004eb2092aa3b.yaml | 12 + .../ubuntu_noble_support-d4d741bdfdf1d4ef.yaml | 4 + ...r_policy_location_gnocchi-6cc4bb4018456c39.yaml | 6 + ...env_build_facts_gathering-9a85f72324d6e7e0.yaml | 6 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- scripts/bash-completion | 93 ++++ scripts/bootstrap-ansible.sh | 14 +- scripts/gate-check-commit.sh | 16 +- scripts/log-collect.sh | 4 + scripts/openstack-ansible.rc | 1 - scripts/rabbitmq-test.py | 47 -- scripts/run-upgrade.sh | 4 +- .../galera-cluster-rolling-restart.yml | 2 +- .../upgrade-utilities/nova-restore-compute-id.yml | 3 +- .../bootstrap-host/tasks/check-requirements.yml | 8 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 8 +- .../templates/user_variables.aio.yml.j2 | 17 +- .../templates/user_variables_ceph.yml.j2 | 2 +- tox.ini | 2 +- zuul.d/jobs.yaml | 299 ++++++------ zuul.d/playbooks/post.yml | 1 - zuul.d/playbooks/pre-gate-cleanup.yml | 26 ++ zuul.d/playbooks/pre-gate-scenario.yml | 10 +- zuul.d/project-templates.yaml | 93 ++-- 219 files changed, 1893 insertions(+), 6222 deletions(-)

1 0

oslo.utils 8.0.0 (epoxy)
by no-reply＠openstack.org 04 Dec '24

04 Dec '24

We are overjoyed to announce the release of: oslo.utils 8.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 8.0.0 ^^^^^ New Features ************ * The following utility functions have been added to the "oslo_utils.secretutils" module. These can be used to replace the built-in "crypt" module which was removed in Python 3.13. * "crypt_password" * "crypt_mksalt" Upgrade Notes ************* * The "netutils.is_valid_ipv4" method now enables the strict check by default. To preserve the previous behavior, set the "strict" argument to "False". Changes in oslo.utils 7.4.0..8.0.0 ---------------------------------- 1c9b9e9 Adjust the version in descriptions 11c29a3 Add a release note about the new crypt utilities 8b84a85 Fix get_my_ipv4 in absence of IPv4 8f0d9e7 Fix get_my_ipv6 in absence of IPv6 bc432f7 Add utility to replace crypt.mksalt 901916f reno: Update master for unmaintained/2023.1 6ef3f1e Add utility to replace crypt.crypt 85e998e is_valid_ipv4: Enable strict check by default 4762cc4 Add note about requirements lower bounds Diffstat (except docs and test files) ------------------------------------- bindep.txt | 4 ++ oslo_utils/netutils.py | 80 ++++++++++------------ oslo_utils/secretutils.py | 47 +++++++++++++ .../notes/crypt-utils-de46bd8fe835dc98.yaml | 9 +++ .../is_valid_ipv4-strict-3da92c0452aaf947.yaml | 6 ++ releasenotes/source/2023.1.rst | 2 +- requirements.txt | 4 ++ 9 files changed, 142 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5c0c83f..76dd580 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

openstack-ansible 27.6.1 (antelope)
by no-reply＠openstack.org 03 Dec '24

03 Dec '24

We are delighted to announce the release of: openstack-ansible 27.6.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.6.1 ^^^^^^ Known Issues ************ * Due to the underlying bug (https://bugs.launchpad.net/ansible- collections-openstack/+bug/2065680) in Ansible collections for OpenStack, "Default" domain name can be renamed to "default" under certain conditions. One known example is having "domain: default" defenition under "keystone_sp -> trusted_idp_list -> federated_identities" structure. Upgrade Notes ************* * Please, make sure that in case of federation usage you define domain name instead of it's ID (ie. "Default" instead of "default") under "keystone_sp -> trusted_idp_list -> federated_identities" Changes in openstack-ansible 27.6.0..27.6.1 ------------------------------------------- f7d2fa693 Bump SHAs to 2023.1 cbf5302b3 Deny access to any paths including /. for console proxies. Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 12 ++++---- inventory/group_vars/adjutant_all/source_git.yml | 4 +-- inventory/group_vars/all/source_git.yml | 4 +-- inventory/group_vars/blazar_all/source_git.yml | 8 +++--- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +-- inventory/group_vars/designate_all/source_git.yml | 4 +-- inventory/group_vars/horizon_all/source_git.yml | 32 +++++++++++----------- inventory/group_vars/ironic_all/source_git.yml | 4 +-- inventory/group_vars/magnum_all/source_git.yml | 2 +- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 28 +++++++++---------- inventory/group_vars/nova_all/haproxy_service.yml | 6 ++++ inventory/group_vars/nova_all/source_git.yml | 8 +++--- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/placement_all/source_git.yml | 2 +- inventory/group_vars/swift_all/source_git.yml | 4 +-- inventory/group_vars/tacker_all/source_git.yml | 2 +- inventory/group_vars/trove_all/source_git.yml | 4 +-- inventory/group_vars/zun_all/source_git.yml | 4 +-- .../federated_domain_names-4e169b8b9a947940.yaml | 13 +++++++++ 21 files changed, 88 insertions(+), 69 deletions(-)

1 0

ovsdbapp 2.9.0 (epoxy)
by no-reply＠openstack.org 03 Dec '24

03 Dec '24

We are excited to announce the release of: ovsdbapp 2.9.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.8.0..2.9.0 -------------------------------- e2d8d39 [NB] Add "if_exists" flag to ACL and Port_Group deletion commands 5d3b827 reno: Update master for unmaintained/2023.1 d603441 Remove unused bindep tools 4647c3f Update master for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 - ovsdbapp/schema/ovn_northbound/api.py | 11 +++++- ovsdbapp/schema/ovn_northbound/commands.py | 18 +++++---- ovsdbapp/schema/ovn_northbound/impl_idl.py | 10 +++-- .../schema/ovn_northbound/test_impl_idl.py | 43 ++++++++++++++++++++++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 +++ releasenotes/source/index.rst | 1 + 8 files changed, 76 insertions(+), 17 deletions(-)

1 0