- Release-announce - lists.openstack.org

kolla 12.3.0 (wallaby)
by no-reply＠openstack.org 07 Jul '22

07 Jul '22

We jubilantly announce the release of: kolla 12.3.0: Kolla OpenStack Deployment This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.3.0 ^^^^^^ New Features ************ * Updates the OpenStack exporter for Prometheus to version 1.6.0. * Added an *--repos-yaml* argument to allow user to provide own file with definitions of external package repositories. Useful for those building in offline environments with set of internal mirrors. Upgrade Notes ************* * The updated OpenStack exporter for Prometheus uses the latest Nova API microversion by default, resulting in changes to existing metrics. To keep existing behaviour, set "prometheus_openstack_exporter_compute_api_version" to "2.1". Bug Fixes ********* * The "apt-get update" command by default didn't fail on erroneous source repositories, it show the warning 'W: Some index files failed to download. They have been ignored, or old ones used instead.' and continue to work. This causes some containers (eg. rabbitmq, kolla- toolbox) successfully built, but makes them inconsistent because the official Ubuntu repository contains packages with the same names. Now we use "apt-get -eany update" command to stop building with an error in such cases. Changes in kolla 12.2.0..12.3.0 ------------------------------- 0541e9332 Bump prometheus-openstack-exporter version to 1.6.0 836e5945a Don't ignore errors of 'apt-get update' command 2fbc86f55 Pin diskimage-builder version due to drop Python3.6 47fdc545a Allow to provide own repos.yaml file Diffstat (except docs and test files) ------------------------------------- kolla/common/config.py | 4 +++- kolla/image/build.py | 2 ++ kolla/template/methods.py | 8 ++++++-- releasenotes/notes/apt-get-update-fatal-ed2bcc5c1d93c082.yaml | 10 ++++++++++ .../notes/openstack-exporter-1.6.0-cb2c1a978cf4be64.yaml | 11 +++++++++++ .../notes/user-provided-repos.yaml-d6e8583e9d9d01ef.yaml | 6 ++++++ 8 files changed, 49 insertions(+), 8 deletions(-)

1 0

kolla-ansible 12.5.0 (wallaby)
by no-reply＠openstack.org 07 Jul '22

07 Jul '22

We are delighted to announce the release of: kolla-ansible 12.5.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.5.0 ^^^^^^ New Features ************ * Adds support for configuring the Openstack Compute API microversion used by the OpenStack exporter for Prometheus using the "prometheus_openstack_exporter_compute_api_version" variable. The default value is "2.1" to keep metrics unchanged when using recent exporter releases. Bug Fixes ********* * Fixes the issue of exponential growth of /run/openvswitch mounts when kolla-toolbox container is restarted. LP#1979295 * Fixes an issue with recovering multi-node MariaDB Galera cluster. * Increases "prometheus_openstack_exporter_timeout" to 45 seconds to reduce the odds of scrape failures on deployments with large number of OpenStack resources. LP#1976629 Changes in kolla-ansible 12.4.0..12.5.0 --------------------------------------- 36d1713a8 Support setting Nova API microversion for openstack-exporter 4be435470 use ironic user in ironic_neutron_agent.ini file e047de57f Fix nested mounts of /run/openvswitch f217335ab CI: cephadm: Add osds/pools/users in one run c51c47fcc ovn: add network group to neutron-ovn-metadata-agent 7ba90673a Increase openstack-exporter timeout to 45 seconds 70e3b187f designate: allow designate_ns_record to be a list 8a8fafd6c Switch to Cortex-A72 cpu on AArch64 9c06aad0a Improve MariaDB restore procedure Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + ansible/roles/common/defaults/main.yml | 1 - ansible/roles/designate/templates/pools.yaml.j2 | 7 ++++ ansible/roles/mariadb/tasks/recover_cluster.yml | 1 + .../neutron/templates/ironic_neutron_agent.ini.j2 | 6 ++-- ansible/roles/neutron/templates/neutron.conf.j2 | 2 ++ ansible/roles/prometheus/defaults/main.yml | 2 ++ ansible/roles/prometheus/handlers/main.yml | 1 + .../roles/prometheus/tasks/check-containers.yml | 1 + .../reference/networking/designate-guide.rst | 3 +- .../notes/bug-1979295-3088a4a1c7b391d7.yaml | 7 ++++ ...eate-grastate-mariabackup-58ae93adf32d2bcb.yaml | 4 +++ ...penstack-exporter-timeout-652eebff6a42d198.yaml | 7 ++++ ...ack-exporter-nova-version-9e75cb7ec04658f2.yaml | 8 +++++ roles/cephadm/tasks/main.yml | 37 ++++------------------ roles/cephadm/templates/commands.sh.j2 | 23 ++++++++++++++ 22 files changed, 102 insertions(+), 43 deletions(-)

1 0

kayobe 10.3.0 (wallaby)
by no-reply＠openstack.org 07 Jul '22

07 Jul '22

We jubilantly announce the release of: kayobe 10.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.3.0 ^^^^^^ Bug Fixes * Fixes an issue with undefined kolla_enable_hacluster variable. Changes in kayobe 10.2.0..10.3.0 -------------------------------- 98fbc2f2 Add missing declaration of kolla_enable_hacluster 9a093b59 Use net_mask filter instead of ansible's ipaddr Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/kolla | 1 + ansible/kolla-bifrost-hostvars.yml | 2 +- releasenotes/notes/fix-hacluster-variable-48d1370651a11cda.yaml | 4 ++++ 3 files changed, 6 insertions(+), 1 deletion(-)

1 0

openstack-ansible 25.0.0 (yoga)
by no-reply＠openstack.org 06 Jul '22

06 Jul '22

We are amped to announce the release of: openstack-ansible 25.0.0: Ansible playbooks for deploying OpenStack This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.0.0 ^^^^^^ New Features ************ * Implemented variable "gnocchi_metricd_workers" that is designed to controll amount of gnocchi-metricd workers spawned. By default it is equal to number of CPU cores, but no more than 16 workers. * Implemented variable "magnum_conductor_workers" that is designed to controll amount of magnum-conductor workers spawned. By default it is equal to number of CPU cores, but no more then 16 workers. * Neutron VPN as a Service (VPNaaS) with customized configuration files can now be defined with the variable "neutron_vpnaas_custom_config". deployers should define "neutron_vpnaas_custom_config" in 'user_variables.yml'. Example: neutron_vpnaas_custom_config: - src: "/etc/openstack_deploy/strongswan/strongswan.conf.template" dest: "{{ neutron_conf_dir }}/strongswan.conf.template" - src: "/etc/openstack_deploy/strongswan/strongswan.d" dest: "/etc/strongswan.d" - src: "/etc/openstack_deploy/{{ neutron_vpnaas_distro_packages }}/ipsec.conf.template" dest: "{{ neutron_conf_dir }}/ipsec.conf.template" - src: "/etc/openstack_deploy/{{ neutron_vpnaas_distro_packages }}/ipsec.secret.template" dest: "{{ neutron_conf_dir }}/ipsec.secret.template" We should be also define "neutron_l3_agent_ini_overrides" in 'user_variables.yml' to tell "l3_agent" use the new config file. Example: neutron_l3_agent_ini_overrides: ipsec: enable_detailed_logging: True strongswan: strongswan_config_template : "{{ neutron_conf_dir }}/strongswan.conf.template" openswan: ipsec_config_template: "{{ neutron_conf_dir }}/ipsec.conf.template" Upgrade Notes ************* * If you have defined "haproxy_tuning_params" in your deployment, make sure that before upgrade all keys are valid haproxy options. For example, instead of "chksize: 16384" you should set "tune.chksize: 16384". Otherwise invalid config will be generated and haproxy will fail on startup. No upgrade scripts are provided for this change as well as no backwards compatability. * Cinder v2 API is now fully removed from Cinder service. With that os_cinder role ensures v2 endpoint is not present anymore in the catalog and remove endpoints if they're present. Bug Fixes ********* * By default we increase "tune.maxrewrite" as otherwise while using CSP headers, their size could exceed allowed buffer. Also deployers can override this value if needed. Other Notes *********** * Restriction on parameters that can be passed to "haproxy_tuning_params" has been released. This means, that any tuning parameter can be passed in key/value format. Changes in openstack-ansible 24.0.0.0rc1..25.0.0 ------------------------------------------------ cc1bd29cb Bump OpenStack-Ansible roles for RC2 925987c4d Do not try to run etcd in serial mode 6d0f84b72 Exclude /var/log/journal from log collection 345f0bea9 Return facts gathering to pre_tasks for masakari 0359a21cc Fix facts gathering for zun e05226e6f Switch ARA report type from html to database for openstack-ansible jobs b73dc179b Set zuul post-timeout to 3 hours 00e26de85 Update doc index page 72abf101d Update TOX_CONSTRAINTS_FILE for stable/yoga 30cab8c68 Update .gitreview for stable/yoga e7ea69c25 Bump roles and services for Yoga RC1 0ebd6723b Imported Translations from Zanata 5597c39ce [doc] Update link to Ansible doc in manifesto f5fcdb029 Revert "Add release note about Ceph-Ansible deprecation" 7be9c847a Stop NetworkManager on centos 9. 16440ef7f Limit the number of wsgi process to 1. d9803d25d Set the max number of gnicchi-metricd workers f2ac17069 Install murano client for distro installs fe627c50d Fix deprecations handling in journal logs 2ccd1521f Limit magnum workers in CI 3881b5c7c Update magnum tags and images for CI b336c6a7d Reduce m1.magnum flavor e112e895e Add mistral-extra to required projects in CI 7976439d5 Increase manila flavor size d132d3766 Bump SHA for pacemaker-corosync role a8d2ad902 Define corosync interface for facts gathering 42dc09713 Add log collection from /etc/ironic-inspector 3d947a53b add comments to make editing the table clearer 4ee51d18b [doc] Fix compatability matrix layout 5237dd40f Explicitly use collection for haproxy module 0a0a1e062 Remove usage of haproxy-endpoints role e19a93b5f Disable service_token requirement by default a05d00dd7 Unfreeze roles after milestone 8c6076494 Freeze Ansible Roles for Beta release 5c4178f1a Use nodepool centos and epel mirrors for CI jobs on centos-9 21dd4e6c5 Add ability to define bridge type for containers f40abfa2f Replace glance_nfs_client 8a27a3c8d Add Octavia certificates upgrade playbook dc668a6a1 [doc] Add CentOS 9 Stream to supported 566d4ec5d Add experimental Ubuntu 22.04 support 943fde1ec Add mistra-extra repo d35cd1385 Check the actual upper-constraints file for heathcheck-infrastructure. 98c41c076 Remove unavailable commented out packages from centos-9 vars file 54b087227 Run keystone pre-service setup tasks on all keystone hosts first 236b06074 Create three keystone containers when the test scenario includes 'keystone' f6429b558 Add release note about Ceph-Ansible deprecation bc21a289b Drop nova-key from scale documentation and scripts 532cda8ec Add Centos-9 Stream support 894e3cc66 Bump SHA for master d501eadd9 Align collection_file naming bb7577717 Change unbound role source a8c5da7d5 Bump ansible version to 2.12.6 0823e5474 [doc] Mark Bionic and Buster as unsupported for Y 0de6311de Add zuul jobs and template for testing different LXC backing stores ff746bfef Allow lxc container backing store to be defined as part of the scenario c91a63e95 Drop sshd role requirement f67370f56 Update repo verification file URI d90183524 Template out zuul mirror info variables for later use by embedded ansible f242c7db6 Define tempest network features for ovs/ovn 9bce86e4a [doc] Be even more explicit about lb_vip_address 0feafaf1b haproxy: fix csp for glance image uploads via horizon 4ac454f59 Ensure requirements SHA variable is included for healthcheck playbook 28ee64834 Use glusterfs to synchronise repo server contents 642af7914 Add CSP headers for img-src and worker-src 65c4d7ca4 Install rally only when rally_install is set fb9af7eb9 Check for requirements file to verify repo health 753efe197 Update documented OS support for Ubuntu 22.04 1485fd531 Update compatibility matrix for Yoga release 5b4512777 Add documentation reminder to set external VIP to FQDN for real deployments 7a28d9a26 Limit cloudkitty workers d6649f5b1 Limit mistral worker 46b8b9b07 Bump ansible-core version to 2.12.5 b515d895e Cleanup distro vars 2490dbc55 Do not encrypt SSL for CentOS distro path ba0974f5e [doc] Add doc how to pass SR-IOV inside containers 6193908b1 Allow to run utility playbook in check mode 667c8e886 Switch services to Yoga efa153ea1 Mark OSA repository as safe in git.config in CI d081d9283 Generate SSH authorities during upgrade independently f8b63e5d8 Bump versions of ansible collections d67d1df2c Update ansible-core to 2.12.4 2492d82da Fix extra facts gathering with tags 857d7d251 Add mysql directory for logging 302c8226e Add galera monitoring user to secrets abaff4454 Bump SHAs for master 952cbc0f1 Use the short form nodeset definition once it's merged upstream dfa077659 Add ansible.utils collectoin requirement 65c67f572 Add support for running on Rocky Linux 24b6801a6 Bump SHAs for master 23ee36ad6 Improve bump patch readability e19794329 Bump ansible.netcommon version ac56f37df Connect openstack_pki_regen_ca variable to pki role 42e9dca1a All of the deployment scenarios require keystone 0273589a0 In AIO and CI set the internal vip to https only for 'deploy' actions. 9c2af697e Add variable to bootstrap role to describe the test job action 424887242 [doc] Add note regarding 127.0.1.1 removal ef7a5f6ff Add hosts zuul job with reduced required_projects f0eaef017 Add infra zuul job with reduced required_projects ad0fdb284 Add test of used SHAs 0d57286ed Do not install extra repos with the zuul configure-mirrors role 4566e65c4 Create yaml file of the zuul job vars for embedded ansible f53fcbb90 Replace use of deprecated ANSIBLE_CALLBACK_WHITELIST e29049785 Create ssh certificate authority c6d3d915f Drop linuxcontainers hardcode for CI b2e13a512 Fix behaviour of OSA_CONFIG_DIR c23153087 Remove enablement of neutron tempest plugin in scenario templates 64500404c Do not run rsyslog against RabbitMQ e51d4bc8c Rename RBD cinder backend c8132233a Move infra-journal-remote logic to its role b3680f470 Set minimum and maximum microversions for manila api a5b99ca74 Remove symlinking of selinux libraries into the ansible-runtime venv c87fa9344 Remove workaround for OpenSUSE when setting AIO hostname 926458126 Simplify mount options for new kernels. fd7425736 [DOC] A centos deployment host does not need the RDO repo installing 2e67a0706 Bump ansible to 2.12.2 2f240dd48 Used forked etcd role 32188700f [docs] Use extlink for deploy guide references 151703441 Fix tempest plugins versions 87f28a1c2 Clarify the difference between generating and regenerating certificates 8209706fc Clarify major upgrade documentation for updating internal CA 2eaaa4b0c Fix infra upgrade 560376396 Fix infra scenario repo server cluster 23670ccf8 Use openstack.cloud.config module instead of deprecated os_client_config 1ba194001 Collect the contents of /etc/ssh during zuul job log gathering 6d2d175da Remove tempest.api.volume.admin.test_multi_backend test 0b2e9d316 Bump OpenStack-Ansible master c9840ce84 Remove test_volumes_backup tests f1ed3f5dc Remove references to unsupported operating systems a77738e9e Move system_crontab_coordination role to collection 1bb5121e0 Move git_requirements plugin to collection db1555018 Use plugins repo as collection 58fa77fd1 Fix ceph example d4fc5a4b2 Remove workaround for pre-release debian bullseye 5f77d930c Do not duplicate packages installed with the venv build role 26d9ac41d Ensure bash completions directory is present ebf871f65 Add Ironic-related bridges to AIO 3d3ae5e00 Use local repositories for ansible collections in CI 0d74b74bf Add defaults for TLS 1.3 and rename TLS <= 1.2 variable b018162d3 Fix definition of ssl_protocol 0ca4ddf57 Update ansible-lint version a67fd5e4c Fix rich version for ansible-lint 61c550d08 Fix additional facts gathering in ceph-install.yml 8537d2ac6 Gather additional facts for haproxy playbook 0972c8228 Add openstack-ansible-plugins as a collection de0e7e7cd Disable zun volume test 5872ee43e [doc] Document usage of the user-collection-requirements a749517ff docs: indicate how to override upper constraints d677a6dc9 Bootstrap lxc_net mtu for gate 8cd65feae Drop hosts file distribution tasks 3ef336f85 Use unittest.mock instead of mock 4e7006a14 Update pypi url to new url bba3b6ab6 [doc] Update infra node scaling documentation bb52c9a9b Update ansible-core to 2.12.1 15bd4920e Update notes on how to enable TLS for VNC ec8f6f9c7 Use python3.8 for CentOS 8 e1e1a1f8e Use the python venv module to build the ansible runtime venv 4ee08bfb9 Replace obsoleted include with import_task/include_task 2ba47de11 Remove centos-8 support 5a867922f Remove CI jobs for centos-8 4708039cc Bump cinder git hash to work around bug e877c8bb6 Do not add u-c to PIP_OPTS 5d9a074d1 Change haproxy variable used to set security headers to haproxy_frontend_raw 4ec0f5374 Remove support for Ubuntu Bionic 16442ff80 Remove support for Debian Buster dc9804b19 [doc] Update stable releases support status 11d3797c4 Start Yoga development cycle 48de575ae [doc] Add Xena compatible OS 0683f29fb Update master for stable/xena 56b63d9fd Set galera to use TLS for connections by default 8ad37b254 Add documentation of security improvements made to Openstack Ansible 6eb2dec70 Reduce neutron WSGI workers for CI Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Vagrantfile | 11 - ansible-collection-requirements.yml | 64 ++-- ansible-role-requirements.yml | 299 +++++++++------ deploy-guide/source/deploymenthost.rst | 7 +- deploy-guide/source/index.rst | 2 +- deploy-guide/source/next-steps.rst | 4 +- deploy-guide/source/overview-requirements.rst | 12 +- deploy-guide/source/overview.rst | 3 +- deploy-guide/source/targethosts-prepare.rst | 14 +- deploy-guide/source/verify-operation.rst | 5 +- .../admin/openstack-operations/verify-deploy.rst | 11 +- .../admin/upgrades/distribution-upgrades.rst | 4 - .../admin/upgrades/os-compatibility-matrix.html | 426 +++++++++++++-------- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 29 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 13 +- .../architecture/container-networking.rst | 19 +- .../reference/configuration/extending-osa.rst | 14 +- .../reference/configuration/extra-networks.rst | 46 +++ .../reference/configuration/using-overrides.rst | 26 ++ etc/netplan/01-static.yml | 1 + etc/openstack_deploy/openstack_user_config.yml.aio | 14 + .../openstack_user_config.yml.aio.j2 | 36 +- .../openstack_user_config.yml.example | 9 +- .../openstack_user_config.yml.multibond.example | 21 +- .../openstack_user_config.yml.pod.example | 21 +- .../openstack_user_config.yml.prod-ceph.example | 2 +- .../openstack_user_config.yml.prod.example | 21 +- ...openstack_user_config.yml.provnet-group.example | 21 +- .../openstack_user_config.yml.singlebond.example | 21 +- etc/openstack_deploy/user_secrets.yml | 1 + .../user_variables.yml.prod-ceph.example | 2 +- inventory/group_vars/all/all.yml | 17 +- inventory/group_vars/all/ceph.yml | 2 +- inventory/group_vars/all/infra.yml | 3 + inventory/group_vars/all/keystone.yml | 3 + .../main.yml => inventory/group_vars/all/ssh.yml | 30 +- inventory/group_vars/all/ssl.yml | 9 +- inventory/group_vars/ceph-rgw.yml | 2 +- inventory/group_vars/ceph_all.yml | 2 +- inventory/group_vars/haproxy/haproxy.yml | 8 +- inventory/group_vars/neutron_calico_dhcp_agent.yml | 4 +- inventory/group_vars/repo_all.yml | 20 +- inventory/group_vars/utility_all.yml | 19 +- osa_toolkit/generate.py | 14 +- playbooks/ceph-install.yml | 32 +- playbooks/ceph-rgw-install.yml | 2 +- playbooks/certificate-authority.yml | 1 + playbooks/certificate-ssh-authority.yml | 31 ++ playbooks/common-playbooks/cinder.yml | 2 +- playbooks/common-playbooks/neutron.yml | 2 +- playbooks/common-playbooks/nova.yml | 2 +- playbooks/common-tasks/ceph-server.yml | 2 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 2 +- playbooks/defaults/distro_install.yml | 44 +-- playbooks/defaults/repo_packages/gnocchi.yml | 4 +- playbooks/defaults/repo_packages/nova_consoles.yml | 5 +- .../defaults/repo_packages/openstack_services.yml | 217 ++++++----- .../defaults/repo_packages/openstack_testing.yml | 96 +++++ playbooks/defaults/source_install.yml | 2 +- playbooks/etcd-install.yml | 4 +- playbooks/galera-install.yml | 31 +- playbooks/haproxy-install.yml | 4 + playbooks/healthcheck-hosts.yml | 2 +- playbooks/healthcheck-infrastructure.yml | 6 +- playbooks/infra-journal-remote.yml | 110 +----- playbooks/library/git_requirements.py | 335 ---------------- playbooks/memcached-install.yml | 2 +- playbooks/openstack-hosts-setup.yml | 18 +- playbooks/os-adjutant-install.yml | 9 +- playbooks/os-aodh-install.yml | 9 +- playbooks/os-barbican-install.yml | 9 +- playbooks/os-blazar-install.yml | 11 +- playbooks/os-ceilometer-install.yml | 9 +- playbooks/os-cloudkitty-install.yml | 9 +- playbooks/os-designate-install.yml | 9 +- playbooks/os-glance-install.yml | 19 +- playbooks/os-gnocchi-install.yml | 9 +- playbooks/os-heat-install.yml | 11 +- playbooks/os-horizon-install.yml | 11 +- playbooks/os-ironic-install.yml | 11 +- playbooks/os-keystone-install.yml | 22 +- playbooks/os-magnum-install.yml | 9 +- playbooks/os-manila-install.yml | 4 + playbooks/os-masakari-install.yml | 14 +- playbooks/os-mistral-install.yml | 11 +- playbooks/os-murano-install.yml | 11 +- playbooks/os-octavia-install.yml | 11 +- playbooks/os-placement-install.yml | 11 +- playbooks/os-rally-install.yml | 4 + playbooks/os-sahara-install.yml | 9 +- playbooks/os-senlin-install.yml | 9 +- playbooks/os-swift-install.yml | 11 +- playbooks/os-tacker-install.yml | 9 +- playbooks/os-tempest-install.yml | 12 +- playbooks/os-trove-install.yml | 9 +- playbooks/os-zun-install.yml | 24 +- playbooks/qdrouterd-install.yml | 2 +- playbooks/rabbitmq-install.yml | 10 +- playbooks/repo-install.yml | 31 +- .../roles/system_crontab_coordination/LICENSE | 202 ---------- .../roles/system_crontab_coordination/README.md | 38 -- .../system_crontab_coordination/defaults/main.yml | 31 -- .../system_crontab_coordination/tasks/main.yml | 24 -- .../templates/crontab.j2 | 51 --- playbooks/rsyslog-install.yml | 2 +- playbooks/security-hardening.yml | 14 +- playbooks/setup-hosts.yml | 1 + playbooks/unbound-install.yml | 2 +- playbooks/utility-install.yml | 47 +-- .../notes/add-uwsgi-tls-5a8c4005106fbcd5.yaml | 8 + ..._octavia_cinder_variables-107cb1da89834bf3.yaml | 5 + .../adds-uefi-boot-support-18ad99dd21f7e8be.yaml | 7 + .../notes/centos-mirror-url-7698160e63aedce6.yaml | 12 + ...ntial-provider-mechanisms-959f7479debbe448.yaml | 3 + .../notes/csp-image-uploads-0165e6fe76287a0c.yaml | 5 + .../db-pooling-old-vars-0fca50f8114ab7bb.yaml | 5 + .../db-pooling-old-vars-6ad7284cd8583218.yaml | 7 + .../db-pooling-old-vars-b5dbab9bfb21cc78.yaml | 5 + .../deprecate_congress_lxd-9e1c00c6f93f32f6.yaml | 6 + ...recate_glance_api_servers-6a5fd6a13d324fb4.yaml | 5 + .../notes/drop-bionic-d66991ef382baefe.yaml | 6 + .../notes/drop-buster-0d63a54b1e5ee288.yaml | 6 + .../notes/drop-centos-8-537ef0f11cd90916.yaml | 7 + .../notes/drop-nginx-repo-e0a6ab0107e09e94.yaml | 8 + .../notes/extra-port-47d2ba4074ab6a62.yaml | 9 + .../facts_gathering_tags-69babd74af6e7470.yaml | 4 + ...ature-enabled-deprecation-b4bedf43746e30b4.yaml | 19 + .../notes/galera_data_dir-98c9606407532be0.yaml | 5 + ..._monitoring_user_password-ac8b1c1ef7644e73.yaml | 9 + .../notes/galera_tmpdir-3271e0bc8e353930.yaml | 10 + .../notes/galera_use_ssl-e906b5ba8b2e62ef.yaml | 9 + .../glance_remote_client-78e5d426cb55717f.yaml | 13 + .../notes/global-apt-pins-a0d6785a8fd662df.yaml | 20 + .../gnocchi_incoming_driver-0f96301b88044f55.yaml | 18 + .../gnocchi_metricd_workers-e179af4e37d1531d.yaml | 7 + .../gnocchi_redis_driver-ea6bcb123755094b.yaml | 9 + ...xy_tuning_params_released-45eb40104747561a.yaml | 20 + .../heartbeat-in-pthread-6266b4bad0efa00c.yaml | 5 + .../heartbeat-in-pthread-9f5fde7bfdd7d306.yaml | 5 + .../heartbeat-in-pthread-d0c9958361c224f0.yaml | 5 + .../keystone-use-pki-role-d0e905887a5f5bd1.yaml | 13 + .../keystone_uwsgi_role-b61179e170401e21.yaml | 7 + .../magnum_conductor_workers-3f7eafeb4429dd0b.yaml | 6 + .../notes/neutron-dpdk-bonds-4dd98fc0b341ebfb.yaml | 10 + ...tron-vpnaas-custom-config-ad991bb02b9ed655.yaml | 33 ++ .../notes/nova_glance_rbd-ab6e9b0f5dd7b9ec.yaml | 6 + .../notes/nova_ssl_header-c5d95a629a0a1df5.yaml | 6 + ...cinder_audit_send_actions-76bf53ee0df68383.yaml | 7 + .../notes/rabbit_cloudsmith-36ccc2f807688f4f.yaml | 5 + .../rabbitmq_ini_config-dcf95fe46a37ff2c.yaml | 15 + .../rabbitmq_init_overrides-74ce479a2dcf304c.yaml | 6 + .../rabbitmq_manage_hosts-834150c45dfc0771.yaml | 9 + .../remove-unnecessary-vars-2b29b9fd5c7ac06a.yaml | 6 + .../remove_cinderv2_api-a9e848a63c055bb2.yaml | 6 + .../notes/remove_xinetd-1970838891f570cc.yaml | 5 + .../repo-server-glusterfs-181d0ab5c62e13d6.yaml | 26 ++ .../tempest-endpoint-type-bf2252d66bc1e4f5.yaml | 3 + ...rce-creation-improvements-4a5bc4dab1944934.yaml | 5 + .../notes/templated_service-f31e4515c2fd75ab.yaml | 7 + .../notes/tls_variables-5d7db8f80f158f0d.yaml | 6 + .../notes/tls_variables-91160d4e38085de4.yaml | 9 + .../notes/tls_variables-991aec792d58eeb9.yaml | 10 + .../notes/tls_variables-ab6684a5a5505068.yaml | 6 + .../notes/venv_wheels_build-23298a7019e629bd.yaml | 9 + releasenotes/source/index.rst | 1 + .../source/locale/id/LC_MESSAGES/releasenotes.po | 8 +- releasenotes/source/xena.rst | 6 + scripts/add-compute.sh | 2 - scripts/bootstrap-ansible.sh | 62 +-- scripts/gate-check-commit.sh | 14 +- scripts/get-ansible-collection-requirements.yml | 40 +- scripts/get-ansible-role-requirements.yml | 9 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/journal_dump.py | 26 +- scripts/log-collect.sh | 28 +- scripts/openstack-ansible.rc | 18 +- scripts/run-upgrade.sh | 32 +- scripts/scripts-library.sh | 28 +- .../define-octavia-certificate-vars.yml | 40 ++ .../upgrade-utilities/deploy-config-changes.yml | 28 -- scripts/upgrade-utilities/unset-ansible-env.rc | 7 + test-requirements.txt | 2 +- .../bootstrap-host/tasks/check-requirements.yml | 12 +- .../bootstrap-host/tasks/install_packages.yml | 2 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 11 - .../bootstrap-host/tasks/prepare_data_disk.yml | 18 +- .../bootstrap-host/tasks/prepare_hostname.yml | 17 +- .../bootstrap-host/tasks/prepare_loopback_zfs.yml | 2 +- .../bootstrap-host/tasks/prepare_networking.yml | 39 +- .../templates/user_variables.aio.yml.j2 | 73 ++-- .../templates/user_variables_ceph.yml.j2 | 4 +- .../templates/user_variables_ironic.yml.j2 | 7 + .../templates/user_variables_magnum.yml.j2 | 14 +- .../templates/user_variables_manila.yml.j2 | 6 +- .../templates/user_variables_neutron_ovn.yml.j2 | 7 +- .../templates/user_variables_neutron_ovs.yml.j2 | 7 +- .../templates/user_variables_nfs.yml.j2 | 7 +- .../templates/user_variables_zun.yml.j2 | 2 + .../bootstrap-host/vars/{suse.yml => redhat-9.yml} | 18 +- tox.ini | 2 +- zuul.d/jobs.yaml | 389 ++++++++++++++----- zuul.d/playbooks/pre-gate-cleanup.yml | 13 +- zuul.d/playbooks/pre-gate-scenario.yml | 13 + zuul.d/playbooks/pre-osa-aio.yml | 10 +- .../playbooks/templates/osa-gate-scenario.yml.j2 | 3 +- zuul.d/playbooks/templates/osa-job-vars.yml.j2 | 8 + zuul.d/project-templates.yaml | 104 +++-- 239 files changed, 3194 insertions(+), 2714 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1943d1192..a146ce0ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ flake8==3.8.3 # MIT -ansible-lint==5.0.10 # MIT +ansible-lint==5.3.2 # MIT

1 0

glance-tempest-plugin 0.4.0 (zed)
by no-reply＠openstack.org 05 Jul '22

05 Jul '22

We are satisfied to announce the release of: glance-tempest-plugin 0.4.0: Tempest plugin tests for Glance. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/glance-tempest-plugin Download the package from: https://tarballs.openstack.org/glance-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance-tempest-plugin 0.3.0..0.4.0 --------------------------------------------- 6e06a9c Refactor rbac tests structure 00aa266 Implement API protection testing for metadef tags 36bda46 Implement API protection testing for metadef properties 81f8b02 Implement API protection testing for metadef resource types ac3c27c Update python testing classifier Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 + 10 files changed, 3112 insertions(+), 2144 deletions(-)

1 0

trove-dashboard 16.0.1 (wallaby)
by no-reply＠openstack.org 05 Jul '22

05 Jul '22

We are thrilled to announce the release of: trove-dashboard 16.0.1: Trove Management Dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/trove-dashboard Download the package from: https://tarballs.openstack.org/trove-dashboard/ Please report issues through: https://bugs.launchpad.net/trove-dashboard/+bugs For more details, please see below. Changes in trove-dashboard 16.0.0..16.0.1 ----------------------------------------- 3a6e79c Fix the configuration issue 5d40d07 Fix log actions a0da9cd Fix nova client initialization in multi-region cloud c3f0c85 Change the configuration group panel name 7c0cdbd Update TOX_CONSTRAINTS_FILE for stable/wallaby eebe6c2 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 4 +- trove_dashboard/api/trove.py | 78 +++++---- .../config_param_manager.py | 4 +- .../content/database_configurations/forms.py | 19 +- .../content/database_configurations/panel.py | 2 +- .../content/database_configurations/tables.py | 21 ++- .../database_configurations/detail_param.html | 2 +- 9 files changed, 105 insertions(+), 221 deletions(-)

1 0

python-manilaclient 2.6.4 (wallaby)
by no-reply＠openstack.org 04 Jul '22

04 Jul '22

We are pumped to announce the release of: python-manilaclient 2.6.4: Client library for OpenStack Manila API. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. Changes in python-manilaclient 2.6.3..2.6.4 ------------------------------------------- 7f7d7d3 Re-enable shell completion cache Diffstat (except docs and test files) ------------------------------------- manilaclient/base.py | 11 +++++++---- manilaclient/v2/shell.py | 14 ++++++++++++++ tools/manila.bash_completion | 2 +- 6 files changed, 38 insertions(+), 6 deletions(-)

1 0

python-manilaclient 3.3.1 (yoga)
by no-reply＠openstack.org 04 Jul '22

04 Jul '22

We are psyched to announce the release of: python-manilaclient 3.3.1: Client library for OpenStack Manila API. This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 3.3.1 ^^^^^ Bug Fixes * Fixed a regression with the use of the "force" keyword in the "extend" API in the Share resource. See LP #1975488 (https://launchpad.net/bugs/1975488) for more details. Changes in python-manilaclient 3.3.0..3.3.1 ------------------------------------------- c1c1133 Avoid using "force" kwarg in extend API 9f33f3a Drop lower-constraints.txt and its testing 390f89b Update TOX_CONSTRAINTS_FILE for stable/yoga dd986d7 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 90 ---------------------- manilaclient/v2/shares.py | 4 +- ...orce-kwarg-if-unspecified-f98c717df1d6e364.yaml | 6 ++ requirements.txt | 4 + tox.ini | 12 +-- zuul.d/project.yaml | 3 - 7 files changed, 16 insertions(+), 104 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3c563cf..283aab0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

cinder-tempest-plugin 1.7.0 (zed)
by no-reply＠openstack.org 01 Jul '22

01 Jul '22

We are glad to announce the release of: cinder-tempest-plugin 1.7.0: Tempest plugin tests for Cinder. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/cinder-tempest-plugin Download the package from: https://tarballs.openstack.org/cinder-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. Changes in cinder-tempest-plugin 1.6.0..1.7.0 --------------------------------------------- f6b9cf6 Add test to create multiple volume from resource 965cd72 Remove stable/victoria job and fixing job description 9d89d4e Cap cinder-tempest-plugin version for stable/ussuri|victoria 0587ca6 Set volume/build_timeout for zuul jobs 6e4b53a Increase swap size to 4GB 8515b58 Replace the CentOS Stream 8 lvm job with a CS9 one 56ace0a Modify path for APIMicroversionFixture aaf4e51 Update 'Maintained' stable branch jobs on master gate 6dc9a2f Add multiattach tests c70f27c Add Python 3 only classifier f89eb82 Add the missing placement service to the sample config 027295a Improvements in snapshot data integrity tests 758074b setup.cfg: Replace dashes with underscores 7e1a072 Remove all usage of six library Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 97 ++++++++++----- README.rst | 2 +- cinder_tempest_plugin/api/volume/base.py | 27 +++- .../api/volume/test_create_from_image.py | 58 --------- .../volume/test_multiple_volume_from_resource.py | 105 ++++++++++++++++ cinder_tempest_plugin/scenario/manager.py | 84 +++++++++---- cinder_tempest_plugin/scenario/test_snapshots.py | 58 +++------ .../scenario/test_volume_multiattach.py | 136 +++++++++++++++++++++ .../services/consistencygroups_client.py | 2 +- requirements.txt | 1 - setup.cfg | 8 +- 11 files changed, 412 insertions(+), 166 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 40ef3a4..4d75108 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ oslo.config>=5.1.0 # Apache-2.0 -six>=1.10.0 # MIT

1 0

kuryr-kubernetes 4.0.1 (wallaby)
by no-reply＠openstack.org 30 Jun '22

30 Jun '22

We are pleased to announce the release of: kuryr-kubernetes 4.0.1: Kubernetes integration with OpenStack networking This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through: https://bugs.launchpad.net/kuryr-kubernetes/+bugs For more details, please see below. Changes in kuryr-kubernetes 4.0.0..4.0.1 ---------------------------------------- 8ec71e7 Fix stable gate 0dbb151 Remove ep_slices from klb on endpoint delete event 0162d41 Add Octavia Tempest Plugin 643effc Fix NPs for OVN LBs with hairpin traffic bd63ba2 Update TOX_CONSTRAINTS_FILE for stable/wallaby b09144a Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/base.yaml | 3 +- .zuul.d/octavia.yaml | 5 + cni.Dockerfile | 25 +++-- controller.Dockerfile | 17 ++-- kuryr_kubernetes/cni/binding/base.py | 5 +- kuryr_kubernetes/cni/binding/nested.py | 3 +- kuryr_kubernetes/cni/binding/sriov.py | 4 +- kuryr_kubernetes/constants.py | 1 + .../controller/drivers/network_policy.py | 65 +++++++++++-- .../drivers/network_policy_security_groups.py | 24 +---- kuryr_kubernetes/controller/drivers/utils.py | 40 +++++++- .../controller/handlers/kuryrnetwork.py | 11 +-- .../controller/handlers/kuryrnetworkpolicy.py | 4 +- kuryr_kubernetes/controller/handlers/kuryrport.py | 11 +-- kuryr_kubernetes/controller/handlers/lbaas.py | 30 ++++++ .../unit/controller/drivers/test_network_policy.py | 43 ++++++++- .../drivers/test_network_policy_security_groups.py | 9 +- .../unit/controller/handlers/test_kuryrnetwork.py | 2 + .../unit/controller/handlers/test_kuryrport.py | 40 +------- kuryr_kubernetes/utils.py | 11 +++ tox.ini | 4 +- 25 files changed, 385 insertions(+), 117 deletions(-)

1 0