- Release-announce - lists.openstack.org

kayobe 16.3.0 (caracal)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are gleeful to announce the release of: kayobe 16.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 16.3.0 ^^^^^^ New Features ************ * Adds the internal VIP to the NOPROXY/noproxy environment variables. * Adds support for using Cumulus switches (NCLU and NVUE) with Networking Generic Switch. Upgrade Notes ************* * Bumps the "stackhpc.linux" collection to 1.3.0. Note this version uses systemd to activate virtual functions. This change is restricted to the "stackhpc.linux.sriov" role, which is not used by Kayobe. If a custom playbook uses this role, you can retain existing behaviour by setting "sriov_numvfs_driver" to "udev". Security Issues *************** * When running API requests from a host configured with kayobe, traffic destined for the internal VIP is sent via the default proxy. This can be a security issue if not using TLS as the proxy will be able to intercept the traffic. If using an untrusted proxy, with TLS disabled on the internal VIP, it is recommended that you run "kayobe overcloud host configure -t proxy", "kayobe seed hypervisor host configure -t proxy", "kayobe seed host configure -t proxy", and "kayobe infra vm host configure -t proxy", to add the internal VIP to the no proxy configuration. This is considered a minor issue as traffic between containers will not use the proxy by default. LP#2087556 Bug Fixes ********* * Fixes IPA and host image build failures when Git was not installed on the build host. LP#2058922 * The "proxysql" image is now built when "kolla_enable_proxysql" is set to "true". * Updates the group and mode set on the "/var/log/journal" directory to match default ownership and permissions used by "systemd- journald". LP#2083494 * Fixes generation of kernel parameters when the GRUB_CMDLINE_LINUX_DEFAULT variable is absent from "/etc/default/grub". LP#2083874. * Pin requirements for IPA image build to ensure that the "ironic- lib" version matches "ironic-python-agent". LP#2089263 <https://bugs.launchpad.net/kayobe/+bug/2089263>`__ * Changes the default cloud image for seed and infra VMs to use Rocky Linux 9.3 when using "bios" boot mode, to fix boot failures with newer cloud images. When deploying new VMs, it is recommended to set "infra_vm_boot_firmware" and "seed_vm_boot_firmware" to "efi". * Fixes an issue when using overcloud Ironic with a shared Ansible control host. The use of a shared cache directory could lead to a failure to download Ironic Python Agent (IPA) images. LP#2069845 Changes in kayobe 16.2.0..16.3.0 -------------------------------- 1ed7724d CI: use quay.io/podman/hello due too dockerhub rate limits b5719257 Ensure ironic-python-agent matches ironic-lib 4e07e042 Add internal VIP address to no_proxy f6992fdd CI: Replace deprecated distro.linux_distribution 3c1ff0c3 CI: Fix Ubuntu 24.04 version check 77c1ad12 Add support for building the proxysql image dec71144 CI: Skip test_ntp_clock_synchronized on Ubuntu 24.04 bd47742c Fix group and mode of /var/log/journal b3c03627 Bump stackhpc.openstack collection to 0.2.2 27845067 Bump stackhpc.linux to v1.3.0 6720a227 Adds support for using Cumulus switches with NGS d888e881 CI: rework RabbitMQ handling in upgrades c0cf61db Remove duplicate description of filename key 324da76e Avoid shared IPA image cache on Ansible control host 5274c4e6 Use Rocky Linux 9.3 images unless in efi boot mode Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 14 +++++--- ansible/inventory/group_vars/all/ipa | 1 + ansible/inventory/group_vars/all/kolla | 3 ++ ansible/inventory/group_vars/all/proxy | 1 + ansible/inventory/group_vars/all/seed-vm | 12 +++++-- ansible/kolla-openstack.yml | 40 ++++------------------ ansible/logging.yml | 4 +-- ansible/roles/image-download/defaults/main.yml | 4 +++ ansible/roles/image-download/tasks/main.yml | 40 ++++++++++++++-------- ansible/roles/kolla-openstack/defaults/main.yml | 5 +++ ansible/roles/kolla-openstack/tasks/config.yml | 1 + dev/functions | 24 ------------- .../reference/ironic-python-agent.rst | 17 +++++---- etc/kayobe/apt.yml | 2 -- etc/kayobe/infra-vms.yml | 10 +++--- etc/kayobe/proxy.yml | 5 +-- etc/kayobe/seed-vm.yml | 8 +++-- playbooks/kayobe-overcloud-upgrade-base/run.yml | 20 +++++++++++ ...-internal-vip-to-no-proxy-cbb4db4ea3909185.yaml | 17 +++++++++ .../notes/bug-2058922-c16426f013ddf3ca.yaml | 5 +++ .../build-proxysql-image-ec09332ef0b7dae0.yaml | 5 +++ ...bump-stackhpc-linux-1.3.0-892bc5ae7574508b.yaml | 9 +++++ .../cumulus-support-ngs-c4a6e6f3d45f5783.yaml | 5 +++ ...ar-log-journal-group-mode-3e7c4c822d050c8f.yaml | 6 ++++ ...rub-cmdline-linux-default-f4079def0b1357e7.yaml | 6 ++++ .../pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++++ ...l9-vm-image-bios-firmware-b025ac853f68a91b.yaml | 7 ++++ .../remove-local-ipa-cache-1fe125360f5d3385.yaml | 7 ++++ requirements.yml | 4 +-- 30 files changed, 199 insertions(+), 106 deletions(-)

1 0

kolla 17.6.0 (bobcat)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We are jazzed to announce the release of: kolla 17.6.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.6.0 ^^^^^^ Upgrade Notes ************* * "Erlang" RPMs on "aarch64" architecture are now installed from a new location - OpenStack Kolla's COPR (https://copr.fedorainfracloud.org/coprs/g/openstack-kolla/rabbitmq- erlang/) compared to Hrw's COPR (https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/) * RabbitMQ and Erlang packages are now all installed from the Cloudsmith "rabbitmq.com" mirrors since the RabbitMQ "packagecloud.io" is getting shut down August 18st, 2024: https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates #packagecloud-will-be-discontinued-on-aug-18th-2024 Bug Fixes ********* * Fixes the inconsistency issue between config.json and real state in the container. LP#2060855 * Fixes incompatibility between "ansible.posix" 1.6.0 and "ansible- core" versions below 2.15 by capping "ansible.posix" to 1.5.x. LP#2080609 * Fixes missing tpm user for nova-compute and nova-libvirt containers by adding tpm2-tools package to Ubuntu/Debian nova containers. LP#2067050 * Fixed ironic-conductor missing packages genisoimage and syslinux/isolinux. Changes in kolla 17.5.0..17.6.0 ------------------------------- 96bf08833 CI: Use debian/ubuntu images from quay mirror b3b7db854 Fix handling configs in base image 5a2189c4e Fix missing tss user in Ubuntu/Debian nova containers fda0d0c3c aarch64: Exclude syslinux from ironic conductor packages c913df4be aarch64: fix name of rabbitmq copr repo 56e773e5c erlang/aarch64: Move to openstack-kolla owned COPR 10291ab3e Revert "Pin OpenSearch Dashboards to 2.15" 7b1fc549f Add missing iso packages to ironic-conductor daa559448 Fix cinder-backup: add missing sysfsutils,lsscsi package 73051ccde rabbitmq: Switch to Cloudsmith mirrors c1cbbd0b2 Cap ansible.posix below 1.6.0 9dc0371b5 Pin OpenSearch Dashboards to 2.15 Diffstat (except docs and test files) ------------------------------------- kolla/template/repos.yaml | 12 +- .../notes/bug-2060855-77516da722d04761.yaml | 6 + .../notes/bug-2080609-51f216ad1ba47d20.yaml | 6 + releasenotes/notes/copr-move-5d0464c50dc85ccf.yaml | 6 + .../notes/fix_nova_tpm_user-98f56190196a00d2.yaml | 6 + .../notes/ironic-packages-009b388b10fab6f0.yaml | 4 + ...migrate-from-packagecloud-59d7e9e0a10e1da0.yaml | 7 + 22 files changed, 713 insertions(+), 37 deletions(-)

1 0

openstack-ansible 30.0.0 (dalmatian)
by no-reply＠openstack.org 05 Dec '24

05 Dec '24

We exuberantly announce the release of: openstack-ansible 30.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 30.0.0 ^^^^^^ Prelude ******* Behavior of "rabbitmq_upgrade" variable has changed. It no longer can be used to reset the cluster state. It now acts solely as a flag to perform a rolling-upgrade of the existing cluster. New Features ************ * Added a variable "rabbitmq_erlang_package_version" that can be used to define an erlang version being used when "external_repo" is used as package source. * The neutron firewall-as-a-servie dashboard will be automatically deployed if the FWaaS service is enabled. FWaaS is now an active deliverable again fron the Neutron project. * RabbitMQ version is upgraded to a new major version 4.0 Upgrade Notes ************* * uWSGI has been re-enabled by default for Neutron one more time. With that new services are introduced which should ensure adequate functionality of Neutron when uWSGI is being used. * "neutron-periodic-workers" service is enabled for all drivers when WSGI is being used. It runs along with previously existing "neutron-rpc-server" * "neutron-ovn-maintenance-worker" service is added only if *ml2.ovn* is being used as "neutron_plugin_type". The service will be enabled and running only when WSGI is used for Neutron "neutron_use_uwsgi" is set to *True* * If you are using Ubuntu 22.04 Jammy Jellyfish and "install_method: distro" please make sure to disable "neutron_use_uwsgi" as required binaries for this mode to work are missing from packages for this distro. * Please, make sure you are running RabbitMQ version of 3.13 before proceeding with the upgrade. In case you RabbitMQ version is lower then 3.13 upgrade to 4.0 will fail. You can run upgrade to 3.13 with same version of role by supplying variable "rabbitmq_package_version" during runtime, for example: "openstack- ansible openstack.osa.rabbitmq_server -e rabbitmq_upgrade=true -e rabbitmq_package_version=3.13.7-1" and then re-running upgrade normally to 4.0. Deprecation Notes ***************** * Following deprecated variables were removed and have no effect: * *cinder_service_v2_name* * *cinder_service_v2_port* * *cinder_service_v2_proto* * *cinder_service_v2_type* * *cinder_service_v2_description* * *cinder_service_v2_publicuri* * *cinder_service_v2_publicurl* * *cinder_service_v2_adminuri* * *cinder_service_v2_adminurl* * *cinder_service_v2_internaluri* * *cinder_service_v2_internalurl* * Following variables were deprecated and removed in favor of their analogues * *cinder_service_description* -> *cinder_service_v3_description* * *cinder_service_publicuri_proto* -> *cinder_service_v3_publicuri_proto* * *cinder_service_adminuri_proto* -> *cinder_service_v3_adminuri_proto* * *cinder_service_internaluri_proto* -> *cinder_service_v3_internaluri_proto* * *cinder_service_type* -> *cinder_service_v3_type* * *cinder_service_publicuri* -> *cinder_service_v3_publicurl* * *cinder_service_adminuri* -> *cinder_service_v3_adminurl* * *cinder_service_internaluri* -> *cinder_service_v3_internalurl* * *cinder_service_v3_port* -> *cinder_service_port* * *cinder_service_v3_proto* -> *cinder_service_proto* * Variable "rabbitmq_erlang_version_spec" has been deprecated and does not have any effect anymore. Please, use "rabbitmq_erlang_package_version" instead. * Variable "haproxy_tls_vip_binds" has been renamed to "haproxy_vip_binds" to better reflect variable purpose. Old variable name is still respected but it's usage is descouraged and old naming will be removed in the future. Bug Fixes ********* * The format of kernel and ramdisk images for Ironic is now raw in order to conform to upstream expectations. See https://bugs.launchpad.net/ironic/+bug/2074090 * Issues with uWSGI mode for Neutron has been addressed and uWSGI be used for the service. Other Notes *********** * Supplying "rabbitmq_upgrade=true" no longer re-initialize cluster and will perform regular rolling upgrade of the RabbitMQ cluster. Changes in openstack-ansible 29.0.0.0rc1..30.0.0 ------------------------------------------------ 7c3639cf0 [doc] Doc index page to contain only release-specific data d51c8dbed Switch plugins repo to 2024.2 branch 37aadd383 Update TOX_CONSTRAINTS_FILE for stable/2024.2 94b78b37a Update .gitreview for stable/2024.2 1abf903e4 Produce 2024.2 RC1 for OpenStack-Ansible 17eccd5c8 Add fwaas to neutron source_git file ef192b73d Add neutron fwaas and vpnaas git and zuul repo definitions 44ad51c2b Update step-ca version ea01c7e60 Retire murano/senlin/sahara 1a6da4268 Switch Ubuntu distro jobs to 24.04 3486f2dbf Move healthcheck playbooks to the collection 742d933dc Replace usage of mirrorlist with an official Rocky mirror 73fdd751f [doc] Document requirement for RabbitMQ upgrade 8964d4319 Fix encoded url bypass edae05a8a Add variables to control HSTS records 7603b5314 Deny access to any paths including /. for console proxies. 87cf8b64c Use mariadb-admin instead of mysqladmin fb7de5866 Remove usage of mariadb.com infra mirror 59a149ba4 Move all ancilliary zuul jobs to ubuntu noble ce98ae273 Remove HA queues defenition 71dd03dd8 Unfreeze roles after milestone release 80e6a1a44 Reference keepalived scripts through integrated repo path 4115c6ac2 [reno] Add a release note for haproxy_limit_hosts key implementation aecaefa15 Freeze roles for 30.0.0.0b1 release 0461ec98c Add autocomplete script for playbooks a18973964 Ensure that the inventory tox job runs on an ubuntu-jammy node 3c9465d19 Bump ansible version to 2.17.5 700e59186 Fix upgrade job on master to upgrade from 2024.1 to master 71bc8edf8 Update docs for playbooks collectification 394c840dc Move OpenStack playbooks to collection e1e1b861b Bump SHAs and pinned versions 08a722730 Add Ceph test for Rocky Linux 367fe8eb8 Convert Skyline HAProxy httpcheck 59ec4725d Increase MPM thread limits for Apache d70218855 Use node FQDN for nova-restore-compute-id e16d741a7 Add global release note for Apache MPM alignment ce0c26bd8 Use mariadb client instead of mysql for healthcheck 09d805bc2 Use hosts setup playbooks from openstack-ansible-plugins repo ff7b294b9 Use infrastructure playbooks from openstack-ansible-plugins repo 50f16d1e1 Remove ceph-server common tasks 1b470d16c [doc] Add support for Ubuntu 24.04 to docs 1c5e45648 Test on Ubuntu Noble 62d53b971 Add Ubuntu Noble to the list of supported LXC operating systems a9a8718b7 Verify OS for containers installation e175b4aa6 Use haproxy_install playbook from openstack-ansible-plugins repo af8adb377 Remove extra slash character from horizon haproxy healthcheck url. a0714bf9a Simplify handling of 'telemetry' scenario in CI tests e1964865e Do not install Skyline with os-infra_hosts 120c942fd Enchance reference_group logic for inventory 055e69eef [doc] Add documentation on spawning HAProxy inside LXC e97192fc3 Bump SHAs for master f55df9f33 Use the 'generated' apparmor profile for all containers ad73fda3b Permit Ubuntu Noble for deploy host and targets in requirements checks b30628cd4 Remove the get_md5 parameter from ansible stat tasks fc558a06f Use unbound_clients role from plugins collection efbea346b Delete glusterd data along with container data 0053e7c38 Properly apply `always` tag to install_defaults 8147225bd Rename Container Network to Management cdcb7240f [doc] Fix Typo 099ac08a9 Skip repo verification for distro install c5fbcbfbb Rename haproxy_hosts to load_balancer_hosts 0877eaf8a Skip importing haproxy_service_config with no haproxy hosts dec6ed220 Properly apply `always` tag to haproxy_endpoint_manage 6f32d3562 Update ssh service name for modern debian based systems. 64fb3b0b9 Improve regex matching for infra_lxc_validate job fec9108ed Update repo server service user ae0450b26 Remove incorrect ' releasenotes' directory 9eea5ec38 reno: Update master for unmaintained/zed 827a7e340 Use haproxy_endpoint_manage role from osa collection rather than common-tasks eccd6c50e Remove dynamic-grouping common task file 4c40bcb9d Remove remove_container_journal common task file 792f1c6a4 Use openstack.osa.install_defaults role instead of vars_files 18cb6d1ea Bump ansible collection versions d21b0fbbc Collect letsencrypt logs 87a051e24 Collect step-ca logs 47c57267e Use UCA mirror in CI for ubuntu 120d6be99 Switch to ceph-ansible stable-8.0 9a37e1fd0 Use gather_extra_facts role from plugins collection 5bb361685 [doc] Add Code Review policies to contributor documentation d8097f08c [doc] Update role maturity matrix a1eca36d9 Update SHAs for master 4d1ce1b31 Use dynamic_address_fact role from plugins collection df8f3af39 Remove os-log-dir-setup common playbook fbc66e909 Add nfs server exports file to log collection 348f776bd Remove use of deprecated ANSIBLE_COLLECTIONS_PATHS 736d43270 Update pip/wheel/setuptools/uwsgi versions to latest 808301144 Update ansible to 2.17.1 a9ec85685 [doc] Override pdf filename for the deploy guide c8c33b211 Collect iscsid config for CI jobs a769a7356 Grammar and OS corrections a6c488c82 Revert "Enable oslomsg_rabbit_queue_manager by default" 6254dff44 Ensure link to PDF appears for deploy guide 7808a2c0b Drop support for Debian 11 (bullseye) 73cdcc65b Switch services SHAs to track master 4e6c09fbe Start 2024.2 (Dalmatian) development 31e2e91a3 Update master for stable/2024.1 1285a5ab9 [doc] Remove empty pages around ToC in PDF 30b43800c [doc] Properly promote deploy guide Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 16 +- ansible-role-requirements.yml | 320 ++++++------- deploy-guide/source/conf.py | 6 +- deploy-guide/source/deploymenthost.rst | 2 +- deploy-guide/source/index.rst | 6 +- deploy-guide/source/overview-requirements.rst | 7 +- deploy-guide/source/run-playbooks.rst | 26 +- deploy-guide/source/targethosts-prepare.rst | 2 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 4 +- .../admin/upgrades/distribution-upgrades.rst | 34 +- .../admin/upgrades/os-compatibility-matrix.html | 32 +- .../inventory/understanding-inventory.rst | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.aio | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.example | 2 +- etc/openstack_deploy/openstack_user_config.yml.aio | 2 +- .../openstack_user_config.yml.example | 8 +- .../openstack_user_config.yml.multibond.example | 2 +- .../openstack_user_config.yml.pod.example | 2 +- .../openstack_user_config.yml.prod-ceph.example | 2 +- .../openstack_user_config.yml.prod.example | 2 +- ...openstack_user_config.yml.provnet-group.example | 2 +- .../openstack_user_config.yml.singlebond.example | 2 +- .../openstack_user_config.yml.test.example | 2 +- global-requirement-pins.txt | 8 +- inventory/env.d/haproxy.yml | 7 + inventory/env.d/skyline.yml | 1 - inventory/group_vars/adjutant_all/source_git.yml | 6 +- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/all/infra.yml | 8 +- inventory/group_vars/all/oslo-messaging.yml | 3 + inventory/group_vars/all/source_git.yml | 6 +- inventory/group_vars/all_containers.yml | 5 - inventory/group_vars/aodh_all/source_git.yml | 6 +- inventory/group_vars/barbican_all/source_git.yml | 6 +- inventory/group_vars/blazar_all/source_git.yml | 10 +- inventory/group_vars/ceilometer_all/source_git.yml | 6 +- inventory/group_vars/ceph-rgw.yml | 3 +- inventory/group_vars/ceph_all.yml | 30 ++ inventory/group_vars/cinder_all/source_git.yml | 6 +- inventory/group_vars/cloudkitty_all/source_git.yml | 6 +- inventory/group_vars/designate_all/source_git.yml | 6 +- inventory/group_vars/glance_all/source_git.yml | 6 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/haproxy/haproxy.yml | 17 +- inventory/group_vars/haproxy/keepalived.yml | 6 +- inventory/group_vars/heat_all/source_git.yml | 6 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 62 +-- inventory/group_vars/ironic_all/source_git.yml | 10 +- inventory/group_vars/keystone_all/source_git.yml | 6 +- inventory/group_vars/magnum_all/source_git.yml | 6 +- inventory/group_vars/manila_all/source_git.yml | 6 +- inventory/group_vars/masakari_all/source_git.yml | 10 +- inventory/group_vars/mistral_all/source_git.yml | 10 +- inventory/group_vars/neutron_all/source_git.yml | 40 +- inventory/group_vars/nova_all/haproxy_service.yml | 6 + inventory/group_vars/nova_all/source_git.yml | 8 +- inventory/group_vars/octavia_all/source_git.yml | 10 +- inventory/group_vars/placement_all/source_git.yml | 6 +- .../group_vars/skyline_all/haproxy_service.yml | 4 +- inventory/group_vars/skyline_all/source_git.yml | 8 +- inventory/group_vars/swift_all/source_git.yml | 6 +- inventory/group_vars/tacker_all/source_git.yml | 6 +- inventory/group_vars/trove_all/source_git.yml | 6 +- inventory/group_vars/utility_all/source_git.yml | 44 +- inventory/group_vars/zun_all/source_git.yml | 14 +- osa_toolkit/generate.py | 18 +- playbooks/ceph-install.yml | 217 +-------- playbooks/ceph-nfs-install.yml | 53 +-- .../gather-hardware-facts.yml => ceph-pools.yml} | 8 +- playbooks/ceph-rgw-install.yml | 82 +--- playbooks/ceph-rgw-keystone-setup.yml | 97 +--- playbooks/certificate-authority.yml | 17 +- playbooks/certificate-generate.yml | 20 +- playbooks/certificate-ssh-authority.yml | 18 +- playbooks/common-playbooks/cinder.yml | 122 ----- playbooks/common-playbooks/neutron.yml | 95 ---- playbooks/common-tasks/ceph-server.yml | 49 -- playbooks/common-tasks/dynamic-address-fact.yml | 38 -- playbooks/common-tasks/dynamic-grouping.yml | 24 - playbooks/common-tasks/haproxy-endpoint-manage.yml | 31 -- playbooks/common-tasks/os-log-dir-setup.yml | 44 -- .../common-tasks/remove_container_journal.yml | 23 - playbooks/common-tasks/unbound-clients.yml | 65 --- playbooks/containers-deploy.yml | 6 +- playbooks/containers-lxc-create.yml | 64 +-- playbooks/containers-lxc-destroy.yml | 76 +-- playbooks/containers-lxc-host.yml | 45 +- playbooks/defaults/distro_install.yml | 37 -- playbooks/defaults/source_install.yml | 38 -- playbooks/galera-install.yml | 68 +-- playbooks/haproxy-install.yml | 53 +-- playbooks/healthcheck-hosts.yml | 115 +---- playbooks/healthcheck-infrastructure.yml | 395 +--------------- playbooks/healthcheck-openstack.yml | 516 +-------------------- playbooks/memcached-install.yml | 30 +- playbooks/openstack-hosts-setup.yml | 59 +-- playbooks/openstack-resources.yml | 13 +- playbooks/os-adjutant-install.yml | 67 +-- playbooks/os-aodh-install.yml | 72 +-- playbooks/os-barbican-install.yml | 71 +-- playbooks/os-blazar-install.yml | 75 +-- playbooks/os-ceilometer-install.yml | 33 +- playbooks/os-cinder-install.yml | 53 +-- playbooks/os-cloudkitty-install.yml | 68 +-- playbooks/os-designate-install.yml | 71 +-- playbooks/os-glance-install.yml | 87 +--- playbooks/os-gnocchi-install.yml | 75 +-- playbooks/os-heat-install.yml | 74 +-- playbooks/os-horizon-install.yml | 73 +-- playbooks/os-ironic-install.yml | 74 +-- playbooks/os-keystone-install.yml | 186 +------- playbooks/os-magnum-install.yml | 72 +-- playbooks/os-manila-install.yml | 92 +--- playbooks/os-masakari-install.yml | 103 +--- playbooks/os-mistral-install.yml | 75 +-- playbooks/os-neutron-install.yml | 58 +-- playbooks/os-nova-install.yml | 236 +--------- playbooks/os-octavia-install.yml | 74 +-- playbooks/os-placement-install.yml | 74 +-- playbooks/os-rally-install.yml | 26 +- playbooks/os-skyline-install.yml | 45 +- playbooks/os-swift-install.yml | 56 +-- playbooks/os-swift-sync.yml | 13 +- playbooks/os-tacker-install.yml | 63 +-- playbooks/os-tempest-install.yml | 31 +- playbooks/os-trove-install.yml | 71 +-- playbooks/os-zun-install.yml | 90 +--- playbooks/qdrouterd-install.yml | 3 +- playbooks/rabbitmq-install.yml | 95 +--- playbooks/repo-install.yml | 68 +-- playbooks/security-hardening.yml | 32 +- playbooks/setup-hosts.yml | 27 +- playbooks/setup-infrastructure.yml | 47 +- playbooks/setup-openstack.yml | 99 +--- playbooks/unbound-install.yml | 39 +- playbooks/utility-install.yml | 161 +------ playbooks/zookeeper-install.yml | 32 +- ...urity-group-rules-support-99470d209ffa97c4.yaml | 5 + .../add-magnum-integration-a7a21c4feae9cbeb.yaml | 6 + .../align_ceph_repo_vars-222f6af6a7d349a2.yaml | 18 + .../notes/amphora_bfv_quota-8adc0a3c886921ba.yaml | 17 + .../apache_mpm_alignment-41063895f0f9c024.yaml | 11 + .../bash_autocompletion-f44059352827c3a6.yaml | 10 + .../notes/ceph-ansible-8-3923428844537c1b.yaml | 19 + ...r_v2_endpoint_deprecation-869f74090121154e.yaml | 31 ++ ...cloudkitty_storage_config-48e154cc2b549238.yaml | 5 + .../notes/custom_ssh_config-46c443e077b3386b.yaml | 7 + ...ble_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 + .../drop_debian_bullseye-c93d0e7e52170780.yaml | 4 + .../erlang_version_spec-ee21ffe0a1d34576.yaml | 12 + .../federated_domain_names-4e169b8b9a947940.yaml | 13 + .../notes/fwaas-dashboard-4bc47b7c284dad68.yaml | 6 + .../notes/ha_queues_removed-4e4d3fe5ed74a242.yaml | 16 + ...aproxy_hosts_envd_renamed-56edb1aa3f56539b.yaml | 16 + .../haproxy_limit_hosts-0f529297c9748eb7.yaml | 20 + ...tbeat_in_pthread_to_false-4bde8fca9a332805.yaml | 8 + .../notes/horizon_apache_mpm-2a34436635f1bef9.yaml | 8 + ...zon_extend_local_settings-9e062b515de94b24.yaml | 7 + ...rnel-ramdisk-image-format-3edd5c7479ebd32a.yaml | 7 + ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 + .../l3_agent_extensions_var-79150960642ce551.yaml | 5 + ...akari_service_type_rename-4a86255372f8a3b5.yaml | 5 + .../notes/neutron_default_az-51715b4d836b5802.yaml | 8 + .../neutron_uwsgi_re-enabled-d75d0362aaf32278.yaml | 24 + .../octavia-dhcp-disable-d575d932a1959652.yaml | 6 + ...tavia_ssh_keypair_options-a6f9cfeb51bdfefa.yaml | 16 + .../playbooks_to_collections-c252770d24be9bb7.yaml | 26 ++ .../quorum_queues_default-2f633cd0d5ee2037.yaml | 5 +- .../notes/rabbitmq_4-0d92471180caa8ea.yaml | 16 + .../rabbitmq_repo_deb822-b47ef07ff462193f.yaml | 16 + ...rabbitmq_upgrade_refactor-4dfd860f76610a28.yaml | 9 + .../rename_haproxy_vip_binds-dda8197aaf607b53.yaml | 7 + .../replace_nginx_apache-f62e453f44acf790.yaml | 8 + .../return_amphora_provider-05deae1d173dbb1f.yaml | 5 + .../skyline_not_infra_hosts-58190dad1c43ed9a.yaml | 11 + .../switch-to-rabbitmq-ppa-671004eb2092aa3b.yaml | 12 + .../ubuntu_noble_support-d4d741bdfdf1d4ef.yaml | 4 + ...r_policy_location_gnocchi-6cc4bb4018456c39.yaml | 6 + ...env_build_facts_gathering-9a85f72324d6e7e0.yaml | 6 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- scripts/bash-completion | 93 ++++ scripts/bootstrap-ansible.sh | 14 +- scripts/gate-check-commit.sh | 16 +- scripts/log-collect.sh | 4 + scripts/openstack-ansible.rc | 1 - scripts/rabbitmq-test.py | 47 -- scripts/run-upgrade.sh | 4 +- .../galera-cluster-rolling-restart.yml | 2 +- .../upgrade-utilities/nova-restore-compute-id.yml | 3 +- .../bootstrap-host/tasks/check-requirements.yml | 8 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 8 +- .../templates/user_variables.aio.yml.j2 | 17 +- .../templates/user_variables_ceph.yml.j2 | 2 +- tox.ini | 2 +- zuul.d/jobs.yaml | 299 ++++++------ zuul.d/playbooks/post.yml | 1 - zuul.d/playbooks/pre-gate-cleanup.yml | 26 ++ zuul.d/playbooks/pre-gate-scenario.yml | 10 +- zuul.d/project-templates.yaml | 93 ++-- 219 files changed, 1893 insertions(+), 6222 deletions(-)

1 0

oslo.utils 8.0.0 (epoxy)
by no-reply＠openstack.org 04 Dec '24

04 Dec '24

We are overjoyed to announce the release of: oslo.utils 8.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 8.0.0 ^^^^^ New Features ************ * The following utility functions have been added to the "oslo_utils.secretutils" module. These can be used to replace the built-in "crypt" module which was removed in Python 3.13. * "crypt_password" * "crypt_mksalt" Upgrade Notes ************* * The "netutils.is_valid_ipv4" method now enables the strict check by default. To preserve the previous behavior, set the "strict" argument to "False". Changes in oslo.utils 7.4.0..8.0.0 ---------------------------------- 1c9b9e9 Adjust the version in descriptions 11c29a3 Add a release note about the new crypt utilities 8b84a85 Fix get_my_ipv4 in absence of IPv4 8f0d9e7 Fix get_my_ipv6 in absence of IPv6 bc432f7 Add utility to replace crypt.mksalt 901916f reno: Update master for unmaintained/2023.1 6ef3f1e Add utility to replace crypt.crypt 85e998e is_valid_ipv4: Enable strict check by default 4762cc4 Add note about requirements lower bounds Diffstat (except docs and test files) ------------------------------------- bindep.txt | 4 ++ oslo_utils/netutils.py | 80 ++++++++++------------ oslo_utils/secretutils.py | 47 +++++++++++++ .../notes/crypt-utils-de46bd8fe835dc98.yaml | 9 +++ .../is_valid_ipv4-strict-3da92c0452aaf947.yaml | 6 ++ releasenotes/source/2023.1.rst | 2 +- requirements.txt | 4 ++ 9 files changed, 142 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5c0c83f..76dd580 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

openstack-ansible 27.6.1 (antelope)
by no-reply＠openstack.org 03 Dec '24

03 Dec '24

We are delighted to announce the release of: openstack-ansible 27.6.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.6.1 ^^^^^^ Known Issues ************ * Due to the underlying bug (https://bugs.launchpad.net/ansible- collections-openstack/+bug/2065680) in Ansible collections for OpenStack, "Default" domain name can be renamed to "default" under certain conditions. One known example is having "domain: default" defenition under "keystone_sp -> trusted_idp_list -> federated_identities" structure. Upgrade Notes ************* * Please, make sure that in case of federation usage you define domain name instead of it's ID (ie. "Default" instead of "default") under "keystone_sp -> trusted_idp_list -> federated_identities" Changes in openstack-ansible 27.6.0..27.6.1 ------------------------------------------- f7d2fa693 Bump SHAs to 2023.1 cbf5302b3 Deny access to any paths including /. for console proxies. Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 12 ++++---- inventory/group_vars/adjutant_all/source_git.yml | 4 +-- inventory/group_vars/all/source_git.yml | 4 +-- inventory/group_vars/blazar_all/source_git.yml | 8 +++--- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +-- inventory/group_vars/designate_all/source_git.yml | 4 +-- inventory/group_vars/horizon_all/source_git.yml | 32 +++++++++++----------- inventory/group_vars/ironic_all/source_git.yml | 4 +-- inventory/group_vars/magnum_all/source_git.yml | 2 +- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 28 +++++++++---------- inventory/group_vars/nova_all/haproxy_service.yml | 6 ++++ inventory/group_vars/nova_all/source_git.yml | 8 +++--- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/placement_all/source_git.yml | 2 +- inventory/group_vars/swift_all/source_git.yml | 4 +-- inventory/group_vars/tacker_all/source_git.yml | 2 +- inventory/group_vars/trove_all/source_git.yml | 4 +-- inventory/group_vars/zun_all/source_git.yml | 4 +-- .../federated_domain_names-4e169b8b9a947940.yaml | 13 +++++++++ 21 files changed, 88 insertions(+), 69 deletions(-)

1 0

ovsdbapp 2.9.0 (epoxy)
by no-reply＠openstack.org 03 Dec '24

03 Dec '24

We are excited to announce the release of: ovsdbapp 2.9.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.8.0..2.9.0 -------------------------------- e2d8d39 [NB] Add "if_exists" flag to ACL and Port_Group deletion commands 5d3b827 reno: Update master for unmaintained/2023.1 d603441 Remove unused bindep tools 4647c3f Update master for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 - ovsdbapp/schema/ovn_northbound/api.py | 11 +++++- ovsdbapp/schema/ovn_northbound/commands.py | 18 +++++---- ovsdbapp/schema/ovn_northbound/impl_idl.py | 10 +++-- .../schema/ovn_northbound/test_impl_idl.py | 43 ++++++++++++++++++++++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 +++ releasenotes/source/index.rst | 1 + 8 files changed, 76 insertions(+), 17 deletions(-)

1 0

telemetry-tempest-plugin 2.4.0 (epoxy)
by no-reply＠openstack.org 28 Nov '24

28 Nov '24

We are overjoyed to announce the release of: telemetry-tempest-plugin 2.4.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/telemetry-tempest-plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. 2.4.0 ^^^^^ New Features ************ * Added ability to use metadata instance grouping when testing prometheus based autoscaling. This method of instance grouping is supported since 2025.1 and it's the default option. The "autoscaling_instance_grouping" configuration option has been added, which switches the grouping method between "metadata" grouping and "instance" grouping. Upgrade Notes ************* * Support for Python 3.8 has been dropped. Latest release of telemetry-tempest-plugin to support python 3.8 is 2.3.0. The minimum version of Python now supported is Python 3.9. Changes in telemetry-tempest-plugin 2.3.0..2.4.0 ------------------------------------------------ 17f775e Replace assertDictContainsSubset 087a83e Bump hacking ad14d02 Metadata grouping releasenote 753a8b8 Use metadata server grouping as default cf276b4 Gnocchi: Use specific stable branch for stable branch jobs 54a8b88 Remove stable/2023.1 job from master gate b711487 Remove support for Pyton 3.8 and older 024f29e Disable prometheus tests in stable branches 6a00d7c Re-enable GLOBAL_VENV 9afbb82 Drop unnecessary 'x' bit from doc config file e12816c Add stable branch jobs d2330bf Apply consistent irrelevant files for dsvm jobs afe631a Use server_group in Prom autoscaling scenario 7da415b Drop remaining options for panko 4ec1f85 Parametrize autoscaling instance load length Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 147 +++++++++++++++++++-- .../drop-python38-support-59b0b2f406651efb.yaml | 6 + ...or-prometheus-autoscaling-763c98141a940531.yaml | 7 + setup.cfg | 10 +- .../aodh/api/admin/test_alarming_api_admin.py | 4 +- .../aodh/api/gnocchi/test_alarming_api.py | 24 ++-- .../aodh/api/test_alarming_api.py | 14 +- telemetry_tempest_plugin/config.py | 33 +++-- telemetry_tempest_plugin/plugin.py | 13 +- .../autoscaling.yaml | 16 --- .../create_stack.json | 6 +- .../test_telemetry_integration_prometheus.py | 25 ++++ tox.ini | 2 +- 14 files changed, 223 insertions(+), 84 deletions(-)

1 0

keystoneauth 5.9.1 (epoxy)
by no-reply＠openstack.org 26 Nov '24

26 Nov '24

We are tickled pink to announce the release of: keystoneauth 5.9.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.9.0..5.9.1 ------------------------------------ ffc6b5e Allow passing None for username in v2.Password (redux) Diffstat (except docs and test files) ------------------------------------- keystoneauth1/identity/v2.py | 31 ++++++++++++++++++++++++++----- 1 file changed, 26 insertions(+), 5 deletions(-)

1 0

ironic 27.0.0 (epoxy)
by no-reply＠openstack.org 25 Nov '24

25 Nov '24

We are pleased to announce the release of: ironic 27.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 27.0.0 ^^^^^^ New Features ************ * A new module, "ironic.wsgi" has been enabled as an entrypoint for WSGI runners. For example, if using uWSGI then now instead of: [uwsgi] wsgi-file = /bin/ironic-api-wsgi You can now use: [uwsgi] module = ironic.wsgi:application Legacy installed wsgi scripts will be removed in a future version of Ironic. Upgrade Notes ************* * Because of the code reorganization, some metrics have been removed: all metrics prefixed with "AgentDeployMixin" are now prefixed with "CustomAgentDeploy" or "AgentDeploy" instead. * Deployers using PostgreSQL must migrate to a supported mysql- compatible database, such as MySQL or MariaDB. * Support for Python 3.8 has been removed. Now the minimum python version supported is 3.9 . Deprecation Notes ***************** * Use of postgresql has been deprecated for all OpenStack projects, including ironic, for several years. However, in an effort to avoid breaking existing installs, we had tested database migrations and performed a basic functionality test against PostgreSQL. This test has now been removed, and operators deployed on PostgreSQL must migrate to a MySQL-compatible database, such as MySQL or MariaDB, before upgrade. Security Issues *************** * An issue in Ironic has been resolved where image checksums would not be checked prior to the conversion of an image to a "raw" format image from another image format. With default settings, this normally would not take place, however the "image_download_source" option, which is available to be set at a "node" level for a single deployment, by default for that baremetal node in all cases, or via the "[agent]image_download_source" configuration option when set to "local". By default, this setting is "http". This was in concert with the "[DEFAULT]force_raw_images" when set to "True", which caused Ironic to download and convert the file. In a fully integrated context of Ironic's use in a larger OpenStack deployment, where images are coming from the Glance image service, the previous pattern was not problematic. The overall issue was introduced as a result of the capability to supply, cache, and convert a disk image provided as a URL by an authenticated user. Ironic will now validate the user supplied checksum prior to image conversion on the conductor. This can be disabled using the "[conductor]disable_file_checksum" configuration option. Bug Fixes ********* * The set of strings used to detect cipher suite version related errors in the "ipmitool" command was expanded. If the string "Error in open session response message : invalid role" is contained in the output of a failed "ipmitool" command execution, such error will be now considered as related to inappropriate ciphers too, and will be retried with another cipher suite version if Ironic is configured to do so. See bug 2085137 (https://launchpad.net/bugs/2085137) for more details. * Fixes the policy scope checking for the RBAC Policy "baremetal:node:disable_cleaning", which previously restricted to "system" user scope. The scope restriction has been revised to permit "project" scoped matching, but the default RBAC policy has not been revised. * Fixes a security issue where Ironic would fail to checksum disk image files it downloads when Ironic had been requested to download and convert the image to a raw image format. This required the "image_download_source" to be explicitly set to "local", which is not the default. This fix can be disabled by setting "[conductor]disable_file_checksum" to "True", however this option will be removed in new major Ironic releases. As a result of this, parity has been introduced to align Ironic to Ironic-Python-Agent's support for checksums used by "standalone" users of Ironic. This includes support for remote checksum files to be supplied by URL, in order to prevent breaking existing users which may have inadvertently been leveraging the prior code path. This support can be disabled by setting "[conductor]disable_support_for_checksum_files" to "True". * Fixes newly added policy rules, "baremetal:node:set_provision_state:clean_steps" and "baremetal:node:set_provision_state:service_steps``which impacted ``project scoped" users utilizing the "2024.2" release of Ironic where they were attempting to invoke "service" or "clean" provision state commands. This was due to a misunderstanding of the correct policy checker to invoke, and additional testing has been added around these functions to ensure they work as expected moving forward. * Fix issue on SQLite database usage. Previously ironic node provisioning may fail with error related accessing the hostname. For more details please see bug 2086682 (https://bugs.launchpad.net/ironic/+bug/2086682) * Fixes aborting in-band inspection. Previously, it would fail with "Can not transition from state 'inspect failed' on event 'abort'". * The configuration option "[inspector]power_off" is now actually ignored for nodes with fast track enabled, as documented in its help. * Fixes the built-in in-band inspection implementation to power off the node after aborting inspection on user's request, unless the node is in the fast track mode or "[inspector]power_off" is set to "False". * Adds a timeout to the "service wait" state. Previously, a node stuck in this state would remain in it forever. The timeout value can be adjusted via the new option "[conductor]service_callback_timeout". * Add support for passing either a node's name or UUID through the 'node_ident' parameter during port creation. The 'node_uuid' parameter is now deprecated. Other Notes *********** * The "AgentDeployMixin" class has been removed from "agent_base.py". Third-party deploy interfaces that inherit it most probably want to inherit "ironic.drivers.modules.agent.CustomAgentDeploy" instead. If you rely on the "prepare_instance_to_boot" or "configure_local_boot" helper methods, inherit from "AgentDeploy" instead. Changes in ironic 26.1.0..27.0.0 -------------------------------- f41504a41 Use quay.io registry image for metal3 job 360e21124 Use specific fix-commit from dnsmasq e2fce4c0d Fix genconfig: remove now-gone ironic_lib modules c43022c75 Disable deep image inspection for kernel/initramfs bf644e827 Fix policy checks added with runbooks e3953b845 trivial: remove libpq from bindep file 80c83d82f Refactoring: simplify tear_down_agent 91b7a4621 Inspection: account for disable_power_off 466cd3902 Remove postgresql testing and documentation e7fc5c93a Add support for Ubuntu 24.04 8de2b4950 update doc and drop deprecated plugin cde358bda Remove default override for config options policy_file 5cf5f6f27 bump some pre-commit hooks and remove default cfg 27bd04925 Use linux instead of linuxefi in grub config 2cb56f8b9 add qemu-img to necessary dependency list 6af6d10ab Instance provisioning fails on SQLite 4f40ddef2 Actually ignore [inspector]power_off with fast track 6008d31f2 add pyproject.toml to support pip 23.1 166e31794 Check for AMD virtualization support ffecec3c5 trivial: Fix policy scope restriction for automated cleaning 8466ba7c2 Added missing fields in API Ref 80c8b9f3f Migrate lint to pre-commit f6191f296 Fix lint issues with documentation 045249f60 Remove trailing whitespace 95ae183dc Correct duplicated names/entries in unit tests a72aad535 Make all API samples valid JSON 3db454f0e Enable WSGI module entrypoint for Ironic fde2cd608 CI: Change 4k block device job to use LVM 6bbfa45e1 Remove Python 3.8 support 48b2d856a docs: adds link to oslo_messaging_notifications documentation da002a341 Add support for node name in port creation 80540bb52 Expand detected strings in check_cipher_suite_errors c09525dd8 Gracefully handle bad request exception 823a7c93b Added Localdev Docs on changing microversion 7b807eff7 Enable GLOBAL_VENV in ironic grenade jobs 599fb4b64 Redfish power: account for disable_power_off ae4d5b5c4 docs: Updates redfish metrics docs with required configuration file settings 05ccd2c32 devstack: Remove IRONIC_USE_WSGI fd9e8b945 devstack: Remove IRONIC_USE_MOD_WSGI 5f58cbf22 Continue disable the GLOBAL_VENV in grenade job ac31720ac docs: Add context around asynchronous device initialization 1f5798bce Use oslo.utils implementation to parse server address 00c5e0faf Checksum files before raw conversion 90f9fa3eb Fix actual size calculation for storage fallback logic 0d7fd7391 CI: Add a 4k disk CI job 083ea91ab Imported Translations from Zanata f92258e76 Reject explicit requests to power off nodes with disable_power_off b1e38a45c Add disable_power_off field to the node model aac5fa28e Imported Translations from Zanata 46f1962ea Drop logic for pysnmp < 5 6f1c603b5 CI: Enable the ability to have test VMs with different block sizes 1a0de7247 Add timeout to SERVICEWAIT 82b67aa36 Firmware Update via Firmware Interface Docs adfb09169 Fix inspect interface for redfish driver in the docs 8a6b5eb8c Fix double transition to INSPECTFAIL on aborting in-band inspection 4724eb9d6 Refactoring: get rid of AgentDeployMixin c2ed9296f Imported Translations from Zanata c53ed0715 Fix typo in parameter description fd2572f46 Update master for stable/2024.2 533e1ad60 doc: Promote built-in introspection from experimental 7e85b3ed4 doc/source/admin fixes part-1 341ddfe75 Move the benchmark job to the experimental pipeline 9810fa996 [doc] Add instructions on making big fake-BM nodes dcf155d9c devstack - enable v6 addr list if q-dhcp enabled Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 55 +- api-ref/source/baremetal-api-v1-nodes.inc | 8 + api-ref/source/baremetal-api-v1-ports.inc | 8 +- api-ref/source/parameters.yaml | 15 + .../source/samples/node-bios-detail-response.json | 12 +- .../samples/node-bios-list-details-response.json | 12 +- .../samples/node-indicators-list-response.json | 12 +- api-ref/source/samples/port-create-request.json | 2 +- api-ref/source/samples/shards-list-response.json | 2 +- bindep.txt | 8 +- devstack/files/bindep.txt | 10 +- devstack/files/ci-block-device-for-lvm.yaml | 73 ++ devstack/lib/ironic | 181 ++-- devstack/tools/ironic/scripts/configure-vm.py | 3 + devstack/tools/ironic/scripts/create-node.sh | 8 +- devstack/tools/ironic/templates/vm.xml | 1 + devstack/upgrade/upgrade.sh | 2 +- ironic/api/controllers/v1/node.py | 35 +- ironic/api/controllers/v1/port.py | 19 +- ironic/api/controllers/v1/portgroup.py | 2 + ironic/api/controllers/v1/utils.py | 5 + ironic/api/controllers/v1/versions.py | 4 +- ironic/common/checksum_utils.py | 258 ++++++ ironic/common/exception.py | 22 + ironic/common/grub_conf.template | 4 +- ironic/common/image_service.py | 37 + ironic/common/images.py | 9 +- ironic/common/policy.py | 11 +- ironic/common/pxe_utils.py | 18 +- ironic/common/release_mappings.py | 4 +- ironic/conductor/inspection.py | 5 +- ironic/conductor/manager.py | 25 +- ironic/conductor/utils.py | 7 +- ironic/conf/conductor.py | 29 + ironic/conf/inspector.py | 2 +- .../6e9cf6acce0b_node_disable_power_off.py | 31 + ironic/db/sqlalchemy/api.py | 2 +- ironic/db/sqlalchemy/models.py | 2 + ironic/drivers/modules/agent.py | 318 ++++++- ironic/drivers/modules/agent_base.py | 304 ------- ironic/drivers/modules/deploy_utils.py | 70 +- ironic/drivers/modules/image_cache.py | 60 +- ironic/drivers/modules/inspector/agent.py | 36 +- ironic/drivers/modules/inspector/interface.py | 65 +- ironic/drivers/modules/ipmitool.py | 8 +- ironic/drivers/modules/irmc/boot.py | 10 +- ironic/drivers/modules/pxe_grub_config.template | 14 +- ironic/drivers/modules/redfish/power.py | 18 +- ironic/drivers/modules/snmp.py | 34 +- ironic/objects/node.py | 35 +- .../unit/drivers/modules/inspector/test_agent.py | 127 ++- .../drivers/modules/inspector/test_interface.py | 249 +++--- .../unit/drivers/modules/redfish/test_power.py | 75 +- .../unit/drivers/modules/test_deploy_utils.py | 241 +++++- ironic/wsgi/__init__.py | 23 + playbooks/metal3-ci/run.yaml | 1 + pyproject.toml | 6 + .../add-wsgi-entrypoints-79f8f3cf3b7a663f.yaml | 18 + .../notes/agent-deploy-cacaf7f2585992e8.yaml | 14 + ...ion-ipmitools-cipher-fail-1503b4e319e77ed8.yaml | 11 + ...striction-automated-clean-2f9f82058b5bad87.yaml | 8 + ...hecksum-before-conversion-66d273b94fa2ba4d.yaml | 44 + ...provision-state-subpolicy-13ae3ef7497d20c1.yaml | 12 + .../notes/fix-sqlite-lock-61232cfe81adbde4.yaml | 7 + .../notes/inspect-abort-8add5e6e6b599357.yaml | 5 + .../notes/inspect-off-099e3c73edaf6082.yaml | 9 + .../notes/postgres-removal-88f8b02dbfc3303c.yaml | 13 + .../notes/remove-py38-bc14b5425f440359.yaml | 5 + .../servicewait-timeout-6ab4aca87cf76cc2.yaml | 6 + ...ode-name-in-port-creation-66f994e3d46a7e6c.yaml | 6 + releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/liberty.rst | 6 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 247 +++++- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ++++ requirements.txt | 4 +- setup.cfg | 6 +- setup.py | 2 +- test-requirements.txt | 1 - tools/bandit.yml | 1 + tools/config/ironic-config-generator.conf | 3 - tools/test-setup.sh | 50 -- tox.ini | 108 +-- zuul.d/ironic-jobs.yaml | 93 +- zuul.d/metal3-jobs.yaml | 3 + zuul.d/project.yaml | 15 +- 152 files changed, 4768 insertions(+), 2160 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 25f9d4c49..70f616200 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=3.1.1 # Apache-2.0 +pbr>=6.0.0 # Apache-2.0 @@ -22 +22 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=4.4.0 # Apache-2.0 +oslo.policy>=4.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 772496f8f..52e337a59 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ stestr>=2.0.0 # Apache-2.0 -psycopg2>=2.8.5 # LGPL/ZPL

1 0

ironic-python-agent 10.0.0 (epoxy)
by no-reply＠openstack.org 25 Nov '24

25 Nov '24

We are thrilled to announce the release of: ironic-python-agent 10.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * When synchronizing the disk caches at the end of a deployment, the agent now also instructs the kernel to drop the virtual memory caches and tells each block devices to sync its internal cache. * Adds a new API command "system.lockdown". When invoked, it stops the API, the heartbeater and tries to disable all local network interfaces. More actions may be added in the future to make the agent and the ramdisk unusable after this command. * "logical_sectors" and "physical_sectors" sizes are now captured for each hardware info "disks" entry, and also logged for "lsblk" calls. This will be increasingly useful as storage devices with 4096 byte sector sizes become more common. Upgrade Notes ************* * Support for Python 3.8 has been removed. Now the minimum python version supported is 3.9 . Deprecation Notes ***************** * Ironic Python Agent has had limited capabilities to emit metrics, but was unable to support prometheus exporting of those metrics, as was possible for the conductor. Support for sending these metrics will be removed during or after the 2026.1 OpenStack release cycle. Changes in ironic-python-agent 9.14.0..10.0.0 --------------------------------------------- aa98250 Add a command to lock down the agent 5aa0c1a A hardware manager call for a full sync before shutdown 75abdb4 Vendor metrics library from Ironic-Lib & deprecate 9de74b6 Correct invalid docstrings; s/Found/Error/ 8e0fa1b Migrate more trivial code from ironic-lib 70aa08d Remove use of ironic_lib i18n module c3e7f3b Cleanup usage of imported-from-ironic-lib disk_utils b0ef2c0 Remove Python 3.8 support 1a93910 Capture and log sector sizes a81fd06 CI: Remove metalsmith legacy jobs d8d32d9 Warn when the provided checksum algorithm does not match the detected 4553b5c Migrate to oslo.utils-based format_inspector 57476cd add pyproject.toml to support pip 23.1 2e4936c tox: Drop envdir 42ea1db Drop dependency on netifaces 2bf694e Get rid of pkg_resources e4d07fd Update master for stable/2024.2 d7b2dcf Trivial: fix variable in formatting def085d agent: make _find_routable_addr work with IPv4- and IPv6-only setups Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/agent.py | 35 +- ironic_python_agent/api/app.py | 2 +- ironic_python_agent/config.py | 11 +- ironic_python_agent/disk_partitioner.py | 6 +- ironic_python_agent/disk_utils.py | 130 +-- ironic_python_agent/extensions/standby.py | 65 +- ironic_python_agent/extensions/system.py | 29 + ironic_python_agent/format_inspector.py | 1044 -------------------- ironic_python_agent/hardware.py | 51 +- .../hardware_managers/nvidia/nvidia_fw_update.py | 49 +- ironic_python_agent/inject_files.py | 6 +- ironic_python_agent/ironic_api_client.py | 2 +- ironic_python_agent/metrics_lib/metrics.py | 306 ++++++ .../metrics_lib/metrics_collector.py | 119 +++ .../metrics_lib/metrics_exception.py | 34 + ironic_python_agent/metrics_lib/metrics_statsd.py | 104 ++ ironic_python_agent/metrics_lib/metrics_utils.py | 102 ++ ironic_python_agent/netutils.py | 28 +- ironic_python_agent/partition_utils.py | 9 +- ironic_python_agent/qemu_img.py | 7 +- .../unit/metrics_lib/test_metrics_collector.py | 68 ++ ironic_python_agent/utils.py | 69 +- pyproject.toml | 3 + ...recate-and-vendor-metrics-1df0ca4c865613f8.yaml | 6 + releasenotes/notes/full-sync-d2ec6b248a73f04a.yaml | 6 + releasenotes/notes/lockdown-dc656fd26f13321f.yaml | 7 + .../notes/remove-py38-15fc164a4a08b764.yaml | 5 + .../notes/sector_size-b2c0a07086012c17.yaml | 7 + releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 5 +- setup.cfg | 5 +- setup.py | 2 +- tox.ini | 3 - zuul.d/ironic-python-agent-jobs.yaml | 13 - zuul.d/project.yaml | 5 - 51 files changed, 2227 insertions(+), 2205 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e7481c3..e8d1b82 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=2.0.0 # Apache-2.0 +pbr>=6.0.0 # Apache-2.0 @@ -3 +2,0 @@ eventlet>=0.18.2 # MIT -netifaces>=0.10.4 # MIT @@ -8 +7 @@ oslo.service>=1.24.0 # Apache-2.0 -oslo.utils>=3.34.0 # Apache-2.0 +oslo.utils>=7.3.0 # Apache-2.0

1 0