- Release-announce - lists.openstack.org

puppet-keystone 17.5.0 (victoria)
by no-reply＠openstack.org 03 May '22

03 May '22

We are jazzed to announce the release of: puppet-keystone 17.5.0: Puppet module for OpenStack Keystone This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features * Adding the following configurable items for OpenID: * "keystone::federation::openidc::openidc_pass_userinfo_as" to set "OIDCPassUserInfoAs" * "keystone::federation::openidc::openidc_pass_claim_as" to set "OIDCPassClaimsAs" * Add TLS options to oslo.cache * The "keystone::federation::ipenidc" class now supports the new "openidc_response_mode" parameter, to customize mod_auth_openidc response mode. Changes in puppet-keystone 17.4.0..17.5.0 ----------------------------------------- 0906a37 Prepare the final stable/victoria release 68d3021 Fix wrong key to look up domain parameters from puppet.conf 82f37cf OIDC: Add support for setting OIDCResponseMode 724e591 Add oidc options 9cbe5a1 Unset memcached_servers by default ca7213a TripleO: Reduce tempest test scope 441cea0 Set fixture paths for unit tests 3f55c34 Add TLS options to oslo.cache 4e801f3 Build containers for single consumer job e5c63e7 Add missing dependencies about keystone_puppet_config d70f723 Update TOX_CONSTRAINTS_FILE for stable/victoria 66e9eb9 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- lib/puppet/provider/keystone.rb | 21 ++++++----- manifests/cache.pp | 43 ++++++++++++++++++++++ manifests/deps.pp | 6 +++ manifests/federation/openidc.pp | 39 +++++++++++++++++++- metadata.json | 2 +- .../notes/add-oidc-params-0bddcca8d49ccfdb.yaml | 11 ++++++ .../notes/add_tls_options-8ed38a82af2f378f.yaml | 4 ++ .../openidc_response_mode-f5a2ddf95bd4b752.yaml | 6 +++ spec/classes/keystone_cache_spec.rb | 15 ++++++++ spec/classes/keystone_federation_openidc_spec.rb | 39 ++++++++++++++++++++ spec/spec_helper.rb | 7 +++- templates/openidc.conf.erb | 11 +++++- tox.ini | 2 +- 15 files changed, 194 insertions(+), 17 deletions(-)

1 0

puppet-aodh 17.6.0 (victoria)
by no-reply＠openstack.org 03 May '22

03 May '22

We exuberantly announce the release of: puppet-aodh 17.6.0: Puppet module for OpenStack Aodh This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 17.6.0 ^^^^^^ New Features * The new "aodh::keystone::authtoken::service_type" parameter has been added to configure the service_type parameter in authtoken middleware. Changes in puppet-aodh 17.5.0..17.6.0 ------------------------------------- 9345129 Prepare the final stable/victoria release 5041191 Add support for the keystone_authtoken/service_type parameter 0ee4280 Set fixture paths for unit tests 5fc634d Revert "Do not test authtoken parameters directly" 27d9afe Do not test authtoken parameters directly 6701ce7 Update TOX_CONSTRAINTS_FILE for stable/victoria 269333d Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/keystone/authtoken.pp | 7 +++++++ metadata.json | 2 +- .../notes/keystone-authtoken-service_type-215cca463950f7a6.yaml | 5 +++++ spec/classes/aodh_keystone_authtoken_spec.rb | 3 +++ spec/spec_helper.rb | 5 +++++ tox.ini | 2 +- 7 files changed, 23 insertions(+), 2 deletions(-)

1 0

horizon 20.1.2 (xena)
by no-reply＠openstack.org 29 Apr '22

29 Apr '22

We are psyched to announce the release of: horizon 20.1.2: OpenStack Dashboard This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 20.1.2 ^^^^^^ Bug Fixes * Previously, ToggleSuspend class checked os-rescue policy for resume operation. By this fix, the class checks 'os_compute_api:os- suspend- server:resume' policy to align to resume operation. Changes in horizon 20.1.1..20.1.2 --------------------------------- 4f4e88009 Fix for "Resize instance" button db40c8ceb Change to a proper policy for Resume operation ceb33680b Fix Project Limits for resize instance dialog Diffstat (except docs and test files) ------------------------------------- .../dashboards/project/instances/tables.py | 10 +++-- .../templates/instances/_flavors_and_quotas.html | 40 ++++++++--------- .../dashboards/project/instances/utils.py | 43 ++++++++++++++++++ .../dashboards/project/instances/views.py | 17 ++----- .../project/instances/workflows/resize_instance.py | 5 ++- ...652_fix_policy_for_resume-a719efb23054c708.yaml | 6 +++ 7 files changed, 130 insertions(+), 43 deletions(-)

1 0

oslo.policy 3.12.1 (zed)
by no-reply＠openstack.org 29 Apr '22

29 Apr '22

We are jazzed to announce the release of: oslo.policy 3.12.1: Oslo Policy library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.12.1 ^^^^^^ Bug Fixes * Fixed passing "--exclude-deprecated" boolean value to sphinx-build command. Now "--exclude-deprecated" is only passed when it is True without bool True/False value. Changes in oslo.policy 3.12.0..3.12.1 ------------------------------------- 9673a74 Only pass exclude-deprecated when True Diffstat (except docs and test files) ------------------------------------- oslo_policy/sphinxpolicygen.py | 8 +++++--- ...fix-passing-exclude-deprecated-param-317745d23022e544.yaml | 6 ++++++ 3 files changed, 15 insertions(+), 10 deletions(-)

1 0

castellan 3.10.2 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are thrilled to announce the release of: castellan 3.10.2: Generic Key Manager interface for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 3.10.1..3.10.2 ----------------------------------- d0d3735 Update TOX_CONSTRAINTS_FILE for stable/yoga d5d8c6e Update .gitreview for stable/yoga c43bc8d Replace the deprecated argument tenant Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 4 files changed, 6 insertions(+), 5 deletions(-)

1 0

oslo.limit 1.5.1 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We high-spiritedly announce the release of: oslo.limit 1.5.1: Limit enforcement library to assist with quota calculation. This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 1.5.1 ^^^^^ Bug Fixes * *bug 1962406* <https://bugs.launchpad.net/oslo.limit/+bug/1962406>`_: Fixed the wrong format of options data, which was causing failure with "oslo- config-generator" command if the "oslo.limit" entry point is included. Changes in oslo.limit 1.5.0..1.5.1 ---------------------------------- 63536c6 Add documentation for config options 594aff5 oslo-config-generator: Fix ValueError 174093d Update TOX_CONSTRAINTS_FILE for stable/yoga 260f09d Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_limit/opts.py | 6 +++--- releasenotes/notes/bug-1962406-e239d60400c726c8.yaml | 7 +++++++ tox.ini | 4 ++-- 7 files changed, 36 insertions(+), 9 deletions(-)

1 0

oslo.utils 4.12.3 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We exuberantly announce the release of: oslo.utils 4.12.3: Oslo Utility library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.12.3 ^^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.12.2..4.12.3 ------------------------------------ 2c1b062 fix strutils password regex eb0c50a Update TOX_CONSTRAINTS_FILE for stable/yoga 5e11bca Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ tox.ini | 4 ++-- 5 files changed, 22 insertions(+), 3 deletions(-)

1 0

kolla-ansible 11.4.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We enthusiastically announce the release of: kolla-ansible 11.4.0: Ansible Deployment of Kolla containers This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 11.4.0 ^^^^^^ New Features ************ * Adds a "tls_connect" module to the Prometheus blackbox exporter. This can be used to test connectivity of TLS servers. * Implements container healthchecks for ironic-neutron-agent service. See blueprint * Adds support for libvirt SASL authentication. It is enabled by default. LP#1964013 Known Issues ************ * Existing fluentd log rotation failed to delete old haproxy, swift, glance-tls-proxy and neutron-tls-proxy logs. These will not be deleted by the new logrotate config and will have to be removed manually. Upgrade Notes ************* * The addition of libvirt SASL authentication requires a new password in "passwords.yml", "libvirt_sasl_password". This may be generated using the existing "kolla-genpwd" and "kolla-mergepwd" tooling. * The addition of libvirt SASL authentication requires both the "nova_libvirt" and "nova_compute" containers to be updated simultaneously, using new images with the necessary Cyrus SASL dependencies, as well as configuration containing the SASL credentials. * update the default value of node_custom_config to {{ node_config }}/config, when specified using --configdir Security Issues *************** * Explicitly removes the "net.ipv4.ip_forward" sysctl from "/etc/sysctl.conf" on hosts with Neutron L3 Agent. In the absence of another source for this sysctl, it should revert to the default of 0 after the next reboot. This is a follow up to a previous change which stopped setting the sysctl, but leaves existing systems with the original value of 1 set. A deployer looking to more aggressively change the value may set "neutron_l3_agent_host_ipv4_ip_forward" to 0 using a Yoga release of Kolla Ansible. This option will be removed in future. Any deployments still relying on the previous value may set "neutron_l3_agent_host_ipv4_ip_forward" to 1. LP#1945453 * Fixes an issue where the default configuration of libvirt did not use authentication for the API exposed over TCP on the internal API network. This allowed anyone with access to the internal API network read-write access to libvirt. While the internal API network is typically trusted, other services on this network generally at least require authentication. SASL authentication is now enabled for libvirt by default. Kolla Ansible supports libvirt TLS since the Train release, and this is recommended to provide a higher level of security. LP#1964013 Bug Fixes ********* * Continue to run all actions if one action failed in Elasticsearch curator. LP#1954720 * Fixes Nova resize failing when "migration_interface" is customised. LP#1956976 * Fixes Glance with Cinder iSCSI backend failing due to lack of lock_path setting. LP#1959663 * Fixes logrotate config missing for openvswitch and prometheus services. LP#1961795 * Fixes an issue with Ironic's PXE components not getting updated on upgrade. LP#1963752 * Fixes configuration of the Prometheus HTTP API URL when using the Prometheus collector in CloudKitty. LP#1961615 * Fixes the baremetal role to avoid an error "Unable to remove "libvirtd". Now the symlink /etc/apparmor.d/disable/usr.sbin.libvirtd is created by the role. LP#1960302 * Existing fluentd log rotation failed to delete old haproxy, swift, glance-tls-proxy and neutron-tls-proxy logs. Standardise rotation and deletion of logs using logrotate. * adds back the option to configure the rabbitmq clustering interface via kolla *LP#1900160 <https://bugs.launchpad.net/kolla- ansible/+bug/1900160>* * Fixes an issue where the Libvirt AppArmor profile is disable and the bootstrap-servers process tries to remove it. See bug 1909874 for details. * Fixes an issue seen when using Jinja2 3.1.0. * Fixes the configuration option setting the type of endpoint used by Neutron to send requests to Placement. LP#1960503 * Fixes a configuration issue with Node Exporter causing all file system metrics of a host to be identical. LP#1961438 * Fixes an issue where RabbitMQ was configured to mirror classic transient queues for all services. According to the RabbitMQ documentation this is not a supported configuration, and contributed to numerous bug reports. In order to avoid making unexpected changes to the RabbitMQ cluster, it is necessary to set "rabbitmq_remove_ha_all_policy" to "yes" in order to apply this fix. This variable will be removed in the Yoga release. LP#1954925 * Fixes an issue with Cinder upgrade where Cinder services would remain pinned to the previous release's RPC & object versions. LP#1954932 Changes in kolla-ansible 11.3.0..11.4.0 --------------------------------------- ff40c4b46 [CI] Make kolla-build quiet 2764844ee Allow removal of classic queue mirroring for internal RabbitMQ a4e2d5a15 Use jinja2.pass_context instead of contextfilter 9b135d965 re-add rabbitmq config for clustering interface cc09abda3 designate: fix external backend deployment ef8b02f7b Ironic: rebootstrap ironic-pxe on upgrade d2b62b50c cinder: restart services after upgrade 9e3e0d112 CI: pin ansible-lint to <6 536ffc3f7 libvirt: support SASL authentication 1885df05d Explicitly unset net.ipv4.ip_forward sysctl c2fadc230 Remove grafana [session] configuration 7d2bbbad0 Add openvswitch and prometheus to logrotate c7530df58 Fix location of release note for ironic-neutron-agent healthcheck 84eaf2fb2 cloudkitty: fix URL used for Prometheus collector e4f93a60a Configure node-exporter to report correct file system metrics a759ca44f Fix fluentd v1 buffer syntax issue e8d94e01c Refactor fluentd syslog logging f0294fb5b Fix remove libvirt apparmor disabled profile 13ac92167 [CI] Check fluentd errors c37bf3e06 Fix Apparmor libvirt profile removal 535632672 CI: Fix new ansible-lint failures d5bd75180 neutron: fix placement endpoint type configuration aaa56405d Fix log rotation for fluentd created files 3cf4fe128 [CI] Replace parted with lsblk f8ae355c5 Glance: add lock_path setting d69b7008a prometheus: add tls_connect blackbox module a967556da Fix usage of Subject Alternative Name for TLS 4e3945336 update the default value of node_custom_config 7593c1153 Make nova_ssh listen on api_interface as well 149e6dd79 Use Docker healthchecks for ironic-neutron-agent services 7fefa5a54 Continue to run all actions if one action failed in curator Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 6 + ansible/group_vars/all.yml | 2 +- ansible/roles/baremetal/tasks/install.yml | 2 +- ansible/roles/baremetal/tasks/post-install.yml | 13 +- .../roles/certificates/tasks/generate-backend.yml | 2 + ansible/roles/certificates/tasks/generate.yml | 4 + .../templates/openssl-kolla-internal.cnf.j2 | 4 +- .../certificates/templates/openssl-kolla.cnf.j2 | 4 +- ansible/roles/cinder/defaults/main.yml | 9 + ansible/roles/cinder/handlers/main.yml | 20 ++ ansible/roles/cinder/tasks/reload.yml | 10 + ansible/roles/cinder/tasks/upgrade.yml | 2 + ansible/roles/cloudkitty/defaults/main.yml | 2 +- ansible/roles/common/defaults/main.yml | 24 +++ ansible/roles/common/tasks/config.yml | 5 +- .../conf/filter/00-record_transformer.conf.j2 | 27 +-- .../common/templates/conf/output/00-local.conf.j2 | 214 ++------------------- .../common/templates/conf/output/01-es.conf.j2 | 6 +- .../templates/conf/output/02-monasca.conf.j2 | 4 +- .../templates/cron-logrotate-haproxy.conf.j2 | 2 +- .../templates/cron-logrotate-openvswitch.conf.j2 | 3 + .../templates/cron-logrotate-prometheus.conf.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 27 +-- ansible/roles/designate/tasks/backend_external.yml | 2 + .../templates/elasticsearch-curator-actions.yml.j2 | 14 +- ansible/roles/glance/templates/glance-api.conf.j2 | 3 + ansible/roles/grafana/templates/grafana.ini.j2 | 8 - ansible/roles/ironic/tasks/bootstrap.yml | 19 -- ansible/roles/ironic/tasks/bootstrap_service.yml | 19 ++ ansible/roles/neutron/defaults/main.yml | 15 ++ ansible/roles/neutron/tasks/config-host.yml | 2 + ansible/roles/neutron/templates/neutron.conf.j2 | 2 +- ansible/roles/nova-cell/defaults/main.yml | 8 + ansible/roles/nova-cell/handlers/main.yml | 15 ++ ansible/roles/nova-cell/tasks/config.yml | 20 ++ ansible/roles/nova-cell/tasks/precheck.yml | 17 +- ansible/roles/nova-cell/templates/auth.conf.j2 | 6 + ansible/roles/nova-cell/templates/libvirtd.conf.j2 | 3 +- .../roles/nova-cell/templates/nova-compute.json.j2 | 8 +- .../roles/nova-cell/templates/nova-libvirt.json.j2 | 12 ++ ansible/roles/nova-cell/templates/sasl.conf.j2 | 2 + ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/prometheus/defaults/main.yml | 3 +- .../templates/prometheus-blackbox-exporter.yml.j2 | 4 + .../templates/prometheus-node-exporter.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/rabbitmq/tasks/config.yml | 18 ++ ansible/roles/rabbitmq/tasks/deploy.yml | 3 + .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 29 +++ ansible/roles/rabbitmq/tasks/upgrade.yml | 3 + .../roles/rabbitmq/templates/advanced.config.j2 | 7 + .../roles/rabbitmq/templates/definitions.json.j2 | 4 + ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 6 + etc/kolla/globals.yml | 2 +- etc/kolla/passwords.yml | 5 + kolla_ansible/filters.py | 14 +- kolla_ansible/kolla_address.py | 8 +- kolla_ansible/put_address_in_context.py | 21 +- .../blackbox-tls-connect-517cd8ebdf87f16e.yaml | 5 + .../notes/bug-1945453-2-287bfcaf060689d8.yaml | 16 ++ .../notes/bug-1954720-4fc48610a56f3e98.yaml | 6 + .../notes/bug-1956976-8a2623ca1fbfd546.yaml | 5 + .../notes/bug-1959663-afda889b9aa4c63f.yaml | 6 + .../notes/bug-1961795-16fb2ac27152fc03.yaml | 6 + .../notes/bug-1963752-ee12e15c17c24bb0.yaml | 6 + ...cloudkitty-prometheus-url-ee14bc486e810631.yaml | 6 + ...r-libvirt-profile-removal-01db6ca6dd66879f.yaml | 7 + .../fix-haproxy-logrotate-e299a0000728fd8f.yaml | 12 ++ ...q-interface-configuration-b39c954fb8763d9c.yaml | 6 + ...apparmor-disabled-profile-2cab584eec729b71.yaml | 6 + ...-for-ironic-neutron-agent-61ec4d0d237da075.yaml | 6 + .../jinja2-pass-context-2afc328ade8c407b.yaml | 4 + .../notes/libvirt-sasl-404199143610fb75.yaml | 27 +++ ...n-placement-endpoint-type-90073ba5ecc9e663.yaml | 6 + ...porter-filesystem-metrics-d3ae7b0a892d2957.yaml | 6 + ...ue-mirroring-for-rabbitmq-d54b9e7e25e57a88.yaml | 10 + .../notes/unpin-cinder-rpcs-8eb7e0858a91b9b8.yaml | 6 + ...update-node-custom-config-7b378b25ce22779f.yaml | 5 + test-requirements.txt | 2 +- 84 files changed, 613 insertions(+), 327 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cab4df184..4eb87aa46 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +2 @@ -ansible-lint>=4.2.0,!=4.3.0 # MIT +ansible-lint>=4.2.0,!=4.3.0,<6.0.0 # MIT

1 0

kolla 11.3.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are thrilled to announce the release of: kolla 11.3.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.3.0 ^^^^^^ New Features ************ * Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM- SHA-256 mechanisms. These can be used for libvirt SASL authentication. LP#1964013 * Quiet mode (enabled with "--quiet" argument) can be combined with " --logs-dir" option now. Console output will be quiet as expected while building output will be stored in separate log files. Critical Issues *************** * CentOS Linux 8 (non-Stream) support has been dropped, since repositories have been removed from CentOS mirrors - see announcement (https://www.centos.org/centos-linux-eol/) Security Issues *************** * Adds mitigation for Apache Log4j 2 Remote Code Execution (RCE) vulnerabilities CVE-2021-44228 and CVE-2021-45046 to Apache Storm. Bug Fixes ********* * Fixes an issue with Ironic deployments using UEFI and iPXE, where the default UEFI iPXE bootloader in Ironic was not available in the TFTP server. This affects all Kolla releases on CentOS, and Xena on Debian/Ubuntu. LP#1959203 * Installs "glusterfs-client" in Debian and Ubuntu "manila-share" images to support GlusterFS across supported distributions. LP#1964140 * Fixes an issue when older version of Python OpenvSwitch bindings package was used, than the running OpenvSwitch code. LP#1961874 * Fix AArch64 ubuntu ironic-python-agent images UEFI PXE booting failure. Also fix x86_64 lacking of GRUB efi files issue. LP#1879265 * Fixes disabling the use of the "curlrc" configuration file in "healthcheck_curl". LP#1967272 * Fixes an issue seen when using Jinja2 3.1.0. * Fixes an issue with missing Magnum Keystone auth default policy. LP#1957159 * Fixes set_configs.py configuring same permission for directories and files, causing directories lacking execute permission if not set for files. Changes in kolla 11.2.1..11.3.0 ------------------------------- a83002b3f enable logging to file for quiet mode 238c56f53 Fix disabling of curlrc in healthcheck_curl a7ff9f6c0 elasticsearch: install Java first on CentOS too ca4952780 libvirt: add Cyrus SASL packages for DIGEST-MD5 1ea5c73d6 Install glusterfs-client in Debuntu 61f1705bc Use python3-openvswitch from distro 9b1ff36ac Ensure set_configs sets execute bit on directories 674aede28 erlang: use packages from Erlang Solutions on AArch64 545fed783 collectd: pcie-errors is x86-64 only now 07a4e434d base: Drop usage of Ceph Nautilus from RDO 77d683caa ironic: Fix UEFI & iPXE bootloader filenames 07f519996 Drop CentOS Linux 8 image builds 02f5222b0 Use distro provided GRUB efi 56f494230 openstack-base: drop anyjson 891396f7b Mitigate two Log4j vulnerabilities in Apache Storm ca6951744 magnum: fix issue with keystone auth default policy Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 86 ---------------------- kolla/common/config.py | 12 +-- kolla/common/utils.py | 34 ++++++--- kolla/template/filters.py | 9 ++- kolla/template/methods.py | 8 +- kolla/template/repos.yaml | 2 +- .../notes/bug-1959203-1bb695e052248d78.yaml | 8 ++ .../notes/bug-1964140-57b433329bab067e.yaml | 6 ++ .../notes/centos-8-eol-4500333b5e01f448.yaml | 6 ++ .../notes/distro-python-ovs-df705d1e59f16cde.yaml | 6 ++ ...n-agent-pxe-booting-issue-95adaf9249207d5b.yaml | 6 ++ ...check-curl-disable-curlrc-0f85aad47379e2a5.yaml | 5 ++ .../jinja2-pass-context-3f3febcd944e3a51.yaml | 4 + .../notes/libvirt-sasl-07a8a1a25d2450c6.yaml | 6 ++ ...stone-auth-default-policy-e16f7bb558aa4b14.yaml | 5 ++ .../quiet-mode-with-logs-0abafc07923945ac.yaml | 6 ++ ...ectory-execute-permission-8ab919b7b17025d2.yaml | 5 ++ ...-vulnerability-mitigation-6746a8a0bb329485.yaml | 5 ++ 41 files changed, 253 insertions(+), 183 deletions(-)

1 0

kayobe 9.4.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are pleased to announce the release of: kayobe 9.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.4.0 ^^^^^ Upgrade Notes ************* * Kayobe now defaults to building CentOS Stream 8 IPA and root disk images, following the end of life of CentOS Linux 8. Bug Fixes ********* * In production environments, the provision network may be separated from the other networks, so in this case, if you want Bifrost's DHCP service provides the correct gateway for the clients the "inspection_gateway" should be used instead of the "gateway" attribute for the provision network. This also avoids configuring the multiple IP gateways on a single host which leads to unpredictable results. * Fixes IPA and root disk image builds, following the end of life of CentOS Linux 8. * Fixes an issue with idempotence of local Kolla Ansible configuration generation. * Fixes an issue with the seed's configdrive when the admin network is a VLAN. See story 2008089 for details. * Fixes Ansible inventory generation with some custom group mappings using the same group names for Kayobe and Kolla Ansible. See story 2009927 for details. * The set of commands starting with "kayobe overcloud database" now generate the kolla configuration necessary to login to the nodes running the database. * Fixes an issue with config drive generation for infrastructure and seed VMs when using untagged interfaces. The symptom of this issue is that kayobe cannot login to the instance. If you check the libvirt console log, you will see "KeyError: 'vlan_link'". See story 2009910 for details. * Fixes an issue with IPA image builds which used the "master" branch of "ironic-python-agent", even on stable releases of Kayobe, or when explicitly setting "ipa_build_source_version". * Fixes an issue where patch links could be erroneously created on hosts not in the overcloud group. See Story 2009911 for details. * Deployment image (IPA) build no longer uses master version of upper- constraints. Instead, it defaults to using the constraints for the OpenStack release associated with the version of Kayobe being used. See story 2009810 for details. Changes in kayobe 9.3.0..9.4.0 ------------------------------ 15937084 docs: Fix custom LVM example c5dc2d88 Fix variable name for stackhpc.os-networks upper constraints 19faf95e Restore forgotten linuxbridge-agent container a00892dc Fix Ansible inventory generation when reusing group names b3f6e79b CI: Avoid image downloads and builds in seed jobs f6cb821c Fix custom config idempotence 0356f7d5 Only create patch links on overcloud hosts c18fee72 Use naming convention to infer VLAN tagging 73d1a34a Build CentOS stream images 7cd08b03 CI: stop using zuul as kayobe_ansible_user in TLS jobs 7f8fd3dc Set correct gateway for the bifrost provision network c4b68fc7 Set requirements branch for IPA build 1264ac29 Revert "CI: temporary disable voting of some jobs" eb8a95e4 Use stream8 images with molecule aa10df3c CentOS Stream: update DNF repo file names abff9e6c CI: temporary disable voting of some jobs 3104fe97 ipa: Use openstack_branch instead of master 091d191b Fix seed VM configdrive when admin network is a VLAN bd3b16d2 Generate kolla config when running database commands Diffstat (except docs and test files) ------------------------------------- ansible/filter_plugins/networks.py | 8 ++ ansible/group_vars/all/bifrost | 2 +- ansible/group_vars/all/ipa | 15 ++-- ansible/group_vars/all/kolla | 2 +- ansible/kolla-bifrost.yml | 2 +- ansible/network.yml | 1 + ansible/provision-net.yml | 2 +- ansible/roles/dnf/tasks/local-mirror.yml | 13 +++- .../dnf/templates/CentOS-Stream-AppStream.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-Extras.repo.j2 | 17 +++++ .../kolla-ansible/templates/overcloud-top-level.j2 | 2 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/molecule.yml | 4 +- ansible/roles/kolla-openstack/tasks/config.yml | 1 - dev/functions | 11 +++ .../reference/ironic-python-agent.rst | 10 ++- etc/kayobe/ipa.yml | 5 +- kayobe/cli/commands.py | 8 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 2 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 - .../kayobe-seed-base/bifrost-overrides.yml.j2 | 6 +- playbooks/kayobe-seed-base/overrides.yml.j2 | 12 --- .../bifrost-overrides.yml.j2 | 6 +- ...ifrost-inspection-gateway-316ab384430ef8df.yaml | 9 +++ .../build-centos8s-images-509f04d8d68cb357.yaml | 9 +++ .../notes/config-idemoptence-37846db82ecd9f43.yaml | 4 + .../notes/configdrive-vlans-4e8b6ed07b229233.yaml | 6 ++ ...lla-ansible-group-mapping-8fcd6cbb1e744e18.yaml | 6 ++ ...ckup-with-no-kolla-config-4f857915adabad41.yaml | 6 ++ .../fixes-keyerror-vlan-link-c177cf719e070df6.yaml | 8 ++ .../notes/ipa-branch-b29c377c531013a8.yaml | 6 ++ .../patch-links-on-overcloud-e24dbc858d3399cc.yaml | 6 ++ ...ents-branch-for-ipa-build-c3ca977ec21b58f4.yaml | 8 ++ requirements.yml | 2 +- zuul.d/jobs.yaml | 4 +- zuul.d/project.yaml | 2 - 40 files changed, 278 insertions(+), 61 deletions(-)

1 0