- Release-announce - lists.openstack.org

kolla 11.2.0 (victoria)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are amped to announce the release of: kolla 11.2.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.2.0 ^^^^^^ New Features ************ * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.* also on Debian. LP#1930867 [Debian] * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Other Notes *********** * CentOS images are now buildable using CentOS 8 Stream as a base. Changes in kolla 11.1.0..11.2.0 ------------------------------- d034341d5 Ensure nvme-cli is present in nova-compute images 2774e59ca nova-compute: trim image a bit on CentOS 0bc8f2a33 Add Swift lock path in Swift containers 49a5b7e55 cinder-volume/ubuntu: add lsscsi and nvme 8c9bcb0e7 [debian] Use upstream MariaDB 16b501fa8 Pin td-agent to 4.0.* also on Debian d2e8ebe7f [CI] Fix periodic publish of centos8 images d483339f3 [doc] Fix Ceph sources 01f0dae4c Unify curl options 3978b25cf monasca-thresh: Allow topology check and removal in storm 47ec54f77 CentOS Stream: update kolla-ansible Zuul jobs 2877c2c40 Add support for CentOS 8 Stream 865e3f1bb Improve offline build scenario. 1aba4e72a Add boto3 as s3 dependency for Glance container Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 12 +++ .zuul.d/centos.yaml | 111 +++++++++++++++++++++ .../monasca/monasca-thresh/topology_bootstrap.sh | 90 +++++++++++++++++ .../prometheus-alertmanager/Dockerfile.j2 | 2 +- .../prometheus-blackbox-exporter/Dockerfile.j2 | 2 +- .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 2 +- .../Dockerfile.j2 | 2 +- .../prometheus-haproxy-exporter/Dockerfile.j2 | 2 +- .../prometheus-memcached-exporter/Dockerfile.j2 | 2 +- .../prometheus-mysqld-exporter/Dockerfile.j2 | 2 +- .../prometheus-node-exporter/Dockerfile.j2 | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/template/repos.yaml | 2 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 + .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++ .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 5 + .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 ++ .../fix-lock-swift-path-9b743367e4014f92.yaml | 5 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 + .../notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 + 48 files changed, 384 insertions(+), 57 deletions(-)

1 0

kayobe 11.0.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are psyched to announce the release of: kayobe 11.0.1: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 11.0.1 ^^^^^^ Bug Fixes * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. Changes in kayobe 11.0.0..11.0.1 -------------------------------- 846e9c92 docs: Improve all-in-one scenario 94e345e4 Document seed_enable_snat fde9b65c CI: Use correct TD agent repository version b01173b1 Fix installation prefix detection 8e6a66bf CI: always return host configure test results Diffstat (except docs and test files) ------------------------------------- .../configuration/scenarios/all-in-one/index.rst | 83 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 156 +++++++++++++++++---- kayobe/utils.py | 9 +- .../overrides.yml.j2 | 2 +- .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + 8 files changed, 233 insertions(+), 61 deletions(-)

1 0

kayobe 10.1.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are jazzed to announce the release of: kayobe 10.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Adds support for configuring apt's proxy setting for Ubuntu hosts. See story 2009035 (https://storyboard.openstack.org/#!/story/2009035) for details. * Adds a new "kolla_bifrost_use_firewalld" variable used to define whether Bifrost uses firewalld, which is now disabled by default. * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Bifrost is now configured to avoid using firewalld, to prevent conflicts with firewall rules set by Kayobe on the seed host. The existing behaviour can be retained by setting "kolla_bifrost_use_firewalld" to "True" in "bifrost.yml". Bug Fixes ********* * Prevents Bifrost from using firewalld to avoid conflicts with firewall rules set by Kayobe on the seed host. See story 2009252 for more details. * Sets proxy option when using "dnf" during user bootstrapping, before "dnf.conf" is updated. This allows Kayobe to install Python 3 during host configuration when "dnf" requires a proxy to operate. * Fixes an issue bug where introspection data save would fail. See story 2009129 for more details. * Fixes an issue with configuration validation when no public API network is in use. See story 2009134 for details. * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. * Fixes an issue with systemd-networkd MTU mismatch in veth pair on Ubuntu. See story 2009072 for details. Changes in kayobe 10.0.1..10.1.0 -------------------------------- 45875477 docs: Improve all-in-one scenario bf7ef2ae Fix installation prefix detection 4a76d800 CI: always return host configure test results fb86cd16 CI: enable DNF tests on CentOS Stream 8 e0133df2 Set proxy option in early dnf invocation a5c2a24a Remove stale config dump from seed hypervisor host configure 27712155 CI: Disable heat in upgrade jobs to save disk space c24fcca8 Add the missing documentation for mariadb recovery adb52541 Prevent Bifrost from using firewalld 7fbc1a3e Fix IPA builder version typo 929ae0ab Fix wrong filename in bifrost docs 2164c6b2 Add support for apt proxy setting 0854692a CI: Fix bashate ignores 367c6bc0 Make setup module arguments configurable fc638e4e CI: Disable libvirt debug logs b6cc4c52 Add missing quotes to Docker registry TLS example 00ca1ecf CI: Log disk usage details 39381ad3 Sync documentation with kolla_openstack_custom_config 6e480612 Fix typo in IP allocation filename 0233ddb1 Use ansible_facts to reference facts a2e980d1 CI: Fix get_logs.sh docker logs output 6b6485a6 Allow passing arguments to dev/environment-setup.sh a906d26f Fix overcloud introspection data save ac094088 Fix configuration check without public API network bf470af5 docs: fix heading styles in upgrading page fb56c037 Fix documentation links for routed control plane networks 39fbb063 Add twentyFiveGigE to port descriptions in inspector rules e14231c8 dnf: add metalink argument to custom dnf repository 27ccf48f Sync Kolla Ansible feature flags af6495fa Ubuntu: Set MTU for veth in the network files 9ca07b85 Use stream8 images with molecule 69d2b648 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/apt.yml | 12 ++ ansible/compute-node-discovery.yml | 4 +- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/apt | 6 + ansible/group_vars/all/bifrost | 4 + ansible/group_vars/all/globals | 11 ++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/idrac-bootstrap.yml | 4 +- ansible/kayobe-ansible-user.yml | 6 +- ansible/kayobe-target-venv.yml | 22 +-- ansible/kolla-ansible.yml | 4 +- ansible/kolla-target-venv.yml | 12 +- ansible/network.yml | 2 +- ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/public-openrc.yml | 2 +- ansible/roles/apt/defaults/main.yml | 12 ++ ansible/roles/apt/tasks/main.yml | 17 +++ ansible/roles/apt/templates/01proxy.j2 | 8 + ansible/roles/bootstrap/tasks/main.yml | 8 +- ansible/roles/dev-tools/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 6 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 4 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 16 +- .../roles/kolla-ansible/templates/globals.yml.j2 | 4 + ansible/roles/kolla-ansible/vars/main.yml | 1 - .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 + .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/molecule.yml | 4 +- .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 18 +-- ansible/roles/network-redhat/tasks/main.yml | 2 + ansible/roles/ntp/tasks/prepare.yml | 4 +- ansible/roles/pip/tasks/pip_conf.yml | 4 +- ansible/roles/snat/tasks/main.yml | 4 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/roles/swift-block-devices/tasks/main.yml | 4 +- ansible/roles/veth/tasks/main.yml | 2 +- ansible/roles/wipe-disks/tasks/main.yml | 4 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +- ansible/snat.yml | 4 +- ansible/time.yml | 2 +- dev/environment-setup.sh | 7 +- dev/functions | 2 +- dev/tenks-deploy-config-compute.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 4 +- .../reference/routed-control-plane-networks.rst | 8 +- .../configuration/scenarios/all-in-one/index.rst | 83 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 162 +++++++++++++++++---- etc/kayobe/apt.yml | 6 + etc/kayobe/bifrost.yml | 6 +- etc/kayobe/globals.yml | 11 ++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 1 - kayobe/ansible.py | 1 + kayobe/cli/commands.py | 32 ++-- kayobe/plugins/filter/networkd.py | 14 +- kayobe/utils.py | 9 +- playbooks/kayobe-base/pre.yml | 14 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + .../add-apt-proxy-support-f688702868095ed0.yaml | 6 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++ .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + ...ix-precheck-no-public-net-c0db9168063b6203.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++ .../notes/story-2009072-57e5d079e182e763.yaml | 6 + .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + requirements.yml | 30 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + tools/run-bashate.sh | 2 +- 107 files changed, 835 insertions(+), 262 deletions(-)

1 0

kolla-ansible 12.3.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are pumped to announce the release of: kolla-ansible 12.3.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.3.0 ^^^^^^ New Features ************ * Adds a new variable, "disable_firewall", which defaults to "true". If set to "false", then the host firewall will not be disabled during "kolla-ansible bootstrap-servers". * Implements container healthchecks for keystone-fernet container. See blueprint * Implements container healthchecks for memcached services. See blueprint * Implements container healthchecks for nova-spicehtml5proxy service. See blueprint * Adds two new arguments to the "kolla-ansible" command, "--check" and "--diff". They are passed through directly to "ansible- playbook". * Adds "manila_cephfs_filesystem_name" variable to support multi-fs Ceph Pacific+ deloyments. Upgrade Notes ************* * To fix LP#1941940, "nova_libvirt_dimensions" now by default combines with "nova_libvirt_default_dimensions". Please consider this when customising that variable. Security Issues *************** * Fixes "net.ipv4.ip_forward" not to be enabled by Kolla Ansible on the default network namespace. It was enabled on hosts with Neutron L3 Agent (thus in most common setups with OVS and/or Linux Bridge, but not OVN) and allowed, unless users had extra iptables rules to avoid that, any traffic to be accepted for forwarding (as long as it was routable and passed other checks). Users of existing setups are advised to re-evaluate whether they need this sysctl enabled and disable if not necessary. Kolla Ansible will simply no longer try to set this sysctl at all. Neutron L3 Agent handles forwarding enablement per managed namespace. LP#1945453 * Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE) Vulnerability in Elasticsearch - CVE-2021-44228. Bug Fixes ********* * Fixed broken "kolla-toolbox" container when RabbitMQ is disabled and IPv6 is used. LP#1939883 * Fixes inability to attach devices (e.g., volumes via iSCSI/FC) to instances on Debian Bullseye. LP#1941940 * Fixes "mariadb-clustercheck" not to run when there is no HAProxy. LP#1944114 * No longer creates directories for haproxy and swift logs where they are not needed. LP#1945070 * Fixes an issue with multinode MariaDB deployments which could fail the playbook execution on WSREP check due to the new behaviour of Galera 4. LP#1947485. * Fixes an issue on Debian with single node MariaDB deployments with HAProxy disabled. See bug 1947534 for details. * Fixes the generation of "wsrep_cluster_address" in "galera.cnf" when "--limit" is used while deploying MariaDB nodes. LP#1947589 * Fixes an error in placement role which prevents to deploy the placement service when custom policy file is used. LP#1948835 * Fixes missing current Ansible version in the error message. LP#1948979 * Fix octavia role doesn't set the amphora network's gateway_ip LP#1949260 * Only run "configure ovn in ovsdb" task on ovn-controller hosts The task will fail on hosts (like controller nodes) without tunnel interface LP#1953367 * Fixes an issue where the Nova API logs were written to files ending with *-wsgi.log* which affected the processing of these logs in the Fluentd pipeline. LP#1950185 * On slower nodes, the initial grafana startup could experience a timeout failure when the migrations for setting up the database took longer than expected. This has been fixed by increasing the default timeout. The timeout settings can be changed via new parameters "grafana_start_first_node_delay" and "grafana_start_first_node_retries" for the "grafana" role. LP#1769962 * Removes "fix_cephfs_owner.yaml" which related to pre-wallaby Manila's use of subfolders. Post-wallaby Manila now uses cephfs volumes instead, as such this file is no longer required. LP#1938285 LP#1935784 * Removes use of "cephfs_enable_snapshots" in Manila config as this option was removed from Manila in the Wallaby release. Changes in kolla-ansible 12.2.0..12.3.0 --------------------------------------- 3a212faef Added upgrade note for separate nova and cinder keys. 4af71d367 [docs] Mark init-runonce properly b30b42c63 ovn: configure ovn in ovsdb only on ovn-controller hosts f35e44aaf [Security] Add log4j vulnerability mitigation in Elasticsearch d7ebe7c24 Bump timeout for grafana startup 331167403 docs: Manila CephFS Driver in Wallaby upgrade note 69810fd42 Fix monasca-thresh upgrade a4c46d86f docs: stop installing kolla in quickstart a1e7fa276 CI: Test minimum and maximum supported ansible versions bf7f20932 Specify log file name for Nova API 4e07d6cb7 Replace auth_uri with www_authenticate_uri b6f28ee2e docs: Install openstack-client with upper constraints 35d8edca0 Remove unexpected } c3c8448b7 haproxy: remove unused tls check condition in config 9a9b609a6 docs: Get release name dynamically e6827412c docs: Parameterize kolla-ansible version and branch edb88e6c3 Stop creating unused cron/logrotate directory c6a04b0f2 docs: Fix python-openstackclient package name and init-runonce path 951a25fac Fix octavia doesn't set subnet gateway_ip c6b27b2a8 mariadb: use add_host to include inactive hosts in shard grouping cea9a84cf Fix broken deploy of placement service 295e86f08 Fix missing Ansible version in the error message 1a1fb8643 mariadb: Do not use wsrep-notify.sh on Debian a61d4e721 docs: Improve info about neutron external interface 94627f1c8 Update Manila deploy steps for Wallaby 8109217a7 [mariadb] Start new nodes serially 1feabf70b Add support for Ironic inspection through DHCP-relay ee32a10a7 Trivial fix shebang in keystone's fernet-node-sync.sh.j2 b9c88463f Correctly create the dhcp_agent.ini and l3_agent.ini 9c4887ae6 Do not set net.ipv4.ip_forward sysctl 229e3f41a Add check and diff options to kolla-ansible 297d1bee2 Do not create haproxy and swift log dirs needlessly b621fd827 Docs: Update to opendev.org domain b08c32e40 Do not enable mariadb-clustercheck when not needed f0169774d Do not become root when searching for custom prometheus alert rules files 3cbb45aeb CI: monasca: ignore exited monasca_thresh container 2ca82dac6 CI: stop setting ceph_nova_user 29d11508d Add disable_firewall variable 3e954e33a Fix neutron upgrade using host limit without controllers 62328e7d8 [CI] Test instance health after upgrade 7c268ee65 Bump libvirtd memlock ulimit dbe94d5fa Zun: Temporarily skip capsule test for ubuntu a42d09d46 Fix kolla-toolbox with IPv6 and disabled RabbitMQ 3bbf1a80b Use Docker healthchecks for memcached services 61917194c Use Docker healthchecks for keystone-fernet container 7755ef65d Use Docker healthchecks for nova-spicehtml5proxy service Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 + ansible/roles/baremetal/defaults/main.yml | 3 + ansible/roles/baremetal/tasks/install.yml | 56 ++++++----- ansible/roles/common/tasks/config.yml | 3 +- .../common/templates/conf/output/00-local.conf.j2 | 4 + ansible/roles/common/templates/fluentd.json.j2 | 4 + .../roles/common/templates/kolla-toolbox.json.j2 | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- ansible/roles/elasticsearch/defaults/main.yml | 2 +- ansible/roles/grafana/defaults/main.yml | 3 + ansible/roles/grafana/handlers/main.yml | 4 +- .../roles/haproxy/templates/haproxy_main.cfg.j2 | 2 - ansible/roles/keystone/defaults/main.yml | 14 +++ ansible/roles/keystone/tasks/config.yml | 1 + .../keystone/templates/fernet-healthcheck.sh.j2 | 6 ++ .../keystone/templates/fernet-node-sync.sh.j2 | 32 +++--- ansible/roles/keystone/templates/fernet-push.sh.j2 | 16 +++ .../keystone/templates/keystone-fernet.json.j2 | 6 ++ ansible/roles/manila/defaults/main.yml | 7 ++ ansible/roles/manila/tasks/deploy.yml | 5 - ansible/roles/manila/tasks/fix_cephfs_owner.yml | 85 ---------------- .../roles/manila/templates/manila-share.conf.j2 | 8 +- ansible/roles/mariadb/defaults/main.yml | 11 +-- ansible/roles/mariadb/handlers/main.yml | 6 ++ ansible/roles/mariadb/tasks/config.yml | 1 + ansible/roles/mariadb/tasks/main.yml | 6 +- ansible/roles/mariadb/templates/galera.cnf.j2 | 2 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 2 +- ansible/roles/memcached/defaults/main.yml | 14 +++ ansible/roles/memcached/handlers/main.yml | 1 + ansible/roles/memcached/tasks/check-containers.yml | 1 + ansible/roles/monasca/tasks/upgrade.yml | 1 + ansible/roles/neutron/tasks/config-host.yml | 1 - ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 +- ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 2 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 2 + ansible/roles/nova-cell/defaults/main.yml | 26 ++++- ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/tasks/prepare.yml | 2 +- ansible/roles/ovn/tasks/bootstrap.yml | 1 + ansible/roles/placement/tasks/config.yml | 2 +- ansible/roles/prometheus/tasks/config.yml | 1 - .../bootstrap-servers.rst | 2 + .../reference/networking/neutron-extensions.rst | 10 ++ .../reference/networking/provider-networks.rst | 21 ---- .../orchestration-and-nfv/tacker-guide.rst | 27 ++--- .../reference/storage/external-ceph-guide.rst | 14 +++ etc/kolla/globals.yml | 9 +- .../notes/bug-1939883-dbfca874b138cfe9.yaml | 6 ++ .../notes/bug-1941940-c63265ea6ea2f594.yaml | 11 +++ .../notes/bug-1944114-fa2a266c014c64a9.yaml | 5 + .../notes/bug-1945070-965635387a8581f9.yaml | 6 ++ .../notes/bug-1945453-c410cc090cb85feb.yaml | 16 +++ .../notes/bug-1947485-d059864252fb1813.yaml | 7 ++ .../notes/bug-1947534-bf3b5ed19473015f.yaml | 6 ++ .../notes/bug-1947589-52e7a6fa5d82e7fa.yaml | 6 ++ .../notes/bug-1948835-51b15ddbef04d307.yaml | 6 ++ .../notes/bug-1948979-aaf2a93cc016ffb1.yaml | 5 + .../notes/bug-1949260-34d82ecd677dd8ff.yaml | 5 + .../notes/bug-1953367-61591a7f3ecf28ce.yaml | 7 ++ ...ix-nova-api-log-file-name-9a377525e73012de.yaml | 7 ++ .../notes/disable-firewall-1e1955168c717cb5.yaml | 6 ++ ...-start-first-node-timeout-f9a6149cc68153a5.yaml | 10 ++ ...hecks-for-keystone-fernet-a63033e2b95ecb2f.yaml | 6 ++ ...ealthchecks-for-memcached-807b9036c3c92596.yaml | 6 ++ ...-for-nova-spicehtml5proxy-a9cf93c15c0a8966.yaml | 6 ++ .../notes/kolla-ansible-diff-50de16722aa155dc.yaml | 5 + .../notes/security-log4j-1be047799f8e590a.yaml | 5 + .../support-manila-wallaby-2e29e866af0d6287.yaml | 15 +++ tools/kolla-ansible | 20 +++- 84 files changed, 691 insertions(+), 279 deletions(-)

1 0

kolla 13.0.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are glad to announce the release of: kolla 13.0.1: Kolla OpenStack Deployment This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.0.1 ^^^^^^ Bug Fixes * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Nova images are built without "pypowervm" package. It is needed only for POWER architecture support (which we do not support) and breaks CentOS builds by trying to install (Python 2 only) 'futures' package. * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Changes in kolla 13.0.0..13.0.1 ------------------------------- 24fba48e8 nova: drop pypowervm dependency 56d639283 Ensure nvme-cli is present in nova-compute images c02ec3f8e nova-compute: trim image a bit on CentOS 0d8d2f40c Add Swift lock path in Swift containers Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++++++ .../notes/fix-lock-swift-path-9b743367e4014f92.yaml | 5 +++++ .../notes/nova-drop-pypowervm-256048c2a9cd594d.yaml | 6 ++++++ releasenotes/notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 +++++ 8 files changed, 41 insertions(+), 9 deletions(-)

1 0

kayobe 9.2.0 (victoria)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are gleeful to announce the release of: kayobe 9.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Adds a new "kolla_bifrost_use_firewalld" variable used to define whether Bifrost uses firewalld, which is now disabled by default. * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Bifrost is now configured to avoid using firewalld, to prevent conflicts with firewall rules set by Kayobe on the seed host. The existing behaviour can be retained by setting "kolla_bifrost_use_firewalld" to "True" in "bifrost.yml". * Removes the workaround for bogus name server entries in some CentOS 7 images, together with the "overcloud_host_image_workaround_resolv_enabled" variable. Bug Fixes ********* * Prevents Bifrost from using firewalld to avoid conflicts with firewall rules set by Kayobe on the seed host. See story 2009252 for more details. * Sets proxy option when using "dnf" during user bootstrapping, before "dnf.conf" is updated. This allows Kayobe to install Python 3 during host configuration when "dnf" requires a proxy to operate. * Fixes an issue bug where introspection data save would fail. See story 2009129 for more details. * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. Changes in kayobe 9.1.0..9.2.0 ------------------------------ 6180c4d8 docs: Improve all-in-one scenario c0073e7e Fix installation prefix detection 7bade28f CI: always return host configure test results a518ac34 Remove stale config dump from seed hypervisor host configure 0a3ab6e3 Add the missing documentation for mariadb recovery e3af71b6 CI: enable DNF tests on CentOS Stream 8 2d658cdc Set proxy option in early dnf invocation 3e99a3e9 Prevent Bifrost from using firewalld 459b6880 Remove CentOS 7 image resolv.conf workaround 68960f60 Fix IPA builder version typo f8486397 Fix wrong filename in bifrost docs 157e9b9d CI: Fix bashate ignores 8e1b8905 Make setup module arguments configurable b588b805 CI: Disable libvirt debug logs 0cccd22e Add missing quotes to Docker registry TLS example aabb6abf CI: Log disk usage details 30473356 Sync documentation with kolla_openstack_custom_config 46bbe36c CI: build CentOS Stream deployment images b0978e77 Fix typo in IP allocation filename 7bf2ab99 Use ansible_facts to reference facts 18460ecf CI: Fix get_logs.sh docker logs output 11554bd3 CI: Add CentOS Stream 8 750a17c4 Fix overcloud introspection data save 9e98ce3b Add twentyFiveGigE to port descriptions in inspector rules 761665ff dnf: add metalink argument to custom dnf repository 90f07dce Sync Kolla Ansible feature flags aacb2709 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/bifrost | 4 + ansible/group_vars/all/globals | 11 ++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/overcloud | 11 -- ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/kayobe-ansible-user.yml | 6 +- ansible/kayobe-target-venv.yml | 18 ++- ansible/kolla-target-venv.yml | 8 +- ansible/network.yml | 2 + ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++ ansible/overcloud-host-image-workaround-resolv.yml | 35 ----- ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/roles/bootstrap/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 2 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 8 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 12 +- ansible/roles/kolla-ansible/vars/main.yml | 36 ++++- .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 + .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 12 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +- ansible/snat.yml | 4 +- ansible/timezone.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 2 + .../configuration/scenarios/all-in-one/index.rst | 82 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 161 +++++++++++++++++---- etc/kayobe/bifrost.yml | 6 +- etc/kayobe/globals.yml | 11 ++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 37 ++++- etc/kayobe/overcloud.yml | 11 -- kayobe/ansible.py | 1 + kayobe/cli/commands.py | 30 ++-- kayobe/utils.py | 9 +- playbooks/kayobe-base/pre.yml | 14 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + playbooks/kayobe-seed-base/overrides.yml.j2 | 11 +- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 1 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++ .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + ...ve-resolv-conf-workaround-4cb484d3a66c4e58.yaml | 6 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++ .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + requirements.yml | 28 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + tools/run-bashate.sh | 2 +- zuul.d/jobs.yaml | 37 +++++ zuul.d/nodesets.yaml | 6 + zuul.d/project.yaml | 15 +- 84 files changed, 759 insertions(+), 255 deletions(-)

1 0

kolla 12.1.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are satisfied to announce the release of: kolla 12.1.0: Kolla OpenStack Deployment This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Add masakari-dashboard to debian binary horizon image. * Support for Debian/Ubuntu binary (aka packaged) CloudKitty images. * Adds support for the "ironic-neutron-agent" image in Debian and Ubuntu binary images. Also adds support for the "baremetal" ML2 driver in the "neutron-server" image in Debian and Ubuntu binary images. * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. * Allow to set group for user. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 * "Gnocchi" version has been updated to "4.4.1". Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.* also on Debian. LP#1930867 [Debian] * Fix missing default policy files for debian-binary-horizon. LP#1933759 * Fixes user uid inconsistency beetween base and openstack-base debian binary images. LP#1934753 * Add missing pacemaker cli utils to Debian hacluster images. LP#1934788 * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 * Fixes kolla-toolbox ansible.log logging for different users than ansible. LP#1942846 * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes an issue with Elasticsearch curator not working due to too new python elasticsearch library. LP#1941073 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Fixes an issue with the logstash image which was incompatible with the last OSS version (7.10) of Elasticsearch. Logstash is now pinned to 7.9. LP#1941754 * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Changes in kolla 12.0.1..12.1.0 ------------------------------- 0b45557bd Ensure nvme-cli is present in nova-compute images 3c33f878c nova-compute: trim image a bit on CentOS f81e7939f Add Swift lock path in Swift containers 6448d3d21 cinder-volume/ubuntu: add lsscsi and nvme c9a71e977 gnocchi: update to 4.4.1 0366a31d2 logstash: pin to 7.9.* for Elasticsearch OSS compatibility fe7b66323 [debian] Use upstream MariaDB 22a003276 toolbox: Move custom Ansible config to global location c978baf14 Fix Elasticsearch Curator f0ffe4050 debian: Change influxdb, rabbitmq and td-agent repos to bullseye 1ec1d8b46 Pin td-agent to 4.0.* also on Debian af76e6703 [doc] Ubuntu has Ceph Pacific in Wallaby+ 333f02a07 Allow build debian/ubuntu-binary cloudkitty images 3567cffb2 ironic-neutron-agent: enable for Debuntu binary 571572a25 Add some system users to fix user uid inconsistencies b7b9d3855 base/deb: bump 'system' groups limit beyond Kolla ones 69a6809b1 Config: allow to set group for user d8eed6c0c Fix naming of CentOS Stream in reno 4a0d2ce11 monasca-thresh: Allow topology check and removal in storm ac18704dd Fix missing pacemaker-cli-utils in Debian hacluster images b927e6a41 Add missing default policy files for debian-binary-horizon a7c5173b3 Add boto3 as s3 dependency for Glance container 57ddaad7a Add masakari-dashboard to debian binary horizon image 25d7f48c1 Improve offline build scenario. Diffstat (except docs and test files) ------------------------------------- .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 5 +- .../elasticsearch-curator/Dockerfile.j2 | 2 + .../hacluster-pacemaker-remote/Dockerfile.j2 | 6 ++ .../monasca/monasca-thresh/topology_bootstrap.sh | 90 ++++++++++++++++++++++ .../ironic-neutron-agent/Dockerfile.j2 | 5 +- kolla/common/config.py | 16 +++- kolla/image/build.py | 5 +- kolla/template/repos.yaml | 14 ++-- .../add-masakari-dashboard-eae5f216888e5fe0.yaml | 3 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 ++ .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 ++ .../notes/bug-1933759-c03e50c243850a49.yaml | 5 ++ .../notes/bug-1934753-98ec4951a0f7373b.yaml | 6 ++ .../notes/bug-1934788-b1fd51f443479fb6.yaml | 5 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../notes/bug-1942846-1216faacacba94be.yaml | 5 ++ .../notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++ .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 2 +- ...cloudkitty-debuntu-binary-09b182fc672b7d77.yaml | 4 + .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 +++ ...untu-ironic-neutron-agent-6534d616b37643a8.yaml | 6 ++ ...fix-elasticsearch-curator-7876896ebbd41ad3.yaml | 6 ++ .../fix-lock-swift-path-9b743367e4014f92.yaml | 5 ++ .../notes/gnocchi-4.4.1-1332afc3c6fca766.yaml | 4 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 ++ .../notes/logstash-7.9-30fd90e921037a8a.yaml | 6 ++ .../notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 ++ .../notes/set-group-for-user-aa9b3eae69d8f6a0.yaml | 3 + 50 files changed, 341 insertions(+), 56 deletions(-)

1 0

aodhclient 2.3.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are ecstatic to announce the release of: aodhclient 2.3.1: Python client library for Aodh This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/aodhclient Download the package from: https://pypi.org/project/aodhclient For more details, please see below. Changes in aodhclient 2.3.0..2.3.1 ---------------------------------- 90067b6 Fix aodhclient for pyparse 3.0.6 Diffstat (except docs and test files) ------------------------------------- aodhclient/utils.py | 2 +- 2 files changed, 1 insertion(+), 176 deletions(-)

1 0

octavia 9.0.1 (xena)
by no-reply＠openstack.org 23 Dec '21

23 Dec '21

We are glad to announce the release of: octavia 9.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 9.0.1 ^^^^^ Bug Fixes * Fix an issue with the provisioning status of a load balancer that was set to ERROR too early when an error occurred, making the load balancer mutable while the execution of the tasks for this resources haven't finished yet. * Fix an issue that could set the provisioning status of a load balancer to a PENDING_UPDATE state when an error occurred in the amphora failover flow. Changes in octavia 9.0.0..9.0.1 ------------------------------- 4039d35c Fix LB set in ERROR too early in the revert flow 45c992c1 Fix failover of az-specific loadbalancers 8681637d Fix management network selection when calculating deltas 26c75ccd Pin pylint on stable/xena a741bcea Update TOX_CONSTRAINTS_FILE for stable/xena 50db4b50 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../amphora-agent/source-repository-amphora-agent | 4 +- elements/octavia-lib/source-repository-octavia-lib | 2 +- .../worker/v1/tasks/amphora_driver_tasks.py | 8 -- .../controller/worker/v1/tasks/database_tasks.py | 46 +---------- .../controller/worker/v1/tasks/network_tasks.py | 8 +- .../controller/worker/v2/flows/amphora_flows.py | 4 + .../worker/v2/tasks/amphora_driver_tasks.py | 10 --- .../controller/worker/v2/tasks/database_tasks.py | 81 ++----------------- .../controller/worker/v2/tasks/network_tasks.py | 8 +- .../worker/v1/tasks/test_amphora_driver_tasks.py | 37 +-------- .../worker/v1/tasks/test_database_tasks.py | 78 ++---------------- .../worker/v2/flows/test_amphora_flows.py | 3 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 37 +-------- .../worker/v2/tasks/test_database_tasks.py | 93 +++------------------- .../worker/v2/tasks/test_network_tasks.py | 6 +- ...isioning-status-on-errors-7f3736ef6e94d453.yaml | 9 +++ test-requirements.txt | 2 +- tox.ini | 8 +- 19 files changed, 68 insertions(+), 377 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a4e7a9ba..9c58f385 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<=2.10.2 # GPLv2

1 0

octavia 8.0.1 (wallaby)
by no-reply＠openstack.org 23 Dec '21

23 Dec '21

We contentedly announce the release of: octavia 8.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 8.0.1 ^^^^^ Deprecation Notes ***************** * The "[amphora_agent].agent_server_network_file" configuration option is now deprecated, the new Amphora network configuration tool introduced in Xena does not support a single configuration file. Bug Fixes ********* * Amphora network configuration for the VIP interface and the pool member interfaces are now applied with the amphora-interface tool. amphora-interface uses pyroute2 low-level functions to configure the interfaces instead of distribution-specific tools such as "network- scripts" or "/etc/network/interfaces" files. * Disable conntrack for TCP flows in the Amphora, it reduces memory usage for HAProxy-based listeners and prevents some kernel warnings about dropped packets. * Fix an issue with amphorav2 driver, a failover of an amphora created an amphora with an ERROR status. * Fixes loadbalancer creation failure when one of the listener port matches with the octavia generated peer ports and the allowed_cidr is explicitly set to 0.0.0.0/0 on the listener. This is due to creation of two security group rules with remote_ip_prefix as None and remote_ip_prefix as 0.0.0.0/0 which neutron rejects the second request with security group rule already exists. * Fix a serialization error when using host_routes in VIP subnets when persistence in the amphorav2 driver is enabled. * Fixed MAX_TIMEOUT for timeout_client_data, timeout_member_connect, timeout_member_data, timeout_tcp_inspect API listener. The value was reduced from 365 days to 24 days, which now does not exceed the value of the data type in DB. * Fixed an issue with the "lo" interface in the "amphora-haproxy" network namespace. The "lo" interface was down and prevented haproxy to communicate with other haproxy processes (for persistent stick tables) on configuration change. It delayed old haproxy worker cleanup and increased the memory consumption usage after reloading the configuration. * Increase the limit value for nr_open and file-max in the amphora, the new value is based on what HAProxy 2.x is expecting from the system with the greatest maxconn value that Octavia can set. * Fix an issue with the provisioning status of a load balancer that was set to ERROR too early when an error occurred, making the load balancer mutable while the execution of the tasks for this resources haven't finished yet. * Fix an issue that could set the provisioning status of a load balancer to a PENDING_UPDATE state when an error occurred in the amphora failover flow. * Fix weighted round-robin for UDP and SCTP listeners with keepalived and lvs. The algorithm must be specified as 'wrr' in order for weighted round-robin to work correctly, but was being set to 'rr'. Changes in octavia 8.0.0..8.0.1 ------------------------------- 9b7791db Fix LB set in ERROR too early in MapLoadbalancerToAmphora f700bdbb Fix LB set in ERROR too early in the revert flow 77a87a7f Fix failover of az-specific loadbalancers 60b14c69 Fix management network selection when calculating deltas 19058596 Disable conntrack for TCP flows in the amphora e692201f Fix duplicate SG creation for listener peer port 4dbca788 Fix MAX_TIMEOUT value for listener c524eaf1 Fix PlugVIPAmphora revert function in amphorav2 de2f752e Add generic network interface management in the amphora f55376bf Update nr_open limit value in the amphora 6367a849 Fix using host_routes in VIP subnet with amphorav2 f16f72cc Add caps for pip-extra-reqs/pip-missing-reqs 9ba11825 Enable lo interface in the amphora-haproxy netns bd01b2b0 Fix race conditions between API and worker DB calls 20db85fd Fix comment for the ca_certificates_file opt adb454b2 Optimize CountPoolChildrenForQuota task in amphorav2 19504cef Fix amphora failover flow in amphorav2 driver a53e2eab Fix task_flow.max_workers with persistence in amphorav2 e06530e6 Fix jobboard_enabled setting in devstack 168f1a12 Fix devstack cleanup when using amphorav2 46979a0d Cap hacking and pylint d9603b3d Fix weighted round-robin about UDP and SCTP listener Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 12 +- .../75-amphora-agent-install | 3 + .../static/usr/local/bin/lvs-masquerade.sh | 27 + .../post-install.d/20-haproxy-tune-kernel | 4 +- etc/octavia.conf | 17 +- octavia/amphorae/backends/agent/agent_jinja_cfg.py | 2 - .../backends/agent/api_server/loadbalancer.py | 5 - .../amphorae/backends/agent/api_server/osutils.py | 512 +----------- octavia/amphorae/backends/agent/api_server/plug.py | 56 +- .../amphorae/backends/agent/api_server/server.py | 2 + .../api_server/templates/amphora-netns.systemd.j2 | 6 +- .../api_server/templates/plug_port_ethX.conf.j2 | 43 - .../api_server/templates/plug_vip_ethX.conf.j2 | 82 -- .../api_server/templates/rh_plug_port_ethX.conf.j2 | 47 -- .../rh_plug_port_eth_ifdown_local.conf.j2 | 19 - .../templates/rh_plug_port_eth_ifup_local.conf.j2 | 19 - .../api_server/templates/rh_plug_vip_ethX.conf.j2 | 60 -- .../templates/rh_plug_vip_ethX_alias.conf.j2 | 29 - .../api_server/templates/rh_route_ethX.conf.j2 | 29 - .../api_server/templates/rh_rule_ethX.conf.j2 | 17 - .../agent/api_server/templates/systemd.conf.j2 | 2 +- .../agent/api_server/templates/sysvinit.conf.j2 | 6 +- .../agent/api_server/templates/upstart.conf.j2 | 6 +- octavia/amphorae/backends/agent/api_server/util.py | 6 +- .../agent/templates/amphora_agent_conf.template | 3 - octavia/amphorae/backends/utils/interface.py | 237 ++++++ octavia/amphorae/backends/utils/interface_file.py | 218 +++++ octavia/cmd/interface.py | 90 ++ octavia/common/base_taskflow.py | 5 +- octavia/common/config.py | 9 +- octavia/common/constants.py | 41 +- octavia/common/exceptions.py | 5 + octavia/common/jinja/lvs/jinja_cfg.py | 2 +- .../worker/v1/tasks/amphora_driver_tasks.py | 8 - .../controller/worker/v1/tasks/database_tasks.py | 51 +- .../controller/worker/v1/tasks/network_tasks.py | 8 +- octavia/controller/worker/v2/controller_worker.py | 36 +- .../controller/worker/v2/flows/amphora_flows.py | 4 + .../worker/v2/tasks/amphora_driver_tasks.py | 16 +- .../controller/worker/v2/tasks/database_tasks.py | 96 +-- .../controller/worker/v2/tasks/network_tasks.py | 11 +- octavia/db/repositories.py | 10 + .../drivers/neutron/allowed_address_pairs.py | 17 +- .../backend/agent/api_server/test_server.py | 894 ++++++++++---------- .../backends/agent/api_server/test_osutils.py | 432 ++-------- .../backends/agent/api_server/test_plug.py | 139 ---- .../backends/agent/api_server/test_util.py | 2 +- .../backends/agent/test_agent_jinja_cfg.py | 8 - .../unit/amphorae/backends/utils/test_interface.py | 902 +++++++++++++++++++++ .../amphorae/backends/utils/test_interface_file.py | 583 +++++++++++++ .../sample_configs/sample_configs_combined.py | 8 +- .../worker/v1/tasks/test_amphora_driver_tasks.py | 37 +- .../worker/v1/tasks/test_database_tasks.py | 110 +-- .../worker/v2/flows/test_amphora_flows.py | 6 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 42 +- .../worker/v2/tasks/test_database_tasks.py | 125 +-- .../worker/v2/tasks/test_database_tasks_quota.py | 36 +- .../worker/v2/tasks/test_network_tasks.py | 18 +- .../controller/worker/v2/test_controller_worker.py | 24 +- .../drivers/neutron/test_allowed_address_pairs.py | 30 + ...work-interface-management-d77bc9905ed997f6.yaml | 13 + ...disable-conntrack-for-tcp-01ef6948d99353c2.yaml | 6 + ...mphora-failover-amphorav2-b19a76ccfdc75245.yaml | 5 + ...fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml | 9 + ...amphorav2-and-persistence-54b99d651a4ee9c4.yaml | 5 + .../fix-listener-MAX_TIMEOUT-4c4fdf804a96c34b.yaml | 7 + ...o-interface-amphora-netns-90fb9934026e1485.yaml | 8 + .../fix-nr_open-limit-value-7f475c3e301a608d.yaml | 6 + ...isioning-status-on-errors-7f3736ef6e94d453.yaml | 9 + ...udp-and-sctp-listener-wrr-50de9dc0774a8ea1.yaml | 6 + setup.cfg | 1 + test-requirements.txt | 4 +- tox.ini | 18 +- 79 files changed, 3248 insertions(+), 2429 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a4e7a9ba..d1dd6b6d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking>=3.0,<4.1.0 # Apache-2.0 @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<2.8 # GPLv2

1 0