- Release-announce - lists.openstack.org

cinder 16.4.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We jubilantly announce the release of: cinder 16.4.0: OpenStack Block Storage This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 16.4.0 ^^^^^^ Bug Fixes * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800) Add support for ports filtering in XtremIO driver. * Bug #1904892 (https://bugs.launchpad.net/cinder/+bug/1904892) Fix cinder manage operations for NFS backends using IPv6 addresses in the NFS server address. These were previously rejected by the Cinder API. * RBD driver bug #1907964 (https://bugs.launchpad.net/cinder/+bug/1907964) Add support for fast-diff on backup images stored in Ceph. Provided fast-diff is supported by the backend it will automatically be enabled and used. With fast-diff enabled, the generation of diffs between images and snapshots as well as determining the actual data usage of a snapshot is speed up significantly. * Bug #1920237 (https://bugs.launchpad.net/cinder/+bug/1920237) The backup manager calls volume remove_export() but does not wait for it to complete when detaching a volume after backup. This caused problems when a subsequent operation started on that volume before it had fully detached. * Pure Storage FlashArray driver fix to ensure cinder_tempest_plugin consistency group tests pass. Changes in cinder 16.3.0..16.4.0 -------------------------------- 35d56b680 Fix typo in Dell EMC Unity driver documentation f6d7b0919 Open local image files with "rb" mode e156653d3 Fix sporadic cleanup unit test failure dc8a1beab Label temporary files created by image_utils d9c029c17 Add ports filtering support to Dell EMC XtremIO driver ba8d19822 Tests: Don't assert notifier not called 34120d498 Backup manager: Synchronously call remove_export 610b59b27 Add support for RBD fast-diff feature for backups stored in Ceph b32a0f0cf Drop lower-constraints job d5fed21fd API validation: Add cinder_host type to support ipv6 in manage 1aa907300 Pure: Add default value to pure_host_personality 849fb4f19 [Pure] Fix failing consistency group tempest tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinder/api/schemas/volume_manage.py | 2 +- cinder/api/validation/parameter_types.py | 12 ++++ cinder/backup/drivers/ceph.py | 47 +++++++++------ cinder/backup/manager.py | 2 +- cinder/image/glance.py | 2 +- cinder/image/image_utils.py | 7 ++- .../unit/volume/drivers/dell_emc/test_xtremio.py | 50 +++++++++++++++- cinder/volume/drivers/dell_emc/xtremio.py | 70 +++++++++++++++++----- cinder/volume/drivers/pure.py | 4 +- cinder/volume/rpcapi.py | 7 ++- .../drivers/dell-emc-unity-driver.rst | 2 +- .../drivers/dell-emc-xtremio-driver.rst | 11 ++++ ...9-xtremio-ports-filtering-e68f90d47f17a7d9.yaml | 5 ++ ...g-1904892-ipv6-nfs-manage-391118115dfaaf54.yaml | 7 +++ .../notes/bug-1907964-9277e5ddec2abeda.yaml | 11 ++++ ...backup-remove-export-race-941e2ab1f056e54c.yaml | 8 +++ .../pure_tempest_cg_fix-913d405f7487de00.yaml | 5 ++ 25 files changed, 264 insertions(+), 96 deletions(-)

1 0

kolla-ansible 10.3.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are gleeful to announce the release of: kolla-ansible 10.3.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features ************ * Adds "kolla_sysctl_conf_path" variable that allows to customise the path to "sysctl.conf" that will be modified by Kolla Ansible plays. The default is "/etc/sysctl.conf" as it was before. * Adds a new flag, "docker_disable_default_network", which defaults to "no". Docker is using "172.17.0.0/16" by default for bridge networking on "docker0", and this might cause routing problems for operator networks. Setting this flag to "yes" will disable Docker's bridge networking. This feature will be enabled by default from the Wallaby 12.0.0 release. * Added a new haproxy configuration variable, "haproxy_host_ipv4_tcp_retries2", which allows users to modify this kernel option. This option sets maximum number of times a TCP packet is retransmitted in established state before giving up. The default kernel value is 15, which corresponds to a duration of approximately between 13 to 30 minutes, depending on the retransmission timeout. This variable can be used to mitigate an issue with stuck connections in case of VIP failover, see bug 1917068 for details. * Adds the ability to override the automatic detection of *fluentd_version* and *fluentd_binary*. These can now be defined as extra variables. This removes the dependency of having docker configured for config generation. * Adds support for collecting Prometheus metrics from RabbitMQ. This is enabled by default when Prometheus and RabbitMQ are enabled, and may be disabled by setting "enable_prometheus_rabbitmq_exporter" to "false". * Allows to skip and unset sysctl variables controlled by Kolla Ansible plays using "KOLLA_SKIP" and "KOLLA_UNSET" values. Bug Fixes ********* * Fixes an issue with "kolla-ansible bootstrap-servers" if Zun is enabled where Zun-specific configuration for Docker was applied to all nodes. LP#1914378 * Fix the issue when Swift deployed with S3 Token Middleware enabled. Fixes LP#1862765 * Fixes the Northbound and Southbound database socket paths in OVN. * chronyd crash loop if server is rebooted (Debian) LP#1915528 * Fixed an issue when Docker was configured after startup on Debian/Ubuntu, which resulted in iptables rules being created - before they were disabled. LP#1923203 * A bug where sriov_agent.ini wasn't copied due to "Permission denied" error was fixed. LP#1923467 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes Swift deploy when TLS enabled. Added the missing handler and corrected the container name. LP#1931097 * Fixes missing region_name in keystone_auth sections. See bug 1933025 for details. * Fixes "iscsid" failing in current CentOS 8 based images due to pid file being needlessly set. LP#1933033 * Fixes host bootstrap on Debian not removing the conflicting packages. It now behaves in accordance with the docs. LP#1933122 * Fixes an issue where "kolla-ansible" exits with a zero exit code when executed with a bogus command name. LP#1929397 * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Adds a new flag, "docker_disable_ip_forward", which defaults to "no" and can be used (by setting "yes") to disable docker's "ip- forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". This is to protect from creating all-forwarding hosts. LP#1931615 * Fixes an issue when generating "/etc/hosts" during "kolla-ansible bootstrap-servers" when one or more hosts has an "api_interface" with dashes ("-") in its name. LP#1927357 * Fixes some configuration issues around Barbican logging. LP#1891343 * Fixes some configuration issues around Cinder logging. LP#1916752 * Fix the wrong configuration of the ovs-dpdk service. this breaks the deployment of kolla-ansible. For more details please see bug 1908850. * Fixes an issue with keepalived which was not recreated during an upgrade if configuration is unchanged. LP#1928362 * Fixes an issue with Magnum when TLS is enabled. LP#781062 * Fixes an issue with executing "kolla-ansible" when installed via "pip install --user". LP#1915527 * Fixes an issue where "masakari.conf" was generated for the "masakari-instancemonitor" service but not used. * Fixes an issue where "masakari-monitors.conf" was generated for the "masakari-api" and "masakari-engine" services but not used. * Uses a consistent variable name for container dimensions for "masakari-instancemonitor" - "masakari_instancemonitor_dimensions". The old name of "masakari_monitors_dimensions" is still supported. * Fixes an issue with Octavia deployment when using a custom service auth project. If "octavia_service_auth_project" is set to a project that does not exist, Octavia deployment would fail. The project is now created. LP#1922100 * Fixes LP#1892376 by updating deprecated syntax in the Monasca Elasticsearch template. * Removes whitespace around equal signs in "zookeeper.cfg" which were preventing the "zkCleanup.sh" script from running correctly. Other Notes *********** * Following Cinder upstream, support for using ZFSSA with Cinder has been removed. ZFSSA was unsupported in Train and later removed in Ussuri. Changes in kolla-ansible 10.2.0..10.3.0 --------------------------------------- 588e7e87c Fix exit code with bogus command name 2acd4f711 Allow user to set sysctl_net_ipv4_tcp_retries2 345747a7c Allow to skip and unset sysctl vars 5d7c34523 Add support for changing sysctl.conf path 0055332bd Disable docker's ip-forward when iptables disabled d7fcaca38 [docker] Added a new flag to disable default network 88347646e docs: Add note about internal VIP when HAProxy is disabled e3ef0dc3d magnum: Add CA certificate configuration for internal TLS 473b7e457 Make it possible to override automatic fluentd version detection 0d8f65eac [CI] Do not set ansible_python_interpreter for Zuul 026ddc97d Add missing region_name in keystoneauth sections 2ac8b5749 Drop support for Cinder ZFSSA backend 0c7db5a14 Fix host bootstrap pkg removal on Debian f0e39cd32 Do not set pid file for iscsid c6aa022a4 baremetal: fix /etc/hosts generation when api_interface has dashes ccbdf9202 chronyd crash loop if Debian server is rebooted 0cc46ff2a Stop fluentd deprecation warnings of type vs @type 9a1e9b607 Fix parsing of infra.mariadb.xinetd logs 005d4b89f Fix neutron-ovn-metadata-agent with policy.yaml a343753a7 octavia: Ensure service auth project exists bf0e09a6f Merge glance sections for nova.conf.j2 8dc48aca0 Update blazar.conf template 46898f4e3 Support editable installation in all cases 53cab0c3c Add the ansible_managed header for admin-openrc.sh 3ffcf4636 Fix RabbitMQ restart ordering 6110ae4d6 Add forgotten 'Restart container' handler for swift 6f3b611f3 neutron: Add become for copying sriov_agent.ini 622767ead Fix duplicate dashboard section in tempest.conf.j2 b80a7922a [CI] Drop Zuul host groups 90c57266a docs: Update Freenode to OFTC fc7163df4 [CI] Support building source images with in-review changes 894ff94d0 CI: Use PATH to find kolla-ansible script ae6b25fb1 [CI] Remove setup_gate.sh symlink ecd8dfe62 CI: pull images before deploy 55d62db97 cinder: fix condition to copy backend TLS certs f6d2decae Remove [octavia]/base_url option from neutron.conf b97b388bd baremetal: Install Docker SDK less than 5.0.0 f20b54c7b baremetal: Don't start Docker after install on Debian/Ubuntu 2c7286193 Ensure keepalived is upgraded a99debd15 Disable Alertmanager's peer gossip in non-HA deployments 4a5398f29 Use @type instead of type fc66b7115 Fix "Restart mariadb-clustercheck container" during config gen ca92444c6 prometheus: Collect metrics from rabbitmq 37c24be00 masakari: fix minor issues with instance monitor 3dbe8e82a Negative seqno need to be considered when comparing seqno 55ffe1f8f docs: Improve policy documentation 9164cad1c Apply Zun configuration for Docker based on inventory f48846367 [CI] Use images from quay.io 193aa7fde nova-cell: Stop printing ceph keys in output e84ac3919 docs: fix registry mirror example a473d35e0 Correctly configure S3 Token Middleware for Swift 046d94c80 Reduce number of logs and disable ara HTML report 8a46ae952 Introduce nova_libvirt_logging_debug eea77dee5 Synchronise kolla-ansible installation with other branches faef9f592 Remove whitespace around equal signs in zookeeper.cfg b4fff7225 Fix Cinder log parsing 8581dad2f CI: Add ssh retries cd2fae0c2 Replace db-sock with db-nb-sock and db-sb-sock 469b95367 ovn: Fix disabling of gateway chassis 3e92b9351 Update String type for Monasca ES template 9efacffa8 CI: fix ceph-ansible installation after cryptography 3.4 release b03201924 Do not wait for grafana to start when kolla_action=config e95bc1375 Drop lower-constraints ff06adaf4 Fix installation with pip install --user bec35706e Fix monasca-grafana check a89a2378f Fix Barbican API log config 459cbdd84 docs: improve external Ceph docs 150445c5b docs: Improve multinode Docker registry setup b9c03063d Fix dpdk deploy failed 6aa553685 Install gnupg before adding docker apt gpg key during pre-install ae2c9f9da Fixes solum_api Listening on 127.0.0.1 82c5781d8 Fix failure during Monasca Grafana upgrade Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 27 +++- ansible/group_vars/all.yml | 13 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + .../roles/barbican/templates/barbican-api.ini.j2 | 1 + .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 4 + .../roles/baremetal/tasks/bootstrap-servers.yml | 5 +- ansible/roles/baremetal/tasks/install.yml | 28 ++++- ansible/roles/baremetal/tasks/post-install.yml | 50 ++++++-- ansible/roles/baremetal/tasks/pre-install.yml | 7 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 11 +- ansible/roles/chrony/templates/chrony.json.j2 | 4 +- ansible/roles/cinder/defaults/main.yml | 14 --- ansible/roles/cinder/tasks/config.yml | 2 +- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 18 +-- ansible/roles/common/tasks/config.yml | 12 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 2 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 4 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 4 +- .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 6 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/elasticsearch/tasks/config-host.yml | 9 +- ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/handlers/main.yml | 1 + ansible/roles/haproxy/defaults/main.yml | 4 + ansible/roles/haproxy/tasks/config-host.yml | 16 ++- ansible/roles/haproxy/tasks/upgrade.yml | 2 + ansible/roles/heat/templates/heat.conf.j2 | 1 + .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/iscsi/templates/iscsid.json.j2 | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 9 ++ ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/handlers/main.yml | 2 + ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/masakari/defaults/main.yml | 10 +- ansible/roles/masakari/tasks/clone.yml | 2 +- ansible/roles/masakari/tasks/config.yml | 33 ++--- ansible/roles/mistral/templates/mistral.conf.j2 | 1 + ansible/roles/monasca/handlers/main.yml | 3 +- ansible/roles/monasca/tasks/upgrade.yml | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + .../elasticsearch-template.json | 12 +- ansible/roles/murano/templates/murano.conf.j2 | 3 + ansible/roles/neutron/defaults/main.yml | 2 + ansible/roles/neutron/tasks/config-host.yml | 8 +- ansible/roles/neutron/tasks/config.yml | 1 + .../templates/neutron-ovn-metadata-agent.json.j2 | 13 +- ansible/roles/neutron/templates/neutron.conf.j2 | 8 +- ansible/roles/nova-cell/defaults/main.yml | 4 + ansible/roles/nova-cell/tasks/config-host.yml | 9 +- ansible/roles/nova-cell/tasks/external_ceph.yml | 1 + ansible/roles/nova-cell/templates/libvirtd.conf.j2 | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +- ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/defaults/main.yml | 7 ++ ansible/roles/octavia/tasks/register.yml | 15 --- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/ovn/tasks/bootstrap.yml | 4 +- ansible/roles/ovn/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/defaults/main.yml | 2 - .../roles/ovs-dpdk/templates/ovsdpdk-db.json.j2 | 2 +- .../roles/placement/templates/placement.conf.j2 | 1 + .../templates/prometheus-alertmanager.json.j2 | 2 +- .../roles/prometheus/templates/prometheus.yml.j2 | 9 ++ ansible/roles/rabbitmq/handlers/main.yml | 18 ++- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 4 + ansible/roles/swift/defaults/main.yml | 2 +- ansible/roles/swift/handlers/main.yml | 4 + ansible/roles/swift/templates/proxy-server.conf.j2 | 2 +- ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/tempest/templates/tempest.conf.j2 | 4 - ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zookeeper/tasks/config.yml | 1 + .../reference/high-availability/haproxy-guide.rst | 47 +++++++ .../reference/storage/external-ceph-guide.rst | 101 +++++++++------ etc/kolla/globals.yml | 6 +- etc/kolla/passwords.yml | 5 - lower-constraints.txt | 93 -------------- .../bootstrap-without-zun-67d6ee5d84fcec22.yaml | 6 + .../notes/bug-1862765-a6cad9fd2d3f0f48.yaml | 5 + .../notes/bug-1913031-e8b14c50e8a27d14.yaml | 4 + ...yd-crash-loop-if-server-is-rebooted-debian.yaml | 5 + .../notes/bug-1923203-f9ff247befc4bd75.yaml | 6 + .../notes/bug-1923467-80973d9fbe1f5287.yaml | 6 + .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 + .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + .../notes/bug-1931097-c94832ed2ed92c3a.yaml | 6 + .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 + .../notes/bug-1933033-76746d127285cfe8.yaml | 6 + .../notes/bug-1933122-b34311ba73092080.yaml | 6 + .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 + .../custom-sysctl-conf-path-ce58e897fc067410.yaml | 6 + ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 ++ .../docker-disable-bridge-14df8b7fddbd5000.yaml | 9 ++ ...docker-disable-ip-forward-b0490b71f9f07cd6.yaml | 9 ++ .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 + .../notes/etc-hosts-dashes-37d0dc07c8fc881f.yaml | 7 ++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++ .../fix-barbican-logging-42068f47fe1e4e4d.yaml | 5 + .../notes/fix-cinder-logging-22fea4739begd6s.yaml | 5 + .../fix-dpdk-deploy-failed-6695899422a67359.yaml | 7 ++ .../fix-keepalived-upgrade-a395e39dc946e618.yaml | 6 + .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 + .../fix-pip-install-user-5f871f67433e465a.yaml | 6 + ...ari-instancemonitor-fixes-dc13e5234456d4c5.yaml | 12 ++ ...eate-service-auth-project-aa38b12ebb601777.yaml | 7 ++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 + .../prometheus-rabbitmq-f7d6ebf0d611a819.yaml | 6 + .../sysctl-skip-and-unset-848d5ebd765aabec.yaml | 5 + ...ca-elasticsearch-template-41492c59acaf92b1.yaml | 6 + .../zookeeper-cfg-syntax-02e93c01d6a24f35.yaml | 5 + tools/kolla-ansible | 30 ++++- tools/setup_gate.sh | 136 --------------------- tox.ini | 6 - zuul.d/base.yaml | 6 +- zuul.d/nodesets.yaml | 16 --- zuul.d/project.yaml | 1 - 148 files changed, 981 insertions(+), 603 deletions(-)

1 0

octavia 6.2.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We high-spiritedly announce the release of: octavia 6.2.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 6.2.1 ^^^^^ Bug Fixes * Fixed an issue with batch member updates, that don't have any changes, not properly rolling back the update. * Fixed an issue that an amphorav2 LB cannot be reached after loadbalancer failover. The LB security group was not set in the amphora port. * Fixes an issue where provider drivers may not decrement the load balancer objects quota on delete. * Fix an issue with the rsyslog configuration file in the Amphora when the log offloading feature and the local log storage feature are both disabled. * Some IPv6 UDP members were incorrectly marked in ERROR status, because of a formatting issue while generating the health message in the amphora. * Fixed an issue with the "lo" interface in the "amphora-haproxy" network namespace. The "lo" interface was down and prevented haproxy to communicate with other haproxy processes (for persistent stick tables) on configuration change. It delayed old haproxy worker cleanup and increased the memory consumption usage after reloading the configuration. * Fix load balancers that use customized host_routes in the VIP or the member subnets in amphorav2. * Fix weighted round-robin for UDP listeners with keepalived and lvs. The algorithm must be specified as 'wrr' in order for weighted round-robin to work correctly, but was being set to 'rr'. * Fixed the healthcheck endpoint always querying the backends by caching results for a configurable time. The default is five seconds. * Fix a bug that allowed a user to create a load balancer on a "vip_subnet_id" that belongs to another user using the subnet UUID. Changes in octavia 6.2.0..6.2.1 ------------------------------- e84d9478 Enable lo interface in the amphora-haproxy netns de602782 Add amphora_id in store params for failover_amphora 45b31c18 Fix comment for the ca_certificates_file opt 4cfbf666 Optimize CountPoolChildrenForQuota task in amphorav2 d5dc2b26 Fix task_flow.max_workers with persistence in amphorav2 bae6808f Fix rsyslog configuration when disabling logs 8829f0fb Fix devstack cleanup when using amphorav2 19619ce8 Validate user access to vip_subnet_id when creating a LB c7b4b875 Fix using subnets with host_routes in amphorav2 driver 170be0dd Make /healthcheck cache results 5b6d25ca Explicitely set nodeset to Bionic-based 46b9ce7c Cap hacking 7367311c Fix empty Batch Member Update to unlock objects a8266a9e Fix weighted round-robin about UDP listener 7ded0e47 Fix LB failover for amphorav2: set security group 4b8de86c Fix incorrect ERROR status with IPv6 UDP members dcce548e Fix provider driver quota handling Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 10 ++- etc/octavia.conf | 19 ++++- .../amphorae/backends/agent/api_server/osutils.py | 2 +- .../api_server/templates/amphora-netns.systemd.j2 | 4 + .../amphorae/backends/utils/keepalivedlvs_query.py | 13 ++-- octavia/api/drivers/amphora_driver/v1/driver.py | 11 +-- octavia/api/drivers/amphora_driver/v2/driver.py | 11 +-- octavia/api/drivers/driver_agent/driver_updater.py | 43 +++++++++-- octavia/api/healthcheck/healthcheck_plugins.py | 23 +++++- octavia/api/v2/controllers/load_balancer.py | 2 +- octavia/api/v2/controllers/member.py | 6 ++ octavia/common/base_taskflow.py | 5 +- octavia/common/config.py | 6 +- .../logging/templates/10-rsyslog.conf.template | 5 ++ octavia/common/jinja/lvs/jinja_cfg.py | 2 +- octavia/controller/worker/v2/controller_worker.py | 27 ++++++- .../worker/v2/tasks/amphora_driver_tasks.py | 22 +++++- .../controller/worker/v2/tasks/database_tasks.py | 10 +-- .../controller/worker/v2/tasks/network_tasks.py | 2 +- octavia/db/repositories.py | 10 +++ .../backend/agent/api_server/test_keepalivedlvs.py | 2 +- .../backends/utils/test_keepalivedlvs_query.py | 29 ++++++- .../amphora_driver/v1/test_amphora_driver.py | 11 ++- .../amphora_driver/v2/test_amphora_driver.py | 11 ++- .../drivers/driver_agent/test_driver_updater.py | 71 ++++++++++++++++- .../common/jinja/logging/test_logging_jinja_cfg.py | 38 ++++++---- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 16 ++-- .../sample_configs/sample_configs_combined.py | 4 +- .../common/sample_configs/sample_configs_split.py | 2 +- .../worker/v1/tasks/test_network_tasks.py | 5 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 88 +++++++++++++++++++++- .../worker/v2/tasks/test_database_tasks_quota.py | 36 ++------- .../worker/v2/tasks/test_network_tasks.py | 5 +- .../controller/worker/v2/test_controller_worker.py | 21 ++++-- ...batch-member-update-issue-09b76787553e7752.yaml | 5 ++ ...phorav2-failover-secgroup-c793de5e00b32653.yaml | 5 ++ ...ver-agent-decrement-quota-27486d9fa0bdeb89.yaml | 5 ++ ...x-error-in-rsyslog-config-a316a7856e1a847a.yaml | 5 ++ ...x-ipv6-udp-health-message-ed94b35bbea396ec.yaml | 5 ++ ...o-interface-amphora-netns-90fb9934026e1485.yaml | 8 ++ ...net-host_routes-amphorav2-3c079c5a3bfa1b3d.yaml | 5 ++ .../fix-udp-listener-wrr-50de9dc0774a8ea1.yaml | 6 ++ .../notes/healthcheck-cache-641f0a64e6f5856c.yaml | 5 ++ ...e-access-to-vip_subnet_id-48fc92b45529cafd.yaml | 5 ++ test-requirements.txt | 2 +- zuul.d/projects.yaml | 27 +++++-- 51 files changed, 598 insertions(+), 139 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6fc42870..9f5123d0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking>=3.0,<4.1.0 # Apache-2.0

1 0

ironic 15.0.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are thrilled to announce the release of: ironic 15.0.2: OpenStack Bare Metal Provisioning This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 15.0.2 ^^^^^^ Known Issues ************ * Some "ipmitool" builds, in particular on machines running Red Hat Enterprise Linux 8.2, have changed the default cipher suite being offered which can cause "ipmitool" to completely fail to negotiate a connection with the BMC. Operators who encounter this situation should use the "ipmi_cipher_suite" parameter in the "driver_info" field to override and directly assert the required cipher. Because of potential security implications of attempting second level auto- negotiation and known BMC vendor behaviors, this must be identified by the operator and explicitly set as logic to attempt to navigate through situations like this may have undesirable results. * When "redfish-virtual-media" is used, fast-track mode will not work as expected, nodes will be rebooted between operations. Upgrade Notes ************* * An automated detection of a IPMI BMC hardware vendor has been added to appropriately handle IPMI BMC variations. Ironic will now query this and save this value if not already set in order to avoid querying for every single operation. Operators upgrading should expect an elongated first power state synchronization if for nodes with the "ipmi" hardware type. Bug Fixes ********* * Fixes the deployment failure with Ussuri (and older) ramdisks that happens when another IPA command runs after "prepare_image". * Fixes an issue with the "ansible" deployment interface where automatic root deviec selection would accidently choose the system CD-ROM device, which was likely to occur when the ansible deployment interface was used with virtual media boot. The "ansible" deployment interface now ignores all Ramdisks, Loopbacks, CD-ROMs, and floppy disk devices. * Fixes the "[deploy]configdrive_use_object_store" option that was broken during the Python 3 transition. * Fixes the problem about grub2 config file. Some higher versions of grub2 (e.g. 2.05 or 2.06-rc1) use grub.cfg-01-MAC, while another lower versions of grub2 (e.g. 2.04) use MAC.conf, so we generate both paths in order to be compatible with both. * Fixes an issue with agent token handling where the agent has not been upgraded resulting in an AgentAPIError, when the token is not required. The conductor now retries without sending an agent token. * Fixes issues when "UEFI" boot mode has been requested with persistent boot to "DISK" where some versions of "ipmitool" do not properly handle multiple options being set at the same time. While some of this logic was addressed in upstream ipmitool (https://github.com/ipmitool/ipmitool/issues/163) development, new versions are not released and vendors maintain downstream forks of the ipmitool utility. When considering vendor specific selector differences (https://storyboard.openstack.org/#!/story/2008241) along with the current stance of new versions from the upstream "ipmitool" community, it only made sense to handle this logic with- in Ironic. In part this was because if already set the selector value would not be updated. Now ironic always transmits the selector value for "UEFI". * Fixes handling of Supermicro "UEFI" supporting BMCs with the "ipmi" hardware type such that an appropriate boot device selector value is sent to the remote BMC to indicate boot from local storage. This is available for both persistent and one-time boot applications. For more information, please consult story 2008241 (https://storyboard.openstack.org/#!/story/2008241) * Fixes handling of the "ipmi" hardware type where "UEFI" boot mode and "one-time" boot to PXE has been requested. As Ironic now specifically transmits the raw commands, this setting should be properly appied where previously PXE boot operations may have previously occured in "Legacy BIOS" mode. * Fixes a potential race in the hash ring code that could result in the hash rings never updated after their initial load. * Fixes the virtual disks creation by changing PERC H740P controller mode from *Enhanced HBA* to *RAID* in delete_configuration clean step. PERC H740P controllers supports RAID mode and Enhanced HBA mode. When the controller is in Enhanced HBA, it creates single disk RAID0 virtual disks of NON-RAID physical disks. Hence the request for VD creation with supported RAID fails due to no available physical disk. This patch converts the PERC H740P RAID controllers to RAID mode if enhanced HBA mode found enabled See bug bug 2007711 (https://storyboard.openstack.org/#!/story/2007711) for more details * Fixes the deprecated "idrac" hardware interface implementation "__init__" methods to call their base class "__init__" methods before emitting a log message warning about their deprecation. For more information, see story 2008197 (https://storyboard.openstack.org/#!/story/2008197) * Allows configuring IPMI cipher suite via the new "driver_info" parameter "ipmi_cipher_suite" to enable operators to navigate "ipmitool" behavior changes around supported ciphers. * When configured to use json-rpc, the "[DEFAULT].host" configuration option to ironic-conductor can now be set to an IPv6 address. Previously it could only be an IPv4 address or a DNS name. * Fixes the issue that when the MAC address of a port group is not set and been attached to instance, the landed bond port cannot get IP address due to inconsistent MAC address between the tenant port and the initially allocated one in the config drive. * Fixes wiping the agent secret token on manual power off or reboot. Also makes sure to remove the agent URL since it may potentially change. * Fixes cleaning and managed inspection not respecting the "default_boot_mode" configuration option. * Fixes cleaning and managed inspection not following the standard boot mode handling logic, particularly, not trying to assert the requested boot mode if the driver allows it. * Adds handling of Redfish BMC's which lack a "BootSourceOverrideMode" flag, such that it is no longer a fatal error for a deployment if the BMC does not support this field. This most common on BMCs which feature only a partial implementation of the "ComputerSystem" resource "boot", but may also be observable on some older generations of BMCs which recieved updates to have partial Redfish support. * The fix for story 2008252 (https://storyboard.openstack.org/#!/story/2008252) synced the boot mode after changing the boot device because Supermicro nodes reset the boot mode if not included in the boot device set. However this can cause a problem on Dell nodes when changing the mode uefi->bios or bios->uefi, see story 2008712 (https://storyboard.openstack.org/#!/story/2008712) for details. Restrict the syncing of the boot mode to Supermicro. * When Ironic configures the BootSourceOverrideTarget setting via Redfish, on Supermicro BMCs it must always configure BootSourceOverrideEnabled or that will revert to default (Once) on the BMC, see story 2008547 (https://storyboard.openstack.org/#!/story/2008547) for details. This is different than what is currently implemented for other BMCs in which the BootSourceOverrideEnabled is not configured if it matches the current setting (see story 2007355 (https://storyboard.openstack.org/#!/story/2007355)) This requires that node.properties['vendor'] be 'supermicro' which will be set by Ironic from the Redfish system response or can be set manually. * After changing the boot device via Redfish, check that the boot mode being reported matches what is configured and, if not, set it to the configured value. Some BMCs change the boot mode when the device is set via Redfish, see story 2008252 for details. * Introduces lazy-loading of ports, portgroups, volume connections and volume targets in task manager to fix performance issues. For periodic tasks which create a task manager object but don't require the aforementioned data (e.g. power sync), this change should reduce the number of database interactions by around two thirds, speeding up overall execution. * Removes stale agent tokens when rebooting nodes using API. This prevents lookup failures for nodes that get rebooted between fast- track operations. * Fixes an issue of powering off with the "idrac-wsman" management interface while the execution of a clear job queue cleaning step is proceeding. Prior to this fix, the clean step would fail when powering off a node. * Fixes timeout in fast-track mode with "redfish-virtual-media" when running one operation after another (e.g. cleaning after inspection). Other Notes *********** * Adds a "detect_vendor" management interface method to the "ipmi" hardware type. This method is being promoted as a higher level interface as the fundimental need to be able to have logic aware of the hardware vendor is necessary with vendor agnostic drivers where slight differences require slightly different behavior. Changes in ironic 15.0.1..15.0.2 -------------------------------- f33bc52b0 Remove grenade jobs from old stable branches c68e50e6c Update the clear job id's constant 8d6cf57bb Make test-setup.sh compatible with mysql8 86a855d61 Delete unavailable py2 package 54376836e update grub2 file name 72fd48b9c Restrict syncing of boot mode to Supermicro 2e4e87556 For Supermicro BMCs set enable when changing boot device 4df73e47e Refactor vendor detection and add Redfish implementation 8bf3f4747 IPMI: Handle vendor set boot device differences 97390e427 Allow unsupported redfish set_boot_mode 691211b10 Lazy-load node details from the DB 5e2eeb311 [Trivial] Fix testing of volume connector exception 0da73cdd3 Fix broken configdrive_use_object_store 8c0568f34 Enable swift temporary URLs in grenade and provide a good error message c3c6cda65 DRAC: Fix a failure to create virtual disk 85a1e3d23 CI: switch the multinode job to tempest-multinode-full-base b2ae2af3f Fixes the issue that instance bond port can't get IP address a6f38ab05 Sync boot mode when changing the boot device via Redfish cfc681817 Use assertCountEqual instead of assertItemsEqual 2248f2ac7 json-rpc: surround IPv6 address with [] in conductor URL a7cfcd181 clean up mac address with the pxe configuration files 6ef6180bd Prevent timeouts when using fast-track with redfish-virtual-media 96a719e4e opt: Enhance old stable branches to use latest python-ibmcclient d48b39430 CI: Making some of the older jobs more specific 7ce314804 CI: Additional minor job changes to improve CI reliability c15d6fd70 Fix a race condition in the hash ring code e5f886e8c Use correct error handler instead of calling process_event('fail') 20de88441 Fix deprecated 'idrac' interface '__init__'s 3943bd143 CI: Patch to fix CI jobs in bugfix/stable branches b9a02e9ab CI: Remove the build check for pre-build ramdisks only ac2d4c086 Allow configuring IPMI cipher suite d9183a0a3 Also wipe agent token on manual power off or reboot 041f1b89e Handle default_boot_mode during cleaning/inspection with PXE/iPXE b4c6d7be4 Do not assume that prepare_image is the last command to run b67ac0c40 Handle an older agent with agent_token 2b740a0c7 Increase memory of tinyipa vms 145d68e8f Ansible deploy - Ignore invalid devices bce1d33e5 Wipe agent token during reboot or power off Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 9 +- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- driver-requirements.txt | 2 +- ironic/common/hash_ring.py | 28 ++-- ironic/common/json_rpc/client.py | 5 +- ironic/common/neutron.py | 6 +- ironic/common/pxe_utils.py | 16 +- ironic/common/swift.py | 7 +- ironic/conductor/deployments.py | 3 +- ironic/conductor/manager.py | 7 + ironic/conductor/task_manager.py | 72 ++++++++- ironic/conductor/utils.py | 67 +++++++- ironic/drivers/base.py | 18 +++ ironic/drivers/modules/agent.py | 46 +++--- ironic/drivers/modules/agent_client.py | 45 +++++- .../ansible/playbooks/library/root_hints.py | 6 + ironic/drivers/modules/boot_mode_utils.py | 5 +- ironic/drivers/modules/deploy_utils.py | 3 + ironic/drivers/modules/drac/inspect.py | 1 + ironic/drivers/modules/drac/management.py | 5 +- ironic/drivers/modules/drac/power.py | 1 + ironic/drivers/modules/drac/raid.py | 166 ++++++++++++++++++- ironic/drivers/modules/drac/vendor_passthru.py | 1 + ironic/drivers/modules/ibmc/utils.py | 10 +- ironic/drivers/modules/ilo/management.py | 9 +- ironic/drivers/modules/ilo/raid.py | 6 +- ironic/drivers/modules/ipmitool.py | 138 +++++++++++++--- ironic/drivers/modules/network/common.py | 4 +- ironic/drivers/modules/network/neutron.py | 6 +- ironic/drivers/modules/pxe_base.py | 3 +- ironic/drivers/modules/redfish/management.py | 62 +++++++- .../unit/api/controllers/v1/test_allocation.py | 4 +- .../unit/api/controllers/v1/test_conductor.py | 4 +- .../api/controllers/v1/test_deploy_template.py | 4 +- .../unit/api/controllers/v1/test_portgroup.py | 4 +- .../api/controllers/v1/test_volume_connector.py | 4 +- .../unit/api/controllers/v1/test_volume_target.py | 4 +- .../unit/drivers/modules/drac/test_management.py | 4 +- .../unit/drivers/modules/ilo/test_management.py | 8 +- .../unit/drivers/modules/irmc/test_inspect.py | 17 -- .../unit/drivers/modules/network/test_common.py | 24 +-- .../unit/drivers/modules/network/test_neutron.py | 92 ++++++++++- .../drivers/modules/redfish/test_management.py | 101 ++++++++++-- .../unit/drivers/modules/test_agent_client.py | 58 +++++++ .../unit/drivers/modules/test_boot_mode_utils.py | 11 ++ .../unit/drivers/modules/test_deploy_utils.py | 31 ++++ .../drivers/modules/xclarity/test_management.py | 2 +- .../run.yaml | 2 +- .../notes/agent-uuid-5d86bc18849acda3.yaml | 5 + ...ble-device-name-filtering-0adfca7d8ba4cbcc.yaml | 9 ++ ...figdrive_use_object_store-93cfd7dc27d90003.yaml | 5 + ...ix-grub2-config-file-name-88e689a982a21684.yaml | 7 + ...andle-older-agent-command-5930124fd03bb327.yaml | 6 + ...uefi-disk-pxe-persistance-0d871825591918b5.yaml | 37 +++++ releasenotes/notes/hash-ring-6ce212ab86c2592d.yaml | 5 + .../idrac-add-ehba-support-10b90c92b8865364.yaml | 15 ++ ...-idrac-interface-__init__-362696b389c86d5d.yaml | 8 + .../notes/ipmi-cipher-suite-499097740f7c86ee.yaml | 18 +++ .../notes/json-rpc-ipv6-host-30eca350f34bc091.yaml | 6 + .../notes/portgroup-mac-649ed31c3525e4f0.yaml | 7 + .../notes/power-off-token-0403e8a054f31125.yaml | 5 + .../notes/pxe-boot-mode-9084ccf35e54bbc0.yaml | 9 ++ ...ride-not-present-handling-92e7263617e467c4.yaml | 9 ++ ...fter-device-to-supermicro-218e8cb57735c685.yaml | 11 ++ ...-redfish-override-enabled-aa51686ed33d3061.yaml | 15 ++ ...r-changing-redfish-device-f60ef90ba5675215.yaml | 8 + .../taskmanager-lazy-load-32a14526c647c2f0.yaml | 9 ++ .../notes/token-reboot-b48b5981a58a30ae.yaml | 5 + ...clear-job-id-constant-fix-c69cf96c55364bb3.yaml | 7 + .../notes/vmedia-fast-track-903076c33c4aca04.yaml | 9 ++ tools/test-setup.sh | 4 +- zuul.d/ironic-jobs.yaml | 48 ++++-- zuul.d/project.yaml | 17 +- 108 files changed, 2034 insertions(+), 393 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 2d8c9671c..f47c0b783 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -20 +20 @@ ansible>=2.7 -python-ibmcclient>=0.1.0,<0.2.0 +python-ibmcclient>=0.1.0,!=0.2.1,<0.3.0

1 0

python-tackerclient 1.1.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We contentedly announce the release of: python-tackerclient 1.1.1: CLI and Client Library for OpenStack Tacker This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tackerclient Download the package from: https://pypi.org/project/python-tackerclient Please report issues through: https://bugs.launchpad.net/python-tackerclient/+bugs For more details, please see below. Changes in python-tackerclient 1.1.0..1.1.1 ------------------------------------------- ee2e460 Improve readability of vnflcm show command 5484536 Display correct fields in output for list command 86fefdb Improve readability of vnf package show command 0d6e331 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 70d79b5 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tackerclient/osc/utils.py | 7 ++++ tackerclient/osc/v1/vnflcm/vnflcm.py | 13 ++++--- tackerclient/osc/v1/vnfpkgm/vnf_package.py | 33 ++++++++++++----- tox.ini | 4 +-- 10 files changed, 121 insertions(+), 47 deletions(-)

1 0

kayobe 8.1.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are jazzed to announce the release of: kayobe 8.1.1: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 8.1.1 ^^^^^ New Features ************ * Adds the "ipa_build_upper_constraints_file" variable to select the upper constraints file used to install diskimage-builder in the virtual environment used for building IPA images. This allows you to install a newer release than the one allowed by the default constraints. * Updates the default image for the seed VM to CentOS 8.3. Upgrade Notes ************* * Updates the "stackhpc.os-images" role to version 1.10.2, for compatibility with the version of diskimage-builder installed by Victoria upper constraints. You must run "kayobe control host upgrade" to update this role in order to successfully build IPA images. Bug Fixes ********* * Fixes an issue when using the "--limit" argument with a host pattern including commas. See story 2008255 for details. * Fixes an issue with Python setup when venv is not used. See story 2008378 for details. * Fixes an issue where custom SSH arguments, such as when setting "ansible_ssh_extra_args", were not being respected when rebooting a host to disable selinux. * Fixes calls to "kolla-ansible" when arguments to "--kolla-limit" contain special characters such as "~" or "&". * Fixes an issue with copying Swift ring files. See story 2007297 for details. * Fixes issue with deleting swift ring temporary files. See story 2008354 for details. * Fixes an issue with the "kayobe seed service deploy" command on CentOS 8.3 release. See story 2008430 for details. * Fixes building deployment images (IPA) with recent versions of ironic-python-agent-builder, by using Victoria upper constraints to install a newer version of diskimage-builder into the virtual environment used for building IPA images. This can be changed using the "ipa_build_upper_constraints_file" variable in "${KAYOBE_CONFIG_PATH}/ipa.yml". Changes in kayobe 8.1.0..8.1.1 ------------------------------ 0b82fa34 Prevent matching unrelated images 649183ce Remove outdated upgrade step 3ebeaefb Update seed VM image to CentOS 8.4 a067a8ba CI: Revert to Docker Hub images for upgrade jobs cf8869ee docs: Update Freenode to OFTC f3415254 CI: Remove unused Docker images after overcloud upgrade dc1f1348 Remove unnecessary requirements from tox.ini 9fdecebe Sync the names and content of the repo-files for CentOS8 0059a8cf CI: switch to quay.io for container images 4eafeab9 Switch to reboot module d633f938 Use released version of mrlesmithjr.mdadm d8f640f1 Fix help texts of inventory options b67c2afe Fix overcloud provision with fast track enabled d64d415f Avoid fact gathering for group_by d5e8bc03 CI: increase Ansible Galaxy retries & add delay 5a045264 Document requirements for symlinks used by custom playbooks fc198dd3 Update seed VM image to CentOS 8.3 a1881104 Wait for overcloud manage and provide state transitions b5df443a CI: display VM console log on ping or SSH failure cbad5e00 CI: Use cached cirros image for seed vm job 9d862eac Update IPA docs and test build with extra-hardware fc53de47 Test building seed deployment images in the seed job 3cf2c992 Fix IPA build on stable/ussuri d2c5f8e3 Quote kolla limit when calling kolla-ansible 8eadb255 CI: Fix overcloud and seed VM jobs on vexxhost clouds 2aa81e84 Add ipa_build_upper_constraints_file variable 9595873f Fix copying Swift ring files 12f2bb18 Fix /tmp/swift-rings/backups/ files deletion 304a869f Fix overcloud host image resolv workaround on CentOS 8.3 783d0f2e Fix --limit with commas 6ee7333e Fix Python setup when venv is not used Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all/ipa | 7 ++ ansible/group_vars/all/kolla | 138 ++++++++++----------- ansible/group_vars/all/seed-vm | 2 +- ansible/kayobe-ansible-user.yml | 1 + ansible/kayobe-target-venv.yml | 2 +- ansible/kolla-openstack.yml | 3 + ansible/overcloud-bios-raid.yml | 1 + ansible/overcloud-grafana-configure.yml | 3 +- ansible/overcloud-host-image-workaround-resolv.yml | 2 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 4 +- ansible/overcloud-introspection-rules.yml | 3 +- ansible/overcloud-ipa-build.yml | 13 +- ansible/overcloud-ipa-images.yml | 3 +- ansible/overcloud-provision.yml | 17 ++- ansible/physical-network.yml | 2 + ansible/provision-net.yml | 3 +- ansible/roles/disable-selinux/tasks/main.yml | 30 +---- ansible/roles/dnf/tasks/local-mirror.yml | 10 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 --- .../dnf/templates/CentOS-Linux-AppStream.repo.j2 | 17 +++ .../dnf/templates/CentOS-Linux-BaseOS.repo.j2 | 17 +++ .../dnf/templates/CentOS-Linux-Extras.repo.j2 | 17 +++ ansible/roles/kolla-openstack/tasks/config.yml | 17 ++- .../roles/swift-rings/files/swift-ring-builder.py | 2 +- ansible/roles/swift-rings/tasks/main.yml | 11 +- ansible/seed-ipa-build.yml | 10 +- dev/functions | 35 +++--- dev/tenks-deploy-config-compute.yml | 4 + etc/kayobe/ipa.yml | 7 ++ etc/kayobe/seed-vm.yml | 2 +- kayobe/ansible.py | 7 +- kayobe/kolla_ansible.py | 10 +- kayobe/utils.py | 27 ++++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 13 ++ playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-base/pre.yml | 5 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/globals.yml.j2 | 3 + playbooks/kayobe-seed-base/overrides.yml.j2 | 8 ++ playbooks/kayobe-seed-base/pre.yml | 5 + .../kayobe-seed-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 +- .../fix-limit-with-commas-04a357b0b7ef0371.yaml | 6 + .../notes/fix-python-setup-5e7ff929a6cab092.yaml | 5 + ...ix-selinux-disable-reboot-65c32f5dc895211c.yaml | 6 + ...a-build-upper-constraints-5686abaa161b0d94.yaml | 7 ++ .../notes/quote-kolla-limit-042422e69c008109.yaml | 5 + .../notes/seed-vm-centos-8.3-7726c9d0603508eb.yaml | 4 + .../notes/story-2007297-73f498ef6bc89fe9.yaml | 5 + .../notes/story-2008354-0c34e2ad7aeb7d3d.yaml | 6 + .../notes/story-2008430-6a50101d05219aad.yaml | 6 + .../notes/ussuri-ipa-dib-fix-5a44e28407052df4.yaml | 15 +++ requirements.yml | 5 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 + tools/ansible-galaxy-retried.sh | 6 +- tox.ini | 6 +- 68 files changed, 478 insertions(+), 269 deletions(-)

1 0

tacker 3.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are stoked to announce the release of: tacker 3.0.1: OpenStack NFV Orchestration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tacker Download the package from: https://tarballs.openstack.org/tacker/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker 3.0.0..3.0.1 ------------------------------ 5783b9ff Fix : Register vim if use_barbican is disabled Diffstat (except docs and test files) ------------------------------------- tacker/nfvo/drivers/vim/openstack_driver.py | 2 +- 2 files changed, 9 insertions(+), 6 deletions(-)

1 0

blazar 5.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are amped to announce the release of: blazar 5.0.1: Reservation Service for OpenStack clouds This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixes database migrations with Alembic 1.5.0 or greater. For more details, see bug 1912502 (https://bugs.launchpad.net/blazar/+bug/1912502) * Fixes host creation in the presence of availability zones with no hosts. For more details, see bug 1880646 (https://bugs.launchpad.net/blazar/+bug/1880646) Changes in blazar 5.0.0..5.0.1 ------------------------------ aea56f5 docs: Update Freenode to OFTC 0d71758 Fix use of legacy Alembic API 6922665 Remove lower-constraints job on stable branches 9c5a583 Avoid double slash in Keystone auth_url cedf5fb Use the native Zuul v3 jobs from blazar-tempest-plugin fd652cb Fix up adding availability zone (AZ) to a host on creation 1eea940 Update TOX_CONSTRAINTS_FILE for stable/ussuri fd4b1e8 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 38 ++--------- .../2bcfe76b0474_change_tenant_to_project.py | 4 +- blazar/utils/openstack/neutron.py | 12 ++-- blazar/utils/openstack/nova.py | 13 ++-- blazar/utils/openstack/placement.py | 12 ++-- blazar/utils/trusts.py | 9 +-- playbooks/legacy/blazar-devstack-dsvm/post.yaml | 15 ----- .../legacy/blazar-devstack-dsvm/run-ipv6.yaml | 74 ---------------------- playbooks/legacy/blazar-devstack-dsvm/run.yaml | 65 ------------------- .../alembic-fix-alter-column-42a87657992d1e78.yaml | 5 ++ .../notes/bug-1880646-f1af8c48f895f00e.yaml | 6 ++ tox.ini | 4 +- 15 files changed, 53 insertions(+), 218 deletions(-)

1 0

monasca-api 4.1.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are jazzed to announce the release of: monasca-api 4.1.0: OpenStack Monitoring as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-api Download the package from: https://tarballs.openstack.org/monasca-api/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-api 4.0.0..4.1.0 ----------------------------------- 36f18ae0 Workaround for new pip 20.3 behavior b43809ca Fix log-metric configuration 46f5d4a4 Fix docker publish image job 9ce0e0da Fix publish docker image job ba45906e Align lower-constraints for new pip ad13e892 Add option to choose Kafka client in Docker 8b146d20 Update gevent version to 1.5.0 5b145c2c Fix typo in http_check 080d1fea Update TOX_CONSTRAINTS_FILE for stable/ussuri f310557a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/files/monasca-agent/http_check.yaml | 2 +- devstack/files/monasca-log-metrics/log-metrics.conf | 2 +- devstack/plugin.sh | 7 ++++++- lower-constraints.txt | 12 ++++++------ playbooks/docker-publish.yml | 3 ++- requirements.txt | 2 +- tox.ini | 2 +- 11 files changed, 29 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a89ae871..709ba857 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21 +21 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -six>=1.10.0 # MIT +six>=1.12.0 # MIT

1 0

ironic-python-agent 6.1.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are pumped to announce the release of: ironic-python-agent 6.1.2: Ironic Python Agent Ramdisk This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.1.2 ^^^^^ New Features ************ * Adds an configuration option which can be encoded into the ramdisk itself or the PXE parameters being provided to instruct the agent to ignore bootloader installation or configuration failures. This functionality is useful to work around well-intentioned hardware which is auto-populating all possible device into the UEFI nvram firmware in order to try and help ensure the machine boots. Except, this can also mean any explict configuration attempt will fail. Operators needing this bypass can use the "ipa-ignore-bootloader- failure" configuration option on the PXE command line or utilize the "ignore_bootloader_failure" option for the Ramdisk configuration. In a future version of ironic, this setting may be able to be overriden by ironic node level configuration. * Adds the capability into the agent to read and act upon bootloader CSV files which serve as authoritative indicators of what bootloader to load instead of leaning towards utilizing the default. Known Issues ************ * If multiple bootloader CSV files are present on the EFI filesystem, the first CSV file discovered will be utilized. The Ironic team considers multiple files to be a defect in the image being deployed. This may be changed in the future. Bug Fixes ********* * Setting the new "ipa-ignore-bootloader-failure" config option prevents errors due to bootloader installation failure generated by automatic bootloader entries configuration from multiple attached devices. * The system file system configuration file for Linux machines, the "/etc/fstab" file is now updated to include a reference to the EFI partition in the case of a partition image base deployment. Without this reference, images deployed using partition images could end up in situations where upgrading the bootloader could fail. * Fixes an issue where the bootloader installation can fail on a software RAID volume when no root_device hint is set. See Story 2007905 (https://storyboard.openstack.org/#!/story/2007905) * Fixes an issue with the IntelCnaHardwareManager which prevented hardware managers with lower priority to be executed and therefore may blocked the initialization and collection of hardware these managers are supposed to take care of. * Fixes an error with UEFI based deployments where using a partition image a NVMe device was previously failing due to the different device name pattern. * Fixes a bug where the partitions created during software RAID setup are cleaned too early and therefore may prevent the proper cleaning of the md superblocks. Leaving superblocks behind will impact the creation of new md devices later on. * Fixes retry logic issues with the Agent Lookup which can result in the lookup failing prematurely before being completed, typically resulting in an abrupt end to the agent logging and potentially weird errors like TypeError being reported on the agent process standard error output. For more information see bug 2007968 (https://storyboard.openstack.org/#!/story/2007968) * Detects md component devices by their UUID, rather than by scanning the output of mdadm. This will prevent that devices miss md superblock cleanup when they are currently not part of an array. * Fixes failures with disk image conversions which result in memory allocation or input/output errors due to memory limitations by limiting the number of available memory allocation pools to a non- dynamic reasonable number which should not exceed the available system memory. * The lshw package version B.02.19.2-5 on CentOS 8.4 and 8.5 contains a bug (https://bugzilla.redhat.com/show_bug.cgi?id=1955250) that prevents the size of individual memory banks from being reported, with the result that the total memory size would be reported as 0 in some places. The total memory size is now taken from lshw's total memory size output (which does not suffer from the same problem) when available. * Fixes the agent's EFI boot handling such that EFI assets from a partition image are preserved and used instead of overridden. This should permit operators to use Secure Boot with partition images IF the assets are already present in the partition image. * Since the Ussuri release, IPA has ignored the listen_host and listen_port directives. This fixes the behavior and restores those configuration values to working status. https://storyboard.openstack.org/#!/story/2008016 * Fixes nodes failing after deployment completes due to issues in the Grub2 EFI loader entry addition where a "BOOT.CSV" file provides the authoritative pointer to the bootloader to be used for booting the OS. The base issue with Grub2 is that it would update the UEFI bootloader NVRAM entries with whatever is present in a vendor specific "BOOT.CSV" or "BOOTX64.CSV" file. In some cases, a baremetal machine *can* crash when this occurs. More information can be found at story 2008962 (https://storyboard.openstack.org/#!/story/2008962) * Increase memory usage limit for "qemu-img convert" command to 2 GiB. See Story 2008667 (https://storyboard.openstack.org/#!/story/2008667) for details. Changes in ironic-python-agent 6.1.1..6.1.2 ------------------------------------------- 746f65b Fix getting memory size in some lshw output e03d80d Add function to calculate memory 76d061e Reduce logging verbosity when collecting logs 8287b96 Utilize CSV file for EFI loader selection a4beb1b Make _get_efi_bootloaders return relative paths bc849e2 Limit qemu-img execution arenas d8c116a Increase the memory limit for qemu-img 6324b37 Fix NVMe Partition image on UEFI 7007ea0 Add fstab pointer to EFI partition 9783992 Prevent broken partition image UEFI deploys 8f77a01 Option to enable bootloader config failure bypass ca70841 More refactoring of the image module d59360f Mount all vfat partitions before calling grub2 d0f69e9 Refactor part of image module d8eefc9 Re-enable the ussuri tinyipa jobs 7f3a7e1 Prepare to use ussuri jobs from ipa-builder b9c9b0b Use UPPER_CONSTRAINTS_FILE to deal with ipa-builder 90b79c2 Pin version of ipa-builder when publishing image c23c107 Software RAID: Get component devices by md UUID 80b1492 Remove lower-constraints job 38e6c36 Log a warning of target_boot_mode does not match current boot mode 43fdcb3 Software RAID: Don't delete partitions too early 3c54867 Fix: make Intel CNA hardware manager none generic 3769174 CI: Lower memory usage of VMs/Increase swap 665219e Make WSGI server respect listen_* directives a6f96eb Increase memory for tinyipa jobs 0153622 Fix TypeError on agent lookup failure c78d6be Fix bootloader install issue with MDRAID Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/api/app.py | 13 +- ironic_python_agent/config.py | 13 +- ironic_python_agent/extensions/image.py | 561 ++++++++-- ironic_python_agent/hardware.py | 156 ++- ironic_python_agent/hardware_managers/cna.py | 23 +- ironic_python_agent/ironic_api_client.py | 37 +- ironic_python_agent/shell/write_image.sh | 13 +- ironic_python_agent/utils.py | 3 +- ...all-failure-to-be-ignored-b99667b13afa9759.yaml | 21 + ...nd-efi-partition-to-fstab-e9f945a4dd19bd7a.yaml | 8 + ...oader-install-with-mdraid-0a254035df9d0bed.yaml | 7 + ...nx-hardware-mgr-never-run-72072580be4d6e7a.yaml | 7 + ...-partition-image-handling-b8487133a188fd32.yaml | 6 + .../fix_partition_cleanup-46491861c930db12.yaml | 6 + ...ixes-agent-lookup-retries-1b4bb90b8e783aca.yaml | 9 + ...get_md_components_by_uuid-7f08d423ea9e7c94.yaml | 6 + ...mit-qemu-img-malloc-arena-025ed84115481eae.yaml | 7 + .../lshw-no-memory-bank-size-05ea71987362986e.yaml | 9 + ...serve-efi-folder-contents-ea1e278b3093ec55.yaml | 7 + ...respect-listen-directives-94fb863c5b692c07.yaml | 7 + ...t-bootloader-csv-file-use-c815b520c600cd98.yaml | 22 + .../notes/up-qemuimg-mem-1536183a02b3a235.yaml | 7 + tox.ini | 2 +- zuul.d/ironic-python-agent-jobs.yaml | 12 +- zuul.d/project.yaml | 5 +- 30 files changed, 2255 insertions(+), 294 deletions(-)

1 0