- Release-announce - lists.openstack.org

manila 17.2.0 (bobcat)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are gleeful to announce the release of: manila 17.2.0: Shared Storage for OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue to add the retry logic to delete and release the snapmirror relationship. Delete the vserver pairing when there is no snapmirror relationship exist on source and destination cluster. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. * bug 2038607 (https://bugs.launchpad.net/manila/+bug/2038607) Fixed parse of the protocol_access_mapping option and the backup_protocol_access_mapping option. This change requires that the values used for these options should be formatted like *key0=[value00, value01],key1=[value10]*. Changes in manila 17.1.0..17.2.0 -------------------------------- d6eed0ea0 Don't fail remove-export in NFS-Ganesha f8b42a41e Fix typo in the release note for bug 2038607 2aa760011 Change status and error handling for /shares API 455881d02 Add service_network_host option for port host cc91e0170 Fix parsing of protocol access mapping options 7f877845a NetApp API failed. Reason - 18177:Relationship is in use by SnapMirror in local cluster Diffstat (except docs and test files) ------------------------------------- manila/api/v1/shares.py | 2 + manila/data/manager.py | 4 +- manila/share/driver.py | 4 +- manila/share/drivers/ganesha/manager.py | 3 ++ .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 28 +++++++++++--- manila/share/drivers/service_instance.py | 7 +++- manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_lib_multi_svm.py | 17 ++++++--- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 +++ ...ed-relationship-is-in-use-ecc9ede4d7f0f5b9.yaml | 8 ++++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 ++++++ ...tocol-access-mapping-opts-e7d61db3e2a84be7.yaml | 8 ++++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 +++ 16 files changed, 153 insertions(+), 26 deletions(-)

1 0

python-manilaclient 4.4.1 (antelope)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are glad to announce the release of: python-manilaclient 4.4.1: Client library for OpenStack Manila API. This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.4.1 ^^^^^ Bug Fixes * Fixed default share type lookup associated with the "openstack share create" command. The lookup now resolves default share types correctly even on environments where the default type isn't named "default". See launchpad bug #2030686 (https://launchpad.net/bugs/2030686) for more details. Changes in python-manilaclient 4.4.0..4.4.1 ------------------------------------------- 3abf89d Enable the option to return the response body 6261a1b Fix "test_share_access_show" osc functional test ffaffe4 Fix default share type resolution in OSC 65826d2 [CI] switch to using osc for bootstrap Diffstat (except docs and test files) ------------------------------------- manilaclient/base.py | 9 +++++-- manilaclient/osc/v2/share.py | 4 +-- .../functional/osc/test_share_access_rules.py | 2 +- manilaclient/v2/share_types.py | 6 ++--- manilaclient/v2/shares.py | 29 +++++++++++++--------- ...-fix-default-share-lookup-cc7e592a0dc855e1.yaml | 8 ++++++ roles/populate-manilaclient-config/tasks/main.yaml | 2 +- 9 files changed, 44 insertions(+), 24 deletions(-)

1 0

python-openstackclient 6.5.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are pleased to announce the release of: python-openstackclient 6.5.0: OpenStack Command-line Client This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 6.5.0 ^^^^^ New Features * Add "image member get" command which accepts an image_id and member_id and displays the detail of the particular meber associated to the image. * Add the port hardware offload attribute to the "port create" command. Once defined, the value cannot be modified. * The "server create" command now accepts a new option, "--server- group", which is a shortcut for configuring the "group" scheduler hint. Changes in python-openstackclient 6.4.0..6.5.0 ---------------------------------------------- 49ad5282 doc: magnumclient provides a OSC plugin 8a63b510 image: Trivial fixes 2ed10e9a Introduce `schema_version` in the federated attribute mapping API 0725bb47 Add "hardware_offload_type" attribute to "port" 03044eaf doc: Add manilaclient as a OSC plugin f2387601 Revert "Temporarily drop aodhclient from doc build" d4acd4b6 doc: Drop tripleoclient 82c34743 doc: Remove RSD subcommand 810f6919 doc: Remove Searchlight subcommands 1517f4af Explicitly specify namespace fields for output 37b42014 Update python classifier in setup.cfg cc2a0bab Correct error message for "create server --wait" e7bc3d9b Fix --use-prefix-delegation subnet create argument 93b2e66d Adding CLI command for ``glance member-get`` be3d438e trivial: Place positional opts last 1b6b639c network: Clarify purpose of default sg rules ea254061 Doc: Fix volume snapshot commands f3207bdf Fix availability zone list command ce0765fa Fix clearing of dns_domain and description on a network by setting to empty strings 71839eb5 [codespell] fix typos in doc,tests and help messages e9d3a7bb test: Ignore 'OS_' environment variables c08d6e03 parseactions: Use ArgumentError, not ArgumentTypeError 3057997c Remove unnecessary file 432698fe Use CommandError, not SystemExit, to exit 885f5912 compute: Address bug in shelve offload logic 900fad53 tests: Remove unused flag 89a8f729 tests: Enable logging fixture d0d4077e tests: Remove prints 7708106c compute: Add 'server create --server-group' option f43e2ed2 compute: Fix formatting of 'server show' Diffstat (except docs and test files) ------------------------------------- openstackclient/common/availability_zone.py | 8 +- openstackclient/compute/v2/server.py | 272 +++++++++++++-------- openstackclient/identity/v3/mapping.py | 28 ++- openstackclient/identity/v3/policy.py | 4 +- openstackclient/image/v2/image.py | 37 +++ openstackclient/image/v2/metadef_namespaces.py | 46 ++-- openstackclient/image/v2/metadef_objects.py | 56 ++--- openstackclient/image/v2/metadef_properties.py | 98 +++++--- .../network/v2/default_security_group_rule.py | 27 +- openstackclient/network/v2/local_ip_association.py | 2 +- openstackclient/network/v2/ndp_proxy.py | 10 +- openstackclient/network/v2/network.py | 4 +- openstackclient/network/v2/port.py | 30 ++- openstackclient/network/v2/subnet.py | 1 + openstackclient/volume/v2/volume_type.py | 6 +- .../add-image-member-get-25e913ef2b861bf3.yaml | 6 + ...ort-hardware-offload-type-011c98ab748357d7.yaml | 5 + ...erver-create-server-group-a5b630f2a64de28d.yaml | 5 + setup.cfg | 17 +- 48 files changed, 871 insertions(+), 644 deletions(-)

1 0

ironic-python-agent 9.9.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are amped to announce the release of: ironic-python-agent 9.9.0: Ironic Python Agent Ramdisk This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.9.0 ^^^^^ New Features ************ * Add support for collecting the cpu socket number. * Supports several comma-separated URLs for "ipa-api-url" and "ipa- inspection-callback-url". The URLs are probed in the provided order until one does not return a connection error. The primary use case it to support deploying nodes with only one IP stack from an Ironic installation that has both stacks. Bug Fixes ********* * Fixes missing "Content-Type" header when sending inspection data back to ironic-inspector or ironic. While ironic-inspector tolerates the missing header, it may cause issues with the new inspection implementation. * Fixes referencing to raid_device variable before assignment, is replaced by blk variable. * Adds random jitter to retried heartbeats after Ironic returns an error. Previously, heartbeats would be retried after 5 seconds, potentially causing a thundering herd problem if many nodes fail to heartbeat at the same time. * Inspection is now retried on HTTP 409 (conflict), which can be returned by the new implementation in Ironic. * Fixes the post data to inspector to retry in 50X errors. Changes in ironic-python-agent 9.8.0..9.9.0 ------------------------------------------- 0010f5c Also retry inspection on HTTP CONFLICT 0ef3397 [codespell] Adding git-blame-ignore-revs to clear codespell changes 9cafe76 Add support for reporting CPU socket number b928b66 [Codespell] Adding tox target to CI (Non-Voting) dcf12d1 Update python classifier in setup.cfg 0d4ae97 Support several API and Inspector URLs 2bb7452 Add missing headers to the inspection callback dcaed43 Update to latest pep8/code style versions 4a1acae Add tox target and configuration for codespell 36e5993 [codespell] Fix spelling issues in IPA 921cf26 Remove deprecated pbr options d342315 Remove unnecessary egg_info options 03b6b0a Fix inspector retries to not take a long time 91b7ae9 Reformat and update the section on injecting root credentials 2ab8364 Add a jitter to heartbeat retries 801da9e Retry in ProxyError during post inspector data c57deb7 Revert "Fix vmedia network config drive handling" f803308 Fix referencing to the raid_device var which is not set 352df0b Parse efibootmgr type and details c23c913 docs: improve rootpwd password generation command 33f01fa Fix vmedia network config drive handling Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 1 + examples/vendor-device/example_device.py | 4 +- ironic_python_agent/agent.py | 153 +++++++++++----- ironic_python_agent/cmd/agent.py | 15 +- ironic_python_agent/config.py | 13 +- ironic_python_agent/efi_utils.py | 13 +- ironic_python_agent/errors.py | 2 +- ironic_python_agent/extensions/image.py | 17 +- ironic_python_agent/extensions/standby.py | 14 +- ironic_python_agent/hardware.py | 34 ++-- ironic_python_agent/inspect.py | 2 +- ironic_python_agent/inspector.py | 42 ++++- ironic_python_agent/ironic_api_client.py | 68 ++++--- ironic_python_agent/partition_utils.py | 2 +- ironic_python_agent/raid_utils.py | 2 +- ironic_python_agent/utils.py | 10 +- ...ata-check-to-secure-erase-caebba4f25821575.yaml | 2 +- ...all-failure-to-be-ignored-b99667b13afa9759.yaml | 4 +- ...artbeat-connection-errors-2af152bf2d7928e2.yaml | 2 +- .../collect-cpu-sockets-0dbc09a1ebccfe77.yaml | 4 + .../notes/content-type-f4d5ab15adf37252.yaml | 6 + .../notes/deprecate-coreos-8b01bcf796c0dc54.yaml | 2 +- .../notes/fallback-to-findfs-59abde55221e1e84.yaml | 2 +- .../fix-raid_device-not-set-8b03688ce83ce22e.yaml | 5 + .../notes/heartbeat-jitter-620bbcba591d2894.yaml | 7 + .../notes/inspection-409-69d5bd6c2a49d2ec.yaml | 5 + .../inspector-retry-502-2b286e2ccc64c195.yaml | 4 + .../notes/multipath-handling-00a5b412d2cf2e4e.yaml | 2 +- .../notes/several-urls-9c3b8c14338b06ba.yaml | 8 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 2 +- setup.cfg | 16 +- tox.ini | 17 +- zuul.d/ironic-python-agent-jobs.yaml | 7 + zuul.d/project.yaml | 2 + 50 files changed, 637 insertions(+), 294 deletions(-)

1 0

ironic-tempest-plugin 2.8.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are ecstatic to announce the release of: ironic-tempest-plugin 2.8.0: Tempest plugin for ironic and ironic- inspector This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-tempest-plugin Download the package from: https://tarballs.openstack.org/ironic-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic For more details, please see below. Changes in ironic-tempest-plugin xena-last..2.8.0 ------------------------------------------------- 638dcb7 Ensure scope logic is enforced 95b901c Add negative tests for VIF attach/detach operations d8e25ec Add snmp variant of ramdisk iso boot test 793608a Add test for dhcp-less vmedia based deployment caae7cc CI: Update job config for 2023.2 being a stable branch 1e52960 Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- ironic_tempest_plugin/config.py | 23 ++- .../ironic_standalone/test_advanced_ops.py | 149 +++++++++++++++++ .../scenario/ironic_standalone/test_ramdisk_iso.py | 28 +++- setup.py | 9 -- zuul.d/project.yaml | 47 +++--- zuul.d/stable-jobs.yaml | 45 ++++++ 8 files changed, 557 insertions(+), 53 deletions(-)

1 0

kolla 15.4.0 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are amped to announce the release of: kolla 15.4.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 15.4.0 ^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 15.3.0..15.4.0 ------------------------------- 2e68a0f1a rabbitmq: Use timeout in healthcheck script 9dc637d47 Sync only local cell in nova bootstrap & upgrade 1369c7f44 Pin docker.py to <7 aa68a99c2 Swift: Remove unused rootwrap ddfa9a6de Add rsync to nova-compute 2fc3c9350 Adding db sync script for venus Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 1 - .../nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 ++++++ requirements.txt | 2 +- 13 files changed, 29 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e949f8f5a..6a56bcb1e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=3.0.0 # Apache-2.0 +docker>=3.0.0,<7.0.0 # Apache-2.0

1 0

kayobe 12.10.0 (yoga)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We enthusiastically announce the release of: kayobe 12.10.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.10.0 ^^^^^^^ Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Adds missing "disable-selinux" element when building Rocky Linux overcloud host disk images. * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". * Deploys "prometheus-elasticsearch-exporter" on hosts of the "opensearch" group, resolving failures to connect to OpenSearch when the "elasticsearch" and "opensearch" groups are different. Changes in kayobe 12.9.0..12.10.0 --------------------------------- 69ba8785 Ensure git is present before checkout tasks b9cea681 Stop NetworkManager from overriding resolv.conf 2c625dd5 Fix gateway assignment when seed SNAT is disabled aa7f7f36 Clean up release notes 1c45e8b1 Sync Kolla Ansible feature flags for stable/yoga 192e08da docs: add information about enabling TLS to automated guide afd9dec5 docs: the page 'Editable installs' has moved 2e309ef0 Remove kolla_enable_host_ntp variable 17f6b866 CI: Run configuration dump against localhost b2dd82da Use latest published CentOS Stream 8 image 27114922 Fix configuration dump with inline encrypted variables a14d05d5 Honor custom ssh args in kayobe-ansible-user.yml 0bb3ad8a kolla-bifrost: Add precheck for inspection allocation pool 698c281a Improve neutron images regex 4f41f170 Run elasticsearch exporter on opensearch hosts too f2f85fa7 Generate local Kolla Ansible config in check mode 89994fe7 dev: Improve error checking for config check functions cad48d1d Fix setting kolla_admin_openrc_cacert f14f10d5 Fix an issue when user forgot combine custom passwords 9b8ed55a Add retries to get_url and uri tasks 18627811 Add seed_deploy_containers_registry_attempt_login 0f8b8d08 Allow overriding earlier use of NetworkManager a25dd224 Fix Launchpad bug URL 8a1aa4dc Resolve slow fact gathering when seed SNAT is off cf78d2e7 Fix last return value in _get_base_path d2f84443 Fix condition for enabling disable-selinux element Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/infra-vms | 4 +- ansible/group_vars/all/kolla | 18 ++++-- ansible/group_vars/all/overcloud-dib | 2 +- ansible/group_vars/all/seed | 4 ++ ansible/group_vars/all/seed-vm | 4 +- ansible/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 1 - ansible/kolla-bifrost-hostvars.yml | 8 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 10 +--- .../kolla-ansible/templates/kolla/globals.yml | 7 +-- .../kolla-ansible/templates/overcloud-services.j2 | 1 + ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 6 ++ ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- ansible/roles/veth/defaults/main.yml | 2 + ansible/roles/veth/tasks/RedHat.yml | 4 +- dev/functions | 22 ++++---- .../configuration/reference/kolla-ansible.rst | 56 ++++++++++-------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/infra-vms.yml | 2 +- etc/kayobe/kolla.yml | 14 ++++- etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 19 ++++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ ...linux-overcloud-dib-rocky-7c381912c3dfbc09.yaml | 5 ++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ ...earch-exporter-opensearch-cb7791220be58055.yaml | 6 ++ ...centos-cloud-image-latest-b967c585a23d1615.yaml | 5 ++ 53 files changed, 483 insertions(+), 98 deletions(-)

1 0

kolla-ansible 17.1.0 (bobcat)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We are stoked to announce the release of: kolla-ansible 17.1.0: Ansible Deployment of Kolla containers This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.1.0 ^^^^^^ New Features ************ * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fixes non-persistent Neutron agent state data. LP2009884 * Fixes long service restarts while using systemd LP#2048130. * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes Nova operations using the "scp" command, such as cold migration or resize, on Debian Bookworm. LP#2048700 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * A precheck has been added to catch when "om_enable_rabbitmq_quorum_queues" is set to "True", but quorum queues have not been configured on all appropriate queues. A manual migration is required, see here for details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability LP#2045887 Changes in kolla-ansible 17.0.0..17.1.0 --------------------------------------- 5fbd9b8f0 CI: test job definitions when zuul files change 1f0a7bc30 CI: Drop duplicated variables in base.yaml 33b352c33 [2023.2 only] Switch openstack.kolla to correct branch 77e44b25d CI: Test Nova server resize functionality 5aaac1a5a Fix Nova scp failures on Debian Bookworm 131296825 Enable glance proxying behaviour 5f35f1784 cadvisor: Set housekeeping interval to Prometheus scrape interval 51ca1bc69 Fix long service restarts while using systemd 84c32a3f1 Use service-images-pull role for letsencrypt and venus cb99c1f26 Remove nova cell sync comment 47618e680 Make designate bind9 cmdline configurable 74637fed2 haproxy: Fix single frontend after LE cert path change bf9ed4073 Persist Neutron agent state files in volume 8a11ab6d9 magnum: Disable CAPI driver when kubeconfig missing 3aa199cb4 Fix wsrep sync status task while switched to TCP/IP e5750d0e9 Set a log retention policy for OpenSearch 4da7f9bc1 fluentd: Fix LE pos_file path after version bump bc3238bb1 CI: Pin docker to <7 in setup_gate.sh 7d40850ca Add nova conf for cyborg 23abf354c CI: fix two ansible-lint warnings 42d4e10a5 CI: treat ansible-lint warnings as errors dc613a556 quorum: add missing octavia and masakari 458eafab8 Add precheck for RabbitMQ quorum queues c2a40b89b Fix Docker health check for sahara_engine 52ff80d8d RabbitMQ: correct docs on Quorum Queue migrations a346bf90e CI: Add SCENARIO env var to upgrade.sh Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 1 + ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/roles/cinder/tasks/precheck.yml | 2 +- .../templates/conf/input/11-letsencrypt.conf.j2 | 2 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/tasks/precheck.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/letsencrypt/tasks/pull.yml | 12 +--- .../haproxy/haproxy_external_frontend.cfg.j2 | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 5 ++ ansible/roles/mariadb/tasks/restart_services.yml | 3 +- ansible/roles/masakari/templates/masakari.conf.j2 | 3 + ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/nova-cell/templates/sshd_config.j2 | 2 + ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 +++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/prometheus/defaults/main.yml | 2 +- ansible/roles/rabbitmq/tasks/precheck.yml | 30 ++++++++++ ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/venus/tasks/pull.yml | 12 +--- .../central-logging-guide.rst | 44 ++++++++++++++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 2 +- .../notes/bug-2048130-23b8174396bd3c69.yaml | 5 ++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ .../notes/bug-2048700-98eb939b72079173.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ ...recheck-for-quorum-queues-ba10f58538959112.yaml | 9 +++ requirements.yml | 2 +- tools/init-runonce | 1 + zuul.d/base.yaml | 67 ++++++++-------------- 44 files changed, 379 insertions(+), 88 deletions(-)

1 0

kolla-ansible 15.4.0 (zed)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We exuberantly announce the release of: kolla-ansible 15.4.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features ************ * The new command "kolla-ansible rabbitmq-reset-state" has been added. It force-resets the state of RabbitMQ. This is primarily designed to be used when enabling HA queues, see docs: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability * Updates apache grok pattern to match the size of response in bytes, time taken to serve the request and user agent. * Masakari coordination backend can now be configured via masakari_coordination_backend variable. Coordination is optional and can now be set to either redis or etcd. * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. * Adds the ability to configure rabbitmq via "rabbitmq_extra_config" which can be overriden in globals.yml. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fix MariaDB backup if enable_proxysql is enable * Fixes keystone's task which is connecting via ssh instead locally. LP#2004224 * Fixes 504 timeout when scraping openstack exporter. Ensures that HAProxy server timeout is the same as the scrape timeout for the openstack exporter backend. LP#2006051 * Fixes non-persistent Neutron agent state data. LP2009884 * Fix issue with octavia security group rules creation when using IPv6 configuration for octavia management network. See LP#2023502 for more details. * Fixes glance-api failed to start privsep daemon when cinder_backend_ceph is set to true. See LP#2024541 for more details. * Fixes 2024554. Adds host and "mariadb_port" to the wsrep sync status check. This is so none standard ports can be used for mariadb deployments. LP#2024554 * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes an issue where Prometheus would fail to scrape the OpenStack exporter when using internal TLS with an FQDN. LP#2008208 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Fixes an issue where Fluentd was parsing Horizon WSGI application logs incorrectly. Horizon error logs are now written to "horizon- error.log" instead of "horizon.log". See LP#1898174 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * Fixes an issue where Prometheus scraping of Etcd metrics would fail if Etcd TLS is enabled. LP#2036950 Changes in kolla-ansible 15.3.0..15.4.0 --------------------------------------- 668834785 CI: Test Nova server resize functionality fd42b9795 Enable glance proxying behaviour 5f148b83f cadvisor: Set housekeeping interval to Prometheus scrape interval 285c71a33 Remove nova cell sync comment 03d61a2cc Make designate bind9 cmdline configurable 1eae44d10 Persist Neutron agent state files in volume 8dee91bd2 Fix wsrep sync status task while switched to TCP/IP 897d6fbf7 Set a log retention policy for OpenSearch 3e598dfc6 Add nova conf for cyborg 5972fcaf8 Fix Docker health check for sahara_engine 011fe5e28 Adding mariadb_port to wsrep sync status so alterative ports can be used 04695d49d Fix Horizon WSGI application log parsing 8782e73c7 Remove Glance and Neutron TLS proxies from fluentd input config 69fd0f538 keystone: do not report changed on tasks that list df1972ee7 Fix proxysql get mariadb_backup_database_password e4bd422d4 Change regex for the multiline parser at the fluentd rabbitmq input d3773f8ae Fix glance-api failed to start privsep daemon 39144fc8b Set HAProxy server timeout for openstack exporter c4018cc44 Add command to force reset the state of RabbitMQ e81d9f992 ovn: Fix wording in limit check 78c25aaba Fix OpenStack exporter scrape with internal TLS & FQDN ee54b5f17 Adds condition to handle QoS extension in sriov_agent.ini template 1b18ecf88 Improve grok pattern matching for apache logs bd23f26d4 prometheus: Fix etcd scrape when etcd uses TLS 71a562339 Configure coordination in default for masakari-api 6097da0fa Fix issue with octavia security group rules creation 8ee98726c Trivial: Add connection: local for keystone-fernet cron generate task bde24a756 Add ability to configure rabbitmq ee9be687b kolla_address: check correct error return value a5d696a8d senlin: add missing cafile parameter f72b4955b Add check_mode: false to Nova upgrade checks Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 1 + ansible/rabbitmq-reset-state.yml | 10 ++++ ansible/roles/common/defaults/main.yml | 4 -- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/horizon/templates/horizon.conf.j2 | 3 +- ansible/roles/keystone/tasks/config.yml | 1 + .../keystone/tasks/register_identity_providers.yml | 2 + ansible/roles/mariadb/tasks/precheck.yml | 2 +- ansible/roles/mariadb/tasks/restart_services.yml | 1 + ansible/roles/masakari/templates/masakari.conf.j2 | 9 +++ ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 5 ++ ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/nova/tasks/upgrade.yml | 1 + ansible/roles/octavia/defaults/main.yml | 6 +- ansible/roles/octavia/tasks/prepare.yml | 18 ++++++ ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/ovn-db/tasks/lookup_cluster.yml | 14 +++-- ansible/roles/prometheus/defaults/main.yml | 6 +- .../roles/prometheus/templates/prometheus.yml.j2 | 5 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/reset-state.yml | 16 ++++++ ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 + ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../central-logging-guide.rst | 44 +++++++++++++++ kolla_ansible/database_shards.py | 1 + kolla_ansible/kolla_address.py | 2 +- ...-backup-database-password-54f43ecf102fb897.yaml | 4 ++ .../notes/bug-2004224-0e600c99f8e5b83f.yaml | 6 ++ .../notes/bug-2006051-135bd20d5c465517.yaml | 7 +++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2023502-68acc8637510cb22.yaml | 7 +++ .../notes/bug-2024541-98c2864f16f8eb59.yaml | 7 +++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 7 +++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ ...orce-reset-rabbitmq-state-7ec4414fd2a63d16.yaml | 7 +++ .../fix-prom-os-exp-fqdn-efb67c364b653bd9.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../notes/horizon-log-bugfix-b89f502c2f3ccaf9.yaml | 8 +++ ...prove-apache-grok-pattern-47b0bcd90f464d60.yaml | 5 ++ ...kari-coordination-backend-d3b742315a07aabc.yaml | 6 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ .../prometheus-etcd-tls-313e7cf454f6763a.yaml | 6 ++ .../rabbitmq-configuration-6b100a390734dc29.yaml | 5 ++ ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 +++ tools/init-runonce | 1 + tools/kolla-ansible | 6 ++ 61 files changed, 488 insertions(+), 42 deletions(-)

1 0

kolla 17.1.0 (bobcat)
by no-reply＠openstack.org 25 Jan '24

25 Jan '24

We contentedly announce the release of: kolla 17.1.0: Kolla OpenStack Deployment This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.1.0 ^^^^^^ Bug Fixes * The Nova API container extended startup script has been updated to only sync the local Nova cell. This resolves an error that would occur when the Nova database password changes. More details can be found on this bug report. Changes in kolla 17.0.0..17.1.0 ------------------------------- 4640d1be8 rabbitmq: Use timeout in healthcheck script efb32d62f CI: Use newer podman/buildah on Ubuntu Jammy 841288749 Sync only local cell in nova bootstrap & upgrade Diffstat (except docs and test files) ------------------------------------- .../notes/nova-sync-local-cell-8e3258f4b410d25c.yaml | 7 +++++++ 4 files changed, 23 insertions(+), 8 deletions(-)

1 0