- Release-announce - lists.openstack.org

oslo.i18n 6.2.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are jazzed to announce the release of: oslo.i18n 6.2.0: Oslo i18n library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.i18n Download the package from: https://pypi.org/project/oslo.i18n Please report issues through: https://bugs.launchpad.net/oslo.i18n/+bugs For more details, please see below. Changes in oslo.i18n 6.1.0..6.2.0 --------------------------------- 3dd3fa7 Update master for stable/2023.2 05f9961 Bump bandit 77a994a The locale.getdefaultlocale is deprecated Diffstat (except docs and test files) ------------------------------------- oslo_i18n/_message.py | 2 +- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + test-requirements.txt | 2 +- 5 files changed, 18 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1b99e25..a936058 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +15 @@ oslo.config>=5.2.0 # Apache-2.0 -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

ansible-config-template 2.1.0
by no-reply＠openstack.org 13 Nov '23

13 Nov '23

We are jazzed to announce the release of: ansible-config-template 2.1.0: Config Template plugin for Ansible The source is available from: https://opendev.org/openstack/ansible-config-template Download the package from: https://tarballs.openstack.org/ansible-config_template/ For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Added support for arguments that can be used to avoid templating Jinja content: * variable_start_string * variable_end_string * block_start_string * block_end_string Bug Fixes ********* * Jinja2 {% raw %} tag and string escapnig, as well as special headers in template files are working as expected now. Changes in ansible-config-template 2.0.0..2.1.0 ----------------------------------------------- c272bc3 Revert "Publish openstack.config_template on galaxy" 130ecf6 Bump collection version in metafile 2a59c04 setup.cfg: Replace dashes with underscores e528ed0 Fix usage of {% raw %} tags and Jinja2 headers fdb572d Add support for start/end_string arguments 7951228 Remove TripleO jobs 26a8d94 Replace deprecated whitelist_externals 2ccc59f document the removal of keys in ini files e8a66da remove unicode prefix from code Diffstat (except docs and test files) ------------------------------------- galaxy.yml | 2 +- plugins/action/config_template.py | 49 ++++++++++------ .../notes/raw_tag_fixed-9c7cc7506314f76b.yaml | 5 ++ .../start_end_string_support-420acb44b5feeb5c.yaml | 10 ++++ releasenotes/source/conf.py | 12 ++-- setup.cfg | 12 ++-- tox.ini | 6 +- zuul.d/project.yaml | 10 ---- 16 files changed, 246 insertions(+), 43 deletions(-)

1 0

oslo.utils 6.3.0 (caracal)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We are happy to announce the release of: oslo.utils 6.3.0: Oslo Utility library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 6.2.1..6.3.0 ---------------------------------- 0588ba2 versionutil: Remove trailing alpha/beta/rc suffix d6b9e84 Fix missing PyYAML dependency cecf061 Mask chapsecret a122f5c Imported Translations from Zanata 7ef1004 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- oslo_utils/strutils.py | 2 +- oslo_utils/versionutils.py | 2 ++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po | 7 +++++-- requirements.txt | 1 + 7 files changed, 26 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cc0b9a1..57158f7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,0 +15 @@ tzdata>=2022.4 # MIT +PyYAML>=3.13 # MIT

1 0

manila 15.3.0 (zed)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We contentedly announce the release of: manila 15.3.0: Shared Storage for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 15.3.0 ^^^^^^ Bug Fixes * Role based access control is enforced on the POST /shares/{share_id}/action API to reset status, task state, replica state and similar fields. This prevents the situation where deployments allow some users access to these APIs, but they don't belong to projects where the resources exist. See bug 1955627 (https://launchpad.net/bugs/1955627) for more context. * NetApp driver: Fixed the issue with replica promotion where the autosize attributes were not being updated on ONTAP. Now, the autosize attributes are updated after promoting the replica. For more details, please refer to launchpad bug #1957075 (https://bugs.launchpad.net/manila/+bug/1957075) * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue preventing the storage system from proper clean up unused SnapMirror snapshots after a replica promote, significantly increasing the amount of space consumed in ONTAP volumes by snapshots. * Fixed several Manila API error messages with their contents. For more details, please refer to launchpad bug #2007060 (https://bugs.launchpad.net/manila/+bug/2007060) * Share replicas in state *error_deleting* are now skipped during periodic updates. For more details, please refer to launchpad bug #2024556 (https://bugs.launchpad.net/manila/+bug/2024556) * Share server backend details set function adds db records without checking existing entries. This results in duplicate records for the combination of given share server id and key. Fixed it by updating records if already exist else creating new. See the launchpad bug 2024658 (https://bugs.launchpad.net/manila/+bug/2024658) for more details. * The "manage" API for snapshots now validates the format of "provider_location" and "share_id" fields and handles errors appropriately. These fields are expected to contain string values. * The "updated_at" field is correctly set on share and snapshot access rules when an update has been made on the database. * bug #2025649 (https://bugs.launchpad.net/manila/+bug/2025649) Fixed share server API error message. Changes in manila 15.2.0..15.3.0 -------------------------------- bd344c878 adds share server uuid on migration cancel 27a89a6a1 [RBAC] Enforce check for share updates 3badc8633 Validate provider_location while managing snapshot 44035950c Respect provided "host" when plugging ports 1ee09205a Set "updated_at" field on access rules 6db352411 NetApp ONTAP: Fix SnapMirror snapshots not being cleaned up 3a218a0d1 [NetApp] Fixed replica promotion to updated autosize attributes dfd2faefe Add default to read_deleted in context's from_dict 7adab824c Fix error message from share server API c14f4f094 skip periodic update on replicas in 'error_deleting' 98ea6ac76 [coordination] backend_url should be secret ecd14b4e3 Fix duplicate entries in share_server_backend_details 315fc6509 Fix Manila API error message Diffstat (except docs and test files) ------------------------------------- manila/api/openstack/wsgi.py | 31 ++++++-- manila/api/v1/share_servers.py | 5 +- manila/api/v1/share_types_extra_specs.py | 4 +- manila/api/v1/shares.py | 8 +- manila/api/v2/share_group_snapshots.py | 6 +- manila/api/v2/share_groups.py | 6 +- manila/api/v2/share_instance_export_locations.py | 2 +- manila/api/v2/share_networks.py | 3 + manila/api/v2/share_replica_export_locations.py | 2 +- manila/api/v2/share_replicas.py | 14 ++-- manila/api/v2/share_servers.py | 3 + manila/api/v2/share_snapshot_instances.py | 3 + manila/api/v2/share_snapshots.py | 3 + manila/api/v2/share_types.py | 2 +- manila/api/v2/shares.py | 11 +-- manila/context.py | 2 +- manila/coordination.py | 1 + manila/db/sqlalchemy/api.py | 49 +++++++++--- manila/exception.py | 4 + manila/share/api.py | 3 +- .../netapp/dataontap/cluster_mode/data_motion.py | 30 +++++++ .../netapp/dataontap/cluster_mode/lib_base.py | 93 ++++++++++++++++++++++ manila/share/drivers/service_instance.py | 2 +- manila/share/manager.py | 1 + .../dataontap/cluster_mode/test_data_motion.py | 54 +++++++++++++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 55 ++++++++++++- ...add-check-to-reset-status-baa126a7145a45bb.yaml | 8 ++ ...omote-autosize-attributes-c180bb7db328bece.yaml | 7 ++ ...-snapshots-not-cleaned-up-63cc98cd468adbd1.yaml | 9 +++ ...2007060-fix-error-message-7a34357c0212d8f9.yaml | 6 ++ ...p-error-deleting-replicas-aa2ef4154d5e38f6.yaml | 6 ++ ...re-server-backend-details-adf45b417d45b437.yaml | 8 ++ ...vider-location-validation-b6d1e977f50643bb.yaml | 6 ++ ...t-updated_at-access-rules-a382a3e352f3ef7d.yaml | 5 ++ ..._share_server_api_2025649-f818f594e97c59e6.yaml | 6 ++ 40 files changed, 505 insertions(+), 81 deletions(-)

1 0

glance-store 4.3.2 (antelope)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We are delighted to announce the release of: glance-store 4.3.2: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance-store Download the package from: https://pypi.org/project/glance-store Please report issues through: https://bugs.launchpad.net/glance-store/+bugs For more details, please see below. 4.3.2 ^^^^^ New Features * The RBD driver now moves images to the trash if they cannot be deleted immediately due to having snapshots. This fixes the long- standing issue where base images are unable to be deleted until/unless all snapshots of it are also deleted. Moving the image to the trash allows Glance to proceed with the deletion of the image (as far as it is concerned), mark the RBD image for deletion, which will happen once the last snapshot that uses it has been deleted. Changes in glance-store 4.3.1..4.3.2 ------------------------------------ aae8199 RBD: Trash image when snapshots prevent deletion d68a842 Do not always import boto3 4f4de23 Update 'extras' for cinder driver Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/rbd.py | 21 ++++++------ glance_store/_drivers/s3.py | 21 +++++++++--- .../rbd-trash-snapshots-158a39da4248fb0c.yaml | 10 ++++++ setup.cfg | 2 +- 6 files changed, 78 insertions(+), 27 deletions(-)

1 0

kolla 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We exuberantly announce the release of: kolla 15.3.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 15.3.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 15.2.0..15.3.0 ------------------------------- 199ebafeb Fix missing grafana opensearch datasource 2b7711570 Fix an issue with zun-cni-daemon building images in aarch64 8498b43c1 ubuntu: mark collectd and telegraf as buildable d7425533c CI: Fix zuul config errors 81b9a7aab Revert "bifrost: mark unbuidable for Ubuntu" d67fd2fcb rabbitmq: Use novemberain repos for Debian/Ubuntu 8558004ab Improve kolla-toolbox offline support. 1d5e1a391 Revert "Disable build of Gnocchi containers" 81dd5d66d Add server-status handler to Rocky/Centos Apache conf 3684f67fe Add comprehensive checks for container restarts a8138eb10 docs: we moved UNBUILDABLE_IMAGES to separate file 3e2afe2f6 Add support for running Nova upgrade checks 9b612fa23 CI: Add rocky9 experimental jobs Diffstat (except docs and test files) ------------------------------------- .zuul.d/rocky.yaml | 21 +++++++ .zuul.d/ubuntu.yaml | 42 ++----------- kolla/common/sources.py | 2 +- kolla/image/unbuildable.py | 10 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 10 +-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 19 files changed, 182 insertions(+), 64 deletions(-)

1 0

kolla 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are stoked to announce the release of: kolla 16.2.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.2.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 16.1.0..16.2.0 ------------------------------- 9ee9677f9 Fix missing grafana opensearch datasource 0e6676cb0 rabbitmq: Use novemberain repos for Debian/Ubuntu bbe79d1be Fix stderr logging when image build fail 78c62dacd ubuntu: mark collectd and telegraf as buildable 47e3d894a Improve kolla-toolbox offline support. 2da6ceab7 Revert "Disable build of Gnocchi containers" 902a84693 Add server-status handler to Rocky/Centos Apache conf 288a400db Add comprehensive checks for container restarts ba8b1ff29 docs: we moved UNBUILDABLE_IMAGES to separate file cad045b26 rabbitmq: Fix repo for ubuntu aarch64 Diffstat (except docs and test files) ------------------------------------- kolla/common/sources.py | 2 +- kolla/image/tasks.py | 9 ++- kolla/image/unbuildable.py | 9 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 12 ++-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 15 files changed, 157 insertions(+), 27 deletions(-)

1 0

kolla-ansible 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are psyched to announce the release of: kolla-ansible 15.3.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.3.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Before upgrading to the Zed release of Kolla-Ansible on Ubuntu, ensure that Elasticsearch indexes created in version 6 or earlier are reindexed. OpenSearch 2.x does not support these older indexes. A precheck for this scenario has now been introduced. * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. * When upgrading Nova to a new release, we use the tool "nova-status upgrade check" to make sure that there are no "nova-compute" that are older than N-1 releases. This was performed using the current "nova-api" container, so computes which will be too old after the upgrade were not caught. Now the upgraded "nova-api" container image is used, so older computes are identified correctly. LP#1957080 Changes in kolla-ansible 15.2.0..15.3.0 --------------------------------------- 6ba7fd279 Rename per role filters files a5e1eb965 Default keystone user role changed to member e5b102696 Add ML2/OVN and ML2/OVS setting checks for neutron 741808ca6 Add option for extra kernel modules in neutron role 2f8cffee2 CI: add block support to validate-all-file.py 0fe42b26a README: link to the meetings page directly 9c5a47d5c keystone: ensure bool for two parameters 944f93a5e Configure Nova libvirt.num_pcie_ports to 16 by default 5c4c3aefc ovn: Fix broken deployment/reconfig on Ubuntu 4fb7ebdc5 CI: Remove redundant set/unset_cirros_image_q35_machine_type 1b44dde7b Prevent libvirtd reload when only generating config 3dc9fe1a8 CI: add q35 hardware machine type to tests 03db998f6 ovn: Improve clustering 48b570cb8 Fix designate-producers not running properly 139c872af Added precheck for OpenSearch migration bc9f36893 Use better default bind address for ironic-tftp 916587d6b Fix D001 Line too long in mariadb-guide 309aebc97 Fixes WEBSSO_KEYSTONE_URL Value d0c53de28 Drop useless DUMMY_ENVIRONMENT environment for cron container 4e2bebbc0 Fixes task name in notify module to the actual task name 35cabb263 Use the upgraded image to run Nova upgrade checks a73d8110e CI: Add missing Rocky9 upgrade jobs f381fb548 Deny access to public /server-status in http Openstack services 077455734 Enable nova libvirt driver skip_cpu_compare_on_dest workaround 511007f71 Fix OpenSearch Dashboards health check 993b854bb loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/nova/tasks/upgrade.yml | 55 +++++++-- ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 27 +++++ ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- .../central-logging-guide.rst | 6 + releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 11 ++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...hecks-with-upgraded-image-dca9c515bcd89ec8.yaml | 10 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ tools/validate-all-file.py | 67 +++++++---- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 31 +++++ zuul.d/project.yaml | 4 + 62 files changed, 782 insertions(+), 75 deletions(-)

1 0

kolla-ansible 14.10.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are satisfied to announce the release of: kolla-ansible 14.10.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.10.0 ^^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Influxdb variable "infuxdb_internal_endpoint" has been fixed to "influxdb_internal_endpoint". Operators might need to review the relevant variable. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. Changes in kolla-ansible 14.9.0..14.10.0 ---------------------------------------- 87449416c Default keystone user role changed to member ed95bb779 kolla_address: check correct error return value f59edacf4 Add ML2/OVN and ML2/OVS setting checks for neutron 967354e48 CI: Drop upgrade jobs since Xena is EOL b073d2038 Add option for extra kernel modules in neutron role 2ae7698dc CI: add block support to validate-all-file.py a05e5908c README: link to the meetings page directly 2f47802ae keystone: ensure bool for two parameters 401a39f52 Configure Nova libvirt.num_pcie_ports to 16 by default 5bc5fe364 ovn: Fix broken deployment/reconfig on Ubuntu 6186a0a6d CI: Remove redundant set/unset_cirros_image_q35_machine_type a71eced1d Prevent libvirtd reload when only generating config d74917e69 CI: add q35 hardware machine type to tests c3d64ce56 [yoga only] followup ovn clustering fix 2d89909d9 Fix typo in endpoint influxdb_internal_endpoint variable d626c02fb ovn: Improve clustering bc13da0f7 Fix designate-producers not running properly aa6388b36 Use better default bind address for ironic-tftp 3bcfba581 Added precheck for OpenSearch migration 3b17c915a opensearch-dashboard: fix permissions 13b4487f2 Fix D001 Line too long in mariadb-guide d75e96f92 Drop useless DUMMY_ENVIRONMENT environment for cron container 634e0304c Remove incorrect variable from OpenSearch role 893b80627 Deny access to public /server-status in http Openstack services ffdea86ee Enable nova libvirt driver skip_cpu_compare_on_dest workaround fc398d5fe Add documentation for migrating from CS8 to RL9 328f62ddd Fix OpenSearch Dashboards health check 3dc458d1f Correct [pci] syntax in Nova SRIOV documentation 3e6d412a1 opensearch: alter path after using rpm/deb packaging Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 7 +- ansible/library/kolla_container_volume_facts.py | 84 +++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/opensearch-migration.yml | 27 +++ ansible/roles/common/defaults/main.yml | 2 - .../roles/designate/templates/designate.conf.j2 | 1 - ansible/roles/grafana/defaults/main.yml | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/neutron/defaults/main.yml | 7 + ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 33 ++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 2 - .../templates/opensearch-dashboards.json.j2 | 19 +- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 ++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 130 ++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- .../central-logging-guide-opensearch.rst | 6 + kolla_ansible/kolla_address.py | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2020152-165c87048d92dedb.yaml | 5 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 + ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 ++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 5 + ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 + .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 + ...e-wrong-influxdb-variable-8a93d8fda8dce926.yaml | 6 + .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 + tools/validate-all-file.py | 67 ++++--- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 8 +- zuul.d/nodesets.yaml | 34 ++++ zuul.d/project.yaml | 13 -- 64 files changed, 921 insertions(+), 92 deletions(-)

1 0

kayobe 12.9.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kayobe 12.9.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.9.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. For CentOS Stream 8 and Rocky Linux 8 enabling STP is not supported. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 12.8.0..12.9.0 -------------------------------- 3282cda6 Fix MTU of NetworkManager bridge VLAN interfaces b0832bf1 Bump MichaelRigart.interfaces to v1.14.4 c6d08295 Add option to skip kolla docker registry login f609ae27 bifrost: Populate bifrost host vars on deprovision 8e93ecc9 Add introspection rule to update deploy kernel location 390fbf1d Fix data file path detection with new pip b0f8d4fb Remove upgrade jobs following Xena EOL 0582864d Speed up calls to Bifrost 3794929b CI: fetch systemd configuration including kolla-generated unit files 967c4bef Add STP option for bridge interfaces 4132c190 Fix for seed-containers being unable to use password protected registry b9b2e71d Fix CentOS / Rocky route options ca362a92 docs: Add a warning on creating network loops 0a284020 Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/group_vars/all/bifrost | 5 +- ansible/group_vars/all/inspector | 12 ++++ ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 + ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 +++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../reference/seed-custom-containers.rst | 23 ++++++++ etc/kayobe/bifrost.yml | 3 + kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 + kayobe/plugins/filter/networks.py | 66 +++++++++++++++++++++- kayobe/utils.py | 25 ++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 13 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 ++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 ++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 +++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 +++++++ requirements.txt | 1 + requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 38 files changed, 301 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bab4725e..c5be19e9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ cliff>=3.1.0 # Apache +importlib-metadata;python_version<'3.8' # Apache-2.0

1 0